@prmichaelsen/remember-mcp 2.3.0 → 2.3.4

package/agent/commands/acp.package-install.md

@@ -0,0 +1,347 @@
+# Command: package-install
+
+> **🤖 Agent Directive**: If you are reading this file, the command `@acp.package-install` has been invoked. Follow the steps below to execute this command.
+
+**Namespace**: acp
+**Version**: 1.0.0
+**Created**: 2026-02-16
+**Last Updated**: 2026-02-16
+**Status**: Active
+
+---
+
+**Purpose**: Install third-party command packages from git repositories using the package-install script
+**Category**: Maintenance
+**Frequency**: As Needed
+
+---
+
+## What This Command Does
+
+This command installs third-party ACP packages from git repositories by running the `agent/scripts/package-install.sh` script. The script clones the repository and installs files from the `agent/` directory, including commands, patterns, and design documents.
+
+Use this command when you want to add community-created commands and patterns, install organization-specific ACP content, or share reusable components across multiple projects. It enables extending ACP with custom functionality, patterns, and documentation.
+
+⚠️ **SECURITY WARNING**: Third-party packages can instruct agents to modify files and execute scripts. Always review package contents before installation. You assume all risk when installing third-party packages.
+
+---
+
+## Prerequisites
+
+- [ ] ACP installed in project
+- [ ] Git installed and available
+- [ ] Internet connection available
+- [ ] `agent/scripts/package-install.sh` exists
+- [ ] You trust the source of the commands
+- [ ] You have reviewed the command repository
+
+---
+
+## Steps
+
+### 1. Run Package Install Script
+
+Execute the package installation script with the repository URL.
+
+**Actions**:
+- Verify `./agent/scripts/package-install.sh` exists
+- Run the script with repository URL as argument:
+  ```bash
+  # Interactive mode (asks for confirmation)
+  ./agent/scripts/package-install.sh <repository-url>
+  
+  # Auto-confirm mode (skips prompts)
+  ./agent/scripts/package-install.sh -y <repository-url>
+  ```
+- The script will:
+  - Validate the repository URL
+  - Clone the repository to a temporary location
+  - Scan agent/ directory for installable files (commands, patterns, design)
+  - Validate command files (agent directive, namespace check)
+  - Check for naming conflicts
+  - Ask for confirmation (unless -y flag used)
+  - Copy files to respective agent/ directories
+  - Clean up temporary files
+  - Report what was installed
+
+**Expected Outcome**: Script completes successfully and files are installed
+
+### 2. Review Installed Files
+
+Verify the files were installed correctly.
+
+**Actions**:
+- List files in `agent/commands/` to see new commands
+- List files in `agent/patterns/` to see new patterns
+- List files in `agent/design/` to see new designs
+- Read the installed files
+- Verify commands have agent directives
+- Check namespace is not `acp` (reserved for commands)
+- Ensure no malicious content
+
+**Expected Outcome**: Files verified safe and functional
+
+### 3. Test Installed Commands
+
+Try invoking one of the installed commands (if any).
+
+**Actions**:
+- Choose a simple command to test
+- Invoke it using `@{namespace}.{action}` syntax
+- Verify it works as expected
+- Check for any errors
+
+**Expected Outcome**: Commands work correctly
+
+### 4. Document Installation
+
+Update progress tracking with installation notes.
+
+**Actions**:
+- Add note to `agent/progress.yaml` about installed package
+- Document which package was installed
+- Note installation date
+- List installed files (commands, patterns, designs)
+
+**Expected Outcome**: Installation tracked in progress
+
+---
+
+## Verification
+
+- [ ] package-install.sh script exists
+- [ ] Script executed successfully
+- [ ] Files installed to appropriate agent/ directories
+- [ ] Installed commands reviewed for safety (if any)
+- [ ] Installed patterns reviewed (if any)
+- [ ] Installed designs reviewed (if any)
+- [ ] Commands tested and working (if any)
+- [ ] Installation documented in progress.yaml
+- [ ] No errors during installation
+
+---
+
+## Expected Output
+
+### Files Modified
+- `agent/commands/*.md` - Installed command files (if any)
+- `agent/patterns/*.md` - Installed pattern files (if any)
+- `agent/design/*.md` - Installed design files (if any)
+
+### Console Output
+```
+📦 ACP Package Installer
+========================================
+
+Repository: https://github.com/example/fullstack-package.git
+
+Cloning repository...
+✓ Repository cloned
+
+Scanning for installable files...
+
+📁 commands/ (3 file(s))
+  ✓ deploy.production.md
+  ✓ deploy.staging.md
+  ⚠  deploy.rollback.md (will overwrite existing)
+
+📁 patterns/ (2 file(s))
+  ✓ api-service.md
+  ✓ error-handling.md
+
+📁 design/ (1 file(s))
+  ✓ deployment-strategy.md
+
+Ready to install 6 file(s)
+
+Proceed with installation? (y/N) y
+
+Installing files...
+  ✓ Installed commands/deploy.production.md
+  ✓ Installed commands/deploy.staging.md
+  ✓ Installed commands/deploy.rollback.md
+  ✓ Installed patterns/api-service.md
+  ✓ Installed patterns/error-handling.md
+  ✓ Installed design/deployment-strategy.md
+
+✅ Installation complete!
