@prompd/core 0.5.0-beta.12 → 0.5.0-beta.14

package/dist/index.d.cts

@@ -670,6 +670,79 @@ declare class MemoryPackageResolver implements IPackageResolver {
     resolvePackage(packageRef: string, options: ResolvePackageOptions): Promise<string>;
 }
 
+/**
+ * A writable sink the host injects so installPackage stays FS-/Node-agnostic.
+ * Browser: an adapter over the workspace FileService; CLI/sidecar: over Node fs.
+ */
+interface PackageStore {
+    /** Write a UTF-8 file, creating parent directories as needed. */
+    writeFile(path: string, content: string): void | Promise<void>;
+    /** Remove a directory and its contents if present, for a clean reinstall. */
+    removeDir?(path: string): void | Promise<void>;
+}
+interface InstallPackageOptions {
+    /** "@scope/name@version" or "@scope/name" (defaults to latest). */
+    ref: string;
+    /** Artifact type — selects the .prompd subdir (packages/skills/workflows/templates). */
+    type: PackageType;
+    /**
+     * Install root the caller chose: the open workspace folder (browser/local) or the
+     * home dir for a global install (sidecar/CLI). installPackage NEVER computes '~'
+     * itself — core stays Node-free.
+     */
+    root: string;
+    /** Writable sink for the chosen host. */
+    store: PackageStore;
+    /**
+     * Fetch the .pdpkg bytes for a (name, version). Injected: the registry client in
+     * the browser, a Node fetch in the CLI. May resolve 'latest' to a concrete version.
+     */
+    download: PackageDownloader;
+}
+interface InstalledPackage {
+    /** Full scoped name (manifest-authoritative when present), e.g. "@prompd/core". */
+    name: string;
+    /** Resolved version (from the package manifest when present). */
+    version: string;
+    scope?: string;
+    /** Install dir written to: <root>/.prompd/<typeDir>/<name>. */
+    installedPath: string;
+    /** Entry-relative paths written under installedPath. */
+    files: string[];
+}
+/**
+ * Install a registry artifact into <root>/.prompd/<typeDir>/<name>/, replacing any
+ * prior install (idempotent). The host injects the writable `store` and the
+ * `download` fetcher, so the same install runs in the browser and the CLI/sidecar.
+ * Returns the resolved name/version (manifest-authoritative when present) and the
+ * files written. Rejects entries that escape the install directory (zip-slip) and
+ * archives over the size cap.
+ */
+declare function installPackage(opts: InstallPackageOptions): Promise<InstalledPackage>;
+interface UninstallPackageOptions {
+    /** "@scope/name" (a version suffix is accepted but ignored — one install per name). */
+    ref: string;
+    /** Artifact type — selects the .prompd subdir. */
+    type: PackageType;
+    /** Install root the caller chose (the open workspace, or '~' for a global install). */
+    root: string;
+    /** Writable sink for the chosen host; removeDir is required to uninstall. */
+    store: PackageStore;
+}
+interface UninstalledPackage {
+    name: string;
+    scope?: string;
+    /** The directory that was removed: <root>/.prompd/<typeDir>/<name>. */
+    installedPath: string;
+}
+/**
+ * Uninstall an artifact: remove <root>/.prompd/<typeDir>/<name>/ via the injected
+ * store. The symmetric inverse of installPackage, sharing the same install-dir
+ * computation. Idempotent — removing an absent install is a no-op (the host's
+ * removeDir should swallow not-found). Throws if the store can't remove directories.
