@xopcai/xopc 0.0.106 → 0.0.107

package/dist/src/cli/commands/extension-marketplace.js

@@ -1,33 +1,80 @@
 import { init_paths, resolveExtensionsDir } from "../../config/paths.js";
-import { init_normalize_manifest, normalizeExtensionManifest } from "../../extensions/normalize-manifest.js";
 import { init_loader, loadConfig } from "../../config/loader.js";
 import { getContextWithOpts } from "../context.js";
 import { getExtensionLockfileManager } from "../../extensions/lockfile.js";
-import { installExtensionFromStoreZip, installFromLocal, installFromNpm, peekExtensionIdFromStoreZip } from "../../extensions/install.js";
+import { installExtensionFromStoreZip, installFromLocal, installFromNpm, peekExtensionIdFromStoreZip, peekExtensionManifestFromStoreZip } from "../../extensions/install.js";
 import { fetchRegistry, findExtension, getExtensionMarketplaceStoreBaseUrl, listExtensions, searchExtensions } from "../../extensions/marketplace.js";
 import { downloadExtensionStoreZipBuffer, resolveExtensionZipDownloadUrl, resolveExtensionsStoreBaseUrl } from "../../agent/skills/marketplace/adapters/store/store-api-client.js";
 import { colors } from "../utils/colors.js";
-import { existsSync, readFileSync, rmSync, statSync } from "node:fs";
+import { validateExtensionPackageDirectory } from "./extension-pack.js";
 import { join, resolve } from "node:path";
+import { existsSync, readFileSync, rmSync, statSync } from "node:fs";
+import { createHash } from "node:crypto";
 import { execSync } from "node:child_process";
+import { confirm } from "@inquirer/prompts";
 import { Command } from "commander";
 import semver from "semver";
 //#region src/cli/commands/extension-marketplace.ts
 init_loader();
 init_paths();
-init_normalize_manifest();
 const MANIFEST = "xopc.extension.json";
-function isRecord(x) {
-	return typeof x === "object" && x !== null && !Array.isArray(x);
+function readJsonObject(path) {
+	try {
+		const raw = JSON.parse(readFileSync(path, "utf-8"));
+		return typeof raw === "object" && raw !== null && !Array.isArray(raw) ? raw : void 0;
+	} catch {
+		return;
+	}
 }
-function hasWorkspaceDeps(pkg) {
-	const deps = pkg.dependencies;
-	const dev = pkg.devDependencies;
-	const check = (d) => {
-		if (!isRecord(d)) return false;
-		return Object.values(d).some((v) => typeof v === "string" && v.startsWith("workspace:"));
+function readInstalledSnapshots(targetDir, extensionId) {
+	const root = join(targetDir, extensionId);
+	return {
+		manifest: readJsonObject(join(root, MANIFEST)),
+		packageJson: readJsonObject(join(root, "package.json"))
 	};
-	return check(deps) || check(dev);
+}
+function sha256Integrity(buffer) {
+	return `sha256-${createHash("sha256").update(buffer).digest("base64")}`;
+}
+function normalizeIntegrity(raw) {
+	const value = raw?.trim();
+	if (!value) return void 0;
+	if (value.startsWith("sha256-")) return value;
+	if (/^[a-f0-9]{64}$/i.test(value)) return `sha256-${Buffer.from(value, "hex").toString("base64")}`;
+	return value;
+}
+function printManifestSummary(params) {
+	const manifest = params.manifest;
+	console.log("");
+	console.log(colors.cyan("Extension install review"));
+	console.log(`  Source: ${params.source}`);
+	console.log(`  Package: ${params.packageName}${params.version ? `@${params.version}` : ""}`);
+	if (params.integrity) console.log(`  Integrity: ${params.integrity}`);
+	if (manifest) {
+		console.log(`  ID: ${String(manifest.id ?? "(unknown)")}`);
+		console.log(`  Name: ${String(manifest.name ?? manifest.id ?? "(unknown)")}`);
+		const engines = manifest.engines;
+		if (engines?.xopc) console.log(`  engines.xopc: ${String(engines.xopc)}`);
+		const permissions = manifest.permissions;
+		if (permissions) {
+			console.log("  Permissions:");
+			for (const [key, value] of Object.entries(permissions)) console.log(`    ${key}: ${Array.isArray(value) ? value.join(", ") : String(value)}`);
+		}
+		const contracts = manifest.contracts;
+		if (contracts) {
+			console.log("  Contracts:");
+			for (const [key, value] of Object.entries(contracts)) if (Array.isArray(value) && value.length > 0) console.log(`    ${key}: ${value.join(", ")}`);
+		}
+	}
+	console.log("");
+}
+async function confirmInstall(params) {
+	printManifestSummary(params);
+	if (params.yes || !process.stdin.isTTY) return true;
+	return await confirm({
+		message: "Install this extension?",
+		default: false
+	});
 }
 function parseNameAtVersion(raw) {
 	const t = raw.trim();
@@ -54,10 +101,6 @@ function looksLikeLocalPath(raw) {
 }
 /** xopc-store package names: lowercase letters, digits, hyphen (see xopc-store scan). */
 const STORE_NAME_RE = /^[a-z0-9-]{1,64}$/;
-function looksLikeStorePackageRef(raw) {
-	const { name } = parseNameAtVersion(raw);
-	return STORE_NAME_RE.test(name);
-}
 async function upsertNpmExtensionLock(lock, targetDir, result, spec) {
 	if (!result.extensionId) return;
 	const reg = await findExtension(result.extensionId);
@@ -73,14 +116,33 @@ async function upsertNpmExtensionLock(lock, targetDir, result, spec) {
 		name: result.extensionId,
 		version: ver,
 		resolved,
-		source: "npm"
+		source: "npm",
+		...readInstalledSnapshots(targetDir, result.extensionId)
 	});
 }
 async function installExtensionFromStoreWithLock(params) {
 	try {
-		const { downloadUrl, version } = await resolveExtensionZipDownloadUrl(params.storeBase, params.packageName, params.version);
+		const { downloadUrl, version, integrity: expectedIntegrityRaw } = await resolveExtensionZipDownloadUrl(params.storeBase, params.packageName, params.version);
 		console.log(colors.cyan("📦"), `Downloading ${params.packageName}@${version} from xopc-store (${params.storeBase})…`);
 		const buf = await downloadExtensionStoreZipBuffer(params.storeBase, downloadUrl);
+		const actualIntegrity = sha256Integrity(buf);
+		const expectedIntegrity = normalizeIntegrity(expectedIntegrityRaw);
+		if (expectedIntegrity && expectedIntegrity !== actualIntegrity) return {
+			ok: false,
+			error: `Extension artifact checksum mismatch: expected ${expectedIntegrity}, got ${actualIntegrity}`
+		};
+		const manifest = peekExtensionManifestFromStoreZip(buf);
+		if (!await confirmInstall({
+			source: "store",
+			packageName: params.packageName,
+			version,
+			integrity: actualIntegrity,
+			manifest,
+			yes: params.yes
+		})) return {
+			ok: false,
+			error: "Install cancelled"
+		};
 		if (params.force) {
 			const id = peekExtensionIdFromStoreZip(buf);
 			if (id && existsSync(join(params.targetDir, id))) rmSync(join(params.targetDir, id), {
@@ -97,7 +159,10 @@ async function installExtensionFromStoreWithLock(params) {
 			name: result.extensionId,
 			version,
 			resolved: params.packageName,
-			source: "store"
+			source: "store",
+			artifactUrl: downloadUrl,
+			integrity: actualIntegrity,
+			...readInstalledSnapshots(params.targetDir, result.extensionId)
 		});
 		return {
 			ok: true,
@@ -112,28 +177,21 @@ async function installExtensionFromStoreWithLock(params) {
 	}
 }
 function createExtensionInstallCommand() {
-	return new Command("install").description("Install extension from xopc-store (store.xopc.ai), npm, or a local directory into ~/.xopc/extensions").argument("<target>", "npm spec, path, store:id, or store-shaped id (npm is tried first; use --store / store: for store-only)").option("--store", "Install from xopc-store only (fail if not an extension package)", false).option("--npm", "Install from npm only", false).option("-f, --force", "Remove existing extension folder (manifest id) before store or local install", false).action(async (target, opts) => {
+	return new Command("install").description("Install extension from xopc-store (store.xopc.ai), npm, or a local directory into ~/.xopc/extensions").argument("<target>", "Explicit source spec: store:<id>, npm:<package>, or a local extension directory").option("-f, --force", "Remove existing extension folder (manifest id) before store or local install", false).option("-y, --yes", "Skip interactive install confirmation", false).action(async (target, opts) => {
 		const cfg = loadConfig(getContextWithOpts().configPath);
 		const targetDir = resolveExtensionsDir();
 		const lock = getExtensionLockfileManager();
 		let installTarget = target.trim();
 		const storeExplicit = /^store:/i.test(installTarget);
+		const npmExplicit = /^npm:/i.test(installTarget);
 		if (storeExplicit) installTarget = installTarget.replace(/^store:/i, "").trim();
+		else if (npmExplicit) installTarget = installTarget.replace(/^npm:/i, "").trim();
 		if (!installTarget) {
 			console.error(colors.red("error:"), "Missing target");
 			process.exit(1);
 		}
-		if (opts.store && opts.npm) {
-			console.error(colors.red("error:"), "Use only one of --store and --npm");
-			process.exit(1);
-		}
-		const storeOnly = opts.store || storeExplicit;
-		if (storeExplicit && opts.npm) {
-			console.error(colors.red("error:"), "Cannot combine store: prefix with --npm");
