@kb-labs/marketplace-entry 2.111.0 → 2.112.0

package/dist/commands/install.js

@@ -1,45 +1,89 @@
 import { defineCommand, validationError, handleError, useEnv } from '@kb-labs/sdk';
+import { SessionManager, CredentialsManager } from '@kb-labs/cli-runtime/gateway';
 import { findProjectConfigRoot } from '@kb-labs/core-workspace';
 
 // src/commands/install.ts
 var DEFAULT_GATEWAY_URL = "http://127.0.0.1:4000";
 var MARKETPLACE_PREFIX = "/api/v1/marketplace";
 var FETCH_TIMEOUT_MS = 3e4;
-function getBaseUrl() {
+async function loadAuth() {
+  const sessionManager = new SessionManager();
+  const session = await sessionManager.load();
+  if (session) {
+    const current2 = sessionManager.isExpired(session) ? await sessionManager.refresh(session) : session;
+    return authState(current2, () => sessionManager.refresh(current2));
+  }
+  const credentialsManager = new CredentialsManager();
+  const credentials = await credentialsManager.load();
+  if (!credentials) {
+    return null;
+  }
+  const current = credentialsManager.isExpired(credentials) ? await credentialsManager.refresh(credentials) : credentials;
+  return authState(current, () => credentialsManager.refresh(current));
+}
+function authState(credentials, refresh) {
+  return {
+    gatewayUrl: credentials.gatewayUrl,
+    accessToken: credentials.accessToken,
+    refresh: async () => {
+      const updated = await refresh();
+      return authState(updated, refresh);
+    }
+  };
+}
+function getBaseUrl(gatewayUrl) {
   const marketplaceUrl = useEnv("KB_MARKETPLACE_URL");
   if (marketplaceUrl) {
     return `${marketplaceUrl}${MARKETPLACE_PREFIX}`;
   }
-  const gateway = useEnv("KB_GATEWAY_URL") ?? DEFAULT_GATEWAY_URL;
+  const gateway = gatewayUrl ?? useEnv("KB_GATEWAY_URL") ?? DEFAULT_GATEWAY_URL;
   return `${gateway}${MARKETPLACE_PREFIX}`;
 }
-async function post(path, body) {
-  const url = `${getBaseUrl()}${path}`;
-  const controller = new AbortController();
-  const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
-  try {
-    const res = await fetch(url, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify(body),
-      signal: controller.signal
-    });
-    if (!res.ok) {
-      const text = await res.text();
-      throw new Error(`Marketplace ${path} failed (${res.status}): ${text}`);
-    }
-    if (res.status === 204) {
-      return void 0;
-    }
-    return await res.json();
-  } catch (err) {
-    if (err.name === "AbortError") {
-      throw new Error(`Marketplace ${path} timed out \u2014 is the marketplace service running? (kb-dev start marketplace)`);
+async function request(method, path, body, params) {
+  let auth = await loadAuth();
+  const url = new URL(`${getBaseUrl(auth?.gatewayUrl)}${path}`);
+  for (let attempt = 0; attempt < 2; attempt += 1) {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
+    try {
+      const headers = {};
+      if (body) {
+        headers["Content-Type"] = "application/json";
+      }
+      if (auth) {
+        headers.Authorization = `Bearer ${auth.accessToken}`;
+      }
+      const response = await fetch(url.toString(), {
+        method,
+        headers,
+        body: body ? JSON.stringify(body) : void 0,
+        signal: controller.signal
+      });
+      if (response.status === 401 && auth && attempt === 0) {
+        auth = await auth.refresh();
+        continue;
+      }
+      if (!response.ok) {
+        const text = await response.text();
+        throw new Error(`Marketplace ${path} failed (${response.status}): ${text}`);
+      }
+      if (response.status === 204) {
+        return void 0;
+      }
+      return await response.json();
+    } catch (err) {
+      if (err.name === "AbortError") {
+        throw new Error(`Marketplace ${path} timed out \u2014 is the marketplace service running? (kb-dev start marketplace)`);
+      }
+      throw err;
+    } finally {
+      clearTimeout(timer);
     }
-    throw err;
-  } finally {
-    clearTimeout(timer);
   }
+  throw new Error(`Marketplace ${path} failed after refreshing authentication`);
+}
+async function post(path, body) {
+  return request("POST", path, body);
 }
 var SCOPE_FLAG_CHOICES = ["platform", "project"];
 async function resolveCliScope(cwd, flag) {

package/dist/commands/install.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/http.ts","../../src/scope.ts","../../src/commands/install.ts"],"names":["projectRoot"],"mappings":";;;;AAMA,IAAM,mBAAA,GAAsB,uBAAA;AAC5B,IAAM,kBAAA,GAAqB,qBAAA;AAC3B,IAAM,gBAAA,GAAmB,GAAA;AAEzB,SAAS,UAAA,GAAqB;AAC5B,EAAA,MAAM,cAAA,GAAiB,OAAO,oBAAoB,CAAA;AAClD,EAAA,IAAI,cAAA,EAAgB;AAClB,IAAA,OAAO,CAAA,EAAG,cAAc,CAAA,EAAG,kBAAkB,CAAA,CAAA;AAAA,EAC/C;AACA,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,gBAAgB,CAAA,IAAK,mBAAA;AAC5C,EAAA,OAAO,CAAA,EAAG,OAAO,CAAA,EAAG,kBAAkB,CAAA,CAAA;AACxC;AAEA,eAAsB,IAAA,CAAkB,MAAc,IAAA,EAA2C;AAC/F,EAAA,MAAM,GAAA,GAAM,CAAA,EAAG,UAAA,EAAY,GAAG,IAAI,CAAA,CAAA;AAClC,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,gBAAgB,CAAA;AACnE,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,MAC3B,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,MAC9C,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,MACzB,QAAQ,UAAA,CAAW;AAAA,KACpB,CAAA;AACD,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,MAAA,MAAM,IAAI,MAAM,CAAA,YAAA,EAAe,IAAI,YAAY,GAAA,CAAI,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,CAAE,CAAA;AAAA,IACvE;AAGA,IAAA,IAAI,GAAA,CAAI,WAAW,GAAA,EAAK;AAAE,MAAA,OAAO,KAAA,CAAA;AAAA,IAAgB;AACjD,IAAA,OAAO,MAAM,IAAI,IAAA,EAAK;AAAA,EACxB,SAAS,GAAA,EAAK;AACZ,IAAA,IAAK,GAAA,CAAc,SAAS,YAAA,EAAc;AACxC,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,gFAAA,CAA6E,CAAA;AAAA,IAClH;AACA,IAAA,MAAM,GAAA;AAAA,EACR,CAAA,SAAE;AACA,IAAA,YAAA,CAAa,KAAK,CAAA;AAAA,EACpB;AACF;AC1BO,IAAM,kBAAA,GAAkD,CAAC,UAAA,EAAY,SAAS,CAAA;AAoBrF,eAAsB,eAAA,CACpB,KACA,IAAA,EAC2B;AAC3B,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,mBAAA,CAAoB,IAAI,CAAA;AACxB,IAAA,IAAI,SAAS,SAAA,EAAW;AACtB,MAAA,MAAMA,YAAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,MAAA,IAAI,CAACA,YAAAA,EAAa;AAChB,QAAA,MAAM,IAAI,aAAA;AAAA,UACR,8BAAA;AAAA,UACA,qEAAqE,GAAG,CAAA,mBAAA;AAAA,SAC1E;AAAA,MACF;AACA,MAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAAA,YAAAA,EAAa,QAAQ,MAAA,EAAO;AAAA,IACzD;AACA,IAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,MAAA,EAAO;AAAA,EAC7C;AAEA,EAAA,MAAM,WAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAa,QAAQ,aAAA,EAAc;AAAA,EAChE;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,UAAA,EAAW;AACjD;AAkBA,SAAS,oBAAoB,KAAA,EAAkD;AAC7E,EAAA,IAAI,CAAC,kBAAA,CAAmB,QAAA,CAAS,KAAyB,CAAA,EAAG;AAC3D,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,eAAA;AAAA,MACA,CAAA,wBAAA,EAA2B,mBAAmB,IAAA,CAAK,IAAI,CAAC,CAAA,MAAA,EAAS,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC,CAAA,CAAA;AAAA,KACxF;AAAA,EACF;AACF;AAEO,IAAM,aAAA,GAAN,cAA4B,KAAA,CAAM;AAAA,EAC9B,IAAA;AAAA,EACT,WAAA,CAAY,MAAc,OAAA,EAAiB;AACzC,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AAAA,EACd;AACF,CAAA;AAOO,SAAS,UAAU,GAAA,EAGxB;AACA,EAAA,OAAO;AAAA,IACL,OAAO,GAAA,CAAI,KAAA;AAAA,IACX,GAAI,IAAI,WAAA,GAAc,EAAE,aAAa,GAAA,CAAI,WAAA,KAAgB;AAAC,GAC5D;AACF;;;ACpFA,IAAO,kBAAQ,aAAA,CAAwD;AAAA,EACrE,EAAA,EAAI,qBAAA;AAAA,EACJ,WAAA,EAAa,qCAAA;AAAA,EAEb,OAAA,EAAS;AAAA,IACP,MAAM,MAAA,CAAO,IAAA,EAAuB,KAAA,EAAqB;AACvD,MAAA,MAAM,IAAA,GAAO,KAAA,CAAM,IAAA,IAAQ,EAAC;AAC5B,MAAA,MAAM,WAAW,IAAA,CAAK,MAAA,GAAS,CAAA,GAAI,IAAA,GAAO,CAAC,yBAAyB,CAAA;AACpE,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,CAAA,QAAA,EAAW,QAAA,CAAS,IAAA,CAAK,IAAI,CAAC,CAAA,iBAAA,CAAA;AAAA,QACvC,UAAA,EAAY,QAAA,CAAS,GAAA,CAAI,CAAA,GAAA,MAAQ;AAAA,UAC/B,IAAA,EAAM,QAAA;AAAA,UACN,QAAA,EAAU,qBAAA;AAAA,UACV,OAAA,EAAS,EAAE,OAAA,EAAS,GAAA;AAAI,SAC1B,CAAE;AAAA,OACJ;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,OAAA,CAAQ,GAAA,EAAsB,KAAA,EAAgE;AAClG,MAAA,MAAM,IAAA,GAAO,KAAA,CAAM,IAAA,IAAQ,EAAC;AAC5B,MAAA,MAAM,KAAA,GAAS,MAAM,KAAA,IAAS,KAAA;AAE9B,MAAA,IAAI,IAAA,CAAK,WAAW,CAAA,EAAG;AACrB,QAAA,eAAA,CAAgB,GAAA,EAAK,gDAAA,EAAkD,yCAAA,EAA2C,KAAA,CAAM,IAAI,CAAA;AAC5H,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,kDAAkD,MAAA,EAAQ,EAAE,SAAA,EAAW,IAAI,QAAA,EAAU,EAAC,EAAG,KAAA,EAAO,IAAG,EAAE;AAAA,MAClI;AAEA,MAAA,IAAI,QAAA;AACJ,MAAA,IAAI;AACF,QAAA,QAAA,GAAW,MAAM,eAAA,CAAgB,GAAA,CAAI,GAAA,EAAK,MAAM,KAAK,CAAA;AAAA,MACvD,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,eAAe,aAAA,EAAe;AAChC,UAAA,eAAA,CAAgB,GAAA,EAAK,GAAA,CAAI,OAAA,EAAS,MAAA,EAAW,MAAM,IAAI,CAAA;AAAA,QACzD,CAAA,MAAO;AACL,UAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAAA,QAClC;AACA,QAAA,OAAO,EAAE,IAAI,KAAA,EAAO,KAAA,EAAO,eAAe,KAAA,GAAQ,GAAA,CAAI,UAAU,MAAA,CAAO,GAAG,GAAG,MAAA,EAAQ,EAAE,WAAW,EAAC,EAAG,UAAU,EAAC,EAAG,KAAA,EAAO,EAAA,EAAG,EAAE;AAAA,MAClI;AAEA,MAAA,IAAI;AACF,QAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAwB,mBAAA,EAAqB;AAAA,UAChE,KAAA,EAAO,IAAA;AAAA,UACP,GAAA,EAAK,OAAA,CAAQ,KAAA,CAAM,GAAG,CAAA;AAAA,UACtB,GAAI,MAAM,KAAA,GAAQ,EAAE,OAAO,KAAA,CAAM,KAAA,KAAU,EAAC;AAAA,UAC5C,GAAG,UAAU,QAAQ;AAAA,SACtB,CAAA;AAED,QAAA,IAAI,MAAM,IAAA,EAAM;AACd,UAAA,GAAA,CAAI,EAAA,EAAI,OAAO,MAAM,CAAA;AAAA,QACvB,CAAA,MAAO;AACL,UAAA,GAAA,CAAI,IAAI,OAAA,GAAU,CAAA,+BAAA,EAAkC,OAAO,KAAA,IAAS,QAAA,CAAS,KAAK,CAAA,CAAA,CAAA,EAAK;AAAA,YACrF,QAAA,EAAU;AAAA,cACR;AAAA,gBACE,MAAA,EAAQ,WAAA;AAAA,gBACR,KAAA,EAAO,MAAA,CAAO,SAAA,CAAU,GAAA,CAAI,OAAK,CAAA,EAAG,CAAA,CAAE,EAAE,CAAA,CAAA,EAAI,CAAA,CAAE,OAAO,CAAA,EAAA,EAAK,CAAA,CAAE,WAAW,CAAA,CAAA,CAAG;AAAA,eAC5E;AAAA,cACA,GAAI,MAAA,CAAO,QAAA,CAAS,MAAA,GAAS,IACzB,CAAC,EAAE,MAAA,EAAQ,UAAA,EAAY,KAAA,EAAO,MAAA,CAAO,QAAA,EAAU,IAC/C;AAAC;AACP,WACD,CAAA;AAAA,QACH;AAEA,QAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,MAAA,EAAO;AAAA,MAC5B,SAAS,GAAA,EAAK;AACZ,QAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAChC,QAAA,OAAO,EAAE,IAAI,KAAA,EAAO,KAAA,EAAO,eAAe,KAAA,GAAQ,GAAA,CAAI,UAAU,MAAA,CAAO,GAAG,GAAG,MAAA,EAAQ,EAAE,WAAW,EAAC,EAAG,UAAU,EAAC,EAAG,KAAA,EAAO,EAAA,EAAG,EAAE;AAAA,MAClI;AAAA,IACF;AAAA;AAEJ,CAAC","file":"install.js","sourcesContent":["/**\n * HTTP client for marketplace service via Gateway.\n */\n\nimport { useEnv } from '@kb-labs/sdk';\n\nconst DEFAULT_GATEWAY_URL = 'http://127.0.0.1:4000';\nconst MARKETPLACE_PREFIX = '/api/v1/marketplace';\nconst FETCH_TIMEOUT_MS = 30_000;\n\nfunction getBaseUrl(): string {\n  const marketplaceUrl = useEnv('KB_MARKETPLACE_URL');\n  if (marketplaceUrl) {\n    return `${marketplaceUrl}${MARKETPLACE_PREFIX}`;\n  }\n  const gateway = useEnv('KB_GATEWAY_URL') ?? DEFAULT_GATEWAY_URL;\n  return `${gateway}${MARKETPLACE_PREFIX}`;\n}\n\nexport async function post<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  const url = `${getBaseUrl()}${path}`;\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n  try {\n    const res = await fetch(url, {\n      method: 'POST',\n      headers: { 'Content-Type': 'application/json' },\n      body: JSON.stringify(body),\n      signal: controller.signal,\n    });\n    if (!res.ok) {\n      const text = await res.text();\n      throw new Error(`Marketplace ${path} failed (${res.status}): ${text}`);\n    }\n    // 204 No Content (e.g. unlink, uninstall) has no body — don't call\n    // res.json() or it throws \"Unexpected end of JSON input\".\n    if (res.status === 204) { return undefined as T; }\n    return await res.json() as T;\n  } catch (err) {\n    if ((err as Error).name === 'AbortError') {\n      throw new Error(`Marketplace ${path} timed out — is the marketplace service running? (kb-dev start marketplace)`);\n    }\n    throw err;\n  } finally {\n    clearTimeout(timer);\n  }\n}\n\nexport async function patch<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  const url = `${getBaseUrl()}${path}`;\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n  try {\n    const res = await fetch(url, {\n      method: 'PATCH',\n      headers: { 'Content-Type': 'application/json' },\n      body: JSON.stringify(body),\n      signal: controller.signal,\n    });\n    if (!res.ok) {\n      const text = await res.text();\n      throw new Error(`Marketplace ${path} failed (${res.status}): ${text}`);\n    }\n    return await res.json() as T;\n  } catch (err) {\n    if ((err as Error).name === 'AbortError') {\n      throw new Error(`Marketplace ${path} timed out — is the marketplace service running? (kb-dev start marketplace)`);\n    }\n    throw err;\n  } finally {\n    clearTimeout(timer);\n  }\n}\n\nexport async function del<T = unknown>(path: string, body?: Record<string, unknown>): Promise<T> {\n  const url = `${getBaseUrl()}${path}`;\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n  try {\n    const res = await fetch(url, {\n      method: 'DELETE',\n      headers: body ? { 'Content-Type': 'application/json' } : {},\n      body: body ? JSON.stringify(body) : undefined,\n      signal: controller.signal,\n    });\n    if (!res.ok) {\n      const text = await res.text();\n      throw new Error(`Marketplace ${path} failed (${res.status}): ${text}`);\n    }\n    if (res.status === 204) { return undefined as T; }\n    return await res.json() as T;\n  } catch (err) {\n    if ((err as Error).name === 'AbortError') {\n      throw new Error(`Marketplace ${path} timed out — is the marketplace service running? (kb-dev start marketplace)`);\n    }\n    throw err;\n  } finally {\n    clearTimeout(timer);\n  }\n}\n\nexport async function get<T = unknown>(path: string, params?: Record<string, string>): Promise<T> {\n  const url = new URL(`${getBaseUrl()}${path}`);\n  if (params) {\n    for (const [k, v] of Object.entries(params)) {url.searchParams.set(k, v);}\n  }\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n  try {\n    const res = await fetch(url.toString(), { signal: controller.signal });\n    if (!res.ok) {\n      const text = await res.text();\n      throw new Error(`Marketplace ${path} failed (${res.status}): ${text}`);\n    }\n    return await res.json() as T;\n  } catch (err) {\n    if ((err as Error).name === 'AbortError') {\n      throw new Error(`Marketplace ${path} timed out — is the marketplace service running? (kb-dev start marketplace)`);\n    }\n    throw err;\n  } finally {\n    clearTimeout(timer);\n  }\n}\n","/**\n * @module @kb-labs/marketplace-entry/scope\n *\n * Client-side scope resolution for marketplace CLI commands. Uses the\n * canonical `findProjectConfigRoot` helper from `@kb-labs/core-workspace`\n * so the detection rules (which filenames count, how walk-up stops) match\n * what the config loader and the marketplace daemon enforce.