@kb-labs/marketplace-npm 0.1.1

package/README.md

@@ -0,0 +1,75 @@
+# @product-name/package-name
+
+Baseline library package inside KB Labs Product Template.
+
+## Vision & Purpose
+
+**@product-name/package-name** is a minimal example library shipped with `kb-labs-product-template`.  
+It shows how a typical package is structured (source, tests, types) and is intended to be **renamed or removed** when creating a real product.
+
+### Core Goals
+
+- Demonstrate the standard KB Labs package layout (src/types/tests/build tooling)
+- Provide a simple, testable function (`hello`) as a starting point
+- Act as a safe playground for verifying DevKit configs (tsup, Vitest, ESLint)
+
+## Package Status
+
+- **Version**: 0.1.0  
+- **Stage**: Template / Example  
+- **Status**: Not for Production ⚠️
+
+## Architecture
+
+### Structure
+
+```
+packages/package-name/
+├── src/
+│   ├── index.ts        # Public entrypoint
+│   └── types/          # Shared types and re-exports
+│       ├── types.ts
+│       └── index.ts
+├── index.test.ts       # Vitest example
+└── tsup.config.ts      # Build configuration
+```
+
+The default implementation is intentionally tiny:
+
+```ts
+export const hello = (name = 'KB Labs') => `Hello, ${name}!`;
+```
+
+## Dependencies
+
+### Runtime
+
+None by default — this is a pure TypeScript example.
+
+### Development
+
+- `@kb-labs/devkit`: shared TS/ESLint/Vitest/TSUP presets
+- `tsup`, `vitest`, `tsx`, `typescript`
+
+## Scripts
+
+From the `kb-labs-product-template` root:
+
+```bash
+pnpm --filter @product-name/package-name build
+pnpm --filter @product-name/package-name test
+pnpm --filter @product-name/package-name lint
+```
+
+## How to Adapt for a Real Package
+
+When using the product template for your own project:
+
+1. Rename the package in `package.json` (e.g. `@kb-labs/my-product-core`).
+2. Replace the `hello` function with your actual public API.
+3. Update tests in `index.test.ts` to cover real behaviour.
+4. Adjust `types/` to expose the correct public types.
+
+This package is meant as a scaffold only; don’t ship it as-is to production.
+
+

package/dist/index.d.ts

@@ -0,0 +1,17 @@
+import { PackageSource, ResolvedPackage, InstalledPackage } from '@kb-labs/marketplace-contracts';
+
+/**
+ * @module @kb-labs/marketplace-npm/npm-source
+ * pnpm-based PackageSource implementation.
+ * This is the ONLY place in the marketplace codebase that calls pnpm.
+ */
+
+declare class NpmPackageSource implements PackageSource {
+    resolve(spec: string): Promise<ResolvedPackage>;
+    install(pkg: ResolvedPackage, root: string, opts?: {
+        dev?: boolean;
+    }): Promise<InstalledPackage>;
+    remove(packageId: string, root: string): Promise<void>;
+}
+
+export { NpmPackageSource };

