@agentpowers/cli 0.1.0

package/dist/api-client.d.ts

@@ -0,0 +1,19 @@
+/** HTTP client for the AgentPowers API. */
+export declare class APIError extends Error {
+    readonly statusCode: number;
+    readonly code?: string | undefined;
+    constructor(message: string, statusCode: number, code?: string | undefined);
+}
+export declare class NetworkError extends Error {
+    constructor(message: string);
+}
+/**
+ * Map HTTP status codes to user-friendly messages.
+ */
+export declare function formatAPIError(error: APIError): string;
+export declare function apiGet<T = unknown>(path: string, params?: Record<string, string | number | undefined>, auth?: string | null): Promise<T>;
+export declare function apiPost<T = unknown>(path: string, body?: unknown, auth?: string | null): Promise<T>;
+/**
+ * Fire-and-forget installation tracking. Never rejects.
+ */
+export declare function recordInstallation(sourceSlug: string, platform: string, source: string, hostname: string, auth?: string | null): Promise<void>;

package/dist/api-client.js

@@ -0,0 +1,132 @@
+/** HTTP client for the AgentPowers API. */
+import { API_BASE_URL, TIMEOUT_MS } from "./config.js";
+export class APIError extends Error {
+    statusCode;
+    code;
+    constructor(message, statusCode, code) {
+        super(message);
+        this.statusCode = statusCode;
+        this.code = code;
+        this.name = "APIError";
+    }
+}
+export class NetworkError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "NetworkError";
+    }
+}
+/**
+ * Extract a human-readable message from the API response body.
+ */
+function parseErrorBody(body) {
+    try {
+        const json = JSON.parse(body);
+        if (typeof json.detail === "string") {
+            return { message: json.detail };
+        }
+        if (json.detail && typeof json.detail === "object") {
+            const detail = json.detail;
+            return {
+                message: typeof detail.detail === "string" ? detail.detail : body,
+                code: typeof detail.code === "string" ? detail.code : undefined,
+            };
+        }
+    }
+    catch {
+        // Not JSON
+    }
+    return { message: body };
+}
+/**
+ * Map HTTP status codes to user-friendly messages.
+ */
+export function formatAPIError(error) {
+    switch (error.statusCode) {
+        case 401:
+            return "Not logged in. Run `npx @agentpowers/cli login` first.";
+        case 403:
+            return "Access denied. You may need to purchase this skill first.";
+        case 404:
+            return "Not found. Check the slug and try again.";
+        case 409:
+            return error.message || "Conflict — this action has already been taken.";
+        case 422:
+            return `Invalid request: ${error.message}`;
+        case 429:
+            return "Too many requests. Please wait a moment and try again.";
+        default:
+            return error.message || `API error (${error.statusCode})`;
+    }
+}
+async function safeFetch(url, init) {
+    try {
+        return await fetch(url, {
+            ...init,
+            signal: AbortSignal.timeout(TIMEOUT_MS),
+        });
+    }
+    catch (err) {
+        if (err instanceof DOMException && err.name === "TimeoutError") {
+            throw new NetworkError("Request timed out. The API may be temporarily unavailable.");
+        }
+        if (err instanceof TypeError) {
+            throw new NetworkError("Could not connect to AgentPowers API. Check your network connection.");
+        }
+        throw err;
+    }
+}
+export async function apiGet(path, params, auth) {
+    const url = new URL(path, API_BASE_URL);
+    if (params) {
+        for (const [key, value] of Object.entries(params)) {
+            if (value !== undefined) {
+                url.searchParams.set(key, String(value));
+            }
+        }
+    }
+    const headers = { Accept: "application/json" };
+    if (auth) {
+        headers["Authorization"] = `Bearer ${auth}`;
+    }
+    const response = await safeFetch(url.toString(), { headers });
+    if (!response.ok) {
+        const body = await response.text();
+        const { message, code } = parseErrorBody(body);
+        throw new APIError(message, response.status, code);
+    }
+    return (await response.json());
+}
+export async function apiPost(path, body, auth) {
+    const url = new URL(path, API_BASE_URL);
+    const headers = {
+        Accept: "application/json",
+        "Content-Type": "application/json",
+    };
+    if (auth) {
+        headers["Authorization"] = `Bearer ${auth}`;
+    }
+    const response = await safeFetch(url.toString(), {
+        method: "POST",
+        headers,
+        body: body !== undefined ? JSON.stringify(body) : undefined,
+    });
+    if (!response.ok) {
+        const text = await response.text();
+        const { message, code } = parseErrorBody(text);
+        throw new APIError(message, response.status, code);
+    }
+    return (await response.json());
+}
+/**
+ * Fire-and-forget installation tracking. Never rejects.
+ */
+export async function recordInstallation(sourceSlug, platform, source, hostname, auth) {
+    try {
+        await apiPost("/v1/installations", { source_slug: sourceSlug, platform, source, hostname }, auth);
+    }
+    catch {
+        // Swallow all errors — tracking must not break install flow
+    }
+}
+//# sourceMappingURL=api-client.js.map

