@kwonye/mcpx 0.1.98 → 0.1.100

package/dist/{cli-g4w6k655.js → cli-dy7x0zrg.js}

@@ -3,7 +3,7 @@ import {
   getConfigPath,
   readJsonFile,
   writeJsonAtomic
-} from "./cli-zjepj3sj.js";
+} from "./cli-28g7x9rn.js";
 import {
   normalizeServerSpecEnabled
 } from "./cli-s4gspqdf.js";
@@ -379,6 +379,43 @@ function repairConfig(config) {
   };
 }
 
+// src/core/marketplace-defaults.ts
+var BUILTIN_ADDED_AT = "1970-01-01T00:00:00.000Z";
+var DEFAULT_MARKETPLACES = {
+  "claude-plugins-official": {
+    name: "claude-plugins-official",
+    displayName: "Claude official",
+    source: "anthropics/claude-plugins-official",
+    sourceType: "github",
+    manifestPath: ".claude-plugin/marketplace.json",
+    format: "claude",
+    builtIn: true,
+    autoUpdate: true,
+    addedAt: BUILTIN_ADDED_AT,
+    status: "unavailable"
+  },
+  "openai-curated": {
+    name: "openai-curated",
+    displayName: "Codex official",
+    source: "openai/plugins",
+    sourceType: "github",
+    manifestPath: ".agents/plugins/marketplace.json",
+    format: "codex",
+    builtIn: true,
+    autoUpdate: true,
+    addedAt: BUILTIN_ADDED_AT,
+    status: "unavailable"
+  }
+};
+function ensureDefaultMarketplaces(marketplaces) {
+  const result = { ...marketplaces ?? {} };
+  for (const [name, defaults] of Object.entries(DEFAULT_MARKETPLACES)) {
+    const existing = result[name];
+    result[name] = existing ? { ...defaults, ...existing, name, source: defaults.source, sourceType: defaults.sourceType, manifestPath: defaults.manifestPath, format: defaults.format, builtIn: true } : { ...defaults };
+  }
+  return result;
+}
+
 // src/core/config.ts
 class ConfigLoadError extends Error {
   configPath;
@@ -426,10 +463,13 @@ var discoveredComponentSchema = z.object({
 });
 var discoveredMcpServerSchema = z.object({
   id: z.string(),
+  transport: z.enum(["stdio", "http"]).optional(),
   command: z.string(),
   args: z.array(z.string()).optional(),
   env: z.record(z.string(), z.string()).optional(),
-  cwd: z.string().optional()
+  cwd: z.string().optional(),
+  url: z.string().optional(),
+  oauthResource: z.string().optional()
 });
 var discoveredComponentsSchema = z.object({
   skills: z.array(discoveredComponentSchema).default([]),
@@ -462,12 +502,34 @@ var managedPluginSchema = z.object({
     agents: z.boolean().optional(),
     commands: z.boolean().optional()
   }).optional(),
+  marketplace: z.object({
+    name: z.string(),
+    pluginName: z.string(),
+    sourceFingerprint: z.string()
+  }).optional(),
+  updateError: z.string().optional(),
   projectOverrides: z.record(z.string(), z.object({
     enabled: z.boolean().optional(),
     components: z.record(pluginComponentSchema, z.boolean()).optional(),
     config: z.record(z.string(), z.unknown()).optional()
   })).optional()
 });
+var managedMarketplaceSchema = z.object({
+  name: z.string(),
+  displayName: z.string(),
+  source: z.string(),
+  sourceType: z.enum(["github", "git", "local", "hosted-json"]).default("github"),
+  manifestPath: z.string().optional(),
+  format: z.enum(["claude", "codex"]).optional(),
+  builtIn: z.boolean().default(false),
+  autoUpdate: z.boolean().default(false),
+  addedAt: z.string(),
+  lastCheckedAt: z.string().optional(),
+  lastUpdatedAt: z.string().optional(),
+  resolvedRevision: z.string().optional(),
+  status: z.enum(["ready", "stale", "error", "unavailable"]).default("unavailable"),
+  error: z.string().optional()
+});
 var configSchema = z.object({
   schemaVersion: z.literal(1).default(1),
   gateway: z.object({