+ */
+declare function uninstallPackage(opts: UninstallPackageOptions): Promise<UninstalledPackage>;
+
 /**
  * Language Mapping Utilities
  *
@@ -2963,4 +3036,4 @@ declare function validateWorkflow(workflow: WorkflowFile): ValidationResult;
  */
 declare function validateWorkflowQuick(workflow: WorkflowFile): Pick<ValidationResult, 'isValid'>;
 
-export { type AgentCheckpointEvent, type AgentCheckpointEventType, type AgentIterationRecord, type AgentNodeData, type AgentTool, AnthropicFormatter, type ApiNodeData, type AsyncFileBackend, BUILTIN_COMMAND_EXECUTABLES, type BaseNodeData, CODE_EXTENSIONS, CONTENT_TYPES, type CallbackNodeData, type ChatAgentCheckpointConfig, type ChatAgentNodeData, type ClaudeCodeNodeData, CodeGenerationStage, type CodeNodeData, type CommandNodeData, CompilationContext, type CompilationDiagnostic, CompilationError, type CompilationOptions, CompilationStage, type CompiledPrompt, CompilerPipeline, type CompilerStage, type CompleteEventData, type ConditionBranch, type ConditionNodeData, type Config, type CustomCommandConfig, type CustomConnectionConfig, type CustomProvider, DEFAULT_SECURITY_CONFIG, DOCKABLE_HANDLES, DOCKABLE_NODE_TYPES, type DatabaseConnectionConfig, type DatabaseQueryNodeData, DependencyResolutionStage, EXTENSION_TO_LANGUAGE, EXTENSION_TO_LANGUAGE_ALIASES, type ErrorEventData, type ErrorHandlerNodeData, type ErrorHandlingConfig, type ExecuteOptions, type ExecutionConfig, type GitHubConnectionConfig, type GuardrailNodeData, type HttpApiConnectionConfig, HybridFileSystem, type IFileSystem, type IPackageResolver, type IterationEventData, type JsonSchema, type LLMResponse, LexicalAnalysisStage, type LoopNodeData, MEMORY_OPERATIONS_BY_MODE, MarkdownFormatter, type McpServerConnectionConfig, type McpToolNodeData, MemoryFileSystem, type MemoryNodeData, type MemoryOperation, MemoryPackageResolver, type MergeNodeData, type NodeExecutionState, type NodeExecutionStatus, OpenAIFormatter, type OutputFormatter, type OutputNodeData, PACKAGE_TYPE_DIRS, PROMPD_EXTENSIONS, type PackageAlias, type PackageDownloader, type PackageType, type ParallelBranch, type ParallelNodeData, ParseError, type ParsedWorkflow, PrompdCompiler, PrompdError, type PrompdFile, PrompdLoader, type PrompdMetadata, type PrompdParameter, PrompdParser, type PromptNodeData, type ProviderConfig, type ProviderNodeData, type RegistryConfig, type ResolvePackageOptions, type ResolvedPackage, type RetryPolicy, type SSHConnectionConfig, type SectionInfo, SectionOverrideProcessor, type SecurityConfig, SecurityError, SemanticAnalysisStage, type SlackConnectionConfig, TOOL_DEPLOY_DIRS, TemplateProcessingStage, type ThinkingEventData, type ToolCallEventData, type ToolCallParserNodeData, type ToolCallRouterNodeData, type ToolNodeData, type TransformerNodeData, type TriggerNodeData, type UserInputNodeData, type UsingPackage, VALID_PACKAGE_TYPES, ValidationError, type ValidationIssue, type ValidationResult, type WebSearchNodeData, type WebSocketConnectionConfig, type WorkflowConnection, type WorkflowConnectionConfig, type WorkflowConnectionStatus, type WorkflowConnectionType, type WorkflowEdge, type WorkflowExecutionError, type WorkflowExecutionState, type WorkflowExecutionStatus, type WorkflowFile, type WorkflowMetadata, type WorkflowNode, type WorkflowNodeData, type WorkflowNodeType, type WorkflowParameter, type WorkflowResult, type WorkflowValidationError, type WorkflowValidationWarning, type WorkflowVariable, basenamePosix, compile, createCoreStages, createEmptyWorkflow, createPrompdEnvironment, createWorkflowNode, dirnamePosix, extname, extractPdpkg, getContentType, getExecutionOrder, getInstallDirForType, getLanguageAliasesForExtension, getLanguageForExtension, isAbsolutePosix, isPrompdFile, isValidPackageReference, isValidPackageType, joinPosix, needsFrontmatterProtection, normalizePosix, parsePackageReference, parsePackageReferenceWithPath, parseWorkflow, resolvePackageFile, resolvePosix, serializeWorkflow, stripFilePath, validateWorkflow, validateWorkflowQuick };
