@claudetools/cli 0.13.13 → 0.13.15

package/dist/lib/theme.js

@@ -0,0 +1,137 @@
+import chalk from 'chalk';
+// =============================================================================
+// Color Theme System
+// =============================================================================
+// Semantic color system with NO_COLOR / FORCE_COLOR support
+// Respects environment variables per ECMA-48 spec
+// Detect color support from environment
+const noColor = process.env.NO_COLOR !== undefined ||
+    process.env.CLICOLOR === '0';
+const forceColor = process.env.FORCE_COLOR;
+// If NO_COLOR is set, override chalk's detection
+if (noColor) {
+    chalk.level = 0;
+}
+else if (forceColor) {
+    // FORCE_COLOR: 0=none, 1=basic, 2=256, 3=truecolor
+    const level = parseInt(forceColor, 10);
+    if (level >= 0 && level <= 3) {
+        chalk.level = level;
+    }
+}
+// =============================================================================
+// Semantic Colors
+// =============================================================================
+export const theme = {
+    // Status colors
+    success: chalk.green,
+    error: chalk.red,
+    warning: chalk.yellow,
+    info: chalk.blue,
+    muted: chalk.dim,
+    highlight: chalk.cyan,
+    brand: chalk.magenta,
+    // Text formatting
+    bold: chalk.bold,
+    dim: chalk.dim,
+    // Structural colors
+    header: chalk.bold,
+    subheader: chalk.dim,
+    command: chalk.cyan,
+    placeholder: chalk.yellow,
+    code: chalk.cyan,
+    // Status symbols (always shown, even without color)
+    symbols: {
+        success: '✓',
+        error: '✗',
+        warning: '⚠',
+        info: 'ℹ',
+        pending: '●',
+        arrow: '▸',
+        dot: '·',
+        bullet: '•',
+    },
+    // Formatted status messages
+    ok: (msg) => `${chalk.green('✓')} ${msg}`,
+    fail: (msg) => `${chalk.red('✗')} ${msg}`,
+    warn: (msg) => `${chalk.yellow('⚠')} ${msg}`,
+    step: (msg) => `${chalk.blue('▸')} ${msg}`,
+    // Utility functions
+    colorSupport: chalk.level > 0,
+    termWidth: process.stdout.columns || 80,
+};
+// =============================================================================
+// Helper Functions
+// =============================================================================
+/**
+ * Format a header with consistent styling
+ */
+export function formatHeader(text) {
+    return chalk.bold(text);
+}
+/**
+ * Format a subheader with consistent styling
+ */
+export function formatSubheader(text) {
+    return chalk.dim(text);
+}
+/**
+ * Format a command example
+ */
+export function formatCommand(cmd) {
+    return chalk.cyan(cmd);
+}
+/**
+ * Format a placeholder (e.g., <name>, [options])
+ */
+export function formatPlaceholder(text) {
+    return chalk.yellow(text);
+}
+/**
+ * Format an error message with symbol
+ */
+export function formatError(msg, code) {
+    const prefix = chalk.red('✗');
+    const codeStr = code ? chalk.dim(`[${code}]`) : '';
+    return `${prefix} ${codeStr}${codeStr ? ' ' : ''}${msg}`;
+}
+/**
+ * Format a success message with symbol
+ */
+export function formatSuccess(msg) {
+    return `${chalk.green('✓')} ${msg}`;
+}
+/**
+ * Format a warning message with symbol
+ */
+export function formatWarning(msg) {
+    return `${chalk.yellow('⚠')} ${msg}`;
+}
+/**
+ * Format an info message with symbol
+ */
+export function formatInfo(msg) {
+    return `${chalk.blue('ℹ')} ${msg}`;
+}
+/**
+ * Format a step/progress message with arrow
+ */
+export function formatStep(msg) {
+    return `${chalk.blue('▸')} ${msg}`;
+}
+/**
+ * Get terminal width for responsive output
+ */
+export function getTermWidth() {
+    return process.stdout.columns || 80;
+}
+/**
+ * Truncate text to fit terminal width
+ */
+export function truncate(text, maxWidth) {
+    const width = maxWidth || getTermWidth();
+    if (text.length <= width)
+        return text;
+    return text.slice(0, width - 3) + '...';
+}
+//# sourceMappingURL=theme.js.map

