@myclaude-cli/cli 0.3.0-alpha

package/dist/core/manifest.js

@@ -0,0 +1,203 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+import yaml from 'js-yaml';
+/**
+ * vault.yaml manifest parser and validator.
+ * Source of truth for CLI publishing (DC11).
+ */
+const VALID_TYPES = [
+    'skill', 'agent', 'squad', 'workflow',
+    'design-system', 'claude-md', 'prompt', 'application', 'system',
+];
+/** Maps vault.yaml type → marketplace category */
+const TYPE_TO_CATEGORY = {
+    'skill': 'skills',
+    'agent': 'agents',
+    'squad': 'squads',
+    'workflow': 'workflows',
+    'design-system': 'design-systems',
+    'claude-md': 'claude-md',
+    'prompt': 'prompts',
+    'application': 'applications',
+    'system': 'systems',
+};
+const NAME_RE = /^[a-z0-9][a-z0-9_-]*[a-z0-9]$|^[a-z0-9]$/;
+const SEMVER_RE = /^\d+\.\d+\.\d+(?:-[a-z0-9.]+)?$/;
+/** CE-D38: install target per product type */
+const INSTALL_TARGET = {
+    'skill': '.claude/skills/{slug}/',
+    'agent': '.claude/skills/{slug}/',
+    'squad': '.claude/skills/{slug}/',
+    'workflow': '.claude/skills/{slug}/',
+    'prompt': '.claude/skills/{slug}/',
+    'system': '.claude/skills/{slug}/',
+    'claude-md': '.claude/rules/{slug}.md',
+    'design-system': 'myclaude-products/{slug}/',
+    'application': 'myclaude-products/{slug}/',
+};
+export function readManifest(dir) {
+    const cwd = dir ?? process.cwd();
+    const manifestPath = join(cwd, 'vault.yaml');
+    const issues = [];
+    if (!existsSync(manifestPath)) {
+        issues.push({ field: 'vault.yaml', message: 'vault.yaml not found in current directory', blocker: true });
+        return { manifest: null, issues };
+    }
+    let raw;
+    try {
+        const content = readFileSync(manifestPath, 'utf-8');
+        raw = yaml.load(content);
+        if (!raw || typeof raw !== 'object') {
+            issues.push({ field: 'vault.yaml', message: 'vault.yaml is empty or invalid YAML', blocker: true });
+            return { manifest: null, issues };
+        }
+    }
+    catch {
+        issues.push({ field: 'vault.yaml', message: 'vault.yaml contains invalid YAML syntax', blocker: true });
+        return { manifest: null, issues };
+    }
+    // Required: name
+    const name = typeof raw.name === 'string' ? raw.name.trim() : '';
+    if (!name) {
+        issues.push({ field: 'name', message: 'Missing required field: name', blocker: true });
+    }
+    else if (name.length < 2 || name.length > 50) {
+        issues.push({ field: 'name', message: `Name must be 2-50 characters (got ${name.length})`, blocker: true });
+    }
+    else if (!NAME_RE.test(name)) {
+        issues.push({ field: 'name', message: 'Name must be lowercase alphanumeric with hyphens/underscores', blocker: true });
+    }
+    // Required: version
+    const version = typeof raw.version === 'string' ? raw.version.trim()
+        : typeof raw.version === 'number' ? String(raw.version) + '.0.0' : '';
+    if (!version) {
+        issues.push({ field: 'version', message: 'Missing required field: version', blocker: true });
+    }
+    else if (!SEMVER_RE.test(version)) {
+        issues.push({ field: 'version', message: `Invalid semver version: "${version}" (expected X.Y.Z)`, blocker: true });
+    }
+    // Required: type
+    const type = typeof raw.type === 'string' ? raw.type.trim() : '';
+    if (!type) {
+        issues.push({ field: 'type', message: 'Missing required field: type', blocker: true });
+    }
+    else if (!VALID_TYPES.includes(type)) {
+        issues.push({ field: 'type', message: `Invalid type: "${type}". Valid: ${VALID_TYPES.join(', ')}`, blocker: true });
+    }
+    // Required: description
+    const description = typeof raw.description === 'string' ? raw.description.trim() : '';
+    if (!description) {
+        issues.push({ field: 'description', message: 'Missing required field: description', blocker: true });
+    }
+    else if (description.length > 500) {
+        issues.push({ field: 'description', message: `Description too long (${description.length}/500)`, blocker: true });
+    }
+    // Optional: price (default 0)
+    const price = typeof raw.price === 'number' ? raw.price : 0;
+    if (price < 0) {
+        issues.push({ field: 'price', message: 'Price cannot be negative', blocker: true });
+    }
+    // Optional: license (default MIT)
+    const license = typeof raw.license === 'string' ? raw.license.trim() : 'MIT';
+    // Optional: tags (default [])
+    const tags = Array.isArray(raw.tags)
