@aipm-registry/cli 0.2.0 → 0.2.12

package/dist/bin.cjs

@@ -8015,6 +8015,10 @@ function registryFetchError(registry, cause) {
   }
   return new Error(`Registry request failed (${registry}): ${msg}`);
 }
+function registryAuthHeaders(token) {
+  if (!token) return void 0;
+  return { Authorization: `Bearer ${token}` };
+}
 async function registryFetch(url, registry, init) {
   const timeoutSignal = typeof AbortSignal !== "undefined" && "timeout" in AbortSignal ? AbortSignal.timeout(1e4) : void 0;
   try {
@@ -8023,6 +8027,12 @@ async function registryFetch(url, registry, init) {
     throw registryFetchError(registry, e);
   }
 }
+function privateInstallHint(name, status, token) {
+  if (status !== 404 || !name.startsWith("@") || token) {
+    return `Package not found: ${name} (${status})`;
+  }
+  return `Package not found: ${name} (${status}). If @org/pkg is private, set AIPM_TOKEN with an install token from the dashboard.`;
+}
 async function assertRegistryReachable(registry) {
   const base = registry.replace(/\/$/, "");
   const res = await registryFetch(`${base}/health`, base);
@@ -8053,19 +8063,19 @@ async function searchPackages(registry, query, limit = 20) {
   const data = await res.json();
   return data.packages ?? [];
 }
-async function fetchPackageMetadata(registry, name, version) {
+async function fetchPackageMetadata(registry, name, version, token) {
   const base = registry.replace(/\/$/, "");
   const url = `${base}/v1/packages/${encodePackageName(name)}/versions/${version}`;
-  const res = await registryFetch(url, base);
-  if (!res.ok) throw new Error(`Package not found: ${name}@${version} (${res.status})`);
+  const res = await registryFetch(url, base, { headers: registryAuthHeaders(token) });
+  if (!res.ok) throw new Error(privateInstallHint(`${name}@${version}`, res.status, token));
   const data = await res.json();
-  return { manifest: data.manifest, integrity: data.integrity };
+  return { manifest: data.manifest, integrity: data.integrity, deprecated: data.deprecated ?? null };
 }
-async function fetchPackageTarball(registry, name, version) {
+async function fetchPackageTarball(registry, name, version, token) {
   const base = registry.replace(/\/$/, "");
   const url = `${base}/v1/packages/${encodePackageName(name)}/versions/${version}/tarball`;
-  const res = await registryFetch(url, base);
-  if (!res.ok) throw new Error(`Tarball not found: ${name}@${version} (${res.status})`);
+  const res = await registryFetch(url, base, { headers: registryAuthHeaders(token) });
+  if (!res.ok) throw new Error(privateInstallHint(`${name}@${version}`, res.status, token));
   const ab = await res.arrayBuffer();
   return Buffer.from(ab);
 }
@@ -8163,11 +8173,17 @@ async function installOnePackage(options) {
   const configRoot = options.configRoot;
   const installRoot = options.installRoot ?? configRoot;
   await assertRegistryReachable(options.registry);
-  const { manifest, integrity: remoteIntegrity } = await fetchPackageMetadata(
+  const { manifest, integrity: remoteIntegrity, deprecated } = await fetchPackageMetadata(
     options.registry,
     options.name,
-    options.version
+    options.version,
+    options.token
   );
+  if (deprecated) {
+    console.warn(
+      `Warning: ${options.name} is deprecated${deprecated.message ? `: ${deprecated.message}` : ""}.`
+    );
+  }
   let explicitTarget = options.explicitTarget;
   let preferredTools = options.project.preferredTools;
   const { resolveInstallTools: resolveInstallTools2 } = await Promise.resolve().then(() => (init_dist4(), dist_exports));
@@ -8196,7 +8212,8 @@ async function installOnePackage(options) {
   const tarball = await fetchPackageTarball(
     options.registry,
     options.name,
-    options.version
+    options.version,
+    options.token
   );
   const skillMarkdown = await unpackTarballToBuffer(tarball, manifest.entry);
   const result = await installSkillPackage({
@@ -8543,6 +8560,26 @@ async function inferEntryFromSource(source, fallback) {
   if (entries.includes(fallback)) return fallback;
   return entries.find((entry) => entry.endsWith(".md")) ?? entries.find((entry) => entry.endsWith(".mdc")) ?? fallback;
 }
+async function copySourceIntoSkillRoot(source, root, sourceLabel) {
+  const sourceInfo = await (0, import_promises9.stat)(source);
+  await (0, import_promises9.mkdir)(root, { recursive: true });
+  if (sourceInfo.isDirectory()) {
+    const entries = await (0, import_promises9.readdir)(source);
+    for (const entry of entries) {
+      await (0, import_promises9.cp)((0, import_node_path11.join)(source, entry), (0, import_node_path11.join)(root, entry), {
+        recursive: true,
+        force: false,
+        errorOnExist: true
+      });
+    }
+    return;
+  }
+  if (sourceInfo.isFile()) {
