@motionscript/cli 0.0.0-stage → 0.1.0-alpha.0

package/CHANGELOG.md

@@ -0,0 +1,5 @@
+# @motionscript/cli
+
+## 0.1.0-alpha.0
+
+Initial release.

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/dist/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/cli.js

@@ -0,0 +1,78 @@
+#!/usr/bin/env node
+import kleur from 'kleur';
+import minimist from 'minimist';
+import { runAdd } from './registry/add.js';
+import { runDiff } from './registry/diff.js';
+import { runInit } from './registry/init.js';
+import { runList } from './registry/list.js';
+/**
+ * `ms` — the component CLI.
+ *
+ * Some Motion Script components do not ship as a dependency you import. Their
+ * source is copied into your project, so you own it: you can read it, change
+ * it, and delete the half you do not want. The cost is that fixes arrive
+ * manually, which is what `ms list` and `ms diff` exist to make bearable.
+ *
+ * This is deliberately only the registry half of the CLI that used to live
+ * here. Rendering from Node is `@motionscript/headless`'s job: a host imports
+ * it and renders a project entry in a headless Chromium page.
+ */
+const HELP = `
+${kleur.bold('ms')} — Motion Script components
+
+  ${kleur.bold('ms init')}                 write motionscript.json and wire the @/components alias
+  ${kleur.bold('ms add')} [name...]        copy a component's source into this project
+  ${kleur.bold('ms list')}                 what is installed, and whether it has been edited
+  ${kleur.bold('ms diff')} [name]          what changed upstream, and on which side
+
+${kleur.bold('Options')}
+  --yes                    skip prompts and accept defaults
+  --overwrite              overwrite existing files without asking
+  --skip-install           do not install npm dependencies after adding
+  --registry <url>         override the default registry (a URL or a local path)
+  --check                  (list) ask each registry whether a newer version exists
+
+${kleur.bold('Registries')}
+  A bare name resolves against ${kleur.dim('https://motionscript.dev/r')}. Additional or
+  private registries go under motionscript.json's "registries", keyed by
+  @namespace, and are reached as ${kleur.dim('ms add @acme/gauge')}.
+`;
+async function main() {
+    const argv = minimist(process.argv.slice(2), {
+        boolean: ['yes', 'overwrite', 'skip-install', 'check', 'help', 'version'],
+        string: ['registry'],
+        alias: { y: 'yes', h: 'help', v: 'version' },
+    });
+    const command = argv._[0];
+    if (argv.help || (!command && !argv.version)) {
+        console.log(HELP);
+        return;
+    }
+    const projectRoot = process.cwd();
+    switch (command) {
+        case 'init':
+            // `runInit` hands back the config it wrote, which only `runAdd`
+            // wants; here the command is done when it returns.
+            await runInit(projectRoot, argv);
+            return;
+        case 'add':
+            return runAdd(projectRoot, argv);
+        case 'list':
+        case 'ls':
+            return runList(projectRoot, argv);
+        case 'diff':
+            return runDiff(projectRoot, argv);
+        default:
+            console.error(kleur.red(`Unknown command "${String(command)}".`), `\nRun ${kleur.bold('ms --help')} for what this does.`);
+            process.exitCode = 1;
+    }
+}
+main().catch((error) => {
+    // A message, not a stack. Every throw on these paths is a condition the
+    // user can act on — an unreachable registry, a namespace that is not
+    // configured, a malformed item — and a stack trace buries the sentence
+    // that says which.
+    console.error(kleur.red(error instanceof Error ? error.message : String(error)));
+    process.exitCode = 1;
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAE7C;;;;;;;;;;;GAWG;AAEH,MAAM,IAAI,GAAG;EACX,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;;IAEd,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;IACrB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC;IACpB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;IACrB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;;EAEvB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;;;;;;;EAOrB,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC;iCACO,KAAK,CAAC,GAAG,CAAC,4BAA4B,CAAC;;mCAErC,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC;CACjE,CAAC;AAEF,KAAK,UAAU,IAAI;IACf,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;QACzC,OAAO,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC;QACzE,MAAM,EAAE,CAAC,UAAU,CAAC;QACpB,KAAK,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE;KAC/C,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO;IACX,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAClC,QAAQ,OAAO,EAAE,CAAC;QACd,KAAK,MAAM;YACP,gEAAgE;YAChE,mDAAmD;YACnD,MAAM,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YACjC,OAAO;QACX,KAAK,KAAK;YACN,OAAO,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACrC,KAAK,MAAM,CAAC;QACZ,KAAK,IAAI;YACL,OAAO,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACtC,KAAK,MAAM;YACP,OAAO,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACtC;YACI,OAAO,CAAC,KAAK,CACT,KAAK,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAClD,SAAS,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,sBAAsB,CACzD,CAAC;YACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IAC7B,CAAC;AACL,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC5B,wEAAwE;IACxE,qEAAqE;IACrE,uEAAuE;IACvE,mBAAmB;IACnB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACjF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACzB,CAAC,CAAC,CAAC","sourcesContent":["#!/usr/bin/env node\nimport kleur from 'kleur';\nimport minimist from 'minimist';\nimport { runAdd } from './registry/add.js';\nimport { runDiff } from './registry/diff.js';\nimport { runInit } from './registry/init.js';\nimport { runList } from './registry/list.js';\n\n/**\n * `ms` — the component CLI.\n *\n * Some Motion Script components do not ship as a dependency you import. Their\n * source is copied into your project, so you own it: you can read it, change\n * it, and delete the half you do not want. The cost is that fixes arrive\n * manually, which is what `ms list` and `ms diff` exist to make bearable.\n *\n * This is deliberately only the registry half of the CLI that used to live\n * here. Rendering from Node is `@motionscript/headless`'s job: a host imports\n * it and renders a project entry in a headless Chromium page.\n */\n\nconst HELP = `\n${kleur.bold('ms')} — Motion Script components\n\n  ${kleur.bold('ms init')}                 write motionscript.json and wire the @/components alias\n  ${kleur.bold('ms add')} [name...]        copy a component's source into this project\n  ${kleur.bold('ms list')}                 what is installed, and whether it has been edited\n  ${kleur.bold('ms diff')} [name]          what changed upstream, and on which side\n\n${kleur.bold('Options')}\n  --yes                    skip prompts and accept defaults\n  --overwrite              overwrite existing files without asking\n  --skip-install           do not install npm dependencies after adding\n  --registry <url>         override the default registry (a URL or a local path)\n  --check                  (list) ask each registry whether a newer version exists\n\n${kleur.bold('Registries')}\n  A bare name resolves against ${kleur.dim('https://motionscript.dev/r')}. Additional or\n  private registries go under motionscript.json's \"registries\", keyed by\n  @namespace, and are reached as ${kleur.dim('ms add @acme/gauge')}.\n`;\n\nasync function main(): Promise<void> {\n    const argv = minimist(process.argv.slice(2), {\n        boolean: ['yes', 'overwrite', 'skip-install', 'check', 'help', 'version'],\n        string: ['registry'],\n        alias: { y: 'yes', h: 'help', v: 'version' },\n    });\n\n    const command = argv._[0];\n    if (argv.help || (!command && !argv.version)) {\n        console.log(HELP);\n        return;\n    }\n\n    const projectRoot = process.cwd();\n    switch (command) {\n        case 'init':\n            // `runInit` hands back the config it wrote, which only `runAdd`\n            // wants; here the command is done when it returns.\n            await runInit(projectRoot, argv);\n            return;\n        case 'add':\n            return runAdd(projectRoot, argv);\n        case 'list':\n        case 'ls':\n            return runList(projectRoot, argv);\n        case 'diff':\n            return runDiff(projectRoot, argv);\n        default:\n            console.error(\n                kleur.red(`Unknown command \"${String(command)}\".`),\n                `\\nRun ${kleur.bold('ms --help')} for what this does.`,\n            );\n            process.exitCode = 1;\n    }\n}\n\nmain().catch((error: unknown) => {\n    // A message, not a stack. Every throw on these paths is a condition the\n    // user can act on — an unreachable registry, a namespace that is not\n    // configured, a malformed item — and a stack trace buries the sentence\n    // that says which.\n    console.error(kleur.red(error instanceof Error ? error.message : String(error)));\n    process.exitCode = 1;\n});\n"]}