package/dist/api-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-client.js","sourceRoot":"","sources":["../src/api-client.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAE3C,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEvD,MAAM,OAAO,QAAS,SAAQ,KAAK;IAGf;IACA;IAHlB,YACE,OAAe,EACC,UAAkB,EAClB,IAAa;QAE7B,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,eAAU,GAAV,UAAU,CAAQ;QAClB,SAAI,GAAJ,IAAI,CAAS;QAG7B,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF;AAED,MAAM,OAAO,YAAa,SAAQ,KAAK;IACrC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;QACzD,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACpC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QAClC,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACnD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAiC,CAAC;YACtD,OAAO;gBACL,OAAO,EAAE,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;gBACjE,IAAI,EAAE,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;aAChE,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,WAAW;IACb,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,KAAe;IAC5C,QAAQ,KAAK,CAAC,UAAU,EAAE,CAAC;QACzB,KAAK,GAAG;YACN,OAAO,wDAAwD,CAAC;QAClE,KAAK,GAAG;YACN,OAAO,2DAA2D,CAAC;QACrE,KAAK,GAAG;YACN,OAAO,0CAA0C,CAAC;QACpD,KAAK,GAAG;YACN,OAAO,KAAK,CAAC,OAAO,IAAI,gDAAgD,CAAC;QAC3E,KAAK,GAAG;YACN,OAAO,oBAAoB,KAAK,CAAC,OAAO,EAAE,CAAC;QAC7C,KAAK,GAAG;YACN,OAAO,wDAAwD,CAAC;QAClE;YACE,OAAO,KAAK,CAAC,OAAO,IAAI,cAAc,KAAK,CAAC,UAAU,GAAG,CAAC;IAC9D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,IAAkB;IACtD,IAAI,CAAC;QACH,OAAO,MAAM,KAAK,CAAC,GAAG,EAAE;YACtB,GAAG,IAAI;YACP,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC;SACxC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAI,GAAG,YAAY,YAAY,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YAC/D,MAAM,IAAI,YAAY,CACpB,4DAA4D,CAC7D,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,YAAY,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,YAAY,CACpB,sEAAsE,CACvE,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,IAAY,EACZ,MAAoD,EACpD,IAAoB;IAEpB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACxC,IAAI,MAAM,EAAE,CAAC;QACX,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IACvE,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,IAAI,EAAE,CAAC;IAC9C,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;AACtC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,IAAY,EACZ,IAAc,EACd,IAAoB;IAEpB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAExC,MAAM,OAAO,GAA2B;QACtC,MAAM,EAAE,kBAAkB;QAC1B,cAAc,EAAE,kBAAkB;KACnC,CAAC;IACF,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,IAAI,EAAE,CAAC;IAC9C,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;QAC/C,MAAM,EAAE,MAAM;QACd,OAAO;QACP,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;KAC5D,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,UAAkB,EAClB,QAAgB,EAChB,MAAc,EACd,QAAgB,EAChB,IAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,OAAO,CACX,mBAAmB,EACnB,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,EACvD,IAAI,CACL,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,4DAA4D;IAC9D,CAAC;AACH,CAAC"}

package/dist/auth.d.ts

@@ -0,0 +1,15 @@
+/** Auth token management — shared with Python CLI at ~/.agentpowers/auth.json */
+/**
+ * Load the auth token from disk. Returns null if missing or expired.
+ */
+export declare function loadAuthToken(): string | null;
+/**
+ * Check if the user is currently authenticated.
+ */
+export declare function isAuthenticated(): boolean;
+/**
+ * Wait for the auth token file to appear or update.
+ * Polls the file every 2 seconds for up to 2 minutes.
+ * Returns the token on success, null on timeout.
+ */
+export declare function waitForAuthToken(pollIntervalMs?: number, timeoutMs?: number): Promise<string | null>;

package/dist/auth.js

@@ -0,0 +1,81 @@
+/** Auth token management — shared with Python CLI at ~/.agentpowers/auth.json */
+import { readFileSync, existsSync, watchFile, unwatchFile } from "node:fs";
+import { AUTH_FILE, LOGIN_POLL_INTERVAL_MS, LOGIN_TIMEOUT_MS } from "./config.js";
+/**
+ * Load the auth token from disk. Returns null if missing or expired.
+ */
+export function loadAuthToken() {
+    if (!existsSync(AUTH_FILE))
+        return null;
+    try {
+        const data = JSON.parse(readFileSync(AUTH_FILE, "utf-8"));
+        if (typeof data.token !== "string")
+            return null;
+        // Check expiration
+        if (data.expires_at) {
+            const expires = new Date(data.expires_at);
+            if (expires.getTime() < Date.now())
+                return null;
+        }
+        return data.token;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Check if the user is currently authenticated.
+ */
+export function isAuthenticated() {
+    return loadAuthToken() !== null;
+}
+/**
+ * Wait for the auth token file to appear or update.
+ * Polls the file every 2 seconds for up to 2 minutes.
+ * Returns the token on success, null on timeout.
+ */
+export function waitForAuthToken(pollIntervalMs = LOGIN_POLL_INTERVAL_MS, timeoutMs = LOGIN_TIMEOUT_MS) {
+    return new Promise((resolve) => {
+        const startTime = Date.now();
+        const initialToken = loadAuthToken();
+        const checkToken = () => {
+            const token = loadAuthToken();
+            // Succeed if we have a token that differs from what we started with
+            // (or if we had no token before and now we do)
+            if (token && token !== initialToken) {
+                cleanup();
+                resolve(token);
+                return;
+            }
+            if (Date.now() - startTime >= timeoutMs) {
+                cleanup();
+                resolve(null);
+                return;
+            }
+        };
+        const interval = setInterval(checkToken, pollIntervalMs);
+        // Also watch the file for changes (faster detection)
+        let fileWatcherActive = false;
+        try {
+            watchFile(AUTH_FILE, { interval: 500 }, () => {
+                checkToken();
+            });
+            fileWatcherActive = true;
+        }
+        catch {
+            // watchFile may fail if directory doesn't exist — polling is fine
+        }
+        const cleanup = () => {
+            clearInterval(interval);
+            if (fileWatcherActive) {
+                try {
+                    unwatchFile(AUTH_FILE);
+                }
+                catch {
+                    // ignore cleanup errors
+                }
+            }
+        };
+    });
+}
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,iFAAiF;AAEjF,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC3E,OAAO,EAAE,SAAS,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAGlF;;GAEG;AACH,MAAM,UAAU,aAAa;IAC3B,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAa,CAAC;QACtE,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAEhD,mBAAmB;QACnB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC1C,IAAI,OAAO,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE;gBAAE,OAAO,IAAI,CAAC;QAClD,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,aAAa,EAAE,KAAK,IAAI,CAAC;AAClC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,iBAAyB,sBAAsB,EAC/C,YAAoB,gBAAgB;IAEpC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,YAAY,GAAG,aAAa,EAAE,CAAC;QAErC,MAAM,UAAU,GAAG,GAAS,EAAE;YAC5B,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;YAC9B,oEAAoE;YACpE,+CAA+C;YAC/C,IAAI,KAAK,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;gBACpC,OAAO,EAAE,CAAC;gBACV,OAAO,CAAC,KAAK,CAAC,CAAC;gBACf,OAAO;YACT,CAAC;YAED,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,IAAI,SAAS,EAAE,CAAC;gBACxC,OAAO,EAAE,CAAC;gBACV,OAAO,CAAC,IAAI,CAAC,CAAC;gBACd,OAAO;YACT,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QAEzD,qDAAqD;QACrD,IAAI,iBAAiB,GAAG,KAAK,CAAC;QAC9B,IAAI,CAAC;YACH,SAAS,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE;gBAC3C,UAAU,EAAE,CAAC;YACf,CAAC,CAAC,CAAC;YACH,iBAAiB,GAAG,IAAI,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,kEAAkE;QACpE,CAAC;QAED,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,aAAa,CAAC,QAAQ,CAAC,CAAC;YACxB,IAAI,iBAAiB,EAAE,CAAC;gBACtB,IAAI,CAAC;oBACH,WAAW,CAAC,SAAS,CAAC,CAAC;gBACzB,CAAC;gBAAC,MAAM,CAAC;oBACP,wBAAwB;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+/** AgentPowers CLI — search, install, and manage Claude Code skills. */
+export {};