@@ -482,7 +544,8 @@ var configSchema = z.object({
   servers: z.record(z.string(), serverSchema).default({}),
   clients: z.record(z.string(), clientStateSchema).default({}),
   projects: z.record(z.string(), projectEntrySchema).default({}),
-  plugins: z.record(z.string(), managedPluginSchema).default({})
+  plugins: z.record(z.string(), managedPluginSchema).default({}),
+  marketplaces: z.record(z.string(), managedMarketplaceSchema).default({})
 });
 var projectConfigSchema = z.object({
   name: z.string().min(1).optional(),
@@ -499,7 +562,8 @@ function defaultConfig() {
     servers: {},
     clients: {},
     projects: {},
-    plugins: {}
+    plugins: {},
+    marketplaces: ensureDefaultMarketplaces(undefined)
   };
 }
 function loadConfig(configPath = getConfigPath()) {
@@ -541,7 +605,8 @@ function loadConfig(configPath = getConfigPath()) {
     servers,
     clients: clientEntries,
     projects: parsed.data.projects,
-    plugins: parsed.data.plugins
+    plugins: parsed.data.plugins,
+    marketplaces: ensureDefaultMarketplaces(parsed.data.marketplaces)
   });
 }
 function saveConfig(config, configPath = getConfigPath()) {

package/dist/{cli-gf70a85c.js → cli-etmrz2c4.js}

@@ -1,29 +1,34 @@
+import {
+  refreshAutoUpdateMarketplaces
+} from "./cli-ct7asw78.js";
 import {
   APP_VERSION,
   getGatewayUrl,
   persistSyncState,
   syncAllClients
-} from "./cli-vy81xjm0.js";
+} from "./cli-b0xrqsjc.js";
 import {
   loadConfig,
   loadMergedConfig,
   saveConfig
-} from "./cli-g4w6k655.js";
+} from "./cli-dy7x0zrg.js";
 import {
   SecretsManager,
   UpstreamError,
   classifyUpstreamError,
   ensureGatewayToken
-} from "./cli-remv48t3.js";
+} from "./cli-1ewrsfj4.js";
 import {
   ensureDir,
   ensureParentDir,
   getLogPath,
+  getMarketplaceUpdateLockPath,
+  getMarketplaceUpdateStatePath,
   getPidPath,
   getStagedVersionPath,
   getUpdateLockPath,
   getUpdatesDir
-} from "./cli-zjepj3sj.js";
+} from "./cli-28g7x9rn.js";
 import {
   isServerEnabled
 } from "./cli-s4gspqdf.js";
@@ -1001,8 +1006,89 @@ function performRollback() {
   };
 }
 
-// src/core/daemon.ts
+// src/core/marketplace-updater.ts
 import fs4 from "node:fs";
+var MARKETPLACE_UPDATE_INTERVAL_MS = 6 * 60 * 60 * 1000;
+var INITIAL_DELAY_MS = 30000;
+var LOCK_STALE_MS = 30 * 60 * 1000;
+function readState() {
+  try {
+    return JSON.parse(fs4.readFileSync(getMarketplaceUpdateStatePath(), "utf8"));
+  } catch {
+    return {};
+  }
+}
+function writeState(state) {
+  const target = getMarketplaceUpdateStatePath();
+  ensureParentDir(target);
+  fs4.writeFileSync(target, JSON.stringify(state, null, 2), { mode: 384 });
+}
+function due(now = Date.now()) {
+  const last = readState().lastRunAt;
+  return !last || !Number.isFinite(Date.parse(last)) || now - Date.parse(last) >= MARKETPLACE_UPDATE_INTERVAL_MS;
+}
+function acquireLock2() {
+  const target = getMarketplaceUpdateLockPath();
+  ensureParentDir(target);
+  try {
+    fs4.writeFileSync(target, `${process.pid}
+`, { flag: "wx", mode: 384 });
+    return true;
+  } catch {
+    try {
+      if (Date.now() - fs4.statSync(target).mtimeMs > LOCK_STALE_MS) {
+        fs4.unlinkSync(target);
+        return acquireLock2();
+      }
+    } catch {
+      return acquireLock2();
+    }
+    return false;
+  }
+}
+function releaseLock2() {
+  try {
+    fs4.unlinkSync(getMarketplaceUpdateLockPath());
+  } catch {}
+}
+async function runMarketplaceAutoUpdate(options) {
+  if (process.env.MCPX_NO_UPDATE === "1")
+    return { checked: [], errors: [], skipped: true };
+  if (!options?.force && !due())
