@motionscript/cli 0.0.0-stage → 0.1.0-alpha.0

package/dist/registry/diff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.js","sourceRoot":"","sources":["../../src/registry/diff.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAElD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,WAAmB,EAAE,IAAyB;IACxE,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IACjD,MAAM,kBAAkB,GAAG,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAEzF,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAE9E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,CAAC;QACnD,OAAO;IACX,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;YAClE,SAAS;QACb,CAAC;QAED,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACD,QAAQ,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CACP,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CACjF,CAAC;YACF,SAAS;QACb,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAClC,IAAI,KAAK,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;QACnF,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAE/B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACV,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;gBACjF,SAAS;YACb,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACrD,MAAM,KAAK,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC7E,MAAM,eAAe,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC,SAAS,CAAC;YACvE,MAAM,YAAY,GAAG,KAAK,KAAK,IAAI,IAAI,WAAW,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,CAAC;YAE/E,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACjB,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;YACtF,CAAC;iBAAM,IAAI,eAAe,IAAI,YAAY,EAAE,CAAC;gBACzC,qDAAqD;gBACrD,8DAA8D;gBAC9D,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;YAC5F,CAAC;iBAAM,IAAI,eAAe,EAAE,CAAC;gBACzB,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC;YACxF,CAAC;iBAAM,IAAI,YAAY,EAAE,CAAC;gBACtB,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;YACzF,CAAC;QACL,CAAC;QAED,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACtB,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC;YACtF,CAAC;QACL,CAAC;IACL,CAAC;AACL,CAAC","sourcesContent":["import fs from 'node:fs';\nimport path from 'node:path';\nimport kleur from 'kleur';\nimport type minimist from 'minimist';\nimport { loadComponentsConfig } from './config.js';\nimport { fetchRegistryItem } from './fetch.js';\nimport { hashContent, loadLock } from './lock.js';\n\n/**\n * `ms diff [name]` — what upstream changed under your feet.\n *\n * The counterpart to `ms list`: that one answers \"did I change this\", this one\n * answers \"did they\". Both are only answerable because the lockfile recorded\n * the bytes that were written, which is what gives a three-way comparison a\n * middle term — yours, theirs, and the common ancestor they diverged from.\n *\n * Deliberately prints a summary rather than a unified diff. A component is\n * files on disk in a project that already has a diff tool and a version control\n * system with better ones; what the CLI uniquely knows is *which* files moved\n * and in which direction, and that is what it says.\n */\nexport async function runDiff(projectRoot: string, argv: minimist.ParsedArgs): Promise<void> {\n    const lock = loadLock(projectRoot);\n    const config = loadComponentsConfig(projectRoot);\n    const defaultRegistryUrl = typeof argv.registry === 'string' ? argv.registry : undefined;\n\n    const requested = argv._.slice(1).filter(Boolean);\n    const names = requested.length > 0 ? requested : Object.keys(lock.components);\n\n    if (names.length === 0) {\n        console.log(kleur.dim('No components installed.'));\n        return;\n    }\n\n    for (const name of names) {\n        const entry = lock.components[name];\n        if (!entry) {\n            console.log(`${kleur.bold(name)}  ${kleur.red('not installed')}`);\n            continue;\n        }\n\n        let upstream;\n        try {\n            upstream = await fetchRegistryItem(name, config, defaultRegistryUrl);\n        } catch (error) {\n            console.log(\n                `${kleur.bold(name)}  ${kleur.red('unreachable')} ${kleur.dim(String(error))}`,\n            );\n            continue;\n        }\n\n        const header = [kleur.bold(name)];\n        if (entry.version || upstream.version) {\n            header.push(kleur.dim(`${entry.version ?? '?'} → ${upstream.version ?? '?'}`));\n        }\n        console.log(header.join('  '));\n\n        const seen = new Set<string>();\n        for (const file of upstream.files) {\n            seen.add(file.path);\n            const locked = entry.files[file.path];\n            if (!locked) {\n                console.log(`  ${kleur.green('+')} ${file.path} ${kleur.dim('(new upstream)')}`);\n                continue;\n            }\n            const onDisk = path.join(projectRoot, locked.target);\n            const local = fs.existsSync(onDisk) ? fs.readFileSync(onDisk, 'utf8') : null;\n            const upstreamChanged = hashContent(file.content) !== locked.installed;\n            const localChanged = local !== null && hashContent(local) !== locked.installed;\n\n            if (local === null) {\n                console.log(`  ${kleur.red('-')} ${file.path} ${kleur.dim('(missing locally)')}`);\n            } else if (upstreamChanged && localChanged) {\n                // The only state that needs a person: both moved, so\n                // re-installing loses work and not re-installing keeps a bug.\n                console.log(`  ${kleur.yellow('!')} ${file.path} ${kleur.dim('(changed both sides)')}`);\n            } else if (upstreamChanged) {\n                console.log(`  ${kleur.cyan('↑')} ${file.path} ${kleur.dim('(changed upstream)')}`);\n            } else if (localChanged) {\n                console.log(`  ${kleur.yellow('~')} ${file.path} ${kleur.dim('(changed locally)')}`);\n            }\n        }\n\n        for (const declared of Object.keys(entry.files)) {\n            if (!seen.has(declared)) {\n                console.log(`  ${kleur.dim('×')} ${declared} ${kleur.dim('(dropped upstream)')}`);\n            }\n        }\n    }\n}\n"]}

package/dist/registry/fetch.d.ts

@@ -0,0 +1,16 @@
+import { type ComponentsConfig, type RegistryIndexEntry, type RegistryItem, type ResolvedRegistryTarget } from './protocol.js';
+/** Resolve a (possibly namespaced) name to its item URL, headers and bare name. */
+export declare function resolveItemUrl(name: string, config: ComponentsConfig | null, defaultRegistryUrl?: string): ResolvedRegistryTarget;
+/**
+ * Read a registry URL's JSON content. Remote (`http(s)://`) URLs are
+ * fetched; anything else is treated as a local filesystem path (a bare path
+ * or a `file:` URL) and read directly. This isn't just a testing
+ * convenience — it's genuinely how a private/unpublished registry is
+ * served, and it's how this monorepo's own e2e package populates itself
+ * from a locally-built `packages/site/public/r` without needing a deployed
+ * site.
+ */
+export declare function readRegistrySource(url: string, headers?: Record<string, string>): Promise<unknown>;
+export declare function fetchRegistryIndex(defaultRegistryUrl?: string): Promise<RegistryIndexEntry[]>;
+export declare function fetchRegistryItem(name: string, config: ComponentsConfig | null, defaultRegistryUrl?: string): Promise<RegistryItem>;
+//# sourceMappingURL=fetch.d.ts.map