\n *\n * Rules:\n *  - `project` is the default if cwd (or any ancestor up to the filesystem\n *    root) contains `.kb/kb.config.{json,jsonc}`.\n *  - Otherwise the default is `platform`.\n *  - `--scope` always overrides detection.\n *  - For scope=\"project\" we return the absolute projectRoot so the daemon\n *    doesn't need to re-discover it.\n */\n\nimport { findProjectConfigRoot } from '@kb-labs/core-workspace';\nimport type { MarketplaceScope, MarketplaceQueryScope } from '@kb-labs/marketplace-contracts';\n\nexport const SCOPE_FLAG_CHOICES: readonly MarketplaceScope[] = ['platform', 'project'];\nexport const QUERY_SCOPE_FLAG_CHOICES: readonly MarketplaceQueryScope[] = ['platform', 'project', 'all'];\n\nexport interface ResolvedCliScope {\n  scope: MarketplaceScope;\n  projectRoot?: string;\n  /** How the scope was determined — surfaces in --verbose logs. */\n  reason: 'flag' | 'auto-detect' | 'fallback';\n}\n\nexport interface ResolvedCliQueryScope extends Omit<ResolvedCliScope, 'scope'> {\n  scope: MarketplaceQueryScope;\n}\n\n/**\n * Resolve the effective scope for a mutating command (`link`, `unlink`,\n * `install`, ...). `flag` is the value of `--scope` (if supplied). The\n * helper never returns `'all'` for mutating commands — callers restrict\n * choices via `SCOPE_FLAG_CHOICES`.\n */\nexport async function resolveCliScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliScope> {\n  if (flag) {\n    assertMutatingScope(flag);\n    if (flag === 'project') {\n      const projectRoot = await findProjectConfigRoot(cwd);\n      if (!projectRoot) {\n        throw new CliScopeError(\n          'SCOPE_PROJECT_ROOT_NOT_FOUND',\n          `--scope=project requires a .kb/kb.config.{json,jsonc} ancestor of ${cwd} — none found.`,\n        );\n      }\n      return { scope: 'project', projectRoot, reason: 'flag' };\n    }\n    return { scope: 'platform', reason: 'flag' };\n  }\n\n  const projectRoot = await findProjectConfigRoot(cwd);\n  if (projectRoot) {\n    return { scope: 'project', projectRoot, reason: 'auto-detect' };\n  }\n  return { scope: 'platform', reason: 'fallback' };\n}\n\n/**\n * Resolve the effective scope for a read-only command (`list`). Accepts\n * `'all'` as an explicit flag value.\n */\nexport async function resolveCliQueryScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliQueryScope> {\n  if (flag === 'all') {\n    const projectRoot = await findProjectConfigRoot(cwd);\n    return { scope: 'all', projectRoot, reason: 'flag' };\n  }\n  const base = await resolveCliScope(cwd, flag);\n  return { scope: base.scope, projectRoot: base.projectRoot, reason: base.reason };\n}\n\nfunction assertMutatingScope(value: string): asserts value is MarketplaceScope {\n  if (!SCOPE_FLAG_CHOICES.includes(value as MarketplaceScope)) {\n    throw new CliScopeError(\n      'SCOPE_INVALID',\n      `--scope must be one of: ${SCOPE_FLAG_CHOICES.join(', ')} (got ${JSON.stringify(value)})`,\n    );\n  }\n}\n\nexport class CliScopeError extends Error {\n  readonly code: string;\n  constructor(code: string, message: string) {\n    super(message);\n    this.code = code;\n    this.name = 'CliScopeError';\n  }\n}\n\n/**\n * Build the body-payload fragment expected by `parseMutatingScope` on the\n * API side: `{ scope, projectRoot? }`. Kept as a helper so every command\n * sends the same shape and nothing drifts out-of-sync with the server.\n */\nexport function scopeBody(ctx: ResolvedCliScope | ResolvedCliQueryScope): {\n  scope: MarketplaceScope | MarketplaceQueryScope;\n  projectRoot?: string;\n} {\n  return {\n    scope: ctx.scope,\n    ...(ctx.projectRoot ? { projectRoot: ctx.projectRoot } : {}),\n  };\n}\n","import { defineCommand, validationError, handleError, type PluginContextV3, type CommandResult } from '@kb-labs/sdk';\nimport { post } from '../http.js';\nimport { resolveCliScope, scopeBody, CliScopeError } from '../scope.js';\n\ninterface InstallFlags {\n  dev?: boolean;\n  json?: boolean;\n  scope?: string;\n  token?: string;\n  'dry-run'?: boolean;\n}\n\ninterface InstallInput {\n  argv?: string[];\n  flags?: InstallFlags;\n}\n\ninterface InstalledEntry {\n  id: string;\n  version: string;\n  primaryKind: string;\n}\n\ninterface InstallResultData {\n  installed: InstalledEntry[];\n  warnings: string[];\n  scope: string;\n}\n\nexport default defineCommand<unknown, InstallInput, InstallResultData>({\n  id: 'marketplace:install',\n  description: 'Install package(s) from marketplace',\n\n  handler: {\n    async intent(_ctx: PluginContextV3, input: InstallInput) {\n      const argv = input.argv ?? [];\n      const packages = argv.length > 0 ? argv : ['(no packages specified)'];\n      return {\n        summary: `Install ${packages.join(', ')} from marketplace`,\n        operations: packages.map(pkg => ({\n          type: 'create' as const,\n          resource: 'marketplace-package',\n          details: { package: pkg },\n        })),\n      };\n    },\n\n    async execute(ctx: PluginContextV3, input: InstallInput): Promise<CommandResult<InstallResultData>> {\n      const argv = input.argv ?? [];\n      const flags = (input.flags ?? input) as InstallFlags;\n\n      if (argv.length === 0) {\n        validationError(ctx, 'Please specify at least one package to install', 'Usage: kb marketplace install <package>', flags.json);\n        return { ok: false, error: 'Please specify at least one package to install', result: { installed: [], warnings: [], scope: '' } };\n      }\n\n      let scopeCtx;\n      try {\n        scopeCtx = await resolveCliScope(ctx.cwd, flags.scope);\n      } catch (err) {\n        if (err instanceof CliScopeError) {\n          validationError(ctx, err.message, undefined, flags.json);\n        } else {\n          handleError(ctx, err, flags.json);\n        }\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { installed: [], warnings: [], scope: '' } };\n      }\n\n      try {\n        const result = await post<InstallResultData>('/packages/install', {\n          specs: argv,\n          dev: Boolean(flags.dev),\n          ...(flags.token ? { token: flags.token } : {}),\n          ...scopeBody(scopeCtx),\n        });\n\n        if (flags.json) {\n          ctx.ui?.json?.(result);\n        } else {\n          ctx.ui?.success?.(`Marketplace install completed (${result.scope ?? scopeCtx.scope})`, {\n            sections: [\n              {\n                header: 'Installed',\n                items: result.installed.map(p => `${p.id}@${p.version} (${p.primaryKind})`),\n              },\n              ...(result.warnings.length > 0\n                ? [{ header: 'Warnings', items: result.warnings }]\n                : []),\n            ],\n          });\n        }\n\n        return { ok: true, result };\n      } catch (err) {\n        handleError(ctx, err, flags.json);\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { installed: [], warnings: [], scope: '' } };\n      }\n    },\n  },\n});\n"]}
+{"version":3,"sources":["../../src/http.ts","../../src/scope.ts","../../src/commands/install.ts"],"names":["current","projectRoot"],"mappings":";;;;;AAQA,IAAM,mBAAA,GAAsB,uBAAA;AAC5B,IAAM,kBAAA,GAAqB,qBAAA;AAC3B,IAAM,gBAAA,GAAmB,GAAA;AAQzB,eAAe,QAAA,GAAsC;AACnD,EAAA,MAAM,cAAA,GAAiB,IAAI,cAAA,EAAe;AAC1C,EAAA,MAAM,OAAA,GAAU,MAAM,cAAA,CAAe,IAAA,EAAK;AAC1C,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,MAAMA,QAAAA,GAAU,eAAe,SAAA,CAAU,OAAO,IAAI,MAAM,cAAA,CAAe,OAAA,CAAQ,OAAO,CAAA,GAAI,OAAA;AAC5F,IAAA,OAAO,UAAUA,QAAAA,EAAS,MAAM,cAAA,CAAe,OAAA,CAAQA,QAAO,CAAC,CAAA;AAAA,EACjE;AAEA,EAAA,MAAM,kBAAA,GAAqB,IAAI,kBAAA,EAAmB;AAClD,EAAA,MAAM,WAAA,GAAc,MAAM,kBAAA,CAAmB,IAAA,EAAK;AAClD,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,OAAA,GAAU,mBAAmB,SAAA,CAAU,WAAW,IAAI,MAAM,kBAAA,CAAmB,OAAA,CAAQ,WAAW,CAAA,GAAI,WAAA;AAC5G,EAAA,OAAO,UAAU,OAAA,EAAS,MAAM,kBAAA,CAAmB,OAAA,CAAQ,OAAO,CAAC,CAAA;AACrE;AAEA,SAAS,SAAA,CAAU,aAAsD,OAAA,EAA4E;AACnJ,EAAA,OAAO;AAAA,IACL,YAAY,WAAA,CAAY,UAAA;AAAA,IACxB,aAAa,WAAA,CAAY,WAAA;AAAA,IACzB,SAAS,YAAY;AACnB,MAAA,MAAM,OAAA,GAAU,MAAM,OAAA,EAAQ;AAC9B,MAAA,OAAO,SAAA,CAAU,SAAS,OAAO,CAAA;AAAA,IACnC;AAAA,GACF;AACF;AAEA,SAAS,WAAW,UAAA,EAA6B;AAC/C,EAAA,MAAM,cAAA,GAAiB,OAAO,oBAAoB,CAAA;AAClD,EAAA,IAAI,cAAA,EAAgB;AAClB,IAAA,OAAO,CAAA,EAAG,cAAc,CAAA,EAAG,kBAAkB,CAAA,CAAA;AAAA,EAC/C;AACA,EAAA,MAAM,OAAA,GAAU,UAAA,IAAc,MAAA,CAAO,gBAAgB,CAAA,IAAK,mBAAA;AAC1D,EAAA,OAAO,CAAA,EAAG,OAAO,CAAA,EAAG,kBAAkB,CAAA,CAAA;AACxC;AAEA,eAAe,OAAA,CAAW,MAAA,EAAgB,IAAA,EAAc,IAAA,EAAgC,MAAA,EAA6C;AACnI,EAAA,IAAI,IAAA,GAAO,MAAM,QAAA,EAAS;AAC1B,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,CAAA,EAAG,UAAA,CAAW,MAAM,UAAU,CAAC,CAAA,EAAG,IAAI,CAAA,CAAE,CAAA;AAK5D,EAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,GAAU,CAAA,EAAG,WAAW,CAAA,EAAG;AAC/C,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,gBAAgB,CAAA;AACnE,IAAA,IAAI;AACF,MAAA,MAAM,UAAkC,EAAC;AACzC,MAAA,IAAI,IAAA,EAAM;AAAE,QAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAAA,MAAoB;AAC1D,MAAA,IAAI,IAAA,EAAM;AAAE,QAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,IAAA,CAAK,WAAW,CAAA,CAAA;AAAA,MAAI;AAClE,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,CAAI,UAAS,EAAG;AAAA,QAC3C,MAAA;AAAA,QACA,OAAA;AAAA,QACA,IAAA,EAAM,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,GAAI,KAAA,CAAA;AAAA,QACpC,QAAQ,UAAA,CAAW;AAAA,OACpB,CAAA;AACD,MAAA,IAAI,QAAA,CAAS,MAAA,KAAW,GAAA,IAAO,IAAA,IAAQ,YAAY,CAAA,EAAG;AACpD,QAAA,IAAA,GAAO,MAAM,KAAK,OAAA,EAAQ;AAC1B,QAAA;AAAA,MACF;AACA,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,QAAA,MAAM,IAAI,MAAM,CAAA,YAAA,EAAe,IAAI,YAAY,QAAA,CAAS,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,CAAE,CAAA;AAAA,MAC5E;AACA,MAAA,IAAI,QAAA,CAAS,WAAW,GAAA,EAAK;AAAE,QAAA,OAAO,KAAA,CAAA;AAAA,MAAgB;AACtD,MAAA,OAAO,MAAM,SAAS,IAAA,EAAK;AAAA,IAC7B,SAAS,GAAA,EAAK;AACZ,MAAA,IAAK,GAAA,CAAc,SAAS,YAAA,EAAc;AACxC,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,gFAAA,CAA6E,CAAA;AAAA,MAClH;AACA,MAAA,MAAM,GAAA;AAAA,IACR,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAAA,IACpB;AAAA,EACF;AACA,EAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,uCAAA,CAAyC,CAAA;AAC9E;AAEA,eAAsB,IAAA,CAAkB,MAAc,IAAA,EAA2C;AAC/F,EAAA,OAAO,OAAA,CAAW,MAAA,EAAQ,IAAA,EAAM,IAAI,CAAA;AACtC;AC/EO,IAAM,kBAAA,GAAkD,CAAC,UAAA,EAAY,SAAS,CAAA;AAoBrF,eAAsB,eAAA,CACpB,KACA,IAAA,EAC2B;AAC3B,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,mBAAA,CAAoB,IAAI,CAAA;AACxB,IAAA,IAAI,SAAS,SAAA,EAAW;AACtB,MAAA,MAAMC,YAAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,MAAA,IAAI,CAACA,YAAAA,EAAa;AAChB,QAAA,MAAM,IAAI,aAAA;AAAA,UACR,8BAAA;AAAA,UACA,qEAAqE,GAAG,CAAA,mBAAA;AAAA,SAC1E;AAAA,MACF;AACA,MAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAAA,YAAAA,EAAa,QAAQ,MAAA,EAAO;AAAA,IACzD;AACA,IAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,MAAA,EAAO;AAAA,EAC7C;AAEA,EAAA,MAAM,WAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAa,QAAQ,aAAA,EAAc;AAAA,EAChE;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,UAAA,EAAW;AACjD;AAkBA,SAAS,oBAAoB,KAAA,EAAkD;AAC7E,EAAA,IAAI,CAAC,kBAAA,CAAmB,QAAA,CAAS,KAAyB,CAAA,EAAG;AAC3D,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,eAAA;AAAA,MACA,CAAA,wBAAA,EAA2B,mBAAmB,IAAA,CAAK,IAAI,CAAC,CAAA,MAAA,EAAS,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC,CAAA,CAAA;AAAA,KACxF;AAAA,EACF;AACF;AAEO,IAAM,aAAA,GAAN,cAA4B,KAAA,CAAM;AAAA,EAC9B,IAAA;AAAA,EACT,WAAA,CAAY,MAAc,OAAA,EAAiB;AACzC,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AAAA,EACd;AACF,CAAA;AAOO,SAAS,UAAU,GAAA,EAGxB;AACA,EAAA,OAAO;AAAA,IACL,OAAO,GAAA,CAAI,KAAA;AAAA,IACX,GAAI,IAAI,WAAA,GAAc,EAAE,aAAa,GAAA,CAAI,WAAA,KAAgB;AAAC,GAC5D;AACF;;;ACpFA,IAAO,kBAAQ,aAAA,CAAwD;AAAA,EACrE,EAAA,EAAI,qBAAA;AAAA,EACJ,WAAA,EAAa,qCAAA;AAAA,EAEb,OAAA,EAAS;AAAA,IACP,MAAM,MAAA,CAAO,IAAA,EAAuB,KAAA,EAAqB;AACvD,MAAA,MAAM,IAAA,GAAO,KAAA,CAAM,IAAA,IAAQ,EAAC;AAC5B,MAAA,MAAM,WAAW,IAAA,CAAK,MAAA,GAAS,CAAA,GAAI,IAAA,GAAO,CAAC,yBAAyB,CAAA;AACpE,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,CAAA,QAAA,EAAW,QAAA,CAAS,IAAA,CAAK,IAAI,CAAC,CAAA,iBAAA,CAAA;AAAA,QACvC,UAAA,EAAY,QAAA,CAAS,GAAA,CAAI,CAAA,GAAA,MAAQ;AAAA,UAC/B,IAAA,EAAM,QAAA;AAAA,UACN,QAAA,EAAU,qBAAA;AAAA,UACV,OAAA,EAAS,EAAE,OAAA,EAAS,GAAA;AAAI,SAC1B,CAAE;AAAA,OACJ;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,OAAA,CAAQ,GAAA,EAAsB,KAAA,EAAgE;AAClG,MAAA,MAAM,IAAA,GAAO,KAAA,CAAM,IAAA,IAAQ,EAAC;AAC5B,MAAA,MAAM,KAAA,GAAS,MAAM,KAAA,IAAS,KAAA;AAE9B,MAAA,IAAI,IAAA,CAAK,WAAW,CAAA,EAAG;AACrB,QAAA,eAAA,CAAgB,GAAA,EAAK,gDAAA,EAAkD,yCAAA,EAA2C,KAAA,CAAM,IAAI,CAAA;AAC5H,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,kDAAkD,MAAA,EAAQ,EAAE,SAAA,EAAW,IAAI,QAAA,EAAU,EAAC,EAAG,KAAA,EAAO,IAAG,EAAE;AAAA,MAClI;AAEA,MAAA,IAAI,QAAA;AACJ,MAAA,IAAI;AACF,QAAA,QAAA,GAAW,MAAM,eAAA,CAAgB,GAAA,CAAI,GAAA,EAAK,MAAM,KAAK,CAAA;AAAA,MACvD,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,eAAe,aAAA,EAAe;AAChC,UAAA,eAAA,CAAgB,GAAA,EAAK,GAAA,CAAI,OAAA,EAAS,MAAA,EAAW,MAAM,IAAI,CAAA;AAAA,QACzD,CAAA,MAAO;AACL,UAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAAA,QAClC;AACA,QAAA,OAAO,EAAE,IAAI,KAAA,EAAO,KAAA,EAAO,eAAe,KAAA,GAAQ,GAAA,CAAI,UAAU,MAAA,CAAO,GAAG,GAAG,MAAA,EAAQ,EAAE,WAAW,EAAC,EAAG,UAAU,EAAC,EAAG,KAAA,EAAO,EAAA,EAAG,EAAE;AAAA,MAClI;AAEA,MAAA,IAAI;AACF,QAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAwB,mBAAA,EAAqB;AAAA,UAChE,KAAA,EAAO,IAAA;AAAA,UACP,GAAA,EAAK,OAAA,CAAQ,KAAA,CAAM,GAAG,CAAA;AAAA,UACtB,GAAI,MAAM,KAAA,GAAQ,EAAE,OAAO,KAAA,CAAM,KAAA,KAAU,EAAC;AAAA,UAC5C,GAAG,UAAU,QAAQ;AAAA,SACtB,CAAA;AAED,QAAA,IAAI,MAAM,IAAA,EAAM;AACd,UAAA,GAAA,CAAI,EAAA,EAAI,OAAO,MAAM,CAAA;AAAA,QACvB,CAAA,MAAO;AACL,UAAA,GAAA,CAAI,IAAI,OAAA,GAAU,CAAA,+BAAA,EAAkC,OAAO,KAAA,IAAS,QAAA,CAAS,KAAK,CAAA,CAAA,CAAA,EAAK;AAAA,YACrF,QAAA,EAAU;AAAA,cACR;AAAA,gBACE,MAAA,EAAQ,WAAA;AAAA,gBACR,KAAA,EAAO,MAAA,CAAO,SAAA,CAAU,GAAA,CAAI,OAAK,CAAA,EAAG,CAAA,CAAE,EAAE,CAAA,CAAA,EAAI,CAAA,CAAE,OAAO,CAAA,EAAA,EAAK,CAAA,CAAE,WAAW,CAAA,CAAA,CAAG;AAAA,eAC5E;AAAA,cACA,GAAI,MAAA,CAAO,QAAA,CAAS,MAAA,GAAS,IACzB,CAAC,EAAE,MAAA,EAAQ,UAAA,EAAY,KAAA,EAAO,MAAA,CAAO,QAAA,EAAU,IAC/C;AAAC;AACP,WACD,CAAA;AAAA,QACH;AAEA,QAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,MAAA,EAAO;AAAA,MAC5B,SAAS,GAAA,EAAK;AACZ,QAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAChC,QAAA,OAAO,EAAE,IAAI,KAAA,EAAO,KAAA,EAAO,eAAe,KAAA,GAAQ,GAAA,CAAI,UAAU,MAAA,CAAO,GAAG,GAAG,MAAA,EAAQ,EAAE,WAAW,EAAC,EAAG,UAAU,EAAC,EAAG,KAAA,EAAO,EAAA,EAAG,EAAE;AAAA,MAClI;AAAA,IACF;AAAA;AAEJ,CAAC","file":"install.js","sourcesContent":["/**\n * HTTP client for marketplace service via Gateway.