agentpacks 1.7.13 → 1.8.0

package/dist/cli/publish.js

@@ -1,680 +1,9 @@
 // @bun
-var __require = import.meta.require;
-
-// src/core/config.ts
-import { existsSync, readFileSync } from "fs";
-import { parse as parseJsonc } from "jsonc-parser";
-import { resolve } from "path";
-import { z } from "zod";
-var TARGET_IDS = [
-  "opencode",
-  "cursor",
-  "claudecode",
-  "codexcli",
-  "mistralvibe",
-  "geminicli",
-  "copilot",
-  "agentsmd",
-  "cline",
-  "kilo",
-  "roo",
-  "qwencode",
-  "kiro",
-  "factorydroid",
-  "antigravity",
-  "junie",
-  "augmentcode",
-  "windsurf",
-  "warp",
-  "replit",
-  "zed"
-];
-var FEATURE_IDS = [
-  "rules",
-  "commands",
-  "agents",
-  "skills",
-  "hooks",
-  "plugins",
-  "mcp",
-  "ignore",
-  "models"
-];
-var REPO_MODES = ["repo", "monorepo", "metarepo"];
-var PackManifestSchema = z.object({
-  name: z.string().min(1),
-  version: z.string().default("1.0.0"),
-  description: z.string().default(""),
-  author: z.union([
-    z.string(),
-    z.object({ name: z.string(), email: z.string().optional() })
-  ]).optional(),
-  homepage: z.string().optional(),
-  repository: z.union([
-    z.string(),
-    z.object({ url: z.string(), type: z.string().optional() })
-  ]).optional(),
-  license: z.string().optional(),
-  logo: z.string().optional(),
-  tags: z.array(z.string()).default([]),
-  dependencies: z.array(z.string()).default([]),
-  conflicts: z.array(z.string()).default([]),
-  targets: z.union([z.literal("*"), z.array(z.string())]).default("*"),
-  features: z.union([z.literal("*"), z.array(z.string())]).default("*")
-});
-var FeaturesSchema = z.union([
-  z.literal("*"),
-  z.array(z.string()),
-  z.record(z.string(), z.union([z.literal("*"), z.array(z.string())]))
-]);
-var WorkspaceConfigSchema = z.object({
-  $schema: z.string().optional(),
-  packs: z.array(z.string()).default(["./packs/default"]),
-  disabled: z.array(z.string()).default([]),
-  targets: z.union([z.literal("*"), z.array(z.string())]).default("*"),
-  features: FeaturesSchema.default("*"),
-  mode: z.enum(REPO_MODES).default("repo"),
-  baseDirs: z.array(z.string()).default(["."]),
-  global: z.boolean().default(false),
-  delete: z.boolean().default(true),
-  verbose: z.boolean().default(false),
-  silent: z.boolean().default(false),
-  overrides: z.record(z.string(), z.record(z.string(), z.string())).default({}),
-  sources: z.array(z.object({
-    source: z.string(),
-    packs: z.array(z.string()).optional(),
-    skills: z.array(z.string()).optional()
-  })).default([]),
-  modelProfile: z.string().optional()
-});
-var CONFIG_FILES = ["agentpacks.local.jsonc", "agentpacks.jsonc"];
-function loadWorkspaceConfig(projectRoot) {
-  for (const filename of CONFIG_FILES) {
-    const filepath = resolve(projectRoot, filename);
-    if (existsSync(filepath)) {
-      const raw = readFileSync(filepath, "utf-8");
-      const parsed = parseJsonc(raw);
-      return WorkspaceConfigSchema.parse(parsed);
-    }
-  }
-  return WorkspaceConfigSchema.parse({});
-}
-function loadPackManifest(packDir) {
-  const filepath = resolve(packDir, "pack.json");
-  if (!existsSync(filepath)) {
-    const dirName = packDir.split("/").pop() ?? "unknown";
-    return PackManifestSchema.parse({ name: dirName });
-  }
-  const raw = readFileSync(filepath, "utf-8");
-  const parsed = JSON.parse(raw);
-  return PackManifestSchema.parse(parsed);
-}
-function resolveFeatures(config, targetId) {
-  const { features } = config;
-  if (features === "*") {
-    return [...FEATURE_IDS];
-  }
-  if (Array.isArray(features)) {
-    if (features.includes("*"))
-      return [...FEATURE_IDS];
-    return features.filter((f) => FEATURE_IDS.includes(f));
-  }
-  const targetFeatures = features[targetId];
