@danieldeusing/seedr 0.1.80 → 0.1.82

package/dist/{chunk-5XFKC3T7.js → chunk-77M7PGDO.js}

@@ -2,33 +2,96 @@
 
 // src/config/registry.ts
 import { readFile, readdir, writeFile, mkdir } from "fs/promises";
+import { existsSync } from "fs";
 import { join, dirname } from "path";
 import { fileURLToPath } from "url";
 var __dirname = dirname(fileURLToPath(import.meta.url));
-var REGISTRY_PATH = join(__dirname, "../../../../registry");
+var FETCH_TIMEOUT_MS = 15e3;
+function findPackageRoot(startDir) {
+  let dir = startDir;
+  for (; ; ) {
+    if (existsSync(join(dir, "package.json"))) return dir;
+    const parent = dirname(dir);
+    if (parent === dir) return null;
+    dir = parent;
+  }
+}
+function resolveLocalRegistryPath() {
+  const packageRoot = findPackageRoot(__dirname);
+  if (!packageRoot) return null;
+  return join(packageRoot, "..", "..", "registry");
+}
+var REGISTRY_PATH = resolveLocalRegistryPath();
 var GITHUB_RAW_URL = "https://raw.githubusercontent.com/danieldeusing/seedr/main/registry";
+var SLUG_PATTERN = /^[a-z0-9][a-z0-9-]*$/;
+function assertValidSlug(slug) {
+  if (!SLUG_PATTERN.test(slug)) {
+    throw new Error(`Invalid item slug: "${slug}"`);
+  }
+}
+function assertSafeNodeName(name) {
+  if (name.includes("/") || name.includes("\\") || name.includes("..")) {
+    throw new Error(`Unsafe file name in registry content: "${name}"`);
+  }
+}
 var cache = {
   index: null,
   types: /* @__PURE__ */ new Map(),
   assembled: null
 };
+function typeDirName(type) {
+  if (type === "mcp" || type === "settings") return type;
+  return `${type}s`;
+}
+function isValidManifestIndex(value) {
+  return typeof value === "object" && value !== null && typeof value.types === "object" && value.types !== null;
+}
 async function loadFile(filename) {
-  try {
-    return await readFile(join(REGISTRY_PATH, filename), "utf-8");
-  } catch {
-    return fetchRemote(`${GITHUB_RAW_URL}/${filename}`);
+  if (REGISTRY_PATH) {
+    try {
+      return await readFile(join(REGISTRY_PATH, filename), "utf-8");
+    } catch {
+    }
   }
+  return fetchRemote(`${GITHUB_RAW_URL}/${filename}`);
 }
-async function fetchRemote(url) {
-  const response = await fetch(url);
+async function fetchResponse(url) {
+  let response;
+  try {
+    response = await fetch(url, { signal: AbortSignal.timeout(FETCH_TIMEOUT_MS) });
+  } catch (error2) {
+    if (error2 instanceof Error && error2.name === "TimeoutError") {
+      throw new Error(`Registry unreachable: timed out fetching ${url}`, { cause: error2 });
+    }
+    throw new Error(`Registry unreachable: ${url}`, { cause: error2 });
+  }
   if (!response.ok) {
     throw new Error(`Failed to fetch ${url}: ${response.statusText}`);
   }
+  return response;
+}
+async function fetchRemote(url) {
+  const response = await fetchResponse(url);
   return response.text();
 }
+async function fetchRemoteBuffer(url) {
+  const response = await fetchResponse(url);
+  return Buffer.from(await response.arrayBuffer());
+}
 async function loadIndex() {
   if (cache.index) return cache.index;
-  const content = await loadFile("manifest.json");
+  if (REGISTRY_PATH) {
+    try {
+      const localContent = await readFile(join(REGISTRY_PATH, "manifest.json"), "utf-8");
+      const parsed = JSON.parse(localContent);
+      if (isValidManifestIndex(parsed)) {
+        cache.index = parsed;
+        return parsed;
+      }
+    } catch {
+    }
+  }
+  const content = await fetchRemote(`${GITHUB_RAW_URL}/manifest.json`);
   const data = JSON.parse(content);
