@xopcai/xopc 0.0.142 → 0.0.143

package/dist/src/cli/commands/extension-marketplace.js.map

@@ -1 +1 @@
-{"version":3,"file":"extension-marketplace.js","names":["marketplace.findExtension","marketplace.listExtensions","marketplace.searchExtensions","marketplace.fetchRegistry","marketplace.getExtensionMarketplaceStoreBaseUrl"],"sources":["../../../../src/cli/commands/extension-marketplace.ts"],"sourcesContent":["import { createHash } from 'node:crypto';\nimport { execSync } from 'node:child_process';\nimport { existsSync, readFileSync, statSync, rmSync } from 'node:fs';\nimport { join, resolve } from 'node:path';\n\nimport { confirm } from '@inquirer/prompts';\nimport { Command } from 'commander';\nimport semver from 'semver';\n\nimport {\n  downloadExtensionStoreZipBuffer,\n  resolveExtensionZipDownloadUrl,\n  resolveExtensionsStoreBaseUrl,\n} from '../../agent/skills/marketplace/adapters/store/store-api-client.js';\nimport { loadConfig } from '../../config/loader.js';\nimport { resolveExtensionsDir } from '../../config/paths.js';\nimport type { InstallResult } from '../../extensions/install.js';\nimport {\n  installExtensionFromStoreZip,\n  installFromLocal,\n  installFromNpm,\n  peekExtensionIdFromStoreZip,\n  peekExtensionManifestFromStoreZip,\n} from '../../extensions/install.js';\nimport { getExtensionLockfileManager } from '../../extensions/lockfile.js';\nimport * as marketplace from '../../extensions/marketplace.js';\nimport { colors } from '../utils/colors.js';\nimport { getContextWithOpts } from '../context.js';\nimport { validateExtensionPackageDirectory } from './extension-pack.js';\n\nconst MANIFEST = 'xopc.extension.json';\n\nfunction readJsonObject(path: string): Record<string, unknown> | undefined {\n  try {\n    const raw = JSON.parse(readFileSync(path, 'utf-8')) as unknown;\n    return typeof raw === 'object' && raw !== null && !Array.isArray(raw)\n      ? (raw as Record<string, unknown>)\n      : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nfunction readInstalledSnapshots(targetDir: string, extensionId: string): {\n  manifest?: Record<string, unknown>;\n  packageJson?: Record<string, unknown>;\n} {\n  const root = join(targetDir, extensionId);\n  return {\n    manifest: readJsonObject(join(root, MANIFEST)),\n    packageJson: readJsonObject(join(root, 'package.json')),\n  };\n}\n\nfunction sha256Integrity(buffer: Buffer): string {\n  return `sha256-${createHash('sha256').update(buffer).digest('base64')}`;\n}\n\nfunction normalizeIntegrity(raw: string | undefined): string | undefined {\n  const value = raw?.trim();\n  if (!value) return undefined;\n  if (value.startsWith('sha256-')) return value;\n  if (/^[a-f0-9]{64}$/i.test(value)) {\n    return `sha256-${Buffer.from(value, 'hex').toString('base64')}`;\n  }\n  return value;\n}\n\nfunction printManifestSummary(params: {\n  source: 'store' | 'npm' | 'local';\n  packageName: string;\n  version?: string;\n  integrity?: string;\n  manifest?: Record<string, unknown>;\n}): void {\n  const manifest = params.manifest;\n  console.log('');\n  console.log(colors.cyan('Extension install review'));\n  console.log(`  Source: ${params.source}`);\n  console.log(`  Package: ${params.packageName}${params.version ? `@${params.version}` : ''}`);\n  if (params.integrity) console.log(`  Integrity: ${params.integrity}`);\n  if (manifest) {\n    console.log(`  ID: ${String(manifest.id ?? '(unknown)')}`);\n    console.log(`  Name: ${String(manifest.name ?? manifest.id ?? '(unknown)')}`);\n    const engines = manifest.engines as Record<string, unknown> | undefined;\n    if (engines?.xopc) console.log(`  engines.xopc: ${String(engines.xopc)}`);\n    const permissions = manifest.permissions as Record<string, unknown> | undefined;\n    if (permissions) {\n      console.log('  Permissions:');\n      for (const [key, value] of Object.entries(permissions)) {\n        console.log(`    ${key}: ${Array.isArray(value) ? value.join(', ') : String(value)}`);\n      }\n    }\n    const contracts = manifest.contracts as Record<string, unknown> | undefined;\n    if (contracts) {\n      console.log('  Contracts:');\n      for (const [key, value] of Object.entries(contracts)) {\n        if (Array.isArray(value) && value.length > 0) console.log(`    ${key}: ${value.join(', ')}`);\n      }\n    }\n  }\n  console.log('');\n}\n\nasync function confirmInstall(params: Parameters<typeof printManifestSummary>[0] & { yes?: boolean }): Promise<boolean> {\n  printManifestSummary(params);\n  if (params.yes || !process.stdin.isTTY) return true;\n  return await confirm({ message: 'Install this extension?', default: false });\n}\n\nfunction parseNameAtVersion(raw: string): { name: string; version?: string } {\n  const t = raw.trim();\n  const at = t.lastIndexOf('@');\n  if (at <= 0 || at === t.length - 1) return { name: t };\n  const maybeVer = t.slice(at + 1);\n  const v = semver.valid(maybeVer);\n  if (v) return { name: t.slice(0, at), version: v };\n  return { name: t };\n}\n\nfunction looksLikeLocalPath(raw: string): boolean {\n  const p = raw.trim();\n  if (p.startsWith('./') || p.startsWith('../')) return true;\n  if (p === '.' || p === '..') return true;\n  try {\n    const abs = resolve(process.cwd(), p);\n    return existsSync(abs) && statSync(abs).isDirectory();\n  } catch {\n    return false;\n  }\n}\n\n/** xopc-store package names: lowercase letters, digits, hyphen (see xopc-store scan). */\nconst STORE_NAME_RE = /^[a-z0-9-]{1,64}$/;\n\nasync function upsertNpmExtensionLock(\n  lock: ReturnType<typeof getExtensionLockfileManager>,\n  targetDir: string,\n  result: InstallResult,\n  spec: string,\n): Promise<void> {\n  if (!result.extensionId) return;\n  const reg = await marketplace.findExtension(result.extensionId);\n  const resolved = reg?.npmPackage ?? spec;\n  let ver = reg?.version ?? '0.0.0';\n  try {\n    const raw = readFileSync(join(targetDir, result.extensionId, MANIFEST), 'utf-8');\n    const m = JSON.parse(raw) as { version?: string };\n    const mv = typeof m.version === 'string' ? semver.valid(m.version) : null;\n    if (mv) ver = mv;\n  } catch {\n    /* keep registry / fallback version */\n  }\n  await lock.upsert(result.extensionId, {\n    name: result.extensionId,\n    version: ver,\n    resolved,\n    source: 'npm',\n    ...readInstalledSnapshots(targetDir, result.extensionId),\n  });\n}\n\nasync function installExtensionFromStoreWithLock(params: {\n  storeBase: string;\n  packageName: string;\n  version?: string;\n  targetDir: string;\n  lock: ReturnType<typeof getExtensionLockfileManager>;\n  force?: boolean;\n  yes?: boolean;\n}): Promise<{ ok: true; extensionId: string; version: string } | { ok: false; error: string }> {\n  try {\n    const { downloadUrl, version, integrity: expectedIntegrityRaw } = await resolveExtensionZipDownloadUrl(\n      params.storeBase,\n      params.packageName,\n      params.version,\n    );\n    console.log(\n      colors.cyan('📦'),\n      `Downloading ${params.packageName}@${version} from xopc-store (${params.storeBase})…`,\n    );\n    const buf = await downloadExtensionStoreZipBuffer(params.storeBase, downloadUrl);\n    const actualIntegrity = sha256Integrity(buf);\n    const expectedIntegrity = normalizeIntegrity(expectedIntegrityRaw);\n    if (expectedIntegrity && expectedIntegrity !== actualIntegrity) {\n      return {\n        ok: false,\n        error: `Extension artifact checksum mismatch: expected ${expectedIntegrity}, got ${actualIntegrity}`,\n      };\n    }\n    const manifest = peekExtensionManifestFromStoreZip(buf);\n    const accepted = await confirmInstall({\n      source: 'store',\n      packageName: params.packageName,\n      version,\n      integrity: actualIntegrity,\n      manifest,\n      yes: params.yes,\n    });\n    if (!accepted) {\n      return { ok: false, error: 'Install cancelled' };\n    }\n    if (params.force) {\n      const id = peekExtensionIdFromStoreZip(buf);\n      if (id && existsSync(join(params.targetDir, id))) {\n        rmSync(join(params.targetDir, id), { recursive: true, force: true });\n      }\n    }\n    const result = await installExtensionFromStoreZip(buf, params.targetDir);\n    if (!result.ok || !result.extensionId) {\n      return { ok: false, error: result.error ?? 'install failed' };\n    }\n    await params.lock.upsert(result.extensionId, {\n      name: result.extensionId,\n      version,\n      resolved: params.packageName,\n      source: 'store',\n      artifactUrl: downloadUrl,\n      integrity: actualIntegrity,\n      ...readInstalledSnapshots(params.targetDir, result.extensionId),\n    });\n    return { ok: true, extensionId: result.extensionId, version };\n  } catch (e) {\n    const msg = e instanceof Error ? e.message : String(e);\n    return { ok: false, error: msg };\n  }\n}\n\nexport function createExtensionInstallCommand(): Command {\n  return new Command('install')\n    .description(\n      'Install extension from xopc-store (store.xopc.ai), npm, or a local directory into ~/.xopc/extensions',\n    )\n    .argument(\n      '<target>',\n      'Explicit source spec: store:<id>, npm:<package>, or a local extension directory',\n    )\n    .option(\n      '-f, --force',\n      'Remove existing extension folder (manifest id) before store or local install',\n      false,\n    )\n    .option('-y, --yes', 'Skip interactive install confirmation', false)\n    .action(\n      async (\n        target: string,\n        opts: { force: boolean; yes: boolean },\n      ) => {\n        const ctx = getContextWithOpts();\n        const cfg = loadConfig(ctx.configPath);\n        const targetDir = resolveExtensionsDir();\n        const lock = getExtensionLockfileManager();\n\n        let installTarget = target.trim();\n        const storeExplicit = /^store:/i.test(installTarget);\n        const npmExplicit = /^npm:/i.test(installTarget);\n        if (storeExplicit) {\n          installTarget = installTarget.replace(/^store:/i, '').trim();\n        } else if (npmExplicit) {\n          installTarget = installTarget.replace(/^npm:/i, '').trim();\n        }\n        if (!installTarget) {\n          console.error(colors.red('error:'), 'Missing target');\n          process.exit(1);\n        }\n\n        const storeBase = resolveExtensionsStoreBaseUrl(cfg);\n\n        if (storeExplicit) {\n          const { name: pkgName, version: ver } = parseNameAtVersion(installTarget);\n          if (!STORE_NAME_RE.test(pkgName)) {\n            console.error(\n              colors.red('error:'),\n              'Invalid store package name (lowercase letters, digits, hyphen only)',\n            );\n            process.exit(1);\n          }\n          const r = await installExtensionFromStoreWithLock({\n            storeBase,\n            packageName: pkgName,\n            version: ver,\n            targetDir,\n            lock,\n            force: opts.force,\n            yes: opts.yes,\n          });\n          if (r.ok === false) {\n            console.error(colors.red('error:'), r.error);\n            process.exit(1);\n          }\n          console.log(colors.green('✓'), `${r.extensionId}@${r.version} (store)`);\n          return;\n        }\n\n        if (npmExplicit) {\n          const spec = installTarget;\n          console.log(colors.cyan('📦'), `Installing from npm: ${spec}…`);\n          const result = await installFromNpm(spec, targetDir);\n          if (!result.ok) {\n            console.error(colors.red('error:'), result.error ?? 'install failed');\n            process.exit(1);\n          }\n          await upsertNpmExtensionLock(lock, targetDir, result, spec);\n          console.log(colors.green('✓'), result.extensionId ?? 'ok', '(npm)');\n          return;\n        }\n\n        if (looksLikeLocalPath(installTarget)) {\n          const sourceDir = resolve(process.cwd(), installTarget);\n          if (opts.force) {\n            const manifestPath = join(sourceDir, MANIFEST);\n            if (existsSync(manifestPath)) {\n              try {\n                const raw = readFileSync(manifestPath, 'utf-8');\n                const m = JSON.parse(raw) as { id?: string };\n                const extId =\n                  typeof m.id === 'string' &&\n                  m.id &&\n                  !m.id.includes('/') &&\n                  !m.id.includes('\\\\')\n                    ? m.id\n                    : undefined;\n                if (extId && existsSync(join(targetDir, extId))) {\n                  rmSync(join(targetDir, extId), { recursive: true, force: true });\n                }\n              } catch {\n                /* installFromLocal will surface manifest errors */\n              }\n            }\n          }\n          console.log(colors.cyan('📂'), 'Installing from local directory…');\n          const result = await installFromLocal(sourceDir, targetDir);\n          if (!result.ok) {\n            console.error(colors.red('error:'), result.error ?? 'install failed');\n            process.exit(1);\n          }\n          console.log(colors.green('✓'), result.extensionId ?? 'ok');\n          return;\n        }\n\n        console.error(\n          colors.red('error:'),\n          'Extension installs require an explicit source: store:<id>, npm:<package>, or a local directory path.',\n        );\n        process.exit(1);\n      },\n    );\n}\n\nexport function createExtensionSearchCommand(): Command {\n  return new Command('search')\n    .description('Search extensions listed on xopc-store')\n    .argument('[keyword]', 'Search text (omit to list all)', '')\n    .option('--category <cat>', 'Filter by category')\n    .option('--json', 'JSON output')\n    .action(async (keyword: string, opts: { category?: string; json?: boolean }) => {\n      try {\n        let rows;\n        if (opts.category?.trim()) {\n          rows = await marketplace.listExtensions(opts.category.trim());\n          if (keyword.trim()) {\n            const k = keyword.trim().toLowerCase();\n            rows = rows.filter(\n              (e) =>\n                e.id.toLowerCase().includes(k) ||\n                e.name.toLowerCase().includes(k) ||\n                (e.description ?? '').toLowerCase().includes(k),\n            );\n          }\n        } else if (keyword.trim()) {\n          rows = await marketplace.searchExtensions(keyword.trim());\n        } else {\n          const reg = await marketplace.fetchRegistry();\n          rows = reg.extensions;\n        }\n\n        if (opts.json) {\n          console.log(JSON.stringify(rows, null, 2));\n          return;\n        }\n\n        if (rows.length === 0) {\n          console.log('No extensions found.');\n          return;\n        }\n\n        console.log(`xopc-store: ${marketplace.getExtensionMarketplaceStoreBaseUrl()}`);\n        console.log('');\n        for (const e of rows) {\n          const badge = e.verified ? ` ${colors.green('✓')}` : '';\n          console.log(`${colors.cyan(e.name)}${badge} ${colors.gray(e.version ?? '')}`);\n          console.log(`  id: ${e.id}  npm: ${e.npmPackage}`);\n          if (e.description) console.log(`  ${e.description}`);\n          if (e.categories?.length) console.log(`  categories: ${e.categories.join(', ')}`);\n          console.log('');\n        }\n      } catch (err) {\n        console.error(colors.red('Error:'), err instanceof Error ? err.message : String(err));\n        process.exit(1);\n      }\n    });\n}\n\nexport function createExtensionPublishCommand(): Command {\n  return new Command('publish')\n    .description('Publish extension to npm (public)')\n    .argument('[directory]', 'Extension root', '.')\n    .option('--dry-run', 'npm publish --dry-run', false)\n    .option('--access <level>', 'npm access', 'public')\n    .action((dir: string, opts: { dryRun: boolean; access: string }) => {\n      const root = resolve(dir || '.');\n      const manifestPath = join(root, MANIFEST);\n      const pkgPath = join(root, 'package.json');\n      if (!existsSync(manifestPath) || !existsSync(pkgPath)) {\n        console.error(colors.red('error:'), `Need ${MANIFEST} and package.json in ${root}`);\n        process.exit(1);\n      }\n      const validation = validateExtensionPackageDirectory(root);\n      for (const d of validation.diagnostics) {\n        const label = d.level === 'error' ? colors.red('error') : d.level === 'warning' ? colors.yellow('warning') : colors.cyan('info');\n        console.log(`${label}:`, d.message);\n      }\n      if (!validation.ok || !validation.manifest?.id) {\n        console.error(colors.red('error:'), 'Package is not publishable as an independent extension.');\n        process.exit(1);\n      }\n\n      const args = ['publish', `--access=${opts.access}`];\n      if (opts.dryRun) args.push('--dry-run');\n      console.log(colors.cyan('Running:'), `npm ${args.join(' ')}`);\n      try {\n        execSync(`npm ${args.join(' ')}`, { cwd: root, stdio: 'inherit' });\n      } catch {\n        process.exit(1);\n      }\n    });\n}\n\nexport function createExtensionUpdateCommand(): Command {\n  return new Command('update')\n    .description('Re-install extension(s) from the lockfile (npm or xopc-store) under ~/.xopc/extensions')\n    .argument('[extensionId]', 'Specific extension id (default: all in lockfile)')\n    .action(async (extensionId: string | undefined) => {\n      const ctx = getContextWithOpts();\n      const cfg = loadConfig(ctx.configPath);\n      const targetDir = resolveExtensionsDir();\n      const storeBase = resolveExtensionsStoreBaseUrl(cfg);\n\n      const lock = getExtensionLockfileManager();\n      const data = await lock.load();\n      const ids = extensionId?.trim()\n        ? [extensionId.trim()]\n        : Object.keys(data.extensions);\n\n      if (ids.length === 0) {\n        console.log('No extensions in lockfile.');\n        return;\n      }\n\n      for (const id of ids) {\n        const entry = data.extensions[id];\n        if (!entry) {\n          console.log(colors.yellow('skip'), id, '(not in lockfile)');\n          continue;\n        }\n        if (entry.source === 'store') {\n          const pkgName = entry.resolved?.trim() || id;\n          console.log(colors.cyan('Updating'), id, '←', `store:${pkgName}`);\n          if (existsSync(join(targetDir, id))) {\n            rmSync(join(targetDir, id), { recursive: true, force: true });\n          }\n          const r = await installExtensionFromStoreWithLock({\n            storeBase,\n            packageName: pkgName,\n            targetDir,\n            lock,\n            yes: true,\n          });\n          if (r.ok === false) {\n            console.error(colors.red('error:'), r.error ?? id);\n            process.exit(1);\n          }\n          console.log(colors.green('✓'), id);\n          continue;\n        }\n        if (entry.source !