@kb-labs/marketplace-entry 2.116.13 → 2.117.0

package/dist/commands/plugins/list.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/http.ts","../../../src/scope.ts","../../../src/commands/plugins/list.ts"],"names":["current","projectRoot"],"mappings":";;;;;AAQA,IAAM,mBAAA,GAAsB,uBAAA;AAC5B,IAAM,kBAAA,GAAqB,qBAAA;AAC3B,IAAM,gBAAA,GAAmB,GAAA;AAQzB,eAAe,QAAA,GAAsC;AACnD,EAAA,MAAM,cAAA,GAAiB,IAAI,cAAA,EAAe;AAC1C,EAAA,MAAM,OAAA,GAAU,MAAM,cAAA,CAAe,IAAA,EAAK;AAC1C,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,MAAMA,QAAAA,GAAU,eAAe,SAAA,CAAU,OAAO,IAAI,MAAM,cAAA,CAAe,OAAA,CAAQ,OAAO,CAAA,GAAI,OAAA;AAC5F,IAAA,OAAO,UAAUA,QAAAA,EAAS,MAAM,cAAA,CAAe,OAAA,CAAQA,QAAO,CAAC,CAAA;AAAA,EACjE;AAEA,EAAA,MAAM,kBAAA,GAAqB,IAAI,kBAAA,EAAmB;AAClD,EAAA,MAAM,WAAA,GAAc,MAAM,kBAAA,CAAmB,IAAA,EAAK;AAClD,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,OAAA,GAAU,mBAAmB,SAAA,CAAU,WAAW,IAAI,MAAM,kBAAA,CAAmB,OAAA,CAAQ,WAAW,CAAA,GAAI,WAAA;AAC5G,EAAA,OAAO,UAAU,OAAA,EAAS,MAAM,kBAAA,CAAmB,OAAA,CAAQ,OAAO,CAAC,CAAA;AACrE;AAEA,SAAS,SAAA,CAAU,aAAsD,OAAA,EAA4E;AACnJ,EAAA,OAAO;AAAA,IACL,YAAY,WAAA,CAAY,UAAA;AAAA,IACxB,aAAa,WAAA,CAAY,WAAA;AAAA,IACzB,SAAS,YAAY;AACnB,MAAA,MAAM,OAAA,GAAU,MAAM,OAAA,EAAQ;AAC9B,MAAA,OAAO,SAAA,CAAU,SAAS,OAAO,CAAA;AAAA,IACnC;AAAA,GACF;AACF;AAEA,SAAS,WAAW,UAAA,EAA6B;AAC/C,EAAA,MAAM,cAAA,GAAiB,OAAO,oBAAoB,CAAA;AAClD,EAAA,IAAI,cAAA,EAAgB;AAClB,IAAA,OAAO,CAAA,EAAG,cAAc,CAAA,EAAG,kBAAkB,CAAA,CAAA;AAAA,EAC/C;AACA,EAAA,MAAM,OAAA,GAAU,UAAA,IAAc,MAAA,CAAO,gBAAgB,CAAA,IAAK,mBAAA;AAC1D,EAAA,OAAO,CAAA,EAAG,OAAO,CAAA,EAAG,kBAAkB,CAAA,CAAA;AACxC;AAEA,eAAe,OAAA,CAAW,MAAA,EAAgB,IAAA,EAAc,IAAA,EAAgC,MAAA,EAA6C;AACnI,EAAA,IAAI,IAAA,GAAO,MAAM,QAAA,EAAS;AAC1B,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,CAAA,EAAG,UAAA,CAAW,MAAM,UAAU,CAAC,CAAA,EAAG,IAAI,CAAA,CAAE,CAAA;AAC5D,EAAA,IAAI,MAAA,EAAQ;AACV,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,EAAG;AAAE,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,GAAA,EAAK,KAAK,CAAA;AAAA,IAAG;AAAA,EACzF;AAEA,EAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,GAAU,CAAA,EAAG,WAAW,CAAA,EAAG;AAC/C,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,gBAAgB,CAAA;AACnE,IAAA,IAAI;AACF,MAAA,MAAM,UAAkC,EAAC;AACzC,MAAA,IAAI,IAAA,EAAM;AACV,MAAA,IAAI,IAAA,EAAM;AAAE,QAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,IAAA,CAAK,WAAW,CAAA,CAAA;AAAA,MAAI;AAClE,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,CAAI,UAAS,EAAG;AAAA,QAC3C,MAAA;AAAA,QACA,OAAA;AAAA,QACA,IAAA,EAAM,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,GAAI,KAAA,CAAA;AAAA,QACpC,QAAQ,UAAA,CAAW;AAAA,OACpB,CAAA;AACD,MAAA,IAAI,QAAA,CAAS,MAAA,KAAW,GAAA,IAAO,IAAA,IAAQ,YAAY,CAAA,EAAG;AACpD,QAAA,IAAA,GAAO,MAAM,KAAK,OAAA,EAAQ;AAC1B,QAAA;AAAA,MACF;AACA,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,QAAA,MAAM,IAAI,MAAM,CAAA,YAAA,EAAe,IAAI,YAAY,QAAA,CAAS,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,CAAE,CAAA;AAAA,MAC5E;AACA,MAAA,IAAI,QAAA,CAAS,WAAW,GAAA,EAAK;AAAE,QAAA,OAAO,KAAA,CAAA;AAAA,MAAgB;AACtD,MAAA,OAAO,MAAM,SAAS,IAAA,EAAK;AAAA,IAC7B,SAAS,GAAA,EAAK;AACZ,MAAA,IAAK,GAAA,CAAc,SAAS,YAAA,EAAc;AACxC,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,gFAAA,CAA6E,CAAA;AAAA,MAClH;AACA,MAAA,MAAM,GAAA;AAAA,IACR,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAAA,IACpB;AAAA,EACF;AACA,EAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,uCAAA,CAAyC,CAAA;AAC9E;AAcA,eAAsB,GAAA,CAAiB,MAAc,MAAA,EAA6C;AAChG,EAAA,OAAO,OAAA,CAAW,KAAA,EAAO,IAAA,EAAM,MAAA,EAAW,MAAM,CAAA;AAClD;AC3FO,IAAM,kBAAA,GAAkD,CAAC,UAAA,EAAY,SAAS,CAAA;AAoBrF,eAAsB,eAAA,CACpB,KACA,IAAA,EAC2B;AAC3B,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,mBAAA,CAAoB,IAAI,CAAA;AACxB,IAAA,IAAI,SAAS,SAAA,EAAW;AACtB,MAAA,MAAMC,YAAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,MAAA,IAAI,CAACA,YAAAA,EAAa;AAChB,QAAA,MAAM,IAAI,aAAA;AAAA,UACR,8BAAA;AAAA,UACA,qEAAqE,GAAG,CAAA,mBAAA;AAAA,SAC1E;AAAA,MACF;AACA,MAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAAA,YAAAA,EAAa,QAAQ,MAAA,EAAO;AAAA,IACzD;AACA,IAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,MAAA,EAAO;AAAA,EAC7C;AAEA,EAAA,MAAM,WAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAa,QAAQ,aAAA,EAAc;AAAA,EAChE;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,UAAA,EAAW;AACjD;AAMA,eAAsB,oBAAA,CACpB,KACA,IAAA,EACgC;AAChC,EAAA,IAAI,SAAS,KAAA,EAAO;AAClB,IAAA,MAAM,WAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,IAAA,OAAO,EAAE,KAAA,EAAO,KAAA,EAAO,WAAA,EAAa,QAAQ,MAAA,EAAO;AAAA,EACrD;AACA,EAAA,MAAM,IAAA,GAAO,MAAM,eAAA,CAAgB,GAAA,EAAK,IAAI,CAAA;AAC5C,EAAA,OAAO,EAAE,OAAO,IAAA,CAAK,KAAA,EAAO,aAAa,IAAA,CAAK,WAAA,EAAa,MAAA,EAAQ,IAAA,CAAK,MAAA,EAAO;AACjF;AAEA,SAAS,oBAAoB,KAAA,EAAkD;AAC7E,EAAA,IAAI,CAAC,kBAAA,CAAmB,QAAA,CAAS,KAAyB,CAAA,EAAG;AAC3D,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,eAAA;AAAA,MACA,CAAA,wBAAA,EAA2B,mBAAmB,IAAA,CAAK,IAAI,CAAC,CAAA,MAAA,EAAS,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC,CAAA,CAAA;AAAA,KACxF;AAAA,EACF;AACF;AAEO,IAAM,aAAA,GAAN,cAA4B,KAAA,CAAM;AAAA,EAC9B,IAAA;AAAA,EACT,WAAA,CAAY,MAAc,OAAA,EAAiB;AACzC,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AAAA,EACd;AACF,CAAA;;;ACzEA,IAAO,eAAQ,aAAA,CAAkD;AAAA,EAC/D,EAAA,EAAI,0BAAA;AAAA,EACJ,WAAA,EAAa,wBAAA;AAAA,EAEb,OAAA,EAAS;AAAA,IACP,MAAM,OAAA,CAAQ,GAAA,EAAsB,KAAA,EAA0D;AAC5F,MAAA,MAAM,KAAA,GAAS,MAAM,KAAA,IAAS,KAAA;AAE9B,MAAA,IAAI,QAAA;AACJ,MAAA,IAAI;AACF,QAAA,QAAA,GAAW,MAAM,oBAAA,CAAqB,GAAA,CAAI,GAAA,EAAK,MAAM,KAAK,CAAA;AAAA,MAC5D,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,eAAe,aAAA,EAAe;AAChC,UAAA,eAAA,CAAgB,GAAA,EAAK,GAAA,CAAI,OAAA,EAAS,MAAA,EAAW,MAAM,IAAI,CAAA;AAAA,QACzD,CAAA,MAAO;AACL,UAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAAA,QAClC;AACA,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,OAAO,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAA,EAAG,QAAQ,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAO,GAAE,EAAE;AAAA,MACjH;AAEA,MAAA,IAAI;AACF,QAAA,MAAM,QAAgC,EAAE,IAAA,EAAM,QAAA,EAAU,KAAA,EAAO,SAAS,KAAA,EAAM;AAC9E,QAAA,IAAI,SAAS,WAAA,EAAa;AACxB,UAAA,KAAA,CAAM,cAAc,QAAA,CAAS,WAAA;AAAA,QAC/B;AACA,QAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAoB,WAAA,EAAa,KAAK,CAAA;AAEzD,QAAA,IAAI,MAAM,IAAA,EAAM;AACd,UAAA,GAAA,CAAI,EAAA,EAAI,OAAO,IAAI,CAAA;AAAA,QACrB,CAAA,MAAO;AACL,UAAA,MAAM,OAAA,GAAU,KAAK,OAAA,CAAQ,MAAA,CAAO,OAAK,CAAA,CAAE,OAAA,KAAY,KAAK,CAAA,CAAE,MAAA;AAC9D,UAAA,MAAM,QAAA,GAAW,KAAK,KAAA,GAAQ,OAAA;AAC9B,UAAA,MAAM,eAAA,GAAkB,SAAS,KAAA,KAAU,KAAA;AAC3C,UAAA,GAAA,CAAI,EAAA,EAAI,OAAA,GAAU,CAAA,EAAG,IAAA,CAAK,KAAK,CAAA,UAAA,EAAa,OAAO,CAAA,UAAA,EAAa,QAAQ,CAAA,wBAAA,EAAsB,QAAA,CAAS,KAAK,CAAA,CAAA,EAAI;AAAA,YAC9G,UAAU,CAAC;AAAA,cACT,MAAA,EAAQ,SAAA;AAAA,cACR,KAAA,EAAO,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,CAAA,CAAA,KAAK;AAC3B,gBAAA,MAAM,IAAA,GAAO,CAAA,CAAE,OAAA,KAAY,KAAA,GAAQ,QAAA,GAAM,QAAA;AACzC,gBAAA,MAAM,QAAA,GAAW,eAAA,GAAkB,CAAA,EAAA,EAAK,CAAA,CAAE,KAAK,CAAA,CAAA,CAAA,GAAM,EAAA;AACrD,gBAAA,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,CAAA,CAAE,EAAE,CAAA,CAAA,EAAI,CAAA,CAAE,OAAO,CAAA,EAAA,EAAK,CAAA,CAAE,MAAM,CAAA,CAAA,EAAI,QAAQ,CAAA,CAAA;AAAA,cAC9D,CAAC;AAAA,aACF;AAAA,WACF,CAAA;AAAA,QACH;AAEA,QAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAK;AAAA,MAClC,SAAS,GAAA,EAAK;AACZ,QAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAChC,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,OAAO,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAA,EAAG,QAAQ,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAO,GAAE,EAAE;AAAA,MACjH;AAAA,IACF;AAAA;AAEJ,CAAC","file":"list.js","sourcesContent":["/**\n * HTTP client for marketplace service via Gateway.\n */\n\nimport { useEnv } from '@kb-labs/sdk';\nimport { CredentialsManager, SessionManager } from '@kb-labs/cli-runtime/gateway';\nimport type { GatewayCredentials, SessionCredentials } from '@kb-labs/cli-runtime/gateway';\n\nconst DEFAULT_GATEWAY_URL = 'http://127.0.0.1:4000';\nconst MARKETPLACE_PREFIX = '/api/v1/marketplace';\nconst FETCH_TIMEOUT_MS = 30_000;\n\ntype AuthState = {\n  gatewayUrl: string;\n  accessToken: string;\n  refresh: () => Promise<AuthState>;\n};\n\nasync function loadAuth(): Promise<AuthState | null> {\n  const sessionManager = new SessionManager();\n  const session = await sessionManager.load();\n  if (session) {\n    const current = sessionManager.isExpired(session) ? await sessionManager.refresh(session) : session;\n    return authState(current, () => sessionManager.refresh(current));\n  }\n\n  const credentialsManager = new CredentialsManager();\n  const credentials = await credentialsManager.load();\n  if (!credentials) {\n    return null;\n  }\n  const current = credentialsManager.isExpired(credentials) ? await credentialsManager.refresh(credentials) : credentials;\n  return authState(current, () => credentialsManager.refresh(current));\n}\n\nfunction authState(credentials: GatewayCredentials | SessionCredentials, refresh: () => Promise<GatewayCredentials | SessionCredentials>): AuthState {\n  return {\n    gatewayUrl: credentials.gatewayUrl,\n    accessToken: credentials.accessToken,\n    refresh: async () => {\n      const updated = await refresh();\n      return authState(updated, refresh);\n    },\n  };\n}\n\nfunction getBaseUrl(gatewayUrl?: string): string {\n  const marketplaceUrl = useEnv('KB_MARKETPLACE_URL');\n  if (marketplaceUrl) {\n    return `${marketplaceUrl}${MARKETPLACE_PREFIX}`;\n  }\n  const gateway = gatewayUrl ?? useEnv('KB_GATEWAY_URL') ?? DEFAULT_GATEWAY_URL;\n  return `${gateway}${MARKETPLACE_PREFIX}`;\n}\n\nasync function request<T>(method: string, path: string, body?: Record<string, unknown>, params?: Record<string, string>): Promise<T> {\n  let auth = await loadAuth();\n  const url = new URL(`${getBaseUrl(auth?.gatewayUrl)}${path}`);\n  if (params) {\n    for (const [key, value] of Object.entries(params)) { url.searchParams.set(key, value); }\n  }\n\n  for (let attempt = 0; attempt < 2; attempt += 1) {\n    const controller = new AbortController();\n    const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n    try {\n      const headers: Record<string, string> = {};\n      if (body) { headers['Content-Type'] = 'application/json'; }\n      if (auth) { headers.Authorization = `Bearer ${auth.accessToken}`; }\n      const response = await fetch(url.toString(), {\n        method,\n        headers,\n        body: body ? JSON.stringify(body) : undefined,\n        signal: controller.signal,\n      });\n      if (response.status === 401 && auth && attempt === 0) {\n        auth = await auth.refresh();\n        continue;\n      }\n      if (!response.ok) {\n        const text = await response.text();\n        throw new Error(`Marketplace ${path} failed (${response.status}): ${text}`);\n      }\n      if (response.status === 204) { return undefined as T; }\n      return await response.json() as T;\n    } catch (err) {\n      if ((err as Error).name === 'AbortError') {\n        throw new Error(`Marketplace ${path} timed out — is the marketplace service running? (kb-dev start marketplace)`);\n      }\n      throw err;\n    } finally {\n      clearTimeout(timer);\n    }\n  }\n  throw new Error(`Marketplace ${path} failed after refreshing authentication`);\n}\n\nexport async function post<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('POST', path, body);\n}\n\nexport async function patch<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('PATCH', path, body);\n}\n\nexport async function del<T = unknown>(path: string, body?: Record<string, unknown>): Promise<T> {\n  return request<T>('DELETE', path, body);\n}\n\nexport async function get<T = unknown>(path: string, params?: Record<string, string>): Promise<T> {\n  return request<T>('GET', path, undefined, params);\n}\n","/**\n * @module @kb-labs/marketplace-entry/scope\n *\n * Client-side scope resolution for marketplace CLI commands. Uses the\n * canonical `findProjectConfigRoot` helper from `@kb-labs/core-workspace`\n * so the detection rules (which filenames count, how walk-up stops) match\n * what the config loader and the marketplace daemon enforce.\n *\n * Rules:\n *  - `project` is the default if cwd (or any ancestor up to the filesystem\n *    root) contains `.kb/kb.config.{json,jsonc}`.\n *  - Otherwise the default is `platform`.\n *  - `--scope` always overrides detection.\n *  - For scope=\"project\" we return the absolute projectRoot so the daemon\n *    doesn't need to re-discover it.\n */\n\nimport { findProjectConfigRoot } from '@kb-labs/core-workspace';\nimport type { MarketplaceScope, MarketplaceQueryScope } from '@kb-labs/marketplace-contracts';\n\nexport const SCOPE_FLAG_CHOICES: readonly MarketplaceScope[] = ['platform', 'project'];\nexport const QUERY_SCOPE_FLAG_CHOICES: readonly MarketplaceQueryScope[] = ['platform', 'project', 'all'];\n\nexport interface ResolvedCliScope {\n  scope: MarketplaceScope;\n  projectRoot?: string;\n  /** How the scope was determined — surfaces in --verbose logs. */\n  reason: 'flag' | 'auto-detect' | 'fallback';\n}\n\nexport interface ResolvedCliQueryScope extends Omit<ResolvedCliScope, 'scope'> {\n  scope: MarketplaceQueryScope;\n}\n\n/**\n * Resolve the effective scope for a mutating command (`link`, `unlink`,\n * `install`, ...). `flag` is the value of `--scope` (if supplied). The\n * helper never returns `'all'` for mutating commands — callers restrict\n * choices via `SCOPE_FLAG_CHOICES`.\n */\nexport async function resolveCliScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliScope> {\n  if (flag) {\n    assertMutatingScope(flag);\n    if (flag === 'project') {\n      const projectRoot = await findProjectConfigRoot(cwd);\n      if (!projectRoot) {\n        throw new CliScopeError(\n          'SCOPE_PROJECT_ROOT_NOT_FOUND',\n          `--scope=project requires a .kb/kb.config.{json,jsonc} ancestor of ${cwd} — none found.`,\n        );\n      }\n      return { scope: 'project', projectRoot, reason: 'flag' };\n    }\n    return { scope: 'platform', reason: 'flag' };\n  }\n\n  const projectRoot = await findProjectConfigRoot(cwd);\n  if (projectRoot) {\n    return { scope: 'project', projectRoot, reason: 'auto-detect' };\n  }\n  return { scope: 'platform', reason: 'fallback' };\n}\n\n/**\n * Resolve the effective scope for a read-only command (`list`). Accepts\n * `'all'` as an explicit flag value.\n */\nexport async function resolveCliQueryScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliQueryScope> {\n  if (flag === 'all') {\n    const projectRoot = await findProjectConfigRoot(cwd);\n    return { scope: 'all', projectRoot, reason: 'flag' };\n  }\n  const base = await resolveCliScope(cwd, flag);\n  return { scope: base.scope, projectRoot: base.projectRoot, reason: base.reason };\n}\n\nfunction assertMutatingScope(value: string): asserts value is MarketplaceScope {\n  if (!SCOPE_FLAG_CHOICES.includes(value as MarketplaceScope)) {\n    throw new CliScopeError(\n      'SCOPE_INVALID',\n      `--scope must be one of: ${SCOPE_FLAG_CHOICES.join(', ')} (got ${JSON.stringify(value)})`,\n    );\n  }\n}\n\nexport class CliScopeError extends Error {\n  readonly code: string;\n  constructor(code: string, message: string) {\n    super(message);\n    this.code = code;\n    this.name = 'CliScopeError';\n  }\n}\n\n/**\n * Build the body-payload fragment expected by `parseMutatingScope` on the\n * API side: `{ scope, projectRoot? }`. Kept as a helper so every command\n * sends the same shape and nothing drifts out-of-sync with the server.\n */\nexport function scopeBody(ctx: ResolvedCliScope | ResolvedCliQueryScope): {\n  scope: MarketplaceScope | MarketplaceQueryScope;\n  projectRoot?: string;\n} {\n  return {\n    scope: ctx.scope,\n    ...(ctx.projectRoot ? { projectRoot: ctx.projectRoot } : {}),\n  };\n}\n","import { defineCommand, handleError, validationError, type PluginContextV3, type CommandResult } from '@kb-labs/sdk';\nimport { get } from '../../http.js';\nimport { resolveCliQueryScope, CliScopeError } from '../../scope.js';\n\ninterface ListFlags {\n  json?: boolean;\n  scope?: string;\n}\ninterface ListInput { argv?: string[]; flags?: ListFlags }\n\ninterface EntryRow {\n  id: string;\n  version: string;\n  source: string;\n  primaryKind: string;\n  provides: string[];\n  enabled: boolean;\n  scope: 'platform' | 'project';\n}\n\ninterface ListResultData {\n  entries: EntryRow[];\n  total: number;\n}\n\nexport default defineCommand<unknown, ListInput, ListResultData>({\n  id: 'marketplace:plugins:list',\n  description: 'List installed plugins',\n\n  handler: {\n    async execute(ctx: PluginContextV3, input: ListInput): Promise<CommandResult<ListResultData>> {\n      const flags = (input.flags ?? input) as ListFlags;\n\n      let scopeCtx;\n      try {\n        scopeCtx = await resolveCliQueryScope(ctx.cwd, flags.scope);\n      } catch (err) {\n        if (err instanceof CliScopeError) {\n          validationError(ctx, err.message, undefined, flags.json);\n        } else {\n          handleError(ctx, err, flags.json);\n        }\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { entries: [], total: 0 } };\n      }\n\n      try {\n        const query: Record<string, string> = { kind: 'plugin', scope: scopeCtx.scope };\n        if (scopeCtx.projectRoot) {\n          query.projectRoot = scopeCtx.projectRoot;\n        }\n        const data = await get<ListResultData>('/packages', query);\n\n        if (flags.json) {\n          ctx.ui?.json?.(data);\n        } else {\n          const enabled = data.entries.filter(e => e.enabled !== false).length;\n          const disabled = data.total - enabled;\n          const showScopeColumn = scopeCtx.scope === 'all';\n          ctx.ui?.success?.(`${data.total} plugins (${enabled} enabled, ${disabled} disabled) — scope=${scopeCtx.scope}`, {\n            sections: [{\n              header: 'Plugins',\n              items: data.entries.map(e => {\n                const icon = e.enabled !== false ? '✅' : '⏸';\n                const scopeTag = showScopeColumn ? ` [${e.scope}]` : '';\n                return `${icon} ${e.id} ${e.version} (${e.source})${scopeTag}`;\n              }),\n            }],\n          });\n        }\n\n        return { ok: true, result: data };\n      } catch (err) {\n        handleError(ctx, err, flags.json);\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { entries: [], total: 0 } };\n      }\n    },\n  },\n});\n"]}
+{"version":3,"sources":["../../../src/http.ts","../../../src/scope.ts","../../../src/commands/plugins/list.ts"],"names":["current","projectRoot"],"mappings":";;;;;AAQA,IAAM,mBAAA,GAAsB,uBAAA;AAC5B,IAAM,kBAAA,GAAqB,qBAAA;AAC3B,IAAM,gBAAA,GAAmB,GAAA;AAQzB,eAAe,QAAA,GAAsC;AACnD,EAAA,MAAM,cAAA,GAAiB,IAAI,cAAA,EAAe;AAC1C,EAAA,MAAM,OAAA,GAAU,MAAM,cAAA,CAAe,IAAA,EAAK;AAC1C,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,MAAMA,QAAAA,GAAU,eAAe,SAAA,CAAU,OAAO,IAAI,MAAM,cAAA,CAAe,OAAA,CAAQ,OAAO,CAAA,GAAI,OAAA;AAC5F,IAAA,OAAO,UAAUA,QAAAA,EAAS,MAAM,cAAA,CAAe,OAAA,CAAQA,QAAO,CAAC,CAAA;AAAA,EACjE;AAEA,EAAA,MAAM,kBAAA,GAAqB,IAAI,kBAAA,EAAmB;AAClD,EAAA,MAAM,WAAA,GAAc,MAAM,kBAAA,CAAmB,IAAA,EAAK;AAClD,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,OAAA,GAAU,mBAAmB,SAAA,CAAU,WAAW,IAAI,MAAM,kBAAA,CAAmB,OAAA,CAAQ,WAAW,CAAA,GAAI,WAAA;AAC5G,EAAA,OAAO,UAAU,OAAA,EAAS,MAAM,kBAAA,CAAmB,OAAA,CAAQ,OAAO,CAAC,CAAA;AACrE;AAEA,SAAS,SAAA,CAAU,aAAsD,OAAA,EAA4E;AACnJ,EAAA,OAAO;AAAA,IACL,YAAY,WAAA,CAAY,UAAA;AAAA,IACxB,aAAa,WAAA,CAAY,WAAA;AAAA,IACzB,SAAS,YAAY;AACnB,MAAA,MAAM,OAAA,GAAU,MAAM,OAAA,EAAQ;AAC9B,MAAA,OAAO,SAAA,CAAU,SAAS,OAAO,CAAA;AAAA,IACnC;AAAA,GACF;AACF;AAEA,SAAS,WAAW,UAAA,EAA6B;AAC/C,EAAA,MAAM,cAAA,GAAiB,OAAO,oBAAoB,CAAA;AAClD,EAAA,IAAI,cAAA,EAAgB;AAClB,IAAA,OAAO,CAAA,EAAG,cAAc,CAAA,EAAG,kBAAkB,CAAA,CAAA;AAAA,EAC/C;AACA,EAAA,MAAM,OAAA,GAAU,UAAA,IAAc,MAAA,CAAO,gBAAgB,CAAA,IAAK,mBAAA;AAC1D,EAAA,OAAO,CAAA,EAAG,OAAO,CAAA,EAAG,kBAAkB,CAAA,CAAA;AACxC;AAEA,eAAe,OAAA,CAAW,MAAA,EAAgB,IAAA,EAAc,IAAA,EAAgC,MAAA,EAA6C;AACnI,EAAA,IAAI,IAAA,GAAO,MAAM,QAAA,EAAS;AAC1B,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,CAAA,EAAG,UAAA,CAAW,MAAM,UAAU,CAAC,CAAA,EAAG,IAAI,CAAA,CAAE,CAAA;AAC5D,EAAA,IAAI,MAAA,EAAQ;AACV,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,EAAG;AAAE,MAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,GAAA,EAAK,KAAK,CAAA;AAAA,IAAG;AAAA,EACzF;AAEA,EAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,GAAU,CAAA,EAAG,WAAW,CAAA,EAAG;AAC/C,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,gBAAgB,CAAA;AACnE,IAAA,IAAI;AACF,MAAA,MAAM,UAAkC,EAAC;AACzC,MAAA,IAAI,IAAA,EAAM;AACV,MAAA,IAAI,IAAA,EAAM;AAAE,QAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,IAAA,CAAK,WAAW,CAAA,CAAA;AAAA,MAAI;AAClE,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,CAAI,UAAS,EAAG;AAAA,QAC3C,MAAA;AAAA,QACA,OAAA;AAAA,QACA,IAAA,EAAM,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,GAAI,KAAA,CAAA;AAAA,QACpC,QAAQ,UAAA,CAAW;AAAA,OACpB,CAAA;AACD,MAAA,IAAI,QAAA,CAAS,MAAA,KAAW,GAAA,IAAO,IAAA,IAAQ,YAAY,CAAA,EAAG;AACpD,QAAA,IAAA,GAAO,MAAM,KAAK,OAAA,EAAQ;AAC1B,QAAA;AAAA,MACF;AACA,MAAA,IAAI,QAAA,CAAS,MAAA,KAAW,GAAA,IAAO,CAAC,IAAA,EAAM;AACpC,QAAA,MAAM,IAAI,MAAM,+GAA+G,CAAA;AAAA,MACjI;AACA,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,QAAA,MAAM,IAAI,MAAM,CAAA,YAAA,EAAe,IAAI,YAAY,QAAA,CAAS,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,CAAE,CAAA;AAAA,MAC5E;AACA,MAAA,IAAI,QAAA,CAAS,WAAW,GAAA,EAAK;AAAE,QAAA,OAAO,KAAA,CAAA;AAAA,MAAgB;AACtD,MAAA,OAAO,MAAM,SAAS,IAAA,EAAK;AAAA,IAC7B,SAAS,GAAA,EAAK;AACZ,MAAA,IAAK,GAAA,CAAc,SAAS,YAAA,EAAc;AACxC,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,gFAAA,CAA6E,CAAA;AAAA,MAClH;AACA,MAAA,MAAM,GAAA;AAAA,IACR,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAAA,IACpB;AAAA,EACF;AACA,EAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,uCAAA,CAAyC,CAAA;AAC9E;AAcA,eAAsB,GAAA,CAAiB,MAAc,MAAA,EAA6C;AAChG,EAAA,OAAO,OAAA,CAAW,KAAA,EAAO,IAAA,EAAM,MAAA,EAAW,MAAM,CAAA;AAClD;AC9FO,IAAM,kBAAA,GAAkD,CAAC,UAAA,EAAY,SAAS,CAAA;AAoBrF,eAAsB,eAAA,CACpB,KACA,IAAA,EAC2B;AAC3B,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,mBAAA,CAAoB,IAAI,CAAA;AACxB,IAAA,IAAI,SAAS,SAAA,EAAW;AACtB,MAAA,MAAMC,YAAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,MAAA,IAAI,CAACA,YAAAA,EAAa;AAChB,QAAA,MAAM,IAAI,aAAA;AAAA,UACR,8BAAA;AAAA,UACA,qEAAqE,GAAG,CAAA,mBAAA;AAAA,SAC1E;AAAA,MACF;AACA,MAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAAA,YAAAA,EAAa,QAAQ,MAAA,EAAO;AAAA,IACzD;AACA,IAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,MAAA,EAAO;AAAA,EAC7C;AAEA,EAAA,MAAM,WAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAa,QAAQ,aAAA,EAAc;AAAA,EAChE;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,UAAA,EAAW;AACjD;AAMA,eAAsB,oBAAA,CACpB,KACA,IAAA,EACgC;AAChC,EAAA,IAAI,SAAS,KAAA,EAAO;AAClB,IAAA,MAAM,WAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,IAAA,OAAO,EAAE,KAAA,EAAO,KAAA,EAAO,WAAA,EAAa,QAAQ,MAAA,EAAO;AAAA,EACrD;AACA,EAAA,MAAM,IAAA,GAAO,MAAM,eAAA,CAAgB,GAAA,EAAK,IAAI,CAAA;AAC5C,EAAA,OAAO,EAAE,OAAO,IAAA,CAAK,KAAA,EAAO,aAAa,IAAA,CAAK,WAAA,EAAa,MAAA,EAAQ,IAAA,CAAK,MAAA,EAAO;AACjF;AAEA,SAAS,oBAAoB,KAAA,EAAkD;AAC7E,EAAA,IAAI,CAAC,kBAAA,CAAmB,QAAA,CAAS,KAAyB,CAAA,EAAG;AAC3D,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,eAAA;AAAA,MACA,CAAA,wBAAA,EAA2B,mBAAmB,IAAA,CAAK,IAAI,CAAC,CAAA,MAAA,EAAS,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC,CAAA,CAAA;AAAA,KACxF;AAAA,EACF;AACF;AAEO,IAAM,aAAA,GAAN,cAA4B,KAAA,CAAM;AAAA,EAC9B,IAAA;AAAA,EACT,WAAA,CAAY,MAAc,OAAA,EAAiB;AACzC,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AAAA,EACd;AACF,CAAA;;;ACzEA,IAAO,eAAQ,aAAA,CAAkD;AAAA,EAC/D,EAAA,EAAI,0BAAA;AAAA,EACJ,WAAA,EAAa,wBAAA;AAAA,EAEb,OAAA,EAAS;AAAA,IACP,MAAM,OAAA,CAAQ,GAAA,EAAsB,KAAA,EAA0D;AAC5F,MAAA,MAAM,KAAA,GAAS,MAAM,KAAA,IAAS,KAAA;AAE9B,MAAA,IAAI,QAAA;AACJ,MAAA,IAAI;AACF,QAAA,QAAA,GAAW,MAAM,oBAAA,CAAqB,GAAA,CAAI,GAAA,EAAK,MAAM,KAAK,CAAA;AAAA,MAC5D,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,eAAe,aAAA,EAAe;AAChC,UAAA,eAAA,CAAgB,GAAA,EAAK,GAAA,CAAI,OAAA,EAAS,MAAA,EAAW,MAAM,IAAI,CAAA;AAAA,QACzD,CAAA,MAAO;AACL,UAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAAA,QAClC;AACA,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,OAAO,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAA,EAAG,QAAQ,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAO,GAAE,EAAE;AAAA,MACjH;AAEA,MAAA,IAAI;AACF,QAAA,MAAM,QAAgC,EAAE,IAAA,EAAM,QAAA,EAAU,KAAA,EAAO,SAAS,KAAA,EAAM;AAC9E,QAAA,IAAI,SAAS,WAAA,EAAa;AACxB,UAAA,KAAA,CAAM,cAAc,QAAA,CAAS,WAAA;AAAA,QAC/B;AACA,QAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAoB,WAAA,EAAa,KAAK,CAAA;AAEzD,QAAA,IAAI,MAAM,IAAA,EAAM;AACd,UAAA,GAAA,CAAI,EAAA,EAAI,OAAO,IAAI,CAAA;AAAA,QACrB,CAAA,MAAO;AACL,UAAA,MAAM,OAAA,GAAU,KAAK,OAAA,CAAQ,MAAA,CAAO,OAAK,CAAA,CAAE,OAAA,KAAY,KAAK,CAAA,CAAE,MAAA;AAC9D,UAAA,MAAM,QAAA,GAAW,KAAK,KAAA,GAAQ,OAAA;AAC9B,UAAA,MAAM,eAAA,GAAkB,SAAS,KAAA,KAAU,KAAA;AAC3C,UAAA,GAAA,CAAI,EAAA,EAAI,OAAA,GAAU,CAAA,EAAG,IAAA,CAAK,KAAK,CAAA,UAAA,EAAa,OAAO,CAAA,UAAA,EAAa,QAAQ,CAAA,wBAAA,EAAsB,QAAA,CAAS,KAAK,CAAA,CAAA,EAAI;AAAA,YAC9G,UAAU,CAAC;AAAA,cACT,MAAA,EAAQ,SAAA;AAAA,cACR,KAAA,EAAO,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,CAAA,CAAA,KAAK;AAC3B,gBAAA,MAAM,IAAA,GAAO,CAAA,CAAE,OAAA,KAAY,KAAA,GAAQ,QAAA,GAAM,QAAA;AACzC,gBAAA,MAAM,QAAA,GAAW,eAAA,GAAkB,CAAA,EAAA,EAAK,CAAA,CAAE,KAAK,CAAA,CAAA,CAAA,GAAM,EAAA;AACrD,gBAAA,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,CAAA,CAAE,EAAE,CAAA,CAAA,EAAI,CAAA,CAAE,OAAO,CAAA,EAAA,EAAK,CAAA,CAAE,MAAM,CAAA,CAAA,EAAI,QAAQ,CAAA,CAAA;AAAA,cAC9D,CAAC;AAAA,aACF;AAAA,WACF,CAAA;AAAA,QACH;AAEA,QAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAK;AAAA,MAClC,SAAS,GAAA,EAAK;AACZ,QAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAChC,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,OAAO,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAA,EAAG,QAAQ,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAO,GAAE,EAAE;AAAA,MACjH;AAAA,IACF;AAAA;AAEJ,CAAC","file":"list.js","sourcesContent":["/**\n * HTTP client for marketplace service via Gateway.\n */\n\nimport { useEnv } from '@kb-labs/sdk';\nimport { CredentialsManager, SessionManager } from '@kb-labs/cli-runtime/gateway';\nimport type { GatewayCredentials, SessionCredentials } from '@kb-labs/cli-runtime/gateway';\n\nconst DEFAULT_GATEWAY_URL = 'http://127.0.0.1:4000';\nconst MARKETPLACE_PREFIX = '/api/v1/marketplace';\nconst FETCH_TIMEOUT_MS = 30_000;\n\ntype AuthState = {\n  gatewayUrl: string;\n  accessToken: string;\n  refresh: () => Promise<AuthState>;\n};\n\nasync function loadAuth(): Promise<AuthState | null> {\n  const sessionManager = new SessionManager();\n  const session = await sessionManager.load();\n  if (session) {\n    const current = sessionManager.isExpired(session) ? await sessionManager.refresh(session) : session;\n    return authState(current, () => sessionManager.refresh(current));\n  }\n\n  const credentialsManager = new CredentialsManager();\n  const credentials = await credentialsManager.load();\n  if (!credentials) {\n    return null;\n  }\n  const current = credentialsManager.isExpired(credentials) ? await credentialsManager.refresh(credentials) : credentials;\n  return authState(current, () => credentialsManager.refresh(current));\n}\n\nfunction authState(credentials: GatewayCredentials | SessionCredentials, refresh: () => Promise<GatewayCredentials | SessionCredentials>): AuthState {\n  return {\n    gatewayUrl: credentials.gatewayUrl,\n    accessToken: credentials.accessToken,\n    refresh: async () => {\n      const updated = await refresh();\n      return authState(updated, refresh);\n    },\n  };\n}\n\nfunction getBaseUrl(gatewayUrl?: string): string {\n  const marketplaceUrl = useEnv('KB_MARKETPLACE_URL');\n  if (marketplaceUrl) {\n    return `${marketplaceUrl}${MARKETPLACE_PREFIX}`;\n  }\n  const gateway = gatewayUrl ?? useEnv('KB_GATEWAY_URL') ?? DEFAULT_GATEWAY_URL;\n  return `${gateway}${MARKETPLACE_PREFIX}`;\n}\n\nasync function request<T>(method: string, path: string, body?: Record<string, unknown>, params?: Record<string, string>): Promise<T> {\n  let auth = await loadAuth();\n  const url = new URL(`${getBaseUrl(auth?.gatewayUrl)}${path}`);\n  if (params) {\n    for (const [key, value] of Object.entries(params)) { url.searchParams.set(key, value); }\n  }\n\n  for (let attempt = 0; attempt < 2; attempt += 1) {\n    const controller = new AbortController();\n    const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n    try {\n      const headers: Record<string, string> = {};\n      if (body) { headers['Content-Type'] = 'application/json'; }\n      if (auth) { headers.Authorization = `Bearer ${auth.accessToken}`; }\n      const response = await fetch(url.toString(), {\n        method,\n        headers,\n        body: body ? JSON.stringify(body) : undefined,\n        signal: controller.signal,\n      });\n      if (response.status === 401 && auth && attempt === 0) {\n        auth = await auth.refresh();\n        continue;\n      }\n      if (response.status === 401 && !auth) {\n        throw new Error('Marketplace authentication is required. Run `kb auth login` or choose local no-auth mode during installation.');\n      }\n      if (!response.ok) {\n        const text = await response.text();\n        throw new Error(`Marketplace ${path} failed (${response.status}): ${text}`);\n      }\n      if (response.status === 204) { return undefined as T; }\n      return await response.json() as T;\n    } catch (err) {\n      if ((err as Error).name === 'AbortError') {\n        throw new Error(`Marketplace ${path} timed out — is the marketplace service running? (kb-dev start marketplace)`);\n      }\n      throw err;\n    } finally {\n      clearTimeout(timer);\n    }\n  }\n  throw new Error(`Marketplace ${path} failed after refreshing authentication`);\n}\n\nexport async function post<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('POST', path, body);\n}\n\nexport async function patch<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('PATCH', path, body);\n}\n\nexport async function del<T = unknown>(path: string, body?: Record<string, unknown>): Promise<T> {\n  return request<T>('DELETE', path, body);\n}\n\nexport async function get<T = unknown>(path: string, params?: Record<string, string>): Promise<T> {\n  return request<T>('GET', path, undefined, params);\n}\n","/**\n * @module @kb-labs/marketplace-entry/scope\n *\n * Client-side scope resolution for marketplace CLI commands. Uses the\n * canonical `findProjectConfigRoot` helper from `@kb-labs/core-workspace`\n * so the detection rules (which filenames count, how walk-up stops) match\n * what the config loader and the marketplace daemon enforce.\n *\n * Rules:\n *  - `project` is the default if cwd (or any ancestor up to the filesystem\n *    root) contains `.kb/kb.config.{json,jsonc}`.\n *  - Otherwise the default is `platform`.\n *  - `--scope` always overrides detection.\n *  - For scope=\"project\" we return the absolute projectRoot so the daemon\n *    doesn't need to re-discover it.\n */\n\nimport { findProjectConfigRoot } from '@kb-labs/core-workspace';\nimport type { MarketplaceScope, MarketplaceQueryScope } from '@kb-labs/marketplace-contracts';\n\nexport const SCOPE_FLAG_CHOICES: readonly MarketplaceScope[] = ['platform', 'project'];\nexport const QUERY_SCOPE_FLAG_CHOICES: readonly MarketplaceQueryScope[] = ['platform', 'project', 'all'];\n\nexport interface ResolvedCliScope {\n  scope: MarketplaceScope;\n  projectRoot?: string;\n  /** How the scope was determined — surfaces in --verbose logs. */\n  reason: 'flag' | 'auto-detect' | 'fallback';\n}\n\nexport interface ResolvedCliQueryScope extends Omit<ResolvedCliScope, 'scope'> {\n  scope: MarketplaceQueryScope;\n}\n\n/**\n * Resolve the effective scope for a mutating command (`link`, `unlink`,\n * `install`, ...). `flag` is the value of `--scope` (if supplied). The\n * helper never returns `'all'` for mutating commands — callers restrict\n * choices via `SCOPE_FLAG_CHOICES`.\n */\nexport async function resolveCliScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliScope> {\n  if (flag) {\n    assertMutatingScope(flag);\n    if (flag === 'project') {\n      const projectRoot = await findProjectConfigRoot(cwd);\n      if (!projectRoot) {\n        throw new CliScopeError(\n          'SCOPE_PROJECT_ROOT_NOT_FOUND',\n          `--scope=project requires a .kb/kb.config.{json,jsonc} ancestor of ${cwd} — none found.`,\n        );\n      }\n      return { scope: 'project', projectRoot, reason: 'flag' };\n    }\n    return { scope: 'platform', reason: 'flag' };\n  }\n\n  const projectRoot = await findProjectConfigRoot(cwd);\n  if (projectRoot) {\n    return { scope: 'project', projectRoot, reason: 'auto-detect' };\n  }\n  return { scope: 'platform', reason: 'fallback' };\n}\n\n/**\n * Resolve the effective scope for a read-only command (`list`). Accepts\n * `'all'` as an explicit flag value.\n */\nexport async function resolveCliQueryScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliQueryScope> {\n  if (flag === 'all') {\n    const projectRoot = await findProjectConfigRoot(cwd);\n    return { scope: 'all', projectRoot, reason: 'flag' };\n  }\n  const base = await resolveCliScope(cwd, flag);\n  return { scope: base.scope, projectRoot: base.projectRoot, reason: base.reason };\n}\n\nfunction assertMutatingScope(value: string): asserts value is MarketplaceScope {\n  if (!SCOPE_FLAG_CHOICES.includes(value as MarketplaceScope)) {\n    throw new CliScopeError(\n      'SCOPE_INVALID',\n      `--scope must be one of: ${SCOPE_FLAG_CHOICES.join(', ')} (got ${JSON.stringify(value)})`,\n    );\n  }\n}\n\nexport class CliScopeError extends Error {\n  readonly code: string;\n  constructor(code: string, message: string) {\n    super(message);\n    this.code = code;\n    this.name = 'CliScopeError';\n  }\n}\n\n/**\n * Build the body-payload fragment expected by `parseMutatingScope` on the\n * API side: `{ scope, projectRoot? }`. Kept as a helper so every command\n * sends the same shape and nothing drifts out-of-sync with the server.\n */\nexport function scopeBody(ctx: ResolvedCliScope | ResolvedCliQueryScope): {\n  scope: MarketplaceScope | MarketplaceQueryScope;\n  projectRoot?: string;\n} {\n  return {\n    scope: ctx.scope,\n    ...(ctx.projectRoot ? { projectRoot: ctx.projectRoot } : {}),\n  };\n}\n","import { defineCommand, handleError, validationError, type PluginContextV3, type CommandResult } from '@kb-labs/sdk';\nimport { get } from '../../http.js';\nimport { resolveCliQueryScope, CliScopeError } from '../../scope.js';\n\ninterface ListFlags {\n  json?: boolean;\n  scope?: string;\n}\ninterface ListInput { argv?: string[]; flags?: ListFlags }\n\ninterface EntryRow {\n  id: string;\n  version: string;\n  source: string;\n  primaryKind: string;\n  provides: string[];\n  enabled: boolean;\n  scope: 'platform' | 'project';\n}\n\ninterface ListResultData {\n  entries: EntryRow[];\n  total: number;\n}\n\nexport default defineCommand<unknown, ListInput, ListResultData>({\n  id: 'marketplace:plugins:list',\n  description: 'List installed plugins',\n\n  handler: {\n    async execute(ctx: PluginContextV3, input: ListInput): Promise<CommandResult<ListResultData>> {\n      const flags = (input.flags ?? input) as ListFlags;\n\n      let scopeCtx;\n      try {\n        scopeCtx = await resolveCliQueryScope(ctx.cwd, flags.scope);\n      } catch (err) {\n        if (err instanceof CliScopeError) {\n          validationError(ctx, err.message, undefined, flags.json);\n        } else {\n          handleError(ctx, err, flags.json);\n        }\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { entries: [], total: 0 } };\n      }\n\n      try {\n        const query: Record<string, string> = { kind: 'plugin', scope: scopeCtx.scope };\n        if (scopeCtx.projectRoot) {\n          query.projectRoot = scopeCtx.projectRoot;\n        }\n        const data = await get<ListResultData>('/packages', query);\n\n        if (flags.json) {\n          ctx.ui?.json?.(data);\n        } else {\n          const enabled = data.entries.filter(e => e.enabled !== false).length;\n          const disabled = data.total - enabled;\n          const showScopeColumn = scopeCtx.scope === 'all';\n          ctx.ui?.success?.(`${data.total} plugins (${enabled} enabled, ${disabled} disabled) — scope=${scopeCtx.scope}`, {\n            sections: [{\n              header: 'Plugins',\n              items: data.entries.map(e => {\n                const icon = e.enabled !== false ? '✅' : '⏸';\n                const scopeTag = showScopeColumn ? ` [${e.scope}]` : '';\n                return `${icon} ${e.id} ${e.version} (${e.source})${scopeTag}`;\n              }),\n            }],\n          });\n        }\n\n        return { ok: true, result: data };\n      } catch (err) {\n        handleError(ctx, err, flags.json);\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { entries: [], total: 0 } };\n      }\n    },\n  },\n});\n"]}

