@aipm-registry/cli 0.1.8 → 0.2.0

package/dist/bin.cjs

@@ -4155,13 +4155,19 @@ var init_zod = __esm({
 });
 
 // ../../packages/schemas/dist/manifest.js
-var AiToolSchema, PackageManifestSchema;
+function expandTargets(targets) {
+  if (targets.includes("*"))
+    return [...ALL_TOOLS];
+  return targets.filter((t) => t !== "*");
+}
+var AiToolSchema, ALL_TOOLS, PackageManifestSchema;
 var init_manifest = __esm({
   "../../packages/schemas/dist/manifest.js"() {
     "use strict";
     init_zod();
     init_scope_name();
-    AiToolSchema = external_exports.enum(["cursor", "claude"]);
+    AiToolSchema = external_exports.enum(["cursor", "claude", "*"]);
+    ALL_TOOLS = ["cursor", "claude"];
     PackageManifestSchema = external_exports.object({
       schemaVersion: external_exports.literal("0.1"),
       name: external_exports.string().regex(SCOPE_NAME_REGEX, "name must be @scope/name"),
@@ -4245,26 +4251,36 @@ async function detectToolsInProject(projectRoot) {
     detected.push("claude");
   return detected;
 }
+function manifestAllowsTool(manifest, tool) {
+  if (manifest.targets.includes("*"))
+    return true;
+  return manifest.targets.includes(tool);
+}
 async function resolveInstallTools(options) {
   const { manifest } = options;
-  const allowed = new Set(manifest.targets);
+  const expandedAllowed = expandTargets(manifest.targets);
   if (options.explicitTarget) {
-    if (!allowed.has(options.explicitTarget)) {
+    if (options.explicitTarget === "*") {
+      return [...ALL_TOOLS];
+    }
+    if (!manifestAllowsTool(manifest, options.explicitTarget)) {
       throw new Error(`Package ${manifest.name} does not target "${options.explicitTarget}". Targets: ${manifest.targets.join(", ")}`);
     }
     return [options.explicitTarget];
   }
   const detected = await detectToolsInProject(options.projectRoot);
   if (detected.length > 0) {
-    const intersection = detected.filter((t) => allowed.has(t));
+    const intersection = detected.filter((t) => manifestAllowsTool(manifest, t));
     if (intersection.length === 0) {
       throw new Error(`Package ${manifest.name} targets [${manifest.targets.join(", ")}] but project only has [${detected.join(", ")}].`);
     }
     return intersection;
   }
-  const preferred = (options.preferredTools ?? []).filter((t) => allowed.has(t));
+  const preferred = expandTargets(options.preferredTools ?? []).filter((t) => manifestAllowsTool(manifest, t));
   if (preferred.length > 0)
     return preferred;
+  if (manifest.targets.includes("*"))
+    return expandedAllowed;
   return [];
 }
 var import_promises, import_node_path2;
@@ -4273,6 +4289,7 @@ var init_detect_tools = __esm({
     "use strict";
     import_promises = require("node:fs/promises");
     import_node_path2 = require("node:path");
+    init_dist();
   }
 });
 
@@ -4331,7 +4348,7 @@ async function installSkillPackage(options) {
     explicitTarget: options.explicitTarget
   });
   if (tools.length === 0) {
-    throw new Error("No AI tool detected (.cursor/ or .claude/). Use --target cursor|claude or set preferredTools in aipm.package.json.");
+    throw new Error("No AI tool detected (.cursor/ or .claude/). Use --target cursor|claude|* or set preferredTools in aipm.package.json.");
   }
   const installed = {};
   for (const tool of tools) {
@@ -4375,74 +4392,6 @@ var init_dist4 = __esm({
   }
 });
 
-// src/project-files.ts
-var project_files_exports = {};
-__export(project_files_exports, {
-  parseTargetFlag: () => parseTargetFlag,
-  readLockfile: () => readLockfile,
-  readProjectPackageJson: () => readProjectPackageJson,
-  resolveRegistryUrl: () => resolveRegistryUrl,
-  upsertLockEntry: () => upsertLockEntry,
-  writeLockfile: () => writeLockfile,
-  writeProjectPackageJson: () => writeProjectPackageJson
-});
-async function readProjectPackageJson(projectRoot) {
-  try {
-    const raw = await (0, import_promises7.readFile)((0, import_node_path7.join)(projectRoot, PACKAGE_JSON), "utf8");
-    return ProjectPackageJsonSchema.parse(JSON.parse(raw));
-  } catch {
-    return null;
-  }
-}
-async function writeProjectPackageJson(projectRoot, data) {
-  await (0, import_promises7.writeFile)(
-    (0, import_node_path7.join)(projectRoot, PACKAGE_JSON),
-    JSON.stringify(data, null, 2) + "\n",
-    "utf8"
-  );
-}
-async function readLockfile(projectRoot) {
-  try {
-    const raw = await (0, import_promises7.readFile)((0, import_node_path7.join)(projectRoot, LOCKFILE), "utf8");
-    return LockfileSchema.parse(JSON.parse(raw));
-  } catch {
-    return null;
-  }
-}
-async function writeLockfile(projectRoot, data) {
-  await (0, import_promises7.writeFile)((0, import_node_path7.join)(projectRoot, LOCKFILE), JSON.stringify(data, null, 2) + "\n", "utf8");
-}
-function upsertLockEntry(lock, name, entry) {
-  return {
-    ...lock,
-    packages: { ...lock.packages, [name]: entry }
-  };
-}
-function resolveRegistryUrl(project, flag, fallback) {
-  const fromEnv = process.env.AIPM_REGISTRY_URL ?? process.env.AIPM_REGISTRY;
-  if (flag) return flag.replace(/\/$/, "");
-  if (project?.registry) return project.registry.replace(/\/$/, "");
-  if (fromEnv) return fromEnv.replace(/\/$/, "");
-  if (fallback) return fallback.replace(/\/$/, "");
-  throw new Error("Registry URL required: set registry in aipm.package.json or AIPM_REGISTRY_URL");
-}
-function parseTargetFlag(target) {
-  if (!target) return void 0;
-  if (target === "cursor" || target === "claude") return target;
-  throw new Error('--target must be "cursor" or "claude"');
-}