-  if (!targetFeatures)
-    return [];
-  if (targetFeatures === "*")
-    return [...FEATURE_IDS];
-  if (Array.isArray(targetFeatures) && targetFeatures.includes("*"))
-    return [...FEATURE_IDS];
-  return targetFeatures.filter((f) => FEATURE_IDS.includes(f));
-}
-function resolveTargets(config) {
-  if (config.targets === "*")
-    return [...TARGET_IDS];
-  return config.targets;
-}
-
-// src/utils/filesystem.ts
-import {
-  existsSync as existsSync2,
-  mkdirSync,
-  readdirSync,
-  readFileSync as readFileSync2,
-  rmSync,
-  statSync,
-  writeFileSync
-} from "fs";
-import { dirname, join, relative } from "path";
-var GENERATED_HEADER_MD = "<!-- Generated by agentpacks. DO NOT EDIT. -->";
-var GENERATED_HEADER_JSON = "// Generated by agentpacks. DO NOT EDIT.";
-var GENERATED_HEADER_JS = "// Generated by agentpacks. DO NOT EDIT.";
-function writeGeneratedFile(filepath, content, options = {}) {
-  const { header = true, type } = options;
-  const ext = type ?? inferFileType(filepath);
-  ensureDir(dirname(filepath));
-  let output = content;
-  if (header) {
-    const headerComment = getHeader(ext);
-    if (headerComment) {
-      output = `${headerComment}
-${content}`;
-    }
-  }
-  writeFileSync(filepath, output, "utf-8");
-}
-function writeGeneratedJson(filepath, data, options = {}) {
-  const json = JSON.stringify(data, null, 2);
-  writeGeneratedFile(filepath, json + `
-`, { ...options, type: "json" });
-}
-function readFileOrNull(filepath) {
-  if (!existsSync2(filepath))
-    return null;
-  return readFileSync2(filepath, "utf-8");
-}
-function readJsonOrNull(filepath) {
-  const content = readFileOrNull(filepath);
-  if (content === null)
-    return null;
-  return JSON.parse(content);
-}
-function ensureDir(dirPath) {
-  if (!existsSync2(dirPath)) {
-    mkdirSync(dirPath, { recursive: true });
-  }
-}
-function removeIfExists(targetPath) {
-  if (existsSync2(targetPath)) {
-    rmSync(targetPath, { recursive: true, force: true });
-  }
-}
-function listFiles(dirPath, options = {}) {
-  const { extension, recursive = false } = options;
-  if (!existsSync2(dirPath))
-    return [];
-  const results = [];
-  const entries = readdirSync(dirPath);
-  for (const entry of entries) {
-    const fullPath = join(dirPath, entry);
-    const stat = statSync(fullPath);
-    if (stat.isDirectory() && recursive) {
-      results.push(...listFiles(fullPath, options));
-    } else if (stat.isFile()) {
-      if (!extension || entry.endsWith(extension)) {
-        results.push(fullPath);
-      }
-    }
-  }
-  return results;
-}
-function listDirs(dirPath) {
-  if (!existsSync2(dirPath))
-    return [];
-  return readdirSync(dirPath).map((entry) => join(dirPath, entry)).filter((fullPath) => statSync(fullPath).isDirectory());
-}
-function relPath(projectRoot, filepath) {
-  return relative(projectRoot, filepath);
-}
-function isGeneratedFile(filepath) {
-  const content = readFileOrNull(filepath);
-  if (!content)
-    return false;
-  return content.startsWith(GENERATED_HEADER_MD) || content.startsWith(GENERATED_HEADER_JSON) || content.startsWith(GENERATED_HEADER_JS);
-}
-function inferFileType(filepath) {
-  if (filepath.endsWith(".json") || filepath.endsWith(".jsonc"))
-    return "json";
-  if (filepath.endsWith(".ts") || filepath.endsWith(".mts"))
-    return "ts";
-  if (filepath.endsWith(".js") || filepath.endsWith(".mjs"))
-    return "js";
-  return "md";
-}
-function getHeader(type) {
-  switch (type) {
-    case "md":
-      return GENERATED_HEADER_MD;
-    case "json":
-      return GENERATED_HEADER_JSON;
-    case "js":
-    case "ts":
-      return GENERATED_HEADER_JS;
-    default:
-      return null;
-  }
-}
-
-// src/features/models.ts
-import { join as join2 } from "path";