package/dist/registry/add.d.ts

@@ -0,0 +1,8 @@
+import type minimist from 'minimist';
+/**
+ * `ms add [name...]` — copy one or more registry components' source into
+ * this project, following any `registryDependencies` first, then install the
+ * npm packages they need.
+ */
+export declare function runAdd(projectRoot: string, argv: minimist.ParsedArgs): Promise<void>;
+//# sourceMappingURL=add.d.ts.map

package/dist/registry/add.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"add.d.ts","sourceRoot":"","sources":["../../src/registry/add.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,QAAQ,MAAM,UAAU,CAAC;AAQrC;;;;GAIG;AACH,wBAAsB,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CA0F1F"}

package/dist/registry/add.js

@@ -0,0 +1,93 @@
+import path from 'node:path';
+import kleur from 'kleur';
+import prompts from 'prompts';
+import { componentsConfigExists, loadComponentsConfig } from './config.js';
+import { fetchRegistryIndex, resolveItemUrl } from './fetch.js';
+import { resolveComponents, writeComponentFiles, collectDependencies } from './install.js';
+import { detectPackageManager, installDependencies } from './package-manager.js';
+import { runInit } from './init.js';
+import { loadLock, recordInstall, writeLock } from './lock.js';
+/**
+ * `ms add [name...]` — copy one or more registry components' source into
+ * this project, following any `registryDependencies` first, then install the
+ * npm packages they need.
+ */
+export async function runAdd(projectRoot, argv) {
+    if (!componentsConfigExists(projectRoot)) {
+        if (!argv.yes) {
+            const { proceed } = await prompts({
+                type: 'confirm',
+                name: 'proceed',
+                message: 'No motionscript.json found. Run `ms init` now?',
+                initial: true,
+            });
+            if (!proceed) {
+                console.log(kleur.dim('Aborted.'));
+                return;
+            }
+        }
+        await runInit(projectRoot, argv);
+    }
+    const config = loadComponentsConfig(projectRoot);
+    if (!config)
+        throw new Error('motionscript.json could not be loaded after init.');
+    const defaultRegistryUrl = typeof argv.registry === 'string' ? argv.registry : undefined;
+    let names = argv._.slice(1).filter(Boolean);
+    if (names.length === 0) {
+        const index = await fetchRegistryIndex(defaultRegistryUrl);
+        if (index.length === 0) {
+            console.log(kleur.yellow('The registry has no components to add.'));
+            return;
+        }
+        const { selected } = await prompts({
+            type: 'multiselect',
+            name: 'selected',
+            message: 'Select components to add',
+            choices: index.map(entry => ({
+                title: entry.name,
+                description: entry.description,
+                value: entry.name,
+            })),
+            min: 1,
+        });
+        if (!selected || selected.length === 0) {
+            console.log(kleur.dim('Aborted.'));
+            return;
+        }
+        names = selected;
+    }
+    console.log(kleur.bold(`Adding ${names.join(', ')}...`));
+    const items = await resolveComponents(names, config, defaultRegistryUrl);
+    const lock = loadLock(projectRoot);
+    for (const item of items) {
+        // The name as typed, so `@acme/gauge` is recorded under its namespace
+        // rather than under the bare `gauge` two registries could both publish.
+        const requested = names.find((n) => n.endsWith(item.name)) ?? item.name;
+        const { written, skipped, recorded } = await writeComponentFiles(item, config, projectRoot, {
+            // --yes is "fully non-interactive": it also answers the overwrite
+            // prompt, so a scripted `ms add --yes` never blocks on stdin.
+            force: Boolean(argv.overwrite || argv.yes),
+            previous: lock.components[requested],
+        });
+        if (Object.keys(recorded).length > 0) {
+            recordInstall(lock, requested, item, resolveItemUrl(requested, config, defaultRegistryUrl).url, recorded);
+        }
+        for (const file of written) {
+            console.log(`  ${kleur.green('✓')} ${path.relative(projectRoot, file)}`);
+        }
+        for (const file of skipped) {
+            console.log(`  ${kleur.dim('–')} ${path.relative(projectRoot, file)} ${kleur.dim('(skipped)')}`);
+        }
+    }
+    if (!argv['skip-install']) {
+        const dependencies = collectDependencies(items);
+        if (Object.keys(dependencies).length > 0) {
+            const pm = detectPackageManager(projectRoot);
+            console.log(kleur.bold(`Installing dependencies with ${pm}...`));
+            installDependencies(pm, dependencies, projectRoot);
+        }
+    }
+    writeLock(projectRoot, lock);
+    console.log(kleur.green(`Done. Added: ${items.map(i => i.name).join(', ')}.`));
+}
+//# sourceMappingURL=add.js.map