package/dist/commands/plugins/refresh.d.ts

@@ -7,4 +7,6 @@ interface RefreshFlags {
 }
 declare const _default: _kb_labs_shared_command_kit.CommandHandlerV3<unknown, CLIInput<RefreshFlags>, unknown>;
 
-export { _default as default };
+declare function clearDiscoveryCache(cwd: string): Promise<boolean>;
+
+export { clearDiscoveryCache, _default as default };

package/dist/commands/plugins/refresh.js

@@ -18,13 +18,7 @@ var refresh_default = defineCommand({
     async execute(ctx, input) {
       const { flags = {} } = input;
       try {
-        const cacheFile = path.join(ctx.cwd, ".kb", "cache", "cli-manifests.json");
-        let cleared = false;
-        try {
-          await fs.unlink(cacheFile);
-          cleared = true;
-        } catch {
-        }
+        const cleared = await clearDiscoveryCache(ctx.cwd);
         if (flags.json) {
           ctx.ui?.json?.({ cleared });
         } else {
@@ -40,7 +34,16 @@ var refresh_default = defineCommand({
     }
   }
 });
+async function clearDiscoveryCache(cwd) {
+  const cacheFile = path.join(cwd, ".kb", "cache", "cli-manifests.json");
+  try {
+    await fs.unlink(cacheFile);
+    return true;
+  } catch {
+    return false;
+  }
+}
 
-export { refresh_default as default };
+export { clearDiscoveryCache, refresh_default as default };
 //# sourceMappingURL=refresh.js.map
 //# sourceMappingURL=refresh.js.map

package/dist/commands/plugins/refresh.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/commands/plugins/refresh.ts"],"names":[],"mappings":";;;;;AASA,IAAO,kBAAQ,aAAA,CAAwD;AAAA,EACrE,EAAA,EAAI,6BAAA;AAAA,EACJ,WAAA,EAAa,2BAAA;AAAA,EAEb,OAAA,EAAS;AAAA,IACP,MAAM,MAAA,CAAO,IAAA,EAAuB,MAAA,EAAgC;AAClE,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,2BAAA;AAAA,QACT,UAAA,EAAY;AAAA,UACV,EAAE,MAAM,QAAA,EAAmB,QAAA,EAAU,QAAQ,OAAA,EAAS,EAAE,IAAA,EAAM,8BAAA,EAA+B;AAAE;AACjG,OACF;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,OAAA,CAAQ,GAAA,EAAsB,KAAA,EAAuD;AACzF,MAAA,MAAM,EAAE,KAAA,GAAQ,EAAC,EAAE,GAAI,KAAA;AAEvB,MAAA,IAAI;AACF,QAAA,MAAM,YAAiB,IAAA,CAAA,IAAA,CAAK,GAAA,CAAI,GAAA,EAAK,KAAA,EAAO,SAAS,oBAAoB,CAAA;AACzE,QAAA,IAAI,OAAA,GAAU,KAAA;AACd,QAAA,IAAI;AACF,UAAA,MAAS,UAAO,SAAS,CAAA;AACzB,UAAA,OAAA,GAAU,IAAA;AAAA,QACZ,CAAA,CAAA,MAAQ;AAAA,QAER;AAEA,QAAA,IAAI,MAAM,IAAA,EAAM;AACd,UAAA,GAAA,CAAI,EAAA,EAAI,IAAA,GAAO,EAAE,OAAA,EAAS,CAAA;AAAA,QAC5B,CAAA,MAAO;AACL,UAAA,GAAA,CAAI,EAAA,EAAI,OAAA;AAAA,YACN,UACI,6DAAA,GACA;AAAA,WACN;AAAA,QACF;AACA,QAAA,OAAO,EAAE,IAAI,IAAA,EAAK;AAAA,MACpB,SAAS,GAAA,EAAK;AACZ,QAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAChC,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,GAAA,YAAe,QAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAA,EAAE;AAAA,MAC9E;AAAA,IACF;AAAA;AAEJ,CAAC","file":"refresh.js","sourcesContent":["import * as path from 'node:path';\nimport * as fs from 'node:fs/promises';\nimport { defineCommand, handleError, type CLIInput, type PluginContextV3, type CommandResult } from '@kb-labs/sdk';\n\ninterface RefreshFlags {\n  json?: boolean;\n  'dry-run'?: boolean;\n}\n\nexport default defineCommand<unknown, CLIInput<RefreshFlags>, unknown>({\n  id: 'marketplace:plugins:refresh',\n  description: 'Clear CLI discovery cache',\n\n  handler: {\n    async intent(_ctx: PluginContextV3, _input: CLIInput<RefreshFlags>) {\n      return {\n        summary: 'Clear CLI discovery cache',\n        operations: [\n          { type: 'delete' as const, resource: 'file', details: { path: '.kb/cache/cli-manifests.json' } },\n        ],\n      };\n    },\n\n    async execute(ctx: PluginContextV3, input: CLIInput<RefreshFlags>): Promise<CommandResult> {\n      const { flags = {} } = input;\n\n      try {\n        const cacheFile = path.join(ctx.cwd, '.kb', 'cache', 'cli-manifests.json');\n        let cleared = false;\n        try {\n          await fs.unlink(cacheFile);\n          cleared = true;\n        } catch {\n          // file may not exist\n        }\n\n        if (flags.json) {\n          ctx.ui?.json?.({ cleared });\n        } else {\n          ctx.ui?.success?.(\n            cleared\n              ? 'CLI discovery cache cleared. Run any kb command to rebuild.'\n              : 'CLI discovery cache was already empty.',\n          );\n        }\n        return { ok: true };\n      } catch (err) {\n        handleError(ctx, err, flags.json);\n        return { ok: false, error: err instanceof Error ? err.message : String(err) };\n      }\n    },\n  },\n});\n"]}
+{"version":3,"sources":["../../../src/commands/plugins/refresh.ts"],"names":[],"mappings":";;;;;AASA,IAAO,kBAAQ,aAAA,CAAwD;AAAA,EACrE,EAAA,EAAI,6BAAA;AAAA,EACJ,WAAA,EAAa,2BAAA;AAAA,EAEb,OAAA,EAAS;AAAA,IACP,MAAM,MAAA,CAAO,IAAA,EAAuB,MAAA,EAAgC;AAClE,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,2BAAA;AAAA,QACT,UAAA,EAAY;AAAA,UACV,EAAE,MAAM,QAAA,EAAmB,QAAA,EAAU,QAAQ,OAAA,EAAS,EAAE,IAAA,EAAM,8BAAA,EAA+B;AAAE;AACjG,OACF;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,OAAA,CAAQ,GAAA,EAAsB,KAAA,EAAuD;AACzF,MAAA,MAAM,EAAE,KAAA,GAAQ,EAAC,EAAE,GAAI,KAAA;AAEvB,MAAA,IAAI;AACF,QAAA,MAAM,OAAA,GAAU,MAAM,mBAAA,CAAoB,GAAA,CAAI,GAAG,CAAA;AAEjD,QAAA,IAAI,MAAM,IAAA,EAAM;AACd,UAAA,GAAA,CAAI,EAAA,EAAI,IAAA,GAAO,EAAE,OAAA,EAAS,CAAA;AAAA,QAC5B,CAAA,MAAO;AACL,UAAA,GAAA,CAAI,EAAA,EAAI,OAAA;AAAA,YACN,UACI,6DAAA,GACA;AAAA,WACN;AAAA,QACF;AACA,QAAA,OAAO,EAAE,IAAI,IAAA,EAAK;AAAA,MACpB,SAAS,GAAA,EAAK;AACZ,QAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAChC,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,GAAA,YAAe,QAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAA,EAAE;AAAA,MAC9E;AAAA,IACF;AAAA;AAEJ,CAAC;AAED,eAAsB,oBAAoB,GAAA,EAA+B;AACvE,EAAA,MAAM,SAAA,GAAiB,IAAA,CAAA,IAAA,CAAK,GAAA,EAAK,KAAA,EAAO,SAAS,oBAAoB,CAAA;AACrE,EAAA,IAAI;AACF,IAAA,MAAS,UAAO,SAAS,CAAA;AACzB,IAAA,OAAO,IAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF","file":"refresh.js","sourcesContent":["import * as path from 'node:path';\nimport * as fs from 'node:fs/promises';\nimport { defineCommand, handleError, type CLIInput, type PluginContextV3, type CommandResult } from '@kb-labs/sdk';\n\ninterface RefreshFlags {\n  json?: boolean;\n  'dry-run'?: boolean;\n}\n\nexport default defineCommand<unknown, CLIInput<RefreshFlags>, unknown>({\n  id: 'marketplace:plugins:refresh',\n  description: 'Clear CLI discovery cache',\n\n  handler: {\n    async intent(_ctx: PluginContextV3, _input: CLIInput<RefreshFlags>) {\n      return {\n        summary: 'Clear CLI discovery cache',\n        operations: [\n          { type: 'delete' as const, resource: 'file', details: { path: '.kb/cache/cli-manifests.json' } },\n        ],\n      };\n    },\n\n    async execute(ctx: PluginContextV3, input: CLIInput<RefreshFlags>): Promise<CommandResult> {\n      const { flags = {} } = input;\n\n      try {\n        const cleared = await clearDiscoveryCache(ctx.cwd);\n\n        if (flags.json) {\n          ctx.ui?.json?.({ cleared });\n        } else {\n          ctx.ui?.success?.(\n            cleared\n              ? 'CLI discovery cache cleared. Run any kb command to rebuild.'\n              : 'CLI discovery cache was already empty.',\n          );\n        }\n        return { ok: true };\n      } catch (err) {\n        handleError(ctx, err, flags.json);\n        return { ok: false, error: err instanceof Error ? err.message : String(err) };\n      }\n    },\n  },\n});\n\nexport async function clearDiscoveryCache(cwd: string): Promise<boolean> {\n  const cacheFile = path.join(cwd, '.kb', 'cache', 'cli-manifests.json');\n  try {\n    await fs.unlink(cacheFile);\n    return true;\n  } catch {\n    return false;\n  }\n}\n"]}