\n */\n\nimport { useEnv } from '@kb-labs/sdk';\nimport { CredentialsManager, SessionManager } from '@kb-labs/cli-runtime/gateway';\nimport type { GatewayCredentials, SessionCredentials } from '@kb-labs/cli-runtime/gateway';\n\nconst DEFAULT_GATEWAY_URL = 'http://127.0.0.1:4000';\nconst MARKETPLACE_PREFIX = '/api/v1/marketplace';\nconst FETCH_TIMEOUT_MS = 30_000;\n\ntype AuthState = {\n  gatewayUrl: string;\n  accessToken: string;\n  refresh: () => Promise<AuthState>;\n};\n\nasync function loadAuth(): Promise<AuthState | null> {\n  const sessionManager = new SessionManager();\n  const session = await sessionManager.load();\n  if (session) {\n    const current = sessionManager.isExpired(session) ? await sessionManager.refresh(session) : session;\n    return authState(current, () => sessionManager.refresh(current));\n  }\n\n  const credentialsManager = new CredentialsManager();\n  const credentials = await credentialsManager.load();\n  if (!credentials) {\n    return null;\n  }\n  const current = credentialsManager.isExpired(credentials) ? await credentialsManager.refresh(credentials) : credentials;\n  return authState(current, () => credentialsManager.refresh(current));\n}\n\nfunction authState(credentials: GatewayCredentials | SessionCredentials, refresh: () => Promise<GatewayCredentials | SessionCredentials>): AuthState {\n  return {\n    gatewayUrl: credentials.gatewayUrl,\n    accessToken: credentials.accessToken,\n    refresh: async () => {\n      const updated = await refresh();\n      return authState(updated, refresh);\n    },\n  };\n}\n\nfunction getBaseUrl(gatewayUrl?: string): string {\n  const marketplaceUrl = useEnv('KB_MARKETPLACE_URL');\n  if (marketplaceUrl) {\n    return `${marketplaceUrl}${MARKETPLACE_PREFIX}`;\n  }\n  const gateway = gatewayUrl ?? useEnv('KB_GATEWAY_URL') ?? DEFAULT_GATEWAY_URL;\n  return `${gateway}${MARKETPLACE_PREFIX}`;\n}\n\nasync function request<T>(method: string, path: string, body?: Record<string, unknown>, params?: Record<string, string>): Promise<T> {\n  let auth = await loadAuth();\n  const url = new URL(`${getBaseUrl(auth?.gatewayUrl)}${path}`);\n  if (params) {\n    for (const [key, value] of Object.entries(params)) { url.searchParams.set(key, value); }\n  }\n\n  for (let attempt = 0; attempt < 2; attempt += 1) {\n    const controller = new AbortController();\n    const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n    try {\n      const headers: Record<string, string> = {};\n      if (body) { headers['Content-Type'] = 'application/json'; }\n      if (auth) { headers.Authorization = `Bearer ${auth.accessToken}`; }\n      const response = await fetch(url.toString(), {\n        method,\n        headers,\n        body: body ? JSON.stringify(body) : undefined,\n        signal: controller.signal,\n      });\n      if (response.status === 401 && auth && attempt === 0) {\n        auth = await auth.refresh();\n        continue;\n      }\n      if (!response.ok) {\n        const text = await response.text();\n        throw new Error(`Marketplace ${path} failed (${response.status}): ${text}`);\n      }\n      if (response.status === 204) { return undefined as T; }\n      return await response.json() as T;\n    } catch (err) {\n      if ((err as Error).name === 'AbortError') {\n        throw new Error(`Marketplace ${path} timed out — is the marketplace service running? (kb-dev start marketplace)`);\n      }\n      throw err;\n    } finally {\n      clearTimeout(timer);\n    }\n  }\n  throw new Error(`Marketplace ${path} failed after refreshing authentication`);\n}\n\nexport async function post<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('POST', path, body);\n}\n\nexport async function patch<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('PATCH', path, body);\n}\n\nexport async function del<T = unknown>(path: string, body?: Record<string, unknown>): Promise<T> {\n  return request<T>('DELETE', path, body);\n}\n\nexport async function get<T = unknown>(path: string, params?: Record<string, string>): Promise<T> {\n  return request<T>('GET', path, undefined, params);\n}\n","/**\n * @module @kb-labs/marketplace-entry/scope\n *\n * Client-side scope resolution for marketplace CLI commands. Uses the\n * canonical `findProjectConfigRoot` helper from `@kb-labs/core-workspace`\n * so the detection rules (which filenames count, how walk-up stops) match\n * what the config loader and the marketplace daemon enforce.\n *\n * Rules:\n *  - `project` is the default if cwd (or any ancestor up to the filesystem\n *    root) contains `.kb/kb.config.{json,jsonc}`.\n *  - Otherwise the default is `platform`.\n *  - `--scope` always overrides detection.\n *  - For scope=\"project\" we return the absolute projectRoot so the daemon\n *    doesn't need to re-discover it.\n */\n\nimport { findProjectConfigRoot } from '@kb-labs/core-workspace';\nimport type { MarketplaceScope, MarketplaceQueryScope } from '@kb-labs/marketplace-contracts';\n\nexport const SCOPE_FLAG_CHOICES: readonly MarketplaceScope[] = ['platform', 'project'];\nexport const QUERY_SCOPE_FLAG_CHOICES: readonly MarketplaceQueryScope[] = ['platform', 'project', 'all'];\n\nexport interface ResolvedCliScope {\n  scope: MarketplaceScope;\n  projectRoot?: string;\n  /** How the scope was determined — surfaces in --verbose logs. */\n  reason: 'flag' | 'auto-detect' | 'fallback';\n}\n\nexport interface ResolvedCliQueryScope extends Omit<ResolvedCliScope, 'scope'> {\n  scope: MarketplaceQueryScope;\n}\n\n/**\n * Resolve the effective scope for a mutating command (`link`, `unlink`,\n * `install`, ...). `flag` is the value of `--scope` (if supplied). The\n * helper never returns `'all'` for mutating commands — callers restrict\n * choices via `SCOPE_FLAG_CHOICES`.\n */\nexport async function resolveCliScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliScope> {\n  if (flag) {\n    assertMutatingScope(flag);\n    if (flag === 'project') {\n      const projectRoot = await findProjectConfigRoot(cwd);\n      if (!projectRoot) {\n        throw new CliScopeError(\n          'SCOPE_PROJECT_ROOT_NOT_FOUND',\n          `--scope=project requires a .kb/kb.config.{json,jsonc} ancestor of ${cwd} — none found.`,\n        );\n      }\n      return { scope: 'project', projectRoot, reason: 'flag' };\n    }\n    return { scope: 'platform', reason: 'flag' };\n  }\n\n  const projectRoot = await findProjectConfigRoot(cwd);\n  if (projectRoot) {\n    return { scope: 'project', projectRoot, reason: 'auto-detect' };\n  }\n  return { scope: 'platform', reason: 'fallback' };\n}\n\n/**\n * Resolve the effective scope for a read-only command (`list`). Accepts\n * `'all'` as an explicit flag value.\n */\nexport async function resolveCliQueryScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliQueryScope> {\n  if (flag === 'all') {\n    const projectRoot = await findProjectConfigRoot(cwd);\n    return { scope: 'all', projectRoot, reason: 'flag' };\n  }\n  const base = await resolveCliScope(cwd, flag);\n  return { scope: base.scope, projectRoot: base.projectRoot, reason: base.reason };\n}\n\nfunction assertMutatingScope(value: string): asserts value is MarketplaceScope {\n  if (!SCOPE_FLAG_CHOICES.includes(value as MarketplaceScope)) {\n    throw new CliScopeError(\n      'SCOPE_INVALID',\n      `--scope must be one of: ${SCOPE_FLAG_CHOICES.join(', ')} (got ${JSON.stringify(value)})`,\n    );\n  }\n}\n\nexport class CliScopeError extends Error {\n  readonly code: string;\n  constructor(code: string, message: string) {\n    super(message);\n    this.code = code;\n    this.name = 'CliScopeError';\n  }\n}\n\n/**\n * Build the body-payload fragment expected by `parseMutatingScope` on the\n * API side: `{ scope, projectRoot? }`. Kept as a helper so every command\n * sends the same shape and nothing drifts out-of-sync with the server.\n */\nexport function scopeBody(ctx: ResolvedCliScope | ResolvedCliQueryScope): {\n  scope: MarketplaceScope | MarketplaceQueryScope;\n  projectRoot?: string;\n} {\n  return {\n    scope: ctx.scope,\n    ...(ctx.projectRoot ? { projectRoot: ctx.projectRoot } : {}),\n  };\n}\n","import { defineCommand, validationError, handleError, type PluginContextV3, type CommandResult } from '@kb-labs/sdk';\nimport { post } from '../http.js';\nimport { resolveCliScope, scopeBody, CliScopeError } from '../scope.js';\n\ninterface InstallFlags {\n  dev?: boolean;\n  json?: boolean;\n  scope?: string;\n  token?: string;\n  'dry-run'?: boolean;\n}\n\ninterface InstallInput {\n  argv?: string[];\n  flags?: InstallFlags;\n}\n\ninterface InstalledEntry {\n  id: string;\n  version: string;\n  primaryKind: string;\n}\n\ninterface InstallResultData {\n  installed: InstalledEntry[];\n  warnings: string[];\n  scope: string;\n}\n\nexport default defineCommand<unknown, InstallInput, InstallResultData>({\n  id: 'marketplace:install',\n  description: 'Install package(s) from marketplace',\n\n  handler: {\n    async intent(_ctx: PluginContextV3, input: InstallInput) {\n      const argv = input.argv ?? [];\n      const packages = argv.length > 0 ? argv : ['(no packages specified)'];\n      return {\n        summary: `Install ${packages.join(', ')} from marketplace`,\n        operations: packages.map(pkg => ({\n          type: 'create' as const,\n          resource: 'marketplace-package',\n          details: { package: pkg },\n        })),\n      };\n    },\n\n    async execute(ctx: PluginContextV3, input: InstallInput): Promise<CommandResult<InstallResultData>> {\n      const argv = input.argv ?? [];\n      const flags = (input.flags ?? input) as InstallFlags;\n\n      if (argv.length === 0) {\n        validationError(ctx, 'Please specify at least one package to install', 'Usage: kb marketplace install <package>', flags.json);\n        return { ok: false, error: 'Please specify at least one package to install', result: { installed: [], warnings: [], scope: '' } };\n      }\n\n      let scopeCtx;\n      try {\n        scopeCtx = await resolveCliScope(ctx.cwd, flags.scope);\n      } catch (err) {\n        if (err instanceof CliScopeError) {\n          validationError(ctx, err.message, undefined, flags.json);\n        } else {\n          handleError(ctx, err, flags.json);\n        }\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { installed: [], warnings: [], scope: '' } };\n      }\n\n      try {\n        const result = await post<InstallResultData>('/packages/install', {\n          specs: argv,\n          dev: Boolean(flags.dev),\n          ...(flags.token ? { token: flags.token } : {}),\n          ...scopeBody(scopeCtx),\n        });\n\n        if (flags.json) {\n          ctx.ui?.json?.(result);\n        } else {\n          ctx.ui?.success?.(`Marketplace install completed (${result.scope ?? scopeCtx.scope})`, {\n            sections: [\n              {\n                header: 'Installed',\n                items: result.installed.map(p => `${p.id}@${p.version} (${p.primaryKind})`),\n              },\n              ...(result.warnings.length > 0\n                ? [{ header: 'Warnings', items: result.warnings }]\n                : []),\n            ],\n          });\n        }\n\n        return { ok: true, result };\n      } catch (err) {\n        handleError(ctx, err, flags.json);\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { installed: [], warnings: [], scope: '' } };\n      }\n    },\n  },\n});\n"]}

package/dist/commands/plugins/disable.js

@@ -1,45 +1,89 @@
 import { defineCommand, validationError, handleError, useEnv } from '@kb-labs/sdk';
+import { SessionManager, CredentialsManager } from '@kb-labs/cli-runtime/gateway';
 import { findProjectConfigRoot } from '@kb-labs/core-workspace';
 
 // src/commands/plugins/disable.ts
 var DEFAULT_GATEWAY_URL = "http://127.0.0.1:4000";
 var MARKETPLACE_PREFIX = "/api/v1/marketplace";
 var FETCH_TIMEOUT_MS = 3e4;
-function getBaseUrl() {
+async function loadAuth() {
+  const sessionManager = new SessionManager();
+  const session = await sessionManager.load();
+  if (session) {
+    const current2 = sessionManager.isExpired(session) ? await sessionManager.refresh(session) : session;
+    return authState(current2, () => sessionManager.refresh(current2));
+  }
+  const credentialsManager = new CredentialsManager();
+  const credentials = await credentialsManager.load();
+  if (!credentials) {
+    return null;
+  }
+  const current = credentialsManager.isExpired(credentials) ? await credentialsManager.refresh(credentials) : credentials;
+  return authState(current, () => credentialsManager.refresh(current));
+}
+function authState(credentials, refresh) {
+  return {
+    gatewayUrl: credentials.gatewayUrl,
+    accessToken: credentials.accessToken,
+    refresh: async () => {
+      const updated = await refresh();
+      return authState(updated, refresh);
+    }
+  };
+}
+function getBaseUrl(gatewayUrl) {
   const marketplaceUrl = useEnv("KB_MARKETPLACE_URL");
   if (marketplaceUrl) {
     return `${marketplaceUrl}${MARKETPLACE_PREFIX}`;
   }
-  const gateway = useEnv("KB_GATEWAY_URL") ?? DEFAULT_GATEWAY_URL;
+  const gateway = gatewayUrl ?? useEnv("KB_GATEWAY_URL") ?? DEFAULT_GATEWAY_URL;
   return `${gateway}${MARKETPLACE_PREFIX}`;
 }
-async function post(path, body) {
-  const url = `${getBaseUrl()}${path}`;
-  const controller = new AbortController();
-  const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
-  try {
-    const res = await fetch(url, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify(body),
-      signal: controller.signal
-    });
-    if (!res.ok) {
-      const text = await res.text();
-      throw new Error(`Marketplace ${path} failed (${res.status}): ${text}`);
-    }
-    if (res.status === 204) {
-      return void 0;
-    }
-    return await res.json();
-  } catch (err) {
-    if (err.name === "AbortError") {
-      throw new Error(`Marketplace ${path} timed out \u2014 is the marketplace service running? (kb-dev start marketplace)`);
+async function request(method, path, body, params) {
+  let auth = await loadAuth();
+  const url = new URL(`${getBaseUrl(auth?.gatewayUrl)}${path}`);
+  for (let attempt = 0; attempt < 2; attempt += 1) {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
+    try {
+      const headers = {};
+      if (body) {
+        headers["Content-Type"] = "application/json";
+      }
+      if (auth) {
+        headers.Authorization = `Bearer ${auth.accessToken}`;
+      }