   cache.index = data;
   return data;
@@ -75,7 +138,8 @@ async function searchItems(query) {
   );
 }
 async function getItemFull(item) {
-  const typeDir = item.type + "s";
+  assertValidSlug(item.slug);
+  const typeDir = typeDirName(item.type);
   const itemJsonPath = `${typeDir}/${item.slug}/item.json`;
   const content = await loadFile(itemJsonPath);
   return JSON.parse(content);
@@ -85,9 +149,10 @@ function getItemBaseUrl(item) {
     const rawUrl = item.externalUrl.replace("github.com", "raw.githubusercontent.com").replace("/tree/", "/");
     return { local: null, remote: rawUrl };
   }
-  const typeDir = item.type + "s";
+  assertValidSlug(item.slug);
+  const typeDir = typeDirName(item.type);
   return {
-    local: join(REGISTRY_PATH, typeDir, item.slug),
+    local: REGISTRY_PATH ? join(REGISTRY_PATH, typeDir, item.slug) : null,
     remote: `${GITHUB_RAW_URL}/${typeDir}/${item.slug}`
   };
 }
@@ -106,7 +171,11 @@ function getItemSourcePath(item) {
   if (item.sourceType !== "toolr") {
     return null;
   }
-  const typeDir = item.type + "s";
+  if (!REGISTRY_PATH) {
+    return null;
+  }
+  assertValidSlug(item.slug);
+  const typeDir = typeDirName(item.type);
   return join(REGISTRY_PATH, typeDir, item.slug);
 }
 async function fetchItemToDestination(item, destPath) {
@@ -124,14 +193,15 @@ async function fetchItemToDestination(item, destPath) {
   const filesToFetch = item.type === "skill" ? ["SKILL.md"] : item.type === "plugin" ? [".claude-plugin/plugin.json"] : [`${item.type}.md`];
   await mkdir(destPath, { recursive: true });
   await Promise.all(filesToFetch.map(async (file) => {
-    const content = await fetchRemote(`${remote}/${file}`);
+    const content = await fetchRemoteBuffer(`${remote}/${file}`);
     const filePath = join(destPath, file);
     await mkdir(dirname(filePath), { recursive: true });
-    await writeFile(filePath, content, "utf-8");
+    await writeFile(filePath, content);
   }));
 }
 async function fetchFileTree(nodes, baseUrl, destPath) {
   await Promise.all(nodes.map(async (node) => {
+    assertSafeNodeName(node.name);
     const nodePath = join(destPath, node.name);
     if (node.type === "directory") {
       await mkdir(nodePath, { recursive: true });
@@ -139,8 +209,8 @@ async function fetchFileTree(nodes, baseUrl, destPath) {
         await fetchFileTree(node.children, `${baseUrl}/${node.name}`, nodePath);
       }
     } else {
-      const content = await fetchRemote(`${baseUrl}/${node.name}`);
-      await writeFile(nodePath, content, "utf-8");
+      const content = await fetchRemoteBuffer(`${baseUrl}/${node.name}`);
+      await writeFile(nodePath, content);
     }
   }));
 }
@@ -317,6 +387,7 @@ import {
   cp,
   rm
 } from "fs/promises";
+import { homedir as homedir2 } from "os";
 import { dirname as dirname2, join as join3, relative, isAbsolute } from "path";
 async function exists(path) {
   try {
@@ -329,6 +400,11 @@ async function exists(path) {
 async function ensureDir(path) {
   await mkdir2(path, { recursive: true });
 }
+async function assertOverwritable(path, force) {
+  if (!force && await exists(path)) {
+    throw new Error(`${path} already exists; pass --force to overwrite`);
+  }
+}
 async function installFile(source, destination, method) {
   await ensureDir(dirname2(destination));
   try {
@@ -355,8 +431,9 @@ async function writeTextFile(path, content) {
   await ensureDir(dirname2(path));
   await writeFile2(path, content, "utf-8");
 }
-function getAgentsPath(contentType, slug, cwd) {