package/dist/lib/theme.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"theme.js","sourceRoot":"","sources":["../../src/lib/theme.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,gFAAgF;AAChF,qBAAqB;AACrB,gFAAgF;AAChF,4DAA4D;AAC5D,kDAAkD;AAElD,wCAAwC;AACxC,MAAM,OAAO,GACX,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS;IAClC,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC;AAE/B,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;AAE3C,iDAAiD;AACjD,IAAI,OAAO,EAAE,CAAC;IACZ,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;AAClB,CAAC;KAAM,IAAI,UAAU,EAAE,CAAC;IACtB,mDAAmD;IACnD,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACvC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC7B,KAAK,CAAC,KAAK,GAAG,KAAsB,CAAC;IACvC,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,kBAAkB;AAClB,gFAAgF;AAEhF,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB,gBAAgB;IAChB,OAAO,EAAE,KAAK,CAAC,KAAK;IACpB,KAAK,EAAE,KAAK,CAAC,GAAG;IAChB,OAAO,EAAE,KAAK,CAAC,MAAM;IACrB,IAAI,EAAE,KAAK,CAAC,IAAI;IAChB,KAAK,EAAE,KAAK,CAAC,GAAG;IAChB,SAAS,EAAE,KAAK,CAAC,IAAI;IACrB,KAAK,EAAE,KAAK,CAAC,OAAO;IAEpB,kBAAkB;IAClB,IAAI,EAAE,KAAK,CAAC,IAAI;IAChB,GAAG,EAAE,KAAK,CAAC,GAAG;IAEd,oBAAoB;IACpB,MAAM,EAAE,KAAK,CAAC,IAAI;IAClB,SAAS,EAAE,KAAK,CAAC,GAAG;IACpB,OAAO,EAAE,KAAK,CAAC,IAAI;IACnB,WAAW,EAAE,KAAK,CAAC,MAAM;IACzB,IAAI,EAAE,KAAK,CAAC,IAAI;IAEhB,oDAAoD;IACpD,OAAO,EAAE;QACP,OAAO,EAAE,GAAG;QACZ,KAAK,EAAE,GAAG;QACV,OAAO,EAAE,GAAG;QACZ,IAAI,EAAE,GAAG;QACT,OAAO,EAAE,GAAG;QACZ,KAAK,EAAE,GAAG;QACV,GAAG,EAAE,GAAG;QACR,MAAM,EAAE,GAAG;KACZ;IAED,4BAA4B;IAC5B,EAAE,EAAE,CAAC,GAAW,EAAU,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE;IACzD,IAAI,EAAE,CAAC,GAAW,EAAU,EAAE,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE;IACzD,IAAI,EAAE,CAAC,GAAW,EAAU,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE;IAC5D,IAAI,EAAE,CAAC,GAAW,EAAU,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE;IAE1D,oBAAoB;IACpB,YAAY,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;IAC7B,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE;CACxC,CAAC;AAEF,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,IAAa;IACpD,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnD,OAAO,GAAG,MAAM,IAAI,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC;AAC3D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY;IAC1B,OAAO,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,QAAiB;IACtD,MAAM,KAAK,GAAG,QAAQ,IAAI,YAAY,EAAE,CAAC;IACzC,IAAI,IAAI,CAAC,MAAM,IAAI,KAAK;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC;AAC1C,CAAC"}

package/dist/lib/tool-availability.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Check if Claude CLI is available (memoized)
+ */
+export declare function isClaudeCliAvailable(): boolean;
+/**
+ * Check if mcp-cli is available (memoized)
+ */
+export declare function isMcpCliAvailable(): boolean;
+/**
+ * Reset cached availability (for testing)
+ */
+export declare function resetAvailabilityCache(): void;
+//# sourceMappingURL=tool-availability.d.ts.map

package/dist/lib/tool-availability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-availability.d.ts","sourceRoot":"","sources":["../../src/lib/tool-availability.ts"],"names":[],"mappings":"AAWA;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,OAAO,CAW9C;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CAW3C;AAED;;GAEG;AACH,wBAAgB,sBAAsB,IAAI,IAAI,CAG7C"}