+      const response = await fetch(url.toString(), {
+        method,
+        headers,
+        body: body ? JSON.stringify(body) : void 0,
+        signal: controller.signal
+      });
+      if (response.status === 401 && auth && attempt === 0) {
+        auth = await auth.refresh();
+        continue;
+      }
+      if (!response.ok) {
+        const text = await response.text();
+        throw new Error(`Marketplace ${path} failed (${response.status}): ${text}`);
+      }
+      if (response.status === 204) {
+        return void 0;
+      }
+      return await response.json();
+    } catch (err) {
+      if (err.name === "AbortError") {
+        throw new Error(`Marketplace ${path} timed out \u2014 is the marketplace service running? (kb-dev start marketplace)`);
+      }
+      throw err;
+    } finally {
+      clearTimeout(timer);
     }
-    throw err;
-  } finally {
-    clearTimeout(timer);
   }
+  throw new Error(`Marketplace ${path} failed after refreshing authentication`);
+}
+async function post(path, body) {
+  return request("POST", path, body);
 }
 var SCOPE_FLAG_CHOICES = ["platform", "project"];
 async function resolveCliScope(cwd, flag) {

package/dist/commands/plugins/disable.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/http.ts","../../../src/scope.ts","../../../src/commands/plugins/disable.ts"],"names":["projectRoot"],"mappings":";;;;AAMA,IAAM,mBAAA,GAAsB,uBAAA;AAC5B,IAAM,kBAAA,GAAqB,qBAAA;AAC3B,IAAM,gBAAA,GAAmB,GAAA;AAEzB,SAAS,UAAA,GAAqB;AAC5B,EAAA,MAAM,cAAA,GAAiB,OAAO,oBAAoB,CAAA;AAClD,EAAA,IAAI,cAAA,EAAgB;AAClB,IAAA,OAAO,CAAA,EAAG,cAAc,CAAA,EAAG,kBAAkB,CAAA,CAAA;AAAA,EAC/C;AACA,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,gBAAgB,CAAA,IAAK,mBAAA;AAC5C,EAAA,OAAO,CAAA,EAAG,OAAO,CAAA,EAAG,kBAAkB,CAAA,CAAA;AACxC;AAEA,eAAsB,IAAA,CAAkB,MAAc,IAAA,EAA2C;AAC/F,EAAA,MAAM,GAAA,GAAM,CAAA,EAAG,UAAA,EAAY,GAAG,IAAI,CAAA,CAAA;AAClC,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,gBAAgB,CAAA;AACnE,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,MAC3B,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,MAC9C,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,MACzB,QAAQ,UAAA,CAAW;AAAA,KACpB,CAAA;AACD,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,MAAA,MAAM,IAAI,MAAM,CAAA,YAAA,EAAe,IAAI,YAAY,GAAA,CAAI,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,CAAE,CAAA;AAAA,IACvE;AAGA,IAAA,IAAI,GAAA,CAAI,WAAW,GAAA,EAAK;AAAE,MAAA,OAAO,KAAA,CAAA;AAAA,IAAgB;AACjD,IAAA,OAAO,MAAM,IAAI,IAAA,EAAK;AAAA,EACxB,SAAS,GAAA,EAAK;AACZ,IAAA,IAAK,GAAA,CAAc,SAAS,YAAA,EAAc;AACxC,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,gFAAA,CAA6E,CAAA;AAAA,IAClH;AACA,IAAA,MAAM,GAAA;AAAA,EACR,CAAA,SAAE;AACA,IAAA,YAAA,CAAa,KAAK,CAAA;AAAA,EACpB;AACF;AC1BO,IAAM,kBAAA,GAAkD,CAAC,UAAA,EAAY,SAAS,CAAA;AAoBrF,eAAsB,eAAA,CACpB,KACA,IAAA,EAC2B;AAC3B,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,mBAAA,CAAoB,IAAI,CAAA;AACxB,IAAA,IAAI,SAAS,SAAA,EAAW;AACtB,MAAA,MAAMA,YAAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,MAAA,IAAI,CAACA,YAAAA,EAAa;AAChB,QAAA,MAAM,IAAI,aAAA;AAAA,UACR,8BAAA;AAAA,UACA,qEAAqE,GAAG,CAAA,mBAAA;AAAA,SAC1E;AAAA,MACF;AACA,MAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAAA,YAAAA,EAAa,QAAQ,MAAA,EAAO;AAAA,IACzD;AACA,IAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,MAAA,EAAO;AAAA,EAC7C;AAEA,EAAA,MAAM,WAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAa,QAAQ,aAAA,EAAc;AAAA,EAChE;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,UAAA,EAAW;AACjD;AAkBA,SAAS,oBAAoB,KAAA,EAAkD;AAC7E,EAAA,IAAI,CAAC,kBAAA,CAAmB,QAAA,CAAS,KAAyB,CAAA,EAAG;AAC3D,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,eAAA;AAAA,MACA,CAAA,wBAAA,EAA2B,mBAAmB,IAAA,CAAK,IAAI,CAAC,CAAA,MAAA,EAAS,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC,CAAA,CAAA;AAAA,KACxF;AAAA,EACF;AACF;AAEO,IAAM,aAAA,GAAN,cAA4B,KAAA,CAAM;AAAA,EAC9B,IAAA;AAAA,EACT,WAAA,CAAY,MAAc,OAAA,EAAiB;AACzC,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AAAA,EACd;AACF,CAAA;AAOO,SAAS,UAAU,GAAA,EAGxB;AACA,EAAA,OAAO;AAAA,IACL,OAAO,GAAA,CAAI,KAAA;AAAA,IACX,GAAI,IAAI,WAAA,GAAc,EAAE,aAAa,GAAA,CAAI,WAAA,KAAgB;AAAC,GAC5D;AACF;;;AC1GA,IAAO,kBAAQ,aAAA,CAA2E;AAAA,EACxF,EAAA,EAAI,6BAAA;AAAA,EACJ,WAAA,EAAa,kBAAA;AAAA,EAEb,OAAA,EAAS;AAAA,IACP,MAAM,MAAA,CAAO,IAAA,EAAuB,KAAA,EAAqB;AACvD,MAAA,MAAM,SAAA,GAAY,KAAA,CAAM,IAAA,GAAO,CAAC,CAAA,IAAK,WAAA;AACrC,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,mBAAmB,SAAS,CAAA,CAAA,CAAA;AAAA,QACrC,UAAA,EAAY,CAAC,EAAE,IAAA,EAAM,QAAA,EAAmB,QAAA,EAAU,QAAA,EAAU,OAAA,EAAS,EAAE,SAAA,EAAW,OAAA,EAAS,KAAA,IAAS;AAAA,OACtG;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,OAAA,CAAQ,GAAA,EAAsB,KAAA,EAAmF;AACrH,MAAA,MAAM,SAAA,GAAY,KAAA,CAAM,IAAA,GAAO,CAAC,CAAA;AAChC,MAAA,MAAM,KAAA,GAAS,MAAM,KAAA,IAAS,KAAA;AAE9B,MAAA,IAAI,CAAC,SAAA,EAAW;AACd,QAAA,eAAA,CAAgB,GAAA,EAAK,6BAAA,EAA+B,mDAAA,EAAqD,KAAA,CAAM,IAAI,CAAA;AACnH,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,0BAAA,EAA4B,MAAA,EAAQ,EAAE,SAAA,EAAW,EAAA,EAAI,KAAA,EAAO,EAAA,EAAG,EAAE;AAAA,MAC9F;AAEA,MAAA,IAAI,QAAA;AACJ,MAAA,IAAI;AACF,QAAA,QAAA,GAAW,MAAM,eAAA,CAAgB,GAAA,CAAI,GAAA,EAAK,MAAM,KAAK,CAAA;AAAA,MACvD,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,eAAe,aAAA,EAAe;AAChC,UAAA,eAAA,CAAgB,GAAA,EAAK,GAAA,CAAI,OAAA,EAAS,MAAA,EAAW,MAAM,IAAI,CAAA;AAAA,QACzD,CAAA,MAAO;AACL,UAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAAA,QAClC;AACA,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,GAAA,YAAe,QAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,GAAG,MAAA,EAAQ,EAAE,WAAW,EAAA,EAAI,KAAA,EAAO,IAAG,EAAE;AAAA,MACpH;AAEA,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,CAAK,qBAAqB,EAAE,SAAA,EAAW,GAAG,SAAA,CAAU,QAAQ,GAAG,CAAA;AACrE,QAAA,IAAI,MAAM,IAAA,EAAM;AACd,UAAA,GAAA,CAAI,EAAA,EAAI,OAAO,EAAE,EAAA,EAAI,MAAM,SAAA,EAAW,KAAA,EAAO,QAAA,CAAS,KAAA,EAAO,CAAA;AAAA,QAC/D,CAAA,MAAO;AACL,UAAA,GAAA,CAAI,IAAI,OAAA,GAAU,CAAA,SAAA,EAAY,SAAS,CAAA,EAAA,EAAK,QAAA,CAAS,KAAK,CAAA,CAAA,CAAG,CAAA;AAAA,QAC/D;AACA,QAAA,OAAO,EAAE,IAAI,IAAA,EAAM,MAAA,EAAQ,EAAE,SAAA,EAAW,KAAA,EAAO,QAAA,CAAS,KAAA,EAAM,EAAE;AAAA,MAClE,SAAS,GAAA,EAAK;AACZ,QAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAChC,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,GAAA,YAAe,QAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,GAAG,MAAA,EAAQ,EAAE,WAAW,EAAA,EAAI,KAAA,EAAO,IAAG,EAAE;AAAA,MACpH;AAAA,IACF;AAAA;AAEJ,CAAC","file":"disable.js","sourcesContent":["/**\n * HTTP client for marketplace service via Gateway.\n */\n\nimport { useEnv } from '@kb-labs/sdk';\n\nconst DEFAULT_GATEWAY_URL = 'http://127.0.0.1:4000';\nconst MARKETPLACE_PREFIX = '/api/v1/marketplace';\nconst FETCH_TIMEOUT_MS = 30_000;\n\nfunction getBaseUrl(): string {\n  const marketplaceUrl = useEnv('KB_MARKETPLACE_URL');\n  if (marketplaceUrl) {\n    return `${marketplaceUrl}${MARKETPLACE_PREFIX}`;\n  }\n  const gateway = useEnv('KB_GATEWAY_URL') ?? DEFAULT_GATEWAY_URL;\n  return `${gateway}${MARKETPLACE_PREFIX}`;\n}\n\nexport async function post<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  const url = `${getBaseUrl()}${path}`;\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n  try {\n    const res = await fetch(url, {\n      method: 'POST',\n      headers: { 'Content-Type': 'application/json' },\n      body: JSON.stringify(body),\n      signal: controller.signal,\n    });\n    if (!res.ok) {\n      const text = await res.text();\n      throw new Error(`Marketplace ${path} failed (${res.status}): ${text}`);\n    }\n    // 204 No Content (e.g. unlink, uninstall) has no body — don't call\n    // res.json() or it throws \"Unexpected end of JSON input\".\n    if (res.status === 204) { return undefined as T; }\n    return await res.json() as T;\n  } catch (err) {\n    if ((err as Error).name === 'AbortError') {\n      throw new Error(`Marketplace ${path} timed out — is the marketplace service running? (kb-dev start marketplace)`);\n    }\n    throw err;\n  } finally {\n    clearTimeout(timer);\n  }\n}\n\nexport async function patch<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  const url = `${getBaseUrl()}${path}`;\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n  try {\n    const res = await fetch(url, {\n      method: 'PATCH',\n      headers: { 'Content-Type': 'application/json' },\n      body: JSON.stringify(body),\n      signal: controller.signal,\n    });\n    if (!res.ok) {\n      const text = await res.text();\n      throw new Error(`Marketplace ${path} failed (${res.status}): ${text}`);\n    }\n    return await res.json() as T;\n  } catch (err) {\n    if ((err as Error).name === 'AbortError') {\n      throw new Error(`Marketplace ${path} timed out — is the marketplace service running? (kb-dev start marketplace)`);\n    }\n    throw err;\n  } finally {\n    clearTimeout(timer);\n  }\n}\n\nexport async function del<T = unknown>(path: string, body?: Record<string, unknown>): Promise<T> {\n  const url = `${getBaseUrl()}${path}`;\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n  try {\n    const res = await fetch(url, {\n      method: 'DELETE',\n      headers: body ? { 'Content-Type': 'application/json' } : {},\n      body: body ? JSON.stringify(body) : undefined,\n      signal: controller.signal,\n    });\n    if (!res.ok) {\n      const text = await res.text();\n      throw new Error(`Marketplace ${path} failed (${res.status}): ${text}`);\n    }\n    if (res.status === 204) { return undefined as T; }\n    return await res.json() as T;\n  } catch (err) {\n    if ((err as Error).name === 'AbortError') {\n      throw new Error(`Marketplace ${path} timed out — is the marketplace service running? (kb-dev start marketplace)`);\n    }\n    throw err;\n  } finally {\n    clearTimeout(timer);\n  }\n}\n\nexport async function get<T = unknown>(path: string, params?: Record<string, string>): Promise<T> {\n  const url = new URL(`${getBaseUrl()}${path}`);\n  if (params) {\n    for (const [k, v] of Object.entries(params)) {url.searchParams.set(k, v);}\n  }\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n  try {\n    const res = await fetch(url.toString(), { signal: controller.signal });\n    if (!res.ok) {\n      const text = await res.text();\n      throw new Error(`Marketplace ${path} failed (${res.status}): ${text}`);\n    }\n    return await res.json() as T;\n  } catch (err) {\n    if ((err as Error).name === 'AbortError') {\n      throw new Error(`Marketplace ${path} timed out — is the marketplace service running? (kb-dev start marketplace)`);\n    }\n    throw err;\n  } finally {\n    clearTimeout(timer);\n  }\n}\n","/**\n * @module @kb-labs/marketplace-entry/scope\n *\n * Client-side scope resolution for marketplace CLI commands. Uses the\n * canonical `findProjectConfigRoot` helper from `@kb-labs/core-workspace`\n * so the detection rules (which filenames count, how walk-up stops) match\n * what the config loader and the marketplace daemon enforce.\n *\n * Rules:\n *  - `project` is the default if cwd (or any ancestor up to the filesystem\n *    root) contains `.kb/kb.config.{json,jsonc}`.\n *  - Otherwise the default is `platform`.\n *  - `--scope` always overrides detection.\n *  - For scope=\"project\" we return the absolute projectRoot so the daemon\n *    doesn't need to re-discover it.\n */\n\nimport { findProjectConfigRoot } from '@kb-labs/core-workspace';\nimport type { MarketplaceScope, MarketplaceQueryScope } from '@kb-labs/marketplace-contracts';\n\nexport const SCOPE_FLAG_CHOICES: readonly MarketplaceScope[] = ['platform', 'project'];\nexport const QUERY_SCOPE_FLAG_CHOICES: readonly MarketplaceQueryScope[] = ['platform', 'project', 'all'];\n\nexport interface ResolvedCliScope {\n  scope: MarketplaceScope;\n  projectRoot?: string;\n  /** How the scope was determined — surfaces in --verbose logs. */\n  reason: 'flag' | 'auto-detect' | 'fallback';\n}\n\nexport interface ResolvedCliQueryScope extends Omit<ResolvedCliScope, 'scope'> {\n  scope: MarketplaceQueryScope;\n}\n\n/**\n * Resolve the effective scope for a mutating command (`link`, `unlink`,\n * `install`, ...). `flag` is the value of `--scope` (if supplied). The\n * helper never returns `'all'` for mutating commands — callers restrict\n * choices via `SCOPE_FLAG_CHOICES`.\n */\nexport async function resolveCliScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliScope> {\n  if (flag) {\n    assertMutatingScope(flag);\n    if (flag === 'project') {\n      const projectRoot = await findProjectConfigRoot(cwd);\n      if (!projectRoot) {\n        throw new CliScopeError(\n          'SCOPE_PROJECT_ROOT_NOT_FOUND',\n          `--scope=project requires a .kb/kb.config.{json,jsonc} ancestor of ${cwd} — none found.`,\n        );\n      }\n      return { scope: 'project', projectRoot, reason: 'flag' };\n    }\n    return { scope: 'platform', reason: 'flag' };\n  }\n\n  const projectRoot = await findProjectConfigRoot(cwd);\n  if (projectRoot) {\n    return { scope: 'project', projectRoot, reason: 'auto-detect' };\n  }\n  return { scope: 'platform', reason: 'fallback' };\n}\n\n/**\n * Resolve the effective scope for a read-only command (`list`). Accepts\n * `'all'` as an explicit flag value.\n */\nexport async function resolveCliQueryScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliQueryScope> {\n  if (flag === 'all') {\n    const projectRoot = await findProjectConfigRoot(cwd);\n    return { scope: 'all', projectRoot, reason: 'flag' };\n  }\n  const base = await resolveCliScope(cwd, flag);\n  return { scope: base.scope, projectRoot: base.projectRoot, reason: base.reason };\n}\n\nfunction assertMutatingScope(value: string): asserts value is MarketplaceScope {\n  if (!SCOPE_FLAG_CHOICES.includes(value as MarketplaceScope)) {\n    throw new CliScopeError(\n      'SCOPE_INVALID',\n      `--scope must be one of: ${SCOPE_FLAG_CHOICES.join(', ')} (got ${JSON.stringify(value)})`,\n    );\n  }\n}\n\nexport class CliScopeError extends Error {\n  readonly code: string;\n  constructor(code: string, message: string) {\n    super(message);\n    this.code = code;\n    this.name = 'CliScopeError';\n  }\n}\n\n/**\n * Build the body-payload fragment expected by `parseMutatingScope` on the\n * API side: `{ scope, projectRoot? }`. Kept as a helper so every command\n * sends the same shape and nothing drifts out-of-sync with the server.\n */\nexport function scopeBody(ctx: ResolvedCliScope | ResolvedCliQueryScope): {\n  scope: MarketplaceScope | MarketplaceQueryScope;\n  projectRoot?: string;\n} {\n  return {\n    scope: ctx.scope,\n    ...