-  return join3(cwd, ".agents", contentType + "s", slug);
+function getAgentsPath(contentType, slug, scope, cwd) {
+  const base = scope === "user" ? homedir2() : cwd;
+  return join3(base, ".agents", contentType + "s", slug);
 }
 async function copyDirectory(source, destination) {
   await cp(source, destination, { recursive: true });
@@ -530,8 +607,9 @@ import { join as join4, relative as relative2, dirname as dirname3 } from "path"
 import { readdir as readdir2, symlink as symlink2, rm as rm2 } from "fs/promises";
 import chalk2 from "chalk";
 import ora from "ora";
-async function installToCentralLocation(item, sourcePath, cwd) {
-  const centralPath = getAgentsPath("skill", item.slug, cwd);
+async function installToCentralLocation(item, sourcePath, scope, force, cwd) {
+  const centralPath = getAgentsPath("skill", item.slug, scope, cwd);
+  await assertOverwritable(centralPath, force);
   await rm2(centralPath, { recursive: true, force: true });
   if (sourcePath && await exists(sourcePath)) {
     await copyDirectory(sourcePath, centralPath);
@@ -546,7 +624,7 @@ async function createAgentSymlink(centralPath, destPath) {
   const relPath = relative2(dirname3(destPath), centralPath);
   await symlink2(relPath, destPath);
 }
-async function installSkillForAgent(item, agent, scope, method, cwd, centralPath) {
+async function installSkillForAgent(item, agent, scope, method, force, cwd, centralPath) {
   const spinner = ora(
     `Installing ${item.name} for ${CODING_AGENTS[agent].name}...`
   ).start();
@@ -556,6 +634,7 @@ async function installSkillForAgent(item, agent, scope, method, cwd, centralPath
       throw new Error(`${CODING_AGENTS[agent].name} does not support skills`);
     }
     const destPath = join4(destDir, item.slug);
+    await assertOverwritable(destPath, force);
     const sourcePath = getItemSourcePath(item);
     if (method === "symlink" && centralPath) {
       await createAgentSymlink(centralPath, destPath);
@@ -576,12 +655,12 @@ async function installSkillForAgent(item, agent, scope, method, cwd, centralPath
     return { agent, success: false, path: "", error: errorMsg };
   }
 }
-async function installSkill(item, agents, scope, method, cwd = process.cwd()) {
+async function installSkill(item, agents, scope, method, force, cwd = process.cwd()) {
   const results = [];
   const sourcePath = getItemSourcePath(item);
   let centralPath;
   if (method === "symlink") {
-    centralPath = await installToCentralLocation(item, sourcePath, cwd);
+    centralPath = await installToCentralLocation(item, sourcePath, scope, force, cwd);
   }
   for (const agent of agents) {
     const readsAgentsDir = agent === "gemini" || agent === "codex" || agent === "opencode";
@@ -594,6 +673,7 @@ async function installSkill(item, agents, scope, method, cwd = process.cwd()) {
       agent,
       scope,
       method,
+      force,
       cwd,
       centralPath
     );
@@ -621,8 +701,8 @@ async function getInstalledSkills(agent, scope, cwd = process.cwd()) {
 }
 var skillHandler = {
   type: "skill",
-  async install(item, agents, scope, method, cwd) {
-    return installSkill(item, agents, scope, method, cwd);
+  async install(item, agents, scope, method, force, cwd) {
+    return installSkill(item, agents, scope, method, force, cwd);
   },
   async uninstall(slug, agent, scope, cwd) {
     return uninstallSkill(slug, agent, scope, cwd);
@@ -642,6 +722,7 @@ export {
   fetchItemToDestination,
   exists,
   ensureDir,
+  assertOverwritable,
   installFile,
   removeFile,
   writeTextFile,