+        ? raw.tags.filter((t) => typeof t === 'string').map(t => t.trim()).filter(Boolean)
+        : [];
+    // Optional: entry (default based on type)
+    const defaultEntry = ['skill', 'agent', 'squad'].includes(type) ? 'SKILL.md' : 'index.ts';
+    const entry = typeof raw.entry === 'string' ? raw.entry.trim() : defaultEntry;
+    // Check entry file exists
+    const entryPath = resolve(cwd, entry);
+    if (!entryPath.startsWith(resolve(cwd))) {
+        issues.push({ field: 'entry', message: 'Entry file path traversal detected', blocker: true });
+    }
+    else if (!existsSync(entryPath)) {
+        issues.push({ field: 'entry', message: `Entry file not found: ${entry}`, blocker: true });
+    }
+    // Optional: readme (default README.md)
+    const readme = typeof raw.readme === 'string' ? raw.readme.trim() : 'README.md';
+    const readmePath = resolve(cwd, readme);
+    if (!readmePath.startsWith(resolve(cwd))) {
+        issues.push({ field: 'readme', message: 'Readme file path traversal detected', blocker: true });
+    }
+    else if (!existsSync(readmePath)) {
+        issues.push({ field: 'readme', message: `README not found: ${readme}`, blocker: false });
+    }
+    // --- Forward compatibility: manifest_version (WP-24, WP-26) ---
+    const manifestVersion = typeof raw.manifest_version === 'number' ? raw.manifest_version : 2;
+    if (manifestVersion > 2) {
+        issues.push({ field: 'manifest_version', message: `vault.yaml uses a newer format (v${manifestVersion}), some fields may be ignored`, blocker: false });
+    }
+    // --- Warnings for recommended fields (WP-4) ---
+    if (typeof raw.display_name !== 'string') {
+        issues.push({ field: 'display_name', message: 'Recommend adding display_name for better marketplace listing', blocker: false });
+    }
+    if (typeof raw.license !== 'string') {
+        issues.push({ field: 'license', message: 'No license specified, defaulting to MIT', blocker: false });
+    }
+    if (!Array.isArray(raw.tags) || raw.tags.length === 0) {
+        issues.push({ field: 'tags', message: 'Recommend adding tags for discoverability (3-5 tags)', blocker: false });
+    }
+    // --- Enrichment fields (all optional, sensible defaults — WP-3) ---
+    const displayName = typeof raw.display_name === 'string' ? raw.display_name.trim()
+        : name.split(/[-_]/).map(w => w.charAt(0).toUpperCase() + w.slice(1)).join(' ');
+    const rawMcs = typeof raw.mcs_level === 'number' ? raw.mcs_level : 1;
+    const mcsLevel = [1, 2, 3].includes(rawMcs) ? rawMcs : 1;
+    const language = typeof raw.language === 'string' ? raw.language.trim() : 'en';
+    const longDescription = typeof raw.long_description === 'string'
+        ? raw.long_description.slice(0, 2000) : '';
+    const installTarget = typeof raw.install_target === 'string' ? raw.install_target.trim()
+        : (INSTALL_TARGET[type] || '.claude/skills/{slug}/').replace('{slug}', name);
+    const rawCompat = typeof raw.compatibility === 'object' && raw.compatibility
+        ? raw.compatibility : {};
+    const compatibility = {
+        claudeCode: typeof rawCompat.claude_code === 'string' ? rawCompat.claude_code : '>=1.0.0',
+    };
+    const rawDeps = typeof raw.dependencies === 'object' && raw.dependencies
+        ? raw.dependencies : {};
+    const dependencies = {
+        myclaude: Array.isArray(rawDeps.myclaude)
+            ? rawDeps.myclaude.filter((d) => typeof d === 'string')
+            : [],
+    };
+    const hasBlocker = issues.some(i => i.blocker);
+    if (hasBlocker) {
+        return { manifest: null, issues };
+    }
+    return {
+        issues,
+        manifest: {
+            name,
+            version,
+            type,
+            description,
+            price,
+            license,
+            tags,
+            entry,
+            readme,
+            category: TYPE_TO_CATEGORY[type] || type + 's',
+            displayName,
+            mcsLevel,
+            language,
+            longDescription,
+            installTarget,
+            compatibility,
+            dependencies,
+        },
+    };
+}
+/** Read README.md contents for marketplace listing */
+export function readReadmeContents(dir, readmePath = 'README.md') {
+    const cwd = dir ?? process.cwd();
+    const fullPath = resolve(cwd, readmePath);
+    if (!fullPath.startsWith(resolve(cwd)))
+        return '';
+    try {
+        return readFileSync(fullPath, 'utf-8');
+    }
+    catch {
+        return '';
+    }
+}
+//# sourceMappingURL=manifest.js.map