package/dist/registry/fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.d.ts","sourceRoot":"","sources":["../../src/registry/fetch.ts"],"names":[],"mappings":"AAEA,OAAO,EAIH,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,sBAAsB,EAC9B,MAAM,eAAe,CAAC;AAmBvB,mFAAmF;AACnF,wBAAgB,cAAc,CAC1B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,gBAAgB,GAAG,IAAI,EAC/B,kBAAkB,GAAE,MAA6B,GAClD,sBAAsB,CAExB;AAED;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAaxG;AAED,wBAAsB,kBAAkB,CACpC,kBAAkB,GAAE,MAA6B,GAClD,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAM/B;AAED,wBAAsB,iBAAiB,CACnC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,gBAAgB,GAAG,IAAI,EAC/B,kBAAkB,GAAE,MAA6B,GAClD,OAAO,CAAC,YAAY,CAAC,CAKvB"}

package/dist/registry/fetch.js

@@ -0,0 +1,59 @@
+import fs from 'node:fs';
+import { fileURLToPath } from 'node:url';
+import { assertRegistryItem, joinRegistryPath, resolveItemUrl as resolvePure, } from './protocol.js';
+import { DEFAULT_REGISTRY_URL } from './config.js';
+/**
+ * Reading a registry: the transport half.
+ *
+ * Everything about *which* URL a name resolves to — namespaces, the `{name}`
+ * template, `${VAR}` expansion in headers — lives in `./protocol.js`, kept
+ * pure and separate. That split is deliberate rather than tidy: an editor
+ * installing `@acme/gauge` and `ms add @acme/gauge` must reach the same URL,
+ * and two implementations of one rule is a bug with nowhere single to look.
+ * What is left here is `fs` and `fetch`, which is exactly the part a
+ * browser-based client cannot share.
+ */
+function isRemote(url) {
+    return /^https?:\/\//i.test(url);
+}
+/** Resolve a (possibly namespaced) name to its item URL, headers and bare name. */
+export function resolveItemUrl(name, config, defaultRegistryUrl = DEFAULT_REGISTRY_URL) {
+    return resolvePure(name, config, defaultRegistryUrl, (key) => process.env[key]);
+}
+/**
+ * Read a registry URL's JSON content. Remote (`http(s)://`) URLs are
+ * fetched; anything else is treated as a local filesystem path (a bare path
+ * or a `file:` URL) and read directly. This isn't just a testing
+ * convenience — it's genuinely how a private/unpublished registry is
+ * served, and it's how this monorepo's own e2e package populates itself
+ * from a locally-built `packages/site/public/r` without needing a deployed
+ * site.
+ */
+export async function readRegistrySource(url, headers) {
+    if (isRemote(url)) {
+        const response = await fetch(url, { headers });
+        if (!response.ok) {
+            throw new Error(`Failed to fetch ${url}: ${response.status} ${response.statusText}`);
+        }
+        return response.json();
+    }
+    const filePath = url.startsWith('file:') ? fileURLToPath(url) : url;
+    if (!fs.existsSync(filePath)) {
+        throw new Error(`Registry source not found: ${filePath}`);
+    }
+    return JSON.parse(fs.readFileSync(filePath, 'utf8'));
+}
+export async function fetchRegistryIndex(defaultRegistryUrl = DEFAULT_REGISTRY_URL) {
+    const data = await readRegistrySource(joinRegistryPath(defaultRegistryUrl, 'registry.json'));
+    if (!Array.isArray(data)) {
+        throw new Error('Malformed registry index (expected an array).');
+    }
+    return data;
+}
+export async function fetchRegistryItem(name, config, defaultRegistryUrl = DEFAULT_REGISTRY_URL) {
+    const { url, headers, itemName } = resolveItemUrl(name, config, defaultRegistryUrl);
+    const data = await readRegistrySource(url, headers);
+    assertRegistryItem(data, itemName);
+    return data;
+}
+//# sourceMappingURL=fetch.js.map

package/dist/registry/fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.js","sourceRoot":"","sources":["../../src/registry/fetch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EACH,kBAAkB,EAClB,gBAAgB,EAChB,cAAc,IAAI,WAAW,GAKhC,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEnD;;;;;;;;;;GAUG;AAEH,SAAS,QAAQ,CAAC,GAAW;IACzB,OAAO,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACrC,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,cAAc,CAC1B,IAAY,EACZ,MAA+B,EAC/B,qBAA6B,oBAAoB;IAEjD,OAAO,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AACpF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAW,EAAE,OAAgC;IAClF,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAChB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,mBAAmB,GAAG,KAAK,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC3B,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACpE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,8BAA8B,QAAQ,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAY,CAAC;AACpE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACpC,qBAA6B,oBAAoB;IAEjD,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAAC,CAAC;IAC7F,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,IAA4B,CAAC;AACxC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACnC,IAAY,EACZ,MAA+B,EAC/B,qBAA6B,oBAAoB;IAEjD,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC;IACpF,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACpD,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACnC,OAAO,IAAI,CAAC;AAChB,CAAC","sourcesContent":["import fs from 'node:fs';\nimport { fileURLToPath } from 'node:url';\nimport {\n    assertRegistryItem,\n    joinRegistryPath,\n    resolveItemUrl as resolvePure,\n    type ComponentsConfig,\n    type RegistryIndexEntry,\n    type RegistryItem,\n    type ResolvedRegistryTarget,\n} from './protocol.js';\nimport { DEFAULT_REGISTRY_URL } from './config.js';\n\n/**\n * Reading a registry: the transport half.\n *\n * Everything about *which* URL a name resolves to — namespaces, the `{name}`\n * template, `${VAR}` expansion in headers — lives in `./protocol.js`, kept\n * pure and separate. That split is deliberate rather than tidy: an editor\n * installing `@acme/gauge` and `ms add @acme/gauge` must reach the same URL,\n * and two implementations of one rule is a bug with nowhere single to look.\n * What is left here is `fs` and `fetch`, which is exactly the part a\n * browser-based client cannot share.\n */\n\nfunction isRemote(url: string): boolean {\n    return /^https?:\\/\\//i.test(url);\n}\n\n/** Resolve a (possibly namespaced) name to its item URL, headers and bare name. */\nexport function resolveItemUrl(\n    name: string,\n    config: ComponentsConfig | null,\n    defaultRegistryUrl: string = DEFAULT_REGISTRY_URL,\n): ResolvedRegistryTarget {\n    return resolvePure(name, config, defaultRegistryUrl, (key) => process.env[key]);\n}\n\n/**\n * Read a registry URL's JSON content. Remote (`http(s)://`) URLs are\n * fetched; anything else is treated as a local filesystem path (a bare path\n * or a `file:` URL) and read directly. This isn't just a testing\n * convenience — it's genuinely how a private/unpublished registry is\n * served, and it's how this monorepo's own e2e package populates itself\n * from a locally-built `packages/site/public/r` without needing a deployed\n * site.\n */\nexport async function readRegistrySource(url: string, headers?: Record<string, string>): Promise<unknown> {\n    if (isRemote(url)) {\n        const response = await fetch(url, { headers });\n        if (!response.ok) {\n            throw new Error(`Failed to fetch ${url}: ${response.status} ${response.statusText}`);\n        }\n        return response.json();\n    }\n    const filePath = url.startsWith('file:') ? fileURLToPath(url) : url;\n    if (!fs.existsSync(filePath)) {\n        throw new Error(`Registry source not found: ${filePath}`);\n    }\n    return JSON.parse(fs.readFileSync(filePath, 'utf8')) as unknown;\n}\n\nexport async function fetchRegistryIndex(\n    defaultRegistryUrl: string = DEFAULT_REGISTRY_URL,\n): Promise<RegistryIndexEntry[]> {\n    const data = await readRegistrySource(joinRegistryPath(defaultRegistryUrl, 'registry.json'));\n    if (!Array.isArray(data)) {\n        throw new Error('Malformed registry index (expected an array).');\n    }\n    return data as RegistryIndexEntry[];\n}\n\nexport async function fetchRegistryItem(\n    name: string,\n    config: ComponentsConfig | null,\n    defaultRegistryUrl: string = DEFAULT_REGISTRY_URL,\n): Promise<RegistryItem> {\n    const { url, headers, itemName } = resolveItemUrl(name, config, defaultRegistryUrl);\n    const data = await readRegistrySource(url, headers);\n    assertRegistryItem(data, itemName);\n    return data;\n}\n"]}

