@larkup/cli 0.2.25 → 0.2.26

package/dist/{chroma-BCASZNMJ.js → chroma-RJVBZZMP.js}

@@ -1,4 +1,4 @@
-import "./chunk-3RG5ZIWI.js";
+import "./chunk-QGM4M3NI.js";
 
 // ../../packages/vector-stores/src/adapters/chroma.ts
 var RRF_K = 60;
@@ -10,11 +10,7 @@ var ChromaAdapter = class {
   client = null;
   collection = null;
   collectionName;
-  /**
-   * Lazily connect to the Chroma server or cloud.
-   * The `chromadb` package is dynamically imported to avoid module-eval
-   * failures when the package isn't installed.
-   */
+  /** Lazily load the optional Chroma client. */
   async getClient() {
     if (this.client) return this.client;
     let chromadb;
@@ -64,7 +60,6 @@ var ChromaAdapter = class {
     });
     return this.collection;
   }
-  // ── Lifecycle ──────────────────────────────────────────────────────────────
   async init(_dimensions) {
     await this.getCollection();
   }
@@ -85,7 +80,6 @@ var ChromaAdapter = class {
       console.error("Failed to delete vectors by documentIds in Chroma:", err);
     }
   }
-  // ── Upsert ─────────────────────────────────────────────────────────────────
   async upsert(records) {
     if (records.length === 0) return;
     const collection = await this.getCollection();
@@ -129,7 +123,6 @@ var ChromaAdapter = class {
     }
     return meta;
   }
-  // ── Count ──────────────────────────────────────────────────────────────────
   async count() {
     try {
       const collection = await this.getCollection();
@@ -138,7 +131,6 @@ var ChromaAdapter = class {
       return null;
     }
   }
-  // ── Query ──────────────────────────────────────────────────────────────────
   async query(vector, topK, queryText) {
     const collection = await this.getCollection();
     const isSemantic = this.config.indexType === "semantic";
@@ -217,7 +209,6 @@ var ChromaAdapter = class {
       };
     });
   }
-  // ── Connection test ────────────────────────────────────────────────────────
   async testConnection(_dimensions) {
     let client;
     try {