-var import_promises7, import_node_path7, PACKAGE_JSON, LOCKFILE;
-var init_project_files = __esm({
-  "src/project-files.ts"() {
-    "use strict";
-    import_promises7 = require("node:fs/promises");
-    import_node_path7 = require("node:path");
-    init_dist();
-    PACKAGE_JSON = "aipm.package.json";
-    LOCKFILE = "aipm-lock.json";
-  }
-});
-
 // ../../node_modules/.pnpm/commander@15.0.0/node_modules/commander/lib/error.js
 var CommanderError = class extends Error {
   /**
@@ -7814,8 +7763,8 @@ var program = new Command();
 // src/bin.ts
 var import_node_child_process4 = require("node:child_process");
 var import_promises9 = require("node:fs/promises");
-var import_node_path10 = require("node:path");
-var import_node_process3 = require("node:process");
+var import_node_path11 = require("node:path");
+var import_node_process5 = require("node:process");
 init_dist();
 init_dist4();
 
@@ -8040,14 +7989,14 @@ async function packStagedFiles(root) {
 }
 async function unpackTarballToBuffer(tarball, entry) {
   const { mkdtemp: mkdtemp2, rm: rm3, writeFile: writeFile6 } = await import("node:fs/promises");
-  const { join: join9 } = await import("node:path");
+  const { join: join11 } = await import("node:path");
   const { tmpdir: tmpdir2 } = await import("node:os");
-  const tempDir = await mkdtemp2(join9(tmpdir2(), "aipm-install-"));
-  const tgzPath = join9(tempDir, "pkg.tgz");
+  const tempDir = await mkdtemp2(join11(tmpdir2(), "aipm-install-"));
+  const tgzPath = join11(tempDir, "pkg.tgz");
   try {
     await writeFile6(tgzPath, tarball);
     await execFileAsync("tar", ["-xzf", tgzPath, "-C", tempDir]);
-    return (0, import_promises5.readFile)(join9(tempDir, entry), "utf8");
+    return (0, import_promises5.readFile)(join11(tempDir, entry), "utf8");
   } finally {
     await rm3(tempDir, { recursive: true, force: true });
   }
@@ -8123,7 +8072,70 @@ async function fetchPackageTarball(registry, name, version) {
 
 // src/install-one.ts
 init_dist4();
-init_project_files();
+
+// src/project-files.ts
+var import_promises7 = require("node:fs/promises");
+var import_node_path7 = require("node:path");
+init_dist();
+var PACKAGE_JSON = "aipm.package.json";
+var LOCKFILE = "aipm-lock.json";
+async function readProjectPackageJson(projectRoot) {
+  try {
+    const raw = await (0, import_promises7.readFile)((0, import_node_path7.join)(projectRoot, PACKAGE_JSON), "utf8");
+    return ProjectPackageJsonSchema.parse(JSON.parse(raw));
+  } catch {
+    return null;
+  }
+}
+async function writeProjectPackageJson(projectRoot, data) {
+  await (0, import_promises7.writeFile)(
+    (0, import_node_path7.join)(projectRoot, PACKAGE_JSON),
+    JSON.stringify(data, null, 2) + "\n",
+    "utf8"
+  );
+}
+async function readLockfile(projectRoot) {
+  try {
+    const raw = await (0, import_promises7.readFile)((0, import_node_path7.join)(projectRoot, LOCKFILE), "utf8");
+    return LockfileSchema.parse(JSON.parse(raw));
+  } catch {
+    return null;
+  }
+}
+async function writeLockfile(projectRoot, data) {
+  await (0, import_promises7.writeFile)((0, import_node_path7.join)(projectRoot, LOCKFILE), JSON.stringify(data, null, 2) + "\n", "utf8");
+}
+function upsertLockEntry(lock, name, entry) {
+  return {
+    ...lock,
+    packages: { ...lock.packages, [name]: entry }
+  };
+}
+function resolveRegistryUrl(project, flag, fallback) {
+  const fromEnv = process.env.AIPM_REGISTRY_URL ?? process.env.AIPM_REGISTRY;
+  if (flag) return flag.replace(/\/$/, "");
+  if (project?.registry) return project.registry.replace(/\/$/, "");
+  if (fromEnv) return fromEnv.replace(/\/$/, "");
+  if (fallback) return fallback.replace(/\/$/, "");
+  throw new Error("Registry URL required: set registry in aipm.package.json or AIPM_REGISTRY_URL");
+}
+function parseTargetFlag(target) {
+  if (!target) return void 0;
+  if (target === "cursor" || target === "claude" || target === "*") return target;
+  throw new Error('--target must be "cursor", "claude", or "*"');
+}
+function parseTargetsFlag(value) {
+  const targets = value.split(",").map((target) => target.trim()).filter(Boolean);
+  if (targets.length === 0) throw new Error("At least one target is required.");
+  for (const target of targets) {
+    if (target !== "cursor" && target !== "claude" && target !== "*") {
+      throw new Error('--targets must contain only "cursor", "claude", and/or "*"');
+    }
+  }
+  const unique = [...new Set(targets)];
+  if (unique.includes("*")) return ["*"];
+  return unique;
+}
 
 // src/prompt.ts
 var readline = __toESM(require("node:readline/promises"), 1);
@@ -8148,6 +8160,8 @@ async function promptForTool() {
 
 // src/install-one.ts
 async function installOnePackage(options) {
+  const configRoot = options.configRoot;
+  const installRoot = options.installRoot ?? configRoot;
   await assertRegistryReachable(options.registry);
   const { manifest, integrity: remoteIntegrity } = await fetchPackageMetadata(
     options.registry,
@@ -8158,7 +8172,7 @@ async function installOnePackage(options) {
   let preferredTools = options.project.preferredTools;
   const { resolveInstallTools: resolveInstallTools2 } = await Promise.resolve().then(() => (init_dist4(), dist_exports));
   let tools = await resolveInstallTools2({
-    projectRoot: options.projectRoot,
+    projectRoot: installRoot,
     manifest,
     preferredTools,
     explicitTarget
@@ -8166,14 +8180,14 @@ async function installOnePackage(options) {
   if (tools.length === 0) {
     if (options.ci) {
       throw new Error(
-        "No tool detected. Use --target cursor|claude in CI mode."