-			process.exit(1);
-		}
 		const storeBase = resolveExtensionsStoreBaseUrl(cfg);
-		if (storeOnly) {
+		if (storeExplicit) {
 			const { name: pkgName, version: ver } = parseNameAtVersion(installTarget);
 			if (!STORE_NAME_RE.test(pkgName)) {
 				console.error(colors.red("error:"), "Invalid store package name (lowercase letters, digits, hyphen only)");
@@ -145,7 +203,8 @@ function createExtensionInstallCommand() {
 				version: ver,
 				targetDir,
 				lock,
-				force: opts.force
+				force: opts.force,
+				yes: opts.yes
 			});
 			if (r.ok === false) {
 				console.error(colors.red("error:"), r.error);
@@ -154,7 +213,7 @@ function createExtensionInstallCommand() {
 			console.log(colors.green("✓"), `${r.extensionId}@${r.version} (store)`);
 			return;
 		}
-		if (opts.npm) {
+		if (npmExplicit) {
 			const spec = installTarget;
 			console.log(colors.cyan("📦"), `Installing from npm: ${spec}…`);
 			const result = await installFromNpm(spec, targetDir);
@@ -189,41 +248,8 @@ function createExtensionInstallCommand() {
 			console.log(colors.green("✓"), result.extensionId ?? "ok");
 			return;
 		}
-		if (looksLikeStorePackageRef(installTarget)) {
-			const spec = installTarget;
-			console.log(colors.cyan("📦"), `Trying npm: ${spec}…`);
-			const npmTry = await installFromNpm(spec, targetDir);
-			if (npmTry.ok) {
-				await upsertNpmExtensionLock(lock, targetDir, npmTry, spec);
-				console.log(colors.green("✓"), npmTry.extensionId ?? "ok", "(npm)");
-				return;
-			}
-			console.log(colors.yellow("npm:"), npmTry.error ?? "failed", "— trying xopc-store…");
-			const { name: pkgName, version: ver } = parseNameAtVersion(installTarget);
-			const r = await installExtensionFromStoreWithLock({
-				storeBase,
-				packageName: pkgName,
-				version: ver,
-				targetDir,
-				lock,
-				force: opts.force
-			});
-			if (r.ok === false) {
-				console.error(colors.red("error:"), r.error);
-				process.exit(1);
-			}
-			console.log(colors.green("✓"), `${r.extensionId}@${r.version} (store)`);
-			return;
-		}
-		const spec = installTarget;
-		console.log(colors.cyan("📦"), `Installing from npm: ${spec}…`);
-		const result = await installFromNpm(spec, targetDir);
-		if (!result.ok) {
-			console.error(colors.red("error:"), result.error ?? "install failed");
-			process.exit(1);
-		}
-		await upsertNpmExtensionLock(lock, targetDir, result, spec);
-		console.log(colors.green("✓"), result.extensionId ?? "ok", "(npm)");
+		console.error(colors.red("error:"), "Extension installs require an explicit source: store:<id>, npm:<package>, or a local directory path.");
+		process.exit(1);
 	});
 }
 function createExtensionSearchCommand() {
@@ -271,17 +297,13 @@ function createExtensionPublishCommand() {
 			console.error(colors.red("error:"), `Need ${MANIFEST} and package.json in ${root}`);
 			process.exit(1);
 		}
-		try {
-			if (hasWorkspaceDeps(JSON.parse(readFileSync(pkgPath, "utf-8")))) {
-				console.error(colors.red("error:"), "Remove workspace:* dependencies before publishing.");
-				process.exit(1);
-			}
-			if (!normalizeExtensionManifest(JSON.parse(readFileSync(manifestPath, "utf-8"))).id) {
-				console.error(colors.red("error:"), "Invalid manifest id");
-				process.exit(1);
-			}
-		} catch (e) {
-			console.error(colors.red("error:"), e instanceof Error ? e.message : String(e));
+		const validation = validateExtensionPackageDirectory(root);
+		for (const d of validation.diagnostics) {
+			const label = d.level === "error" ? colors.red("error") : d.level === "warning" ? colors.yellow("warning") : colors.cyan("info");
+			console.log(`${label}:`, d.message);
+		}
+		if (!validation.ok || !validation.manifest?.id) {
+			console.error(colors.red("error:"), "Package is not publishable as an independent extension.");
 			process.exit(1);
 		}
 		const args = ["publish", `--access=${opts.access}`];
@@ -326,7 +348,8 @@ function createExtensionUpdateCommand() {
 					storeBase,
 					packageName: pkgName,
 					targetDir,
-					lock
+					lock,
+					yes: true
 				});
 				if (r.ok === false) {
 					console.error(colors.red("error:"), r.error ?? id);
@@ -358,7 +381,8 @@ function createExtensionUpdateCommand() {
 				name: id,
 				version: entry.version,
 				resolved: spec,
-				source: "npm"
+				source: "npm",
+				...readInstalledSnapshots(targetDir, id)
 			});
 			console.log(colors.green("✓"), id);
 		}

package/dist/src/cli/commands/extension-marketplace.js.map

@@ -1 +1 @@
-{"version":3,"file":"extension-marketplace.js","names":["marketplace.findExtension","marketplace.listExtensions","marketplace.searchExtensions","marketplace.fetchRegistry","marketplace.getExtensionMarketplaceStoreBaseUrl"],"sources":["../../../../src/cli/commands/extension-marketplace.ts"],"sourcesContent":["import { execSync } from 'node:child_process';\nimport { existsSync, readFileSync, statSync, rmSync } from 'node:fs';\nimport { join, resolve } from 'node:path';\n\nimport { Command } from 'commander';\nimport semver from 'semver';\n\nimport {\n  downloadExtensionStoreZipBuffer,\n  resolveExtensionZipDownloadUrl,\n  resolveExtensionsStoreBaseUrl,\n} from '../../agent/skills/marketplace/adapters/store/store-api-client.js';\nimport { loadConfig } from '../../config/loader.js';\nimport { resolveExtensionsDir } from '../../config/paths.js';\nimport type { InstallResult } from '../../extensions/install.js';\nimport {\n  installExtensionFromStoreZip,\n  installFromLocal,\n  installFromNpm,\n  peekExtensionIdFromStoreZip,\n} from '../../extensions/install.js';\nimport { getExtensionLockfileManager } from '../../extensions/lockfile.js';\nimport * as marketplace from '../../extensions/marketplace.js';\nimport { normalizeExtensionManifest } from '../../extensions/normalize-manifest.js';\nimport { colors } from '../utils/colors.js';\nimport { getContextWithOpts } from '../context.js';\n\nconst MANIFEST = 'xopc.extension.json';\n\nfunction isRecord(x: unknown): x is Record<string, unknown> {\n  return typeof x === 'object' && x !== null && !Array.isArray(x);\n}\n\nfunction hasWorkspaceDeps(pkg: Record<string, unknown>): boolean {\n  const deps = pkg.dependencies;\n  const dev = pkg.devDependencies;\n  const check = (d: unknown) => {\n    if (!isRecord(d)) return false;\n    return Object.values(d).some((v) => typeof v === 'string' && v.startsWith('workspace:'));\n  };\n  return check(deps) || check(dev);\n}\n\nfunction parseNameAtVersion(raw: string): { name: string; version?: string } {\n  const t = raw.trim();\n  const at = t.lastIndexOf('@');\n  if (at <= 0 || at === t.length - 1) return { name: t };\n  const maybeVer = t.slice(at + 1);\n  const v = semver.valid(maybeVer);\n  if (v) return { name: t.slice(0, at), version: v };\n  return { name: t };\n}\n\nfunction looksLikeLocalPath(raw: string): boolean {\n  const p = raw.trim();\n  if (p.startsWith('./') || p.startsWith('../')) return true;\n  if (p === '.' || p === '..') return true;\n  try {\n    const abs = resolve(process.cwd(), p);\n    return existsSync(abs) && statSync(abs).isDirectory();\n  } catch {\n    return false;\n  }\n}\n\n/** xopc-store package names: lowercase letters, digits, hyphen (see xopc-store scan). */\nconst STORE_NAME_RE = /^[a-z0-9-]{1,64}$/;\n\nfunction looksLikeStorePackageRef(raw: string): boolean {\n  const { name } = parseNameAtVersion(raw);\n  return STORE_NAME_RE.test(name);\n}\n\nasync function upsertNpmExtensionLock(\n  lock: ReturnType<typeof getExtensionLockfileManager>,\n  targetDir: string,\n  result: InstallResult,\n  spec: string,\n): Promise<void> {\n  if (!result.extensionId) return;\n  const reg = await marketplace.findExtension(result.extensionId);\n  const resolved = reg?.npmPackage ?? spec;\n  let ver = reg?.version ?? '0.0.0';\n  try {\n    const raw = readFileSync(join(targetDir, result.extensionId, MANIFEST), 'utf-8');\n    const m = JSON.parse(raw) as { version?: string };\n    const mv = typeof m.version === 'string' ? semver.valid(m.version) : null;\n    if (mv) ver = mv;\n  } catch {\n    /* keep registry / fallback version */\n  }\n  await lock.upsert(result.extensionId, {\n    name: result.extensionId,\n    version: ver,\n    resolved,\n    source: 'npm',\n  });\n}\n\nasync function installExtensionFromStoreWithLock(params: {\n  storeBase: string;\n  packageName: string;\n  version?: string;\n  targetDir: string;\n  lock: ReturnType<typeof getExtensionLockfileManager>;\n  force?: boolean;\n}): Promise<{ ok: true; extensionId: string; version: string } | { ok: false; error: string }> {\n  try {\n    const { downloadUrl, version } = await resolveExtensionZipDownloadUrl(\n      params.storeBase,\n      params.packageName,\n      params.version,\n    );\n    console.log(\n      colors.cyan('📦'),\n      `Downloading ${params.packageName}@${version} from xopc-store (${params.storeBase})…`,\n    );\n    const buf = await downloadExtensionStoreZipBuffer(params.storeBase, downloadUrl);\n    if (params.force) {\n      const id = peekExtensionIdFromStoreZip(buf);\n      if (id && existsSync(join(params.targetDir, id))) {\n        rmSync(join(params.targetDir, id), { recursive: true, force: true });\n      }\n    }\n    const result = await installExtensionFromStoreZip(buf, params.targetDir);\n    if (!result.ok || !result.extensionId) {\n      return { ok: false, error: result.error ?? 