package/dist/cli.js

@@ -2,6 +2,7 @@
 import {
   ALL_AGENTS,
   CODING_AGENTS,
+  assertOverwritable,
   brand,
   cancelled,
   confirm,
@@ -38,7 +39,7 @@ import {
   success,
   warn,
   writeTextFile
-} from "./chunk-5XFKC3T7.js";
+} from "./chunk-77M7PGDO.js";
 
 // src/cli.ts
 import { Command as Command5 } from "commander";
@@ -65,10 +66,45 @@ function handleCommandError(error2) {
   process.exit(1);
 }
 
+// src/utils/validate-options.ts
+var SCOPES = ["project", "user", "local"];
+var METHODS = ["symlink", "copy"];
+var TYPES = [
+  "skill",
+  "hook",
+  "agent",
+  "plugin",
+  "command",
+  "settings",
+  "mcp"
+];
+function validateScope(value) {
+  if (value === void 0) return null;
+  if (!SCOPES.includes(value)) {
+    return `Invalid scope "${value}". Must be one of: ${SCOPES.join(", ")}`;
+  }
+  return null;
+}
+function validateMethod(value) {
+  if (value === void 0) return null;
+  if (!METHODS.includes(value)) {
+    return `Invalid method "${value}". Must be one of: ${METHODS.join(", ")}`;
+  }
+  return null;
+}
+function validateType(value) {
+  if (value === void 0) return null;
+  if (!TYPES.includes(value)) {
+    return `Invalid type "${value}". Must be one of: ${TYPES.join(", ")}`;
+  }
+  return null;
+}
+
 // src/utils/analytics.ts
 var ANALYTICS_URL = "https://seedr.danieldeusing.de/api/installs";
 function trackInstalls(slug, type, results, scope) {
   if (process.env.SEEDR_NO_TELEMETRY) return;
+  const version = true ? "0.1.82" : "dev";
   for (const result of results) {
     if (!result.success) continue;
     fetch(ANALYTICS_URL, {
@@ -77,9 +113,9 @@ function trackInstalls(slug, type, results, scope) {
       body: JSON.stringify({
         slug,
         type,
-        agent: result.agent,
+        tool: result.agent,
         scope,
-        version: "0.1.80"
+        version
       }),
       signal: AbortSignal.timeout(4e3)
     }).catch(() => {
@@ -107,7 +143,7 @@ import { join } from "path";
 import { readdir } from "fs/promises";
 import chalk2 from "chalk";
 import ora from "ora";
-async function installAgentForCodingAgent(item, agent, scope, method, cwd) {
+async function installAgentForCodingAgent(item, agent, scope, method, force, cwd) {
   const spinner = ora(
     `Installing ${item.name} for ${CODING_AGENTS[agent].name}...`
   ).start();
@@ -117,6 +153,7 @@ async function installAgentForCodingAgent(item, agent, scope, method, cwd) {
       throw new Error(`${CODING_AGENTS[agent].name} does not support agents`);
     }
     const destPath = join(destDir, `${item.slug}.md`);
+    await assertOverwritable(destPath, force);
     const sourcePath = getItemSourcePath(item);
     if (sourcePath && method === "symlink") {
       const sourceFile = join(sourcePath, "AGENT.md");
@@ -144,10 +181,10 @@ async function installAgentForCodingAgent(item, agent, scope, method, cwd) {
     return { agent, success: false, path: "", error: errorMsg };
   }
 }
-async function installAgent(item, agents, scope, method, cwd = process.cwd()) {
+async function installAgent(item, agents, scope, method, force, cwd = process.cwd()) {
   const results = [];
   for (const agent of agents) {
-    const result = await installAgentForCodingAgent(item, agent, scope, method, cwd);
+    const result = await installAgentForCodingAgent(item, agent, scope, method, force, cwd);
     results.push(result);
   }
   return results;
@@ -171,8 +208,8 @@ async function getInstalledAgents(agent, scope, cwd = process.cwd()) {
 }
 var agentHandler = {
   type: "agent",
-  async install(item, agents, scope, method, cwd) {
-    return installAgent(item, agents, scope, method, cwd);
+  async install(item, agents, scope, method, force, cwd) {
+    return installAgent(item, agents, scope, method, force, cwd);
   },
   async uninstall(slug, agent, scope, cwd) {
     return uninstallAgent(slug, agent, scope, cwd);
@@ -253,7 +290,7 @@ function findScriptFile(item) {
   }
   return null;
 }
-async function installHookForAgent(item, agent, scope, _method, cwd) {
+async function installHookForAgent(item, agent, scope, _method, force, cwd) {
   const spinner = ora2(
     `Installing ${item.name} for ${CODING_AGENTS[agent].name}...`
   ).start();
@@ -273,6 +310,7 @@ async function installHookForAgent(item, agent, scope, _method, cwd) {
     await mkdir(hooksDir, { recursive: true });
     const sourcePath = getItemSourcePath(item);
     const destScriptPath = join2(hooksDir, scriptFile);
+    await assertOverwritable(destScriptPath, force);
     if (sourcePath && await exists(sourcePath)) {
       const sourceScriptPath = join2(sourcePath, scriptFile);
       await copyFile(sourceScriptPath, destScriptPath);