package/dist/commands/plugins/unlink.js

@@ -63,6 +63,9 @@ async function request(method, path, body, params) {
         auth = await auth.refresh();
         continue;
       }
+      if (response.status === 401 && !auth) {
+        throw new Error("Marketplace authentication is required. Run `kb auth login` or choose local no-auth mode during installation.");
+      }
       if (!response.ok) {
         const text = await response.text();
         throw new Error(`Marketplace ${path} failed (${response.status}): ${text}`);

package/dist/commands/plugins/unlink.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/http.ts","../../../src/scope.ts","../../../src/commands/plugins/unlink.ts"],"names":["current","projectRoot"],"mappings":";;;;;AAQA,IAAM,mBAAA,GAAsB,uBAAA;AAC5B,IAAM,kBAAA,GAAqB,qBAAA;AAC3B,IAAM,gBAAA,GAAmB,GAAA;AAQzB,eAAe,QAAA,GAAsC;AACnD,EAAA,MAAM,cAAA,GAAiB,IAAI,cAAA,EAAe;AAC1C,EAAA,MAAM,OAAA,GAAU,MAAM,cAAA,CAAe,IAAA,EAAK;AAC1C,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,MAAMA,QAAAA,GAAU,eAAe,SAAA,CAAU,OAAO,IAAI,MAAM,cAAA,CAAe,OAAA,CAAQ,OAAO,CAAA,GAAI,OAAA;AAC5F,IAAA,OAAO,UAAUA,QAAAA,EAAS,MAAM,cAAA,CAAe,OAAA,CAAQA,QAAO,CAAC,CAAA;AAAA,EACjE;AAEA,EAAA,MAAM,kBAAA,GAAqB,IAAI,kBAAA,EAAmB;AAClD,EAAA,MAAM,WAAA,GAAc,MAAM,kBAAA,CAAmB,IAAA,EAAK;AAClD,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,OAAA,GAAU,mBAAmB,SAAA,CAAU,WAAW,IAAI,MAAM,kBAAA,CAAmB,OAAA,CAAQ,WAAW,CAAA,GAAI,WAAA;AAC5G,EAAA,OAAO,UAAU,OAAA,EAAS,MAAM,kBAAA,CAAmB,OAAA,CAAQ,OAAO,CAAC,CAAA;AACrE;AAEA,SAAS,SAAA,CAAU,aAAsD,OAAA,EAA4E;AACnJ,EAAA,OAAO;AAAA,IACL,YAAY,WAAA,CAAY,UAAA;AAAA,IACxB,aAAa,WAAA,CAAY,WAAA;AAAA,IACzB,SAAS,YAAY;AACnB,MAAA,MAAM,OAAA,GAAU,MAAM,OAAA,EAAQ;AAC9B,MAAA,OAAO,SAAA,CAAU,SAAS,OAAO,CAAA;AAAA,IACnC;AAAA,GACF;AACF;AAEA,SAAS,WAAW,UAAA,EAA6B;AAC/C,EAAA,MAAM,cAAA,GAAiB,OAAO,oBAAoB,CAAA;AAClD,EAAA,IAAI,cAAA,EAAgB;AAClB,IAAA,OAAO,CAAA,EAAG,cAAc,CAAA,EAAG,kBAAkB,CAAA,CAAA;AAAA,EAC/C;AACA,EAAA,MAAM,OAAA,GAAU,UAAA,IAAc,MAAA,CAAO,gBAAgB,CAAA,IAAK,mBAAA;AAC1D,EAAA,OAAO,CAAA,EAAG,OAAO,CAAA,EAAG,kBAAkB,CAAA,CAAA;AACxC;AAEA,eAAe,OAAA,CAAW,MAAA,EAAgB,IAAA,EAAc,IAAA,EAAgC,MAAA,EAA6C;AACnI,EAAA,IAAI,IAAA,GAAO,MAAM,QAAA,EAAS;AAC1B,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,CAAA,EAAG,UAAA,CAAW,MAAM,UAAU,CAAC,CAAA,EAAG,IAAI,CAAA,CAAE,CAAA;AAK5D,EAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,GAAU,CAAA,EAAG,WAAW,CAAA,EAAG;AAC/C,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,gBAAgB,CAAA;AACnE,IAAA,IAAI;AACF,MAAA,MAAM,UAAkC,EAAC;AACzC,MAAA,IAAI,IAAA,EAAM;AAAE,QAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAAA,MAAoB;AAC1D,MAAA,IAAI,IAAA,EAAM;AAAE,QAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,IAAA,CAAK,WAAW,CAAA,CAAA;AAAA,MAAI;AAClE,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,CAAI,UAAS,EAAG;AAAA,QAC3C,MAAA;AAAA,QACA,OAAA;AAAA,QACA,IAAA,EAAM,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,GAAI,KAAA,CAAA;AAAA,QACpC,QAAQ,UAAA,CAAW;AAAA,OACpB,CAAA;AACD,MAAA,IAAI,QAAA,CAAS,MAAA,KAAW,GAAA,IAAO,IAAA,IAAQ,YAAY,CAAA,EAAG;AACpD,QAAA,IAAA,GAAO,MAAM,KAAK,OAAA,EAAQ;AAC1B,QAAA;AAAA,MACF;AACA,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,QAAA,MAAM,IAAI,MAAM,CAAA,YAAA,EAAe,IAAI,YAAY,QAAA,CAAS,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,CAAE,CAAA;AAAA,MAC5E;AACA,MAAA,IAAI,QAAA,CAAS,WAAW,GAAA,EAAK;AAAE,QAAA,OAAO,KAAA,CAAA;AAAA,MAAgB;AACtD,MAAA,OAAO,MAAM,SAAS,IAAA,EAAK;AAAA,IAC7B,SAAS,GAAA,EAAK;AACZ,MAAA,IAAK,GAAA,CAAc,SAAS,YAAA,EAAc;AACxC,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,gFAAA,CAA6E,CAAA;AAAA,MAClH;AACA,MAAA,MAAM,GAAA;AAAA,IACR,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAAA,IACpB;AAAA,EACF;AACA,EAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,uCAAA,CAAyC,CAAA;AAC9E;AAEA,eAAsB,IAAA,CAAkB,MAAc,IAAA,EAA2C;AAC/F,EAAA,OAAO,OAAA,CAAW,MAAA,EAAQ,IAAA,EAAM,IAAI,CAAA;AACtC;AC/EO,IAAM,kBAAA,GAAkD,CAAC,UAAA,EAAY,SAAS,CAAA;AAoBrF,eAAsB,eAAA,CACpB,KACA,IAAA,EAC2B;AAC3B,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,mBAAA,CAAoB,IAAI,CAAA;AACxB,IAAA,IAAI,SAAS,SAAA,EAAW;AACtB,MAAA,MAAMC,YAAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,MAAA,IAAI,CAACA,YAAAA,EAAa;AAChB,QAAA,MAAM,IAAI,aAAA;AAAA,UACR,8BAAA;AAAA,UACA,qEAAqE,GAAG,CAAA,mBAAA;AAAA,SAC1E;AAAA,MACF;AACA,MAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAAA,YAAAA,EAAa,QAAQ,MAAA,EAAO;AAAA,IACzD;AACA,IAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,MAAA,EAAO;AAAA,EAC7C;AAEA,EAAA,MAAM,WAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAa,QAAQ,aAAA,EAAc;AAAA,EAChE;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,UAAA,EAAW;AACjD;AAkBA,SAAS,oBAAoB,KAAA,EAAkD;AAC7E,EAAA,IAAI,CAAC,kBAAA,CAAmB,QAAA,CAAS,KAAyB,CAAA,EAAG;AAC3D,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,eAAA;AAAA,MACA,CAAA,wBAAA,EAA2B,mBAAmB,IAAA,CAAK,IAAI,CAAC,CAAA,MAAA,EAAS,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC,CAAA,CAAA;AAAA,KACxF;AAAA,EACF;AACF;AAEO,IAAM,aAAA,GAAN,cAA4B,KAAA,CAAM;AAAA,EAC9B,IAAA;AAAA,EACT,WAAA,CAAY,MAAc,OAAA,EAAiB;AACzC,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AAAA,EACd;AACF,CAAA;AAOO,SAAS,UAAU,GAAA,EAGxB;AACA,EAAA,OAAO;AAAA,IACL,OAAO,GAAA,CAAI,KAAA;AAAA,IACX,GAAI,IAAI,WAAA,GAAc,EAAE,aAAa,GAAA,CAAI,WAAA,KAAgB;AAAC,GAC5D;AACF;;;AClGA,IAAO,iBAAQ,aAAA,CAA0E;AAAA,EACvF,EAAA,EAAI,4BAAA;AAAA,EACJ,WAAA,EAAa,iBAAA;AAAA,EAEb,OAAA,EAAS;AAAA,IACP,MAAM,MAAA,CAAO,IAAA,EAAuB,KAAA,EAAoB;AACtD,MAAA,MAAM,SAAA,GAAY,KAAA,CAAM,IAAA,GAAO,CAAC,CAAA,IAAK,WAAA;AACrC,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,kBAAkB,SAAS,CAAA,CAAA,CAAA;AAAA,QACpC,UAAA,EAAY,CAAC,EAAE,IAAA,EAAM,QAAA,EAAmB,QAAA,EAAU,aAAA,EAAe,OAAA,EAAS,EAAE,SAAA,EAAU,EAAG;AAAA,OAC3F;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,OAAA,CAAQ,GAAA,EAAsB,KAAA,EAAkF;AACpH,MAAA,MAAM,SAAA,GAAY,KAAA,CAAM,IAAA,GAAO,CAAC,CAAA;AAChC,MAAA,MAAM,KAAA,GAAS,MAAM,KAAA,IAAS,KAAA;AAE9B,MAAA,IAAI,CAAC,SAAA,EAAW;AACd,QAAA,eAAA,CAAgB,GAAA,EAAK,gCAAA,EAAkC,kDAAA,EAAoD,KAAA,CAAM,IAAI,CAAA;AACrH,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,0BAAA,EAA4B,MAAA,EAAQ,EAAE,SAAA,EAAW,EAAA,EAAI,KAAA,EAAO,EAAA,EAAG,EAAE;AAAA,MAC9F;AAEA,MAAA,IAAI,QAAA;AACJ,MAAA,IAAI;AACF,QAAA,QAAA,GAAW,MAAM,eAAA,CAAgB,GAAA,CAAI,GAAA,EAAK,MAAM,KAAK,CAAA;AAAA,MACvD,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,eAAe,aAAA,EAAe;AAChC,UAAA,eAAA,CAAgB,GAAA,EAAK,GAAA,CAAI,OAAA,EAAS,MAAA,EAAW,MAAM,IAAI,CAAA;AAAA,QACzD,CAAA,MAAO;AACL,UAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAAA,QAClC;AACA,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,GAAA,YAAe,QAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,GAAG,MAAA,EAAQ,EAAE,WAAW,EAAA,EAAI,KAAA,EAAO,IAAG,EAAE;AAAA,MACpH;AAEA,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,CAAK,oBAAoB,EAAE,SAAA,EAAW,GAAG,SAAA,CAAU,QAAQ,GAAG,CAAA;AACpE,QAAA,IAAI,MAAM,IAAA,EAAM;AACd,UAAA,GAAA,CAAI,EAAA,EAAI,OAAO,EAAE,EAAA,EAAI,MAAM,SAAA,EAAW,KAAA,EAAO,QAAA,CAAS,KAAA,EAAO,CAAA;AAAA,QAC/D,CAAA,MAAO;AACL,UAAA,GAAA,CAAI,IAAI,OAAA,GAAU,CAAA,SAAA,EAAY,SAAS,CAAA,EAAA,EAAK,QAAA,CAAS,KAAK,CAAA,CAAA,CAAG,CAAA;AAAA,QAC/D;AACA,QAAA,OAAO,EAAE,IAAI,IAAA,EAAM,MAAA,EAAQ,EAAE,SAAA,EAAW,KAAA,EAAO,QAAA,CAAS,KAAA,EAAM,EAAE;AAAA,MAClE,SAAS,GAAA,EAAK;AACZ,QAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAChC,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,GAAA,YAAe,QAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,GAAG,MAAA,EAAQ,EAAE,WAAW,EAAA,EAAI,KAAA,EAAO,IAAG,EAAE;AAAA,MACpH;AAAA,IACF;AAAA;AAEJ,CAAC","file":"unlink.js","sourcesContent":["/**\n * HTTP client for marketplace service via Gateway.\n */\n\nimport { useEnv } from '@kb-labs/sdk';\nimport { CredentialsManager, SessionManager } from '@kb-labs/cli-runtime/gateway';\nimport type { GatewayCredentials, SessionCredentials } from '@kb-labs/cli-runtime/gateway';\n\nconst DEFAULT_GATEWAY_URL = 'http://127.0.0.1:4000';\nconst MARKETPLACE_PREFIX = '/api/v1/marketplace';\nconst FETCH_TIMEOUT_MS = 30_000;\n\ntype AuthState = {\n  gatewayUrl: string;\n  accessToken: string;\n  refresh: () => Promise<AuthState>;\n};\n\nasync function loadAuth(): Promise<AuthState | null> {\n  const sessionManager = new SessionManager();\n  const session = await sessionManager.load();\n  if (session) {\n    const current = sessionManager.isExpired(session) ? await sessionManager.refresh(session) : session;\n    return authState(current, () => sessionManager.refresh(current));\n  }\n\n  const credentialsManager = new CredentialsManager();\n  const credentials = await credentialsManager.load();\n  if (!credentials) {\n    return null;\n  }\n  const current = credentialsManager.isExpired(credentials) ? await credentialsManager.refresh(credentials) : credentials;\n  return authState(current, () => credentialsManager.refresh(current));\n}\n\nfunction authState(credentials: GatewayCredentials | SessionCredentials, refresh: () => Promise<GatewayCredentials | SessionCredentials>): AuthState {\n  return {\n    gatewayUrl: credentials.gatewayUrl,\n    accessToken: credentials.accessToken,\n    refresh: async () => {\n      const updated = await refresh();\n      return authState(updated, refresh);\n    },\n  };\n}\n\nfunction getBaseUrl(gatewayUrl?: string): string {\n  const marketplaceUrl = useEnv('KB_MARKETPLACE_URL');\n  if (marketplaceUrl) {\n    return `${marketplaceUrl}${MARKETPLACE_PREFIX}`;\n  }\n  const gateway = gatewayUrl ?? useEnv('KB_GATEWAY_URL') ?? DEFAULT_GATEWAY_URL;\n  return `${gateway}${MARKETPLACE_PREFIX}`;\n}\n\nasync function request<T>(method: string, path: string, body?: Record<string, unknown>, params?: Record<string, string>): Promise<T> {\n  let auth = await loadAuth();\n  const url = new URL(`${getBaseUrl(auth?.gatewayUrl)}${path}`);\n  if (params) {\n    for (const [key, value] of Object.entries(params)) { url.searchParams.set(key, value); }\n  }\n\n  for (let attempt = 0; attempt < 2; attempt += 1) {\n    const controller = new AbortController();\n    const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n    try {\n      const headers: Record<string, string> = {};\n      if (body) { headers['Content-Type'] = 'application/json'; }\n      if (auth) { headers.Authorization = `Bearer ${auth.accessToken}`; }\n      const response = await fetch(url.toString(), {\n        method,\n        headers,\n        body: body ? JSON.stringify(body) : undefined,\n        signal: controller.signal,\n      });\n      if (response.status === 401 && auth && attempt === 0) {\n        auth = await auth.refresh();\n        continue;\n      }\n      if (!response.ok) {\n        const text = await response.text();\n        throw new Error(`Marketplace ${path} failed (${response.status}): ${text}`);\n      }\n      if (response.status === 204) { return undefined as T; }\n      return await response.json() as T;\n    } catch (err) {\n      if ((err as Error).name === 'AbortError') {\n        throw new Error(`Marketplace ${path} timed out — is the marketplace service running? (kb-dev start marketplace)`);\n      }\n      throw err;\n    } finally {\n      clearTimeout(timer);\n    }\n  }\n  throw new Error(`Marketplace ${path} failed after refreshing authentication`);\n}\n\nexport async function post<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('POST', path, body);\n}\n\nexport async function patch<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('PATCH', path, body);\n}\n\nexport async function del<T = unknown>(path: string, body?: Record<string, unknown>): Promise<T> {\n  return request<T>('DELETE', path, body);\n}\n\nexport async function get<T = unknown>(path: string, params?: Record<string, string>): Promise<T> {\n  return request<T>('GET', path, undefined, params);\n}\n","/**\n * @module @kb-labs/marketplace-entry/scope\n *\n * Client-side scope resolution for marketplace CLI commands. Uses the\n * canonical `findProjectConfigRoot` helper from `@kb-labs/core-workspace`\n * so the detection rules (which filenames count, how walk-up stops) match\n * what the config loader and the marketplace daemon enforce.\n *\n * Rules:\n *  - `project` is the default if cwd (or any ancestor up to the filesystem\n *    root) contains `.kb/kb.config.{json,jsonc}`.\n *  - Otherwise the default is `platform`.\n *  - `--scope` always overrides detection.\n *  - For scope=\"project\" we return the absolute projectRoot so the daemon\n *    doesn't need to re-discover it.\n */\n\nimport { findProjectConfigRoot } from '@kb-labs/core-workspace';\nimport type { MarketplaceScope, MarketplaceQueryScope } from '@kb-labs/marketplace-contracts';\n\nexport const SCOPE_FLAG_CHOICES: readonly MarketplaceScope[] = ['platform', 'project'];\nexport const QUERY_SCOPE_FLAG_CHOICES: readonly MarketplaceQueryScope[] = ['platform', 'project', 'all'];\n\nexport interface ResolvedCliScope {\n  scope: MarketplaceScope;\n  projectRoot?: string;\n  /** How the scope was determined — surfaces in --verbose logs. */\n  reason: 'flag' | 'auto-detect' | 'fallback';\n}\n\nexport interface ResolvedCliQueryScope extends Omit<ResolvedCliScope, 'scope'> {\n  scope: MarketplaceQueryScope;\n}\n\n/**\n * Resolve the effective scope for a mutating command (`link`, `unlink`,\n * `install`, ...). `flag` is the value of `--scope` (if supplied). The\n * helper never returns `'all'` for mutating commands — callers restrict\n * choices via `SCOPE_FLAG_CHOICES`.\n */\nexport async function resolveCliScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliScope> {\n  if (flag) {\n    assertMutatingScope(flag);\n    if (flag === 'project') {\n      const projectRoot = await findProjectConfigRoot(cwd);\n      if (!projectRoot) {\n        throw new CliScopeError(\n          'SCOPE_PROJECT_ROOT_NOT_FOUND',\n          `--scope=project requires a .kb/kb.config.{json,jsonc} ancestor of ${cwd} — none found.`,\n        );\n      }\n      return { scope: 'project', projectRoot, reason: 'flag' };\n    }\n    return { scope: 'platform', reason: 'flag' };\n  }\n\n  const projectRoot = await findProjectConfigRoot(cwd);\n  if (projectRoot) {\n    return { scope: 'project', projectRoot, reason: 'auto-detect' };\n  }\n  return { scope: 'platform', reason: 'fallback' };\n}\n\n/**\n * Resolve the effective scope for a read-only command (`list`). Accepts\n * `'all'` as an explicit flag value.\n */\nexport async function resolveCliQueryScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliQueryScope> {\n  if (flag === 'all') {\n    const projectRoot = await findProjectConfigRoot(cwd);\n    return { scope: 'all', projectRoot, reason: 'flag' };\n  }\n  const base = await resolveCliScope(cwd, flag);\n  return { scope: base.scope, projectRoot: base.projectRoot, reason: base.reason };\n}\n\nfunction assertMutatingScope(value: string): asserts value is MarketplaceScope {\n  if (!SCOPE_FLAG_CHOICES.includes(value as MarketplaceScope)) {\n    throw new CliScopeError(\n      'SCOPE_INVALID',\n      `--scope must be one of: ${SCOPE_FLAG_CHOICES.join(', ')} (got ${JSON.stringify(value)})`,\n    );\n  }\n}\n\nexport class CliScopeError extends Error {\n  readonly code: string;\n  constructor(code: string, message: string) {\n    super(message);\n    this.code = code;\n    this.name = 'CliScopeError';\n  }\n}\n\n/**\n * Build the body-payload fragment expected by `parseMutatingScope` on the\n * API side: `{ scope, projectRoot? }`. Kept as a helper so every command\n * sends the same shape and nothing drifts out-of-sync with the server.\n */\nexport function scopeBody(ctx: ResolvedCliScope | ResolvedCliQueryScope): {\n  scope: MarketplaceScope | MarketplaceQueryScope;\n  projectRoot?: string;\n} {\n  return {\n    scope: ctx.scope,\n    ...(ctx.projectRoot ? { projectRoot: ctx.projectRoot } : {}),\n  };\n}\n","import { defineCommand, validationError, handleError, type PluginContextV3, type CommandResult } from '@kb-labs/sdk';\nimport { post } from '../../http.js';\nimport { resolveCliScope, scopeBody, CliScopeError } from '../../scope.js';\n\ninterface UnlinkFlags {\n  json?: boolean;\n  scope?: string;\n  'dry-run'?: boolean;\n}\n\ninterface UnlinkInput {\n  argv?: string[];\n  flags?: UnlinkFlags;\n}\n\nexport default defineCommand<unknown, UnlinkInput, { packageId: string; scope: string }>({\n  id: 'marketplace:plugins:unlink',\n  description: 'Unlink a plugin',\n\n  handler: {\n    async intent(_ctx: PluginContextV3, input: UnlinkInput) {\n      const packageId = input.argv?.[0] ?? '(unknown)';\n      return {\n        summary: `Unlink plugin \"${packageId}\"`,\n        operations: [{ type: 'delete' as const, resource: 'plugin-link', details: { packageId } }],\n      };\n    },\n\n    async execute(ctx: PluginContextV3, input: UnlinkInput): Promise<CommandResult<{ packageId: string; scope: string }>> {\n      const packageId = input.argv?.[0];\n      const flags = (input.flags ?? input) as UnlinkFlags;\n\n      if (!packageId) {\n        validationError(ctx, 'Specify a package ID to unlink', 'Usage: kb marketplace plugins unlink <plugin-id>', flags.json);\n        return { ok: false, error: 'A package id is required', result: { packageId: '', scope: '' } };\n      }\n\n      let scopeCtx;\n      try {\n        scopeCtx = await resolveCliScope(ctx.cwd, flags.scope);\n      } catch (err) {\n        if (err instanceof CliScopeError) {\n          validationError(ctx, err.message, undefined, flags.json);\n        } else {\n          handleError(ctx, err, flags.json);\n        }\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { packageId: '', scope: '' } };\n      }\n\n      try {\n        await post(`/packages/unlink`, { packageId, ...scopeBody(scopeCtx) });\n        if (flags.json) {\n          ctx.ui?.json?.({ ok: true, packageId, scope: scopeCtx.scope });\n        } else {\n          ctx.ui?.success?.(`Unlinked ${packageId} (${scopeCtx.scope})`);\n        }\n        return { ok: true, result: { packageId, scope: scopeCtx.scope } };\n      } catch (err) {\n        handleError(ctx, err, flags.json);\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { packageId: '', scope: '' } };\n      }\n    },\n  },\n});\n"]}
+{"version":3,"sources":["../../../src/http.ts","../../../src/scope.ts","../../../src/commands/plugins/unlink.ts"],"names":["current","projectRoot"],"mappings":";;;;;AAQA,IAAM,mBAAA,GAAsB,uBAAA;AAC5B,IAAM,kBAAA,GAAqB,qBAAA;AAC3B,IAAM,gBAAA,GAAmB,GAAA;AAQzB,eAAe,QAAA,GAAsC;AACnD,EAAA,MAAM,cAAA,GAAiB,IAAI,cAAA,EAAe;AAC1C,EAAA,MAAM,OAAA,GAAU,MAAM,cAAA,CAAe,IAAA,EAAK;AAC1C,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,MAAMA,QAAAA,GAAU,eAAe,SAAA,CAAU,OAAO,IAAI,MAAM,cAAA,CAAe,OAAA,CAAQ,OAAO,CAAA,GAAI,OAAA;AAC5F,IAAA,OAAO,UAAUA,QAAAA,EAAS,MAAM,cAAA,CAAe,OAAA,CAAQA,QAAO,CAAC,CAAA;AAAA,EACjE;AAEA,EAAA,MAAM,kBAAA,GAAqB,IAAI,kBAAA,EAAmB;AAClD,EAAA,MAAM,WAAA,GAAc,MAAM,kBAAA,CAAmB,IAAA,EAAK;AAClD,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,OAAA,GAAU,mBAAmB,SAAA,CAAU,WAAW,IAAI,MAAM,kBAAA,CAAmB,OAAA,CAAQ,WAAW,CAAA,GAAI,WAAA;AAC5G,EAAA,OAAO,UAAU,OAAA,EAAS,MAAM,kBAAA,CAAmB,OAAA,CAAQ,OAAO,CAAC,CAAA;AACrE;AAEA,SAAS,SAAA,CAAU,aAAsD,OAAA,EAA4E;AACnJ,EAAA,OAAO;AAAA,IACL,YAAY,WAAA,CAAY,UAAA;AAAA,IACxB,aAAa,WAAA,CAAY,WAAA;AAAA,IACzB,SAAS,YAAY;AACnB,MAAA,MAAM,OAAA,GAAU,MAAM,OAAA,EAAQ;AAC9B,MAAA,OAAO,SAAA,CAAU,SAAS,OAAO,CAAA;AAAA,IACnC;AAAA,GACF;AACF;AAEA,SAAS,WAAW,UAAA,EAA6B;AAC/C,EAAA,MAAM,cAAA,GAAiB,OAAO,oBAAoB,CAAA;AAClD,EAAA,IAAI,cAAA,EAAgB;AAClB,IAAA,OAAO,CAAA,EAAG,cAAc,CAAA,EAAG,kBAAkB,CAAA,CAAA;AAAA,EAC/C;AACA,EAAA,MAAM,OAAA,GAAU,UAAA,IAAc,MAAA,CAAO,gBAAgB,CAAA,IAAK,mBAAA;AAC1D,EAAA,OAAO,CAAA,EAAG,OAAO,CAAA,EAAG,kBAAkB,CAAA,CAAA;AACxC;AAEA,eAAe,OAAA,CAAW,MAAA,EAAgB,IAAA,EAAc,IAAA,EAAgC,MAAA,EAA6C;AACnI,EAAA,IAAI,IAAA,GAAO,MAAM,QAAA,EAAS;AAC1B,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,CAAA,EAAG,UAAA,CAAW,MAAM,UAAU,CAAC,CAAA,EAAG,IAAI,CAAA,CAAE,CAAA;AAK5D,EAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,GAAU,CAAA,EAAG,WAAW,CAAA,EAAG;AAC/C,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,gBAAgB,CAAA;AACnE,IAAA,IAAI;AACF,MAAA,MAAM,UAAkC,EAAC;AACzC,MAAA,IAAI,IAAA,EAAM;AAAE,QAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAAA,MAAoB;AAC1D,MAAA,IAAI,IAAA,EAAM;AAAE,QAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,IAAA,CAAK,WAAW,CAAA,CAAA;AAAA,MAAI;AAClE,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,CAAI,UAAS,EAAG;AAAA,QAC3C,MAAA;AAAA,QACA,OAAA;AAAA,QACA,IAAA,EAAM,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,GAAI,KAAA,CAAA;AAAA,QACpC,QAAQ,UAAA,CAAW;AAAA,OACpB,CAAA;AACD,MAAA,IAAI,QAAA,CAAS,MAAA,KAAW,GAAA,IAAO,IAAA,IAAQ,YAAY,CAAA,EAAG;AACpD,QAAA,IAAA,GAAO,MAAM,KAAK,OAAA,EAAQ;AAC1B,QAAA;AAAA,MACF;AACA,MAAA,IAAI,QAAA,CAAS,MAAA,KAAW,GAAA,IAAO,CAAC,IAAA,EAAM;AACpC,QAAA,MAAM,IAAI,MAAM,+GAA+G,CAAA;AAAA,MACjI;AACA,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,QAAA,MAAM,IAAI,MAAM,CAAA,YAAA,EAAe,IAAI,YAAY,QAAA,CAAS,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,CAAE,CAAA;AAAA,MAC5E;AACA,MAAA,IAAI,QAAA,CAAS,WAAW,GAAA,EAAK;AAAE,QAAA,OAAO,KAAA,CAAA;AAAA,MAAgB;AACtD,MAAA,OAAO,MAAM,SAAS,IAAA,EAAK;AAAA,IAC7B,SAAS,GAAA,EAAK;AACZ,MAAA,IAAK,GAAA,CAAc,SAAS,YAAA,EAAc;AACxC,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,gFAAA,CAA6E,CAAA;AAAA,MAClH;AACA,MAAA,MAAM,GAAA;AAAA,IACR,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAAA,IACpB;AAAA,EACF;AACA,EAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,uCAAA,CAAyC,CAAA;AAC9E;AAEA,eAAsB,IAAA,CAAkB,MAAc,IAAA,EAA2C;AAC/F,EAAA,OAAO,OAAA,CAAW,MAAA,EAAQ,IAAA,EAAM,IAAI,CAAA;AACtC;AClFO,IAAM,kBAAA,GAAkD,CAAC,UAAA,EAAY,SAAS,CAAA;AAoBrF,eAAsB,eAAA,CACpB,KACA,IAAA,EAC2B;AAC3B,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,mBAAA,CAAoB,IAAI,CAAA;AACxB,IAAA,IAAI,SAAS,SAAA,EAAW;AACtB,MAAA,MAAMC,YAAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,MAAA,IAAI,CAACA,YAAAA,EAAa;AAChB,QAAA,MAAM,IAAI,aAAA;AAAA,UACR,8BAAA;AAAA,UACA,qEAAqE,GAAG,CAAA,mBAAA;AAAA,SAC1E;AAAA,MACF;AACA,MAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAAA,YAAAA,EAAa,QAAQ,MAAA,EAAO;AAAA,IACzD;AACA,IAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,MAAA,EAAO;AAAA,EAC7C;AAEA,EAAA,MAAM,WAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAa,QAAQ,aAAA,EAAc;AAAA,EAChE;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,UAAA,EAAW;AACjD;AAkBA,SAAS,oBAAoB,KAAA,EAAkD;AAC7E,EAAA,IAAI,CAAC,kBAAA,CAAmB,QAAA,CAAS,KAAyB,CAAA,EAAG;AAC3D,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,eAAA;AAAA,MACA,CAAA,wBAAA,EAA2B,mBAAmB,IAAA,CAAK,IAAI,CAAC,CAAA,MAAA,EAAS,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC,CAAA,CAAA;AAAA,KACxF;AAAA,EACF;AACF;AAEO,IAAM,aAAA,GAAN,cAA4B,KAAA,CAAM;AAAA,EAC9B,IAAA;AAAA,EACT,WAAA,CAAY,MAAc,OAAA,EAAiB;AACzC,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AAAA,EACd;AACF,CAAA;AAOO,SAAS,UAAU,GAAA,EAGxB;AACA,EAAA,OAAO;AAAA,IACL,OAAO,GAAA,CAAI,KAAA;AAAA,IACX,GAAI,IAAI,WAAA,GAAc,EAAE,aAAa,GAAA,CAAI,WAAA,KAAgB;AAAC,GAC5D;AACF;;;AClGA,IAAO,iBAAQ,aAAA,CAA0E;AAAA,EACvF,EAAA,EAAI,4BAAA;AAAA,EACJ,WAAA,EAAa,iBAAA;AAAA,EAEb,OAAA,EAAS;AAAA,IACP,MAAM,MAAA,CAAO,IAAA,EAAuB,KAAA,EAAoB;AACtD,MAAA,MAAM,SAAA,GAAY,KAAA,CAAM,IAAA,GAAO,CAAC,CAAA,IAAK,WAAA;AACrC,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,kBAAkB,SAAS,CAAA,CAAA,CAAA;AAAA,QACpC,UAAA,EAAY,CAAC,EAAE,IAAA,EAAM,QAAA,EAAmB,QAAA,EAAU,aAAA,EAAe,OAAA,EAAS,EAAE,SAAA,EAAU,EAAG;AAAA,OAC3F;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,OAAA,CAAQ,GAAA,EAAsB,KAAA,EAAkF;AACpH,MAAA,MAAM,SAAA,GAAY,KAAA,CAAM,IAAA,GAAO,CAAC,CAAA;AAChC,MAAA,MAAM,KAAA,GAAS,MAAM,KAAA,IAAS,KAAA;AAE9B,MAAA,IAAI,CAAC,SAAA,EAAW;AACd,QAAA,eAAA,CAAgB,GAAA,EAAK,gCAAA,EAAkC,kDAAA,EAAoD,KAAA,CAAM,IAAI,CAAA;AACrH,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,0BAAA,EAA4B,MAAA,EAAQ,EAAE,SAAA,EAAW,EAAA,EAAI,KAAA,EAAO,EAAA,EAAG,EAAE;AAAA,MAC9F;AAEA,MAAA,IAAI,QAAA;AACJ,MAAA,IAAI;AACF,QAAA,QAAA,GAAW,MAAM,eAAA,CAAgB,GAAA,CAAI,GAAA,EAAK,MAAM,KAAK,CAAA;AAAA,MACvD,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,eAAe,aAAA,EAAe;AAChC,UAAA,eAAA,CAAgB,GAAA,EAAK,GAAA,CAAI,OAAA,EAAS,MAAA,EAAW,MAAM,IAAI,CAAA;AAAA,QACzD,CAAA,MAAO;AACL,UAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAAA,QAClC;AACA,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,GAAA,YAAe,QAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,GAAG,MAAA,EAAQ,EAAE,WAAW,EAAA,EAAI,KAAA,EAAO,IAAG,EAAE;AAAA,MACpH;AAEA,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,CAAK,oBAAoB,EAAE,SAAA,EAAW,GAAG,SAAA,CAAU,QAAQ,GAAG,CAAA;AACpE,QAAA,IAAI,MAAM,IAAA,EAAM;AACd,UAAA,GAAA,CAAI,EAAA,EAAI,OAAO,EAAE,EAAA,EAAI,MAAM,SAAA,EAAW,KAAA,EAAO,QAAA,CAAS,KAAA,EAAO,CAAA;AAAA,QAC/D,CAAA,MAAO;AACL,UAAA,GAAA,CAAI,IAAI,OAAA,GAAU,CAAA,SAAA,EAAY,SAAS,CAAA,EAAA,EAAK,QAAA,CAAS,KAAK,CAAA,CAAA,CAAG,CAAA;AAAA,QAC/D;AACA,QAAA,OAAO,EAAE,IAAI,IAAA,EAAM,MAAA,EAAQ,EAAE,SAAA,EAAW,KAAA,EAAO,QAAA,CAAS,KAAA,EAAM,EAAE;AAAA,MAClE,SAAS,GAAA,EAAK;AACZ,QAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAChC,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,GAAA,YAAe,QAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,GAAG,MAAA,EAAQ,EAAE,WAAW,EAAA,EAAI,KAAA,EAAO,IAAG,EAAE;AAAA,MACpH;AAAA,IACF;AAAA;AAEJ,CAAC","file":"unlink.js","sourcesContent":["/**\n * HTTP client for marketplace service via Gateway.\n */\n\nimport { useEnv } from '@kb-labs/sdk';\nimport { CredentialsManager, SessionManager } from '@kb-labs/cli-runtime/gateway';\nimport type { GatewayCredentials, SessionCredentials } from '@kb-labs/cli-runtime/gateway';\n\nconst DEFAULT_GATEWAY_URL = 'http://127.0.0.1:4000';\nconst MARKETPLACE_PREFIX = '/api/v1/marketplace';\nconst FETCH_TIMEOUT_MS = 30_000;\n\ntype AuthState = {\n  gatewayUrl: string;\n  accessToken: string;\n  refresh: () => Promise<AuthState>;\n};\n\nasync function loadAuth(): Promise<AuthState | null> {\n  const sessionManager = new SessionManager();\n  const session = await sessionManager.load();\n  if (session) {\n    const current = sessionManager.isExpired(session) ? await sessionManager.refresh(session) : session;\n    return authState(current, () => sessionManager.refresh(current));\n  }\n\n  const credentialsManager = new CredentialsManager();\n  const credentials = await credentialsManager.load();\n  if (!credentials) {\n    return null;\n  }\n  const current = credentialsManager.isExpired(credentials) ? await credentialsManager.refresh(credentials) : credentials;\n  return authState(current, () => credentialsManager.refresh(current));\n}\n\nfunction authState(credentials: GatewayCredentials | SessionCredentials, refresh: () => Promise<GatewayCredentials | SessionCredentials>): AuthState {\n  return {\n    gatewayUrl: credentials.gatewayUrl,\n    accessToken: credentials.accessToken,\n    refresh: async () => {\n      const updated = await refresh();\n      return authState(updated, refresh);\n    },\n  };\n}\n\nfunction getBaseUrl(gatewayUrl?: string): string {\n  const marketplaceUrl = useEnv('KB_MARKETPLACE_URL');\n  if (marketplaceUrl) {\n    return `${marketplaceUrl}${MARKETPLACE_PREFIX}`;\n  }\n  const gateway = gatewayUrl ?? useEnv('KB_GATEWAY_URL') ?? DEFAULT_GATEWAY_URL;\n  return `${gateway}${MARKETPLACE_PREFIX}`;\n}\n\nasync function request<T>(method: string, path: string, body?: Record<string, unknown>, params?: Record<string, string>): Promise<T> {\n  let auth = await loadAuth();\n  const url = new URL(`${getBaseUrl(auth?.gatewayUrl)}${path}`);\n  if (params) {\n    for (const [key, value] of Object.entries(params)) { url.searchParams.set(key, value); }\n  }\n\n  for (let attempt = 0; attempt < 2; attempt += 1) {\n    const controller = new AbortController();\n    const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n    try {\n      const headers: Record<string, string> = {};\n      if (body) { headers['Content-Type'] = 'application/json'; }\n      if (auth) { headers.Authorization = `Bearer ${auth.accessToken}`; }\n      const response = await fetch(url.toString(), {\n        method,\n        headers,\n        body: body ? JSON.stringify(body) : undefined,\n        signal: controller.signal,\n      });\n      if (response.status === 401 && auth && attempt === 0) {\n        auth = await auth.refresh();\n        continue;\n      }\n      if (response.status === 401 && !auth) {\n        throw new Error('Marketplace authentication is required. Run `kb auth login` or choose local no-auth mode during installation.');\n      }\n      if (!response.ok) {\n        const text = await response.text();\n        throw new Error(`Marketplace ${path} failed (${response.status}): ${text}`);\n      }\n      if (response.status === 204) { return undefined as T; }\n      return await response.json() as T;\n    } catch (err) {\n      if ((err as Error).name === 'AbortError') {\n        throw new Error(`Marketplace ${path} timed out — is the marketplace service running? (kb-dev start marketplace)`);\n      }\n      throw err;\n    } finally {\n      clearTimeout(timer);\n    }\n  }\n  throw new Error(`Marketplace ${path} failed after refreshing authentication`);\n}\n\nexport async function post<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('POST', path, body);\n}\n\nexport async function patch<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('PATCH', path, body);\n}\n\nexport async function del<T = unknown>(path: string, body?: Record<string, unknown>): Promise<T> {\n  return request<T>('DELETE', path, body);\n}\n\nexport async function get<T = unknown>(path: string, params?: Record<string, string>): Promise<T> {\n  return request<T>('GET', path, undefined, params);\n}\n","/**\n * @module @kb-labs/marketplace-entry/scope\n *\n * Client-side scope resolution for marketplace CLI commands. Uses the\n * canonical `findProjectConfigRoot` helper from `@kb-labs/core-workspace`\n * so the detection rules (which filenames count, how walk-up stops) match\n * what the config loader and the marketplace daemon enforce.\n *\n * Rules:\n *  - `project` is the default if cwd (or any ancestor up to the filesystem\n *    root) contains `.kb/kb.config.{json,jsonc}`.\n *  - Otherwise the default is `platform`.\n *  - `--scope` always overrides detection.\n *  - For scope=\"project\" we return the absolute projectRoot so the daemon\n *    doesn't need to re-discover it.\n */\n\nimport { findProjectConfigRoot } from '@kb-labs/core-workspace';\nimport type { MarketplaceScope, MarketplaceQueryScope } from '@kb-labs/marketplace-contracts';\n\nexport const SCOPE_FLAG_CHOICES: readonly MarketplaceScope[] = ['platform', 'project'];\nexport const QUERY_SCOPE_FLAG_CHOICES: readonly MarketplaceQueryScope[] = ['platform', 'project', 'all'];\n\nexport interface ResolvedCliScope {\n  scope: MarketplaceScope;\n  projectRoot?: string;\n  /** How the scope was determined — surfaces in --verbose logs. */\n  reason: 'flag' | 'auto-detect' | 'fallback';\n}\n\nexport interface ResolvedCliQueryScope extends Omit<ResolvedCliScope, 'scope'> {\n  scope: MarketplaceQueryScope;\n}\n\n/**\n * Resolve the effective scope for a mutating command (`link`, `unlink`,\n * `install`, ...). `flag` is the value of `--scope` (if supplied). The\n * helper never returns `'all'` for mutating commands — callers restrict\n * choices via `SCOPE_FLAG_CHOICES`.\n */\nexport async function resolveCliScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliScope> {\n  if (flag) {\n    assertMutatingScope(flag);\n    if (flag === 'project') {\n      const projectRoot = await findProjectConfigRoot(cwd);\n      if (!projectRoot) {\n        throw new CliScopeError(\n          'SCOPE_PROJECT_ROOT_NOT_FOUND',\n          `--scope=project requires a .kb/kb.config.{json,jsonc} ancestor of ${cwd} — none found.`,\n        );\n      }\n      return { scope: 'project', projectRoot, reason: 'flag' };\n    }\n    return { scope: 'platform', reason: 'flag' };\n  }\n\n  const projectRoot = await findProjectConfigRoot(cwd);\n  if (projectRoot) {\n    return { scope: 'project', projectRoot, reason: 'auto-detect' };\n  }\n  return { scope: 'platform', reason: 'fallback' };\n}\n\n/**\n * Resolve the effective scope for a read-only command (`list`). Accepts\n * `'all'` as an explicit flag value.\n */\nexport async function resolveCliQueryScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliQueryScope> {\n  if (flag === 'all') {\n    const projectRoot = await findProjectConfigRoot(cwd);\n    return { scope: 'all', projectRoot, reason: 'flag' };\n  }\n  const base = await resolveCliScope(cwd, flag);\n  return { scope: base.scope, projectRoot: base.projectRoot, reason: base.reason };\n}\n\nfunction assertMutatingScope(value: string): asserts value is MarketplaceScope {\n  if (!SCOPE_FLAG_CHOICES.includes(value as MarketplaceScope)) {\n    throw new CliScopeError(\n      'SCOPE_INVALID',\n      `--scope must be one of: ${SCOPE_FLAG_CHOICES.join(', ')} (got ${JSON.stringify(value)})`,\n    );\n  }\n}\n\nexport class CliScopeError extends Error {\n  readonly code: string;\n  constructor(code: string, message: string) {\n    super(message);\n    this.code = code;\n    this.name = 'CliScopeError';\n  }\n}\n\n/**\n * Build the body-payload fragment expected by `parseMutatingScope` on the\n * API side: `{ scope, projectRoot? }`. Kept as a helper so every command\n * sends the same shape and nothing drifts out-of-sync with the server.\n */\nexport function scopeBody(ctx: ResolvedCliScope | ResolvedCliQueryScope): {\n  scope: MarketplaceScope | MarketplaceQueryScope;\n  projectRoot?: string;\n} {\n  return {\n    scope: ctx.scope,\n    ...(ctx.projectRoot ? { projectRoot: ctx.projectRoot } : {}),\n  };\n}\n","import { defineCommand, validationError, handleError, type PluginContextV3, type CommandResult } from '@kb-labs/sdk';\nimport { post } from '../../http.js';\nimport { resolveCliScope, scopeBody, CliScopeError } from '../../scope.js';\n\ninterface UnlinkFlags {\n  json?: boolean;\n  scope?: string;\n  'dry-run'?: boolean;\n}\n\ninterface UnlinkInput {\n  argv?: string[];\n  flags?: UnlinkFlags;\n}\n\nexport default defineCommand<unknown, UnlinkInput, { packageId: string; scope: string }>({\n  id: 'marketplace:plugins:unlink',\n  description: 'Unlink a plugin',\n\n  handler: {\n    async intent(_ctx: PluginContextV3, input: UnlinkInput) {\n      const packageId = input.argv?.[0] ?? '(unknown)';\n      return {\n        summary: `Unlink plugin \"${packageId}\"`,\n        operations: [{ type: 'delete' as const, resource: 'plugin-link', details: { packageId } }],\n      };\n    },\n\n    async execute(ctx: PluginContextV3, input: UnlinkInput): Promise<CommandResult<{ packageId: string; scope: string }>> {\n      const packageId = input.argv?.[0];\n      const flags = (input.flags ?? input) as UnlinkFlags;\n\n      if (!packageId) {\n        validationError(ctx, 'Specify a package ID to unlink', 'Usage: kb marketplace plugins unlink <plugin-id>', flags.json);\n        return { ok: false, error: 'A package id is required', result: { packageId: '', scope: '' } };\n      }\n\n      let scopeCtx;\n      try {\n        scopeCtx = await resolveCliScope(ctx.cwd, flags.scope);\n      } catch (err) {\n        if (err instanceof CliScopeError) {\n          validationError(ctx, err.message, undefined, flags.json);\n        } else {\n          handleError(ctx, err, flags.json);\n        }\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { packageId: '', scope: '' } };\n      }\n\n      try {\n        await post(`/packages/unlink`, { packageId, ...scopeBody(scopeCtx) });\n        if (flags.json) {\n          ctx.ui?.json?.({ ok: true, packageId, scope: scopeCtx.scope });\n        } else {\n          ctx.ui?.success?.(`Unlinked ${packageId} (${scopeCtx.scope})`);\n        }\n        return { ok: true, result: { packageId, scope: scopeCtx.scope } };\n      } catch (err) {\n        handleError(ctx, err, flags.json);\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { packageId: '', scope: '' } };\n      }\n    },\n  },\n});\n"]}