+export { type AgentCheckpointEvent, type AgentCheckpointEventType, type AgentIterationRecord, type AgentNodeData, type AgentTool, AnthropicFormatter, type ApiNodeData, type AsyncFileBackend, BUILTIN_COMMAND_EXECUTABLES, type BaseNodeData, CODE_EXTENSIONS, CONTENT_TYPES, type CallbackNodeData, type ChatAgentCheckpointConfig, type ChatAgentNodeData, type ClaudeCodeNodeData, CodeGenerationStage, type CodeNodeData, type CommandNodeData, CompilationContext, type CompilationDiagnostic, CompilationError, type CompilationOptions, CompilationStage, type CompiledPrompt, CompilerPipeline, type CompilerStage, type CompleteEventData, type ConditionBranch, type ConditionNodeData, type Config, type CustomCommandConfig, type CustomConnectionConfig, type CustomProvider, DEFAULT_SECURITY_CONFIG, DOCKABLE_HANDLES, DOCKABLE_NODE_TYPES, type DatabaseConnectionConfig, type DatabaseQueryNodeData, DependencyResolutionStage, EXTENSION_TO_LANGUAGE, EXTENSION_TO_LANGUAGE_ALIASES, type ErrorEventData, type ErrorHandlerNodeData, type ErrorHandlingConfig, type ExecuteOptions, type ExecutionConfig, type GitHubConnectionConfig, type GuardrailNodeData, type HttpApiConnectionConfig, HybridFileSystem, type IFileSystem, type IPackageResolver, type InstallPackageOptions, type InstalledPackage, type IterationEventData, type JsonSchema, type LLMResponse, LexicalAnalysisStage, type LoopNodeData, MEMORY_OPERATIONS_BY_MODE, MarkdownFormatter, type McpServerConnectionConfig, type McpToolNodeData, MemoryFileSystem, type MemoryNodeData, type MemoryOperation, MemoryPackageResolver, type MergeNodeData, type NodeExecutionState, type NodeExecutionStatus, OpenAIFormatter, type OutputFormatter, type OutputNodeData, PACKAGE_TYPE_DIRS, PROMPD_EXTENSIONS, type PackageAlias, type PackageDownloader, type PackageStore, type PackageType, type ParallelBranch, type ParallelNodeData, ParseError, type ParsedWorkflow, PrompdCompiler, PrompdError, type PrompdFile, PrompdLoader, type PrompdMetadata, type PrompdParameter, PrompdParser, type PromptNodeData, type ProviderConfig, type ProviderNodeData, type RegistryConfig, type ResolvePackageOptions, type ResolvedPackage, type RetryPolicy, type SSHConnectionConfig, type SectionInfo, SectionOverrideProcessor, type SecurityConfig, SecurityError, SemanticAnalysisStage, type SlackConnectionConfig, TOOL_DEPLOY_DIRS, TemplateProcessingStage, type ThinkingEventData, type ToolCallEventData, type ToolCallParserNodeData, type ToolCallRouterNodeData, type ToolNodeData, type TransformerNodeData, type TriggerNodeData, type UninstallPackageOptions, type UninstalledPackage, type UserInputNodeData, type UsingPackage, VALID_PACKAGE_TYPES, ValidationError, type ValidationIssue, type ValidationResult, type WebSearchNodeData, type WebSocketConnectionConfig, type WorkflowConnection, type WorkflowConnectionConfig, type WorkflowConnectionStatus, type WorkflowConnectionType, type WorkflowEdge, type WorkflowExecutionError, type WorkflowExecutionState, type WorkflowExecutionStatus, type WorkflowFile, type WorkflowMetadata, type WorkflowNode, type WorkflowNodeData, type WorkflowNodeType, type WorkflowParameter, type WorkflowResult, type WorkflowValidationError, type WorkflowValidationWarning, type WorkflowVariable, basenamePosix, compile, createCoreStages, createEmptyWorkflow, createPrompdEnvironment, createWorkflowNode, dirnamePosix, extname, extractPdpkg, getContentType, getExecutionOrder, getInstallDirForType, getLanguageAliasesForExtension, getLanguageForExtension, installPackage, isAbsolutePosix, isPrompdFile, isValidPackageReference, isValidPackageType, joinPosix, needsFrontmatterProtection, normalizePosix, parsePackageReference, parsePackageReferenceWithPath, parseWorkflow, resolvePackageFile, resolvePosix, serializeWorkflow, stripFilePath, uninstallPackage, validateWorkflow, validateWorkflowQuick };

package/dist/index.d.ts

@@ -670,6 +670,79 @@ declare class MemoryPackageResolver implements IPackageResolver {
     resolvePackage(packageRef: string, options: ResolvePackageOptions): Promise<string>;
 }
 
+/**
+ * A writable sink the host injects so installPackage stays FS-/Node-agnostic.