package/dist/chunk-3EBUYTA7.js

@@ -0,0 +1,136 @@
+import {
+  SignatureV4,
+  signatureV4aContainer
+} from "./chunk-BDMLJQRN.js";
+
+// ../../node_modules/.pnpm/@aws-sdk+signature-v4-multi-region@3.996.46/node_modules/@aws-sdk/signature-v4-multi-region/dist-es/signature-v4-crt-container.js
+var signatureV4CrtContainer = {
+  CrtSignerV4: null
+};
+
+// ../../node_modules/.pnpm/@aws-sdk+signature-v4-multi-region@3.996.46/node_modules/@aws-sdk/signature-v4-multi-region/dist-es/SignatureV4SignWithCredentials.js
+var SESSION_TOKEN_QUERY_PARAM = "X-Amz-S3session-Token";
+var SESSION_TOKEN_HEADER = SESSION_TOKEN_QUERY_PARAM.toLowerCase();
+var SignatureV4SignWithCredentials = class extends SignatureV4 {
+  async signWithCredentials(requestToSign, credentials, options) {
+    const credentialsWithoutSessionToken = getCredentialsWithoutSessionToken(credentials);
+    requestToSign.headers[SESSION_TOKEN_HEADER] = credentials.sessionToken;
+    const privateAccess = this;
+    setSingleOverride(privateAccess, credentialsWithoutSessionToken);
+    return privateAccess.signRequest(requestToSign, options ?? {});
+  }
+  async presignWithCredentials(requestToSign, credentials, options) {
+    const credentialsWithoutSessionToken = getCredentialsWithoutSessionToken(credentials);
+    delete requestToSign.headers[SESSION_TOKEN_HEADER];
+    requestToSign.headers[SESSION_TOKEN_QUERY_PARAM] = credentials.sessionToken;
+    requestToSign.query = requestToSign.query ?? {};
+    requestToSign.query[SESSION_TOKEN_QUERY_PARAM] = credentials.sessionToken;
+    const privateAccess = this;
+    setSingleOverride(privateAccess, credentialsWithoutSessionToken);
+    return this.presign(requestToSign, options);
+  }
+};
+function getCredentialsWithoutSessionToken(credentials) {
+  return {
+    accessKeyId: credentials.accessKeyId,
+    secretAccessKey: credentials.secretAccessKey,
+    expiration: credentials.expiration
+  };
+}
+function setSingleOverride(privateAccess, credentialsWithoutSessionToken) {
+  const currentCredentialProvider = privateAccess.credentialProvider;
+  privateAccess.credentialProvider = () => {
+    privateAccess.credentialProvider = currentCredentialProvider;
+    return Promise.resolve(credentialsWithoutSessionToken);
+  };
+}
+
+// ../../node_modules/.pnpm/@aws-sdk+signature-v4-multi-region@3.996.46/node_modules/@aws-sdk/signature-v4-multi-region/dist-es/SignatureV4MultiRegion.js
+var SignatureV4MultiRegion = class {
+  sigv4aSigner;
+  sigv4Signer;
+  signerOptions;
+  static sigv4aDependency() {
+    if (typeof signatureV4CrtContainer.CrtSignerV4 === "function") {
+      return "crt";
+    } else if (typeof signatureV4aContainer.SignatureV4a === "function") {
+      return "js";
+    }
+    return "none";
+  }
+  constructor(options) {
+    this.sigv4Signer = new SignatureV4SignWithCredentials(options);
+    this.signerOptions = options;
+  }
+  async sign(requestToSign, options = {}) {
+    if (options.signingRegion === "*") {
+      return this.getSigv4aSigner().sign(requestToSign, options);
+    }
+    return this.sigv4Signer.sign(requestToSign, options);
+  }
+  async signWithCredentials(requestToSign, credentials, options = {}) {
+    if (options.signingRegion === "*") {
+      const signer = this.getSigv4aSigner();
+      const CrtSignerV4 = signatureV4CrtContainer.CrtSignerV4;
+      if (CrtSignerV4 && signer instanceof CrtSignerV4) {
+        return signer.signWithCredentials(requestToSign, credentials, options);
+      } else {