== 'npm') {\n          console.log(colors.yellow('skip'), id, `(source ${entry.source})`);\n          continue;\n        }\n        const spec = entry.resolved?.trim() || (await npmPackageForId(id));\n        if (!spec) {\n          console.log(colors.yellow('skip'), id, '(could not resolve npm package)');\n          continue;\n        }\n        console.log(colors.cyan('Updating'), id, '←', spec);\n        if (existsSync(join(targetDir, id))) {\n          rmSync(join(targetDir, id), { recursive: true, force: true });\n        }\n        const result = await installFromNpm(spec, targetDir);\n        if (!result.ok) {\n          console.error(colors.red('error:'), result.error ?? id);\n          process.exit(1);\n        }\n        await lock.upsert(id, {\n          name: id,\n          version: entry.version,\n          resolved: spec,\n          source: 'npm',\n          ...readInstalledSnapshots(targetDir, id),\n        });\n        console.log(colors.green('✓'), id);\n      }\n    });\n}\n\nasync function npmPackageForId(id: string): Promise<string | undefined> {\n  const found = await marketplace.findExtension(id);\n  return found?.npmPackage;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;aAcoD;YACS;AAe7D,MAAM,WAAW;AAEjB,SAAS,eAAe,MAAmD;AACzE,KAAI;EACF,MAAM,MAAM,KAAK,MAAM,aAAa,MAAM,QAAQ,CAAC;AACnD,SAAO,OAAO,QAAQ,YAAY,QAAQ,QAAQ,CAAC,MAAM,QAAQ,IAAI,GAChE,MACD,KAAA;SACE;AACN;;;AAIJ,SAAS,uBAAuB,WAAmB,aAGjD;CACA,MAAM,OAAO,KAAK,WAAW,YAAY;AACzC,QAAO;EACL,UAAU,eAAe,KAAK,MAAM,SAAS,CAAC;EAC9C,aAAa,eAAe,KAAK,MAAM,eAAe,CAAC;EACxD;;AAGH,SAAS,gBAAgB,QAAwB;AAC/C,QAAO,UAAU,WAAW,SAAS,CAAC,OAAO,OAAO,CAAC,OAAO,SAAS;;AAGvE,SAAS,mBAAmB,KAA6C;CACvE,MAAM,QAAQ,KAAK,MAAM;AACzB,KAAI,CAAC,MAAO,QAAO,KAAA;AACnB,KAAI,MAAM,WAAW,UAAU,CAAE,QAAO;AACxC,KAAI,kBAAkB,KAAK,MAAM,CAC/B,QAAO,UAAU,OAAO,KAAK,OAAO,MAAM,CAAC,SAAS,SAAS;AAE/D,QAAO;;AAGT,SAAS,qBAAqB,QAMrB;CACP,MAAM,WAAW,OAAO;AACxB,SAAQ,IAAI,GAAG;AACf,SAAQ,IAAI,OAAO,KAAK,2BAA2B,CAAC;AACpD,SAAQ,IAAI,aAAa,OAAO,SAAS;AACzC,SAAQ,IAAI,cAAc,OAAO,cAAc,OAAO,UAAU,IAAI,OAAO,YAAY,KAAK;AAC5F,KAAI,OAAO,UAAW,SAAQ,IAAI,gBAAgB,OAAO,YAAY;AACrE,KAAI,UAAU;AACZ,UAAQ,IAAI,SAAS,OAAO,SAAS,MAAM,YAAY,GAAG;AAC1D,UAAQ,IAAI,WAAW,OAAO,SAAS,QAAQ,SAAS,MAAM,YAAY,GAAG;EAC7E,MAAM,UAAU,SAAS;AACzB,MAAI,SAAS,KAAM,SAAQ,IAAI,mBAAmB,OAAO,QAAQ,KAAK,GAAG;EACzE,MAAM,cAAc,SAAS;AAC7B,MAAI,aAAa;AACf,WAAQ,IAAI,iBAAiB;AAC7B,QAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,YAAY,CACpD,SAAQ,IAAI,OAAO,IAAI,IAAI,MAAM,QAAQ,MAAM,GAAG,MAAM,KAAK,KAAK,GAAG,OAAO,MAAM,GAAG;;EAGzF,MAAM,YAAY,SAAS;AAC3B,MAAI,WAAW;AACb,WAAQ,IAAI,eAAe;AAC3B,QAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,UAAU,CAClD,KAAI,MAAM,QAAQ,MAAM,IAAI,MAAM,SAAS,EAAG,SAAQ,IAAI,OAAO,IAAI,IAAI,MAAM,KAAK,KAAK,GAAG;;;AAIlG,SAAQ,IAAI,GAAG;;AAGjB,eAAe,eAAe,QAA0F;AACtH,sBAAqB,OAAO;AAC5B,KAAI,OAAO,OAAO,CAAC,QAAQ,MAAM,MAAO,QAAO;AAC/C,QAAO,MAAM,QAAQ;EAAE,SAAS;EAA2B,SAAS;EAAO,CAAC;;AAG9E,SAAS,mBAAmB,KAAiD;CAC3E,MAAM,IAAI,IAAI,MAAM;CACpB,MAAM,KAAK,EAAE,YAAY,IAAI;AAC7B,KAAI,MAAM,KAAK,OAAO,EAAE,SAAS,EAAG,QAAO,EAAE,MAAM,GAAG;CACtD,MAAM,WAAW,EAAE,MAAM,KAAK,EAAE;CAChC,MAAM,IAAI,OAAO,MAAM,SAAS;AAChC,KAAI,EAAG,QAAO;EAAE,MAAM,EAAE,MAAM,GAAG,GAAG;EAAE,SAAS;EAAG;AAClD,QAAO,EAAE,MAAM,GAAG;;AAGpB,SAAS,mBAAmB,KAAsB;CAChD,MAAM,IAAI,IAAI,MAAM;AACpB,KAAI,EAAE,WAAW,KAAK,IAAI,EAAE,WAAW,MAAM,CAAE,QAAO;AACtD,KAAI,MAAM,OAAO,MAAM,KAAM,QAAO;AACpC,KAAI;EACF,MAAM,MAAM,QAAQ,QAAQ,KAAK,EAAE,EAAE;AACrC,SAAO,WAAW,IAAI,IAAI,SAAS,IAAI,CAAC,aAAa;SAC/C;AACN,SAAO;;;;AAKX,MAAM,gBAAgB;AAEtB,eAAe,uBACb,MACA,WACA,QACA,MACe;AACf,KAAI,CAAC,OAAO,YAAa;CACzB,MAAM,MAAM,MAAMA,cAA0B,OAAO,YAAY;CAC/D,MAAM,WAAW,KAAK,cAAc;CACpC,IAAI,MAAM,KAAK,WAAW;AAC1B,KAAI;EACF,MAAM,MAAM,aAAa,KAAK,WAAW,OAAO,aAAa,SAAS,EAAE,QAAQ;EAChF,MAAM,IAAI,KAAK,MAAM,IAAI;EACzB,MAAM,KAAK,OAAO,EAAE,YAAY,WAAW,OAAO,MAAM,EAAE,QAAQ,GAAG;AACrE,MAAI,GAAI,OAAM;SACR;AAGR,OAAM,KAAK,OAAO,OAAO,aAAa;EACpC,MAAM,OAAO;EACb,SAAS;EACT;EACA,QAAQ;EACR,GAAG,uBAAuB,WAAW,OAAO,YAAY;EACzD,CAAC;;AAGJ,eAAe,kCAAkC,QAQ8C;AAC7F,KAAI;EACF,MAAM,EAAE,aAAa,SAAS,WAAW,yBAAyB,MAAM,+BACtE,OAAO,WACP,OAAO,aACP,OAAO,QACR;AACD,UAAQ,IACN,OAAO,KAAK,KAAK,EACjB,eAAe,OAAO,YAAY,GAAG,QAAQ,oBAAoB,OAAO,UAAU,IACnF;EACD,MAAM,MAAM,MAAM,gCAAgC,OAAO,WAAW,YAAY;EAChF,MAAM,kBAAkB,gBAAgB,IAAI;EAC5C,MAAM,oBAAoB,mBAAmB,qBAAqB;AAClE,MAAI,qBAAqB,sBAAsB,gBAC7C,QAAO;GACL,IAAI;GACJ,OAAO,kDAAkD,kBAAkB,QAAQ;GACpF;EAEH,MAAM,WAAW,kCAAkC,IAAI;AASvD,MAAI,CAAC,MARkB,eAAe;GACpC,QAAQ;GACR,aAAa,OAAO;GACpB;GACA,WAAW;GACX;GACA,KAAK,OAAO;GACb,CAAC,CAEA,QAAO;GAAE,IAAI;GAAO,OAAO;GAAqB;AAElD,MAAI,OAAO,OAAO;GAChB,MAAM,KAAK,4BAA4B,IAAI;AAC3C,OAAI,MAAM,WAAW,KAAK,OAAO,WAAW,GAAG,CAAC,CAC9C,QAAO,KAAK,OAAO,WAAW,GAAG,EAAE;IAAE,WAAW;IAAM,OAAO;IAAM,CAAC;;EAGxE,MAAM,SAAS,MAAM,6BAA6B,KAAK,OAAO,UAAU;AACxE,MAAI,CAAC,OAAO,MAAM,CAAC,OAAO,YACxB,QAAO;GAAE,IAAI;GAAO,OAAO,OAAO,SAAS;GAAkB;AAE/D,QAAM,OAAO,KAAK,OAAO,OAAO,aAAa;GAC3C,MAAM,OAAO;GACb;GACA,UAAU,OAAO;GACjB,QAAQ;GACR,aAAa;GACb,WAAW;GACX,GAAG,uBAAuB,OAAO,WAAW,OAAO,YAAY;GAChE,CAAC;AACF,SAAO;GAAE,IAAI;GAAM,aAAa,OAAO;GAAa;GAAS;UACtD,GAAG;AAEV,SAAO;GAAE,IAAI;GAAO,OADR,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;GACtB;;;AAIpC,SAAgB,gCAAyC;AACvD,QAAO,IAAI,QAAQ,UAAU,CAC1B,YACC,uGACD,CACA,SACC,YACA,kFACD,CACA,OACC,eACA,gFACA,MACD,CACA,OAAO,aAAa,yCAAyC,MAAM,CACnE,OACC,OACE,QACA,SACG;EAEH,MAAM,MAAM,WADA,oBACc,CAAC,WAAW;EACtC,MAAM,YAAY,sBAAsB;EACxC,MAAM,OAAO,6BAA6B;EAE1C,IAAI,gBAAgB,OAAO,MAAM;EACjC,MAAM,gBAAgB,WAAW,KAAK,cAAc;EACpD,MAAM,cAAc,SAAS,KAAK,cAAc;AAChD,MAAI,cACF,iBAAgB,cAAc,QAAQ,YAAY,GAAG,CAAC,MAAM;WACnD,YACT,iBAAgB,cAAc,QAAQ,UAAU,GAAG,CAAC,MAAM;AAE5D,MAAI,CAAC,eAAe;AAClB,WAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,iBAAiB;AACrD,WAAQ,KAAK,EAAE;;EAGjB,MAAM,YAAY,8BAA8B,IAAI;AAEpD,MAAI,eAAe;GACjB,MAAM,EAAE,MAAM,SAAS,SAAS,QAAQ,mBAAmB,cAAc;AACzE,OAAI,CAAC,cAAc,KAAK,QAAQ,EAAE;AAChC,YAAQ,MACN,OAAO,IAAI,SAAS,EACpB,sEACD;AACD,YAAQ,KAAK,EAAE;;GAEjB,MAAM,IAAI,MAAM,kCAAkC;IAChD;IACA,aAAa;IACb,SAAS;IACT;IACA;IACA,OAAO,KAAK;IACZ,KAAK,KAAK;IACX,CAAC;AACF,OAAI,EAAE,OAAO,OAAO;AAClB,YAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,EAAE,MAAM;AAC5C,YAAQ,KAAK,EAAE;;AAEjB,WAAQ,IAAI,OAAO,MAAM,IAAI,EAAE,GAAG,EAAE,YAAY,GAAG,EAAE,QAAQ,UAAU;AACvE;;AAGF,MAAI,aAAa;GACf,MAAM,OAAO;AACb,WAAQ,IAAI,OAAO,KAAK,KAAK,EAAE,wBAAwB,KAAK,GAAG;GAC/D,MAAM,SAAS,MAAM,eAAe,MAAM,UAAU;AACpD,OAAI,CAAC,OAAO,IAAI;AACd,YAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,OAAO,SAAS,iBAAiB;AACrE,YAAQ,KAAK,EAAE;;AAEjB,SAAM,uBAAuB,MAAM,WAAW,QAAQ,KAAK;AAC3D,WAAQ,IAAI,OAAO,MAAM,IAAI,EAAE,OAAO,eAAe,MAAM,QAAQ;AACnE;;AAGF,MAAI,mBAAmB,cAAc,EAAE;GACrC,MAAM,YAAY,QAAQ,QAAQ,KAAK,EAAE,cAAc;AACvD,OAAI,KAAK,OAAO;IACd,MAAM,eAAe,KAAK,WAAW,SAAS;AAC9C,QAAI,WAAW,aAAa,CAC1B,KAAI;KACF,MAAM,MAAM,aAAa,cAAc,QAAQ;KAC/C,MAAM,IAAI,KAAK,MAAM,IAAI;KACzB,MAAM,QACJ,OAAO,EAAE,OAAO,YAChB,EAAE,MACF,CAAC,EAAE,GAAG,SAAS,IAAI,IACnB,CAAC,EAAE,GAAG,SAAS,KAAK,GAChB,EAAE,KACF,KAAA;AACN,SAAI,SAAS,WAAW,KAAK,WAAW,MAAM,CAAC,CAC7C,QAAO,KAAK,WAAW,MAAM,EAAE;MAAE,WAAW;MAAM,OAAO;MAAM,CAAC;YAE5D;;AAKZ,WAAQ,IAAI,OAAO,KAAK,KAAK,EAAE,mCAAmC;GAClE,MAAM,SAAS,MAAM,iBAAiB,WAAW,UAAU;AAC3D,OAAI,CAAC,OAAO,IAAI;AACd,YAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,OAAO,SAAS,iBAAiB;AACrE,YAAQ,KAAK,EAAE;;AAEjB,WAAQ,IAAI,OAAO,MAAM,IAAI,EAAE,OAAO,eAAe,KAAK;AAC1D;;AAGF,UAAQ,MACN,OAAO,IAAI,SAAS,EACpB,uGACD;AACD,UAAQ,KAAK,EAAE;GAElB;;AAGL,SAAgB,+BAAwC;AACtD,QAAO,IAAI,QAAQ,SAAS,CACzB,YAAY,yCAAyC,CACrD,SAAS,aAAa,kCAAkC,GAAG,CAC3D,OAAO,oBAAoB,qBAAqB,CAChD,OAAO,UAAU,cAAc,CAC/B,OAAO,OAAO,SAAiB,SAAgD;AAC9E,MAAI;GACF,IAAI;AACJ,OAAI,KAAK,UAAU,MAAM,EAAE;AACzB,WAAO,MAAMC,eAA2B,KAAK,SAAS,MAAM,CAAC;AAC7D,QAAI,QAAQ,MAAM,EAAE;KAClB,MAAM,IAAI,QAAQ,MAAM,CAAC,aAAa;AACtC,YAAO,KAAK,QACT,MACC,EAAE,GAAG,aAAa,CAAC,SAAS,EAAE,IAC9B,EAAE,KAAK,aAAa,CAAC,SAAS,EAAE,KAC/B,EAAE,eAAe,IAAI,aAAa,CAAC,SAAS,EAAE,CAClD;;cAEM,QAAQ,MAAM,CACvB,QAAO,MAAMC,iBAA6B,QAAQ,MAAM,CAAC;OAGzD,SAAO,MADWC,eAA2B,EAClC;AAGb,OAAI,KAAK,MAAM;AACb,YAAQ,IAAI,KAAK,UAAU,MAAM,MAAM,EAAE,CAAC;AAC1C;;AAGF,OAAI,KAAK,WAAW,GAAG;AACrB,YAAQ,IAAI,uBAAuB;AACnC;;AAGF,WAAQ,IAAI,eAAeC,qCAAiD,GAAG;AAC/E,WAAQ,IAAI,GAAG;AACf,QAAK,MAAM,KAAK,MAAM;IACpB,MAAM,QAAQ,EAAE,WAAW,IAAI,OAAO,MAAM,IAAI,KAAK;AACrD,YAAQ,IAAI,GAAG,OAAO,KAAK,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,KAAK,EAAE,WAAW,GAAG,GAAG;AAC7E,YAAQ,IAAI,SAAS,EAAE,GAAG,SAAS,EAAE,aAAa;AAClD,QAAI,EAAE,YAAa,SAAQ,IAAI,KAAK,EAAE,cAAc;AACpD,QAAI,EAAE,YAAY,OAAQ,SAAQ,IAAI,iBAAiB,EAAE,WAAW,KAAK,KAAK,GAAG;AACjF,YAAQ,IAAI,GAAG;;WAEV,KAAK;AACZ,WAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,CAAC;AACrF,WAAQ,KAAK,EAAE;;GAEjB;;AAGN,SAAgB,gCAAyC;AACvD,QAAO,IAAI,QAAQ,UAAU,CAC1B,YAAY,oCAAoC,CAChD,SAAS,eAAe,kBAAkB,IAAI,CAC9C,OAAO,aAAa,yBAAyB,MAAM,CACnD,OAAO,oBAAoB,cAAc,SAAS,CAClD,QAAQ,KAAa,SAA8C;EAClE,MAAM,OAAO,QAAQ,OAAO,IAAI;EAChC,MAAM,eAAe,KAAK,MAAM,SAAS;EACzC,MAAM,UAAU,KAAK,MAAM,eAAe;AAC1C,MAAI,CAAC,WAAW,aAAa,IAAI,CAAC,WAAW,QAAQ,EAAE;AACrD,WAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,QAAQ,SAAS,uBAAuB,OAAO;AACnF,WAAQ,KAAK,EAAE;;EAEjB,MAAM,aAAa,kCAAkC,KAAK;AAC1D,OAAK,MAAM,KAAK,WAAW,aAAa;GACtC,MAAM,QAAQ,EAAE,UAAU,UAAU,OAAO,IAAI,QAAQ,GAAG,EAAE,UAAU,YAAY,OAAO,OAAO,UAAU,GAAG,OAAO,KAAK,OAAO;AAChI,WAAQ,IAAI,GAAG,MAAM,IAAI,EAAE,QAAQ;;AAErC,MAAI,CAAC,WAAW,MAAM,CAAC,WAAW,UAAU,IAAI;AAC9C,WAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,0DAA0D;AAC9F,WAAQ,KAAK,EAAE;;EAGjB,MAAM,OAAO,CAAC,WAAW,YAAY,KAAK,SAAS;AACnD,MAAI,KAAK,OAAQ,MAAK,KAAK,YAAY;AACvC,UAAQ,IAAI,OAAO,KAAK,WAAW,EAAE,OAAO,KAAK,KAAK,IAAI,GAAG;AAC7D,MAAI;AACF,YAAS,OAAO,KAAK,KAAK,IAAI,IAAI;IAAE,KAAK;IAAM,OAAO;IAAW,CAAC;UAC5D;AACN,WAAQ,KAAK,EAAE;;GAEjB;;AAGN,SAAgB,+BAAwC;AACtD,QAAO,IAAI,QAAQ,SAAS,CACzB,YAAY,yFAAyF,CACrG,SAAS,iBAAiB,mDAAmD,CAC7E,OAAO,OAAO,gBAAoC;EAEjD,MAAM,MAAM,WADA,oBACc,CAAC,WAAW;EACtC,MAAM,YAAY,sBAAsB;EACxC,MAAM,YAAY,8BAA8B,IAAI;EAEpD,MAAM,OAAO,6BAA6B;EAC1C,MAAM,OAAO,MAAM,KAAK,MAAM;EAC9B,MAAM,MAAM,aAAa,MAAM,GAC3B,CAAC,YAAY,MAAM,CAAC,GACpB,OAAO,KAAK,KAAK,WAAW;AAEhC,MAAI,IAAI,WAAW,GAAG;AACpB,WAAQ,IAAI,6BAA6B;AACzC;;AAGF,OAAK,MAAM,MAAM,KAAK;GACpB,MAAM,QAAQ,KAAK,WAAW;AAC9B,OAAI,CAAC,OAAO;AACV,YAAQ,IAAI,OAAO,OAAO,OAAO,EAAE,IAAI,oBAAoB;AAC3D;;AAEF,OAAI,MAAM,WAAW,SAAS;IAC5B,MAAM,UAAU,MAAM,UAAU,MAAM,IAAI;AAC1C,YAAQ,IAAI,OAAO,KAAK,WAAW,EAAE,IAAI,KAAK,SAAS,UAAU;AACjE,QAAI,WAAW,KAAK,WAAW,GAAG,CAAC,CACjC,QAAO,KAAK,WAAW,GAAG,EAAE;KAAE,WAAW;KAAM,OAAO;KAAM,CAAC;IAE/D,MAAM,IAAI,MAAM,kCAAkC;KAChD;KACA,aAAa;KACb;KACA;KACA,KAAK;KACN,CAAC;AACF,QAAI,EAAE,OAAO,OAAO;AAClB,aAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,EAAE,SAAS,GAAG;AAClD,aAAQ,KAAK,EAAE;;AAEjB,YAAQ,IAAI,OAAO,MAAM,IAAI,EAAE,GAAG;AAClC;;AAEF,OAAI,MAAM,WAAW,OAAO;AAC1B,YAAQ,IAAI,OAAO,OAAO,OAAO,EAAE,IAAI,WAAW,MAAM,OAAO,GAAG;AAClE;;GAEF,MAAM,OAAO,MAAM,UAAU,MAAM,IAAK,MAAM,gBAAgB,GAAG;AACjE,OAAI,CAAC,MAAM;AACT,YAAQ,IAAI,OAAO,OAAO,OAAO,EAAE,IAAI,kCAAkC;AACzE;;AAEF,WAAQ,IAAI,OAAO,KAAK,WAAW,EAAE,IAAI,KAAK,KAAK;AACnD,OAAI,WAAW,KAAK,WAAW,GAAG,CAAC,CACjC,QAAO,KAAK,WAAW,GAAG,EAAE;IAAE,WAAW;IAAM,OAAO;IAAM,CAAC;GAE/D,MAAM,SAAS,MAAM,eAAe,MAAM,UAAU;AACpD,OAAI,CAAC,OAAO,IAAI;AACd,YAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,OAAO,SAAS,GAAG;AACvD,YAAQ,KAAK,EAAE;;AAEjB,SAAM,KAAK,OAAO,IAAI;IACpB,MAAM;IACN,SAAS,MAAM;IACf,UAAU;IACV,QAAQ;IACR,GAAG,uBAAuB,WAAW,GAAG;IACzC,CAAC;AACF,WAAQ,IAAI,OAAO,MAAM,IAAI,EAAE,GAAG;;GAEpC;;AAGN,eAAe,gBAAgB,IAAyC;AAEtE,SAAO,MADaJ,cAA0B,GAAG,GACnC"}
+{"version":3,"file":"extension-marketplace.js","names":["marketplace.findExtension","marketplace.listExtensions","marketplace.searchExtensions","marketplace.fetchRegistry","marketplace.getExtensionMarketplaceStoreBaseUrl"],"sources":["../../../../src/cli/commands/extension-marketplace.ts"],"sourcesContent":["import { createHash } from 'node:crypto';\nimport { execSync } from 'node:child_process';\nimport { existsSync, readFileSync, statSync, rmSync } from 'node:fs';\nimport { join, resolve } from 'node:path';\n\nimport { confirm } from '@inquirer/prompts';\nimport { Command } from 'commander';\nimport semver from 'semver';\n\nimport {\n  downloadExtensionStoreZipBuffer,\n  resolveExtensionZipDownloadUrl,\n  resolveExtensionsStoreBaseUrl,\n  verifyStoreArtifactSha256,\n} from '../../agent/skills/marketplace/adapters/store/store-api-client.js';\nimport { loadConfig } from '../../config/loader.js';\nimport { resolveExtensionsDir } from '../../config/paths.js';\nimport type { InstallResult } from '../../extensions/install.js';\nimport {\n  installFromLocal,\n  installFromNpm,\n  peekExtensionManifestFromStoreZip,\n} from '../../extensions/install.js';\nimport {\n  commitStagedExtensionInstall,\n  finalizeStagedExtensionInstall,\n  rollbackStagedExtensionInstall,\n  stageExtensionStoreZip,\n} from '../../extensions/install-transaction.js';\nimport { getExtensionLockfileManager } from '../../extensions/lockfile.js';\nimport * as marketplace from '../../extensions/marketplace.js';\nimport { colors } from '../utils/colors.js';\nimport { getContextWithOpts } from '../context.js';\nimport { validateExtensionPackageDirectory } from './extension-pack.js';\n\nconst MANIFEST = 'xopc.extension.json';\n\nfunction readJsonObject(path: string): Record<string, unknown> | undefined {\n  try {\n    const raw = JSON.parse(readFileSync(path, 'utf-8')) as unknown;\n    return typeof raw === 'object' && raw !== null && !Array.isArray(raw)\n      ? (raw as Record<string, unknown>)\n      : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nfunction readInstalledSnapshots(targetDir: string, extensionId: string): {\n  manifest?: Record<string, unknown>;\n  packageJson?: Record<string, unknown>;\n} {\n  const root = join(targetDir, extensionId);\n  return {\n    manifest: readJsonObject(join(root, MANIFEST)),\n    packageJson: readJsonObject(join(root, 'package.json')),\n  };\n}\n\nfunction sha256Integrity(buffer: Buffer): string {\n  return `sha256-${createHash('sha256').update(buffer).digest('base64')}`;\n}\n\nfunction printManifestSummary(params: {\n  source: 'store' | 'npm' | 'local';\n  packageName: string;\n  version?: string;\n  integrity?: string;\n  manifest?: Record<string, unknown>;\n}): void {\n  const manifest = params.manifest;\n  console.log('');\n  console.log(colors.cyan('Extension install review'));\n  console.log(`  Source: ${params.source}`);\n  console.log(`  Package: ${params.packageName}${params.version ? `@${params.version}` : ''}`);\n  if (params.integrity) console.log(`  Integrity: ${params.integrity}`);\n  if (manifest) {\n    console.log(`  ID: ${String(manifest.id ?? '(unknown)')}`);\n    console.log(`  Name: ${String(manifest.name ?? manifest.id ?? '(unknown)')}`);\n    const engines = manifest.engines as Record<string, unknown> | undefined;\n    if (engines?.xopc) console.log(`  engines.xopc: ${String(engines.xopc)}`);\n    const permissions = manifest.permissions as Record<string, unknown> | undefined;\n    if (permissions) {\n      console.log('  Permissions:');\n      for (const [key, value] of Object.entries(permissions)) {\n        console.log(`    ${key}: ${Array.isArray(value) ? value.join(', ') : String(value)}`);\n      }\n    }\n    const contracts = manifest.contracts as Record<string, unknown> | undefined;\n    if (contracts) {\n      console.log('  Contracts:');\n      for (const [key, value] of Object.entries(contracts)) {\n        if (Array.isArray(value) && value.length > 0) console.log(`    ${key}: ${value.join(', ')}`);\n      }\n    }\n  }\n  console.log('');\n}\n\nasync function confirmInstall(params: Parameters<typeof printManifestSummary>[0] & { yes?: boolean }): Promise<boolean> {\n  printManifestSummary(params);\n  if (params.yes || !process.stdin.isTTY) return true;\n  return await confirm({ message: 'Install this extension?', default: false });\n}\n\nfunction parseNameAtVersion(raw: string): { name: string; version?: string } {\n  const t = raw.trim();\n  const at = t.lastIndexOf('@');\n  if (at <= 0 || at === t.length - 1) return { name: t };\n  const maybeVer = t.slice(at + 1);\n  const v = semver.valid(maybeVer);\n  if (v) return { name: t.slice(0, at), version: v };\n  return { name: t };\n}\n\nfunction looksLikeLocalPath(raw: string): boolean {\n  const p = raw.trim();\n  if (p.startsWith('./') || p.startsWith('../')) return true;\n  if (p === '.' || p === '..') return true;\n  try {\n    const abs = resolve(process.cwd(), p);\n    return existsSync(abs) && statSync(abs).isDirectory();\n  } catch {\n    return false;\n  }\n}\n\n/** xopc-store package names: lowercase letters, digits, hyphen (see xopc-store scan). */\nconst STORE_NAME_RE = /^[a-z0-9-]{1,64}$/;\n\nasync function upsertNpmExtensionLock(\n  lock: ReturnType<typeof getExtensionLockfileManager>,\n  targetDir: string,\n  result: InstallResult,\n  spec: string,\n): Promise<void> {\n  if (!result.extensionId) return;\n  const reg = await marketplace.findExtension(result.extensionId);\n  const resolved = reg?.npmPackage ?? spec;\n  let ver = reg?.version ?? '0.0.0';\n  try {\n    const raw = readFileSync(join(targetDir, result.extensionId, MANIFEST), 'utf-8');\n    const m = JSON.parse(raw) as { version?: string };\n    const mv = typeof m.version === 'string' ? semver.valid(m.version) : null;\n    if (mv) ver = mv;\n  } catch {\n    /* keep registry / fallback version */\n  }\n  await lock.upsert(result.extensionId, {\n    name: result.extensionId,\n    version: ver,\n    resolved,\n    source: 'npm',\n    ...readInstalledSnapshots(targetDir, result.extensionId),\n  });\n}\n\nasync function installExtensionFromStoreWithLock(params: {\n  storeBase: string;\n  packageName: string;\n  version?: string;\n  targetDir: string;\n  lock: ReturnType<typeof getExtensionLockfileManager>;\n  force?: boolean;\n  yes?: boolean;\n}): Promise<{ ok: true; extensionId: string; version: string } | { ok: false; error: string }> {\n  try {\n    const { downloadUrl, version, sha256 } = await resolveExtensionZipDownloadUrl(\n      params.storeBase,\n      params.packageName,\n      params.version,\n    );\n    console.log(\n      colors.cyan('📦'),\n      `Downloading ${params.packageName}@${version} from xopc-store (${params.storeBase})…`,\n    );\n    const buf = await downloadExtensionStoreZipBuffer(params.storeBase, downloadUrl);\n    verifyStoreArtifactSha256(buf, sha256);\n    const actualIntegrity = sha256Integrity(buf);\n    const manifest = peekExtensionManifestFromStoreZip(buf);\n    const accepted = await confirmInstall({\n      source: 'store',\n      packageName: params.packageName,\n      version,\n      integrity: actualIntegrity,\n      manifest,\n      yes: params.yes,\n    });\n    if (!accepted) {\n      return { ok: false, error: 'Install cancelled' };\n    }\n\n    const transaction = await stageExtensionStoreZip(buf, params.targetDir);\n    const lockSnapshot = await params.lock.load();\n    let lockWriteStarted = false;\n    try {\n      commitStagedExtensionInstall(transaction, params.force ?? false);\n      lockWriteStarted = true;\n      await params.lock.upsert(transaction.extensionId, {\n        name: transaction.extensionId,\n        version,\n        resolved: params.packageName,\n        source: 'store',\n        artifactUrl: downloadUrl,\n        integrity: actualIntegrity,\n        ...readInstalledSnapshots(params.targetDir, transaction.extensionId),\n      });\n    } catch (err) {\n      const rollbackErrors: string[] = [];\n      try {\n        rollbackStagedExtensionInstall(transaction);\n      } catch (rollbackErr) {\n        rollbackErrors.push(`files: ${rollbackErr instanceof Error ? rollbackErr.message : String(rollbackErr)}`);\n      }\n      if (lockWriteStarted) {\n        try {\n          await params.lock.save(lockSnapshot);\n        } catch (rollbackErr) {\n          rollbackErrors.push(`lockfile: ${rollbackErr instanceof Error ? rollbackErr.message : String(rollbackErr)}`);\n        }\n      }\n      const message = err instanceof Error ? err.message : String(err);\n      const suffix = rollbackErrors.length > 0\n        ? ` Rollback incomplete (${rollbackErrors.join('; ')}).`\n        : '';\n      throw new Error(`${message}${suffix}`, { cause: err });\n    }\n\n    try {\n      finalizeStagedExtensionInstall(transaction);\n    } catch (cleanupErr) {\n      const message = cleanupErr instanceof Error ? cleanupErr.message : String(cleanupErr);\n      console.warn(colors.yellow('warning:'), `Installed extension, but temporary backup cleanup failed: ${message}`);\n    }\n    return { ok: true, extensionId: transaction.extensionId, version };\n  } catch (e) {\n    const msg = e instanceof Error ? e.message : String(e);\n    return { ok: false, error: msg };\n  }\n}\n\nexport function createExtensionInstallCommand(): Command {\n  return new Command('install')\n    .description(\n      'Install extension from xopc-store (store.xopc.ai), npm, or a local directory into ~/.xopc/extensions',\n    )\n    .argument(\n      '<target>',\n      'Explicit source spec: store:<id>, npm:<package>, or a local extension directory',\n    )\n    .option(\n      '-f, --force',\n      'Replace an existing store or local extension with the same manifest id',\n      false,\n    )\n    .option('-y, --yes', 'Skip interactive install confirmation', false)\n    .action(\n      async (\n        target: string,\n        opts: { force: boolean; yes: boolean },\n      ) => {\n        const ctx = getContextWithOpts();\n        const cfg = loadConfig(ctx.configPath);\n        const targetDir = resolveExtensionsDir();\n        const lock = getExtensionLockfileManager();\n\n        let installTarget = target.trim();\n        const storeExplicit = /^store:/i.test(installTarget);\n        const npmExplicit = /^npm:/i.test(installTarget);\n        if (storeExplicit) {\n          installTarget = installTarget.replace(/^store:/i, '').trim();\n        } else if (npmExplicit) {\n          installTarget = installTarget.replace(/^npm:/i, '').trim();\n        }\n        if (!installTarget) {\n          console.error(colors.red('error:'), 'Missing target');\n          process.exit(1);\n        }\n\n        const storeBase = resolveExtensionsStoreBaseUrl(cfg);\n\n        if (storeExplicit) {\n          const { name: pkgName, version: ver } = parseNameAtVersion(installTarget);\n          if (!STORE_NAME_RE.test(pkgName)) {\n            console.error(\n              colors.red('error:'),\n              'Invalid store package name (lowercase letters, digits, hyphen only)',\n            );\n            process.exit(1);\n          }\n          const r = await installExtensionFromStoreWithLock({\n            storeBase,\n            packageName: pkgName,\n            version: ver,\n            targetDir,\n            lock,\n            force: opts.force,\n            yes: opts.yes,\n          });\n          if (r.ok === false) {\n            console.error(colors.red('error:'), r.error);\n            process.exit(1);\n          }\n          console.log(colors.green('✓'), `${r.extensionId}@${r.version} (store)`);\n          return;\n        }\n\n        if (npmExplicit) {\n          const spec = installTarget;\n          console.log(colors.cyan('📦'), `Installing from npm: ${spec}…`);\n          const result = await installFromNpm(spec, targetDir);\n          if (!result.ok) {\n            console.error(colors.red('error:'), result.error ?? 