package/dist/core/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/core/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,UAAU,EAAE,YAAY,EAAC,MAAM,SAAS,CAAA;AAChD,OAAO,EAAC,IAAI,EAAE,OAAO,EAAC,MAAM,WAAW,CAAA;AAEvC,OAAO,IAAI,MAAM,SAAS,CAAA;AAE1B;;;GAGG;AAEH,MAAM,WAAW,GAAG;IAClB,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU;IACrC,eAAe,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ;CACvD,CAAA;AAIV,kDAAkD;AAClD,MAAM,gBAAgB,GAAgC;IACpD,OAAO,EAAE,QAAQ;IACjB,OAAO,EAAE,QAAQ;IACjB,OAAO,EAAE,QAAQ;IACjB,UAAU,EAAE,WAAW;IACvB,eAAe,EAAE,gBAAgB;IACjC,WAAW,EAAE,WAAW;IACxB,QAAQ,EAAE,SAAS;IACnB,aAAa,EAAE,cAAc;IAC7B,QAAQ,EAAE,SAAS;CACpB,CAAA;AAED,MAAM,OAAO,GAAG,0CAA0C,CAAA;AAC1D,MAAM,SAAS,GAAG,iCAAiC,CAAA;AAEnD,8CAA8C;AAC9C,MAAM,cAAc,GAAgC;IAClD,OAAO,EAAE,wBAAwB;IACjC,OAAO,EAAE,wBAAwB;IACjC,OAAO,EAAE,wBAAwB;IACjC,UAAU,EAAE,wBAAwB;IACpC,QAAQ,EAAE,wBAAwB;IAClC,QAAQ,EAAE,wBAAwB;IAClC,WAAW,EAAE,yBAAyB;IACtC,eAAe,EAAE,2BAA2B;IAC5C,aAAa,EAAE,2BAA2B;CAC3C,CAAA;AA8BD,MAAM,UAAU,YAAY,CAAC,GAAY;IACvC,MAAM,GAAG,GAAG,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAA;IAChC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAA;IAC5C,MAAM,MAAM,GAAsB,EAAE,CAAA;IAEpC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,EAAC,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,2CAA2C,EAAE,OAAO,EAAE,IAAI,EAAC,CAAC,CAAA;QACvG,OAAO,EAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAC,CAAA;IACjC,CAAC;IAED,IAAI,GAA4B,CAAA;IAChC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;QACnD,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAA4B,CAAA;QACnD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,CAAC,IAAI,CAAC,EAAC,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,qCAAqC,EAAE,OAAO,EAAE,IAAI,EAAC,CAAC,CAAA;YACjG,OAAO,EAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAC,CAAA;QACjC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC,EAAC,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,yCAAyC,EAAE,OAAO,EAAE,IAAI,EAAC,CAAC,CAAA;QACrG,OAAO,EAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAC,CAAA;IACjC,CAAC;IAED,iBAAiB;IACjB,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAChE,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,CAAC,IAAI,CAAC,EAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,8BAA8B,EAAE,OAAO,EAAE,IAAI,EAAC,CAAC,CAAA;IACtF,CAAC;SAAM,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QAC/C,MAAM,CAAC,IAAI,CAAC,EAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,qCAAqC,IAAI,CAAC,MAAM,GAAG,EAAE,OAAO,EAAE,IAAI,EAAC,CAAC,CAAA;IAC3G,CAAC;SAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,EAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,8DAA8D,EAAE,OAAO,EAAE,IAAI,EAAC,CAAC,CAAA;IACtH,CAAC;IAED,oBAAoB;IACpB,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE;QAClE,CAAC,CAAC,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;IACvE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,EAAC,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,iCAAiC,EAAE,OAAO,EAAE,IAAI,EAAC,CAAC,CAAA;IAC5F,CAAC;SAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,EAAC,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,4BAA4B,OAAO,oBAAoB,EAAE,OAAO,EAAE,IAAI,EAAC,CAAC,CAAA;IAClH,CAAC;IAED,iBAAiB;IACjB,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAiB,CAAC,CAAC,CAAC,EAAiB,CAAA;IAC9F,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,CAAC,IAAI,CAAC,EAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,8BAA8B,EAAE,OAAO,EAAE,IAAI,EAAC,CAAC,CAAA;IACtF,CAAC;SAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,EAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,IAAI,aAAa,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAC,CAAC,CAAA;IACnH,CAAC;IAED,wBAAwB;IACxB,MAAM,WAAW,GAAG,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IACrF,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,CAAC,IAAI,CAAC,EAAC,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,qCAAqC,EAAE,OAAO,EAAE,IAAI,EAAC,CAAC,CAAA;IACpG,CAAC;SAAM,IAAI,WAAW,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,EAAC,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,yBAAyB,WAAW,CAAC,MAAM,OAAO,EAAE,OAAO,EAAE,IAAI,EAAC,CAAC,CAAA;IACjH,CAAC;IAED,8BAA8B;IAC9B,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAC3D,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACd,MAAM,CAAC,IAAI,CAAC,EAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,0BAA0B,EAAE,OAAO,EAAE,IAAI,EAAC,CAAC,CAAA;IACnF,CAAC;IAED,kCAAkC;IAClC,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAA;IAE5E,8BAA8B;IAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;QAClC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QAC/F,CAAC,CAAC,EAAE,CAAA;IAEN,0CAA0C;IAC1C,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAA;IACzF,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,YAAY,CAAA;IAE7E,0BAA0B;IAC1B,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IACrC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,EAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,oCAAoC,EAAE,OAAO,EAAE,IAAI,EAAC,CAAC,CAAA;IAC7F,CAAC;SAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,EAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,yBAAyB,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAC,CAAC,CAAA;IACzF,CAAC;IAED,uCAAuC;IACvC,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,WAAW,CAAA;IAC/E,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IACvC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,EAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,qCAAqC,EAAE,OAAO,EAAE,IAAI,EAAC,CAAC,CAAA;IAC/F,CAAC;SAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,EAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,qBAAqB,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAC,CAAC,CAAA;IACxF,CAAC;IAED,iEAAiE;IACjE,MAAM,eAAe,GAAG,OAAO,GAAG,CAAC,gBAAgB,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAA;IAC3F,IAAI,eAAe,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,EAAC,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,oCAAoC,eAAe,+BAA+B,EAAE,OAAO,EAAE,KAAK,EAAC,CAAC,CAAA;IACvJ,CAAC;IAED,iDAAiD;IACjD,IAAI,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,EAAC,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,8DAA8D,EAAE,OAAO,EAAE,KAAK,EAAC,CAAC,CAAA;IAC/H,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,EAAC,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,yCAAyC,EAAE,OAAO,EAAE,KAAK,EAAC,CAAC,CAAA;IACrG,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,EAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,sDAAsD,EAAE,OAAO,EAAE,KAAK,EAAC,CAAC,CAAA;IAC/G,CAAC;IAED,qEAAqE;IACrE,MAAM,WAAW,GAAG,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE;QAChF,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAEjF,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;IACpE,MAAM,QAAQ,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;IAExD,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;IAE9E,MAAM,eAAe,GAAG,OAAO,GAAG,CAAC,gBAAgB,KAAK,QAAQ;QAC9D,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAE5C,MAAM,aAAa,GAAG,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE;QACtF,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,wBAAwB,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;IAE9E,MAAM,SAAS,GAAG,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ,IAAI,GAAG,CAAC,aAAa;QAC1E,CAAC,CAAC,GAAG,CAAC,aAAwC,CAAC,CAAC,CAAC,EAAE,CAAA;IACrD,MAAM,aAAa,GAAG;QACpB,UAAU,EAAE,OAAO,SAAS,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;KAC1F,CAAA;IAED,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ,IAAI,GAAG,CAAC,YAAY;QACtE,CAAC,CAAC,GAAG,CAAC,YAAuC,CAAC,CAAC,CAAC,EAAE,CAAA;IACpD,MAAM,YAAY,GAAG;QACnB,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC;YACvC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YAC7E,CAAC,CAAC,EAAE;KACP,CAAA;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;IAC9C,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,EAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAC,CAAA;IACjC,CAAC;IAED,OAAO;QACL,MAAM;QACN,QAAQ,EAAE;YACR,IAAI;YACJ,OAAO;YACP,IAAI;YACJ,WAAW;YACX,KAAK;YACL,OAAO;YACP,IAAI;YACJ,KAAK;YACL,MAAM;YACN,QAAQ,EAAE,gBAAgB,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,GAAG;YAC9C,WAAW;YACX,QAAQ;YACR,QAAQ;YACR,eAAe;YACf,aAAa;YACb,aAAa;YACb,YAAY;SACb;KACF,CAAA;AACH,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,kBAAkB,CAAC,GAAY,EAAE,UAAU,GAAG,WAAW;IACvE,MAAM,GAAG,GAAG,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAA;IAChC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAA;IACzC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,EAAE,CAAA;IACjD,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC"}