-import { z as z2 } from "zod";
-var SECRET_PATTERNS = [
-  /["']api[_-]?key["']\s*:/i,
-  /["']apiKey["']\s*:/i,
-  /["']secret["']\s*:/i,
-  /["']password["']\s*:/i,
-  /["'](?:auth_token|access_token|bearer_token)["']\s*:/i,
-  /["']private[_-]?key["']\s*:/i,
-  /-----BEGIN\s+(RSA|EC|DSA|OPENSSH|PGP)\s+PRIVATE\s+KEY-----/,
-  /sk-[a-zA-Z0-9]{20,}/,
-  /Bearer\s+[a-zA-Z0-9._-]{20,}/
-];
-var AgentModelSchema = z2.object({
-  model: z2.string(),
-  temperature: z2.number().min(0).max(2).optional(),
-  top_p: z2.number().min(0).max(1).optional()
-});
-var ModelProfileSchema = z2.object({
-  extends: z2.string().optional(),
-  description: z2.string().optional(),
-  default: z2.string().optional(),
-  small: z2.string().optional(),
-  agents: z2.record(z2.string(), AgentModelSchema).optional()
-});
-var RoutingConditionSchema = z2.object({
-  complexity: z2.enum(["low", "medium", "high", "critical"]).optional().describe("Task complexity level"),
-  urgency: z2.enum(["low", "normal", "high"]).optional().describe("Time sensitivity"),
-  budget: z2.enum(["minimal", "standard", "premium"]).optional().describe("Cost/token budget tier"),
-  contextWindowNeed: z2.enum(["small", "medium", "large", "max"]).optional().describe("Required context window size"),
-  toolUseIntensity: z2.enum(["none", "light", "heavy"]).optional().describe("Expected tool/function calling intensity")
-});
-var RoutingRuleSchema = z2.object({
-  when: z2.record(z2.string(), z2.string()),
-  use: z2.string(),
-  description: z2.string().optional(),
-  priority: z2.number().optional()
-});
-var ProviderModelSchema = z2.object({
-  options: z2.record(z2.string(), z2.unknown()).optional(),
-  variants: z2.record(z2.string(), z2.record(z2.string(), z2.unknown())).optional()
-});
-var ProviderConfigSchema = z2.object({
-  options: z2.record(z2.string(), z2.unknown()).optional(),
-  models: z2.record(z2.string(), ProviderModelSchema).optional()
-});
-var ModelsSchema = z2.object({
-  default: z2.string().optional(),
-  small: z2.string().optional(),
-  agents: z2.record(z2.string(), AgentModelSchema).optional(),
-  profiles: z2.record(z2.string(), ModelProfileSchema).optional(),
-  providers: z2.record(z2.string(), ProviderConfigSchema).optional(),
-  routing: z2.array(RoutingRuleSchema).optional(),
-  overrides: z2.record(z2.string(), z2.object({
-    default: z2.string().optional(),
-    small: z2.string().optional(),
-    agents: z2.record(z2.string(), AgentModelSchema).optional()
-  })).optional()
-});
-function parseModels(packDir, packName) {
-  const modelsPath = join2(packDir, "models.json");
-  const raw = readJsonOrNull(modelsPath);
-  if (!raw)
-    return null;
-  const parsed = ModelsSchema.parse(raw);
-  return {
-    packName,
-    sourcePath: modelsPath,
-    config: parsed
-  };
-}
-function mergeModelsConfigs(configs) {
-  const warnings = [];
-  const result = {};
-  for (const entry of configs) {
-    const { config, packName } = entry;
-    if (config.default !== undefined && result.default === undefined) {
-      result.default = config.default;
-    } else if (config.default !== undefined && result.default !== undefined) {
-      warnings.push(`Models "default" from pack "${packName}" skipped (already defined).`);
-    }
-    if (config.small !== undefined && result.small === undefined) {
-      result.small = config.small;
-    } else if (config.small !== undefined && result.small !== undefined) {
-      warnings.push(`Models "small" from pack "${packName}" skipped (already defined).`);
-    }
-    if (config.agents) {
-      if (!result.agents)
-        result.agents = {};
-      for (const [name, assignment] of Object.entries(config.agents)) {
-        if (name in result.agents) {