@@ -327,10 +365,10 @@ async function installHookForAgent(item, agent, scope, _method, cwd) {
     return { agent, success: false, path: "", error: errorMsg };
   }
 }
-async function installHook(item, agents, scope, method, cwd = process.cwd()) {
+async function installHook(item, agents, scope, method, force, cwd = process.cwd()) {
   const results = [];
   for (const agent of agents) {
-    const result = await installHookForAgent(item, agent, scope, method, cwd);
+    const result = await installHookForAgent(item, agent, scope, method, force, cwd);
     results.push(result);
   }
   return results;
@@ -403,8 +441,8 @@ async function getInstalledHooks(agent, scope, cwd = process.cwd()) {
 }
 var hookHandler = {
   type: "hook",
-  async install(item, agents, scope, method, cwd) {
-    return installHook(item, agents, scope, method, cwd);
+  async install(item, agents, scope, method, force, cwd) {
+    return installHook(item, agents, scope, method, force, cwd);
   },
   async uninstall(slug, agent, scope, cwd) {
     return uninstallHook(slug, agent, scope, cwd);
@@ -424,7 +462,7 @@ function parseMcpDefinition(content) {
     throw new Error("Invalid MCP definition: must be valid JSON");
   }
 }
-async function installMcpForAgent(item, agent, scope, _method, cwd) {
+async function installMcpForAgent(item, agent, scope, _method, force, cwd) {
   const spinner = ora3(
     `Installing ${item.name} for ${CODING_AGENTS[agent].name}...`
   ).start();
@@ -434,6 +472,11 @@ async function installMcpForAgent(item, agent, scope, _method, cwd) {
     const configPath = getMcpPath(scope, cwd);
     const config = await readJson(configPath);
     config.mcpServers = config.mcpServers || {};
+    if (!force && mcpDef.name in config.mcpServers) {
+      throw new Error(
+        `MCP server "${mcpDef.name}" already exists in ${configPath}; pass --force to overwrite`
+      );
+    }
     config.mcpServers[mcpDef.name] = mcpDef.config;
     await writeJson(configPath, config);
     spinner.succeed(
@@ -448,10 +491,10 @@ async function installMcpForAgent(item, agent, scope, _method, cwd) {
     return { agent, success: false, path: "", error: errorMsg };
   }
 }
-async function installMcp(item, agents, scope, method, cwd = process.cwd()) {
+async function installMcp(item, agents, scope, method, force, cwd = process.cwd()) {
   const results = [];
   for (const agent of agents) {
-    const result = await installMcpForAgent(item, agent, scope, method, cwd);
+    const result = await installMcpForAgent(item, agent, scope, method, force, cwd);
     results.push(result);
   }
   return results;
@@ -475,8 +518,8 @@ async function getInstalledMcpServers(_agent, scope, cwd = process.cwd()) {
 }
 var mcpHandler = {
   type: "mcp",
-  async install(item, agents, scope, method, cwd) {
-    return installMcp(item, agents, scope, method, cwd);
+  async install(item, agents, scope, method, force, cwd) {
+    return installMcp(item, agents, scope, method, force, cwd);
   },
   async uninstall(slug, agent, scope, cwd) {
     return uninstallMcp(slug, agent, scope, cwd);
@@ -496,7 +539,7 @@ function parseSettings(content) {
     throw new Error("Invalid settings: must be valid JSON");
   }
 }
-async function installSettingsForAgent(item, agent, scope, _method, cwd) {
+async function installSettingsForAgent(item, agent, scope, _method, _force, cwd) {
   const spinner = ora4(
     `Installing ${item.name} for ${CODING_AGENTS[agent].name}...`
   ).start();
@@ -522,10 +565,10 @@ async function installSettingsForAgent(item, agent, scope, _method, cwd) {
     return { agent, success: false, path: "", error: errorMsg };
   }
 }
-async function installSettings(item, agents, scope, method, cwd = process.cwd()) {
+async function installSettings(item, agents, scope, method, force, cwd = process.cwd()) {
   const results = [];
   for (const agent of agents) {
-    const result = await installSettingsForAgent(item, agent, scope, method, cwd);
+    const result = await installSettingsForAgent(item, agent, scope, method, force, cwd);
     results.push(result);
   }
   return results;
@@ -585,8 +628,8 @@ async function getInstalledSettings(agent, scope, cwd = process.cwd()) {
 }
 var settingsHandler = {
   type: "settings",
-  async install(item, agents, scope, method, cwd) {
-    return installSettings(item, agents, scope, method, cwd);
+  async install(item, agents, scope, method, force, cwd) {
+    return installSettings(item, agents, scope, method, force, cwd);
   },
   async uninstall(slug, agent, scope, cwd) {
     return uninstallSettings(slug, agent, scope, cwd);
@@ -643,7 +686,7 @@ async function ensureMarketplaceRegistered(marketplace, item) {
   };
   await writeJson(KNOWN_MARKETPLACES_PATH, known);