+        throw new Error(`signWithCredentials with signingRegion '*' is only supported when using the CRT dependency @aws-sdk/signature-v4-crt. Please check whether you have installed the "@aws-sdk/signature-v4-crt" package explicitly. You must also register the package by calling [require("@aws-sdk/signature-v4-crt");] or an ESM equivalent such as [import "@aws-sdk/signature-v4-crt";]. For more information please go to https://github.com/aws/aws-sdk-js-v3#functionality-requiring-aws-common-runtime-crt`);
+      }
+    }
+    return this.sigv4Signer.signWithCredentials(requestToSign, credentials, options);
+  }
+  async presign(originalRequest, options = {}) {
+    if (options.signingRegion === "*") {
+      const signer = this.getSigv4aSigner();
+      const CrtSignerV4 = signatureV4CrtContainer.CrtSignerV4;
+      if (CrtSignerV4 && signer instanceof CrtSignerV4) {
+        return signer.presign(originalRequest, options);
+      } else {
+        throw new Error(`presign with signingRegion '*' is only supported when using the CRT dependency @aws-sdk/signature-v4-crt. Please check whether you have installed the "@aws-sdk/signature-v4-crt" package explicitly. You must also register the package by calling [require("@aws-sdk/signature-v4-crt");] or an ESM equivalent such as [import "@aws-sdk/signature-v4-crt";]. For more information please go to https://github.com/aws/aws-sdk-js-v3#functionality-requiring-aws-common-runtime-crt`);
+      }
+    }
+    return this.sigv4Signer.presign(originalRequest, options);
+  }
+  async presignWithCredentials(originalRequest, credentials, options = {}) {
+    if (options.signingRegion === "*") {
+      throw new Error("Method presignWithCredentials is not supported for [signingRegion=*].");
+    }
+    return this.sigv4Signer.presignWithCredentials(originalRequest, credentials, options);
+  }
+  getSigv4aSigner() {
+    if (!this.sigv4aSigner) {
+      const CrtSignerV4 = signatureV4CrtContainer.CrtSignerV4;
+      const JsSigV4aSigner = signatureV4aContainer.SignatureV4a;
+      if (this.signerOptions.runtime === "node") {
+        if (!CrtSignerV4 && !JsSigV4aSigner) {
+          throw new Error("Neither CRT nor JS SigV4a implementation is available. Please load either @aws-sdk/signature-v4-crt or @aws-sdk/signature-v4a. For more information please go to https://github.com/aws/aws-sdk-js-v3#functionality-requiring-aws-common-runtime-crt");
+        }
+        if (CrtSignerV4 && typeof CrtSignerV4 === "function") {
+          this.sigv4aSigner = new CrtSignerV4({
+            ...this.signerOptions,
+            signingAlgorithm: 1
+          });
+        } else if (JsSigV4aSigner && typeof JsSigV4aSigner === "function") {
+          this.sigv4aSigner = new JsSigV4aSigner({
+            ...this.signerOptions
+          });
+        } else {
+          throw new Error("Available SigV4a implementation is not a valid constructor. Please ensure you've properly imported @aws-sdk/signature-v4-crt or @aws-sdk/signature-v4a.For more information please go to https://github.com/aws/aws-sdk-js-v3#functionality-requiring-aws-common-runtime-crt");
+        }
+      } else {
+        if (!JsSigV4aSigner || typeof JsSigV4aSigner !== "function") {
+          throw new Error("JS SigV4a implementation is not available or not a valid constructor. Please check whether you have installed the @aws-sdk/signature-v4a package explicitly. The CRT implementation is not available for browsers. You must also register the package by calling [require('@aws-sdk/signature-v4a');] or an ESM equivalent such as [import '@aws-sdk/signature-v4a';]. For more information please go to https://github.com/aws/aws-sdk-js-v3#using-javascript-non-crt-implementation-of-sigv4a");
+        }
+        this.sigv4aSigner = new JsSigV4aSigner({
+          ...this.signerOptions
+        });
+      }
+    }
+    return this.sigv4aSigner;
+  }
+};
+
+export {
+  SignatureV4MultiRegion
+};

