@kb-labs/marketplace-entry 2.116.13 → 2.117.0

package/dist/commands/install.js

@@ -63,6 +63,9 @@ async function request(method, path, body, params) {
         auth = await auth.refresh();
         continue;
       }
+      if (response.status === 401 && !auth) {
+        throw new Error("Marketplace authentication is required. Run `kb auth login` or choose local no-auth mode during installation.");
+      }
       if (!response.ok) {
         const text = await response.text();
         throw new Error(`Marketplace ${path} failed (${response.status}): ${text}`);

package/dist/commands/install.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/http.ts","../../src/scope.ts","../../src/commands/install.ts"],"names":["current","projectRoot"],"mappings":";;;;;AAQA,IAAM,mBAAA,GAAsB,uBAAA;AAC5B,IAAM,kBAAA,GAAqB,qBAAA;AAC3B,IAAM,gBAAA,GAAmB,GAAA;AAQzB,eAAe,QAAA,GAAsC;AACnD,EAAA,MAAM,cAAA,GAAiB,IAAI,cAAA,EAAe;AAC1C,EAAA,MAAM,OAAA,GAAU,MAAM,cAAA,CAAe,IAAA,EAAK;AAC1C,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,MAAMA,QAAAA,GAAU,eAAe,SAAA,CAAU,OAAO,IAAI,MAAM,cAAA,CAAe,OAAA,CAAQ,OAAO,CAAA,GAAI,OAAA;AAC5F,IAAA,OAAO,UAAUA,QAAAA,EAAS,MAAM,cAAA,CAAe,OAAA,CAAQA,QAAO,CAAC,CAAA;AAAA,EACjE;AAEA,EAAA,MAAM,kBAAA,GAAqB,IAAI,kBAAA,EAAmB;AAClD,EAAA,MAAM,WAAA,GAAc,MAAM,kBAAA,CAAmB,IAAA,EAAK;AAClD,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,OAAA,GAAU,mBAAmB,SAAA,CAAU,WAAW,IAAI,MAAM,kBAAA,CAAmB,OAAA,CAAQ,WAAW,CAAA,GAAI,WAAA;AAC5G,EAAA,OAAO,UAAU,OAAA,EAAS,MAAM,kBAAA,CAAmB,OAAA,CAAQ,OAAO,CAAC,CAAA;AACrE;AAEA,SAAS,SAAA,CAAU,aAAsD,OAAA,EAA4E;AACnJ,EAAA,OAAO;AAAA,IACL,YAAY,WAAA,CAAY,UAAA;AAAA,IACxB,aAAa,WAAA,CAAY,WAAA;AAAA,IACzB,SAAS,YAAY;AACnB,MAAA,MAAM,OAAA,GAAU,MAAM,OAAA,EAAQ;AAC9B,MAAA,OAAO,SAAA,CAAU,SAAS,OAAO,CAAA;AAAA,IACnC;AAAA,GACF;AACF;AAEA,SAAS,WAAW,UAAA,EAA6B;AAC/C,EAAA,MAAM,cAAA,GAAiB,OAAO,oBAAoB,CAAA;AAClD,EAAA,IAAI,cAAA,EAAgB;AAClB,IAAA,OAAO,CAAA,EAAG,cAAc,CAAA,EAAG,kBAAkB,CAAA,CAAA;AAAA,EAC/C;AACA,EAAA,MAAM,OAAA,GAAU,UAAA,IAAc,MAAA,CAAO,gBAAgB,CAAA,IAAK,mBAAA;AAC1D,EAAA,OAAO,CAAA,EAAG,OAAO,CAAA,EAAG,kBAAkB,CAAA,CAAA;AACxC;AAEA,eAAe,OAAA,CAAW,MAAA,EAAgB,IAAA,EAAc,IAAA,EAAgC,MAAA,EAA6C;AACnI,EAAA,IAAI,IAAA,GAAO,MAAM,QAAA,EAAS;AAC1B,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,CAAA,EAAG,UAAA,CAAW,MAAM,UAAU,CAAC,CAAA,EAAG,IAAI,CAAA,CAAE,CAAA;AAK5D,EAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,GAAU,CAAA,EAAG,WAAW,CAAA,EAAG;AAC/C,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,gBAAgB,CAAA;AACnE,IAAA,IAAI;AACF,MAAA,MAAM,UAAkC,EAAC;AACzC,MAAA,IAAI,IAAA,EAAM;AAAE,QAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAAA,MAAoB;AAC1D,MAAA,IAAI,IAAA,EAAM;AAAE,QAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,IAAA,CAAK,WAAW,CAAA,CAAA;AAAA,MAAI;AAClE,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,CAAI,UAAS,EAAG;AAAA,QAC3C,MAAA;AAAA,QACA,OAAA;AAAA,QACA,IAAA,EAAM,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,GAAI,KAAA,CAAA;AAAA,QACpC,QAAQ,UAAA,CAAW;AAAA,OACpB,CAAA;AACD,MAAA,IAAI,QAAA,CAAS,MAAA,KAAW,GAAA,IAAO,IAAA,IAAQ,YAAY,CAAA,EAAG;AACpD,QAAA,IAAA,GAAO,MAAM,KAAK,OAAA,EAAQ;AAC1B,QAAA;AAAA,MACF;AACA,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,QAAA,MAAM,IAAI,MAAM,CAAA,YAAA,EAAe,IAAI,YAAY,QAAA,CAAS,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,CAAE,CAAA;AAAA,MAC5E;AACA,MAAA,IAAI,QAAA,CAAS,WAAW,GAAA,EAAK;AAAE,QAAA,OAAO,KAAA,CAAA;AAAA,MAAgB;AACtD,MAAA,OAAO,MAAM,SAAS,IAAA,EAAK;AAAA,IAC7B,SAAS,GAAA,EAAK;AACZ,MAAA,IAAK,GAAA,CAAc,SAAS,YAAA,EAAc;AACxC,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,gFAAA,CAA6E,CAAA;AAAA,MAClH;AACA,MAAA,MAAM,GAAA;AAAA,IACR,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAAA,IACpB;AAAA,EACF;AACA,EAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,uCAAA,CAAyC,CAAA;AAC9E;AAEA,eAAsB,IAAA,CAAkB,MAAc,IAAA,EAA2C;AAC/F,EAAA,OAAO,OAAA,CAAW,MAAA,EAAQ,IAAA,EAAM,IAAI,CAAA;AACtC;AC/EO,IAAM,kBAAA,GAAkD,CAAC,UAAA,EAAY,SAAS,CAAA;AAoBrF,eAAsB,eAAA,CACpB,KACA,IAAA,EAC2B;AAC3B,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,mBAAA,CAAoB,IAAI,CAAA;AACxB,IAAA,IAAI,SAAS,SAAA,EAAW;AACtB,MAAA,MAAMC,YAAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,MAAA,IAAI,CAACA,YAAAA,EAAa;AAChB,QAAA,MAAM,IAAI,aAAA;AAAA,UACR,8BAAA;AAAA,UACA,qEAAqE,GAAG,CAAA,mBAAA;AAAA,SAC1E;AAAA,MACF;AACA,MAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAAA,YAAAA,EAAa,QAAQ,MAAA,EAAO;AAAA,IACzD;AACA,IAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,MAAA,EAAO;AAAA,EAC7C;AAEA,EAAA,MAAM,WAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAa,QAAQ,aAAA,EAAc;AAAA,EAChE;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,UAAA,EAAW;AACjD;AAkBA,SAAS,oBAAoB,KAAA,EAAkD;AAC7E,EAAA,IAAI,CAAC,kBAAA,CAAmB,QAAA,CAAS,KAAyB,CAAA,EAAG;AAC3D,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,eAAA;AAAA,MACA,CAAA,wBAAA,EAA2B,mBAAmB,IAAA,CAAK,IAAI,CAAC,CAAA,MAAA,EAAS,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC,CAAA,CAAA;AAAA,KACxF;AAAA,EACF;AACF;AAEO,IAAM,aAAA,GAAN,cAA4B,KAAA,CAAM;AAAA,EAC9B,IAAA;AAAA,EACT,WAAA,CAAY,MAAc,OAAA,EAAiB;AACzC,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AAAA,EACd;AACF,CAAA;AAOO,SAAS,UAAU,GAAA,EAGxB;AACA,EAAA,OAAO;AAAA,IACL,OAAO,GAAA,CAAI,KAAA;AAAA,IACX,GAAI,IAAI,WAAA,GAAc,EAAE,aAAa,GAAA,CAAI,WAAA,KAAgB;AAAC,GAC5D;AACF;;;ACpFA,IAAO,kBAAQ,aAAA,CAAwD;AAAA,EACrE,EAAA,EAAI,qBAAA;AAAA,EACJ,WAAA,EAAa,qCAAA;AAAA,EAEb,OAAA,EAAS;AAAA,IACP,MAAM,MAAA,CAAO,IAAA,EAAuB,KAAA,EAAqB;AACvD,MAAA,MAAM,IAAA,GAAO,KAAA,CAAM,IAAA,IAAQ,EAAC;AAC5B,MAAA,MAAM,WAAW,IAAA,CAAK,MAAA,GAAS,CAAA,GAAI,IAAA,GAAO,CAAC,yBAAyB,CAAA;AACpE,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,CAAA,QAAA,EAAW,QAAA,CAAS,IAAA,CAAK,IAAI,CAAC,CAAA,iBAAA,CAAA;AAAA,QACvC,UAAA,EAAY,QAAA,CAAS,GAAA,CAAI,CAAA,GAAA,MAAQ;AAAA,UAC/B,IAAA,EAAM,QAAA;AAAA,UACN,QAAA,EAAU,qBAAA;AAAA,UACV,OAAA,EAAS,EAAE,OAAA,EAAS,GAAA;AAAI,SAC1B,CAAE;AAAA,OACJ;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,OAAA,CAAQ,GAAA,EAAsB,KAAA,EAAgE;AAClG,MAAA,MAAM,IAAA,GAAO,KAAA,CAAM,IAAA,IAAQ,EAAC;AAC5B,MAAA,MAAM,KAAA,GAAS,MAAM,KAAA,IAAS,KAAA;AAE9B,MAAA,IAAI,IAAA,CAAK,WAAW,CAAA,EAAG;AACrB,QAAA,eAAA,CAAgB,GAAA,EAAK,gDAAA,EAAkD,yCAAA,EAA2C,KAAA,CAAM,IAAI,CAAA;AAC5H,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,kDAAkD,MAAA,EAAQ,EAAE,SAAA,EAAW,IAAI,QAAA,EAAU,EAAC,EAAG,KAAA,EAAO,IAAG,EAAE;AAAA,MAClI;AAEA,MAAA,IAAI,QAAA;AACJ,MAAA,IAAI;AACF,QAAA,QAAA,GAAW,MAAM,eAAA,CAAgB,GAAA,CAAI,GAAA,EAAK,MAAM,KAAK,CAAA;AAAA,MACvD,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,eAAe,aAAA,EAAe;AAChC,UAAA,eAAA,CAAgB,GAAA,EAAK,GAAA,CAAI,OAAA,EAAS,MAAA,EAAW,MAAM,IAAI,CAAA;AAAA,QACzD,CAAA,MAAO;AACL,UAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAAA,QAClC;AACA,QAAA,OAAO,EAAE,IAAI,KAAA,EAAO,KAAA,EAAO,eAAe,KAAA,GAAQ,GAAA,CAAI,UAAU,MAAA,CAAO,GAAG,GAAG,MAAA,EAAQ,EAAE,WAAW,EAAC,EAAG,UAAU,EAAC,EAAG,KAAA,EAAO,EAAA,EAAG,EAAE;AAAA,MAClI;AAEA,MAAA,IAAI;AACF,QAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAwB,mBAAA,EAAqB;AAAA,UAChE,KAAA,EAAO,IAAA;AAAA,UACP,GAAA,EAAK,OAAA,CAAQ,KAAA,CAAM,GAAG,CAAA;AAAA,UACtB,GAAI,MAAM,KAAA,GAAQ,EAAE,OAAO,KAAA,CAAM,KAAA,KAAU,EAAC;AAAA,UAC5C,GAAG,UAAU,QAAQ;AAAA,SACtB,CAAA;AAED,QAAA,IAAI,MAAM,IAAA,EAAM;AACd,UAAA,GAAA,CAAI,EAAA,EAAI,OAAO,MAAM,CAAA;AAAA,QACvB,CAAA,MAAO;AACL,UAAA,GAAA,CAAI,IAAI,OAAA,GAAU,CAAA,+BAAA,EAAkC,OAAO,KAAA,IAAS,QAAA,CAAS,KAAK,CAAA,CAAA,CAAA,EAAK;AAAA,YACrF,QAAA,EAAU;AAAA,cACR;AAAA,gBACE,MAAA,EAAQ,WAAA;AAAA,gBACR,KAAA,EAAO,MAAA,CAAO,SAAA,CAAU,GAAA,CAAI,OAAK,CAAA,EAAG,CAAA,CAAE,EAAE,CAAA,CAAA,EAAI,CAAA,CAAE,OAAO,CAAA,EAAA,EAAK,CAAA,CAAE,WAAW,CAAA,CAAA,CAAG;AAAA,eAC5E;AAAA,cACA,GAAI,MAAA,CAAO,QAAA,CAAS,MAAA,GAAS,IACzB,CAAC,EAAE,MAAA,EAAQ,UAAA,EAAY,KAAA,EAAO,MAAA,CAAO,QAAA,EAAU,IAC/C;AAAC;AACP,WACD,CAAA;AAAA,QACH;AAEA,QAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,MAAA,EAAO;AAAA,MAC5B,SAAS,GAAA,EAAK;AACZ,QAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAChC,QAAA,OAAO,EAAE,IAAI,KAAA,EAAO,KAAA,EAAO,eAAe,KAAA,GAAQ,GAAA,CAAI,UAAU,MAAA,CAAO,GAAG,GAAG,MAAA,EAAQ,EAAE,WAAW,EAAC,EAAG,UAAU,EAAC,EAAG,KAAA,EAAO,EAAA,EAAG,EAAE;AAAA,MAClI;AAAA,IACF;AAAA;AAEJ,CAAC","file":"install.js","sourcesContent":["/**\n * HTTP client for marketplace service via Gateway.\n */\n\nimport { useEnv } from '@kb-labs/sdk';\nimport { CredentialsManager, SessionManager } from '@kb-labs/cli-runtime/gateway';\nimport type { GatewayCredentials, SessionCredentials } from '@kb-labs/cli-runtime/gateway';\n\nconst DEFAULT_GATEWAY_URL = 'http://127.0.0.1:4000';\nconst MARKETPLACE_PREFIX = '/api/v1/marketplace';\nconst FETCH_TIMEOUT_MS = 30_000;\n\ntype AuthState = {\n  gatewayUrl: string;\n  accessToken: string;\n  refresh: () => Promise<AuthState>;\n};\n\nasync function loadAuth(): Promise<AuthState | null> {\n  const sessionManager = new SessionManager();\n  const session = await sessionManager.load();\n  if (session) {\n    const current = sessionManager.isExpired(session) ? await sessionManager.refresh(session) : session;\n    return authState(current, () => sessionManager.refresh(current));\n  }\n\n  const credentialsManager = new CredentialsManager();\n  const credentials = await credentialsManager.load();\n  if (!credentials) {\n    return null;\n  }\n  const current = credentialsManager.isExpired(credentials) ? await credentialsManager.refresh(credentials) : credentials;\n  return authState(current, () => credentialsManager.refresh(current));\n}\n\nfunction authState(credentials: GatewayCredentials | SessionCredentials, refresh: () => Promise<GatewayCredentials | SessionCredentials>): AuthState {\n  return {\n    gatewayUrl: credentials.gatewayUrl,\n    accessToken: credentials.accessToken,\n    refresh: async () => {\n      const updated = await refresh();\n      return authState(updated, refresh);\n    },\n  };\n}\n\nfunction getBaseUrl(gatewayUrl?: string): string {\n  const marketplaceUrl = useEnv('KB_MARKETPLACE_URL');\n  if (marketplaceUrl) {\n    return `${marketplaceUrl}${MARKETPLACE_PREFIX}`;\n  }\n  const gateway = gatewayUrl ?? useEnv('KB_GATEWAY_URL') ?? DEFAULT_GATEWAY_URL;\n  return `${gateway}${MARKETPLACE_PREFIX}`;\n}\n\nasync function request<T>(method: string, path: string, body?: Record<string, unknown>, params?: Record<string, string>): Promise<T> {\n  let auth = await loadAuth();\n  const url = new URL(`${getBaseUrl(auth?.gatewayUrl)}${path}`);\n  if (params) {\n    for (const [key, value] of Object.entries(params)) { url.searchParams.set(key, value); }\n  }\n\n  for (let attempt = 0; attempt < 2; attempt += 1) {\n    const controller = new AbortController();\n    const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n    try {\n      const headers: Record<string, string> = {};\n      if (body) { headers['Content-Type'] = 'application/json'; }\n      if (auth) { headers.Authorization = `Bearer ${auth.accessToken}`; }\n      const response = await fetch(url.toString(), {\n        method,\n        headers,\n        body: body ? JSON.stringify(body) : undefined,\n        signal: controller.signal,\n      });\n      if (response.status === 401 && auth && attempt === 0) {\n        auth = await auth.refresh();\n        continue;\n      }\n      if (!response.ok) {\n        const text = await response.text();\n        throw new Error(`Marketplace ${path} failed (${response.status}): ${text}`);\n      }\n      if (response.status === 204) { return undefined as T; }\n      return await response.json() as T;\n    } catch (err) {\n      if ((err as Error).name === 'AbortError') {\n        throw new Error(`Marketplace ${path} timed out — is the marketplace service running? (kb-dev start marketplace)`);\n      }\n      throw err;\n    } finally {\n      clearTimeout(timer);\n    }\n  }\n  throw new Error(`Marketplace ${path} failed after refreshing authentication`);\n}\n\nexport async function post<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('POST', path, body);\n}\n\nexport async function patch<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('PATCH', path, body);\n}\n\nexport async function del<T = unknown>(path: string, body?: Record<string, unknown>): Promise<T> {\n  return request<T>('DELETE', path, body);\n}\n\nexport async function get<T = unknown>(path: string, params?: Record<string, string>): Promise<T> {\n  return request<T>('GET', path, undefined, params);\n}\n","/**\n * @module @kb-labs/marketplace-entry/scope\n *\n * Client-side scope resolution for marketplace CLI commands. Uses the\n * canonical `findProjectConfigRoot` helper from `@kb-labs/core-workspace`\n * so the detection rules (which filenames count, how walk-up stops) match\n * what the config loader and the marketplace daemon enforce.\n *\n * Rules:\n *  - `project` is the default if cwd (or any ancestor up to the filesystem\n *    root) contains `.kb/kb.config.{json,jsonc}`.\n *  - Otherwise the default is `platform`.\n *  - `--scope` always overrides detection.\n *  - For scope=\"project\" we return the absolute projectRoot so the daemon\n *    doesn't need to re-discover it.\n */\n\nimport { findProjectConfigRoot } from '@kb-labs/core-workspace';\nimport type { MarketplaceScope, MarketplaceQueryScope } from '@kb-labs/marketplace-contracts';\n\nexport const SCOPE_FLAG_CHOICES: readonly MarketplaceScope[] = ['platform', 'project'];\nexport const QUERY_SCOPE_FLAG_CHOICES: readonly MarketplaceQueryScope[] = ['platform', 'project', 'all'];\n\nexport interface ResolvedCliScope {\n  scope: MarketplaceScope;\n  projectRoot?: string;\n  /** How the scope was determined — surfaces in --verbose logs. */\n  reason: 'flag' | 'auto-detect' | 'fallback';\n}\n\nexport interface ResolvedCliQueryScope extends Omit<ResolvedCliScope, 'scope'> {\n  scope: MarketplaceQueryScope;\n}\n\n/**\n * Resolve the effective scope for a mutating command (`link`, `unlink`,\n * `install`, ...). `flag` is the value of `--scope` (if supplied). The\n * helper never returns `'all'` for mutating commands — callers restrict\n * choices via `SCOPE_FLAG_CHOICES`.\n */\nexport async function resolveCliScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliScope> {\n  if (flag) {\n    assertMutatingScope(flag);\n    if (flag === 'project') {\n      const projectRoot = await findProjectConfigRoot(cwd);\n      if (!projectRoot) {\n        throw new CliScopeError(\n          'SCOPE_PROJECT_ROOT_NOT_FOUND',\n          `--scope=project requires a .kb/kb.config.{json,jsonc} ancestor of ${cwd} — none found.`,\n        );\n      }\n      return { scope: 'project', projectRoot, reason: 'flag' };\n    }\n    return { scope: 'platform', reason: 'flag' };\n  }\n\n  const projectRoot = await findProjectConfigRoot(cwd);\n  if (projectRoot) {\n    return { scope: 'project', projectRoot, reason: 'auto-detect' };\n  }\n  return { scope: 'platform', reason: 'fallback' };\n}\n\n/**\n * Resolve the effective scope for a read-only command (`list`). Accepts\n * `'all'` as an explicit flag value.\n */\nexport async function resolveCliQueryScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliQueryScope> {\n  if (flag === 'all') {\n    const projectRoot = await findProjectConfigRoot(cwd);\n    return { scope: 'all', projectRoot, reason: 'flag' };\n  }\n  const base = await resolveCliScope(cwd, flag);\n  return { scope: base.scope, projectRoot: base.projectRoot, reason: base.reason };\n}\n\nfunction assertMutatingScope(value: string): asserts value is MarketplaceScope {\n  if (!SCOPE_FLAG_CHOICES.includes(value as MarketplaceScope)) {\n    throw new CliScopeError(\n      'SCOPE_INVALID',\n      `--scope must be one of: ${SCOPE_FLAG_CHOICES.join(', ')} (got ${JSON.stringify(value)})`,\n    );\n  }\n}\n\nexport class CliScopeError extends Error {\n  readonly code: string;\n  constructor(code: string, message: string) {\n    super(message);\n    this.code = code;\n    this.name = 'CliScopeError';\n  }\n}\n\n/**\n * Build the body-payload fragment expected by `parseMutatingScope` on the\n * API side: `{ scope, projectRoot? }`. Kept as a helper so every command\n * sends the same shape and nothing drifts out-of-sync with the server.\n */\nexport function scopeBody(ctx: ResolvedCliScope | ResolvedCliQueryScope): {\n  scope: MarketplaceScope | MarketplaceQueryScope;\n  projectRoot?: string;\n} {\n  return {\n    scope: ctx.scope,\n    ...(ctx.projectRoot ? { projectRoot: ctx.projectRoot } : {}),\n  };\n}\n","import { defineCommand, validationError, handleError, type PluginContextV3, type CommandResult } from '@kb-labs/sdk';\nimport { post } from '../http.js';\nimport { resolveCliScope, scopeBody, CliScopeError } from '../scope.js';\n\ninterface InstallFlags {\n  dev?: boolean;\n  json?: boolean;\n  scope?: string;\n  token?: string;\n  'dry-run'?: boolean;\n}\n\ninterface InstallInput {\n  argv?: string[];\n  flags?: InstallFlags;\n}\n\ninterface InstalledEntry {\n  id: string;\n  version: string;\n  primaryKind: string;\n}\n\ninterface InstallResultData {\n  installed: InstalledEntry[];\n  warnings: string[];\n  scope: string;\n}\n\nexport default defineCommand<unknown, InstallInput, InstallResultData>({\n  id: 'marketplace:install',\n  description: 'Install package(s) from marketplace',\n\n  handler: {\n    async intent(_ctx: PluginContextV3, input: InstallInput) {\n      const argv = input.argv ?? [];\n      const packages = argv.length > 0 ? argv : ['(no packages specified)'];\n      return {\n        summary: `Install ${packages.join(', ')} from marketplace`,\n        operations: packages.map(pkg => ({\n          type: 'create' as const,\n          resource: 'marketplace-package',\n          details: { package: pkg },\n        })),\n      };\n    },\n\n    async execute(ctx: PluginContextV3, input: InstallInput): Promise<CommandResult<InstallResultData>> {\n      const argv = input.argv ?? [];\n      const flags = (input.flags ?? input) as InstallFlags;\n\n      if (argv.length === 0) {\n        validationError(ctx, 'Please specify at least one package to install', 'Usage: kb marketplace install <package>', flags.json);\n        return { ok: false, error: 'Please specify at least one package to install', result: { installed: [], warnings: [], scope: '' } };\n      }\n\n      let scopeCtx;\n      try {\n        scopeCtx = await resolveCliScope(ctx.cwd, flags.scope);\n      } catch (err) {\n        if (err instanceof CliScopeError) {\n          validationError(ctx, err.message, undefined, flags.json);\n        } else {\n          handleError(ctx, err, flags.json);\n        }\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { installed: [], warnings: [], scope: '' } };\n      }\n\n      try {\n        const result = await post<InstallResultData>('/packages/install', {\n          specs: argv,\n          dev: Boolean(flags.dev),\n          ...(flags.token ? { token: flags.token } : {}),\n          ...scopeBody(scopeCtx),\n        });\n\n        if (flags.json) {\n          ctx.ui?.json?.(result);\n        } else {\n          ctx.ui?.success?.(`Marketplace install completed (${result.scope ?? scopeCtx.scope})`, {\n            sections: [\n              {\n                header: 'Installed',\n                items: result.installed.map(p => `${p.id}@${p.version} (${p.primaryKind})`),\n              },\n              ...(result.warnings.length > 0\n                ? [{ header: 'Warnings', items: result.warnings }]\n                : []),\n            ],\n          });\n        }\n\n        return { ok: true, result };\n      } catch (err) {\n        handleError(ctx, err, flags.json);\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { installed: [], warnings: [], scope: '' } };\n      }\n    },\n  },\n});\n"]}