-          warnings.push(`Models agent "${name}" from pack "${packName}" skipped (already defined).`);
-          continue;
-        }
-        result.agents[name] = assignment;
-      }
-    }
-    if (config.profiles) {
-      if (!result.profiles)
-        result.profiles = {};
-      for (const [name, profile] of Object.entries(config.profiles)) {
-        if (name in result.profiles) {
-          warnings.push(`Models profile "${name}" from pack "${packName}" skipped (already defined).`);
-          continue;
-        }
-        result.profiles[name] = profile;
-      }
-    }
-    if (config.providers) {
-      if (!result.providers)
-        result.providers = {};
-      for (const [providerName, providerConfig] of Object.entries(config.providers)) {
-        if (!(providerName in result.providers)) {
-          result.providers[providerName] = providerConfig;
-        } else {
-          const existing = result.providers[providerName];
-          if (!existing) {
-            result.providers[providerName] = providerConfig;
-            continue;
-          }
-          if (providerConfig.options) {
-            existing.options = {
-              ...providerConfig.options,
-              ...existing.options
-            };
-          }
-          if (providerConfig.models) {
-            if (!existing.models)
-              existing.models = {};
-            for (const [modelName, modelConfig] of Object.entries(providerConfig.models)) {
-              if (!(modelName in existing.models)) {
-                existing.models[modelName] = modelConfig;
-              }
-            }
-          }
-        }
-      }
-    }
-    if (config.routing) {
-      if (!result.routing)
-        result.routing = [];
-      result.routing.push(...config.routing);
-    }
-    if (config.overrides) {
-      if (!result.overrides)
-        result.overrides = {};
-      for (const [targetId, override] of Object.entries(config.overrides)) {
-        if (targetId in result.overrides) {
-          warnings.push(`Models override for target "${targetId}" from pack "${packName}" skipped (already defined).`);
-          continue;
-        }
-        result.overrides[targetId] = override;
-      }
-    }
-  }
-  return { config: result, warnings };
-}
-function scanModelsForSecrets(config) {
-  const warnings = [];
-  const json = JSON.stringify(config);
-  for (const pattern of SECRET_PATTERNS) {
-    if (pattern.test(json)) {
-      warnings.push(`Potential secret detected in models.json matching pattern: ${pattern.source}`);
-    }
-  }
-  return warnings;
-}
-
-// src/utils/credentials.ts
-import { existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "fs";
-import { homedir } from "os";
-import { dirname as dirname2, join as join3 } from "path";
-var CONFIG_DIR = join3(homedir(), ".config", "agentpacks");
-var CREDENTIALS_FILE = join3(CONFIG_DIR, "credentials.json");
-function loadCredentials() {
-  if (!existsSync3(CREDENTIALS_FILE)) {
-    return { registryUrl: "https://registry.agentpacks.dev" };
-  }
-  try {
-    const raw = readFileSync3(CREDENTIALS_FILE, "utf-8");
-    return JSON.parse(raw);
-  } catch {
-    return { registryUrl: "https://registry.agentpacks.dev" };
-  }
-}
-function saveCredentials(credentials) {
-  mkdirSync2(dirname2(CREDENTIALS_FILE), { recursive: true });
-  writeFileSync2(CREDENTIALS_FILE, JSON.stringify(credentials, null, 2) + `
-`, {
-    mode: 384
-  });
-}
-function clearCredentials() {
-  if (existsSync3(CREDENTIALS_FILE)) {
-    writeFileSync2(CREDENTIALS_FILE, JSON.stringify({ registryUrl: "https://registry.agentpacks.dev" }) + `
-`);
-  }
-}
-
-// src/utils/registry-client.ts
-var DEFAULT_REGISTRY_URL = "https://registry.agentpacks.dev";
-function createRegistryClient(config) {
-  return new RegistryClient({