package/dist/core/packer.d.ts

@@ -0,0 +1,25 @@
+export interface PackResult {
+    buffer: Buffer;
+    fileCount: number;
+    totalSize: number;
+    files: string[];
+}
+export interface PackIssue {
+    file: string;
+    message: string;
+    blocker: boolean;
+}
+/**
+ * Collect all files from directory respecting .vaultignore.
+ * Returns absolute paths.
+ */
+export declare function collectFiles(dir: string): {
+    files: string[];
+    issues: PackIssue[];
+};
+/**
+ * Pack collected files into a zip buffer.
+ */
+export declare function packFiles(files: string[], baseDir: string): Promise<PackResult>;
+declare function formatBytes(bytes: number): string;
+export { formatBytes };

package/dist/core/packer.js

@@ -0,0 +1,169 @@
+import { existsSync, readFileSync, readdirSync, statSync } from 'node:fs';
+import { join, relative, resolve } from 'node:path';
+/**
+ * File packer — collects files respecting .vaultignore, creates zip.
+ * Uses JSZip (already a dependency for install).
+ */
+const MAX_TOTAL_BYTES = 50 * 1024 * 1024; // 50 MB
+const MAX_FILE_BYTES = 10 * 1024 * 1024; // 10 MB per file
+// Default ignores (always applied)
+const DEFAULT_IGNORES = [
+    '.env', '.env.*',
+    'node_modules/', '.git/',
+    '.DS_Store', 'Thumbs.db',
+    '*.log',
+    'vault.yaml', // manifest is read separately, not packed
+    '.vaultignore',
+];
+/**
+ * Collect all files from directory respecting .vaultignore.
+ * Returns absolute paths.
+ */
+export function collectFiles(dir) {
+    const cwd = resolve(dir);
+    const issues = [];
+    const ignorePatterns = loadIgnorePatterns(cwd);
+    const files = [];
+    let totalSize = 0;
+    function walk(currentDir) {
+        let entries;
+        try {
+            entries = readdirSync(currentDir);
+        }
+        catch {
+            return;
+        }
+        for (const entry of entries) {
+            const fullPath = join(currentDir, entry);
+            const relPath = relative(cwd, fullPath).replace(/\\/g, '/');
+            if (isIgnored(relPath, ignorePatterns))
+                continue;
+            let stat;
+            try {
+                stat = statSync(fullPath);
+            }
+            catch {
+                continue;
+            }
+            if (stat.isDirectory()) {
+                if (isIgnored(relPath + '/', ignorePatterns))
+                    continue;
+                walk(fullPath);
+            }
+            else if (stat.isFile()) {
+                if (stat.size > MAX_FILE_BYTES) {
+                    issues.push({
+                        blocker: true,
+                        file: relPath,
+                        message: `File too large: ${formatBytes(stat.size)} (max ${formatBytes(MAX_FILE_BYTES)})`,
+                    });
+                    continue;
+                }
+                totalSize += stat.size;
+                if (totalSize > MAX_TOTAL_BYTES) {
+                    issues.push({
+                        blocker: true,
+                        file: relPath,
+                        message: `Total package exceeds ${formatBytes(MAX_TOTAL_BYTES)}`,
+                    });
+                    return;
+                }
+                files.push(fullPath);
+            }
+        }
+    }
+    walk(cwd);
+    return { files, issues };
+}
+/**
+ * Pack collected files into a zip buffer.
+ */
+export async function packFiles(files, baseDir) {
+    const { default: JSZip } = await import('jszip');
+    const zip = new JSZip();
+    const cwd = resolve(baseDir);
+    let totalSize = 0;
+    const relativePaths = [];
+    for (const file of files) {
+        const relPath = relative(cwd, file).replace(/\\/g, '/');
+        const content = readFileSync(file);
+        totalSize += content.length;
+        zip.file(relPath, content);
+        relativePaths.push(relPath);
+    }
+    const buffer = await zip.generateAsync({
+        compression: 'DEFLATE',
+        compressionOptions: { level: 6 },
+        type: 'nodebuffer',
+    });
+    return {
+        buffer,
+        fileCount: files.length,
+        files: relativePaths,
+        totalSize,
+    };
+}
+function loadIgnorePatterns(dir) {
+    const patterns = [...DEFAULT_IGNORES];
+    const ignorePath = join(dir, '.vaultignore');
+    if (existsSync(ignorePath)) {
+        try {
+            const content = readFileSync(ignorePath, 'utf-8');
+            for (const line of content.split('\n')) {
+                const trimmed = line.trim();
+                if (trimmed && !trimmed.startsWith('#')) {
+                    patterns.push(trimmed);
+                }
+            }
+        }
+        catch {
+            // Ignore read errors
+        }
+    }
+    return patterns;
+}
+/**
+ * Simple .gitignore-style pattern matching.
+ * Supports: exact names, glob *, directory/ suffix, .env.* prefix.
+ */
+function isIgnored(relPath, patterns) {
+    const name = relPath.split('/').pop() || relPath;
+    for (const pattern of patterns) {
+        // Directory pattern (trailing /)
+        if (pattern.endsWith('/')) {
+            const dirName = pattern.slice(0, -1);
+            if (relPath === dirName || relPath.startsWith(dirName + '/'))
+                return true;
+            if (name === dirName)
+                return true;
+            continue;
+        }
+        // Glob pattern with *
+        if (pattern.includes('*')) {
+            const regex = new RegExp('^' + pattern.replace(/\./g, '\\.').replace(/\*/g, '.*') + '$');
+            if (regex.test(name) || regex.test(relPath))
+                return true;
+            continue;
+        }
+        // Prefix pattern (e.g., .env.)
+        if (pattern.endsWith('.*')) {
+            const prefix = pattern.slice(0, -2);
+            if (name === prefix || name.startsWith(prefix + '.'))
+                return true;
+            continue;
+        }
+        // Exact match
+        if (name === pattern || relPath === pattern)
+            return true;
+    }
+    return false;
+}
+function formatBytes(bytes) {
+    if (bytes < 1024)
+        return `${bytes} B`;
+    if (bytes < 1024 * 1024)
+        return `${(bytes / 1024).toFixed(1)} KB`;
+    return `${(bytes / (1024 * 1024)).toFixed(1)} MB`;
+}
+export { formatBytes };
+//# sourceMappingURL=packer.js.map

