@kb-labs/marketplace-entry 2.111.0 → 2.112.0

package/dist/commands/update.js

@@ -1,45 +1,89 @@
 import { defineCommand, validationError, handleError, useEnv } from '@kb-labs/sdk';
+import { SessionManager, CredentialsManager } from '@kb-labs/cli-runtime/gateway';
 import { findProjectConfigRoot } from '@kb-labs/core-workspace';
 
 // src/commands/update.ts
 var DEFAULT_GATEWAY_URL = "http://127.0.0.1:4000";
 var MARKETPLACE_PREFIX = "/api/v1/marketplace";
 var FETCH_TIMEOUT_MS = 3e4;
-function getBaseUrl() {
+async function loadAuth() {
+  const sessionManager = new SessionManager();
+  const session = await sessionManager.load();
+  if (session) {
+    const current2 = sessionManager.isExpired(session) ? await sessionManager.refresh(session) : session;
+    return authState(current2, () => sessionManager.refresh(current2));
+  }
+  const credentialsManager = new CredentialsManager();
+  const credentials = await credentialsManager.load();
+  if (!credentials) {
+    return null;
+  }
+  const current = credentialsManager.isExpired(credentials) ? await credentialsManager.refresh(credentials) : credentials;
+  return authState(current, () => credentialsManager.refresh(current));
+}
+function authState(credentials, refresh) {
+  return {
+    gatewayUrl: credentials.gatewayUrl,
+    accessToken: credentials.accessToken,
+    refresh: async () => {
+      const updated = await refresh();
+      return authState(updated, refresh);
+    }
+  };
+}
+function getBaseUrl(gatewayUrl) {
   const marketplaceUrl = useEnv("KB_MARKETPLACE_URL");
   if (marketplaceUrl) {
     return `${marketplaceUrl}${MARKETPLACE_PREFIX}`;
   }
-  const gateway = useEnv("KB_GATEWAY_URL") ?? DEFAULT_GATEWAY_URL;
+  const gateway = gatewayUrl ?? useEnv("KB_GATEWAY_URL") ?? DEFAULT_GATEWAY_URL;
   return `${gateway}${MARKETPLACE_PREFIX}`;
 }
-async function post(path, body) {
-  const url = `${getBaseUrl()}${path}`;
-  const controller = new AbortController();
-  const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
-  try {
-    const res = await fetch(url, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify(body),
-      signal: controller.signal
-    });
-    if (!res.ok) {
-      const text = await res.text();
-      throw new Error(`Marketplace ${path} failed (${res.status}): ${text}`);
-    }
-    if (res.status === 204) {
-      return void 0;
-    }
-    return await res.json();
-  } catch (err) {
-    if (err.name === "AbortError") {
-      throw new Error(`Marketplace ${path} timed out \u2014 is the marketplace service running? (kb-dev start marketplace)`);
+async function request(method, path, body, params) {
+  let auth = await loadAuth();
+  const url = new URL(`${getBaseUrl(auth?.gatewayUrl)}${path}`);
+  for (let attempt = 0; attempt < 2; attempt += 1) {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
+    try {
+      const headers = {};
+      if (body) {
+        headers["Content-Type"] = "application/json";
+      }
+      if (auth) {
+        headers.Authorization = `Bearer ${auth.accessToken}`;
+      }
+      const response = await fetch(url.toString(), {
+        method,
+        headers,
+        body: body ? JSON.stringify(body) : void 0,
+        signal: controller.signal
+      });
+      if (response.status === 401 && auth && attempt === 0) {
+        auth = await auth.refresh();
+        continue;
+      }
+      if (!response.ok) {
+        const text = await response.text();
+        throw new Error(`Marketplace ${path} failed (${response.status}): ${text}`);
+      }
+      if (response.status === 204) {
+        return void 0;
+      }
+      return await response.json();
+    } catch (err) {
+      if (err.name === "AbortError") {
+        throw new Error(`Marketplace ${path} timed out \u2014 is the marketplace service running? (kb-dev start marketplace)`);
+      }
+      throw err;
+    } finally {
+      clearTimeout(timer);
     }
-    throw err;
-  } finally {
-    clearTimeout(timer);
   }
+  throw new Error(`Marketplace ${path} failed after refreshing authentication`);
+}
+async function post(path, body) {
+  return request("POST", path, body);
 }
 var SCOPE_FLAG_CHOICES = ["platform", "project"];
 async function resolveCliScope(cwd, flag) {

package/dist/commands/update.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/http.ts","../../src/scope.ts","../../src/commands/update.ts"],"names":["projectRoot"],"mappings":";;;;AAMA,IAAM,mBAAA,GAAsB,uBAAA;AAC5B,IAAM,kBAAA,GAAqB,qBAAA;AAC3B,IAAM,gBAAA,GAAmB,GAAA;AAEzB,SAAS,UAAA,GAAqB;AAC5B,EAAA,MAAM,cAAA,GAAiB,OAAO,oBAAoB,CAAA;AAClD,EAAA,IAAI,cAAA,EAAgB;AAClB,IAAA,OAAO,CAAA,EAAG,cAAc,CAAA,EAAG,kBAAkB,CAAA,CAAA;AAAA,EAC/C;AACA,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,gBAAgB,CAAA,IAAK,mBAAA;AAC5C,EAAA,OAAO,CAAA,EAAG,OAAO,CAAA,EAAG,kBAAkB,CAAA,CAAA;AACxC;AAEA,eAAsB,IAAA,CAAkB,MAAc,IAAA,EAA2C;AAC/F,EAAA,MAAM,GAAA,GAAM,CAAA,EAAG,UAAA,EAAY,GAAG,IAAI,CAAA,CAAA;AAClC,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,gBAAgB,CAAA;AACnE,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,MAC3B,