+        "No tool detected. Use --target cursor|claude|* in CI mode."
       );
     }
     const choice = await promptForTool();
     explicitTarget = choice;
     preferredTools = [choice];
     tools = await resolveInstallTools2({
-      projectRoot: options.projectRoot,
+      projectRoot: installRoot,
       manifest,
       preferredTools,
       explicitTarget
@@ -8186,13 +8200,13 @@ async function installOnePackage(options) {
   );
   const skillMarkdown = await unpackTarballToBuffer(tarball, manifest.entry);
   const result = await installSkillPackage({
-    projectRoot: options.projectRoot,
+    projectRoot: installRoot,
     manifest,
     skillMarkdown,
     preferredTools,
     explicitTarget
   });
-  const lock = await readLockfile(options.projectRoot) ?? {
+  const lock = await readLockfile(configRoot) ?? {
     schemaVersion: "0.1",
     packages: {}
   };
@@ -8202,7 +8216,7 @@ async function installOnePackage(options) {
     if (paths) installed[tool] = paths;
   }
   await writeLockfile(
-    options.projectRoot,
+    configRoot,
     upsertLockEntry(lock, options.name, {
       version: options.version,
       integrity: remoteIntegrity,
@@ -8217,9 +8231,31 @@ async function installOnePackage(options) {
 // src/doctor.ts
 var import_node_child_process3 = require("node:child_process");
 var import_promises8 = require("node:fs/promises");
-var import_node_path8 = require("node:path");
+var import_node_path9 = require("node:path");
 var import_node_util4 = require("node:util");
-init_project_files();
+
+// src/project-root.ts
+var import_node_os2 = require("node:os");
+var import_node_path8 = require("node:path");
+var import_node_process3 = require("node:process");
+function globalConfigDir(env2 = process.env) {
+  const fromEnv = env2.AIPM_HOME?.trim();
+  return fromEnv ? fromEnv.replace(/\/$/, "") : (0, import_node_path8.join)((0, import_node_os2.homedir)(), ".aipm");
+}
+function resolveConfigRoot(options = {}) {
+  return options.global ? globalConfigDir() : (0, import_node_process3.cwd)();
+}
+function resolveInstallRoot(options = {}) {
+  return options.global ? (0, import_node_os2.homedir)() : (0, import_node_process3.cwd)();
+}
+function scopeLabel(options) {
+  return options.global ? "global" : "project";
+}
+function initRequiredMessage(options) {
+  return options.global ? "Run aipm init -g first" : "Run aipm init first";
+}
+
+// src/doctor.ts
 var execFileAsync2 = (0, import_node_util4.promisify)(import_node_child_process3.execFile);
 var MIN_NODE_MAJOR = 20;
 async function commandOutput(command, args) {
@@ -8235,11 +8271,11 @@ async function commandOutput(command, args) {
 }
 function npmGlobalBin(prefix) {
   if (!prefix) return null;
-  return process.platform === "win32" ? prefix : `${prefix}${import_node_path8.sep}bin`;
+  return process.platform === "win32" ? prefix : `${prefix}${import_node_path9.sep}bin`;
 }
 function pathIncludes(pathDir) {
   if (!pathDir) return false;
-  return (process.env.PATH ?? "").split(import_node_path8.delimiter).includes(pathDir);
+  return (process.env.PATH ?? "").split(import_node_path9.delimiter).includes(pathDir);
 }
 function shellPathHint(binDir) {
   if (!binDir) return "Run npm prefix -g and add its bin folder to PATH.";
@@ -8253,8 +8289,10 @@ async function commandExists(command) {
   return await commandOutput(probe, args) !== null;
 }
 async function runDoctor(options) {
+  const scope = { global: options.global };
+  const configRoot = resolveConfigRoot(scope);
   const root = process.cwd();
-  const project = await readProjectPackageJson(root);
+  const project = await readProjectPackageJson(configRoot);
   const registry = resolveRegistryUrl(project, options.registry, "https://api.aipm-registry.com");
   const nodeMajor = Number(process.versions.node.split(".")[0]);
   const npmPrefix = await commandOutput("npm", ["prefix", "-g"]);
@@ -8288,11 +8326,20 @@ async function runDoctor(options) {
     });
   }
   if (!options.publish) {
+    const configLabel = options.global ? "Global config" : "Project config";
     try {
-      await (0, import_promises8.access)("aipm.package.json");
-      checks.push({ name: "Project config", ok: true, detail: "aipm.package.json exists." });
+      await (0, import_promises8.access)((0, import_node_path9.join)(configRoot, "aipm.package.json"));
+      checks.push({
+        name: configLabel,
+        ok: true,
+        detail: `${(0, import_node_path9.join)(configRoot, "aipm.package.json")} exists (${scopeLabel(scope)}).`
+      });
     } catch {
-      checks.push({ name: "Project config", ok: false, detail: "Run aipm init in this project." });
+      checks.push({
+        name: configLabel,
+        ok: false,
+        detail: initRequiredMessage(scope)
+      });
     }
   }
   try {
@@ -8353,18 +8400,95 @@ async function runDoctor(options) {
   }
 }
 
-// src/bin.ts
-init_project_files();
-
 // src/version.ts
 var import_node_fs2 = require("node:fs");
-var import_node_path9 = require("node:path");