-    registryUrl: config?.registryUrl ?? DEFAULT_REGISTRY_URL,
-    authToken: config?.authToken,
-    timeout: config?.timeout ?? 30000
-  });
-}
-
-class RegistryClient {
-  config;
-  constructor(config) {
-    this.config = {
-      registryUrl: config.registryUrl.replace(/\/+$/, ""),
-      authToken: config.authToken,
-      timeout: config.timeout ?? 30000
-    };
-  }
-  async search(params) {
-    const searchParams = new URLSearchParams;
-    if (params.query)
-      searchParams.set("q", params.query);
-    if (params.tags?.length)
-      searchParams.set("tags", params.tags.join(","));
-    if (params.targets?.length)
-      searchParams.set("targets", params.targets.join(","));
-    if (params.features?.length)
-      searchParams.set("features", params.features.join(","));
-    if (params.author)
-      searchParams.set("author", params.author);
-    if (params.sort)
-      searchParams.set("sort", params.sort);
-    if (params.limit)
-      searchParams.set("limit", String(params.limit));
-    if (params.offset)
-      searchParams.set("offset", String(params.offset));
-    const url = `${this.config.registryUrl}/packs?${searchParams.toString()}`;
-    const res = await this.fetch(url);
-    return res;
-  }
-  async info(packName) {
-    const url = `${this.config.registryUrl}/packs/${encodeURIComponent(packName)}`;
-    const res = await this.fetch(url);
-    return res;
-  }
-  async download(packName, version = "latest") {
-    const url = `${this.config.registryUrl}/packs/${encodeURIComponent(packName)}/versions/${encodeURIComponent(version)}/download`;
-    const response = await fetch(url, {
-      headers: this.headers(),
-      signal: AbortSignal.timeout(this.config.timeout)
-    });
-    if (!response.ok) {
-      throw new RegistryApiError(response.status, `Failed to download ${packName}@${version}: ${response.statusText}`);
-    }
-    const integrity = response.headers.get("x-integrity") ?? "";
-    const data = await response.arrayBuffer();
-    return { data, integrity };
-  }
-  async publish(tarball, metadata) {
-    if (!this.config.authToken) {
-      throw new Error("Authentication required. Run `agentpacks login` first.");
-    }
-    const formData = new FormData;
-    formData.append("tarball", new Blob([tarball], { type: "application/gzip" }), `${metadata.name}-${metadata.version}.tgz`);
-    formData.append("metadata", JSON.stringify(metadata));
-    const url = `${this.config.registryUrl}/packs`;
-    const response = await fetch(url, {
-      method: "POST",
-      headers: {
-        Authorization: `Bearer ${this.config.authToken}`
-      },
-      body: formData,
-      signal: AbortSignal.timeout(this.config.timeout)
-    });
-    if (!response.ok) {
-      const body = await response.text();
-      throw new RegistryApiError(response.status, `Publish failed: ${body || response.statusText}`);
-    }
-    return await response.json();
-  }
-  async featured(limit) {
-    const url = limit ? `${this.config.registryUrl}/featured?limit=${limit}` : `${this.config.registryUrl}/featured`;
-    const res = await this.fetch(url);
-    return res.packs;
-  }
-  async tags() {
-    const url = `${this.config.registryUrl}/tags`;
-    const res = await this.fetch(url);
-    return res.tags;
-  }
-  async stats() {
-    const url = `${this.config.registryUrl}/stats`;
-    return await this.fetch(url);
-  }
-  async health() {
-    try {
-      const url = `${this.config.registryUrl}/health`;
-      await this.fetch(url);
-      return true;
-    } catch {
-      return false;
-    }
-  }
-  async fetch(url) {
-    const response = await fetch(url, {
-      headers: this.headers(),
-      signal: AbortSignal.timeout(this.config.timeout)
-    });
-    if (!response.ok) {
