agentpacks 0.3.0 → 0.4.0

package/dist/node/cli/publish.js

@@ -0,0 +1,672 @@
+import { createRequire } from "node:module";
+var __require = /* @__PURE__ */ createRequire(import.meta.url);
+
+// src/core/config.ts
+import { z } from "zod";
+import { readFileSync, existsSync } from "fs";
+import { resolve } from "path";
+import { parse as parseJsonc } from "jsonc-parser";
+var TARGET_IDS = [
+  "opencode",
+  "cursor",
+  "claudecode",
+  "codexcli",
+  "geminicli",
+  "copilot",
+  "agentsmd",
+  "cline",
+  "kilo",
+  "roo",
+  "qwencode",
+  "kiro",
+  "factorydroid",
+  "antigravity",
+  "junie",
+  "augmentcode",
+  "windsurf",
+  "warp",
+  "replit",
+  "zed"
+];
+var FEATURE_IDS = [
+  "rules",
+  "commands",
+  "agents",
+  "skills",
+  "hooks",
+  "plugins",
+  "mcp",
+  "ignore",
+  "models"
+];
+var REPO_MODES = ["repo", "monorepo", "metarepo"];
+var PackManifestSchema = z.object({
+  name: z.string().min(1),
+  version: z.string().default("1.0.0"),
+  description: z.string().default(""),
+  author: z.union([
+    z.string(),
+    z.object({ name: z.string(), email: z.string().optional() })
+  ]).optional(),
+  tags: z.array(z.string()).default([]),
+  dependencies: z.array(z.string()).default([]),
+  conflicts: z.array(z.string()).default([]),
+  targets: z.union([z.literal("*"), z.array(z.string())]).default("*"),
+  features: z.union([z.literal("*"), z.array(z.string())]).default("*")
+});
+var FeaturesSchema = z.union([
+  z.literal("*"),
+  z.array(z.string()),
+  z.record(z.string(), z.union([z.literal("*"), z.array(z.string())]))
+]);
+var WorkspaceConfigSchema = z.object({
+  $schema: z.string().optional(),
+  packs: z.array(z.string()).default(["./packs/default"]),
+  disabled: z.array(z.string()).default([]),
+  targets: z.union([z.literal("*"), z.array(z.string())]).default("*"),
+  features: FeaturesSchema.default("*"),
+  mode: z.enum(REPO_MODES).default("repo"),
+  baseDirs: z.array(z.string()).default(["."]),
+  global: z.boolean().default(false),
+  delete: z.boolean().default(true),
+  verbose: z.boolean().default(false),
+  silent: z.boolean().default(false),
+  overrides: z.record(z.string(), z.record(z.string(), z.string())).default({}),
+  sources: z.array(z.object({
+    source: z.string(),
+    packs: z.array(z.string()).optional(),
+    skills: z.array(z.string()).optional()
+  })).default([]),
+  modelProfile: z.string().optional()
+});
+var CONFIG_FILES = ["agentpacks.local.jsonc", "agentpacks.jsonc"];
+function loadWorkspaceConfig(projectRoot) {
+  for (const filename of CONFIG_FILES) {
+    const filepath = resolve(projectRoot, filename);
+    if (existsSync(filepath)) {
+      const raw = readFileSync(filepath, "utf-8");
+      const parsed = parseJsonc(raw);
+      return WorkspaceConfigSchema.parse(parsed);
+    }
+  }
+  return WorkspaceConfigSchema.parse({});
+}
+function loadPackManifest(packDir) {
+  const filepath = resolve(packDir, "pack.json");
+  if (!existsSync(filepath)) {
+    const dirName = packDir.split("/").pop() ?? "unknown";
+    return PackManifestSchema.parse({ name: dirName });
+  }
+  const raw = readFileSync(filepath, "utf-8");
+  const parsed = JSON.parse(raw);
+  return PackManifestSchema.parse(parsed);
+}
+function resolveFeatures(config, targetId) {
+  const { features } = config;
+  if (features === "*") {
+    return [...FEATURE_IDS];
+  }
+  if (Array.isArray(features)) {
+    if (features.includes("*"))
+      return [...FEATURE_IDS];
+    return features.filter((f) => FEATURE_IDS.includes(f));
+  }
+  const targetFeatures = features[targetId];
+  if (!targetFeatures)
+    return [];
+  if (targetFeatures === "*")
+    return [...FEATURE_IDS];
+  if (Array.isArray(targetFeatures) && targetFeatures.includes("*"))
+    return [...FEATURE_IDS];