package/dist/core/packer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"packer.js","sourceRoot":"","sources":["../../src/core/packer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAC,MAAM,SAAS,CAAA;AACvE,OAAO,EAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAC,MAAM,WAAW,CAAA;AAEjD;;;GAGG;AAEH,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAA,CAAE,QAAQ;AAClD,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAA,CAAG,iBAAiB;AAE3D,mCAAmC;AACnC,MAAM,eAAe,GAAG;IACtB,MAAM,EAAE,QAAQ;IAChB,eAAe,EAAE,OAAO;IACxB,WAAW,EAAE,WAAW;IACxB,OAAO;IACP,YAAY,EAAQ,0CAA0C;IAC9D,cAAc;CACf,CAAA;AAeD;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IACxB,MAAM,MAAM,GAAgB,EAAE,CAAA;IAC9B,MAAM,cAAc,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAA;IAE9C,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,IAAI,SAAS,GAAG,CAAC,CAAA;IAEjB,SAAS,IAAI,CAAC,UAAkB;QAC9B,IAAI,OAAiB,CAAA;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,UAAU,CAAC,CAAA;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAM;QACR,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;YACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;YAE3D,IAAI,SAAS,CAAC,OAAO,EAAE,cAAc,CAAC;gBAAE,SAAQ;YAEhD,IAAI,IAAI,CAAA;YACR,IAAI,CAAC;gBACH,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAA;YAC3B,CAAC;YAAC,MAAM,CAAC;gBACP,SAAQ;YACV,CAAC;YAED,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACvB,IAAI,SAAS,CAAC,OAAO,GAAG,GAAG,EAAE,cAAc,CAAC;oBAAE,SAAQ;gBACtD,IAAI,CAAC,QAAQ,CAAC,CAAA;YAChB,CAAC;iBAAM,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;gBACzB,IAAI,IAAI,CAAC,IAAI,GAAG,cAAc,EAAE,CAAC;oBAC/B,MAAM,CAAC,IAAI,CAAC;wBACV,OAAO,EAAE,IAAI;wBACb,IAAI,EAAE,OAAO;wBACb,OAAO,EAAE,mBAAmB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,WAAW,CAAC,cAAc,CAAC,GAAG;qBAC1F,CAAC,CAAA;oBACF,SAAQ;gBACV,CAAC;gBAED,SAAS,IAAI,IAAI,CAAC,IAAI,CAAA;gBACtB,IAAI,SAAS,GAAG,eAAe,EAAE,CAAC;oBAChC,MAAM,CAAC,IAAI,CAAC;wBACV,OAAO,EAAE,IAAI;wBACb,IAAI,EAAE,OAAO;wBACb,OAAO,EAAE,yBAAyB,WAAW,CAAC,eAAe,CAAC,EAAE;qBACjE,CAAC,CAAA;oBACF,OAAM;gBACR,CAAC;gBAED,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACtB,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,OAAO,EAAC,KAAK,EAAE,MAAM,EAAC,CAAA;AACxB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,KAAe,EAAE,OAAe;IAC9D,MAAM,EAAC,OAAO,EAAE,KAAK,EAAC,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,CAAA;IAC9C,MAAM,GAAG,GAAG,IAAI,KAAK,EAAE,CAAA;IACvB,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC5B,IAAI,SAAS,GAAG,CAAC,CAAA;IACjB,MAAM,aAAa,GAAa,EAAE,CAAA;IAElC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;QACvD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;QAClC,SAAS,IAAI,OAAO,CAAC,MAAM,CAAA;QAC3B,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAC1B,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC7B,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC;QACrC,WAAW,EAAE,SAAS;QACtB,kBAAkB,EAAE,EAAC,KAAK,EAAE,CAAC,EAAC;QAC9B,IAAI,EAAE,YAAY;KACnB,CAAC,CAAA;IAEF,OAAO;QACL,MAAM;QACN,SAAS,EAAE,KAAK,CAAC,MAAM;QACvB,KAAK,EAAE,aAAa;QACpB,SAAS;KACV,CAAA;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAW;IACrC,MAAM,QAAQ,GAAG,CAAC,GAAG,eAAe,CAAC,CAAA;IACrC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAA;IAE5C,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;YACjD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;gBAC3B,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACxC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;gBACxB,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,qBAAqB;QACvB,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAAC,OAAe,EAAE,QAAkB;IACpD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,OAAO,CAAA;IAEhD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,iCAAiC;QACjC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;YACpC,IAAI,OAAO,KAAK,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,GAAG,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAA;YACzE,IAAI,IAAI,KAAK,OAAO;gBAAE,OAAO,IAAI,CAAA;YACjC,SAAQ;QACV,CAAC;QAED,sBAAsB;QACtB,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,IAAI,MAAM,CACtB,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,GAAG,CAC/D,CAAA;YACD,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,OAAO,IAAI,CAAA;YACxD,SAAQ;QACV,CAAC;QAED,+BAA+B;QAC/B,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;YACnC,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAA;YACjE,SAAQ;QACV,CAAC;QAED,cAAc;QACd,IAAI,IAAI,KAAK,OAAO,IAAI,OAAO,KAAK,OAAO;YAAE,OAAO,IAAI,CAAA;IAC1D,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,IAAI,KAAK,GAAG,IAAI;QAAE,OAAO,GAAG,KAAK,IAAI,CAAA;IACrC,IAAI,KAAK,GAAG,IAAI,GAAG,IAAI;QAAE,OAAO,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAA;IACjE,OAAO,GAAG,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAA;AACnD,CAAC;AAED,OAAO,EAAC,WAAW,EAAC,CAAA"}

package/dist/core/paths.d.ts

@@ -0,0 +1,2 @@
+export declare function getInstallPath(slug: string, type: string, global: boolean): string;
+export declare function getPostInstallHint(slug: string, type: string, location: string): string;