+ * Browser: an adapter over the workspace FileService; CLI/sidecar: over Node fs.
+ */
+interface PackageStore {
+    /** Write a UTF-8 file, creating parent directories as needed. */
+    writeFile(path: string, content: string): void | Promise<void>;
+    /** Remove a directory and its contents if present, for a clean reinstall. */
+    removeDir?(path: string): void | Promise<void>;
+}
+interface InstallPackageOptions {
+    /** "@scope/name@version" or "@scope/name" (defaults to latest). */
+    ref: string;
+    /** Artifact type — selects the .prompd subdir (packages/skills/workflows/templates). */
+    type: PackageType;
+    /**
+     * Install root the caller chose: the open workspace folder (browser/local) or the
+     * home dir for a global install (sidecar/CLI). installPackage NEVER computes '~'
+     * itself — core stays Node-free.
+     */
+    root: string;
+    /** Writable sink for the chosen host. */
+    store: PackageStore;
+    /**
+     * Fetch the .pdpkg bytes for a (name, version). Injected: the registry client in
+     * the browser, a Node fetch in the CLI. May resolve 'latest' to a concrete version.
+     */
+    download: PackageDownloader;
+}
+interface InstalledPackage {
+    /** Full scoped name (manifest-authoritative when present), e.g. "@prompd/core". */
+    name: string;
+    /** Resolved version (from the package manifest when present). */
+    version: string;
+    scope?: string;
+    /** Install dir written to: <root>/.prompd/<typeDir>/<name>. */
+    installedPath: string;
+    /** Entry-relative paths written under installedPath. */
+    files: string[];
+}
+/**
+ * Install a registry artifact into <root>/.prompd/<typeDir>/<name>/, replacing any
+ * prior install (idempotent). The host injects the writable `store` and the
+ * `download` fetcher, so the same install runs in the browser and the CLI/sidecar.
+ * Returns the resolved name/version (manifest-authoritative when present) and the
+ * files written. Rejects entries that escape the install directory (zip-slip) and
+ * archives over the size cap.
+ */
+declare function installPackage(opts: InstallPackageOptions): Promise<InstalledPackage>;
+interface UninstallPackageOptions {
+    /** "@scope/name" (a version suffix is accepted but ignored — one install per name). */
+    ref: string;
+    /** Artifact type — selects the .prompd subdir. */
+    type: PackageType;
+    /** Install root the caller chose (the open workspace, or '~' for a global install). */
+    root: string;
+    /** Writable sink for the chosen host; removeDir is required to uninstall. */
+    store: PackageStore;
+}
+interface UninstalledPackage {
+    name: string;
+    scope?: string;
+    /** The directory that was removed: <root>/.prompd/<typeDir>/<name>. */
+    installedPath: string;
+}
+/**
+ * Uninstall an artifact: remove <root>/.prompd/<typeDir>/<name>/ via the injected
+ * store. The symmetric inverse of installPackage, sharing the same install-dir
+ * computation. Idempotent — removing an absent install is a no-op (the host's
+ * removeDir should swallow not-found). Throws if the store can't remove directories.