+{"version":3,"sources":["../../src/http.ts","../../src/scope.ts","../../src/commands/install.ts"],"names":["current","projectRoot"],"mappings":";;;;;AAQA,IAAM,mBAAA,GAAsB,uBAAA;AAC5B,IAAM,kBAAA,GAAqB,qBAAA;AAC3B,IAAM,gBAAA,GAAmB,GAAA;AAQzB,eAAe,QAAA,GAAsC;AACnD,EAAA,MAAM,cAAA,GAAiB,IAAI,cAAA,EAAe;AAC1C,EAAA,MAAM,OAAA,GAAU,MAAM,cAAA,CAAe,IAAA,EAAK;AAC1C,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,MAAMA,QAAAA,GAAU,eAAe,SAAA,CAAU,OAAO,IAAI,MAAM,cAAA,CAAe,OAAA,CAAQ,OAAO,CAAA,GAAI,OAAA;AAC5F,IAAA,OAAO,UAAUA,QAAAA,EAAS,MAAM,cAAA,CAAe,OAAA,CAAQA,QAAO,CAAC,CAAA;AAAA,EACjE;AAEA,EAAA,MAAM,kBAAA,GAAqB,IAAI,kBAAA,EAAmB;AAClD,EAAA,MAAM,WAAA,GAAc,MAAM,kBAAA,CAAmB,IAAA,EAAK;AAClD,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,OAAA,GAAU,mBAAmB,SAAA,CAAU,WAAW,IAAI,MAAM,kBAAA,CAAmB,OAAA,CAAQ,WAAW,CAAA,GAAI,WAAA;AAC5G,EAAA,OAAO,UAAU,OAAA,EAAS,MAAM,kBAAA,CAAmB,OAAA,CAAQ,OAAO,CAAC,CAAA;AACrE;AAEA,SAAS,SAAA,CAAU,aAAsD,OAAA,EAA4E;AACnJ,EAAA,OAAO;AAAA,IACL,YAAY,WAAA,CAAY,UAAA;AAAA,IACxB,aAAa,WAAA,CAAY,WAAA;AAAA,IACzB,SAAS,YAAY;AACnB,MAAA,MAAM,OAAA,GAAU,MAAM,OAAA,EAAQ;AAC9B,MAAA,OAAO,SAAA,CAAU,SAAS,OAAO,CAAA;AAAA,IACnC;AAAA,GACF;AACF;AAEA,SAAS,WAAW,UAAA,EAA6B;AAC/C,EAAA,MAAM,cAAA,GAAiB,OAAO,oBAAoB,CAAA;AAClD,EAAA,IAAI,cAAA,EAAgB;AAClB,IAAA,OAAO,CAAA,EAAG,cAAc,CAAA,EAAG,kBAAkB,CAAA,CAAA;AAAA,EAC/C;AACA,EAAA,MAAM,OAAA,GAAU,UAAA,IAAc,MAAA,CAAO,gBAAgB,CAAA,IAAK,mBAAA;AAC1D,EAAA,OAAO,CAAA,EAAG,OAAO,CAAA,EAAG,kBAAkB,CAAA,CAAA;AACxC;AAEA,eAAe,OAAA,CAAW,MAAA,EAAgB,IAAA,EAAc,IAAA,EAAgC,MAAA,EAA6C;AACnI,EAAA,IAAI,IAAA,GAAO,MAAM,QAAA,EAAS;AAC1B,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,CAAA,EAAG,UAAA,CAAW,MAAM,UAAU,CAAC,CAAA,EAAG,IAAI,CAAA,CAAE,CAAA;AAK5D,EAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,GAAU,CAAA,EAAG,WAAW,CAAA,EAAG;AAC/C,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,gBAAgB,CAAA;AACnE,IAAA,IAAI;AACF,MAAA,MAAM,UAAkC,EAAC;AACzC,MAAA,IAAI,IAAA,EAAM;AAAE,QAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAAA,MAAoB;AAC1D,MAAA,IAAI,IAAA,EAAM;AAAE,QAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,IAAA,CAAK,WAAW,CAAA,CAAA;AAAA,MAAI;AAClE,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,CAAI,UAAS,EAAG;AAAA,QAC3C,MAAA;AAAA,QACA,OAAA;AAAA,QACA,IAAA,EAAM,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,GAAI,KAAA,CAAA;AAAA,QACpC,QAAQ,UAAA,CAAW;AAAA,OACpB,CAAA;AACD,MAAA,IAAI,QAAA,CAAS,MAAA,KAAW,GAAA,IAAO,IAAA,IAAQ,YAAY,CAAA,EAAG;AACpD,QAAA,IAAA,GAAO,MAAM,KAAK,OAAA,EAAQ;AAC1B,QAAA;AAAA,MACF;AACA,MAAA,IAAI,QAAA,CAAS,MAAA,KAAW,GAAA,IAAO,CAAC,IAAA,EAAM;AACpC,QAAA,MAAM,IAAI,MAAM,+GAA+G,CAAA;AAAA,MACjI;AACA,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,QAAA,MAAM,IAAI,MAAM,CAAA,YAAA,EAAe,IAAI,YAAY,QAAA,CAAS,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,CAAE,CAAA;AAAA,MAC5E;AACA,MAAA,IAAI,QAAA,CAAS,WAAW,GAAA,EAAK;AAAE,QAAA,OAAO,KAAA,CAAA;AAAA,MAAgB;AACtD,MAAA,OAAO,MAAM,SAAS,IAAA,EAAK;AAAA,IAC7B,SAAS,GAAA,EAAK;AACZ,MAAA,IAAK,GAAA,CAAc,SAAS,YAAA,EAAc;AACxC,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,gFAAA,CAA6E,CAAA;AAAA,MAClH;AACA,MAAA,MAAM,GAAA;AAAA,IACR,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAAA,IACpB;AAAA,EACF;AACA,EAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,uCAAA,CAAyC,CAAA;AAC9E;AAEA,eAAsB,IAAA,CAAkB,MAAc,IAAA,EAA2C;AAC/F,EAAA,OAAO,OAAA,CAAW,MAAA,EAAQ,IAAA,EAAM,IAAI,CAAA;AACtC;AClFO,IAAM,kBAAA,GAAkD,CAAC,UAAA,EAAY,SAAS,CAAA;AAoBrF,eAAsB,eAAA,CACpB,KACA,IAAA,EAC2B;AAC3B,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,mBAAA,CAAoB,IAAI,CAAA;AACxB,IAAA,IAAI,SAAS,SAAA,EAAW;AACtB,MAAA,MAAMC,YAAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,MAAA,IAAI,CAACA,YAAAA,EAAa;AAChB,QAAA,MAAM,IAAI,aAAA;AAAA,UACR,8BAAA;AAAA,UACA,qEAAqE,GAAG,CAAA,mBAAA;AAAA,SAC1E;AAAA,MACF;AACA,MAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAAA,YAAAA,EAAa,QAAQ,MAAA,EAAO;AAAA,IACzD;AACA,IAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,MAAA,EAAO;AAAA,EAC7C;AAEA,EAAA,MAAM,WAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAa,QAAQ,aAAA,EAAc;AAAA,EAChE;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,UAAA,EAAW;AACjD;AAkBA,SAAS,oBAAoB,KAAA,EAAkD;AAC7E,EAAA,IAAI,CAAC,kBAAA,CAAmB,QAAA,CAAS,KAAyB,CAAA,EAAG;AAC3D,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,eAAA;AAAA,MACA,CAAA,wBAAA,EAA2B,mBAAmB,IAAA,CAAK,IAAI,CAAC,CAAA,MAAA,EAAS,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC,CAAA,CAAA;AAAA,KACxF;AAAA,EACF;AACF;AAEO,IAAM,aAAA,GAAN,cAA4B,KAAA,CAAM;AAAA,EAC9B,IAAA;AAAA,EACT,WAAA,CAAY,MAAc,OAAA,EAAiB;AACzC,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AAAA,EACd;AACF,CAAA;AAOO,SAAS,UAAU,GAAA,EAGxB;AACA,EAAA,OAAO;AAAA,IACL,OAAO,GAAA,CAAI,KAAA;AAAA,IACX,GAAI,IAAI,WAAA,GAAc,EAAE,aAAa,GAAA,CAAI,WAAA,KAAgB;AAAC,GAC5D;AACF;;;ACpFA,IAAO,kBAAQ,aAAA,CAAwD;AAAA,EACrE,EAAA,EAAI,qBAAA;AAAA,EACJ,WAAA,EAAa,qCAAA;AAAA,EAEb,OAAA,EAAS;AAAA,IACP,MAAM,MAAA,CAAO,IAAA,EAAuB,KAAA,EAAqB;AACvD,MAAA,MAAM,IAAA,GAAO,KAAA,CAAM,IAAA,IAAQ,EAAC;AAC5B,MAAA,MAAM,WAAW,IAAA,CAAK,MAAA,GAAS,CAAA,GAAI,IAAA,GAAO,CAAC,yBAAyB,CAAA;AACpE,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,CAAA,QAAA,EAAW,QAAA,CAAS,IAAA,CAAK,IAAI,CAAC,CAAA,iBAAA,CAAA;AAAA,QACvC,UAAA,EAAY,QAAA,CAAS,GAAA,CAAI,CAAA,GAAA,MAAQ;AAAA,UAC/B,IAAA,EAAM,QAAA;AAAA,UACN,QAAA,EAAU,qBAAA;AAAA,UACV,OAAA,EAAS,EAAE,OAAA,EAAS,GAAA;AAAI,SAC1B,CAAE;AAAA,OACJ;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,OAAA,CAAQ,GAAA,EAAsB,KAAA,EAAgE;AAClG,MAAA,MAAM,IAAA,GAAO,KAAA,CAAM,IAAA,IAAQ,EAAC;AAC5B,MAAA,MAAM,KAAA,GAAS,MAAM,KAAA,IAAS,KAAA;AAE9B,MAAA,IAAI,IAAA,CAAK,WAAW,CAAA,EAAG;AACrB,QAAA,eAAA,CAAgB,GAAA,EAAK,gDAAA,EAAkD,yCAAA,EAA2C,KAAA,CAAM,IAAI,CAAA;AAC5H,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,kDAAkD,MAAA,EAAQ,EAAE,SAAA,EAAW,IAAI,QAAA,EAAU,EAAC,EAAG,KAAA,EAAO,IAAG,EAAE;AAAA,MAClI;AAEA,MAAA,IAAI,QAAA;AACJ,MAAA,IAAI;AACF,QAAA,QAAA,GAAW,MAAM,eAAA,CAAgB,GAAA,CAAI,GAAA,EAAK,MAAM,KAAK,CAAA;AAAA,MACvD,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,eAAe,aAAA,EAAe;AAChC,UAAA,eAAA,CAAgB,GAAA,EAAK,GAAA,CAAI,OAAA,EAAS,MAAA,EAAW,MAAM,IAAI,CAAA;AAAA,QACzD,CAAA,MAAO;AACL,UAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAAA,QAClC;AACA,QAAA,OAAO,EAAE,IAAI,KAAA,EAAO,KAAA,EAAO,eAAe,KAAA,GAAQ,GAAA,CAAI,UAAU,MAAA,CAAO,GAAG,GAAG,MAAA,EAAQ,EAAE,WAAW,EAAC,EAAG,UAAU,EAAC,EAAG,KAAA,EAAO,EAAA,EAAG,EAAE;AAAA,MAClI;AAEA,MAAA,IAAI;AACF,QAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAwB,mBAAA,EAAqB;AAAA,UAChE,KAAA,EAAO,IAAA;AAAA,UACP,GAAA,EAAK,OAAA,CAAQ,KAAA,CAAM,GAAG,CAAA;AAAA,UACtB,GAAI,MAAM,KAAA,GAAQ,EAAE,OAAO,KAAA,CAAM,KAAA,KAAU,EAAC;AAAA,UAC5C,GAAG,UAAU,QAAQ;AAAA,SACtB,CAAA;AAED,QAAA,IAAI,MAAM,IAAA,EAAM;AACd,UAAA,GAAA,CAAI,EAAA,EAAI,OAAO,MAAM,CAAA;AAAA,QACvB,CAAA,MAAO;AACL,UAAA,GAAA,CAAI,IAAI,OAAA,GAAU,CAAA,+BAAA,EAAkC,OAAO,KAAA,IAAS,QAAA,CAAS,KAAK,CAAA,CAAA,CAAA,EAAK;AAAA,YACrF,QAAA,EAAU;AAAA,cACR;AAAA,gBACE,MAAA,EAAQ,WAAA;AAAA,gBACR,KAAA,EAAO,MAAA,CAAO,SAAA,CAAU,GAAA,CAAI,OAAK,CAAA,EAAG,CAAA,CAAE,EAAE,CAAA,CAAA,EAAI,CAAA,CAAE,OAAO,CAAA,EAAA,EAAK,CAAA,CAAE,WAAW,CAAA,CAAA,CAAG;AAAA,eAC5E;AAAA,cACA,GAAI,MAAA,CAAO,QAAA,CAAS,MAAA,GAAS,IACzB,CAAC,EAAE,MAAA,EAAQ,UAAA,EAAY,KAAA,EAAO,MAAA,CAAO,QAAA,EAAU,IAC/C;AAAC;AACP,WACD,CAAA;AAAA,QACH;AAEA,QAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,MAAA,EAAO;AAAA,MAC5B,SAAS,GAAA,EAAK;AACZ,QAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAChC,QAAA,OAAO,EAAE,IAAI,KAAA,EAAO,KAAA,EAAO,eAAe,KAAA,GAAQ,GAAA,CAAI,UAAU,MAAA,CAAO,GAAG,GAAG,MAAA,EAAQ,EAAE,WAAW,EAAC,EAAG,UAAU,EAAC,EAAG,KAAA,EAAO,EAAA,EAAG,EAAE;AAAA,MAClI;AAAA,IACF;AAAA;AAEJ,CAAC","file":"install.js","sourcesContent":["/**\n * HTTP client for marketplace service via Gateway.\n */\n\nimport { useEnv } from '@kb-labs/sdk';\nimport { CredentialsManager, SessionManager } from '@kb-labs/cli-runtime/gateway';\nimport type { GatewayCredentials, SessionCredentials } from '@kb-labs/cli-runtime/gateway';\n\nconst DEFAULT_GATEWAY_URL = 'http://127.0.0.1:4000';\nconst MARKETPLACE_PREFIX = '/api/v1/marketplace';\nconst FETCH_TIMEOUT_MS = 30_000;\n\ntype AuthState = {\n  gatewayUrl: string;\n  accessToken: string;\n  refresh: () => Promise<AuthState>;\n};\n\nasync function loadAuth(): Promise<AuthState | null> {\n  const sessionManager = new SessionManager();\n  const session = await sessionManager.load();\n  if (session) {\n    const current = sessionManager.isExpired(session) ? await sessionManager.refresh(session) : session;\n    return authState(current, () => sessionManager.refresh(current));\n  }\n\n  const credentialsManager = new CredentialsManager();\n  const credentials = await credentialsManager.load();\n  if (!credentials) {\n    return null;\n  }\n  const current = credentialsManager.isExpired(credentials) ? await credentialsManager.refresh(credentials) : credentials;\n  return authState(current, () => credentialsManager.refresh(current));\n}\n\nfunction authState(credentials: GatewayCredentials | SessionCredentials, refresh: () => Promise<GatewayCredentials | SessionCredentials>): AuthState {\n  return {\n    gatewayUrl: credentials.gatewayUrl,\n    accessToken: credentials.accessToken,\n    refresh: async () => {\n      const updated = await refresh();\n      return authState(updated, refresh);\n    },\n  };\n}\n\nfunction getBaseUrl(gatewayUrl?: string): string {\n  const marketplaceUrl = useEnv('KB_MARKETPLACE_URL');\n  if (marketplaceUrl) {\n    return `${marketplaceUrl}${MARKETPLACE_PREFIX}`;\n  }\n  const gateway = gatewayUrl ?? useEnv('KB_GATEWAY_URL') ?? DEFAULT_GATEWAY_URL;\n  return `${gateway}${MARKETPLACE_PREFIX}`;\n}\n\nasync function request<T>(method: string, path: string, body?: Record<string, unknown>, params?: Record<string, string>): Promise<T> {\n  let auth = await loadAuth();\n  const url = new URL(`${getBaseUrl(auth?.gatewayUrl)}${path}`);\n  if (params) {\n    for (const [key, value] of Object.entries(params)) { url.searchParams.set(key, value); }\n  }\n\n  for (let attempt = 0; attempt < 2; attempt += 1) {\n    const controller = new AbortController();\n    const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n    try {\n      const headers: Record<string, string> = {};\n      if (body) { headers['Content-Type'] = 'application/json'; }\n      if (auth) { headers.Authorization = `Bearer ${auth.accessToken}`; }\n      const response = await fetch(url.toString(), {\n        method,\n        headers,\n        body: body ? JSON.stringify(body) : undefined,\n        signal: controller.signal,\n      });\n      if (response.status === 401 && auth && attempt === 0) {\n        auth = await auth.refresh();\n        continue;\n      }\n      if (response.status === 401 && !auth) {\n        throw new Error('Marketplace authentication is required. Run `kb auth login` or choose local no-auth mode during installation.');\n      }\n      if (!response.ok) {\n        const text = await response.text();\n        throw new Error(`Marketplace ${path} failed (${response.status}): ${text}`);\n      }\n      if (response.status === 204) { return undefined as T; }\n      return await response.json() as T;\n    } catch (err) {\n      if ((err as Error).name === 'AbortError') {\n        throw new Error(`Marketplace ${path} timed out — is the marketplace service running? (kb-dev start marketplace)`);\n      }\n      throw err;\n    } finally {\n      clearTimeout(timer);\n    }\n  }\n  throw new Error(`Marketplace ${path} failed after refreshing authentication`);\n}\n\nexport async function post<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('POST', path, body);\n}\n\nexport async function patch<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('PATCH', path, body);\n}\n\nexport async function del<T = unknown>(path: string, body?: Record<string, unknown>): Promise<T> {\n  return request<T>('DELETE', path, body);\n}\n\nexport async function get<T = unknown>(path: string, params?: Record<string, string>): Promise<T> {\n  return request<T>('GET', path, undefined, params);\n}\n","/**\n * @module @kb-labs/marketplace-entry/scope\n *\n * Client-side scope resolution for marketplace CLI commands. Uses the\n * canonical `findProjectConfigRoot` helper from `@kb-labs/core-workspace`\n * so the detection rules (which filenames count, how walk-up stops) match\n * what the config loader and the marketplace daemon enforce.\n *\n * Rules:\n *  - `project` is the default if cwd (or any ancestor up to the filesystem\n *    root) contains `.kb/kb.config.{json,jsonc}`.\n *  - Otherwise the default is `platform`.\n *  - `--scope` always overrides detection.\n *  - For scope=\"project\" we return the absolute projectRoot so the daemon\n *    doesn't need to re-discover it.\n */\n\nimport { findProjectConfigRoot } from '@kb-labs/core-workspace';\nimport type { MarketplaceScope, MarketplaceQueryScope } from '@kb-labs/marketplace-contracts';\n\nexport const SCOPE_FLAG_CHOICES: readonly MarketplaceScope[] = ['platform', 'project'];\nexport const QUERY_SCOPE_FLAG_CHOICES: readonly MarketplaceQueryScope[] = ['platform', 'project', 'all'];\n\nexport interface ResolvedCliScope {\n  scope: MarketplaceScope;\n  projectRoot?: string;\n  /** How the scope was determined — surfaces in --verbose logs. */\n  reason: 'flag' | 'auto-detect' | 'fallback';\n}\n\nexport interface ResolvedCliQueryScope extends Omit<ResolvedCliScope, 'scope'> {\n  scope: MarketplaceQueryScope;\n}\n\n/**\n * Resolve the effective scope for a mutating command (`link`, `unlink`,\n * `install`, ...). `flag` is the value of `--scope` (if supplied). The\n * helper never returns `'all'` for mutating commands — callers restrict\n * choices via `SCOPE_FLAG_CHOICES`.\n */\nexport async function resolveCliScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliScope> {\n  if (flag) {\n    assertMutatingScope(flag);\n    if (flag === 'project') {\n      const projectRoot = await findProjectConfigRoot(cwd);\n      if (!projectRoot) {\n        throw new CliScopeError(\n          'SCOPE_PROJECT_ROOT_NOT_FOUND',\n          `--scope=project requires a .kb/kb.config.{json,jsonc} ancestor of ${cwd} — none found.`,\n        );\n      }\n      return { scope: 'project', projectRoot, reason: 'flag' };\n    }\n    return { scope: 'platform', reason: 'flag' };\n  }\n\n  const projectRoot = await findProjectConfigRoot(cwd);\n  if (projectRoot) {\n    return { scope: 'project', projectRoot, reason: 'auto-detect' };\n  }\n  return { scope: 'platform', reason: 'fallback' };\n}\n\n/**\n * Resolve the effective scope for a read-only command (`list`). Accepts\n * `'all'` as an explicit flag value.\n */\nexport async function resolveCliQueryScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliQueryScope> {\n  if (flag === 'all') {\n    const projectRoot = await findProjectConfigRoot(cwd);\n    return { scope: 'all', projectRoot, reason: 'flag' };\n  }\n  const base = await resolveCliScope(cwd, flag);\n  return { scope: base.scope, projectRoot: base.projectRoot, reason: base.reason };\n}\n\nfunction assertMutatingScope(value: string): asserts value is MarketplaceScope {\n  if (!SCOPE_FLAG_CHOICES.includes(value as MarketplaceScope)) {\n    throw new CliScopeError(\n      'SCOPE_INVALID',\n      `--scope must be one of: ${SCOPE_FLAG_CHOICES.join(', ')} (got ${JSON.stringify(value)})`,\n    );\n  }\n}\n\nexport class CliScopeError extends Error {\n  readonly code: string;\n  constructor(code: string, message: string) {\n    super(message);\n    this.code = code;\n    this.name = 'CliScopeError';\n  }\n}\n\n/**\n * Build the body-payload fragment expected by `parseMutatingScope` on the\n * API side: `{ scope, projectRoot? }`. Kept as a helper so every command\n * sends the same shape and nothing drifts out-of-sync with the server.\n */\nexport function scopeBody(ctx: ResolvedCliScope | ResolvedCliQueryScope): {\n  scope: MarketplaceScope | MarketplaceQueryScope;\n  projectRoot?: string;\n} {\n  return {\n    scope: ctx.scope,\n    ...(ctx.projectRoot ? { projectRoot: ctx.projectRoot } : {}),\n  };\n}\n","import { defineCommand, validationError, handleError, type PluginContextV3, type CommandResult } from '@kb-labs/sdk';\nimport { post } from '../http.js';\nimport { resolveCliScope, scopeBody, CliScopeError } from '../scope.js';\n\ninterface InstallFlags {\n  dev?: boolean;\n  json?: boolean;\n  scope?: string;\n  token?: string;\n  'dry-run'?: boolean;\n}\n\ninterface InstallInput {\n  argv?: string[];\n  flags?: InstallFlags;\n}\n\ninterface InstalledEntry {\n  id: string;\n  version: string;\n  primaryKind: string;\n}\n\ninterface InstallResultData {\n  installed: InstalledEntry[];\n  warnings: string[];\n  scope: string;\n}\n\nexport default defineCommand<unknown, InstallInput, InstallResultData>({\n  id: 'marketplace:install',\n  description: 'Install package(s) from marketplace',\n\n  handler: {\n    async intent(_ctx: PluginContextV3, input: InstallInput) {\n      const argv = input.argv ?? [];\n      const packages = argv.length > 0 ? argv : ['(no packages specified)'];\n      return {\n        summary: `Install ${packages.join(', ')} from marketplace`,\n        operations: packages.map(pkg => ({\n          type: 'create' as const,\n          resource: 'marketplace-package',\n          details: { package: pkg },\n        })),\n      };\n    },\n\n    async execute(ctx: PluginContextV3, input: InstallInput): Promise<CommandResult<InstallResultData>> {\n      const argv = input.argv ?? [];\n      const flags = (input.flags ?? input) as InstallFlags;\n\n      if (argv.length === 0) {\n        validationError(ctx, 'Please specify at least one package to install', 'Usage: kb marketplace install <package>', flags.json);\n        return { ok: false, error: 'Please specify at least one package to install', result: { installed: [], warnings: [], scope: '' } };\n      }\n\n      let scopeCtx;\n      try {\n        scopeCtx = await resolveCliScope(ctx.cwd, flags.scope);\n      } catch (err) {\n        if (err instanceof CliScopeError) {\n          validationError(ctx, err.message, undefined, flags.json);\n        } else {\n          handleError(ctx, err, flags.json);\n        }\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { installed: [], warnings: [], scope: '' } };\n      }\n\n      try {\n        const result = await post<InstallResultData>('/packages/install', {\n          specs: argv,\n          dev: Boolean(flags.dev),\n          ...(flags.token ? { token: flags.token } : {}),\n          ...scopeBody(scopeCtx),\n        });\n\n        if (flags.json) {\n          ctx.ui?.json?.(result);\n        } else {\n          ctx.ui?.success?.(`Marketplace install completed (${result.scope ?? scopeCtx.scope})`, {\n            sections: [\n              {\n                header: 'Installed',\n                items: result.installed.map(p => `${p.id}@${p.version} (${p.primaryKind})`),\n              },\n              ...(result.warnings.length > 0\n                ? [{ header: 'Warnings', items: result.warnings }]\n                : []),\n            ],\n          });\n        }\n\n        return { ok: true, result };\n      } catch (err) {\n        handleError(ctx, err, flags.json);\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { installed: [], warnings: [], scope: '' } };\n      }\n    },\n  },\n});\n"]}