package/dist/registry/init.d.ts

@@ -0,0 +1,15 @@
+import type minimist from 'minimist';
+import type { ComponentsConfig } from './protocol.js';
+/**
+ * `ms init` — write `motionscript.json` and wire a "@/components/*" path alias
+ * into tsconfig.json so the editor/typechecker resolves it. Only TypeScript
+ * reads this edit; a bundler resolves the alias from its own config.
+ *
+ * Deliberately diverges from shadcn's own `init` (which *requires* an
+ * existing tsconfig path alias and errors if one is missing): a fresh
+ * Motion Script project has none, so requiring it here would break its first
+ * `ms add`. Uses jsonc-parser so existing comments/formatting in a
+ * hand-edited tsconfig.json survive, unlike a JSON.parse/stringify round-trip.
+ */
+export declare function runInit(projectRoot: string, argv: minimist.ParsedArgs): Promise<ComponentsConfig>;
+//# sourceMappingURL=init.d.ts.map

package/dist/registry/init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/registry/init.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,QAAQ,MAAM,UAAU,CAAC;AASrC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEtD;;;;;;;;;;GAUG;AACH,wBAAsB,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,UAAU,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAwCvG"}

package/dist/registry/init.js

@@ -0,0 +1,69 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import kleur from 'kleur';
+import prompts from 'prompts';
+import { modify, applyEdits } from 'jsonc-parser';
+import { componentsConfigExists, defaultComponentsConfig, writeComponentsConfig, DEFAULT_COMPONENTS_ALIAS, DEFAULT_COMPONENTS_PATH, COMPONENTS_CONFIG_FILENAME, } from './config.js';
+/**
+ * `ms init` — write `motionscript.json` and wire a "@/components/*" path alias
+ * into tsconfig.json so the editor/typechecker resolves it. Only TypeScript
+ * reads this edit; a bundler resolves the alias from its own config.
+ *
+ * Deliberately diverges from shadcn's own `init` (which *requires* an
+ * existing tsconfig path alias and errors if one is missing): a fresh
+ * Motion Script project has none, so requiring it here would break its first
+ * `ms add`. Uses jsonc-parser so existing comments/formatting in a
+ * hand-edited tsconfig.json survive, unlike a JSON.parse/stringify round-trip.
+ */
+export async function runInit(projectRoot, argv) {
+    if (componentsConfigExists(projectRoot) && !argv.force) {
+        console.log(kleur.yellow(`${COMPONENTS_CONFIG_FILENAME} already exists. Pass --force to overwrite.`));
+        return JSON.parse(fs.readFileSync(path.join(projectRoot, COMPONENTS_CONFIG_FILENAME), 'utf8'));
+    }
+    const nonInteractive = Boolean(argv.yes);
+    const answers = nonInteractive
+        ? { componentsPath: DEFAULT_COMPONENTS_PATH, alias: DEFAULT_COMPONENTS_ALIAS }
+        : await prompts([
+            {
+                type: 'text',
+                name: 'componentsPath',
+                message: 'Where should added component source live?',
+                initial: DEFAULT_COMPONENTS_PATH,
+            },
+            {
+                type: 'text',
+                name: 'alias',
+                message: 'Import alias for components',
+                initial: DEFAULT_COMPONENTS_ALIAS,
+            },
+        ]);
+    if (!nonInteractive && answers.componentsPath === undefined) {
+        throw new Error('Aborted.');
+    }
+    const config = defaultComponentsConfig();
+    config.paths.components = answers.componentsPath;
+    config.aliases.components = answers.alias;
+    writeComponentsConfig(projectRoot, config);
+    console.log(kleur.green(`✓ Wrote ${COMPONENTS_CONFIG_FILENAME}`));
+    addTsconfigAlias(projectRoot, config.aliases.components, config.paths.components);
+    return config;
+}
+/** Add `"<alias>/*": ["./<dir>/*"]` under compilerOptions.paths, preserving comments/formatting. */
+function addTsconfigAlias(projectRoot, alias, componentsDir) {
+    const tsconfigPath = path.join(projectRoot, 'tsconfig.json');
+    if (!fs.existsSync(tsconfigPath)) {
+        console.log(kleur.yellow('No tsconfig.json found — skipping path alias setup.'));
+        return;
+    }
+    const original = fs.readFileSync(tsconfigPath, 'utf8');
+    const aliasKey = `${alias}/*`;
+    const aliasValue = [`./${componentsDir.replace(/\\/g, '/')}/*`];
+    const edits = modify(original, ['compilerOptions', 'paths', aliasKey], aliasValue, {
+        formattingOptions: { insertSpaces: true, tabSize: 4 },
+    });
+    if (edits.length === 0)
+        return;
+    fs.writeFileSync(tsconfigPath, applyEdits(original, edits));
+    console.log(kleur.green(`✓ Added "${aliasKey}" to tsconfig.json`));
+}
+//# sourceMappingURL=init.js.map