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,MAC9C,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,MACzB,QAAQ,UAAA,CAAW;AAAA,KACpB,CAAA;AACD,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,MAAA,MAAM,IAAI,MAAM,CAAA,YAAA,EAAe,IAAI,YAAY,GAAA,CAAI,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,CAAE,CAAA;AAAA,IACvE;AAGA,IAAA,IAAI,GAAA,CAAI,WAAW,GAAA,EAAK;AAAE,MAAA,OAAO,KAAA,CAAA;AAAA,IAAgB;AACjD,IAAA,OAAO,MAAM,IAAI,IAAA,EAAK;AAAA,EACxB,SAAS,GAAA,EAAK;AACZ,IAAA,IAAK,GAAA,CAAc,SAAS,YAAA,EAAc;AACxC,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,gFAAA,CAA6E,CAAA;AAAA,IAClH;AACA,IAAA,MAAM,GAAA;AAAA,EACR,CAAA,SAAE;AACA,IAAA,YAAA,CAAa,KAAK,CAAA;AAAA,EACpB;AACF;AC1BO,IAAM,kBAAA,GAAkD,CAAC,UAAA,EAAY,SAAS,CAAA;AAoBrF,eAAsB,eAAA,CACpB,KACA,IAAA,EAC2B;AAC3B,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,mBAAA,CAAoB,IAAI,CAAA;AACxB,IAAA,IAAI,SAAS,SAAA,EAAW;AACtB,MAAA,MAAMA,YAAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,MAAA,IAAI,CAACA,YAAAA,EAAa;AAChB,QAAA,MAAM,IAAI,aAAA;AAAA,UACR,8BAAA;AAAA,UACA,qEAAqE,GAAG,CAAA,mBAAA;AAAA,SAC1E;AAAA,MACF;AACA,MAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAAA,YAAAA,EAAa,QAAQ,MAAA,EAAO;AAAA,IACzD;AACA,IAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,MAAA,EAAO;AAAA,EAC7C;AAEA,EAAA,MAAM,WAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAa,QAAQ,aAAA,EAAc;AAAA,EAChE;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,UAAA,EAAW;AACjD;AAkBA,SAAS,oBAAoB,KAAA,EAAkD;AAC7E,EAAA,IAAI,CAAC,kBAAA,CAAmB,QAAA,CAAS,KAAyB,CAAA,EAAG;AAC3D,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,eAAA;AAAA,MACA,CAAA,wBAAA,EAA2B,mBAAmB,IAAA,CAAK,IAAI,CAAC,CAAA,MAAA,EAAS,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC,CAAA,CAAA;AAAA,KACxF;AAAA,EACF;AACF;AAEO,IAAM,aAAA,GAAN,cAA4B,KAAA,CAAM;AAAA,EAC9B,IAAA;AAAA,EACT,WAAA,CAAY,MAAc,OAAA,EAAiB;AACzC,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AAAA,EACd;AACF,CAAA;AAOO,SAAS,UAAU,GAAA,EAGxB;AACA,EAAA,OAAO;AAAA,IACL,OAAO,GAAA,CAAI,KAAA;AAAA,IACX,GAAI,IAAI,WAAA,GAAc,EAAE,aAAa,GAAA,CAAI,WAAA,KAAgB;AAAC,GAC5D;AACF;;;ACtFA,IAAO,iBAAQ,aAAA,CAAsD;AAAA,EACnE,EAAA,EAAI,oBAAA;AAAA,EACJ,WAAA,EAAa,+BAAA;AAAA,EAEb,OAAA,EAAS;AAAA,IACP,MAAM,MAAA,CAAO,IAAA,EAAuB,KAAA,EAAoB;AACtD,MAAA,MAAM,IAAA,GAAO,KAAA,CAAM,IAAA,IAAQ,EAAC;AAC5B,MAAA,MAAM,UAAU,IAAA,CAAK,MAAA,GAAS,CAAA,GAAI,IAAA,GAAO,CAAC,wBAAwB,CAAA;AAClE,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,CAAA,OAAA,EAAU,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,QACrC,UAAA,EAAY,OAAA,CAAQ,GAAA,CAAI,CAAA,GAAA,MAAQ;AAAA,UAC9B,IAAA,EAAM,QAAA;AAAA,UACN,QAAA,EAAU,qBAAA;AAAA,UACV,OAAA,EAAS,EAAE,OAAA,EAAS,GAAA;AAAI,SAC1B,CAAE;AAAA,OACJ;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,OAAA,CAAQ,GAAA,EAAsB,KAAA,EAA8D;AAChG,MAAA,MAAM,IAAA,GAAO,KAAA,CAAM,IAAA,IAAQ,EAAC;AAC5B,MAAA,MAAM,KAAA,GAAS,MAAM,KAAA,IAAS,KAAA;AAE9B,MAAA,IAAI,QAAA;AACJ,MAAA,IAAI;AACF,QAAA,QAAA,GAAW,MAAM,eAAA,CAAgB,GAAA,CAAI,GAAA,EAAK,MAAM,KAAK,CAAA;AAAA,MACvD,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,eAAe,aAAA,EAAe;AAChC,UAAA,eAAA,CAAgB,GAAA,EAAK,GAAA,CAAI,OAAA,EAAS,MAAA,EAAW,MAAM,IAAI,CAAA;AAAA,QACzD,CAAA,MAAO;AACL,UAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAAA,QAClC;AACA,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,iDAAiD,MAAA,EAAQ,EAAE,SAAA,EAAW,IAAI,QAAA,EAAU,EAAC,EAAG,KAAA,EAAO,IAAG,EAAE;AAAA,MACjI;AAEA,MAAA,IAAI;AAIF,QAAA,MAAM,IAAA,GAAgC,EAAE,GAAG,SAAA,CAAU,QAAQ,CAAA,EAAE;AAC/D,QAAA,IAAI,IAAA,CAAK,SAAS,CAAA,EAAG;AACnB,UAAA,IAAA,CAAK,UAAA,GAAa,IAAA;AAAA,QACpB;AACA,QAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAuB,kBAAA,EAAoB,IAAI,CAAA;AAEpE,QAAA,IAAI,MAAM,IAAA,EAAM;AACd,UAAA,GAAA,CAAI,EAAA,EAAI,OAAO,MAAM,CAAA;AAAA,QACvB,CAAA,MAAA,IAAW,MAAA,CAAO,SAAA,CAAU,MAAA,KAAW,CAAA,EAAG;AACxC,UAAA,GAAA,CAAI,EAAA,EAAI,IAAA,GAAO,CAAA,mBAAA,EAAsB,QAAA,CAAS,KAAK,CAAA,CAAA,CAAG,CAAA;AAAA,QACxD,CAAA,MAAO;AACL,UAAA,GAAA,CAAI,EAAA,EAAI,OAAA,GAAU,CAAA,kBAAA,EAAqB,QAAA,CAAS,KAAK,CAAA,CAAA,CAAA,EAAK;AAAA,YACxD,QAAA,EAAU;AAAA,cACR;AAAA,gBACE,MAAA,EAAQ,SAAA;AAAA,gBACR,KAAA,EAAO,MAAA,CAAO,SAAA,CAAU,GAAA,CAAI,OAAK,CAAA,EAAG,CAAA,CAAE,EAAE,CAAA,CAAA,EAAI,CAAA,CAAE,OAAO,CAAA,EAAA,EAAK,CAAA,CAAE,WAAW,CAAA,CAAA,CAAG;AAAA,eAC5E;AAAA,cACA,GAAI,MAAA,CAAO,QAAA,CAAS,MAAA,GAAS,IAAI,CAAC,EAAE,MAAA,EAAQ,UAAA,EAAY,KAAA,EAAO,MAAA,CAAO,QAAA,EAAU,IAAI;AAAC;AACvF,WACD,CAAA;AAAA,QACH;AAEA,QAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,MAAA,EAAO;AAAA,MAC5B,SAAS,GAAA,EAAK;AACZ,QAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAChC,QAAA,OAAO,EAAE,IAAI,KAAA,EAAO,KAAA,EAAO,eAAe,KAAA,GAAQ,GAAA,CAAI,UAAU,MAAA,CAAO,GAAG,GAAG,MAAA,EAAQ,EAAE,WAAW,EAAC,EAAG,UAAU,EAAC,EAAG,KAAA,EAAO,EAAA,EAAG,EAAE;AAAA,MAClI;AAAA,IACF;AAAA;AAEJ,CAAC","file":"update.js","sourcesContent":["/**\n * HTTP client for marketplace service via Gateway.