+var import_node_path10 = require("node:path");
 function getCliVersion() {
-  const pkgPath = (0, import_node_path9.join)(__dirname, "..", "package.json");
+  const pkgPath = (0, import_node_path10.join)(__dirname, "..", "package.json");
   const pkg = JSON.parse((0, import_node_fs2.readFileSync)(pkgPath, "utf8"));
   return pkg.version;
 }
 
+// src/cli-update-check.ts
+var import_node_process4 = require("node:process");
+var CLI_PACKAGE_NAME = "@aipm-registry/cli";
+var CLI_UPDATE_COMMAND = `npm install -g ${CLI_PACKAGE_NAME}`;
+var NPM_REGISTRY = "https://registry.npmjs.org";
+var FETCH_TIMEOUT_MS = 3e3;
+function parseSemVer(version) {
+  const match = version.trim().match(/^(\d+)\.(\d+)\.(\d+)/);
+  if (!match) return null;
+  return {
+    major: Number(match[1]),
+    minor: Number(match[2]),
+    patch: Number(match[3])
+  };
+}
+function isSemVerNewer(current, latest) {
+  if (latest.major !== current.major) return latest.major > current.major;
+  if (latest.minor !== current.minor) return latest.minor > current.minor;
+  return latest.patch > current.patch;
+}
+function classifyCliUpdate(current, latest) {
+  const cur = parseSemVer(current);
+  const lat = parseSemVer(latest);
+  if (!cur || !lat || !isSemVerNewer(cur, lat)) return "none";
+  if (lat.major > cur.major) return "major";
+  return "patch-minor";
+}
+async function fetchLatestCliVersion(fetchImpl = fetch) {
+  try {
+    const response = await fetchImpl(
+      `${NPM_REGISTRY}/${encodeURIComponent(CLI_PACKAGE_NAME)}/latest`,
+      {
+        headers: { Accept: "application/json" },
+        signal: AbortSignal.timeout(FETCH_TIMEOUT_MS)
+      }
+    );
+    if (!response.ok) return null;
+    const data = await response.json();
+    return data.version ?? null;
+  } catch {
+    return null;
+  }
+}
+function formatCliUpdateNotice(options) {
+  const { currentVersion, latestVersion, level } = options;
+  const cmd = CLI_UPDATE_COMMAND;
+  if (level === "major") {
+    return `AIPM CLI ${latestVersion} is available (you have ${currentVersion}). Update now: ${cmd}`;
+  }
+  return `A new AIPM CLI version is available (${currentVersion} \u2192 ${latestVersion}). Run: ${cmd}`;
+}
+function printCliUpdateNotice(options) {
+  const useColor2 = options.useColor ?? import_node_process4.stderr.isTTY;
+  const writeInfo = options.writeInfo ?? ((message2) => console.log(message2));
+  const writeWarn = options.writeWarn ?? ((message2) => console.error(message2));
+  const message = formatCliUpdateNotice(options);
+  if (options.level === "major") {
+    const red = useColor2 ? "\x1B[31m" : "";
+    const reset = useColor2 ? "\x1B[0m" : "";
+    writeWarn(`${red}${message}${reset}`);
+    return;
+  }
+  writeInfo(message);
+}
+async function notifyCliUpdateIfNeeded(currentVersion, options) {
+  const latestVersion = await (options?.fetchLatest ?? fetchLatestCliVersion)();
+  if (!latestVersion) return "none";
+  const level = classifyCliUpdate(currentVersion, latestVersion);
+  if (level === "none") return "none";
+  printCliUpdateNotice({
+    currentVersion,
+    latestVersion,
+    level,
+    useColor: options?.useColor,
+    writeInfo: options?.writeInfo,
+    writeWarn: options?.writeWarn
+  });
+  return level;
+}
+
 // src/bin.ts
 var CLI_VERSION = getCliVersion();
 var program2 = new Command();
@@ -8372,6 +8496,8 @@ var DEFAULT_REGISTRY = "https://api.aipm-registry.com";
 var SITE_URL = "https://aipm-registry.com";
 var PUBLISH_DOC_URL = "https://aipm-registry.com/publish";
 var DASHBOARD_URL = "https://aipm-registry.com/dashboard";
+var GLOBAL_OPTION = "-g, --global";
+var GLOBAL_OPTION_DESC = "Use global config (~/.aipm) and install skills under your home directory";
 program2.name("aipm").description("AI package manager").enablePositionalOptions().version(CLI_VERSION, "-v, --version", "output the current version").option("--verbose", "Print extra diagnostic output").option("--quiet", "Reduce non-essential output").addHelpText(
   "after",
   `
@@ -8380,8 +8506,10 @@ Examples:
   $ npm install -g @aipm-registry/cli
   $ aipm doctor
   $ aipm init
+  $ aipm init -g
   $ aipm search sentry
   $ aipm add @scope/name@1.0.0 --target cursor --ci
+  $ aipm add @scope/name -g
   $ aipm publish init --name @org/skill
   $ cd skill
   $ aipm publish add .
@@ -8409,7 +8537,7 @@ async function writeStarterFile(path2, content) {
 }
 async function inferEntryFromSource(source, fallback) {
   const sourceInfo = await (0, import_promises9.stat)(source);
-  if (sourceInfo.isFile()) return (0, import_node_path10.basename)(source);
+  if (sourceInfo.isFile()) return (0, import_node_path11.basename)(source);
   if (!sourceInfo.isDirectory()) return fallback;
   const entries = await (0, import_promises9.readdir)(source);
   if (entries.includes(fallback)) return fallback;
@@ -8506,16 +8634,6 @@ async function printPublishPreview(root, json) {
     preview.warnings.length > 0 ? "Fix the warnings, then run aipm publish preview again." : "Run aipm publish validate."