+    return { checked: [], errors: [], skipped: true };
+  if (!acquireLock2())
+    return { checked: [], errors: [], skipped: true };
+  try {
+    const result = await refreshAutoUpdateMarketplaces();
+    writeState({ lastRunAt: new Date().toISOString() });
+    return result;
+  } finally {
+    releaseLock2();
+  }
+}
+function startMarketplaceAutoUpdater() {
+  if (process.env.MCPX_NO_UPDATE === "1")
+    return () => {};
+  let stopped = false;
+  const run = () => {
+    if (!stopped)
+      runMarketplaceAutoUpdate().catch(() => {
+        return;
+      });
+  };
+  const initial = setTimeout(run, INITIAL_DELAY_MS);
+  initial.unref?.();
+  const interval = setInterval(run, MARKETPLACE_UPDATE_INTERVAL_MS);
+  interval.unref?.();
+  return () => {
+    stopped = true;
+    clearTimeout(initial);
+    clearInterval(interval);
+  };
+}
+
+// src/core/daemon.ts
+import fs5 from "node:fs";
 import net from "node:net";
 import { spawn as spawn2, execFileSync as execFileSync2 } from "node:child_process";
 
@@ -1995,11 +2081,18 @@ function createGatewayServer(options) {
 }
 
 // src/core/daemon.ts
+function buildDaemonChildEnv(baseEnv = process.env, electronRuntime = typeof process.versions.electron === "string") {
+  return {
+    ...baseEnv,
+    MCPX_DAEMON_CHILD: "1",
+    ...electronRuntime ? { ELECTRON_RUN_AS_NODE: "1" } : {}
+  };
+}
 function readPidRecordFromFile(pidPath = getPidPath()) {
-  if (!fs4.existsSync(pidPath)) {
+  if (!fs5.existsSync(pidPath)) {
     return null;
   }
-  const raw = fs4.readFileSync(pidPath, "utf8").trim();
+  const raw = fs5.readFileSync(pidPath, "utf8").trim();
   if (!raw) {
     return null;
   }
@@ -2117,7 +2210,7 @@ async function startDaemon(config, cliPath, secrets) {
       };
     }
     try {
-      fs4.unlinkSync(getPidPath());
+      fs5.unlinkSync(getPidPath());
     } catch {}
   }
   const { port, fellBackFrom } = await resolveGatewayPort(config, secrets);
@@ -2130,35 +2223,32 @@ async function startDaemon(config, cliPath, secrets) {
   const logPath = getLogPath();
   ensureParentDir(pidPath);
   ensureParentDir(logPath);
-  let logFd = fs4.openSync(logPath, "a", 384);
-  const logStat = fs4.fstatSync(logFd);
+  let logFd = fs5.openSync(logPath, "a", 384);
+  const logStat = fs5.fstatSync(logFd);
   if (logStat.size > 10 * 1024 * 1024) {
-    fs4.closeSync(logFd);
+    fs5.closeSync(logFd);
     const log1 = `${logPath}.1`;
     const log2 = `${logPath}.2`;
     try {
-      if (fs4.existsSync(log2))
-        fs4.unlinkSync(log2);
+      if (fs5.existsSync(log2))
+        fs5.unlinkSync(log2);
     } catch {}
     try {
-      if (fs4.existsSync(log1))
-        fs4.renameSync(log1, log2);
+      if (fs5.existsSync(log1))
+        fs5.renameSync(log1, log2);
     } catch {}
     try {
-      fs4.renameSync(logPath, log1);
+      fs5.renameSync(logPath, log1);
     } catch {}
-    logFd = fs4.openSync(logPath, "a", 384);
+    logFd = fs5.openSync(logPath, "a", 384);
   }
   const child = spawn2(process.execPath, [cliPath, "daemon", "run", "--port", String(port)], {
     detached: true,
     stdio: ["ignore", logFd, logFd],
-    env: {
-      ...process.env,
-      MCPX_DAEMON_CHILD: "1"
-    }
+    env: buildDaemonChildEnv()
   });
   child.unref();
-  fs4.writeFileSync(pidPath, `${child.pid}:${port}
+  fs5.writeFileSync(pidPath, `${child.pid}:${port}
 `, { mode: 384 });
   startBackgroundUpdateCheck();
   await waitForGatewayReady(port, token);
@@ -2182,7 +2272,7 @@ function stopDaemon() {
     const cmd = execFileSync2("ps", ["-p", String(pid), "-o", "command="], { encoding: "utf8", timeout: 2000 }).trim();