package/dist/commands/rehash.d.ts

@@ -0,0 +1,12 @@
+import * as _kb_labs_shared_command_kit from '@kb-labs/shared-command-kit';
+import { CLIInput } from '@kb-labs/sdk';
+
+interface RehashFlags {
+    json?: boolean;
+}
+/** Backwards-compatible maintenance command documented by older platform releases. */
+declare const _default: _kb_labs_shared_command_kit.CommandHandlerV3<unknown, CLIInput<RehashFlags>, {
+    cleared: boolean;
+}>;
+
+export { _default as default };

package/dist/commands/rehash.js

@@ -0,0 +1,78 @@
+import { defineCommand, handleError } from '@kb-labs/sdk';
+import * as path from 'path';
+import * as fs from 'fs/promises';
+
+// src/commands/rehash.ts
+defineCommand({
+  id: "marketplace:plugins:refresh",
+  description: "Clear CLI discovery cache",
+  handler: {
+    async intent(_ctx, _input) {
+      return {
+        summary: "Clear CLI discovery cache",
+        operations: [
+          { type: "delete", resource: "file", details: { path: ".kb/cache/cli-manifests.json" } }
+        ]
+      };
+    },
+    async execute(ctx, input) {
+      const { flags = {} } = input;
+      try {
+        const cleared = await clearDiscoveryCache(ctx.cwd);
+        if (flags.json) {
+          ctx.ui?.json?.({ cleared });
+        } else {
+          ctx.ui?.success?.(
+            cleared ? "CLI discovery cache cleared. Run any kb command to rebuild." : "CLI discovery cache was already empty."
+          );
+        }
+        return { ok: true };
+      } catch (err) {
+        handleError(ctx, err, flags.json);
+        return { ok: false, error: err instanceof Error ? err.message : String(err) };
+      }
+    }
+  }
+});
+async function clearDiscoveryCache(cwd) {
+  const cacheFile = path.join(cwd, ".kb", "cache", "cli-manifests.json");
+  try {
+    await fs.unlink(cacheFile);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+// src/commands/rehash.ts
+var rehash_default = defineCommand({
+  id: "marketplace:rehash",
+  description: "Rebuild CLI and marketplace discovery hashes",
+  handler: {
+    async intent(_ctx) {
+      return {
+        summary: "Rebuild CLI and marketplace discovery hashes",
+        operations: [{ type: "update", resource: "discovery-cache", details: { action: "rehash" } }]
+      };
+    },
+    async execute(ctx, input) {
+      try {
+        const cleared = await clearDiscoveryCache(ctx.cwd);
+        const result = { cleared };
+        if (input.flags?.json) {
+          ctx.ui?.json?.(result);
+        } else {
+          ctx.ui?.success?.("Discovery hashes rebuilt. Run any kb command to repopulate the cache.");
+        }
+        return { ok: true, result };
+      } catch (err) {
+        handleError(ctx, err, input.flags?.json);
+        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { cleared: false } };
+      }
+    }
+  }
+});
+
+export { rehash_default as default };
+//# sourceMappingURL=rehash.js.map
+//# sourceMappingURL=rehash.js.map