   );
 }
-function parseTargets(value) {
-  const targets = value.split(",").map((target) => target.trim()).filter(Boolean);
-  if (targets.length === 0) throw new Error("At least one target is required.");
-  for (const target of targets) {
-    if (target !== "cursor" && target !== "claude") {
-      throw new Error('--targets must contain only "cursor" and/or "claude"');
-    }
-  }
-  return [...new Set(targets)];
-}
 var SKILL_TEMPLATES = {
   blank: (name) => `# ${name}
 
@@ -8574,10 +8692,10 @@ function parseSkillTemplate(value) {
 }
 async function initSkill(opts) {
   if (!isValidScopeName(opts.name)) throw new Error("Invalid @scope/name");
-  const root = opts.here ? (0, import_node_process3.cwd)() : (0, import_node_path10.resolve)((0, import_node_process3.cwd)(), opts.dir ?? skillFolderName(opts.name));
+  const root = opts.here ? (0, import_node_process5.cwd)() : (0, import_node_path11.resolve)((0, import_node_process5.cwd)(), opts.dir ?? skillFolderName(opts.name));
   const cdTarget = opts.here ? null : opts.dir ?? skillFolderName(opts.name);
   await (0, import_promises9.mkdir)(root, { recursive: true });
-  const source = opts.from ? (0, import_node_path10.resolve)(opts.from) : null;
+  const source = opts.from ? (0, import_node_path11.resolve)(opts.from) : null;
   const entry = source ? await inferEntryFromSource(source, opts.entry) : opts.entry;
   const manifest = {
     schemaVersion: "0.1",
@@ -8586,7 +8704,7 @@ async function initSkill(opts) {
     type: "skill",
     description: opts.description,
     entry,
-    targets: parseTargets(opts.targets),
+    targets: parseTargetsFlag(opts.targets),
     license: "Apache-2.0"
   };
   PackageManifestSchema.parse(manifest);
@@ -8595,21 +8713,21 @@ async function initSkill(opts) {
     if (sourceInfo.isDirectory()) {
       await (0, import_promises9.cp)(source, root, { recursive: true, force: false, errorOnExist: true });
     } else if (sourceInfo.isFile()) {
-      await (0, import_promises9.cp)(source, (0, import_node_path10.join)(root, (0, import_node_path10.basename)(source)), { force: false, errorOnExist: true });
+      await (0, import_promises9.cp)(source, (0, import_node_path11.join)(root, (0, import_node_path11.basename)(source)), { force: false, errorOnExist: true });
     } else {
       throw new Error(`Unsupported source path: ${opts.from}`);
     }
   }
-  await writeStarterFile((0, import_node_path10.join)(root, "aipm.manifest.json"), JSON.stringify(manifest, null, 2) + "\n");
+  await writeStarterFile((0, import_node_path11.join)(root, "aipm.manifest.json"), JSON.stringify(manifest, null, 2) + "\n");
   if (!opts.from) {
     const template = parseSkillTemplate(opts.template ?? "blank");
     await writeStarterFile(
-      (0, import_node_path10.join)(root, entry),
+      (0, import_node_path11.join)(root, entry),
       SKILL_TEMPLATES[template](opts.name)
     );
   }
   await writeStarterFile(
-    (0, import_node_path10.join)(root, ".aipmignore"),
+    (0, import_node_path11.join)(root, ".aipmignore"),
     [
       "# Files that should never be published with this skill",
       ".env*",
@@ -8627,34 +8745,37 @@ async function initSkill(opts) {
       ""
     ].join("\n")
   );
-  await (0, import_promises9.mkdir)((0, import_node_path10.join)(root, ".aipm"), { recursive: true });
+  await (0, import_promises9.mkdir)((0, import_node_path11.join)(root, ".aipm"), { recursive: true });
   console.log(`Created ${opts.name} skill folder: ${root}`);
   printPublishGuide(
     opts.from ? `Copied ${opts.from} into ${root} and created aipm.manifest.json, .aipmignore, and the local publish state folder.` : `Created ${root} with aipm.manifest.json, ${entry}, .aipmignore, and the local publish state folder.`,
     cdTarget ? `Run cd ${cdTarget}, edit/review the files, then run aipm publish add .` : "Edit/review the files, then run aipm publish add ."
   );
 }
-program2.command("init").description("Create aipm.package.json in the current project").option("--registry <url>", "Default registry URL").action(async (opts) => {
-  const root = (0, import_node_process3.cwd)();
-  const existing = await readProjectPackageJson(root);
+program2.command("init").description("Create aipm.package.json in the current project or globally").option(GLOBAL_OPTION, GLOBAL_OPTION_DESC).option("--registry <url>", "Default registry URL").action(async (opts) => {
+  const scope = { global: opts.global };
+  const configRoot = resolveConfigRoot(scope);
+  const existing = await readProjectPackageJson(configRoot);
   if (existing) {
-    console.log("aipm.package.json already exists.");
+    console.log(`aipm.package.json already exists (${scopeLabel(scope)}).`);
     return;
   }
-  const detected = await detectToolsInProject(root);
+  if (scope.global) await (0, import_promises9.mkdir)(configRoot, { recursive: true });
+  const installRoot = resolveInstallRoot(scope);
+  const detected = await detectToolsInProject(installRoot);
   let preferredTools = detected;
   if (detected.length === 0) {
     const choice = await promptForTool();
     preferredTools = [choice];
   }
   const registry = registryFromEnvOrDefault(opts.registry);
-  await writeProjectPackageJson(root, {
+  await writeProjectPackageJson(configRoot, {
     schemaVersion: "0.1",
     registry,
     preferredTools: preferredTools.length ? preferredTools : void 0,
     packages: {}
   });
-  console.log(`Created aipm.package.json (registry: ${registry})`);
+  console.log(`Created aipm.package.json (${scopeLabel(scope)}, registry: ${registry})`);
 });
 program2.command("login").description("Open the AIPM dashboard sign-in page").option("--no-open", "Print the URL without opening a browser").action(async (opts) => {
