@g3nomaly/core 0.3.0 → 0.3.2

package/dist/installer/files.js

@@ -0,0 +1,23 @@
+// packages/core/src/installer/files.ts
+import fs from "node:fs";
+import path from "node:path";
+const ALWAYS_SKIPPED = ["node_modules", ".git"];
+/**
+ * @brief Lists every file below a folder, leaving out the folders and files `filter` names.
+ *
+ * @param dir - Absolute folder to list.
+ * @param filter - Folders and files to skip.
+ * @returns Paths relative to `dir`, sorted.
+ */
+export function listFiles(dir, filter = {}) {
+    const skipDirs = new Set([...ALWAYS_SKIPPED, ...(filter.skipDirs ?? [])]);
+    const walk = (current) => fs.readdirSync(current, { withFileTypes: true }).flatMap((d) => {
+        const full = path.join(current, d.name);
+        const rel = path.relative(dir, full);
+        if (d.isDirectory())
+            return skipDirs.has(d.name) || skipDirs.has(rel) ? [] : walk(full);
+        return filter.skipFiles?.test(d.name) === true ? [] : [rel];
+    });
+    return walk(dir).sort();
+}
+//# sourceMappingURL=files.js.map

package/dist/installer/files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../../src/installer/files.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,IAAI,MAAM,WAAW,CAAA;AAa5B,MAAM,cAAc,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,CAAA;AAE/C;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CAAC,GAAW,EAAE,MAAM,GAAe,EAAE;IAC5D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;IACzE,MAAM,IAAI,GAAG,CAAC,OAAe,EAAY,EAAE,CACzC,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;QACvC,MAAM,GAAG,GAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QACrC,IAAI,CAAC,CAAC,WAAW,EAAE;YAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACvF,OAAO,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;IAC7D,CAAC,CAAC,CAAA;IACJ,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;AACzB,CAAC"}

package/dist/installer/index.d.ts

@@ -0,0 +1,19 @@
+export * from "./types";
+export { createInstallerIO } from "./io";
+export { classifyFile, classifyFiles, recordedHashes } from "./classify";
+export { applyClassifications, copySource } from "./install";
+export { removeInstalledFiles, pruneEmptyDirs } from "./remove";
+export { EntryOriginSchema, OriginEntrySchema } from "./origin";
+export type { EntryOrigin, OriginEntry, ReadContext } from "./origin";
+export { listFiles } from "./files";
+export type { FileFilter } from "./files";
+export { MANIFEST_DIRS, manifestFile, readMarketplace, resolveInside } from "./marketplace";
+export type { MarketplacePlugin } from "./marketplace";
+export { installManifestSchema, loadInstallManifest, installedEntries, saveInstallManifest } from "./manifest";
+export type { InstallManifest } from "./manifest";
+export { manifestSources, registerSource, unregisterSource } from "./manifestSources";
+export { loadSourceRegistry, offers, offerRegistry, entrySource } from "./sourceRegistry";
+export type { SourceRegistry, SourceEntries, SourceOffer, ReadSource, FailedSource } from "./sourceRegistry";
+export { parseRequest, formatRequest, resolveDependencies, resolveRequests, resolveInstalled, resolveUpdates, installedOrigins, installedForks } from "./resolve";
+export type { EntryRequest, Resolution, ResolvedDependencies } from "./resolve";
+//# sourceMappingURL=index.d.ts.map

package/dist/installer/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/installer/index.ts"],"names":[],"mappings":"AACA,cAAc,SAAS,CAAA;AACvB,OAAO,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAA;AACxC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AACxE,OAAO,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AAC5D,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,UAAU,CAAA;AAC/D,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAA;AAC/D,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,UAAU,CAAA;AACrE,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAC3F,YAAY,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AACtD,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAC9G,YAAY,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AACjD,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AACzF,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAC5G,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,mBAAmB,EAAE,eAAe,EAAE,gBAAgB,EAAE,cAAc,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AACjK,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAA"}

package/dist/installer/index.js

@@ -0,0 +1,14 @@
+// packages/core/src/installer/index.ts
+export * from "./types";
+export { createInstallerIO } from "./io";
+export { classifyFile, classifyFiles, recordedHashes } from "./classify";
+export { applyClassifications, copySource } from "./install";
+export { removeInstalledFiles, pruneEmptyDirs } from "./remove";
+export { EntryOriginSchema, OriginEntrySchema } from "./origin";
+export { listFiles } from "./files";
+export { MANIFEST_DIRS, manifestFile, readMarketplace, resolveInside } from "./marketplace";
+export { installManifestSchema, loadInstallManifest, installedEntries, saveInstallManifest } from "./manifest";
+export { manifestSources, registerSource, unregisterSource } from "./manifestSources";
+export { loadSourceRegistry, offers, offerRegistry, entrySource } from "./sourceRegistry";
+export { parseRequest, formatRequest, resolveDependencies, resolveRequests, resolveInstalled, resolveUpdates, installedOrigins, installedForks } from "./resolve";
+//# sourceMappingURL=index.js.map

