@aipm-registry/cli 0.3.4 → 0.4.0

package/dist/bin.cjs

@@ -4237,7 +4237,7 @@ var init_manifest = __esm({
 });
 
 // ../../packages/schemas/dist/package-json.js
-var scopedPackageKey, ProjectPackageJsonSchema;
+var scopedPackageKey, promptAliasKey, ProjectPackageJsonSchema;
 var init_package_json = __esm({
   "../../packages/schemas/dist/package-json.js"() {
     "use strict";
@@ -4245,17 +4245,19 @@ var init_package_json = __esm({
     init_scope_name();
     init_manifest();
     scopedPackageKey = external_exports.string().regex(SCOPE_NAME_REGEX);
+    promptAliasKey = external_exports.string().trim().min(1).max(120);
     ProjectPackageJsonSchema = external_exports.object({
       schemaVersion: external_exports.literal("0.1"),
       registry: external_exports.string().url(),
       preferredTools: external_exports.array(AiToolSchema).optional(),
-      packages: external_exports.record(scopedPackageKey, external_exports.string().min(1))
+      packages: external_exports.record(scopedPackageKey, external_exports.string().min(1)),
+      prompts: external_exports.record(promptAliasKey, external_exports.string().url()).default({})
     });
   }
 });
 
 // ../../packages/schemas/dist/lockfile.js
-var scopedPackageKey2, InstalledPathsSchema, LockfilePackageEntrySchema, LockfileSchema;
+var scopedPackageKey2, InstalledPathsSchema, LockfilePromptEntrySchema, LockfilePackageEntrySchema, LockfileSchema;
 var init_lockfile = __esm({
   "../../packages/schemas/dist/lockfile.js"() {
     "use strict";
@@ -4264,6 +4266,15 @@ var init_lockfile = __esm({
     init_manifest();
     scopedPackageKey2 = external_exports.string().regex(SCOPE_NAME_REGEX);
     InstalledPathsSchema = external_exports.record(AiToolSchema, external_exports.array(external_exports.string()));
+    LockfilePromptEntrySchema = external_exports.object({
+      id: external_exports.string().min(1),
+      url: external_exports.string().url(),
+      publisher: external_exports.string().min(1),
+      slug: external_exports.string().min(1),
+      contentHash: external_exports.string().min(1),
+      updatedAt: external_exports.string().min(1),
+      installedPath: external_exports.string().min(1)
+    });
     LockfilePackageEntrySchema = external_exports.object({
       version: external_exports.string(),
       integrity: external_exports.string(),
@@ -4283,7 +4294,8 @@ var init_lockfile = __esm({
     });
     LockfileSchema = external_exports.object({
       schemaVersion: external_exports.literal("0.1"),
-      packages: external_exports.record(scopedPackageKey2, LockfilePackageEntrySchema)
+      packages: external_exports.record(scopedPackageKey2, LockfilePackageEntrySchema),
+      prompts: external_exports.record(external_exports.string().min(1), LockfilePromptEntrySchema).default({})
     });
   }
 });
@@ -7826,11 +7838,11 @@ function useColor() {
 var program = new Command();
 
 // src/bin.ts
-var import_node_crypto2 = require("node:crypto");
+var import_node_crypto3 = require("node:crypto");
 var import_node_child_process4 = require("node:child_process");
 var import_node_http = require("node:http");
-var import_promises10 = require("node:fs/promises");
-var import_node_path13 = require("node:path");
+var import_promises11 = require("node:fs/promises");
+var import_node_path14 = require("node:path");
 var import_node_process5 = require("node:process");
 init_dist();
 init_dist4();
@@ -8065,12 +8077,12 @@ async function packStagedFiles(root) {
   }
 }
 async function unpackTarballToDirectory(tarball) {
-  const { mkdtemp: mkdtemp2, writeFile: writeFile7 } = await import("node:fs/promises");
-  const { join: join13 } = await import("node:path");
+  const { mkdtemp: mkdtemp2, writeFile: writeFile8 } = await import("node:fs/promises");
+  const { join: join14 } = await import("node:path");
   const { tmpdir: tmpdir2 } = await import("node:os");
-  const tempDir = await mkdtemp2(join13(tmpdir2(), "aipm-install-"));
-  const tgzPath = join13(tempDir, "pkg.tgz");
-  await writeFile7(tgzPath, tarball);
+  const tempDir = await mkdtemp2(join14(tmpdir2(), "aipm-install-"));
+  const tgzPath = join14(tempDir, "pkg.tgz");
+  await writeFile8(tgzPath, tarball);
   await execFileAsync("tar", ["-xzf", tgzPath, "-C", tempDir]);
   return tempDir;
 }
@@ -8229,6 +8241,41 @@ async function recordPackageInstall(registry, name, token) {
   }
   return res.json();
 }
+async function fetchPromptDetail(registry, publisher, slug) {
+  const base = registry.replace(/\/$/, "");
+  const url = `${base}/v1/prompts/${encodeURIComponent(publisher)}/${encodeURIComponent(slug)}`;
+  const res = await registryFetch(url, base);
+  if (!res.ok) throw new Error(`Prompt not found: @${publisher}/${slug} (${res.status})`);