package/dist/lib/tool-availability.js

@@ -0,0 +1,48 @@
+// =============================================================================
+// Tool Availability Checks
+// =============================================================================
+// Shared utilities for checking CLI tool availability
+import { execSync } from 'child_process';
+// Cached availability results
+let cachedClaudeCliAvailable = undefined;
+let cachedMcpCliAvailable = undefined;
+/**
+ * Check if Claude CLI is available (memoized)
+ */
+export function isClaudeCliAvailable() {
+    if (cachedClaudeCliAvailable !== undefined) {
+        return cachedClaudeCliAvailable;
+    }
+    try {
+        execSync('claude --version', { encoding: 'utf-8', stdio: 'pipe', timeout: 5000 });
+        cachedClaudeCliAvailable = true;
+    }
+    catch {
+        cachedClaudeCliAvailable = false;
+    }
+    return cachedClaudeCliAvailable;
+}
+/**
+ * Check if mcp-cli is available (memoized)
+ */
+export function isMcpCliAvailable() {
+    if (cachedMcpCliAvailable !== undefined) {
+        return cachedMcpCliAvailable;
+    }
+    try {
+        execSync('mcp-cli --help', { encoding: 'utf-8', stdio: 'pipe', timeout: 5000 });
+        cachedMcpCliAvailable = true;
+    }
+    catch {
+        cachedMcpCliAvailable = false;
+    }
+    return cachedMcpCliAvailable;
+}
+/**
+ * Reset cached availability (for testing)
+ */
+export function resetAvailabilityCache() {
+    cachedClaudeCliAvailable = undefined;
+    cachedMcpCliAvailable = undefined;
+}
+//# sourceMappingURL=tool-availability.js.map

package/dist/lib/tool-availability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-availability.js","sourceRoot":"","sources":["../../src/lib/tool-availability.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,2BAA2B;AAC3B,gFAAgF;AAChF,sDAAsD;AAEtD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,8BAA8B;AAC9B,IAAI,wBAAwB,GAAwB,SAAS,CAAC;AAC9D,IAAI,qBAAqB,GAAwB,SAAS,CAAC;AAE3D;;GAEG;AACH,MAAM,UAAU,oBAAoB;IAClC,IAAI,wBAAwB,KAAK,SAAS,EAAE,CAAC;QAC3C,OAAO,wBAAwB,CAAC;IAClC,CAAC;IACD,IAAI,CAAC;QACH,QAAQ,CAAC,kBAAkB,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,wBAAwB,GAAG,IAAI,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,wBAAwB,GAAG,KAAK,CAAC;IACnC,CAAC;IACD,OAAO,wBAAwB,CAAC;AAClC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAC/B,IAAI,qBAAqB,KAAK,SAAS,EAAE,CAAC;QACxC,OAAO,qBAAqB,CAAC;IAC/B,CAAC;IACD,IAAI,CAAC;QACH,QAAQ,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAChF,qBAAqB,GAAG,IAAI,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,qBAAqB,GAAG,KAAK,CAAC;IAChC,CAAC;IACD,OAAO,qBAAqB,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB;IACpC,wBAAwB,GAAG,SAAS,CAAC;IACrC,qBAAqB,GAAG,SAAS,CAAC;AACpC,CAAC"}

package/dist/lib/update-checker.d.ts

@@ -0,0 +1,21 @@
+import { type ReleaseChannel } from './channel-config.js';
+export interface UpdateCheckResult {
+    currentVersion: string;
+    latestVersion: string;
+    channel: ReleaseChannel;
+    updateAvailable: boolean;
+}
+/** Compare two semver strings. Returns true if `latest` is newer than `current`. */
+export declare function isNewerVersion(current: string, latest: string): boolean;
+/**
+ * Check the npm registry for available updates.
+ * Uses a 24h file cache to avoid hitting the registry on every CLI invocation.
+ * Returns null if the check fails (offline, timeout, etc.).
+ */
+export declare function checkForUpdate(currentVersion: string): Promise<UpdateCheckResult | null>;
+/**
+ * Get the version for a specific dist-tag from cached or fresh registry data.
+ * Used by the update command to resolve a target version.
+ */
+export declare function getVersionForTag(distTag: string): Promise<string | null>;
+//# sourceMappingURL=update-checker.d.ts.map