package/dist/commands/plugins/disable.js

@@ -63,6 +63,9 @@ async function request(method, path, body, params) {
         auth = await auth.refresh();
         continue;
       }
+      if (response.status === 401 && !auth) {
+        throw new Error("Marketplace authentication is required. Run `kb auth login` or choose local no-auth mode during installation.");
+      }
       if (!response.ok) {
         const text = await response.text();
         throw new Error(`Marketplace ${path} failed (${response.status}): ${text}`);

package/dist/commands/plugins/disable.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/http.ts","../../../src/scope.ts","../../../src/commands/plugins/disable.ts"],"names":["current","projectRoot"],"mappings":";;;;;AAQA,IAAM,mBAAA,GAAsB,uBAAA;AAC5B,IAAM,kBAAA,GAAqB,qBAAA;AAC3B,IAAM,gBAAA,GAAmB,GAAA;AAQzB,eAAe,QAAA,GAAsC;AACnD,EAAA,MAAM,cAAA,GAAiB,IAAI,cAAA,EAAe;AAC1C,EAAA,MAAM,OAAA,GAAU,MAAM,cAAA,CAAe,IAAA,EAAK;AAC1C,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,MAAMA,QAAAA,GAAU,eAAe,SAAA,CAAU,OAAO,IAAI,MAAM,cAAA,CAAe,OAAA,CAAQ,OAAO,CAAA,GAAI,OAAA;AAC5F,IAAA,OAAO,UAAUA,QAAAA,EAAS,MAAM,cAAA,CAAe,OAAA,CAAQA,QAAO,CAAC,CAAA;AAAA,EACjE;AAEA,EAAA,MAAM,kBAAA,GAAqB,IAAI,kBAAA,EAAmB;AAClD,EAAA,MAAM,WAAA,GAAc,MAAM,kBAAA,CAAmB,IAAA,EAAK;AAClD,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,OAAA,GAAU,mBAAmB,SAAA,CAAU,WAAW,IAAI,MAAM,kBAAA,CAAmB,OAAA,CAAQ,WAAW,CAAA,GAAI,WAAA;AAC5G,EAAA,OAAO,UAAU,OAAA,EAAS,MAAM,kBAAA,CAAmB,OAAA,CAAQ,OAAO,CAAC,CAAA;AACrE;AAEA,SAAS,SAAA,CAAU,aAAsD,OAAA,EAA4E;AACnJ,EAAA,OAAO;AAAA,IACL,YAAY,WAAA,CAAY,UAAA;AAAA,IACxB,aAAa,WAAA,CAAY,WAAA;AAAA,IACzB,SAAS,YAAY;AACnB,MAAA,MAAM,OAAA,GAAU,MAAM,OAAA,EAAQ;AAC9B,MAAA,OAAO,SAAA,CAAU,SAAS,OAAO,CAAA;AAAA,IACnC;AAAA,GACF;AACF;AAEA,SAAS,WAAW,UAAA,EAA6B;AAC/C,EAAA,MAAM,cAAA,GAAiB,OAAO,oBAAoB,CAAA;AAClD,EAAA,IAAI,cAAA,EAAgB;AAClB,IAAA,OAAO,CAAA,EAAG,cAAc,CAAA,EAAG,kBAAkB,CAAA,CAAA;AAAA,EAC/C;AACA,EAAA,MAAM,OAAA,GAAU,UAAA,IAAc,MAAA,CAAO,gBAAgB,CAAA,IAAK,mBAAA;AAC1D,EAAA,OAAO,CAAA,EAAG,OAAO,CAAA,EAAG,kBAAkB,CAAA,CAAA;AACxC;AAEA,eAAe,OAAA,CAAW,MAAA,EAAgB,IAAA,EAAc,IAAA,EAAgC,MAAA,EAA6C;AACnI,EAAA,IAAI,IAAA,GAAO,MAAM,QAAA,EAAS;AAC1B,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,CAAA,EAAG,UAAA,CAAW,MAAM,UAAU,CAAC,CAAA,EAAG,IAAI,CAAA,CAAE,CAAA;AAK5D,EAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,GAAU,CAAA,EAAG,WAAW,CAAA,EAAG;AAC/C,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,gBAAgB,CAAA;AACnE,IAAA,IAAI;AACF,MAAA,MAAM,UAAkC,EAAC;AACzC,MAAA,IAAI,IAAA,EAAM;AAAE,QAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAAA,MAAoB;AAC1D,MAAA,IAAI,IAAA,EAAM;AAAE,QAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,IAAA,CAAK,WAAW,CAAA,CAAA;AAAA,MAAI;AAClE,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,CAAI,UAAS,EAAG;AAAA,QAC3C,MAAA;AAAA,QACA,OAAA;AAAA,QACA,IAAA,EAAM,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,GAAI,KAAA,CAAA;AAAA,QACpC,QAAQ,UAAA,CAAW;AAAA,OACpB,CAAA;AACD,MAAA,IAAI,QAAA,CAAS,MAAA,KAAW,GAAA,IAAO,IAAA,IAAQ,YAAY,CAAA,EAAG;AACpD,QAAA,IAAA,GAAO,MAAM,KAAK,OAAA,EAAQ;AAC1B,QAAA;AAAA,MACF;AACA,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,QAAA,MAAM,IAAI,MAAM,CAAA,YAAA,EAAe,IAAI,YAAY,QAAA,CAAS,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,CAAE,CAAA;AAAA,MAC5E;AACA,MAAA,IAAI,QAAA,CAAS,WAAW,GAAA,EAAK;AAAE,QAAA,OAAO,KAAA,CAAA;AAAA,MAAgB;AACtD,MAAA,OAAO,MAAM,SAAS,IAAA,EAAK;AAAA,IAC7B,SAAS,GAAA,EAAK;AACZ,MAAA,IAAK,GAAA,CAAc,SAAS,YAAA,EAAc;AACxC,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,gFAAA,CAA6E,CAAA;AAAA,MAClH;AACA,MAAA,MAAM,GAAA;AAAA,IACR,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAAA,IACpB;AAAA,EACF;AACA,EAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,uCAAA,CAAyC,CAAA;AAC9E;AAEA,eAAsB,IAAA,CAAkB,MAAc,IAAA,EAA2C;AAC/F,EAAA,OAAO,OAAA,CAAW,MAAA,EAAQ,IAAA,EAAM,IAAI,CAAA;AACtC;AC/EO,IAAM,kBAAA,GAAkD,CAAC,UAAA,EAAY,SAAS,CAAA;AAoBrF,eAAsB,eAAA,CACpB,KACA,IAAA,EAC2B;AAC3B,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,mBAAA,CAAoB,IAAI,CAAA;AACxB,IAAA,IAAI,SAAS,SAAA,EAAW;AACtB,MAAA,MAAMC,YAAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,MAAA,IAAI,CAACA,YAAAA,EAAa;AAChB,QAAA,MAAM,IAAI,aAAA;AAAA,UACR,8BAAA;AAAA,UACA,qEAAqE,GAAG,CAAA,mBAAA;AAAA,SAC1E;AAAA,MACF;AACA,MAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAAA,YAAAA,EAAa,QAAQ,MAAA,EAAO;AAAA,IACzD;AACA,IAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,MAAA,EAAO;AAAA,EAC7C;AAEA,EAAA,MAAM,WAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAa,QAAQ,aAAA,EAAc;AAAA,EAChE;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,UAAA,EAAW;AACjD;AAkBA,SAAS,oBAAoB,KAAA,EAAkD;AAC7E,EAAA,IAAI,CAAC,kBAAA,CAAmB,QAAA,CAAS,KAAyB,CAAA,EAAG;AAC3D,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,eAAA;AAAA,MACA,CAAA,wBAAA,EAA2B,mBAAmB,IAAA,CAAK,IAAI,CAAC,CAAA,MAAA,EAAS,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC,CAAA,CAAA;AAAA,KACxF;AAAA,EACF;AACF;AAEO,IAAM,aAAA,GAAN,cAA4B,KAAA,CAAM;AAAA,EAC9B,IAAA;AAAA,EACT,WAAA,CAAY,MAAc,OAAA,EAAiB;AACzC,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AAAA,EACd;AACF,CAAA;AAOO,SAAS,UAAU,GAAA,EAGxB;AACA,EAAA,OAAO;AAAA,IACL,OAAO,GAAA,CAAI,KAAA;AAAA,IACX,GAAI,IAAI,WAAA,GAAc,EAAE,aAAa,GAAA,CAAI,WAAA,KAAgB;AAAC,GAC5D;AACF;;;AC1GA,IAAO,kBAAQ,aAAA,CAA2E;AAAA,EACxF,EAAA,EAAI,6BAAA;AAAA,EACJ,WAAA,EAAa,kBAAA;AAAA,EAEb,OAAA,EAAS;AAAA,IACP,MAAM,MAAA,CAAO,IAAA,EAAuB,KAAA,EAAqB;AACvD,MAAA,MAAM,SAAA,GAAY,KAAA,CAAM,IAAA,GAAO,CAAC,CAAA,IAAK,WAAA;AACrC,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,mBAAmB,SAAS,CAAA,CAAA,CAAA;AAAA,QACrC,UAAA,EAAY,CAAC,EAAE,IAAA,EAAM,QAAA,EAAmB,QAAA,EAAU,QAAA,EAAU,OAAA,EAAS,EAAE,SAAA,EAAW,OAAA,EAAS,KAAA,IAAS;AAAA,OACtG;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,OAAA,CAAQ,GAAA,EAAsB,KAAA,EAAmF;AACrH,MAAA,MAAM,SAAA,GAAY,KAAA,CAAM,IAAA,GAAO,CAAC,CAAA;AAChC,MAAA,MAAM,KAAA,GAAS,MAAM,KAAA,IAAS,KAAA;AAE9B,MAAA,IAAI,CAAC,SAAA,EAAW;AACd,QAAA,eAAA,CAAgB,GAAA,EAAK,6BAAA,EAA+B,mDAAA,EAAqD,KAAA,CAAM,IAAI,CAAA;AACnH,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,0BAAA,EAA4B,MAAA,EAAQ,EAAE,SAAA,EAAW,EAAA,EAAI,KAAA,EAAO,EAAA,EAAG,EAAE;AAAA,MAC9F;AAEA,MAAA,IAAI,QAAA;AACJ,MAAA,IAAI;AACF,QAAA,QAAA,GAAW,MAAM,eAAA,CAAgB,GAAA,CAAI,GAAA,EAAK,MAAM,KAAK,CAAA;AAAA,MACvD,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,eAAe,aAAA,EAAe;AAChC,UAAA,eAAA,CAAgB,GAAA,EAAK,GAAA,CAAI,OAAA,EAAS,MAAA,EAAW,MAAM,IAAI,CAAA;AAAA,QACzD,CAAA,MAAO;AACL,UAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAAA,QAClC;AACA,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,GAAA,YAAe,QAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,GAAG,MAAA,EAAQ,EAAE,WAAW,EAAA,EAAI,KAAA,EAAO,IAAG,EAAE;AAAA,MACpH;AAEA,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,CAAK,qBAAqB,EAAE,SAAA,EAAW,GAAG,SAAA,CAAU,QAAQ,GAAG,CAAA;AACrE,QAAA,IAAI,MAAM,IAAA,EAAM;AACd,UAAA,GAAA,CAAI,EAAA,EAAI,OAAO,EAAE,EAAA,EAAI,MAAM,SAAA,EAAW,KAAA,EAAO,QAAA,CAAS,KAAA,EAAO,CAAA;AAAA,QAC/D,CAAA,MAAO;AACL,UAAA,GAAA,CAAI,IAAI,OAAA,GAAU,CAAA,SAAA,EAAY,SAAS,CAAA,EAAA,EAAK,QAAA,CAAS,KAAK,CAAA,CAAA,CAAG,CAAA;AAAA,QAC/D;AACA,QAAA,OAAO,EAAE,IAAI,IAAA,EAAM,MAAA,EAAQ,EAAE,SAAA,EAAW,KAAA,EAAO,QAAA,CAAS,KAAA,EAAM,EAAE;AAAA,MAClE,SAAS,GAAA,EAAK;AACZ,QAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAChC,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,GAAA,YAAe,QAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,GAAG,MAAA,EAAQ,EAAE,WAAW,EAAA,EAAI,KAAA,EAAO,IAAG,EAAE;AAAA,MACpH;AAAA,IACF;AAAA;AAEJ,CAAC","file":"disable.js","sourcesContent":["/**\n * HTTP client for marketplace service via Gateway.\n */\n\nimport { useEnv } from '@kb-labs/sdk';\nimport { CredentialsManager, SessionManager } from '@kb-labs/cli-runtime/gateway';\nimport type { GatewayCredentials, SessionCredentials } from '@kb-labs/cli-runtime/gateway';\n\nconst DEFAULT_GATEWAY_URL = 'http://127.0.0.1:4000';\nconst MARKETPLACE_PREFIX = '/api/v1/marketplace';\nconst FETCH_TIMEOUT_MS = 30_000;\n\ntype AuthState = {\n  gatewayUrl: string;\n  accessToken: string;\n  refresh: () => Promise<AuthState>;\n};\n\nasync function loadAuth(): Promise<AuthState | null> {\n  const sessionManager = new SessionManager();\n  const session = await sessionManager.load();\n  if (session) {\n    const current = sessionManager.isExpired(session) ? await sessionManager.refresh(session) : session;\n    return authState(current, () => sessionManager.refresh(current));\n  }\n\n  const credentialsManager = new CredentialsManager();\n  const credentials = await credentialsManager.load();\n  if (!credentials) {\n    return null;\n  }\n  const current = credentialsManager.isExpired(credentials) ? await credentialsManager.refresh(credentials) : credentials;\n  return authState(current, () => credentialsManager.refresh(current));\n}\n\nfunction authState(credentials: GatewayCredentials | SessionCredentials, refresh: () => Promise<GatewayCredentials | SessionCredentials>): AuthState {\n  return {\n    gatewayUrl: credentials.gatewayUrl,\n    accessToken: credentials.accessToken,\n    refresh: async () => {\n      const updated = await refresh();\n      return authState(updated, refresh);\n    },\n  };\n}\n\nfunction getBaseUrl(gatewayUrl?: string): string {\n  const marketplaceUrl = useEnv('KB_MARKETPLACE_URL');\n  if (marketplaceUrl) {\n    return `${marketplaceUrl}${MARKETPLACE_PREFIX}`;\n  }\n  const gateway = gatewayUrl ?? useEnv('KB_GATEWAY_URL') ?? DEFAULT_GATEWAY_URL;\n  return `${gateway}${MARKETPLACE_PREFIX}`;\n}\n\nasync function request<T>(method: string, path: string, body?: Record<string, unknown>, params?: Record<string, string>): Promise<T> {\n  let auth = await loadAuth();\n  const url = new URL(`${getBaseUrl(auth?.gatewayUrl)}${path}`);\n  if (params) {\n    for (const [key, value] of Object.entries(params)) { url.searchParams.set(key, value); }\n  }\n\n  for (let attempt = 0; attempt < 2; attempt += 1) {\n    const controller = new AbortController();\n    const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n    try {\n      const headers: Record<string, string> = {};\n      if (body) { headers['Content-Type'] = 'application/json'; }\n      if (auth) { headers.Authorization = `Bearer ${auth.accessToken}`; }\n      const response = await fetch(url.toString(), {\n        method,\n        headers,\n        body: body ? JSON.stringify(body) : undefined,\n        signal: controller.signal,\n      });\n      if (response.status === 401 && auth && attempt === 0) {\n        auth = await auth.refresh();\n        continue;\n      }\n      if (!response.ok) {\n        const text = await response.text();\n        throw new Error(`Marketplace ${path} failed (${response.status}): ${text}`);\n      }\n      if (response.status === 204) { return undefined as T; }\n      return await response.json() as T;\n    } catch (err) {\n      if ((err as Error).name === 'AbortError') {\n        throw new Error(`Marketplace ${path} timed out — is the marketplace service running? (kb-dev start marketplace)`);\n      }\n      throw err;\n    } finally {\n      clearTimeout(timer);\n    }\n  }\n  throw new Error(`Marketplace ${path} failed after refreshing authentication`);\n}\n\nexport async function post<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('POST', path, body);\n}\n\nexport async function patch<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('PATCH', path, body);\n}\n\nexport async function del<T = unknown>(path: string, body?: Record<string, unknown>): Promise<T> {\n  return request<T>('DELETE', path, body);\n}\n\nexport async function get<T = unknown>(path: string, params?: Record<string, string>): Promise<T> {\n  return request<T>('GET', path, undefined, params);\n}\n","/**\n * @module @kb-labs/marketplace-entry/scope\n *\n * Client-side scope resolution for marketplace CLI commands. Uses the\n * canonical `findProjectConfigRoot` helper from `@kb-labs/core-workspace`\n * so the detection rules (which filenames count, how walk-up stops) match\n * what the config loader and the marketplace daemon enforce.\n *\n * Rules:\n *  - `project` is the default if cwd (or any ancestor up to the filesystem\n *    root) contains `.kb/kb.config.{json,jsonc}`.\n *  - Otherwise the default is `platform`.\n *  - `--scope` always overrides detection.\n *  - For scope=\"project\" we return the absolute projectRoot so the daemon\n *    doesn't need to re-discover it.\n */\n\nimport { findProjectConfigRoot } from '@kb-labs/core-workspace';\nimport type { MarketplaceScope, MarketplaceQueryScope } from '@kb-labs/marketplace-contracts';\n\nexport const SCOPE_FLAG_CHOICES: readonly MarketplaceScope[] = ['platform', 'project'];\nexport const QUERY_SCOPE_FLAG_CHOICES: readonly MarketplaceQueryScope[] = ['platform', 'project', 'all'];\n\nexport interface ResolvedCliScope {\n  scope: MarketplaceScope;\n  projectRoot?: string;\n  /** How the scope was determined — surfaces in --verbose logs. */\n  reason: 'flag' | 'auto-detect' | 'fallback';\n}\n\nexport interface ResolvedCliQueryScope extends Omit<ResolvedCliScope, 'scope'> {\n  scope: MarketplaceQueryScope;\n}\n\n/**\n * Resolve the effective scope for a mutating command (`link`, `unlink`,\n * `install`, ...). `flag` is the value of `--scope` (if supplied). The\n * helper never returns `'all'` for mutating commands — callers restrict\n * choices via `SCOPE_FLAG_CHOICES`.\n */\nexport async function resolveCliScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliScope> {\n  if (flag) {\n    assertMutatingScope(flag);\n    if (flag === 'project') {\n      const projectRoot = await findProjectConfigRoot(cwd);\n      if (!projectRoot) {\n        throw new CliScopeError(\n          'SCOPE_PROJECT_ROOT_NOT_FOUND',\n          `--scope=project requires a .kb/kb.config.{json,jsonc} ancestor of ${cwd} — none found.`,\n        );\n      }\n      return { scope: 'project', projectRoot, reason: 'flag' };\n    }\n    return { scope: 'platform', reason: 'flag' };\n  }\n\n  const projectRoot = await findProjectConfigRoot(cwd);\n  if (projectRoot) {\n    return { scope: 'project', projectRoot, reason: 'auto-detect' };\n  }\n  return { scope: 'platform', reason: 'fallback' };\n}\n\n/**\n * Resolve the effective scope for a read-only command (`list`). Accepts\n * `'all'` as an explicit flag value.\n */\nexport async function resolveCliQueryScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliQueryScope> {\n  if (flag === 'all') {\n    const projectRoot = await findProjectConfigRoot(cwd);\n    return { scope: 'all', projectRoot, reason: 'flag' };\n  }\n  const base = await resolveCliScope(cwd, flag);\n  return { scope: base.scope, projectRoot: base.projectRoot, reason: base.reason };\n}\n\nfunction assertMutatingScope(value: string): asserts value is MarketplaceScope {\n  if (!SCOPE_FLAG_CHOICES.includes(value as MarketplaceScope)) {\n    throw new CliScopeError(\n      'SCOPE_INVALID',\n      `--scope must be one of: ${SCOPE_FLAG_CHOICES.join(', ')} (got ${JSON.stringify(value)})`,\n    );\n  }\n}\n\nexport class CliScopeError extends Error {\n  readonly code: string;\n  constructor(code: string, message: string) {\n    super(message);\n    this.code = code;\n    this.name = 'CliScopeError';\n  }\n}\n\n/**\n * Build the body-payload fragment expected by `parseMutatingScope` on the\n * API side: `{ scope, projectRoot? }`. Kept as a helper so every command\n * sends the same shape and nothing drifts out-of-sync with the server.\n */\nexport function scopeBody(ctx: ResolvedCliScope | ResolvedCliQueryScope): {\n  scope: MarketplaceScope | MarketplaceQueryScope;\n  projectRoot?: string;\n} {\n  return {\n    scope: ctx.scope,\n    ...(ctx.projectRoot ? { projectRoot: ctx.projectRoot } : {}),\n  };\n}\n","import { defineCommand, validationError, handleError, type PluginContextV3, type CommandResult } from '@kb-labs/sdk';\nimport { post } from '../../http.js';\nimport { resolveCliScope, scopeBody, CliScopeError } from '../../scope.js';\n\ninterface DisableFlags { json?: boolean; scope?: string; 'dry-run'?: boolean }\ninterface DisableInput { argv?: string[]; flags?: DisableFlags }\n\nexport default defineCommand<unknown, DisableInput, { packageId: string; scope: string }>({\n  id: 'marketplace:plugins:disable',\n  description: 'Disable a plugin',\n\n  handler: {\n    async intent(_ctx: PluginContextV3, input: DisableInput) {\n      const packageId = input.argv?.[0] ?? '(unknown)';\n      return {\n        summary: `Disable plugin \"${packageId}\"`,\n        operations: [{ type: 'update' as const, resource: 'plugin', details: { packageId, enabled: false } }],\n      };\n    },\n\n    async execute(ctx: PluginContextV3, input: DisableInput): Promise<CommandResult<{ packageId: string; scope: string }>> {\n      const packageId = input.argv?.[0];\n      const flags = (input.flags ?? input) as DisableFlags;\n\n      if (!packageId) {\n        validationError(ctx, 'Specify a plugin to disable', 'Usage: kb marketplace plugins disable <plugin-id>', flags.json);\n        return { ok: false, error: 'A package id is required', result: { packageId: '', scope: '' } };\n      }\n\n      let scopeCtx;\n      try {\n        scopeCtx = await resolveCliScope(ctx.cwd, flags.scope);\n      } catch (err) {\n        if (err instanceof CliScopeError) {\n          validationError(ctx, err.message, undefined, flags.json);\n        } else {\n          handleError(ctx, err, flags.json);\n        }\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { packageId: '', scope: '' } };\n      }\n\n      try {\n        await post(`/packages/disable`, { packageId, ...scopeBody(scopeCtx) });\n        if (flags.json) {\n          ctx.ui?.json?.({ ok: true, packageId, scope: scopeCtx.scope });\n        } else {\n          ctx.ui?.success?.(`Disabled ${packageId} (${scopeCtx.scope})`);\n        }\n        return { ok: true, result: { packageId, scope: scopeCtx.scope } };\n      } catch (err) {\n        handleError(ctx, err, flags.json);\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { packageId: '', scope: '' } };\n      }\n    },\n  },\n});\n"]}
+{"version":3,"sources":["../../../src/http.ts","../../../src/scope.ts","../../../src/commands/plugins/disable.ts"],"names":["current","projectRoot"],"mappings":";;;;;AAQA,IAAM,mBAAA,GAAsB,uBAAA;AAC5B,IAAM,kBAAA,GAAqB,qBAAA;AAC3B,IAAM,gBAAA,GAAmB,GAAA;AAQzB,eAAe,QAAA,GAAsC;AACnD,EAAA,MAAM,cAAA,GAAiB,IAAI,cAAA,EAAe;AAC1C,EAAA,MAAM,OAAA,GAAU,MAAM,cAAA,CAAe,IAAA,EAAK;AAC1C,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,MAAMA,QAAAA,GAAU,eAAe,SAAA,CAAU,OAAO,IAAI,MAAM,cAAA,CAAe,OAAA,CAAQ,OAAO,CAAA,GAAI,OAAA;AAC5F,IAAA,OAAO,UAAUA,QAAAA,EAAS,MAAM,cAAA,CAAe,OAAA,CAAQA,QAAO,CAAC,CAAA;AAAA,EACjE;AAEA,EAAA,MAAM,kBAAA,GAAqB,IAAI,kBAAA,EAAmB;AAClD,EAAA,MAAM,WAAA,GAAc,MAAM,kBAAA,CAAmB,IAAA,EAAK;AAClD,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,OAAA,GAAU,mBAAmB,SAAA,CAAU,WAAW,IAAI,MAAM,kBAAA,CAAmB,OAAA,CAAQ,WAAW,CAAA,GAAI,WAAA;AAC5G,EAAA,OAAO,UAAU,OAAA,EAAS,MAAM,kBAAA,CAAmB,OAAA,CAAQ,OAAO,CAAC,CAAA;AACrE;AAEA,SAAS,SAAA,CAAU,aAAsD,OAAA,EAA4E;AACnJ,EAAA,OAAO;AAAA,IACL,YAAY,WAAA,CAAY,UAAA;AAAA,IACxB,aAAa,WAAA,CAAY,WAAA;AAAA,IACzB,SAAS,YAAY;AACnB,MAAA,MAAM,OAAA,GAAU,MAAM,OAAA,EAAQ;AAC9B,MAAA,OAAO,SAAA,CAAU,SAAS,OAAO,CAAA;AAAA,IACnC;AAAA,GACF;AACF;AAEA,SAAS,WAAW,UAAA,EAA6B;AAC/C,EAAA,MAAM,cAAA,GAAiB,OAAO,oBAAoB,CAAA;AAClD,EAAA,IAAI,cAAA,EAAgB;AAClB,IAAA,OAAO,CAAA,EAAG,cAAc,CAAA,EAAG,kBAAkB,CAAA,CAAA;AAAA,EAC/C;AACA,EAAA,MAAM,OAAA,GAAU,UAAA,IAAc,MAAA,CAAO,gBAAgB,CAAA,IAAK,mBAAA;AAC1D,EAAA,OAAO,CAAA,EAAG,OAAO,CAAA,EAAG,kBAAkB,CAAA,CAAA;AACxC;AAEA,eAAe,OAAA,CAAW,MAAA,EAAgB,IAAA,EAAc,IAAA,EAAgC,MAAA,EAA6C;AACnI,EAAA,IAAI,IAAA,GAAO,MAAM,QAAA,EAAS;AAC1B,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,CAAA,EAAG,UAAA,CAAW,MAAM,UAAU,CAAC,CAAA,EAAG,IAAI,CAAA,CAAE,CAAA;AAK5D,EAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,GAAU,CAAA,EAAG,WAAW,CAAA,EAAG;AAC/C,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,gBAAgB,CAAA;AACnE,IAAA,IAAI;AACF,MAAA,MAAM,UAAkC,EAAC;AACzC,MAAA,IAAI,IAAA,EAAM;AAAE,QAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAAA,MAAoB;AAC1D,MAAA,IAAI,IAAA,EAAM;AAAE,QAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,IAAA,CAAK,WAAW,CAAA,CAAA;AAAA,MAAI;AAClE,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,CAAI,UAAS,EAAG;AAAA,QAC3C,MAAA;AAAA,QACA,OAAA;AAAA,QACA,IAAA,EAAM,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,GAAI,KAAA,CAAA;AAAA,QACpC,QAAQ,UAAA,CAAW;AAAA,OACpB,CAAA;AACD,MAAA,IAAI,QAAA,CAAS,MAAA,KAAW,GAAA,IAAO,IAAA,IAAQ,YAAY,CAAA,EAAG;AACpD,QAAA,IAAA,GAAO,MAAM,KAAK,OAAA,EAAQ;AAC1B,QAAA;AAAA,MACF;AACA,MAAA,IAAI,QAAA,CAAS,MAAA,KAAW,GAAA,IAAO,CAAC,IAAA,EAAM;AACpC,QAAA,MAAM,IAAI,MAAM,+GAA+G,CAAA;AAAA,MACjI;AACA,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,QAAA,MAAM,IAAI,MAAM,CAAA,YAAA,EAAe,IAAI,YAAY,QAAA,CAAS,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,CAAE,CAAA;AAAA,MAC5E;AACA,MAAA,IAAI,QAAA,CAAS,WAAW,GAAA,EAAK;AAAE,QAAA,OAAO,KAAA,CAAA;AAAA,MAAgB;AACtD,MAAA,OAAO,MAAM,SAAS,IAAA,EAAK;AAAA,IAC7B,SAAS,GAAA,EAAK;AACZ,MAAA,IAAK,GAAA,CAAc,SAAS,YAAA,EAAc;AACxC,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,gFAAA,CAA6E,CAAA;AAAA,MAClH;AACA,MAAA,MAAM,GAAA;AAAA,IACR,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAAA,IACpB;AAAA,EACF;AACA,EAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,uCAAA,CAAyC,CAAA;AAC9E;AAEA,eAAsB,IAAA,CAAkB,MAAc,IAAA,EAA2C;AAC/F,EAAA,OAAO,OAAA,CAAW,MAAA,EAAQ,IAAA,EAAM,IAAI,CAAA;AACtC;AClFO,IAAM,kBAAA,GAAkD,CAAC,UAAA,EAAY,SAAS,CAAA;AAoBrF,eAAsB,eAAA,CACpB,KACA,IAAA,EAC2B;AAC3B,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,mBAAA,CAAoB,IAAI,CAAA;AACxB,IAAA,IAAI,SAAS,SAAA,EAAW;AACtB,MAAA,MAAMC,YAAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,MAAA,IAAI,CAACA,YAAAA,EAAa;AAChB,QAAA,MAAM,IAAI,aAAA;AAAA,UACR,8BAAA;AAAA,UACA,qEAAqE,GAAG,CAAA,mBAAA;AAAA,SAC1E;AAAA,MACF;AACA,MAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAAA,YAAAA,EAAa,QAAQ,MAAA,EAAO;AAAA,IACzD;AACA,IAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,MAAA,EAAO;AAAA,EAC7C;AAEA,EAAA,MAAM,WAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAa,QAAQ,aAAA,EAAc;AAAA,EAChE;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,UAAA,EAAW;AACjD;AAkBA,SAAS,oBAAoB,KAAA,EAAkD;AAC7E,EAAA,IAAI,CAAC,kBAAA,CAAmB,QAAA,CAAS,KAAyB,CAAA,EAAG;AAC3D,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,eAAA;AAAA,MACA,CAAA,wBAAA,EAA2B,mBAAmB,IAAA,CAAK,IAAI,CAAC,CAAA,MAAA,EAAS,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC,CAAA,CAAA;AAAA,KACxF;AAAA,EACF;AACF;AAEO,IAAM,aAAA,GAAN,cAA4B,KAAA,CAAM;AAAA,EAC9B,IAAA;AAAA,EACT,WAAA,CAAY,MAAc,OAAA,EAAiB;AACzC,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AAAA,EACd;AACF,CAAA;AAOO,SAAS,UAAU,GAAA,EAGxB;AACA,EAAA,OAAO;AAAA,IACL,OAAO,GAAA,CAAI,KAAA;AAAA,IACX,GAAI,IAAI,WAAA,GAAc,EAAE,aAAa,GAAA,CAAI,WAAA,KAAgB;AAAC,GAC5D;AACF;;;AC1GA,IAAO,kBAAQ,aAAA,CAA2E;AAAA,EACxF,EAAA,EAAI,6BAAA;AAAA,EACJ,WAAA,EAAa,kBAAA;AAAA,EAEb,OAAA,EAAS;AAAA,IACP,MAAM,MAAA,CAAO,IAAA,EAAuB,KAAA,EAAqB;AACvD,MAAA,MAAM,SAAA,GAAY,KAAA,CAAM,IAAA,GAAO,CAAC,CAAA,IAAK,WAAA;AACrC,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,mBAAmB,SAAS,CAAA,CAAA,CAAA;AAAA,QACrC,UAAA,EAAY,CAAC,EAAE,IAAA,EAAM,QAAA,EAAmB,QAAA,EAAU,QAAA,EAAU,OAAA,EAAS,EAAE,SAAA,EAAW,OAAA,EAAS,KAAA,IAAS;AAAA,OACtG;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,OAAA,CAAQ,GAAA,EAAsB,KAAA,EAAmF;AACrH,MAAA,MAAM,SAAA,GAAY,KAAA,CAAM,IAAA,GAAO,CAAC,CAAA;AAChC,MAAA,MAAM,KAAA,GAAS,MAAM,KAAA,IAAS,KAAA;AAE9B,MAAA,IAAI,CAAC,SAAA,EAAW;AACd,QAAA,eAAA,CAAgB,GAAA,EAAK,6BAAA,EAA+B,mDAAA,EAAqD,KAAA,CAAM,IAAI,CAAA;AACnH,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,0BAAA,EAA4B,MAAA,EAAQ,EAAE,SAAA,EAAW,EAAA,EAAI,KAAA,EAAO,EAAA,EAAG,EAAE;AAAA,MAC9F;AAEA,MAAA,IAAI,QAAA;AACJ,MAAA,IAAI;AACF,QAAA,QAAA,GAAW,MAAM,eAAA,CAAgB,GAAA,CAAI,GAAA,EAAK,MAAM,KAAK,CAAA;AAAA,MACvD,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,eAAe,aAAA,EAAe;AAChC,UAAA,eAAA,CAAgB,GAAA,EAAK,GAAA,CAAI,OAAA,EAAS,MAAA,EAAW,MAAM,IAAI,CAAA;AAAA,QACzD,CAAA,MAAO;AACL,UAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAAA,QAClC;AACA,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,GAAA,YAAe,QAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,GAAG,MAAA,EAAQ,EAAE,WAAW,EAAA,EAAI,KAAA,EAAO,IAAG,EAAE;AAAA,MACpH;AAEA,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,CAAK,qBAAqB,EAAE,SAAA,EAAW,GAAG,SAAA,CAAU,QAAQ,GAAG,CAAA;AACrE,QAAA,IAAI,MAAM,IAAA,EAAM;AACd,UAAA,GAAA,CAAI,EAAA,EAAI,OAAO,EAAE,EAAA,EAAI,MAAM,SAAA,EAAW,KAAA,EAAO,QAAA,CAAS,KAAA,EAAO,CAAA;AAAA,QAC/D,CAAA,MAAO;AACL,UAAA,GAAA,CAAI,IAAI,OAAA,GAAU,CAAA,SAAA,EAAY,SAAS,CAAA,EAAA,EAAK,QAAA,CAAS,KAAK,CAAA,CAAA,CAAG,CAAA;AAAA,QAC/D;AACA,QAAA,OAAO,EAAE,IAAI,IAAA,EAAM,MAAA,EAAQ,EAAE,SAAA,EAAW,KAAA,EAAO,QAAA,CAAS,KAAA,EAAM,EAAE;AAAA,MAClE,SAAS,GAAA,EAAK;AACZ,QAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAChC,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,GAAA,YAAe,QAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,GAAG,MAAA,EAAQ,EAAE,WAAW,EAAA,EAAI,KAAA,EAAO,IAAG,EAAE;AAAA,MACpH;AAAA,IACF;AAAA;AAEJ,CAAC","file":"disable.js","sourcesContent":["/**\n * HTTP client for marketplace service via Gateway.\n */\n\nimport { useEnv } from '@kb-labs/sdk';\nimport { CredentialsManager, SessionManager } from '@kb-labs/cli-runtime/gateway';\nimport type { GatewayCredentials, SessionCredentials } from '@kb-labs/cli-runtime/gateway';\n\nconst DEFAULT_GATEWAY_URL = 'http://127.0.0.1:4000';\nconst MARKETPLACE_PREFIX = '/api/v1/marketplace';\nconst FETCH_TIMEOUT_MS = 30_000;\n\ntype AuthState = {\n  gatewayUrl: string;\n  accessToken: string;\n  refresh: () => Promise<AuthState>;\n};\n\nasync function loadAuth(): Promise<AuthState | null> {\n  const sessionManager = new SessionManager();\n  const session = await sessionManager.load();\n  if (session) {\n    const current = sessionManager.isExpired(session) ? await sessionManager.refresh(session) : session;\n    return authState(current, () => sessionManager.refresh(current));\n  }\n\n  const credentialsManager = new CredentialsManager();\n  const credentials = await credentialsManager.load();\n  if (!credentials) {\n    return null;\n  }\n  const current = credentialsManager.isExpired(credentials) ? await credentialsManager.refresh(credentials) : credentials;\n  return authState(current, () => credentialsManager.refresh(current));\n}\n\nfunction authState(credentials: GatewayCredentials | SessionCredentials, refresh: () => Promise<GatewayCredentials | SessionCredentials>): AuthState {\n  return {\n    gatewayUrl: credentials.gatewayUrl,\n    accessToken: credentials.accessToken,\n    refresh: async () => {\n      const updated = await refresh();\n      return authState(updated, refresh);\n    },\n  };\n}\n\nfunction getBaseUrl(gatewayUrl?: string): string {\n  const marketplaceUrl = useEnv('KB_MARKETPLACE_URL');\n  if (marketplaceUrl) {\n    return `${marketplaceUrl}${MARKETPLACE_PREFIX}`;\n  }\n  const gateway = gatewayUrl ?? useEnv('KB_GATEWAY_URL') ?? DEFAULT_GATEWAY_URL;\n  return `${gateway}${MARKETPLACE_PREFIX}`;\n}\n\nasync function request<T>(method: string, path: string, body?: Record<string, unknown>, params?: Record<string, string>): Promise<T> {\n  let auth = await loadAuth();\n  const url = new URL(`${getBaseUrl(auth?.gatewayUrl)}${path}`);\n  if (params) {\n    for (const [key, value] of Object.entries(params)) { url.searchParams.set(key, value); }\n  }\n\n  for (let attempt = 0; attempt < 2; attempt += 1) {\n    const controller = new AbortController();\n    const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n    try {\n      const headers: Record<string, string> = {};\n      if (body) { headers['Content-Type'] = 'application/json'; }\n      if (auth) { headers.Authorization = `Bearer ${auth.accessToken}`; }\n      const response = await fetch(url.toString(), {\n        method,\n        headers,\n        body: body ? JSON.stringify(body) : undefined,\n        signal: controller.signal,\n      });\n      if (response.status === 401 && auth && attempt === 0) {\n        auth = await auth.refresh();\n        continue;\n      }\n      if (response.status === 401 && !auth) {\n        throw new Error('Marketplace authentication is required. Run `kb auth login` or choose local no-auth mode during installation.');\n      }\n      if (!response.ok) {\n        const text = await response.text();\n        throw new Error(`Marketplace ${path} failed (${response.status}): ${text}`);\n      }\n      if (response.status === 204) { return undefined as T; }\n      return await response.json() as T;\n    } catch (err) {\n      if ((err as Error).name === 'AbortError') {\n        throw new Error(`Marketplace ${path} timed out — is the marketplace service running? (kb-dev start marketplace)`);\n      }\n      throw err;\n    } finally {\n      clearTimeout(timer);\n    }\n  }\n  throw new Error(`Marketplace ${path} failed after refreshing authentication`);\n}\n\nexport async function post<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('POST', path, body);\n}\n\nexport async function patch<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('PATCH', path, body);\n}\n\nexport async function del<T = unknown>(path: string, body?: Record<string, unknown>): Promise<T> {\n  return request<T>('DELETE', path, body);\n}\n\nexport async function get<T = unknown>(path: string, params?: Record<string, string>): Promise<T> {\n  return request<T>('GET', path, undefined, params);\n}\n","/**\n * @module @kb-labs/marketplace-entry/scope\n *\n * Client-side scope resolution for marketplace CLI commands. Uses the\n * canonical `findProjectConfigRoot` helper from `@kb-labs/core-workspace`\n * so the detection rules (which filenames count, how walk-up stops) match\n * what the config loader and the marketplace daemon enforce.\n *\n * Rules:\n *  - `project` is the default if cwd (or any ancestor up to the filesystem\n *    root) contains `.kb/kb.config.{json,jsonc}`.\n *  - Otherwise the default is `platform`.\n *  - `--scope` always overrides detection.\n *  - For scope=\"project\" we return the absolute projectRoot so the daemon\n *    doesn't need to re-discover it.\n */\n\nimport { findProjectConfigRoot } from '@kb-labs/core-workspace';\nimport type { MarketplaceScope, MarketplaceQueryScope } from '@kb-labs/marketplace-contracts';\n\nexport const SCOPE_FLAG_CHOICES: readonly MarketplaceScope[] = ['platform', 'project'];\nexport const QUERY_SCOPE_FLAG_CHOICES: readonly MarketplaceQueryScope[] = ['platform', 'project', 'all'];\n\nexport interface ResolvedCliScope {\n  scope: MarketplaceScope;\n  projectRoot?: string;\n  /** How the scope was determined — surfaces in --verbose logs. */\n  reason: 'flag' | 'auto-detect' | 'fallback';\n}\n\nexport interface ResolvedCliQueryScope extends Omit<ResolvedCliScope, 'scope'> {\n  scope: MarketplaceQueryScope;\n}\n\n/**\n * Resolve the effective scope for a mutating command (`link`, `unlink`,\n * `install`, ...). `flag` is the value of `--scope` (if supplied). The\n * helper never returns `'all'` for mutating commands — callers restrict\n * choices via `SCOPE_FLAG_CHOICES`.\n */\nexport async function resolveCliScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliScope> {\n  if (flag) {\n    assertMutatingScope(flag);\n    if (flag === 'project') {\n      const projectRoot = await findProjectConfigRoot(cwd);\n      if (!projectRoot) {\n        throw new CliScopeError(\n          'SCOPE_PROJECT_ROOT_NOT_FOUND',\n          `--scope=project requires a .kb/kb.config.{json,jsonc} ancestor of ${cwd} — none found.`,\n        );\n      }\n      return { scope: 'project', projectRoot, reason: 'flag' };\n    }\n    return { scope: 'platform', reason: 'flag' };\n  }\n\n  const projectRoot = await findProjectConfigRoot(cwd);\n  if (projectRoot) {\n    return { scope: 'project', projectRoot, reason: 'auto-detect' };\n  }\n  return { scope: 'platform', reason: 'fallback' };\n}\n\n/**\n * Resolve the effective scope for a read-only command (`list`). Accepts\n * `'all'` as an explicit flag value.\n */\nexport async function resolveCliQueryScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliQueryScope> {\n  if (flag === 'all') {\n    const projectRoot = await findProjectConfigRoot(cwd);\n    return { scope: 'all', projectRoot, reason: 'flag' };\n  }\n  const base = await resolveCliScope(cwd, flag);\n  return { scope: base.scope, projectRoot: base.projectRoot, reason: base.reason };\n}\n\nfunction assertMutatingScope(value: string): asserts value is MarketplaceScope {\n  if (!SCOPE_FLAG_CHOICES.includes(value as MarketplaceScope)) {\n    throw new CliScopeError(\n      'SCOPE_INVALID',\n      `--scope must be one of: ${SCOPE_FLAG_CHOICES.join(', ')} (got ${JSON.stringify(value)})`,\n    );\n  }\n}\n\nexport class CliScopeError extends Error {\n  readonly code: string;\n  constructor(code: string, message: string) {\n    super(message);\n    this.code = code;\n    this.name = 'CliScopeError';\n  }\n}\n\n/**\n * Build the body-payload fragment expected by `parseMutatingScope` on the\n * API side: `{ scope, projectRoot? }`. Kept as a helper so every command\n * sends the same shape and nothing drifts out-of-sync with the server.\n */\nexport function scopeBody(ctx: ResolvedCliScope | ResolvedCliQueryScope): {\n  scope: MarketplaceScope | MarketplaceQueryScope;\n  projectRoot?: string;\n} {\n  return {\n    scope: ctx.scope,\n    ...(ctx.projectRoot ? { projectRoot: ctx.projectRoot } : {}),\n  };\n}\n","import { defineCommand, validationError, handleError, type PluginContextV3, type CommandResult } from '@kb-labs/sdk';\nimport { post } from '../../http.js';\nimport { resolveCliScope, scopeBody, CliScopeError } from '../../scope.js';\n\ninterface DisableFlags { json?: boolean; scope?: string; 'dry-run'?: boolean }\ninterface DisableInput { argv?: string[]; flags?: DisableFlags }\n\nexport default defineCommand<unknown, DisableInput, { packageId: string; scope: string }>({\n  id: 'marketplace:plugins:disable',\n  description: 'Disable a plugin',\n\n  handler: {\n    async intent(_ctx: PluginContextV3, input: DisableInput) {\n      const packageId = input.argv?.[0] ?? '(unknown)';\n      return {\n        summary: `Disable plugin \"${packageId}\"`,\n        operations: [{ type: 'update' as const, resource: 'plugin', details: { packageId, enabled: false } }],\n      };\n    },\n\n    async execute(ctx: PluginContextV3, input: DisableInput): Promise<CommandResult<{ packageId: string; scope: string }>> {\n      const packageId = input.argv?.[0];\n      const flags = (input.flags ?? input) as DisableFlags;\n\n      if (!packageId) {\n        validationError(ctx, 'Specify a plugin to disable', 'Usage: kb marketplace plugins disable <plugin-id>', flags.json);\n        return { ok: false, error: 'A package id is required', result: { packageId: '', scope: '' } };\n      }\n\n      let scopeCtx;\n      try {\n        scopeCtx = await resolveCliScope(ctx.cwd, flags.scope);\n      } catch (err) {\n        if (err instanceof CliScopeError) {\n          validationError(ctx, err.message, undefined, flags.json);\n        } else {\n          handleError(ctx, err, flags.json);\n        }\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { packageId: '', scope: '' } };\n      }\n\n      try {\n        await post(`/packages/disable`, { packageId, ...scopeBody(scopeCtx) });\n        if (flags.json) {\n          ctx.ui?.json?.({ ok: true, packageId, scope: scopeCtx.scope });\n        } else {\n          ctx.ui?.success?.(`Disabled ${packageId} (${scopeCtx.scope})`);\n        }\n        return { ok: true, result: { packageId, scope: scopeCtx.scope } };\n      } catch (err) {\n        handleError(ctx, err, flags.json);\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { packageId: '', scope: '' } };\n      }\n    },\n  },\n});\n"]}