   const url = `${SITE_URL}/login`;
@@ -8663,17 +8784,22 @@ program2.command("login").description("Open the AIPM dashboard sign-in page").op
   if (opts.open) await openUrl(url);
   else console.log(`Open: ${url}`);
 });
-program2.command("config").description("Show resolved AIPM CLI and project configuration").option("--registry <url>", "Registry base URL").option("--json", "Print machine-readable JSON").action(async (opts) => {
-  const root = (0, import_node_process3.cwd)();
-  const project = await readProjectPackageJson(root);
-  const lock = await readLockfile(root);
+program2.command("config").description("Show resolved AIPM CLI and project configuration").option(GLOBAL_OPTION, GLOBAL_OPTION_DESC).option("--registry <url>", "Registry base URL").option("--json", "Print machine-readable JSON").action(async (opts) => {
+  const scope = { global: opts.global };
+  const configRoot = resolveConfigRoot(scope);
+  const installRoot = resolveInstallRoot(scope);
+  const project = await readProjectPackageJson(configRoot);
+  const lock = await readLockfile(configRoot);
   const registry = resolveRegistryUrl(project, opts.registry, DEFAULT_REGISTRY);
   const data = {
     cliVersion: CLI_VERSION,
     nodeVersion: process.versions.node,
-    cwd: root,
+    scope: scopeLabel(scope),
+    configRoot,
+    installRoot,
+    cwd: (0, import_node_process5.cwd)(),
     registry,
-    envRegistry: import_node_process3.env.AIPM_REGISTRY_URL ?? import_node_process3.env.AIPM_REGISTRY ?? null,
+    envRegistry: import_node_process5.env.AIPM_REGISTRY_URL ?? import_node_process5.env.AIPM_REGISTRY ?? null,
     hasProjectConfig: Boolean(project),
     projectPackages: project ? Object.keys(project.packages) : [],
     hasLockfile: Boolean(lock),
@@ -8686,7 +8812,10 @@ program2.command("config").description("Show resolved AIPM CLI and project confi
   }
   console.log(`CLI: ${data.cliVersion}`);
   console.log(`Node: ${data.nodeVersion}`);
-  console.log(`Project: ${data.cwd}`);
+  console.log(`Scope: ${data.scope}`);
+  console.log(`Config: ${data.configRoot}`);
+  console.log(`Install root: ${data.installRoot}`);
+  console.log(`Working directory: ${data.cwd}`);
   console.log(`Registry: ${data.registry}`);
   console.log(`Env registry: ${data.envRegistry ?? "not set"}`);
   console.log(`Project config: ${data.hasProjectConfig ? "found" : "not found"}`);
@@ -8695,11 +8824,13 @@ program2.command("config").description("Show resolved AIPM CLI and project confi
   console.log(`Installed packages: ${data.installedPackages.length}`);
   console.log(`Publish guide: ${data.publishDoc}`);
 });
-program2.command("add <package>").description("Add and install a package @scope/name[@version]").option("--registry <url>", "Registry base URL").option("--target <tool>", "cursor or claude").option("--ci", "Non-interactive; fail if prompt needed").action(async (pkgArg, opts) => {
+program2.command("add <package>").description("Add and install a package @scope/name[@version]").option(GLOBAL_OPTION, GLOBAL_OPTION_DESC).option("--registry <url>", "Registry base URL").option("--target <tool>", "cursor, claude, or *").option("--ci", "Non-interactive; fail if prompt needed").action(async (pkgArg, opts) => {
   const { name, version: requestedVersion } = parsePackageArg(pkgArg);
-  const root = (0, import_node_process3.cwd)();
-  let project = await readProjectPackageJson(root);
-  if (!project) throw new Error("Run aipm init first");
+  const scope = { global: opts.global };
+  const configRoot = resolveConfigRoot(scope);
+  const installRoot = resolveInstallRoot(scope);
+  let project = await readProjectPackageJson(configRoot);
+  if (!project) throw new Error(initRequiredMessage(scope));
   const registry = resolveRegistryUrl(project, opts.registry, DEFAULT_REGISTRY);
   const version = requestedVersion ?? project.packages[name] ?? await latestVersionForPackage(registry, name);
   if (!version) throw new Error("Specify version: aipm add @scope/pkg@1.0.0");
@@ -8707,9 +8838,10 @@ program2.command("add <package>").description("Add and install a package @scope/
     ...project,
     packages: { ...project.packages, [name]: version.replace(/^\^/, "") }
   };
-  await writeProjectPackageJson(root, project);
+  await writeProjectPackageJson(configRoot, project);
   await installOnePackage({
-    projectRoot: root,
+    configRoot,
+    installRoot,
     registry,
     name,
     version: version.replace(/^\^/, ""),
@@ -8717,6 +8849,9 @@ program2.command("add <package>").description("Add and install a package @scope/
     explicitTarget: parseTargetFlag(opts.target),
     ci: opts.ci
   });
+  if (!opts.ci && !program2.opts().quiet) {
+    await notifyCliUpdateIfNeeded(CLI_VERSION);
+  }
 });
 program2.command("search [query]").description("Search public registry packages").option("--registry <url>", "Registry base URL").option("--limit <number>", "Maximum results", "20").option("--json", "Print machine-readable JSON").action(async (query = "", opts) => {
   const registry = registryFromEnvOrDefault(opts.registry);
@@ -8737,15 +8872,18 @@ program2.command("search [query]").description("Search public registry packages"
     console.log(`  ${meta}`);
   }
 });
-program2.command("install").description("Install all packages from aipm.package.json").option("--registry <url>", "Registry base URL").option("--target <tool>", "cursor or claude").option("--ci", "Non-interactive").action(async (opts) => {
-  const root = (0, import_node_process3.cwd)();
-  const project = await readProjectPackageJson(root);