package/dist/lib/update-checker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-checker.d.ts","sourceRoot":"","sources":["../../src/lib/update-checker.ts"],"names":[],"mappings":"AASA,OAAO,EAA0B,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAQjF,MAAM,WAAW,iBAAiB;IAChC,cAAc,EAAE,MAAM,CAAA;IACtB,aAAa,EAAE,MAAM,CAAA;IACrB,OAAO,EAAE,cAAc,CAAA;IACvB,eAAe,EAAE,OAAO,CAAA;CACzB;AAOD,oFAAoF;AACpF,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAWvE;AA8CD;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAsBnC;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAQxB"}

package/dist/lib/update-checker.js

@@ -0,0 +1,110 @@
+// =============================================================================
+// Update Checker
+// =============================================================================
+// Non-blocking npm registry check with 24-hour file cache.
+// Fetches dist-tags from the npm registry and caches the result to disk.
+import { readFileSync, writeFileSync, mkdirSync } from 'node:fs';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+import { getChannel, getDistTag } from './channel-config.js';
+const PACKAGE_NAME = '@claudetools/cli';
+const REGISTRY_URL = `https://registry.npmjs.org/${PACKAGE_NAME}`;
+const CACHE_DIR = join(homedir(), '.config', 'claudetools');
+const CACHE_FILE = join(CACHE_DIR, 'update-check.json');
+const CACHE_TTL_MS = 24 * 60 * 60 * 1000; // 24 hours
+/** Compare two semver strings. Returns true if `latest` is newer than `current`. */
+export function isNewerVersion(current, latest) {
+    const currentParts = current.replace(/^v/, '').split('.').map(Number);
+    const latestParts = latest.replace(/^v/, '').split('.').map(Number);
+    for (let i = 0; i < 3; i++) {
+        const curr = currentParts[i] || 0;
+        const lat = latestParts[i] || 0;
+        if (lat > curr)
+            return true;
+        if (lat < curr)
+            return false;
+    }
+    return false;
+}
+function readCache() {
+    try {
+        const raw = readFileSync(CACHE_FILE, 'utf-8');
+        const cached = JSON.parse(raw);
+        if (Date.now() - cached.timestamp < CACHE_TTL_MS && cached.distTags) {
+            return cached;
+        }
+    }
+    catch {
+        // Cache miss or corrupt — will re-fetch
+    }
+    return null;
+}
+function writeCache(distTags) {
+    try {
+        mkdirSync(CACHE_DIR, { recursive: true });
+        const cached = { timestamp: Date.now(), distTags };
+        writeFileSync(CACHE_FILE, JSON.stringify(cached, null, 2) + '\n', 'utf-8');
+    }
+    catch {
+        // Non-critical — cache write failure is fine
+    }
+}
+/** Fetch dist-tags from npm registry (with 5s timeout). */
+async function fetchDistTags() {
+    try {
+        const controller = new AbortController();
+        const timeout = setTimeout(() => controller.abort(), 5000);
+        const response = await fetch(REGISTRY_URL, {
+            headers: { Accept: 'application/vnd.npm.install-v1+json' },
+            signal: controller.signal,
+        });
+        clearTimeout(timeout);
+        if (!response.ok)
+            return null;
+        const body = (await response.json());
+        return body['dist-tags'] ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Check the npm registry for available updates.
+ * Uses a 24h file cache to avoid hitting the registry on every CLI invocation.
+ * Returns null if the check fails (offline, timeout, etc.).
+ */
+export async function checkForUpdate(currentVersion) {
+    // Try cache first
+    const cached = readCache();
+    const distTags = cached?.distTags ?? (await fetchDistTags());
+    if (!distTags)
+        return null;
+    // Write to cache if we fetched fresh
+    if (!cached)
+        writeCache(distTags);
+    const channel = getChannel();
+    const distTag = getDistTag();
+    const latestVersion = distTags[distTag];
+    if (!latestVersion)
+        return null;
+    return {
+        currentVersion,
+        latestVersion,
+        channel,
+        updateAvailable: isNewerVersion(currentVersion, latestVersion),
+    };
+}
+/**
+ * Get the version for a specific dist-tag from cached or fresh registry data.
+ * Used by the update command to resolve a target version.
+ */
+export async function getVersionForTag(distTag) {
+    const cached = readCache();
+    const distTags = cached?.distTags ?? (await fetchDistTags());
+    if (!distTags)
+        return null;
+    if (!cached)
+        writeCache(distTags);
+    return distTags[distTag] ?? null;
+}
+//# sourceMappingURL=update-checker.js.map