package/dist/commands/plugins/doctor.js

@@ -66,6 +66,9 @@ async function request(method, path, body, params) {
         auth = await auth.refresh();
         continue;
       }
+      if (response.status === 401 && !auth) {
+        throw new Error("Marketplace authentication is required. Run `kb auth login` or choose local no-auth mode during installation.");
+      }
       if (!response.ok) {
         const text = await response.text();
         throw new Error(`Marketplace ${path} failed (${response.status}): ${text}`);

package/dist/commands/plugins/doctor.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/http.ts","../../../src/scope.ts","../../../src/commands/plugins/doctor.ts"],"names":["current","projectRoot"],"mappings":";;;;;AAQA,IAAM,mBAAA,GAAsB,uBAAA;AAC5B,IAAM,kBAAA,GAAqB,qBAAA;AAC3B,IAAM,gBAAA,GAAmB,GAAA;AAQzB,eAAe,QAAA,GAAsC;AACnD,EAAA,MAAM,cAAA,GAAiB,IAAI,cAAA,EAAe;AAC1C,EAAA,MAAM,OAAA,GAAU,MAAM,cAAA,CAAe,IAAA,EAAK;AAC1C,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,MAAMA,QAAAA,GAAU,eAAe,SAAA,CAAU,OAAO,IAAI,MAAM,cAAA,CAAe,OAAA,CAAQ,OAAO,CAAA,GAAI,OAAA;AAC5F,IAAA,OAAO,UAAUA,QAAAA,EAAS,MAAM,cAAA,CAAe,OAAA,CAAQA,QAAO,CAAC,CAAA;AAAA,EACjE;AAEA,EAAA,MAAM,kBAAA,GAAqB,IAAI,kBAAA,EAAmB;AAClD,EAAA,MAAM,WAAA,GAAc,MAAM,kBAAA,CAAmB,IAAA,EAAK;AAClD,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,OAAA,GAAU,mBAAmB,SAAA,CAAU,WAAW,IAAI,MAAM,kBAAA,CAAmB,OAAA,CAAQ,WAAW,CAAA,GAAI,WAAA;AAC5G,EAAA,OAAO,UAAU,OAAA,EAAS,MAAM,kBAAA,CAAmB,OAAA,CAAQ,OAAO,CAAC,CAAA;AACrE;AAEA,SAAS,SAAA,CAAU,aAAsD,OAAA,EAA4E;AACnJ,EAAA,OAAO;AAAA,IACL,YAAY,WAAA,CAAY,UAAA;AAAA,IACxB,aAAa,WAAA,CAAY,WAAA;AAAA,IACzB,SAAS,YAAY;AACnB,MAAA,MAAM,OAAA,GAAU,MAAM,OAAA,EAAQ;AAC9B,MAAA,OAAO,SAAA,CAAU,SAAS,OAAO,CAAA;AAAA,IACnC;AAAA,GACF;AACF;AAEA,SAAS,WAAW,UAAA,EAA6B;AAC/C,EAAA,MAAM,cAAA,GAAiB,OAAO,oBAAoB,CAAA;AAClD,EAAA,IAAI,cAAA,EAAgB;AAClB,IAAA,OAAO,CAAA,EAAG,cAAc,CAAA,EAAG,kBAAkB,CAAA,CAAA;AAAA,EAC/C;AACA,EAAA,MAAM,OAAA,GAAU,UAAA,IAAc,MAAA,CAAO,gBAAgB,CAAA,IAAK,mBAAA;AAC1D,EAAA,OAAO,CAAA,EAAG,OAAO,CAAA,EAAG,kBAAkB,CAAA,CAAA;AACxC;AAEA,eAAe,OAAA,CAAW,MAAA,EAAgB,IAAA,EAAc,IAAA,EAAgC,MAAA,EAA6C;AACnI,EAAA,IAAI,IAAA,GAAO,MAAM,QAAA,EAAS;AAC1B,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,CAAA,EAAG,UAAA,CAAW,MAAM,UAAU,CAAC,CAAA,EAAG,IAAI,CAAA,CAAE,CAAA;AAC5D,EAAA,IAAI,MAAA,EAAQ;AACV,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,EAAG;AAAE,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,GAAA,EAAK,KAAK,CAAA;AAAA,IAAG;AAAA,EACzF;AAEA,EAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,GAAU,CAAA,EAAG,WAAW,CAAA,EAAG;AAC/C,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,gBAAgB,CAAA;AACnE,IAAA,IAAI;AACF,MAAA,MAAM,UAAkC,EAAC;AACzC,MAAA,IAAI,IAAA,EAAM;AACV,MAAA,IAAI,IAAA,EAAM;AAAE,QAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,IAAA,CAAK,WAAW,CAAA,CAAA;AAAA,MAAI;AAClE,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,CAAI,UAAS,EAAG;AAAA,QAC3C,MAAA;AAAA,QACA,OAAA;AAAA,QACA,IAAA,EAAM,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,GAAI,KAAA,CAAA;AAAA,QACpC,QAAQ,UAAA,CAAW;AAAA,OACpB,CAAA;AACD,MAAA,IAAI,QAAA,CAAS,MAAA,KAAW,GAAA,IAAO,IAAA,IAAQ,YAAY,CAAA,EAAG;AACpD,QAAA,IAAA,GAAO,MAAM,KAAK,OAAA,EAAQ;AAC1B,QAAA;AAAA,MACF;AACA,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,QAAA,MAAM,IAAI,MAAM,CAAA,YAAA,EAAe,IAAI,YAAY,QAAA,CAAS,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,CAAE,CAAA;AAAA,MAC5E;AACA,MAAA,IAAI,QAAA,CAAS,WAAW,GAAA,EAAK;AAAE,QAAA,OAAO,KAAA,CAAA;AAAA,MAAgB;AACtD,MAAA,OAAO,MAAM,SAAS,IAAA,EAAK;AAAA,IAC7B,SAAS,GAAA,EAAK;AACZ,MAAA,IAAK,GAAA,CAAc,SAAS,YAAA,EAAc;AACxC,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,gFAAA,CAA6E,CAAA;AAAA,MAClH;AACA,MAAA,MAAM,GAAA;AAAA,IACR,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAAA,IACpB;AAAA,EACF;AACA,EAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,uCAAA,CAAyC,CAAA;AAC9E;AAcA,eAAsB,GAAA,CAAiB,MAAc,MAAA,EAA6C;AAChG,EAAA,OAAO,OAAA,CAAW,KAAA,EAAO,IAAA,EAAM,MAAA,EAAW,MAAM,CAAA;AAClD;AC3FO,IAAM,kBAAA,GAAkD,CAAC,UAAA,EAAY,SAAS,CAAA;AAoBrF,eAAsB,eAAA,CACpB,KACA,IAAA,EAC2B;AAC3B,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,mBAAA,CAAoB,IAAI,CAAA;AACxB,IAAA,IAAI,SAAS,SAAA,EAAW;AACtB,MAAA,MAAMC,YAAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,MAAA,IAAI,CAACA,YAAAA,EAAa;AAChB,QAAA,MAAM,IAAI,aAAA;AAAA,UACR,8BAAA;AAAA,UACA,qEAAqE,GAAG,CAAA,mBAAA;AAAA,SAC1E;AAAA,MACF;AACA,MAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAAA,YAAAA,EAAa,QAAQ,MAAA,EAAO;AAAA,IACzD;AACA,IAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,MAAA,EAAO;AAAA,EAC7C;AAEA,EAAA,MAAM,WAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAa,QAAQ,aAAA,EAAc;AAAA,EAChE;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,UAAA,EAAW;AACjD;AAkBA,SAAS,oBAAoB,KAAA,EAAkD;AAC7E,EAAA,IAAI,CAAC,kBAAA,CAAmB,QAAA,CAAS,KAAyB,CAAA,EAAG;AAC3D,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,eAAA;AAAA,MACA,CAAA,wBAAA,EAA2B,mBAAmB,IAAA,CAAK,IAAI,CAAC,CAAA,MAAA,EAAS,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC,CAAA,CAAA;AAAA,KACxF;AAAA,EACF;AACF;AAEO,IAAM,aAAA,GAAN,cAA4B,KAAA,CAAM;AAAA,EAC9B,IAAA;AAAA,EACT,WAAA,CAAY,MAAc,OAAA,EAAiB;AACzC,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AAAA,EACd;AACF,CAAA;;;AC9EA,IAAO,iBAAQ,aAAA,CAAsD;AAAA,EACnE,EAAA,EAAI,4BAAA;AAAA,EACJ,WAAA,EAAa,6BAAA;AAAA,EAEb,OAAA,EAAS;AAAA,IACP,MAAM,OAAA,CAAQ,GAAA,EAAsB,KAAA,EAA8D;AAChG,MAAA,MAAM,KAAA,GAAS,MAAM,KAAA,IAAS,KAAA;AAE9B,MAAA,IAAI,QAAA;AACJ,MAAA,IAAI;AACF,QAAA,QAAA,GAAW,MAAM,eAAA,CAAgB,GAAA,CAAI,GAAA,EAAK,MAAM,KAAK,CAAA;AAAA,MACvD,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,eAAe,aAAA,EAAe;AAChC,UAAA,eAAA,CAAgB,GAAA,EAAK,GAAA,CAAI,OAAA,EAAS,MAAA,EAAW,MAAM,IAAI,CAAA;AAAA,QACzD,CAAA,MAAO;AACL,UAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAAA,QAClC;AACA,QAAA,OAAO,EAAE,IAAI,KAAA,EAAO,KAAA,EAAO,eAAe,KAAA,GAAQ,GAAA,CAAI,UAAU,MAAA,CAAO,GAAG,GAAG,MAAA,EAAQ,EAAE,IAAI,KAAA,EAAO,KAAA,EAAO,GAAG,MAAA,EAAQ,IAAG,EAAE;AAAA,MAC3H;AAEA,MAAA,IAAI;AACF,QAAA,MAAM,KAAA,GAAgC,EAAE,KAAA,EAAO,QAAA,CAAS,KAAA,EAAM;AAC9D,QAAA,IAAI,SAAS,WAAA,EAAa;AAAE,UAAA,KAAA,CAAM,cAAc,QAAA,CAAS,WAAA;AAAA,QAAa;AACtE,QAAA,MAAM,MAAA,GAAS,MAAM,GAAA,CAAsB,cAAA,EAAgB,KAAK,CAAA;AAEhE,QAAA,IAAI,MAAM,IAAA,EAAM;AACd,UAAA,GAAA,CAAI,EAAA,EAAI,OAAO,MAAM,CAAA;AAAA,QACvB,CAAA,MAAA,IAAW,MAAA,CAAO,MAAA,CAAO,MAAA,KAAW,CAAA,EAAG;AACrC,UAAA,GAAA,CAAI,EAAA,EAAI,UAAU,CAAA,IAAA,EAAO,MAAA,CAAO,KAAK,CAAA,mBAAA,EAAsB,QAAA,CAAS,KAAK,CAAA,CAAA,CAAG,CAAA;AAAA,QAC9E,CAAA,MAAO;AACL,UAAA,MAAM,SAAS,MAAA,CAAO,MAAA,CAAO,OAAO,CAAA,CAAA,KAAK,CAAA,CAAE,aAAa,OAAO,CAAA;AAC/D,UAAA,GAAA,CAAI,EAAA,EAAI,IAAA,GAAO,CAAA,oBAAA,EAAuB,QAAA,CAAS,KAAK,CAAA,CAAA,CAAA,EAAK;AAAA,YACvD,QAAA,EAAU;AAAA,cACR,EAAE,MAAA,EAAQ,SAAA,EAAW,OAAO,CAAC,CAAA,OAAA,EAAU,OAAO,KAAK,CAAA,CAAA,EAAI,CAAA,QAAA,EAAW,MAAA,CAAO,OAAO,MAAM,CAAA,CAAA,EAAI,WAAW,MAAA,CAAO,MAAM,EAAE,CAAA,EAAE;AAAA,cACtH,EAAE,QAAQ,QAAA,EAAU,KAAA,EAAO,OAAO,MAAA,CAAO,GAAA,CAAI,OAAK,CAAA,EAAG,CAAA,CAAE,aAAa,OAAA,GAAU,QAAA,GAAM,QAAG,CAAA,CAAA,EAAI,CAAA,CAAE,SAAS,CAAA,EAAA,EAAK,CAAA,CAAE,OAAO,CAAA,CAAE,CAAA;AAAE;AAC1H,WACD,CAAA;AAAA,QACH;AAEA,QAAA,OAAO,MAAA,CAAO,EAAA,GAAK,EAAE,EAAA,EAAI,MAAM,MAAA,EAAQ,MAAA,EAAO,GAAI,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,iCAAA,EAAmC,QAAQ,MAAA,EAAO;AAAA,MAC1H,SAAS,GAAA,EAAK;AACZ,QAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAChC,QAAA,OAAO,EAAE,IAAI,KAAA,EAAO,KAAA,EAAO,eAAe,KAAA,GAAQ,GAAA,CAAI,UAAU,MAAA,CAAO,GAAG,GAAG,MAAA,EAAQ,EAAE,IAAI,KAAA,EAAO,KAAA,EAAO,GAAG,MAAA,EAAQ,IAAG,EAAE;AAAA,MAC3H;AAAA,IACF;AAAA;AAEJ,CAAC","file":"doctor.js","sourcesContent":["/**\n * HTTP client for marketplace service via Gateway.\n */\n\nimport { useEnv } from '@kb-labs/sdk';\nimport { CredentialsManager, SessionManager } from '@kb-labs/cli-runtime/gateway';\nimport type { GatewayCredentials, SessionCredentials } from '@kb-labs/cli-runtime/gateway';\n\nconst DEFAULT_GATEWAY_URL = 'http://127.0.0.1:4000';\nconst MARKETPLACE_PREFIX = '/api/v1/marketplace';\nconst FETCH_TIMEOUT_MS = 30_000;\n\ntype AuthState = {\n  gatewayUrl: string;\n  accessToken: string;\n  refresh: () => Promise<AuthState>;\n};\n\nasync function loadAuth(): Promise<AuthState | null> {\n  const sessionManager = new SessionManager();\n  const session = await sessionManager.load();\n  if (session) {\n    const current = sessionManager.isExpired(session) ? await sessionManager.refresh(session) : session;\n    return authState(current, () => sessionManager.refresh(current));\n  }\n\n  const credentialsManager = new CredentialsManager();\n  const credentials = await credentialsManager.load();\n  if (!credentials) {\n    return null;\n  }\n  const current = credentialsManager.isExpired(credentials) ? await credentialsManager.refresh(credentials) : credentials;\n  return authState(current, () => credentialsManager.refresh(current));\n}\n\nfunction authState(credentials: GatewayCredentials | SessionCredentials, refresh: () => Promise<GatewayCredentials | SessionCredentials>): AuthState {\n  return {\n    gatewayUrl: credentials.gatewayUrl,\n    accessToken: credentials.accessToken,\n    refresh: async () => {\n      const updated = await refresh();\n      return authState(updated, refresh);\n    },\n  };\n}\n\nfunction getBaseUrl(gatewayUrl?: string): string {\n  const marketplaceUrl = useEnv('KB_MARKETPLACE_URL');\n  if (marketplaceUrl) {\n    return `${marketplaceUrl}${MARKETPLACE_PREFIX}`;\n  }\n  const gateway = gatewayUrl ?? useEnv('KB_GATEWAY_URL') ?? DEFAULT_GATEWAY_URL;\n  return `${gateway}${MARKETPLACE_PREFIX}`;\n}\n\nasync function request<T>(method: string, path: string, body?: Record<string, unknown>, params?: Record<string, string>): Promise<T> {\n  let auth = await loadAuth();\n  const url = new URL(`${getBaseUrl(auth?.gatewayUrl)}${path}`);\n  if (params) {\n    for (const [key, value] of Object.entries(params)) { url.searchParams.set(key, value); }\n  }\n\n  for (let attempt = 0; attempt < 2; attempt += 1) {\n    const controller = new AbortController();\n    const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n    try {\n      const headers: Record<string, string> = {};\n      if (body) { headers['Content-Type'] = 'application/json'; }\n      if (auth) { headers.Authorization = `Bearer ${auth.accessToken}`; }\n      const response = await fetch(url.toString(), {\n        method,\n        headers,\n        body: body ? JSON.stringify(body) : undefined,\n        signal: controller.signal,\n      });\n      if (response.status === 401 && auth && attempt === 0) {\n        auth = await auth.refresh();\n        continue;\n      }\n      if (!response.ok) {\n        const text = await response.text();\n        throw new Error(`Marketplace ${path} failed (${response.status}): ${text}`);\n      }\n      if (response.status === 204) { return undefined as T; }\n      return await response.json() as T;\n    } catch (err) {\n      if ((err as Error).name === 'AbortError') {\n        throw new Error(`Marketplace ${path} timed out — is the marketplace service running? (kb-dev start marketplace)`);\n      }\n      throw err;\n    } finally {\n      clearTimeout(timer);\n    }\n  }\n  throw new Error(`Marketplace ${path} failed after refreshing authentication`);\n}\n\nexport async function post<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('POST', path, body);\n}\n\nexport async function patch<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('PATCH', path, body);\n}\n\nexport async function del<T = unknown>(path: string, body?: Record<string, unknown>): Promise<T> {\n  return request<T>('DELETE', path, body);\n}\n\nexport async function get<T = unknown>(path: string, params?: Record<string, string>): Promise<T> {\n  return request<T>('GET', path, undefined, params);\n}\n","/**\n * @module @kb-labs/marketplace-entry/scope\n *\n * Client-side scope resolution for marketplace CLI commands. Uses the\n * canonical `findProjectConfigRoot` helper from `@kb-labs/core-workspace`\n * so the detection rules (which filenames count, how walk-up stops) match\n * what the config loader and the marketplace daemon enforce.\n *\n * Rules:\n *  - `project` is the default if cwd (or any ancestor up to the filesystem\n *    root) contains `.kb/kb.config.{json,jsonc}`.\n *  - Otherwise the default is `platform`.\n *  - `--scope` always overrides detection.\n *  - For scope=\"project\" we return the absolute projectRoot so the daemon\n *    doesn't need to re-discover it.\n */\n\nimport { findProjectConfigRoot } from '@kb-labs/core-workspace';\nimport type { MarketplaceScope, MarketplaceQueryScope } from '@kb-labs/marketplace-contracts';\n\nexport const SCOPE_FLAG_CHOICES: readonly MarketplaceScope[] = ['platform', 'project'];\nexport const QUERY_SCOPE_FLAG_CHOICES: readonly MarketplaceQueryScope[] = ['platform', 'project', 'all'];\n\nexport interface ResolvedCliScope {\n  scope: MarketplaceScope;\n  projectRoot?: string;\n  /** How the scope was determined — surfaces in --verbose logs. */\n  reason: 'flag' | 'auto-detect' | 'fallback';\n}\n\nexport interface ResolvedCliQueryScope extends Omit<ResolvedCliScope, 'scope'> {\n  scope: MarketplaceQueryScope;\n}\n\n/**\n * Resolve the effective scope for a mutating command (`link`, `unlink`,\n * `install`, ...). `flag` is the value of `--scope` (if supplied). The\n * helper never returns `'all'` for mutating commands — callers restrict\n * choices via `SCOPE_FLAG_CHOICES`.\n */\nexport async function resolveCliScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliScope> {\n  if (flag) {\n    assertMutatingScope(flag);\n    if (flag === 'project') {\n      const projectRoot = await findProjectConfigRoot(cwd);\n      if (!projectRoot) {\n        throw new CliScopeError(\n          'SCOPE_PROJECT_ROOT_NOT_FOUND',\n          `--scope=project requires a .kb/kb.config.{json,jsonc} ancestor of ${cwd} — none found.`,\n        );\n      }\n      return { scope: 'project', projectRoot, reason: 'flag' };\n    }\n    return { scope: 'platform', reason: 'flag' };\n  }\n\n  const projectRoot = await findProjectConfigRoot(cwd);\n  if (projectRoot) {\n    return { scope: 'project', projectRoot, reason: 'auto-detect' };\n  }\n  return { scope: 'platform', reason: 'fallback' };\n}\n\n/**\n * Resolve the effective scope for a read-only command (`list`). Accepts\n * `'all'` as an explicit flag value.\n */\nexport async function resolveCliQueryScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliQueryScope> {\n  if (flag === 'all') {\n    const projectRoot = await findProjectConfigRoot(cwd);\n    return { scope: 'all', projectRoot, reason: 'flag' };\n  }\n  const base = await resolveCliScope(cwd, flag);\n  return { scope: base.scope, projectRoot: base.projectRoot, reason: base.reason };\n}\n\nfunction assertMutatingScope(value: string): asserts value is MarketplaceScope {\n  if (!SCOPE_FLAG_CHOICES.includes(value as MarketplaceScope)) {\n    throw new CliScopeError(\n      'SCOPE_INVALID',\n      `--scope must be one of: ${SCOPE_FLAG_CHOICES.join(', ')} (got ${JSON.stringify(value)})`,\n    );\n  }\n}\n\nexport class CliScopeError extends Error {\n  readonly code: string;\n  constructor(code: string, message: string) {\n    super(message);\n    this.code = code;\n    this.name = 'CliScopeError';\n  }\n}\n\n/**\n * Build the body-payload fragment expected by `parseMutatingScope` on the\n * API side: `{ scope, projectRoot? }`. Kept as a helper so every command\n * sends the same shape and nothing drifts out-of-sync with the server.\n */\nexport function scopeBody(ctx: ResolvedCliScope | ResolvedCliQueryScope): {\n  scope: MarketplaceScope | MarketplaceQueryScope;\n  projectRoot?: string;\n} {\n  return {\n    scope: ctx.scope,\n    ...(ctx.projectRoot ? { projectRoot: ctx.projectRoot } : {}),\n  };\n}\n","import { defineCommand, handleError, validationError, type PluginContextV3, type CommandResult } from '@kb-labs/sdk';\nimport { get } from '../../http.js';\nimport { resolveCliScope, CliScopeError } from '../../scope.js';\n\ninterface DoctorFlags { json?: boolean; scope?: string }\ninterface DoctorInput { flags?: DoctorFlags }\n\ninterface DoctorIssue {\n  severity: string;\n  packageId: string;\n  message: string;\n  remediation?: string;\n}\n\ninterface DoctorResultData {\n  ok: boolean;\n  total: number;\n  issues: DoctorIssue[];\n}\n\nexport default defineCommand<unknown, DoctorInput, DoctorResultData>({\n  id: 'marketplace:plugins:doctor',\n  description: 'Diagnose marketplace health',\n\n  handler: {\n    async execute(ctx: PluginContextV3, input: DoctorInput): Promise<CommandResult<DoctorResultData>> {\n      const flags = (input.flags ?? input) as DoctorFlags;\n\n      let scopeCtx;\n      try {\n        scopeCtx = await resolveCliScope(ctx.cwd, flags.scope);\n      } catch (err) {\n        if (err instanceof CliScopeError) {\n          validationError(ctx, err.message, undefined, flags.json);\n        } else {\n          handleError(ctx, err, flags.json);\n        }\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { ok: false, total: 0, issues: [] } };\n      }\n\n      try {\n        const query: Record<string, string> = { scope: scopeCtx.scope };\n        if (scopeCtx.projectRoot) { query.projectRoot = scopeCtx.projectRoot; }\n        const report = await get<DoctorResultData>('/diagnostics', query);\n\n        if (flags.json) {\n          ctx.ui?.json?.(report);\n        } else if (report.issues.length === 0) {\n          ctx.ui?.success?.(`All ${report.total} packages healthy (${scopeCtx.scope})`);\n        } else {\n          const errors = report.issues.filter(i => i.severity === 'error');\n          ctx.ui?.warn?.(`Marketplace Doctor (${scopeCtx.scope})`, {\n            sections: [\n              { header: 'Summary', items: [`Total: ${report.total}`, `Issues: ${report.issues.length}`, `Errors: ${errors.length}`] },\n              { header: 'Issues', items: report.issues.map(i => `${i.severity === 'error' ? '❌' : '⚠'} ${i.packageId}: ${i.message}`) },\n            ],\n          });\n        }\n\n        return report.ok ? { ok: true, result: report } : { ok: false, error: 'Marketplace doctor found issues', result: report };\n      } catch (err) {\n        handleError(ctx, err, flags.json);\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { ok: false, total: 0, issues: [] } };\n      }\n    },\n  },\n});\n"]}