\n */\n\nimport { useEnv } from '@kb-labs/sdk';\n\nconst DEFAULT_GATEWAY_URL = 'http://127.0.0.1:4000';\nconst MARKETPLACE_PREFIX = '/api/v1/marketplace';\nconst FETCH_TIMEOUT_MS = 30_000;\n\nfunction getBaseUrl(): string {\n  const marketplaceUrl = useEnv('KB_MARKETPLACE_URL');\n  if (marketplaceUrl) {\n    return `${marketplaceUrl}${MARKETPLACE_PREFIX}`;\n  }\n  const gateway = useEnv('KB_GATEWAY_URL') ?? DEFAULT_GATEWAY_URL;\n  return `${gateway}${MARKETPLACE_PREFIX}`;\n}\n\nexport async function post<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  const url = `${getBaseUrl()}${path}`;\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n  try {\n    const res = await fetch(url, {\n      method: 'POST',\n      headers: { 'Content-Type': 'application/json' },\n      body: JSON.stringify(body),\n      signal: controller.signal,\n    });\n    if (!res.ok) {\n      const text = await res.text();\n      throw new Error(`Marketplace ${path} failed (${res.status}): ${text}`);\n    }\n    // 204 No Content (e.g. unlink, uninstall) has no body — don't call\n    // res.json() or it throws \"Unexpected end of JSON input\".\n    if (res.status === 204) { return undefined as T; }\n    return await res.json() as T;\n  } catch (err) {\n    if ((err as Error).name === 'AbortError') {\n      throw new Error(`Marketplace ${path} timed out — is the marketplace service running? (kb-dev start marketplace)`);\n    }\n    throw err;\n  } finally {\n    clearTimeout(timer);\n  }\n}\n\nexport async function patch<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  const url = `${getBaseUrl()}${path}`;\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n  try {\n    const res = await fetch(url, {\n      method: 'PATCH',\n      headers: { 'Content-Type': 'application/json' },\n      body: JSON.stringify(body),\n      signal: controller.signal,\n    });\n    if (!res.ok) {\n      const text = await res.text();\n      throw new Error(`Marketplace ${path} failed (${res.status}): ${text}`);\n    }\n    return await res.json() as T;\n  } catch (err) {\n    if ((err as Error).name === 'AbortError') {\n      throw new Error(`Marketplace ${path} timed out — is the marketplace service running? (kb-dev start marketplace)`);\n    }\n    throw err;\n  } finally {\n    clearTimeout(timer);\n  }\n}\n\nexport async function del<T = unknown>(path: string, body?: Record<string, unknown>): Promise<T> {\n  const url = `${getBaseUrl()}${path}`;\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n  try {\n    const res = await fetch(url, {\n      method: 'DELETE',\n      headers: body ? { 'Content-Type': 'application/json' } : {},\n      body: body ? JSON.stringify(body) : undefined,\n      signal: controller.signal,\n    });\n    if (!res.ok) {\n      const text = await res.text();\n      throw new Error(`Marketplace ${path} failed (${res.status}): ${text}`);\n    }\n    if (res.status === 204) { return undefined as T; }\n    return await res.json() as T;\n  } catch (err) {\n    if ((err as Error).name === 'AbortError') {\n      throw new Error(`Marketplace ${path} timed out — is the marketplace service running? (kb-dev start marketplace)`);\n    }\n    throw err;\n  } finally {\n    clearTimeout(timer);\n  }\n}\n\nexport async function get<T = unknown>(path: string, params?: Record<string, string>): Promise<T> {\n  const url = new URL(`${getBaseUrl()}${path}`);\n  if (params) {\n    for (const [k, v] of Object.entries(params)) {url.searchParams.set(k, v);}\n  }\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n  try {\n    const res = await fetch(url.toString(), { signal: controller.signal });\n    if (!res.ok) {\n      const text = await res.text();\n      throw new Error(`Marketplace ${path} failed (${res.status}): ${text}`);\n    }\n    return await res.json() as T;\n  } catch (err) {\n    if ((err as Error).name === 'AbortError') {\n      throw new Error(`Marketplace ${path} timed out — is the marketplace service running? (kb-dev start marketplace)`);\n    }\n    throw err;\n  } finally {\n    clearTimeout(timer);\n  }\n}\n","/**\n * @module @kb-labs/marketplace-entry/scope\n *\n * Client-side scope resolution for marketplace CLI commands. Uses the\n * canonical `findProjectConfigRoot` helper from `@kb-labs/core-workspace`\n * so the detection rules (which filenames count, how walk-up stops) match\n * what the config loader and the marketplace daemon enforce.\n *\n * Rules:\n *  - `project` is the default if cwd (or any ancestor up to the filesystem\n *    root) contains `.kb/kb.config.{json,jsonc}`.\n *  - Otherwise the default is `platform`.\n *  - `--scope` always overrides detection.\n *  - For scope=\"project\" we return the absolute projectRoot so the daemon\n *    doesn't need to re-discover it.\n */\n\nimport { findProjectConfigRoot } from '@kb-labs/core-workspace';\nimport type { MarketplaceScope, MarketplaceQueryScope } from '@kb-labs/marketplace-contracts';\n\nexport const SCOPE_FLAG_CHOICES: readonly MarketplaceScope[] = ['platform', 'project'];\nexport const QUERY_SCOPE_FLAG_CHOICES: readonly MarketplaceQueryScope[] = ['platform', 'project', 'all'];\n\nexport interface ResolvedCliScope {\n  scope: MarketplaceScope;\n  projectRoot?: string;\n  /** How the scope was determined — surfaces in --verbose logs. */\n  reason: 'flag' | 'auto-detect' | 'fallback';\n}\n\nexport interface ResolvedCliQueryScope extends Omit<ResolvedCliScope, 'scope'> {\n  scope: MarketplaceQueryScope;\n}\n\n/**\n * Resolve the effective scope for a mutating command (`link`, `unlink`,\n * `install`, ...). `flag` is the value of `--scope` (if supplied). The\n * helper never returns `'all'` for mutating commands — callers restrict\n * choices via `SCOPE_FLAG_CHOICES`.