package/dist/commands/rehash.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/commands/plugins/refresh.ts","../../src/commands/rehash.ts"],"names":["defineCommand","handleError"],"mappings":";;;;;AASe,aAAA,CAAwD;AAAA,EACrE,EAAA,EAAI,6BAAA;AAAA,EACJ,WAAA,EAAa,2BAAA;AAAA,EAEb,OAAA,EAAS;AAAA,IACP,MAAM,MAAA,CAAO,IAAA,EAAuB,MAAA,EAAgC;AAClE,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,2BAAA;AAAA,QACT,UAAA,EAAY;AAAA,UACV,EAAE,MAAM,QAAA,EAAmB,QAAA,EAAU,QAAQ,OAAA,EAAS,EAAE,IAAA,EAAM,8BAAA,EAA+B;AAAE;AACjG,OACF;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,OAAA,CAAQ,GAAA,EAAsB,KAAA,EAAuD;AACzF,MAAA,MAAM,EAAE,KAAA,GAAQ,EAAC,EAAE,GAAI,KAAA;AAEvB,MAAA,IAAI;AACF,QAAA,MAAM,OAAA,GAAU,MAAM,mBAAA,CAAoB,GAAA,CAAI,GAAG,CAAA;AAEjD,QAAA,IAAI,MAAM,IAAA,EAAM;AACd,UAAA,GAAA,CAAI,EAAA,EAAI,IAAA,GAAO,EAAE,OAAA,EAAS,CAAA;AAAA,QAC5B,CAAA,MAAO;AACL,UAAA,GAAA,CAAI,EAAA,EAAI,OAAA;AAAA,YACN,UACI,6DAAA,GACA;AAAA,WACN;AAAA,QACF;AACA,QAAA,OAAO,EAAE,IAAI,IAAA,EAAK;AAAA,MACpB,SAAS,GAAA,EAAK;AACZ,QAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAChC,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,GAAA,YAAe,QAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAA,EAAE;AAAA,MAC9E;AAAA,IACF;AAAA;AAEJ,CAAC;AAED,eAAsB,oBAAoB,GAAA,EAA+B;AACvE,EAAA,MAAM,SAAA,GAAiB,IAAA,CAAA,IAAA,CAAK,GAAA,EAAK,KAAA,EAAO,SAAS,oBAAoB,CAAA;AACrE,EAAA,IAAI;AACF,IAAA,MAAS,UAAO,SAAS,CAAA;AACzB,IAAA,OAAO,IAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;;;ACjDA,IAAO,iBAAQA,aAAAA,CAAoE;AAAA,EACjF,EAAA,EAAI,oBAAA;AAAA,EACJ,WAAA,EAAa,8CAAA;AAAA,EACb,OAAA,EAAS;AAAA,IACP,MAAM,OAAO,IAAA,EAAuB;AAClC,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,8CAAA;AAAA,QACT,UAAA,EAAY,CAAC,EAAE,IAAA,EAAM,QAAA,EAAmB,QAAA,EAAU,iBAAA,EAAmB,OAAA,EAAS,EAAE,MAAA,EAAQ,QAAA,EAAS,EAAG;AAAA,OACtG;AAAA,IACF,CAAA;AAAA,IACA,MAAM,OAAA,CAAQ,GAAA,EAAsB,KAAA,EAA4E;AAC9G,MAAA,IAAI;AACF,QAAA,MAAM,OAAA,GAAU,MAAM,mBAAA,CAAoB,GAAA,CAAI,GAAG,CAAA;AACjD,QAAA,MAAM,MAAA,GAAS,EAAE,OAAA,EAAQ;AACzB,QAAA,IAAI,KAAA,CAAM,OAAO,IAAA,EAAM;AAAE,UAAA,GAAA,CAAI,EAAA,EAAI,OAAO,MAAM,CAAA;AAAA,QAAG,CAAA,MAC5C;AAAE,UAAA,GAAA,CAAI,EAAA,EAAI,UAAU,uEAAuE,CAAA;AAAA,QAAG;AACnG,QAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,MAAA,EAAO;AAAA,MAC5B,SAAS,GAAA,EAAK;AACZ,QAAAC,WAAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,OAAO,IAAI,CAAA;AACvC,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,eAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAA,EAAG,MAAA,EAAQ,EAAE,OAAA,EAAS,OAAM,EAAE;AAAA,MAC1G;AAAA,IACF;AAAA;AAEJ,CAAC","file":"rehash.js","sourcesContent":["import * as path from 'node:path';\nimport * as fs from 'node:fs/promises';\nimport { defineCommand, handleError, type CLIInput, type PluginContextV3, type CommandResult } from '@kb-labs/sdk';\n\ninterface RefreshFlags {\n  json?: boolean;\n  'dry-run'?: boolean;\n}\n\nexport default defineCommand<unknown, CLIInput<RefreshFlags>, unknown>({\n  id: 'marketplace:plugins:refresh',\n  description: 'Clear CLI discovery cache',\n\n  handler: {\n    async intent(_ctx: PluginContextV3, _input: CLIInput<RefreshFlags>) {\n      return {\n        summary: 'Clear CLI discovery cache',\n        operations: [\n          { type: 'delete' as const, resource: 'file', details: { path: '.kb/cache/cli-manifests.json' } },\n        ],\n      };\n    },\n\n    async execute(ctx: PluginContextV3, input: CLIInput<RefreshFlags>): Promise<CommandResult> {\n      const { flags = {} } = input;\n\n      try {\n        const cleared = await clearDiscoveryCache(ctx.cwd);\n\n        if (flags.json) {\n          ctx.ui?.json?.({ cleared });\n        } else {\n          ctx.ui?.success?.(\n            cleared\n              ? 'CLI discovery cache cleared. Run any kb command to rebuild.'\n              : 'CLI discovery cache was already empty.',\n          );\n        }\n        return { ok: true };\n      } catch (err) {\n        handleError(ctx, err, flags.json);\n        return { ok: false, error: err instanceof Error ? err.message : String(err) };\n      }\n    },\n  },\n});\n\nexport async function clearDiscoveryCache(cwd: string): Promise<boolean> {\n  const cacheFile = path.join(cwd, '.kb', 'cache', 'cli-manifests.json');\n  try {\n    await fs.unlink(cacheFile);\n    return true;\n  } catch {\n    return false;\n  }\n}\n","import { defineCommand, handleError, type CLIInput, type PluginContextV3, type CommandResult } from '@kb-labs/sdk';\nimport { clearDiscoveryCache } from './plugins/refresh.js';\n\ninterface RehashFlags { json?: boolean }\n\n/** Backwards-compatible maintenance command documented by older platform releases. */\nexport default defineCommand<unknown, CLIInput<RehashFlags>, { cleared: boolean }>({\n  id: 'marketplace:rehash',\n  description: 'Rebuild CLI and marketplace discovery hashes',\n  handler: {\n    async intent(_ctx: PluginContextV3) {\n      return {\n        summary: 'Rebuild CLI and marketplace discovery hashes',\n        operations: [{ type: 'update' as const, resource: 'discovery-cache', details: { action: 'rehash' } }],\n      };\n    },\n    async execute(ctx: PluginContextV3, input: CLIInput<RehashFlags>): Promise<CommandResult<{ cleared: boolean }>> {\n      try {\n        const cleared = await clearDiscoveryCache(ctx.cwd);\n        const result = { cleared };\n        if (input.flags?.json) { ctx.ui?.json?.(result); }\n        else { ctx.ui?.success?.('Discovery hashes rebuilt. Run any kb command to repopulate the cache.'); }\n        return { ok: true, result };\n      } catch (err) {\n        handleError(ctx, err, input.flags?.json);\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { cleared: false } };\n      }\n    },\n  },\n});\n"]}

package/dist/commands/sync.js

@@ -65,6 +65,9 @@ async function request(method, path2, body, params) {
         auth = await auth.refresh();
         continue;
       }
+      if (response.status === 401 && !auth) {
+        throw new Error("Marketplace authentication is required. Run `kb auth login` or choose local no-auth mode during installation.");
+      }
       if (!response.ok) {
         const text = await response.text();
         throw new Error(`Marketplace ${path2} failed (${response.status}): ${text}`);