 }
-async function installPluginForAgent(item, agent, scope, method, cwd) {
+async function installPluginForAgent(item, agent, scope, method, force, cwd) {
   const spinner = ora5(
     `Installing ${item.name} for ${CODING_AGENTS[agent].name}...`
   ).start();
@@ -667,6 +710,12 @@ async function installPluginForAgent(item, agent, scope, method, cwd) {
     const pluginId = getPluginId(pluginName, marketplace);
     await ensureMarketplaceRegistered(marketplace, item);
     const cachePath = getPluginCachePath(marketplace, pluginName, version);
+    try {
+      await assertOverwritable(cachePath, force);
+    } catch (error2) {
+      await rm2(tmpPath, { recursive: true, force: true });
+      throw error2;
+    }
     await installDirectory(tmpPath, cachePath, "copy");
     await rm2(tmpPath, { recursive: true, force: true });
     const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -705,10 +754,10 @@ async function installPluginForAgent(item, agent, scope, method, cwd) {
     return { agent, success: false, path: "", error: errorMsg };
   }
 }
-async function installPlugin(item, agents, scope, method, cwd = process.cwd()) {
+async function installPlugin(item, agents, scope, method, force, cwd = process.cwd()) {
   const results = [];
   for (const agent of agents) {
-    const result = await installPluginForAgent(item, agent, scope, method, cwd);
+    const result = await installPluginForAgent(item, agent, scope, method, force, cwd);
     results.push(result);
   }
   return results;
@@ -757,8 +806,8 @@ async function getInstalledPlugins(agent, scope, cwd = process.cwd()) {
 }
 var pluginHandler = {
   type: "plugin",
-  async install(item, agents, scope, method, cwd) {
-    return installPlugin(item, agents, scope, method, cwd);
+  async install(item, agents, scope, method, force, cwd) {
+    return installPlugin(item, agents, scope, method, force, cwd);
   },
   async uninstall(slug, agent, scope, cwd) {
     return uninstallPlugin(slug, agent, scope, cwd);
@@ -839,7 +888,7 @@ function printDryRunSummary(item, agents, scope, method, cwd) {
   console.log(`    Method: ${chalk7.white(method)}`);
   console.log();
   if (method === "symlink" && item.type === "skill") {
-    const centralPath = getAgentsPath("skill", item.slug, cwd);
+    const centralPath = getAgentsPath("skill", item.slug, scope, cwd);
     console.log(brand("  Central storage:"));
     console.log(`    ${chalk7.gray("\u2192")} ${chalk7.gray(centralPath)}`);
     console.log();
@@ -883,6 +932,11 @@ var addCommand = new Command("add").description("Install a skill, agent, hook, o
   try {
     printLogo();
     intro("Seedr");
+    const optionError = validateType(options.type) || validateScope(options.scope) || validateMethod(options.method);
+    if (optionError) {
+      error(optionError);
+      process.exit(1);
+    }
     const itemName = name;
     const contentType = options.type;
     const item = await resolveItem(itemName, contentType);
@@ -931,7 +985,7 @@ var addCommand = new Command("add").description("Install a skill, agent, hook, o
     } else if (agents.length === 1) {
       method = "copy";
     } else {
-      const symlinkPath = getAgentsPath(item.type, item.slug, process.cwd());
+      const symlinkPath = getAgentsPath(item.type, item.slug, scope, process.cwd());
       const selected = await selectMethod(symlinkPath);
       if (p.isCancel(selected)) {
         cancelled();
@@ -954,8 +1008,9 @@ var addCommand = new Command("add").description("Install a skill, agent, hook, o
         return;
       }
     }
+    const force = Boolean(options.force) || !options.yes;
     console.log();
-    const results = await handler.install(item, agents, scope, method, process.cwd());
+    const results = await handler.install(item, agents, scope, method, force, process.cwd());
     trackInstalls(item.slug, item.type, results, scope);
     printInstallSummary(results);
     outro("Installation complete");
@@ -1106,10 +1161,15 @@ var removeCommand = new Command3("remove").alias("rm").description("Remove an in
   "Comma-separated coding agents or 'all'"
 ).option(
   "--scope <scope>",
-  "Installation scope: project, user, or global",
+  "Installation scope: project, user, or local",
   "project"
 ).option("-y, --yes", "Skip confirmation prompts").action(async (name, options) => {
   try {
+    const optionError = validateScope(options.scope) || validateType(options.type);
+    if (optionError) {
+      console.log(chalk9.red(optionError));
+      process.exit(1);
+    }
     const scope = options.scope;
     const type = options.type;
     if (!type) {
@@ -1222,9 +1282,78 @@ Browse available skills at https://seedr.danieldeusing.de
   }
 });
 