     const looksLikeMcpxDaemon = cmd.includes("daemon run") && (cmd.includes("mcpx") || cmd.includes("cli.js"));
     if (!looksLikeMcpxDaemon) {
-      fs4.unlinkSync(pidPath);
+      fs5.unlinkSync(pidPath);
       return {
         stopped: false,
         message: `PID ${pid} is not a mcpx daemon (command: ${cmd.slice(0, 80)}). Pidfile cleaned up.`
@@ -2190,7 +2280,7 @@ function stopDaemon() {
     }
   } catch {
     try {
-      fs4.unlinkSync(pidPath);
+      fs5.unlinkSync(pidPath);
     } catch {}
     return {
       stopped: false,
@@ -2201,7 +2291,7 @@ function stopDaemon() {
     process.kill(pid, "SIGTERM");
   } catch {}
   try {
-    fs4.unlinkSync(pidPath);
+    fs5.unlinkSync(pidPath);
   } catch {}
   return {
     stopped: true,
@@ -2214,10 +2304,10 @@ async function restartDaemon(config, cliPath, secrets) {
 }
 function readDaemonLogs(maxLines = 200) {
   const logPath = getLogPath();
-  if (!fs4.existsSync(logPath)) {
+  if (!fs5.existsSync(logPath)) {
     return "";
   }
-  const lines = fs4.readFileSync(logPath, "utf8").split(`
+  const lines = fs5.readFileSync(logPath, "utf8").split(`
 `);
   return lines.slice(Math.max(lines.length - maxLines, 0)).join(`
 `);
@@ -2230,7 +2320,9 @@ function runDaemonForeground(config, port, secrets) {
       expectedToken: token,
       secrets
     });
+    const stopMarketplaceUpdater = startMarketplaceAutoUpdater();
     const cleanup = () => {
+      stopMarketplaceUpdater();
       server.close(() => resolve());
     };
     process.on("SIGINT", cleanup);
@@ -2360,4 +2452,4 @@ async function buildStatusReport(config, managedIndex, daemon = getDaemonStatus(
   };
 }
 
-export { probeHttpAuthRequirement, fetchRegistryServerDetail, selectBestPackage, extractRequiredInputs, mapRegistryToSpec, toSecretRef, secretRefName, defaultAuthSecretName, resolveAuthTarget, applyAuthReference, removeAuthReference, listAuthBindings, maybePrefixBearer, buildEnrichedPath, isOAuthReference, oauthReferenceServerName, runOAuthLogin, getOAuthAccessToken, compareVersions, checkForUpdates, getStagedUpdate, shouldUseStagedCli, clearStagedUpdate, getStagedCliPath, startBackgroundUpdateCheck, runBackgroundUpdate, performUpdate, performRollback, getDaemonStatus, startDaemon, stopDaemon, restartDaemon, readDaemonLogs, runDaemonForeground, STATUS_CLIENTS, buildStatusReport };
+export { probeHttpAuthRequirement, fetchRegistryServerDetail, selectBestPackage, extractRequiredInputs, mapRegistryToSpec, toSecretRef, secretRefName, defaultAuthSecretName, resolveAuthTarget, applyAuthReference, removeAuthReference, listAuthBindings, maybePrefixBearer, buildEnrichedPath, isOAuthReference, oauthReferenceServerName, runOAuthLogin, getOAuthAccessToken, compareVersions, checkForUpdates, getStagedUpdate, shouldUseStagedCli, clearStagedUpdate, getStagedCliPath, startBackgroundUpdateCheck, runBackgroundUpdate, performUpdate, performRollback, runMarketplaceAutoUpdate, startMarketplaceAutoUpdater, getDaemonStatus, startDaemon, stopDaemon, restartDaemon, readDaemonLogs, runDaemonForeground, STATUS_CLIENTS, buildStatusReport };

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAyhEA,wBAAsB,MAAM,CAAC,IAAI,WAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CA6E/D"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AA+oEA,wBAAsB,MAAM,CAAC,IAAI,WAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CA6E/D"}

package/dist/cli.js

@@ -29,7 +29,8 @@ import {
   startDaemon,
   stopDaemon,
   toSecretRef
-} from "./cli-gf70a85c.js";
+} from "./cli-etmrz2c4.js";