package/dist/cli.js

@@ -0,0 +1,31 @@
+#!/usr/bin/env node
+/** AgentPowers CLI — search, install, and manage Claude Code skills. */
+import { Command } from "commander";
+import { searchCommand } from "./commands/search.js";
+import { installCommand } from "./commands/install.js";
+import { loginCommand } from "./commands/login.js";
+const program = new Command();
+program
+    .name("agentpowers")
+    .description("Search, install, and manage Claude Code skills from the AgentPowers marketplace.")
+    .version("0.1.0");
+program
+    .command("search <query>")
+    .description("Search for skills in the marketplace")
+    .action(async (query) => {
+    await searchCommand(query);
+});
+program
+    .command("install <slug>")
+    .description("Install a skill by its slug")
+    .action(async (slug) => {
+    await installCommand(slug);
+});
+program
+    .command("login")
+    .description("Log in to AgentPowers via your browser")
+    .action(async () => {
+    await loginCommand();
+});
+program.parse();
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA,wEAAwE;AAExE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,aAAa,CAAC;KACnB,WAAW,CAAC,kFAAkF,CAAC;KAC/F,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,OAAO;KACJ,OAAO,CAAC,gBAAgB,CAAC;KACzB,WAAW,CAAC,sCAAsC,CAAC;KACnD,MAAM,CAAC,KAAK,EAAE,KAAa,EAAE,EAAE;IAC9B,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;AAC7B,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,gBAAgB,CAAC;KACzB,WAAW,CAAC,6BAA6B,CAAC;KAC1C,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE;IAC7B,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,wCAAwC,CAAC;KACrD,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,MAAM,YAAY,EAAE,CAAC;AACvB,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/commands/install.d.ts

@@ -0,0 +1,2 @@
+/** Install command — download and install a skill from the marketplace. */
+export declare function installCommand(slug: string): Promise<void>;

package/dist/commands/install.js

@@ -0,0 +1,44 @@
+/** Install command — download and install a skill from the marketplace. */
+import { hostname } from "node:os";
+import { loadAuthToken } from "../auth.js";
+import { apiGet, recordInstallation, APIError, formatAPIError, NetworkError, } from "../api-client.js";
+import { downloadAndExtract, validateSlug } from "../installer.js";
+export async function installCommand(slug) {
+    // Validate slug format
+    if (!validateSlug(slug)) {
+        console.error(`Error: Invalid slug "${slug}". Slugs must be lowercase alphanumeric with hyphens only.`);
+        process.exitCode = 1;
+        return;
+    }
+    const token = loadAuthToken();
+    try {
+        console.log(`Downloading ${slug}...`);
+        // Get download URL
+        const downloadData = await apiGet(`/v1/skills/${slug}/download`, undefined, token);
+        // Download and extract
+        const result = await downloadAndExtract(downloadData.url, slug, "agentpowers");
+        console.log(`Installed ${slug} to ${result.installDir}`);
+        console.log(`Content hash: ${result.contentHash}`);
+        // Record installation (fire-and-forget)
+        void recordInstallation(slug, "cli", "agentpowers", hostname(), token);
+        console.log("\nThe skill is now available in Claude Code.");
+    }
+    catch (err) {
+        if (err instanceof APIError) {
+            console.error(`Error: ${formatAPIError(err)}`);
+            process.exitCode = 1;
+        }
+        else if (err instanceof NetworkError) {
+            console.error(`Error: ${err.message}`);
+            process.exitCode = 1;
+        }
+        else if (err instanceof Error) {
+            console.error(`Error: ${err.message}`);
+            process.exitCode = 1;
+        }
+        else {
+            throw err;
+        }
+    }
+}
+//# sourceMappingURL=install.js.map