(ctx.projectRoot ? { projectRoot: ctx.projectRoot } : {}),\n  };\n}\n","import { defineCommand, validationError, handleError, type PluginContextV3, type CommandResult } from '@kb-labs/sdk';\nimport { post } from '../../http.js';\nimport { resolveCliScope, scopeBody, CliScopeError } from '../../scope.js';\n\ninterface DisableFlags { json?: boolean; scope?: string; 'dry-run'?: boolean }\ninterface DisableInput { argv?: string[]; flags?: DisableFlags }\n\nexport default defineCommand<unknown, DisableInput, { packageId: string; scope: string }>({\n  id: 'marketplace:plugins:disable',\n  description: 'Disable a plugin',\n\n  handler: {\n    async intent(_ctx: PluginContextV3, input: DisableInput) {\n      const packageId = input.argv?.[0] ?? '(unknown)';\n      return {\n        summary: `Disable plugin \"${packageId}\"`,\n        operations: [{ type: 'update' as const, resource: 'plugin', details: { packageId, enabled: false } }],\n      };\n    },\n\n    async execute(ctx: PluginContextV3, input: DisableInput): Promise<CommandResult<{ packageId: string; scope: string }>> {\n      const packageId = input.argv?.[0];\n      const flags = (input.flags ?? input) as DisableFlags;\n\n      if (!packageId) {\n        validationError(ctx, 'Specify a plugin to disable', 'Usage: kb marketplace plugins disable <plugin-id>', flags.json);\n        return { ok: false, error: 'A package id is required', result: { packageId: '', scope: '' } };\n      }\n\n      let scopeCtx;\n      try {\n        scopeCtx = await resolveCliScope(ctx.cwd, flags.scope);\n      } catch (err) {\n        if (err instanceof CliScopeError) {\n          validationError(ctx, err.message, undefined, flags.json);\n        } else {\n          handleError(ctx, err, flags.json);\n        }\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { packageId: '', scope: '' } };\n      }\n\n      try {\n        await post(`/packages/disable`, { packageId, ...scopeBody(scopeCtx) });\n        if (flags.json) {\n          ctx.ui?.json?.({ ok: true, packageId, scope: scopeCtx.scope });\n        } else {\n          ctx.ui?.success?.(`Disabled ${packageId} (${scopeCtx.scope})`);\n        }\n        return { ok: true, result: { packageId, scope: scopeCtx.scope } };\n      } catch (err) {\n        handleError(ctx, err, flags.json);\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { packageId: '', scope: '' } };\n      }\n    },\n  },\n});\n"]}
+{"version":3,"sources":["../../../src/http.ts","../../../src/scope.ts","../../../src/commands/plugins/disable.ts"],"names":["current","projectRoot"],"mappings":";;;;;AAQA,IAAM,mBAAA,GAAsB,uBAAA;AAC5B,IAAM,kBAAA,GAAqB,qBAAA;AAC3B,IAAM,gBAAA,GAAmB,GAAA;AAQzB,eAAe,QAAA,GAAsC;AACnD,EAAA,MAAM,cAAA,GAAiB,IAAI,cAAA,EAAe;AAC1C,EAAA,MAAM,OAAA,GAAU,MAAM,cAAA,CAAe,IAAA,EAAK;AAC1C,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,MAAMA,QAAAA,GAAU,eAAe,SAAA,CAAU,OAAO,IAAI,MAAM,cAAA,CAAe,OAAA,CAAQ,OAAO,CAAA,GAAI,OAAA;AAC5F,IAAA,OAAO,UAAUA,QAAAA,EAAS,MAAM,cAAA,CAAe,OAAA,CAAQA,QAAO,CAAC,CAAA;AAAA,EACjE;AAEA,EAAA,MAAM,kBAAA,GAAqB,IAAI,kBAAA,EAAmB;AAClD,EAAA,MAAM,WAAA,GAAc,MAAM,kBAAA,CAAmB,IAAA,EAAK;AAClD,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,OAAA,GAAU,mBAAmB,SAAA,CAAU,WAAW,IAAI,MAAM,kBAAA,CAAmB,OAAA,CAAQ,WAAW,CAAA,GAAI,WAAA;AAC5G,EAAA,OAAO,UAAU,OAAA,EAAS,MAAM,kBAAA,CAAmB,OAAA,CAAQ,OAAO,CAAC,CAAA;AACrE;AAEA,SAAS,SAAA,CAAU,aAAsD,OAAA,EAA4E;AACnJ,EAAA,OAAO;AAAA,IACL,YAAY,WAAA,CAAY,UAAA;AAAA,IACxB,aAAa,WAAA,CAAY,WAAA;AAAA,IACzB,SAAS,YAAY;AACnB,MAAA,MAAM,OAAA,GAAU,MAAM,OAAA,EAAQ;AAC9B,MAAA,OAAO,SAAA,CAAU,SAAS,OAAO,CAAA;AAAA,IACnC;AAAA,GACF;AACF;AAEA,SAAS,WAAW,UAAA,EAA6B;AAC/C,EAAA,MAAM,cAAA,GAAiB,OAAO,oBAAoB,CAAA;AAClD,EAAA,IAAI,cAAA,EAAgB;AAClB,IAAA,OAAO,CAAA,EAAG,cAAc,CAAA,EAAG,kBAAkB,CAAA,CAAA;AAAA,EAC/C;AACA,EAAA,MAAM,OAAA,GAAU,UAAA,IAAc,MAAA,CAAO,gBAAgB,CAAA,IAAK,mBAAA;AAC1D,EAAA,OAAO,CAAA,EAAG,OAAO,CAAA,EAAG,kBAAkB,CAAA,CAAA;AACxC;AAEA,eAAe,OAAA,CAAW,MAAA,EAAgB,IAAA,EAAc,IAAA,EAAgC,MAAA,EAA6C;AACnI,EAAA,IAAI,IAAA,GAAO,MAAM,QAAA,EAAS;AAC1B,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,CAAA,EAAG,UAAA,CAAW,MAAM,UAAU,CAAC,CAAA,EAAG,IAAI,CAAA,CAAE,CAAA;AAK5D,EAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,GAAU,CAAA,EAAG,WAAW,CAAA,EAAG;AAC/C,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,gBAAgB,CAAA;AACnE,IAAA,IAAI;AACF,MAAA,MAAM,UAAkC,EAAC;AACzC,MAAA,IAAI,IAAA,EAAM;AAAE,QAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAAA,MAAoB;AAC1D,MAAA,IAAI,IAAA,EAAM;AAAE,QAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,IAAA,CAAK,WAAW,CAAA,CAAA;AAAA,MAAI;AAClE,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,CAAI,UAAS,EAAG;AAAA,QAC3C,MAAA;AAAA,QACA,OAAA;AAAA,QACA,IAAA,EAAM,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,GAAI,KAAA,CAAA;AAAA,QACpC,QAAQ,UAAA,CAAW;AAAA,OACpB,CAAA;AACD,MAAA,IAAI,QAAA,CAAS,MAAA,KAAW,GAAA,IAAO,IAAA,IAAQ,YAAY,CAAA,EAAG;AACpD,QAAA,IAAA,GAAO,MAAM,KAAK,OAAA,EAAQ;AAC1B,QAAA;AAAA,MACF;AACA,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,QAAA,MAAM,IAAI,MAAM,CAAA,YAAA,EAAe,IAAI,YAAY,QAAA,CAAS,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,CAAE,CAAA;AAAA,MAC5E;AACA,MAAA,IAAI,QAAA,CAAS,WAAW,GAAA,EAAK;AAAE,QAAA,OAAO,KAAA,CAAA;AAAA,MAAgB;AACtD,MAAA,OAAO,MAAM,SAAS,IAAA,EAAK;AAAA,IAC7B,SAAS,GAAA,EAAK;AACZ,MAAA,IAAK,GAAA,CAAc,SAAS,YAAA,EAAc;AACxC,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,gFAAA,CAA6E,CAAA;AAAA,MAClH;AACA,MAAA,MAAM,GAAA;AAAA,IACR,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAAA,IACpB;AAAA,EACF;AACA,EAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,uCAAA,CAAyC,CAAA;AAC9E;AAEA,eAAsB,IAAA,CAAkB,MAAc,IAAA,EAA2C;AAC/F,EAAA,OAAO,OAAA,CAAW,MAAA,EAAQ,IAAA,EAAM,IAAI,CAAA;AACtC;AC/EO,IAAM,kBAAA,GAAkD,CAAC,UAAA,EAAY,SAAS,CAAA;AAoBrF,eAAsB,eAAA,CACpB,KACA,IAAA,EAC2B;AAC3B,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,mBAAA,CAAoB,IAAI,CAAA;AACxB,IAAA,IAAI,SAAS,SAAA,EAAW;AACtB,MAAA,MAAMC,YAAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,MAAA,IAAI,CAACA,YAAAA,EAAa;AAChB,QAAA,MAAM,IAAI,aAAA;AAAA,UACR,8BAAA;AAAA,UACA,qEAAqE,GAAG,CAAA,mBAAA;AAAA,SAC1E;AAAA,MACF;AACA,MAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAAA,YAAAA,EAAa,QAAQ,MAAA,EAAO;AAAA,IACzD;AACA,IAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,MAAA,EAAO;AAAA,EAC7C;AAEA,EAAA,MAAM,WAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAa,QAAQ,aAAA,EAAc;AAAA,EAChE;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,UAAA,EAAW;AACjD;AAkBA,SAAS,oBAAoB,KAAA,EAAkD;AAC7E,EAAA,IAAI,CAAC,kBAAA,CAAmB,QAAA,CAAS,KAAyB,CAAA,EAAG;AAC3D,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,eAAA;AAAA,MACA,CAAA,wBAAA,EAA2B,mBAAmB,IAAA,CAAK,IAAI,CAAC,CAAA,MAAA,EAAS,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC,CAAA,CAAA;AAAA,KACxF;AAAA,EACF;AACF;AAEO,IAAM,aAAA,GAAN,cAA4B,KAAA,CAAM;AAAA,EAC9B,IAAA;AAAA,EACT,WAAA,CAAY,MAAc,OAAA,EAAiB;AACzC,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AAAA,EACd;AACF,CAAA;AAOO,SAAS,UAAU,GAAA,EAGxB;AACA,EAAA,OAAO;AAAA,IACL,OAAO,GAAA,CAAI,KAAA;AAAA,IACX,GAAI,IAAI,WAAA,GAAc,EAAE,aAAa,GAAA,CAAI,WAAA,KAAgB;AAAC,GAC5D;AACF;;;AC1GA,IAAO,kBAAQ,aAAA,CAA2E;AAAA,EACxF,EAAA,EAAI,6BAAA;AAAA,EACJ,WAAA,EAAa,kBAAA;AAAA,EAEb,OAAA,EAAS;AAAA,IACP,MAAM,MAAA,CAAO,IAAA,EAAuB,KAAA,EAAqB;AACvD,MAAA,MAAM,SAAA,GAAY,KAAA,CAAM,IAAA,GAAO,CAAC,CAAA,IAAK,WAAA;AACrC,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,mBAAmB,SAAS,CAAA,CAAA,CAAA;AAAA,QACrC,UAAA,EAAY,CAAC,EAAE,IAAA,EAAM,QAAA,EAAmB,QAAA,EAAU,QAAA,EAAU,OAAA,EAAS,EAAE,SAAA,EAAW,OAAA,EAAS,KAAA,IAAS;AAAA,OACtG;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,OAAA,CAAQ,GAAA,EAAsB,KAAA,EAAmF;AACrH,MAAA,MAAM,SAAA,GAAY,KAAA,CAAM,IAAA,GAAO,CAAC,CAAA;AAChC,MAAA,MAAM,KAAA,GAAS,MAAM,KAAA,IAAS,KAAA;AAE9B,MAAA,IAAI,CAAC,SAAA,EAAW;AACd,QAAA,eAAA,CAAgB,GAAA,EAAK,6BAAA,EAA+B,mDAAA,EAAqD,KAAA,CAAM,IAAI,CAAA;AACnH,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,0BAAA,EAA4B,MAAA,EAAQ,EAAE,SAAA,EAAW,EAAA,EAAI,KAAA,EAAO,EAAA,EAAG,EAAE;AAAA,MAC9F;AAEA,MAAA,IAAI,QAAA;AACJ,MAAA,IAAI;AACF,QAAA,QAAA,GAAW,MAAM,eAAA,CAAgB,GAAA,CAAI,GAAA,EAAK,MAAM,KAAK,CAAA;AAAA,MACvD,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,eAAe,aAAA,EAAe;AAChC,UAAA,eAAA,CAAgB,GAAA,EAAK,GAAA,CAAI,OAAA,EAAS,MAAA,EAAW,MAAM,IAAI,CAAA;AAAA,QACzD,CAAA,MAAO;AACL,UAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAAA,QAClC;AACA,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,GAAA,YAAe,QAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,GAAG,MAAA,EAAQ,EAAE,WAAW,EAAA,EAAI,KAAA,EAAO,IAAG,EAAE;AAAA,MACpH;AAEA,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,CAAK,qBAAqB,EAAE,SAAA,EAAW,GAAG,SAAA,CAAU,QAAQ,GAAG,CAAA;AACrE,QAAA,IAAI,MAAM,IAAA,EAAM;AACd,UAAA,GAAA,CAAI,EAAA,EAAI,OAAO,EAAE,EAAA,EAAI,MAAM,SAAA,EAAW,KAAA,EAAO,QAAA,CAAS,KAAA,EAAO,CAAA;AAAA,QAC/D,CAAA,MAAO;AACL,UAAA,GAAA,CAAI,IAAI,OAAA,GAAU,CAAA,SAAA,EAAY,SAAS,CAAA,EAAA,EAAK,QAAA,CAAS,KAAK,CAAA,CAAA,CAAG,CAAA;AAAA,QAC/D;AACA,QAAA,OAAO,EAAE,IAAI,IAAA,EAAM,MAAA,EAAQ,EAAE,SAAA,EAAW,KAAA,EAAO,QAAA,CAAS,KAAA,EAAM,EAAE;AAAA,MAClE,SAAS,GAAA,EAAK;AACZ,QAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAChC,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,GAAA,YAAe,QAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,GAAG,MAAA,EAAQ,EAAE,WAAW,EAAA,EAAI,KAAA,EAAO,IAAG,EAAE;AAAA,MACpH;AAAA,IACF;AAAA;AAEJ,CAAC","file":"disable.js","sourcesContent":["/**\n * HTTP client for marketplace service via Gateway.\n */\n\nimport { useEnv } from '@kb-labs/sdk';\nimport { CredentialsManager, SessionManager } from '@kb-labs/cli-runtime/gateway';\nimport type { GatewayCredentials, SessionCredentials } from '@kb-labs/cli-runtime/gateway';\n\nconst DEFAULT_GATEWAY_URL = 'http://127.0.0.1:4000';\nconst MARKETPLACE_PREFIX = '/api/v1/marketplace';\nconst FETCH_TIMEOUT_MS = 30_000;\n\ntype AuthState = {\n  gatewayUrl: string;\n  accessToken: string;\n  refresh: () => Promise<AuthState>;\n};\n\nasync function loadAuth(): Promise<AuthState | null> {\n  const sessionManager = new SessionManager();\n  const session = await sessionManager.load();\n  if (session) {\n    const current = sessionManager.isExpired(session) ? await sessionManager.refresh(session) : session;\n    return authState(current, () => sessionManager.refresh(current));\n  }\n\n  const credentialsManager = new CredentialsManager();\n  const credentials = await credentialsManager.load();\n  if (!credentials) {\n    return null;\n  }\n  const current = credentialsManager.isExpired(credentials) ? await credentialsManager.refresh(credentials) : credentials;\n  return authState(current, () => credentialsManager.refresh(current));\n}\n\nfunction authState(credentials: GatewayCredentials | SessionCredentials, refresh: () => Promise<GatewayCredentials | SessionCredentials>): AuthState {\n  return {\n    gatewayUrl: credentials.gatewayUrl,\n    accessToken: credentials.accessToken,\n    refresh: async () => {\n      const updated = await refresh();\n      return authState(updated, refresh);\n    },\n  };\n}\n\nfunction getBaseUrl(gatewayUrl?: string): string {\n  const marketplaceUrl = useEnv('KB_MARKETPLACE_URL');\n  if (marketplaceUrl) {\n    return `${marketplaceUrl}${MARKETPLACE_PREFIX}`;\n  }\n  const gateway = gatewayUrl ?? useEnv('KB_GATEWAY_URL') ?? DEFAULT_GATEWAY_URL;\n  return `${gateway}${MARKETPLACE_PREFIX}`;\n}\n\nasync function request<T>(method: string, path: string, body?: Record<string, unknown>, params?: Record<string, string>): Promise<T> {\n  let auth = await loadAuth();\n  const url = new URL(`${getBaseUrl(auth?.gatewayUrl)}${path}`);\n  if (params) {\n    for (const [key, value] of Object.entries(params)) { url.searchParams.set(key, value); }\n  }\n\n  for (let attempt = 0; attempt < 2; attempt += 1) {\n    const controller = new AbortController();\n    const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n    try {\n      const headers: Record<string, string> = {};\n      if (body) { headers['Content-Type'] = 'application/json'; }\n      if (auth) { headers.Authorization = `Bearer ${auth.accessToken}`; }\n      const response = await fetch(url.toString(), {\n        method,\n        headers,\n        body: body ? JSON.stringify(body) : undefined,\n        signal: controller.signal,\n      });\n      if (response.status === 401 && auth && attempt === 0) {\n        auth = await auth.refresh();\n        continue;\n      }\n      if (!response.ok) {\n        const text = await response.text();\n        throw new Error(`Marketplace ${path} failed (${response.status}): ${text}`);\n      }\n      if (response.status === 204) { return undefined as T; }\n      return await response.json() as T;\n    } catch (err) {\n      if ((err as Error).name === 'AbortError') {\n        throw new Error(`Marketplace ${path} timed out — is the marketplace service running? (kb-dev start marketplace)`);\n      }\n      throw err;\n    } finally {\n      clearTimeout(timer);\n    }\n  }\n  throw new Error(`Marketplace ${path} failed after refreshing authentication`);\n}\n\nexport async function post<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('POST', path, body);\n}\n\nexport async function patch<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('PATCH', path, body);\n}\n\nexport async function del<T = unknown>(path: string, body?: Record<string, unknown>): Promise<T> {\n  return request<T>('DELETE', path, body);\n}\n\nexport async function get<T = unknown>(path: string, params?: Record<string, string>): Promise<T> {\n  return request<T>('GET', path, undefined, params);\n}\n","/**\n * @module @kb-labs/marketplace-entry/scope\n *\n * Client-side scope resolution for marketplace CLI commands. Uses the\n * canonical `findProjectConfigRoot` helper from `@kb-labs/core-workspace`\n * so the detection rules (which filenames count, how walk-up stops) match\n * what the config loader and the marketplace daemon enforce.\n *\n * Rules:\n *  - `project` is the default if cwd (or any ancestor up to the filesystem\n *    root) contains `.kb/kb.config.{json,jsonc}`.\n *  - Otherwise the default is `platform`.\n *  - `--scope` always overrides detection.\n *  - For scope=\"project\" we return the absolute projectRoot so the daemon\n *    doesn't need to re-discover it.