+  return res.json();
+}
+async function recordPromptCopy(registry, publisher, slug) {
+  const base = registry.replace(/\/$/, "");
+  const url = `${base}/v1/prompts/${encodeURIComponent(publisher)}/${encodeURIComponent(slug)}/copy`;
+  const res = await registryFetch(url, base, { method: "POST" });
+  if (!res.ok) throw new Error(`Prompt copy recording failed: ${res.status}`);
+}
+async function publishPrompt(registry, input2, accessToken, sampleImage) {
+  const base = registry.replace(/\/$/, "");
+  const form = new FormData();
+  form.append("data", JSON.stringify(input2));
+  if (sampleImage) {
+    form.append(
+      "sampleImage",
+      new Blob([sampleImage.data], { type: sampleImage.contentType }),
+      sampleImage.filename
+    );
+  }
+  const res = await registryFetch(`${base}/v1/prompts`, base, {
+    method: "POST",
+    headers: registryAuthHeaders(accessToken),
+    body: form
+  });
+  if (!res.ok) {
+    const error = await res.json().catch(() => ({}));
+    throw new Error(error.error ?? `Prompt publish failed: ${res.status}`);
+  }
+  return res.json();
+}
 
 // src/auth-store.ts
 var import_promises6 = require("node:fs/promises");
@@ -8321,6 +8368,12 @@ function upsertLockEntry(lock, name, entry) {
     packages: { ...lock.packages, [name]: entry }
   };
 }
+function upsertPromptLockEntry(lock, name, entry) {
+  return {
+    ...lock,
+    prompts: { ...lock.prompts, [name]: entry }
+  };
+}
 function resolveRegistryUrl(project, flag, fallback) {
   const fromEnv = process.env.AIPM_REGISTRY_URL ?? process.env.AIPM_REGISTRY;
   if (flag) return flag.replace(/\/$/, "");
@@ -8540,7 +8593,8 @@ async function installOnePackage(options) {
     });
     const lock = await readLockfile(configRoot) ?? {
       schemaVersion: "0.1",
-      packages: {}
+      packages: {},
+      prompts: {}
     };
     const installed = {};
     for (const tool of result.resolvedTools) {
@@ -8738,11 +8792,181 @@ async function runDoctor(options) {
   }
 }
 
+// src/prompt-install.ts
+var import_node_crypto2 = require("node:crypto");
+var import_promises10 = require("node:fs/promises");
+var import_node_path12 = require("node:path");
+var PROMPT_SITE_ORIGIN = "https://www.aipm-registry.com";
+function parsePromptUrl(value) {
+  let url;
+  try {
+    url = new URL(value);
+  } catch {
+    return null;
+  }
+  if (url.origin !== PROMPT_SITE_ORIGIN) return null;
+  const parts = url.pathname.split("/").filter(Boolean);
+  if (parts.length !== 3 || parts[0] !== "prompts") return null;
+  const publisher = decodeURIComponent(parts[1] ?? "").trim().toLowerCase();
+  const slug = decodeURIComponent(parts[2] ?? "").trim().toLowerCase();
+  if (!publisher || !slug || !/^[a-z0-9][a-z0-9-]*$/.test(publisher) || !/^[a-z0-9][a-z0-9-]*$/.test(slug)) {
+    return null;
+  }
+  return {
+    url: `${PROMPT_SITE_ORIGIN}/prompts/${encodeURIComponent(publisher)}/${encodeURIComponent(slug)}`,
+    publisher,
+    slug,
+    alias: slug
+  };
+}
+function promptDirectory(configRoot) {
+  return (0, import_node_path12.basename)(configRoot) === ".aipm" ? (0, import_node_path12.join)(configRoot, "prompts") : (0, import_node_path12.join)(configRoot, ".aipm", "prompts");
+}
+function promptSnapshotPath(configRoot, reference) {
+  return (0, import_node_path12.join)(promptDirectory(configRoot), `${reference.publisher}--${reference.slug}.md`);
+}
+function canonicalPromptContent(prompt) {
+  return JSON.stringify({
+    promptText: prompt.promptText,
+    variables: prompt.variables,
+    exampleInput: prompt.exampleInput,
+    exampleOutput: prompt.exampleOutput,
+    usageNotes: prompt.usageNotes,
+    license: prompt.license
+  });
+}
+function promptContentHash(prompt) {
+  return (0, import_node_crypto2.createHash)("sha256").update(canonicalPromptContent(prompt)).digest("hex");
+}
+function section(title, value) {
+  return value?.trim() ? `
+## ${title}
+
+${value.trim()}
+` : "";
+}
+function renderPromptMarkdown(prompt, sourceUrl) {
+  const variables = prompt.variables.length ? `
+## Variables
+
+${prompt.variables.map(
+    (variable) => `- \`{{${variable.name}}}\`${variable.required ? " \u2014 required" : " \u2014 optional"}: ${variable.description}${variable.example ? ` Example: ${variable.example}` : ""}`
+  ).join("\n")}
+` : "";
+  const publisher = prompt.publisher.org?.name ?? prompt.publisher.user.name ?? `@${prompt.publisher.scope}`;
+  return [
+    `# ${prompt.title}`,
+    "",
+    prompt.summary,
+    "",
+    `- Source: ${sourceUrl}`,
+    `- Publisher: ${publisher} (@${prompt.publisher.scope})`,
+    `- Category: ${prompt.category}`,
+    `- Inputs: ${prompt.inputTypes.join(", ") || "none"}`,
+    `- Outputs: ${prompt.outputTypes.join(", ") || "none"}`,