+// package.json
+var package_default = {
+  name: "@danieldeusing/seedr",
+  version: "0.1.82",
+  description: "Seed your projects with AI configurations",
+  type: "module",
+  bin: {
+    seedr: "dist/cli.js"
+  },
+  exports: {
+    ".": {
+      import: "./dist/index.js",
+      types: "./dist/index.d.ts"
+    }
+  },
+  files: [
+    "dist"
+  ],
+  scripts: {
+    build: "tsup",
+    dev: "tsx src/cli.ts",
+    typecheck: "tsc --noEmit",
+    lint: "eslint src/",
+    "lint:fix": "eslint src/ --fix",
+    clean: "rm -rf dist",
+    test: "vitest run",
+    "test:watch": "vitest",
+    "test:coverage": "vitest run --coverage"
+  },
+  dependencies: {
+    "@clack/prompts": "^1.0.1",
+    chalk: "^5.3.0",
+    commander: "^14.0.0",
+    "gray-matter": "^4.0.3",
+    inquirer: "^13.0.0",
+    ora: "^9.0.0"
+  },
+  devDependencies: {
+    "@seedr/shared": "workspace:*",
+    "@types/inquirer": "^9.0.7",
+    "@types/node": "^25.0.0",
+    "@vitest/coverage-v8": "^4.1.0",
+    memfs: "^4.14.0",
+    tsup: "^8.3.0",
+    tsx: "^4.19.0",
+    typescript: "^5.7.0",
+    vitest: "^4.1.0"
+  },
+  keywords: [
+    "ai",
+    "claude",
+    "copilot",
+    "gemini",
+    "codex",
+    "opencode",
+    "configuration",
+    "seeder"
+  ],
+  repository: {
+    type: "git",
+    url: "git+https://github.com/danieldeusing/seedr.git"
+  },
+  homepage: "https://seedr.danieldeusing.de",
+  bugs: {
+    url: "https://github.com/danieldeusing/seedr/issues"
+  },
+  license: "MIT"
+};
+
 // src/cli.ts
 var program = new Command5();
-program.name("seedr").description("Seed your Coding Agents with capabilities").version("0.1.0").addCommand(addCommand).addCommand(listCommand).addCommand(removeCommand).addCommand(initCommand);
+program.name("seedr").description("Seed your Coding Agents with capabilities").version(package_default.version).addCommand(addCommand).addCommand(listCommand).addCommand(removeCommand).addCommand(initCommand);
 program.action(() => {
   printLogo();
   program.help();