'install failed');\n            process.exit(1);\n          }\n          await upsertNpmExtensionLock(lock, targetDir, result, spec);\n          console.log(colors.green('✓'), result.extensionId ?? 'ok', '(npm)');\n          return;\n        }\n\n        if (looksLikeLocalPath(installTarget)) {\n          const sourceDir = resolve(process.cwd(), installTarget);\n          if (opts.force) {\n            const manifestPath = join(sourceDir, MANIFEST);\n            if (existsSync(manifestPath)) {\n              try {\n                const raw = readFileSync(manifestPath, 'utf-8');\n                const m = JSON.parse(raw) as { id?: string };\n                const extId =\n                  typeof m.id === 'string' &&\n                  m.id &&\n                  !m.id.includes('/') &&\n                  !m.id.includes('\\\\')\n                    ? m.id\n                    : undefined;\n                if (extId && existsSync(join(targetDir, extId))) {\n                  rmSync(join(targetDir, extId), { recursive: true, force: true });\n                }\n              } catch {\n                /* installFromLocal will surface manifest errors */\n              }\n            }\n          }\n          console.log(colors.cyan('📂'), 'Installing from local directory…');\n          const result = await installFromLocal(sourceDir, targetDir);\n          if (!result.ok) {\n            console.error(colors.red('error:'), result.error ?? 'install failed');\n            process.exit(1);\n          }\n          console.log(colors.green('✓'), result.extensionId ?? 'ok');\n          return;\n        }\n\n        console.error(\n          colors.red('error:'),\n          'Extension installs require an explicit source: store:<id>, npm:<package>, or a local directory path.',\n        );\n        process.exit(1);\n      },\n    );\n}\n\nexport function createExtensionSearchCommand(): Command {\n  return new Command('search')\n    .description('Search extensions listed on xopc-store')\n    .argument('[keyword]', 'Search text (omit to list all)', '')\n    .option('--category <cat>', 'Filter by category')\n    .option('--json', 'JSON output')\n    .action(async (keyword: string, opts: { category?: string; json?: boolean }) => {\n      try {\n        let rows;\n        if (opts.category?.trim()) {\n          rows = await marketplace.listExtensions(opts.category.trim());\n          if (keyword.trim()) {\n            const k = keyword.trim().toLowerCase();\n            rows = rows.filter(\n              (e) =>\n                e.id.toLowerCase().includes(k) ||\n                e.name.toLowerCase().includes(k) ||\n                (e.description ?? '').toLowerCase().includes(k),\n            );\n          }\n        } else if (keyword.trim()) {\n          rows = await marketplace.searchExtensions(keyword.trim());\n        } else {\n          const reg = await marketplace.fetchRegistry();\n          rows = reg.extensions;\n        }\n\n        if (opts.json) {\n          console.log(JSON.stringify(rows, null, 2));\n          return;\n        }\n\n        if (rows.length === 0) {\n          console.log('No extensions found.');\n          return;\n        }\n\n        console.log(`xopc-store: ${marketplace.getExtensionMarketplaceStoreBaseUrl()}`);\n        console.log('');\n        for (const e of rows) {\n          const badge = e.verified ? ` ${colors.green('✓')}` : '';\n          console.log(`${colors.cyan(e.name)}${badge} ${colors.gray(e.version ?? '')}`);\n          console.log(`  id: ${e.id}  npm: ${e.npmPackage}`);\n          if (e.description) console.log(`  ${e.description}`);\n          if (e.categories?.length) console.log(`  categories: ${e.categories.join(', ')}`);\n          console.log('');\n        }\n      } catch (err) {\n        console.error(colors.red('Error:'), err instanceof Error ? err.message : String(err));\n        process.exit(1);\n      }\n    });\n}\n\nexport function createExtensionPublishCommand(): Command {\n  return new Command('publish')\n    .description('Publish extension to npm (public)')\n    .argument('[directory]', 'Extension root', '.')\n    .option('--dry-run', 'npm publish --dry-run', false)\n    .option('--access <level>', 'npm access', 'public')\n    .action((dir: string, opts: { dryRun: boolean; access: string }) => {\n      const root = resolve(dir || '.');\n      const manifestPath = join(root, MANIFEST);\n      const pkgPath = join(root, 'package.json');\n      if (!existsSync(manifestPath) || !existsSync(pkgPath)) {\n        console.error(colors.red('error:'), `Need ${MANIFEST} and package.json in ${root}`);\n        process.exit(1);\n      }\n      const validation = validateExtensionPackageDirectory(root);\n      for (const d of validation.diagnostics) {\n        const label = d.level === 'error' ? colors.red('error') : d.level === 'warning' ? colors.yellow('warning') : colors.cyan('info');\n        console.log(`${label}:`, d.message);\n      }\n      if (!validation.ok || !validation.manifest?.id) {\n        console.error(colors.red('error:'), 'Package is not publishable as an independent extension.');\n        process.exit(1);\n      }\n\n      const args = ['publish', `--access=${opts.access}`];\n      if (opts.dryRun) args.push('--dry-run');\n      console.log(colors.cyan('Running:'), `npm ${args.join(' ')}`);\n      try {\n        execSync(`npm ${args.join(' ')}`, { cwd: root, stdio: 'inherit' });\n      } catch {\n        process.exit(1);\n      }\n    });\n}\n\nexport function createExtensionUpdateCommand(): Command {\n  return new Command('update')\n    .description('Re-install extension(s) from the lockfile (npm or xopc-store) under ~/.xopc/extensions')\n    .argument('[extensionId]', 'Specific extension id (default: all in lockfile)')\n    .action(async (extensionId: string | undefined) => {\n      const ctx = getContextWithOpts();\n      const cfg = loadConfig(ctx.configPath);\n      const targetDir = resolveExtensionsDir();\n      const storeBase = resolveExtensionsStoreBaseUrl(cfg);\n\n      const lock = getExtensionLockfileManager();\n      const data = await lock.load();\n      const ids = extensionId?.trim()\n        ? [extensionId.trim()]\n        : Object.keys(data.extensions);\n\n      if (ids.length === 0) {\n        console.log('No extensions in lockfile.');\n        return;\n      }\n\n      for (const id of ids) {\n        const entry = data.extensions[id];\n        if (!entry) {\n          console.log(colors.yellow('skip'), id, '(not in lockfile)');\n          continue;\n        }\n        if (entry.source === 'store') {\n          const pkgName = entry.resolved?.trim() || id;\n          console.log(colors.cyan('Updating'), id, '←', `store:${pkgName}`);\n          if (existsSync(join(targetDir, id))) {\n            rmSync(join(targetDir, id), { recursive: true, force: true });\n          }\n          const r = await installExtensionFromStoreWithLock({\n            storeBase,\n            packageName: pkgName,\n            targetDir,\n            lock,\n            yes: true,\n          });\n          if (r.ok === false) {\n            console.error(colors.red('error:'), r.error ?? id);\n            process.exit(1);\n          }\n          console.log(colors.green('✓'), id);\n          continue;\n        }\n        if (entry.source !== 'npm') {\n          console.log(colors.yellow('skip'), id, `(source ${entry.source})`);\n          continue;\n        }\n        const spec = entry.resolved?.trim() || (await npmPackageForId(id));\n        if (!spec) {\n          console.log(colors.yellow('skip'), id, '(could not resolve npm package)');\n          continue;\n        }\n        console.log(colors.cyan('Updating'), id, '←', spec);\n        if (existsSync(join(targetDir, id))) {\n          rmSync(join(targetDir, id), { recursive: true, force: true });\n        }\n        const result = await installFromNpm(spec, targetDir);\n        if (!result.ok) {\n          console.error(colors.red('error:'), result.error ?? id);\n          process.exit(1);\n        }\n        await lock.upsert(id, {\n          name: id,\n          version: entry.version,\n          resolved: spec,\n          source: 'npm',\n          ...readInstalledSnapshots(targetDir, id),\n        });\n        console.log(colors.green('✓'), id);\n      }\n    });\n}\n\nasync function npmPackageForId(id: string): Promise<string | undefined> {\n  const found = await marketplace.findExtension(id);\n  return found?.npmPackage;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;aAeoD;YACS;AAmB7D,MAAM,WAAW;AAEjB,SAAS,eAAe,MAAmD;AACzE,KAAI;EACF,MAAM,MAAM,KAAK,MAAM,aAAa,MAAM,QAAQ,CAAC;AACnD,SAAO,OAAO,QAAQ,YAAY,QAAQ,QAAQ,CAAC,MAAM,QAAQ,IAAI,GAChE,MACD,KAAA;SACE;AACN;;;AAIJ,SAAS,uBAAuB,WAAmB,aAGjD;CACA,MAAM,OAAO,KAAK,WAAW,YAAY;AACzC,QAAO;EACL,UAAU,eAAe,KAAK,MAAM,SAAS,CAAC;EAC9C,aAAa,eAAe,KAAK,MAAM,eAAe,CAAC;EACxD;;AAGH,SAAS,gBAAgB,QAAwB;AAC/C,QAAO,UAAU,WAAW,SAAS,CAAC,OAAO,OAAO,CAAC,OAAO,SAAS;;AAGvE,SAAS,qBAAqB,QAMrB;CACP,MAAM,WAAW,OAAO;AACxB,SAAQ,IAAI,GAAG;AACf,SAAQ,IAAI,OAAO,KAAK,2BAA2B,CAAC;AACpD,SAAQ,IAAI,aAAa,OAAO,SAAS;AACzC,SAAQ,IAAI,cAAc,OAAO,cAAc,OAAO,UAAU,IAAI,OAAO,YAAY,KAAK;AAC5F,KAAI,OAAO,UAAW,SAAQ,IAAI,gBAAgB,OAAO,YAAY;AACrE,KAAI,UAAU;AACZ,UAAQ,IAAI,SAAS,OAAO,SAAS,MAAM,YAAY,GAAG;AAC1D,UAAQ,IAAI,WAAW,OAAO,SAAS,QAAQ,SAAS,MAAM,YAAY,GAAG;EAC7E,MAAM,UAAU,SAAS;AACzB,MAAI,SAAS,KAAM,SAAQ,IAAI,mBAAmB,OAAO,QAAQ,KAAK,GAAG;EACzE,MAAM,cAAc,SAAS;AAC7B,MAAI,aAAa;AACf,WAAQ,IAAI,iBAAiB;AAC7B,QAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,YAAY,CACpD,SAAQ,IAAI,OAAO,IAAI,IAAI,MAAM,QAAQ,MAAM,GAAG,MAAM,KAAK,KAAK,GAAG,OAAO,MAAM,GAAG;;EAGzF,MAAM,YAAY,SAAS;AAC3B,MAAI,WAAW;AACb,WAAQ,IAAI,eAAe;AAC3B,QAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,UAAU,CAClD,KAAI,MAAM,QAAQ,MAAM,IAAI,MAAM,SAAS,EAAG,SAAQ,IAAI,OAAO,IAAI,IAAI,MAAM,KAAK,KAAK,GAAG;;;AAIlG,SAAQ,IAAI,GAAG;;AAGjB,eAAe,eAAe,QAA0F;AACtH,sBAAqB,OAAO;AAC5B,KAAI,OAAO,OAAO,CAAC,QAAQ,MAAM,MAAO,QAAO;AAC/C,QAAO,MAAM,QAAQ;EAAE,SAAS;EAA2B,SAAS;EAAO,CAAC;;AAG9E,SAAS,mBAAmB,KAAiD;CAC3E,MAAM,IAAI,IAAI,MAAM;CACpB,MAAM,KAAK,EAAE,YAAY,IAAI;AAC7B,KAAI,MAAM,KAAK,OAAO,EAAE,SAAS,EAAG,QAAO,EAAE,MAAM,GAAG;CACtD,MAAM,WAAW,EAAE,MAAM,KAAK,EAAE;CAChC,MAAM,IAAI,OAAO,MAAM,SAAS;AAChC,KAAI,EAAG,QAAO;EAAE,MAAM,EAAE,MAAM,GAAG,GAAG;EAAE,SAAS;EAAG;AAClD,QAAO,EAAE,MAAM,GAAG;;AAGpB,SAAS,mBAAmB,KAAsB;CAChD,MAAM,IAAI,IAAI,MAAM;AACpB,KAAI,EAAE,WAAW,KAAK,IAAI,EAAE,WAAW,MAAM,CAAE,QAAO;AACtD,KAAI,MAAM,OAAO,MAAM,KAAM,QAAO;AACpC,KAAI;EACF,MAAM,MAAM,QAAQ,QAAQ,KAAK,EAAE,EAAE;AACrC,SAAO,WAAW,IAAI,IAAI,SAAS,IAAI,CAAC,aAAa;SAC/C;AACN,SAAO;;;;AAKX,MAAM,gBAAgB;AAEtB,eAAe,uBACb,MACA,WACA,QACA,MACe;AACf,KAAI,CAAC,OAAO,YAAa;CACzB,MAAM,MAAM,MAAMA,cAA0B,OAAO,YAAY;CAC/D,MAAM,WAAW,KAAK,cAAc;CACpC,IAAI,MAAM,KAAK,WAAW;AAC1B,KAAI;EACF,MAAM,MAAM,aAAa,KAAK,WAAW,OAAO,aAAa,SAAS,EAAE,QAAQ;EAChF,MAAM,IAAI,KAAK,MAAM,IAAI;EACzB,MAAM,KAAK,OAAO,EAAE,YAAY,WAAW,OAAO,MAAM,EAAE,QAAQ,GAAG;AACrE,MAAI,GAAI,OAAM;SACR;AAGR,OAAM,KAAK,OAAO,OAAO,aAAa;EACpC,MAAM,OAAO;EACb,SAAS;EACT;EACA,QAAQ;EACR,GAAG,uBAAuB,WAAW,OAAO,YAAY;EACzD,CAAC;;AAGJ,eAAe,kCAAkC,QAQ8C;AAC7F,KAAI;EACF,MAAM,EAAE,aAAa,SAAS,WAAW,MAAM,+BAC7C,OAAO,WACP,OAAO,aACP,OAAO,QACR;AACD,UAAQ,IACN,OAAO,KAAK,KAAK,EACjB,eAAe,OAAO,YAAY,GAAG,QAAQ,oBAAoB,OAAO,UAAU,IACnF;EACD,MAAM,MAAM,MAAM,gCAAgC,OAAO,WAAW,YAAY;AAChF,4BAA0B,KAAK,OAAO;EACtC,MAAM,kBAAkB,gBAAgB,IAAI;EAC5C,MAAM,WAAW,kCAAkC,IAAI;AASvD,MAAI,CAAC,MARkB,eAAe;GACpC,QAAQ;GACR,aAAa,OAAO;GACpB;GACA,WAAW;GACX;GACA,KAAK,OAAO;GACb,CAAC,CAEA,QAAO;GAAE,IAAI;GAAO,OAAO;GAAqB;EAGlD,MAAM,cAAc,MAAM,uBAAuB,KAAK,OAAO,UAAU;EACvE,MAAM,eAAe,MAAM,OAAO,KAAK,MAAM;EAC7C,IAAI,mBAAmB;AACvB,MAAI;AACF,gCAA6B,aAAa,OAAO,SAAS,MAAM;AAChE,sBAAmB;AACnB,SAAM,OAAO,KAAK,OAAO,YAAY,aAAa;IAChD,MAAM,YAAY;IAClB;IACA,UAAU,OAAO;IACjB,QAAQ;IACR,aAAa;IACb,WAAW;IACX,GAAG,uBAAuB,OAAO,WAAW,YAAY,YAAY;IACrE,CAAC;WACK,KAAK;GACZ,MAAM,iBAA2B,EAAE;AACnC,OAAI;AACF,mCAA+B,YAAY;YACpC,aAAa;AACpB,mBAAe,KAAK,UAAU,uBAAuB,QAAQ,YAAY,UAAU,OAAO,YAAY,GAAG;;AAE3G,OAAI,iBACF,KAAI;AACF,UAAM,OAAO,KAAK,KAAK,aAAa;YAC7B,aAAa;AACpB,mBAAe,KAAK,aAAa,uBAAuB,QAAQ,YAAY,UAAU,OAAO,YAAY,GAAG;;GAGhH,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;GAChE,MAAM,SAAS,eAAe,SAAS,IACnC,yBAAyB,eAAe,KAAK,KAAK,CAAC,MACnD;AACJ,SAAM,IAAI,MAAM,GAAG,UAAU,UAAU,EAAE,OAAO,KAAK,CAAC;;AAGxD,MAAI;AACF,kCAA+B,YAAY;WACpC,YAAY;GACnB,MAAM,UAAU,sBAAsB,QAAQ,WAAW,UAAU,OAAO,WAAW;AACrF,WAAQ,KAAK,OAAO,OAAO,WAAW,EAAE,6DAA6D,UAAU;;AAEjH,SAAO;GAAE,IAAI;GAAM,aAAa,YAAY;GAAa;GAAS;UAC3D,GAAG;AAEV,SAAO;GAAE,IAAI;GAAO,OADR,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;GACtB;;;AAIpC,SAAgB,gCAAyC;AACvD,QAAO,IAAI,QAAQ,UAAU,CAC1B,YACC,uGACD,CACA,SACC,YACA,kFACD,CACA,OACC,eACA,0EACA,MACD,CACA,OAAO,aAAa,yCAAyC,MAAM,CACnE,OACC,OACE,QACA,SACG;EAEH,MAAM,MAAM,WADA,oBACc,CAAC,WAAW;EACtC,MAAM,YAAY,sBAAsB;EACxC,MAAM,OAAO,6BAA6B;EAE1C,IAAI,gBAAgB,OAAO,MAAM;EACjC,MAAM,gBAAgB,WAAW,KAAK,cAAc;EACpD,MAAM,cAAc,SAAS,KAAK,cAAc;AAChD,MAAI,cACF,iBAAgB,cAAc,QAAQ,YAAY,GAAG,CAAC,MAAM;WACnD,YACT,iBAAgB,cAAc,QAAQ,UAAU,GAAG,CAAC,MAAM;AAE5D,MAAI,CAAC,eAAe;AAClB,WAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,iBAAiB;AACrD,WAAQ,KAAK,EAAE;;EAGjB,MAAM,YAAY,8BAA8B,IAAI;AAEpD,MAAI,eAAe;GACjB,MAAM,EAAE,MAAM,SAAS,SAAS,QAAQ,mBAAmB,cAAc;AACzE,OAAI,CAAC,cAAc,KAAK,QAAQ,EAAE;AAChC,YAAQ,MACN,OAAO,IAAI,SAAS,EACpB,sEACD;AACD,YAAQ,KAAK,EAAE;;GAEjB,MAAM,IAAI,MAAM,kCAAkC;IAChD;IACA,aAAa;IACb,SAAS;IACT;IACA;IACA,OAAO,KAAK;IACZ,KAAK,KAAK;IACX,CAAC;AACF,OAAI,EAAE,OAAO,OAAO;AAClB,YAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,EAAE,MAAM;AAC5C,YAAQ,KAAK,EAAE;;AAEjB,WAAQ,IAAI,OAAO,MAAM,IAAI,EAAE,GAAG,EAAE,YAAY,GAAG,EAAE,QAAQ,UAAU;AACvE;;AAGF,MAAI,aAAa;GACf,MAAM,OAAO;AACb,WAAQ,IAAI,OAAO,KAAK,KAAK,EAAE,wBAAwB,KAAK,GAAG;GAC/D,MAAM,SAAS,MAAM,eAAe,MAAM,UAAU;AACpD,OAAI,CAAC,OAAO,IAAI;AACd,YAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,OAAO,SAAS,iBAAiB;AACrE,YAAQ,KAAK,EAAE;;AAEjB,SAAM,uBAAuB,MAAM,WAAW,QAAQ,KAAK;AAC3D,WAAQ,IAAI,OAAO,MAAM,IAAI,EAAE,OAAO,eAAe,MAAM,QAAQ;AACnE;;AAGF,MAAI,mBAAmB,cAAc,EAAE;GACrC,MAAM,YAAY,QAAQ,QAAQ,KAAK,EAAE,cAAc;AACvD,OAAI,KAAK,OAAO;IACd,MAAM,eAAe,KAAK,WAAW,SAAS;AAC9C,QAAI,WAAW,aAAa,CAC1B,KAAI;KACF,MAAM,MAAM,aAAa,cAAc,QAAQ;KAC/C,MAAM,IAAI,KAAK,MAAM,IAAI;KACzB,MAAM,QACJ,OAAO,EAAE,OAAO,YAChB,EAAE,MACF,CAAC,EAAE,GAAG,SAAS,IAAI,IACnB,CAAC,EAAE,GAAG,SAAS,KAAK,GAChB,EAAE,KACF,KAAA;AACN,SAAI,SAAS,WAAW,KAAK,WAAW,MAAM,CAAC,CAC7C,QAAO,KAAK,WAAW,MAAM,EAAE;MAAE,WAAW;MAAM,OAAO;MAAM,CAAC;YAE5D;;AAKZ,WAAQ,IAAI,OAAO,KAAK,KAAK,EAAE,mCAAmC;GAClE,MAAM,SAAS,MAAM,iBAAiB,WAAW,UAAU;AAC3D,OAAI,CAAC,OAAO,IAAI;AACd,YAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,OAAO,SAAS,iBAAiB;AACrE,YAAQ,KAAK,EAAE;;AAEjB,WAAQ,IAAI,OAAO,MAAM,IAAI,EAAE,OAAO,eAAe,KAAK;AAC1D;;AAGF,UAAQ,MACN,OAAO,IAAI,SAAS,EACpB,uGACD;AACD,UAAQ,KAAK,EAAE;GAElB;;AAGL,SAAgB,+BAAwC;AACtD,QAAO,IAAI,QAAQ,SAAS,CACzB,YAAY,yCAAyC,CACrD,SAAS,aAAa,kCAAkC,GAAG,CAC3D,OAAO,oBAAoB,qBAAqB,CAChD,OAAO,UAAU,cAAc,CAC/B,OAAO,OAAO,SAAiB,SAAgD;AAC9E,MAAI;GACF,IAAI;AACJ,OAAI,KAAK,UAAU,MAAM,EAAE;AACzB,WAAO,MAAMC,eAA2B,KAAK,SAAS,MAAM,CAAC;AAC7D,QAAI,QAAQ,MAAM,EAAE;KAClB,MAAM,IAAI,QAAQ,MAAM,CAAC,aAAa;AACtC,YAAO,KAAK,QACT,MACC,EAAE,GAAG,aAAa,CAAC,SAAS,EAAE,IAC9B,EAAE,KAAK,aAAa,CAAC,SAAS,EAAE,KAC/B,EAAE,eAAe,IAAI,aAAa,CAAC,SAAS,EAAE,CAClD;;cAEM,QAAQ,MAAM,CACvB,QAAO,MAAMC,iBAA6B,QAAQ,MAAM,CAAC;OAGzD,SAAO,MADWC,eAA2B,EAClC;AAGb,OAAI,KAAK,MAAM;AACb,YAAQ,IAAI,KAAK,UAAU,MAAM,MAAM,EAAE,CAAC;AAC1C;;AAGF,OAAI,KAAK,WAAW,GAAG;AACrB,YAAQ,IAAI,uBAAuB;AACnC;;AAGF,WAAQ,IAAI,eAAeC,qCAAiD,GAAG;AAC/E,WAAQ,IAAI,GAAG;AACf,QAAK,MAAM,KAAK,MAAM;IACpB,MAAM,QAAQ,EAAE,WAAW,IAAI,OAAO,MAAM,IAAI,KAAK;AACrD,YAAQ,IAAI,GAAG,OAAO,KAAK,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,KAAK,EAAE,WAAW,GAAG,GAAG;AAC7E,YAAQ,IAAI,SAAS,EAAE,GAAG,SAAS,EAAE,aAAa;AAClD,QAAI,EAAE,YAAa,SAAQ,IAAI,KAAK,EAAE,cAAc;AACpD,QAAI,EAAE,YAAY,OAAQ,SAAQ,IAAI,iBAAiB,EAAE,WAAW,KAAK,KAAK,GAAG;AACjF,YAAQ,IAAI,GAAG;;WAEV,KAAK;AACZ,WAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,CAAC;AACrF,WAAQ,KAAK,EAAE;;GAEjB;;AAGN,SAAgB,gCAAyC;AACvD,QAAO,IAAI,QAAQ,UAAU,CAC1B,YAAY,oCAAoC,CAChD,SAAS,eAAe,kBAAkB,IAAI,CAC9C,OAAO,aAAa,yBAAyB,MAAM,CACnD,OAAO,oBAAoB,cAAc,SAAS,CAClD,QAAQ,KAAa,SAA8C;EAClE,MAAM,OAAO,QAAQ,OAAO,IAAI;EAChC,MAAM,eAAe,KAAK,MAAM,SAAS;EACzC,MAAM,UAAU,KAAK,MAAM,eAAe;AAC1C,MAAI,CAAC,WAAW,aAAa,IAAI,CAAC,WAAW,QAAQ,EAAE;AACrD,WAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,QAAQ,SAAS,uBAAuB,OAAO;AACnF,WAAQ,KAAK,EAAE;;EAEjB,MAAM,aAAa,kCAAkC,KAAK;AAC1D,OAAK,MAAM,KAAK,WAAW,aAAa;GACtC,MAAM,QAAQ,EAAE,UAAU,UAAU,OAAO,IAAI,QAAQ,GAAG,EAAE,UAAU,YAAY,OAAO,OAAO,UAAU,GAAG,OAAO,KAAK,OAAO;AAChI,WAAQ,IAAI,GAAG,MAAM,IAAI,EAAE,QAAQ;;AAErC,MAAI,CAAC,WAAW,MAAM,CAAC,WAAW,UAAU,IAAI;AAC9C,WAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,0DAA0D;AAC9F,WAAQ,KAAK,EAAE;;EAGjB,MAAM,OAAO,CAAC,WAAW,YAAY,KAAK,SAAS;AACnD,MAAI,KAAK,OAAQ,MAAK,KAAK,YAAY;AACvC,UAAQ,IAAI,OAAO,KAAK,WAAW,EAAE,OAAO,KAAK,KAAK,IAAI,GAAG;AAC7D,MAAI;AACF,YAAS,OAAO,KAAK,KAAK,IAAI,IAAI;IAAE,KAAK;IAAM,OAAO;IAAW,CAAC;UAC5D;AACN,WAAQ,KAAK,EAAE;;GAEjB;;AAGN,SAAgB,+BAAwC;AACtD,QAAO,IAAI,QAAQ,SAAS,CACzB,YAAY,yFAAyF,CACrG,SAAS,iBAAiB,mDAAmD,CAC7E,OAAO,OAAO,gBAAoC;EAEjD,MAAM,MAAM,WADA,oBACc,CAAC,WAAW;EACtC,MAAM,YAAY,sBAAsB;EACxC,MAAM,YAAY,8BAA8B,IAAI;EAEpD,MAAM,OAAO,6BAA6B;EAC1C,MAAM,OAAO,MAAM,KAAK,MAAM;EAC9B,MAAM,MAAM,aAAa,MAAM,GAC3B,CAAC,YAAY,MAAM,CAAC,GACpB,OAAO,KAAK,KAAK,WAAW;AAEhC,MAAI,IAAI,WAAW,GAAG;AACpB,WAAQ,IAAI,6BAA6B;AACzC;;AAGF,OAAK,MAAM,MAAM,KAAK;GACpB,MAAM,QAAQ,KAAK,WAAW;AAC9B,OAAI,CAAC,OAAO;AACV,YAAQ,IAAI,OAAO,OAAO,OAAO,EAAE,IAAI,oBAAoB;AAC3D;;AAEF,OAAI,MAAM,WAAW,SAAS;IAC5B,MAAM,UAAU,MAAM,UAAU,MAAM,IAAI;AAC1C,YAAQ,IAAI,OAAO,KAAK,WAAW,EAAE,IAAI,KAAK,SAAS,UAAU;AACjE,QAAI,WAAW,KAAK,WAAW,GAAG,CAAC,CACjC,QAAO,KAAK,WAAW,GAAG,EAAE;KAAE,WAAW;KAAM,OAAO;KAAM,CAAC;IAE/D,MAAM,IAAI,MAAM,kCAAkC;KAChD;KACA,aAAa;KACb;KACA;KACA,KAAK;KACN,CAAC;AACF,QAAI,EAAE,OAAO,OAAO;AAClB,aAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,EAAE,SAAS,GAAG;AAClD,aAAQ,KAAK,EAAE;;AAEjB,YAAQ,IAAI,OAAO,MAAM,IAAI,EAAE,GAAG;AAClC;;AAEF,OAAI,MAAM,WAAW,OAAO;AAC1B,YAAQ,IAAI,OAAO,OAAO,OAAO,EAAE,IAAI,WAAW,MAAM,OAAO,GAAG;AAClE;;GAEF,MAAM,OAAO,MAAM,UAAU,MAAM,IAAK,MAAM,gBAAgB,GAAG;AACjE,OAAI,CAAC,MAAM;AACT,YAAQ,IAAI,OAAO,OAAO,OAAO,EAAE,IAAI,kCAAkC;AACzE;;AAEF,WAAQ,IAAI,OAAO,KAAK,WAAW,EAAE,IAAI,KAAK,KAAK;AACnD,OAAI,WAAW,KAAK,WAAW,GAAG,CAAC,CACjC,QAAO,KAAK,WAAW,GAAG,EAAE;IAAE,WAAW;IAAM,OAAO;IAAM,CAAC;GAE/D,MAAM,SAAS,MAAM,eAAe,MAAM,UAAU;AACpD,OAAI,CAAC,OAAO,IAAI;AACd,YAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,OAAO,SAAS,GAAG;AACvD,YAAQ,KAAK,EAAE;;AAEjB,SAAM,KAAK,OAAO,IAAI;IACpB,MAAM;IACN,SAAS,MAAM;IACf,UAAU;IACV,QAAQ;IACR,GAAG,uBAAuB,WAAW,GAAG;IACzC,CAAC;AACF,WAAQ,IAAI,OAAO,MAAM,IAAI,EAAE,GAAG;;GAEpC;;AAGN,eAAe,gBAAgB,IAAyC;AAEtE,SAAO,MADaJ,cAA0B,GAAG,GACnC"}