\n */\nexport async function resolveCliScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliScope> {\n  if (flag) {\n    assertMutatingScope(flag);\n    if (flag === 'project') {\n      const projectRoot = await findProjectConfigRoot(cwd);\n      if (!projectRoot) {\n        throw new CliScopeError(\n          'SCOPE_PROJECT_ROOT_NOT_FOUND',\n          `--scope=project requires a .kb/kb.config.{json,jsonc} ancestor of ${cwd} — none found.`,\n        );\n      }\n      return { scope: 'project', projectRoot, reason: 'flag' };\n    }\n    return { scope: 'platform', reason: 'flag' };\n  }\n\n  const projectRoot = await findProjectConfigRoot(cwd);\n  if (projectRoot) {\n    return { scope: 'project', projectRoot, reason: 'auto-detect' };\n  }\n  return { scope: 'platform', reason: 'fallback' };\n}\n\n/**\n * Resolve the effective scope for a read-only command (`list`). Accepts\n * `'all'` as an explicit flag value.\n */\nexport async function resolveCliQueryScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliQueryScope> {\n  if (flag === 'all') {\n    const projectRoot = await findProjectConfigRoot(cwd);\n    return { scope: 'all', projectRoot, reason: 'flag' };\n  }\n  const base = await resolveCliScope(cwd, flag);\n  return { scope: base.scope, projectRoot: base.projectRoot, reason: base.reason };\n}\n\nfunction assertMutatingScope(value: string): asserts value is MarketplaceScope {\n  if (!SCOPE_FLAG_CHOICES.includes(value as MarketplaceScope)) {\n    throw new CliScopeError(\n      'SCOPE_INVALID',\n      `--scope must be one of: ${SCOPE_FLAG_CHOICES.join(', ')} (got ${JSON.stringify(value)})`,\n    );\n  }\n}\n\nexport class CliScopeError extends Error {\n  readonly code: string;\n  constructor(code: string, message: string) {\n    super(message);\n    this.code = code;\n    this.name = 'CliScopeError';\n  }\n}\n\n/**\n * Build the body-payload fragment expected by `parseMutatingScope` on the\n * API side: `{ scope, projectRoot? }`. Kept as a helper so every command\n * sends the same shape and nothing drifts out-of-sync with the server.\n */\nexport function scopeBody(ctx: ResolvedCliScope | ResolvedCliQueryScope): {\n  scope: MarketplaceScope | MarketplaceQueryScope;\n  projectRoot?: string;\n} {\n  return {\n    scope: ctx.scope,\n    ...(ctx.projectRoot ? { projectRoot: ctx.projectRoot } : {}),\n  };\n}\n","import { defineCommand, handleError, validationError, type PluginContextV3, type CommandResult } from '@kb-labs/sdk';\nimport { post } from '../http.js';\nimport { resolveCliScope, scopeBody, CliScopeError } from '../scope.js';\n\ninterface UpdateFlags {\n  json?: boolean;\n  scope?: string;\n  'dry-run'?: boolean;\n}\n\ninterface UpdateInput {\n  argv?: string[];\n  flags?: UpdateFlags;\n}\n\ninterface PackageEntry {\n  id: string;\n  version: string;\n  primaryKind: string;\n}\n\ninterface UpdateResultData {\n  installed: PackageEntry[];\n  warnings: string[];\n  scope: string;\n}\n\nexport default defineCommand<unknown, UpdateInput, UpdateResultData>({\n  id: 'marketplace:update',\n  description: 'Update marketplace package(s)',\n\n  handler: {\n    async intent(_ctx: PluginContextV3, input: UpdateInput) {\n      const argv = input.argv ?? [];\n      const targets = argv.length > 0 ? argv : ['all installed packages'];\n      return {\n        summary: `Update ${targets.join(', ')}`,\n        operations: targets.map(pkg => ({\n          type: 'update' as const,\n          resource: 'marketplace-package',\n          details: { package: pkg },\n        })),\n      };\n    },\n\n    async execute(ctx: PluginContextV3, input: UpdateInput): Promise<CommandResult<UpdateResultData>> {\n      const argv = input.argv ?? [];\n      const flags = (input.flags ?? input) as UpdateFlags;\n\n      let scopeCtx;\n      try {\n        scopeCtx = await resolveCliScope(ctx.cwd, flags.scope);\n      } catch (err) {\n        if (err instanceof CliScopeError) {\n          validationError(ctx, err.message, undefined, flags.json);\n        } else {\n          handleError(ctx, err, flags.json);\n        }\n        return { ok: false, error: 'Please specify at least one package to update', result: { installed: [], warnings: [], scope: '' } };\n      }\n\n      try {\n        // Server-side update accepts a single body with the ids (or all\n        // installed when omitted). No client-side loop; the server handles\n        // per-package failures and reports them in `warnings`.\n        const body: Record<string, unknown> = { ...scopeBody(scopeCtx) };\n        if (argv.length > 0) {\n          body.packageIds = argv;\n        }\n        const result = await post<UpdateResultData>('/packages/update', body);\n\n        if (flags.json) {\n          ctx.ui?.json?.