\n */\n\nimport { findProjectConfigRoot } from '@kb-labs/core-workspace';\nimport type { MarketplaceScope, MarketplaceQueryScope } from '@kb-labs/marketplace-contracts';\n\nexport const SCOPE_FLAG_CHOICES: readonly MarketplaceScope[] = ['platform', 'project'];\nexport const QUERY_SCOPE_FLAG_CHOICES: readonly MarketplaceQueryScope[] = ['platform', 'project', 'all'];\n\nexport interface ResolvedCliScope {\n  scope: MarketplaceScope;\n  projectRoot?: string;\n  /** How the scope was determined — surfaces in --verbose logs. */\n  reason: 'flag' | 'auto-detect' | 'fallback';\n}\n\nexport interface ResolvedCliQueryScope extends Omit<ResolvedCliScope, 'scope'> {\n  scope: MarketplaceQueryScope;\n}\n\n/**\n * Resolve the effective scope for a mutating command (`link`, `unlink`,\n * `install`, ...). `flag` is the value of `--scope` (if supplied). The\n * helper never returns `'all'` for mutating commands — callers restrict\n * choices via `SCOPE_FLAG_CHOICES`.\n */\nexport async function resolveCliScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliScope> {\n  if (flag) {\n    assertMutatingScope(flag);\n    if (flag === 'project') {\n      const projectRoot = await findProjectConfigRoot(cwd);\n      if (!projectRoot) {\n        throw new CliScopeError(\n          'SCOPE_PROJECT_ROOT_NOT_FOUND',\n          `--scope=project requires a .kb/kb.config.{json,jsonc} ancestor of ${cwd} — none found.`,\n        );\n      }\n      return { scope: 'project', projectRoot, reason: 'flag' };\n    }\n    return { scope: 'platform', reason: 'flag' };\n  }\n\n  const projectRoot = await findProjectConfigRoot(cwd);\n  if (projectRoot) {\n    return { scope: 'project', projectRoot, reason: 'auto-detect' };\n  }\n  return { scope: 'platform', reason: 'fallback' };\n}\n\n/**\n * Resolve the effective scope for a read-only command (`list`). Accepts\n * `'all'` as an explicit flag value.\n */\nexport async function resolveCliQueryScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliQueryScope> {\n  if (flag === 'all') {\n    const projectRoot = await findProjectConfigRoot(cwd);\n    return { scope: 'all', projectRoot, reason: 'flag' };\n  }\n  const base = await resolveCliScope(cwd, flag);\n  return { scope: base.scope, projectRoot: base.projectRoot, reason: base.reason };\n}\n\nfunction assertMutatingScope(value: string): asserts value is MarketplaceScope {\n  if (!SCOPE_FLAG_CHOICES.includes(value as MarketplaceScope)) {\n    throw new CliScopeError(\n      'SCOPE_INVALID',\n      `--scope must be one of: ${SCOPE_FLAG_CHOICES.join(', ')} (got ${JSON.stringify(value)})`,\n    );\n  }\n}\n\nexport class CliScopeError extends Error {\n  readonly code: string;\n  constructor(code: string, message: string) {\n    super(message);\n    this.code = code;\n    this.name = 'CliScopeError';\n  }\n}\n\n/**\n * Build the body-payload fragment expected by `parseMutatingScope` on the\n * API side: `{ scope, projectRoot? }`. Kept as a helper so every command\n * sends the same shape and nothing drifts out-of-sync with the server.\n */\nexport function scopeBody(ctx: ResolvedCliScope | ResolvedCliQueryScope): {\n  scope: MarketplaceScope | MarketplaceQueryScope;\n  projectRoot?: string;\n} {\n  return {\n    scope: ctx.scope,\n    ...(ctx.projectRoot ? { projectRoot: ctx.projectRoot } : {}),\n  };\n}\n","import { defineCommand, validationError, handleError, type PluginContextV3, type CommandResult } from '@kb-labs/sdk';\nimport { post } from '../../http.js';\nimport { resolveCliScope, scopeBody, CliScopeError } from '../../scope.js';\n\ninterface DisableFlags { json?: boolean; scope?: string; 'dry-run'?: boolean }\ninterface DisableInput { argv?: string[]; flags?: DisableFlags }\n\nexport default defineCommand<unknown, DisableInput, { packageId: string; scope: string }>({\n  id: 'marketplace:plugins:disable',\n  description: 'Disable a plugin',\n\n  handler: {\n    async intent(_ctx: PluginContextV3, input: DisableInput) {\n      const packageId = input.argv?.[0] ?? '(unknown)';\n      return {\n        summary: `Disable plugin \"${packageId}\"`,\n        operations: [{ type: 'update' as const, resource: 'plugin', details: { packageId, enabled: false } }],\n      };\n    },\n\n    async execute(ctx: PluginContextV3, input: DisableInput): Promise<CommandResult<{ packageId: string; scope: string }>> {\n      const packageId = input.argv?.[0];\n      const flags = (input.flags ?? input) as DisableFlags;\n\n      if (!packageId) {\n        validationError(ctx, 'Specify a plugin to disable', 'Usage: kb marketplace plugins disable <plugin-id>', flags.json);\n        return { ok: false, error: 'A package id is required', result: { packageId: '', scope: '' } };\n      }\n\n      let scopeCtx;\n      try {\n        scopeCtx = await resolveCliScope(ctx.cwd, flags.scope);\n      } catch (err) {\n        if (err instanceof CliScopeError) {\n          validationError(ctx, err.message, undefined, flags.json);\n        } else {\n          handleError(ctx, err, flags.json);\n        }\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { packageId: '', scope: '' } };\n      }\n\n      try {\n        await post(`/packages/disable`, { packageId, ...scopeBody(scopeCtx) });\n        if (flags.json) {\n          ctx.ui?.json?.({ ok: true, packageId, scope: scopeCtx.scope });\n        } else {\n          ctx.ui?.success?.(`Disabled ${packageId} (${scopeCtx.scope})`);\n        }\n        return { ok: true, result: { packageId, scope: scopeCtx.scope } };\n      } catch (err) {\n        handleError(ctx, err, flags.json);\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { packageId: '', scope: '' } };\n      }\n    },\n  },\n});\n"]}

package/dist/commands/plugins/doctor.js

@@ -1,42 +1,92 @@
 import { defineCommand, validationError, handleError, useEnv } from '@kb-labs/sdk';
+import { SessionManager, CredentialsManager } from '@kb-labs/cli-runtime/gateway';
 import { findProjectConfigRoot } from '@kb-labs/core-workspace';
 
 // src/commands/plugins/doctor.ts
 var DEFAULT_GATEWAY_URL = "http://127.0.0.1:4000";
 var MARKETPLACE_PREFIX = "/api/v1/marketplace";
 var FETCH_TIMEOUT_MS = 3e4;
-function getBaseUrl() {
+async function loadAuth() {
+  const sessionManager = new SessionManager();
+  const session = await sessionManager.load();
+  if (session) {
+    const current2 = sessionManager.isExpired(session) ? await sessionManager.refresh(session) : session;
+    return authState(current2, () => sessionManager.refresh(current2));
+  }
+  const credentialsManager = new CredentialsManager();
+  const credentials = await credentialsManager.load();
+  if (!credentials) {
+    return null;
+  }
+  const current = credentialsManager.isExpired(credentials) ? await credentialsManager.refresh(credentials) : credentials;
+  return authState(current, () => credentialsManager.refresh(current));
+}
+function authState(credentials, refresh) {
+  return {
+    gatewayUrl: credentials.gatewayUrl,
+    accessToken: credentials.accessToken,
+    refresh: async () => {
+      const updated = await refresh();
+      return authState(updated, refresh);
+    }
+  };
+}
+function getBaseUrl(gatewayUrl) {
   const marketplaceUrl = useEnv("KB_MARKETPLACE_URL");
   if (marketplaceUrl) {
     return `${marketplaceUrl}${MARKETPLACE_PREFIX}`;
   }
-  const gateway = useEnv("KB_GATEWAY_URL") ?? DEFAULT_GATEWAY_URL;
+  const gateway = gatewayUrl ?? useEnv("KB_GATEWAY_URL") ?? DEFAULT_GATEWAY_URL;
   return `${gateway}${MARKETPLACE_PREFIX}`;
 }
-async function get(path, params) {
-  const url = new URL(`${getBaseUrl()}${path}`);
+async function request(method, path, body, params) {
+  let auth = await loadAuth();
+  const url = new URL(`${getBaseUrl(auth?.gatewayUrl)}${path}`);
   if (params) {
-    for (const [k, v] of Object.entries(params)) {
-      url.searchParams.set(k, v);
+    for (const [key, value] of Object.entries(params)) {
+      url.searchParams.set(key, value);
     }
   }
-  const controller = new AbortController();
-  const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
-  try {
-    const res = await fetch(url.toString(), { signal: controller.signal });
-    if (!res.ok) {
-      const text = await res.text();
-      throw new Error(`Marketplace ${path} failed (${res.status}): ${text}`);
-    }
-    return await res.json();
-  } catch (err) {
-    if (err.name === "AbortError") {
-      throw new Error(`Marketplace ${path} timed out \u2014 is the marketplace service running? (kb-dev start marketplace)`);
+  for (let attempt = 0; attempt < 2; attempt += 1) {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
+    try {
+      const headers = {};
+      if (body) ;
+      if (auth) {
+        headers.Authorization = `Bearer ${auth.accessToken}`;
+      }
+      const response = await fetch(url.toString(), {
+        method,
+        headers,
+        body: body ? JSON.stringify(body) : void 0,
+        signal: controller.signal
+      });
+      if (response.status === 401 && auth && attempt === 0) {
+        auth = await auth.refresh();
+        continue;
+      }
+      if (!response.ok) {
+        const text = await response.text();
+        throw new Error(`Marketplace ${path} failed (${response.status}): ${text}`);
+      }
+      if (response.status === 204) {
+        return void 0;
+      }
+      return await response.json();
+    } catch (err) {
+      if (err.name === "AbortError") {
+        throw new Error(`Marketplace ${path} timed out \u2014 is the marketplace service running? (kb-dev start marketplace)`);
+      }
+      throw err;
+    } finally {
+      clearTimeout(timer);
     }
-    throw err;
-  } finally {
-    clearTimeout(timer);
   }
+  throw new Error(`Marketplace ${path} failed after refreshing authentication`);
+}
+async function get(path, params) {
+  return request("GET", path, void 0, params);
 }
 var SCOPE_FLAG_CHOICES = ["platform", "project"];
 async function resolveCliScope(cwd, flag) {

package/dist/commands/plugins/doctor.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/http.ts","../../../src/scope.ts","../../../src/commands/plugins/doctor.ts"],"names":["projectRoot"],"mappings":";;;;AAMA,IAAM,mBAAA,GAAsB,uBAAA;AAC5B,IAAM,kBAAA,GAAqB,qBAAA;AAC3B,IAAM,gBAAA,GAAmB,GAAA;AAEzB,SAAS,UAAA,GAAqB;AAC5B,EAAA,MAAM,cAAA,GAAiB,OAAO,oBAAoB,CAAA;AAClD,EAAA,IAAI,cAAA,EAAgB;AAClB,IAAA,OAAO,CAAA,EAAG,cAAc,CAAA,EAAG,kBAAkB,CAAA,CAAA;AAAA,EAC/C;AACA,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,gBAAgB,CAAA,IAAK,mBAAA;AAC5C,EAAA,OAAO,CAAA,EAAG,OAAO,CAAA,EAAG,kBAAkB,CAAA,CAAA;AACxC;AAoFA,eAAsB,GAAA,CAAiB,MAAc,MAAA,EAA6C;AAChG,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,CAAA,EAAG,YAAY,CAAA,EAAG,IAAI,CAAA,CAAE,CAAA;AAC5C,EAAA,IAAI,MAAA,EAAQ;AACV,IAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,KAAK,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,EAAG;AAAC,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,CAAA,EAAG,CAAC,CAAA;AAAA,IAAE;AAAA,EAC3E;AACA,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,gBAAgB,CAAA;AACnE,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,GAAA,CAAI,QAAA,IAAY,EAAE,MAAA,EAAQ,UAAA,CAAW,MAAA,EAAQ,CAAA;AACrE,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,MAAA,MAAM,IAAI,MAAM,CAAA,YAAA,EAAe,IAAI,YAAY,GAAA,CAAI,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,CAAE,CAAA;AAAA,IACvE;AACA,IAAA,OAAO,MAAM,IAAI,IAAA,EAAK;AAAA,EACxB,SAAS,GAAA,EAAK;AACZ,IAAA,IAAK,GAAA,CAAc,SAAS,YAAA,EAAc;AACxC,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,gFAAA,CAA6E,CAAA;AAAA,IAClH;AACA,IAAA,MAAM,GAAA;AAAA,EACR,CAAA,SAAE;AACA,IAAA,YAAA,CAAa,KAAK,CAAA;AAAA,EACpB;AACF;ACvGO,IAAM,kBAAA,GAAkD,CAAC,UAAA,EAAY,SAAS,CAAA;AAoBrF,eAAsB,eAAA,CACpB,KACA,IAAA,EAC2B;AAC3B,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,mBAAA,CAAoB,IAAI,CAAA;AACxB,IAAA,IAAI,SAAS,SAAA,EAAW;AACtB,MAAA,MAAMA,YAAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,MAAA,IAAI,CAACA,YAAAA,EAAa;AAChB,QAAA,MAAM,IAAI,aAAA;AAAA,UACR,8BAAA;AAAA,UACA,qEAAqE,GAAG,CAAA,mBAAA;AAAA,SAC1E;AAAA,MACF;AACA,MAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAAA,YAAAA,EAAa,QAAQ,MAAA,EAAO;AAAA,IACzD;AACA,IAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,MAAA,EAAO;AAAA,EAC7C;AAEA,EAAA,MAAM,WAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAa,QAAQ,aAAA,EAAc;AAAA,EAChE;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,UAAA,EAAW;AACjD;AAkBA,SAAS,oBAAoB,KAAA,EAAkD;AAC7E,EAAA,IAAI,CAAC,kBAAA,CAAmB,QAAA,CAAS,KAAyB,CAAA,EAAG;AAC3D,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,eAAA;AAAA,MACA,CAAA,wBAAA,EAA2B,mBAAmB,IAAA,CAAK,IAAI,CAAC,CAAA,MAAA,EAAS,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC,CAAA,CAAA;AAAA,KACxF;AAAA,EACF;AACF;AAEO,IAAM,aAAA,GAAN,cAA4B,KAAA,CAAM;AAAA,EAC9B,IAAA;AAAA,EACT,WAAA,CAAY,MAAc,OAAA,EAAiB;AACzC,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AAAA,EACd;AACF,CAAA;;;AC9EA,IAAO,iBAAQ,aAAA,CAAsD;AAAA,EACnE,EAAA,EAAI,4BAAA;AAAA,EACJ,WAAA,EAAa,6BAAA;AAAA,EAEb,OAAA,EAAS;AAAA,IACP,MAAM,OAAA,CAAQ,GAAA,EAAsB,KAAA,EAA8D;AAChG,MAAA,MAAM,KAAA,GAAS,MAAM,KAAA,IAAS,KAAA;AAE9B,MAAA,IAAI,QAAA;AACJ,MAAA,IAAI;AACF,QAAA,QAAA,GAAW,MAAM,eAAA,CAAgB,GAAA,CAAI,GAAA,EAAK,MAAM,KAAK,CAAA;AAAA,MACvD,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,eAAe,aAAA,EAAe;AAChC,UAAA,eAAA,CAAgB,GAAA,EAAK,GAAA,CAAI,OAAA,EAAS,MAAA,EAAW,MAAM,IAAI,CAAA;AAAA,QACzD,CAAA,MAAO;AACL,UAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAAA,QAClC;AACA,QAAA,OAAO,EAAE,IAAI,KAAA,EAAO,KAAA,EAAO,eAAe,KAAA,GAAQ,GAAA,CAAI,UAAU,MAAA,CAAO,GAAG,GAAG,MAAA,EAAQ,EAAE,IAAI,KAAA,EAAO,KAAA,EAAO,GAAG,MAAA,EAAQ,IAAG,EAAE;AAAA,MAC3H;AAEA,MAAA,IAAI;AACF,QAAA,MAAM,KAAA,GAAgC,EAAE,KAAA,EAAO,QAAA,CAAS,KAAA,EAAM;AAC9D,QAAA,IAAI,SAAS,WAAA,EAAa;AAAE,UAAA,KAAA,CAAM,cAAc,QAAA,CAAS,WAAA;AAAA,QAAa;AACtE,QAAA,MAAM,MAAA,GAAS,MAAM,GAAA,CAAsB,cAAA,EAAgB,KAAK,CAAA;AAEhE,QAAA,IAAI,MAAM,IAAA,EAAM;AACd,UAAA,GAAA,CAAI,EAAA,EAAI,OAAO,MAAM,CAAA;AAAA,QACvB,CAAA,MAAA,IAAW,MAAA,CAAO,MAAA,CAAO,MAAA,KAAW,CAAA,EAAG;AACrC,UAAA,GAAA,CAAI,EAAA,EAAI,UAAU,CAAA,IAAA,EAAO,MAAA,CAAO,KAAK,CAAA,mBAAA,EAAsB,QAAA,CAAS,KAAK,CAAA,CAAA,CAAG,CAAA;AAAA,QAC9E,CAAA,MAAO;AACL,UAAA,MAAM,SAAS,MAAA,CAAO,MAAA,CAAO,OAAO,CAAA,CAAA,KAAK,CAAA,CAAE,aAAa,OAAO,CAAA;AAC/D,UAAA,GAAA,CAAI,EAAA,EAAI,IAAA,GAAO,CAAA,oBAAA,EAAuB,QAAA,CAAS,KAAK,CAAA,CAAA,CAAA,EAAK;AAAA,YACvD,QAAA,EAAU;AAAA,cACR,EAAE,MAAA,EAAQ,SAAA,EAAW,OAAO,CAAC,CAAA,OAAA,EAAU,OAAO,KAAK,CAAA,CAAA,EAAI,CAAA,QAAA,EAAW,MAAA,CAAO,OAAO,MAAM,CAAA,CAAA,EAAI,WAAW,MAAA,CAAO,MAAM,EAAE,CAAA,EAAE;AAAA,cACtH,EAAE,QAAQ,QAAA,EAAU,KAAA,EAAO,OAAO,MAAA,CAAO,GAAA,CAAI,OAAK,CAAA,EAAG,CAAA,CAAE,aAAa,OAAA,GAAU,QAAA,GAAM,QAAG,CAAA,CAAA,EAAI,CAAA,CAAE,SAAS,CAAA,EAAA,EAAK,CAAA,CAAE,OAAO,CAAA,CAAE,CAAA;AAAE;AAC1H,WACD,CAAA;AAAA,QACH;AAEA,QAAA,OAAO,MAAA,CAAO,EAAA,GAAK,EAAE,EAAA,EAAI,MAAM,MAAA,EAAQ,MAAA,EAAO,GAAI,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,iCAAA,EAAmC,QAAQ,MAAA,EAAO;AAAA,MAC1H,SAAS,GAAA,EAAK;AACZ,QAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAChC,QAAA,OAAO,EAAE,IAAI,KAAA,EAAO,KAAA,EAAO,eAAe,KAAA,GAAQ,GAAA,CAAI,UAAU,MAAA,CAAO,GAAG,GAAG,MAAA,EAAQ,EAAE,IAAI,KAAA,EAAO,KAAA,EAAO,GAAG,MAAA,EAAQ,IAAG,EAAE;AAAA,MAC3H;AAAA,IACF;AAAA;AAEJ,CAAC","file":"doctor.js","sourcesContent":["/**\n * HTTP client for marketplace service via Gateway.