+  return targetFeatures.filter((f) => FEATURE_IDS.includes(f));
+}
+function resolveTargets(config) {
+  if (config.targets === "*")
+    return [...TARGET_IDS];
+  return config.targets;
+}
+
+// src/utils/filesystem.ts
+import {
+  existsSync as existsSync2,
+  mkdirSync,
+  readFileSync as readFileSync2,
+  writeFileSync,
+  readdirSync,
+  rmSync,
+  statSync
+} from "fs";
+import { dirname, relative, join } from "path";
+var GENERATED_HEADER_MD = "<!-- Generated by agentpacks. DO NOT EDIT. -->";
+var GENERATED_HEADER_JSON = "// Generated by agentpacks. DO NOT EDIT.";
+var GENERATED_HEADER_JS = "// Generated by agentpacks. DO NOT EDIT.";
+function writeGeneratedFile(filepath, content, options = {}) {
+  const { header = true, type } = options;
+  const ext = type ?? inferFileType(filepath);
+  ensureDir(dirname(filepath));
+  let output = content;
+  if (header) {
+    const headerComment = getHeader(ext);
+    if (headerComment) {
+      output = `${headerComment}
+${content}`;
+    }
+  }
+  writeFileSync(filepath, output, "utf-8");
+}
+function writeGeneratedJson(filepath, data, options = {}) {
+  const json = JSON.stringify(data, null, 2);
+  writeGeneratedFile(filepath, json + `
+`, { ...options, type: "json" });
+}
+function readFileOrNull(filepath) {
+  if (!existsSync2(filepath))
+    return null;
+  return readFileSync2(filepath, "utf-8");
+}
+function readJsonOrNull(filepath) {
+  const content = readFileOrNull(filepath);
+  if (content === null)
+    return null;
+  return JSON.parse(content);
+}
+function ensureDir(dirPath) {
+  if (!existsSync2(dirPath)) {
+    mkdirSync(dirPath, { recursive: true });
+  }
+}
+function removeIfExists(targetPath) {
+  if (existsSync2(targetPath)) {
+    rmSync(targetPath, { recursive: true, force: true });
+  }
+}
+function listFiles(dirPath, options = {}) {
+  const { extension, recursive = false } = options;
+  if (!existsSync2(dirPath))
+    return [];
+  const results = [];
+  const entries = readdirSync(dirPath);
+  for (const entry of entries) {
+    const fullPath = join(dirPath, entry);
+    const stat = statSync(fullPath);
+    if (stat.isDirectory() && recursive) {
+      results.push(...listFiles(fullPath, options));
+    } else if (stat.isFile()) {
+      if (!extension || entry.endsWith(extension)) {
+        results.push(fullPath);
+      }
+    }
+  }
+  return results;
+}
+function listDirs(dirPath) {
+  if (!existsSync2(dirPath))
+    return [];
+  return readdirSync(dirPath).map((entry) => join(dirPath, entry)).filter((fullPath) => statSync(fullPath).isDirectory());
+}
+function relPath(projectRoot, filepath) {
+  return relative(projectRoot, filepath);
+}
+function isGeneratedFile(filepath) {
+  const content = readFileOrNull(filepath);
+  if (!content)
+    return false;
+  return content.startsWith(GENERATED_HEADER_MD) || content.startsWith(GENERATED_HEADER_JSON) || content.startsWith(GENERATED_HEADER_JS);
+}
+function inferFileType(filepath) {
+  if (filepath.endsWith(".json") || filepath.endsWith(".jsonc"))
+    return "json";
+  if (filepath.endsWith(".ts") || filepath.endsWith(".mts"))
+    return "ts";
+  if (filepath.endsWith(".js") || filepath.endsWith(".mjs"))
+    return "js";
+  return "md";
+}
+function getHeader(type) {
+  switch (type) {
+    case "md":
+      return GENERATED_HEADER_MD;
+    case "json":
+      return GENERATED_HEADER_JSON;
+    case "js":
+    case "ts":
+      return GENERATED_HEADER_JS;
+    default:
+      return null;
+  }
+}
+
+// src/features/models.ts
+import { join as join2 } from "path";
+import { z as z2 } from "zod";
+var SECRET_PATTERNS = [
+  /["']api[_-]?key["']\s*:/i,
+  /["']apiKey["']\s*:/i,
+  /["']secret["']\s*:/i,
+  /["']password["']\s*:/i,