package/dist/registry/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/registry/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAElD,OAAO,EACH,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB,EACvB,0BAA0B,GAC7B,MAAM,aAAa,CAAC;AAGrB;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,WAAmB,EAAE,IAAyB;IACxE,IAAI,sBAAsB,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,0BAA0B,6CAA6C,CAAC,CAAC,CAAC;QACtG,OAAO,IAAI,CAAC,KAAK,CACb,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,0BAA0B,CAAC,EAAE,MAAM,CAAC,CAC1D,CAAC;IAC1B,CAAC;IAED,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,cAAc;QAC1B,CAAC,CAAC,EAAE,cAAc,EAAE,uBAAuB,EAAE,KAAK,EAAE,wBAAwB,EAAE;QAC9E,CAAC,CAAC,MAAM,OAAO,CAAC;YACZ;gBACI,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,2CAA2C;gBACpD,OAAO,EAAE,uBAAuB;aACnC;YACD;gBACI,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,6BAA6B;gBACtC,OAAO,EAAE,wBAAwB;aACpC;SACJ,CAAC,CAAC;IAEP,IAAI,CAAC,cAAc,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC;IAChC,CAAC;IAED,MAAM,MAAM,GAAG,uBAAuB,EAAE,CAAC;IACzC,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,OAAO,CAAC,cAAc,CAAC;IACjD,MAAM,CAAC,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC;IAE1C,qBAAqB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,0BAA0B,EAAE,CAAC,CAAC,CAAC;IAElE,gBAAgB,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAElF,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,oGAAoG;AACpG,SAAS,gBAAgB,CAAC,WAAmB,EAAE,KAAa,EAAE,aAAqB;IAC/E,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;IAC7D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,qDAAqD,CAAC,CAAC,CAAC;QACjF,OAAO;IACX,CAAC;IAED,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,GAAG,KAAK,IAAI,CAAC;IAC9B,MAAM,UAAU,GAAG,CAAC,KAAK,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IAEhE,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,iBAAiB,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,UAAU,EAAE;QAC/E,iBAAiB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE;KACxD,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAE/B,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;IAC5D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,QAAQ,oBAAoB,CAAC,CAAC,CAAC;AACvE,CAAC","sourcesContent":["import fs from 'node:fs';\nimport path from 'node:path';\nimport kleur from 'kleur';\nimport prompts from 'prompts';\nimport { modify, applyEdits } from 'jsonc-parser';\nimport type minimist from 'minimist';\nimport {\n    componentsConfigExists,\n    defaultComponentsConfig,\n    writeComponentsConfig,\n    DEFAULT_COMPONENTS_ALIAS,\n    DEFAULT_COMPONENTS_PATH,\n    COMPONENTS_CONFIG_FILENAME,\n} from './config.js';\nimport type { ComponentsConfig } from './protocol.js';\n\n/**\n * `ms init` — write `motionscript.json` and wire a \"@/components/*\" path alias\n * into tsconfig.json so the editor/typechecker resolves it. Only TypeScript\n * reads this edit; a bundler resolves the alias from its own config.\n *\n * Deliberately diverges from shadcn's own `init` (which *requires* an\n * existing tsconfig path alias and errors if one is missing): a fresh\n * Motion Script project has none, so requiring it here would break its first\n * `ms add`. Uses jsonc-parser so existing comments/formatting in a\n * hand-edited tsconfig.json survive, unlike a JSON.parse/stringify round-trip.\n */\nexport async function runInit(projectRoot: string, argv: minimist.ParsedArgs): Promise<ComponentsConfig> {\n    if (componentsConfigExists(projectRoot) && !argv.force) {\n        console.log(kleur.yellow(`${COMPONENTS_CONFIG_FILENAME} already exists. Pass --force to overwrite.`));\n        return JSON.parse(\n            fs.readFileSync(path.join(projectRoot, COMPONENTS_CONFIG_FILENAME), 'utf8'),\n        ) as ComponentsConfig;\n    }\n\n    const nonInteractive = Boolean(argv.yes);\n    const answers = nonInteractive\n        ? { componentsPath: DEFAULT_COMPONENTS_PATH, alias: DEFAULT_COMPONENTS_ALIAS }\n        : await prompts([\n            {\n                type: 'text',\n                name: 'componentsPath',\n                message: 'Where should added component source live?',\n                initial: DEFAULT_COMPONENTS_PATH,\n            },\n            {\n                type: 'text',\n                name: 'alias',\n                message: 'Import alias for components',\n                initial: DEFAULT_COMPONENTS_ALIAS,\n            },\n        ]);\n\n    if (!nonInteractive && answers.componentsPath === undefined) {\n        throw new Error('Aborted.');\n    }\n\n    const config = defaultComponentsConfig();\n    config.paths.components = answers.componentsPath;\n    config.aliases.components = answers.alias;\n\n    writeComponentsConfig(projectRoot, config);\n    console.log(kleur.green(`✓ Wrote ${COMPONENTS_CONFIG_FILENAME}`));\n\n    addTsconfigAlias(projectRoot, config.aliases.components, config.paths.components);\n\n    return config;\n}\n\n/** Add `\"<alias>/*\": [\"./<dir>/*\"]` under compilerOptions.paths, preserving comments/formatting. */\nfunction addTsconfigAlias(projectRoot: string, alias: string, componentsDir: string): void {\n    const tsconfigPath = path.join(projectRoot, 'tsconfig.json');\n    if (!fs.existsSync(tsconfigPath)) {\n        console.log(kleur.yellow('No tsconfig.json found — skipping path alias setup.'));\n        return;\n    }\n\n    const original = fs.readFileSync(tsconfigPath, 'utf8');\n    const aliasKey = `${alias}/*`;\n    const aliasValue = [`./${componentsDir.replace(/\\\\/g, '/')}/*`];\n\n    const edits = modify(original, ['compilerOptions', 'paths', aliasKey], aliasValue, {\n        formattingOptions: { insertSpaces: true, tabSize: 4 },\n    });\n    if (edits.length === 0) return;\n\n    fs.writeFileSync(tsconfigPath, applyEdits(original, edits));\n    console.log(kleur.green(`✓ Added \"${aliasKey}\" to tsconfig.json`));\n}\n"]}