package/dist/src/cli/commands/extension-pack.d.ts

@@ -12,4 +12,10 @@ export interface ExtensionPackageValidationResult {
     ok: boolean;
 }
 export declare function validateExtensionPackageDirectory(dir: string): ExtensionPackageValidationResult;
+export declare function writeStoreReadyArtifact(params: {
+    extensionDir: string;
+    outDir: string;
+    manifest: ExtensionManifest;
+    packageJson: Record<string, unknown>;
+}): string;
 export declare function createExtensionPackCommand(): Command;

package/dist/src/cli/commands/extension-pack.js

@@ -250,6 +250,7 @@ function writeStoreReadyArtifact(params) {
 		name: params.manifest.name,
 		version,
 		artifact: basename(zipPath),
+		sha256: sha256Hex,
 		integrity,
 		manifest: params.manifest,
 		packageJson: params.packageJson
@@ -262,7 +263,7 @@ function printDiagnostics(d) {
 	else console.log(`${colors.cyan("info")}:`, x.message);
 }
 function createExtensionPackCommand() {
-	return new Command("pack").description("Package an extension as a .tgz archive for distribution").argument("[dir]", "Extension directory (default: current working directory)", ".").option("--out <dir>", "Output directory for the .tgz (default: extension directory)", "").option("--no-build-ui", "Skip automatic \"npm run build:ui\" when defined").option("--dry-run", "Validate only; do not create an archive", false).action((dir, opts) => {
+	return new Command("pack").description("Package an extension as a store-ready .zip artifact set").argument("[dir]", "Extension directory (default: current working directory)", ".").option("--out <dir>", "Output directory for the artifact set (default: extension directory)", "").option("--no-build-ui", "Skip automatic \"npm run build:ui\" when defined").option("--dry-run", "Validate only; do not create an archive", false).action((dir, opts) => {
 		const validation = validateExtensionPackageDirectory(dir || ".");
 		const { extensionDir, manifest, packageJson, diagnostics } = validation;
 		const outDir = opts.out && opts.out.length > 0 ? resolve(opts.out) : extensionDir;
@@ -306,6 +307,6 @@ function createExtensionPackCommand() {
 	});
 }
 //#endregion
-export { createExtensionPackCommand, validateExtensionPackageDirectory };
+export { createExtensionPackCommand, validateExtensionPackageDirectory, writeStoreReadyArtifact };
 