+    `- Effort: ${prompt.effort}`,
+    `- Language: ${prompt.language}`,
+    `- License: ${prompt.license}`,
+    `- Updated: ${prompt.updatedAt}`,
+    "",
+    "## Prompt",
+    "",
+    prompt.promptText.trim(),
+    variables,
+    section("Example input", prompt.exampleInput),
+    section("Example output", prompt.exampleOutput),
+    section("Usage notes", prompt.usageNotes)
+  ].join("\n").replace(/\n{3,}/g, "\n\n").trimEnd().concat("\n");
+}
+function emptyLock() {
+  return { schemaVersion: "0.1", packages: {}, prompts: {} };
+}
+function installedRelativePath(configRoot, absolutePath) {
+  return (0, import_node_path12.relative)(configRoot, absolutePath).split("\\").join("/");
+}
+async function installTrackedPrompt(input2) {
+  const prompt = await fetchPromptDetail(
+    input2.registry,
+    input2.reference.publisher,
+    input2.reference.slug
+  );
+  const canonicalReference = {
+    ...input2.reference,
+    publisher: prompt.publisher.scope,
+    slug: prompt.slug,
+    url: `${PROMPT_SITE_ORIGIN}/prompts/${encodeURIComponent(prompt.publisher.scope)}/${encodeURIComponent(prompt.slug)}`
+  };
+  const outputPath = promptSnapshotPath(input2.configRoot, canonicalReference);
+  const contentHash = promptContentHash(prompt);
+  const lock = await readLockfile(input2.configRoot) ?? emptyLock();
+  const existing = lock.prompts[input2.reference.alias];
+  const fileExists = Boolean(await (0, import_promises10.stat)(outputPath).catch(() => null));
+  const changed = !existing || existing.contentHash !== contentHash || !fileExists;
+  if (!input2.updateOnly || changed) {
+    await (0, import_promises10.mkdir)((0, import_node_path12.dirname)(outputPath), { recursive: true });
+    await (0, import_promises10.writeFile)(outputPath, renderPromptMarkdown(prompt, canonicalReference.url), "utf8");
+  }
+  if (input2.track) {
+    const currentUrl = input2.project.prompts[input2.reference.alias];
+    if (currentUrl && currentUrl !== canonicalReference.url) {
+      throw new Error(
+        `Prompt alias "${input2.reference.alias}" already tracks ${currentUrl}. Remove it first or use a unique slug.`
+      );
+    }
+    await writeProjectPackageJson(input2.configRoot, {
+      ...input2.project,
+      prompts: { ...input2.project.prompts, [input2.reference.alias]: canonicalReference.url }
+    });
+  }
+  const entry = {
+    id: prompt.id,
+    url: canonicalReference.url,
+    publisher: canonicalReference.publisher,
+    slug: canonicalReference.slug,
+    contentHash,
+    updatedAt: prompt.updatedAt,
+    installedPath: installedRelativePath(input2.configRoot, outputPath)
+  };
+  await writeLockfile(input2.configRoot, upsertPromptLockEntry(lock, input2.reference.alias, entry));
+  if (input2.recordCopy) {
+    await recordPromptCopy(input2.registry, canonicalReference.publisher, canonicalReference.slug).catch(
+      () => void 0
+    );
+  }
+  return { changed, path: outputPath, prompt };
+}
+function resolveTrackedPrompt(project, value) {
+  const direct = parsePromptUrl(value);
+  if (direct) {
+    const match = Object.entries(project.prompts).find(([, url2]) => url2 === direct.url);
+    return match ? { ...direct, alias: match[0] } : direct;
+  }
+  const url = project.prompts[value];
+  const parsed = url ? parsePromptUrl(url) : null;
+  return parsed ? { ...parsed, alias: value } : null;
+}
+async function readInstalledPrompt(configRoot, entry) {
+  return (0, import_promises10.readFile)((0, import_node_path12.join)(configRoot, entry.installedPath), "utf8");
+}
+async function removeTrackedPrompt(input2) {
+  const lock = await readLockfile(input2.configRoot);
+  const entry = lock?.prompts[input2.reference.alias];
+  if (entry) await (0, import_promises10.rm)((0, import_node_path12.join)(input2.configRoot, entry.installedPath), { force: true });
+  const prompts = { ...input2.project.prompts };
+  delete prompts[input2.reference.alias];
+  await writeProjectPackageJson(input2.configRoot, { ...input2.project, prompts });
+  if (lock) {
+    const lockedPrompts = { ...lock.prompts };
+    delete lockedPrompts[input2.reference.alias];
+    await writeLockfile(input2.configRoot, { ...lock, prompts: lockedPrompts });
+  }
+}
+
 // src/version.ts
 var import_node_fs2 = require("node:fs");
-var import_node_path12 = require("node:path");
+var import_node_path13 = require("node:path");
 function getCliVersion() {
-  const pkgPath = (0, import_node_path12.join)(__dirname, "..", "package.json");
+  const pkgPath = (0, import_node_path13.join)(__dirname, "..", "package.json");
   const pkg = JSON.parse((0, import_node_fs2.readFileSync)(pkgPath, "utf8"));
   return pkg.version;
 }