package/dist/lib/update-checker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-checker.js","sourceRoot":"","sources":["../../src/lib/update-checker.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,iBAAiB;AACjB,gFAAgF;AAChF,2DAA2D;AAC3D,yEAAyE;AAEzE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAuB,MAAM,qBAAqB,CAAA;AAEjF,MAAM,YAAY,GAAG,kBAAkB,CAAA;AACvC,MAAM,YAAY,GAAG,8BAA8B,YAAY,EAAE,CAAA;AACjE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,aAAa,CAAC,CAAA;AAC3D,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAA;AACvD,MAAM,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA,CAAC,WAAW;AAcpD,oFAAoF;AACpF,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,MAAc;IAC5D,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACrE,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAEnE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QACjC,MAAM,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QAC/B,IAAI,GAAG,GAAG,IAAI;YAAE,OAAO,IAAI,CAAA;QAC3B,IAAI,GAAG,GAAG,IAAI;YAAE,OAAO,KAAK,CAAA;IAC9B,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,SAAS;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgB,CAAA;QAC7C,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,GAAG,YAAY,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpE,OAAO,MAAM,CAAA;QACf,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,wCAAwC;IAC1C,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,UAAU,CAAC,QAAgC;IAClD,IAAI,CAAC;QACH,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACzC,MAAM,MAAM,GAAgB,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,CAAA;QAC/D,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAA;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,6CAA6C;IAC/C,CAAC;AACH,CAAC;AAED,2DAA2D;AAC3D,KAAK,UAAU,aAAa;IAC1B,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;QACxC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAA;QAE1D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,YAAY,EAAE;YACzC,OAAO,EAAE,EAAE,MAAM,EAAE,qCAAqC,EAAE;YAC1D,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAA;QACF,YAAY,CAAC,OAAO,CAAC,CAAA;QAErB,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,IAAI,CAAA;QAE7B,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA6C,CAAA;QAChF,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,CAAA;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,cAAsB;IAEtB,kBAAkB;IAClB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAA;IAC1B,MAAM,QAAQ,GAAG,MAAM,EAAE,QAAQ,IAAI,CAAC,MAAM,aAAa,EAAE,CAAC,CAAA;IAE5D,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAA;IAE1B,qCAAqC;IACrC,IAAI,CAAC,MAAM;QAAE,UAAU,CAAC,QAAQ,CAAC,CAAA;IAEjC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAA;IAC5B,MAAM,OAAO,GAAG,UAAU,EAAE,CAAA;IAC5B,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAA;IAEvC,IAAI,CAAC,aAAa;QAAE,OAAO,IAAI,CAAA;IAE/B,OAAO;QACL,cAAc;QACd,aAAa;QACb,OAAO;QACP,eAAe,EAAE,cAAc,CAAC,cAAc,EAAE,aAAa,CAAC;KAC/D,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAe;IAEf,MAAM,MAAM,GAAG,SAAS,EAAE,CAAA;IAC1B,MAAM,QAAQ,GAAG,MAAM,EAAE,QAAQ,IAAI,CAAC,MAAM,aAAa,EAAE,CAAC,CAAA;IAE5D,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAA;IAC1B,IAAI,CAAC,MAAM;QAAE,UAAU,CAAC,QAAQ,CAAC,CAAA;IAEjC,OAAO,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAA;AAClC,CAAC"}

package/dist/lib/validation.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Validate stack name format
+ * Stack names must be lowercase alphanumeric with hyphens, 1-50 characters
+ */
+export declare function validateStackName(name: string): {
+    valid: boolean;
+    error?: string;
+};
+/**
+ * Validate and normalize a project path
+ * Prevents path traversal attacks and ensures path is within expected boundaries
+ */
+export declare function validateProjectPath(inputPath: string, basePath?: string): {
+    valid: boolean;
+    normalizedPath: string;
+    error?: string;
+};
+/**
+ * Basic runtime type check for API response structure
+ */
+export declare function isValidApiResponse<T>(response: unknown, requiredFields: string[]): response is T;
+/**
+ * Validate API response has expected structure
+ */
+export declare function validateApiResponse<T>(response: unknown, requiredFields: string[]): {
+    valid: boolean;
+    data?: T;
+    error?: string;
+};
+//# sourceMappingURL=validation.d.ts.map