package/dist/index.js

@@ -0,0 +1,83 @@
+import { execa } from 'execa';
+import * as path from 'path';
+import * as fs from 'fs/promises';
+import * as crypto from 'crypto';
+
+// src/npm-source.ts
+var NpmPackageSource = class {
+  async resolve(spec) {
+    const id = extractPackageName(spec);
+    if (!id) {
+      throw new Error(`Invalid package spec: ${spec}`);
+    }
+    return {
+      id,
+      version: extractVersion(spec) ?? "latest",
+      integrity: "",
+      // computed after install
+      source: "marketplace"
+    };
+  }
+  async install(pkg, root, opts) {
+    const spec = pkg.version === "latest" ? pkg.id : `${pkg.id}@${pkg.version}`;
+    const args = ["add", spec];
+    if (opts?.dev) {
+      args.push("--save-dev");
+    }
+    await execa("pnpm", args, { cwd: root, timeout: 5 * 60 * 1e3 });
+    const packageRoot = path.join(root, "node_modules", pkg.id);
+    let version = pkg.version;
+    try {
+      const pkgJson = JSON.parse(await fs.readFile(path.join(packageRoot, "package.json"), "utf-8"));
+      version = pkgJson.version ?? version;
+    } catch {
+    }
+    const integrity = await computeIntegrity(packageRoot);
+    return {
+      id: pkg.id,
+      version,
+      packageRoot,
+      integrity
+    };
+  }
+  async remove(packageId, root) {
+    await execa("pnpm", ["remove", packageId], { cwd: root, timeout: 2 * 60 * 1e3 });
+  }
+};
+function extractPackageName(spec) {
+  if (!spec || spec.startsWith(".") || spec.startsWith("/")) {
+    return null;
+  }
+  if (spec.startsWith("@")) {
+    const slashIndex = spec.indexOf("/");
+    if (slashIndex === -1) {
+      return null;
+    }
+    const versionSep2 = spec.lastIndexOf("@");
+    return versionSep2 > slashIndex ? spec.slice(0, versionSep2) : spec;
+  }
+  const versionSep = spec.indexOf("@");
+  return versionSep > 0 ? spec.slice(0, versionSep) : spec;
+}
+function extractVersion(spec) {
+  if (spec.startsWith("@")) {
+    const slashIndex = spec.indexOf("/");
+    const lastAt = spec.lastIndexOf("@");
+    return lastAt > slashIndex ? spec.slice(lastAt + 1) : null;
+  }
+  const atIndex = spec.indexOf("@");
+  return atIndex > 0 ? spec.slice(atIndex + 1) : null;
+}
+async function computeIntegrity(packageRoot) {
+  try {
+    const content = await fs.readFile(path.join(packageRoot, "package.json"));
+    const hash = crypto.createHash("sha256").update(content).digest("base64");
+    return `sha256-${hash}`;
+  } catch {
+    return "";
+  }
+}
+
+export { NpmPackageSource };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/npm-source.ts"],"names":["versionSep"],"mappings":";;;;;;AAgBO,IAAM,mBAAN,MAAgD;AAAA,EACrD,MAAM,QAAQ,IAAA,EAAwC;AACpD,IAAA,MAAM,EAAA,GAAK,mBAAmB,IAAI,CAAA;AAClC,IAAA,IAAI,CAAC,EAAA,EAAI;AACP,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,sBAAA,EAAyB,IAAI,CAAA,CAAE,CAAA;AAAA,IACjD;AAEA,IAAA,OAAO;AAAA,MACL,EAAA;AAAA,MACA,OAAA,EAAS,cAAA,CAAe,IAAI,CAAA,IAAK,QAAA;AAAA,MACjC,SAAA,EAAW,EAAA;AAAA;AAAA,MACX,MAAA,EAAQ;AAAA,KACV;AAAA,EACF;AAAA,EAEA,MAAM,OAAA,CACJ,GAAA,EACA,IAAA,EACA,IAAA,EAC2B;AAC3B,IAAA,MAAM,IAAA,GAAO,GAAA,CAAI,OAAA,KAAY,QAAA,GAAW,GAAA,CAAI,EAAA,GAAK,CAAA,EAAG,GAAA,CAAI,EAAE,CAAA,CAAA,EAAI,GAAA,CAAI,OAAO,CAAA,CAAA;AACzE,IAAA,MAAM,IAAA