+import"./cli-ct7asw78.js";
 import {
   APP_VERSION,
   deleteSkill,
@@ -44,14 +45,14 @@ import {
   persistSyncState,
   saveSkill,
   syncAllClients
-} from "./cli-vy81xjm0.js";
+} from "./cli-b0xrqsjc.js";
 import {
   ConfigLoadError,
   loadConfig,
   loadMergedConfig,
   loadProjectConfig,
   resolveActiveConfig
-} from "./cli-g4w6k655.js";
+} from "./cli-dy7x0zrg.js";
 import {
   SecretsManager,
   addServer,
@@ -61,12 +62,12 @@ import {
   removeServer,
   rotateGatewayToken,
   setServerEnabled
-} from "./cli-remv48t3.js";
+} from "./cli-1ewrsfj4.js";
 import {
   getConfigPath,
   getManagedIndexPath,
   getSecretsStorePath
-} from "./cli-zjepj3sj.js";
+} from "./cli-28g7x9rn.js";
 import {
   __require,
   isServerEnabled
@@ -2590,11 +2591,11 @@ function registerProjectCommands(program, cliPath) {
       name: projectName,
       servers: {}
     };
-    const { saveProjectConfig } = await import("./config-2s2aqkqp.js");
+    const { saveProjectConfig } = await import("./config-yx5m60fv.js");
     saveProjectConfig(localConfig, targetPath);
     process.stdout.write(`Initialized project configuration at: ${targetPath}
 `);
-    const { registerProject: registerProject2 } = await import("./registry-bnjb2345.js");
+    const { registerProject: registerProject2 } = await import("./registry-yvbxcaq6.js");
     await mutateConfig((globalConfig) => {
       registerProject2(globalConfig, process.cwd(), projectName);
     });
@@ -2625,7 +2626,7 @@ function registerProjectCommands(program, cliPath) {
       process.exit(1);
     }
     const entry = globalConfig.projects[resolvedPath];
-    const { unregisterProject: unregisterProject2 } = await import("./registry-bnjb2345.js");
+    const { unregisterProject: unregisterProject2 } = await import("./registry-yvbxcaq6.js");
     await mutateConfig((freshConfig) => {
       unregisterProject2(freshConfig, resolvedPath);
     });
@@ -2639,7 +2640,7 @@ function registerProjectCommands(program, cliPath) {
 function registerPluginCommands(program, _cliPath) {
   const plugin = program.command("plugin").description("Manage plugins");
   plugin.command("inspect <source>").description("Inspect plugin manifest and components").action(async (source) => {
-    const { inspectPlugin } = await import("./plugin-manager-7c9nk34n.js");
+    const { inspectPlugin } = await import("./plugin-manager-19q55n69.js");
     try {
       const info = await inspectPlugin(source);
       process.stdout.write(JSON.stringify(info, null, 2) + `
@@ -2650,13 +2651,43 @@ function registerPluginCommands(program, _cliPath) {
       process.exit(1);
     }
   });
-  plugin.command("install <source>").option("--name <name>", "Plugin name").option("--no-enable", "Don't enable plugin after install").description("Install plugin").action(async (source, options) => {
-    const { installPlugin } = await import("./plugin-manager-7c9nk34n.js");
+  plugin.command("install <source>").option("--name <name>", "Plugin name").option("--no-enable", "Don't enable plugin after install").option("-y, --yes", "Confirm marketplace plugin installation").description("Install plugin").action(async (source, options) => {
     try {
-      const p = await installPlugin(source, {
-        name: options.name,
-        enabled: !options.noEnable
-      });
+      const config = loadConfig();
+      const marketplaceName = source.includes("@") ? source.slice(source.lastIndexOf("@") + 1) : "";
+      let p;
+      if (config.marketplaces?.[marketplaceName]) {
+        const { inspectMarketplacePlugin, installMarketplacePlugin } = await import("./marketplace-pwabb3ea.js");