'install failed' };\n    }\n    await params.lock.upsert(result.extensionId, {\n      name: result.extensionId,\n      version,\n      resolved: params.packageName,\n      source: 'store',\n    });\n    return { ok: true, extensionId: result.extensionId, version };\n  } catch (e) {\n    const msg = e instanceof Error ? e.message : String(e);\n    return { ok: false, error: msg };\n  }\n}\n\nexport function createExtensionInstallCommand(): Command {\n  return new Command('install')\n    .description(\n      'Install extension from xopc-store (store.xopc.ai), npm, or a local directory into ~/.xopc/extensions',\n    )\n    .argument(\n      '<target>',\n      'npm spec, path, store:id, or store-shaped id (npm is tried first; use --store / store: for store-only)',\n    )\n    .option('--store', 'Install from xopc-store only (fail if not an extension package)', false)\n    .option('--npm', 'Install from npm only', false)\n    .option(\n      '-f, --force',\n      'Remove existing extension folder (manifest id) before store or local install',\n      false,\n    )\n    .action(\n      async (\n        target: string,\n        opts: { store: boolean; npm: boolean; force: boolean },\n      ) => {\n        const ctx = getContextWithOpts();\n        const cfg = loadConfig(ctx.configPath);\n        const targetDir = resolveExtensionsDir();\n        const lock = getExtensionLockfileManager();\n\n        let installTarget = target.trim();\n        const storeExplicit = /^store:/i.test(installTarget);\n        if (storeExplicit) {\n          installTarget = installTarget.replace(/^store:/i, '').trim();\n        }\n        if (!installTarget) {\n          console.error(colors.red('error:'), 'Missing target');\n          process.exit(1);\n        }\n\n        if (opts.store && opts.npm) {\n          console.error(colors.red('error:'), 'Use only one of --store and --npm');\n          process.exit(1);\n        }\n\n        const storeOnly = opts.store || storeExplicit;\n        if (storeExplicit && opts.npm) {\n          console.error(colors.red('error:'), 'Cannot combine store: prefix with --npm');\n          process.exit(1);\n        }\n\n        const storeBase = resolveExtensionsStoreBaseUrl(cfg);\n\n        if (storeOnly) {\n          const { name: pkgName, version: ver } = parseNameAtVersion(installTarget);\n          if (!STORE_NAME_RE.test(pkgName)) {\n            console.error(\n              colors.red('error:'),\n              'Invalid store package name (lowercase letters, digits, hyphen only)',\n            );\n            process.exit(1);\n          }\n          const r = await installExtensionFromStoreWithLock({\n            storeBase,\n            packageName: pkgName,\n            version: ver,\n            targetDir,\n            lock,\n            force: opts.force,\n          });\n          if (r.ok === false) {\n            console.error(colors.red('error:'), r.error);\n            process.exit(1);\n          }\n          console.log(colors.green('✓'), `${r.extensionId}@${r.version} (store)`);\n          return;\n        }\n\n        if (opts.npm) {\n          const spec = installTarget;\n          console.log(colors.cyan('📦'), `Installing from npm: ${spec}…`);\n          const result = await installFromNpm(spec, targetDir);\n          if (!result.ok) {\n            console.error(colors.red('error:'), result.error ?? 'install failed');\n            process.exit(1);\n          }\n          await upsertNpmExtensionLock(lock, targetDir, result, spec);\n          console.log(colors.green('✓'), result.extensionId ?? 'ok', '(npm)');\n          return;\n        }\n\n        if (looksLikeLocalPath(installTarget)) {\n          const sourceDir = resolve(process.cwd(), installTarget);\n          if (opts.force) {\n            const manifestPath = join(sourceDir, MANIFEST);\n            if (existsSync(manifestPath)) {\n              try {\n                const raw = readFileSync(manifestPath, 'utf-8');\n                const m = JSON.parse(raw) as { id?: string };\n                const extId =\n                  typeof m.id === 'string' &&\n                  m.id &&\n                  !m.id.includes('/') &&\n                  !m.id.includes('\\\\')\n                    ? m.id\n                    : undefined;\n                if (extId && existsSync(join(targetDir, extId))) {\n                  rmSync(join(targetDir, extId), { recursive: true, force: true });\n                }\n              } catch {\n                /* installFromLocal will surface manifest errors */\n              }\n            }\n          }\n          console.log(colors.cyan('📂'), 'Installing from local directory…');\n          const result = await installFromLocal(sourceDir, targetDir);\n          if (!result.ok) {\n            console.error(colors.red('error:'), result.error ?? 'install failed');\n            process.exit(1);\n          }\n          console.log(colors.green('✓'), result.extensionId ?? 'ok');\n          return;\n        }\n\n        if (looksLikeStorePackageRef(installTarget)) {\n          const spec = installTarget;\n          console.log(colors.cyan('📦'), `Trying npm: ${spec}…`);\n          const npmTry = await installFromNpm(spec, targetDir);\n          if (npmTry.ok) {\n            await upsertNpmExtensionLock(lock, targetDir, npmTry, spec);\n            console.log(colors.green('✓'), npmTry.extensionId ?? 'ok', '(npm)');\n            return;\n          }\n          console.log(colors.yellow('npm:'), npmTry.error ?? 'failed', '— trying xopc-store…');\n          const { name: pkgName, version: ver } = parseNameAtVersion(installTarget);\n          const r = await installExtensionFromStoreWithLock({\n            storeBase,\n            packageName: pkgName,\n            version: ver,\n            targetDir,\n            lock,\n            force: opts.force,\n          });\n          if (r.ok === false) {\n            console.error(colors.red('error:'), r.error);\n            process.exit(1);\n          }\n          console.log(colors.green('✓'), `${r.extensionId}@${r.version} (store)`);\n          return;\n        }\n\n        const spec = installTarget;\n        console.log(colors.cyan('📦'), `Installing from npm: ${spec}…`);\n        const result = await installFromNpm(spec, targetDir);\n        if (!result.ok) {\n          console.error(colors.red('error:'), result.error ?? 'install failed');\n          process.exit(1);\n        }\n        await upsertNpmExtensionLock(lock, targetDir, result, spec);\n        console.log(colors.green('✓'), result.extensionId ?? 'ok', '(npm)');\n      },\n    );\n}\n\nexport function createExtensionSearchCommand(): Command {\n  return new Command('search')\n    .description('Search extensions listed on xopc-store')\n    .argument('[keyword]', 'Search text (omit to list all)', '')\n    .option('--category <cat>', 'Filter by category')\n    .option('--json', 'JSON output')\n    .action(async (keyword: string, opts: { category?: string; json?: boolean }) => {\n      try {\n        let rows;\n        if (opts.category?.trim()) {\n          rows = await marketplace.listExtensions(opts.category.trim());\n          if (keyword.trim()) {\n            const k = keyword.trim().toLowerCase();\n            rows = rows.filter(\n              (e) =>\n                e.id.toLowerCase().includes(k) ||\n                e.name.toLowerCase().includes(k) ||\n                (e.description ?? '').toLowerCase().includes(k),\n            );\n          }\n        } else if (keyword.trim()) {\n          rows = await marketplace.searchExtensions(keyword.trim());\n        } else {\n          const reg = await marketplace.fetchRegistry();\n          rows = reg.extensions;\n        }\n\n        if (opts.json) {\n          console.log(JSON.stringify(rows, null, 2));\n          return;\n        }\n\n        if (rows.length === 0) {\n          console.log('No extensions found.');\n          return;\n        }\n\n        console.log(`xopc-store: ${marketplace.getExtensionMarketplaceStoreBaseUrl()}`);\n        console.log('');\n        for (const e of rows) {\n          const badge = e.verified ? ` ${colors.green('✓')}` : '';\n          console.log(`${colors.cyan(e.name)}${badge} ${colors.gray(e.version ?? '')}`);\n          console.log(`  id: ${e.id}  npm: ${e.npmPackage}`);\n          if (e.description) console.log(`  ${e.description}`);\n          if (e.categories?.length) console.log(`  categories: ${e.categories.join(', ')}`);\n          console.log('');\n        }\n      } catch (err) {\n        console.error(colors.red('Error:'), err instanceof Error ? err.message : String(err));\n        process.exit(1);\n      }\n    });\n}\n\nexport function createExtensionPublishCommand(): Command {\n  return new Command('publish')\n    .description('Publish extension to npm (public)')\n    .argument('[directory]', 'Extension root', '.')