@@ -8831,11 +9055,14 @@ async function notifyCliUpdateIfNeeded(currentVersion, options) {
 var CLI_VERSION = getCliVersion();
 var program2 = new Command();
 var DEFAULT_REGISTRY = "https://api.aipm-registry.com";
-var SITE_URL = "https://aipm-registry.com";
-var PUBLISH_DOC_URL = "https://aipm-registry.com/publish";
-var DASHBOARD_URL = "https://aipm-registry.com/dashboard";
+var SITE_URL = "https://www.aipm-registry.com";
+var PUBLISH_DOC_URL = `${SITE_URL}/publish`;
+var DASHBOARD_URL = `${SITE_URL}/dashboard`;
 var GLOBAL_OPTION = "-g, --global";
 var GLOBAL_OPTION_DESC = "Use global config (~/.aipm) and install skills under your home directory";
+var normalizedArgv = process.argv.map(
+  (arg) => arg === "-prompt" ? "--prompt" : arg === "-skill" ? "--skill" : arg
+);
 program2.name("aipm").description("AI package manager").enablePositionalOptions().version(CLI_VERSION, "-v, --version", "output the current version").option("--verbose", "Print extra diagnostic output").option("--quiet", "Reduce non-essential output").addHelpText(
   "after",
   `
@@ -8863,6 +9090,10 @@ function packagePageUrl(packageName, version) {
   const [scope, name] = packageName.replace(/^@/, "").split("/");
   return `${SITE_URL}/packages/${encodeURIComponent(scope ?? "")}/${encodeURIComponent(name ?? "")}/${encodeURIComponent(version)}`;
 }
+function packageBadgeMarkdown(packageName, version) {
+  const pageUrl = packagePageUrl(packageName, version);
+  return `[![Install with AIPM](${SITE_URL}/install-with-aipm.svg)](${pageUrl})`;
+}
 function parsePackageArg(value) {
   const match = value.match(/^(@[^@]+)(?:@(.+))?$/);
   if (!match) throw new Error("Package must be @scope/name or @scope/name@version");
@@ -8877,23 +9108,23 @@ function skillFolderName(name) {
   return folder;
 }
 async function writeStarterFile(path2, content) {
-  await (0, import_promises10.writeFile)(path2, content, { encoding: "utf8", flag: "wx" });
+  await (0, import_promises11.writeFile)(path2, content, { encoding: "utf8", flag: "wx" });
 }
 async function inferEntryFromSource(source, fallback) {
-  const sourceInfo = await (0, import_promises10.stat)(source);
-  if (sourceInfo.isFile()) return (0, import_node_path13.basename)(source);
+  const sourceInfo = await (0, import_promises11.stat)(source);
+  if (sourceInfo.isFile()) return (0, import_node_path14.basename)(source);
   if (!sourceInfo.isDirectory()) return fallback;
-  const entries = await (0, import_promises10.readdir)(source);
+  const entries = await (0, import_promises11.readdir)(source);
   if (entries.includes(fallback)) return fallback;
   return entries.find((entry) => entry.endsWith(".md")) ?? entries.find((entry) => entry.endsWith(".mdc")) ?? fallback;
 }
 async function copySourceIntoSkillRoot(source, root, sourceLabel) {
-  const sourceInfo = await (0, import_promises10.stat)(source);
-  await (0, import_promises10.mkdir)(root, { recursive: true });
+  const sourceInfo = await (0, import_promises11.stat)(source);
+  await (0, import_promises11.mkdir)(root, { recursive: true });
   if (sourceInfo.isDirectory()) {
-    const entries = await (0, import_promises10.readdir)(source);
+    const entries = await (0, import_promises11.readdir)(source);
     for (const entry of entries) {
-      await (0, import_promises10.cp)((0, import_node_path13.join)(source, entry), (0, import_node_path13.join)(root, entry), {
+      await (0, import_promises11.cp)((0, import_node_path14.join)(source, entry), (0, import_node_path14.join)(root, entry), {
         recursive: true,
         force: false,
         errorOnExist: true
@@ -8902,7 +9133,7 @@ async function copySourceIntoSkillRoot(source, root, sourceLabel) {
     return;
   }
   if (sourceInfo.isFile()) {
-    await (0, import_promises10.cp)(source, (0, import_node_path13.join)(root, (0, import_node_path13.basename)(source)), { force: false, errorOnExist: true });
+    await (0, import_promises11.cp)(source, (0, import_node_path14.join)(root, (0, import_node_path14.basename)(source)), { force: false, errorOnExist: true });
     return;
   }
   throw new Error(`Unsupported source path: ${sourceLabel}`);
@@ -8936,11 +9167,11 @@ function packageDashboardUrl(name) {
   return `${DASHBOARD_URL}/packages/${name.replace(/^@/, "")}`;
 }
 function helperRootFromTrackedPath(path2) {
-  const parts = path2.split(import_node_path13.sep).filter(Boolean);
+  const parts = path2.split(import_node_path14.sep).filter(Boolean);
   const helpersIndex = parts.lastIndexOf("helpers");
   if (helpersIndex === -1 || parts.length <= helpersIndex + 2) return null;
-  const prefix = path2.startsWith(import_node_path13.sep) ? import_node_path13.sep : "";
-  return (0, import_node_path13.join)(prefix, ...parts.slice(0, helpersIndex + 3));