package/dist/registry/add.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"add.js","sourceRoot":"","sources":["../../src/registry/add.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAC3E,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAC3F,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AACjF,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAE/D;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,WAAmB,EAAE,IAAyB;IACvE,IAAI,CAAC,sBAAsB,CAAC,WAAW,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACZ,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,OAAO,CAAC;gBAC9B,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,gDAAgD;gBACzD,OAAO,EAAE,IAAI;aAChB,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,EAAE,CAAC;gBACX,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;gBACnC,OAAO;YACX,CAAC;QACL,CAAC;QACD,MAAM,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,MAAM,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IAElF,MAAM,kBAAkB,GAAG,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAEzF,IAAI,KAAK,GAAI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC1D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;QAC3D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,wCAAwC,CAAC,CAAC,CAAC;YACpE,OAAO;QACX,CAAC;QACD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,OAAO,CAAC;YAC/B,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,0BAA0B;YACnC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACzB,KAAK,EAAE,KAAK,CAAC,IAAI;gBACjB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,KAAK,EAAE,KAAK,CAAC,IAAI;aACpB,CAAC,CAAC;YACH,GAAG,EAAE,CAAC;SACT,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,IAAK,QAAqB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;YACnC,OAAO;QACX,CAAC;QACD,KAAK,GAAG,QAAoB,CAAC;IACjC,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IAEnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,sEAAsE;QACtE,wEAAwE;QACxE,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC;QACxE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE;YACxF,kEAAkE;YAClE,8DAA8D;YAC9D,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC;YAC1C,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;SACvC,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnC,aAAa,CACT,IAAI,EACJ,SAAS,EACT,IAAI,EACJ,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC,GAAG,EACzD,QAAQ,CACX,CAAC;QACN,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACrG,CAAC;IACL,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;QACxB,MAAM,YAAY,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvC,MAAM,EAAE,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC,CAAC;YACjE,mBAAmB,CAAC,EAAE,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;QACvD,CAAC;IACL,CAAC;IAED,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAE7B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACnF,CAAC","sourcesContent":["import path from 'node:path';\nimport kleur from 'kleur';\nimport prompts from 'prompts';\nimport type minimist from 'minimist';\nimport { componentsConfigExists, loadComponentsConfig } from './config.js';\nimport { fetchRegistryIndex, resolveItemUrl } from './fetch.js';\nimport { resolveComponents, writeComponentFiles, collectDependencies } from './install.js';\nimport { detectPackageManager, installDependencies } from './package-manager.js';\nimport { runInit } from './init.js';\nimport { loadLock, recordInstall, writeLock } from './lock.js';\n\n/**\n * `ms add [name...]` — copy one or more registry components' source into\n * this project, following any `registryDependencies` first, then install the\n * npm packages they need.\n */\nexport async function runAdd(projectRoot: string, argv: minimist.ParsedArgs): Promise<void> {\n    if (!componentsConfigExists(projectRoot)) {\n        if (!argv.yes) {\n            const { proceed } = await prompts({\n                type: 'confirm',\n                name: 'proceed',\n                message: 'No motionscript.json found. Run `ms init` now?',\n                initial: true,\n            });\n            if (!proceed) {\n                console.log(kleur.dim('Aborted.'));\n                return;\n            }\n        }\n        await runInit(projectRoot, argv);\n    }\n\n    const config = loadComponentsConfig(projectRoot);\n    if (!config) throw new Error('motionscript.json could not be loaded after init.');\n\n    const defaultRegistryUrl = typeof argv.registry === 'string' ? argv.registry : undefined;\n\n    let names = (argv._.slice(1) as string[]).filter(Boolean);\n    if (names.length === 0) {\n        const index = await fetchRegistryIndex(defaultRegistryUrl);\n        if (index.length === 0) {\n            console.log(kleur.yellow('The registry has no components to add.'));\n            return;\n        }\n        const { selected } = await prompts({\n            type: 'multiselect',\n            name: 'selected',\n            message: 'Select components to add',\n            choices: index.map(entry => ({\n                title: entry.name,\n                description: entry.description,\n                value: entry.name,\n            })),\n            min: 1,\n        });\n        if (!selected || (selected as string[]).length === 0) {\n            console.log(kleur.dim('Aborted.'));\n            return;\n        }\n        names = selected as string[];\n    }\n\n    console.log(kleur.bold(`Adding ${names.join(', ')}...`));\n    const items = await resolveComponents(names, config, defaultRegistryUrl);\n    const lock = loadLock(projectRoot);\n\n    for (const item of items) {\n        // The name as typed, so `@acme/gauge` is recorded under its namespace\n        // rather than under the bare `gauge` two registries could both publish.\n        const requested = names.find((n) => n.endsWith(item.name)) ?? item.name;\n        const { written, skipped, recorded } = await writeComponentFiles(item, config, projectRoot, {\n            // --yes is \"fully non-interactive\": it also answers the overwrite\n            // prompt, so a scripted `ms add --yes` never blocks on stdin.\n            force: Boolean(argv.overwrite || argv.yes),\n            previous: lock.components[requested],\n        });\n        if (Object.keys(recorded).length > 0) {\n            recordInstall(\n                lock,\n                requested,\n                item,\n                resolveItemUrl(requested, config, defaultRegistryUrl).url,\n                recorded,\n            );\n        }\n        for (const file of written) {\n            console.log(`  ${kleur.green('✓')} ${path.relative(projectRoot, file)}`);\n        }\n        for (const file of skipped) {\n            console.log(`  ${kleur.dim('–')} ${path.relative(projectRoot, file)} ${kleur.dim('(skipped)')}`);\n        }\n    }\n\n    if (!argv['skip-install']) {\n        const dependencies = collectDependencies(items);\n        if (Object.keys(dependencies).length > 0) {\n            const pm = detectPackageManager(projectRoot);\n            console.log(kleur.bold(`Installing dependencies with ${pm}...`));\n            installDependencies(pm, dependencies, projectRoot);\n        }\n    }\n\n    writeLock(projectRoot, lock);\n\n    console.log(kleur.green(`Done. Added: ${items.map(i => i.name).join(', ')}.`));\n}\n"]}