+  /["'](?:auth_token|access_token|bearer_token)["']\s*:/i,
+  /["']private[_-]?key["']\s*:/i,
+  /-----BEGIN\s+(RSA|EC|DSA|OPENSSH|PGP)\s+PRIVATE\s+KEY-----/,
+  /sk-[a-zA-Z0-9]{20,}/,
+  /Bearer\s+[a-zA-Z0-9._-]{20,}/
+];
+var AgentModelSchema = z2.object({
+  model: z2.string(),
+  temperature: z2.number().min(0).max(2).optional(),
+  top_p: z2.number().min(0).max(1).optional()
+});
+var ModelProfileSchema = z2.object({
+  extends: z2.string().optional(),
+  description: z2.string().optional(),
+  default: z2.string().optional(),
+  small: z2.string().optional(),
+  agents: z2.record(z2.string(), AgentModelSchema).optional()
+});
+var RoutingConditionSchema = z2.object({
+  complexity: z2.enum(["low", "medium", "high", "critical"]).optional().describe("Task complexity level"),
+  urgency: z2.enum(["low", "normal", "high"]).optional().describe("Time sensitivity"),
+  budget: z2.enum(["minimal", "standard", "premium"]).optional().describe("Cost/token budget tier"),
+  contextWindowNeed: z2.enum(["small", "medium", "large", "max"]).optional().describe("Required context window size"),
+  toolUseIntensity: z2.enum(["none", "light", "heavy"]).optional().describe("Expected tool/function calling intensity")
+});
+var RoutingRuleSchema = z2.object({
+  when: z2.record(z2.string(), z2.string()),
+  use: z2.string(),
+  description: z2.string().optional(),
+  priority: z2.number().optional()
+});
+var ProviderModelSchema = z2.object({
+  options: z2.record(z2.string(), z2.unknown()).optional(),
+  variants: z2.record(z2.string(), z2.record(z2.string(), z2.unknown())).optional()
+});
+var ProviderConfigSchema = z2.object({
+  options: z2.record(z2.string(), z2.unknown()).optional(),
+  models: z2.record(z2.string(), ProviderModelSchema).optional()
+});
+var ModelsSchema = z2.object({
+  default: z2.string().optional(),
+  small: z2.string().optional(),
+  agents: z2.record(z2.string(), AgentModelSchema).optional(),
+  profiles: z2.record(z2.string(), ModelProfileSchema).optional(),
+  providers: z2.record(z2.string(), ProviderConfigSchema).optional(),
+  routing: z2.array(RoutingRuleSchema).optional(),
+  overrides: z2.record(z2.string(), z2.object({
+    default: z2.string().optional(),
+    small: z2.string().optional(),
+    agents: z2.record(z2.string(), AgentModelSchema).optional()
+  })).optional()
+});
+function parseModels(packDir, packName) {
+  const modelsPath = join2(packDir, "models.json");
+  const raw = readJsonOrNull(modelsPath);
+  if (!raw)
+    return null;
+  const parsed = ModelsSchema.parse(raw);
+  return {
+    packName,
+    sourcePath: modelsPath,
+    config: parsed
+  };
+}
+function mergeModelsConfigs(configs) {
+  const warnings = [];
+  const result = {};
+  for (const entry of configs) {
+    const { config, packName } = entry;
+    if (config.default !== undefined && result.default === undefined) {
+      result.default = config.default;
+    } else if (config.default !== undefined && result.default !== undefined) {
+      warnings.push(`Models "default" from pack "${packName}" skipped (already defined).`);
+    }
+    if (config.small !== undefined && result.small === undefined) {
+      result.small = config.small;
+    } else if (config.small !== undefined && result.small !== undefined) {
+      warnings.push(`Models "small" from pack "${packName}" skipped (already defined).`);
+    }
+    if (config.agents) {
+      if (!result.agents)
+        result.agents = {};
+      for (const [name, assignment] of Object.entries(config.agents)) {
+        if (name in result.agents) {
+          warnings.push(`Models agent "${name}" from pack "${packName}" skipped (already defined).`);
+          continue;
+        }
+        result.agents[name] = assignment;
+      }
+    }
+    if (config.profiles) {