package/dist/core/paths.js

@@ -0,0 +1,50 @@
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+/**
+ * Install target resolution based on product type (DC9/DC10).
+ *
+ * Skills, agents, squads, workflows, prompts, systems → .claude/skills/{slug}/
+ * claude-md → .claude/rules/{slug}.md
+ * design-system, application → ./myclaude-products/{slug}/
+ */
+const SKILL_TYPES = new Set([
+    'skills', 'skill',
+    'agents', 'agent',
+    'squads', 'squad',
+    'workflows', 'workflow',
+    'prompts', 'prompt',
+    'systems', 'system',
+]);
+const EXTERNAL_TYPES = new Set([
+    'design-systems', 'design-system',
+    'applications', 'application',
+]);
+export function getInstallPath(slug, type, global) {
+    const base = global ? join(homedir(), '.claude') : '.claude';
+    // claude-md → single file in rules/
+    if (type === 'claude-md') {
+        return join(base, 'rules', `${slug}.md`);
+    }
+    // skill-like types → skills directory
+    if (SKILL_TYPES.has(type)) {
+        return join(base, 'skills', slug);
+    }
+    // design-system, application → myclaude-products/ in project root
+    if (EXTERNAL_TYPES.has(type)) {
+        return global
+            ? join(homedir(), 'myclaude-products', slug)
+            : join('myclaude-products', slug);
+    }
+    // Fallback: skills directory
+    return join(base, 'skills', slug);
+}
+export function getPostInstallHint(slug, type, location) {
+    if (type === 'claude-md') {
+        return 'Rules auto-loaded in Claude Code sessions';
+    }
+    if (SKILL_TYPES.has(type)) {
+        return `Use /${slug} in your Claude Code session`;
+    }
+    return `Files available at ${location}`;
+}
+//# sourceMappingURL=paths.js.map

package/dist/core/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/core/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,OAAO,EAAC,MAAM,SAAS,CAAA;AAC/B,OAAO,EAAC,IAAI,EAAC,MAAM,WAAW,CAAA;AAE9B;;;;;;GAMG;AAEH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,QAAQ,EAAE,OAAO;IACjB,QAAQ,EAAE,OAAO;IACjB,QAAQ,EAAE,OAAO;IACjB,WAAW,EAAE,UAAU;IACvB,SAAS,EAAE,QAAQ;IACnB,SAAS,EAAE,QAAQ;CACpB,CAAC,CAAA;AAEF,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,gBAAgB,EAAE,eAAe;IACjC,cAAc,EAAE,aAAa;CAC9B,CAAC,CAAA;AAEF,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,IAAY,EAAE,MAAe;IACxE,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAE5D,oCAAoC;IACpC,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,KAAK,CAAC,CAAA;IAC1C,CAAC;IAED,sCAAsC;IACtC,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAA;IACnC,CAAC;IAED,kEAAkE;IAClE,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,MAAM;YACX,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,mBAAmB,EAAE,IAAI,CAAC;YAC5C,CAAC,CAAC,IAAI,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAA;IACrC,CAAC;IAED,6BAA6B;IAC7B,OAAO,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAA;AACnC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,IAAY,EAAE,QAAgB;IAC7E,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACzB,OAAO,2CAA2C,CAAA;IACpD,CAAC;IAED,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,OAAO,QAAQ,IAAI,8BAA8B,CAAA;IACnD,CAAC;IAED,OAAO,sBAAsB,QAAQ,EAAE,CAAA;AACzC,CAAC"}

package/dist/core/secret-scan.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Secret scanner — detects leaked credentials before publishing.
+ * Blocker check per DC22: if patterns match, abort publish.
+ */
+export interface SecretFinding {
+    file: string;
+    line: number;
+    pattern: string;
+    snippet: string;
+}
+/**
+ * Scan a list of files for secret patterns.
+ * Returns findings sorted by file then line.
+ */
+export declare function scanForSecrets(files: string[], baseDir: string): SecretFinding[];
+/** Check if a filename is a .env file (blocker) */
+export declare function isEnvFile(filename: string): boolean;