package/dist/commands/install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../../src/commands/install.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAE3E,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EACL,MAAM,EACN,kBAAkB,EAClB,QAAQ,EACR,cAAc,EACd,YAAY,GACb,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAGnE,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAY;IAC/C,uBAAuB;IACvB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,KAAK,CACX,wBAAwB,IAAI,4DAA4D,CACzF,CAAC;QACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;IAE9B,IAAI,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,KAAK,CAAC,CAAC;QAEtC,mBAAmB;QACnB,MAAM,YAAY,GAAG,MAAM,MAAM,CAC/B,cAAc,IAAI,WAAW,EAC7B,SAAS,EACT,KAAK,CACN,CAAC;QAEF,uBAAuB;QACvB,MAAM,MAAM,GAAG,MAAM,kBAAkB,CACrC,YAAY,CAAC,GAAG,EAChB,IAAI,EACJ,aAAa,CACd,CAAC;QAEF,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QAEnD,wCAAwC;QACxC,KAAK,kBAAkB,CAAC,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC;QAEvE,OAAO,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;IAC9D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,QAAQ,EAAE,CAAC;YAC5B,OAAO,CAAC,KAAK,CAAC,UAAU,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC/C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;aAAM,IAAI,GAAG,YAAY,YAAY,EAAE,CAAC;YACvC,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACvC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;aAAM,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;YAChC,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACvC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/commands/login.d.ts

@@ -0,0 +1,2 @@
+/** Login command — open browser and wait for auth token. */
+export declare function loginCommand(): Promise<void>;

package/dist/commands/login.js

@@ -0,0 +1,51 @@
+/** Login command — open browser and wait for auth token. */
+import { exec } from "node:child_process";
+import { platform } from "node:os";
+import { mkdirSync } from "node:fs";
+import { isAuthenticated, waitForAuthToken } from "../auth.js";
+import { LOGIN_URL, AUTH_DIR } from "../config.js";
+/**
+ * Open a URL in the user's default browser.
+ */
+function openBrowser(url) {
+    const os = platform();
+    let command;
+    if (os === "darwin") {
+        command = `open "${url}"`;
+    }
+    else if (os === "win32") {
+        command = `start "" "${url}"`;
+    }
+    else {
+        command = `xdg-open "${url}"`;
+    }
+    exec(command, (err) => {
+        if (err) {
+            console.log(`Could not open browser. Please visit: ${url}`);
+        }
+    });
+}
+export async function loginCommand() {
+    // Check if already authenticated
+    if (isAuthenticated()) {
+        console.log("You are already logged in.");
+        console.log("To log in with a different account, delete ~/.agentpowers/auth.json and try again.");
+        return;
+    }
+    // Ensure auth directory exists
+    mkdirSync(AUTH_DIR, { recursive: true });
+    console.log("Opening browser for login...");
+    console.log(`If the browser does not open, visit: ${LOGIN_URL}`);
+    console.log("");
+    openBrowser(LOGIN_URL);
+    console.log("Waiting for authentication...");
+    const token = await waitForAuthToken();
+    if (token) {
+        console.log("Login successful! You are now authenticated.");
+    }
+    else {
+        console.error("Login timed out. Please try again.");
+        process.exitCode = 1;
+    }
+}
+//# sourceMappingURL=login.js.map

package/dist/commands/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAE5D,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAEnD;;GAEG;AACH,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC;IACtB,IAAI,OAAe,CAAC;IACpB,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;QACpB,OAAO,GAAG,SAAS,GAAG,GAAG,CAAC;IAC5B,CAAC;SAAM,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;QAC1B,OAAO,GAAG,aAAa,GAAG,GAAG,CAAC;IAChC,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,aAAa,GAAG,GAAG,CAAC;IAChC,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;QACpB,IAAI,GAAG,EAAE,CAAC;YACR,OAAO,CAAC,GAAG,CAAC,yCAAyC,GAAG,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,iCAAiC;IACjC,IAAI,eAAe,EAAE,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,oFAAoF,CAAC,CAAC;QAClG,OAAO;IACT,CAAC;IAED,+BAA+B;IAC/B,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEzC,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,wCAAwC,SAAS,EAAE,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,WAAW,CAAC,SAAS,CAAC,CAAC;IAEvB,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;IAE7C,MAAM,KAAK,GAAG,MAAM,gBAAgB,EAAE,CAAC;IAEvC,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;IAC9D,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACpD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC"}

package/dist/commands/search.d.ts

@@ -0,0 +1,2 @@
+/** Search command — query the AgentPowers marketplace. */
+export declare function searchCommand(query: string): Promise<void>;

package/dist/commands/search.js

@@ -0,0 +1,30 @@
+/** Search command — query the AgentPowers marketplace. */
+import { apiGet, APIError, formatAPIError, NetworkError } from "../api-client.js";
+import { formatSearchResults } from "../formatters.js";
+export async function searchCommand(query) {
+    try {
+        const data = await apiGet("/v1/search", { q: query });
+        const output = formatSearchResults(data);
+        console.log(output);
+        // Install hint
+        const native = data.agentpowers;
+        if (native.items.length > 0) {
+            const firstSlug = native.items[0].slug;
+            console.log(`Tip: Install a skill with: npx @agentpowers/cli install ${firstSlug}`);
+        }
+    }
+    catch (err) {
+        if (err instanceof APIError) {
+            console.error(`Error: ${formatAPIError(err)}`);
+            process.exitCode = 1;
+        }
+        else if (err instanceof NetworkError) {
+            console.error(`Error: ${err.message}`);
+            process.exitCode = 1;
+        }
+        else {
+            throw err;
+        }
+    }
+}
+//# sourceMappingURL=search.js.map