package/dist/commands/sync.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/http.ts","../../src/scope.ts","../../src/commands/sync.ts"],"names":["current","path","projectRoot","useEnv"],"mappings":";;;;;;;AAQA,IAAM,mBAAA,GAAsB,uBAAA;AAC5B,IAAM,kBAAA,GAAqB,qBAAA;AAC3B,IAAM,gBAAA,GAAmB,GAAA;AAQzB,eAAe,QAAA,GAAsC;AACnD,EAAA,MAAM,cAAA,GAAiB,IAAI,cAAA,EAAe;AAC1C,EAAA,MAAM,OAAA,GAAU,MAAM,cAAA,CAAe,IAAA,EAAK;AAC1C,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,MAAMA,QAAAA,GAAU,eAAe,SAAA,CAAU,OAAO,IAAI,MAAM,cAAA,CAAe,OAAA,CAAQ,OAAO,CAAA,GAAI,OAAA;AAC5F,IAAA,OAAO,UAAUA,QAAAA,EAAS,MAAM,cAAA,CAAe,OAAA,CAAQA,QAAO,CAAC,CAAA;AAAA,EACjE;AAEA,EAAA,MAAM,kBAAA,GAAqB,IAAI,kBAAA,EAAmB;AAClD,EAAA,MAAM,WAAA,GAAc,MAAM,kBAAA,CAAmB,IAAA,EAAK;AAClD,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,OAAA,GAAU,mBAAmB,SAAA,CAAU,WAAW,IAAI,MAAM,kBAAA,CAAmB,OAAA,CAAQ,WAAW,CAAA,GAAI,WAAA;AAC5G,EAAA,OAAO,UAAU,OAAA,EAAS,MAAM,kBAAA,CAAmB,OAAA,CAAQ,OAAO,CAAC,CAAA;AACrE;AAEA,SAAS,SAAA,CAAU,aAAsD,OAAA,EAA4E;AACnJ,EAAA,OAAO;AAAA,IACL,YAAY,WAAA,CAAY,UAAA;AAAA,IACxB,aAAa,WAAA,CAAY,WAAA;AAAA,IACzB,SAAS,YAAY;AACnB,MAAA,MAAM,OAAA,GAAU,MAAM,OAAA,EAAQ;AAC9B,MAAA,OAAO,SAAA,CAAU,SAAS,OAAO,CAAA;AAAA,IACnC;AAAA,GACF;AACF;AAEA,SAAS,WAAW,UAAA,EAA6B;AAC/C,EAAA,MAAM,cAAA,GAAiB,OAAO,oBAAoB,CAAA;AAClD,EAAA,IAAI,cAAA,EAAgB;AAClB,IAAA,OAAO,CAAA,EAAG,cAAc,CAAA,EAAG,kBAAkB,CAAA,CAAA;AAAA,EAC/C;AACA,EAAA,MAAM,OAAA,GAAU,UAAA,IAAc,MAAA,CAAO,gBAAgB,CAAA,IAAK,mBAAA;AAC1D,EAAA,OAAO,CAAA,EAAG,OAAO,CAAA,EAAG,kBAAkB,CAAA,CAAA;AACxC;AAEA,eAAe,OAAA,CAAW,MAAA,EAAgBC,KAAAA,EAAc,IAAA,EAAgC,MAAA,EAA6C;AACnI,EAAA,IAAI,IAAA,GAAO,MAAM,QAAA,EAAS;AAC1B,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,CAAA,EAAG,UAAA,CAAW,MAAM,UAAU,CAAC,CAAA,EAAGA,KAAI,CAAA,CAAE,CAAA;AAK5D,EAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,GAAU,CAAA,EAAG,WAAW,CAAA,EAAG;AAC/C,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,gBAAgB,CAAA;AACnE,IAAA,IAAI;AACF,MAAA,MAAM,UAAkC,EAAC;AACzC,MAAA,IAAI,IAAA,EAAM;AAAE,QAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAAA,MAAoB;AAC1D,MAAA,IAAI,IAAA,EAAM;AAAE,QAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,IAAA,CAAK,WAAW,CAAA,CAAA;AAAA,MAAI;AAClE,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,CAAI,UAAS,EAAG;AAAA,QAC3C,MAAA;AAAA,QACA,OAAA;AAAA,QACA,IAAA,EAAM,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,GAAI,KAAA,CAAA;AAAA,QACpC,QAAQ,UAAA,CAAW;AAAA,OACpB,CAAA;AACD,MAAA,IAAI,QAAA,CAAS,MAAA,KAAW,GAAA,IAAO,IAAA,IAAQ,YAAY,CAAA,EAAG;AACpD,QAAA,IAAA,GAAO,MAAM,KAAK,OAAA,EAAQ;AAC1B,QAAA;AAAA,MACF;AACA,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,QAAA,MAAM,IAAI,MAAM,CAAA,YAAA,EAAeA,KAAI,YAAY,QAAA,CAAS,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,CAAE,CAAA;AAAA,MAC5E;AACA,MAAA,IAAI,QAAA,CAAS,WAAW,GAAA,EAAK;AAAE,QAAA,OAAO,KAAA,CAAA;AAAA,MAAgB;AACtD,MAAA,OAAO,MAAM,SAAS,IAAA,EAAK;AAAA,IAC7B,SAAS,GAAA,EAAK;AACZ,MAAA,IAAK,GAAA,CAAc,SAAS,YAAA,EAAc;AACxC,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAeA,KAAI,CAAA,gFAAA,CAA6E,CAAA;AAAA,MAClH;AACA,MAAA,MAAM,GAAA;AAAA,IACR,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAAA,IACpB;AAAA,EACF;AACA,EAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAeA,KAAI,CAAA,uCAAA,CAAyC,CAAA;AAC9E;AAEA,eAAsB,IAAA,CAAkBA,OAAc,IAAA,EAA2C;AAC/F,EAAA,OAAO,OAAA,CAAW,MAAA,EAAQA,KAAAA,EAAM,IAAI,CAAA;AACtC;AC/EO,IAAM,kBAAA,GAAkD,CAAC,UAAA,EAAY,SAAS,CAAA;AAoBrF,eAAsB,eAAA,CACpB,KACA,IAAA,EAC2B;AAC3B,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,mBAAA,CAAoB,IAAI,CAAA;AACxB,IAAA,IAAI,SAAS,SAAA,EAAW;AACtB,MAAA,MAAMC,YAAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,MAAA,IAAI,CAACA,YAAAA,EAAa;AAChB,QAAA,MAAM,IAAI,aAAA;AAAA,UACR,8BAAA;AAAA,UACA,qEAAqE,GAAG,CAAA,mBAAA;AAAA,SAC1E;AAAA,MACF;AACA,MAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAAA,YAAAA,EAAa,QAAQ,MAAA,EAAO;AAAA,IACzD;AACA,IAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,MAAA,EAAO;AAAA,EAC7C;AAEA,EAAA,MAAM,WAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAa,QAAQ,aAAA,EAAc;AAAA,EAChE;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,UAAA,EAAW;AACjD;AAkBA,SAAS,oBAAoB,KAAA,EAAkD;AAC7E,EAAA,IAAI,CAAC,kBAAA,CAAmB,QAAA,CAAS,KAAyB,CAAA,EAAG;AAC3D,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,eAAA;AAAA,MACA,CAAA,wBAAA,EAA2B,mBAAmB,IAAA,CAAK,IAAI,CAAC,CAAA,MAAA,EAAS,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC,CAAA,CAAA;AAAA,KACxF;AAAA,EACF;AACF;AAEO,IAAM,aAAA,GAAN,cAA4B,KAAA,CAAM;AAAA,EAC9B,IAAA;AAAA,EACT,WAAA,CAAY,MAAc,OAAA,EAAiB;AACzC,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AAAA,EACd;AACF,CAAA;AAOO,SAAS,UAAU,GAAA,EAGxB;AACA,EAAA,OAAO;AAAA,IACL,OAAO,GAAA,CAAI,KAAA;AAAA,IACX,GAAI,IAAI,WAAA,GAAc,EAAE,aAAa,GAAA,CAAI,WAAA,KAAgB;AAAC,GAC5D;AACF;ACnFA,IAAO,eAAQ,aAAA,CAAkD;AAAA,EAC/D,EAAA,EAAI,kBAAA;AAAA,EACJ,WAAA,EAAa,2DAAA;AAAA,EAEb,OAAA,EAAS;AAAA,IACP,MAAM,MAAA,CAAO,IAAA,EAAuB,MAAA,EAAmB;AACrD,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,gEAAA;AAAA,QACT,UAAA,EAAY;AAAA,UACV,EAAE,MAAM,QAAA,EAAmB,QAAA,EAAU,oBAAoB,OAAA,EAAS,EAAE,MAAA,EAAQ,gBAAA,EAAiB;AAAE;AACjG,OACF;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,OAAA,CAAQ,GAAA,EAAsB,KAAA,EAA0D;AAC5F,MAAA,MAAM,KAAA,GAAS,MAAM,KAAA,IAAS,KAAA;AAC9B,MAAA,MAAM,GAAA,GAAM,GAAA,CAAI,GAAA,IAAO,OAAA,CAAQ,GAAA,EAAI;AAEnC,MAAA,IAAI,QAAA;AACJ,MAAA,IAAI;AACF,QAAA,QAAA,GAAW,MAAM,eAAA,CAAgB,GAAA,EAAK,KAAA,CAAM,KAAK,CAAA;AAAA,MACnD,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,eAAe,aAAA,EAAe;AAChC,UAAA,eAAA,CAAgB,GAAA,EAAK,GAAA,CAAI,OAAA,EAAS,MAAA,EAAW,MAAM,IAAI,CAAA;AAAA,QACzD,CAAA,MAAO;AACL,UAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAAA,QAClC;AACA,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,uCAAuC,MAAA,EAAQ,EAAE,KAAA,EAAO,IAAI,OAAA,EAAS,EAAC,EAAG,KAAA,EAAO,GAAE,EAAE;AAAA,MACjH;AAMA,MAAA,MAAM,aAAa,QAAA,CAAS,KAAA,KAAU,aAAa,QAAA,CAAS,WAAA,GACxD,SAAS,WAAA,GACT,GAAA;AACJ,MAAA,MAAM,UAAA,GAAa,MAAM,cAAA,CAAe,UAAU,CAAA;AAElD,MAAA,IAAI,CAAC,UAAA,CAAW,OAAA,EAAS,MAAA,EAAQ;AAC/B,QAAA,eAAA;AAAA,UACE,GAAA;AAAA,UACA,CAAA;;AAAA,OAAA,EAAqD,UAAU,CAAA;;AAAA;AAAA;AAAA;AAAA;AAAA,GAAA,CAAA;AAAA,UAC/D,MAAA;AAAA,UACA,KAAA,CAAM;AAAA,SACR;AACA,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,0CAA0C,MAAA,EAAQ,EAAE,KAAA,EAAO,IAAI,OAAA,EAAS,EAAC,EAAG,KAAA,EAAO,GAAE,EAAE;AAAA,MACpH;AAEA,MAAA,IAAI;AACF,QAAA,MAAM,KAAA,GAAA,CAASC,MAAAA,CAAO,UAAU,CAAA,IAAK,aAAA,MAAmB,aAAA;AACxD,QAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAqB,iBAAA,EAAmB;AAAA,UAC3D,SAAS,UAAA,CAAW,OAAA;AAAA,UACpB,SAAS,UAAA,CAAW,OAAA;AAAA,UACpB,UAAA,EAAY,MAAM,aAAa,CAAA,KAAM,SAAY,OAAA,CAAQ,KAAA,CAAM,aAAa,CAAC,CAAA,GAAI,KAAA;AAAA,UACjF,GAAG,UAAU,QAAQ;AAAA,SACtB,CAAA;AAED,QAAA,IAAI,MAAM,IAAA,EAAM;AACd,UAAA,GAAA,CAAI,EAAA,EAAI,OAAO,MAAM,CAAA;AAAA,QACvB,CAAA,MAAA,IAAW,MAAA,CAAO,KAAA,CAAM,MAAA,KAAW,CAAA,EAAG;AACpC,UAAA,GAAA,CAAI,EAAA,EAAI,OAAO,CAAA,0BAAA,EAAwB,QAAA,CAAS,KAAK,CAAA,EAAA,EAAK,MAAA,CAAO,KAAK,CAAA,SAAA,CAAW,CAAA;AAAA,QACnF,CAAA,MAAO;AACL,UAAA,GAAA,CAAI,EAAA,EAAI,OAAA,GAAU,CAAA,OAAA,EAAU,MAAA,CAAO,KAAA,CAAM,MAAM,CAAA,gBAAA,EAAmB,QAAA,CAAS,KAAK,CAAA,EAAA,EAAK,MAAA,CAAO,KAAK,CAAA,OAAA,CAAA,EAAW;AAAA,YAC1G,UAAU,CAAC;AAAA,cACT,MAAA,EAAQ,OAAA;AAAA,cACR,KAAA,EAAO,MAAA,CAAO,KAAA,CAAM,GAAA,CAAI,OAAK,CAAA,EAAA,EAAK,CAAA,CAAE,EAAE,CAAA,EAAA,EAAK,CAAA,CAAE,WAAW,CAAA,GAAA,EAAM,CAAA,CAAE,OAAO,CAAA,CAAE;AAAA,aAC1E;AAAA,WACF,CAAA;AAAA,QACH;AAEA,QAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,MAAA,EAAO;AAAA,MAC5B,SAAS,GAAA,EAAK;AACZ,QAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAChC,QAAA,OAAO,EAAE,IAAI,KAAA,EAAO,KAAA,EAAO,eAAe,KAAA,GAAQ,GAAA,CAAI,UAAU,MAAA,CAAO,GAAG,GAAG,MAAA,EAAQ,EAAE,OAAO,EAAC,EAAG,SAAS,EAAC,EAAG,KAAA,EAAO,CAAA,EAAE,EAAE;AAAA,MAC5H;AAAA,IACF;AAAA;AAEJ,CAAC;AAED,eAAe,eAAe,IAAA,EAAmE;AAC/F,EAAA,KAAA,MAAW,IAAA,IAAQ,CAAC,iBAAA,EAAmB,gBAAgB,CAAA,EAAG;AACxD,IAAA,MAAM,CAAA,GAAS,IAAA,CAAA,IAAA,CAAK,IAAA,EAAM,KAAA,EAAO,IAAI,CAAA;AACrC,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAM,MAAS,EAAA,CAAA,QAAA,CAAS,CAAA,EAAG,OAAO,CAAA;AAExC,MAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,QAAA,CAAS,QAAQ,CAAA,GAAI,UAAA,CAAW,GAAG,CAAA,GAAI,GAAG,CAAA;AACzE,MAAA,OAAO,MAAA,EAAQ,WAAA,EAAa,IAAA,IAAQ,EAAC;AAAA,IACvC,CAAA,CAAA,MAAQ;AAAE,MAAA;AAAA,IAAU;AAAA,EACtB;AACA,EAAA,OAAO,EAAC;AACV;AAGA,SAAS,WAAW,GAAA,EAAqB;AACvC,EAAA,OAAO,GAAA,CACJ,OAAA,CAAQ,mBAAA,EAAqB,EAAE,CAAA,CAC/B,OAAA,CAAQ,mBAAA,EAAqB,IAAI,CAAA,CACjC,OAAA,CAAQ,cAAA,EAAgB,IAAI,CAAA;AACjC","file":"sync.js","sourcesContent":["/**\n * HTTP client for marketplace service via Gateway.\n */\n\nimport { useEnv } from '@kb-labs/sdk';\nimport { CredentialsManager, SessionManager } from '@kb-labs/cli-runtime/gateway';\nimport type { GatewayCredentials, SessionCredentials } from '@kb-labs/cli-runtime/gateway';\n\nconst DEFAULT_GATEWAY_URL = 'http://127.0.0.1:4000';\nconst MARKETPLACE_PREFIX = '/api/v1/marketplace';\nconst FETCH_TIMEOUT_MS = 30_000;\n\ntype AuthState = {\n  gatewayUrl: string;\n  accessToken: string;\n  refresh: () => Promise<AuthState>;\n};\n\nasync function loadAuth(): Promise<AuthState | null> {\n  const sessionManager = new SessionManager();\n  const session = await sessionManager.load();\n  if (session) {\n    const current = sessionManager.isExpired(session) ? await sessionManager.refresh(session) : session;\n    return authState(current, () => sessionManager.refresh(current));\n  }\n\n  const credentialsManager = new CredentialsManager();\n  const credentials = await credentialsManager.load();\n  if (!credentials) {\n    return null;\n  }\n  const current = credentialsManager.isExpired(credentials) ? await credentialsManager.refresh(credentials) : credentials;\n  return authState(current, () => credentialsManager.refresh(current));\n}\n\nfunction authState(credentials: GatewayCredentials | SessionCredentials, refresh: () => Promise<GatewayCredentials | SessionCredentials>): AuthState {\n  return {\n    gatewayUrl: credentials.gatewayUrl,\n    accessToken: credentials.accessToken,\n    refresh: async () => {\n      const updated = await refresh();\n      return authState(updated, refresh);\n    },\n  };\n}\n\nfunction getBaseUrl(gatewayUrl?: string): string {\n  const marketplaceUrl = useEnv('KB_MARKETPLACE_URL');\n  if (marketplaceUrl) {\n    return `${marketplaceUrl}${MARKETPLACE_PREFIX}`;\n  }\n  const gateway = gatewayUrl ?? useEnv('KB_GATEWAY_URL') ?? DEFAULT_GATEWAY_URL;\n  return `${gateway}${MARKETPLACE_PREFIX}`;\n}\n\nasync function request<T>(method: string, path: string, body?: Record<string, unknown>, params?: Record<string, string>): Promise<T> {\n  let auth = await loadAuth();\n  const url = new URL(`${getBaseUrl(auth?.gatewayUrl)}${path}`);\n  if (params) {\n    for (const [key, value] of Object.entries(params)) { url.searchParams.set(key, value); }\n  }\n\n  for (let attempt = 0; attempt < 2; attempt += 1) {\n    const controller = new AbortController();\n    const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n    try {\n      const headers: Record<string, string> = {};\n      if (body) { headers['Content-Type'] = 'application/json'; }\n      if (auth) { headers.Authorization = `Bearer ${auth.accessToken}`; }\n      const response = await fetch(url.toString(), {\n        method,\n        headers,\n        body: body ? JSON.stringify(body) : undefined,\n        signal: controller.signal,\n      });\n      if (response.status === 401 && auth && attempt === 0) {\n        auth = await auth.refresh();\n        continue;\n      }\n      if (!response.ok) {\n        const text = await response.text();\n        throw new Error(`Marketplace ${path} failed (${response.status}): ${text}`);\n      }\n      if (response.status === 204) { return undefined as T; }\n      return await response.json() as T;\n    } catch (err) {\n      if ((err as Error).name === 'AbortError') {\n        throw new Error(`Marketplace ${path} timed out — is the marketplace service running? (kb-dev start marketplace)`);\n      }\n      throw err;\n    } finally {\n      clearTimeout(timer);\n    }\n  }\n  throw new Error(`Marketplace ${path} failed after refreshing authentication`);\n}\n\nexport async function post<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('POST', path, body);\n}\n\nexport async function patch<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('PATCH', path, body);\n}\n\nexport async function del<T = unknown>(path: string, body?: Record<string, unknown>): Promise<T> {\n  return request<T>('DELETE', path, body);\n}\n\nexport async function get<T = unknown>(path: string, params?: Record<string, string>): Promise<T> {\n  return request<T>('GET', path, undefined, params);\n}\n","/**\n * @module @kb-labs/marketplace-entry/scope\n *\n * Client-side scope resolution for marketplace CLI commands. Uses the\n * canonical `findProjectConfigRoot` helper from `@kb-labs/core-workspace`\n * so the detection rules (which filenames count, how walk-up stops) match\n * what the config loader and the marketplace daemon enforce.\n *\n * Rules:\n *  - `project` is the default if cwd (or any ancestor up to the filesystem\n *    root) contains `.kb/kb.config.{json,jsonc}`.\n *  - Otherwise the default is `platform`.\n *  - `--scope` always overrides detection.\n *  - For scope=\"project\" we return the absolute projectRoot so the daemon\n *    doesn't need to re-discover it.\n */\n\nimport { findProjectConfigRoot } from '@kb-labs/core-workspace';\nimport type { MarketplaceScope, MarketplaceQueryScope } from '@kb-labs/marketplace-contracts';\n\nexport const SCOPE_FLAG_CHOICES: readonly MarketplaceScope[] = ['platform', 'project'];\nexport const QUERY_SCOPE_FLAG_CHOICES: readonly MarketplaceQueryScope[] = ['platform', 'project', 'all'];\n\nexport interface ResolvedCliScope {\n  scope: MarketplaceScope;\n  projectRoot?: string;\n  /** How the scope was determined — surfaces in --verbose logs. */\n  reason: 'flag' | 'auto-detect' | 'fallback';\n}\n\nexport interface ResolvedCliQueryScope extends Omit<ResolvedCliScope, 'scope'> {\n  scope: MarketplaceQueryScope;\n}\n\n/**\n * Resolve the effective scope for a mutating command (`link`, `unlink`,\n * `install`, ...). `flag` is the value of `--scope` (if supplied). The\n * helper never returns `'all'` for mutating commands — callers restrict\n * choices via `SCOPE_FLAG_CHOICES`.\n */\nexport async function resolveCliScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliScope> {\n  if (flag) {\n    assertMutatingScope(flag);\n    if (flag === 'project') {\n      const projectRoot = await findProjectConfigRoot(cwd);\n      if (!projectRoot) {\n        throw new CliScopeError(\n          'SCOPE_PROJECT_ROOT_NOT_FOUND',\n          `--scope=project requires a .kb/kb.config.{json,jsonc} ancestor of ${cwd} — none found.`,\n        );\n      }\n      return { scope: 'project', projectRoot, reason: 'flag' };\n    }\n    return { scope: 'platform', reason: 'flag' };\n  }\n\n  const projectRoot = await findProjectConfigRoot(cwd);\n  if (projectRoot) {\n    return { scope: 'project', projectRoot, reason: 'auto-detect' };\n  }\n  return { scope: 'platform', reason: 'fallback' };\n}\n\n/**\n * Resolve the effective scope for a read-only command (`list`). Accepts\n * `'all'` as an explicit flag value.\n */\nexport async function resolveCliQueryScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliQueryScope> {\n  if (flag === 'all') {\n    const projectRoot = await findProjectConfigRoot(cwd);\n    return { scope: 'all', projectRoot, reason: 'flag' };\n  }\n  const base = await resolveCliScope(cwd, flag);\n  return { scope: base.scope, projectRoot: base.projectRoot, reason: base.reason };\n}\n\nfunction assertMutatingScope(value: string): asserts value is MarketplaceScope {\n  if (!SCOPE_FLAG_CHOICES.includes(value as MarketplaceScope)) {\n    throw new CliScopeError(\n      'SCOPE_INVALID',\n      `--scope must be one of: ${SCOPE_FLAG_CHOICES.join(', ')} (got ${JSON.stringify(value)})`,\n    );\n  }\n}\n\nexport class CliScopeError extends Error {\n  readonly code: string;\n  constructor(code: string, message: string) {\n    super(message);\n    this.code = code;\n    this.name = 'CliScopeError';\n  }\n}\n\n/**\n * Build the body-payload fragment expected by `parseMutatingScope` on the\n * API side: `{ scope, projectRoot? }`. Kept as a helper so every command\n * sends the same shape and nothing drifts out-of-sync with the server.\n */\nexport function scopeBody(ctx: ResolvedCliScope | ResolvedCliQueryScope): {\n  scope: MarketplaceScope | MarketplaceQueryScope;\n  projectRoot?: string;\n} {\n  return {\n    scope: ctx.scope,\n    ...(ctx.projectRoot ? { projectRoot: ctx.projectRoot } : {}),\n  };\n}\n","import { defineCommand, useEnv, validationError, handleError, type PluginContextV3, type CommandResult } from '@kb-labs/sdk';\nimport { post } from '../http.js';\nimport { resolveCliScope, scopeBody, CliScopeError } from '../scope.js';\nimport * as fs from 'node:fs/promises';\nimport * as path from 'node:path';\n\ninterface SyncFlags {\n  'auto-enable'?: boolean;\n  json?: boolean;\n  scope?: string;\n  'dry-run'?: boolean;\n}\n\ninterface SyncInput {\n  argv?: string[];\n  flags?: SyncFlags;\n}\n\ninterface SyncEntry {\n  id: string;\n  primaryKind: string;\n  version: string;\n}\n\ninterface SyncResultData {\n  added: SyncEntry[];\n  skipped: Array<{ id: string; reason: string }>;\n  total: number;\n}\n\nexport default defineCommand<unknown, SyncInput, SyncResultData>({\n  id: 'marketplace:sync',\n  description: 'Sync workspace — scan for entities and populate lock',\n\n  handler: {\n    async intent(_ctx: PluginContextV3, _input: SyncInput) {\n      return {\n        summary: 'Sync workspace — scan for entities and populate lock file',\n        operations: [\n          { type: 'update' as const, resource: 'marketplace-lock', details: { action: 'sync-workspace' } },\n        ],\n      };\n    },\n\n    async execute(ctx: PluginContextV3, input: SyncInput): Promise<CommandResult<SyncResultData>> {\n      const flags = (input.flags ?? input) as SyncFlags;\n      const cwd = ctx.cwd ?? process.cwd();\n\n      let scopeCtx;\n      try {\n        scopeCtx = await resolveCliScope(cwd, flags.scope);\n      } catch (err) {\n        if (err instanceof CliScopeError) {\n          validationError(ctx, err.message, undefined, flags.json);\n        } else {\n          handleError(ctx, err, flags.json);\n        }\n        return { ok: false, error: 'Marketplace scope is not configured', result: { added: [], skipped: [], total: 0 } };\n      }\n\n      // Sync reads include/exclude patterns from the config file located at\n      // the scope root, not from the CLI cwd. This keeps semantics consistent:\n      // `--scope project` syncs using the project's config, `--scope platform`\n      // uses the platform config.\n      const configRoot = scopeCtx.scope === 'project' && scopeCtx.projectRoot\n        ? scopeCtx.projectRoot\n        : cwd;\n      const syncConfig = await loadSyncConfig(configRoot);\n\n      if (!syncConfig.include?.length) {\n        validationError(\n          ctx,\n          `No marketplace.sync.include configured.\\n\\nAdd to ${configRoot}/.kb/kb.config.json:\\n\\n  \"marketplace\": {\\n    \"sync\": {\\n      \"include\": [\"plugins/*/entry\", \"plugins/*/core\", \"adapters/*\"]\\n    }\\n  }`,\n          undefined,\n          flags.json,\n        );\n        return { ok: false, error: 'No marketplace.sync.include configured', result: { added: [], skipped: [], total: 0 } };\n      }\n\n      try {\n        const isDev = (useEnv('NODE_ENV') ?? 'development') === 'development';\n        const result = await post<SyncResultData>('/workspace/sync', {\n          include: syncConfig.include,\n          exclude: syncConfig.exclude,\n          autoEnable: flags['auto-enable'] !== undefined ? Boolean(flags['auto-enable']) : isDev,\n          ...scopeBody(scopeCtx),\n        });\n\n        if (flags.json) {\n          ctx.ui?.json?.(result);\n        } else if (result.added.length === 0) {\n          ctx.ui?.info?.(`Lock is up to date — ${scopeCtx.scope} (${result.total} entries)`);\n        } else {\n          ctx.ui?.success?.(`Synced ${result.added.length} new entries to ${scopeCtx.scope} (${result.total} total)`, {\n            sections: [{\n              header: 'Added',\n              items: result.added.map(e => `+ ${e.id} (${e.primaryKind}) v${e.version}`),\n            }],\n          });\n        }\n\n        return { ok: true, result };\n      } catch (err) {\n        handleError(ctx, err, flags.json);\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { added: [], skipped: [], total: 0 } };\n      }\n    },\n  },\n});\n\nasync function loadSyncConfig(root: string): Promise<{ include?: string[]; exclude?: string[] }> {\n  for (const name of ['kb.config.jsonc', 'kb.config.json']) {\n    const p = path.join(root, '.kb', name);\n    try {\n      const raw = await fs.readFile(p, 'utf-8');\n      // .json files are strict JSON — strip only for .jsonc to avoid mangling URLs (e.g. ws://).\n      const parsed = JSON.parse(name.endsWith('.jsonc') ? stripJsonc(raw) : raw);\n      return parsed?.marketplace?.sync ?? {};\n    } catch { continue; }\n  }\n  return {};\n}\n\n/** Minimal JSONC stripper — removes // line and /* block comments plus trailing commas. */\nfunction stripJsonc(src: string): string {\n  return src\n    .replace(/\\/\\*[\\s\\S]*?\\*\\//g, '')\n    .replace(/(^|[^:])\\/\\/.*$/gm, '$1')\n    .replace(/,(\\s*[}\\]])/g, '$1');\n}\n"]}