 //# sourceMappingURL=extension-pack.js.map

package/dist/src/cli/commands/extension-pack.js.map

@@ -1 +1 @@
-{"version":3,"file":"extension-pack.js","names":[],"sources":["../../../../src/cli/commands/extension-pack.ts"],"sourcesContent":["import { createHash } from 'node:crypto';\nimport { execSync } from 'node:child_process';\nimport { existsSync, readFileSync, readdirSync, mkdirSync, statSync, writeFileSync } from 'node:fs';\nimport { basename, join, relative, resolve } from 'node:path';\n\nimport AdmZip from 'adm-zip';\nimport { Command } from 'commander';\n\nimport { checkEngineCompatibility } from '../../extensions/engine-check.js';\nimport type { ExtensionManifest } from '../../extensions/types/index.js';\nimport { normalizeExtensionManifest } from '../../extensions/normalize-manifest.js';\nimport { collectExtensionPackageDependencyIssues } from '../../extensions/package-contract.js';\nimport { PACKAGE_VERSION } from '../../package-version.js';\nimport { createLogger } from '../../utils/logger.js';\nimport { colors } from '../utils/colors.js';\n\nconst log = createLogger('ExtensionPack');\nconst MANIFEST = 'xopc.extension.json';\n\ninterface PackContext {\n  extensionDir: string;\n  manifest: ExtensionManifest;\n  packageJson: Record<string, unknown>;\n  diagnostics: PackDiagnostic[];\n}\n\nexport interface PackDiagnostic {\n  level: 'error' | 'warning' | 'info';\n  message: string;\n}\n\nexport interface ExtensionPackageValidationResult {\n  extensionDir: string;\n  manifest: ExtensionManifest | null;\n  packageJson: Record<string, unknown> | null;\n  diagnostics: PackDiagnostic[];\n  ok: boolean;\n}\n\nfunction isRecord(x: unknown): x is Record<string, unknown> {\n  return typeof x === 'object' && x !== null && !Array.isArray(x);\n}\n\nfunction loadJson(path: string): unknown {\n  return JSON.parse(readFileSync(path, 'utf-8') as string) as unknown;\n}\n\nfunction loadManifestAtRoot(\n  root: string,\n  diagnostics: PackDiagnostic[],\n): ExtensionManifest | null {\n  const manifestPath = join(root, MANIFEST);\n  if (!existsSync(manifestPath)) {\n    diagnostics.push({ level: 'error', message: `Missing ${MANIFEST} in ${root}` });\n    return null;\n  }\n  try {\n    const raw = loadJson(manifestPath);\n    if (!isRecord(raw)) {\n      diagnostics.push({ level: 'error', message: `${MANIFEST} must be a JSON object` });\n      return null;\n    }\n    return normalizeExtensionManifest(raw);\n  } catch (e) {\n    diagnostics.push({\n      level: 'error',\n      message: `Failed to parse ${MANIFEST}: ${e instanceof Error ? e.message : String(e)}`,\n    });\n    return null;\n  }\n}\n\nfunction collectContributionPaths(manifest: ExtensionManifest, extRoot: string): string[] {\n  const out: string[] = [];\n  const ui = manifest.ui;\n  if (ui?.main) out.push(join(extRoot, ui.main));\n  if (ui?.icon) out.push(join(extRoot, ui.icon));\n  const c = ui?.contributions;\n  if (!c) return out;\n  for (const p of c.sidebarPanels ?? []) {\n    if (p.entrypoint) out.push(join(extRoot, p.entrypoint));\n  }\n  for (const p of c.settingsPanels ?? []) {\n    if (p.entrypoint) out.push(join(extRoot, p.entrypoint));\n  }\n  for (const p of c.chatWidgets ?? []) {\n    if (p.entrypoint) out.push(join(extRoot, p.entrypoint));\n  }\n  for (const p of c.pages ?? []) {\n    if (p.entrypoint) out.push(join(extRoot, p.entrypoint));\n  }\n  for (const p of c.statusBarItems ?? []) {\n    if (p.entrypoint) out.push(join(extRoot, p.entrypoint));\n  }\n  return out;\n}\n\nfunction resolveMainFile(root: string, main: string): string | null {\n  const p = join(root, main);\n  return existsSync(p) ? p : null;\n}\n\nfunction validateManifest(ctx: PackContext): void {\n  const { manifest, extensionDir, diagnostics } = ctx;\n  if (!manifest.id || !String(manifest.id).trim()) {\n    diagnostics.push({ level: 'error', message: 'Manifest \"id\" is required' });\n  }\n  if (!manifest.main) {\n    diagnostics.push({ level: 'error', message: 'Manifest \"main\" is required and must point at built JavaScript' });\n  }\n  const mainFile = manifest.main ? resolveMainFile(extensionDir, manifest.main) : null;\n  if (!mainFile) {\n    diagnostics.push({\n      level: 'error',\n      message: `Main entry not found: ${manifest.main ?? '(missing)'}`,\n    });\n  }\n\n  if (manifest.ui?.main) {\n    const p = join(extensionDir, manifest.ui.main);\n    if (!existsSync(p)) {\n      diagnostics.push({ level: 'error', message: `ui.main missing: ${manifest.ui.main}` });\n    }\n  }\n\n  for (const p of collectContributionPaths(manifest, extensionDir)) {\n    if (!existsSync(p)) {\n      diagnostics.push({ level: 'error', message: `UI contribution entry missing: ${p}` });\n    }\n  }\n\n  if (manifest.main && !/\\.(mjs|cjs|js)$/i.test(manifest.main)) {\n    diagnostics.push({\n      level: 'error',\n      message: `Strict package contract requires manifest.main to point at built JavaScript, got \"${manifest.main}\"`,\n    });\n  }\n\n  if (!manifest.engines?.xopc) {\n    diagnostics.push({\n      level: 'error',\n      message: 'manifest engines.xopc is required for independent extension packages',\n    });\n  } else {\n    const r = checkEngineCompatibility(PACKAGE_VERSION, manifest.engines.xopc);\n    if (r.parseWarning) {\n      diagnostics.push({\n        level: 'error',\n        message: `engines.xopc parse issue — ${r.reason ?? 'unknown'}`,\n      });\n    } else if (!r.compatible) {\n      diagnostics.push({\n        level: 'error',\n        message: `engines.xopc not satisfied by current xopc ${PACKAGE_VERSION}: ${r.reason ?? manifest.engines.xopc}`,\n      });\n    }\n  }\n}\n\nfunction validatePackageJson(ctx: PackContext): void {\n  const { packageJson, diagnostics, extensionDir } = ctx;\n  for (const issue of collectExtensionPackageDependencyIssues(packageJson, {\n    strictRuntimeSdkDeps: true,\n  })) {\n    diagnostics.push({\n      level: 'error',\n      message: issue.message,\n    });\n  }\n\n  const files = packageJson.files;\n  if (Array.isArray(files)) {\n    if (!files.some((f) => f === MANIFEST || f === '**/xopc.extension.json')) {\n      diagnostics.push({\n        level: 'error',\n        message: `package.json \"files\" must include \"${MANIFEST}\" so the archive ships the manifest`,\n      });\n    }\n  }\n\n  const keywords = packageJson.keywords;\n  if (Array.isArray(keywords) && !keywords.includes('xopc-extension')) {\n    diagnostics.push({\n      level: 'info',\n      message: 'Consider adding \"xopc-extension\" to package.json keywords for discoverability',\n    });\n  } else if (!Array.isArray(keywords)) {\n    diagnostics.push({ level: 'info', message: 'Consider adding keywords: [\"xopc-extension\", ...]' });\n  }\n\n  if (!existsSync(join(extensionDir, 'package.json'))) {\n    diagnostics.push({ level: 'error', message: 'package.json is missing' });\n  }\n}\n\nconst SECRET_FILE_RE = /(^|\\/)(\\.env(?:\\..*)?|\\.npmrc|\\.yarnrc|id_rsa|id_ed25519|.*\\.(?:pem|key|p12|pfx))$/i;\nconst SECRET_TEXT_RE = /(sk-[A-Za-z0-9_-]{20,}|xox[baprs]-[A-Za-z0-9-]{20,}|AKIA[0-9A-Z]{16}|-----BEGIN (?:RSA |OPENSSH |EC |DSA )?PRIVATE KEY-----)/;\n\nfunction scanUnsafeFiles(root: string, diagnostics: PackDiagnostic[]): void {\n  const walk = (dir: string) => {\n    for (const entry of readdirSync(dir, { withFileTypes: true })) {\n      const full = join(dir, entry.name);\n      const rel = relative(root, full).replace(/\\\\/g, '/');\n      if (shouldExcludeFromArtifact(rel)) continue;\n      if (SECRET_FILE_RE.test(rel)) {\n        diagnostics.push({ level: 'error', message: `Unsafe secret-like file would be packaged: ${rel}` });\n        continue;\n      }\n      if (entry.isDirectory()) {\n        walk(full);\n      } else if (entry.isFile()) {\n        const size = statSync(full).size;\n        if (size <= 1024 * 1024 && /\\.(?:js|mjs|cjs|json|html|css|md|txt|map)$/i.test(entry.name)) {\n          const text = readFileSync(full, 'utf-8');\n          if (SECRET_TEXT_RE.test(text)) {\n            diagnostics.push({ level: 'error', message: `Potential secret token found in packaged file: ${rel}` });\n          }\n        }\n      }\n    }\n  };\n  walk(root);\n}\n\nexport function validateExtensionPackageDirectory(dir: string): ExtensionPackageValidationResult {\n  const extensionDir = resolve(dir || '.');\n  const diagnostics: PackDiagnostic[] = [];\n  if (!existsSync(extensionDir) || !existsSync(join(extensionDir, 'package.json'))) {\n    diagnostics.push({ level: 'error', message: `Not an extension project (no package.json): ${extensionDir}` });\n    return { extensionDir, manifest: null, packageJson: null, diagnostics, ok: false };\n  }\n  const manifest = loadManifestAtRoot(extensionDir, diagnostics);\n  let packageJson: Record<string, unknown> | null = null;\n  try {\n    packageJson = loadJson(join(extensionDir, 'package.json')) as Record<string, unknown>;\n    if (!isRecord(packageJson)) throw new Error('package.json must be an object');\n  } catch (e) {\n    diagnostics.push({ level: 'error', message: e instanceof Error ? e.message : String(e) });\n  }\n  if (manifest && packageJson) {\n    const ctx: PackContext = { extensionDir, manifest, packageJson, diagnostics };\n    validateManifest(ctx);\n    validatePackageJson(ctx);\n    scanUnsafeFiles(extensionDir, diagnostics);\n  }\n  return {\n    extensionDir,\n    manifest,\n    packageJson,\n    diagnostics,\n    ok: !diagnostics.some((d) => d.level === 'error'),\n  };\n}\n\nfunction shouldExcludeFromArtifact(rel: string): boolean {\n  const parts = rel.split(/[\\\\/]+/);\n  if (parts.some((p) => p === 'node_modules' || p === '.git' || p === '.turbo' || p === '.cache')) return true;\n  const name = parts.at(-1) ?? rel;\n  if (name === '.DS_Store') return true;\n  if (name.endsWith('.tgz') || name.endsWith('.zip') || name.endsWith('.sha256') || name.endsWith('.manifest.json')) return true;\n  if (name.endsWith('.tsbuildinfo')) return true;\n  return false;\n}\n\nfunction addDirectoryToZip(zip: AdmZip, root: string, dir: string): void {\n  for (const entry of readdirSync(dir, { withFileTypes: true })) {\n    const full = join(dir, entry.name);\n    const rel = relative(root, full).replace(/\\\\/g, '/');\n    if (shouldExcludeFromArtifact(rel)) continue;\n    if (entry.isDirectory()) {\n      addDirectoryToZip(zip, root, full);\n    } else if (entry.isFile()) {\n      zip.addFile(rel, readFileSync(full));\n    }\n  }\n}\n\nfunction writeStoreReadyArtifact(params: {\n  extensionDir: string;\n  outDir: string;\n  manifest: ExtensionManifest;\n  packageJson: Record<string, unknown>;\n}): string {\n  mkdirSync(params.outDir, { recursive: true });\n  const name = String(params.packageJson.name ?? params.manifest.id)\n    .replace(/^@/, '')\n    .replace(/[\\\\/]+/g, '-')\n    .replace(/[^A-Za-z0-9._-]+/g, '-');\n  const version = String(params.manifest.version ?? params.packageJson.version ?? '0.0.0');\n  const base = `${name}-${version}`;\n  const zipPath = join(params.outDir, `${base}.zip`);\n  const zip = new AdmZip();\n  addDirectoryToZip(zip, params.extensionDir, params.extensionDir);\n  zip.writeZip(zipPath);\n\n  const buffer = readFileSync(zipPath);\n  const sha256Hex = createHash('sha256').update(buffer).digest('hex');\n  const integrity = `sha256-${createHash('sha256').update(buffer).digest('base64')}`;\n  writeFileSync(join(params.outDir, `${base}.sha256`), `${sha256Hex}  ${basename(zipPath)}\\n`);\n  writeFileSync(\n    join(params.outDir, `${base}.manifest.json`),\n    JSON.stringify(\n      {\n        id: params.manifest.id,\n        name: params.manifest.name,\n        version,\n        artifact: basename(zipPath),\n        integrity,\n        manifest: params.manifest,\n        packageJson: params.packageJson,\n      },\n      null,\n      2,\n    ),\n  );\n  return zipPath;\n}\n\nfunction printDiagnostics(d: PackDiagnostic[]): void {\n  for (const x of d) {\n    if (x.level === 'error') {\n      console.error(`${colors.red('error')}:`, x.message);\n    } else if (x.level === 'warning') {\n      console.log(`${colors.yellow('warning')}:`, x.message);\n    } else {\n      console.log(`${colors.cyan('info')}:`, x.message);\n    }\n  }\n}\n\nexport function createExtensionPackCommand(): Command {\n  return new Command('pack')\n    .description('Package an extension as a .tgz archive for distribution')\n    .argument('[dir]', 'Extension directory (default: current working directory)', '.')\n    .option('--out <dir>', 'Output directory for the .tgz (default: extension directory)', '')\n    .option('--no-build-ui', 'Skip automatic \"npm run build:ui\" when defined')\n    .option('--dry-run', 'Validate only; do not create an archive', false)\n    .action((dir: string, opts: { out?: string; buildUi: boolean; dryRun: boolean }) => {\n      const validation = validateExtensionPackageDirectory(dir || '.');\n      const { extensionDir, manifest, packageJson, diagnostics } = validation;\n      const outDir = opts.out && opts.out.length > 0 ? resolve(opts.out) : extensionDir;\n      printDiagnostics(diagnostics);\n\n      if (!validation.ok || !manifest || !packageJson) {\n        console.error(colors.red('Pack validation failed (fix errors above).'));\n        process.exit(1);\n      }\n\n      if (opts.dryRun) {\n        console.log(colors.green('OK'), ' — dry run; no archive created');\n        return;\n      }\n\n      const scripts = isRecord(packageJson.scripts) ? (packageJson.scripts as Record<string, unknown>) : null;\n      if (opts.buildUi && scripts && typeof scripts['build:ui'] === 'string') {\n        try {\n          console.log(colors.cyan('Running'), 'npm run build:ui …');\n          execSync('npm run build:ui', { cwd: extensionDir, stdio: 'inherit' });\n        } catch (e) {\n          console.error(\n            colors.red('error:'),\n            `UI build failed: ${e instanceof Error ? e.message : String(e)}`,\n          );\n          process.exit(1);\n        }\n      }\n\n      let artifactPath: string;\n      try {\n        artifactPath = writeStoreReadyArtifact({ extensionDir, outDir, manifest, packageJson });\n      } catch (e) {\n        log.error({ err: e }, 'pack failed');\n        console.error(colors.red('error:'), e instanceof Error ? e.message : String(e));\n        process.exit(1);\n      }\n\n      console.log('');\n      console.log(colors.green('Pack complete:'), artifactPath);\n      console.log(colors.cyan('Generated:'), '.zip artifact, .sha256 checksum, .manifest.json metadata');\n      console.log(colors.cyan('Next:'), 'upload the generated artifact set to store.xopc.ai or install the zip via the store pipeline.');\n    });\n}\n"],"mappings":";;;;;;;;;;;;;;yBAUoF;sBAEzB;aACN;AAGrD,MAAM,MAAM,aAAa,gBAAgB;AACzC,MAAM,WAAW;AAsBjB,SAAS,SAAS,GAA0C;AAC1D,QAAO,OAAO,MAAM,YAAY,MAAM,QAAQ,CAAC,MAAM,QAAQ,EAAE;;AAGjE,SAAS,SAAS,MAAuB;AACvC,QAAO,KAAK,MAAM,aAAa,MAAM,QAAQ,CAAW;;AAG1D,SAAS,mBACP,MACA,aAC0B;CAC1B,MAAM,eAAe,KAAK,MAAM,SAAS;AACzC,KAAI,CAAC,WAAW,aAAa,EAAE;AAC7B,cAAY,KAAK;GAAE,OAAO;GAAS,SAAS,WAAW,SAAS,MAAM;GAAQ,CAAC;AAC/E,SAAO;;AAET,KAAI;EACF,MAAM,MAAM,SAAS,aAAa;AAClC,MAAI,CAAC,SAAS,IAAI,EAAE;AAClB,eAAY,KAAK;IAAE,OAAO;IAAS,SAAS,GAAG,SAAS;IAAyB,CAAC;AAClF,UAAO;;AAET,SAAO,2BAA2B,IAAI;UAC/B,GAAG;AACV,cAAY,KAAK;GACf,OAAO;GACP,SAAS,mBAAmB,SAAS,IAAI,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;GACpF,CAAC;AACF,SAAO;;;AAIX,SAAS,yBAAyB,UAA6B,SAA2B;CACxF,MAAM,MAAgB,EAAE;CACxB,MAAM,KAAK,SAAS;AACpB,KAAI,IAAI,KAAM,KAAI,KAAK,KAAK,SAAS,GAAG,KAAK,CAAC;AAC9C,KAAI,IAAI,KAAM,KAAI,KAAK,KAAK,SAAS,GAAG,KAAK,CAAC;CAC9C,MAAM,IAAI,IAAI;AACd,KAAI,CAAC,EAAG,QAAO;AACf,MAAK,MAAM,KAAK,EAAE,iBAAiB,EAAE,CACnC,KAAI,EAAE,WAAY,KAAI,KAAK,KAAK,SAAS,EAAE,WAAW,CAAC;AAEzD,MAAK,MAAM,KAAK,EAAE,kBAAkB,EAAE,CACpC,KAAI,EAAE,WAAY,KAAI,KAAK,KAAK,SAAS,EAAE,WAAW,CAAC;AAEzD,MAAK,MAAM,KAAK,EAAE,eAAe,EAAE,CACjC,KAAI,EAAE,WAAY,KAAI,KAAK,KAAK,SAAS,EAAE,WAAW,CAAC;AAEzD,MAAK,MAAM,KAAK,EAAE,SAAS,EAAE,CAC3B,KAAI,EAAE,WAAY,KAAI,KAAK,KAAK,SAAS,EAAE,WAAW,CAAC;AAEzD,MAAK,MAAM,KAAK,EAAE,kBAAkB,EAAE,CACpC,KAAI,EAAE,WAAY,KAAI,KAAK,KAAK,SAAS,EAAE,WAAW,CAAC;AAEzD,QAAO;;AAGT,SAAS,gBAAgB,MAAc,MAA6B;CAClE,MAAM,IAAI,KAAK,MAAM,KAAK;AAC1B,QAAO,WAAW,EAAE,GAAG,IAAI;;AAG7B,SAAS,iBAAiB,KAAwB;CAChD,MAAM,EAAE,UAAU,cAAc,gBAAgB;AAChD,KAAI,CAAC,SAAS,MAAM,CAAC,OAAO,SAAS,GAAG,CAAC,MAAM,CAC7C,aAAY,KAAK;EAAE,OAAO;EAAS,SAAS;EAA6B,CAAC;AAE5E,KAAI,CAAC,SAAS,KACZ,aAAY,KAAK;EAAE,OAAO;EAAS,SAAS;EAAkE,CAAC;AAGjH,KAAI,EADa,SAAS,OAAO,gBAAgB,cAAc,SAAS,KAAK,GAAG,MAE9E,aAAY,KAAK;EACf,OAAO;EACP,SAAS,yBAAyB,SAAS,QAAQ;EACpD,CAAC;AAGJ,KAAI,SAAS,IAAI;MAEX,CAAC,WADK,KAAK,cAAc,SAAS,GAAG,KACxB,CAAC,CAChB,aAAY,KAAK;GAAE,OAAO;GAAS,SAAS,oBAAoB,SAAS,GAAG;GAAQ,CAAC;;AAIzF,MAAK,MAAM,KAAK,yBAAyB,UAAU,aAAa,CAC9D,KAAI,CAAC,WAAW,EAAE,CAChB,aAAY,KAAK;EAAE,OAAO;EAAS,SAAS,kCAAkC;EAAK,CAAC;AAIxF,KAAI,SAAS,QAAQ,CAAC,mBAAmB,KAAK,SAAS,KAAK,CAC1D,aAAY,KAAK;EACf,OAAO;EACP,SAAS,qFAAqF,SAAS,KAAK;EAC7G,CAAC;AAGJ,KAAI,CAAC,SAAS,SAAS,KACrB,aAAY,KAAK;EACf,OAAO;EACP,SAAS;EACV,CAAC;MACG;EACL,MAAM,IAAI,yBAAyB,iBAAiB,SAAS,QAAQ,KAAK;AAC1E,MAAI,EAAE,aACJ,aAAY,KAAK;GACf,OAAO;GACP,SAAS,8BAA8B,EAAE,UAAU;GACpD,CAAC;WACO,CAAC,EAAE,WACZ,aAAY,KAAK;GACf,OAAO;GACP,SAAS,8CAA8C,gBAAgB,IAAI,EAAE,UAAU,SAAS,QAAQ;GACzG,CAAC;;;AAKR,SAAS,oBAAoB,KAAwB;CACnD,MAAM,EAAE,aAAa,aAAa,iBAAiB;AACnD,MAAK,MAAM,SAAS,wCAAwC,aAAa,EACvE,sBAAsB,MACvB,CAAC,CACA,aAAY,KAAK;EACf,OAAO;EACP,SAAS,MAAM;EAChB,CAAC;CAGJ,MAAM,QAAQ,YAAY;AAC1B,KAAI,MAAM,QAAQ,MAAM;MAClB,CAAC,MAAM,MAAM,MAAM,MAAM,YAAY,MAAM,yBAAyB,CACtE,aAAY,KAAK;GACf,OAAO;GACP,SAAS,sCAAsC,SAAS;GACzD,CAAC;;CAIN,MAAM,WAAW,YAAY;AAC7B,KAAI,MAAM,QAAQ,SAAS,IAAI,CAAC,SAAS,SAAS,iBAAiB,CACjE,aAAY,KAAK;EACf,OAAO;EACP,SAAS;EACV,CAAC;UACO,CAAC,MAAM,QAAQ,SAAS,CACjC,aAAY,KAAK;EAAE,OAAO;EAAQ,SAAS;EAAqD,CAAC;AAGnG,KAAI,CAAC,WAAW,KAAK,cAAc,eAAe,CAAC,CACjD,aAAY,KAAK;EAAE,OAAO;EAAS,SAAS;EAA2B,CAAC;;AAI5E,MAAM,iBAAiB;AACvB,MAAM,iBAAiB;AAEvB,SAAS,gBAAgB,MAAc,aAAqC;CAC1E,MAAM,QAAQ,QAAgB;AAC5B,OAAK,MAAM,SAAS,YAAY,KAAK,EAAE,eAAe,MAAM,CAAC,EAAE;GAC7D,MAAM,OAAO,KAAK,KAAK,MAAM,KAAK;GAClC,MAAM,MAAM,SAAS,MAAM,KAAK,CAAC,QAAQ,OAAO,IAAI;AACpD,OAAI,0BAA0B,IAAI,CAAE;AACpC,OAAI,eAAe,KAAK,IAAI,EAAE;AAC5B,gBAAY,KAAK;KAAE,OAAO;KAAS,SAAS,8CAA8C;KAAO,CAAC;AAClG;;AAEF,OAAI,MAAM,aAAa,CACrB,MAAK,KAAK;YACD,MAAM,QAAQ;QACV,SAAS,KAAK,CAAC,QAChB,OAAO,QAAQ,8CAA8C,KAAK,MAAM,KAAK,EAAE;KACzF,MAAM,OAAO,aAAa,MAAM,QAAQ;AACxC,SAAI,eAAe,KAAK,KAAK,CAC3B,aAAY,KAAK;MAAE,OAAO;MAAS,SAAS,kDAAkD;MAAO,CAAC;;;;;AAMhH,MAAK,KAAK;;AAGZ,SAAgB,kCAAkC,KAA+C;CAC/F,MAAM,eAAe,QAAQ,OAAO,IAAI;CACxC,MAAM,cAAgC,EAAE;AACxC,KAAI,CAAC,WAAW,aAAa,IAAI,CAAC,WAAW,KAAK,cAAc,eAAe,CAAC,EAAE;AAChF,cAAY,KAAK;GAAE,OAAO;GAAS,SAAS,+CAA+C;GAAgB,CAAC;AAC5G,SAAO;GAAE;GAAc,UAAU;GAAM,aAAa;GAAM;GAAa,IAAI;GAAO;;CAEpF,MAAM,WAAW,mBAAmB,cAAc,YAAY;CAC9D,IAAI,cAA8C;AAClD,KAAI;AACF,gBAAc,SAAS,KAAK,cAAc,eAAe,CAAC;AAC1D,MAAI,CAAC,SAAS,YAAY,CAAE,OAAM,IAAI,MAAM,iCAAiC;UACtE,GAAG;AACV,cAAY,KAAK;GAAE,OAAO;GAAS,SAAS,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;GAAE,CAAC;;AAE3F,KAAI,YAAY,aAAa;EAC3B,MAAM,MAAmB;GAAE;GAAc;GAAU;GAAa;GAAa;AAC7E,mBAAiB,IAAI;AACrB,sBAAoB,IAAI;AACxB,kBAAgB,cAAc,YAAY;;AAE5C,QAAO;EACL;EACA;EACA;EACA;EACA,IAAI,CAAC,YAAY,MAAM,MAAM,EAAE,UAAU,QAAQ;EAClD;;AAGH,SAAS,0BAA0B,KAAsB;CACvD,MAAM,QAAQ,IAAI,MAAM,SAAS;AACjC,KAAI,MAAM,MAAM,MAAM,MAAM,kBAAkB,MAAM,UAAU,MAAM,YAAY,MAAM,SAAS,CAAE,QAAO;CACxG,MAAM,OAAO,MAAM,GAAG,GAAG,IAAI;AAC7B,KAAI,SAAS,YAAa,QAAO;AACjC,KAAI,KAAK,SAAS,OAAO,IAAI,KAAK,SAAS,OAAO,IAAI,KAAK,SAAS,UAAU,IAAI,KAAK,SAAS,iBAAiB,CAAE,QAAO;AAC1H,KAAI,KAAK,SAAS,eAAe,CAAE,QAAO;AAC1C,QAAO;;AAGT,SAAS,kBAAkB,KAAa,MAAc,KAAmB;AACvE,MAAK,MAAM,SAAS,YAAY,KAAK,EAAE,eAAe,MAAM,CAAC,EAAE;EAC7D,MAAM,OAAO,KAAK,KAAK,MAAM,KAAK;EAClC,MAAM,MAAM,SAAS,MAAM,KAAK,CAAC,QAAQ,OAAO,IAAI;AACpD,MAAI,0BAA0B,IAAI,CAAE;AACpC,MAAI,MAAM,aAAa,CACrB,mBAAkB,KAAK,MAAM,KAAK;WACzB,MAAM,QAAQ,CACvB,KAAI,QAAQ,KAAK,aAAa,KAAK,CAAC;;;AAK1C,SAAS,wBAAwB,QAKtB;AACT,WAAU,OAAO,QAAQ,EAAE,WAAW,MAAM,CAAC;CAC7C,MAAM,OAAO,OAAO,OAAO,YAAY,QAAQ,OAAO,SAAS,GAAG,CAC/D,QAAQ,MAAM,GAAG,CACjB,QAAQ,WAAW,IAAI,CACvB,QAAQ,qBAAqB,IAAI;CACpC,MAAM,UAAU,OAAO,OAAO,SAAS,WAAW,OAAO,YAAY,WAAW,QAAQ;CACxF,MAAM,OAAO,GAAG,KAAK,GAAG;CACxB,MAAM,UAAU,KAAK,OAAO,QAAQ,GAAG,KAAK,MAAM;CAClD,MAAM,MAAM,IAAI,QAAQ;AACxB,mBAAkB,KAAK,OAAO,cAAc,OAAO,aAAa;AAChE,KAAI,SAAS,QAAQ;CAErB,MAAM,SAAS,aAAa,QAAQ;CACpC,MAAM,YAAY,WAAW,SAAS,CAAC,OAAO,OAAO,CAAC,OAAO,MAAM;CACnE,MAAM,YAAY,UAAU,WAAW,SAAS,CAAC,OAAO,OAAO,CAAC,OAAO,SAAS;AAChF,eAAc,KAAK,OAAO,QAAQ,GAAG,KAAK,SAAS,EAAE,GAAG,UAAU,IAAI,SAAS,QAAQ,CAAC,IAAI;AAC5F,eACE,KAAK,OAAO,QAAQ,GAAG,KAAK,gBAAgB,EAC5C,KAAK,UACH;EACE,IAAI,OAAO,SAAS;EACpB,MAAM,OAAO,SAAS;EACtB;EACA,UAAU,SAAS,QAAQ;EAC3B;EACA,UAAU,OAAO;EACjB,aAAa,OAAO;EACrB,EACD,MACA,EACD,CACF;AACD,QAAO;;AAGT,SAAS,iBAAiB,GAA2B;AACnD,MAAK,MAAM,KAAK,EACd,KAAI,EAAE,UAAU,QACd,SAAQ,MAAM,GAAG,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,QAAQ;UAC1C,EAAE,UAAU,UACrB,SAAQ,IAAI,GAAG,OAAO,OAAO,UAAU,CAAC,IAAI,EAAE,QAAQ;KAEtD,SAAQ,IAAI,GAAG,OAAO,KAAK,OAAO,CAAC,IAAI,EAAE,QAAQ;;AAKvD,SAAgB,6BAAsC;AACpD,QAAO,IAAI,QAAQ,OAAO,CACvB,YAAY,0DAA0D,CACtE,SAAS,SAAS,4DAA4D,IAAI,CAClF,OAAO,eAAe,gEAAgE,GAAG,CACzF,OAAO,iBAAiB,mDAAiD,CACzE,OAAO,aAAa,2CAA2C,MAAM,CACrE,QAAQ,KAAa,SAA8D;EAClF,MAAM,aAAa,kCAAkC,OAAO,IAAI;EAChE,MAAM,EAAE,cAAc,UAAU,aAAa,gBAAgB;EAC7D,MAAM,SAAS,KAAK,OAAO,KAAK,IAAI,SAAS,IAAI,QAAQ,KAAK,IAAI,GAAG;AACrE,mBAAiB,YAAY;AAE7B,MAAI,CAAC,WAAW,MAAM,CAAC,YAAY,CAAC,aAAa;AAC/C,WAAQ,MAAM,OAAO,IAAI,6CAA6C,CAAC;AACvE,WAAQ,KAAK,EAAE;;AAGjB,MAAI,KAAK,QAAQ;AACf,WAAQ,IAAI,OAAO,MAAM,KAAK,EAAE,iCAAiC;AACjE;;EAGF,MAAM,UAAU,SAAS,YAAY,QAAQ,GAAI,YAAY,UAAsC;AACnG,MAAI,KAAK,WAAW,WAAW,OAAO,QAAQ,gBAAgB,SAC5D,KAAI;AACF,WAAQ,IAAI,OAAO,KAAK,UAAU,EAAE,qBAAqB;AACzD,YAAS,oBAAoB;IAAE,KAAK;IAAc,OAAO;IAAW,CAAC;WAC9D,GAAG;AACV,WAAQ,MACN,OAAO,IAAI,SAAS,EACpB,oBAAoB,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE,GAC/D;AACD,WAAQ,KAAK,EAAE;;EAInB,IAAI;AACJ,MAAI;AACF,kBAAe,wBAAwB;IAAE;IAAc;IAAQ;IAAU;IAAa,CAAC;WAChF,GAAG;AACV,OAAI,MAAM,EAAE,KAAK,GAAG,EAAE,cAAc;AACpC,WAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE,CAAC;AAC/E,WAAQ,KAAK,EAAE;;AAGjB,UAAQ,IAAI,GAAG;AACf,UAAQ,IAAI,OAAO,MAAM,iBAAiB,EAAE,aAAa;AACzD,UAAQ,IAAI,OAAO,KAAK,aAAa,EAAE,2DAA2D;AAClG,UAAQ,IAAI,OAAO,KAAK,QAAQ,EAAE,gGAAgG;GAClI"}
+{"version":3,"file":"extension-pack.js","names":[],"sources":["../../../../src/cli/commands/extension-pack.ts"],"sourcesContent":["import { createHash } from 'node:crypto';\nimport { execSync } from 'node:child_process';\nimport { existsSync, readFileSync, readdirSync, mkdirSync, statSync, writeFileSync } from 'node:fs';\nimport { basename, join, relative, resolve } from 'node:path';\n\nimport AdmZip from 'adm-zip';\nimport { Command } from 'commander';\n\nimport { checkEngineCompatibility } from '../../extensions/engine-check.js';\nimport type { ExtensionManifest } from '../../extensions/types/index.js';\nimport { normalizeExtensionManifest } from '../../extensions/normalize-manifest.js';\nimport { collectExtensionPackageDependencyIssues } from '../../extensions/package-contract.js';\nimport { PACKAGE_VERSION } from '../../package-version.js';\nimport { createLogger } from '../../utils/logger.js';\nimport { colors } from '../utils/colors.js';\n\nconst log = createLogger('ExtensionPack');\nconst MANIFEST = 'xopc.extension.json';\n\ninterface PackContext {\n  extensionDir: string;\n  manifest: ExtensionManifest;\n  packageJson: Record<string, unknown>;\n  diagnostics: PackDiagnostic[];\n}\n\nexport interface PackDiagnostic {\n  level: 'error' | 'warning' | 'info';\n  message: string;\n}\n\nexport interface ExtensionPackageValidationResult {\n  extensionDir: string;\n  manifest: ExtensionManifest | null;\n  packageJson: Record<string, unknown> | null;\n  diagnostics: PackDiagnostic[];\n  ok: boolean;\n}\n\nfunction isRecord(x: unknown): x is Record<string, unknown> {\n  return typeof x === 'object' && x !== null && !Array.isArray(x);\n}\n\nfunction loadJson(path: string): unknown {\n  return JSON.parse(readFileSync(path, 'utf-8') as string) as unknown;\n}\n\nfunction loadManifestAtRoot(\n  root: string,\n  diagnostics: PackDiagnostic[],\n): ExtensionManifest | null {\n  const manifestPath = join(root, MANIFEST);\n  if (!existsSync(manifestPath)) {\n    diagnostics.push({ level: 'error', message: `Missing ${MANIFEST} in ${root}` });\n    return null;\n  }\n  try {\n    const raw = loadJson(manifestPath);\n    if (!isRecord(raw)) {\n      diagnostics.push({ level: 'error', message: `${MANIFEST} must be a JSON object` });\n      return null;\n    }\n    return normalizeExtensionManifest(raw);\n  } catch (e) {\n    diagnostics.push({\n      level: 'error',\n      message: `Failed to parse ${MANIFEST}: ${e instanceof Error ? e.message : String(e)}`,\n    });\n    return null;\n  }\n}\n\nfunction collectContributionPaths(manifest: ExtensionManifest, extRoot: string): string[] {\n  const out: string[] = [];\n  const ui = manifest.ui;\n  if (ui?.main) out.push(join(extRoot, ui.main));\n  if (ui?.icon) out.push(join(extRoot, ui.icon));\n  const c = ui?.contributions;\n  if (!c) return out;\n  for (const p of c.sidebarPanels ?? []) {\n    if (p.entrypoint) out.push(join(extRoot, p.entrypoint));\n  }\n  for (const p of c.settingsPanels ?? []) {\n    if (p.entrypoint) out.push(join(extRoot, p.entrypoint));\n  }\n  for (const p of c.chatWidgets ?? []) {\n    if (p.entrypoint) out.push(join(extRoot, p.entrypoint));\n  }\n  for (const p of c.pages ?? []) {\n    if (p.entrypoint) out.push(join(extRoot, p.entrypoint));\n  }\n  for (const p of c.statusBarItems ?? []) {\n    if (p.entrypoint) out.push(join(extRoot, p.entrypoint));\n  }\n  return out;\n}\n\nfunction resolveMainFile(root: string, main: string): string | null {\n  const p = join(root, main);\n  return existsSync(p) ? p : null;\n}\n\nfunction validateManifest(ctx: PackContext): void {\n  const { manifest, extensionDir, diagnostics } = ctx;\n  if (!manifest.id || !String(manifest.id).trim()) {\n    diagnostics.push({ level: 'error', message: 'Manifest \"id\" is required' });\n  }\n  if (!manifest.main) {\n    diagnostics.push({ level: 'error', message: 'Manifest \"main\" is required and must point at built JavaScript' });\n  }\n  const mainFile = manifest.main ? resolveMainFile(extensionDir, manifest.main) : null;\n  if (!mainFile) {\n    diagnostics.push({\n      level: 'error',\n      message: `Main entry not found: ${manifest.main ?? '(missing)'}`,\n    });\n  }\n\n  if (manifest.ui?.main) {\n    const p = join(extensionDir, manifest.ui.main);\n    if (!existsSync(p)) {\n      diagnostics.push({ level: 'error', message: `ui.main missing: ${manifest.ui.main}` });\n    }\n  }\n\n  for (const p of collectContributionPaths(manifest, extensionDir)) {\n    if (!existsSync(p)) {\n      diagnostics.push({ level: 'error', message: `UI contribution entry missing: ${p}` });\n    }\n  }\n\n  if (manifest.main && !/\\.(mjs|cjs|js)$/i.test(manifest.main)) {\n    diagnostics.push({\n      level: 'error',\n      message: `Strict package contract requires manifest.main to point at built JavaScript, got \"${manifest.main}\"`,\n    });\n  }\n\n  if (!manifest.engines?.xopc) {\n    diagnostics.push({\n      level: 'error',\n      message: 'manifest engines.xopc is required for independent extension packages',\n    });\n  } else {\n    const r = checkEngineCompatibility(PACKAGE_VERSION, manifest.engines.xopc);\n    if (r.parseWarning) {\n      diagnostics.push({\n        level: 'error',\n        message: `engines.xopc parse issue — ${r.reason ?? 'unknown'}`,\n      });\n    } else if (!r.compatible) {\n      diagnostics.push({\n        level: 'error',\n        message: `engines.xopc not satisfied by current xopc ${PACKAGE_VERSION}: ${r.reason ?? manifest.engines.xopc}`,\n      });\n    }\n  }\n}\n\nfunction validatePackageJson(ctx: PackContext): void {\n  const { packageJson, diagnostics, extensionDir } = ctx;\n  for (const issue of collectExtensionPackageDependencyIssues(packageJson, {\n    strictRuntimeSdkDeps: true,\n  })) {\n    diagnostics.push({\n      level: 'error',\n      message: issue.message,\n    });\n  }\n\n  const files = packageJson.files;\n  if (Array.isArray(files)) {\n    if (!files.some((f) => f === MANIFEST || f === '**/xopc.extension.json')) {\n      diagnostics.push({\n        level: 'error',\n        message: `package.json \"files\" must include \"${MANIFEST}\" so the archive ships the manifest`,\n      });\n    }\n  }\n\n  const keywords = packageJson.keywords;\n  if (Array.isArray(keywords) && !keywords.includes('xopc-extension')) {\n    diagnostics.push({\n      level: 'info',\n      message: 'Consider adding \"xopc-extension\" to package.json keywords for discoverability',\n    });\n  } else if (!Array.isArray(keywords)) {\n    diagnostics.push({ level: 'info', message: 'Consider adding keywords: [\"xopc-extension\", ...]' });\n  }\n\n  if (!existsSync(join(extensionDir, 'package.json'))) {\n    diagnostics.push({ level: 'error', message: 'package.json is missing' });\n  }\n}\n\nconst SECRET_FILE_RE = /(^|\\/)(\\.env(?:\\..*)?|\\.npmrc|\\.yarnrc|id_rsa|id_ed25519|.*\\.(?:pem|key|p12|pfx))$/i;\nconst SECRET_TEXT_RE = /(sk-[A-Za-z0-9_-]{20,}|xox[baprs]-[A-Za-z0-9-]{20,}|AKIA[0-9A-Z]{16}|-----BEGIN (?:RSA |OPENSSH |EC |DSA )?PRIVATE KEY-----)/;\n\nfunction scanUnsafeFiles(root: string, diagnostics: PackDiagnostic[]): void {\n  const walk = (dir: string) => {\n    for (const entry of readdirSync(dir, { withFileTypes: true })) {\n      const full = join(dir, entry.name);\n      const rel = relative(root, full).replace(/\\\\/g, '/');\n      if (shouldExcludeFromArtifact(rel)) continue;\n      if (SECRET_FILE_RE.test(rel)) {\n        diagnostics.push({ level: 'error', message: `Unsafe secret-like file would be packaged: ${rel}` });\n        continue;\n      }\n      if (entry.isDirectory()) {\n        walk(full);\n      } else if (entry.isFile()) {\n        const size = statSync(full).size;\n        if (size <= 1024 * 1024 && /\\.