+
+Installed 6 file(s) from:
+  https://github.com/example/fullstack-package.git
+
+Installed commands:
+  - @deploy.production
+  - @deploy.staging
+  - @deploy.rollback
+
+⚠️  Security Reminder:
+Review installed files before using them.
+Third-party files can instruct agents to modify files and execute scripts.
+
+Next steps:
+  1. Review installed files in agent/ directories
+  2. Test installed commands
+  3. Update progress.yaml with installation notes
+```
+
+### Status Update
+- Commands installed
+- Installation documented
+- Commands ready to use
+
+---
+
+## Examples
+
+### Example 1: Installing Deployment Commands
+
+**Context**: Want to add deployment commands from community
+
+**Invocation**: `@acp.package-install https://github.com/example/acp-deploy-package.git`
+
+**Result**: Script clones repo, installs 3 commands to agent/commands/, now can use @deploy.production
+
+### Example 2: Installing Patterns Package
+
+**Context**: Want to add TypeScript patterns from organization
+
+**Invocation**: `@acp.package-install https://github.com/myorg/typescript-patterns.git`
+
+**Result**: Script installs 5 pattern files to agent/patterns/, now have reusable TypeScript patterns
+
+### Example 3: Installing Complete Package
+
+**Context**: Installing package with commands, patterns, and designs
+
+**Invocation**: `@acp.package-install https://github.com/example/fullstack-package.git`
+
+**Result**: Script installs 3 commands, 4 patterns, 2 design docs across agent/ directories
+
+### Example 4: Installing with Conflicts
+
+**Context**: Installing package that conflicts with existing files
+
+**Invocation**: `@acp.package-install https://github.com/example/package.git`
+
+**Result**: Script detects conflicts, asks for confirmation, overwrites if approved
+
+---
+
+## Related Commands
+
+- [`@acp.validate`](acp.validate.md) - Validate installed commands
+- [`@acp.version-update`](acp.version-update.md) - Update core ACP commands
+- [`@acp.status`](acp.status.md) - View project status
+
+---
+
+## Troubleshooting
+
+### Issue 1: Git clone fails
+
+**Symptom**: Cannot clone repository
+
+**Cause**: Invalid URL, no internet, or private repository
+
+**Solution**: Verify URL is correct, check internet connection, ensure repository is public or you have access
+
+### Issue 2: No commands found
+
+**Symptom**: Repository cloned but no commands found
+
+**Cause**: Commands not in expected location or wrong structure
+
+**Solution**: Check repository structure, look for commands/ directory, verify files are .md format
+
+### Issue 3: Validation fails
+
+**Symptom**: Commands fail validation
+
+**Cause**: Commands don't follow ACP structure
+
+**Solution**: Review command files, ensure they have agent directive and required sections, contact command author
+
+### Issue 4: Namespace conflict
+
+**Symptom**: Command uses reserved namespace
+
+**Cause**: Command tries to use 'acp' namespace
+
+**Solution**: Cannot install - 'acp' namespace is reserved for core commands, contact command author to change namespace
+
+---
+
+## Security Considerations
+
+### ⚠️ CRITICAL SECURITY WARNING
+
+**Third-party packages can contain:**
+- **Commands** that instruct agents to modify files and execute scripts
+- **Patterns** that guide code implementation decisions
+- **Designs** that influence architecture and technical decisions
+
+**Third-party commands can:**
+- Modify any files in your project
+- Execute shell commands
+- Make network requests
+- Access environment variables
+- Read sensitive data
+
+**YOU ASSUME ALL RISK when installing third-party packages.**
+
+### Security Best Practices
+
+**Before Installing**:
+1. Review the repository and command files
+2. Check the author's reputation
+3. Read what each command does
+4. Verify no malicious content
+5. Test in a non-production environment first
+
+**After Installing**:
+1. Review installed command files
+2. Test commands in safe environment
+3. Monitor command behavior
+4. Remove if suspicious activity
+5. Keep installation records
+
+### File Access
+- **Reads**: Repository files, existing files in agent/ directories
+- **Writes**: `agent/commands/*.md`, `agent/patterns/*.md`, `agent/design/*.md`
+- **Executes**: `git clone` command, `./agent/scripts/package-install.sh`
+
+### Network Access
+- **APIs**: None directly
+- **Repositories**: Clones from specified git repository
+
+### Sensitive Data
+- **Secrets**: Does not access secrets
+- **Credentials**: May use git credentials for private repos
+
+---
+
+## Notes
+
+- Installs from all agent/ directories: commands, patterns, design
+- Only install packages from trusted sources
+- Review all files before installation (commands, patterns, designs)
+- Test in safe environment first
+- Keep record of installed packages
+- Update installed packages periodically
+- Remove unused files
+- Report security issues to package authors
+- Consider forking repositories for stability
+- Pin to specific versions/commits for reproducibility
+- Use `-y` flag for automated/scripted installations
+- Patterns and designs influence agent behavior just like commands
+
+---
+
+**Namespace**: acp
+**Command**: package-install
+**Version**: 1.0.0
+**Created**: 2026-02-16
+**Last Updated**: 2026-02-16
+**Status**: Active
+**Compatibility**: ACP 1.1.0+
+**Author**: ACP Project