+      if (!result.profiles)
+        result.profiles = {};
+      for (const [name, profile] of Object.entries(config.profiles)) {
+        if (name in result.profiles) {
+          warnings.push(`Models profile "${name}" from pack "${packName}" skipped (already defined).`);
+          continue;
+        }
+        result.profiles[name] = profile;
+      }
+    }
+    if (config.providers) {
+      if (!result.providers)
+        result.providers = {};
+      for (const [providerName, providerConfig] of Object.entries(config.providers)) {
+        if (!(providerName in result.providers)) {
+          result.providers[providerName] = providerConfig;
+        } else {
+          const existing = result.providers[providerName];
+          if (!existing) {
+            result.providers[providerName] = providerConfig;
+            continue;
+          }
+          if (providerConfig.options) {
+            existing.options = {
+              ...providerConfig.options,
+              ...existing.options
+            };
+          }
+          if (providerConfig.models) {
+            if (!existing.models)
+              existing.models = {};
+            for (const [modelName, modelConfig] of Object.entries(providerConfig.models)) {
+              if (!(modelName in existing.models)) {
+                existing.models[modelName] = modelConfig;
+              }
+            }
+          }
+        }
+      }
+    }
+    if (config.routing) {
+      if (!result.routing)
+        result.routing = [];
+      result.routing.push(...config.routing);
+    }
+    if (config.overrides) {
+      if (!result.overrides)
+        result.overrides = {};
+      for (const [targetId, override] of Object.entries(config.overrides)) {
+        if (targetId in result.overrides) {
+          warnings.push(`Models override for target "${targetId}" from pack "${packName}" skipped (already defined).`);
+          continue;
+        }
+        result.overrides[targetId] = override;
+      }
+    }
+  }
+  return { config: result, warnings };
+}
+function scanModelsForSecrets(config) {
+  const warnings = [];
+  const json = JSON.stringify(config);
+  for (const pattern of SECRET_PATTERNS) {
+    if (pattern.test(json)) {
+      warnings.push(`Potential secret detected in models.json matching pattern: ${pattern.source}`);
+    }
+  }
+  return warnings;
+}
+
+// src/utils/registry-client.ts
+var DEFAULT_REGISTRY_URL = "https://registry.agentpacks.dev";
+function createRegistryClient(config) {
+  return new RegistryClient({
+    registryUrl: config?.registryUrl ?? DEFAULT_REGISTRY_URL,
+    authToken: config?.authToken,
+    timeout: config?.timeout ?? 30000
+  });
+}
+
+class RegistryClient {
+  config;
+  constructor(config) {
+    this.config = {
+      registryUrl: config.registryUrl.replace(/\/+$/, ""),
+      authToken: config.authToken,
+      timeout: config.timeout ?? 30000
+    };
+  }
+  async search(params) {
+    const searchParams = new URLSearchParams;
+    if (params.query)
+      searchParams.set("q", params.query);
+    if (params.tags?.length)
+      searchParams.set("tags", params.tags.join(","));
+    if (params.targets?.length)
+      searchParams.set("targets", params.targets.join(","));
+    if (params.features?.length)
+      searchParams.set("features", params.features.join(","));
+    if (params.author)
+      searchParams.set("author", params.author);
+    if (params.sort)
+      searchParams.set("sort", params.sort);
+    if (params.limit)
+      searchParams.set("limit", String(params.limit));
+    if (params.offset)
+      searchParams.set("offset", String(params.offset));
+    const url = `${this.config.registryUrl}/packs?${searchParams.toString()}`;
+    const res = await this.fetch(url);
+    return res;