(?:js|mjs|cjs|json|html|css|md|txt|map)$/i.test(entry.name)) {\n          const text = readFileSync(full, 'utf-8');\n          if (SECRET_TEXT_RE.test(text)) {\n            diagnostics.push({ level: 'error', message: `Potential secret token found in packaged file: ${rel}` });\n          }\n        }\n      }\n    }\n  };\n  walk(root);\n}\n\nexport function validateExtensionPackageDirectory(dir: string): ExtensionPackageValidationResult {\n  const extensionDir = resolve(dir || '.');\n  const diagnostics: PackDiagnostic[] = [];\n  if (!existsSync(extensionDir) || !existsSync(join(extensionDir, 'package.json'))) {\n    diagnostics.push({ level: 'error', message: `Not an extension project (no package.json): ${extensionDir}` });\n    return { extensionDir, manifest: null, packageJson: null, diagnostics, ok: false };\n  }\n  const manifest = loadManifestAtRoot(extensionDir, diagnostics);\n  let packageJson: Record<string, unknown> | null = null;\n  try {\n    packageJson = loadJson(join(extensionDir, 'package.json')) as Record<string, unknown>;\n    if (!isRecord(packageJson)) throw new Error('package.json must be an object');\n  } catch (e) {\n    diagnostics.push({ level: 'error', message: e instanceof Error ? e.message : String(e) });\n  }\n  if (manifest && packageJson) {\n    const ctx: PackContext = { extensionDir, manifest, packageJson, diagnostics };\n    validateManifest(ctx);\n    validatePackageJson(ctx);\n    scanUnsafeFiles(extensionDir, diagnostics);\n  }\n  return {\n    extensionDir,\n    manifest,\n    packageJson,\n    diagnostics,\n    ok: !diagnostics.some((d) => d.level === 'error'),\n  };\n}\n\nfunction shouldExcludeFromArtifact(rel: string): boolean {\n  const parts = rel.split(/[\\\\/]+/);\n  if (parts.some((p) => p === 'node_modules' || p === '.git' || p === '.turbo' || p === '.cache')) return true;\n  const name = parts.at(-1) ?? rel;\n  if (name === '.DS_Store') return true;\n  if (name.endsWith('.tgz') || name.endsWith('.zip') || name.endsWith('.sha256') || name.endsWith('.manifest.json')) return true;\n  if (name.endsWith('.tsbuildinfo')) return true;\n  return false;\n}\n\nfunction addDirectoryToZip(zip: AdmZip, root: string, dir: string): void {\n  for (const entry of readdirSync(dir, { withFileTypes: true })) {\n    const full = join(dir, entry.name);\n    const rel = relative(root, full).replace(/\\\\/g, '/');\n    if (shouldExcludeFromArtifact(rel)) continue;\n    if (entry.isDirectory()) {\n      addDirectoryToZip(zip, root, full);\n    } else if (entry.isFile()) {\n      zip.addFile(rel, readFileSync(full));\n    }\n  }\n}\n\nexport function writeStoreReadyArtifact(params: {\n  extensionDir: string;\n  outDir: string;\n  manifest: ExtensionManifest;\n  packageJson: Record<string, unknown>;\n}): string {\n  mkdirSync(params.outDir, { recursive: true });\n  const name = String(params.packageJson.name ?? params.manifest.id)\n    .replace(/^@/, '')\n    .replace(/[\\\\/]+/g, '-')\n    .replace(/[^A-Za-z0-9._-]+/g, '-');\n  const version = String(params.manifest.version ?? params.packageJson.version ?? '0.0.0');\n  const base = `${name}-${version}`;\n  const zipPath = join(params.outDir, `${base}.zip`);\n  const zip = new AdmZip();\n  addDirectoryToZip(zip, params.extensionDir, params.extensionDir);\n  zip.writeZip(zipPath);\n\n  const buffer = readFileSync(zipPath);\n  const sha256Hex = createHash('sha256').update(buffer).digest('hex');\n  const integrity = `sha256-${createHash('sha256').update(buffer).digest('base64')}`;\n  writeFileSync(join(params.outDir, `${base}.sha256`), `${sha256Hex}  ${basename(zipPath)}\\n`);\n  writeFileSync(\n    join(params.outDir, `${base}.manifest.json`),\n    JSON.stringify(\n      {\n        id: params.manifest.id,\n        name: params.manifest.name,\n        version,\n        artifact: basename(zipPath),\n        sha256: sha256Hex,\n        integrity,\n        manifest: params.manifest,\n        packageJson: params.packageJson,\n      },\n      null,\n      2,\n    ),\n  );\n  return zipPath;\n}\n\nfunction printDiagnostics(d: PackDiagnostic[]): void {\n  for (const x of d) {\n    if (x.level === 'error') {\n      console.error(`${colors.red('error')}:`, x.message);\n    } else if (x.level === 'warning') {\n      console.log(`${colors.yellow('warning')}:`, x.message);\n    } else {\n      console.log(`${colors.cyan('info')}:`, x.message);\n    }\n  }\n}\n\nexport function createExtensionPackCommand(): Command {\n  return new Command('pack')\n    .description('Package an extension as a store-ready .zip artifact set')\n    .argument('[dir]', 'Extension directory (default: current working directory)', '.')\n    .option('--out <dir>', 'Output directory for the artifact set (default: extension directory)', '')\n    .option('--no-build-ui', 'Skip automatic \"npm run build:ui\" when defined')\n    .option('--dry-run', 'Validate only; do not create an archive', false)\n    .action((dir: string, opts: { out?: string; buildUi: boolean; dryRun: boolean }) => {\n      const validation = validateExtensionPackageDirectory(dir || '.');\n      const { extensionDir, manifest, packageJson, diagnostics } = validation;\n      const outDir = opts.out && opts.out.length > 0 ? resolve(opts.out) : extensionDir;\n      printDiagnostics(diagnostics);\n\n      if (!validation.ok || !manifest || !packageJson) {\n        console.error(colors.red('Pack validation failed (fix errors above).'));\n        process.exit(1);\n      }\n\n      if (opts.dryRun) {\n        console.log(colors.green('OK'), ' — dry run; no archive created');\n        return;\n      }\n\n      const scripts = isRecord(packageJson.scripts) ? (packageJson.scripts as Record<string, unknown>) : null;\n      if (opts.buildUi && scripts && typeof scripts['build:ui'] === 'string') {\n        try {\n          console.log(colors.cyan('Running'), 'npm run build:ui …');\n          execSync('npm run build:ui', { cwd: extensionDir, stdio: 'inherit' });\n        } catch (e) {\n          console.error(\n            colors.red('error:'),\n            `UI build failed: ${e instanceof Error ? e.message : String(e)}`,\n          );\n          process.exit(1);\n        }\n      }\n\n      let artifactPath: string;\n      try {\n        artifactPath = writeStoreReadyArtifact({ extensionDir, outDir, manifest, packageJson });\n      } catch (e) {\n        log.error({ err: e }, 'pack failed');\n        console.error(colors.red('error:'), e instanceof Error ? e.message : String(e));\n        process.exit(1);\n      }\n\n      console.log('');\n      console.log(colors.green('Pack complete:'), artifactPath);\n      console.log(colors.cyan('Generated:'), '.zip artifact, .sha256 checksum, .manifest.json metadata');\n      console.log(colors.cyan('Next:'), 'upload the generated artifact set to store.xopc.ai or install the zip via the store pipeline.');\n    });\n}\n"],"mappings":";;;;;;;;;;;;;;yBAUoF;sBAEzB;aACN;AAGrD,MAAM,MAAM,aAAa,gBAAgB;AACzC,MAAM,WAAW;AAsBjB,SAAS,SAAS,GAA0C;AAC1D,QAAO,OAAO,MAAM,YAAY,MAAM,QAAQ,CAAC,MAAM,QAAQ,EAAE;;AAGjE,SAAS,SAAS,MAAuB;AACvC,QAAO,KAAK,MAAM,aAAa,MAAM,QAAQ,CAAW;;AAG1D,SAAS,mBACP,MACA,aAC0B;CAC1B,MAAM,eAAe,KAAK,MAAM,SAAS;AACzC,KAAI,CAAC,WAAW,aAAa,EAAE;AAC7B,cAAY,KAAK;GAAE,OAAO;GAAS,SAAS,WAAW,SAAS,MAAM;GAAQ,CAAC;AAC/E,SAAO;;AAET,KAAI;EACF,MAAM,MAAM,SAAS,aAAa;AAClC,MAAI,CAAC,SAAS,IAAI,EAAE;AAClB,eAAY,KAAK;IAAE,OAAO;IAAS,SAAS,GAAG,SAAS;IAAyB,CAAC;AAClF,UAAO;;AAET,SAAO,2BAA2B,IAAI;UAC/B,GAAG;AACV,cAAY,KAAK;GACf,OAAO;GACP,SAAS,mBAAmB,SAAS,IAAI,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;GACpF,CAAC;AACF,SAAO;;;AAIX,SAAS,yBAAyB,UAA6B,SAA2B;CACxF,MAAM,MAAgB,EAAE;CACxB,MAAM,KAAK,SAAS;AACpB,KAAI,IAAI,KAAM,KAAI,KAAK,KAAK,SAAS,GAAG,KAAK,CAAC;AAC9C,KAAI,IAAI,KAAM,KAAI,KAAK,KAAK,SAAS,GAAG,KAAK,CAAC;CAC9C,MAAM,IAAI,IAAI;AACd,KAAI,CAAC,EAAG,QAAO;AACf,MAAK,MAAM,KAAK,EAAE,iBAAiB,EAAE,CACnC,KAAI,EAAE,WAAY,KAAI,KAAK,KAAK,SAAS,EAAE,WAAW,CAAC;AAEzD,MAAK,MAAM,KAAK,EAAE,kBAAkB,EAAE,CACpC,KAAI,EAAE,WAAY,KAAI,KAAK,KAAK,SAAS,EAAE,WAAW,CAAC;AAEzD,MAAK,MAAM,KAAK,EAAE,eAAe,EAAE,CACjC,KAAI,EAAE,WAAY,KAAI,KAAK,KAAK,SAAS,EAAE,WAAW,CAAC;AAEzD,MAAK,MAAM,KAAK,EAAE,SAAS,EAAE,CAC3B,KAAI,EAAE,WAAY,KAAI,KAAK,KAAK,SAAS,EAAE,WAAW,CAAC;AAEzD,MAAK,MAAM,KAAK,EAAE,kBAAkB,EAAE,CACpC,KAAI,EAAE,WAAY,KAAI,KAAK,KAAK,SAAS,EAAE,WAAW,CAAC;AAEzD,QAAO;;AAGT,SAAS,gBAAgB,MAAc,MAA6B;CAClE,MAAM,IAAI,KAAK,MAAM,KAAK;AAC1B,QAAO,WAAW,EAAE,GAAG,IAAI;;AAG7B,SAAS,iBAAiB,KAAwB;CAChD,MAAM,EAAE,UAAU,cAAc,gBAAgB;AAChD,KAAI,CAAC,SAAS,MAAM,CAAC,OAAO,SAAS,GAAG,CAAC,MAAM,CAC7C,aAAY,KAAK;EAAE,OAAO;EAAS,SAAS;EAA6B,CAAC;AAE5E,KAAI,CAAC,SAAS,KACZ,aAAY,KAAK;EAAE,OAAO;EAAS,SAAS;EAAkE,CAAC;AAGjH,KAAI,EADa,SAAS,OAAO,gBAAgB,cAAc,SAAS,KAAK,GAAG,MAE9E,aAAY,KAAK;EACf,OAAO;EACP,SAAS,yBAAyB,SAAS,QAAQ;EACpD,CAAC;AAGJ,KAAI,SAAS,IAAI;MAEX,CAAC,WADK,KAAK,cAAc,SAAS,GAAG,KACxB,CAAC,CAChB,aAAY,KAAK;GAAE,OAAO;GAAS,SAAS,oBAAoB,SAAS,GAAG;GAAQ,CAAC;;AAIzF,MAAK,MAAM,KAAK,yBAAyB,UAAU,aAAa,CAC9D,KAAI,CAAC,WAAW,EAAE,CAChB,aAAY,KAAK;EAAE,OAAO;EAAS,SAAS,kCAAkC;EAAK,CAAC;AAIxF,KAAI,SAAS,QAAQ,CAAC,mBAAmB,KAAK,SAAS,KAAK,CAC1D,aAAY,KAAK;EACf,OAAO;EACP,SAAS,qFAAqF,SAAS,KAAK;EAC7G,CAAC;AAGJ,KAAI,CAAC,SAAS,SAAS,KACrB,aAAY,KAAK;EACf,OAAO;EACP,SAAS;EACV,CAAC;MACG;EACL,MAAM,IAAI,yBAAyB,iBAAiB,SAAS,QAAQ,KAAK;AAC1E,MAAI,EAAE,aACJ,aAAY,KAAK;GACf,OAAO;GACP,SAAS,8BAA8B,EAAE,UAAU;GACpD,CAAC;WACO,CAAC,EAAE,WACZ,aAAY,KAAK;GACf,OAAO;GACP,SAAS,8CAA8C,gBAAgB,IAAI,EAAE,UAAU,SAAS,QAAQ;GACzG,CAAC;;;AAKR,SAAS,oBAAoB,KAAwB;CACnD,MAAM,EAAE,aAAa,aAAa,iBAAiB;AACnD,MAAK,MAAM,SAAS,wCAAwC,aAAa,EACvE,sBAAsB,MACvB,CAAC,CACA,aAAY,KAAK;EACf,OAAO;EACP,SAAS,MAAM;EAChB,CAAC;CAGJ,MAAM,QAAQ,YAAY;AAC1B,KAAI,MAAM,QAAQ,MAAM;MAClB,CAAC,MAAM,MAAM,MAAM,MAAM,YAAY,MAAM,yBAAyB,CACtE,aAAY,KAAK;GACf,OAAO;GACP,SAAS,sCAAsC,SAAS;GACzD,CAAC;;CAIN,MAAM,WAAW,YAAY;AAC7B,KAAI,MAAM,QAAQ,SAAS,IAAI,CAAC,SAAS,SAAS,iBAAiB,CACjE,aAAY,KAAK;EACf,OAAO;EACP,SAAS;EACV,CAAC;UACO,CAAC,MAAM,QAAQ,SAAS,CACjC,aAAY,KAAK;EAAE,OAAO;EAAQ,SAAS;EAAqD,CAAC;AAGnG,KAAI,CAAC,WAAW,KAAK,cAAc,eAAe,CAAC,CACjD,aAAY,KAAK;EAAE,OAAO;EAAS,SAAS;EAA2B,CAAC;;AAI5E,MAAM,iBAAiB;AACvB,MAAM,iBAAiB;AAEvB,SAAS,gBAAgB,MAAc,aAAqC;CAC1E,MAAM,QAAQ,QAAgB;AAC5B,OAAK,MAAM,SAAS,YAAY,KAAK,EAAE,eAAe,MAAM,CAAC,EAAE;GAC7D,MAAM,OAAO,KAAK,KAAK,MAAM,KAAK;GAClC,MAAM,MAAM,SAAS,MAAM,KAAK,CAAC,QAAQ,OAAO,IAAI;AACpD,OAAI,0BAA0B,IAAI,CAAE;AACpC,OAAI,eAAe,KAAK,IAAI,EAAE;AAC5B,gBAAY,KAAK;KAAE,OAAO;KAAS,SAAS,8CAA8C;KAAO,CAAC;AAClG;;AAEF,OAAI,MAAM,aAAa,CACrB,MAAK,KAAK;YACD,MAAM,QAAQ;QACV,SAAS,KAAK,CAAC,QAChB,OAAO,QAAQ,8CAA8C,KAAK,MAAM,KAAK,EAAE;KACzF,MAAM,OAAO,aAAa,MAAM,QAAQ;AACxC,SAAI,eAAe,KAAK,KAAK,CAC3B,aAAY,KAAK;MAAE,OAAO;MAAS,SAAS,kDAAkD;MAAO,CAAC;;;;;AAMhH,MAAK,KAAK;;AAGZ,SAAgB,kCAAkC,KAA+C;CAC/F,MAAM,eAAe,QAAQ,OAAO,IAAI;CACxC,MAAM,cAAgC,EAAE;AACxC,KAAI,CAAC,WAAW,aAAa,IAAI,CAAC,WAAW,KAAK,cAAc,eAAe,CAAC,EAAE;AAChF,cAAY,KAAK;GAAE,OAAO;GAAS,SAAS,+CAA+C;GAAgB,CAAC;AAC5G,SAAO;GAAE;GAAc,UAAU;GAAM,aAAa;GAAM;GAAa,IAAI;GAAO;;CAEpF,MAAM,WAAW,mBAAmB,cAAc,YAAY;CAC9D,IAAI,cAA8C;AAClD,KAAI;AACF,gBAAc,SAAS,KAAK,cAAc,eAAe,CAAC;AAC1D,MAAI,CAAC,SAAS,YAAY,CAAE,OAAM,IAAI,MAAM,iCAAiC;UACtE,GAAG;AACV,cAAY,KAAK;GAAE,OAAO;GAAS,SAAS,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;GAAE,CAAC;;AAE3F,KAAI,YAAY,aAAa;EAC3B,MAAM,MAAmB;GAAE;GAAc;GAAU;GAAa;GAAa;AAC7E,mBAAiB,IAAI;AACrB,sBAAoB,IAAI;AACxB,kBAAgB,cAAc,YAAY;;AAE5C,QAAO;EACL;EACA;EACA;EACA;EACA,IAAI,CAAC,YAAY,MAAM,MAAM,EAAE,UAAU,QAAQ;EAClD;;AAGH,SAAS,0BAA0B,KAAsB;CACvD,MAAM,QAAQ,IAAI,MAAM,SAAS;AACjC,KAAI,MAAM,MAAM,MAAM,MAAM,kBAAkB,MAAM,UAAU,MAAM,YAAY,MAAM,SAAS,CAAE,QAAO;CACxG,MAAM,OAAO,MAAM,GAAG,GAAG,IAAI;AAC7B,KAAI,SAAS,YAAa,QAAO;AACjC,KAAI,KAAK,SAAS,OAAO,IAAI,KAAK,SAAS,OAAO,IAAI,KAAK,SAAS,UAAU,IAAI,KAAK,SAAS,iBAAiB,CAAE,QAAO;AAC1H,KAAI,KAAK,SAAS,eAAe,CAAE,QAAO;AAC1C,QAAO;;AAGT,SAAS,kBAAkB,KAAa,MAAc,KAAmB;AACvE,MAAK,MAAM,SAAS,YAAY,KAAK,EAAE,eAAe,MAAM,CAAC,EAAE;EAC7D,MAAM,OAAO,KAAK,KAAK,MAAM,KAAK;EAClC,MAAM,MAAM,SAAS,MAAM,KAAK,CAAC,QAAQ,OAAO,IAAI;AACpD,MAAI,0BAA0B,IAAI,CAAE;AACpC,MAAI,MAAM,aAAa,CACrB,mBAAkB,KAAK,MAAM,KAAK;WACzB,MAAM,QAAQ,CACvB,KAAI,QAAQ,KAAK,aAAa,KAAK,CAAC;;;AAK1C,SAAgB,wBAAwB,QAK7B;AACT,WAAU,OAAO,QAAQ,EAAE,WAAW,MAAM,CAAC;CAC7C,MAAM,OAAO,OAAO,OAAO,YAAY,QAAQ,OAAO,SAAS,GAAG,CAC/D,QAAQ,MAAM,GAAG,CACjB,QAAQ,WAAW,IAAI,CACvB,QAAQ,qBAAqB,IAAI;CACpC,MAAM,UAAU,OAAO,OAAO,SAAS,WAAW,OAAO,YAAY,WAAW,QAAQ;CACxF,MAAM,OAAO,GAAG,KAAK,GAAG;CACxB,MAAM,UAAU,KAAK,OAAO,QAAQ,GAAG,KAAK,MAAM;CAClD,MAAM,MAAM,IAAI,QAAQ;AACxB,mBAAkB,KAAK,OAAO,cAAc,OAAO,aAAa;AAChE,KAAI,SAAS,QAAQ;CAErB,MAAM,SAAS,aAAa,QAAQ;CACpC,MAAM,YAAY,WAAW,SAAS,CAAC,OAAO,OAAO,CAAC,OAAO,MAAM;CACnE,MAAM,YAAY,UAAU,WAAW,SAAS,CAAC,OAAO,OAAO,CAAC,OAAO,SAAS;AAChF,eAAc,KAAK,OAAO,QAAQ,GAAG,KAAK,SAAS,EAAE,GAAG,UAAU,IAAI,SAAS,QAAQ,CAAC,IAAI;AAC5F,eACE,KAAK,OAAO,QAAQ,GAAG,KAAK,gBAAgB,EAC5C,KAAK,UACH;EACE,IAAI,OAAO,SAAS;EACpB,MAAM,OAAO,SAAS;EACtB;EACA,UAAU,SAAS,QAAQ;EAC3B,QAAQ;EACR;EACA,UAAU,OAAO;EACjB,aAAa,OAAO;EACrB,EACD,MACA,EACD,CACF;AACD,QAAO;;AAGT,SAAS,iBAAiB,GAA2B;AACnD,MAAK,MAAM,KAAK,EACd,KAAI,EAAE,UAAU,QACd,SAAQ,MAAM,GAAG,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,QAAQ;UAC1C,EAAE,UAAU,UACrB,SAAQ,IAAI,GAAG,OAAO,OAAO,UAAU,CAAC,IAAI,EAAE,QAAQ;KAEtD,SAAQ,IAAI,GAAG,OAAO,KAAK,OAAO,CAAC,IAAI,EAAE,QAAQ;;AAKvD,SAAgB,6BAAsC;AACpD,QAAO,IAAI,QAAQ,OAAO,CACvB,YAAY,0DAA0D,CACtE,SAAS,SAAS,4DAA4D,IAAI,CAClF,OAAO,eAAe,wEAAwE,GAAG,CACjG,OAAO,iBAAiB,mDAAiD,CACzE,OAAO,aAAa,2CAA2C,MAAM,CACrE,QAAQ,KAAa,SAA8D;EAClF,MAAM,aAAa,kCAAkC,OAAO,IAAI;EAChE,MAAM,EAAE,cAAc,UAAU,aAAa,gBAAgB;EAC7D,MAAM,SAAS,KAAK,OAAO,KAAK,IAAI,SAAS,IAAI,QAAQ,KAAK,IAAI,GAAG;AACrE,mBAAiB,YAAY;AAE7B,MAAI,CAAC,WAAW,MAAM,CAAC,YAAY,CAAC,aAAa;AAC/C,WAAQ,MAAM,OAAO,IAAI,6CAA6C,CAAC;AACvE,WAAQ,KAAK,EAAE;;AAGjB,MAAI,KAAK,QAAQ;AACf,WAAQ,IAAI,OAAO,MAAM,KAAK,EAAE,iCAAiC;AACjE;;EAGF,MAAM,UAAU,SAAS,YAAY,QAAQ,GAAI,YAAY,UAAsC;AACnG,MAAI,KAAK,WAAW,WAAW,OAAO,QAAQ,gBAAgB,SAC5D,KAAI;AACF,WAAQ,IAAI,OAAO,KAAK,UAAU,EAAE,qBAAqB;AACzD,YAAS,oBAAoB;IAAE,KAAK;IAAc,OAAO;IAAW,CAAC;WAC9D,GAAG;AACV,WAAQ,MACN,OAAO,IAAI,SAAS,EACpB,oBAAoB,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE,GAC/D;AACD,WAAQ,KAAK,EAAE;;EAInB,IAAI;AACJ,MAAI;AACF,kBAAe,wBAAwB;IAAE;IAAc;IAAQ;IAAU;IAAa,CAAC;WAChF,GAAG;AACV,OAAI,MAAM,EAAE,KAAK,GAAG,EAAE,cAAc;AACpC,WAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE,CAAC;AAC/E,WAAQ,KAAK,EAAE;;AAGjB,UAAQ,IAAI,GAAG;AACf,UAAQ,IAAI,OAAO,MAAM,iBAAiB,EAAE,aAAa;AACzD,UAAQ,IAAI,OAAO,KAAK,aAAa,EAAE,2DAA2D;AAClG,UAAQ,IAAI,OAAO,KAAK,QAAQ,EAAE,gGAAgG;GAClI"}