\n */\n\nimport { useEnv } from '@kb-labs/sdk';\n\nconst DEFAULT_GATEWAY_URL = 'http://127.0.0.1:4000';\nconst MARKETPLACE_PREFIX = '/api/v1/marketplace';\nconst FETCH_TIMEOUT_MS = 30_000;\n\nfunction getBaseUrl(): string {\n  const marketplaceUrl = useEnv('KB_MARKETPLACE_URL');\n  if (marketplaceUrl) {\n    return `${marketplaceUrl}${MARKETPLACE_PREFIX}`;\n  }\n  const gateway = useEnv('KB_GATEWAY_URL') ?? DEFAULT_GATEWAY_URL;\n  return `${gateway}${MARKETPLACE_PREFIX}`;\n}\n\nexport async function post<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  const url = `${getBaseUrl()}${path}`;\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n  try {\n    const res = await fetch(url, {\n      method: 'POST',\n      headers: { 'Content-Type': 'application/json' },\n      body: JSON.stringify(body),\n      signal: controller.signal,\n    });\n    if (!res.ok) {\n      const text = await res.text();\n      throw new Error(`Marketplace ${path} failed (${res.status}): ${text}`);\n    }\n    // 204 No Content (e.g. unlink, uninstall) has no body — don't call\n    // res.json() or it throws \"Unexpected end of JSON input\".\n    if (res.status === 204) { return undefined as T; }\n    return await res.json() as T;\n  } catch (err) {\n    if ((err as Error).name === 'AbortError') {\n      throw new Error(`Marketplace ${path} timed out — is the marketplace service running? (kb-dev start marketplace)`);\n    }\n    throw err;\n  } finally {\n    clearTimeout(timer);\n  }\n}\n\nexport async function patch<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  const url = `${getBaseUrl()}${path}`;\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n  try {\n    const res = await fetch(url, {\n      method: 'PATCH',\n      headers: { 'Content-Type': 'application/json' },\n      body: JSON.stringify(body),\n      signal: controller.signal,\n    });\n    if (!res.ok) {\n      const text = await res.text();\n      throw new Error(`Marketplace ${path} failed (${res.status}): ${text}`);\n    }\n    return await res.json() as T;\n  } catch (err) {\n    if ((err as Error).name === 'AbortError') {\n      throw new Error(`Marketplace ${path} timed out — is the marketplace service running? (kb-dev start marketplace)`);\n    }\n    throw err;\n  } finally {\n    clearTimeout(timer);\n  }\n}\n\nexport async function del<T = unknown>(path: string, body?: Record<string, unknown>): Promise<T> {\n  const url = `${getBaseUrl()}${path}`;\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n  try {\n    const res = await fetch(url, {\n      method: 'DELETE',\n      headers: body ? { 'Content-Type': 'application/json' } : {},\n      body: body ? JSON.stringify(body) : undefined,\n      signal: controller.signal,\n    });\n    if (!res.ok) {\n      const text = await res.text();\n      throw new Error(`Marketplace ${path} failed (${res.status}): ${text}`);\n    }\n    if (res.status === 204) { return undefined as T; }\n    return await res.json() as T;\n  } catch (err) {\n    if ((err as Error).name === 'AbortError') {\n      throw new Error(`Marketplace ${path} timed out — is the marketplace service running? (kb-dev start marketplace)`);\n    }\n    throw err;\n  } finally {\n    clearTimeout(timer);\n  }\n}\n\nexport async function get<T = unknown>(path: string, params?: Record<string, string>): Promise<T> {\n  const url = new URL(`${getBaseUrl()}${path}`);\n  if (params) {\n    for (const [k, v] of Object.entries(params)) {url.searchParams.set(k, v);}\n  }\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n  try {\n    const res = await fetch(url.toString(), { signal: controller.signal });\n    if (!res.ok) {\n      const text = await res.text();\n      throw new Error(`Marketplace ${path} failed (${res.status}): ${text}`);\n    }\n    return await res.json() as T;\n  } catch (err) {\n    if ((err as Error).name === 'AbortError') {\n      throw new Error(`Marketplace ${path} timed out — is the marketplace service running? (kb-dev start marketplace)`);\n    }\n    throw err;\n  } finally {\n    clearTimeout(timer);\n  }\n}\n","/**\n * @module @kb-labs/marketplace-entry/scope\n *\n * Client-side scope resolution for marketplace CLI commands. Uses the\n * canonical `findProjectConfigRoot` helper from `@kb-labs/core-workspace`\n * so the detection rules (which filenames count, how walk-up stops) match\n * what the config loader and the marketplace daemon enforce.\n *\n * Rules:\n *  - `project` is the default if cwd (or any ancestor up to the filesystem\n *    root) contains `.kb/kb.config.{json,jsonc}`.\n *  - Otherwise the default is `platform`.\n *  - `--scope` always overrides detection.\n *  - For scope=\"project\" we return the absolute projectRoot so the daemon\n *    doesn't need to re-discover it.\n */\n\nimport { findProjectConfigRoot } from '@kb-labs/core-workspace';\nimport type { MarketplaceScope, MarketplaceQueryScope } from '@kb-labs/marketplace-contracts';\n\nexport const SCOPE_FLAG_CHOICES: readonly MarketplaceScope[] = ['platform', 'project'];\nexport const QUERY_SCOPE_FLAG_CHOICES: readonly MarketplaceQueryScope[] = ['platform', 'project', 'all'];\n\nexport interface ResolvedCliScope {\n  scope: MarketplaceScope;\n  projectRoot?: string;\n  /** How the scope was determined — surfaces in --verbose logs. */\n  reason: 'flag' | 'auto-detect' | 'fallback';\n}\n\nexport interface ResolvedCliQueryScope extends Omit<ResolvedCliScope, 'scope'> {\n  scope: MarketplaceQueryScope;\n}\n\n/**\n * Resolve the effective scope for a mutating command (`link`, `unlink`,\n * `install`, ...). `flag` is the value of `--scope` (if supplied). The\n * helper never returns `'all'` for mutating commands — callers restrict\n * choices via `SCOPE_FLAG_CHOICES`.\n */\nexport async function resolveCliScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliScope> {\n  if (flag) {\n    assertMutatingScope(flag);\n    if (flag === 'project') {\n      const projectRoot = await findProjectConfigRoot(cwd);\n      if (!projectRoot) {\n        throw new CliScopeError(\n          'SCOPE_PROJECT_ROOT_NOT_FOUND',\n          `--scope=project requires a .kb/kb.config.{json,jsonc} ancestor of ${cwd} — none found.`,\n        );\n      }\n      return { scope: 'project', projectRoot, reason: 'flag' };\n    }\n    return { scope: 'platform', reason: 'flag' };\n  }\n\n  const projectRoot = await findProjectConfigRoot(cwd);\n  if (projectRoot) {\n    return { scope: 'project', projectRoot, reason: 'auto-detect' };\n  }\n  return { scope: 'platform', reason: 'fallback' };\n}\n\n/**\n * Resolve the effective scope for a read-only command (`list`). Accepts\n * `'all'` as an explicit flag value.\n */\nexport async function resolveCliQueryScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliQueryScope> {\n  if (flag === 'all') {\n    const projectRoot = await findProjectConfigRoot(cwd);\n    return { scope: 'all', projectRoot, reason: 'flag' };\n  }\n  const base = await resolveCliScope(cwd, flag);\n  return { scope: base.scope, projectRoot: base.projectRoot, reason: base.reason };\n}\n\nfunction assertMutatingScope(value: string): asserts value is MarketplaceScope {\n  if (!SCOPE_FLAG_CHOICES.includes(value as MarketplaceScope)) {\n    throw new CliScopeError(\n      'SCOPE_INVALID',\n      `--scope must be one of: ${SCOPE_FLAG_CHOICES.join(', ')} (got ${JSON.stringify(value)})`,\n    );\n  }\n}\n\nexport class CliScopeError extends Error {\n  readonly code: string;\n  constructor(code: string, message: string) {\n    super(message);\n    this.code = code;\n    this.name = 'CliScopeError';\n  }\n}\n\n/**\n * Build the body-payload fragment expected by `parseMutatingScope` on the\n * API side: `{ scope, projectRoot? }`. Kept as a helper so every command\n * sends the same shape and nothing drifts out-of-sync with the server.\n */\nexport function scopeBody(ctx: ResolvedCliScope | ResolvedCliQueryScope): {\n  scope: MarketplaceScope | MarketplaceQueryScope;\n  projectRoot?: string;\n} {\n  return {\n    scope: ctx.scope,\n    ...(ctx.projectRoot ? { projectRoot: ctx.projectRoot } : {}),\n  };\n}\n","import { defineCommand, handleError, validationError, type PluginContextV3, type CommandResult } from '@kb-labs/sdk';\nimport { get } from '../../http.js';\nimport { resolveCliScope, CliScopeError } from '../../scope.js';\n\ninterface DoctorFlags { json?: boolean; scope?: string }\ninterface DoctorInput { flags?: DoctorFlags }\n\ninterface DoctorIssue {\n  severity: string;\n  packageId: string;\n  message: string;\n  remediation?: string;\n}\n\ninterface DoctorResultData {\n  ok: boolean;\n  total: number;\n  issues: DoctorIssue[];\n}\n\nexport default defineCommand<unknown, DoctorInput, DoctorResultData>({\n  id: 'marketplace:plugins:doctor',\n  description: 'Diagnose marketplace health',\n\n  handler: {\n    async execute(ctx: PluginContextV3, input: DoctorInput): Promise<CommandResult<DoctorResultData>> {\n      const flags = (input.flags ?? input) as DoctorFlags;\n\n      let scopeCtx;\n      try {\n        scopeCtx = await resolveCliScope(ctx.cwd, flags.scope);\n      } catch (err) {\n        if (err instanceof CliScopeError) {\n          validationError(ctx, err.message, undefined, flags.json);\n        } else {\n          handleError(ctx, err, flags.json);\n        }\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { ok: false, total: 0, issues: [] } };\n      }\n\n      try {\n        const query: Record<string, string> = { scope: scopeCtx.scope };\n        if (scopeCtx.projectRoot) { query.projectRoot = scopeCtx.projectRoot; }\n        const report = await get<DoctorResultData>('/diagnostics', query);\n\n        if (flags.json) {\n          ctx.ui?.json?.(report);\n        } else if (report.issues.length === 0) {\n          ctx.ui?.success?.(`All ${report.total} packages healthy (${scopeCtx.scope})`);\n        } else {\n          const errors = report.issues.filter(i => i.severity === 'error');\n          ctx.ui?.warn?.(`Marketplace Doctor (${scopeCtx.scope})`, {\n            sections: [\n              { header: 'Summary', items: [`Total: ${report.total}`, `Issues: ${report.issues.length}`, `Errors: ${errors.length}`] },\n              { header: 'Issues', items: report.issues.map(i => `${i.severity === 'error' ? '❌' : '⚠'} ${i.packageId}: ${i.message}`) },\n            ],\n          });\n        }\n\n        return report.ok ? { ok: true, result: report } : { ok: false, error: 'Marketplace doctor found issues', result: report };\n      } catch (err) {\n        handleError(ctx, err, flags.json);\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { ok: false, total: 0, issues: [] } };\n      }\n    },\n  },\n});\n"]}
+{"version":3,"sources":["../../../src/http.ts","../../../src/scope.ts","../../../src/commands/plugins/doctor.ts"],"names":["current","projectRoot"],"mappings":";;;;;AAQA,IAAM,mBAAA,GAAsB,uBAAA;AAC5B,IAAM,kBAAA,GAAqB,qBAAA;AAC3B,IAAM,gBAAA,GAAmB,GAAA;AAQzB,eAAe,QAAA,GAAsC;AACnD,EAAA,MAAM,cAAA,GAAiB,IAAI,cAAA,EAAe;AAC1C,EAAA,MAAM,OAAA,GAAU,MAAM,cAAA,CAAe,IAAA,EAAK;AAC1C,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,MAAMA,QAAAA,GAAU,eAAe,SAAA,CAAU,OAAO,IAAI,MAAM,cAAA,CAAe,OAAA,CAAQ,OAAO,CAAA,GAAI,OAAA;AAC5F,IAAA,OAAO,UAAUA,QAAAA,EAAS,MAAM,cAAA,CAAe,OAAA,CAAQA,QAAO,CAAC,CAAA;AAAA,EACjE;AAEA,EAAA,MAAM,kBAAA,GAAqB,IAAI,kBAAA,EAAmB;AAClD,EAAA,MAAM,WAAA,GAAc,MAAM,kBAAA,CAAmB,IAAA,EAAK;AAClD,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,OAAA,GAAU,mBAAmB,SAAA,CAAU,WAAW,IAAI,MAAM,kBAAA,CAAmB,OAAA,CAAQ,WAAW,CAAA,GAAI,WAAA;AAC5G,EAAA,OAAO,UAAU,OAAA,EAAS,MAAM,kBAAA,CAAmB,OAAA,CAAQ,OAAO,CAAC,CAAA;AACrE;AAEA,SAAS,SAAA,CAAU,aAAsD,OAAA,EAA4E;AACnJ,EAAA,OAAO;AAAA,IACL,YAAY,WAAA,CAAY,UAAA;AAAA,IACxB,aAAa,WAAA,CAAY,WAAA;AAAA,IACzB,SAAS,YAAY;AACnB,MAAA,MAAM,OAAA,GAAU,MAAM,OAAA,EAAQ;AAC9B,MAAA,OAAO,SAAA,CAAU,SAAS,OAAO,CAAA;AAAA,IACnC;AAAA,GACF;AACF;AAEA,SAAS,WAAW,UAAA,EAA6B;AAC/C,EAAA,MAAM,cAAA,GAAiB,OAAO,oBAAoB,CAAA;AAClD,EAAA,IAAI,cAAA,EAAgB;AAClB,IAAA,OAAO,CAAA,EAAG,cAAc,CAAA,EAAG,kBAAkB,CAAA,CAAA;AAAA,EAC/C;AACA,EAAA,MAAM,OAAA,GAAU,UAAA,IAAc,MAAA,CAAO,gBAAgB,CAAA,IAAK,mBAAA;AAC1D,EAAA,OAAO,CAAA,EAAG,OAAO,CAAA,EAAG,kBAAkB,CAAA,CAAA;AACxC;AAEA,eAAe,OAAA,CAAW,MAAA,EAAgB,IAAA,EAAc,IAAA,EAAgC,MAAA,EAA6C;AACnI,EAAA,IAAI,IAAA,GAAO,MAAM,QAAA,EAAS;AAC1B,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,CAAA,EAAG,UAAA,CAAW,MAAM,UAAU,CAAC,CAAA,EAAG,IAAI,CAAA,CAAE,CAAA;AAC5D,EAAA,IAAI,MAAA,EAAQ;AACV,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,EAAG;AAAE,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,GAAA,EAAK,KAAK,CAAA;AAAA,IAAG;AAAA,EACzF;AAEA,EAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,GAAU,CAAA,EAAG,WAAW,CAAA,EAAG;AAC/C,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,gBAAgB,CAAA;AACnE,IAAA,IAAI;AACF,MAAA,MAAM,UAAkC,EAAC;AACzC,MAAA,IAAI,IAAA,EAAM;AACV,MAAA,IAAI,IAAA,EAAM;AAAE,QAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,IAAA,CAAK,WAAW,CAAA,CAAA;AAAA,MAAI;AAClE,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,CAAI,UAAS,EAAG;AAAA,QAC3C,MAAA;AAAA,QACA,OAAA;AAAA,QACA,IAAA,EAAM,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,GAAI,KAAA,CAAA;AAAA,QACpC,QAAQ,UAAA,CAAW;AAAA,OACpB,CAAA;AACD,MAAA,IAAI,QAAA,CAAS,MAAA,KAAW,GAAA,IAAO,IAAA,IAAQ,YAAY,CAAA,EAAG;AACpD,QAAA,IAAA,GAAO,MAAM,KAAK,OAAA,EAAQ;AAC1B,QAAA;AAAA,MACF;AACA,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,QAAA,MAAM,IAAI,MAAM,CAAA,YAAA,EAAe,IAAI,YAAY,QAAA,CAAS,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,CAAE,CAAA;AAAA,MAC5E;AACA,MAAA,IAAI,QAAA,CAAS,WAAW,GAAA,EAAK;AAAE,QAAA,OAAO,KAAA,CAAA;AAAA,MAAgB;AACtD,MAAA,OAAO,MAAM,SAAS,IAAA,EAAK;AAAA,IAC7B,SAAS,GAAA,EAAK;AACZ,MAAA,IAAK,GAAA,CAAc,SAAS,YAAA,EAAc;AACxC,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,gFAAA,CAA6E,CAAA;AAAA,MAClH;AACA,MAAA,MAAM,GAAA;AAAA,IACR,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAAA,IACpB;AAAA,EACF;AACA,EAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,uCAAA,CAAyC,