package/dist/registry/install.d.ts

@@ -0,0 +1,37 @@
+import type { ComponentsConfig, RegistryItem } from './protocol.js';
+import { type LockedComponent } from './lock.js';
+/**
+ * Resolve a list of requested component names into an ordered, deduped
+ * install list, recursively pulling in each item's `registryDependencies`
+ * before the item itself (so a dependency's files land first).
+ */
+export declare function resolveComponents(names: string[], config: ComponentsConfig | null, defaultRegistryUrl: string | undefined): Promise<RegistryItem[]>;
+export interface WriteResult {
+    written: string[];
+    skipped: string[];
+    /** What actually landed, by the path the item declared, for the lockfile. */
+    recorded: Record<string, {
+        target: string;
+        content: string;
+    }>;
+}
+/**
+ * Write every file in `item` under `<paths.components>/`, at whatever path
+ * each file itself declares — prompting before overwriting an existing file
+ * unless `force` is set.
+ *
+ * Deliberately does *not* nest every item under its own `<item.name>/`
+ * subfolder: a simple single-file component declares one file at
+ * `"code.ts"` and lands flat (`src/components/code.ts`), while a component
+ * that genuinely needs several files declares them nested
+ * (`"line-chart/chart.ts"`, `"line-chart/axis.ts"`) and lands in a real
+ * subfolder. The registry item's own file paths are the only thing that
+ * decides the shape — this function just joins them onto the components root.
+ */
+export declare function writeComponentFiles(item: RegistryItem, config: ComponentsConfig, projectRoot: string, options?: {
+    force?: boolean;
+    previous?: LockedComponent;
+}): Promise<WriteResult>;
+/** Merge every installed item's npm `dependencies` ("pkg@range" strings) into one deduped map. */
+export declare function collectDependencies(items: RegistryItem[]): Record<string, string>;
+//# sourceMappingURL=install.d.ts.map

package/dist/registry/install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../src/registry/install.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAEpE,OAAO,EAAa,KAAK,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5D;;;;GAIG;AACH,wBAAsB,iBAAiB,CACnC,KAAK,EAAE,MAAM,EAAE,EACf,MAAM,EAAE,gBAAgB,GAAG,IAAI,EAC/B,kBAAkB,EAAE,MAAM,GAAG,SAAS,GACvC,OAAO,CAAC,YAAY,EAAE,CAAC,CAkBzB;AAED,MAAM,WAAW,WAAW;IACxB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,6EAA6E;IAC7E,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACjE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,mBAAmB,CACrC,IAAI,EAAE,YAAY,EAClB,MAAM,EAAE,gBAAgB,EACxB,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,eAAe,CAAA;CAAO,GAC9D,OAAO,CAAC,WAAW,CAAC,CAkDtB;AAED,kGAAkG;AAClG,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAajF"}

package/dist/registry/install.js

@@ -0,0 +1,105 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import prompts from 'prompts';
+import { fetchRegistryItem } from './fetch.js';
+import { fileState } from './lock.js';
+/**
+ * Resolve a list of requested component names into an ordered, deduped
+ * install list, recursively pulling in each item's `registryDependencies`
+ * before the item itself (so a dependency's files land first).
+ */
+export async function resolveComponents(names, config, defaultRegistryUrl) {
+    const resolved = [];
+    const seen = new Set();
+    async function visit(name) {
+        if (seen.has(name))
+            return;
+        seen.add(name);
+        const item = await fetchRegistryItem(name, config, defaultRegistryUrl);
+        for (const dep of item.registryDependencies ?? []) {
+            await visit(dep);
+        }
+        resolved.push(item);
+    }
+    for (const name of names) {
+        await visit(name);
+    }
+    return resolved;
+}
+/**
+ * Write every file in `item` under `<paths.components>/`, at whatever path
+ * each file itself declares — prompting before overwriting an existing file
+ * unless `force` is set.
+ *
+ * Deliberately does *not* nest every item under its own `<item.name>/`
+ * subfolder: a simple single-file component declares one file at
+ * `"code.ts"` and lands flat (`src/components/code.ts`), while a component
+ * that genuinely needs several files declares them nested
+ * (`"line-chart/chart.ts"`, `"line-chart/axis.ts"`) and lands in a real
+ * subfolder. The registry item's own file paths are the only thing that
+ * decides the shape — this function just joins them onto the components root.
+ */
+export async function writeComponentFiles(item, config, projectRoot, options = {}) {
+    const targetDir = path.resolve(projectRoot, config.paths.components);
+    const written = [];
+    const skipped = [];
+    const recorded = {};
+    for (const file of item.files) {
+        const dest = path.join(targetDir, file.path);
+        if (fs.existsSync(dest) && !options.force) {
+            // The lockfile is what makes this prompt worth reading. "Already
+            // exists" is true of every file on a re-install and says nothing;
+            // "you changed this since 3.1.0" is the one fact that decides
+            // whether overwriting loses work.
+            const previous = options.previous?.files[file.path];
+            const state = previous ? fileState(projectRoot, previous) : undefined;
+            if (state === 'unchanged') {
+                // Untouched since it was installed, so there is nothing to lose.
+                fs.writeFileSync(dest, file.content);
+                written.push(dest);
+                recorded[file.path] = {
+                    target: path.relative(projectRoot, dest),
+                    content: file.content,
+                };
+                continue;
+            }
+            const { overwrite } = await prompts({
+                type: 'confirm',
+                name: 'overwrite',
+                message: state === 'modified'
+                    ? `${path.relative(projectRoot, dest)} has local changes since ${options.previous?.version ?? 'it was installed'}. Overwrite?`
+                    : `${path.relative(projectRoot, dest)} already exists. Overwrite?`,
+                initial: false,
+            });
+            if (!overwrite) {
+                skipped.push(dest);
+                continue;
+            }
+        }
+        fs.mkdirSync(path.dirname(dest), { recursive: true });
+        fs.writeFileSync(dest, file.content);
+        written.push(dest);
+        recorded[file.path] = {
+            target: path.relative(projectRoot, dest),
+            content: file.content,
+        };
+    }
+    return { written, skipped, recorded };
+}
+/** Merge every installed item's npm `dependencies` ("pkg@range" strings) into one deduped map. */
+export function collectDependencies(items) {
+    const deps = {};
+    for (const item of items) {
+        for (const spec of item.dependencies ?? []) {
+            const at = spec.lastIndexOf('@');
+            // A spec always has a version after the last "@" (a scoped package
+            // has an earlier "@" too, e.g. "@lezer/javascript@^1.5.4") — bail
+            // rather than silently mis-splitting an unexpected shape.
+            if (at <= 0)
+                throw new Error(`Invalid dependency spec (expected "pkg@range"): ${spec}`);
+            deps[spec.slice(0, at)] = spec.slice(at + 1);
+        }
+    }
+    return deps;
+}
+//# sourceMappingURL=install.js.map