package/dist/installer/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/installer/index.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,cAAc,SAAS,CAAA;AACvB,OAAO,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAA;AACxC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AACxE,OAAO,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AAC5D,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,UAAU,CAAA;AAC/D,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAA;AAE/D,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AAEnC,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAE3F,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAE9G,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAEzF,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,mBAAmB,EAAE,eAAe,EAAE,gBAAgB,EAAE,cAAc,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA"}

package/dist/installer/install.d.ts

@@ -0,0 +1,25 @@
+import type { BaseFileEntry } from "../registry/types";
+import type { ApplyOptions, ApplyResult, FileClassification, FileSource, InstallerIO } from "./types";
+/**
+ * @brief Builds a `FileSource` that copies each file from the package source tree.
+ *
+ * @param resolveSourcePath - Maps a file's relative path to its absolute path in the source tree.
+ * @returns Source that returns a `copy` content for every file.
+ */
+export declare function copySource<F extends BaseFileEntry>(resolveSourcePath: (relPath: string) => string): FileSource<F>;
+/**
+ * @brief Writes the files an install or update decision allows and reports the result per file.
+ *
+ * `SafeUpdate` files are always written. `UserOnly` and `Conflict` files are written only when
+ * `opts.decision` is `Overwrite` or `opts.force` is set. The result's `files` is what the caller
+ * registers in the user manifest. A kept file keeps the hash it was installed with, so its local
+ * change stays visible to every later run instead of becoming the new baseline.
+ *
+ * @param classifications - Per-file states from `classifyFiles`.
+ * @param source - Produces each file's content when it is written.
+ * @param opts - Conflict decision, `force` and `dryRun` flags.
+ * @param io - Filesystem boundary used to write and hash files.
+ * @returns Written, kept and missing-source paths, and the manifest entries to register.
+ */
+export declare function applyClassifications<F extends BaseFileEntry>(classifications: readonly FileClassification<F>[], source: FileSource<F>, opts: ApplyOptions, io: InstallerIO): Promise<ApplyResult<F>>;
+//# sourceMappingURL=install.d.ts.map

package/dist/installer/install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../src/installer/install.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAEtD,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,kBAAkB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AAErG;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,CAAC,SAAS,aAAa,EAAE,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAEjH;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,oBAAoB,CAAC,CAAC,SAAS,aAAa,EAChE,eAAe,EAAE,SAAS,kBAAkB,CAAC,CAAC,CAAC,EAAE,EACjD,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,EACrB,IAAI,EAAE,YAAY,EAClB,EAAE,EAAE,WAAW,GACd,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CA4CzB"}