,GAAO,CAAC,KAAA,EAAO,IAAI,CAAA;AACzB,IAAA,IAAI,MAAM,GAAA,EAAK;AAAC,MAAA,IAAA,CAAK,KAAK,YAAY,CAAA;AAAA,IAAE;AAExC,IAAA,MAAM,KAAA,CAAM,MAAA,EAAQ,IAAA,EAAM,EAAE,GAAA,EAAK,MAAM,OAAA,EAAS,CAAA,GAAI,EAAA,GAAK,GAAA,EAAM,CAAA;AAE/D,IAAA,MAAM,WAAA,GAAmB,IAAA,CAAA,IAAA,CAAK,IAAA,EAAM,cAAA,EAAgB,IAAI,EAAE,CAAA;AAG1D,IAAA,IAAI,UAAU,GAAA,CAAI,OAAA;AAClB,IAAA,IAAI;AACF,MAAA,MAAM,OAAA,GAAU,IAAA,CAAK,KAAA,CAAM,MAAS,EAAA,CAAA,QAAA,CAAc,UAAK,WAAA,EAAa,cAAc,CAAA,EAAG,OAAO,CAAC,CAAA;AAC7F,MAAA,OAAA,GAAU,QAAQ,OAAA,IAAW,OAAA;AAAA,IAC/B,CAAA,CAAA,MAAQ;AAAA,IAAyB;AAGjC,IAAA,MAAM,SAAA,GAAY,MAAM,gBAAA,CAAiB,WAAW,CAAA;AAEpD,IAAA,OAAO;AAAA,MACL,IAAI,GAAA,CAAI,EAAA;AAAA,MACR,OAAA;AAAA,MACA,WAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA,EAEA,MAAM,MAAA,CAAO,SAAA,EAAmB,IAAA,EAA6B;AAC3D,IAAA,MAAM,KAAA,CAAM,MAAA,EAAQ,CAAC,QAAA,EAAU,SAAS,CAAA,EAAG,EAAE,GAAA,EAAK,IAAA,EAAM,OAAA,EAAS,CAAA,GAAI,EAAA,GAAK,KAAM,CAAA;AAAA,EAClF;AACF;AAMA,SAAS,mBAAmB,IAAA,EAA6B;AACvD,EAAA,IAAI,CAAC,QAAQ,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,IAAK,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,EAAG;AAAC,IAAA,OAAO,IAAA;AAAA,EAAK;AAExE,EAAA,IAAI,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,EAAG;AACxB,IAAA,MAAM,UAAA,GAAa,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA;AACnC,IAAA,IAAI,eAAe,EAAA,EAAI;AAAC,MAAA,OAAO,IAAA;AAAA,IAAK;AACpC,IAAA,MAAMA,WAAAA,GAAa,IAAA,CAAK,WAAA,CAAY,GAAG,CAAA;AACvC,IAAA,OAAOA,cAAa,UAAA,GAAa,IAAA,CAAK,KAAA,CAAM,CAAA,EAAGA,WAAU,CAAA,GAAI,IAAA;AAAA,EAC/D;AAEA,EAAA,MAAM,UAAA,GAAa,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA;AACnC,EAAA,OAAO,aAAa,CAAA,GAAI,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,UAAU,CAAA,GAAI,IAAA;AACtD;AAEA,SAAS,eAAe,IAAA,EAA6B;AACnD,EAAA,IAAI,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,EAAG;AACxB,IAAA,MAAM,UAAA,GAAa,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA;AACnC,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,WAAA,CAAY,GAAG,CAAA;AACnC,IAAA,OAAO,SAAS,UAAA,GAAa,IAAA,CAAK,KAAA,CAAM,MAAA,GAAS,CAAC,CAAA,GAAI,IAAA;AAAA,EACxD;AACA,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA;AAChC,EAAA,OAAO,UAAU,CAAA,GAAI,IAAA,CAAK,KAAA,CAAM,OAAA,GAAU,CAAC,CAAA,GAAI,IAAA;AACjD;AAEA,eAAe,iBAAiB,WAAA,EAAsC;AACpE,EAAA,IAAI;AACF,IAAA,MAAM,UAAU,MAAS,EAAA,CAAA,QAAA,CAAc,IAAA,CAAA,IAAA,CAAK,WAAA,EAAa,cAAc,CAAC,CAAA;AACxE,IAAA,MAAM,IAAA,GAAc,kBAAW,QAAQ,CAAA,CAAE,OAAO,OAAO,CAAA,CAAE,OAAO,QAAQ,CAAA;AACxE,IAAA,OAAO,UAAU,IAAI,CAAA,CAAA;AAAA,EACvB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAA;AAAA,EACT;AACF","file":"index.js","sourcesContent":["/**\n * @module @kb-labs/marketplace-npm/npm-source\n * pnpm-based PackageSource implementation.\n * This is the ONLY place in the marketplace codebase that calls pnpm.\n */\n\nimport { execa } from 'execa';\nimport * as path from 'node:path';\nimport * as fs from 'node:fs/promises';\nimport * as crypto from 'node:crypto';\nimport type {\n  PackageSource,\n  ResolvedPackage,\n  InstalledPackage,\n} from '@kb-labs/marketplace-contracts';\n\nexport class NpmPackageSource implements PackageSource {\n  async resolve(spec: string): Promise<ResolvedPackage> {\n    const id = extractPackageName(spec);\n    if (!id) {\n      throw new Error(`Invalid package spec: ${spec}`);\n    }\n\n    return {\n      id,\n      version: extractVersion(spec) ?? 