package/dist/lib/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/lib/validation.ts"],"names":[],"mappings":"AAOA;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAiBlF;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EACjB,QAAQ,CAAC,EAAE,MAAM,GAChB;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CA6B5D;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,EAClC,QAAQ,EAAE,OAAO,EACjB,cAAc,EAAE,MAAM,EAAE,GACvB,QAAQ,IAAI,CAAC,CAYf;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EACnC,QAAQ,EAAE,OAAO,EACjB,cAAc,EAAE,MAAM,EAAE,GACvB;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAY9C"}

package/dist/lib/validation.js

@@ -0,0 +1,82 @@
+// =============================================================================
+// Input Validation Utilities
+// =============================================================================
+// Runtime validation for user inputs and API responses
+import { resolve, relative } from 'path';
+/**
+ * Validate stack name format
+ * Stack names must be lowercase alphanumeric with hyphens, 1-50 characters
+ */
+export function validateStackName(name) {
+    if (!name || typeof name !== 'string') {
+        return { valid: false, error: 'Stack name is required' };
+    }
+    if (name.length > 50) {
+        return { valid: false, error: 'Stack name must be 50 characters or less' };
+    }
+    if (!/^[a-z0-9-]{1,50}$/.test(name)) {
+        return {
+            valid: false,
+            error: 'Stack name must be lowercase alphanumeric with hyphens only (e.g., my-stack-1)',
+        };
+    }
+    return { valid: true };
+}
+/**
+ * Validate and normalize a project path
+ * Prevents path traversal attacks and ensures path is within expected boundaries
+ */
+export function validateProjectPath(inputPath, basePath) {
+    if (!inputPath || typeof inputPath !== 'string') {
+        return { valid: false, normalizedPath: '', error: 'Path is required' };
+    }
+    // Resolve to absolute path
+    const normalizedPath = resolve(inputPath);
+    // If basePath provided, ensure the path doesn't escape it
+    if (basePath) {
+        const resolvedBase = resolve(basePath);
+        const relativePath = relative(resolvedBase, normalizedPath);
+        // Check if path tries to escape base directory
+        if (relativePath.startsWith('..') || resolve(resolvedBase, relativePath) !== normalizedPath) {
+            return {
+                valid: false,
+                normalizedPath: '',
+                error: 'Path traversal not allowed',
+            };
+        }
+    }
+    // Check for suspicious patterns even without basePath
+    if (inputPath.includes('\0')) {
+        return { valid: false, normalizedPath: '', error: 'Invalid path characters' };
+    }
+    return { valid: true, normalizedPath };
+}
+/**
+ * Basic runtime type check for API response structure
+ */
+export function isValidApiResponse(response, requiredFields) {
+    if (typeof response !== 'object' || response === null) {
+        return false;
+    }
+    for (const field of requiredFields) {
+        if (!(field in response)) {
+            return false;
+        }
+    }
+    return true;
+}
+/**
+ * Validate API response has expected structure
+ */
+export function validateApiResponse(response, requiredFields) {
+    if (typeof response !== 'object' || response === null) {
+        return { valid: false, error: 'Invalid response: expected object' };
+    }
+    for (const field of requiredFields) {
+        if (!(field in response)) {
+            return { valid: false, error: `Invalid response: missing field '${field}'` };
+        }
+    }
+    return { valid: true, data: response };
+}
+//# sourceMappingURL=validation.js.map