package/dist/registry/install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../../src/registry/install.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAwB,MAAM,WAAW,CAAC;AAE5D;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACnC,KAAe,EACf,MAA+B,EAC/B,kBAAsC;IAEtC,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,UAAU,KAAK,CAAC,IAAY;QAC7B,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO;QAC3B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC;QACvE,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,oBAAoB,IAAI,EAAE,EAAE,CAAC;YAChD,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,QAAQ,CAAC;AACpB,CAAC;AASD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACrC,IAAkB,EAClB,MAAwB,EACxB,WAAmB,EACnB,UAA2D,EAAE;IAE7D,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACrE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAwD,EAAE,CAAC;IAEzE,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACxC,iEAAiE;YACjE,kEAAkE;YAClE,8DAA8D;YAC9D,kCAAkC;YAClC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpD,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;gBACxB,iEAAiE;gBACjE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;gBACrC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACnB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;oBAClB,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC;oBACxC,OAAO,EAAE,IAAI,CAAC,OAAO;iBACxB,CAAC;gBACF,SAAS;YACb,CAAC;YACD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,OAAO,CAAC;gBAChC,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,WAAW;gBACjB,OAAO,EACH,KAAK,KAAK,UAAU;oBAChB,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,4BAC/B,OAAO,CAAC,QAAQ,EAAE,OAAO,IAAI,kBACjC,cAAc;oBAChB,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,6BAA6B;gBAC1E,OAAO,EAAE,KAAK;aACjB,CAAC,CAAC;YACH,IAAI,CAAC,SAAS,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACnB,SAAS;YACb,CAAC;QACL,CAAC;QACD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YAClB,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC;YACxC,OAAO,EAAE,IAAI,CAAC,OAAO;SACxB,CAAC;IACN,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC1C,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,mBAAmB,CAAC,KAAqB;IACrD,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;YACzC,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACjC,mEAAmE;YACnE,kEAAkE;YAClE,0DAA0D;YAC1D,IAAI,EAAE,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,IAAI,EAAE,CAAC,CAAC;YACxF,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACjD,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC","sourcesContent":["import fs from 'node:fs';\nimport path from 'node:path';\nimport prompts from 'prompts';\nimport type { ComponentsConfig, RegistryItem } from './protocol.js';\nimport { fetchRegistryItem } from './fetch.js';\nimport { fileState, type LockedComponent } from './lock.js';\n\n/**\n * Resolve a list of requested component names into an ordered, deduped\n * install list, recursively pulling in each item's `registryDependencies`\n * before the item itself (so a dependency's files land first).\n */\nexport async function resolveComponents(\n    names: string[],\n    config: ComponentsConfig | null,\n    defaultRegistryUrl: string | undefined,\n): Promise<RegistryItem[]> {\n    const resolved: RegistryItem[] = [];\n    const seen = new Set<string>();\n\n    async function visit(name: string): Promise<void> {\n        if (seen.has(name)) return;\n        seen.add(name);\n        const item = await fetchRegistryItem(name, config, defaultRegistryUrl);\n        for (const dep of item.registryDependencies ?? []) {\n            await visit(dep);\n        }\n        resolved.push(item);\n    }\n\n    for (const name of names) {\n        await visit(name);\n    }\n    return resolved;\n}\n\nexport interface WriteResult {\n    written: string[];\n    skipped: string[];\n    /** What actually landed, by the path the item declared, for the lockfile. */\n    recorded: Record<string, { target: string; content: string }>;\n}\n\n/**\n * Write every file in `item` under `<paths.components>/`, at whatever path\n * each file itself declares — prompting before overwriting an existing file\n * unless `force` is set.\n *\n * Deliberately does *not* nest every item under its own `<item.name>/`\n * subfolder: a simple single-file component declares one file at\n * `\"code.ts\"` and lands flat (`src/components/code.ts`), while a component\n * that genuinely needs several files declares them nested\n * (`\"line-chart/chart.ts\"`, `\"line-chart/axis.ts\"`) and lands in a real\n * subfolder. The registry item's own file paths are the only thing that\n * decides the shape — this function just joins them onto the components root.\n */\nexport async function writeComponentFiles(\n    item: RegistryItem,\n    config: ComponentsConfig,\n    projectRoot: string,\n    options: { force?: boolean; previous?: LockedComponent } = {},\n): Promise<WriteResult> {\n    const targetDir = path.resolve(projectRoot, config.paths.components);\n    const written: string[] = [];\n    const skipped: string[] = [];\n    const recorded: Record<string, { target: string; content: string }> = {};\n\n    for (const file of item.files) {\n        const dest = path.join(targetDir, file.path);\n        if (fs.existsSync(dest) && !options.force) {\n            // The lockfile is what makes this prompt worth reading. \"Already\n            // exists\" is true of every file on a re-install and says nothing;\n            // \"you changed this since 3.1.0\" is the one fact that decides\n            // whether overwriting loses work.\n            const previous = options.previous?.files[file.path];\n            const state = previous ? fileState(projectRoot, previous) : undefined;\n            if (state === 'unchanged') {\n                // Untouched since it was installed, so there is nothing to lose.\n                fs.writeFileSync(dest, file.content);\n                written.push(dest);\n                recorded[file.path] = {\n                    target: path.relative(projectRoot, dest),\n                    content: file.content,\n                };\n                continue;\n            }\n            const { overwrite } = await prompts({\n                type: 'confirm',\n                name: 'overwrite',\n                message:\n                    state === 'modified'\n                        ? `${path.relative(projectRoot, dest)} has local changes since ${\n                              options.previous?.version ?? 'it was installed'\n                          }. Overwrite?`\n                        : `${path.relative(projectRoot, dest)} already exists. Overwrite?`,\n                initial: false,\n            });\n            if (!overwrite) {\n                skipped.push(dest);\n                continue;\n            }\n        }\n        fs.mkdirSync(path.dirname(dest), { recursive: true });\n        fs.writeFileSync(dest, file.content);\n        written.push(dest);\n        recorded[file.path] = {\n            target: path.relative(projectRoot, dest),\n            content: file.content,\n        };\n    }\n    return { written, skipped, recorded };\n}\n\n/** Merge every installed item's npm `dependencies` (\"pkg@range\" strings) into one deduped map. */\nexport function collectDependencies(items: RegistryItem[]): Record<string, string> {\n    const deps: Record<string, string> = {};\n    for (const item of items) {\n        for (const spec of item.dependencies ?? []) {\n            const at = spec.lastIndexOf('@');\n            // A spec always has a version after the last \"@\" (a scoped package\n            // has an earlier \"@\" too, e.g. \"@lezer/javascript@^1.5.4\") — bail\n            // rather than silently mis-splitting an unexpected shape.\n            if (at <= 0) throw new Error(`Invalid dependency spec (expected \"pkg@range\"): ${spec}`);\n            deps[spec.slice(0, at)] = spec.slice(at + 1);\n        }\n    }\n    return deps;\n}\n"]}