+ */
+declare function uninstallPackage(opts: UninstallPackageOptions): Promise<UninstalledPackage>;
+
 /**
  * Language Mapping Utilities
  *
@@ -2963,4 +3036,4 @@ declare function validateWorkflow(workflow: WorkflowFile): ValidationResult;
  */
 declare function validateWorkflowQuick(workflow: WorkflowFile): Pick<ValidationResult, 'isValid'>;
 
-export { type AgentCheckpointEvent, type AgentCheckpointEventType, type AgentIterationRecord, type AgentNodeData, type AgentTool, AnthropicFormatter, type ApiNodeData, type AsyncFileBackend, BUILTIN_COMMAND_EXECUTABLES, type BaseNodeData, CODE_EXTENSIONS, CONTENT_TYPES, type CallbackNodeData, type ChatAgentCheckpointConfig, type ChatAgentNodeData, type ClaudeCodeNodeData, CodeGenerationStage, type CodeNodeData, type CommandNodeData, CompilationContext, type CompilationDiagnostic, CompilationError, type CompilationOptions, CompilationStage, type CompiledPrompt, CompilerPipeline, type CompilerStage, type CompleteEventData, type ConditionBranch, type ConditionNodeData, type Config, type CustomCommandConfig, type CustomConnectionConfig, type CustomProvider, DEFAULT_SECURITY_CONFIG, DOCKABLE_HANDLES, DOCKABLE_NODE_TYPES, type DatabaseConnectionConfig, type DatabaseQueryNodeData, DependencyResolutionStage, EXTENSION_TO_LANGUAGE, EXTENSION_TO_LANGUAGE_ALIASES, type ErrorEventData, type ErrorHandlerNodeData, type ErrorHandlingConfig, type ExecuteOptions, type ExecutionConfig, type GitHubConnectionConfig, type GuardrailNodeData, type HttpApiConnectionConfig, HybridFileSystem, type IFileSystem, type IPackageResolver, type IterationEventData, type JsonSchema, type LLMResponse, LexicalAnalysisStage, type LoopNodeData, MEMORY_OPERATIONS_BY_MODE, MarkdownFormatter, type McpServerConnectionConfig, type McpToolNodeData, MemoryFileSystem, type MemoryNodeData, type MemoryOperation, MemoryPackageResolver, type MergeNodeData, type NodeExecutionState, type NodeExecutionStatus, OpenAIFormatter, type OutputFormatter, type OutputNodeData, PACKAGE_TYPE_DIRS, PROMPD_EXTENSIONS, type PackageAlias, type PackageDownloader, type PackageType, type ParallelBranch, type ParallelNodeData, ParseError, type ParsedWorkflow, PrompdCompiler, PrompdError, type PrompdFile, PrompdLoader, type PrompdMetadata, type PrompdParameter, PrompdParser, type PromptNodeData, type ProviderConfig, type ProviderNodeData, type RegistryConfig, type ResolvePackageOptions, type ResolvedPackage, type RetryPolicy, type SSHConnectionConfig, type SectionInfo, SectionOverrideProcessor, type SecurityConfig, SecurityError, SemanticAnalysisStage, type SlackConnectionConfig, TOOL_DEPLOY_DIRS, TemplateProcessingStage, type ThinkingEventData, type ToolCallEventData, type ToolCallParserNodeData, type ToolCallRouterNodeData, type ToolNodeData, type TransformerNodeData, type TriggerNodeData, type UserInputNodeData, type UsingPackage, VALID_PACKAGE_TYPES, ValidationError, type ValidationIssue, type ValidationResult, type WebSearchNodeData, type WebSocketConnectionConfig, type WorkflowConnection, type WorkflowConnectionConfig, type WorkflowConnectionStatus, type WorkflowConnectionType, type WorkflowEdge, type WorkflowExecutionError, type WorkflowExecutionState, type WorkflowExecutionStatus, type WorkflowFile, type WorkflowMetadata, type WorkflowNode, type WorkflowNodeData, type WorkflowNodeType, type WorkflowParameter, type