(result);\n        } else if (result.installed.length === 0) {\n          ctx.ui?.info?.(`Nothing to update (${scopeCtx.scope})`);\n        } else {\n          ctx.ui?.success?.(`Update completed (${scopeCtx.scope})`, {\n            sections: [\n              {\n                header: 'Updated',\n                items: result.installed.map(p => `${p.id}@${p.version} (${p.primaryKind})`),\n              },\n              ...(result.warnings.length > 0 ? [{ header: 'Warnings', items: result.warnings }] : []),\n            ],\n          });\n        }\n\n        return { ok: true, result };\n      } catch (err) {\n        handleError(ctx, err, flags.json);\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { installed: [], warnings: [], scope: '' } };\n      }\n    },\n  },\n});\n"]}
+{"version":3,"sources":["../../src/http.ts","../../src/scope.ts","../../src/commands/update.ts"],"names":["current","projectRoot"],"mappings":";;;;;AAQA,IAAM,mBAAA,GAAsB,uBAAA;AAC5B,IAAM,kBAAA,GAAqB,qBAAA;AAC3B,IAAM,gBAAA,GAAmB,GAAA;AAQzB,eAAe,QAAA,GAAsC;AACnD,EAAA,MAAM,cAAA,GAAiB,IAAI,cAAA,EAAe;AAC1C,EAAA,MAAM,OAAA,GAAU,MAAM,cAAA,CAAe,IAAA,EAAK;AAC1C,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,MAAMA,QAAAA,GAAU,eAAe,SAAA,CAAU,OAAO,IAAI,MAAM,cAAA,CAAe,OAAA,CAAQ,OAAO,CAAA,GAAI,OAAA;AAC5F,IAAA,OAAO,UAAUA,QAAAA,EAAS,MAAM,cAAA,CAAe,OAAA,CAAQA,QAAO,CAAC,CAAA;AAAA,EACjE;AAEA,EAAA,MAAM,kBAAA,GAAqB,IAAI,kBAAA,EAAmB;AAClD,EAAA,MAAM,WAAA,GAAc,MAAM,kBAAA,CAAmB,IAAA,EAAK;AAClD,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,OAAA,GAAU,mBAAmB,SAAA,CAAU,WAAW,IAAI,MAAM,kBAAA,CAAmB,OAAA,CAAQ,WAAW,CAAA,GAAI,WAAA;AAC5G,EAAA,OAAO,UAAU,OAAA,EAAS,MAAM,kBAAA,CAAmB,OAAA,CAAQ,OAAO,CAAC,CAAA;AACrE;AAEA,SAAS,SAAA,CAAU,aAAsD,OAAA,EAA4E;AACnJ,EAAA,OAAO;AAAA,IACL,YAAY,WAAA,CAAY,UAAA;AAAA,IACxB,aAAa,WAAA,CAAY,WAAA;AAAA,IACzB,SAAS,YAAY;AACnB,MAAA,MAAM,OAAA,GAAU,MAAM,OAAA,EAAQ;AAC9B,MAAA,OAAO,SAAA,CAAU,SAAS,OAAO,CAAA;AAAA,IACnC;AAAA,GACF;AACF;AAEA,SAAS,WAAW,UAAA,EAA6B;AAC/C,EAAA,MAAM,cAAA,GAAiB,OAAO,oBAAoB,CAAA;AAClD,EAAA,IAAI,cAAA,EAAgB;AAClB,IAAA,OAAO,CAAA,EAAG,cAAc,CAAA,EAAG,kBAAkB,CAAA,CAAA;AAAA,EAC/C;AACA,EAAA,MAAM,OAAA,GAAU,UAAA,IAAc,MAAA,CAAO,gBAAgB,CAAA,IAAK,mBAAA;AAC1D,EAAA,OAAO,CAAA,EAAG,OAAO,CAAA,EAAG,kBAAkB,CAAA,CAAA;AACxC;AAEA,eAAe,OAAA,CAAW,MAAA,EAAgB,IAAA,EAAc,IAAA,EAAgC,MAAA,EAA6C;AACnI,EAAA,IAAI,IAAA,GAAO,MAAM,QAAA,EAAS;AAC1B,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,CAAA,EAAG,UAAA,CAAW,MAAM,UAAU,CAAC,CAAA,EAAG,IAAI,CAAA,CAAE,CAAA;AAK5D,EAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,GAAU,CAAA,EAAG,WAAW,CAAA,EAAG;AAC/C,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,gBAAgB,CAAA;AACnE,IAAA,IAAI;AACF,MAAA,MAAM,UAAkC,EAAC;AACzC,MAAA,IAAI,IAAA,EAAM;AAAE,QAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAAA,MAAoB;AAC1D,MAAA,IAAI,IAAA,EAAM;AAAE,QAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,IAAA,CAAK,WAAW,CAAA,CAAA;AAAA,MAAI;AAClE,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,CAAI,UAAS,EAAG;AAAA,QAC3C,MAAA;AAAA,QACA,OAAA;AAAA,QACA,IAAA,EAAM,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,GAAI,KAAA,CAAA;AAAA,QACpC,QAAQ,UAAA,CAAW;AAAA,OACpB,CAAA;AACD,MAAA,IAAI,QAAA,CAAS,MAAA,KAAW,GAAA,IAAO,IAAA,IAAQ,YAAY,CAAA,EAAG;AACpD,QAAA,IAAA,GAAO,MAAM,KAAK,OAAA,EAAQ;AAC1B,QAAA;AAAA,MACF;AACA,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,QAAA,MAAM,IAAI,MAAM,CAAA,YAAA,EAAe,IAAI,YAAY,QAAA,CAAS,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,CAAE,CAAA;AAAA,MAC5E;AACA,MAAA,IAAI,QAAA,CAAS,WAAW,GAAA,EAAK;AAAE,QAAA,OAAO,KAAA,CAAA;AAAA,MAAgB;AACtD,MAAA,OAAO,MAAM,SAAS,IAAA,EAAK;AAAA,IAC7B,SAAS,GAAA,EAAK;AACZ,MAAA,IAAK,GAAA,CAAc,SAAS,YAAA,EAAc;AACxC,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,gFAAA,CAA6E,CAAA;AAAA,MAClH;AACA,MAAA,MAAM,GAAA;AAAA,IACR,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAAA,IACpB;AAAA,EACF;AACA,EAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,uCAAA,CAAyC,CAAA;AAC9E;AAEA,eAAsB,IAAA,CAAkB,MAAc,IAAA,EAA2C;AAC/F,EAAA,OAAO,OAAA,CAAW,MAAA,EAAQ,IAAA,EAAM,IAAI,CAAA;AACtC;AC/EO,IAAM,kBAAA,GAAkD,CAAC,UAAA,EAAY,SAAS,CAAA;AAoBrF,eAAsB,eAAA,CACpB,KACA,IAAA,EAC2B;AAC3B,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,mBAAA,CAAoB,IAAI,CAAA;AACxB,IAAA,IAAI,SAAS,SAAA,EAAW;AACtB,MAAA,MAAMC,YAAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,MAAA,IAAI,CAACA,YAAAA,EAAa;AAChB,QAAA,MAAM,IAAI,aAAA;AAAA,UACR,8BAAA;AAAA,UACA,qEAAqE,GAAG,CAAA,mBAAA;AAAA,SAC1E;AAAA,MACF;AACA,MAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAAA,YAAAA,EAAa,QAAQ,MAAA,EAAO;AAAA,IACzD;AACA,IAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,MAAA,EAAO;AAAA,EAC7C;AAEA,EAAA,MAAM,WAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAa,QAAQ,aAAA,EAAc;AAAA,EAChE;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,UAAA,EAAW;AACjD;AAkBA,SAAS,oBAAoB,KAAA,EAAkD;AAC7E,EAAA,IAAI,CAAC,kBAAA,CAAmB,QAAA,CAAS,KAAyB,CAAA,EAAG;AAC3D,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,eAAA;AAAA,MACA,CAAA,wBAAA,EAA2B,mBAAmB,IAAA,CAAK,IAAI,CAAC,CAAA,MAAA,EAAS,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC,CAAA,CAAA;AAAA,KACxF;AAAA,EACF;AACF;AAEO,IAAM,aAAA,GAAN,cAA4B,KAAA,CAAM;AAAA,EAC9B,IAAA;AAAA,EACT,WAAA,CAAY,MAAc,OAAA,EAAiB;AACzC,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AAAA,EACd;AACF,CAAA;AAOO,SAAS,UAAU,GAAA,EAGxB;AACA,EAAA,OAAO;AAAA,IACL,OAAO,GAAA,CAAI,KAAA;AAAA,IACX,GAAI,IAAI,WAAA,GAAc,EAAE,aAAa,GAAA,CAAI,WAAA,KAAgB;AAAC,GAC5D;AACF;;;ACtFA,IAAO,iBAAQ,aAAA,CAAsD;AAAA,EACnE,EAAA,EAAI,oBAAA;AAAA,EACJ,WAAA,EAAa,+BAAA;AAAA,EAEb,OAAA,EAAS;AAAA,IACP,MAAM,MAAA,CAAO,IAAA,EAAuB,KAAA,EAAoB;AACtD,MAAA,MAAM,IAAA,GAAO,KAAA,CAAM,IAAA,IAAQ,EAAC;AAC5B,MAAA,MAAM,UAAU,IAAA,CAAK,MAAA,GAAS,CAAA,GAAI,IAAA,GAAO,CAAC,wBAAwB,CAAA;AAClE,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,CAAA,OAAA,EAAU,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,QACrC,UAAA,EAAY,OAAA,CAAQ,GAAA,CAAI,CAAA,GAAA,MAAQ;AAAA,UAC9B,IAAA,EAAM,QAAA;AAAA,UACN,QAAA,EAAU,qBAAA;AAAA,UACV,OAAA,EAAS,EAAE,OAAA,EAAS,GAAA;AAAI,SAC1B,CAAE;AAAA,OACJ;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,OAAA,CAAQ,GAAA,EAAsB,KAAA,EAA8D;AAChG,MAAA,MAAM,IAAA,GAAO,KAAA,CAAM,IAAA,IAAQ,EAAC;AAC5B,MAAA,MAAM,KAAA,GAAS,MAAM,KAAA,IAAS,KAAA;AAE9B,MAAA,IAAI,QAAA;AACJ,MAAA,IAAI;AACF,QAAA,QAAA,GAAW,MAAM,eAAA,CAAgB,GAAA,CAAI,GAAA,EAAK,MAAM,KAAK,CAAA;AAAA,MACvD,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,eAAe,aAAA,EAAe;AAChC,UAAA,eAAA,CAAgB,GAAA,EAAK,GAAA,CAAI,OAAA,EAAS,MAAA,EAAW,MAAM,IAAI,CAAA;AAAA,QACzD,CAAA,MAAO;AACL,UAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAAA,QAClC;AACA,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,iDAAiD,MAAA,EAAQ,EAAE,SAAA,EAAW,IAAI,QAAA,EAAU,EAAC,EAAG,KAAA,EAAO,IAAG,EAAE;AAAA,MACjI;AAEA,MAAA,IAAI;AAIF,QAAA,MAAM,IAAA,GAAgC,EAAE,GAAG,SAAA,CAAU,QAAQ,CAAA,EAAE;AAC/D,QAAA,IAAI,IAAA,CAAK,SAAS,CAAA,EAAG;AACnB,UAAA,IAAA,CAAK,UAAA,GAAa,IAAA;AAAA,QACpB;AACA,QAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAuB,kBAAA,EAAoB,IAAI,CAAA;AAEpE,QAAA,IAAI,MAAM,IAAA,EAAM;AACd,UAAA,GAAA,CAAI,EAAA,EAAI,OAAO,MAAM,CAAA;AAAA,QACvB,CAAA,MAAA,IAAW,MAAA,CAAO,SAAA,CAAU,MAAA,KAAW,CAAA,EAAG;AACxC,UAAA,GAAA,CAAI,EAAA,EAAI,IAAA,GAAO,CAAA,mBAAA,EAAsB,QAAA,CAAS,KAAK,CAAA,CAAA,CAAG,CAAA;AAAA,QACxD,CAAA,MAAO;AACL,UAAA,GAAA,CAAI,EAAA,EAAI,OAAA,GAAU,CAAA,kBAAA,EAAqB,QAAA,CAAS,KAAK,CAAA,CAAA,CAAA,EAAK;AAAA,YACxD,QAAA,EAAU;AAAA,cACR;AAAA,gBACE,MAAA,EAAQ,SAAA;AAAA,gBACR,KAAA,EAAO,MAAA,CAAO,SAAA,CAAU,GAAA,CAAI,OAAK,CAAA,EAAG,CAAA,CAAE,EAAE,CAAA,CAAA,EAAI,CAAA,CAAE,OAAO,CAAA,EAAA,EAAK,CAAA,CAAE,WAAW,CAAA,CAAA,CAAG;AAAA,eAC5E;AAAA,cACA,GAAI,MAAA,CAAO,QAAA,CAAS,MAAA,GAAS,IAAI,CAAC,EAAE,MAAA,EAAQ,UAAA,EAAY,KAAA,EAAO,MAAA,CAAO,QAAA,EAAU,IAAI;AAAC;AACvF,WACD,CAAA;AAAA,QACH;AAEA,QAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,MAAA,EAAO;AAAA,MAC5B,SAAS,GAAA,EAAK;AACZ,QAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAChC,QAAA,OAAO,EAAE,IAAI,KAAA,EAAO,KAAA,EAAO,eAAe,KAAA,GAAQ,GAAA,CAAI,UAAU,MAAA,CAAO,GAAG,GAAG,MAAA,EAAQ,EAAE,WAAW,EAAC,EAAG,UAAU,EAAC,EAAG,KAAA,EAAO,EAAA,EAAG,EAAE;AAAA,MAClI;AAAA,IACF;AAAA;AAEJ,CAAC","file":"update.js","sourcesContent":["/**\n * HTTP client for marketplace service via Gateway.\n */\n\nimport { useEnv } from '@kb-labs/sdk';\nimport { CredentialsManager, SessionManager } from '@kb-labs/cli-runtime/gateway';\nimport type { GatewayCredentials, SessionCredentials } from '@kb-labs/cli-runtime/gateway';\n\nconst DEFAULT_GATEWAY_URL = 'http://127.0.0.1:4000';\nconst MARKETPLACE_PREFIX = '/api/v1/marketplace';\nconst FETCH_TIMEOUT_MS = 30_000;\n\ntype AuthState = {\n  gatewayUrl: string;\n  accessToken: string;\n  refresh: () => Promise<AuthState>;\n};\n\nasync function loadAuth(): Promise<AuthState | null> {\n  const sessionManager = new SessionManager();\n  const session = await sessionManager.load();\n  if (session) {\n    const current = sessionManager.isExpired(session) ? await sessionManager.refresh(session) : session;\n    return authState(current, () => sessionManager.refresh(current));\n  }\n\n  const credentialsManager = new CredentialsManager();\n  const credentials = await credentialsManager.load();\n  if (!credentials) {\n    return null;\n  }\n  const current = credentialsManager.isExpired(credentials) ? await credentialsManager.refresh(credentials) : credentials;\n  return authState(current, () => credentialsManager.refresh(current));\n}\n\nfunction authState(credentials: GatewayCredentials | SessionCredentials, refresh: () => Promise<GatewayCredentials | SessionCredentials>): AuthState {\n  return {\n    gatewayUrl: credentials.gatewayUrl,\n    accessToken: credentials.accessToken,\n    refresh: async () => {\n      const updated = await refresh();\n      return authState(updated, refresh);\n    },\n  };\n}\n\nfunction getBaseUrl(gatewayUrl?: string): string {\n  const marketplaceUrl = useEnv('KB_MARKETPLACE_URL');\n  if (marketplaceUrl) {\n    return `${marketplaceUrl}${MARKETPLACE_PREFIX}`;\n  }\n  const gateway = gatewayUrl ?? useEnv('KB_GATEWAY_URL') ?? DEFAULT_GATEWAY_URL;\n  return `${gateway}${MARKETPLACE_PREFIX}`;\n}\n\nasync function request<T>(method: string, path: string, body?: Record<string, unknown>, params?: Record<string, string>): Promise<T> {\n  let auth = await loadAuth();\n  const url = new URL(`${getBaseUrl(auth?.gatewayUrl)}${path}`);\n  