package/dist/registry/list.d.ts

@@ -0,0 +1,13 @@
+import type minimist from 'minimist';
+/**
+ * `ms list` — what this project is carrying, where each piece came from, and
+ * whether it still matches what was installed.
+ *
+ * The question a copied component makes hard to answer. A dependency's version
+ * is in `package.json`; copied source has nothing to look at, so a project six
+ * months in cannot tell which of its components are stock, which were edited,
+ * and which are three versions behind. That is the cost of copying, and the
+ * lockfile is what pays it.
+ */
+export declare function runList(projectRoot: string, argv: minimist.ParsedArgs): Promise<void>;
+//# sourceMappingURL=list.d.ts.map

package/dist/registry/list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../src/registry/list.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,QAAQ,MAAM,UAAU,CAAC;AAKrC;;;;;;;;;GASG;AACH,wBAAsB,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAsD3F"}

package/dist/registry/list.js

@@ -0,0 +1,61 @@
+import kleur from 'kleur';
+import { loadComponentsConfig } from './config.js';
+import { fetchRegistryItem } from './fetch.js';
+import { changedFiles, fileState, loadLock } from './lock.js';
+/**
+ * `ms list` — what this project is carrying, where each piece came from, and
+ * whether it still matches what was installed.
+ *
+ * The question a copied component makes hard to answer. A dependency's version
+ * is in `package.json`; copied source has nothing to look at, so a project six
+ * months in cannot tell which of its components are stock, which were edited,
+ * and which are three versions behind. That is the cost of copying, and the
+ * lockfile is what pays it.
+ */
+export async function runList(projectRoot, argv) {
+    const lock = loadLock(projectRoot);
+    const entries = Object.entries(lock.components);
+    if (entries.length === 0) {
+        console.log(kleur.dim('No components installed. Add one with `ms add <name>`.'));
+        return;
+    }
+    const config = loadComponentsConfig(projectRoot);
+    const defaultRegistryUrl = typeof argv.registry === 'string' ? argv.registry : undefined;
+    for (const [name, entry] of entries) {
+        const changed = changedFiles(projectRoot, entry);
+        const missing = Object.values(entry.files).filter((file) => fileState(projectRoot, file) === 'missing').length;
+        const parts = [kleur.bold(name)];
+        if (entry.version)
+            parts.push(kleur.dim(entry.version));
+        if (entry.registry !== 'default')
+            parts.push(kleur.dim(`from ${entry.registry}`));
+        if (missing > 0) {
+            parts.push(kleur.red(`${missing} file${missing === 1 ? '' : 's'} missing`));
+        }
+        else if (changed.length > 0) {
+            parts.push(kleur.yellow(`modified (${changed.length} of ${Object.keys(entry.files).length} files)`));
+        }
+        else {
+            parts.push(kleur.green('unchanged'));
+        }
+        // Only reached for; never acted on. Telling someone an update exists is
+        // useful, and taking it without being asked would overwrite the edits
+        // the line above just reported.
+        if (argv.check) {
+            try {
+                const upstream = await fetchRegistryItem(name, config, defaultRegistryUrl);
+                if (upstream.version && upstream.version !== entry.version) {
+                    parts.push(kleur.cyan(`${entry.version ?? '?'} → ${upstream.version} available`));
+                }
+            }
+            catch {
+                parts.push(kleur.dim('(upstream unreachable)'));
+            }
+        }
+        console.log(`  ${parts.join('  ')}`);
+    }
+    if (!argv.check) {
+        console.log(kleur.dim('\nPass --check to ask each registry whether a newer version exists.'));
+    }
+}
+//# sourceMappingURL=list.js.map

package/dist/registry/list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.js","sourceRoot":"","sources":["../../src/registry/list.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAE9D;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,WAAmB,EAAE,IAAyB;IACxE,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAEhD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC,CAAC;QACjF,OAAO;IACX,CAAC;IAED,MAAM,MAAM,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IACjD,MAAM,kBAAkB,GAAG,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAEzF,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAC7C,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,SAAS,CACvD,CAAC,MAAM,CAAC;QAET,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACjC,IAAI,KAAK,CAAC,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QACxD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAElF,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YACd,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,OAAO,QAAQ,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC;QAChF,CAAC;aAAM,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CACN,KAAK,CAAC,MAAM,CACR,aAAa,OAAO,CAAC,MAAM,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,SAAS,CAC7E,CACJ,CAAC;QACN,CAAC;aAAM,CAAC;YACJ,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;QACzC,CAAC;QAED,wEAAwE;QACxE,sEAAsE;QACtE,gCAAgC;QAChC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACb,IAAI,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC;gBAC3E,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;oBACzD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,YAAY,CAAC,CAAC,CAAC;gBACtF,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACL,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC;YACpD,CAAC;QACL,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,qEAAqE,CAAC,CAAC,CAAC;IAClG,CAAC;AACL,CAAC","sourcesContent":["import kleur from 'kleur';\nimport type minimist from 'minimist';\nimport { loadComponentsConfig } from './config.js';\nimport { fetchRegistryItem } from './fetch.js';\nimport { changedFiles, fileState, loadLock } from './lock.js';\n\n/**\n * `ms list` — what this project is carrying, where each piece came from, and\n * whether it still matches what was installed.\n *\n * The question a copied component makes hard to answer. A dependency's version\n * is in `package.json`; copied source has nothing to look at, so a project six\n * months in cannot tell which of its components are stock, which were edited,\n * and which are three versions behind. That is the cost of copying, and the\n * lockfile is what pays it.\n */\nexport async function runList(projectRoot: string, argv: minimist.ParsedArgs): Promise<void> {\n    const lock = loadLock(projectRoot);\n    const entries = Object.entries(lock.components);\n\n    if (entries.length === 0) {\n        console.log(kleur.dim('No components installed. Add one with `ms add <name>`.'));\n        return;\n    }\n\n    const config = loadComponentsConfig(projectRoot);\n    const defaultRegistryUrl = typeof argv.registry === 'string' ? argv.registry : undefined;\n\n    for (const [name, entry] of entries) {\n        const changed = changedFiles(projectRoot, entry);\n        const missing = Object.values(entry.files).filter(\n            (file) => fileState(projectRoot, file) === 'missing',\n        ).length;\n\n        const parts = [kleur.bold(name)];\n        if (entry.version) parts.push(kleur.dim(entry.version));\n        if (entry.registry !== 'default') parts.push(kleur.dim(`from ${entry.registry}`));\n\n        if (missing > 0) {\n            parts.push(kleur.red(`${missing} file${missing === 1 ? '' : 's'} missing`));\n        } else if (changed.length > 0) {\n            parts.push(\n                kleur.yellow(\n                    `modified (${changed.length} of ${Object.keys(entry.files).length} files)`,\n                ),\n            );\n        } else {\n            parts.push(kleur.green('unchanged'));\n        }\n\n        // Only reached for; never acted on. Telling someone an update exists is\n        // useful, and taking it without being asked would overwrite the edits\n        // the line above just reported.\n        if (argv.check) {\n            try {\n                const upstream = await fetchRegistryItem(name, config, defaultRegistryUrl);\n                if (upstream.version && upstream.version !== entry.version) {\n                    parts.push(kleur.cyan(`${entry.version ?? '?'} → ${upstream.version} available`));\n                }\n            } catch {\n                parts.push(kleur.dim('(upstream unreachable)'));\n            }\n        }\n\n        console.log(`  ${parts.join('  ')}`);\n    }\n\n    if (!argv.check) {\n        console.log(kleur.dim('\\nPass --check to ask each registry whether a newer version exists.'));\n    }\n}\n"]}