+{"version":3,"sources":["../../../src/http.ts","../../../src/scope.ts","../../../src/commands/plugins/doctor.ts"],"names":["current","projectRoot"],"mappings":";;;;;AAQA,IAAM,mBAAA,GAAsB,uBAAA;AAC5B,IAAM,kBAAA,GAAqB,qBAAA;AAC3B,IAAM,gBAAA,GAAmB,GAAA;AAQzB,eAAe,QAAA,GAAsC;AACnD,EAAA,MAAM,cAAA,GAAiB,IAAI,cAAA,EAAe;AAC1C,EAAA,MAAM,OAAA,GAAU,MAAM,cAAA,CAAe,IAAA,EAAK;AAC1C,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,MAAMA,QAAAA,GAAU,eAAe,SAAA,CAAU,OAAO,IAAI,MAAM,cAAA,CAAe,OAAA,CAAQ,OAAO,CAAA,GAAI,OAAA;AAC5F,IAAA,OAAO,UAAUA,QAAAA,EAAS,MAAM,cAAA,CAAe,OAAA,CAAQA,QAAO,CAAC,CAAA;AAAA,EACjE;AAEA,EAAA,MAAM,kBAAA,GAAqB,IAAI,kBAAA,EAAmB;AAClD,EAAA,MAAM,WAAA,GAAc,MAAM,kBAAA,CAAmB,IAAA,EAAK;AAClD,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,OAAA,GAAU,mBAAmB,SAAA,CAAU,WAAW,IAAI,MAAM,kBAAA,CAAmB,OAAA,CAAQ,WAAW,CAAA,GAAI,WAAA;AAC5G,EAAA,OAAO,UAAU,OAAA,EAAS,MAAM,kBAAA,CAAmB,OAAA,CAAQ,OAAO,CAAC,CAAA;AACrE;AAEA,SAAS,SAAA,CAAU,aAAsD,OAAA,EAA4E;AACnJ,EAAA,OAAO;AAAA,IACL,YAAY,WAAA,CAAY,UAAA;AAAA,IACxB,aAAa,WAAA,CAAY,WAAA;AAAA,IACzB,SAAS,YAAY;AACnB,MAAA,MAAM,OAAA,GAAU,MAAM,OAAA,EAAQ;AAC9B,MAAA,OAAO,SAAA,CAAU,SAAS,OAAO,CAAA;AAAA,IACnC;AAAA,GACF;AACF;AAEA,SAAS,WAAW,UAAA,EAA6B;AAC/C,EAAA,MAAM,cAAA,GAAiB,OAAO,oBAAoB,CAAA;AAClD,EAAA,IAAI,cAAA,EAAgB;AAClB,IAAA,OAAO,CAAA,EAAG,cAAc,CAAA,EAAG,kBAAkB,CAAA,CAAA;AAAA,EAC/C;AACA,EAAA,MAAM,OAAA,GAAU,UAAA,IAAc,MAAA,CAAO,gBAAgB,CAAA,IAAK,mBAAA;AAC1D,EAAA,OAAO,CAAA,EAAG,OAAO,CAAA,EAAG,kBAAkB,CAAA,CAAA;AACxC;AAEA,eAAe,OAAA,CAAW,MAAA,EAAgB,IAAA,EAAc,IAAA,EAAgC,MAAA,EAA6C;AACnI,EAAA,IAAI,IAAA,GAAO,MAAM,QAAA,EAAS;AAC1B,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,CAAA,EAAG,UAAA,CAAW,MAAM,UAAU,CAAC,CAAA,EAAG,IAAI,CAAA,CAAE,CAAA;AAC5D,EAAA,IAAI,MAAA,EAAQ;AACV,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,EAAG;AAAE,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,GAAA,EAAK,KAAK,CAAA;AAAA,IAAG;AAAA,EACzF;AAEA,EAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,GAAU,CAAA,EAAG,WAAW,CAAA,EAAG;AAC/C,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,gBAAgB,CAAA;AACnE,IAAA,IAAI;AACF,MAAA,MAAM,UAAkC,EAAC;AACzC,MAAA,IAAI,IAAA,EAAM;AACV,MAAA,IAAI,IAAA,EAAM;AAAE,QAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,IAAA,CAAK,WAAW,CAAA,CAAA;AAAA,MAAI;AAClE,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,CAAI,UAAS,EAAG;AAAA,QAC3C,MAAA;AAAA,QACA,OAAA;AAAA,QACA,IAAA,EAAM,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,GAAI,KAAA,CAAA;AAAA,QACpC,QAAQ,UAAA,CAAW;AAAA,OACpB,CAAA;AACD,MAAA,IAAI,QAAA,CAAS,MAAA,KAAW,GAAA,IAAO,IAAA,IAAQ,YAAY,CAAA,EAAG;AACpD,QAAA,IAAA,GAAO,MAAM,KAAK,OAAA,EAAQ;AAC1B,QAAA;AAAA,MACF;AACA,MAAA,IAAI,QAAA,CAAS,MAAA,KAAW,GAAA,IAAO,CAAC,IAAA,EAAM;AACpC,QAAA,MAAM,IAAI,MAAM,+GAA+G,CAAA;AAAA,MACjI;AACA,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,QAAA,MAAM,IAAI,MAAM,CAAA,YAAA,EAAe,IAAI,YAAY,QAAA,CAAS,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,CAAE,CAAA;AAAA,MAC5E;AACA,MAAA,IAAI,QAAA,CAAS,WAAW,GAAA,EAAK;AAAE,QAAA,OAAO,KAAA,CAAA;AAAA,MAAgB;AACtD,MAAA,OAAO,MAAM,SAAS,IAAA,EAAK;AAAA,IAC7B,SAAS,GAAA,EAAK;AACZ,MAAA,IAAK,GAAA,CAAc,SAAS,YAAA,EAAc;AACxC,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,gFAAA,CAA6E,CAAA;AAAA,MAClH;AACA,MAAA,MAAM,GAAA;AAAA,IACR,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAAA,IACpB;AAAA,EACF;AACA,EAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,uCAAA,CAAyC,CAAA;AAC9E;AAcA,eAAsB,GAAA,CAAiB,MAAc,MAAA,EAA6C;AAChG,EAAA,OAAO,OAAA,CAAW,KAAA,EAAO,IAAA,EAAM,MAAA,EAAW,MAAM,CAAA;AAClD;AC9FO,IAAM,kBAAA,GAAkD,CAAC,UAAA,EAAY,SAAS,CAAA;AAoBrF,eAAsB,eAAA,CACpB,KACA,IAAA,EAC2B;AAC3B,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,mBAAA,CAAoB,IAAI,CAAA;AACxB,IAAA,IAAI,SAAS,SAAA,EAAW;AACtB,MAAA,MAAMC,YAAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,MAAA,IAAI,CAACA,YAAAA,EAAa;AAChB,QAAA,MAAM,IAAI,aAAA;AAAA,UACR,8BAAA;AAAA,UACA,qEAAqE,GAAG,CAAA,mBAAA;AAAA,SAC1E;AAAA,MACF;AACA,MAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAAA,YAAAA,EAAa,QAAQ,MAAA,EAAO;AAAA,IACzD;AACA,IAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,MAAA,EAAO;AAAA,EAC7C;AAEA,EAAA,MAAM,WAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAa,QAAQ,aAAA,EAAc;AAAA,EAChE;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,UAAA,EAAW;AACjD;AAkBA,SAAS,oBAAoB,KAAA,EAAkD;AAC7E,EAAA,IAAI,CAAC,kBAAA,CAAmB,QAAA,CAAS,KAAyB,CAAA,EAAG;AAC3D,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,eAAA;AAAA,MACA,CAAA,wBAAA,EAA2B,mBAAmB,IAAA,CAAK,IAAI,CAAC,CAAA,MAAA,EAAS,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC,CAAA,CAAA;AAAA,KACxF;AAAA,EACF;AACF;AAEO,IAAM,aAAA,GAAN,cAA4B,KAAA,CAAM;AAAA,EAC9B,IAAA;AAAA,EACT,WAAA,CAAY,MAAc,OAAA,EAAiB;AACzC,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AAAA,EACd;AACF,CAAA;;;AC9EA,IAAO,iBAAQ,aAAA,CAAsD;AAAA,EACnE,EAAA,EAAI,4BAAA;AAAA,EACJ,WAAA,EAAa,6BAAA;AAAA,EAEb,OAAA,EAAS;AAAA,IACP,MAAM,OAAA,CAAQ,GAAA,EAAsB,KAAA,EAA8D;AAChG,MAAA,MAAM,KAAA,GAAS,MAAM,KAAA,IAAS,KAAA;AAE9B,MAAA,IAAI,QAAA;AACJ,MAAA,IAAI;AACF,QAAA,QAAA,GAAW,MAAM,eAAA,CAAgB,GAAA,CAAI,GAAA,EAAK,MAAM,KAAK,CAAA;AAAA,MACvD,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,eAAe,aAAA,EAAe;AAChC,UAAA,eAAA,CAAgB,GAAA,EAAK,GAAA,CAAI,OAAA,EAAS,MAAA,EAAW,MAAM,IAAI,CAAA;AAAA,QACzD,CAAA,MAAO;AACL,UAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAAA,QAClC;AACA,QAAA,OAAO,EAAE,IAAI,KAAA,EAAO,KAAA,EAAO,eAAe,KAAA,GAAQ,GAAA,CAAI,UAAU,MAAA,CAAO,GAAG,GAAG,MAAA,EAAQ,EAAE,IAAI,KAAA,EAAO,KAAA,EAAO,GAAG,MAAA,EAAQ,IAAG,EAAE;AAAA,MAC3H;AAEA,MAAA,IAAI;AACF,QAAA,MAAM,KAAA,GAAgC,EAAE,KAAA,EAAO,QAAA,CAAS,KAAA,EAAM;AAC9D,QAAA,IAAI,SAAS,WAAA,EAAa;AAAE,UAAA,KAAA,CAAM,cAAc,QAAA,CAAS,WAAA;AAAA,QAAa;AACtE,QAAA,MAAM,MAAA,GAAS,MAAM,GAAA,CAAsB,cAAA,EAAgB,KAAK,CAAA;AAEhE,QAAA,IAAI,MAAM,IAAA,EAAM;AACd,UAAA,GAAA,CAAI,EAAA,EAAI,OAAO,MAAM,CAAA;AAAA,QACvB,CAAA,MAAA,IAAW,MAAA,CAAO,MAAA,CAAO,MAAA,KAAW,CAAA,EAAG;AACrC,UAAA,GAAA,CAAI,EAAA,EAAI,UAAU,CAAA,IAAA,EAAO,MAAA,CAAO,KAAK,CAAA,mBAAA,EAAsB,QAAA,CAAS,KAAK,CAAA,CAAA,CAAG,CAAA;AAAA,QAC9E,CAAA,MAAO;AACL,UAAA,MAAM,SAAS,MAAA,CAAO,MAAA,CAAO,OAAO,CAAA,CAAA,KAAK,CAAA,CAAE,aAAa,OAAO,CAAA;AAC/D,UAAA,GAAA,CAAI,EAAA,EAAI,IAAA,GAAO,CAAA,oBAAA,EAAuB,QAAA,CAAS,KAAK,CAAA,CAAA,CAAA,EAAK;AAAA,YACvD,QAAA,EAAU;AAAA,cACR,EAAE,MAAA,EAAQ,SAAA,EAAW,OAAO,CAAC,CAAA,OAAA,EAAU,OAAO,KAAK,CAAA,CAAA,EAAI,CAAA,QAAA,EAAW,MAAA,CAAO,OAAO,MAAM,CAAA,CAAA,EAAI,WAAW,MAAA,CAAO,MAAM,EAAE,CAAA,EAAE;AAAA,cACtH,EAAE,QAAQ,QAAA,EAAU,KAAA,EAAO,OAAO,MAAA,CAAO,GAAA,CAAI,OAAK,CAAA,EAAG,CAAA,CAAE,aAAa,OAAA,GAAU,QAAA,GAAM,QAAG,CAAA,CAAA,EAAI,CAAA,CAAE,SAAS,CAAA,EAAA,EAAK,CAAA,CAAE,OAAO,CAAA,CAAE,CAAA;AAAE;AAC1H,WACD,CAAA;AAAA,QACH;AAEA,QAAA,OAAO,MAAA,CAAO,EAAA,GAAK,EAAE,EAAA,EAAI,MAAM,MAAA,EAAQ,MAAA,EAAO,GAAI,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,iCAAA,EAAmC,QAAQ,MAAA,EAAO;AAAA,MAC1H,SAAS,GAAA,EAAK;AACZ,QAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAChC,QAAA,OAAO,EAAE,IAAI,KAAA,EAAO,KAAA,EAAO,eAAe,KAAA,GAAQ,GAAA,CAAI,UAAU,MAAA,CAAO,GAAG,GAAG,MAAA,EAAQ,EAAE,IAAI,KAAA,EAAO,KAAA,EAAO,GAAG,MAAA,EAAQ,IAAG,EAAE;AAAA,MAC3H;AAAA,IACF;AAAA;AAEJ,CAAC","file":"doctor.js","sourcesContent":["/**\n * HTTP client for marketplace service via Gateway.\n */\n\nimport { useEnv } from '@kb-labs/sdk';\nimport { CredentialsManager, SessionManager } from '@kb-labs/cli-runtime/gateway';\nimport type { GatewayCredentials, SessionCredentials } from '@kb-labs/cli-runtime/gateway';\n\nconst DEFAULT_GATEWAY_URL = 'http://127.0.0.1:4000';\nconst MARKETPLACE_PREFIX = '/api/v1/marketplace';\nconst FETCH_TIMEOUT_MS = 30_000;\n\ntype AuthState = {\n  gatewayUrl: string;\n  accessToken: string;\n  refresh: () => Promise<AuthState>;\n};\n\nasync function loadAuth(): Promise<AuthState | null> {\n  const sessionManager = new SessionManager();\n  const session = await sessionManager.load();\n  if (session) {\n    const current = sessionManager.isExpired(session) ? await sessionManager.refresh(session) : session;\n    return authState(current, () => sessionManager.refresh(current));\n  }\n\n  const credentialsManager = new CredentialsManager();\n  const credentials = await credentialsManager.load();\n  if (!credentials) {\n    return null;\n  }\n  const current = credentialsManager.isExpired(credentials) ? await credentialsManager.refresh(credentials) : credentials;\n  return authState(current, () => credentialsManager.refresh(current));\n}\n\nfunction authState(credentials: GatewayCredentials | SessionCredentials, refresh: () => Promise<GatewayCredentials | SessionCredentials>): AuthState {\n  return {\n    gatewayUrl: credentials.gatewayUrl,\n    accessToken: credentials.accessToken,\n    refresh: async () => {\n      const updated = await refresh();\n      return authState(updated, refresh);\n    },\n  };\n}\n\nfunction getBaseUrl(gatewayUrl?: string): string {\n  const marketplaceUrl = useEnv('KB_MARKETPLACE_URL');\n  if (marketplaceUrl) {\n    return `${marketplaceUrl}${MARKETPLACE_PREFIX}`;\n  }\n  const gateway = gatewayUrl ?? useEnv('KB_GATEWAY_URL') ?? DEFAULT_GATEWAY_URL;\n  return `${gateway}${MARKETPLACE_PREFIX}`;\n}\n\nasync function request<T>(method: string, path: string, body?: Record<string, unknown>, params?: Record<string, string>): Promise<T> {\n  let auth = await loadAuth();\n  const url = new URL(`${getBaseUrl(auth?.gatewayUrl)}${path}`);\n  if (params) {\n    for (const [key, value] of Object.entries(params)) { url.searchParams.set(key, value); }\n  }\n\n  for (let attempt = 0; attempt < 2; attempt += 1) {\n    const controller = new AbortController();\n    const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n    try {\n      const headers: Record<string, string> = {};\n      if (body) { headers['Content-Type'] = 'application/json'; }\n      if (auth) { headers.Authorization = `Bearer ${auth.accessToken}`; }\n      const response = await fetch(url.toString(), {\n        method,\n        headers,\n        body: body ? JSON.stringify(body) : undefined,\n        signal: controller.signal,\n      });\n      if (response.status === 401 && auth && attempt === 0) {\n        auth = await auth.refresh();\n        continue;\n      }\n      if (response.status === 401 && !auth) {\n        throw new Error('Marketplace authentication is required. Run `kb auth login` or choose local no-auth mode during installation.');\n      }\n      if (!response.ok) {\n        const text = await response.text();\n        throw new Error(`Marketplace ${path} failed (${response.status}): ${text}`);\n      }\n      if (response.status === 204) { return undefined as T; }\n      return await response.json() as T;\n    } catch (err) {\n      if ((err as Error).name === 'AbortError') {\n        throw new Error(`Marketplace ${path} timed out — is the marketplace service running? (kb-dev start marketplace)`);\n      }\n      throw err;\n    } finally {\n      clearTimeout(timer);\n    }\n  }\n  throw new Error(`Marketplace ${path} failed after refreshing authentication`);\n}\n\nexport async function post<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('POST', path, body);\n}\n\nexport async function patch<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('PATCH', path, body);\n}\n\nexport async function del<T = unknown>(path: string, body?: Record<string, unknown>): Promise<T> {\n  return request<T>('DELETE', path, body);\n}\n\nexport async function get<T = unknown>(path: string, params?: Record<string, string>): Promise<T> {\n  return request<T>('GET', path, undefined, params);\n}\n","/**\n * @module @kb-labs/marketplace-entry/scope\n *\n * Client-side scope resolution for marketplace CLI commands. Uses the\n * canonical `findProjectConfigRoot` helper from `@kb-labs/core-workspace`\n * so the detection rules (which filenames count, how walk-up stops) match\n * what the config loader and the marketplace daemon enforce.\n *\n * Rules:\n *  - `project` is the default if cwd (or any ancestor up to the filesystem\n *    root) contains `.kb/kb.config.{json,jsonc}`.\n *  - Otherwise the default is `platform`.\n *  - `--scope` always overrides detection.\n *  - For scope=\"project\" we return the absolute projectRoot so the daemon\n *    doesn't need to re-discover it.\n */\n\nimport { findProjectConfigRoot } from '@kb-labs/core-workspace';\nimport type { MarketplaceScope, MarketplaceQueryScope } from '@kb-labs/marketplace-contracts';\n\nexport const SCOPE_FLAG_CHOICES: readonly MarketplaceScope[] = ['platform', 'project'];\nexport const QUERY_SCOPE_FLAG_CHOICES: readonly MarketplaceQueryScope[] = ['platform', 'project', 'all'];\n\nexport interface ResolvedCliScope {\n  scope: MarketplaceScope;\n  projectRoot?: string;\n  /** How the scope was determined — surfaces in --verbose logs. */\n  reason: 'flag' | 'auto-detect' | 'fallback';\n}\n\nexport interface ResolvedCliQueryScope extends Omit<ResolvedCliScope, 'scope'> {\n  scope: MarketplaceQueryScope;\n}\n\n/**\n * Resolve the effective scope for a mutating command (`link`, `unlink`,\n * `install`, ...). `flag` is the value of `--scope` (if supplied). The\n * helper never returns `'all'` for mutating commands — callers restrict\n * choices via `SCOPE_FLAG_CHOICES`.\n */\nexport async function resolveCliScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliScope> {\n  if (flag) {\n    assertMutatingScope(flag);\n    if (flag === 'project') {\n      const projectRoot = await findProjectConfigRoot(cwd);\n      if (!projectRoot) {\n        throw new CliScopeError(\n          'SCOPE_PROJECT_ROOT_NOT_FOUND',\n          `--scope=project requires a .kb/kb.config.{json,jsonc} ancestor of ${cwd} — none found.`,\n        );\n      }\n      return { scope: 'project', projectRoot, reason: 'flag' };\n    }\n    return { scope: 'platform', reason: 'flag' };\n  }\n\n  const projectRoot = await findProjectConfigRoot(cwd);\n  if (projectRoot) {\n    return { scope: 'project', projectRoot, reason: 'auto-detect' };\n  }\n  return { scope: 'platform', reason: 'fallback' };\n}\n\n/**\n * Resolve the effective scope for a read-only command (`list`). Accepts\n * `'all'` as an explicit flag value.\n */\nexport async function resolveCliQueryScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliQueryScope> {\n  if (flag === 'all') {\n    const projectRoot = await findProjectConfigRoot(cwd);\n    return { scope: 'all', projectRoot, reason: 'flag' };\n  }\n  const base = await resolveCliScope(cwd, flag);\n  return { scope: base.scope, projectRoot: base.projectRoot, reason: base.reason };\n}\n\nfunction assertMutatingScope(value: string): asserts value is MarketplaceScope {\n  if (!SCOPE_FLAG_CHOICES.includes(value as MarketplaceScope)) {\n    throw new CliScopeError(\n      'SCOPE_INVALID',\n      `--scope must be one of: ${SCOPE_FLAG_CHOICES.join(', ')} (got ${JSON.stringify(value)})`,\n    );\n  }\n}\n\nexport class CliScopeError extends Error {\n  readonly code: string;\n  constructor(code: string, message: string) {\n    super(message);\n    this.code = code;\n    this.name = 'CliScopeError';\n  }\n}\n\n/**\n * Build the body-payload fragment expected by `parseMutatingScope` on the\n * API side: `{ scope, projectRoot? }`. Kept as a helper so every command\n * sends the same shape and nothing drifts out-of-sync with the server.\n */\nexport function scopeBody(ctx: ResolvedCliScope | ResolvedCliQueryScope): {\n  scope: MarketplaceScope | MarketplaceQueryScope;\n  projectRoot?: string;\n} {\n  return {\n    scope: ctx.scope,\n    ...(ctx.projectRoot ? { projectRoot: ctx.projectRoot } : {}),\n  };\n}\n","import { defineCommand, handleError, validationError, type PluginContextV3, type CommandResult } from '@kb-labs/sdk';\nimport { get } from '../../http.js';\nimport { resolveCliScope, CliScopeError } from '../../scope.js';\n\ninterface DoctorFlags { json?: boolean; scope?: string }\ninterface DoctorInput { flags?: DoctorFlags }\n\ninterface DoctorIssue {\n  severity: string;\n  packageId: string;\n  message: string;\n  remediation?: string;\n}\n\ninterface DoctorResultData {\n  ok: boolean;\n  total: number;\n  issues: DoctorIssue[];\n}\n\nexport default defineCommand<unknown, DoctorInput, DoctorResultData>({\n  id: 'marketplace:plugins:doctor',\n  description: 'Diagnose marketplace health',\n\n  handler: {\n    async execute(ctx: PluginContextV3, input: DoctorInput): Promise<CommandResult<DoctorResultData>> {\n      const flags = (input.flags ?? input) as DoctorFlags;\n\n      let scopeCtx;\n      try {\n        scopeCtx = await resolveCliScope(ctx.cwd, flags.scope);\n      } catch (err) {\n        if (err instanceof CliScopeError) {\n          validationError(ctx, err.message, undefined, flags.json);\n        } else {\n          handleError(ctx, err, flags.json);\n        }\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { ok: false, total: 0, issues: [] } };\n      }\n\n      try {\n        const query: Record<string, string> = { scope: scopeCtx.scope };\n        if (scopeCtx.projectRoot) { query.projectRoot = scopeCtx.projectRoot; }\n        const report = await get<DoctorResultData>('/diagnostics', query);\n\n        if (flags.json) {\n          ctx.ui?.json?.(report);\n        } else if (report.issues.length === 0) {\n          ctx.ui?.success?.(`All ${report.total} packages healthy (${scopeCtx.scope})`);\n        } else {\n          const errors = report.issues.filter(i => i.severity === 'error');\n          ctx.ui?.warn?.(`Marketplace Doctor (${scopeCtx.scope})`, {\n            sections: [\n              { header: 'Summary', items: [`Total: ${report.total}`, `Issues: ${report.issues.length}`, `Errors: ${errors.length}`] },\n              { header: 'Issues', items: report.issues.map(i => `${i.severity === 'error' ? '❌' : '⚠'} ${i.packageId}: ${i.message}`) },\n            ],\n          });\n        }\n\n        return report.ok ? { ok: true, result: report } : { ok: false, error: 'Marketplace doctor found issues', result: report };\n      } catch (err) {\n        handleError(ctx, err, flags.json);\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { ok: false, total: 0, issues: [] } };\n      }\n    },\n  },\n});\n"]}

package/dist/commands/plugins/enable.js

@@ -63,6 +63,9 @@ async function request(method, path, body, params) {
         auth = await auth.refresh();
         continue;
       }
+      if (response.status === 401 && !auth) {
+        throw new Error("Marketplace authentication is required. Run `kb auth login` or choose local no-auth mode during installation.");
+      }
       if (!response.ok) {
         const text = await response.text();
         throw new Error(`Marketplace ${path} failed (${response.status}): ${text}`);