+  const prefix = path2.startsWith(import_node_path14.sep) ? import_node_path14.sep : "";
+  return (0, import_node_path14.join)(prefix, ...parts.slice(0, helpersIndex + 3));
 }
 async function showInstalledPrompt(configRoot, packageArg) {
   const { name } = parsePackageArg(packageArg);
@@ -8953,7 +9184,7 @@ async function showInstalledPrompt(configRoot, packageArg) {
   if (entry.postInstall.status === "cleaned") {
     throw new Error(`Setup helper files were cleaned for ${name}. Reinstall the package to restore them.`);
   }
-  const content = await (0, import_promises10.readFile)(entry.postInstall.promptFile, "utf8").catch(() => {
+  const content = await (0, import_promises11.readFile)(entry.postInstall.promptFile, "utf8").catch(() => {
     throw new Error(`Setup prompt file is missing: ${entry.postInstall?.promptFile}`);
   });
   console.log(`Prompt file: ${entry.postInstall.promptFile}`);
@@ -8986,9 +9217,9 @@ async function cleanupInstalledHelpers(options) {
     entry.installedAssets.helper.map((path2) => helperRootFromTrackedPath(path2)).filter((path2) => Boolean(path2))
   );
   if (roots.size > 0) {
-    for (const root of roots) await (0, import_promises10.rm)(root, { recursive: true, force: true });
+    for (const root of roots) await (0, import_promises11.rm)(root, { recursive: true, force: true });
   } else {
-    for (const helperPath of entry.installedAssets.helper) await (0, import_promises10.rm)(helperPath, { force: true });
+    for (const helperPath of entry.installedAssets.helper) await (0, import_promises11.rm)(helperPath, { force: true });
   }
   await writeLockfile(options.configRoot, {
     ...lock,
@@ -9011,10 +9242,10 @@ async function openUrl(url) {
   console.log(`Open: ${url}`);
 }
 function randomBase64Url(bytes = 32) {
-  return (0, import_node_crypto2.randomBytes)(bytes).toString("base64url");
+  return (0, import_node_crypto3.randomBytes)(bytes).toString("base64url");
 }
 function sha256Base64Url(value) {
-  return (0, import_node_crypto2.createHash)("sha256").update(value).digest("base64url");
+  return (0, import_node_crypto3.createHash)("sha256").update(value).digest("base64url");
 }
 function deviceName() {
   return `AIPM CLI on ${process.platform}`;
@@ -9282,9 +9513,9 @@ function buildStarterQualityMetadata(options) {
 }
 async function initSkill(opts) {
   if (!isValidScopeName(opts.name)) throw new Error("Invalid @scope/name");
-  const root = opts.here ? (0, import_node_process5.cwd)() : (0, import_node_path13.resolve)((0, import_node_process5.cwd)(), opts.dir ?? skillFolderName(opts.name));
+  const root = opts.here ? (0, import_node_process5.cwd)() : (0, import_node_path14.resolve)((0, import_node_process5.cwd)(), opts.dir ?? skillFolderName(opts.name));
   const cdTarget = opts.here ? null : opts.dir ?? skillFolderName(opts.name);
-  const source = opts.from ? (0, import_node_path13.resolve)(opts.from) : null;
+  const source = opts.from ? (0, import_node_path14.resolve)(opts.from) : null;
   const entry = source ? await inferEntryFromSource(source, opts.entry) : opts.entry;
   const template = parseSkillTemplate(opts.template ?? "blank");
   const manifest = PackageManifestSchema.parse({
@@ -9305,17 +9536,17 @@ async function initSkill(opts) {
   if (source) {
     await copySourceIntoSkillRoot(source, root, source);
   } else {
-    await (0, import_promises10.mkdir)(root, { recursive: true });
+    await (0, import_promises11.mkdir)(root, { recursive: true });
   }
-  await writeStarterFile((0, import_node_path13.join)(root, "aipm.manifest.json"), JSON.stringify(manifest, null, 2) + "\n");
+  await writeStarterFile((0, import_node_path14.join)(root, "aipm.manifest.json"), JSON.stringify(manifest, null, 2) + "\n");
   if (!opts.from) {
     await writeStarterFile(
-      (0, import_node_path13.join)(root, entry),
+      (0, import_node_path14.join)(root, entry),
       SKILL_TEMPLATES[template](opts.name)
     );
   }
   await writeStarterFile(
-    (0, import_node_path13.join)(root, ".aipmignore"),
+    (0, import_node_path14.join)(root, ".aipmignore"),
     [
       "# Files that should never be published with this skill",
       ".env*",
@@ -9333,7 +9564,7 @@ async function initSkill(opts) {
       ""
     ].join("\n")
   );
-  await (0, import_promises10.mkdir)((0, import_node_path13.join)(root, ".aipm"), { recursive: true });
+  await (0, import_promises11.mkdir)((0, import_node_path14.join)(root, ".aipm"), { recursive: true });
   console.log(`Created ${opts.name} skill folder: ${root}`);
   printPublishGuide(
     opts.from ? `Copied ${opts.from} into ${root} and created aipm.manifest.json, .aipmignore, and the local publish state folder.` : `Created ${root} with aipm.manifest.json, ${entry}, .aipmignore, and the local publish state folder.`,