package/dist/commands/search.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"search.js","sourceRoot":"","sources":["../../src/commands/search.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAE1D,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAClF,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAGvD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAa;IAC/C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAA0B,YAAY,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEpB,eAAe;QACf,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC;QAChC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACvC,OAAO,CAAC,GAAG,CAAC,2DAA2D,SAAS,EAAE,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,QAAQ,EAAE,CAAC;YAC5B,OAAO,CAAC,KAAK,CAAC,UAAU,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC/C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;aAAM,IAAI,GAAG,YAAY,YAAY,EAAE,CAAC;YACvC,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACvC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,10 @@
+/** Configuration constants for the AgentPowers CLI. */
+export declare const API_BASE_URL: string;
+export declare const AUTH_DIR: string;
+export declare const AUTH_FILE: string;
+export declare const PINS_FILE: string;
+export declare const SKILLS_DIR: string;
+export declare const LOGIN_URL = "https://agentpowers.ai/cli-auth";
+export declare const TIMEOUT_MS = 30000;
+export declare const LOGIN_POLL_INTERVAL_MS = 2000;
+export declare const LOGIN_TIMEOUT_MS = 120000;

package/dist/config.js

@@ -0,0 +1,15 @@
+/** Configuration constants for the AgentPowers CLI. */
+import { join } from "node:path";
+import { homedir } from "node:os";
+export const API_BASE_URL = process.env.AGENTPOWERS_API_URL ??
+    process.env.AP_API_BASE ??
+    "https://api.agentpowers.ai";
+export const AUTH_DIR = join(homedir(), ".agentpowers");
+export const AUTH_FILE = join(AUTH_DIR, "auth.json");
+export const PINS_FILE = join(AUTH_DIR, "pins.json");
+export const SKILLS_DIR = join(homedir(), ".claude", "skills");
+export const LOGIN_URL = "https://agentpowers.ai/cli-auth";
+export const TIMEOUT_MS = 30_000;
+export const LOGIN_POLL_INTERVAL_MS = 2_000;
+export const LOGIN_TIMEOUT_MS = 120_000;
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,uDAAuD;AAEvD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,MAAM,CAAC,MAAM,YAAY,GACvB,OAAO,CAAC,GAAG,CAAC,mBAAmB;IAC/B,OAAO,CAAC,GAAG,CAAC,WAAW;IACvB,4BAA4B,CAAC;AAE/B,MAAM,CAAC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;AACxD,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;AACrD,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;AACrD,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AAC/D,MAAM,CAAC,MAAM,SAAS,GAAG,iCAAiC,CAAC;AAC3D,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC;AACjC,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,CAAC;AAC5C,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC"}

package/dist/formatters.d.ts

@@ -0,0 +1,5 @@
+/** Terminal output formatters for CLI display. */
+import type { SectionedSearchResponse } from "./types.js";
+export declare function formatPrice(priceCents: number): string;
+export declare function formatSecurityStatus(status: string): string;
+export declare function formatSearchResults(data: SectionedSearchResponse): string;

package/dist/formatters.js

@@ -0,0 +1,76 @@
+/** Terminal output formatters for CLI display. */
+export function formatPrice(priceCents) {
+    if (priceCents === 0)
+        return "Free";
+    return `$${(priceCents / 100).toFixed(2)}`;
+}
+export function formatSecurityStatus(status) {
+    switch (status.toUpperCase()) {
+        case "PASS":
+            return "Passed";
+        case "WARN":
+            return "Warnings";
+        case "BLOCK":
+            return "Blocked";
+        default:
+            return status;
+    }
+}
+function formatNativeItem(item, index) {
+    const author = item.author
+        ? item.author.display_name || item.author.github_username || "Unknown"
+        : "Unknown";
+    const lines = [
+        `  ${index}. ${item.title} (${item.slug})`,
+        `     ${item.description}`,
+        `     ${formatPrice(item.price_cents)} | v${item.version} | ${formatSecurityStatus(item.security_status)} | ${item.download_count} downloads | by ${author}`,
+        "",
+    ];
+    return lines.join("\n");
+}
+function formatExternalItem(item, index) {
+    const security = item.ap_security_status
+        ? formatSecurityStatus(item.ap_security_status)
+        : "Not scanned";
+    const lines = [
+        `  ${index}. ${item.title} (${item.slug})`,
+        `     ${item.description}`,
+        `     ${formatPrice(item.price_cents)} | ${security} | by ${item.author}`,
+        "",
+    ];
+    return lines.join("\n");
+}
+export function formatSearchResults(data) {
+    const native = data.agentpowers;
+    const externalSources = Object.keys(data).filter((k) => k !== "agentpowers");
+    const totalResults = native.total +
+        externalSources.reduce((sum, key) => sum + data[key].total, 0);
+    if (totalResults === 0) {
+        return "No results found.";
+    }
+    const sections = [];
+    let globalIndex = 1;
+    // Native AgentPowers results
+    if (native.items.length > 0) {
+        const lines = [`AgentPowers Marketplace (${native.total} result${native.total === 1 ? "" : "s"})`, ""];
+        for (const item of native.items) {
+            lines.push(formatNativeItem(item, globalIndex++));
+        }
+        sections.push(lines.join("\n"));
+    }
+    // External source results
+    for (const source of externalSources) {
+        const section = data[source];
+        if (section.items.length > 0) {
+            const label = source.charAt(0).toUpperCase() + source.slice(1);
+            const lines = [`${label} (${section.total} result${section.total === 1 ? "" : "s"})`, ""];
+            for (const item of section.items) {
+                lines.push(formatExternalItem(item, globalIndex++));
+            }
+            sections.push(lines.join("\n"));
+        }
+    }
+    const header = `Found ${totalResults} result${totalResults === 1 ? "" : "s"}:\n`;
+    return header + sections.join("\n");
+}
+//# sourceMappingURL=formatters.js.map