'latest',\n      integrity: '', // computed after install\n      source: 'marketplace',\n    };\n  }\n\n  async install(\n    pkg: ResolvedPackage,\n    root: string,\n    opts?: { dev?: boolean },\n  ): Promise<InstalledPackage> {\n    const spec = pkg.version === 'latest' ? pkg.id : `${pkg.id}@${pkg.version}`;\n    const args = ['add', spec];\n    if (opts?.dev) {args.push('--save-dev');}\n\n    await execa('pnpm', args, { cwd: root, timeout: 5 * 60 * 1000 });\n\n    const packageRoot = path.join(root, 'node_modules', pkg.id);\n\n    // Read actual installed version\n    let version = pkg.version;\n    try {\n      const pkgJson = JSON.parse(await fs.readFile(path.join(packageRoot, 'package.json'), 'utf-8'));\n      version = pkgJson.version ?? version;\n    } catch { /* use spec version */ }\n\n    // Compute integrity\n    const integrity = await computeIntegrity(packageRoot);\n\n    return {\n      id: pkg.id,\n      version,\n      packageRoot,\n      integrity,\n    };\n  }\n\n  async remove(packageId: string, root: string): Promise<void> {\n    await execa('pnpm', ['remove', packageId], { cwd: root, timeout: 2 * 60 * 1000 });\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\nfunction extractPackageName(spec: string): string | null {\n  if (!spec || spec.startsWith('.') || spec.startsWith('/')) {return null;}\n\n  if (spec.startsWith('@')) {\n    const slashIndex = spec.indexOf('/');\n    if (slashIndex === -1) {return null;}\n    const versionSep = spec.lastIndexOf('@');\n    return versionSep > slashIndex ? spec.slice(0, versionSep) : spec;\n  }\n\n  const versionSep = spec.indexOf('@');\n  return versionSep > 0 ? spec.slice(0, versionSep) : spec;\n}\n\nfunction extractVersion(spec: string): string | null {\n  if (spec.startsWith('@')) {\n    const slashIndex = spec.indexOf('/');\n    const lastAt = spec.lastIndexOf('@');\n    return lastAt > slashIndex ? spec.slice(lastAt + 1) : null;\n  }\n  const atIndex = spec.indexOf('@');\n  return atIndex > 0 ? spec.slice(atIndex + 1) : null;\n}\n\nasync function computeIntegrity(packageRoot: string): Promise<string> {\n  try {\n    const content = await fs.readFile(path.join(packageRoot, 'package.json'));\n    const hash = crypto.createHash('sha256').update(content).digest('base64');\n    return `sha256-${hash}`;\n  } catch {\n    return '';\n  }\n}\n"]}

package/package.json

@@ -0,0 +1,39 @@
+{
+  "name": "@kb-labs/marketplace-npm",
+  "version": "0.1.1",
+  "description": "npm/pnpm package source for KB Labs marketplace",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "sideEffects": false,
+  "scripts": {
+    "clean": "rimraf dist",
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "type-check": "tsc --noEmit",
+    "lint": "eslint .",
+    "lint:fix": "eslint . --fix",
+    "test": "vitest run --passWithNoTests -c ../../vitest.config.ts",
+    "test:watch": "vitest -c ../../vitest.config.ts"
+  },
+  "dependencies": {
+    "@kb-labs/marketplace-contracts": "^0.1.1",
+    "execa": "^9.5.3"
+  },
+  "devDependencies": {
+    "tsup": "^8.5.0",
+    "vitest": "^3.2.4",
+    "@kb-labs/devkit": "link:../../../../infra/kb-labs-devkit"
+  }
+}