package/dist/registry/lock.d.ts

@@ -0,0 +1,73 @@
+import type { RegistryItem } from './protocol.js';
+/**
+ * What was installed, from where, at what version — and whether it has been
+ * edited since.
+ *
+ * A copied component is source you are *meant* to change: that is the whole
+ * point of copying it rather than depending on it. But then "is this file
+ * yours or ours" stops having an obvious answer, and every later question —
+ * can `ms add` overwrite this, what did upstream change, which of these
+ * components am I even carrying — depends on it.
+ *
+ * So each install records the hash of the bytes it wrote. Re-hashing the file
+ * on disk answers "modified since install" exactly, with no heuristic.
+ *
+ * ## Why a separate file
+ *
+ * `motionscript.json` is hand-authored configuration: registries, paths, an
+ * alias. This is derived, rewritten on every install, and of no interest to a
+ * human until something is wrong. Mixing the two would mean `ms add` rewriting
+ * a file the user edits, and a merge conflict spanning both kinds of content.
+ * Every package manager makes the same split for the same reason.
+ *
+ * ## Why not a header in each file
+ *
+ * A "generated, do not edit" banner above a file whose purpose is to be edited
+ * is a lie, and the first `format-on-save` moves or mangles it. The record
+ * belongs beside the project, not inside the thing it describes.
+ */
+export declare const LOCK_FILENAME = "motionscript.lock.json";
+/** What the lock file used to be called, oldest first. Both still read, never written. */
+export declare const LEGACY_LOCK_FILENAMES: string[];
+/** One file as it was written. */
+export interface LockedFile {
+    /** Where it landed, relative to the project root. */
+    target: string;
+    /** sha256 of the bytes written, after any import rewriting. */
+    installed: string;
+}
+/** One installed component. */
+export interface LockedComponent {
+    /** `"default"`, or the `@namespace` it came from. */
+    registry: string;
+    /** The exact URL it was read from. */
+    url: string;
+    /** The item name, with any namespace stripped. */
+    item: string;
+    /** The item's version at install time, when it declared one. */
+    version?: string;
+    /** The kit its copied source imports, and which stays a dependency. */
+    kit?: string;
+    installedAt: string;
+    files: Record<string, LockedFile>;
+}
+export interface ComponentsLock {
+    $schema?: string;
+    lockfileVersion: 1;
+    components: Record<string, LockedComponent>;
+}
+export declare function hashContent(content: string): string;
+export declare function emptyLock(): ComponentsLock;
+export declare function loadLock(projectRoot: string): ComponentsLock;
+export declare function writeLock(projectRoot: string, lock: ComponentsLock): void;
+/** Records one item's install, replacing any previous record of it. */
+export declare function recordInstall(lock: ComponentsLock, requestedName: string, item: RegistryItem, url: string, written: Record<string, {
+    target: string;
+    content: string;
+}>): void;
+/** How one installed file stands against what was written. */
+export type FileState = 'unchanged' | 'modified' | 'missing';
+export declare function fileState(projectRoot: string, file: LockedFile): FileState;
+/** Every file of a component that is no longer as it was installed. */
+export declare function changedFiles(projectRoot: string, entry: LockedComponent): string[];
+//# sourceMappingURL=lock.d.ts.map

package/dist/registry/lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock.d.ts","sourceRoot":"","sources":["../../src/registry/lock.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,eAAO,MAAM,aAAa,2BAA2B,CAAC;AAEtD,0FAA0F;AAC1F,eAAO,MAAM,qBAAqB,UAAsD,CAAC;AAEzF,kCAAkC;AAClC,MAAM,WAAW,UAAU;IACvB,qDAAqD;IACrD,MAAM,EAAE,MAAM,CAAC;IACf,+DAA+D;IAC/D,SAAS,EAAE,MAAM,CAAC;CACrB;AAED,+BAA+B;AAC/B,MAAM,WAAW,eAAe;IAC5B,qDAAqD;IACrD,QAAQ,EAAE,MAAM,CAAC;IACjB,sCAAsC;IACtC,GAAG,EAAE,MAAM,CAAC;IACZ,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,gEAAgE;IAChE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uEAAuE;IACvE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,cAAc;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,CAAC,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;CAC/C;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED,wBAAgB,SAAS,IAAI,cAAc,CAM1C;AAED,wBAAgB,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,cAAc,CAuB5D;AAED,wBAAgB,SAAS,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,IAAI,CAUzE;AAED,uEAAuE;AACvE,wBAAgB,aAAa,CACzB,IAAI,EAAE,cAAc,EACpB,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,YAAY,EAClB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,GAC7D,IAAI,CAeN;AAED,8DAA8D;AAC9D,MAAM,MAAM,SAAS,GAAG,WAAW,GAAG,UAAU,GAAG,SAAS,CAAC;AAE7D,wBAAgB,SAAS,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,SAAS,CAI1E;AAED,uEAAuE;AACvE,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,GAAG,MAAM,EAAE,CAIlF"}