WorkflowResult, type WorkflowValidationError, type WorkflowValidationWarning, type WorkflowVariable, basenamePosix, compile, createCoreStages, createEmptyWorkflow, createPrompdEnvironment, createWorkflowNode, dirnamePosix, extname, extractPdpkg, getContentType, getExecutionOrder, getInstallDirForType, getLanguageAliasesForExtension, getLanguageForExtension, isAbsolutePosix, isPrompdFile, isValidPackageReference, isValidPackageType, joinPosix, needsFrontmatterProtection, normalizePosix, parsePackageReference, parsePackageReferenceWithPath, parseWorkflow, resolvePackageFile, resolvePosix, serializeWorkflow, stripFilePath, validateWorkflow, validateWorkflowQuick };
+export { type AgentCheckpointEvent, type AgentCheckpointEventType, type AgentIterationRecord, type AgentNodeData, type AgentTool, AnthropicFormatter, type ApiNodeData, type AsyncFileBackend, BUILTIN_COMMAND_EXECUTABLES, type BaseNodeData, CODE_EXTENSIONS, CONTENT_TYPES, type CallbackNodeData, type ChatAgentCheckpointConfig, type ChatAgentNodeData, type ClaudeCodeNodeData, CodeGenerationStage, type CodeNodeData, type CommandNodeData, CompilationContext, type CompilationDiagnostic, CompilationError, type CompilationOptions, CompilationStage, type CompiledPrompt, CompilerPipeline, type CompilerStage, type CompleteEventData, type ConditionBranch, type ConditionNodeData, type Config, type CustomCommandConfig, type CustomConnectionConfig, type CustomProvider, DEFAULT_SECURITY_CONFIG, DOCKABLE_HANDLES, DOCKABLE_NODE_TYPES, type DatabaseConnectionConfig, type DatabaseQueryNodeData, DependencyResolutionStage, EXTENSION_TO_LANGUAGE, EXTENSION_TO_LANGUAGE_ALIASES, type ErrorEventData, type ErrorHandlerNodeData, type ErrorHandlingConfig, type ExecuteOptions, type ExecutionConfig, type GitHubConnectionConfig, type GuardrailNodeData, type HttpApiConnectionConfig, HybridFileSystem, type IFileSystem, type IPackageResolver, type InstallPackageOptions, type InstalledPackage, type IterationEventData, type JsonSchema, type LLMResponse, LexicalAnalysisStage, type LoopNodeData, MEMORY_OPERATIONS_BY_MODE, MarkdownFormatter, type McpServerConnectionConfig, type McpToolNodeData, MemoryFileSystem, type MemoryNodeData, type MemoryOperation, MemoryPackageResolver, type MergeNodeData, type NodeExecutionState, type NodeExecutionStatus, OpenAIFormatter, type OutputFormatter, type OutputNodeData, PACKAGE_TYPE_DIRS, PROMPD_EXTENSIONS, type PackageAlias, type PackageDownloader, type PackageStore, type PackageType, type ParallelBranch, type ParallelNodeData, ParseError, type ParsedWorkflow, PrompdCompiler, PrompdError, type PrompdFile, PrompdLoader, type PrompdMetadata, type PrompdParameter, PrompdParser, type PromptNodeData, type ProviderConfig, type ProviderNodeData, type RegistryConfig, type ResolvePackageOptions, type ResolvedPackage, type RetryPolicy, type SSHConnectionConfig, type SectionInfo, SectionOverrideProcessor, type SecurityConfig, SecurityError, SemanticAnalysisStage, type SlackConnectionConfig, TOOL_DEPLOY_DIRS, TemplateProcessingStage, type ThinkingEventData, type ToolCallEventData, type ToolCallParserNodeData, type ToolCallRouterNodeData, type ToolNodeData, type TransformerNodeData, type TriggerNodeData, type UninstallPackageOptions, type UninstalledPackage, type UserInputNodeData, type UsingPackage, VALID_PACKAGE_TYPES, ValidationError, type