package/dist/installer/install.js

@@ -0,0 +1,74 @@
+// packages/core/src/installer/install.ts
+import path from "node:path";
+import { ConflictDecision, FileState } from "./types";
+/**
+ * @brief Builds a `FileSource` that copies each file from the package source tree.
+ *
+ * @param resolveSourcePath - Maps a file's relative path to its absolute path in the source tree.
+ * @returns Source that returns a `copy` content for every file.
+ */
+export function copySource(resolveSourcePath) {
+    return (file) => ({ kind: "copy", sourcePath: resolveSourcePath(file.path) });
+}
+/**
+ * @brief Writes the files an install or update decision allows and reports the result per file.
+ *
+ * `SafeUpdate` files are always written. `UserOnly` and `Conflict` files are written only when
+ * `opts.decision` is `Overwrite` or `opts.force` is set. The result's `files` is what the caller
+ * registers in the user manifest. A kept file keeps the hash it was installed with, so its local
+ * change stays visible to every later run instead of becoming the new baseline.
+ *
+ * @param classifications - Per-file states from `classifyFiles`.
+ * @param source - Produces each file's content when it is written.
+ * @param opts - Conflict decision, `force` and `dryRun` flags.
+ * @param io - Filesystem boundary used to write and hash files.
+ * @returns Written, kept and missing-source paths, and the manifest entries to register.
+ */
+export async function applyClassifications(classifications, source, opts, io) {
+    const result = { written: [], kept: [], missingSource: [], files: [] };
+    const overwrite = opts.force === true || opts.decision === ConflictDecision.Overwrite;
+    const write = async (cl) => {
+        const content = await source(cl.file);
+        if (content === null) {
+            result.missingSource.push(cl.file.path);
+            if (cl.exists)
+                result.files.push({ ...cl.file, hash: cl.currentHash ?? undefined });
+            return;
+        }
+        if (opts.dryRun === true) {
+            result.files.push({ ...cl.file, hash: cl.latestHash });
+        }
+        else {
+            io.ensureDir(path.dirname(cl.destPath));
+            if (content.kind === "copy")
+                io.copyFile(content.sourcePath, cl.destPath);
+            else
+                io.writeFile(cl.destPath, content.content);
+            result.files.push({ ...cl.file, hash: await io.hashFile(cl.destPath) });
+        }
+        result.written.push(cl.file.path);
+    };
+    for (const cl of classifications) {
+        switch (cl.state) {
+            case FileState.UpToDate:
+                result.files.push({ ...cl.file, hash: cl.currentHash ?? cl.latestHash });
+                break;
+            case FileState.SafeUpdate:
+                await write(cl);
+                break;
+            case FileState.UserOnly:
+            case FileState.Conflict:
+                if (overwrite) {
+                    await write(cl);
+                }
+                else {
+                    result.kept.push(cl.file.path);
+                    // An untracked file has no install-time hash; the source version is the baseline it differs from.
+                    result.files.push({ ...cl.file, hash: cl.recordedHash ?? cl.latestHash });
+                }
+                break;
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=install.js.map

package/dist/installer/install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../../src/installer/install.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAA;AAE5B,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AAGrD;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAA0B,iBAA8C;IAChG,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AAC/E,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,eAAiD,EACjD,MAAqB,EACrB,IAAkB,EAClB,EAAe;IAEf,MAAM,MAAM,GAAmB,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAA;IACtF,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,gBAAgB,CAAC,SAAS,CAAA;IAErF,MAAM,KAAK,GAAG,KAAK,EAAE,EAAyB,EAAiB,EAAE;QAC/D,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAA;QACrC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACvC,IAAI,EAAE,CAAC,MAAM;gBAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,WAAW,IAAI,SAAS,EAAE,CAAC,CAAA;YACnF,OAAM;QACR,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YACzB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,UAAU,EAAE,CAAC,CAAA;QACxD,CAAC;aAAM,CAAC;YACN,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAA;YACvC,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;gBAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAA;;gBACpE,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAA;YAC/C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;QACzE,CAAC;QACD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACnC,CAAC,CAAA;IAED,KAAK,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC;QACjC,QAAQ,EAAE,CAAC,KAAK,EAAE,CAAC;YACjB,KAAK,SAAS,CAAC,QAAQ;gBACrB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,WAAW,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC,CAAA;gBACxE,MAAK;YACP,KAAK,SAAS,CAAC,UAAU;gBACvB,MAAM,KAAK,CAAC,EAAE,CAAC,CAAA;gBACf,MAAK;YACP,KAAK,SAAS,CAAC,QAAQ,CAAC;YACxB,KAAK,SAAS,CAAC,QAAQ;gBACrB,IAAI,SAAS,EAAE,CAAC;oBACd,MAAM,KAAK,CAAC,EAAE,CAAC,CAAA;gBACjB,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;oBAC9B,kGAAkG;oBAClG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC,CAAA;gBAC3E,CAAC;gBACD,MAAK;QACT,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/installer/io.d.ts

@@ -0,0 +1,9 @@
+import type { InstallerIO } from "./types";
+/**
+ * @brief Builds the real-filesystem `InstallerIO`, with any field replaced by `overrides`.
+ *
+ * @param overrides - Fields to replace, such as stubs in tests. Empty by default.
+ * @returns Filesystem boundary backed by `node:fs` and `hashFile`, except for the overridden fields.
+ */
+export declare function createInstallerIO(overrides?: Partial<InstallerIO>): InstallerIO;
+//# sourceMappingURL=io.d.ts.map

package/dist/installer/io.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"io.d.ts","sourceRoot":"","sources":["../../src/installer/io.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AAE1C;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,GAAE,OAAO,CAAC,WAAW,CAAM,GAAG,WAAW,CAYnF"}