+{"version":3,"sources":["../../src/http.ts","../../src/scope.ts","../../src/commands/sync.ts"],"names":["current","path","projectRoot","useEnv"],"mappings":";;;;;;;AAQA,IAAM,mBAAA,GAAsB,uBAAA;AAC5B,IAAM,kBAAA,GAAqB,qBAAA;AAC3B,IAAM,gBAAA,GAAmB,GAAA;AAQzB,eAAe,QAAA,GAAsC;AACnD,EAAA,MAAM,cAAA,GAAiB,IAAI,cAAA,EAAe;AAC1C,EAAA,MAAM,OAAA,GAAU,MAAM,cAAA,CAAe,IAAA,EAAK;AAC1C,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,MAAMA,QAAAA,GAAU,eAAe,SAAA,CAAU,OAAO,IAAI,MAAM,cAAA,CAAe,OAAA,CAAQ,OAAO,CAAA,GAAI,OAAA;AAC5F,IAAA,OAAO,UAAUA,QAAAA,EAAS,MAAM,cAAA,CAAe,OAAA,CAAQA,QAAO,CAAC,CAAA;AAAA,EACjE;AAEA,EAAA,MAAM,kBAAA,GAAqB,IAAI,kBAAA,EAAmB;AAClD,EAAA,MAAM,WAAA,GAAc,MAAM,kBAAA,CAAmB,IAAA,EAAK;AAClD,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,OAAA,GAAU,mBAAmB,SAAA,CAAU,WAAW,IAAI,MAAM,kBAAA,CAAmB,OAAA,CAAQ,WAAW,CAAA,GAAI,WAAA;AAC5G,EAAA,OAAO,UAAU,OAAA,EAAS,MAAM,kBAAA,CAAmB,OAAA,CAAQ,OAAO,CAAC,CAAA;AACrE;AAEA,SAAS,SAAA,CAAU,aAAsD,OAAA,EAA4E;AACnJ,EAAA,OAAO;AAAA,IACL,YAAY,WAAA,CAAY,UAAA;AAAA,IACxB,aAAa,WAAA,CAAY,WAAA;AAAA,IACzB,SAAS,YAAY;AACnB,MAAA,MAAM,OAAA,GAAU,MAAM,OAAA,EAAQ;AAC9B,MAAA,OAAO,SAAA,CAAU,SAAS,OAAO,CAAA;AAAA,IACnC;AAAA,GACF;AACF;AAEA,SAAS,WAAW,UAAA,EAA6B;AAC/C,EAAA,MAAM,cAAA,GAAiB,OAAO,oBAAoB,CAAA;AAClD,EAAA,IAAI,cAAA,EAAgB;AAClB,IAAA,OAAO,CAAA,EAAG,cAAc,CAAA,EAAG,kBAAkB,CAAA,CAAA;AAAA,EAC/C;AACA,EAAA,MAAM,OAAA,GAAU,UAAA,IAAc,MAAA,CAAO,gBAAgB,CAAA,IAAK,mBAAA;AAC1D,EAAA,OAAO,CAAA,EAAG,OAAO,CAAA,EAAG,kBAAkB,CAAA,CAAA;AACxC;AAEA,eAAe,OAAA,CAAW,MAAA,EAAgBC,KAAAA,EAAc,IAAA,EAAgC,MAAA,EAA6C;AACnI,EAAA,IAAI,IAAA,GAAO,MAAM,QAAA,EAAS;AAC1B,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,CAAA,EAAG,UAAA,CAAW,MAAM,UAAU,CAAC,CAAA,EAAGA,KAAI,CAAA,CAAE,CAAA;AAK5D,EAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,GAAU,CAAA,EAAG,WAAW,CAAA,EAAG;AAC/C,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,gBAAgB,CAAA;AACnE,IAAA,IAAI;AACF,MAAA,MAAM,UAAkC,EAAC;AACzC,MAAA,IAAI,IAAA,EAAM;AAAE,QAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAAA,MAAoB;AAC1D,MAAA,IAAI,IAAA,EAAM;AAAE,QAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,IAAA,CAAK,WAAW,CAAA,CAAA;AAAA,MAAI;AAClE,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,CAAI,UAAS,EAAG;AAAA,QAC3C,MAAA;AAAA,QACA,OAAA;AAAA,QACA,IAAA,EAAM,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,GAAI,KAAA,CAAA;AAAA,QACpC,QAAQ,UAAA,CAAW;AAAA,OACpB,CAAA;AACD,MAAA,IAAI,QAAA,CAAS,MAAA,KAAW,GAAA,IAAO,IAAA,IAAQ,YAAY,CAAA,EAAG;AACpD,QAAA,IAAA,GAAO,MAAM,KAAK,OAAA,EAAQ;AAC1B,QAAA;AAAA,MACF;AACA,MAAA,IAAI,QAAA,CAAS,MAAA,KAAW,GAAA,IAAO,CAAC,IAAA,EAAM;AACpC,QAAA,MAAM,IAAI,MAAM,+GAA+G,CAAA;AAAA,MACjI;AACA,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,QAAA,MAAM,IAAI,MAAM,CAAA,YAAA,EAAeA,KAAI,YAAY,QAAA,CAAS,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,CAAE,CAAA;AAAA,MAC5E;AACA,MAAA,IAAI,QAAA,CAAS,WAAW,GAAA,EAAK;AAAE,QAAA,OAAO,KAAA,CAAA;AAAA,MAAgB;AACtD,MAAA,OAAO,MAAM,SAAS,IAAA,EAAK;AAAA,IAC7B,SAAS,GAAA,EAAK;AACZ,MAAA,IAAK,GAAA,CAAc,SAAS,YAAA,EAAc;AACxC,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAeA,KAAI,CAAA,gFAAA,CAA6E,CAAA;AAAA,MAClH;AACA,MAAA,MAAM,GAAA;AAAA,IACR,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAAA,IACpB;AAAA,EACF;AACA,EAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAeA,KAAI,CAAA,uCAAA,CAAyC,CAAA;AAC9E;AAEA,eAAsB,IAAA,CAAkBA,OAAc,IAAA,EAA2C;AAC/F,EAAA,OAAO,OAAA,CAAW,MAAA,EAAQA,KAAAA,EAAM,IAAI,CAAA;AACtC;AClFO,IAAM,kBAAA,GAAkD,CAAC,UAAA,EAAY,SAAS,CAAA;AAoBrF,eAAsB,eAAA,CACpB,KACA,IAAA,EAC2B;AAC3B,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,mBAAA,CAAoB,IAAI,CAAA;AACxB,IAAA,IAAI,SAAS,SAAA,EAAW;AACtB,MAAA,MAAMC,YAAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,MAAA,IAAI,CAACA,YAAAA,EAAa;AAChB,QAAA,MAAM,IAAI,aAAA;AAAA,UACR,8BAAA;AAAA,UACA,qEAAqE,GAAG,CAAA,mBAAA;AAAA,SAC1E;AAAA,MACF;AACA,MAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAAA,YAAAA,EAAa,QAAQ,MAAA,EAAO;AAAA,IACzD;AACA,IAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,MAAA,EAAO;AAAA,EAC7C;AAEA,EAAA,MAAM,WAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAa,QAAQ,aAAA,EAAc;AAAA,EAChE;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,UAAA,EAAW;AACjD;AAkBA,SAAS,oBAAoB,KAAA,EAAkD;AAC7E,EAAA,IAAI,CAAC,kBAAA,CAAmB,QAAA,CAAS,KAAyB,CAAA,EAAG;AAC3D,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,eAAA;AAAA,MACA,CAAA,wBAAA,EAA2B,mBAAmB,IAAA,CAAK,IAAI,CAAC,CAAA,MAAA,EAAS,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC,CAAA,CAAA;AAAA,KACxF;AAAA,EACF;AACF;AAEO,IAAM,aAAA,GAAN,cAA4B,KAAA,CAAM;AAAA,EAC9B,IAAA;AAAA,EACT,WAAA,CAAY,MAAc,OAAA,EAAiB;AACzC,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AAAA,EACd;AACF,CAAA;AAOO,SAAS,UAAU,GAAA,EAGxB;AACA,EAAA,OAAO;AAAA,IACL,OAAO,GAAA,CAAI,KAAA;AAAA,IACX,GAAI,IAAI,WAAA,GAAc,EAAE,aAAa,GAAA,CAAI,WAAA,KAAgB;AAAC,GAC5D;AACF;ACnFA,IAAO,eAAQ,aAAA,CAAkD;AAAA,EAC/D,EAAA,EAAI,kBAAA;AAAA,EACJ,WAAA,EAAa,2DAAA;AAAA,EAEb,OAAA,EAAS;AAAA,IACP,MAAM,MAAA,CAAO,IAAA,EAAuB,MAAA,EAAmB;AACrD,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,gEAAA;AAAA,QACT,UAAA,EAAY;AAAA,UACV,EAAE,MAAM,QAAA,EAAmB,QAAA,EAAU,oBAAoB,OAAA,EAAS,EAAE,MAAA,EAAQ,gBAAA,EAAiB;AAAE;AACjG,OACF;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,OAAA,CAAQ,GAAA,EAAsB,KAAA,EAA0D;AAC5F,MAAA,MAAM,KAAA,GAAS,MAAM,KAAA,IAAS,KAAA;AAC9B,MAAA,MAAM,GAAA,GAAM,GAAA,CAAI,GAAA,IAAO,OAAA,CAAQ,GAAA,EAAI;AAEnC,MAAA,IAAI,QAAA;AACJ,MAAA,IAAI;AACF,QAAA,QAAA,GAAW,MAAM,eAAA,CAAgB,GAAA,EAAK,KAAA,CAAM,KAAK,CAAA;AAAA,MACnD,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,eAAe,aAAA,EAAe;AAChC,UAAA,eAAA,CAAgB,GAAA,EAAK,GAAA,CAAI,OAAA,EAAS,MAAA,EAAW,MAAM,IAAI,CAAA;AAAA,QACzD,CAAA,MAAO;AACL,UAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAAA,QAClC;AACA,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,uCAAuC,MAAA,EAAQ,EAAE,KAAA,EAAO,IAAI,OAAA,EAAS,EAAC,EAAG,KAAA,EAAO,GAAE,EAAE;AAAA,MACjH;AAMA,MAAA,MAAM,aAAa,QAAA,CAAS,KAAA,KAAU,aAAa,QAAA,CAAS,WAAA,GACxD,SAAS,WAAA,GACT,GAAA;AACJ,MAAA,MAAM,UAAA,GAAa,MAAM,cAAA,CAAe,UAAU,CAAA;AAElD,MAAA,IAAI,CAAC,UAAA,CAAW,OAAA,EAAS,MAAA,EAAQ;AAC/B,QAAA,eAAA;AAAA,UACE,GAAA;AAAA,UACA,CAAA;;AAAA,OAAA,EAAqD,UAAU,CAAA;;AAAA;AAAA;AAAA;AAAA;AAAA,GAAA,CAAA;AAAA,UAC/D,MAAA;AAAA,UACA,KAAA,CAAM;AAAA,SACR;AACA,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,0CAA0C,MAAA,EAAQ,EAAE,KAAA,EAAO,IAAI,OAAA,EAAS,EAAC,EAAG,KAAA,EAAO,GAAE,EAAE;AAAA,MACpH;AAEA,MAAA,IAAI;AACF,QAAA,MAAM,KAAA,GAAA,CAASC,MAAAA,CAAO,UAAU,CAAA,IAAK,aAAA,MAAmB,aAAA;AACxD,QAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAqB,iBAAA,EAAmB;AAAA,UAC3D,SAAS,UAAA,CAAW,OAAA;AAAA,UACpB,SAAS,UAAA,CAAW,OAAA;AAAA,UACpB,UAAA,EAAY,MAAM,aAAa,CAAA,KAAM,SAAY,OAAA,CAAQ,KAAA,CAAM,aAAa,CAAC,CAAA,GAAI,KAAA;AAAA,UACjF,GAAG,UAAU,QAAQ;AAAA,SACtB,CAAA;AAED,QAAA,IAAI,MAAM,IAAA,EAAM;AACd,UAAA,GAAA,CAAI,EAAA,EAAI,OAAO,MAAM,CAAA;AAAA,QACvB,CAAA,MAAA,IAAW,MAAA,CAAO,KAAA,CAAM,MAAA,KAAW,CAAA,EAAG;AACpC,UAAA,GAAA,CAAI,EAAA,EAAI,OAAO,CAAA,0BAAA,EAAwB,QAAA,CAAS,KAAK,CAAA,EAAA,EAAK,MAAA,CAAO,KAAK,CAAA,SAAA,CAAW,CAAA;AAAA,QACnF,CAAA,MAAO;AACL,UAAA,GAAA,CAAI,EAAA,EAAI,OAAA,GAAU,CAAA,OAAA,EAAU,MAAA,CAAO,KAAA,CAAM,MAAM,CAAA,gBAAA,EAAmB,QAAA,CAAS,KAAK,CAAA,EAAA,EAAK,MAAA,CAAO,KAAK,CAAA,OAAA,CAAA,EAAW;AAAA,YAC1G,UAAU,CAAC;AAAA,cACT,MAAA,EAAQ,OAAA;AAAA,cACR,KAAA,EAAO,MAAA,CAAO,KAAA,CAAM,GAAA,CAAI,OAAK,CAAA,EAAA,EAAK,CAAA,CAAE,EAAE,CAAA,EAAA,EAAK,CAAA,CAAE,WAAW,CAAA,GAAA,EAAM,CAAA,CAAE,OAAO,CAAA,CAAE;AAAA,aAC1E;AAAA,WACF,CAAA;AAAA,QACH;AAEA,QAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,MAAA,EAAO;AAAA,MAC5B,SAAS,GAAA,EAAK;AACZ,QAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAChC,QAAA,OAAO,EAAE,IAAI,KAAA,EAAO,KAAA,EAAO,eAAe,KAAA,GAAQ,GAAA,CAAI,UAAU,MAAA,CAAO,GAAG,GAAG,MAAA,EAAQ,EAAE,OAAO,EAAC,EAAG,SAAS,EAAC,EAAG,KAAA,EAAO,CAAA,EAAE,EAAE;AAAA,MAC5H;AAAA,IACF;AAAA;AAEJ,CAAC;AAED,eAAe,eAAe,IAAA,EAAmE;AAC/F,EAAA,KAAA,MAAW,IAAA,IAAQ,CAAC,iBAAA,EAAmB,gBAAgB,CAAA,EAAG;AACxD,IAAA,MAAM,CAAA,GAAS,IAAA,CAAA,IAAA,CAAK,IAAA,EAAM,KAAA,EAAO,IAAI,CAAA;AACrC,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAM,MAAS,EAAA,CAAA,QAAA,CAAS,CAAA,EAAG,OAAO,CAAA;AAExC,MAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,QAAA,CAAS,QAAQ,CAAA,GAAI,UAAA,CAAW,GAAG,CAAA,GAAI,GAAG,CAAA;AACzE,MAAA,OAAO,MAAA,EAAQ,WAAA,EAAa,IAAA,IAAQ,EAAC;AAAA,IACvC,CAAA,CAAA,MAAQ;AAAE,MAAA;AAAA,IAAU;AAAA,EACtB;AACA,EAAA,OAAO,EAAC;AACV;AAGA,SAAS,WAAW,GAAA,EAAqB;AACvC,EAAA,OAAO,GAAA,CACJ,OAAA,CAAQ,mBAAA,EAAqB,EAAE,CAAA,CAC/B,OAAA,CAAQ,mBAAA,EAAqB,IAAI,CAAA,CACjC,OAAA,CAAQ,cAAA,EAAgB,IAAI,CAAA;AACjC","file":"sync.js","sourcesContent":["/**\n * HTTP client for marketplace service via Gateway.\n */\n\nimport { useEnv } from '@kb-labs/sdk';\nimport { CredentialsManager, SessionManager } from '@kb-labs/cli-runtime/gateway';\nimport type { GatewayCredentials, SessionCredentials } from '@kb-labs/cli-runtime/gateway';\n\nconst DEFAULT_GATEWAY_URL = 'http://127.0.0.1:4000';\nconst MARKETPLACE_PREFIX = '/api/v1/marketplace';\nconst FETCH_TIMEOUT_MS = 30_000;\n\ntype AuthState = {\n  gatewayUrl: string;\n  accessToken: string;\n  refresh: () => Promise<AuthState>;\n};\n\nasync function loadAuth(): Promise<AuthState | null> {\n  const sessionManager = new SessionManager();\n  const session = await sessionManager.load();\n  if (session) {\n    const current = sessionManager.isExpired(session) ? await sessionManager.refresh(session) : session;\n    return authState(current, () => sessionManager.refresh(current));\n  }\n\n  const credentialsManager = new CredentialsManager();\n  const credentials = await credentialsManager.load();\n  if (!credentials) {\n    return null;\n  }\n  const current = credentialsManager.isExpired(credentials) ? await credentialsManager.refresh(credentials) : credentials;\n  return authState(current, () => credentialsManager.refresh(current));\n}\n\nfunction authState(credentials: GatewayCredentials | SessionCredentials, refresh: () => Promise<GatewayCredentials | SessionCredentials>): AuthState {\n  return {\n    gatewayUrl: credentials.gatewayUrl,\n    accessToken: credentials.accessToken,\n    refresh: async () => {\n      const updated = await refresh();\n      return authState(updated, refresh);\n    },\n  };\n}\n\nfunction getBaseUrl(gatewayUrl?: string): string {\n  const marketplaceUrl = useEnv('KB_MARKETPLACE_URL');\n  if (marketplaceUrl) {\n    return `${marketplaceUrl}${MARKETPLACE_PREFIX}`;\n  }\n  const gateway = gatewayUrl ?? useEnv('KB_GATEWAY_URL') ?? DEFAULT_GATEWAY_URL;\n  return `${gateway}${MARKETPLACE_PREFIX}`;\n}\n\nasync function request<T>(method: string, path: string, body?: Record<string, unknown>, params?: Record<string, string>): Promise<T> {\n  let auth = await loadAuth();\n  const url = new URL(`${getBaseUrl(auth?.gatewayUrl)}${path}`);\n  if (params) {\n    for (const [key, value] of Object.entries(params)) { url.searchParams.set(key, value); }\n  }\n\n  for (let attempt = 0; attempt < 2; attempt += 1) {\n    const controller = new AbortController();\n    const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n    try {\n      const headers: Record<string, string> = {};\n      if (body) { headers['Content-Type'] = 'application/json'; }\n      if (auth) { headers.Authorization = `Bearer ${auth.accessToken}`; }\n      const response = await fetch(url.toString(), {\n        method,\n        headers,\n        body: body ? JSON.stringify(body) : undefined,\n        signal: controller.signal,\n      });\n      if (response.status === 401 && auth && attempt === 0) {\n        auth = await auth.refresh();\n        continue;\n      }\n      if (response.status === 401 && !auth) {\n        throw new Error('Marketplace authentication is required. Run `kb auth login` or choose local no-auth mode during installation.');\n      }\n      if (!response.ok) {\n        const text = await response.text();\n        throw new Error(`Marketplace ${path} failed (${response.status}): ${text}`);\n      }\n      if (response.status === 204) { return undefined as T; }\n      return await response.json() as T;\n    } catch (err) {\n      if ((err as Error).name === 'AbortError') {\n        throw new Error(`Marketplace ${path} timed out — is the marketplace service running? (kb-dev start marketplace)`);\n      }\n      throw err;\n    } finally {\n      clearTimeout(timer);\n    }\n  }\n  throw new Error(`Marketplace ${path} failed after refreshing authentication`);\n}\n\nexport async function post<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('POST', path, body);\n}\n\nexport async function patch<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('PATCH', path, body);\n}\n\nexport async function del<T = unknown>(path: string, body?: Record<string, unknown>): Promise<T> {\n  return request<T>('DELETE', path, body);\n}\n\nexport async function get<T = unknown>(path: string, params?: Record<string, string>): Promise<T> {\n  return request<T>('GET', path, undefined, params);\n}\n","/**\n * @module @kb-labs/marketplace-entry/scope\n *\n * Client-side scope resolution for marketplace CLI commands. Uses the\n * canonical `findProjectConfigRoot` helper from `@kb-labs/core-workspace`\n * so the detection rules (which filenames count, how walk-up stops) match\n * what the config loader and the marketplace daemon enforce.\n *\n * Rules:\n *  - `project` is the default if cwd (or any ancestor up to the filesystem\n *    root) contains `.kb/kb.config.{json,jsonc}`.\n *  - Otherwise the default is `platform`.\n *  - `--scope` always overrides detection.\n *  - For scope=\"project\" we return the absolute projectRoot so the daemon\n *    doesn't need to re-discover it.\n */\n\nimport { findProjectConfigRoot } from '@kb-labs/core-workspace';\nimport type { MarketplaceScope, MarketplaceQueryScope } from '@kb-labs/marketplace-contracts';\n\nexport const SCOPE_FLAG_CHOICES: readonly MarketplaceScope[] = ['platform', 'project'];\nexport const QUERY_SCOPE_FLAG_CHOICES: readonly MarketplaceQueryScope[] = ['platform', 'project', 'all'];\n\nexport interface ResolvedCliScope {\n  scope: MarketplaceScope;\n  projectRoot?: string;\n  /** How the scope was determined — surfaces in --verbose logs. */\n  reason: 'flag' | 'auto-detect' | 'fallback';\n}\n\nexport interface ResolvedCliQueryScope extends Omit<ResolvedCliScope, 'scope'> {\n  scope: MarketplaceQueryScope;\n}\n\n/**\n * Resolve the effective scope for a mutating command (`link`, `unlink`,\n * `install`, ...). `flag` is the value of `--scope` (if supplied). The\n * helper never returns `'all'` for mutating commands — callers restrict\n * choices via `SCOPE_FLAG_CHOICES`.\n */\nexport async function resolveCliScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliScope> {\n  if (flag) {\n    assertMutatingScope(flag);\n    if (flag === 'project') {\n      const projectRoot = await findProjectConfigRoot(cwd);\n      if (!projectRoot) {\n        throw new CliScopeError(\n          'SCOPE_PROJECT_ROOT_NOT_FOUND',\n          `--scope=project requires a .kb/kb.config.{json,jsonc} ancestor of ${cwd} — none found.`,\n        );\n      }\n      return { scope: 'project', projectRoot, reason: 'flag' };\n    }\n    return { scope: 'platform', reason: 'flag' };\n  }\n\n  const projectRoot = await findProjectConfigRoot(cwd);\n  if (projectRoot) {\n    return { scope: 'project', projectRoot, reason: 'auto-detect' };\n  }\n  return { scope: 'platform', reason: 'fallback' };\n}\n\n/**\n * Resolve the effective scope for a read-only command (`list`). Accepts\n * `'all'` as an explicit flag value.\n */\nexport async function resolveCliQueryScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliQueryScope> {\n  if (flag === 'all') {\n    const projectRoot = await findProjectConfigRoot(cwd);\n    return { scope: 'all', projectRoot, reason: 'flag' };\n  }\n  const base = await resolveCliScope(cwd, flag);\n  return { scope: base.scope, projectRoot: base.projectRoot, reason: base.reason };\n}\n\nfunction assertMutatingScope(value: string): asserts value is MarketplaceScope {\n  if (!SCOPE_FLAG_CHOICES.includes(value as MarketplaceScope)) {\n    throw new CliScopeError(\n      'SCOPE_INVALID',\n      `--scope must be one of: ${SCOPE_FLAG_CHOICES.join(', ')} (got ${JSON.stringify(value)})`,\n    );\n  }\n}\n\nexport class CliScopeError extends Error {\n  readonly code: string;\n  constructor(code: string, message: string) {\n    super(message);\n    this.code = code;\n    this.name = 'CliScopeError';\n  }\n}\n\n/**\n * Build the body-payload fragment expected by `parseMutatingScope` on the\n * API side: `{ scope, projectRoot? }`. Kept as a helper so every command\n * sends the same shape and nothing drifts out-of-sync with the server.\n */\nexport function scopeBody(ctx: ResolvedCliScope | ResolvedCliQueryScope): {\n  scope: MarketplaceScope | MarketplaceQueryScope;\n  projectRoot?: string;\n} {\n  return {\n    scope: ctx.scope,\n    ...(ctx.projectRoot ? { projectRoot: ctx.projectRoot } : {}),\n  };\n}\n","import { defineCommand, useEnv, validationError, handleError, type PluginContextV3, type CommandResult } from '@kb-labs/sdk';\nimport { post } from '../http.js';\nimport { resolveCliScope, scopeBody, CliScopeError } from '../scope.js';\nimport * as fs from 'node:fs/promises';\nimport * as path from 'node:path';\n\ninterface SyncFlags {\n  'auto-enable'?: boolean;\n  json?: boolean;\n  scope?: string;\n  'dry-run'?: boolean;\n}\n\ninterface SyncInput {\n  argv?: string[];\n  flags?: SyncFlags;\n}\n\ninterface SyncEntry {\n  id: string;\n  primaryKind: string;\n  version: string;\n}\n\ninterface SyncResultData {\n  added: SyncEntry[];\n  skipped: Array<{ id: string; reason: string }>;\n  total: number;\n}\n\nexport default defineCommand<unknown, SyncInput, SyncResultData>({\n  id: 'marketplace:sync',\n  description: 'Sync workspace — scan for entities and populate lock',\n\n  handler: {\n    async intent(_ctx: PluginContextV3, _input: SyncInput) {\n      return {\n        summary: 'Sync workspace — scan for entities and populate lock file',\n        operations: [\n          { type: 'update' as const, resource: 'marketplace-lock', details: { action: 'sync-workspace' } },\n        ],\n      };\n    },\n\n    async execute(ctx: PluginContextV3, input: SyncInput): Promise<CommandResult<SyncResultData>> {\n      const flags = (input.flags ?? input) as SyncFlags;\n      const cwd = ctx.cwd ?? process.cwd();\n\n      let scopeCtx;\n      try {\n        scopeCtx = await resolveCliScope(cwd, flags.scope);\n      } catch (err) {\n        if (err instanceof CliScopeError) {\n          validationError(ctx, err.message, undefined, flags.json);\n        } else {\n          handleError(ctx, err, flags.json);\n        }\n        return { ok: false, error: 'Marketplace scope is not configured', result: { added: [], skipped: [], total: 0 } };\n      }\n\n      // Sync reads include/exclude patterns from the config file located at\n      // the scope root, not from the CLI cwd. This keeps semantics consistent:\n      // `--scope project` syncs using the project's config, `--scope platform`\n      // uses the platform config.\n      const configRoot = scopeCtx.scope === 'project' && scopeCtx.projectRoot\n        ? scopeCtx.projectRoot\n        : cwd;\n      const syncConfig = await loadSyncConfig(configRoot);\n\n      if (!syncConfig.include?.length) {\n        validationError(\n          ctx,\n          `No marketplace.sync.include configured.\\n\\nAdd to ${configRoot}/.kb/kb.config.json:\\n\\n  \"marketplace\": {\\n    \"sync\": {\\n      \"include\": [\"plugins/*/entry\", \"plugins/*/core\", \"adapters/*\"]\\n    }\\n  }`,\n          undefined,\n          flags.json,\n        );\n        return { ok: false, error: 'No marketplace.sync.include configured', result: { added: [], skipped: [], total: 0 } };\n      }\n\n      try {\n        const isDev = (useEnv('NODE_ENV') ?? 'development') === 'development';\n        const result = await post<SyncResultData>('/workspace/sync', {\n          include: syncConfig.include,\n          exclude: syncConfig.exclude,\n          autoEnable: flags['auto-enable'] !== undefined ? Boolean(flags['auto-enable']) : isDev,\n          ...scopeBody(scopeCtx),\n        });\n\n        if (flags.json) {\n          ctx.ui?.json?.(result);\n        } else if (result.added.length === 0) {\n          ctx.ui?.info?.(`Lock is up to date — ${scopeCtx.scope} (${result.total} entries)`);\n        } else {\n          ctx.ui?.success?.(`Synced ${result.added.length} new entries to ${scopeCtx.scope} (${result.total} total)`, {\n            sections: [{\n              header: 'Added',\n              items: result.added.map(e => `+ ${e.id} (${e.primaryKind}) v${e.version}`),\n            }],\n          });\n        }\n\n        return { ok: true, result };\n      } catch (err) {\n        handleError(ctx, err, flags.json);\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { added: [], skipped: [], total: 0 } };\n      }\n    },\n  },\n});\n\nasync function loadSyncConfig(root: string): Promise<{ include?: string[]; exclude?: string[] }> {\n  for (const name of ['kb.config.jsonc', 'kb.config.json']) {\n    const p = path.join(root, '.kb', name);\n    try {\n      const raw = await fs.readFile(p, 'utf-8');\n      // .json files are strict JSON — strip only for .jsonc to avoid mangling URLs (e.g. ws://).\n      const parsed = JSON.parse(name.endsWith('.jsonc') ? stripJsonc(raw) : raw);\n      return parsed?.marketplace?.sync ?? {};\n    } catch { continue; }\n  }\n  return {};\n}\n\n/** Minimal JSONC stripper — removes // line and /* block comments plus trailing commas. */\nfunction stripJsonc(src: string): string {\n  return src\n    .replace(/\\/\\*[\\s\\S]*?\\*\\//g, '')\n    .replace(/(^|[^:])\\/\\/.*$/gm, '$1')\n    .replace(/,(\\s*[}\\]])/g, '$1');\n}\n"]}