package/dist/lib/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/lib/validation.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,6BAA6B;AAC7B,gFAAgF;AAChF,uDAAuD;AAEvD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC;AAEzC;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;IAC3D,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACrB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,0CAA0C,EAAE,CAAC;IAC7E,CAAC;IAED,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,gFAAgF;SACxF,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,SAAiB,EACjB,QAAiB;IAEjB,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;IACzE,CAAC;IAED,2BAA2B;IAC3B,MAAM,cAAc,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAE1C,0DAA0D;IAC1D,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,YAAY,GAAG,QAAQ,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;QAE5D,+CAA+C;QAC/C,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC,KAAK,cAAc,EAAE,CAAC;YAC5F,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,cAAc,EAAE,EAAE;gBAClB,KAAK,EAAE,4BAA4B;aACpC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,sDAAsD;IACtD,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;IAChF,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;AACzC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAAiB,EACjB,cAAwB;IAExB,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACnC,IAAI,CAAC,CAAC,KAAK,IAAI,QAAQ,CAAC,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAiB,EACjB,cAAwB;IAExB,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;IACtE,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACnC,IAAI,CAAC,CAAC,KAAK,IAAI,QAAQ,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,oCAAoC,KAAK,GAAG,EAAE,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,QAAa,EAAE,CAAC;AAC9C,CAAC"}

package/dist/lib/validators.d.ts

@@ -0,0 +1,18 @@
+import type { UserConfig } from '../auth/config.js';
+export declare class ValidationError extends Error {
+    constructor(message: string);
+}
+/**
+ * Validates that a value is not falsy, throws ValidationError if it is
+ * @param value Value to check
+ * @param name Name of the value for error messages
+ * @returns The validated value
+ */
+export declare function required<T>(value: T | undefined | null, name: string): T;
+/**
+ * Validates that config has an active team, throws ValidationError if not
+ * @param config User configuration
+ * @returns The active team slug
+ */
+export declare function requireActiveTeam(config: UserConfig): string;
+//# sourceMappingURL=validators.d.ts.map

package/dist/lib/validators.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validators.d.ts","sourceRoot":"","sources":["../../src/lib/validators.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEpD,qBAAa,eAAgB,SAAQ,KAAK;gBAC5B,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,SAAS,GAAG,IAAI,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,CAKxE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAK5D"}

package/dist/lib/validators.js

@@ -0,0 +1,30 @@
+export class ValidationError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'ValidationError';
+    }
+}
+/**
+ * Validates that a value is not falsy, throws ValidationError if it is
+ * @param value Value to check
+ * @param name Name of the value for error messages
+ * @returns The validated value
+ */
+export function required(value, name) {
+    if (!value) {
+        throw new ValidationError(`${name} is required`);
+    }
+    return value;
+}
+/**
+ * Validates that config has an active team, throws ValidationError if not
+ * @param config User configuration
+ * @returns The active team slug
+ */
+export function requireActiveTeam(config) {
+    if (!config.activeTeam) {
+        throw new ValidationError('No active team selected');
+    }
+    return config.activeTeam;
+}
+//# sourceMappingURL=validators.js.map

package/dist/lib/validators.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validators.js","sourceRoot":"","sources":["../../src/lib/validators.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAI,KAA2B,EAAE,IAAY;IACnE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CAAC,GAAG,IAAI,cAAc,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAkB;IAClD,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACvB,MAAM,IAAI,eAAe,CAAC,yBAAyB,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,MAAM,CAAC,UAAU,CAAC;AAC3B,CAAC"}

package/dist/marketplace/api.d.ts

@@ -0,0 +1,24 @@
+export interface Extension {
+    id: string;
+    slug: string;
+    name: string;
+    type: 'skill' | 'agent' | 'hook' | 'mcp-server';
+    description: string;
+    author: {
+        id: string;
+        name: string;
+    };
+    downloads: number;
+    createdAt: string;
+    updatedAt: string;
+    content?: string;
+    config?: Record<string, unknown>;
+}
+export interface SearchResult {
+    extensions: Extension[];
+    total: number;
+}
+export declare function searchExtensions(query?: string, type?: string, limit?: number): Promise<SearchResult>;
+export declare function getExtension(typeOrSlug: string, slug?: string): Promise<Extension>;
+export declare function trackDownload(slug: string): Promise<void>;
+//# sourceMappingURL=api.d.ts.map

package/dist/marketplace/api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/marketplace/api.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,YAAY,CAAC;IAChD,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE;QACN,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;IACF,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;CACf;AA6CD,wBAAsB,gBAAgB,CACpC,KAAK,CAAC,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,MAAM,EACb,KAAK,SAAK,GACT,OAAO,CAAC,YAAY,CAAC,CAevB;AAED,wBAAsB,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAsCxF;AAED,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAO/D"}