\n    .option('--dry-run', 'npm publish --dry-run', false)\n    .option('--access <level>', 'npm access', 'public')\n    .action((dir: string, opts: { dryRun: boolean; access: string }) => {\n      const root = resolve(dir || '.');\n      const manifestPath = join(root, MANIFEST);\n      const pkgPath = join(root, 'package.json');\n      if (!existsSync(manifestPath) || !existsSync(pkgPath)) {\n        console.error(colors.red('error:'), `Need ${MANIFEST} and package.json in ${root}`);\n        process.exit(1);\n      }\n      try {\n        const pkg = JSON.parse(readFileSync(pkgPath, 'utf-8')) as Record<string, unknown>;\n        if (hasWorkspaceDeps(pkg)) {\n          console.error(\n            colors.red('error:'),\n            'Remove workspace:* dependencies before publishing.',\n          );\n          process.exit(1);\n        }\n        const raw = JSON.parse(readFileSync(manifestPath, 'utf-8')) as Record<string, unknown>;\n        const manifest = normalizeExtensionManifest(raw);\n        if (!manifest.id) {\n          console.error(colors.red('error:'), 'Invalid manifest id');\n          process.exit(1);\n        }\n      } catch (e) {\n        console.error(colors.red('error:'), e instanceof Error ? e.message : String(e));\n        process.exit(1);\n      }\n\n      const args = ['publish', `--access=${opts.access}`];\n      if (opts.dryRun) args.push('--dry-run');\n      console.log(colors.cyan('Running:'), `npm ${args.join(' ')}`);\n      try {\n        execSync(`npm ${args.join(' ')}`, { cwd: root, stdio: 'inherit' });\n      } catch {\n        process.exit(1);\n      }\n    });\n}\n\nexport function createExtensionUpdateCommand(): Command {\n  return new Command('update')\n    .description('Re-install extension(s) from the lockfile (npm or xopc-store) under ~/.xopc/extensions')\n    .argument('[extensionId]', 'Specific extension id (default: all in lockfile)')\n    .action(async (extensionId: string | undefined) => {\n      const ctx = getContextWithOpts();\n      const cfg = loadConfig(ctx.configPath);\n      const targetDir = resolveExtensionsDir();\n      const storeBase = resolveExtensionsStoreBaseUrl(cfg);\n\n      const lock = getExtensionLockfileManager();\n      const data = await lock.load();\n      const ids = extensionId?.trim()\n        ? [extensionId.trim()]\n        : Object.keys(data.extensions);\n\n      if (ids.length === 0) {\n        console.log('No extensions in lockfile.');\n        return;\n      }\n\n      for (const id of ids) {\n        const entry = data.extensions[id];\n        if (!entry) {\n          console.log(colors.yellow('skip'), id, '(not in lockfile)');\n          continue;\n        }\n        if (entry.source === 'store') {\n          const pkgName = entry.resolved?.trim() || id;\n          console.log(colors.cyan('Updating'), id, '←', `store:${pkgName}`);\n          if (existsSync(join(targetDir, id))) {\n            rmSync(join(targetDir, id), { recursive: true, force: true });\n          }\n          const r = await installExtensionFromStoreWithLock({\n            storeBase,\n            packageName: pkgName,\n            targetDir,\n            lock,\n          });\n          if (r.ok === false) {\n            console.error(colors.red('error:'), r.error ?? id);\n            process.exit(1);\n          }\n          console.log(colors.green('✓'), id);\n          continue;\n        }\n        if (entry.source !== 'npm') {\n          console.log(colors.yellow('skip'), id, `(source ${entry.source})`);\n          continue;\n        }\n        const spec = entry.resolved?.trim() || (await npmPackageForId(id));\n        if (!spec) {\n          console.log(colors.yellow('skip'), id, '(could not resolve npm package)');\n          continue;\n        }\n        console.log(colors.cyan('Updating'), id, '←', spec);\n        if (existsSync(join(targetDir, id))) {\n          rmSync(join(targetDir, id), { recursive: true, force: true });\n        }\n        const result = await installFromNpm(spec, targetDir);\n        if (!result.ok) {\n          console.error(colors.red('error:'), result.error ?? id);\n          process.exit(1);\n        }\n        await lock.upsert(id, {\n          name: id,\n          version: entry.version,\n          resolved: spec,\n          source: 'npm',\n        });\n        console.log(colors.green('✓'), id);\n      }\n    });\n}\n\nasync function npmPackageForId(id: string): Promise<string | undefined> {\n  const found = await marketplace.findExtension(id);\n  return found?.npmPackage;\n}\n"],"mappings":";;;;;;;;;;;;;;;aAYoD;YACS;yBAUuB;AAIpF,MAAM,WAAW;AAEjB,SAAS,SAAS,GAA0C;AAC1D,QAAO,OAAO,MAAM,YAAY,MAAM,QAAQ,CAAC,MAAM,QAAQ,EAAE;;AAGjE,SAAS,iBAAiB,KAAuC;CAC/D,MAAM,OAAO,IAAI;CACjB,MAAM,MAAM,IAAI;CAChB,MAAM,SAAS,MAAe;AAC5B,MAAI,CAAC,SAAS,EAAE,CAAE,QAAO;AACzB,SAAO,OAAO,OAAO,EAAE,CAAC,MAAM,MAAM,OAAO,MAAM,YAAY,EAAE,WAAW,aAAa,CAAC;;AAE1F,QAAO,MAAM,KAAK,IAAI,MAAM,IAAI;;AAGlC,SAAS,mBAAmB,KAAiD;CAC3E,MAAM,IAAI,IAAI,MAAM;CACpB,MAAM,KAAK,EAAE,YAAY,IAAI;AAC7B,KAAI,MAAM,KAAK,OAAO,EAAE,SAAS,EAAG,QAAO,EAAE,MAAM,GAAG;CACtD,MAAM,WAAW,EAAE,MAAM,KAAK,EAAE;CAChC,MAAM,IAAI,OAAO,MAAM,SAAS;AAChC,KAAI,EAAG,QAAO;EAAE,MAAM,EAAE,MAAM,GAAG,GAAG;EAAE,SAAS;EAAG;AAClD,QAAO,EAAE,MAAM,GAAG;;AAGpB,SAAS,mBAAmB,KAAsB;CAChD,MAAM,IAAI,IAAI,MAAM;AACpB,KAAI,EAAE,WAAW,KAAK,IAAI,EAAE,WAAW,MAAM,CAAE,QAAO;AACtD,KAAI,MAAM,OAAO,MAAM,KAAM,QAAO;AACpC,KAAI;EACF,MAAM,MAAM,QAAQ,QAAQ,KAAK,EAAE,EAAE;AACrC,SAAO,WAAW,IAAI,IAAI,SAAS,IAAI,CAAC,aAAa;SAC/C;AACN,SAAO;;;;AAKX,MAAM,gBAAgB;AAEtB,SAAS,yBAAyB,KAAsB;CACtD,MAAM,EAAE,SAAS,mBAAmB,IAAI;AACxC,QAAO,cAAc,KAAK,KAAK;;AAGjC,eAAe,uBACb,MACA,WACA,QACA,MACe;AACf,KAAI,CAAC,OAAO,YAAa;CACzB,MAAM,MAAM,MAAMA,cAA0B,OAAO,YAAY;CAC/D,MAAM,WAAW,KAAK,cAAc;CACpC,IAAI,MAAM,KAAK,WAAW;AAC1B,KAAI;EACF,MAAM,MAAM,aAAa,KAAK,WAAW,OAAO,aAAa,SAAS,EAAE,QAAQ;EAChF,MAAM,IAAI,KAAK,MAAM,IAAI;EACzB,MAAM,KAAK,OAAO,EAAE,YAAY,WAAW,OAAO,MAAM,EAAE,QAAQ,GAAG;AACrE,MAAI,GAAI,OAAM;SACR;AAGR,OAAM,KAAK,OAAO,OAAO,aAAa;EACpC,MAAM,OAAO;EACb,SAAS;EACT;EACA,QAAQ;EACT,CAAC;;AAGJ,eAAe,kCAAkC,QAO8C;AAC7F,KAAI;EACF,MAAM,EAAE,aAAa,YAAY,MAAM,+BACrC,OAAO,WACP,OAAO,aACP,OAAO,QACR;AACD,UAAQ,IACN,OAAO,KAAK,KAAK,EACjB,eAAe,OAAO,YAAY,GAAG,QAAQ,oBAAoB,OAAO,UAAU,IACnF;EACD,MAAM,MAAM,MAAM,gCAAgC,OAAO,WAAW,YAAY;AAChF,MAAI,OAAO,OAAO;GAChB,MAAM,KAAK,4BAA4B,IAAI;AAC3C,OAAI,MAAM,WAAW,KAAK,OAAO,WAAW,GAAG,CAAC,CAC9C,QAAO,KAAK,OAAO,WAAW,GAAG,EAAE;IAAE,WAAW;IAAM,OAAO;IAAM,CAAC;;EAGxE,MAAM,SAAS,MAAM,6BAA6B,KAAK,OAAO,UAAU;AACxE,MAAI,CAAC,OAAO,MAAM,CAAC,OAAO,YACxB,QAAO;GAAE,IAAI;GAAO,OAAO,OAAO,SAAS;GAAkB;AAE/D,QAAM,OAAO,KAAK,OAAO,OAAO,aAAa;GAC3C,MAAM,OAAO;GACb;GACA,UAAU,OAAO;GACjB,QAAQ;GACT,CAAC;AACF,SAAO;GAAE,IAAI;GAAM,aAAa,OAAO;GAAa;GAAS;UACtD,GAAG;AAEV,SAAO;GAAE,IAAI;GAAO,OADR,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;GACtB;;;AAIpC,SAAgB,gCAAyC;AACvD,QAAO,IAAI,QAAQ,UAAU,CAC1B,YACC,uGACD,CACA,SACC,YACA,yGACD,CACA,OAAO,WAAW,mEAAmE,MAAM,CAC3F,OAAO,SAAS,yBAAyB,MAAM,CAC/C,OACC,eACA,gFACA,MACD,CACA,OACC,OACE,QACA,SACG;EAEH,MAAM,MAAM,WADA,oBACc,CAAC,WAAW;EACtC,MAAM,YAAY,sBAAsB;EACxC,MAAM,OAAO,6BAA6B;EAE1C,IAAI,gBAAgB,OAAO,MAAM;EACjC,MAAM,gBAAgB,WAAW,KAAK,cAAc;AACpD,MAAI,cACF,iBAAgB,cAAc,QAAQ,YAAY,GAAG,CAAC,MAAM;AAE9D,MAAI,CAAC,eAAe;AAClB,WAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,iBAAiB;AACrD,WAAQ,KAAK,EAAE;;AAGjB,MAAI,KAAK,SAAS,KAAK,KAAK;AAC1B,WAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,oCAAoC;AACxE,WAAQ,KAAK,EAAE;;EAGjB,MAAM,YAAY,KAAK,SAAS;AAChC,MAAI,iBAAiB,KAAK,KAAK;AAC7B,WAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,0CAA0C;AAC9E,WAAQ,KAAK,EAAE;;EAGjB,MAAM,YAAY,8BAA8B,IAAI;AAEpD,MAAI,WAAW;GACb,MAAM,EAAE,MAAM,SAAS,SAAS,QAAQ,mBAAmB,cAAc;AACzE,OAAI,CAAC,cAAc,KAAK,QAAQ,EAAE;AAChC,YAAQ,MACN,OAAO,IAAI,SAAS,EACpB,sEACD;AACD,YAAQ,KAAK,EAAE;;GAEjB,MAAM,IAAI,MAAM,kCAAkC;IAChD;IACA,aAAa;IACb,SAAS;IACT;IACA;IACA,OAAO,KAAK;IACb,CAAC;AACF,OAAI,EAAE,OAAO,OAAO;AAClB,YAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,EAAE,MAAM;AAC5C,YAAQ,KAAK,EAAE;;AAEjB,WAAQ,IAAI,OAAO,MAAM,IAAI,EAAE,GAAG,EAAE,YAAY,GAAG,EAAE,QAAQ,UAAU;AACvE;;AAGF,MAAI,KAAK,KAAK;GACZ,MAAM,OAAO;AACb,WAAQ,IAAI,OAAO,KAAK,KAAK,EAAE,wBAAwB,KAAK,GAAG;GAC/D,MAAM,SAAS,MAAM,eAAe,MAAM,UAAU;AACpD,OAAI,CAAC,OAAO,IAAI;AACd,YAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,OAAO,SAAS,iBAAiB;AACrE,YAAQ,KAAK,EAAE;;AAEjB,SAAM,uBAAuB,MAAM,WAAW,QAAQ,KAAK;AAC3D,WAAQ,IAAI,OAAO,MAAM,IAAI,EAAE,OAAO,eAAe,MAAM,QAAQ;AACnE;;AAGF,MAAI,mBAAmB,cAAc,EAAE;GACrC,MAAM,YAAY,QAAQ,QAAQ,KAAK,EAAE,cAAc;AACvD,OAAI,KAAK,OAAO;IACd,MAAM,eAAe,KAAK,WAAW,SAAS;AAC9C,QAAI,WAAW,aAAa,CAC1B,KAAI;KACF,MAAM,MAAM,aAAa,cAAc,QAAQ;KAC/C,MAAM,IAAI,KAAK,MAAM,IAAI;KACzB,MAAM,QACJ,OAAO,EAAE,OAAO,YAChB,EAAE,MACF,CAAC,EAAE,GAAG,SAAS,IAAI,IACnB,