package/dist/installer/io.js

@@ -0,0 +1,23 @@
+// packages/core/src/installer/io.ts
+import fs from "node:fs";
+import { hashFile } from "../hash/hash";
+/**
+ * @brief Builds the real-filesystem `InstallerIO`, with any field replaced by `overrides`.
+ *
+ * @param overrides - Fields to replace, such as stubs in tests. Empty by default.
+ * @returns Filesystem boundary backed by `node:fs` and `hashFile`, except for the overridden fields.
+ */
+export function createInstallerIO(overrides = {}) {
+    return {
+        exists: (path) => fs.existsSync(path),
+        ensureDir: (dir) => { fs.mkdirSync(dir, { recursive: true }); },
+        copyFile: (src, dest) => { fs.copyFileSync(src, dest); },
+        writeFile: (dest, content) => { fs.writeFileSync(dest, content, "utf8"); },
+        removeFile: (path) => { fs.rmSync(path); },
+        listDir: (dir) => fs.readdirSync(dir),
+        removeDir: (dir) => { fs.rmSync(dir, { recursive: true }); },
+        hashFile,
+        ...overrides,
+    };
+}
+//# sourceMappingURL=io.js.map

package/dist/installer/io.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"io.js","sourceRoot":"","sources":["../../src/installer/io.ts"],"names":[],"mappings":"AAAA,oCAAoC;AACpC,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAA;AAGvC;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAS,GAAyB,EAAE;IACpE,OAAO;QACL,MAAM,EAAM,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QACzC,SAAS,EAAG,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA,CAAC,CAAC;QAC/D,QAAQ,EAAI,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA,CAAC,CAAC;QACzD,SAAS,EAAG,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA,CAAC,CAAC;QAC1E,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA,CAAC,CAAC;QACzC,OAAO,EAAK,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC;QACxC,SAAS,EAAG,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA,CAAC,CAAC;QAC5D,QAAQ;QACR,GAAG,SAAS;KACb,CAAA;AACH,CAAC"}

package/dist/installer/manifest.d.ts

@@ -0,0 +1,69 @@
+import { z } from "zod";
+import { type RegistryStore } from "../registry/registry.store";
+import type { BaseRegistryEntry } from "../registry/types";
+import { type SourceRecord } from "../sources/types";
+/**
+ * @brief Install manifest: the sources registered for an install target and the entries installed into it.
+ *
+ * On disk it is `{ "sources": {...}, "entries": {...} }`. Created by `loadInstallManifest` in each
+ * installer's project setup (`skills.json`, `mods.json`, the g3nui manifest). The installer changes
+ * `sources` directly and hands `store` to the core `add`, `update` and `remove` commands.
+ * `saveInstallManifest` writes both back.
+ *
+ * @property filePath - Absolute path of the file, e.g. `/home/me/app/.claude/skills.json`.
+ * @property sources - Sources registered for this target, by name.
+ * @property store - Installed entries by key.
+ */
+export interface InstallManifest {
+    filePath: string;
+    sources: SourceRecord;
+    store: RegistryStore<BaseRegistryEntry>;
+}
+/**
+ * @brief Builds the zod schema of a manifest file whose entries match `entrySchema`.
+ *
+ * @param entrySchema - Schema each value of `entries` must match.
+ * @returns Strict object schema with `sources` and `entries`, both defaulting to empty.
+ */
+export declare function installManifestSchema<S extends z.ZodType>(entrySchema: S): z.ZodObject<{
+    sources: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"git">;
+        url: z.ZodString;
+        ref: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"npm">;
+        package: z.ZodString;
+        version: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"local">;
+        path: z.ZodString;
+    }, z.core.$strip>], "kind">>>;
+    entries: z.ZodDefault<z.ZodRecord<z.ZodString, S>>;
+}, z.core.$strict>;
+/**
+ * @brief Reads a manifest file and checks every entry against `entrySchema`. A missing file reads as no sources and no entries.
+ *
+ * @param filePath - Absolute path of the manifest, e.g. `/home/me/app/.claude/skills.json`.
+ * @param entrySchema - Schema each installed entry must match.
+ * @returns The manifest, with its entries loaded into `store`.
+ * @throws {Error} Naming the file when it is not JSON or does not match the schema.
+ */
+export declare function loadInstallManifest(filePath: string, entrySchema: z.ZodType<BaseRegistryEntry>): InstallManifest;
+/**
+ * @brief Reads the installed entries of a manifest, each checked against `entrySchema`.
+ *
+ * @param manifest - Manifest whose `store` is read.
+ * @param entrySchema - Schema each entry must match.
+ * @returns Entries by key.
+ * @throws {ZodError} When an entry the install commands wrote does not match the schema.
+ */
+export declare function installedEntries<T extends BaseRegistryEntry>(manifest: InstallManifest, entrySchema: z.ZodType<T>): Record<string, T>;
+/**
+ * @brief Writes sources and entries back to `manifest.filePath`, each sorted by name, after checking every entry against `entrySchema`.
+ *
+ * @param manifest - Manifest to write.
+ * @param entrySchema - Schema each entry must match.
+ * @throws {ZodError} When an entry does not match the schema. Nothing is written then.
+ */
+export declare function saveInstallManifest(manifest: InstallManifest, entrySchema: z.ZodType<BaseRegistryEntry>): void;
+//# sourceMappingURL=manifest.d.ts.map