ValidationIssue, type ValidationResult, type WebSearchNodeData, type WebSocketConnectionConfig, type WorkflowConnection, type WorkflowConnectionConfig, type WorkflowConnectionStatus, type WorkflowConnectionType, type WorkflowEdge, type WorkflowExecutionError, type WorkflowExecutionState, type WorkflowExecutionStatus, type WorkflowFile, type WorkflowMetadata, type WorkflowNode, type WorkflowNodeData, type WorkflowNodeType, type WorkflowParameter, type WorkflowResult, type WorkflowValidationError, type WorkflowValidationWarning, type WorkflowVariable, basenamePosix, compile, createCoreStages, createEmptyWorkflow, createPrompdEnvironment, createWorkflowNode, dirnamePosix, extname, extractPdpkg, getContentType, getExecutionOrder, getInstallDirForType, getLanguageAliasesForExtension, getLanguageForExtension, installPackage, isAbsolutePosix, isPrompdFile, isValidPackageReference, isValidPackageType, joinPosix, needsFrontmatterProtection, normalizePosix, parsePackageReference, parsePackageReferenceWithPath, parseWorkflow, resolvePackageFile, resolvePosix, serializeWorkflow, stripFilePath, uninstallPackage, validateWorkflow, validateWorkflowQuick };

package/dist/index.js

@@ -3339,6 +3339,75 @@ var HybridFileSystem = class {
   }
 };
 
+// src/lib/compiler/install.ts
+var MAX_PACKAGE_SIZE = 50 * 1024 * 1024;
+function joinPosix3(...parts) {
+  const joined = parts.filter((p) => p && p !== ".").join("/").replace(/\/{2,}/g, "/");
+  return joined.replace(/\/+$/, "") || "/";
+}
+function normalizeSegments(p) {
+  const out = [];
+  for (const seg of p.split("/")) {
+    if (!seg || seg === ".") continue;
+    if (seg === "..") {
+      out.pop();
+      continue;
+    }
+    out.push(seg);
+  }
+  return out.join("/");
+}
+function resolveInstallDir(root, type, name) {
+  return joinPosix3(root, ".prompd", getInstallDirForType(type), name);
+}
+async function installPackage(opts) {
+  const { ref, type, root, store, download } = opts;
+  const parsed = parsePackageReference(ref);
+  const bytes = await download(parsed.name, parsed.version);
+  if (bytes.length > MAX_PACKAGE_SIZE) {
+    throw new Error(`Package too large: ${bytes.length} bytes (max ${MAX_PACKAGE_SIZE})`);
+  }
+  const files = await extractPdpkg(bytes);
+  if (files.size === 0) {
+    throw new Error(`Package "${parsed.name}" contains no installable files.`);
+  }
+  let name = parsed.name;
+  let version = parsed.version;
+  const manifest = files.get("manifest.json") ?? files.get("prompd.json");
+  if (manifest) {
+    try {
+      const m = JSON.parse(manifest);
+      if (typeof m.name === "string" && m.name) name = m.name;
+      if (typeof m.version === "string" && m.version) version = m.version;
+    } catch {
+    }
+  }
+  const installedPath = resolveInstallDir(root, type, name);
+  const baseSegments = normalizeSegments(installedPath);
+  await store.removeDir?.(installedPath);
+  const written = [];
+  for (const [rel, content] of files) {
+    const dest = joinPosix3(installedPath, rel);
+    const destSegments = normalizeSegments(dest);
+    if (destSegments !== baseSegments && !destSegments.startsWith(baseSegments + "/")) {
+      throw new Error(`Security violation: extracted path escapes install directory: ${rel}`);
+    }
+    await store.writeFile(dest, content);
+    written.push(rel);
+  }