package/dist/commands/plugins/enable.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/http.ts","../../../src/scope.ts","../../../src/commands/plugins/enable.ts"],"names":["current","projectRoot"],"mappings":";;;;;AAQA,IAAM,mBAAA,GAAsB,uBAAA;AAC5B,IAAM,kBAAA,GAAqB,qBAAA;AAC3B,IAAM,gBAAA,GAAmB,GAAA;AAQzB,eAAe,QAAA,GAAsC;AACnD,EAAA,MAAM,cAAA,GAAiB,IAAI,cAAA,EAAe;AAC1C,EAAA,MAAM,OAAA,GAAU,MAAM,cAAA,CAAe,IAAA,EAAK;AAC1C,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,MAAMA,QAAAA,GAAU,eAAe,SAAA,CAAU,OAAO,IAAI,MAAM,cAAA,CAAe,OAAA,CAAQ,OAAO,CAAA,GAAI,OAAA;AAC5F,IAAA,OAAO,UAAUA,QAAAA,EAAS,MAAM,cAAA,CAAe,OAAA,CAAQA,QAAO,CAAC,CAAA;AAAA,EACjE;AAEA,EAAA,MAAM,kBAAA,GAAqB,IAAI,kBAAA,EAAmB;AAClD,EAAA,MAAM,WAAA,GAAc,MAAM,kBAAA,CAAmB,IAAA,EAAK;AAClD,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,OAAA,GAAU,mBAAmB,SAAA,CAAU,WAAW,IAAI,MAAM,kBAAA,CAAmB,OAAA,CAAQ,WAAW,CAAA,GAAI,WAAA;AAC5G,EAAA,OAAO,UAAU,OAAA,EAAS,MAAM,kBAAA,CAAmB,OAAA,CAAQ,OAAO,CAAC,CAAA;AACrE;AAEA,SAAS,SAAA,CAAU,aAAsD,OAAA,EAA4E;AACnJ,EAAA,OAAO;AAAA,IACL,YAAY,WAAA,CAAY,UAAA;AAAA,IACxB,aAAa,WAAA,CAAY,WAAA;AAAA,IACzB,SAAS,YAAY;AACnB,MAAA,MAAM,OAAA,GAAU,MAAM,OAAA,EAAQ;AAC9B,MAAA,OAAO,SAAA,CAAU,SAAS,OAAO,CAAA;AAAA,IACnC;AAAA,GACF;AACF;AAEA,SAAS,WAAW,UAAA,EAA6B;AAC/C,EAAA,MAAM,cAAA,GAAiB,OAAO,oBAAoB,CAAA;AAClD,EAAA,IAAI,cAAA,EAAgB;AAClB,IAAA,OAAO,CAAA,EAAG,cAAc,CAAA,EAAG,kBAAkB,CAAA,CAAA;AAAA,EAC/C;AACA,EAAA,MAAM,OAAA,GAAU,UAAA,IAAc,MAAA,CAAO,gBAAgB,CAAA,IAAK,mBAAA;AAC1D,EAAA,OAAO,CAAA,EAAG,OAAO,CAAA,EAAG,kBAAkB,CAAA,CAAA;AACxC;AAEA,eAAe,OAAA,CAAW,MAAA,EAAgB,IAAA,EAAc,IAAA,EAAgC,MAAA,EAA6C;AACnI,EAAA,IAAI,IAAA,GAAO,MAAM,QAAA,EAAS;AAC1B,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,CAAA,EAAG,UAAA,CAAW,MAAM,UAAU,CAAC,CAAA,EAAG,IAAI,CAAA,CAAE,CAAA;AAK5D,EAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,GAAU,CAAA,EAAG,WAAW,CAAA,EAAG;AAC/C,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,gBAAgB,CAAA;AACnE,IAAA,IAAI;AACF,MAAA,MAAM,UAAkC,EAAC;AACzC,MAAA,IAAI,IAAA,EAAM;AAAE,QAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAAA,MAAoB;AAC1D,MAAA,IAAI,IAAA,EAAM;AAAE,QAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,IAAA,CAAK,WAAW,CAAA,CAAA;AAAA,MAAI;AAClE,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,CAAI,UAAS,EAAG;AAAA,QAC3C,MAAA;AAAA,QACA,OAAA;AAAA,QACA,IAAA,EAAM,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,GAAI,KAAA,CAAA;AAAA,QACpC,QAAQ,UAAA,CAAW;AAAA,OACpB,CAAA;AACD,MAAA,IAAI,QAAA,CAAS,MAAA,KAAW,GAAA,IAAO,IAAA,IAAQ,YAAY,CAAA,EAAG;AACpD,QAAA,IAAA,GAAO,MAAM,KAAK,OAAA,EAAQ;AAC1B,QAAA;AAAA,MACF;AACA,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,QAAA,MAAM,IAAI,MAAM,CAAA,YAAA,EAAe,IAAI,YAAY,QAAA,CAAS,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,CAAE,CAAA;AAAA,MAC5E;AACA,MAAA,IAAI,QAAA,CAAS,WAAW,GAAA,EAAK;AAAE,QAAA,OAAO,KAAA,CAAA;AAAA,MAAgB;AACtD,MAAA,OAAO,MAAM,SAAS,IAAA,EAAK;AAAA,IAC7B,SAAS,GAAA,EAAK;AACZ,MAAA,IAAK,GAAA,CAAc,SAAS,YAAA,EAAc;AACxC,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,gFAAA,CAA6E,CAAA;AAAA,MAClH;AACA,MAAA,MAAM,GAAA;AAAA,IACR,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAAA,IACpB;AAAA,EACF;AACA,EAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,uCAAA,CAAyC,CAAA;AAC9E;AAEA,eAAsB,IAAA,CAAkB,MAAc,IAAA,EAA2C;AAC/F,EAAA,OAAO,OAAA,CAAW,MAAA,EAAQ,IAAA,EAAM,IAAI,CAAA;AACtC;AC/EO,IAAM,kBAAA,GAAkD,CAAC,UAAA,EAAY,SAAS,CAAA;AAoBrF,eAAsB,eAAA,CACpB,KACA,IAAA,EAC2B;AAC3B,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,mBAAA,CAAoB,IAAI,CAAA;AACxB,IAAA,IAAI,SAAS,SAAA,EAAW;AACtB,MAAA,MAAMC,YAAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,MAAA,IAAI,CAACA,YAAAA,EAAa;AAChB,QAAA,MAAM,IAAI,aAAA;AAAA,UACR,8BAAA;AAAA,UACA,qEAAqE,GAAG,CAAA,mBAAA;AAAA,SAC1E;AAAA,MACF;AACA,MAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAAA,YAAAA,EAAa,QAAQ,MAAA,EAAO;AAAA,IACzD;AACA,IAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,MAAA,EAAO;AAAA,EAC7C;AAEA,EAAA,MAAM,WAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAa,QAAQ,aAAA,EAAc;AAAA,EAChE;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,UAAA,EAAW;AACjD;AAkBA,SAAS,oBAAoB,KAAA,EAAkD;AAC7E,EAAA,IAAI,CAAC,kBAAA,CAAmB,QAAA,CAAS,KAAyB,CAAA,EAAG;AAC3D,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,eAAA;AAAA,MACA,CAAA,wBAAA,EAA2B,mBAAmB,IAAA,CAAK,IAAI,CAAC,CAAA,MAAA,EAAS,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC,CAAA,CAAA;AAAA,KACxF;AAAA,EACF;AACF;AAEO,IAAM,aAAA,GAAN,cAA4B,KAAA,CAAM;AAAA,EAC9B,IAAA;AAAA,EACT,WAAA,CAAY,MAAc,OAAA,EAAiB;AACzC,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AAAA,EACd;AACF,CAAA;AAOO,SAAS,UAAU,GAAA,EAGxB;AACA,EAAA,OAAO;AAAA,IACL,OAAO,GAAA,CAAI,KAAA;AAAA,IACX,GAAI,IAAI,WAAA,GAAc,EAAE,aAAa,GAAA,CAAI,WAAA,KAAgB;AAAC,GAC5D;AACF;;;AC1GA,IAAO,iBAAQ,aAAA,CAA0E;AAAA,EACvF,EAAA,EAAI,4BAAA;AAAA,EACJ,WAAA,EAAa,iBAAA;AAAA,EAEb,OAAA,EAAS;AAAA,IACP,MAAM,MAAA,CAAO,IAAA,EAAuB,KAAA,EAAoB;AACtD,MAAA,MAAM,SAAA,GAAY,KAAA,CAAM,IAAA,GAAO,CAAC,CAAA,IAAK,WAAA;AACrC,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,kBAAkB,SAAS,CAAA,CAAA,CAAA;AAAA,QACpC,UAAA,EAAY,CAAC,EAAE,IAAA,EAAM,QAAA,EAAmB,QAAA,EAAU,QAAA,EAAU,OAAA,EAAS,EAAE,SAAA,EAAW,OAAA,EAAS,IAAA,IAAQ;AAAA,OACrG;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,OAAA,CAAQ,GAAA,EAAsB,KAAA,EAAkF;AACpH,MAAA,MAAM,SAAA,GAAY,KAAA,CAAM,IAAA,GAAO,CAAC,CAAA;AAChC,MAAA,MAAM,KAAA,GAAS,MAAM,KAAA,IAAS,KAAA;AAE9B,MAAA,IAAI,CAAC,SAAA,EAAW;AACd,QAAA,eAAA,CAAgB,GAAA,EAAK,4BAAA,EAA8B,kDAAA,EAAoD,KAAA,CAAM,IAAI,CAAA;AACjH,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,0BAAA,EAA4B,MAAA,EAAQ,EAAE,SAAA,EAAW,EAAA,EAAI,KAAA,EAAO,EAAA,EAAG,EAAE;AAAA,MAC9F;AAEA,MAAA,IAAI,QAAA;AACJ,MAAA,IAAI;AACF,QAAA,QAAA,GAAW,MAAM,eAAA,CAAgB,GAAA,CAAI,GAAA,EAAK,MAAM,KAAK,CAAA;AAAA,MACvD,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,eAAe,aAAA,EAAe;AAChC,UAAA,eAAA,CAAgB,GAAA,EAAK,GAAA,CAAI,OAAA,EAAS,MAAA,EAAW,MAAM,IAAI,CAAA;AAAA,QACzD,CAAA,MAAO;AACL,UAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAAA,QAClC;AACA,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,GAAA,YAAe,QAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,GAAG,MAAA,EAAQ,EAAE,WAAW,EAAA,EAAI,KAAA,EAAO,IAAG,EAAE;AAAA,MACpH;AAEA,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,CAAK,oBAAoB,EAAE,SAAA,EAAW,GAAG,SAAA,CAAU,QAAQ,GAAG,CAAA;AACpE,QAAA,IAAI,MAAM,IAAA,EAAM;AACd,UAAA,GAAA,CAAI,EAAA,EAAI,OAAO,EAAE,EAAA,EAAI,MAAM,SAAA,EAAW,KAAA,EAAO,QAAA,CAAS,KAAA,EAAO,CAAA;AAAA,QAC/D,CAAA,MAAO;AACL,UAAA,GAAA,CAAI,IAAI,OAAA,GAAU,CAAA,QAAA,EAAW,SAAS,CAAA,EAAA,EAAK,QAAA,CAAS,KAAK,CAAA,CAAA,CAAG,CAAA;AAAA,QAC9D;AACA,QAAA,OAAO,EAAE,IAAI,IAAA,EAAM,MAAA,EAAQ,EAAE,SAAA,EAAW,KAAA,EAAO,QAAA,CAAS,KAAA,EAAM,EAAE;AAAA,MAClE,SAAS,GAAA,EAAK;AACZ,QAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAChC,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,GAAA,YAAe,QAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,GAAG,MAAA,EAAQ,EAAE,WAAW,EAAA,EAAI,KAAA,EAAO,IAAG,EAAE;AAAA,MACpH;AAAA,IACF;AAAA;AAEJ,CAAC","file":"enable.js","sourcesContent":["/**\n * HTTP client for marketplace service via Gateway.\n */\n\nimport { useEnv } from '@kb-labs/sdk';\nimport { CredentialsManager, SessionManager } from '@kb-labs/cli-runtime/gateway';\nimport type { GatewayCredentials, SessionCredentials } from '@kb-labs/cli-runtime/gateway';\n\nconst DEFAULT_GATEWAY_URL = 'http://127.0.0.1:4000';\nconst MARKETPLACE_PREFIX = '/api/v1/marketplace';\nconst FETCH_TIMEOUT_MS = 30_000;\n\ntype AuthState = {\n  gatewayUrl: string;\n  accessToken: string;\n  refresh: () => Promise<AuthState>;\n};\n\nasync function loadAuth(): Promise<AuthState | null> {\n  const sessionManager = new SessionManager();\n  const session = await sessionManager.load();\n  if (session) {\n    const current = sessionManager.isExpired(session) ? await sessionManager.refresh(session) : session;\n    return authState(current, () => sessionManager.refresh(current));\n  }\n\n  const credentialsManager = new CredentialsManager();\n  const credentials = await credentialsManager.load();\n  if (!credentials) {\n    return null;\n  }\n  const current = credentialsManager.isExpired(credentials) ? await credentialsManager.refresh(credentials) : credentials;\n  return authState(current, () => credentialsManager.refresh(current));\n}\n\nfunction authState(credentials: GatewayCredentials | SessionCredentials, refresh: () => Promise<GatewayCredentials | SessionCredentials>): AuthState {\n  return {\n    gatewayUrl: credentials.gatewayUrl,\n    accessToken: credentials.accessToken,\n    refresh: async () => {\n      const updated = await refresh();\n      return authState(updated, refresh);\n    },\n  };\n}\n\nfunction getBaseUrl(gatewayUrl?: string): string {\n  const marketplaceUrl = useEnv('KB_MARKETPLACE_URL');\n  if (marketplaceUrl) {\n    return `${marketplaceUrl}${MARKETPLACE_PREFIX}`;\n  }\n  const gateway = gatewayUrl ?? useEnv('KB_GATEWAY_URL') ?? DEFAULT_GATEWAY_URL;\n  return `${gateway}${MARKETPLACE_PREFIX}`;\n}\n\nasync function request<T>(method: string, path: string, body?: Record<string, unknown>, params?: Record<string, string>): Promise<T> {\n  let auth = await loadAuth();\n  const url = new URL(`${getBaseUrl(auth?.gatewayUrl)}${path}`);\n  if (params) {\n    for (const [key, value] of Object.entries(params)) { url.searchParams.set(key, value); }\n  }\n\n  for (let attempt = 0; attempt < 2; attempt += 1) {\n    const controller = new AbortController();\n    const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n    try {\n      const headers: Record<string, string> = {};\n      if (body) { headers['Content-Type'] = 'application/json'; }\n      if (auth) { headers.Authorization = `Bearer ${auth.accessToken}`; }\n      const response = await fetch(url.toString(), {\n        method,\n        headers,\n        body: body ? JSON.stringify(body) : undefined,\n        signal: controller.signal,\n      });\n      if (response.status === 401 && auth && attempt === 0) {\n        auth = await auth.refresh();\n        continue;\n      }\n      if (!response.ok) {\n        const text = await response.text();\n        throw new Error(`Marketplace ${path} failed (${response.status}): ${text}`);\n      }\n      if (response.status === 204) { return undefined as T; }\n      return await response.json() as T;\n    } catch (err) {\n      if ((err as Error).name === 'AbortError') {\n        throw new Error(`Marketplace ${path} timed out — is the marketplace service running? (kb-dev start marketplace)`);\n      }\n      throw err;\n    } finally {\n      clearTimeout(timer);\n    }\n  }\n  throw new Error(`Marketplace ${path} failed after refreshing authentication`);\n}\n\nexport async function post<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('POST', path, body);\n}\n\nexport async function patch<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('PATCH', path, body);\n}\n\nexport async function del<T = unknown>(path: string, body?: Record<string, unknown>): Promise<T> {\n  return request<T>('DELETE', path, body);\n}\n\nexport async function get<T = unknown>(path: string, params?: Record<string, string>): Promise<T> {\n  return request<T>('GET', path, undefined, params);\n}\n","/**\n * @module @kb-labs/marketplace-entry/scope\n *\n * Client-side scope resolution for marketplace CLI commands. Uses the\n * canonical `findProjectConfigRoot` helper from `@kb-labs/core-workspace`\n * so the detection rules (which filenames count, how walk-up stops) match\n * what the config loader and the marketplace daemon enforce.\n *\n * Rules:\n *  - `project` is the default if cwd (or any ancestor up to the filesystem\n *    root) contains `.kb/kb.config.{json,jsonc}`.\n *  - Otherwise the default is `platform`.\n *  - `--scope` always overrides detection.\n *  - For scope=\"project\" we return the absolute projectRoot so the daemon\n *    doesn't need to re-discover it.\n */\n\nimport { findProjectConfigRoot } from '@kb-labs/core-workspace';\nimport type { MarketplaceScope, MarketplaceQueryScope } from '@kb-labs/marketplace-contracts';\n\nexport const SCOPE_FLAG_CHOICES: readonly MarketplaceScope[] = ['platform', 'project'];\nexport const QUERY_SCOPE_FLAG_CHOICES: readonly MarketplaceQueryScope[] = ['platform', 'project', 'all'];\n\nexport interface ResolvedCliScope {\n  scope: MarketplaceScope;\n  projectRoot?: string;\n  /** How the scope was determined — surfaces in --verbose logs. */\n  reason: 'flag' | 'auto-detect' | 'fallback';\n}\n\nexport interface ResolvedCliQueryScope extends Omit<ResolvedCliScope, 'scope'> {\n  scope: MarketplaceQueryScope;\n}\n\n/**\n * Resolve the effective scope for a mutating command (`link`, `unlink`,\n * `install`, ...). `flag` is the value of `--scope` (if supplied). The\n * helper never returns `'all'` for mutating commands — callers restrict\n * choices via `SCOPE_FLAG_CHOICES`.\n */\nexport async function resolveCliScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliScope> {\n  if (flag) {\n    assertMutatingScope(flag);\n    if (flag === 'project') {\n      const projectRoot = await findProjectConfigRoot(cwd);\n      if (!projectRoot) {\n        throw new CliScopeError(\n          'SCOPE_PROJECT_ROOT_NOT_FOUND',\n          `--scope=project requires a .kb/kb.config.{json,jsonc} ancestor of ${cwd} — none found.`,\n        );\n      }\n      return { scope: 'project', projectRoot, reason: 'flag' };\n    }\n    return { scope: 'platform', reason: 'flag' };\n  }\n\n  const projectRoot = await findProjectConfigRoot(cwd);\n  if (projectRoot) {\n    return { scope: 'project', projectRoot, reason: 'auto-detect' };\n  }\n  return { scope: 'platform', reason: 'fallback' };\n}\n\n/**\n * Resolve the effective scope for a read-only command (`list`). Accepts\n * `'all'` as an explicit flag value.\n */\nexport async function resolveCliQueryScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliQueryScope> {\n  if (flag === 'all') {\n    const projectRoot = await findProjectConfigRoot(cwd);\n    return { scope: 'all', projectRoot, reason: 'flag' };\n  }\n  const base = await resolveCliScope(cwd, flag);\n  return { scope: base.scope, projectRoot: base.projectRoot, reason: base.reason };\n}\n\nfunction assertMutatingScope(value: string): asserts value is MarketplaceScope {\n  if (!SCOPE_FLAG_CHOICES.includes(value as MarketplaceScope)) {\n    throw new CliScopeError(\n      'SCOPE_INVALID',\n      `--scope must be one of: ${SCOPE_FLAG_CHOICES.join(', ')} (got ${JSON.stringify(value)})`,\n    );\n  }\n}\n\nexport class CliScopeError extends Error {\n  readonly code: string;\n  constructor(code: string, message: string) {\n    super(message);\n    this.code = code;\n    this.name = 'CliScopeError';\n  }\n}\n\n/**\n * Build the body-payload fragment expected by `parseMutatingScope` on the\n * API side: `{ scope, projectRoot? }`. Kept as a helper so every command\n * sends the same shape and nothing drifts out-of-sync with the server.\n */\nexport function scopeBody(ctx: ResolvedCliScope | ResolvedCliQueryScope): {\n  scope: MarketplaceScope | MarketplaceQueryScope;\n  projectRoot?: string;\n} {\n  return {\n    scope: ctx.scope,\n    ...(ctx.projectRoot ? { projectRoot: ctx.projectRoot } : {}),\n  };\n}\n","import { defineCommand, validationError, handleError, type PluginContextV3, type CommandResult } from '@kb-labs/sdk';\nimport { post } from '../../http.js';\nimport { resolveCliScope, scopeBody, CliScopeError } from '../../scope.js';\n\ninterface EnableFlags { json?: boolean; scope?: string; 'dry-run'?: boolean }\ninterface EnableInput { argv?: string[]; flags?: EnableFlags }\n\nexport default defineCommand<unknown, EnableInput, { packageId: string; scope: string }>({\n  id: 'marketplace:plugins:enable',\n  description: 'Enable a plugin',\n\n  handler: {\n    async intent(_ctx: PluginContextV3, input: EnableInput) {\n      const packageId = input.argv?.[0] ?? '(unknown)';\n      return {\n        summary: `Enable plugin \"${packageId}\"`,\n        operations: [{ type: 'update' as const, resource: 'plugin', details: { packageId, enabled: true } }],\n      };\n    },\n\n    async execute(ctx: PluginContextV3, input: EnableInput): Promise<CommandResult<{ packageId: string; scope: string }>> {\n      const packageId = input.argv?.[0];\n      const flags = (input.flags ?? input) as EnableFlags;\n\n      if (!packageId) {\n        validationError(ctx, 'Specify a plugin to enable', 'Usage: kb marketplace plugins enable <plugin-id>', flags.json);\n        return { ok: false, error: 'A package id is required', result: { packageId: '', scope: '' } };\n      }\n\n      let scopeCtx;\n      try {\n        scopeCtx = await resolveCliScope(ctx.cwd, flags.scope);\n      } catch (err) {\n        if (err instanceof CliScopeError) {\n          validationError(ctx, err.message, undefined, flags.json);\n        } else {\n          handleError(ctx, err, flags.json);\n        }\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { packageId: '', scope: '' } };\n      }\n\n      try {\n        await post(`/packages/enable`, { packageId, ...scopeBody(scopeCtx) });\n        if (flags.json) {\n          ctx.ui?.json?.({ ok: true, packageId, scope: scopeCtx.scope });\n        } else {\n          ctx.ui?.success?.(`Enabled ${packageId} (${scopeCtx.scope})`);\n        }\n        return { ok: true, result: { packageId, scope: scopeCtx.scope } };\n      } catch (err) {\n        handleError(ctx, err, flags.json);\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { packageId: '', scope: '' } };\n      }\n    },\n  },\n});\n"]}
+{"version":3,"sources":["../../../src/http.ts","../../../src/scope.ts","../../../src/commands/plugins/enable.ts"],"names":["current","projectRoot"],"mappings":";;;;;AAQA,IAAM,mBAAA,GAAsB,uBAAA;AAC5B,IAAM,kBAAA,GAAqB,qBAAA;AAC3B,IAAM,gBAAA,GAAmB,GAAA;AAQzB,eAAe,QAAA,GAAsC;AACnD,EAAA,MAAM,cAAA,GAAiB,IAAI,cAAA,EAAe;AAC1C,EAAA,MAAM,OAAA,GAAU,MAAM,cAAA,CAAe,IAAA,EAAK;AAC1C,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,MAAMA,QAAAA,GAAU,eAAe,SAAA,CAAU,OAAO,IAAI,MAAM,cAAA,CAAe,OAAA,CAAQ,OAAO,CAAA,GAAI,OAAA;AAC5F,IAAA,OAAO,UAAUA,QAAAA,EAAS,MAAM,cAAA,CAAe,OAAA,CAAQA,QAAO,CAAC,CAAA;AAAA,EACjE;AAEA,EAAA,MAAM,kBAAA,GAAqB,IAAI,kBAAA,EAAmB;AAClD,EAAA,MAAM,WAAA,GAAc,MAAM,kBAAA,CAAmB,IAAA,EAAK;AAClD,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,OAAA,GAAU,mBAAmB,SAAA,CAAU,WAAW,IAAI,MAAM,kBAAA,CAAmB,OAAA,CAAQ,WAAW,CAAA,GAAI,WAAA;AAC5G,EAAA,OAAO,UAAU,OAAA,EAAS,MAAM,kBAAA,CAAmB,OAAA,CAAQ,OAAO,CAAC,CAAA;AACrE;AAEA,SAAS,SAAA,CAAU,aAAsD,OAAA,EAA4E;AACnJ,EAAA,OAAO;AAAA,IACL,YAAY,WAAA,CAAY,UAAA;AAAA,IACxB,aAAa,WAAA,CAAY,WAAA;AAAA,IACzB,SAAS,YAAY;AACnB,MAAA,MAAM,OAAA,GAAU,MAAM,OAAA,EAAQ;AAC9B,MAAA,OAAO,SAAA,CAAU,SAAS,OAAO,CAAA;AAAA,IACnC;AAAA,GACF;AACF;AAEA,SAAS,WAAW,UAAA,EAA6B;AAC/C,EAAA,MAAM,cAAA,GAAiB,OAAO,oBAAoB,CAAA;AAClD,EAAA,IAAI,cAAA,EAAgB;AAClB,IAAA,OAAO,CAAA,EAAG,cAAc,CAAA,EAAG,kBAAkB,CAAA,CAAA;AAAA,EAC/C;AACA,EAAA,MAAM,OAAA,GAAU,UAAA,IAAc,MAAA,CAAO,gBAAgB,CAAA,IAAK,mBAAA;AAC1D,EAAA,OAAO,CAAA,EAAG,OAAO,CAAA,EAAG,kBAAkB,CAAA,CAAA;AACxC;AAEA,eAAe,OAAA,CAAW,MAAA,EAAgB,IAAA,EAAc,IAAA,EAAgC,MAAA,EAA6C;AACnI,EAAA,IAAI,IAAA,GAAO,MAAM,QAAA,EAAS;AAC1B,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,CAAA,EAAG,UAAA,CAAW,MAAM,UAAU,CAAC,CAAA,EAAG,IAAI,CAAA,CAAE,CAAA;AAK5D,EAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,GAAU,CAAA,EAAG,WAAW,CAAA,EAAG;AAC/C,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,gBAAgB,CAAA;AACnE,IAAA,IAAI;AACF,MAAA,MAAM,UAAkC,EAAC;AACzC,MAAA,IAAI,IAAA,EAAM;AAAE,QAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAAA,MAAoB;AAC1D,MAAA,IAAI,IAAA,EAAM;AAAE,QAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,IAAA,CAAK,WAAW,CAAA,CAAA;AAAA,MAAI;AAClE,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,CAAI,UAAS,EAAG;AAAA,QAC3C,MAAA;AAAA,QACA,OAAA;AAAA,QACA,IAAA,EAAM,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,GAAI,KAAA,CAAA;AAAA,QACpC,QAAQ,UAAA,CAAW;AAAA,OACpB,CAAA;AACD,MAAA,IAAI,QAAA,CAAS,MAAA,KAAW,GAAA,IAAO,IAAA,IAAQ,YAAY,CAAA,EAAG;AACpD,QAAA,IAAA,GAAO,MAAM,KAAK,OAAA,EAAQ;AAC1B,QAAA;AAAA,MACF;AACA,MAAA,IAAI,QAAA,CAAS,MAAA,KAAW,GAAA,IAAO,CAAC,IAAA,EAAM;AACpC,QAAA,MAAM,IAAI,MAAM,+GAA+G,CAAA;AAAA,MACjI;AACA,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,QAAA,MAAM,IAAI,MAAM,CAAA,YAAA,EAAe,IAAI,YAAY,QAAA,CAAS,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,CAAE,CAAA;AAAA,MAC5E;AACA,MAAA,IAAI,QAAA,CAAS,WAAW,GAAA,EAAK;AAAE,QAAA,OAAO,KAAA,CAAA;AAAA,MAAgB;AACtD,MAAA,OAAO,MAAM,SAAS,IAAA,EAAK;AAAA,IAC7B,SAAS,GAAA,EAAK;AACZ,MAAA,IAAK,GAAA,CAAc,SAAS,YAAA,EAAc;AACxC,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,gFAAA,CAA6E,CAAA;AAAA,MAClH;AACA,MAAA,MAAM,GAAA;AAAA,IACR,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAAA,IACpB;AAAA,EACF;AACA,EAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,uCAAA,CAAyC,CAAA;AAC9E;AAEA,eAAsB,IAAA,CAAkB,MAAc,IAAA,EAA2C;AAC/F,EAAA,OAAO,OAAA,CAAW,MAAA,EAAQ,IAAA,EAAM,IAAI,CAAA;AACtC;AClFO,IAAM,kBAAA,GAAkD,CAAC,UAAA,EAAY,SAAS,CAAA;AAoBrF,eAAsB,eAAA,CACpB,KACA,IAAA,EAC2B;AAC3B,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,mBAAA,CAAoB,IAAI,CAAA;AACxB,IAAA,IAAI,SAAS,SAAA,EAAW;AACtB,MAAA,MAAMC,YAAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,MAAA,IAAI,CAACA,YAAAA,EAAa;AAChB,QAAA,MAAM,IAAI,aAAA;AAAA,UACR,8BAAA;AAAA,UACA,qEAAqE,GAAG,CAAA,mBAAA;AAAA,SAC1E;AAAA,MACF;AACA,MAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAAA,YAAAA,EAAa,QAAQ,MAAA,EAAO;AAAA,IACzD;AACA,IAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,MAAA,EAAO;AAAA,EAC7C;AAEA,EAAA,MAAM,WAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAa,QAAQ,aAAA,EAAc;AAAA,EAChE;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,UAAA,EAAW;AACjD;AAkBA,SAAS,oBAAoB,KAAA,EAAkD;AAC7E,EAAA,IAAI,CAAC,kBAAA,CAAmB,QAAA,CAAS,KAAyB,CAAA,EAAG;AAC3D,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,eAAA;AAAA,MACA,CAAA,wBAAA,EAA2B,mBAAmB,IAAA,CAAK,IAAI,CAAC,CAAA,MAAA,EAAS,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC,CAAA,CAAA;AAAA,KACxF;AAAA,EACF;AACF;AAEO,IAAM,aAAA,GAAN,cAA4B,KAAA,CAAM;AAAA,EAC9B,IAAA;AAAA,EACT,WAAA,CAAY,MAAc,OAAA,EAAiB;AACzC,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AAAA,EACd;AACF,CAAA;AAOO,SAAS,UAAU,GAAA,EAGxB;AACA,EAAA,OAAO;AAAA,IACL,OAAO,GAAA,CAAI,KAAA;AAAA,IACX,GAAI,IAAI,WAAA,GAAc,EAAE,aAAa,GAAA,CAAI,WAAA,KAAgB;AAAC,GAC5D;AACF;;;AC1GA,IAAO,iBAAQ,aAAA,CAA0E;AAAA,EACvF,EAAA,EAAI,4BAAA;AAAA,EACJ,WAAA,EAAa,iBAAA;AAAA,EAEb,OAAA,EAAS;AAAA,IACP,MAAM,MAAA,CAAO,IAAA,EAAuB,KAAA,EAAoB;AACtD,MAAA,MAAM,SAAA,GAAY,KAAA,CAAM,IAAA,GAAO,CAAC,CAAA,IAAK,WAAA;AACrC,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,kBAAkB,SAAS,CAAA,CAAA,CAAA;AAAA,QACpC,UAAA,EAAY,CAAC,EAAE,IAAA,EAAM,QAAA,EAAmB,QAAA,EAAU,QAAA,EAAU,OAAA,EAAS,EAAE,SAAA,EAAW,OAAA,EAAS,IAAA,IAAQ;AAAA,OACrG;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,OAAA,CAAQ,GAAA,EAAsB,KAAA,EAAkF;AACpH,MAAA,MAAM,SAAA,GAAY,KAAA,CAAM,IAAA,GAAO,CAAC,CAAA;AAChC,MAAA,MAAM,KAAA,GAAS,MAAM,KAAA,IAAS,KAAA;AAE9B,MAAA,IAAI,CAAC,SAAA,EAAW;AACd,QAAA,eAAA,CAAgB,GAAA,EAAK,4BAAA,EAA8B,kDAAA,EAAoD,KAAA,CAAM,IAAI,CAAA;AACjH,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,0BAAA,EAA4B,MAAA,EAAQ,EAAE,SAAA,EAAW,EAAA,EAAI,KAAA,EAAO,EAAA,EAAG,EAAE;AAAA,MAC9F;AAEA,MAAA,IAAI,QAAA;AACJ,MAAA,IAAI;AACF,QAAA,QAAA,GAAW,MAAM,eAAA,CAAgB,GAAA,CAAI,GAAA,EAAK,MAAM,KAAK,CAAA;AAAA,MACvD,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,eAAe,aAAA,EAAe;AAChC,UAAA,eAAA,CAAgB,GAAA,EAAK,GAAA,CAAI,OAAA,EAAS,MAAA,EAAW,MAAM,IAAI,CAAA;AAAA,QACzD,CAAA,MAAO;AACL,UAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAAA,QAClC;AACA,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,GAAA,YAAe,QAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,GAAG,MAAA,EAAQ,EAAE,WAAW,EAAA,EAAI,KAAA,EAAO,IAAG,EAAE;AAAA,MACpH;AAEA,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,CAAK,oBAAoB,EAAE,SAAA,EAAW,GAAG,SAAA,CAAU,QAAQ,GAAG,CAAA;AACpE,QAAA,IAAI,MAAM,IAAA,EAAM;AACd,UAAA,GAAA,CAAI,EAAA,EAAI,OAAO,EAAE,EAAA,EAAI,MAAM,SAAA,EAAW,KAAA,EAAO,QAAA,CAAS,KAAA,EAAO,CAAA;AAAA,QAC/D,CAAA,MAAO;AACL,UAAA,GAAA,CAAI,IAAI,OAAA,GAAU,CAAA,QAAA,EAAW,SAAS,CAAA,EAAA,EAAK,QAAA,CAAS,KAAK,CAAA,CAAA,CAAG,CAAA;AAAA,QAC9D;AACA,QAAA,OAAO,EAAE,IAAI,IAAA,EAAM,MAAA,EAAQ,EAAE,SAAA,EAAW,KAAA,EAAO,QAAA,CAAS,KAAA,EAAM,EAAE;AAAA,MAClE,SAAS,GAAA,EAAK;AACZ,QAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAChC,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,GAAA,YAAe,QAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,GAAG,MAAA,EAAQ,EAAE,WAAW,EAAA,EAAI,KAAA,EAAO,IAAG,EAAE;AAAA,MACpH;AAAA,IACF;AAAA;AAEJ,CAAC","file":"enable.js","sourcesContent":["/**\n * HTTP client for marketplace service via Gateway.\n */\n\nimport { useEnv } from '@kb-labs/sdk';\nimport { CredentialsManager, SessionManager } from '@kb-labs/cli-runtime/gateway';\nimport type { GatewayCredentials, SessionCredentials } from '@kb-labs/cli-runtime/gateway';\n\nconst DEFAULT_GATEWAY_URL = 'http://127.0.0.1:4000';\nconst MARKETPLACE_PREFIX = '/api/v1/marketplace';\nconst FETCH_TIMEOUT_MS = 30_000;\n\ntype AuthState = {\n  gatewayUrl: string;\n  accessToken: string;\n  refresh: () => Promise<AuthState>;\n};\n\nasync function loadAuth(): Promise<AuthState | null> {\n  const sessionManager = new SessionManager();\n  const session = await sessionManager.load();\n  if (session) {\n    const current = sessionManager.isExpired(session) ? await sessionManager.refresh(session) : session;\n    return authState(current, () => sessionManager.refresh(current));\n  }\n\n  const credentialsManager = new CredentialsManager();\n  const credentials = await credentialsManager.load();\n  if (!credentials) {\n    return null;\n  }\n  const current = credentialsManager.isExpired(credentials) ? await credentialsManager.refresh(credentials) : credentials;\n  return authState(current, () => credentialsManager.refresh(current));\n}\n\nfunction authState(credentials: GatewayCredentials | SessionCredentials, refresh: () => Promise<GatewayCredentials | SessionCredentials>): AuthState {\n  return {\n    gatewayUrl: credentials.gatewayUrl,\n    accessToken: credentials.accessToken,\n    refresh: async () => {\n      const updated = await refresh();\n      return authState(updated, refresh);\n    },\n  };\n}\n\nfunction getBaseUrl(gatewayUrl?: string): string {\n  const marketplaceUrl = useEnv('KB_MARKETPLACE_URL');\n  if (marketplaceUrl) {\n    return `${marketplaceUrl}${MARKETPLACE_PREFIX}`;\n  }\n  const gateway = gatewayUrl ?? useEnv('KB_GATEWAY_URL') ?? DEFAULT_GATEWAY_URL;\n  return `${gateway}${MARKETPLACE_PREFIX}`;\n}\n\nasync function request<T>(method: string, path: string, body?: Record<string, unknown>, params?: Record<string, string>): Promise<T> {\n  let auth = await loadAuth();\n  const url = new URL(`${getBaseUrl(auth?.gatewayUrl)}${path}`);\n  if (params) {\n    for (const [key, value] of Object.entries(params)) { url.searchParams.set(key, value); }\n  }\n\n  for (let attempt = 0; attempt < 2; attempt += 1) {\n    const controller = new AbortController();\n    const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n    try {\n      const headers: Record<string, string> = {};\n      if (body) { headers['Content-Type'] = 'application/json'; }\n      if (auth) { headers.Authorization = `Bearer ${auth.accessToken}`; }\n      const response = await fetch(url.toString(), {\n        method,\n        headers,\n        body: body ? JSON.stringify(body) : undefined,\n        signal: controller.signal,\n      });\n      if (response.status === 401 && auth && attempt === 0) {\n        auth = await auth.refresh();\n        continue;\n      }\n      if (response.status === 401 && !auth) {\n        throw new Error('Marketplace authentication is required. Run `kb auth login` or choose local no-auth mode during installation.');\n      }\n      if (!response.ok) {\n        const text = await response.text();\n        throw new Error(`Marketplace ${path} failed (${response.status}): ${text}`);\n      }\n      if (response.status === 204) { return undefined as T; }\n      return await response.json() as T;\n    } catch (err) {\n      if ((err as Error).name === 'AbortError') {\n        throw new Error(`Marketplace ${path} timed out — is the marketplace service running? (kb-dev start marketplace)`);\n      }\n      throw err;\n    } finally {\n      clearTimeout(timer);\n    }\n  }\n  throw new Error(`Marketplace ${path} failed after refreshing authentication`);\n}\n\nexport async function post<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('POST', path, body);\n}\n\nexport async function patch<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('PATCH', path, body);\n}\n\nexport async function del<T = unknown>(path: string, body?: Record<string, unknown>): Promise<T> {\n  return request<T>('DELETE', path, body);\n}\n\nexport async function get<T = unknown>(path: string, params?: Record<string, string>): Promise<T> {\n  return request<T>('GET', path, undefined, params);\n}\n","/**\n * @module @kb-labs/marketplace-entry/scope\n *\n * Client-side scope resolution for marketplace CLI commands. Uses the\n * canonical `findProjectConfigRoot` helper from `@kb-labs/core-workspace`\n * so the detection rules (which filenames count, how walk-up stops) match\n * what the config loader and the marketplace daemon enforce.\n *\n * Rules:\n *  - `project` is the default if cwd (or any ancestor up to the filesystem\n *    root) contains `.kb/kb.config.{json,jsonc}`.\n *  - Otherwise the default is `platform`.\n *  - `--scope` always overrides detection.\n *  - For scope=\"project\" we return the absolute projectRoot so the daemon\n *    doesn't need to re-discover it.\n */\n\nimport { findProjectConfigRoot } from '@kb-labs/core-workspace';\nimport type { MarketplaceScope, MarketplaceQueryScope } from '@kb-labs/marketplace-contracts';\n\nexport const SCOPE_FLAG_CHOICES: readonly MarketplaceScope[] = ['platform', 'project'];\nexport const QUERY_SCOPE_FLAG_CHOICES: readonly MarketplaceQueryScope[] = ['platform', 'project', 'all'];\n\nexport interface ResolvedCliScope {\n  scope: MarketplaceScope;\n  projectRoot?: string;\n  /** How the scope was determined — surfaces in --verbose logs. */\n  reason: 'flag' | 'auto-detect' | 'fallback';\n}\n\nexport interface ResolvedCliQueryScope extends Omit<ResolvedCliScope, 'scope'> {\n  scope: MarketplaceQueryScope;\n}\n\n/**\n * Resolve the effective scope for a mutating command (`link`, `unlink`,\n * `install`, ...). `flag` is the value of `--scope` (if supplied). The\n * helper never returns `'all'` for mutating commands — callers restrict\n * choices via `SCOPE_FLAG_CHOICES`.\n */\nexport async function resolveCliScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliScope> {\n  if (flag) {\n    assertMutatingScope(flag);\n    if (flag === 'project') {\n      const projectRoot = await findProjectConfigRoot(cwd);\n      if (!projectRoot) {\n        throw new CliScopeError(\n          'SCOPE_PROJECT_ROOT_NOT_FOUND',\n          `--scope=project requires a .kb/kb.config.{json,jsonc} ancestor of ${cwd} — none found.`,\n        );\n      }\n      return { scope: 'project', projectRoot, reason: 'flag' };\n    }\n    return { scope: 'platform', reason: 'flag' };\n  }\n\n  const projectRoot = await findProjectConfigRoot(cwd);\n  if (projectRoot) {\n    return { scope: 'project', projectRoot, reason: 'auto-detect' };\n  }\n  return { scope: 'platform', reason: 'fallback' };\n}\n\n/**\n * Resolve the effective scope for a read-only command (`list`). Accepts\n * `'all'` as an explicit flag value.\n */\nexport async function resolveCliQueryScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliQueryScope> {\n  if (flag === 'all') {\n    const projectRoot = await findProjectConfigRoot(cwd);\n    return { scope: 'all', projectRoot, reason: 'flag' };\n  }\n  const base = await resolveCliScope(cwd, flag);\n  return { scope: base.scope, projectRoot: base.projectRoot, reason: base.reason };\n}\n\nfunction assertMutatingScope(value: string): asserts value is MarketplaceScope {\n  if (!SCOPE_FLAG_CHOICES.includes(value as MarketplaceScope)) {\n    throw new CliScopeError(\n      'SCOPE_INVALID',\n      `--scope must be one of: ${SCOPE_FLAG_CHOICES.join(', ')} (got ${JSON.stringify(value)})`,\n    );\n  }\n}\n\nexport class CliScopeError extends Error {\n  readonly code: string;\n  constructor(code: string, message: string) {\n    super(message);\n    this.code = code;\n    this.name = 'CliScopeError';\n  }\n}\n\n/**\n * Build the body-payload fragment expected by `parseMutatingScope` on the\n * API side: `{ scope, projectRoot? }`. Kept as a helper so every command\n * sends the same shape and nothing drifts out-of-sync with the server.\n */\nexport function scopeBody(ctx: ResolvedCliScope | ResolvedCliQueryScope): {\n  scope: MarketplaceScope | MarketplaceQueryScope;\n  projectRoot?: string;\n} {\n  return {\n    scope: ctx.scope,\n    ...(ctx.projectRoot ? { projectRoot: ctx.projectRoot } : {}),\n  };\n}\n","import { defineCommand, validationError, handleError, type PluginContextV3, type CommandResult } from '@kb-labs/sdk';\nimport { post } from '../../http.js';\nimport { resolveCliScope, scopeBody, CliScopeError } from '../../scope.js';\n\ninterface EnableFlags { json?: boolean; scope?: string; 'dry-run'?: boolean }\ninterface EnableInput { argv?: string[]; flags?: EnableFlags }\n\nexport default defineCommand<unknown, EnableInput, { packageId: string; scope: string }>({\n  id: 'marketplace:plugins:enable',\n  description: 'Enable a plugin',\n\n  handler: {\n    async intent(_ctx: PluginContextV3, input: EnableInput) {\n      const packageId = input.argv?.[0] ?? '(unknown)';\n      return {\n        summary: `Enable plugin \"${packageId}\"`,\n        operations: [{ type: 'update' as const, resource: 'plugin', details: { packageId, enabled: true } }],\n      };\n    },\n\n    async execute(ctx: PluginContextV3, input: EnableInput): Promise<CommandResult<{ packageId: string; scope: string }>> {\n      const packageId = input.argv?.[0];\n      const flags = (input.flags ?? input) as EnableFlags;\n\n      if (!packageId) {\n        validationError(ctx, 'Specify a plugin to enable', 'Usage: kb marketplace plugins enable <plugin-id>', flags.json);\n        return { ok: false, error: 'A package id is required', result: { packageId: '', scope: '' } };\n      }\n\n      let scopeCtx;\n      try {\n        scopeCtx = await resolveCliScope(ctx.cwd, flags.scope);\n      } catch (err) {\n        if (err instanceof CliScopeError) {\n          validationError(ctx, err.message, undefined, flags.json);\n        } else {\n          handleError(ctx, err, flags.json);\n        }\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { packageId: '', scope: '' } };\n      }\n\n      try {\n        await post(`/packages/enable`, { packageId, ...scopeBody(scopeCtx) });\n        if (flags.json) {\n          ctx.ui?.json?.({ ok: true, packageId, scope: scopeCtx.scope });\n        } else {\n          ctx.ui?.success?.(`Enabled ${packageId} (${scopeCtx.scope})`);\n        }\n        return { ok: true, result: { packageId, scope: scopeCtx.scope } };\n      } catch (err) {\n        handleError(ctx, err, flags.json);\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { packageId: '', scope: '' } };\n      }\n    },\n  },\n});\n"]}