package/dist/installer/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/installer/manifest.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAEpF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAC1D,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAGxE;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAG,YAAY,CAAA;IACtB,KAAK,EAAK,aAAa,CAAC,iBAAiB,CAAC,CAAA;CAC3C;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC;;;;;;;;;;;;;;mBAKxE;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,GAAG,eAAe,CAehH;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,SAAS,iBAAiB,EAAE,QAAQ,EAAE,eAAe,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAErI;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,eAAe,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAK9G"}

package/dist/installer/manifest.js

@@ -0,0 +1,70 @@
+// packages/core/src/installer/manifest.ts
+import fs from "node:fs";
+import path from "node:path";
+import { z } from "zod";
+import { createRegistryStore } from "../registry/registry.store";
+import { entries } from "../registry/registry.selectors";
+import { SourceRecordSchema } from "../sources/types";
+import { errorMessage } from "../utils/errors";
+/**
+ * @brief Builds the zod schema of a manifest file whose entries match `entrySchema`.
+ *
+ * @param entrySchema - Schema each value of `entries` must match.
+ * @returns Strict object schema with `sources` and `entries`, both defaulting to empty.
+ */
+export function installManifestSchema(entrySchema) {
+    return z.strictObject({
+        sources: SourceRecordSchema.default({}),
+        entries: z.record(z.string(), entrySchema).default({}),
+    });
+}
+/**
+ * @brief Reads a manifest file and checks every entry against `entrySchema`. A missing file reads as no sources and no entries.
+ *
+ * @param filePath - Absolute path of the manifest, e.g. `/home/me/app/.claude/skills.json`.
+ * @param entrySchema - Schema each installed entry must match.
+ * @returns The manifest, with its entries loaded into `store`.
+ * @throws {Error} Naming the file when it is not JSON or does not match the schema.
+ */
+export function loadInstallManifest(filePath, entrySchema) {
+    const store = createRegistryStore();
+    if (!fs.existsSync(filePath))
+        return { filePath, sources: {}, store };
+    let raw;
+    try {
+        raw = JSON.parse(fs.readFileSync(filePath, "utf8"));
+    }
+    catch (error) {
+        throw new Error(`${filePath} is not valid JSON: ${errorMessage(error)}`);
+    }
+    const parsed = installManifestSchema(entrySchema).safeParse(raw);
+    if (!parsed.success)
+        throw new Error(`${filePath} is not a valid install manifest:\n${z.prettifyError(parsed.error)}`);
+    store.store.setState(() => ({ ...parsed.data.entries }));
+    return { filePath, sources: parsed.data.sources, store };
+}
+/**
+ * @brief Reads the installed entries of a manifest, each checked against `entrySchema`.
+ *
+ * @param manifest - Manifest whose `store` is read.
+ * @param entrySchema - Schema each entry must match.
+ * @returns Entries by key.
+ * @throws {ZodError} When an entry the install commands wrote does not match the schema.
+ */
+export function installedEntries(manifest, entrySchema) {
+    return z.record(z.string(), entrySchema).parse(entries(manifest.store));
+}
+/**
+ * @brief Writes sources and entries back to `manifest.filePath`, each sorted by name, after checking every entry against `entrySchema`.
+ *
+ * @param manifest - Manifest to write.
+ * @param entrySchema - Schema each entry must match.
+ * @throws {ZodError} When an entry does not match the schema. Nothing is written then.
+ */
+export function saveInstallManifest(manifest, entrySchema) {
+    const sorted = (record) => Object.fromEntries(Object.entries(record).sort(([a], [b]) => a.localeCompare(b)));
+    const content = { sources: sorted(manifest.sources), entries: sorted(installedEntries(manifest, entrySchema)) };
+    fs.mkdirSync(path.dirname(manifest.filePath), { recursive: true });
+    fs.writeFileSync(manifest.filePath, JSON.stringify(content, null, 2) + "\n");
+}
+//# sourceMappingURL=manifest.js.map