+  return { name, version, scope: parsed.scope, installedPath, files: written };
+}
+async function uninstallPackage(opts) {
+  const { ref, type, root, store } = opts;
+  if (!store.removeDir) {
+    throw new Error("Uninstall requires a PackageStore with removeDir.");
+  }
+  const parsed = parsePackageReference(ref);
+  const installedPath = resolveInstallDir(root, type, parsed.name);
+  await store.removeDir(installedPath);
+  return { name: parsed.name, scope: parsed.scope, installedPath };
+}
+
 // src/lib/compiler/index.ts
 function createCoreStages() {
   return [
@@ -4732,6 +4801,6 @@ function getExecutionOrder(workflow) {
   return order;
 }
 
-export { AnthropicFormatter, BUILTIN_COMMAND_EXECUTABLES, CODE_EXTENSIONS, CONTENT_TYPES, CodeGenerationStage, CompilationContext, CompilationError, CompilationStage, CompilerPipeline, DEFAULT_SECURITY_CONFIG, DOCKABLE_HANDLES, DOCKABLE_NODE_TYPES, DependencyResolutionStage, EXTENSION_TO_LANGUAGE, EXTENSION_TO_LANGUAGE_ALIASES, HybridFileSystem, LexicalAnalysisStage, MEMORY_OPERATIONS_BY_MODE, MarkdownFormatter, MemoryFileSystem, MemoryPackageResolver, OpenAIFormatter, PACKAGE_TYPE_DIRS, PROMPD_EXTENSIONS, ParseError, PrompdCompiler, PrompdError, PrompdLoader, PrompdParser, SectionOverrideProcessor, SecurityError, SemanticAnalysisStage, TOOL_DEPLOY_DIRS, TemplateProcessingStage, VALID_PACKAGE_TYPES, ValidationError, basenamePosix, compile, createCoreStages, createEmptyWorkflow, createPrompdEnvironment, createWorkflowNode, dirnamePosix, extname, extractPdpkg, getContentType, getExecutionOrder, getInstallDirForType, getLanguageAliasesForExtension, getLanguageForExtension, isAbsolutePosix, isPrompdFile, isValidPackageReference, isValidPackageType, joinPosix, needsFrontmatterProtection, normalizePosix, parsePackageReference, parsePackageReferenceWithPath, parseWorkflow, resolvePackageFile, resolvePosix, serializeWorkflow, stripFilePath, validateWorkflow, validateWorkflowQuick };
+export { AnthropicFormatter, BUILTIN_COMMAND_EXECUTABLES, CODE_EXTENSIONS, CONTENT_TYPES, CodeGenerationStage, CompilationContext, CompilationError, CompilationStage, CompilerPipeline, DEFAULT_SECURITY_CONFIG, DOCKABLE_HANDLES, DOCKABLE_NODE_TYPES, DependencyResolutionStage, EXTENSION_TO_LANGUAGE, EXTENSION_TO_LANGUAGE_ALIASES, HybridFileSystem, LexicalAnalysisStage, MEMORY_OPERATIONS_BY_MODE, MarkdownFormatter, MemoryFileSystem, MemoryPackageResolver, OpenAIFormatter, PACKAGE_TYPE_DIRS, PROMPD_EXTENSIONS, ParseError, PrompdCompiler, PrompdError, PrompdLoader, PrompdParser, SectionOverrideProcessor, SecurityError, SemanticAnalysisStage, TOOL_DEPLOY_DIRS, TemplateProcessingStage, VALID_PACKAGE_TYPES, ValidationError, basenamePosix, compile, createCoreStages, createEmptyWorkflow, createPrompdEnvironment, createWorkflowNode, dirnamePosix, extname, extractPdpkg, getContentType, getExecutionOrder, getInstallDirForType, getLanguageAliasesForExtension, getLanguageForExtension, installPackage, isAbsolutePosix, isPrompdFile, isValidPackageReference, isValidPackageType, joinPosix, needsFrontmatterProtection, normalizePosix, parsePackageReference, parsePackageReferenceWithPath, parseWorkflow, resolvePackageFile, resolvePosix, serializeWorkflow, stripFilePath, uninstallPackage, validateWorkflow, validateWorkflowQuick };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map