CAAC,EAAE,GAAG,SAAS,KAAK,GAChB,EAAE,KACF,KAAA;AACN,SAAI,SAAS,WAAW,KAAK,WAAW,MAAM,CAAC,CAC7C,QAAO,KAAK,WAAW,MAAM,EAAE;MAAE,WAAW;MAAM,OAAO;MAAM,CAAC;YAE5D;;AAKZ,WAAQ,IAAI,OAAO,KAAK,KAAK,EAAE,mCAAmC;GAClE,MAAM,SAAS,MAAM,iBAAiB,WAAW,UAAU;AAC3D,OAAI,CAAC,OAAO,IAAI;AACd,YAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,OAAO,SAAS,iBAAiB;AACrE,YAAQ,KAAK,EAAE;;AAEjB,WAAQ,IAAI,OAAO,MAAM,IAAI,EAAE,OAAO,eAAe,KAAK;AAC1D;;AAGF,MAAI,yBAAyB,cAAc,EAAE;GAC3C,MAAM,OAAO;AACb,WAAQ,IAAI,OAAO,KAAK,KAAK,EAAE,eAAe,KAAK,GAAG;GACtD,MAAM,SAAS,MAAM,eAAe,MAAM,UAAU;AACpD,OAAI,OAAO,IAAI;AACb,UAAM,uBAAuB,MAAM,WAAW,QAAQ,KAAK;AAC3D,YAAQ,IAAI,OAAO,MAAM,IAAI,EAAE,OAAO,eAAe,MAAM,QAAQ;AACnE;;AAEF,WAAQ,IAAI,OAAO,OAAO,OAAO,EAAE,OAAO,SAAS,UAAU,uBAAuB;GACpF,MAAM,EAAE,MAAM,SAAS,SAAS,QAAQ,mBAAmB,cAAc;GACzE,MAAM,IAAI,MAAM,kCAAkC;IAChD;IACA,aAAa;IACb,SAAS;IACT;IACA;IACA,OAAO,KAAK;IACb,CAAC;AACF,OAAI,EAAE,OAAO,OAAO;AAClB,YAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,EAAE,MAAM;AAC5C,YAAQ,KAAK,EAAE;;AAEjB,WAAQ,IAAI,OAAO,MAAM,IAAI,EAAE,GAAG,EAAE,YAAY,GAAG,EAAE,QAAQ,UAAU;AACvE;;EAGF,MAAM,OAAO;AACb,UAAQ,IAAI,OAAO,KAAK,KAAK,EAAE,wBAAwB,KAAK,GAAG;EAC/D,MAAM,SAAS,MAAM,eAAe,MAAM,UAAU;AACpD,MAAI,CAAC,OAAO,IAAI;AACd,WAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,OAAO,SAAS,iBAAiB;AACrE,WAAQ,KAAK,EAAE;;AAEjB,QAAM,uBAAuB,MAAM,WAAW,QAAQ,KAAK;AAC3D,UAAQ,IAAI,OAAO,MAAM,IAAI,EAAE,OAAO,eAAe,MAAM,QAAQ;GAEtE;;AAGL,SAAgB,+BAAwC;AACtD,QAAO,IAAI,QAAQ,SAAS,CACzB,YAAY,yCAAyC,CACrD,SAAS,aAAa,kCAAkC,GAAG,CAC3D,OAAO,oBAAoB,qBAAqB,CAChD,OAAO,UAAU,cAAc,CAC/B,OAAO,OAAO,SAAiB,SAAgD;AAC9E,MAAI;GACF,IAAI;AACJ,OAAI,KAAK,UAAU,MAAM,EAAE;AACzB,WAAO,MAAMC,eAA2B,KAAK,SAAS,MAAM,CAAC;AAC7D,QAAI,QAAQ,MAAM,EAAE;KAClB,MAAM,IAAI,QAAQ,MAAM,CAAC,aAAa;AACtC,YAAO,KAAK,QACT,MACC,EAAE,GAAG,aAAa,CAAC,SAAS,EAAE,IAC9B,EAAE,KAAK,aAAa,CAAC,SAAS,EAAE,KAC/B,EAAE,eAAe,IAAI,aAAa,CAAC,SAAS,EAAE,CAClD;;cAEM,QAAQ,MAAM,CACvB,QAAO,MAAMC,iBAA6B,QAAQ,MAAM,CAAC;OAGzD,SAAO,MADWC,eAA2B,EAClC;AAGb,OAAI,KAAK,MAAM;AACb,YAAQ,IAAI,KAAK,UAAU,MAAM,MAAM,EAAE,CAAC;AAC1C;;AAGF,OAAI,KAAK,WAAW,GAAG;AACrB,YAAQ,IAAI,uBAAuB;AACnC;;AAGF,WAAQ,IAAI,eAAeC,qCAAiD,GAAG;AAC/E,WAAQ,IAAI,GAAG;AACf,QAAK,MAAM,KAAK,MAAM;IACpB,MAAM,QAAQ,EAAE,WAAW,IAAI,OAAO,MAAM,IAAI,KAAK;AACrD,YAAQ,IAAI,GAAG,OAAO,KAAK,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,KAAK,EAAE,WAAW,GAAG,GAAG;AAC7E,YAAQ,IAAI,SAAS,EAAE,GAAG,SAAS,EAAE,aAAa;AAClD,QAAI,EAAE,YAAa,SAAQ,IAAI,KAAK,EAAE,cAAc;AACpD,QAAI,EAAE,YAAY,OAAQ,SAAQ,IAAI,iBAAiB,EAAE,WAAW,KAAK,KAAK,GAAG;AACjF,YAAQ,IAAI,GAAG;;WAEV,KAAK;AACZ,WAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,CAAC;AACrF,WAAQ,KAAK,EAAE;;GAEjB;;AAGN,SAAgB,gCAAyC;AACvD,QAAO,IAAI,QAAQ,UAAU,CAC1B,YAAY,oCAAoC,CAChD,SAAS,eAAe,kBAAkB,IAAI,CAC9C,OAAO,aAAa,yBAAyB,MAAM,CACnD,OAAO,oBAAoB,cAAc,SAAS,CAClD,QAAQ,KAAa,SAA8C;EAClE,MAAM,OAAO,QAAQ,OAAO,IAAI;EAChC,MAAM,eAAe,KAAK,MAAM,SAAS;EACzC,MAAM,UAAU,KAAK,MAAM,eAAe;AAC1C,MAAI,CAAC,WAAW,aAAa,IAAI,CAAC,WAAW,QAAQ,EAAE;AACrD,WAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,QAAQ,SAAS,uBAAuB,OAAO;AACnF,WAAQ,KAAK,EAAE;;AAEjB,MAAI;AAEF,OAAI,iBADQ,KAAK,MAAM,aAAa,SAAS,QAAQ,CAC7B,CAAC,EAAE;AACzB,YAAQ,MACN,OAAO,IAAI,SAAS,EACpB,qDACD;AACD,YAAQ,KAAK,EAAE;;AAIjB,OAAI,CADa,2BADL,KAAK,MAAM,aAAa,cAAc,QAAQ,CACX,CAClC,CAAC,IAAI;AAChB,YAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,sBAAsB;AAC1D,YAAQ,KAAK,EAAE;;WAEV,GAAG;AACV,WAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE,CAAC;AAC/E,WAAQ,KAAK,EAAE;;EAGjB,MAAM,OAAO,CAAC,WAAW,YAAY,KAAK,SAAS;AACnD,MAAI,KAAK,OAAQ,MAAK,KAAK,YAAY;AACvC,UAAQ,IAAI,OAAO,KAAK,WAAW,EAAE,OAAO,KAAK,KAAK,IAAI,GAAG;AAC7D,MAAI;AACF,YAAS,OAAO,KAAK,KAAK,IAAI,IAAI;IAAE,KAAK;IAAM,OAAO;IAAW,CAAC;UAC5D;AACN,WAAQ,KAAK,EAAE;;GAEjB;;AAGN,SAAgB,+BAAwC;AACtD,QAAO,IAAI,QAAQ,SAAS,CACzB,YAAY,yFAAyF,CACrG,SAAS,iBAAiB,mDAAmD,CAC7E,OAAO,OAAO,gBAAoC;EAEjD,MAAM,MAAM,WADA,oBACc,CAAC,WAAW;EACtC,MAAM,YAAY,sBAAsB;EACxC,MAAM,YAAY,8BAA8B,IAAI;EAEpD,MAAM,OAAO,6BAA6B;EAC1C,MAAM,OAAO,MAAM,KAAK,MAAM;EAC9B,MAAM,MAAM,aAAa,MAAM,GAC3B,CAAC,YAAY,MAAM,CAAC,GACpB,OAAO,KAAK,KAAK,WAAW;AAEhC,MAAI,IAAI,WAAW,GAAG;AACpB,WAAQ,IAAI,6BAA6B;AACzC;;AAGF,OAAK,MAAM,MAAM,KAAK;GACpB,MAAM,QAAQ,KAAK,WAAW;AAC9B,OAAI,CAAC,OAAO;AACV,YAAQ,IAAI,OAAO,OAAO,OAAO,EAAE,IAAI,oBAAoB;AAC3D;;AAEF,OAAI,MAAM,WAAW,SAAS;IAC5B,MAAM,UAAU,MAAM,UAAU,MAAM,IAAI;AAC1C,YAAQ,IAAI,OAAO,KAAK,WAAW,EAAE,IAAI,KAAK,SAAS,UAAU;AACjE,QAAI,WAAW,KAAK,WAAW,GAAG,CAAC,CACjC,QAAO,KAAK,WAAW,GAAG,EAAE;KAAE,WAAW;KAAM,OAAO;KAAM,CAAC;IAE/D,MAAM,IAAI,MAAM,kCAAkC;KAChD;KACA,aAAa;KACb;KACA;KACD,CAAC;AACF,QAAI,EAAE,OAAO,OAAO;AAClB,aAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,EAAE,SAAS,GAAG;AAClD,aAAQ,KAAK,EAAE;;AAEjB,YAAQ,IAAI,OAAO,MAAM,IAAI,EAAE,GAAG;AAClC;;AAEF,OAAI,MAAM,WAAW,OAAO;AAC1B,YAAQ,IAAI,OAAO,OAAO,OAAO,EAAE,IAAI,WAAW,MAAM,OAAO,GAAG;AAClE;;GAEF,MAAM,OAAO,MAAM,UAAU,MAAM,IAAK,MAAM,gBAAgB,GAAG;AACjE,OAAI,CAAC,MAAM;AACT,YAAQ,IAAI,OAAO,OAAO,OAAO,EAAE,IAAI,kCAAkC;AACzE;;AAEF,WAAQ,IAAI,OAAO,KAAK,WAAW,EAAE,IAAI,KAAK,KAAK;AACnD,OAAI,WAAW,KAAK,WAAW,GAAG,CAAC,CACjC,QAAO,KAAK,WAAW,GAAG,EAAE;IAAE,WAAW;IAAM,OAAO;IAAM,CAAC;GAE/D,MAAM,SAAS,MAAM,eAAe,MAAM,UAAU;AACpD,OAAI,CAAC,OAAO,IAAI;AACd,YAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,OAAO,SAAS,GAAG;AACvD,YAAQ,KAAK,EAAE;;AAEjB,SAAM,KAAK,OAAO,IAAI;IACpB,MAAM;IACN,SAAS,MAAM;IACf,UAAU;IACV,QAAQ;IACT,CAAC;AACF,WAAQ,IAAI,OAAO,MAAM,IAAI,EAAE,GAAG;;GAEpC;;AAGN,eAAe,gBAAgB,IAAyC;AAEtE,SAAO,MADaJ,cAA0B,GAAG,GACnC"}
+{"version":3,"file":"extension-marketplace.js","names":["marketplace.findExtension","marketplace.listExtensions","marketplace.searchExtensions","marketplace.fetchRegistry","marketplace.getExtensionMarketplaceStoreBaseUrl"],"sources":["../../../../src/cli/commands/extension-marketplace.ts"],"sourcesContent":["import { createHash } from 'node:crypto';\nimport { execSync } from 'node:child_process';\nimport { existsSync, readFileSync, statSync, rmSync } from 'node:fs';\nimport { join, resolve } from 'node:path';\n\nimport { confirm } from '@inquirer/prompts';\nimport { Command } from 'commander';\nimport semver from 'semver';\n\nimport {\n  downloadExtensionStoreZipBuffer,\n  resolveExtensionZipDownloadUrl,\n  resolveExtensionsStoreBaseUrl,\n} from '../../agent/skills/marketplace/adapters/store/store-api-client.js';\nimport { loadConfig } from '../../config/loader.js';\nimport { resolveExtensionsDir } from '../../config/paths.js';\nimport type { InstallResult } from '../../extensions/install.js';\nimport {\n  installExtensionFromStoreZip,\n  installFromLocal,\n  installFromNpm,\n  peekExtensionIdFromStoreZip,\n  peekExtensionManifestFromStoreZip,\n} from '../../extensions/install.js';\nimport { getExtensionLockfileManager } from '../../extensions/lockfile.js';\nimport * as marketplace from '../../extensions/marketplace.js';\nimport { colors } from '../utils/colors.js';\nimport { getContextWithOpts } from '../context.js';\nimport { validateExtensionPackageDirectory } from './extension-pack.js';\n\nconst MANIFEST = 'xopc.extension.json';\n\nfunction readJsonObject(path: string): Record<string, unknown> | undefined {\n  try {\n    const raw = JSON.parse(readFileSync(path, 'utf-8')) as unknown;\n    return typeof raw === 'object' && raw !== null && !Array.isArray(raw)\n      ? (raw as Record<string, unknown>)\n      : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nfunction readInstalledSnapshots(targetDir: string, extensionId: string): {\n  manifest?: Record<string, unknown>;\n  packageJson?: Record<string, unknown>;\n} {\n  const root = join(targetDir, extensionId);\n  return {\n    manifest: readJsonObject(join(root, MANIFEST)),\n    packageJson: readJsonObject(join(root, 'package.json')),\n  };\n}\n\nfunction sha256Integrity(buffer: Buffer): string {\n  return `sha256-${createHash('sha256').update(buffer).digest('base64')}`;\n}\n\nfunction normalizeIntegrity(raw: string | undefined): string | undefined {\n  const value = raw?.trim();\n  if (!value) return undefined;\n  if (value.startsWith('sha256-')) return value;\n  if (/^[a-f0-9]{64}$/i.test(value)) {\n    return `sha256-${Buffer.from(value, 'hex').toString('base64')}`;\n  }\n  return value;\n}\n\nfunction printManifestSummary(params: {\n  source: 'store' | 'npm' | 'local';\n  packageName: string;\n  version?: string;\n  integrity?: string;\n  manifest?: Record<string, unknown>;\n}): void {\n  const manifest = params.manifest;\n  console.log('');\n  console.log(colors.cyan('Extension install review'));\n  console.log(`  Source: ${params.source}`);\n  console.log(`  Package: ${params.packageName}${params.version ? `@${params.version}` : ''}`);\n  if (params.integrity) console.log(`  Integrity: ${params.integrity}`);\n  if (manifest) {\n    console.log(`  ID: ${String(manifest.id ?? '(unknown)')}`);\n    console.log(`  Name: ${String(manifest.name ?? manifest.id ?? '(unknown)')}`);\n    const engines = manifest.engines as Record<string, unknown> | undefined;\n    if (engines?.xopc) console.log(`  engines.xopc: ${String(engines.xopc)}`);\n    const permissions = manifest.permissions as Record<string, unknown> | undefined;\n    