package/dist/formatters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"formatters.js","sourceRoot":"","sources":["../src/formatters.ts"],"names":[],"mappings":"AAAA,kDAAkD;AASlD,MAAM,UAAU,WAAW,CAAC,UAAkB;IAC5C,IAAI,UAAU,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IACpC,OAAO,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAc;IACjD,QAAQ,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;QAC7B,KAAK,MAAM;YACT,OAAO,QAAQ,CAAC;QAClB,KAAK,MAAM;YACT,OAAO,UAAU,CAAC;QACpB,KAAK,OAAO;YACV,OAAO,SAAS,CAAC;QACnB;YACE,OAAO,MAAM,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAsB,EAAE,KAAa;IAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM;QACxB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,SAAS;QACtE,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,KAAK,GAAG;QACZ,KAAK,KAAK,KAAK,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,IAAI,GAAG;QAC1C,QAAQ,IAAI,CAAC,WAAW,EAAE;QAC1B,QAAQ,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,IAAI,CAAC,OAAO,MAAM,oBAAoB,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,IAAI,CAAC,cAAc,mBAAmB,MAAM,EAAE;QAC5J,EAAE;KACH,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAwB,EAAE,KAAa;IACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB;QACtC,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,kBAAkB,CAAC;QAC/C,CAAC,CAAC,aAAa,CAAC;IAClB,MAAM,KAAK,GAAG;QACZ,KAAK,KAAK,KAAK,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,IAAI,GAAG;QAC1C,QAAQ,IAAI,CAAC,WAAW,EAAE;QAC1B,QAAQ,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,QAAQ,SAAS,IAAI,CAAC,MAAM,EAAE;QACzE,EAAE;KACH,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAA6B;IAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC;IAChC,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,aAAa,CAAC,CAAC;IAE7E,MAAM,YAAY,GAChB,MAAM,CAAC,KAAK;QACZ,eAAe,CAAC,MAAM,CACpB,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,GAAI,IAAI,CAAC,GAAG,CAAuC,CAAC,KAAK,EAC1E,CAAC,CACF,CAAC;IAEJ,IAAI,YAAY,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IAED,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,6BAA6B;IAC7B,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,CAAC,4BAA4B,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,EAAE,EAAE,CAAC,CAAC;QACvG,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;QACpD,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAClC,CAAC;IAED,0BAA0B;IAC1B,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAsC,CAAC;QAClE,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC/D,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,KAAK,OAAO,CAAC,KAAK,UAAU,OAAO,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,EAAE,EAAE,CAAC,CAAC;YAC1F,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;gBACjC,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;YACtD,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,YAAY,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;IACjF,OAAO,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+/** Public API — re-exports for programmatic usage. */
+export { loadAuthToken, isAuthenticated } from "./auth.js";
+export { apiGet, apiPost, APIError, NetworkError, formatAPIError } from "./api-client.js";
+export { downloadAndExtract, validateSlug, getInstallDir } from "./installer.js";
+export { formatSearchResults, formatPrice } from "./formatters.js";
+export type { NativeSearchItem, ExternalSearchItem, SectionedSearchResponse, DownloadResponse, AuthData, } from "./types.js";

package/dist/index.js

@@ -0,0 +1,6 @@
+/** Public API — re-exports for programmatic usage. */
+export { loadAuthToken, isAuthenticated } from "./auth.js";
+export { apiGet, apiPost, APIError, NetworkError, formatAPIError } from "./api-client.js";
+export { downloadAndExtract, validateSlug, getInstallDir } from "./installer.js";
+export { formatSearchResults, formatPrice } from "./formatters.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,sDAAsD;AAEtD,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC3D,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAC1F,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACjF,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/installer.d.ts

@@ -0,0 +1,15 @@
+/** Skill installer — download, extract, hash, pin. */
+export declare function validateSlug(slug: string): boolean;
+export declare function hashDirectory(dirPath: string): string;
+export declare function validateArchiveMembers(members: string[], installDir: string): void;
+export declare function getInstallDir(slug: string): string;
+export interface InstallResult {
+    installDir: string;
+    contentHash: string;
+}
+/**
+ * Download a skill package, extract it, compute content hash, and save pin.
+ *
+ * Supports both HTTP URLs and base64 data URIs (local dev fallback).
+ */
+export declare function downloadAndExtract(url: string, slug: string, source?: string, version?: string | null, securityStatus?: string): Promise<InstallResult>;