@@ -9348,7 +9579,7 @@ program2.command("init").description("Create aipm.package.json in the current pr
     console.log(`aipm.package.json already exists (${scopeLabel(scope)}).`);
     return;
   }
-  if (scope.global) await (0, import_promises10.mkdir)(configRoot, { recursive: true });
+  if (scope.global) await (0, import_promises11.mkdir)(configRoot, { recursive: true });
   const installRoot = resolveInstallRoot(scope);
   const detected = await detectToolsInProject(installRoot);
   const parsedTarget = parseTargetFlag(opts.target);
@@ -9362,7 +9593,8 @@ program2.command("init").description("Create aipm.package.json in the current pr
     schemaVersion: "0.1",
     registry,
     preferredTools: preferredTools.length ? preferredTools : void 0,
-    packages: {}
+    packages: {},
+    prompts: {}
   });
   console.log(`Created aipm.package.json (${scopeLabel(scope)}, registry: ${registry})`);
 });
@@ -9450,14 +9682,27 @@ program2.command("config").description("Show resolved AIPM CLI and project confi
   console.log(`Auth file: ${data.authFile}`);
   console.log(`Publish guide: ${data.publishDoc}`);
 });
-program2.command("add <package>").description("Add and install a package @scope/name[@version]").option(GLOBAL_OPTION, GLOBAL_OPTION_DESC).option("--registry <url>", "Registry base URL").option("--target <tool>", "cursor, claude, or *").option("--token <token>", "Install token for private packages").option("--ci", "Non-interactive; fail if prompt needed").action(async (pkgArg, opts) => {
-  const { name, version: requestedVersion } = parsePackageArg(pkgArg);
+program2.command("add <package-or-prompt>").description("Add a skill package or an AIPM prompt URL").option(GLOBAL_OPTION, GLOBAL_OPTION_DESC).option("--registry <url>", "Registry base URL").option("--target <tool>", "cursor, claude, or *").option("--token <token>", "Install token for private packages").option("--ci", "Non-interactive; fail if prompt needed").action(async (pkgArg, opts) => {
   const scope = { global: opts.global };
   const configRoot = resolveConfigRoot(scope);
   const installRoot = resolveInstallRoot(scope);
   let project = await readProjectPackageJson(configRoot);
   if (!project) throw new Error(initRequiredMessage(scope));
   const registry = resolveRegistryUrl(project, opts.registry, DEFAULT_REGISTRY);
+  const promptReference = parsePromptUrl(pkgArg);
+  if (promptReference) {
+    const result = await installTrackedPrompt({
+      configRoot,
+      registry,
+      project,
+      reference: promptReference,
+      track: true,
+      recordCopy: true
+    });
+    console.log(`Installed prompt ${result.prompt.title} \u2192 ${result.path}`);
+    return;
+  }
+  const { name, version: requestedVersion } = parsePackageArg(pkgArg);
   const token = await tokenForRead(registry, opts.token);
   const version = requestedVersion ?? project.packages[name] ?? await latestVersionForPackage(registry, name, token);
   if (!version) throw new Error("Specify version: aipm add @scope/pkg@1.0.0");
@@ -9531,10 +9776,75 @@ program2.command("install").description("Install all packages from aipm.package.
       token
     });
   }
+  for (const [alias, url] of Object.entries(project.prompts)) {
+    const reference = parsePromptUrl(url);
+    if (!reference) throw new Error(`Invalid tracked prompt URL for ${alias}: ${url}`);
+    const result = await installTrackedPrompt({
+      configRoot,
+      registry,
+      project,
+      reference: { ...reference, alias },
+      track: false
+    });
+    console.log(`Restored prompt ${result.prompt.title} \u2192 ${result.path}`);
+  }
+});
+program2.command("show <package-or-prompt>").description("Show an installed prompt snapshot or tracked skill details").option(GLOBAL_OPTION, GLOBAL_OPTION_DESC).action(async (value, opts) => {
+  const configRoot = resolveConfigRoot({ global: opts.global });
+  const project = await readProjectPackageJson(configRoot);
+  if (!project) throw new Error(initRequiredMessage({ global: opts.global }));
+  const reference = resolveTrackedPrompt(project, value);
+  if (reference && project.prompts[reference.alias] === reference.url) {
+    const lock2 = await readLockfile(configRoot);
+    const entry2 = lock2?.prompts[reference.alias];
+    if (!entry2) throw new Error(`Prompt is not installed: ${reference.url}. Run aipm install.`);
+    console.log(await readInstalledPrompt(configRoot, entry2));
+    return;
+  }
+  const { name } = parsePackageArg(value);
+  const lock = await readLockfile(configRoot);
+  const entry = lock?.packages[name];
+  if (!entry) throw new Error(`Package is not installed: ${name}`);
+  console.log(`${name}@${entry.version} [${entry.resolvedTools.join(", ")}]`);