package/dist/chunk-4XN2IRCG.js

@@ -0,0 +1,46 @@
+import {
+  setCredentialFeature
+} from "./chunk-N6IF5QLH.js";
+import {
+  CredentialsProviderError
+} from "./chunk-HAABLEPO.js";
+
+// ../../node_modules/.pnpm/@aws-sdk+credential-provider-env@3.972.70/node_modules/@aws-sdk/credential-provider-env/dist-es/fromEnv.js
+var ENV_KEY = "AWS_ACCESS_KEY_ID";
+var ENV_SECRET = "AWS_SECRET_ACCESS_KEY";
+var ENV_SESSION = "AWS_SESSION_TOKEN";
+var ENV_EXPIRATION = "AWS_CREDENTIAL_EXPIRATION";
+var ENV_CREDENTIAL_SCOPE = "AWS_CREDENTIAL_SCOPE";
+var ENV_ACCOUNT_ID = "AWS_ACCOUNT_ID";
+var fromEnv = (init) => async () => {
+  init?.logger?.debug("@aws-sdk/credential-provider-env - fromEnv");
+  const accessKeyId = process.env[ENV_KEY];
+  const secretAccessKey = process.env[ENV_SECRET];
+  const sessionToken = process.env[ENV_SESSION];
+  const expiry = process.env[ENV_EXPIRATION];
+  const credentialScope = process.env[ENV_CREDENTIAL_SCOPE];
+  const accountId = process.env[ENV_ACCOUNT_ID];
+  if (accessKeyId && secretAccessKey) {
+    const credentials = {
+      accessKeyId,
+      secretAccessKey,
+      ...sessionToken && { sessionToken },
+      ...expiry && { expiration: new Date(expiry) },
+      ...credentialScope && { credentialScope },
+      ...accountId && { accountId }
+    };
+    setCredentialFeature(credentials, "CREDENTIALS_ENV_VARS", "g");
+    return credentials;
+  }
+  throw new CredentialsProviderError("Unable to find environment variable credentials.", { logger: init?.logger });
+};
+
+export {
+  ENV_KEY,
+  ENV_SECRET,
+  ENV_SESSION,
+  ENV_EXPIRATION,
+  ENV_CREDENTIAL_SCOPE,
+  ENV_ACCOUNT_ID,
+  fromEnv
+};