+        const detail = await inspectMarketplacePlugin(source);
+        process.stdout.write(`${detail.displayName} (${source})
+`);
+        process.stdout.write(`Will install: ${detail.supportedCapabilities.join(", ") || "nothing compatible"}
+`);
+        if (detail.unsupportedCapabilities.length)
+          process.stdout.write(`Unsupported: ${detail.unsupportedCapabilities.join(", ")}
+`);
+        if (!detail.compatible)
+          throw new Error(`Plugin ${source} has no mcpx-compatible capabilities`);
+        if (!options.yes) {
+          if (!process.stdin.isTTY || !process.stdout.isTTY)
+            throw new Error("Marketplace installation requires --yes in non-interactive mode");
+          const rl = createInterface({ input: process.stdin, output: process.stdout });
+          try {
+            const answer = await promptLine(rl, "Install this plugin? (y/N): ");
+            if (answer.trim().toLowerCase() !== "y" && answer.trim().toLowerCase() !== "yes") {
+              process.stdout.write(`Installation cancelled.
+`);
+              return;
+            }
+          } finally {
+            rl.close();
+          }
+        }
+        p = await installMarketplacePlugin(source);
+      } else {
+        const { installPlugin } = await import("./plugin-manager-19q55n69.js");
+        p = await installPlugin(source, { name: options.name, enabled: options.enable !== false });
+      }
       process.stdout.write(`Plugin installed: ${p.id}
 `);
     } catch (e) {
@@ -2665,8 +2696,89 @@ function registerPluginCommands(program, _cliPath) {
       process.exit(1);
     }
   });
+  const marketplace = plugin.command("marketplace").description("Manage plugin marketplaces");
+  marketplace.command("list").description("List configured plugin marketplaces").action(async () => {
+    const { listMarketplaces } = await import("./marketplace-pwabb3ea.js");
+    process.stdout.write(JSON.stringify(await listMarketplaces(), null, 2) + `
+`);
+  });
+  marketplace.command("add <source>").option("--manifest <path>", "Marketplace manifest path inside the source").description("Add a Claude or Codex plugin marketplace").action(async (source, options) => {
+    try {
+      const { addMarketplace } = await import("./marketplace-pwabb3ea.js");
+      const added = await addMarketplace(source, options.manifest);
+      process.stdout.write(`Marketplace added: ${added.name}
+`);
+    } catch (error) {
+      process.stderr.write(`Error: ${error instanceof Error ? error.message : String(error)}
+`);
+      process.exitCode = 1;
+    }
+  });
+  marketplace.command("update [name]").description("Refresh one marketplace, or every configured marketplace").action(async (name) => {
+    try {
+      const { listMarketplaces, refreshMarketplaceWithPlugins } = await import("./marketplace-pwabb3ea.js");
+      const names = name ? [name] : (await listMarketplaces()).map((entry) => entry.name);
+      for (const marketplaceName of names) {
+        const result = await refreshMarketplaceWithPlugins(marketplaceName);
+        process.stdout.write(`Marketplace updated: ${marketplaceName} (${result.updated.length} plugin update(s))
+`);
+        for (const error of result.errors)
+          process.stderr.write(`Warning: ${error}
+`);
+      }
+    } catch (error) {
+      process.stderr.write(`Error: ${error instanceof Error ? error.message : String(error)}
+`);
+      process.exitCode = 1;
+    }
+  });