 });
 program2.command("show-prompt <package>").description("Show the manual setup prompt installed with a package").option(GLOBAL_OPTION, GLOBAL_OPTION_DESC).action(async (pkgArg, opts) => {
   await showInstalledPrompt(resolveConfigRoot({ global: opts.global }), pkgArg);
 });
+function promptImageContentType(path2) {
+  const extension = (0, import_node_path14.extname)(path2).toLowerCase();
+  if (extension === ".png") return "image/png";
+  if (extension === ".jpg" || extension === ".jpeg") return "image/jpeg";
+  if (extension === ".webp") return "image/webp";
+  throw new Error(`Unsupported prompt sample image: ${path2}`);
+}
+var promptCommand = program2.command("prompt").description("Publish prompt listings from structured JSON");
+promptCommand.command("publish <file>").description("Publish one prompt or a batch of prompts from JSON").option("--registry <url>", "Registry API base URL").option("--yes", "Confirm public publishing without an extra reminder").action(async (file, opts) => {
+  const registry = registryFromEnvOrDefault(opts.registry);
+  const accessToken = await authTokenForRegistry(registry, { throwOnFailure: true });
+  if (!accessToken) throw new Error("Run aipm login before publishing prompts.");
+  const absoluteFile = (0, import_node_path14.resolve)(file);
+  const parsed = JSON.parse(await (0, import_promises11.readFile)(absoluteFile, "utf8"));
+  const rows = Array.isArray(parsed) ? parsed : "prompts" in parsed ? parsed.prompts : [parsed];
+  if (rows.length === 0) throw new Error("Prompt publish file contains no prompts.");
+  if (!opts.yes) {
+    console.log(`Reminder: this will publish ${rows.length} public prompt${rows.length === 1 ? "" : "s"}.`);
+    console.log("Use --yes to skip this reminder in automation.");
+  }
+  for (const row of rows) {
+    const { sampleImagePath, ...input2 } = row;
+    let sampleImage;
+    if (sampleImagePath) {
+      const imagePath = (0, import_node_path14.resolve)((0, import_node_path14.dirname)(absoluteFile), sampleImagePath);
+      sampleImage = {
+        data: await (0, import_promises11.readFile)(imagePath),
+        filename: (0, import_node_path14.basename)(imagePath),
+        contentType: promptImageContentType(imagePath)
+      };
+    }
+    const saved = await publishPrompt(registry, input2, accessToken, sampleImage);
+    console.log(`Published ${saved.title} \u2192 ${SITE_URL}${saved.path}`);
+  }
+});
 program2.command("cleanup <package>").description("Delete temporary helper files installed with a package").option(GLOBAL_OPTION, GLOBAL_OPTION_DESC).option("--yes", "Delete helper files without asking for confirmation").action(async (pkgArg, opts) => {
   await cleanupInstalledHelpers({
     configRoot: resolveConfigRoot({ global: opts.global }),
@@ -9550,8 +9860,8 @@ var publish = program2.command("publish [dir]").description("Stage, validate, an
     publish.help();
     return;
   }
-  const abs = (0, import_node_path13.resolve)(dir);
-  const manifestRaw = await (0, import_promises10.readFile)((0, import_node_path13.join)(abs, "aipm.manifest.json"), "utf8");
+  const abs = (0, import_node_path14.resolve)(dir);
+  const manifestRaw = await (0, import_promises11.readFile)((0, import_node_path14.join)(abs, "aipm.manifest.json"), "utf8");
   const manifest = PackageManifestSchema.parse(JSON.parse(manifestRaw));
   const tarball = await packDirectory(abs);
   const registry = registryFromEnvOrDefault(opts.registry);
@@ -9559,6 +9869,7 @@ var publish = program2.command("publish [dir]").description("Stage, validate, an
   console.log(`Published ${manifest.name}@${result.version}`);
   console.log(`View: ${packagePageUrl(manifest.name, result.version)}`);
   console.log(`Install: aipm add ${manifest.name}@${result.version} --target ${manifest.targets[0]} --ci`);
+  console.log(`README badge: ${packageBadgeMarkdown(manifest.name, result.version)}`);
   printPublishGuide(
     `Published ${manifest.name}@${result.version} from ${abs}.`,
     "Share the install command or open the package page to confirm the listing."
@@ -9684,28 +9995,46 @@ publish.command("push").description("Publish staged files").option("--registry <
   console.log(`Published ${manifest.name}@${result.version}`);
   console.log(`View: ${packagePageUrl(manifest.name, result.version)}`);
   console.log(`Install: aipm add ${manifest.name}@${result.version} --target ${manifest.targets[0]} --ci`);
+  console.log(`README badge: ${packageBadgeMarkdown(manifest.name, result.version)}`);
   printPublishGuide(
     `Published ${manifest.name}@${result.version} to ${registry}.`,
     "Open the registry page, test the install command in a clean project, and share the package link."