package/dist/registry/config.d.ts

@@ -0,0 +1,28 @@
+import type { ComponentsConfig } from './protocol.js';
+export declare const COMPONENTS_CONFIG_FILENAME = "motionscript.json";
+/**
+ * What this file used to be called, oldest first. Both still read, never written.
+ *
+ * `components.json` was renamed because it holds more than components now —
+ * the project entry, asset and shader locations — and because that name at a
+ * project root is shadcn/ui's, which a project may well also have.
+ * `motion-script.json` was the dashed-scope-era name.
+ */
+export declare const LEGACY_CONFIG_FILENAMES: string[];
+/** The registry bare (unnamespaced) component names resolve against, e.g. `ms add code`. */
+export declare const DEFAULT_REGISTRY_URL = "https://motionscript.dev/r";
+export declare const DEFAULT_COMPONENTS_ALIAS = "@/components";
+export declare const DEFAULT_COMPONENTS_PATH = "src/components";
+export declare function componentsConfigExists(projectRoot: string): boolean;
+/**
+ * Load `motionscript.json` from a project root, falling back to either legacy
+ * name. Returns null when absent, mirroring how the CLI probes for
+ * `src/project.ts` elsewhere — presence, not requirement, since most commands
+ * treat this file as optional context rather than something every project must
+ * have.
+ */
+export declare function loadComponentsConfig(projectRoot: string): ComponentsConfig | null;
+/** Write `motionscript.json`, pretty-printed like the toolchain's other generated JSON files. */
+export declare function writeComponentsConfig(projectRoot: string, config: ComponentsConfig): void;
+export declare function defaultComponentsConfig(overrides?: Partial<Pick<ComponentsConfig, 'project'>>): ComponentsConfig;
+//# sourceMappingURL=config.d.ts.map