+    await (0, import_promises9.cp)(source, (0, import_node_path11.join)(root, (0, import_node_path11.basename)(source)), { force: false, errorOnExist: true });
+    return;
+  }
+  throw new Error(`Unsupported source path: ${sourceLabel}`);
+}
 async function latestVersionForPackage(registry, name) {
   const packages = await searchPackages(registry, name, 20);
   const exact = packages.find((pkg) => pkg.name === name);
@@ -8694,10 +8731,9 @@ async function initSkill(opts) {
   if (!isValidScopeName(opts.name)) throw new Error("Invalid @scope/name");
   const root = opts.here ? (0, import_node_process5.cwd)() : (0, import_node_path11.resolve)((0, import_node_process5.cwd)(), opts.dir ?? skillFolderName(opts.name));
   const cdTarget = opts.here ? null : opts.dir ?? skillFolderName(opts.name);
-  await (0, import_promises9.mkdir)(root, { recursive: true });
   const source = opts.from ? (0, import_node_path11.resolve)(opts.from) : null;
   const entry = source ? await inferEntryFromSource(source, opts.entry) : opts.entry;
-  const manifest = {
+  const manifest = PackageManifestSchema.parse({
     schemaVersion: "0.1",
     name: opts.name,
     version: opts.version,
@@ -8706,17 +8742,11 @@ async function initSkill(opts) {
     entry,
     targets: parseTargetsFlag(opts.targets),
     license: "Apache-2.0"
-  };
-  PackageManifestSchema.parse(manifest);
+  });
   if (source) {
-    const sourceInfo = await (0, import_promises9.stat)(source);
-    if (sourceInfo.isDirectory()) {
-      await (0, import_promises9.cp)(source, root, { recursive: true, force: false, errorOnExist: true });
-    } else if (sourceInfo.isFile()) {
-      await (0, import_promises9.cp)(source, (0, import_node_path11.join)(root, (0, import_node_path11.basename)(source)), { force: false, errorOnExist: true });
-    } else {
-      throw new Error(`Unsupported source path: ${opts.from}`);
-    }
+    await copySourceIntoSkillRoot(source, root, source);
+  } else {
+    await (0, import_promises9.mkdir)(root, { recursive: true });
   }
   await writeStarterFile((0, import_node_path11.join)(root, "aipm.manifest.json"), JSON.stringify(manifest, null, 2) + "\n");
   if (!opts.from) {
@@ -8824,7 +8854,7 @@ program2.command("config").description("Show resolved AIPM CLI and project confi
   console.log(`Installed packages: ${data.installedPackages.length}`);
   console.log(`Publish guide: ${data.publishDoc}`);
 });
-program2.command("add <package>").description("Add and install a package @scope/name[@version]").option(GLOBAL_OPTION, GLOBAL_OPTION_DESC).option("--registry <url>", "Registry base URL").option("--target <tool>", "cursor, claude, or *").option("--ci", "Non-interactive; fail if prompt needed").action(async (pkgArg, opts) => {
+program2.command("add <package>").description("Add and install a package @scope/name[@version]").option(GLOBAL_OPTION, GLOBAL_OPTION_DESC).option("--registry <url>", "Registry base URL").option("--target <tool>", "cursor, claude, or *").option("--token <token>", "Install token for private packages").option("--ci", "Non-interactive; fail if prompt needed").action(async (pkgArg, opts) => {
   const { name, version: requestedVersion } = parsePackageArg(pkgArg);
   const scope = { global: opts.global };
   const configRoot = resolveConfigRoot(scope);
@@ -8847,7 +8877,8 @@ program2.command("add <package>").description("Add and install a package @scope/
     version: version.replace(/^\^/, ""),
     project,
     explicitTarget: parseTargetFlag(opts.target),
-    ci: opts.ci
+    ci: opts.ci,
+    token: opts.token ?? process.env.AIPM_TOKEN
   });
   if (!opts.ci && !program2.opts().quiet) {
     await notifyCliUpdateIfNeeded(CLI_VERSION);
@@ -8872,7 +8903,7 @@ program2.command("search [query]").description("Search public registry packages"
     console.log(`  ${meta}`);
   }
 });
-program2.command("install").description("Install all packages from aipm.package.json").option(GLOBAL_OPTION, GLOBAL_OPTION_DESC).option("--registry <url>", "Registry base URL").option("--target <tool>", "cursor, claude, or *").option("--ci", "Non-interactive").action(async (opts) => {
+program2.command("install").description("Install all packages from aipm.package.json").option(GLOBAL_OPTION, GLOBAL_OPTION_DESC).option("--registry <url>", "Registry base URL").option("--target <tool>", "cursor, claude, or *").option("--token <token>", "Install token for private packages").option("--ci", "Non-interactive").action(async (opts) => {
   const scope = { global: opts.global };
   const configRoot = resolveConfigRoot(scope);
   const installRoot = resolveInstallRoot(scope);
@@ -8889,7 +8920,8 @@ program2.command("install").description("Install all packages from aipm.package.
       version: version.replace(/^\^/, ""),
       project,
       explicitTarget: target,
-      ci: opts.ci
+      ci: opts.ci,
+      token: opts.token ?? process.env.AIPM_TOKEN
     });
   }
 });