if (permissions) {\n      console.log('  Permissions:');\n      for (const [key, value] of Object.entries(permissions)) {\n        console.log(`    ${key}: ${Array.isArray(value) ? value.join(', ') : String(value)}`);\n      }\n    }\n    const contracts = manifest.contracts as Record<string, unknown> | undefined;\n    if (contracts) {\n      console.log('  Contracts:');\n      for (const [key, value] of Object.entries(contracts)) {\n        if (Array.isArray(value) && value.length > 0) console.log(`    ${key}: ${value.join(', ')}`);\n      }\n    }\n  }\n  console.log('');\n}\n\nasync function confirmInstall(params: Parameters<typeof printManifestSummary>[0] & { yes?: boolean }): Promise<boolean> {\n  printManifestSummary(params);\n  if (params.yes || !process.stdin.isTTY) return true;\n  return await confirm({ message: 'Install this extension?', default: false });\n}\n\nfunction parseNameAtVersion(raw: string): { name: string; version?: string } {\n  const t = raw.trim();\n  const at = t.lastIndexOf('@');\n  if (at <= 0 || at === t.length - 1) return { name: t };\n  const maybeVer = t.slice(at + 1);\n  const v = semver.valid(maybeVer);\n  if (v) return { name: t.slice(0, at), version: v };\n  return { name: t };\n}\n\nfunction looksLikeLocalPath(raw: string): boolean {\n  const p = raw.trim();\n  if (p.startsWith('./') || p.startsWith('../')) return true;\n  if (p === '.' || p === '..') return true;\n  try {\n    const abs = resolve(process.cwd(), p);\n    return existsSync(abs) && statSync(abs).isDirectory();\n  } catch {\n    return false;\n  }\n}\n\n/** xopc-store package names: lowercase letters, digits, hyphen (see xopc-store scan). */\nconst STORE_NAME_RE = /^[a-z0-9-]{1,64}$/;\n\nasync function upsertNpmExtensionLock(\n  lock: ReturnType<typeof getExtensionLockfileManager>,\n  targetDir: string,\n  result: InstallResult,\n  spec: string,\n): Promise<void> {\n  if (!result.extensionId) return;\n  const reg = await marketplace.findExtension(result.extensionId);\n  const resolved = reg?.npmPackage ?? spec;\n  let ver = reg?.version ?? '0.0.0';\n  try {\n    const raw = readFileSync(join(targetDir, result.extensionId, MANIFEST), 'utf-8');\n    const m = JSON.parse(raw) as { version?: string };\n    const mv = typeof m.version === 'string' ? semver.valid(m.version) : null;\n    if (mv) ver = mv;\n  } catch {\n    /* keep registry / fallback version */\n  }\n  await lock.upsert(result.extensionId, {\n    name: result.extensionId,\n    version: ver,\n    resolved,\n    source: 'npm',\n    ...readInstalledSnapshots(targetDir, result.extensionId),\n  });\n}\n\nasync function installExtensionFromStoreWithLock(params: {\n  storeBase: string;\n  packageName: string;\n  version?: string;\n  targetDir: string;\n  lock: ReturnType<typeof getExtensionLockfileManager>;\n  force?: boolean;\n  yes?: boolean;\n}): Promise<{ ok: true; extensionId: string; version: string } | { ok: false; error: string }> {\n  try {\n    const { downloadUrl, version, integrity: expectedIntegrityRaw } = await resolveExtensionZipDownloadUrl(\n      params.storeBase,\n      params.packageName,\n      params.version,\n    );\n    console.log(\n      colors.cyan('📦'),\n      `Downloading ${params.packageName}@${version} from xopc-store (${params.storeBase})…`,\n    );\n    const buf = await downloadExtensionStoreZipBuffer(params.storeBase, downloadUrl);\n    const actualIntegrity = sha256Integrity(buf);\n    const expectedIntegrity = normalizeIntegrity(expectedIntegrityRaw);\n    if (expectedIntegrity && expectedIntegrity !== actualIntegrity) {\n      return {\n        ok: false,\n        error: `Extension artifact checksum mismatch: expected ${expectedIntegrity}, got ${actualIntegrity}`,\n      };\n    }\n    const manifest = peekExtensionManifestFromStoreZip(buf);\n    const accepted = await confirmInstall({\n      source: 'store',\n      packageName: params.packageName,\n      version,\n      integrity: actualIntegrity,\n      manifest,\n      yes: params.yes,\n    });\n    if (!accepted) {\n      return { ok: false, error: 'Install cancelled' };\n    }\n    if (params.force) {\n      const id = peekExtensionIdFromStoreZip(buf);\n      if (id && existsSync(join(params.targetDir, id))) {\n        rmSync(join(params.targetDir, id), { recursive: true, force: true });\n      }\n    }\n    const result = await installExtensionFromStoreZip(buf, params.targetDir);\n    if (!result.ok || !result.extensionId) {\n      return { ok: false, error: result.error ?? 'install failed' };\n    }\n    await params.lock.upsert(result.extensionId, {\n      name: result.extensionId,\n      version,\n      resolved: params.packageName,\n      source: 'store',\n      artifactUrl: downloadUrl,\n      integrity: actualIntegrity,\n      ...readInstalledSnapshots(params.targetDir, result.extensionId),\n    });\n    return { ok: true, extensionId: result.extensionId, version };\n  } catch (e) {\n    const msg = e instanceof Error ? e.message : String(e);\n    return { ok: false, error: msg };\n  }\n}\n\nexport function createExtensionInstallCommand(): Command {\n  return new Command('install')\n    .description(\n      'Install extension from xopc-store (store.xopc.ai), npm, or a local directory into ~/.xopc/extensions',\n    )\n    .argument(\n      '<target>',\n      'Explicit source spec: store:<id>, npm:<package>, or a local extension directory',\n    )\n    .option(\n      '-f, --force',\n      'Remove existing extension folder (manifest id) before store or local install',\n      false,\n    )\n    .option('-y, --yes', 'Skip interactive install confirmation', false)\n    .action(\n      async (\n        target: string,\n        opts: { force: boolean; yes: boolean },\n      ) => {\n        const ctx = getContextWithOpts();\n        const cfg = loadConfig(ctx.configPath);\n        const targetDir = resolveExtensionsDir();\n        const lock = getExtensionLockfileManager();\n\n        let installTarget = target.trim();\n        const storeExplicit = /^store:/i.test(installTarget);\n        const npmExplicit = /^npm:/i.test(installTarget);\n        if (storeExplicit) {\n          installTarget = installTarget.replace(/^store:/i, '').trim();\n        } else if (npmExplicit) {\n          installTarget = installTarget.replace(/^npm:/i, '').trim();\n        }\n        if (!installTarget) {\n          console.error(colors.red('error:'), 'Missing target');\n          process.exit(1);\n        }\n\n        const storeBase = resolveExtensionsStoreBaseUrl(cfg);\n\n        if (storeExplicit) {\n          const { name: pkgName, version: ver } = parseNameAtVersion(installTarget);\n          if (!STORE_NAME_RE.test(pkgName)) {\n            console.error(\n              colors.red('error:'),\n              'Invalid store package name (lowercase letters, digits, hyphen only)',\n            );\n            process.exit(1);\n          }\n          const r = await installExtensionFromStoreWithLock({\n            storeBase,\n            packageName: pkgName,\n            version: ver,\n            targetDir,\n            lock,\n            force: opts.force,\n            yes: opts.yes,\n          });\n          if (r.ok === false) {\n            console.error(colors.red('error:'), r.error);\n            process.exit(1);\n          }\n          console.log(colors.green('✓'), `${r.extensionId}@${r.version} (store)`);\n          return;\n        }\n\n        if (npmExplicit) {\n          const spec = installTarget;\n          console.log(colors.cyan('📦'), `Installing from npm: ${spec}…`);\n          const result = await installFromNpm(spec, targetDir);\n          if (!result.ok) {\n            console.error(colors.red('error:'), result.error ?? 'install failed');\n            process.exit(1);\n          }\n          await upsertNpmExtensionLock(lock, targetDir, result, spec);\n          console.log(colors.green('✓'), result.extensionId ?? 'ok', '(npm)');\n          return;\n        }\n\n        if (looksLikeLocalPath(installTarget)) {\n          const sourceDir = resolve(process.cwd(), installTarget);\n          if (opts.force) {\n            const manifestPath = join(sourceDir, MANIFEST);\n            if (existsSync(manifestPath)) {\n              try {\n                const raw = readFileSync(manifestPath, 'utf-8');\n                const m = JSON.parse(raw) as { id?: string };\n                const extId =\n                  typeof m.id === 'string' &&\n                  m.id &&\n                  !m.id.includes('/') &&\n                  !m.id.includes('\\\\')\n                    ? m.id\n                    : undefined;\n                if (extId && existsSync(join(targetDir, extId))) {\n                  rmSync(join(targetDir, extId), { recursive: true, force: true });\n                }\n              } catch {\n                /* installFromLocal will surface manifest errors */\n              }\n            }\n          }\n          console.log(colors.cyan('📂'), 'Installing from local directory…');\n          const result = await installFromLocal(sourceDir, targetDir);\n          if (!result.ok) {\n            console.error(colors.red('error:'), result.error ?? 