+  }
+  async info(packName) {
+    const url = `${this.config.registryUrl}/packs/${encodeURIComponent(packName)}`;
+    const res = await this.fetch(url);
+    return res;
+  }
+  async download(packName, version = "latest") {
+    const url = `${this.config.registryUrl}/packs/${encodeURIComponent(packName)}/versions/${encodeURIComponent(version)}/download`;
+    const response = await fetch(url, {
+      headers: this.headers(),
+      signal: AbortSignal.timeout(this.config.timeout)
+    });
+    if (!response.ok) {
+      throw new RegistryApiError(response.status, `Failed to download ${packName}@${version}: ${response.statusText}`);
+    }
+    const integrity = response.headers.get("x-integrity") ?? "";
+    const data = await response.arrayBuffer();
+    return { data, integrity };
+  }
+  async publish(tarball, metadata) {
+    if (!this.config.authToken) {
+      throw new Error("Authentication required. Run `agentpacks login` first.");
+    }
+    const formData = new FormData;
+    formData.append("tarball", new Blob([tarball], { type: "application/gzip" }), `${metadata.name}-${metadata.version}.tgz`);
+    formData.append("metadata", JSON.stringify(metadata));
+    const url = `${this.config.registryUrl}/packs`;
+    const response = await fetch(url, {
+      method: "POST",
+      headers: {
+        Authorization: `Bearer ${this.config.authToken}`
+      },
+      body: formData,
+      signal: AbortSignal.timeout(this.config.timeout)
+    });
+    if (!response.ok) {
+      const body = await response.text();
+      throw new RegistryApiError(response.status, `Publish failed: ${body || response.statusText}`);
+    }
+    return await response.json();
+  }
+  async featured(limit) {
+    const url = limit ? `${this.config.registryUrl}/featured?limit=${limit}` : `${this.config.registryUrl}/featured`;
+    const res = await this.fetch(url);
+    return res.packs;
+  }
+  async tags() {
+    const url = `${this.config.registryUrl}/tags`;
+    const res = await this.fetch(url);
+    return res.tags;
+  }
+  async stats() {
+    const url = `${this.config.registryUrl}/stats`;
+    return await this.fetch(url);
+  }
+  async health() {
+    try {
+      const url = `${this.config.registryUrl}/health`;
+      await this.fetch(url);
+      return true;
+    } catch {
+      return false;
+    }
+  }
+  async fetch(url) {
+    const response = await fetch(url, {
+      headers: this.headers(),
+      signal: AbortSignal.timeout(this.config.timeout)
+    });
+    if (!response.ok) {
+      const body = await response.text();
+      throw new RegistryApiError(response.status, body || response.statusText);
+    }
+    return response.json();
+  }
+  headers() {
+    const h = {
+      Accept: "application/json"
+    };
+    if (this.config.authToken) {
+      h["Authorization"] = `Bearer ${this.config.authToken}`;
+    }
+    return h;
+  }
+}
+
+class RegistryApiError extends Error {
+  status;
+  constructor(status, message) {
+    super(message);
+    this.name = "RegistryApiError";
+    this.status = status;
+  }
+}
+
+// src/utils/credentials.ts
+import { existsSync as existsSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync2, mkdirSync as mkdirSync2 } from "fs";
+import { join as join3, dirname as dirname2 } from "path";
+import { homedir } from "os";
+var CONFIG_DIR = join3(homedir(), ".config", "agentpacks");
+var CREDENTIALS_FILE = join3(CONFIG_DIR, "credentials.json");
+function loadCredentials() {
+  if (!existsSync3(CREDENTIALS_FILE)) {
+    return { registryUrl: "https://registry.agentpacks.dev" };
+  }
+  try {
+    const raw = readFileSync3(CREDENTIALS_FILE, "utf-8");
+    return JSON.parse(raw);
+  } catch {
+    return { registryUrl: "https://registry.agentpacks.dev" };
+  }