+  marketplace.command("remove <name>").option("-y, --yes", "Confirm removal and uninstall marketplace plugins").description("Remove a custom marketplace and its installed plugins").action(async (name, options) => {
+    try {
+      if (!options.yes) {
+        if (!process.stdin.isTTY || !process.stdout.isTTY)
+          throw new Error("Marketplace removal requires --yes in non-interactive mode");
+        const rl = createInterface({ input: process.stdin, output: process.stdout });
+        try {
+          const answer = await promptLine(rl, `Remove ${name} and uninstall its plugins? (y/N): `);
+          if (!["y", "yes"].includes(answer.trim().toLowerCase()))
+            return;
+        } finally {
+          rl.close();
+        }
+      }
+      const { removeMarketplace } = await import("./marketplace-pwabb3ea.js");
+      await removeMarketplace(name);
+      process.stdout.write(`Marketplace removed: ${name}
+`);
+    } catch (error) {
+      process.stderr.write(`Error: ${error instanceof Error ? error.message : String(error)}
+`);
+      process.exitCode = 1;
+    }
+  });
+  plugin.command("discover [query]").option("--marketplace <name>", "Filter by marketplace").option("--category <category>", "Filter by category").description("Browse available marketplace plugins").action(async (query, options) => {
+    const { listMarketplacePlugins } = await import("./marketplace-pwabb3ea.js");
+    let listings = await listMarketplacePlugins(query);
+    if (options.marketplace)
+      listings = listings.filter((entry) => entry.marketplace === options.marketplace);
+    if (options.category)
+      listings = listings.filter((entry) => entry.category?.toLowerCase() === options.category.toLowerCase());
+    process.stdout.write(JSON.stringify(listings, null, 2) + `
+`);
+  });
+  plugin.command("details <plugin>").description("Inspect a plugin@marketplace listing").action(async (qualified) => {
+    try {
+      const { inspectMarketplacePlugin } = await import("./marketplace-pwabb3ea.js");
+      process.stdout.write(JSON.stringify(await inspectMarketplacePlugin(qualified), null, 2) + `
+`);
+    } catch (error) {
+      process.stderr.write(`Error: ${error instanceof Error ? error.message : String(error)}
+`);
+      process.exitCode = 1;
+    }
+  });
   plugin.command("approve <name> <component>").description("Approve a plugin component (hooks, mcpServers)").action(async (name, component) => {
-    const { approvePluginComponent } = await import("./plugin-manager-7c9nk34n.js");
+    const { approvePluginComponent } = await import("./plugin-manager-19q55n69.js");
     try {
       await approvePluginComponent(name, component);
       process.stdout.write(`Approved ${component} for plugin ${name}
@@ -2678,7 +2790,7 @@ function registerPluginCommands(program, _cliPath) {
     }
   });
   plugin.command("prepare <name>").description("Install plugin dependencies").action(async (name) => {
-    const { preparePlugin } = await import("./plugin-manager-7c9nk34n.js");
+    const { preparePlugin } = await import("./plugin-manager-19q55n69.js");
     try {
       await preparePlugin(name);
       process.stdout.write(`Plugin ${name} prepared
@@ -2690,7 +2802,7 @@ function registerPluginCommands(program, _cliPath) {
     }
   });
   plugin.command("update <name>").description("Update plugin to latest version").action(async (name) => {
-    const { updatePlugin } = await import("./plugin-manager-7c9nk34n.js");
+    const { updatePlugin } = await import("./plugin-manager-19q55n69.js");
     try {
       const p = await updatePlugin(name);
       process.stdout.write(`Plugin ${name} updated to ${p.version}