-  if (!project) throw new Error("Run aipm init first");
+program2.command("install").description("Install all packages from aipm.package.json").option(GLOBAL_OPTION, GLOBAL_OPTION_DESC).option("--registry <url>", "Registry base URL").option("--target <tool>", "cursor, claude, or *").option("--ci", "Non-interactive").action(async (opts) => {
+  const scope = { global: opts.global };
+  const configRoot = resolveConfigRoot(scope);
+  const installRoot = resolveInstallRoot(scope);
+  const project = await readProjectPackageJson(configRoot);
+  if (!project) throw new Error(initRequiredMessage(scope));
   const registry = resolveRegistryUrl(project, opts.registry, DEFAULT_REGISTRY);
   const target = parseTargetFlag(opts.target);
   for (const [name, version] of Object.entries(project.packages)) {
     await installOnePackage({
-      projectRoot: root,
+      configRoot,
+      installRoot,
       registry,
       name,
       version: version.replace(/^\^/, ""),
@@ -8763,12 +8901,12 @@ var publish = program2.command("publish [dir]").description("Stage, validate, an
     publish.help();
     return;
   }
-  const abs = (0, import_node_path10.resolve)(dir);
-  const manifestRaw = await (0, import_promises9.readFile)((0, import_node_path10.join)(abs, "aipm.manifest.json"), "utf8");
+  const abs = (0, import_node_path11.resolve)(dir);
+  const manifestRaw = await (0, import_promises9.readFile)((0, import_node_path11.join)(abs, "aipm.manifest.json"), "utf8");
   const manifest = PackageManifestSchema.parse(JSON.parse(manifestRaw));
   const tarball = await packDirectory(abs);
   const registry = registryFromEnvOrDefault(opts.registry);
-  const result = await publishPackage(registry, manifest.name, tarball, opts.token ?? import_node_process3.env.AIPM_TOKEN);
+  const result = await publishPackage(registry, manifest.name, tarball, opts.token ?? import_node_process5.env.AIPM_TOKEN);
   console.log(`Published ${manifest.name}@${result.version}`);
   console.log(`View: ${registry.replace(/\/$/, "")}/packages/${manifest.name.replace(/^@/, "").replace("/", "/")}/${result.version}`);
   console.log(`Install: aipm add ${manifest.name}@${result.version} --target ${manifest.targets[0]} --ci`);
@@ -8782,7 +8920,7 @@ publish.command("import <source>").description("Create a package folder from an
   async (source, opts) => initSkill({ ...opts, from: source })
 );
 publish.command("add [files...]").description("Stage files for publishing").action(async (files) => {
-  const state = await addPublishFiles((0, import_node_process3.cwd)(), files);
+  const state = await addPublishFiles((0, import_node_process5.cwd)(), files);
   console.log(`Staged ${state.files.length} file${state.files.length === 1 ? "" : "s"}.`);
   printPublishGuide(
     `Added ${files.length > 0 ? files.join(", ") : "."} to the publish stage, respecting .aipmignore and secret-file exclusions.`,
@@ -8813,7 +8951,7 @@ publish.command("token").description("Open the dashboard page used to generate a
   );
 });
 publish.command("remove <files...>").alias("rm").description("Remove files from the publish stage").action(async (files) => {
-  const state = await removePublishFiles((0, import_node_process3.cwd)(), files);
+  const state = await removePublishFiles((0, import_node_process5.cwd)(), files);
   console.log(`Staged ${state.files.length} file${state.files.length === 1 ? "" : "s"}.`);
   printPublishGuide(
     `Removed ${files.join(", ")} from the publish stage.`,
@@ -8821,7 +8959,7 @@ publish.command("remove <files...>").alias("rm").description("Remove files from
   );
 });
 publish.command("reset").description("Clear staged publish files").action(async () => {
-  await resetPublishState((0, import_node_process3.cwd)());
+  await resetPublishState((0, import_node_process5.cwd)());
   console.log("Cleared publish stage.");
   printPublishGuide(
     "Cleared all staged publish files.",
@@ -8829,7 +8967,7 @@ publish.command("reset").description("Clear staged publish files").action(async
   );
 });
 publish.command("status").description("Show staged publish files").option("--json", "Print machine-readable JSON").action(async (opts) => {
-  const rows = await statusPublishState((0, import_node_process3.cwd)());
+  const rows = await statusPublishState((0, import_node_process5.cwd)());
   if (opts.json) {
     console.log(JSON.stringify({ files: rows }, null, 2));
     return;
@@ -8852,7 +8990,7 @@ publish.command("status").description("Show staged publish files").option("--jso
   );
 });
 publish.command("diff").description("Show staged files that changed since add").action(async () => {
-  const rows = await statusPublishState((0, import_node_process3.cwd)());
+  const rows = await statusPublishState((0, import_node_process5.cwd)());
   const changed = rows.filter((row) => row.changed);
   if (changed.length === 0) {
     console.log("No staged files changed.");
@@ -8869,16 +9007,16 @@ publish.command("diff").description("Show staged files that changed since add").
   );
 });
 publish.command("validate").description("Validate staged files before publish").action(async () => {
-  const result = await validatePublishState((0, import_node_process3.cwd)());
+  const result = await validatePublishState((0, import_node_process5.cwd)());
   console.log(`Valid ${result.manifest.name}@${result.manifest.version} (${result.size} bytes staged).`);
   printPublishGuide(
     `Validated ${result.manifest.name}@${result.manifest.version}; manifest, entry file, staged hashes, ignored paths, package size, and obvious secrets passed.`,
     "Generate a 5-minute token from the dashboard, then run AIPM_TOKEN=<token> aipm publish push."