package/dist/commands/plugins/link.js

@@ -64,6 +64,9 @@ async function request(method, path2, body, params) {
         auth = await auth.refresh();
         continue;
       }
+      if (response.status === 401 && !auth) {
+        throw new Error("Marketplace authentication is required. Run `kb auth login` or choose local no-auth mode during installation.");
+      }
       if (!response.ok) {
         const text = await response.text();
         throw new Error(`Marketplace ${path2} failed (${response.status}): ${text}`);

package/dist/commands/plugins/link.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/http.ts","../../../src/scope.ts","../../../src/commands/plugins/link.ts"],"names":["current","path","projectRoot"],"mappings":";;;;;;AAQA,IAAM,mBAAA,GAAsB,uBAAA;AAC5B,IAAM,kBAAA,GAAqB,qBAAA;AAC3B,IAAM,gBAAA,GAAmB,GAAA;AAQzB,eAAe,QAAA,GAAsC;AACnD,EAAA,MAAM,cAAA,GAAiB,IAAI,cAAA,EAAe;AAC1C,EAAA,MAAM,OAAA,GAAU,MAAM,cAAA,CAAe,IAAA,EAAK;AAC1C,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,MAAMA,QAAAA,GAAU,eAAe,SAAA,CAAU,OAAO,IAAI,MAAM,cAAA,CAAe,OAAA,CAAQ,OAAO,CAAA,GAAI,OAAA;AAC5F,IAAA,OAAO,UAAUA,QAAAA,EAAS,MAAM,cAAA,CAAe,OAAA,CAAQA,QAAO,CAAC,CAAA;AAAA,EACjE;AAEA,EAAA,MAAM,kBAAA,GAAqB,IAAI,kBAAA,EAAmB;AAClD,EAAA,MAAM,WAAA,GAAc,MAAM,kBAAA,CAAmB,IAAA,EAAK;AAClD,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,OAAA,GAAU,mBAAmB,SAAA,CAAU,WAAW,IAAI,MAAM,kBAAA,CAAmB,OAAA,CAAQ,WAAW,CAAA,GAAI,WAAA;AAC5G,EAAA,OAAO,UAAU,OAAA,EAAS,MAAM,kBAAA,CAAmB,OAAA,CAAQ,OAAO,CAAC,CAAA;AACrE;AAEA,SAAS,SAAA,CAAU,aAAsD,OAAA,EAA4E;AACnJ,EAAA,OAAO;AAAA,IACL,YAAY,WAAA,CAAY,UAAA;AAAA,IACxB,aAAa,WAAA,CAAY,WAAA;AAAA,IACzB,SAAS,YAAY;AACnB,MAAA,MAAM,OAAA,GAAU,MAAM,OAAA,EAAQ;AAC9B,MAAA,OAAO,SAAA,CAAU,SAAS,OAAO,CAAA;AAAA,IACnC;AAAA,GACF;AACF;AAEA,SAAS,WAAW,UAAA,EAA6B;AAC/C,EAAA,MAAM,cAAA,GAAiB,OAAO,oBAAoB,CAAA;AAClD,EAAA,IAAI,cAAA,EAAgB;AAClB,IAAA,OAAO,CAAA,EAAG,cAAc,CAAA,EAAG,kBAAkB,CAAA,CAAA;AAAA,EAC/C;AACA,EAAA,MAAM,OAAA,GAAU,UAAA,IAAc,MAAA,CAAO,gBAAgB,CAAA,IAAK,mBAAA;AAC1D,EAAA,OAAO,CAAA,EAAG,OAAO,CAAA,EAAG,kBAAkB,CAAA,CAAA;AACxC;AAEA,eAAe,OAAA,CAAW,MAAA,EAAgBC,KAAAA,EAAc,IAAA,EAAgC,MAAA,EAA6C;AACnI,EAAA,IAAI,IAAA,GAAO,MAAM,QAAA,EAAS;AAC1B,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,CAAA,EAAG,UAAA,CAAW,MAAM,UAAU,CAAC,CAAA,EAAGA,KAAI,CAAA,CAAE,CAAA;AAK5D,EAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,GAAU,CAAA,EAAG,WAAW,CAAA,EAAG;AAC/C,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,gBAAgB,CAAA;AACnE,IAAA,IAAI;AACF,MAAA,MAAM,UAAkC,EAAC;AACzC,MAAA,IAAI,IAAA,EAAM;AAAE,QAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAAA,MAAoB;AAC1D,MAAA,IAAI,IAAA,EAAM;AAAE,QAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,IAAA,CAAK,WAAW,CAAA,CAAA;AAAA,MAAI;AAClE,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,CAAI,UAAS,EAAG;AAAA,QAC3C,MAAA;AAAA,QACA,OAAA;AAAA,QACA,IAAA,EAAM,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,GAAI,KAAA,CAAA;AAAA,QACpC,QAAQ,UAAA,CAAW;AAAA,OACpB,CAAA;AACD,MAAA,IAAI,QAAA,CAAS,MAAA,KAAW,GAAA,IAAO,IAAA,IAAQ,YAAY,CAAA,EAAG;AACpD,QAAA,IAAA,GAAO,MAAM,KAAK,OAAA,EAAQ;AAC1B,QAAA;AAAA,MACF;AACA,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,QAAA,MAAM,IAAI,MAAM,CAAA,YAAA,EAAeA,KAAI,YAAY,QAAA,CAAS,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,CAAE,CAAA;AAAA,MAC5E;AACA,MAAA,IAAI,QAAA,CAAS,WAAW,GAAA,EAAK;AAAE,QAAA,OAAO,KAAA,CAAA;AAAA,MAAgB;AACtD,MAAA,OAAO,MAAM,SAAS,IAAA,EAAK;AAAA,IAC7B,SAAS,GAAA,EAAK;AACZ,MAAA,IAAK,GAAA,CAAc,SAAS,YAAA,EAAc;AACxC,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAeA,KAAI,CAAA,gFAAA,CAA6E,CAAA;AAAA,MAClH;AACA,MAAA,MAAM,GAAA;AAAA,IACR,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAAA,IACpB;AAAA,EACF;AACA,EAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAeA,KAAI,CAAA,uCAAA,CAAyC,CAAA;AAC9E;AAEA,eAAsB,IAAA,CAAkBA,OAAc,IAAA,EAA2C;AAC/F,EAAA,OAAO,OAAA,CAAW,MAAA,EAAQA,KAAAA,EAAM,IAAI,CAAA;AACtC;AC/EO,IAAM,kBAAA,GAAkD,CAAC,UAAA,EAAY,SAAS,CAAA;AAoBrF,eAAsB,eAAA,CACpB,KACA,IAAA,EAC2B;AAC3B,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,mBAAA,CAAoB,IAAI,CAAA;AACxB,IAAA,IAAI,SAAS,SAAA,EAAW;AACtB,MAAA,MAAMC,YAAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,MAAA,IAAI,CAACA,YAAAA,EAAa;AAChB,QAAA,MAAM,IAAI,aAAA;AAAA,UACR,8BAAA;AAAA,UACA,qEAAqE,GAAG,CAAA,mBAAA;AAAA,SAC1E;AAAA,MACF;AACA,MAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAAA,YAAAA,EAAa,QAAQ,MAAA,EAAO;AAAA,IACzD;AACA,IAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,MAAA,EAAO;AAAA,EAC7C;AAEA,EAAA,MAAM,WAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAa,QAAQ,aAAA,EAAc;AAAA,EAChE;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,UAAA,EAAW;AACjD;AAkBA,SAAS,oBAAoB,KAAA,EAAkD;AAC7E,EAAA,IAAI,CAAC,kBAAA,CAAmB,QAAA,CAAS,KAAyB,CAAA,EAAG;AAC3D,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,eAAA;AAAA,MACA,CAAA,wBAAA,EAA2B,mBAAmB,IAAA,CAAK,IAAI,CAAC,CAAA,MAAA,EAAS,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC,CAAA,CAAA;AAAA,KACxF;AAAA,EACF;AACF;AAEO,IAAM,aAAA,GAAN,cAA4B,KAAA,CAAM;AAAA,EAC9B,IAAA;AAAA,EACT,WAAA,CAAY,MAAc,OAAA,EAAiB;AACzC,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AAAA,EACd;AACF,CAAA;AAOO,SAAS,UAAU,GAAA,EAGxB;AACA,EAAA,OAAO;AAAA,IACL,OAAO,GAAA,CAAI,KAAA;AAAA,IACX,GAAI,IAAI,WAAA,GAAc,EAAE,aAAa,GAAA,CAAI,WAAA,KAAgB;AAAC,GAC5D;AACF;;;ACxFA,IAAO,eAAQ,aAAA,CAAiE;AAAA,EAC9E,EAAA,EAAI,0BAAA;AAAA,EACJ,WAAA,EAAa,qCAAA;AAAA,EAEb,OAAA,EAAS;AAAA,IACP,MAAM,MAAA,CAAO,IAAA,EAAuB,KAAA,EAAkB;AACpD,MAAA,MAAM,UAAA,GAAa,KAAA,CAAM,IAAA,GAAO,CAAC,CAAA,IAAK,WAAA;AACtC,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,yBAAyB,UAAU,CAAA,CAAA,CAAA;AAAA,QAC5C,UAAA,EAAY,CAAC,EAAE,IAAA,EAAM,QAAA,EAAmB,QAAA,EAAU,aAAA,EAAe,OAAA,EAAS,EAAE,IAAA,EAAM,UAAA,EAAW,EAAG;AAAA,OAClG;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,OAAA,CAAQ,GAAA,EAAsB,KAAA,EAAyE;AAC3G,MAAA,MAAM,UAAA,GAAa,KAAA,CAAM,IAAA,GAAO,CAAC,CAAA;AACjC,MAAA,MAAM,KAAA,GAAS,MAAM,KAAA,IAAS,KAAA;AAE9B,MAAA,IAAI,CAAC,UAAA,EAAY;AACf,QAAA,eAAA,CAAgB,GAAA,EAAK,+BAAA,EAAiC,2CAAA,EAA6C,KAAA,CAAM,IAAI,CAAA;AAC7G,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,2BAAA,EAA6B,MAAA,EAAQ,EAAE,EAAA,EAAI,EAAA,EAAI,KAAA,EAAO,EAAA,EAAG,EAAE;AAAA,MACxF;AAEA,MAAA,IAAI,QAAA;AACJ,MAAA,IAAI;AACF,QAAA,QAAA,GAAW,MAAM,eAAA,CAAgB,GAAA,CAAI,GAAA,EAAK,MAAM,KAAK,CAAA;AAAA,MACvD,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,eAAe,aAAA,EAAe;AAChC,UAAA,eAAA,CAAgB,GAAA,EAAK,GAAA,CAAI,OAAA,EAAS,MAAA,EAAW,MAAM,IAAI,CAAA;AAAA,QACzD,CAAA,MAAO;AACL,UAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAAA,QAClC;AACA,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,GAAA,YAAe,QAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,GAAG,MAAA,EAAQ,EAAE,IAAI,EAAA,EAAI,KAAA,EAAO,IAAG,EAAE;AAAA,MAC7G;AAEA,MAAA,IAAI;AAGF,QAAA,MAAM,OAAA,GAAe,IAAA,CAAA,OAAA,CAAQ,GAAA,CAAI,GAAA,EAAK,UAAU,CAAA;AAChD,QAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAmB,CAAA,cAAA,CAAA,EAAkB,EAAE,IAAA,EAAM,OAAA,EAAS,GAAG,SAAA,CAAU,QAAQ,CAAA,EAAG,CAAA;AAEnG,QAAA,IAAI,MAAM,IAAA,EAAM;AACd,UAAA,GAAA,CAAI,EAAA,EAAI,IAAA,GAAO,EAAE,EAAA,EAAI,IAAA,EAAM,EAAA,EAAI,MAAA,CAAO,EAAA,EAAI,KAAA,EAAO,MAAA,CAAO,KAAA,EAAO,CAAA;AAAA,QACjE,CAAA,MAAO;AACL,UAAA,GAAA,CAAI,EAAA,EAAI,UAAU,CAAA,OAAA,EAAU,MAAA,CAAO,EAAE,CAAA,EAAA,EAAK,MAAA,CAAO,KAAK,CAAA,CAAA,CAAG,CAAA;AAAA,QAC3D;AACA,QAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,MAAA,EAAQ,EAAE,EAAA,EAAI,MAAA,CAAO,EAAA,EAAI,KAAA,EAAO,MAAA,CAAO,KAAA,EAAM,EAAE;AAAA,MACpE,SAAS,GAAA,EAAK;AACZ,QAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAChC,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,GAAA,YAAe,QAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,GAAG,MAAA,EAAQ,EAAE,IAAI,EAAA,EAAI,KAAA,EAAO,IAAG,EAAE;AAAA,MAC7G;AAAA,IACF;AAAA;AAEJ,CAAC","file":"link.js","sourcesContent":["/**\n * HTTP client for marketplace service via Gateway.\n */\n\nimport { useEnv } from '@kb-labs/sdk';\nimport { CredentialsManager, SessionManager } from '@kb-labs/cli-runtime/gateway';\nimport type { GatewayCredentials, SessionCredentials } from '@kb-labs/cli-runtime/gateway';\n\nconst DEFAULT_GATEWAY_URL = 'http://127.0.0.1:4000';\nconst MARKETPLACE_PREFIX = '/api/v1/marketplace';\nconst FETCH_TIMEOUT_MS = 30_000;\n\ntype AuthState = {\n  gatewayUrl: string;\n  accessToken: string;\n  refresh: () => Promise<AuthState>;\n};\n\nasync function loadAuth(): Promise<AuthState | null> {\n  const sessionManager = new SessionManager();\n  const session = await sessionManager.load();\n  if (session) {\n    const current = sessionManager.isExpired(session) ? await sessionManager.refresh(session) : session;\n    return authState(current, () => sessionManager.refresh(current));\n  }\n\n  const credentialsManager = new CredentialsManager();\n  const credentials = await credentialsManager.load();\n  if (!credentials) {\n    return null;\n  }\n  const current = credentialsManager.isExpired(credentials) ? await credentialsManager.refresh(credentials) : credentials;\n  return authState(current, () => credentialsManager.refresh(current));\n}\n\nfunction authState(credentials: GatewayCredentials | SessionCredentials, refresh: () => Promise<GatewayCredentials | SessionCredentials>): AuthState {\n  return {\n    gatewayUrl: credentials.gatewayUrl,\n    accessToken: credentials.accessToken,\n    refresh: async () => {\n      const updated = await refresh();\n      return authState(updated, refresh);\n    },\n  };\n}\n\nfunction getBaseUrl(gatewayUrl?: string): string {\n  const marketplaceUrl = useEnv('KB_MARKETPLACE_URL');\n  if (marketplaceUrl) {\n    return `${marketplaceUrl}${MARKETPLACE_PREFIX}`;\n  }\n  const gateway = gatewayUrl ?? useEnv('KB_GATEWAY_URL') ?? DEFAULT_GATEWAY_URL;\n  return `${gateway}${MARKETPLACE_PREFIX}`;\n}\n\nasync function request<T>(method: string, path: string, body?: Record<string, unknown>, params?: Record<string, string>): Promise<T> {\n  let auth = await loadAuth();\n  const url = new URL(`${getBaseUrl(auth?.gatewayUrl)}${path}`);\n  if (params) {\n    for (const [key, value] of Object.entries(params)) { url.searchParams.set(key, value); }\n  }\n\n  for (let attempt = 0; attempt < 2; attempt += 1) {\n    const controller = new AbortController();\n    const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n    try {\n      const headers: Record<string, string> = {};\n      if (body) { headers['Content-Type'] = 'application/json'; }\n      if (auth) { headers.Authorization = `Bearer ${auth.accessToken}`; }\n      const response = await fetch(url.toString(), {\n        method,\n        headers,\n        body: body ? JSON.stringify(body) : undefined,\n        signal: controller.signal,\n      });\n      if (response.status === 401 && auth && attempt === 0) {\n        auth = await auth.refresh();\n        continue;\n      }\n      if (!response.ok) {\n        const text = await response.text();\n        throw new Error(`Marketplace ${path} failed (${response.status}): ${text}`);\n      }\n      if (response.status === 204) { return undefined as T; }\n      return await response.json() as T;\n    } catch (err) {\n      if ((err as Error).name === 'AbortError') {\n        throw new Error(`Marketplace ${path} timed out — is the marketplace service running? (kb-dev start marketplace)`);\n      }\n      throw err;\n    } finally {\n      clearTimeout(timer);\n    }\n  }\n  throw new Error(`Marketplace ${path} failed after refreshing authentication`);\n}\n\nexport async function post<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('POST', path, body);\n}\n\nexport async function patch<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('PATCH', path, body);\n}\n\nexport async function del<T = unknown>(path: string, body?: Record<string, unknown>): Promise<T> {\n  return request<T>('DELETE', path, body);\n}\n\nexport async function get<T = unknown>(path: string, params?: Record<string, string>): Promise<T> {\n  return request<T>('GET', path, undefined, params);\n}\n","/**\n * @module @kb-labs/marketplace-entry/scope\n *\n * Client-side scope resolution for marketplace CLI commands. Uses the\n * canonical `findProjectConfigRoot` helper from `@kb-labs/core-workspace`\n * so the detection rules (which filenames count, how walk-up stops) match\n * what the config loader and the marketplace daemon enforce.\n *\n * Rules:\n *  - `project` is the default if cwd (or any ancestor up to the filesystem\n *    root) contains `.kb/kb.config.{json,jsonc}`.\n *  - Otherwise the default is `platform`.\n *  - `--scope` always overrides detection.\n *  - For scope=\"project\" we return the absolute projectRoot so the daemon\n *    doesn't need to re-discover it.\n */\n\nimport { findProjectConfigRoot } from '@kb-labs/core-workspace';\nimport type { MarketplaceScope, MarketplaceQueryScope } from '@kb-labs/marketplace-contracts';\n\nexport const SCOPE_FLAG_CHOICES: readonly MarketplaceScope[] = ['platform', 'project'];\nexport const QUERY_SCOPE_FLAG_CHOICES: readonly MarketplaceQueryScope[] = ['platform', 'project', 'all'];\n\nexport interface ResolvedCliScope {\n  scope: MarketplaceScope;\n  projectRoot?: string;\n  /** How the scope was determined — surfaces in --verbose logs. */\n  reason: 'flag' | 'auto-detect' | 'fallback';\n}\n\nexport interface ResolvedCliQueryScope extends Omit<ResolvedCliScope, 'scope'> {\n  scope: MarketplaceQueryScope;\n}\n\n/**\n * Resolve the effective scope for a mutating command (`link`, `unlink`,\n * `install`, ...). `flag` is the value of `--scope` (if supplied). The\n * helper never returns `'all'` for mutating commands — callers restrict\n * choices via `SCOPE_FLAG_CHOICES`.\n */\nexport async function resolveCliScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliScope> {\n  if (flag) {\n    assertMutatingScope(flag);\n    if (flag === 'project') {\n      const projectRoot = await findProjectConfigRoot(cwd);\n      if (!projectRoot) {\n        throw new CliScopeError(\n          'SCOPE_PROJECT_ROOT_NOT_FOUND',\n          `--scope=project requires a .kb/kb.config.{json,jsonc} ancestor of ${cwd} — none found.`,\n        );\n      }\n      return { scope: 'project', projectRoot, reason: 'flag' };\n    }\n    return { scope: 'platform', reason: 'flag' };\n  }\n\n  const projectRoot = await findProjectConfigRoot(cwd);\n  if (projectRoot) {\n    return { scope: 'project', projectRoot, reason: 'auto-detect' };\n  }\n  return { scope: 'platform', reason: 'fallback' };\n}\n\n/**\n * Resolve the effective scope for a read-only command (`list`). Accepts\n * `'all'` as an explicit flag value.\n */\nexport async function resolveCliQueryScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliQueryScope> {\n  if (flag === 'all') {\n    const projectRoot = await findProjectConfigRoot(cwd);\n    return { scope: 'all', projectRoot, reason: 'flag' };\n  }\n  const base = await resolveCliScope(cwd, flag);\n  return { scope: base.scope, projectRoot: base.projectRoot, reason: base.reason };\n}\n\nfunction assertMutatingScope(value: string): asserts value is MarketplaceScope {\n  if (!SCOPE_FLAG_CHOICES.includes(value as MarketplaceScope)) {\n    throw new CliScopeError(\n      'SCOPE_INVALID',\n      `--scope must be one of: ${SCOPE_FLAG_CHOICES.join(', ')} (got ${JSON.stringify(value)})`,\n    );\n  }\n}\n\nexport class CliScopeError extends Error {\n  readonly code: string;\n  constructor(code: string, message: string) {\n    super(message);\n    this.code = code;\n    this.name = 'CliScopeError';\n  }\n}\n\n/**\n * Build the body-payload fragment expected by `parseMutatingScope` on the\n * API side: `{ scope, projectRoot? }`. Kept as a helper so every command\n * sends the same shape and nothing drifts out-of-sync with the server.\n */\nexport function scopeBody(ctx: ResolvedCliScope | ResolvedCliQueryScope): {\n  scope: MarketplaceScope | MarketplaceQueryScope;\n  projectRoot?: string;\n} {\n  return {\n    scope: ctx.scope,\n    ...(ctx.projectRoot ? { projectRoot: ctx.projectRoot } : {}),\n  };\n}\n","import { defineCommand, validationError, handleError, type PluginContextV3, type CommandResult } from '@kb-labs/sdk';\nimport * as path from 'node:path';\nimport { post } from '../../http.js';\nimport { resolveCliScope, scopeBody, CliScopeError } from '../../scope.js';\n\ninterface LinkFlags {\n  scope?: string;\n  json?: boolean;\n  'dry-run'?: boolean;\n}\n\ninterface LinkInput {\n  argv?: string[];\n  flags?: LinkFlags;\n}\n\ninterface LinkResponse {\n  id: string;\n  version: string;\n  primaryKind: string;\n  provides: string[];\n  packageRoot: string;\n  scope: string;\n}\n\nexport default defineCommand<unknown, LinkInput, { id: string; scope: string }>({\n  id: 'marketplace:plugins:link',\n  description: 'Link a local plugin for development',\n\n  handler: {\n    async intent(_ctx: PluginContextV3, input: LinkInput) {\n      const pluginPath = input.argv?.[0] ?? '(unknown)';\n      return {\n        summary: `Link local plugin at \"${pluginPath}\"`,\n        operations: [{ type: 'create' as const, resource: 'plugin-link', details: { path: pluginPath } }],\n      };\n    },\n\n    async execute(ctx: PluginContextV3, input: LinkInput): Promise<CommandResult<{ id: string; scope: string }>> {\n      const pluginPath = input.argv?.[0];\n      const flags = (input.flags ?? input) as LinkFlags;\n\n      if (!pluginPath) {\n        validationError(ctx, 'Specify a plugin path to link', 'Usage: kb marketplace plugins link <path>', flags.json);\n        return { ok: false, error: 'A plugin path is required', result: { id: '', scope: '' } };\n      }\n\n      let scopeCtx;\n      try {\n        scopeCtx = await resolveCliScope(ctx.cwd, flags.scope);\n      } catch (err) {\n        if (err instanceof CliScopeError) {\n          validationError(ctx, err.message, undefined, flags.json);\n        } else {\n          handleError(ctx, err, flags.json);\n        }\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { id: '', scope: '' } };\n      }\n\n      try {\n        // Resolve path against cwd so the daemon always receives an absolute\n        // location. Keeps the server side from inheriting any ambient cwd.\n        const absPath = path.resolve(ctx.cwd, pluginPath);\n        const result = await post<LinkResponse>(`/packages/link`, { path: absPath, ...scopeBody(scopeCtx) });\n\n        if (flags.json) {\n          ctx.ui?.json?.({ ok: true, id: result.id, scope: result.scope });\n        } else {\n          ctx.ui?.success?.(`Linked ${result.id} (${result.scope})`);\n        }\n        return { ok: true, result: { id: result.id, scope: result.scope } };\n      } catch (err) {\n        handleError(ctx, err, flags.json);\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { id: '', scope: '' } };\n      }\n    },\n  },\n});\n"]}