@@ -2702,7 +2814,7 @@ function registerPluginCommands(program, _cliPath) {
     }
   });
   plugin.command("uninstall <name>").option("--keep-data", "Keep plugin data after uninstall").description("Uninstall plugin").action(async (name, options) => {
-    const { uninstallPlugin } = await import("./plugin-manager-7c9nk34n.js");
+    const { uninstallPlugin } = await import("./plugin-manager-19q55n69.js");
     try {
       await uninstallPlugin(name, options.keepData || false);
       process.stdout.write(`Plugin ${name} uninstalled
@@ -2716,13 +2828,13 @@ function registerPluginCommands(program, _cliPath) {
   plugin.command("enable <name>").option("--project <path>", "Scope this enable to a single registered project instead of globally").description("Enable plugin (globally, or for one project with --project)").action(async (name, options) => {
     try {
       if (options.project) {
-        const { setPluginProjectOverride } = await import("./plugin-manager-7c9nk34n.js");
+        const { setPluginProjectOverride } = await import("./plugin-manager-19q55n69.js");
         const resolvedPath = path.resolve(options.project);
         await setPluginProjectOverride(name, resolvedPath, { enabled: true });
         process.stdout.write(`Plugin ${name} enabled for project: ${resolvedPath}
 `);
       } else {
-        const { enablePlugin } = await import("./plugin-manager-7c9nk34n.js");
+        const { enablePlugin } = await import("./plugin-manager-19q55n69.js");
         await enablePlugin(name);
         process.stdout.write(`Plugin ${name} enabled
 `);
@@ -2736,13 +2848,13 @@ function registerPluginCommands(program, _cliPath) {
   plugin.command("disable <name>").option("--project <path>", "Scope this disable to a single registered project instead of globally").description("Disable plugin (globally, or for one project with --project)").action(async (name, options) => {
     try {
       if (options.project) {
-        const { setPluginProjectOverride } = await import("./plugin-manager-7c9nk34n.js");
+        const { setPluginProjectOverride } = await import("./plugin-manager-19q55n69.js");
         const resolvedPath = path.resolve(options.project);
         await setPluginProjectOverride(name, resolvedPath, { enabled: false });
         process.stdout.write(`Plugin ${name} disabled for project: ${resolvedPath}
 `);
       } else {
-        const { disablePlugin } = await import("./plugin-manager-7c9nk34n.js");
+        const { disablePlugin } = await import("./plugin-manager-19q55n69.js");
         await disablePlugin(name);
         process.stdout.write(`Plugin ${name} disabled
 `);
@@ -2754,7 +2866,7 @@ function registerPluginCommands(program, _cliPath) {
     }
   });
   plugin.command("status [name]").description("Show plugin status").action(async (name) => {
-    const { getPluginStatus, listPlugins } = await import("./plugin-manager-7c9nk34n.js");
+    const { getPluginStatus, listPlugins } = await import("./plugin-manager-19q55n69.js");
     try {
       if (name) {
         const p = await getPluginStatus(name);
@@ -2779,7 +2891,7 @@ function registerPluginCommands(program, _cliPath) {
 }
 function registerPluginHostCommand(program) {
   program.command("plugin-host <plugin> <server>").description("Run a plugin MCP server under mcpx policy enforcement").action(async (plugin, server) => {
-    const { runPluginHost } = await import("./plugin-host-wr17xed6.js");
+    const { runPluginHost } = await import("./plugin-host-9xcpnehq.js");
     runPluginHost(plugin, server);
   });
 }