package/dist/core/secret-scan.js

@@ -0,0 +1,73 @@
+import { readFileSync } from 'node:fs';
+const SECRET_PATTERNS = [
+    { name: 'AWS Access Key', re: /AKIA[0-9A-Z]{16}/ },
+    { name: 'AWS Secret Key', re: /(?:aws_secret|secret_access_key)\s*[=:]\s*["']?[A-Za-z0-9/+=]{40}/i },
+    { name: 'Stripe Secret Key', re: /sk_(?:live|test)_[a-zA-Z0-9]{20,}/ },
+    { name: 'Stripe Webhook Secret', re: /whsec_[a-zA-Z0-9]{20,}/ },
+    { name: 'Firebase Service Account', re: /"type"\s*:\s*"service_account"/ },
+    { name: 'Firebase Private Key', re: /-----BEGIN (?:RSA )?PRIVATE KEY-----/ },
+    { name: 'Generic Token Assignment', re: /(?:api_?key|api_?secret|auth_?token|access_?token|secret_?key)\s*[=:]\s*["'][a-zA-Z0-9_\-/.+=]{20,}["']/i },
+    { name: 'Generic Password', re: /(?:password|passwd|pwd)\s*[=:]\s*["'][^"']{8,}["']/i },
+    { name: 'npm Token', re: /\/\/registry\.npmjs\.org\/:_authToken=/ },
+    { name: 'GitHub Token', re: /gh[ps]_[A-Za-z0-9_]{36,}/ },
+];
+// Binary file extensions to skip
+const BINARY_EXTENSIONS = new Set([
+    '.png', '.jpg', '.jpeg', '.gif', '.ico', '.svg', '.webp',
+    '.woff', '.woff2', '.ttf', '.eot', '.otf',
+    '.zip', '.tar', '.gz', '.bz2', '.7z', '.rar',
+    '.pdf', '.doc', '.docx',
+    '.mp3', '.mp4', '.wav', '.ogg',
+    '.exe', '.dll', '.so', '.dylib',
+]);
+function isBinaryFile(path) {
+    const ext = path.slice(path.lastIndexOf('.')).toLowerCase();
+    return BINARY_EXTENSIONS.has(ext);
+}
+/**
+ * Scan a list of files for secret patterns.
+ * Returns findings sorted by file then line.
+ */
+export function scanForSecrets(files, baseDir) {
+    const findings = [];
+    for (const file of files) {
+        if (isBinaryFile(file))
+            continue;
+        let content;
+        try {
+            content = readFileSync(file, 'utf-8');
+        }
+        catch {
+            continue;
+        }
+        const lines = content.split('\n');
+        for (let i = 0; i < lines.length; i++) {
+            const line = lines[i];
+            for (const { name, re } of SECRET_PATTERNS) {
+                if (re.test(line)) {
+                    // Truncate snippet to avoid leaking the full secret
+                    const match = line.match(re);
+                    const snippet = match
+                        ? line.slice(Math.max(0, match.index - 10), match.index + 30).trim()
+                        : line.slice(0, 60).trim();
+                    const relativePath = file.startsWith(baseDir)
+                        ? file.slice(baseDir.length + 1).replace(/\\/g, '/')
+                        : file;
+                    findings.push({
+                        file: relativePath,
+                        line: i + 1,
+                        pattern: name,
+                        snippet: snippet.length > 50 ? snippet.slice(0, 47) + '...' : snippet,
+                    });
+                }
+            }
+        }
+    }
+    return findings;
+}
+/** Check if a filename is a .env file (blocker) */
+export function isEnvFile(filename) {
+    const base = filename.split('/').pop() || filename;
+    return base === '.env' || base.startsWith('.env.');
+}
+//# sourceMappingURL=secret-scan.js.map

package/dist/core/secret-scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-scan.js","sourceRoot":"","sources":["../../src/core/secret-scan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,YAAY,EAAC,MAAM,SAAS,CAAA;AAcpC,MAAM,eAAe,GAAsC;IACzD,EAAC,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,kBAAkB,EAAC;IAChD,EAAC,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,oEAAoE,EAAC;IAClG,EAAC,IAAI,EAAE,mBAAmB,EAAE,EAAE,EAAE,mCAAmC,EAAC;IACpE,EAAC,IAAI,EAAE,uBAAuB,EAAE,EAAE,EAAE,wBAAwB,EAAC;IAC7D,EAAC,IAAI,EAAE,0BAA0B,EAAE,EAAE,EAAE,gCAAgC,EAAC;IACxE,EAAC,IAAI,EAAE,sBAAsB,EAAE,EAAE,EAAE,sCAAsC,EAAC;IAC1E,EAAC,IAAI,EAAE,0BAA0B,EAAE,EAAE,EAAE,0GAA0G,EAAC;IAClJ,EAAC,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,qDAAqD,EAAC;IACrF,EAAC,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,wCAAwC,EAAC;IACjE,EAAC,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,0BAA0B,EAAC;CACvD,CAAA;AAED,iCAAiC;AACjC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO;IACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IACzC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;IAC5C,MAAM,EAAE,MAAM,EAAE,OAAO;IACvB,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAC9B,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ;CAChC,CAAC,CAAA;AAEF,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;IAC3D,OAAO,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;AACnC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,KAAe,EAAE,OAAe;IAC7D,MAAM,QAAQ,GAAoB,EAAE,CAAA;IAEpC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,YAAY,CAAC,IAAI,CAAC;YAAE,SAAQ;QAEhC,IAAI,OAAe,CAAA;QACnB,IAAI,CAAC;YACH,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,SAAQ;QACV,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;YACrB,KAAK,MAAM,EAAC,IAAI,EAAE,EAAE,EAAC,IAAI,eAAe,EAAE,CAAC;gBACzC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBAClB,oDAAoD;oBACpD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;oBAC5B,MAAM,OAAO,GAAG,KAAK;wBACnB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,KAAM,GAAG,EAAE,CAAC,EAAE,KAAK,CAAC,KAAM,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE;wBACtE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;oBAE5B,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;wBAC3C,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;wBACpD,CAAC,CAAC,IAAI,CAAA;oBAER,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,YAAY;wBAClB,IAAI,EAAE,CAAC,GAAG,CAAC;wBACX,OAAO,EAAE,IAAI;wBACb,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO;qBACtE,CAAC,CAAA;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,SAAS,CAAC,QAAgB;IACxC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,QAAQ,CAAA;IAClD,OAAO,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;AACpD,CAAC"}