   );
 });
-program2.command("list").description("List packages from aipm-lock.json").option(GLOBAL_OPTION, GLOBAL_OPTION_DESC).action(async (opts) => {
+program2.command("list").description("List installed skills and prompts from aipm-lock.json").option(GLOBAL_OPTION, GLOBAL_OPTION_DESC).option("-p, --prompt", "List prompts only").option("-s, --skill", "List skills only").action(async (opts) => {
   const configRoot = resolveConfigRoot({ global: opts.global });
   const lock = await readLockfile(configRoot);
-  if (!lock || Object.keys(lock.packages).length === 0) {
-    console.log("No packages installed.");
+  const showSkills = !opts.prompt || Boolean(opts.skill);
+  const showPrompts = !opts.skill || Boolean(opts.prompt);
+  const skillRows = lock ? Object.entries(lock.packages) : [];
+  const promptRows = lock ? Object.entries(lock.prompts) : [];
+  if ((!showSkills || skillRows.length === 0) && (!showPrompts || promptRows.length === 0)) {
+    console.log(opts.prompt && !opts.skill ? "No prompts installed." : opts.skill && !opts.prompt ? "No skills installed." : "No skills or prompts installed.");
     return;
   }
-  for (const [name, entry] of Object.entries(lock.packages)) {
-    console.log(`${name}@${entry.version} [${entry.resolvedTools.join(", ")}]`);
+  if (showSkills) {
+    for (const [name, entry] of skillRows) {
+      console.log(`skill  ${name}@${entry.version} [${entry.resolvedTools.join(", ")}]`);
+    }
+  }
+  if (showPrompts) {
+    for (const [name, entry] of promptRows) {
+      console.log(`prompt  ${name}  ${entry.url}  ${entry.installedPath}`);
+    }
   }
 });
-program2.command("remove <package>").alias("rm").description("Remove a package from aipm.package.json and aipm-lock.json").option(GLOBAL_OPTION, GLOBAL_OPTION_DESC).action(async (pkgArg, opts) => {
-  const { name } = parsePackageArg(pkgArg);
+program2.command("remove <package-or-prompt>").alias("rm").description("Remove a tracked skill or prompt and its installed files").option(GLOBAL_OPTION, GLOBAL_OPTION_DESC).action(async (pkgArg, opts) => {
   const scope = { global: opts.global };
   const configRoot = resolveConfigRoot(scope);
   const project = await readProjectPackageJson(configRoot);
   if (!project) throw new Error(initRequiredMessage(scope));
+  const promptReference = resolveTrackedPrompt(project, pkgArg);
+  if (promptReference && project.prompts[promptReference.alias] === promptReference.url) {
+    await removeTrackedPrompt({ configRoot, project, reference: promptReference });
+    console.log(`Removed prompt ${promptReference.url} and its local snapshot.`);
+    return;
+  }
+  const { name } = parsePackageArg(pkgArg);
   const packages = { ...project.packages };
   delete packages[name];
   await writeProjectPackageJson(configRoot, { ...project, packages });
@@ -9725,12 +10054,24 @@ program2.command("update [package]").description("Update one installed package,
   let project = await readProjectPackageJson(configRoot);
   if (!project) throw new Error(initRequiredMessage(scope));
   const registry = resolveRegistryUrl(project, opts.registry, DEFAULT_REGISTRY);
-  const token = await tokenForRead(registry, opts.token);
-  const names = pkgArg ? [parsePackageArg(pkgArg).name] : Object.keys(project.packages);
-  if (names.length === 0) {
-    console.log("No packages configured.");
+  const requestedPrompt = pkgArg ? resolveTrackedPrompt(project, pkgArg) : null;
+  if (requestedPrompt) {
+    if (project.prompts[requestedPrompt.alias] !== requestedPrompt.url) {
+      throw new Error(`Prompt is not tracked: ${requestedPrompt.url}`);
+    }
+    const result = await installTrackedPrompt({
+      configRoot,
+      registry,
+      project,
+      reference: requestedPrompt,
+      track: false,
+      updateOnly: true
+    });
+    console.log(result.changed ? `Updated prompt ${result.prompt.title} \u2192 ${result.path}` : `Prompt unchanged: ${result.prompt.title}`);
     return;
   }
+  const token = await tokenForRead(registry, opts.token);
+  const names = pkgArg ? [parsePackageArg(pkgArg).name] : Object.keys(project.packages);
   for (const name of names) {
     const version = await latestVersionForPackage(registry, name, token);
     project = {
@@ -9750,9 +10091,27 @@ program2.command("update [package]").description("Update one installed package,
       token
     });
   }
+  if (!pkgArg) {
+    for (const [alias, url] of Object.entries(project.prompts)) {
+      const reference = parsePromptUrl(url);
+      if (!reference) throw new Error(`Invalid tracked prompt URL for ${alias}: ${url}`);
+      const result = await installTrackedPrompt({
+        configRoot,
+        registry,
+        project,
+        reference: { ...reference, alias },
+        track: false,
+        updateOnly: true
+      });
+      console.log(result.changed ? `Updated prompt ${result.prompt.title} \u2192 ${result.path}` : `Prompt unchanged: ${result.prompt.title}`);
+    }
+  }
+  if (names.length === 0 && Object.keys(project.prompts).length === 0) {
+    console.log("No skills or prompts configured.");
+  }
 });
 program2.command("doctor").description("Check PATH, Node, registry, project config, and publish readiness").option(GLOBAL_OPTION, GLOBAL_OPTION_DESC).option("--registry <url>", "Registry base URL").option("--json", "Print machine-readable JSON").option("--publish", "Only show publish-readiness checks").action((opts) => runDoctor(opts));
-program2.parseAsync(process.argv).catch((err) => {
+program2.parseAsync(normalizedArgv).catch((err) => {
   console.error(err.message);
   const message = err.message.toLowerCase();
   if (message.includes("token") || message.includes("unauthorized") || message.includes("forbidden")) {