if (params) {\n    for (const [key, value] of Object.entries(params)) { url.searchParams.set(key, value); }\n  }\n\n  for (let attempt = 0; attempt < 2; attempt += 1) {\n    const controller = new AbortController();\n    const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n    try {\n      const headers: Record<string, string> = {};\n      if (body) { headers['Content-Type'] = 'application/json'; }\n      if (auth) { headers.Authorization = `Bearer ${auth.accessToken}`; }\n      const response = await fetch(url.toString(), {\n        method,\n        headers,\n        body: body ? JSON.stringify(body) : undefined,\n        signal: controller.signal,\n      });\n      if (response.status === 401 && auth && attempt === 0) {\n        auth = await auth.refresh();\n        continue;\n      }\n      if (!response.ok) {\n        const text = await response.text();\n        throw new Error(`Marketplace ${path} failed (${response.status}): ${text}`);\n      }\n      if (response.status === 204) { return undefined as T; }\n      return await response.json() as T;\n    } catch (err) {\n      if ((err as Error).name === 'AbortError') {\n        throw new Error(`Marketplace ${path} timed out — is the marketplace service running? (kb-dev start marketplace)`);\n      }\n      throw err;\n    } finally {\n      clearTimeout(timer);\n    }\n  }\n  throw new Error(`Marketplace ${path} failed after refreshing authentication`);\n}\n\nexport async function post<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('POST', path, body);\n}\n\nexport async function patch<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('PATCH', path, body);\n}\n\nexport async function del<T = unknown>(path: string, body?: Record<string, unknown>): Promise<T> {\n  return request<T>('DELETE', path, body);\n}\n\nexport async function get<T = unknown>(path: string, params?: Record<string, string>): Promise<T> {\n  return request<T>('GET', path, undefined, params);\n}\n","/**\n * @module @kb-labs/marketplace-entry/scope\n *\n * Client-side scope resolution for marketplace CLI commands. Uses the\n * canonical `findProjectConfigRoot` helper from `@kb-labs/core-workspace`\n * so the detection rules (which filenames count, how walk-up stops) match\n * what the config loader and the marketplace daemon enforce.\n *\n * Rules:\n *  - `project` is the default if cwd (or any ancestor up to the filesystem\n *    root) contains `.kb/kb.config.{json,jsonc}`.\n *  - Otherwise the default is `platform`.\n *  - `--scope` always overrides detection.\n *  - For scope=\"project\" we return the absolute projectRoot so the daemon\n *    doesn't need to re-discover it.\n */\n\nimport { findProjectConfigRoot } from '@kb-labs/core-workspace';\nimport type { MarketplaceScope, MarketplaceQueryScope } from '@kb-labs/marketplace-contracts';\n\nexport const SCOPE_FLAG_CHOICES: readonly MarketplaceScope[] = ['platform', 'project'];\nexport const QUERY_SCOPE_FLAG_CHOICES: readonly MarketplaceQueryScope[] = ['platform', 'project', 'all'];\n\nexport interface ResolvedCliScope {\n  scope: MarketplaceScope;\n  projectRoot?: string;\n  /** How the scope was determined — surfaces in --verbose logs. */\n  reason: 'flag' | 'auto-detect' | 'fallback';\n}\n\nexport interface ResolvedCliQueryScope extends Omit<ResolvedCliScope, 'scope'> {\n  scope: MarketplaceQueryScope;\n}\n\n/**\n * Resolve the effective scope for a mutating command (`link`, `unlink`,\n * `install`, ...). `flag` is the value of `--scope` (if supplied). The\n * helper never returns `'all'` for mutating commands — callers restrict\n * choices via `SCOPE_FLAG_CHOICES`.\n */\nexport async function resolveCliScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliScope> {\n  if (flag) {\n    assertMutatingScope(flag);\n    if (flag === 'project') {\n      const projectRoot = await findProjectConfigRoot(cwd);\n      if (!projectRoot) {\n        throw new CliScopeError(\n          'SCOPE_PROJECT_ROOT_NOT_FOUND',\n          `--scope=project requires a .kb/kb.config.{json,jsonc} ancestor of ${cwd} — none found.`,\n        );\n      }\n      return { scope: 'project', projectRoot, reason: 'flag' };\n    }\n    return { scope: 'platform', reason: 'flag' };\n  }\n\n  const projectRoot = await findProjectConfigRoot(cwd);\n  if (projectRoot) {\n    return { scope: 'project', projectRoot, reason: 'auto-detect' };\n  }\n  return { scope: 'platform', reason: 'fallback' };\n}\n\n/**\n * Resolve the effective scope for a read-only command (`list`). Accepts\n * `'all'` as an explicit flag value.