+}
+function saveCredentials(credentials) {
+  mkdirSync2(dirname2(CREDENTIALS_FILE), { recursive: true });
+  writeFileSync2(CREDENTIALS_FILE, JSON.stringify(credentials, null, 2) + `
+`, {
+    mode: 384
+  });
+}
+function clearCredentials() {
+  if (existsSync3(CREDENTIALS_FILE)) {
+    writeFileSync2(CREDENTIALS_FILE, JSON.stringify({ registryUrl: "https://registry.agentpacks.dev" }) + `
+`);
+  }
+}
+
+// src/utils/tarball.ts
+import { execSync } from "child_process";
+import { readFileSync as readFileSync4, existsSync as existsSync4, mkdirSync as mkdirSync3, rmSync as rmSync2 } from "fs";
+import { join as join4, resolve as resolve2 } from "path";
+import { createHash } from "crypto";
+import { tmpdir } from "os";
+async function createTarball(packDir) {
+  const absDir = resolve2(packDir);
+  const tmpFile = join4(tmpdir(), `agentpacks-${Date.now()}.tgz`);
+  try {
+    execSync(`tar -czf "${tmpFile}" -C "${absDir}" .`, {
+      stdio: "pipe"
+    });
+    const buffer = readFileSync4(tmpFile);
+    return buffer.buffer.slice(buffer.byteOffset, buffer.byteOffset + buffer.byteLength);
+  } finally {
+    if (existsSync4(tmpFile)) {
+      rmSync2(tmpFile);
+    }
+  }
+}
+async function extractTarball(data, targetDir) {
+  mkdirSync3(targetDir, { recursive: true });
+  const tmpFile = join4(tmpdir(), `agentpacks-${Date.now()}.tgz`);
+  try {
+    const buffer = Buffer.from(data);
+    const { writeFileSync: writeFileSync3 } = await import("fs");
+    writeFileSync3(tmpFile, buffer);
+    execSync(`tar -xzf "${tmpFile}" -C "${targetDir}"`, {
+      stdio: "pipe"
+    });
+  } finally {
+    if (existsSync4(tmpFile)) {
+      rmSync2(tmpFile);
+    }
+  }
+}
+function computeTarballIntegrity(data) {
+  const hash = createHash("sha256").update(Buffer.from(data)).digest("hex");
+  return `sha256-${hash}`;
+}
+
+// src/cli/publish.ts
+import { resolve as resolve3 } from "path";
+import { existsSync as existsSync5 } from "fs";
+import chalk from "chalk";
+async function runPublish(projectRoot, options) {
+  const credentials = loadCredentials();
+  if (!credentials.token) {
+    console.log(chalk.red("Not authenticated. Run `agentpacks login` first."));
+    process.exit(1);
+  }
+  const packDir = resolve3(projectRoot);
+  const packJsonPath = resolve3(packDir, "pack.json");
+  if (!existsSync5(packJsonPath)) {
+    console.log(chalk.red("No pack.json found. Are you in a pack directory?"));
+    process.exit(1);
+  }
+  const manifest = loadPackManifest(packDir);
+  console.log(chalk.bold(`Publishing ${manifest.name}@${manifest.version}...`));
+  const models = parseModels(packDir, manifest.name);
+  if (models) {
+    const secretWarnings = scanModelsForSecrets(models.config);
+    if (secretWarnings.length > 0) {
+      console.log(chalk.red(`
+Blocked: secrets detected in models.json:`));
+      for (const w of secretWarnings) {
+        console.log(chalk.red(`  - ${w}`));
+      }
+      process.exit(1);
+    }
+  }
+  if (options.verbose)
+    console.log(chalk.dim("  Creating tarball..."));
+  const tarball = await createTarball(packDir);
+  if (options.verbose)
+    console.log(chalk.dim("  Uploading..."));
+  const client = createRegistryClient({
+    registryUrl: credentials.registryUrl,
+    authToken: credentials.token
+  });
+  try {
+    const result = await client.publish(tarball, {
+      name: manifest.name,
+      version: manifest.version,
+      manifest
+    });
+    console.log(chalk.green(`
+Published ${result.name}@${result.version}`));
+    console.log(chalk.dim(`  integrity: ${result.integrity}`));
+  } catch (err) {
+    console.log(chalk.red(`
+Publish failed: ${err instanceof Error ? err.message : String(err)}`));
+    process.exit(1);
+  }
+}
+export {
+  runPublish
+};