CAAA;AAC9E;AAcA,eAAsB,GAAA,CAAiB,MAAc,MAAA,EAA6C;AAChG,EAAA,OAAO,OAAA,CAAW,KAAA,EAAO,IAAA,EAAM,MAAA,EAAW,MAAM,CAAA;AAClD;AC3FO,IAAM,kBAAA,GAAkD,CAAC,UAAA,EAAY,SAAS,CAAA;AAoBrF,eAAsB,eAAA,CACpB,KACA,IAAA,EAC2B;AAC3B,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,mBAAA,CAAoB,IAAI,CAAA;AACxB,IAAA,IAAI,SAAS,SAAA,EAAW;AACtB,MAAA,MAAMC,YAAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,MAAA,IAAI,CAACA,YAAAA,EAAa;AAChB,QAAA,MAAM,IAAI,aAAA;AAAA,UACR,8BAAA;AAAA,UACA,qEAAqE,GAAG,CAAA,mBAAA;AAAA,SAC1E;AAAA,MACF;AACA,MAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAAA,YAAAA,EAAa,QAAQ,MAAA,EAAO;AAAA,IACzD;AACA,IAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,MAAA,EAAO;AAAA,EAC7C;AAEA,EAAA,MAAM,WAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAa,QAAQ,aAAA,EAAc;AAAA,EAChE;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,UAAA,EAAW;AACjD;AAkBA,SAAS,oBAAoB,KAAA,EAAkD;AAC7E,EAAA,IAAI,CAAC,kBAAA,CAAmB,QAAA,CAAS,KAAyB,CAAA,EAAG;AAC3D,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,eAAA;AAAA,MACA,CAAA,wBAAA,EAA2B,mBAAmB,IAAA,CAAK,IAAI,CAAC,CAAA,MAAA,EAAS,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC,CAAA,CAAA;AAAA,KACxF;AAAA,EACF;AACF;AAEO,IAAM,aAAA,GAAN,cAA4B,KAAA,CAAM;AAAA,EAC9B,IAAA;AAAA,EACT,WAAA,CAAY,MAAc,OAAA,EAAiB;AACzC,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AAAA,EACd;AACF,CAAA;;;AC9EA,IAAO,iBAAQ,aAAA,CAAsD;AAAA,EACnE,EAAA,EAAI,4BAAA;AAAA,EACJ,WAAA,EAAa,6BAAA;AAAA,EAEb,OAAA,EAAS;AAAA,IACP,MAAM,OAAA,CAAQ,GAAA,EAAsB,KAAA,EAA8D;AAChG,MAAA,MAAM,KAAA,GAAS,MAAM,KAAA,IAAS,KAAA;AAE9B,MAAA,IAAI,QAAA;AACJ,MAAA,IAAI;AACF,QAAA,QAAA,GAAW,MAAM,eAAA,CAAgB,GAAA,CAAI,GAAA,EAAK,MAAM,KAAK,CAAA;AAAA,MACvD,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,eAAe,aAAA,EAAe;AAChC,UAAA,eAAA,CAAgB,GAAA,EAAK,GAAA,CAAI,OAAA,EAAS,MAAA,EAAW,MAAM,IAAI,CAAA;AAAA,QACzD,CAAA,MAAO;AACL,UAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAAA,QAClC;AACA,QAAA,OAAO,EAAE,IAAI,KAAA,EAAO,KAAA,EAAO,eAAe,KAAA,GAAQ,GAAA,CAAI,UAAU,MAAA,CAAO,GAAG,GAAG,MAAA,EAAQ,EAAE,IAAI,KAAA,EAAO,KAAA,EAAO,GAAG,MAAA,EAAQ,IAAG,EAAE;AAAA,MAC3H;AAEA,MAAA,IAAI;AACF,QAAA,MAAM,KAAA,GAAgC,EAAE,KAAA,EAAO,QAAA,CAAS,KAAA,EAAM;AAC9D,QAAA,IAAI,SAAS,WAAA,EAAa;AAAE,UAAA,KAAA,CAAM,cAAc,QAAA,CAAS,WAAA;AAAA,QAAa;AACtE,QAAA,MAAM,MAAA,GAAS,MAAM,GAAA,CAAsB,cAAA,EAAgB,KAAK,CAAA;AAEhE,QAAA,IAAI,MAAM,IAAA,EAAM;AACd,UAAA,GAAA,CAAI,EAAA,EAAI,OAAO,MAAM,CAAA;AAAA,QACvB,CAAA,MAAA,IAAW,MAAA,CAAO,MAAA,CAAO,MAAA,KAAW,CAAA,EAAG;AACrC,UAAA,GAAA,CAAI,EAAA,EAAI,UAAU,CAAA,IAAA,EAAO,MAAA,CAAO,KAAK,CAAA,mBAAA,EAAsB,QAAA,CAAS,KAAK,CAAA,CAAA,CAAG,CAAA;AAAA,QAC9E,CAAA,MAAO;AACL,UAAA,MAAM,SAAS,MAAA,CAAO,MAAA,CAAO,OAAO,CAAA,CAAA,KAAK,CAAA,CAAE,aAAa,OAAO,CAAA;AAC/D,UAAA,GAAA,CAAI,EAAA,EAAI,IAAA,GAAO,CAAA,oBAAA,EAAuB,QAAA,CAAS,KAAK,CAAA,CAAA,CAAA,EAAK;AAAA,YACvD,QAAA,EAAU;AAAA,cACR,EAAE,MAAA,EAAQ,SAAA,EAAW,OAAO,CAAC,CAAA,OAAA,EAAU,OAAO,KAAK,CAAA,CAAA,EAAI,CAAA,QAAA,EAAW,MAAA,CAAO,OAAO,MAAM,CAAA,CAAA,EAAI,WAAW,MAAA,CAAO,MAAM,EAAE,CAAA,EAAE;AAAA,cACtH,EAAE,QAAQ,QAAA,EAAU,KAAA,EAAO,OAAO,MAAA,CAAO,GAAA,CAAI,OAAK,CAAA,EAAG,CAAA,CAAE,aAAa,OAAA,GAAU,QAAA,GAAM,QAAG,CAAA,CAAA,EAAI,CAAA,CAAE,SAAS,CAAA,EAAA,EAAK,CAAA,CAAE,OAAO,CAAA,CAAE,CAAA;AAAE;AAC1H,WACD,CAAA;AAAA,QACH;AAEA,QAAA,OAAO,MAAA,CAAO,EAAA,GAAK,EAAE,EAAA,EAAI,MAAM,MAAA,EAAQ,MAAA,EAAO,GAAI,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,iCAAA,EAAmC,QAAQ,MAAA,EAAO;AAAA,MAC1H,SAAS,GAAA,EAAK;AACZ,QAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAChC,QAAA,OAAO,EAAE,IAAI,KAAA,EAAO,KAAA,EAAO,eAAe,KAAA,GAAQ,GAAA,CAAI,UAAU,MAAA,CAAO,GAAG,GAAG,MAAA,EAAQ,EAAE,IAAI,KAAA,EAAO,KAAA,EAAO,GAAG,MAAA,EAAQ,IAAG,EAAE;AAAA,MAC3H;AAAA,IACF;AAAA;AAEJ,CAAC","file":"doctor.js","sourcesContent":["/**\n * HTTP client for marketplace service via Gateway.\n */\n\nimport { useEnv } from '@kb-labs/sdk';\nimport { CredentialsManager, SessionManager } from '@kb-labs/cli-runtime/gateway';\nimport type { GatewayCredentials, SessionCredentials } from '@kb-labs/cli-runtime/gateway';\n\nconst DEFAULT_GATEWAY_URL = 'http://127.0.0.1:4000';\nconst MARKETPLACE_PREFIX = '/api/v1/marketplace';\nconst FETCH_TIMEOUT_MS = 30_000;\n\ntype AuthState = {\n  gatewayUrl: string;\n  accessToken: string;\n  refresh: () => Promise<AuthState>;\n};\n\nasync function loadAuth(): Promise<AuthState | null> {\n  const sessionManager = new SessionManager();\n  const session = await sessionManager.load();\n  if (session) {\n    const current = sessionManager.isExpired(session) ? await sessionManager.refresh(session) : session;\n    return authState(current, () => sessionManager.refresh(current));\n  }\n\n  const credentialsManager = new CredentialsManager();\n  const credentials = await credentialsManager.load();\n  if (!credentials) {\n    return null;\n  }\n  const current = credentialsManager.isExpired(credentials) ? await credentialsManager.refresh(credentials) : credentials;\n  return authState(current, () => credentialsManager.refresh(current));\n}\n\nfunction authState(credentials: GatewayCredentials | SessionCredentials, refresh: () => Promise<GatewayCredentials | SessionCredentials>): AuthState {\n  return {\n    gatewayUrl: credentials.gatewayUrl,\n    accessToken: credentials.accessToken,\n    refresh: async () => {\n      const updated = await refresh();\n      return authState(updated, refresh);\n    },\n  };\n}\n\nfunction getBaseUrl(gatewayUrl?: string): string {\n  const marketplaceUrl = useEnv('KB_MARKETPLACE_URL');\n  if (marketplaceUrl) {\n    return `${marketplaceUrl}${MARKETPLACE_PREFIX}`;\n  }\n  const gateway = gatewayUrl ?? useEnv('KB_GATEWAY_URL') ?? DEFAULT_GATEWAY_URL;\n  return `${gateway}${MARKETPLACE_PREFIX}`;\n}\n\nasync function request<T>(method: string, path: string, body?: Record<string, unknown>, params?: Record<string, string>): Promise<T> {\n  let auth = await loadAuth();\n  const url = new URL(`${getBaseUrl(auth?.gatewayUrl)}${path}`);\n  if (params) {\n    for (const [key, value] of Object.entries(params)) { url.searchParams.set(key, value); }\n  }\n\n  for (let attempt = 0; attempt < 2; attempt += 1) {\n    const controller = new AbortController();\n    const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n    try {\n      const headers: Record<string, string> = {};\n      if (body) { headers['Content-Type'] = 'application/json'; }\n      if (auth) { headers.Authorization = `Bearer ${auth.accessToken}`; }\n      const response = await fetch(url.toString(), {\n        method,\n        headers,\n        body: body ? JSON.stringify(body) : undefined,\n        signal: controller.signal,\n      });\n      if (response.status === 401 && auth && attempt === 0) {\n        auth = await auth.refresh();\n        continue;\n      }\n      if (!response.ok) {\n        const text = await response.text();\n        throw new Error(`Marketplace ${path} failed (${response.status}): ${text}`);\n      }\n      if (response.status === 204) { return undefined as T; }\n      return await response.json() as T;\n    } catch (err) {\n      if ((err as Error).name === 'AbortError') {\n        throw new Error(`Marketplace ${path} timed out — is the marketplace service running? (kb-dev start marketplace)`);\n      }\n      throw err;\n    } finally {\n      clearTimeout(timer);\n    }\n  }\n  throw new Error(`Marketplace ${path} failed after refreshing authentication`);\n}\n\nexport async function post<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('POST', path, body);\n}\n\nexport async function patch<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('PATCH', path, body);\n}\n\nexport async function del<T = unknown>(path: string, body?: Record<string, unknown>): Promise<T> {\n  return request<T>('DELETE', path, body);\n}\n\nexport async function get<T = unknown>(path: string, params?: Record<string, string>): Promise<T> {\n  return request<T>('GET', path, undefined, params);\n}\n","/**\n * @module @kb-labs/marketplace-entry/scope\n *\n * Client-side scope resolution for marketplace CLI commands. Uses the\n * canonical `findProjectConfigRoot` helper from `@kb-labs/core-workspace`\n * so the detection rules (which filenames count, how walk-up stops) match\n * what the config loader and the marketplace daemon enforce.\n *\n * Rules:\n *  - `project` is the default if cwd (or any ancestor up to the filesystem\n *    root) contains `.kb/kb.config.{json,jsonc}`.\n *  - Otherwise the default is `platform`.\n *  - `--scope` always overrides detection.\n *  - For scope=\"project\" we return the absolute projectRoot so the daemon\n *    doesn't need to re-discover it.\n */\n\nimport { findProjectConfigRoot } from '@kb-labs/core-workspace';\nimport type { MarketplaceScope, MarketplaceQueryScope } from '@kb-labs/marketplace-contracts';\n\nexport const SCOPE_FLAG_CHOICES: readonly MarketplaceScope[] = ['platform', 'project'];\nexport const QUERY_SCOPE_FLAG_CHOICES: readonly MarketplaceQueryScope[] = ['platform', 'project', 'all'];\n\nexport interface ResolvedCliScope {\n  scope: MarketplaceScope;\n  projectRoot?: string;\n  /** How the scope was determined — surfaces in --verbose logs. */\n  reason: 'flag' | 'auto-detect' | 'fallback';\n}\n\nexport interface ResolvedCliQueryScope extends Omit<ResolvedCliScope, 'scope'> {\n  scope: MarketplaceQueryScope;\n}\n\n/**\n * Resolve the effective scope for a mutating command (`link`, `unlink`,\n * `install`, ...). `flag` is the value of `--scope` (if supplied). The\n * helper never returns `'all'` for mutating commands — callers restrict\n * choices via `SCOPE_FLAG_CHOICES`.\n */\nexport async function resolveCliScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliScope> {\n  if (flag) {\n    assertMutatingScope(flag);\n    if (flag === 'project') {\n      const projectRoot = await findProjectConfigRoot(cwd);\n      if (!projectRoot) {\n        throw new CliScopeError(\n          'SCOPE_PROJECT_ROOT_NOT_FOUND',\n          `--scope=project requires a .kb/kb.config.{json,jsonc} ancestor of ${cwd} — none found.`,\n        );\n      }\n      return { scope: 'project', projectRoot, reason: 'flag' };\n    }\n    return { scope: 'platform', reason: 'flag' };\n  }\n\n  const projectRoot = await findProjectConfigRoot(cwd);\n  if (projectRoot) {\n    return { scope: 'project', projectRoot, reason: 'auto-detect' };\n  }\n  return { scope: 'platform', reason: 'fallback' };\n}\n\n/**\n * Resolve the effective scope for a read-only command (`list`). Accepts\n * `'all'` as an explicit flag value.\n */\nexport async function resolveCliQueryScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliQueryScope> {\n  if (flag === 'all') {\n    const projectRoot = await findProjectConfigRoot(cwd);\n    return { scope: 'all', projectRoot, reason: 'flag' };\n  }\n  const base = await resolveCliScope(cwd, flag);\n  return { scope: base.scope, projectRoot: base.projectRoot, reason: base.reason };\n}\n\nfunction assertMutatingScope(value: string): asserts value is MarketplaceScope {\n  if (!SCOPE_FLAG_CHOICES.includes(value as MarketplaceScope)) {\n    throw new CliScopeError(\n      'SCOPE_INVALID',\n      `--scope must be one of: ${SCOPE_FLAG_CHOICES.join(', ')} (got ${JSON.stringify(value)})`,\n    );\n  }\n}\n\nexport class CliScopeError extends Error {\n  readonly code: string;\n  constructor(code: string, message: string) {\n    super(message);\n    this.code = code;\n    this.name = 'CliScopeError';\n  }\n}\n\n/**\n * Build the body-payload fragment expected by `parseMutatingScope` on the\n * API side: `{ scope, projectRoot? }`. Kept as a helper so every command\n * sends the same shape and nothing drifts out-of-sync with the server.\n */\nexport function scopeBody(ctx: ResolvedCliScope | ResolvedCliQueryScope): {\n  scope: MarketplaceScope | MarketplaceQueryScope;\n  projectRoot?: string;\n} {\n  return {\n    scope: ctx.scope,\n    ...(ctx.projectRoot ? { projectRoot: ctx.projectRoot } : {}),\n  };\n}\n","import { defineCommand, handleError, validationError, type PluginContextV3, type CommandResult } from '@kb-labs/sdk';\nimport { get } from '../../http.js';\nimport { resolveCliScope, CliScopeError } from '../../scope.js';\n\ninterface DoctorFlags { json?: boolean; scope?: string }\ninterface DoctorInput { flags?: DoctorFlags }\n\ninterface DoctorIssue {\n  severity: string;\n  packageId: string;\n  message: string;\n  remediation?: string;\n}\n\ninterface DoctorResultData {\n  ok: boolean;\n  total: number;\n  issues: DoctorIssue[];\n}\n\nexport default defineCommand<unknown, DoctorInput, DoctorResultData>({\n  id: 'marketplace:plugins:doctor',\n  description: 'Diagnose marketplace health',\n\n  handler: {\n    async execute(ctx: PluginContextV3, input: DoctorInput): Promise<CommandResult<DoctorResultData>> {\n      const flags = (input.flags ?? input) as DoctorFlags;\n\n      let scopeCtx;\n      try {\n        scopeCtx = await resolveCliScope(ctx.cwd, flags.scope);\n      } catch (err) {\n        if (err instanceof CliScopeError) {\n          validationError(ctx, err.message, undefined, flags.json);\n        } else {\n          handleError(ctx, err, flags.json);\n        }\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { ok: false, total: 0, issues: [] } };\n      }\n\n      try {\n        const query: Record<string, string> = { scope: scopeCtx.scope };\n        if (scopeCtx.projectRoot) { query.projectRoot = scopeCtx.projectRoot; }\n        const report = await get<DoctorResultData>('/diagnostics', query);\n\n        if (flags.json) {\n          ctx.ui?.json?.(report);\n        } else if (report.issues.length === 0) {\n          ctx.ui?.success?.(`All ${report.total} packages healthy (${scopeCtx.scope})`);\n        } else {\n          const errors = report.issues.filter(i => i.severity === 'error');\n          ctx.ui?.warn?.(`Marketplace Doctor (${scopeCtx.scope})`, {\n            sections: [\n              { header: 'Summary', items: [`Total: ${report.total}`, `Issues: ${report.issues.length}`, `Errors: ${errors.length}`] },\n              { header: 'Issues', items: report.issues.map(i => `${i.severity === 'error' ? '❌' : '⚠'} ${i.packageId}: ${i.message}`) },\n            ],\n          });\n        }\n\n        return report.ok ? { ok: true, result: report } : { ok: false, error: 'Marketplace doctor found issues', result: report };\n      } catch (err) {\n        handleError(ctx, err, flags.json);\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { ok: false, total: 0, issues: [] } };\n      }\n    },\n  },\n});\n"]}