package/dist/src/commands/agents.config.d.ts

@@ -13,6 +13,7 @@ export declare function applyAgentConfig(cfg: Config, params: {
     workspace?: string;
     model?: string;
     models?: AgentEntry['models'];
+    extends?: AgentEntry['extends'];
     skills?: string[];
     tools?: AgentEntry['tools'];
 }): Config;

package/dist/src/commands/agents.config.js

@@ -43,6 +43,7 @@ function applyAgentConfig(cfg, params) {
 	const nextEntry = {
 		...base,
 		enabled: base.enabled ?? true,
+		...params.extends !== void 0 ? { extends: params.extends } : {},
 		...params.workspace ? { workspace: { root: params.workspace } } : {},
 		...params.models ? { models: params.models } : {},
 		...params.model ? { models: {

package/dist/src/commands/agents.config.js.map

@@ -1 +1 @@
-{"version":3,"file":"agents.config.js","names":[],"sources":["../../../src/commands/agents.config.ts"],"sourcesContent":["/**\n * Mutate `agents.list` / bindings when adding or removing agents.\n */\n\nimport { rm } from 'node:fs/promises';\nimport { existsSync } from 'node:fs';\n\nimport type { Config } from '../config/schema.js';\nimport {\n  listAgentEntries,\n  normalizeAgentId,\n  resolveAgentHomeDir,\n  resolveAgentWorkspaceDir,\n  resolveDefaultAgentId,\n  DEFAULT_AGENT_ID,\n} from '../agent/agent-scope.js';\n\ntype AgentEntry = NonNullable<NonNullable<Config['agents']>['list']>[number];\n\nexport { listAgentEntries };\n\nexport function findAgentEntryIndex(list: AgentEntry[], agentId: string): number {\n  const id = normalizeAgentId(agentId);\n  return list.findIndex((e) => normalizeAgentId(e.id) === id);\n}\n\nexport function applyAgentConfig(\n  cfg: Config,\n  params: {\n    agentId: string;\n    /** Used only when creating a previously absent agent entry. */\n    identity?: AgentEntry['identity'];\n    workspace?: string;\n    model?: string;\n    models?: AgentEntry['models'];\n    skills?: string[];\n    tools?: AgentEntry['tools'];\n  },\n): Config {\n  const agentId = normalizeAgentId(params.agentId);\n  const list = listAgentEntries(cfg);\n  const index = findAgentEntryIndex(list, agentId);\n  const nextTools = params.tools;\n  const base = index >= 0 ? list[index] : {\n    id: agentId,\n    enabled: true as const,\n    identity: params.identity ?? { name: agentId, role: 'Agent', language: 'en', tone: 'direct' },\n    responsibilities: { primary: ['Help the user complete tasks'] },\n    workspace: { root: `~/.xopc/workspace/${agentId}` },\n    tools: { builtin: {} },\n    skills: { mode: 'all' as const },\n    memory: { mode: 'confirmWrite' as const, sources: ['session' as const, 'curated' as const], writePolicy: { curated: 'confirm' as const } },\n    workflows: {},\n    boundaries: { requiresConfirmation: [], forbidden: [], escalation: [] },\n  };\n  const nextEntry: AgentEntry = {\n    ...base,\n    enabled: base.enabled ?? true,\n    ...(params.workspace ? { workspace: { root: params.workspace } } : {}),\n    ...(params.models ? { models: params.models } : {}),\n    ...(params.model\n      ? {\n          models: {\n            ...(base.models ?? {}),\n            defaultRole: 'deep',\n            roles: { ...(base.models?.roles ?? {}), deep: { model: params.model } },\n          },\n        }\n      : {}),\n    ...(params.skills ? { skills: { mode: 'allowlist' as const, allow: params.skills } } : {}),\n    ...(nextTools ? { tools: nextTools } : {}),\n  };\n  const nextList = [...list];\n  if (index >= 0) {\n    nextList[index] = nextEntry;\n  } else {\n    if (nextList.length === 0 && agentId !== normalizeAgentId(resolveDefaultAgentId(cfg))) {\n      nextList.push({\n        id: resolveDefaultAgentId(cfg),\n        enabled: true,\n        identity: { name: resolveDefaultAgentId(cfg), role: 'Agent', language: 'en', tone: 'direct' },\n        responsibilities: { primary: ['Help the user complete tasks'] },\n        workspace: { root: `~/.xopc/workspace/${resolveDefaultAgentId(cfg)}` },\n        tools: { builtin: {} },\n        skills: { mode: 'all' },\n        memory: { mode: 'confirmWrite', sources: ['session', 'curated'], writePolicy: { curated: 'confirm' } },\n        workflows: {},\n        boundaries: { requiresConfirmation: [], forbidden: [], escalation: [] },\n      });\n    }\n    nextList.push(nextEntry);\n  }\n  return {\n    ...cfg,\n    agents: {\n      ...cfg.agents,\n      list: nextList,\n    },\n  };\n}\n\nexport function getAgentDeleteBlocker(cfg: Config, agentId: string): string | null {\n  const id = normalizeAgentId(agentId);\n  if (id === DEFAULT_AGENT_ID) {\n    return `Agent id \"${DEFAULT_AGENT_ID}\" is reserved for the primary agent.`;\n  }\n  if (id === normalizeAgentId(resolveDefaultAgentId(cfg))) {\n    return `Agent \"${id}\" is the global default agent. Change agents.default first.`;\n  }\n  const tuiDefault = cfg.tui?.defaultAgent?.trim();\n  if (tuiDefault && id === normalizeAgentId(tuiDefault)) {\n    return `Agent \"${id}\" is the TUI default agent. Change tui.defaultAgent first.`;\n  }\n  return null;\n}\n\nexport function setTuiDefaultAgentConfig(\n  cfg: Config,\n  agentIdRaw: string,\n): { ok: true; config: Config; agentId: string } | { ok: false; message: string } {\n  const raw = agentIdRaw.trim();\n  if (!raw) {\n    return { ok: false, message: 'Agent id is required.' };\n  }\n  const agentId = normalizeAgentId(raw);\n  if (agentId !== raw.toLowerCase()) {\n    return { ok: false, message: `Invalid agent id: ${raw}` };\n  }\n  const entry = listAgentEntries(cfg).find((agent) => normalizeAgentId(agent.id) === agentId);\n  if (!entry || entry.enabled === false) {\n    return { ok: false, message: `Agent \"${agentId}\" not found or disabled.` };\n  }\n  return {\n    ok: true,\n    agentId,\n    config: {\n      ...cfg,\n      tui: {\n        ...cfg.tui,\n        defaultAgent: agentId,\n      },\n    },\n  };\n}\n\nexport function pruneAgentConfig(\n  cfg: Config,\n  agentId: string,\n): { config: Config; removedBindings: number } {\n  const id = normalizeAgentId(agentId);\n  const blocker = getAgentDeleteBlocker(cfg, id);\n  if (blocker) {\n    throw new Error(blocker);\n  }\n  const agents = listAgentEntries(cfg);\n  const nextAgentsList = agents.filter((e) => normalizeAgentId(e.id) !== id);\n  const nextAgents = nextAgentsList.length > 0 ? nextAgentsList : [];\n\n  const bindings = cfg.bindings ?? [];\n  const filteredBindings = bindings.filter((b) => normalizeAgentId(b.agentId) !== id);\n\n  return {\n    config: {\n      ...cfg,\n      agents: { ...cfg.agents, list: nextAgents },\n      bindings: filteredBindings,\n    },\n    removedBindings: bindings.length - filteredBindings.length,\n  };\n}\n\nexport async function removeAgentDirsFromDisk(cfg: Config, id: string): Promise<void> {\n  const aid = normalizeAgentId(id);\n  if (aid === DEFAULT_AGENT_ID) {\n    throw new Error('Refusing to delete the main agent home on disk from this command.');\n  }\n  const home = resolveAgentHomeDir(cfg, aid);\n  const ws = resolveAgentWorkspaceDir(cfg, aid);\n  if (existsSync(home)) {\n    await rm(home, { recursive: true, force: true });\n  }\n  if (existsSync(ws) && ws !== home) {\n    await rm(ws, { recursive: true, force: true });\n  }\n}\n"],"mappings":";;;;;;;kBAeiC;AAMjC,SAAgB,oBAAoB,MAAoB,SAAyB;CAC/E,MAAM,KAAK,iBAAiB,QAAQ;AACpC,QAAO,KAAK,WAAW,MAAM,iBAAiB,EAAE,GAAG,KAAK,GAAG;;AAG7D,SAAgB,iBACd,KACA,QAUQ;CACR,MAAM,UAAU,iBAAiB,OAAO,QAAQ;CAChD,MAAM,OAAO,iBAAiB,IAAI;CAClC,MAAM,QAAQ,oBAAoB,MAAM,QAAQ;CAChD,MAAM,YAAY,OAAO;CACzB,MAAM,OAAO,SAAS,IAAI,KAAK,SAAS;EACtC,IAAI;EACJ,SAAS;EACT,UAAU,OAAO,YAAY;GAAE,MAAM;GAAS,MAAM;GAAS,UAAU;GAAM,MAAM;GAAU;EAC7F,kBAAkB,EAAE,SAAS,CAAC,+BAA+B,EAAE;EAC/D,WAAW,EAAE,MAAM,qBAAqB,WAAW;EACnD,OAAO,EAAE,SAAS,EAAE,EAAE;EACtB,QAAQ,EAAE,MAAM,OAAgB;EAChC,QAAQ;GAAE,MAAM;GAAyB,SAAS,CAAC,WAAoB,UAAmB;GAAE,aAAa,EAAE,SAAS,WAAoB;GAAE;EAC1I,WAAW,EAAE;EACb,YAAY;GAAE,sBAAsB,EAAE;GAAE,WAAW,EAAE;GAAE,YAAY,EAAE;GAAE;EACxE;CACD,MAAM,YAAwB;EAC5B,GAAG;EACH,SAAS,KAAK,WAAW;EACzB,GAAI,OAAO,YAAY,EAAE,WAAW,EAAE,MAAM,OAAO,WAAW,EAAE,GAAG,EAAE;EACrE,GAAI,OAAO,SAAS,EAAE,QAAQ,OAAO,QAAQ,GAAG,EAAE;EAClD,GAAI,OAAO,QACP,EACE,QAAQ;GACN,GAAI,KAAK,UAAU,EAAE;GACrB,aAAa;GACb,OAAO;IAAE,GAAI,KAAK,QAAQ,SAAS,EAAE;IAAG,MAAM,EAAE,OAAO,OAAO,OAAO;IAAE;GACxE,EACF,GACD,EAAE;EACN,GAAI,OAAO,SAAS,EAAE,QAAQ;GAAE,MAAM;GAAsB,OAAO,OAAO;GAAQ,EAAE,GAAG,EAAE;EACzF,GAAI,YAAY,EAAE,OAAO,WAAW,GAAG,EAAE;EAC1C;CACD,MAAM,WAAW,CAAC,GAAG,KAAK;AAC1B,KAAI,SAAS,EACX,UAAS,SAAS;MACb;AACL,MAAI,SAAS,WAAW,KAAK,YAAY,iBAAiB,sBAAsB,IAAI,CAAC,CACnF,UAAS,KAAK;GACZ,IAAI,sBAAsB,IAAI;GAC9B,SAAS;GACT,UAAU;IAAE,MAAM,sBAAsB,IAAI;IAAE,MAAM;IAAS,UAAU;IAAM,MAAM;IAAU;GAC7F,kBAAkB,EAAE,SAAS,CAAC,+BAA+B,EAAE;GAC/D,WAAW,EAAE,MAAM,qBAAqB,sBAAsB,IAAI,IAAI;GACtE,OAAO,EAAE,SAAS,EAAE,EAAE;GACtB,QAAQ,EAAE,MAAM,OAAO;GACvB,QAAQ;IAAE,MAAM;IAAgB,SAAS,CAAC,WAAW,UAAU;IAAE,aAAa,EAAE,SAAS,WAAW;IAAE;GACtG,WAAW,EAAE;GACb,YAAY;IAAE,sBAAsB,EAAE;IAAE,WAAW,EAAE;IAAE,YAAY,EAAE;IAAE;GACxE,CAAC;AAEJ,WAAS,KAAK,UAAU;;AAE1B,QAAO;EACL,GAAG;EACH,QAAQ;GACN,GAAG,IAAI;GACP,MAAM;GACP;EACF;;AAGH,SAAgB,sBAAsB,KAAa,SAAgC;CACjF,MAAM,KAAK,iBAAiB,QAAQ;AACpC,KAAI,OAAA,OACF,QAAO,aAAa,iBAAiB;AAEvC,KAAI,OAAO,iBAAiB,sBAAsB,IAAI,CAAC,CACrD,QAAO,UAAU,GAAG;CAEtB,MAAM,aAAa,IAAI,KAAK,cAAc,MAAM;AAChD,KAAI,cAAc,OAAO,iBAAiB,WAAW,CACnD,QAAO,UAAU,GAAG;AAEtB,QAAO;;AAGT,SAAgB,yBACd,KACA,YACgF;CAChF,MAAM,MAAM,WAAW,MAAM;AAC7B,KAAI,CAAC,IACH,QAAO;EAAE,IAAI;EAAO,SAAS;EAAyB;CAExD,MAAM,UAAU,iBAAiB,IAAI;AACrC,KAAI,YAAY,IAAI,aAAa,CAC/B,QAAO;EAAE,IAAI;EAAO,SAAS,qBAAqB;EAAO;CAE3D,MAAM,QAAQ,iBAAiB,IAAI,CAAC,MAAM,UAAU,iBAAiB,MAAM,GAAG,KAAK,QAAQ;AAC3F,KAAI,CAAC,SAAS,MAAM,YAAY,MAC9B,QAAO;EAAE,IAAI;EAAO,SAAS,UAAU,QAAQ;EAA2B;AAE5E,QAAO;EACL,IAAI;EACJ;EACA,QAAQ;GACN,GAAG;GACH,KAAK;IACH,GAAG,IAAI;IACP,cAAc;IACf;GACF;EACF;;AAGH,SAAgB,iBACd,KACA,SAC6C;CAC7C,MAAM,KAAK,iBAAiB,QAAQ;CACpC,MAAM,UAAU,sBAAsB,KAAK,GAAG;AAC9C,KAAI,QACF,OAAM,IAAI,MAAM,QAAQ;CAG1B,MAAM,iBADS,iBAAiB,IACH,CAAC,QAAQ,MAAM,iBAAiB,EAAE,GAAG,KAAK,GAAG;CAC1E,MAAM,aAAa,eAAe,SAAS,IAAI,iBAAiB,EAAE;CAElE,MAAM,WAAW,IAAI,YAAY,EAAE;CACnC,MAAM,mBAAmB,SAAS,QAAQ,MAAM,iBAAiB,EAAE,QAAQ,KAAK,GAAG;AAEnF,QAAO;EACL,QAAQ;GACN,GAAG;GACH,QAAQ;IAAE,GAAG,IAAI;IAAQ,MAAM;IAAY;GAC3C,UAAU;GACX;EACD,iBAAiB,SAAS,SAAS,iBAAiB;EACrD;;AAGH,eAAsB,wBAAwB,KAAa,IAA2B;CACpF,MAAM,MAAM,iBAAiB,GAAG;AAChC,KAAI,QAAA,OACF,OAAM,IAAI,MAAM,oEAAoE;CAEtF,MAAM,OAAO,oBAAoB,KAAK,IAAI;CAC1C,MAAM,KAAK,yBAAyB,KAAK,IAAI;AAC7C,KAAI,WAAW,KAAK,CAClB,OAAM,GAAG,MAAM;EAAE,WAAW;EAAM,OAAO;EAAM,CAAC;AAElD,KAAI,WAAW,GAAG,IAAI,OAAO,KAC3B,OAAM,GAAG,IAAI;EAAE,WAAW;EAAM,OAAO;EAAM,CAAC"}
+{"version":3,"file":"agents.config.js","names":[],"sources":["../../../src/commands/agents.config.ts"],"sourcesContent":["/**\n * Mutate `agents.list` / bindings when adding or removing agents.\n */\n\nimport { rm } from 'node:fs/promises';\nimport { existsSync } from 'node:fs';\n\nimport type { Config } from '../config/schema.js';\nimport {\n  listAgentEntries,\n  normalizeAgentId,\n  resolveAgentHomeDir,\n  resolveAgentWorkspaceDir,\n  resolveDefaultAgentId,\n  DEFAULT_AGENT_ID,\n} from '../agent/agent-scope.js';\n\ntype AgentEntry = NonNullable<NonNullable<Config['agents']>['list']>[number];\n\nexport { listAgentEntries };\n\nexport function findAgentEntryIndex(list: AgentEntry[], agentId: string): number {\n  const id = normalizeAgentId(agentId);\n  return list.findIndex((e) => normalizeAgentId(e.id) === id);\n}\n\nexport function applyAgentConfig(\n  cfg: Config,\n  params: {\n    agentId: string;\n    /** Used only when creating a previously absent agent entry. */\n    identity?: AgentEntry['identity'];\n    workspace?: string;\n    model?: string;\n    models?: AgentEntry['models'];\n    extends?: AgentEntry['extends'];\n    skills?: string[];\n    tools?: AgentEntry['tools'];\n  },\n): Config {\n  const agentId = normalizeAgentId(params.agentId);\n  const list = listAgentEntries(cfg);\n  const index = findAgentEntryIndex(list, agentId);\n  const nextTools = params.tools;\n  const base = index >= 0 ? list[index] : {\n    id: agentId,\n    enabled: true as const,\n    identity: params.identity ?? { name: agentId, role: 'Agent', language: 'en', tone: 'direct' },\n    responsibilities: { primary: ['Help the user complete tasks'] },\n    workspace: { root: `~/.xopc/workspace/${agentId}` },\n    tools: { builtin: {} },\n    skills: { mode: 'all' as const },\n    memory: { mode: 'confirmWrite' as const, sources: ['session' as const, 'curated' as const], writePolicy: { curated: 'confirm' as const } },\n    workflows: {},\n    boundaries: { requiresConfirmation: [], forbidden: [], escalation: [] },\n  };\n  const nextEntry: AgentEntry = {\n    ...base,\n    enabled: base.enabled ?? true,\n    ...(params.extends !== undefined ? { extends: params.extends } : {}),\n    ...(params.workspace ? { workspace: { root: params.workspace } } : {}),\n    ...(params.models ? { models: params.models } : {}),\n    ...(params.model\n      ? {\n          models: {\n            ...(base.models ?? {}),\n            defaultRole: 'deep',\n            roles: { ...(base.models?.roles ?? {}), deep: { model: params.model } },\n          },\n        }\n      : {}),\n    ...(params.skills ? { skills: { mode: 'allowlist' as const, allow: params.skills } } : {}),\n    ...(nextTools ? { tools: nextTools } : {}),\n  };\n  const nextList = [...list];\n  if (index >= 0) {\n    nextList[index] = nextEntry;\n  } else {\n    if (nextList.length === 0 && agentId !== normalizeAgentId(resolveDefaultAgentId(cfg))) {\n      nextList.push({\n        id: resolveDefaultAgentId(cfg),\n        enabled: true,\n        identity: { name: resolveDefaultAgentId(cfg), role: 'Agent', language: 'en', tone: 'direct' },\n        responsibilities: { primary: ['Help the user complete tasks'] },\n        workspace: { root: `~/.xopc/workspace/${resolveDefaultAgentId(cfg)}` },\n        tools: { builtin: {} },\n        skills: { mode: 'all' },\n        memory: { mode: 'confirmWrite', sources: ['session', 'curated'], writePolicy: { curated: 'confirm' } },\n        workflows: {},\n        boundaries: { requiresConfirmation: [], forbidden: [], escalation: [] },\n      });\n    }\n    nextList.push(nextEntry);\n  }\n  return {\n    ...cfg,\n    agents: {\n      ...cfg.agents,\n      list: nextList,\n    },\n  };\n}\n\nexport function getAgentDeleteBlocker(cfg: Config, agentId: string): string | null {\n  const id = normalizeAgentId(agentId);\n  if (id === DEFAULT_AGENT_ID) {\n    return `Agent id \"${DEFAULT_AGENT_ID}\" is reserved for the primary agent.`;\n  }\n  if (id === normalizeAgentId(resolveDefaultAgentId(cfg))) {\n    return `Agent \"${id}\" is the global default agent. Change agents.default first.`;\n  }\n  const tuiDefault = cfg.tui?.defaultAgent?.trim();\n  if (tuiDefault && id === normalizeAgentId(tuiDefault)) {\n    return `Agent \"${id}\" is the TUI default agent. Change tui.defaultAgent first.`;\n  }\n  return null;\n}\n\nexport function setTuiDefaultAgentConfig(\n  cfg: Config,\n  agentIdRaw: string,\n): { ok: true; config: Config; agentId: string } | { ok: false; message: string } {\n  const raw = agentIdRaw.trim();\n  if (!raw) {\n    return { ok: false, message: 'Agent id is required.' };\n  }\n  const agentId = normalizeAgentId(raw);\n  if (agentId !== raw.toLowerCase()) {\n    return { ok: false, message: `Invalid agent id: ${raw}` };\n  }\n  const entry = listAgentEntries(cfg).find((agent) => normalizeAgentId(agent.id) === agentId);\n  if (!entry || entry.enabled === false) {\n    return { ok: false, message: `Agent \"${agentId}\" not found or disabled.` };\n  }\n  return {\n    ok: true,\n    agentId,\n    config: {\n      ...cfg,\n      tui: {\n        ...cfg.tui,\n        defaultAgent: agentId,\n      },\n    },\n  };\n}\n\nexport function pruneAgentConfig(\n  cfg: Config,\n  agentId: string,\n): { config: Config; removedBindings: number } {\n  const id = normalizeAgentId(agentId);\n  const blocker = getAgentDeleteBlocker(cfg, id);\n  if (blocker) {\n    throw new Error(blocker);\n  }\n  const agents = listAgentEntries(cfg);\n  const nextAgentsList = agents.filter((e) => normalizeAgentId(e.id) !== id);\n  const nextAgents = nextAgentsList.length > 0 ? nextAgentsList : [];\n\n  const bindings = cfg.bindings ?? [];\n  const filteredBindings = bindings.filter((b) => normalizeAgentId(b.agentId) !== id);\n\n  return {\n    config: {\n      ...cfg,\n      agents: { ...cfg.agents, list: nextAgents },\n      bindings: filteredBindings,\n    },\n    removedBindings: bindings.length - filteredBindings.length,\n  };\n}\n\nexport async function removeAgentDirsFromDisk(cfg: Config, id: string): Promise<void> {\n  const aid = normalizeAgentId(id);\n  if (aid === DEFAULT_AGENT_ID) {\n    throw new Error('Refusing to delete the main agent home on disk from this command.');\n  }\n  const home = resolveAgentHomeDir(cfg, aid);\n  const ws = resolveAgentWorkspaceDir(cfg, aid);\n  if (existsSync(home)) {\n    await rm(home, { recursive: true, force: true });\n  }\n  if (existsSync(ws) && ws !== home) {\n    await rm(ws, { recursive: true, force: true });\n  }\n}\n"],"mappings":";;;;;;;kBAeiC;AAMjC,SAAgB,oBAAoB,MAAoB,SAAyB;CAC/E,MAAM,KAAK,iBAAiB,QAAQ;AACpC,QAAO,KAAK,WAAW,MAAM,iBAAiB,EAAE,GAAG,KAAK,GAAG;;AAG7D,SAAgB,iBACd,KACA,QAWQ;CACR,MAAM,UAAU,iBAAiB,OAAO,QAAQ;CAChD,MAAM,OAAO,iBAAiB,IAAI;CAClC,MAAM,QAAQ,oBAAoB,MAAM,QAAQ;CAChD,MAAM,YAAY,OAAO;CACzB,MAAM,OAAO,SAAS,IAAI,KAAK,SAAS;EACtC,IAAI;EACJ,SAAS;EACT,UAAU,OAAO,YAAY;GAAE,MAAM;GAAS,MAAM;GAAS,UAAU;GAAM,MAAM;GAAU;EAC7F,kBAAkB,EAAE,SAAS,CAAC,+BAA+B,EAAE;EAC/D,WAAW,EAAE,MAAM,qBAAqB,WAAW;EACnD,OAAO,EAAE,SAAS,EAAE,EAAE;EACtB,QAAQ,EAAE,MAAM,OAAgB;EAChC,QAAQ;GAAE,MAAM;GAAyB,SAAS,CAAC,WAAoB,UAAmB;GAAE,aAAa,EAAE,SAAS,WAAoB;GAAE;EAC1I,WAAW,EAAE;EACb,YAAY;GAAE,sBAAsB,EAAE;GAAE,WAAW,EAAE;GAAE,YAAY,EAAE;GAAE;EACxE;CACD,MAAM,YAAwB;EAC5B,GAAG;EACH,SAAS,KAAK,WAAW;EACzB,GAAI,OAAO,YAAY,KAAA,IAAY,EAAE,SAAS,OAAO,SAAS,GAAG,EAAE;EACnE,GAAI,OAAO,YAAY,EAAE,WAAW,EAAE,MAAM,OAAO,WAAW,EAAE,GAAG,EAAE;EACrE,GAAI,OAAO,SAAS,EAAE,QAAQ,OAAO,QAAQ,GAAG,EAAE;EAClD,GAAI,OAAO,QACP,EACE,QAAQ;GACN,GAAI,KAAK,UAAU,EAAE;GACrB,aAAa;GACb,OAAO;IAAE,GAAI,KAAK,QAAQ,SAAS,EAAE;IAAG,MAAM,EAAE,OAAO,OAAO,OAAO;IAAE;GACxE,EACF,GACD,EAAE;EACN,GAAI,OAAO,SAAS,EAAE,QAAQ;GAAE,MAAM;GAAsB,OAAO,OAAO;GAAQ,EAAE,GAAG,EAAE;EACzF,GAAI,YAAY,EAAE,OAAO,WAAW,GAAG,EAAE;EAC1C;CACD,MAAM,WAAW,CAAC,GAAG,KAAK;AAC1B,KAAI,SAAS,EACX,UAAS,SAAS;MACb;AACL,MAAI,SAAS,WAAW,KAAK,YAAY,iBAAiB,sBAAsB,IAAI,CAAC,CACnF,UAAS,KAAK;GACZ,IAAI,sBAAsB,IAAI;GAC9B,SAAS;GACT,UAAU;IAAE,MAAM,sBAAsB,IAAI;IAAE,MAAM;IAAS,UAAU;IAAM,MAAM;IAAU;GAC7F,kBAAkB,EAAE,SAAS,CAAC,+BAA+B,EAAE;GAC/D,WAAW,EAAE,MAAM,qBAAqB,sBAAsB,IAAI,IAAI;GACtE,OAAO,EAAE,SAAS,EAAE,EAAE;GACtB,QAAQ,EAAE,MAAM,OAAO;GACvB,QAAQ;IAAE,MAAM;IAAgB,SAAS,CAAC,WAAW,UAAU;IAAE,aAAa,EAAE,SAAS,WAAW;IAAE;GACtG,WAAW,EAAE;GACb,YAAY;IAAE,sBAAsB,EAAE;IAAE,WAAW,EAAE;IAAE,YAAY,EAAE;IAAE;GACxE,CAAC;AAEJ,WAAS,KAAK,UAAU;;AAE1B,QAAO;EACL,GAAG;EACH,QAAQ;GACN,GAAG,IAAI;GACP,MAAM;GACP;EACF;;AAGH,SAAgB,sBAAsB,KAAa,SAAgC;CACjF,MAAM,KAAK,iBAAiB,QAAQ;AACpC,KAAI,OAAA,OACF,QAAO,aAAa,iBAAiB;AAEvC,KAAI,OAAO,iBAAiB,sBAAsB,IAAI,CAAC,CACrD,QAAO,UAAU,GAAG;CAEtB,MAAM,aAAa,IAAI,KAAK,cAAc,MAAM;AAChD,KAAI,cAAc,OAAO,iBAAiB,WAAW,CACnD,QAAO,UAAU,GAAG;AAEtB,QAAO;;AAGT,SAAgB,yBACd,KACA,YACgF;CAChF,MAAM,MAAM,WAAW,MAAM;AAC7B,KAAI,CAAC,IACH,QAAO;EAAE,IAAI;EAAO,SAAS;EAAyB;CAExD,MAAM,UAAU,iBAAiB,IAAI;AACrC,KAAI,YAAY,IAAI,aAAa,CAC/B,QAAO;EAAE,IAAI;EAAO,SAAS,qBAAqB;EAAO;CAE3D,MAAM,QAAQ,iBAAiB,IAAI,CAAC,MAAM,UAAU,iBAAiB,MAAM,GAAG,KAAK,QAAQ;AAC3F,KAAI,CAAC,SAAS,MAAM,YAAY,MAC9B,QAAO;EAAE,IAAI;EAAO,SAAS,UAAU,QAAQ;EAA2B;AAE5E,QAAO;EACL,IAAI;EACJ;EACA,QAAQ;GACN,GAAG;GACH,KAAK;IACH,GAAG,IAAI;IACP,cAAc;IACf;GACF;EACF;;AAGH,SAAgB,iBACd,KACA,SAC6C;CAC7C,MAAM,KAAK,iBAAiB,QAAQ;CACpC,MAAM,UAAU,sBAAsB,KAAK,GAAG;AAC9C,KAAI,QACF,OAAM,IAAI,MAAM,QAAQ;CAG1B,MAAM,iBADS,iBAAiB,IACH,CAAC,QAAQ,MAAM,iBAAiB,EAAE,GAAG,KAAK,GAAG;CAC1E,MAAM,aAAa,eAAe,SAAS,IAAI,iBAAiB,EAAE;CAElE,MAAM,WAAW,IAAI,YAAY,EAAE;CACnC,MAAM,mBAAmB,SAAS,QAAQ,MAAM,iBAAiB,EAAE,QAAQ,KAAK,GAAG;AAEnF,QAAO;EACL,QAAQ;GACN,GAAG;GACH,QAAQ;IAAE,GAAG,IAAI;IAAQ,MAAM;IAAY;GAC3C,UAAU;GACX;EACD,iBAAiB,SAAS,SAAS,iBAAiB;EACrD;;AAGH,eAAsB,wBAAwB,KAAa,IAA2B;CACpF,MAAM,MAAM,iBAAiB,GAAG;AAChC,KAAI,QAAA,OACF,OAAM,IAAI,MAAM,oEAAoE;CAEtF,MAAM,OAAO,oBAAoB,KAAK,IAAI;CAC1C,MAAM,KAAK,yBAAyB,KAAK,IAAI;AAC7C,KAAI,WAAW,KAAK,CAClB,OAAM,GAAG,MAAM;EAAE,WAAW;EAAM,OAAO;EAAM,CAAC;AAElD,KAAI,WAAW,GAAG,IAAI,OAAO,KAC3B,OAAM,GAAG,IAAI;EAAE,WAAW;EAAM,OAAO;EAAM,CAAC"}

package/dist/src/config/schema.d.ts

@@ -157,9 +157,9 @@ export declare const AgentsConfigSchema: z.ZodDefault<z.ZodObject<{
             sources: z.ZodDefault<z.ZodArray<z.ZodEnum<{
                 session: "session";
                 workspace: "workspace";
+                curated: "curated";
                 userProfile: "userProfile";
                 agentProfile: "agentProfile";
-                curated: "curated";
                 connectedSources: "connectedSources";
             }>>>;
             writePolicy: z.ZodOptional<z.ZodObject<{
@@ -392,9 +392,9 @@ export declare const AgentsConfigSchema: z.ZodDefault<z.ZodObject<{
             sources: z.ZodDefault<z.ZodArray<z.ZodEnum<{
                 session: "session";
                 workspace: "workspace";
+                curated: "curated";
                 userProfile: "userProfile";
                 agentProfile: "agentProfile";
-                curated: "curated";
                 connectedSources: "connectedSources";
             }>>>;
             writePolicy: z.ZodOptional<z.ZodObject<{
@@ -1644,8 +1644,8 @@ export type GoalsConfig = z.infer<typeof GoalsConfigSchema>;
 export declare const UpdateConfigSchema: z.ZodOptional<z.ZodObject<{
     checkOnStart: z.ZodDefault<z.ZodBoolean>;
     channel: z.ZodDefault<z.ZodEnum<{
-        stable: "stable";
         beta: "beta";
+        stable: "stable";
         dev: "dev";
     }>>;
     auto: z.ZodOptional<z.ZodObject<{
@@ -1847,9 +1847,9 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
                 sources: z.ZodDefault<z.ZodArray<z.ZodEnum<{
                     session: "session";
                     workspace: "workspace";
+                    curated: "curated";
                     userProfile: "userProfile";
                     agentProfile: "agentProfile";
-                    curated: "curated";
                     connectedSources: "connectedSources";
                 }>>>;
                 writePolicy: z.ZodOptional<z.ZodObject<{
@@ -2082,9 +2082,9 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
                 sources: z.ZodDefault<z.ZodArray<z.ZodEnum<{
                     session: "session";
                     workspace: "workspace";
+                    curated: "curated";
                     userProfile: "userProfile";
                     agentProfile: "agentProfile";
-                    curated: "curated";
                     connectedSources: "connectedSources";
                 }>>>;
                 writePolicy: z.ZodOptional<z.ZodObject<{
@@ -2771,8 +2771,8 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
     update: z.ZodOptional<z.ZodObject<{
         checkOnStart: z.ZodDefault<z.ZodBoolean>;
         channel: z.ZodDefault<z.ZodEnum<{
-            stable: "stable";
             beta: "beta";
+            stable: "stable";
             dev: "dev";
         }>>;
         auto: z.ZodOptional<z.ZodObject<{

package/dist/src/config/schema.js

@@ -1,5 +1,6 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
 import { AgentConfigEntrySchema, CapabilityPresetSchema, DEFAULT_CAPABILITY_PRESET_ID, init_schema as init_schema$1 } from "../agent-manifest/schema.js";
+import { init_preset_chain, linearizePresetIds } from "../agent-manifest/preset-chain.js";
 import { checkCacheDir, init_cache_dir_policy } from "../browser/cache-dir-policy.js";
 import { DEFAULT_AGENT_MODELS, init_default_model } from "./default-model.js";
 import { init_public_url, validatePublicUrl } from "./public-url.js";
@@ -13,23 +14,14 @@ function getAgentDefaultModelRef(config) {
 	const agent = list.find((entry) => entry.enabled !== false && entry.id === defaultId) ?? list[0];
 	if (!agent) return void 0;
 	let modelRef;
-	const visited = /* @__PURE__ */ new Set();
 	const applyModels = (models) => {
 		const roles = models?.roles ?? {};
 		const defaultRole = models?.defaultRole ?? Object.keys(roles)[0];
 		const next = (defaultRole ? roles[defaultRole] : void 0)?.model.trim();
 		if (next) modelRef = next;
 	};
-	const applyPreset = (presetId) => {
-		if (visited.has(presetId)) return;
-		visited.add(presetId);
-		const preset = config.agents.capabilityPresets[presetId];
-		if (!preset) return;
-		for (const parent of preset.extends ?? []) applyPreset(parent);
-		applyModels(preset.models);
-	};
-	applyPreset(config.agents.defaultPreset);
-	for (const presetId of agent.extends ?? []) if (presetId !== config.agents.defaultPreset) applyPreset(presetId);
+	const rootPresetIds = [...config.agents.capabilityPresets[config.agents.defaultPreset] ? [config.agents.defaultPreset] : [], ...(agent.extends ?? []).filter((id) => id !== config.agents.defaultPreset)];
+	for (const presetId of linearizePresetIds(rootPresetIds, config.agents.capabilityPresets)) applyModels(config.agents.capabilityPresets[presetId]?.models);
 	applyModels(agent.models);
 	return modelRef;
 }
@@ -39,7 +31,6 @@ function getAgentDefaultModelsConfig(config) {
 	const agent = list.find((entry) => entry.enabled !== false && entry.id === defaultId) ?? list[0];
 	if (!agent) return void 0;
 	let modelConfig;
-	const visited = /* @__PURE__ */ new Set();
 	const applyModels = (models) => {
 		if (!models) return;
 		modelConfig = {
@@ -51,16 +42,8 @@ function getAgentDefaultModelsConfig(config) {
 			}
 		};
 	};
-	const applyPreset = (presetId) => {
-		if (visited.has(presetId)) return;
-		visited.add(presetId);
-		const preset = config.agents.capabilityPresets[presetId];
-		if (!preset) return;
-		for (const parent of preset.extends ?? []) applyPreset(parent);
-		applyModels(preset.models);
-	};
-	applyPreset(config.agents.defaultPreset);
-	for (const presetId of agent.extends ?? []) if (presetId !== config.agents.defaultPreset) applyPreset(presetId);
+	const rootPresetIds = [...config.agents.capabilityPresets[config.agents.defaultPreset] ? [config.agents.defaultPreset] : [], ...(agent.extends ?? []).filter((id) => id !== config.agents.defaultPreset)];
+	for (const presetId of linearizePresetIds(rootPresetIds, config.agents.capabilityPresets)) applyModels(config.agents.capabilityPresets[presetId]?.models);
 	applyModels(agent.models);
 	return modelConfig;
 }
@@ -83,6 +66,7 @@ function parseModelRef(ref) {
 var AgentModelRefSchema, AgentImageGenerationModelSchema, AgentTypedModelRoleSchema, AgentTypedModelRolesSchema, AgentModelsSchema, AgentsConfigSchema, BrowserCloudConfigSchema, BrowserExtensionConfigSchema, BrowserCloakConfigSchema, BrowserConfigSchema, BindingMatchSchema, BindingRuleSchema, BindingsConfigSchema, SessionDmScopeSchema, SessionStorageConfigSchema, SessionResetModeSchema, SessionResetConfigSchema, SessionResetByTypeSchema, SessionScopeSchema, SessionConfigSchema, ChannelsConfigSchema, SearchProviderEntrySchema, WebSearchConfigSchema, WebsiteBlocklistSchema, WebToolsConfigSchema, ToolsConfigSchema, GatewayAuthRateLimitSchema, GatewaySecuritySchema, GatewayTrustedProxySchema, GatewayAuthSchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayRemoteSchema, GatewayTlsSchema, GatewayModeSchema, HeartbeatConfigSchema, GatewayChannelConnectDeferModeSchema, TunnelConsentSchema, TunnelConfigSchema, WorkspaceImportConfigSchema, WorkspaceConfigSchema, GatewayBindModeSchema, GatewayConfigSchema, ModelsDevConfigSchema, SttProviderConfigCatchallSchema, STTProviderConfigSchema, STTFallbackConfigSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, STTConfigSchema, TtsProviderConfigCatchallSchema, TTSProviderConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSEdgeConfigSchema, TTSSummarizationConfigSchema, TTSConfigSchema, MessagesConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, ProviderAzureConfigSchema, ProviderRequestOverridesSchema, ProviderAuthConfigSchema, ProvidersConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, UpdateAutoConfigSchema, GoalNotificationEventSchema, GoalNotificationTargetSchema, GoalNotificationsConfigSchema, GoalsConfigSchema, UpdateConfigSchema, CommandsConfigSchema, TuiConfigSchema, McpHttpUrlSchema, ConnectorSecretReferenceSchema, McpConfigScalarSchema, McpServerSchema, McpConfigSchema, CodeIntelligenceConfigSchema, ConnectorsConfigSchema, ConfigSchema;
 var init_schema = __esmMin((() => {
 	init_schema$1();
+	init_preset_chain();
 	init_cache_dir_policy();
 	init_default_model();
 	init_public_url();