package/dist/registry/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/registry/config.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEtD,eAAO,MAAM,0BAA0B,sBAAsB,CAAC;AAE9D;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB,UAA4C,CAAC;AAWjF,4FAA4F;AAC5F,eAAO,MAAM,oBAAoB,+BAA+B,CAAC;AAEjE,eAAO,MAAM,wBAAwB,iBAAiB,CAAC;AACvD,eAAO,MAAM,uBAAuB,mBAAmB,CAAC;AAExD,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAEnE;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI,CAIjF;AAED,iGAAiG;AACjG,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAGzF;AAED,wBAAgB,uBAAuB,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC,GAAG,gBAAgB,CAOhH"}

package/dist/registry/config.js

@@ -0,0 +1,55 @@
+import fs from 'node:fs';
+import path from 'node:path';
+export const COMPONENTS_CONFIG_FILENAME = 'motionscript.json';
+/**
+ * What this file used to be called, oldest first. Both still read, never written.
+ *
+ * `components.json` was renamed because it holds more than components now —
+ * the project entry, asset and shader locations — and because that name at a
+ * project root is shadcn/ui's, which a project may well also have.
+ * `motion-script.json` was the dashed-scope-era name.
+ */
+export const LEGACY_CONFIG_FILENAMES = ['motion-script.json', 'components.json'];
+/** The config file actually present, preferring the current name. */
+function configPathIn(projectRoot) {
+    for (const name of [COMPONENTS_CONFIG_FILENAME, ...LEGACY_CONFIG_FILENAMES]) {
+        const candidate = path.join(projectRoot, name);
+        if (fs.existsSync(candidate))
+            return candidate;
+    }
+    return null;
+}
+/** The registry bare (unnamespaced) component names resolve against, e.g. `ms add code`. */
+export const DEFAULT_REGISTRY_URL = 'https://motionscript.dev/r';
+export const DEFAULT_COMPONENTS_ALIAS = '@/components';
+export const DEFAULT_COMPONENTS_PATH = 'src/components';
+export function componentsConfigExists(projectRoot) {
+    return configPathIn(projectRoot) !== null;
+}
+/**
+ * Load `motionscript.json` from a project root, falling back to either legacy
+ * name. Returns null when absent, mirroring how the CLI probes for
+ * `src/project.ts` elsewhere — presence, not requirement, since most commands
+ * treat this file as optional context rather than something every project must
+ * have.
+ */
+export function loadComponentsConfig(projectRoot) {
+    const configPath = configPathIn(projectRoot);
+    if (!configPath)
+        return null;
+    return JSON.parse(fs.readFileSync(configPath, 'utf8'));
+}
+/** Write `motionscript.json`, pretty-printed like the toolchain's other generated JSON files. */
+export function writeComponentsConfig(projectRoot, config) {
+    const configPath = path.join(projectRoot, COMPONENTS_CONFIG_FILENAME);
+    fs.writeFileSync(configPath, `${JSON.stringify(config, null, 2)}\n`);
+}
+export function defaultComponentsConfig(overrides) {
+    return {
+        $schema: 'https://motionscript.dev/schema/motionscript.json',
+        project: overrides?.project ?? 'src/project.ts',
+        aliases: { components: DEFAULT_COMPONENTS_ALIAS },
+        paths: { components: DEFAULT_COMPONENTS_PATH },