\n */\nexport async function resolveCliQueryScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliQueryScope> {\n  if (flag === 'all') {\n    const projectRoot = await findProjectConfigRoot(cwd);\n    return { scope: 'all', projectRoot, reason: 'flag' };\n  }\n  const base = await resolveCliScope(cwd, flag);\n  return { scope: base.scope, projectRoot: base.projectRoot, reason: base.reason };\n}\n\nfunction assertMutatingScope(value: string): asserts value is MarketplaceScope {\n  if (!SCOPE_FLAG_CHOICES.includes(value as MarketplaceScope)) {\n    throw new CliScopeError(\n      'SCOPE_INVALID',\n      `--scope must be one of: ${SCOPE_FLAG_CHOICES.join(', ')} (got ${JSON.stringify(value)})`,\n    );\n  }\n}\n\nexport class CliScopeError extends Error {\n  readonly code: string;\n  constructor(code: string, message: string) {\n    super(message);\n    this.code = code;\n    this.name = 'CliScopeError';\n  }\n}\n\n/**\n * Build the body-payload fragment expected by `parseMutatingScope` on the\n * API side: `{ scope, projectRoot? }`. Kept as a helper so every command\n * sends the same shape and nothing drifts out-of-sync with the server.\n */\nexport function scopeBody(ctx: ResolvedCliScope | ResolvedCliQueryScope): {\n  scope: MarketplaceScope | MarketplaceQueryScope;\n  projectRoot?: string;\n} {\n  return {\n    scope: ctx.scope,\n    ...(ctx.projectRoot ? { projectRoot: ctx.projectRoot } : {}),\n  };\n}\n","import { defineCommand, handleError, validationError, type PluginContextV3, type CommandResult } from '@kb-labs/sdk';\nimport { post } from '../http.js';\nimport { resolveCliScope, scopeBody, CliScopeError } from '../scope.js';\n\ninterface UpdateFlags {\n  json?: boolean;\n  scope?: string;\n  'dry-run'?: boolean;\n}\n\ninterface UpdateInput {\n  argv?: string[];\n  flags?: UpdateFlags;\n}\n\ninterface PackageEntry {\n  id: string;\n  version: string;\n  primaryKind: string;\n}\n\ninterface UpdateResultData {\n  installed: PackageEntry[];\n  warnings: string[];\n  scope: string;\n}\n\nexport default defineCommand<unknown, UpdateInput, UpdateResultData>({\n  id: 'marketplace:update',\n  description: 'Update marketplace package(s)',\n\n  handler: {\n    async intent(_ctx: PluginContextV3, input: UpdateInput) {\n      const argv = input.argv ?? [];\n      const targets = argv.length > 0 ? argv : ['all installed packages'];\n      return {\n        summary: `Update ${targets.join(', ')}`,\n        operations: targets.map(pkg => ({\n          type: 'update' as const,\n          resource: 'marketplace-package',\n          details: { package: pkg },\n        })),\n      };\n    },\n\n    async execute(ctx: PluginContextV3, input: UpdateInput): Promise<CommandResult<UpdateResultData>> {\n      const argv = input.argv ?? [];\n      const flags = (input.flags ?? input) as UpdateFlags;\n\n      let scopeCtx;\n      try {\n        scopeCtx = await resolveCliScope(ctx.cwd, flags.scope);\n      } catch (err) {\n        if (err instanceof CliScopeError) {\n          validationError(ctx, err.message, undefined, flags.json);\n        } else {\n          handleError(ctx, err, flags.json);\n        }\n        return { ok: false, error: 'Please specify at least one package to update', result: { installed: [], warnings: [], scope: '' } };\n      }\n\n      try {\n        // Server-side update accepts a single body with the ids (or all\n        // installed when omitted). No client-side loop; the server handles\n        // per-package failures and reports them in `warnings`.\n        const body: Record<string, unknown> = { ...scopeBody(scopeCtx) };\n        if (argv.length > 0) {\n          body.packageIds = argv;\n        }\n        const result = await post<UpdateResultData>('/packages/update', body);\n\n        if (flags.json) {\n          ctx.ui?.json?.(result);\n        } else if (result.installed.length === 0) {\n          ctx.ui?.info?.(`Nothing to update (${scopeCtx.scope})`);\n        } else {\n          ctx.ui?.success?.(`Update completed (${scopeCtx.scope})`, {\n            sections: [\n              {\n                header: 'Updated',\n                items: result.installed.map(p => `${p.id}@${p.version} (${p.primaryKind})`),\n              },\n              ...(result.warnings.length > 0 ? [{ header: 'Warnings', items: result.warnings }] : []),\n            ],\n          });\n        }\n\n        return { ok: true, result };\n      } catch (err) {\n        handleError(ctx, err, flags.json);\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { installed: [], warnings: [], scope: '' } };\n      }\n    },\n  },\n});\n"]}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@kb-labs/marketplace-entry",
   "description": "Marketplace CLI plugin — commands for managing plugins, adapters, and other marketplace entities",
-  "version": "2.111.0",
+  "version": "2.112.0",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -21,15 +21,16 @@
     "build": "tsup",
     "clean": "rimraf dist",
     "dev": "tsup --watch",
-    "lint": "eslint .",
+    "lint": "eslint src",
     "lint:fix": "eslint . --fix",
     "test": "vitest run --passWithNoTests -c ../../vitest.config.ts",
     "test:cli": "vitest run --config vitest.cli.config.ts --passWithNoTests",
     "type-check": "tsc --noEmit"
   },
   "dependencies": {
-    "@kb-labs/core-workspace": "^2.111.0",
-    "@kb-labs/marketplace-contracts": "^2.111.0",
+    "@kb-labs/cli-runtime": "^2.112.0",
+    "@kb-labs/core-workspace": "^2.112.0",
+    "@kb-labs/marketplace-contracts": "^2.112.0",
     "@kb-labs/sdk": "workspace:*"
   },
   "devDependencies": {