+{"version":3,"sources":["../../../src/http.ts","../../../src/scope.ts","../../../src/commands/plugins/link.ts"],"names":["current","path","projectRoot"],"mappings":";;;;;;AAQA,IAAM,mBAAA,GAAsB,uBAAA;AAC5B,IAAM,kBAAA,GAAqB,qBAAA;AAC3B,IAAM,gBAAA,GAAmB,GAAA;AAQzB,eAAe,QAAA,GAAsC;AACnD,EAAA,MAAM,cAAA,GAAiB,IAAI,cAAA,EAAe;AAC1C,EAAA,MAAM,OAAA,GAAU,MAAM,cAAA,CAAe,IAAA,EAAK;AAC1C,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,MAAMA,QAAAA,GAAU,eAAe,SAAA,CAAU,OAAO,IAAI,MAAM,cAAA,CAAe,OAAA,CAAQ,OAAO,CAAA,GAAI,OAAA;AAC5F,IAAA,OAAO,UAAUA,QAAAA,EAAS,MAAM,cAAA,CAAe,OAAA,CAAQA,QAAO,CAAC,CAAA;AAAA,EACjE;AAEA,EAAA,MAAM,kBAAA,GAAqB,IAAI,kBAAA,EAAmB;AAClD,EAAA,MAAM,WAAA,GAAc,MAAM,kBAAA,CAAmB,IAAA,EAAK;AAClD,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,OAAA,GAAU,mBAAmB,SAAA,CAAU,WAAW,IAAI,MAAM,kBAAA,CAAmB,OAAA,CAAQ,WAAW,CAAA,GAAI,WAAA;AAC5G,EAAA,OAAO,UAAU,OAAA,EAAS,MAAM,kBAAA,CAAmB,OAAA,CAAQ,OAAO,CAAC,CAAA;AACrE;AAEA,SAAS,SAAA,CAAU,aAAsD,OAAA,EAA4E;AACnJ,EAAA,OAAO;AAAA,IACL,YAAY,WAAA,CAAY,UAAA;AAAA,IACxB,aAAa,WAAA,CAAY,WAAA;AAAA,IACzB,SAAS,YAAY;AACnB,MAAA,MAAM,OAAA,GAAU,MAAM,OAAA,EAAQ;AAC9B,MAAA,OAAO,SAAA,CAAU,SAAS,OAAO,CAAA;AAAA,IACnC;AAAA,GACF;AACF;AAEA,SAAS,WAAW,UAAA,EAA6B;AAC/C,EAAA,MAAM,cAAA,GAAiB,OAAO,oBAAoB,CAAA;AAClD,EAAA,IAAI,cAAA,EAAgB;AAClB,IAAA,OAAO,CAAA,EAAG,cAAc,CAAA,EAAG,kBAAkB,CAAA,CAAA;AAAA,EAC/C;AACA,EAAA,MAAM,OAAA,GAAU,UAAA,IAAc,MAAA,CAAO,gBAAgB,CAAA,IAAK,mBAAA;AAC1D,EAAA,OAAO,CAAA,EAAG,OAAO,CAAA,EAAG,kBAAkB,CAAA,CAAA;AACxC;AAEA,eAAe,OAAA,CAAW,MAAA,EAAgBC,KAAAA,EAAc,IAAA,EAAgC,MAAA,EAA6C;AACnI,EAAA,IAAI,IAAA,GAAO,MAAM,QAAA,EAAS;AAC1B,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,CAAA,EAAG,UAAA,CAAW,MAAM,UAAU,CAAC,CAAA,EAAGA,KAAI,CAAA,CAAE,CAAA;AAK5D,EAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,GAAU,CAAA,EAAG,WAAW,CAAA,EAAG;AAC/C,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,gBAAgB,CAAA;AACnE,IAAA,IAAI;AACF,MAAA,MAAM,UAAkC,EAAC;AACzC,MAAA,IAAI,IAAA,EAAM;AAAE,QAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAAA,MAAoB;AAC1D,MAAA,IAAI,IAAA,EAAM;AAAE,QAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,IAAA,CAAK,WAAW,CAAA,CAAA;AAAA,MAAI;AAClE,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,CAAI,UAAS,EAAG;AAAA,QAC3C,MAAA;AAAA,QACA,OAAA;AAAA,QACA,IAAA,EAAM,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,GAAI,KAAA,CAAA;AAAA,QACpC,QAAQ,UAAA,CAAW;AAAA,OACpB,CAAA;AACD,MAAA,IAAI,QAAA,CAAS,MAAA,KAAW,GAAA,IAAO,IAAA,IAAQ,YAAY,CAAA,EAAG;AACpD,QAAA,IAAA,GAAO,MAAM,KAAK,OAAA,EAAQ;AAC1B,QAAA;AAAA,MACF;AACA,MAAA,IAAI,QAAA,CAAS,MAAA,KAAW,GAAA,IAAO,CAAC,IAAA,EAAM;AACpC,QAAA,MAAM,IAAI,MAAM,+GAA+G,CAAA;AAAA,MACjI;AACA,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,QAAA,MAAM,IAAI,MAAM,CAAA,YAAA,EAAeA,KAAI,YAAY,QAAA,CAAS,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,CAAE,CAAA;AAAA,MAC5E;AACA,MAAA,IAAI,QAAA,CAAS,WAAW,GAAA,EAAK;AAAE,QAAA,OAAO,KAAA,CAAA;AAAA,MAAgB;AACtD,MAAA,OAAO,MAAM,SAAS,IAAA,EAAK;AAAA,IAC7B,SAAS,GAAA,EAAK;AACZ,MAAA,IAAK,GAAA,CAAc,SAAS,YAAA,EAAc;AACxC,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAeA,KAAI,CAAA,gFAAA,CAA6E,CAAA;AAAA,MAClH;AACA,MAAA,MAAM,GAAA;AAAA,IACR,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAAA,IACpB;AAAA,EACF;AACA,EAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAeA,KAAI,CAAA,uCAAA,CAAyC,CAAA;AAC9E;AAEA,eAAsB,IAAA,CAAkBA,OAAc,IAAA,EAA2C;AAC/F,EAAA,OAAO,OAAA,CAAW,MAAA,EAAQA,KAAAA,EAAM,IAAI,CAAA;AACtC;AClFO,IAAM,kBAAA,GAAkD,CAAC,UAAA,EAAY,SAAS,CAAA;AAoBrF,eAAsB,eAAA,CACpB,KACA,IAAA,EAC2B;AAC3B,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,mBAAA,CAAoB,IAAI,CAAA;AACxB,IAAA,IAAI,SAAS,SAAA,EAAW;AACtB,MAAA,MAAMC,YAAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,MAAA,IAAI,CAACA,YAAAA,EAAa;AAChB,QAAA,MAAM,IAAI,aAAA;AAAA,UACR,8BAAA;AAAA,UACA,qEAAqE,GAAG,CAAA,mBAAA;AAAA,SAC1E;AAAA,MACF;AACA,MAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAAA,YAAAA,EAAa,QAAQ,MAAA,EAAO;AAAA,IACzD;AACA,IAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,MAAA,EAAO;AAAA,EAC7C;AAEA,EAAA,MAAM,WAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAa,QAAQ,aAAA,EAAc;AAAA,EAChE;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,UAAA,EAAW;AACjD;AAkBA,SAAS,oBAAoB,KAAA,EAAkD;AAC7E,EAAA,IAAI,CAAC,kBAAA,CAAmB,QAAA,CAAS,KAAyB,CAAA,EAAG;AAC3D,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,eAAA;AAAA,MACA,CAAA,wBAAA,EAA2B,mBAAmB,IAAA,CAAK,IAAI,CAAC,CAAA,MAAA,EAAS,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC,CAAA,CAAA;AAAA,KACxF;AAAA,EACF;AACF;AAEO,IAAM,aAAA,GAAN,cAA4B,KAAA,CAAM;AAAA,EAC9B,IAAA;AAAA,EACT,WAAA,CAAY,MAAc,OAAA,EAAiB;AACzC,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AAAA,EACd;AACF,CAAA;AAOO,SAAS,UAAU,GAAA,EAGxB;AACA,EAAA,OAAO;AAAA,IACL,OAAO,GAAA,CAAI,KAAA;AAAA,IACX,GAAI,IAAI,WAAA,GAAc,EAAE,aAAa,GAAA,CAAI,WAAA,KAAgB;AAAC,GAC5D;AACF;;;ACxFA,IAAO,eAAQ,aAAA,CAAiE;AAAA,EAC9E,EAAA,EAAI,0BAAA;AAAA,EACJ,WAAA,EAAa,qCAAA;AAAA,EAEb,OAAA,EAAS;AAAA,IACP,MAAM,MAAA,CAAO,IAAA,EAAuB,KAAA,EAAkB;AACpD,MAAA,MAAM,UAAA,GAAa,KAAA,CAAM,IAAA,GAAO,CAAC,CAAA,IAAK,WAAA;AACtC,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,yBAAyB,UAAU,CAAA,CAAA,CAAA;AAAA,QAC5C,UAAA,EAAY,CAAC,EAAE,IAAA,EAAM,QAAA,EAAmB,QAAA,EAAU,aAAA,EAAe,OAAA,EAAS,EAAE,IAAA,EAAM,UAAA,EAAW,EAAG;AAAA,OAClG;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,OAAA,CAAQ,GAAA,EAAsB,KAAA,EAAyE;AAC3G,MAAA,MAAM,UAAA,GAAa,KAAA,CAAM,IAAA,GAAO,CAAC,CAAA;AACjC,MAAA,MAAM,KAAA,GAAS,MAAM,KAAA,IAAS,KAAA;AAE9B,MAAA,IAAI,CAAC,UAAA,EAAY;AACf,QAAA,eAAA,CAAgB,GAAA,EAAK,+BAAA,EAAiC,2CAAA,EAA6C,KAAA,CAAM,IAAI,CAAA;AAC7G,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,2BAAA,EAA6B,MAAA,EAAQ,EAAE,EAAA,EAAI,EAAA,EAAI,KAAA,EAAO,EAAA,EAAG,EAAE;AAAA,MACxF;AAEA,MAAA,IAAI,QAAA;AACJ,MAAA,IAAI;AACF,QAAA,QAAA,GAAW,MAAM,eAAA,CAAgB,GAAA,CAAI,GAAA,EAAK,MAAM,KAAK,CAAA;AAAA,MACvD,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,eAAe,aAAA,EAAe;AAChC,UAAA,eAAA,CAAgB,GAAA,EAAK,GAAA,CAAI,OAAA,EAAS,MAAA,EAAW,MAAM,IAAI,CAAA;AAAA,QACzD,CAAA,MAAO;AACL,UAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAAA,QAClC;AACA,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,GAAA,YAAe,QAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,GAAG,MAAA,EAAQ,EAAE,IAAI,EAAA,EAAI,KAAA,EAAO,IAAG,EAAE;AAAA,MAC7G;AAEA,MAAA,IAAI;AAGF,QAAA,MAAM,OAAA,GAAe,IAAA,CAAA,OAAA,CAAQ,GAAA,CAAI,GAAA,EAAK,UAAU,CAAA;AAChD,QAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAmB,CAAA,cAAA,CAAA,EAAkB,EAAE,IAAA,EAAM,OAAA,EAAS,GAAG,SAAA,CAAU,QAAQ,CAAA,EAAG,CAAA;AAEnG,QAAA,IAAI,MAAM,IAAA,EAAM;AACd,UAAA,GAAA,CAAI,EAAA,EAAI,IAAA,GAAO,EAAE,EAAA,EAAI,IAAA,EAAM,EAAA,EAAI,MAAA,CAAO,EAAA,EAAI,KAAA,EAAO,MAAA,CAAO,KAAA,EAAO,CAAA;AAAA,QACjE,CAAA,MAAO;AACL,UAAA,GAAA,CAAI,EAAA,EAAI,UAAU,CAAA,OAAA,EAAU,MAAA,CAAO,EAAE,CAAA,EAAA,EAAK,MAAA,CAAO,KAAK,CAAA,CAAA,CAAG,CAAA;AAAA,QAC3D;AACA,QAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,MAAA,EAAQ,EAAE,EAAA,EAAI,MAAA,CAAO,EAAA,EAAI,KAAA,EAAO,MAAA,CAAO,KAAA,EAAM,EAAE;AAAA,MACpE,SAAS,GAAA,EAAK;AACZ,QAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAChC,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,GAAA,YAAe,QAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,GAAG,MAAA,EAAQ,EAAE,IAAI,EAAA,EAAI,KAAA,EAAO,IAAG,EAAE;AAAA,MAC7G;AAAA,IACF;AAAA;AAEJ,CAAC","file":"link.js","sourcesContent":["/**\n * HTTP client for marketplace service via Gateway.\n */\n\nimport { useEnv } from '@kb-labs/sdk';\nimport { CredentialsManager, SessionManager } from '@kb-labs/cli-runtime/gateway';\nimport type { GatewayCredentials, SessionCredentials } from '@kb-labs/cli-runtime/gateway';\n\nconst DEFAULT_GATEWAY_URL = 'http://127.0.0.1:4000';\nconst MARKETPLACE_PREFIX = '/api/v1/marketplace';\nconst FETCH_TIMEOUT_MS = 30_000;\n\ntype AuthState = {\n  gatewayUrl: string;\n  accessToken: string;\n  refresh: () => Promise<AuthState>;\n};\n\nasync function loadAuth(): Promise<AuthState | null> {\n  const sessionManager = new SessionManager();\n  const session = await sessionManager.load();\n  if (session) {\n    const current = sessionManager.isExpired(session) ? await sessionManager.refresh(session) : session;\n    return authState(current, () => sessionManager.refresh(current));\n  }\n\n  const credentialsManager = new CredentialsManager();\n  const credentials = await credentialsManager.load();\n  if (!credentials) {\n    return null;\n  }\n  const current = credentialsManager.isExpired(credentials) ? await credentialsManager.refresh(credentials) : credentials;\n  return authState(current, () => credentialsManager.refresh(current));\n}\n\nfunction authState(credentials: GatewayCredentials | SessionCredentials, refresh: () => Promise<GatewayCredentials | SessionCredentials>): AuthState {\n  return {\n    gatewayUrl: credentials.gatewayUrl,\n    accessToken: credentials.accessToken,\n    refresh: async () => {\n      const updated = await refresh();\n      return authState(updated, refresh);\n    },\n  };\n}\n\nfunction getBaseUrl(gatewayUrl?: string): string {\n  const marketplaceUrl = useEnv('KB_MARKETPLACE_URL');\n  if (marketplaceUrl) {\n    return `${marketplaceUrl}${MARKETPLACE_PREFIX}`;\n  }\n  const gateway = gatewayUrl ?? useEnv('KB_GATEWAY_URL') ?? DEFAULT_GATEWAY_URL;\n  return `${gateway}${MARKETPLACE_PREFIX}`;\n}\n\nasync function request<T>(method: string, path: string, body?: Record<string, unknown>, params?: Record<string, string>): Promise<T> {\n  let auth = await loadAuth();\n  const url = new URL(`${getBaseUrl(auth?.gatewayUrl)}${path}`);\n  if (params) {\n    for (const [key, value] of Object.entries(params)) { url.searchParams.set(key, value); }\n  }\n\n  for (let attempt = 0; attempt < 2; attempt += 1) {\n    const controller = new AbortController();\n    const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n    try {\n      const headers: Record<string, string> = {};\n      if (body) { headers['Content-Type'] = 'application/json'; }\n      if (auth) { headers.Authorization = `Bearer ${auth.accessToken}`; }\n      const response = await fetch(url.toString(), {\n        method,\n        headers,\n        body: body ? JSON.stringify(body) : undefined,\n        signal: controller.signal,\n      });\n      if (response.status === 401 && auth && attempt === 0) {\n        auth = await auth.refresh();\n        continue;\n      }\n      if (response.status === 401 && !auth) {\n        throw new Error('Marketplace authentication is required. Run `kb auth login` or choose local no-auth mode during installation.');\n      }\n      if (!response.ok) {\n        const text = await response.text();\n        throw new Error(`Marketplace ${path} failed (${response.status}): ${text}`);\n      }\n      if (response.status === 204) { return undefined as T; }\n      return await response.json() as T;\n    } catch (err) {\n      if ((err as Error).name === 'AbortError') {\n        throw new Error(`Marketplace ${path} timed out — is the marketplace service running? (kb-dev start marketplace)`);\n      }\n      throw err;\n    } finally {\n      clearTimeout(timer);\n    }\n  }\n  throw new Error(`Marketplace ${path} failed after refreshing authentication`);\n}\n\nexport async function post<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('POST', path, body);\n}\n\nexport async function patch<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('PATCH', path, body);\n}\n\nexport async function del<T = unknown>(path: string, body?: Record<string, unknown>): Promise<T> {\n  return request<T>('DELETE', path, body);\n}\n\nexport async function get<T = unknown>(path: string, params?: Record<string, string>): Promise<T> {\n  return request<T>('GET', path, undefined, params);\n}\n","/**\n * @module @kb-labs/marketplace-entry/scope\n *\n * Client-side scope resolution for marketplace CLI commands. Uses the\n * canonical `findProjectConfigRoot` helper from `@kb-labs/core-workspace`\n * so the detection rules (which filenames count, how walk-up stops) match\n * what the config loader and the marketplace daemon enforce.\n *\n * Rules:\n *  - `project` is the default if cwd (or any ancestor up to the filesystem\n *    root) contains `.kb/kb.config.{json,jsonc}`.\n *  - Otherwise the default is `platform`.\n *  - `--scope` always overrides detection.\n *  - For scope=\"project\" we return the absolute projectRoot so the daemon\n *    doesn't need to re-discover it.\n */\n\nimport { findProjectConfigRoot } from '@kb-labs/core-workspace';\nimport type { MarketplaceScope, MarketplaceQueryScope } from '@kb-labs/marketplace-contracts';\n\nexport const SCOPE_FLAG_CHOICES: readonly MarketplaceScope[] = ['platform', 'project'];\nexport const QUERY_SCOPE_FLAG_CHOICES: readonly MarketplaceQueryScope[] = ['platform', 'project', 'all'];\n\nexport interface ResolvedCliScope {\n  scope: MarketplaceScope;\n  projectRoot?: string;\n  /** How the scope was determined — surfaces in --verbose logs. */\n  reason: 'flag' | 'auto-detect' | 'fallback';\n}\n\nexport interface ResolvedCliQueryScope extends Omit<ResolvedCliScope, 'scope'> {\n  scope: MarketplaceQueryScope;\n}\n\n/**\n * Resolve the effective scope for a mutating command (`link`, `unlink`,\n * `install`, ...). `flag` is the value of `--scope` (if supplied). The\n * helper never returns `'all'` for mutating commands — callers restrict\n * choices via `SCOPE_FLAG_CHOICES`.\n */\nexport async function resolveCliScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliScope> {\n  if (flag) {\n    assertMutatingScope(flag);\n    if (flag === 'project') {\n      const projectRoot = await findProjectConfigRoot(cwd);\n      if (!projectRoot) {\n        throw new CliScopeError(\n          'SCOPE_PROJECT_ROOT_NOT_FOUND',\n          `--scope=project requires a .kb/kb.config.{json,jsonc} ancestor of ${cwd} — none found.`,\n        );\n      }\n      return { scope: 'project', projectRoot, reason: 'flag' };\n    }\n    return { scope: 'platform', reason: 'flag' };\n  }\n\n  const projectRoot = await findProjectConfigRoot(cwd);\n  if (projectRoot) {\n    return { scope: 'project', projectRoot, reason: 'auto-detect' };\n  }\n  return { scope: 'platform', reason: 'fallback' };\n}\n\n/**\n * Resolve the effective scope for a read-only command (`list`). Accepts\n * `'all'` as an explicit flag value.\n */\nexport async function resolveCliQueryScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliQueryScope> {\n  if (flag === 'all') {\n    const projectRoot = await findProjectConfigRoot(cwd);\n    return { scope: 'all', projectRoot, reason: 'flag' };\n  }\n  const base = await resolveCliScope(cwd, flag);\n  return { scope: base.scope, projectRoot: base.projectRoot, reason: base.reason };\n}\n\nfunction assertMutatingScope(value: string): asserts value is MarketplaceScope {\n  if (!SCOPE_FLAG_CHOICES.includes(value as MarketplaceScope)) {\n    throw new CliScopeError(\n      'SCOPE_INVALID',\n      `--scope must be one of: ${SCOPE_FLAG_CHOICES.join(', ')} (got ${JSON.stringify(value)})`,\n    );\n  }\n}\n\nexport class CliScopeError extends Error {\n  readonly code: string;\n  constructor(code: string, message: string) {\n    super(message);\n    this.code = code;\n    this.name = 'CliScopeError';\n  }\n}\n\n/**\n * Build the body-payload fragment expected by `parseMutatingScope` on the\n * API side: `{ scope, projectRoot? }`. Kept as a helper so every command\n * sends the same shape and nothing drifts out-of-sync with the server.\n */\nexport function scopeBody(ctx: ResolvedCliScope | ResolvedCliQueryScope): {\n  scope: MarketplaceScope | MarketplaceQueryScope;\n  projectRoot?: string;\n} {\n  return {\n    scope: ctx.scope,\n    ...(ctx.projectRoot ? { projectRoot: ctx.projectRoot } : {}),\n  };\n}\n","import { defineCommand, validationError, handleError, type PluginContextV3, type CommandResult } from '@kb-labs/sdk';\nimport * as path from 'node:path';\nimport { post } from '../../http.js';\nimport { resolveCliScope, scopeBody, CliScopeError } from '../../scope.js';\n\ninterface LinkFlags {\n  scope?: string;\n  json?: boolean;\n  'dry-run'?: boolean;\n}\n\ninterface LinkInput {\n  argv?: string[];\n  flags?: LinkFlags;\n}\n\ninterface LinkResponse {\n  id: string;\n  version: string;\n  primaryKind: string;\n  provides: string[];\n  packageRoot: string;\n  scope: string;\n}\n\nexport default defineCommand<unknown, LinkInput, { id: string; scope: string }>({\n  id: 'marketplace:plugins:link',\n  description: 'Link a local plugin for development',\n\n  handler: {\n    async intent(_ctx: PluginContextV3, input: LinkInput) {\n      const pluginPath = input.argv?.[0] ?? '(unknown)';\n      return {\n        summary: `Link local plugin at \"${pluginPath}\"`,\n        operations: [{ type: 'create' as const, resource: 'plugin-link', details: { path: pluginPath } }],\n      };\n    },\n\n    async execute(ctx: PluginContextV3, input: LinkInput): Promise<CommandResult<{ id: string; scope: string }>> {\n      const pluginPath = input.argv?.[0];\n      const flags = (input.flags ?? input) as LinkFlags;\n\n      if (!pluginPath) {\n        validationError(ctx, 'Specify a plugin path to link', 'Usage: kb marketplace plugins link <path>', flags.json);\n        return { ok: false, error: 'A plugin path is required', result: { id: '', scope: '' } };\n      }\n\n      let scopeCtx;\n      try {\n        scopeCtx = await resolveCliScope(ctx.cwd, flags.scope);\n      } catch (err) {\n        if (err instanceof CliScopeError) {\n          validationError(ctx, err.message, undefined, flags.json);\n        } else {\n          handleError(ctx, err, flags.json);\n        }\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { id: '', scope: '' } };\n      }\n\n      try {\n        // Resolve path against cwd so the daemon always receives an absolute\n        // location. Keeps the server side from inheriting any ambient cwd.\n        const absPath = path.resolve(ctx.cwd, pluginPath);\n        const result = await post<LinkResponse>(`/packages/link`, { path: absPath, ...scopeBody(scopeCtx) });\n\n        if (flags.json) {\n          ctx.ui?.json?.({ ok: true, id: result.id, scope: result.scope });\n        } else {\n          ctx.ui?.success?.(`Linked ${result.id} (${result.scope})`);\n        }\n        return { ok: true, result: { id: result.id, scope: result.scope } };\n      } catch (err) {\n        handleError(ctx, err, flags.json);\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { id: '', scope: '' } };\n      }\n    },\n  },\n});\n"]}

package/dist/commands/plugins/list.js

@@ -66,6 +66,9 @@ async function request(method, path, body, params) {
         auth = await auth.refresh();
         continue;
       }
+      if (response.status === 401 && !auth) {
+        throw new Error("Marketplace authentication is required. Run `kb auth login` or choose local no-auth mode during installation.");
+      }
       if (!response.ok) {
         const text = await response.text();
         throw new Error(`Marketplace ${path} failed (${response.status}): ${text}`);