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/registry/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/registry/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,MAAM,CAAC,MAAM,0BAA0B,GAAG,mBAAmB,CAAC;AAE9D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,oBAAoB,EAAE,iBAAiB,CAAC,CAAC;AAEjF,qEAAqE;AACrE,SAAS,YAAY,CAAC,WAAmB;IACrC,KAAK,MAAM,IAAI,IAAI,CAAC,0BAA0B,EAAE,GAAG,uBAAuB,CAAC,EAAE,CAAC;QAC1E,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC/C,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IACnD,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,4FAA4F;AAC5F,MAAM,CAAC,MAAM,oBAAoB,GAAG,4BAA4B,CAAC;AAEjE,MAAM,CAAC,MAAM,wBAAwB,GAAG,cAAc,CAAC;AACvD,MAAM,CAAC,MAAM,uBAAuB,GAAG,gBAAgB,CAAC;AAExD,MAAM,UAAU,sBAAsB,CAAC,WAAmB;IACtD,OAAO,YAAY,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC;AAC9C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACpD,MAAM,UAAU,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IAC7C,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAqB,CAAC;AAC/E,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,qBAAqB,CAAC,WAAmB,EAAE,MAAwB;IAC/E,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,0BAA0B,CAAC,CAAC;IACtE,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,SAAsD;IAC1F,OAAO;QACH,OAAO,EAAE,mDAAmD;QAC5D,OAAO,EAAE,SAAS,EAAE,OAAO,IAAI,gBAAgB;QAC/C,OAAO,EAAE,EAAE,UAAU,EAAE,wBAAwB,EAAE;QACjD,KAAK,EAAE,EAAE,UAAU,EAAE,uBAAuB,EAAE;KACjD,CAAC;AACN,CAAC","sourcesContent":["import fs from 'node:fs';\nimport path from 'node:path';\nimport type { ComponentsConfig } from './protocol.js';\n\nexport const COMPONENTS_CONFIG_FILENAME = 'motionscript.json';\n\n/**\n * What this file used to be called, oldest first. Both still read, never written.\n *\n * `components.json` was renamed because it holds more than components now —\n * the project entry, asset and shader locations — and because that name at a\n * project root is shadcn/ui's, which a project may well also have.\n * `motion-script.json` was the dashed-scope-era name.\n */\nexport const LEGACY_CONFIG_FILENAMES = ['motion-script.json', 'components.json'];\n\n/** The config file actually present, preferring the current name. */\nfunction configPathIn(projectRoot: string): string | null {\n    for (const name of [COMPONENTS_CONFIG_FILENAME, ...LEGACY_CONFIG_FILENAMES]) {\n        const candidate = path.join(projectRoot, name);\n        if (fs.existsSync(candidate)) return candidate;\n    }\n    return null;\n}\n\n/** The registry bare (unnamespaced) component names resolve against, e.g. `ms add code`. */\nexport const DEFAULT_REGISTRY_URL = 'https://motionscript.dev/r';\n\nexport const DEFAULT_COMPONENTS_ALIAS = '@/components';\nexport const DEFAULT_COMPONENTS_PATH = 'src/components';\n\nexport function componentsConfigExists(projectRoot: string): boolean {\n    return configPathIn(projectRoot) !== null;\n}\n\n/**\n * Load `motionscript.json` from a project root, falling back to either legacy\n * name. Returns null when absent, mirroring how the CLI probes for\n * `src/project.ts` elsewhere — presence, not requirement, since most commands\n * treat this file as optional context rather than something every project must\n * have.\n */\nexport function loadComponentsConfig(projectRoot: string): ComponentsConfig | null {\n    const configPath = configPathIn(projectRoot);\n    if (!configPath) return null;\n    return JSON.parse(fs.readFileSync(configPath, 'utf8')) as ComponentsConfig;\n}\n\n/** Write `motionscript.json`, pretty-printed like the toolchain's other generated JSON files. */\nexport function writeComponentsConfig(projectRoot: string, config: ComponentsConfig): void {\n    const configPath = path.join(projectRoot, COMPONENTS_CONFIG_FILENAME);\n    fs.writeFileSync(configPath, `${JSON.stringify(config, null, 2)}\\n`);\n}\n\nexport function defaultComponentsConfig(overrides?: Partial<Pick<ComponentsConfig, 'project'>>): ComponentsConfig {\n    return {\n        $schema: 'https://motionscript.dev/schema/motionscript.json',\n        project: overrides?.project ?? 'src/project.ts',\n        aliases: { components: DEFAULT_COMPONENTS_ALIAS },\n        paths: { components: DEFAULT_COMPONENTS_PATH },\n    };\n}\n"]}