package/dist/{chunk-FM6HYXZ5.js → chunk-5UWKP64Q.js}

@@ -15,6 +15,10 @@ var STORAGE_WARNING_THRESHOLDS = [
 
 // ../../packages/marketplace/src/tool-registry.ts
 var cachedRegistry = null;
+var RETIRED_CATALOG_TOOL_IDS = /* @__PURE__ */ new Set(["video-audio"]);
+function normalizeToolDescriptor(descriptor) {
+  return { ...descriptor, requiresSandbox: descriptor.requiresSandbox !== false };
+}
 function compareToolVersions(left, right) {
   const parse = (version) => {
     const [core, suffix = ""] = version.split("-", 2);
@@ -44,10 +48,10 @@ function mergeToolDescriptors(current, incoming) {
 async function discoverLocalManifests() {
   const registry = {};
   const searchPaths = [
-    // Monorepo development: packages/tools/*
-    path.resolve(process.cwd(), "packages", "tools"),
+    // Monorepo development: packages/marketplace-tools/*
+    path.resolve(process.cwd(), "packages", "marketplace-tools"),
     // Next.js dev server runs in apps/web
-    path.resolve(process.cwd(), "..", "..", "packages", "tools"),
+    path.resolve(process.cwd(), "..", "..", "packages", "marketplace-tools"),
     // Installed tools: .larkup/tools/node_modules/@larkup
     path.resolve(process.cwd(), ".larkup", "tools", "node_modules", "@larkup"),
     path.resolve(process.cwd(), "..", "..", ".larkup", "tools", "node_modules", "@larkup")
@@ -60,8 +64,8 @@ async function discoverLocalManifests() {
         const manifestPath = path.join(searchPath, entry.name, "tool.manifest.json");
         try {
           const raw = await fs.readFile(manifestPath, "utf8");
-          const manifest = JSON.parse(raw);
-          if (manifest.id) {
+          const manifest = normalizeToolDescriptor(JSON.parse(raw));
+          if (manifest.id && !RETIRED_CATALOG_TOOL_IDS.has(manifest.id)) {
             registry[manifest.id] = manifest;
           }
         } catch {
@@ -86,7 +90,9 @@ async function fetchHubCatalog(hubUrl) {
     const data = await res.json();
     const registry = {};
     for (const tool of data.tools ?? []) {
-      if (tool.id) registry[tool.id] = tool;
+      if (tool.id && !RETIRED_CATALOG_TOOL_IDS.has(tool.id)) {
+        registry[tool.id] = normalizeToolDescriptor(tool);
+      }
     }
     return registry;
   } catch {
@@ -94,6 +100,7 @@ async function fetchHubCatalog(hubUrl) {
   }
 }
 async function fetchToolFromHub(toolId, hubUrl) {
+  if (RETIRED_CATALOG_TOOL_IDS.has(toolId)) return null;
   const baseUrl = hubUrl ?? DEFAULT_HUB_URL;
   try {
     const controller = new AbortController();
@@ -111,69 +118,6 @@ async function fetchToolFromHub(toolId, hubUrl) {
   }
 }
 var FALLBACK_REGISTRY = {
-  "video-audio": {
-    id: "video-audio",
-    name: "Video Intelligence",
-    description: "Build evidence-backed video timelines with adaptive attention and bounded source rewind.",
-    category: "media",
-    version: "0.3.6",
-    pricing: "free",
-    emoji: "\u{1F3AC}",
-    icon: "Film",
-    packageName: "@larkup/tool-video-audio",
-    installSize: "~15 MB",
-    author: "Larkup",
-    capabilities: [
-      "video-indexing",
-      "audio-indexing",
-      "transcription",
-      "frame-extraction",
-      "youtube-import",
-      "attention-driven-analysis",
-      "temporal-evidence",
-      "bounded-source-rewind"
-    ],
-    tags: ["video intelligence", "temporal reasoning", "transcription", "ffmpeg", "video", "audio"],
-    downloads: 0,
-    repositoryUrl: "https://github.com/Larkup-AI/larkup",
-    license: "Apache-2.0",
-    updatedAt: "2026-07-20",
-    configSchema: [
-      {
-        key: "frameInterval",
-        label: "Baseline coverage interval (seconds)",
-        type: "text",
-        defaultValue: "10",
-        help: "Baseline cadence for duration-aware coverage frames; scene changes and a reserved ending pass are added separately."
-      },
-      {
-        key: "audioProvider",
-        label: "Audio Provider",
-        type: "select",
-        help: "Choose the provider used only for audio and video transcription.",
-        options: [
-          { label: "OpenAI", value: "openai" },
-          { label: "Groq", value: "groq" },
-          { label: "Deepgram", value: "deepgram" },
-          { label: "ElevenLabs", value: "elevenlabs" },
-          { label: "Local Whisper", value: "local" }
-        ]
-      },
-      {
-        key: "audioLanguage",
-        label: "Transcription language",
-        type: "text",
-        defaultValue: "auto",
-        help: "Use auto for provider language detection, or enter a language code such as ar, ar-EG, en, or de to override it."
-      },
-      {
-        key: "audioApiKey",
-        label: "Audio API Key",
-        type: "password",
-        help: "Required for the selected audio provider and kept separate from the chat model key."
-      }
-    ]
-  },
   "clip-embeddings": {
     id: "clip-embeddings",
     name: "CLIP Image Search",
@@ -185,6 +129,7 @@ var FALLBACK_REGISTRY = {
     icon: "ScanEye",
     packageName: "@larkup/tool-clip-embeddings",
     installSize: "~200 MB",
+    requiresSandbox: true,
     author: "Larkup",
     capabilities: ["clip-embeddings", "image-similarity"],
     tags: ["clip", "siglip", "image-search", "visual-similarity"],
@@ -206,6 +151,7 @@ var FALLBACK_REGISTRY = {
     packageName: "@larkup/tool-doc-editor",
     installSize: "~5 MB",
     systemDeps: ["docker"],
+    requiresSandbox: true,
     author: "Larkup",
     capabilities: ["document-editing", "form-filling", "document-preview"],
     tags: ["pdf", "docx", "pptx", "form", "canvas", "editor", "fill"],
@@ -218,12 +164,18 @@ var FALLBACK_REGISTRY = {
 async function buildRegistry(opts) {
   if (cachedRegistry) return cachedRegistry;
   let registry = { ...FALLBACK_REGISTRY };
+  let hubAvailable = false;
   if (!opts?.skipHub) {
     const hubCatalog = await fetchHubCatalog(opts?.hubUrl);
-    registry = mergeToolDescriptors(registry, hubCatalog);
+    if (Object.keys(hubCatalog).length > 0) {
+      registry = mergeToolDescriptors(registry, hubCatalog);
+      hubAvailable = true;
+    }
+  }
+  if (!hubAvailable || opts?.preferLocal) {
+    const localManifests = await discoverLocalManifests();
+    registry = mergeToolDescriptors(registry, localManifests);
   }
-  const localManifests = await discoverLocalManifests();
-  registry = mergeToolDescriptors(registry, localManifests);
   cachedRegistry = registry;
   return registry;
 }