package/dist/commands/uninstall.js

@@ -63,6 +63,9 @@ async function request(method, path, body, params) {
         auth = await auth.refresh();
         continue;
       }
+      if (response.status === 401 && !auth) {
+        throw new Error("Marketplace authentication is required. Run `kb auth login` or choose local no-auth mode during installation.");
+      }
       if (!response.ok) {
         const text = await response.text();
         throw new Error(`Marketplace ${path} failed (${response.status}): ${text}`);

package/dist/commands/uninstall.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/http.ts","../../src/scope.ts","../../src/commands/uninstall.ts"],"names":["current","projectRoot"],"mappings":";;;;;AAQA,IAAM,mBAAA,GAAsB,uBAAA;AAC5B,IAAM,kBAAA,GAAqB,qBAAA;AAC3B,IAAM,gBAAA,GAAmB,GAAA;AAQzB,eAAe,QAAA,GAAsC;AACnD,EAAA,MAAM,cAAA,GAAiB,IAAI,cAAA,EAAe;AAC1C,EAAA,MAAM,OAAA,GAAU,MAAM,cAAA,CAAe,IAAA,EAAK;AAC1C,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,MAAMA,QAAAA,GAAU,eAAe,SAAA,CAAU,OAAO,IAAI,MAAM,cAAA,CAAe,OAAA,CAAQ,OAAO,CAAA,GAAI,OAAA;AAC5F,IAAA,OAAO,UAAUA,QAAAA,EAAS,MAAM,cAAA,CAAe,OAAA,CAAQA,QAAO,CAAC,CAAA;AAAA,EACjE;AAEA,EAAA,MAAM,kBAAA,GAAqB,IAAI,kBAAA,EAAmB;AAClD,EAAA,MAAM,WAAA,GAAc,MAAM,kBAAA,CAAmB,IAAA,EAAK;AAClD,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,OAAA,GAAU,mBAAmB,SAAA,CAAU,WAAW,IAAI,MAAM,kBAAA,CAAmB,OAAA,CAAQ,WAAW,CAAA,GAAI,WAAA;AAC5G,EAAA,OAAO,UAAU,OAAA,EAAS,MAAM,kBAAA,CAAmB,OAAA,CAAQ,OAAO,CAAC,CAAA;AACrE;AAEA,SAAS,SAAA,CAAU,aAAsD,OAAA,EAA4E;AACnJ,EAAA,OAAO;AAAA,IACL,YAAY,WAAA,CAAY,UAAA;AAAA,IACxB,aAAa,WAAA,CAAY,WAAA;AAAA,IACzB,SAAS,YAAY;AACnB,MAAA,MAAM,OAAA,GAAU,MAAM,OAAA,EAAQ;AAC9B,MAAA,OAAO,SAAA,CAAU,SAAS,OAAO,CAAA;AAAA,IACnC;AAAA,GACF;AACF;AAEA,SAAS,WAAW,UAAA,EAA6B;AAC/C,EAAA,MAAM,cAAA,GAAiB,OAAO,oBAAoB,CAAA;AAClD,EAAA,IAAI,cAAA,EAAgB;AAClB,IAAA,OAAO,CAAA,EAAG,cAAc,CAAA,EAAG,kBAAkB,CAAA,CAAA;AAAA,EAC/C;AACA,EAAA,MAAM,OAAA,GAAU,UAAA,IAAc,MAAA,CAAO,gBAAgB,CAAA,IAAK,mBAAA;AAC1D,EAAA,OAAO,CAAA,EAAG,OAAO,CAAA,EAAG,kBAAkB,CAAA,CAAA;AACxC;AAEA,eAAe,OAAA,CAAW,MAAA,EAAgB,IAAA,EAAc,IAAA,EAAgC,MAAA,EAA6C;AACnI,EAAA,IAAI,IAAA,GAAO,MAAM,QAAA,EAAS;AAC1B,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,CAAA,EAAG,UAAA,CAAW,MAAM,UAAU,CAAC,CAAA,EAAG,IAAI,CAAA,CAAE,CAAA;AAK5D,EAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,GAAU,CAAA,EAAG,WAAW,CAAA,EAAG;AAC/C,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,gBAAgB,CAAA;AACnE,IAAA,IAAI;AACF,MAAA,MAAM,UAAkC,EAAC;AACzC,MAAA,IAAI,IAAA,EAAM;AAAE,QAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAAA,MAAoB;AAC1D,MAAA,IAAI,IAAA,EAAM;AAAE,QAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,IAAA,CAAK,WAAW,CAAA,CAAA;AAAA,MAAI;AAClE,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,CAAI,UAAS,EAAG;AAAA,QAC3C,MAAA;AAAA,QACA,OAAA;AAAA,QACA,IAAA,EAAM,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,GAAI,KAAA,CAAA;AAAA,QACpC,QAAQ,UAAA,CAAW;AAAA,OACpB,CAAA;AACD,MAAA,IAAI,QAAA,CAAS,MAAA,KAAW,GAAA,IAAO,IAAA,IAAQ,YAAY,CAAA,EAAG;AACpD,QAAA,IAAA,GAAO,MAAM,KAAK,OAAA,EAAQ;AAC1B,QAAA;AAAA,MACF;AACA,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,QAAA,MAAM,IAAI,MAAM,CAAA,YAAA,EAAe,IAAI,YAAY,QAAA,CAAS,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,CAAE,CAAA;AAAA,MAC5E;AACA,MAAA,IAAI,QAAA,CAAS,WAAW,GAAA,EAAK;AAAE,QAAA,OAAO,KAAA,CAAA;AAAA,MAAgB;AACtD,MAAA,OAAO,MAAM,SAAS,IAAA,EAAK;AAAA,IAC7B,SAAS,GAAA,EAAK;AACZ,MAAA,IAAK,GAAA,CAAc,SAAS,YAAA,EAAc;AACxC,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,gFAAA,CAA6E,CAAA;AAAA,MAClH;AACA,MAAA,MAAM,GAAA;AAAA,IACR,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAAA,IACpB;AAAA,EACF;AACA,EAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,uCAAA,CAAyC,CAAA;AAC9E;AAEA,eAAsB,IAAA,CAAkB,MAAc,IAAA,EAA2C;AAC/F,EAAA,OAAO,OAAA,CAAW,MAAA,EAAQ,IAAA,EAAM,IAAI,CAAA;AACtC;AC/EO,IAAM,kBAAA,GAAkD,CAAC,UAAA,EAAY,SAAS,CAAA;AAoBrF,eAAsB,eAAA,CACpB,KACA,IAAA,EAC2B;AAC3B,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,mBAAA,CAAoB,IAAI,CAAA;AACxB,IAAA,IAAI,SAAS,SAAA,EAAW;AACtB,MAAA,MAAMC,YAAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,MAAA,IAAI,CAACA,YAAAA,EAAa;AAChB,QAAA,MAAM,IAAI,aAAA;AAAA,UACR,8BAAA;AAAA,UACA,qEAAqE,GAAG,CAAA,mBAAA;AAAA,SAC1E;AAAA,MACF;AACA,MAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAAA,YAAAA,EAAa,QAAQ,MAAA,EAAO;AAAA,IACzD;AACA,IAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,MAAA,EAAO;AAAA,EAC7C;AAEA,EAAA,MAAM,WAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAa,QAAQ,aAAA,EAAc;AAAA,EAChE;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,UAAA,EAAW;AACjD;AAkBA,SAAS,oBAAoB,KAAA,EAAkD;AAC7E,EAAA,IAAI,CAAC,kBAAA,CAAmB,QAAA,CAAS,KAAyB,CAAA,EAAG;AAC3D,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,eAAA;AAAA,MACA,CAAA,wBAAA,EAA2B,mBAAmB,IAAA,CAAK,IAAI,CAAC,CAAA,MAAA,EAAS,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC,CAAA,CAAA;AAAA,KACxF;AAAA,EACF;AACF;AAEO,IAAM,aAAA,GAAN,cAA4B,KAAA,CAAM;AAAA,EAC9B,IAAA;AAAA,EACT,WAAA,CAAY,MAAc,OAAA,EAAiB;AACzC,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AAAA,EACd;AACF,CAAA;AAOO,SAAS,UAAU,GAAA,EAGxB;AACA,EAAA,OAAO;AAAA,IACL,OAAO,GAAA,CAAI,KAAA;AAAA,IACX,GAAI,IAAI,WAAA,GAAc,EAAE,aAAa,GAAA,CAAI,WAAA,KAAgB;AAAC,GAC5D;AACF;;;AClGA,IAAO,oBAAQ,aAAA,CAA6E;AAAA,EAC1F,EAAA,EAAI,uBAAA;AAAA,EACJ,WAAA,EAAa,uCAAA;AAAA,EAEb,OAAA,EAAS;AAAA,IACP,MAAM,MAAA,CAAO,IAAA,EAAuB,KAAA,EAAuB;AACzD,MAAA,MAAM,IAAA,GAAO,KAAA,CAAM,IAAA,IAAQ,EAAC;AAC5B,MAAA,MAAM,WAAW,IAAA,CAAK,MAAA,GAAS,CAAA,GAAI,IAAA,GAAO,CAAC,yBAAyB,CAAA;AACpE,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,CAAA,UAAA,EAAa,QAAA,CAAS,IAAA,CAAK,IAAI,CAAC,CAAA,iBAAA,CAAA;AAAA,QACzC,UAAA,EAAY,QAAA,CAAS,GAAA,CAAI,CAAA,GAAA,MAAQ;AAAA,UAC/B,IAAA,EAAM,QAAA;AAAA,UACN,QAAA,EAAU,qBAAA;AAAA,UACV,OAAA,EAAS,EAAE,OAAA,EAAS,GAAA;AAAI,SAC1B,CAAE;AAAA,OACJ;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,OAAA,CAAQ,GAAA,EAAsB,KAAA,EAAqF;AACvH,MAAA,MAAM,IAAA,GAAO,KAAA,CAAM,IAAA,IAAQ,EAAC;AAC5B,MAAA,MAAM,KAAA,GAAS,MAAM,KAAA,IAAS,KAAA;AAE9B,MAAA,IAAI,IAAA,CAAK,WAAW,CAAA,EAAG;AACrB,QAAA,eAAA,CAAgB,GAAA,EAAK,kDAAA,EAAoD,2CAAA,EAA6C,KAAA,CAAM,IAAI,CAAA;AAChI,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,kDAAA,EAAoD,MAAA,EAAQ,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAO,EAAA,EAAG,EAAE;AAAA,MACpH;AAEA,MAAA,IAAI,QAAA;AACJ,MAAA,IAAI;AACF,QAAA,QAAA,GAAW,MAAM,eAAA,CAAgB,GAAA,CAAI,GAAA,EAAK,MAAM,KAAK,CAAA;AAAA,MACvD,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,eAAe,aAAA,EAAe;AAChC,UAAA,eAAA,CAAgB,GAAA,EAAK,GAAA,CAAI,OAAA,EAAS,MAAA,EAAW,MAAM,IAAI,CAAA;AAAA,QACzD,CAAA,MAAO;AACL,UAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAAA,QAClC;AACA,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,OAAO,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAA,EAAG,QAAQ,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAO,IAAG,EAAE;AAAA,MAClH;AAEA,MAAA,IAAI;AAGF,QAAA,MAAM,KAAK,qBAAA,EAAuB;AAAA,UAChC,UAAA,EAAY,IAAA;AAAA,UACZ,GAAG,UAAU,QAAQ;AAAA,SACtB,CAAA;AAED,QAAA,IAAI,MAAM,IAAA,EAAM;AACd,UAAA,GAAA,CAAI,EAAA,EAAI,IAAA,GAAO,EAAE,EAAA,EAAI,IAAA,EAAM,SAAS,IAAA,EAAM,KAAA,EAAO,QAAA,CAAS,KAAA,EAAO,CAAA;AAAA,QACnE,CAAA,MAAO;AACL,UAAA,GAAA,CAAI,EAAA,EAAI,OAAA,GAAU,CAAA,aAAA,EAAgB,QAAA,CAAS,KAAK,KAAK,IAAA,CAAK,IAAA,CAAK,IAAI,CAAC,CAAA,CAAE,CAAA;AAAA,QACxE;AACA,QAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,MAAA,EAAQ,EAAE,SAAS,IAAA,EAAM,KAAA,EAAO,QAAA,CAAS,KAAA,EAAM,EAAE;AAAA,MACtE,SAAS,GAAA,EAAK;AACZ,QAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAChC,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,OAAO,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAA,EAAG,QAAQ,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAO,IAAG,EAAE;AAAA,MAClH;AAAA,IACF;AAAA;AAEJ,CAAC","file":"uninstall.js","sourcesContent":["/**\n * HTTP client for marketplace service via Gateway.\n */\n\nimport { useEnv } from '@kb-labs/sdk';\nimport { CredentialsManager, SessionManager } from '@kb-labs/cli-runtime/gateway';\nimport type { GatewayCredentials, SessionCredentials } from '@kb-labs/cli-runtime/gateway';\n\nconst DEFAULT_GATEWAY_URL = 'http://127.0.0.1:4000';\nconst MARKETPLACE_PREFIX = '/api/v1/marketplace';\nconst FETCH_TIMEOUT_MS = 30_000;\n\ntype AuthState = {\n  gatewayUrl: string;\n  accessToken: string;\n  refresh: () => Promise<AuthState>;\n};\n\nasync function loadAuth(): Promise<AuthState | null> {\n  const sessionManager = new SessionManager();\n  const session = await sessionManager.load();\n  if (session) {\n    const current = sessionManager.isExpired(session) ? await sessionManager.refresh(session) : session;\n    return authState(current, () => sessionManager.refresh(current));\n  }\n\n  const credentialsManager = new CredentialsManager();\n  const credentials = await credentialsManager.load();\n  if (!credentials) {\n    return null;\n  }\n  const current = credentialsManager.isExpired(credentials) ? await credentialsManager.refresh(credentials) : credentials;\n  return authState(current, () => credentialsManager.refresh(current));\n}\n\nfunction authState(credentials: GatewayCredentials | SessionCredentials, refresh: () => Promise<GatewayCredentials | SessionCredentials>): AuthState {\n  return {\n    gatewayUrl: credentials.gatewayUrl,\n    accessToken: credentials.accessToken,\n    refresh: async () => {\n      const updated = await refresh();\n      return authState(updated, refresh);\n    },\n  };\n}\n\nfunction getBaseUrl(gatewayUrl?: string): string {\n  const marketplaceUrl = useEnv('KB_MARKETPLACE_URL');\n  if (marketplaceUrl) {\n    return `${marketplaceUrl}${MARKETPLACE_PREFIX}`;\n  }\n  const gateway = gatewayUrl ?? useEnv('KB_GATEWAY_URL') ?? DEFAULT_GATEWAY_URL;\n  return `${gateway}${MARKETPLACE_PREFIX}`;\n}\n\nasync function request<T>(method: string, path: string, body?: Record<string, unknown>, params?: Record<string, string>): Promise<T> {\n  let auth = await loadAuth();\n  const url = new URL(`${getBaseUrl(auth?.gatewayUrl)}${path}`);\n  if (params) {\n    for (const [key, value] of Object.entries(params)) { url.searchParams.set(key, value); }\n  }\n\n  for (let attempt = 0; attempt < 2; attempt += 1) {\n    const controller = new AbortController();\n    const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n    try {\n      const headers: Record<string, string> = {};\n      if (body) { headers['Content-Type'] = 'application/json'; }\n      if (auth) { headers.Authorization = `Bearer ${auth.accessToken}`; }\n      const response = await fetch(url.toString(), {\n        method,\n        headers,\n        body: body ? JSON.stringify(body) : undefined,\n        signal: controller.signal,\n      });\n      if (response.status === 401 && auth && attempt === 0) {\n        auth = await auth.refresh();\n        continue;\n      }\n      if (!response.ok) {\n        const text = await response.text();\n        throw new Error(`Marketplace ${path} failed (${response.status}): ${text}`);\n      }\n      if (response.status === 204) { return undefined as T; }\n      return await response.json() as T;\n    } catch (err) {\n      if ((err as Error).name === 'AbortError') {\n        throw new Error(`Marketplace ${path} timed out — is the marketplace service running? (kb-dev start marketplace)`);\n      }\n      throw err;\n    } finally {\n      clearTimeout(timer);\n    }\n  }\n  throw new Error(`Marketplace ${path} failed after refreshing authentication`);\n}\n\nexport async function post<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('POST', path, body);\n}\n\nexport async function patch<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('PATCH', path, body);\n}\n\nexport async function del<T = unknown>(path: string, body?: Record<string, unknown>): Promise<T> {\n  return request<T>('DELETE', path, body);\n}\n\nexport async function get<T = unknown>(path: string, params?: Record<string, string>): Promise<T> {\n  return request<T>('GET', path, undefined, params);\n}\n","/**\n * @module @kb-labs/marketplace-entry/scope\n *\n * Client-side scope resolution for marketplace CLI commands. Uses the\n * canonical `findProjectConfigRoot` helper from `@kb-labs/core-workspace`\n * so the detection rules (which filenames count, how walk-up stops) match\n * what the config loader and the marketplace daemon enforce.\n *\n * Rules:\n *  - `project` is the default if cwd (or any ancestor up to the filesystem\n *    root) contains `.kb/kb.config.{json,jsonc}`.\n *  - Otherwise the default is `platform`.\n *  - `--scope` always overrides detection.\n *  - For scope=\"project\" we return the absolute projectRoot so the daemon\n *    doesn't need to re-discover it.\n */\n\nimport { findProjectConfigRoot } from '@kb-labs/core-workspace';\nimport type { MarketplaceScope, MarketplaceQueryScope } from '@kb-labs/marketplace-contracts';\n\nexport const SCOPE_FLAG_CHOICES: readonly MarketplaceScope[] = ['platform', 'project'];\nexport const QUERY_SCOPE_FLAG_CHOICES: readonly MarketplaceQueryScope[] = ['platform', 'project', 'all'];\n\nexport interface ResolvedCliScope {\n  scope: MarketplaceScope;\n  projectRoot?: string;\n  /** How the scope was determined — surfaces in --verbose logs. */\n  reason: 'flag' | 'auto-detect' | 'fallback';\n}\n\nexport interface ResolvedCliQueryScope extends Omit<ResolvedCliScope, 'scope'> {\n  scope: MarketplaceQueryScope;\n}\n\n/**\n * Resolve the effective scope for a mutating command (`link`, `unlink`,\n * `install`, ...). `flag` is the value of `--scope` (if supplied). The\n * helper never returns `'all'` for mutating commands — callers restrict\n * choices via `SCOPE_FLAG_CHOICES`.\n */\nexport async function resolveCliScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliScope> {\n  if (flag) {\n    assertMutatingScope(flag);\n    if (flag === 'project') {\n      const projectRoot = await findProjectConfigRoot(cwd);\n      if (!projectRoot) {\n        throw new CliScopeError(\n          'SCOPE_PROJECT_ROOT_NOT_FOUND',\n          `--scope=project requires a .kb/kb.config.{json,jsonc} ancestor of ${cwd} — none found.`,\n        );\n      }\n      return { scope: 'project', projectRoot, reason: 'flag' };\n    }\n    return { scope: 'platform', reason: 'flag' };\n  }\n\n  const projectRoot = await findProjectConfigRoot(cwd);\n  if (projectRoot) {\n    return { scope: 'project', projectRoot, reason: 'auto-detect' };\n  }\n  return { scope: 'platform', reason: 'fallback' };\n}\n\n/**\n * Resolve the effective scope for a read-only command (`list`). Accepts\n * `'all'` as an explicit flag value.\n */\nexport async function resolveCliQueryScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliQueryScope> {\n  if (flag === 'all') {\n    const projectRoot = await findProjectConfigRoot(cwd);\n    return { scope: 'all', projectRoot, reason: 'flag' };\n  }\n  const base = await resolveCliScope(cwd, flag);\n  return { scope: base.scope, projectRoot: base.projectRoot, reason: base.reason };\n}\n\nfunction assertMutatingScope(value: string): asserts value is MarketplaceScope {\n  if (!SCOPE_FLAG_CHOICES.includes(value as MarketplaceScope)) {\n    throw new CliScopeError(\n      'SCOPE_INVALID',\n      `--scope must be one of: ${SCOPE_FLAG_CHOICES.join(', ')} (got ${JSON.stringify(value)})`,\n    );\n  }\n}\n\nexport class CliScopeError extends Error {\n  readonly code: string;\n  constructor(code: string, message: string) {\n    super(message);\n    this.code = code;\n    this.name = 'CliScopeError';\n  }\n}\n\n/**\n * Build the body-payload fragment expected by `parseMutatingScope` on the\n * API side: `{ scope, projectRoot? }`. Kept as a helper so every command\n * sends the same shape and nothing drifts out-of-sync with the server.\n */\nexport function scopeBody(ctx: ResolvedCliScope | ResolvedCliQueryScope): {\n  scope: MarketplaceScope | MarketplaceQueryScope;\n  projectRoot?: string;\n} {\n  return {\n    scope: ctx.scope,\n    ...(ctx.projectRoot ? { projectRoot: ctx.projectRoot } : {}),\n  };\n}\n","import { defineCommand, validationError, handleError, type PluginContextV3, type CommandResult } from '@kb-labs/sdk';\nimport { post } from '../http.js';\nimport { resolveCliScope, scopeBody, CliScopeError } from '../scope.js';\n\ninterface UninstallFlags {\n  json?: boolean;\n  scope?: string;\n  'dry-run'?: boolean;\n}\n\ninterface UninstallInput {\n  argv?: string[];\n  flags?: UninstallFlags;\n}\n\nexport default defineCommand<unknown, UninstallInput, { removed: string[]; scope: string }>({\n  id: 'marketplace:uninstall',\n  description: 'Uninstall package(s) from marketplace',\n\n  handler: {\n    async intent(_ctx: PluginContextV3, input: UninstallInput) {\n      const argv = input.argv ?? [];\n      const packages = argv.length > 0 ? argv : ['(no packages specified)'];\n      return {\n        summary: `Uninstall ${packages.join(', ')} from marketplace`,\n        operations: packages.map(pkg => ({\n          type: 'delete' as const,\n          resource: 'marketplace-package',\n          details: { package: pkg },\n        })),\n      };\n    },\n\n    async execute(ctx: PluginContextV3, input: UninstallInput): Promise<CommandResult<{ removed: string[]; scope: string }>> {\n      const argv = input.argv ?? [];\n      const flags = (input.flags ?? input) as UninstallFlags;\n\n      if (argv.length === 0) {\n        validationError(ctx, 'Please specify at least one package to uninstall', 'Usage: kb marketplace uninstall <package>', flags.json);\n        return { ok: false, error: 'Please specify at least one package to uninstall', result: { removed: [], scope: '' } };\n      }\n\n      let scopeCtx;\n      try {\n        scopeCtx = await resolveCliScope(ctx.cwd, flags.scope);\n      } catch (err) {\n        if (err instanceof CliScopeError) {\n          validationError(ctx, err.message, undefined, flags.json);\n        } else {\n          handleError(ctx, err, flags.json);\n        }\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { removed: [], scope: '' } };\n      }\n\n      try {\n        // Server returns 204 on success; treat that as \"everything you asked for\n        // was removed\" so the CLI has something to render.\n        await post('/packages/uninstall', {\n          packageIds: argv,\n          ...scopeBody(scopeCtx),\n        });\n\n        if (flags.json) {\n          ctx.ui?.json?.({ ok: true, removed: argv, scope: scopeCtx.scope });\n        } else {\n          ctx.ui?.success?.(`Removed from ${scopeCtx.scope}: ${argv.join(', ')}`);\n        }\n        return { ok: true, result: { removed: argv, scope: scopeCtx.scope } };\n      } catch (err) {\n        handleError(ctx, err, flags.json);\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { removed: [], scope: '' } };\n      }\n    },\n  },\n});\n"]}
+{"version":3,"sources":["../../src/http.ts","../../src/scope.ts","../../src/commands/uninstall.ts"],"names":["current","projectRoot"],"mappings":";;;;;AAQA,IAAM,mBAAA,GAAsB,uBAAA;AAC5B,IAAM,kBAAA,GAAqB,qBAAA;AAC3B,IAAM,gBAAA,GAAmB,GAAA;AAQzB,eAAe,QAAA,GAAsC;AACnD,EAAA,MAAM,cAAA,GAAiB,IAAI,cAAA,EAAe;AAC1C,EAAA,MAAM,OAAA,GAAU,MAAM,cAAA,CAAe,IAAA,EAAK;AAC1C,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,MAAMA,QAAAA,GAAU,eAAe,SAAA,CAAU,OAAO,IAAI,MAAM,cAAA,CAAe,OAAA,CAAQ,OAAO,CAAA,GAAI,OAAA;AAC5F,IAAA,OAAO,UAAUA,QAAAA,EAAS,MAAM,cAAA,CAAe,OAAA,CAAQA,QAAO,CAAC,CAAA;AAAA,EACjE;AAEA,EAAA,MAAM,kBAAA,GAAqB,IAAI,kBAAA,EAAmB;AAClD,EAAA,MAAM,WAAA,GAAc,MAAM,kBAAA,CAAmB,IAAA,EAAK;AAClD,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,OAAA,GAAU,mBAAmB,SAAA,CAAU,WAAW,IAAI,MAAM,kBAAA,CAAmB,OAAA,CAAQ,WAAW,CAAA,GAAI,WAAA;AAC5G,EAAA,OAAO,UAAU,OAAA,EAAS,MAAM,kBAAA,CAAmB,OAAA,CAAQ,OAAO,CAAC,CAAA;AACrE;AAEA,SAAS,SAAA,CAAU,aAAsD,OAAA,EAA4E;AACnJ,EAAA,OAAO;AAAA,IACL,YAAY,WAAA,CAAY,UAAA;AAAA,IACxB,aAAa,WAAA,CAAY,WAAA;AAAA,IACzB,SAAS,YAAY;AACnB,MAAA,MAAM,OAAA,GAAU,MAAM,OAAA,EAAQ;AAC9B,MAAA,OAAO,SAAA,CAAU,SAAS,OAAO,CAAA;AAAA,IACnC;AAAA,GACF;AACF;AAEA,SAAS,WAAW,UAAA,EAA6B;AAC/C,EAAA,MAAM,cAAA,GAAiB,OAAO,oBAAoB,CAAA;AAClD,EAAA,IAAI,cAAA,EAAgB;AAClB,IAAA,OAAO,CAAA,EAAG,cAAc,CAAA,EAAG,kBAAkB,CAAA,CAAA;AAAA,EAC/C;AACA,EAAA,MAAM,OAAA,GAAU,UAAA,IAAc,MAAA,CAAO,gBAAgB,CAAA,IAAK,mBAAA;AAC1D,EAAA,OAAO,CAAA,EAAG,OAAO,CAAA,EAAG,kBAAkB,CAAA,CAAA;AACxC;AAEA,eAAe,OAAA,CAAW,MAAA,EAAgB,IAAA,EAAc,IAAA,EAAgC,MAAA,EAA6C;AACnI,EAAA,IAAI,IAAA,GAAO,MAAM,QAAA,EAAS;AAC1B,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,CAAA,EAAG,UAAA,CAAW,MAAM,UAAU,CAAC,CAAA,EAAG,IAAI,CAAA,CAAE,CAAA;AAK5D,EAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,GAAU,CAAA,EAAG,WAAW,CAAA,EAAG;AAC/C,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,gBAAgB,CAAA;AACnE,IAAA,IAAI;AACF,MAAA,MAAM,UAAkC,EAAC;AACzC,MAAA,IAAI,IAAA,EAAM;AAAE,QAAA,OAAA,CAAQ,cAAc,CAAA,GAAI,kBAAA;AAAA,MAAoB;AAC1D,MAAA,IAAI,IAAA,EAAM;AAAE,QAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,IAAA,CAAK,WAAW,CAAA,CAAA;AAAA,MAAI;AAClE,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,CAAI,UAAS,EAAG;AAAA,QAC3C,MAAA;AAAA,QACA,OAAA;AAAA,QACA,IAAA,EAAM,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,GAAI,KAAA,CAAA;AAAA,QACpC,QAAQ,UAAA,CAAW;AAAA,OACpB,CAAA;AACD,MAAA,IAAI,QAAA,CAAS,MAAA,KAAW,GAAA,IAAO,IAAA,IAAQ,YAAY,CAAA,EAAG;AACpD,QAAA,IAAA,GAAO,MAAM,KAAK,OAAA,EAAQ;AAC1B,QAAA;AAAA,MACF;AACA,MAAA,IAAI,QAAA,CAAS,MAAA,KAAW,GAAA,IAAO,CAAC,IAAA,EAAM;AACpC,QAAA,MAAM,IAAI,MAAM,+GAA+G,CAAA;AAAA,MACjI;AACA,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,QAAA,MAAM,IAAI,MAAM,CAAA,YAAA,EAAe,IAAI,YAAY,QAAA,CAAS,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,CAAE,CAAA;AAAA,MAC5E;AACA,MAAA,IAAI,QAAA,CAAS,WAAW,GAAA,EAAK;AAAE,QAAA,OAAO,KAAA,CAAA;AAAA,MAAgB;AACtD,MAAA,OAAO,MAAM,SAAS,IAAA,EAAK;AAAA,IAC7B,SAAS,GAAA,EAAK;AACZ,MAAA,IAAK,GAAA,CAAc,SAAS,YAAA,EAAc;AACxC,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,gFAAA,CAA6E,CAAA;AAAA,MAClH;AACA,MAAA,MAAM,GAAA;AAAA,IACR,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAAA,IACpB;AAAA,EACF;AACA,EAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,uCAAA,CAAyC,CAAA;AAC9E;AAEA,eAAsB,IAAA,CAAkB,MAAc,IAAA,EAA2C;AAC/F,EAAA,OAAO,OAAA,CAAW,MAAA,EAAQ,IAAA,EAAM,IAAI,CAAA;AACtC;AClFO,IAAM,kBAAA,GAAkD,CAAC,UAAA,EAAY,SAAS,CAAA;AAoBrF,eAAsB,eAAA,CACpB,KACA,IAAA,EAC2B;AAC3B,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,mBAAA,CAAoB,IAAI,CAAA;AACxB,IAAA,IAAI,SAAS,SAAA,EAAW;AACtB,MAAA,MAAMC,YAAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,MAAA,IAAI,CAACA,YAAAA,EAAa;AAChB,QAAA,MAAM,IAAI,aAAA;AAAA,UACR,8BAAA;AAAA,UACA,qEAAqE,GAAG,CAAA,mBAAA;AAAA,SAC1E;AAAA,MACF;AACA,MAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAAA,YAAAA,EAAa,QAAQ,MAAA,EAAO;AAAA,IACzD;AACA,IAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,MAAA,EAAO;AAAA,EAC7C;AAEA,EAAA,MAAM,WAAA,GAAc,MAAM,qBAAA,CAAsB,GAAG,CAAA;AACnD,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,WAAA,EAAa,QAAQ,aAAA,EAAc;AAAA,EAChE;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,UAAA,EAAW;AACjD;AAkBA,SAAS,oBAAoB,KAAA,EAAkD;AAC7E,EAAA,IAAI,CAAC,kBAAA,CAAmB,QAAA,CAAS,KAAyB,CAAA,EAAG;AAC3D,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,eAAA;AAAA,MACA,CAAA,wBAAA,EAA2B,mBAAmB,IAAA,CAAK,IAAI,CAAC,CAAA,MAAA,EAAS,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC,CAAA,CAAA;AAAA,KACxF;AAAA,EACF;AACF;AAEO,IAAM,aAAA,GAAN,cAA4B,KAAA,CAAM;AAAA,EAC9B,IAAA;AAAA,EACT,WAAA,CAAY,MAAc,OAAA,EAAiB;AACzC,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AAAA,EACd;AACF,CAAA;AAOO,SAAS,UAAU,GAAA,EAGxB;AACA,EAAA,OAAO;AAAA,IACL,OAAO,GAAA,CAAI,KAAA;AAAA,IACX,GAAI,IAAI,WAAA,GAAc,EAAE,aAAa,GAAA,CAAI,WAAA,KAAgB;AAAC,GAC5D;AACF;;;AClGA,IAAO,oBAAQ,aAAA,CAA6E;AAAA,EAC1F,EAAA,EAAI,uBAAA;AAAA,EACJ,WAAA,EAAa,uCAAA;AAAA,EAEb,OAAA,EAAS;AAAA,IACP,MAAM,MAAA,CAAO,IAAA,EAAuB,KAAA,EAAuB;AACzD,MAAA,MAAM,IAAA,GAAO,KAAA,CAAM,IAAA,IAAQ,EAAC;AAC5B,MAAA,MAAM,WAAW,IAAA,CAAK,MAAA,GAAS,CAAA,GAAI,IAAA,GAAO,CAAC,yBAAyB,CAAA;AACpE,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,CAAA,UAAA,EAAa,QAAA,CAAS,IAAA,CAAK,IAAI,CAAC,CAAA,iBAAA,CAAA;AAAA,QACzC,UAAA,EAAY,QAAA,CAAS,GAAA,CAAI,CAAA,GAAA,MAAQ;AAAA,UAC/B,IAAA,EAAM,QAAA;AAAA,UACN,QAAA,EAAU,qBAAA;AAAA,UACV,OAAA,EAAS,EAAE,OAAA,EAAS,GAAA;AAAI,SAC1B,CAAE;AAAA,OACJ;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,OAAA,CAAQ,GAAA,EAAsB,KAAA,EAAqF;AACvH,MAAA,MAAM,IAAA,GAAO,KAAA,CAAM,IAAA,IAAQ,EAAC;AAC5B,MAAA,MAAM,KAAA,GAAS,MAAM,KAAA,IAAS,KAAA;AAE9B,MAAA,IAAI,IAAA,CAAK,WAAW,CAAA,EAAG;AACrB,QAAA,eAAA,CAAgB,GAAA,EAAK,kDAAA,EAAoD,2CAAA,EAA6C,KAAA,CAAM,IAAI,CAAA;AAChI,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,kDAAA,EAAoD,MAAA,EAAQ,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAO,EAAA,EAAG,EAAE;AAAA,MACpH;AAEA,MAAA,IAAI,QAAA;AACJ,MAAA,IAAI;AACF,QAAA,QAAA,GAAW,MAAM,eAAA,CAAgB,GAAA,CAAI,GAAA,EAAK,MAAM,KAAK,CAAA;AAAA,MACvD,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,eAAe,aAAA,EAAe;AAChC,UAAA,eAAA,CAAgB,GAAA,EAAK,GAAA,CAAI,OAAA,EAAS,MAAA,EAAW,MAAM,IAAI,CAAA;AAAA,QACzD,CAAA,MAAO;AACL,UAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAAA,QAClC;AACA,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,OAAO,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAA,EAAG,QAAQ,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAO,IAAG,EAAE;AAAA,MAClH;AAEA,MAAA,IAAI;AAGF,QAAA,MAAM,KAAK,qBAAA,EAAuB;AAAA,UAChC,UAAA,EAAY,IAAA;AAAA,UACZ,GAAG,UAAU,QAAQ;AAAA,SACtB,CAAA;AAED,QAAA,IAAI,MAAM,IAAA,EAAM;AACd,UAAA,GAAA,CAAI,EAAA,EAAI,IAAA,GAAO,EAAE,EAAA,EAAI,IAAA,EAAM,SAAS,IAAA,EAAM,KAAA,EAAO,QAAA,CAAS,KAAA,EAAO,CAAA;AAAA,QACnE,CAAA,MAAO;AACL,UAAA,GAAA,CAAI,EAAA,EAAI,OAAA,GAAU,CAAA,aAAA,EAAgB,QAAA,CAAS,KAAK,KAAK,IAAA,CAAK,IAAA,CAAK,IAAI,CAAC,CAAA,CAAE,CAAA;AAAA,QACxE;AACA,QAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,MAAA,EAAQ,EAAE,SAAS,IAAA,EAAM,KAAA,EAAO,QAAA,CAAS,KAAA,EAAM,EAAE;AAAA,MACtE,SAAS,GAAA,EAAK;AACZ,QAAA,WAAA,CAAY,GAAA,EAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AAChC,QAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,OAAO,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAA,EAAG,QAAQ,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAO,IAAG,EAAE;AAAA,MAClH;AAAA,IACF;AAAA;AAEJ,CAAC","file":"uninstall.js","sourcesContent":["/**\n * HTTP client for marketplace service via Gateway.\n */\n\nimport { useEnv } from '@kb-labs/sdk';\nimport { CredentialsManager, SessionManager } from '@kb-labs/cli-runtime/gateway';\nimport type { GatewayCredentials, SessionCredentials } from '@kb-labs/cli-runtime/gateway';\n\nconst DEFAULT_GATEWAY_URL = 'http://127.0.0.1:4000';\nconst MARKETPLACE_PREFIX = '/api/v1/marketplace';\nconst FETCH_TIMEOUT_MS = 30_000;\n\ntype AuthState = {\n  gatewayUrl: string;\n  accessToken: string;\n  refresh: () => Promise<AuthState>;\n};\n\nasync function loadAuth(): Promise<AuthState | null> {\n  const sessionManager = new SessionManager();\n  const session = await sessionManager.load();\n  if (session) {\n    const current = sessionManager.isExpired(session) ? await sessionManager.refresh(session) : session;\n    return authState(current, () => sessionManager.refresh(current));\n  }\n\n  const credentialsManager = new CredentialsManager();\n  const credentials = await credentialsManager.load();\n  if (!credentials) {\n    return null;\n  }\n  const current = credentialsManager.isExpired(credentials) ? await credentialsManager.refresh(credentials) : credentials;\n  return authState(current, () => credentialsManager.refresh(current));\n}\n\nfunction authState(credentials: GatewayCredentials | SessionCredentials, refresh: () => Promise<GatewayCredentials | SessionCredentials>): AuthState {\n  return {\n    gatewayUrl: credentials.gatewayUrl,\n    accessToken: credentials.accessToken,\n    refresh: async () => {\n      const updated = await refresh();\n      return authState(updated, refresh);\n    },\n  };\n}\n\nfunction getBaseUrl(gatewayUrl?: string): string {\n  const marketplaceUrl = useEnv('KB_MARKETPLACE_URL');\n  if (marketplaceUrl) {\n    return `${marketplaceUrl}${MARKETPLACE_PREFIX}`;\n  }\n  const gateway = gatewayUrl ?? useEnv('KB_GATEWAY_URL') ?? DEFAULT_GATEWAY_URL;\n  return `${gateway}${MARKETPLACE_PREFIX}`;\n}\n\nasync function request<T>(method: string, path: string, body?: Record<string, unknown>, params?: Record<string, string>): Promise<T> {\n  let auth = await loadAuth();\n  const url = new URL(`${getBaseUrl(auth?.gatewayUrl)}${path}`);\n  if (params) {\n    for (const [key, value] of Object.entries(params)) { url.searchParams.set(key, value); }\n  }\n\n  for (let attempt = 0; attempt < 2; attempt += 1) {\n    const controller = new AbortController();\n    const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n    try {\n      const headers: Record<string, string> = {};\n      if (body) { headers['Content-Type'] = 'application/json'; }\n      if (auth) { headers.Authorization = `Bearer ${auth.accessToken}`; }\n      const response = await fetch(url.toString(), {\n        method,\n        headers,\n        body: body ? JSON.stringify(body) : undefined,\n        signal: controller.signal,\n      });\n      if (response.status === 401 && auth && attempt === 0) {\n        auth = await auth.refresh();\n        continue;\n      }\n      if (response.status === 401 && !auth) {\n        throw new Error('Marketplace authentication is required. Run `kb auth login` or choose local no-auth mode during installation.');\n      }\n      if (!response.ok) {\n        const text = await response.text();\n        throw new Error(`Marketplace ${path} failed (${response.status}): ${text}`);\n      }\n      if (response.status === 204) { return undefined as T; }\n      return await response.json() as T;\n    } catch (err) {\n      if ((err as Error).name === 'AbortError') {\n        throw new Error(`Marketplace ${path} timed out — is the marketplace service running? (kb-dev start marketplace)`);\n      }\n      throw err;\n    } finally {\n      clearTimeout(timer);\n    }\n  }\n  throw new Error(`Marketplace ${path} failed after refreshing authentication`);\n}\n\nexport async function post<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('POST', path, body);\n}\n\nexport async function patch<T = unknown>(path: string, body: Record<string, unknown>): Promise<T> {\n  return request<T>('PATCH', path, body);\n}\n\nexport async function del<T = unknown>(path: string, body?: Record<string, unknown>): Promise<T> {\n  return request<T>('DELETE', path, body);\n}\n\nexport async function get<T = unknown>(path: string, params?: Record<string, string>): Promise<T> {\n  return request<T>('GET', path, undefined, params);\n}\n","/**\n * @module @kb-labs/marketplace-entry/scope\n *\n * Client-side scope resolution for marketplace CLI commands. Uses the\n * canonical `findProjectConfigRoot` helper from `@kb-labs/core-workspace`\n * so the detection rules (which filenames count, how walk-up stops) match\n * what the config loader and the marketplace daemon enforce.\n *\n * Rules:\n *  - `project` is the default if cwd (or any ancestor up to the filesystem\n *    root) contains `.kb/kb.config.{json,jsonc}`.\n *  - Otherwise the default is `platform`.\n *  - `--scope` always overrides detection.\n *  - For scope=\"project\" we return the absolute projectRoot so the daemon\n *    doesn't need to re-discover it.\n */\n\nimport { findProjectConfigRoot } from '@kb-labs/core-workspace';\nimport type { MarketplaceScope, MarketplaceQueryScope } from '@kb-labs/marketplace-contracts';\n\nexport const SCOPE_FLAG_CHOICES: readonly MarketplaceScope[] = ['platform', 'project'];\nexport const QUERY_SCOPE_FLAG_CHOICES: readonly MarketplaceQueryScope[] = ['platform', 'project', 'all'];\n\nexport interface ResolvedCliScope {\n  scope: MarketplaceScope;\n  projectRoot?: string;\n  /** How the scope was determined — surfaces in --verbose logs. */\n  reason: 'flag' | 'auto-detect' | 'fallback';\n}\n\nexport interface ResolvedCliQueryScope extends Omit<ResolvedCliScope, 'scope'> {\n  scope: MarketplaceQueryScope;\n}\n\n/**\n * Resolve the effective scope for a mutating command (`link`, `unlink`,\n * `install`, ...). `flag` is the value of `--scope` (if supplied). The\n * helper never returns `'all'` for mutating commands — callers restrict\n * choices via `SCOPE_FLAG_CHOICES`.\n */\nexport async function resolveCliScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliScope> {\n  if (flag) {\n    assertMutatingScope(flag);\n    if (flag === 'project') {\n      const projectRoot = await findProjectConfigRoot(cwd);\n      if (!projectRoot) {\n        throw new CliScopeError(\n          'SCOPE_PROJECT_ROOT_NOT_FOUND',\n          `--scope=project requires a .kb/kb.config.{json,jsonc} ancestor of ${cwd} — none found.`,\n        );\n      }\n      return { scope: 'project', projectRoot, reason: 'flag' };\n    }\n    return { scope: 'platform', reason: 'flag' };\n  }\n\n  const projectRoot = await findProjectConfigRoot(cwd);\n  if (projectRoot) {\n    return { scope: 'project', projectRoot, reason: 'auto-detect' };\n  }\n  return { scope: 'platform', reason: 'fallback' };\n}\n\n/**\n * Resolve the effective scope for a read-only command (`list`). Accepts\n * `'all'` as an explicit flag value.\n */\nexport async function resolveCliQueryScope(\n  cwd: string,\n  flag: string | undefined,\n): Promise<ResolvedCliQueryScope> {\n  if (flag === 'all') {\n    const projectRoot = await findProjectConfigRoot(cwd);\n    return { scope: 'all', projectRoot, reason: 'flag' };\n  }\n  const base = await resolveCliScope(cwd, flag);\n  return { scope: base.scope, projectRoot: base.projectRoot, reason: base.reason };\n}\n\nfunction assertMutatingScope(value: string): asserts value is MarketplaceScope {\n  if (!SCOPE_FLAG_CHOICES.includes(value as MarketplaceScope)) {\n    throw new CliScopeError(\n      'SCOPE_INVALID',\n      `--scope must be one of: ${SCOPE_FLAG_CHOICES.join(', ')} (got ${JSON.stringify(value)})`,\n    );\n  }\n}\n\nexport class CliScopeError extends Error {\n  readonly code: string;\n  constructor(code: string, message: string) {\n    super(message);\n    this.code = code;\n    this.name = 'CliScopeError';\n  }\n}\n\n/**\n * Build the body-payload fragment expected by `parseMutatingScope` on the\n * API side: `{ scope, projectRoot? }`. Kept as a helper so every command\n * sends the same shape and nothing drifts out-of-sync with the server.\n */\nexport function scopeBody(ctx: ResolvedCliScope | ResolvedCliQueryScope): {\n  scope: MarketplaceScope | MarketplaceQueryScope;\n  projectRoot?: string;\n} {\n  return {\n    scope: ctx.scope,\n    ...(ctx.projectRoot ? { projectRoot: ctx.projectRoot } : {}),\n  };\n}\n","import { defineCommand, validationError, handleError, type PluginContextV3, type CommandResult } from '@kb-labs/sdk';\nimport { post } from '../http.js';\nimport { resolveCliScope, scopeBody, CliScopeError } from '../scope.js';\n\ninterface UninstallFlags {\n  json?: boolean;\n  scope?: string;\n  'dry-run'?: boolean;\n}\n\ninterface UninstallInput {\n  argv?: string[];\n  flags?: UninstallFlags;\n}\n\nexport default defineCommand<unknown, UninstallInput, { removed: string[]; scope: string }>({\n  id: 'marketplace:uninstall',\n  description: 'Uninstall package(s) from marketplace',\n\n  handler: {\n    async intent(_ctx: PluginContextV3, input: UninstallInput) {\n      const argv = input.argv ?? [];\n      const packages = argv.length > 0 ? argv : ['(no packages specified)'];\n      return {\n        summary: `Uninstall ${packages.join(', ')} from marketplace`,\n        operations: packages.map(pkg => ({\n          type: 'delete' as const,\n          resource: 'marketplace-package',\n          details: { package: pkg },\n        })),\n      };\n    },\n\n    async execute(ctx: PluginContextV3, input: UninstallInput): Promise<CommandResult<{ removed: string[]; scope: string }>> {\n      const argv = input.argv ?? [];\n      const flags = (input.flags ?? input) as UninstallFlags;\n\n      if (argv.length === 0) {\n        validationError(ctx, 'Please specify at least one package to uninstall', 'Usage: kb marketplace uninstall <package>', flags.json);\n        return { ok: false, error: 'Please specify at least one package to uninstall', result: { removed: [], scope: '' } };\n      }\n\n      let scopeCtx;\n      try {\n        scopeCtx = await resolveCliScope(ctx.cwd, flags.scope);\n      } catch (err) {\n        if (err instanceof CliScopeError) {\n          validationError(ctx, err.message, undefined, flags.json);\n        } else {\n          handleError(ctx, err, flags.json);\n        }\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { removed: [], scope: '' } };\n      }\n\n      try {\n        // Server returns 204 on success; treat that as \"everything you asked for\n        // was removed\" so the CLI has something to render.\n        await post('/packages/uninstall', {\n          packageIds: argv,\n          ...scopeBody(scopeCtx),\n        });\n\n        if (flags.json) {\n          ctx.ui?.json?.({ ok: true, removed: argv, scope: scopeCtx.scope });\n        } else {\n          ctx.ui?.success?.(`Removed from ${scopeCtx.scope}: ${argv.join(', ')}`);\n        }\n        return { ok: true, result: { removed: argv, scope: scopeCtx.scope } };\n      } catch (err) {\n        handleError(ctx, err, flags.json);\n        return { ok: false, error: err instanceof Error ? err.message : String(err), result: { removed: [], scope: '' } };\n      }\n    },\n  },\n});\n"]}

package/dist/commands/update.js

@@ -63,6 +63,9 @@ async function request(method, path, body, params) {
         auth = await auth.refresh();
         continue;
       }
+      if (response.status === 401 && !auth) {
+        throw new Error("Marketplace authentication is required. Run `kb auth login` or choose local no-auth mode during installation.");
+      }
       if (!response.ok) {
         const text = await response.text();
         throw new Error(`Marketplace ${path} failed (${response.status}): ${text}`);