package/dist/installer/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/installer/manifest.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAC1C,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,mBAAmB,EAAsB,MAAM,4BAA4B,CAAA;AACpF,OAAO,EAAE,OAAO,EAAE,MAAM,gCAAgC,CAAA;AAExD,OAAO,EAAE,kBAAkB,EAAqB,MAAM,kBAAkB,CAAA;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAoB9C;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAsB,WAAc;IACvE,OAAO,CAAC,CAAC,YAAY,CAAC;QACpB,OAAO,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;KACvD,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,WAAyC;IAC7F,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAA;IACnC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAA;IAErE,IAAI,GAAY,CAAA;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAA;IACrD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,uBAAuB,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IAC1E,CAAC;IACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;IAChE,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,sCAAsC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IAEtH,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;IACxD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAA;AAC1D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAA8B,QAAyB,EAAE,WAAyB;IAChH,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;AACzE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAyB,EAAE,WAAyC;IACtG,MAAM,MAAM,GAAG,CAAI,MAAyB,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAClI,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,EAAE,CAAA;IAC/G,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAClE,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAA;AAC9E,CAAC"}

package/dist/installer/manifestSources.d.ts

@@ -0,0 +1,32 @@
+import type { RegisteredSource, SourceRecord, SourceSpec } from "../sources/types";
+import type { InstallManifest } from "./manifest";
+/**
+ * @brief Sources of one or more manifests plus the built-in ones, each name once, built-in sources first.
+ *
+ * When two manifests register one name for different places, the first manifest's spec is used.
+ *
+ * @param manifests - Manifests to read sources from, in priority order.
+ * @param builtins - Sources shipped with the installer.
+ * @returns Every source once, by name.
+ */
+export declare function manifestSources(manifests: readonly InstallManifest[], builtins: SourceRecord): RegisteredSource[];
+/**
+ * @brief Registers a source in every manifest. Nothing changes unless every manifest accepts it.
+ *
+ * @param manifests - Manifests to register the source in.
+ * @param name - Name the source is registered under.
+ * @param spec - Where the source is read from.
+ * @param builtins - Sources shipped with the installer, which names cannot shadow.
+ * @throws {Error} When the name is built in, invalid, or already registered in any manifest.
+ */
+export declare function registerSource(manifests: readonly InstallManifest[], name: string, spec: SourceSpec, builtins: SourceRecord): void;
+/**
+ * @brief Unregisters a source from every manifest that has it.
+ *
+ * @param manifests - Manifests to remove the source from.
+ * @param name - Name of the source to remove.
+ * @param builtins - Sources shipped with the installer, which cannot be removed.
+ * @throws {Error} When the name is built in or no manifest registers it.
+ */
+export declare function unregisterSource(manifests: readonly InstallManifest[], name: string, builtins: SourceRecord): void;
+//# sourceMappingURL=manifestSources.d.ts.map

package/dist/installer/manifestSources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifestSources.d.ts","sourceRoot":"","sources":["../../src/installer/manifestSources.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAClF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAEjD;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,SAAS,eAAe,EAAE,EAAE,QAAQ,EAAE,YAAY,GAAG,gBAAgB,EAAE,CAMjH;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,SAAS,eAAe,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,GAAG,IAAI,CAGlI;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,SAAS,eAAe,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,GAAG,IAAI,CAKlH"}