package/dist/index.d.ts

@@ -69,7 +69,7 @@ interface InstallResult {
     error?: string;
 }
 
-declare function installSkill(item: RegistryItem, agents: CodingAgent[], scope: InstallScope, method: InstallMethod, cwd?: string): Promise<InstallResult[]>;
+declare function installSkill(item: RegistryItem, agents: CodingAgent[], scope: InstallScope, method: InstallMethod, force: boolean, cwd?: string): Promise<InstallResult[]>;
 declare function uninstallSkill(slug: string, agent: CodingAgent, scope: InstallScope, cwd?: string): Promise<boolean>;
 declare function getInstalledSkills(agent: CodingAgent, scope: InstallScope, cwd?: string): Promise<string[]>;
 

package/dist/index.js

@@ -15,7 +15,7 @@ import {
   loadManifest,
   searchItems,
   uninstallSkill
-} from "./chunk-5XFKC3T7.js";
+} from "./chunk-77M7PGDO.js";
 
 // src/converters/index.ts
 import matter from "gray-matter";

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "@danieldeusing/seedr",
-  "version": "0.1.80",
+  "version": "0.1.82",
   "description": "Seed your projects with AI configurations",
   "type": "module",
   "bin": {
-    "seedr": "./dist/cli.js"
+    "seedr": "dist/cli.js"
   },
   "exports": {
     ".": {
@@ -30,23 +30,20 @@
     "@clack/prompts": "^1.0.1",
     "chalk": "^5.3.0",
     "commander": "^14.0.0",
-    "fs-extra": "^11.2.0",
     "gray-matter": "^4.0.3",
     "inquirer": "^13.0.0",
-    "ora": "^9.0.0",
-    "simple-git": "^3.32.3"
+    "ora": "^9.0.0"
   },
   "devDependencies": {
     "@seedr/shared": "workspace:*",
-    "@types/fs-extra": "^11.0.4",
     "@types/inquirer": "^9.0.7",
     "@types/node": "^25.0.0",
-    "@vitest/coverage-v8": "^4.0.0",
+    "@vitest/coverage-v8": "^4.1.0",
     "memfs": "^4.14.0",
     "tsup": "^8.3.0",
     "tsx": "^4.19.0",
     "typescript": "^5.7.0",
-    "vitest": "^4.0.0"
+    "vitest": "^4.1.0"
   },
   "keywords": [
     "ai",
@@ -60,7 +57,7 @@
   ],
   "repository": {
     "type": "git",
-    "url": "https://github.com/danieldeusing/seedr.git"
+    "url": "git+https://github.com/danieldeusing/seedr.git"
   },
   "homepage": "https://seedr.danieldeusing.de",
   "bugs": {