   );
 });
-publish.command("preview").description("Preview exactly what will be uploaded").option("--json", "Print machine-readable JSON").action((opts) => printPublishPreview((0, import_node_process3.cwd)(), opts.json));
+publish.command("preview").description("Preview exactly what will be uploaded").option("--json", "Print machine-readable JSON").action((opts) => printPublishPreview((0, import_node_process5.cwd)(), opts.json));
 publish.command("push").description("Publish staged files").option("--registry <url>", "Registry base URL").option("--token <token>", "Publish token").option("--yes", "Confirm upload without an extra reminder").action(async (opts) => {
-  const root = (0, import_node_process3.cwd)();
+  const root = (0, import_node_process5.cwd)();
   const { manifest } = await validatePublishState(root);
   const registry = registryFromEnvOrDefault(opts.registry);
   const tarball = await packStagedFiles(root);
@@ -8889,7 +9027,7 @@ publish.command("push").description("Publish staged files").option("--registry <
   }
   console.log(`Uploading ${staged.length} file${staged.length === 1 ? "" : "s"} to ${registry}.`);
   for (const entry of staged) console.log(`  ${entry.path}`);
-  const result = await publishPackage(registry, manifest.name, tarball, opts.token ?? import_node_process3.env.AIPM_TOKEN);
+  const result = await publishPackage(registry, manifest.name, tarball, opts.token ?? import_node_process5.env.AIPM_TOKEN);
   const base = registry.replace(/\/$/, "");
   console.log(`Published ${manifest.name}@${result.version}`);
   console.log(`View: ${base}/packages/${manifest.name.replace(/^@/, "")}/${result.version}`);
@@ -8899,9 +9037,9 @@ publish.command("push").description("Publish staged files").option("--registry <
     "Open the registry page, test the install command in a clean project, and share the package link."
   );
 });
-program2.command("list").description("List packages from aipm-lock.json").action(async () => {
-  const { readLockfile: readLockfile2 } = await Promise.resolve().then(() => (init_project_files(), project_files_exports));
-  const lock = await readLockfile2((0, import_node_process3.cwd)());
+program2.command("list").description("List packages from aipm-lock.json").option(GLOBAL_OPTION, GLOBAL_OPTION_DESC).action(async (opts) => {
+  const configRoot = resolveConfigRoot({ global: opts.global });
+  const lock = await readLockfile(configRoot);
   if (!lock || Object.keys(lock.packages).length === 0) {
     console.log("No packages installed.");
     return;
@@ -8910,27 +9048,30 @@ program2.command("list").description("List packages from aipm-lock.json").action
     console.log(`${name}@${entry.version} [${entry.resolvedTools.join(", ")}]`);
   }
 });
-program2.command("remove <package>").alias("rm").description("Remove a package from aipm.package.json and aipm-lock.json").action(async (pkgArg) => {
+program2.command("remove <package>").alias("rm").description("Remove a package from aipm.package.json and aipm-lock.json").option(GLOBAL_OPTION, GLOBAL_OPTION_DESC).action(async (pkgArg, opts) => {
   const { name } = parsePackageArg(pkgArg);
-  const root = (0, import_node_process3.cwd)();
-  const project = await readProjectPackageJson(root);
-  if (!project) throw new Error("Run aipm init first");
+  const scope = { global: opts.global };
+  const configRoot = resolveConfigRoot(scope);
+  const project = await readProjectPackageJson(configRoot);
+  if (!project) throw new Error(initRequiredMessage(scope));
   const packages = { ...project.packages };
   delete packages[name];
-  await writeProjectPackageJson(root, { ...project, packages });
-  const lock = await readLockfile(root);
+  await writeProjectPackageJson(configRoot, { ...project, packages });
+  const lock = await readLockfile(configRoot);
   if (lock) {
     const lockPackages = { ...lock.packages };
     delete lockPackages[name];
-    await writeLockfile(root, { ...lock, packages: lockPackages });
+    await writeLockfile(configRoot, { ...lock, packages: lockPackages });
   }
-  console.log(`Removed ${name} from AIPM project files.`);
+  console.log(`Removed ${name} from AIPM ${scopeLabel(scope)} files.`);
   console.log("Adapter-written files are not deleted yet; review your project before committing.");
 });
-program2.command("update [package]").description("Update one installed package, or all installed packages, to the latest registry version").option("--registry <url>", "Registry base URL").option("--target <tool>", "cursor or claude").option("--ci", "Non-interactive").action(async (pkgArg, opts) => {
-  const root = (0, import_node_process3.cwd)();
-  let project = await readProjectPackageJson(root);
-  if (!project) throw new Error("Run aipm init first");
+program2.command("update [package]").description("Update one installed package, or all installed packages, to the latest registry version").option(GLOBAL_OPTION, GLOBAL_OPTION_DESC).option("--registry <url>", "Registry base URL").option("--target <tool>", "cursor, claude, or *").option("--ci", "Non-interactive").action(async (pkgArg, opts) => {
+  const scope = { global: opts.global };
+  const configRoot = resolveConfigRoot(scope);
+  const installRoot = resolveInstallRoot(scope);
+  let project = await readProjectPackageJson(configRoot);
+  if (!project) throw new Error(initRequiredMessage(scope));
   const registry = resolveRegistryUrl(project, opts.registry, DEFAULT_REGISTRY);
   const names = pkgArg ? [parsePackageArg(pkgArg).name] : Object.keys(project.packages);
   if (names.length === 0) {
@@ -8943,9 +9084,10 @@ program2.command("update [package]").description("Update one installed package,
       ...project,
       packages: { ...project.packages, [name]: version }
     };
-    await writeProjectPackageJson(root, project);
+    await writeProjectPackageJson(configRoot, project);
     await installOnePackage({
-      projectRoot: root,
+      configRoot,
+      installRoot,
       registry,
       name,
       version,
@@ -8955,7 +9097,7 @@ program2.command("update [package]").description("Update one installed package,
     });
   }
 });
-program2.command("doctor").description("Check PATH, Node, registry, project config, and publish readiness").option("--registry <url>", "Registry base URL").option("--json", "Print machine-readable JSON").option("--publish", "Only show publish-readiness checks").action((opts) => runDoctor(opts));
+program2.command("doctor").description("Check PATH, Node, registry, project config, and publish readiness").option(GLOBAL_OPTION, GLOBAL_OPTION_DESC).option("--registry <url>", "Registry base URL").option("--json", "Print machine-readable JSON").option("--publish", "Only show publish-readiness checks").action((opts) => runDoctor(opts));
 program2.parseAsync(process.argv).catch((err) => {
   console.error(err.message);
   const message = err.message.toLowerCase();