package/dist/installer/manifestSources.js

@@ -0,0 +1,50 @@
+// packages/core/src/installer/manifestSources.ts
+import { addSource, listSources, removeSource } from "../sources/register";
+/**
+ * @brief Sources of one or more manifests plus the built-in ones, each name once, built-in sources first.
+ *
+ * When two manifests register one name for different places, the first manifest's spec is used.
+ *
+ * @param manifests - Manifests to read sources from, in priority order.
+ * @param builtins - Sources shipped with the installer.
+ * @returns Every source once, by name.
+ */
+export function manifestSources(manifests, builtins) {
+    const byName = new Map();
+    for (const manifest of manifests) {
+        for (const source of listSources(manifest.sources, builtins))
+            if (!byName.has(source.name))
+                byName.set(source.name, source);
+    }
+    return [...byName.values()];
+}
+/**
+ * @brief Registers a source in every manifest. Nothing changes unless every manifest accepts it.
+ *
+ * @param manifests - Manifests to register the source in.
+ * @param name - Name the source is registered under.
+ * @param spec - Where the source is read from.
+ * @param builtins - Sources shipped with the installer, which names cannot shadow.
+ * @throws {Error} When the name is built in, invalid, or already registered in any manifest.
+ */
+export function registerSource(manifests, name, spec, builtins) {
+    const updated = manifests.map((manifest) => addSource(manifest.sources, name, spec, builtins));
+    manifests.forEach((manifest, index) => { manifest.sources = updated[index] ?? manifest.sources; });
+}
+/**
+ * @brief Unregisters a source from every manifest that has it.
+ *
+ * @param manifests - Manifests to remove the source from.
+ * @param name - Name of the source to remove.
+ * @param builtins - Sources shipped with the installer, which cannot be removed.
+ * @throws {Error} When the name is built in or no manifest registers it.
+ */
+export function unregisterSource(manifests, name, builtins) {
+    const holding = manifests.filter((manifest) => manifest.sources[name] !== undefined);
+    // With no manifest holding it, removeSource throws the reason: built in, or never registered.
+    if (holding.length === 0)
+        removeSource({}, name, builtins);
+    for (const manifest of holding)
+        manifest.sources = removeSource(manifest.sources, name, builtins);
+}
+//# sourceMappingURL=manifestSources.js.map

package/dist/installer/manifestSources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifestSources.js","sourceRoot":"","sources":["../../src/installer/manifestSources.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAI1E;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,SAAqC,EAAE,QAAsB;IAC3F,MAAM,MAAM,GAAG,IAAI,GAAG,EAA4B,CAAA;IAClD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,KAAK,MAAM,MAAM,IAAI,WAAW,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;YAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC7H,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;AAC7B,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,SAAqC,EAAE,IAAY,EAAE,IAAgB,EAAE,QAAsB;IAC1H,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAA;IAC9F,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,GAAG,QAAQ,CAAC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAA,CAAC,CAAC,CAAC,CAAA;AACnG,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAqC,EAAE,IAAY,EAAE,QAAsB;IAC1G,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,CAAA;IACpF,8FAA8F;IAC9F,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,YAAY,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;IAC1D,KAAK,MAAM,QAAQ,IAAI,OAAO;QAAE,QAAQ,CAAC,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;AACnG,CAAC"}

package/dist/installer/marketplace.d.ts

@@ -0,0 +1,46 @@
+/** Folders a plugin or marketplace manifest may sit in, in the order they are tried. */
+export declare const MANIFEST_DIRS: string[];
+/**
+ * @brief One plugin a marketplace lists, located by its folder inside the source.
+ *
+ * @property name - Plugin name from the marketplace.
+ * @property dir - Absolute plugin folder.
+ */
+export interface MarketplacePlugin {
+    name: string;
+    dir: string;
+}
+/**
+ * @brief Finds a manifest file in the first manifest folder that holds it.
+ *
+ * Looks for `<dir>/.claude-plugin/<file>`, then `<dir>/.cursor-plugin/<file>`.
+ *
+ * @param dir - Absolute folder of the plugin or source.
+ * @param file - Manifest file name, e.g. `marketplace.json`.
+ * @returns Absolute path of the first existing file, or `null` when neither exists.
+ */
+export declare function manifestFile(dir: string, file: string): string | null;
+/**
+ * @brief Resolves a relative path against a base folder and rejects a result outside `root`.
+ *
+ * @param root - Absolute folder nothing may leave, e.g. a source checkout.
+ * @param base - Absolute folder `rel` is resolved against.
+ * @param rel - Path to resolve, as written in a manifest.
+ * @returns Absolute resolved path, which is `root` or lies below it.
+ * @throws {Error} When the path points outside `root`.
+ */
+export declare function resolveInside(root: string, base: string, rel: string): string;
+/**
+ * @brief Reads the plugins a source's `marketplace.json` lists.
+ *
+ * Plugins whose `source` is not a relative path (a git or npm reference) are skipped with a warning.
+ *
+ * @param root - Absolute root of the source.
+ * @returns Plugins and skip warnings, or `null` when the source has no marketplace.
+ * @throws {Error} When the marketplace is not valid JSON, or a plugin path leaves the source.
+ */
+export declare function readMarketplace(root: string): {
+    plugins: MarketplacePlugin[];
+    warnings: string[];
+} | null;
+//# sourceMappingURL=marketplace.d.ts.map