package/dist/registry/diff.d.ts

@@ -0,0 +1,16 @@
+import type minimist from 'minimist';
+/**
+ * `ms diff [name]` — what upstream changed under your feet.
+ *
+ * The counterpart to `ms list`: that one answers "did I change this", this one
+ * answers "did they". Both are only answerable because the lockfile recorded
+ * the bytes that were written, which is what gives a three-way comparison a
+ * middle term — yours, theirs, and the common ancestor they diverged from.
+ *
+ * Deliberately prints a summary rather than a unified diff. A component is
+ * files on disk in a project that already has a diff tool and a version control
+ * system with better ones; what the CLI uniquely knows is *which* files moved
+ * and in which direction, and that is what it says.
+ */
+export declare function runDiff(projectRoot: string, argv: minimist.ParsedArgs): Promise<void>;
+//# sourceMappingURL=diff.d.ts.map

package/dist/registry/diff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.d.ts","sourceRoot":"","sources":["../../src/registry/diff.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,QAAQ,MAAM,UAAU,CAAC;AAKrC;;;;;;;;;;;;GAYG;AACH,wBAAsB,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAoE3F"}

package/dist/registry/diff.js

@@ -0,0 +1,83 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import kleur from 'kleur';
+import { loadComponentsConfig } from './config.js';
+import { fetchRegistryItem } from './fetch.js';
+import { hashContent, loadLock } from './lock.js';
+/**
+ * `ms diff [name]` — what upstream changed under your feet.
+ *
+ * The counterpart to `ms list`: that one answers "did I change this", this one
+ * answers "did they". Both are only answerable because the lockfile recorded
+ * the bytes that were written, which is what gives a three-way comparison a
+ * middle term — yours, theirs, and the common ancestor they diverged from.
+ *
+ * Deliberately prints a summary rather than a unified diff. A component is
+ * files on disk in a project that already has a diff tool and a version control
+ * system with better ones; what the CLI uniquely knows is *which* files moved
+ * and in which direction, and that is what it says.
+ */
+export async function runDiff(projectRoot, argv) {
+    const lock = loadLock(projectRoot);
+    const config = loadComponentsConfig(projectRoot);
+    const defaultRegistryUrl = typeof argv.registry === 'string' ? argv.registry : undefined;
+    const requested = argv._.slice(1).filter(Boolean);
+    const names = requested.length > 0 ? requested : Object.keys(lock.components);
+    if (names.length === 0) {
+        console.log(kleur.dim('No components installed.'));
+        return;
+    }
+    for (const name of names) {
+        const entry = lock.components[name];
+        if (!entry) {
+            console.log(`${kleur.bold(name)}  ${kleur.red('not installed')}`);
+            continue;
+        }
+        let upstream;
+        try {
+            upstream = await fetchRegistryItem(name, config, defaultRegistryUrl);
+        }
+        catch (error) {
+            console.log(`${kleur.bold(name)}  ${kleur.red('unreachable')} ${kleur.dim(String(error))}`);
+            continue;
+        }
+        const header = [kleur.bold(name)];
+        if (entry.version || upstream.version) {
+            header.push(kleur.dim(`${entry.version ?? '?'} → ${upstream.version ?? '?'}`));
+        }
+        console.log(header.join('  '));
+        const seen = new Set();
+        for (const file of upstream.files) {
+            seen.add(file.path);
+            const locked = entry.files[file.path];
+            if (!locked) {
+                console.log(`  ${kleur.green('+')} ${file.path} ${kleur.dim('(new upstream)')}`);
+                continue;
+            }
+            const onDisk = path.join(projectRoot, locked.target);
+            const local = fs.existsSync(onDisk) ? fs.readFileSync(onDisk, 'utf8') : null;
+            const upstreamChanged = hashContent(file.content) !== locked.installed;
+            const localChanged = local !== null && hashContent(local) !== locked.installed;
+            if (local === null) {
+                console.log(`  ${kleur.red('-')} ${file.path} ${kleur.dim('(missing locally)')}`);
+            }
+            else if (upstreamChanged && localChanged) {
+                // The only state that needs a person: both moved, so
+                // re-installing loses work and not re-installing keeps a bug.
+                console.log(`  ${kleur.yellow('!')} ${file.path} ${kleur.dim('(changed both sides)')}`);
+            }
+            else if (upstreamChanged) {
+                console.log(`  ${kleur.cyan('↑')} ${file.path} ${kleur.dim('(changed upstream)')}`);
+            }
+            else if (localChanged) {
+                console.log(`  ${kleur.yellow('~')} ${file.path} ${kleur.dim('(changed locally)')}`);
+            }
+        }
+        for (const declared of Object.keys(entry.files)) {
+            if (!seen.has(declared)) {
+                console.log(`  ${kleur.dim('×')} ${declared} ${kleur.dim('(dropped upstream)')}`);
+            }
+        }
+    }
+}
+//# sourceMappingURL=diff.js.map