package/dist/installer.js

@@ -0,0 +1,177 @@
+/** Skill installer — download, extract, hash, pin. */
+import { mkdirSync, rmSync, writeFileSync, unlinkSync, readFileSync, readdirSync, } from "node:fs";
+import { join, relative, normalize, resolve, isAbsolute, dirname } from "node:path";
+import { tmpdir } from "node:os";
+import { execFileSync } from "node:child_process";
+import { randomUUID, createHash } from "node:crypto";
+import { SKILLS_DIR, PINS_FILE } from "./config.js";
+/** Strict slug pattern: lowercase alphanumeric with hyphens. */
+const VALID_SLUG_RE = /^[a-z0-9][a-z0-9-]*$/;
+export function validateSlug(slug) {
+    return VALID_SLUG_RE.test(slug);
+}
+// --- Content hashing (matches CLI's content_hasher.py) ---
+const EXCLUDED_NAMES = new Set([".DS_Store", "Thumbs.db", "__pycache__"]);
+const EXCLUDED_SUFFIXES = new Set([".pyc", ".pyo"]);
+function shouldSkip(relativePath) {
+    const parts = relativePath.split("/");
+    for (const part of parts) {
+        if (EXCLUDED_NAMES.has(part))
+            return true;
+    }
+    const lastPart = parts[parts.length - 1];
+    for (const suffix of EXCLUDED_SUFFIXES) {
+        if (lastPart.endsWith(suffix))
+            return true;
+    }
+    return false;
+}
+function collectFiles(dirPath, basePath) {
+    const results = [];
+    const entries = readdirSync(dirPath, { withFileTypes: true });
+    for (const entry of entries) {
+        const fullPath = join(dirPath, entry.name);
+        const relPath = relative(basePath, fullPath);
+        if (entry.isDirectory()) {
+            if (!EXCLUDED_NAMES.has(entry.name)) {
+                results.push(...collectFiles(fullPath, basePath));
+            }
+        }
+        else if (entry.isFile() && !shouldSkip(relPath)) {
+            results.push(relPath);
+        }
+    }
+    return results;
+}
+export function hashDirectory(dirPath) {
+    const files = collectFiles(dirPath, dirPath).sort();
+    const hasher = createHash("sha256");
+    for (const relPath of files) {
+        hasher.update(relPath, "utf-8");
+        hasher.update(readFileSync(join(dirPath, relPath)));
+    }
+    return `sha256:${hasher.digest("hex")}`;
+}
+// --- Pin management ---
+function loadPins() {
+    try {
+        return JSON.parse(readFileSync(PINS_FILE, "utf-8"));
+    }
+    catch {
+        return {};
+    }
+}
+function savePin(slug, source, version, contentHash, securityStatus) {
+    mkdirSync(dirname(PINS_FILE), { recursive: true });
+    const pins = loadPins();
+    const now = new Date().toISOString();
+    pins[slug] = {
+        source,
+        version,
+        content_hash: contentHash,
+        installed_at: now,
+        scanned_at: now,
+        security_status: securityStatus,
+        type: "skill",
+    };
+    writeFileSync(PINS_FILE, JSON.stringify(pins, null, 2));
+}
+// --- Archive validation ---
+export function validateArchiveMembers(members, installDir) {
+    const resolvedInstallDir = resolve(installDir);
+    for (const member of members) {
+        const normalized = member.replace(/\\/g, "/");
+        if (isAbsolute(normalized) || isAbsolute(member)) {
+            throw new Error(`Blocked path traversal: absolute path in archive member '${member}'`);
+        }
+        const parts = normalized.split("/");
+        if (parts.includes("..")) {
+            throw new Error(`Blocked path traversal: '..' in archive member '${member}'`);
+        }
+        const target = resolve(installDir, normalize(normalized));
+        if (!target.startsWith(resolvedInstallDir)) {
+            throw new Error(`Blocked path traversal: '${member}' resolves outside destination directory`);
+        }
+    }
+}
+function safeExtract(tempFile, installDir, isTarball) {
+    let memberList;
+    if (isTarball) {
+        memberList = execFileSync("tar", ["-tzf", tempFile], { encoding: "utf-8" });
+    }
+    else {
+        memberList = execFileSync("zipinfo", ["-1", tempFile], { encoding: "utf-8" });
+    }
+    const members = memberList
+        .split("\n")
+        .map((m) => m.trim())
+        .filter((m) => m.length > 0);
+    validateArchiveMembers(members, installDir);
+    if (isTarball) {
+        execFileSync("tar", ["-xzf", tempFile, "-C", installDir], { stdio: "pipe" });
+    }
+    else {
+        execFileSync("unzip", ["-o", tempFile, "-d", installDir], { stdio: "pipe" });
+    }
+}
+// --- Data URI handling ---
+function isDataUri(url) {
+    return url.startsWith("data:");
+}
+function decodeDataUri(dataUri) {
+    const match = dataUri.match(/^data:[^;]*;base64,(.+)$/);
+    if (!match) {
+        throw new Error("Invalid data URI format — expected base64 encoding.");
+    }
+    return Buffer.from(match[1], "base64");
+}
+// --- Main install function ---
+export function getInstallDir(slug) {
+    return join(SKILLS_DIR, slug);
+}
+/**
+ * Download a skill package, extract it, compute content hash, and save pin.
+ *
+ * Supports both HTTP URLs and base64 data URIs (local dev fallback).
+ */
+export async function downloadAndExtract(url, slug, source = "agentpowers", version = null, securityStatus = "pass") {
+    if (!validateSlug(slug)) {
+        throw new Error(`Invalid slug: "${slug}" — slugs must be lowercase alphanumeric with hyphens only.`);
+    }
+    const installDir = getInstallDir(slug);
+    const isTarball = url.includes(".tar.gz") || url.includes(".tgz") || url.startsWith("data:");
+    const ext = isTarball ? ".tar.gz" : ".zip";
+    const tempFile = join(tmpdir(), `ap-${randomUUID()}${ext}`);
+    try {
+        let buffer;
+        if (isDataUri(url)) {
+            buffer = decodeDataUri(url);
+        }
+        else {
+            const response = await fetch(url);
+            if (!response.ok) {
+                throw new Error(`Download failed: ${response.status} ${response.statusText}`);
+            }
+            buffer = Buffer.from(await response.arrayBuffer());
+        }
+        writeFileSync(tempFile, buffer);
+        // Clean existing directory for fresh install
+        rmSync(installDir, { recursive: true, force: true });
+        mkdirSync(installDir, { recursive: true });
+        // Validate and extract
+        safeExtract(tempFile, installDir, isTarball);
+        // Compute content hash and save pin
+        const contentHash = hashDirectory(installDir);
+        savePin(slug, source, version, contentHash, securityStatus);
+        return { installDir, contentHash };
+    }
+    finally {
+        try {
+            unlinkSync(tempFile);
+        }
+        catch {
+            // temp file cleanup is best-effort
+        }
+    }
+}
+//# sourceMappingURL=installer.js.map