package/dist/installer/marketplace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"marketplace.d.ts","sourceRoot":"","sources":["../../src/installer/marketplace.ts"],"names":[],"mappings":"AAKA,wFAAwF;AACxF,eAAO,MAAM,aAAa,UAAuC,CAAA;AAWjE;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,EAAG,MAAM,CAAA;CACb;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAMrE;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAM7E;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,IAAI,CAezG"}

package/dist/installer/marketplace.js

@@ -0,0 +1,72 @@
+// packages/core/src/installer/marketplace.ts
+import fs from "node:fs";
+import path from "node:path";
+import { z } from "zod";
+/** Folders a plugin or marketplace manifest may sit in, in the order they are tried. */
+export const MANIFEST_DIRS = [".claude-plugin", ".cursor-plugin"];
+const MARKETPLACE_FILE = "marketplace.json";
+const MarketplaceSchema = z.object({
+    plugins: z.array(z.object({
+        name: z.string().min(1),
+        source: z.unknown(),
+    })).default([]),
+});
+/**
+ * @brief Finds a manifest file in the first manifest folder that holds it.
+ *
+ * Looks for `<dir>/.claude-plugin/<file>`, then `<dir>/.cursor-plugin/<file>`.
+ *
+ * @param dir - Absolute folder of the plugin or source.
+ * @param file - Manifest file name, e.g. `marketplace.json`.
+ * @returns Absolute path of the first existing file, or `null` when neither exists.
+ */
+export function manifestFile(dir, file) {
+    for (const manifestDir of MANIFEST_DIRS) {
+        const candidate = path.join(dir, manifestDir, file);
+        if (fs.existsSync(candidate))
+            return candidate;
+    }
+    return null;
+}
+/**
+ * @brief Resolves a relative path against a base folder and rejects a result outside `root`.
+ *
+ * @param root - Absolute folder nothing may leave, e.g. a source checkout.
+ * @param base - Absolute folder `rel` is resolved against.
+ * @param rel - Path to resolve, as written in a manifest.
+ * @returns Absolute resolved path, which is `root` or lies below it.
+ * @throws {Error} When the path points outside `root`.
+ */
+export function resolveInside(root, base, rel) {
+    const resolved = path.resolve(base, rel);
+    if (resolved !== root && !resolved.startsWith(root + path.sep)) {
+        throw new Error(`manifest path "${rel}" points outside the source`);
+    }
+    return resolved;
+}
+/**
+ * @brief Reads the plugins a source's `marketplace.json` lists.
+ *
+ * Plugins whose `source` is not a relative path (a git or npm reference) are skipped with a warning.
+ *
+ * @param root - Absolute root of the source.
+ * @returns Plugins and skip warnings, or `null` when the source has no marketplace.
+ * @throws {Error} When the marketplace is not valid JSON, or a plugin path leaves the source.
+ */
+export function readMarketplace(root) {
+    const file = manifestFile(root, MARKETPLACE_FILE);
+    if (file === null)
+        return null;
+    const marketplace = MarketplaceSchema.parse(JSON.parse(fs.readFileSync(file, "utf8")));
+    const plugins = [];
+    const warnings = [];
+    for (const plugin of marketplace.plugins) {
+        if (typeof plugin.source !== "string") {
+            warnings.push(`${plugin.name}: marketplace source is not a relative path, skipped`);
+            continue;
+        }
+        plugins.push({ name: plugin.name, dir: resolveInside(root, root, plugin.source) });
+    }
+    return { plugins, warnings };
+}
+//# sourceMappingURL=marketplace.js.map

package/dist/installer/marketplace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"marketplace.js","sourceRoot":"","sources":["../../src/installer/marketplace.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,wFAAwF;AACxF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAA;AAEjE,MAAM,gBAAgB,GAAG,kBAAkB,CAAA;AAE3C,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACxB,IAAI,EAAI,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;KACpB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAChB,CAAC,CAAA;AAaF;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,IAAY;IACpD,KAAK,MAAM,WAAW,IAAI,aAAa,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,CAAA;QACnD,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAA;IAChD,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,IAAY,EAAE,GAAW;IACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IACxC,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,6BAA6B,CAAC,CAAA;IACrE,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAA;IACjD,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAE9B,MAAM,WAAW,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA;IACtF,MAAM,OAAO,GAAwB,EAAE,CAAA;IACvC,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,KAAK,MAAM,MAAM,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;QACzC,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACtC,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,sDAAsD,CAAC,CAAA;YACnF,SAAQ;QACV,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IACpF,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAA;AAC9B,CAAC"}