'install failed');\n            process.exit(1);\n          }\n          console.log(colors.green('✓'), result.extensionId ?? 'ok');\n          return;\n        }\n\n        console.error(\n          colors.red('error:'),\n          'Extension installs require an explicit source: store:<id>, npm:<package>, or a local directory path.',\n        );\n        process.exit(1);\n      },\n    );\n}\n\nexport function createExtensionSearchCommand(): Command {\n  return new Command('search')\n    .description('Search extensions listed on xopc-store')\n    .argument('[keyword]', 'Search text (omit to list all)', '')\n    .option('--category <cat>', 'Filter by category')\n    .option('--json', 'JSON output')\n    .action(async (keyword: string, opts: { category?: string; json?: boolean }) => {\n      try {\n        let rows;\n        if (opts.category?.trim()) {\n          rows = await marketplace.listExtensions(opts.category.trim());\n          if (keyword.trim()) {\n            const k = keyword.trim().toLowerCase();\n            rows = rows.filter(\n              (e) =>\n                e.id.toLowerCase().includes(k) ||\n                e.name.toLowerCase().includes(k) ||\n                (e.description ?? '').toLowerCase().includes(k),\n            );\n          }\n        } else if (keyword.trim()) {\n          rows = await marketplace.searchExtensions(keyword.trim());\n        } else {\n          const reg = await marketplace.fetchRegistry();\n          rows = reg.extensions;\n        }\n\n        if (opts.json) {\n          console.log(JSON.stringify(rows, null, 2));\n          return;\n        }\n\n        if (rows.length === 0) {\n          console.log('No extensions found.');\n          return;\n        }\n\n        console.log(`xopc-store: ${marketplace.getExtensionMarketplaceStoreBaseUrl()}`);\n        console.log('');\n        for (const e of rows) {\n          const badge = e.verified ? ` ${colors.green('✓')}` : '';\n          console.log(`${colors.cyan(e.name)}${badge} ${colors.gray(e.version ?? '')}`);\n          console.log(`  id: ${e.id}  npm: ${e.npmPackage}`);\n          if (e.description) console.log(`  ${e.description}`);\n          if (e.categories?.length) console.log(`  categories: ${e.categories.join(', ')}`);\n          console.log('');\n        }\n      } catch (err) {\n        console.error(colors.red('Error:'), err instanceof Error ? err.message : String(err));\n        process.exit(1);\n      }\n    });\n}\n\nexport function createExtensionPublishCommand(): Command {\n  return new Command('publish')\n    .description('Publish extension to npm (public)')\n    .argument('[directory]', 'Extension root', '.')\n    .option('--dry-run', 'npm publish --dry-run', false)\n    .option('--access <level>', 'npm access', 'public')\n    .action((dir: string, opts: { dryRun: boolean; access: string }) => {\n      const root = resolve(dir || '.');\n      const manifestPath = join(root, MANIFEST);\n      const pkgPath = join(root, 'package.json');\n      if (!existsSync(manifestPath) || !existsSync(pkgPath)) {\n        console.error(colors.red('error:'), `Need ${MANIFEST} and package.json in ${root}`);\n        process.exit(1);\n      }\n      const validation = validateExtensionPackageDirectory(root);\n      for (const d of validation.diagnostics) {\n        const label = d.level === 'error' ? colors.red('error') : d.level === 'warning' ? colors.yellow('warning') : colors.cyan('info');\n        console.log(`${label}:`, d.message);\n      }\n      if (!validation.ok || !validation.manifest?.id) {\n        console.error(colors.red('error:'), 'Package is not publishable as an independent extension.');\n        process.exit(1);\n      }\n\n      const args = ['publish', `--access=${opts.access}`];\n      if (opts.dryRun) args.push('--dry-run');\n      console.log(colors.cyan('Running:'), `npm ${args.join(' ')}`);\n      try {\n        execSync(`npm ${args.join(' ')}`, { cwd: root, stdio: 'inherit' });\n      } catch {\n        process.exit(1);\n      }\n    });\n}\n\nexport function createExtensionUpdateCommand(): Command {\n  return new Command('update')\n    .description('Re-install extension(s) from the lockfile (npm or xopc-store) under ~/.xopc/extensions')\n    .argument('[extensionId]', 'Specific extension id (default: all in lockfile)')\n    .action(async (extensionId: string | undefined) => {\n      const ctx = getContextWithOpts();\n      const cfg = loadConfig(ctx.configPath);\n      const targetDir = resolveExtensionsDir();\n      const storeBase = resolveExtensionsStoreBaseUrl(cfg);\n\n      const lock = getExtensionLockfileManager();\n      const data = await lock.load();\n      const ids = extensionId?.trim()\n        ? [extensionId.trim()]\n        : Object.keys(data.extensions);\n\n      if (ids.length === 0) {\n        console.log('No extensions in lockfile.');\n        return;\n      }\n\n      for (const id of ids) {\n        const entry = data.extensions[id];\n        if (!entry) {\n          console.log(colors.yellow('skip'), id, '(not in lockfile)');\n          continue;\n        }\n        if (entry.source === 'store') {\n          const pkgName = entry.resolved?.trim() || id;\n          console.log(colors.cyan('Updating'), id, '←', `store:${pkgName}`);\n          if (existsSync(join(targetDir, id))) {\n            rmSync(join(targetDir, id), { recursive: true, force: true });\n          }\n          const r = await installExtensionFromStoreWithLock({\n            storeBase,\n            packageName: pkgName,\n            targetDir,\n            lock,\n            yes: true,\n          });\n          if (r.ok === false) {\n            console.error(colors.red('error:'), r.error ?? id);\n            process.exit(1);\n          }\n          console.log(colors.green('✓'), id);\n          continue;\n        }\n        if (entry.source !== 'npm') {\n          console.log(colors.yellow('skip'), id, `(source ${entry.source})`);\n          continue;\n        }\n        const spec = entry.resolved?.trim() || (await npmPackageForId(id));\n        if (!spec) {\n          console.log(colors.yellow('skip'), id, '(could not resolve npm package)');\n          continue;\n        }\n        console.log(colors.cyan('Updating'), id, '←', spec);\n        if (existsSync(join(targetDir, id))) {\n          rmSync(join(targetDir, id), { recursive: true, force: true });\n        }\n        const result = await installFromNpm(spec, targetDir);\n        if (!result.ok) {\n          console.error(colors.red('error:'), result.error ?? id);\n          process.exit(1);\n        }\n        await lock.upsert(id, {\n          name: id,\n          version: entry.version,\n          resolved: spec,\n          source: 'npm',\n          ...readInstalledSnapshots(targetDir, id),\n        });\n        console.log(colors.green('✓'), id);\n      }\n    });\n}\n\nasync function npmPackageForId(id: string): Promise<string | undefined> {\n  const found = await marketplace.findExtension(id);\n  return found?.npmPackage;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;aAcoD;YACS;AAe7D,MAAM,WAAW;AAEjB,SAAS,eAAe,MAAmD;AACzE,KAAI;EACF,MAAM,MAAM,KAAK,MAAM,aAAa,MAAM,QAAQ,CAAC;AACnD,SAAO,OAAO,QAAQ,YAAY,QAAQ,QAAQ,CAAC,MAAM,QAAQ,IAAI,GAChE,MACD,KAAA;SACE;AACN;;;AAIJ,SAAS,uBAAuB,WAAmB,aAGjD;CACA,MAAM,OAAO,KAAK,WAAW,YAAY;AACzC,QAAO;EACL,UAAU,eAAe,KAAK,MAAM,SAAS,CAAC;EAC9C,aAAa,eAAe,KAAK,MAAM,eAAe,CAAC;EACxD;;AAGH,SAAS,gBAAgB,QAAwB;AAC/C,QAAO,UAAU,WAAW,SAAS,CAAC,OAAO,OAAO,CAAC,OAAO,SAAS;;AAGvE,SAAS,mBAAmB,KAA6C;CACvE,MAAM,QAAQ,KAAK,MAAM;AACzB,KAAI,CAAC,MAAO,QAAO,KAAA;AACnB,KAAI,MAAM,WAAW,UAAU,CAAE,QAAO;AACxC,KAAI,kBAAkB,KAAK,MAAM,CAC/B,QAAO,UAAU,OAAO,KAAK,OAAO,MAAM,CAAC,SAAS,SAAS;AAE/D,QAAO;;AAGT,SAAS,qBAAqB,QAMrB;CACP,MAAM,WAAW,OAAO;AACxB,SAAQ,IAAI,GAAG;AACf,SAAQ,IAAI,OAAO,KAAK,2BAA2B,CAAC;AACpD,SAAQ,IAAI,aAAa,OAAO,SAAS;AACzC,SAAQ,IAAI,cAAc,OAAO,cAAc,OAAO,UAAU,IAAI,OAAO,YAAY,KAAK;AAC5F,KAAI,OAAO,UAAW,SAAQ,IAAI,gBAAgB,OAAO,YAAY;AACrE,KAAI,UAAU;AACZ,UAAQ,IAAI,SAAS,OAAO,SAAS,MAAM,YAAY,GAAG;AAC1D,UAAQ,IAAI,WAAW,OAAO,SAAS,QAAQ,SAAS,MAAM,YAAY,GAAG;EAC7E,MAAM,UAAU,SAAS;AACzB,MAAI,SAAS,KAAM,SAAQ,IAAI,mBAAmB,OAAO,QAAQ,KAAK,GAAG;EACzE,MAAM,cAAc,SAAS;AAC7B,MAAI,aAAa;AACf,WAAQ,IAAI,iBAAiB;AAC7B,QAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,YAAY,CACpD,SAAQ,IAAI,OAAO,IAAI,IAAI,MAAM,QAAQ,MAAM,GAAG,MAAM,KAAK,KAAK,GAAG,OAAO,MAAM,GAAG;;EAGzF,MAAM,YAAY,SAAS;AAC3B,MAAI,WAAW;AACb,WAAQ,IAAI,eAAe;AAC3B,QAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,UAAU,CAClD,KAAI,MAAM,QAAQ,MAAM,IAAI,MAAM,SAAS,EAAG,SAAQ,IAAI,OAAO,IAAI,IAAI,MAAM,KAAK,KAAK,GAAG;;;AAIlG,SAAQ,IAAI,GAAG;;AAGjB,eAAe,eAAe,QAA0F;AACtH,sBAAqB,OAAO;AAC5B,KAAI,OAAO,OAAO,CAAC,QAAQ,MAAM,MAAO,QAAO;AAC/C,QAAO,MAAM,QAAQ;EAAE,SAAS;EAA2B,SAAS;EAAO,CAAC;;AAG9E,SAAS,mBAAmB,KAAiD;CAC3E,MAAM,IAAI,IAAI,MAAM;CACpB,MAAM,KAAK,EAAE,YAAY,IAAI;AAC7B,KAAI,MAAM,KAAK,OAAO,EAAE,SAAS,EAAG,QAAO,EAAE,MAAM,GAAG;CACtD,MAAM,WAAW,EAAE,MAAM,KAAK,EAAE;CAChC,MAAM,IAAI,OAAO,MAAM,SAAS;AAChC,KAAI,EAAG,QAAO;EAAE,MAAM,EAAE,MAAM,GAAG,GAAG;EAAE,SAAS;EAAG;AAClD,QAAO,EAAE,MAAM,GAAG;;AAGpB,SAAS,mBAAmB,KAAsB;CAChD,MAAM,IAAI,IAAI,MAAM;AACpB,KAAI,EAAE,WAAW,KAAK,IAAI,EAAE,WAAW,MAAM,CAAE,QAAO;AACtD,KAAI,MAAM,OAAO,MAAM,KAAM,QAAO;AACpC,KAAI;EACF,MAAM,MAAM,QAAQ,QAAQ,KAAK,EAAE,EAAE;AACrC,SAAO,WAAW,IAAI,IAAI,SAAS,IAAI,CAAC,aAAa;SAC/C;AACN,SAAO;;;;AAKX,MAAM,gBAAgB;AAEtB,eAAe,uBACb,MACA,WACA,QACA,MACe;AACf,KAAI,CAAC,OAAO,YAAa;CACzB,MAAM,MAAM,MAAMA,cAA0B,OAAO,YAAY;CAC/D,MAAM,WAAW,KAAK,cAAc;CACpC,IAAI,MAAM,KAAK,WAAW;AAC1B,KAAI;EACF,MAAM,MAAM,aAAa,KAAK,WAAW,OAAO,aAAa,SAAS,EAAE,QAAQ;EAChF,MAAM,IAAI,KAAK,MAAM,IAAI;EACzB,MAAM,KAAK,OAAO,EAAE,YAAY,WAAW,OAAO,MAAM,EAAE,QAAQ,GAAG;AACrE,MAAI,GAAI,OAAM;SACR;AAGR,OAAM,KAAK,OAAO,OAAO,aAAa;EACpC,MAAM,OAAO;EACb,SAAS;EACT;EACA,QAAQ;EACR,GAAG,uBAAuB,WAAW,OAAO,YAAY;EACzD,CAAC;;AAGJ,eAAe,kCAAkC,QAQ8C;AAC7F,KAAI;EACF,MAAM,EAAE,aAAa,SAAS,WAAW,yBAAyB,MAAM,+BACtE,OAAO,WACP,OAAO,aACP,OAAO,QACR;AACD,UAAQ,IACN,OAAO,KAAK,KAAK,EACjB,eAAe,OAAO,YAAY,GAAG,QAAQ,oBAAoB,OAAO,UAAU,IACnF;EACD,MAAM,MAAM,MAAM,gCAAgC,OAAO,WAAW,YAAY;EAChF,MAAM,kBAAkB,gBAAgB,IAAI;EAC5C,MAAM,oBAAoB,mBAAmB,qBAAqB;AAClE,MAAI,qBAAqB,sBAAsB,gBAC7C,QAAO;GACL,IAAI;GACJ,OAAO,kDAAkD,kBAAkB,QAAQ;GACpF;EAEH,MAAM,WAAW,kCAAkC,IAAI;AASvD,MAAI,CAAC,MARkB,eAAe;GACpC,QAAQ;GACR,aAAa,OAAO;GACpB;GACA,WAAW;GACX;GACA,KAAK,OAAO;GACb,CAAC,CAEA,QAAO;GAAE,IAAI;GAAO,OAAO;GAAqB;AAElD,MAAI,OAAO,OAAO;GAChB,MAAM,KAAK,4BAA4B,IAAI;AAC3C,OAAI,MAAM,WAAW,KAAK,OAAO,WAAW,GAAG,CAAC,CAC9C,QAAO,KAAK,OAAO,WAAW,GAAG,EAAE;IAAE,WAAW;IAAM,OAAO;IAAM,CAAC;;EAGxE,MAAM,SAAS,MAAM,6BAA6B,KAAK,OAAO,UAAU;AACxE,MAAI,CAAC,OAAO,MAAM,CAAC,OAAO,YACxB,QAAO;GAAE,IAAI;GAAO,OAAO,OAAO,SAAS;GAAkB;AAE/D,QAAM,OAAO,KAAK,OAAO,OAAO,aAAa;GAC3C,MAAM,OAAO;GACb;GACA,UAAU,OAAO;GACjB,QAAQ;GACR,aAAa;GACb,WAAW;GACX,GAAG,uBAAuB,OAAO,WAAW,OAAO,YAAY;GAChE,CAAC;AACF,SAAO;GAAE,IAAI;GAAM,aAAa,OAAO;GAAa;GAAS;UACtD,GAAG;AAEV,SAAO;GAAE,IAAI;GAAO,OADR,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;GACtB;;;AAIpC,SAAgB,gCAAyC;AACvD,QAAO,IAAI,QAAQ,UAAU,CAC1B,YACC,uGACD,CACA,SACC,YACA,kFACD,CACA,OACC,eACA,gFACA,MACD,CACA,OAAO,aAAa,yCAAyC,MAAM,CACnE,OACC,OACE,QACA,SACG;EAEH,MAAM,MAAM,WADA,oBACc,CAAC,WAAW;EACtC,MAAM,YAAY,sBAAsB;EACxC,MAAM,OAAO,6BAA6B;EAE1C,IAAI,gBAAgB,OAAO,MAAM;EACjC,MAAM,gBAAgB,WAAW,KAAK,cAAc;EACpD,MAAM,cAAc,SAAS,KAAK,cAAc;AAChD,MAAI,cACF,iBAAgB,cAAc,QAAQ,YAAY,GAAG,CAAC,MAAM;WACnD,YACT,iBAAgB,cAAc,QAAQ,UAAU,GAAG,CAAC,MAAM;AAE5D,MAAI,CAAC,eAAe;AAClB,WAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,iBAAiB;AACrD,WAAQ,KAAK,EAAE;;EAGjB,MAAM,YAAY,8BAA8B,IAAI;AAEpD,MAAI,eAAe;GACjB,MAAM,EAAE,MAAM,SAAS,SAAS,QAAQ,mBAAmB,cAAc;AACzE,OAAI,CAAC,cAAc,KAAK,QAAQ,EAAE;AAChC,YAAQ,MACN,OAAO,IAAI,SAAS,EACpB,sEACD;AACD,YAAQ,KAAK,EAAE;;GAEjB,MAAM,IAAI,MAAM,kCAAkC;IAChD;IACA,aAAa;IACb,SAAS;IACT;IACA;IACA,OAAO,KAAK;IACZ,KAAK,KAAK;IACX,CAAC;AACF,OAAI,EAAE,OAAO,OAAO;AAClB,YAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,EAAE,MAAM;AAC5C,YAAQ,KAAK,EAAE;;AAEjB,WAAQ,IAAI,OAAO,MAAM,IAAI,EAAE,GAAG,EAAE,YAAY,GAAG,EAAE,QAAQ,UAAU;AACvE;;AAGF,MAAI,aAAa;GACf,MAAM,OAAO;AACb,WAAQ,IAAI,OAAO,KAAK,KAAK,EAAE,wBAAwB,KAAK,GAAG;GAC/D,MAAM,SAAS,MAAM,eAAe,MAAM,UAAU;AACpD,OAAI,CAAC,OAAO,IAAI;AACd,YAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,OAAO,SAAS,iBAAiB;AACrE,YAAQ,KAAK,EAAE;;AAEjB,SAAM,uBAAuB,MAAM,WAAW,QAAQ,KAAK;AAC3D,WAAQ,IAAI,OAAO,MAAM,IAAI,EAAE,OAAO,eAAe,MAAM,QAAQ;AACnE;;AAGF,MAAI,mBAAmB,cAAc,EAAE;GACrC,MAAM,YAAY,QAAQ,QAAQ,KAAK,EAAE,cAAc;AACvD,OAAI,KAAK,OAAO;IACd,MAAM,eAAe,KAAK,WAAW,SAAS;AAC9C,QAAI,WAAW,aAAa,CAC1B,KAAI;KACF,MAAM,MAAM,aAAa,cAAc,QAAQ;KAC/C,MAAM,IAAI,KAAK,MAAM,IAAI;KACzB,MAAM,QACJ,OAAO,EAAE,OAAO,YAChB,EAAE,MACF,CAAC,EAAE,GAAG,SAAS,IAAI,IACnB,CAAC,EAAE,GAAG,SAAS,KAAK,GAChB,EAAE,KACF,KAAA;AACN,SAAI,SAAS,WAAW,KAAK,WAAW,MAAM,CAAC,CAC7C,QAAO,KAAK,WAAW,MAAM,EAAE;MAAE,WAAW;MAAM,OAAO;MAAM,CAAC;YAE5D;;AAKZ,WAAQ,IAAI,OAAO,KAAK,KAAK,EAAE,mCAAmC;GAClE,MAAM,SAAS,MAAM,iBAAiB,WAAW,UAAU;AAC3D,OAAI,CAAC,OAAO,IAAI;AACd,YAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,OAAO,SAAS,iBAAiB;AACrE,YAAQ,KAAK,EAAE;;AAEjB,WAAQ,IAAI,OAAO,MAAM,IAAI,EAAE,OAAO,eAAe,KAAK;AAC1D;;AAGF,UAAQ,MACN,OAAO,IAAI,SAAS,EACpB,uGACD;AACD,UAAQ,KAAK,EAAE;GAElB;;AAGL,SAAgB,+BAAwC;AACtD,QAAO,IAAI,QAAQ,SAAS,CACzB,YAAY,yCAAyC,CACrD,SAAS,aAAa,kCAAkC,GAAG,CAC3D,OAAO,oBAAoB,qBAAqB,CAChD,OAAO,UAAU,cAAc,CAC/B,OAAO,OAAO,SAAiB,SAAgD;AAC9E,MAAI;GACF,IAAI;AACJ,OAAI,KAAK,UAAU,MAAM,EAAE;AACzB,WAAO,MAAMC,eAA2B,KAAK,SAAS,MAAM,CAAC;AAC7D,QAAI,QAAQ,MAAM,EAAE;KAClB,MAAM,IAAI,QAAQ,MAAM,CAAC,aAAa;AACtC,YAAO,KAAK,QACT,MACC,EAAE,GAAG,aAAa,CAAC,SAAS,EAAE,IAC9B,EAAE,KAAK,aAAa,CAAC,SAAS,EAAE,KAC/B,EAAE,eAAe,IAAI,aAAa,CAAC,SAAS,EAAE,CAClD;;cAEM,QAAQ,MAAM,CACvB,QAAO,MAAMC,iBAA6B,QAAQ,MAAM,CAAC;OAGzD,SAAO,MADWC,eAA2B,EAClC;AAGb,OAAI,KAAK,MAAM;AACb,YAAQ,IAAI,KAAK,UAAU,MAAM,MAAM,EAAE,CAAC;AAC1C;;AAGF,OAAI,KAAK,WAAW,GAAG;AACrB,YAAQ,IAAI,uBAAuB;AACnC;;AAGF,WAAQ,IAAI,eAAeC,qCAAiD,GAAG;AAC/E,WAAQ,IAAI,GAAG;AACf,QAAK,MAAM,KAAK,MAAM;IACpB,MAAM,QAAQ,EAAE,WAAW,IAAI,OAAO,MAAM,IAAI,KAAK;AACrD,YAAQ,IAAI,GAAG,OAAO,KAAK,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,KAAK,EAAE,WAAW,GAAG,GAAG;AAC7E,YAAQ,IAAI,SAAS,EAAE,GAAG,SAAS,EAAE,aAAa;AAClD,QAAI,EAAE,YAAa,SAAQ,IAAI,KAAK,EAAE,cAAc;AACpD,QAAI,EAAE,YAAY,OAAQ,SAAQ,IAAI,iBAAiB,EAAE,WAAW,KAAK,KAAK,GAAG;AACjF,YAAQ,IAAI,GAAG;;WAEV,KAAK;AACZ,WAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,CAAC;AACrF,WAAQ,KAAK,EAAE;;GAEjB;;AAGN,SAAgB,gCAAyC;AACvD,QAAO,IAAI,QAAQ,UAAU,CAC1B,YAAY,oCAAoC,CAChD,SAAS,eAAe,kBAAkB,IAAI,CAC9C,OAAO,aAAa,yBAAyB,MAAM,CACnD,OAAO,oBAAoB,cAAc,SAAS,CAClD,QAAQ,KAAa,SAA8C;EAClE,MAAM,OAAO,QAAQ,OAAO,IAAI;EAChC,MAAM,eAAe,KAAK,MAAM,SAAS;EACzC,MAAM,UAAU,KAAK,MAAM,eAAe;AAC1C,MAAI,CAAC,WAAW,aAAa,IAAI,CAAC,WAAW,QAAQ,EAAE;AACrD,WAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,QAAQ,SAAS,uBAAuB,OAAO;AACnF,WAAQ,KAAK,EAAE;;EAEjB,MAAM,aAAa,kCAAkC,KAAK;AAC1D,OAAK,MAAM,KAAK,WAAW,aAAa;GACtC,MAAM,QAAQ,EAAE,UAAU,UAAU,OAAO,IAAI,QAAQ,GAAG,EAAE,UAAU,YAAY,OAAO,OAAO,UAAU,GAAG,OAAO,KAAK,OAAO;AAChI,WAAQ,IAAI,GAAG,MAAM,IAAI,EAAE,QAAQ;;AAErC,MAAI,CAAC,WAAW,MAAM,CAAC,WAAW,UAAU,IAAI;AAC9C,WAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,0DAA0D;AAC9F,WAAQ,KAAK,EAAE;;EAGjB,MAAM,OAAO,CAAC,WAAW,YAAY,KAAK,SAAS;AACnD,MAAI,KAAK,OAAQ,MAAK,KAAK,YAAY;AACvC,UAAQ,IAAI,OAAO,KAAK,WAAW,EAAE,OAAO,KAAK,KAAK,IAAI,GAAG;AAC7D,MAAI;AACF,YAAS,OAAO,KAAK,KAAK,IAAI,IAAI;IAAE,KAAK;IAAM,OAAO;IAAW,CAAC;UAC5D;AACN,WAAQ,KAAK,EAAE;;GAEjB;;AAGN,SAAgB,+BAAwC;AACtD,QAAO,IAAI,QAAQ,SAAS,CACzB,YAAY,yFAAyF,CACrG,SAAS,iBAAiB,mDAAmD,CAC7E,OAAO,OAAO,gBAAoC;EAEjD,MAAM,MAAM,WADA,oBACc,CAAC,WAAW;EACtC,MAAM,YAAY,sBAAsB;EACxC,MAAM,YAAY,8BAA8B,IAAI;EAEpD,MAAM,OAAO,6BAA6B;EAC1C,MAAM,OAAO,MAAM,KAAK,MAAM;EAC9B,MAAM,MAAM,aAAa,MAAM,GAC3B,CAAC,YAAY,MAAM,CAAC,GACpB,OAAO,KAAK,KAAK,WAAW;AAEhC,MAAI,IAAI,WAAW,GAAG;AACpB,WAAQ,IAAI,6BAA6B;AACzC;;AAGF,OAAK,MAAM,MAAM,KAAK;GACpB,MAAM,QAAQ,KAAK,WAAW;AAC9B,OAAI,CAAC,OAAO;AACV,YAAQ,IAAI,OAAO,OAAO,OAAO,EAAE,IAAI,oBAAoB;AAC3D;;AAEF,OAAI,MAAM,WAAW,SAAS;IAC5B,MAAM,UAAU,MAAM,UAAU,MAAM,IAAI;AAC1C,YAAQ,IAAI,OAAO,KAAK,WAAW,EAAE,IAAI,KAAK,SAAS,UAAU;AACjE,QAAI,WAAW,KAAK,WAAW,GAAG,CAAC,CACjC,QAAO,KAAK,WAAW,GAAG,EAAE;KAAE,WAAW;KAAM,OAAO;KAAM,CAAC;IAE/D,MAAM,IAAI,MAAM,kCAAkC;KAChD;KACA,aAAa;KACb;KACA;KACA,KAAK;KACN,CAAC;AACF,QAAI,EAAE,OAAO,OAAO;AAClB,aAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,EAAE,SAAS,GAAG;AAClD,aAAQ,KAAK,EAAE;;AAEjB,YAAQ,IAAI,OAAO,MAAM,IAAI,EAAE,GAAG;AAClC;;AAEF,OAAI,MAAM,WAAW,OAAO;AAC1B,YAAQ,IAAI,OAAO,OAAO,OAAO,EAAE,IAAI,WAAW,MAAM,OAAO,GAAG;AAClE;;GAEF,MAAM,OAAO,MAAM,UAAU,MAAM,IAAK,MAAM,gBAAgB,GAAG;AACjE,OAAI,CAAC,MAAM;AACT,YAAQ,IAAI,OAAO,OAAO,OAAO,EAAE,IAAI,kCAAkC;AACzE;;AAEF,WAAQ,IAAI,OAAO,KAAK,WAAW,EAAE,IAAI,KAAK,KAAK;AACnD,OAAI,WAAW,KAAK,WAAW,GAAG,CAAC,CACjC,QAAO,KAAK,WAAW,GAAG,EAAE;IAAE,WAAW;IAAM,OAAO;IAAM,CAAC;GAE/D,MAAM,SAAS,MAAM,eAAe,MAAM,UAAU;AACpD,OAAI,CAAC,OAAO,IAAI;AACd,YAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,OAAO,SAAS,GAAG;AACvD,YAAQ,KAAK,EAAE;;AAEjB,SAAM,KAAK,OAAO,IAAI;IACpB,MAAM;IACN,SAAS,MAAM;IACf,UAAU;IACV,QAAQ;IACR,GAAG,uBAAuB,WAAW,GAAG;IACzC,CAAC;AACF,WAAQ,IAAI,OAAO,MAAM,IAAI,EAAE,GAAG;;GAEpC;;AAGN,eAAe,gBAAgB,IAAyC;AAEtE,SAAO,MADaJ,cAA0B,GAAG,GACnC"}

package/dist/src/cli/commands/extension-pack.d.ts

@@ -1,2 +1,15 @@
 import { Command } from 'commander';
+import type { ExtensionManifest } from '../../extensions/types/index.js';
+export interface PackDiagnostic {
+    level: 'error' | 'warning' | 'info';
+    message: string;
+}
+export interface ExtensionPackageValidationResult {
+    extensionDir: string;
+    manifest: ExtensionManifest | null;
+    packageJson: Record<string, unknown> | null;
+    diagnostics: PackDiagnostic[];
+    ok: boolean;
+}
+export declare function validateExtensionPackageDirectory(dir: string): ExtensionPackageValidationResult;
 export declare function createExtensionPackCommand(): Command;