package/dist/installer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"installer.js","sourceRoot":"","sources":["../src/installer.ts"],"names":[],"mappings":"AAAA,sDAAsD;AAEtD,OAAO,EACL,SAAS,EACT,MAAM,EACN,aAAa,EACb,UAAU,EACV,YAAY,EACZ,WAAW,GAEZ,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpF,OAAO,EAAW,MAAM,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAGpD,gEAAgE;AAChE,MAAM,aAAa,GAAG,sBAAsB,CAAC;AAE7C,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC;AAED,4DAA4D;AAE5D,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;AAC1E,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAEpD,SAAS,UAAU,CAAC,YAAoB;IACtC,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IAC5C,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzC,KAAK,MAAM,MAAM,IAAI,iBAAiB,EAAE,CAAC;QACvC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;IAC7C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,OAAe,EAAE,QAAgB;IACrD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC7C,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpC,OAAO,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAClD,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACpC,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;QAC5B,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,UAAU,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAC1C,CAAC;AAED,yBAAyB;AAEzB,SAAS,QAAQ;IACf,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAa,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CACd,IAAY,EACZ,MAAc,EACd,OAAsB,EACtB,WAAmB,EACnB,cAAsB;IAEtB,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;IACxB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,CAAC,IAAI,CAAC,GAAG;QACX,MAAM;QACN,OAAO;QACP,YAAY,EAAE,WAAW;QACzB,YAAY,EAAE,GAAG;QACjB,UAAU,EAAE,GAAG;QACf,eAAe,EAAE,cAAc;QAC/B,IAAI,EAAE,OAAO;KACd,CAAC;IACF,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,6BAA6B;AAE7B,MAAM,UAAU,sBAAsB,CACpC,OAAiB,EACjB,UAAkB;IAElB,MAAM,kBAAkB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9C,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CACb,4DAA4D,MAAM,GAAG,CACtE,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACb,mDAAmD,MAAM,GAAG,CAC7D,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CACb,4BAA4B,MAAM,0CAA0C,CAC7E,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAClB,QAAgB,EAChB,UAAkB,EAClB,SAAkB;IAElB,IAAI,UAAkB,CAAC;IACvB,IAAI,SAAS,EAAE,CAAC;QACd,UAAU,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9E,CAAC;SAAM,CAAC;QACN,UAAU,GAAG,YAAY,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,OAAO,GAAG,UAAU;SACvB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAE/B,sBAAsB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAE5C,IAAI,SAAS,EAAE,CAAC;QACd,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/E,CAAC;SAAM,CAAC;QACN,YAAY,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED,4BAA4B;AAE5B,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,aAAa,CAAC,OAAe;IACpC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACxD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;AACzC,CAAC;AAED,gCAAgC;AAEhC,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC;AAOD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAW,EACX,IAAY,EACZ,SAAiB,aAAa,EAC9B,UAAyB,IAAI,EAC7B,iBAAyB,MAAM;IAE/B,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,kBAAkB,IAAI,6DAA6D,CACpF,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC7F,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,UAAU,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;IAE5D,IAAI,CAAC;QACH,IAAI,MAAc,CAAC;QACnB,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;YACnB,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,oBAAoB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;YAChF,CAAC;YACD,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;QACrD,CAAC;QAED,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAEhC,6CAA6C;QAC7C,MAAM,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE3C,uBAAuB;QACvB,WAAW,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;QAE7C,oCAAoC;QACpC,MAAM,WAAW,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;QAC9C,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;QAE5D,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;IACrC,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,UAAU,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,mCAAmC;QACrC,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,61 @@
+/** Type definitions for AgentPowers API responses. */
+export interface NativeSearchItem {
+    slug: string;
+    title: string;
+    description: string;
+    category: string;
+    type: string;
+    price_cents: number;
+    currency: string;
+    version: string;
+    security_status: string;
+    download_count: number;
+    author: {
+        display_name: string | null;
+        github_username: string | null;
+    } | null;
+}
+export interface ExternalSearchItem {
+    slug: string;
+    title: string;
+    description: string;
+    author: string;
+    source: string;
+    source_url: string;
+    source_installs: number | null;
+    source_rating: number | null;
+    price_cents: number;
+    version: string | null;
+    ap_security_status: string | null;
+    ap_security_score: number | null;
+    ap_scanned_at: string | null;
+}
+export interface SearchSection<T> {
+    items: T[];
+    total: number;
+}
+export interface SectionedSearchResponse {
+    agentpowers: SearchSection<NativeSearchItem>;
+    [source: string]: SearchSection<NativeSearchItem | ExternalSearchItem>;
+}
+export interface DownloadResponse {
+    url: string;
+    slug: string;
+}
+export interface AuthData {
+    token: string;
+    expires_at: string;
+}
+/** Pin entry stored in ~/.agentpowers/pins.json */
+export interface PinEntry {
+    source: string;
+    version: string | null;
+    content_hash: string;
+    installed_at: string;
+    scanned_at: string;
+    security_status: string;
+    type?: "skill" | "agent";
+}
+export interface PinsFile {
+    [slug: string]: PinEntry;
+}

package/dist/types.js

@@ -0,0 +1,3 @@
+/** Type definitions for AgentPowers API responses. */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,sDAAsD"}

package/package.json

@@ -0,0 +1,54 @@
+{
+  "name": "@agentpowers/cli",
+  "version": "0.1.0",
+  "description": "CLI for the AgentPowers marketplace — search, install, and manage Claude Code skills.",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "bin": {
+    "agentpowers": "dist/cli.js"
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:coverage": "vitest run --coverage",
+    "lint": "tsc --noEmit",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [
+    "claude",
+    "claude-code",
+    "agentpowers",
+    "marketplace",
+    "skills",
+    "agents",
+    "cli",
+    "npx"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/AgentPowers-AI/agentpowers-app.git",
+    "directory": "agentpowers-npx"
+  },
+  "homepage": "https://agentpowers.ai",
+  "publishConfig": {
+    "access": "public"
+  },
+  "license": "MIT",
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "dependencies": {
+    "commander": "^13.0.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "typescript": "^5.7.0",
+    "vitest": "^3.0.0"
+  }
+}