-      const body = await response.text();
-      throw new RegistryApiError(response.status, body || response.statusText);
-    }
-    return response.json();
-  }
-  headers() {
-    const h = {
-      Accept: "application/json"
-    };
-    if (this.config.authToken) {
-      h["Authorization"] = `Bearer ${this.config.authToken}`;
-    }
-    return h;
-  }
-}
-
-class RegistryApiError extends Error {
-  status;
-  constructor(status, message) {
-    super(message);
-    this.name = "RegistryApiError";
-    this.status = status;
-  }
-}
-
-// src/utils/tarball.ts
-import { execSync } from "child_process";
-import { createHash } from "crypto";
-import { existsSync as existsSync4, mkdirSync as mkdirSync3, readFileSync as readFileSync4, rmSync as rmSync2 } from "fs";
-import { tmpdir } from "os";
-import { join as join4, resolve as resolve2 } from "path";
-async function createTarball(packDir) {
-  const absDir = resolve2(packDir);
-  const tmpFile = join4(tmpdir(), `agentpacks-${Date.now()}.tgz`);
-  try {
-    execSync(`tar -czf "${tmpFile}" -C "${absDir}" .`, {
-      stdio: "pipe"
-    });
-    const buffer = readFileSync4(tmpFile);
-    return buffer.buffer.slice(buffer.byteOffset, buffer.byteOffset + buffer.byteLength);
-  } finally {
-    if (existsSync4(tmpFile)) {
-      rmSync2(tmpFile);
-    }
-  }
-}
-async function extractTarball(data, targetDir) {
-  mkdirSync3(targetDir, { recursive: true });
-  const tmpFile = join4(tmpdir(), `agentpacks-${Date.now()}.tgz`);
-  try {
-    const buffer = Buffer.from(data);
-    const { writeFileSync: writeFileSync3 } = await import("fs");
-    writeFileSync3(tmpFile, buffer);
-    execSync(`tar -xzf "${tmpFile}" -C "${targetDir}"`, {
-      stdio: "pipe"
-    });
-  } finally {
-    if (existsSync4(tmpFile)) {
-      rmSync2(tmpFile);
-    }
-  }
-}
-function computeTarballIntegrity(data) {
-  const hash = createHash("sha256").update(Buffer.from(data)).digest("hex");
-  return `sha256-${hash}`;
-}
-
-// src/cli/publish.ts
-import chalk from "chalk";
-import { existsSync as existsSync5 } from "fs";
-import { resolve as resolve3 } from "path";
-async function runPublish(projectRoot, options) {
-  const credentials = loadCredentials();
-  if (!credentials.token) {
-    console.log(chalk.red("Not authenticated. Run `agentpacks login` first."));
-    process.exit(1);
-  }
-  const packDir = resolve3(projectRoot);
-  const packJsonPath = resolve3(packDir, "pack.json");
-  if (!existsSync5(packJsonPath)) {
-    console.log(chalk.red("No pack.json found. Are you in a pack directory?"));
-    process.exit(1);
-  }
-  const manifest = loadPackManifest(packDir);
-  console.log(chalk.bold(`Publishing ${manifest.name}@${manifest.version}...`));
-  const models = parseModels(packDir, manifest.name);
-  if (models) {
-    const secretWarnings = scanModelsForSecrets(models.config);
-    if (secretWarnings.length > 0) {
-      console.log(chalk.red(`
-Blocked: secrets detected in models.json:`));
-      for (const w of secretWarnings) {
-        console.log(chalk.red(`  - ${w}`));
-      }
-      process.exit(1);
-    }
-  }
-  if (options.verbose)
-    console.log(chalk.dim("  Creating tarball..."));
-  const tarball = await createTarball(packDir);
-  if (options.verbose)
-    console.log(chalk.dim("  Uploading..."));
-  const client = createRegistryClient({
-    registryUrl: credentials.registryUrl,
-    authToken: credentials.token
-  });
-  try {
-    const result = await client.publish(tarball, {
-      name: manifest.name,
-      version: manifest.version,
-      manifest
-    });
-    console.log(chalk.green(`
-Published ${result.name}@${result.version}`));
-    console.log(chalk.dim(`  integrity: ${result.integrity}`));
-  } catch (err) {
-    console.log(chalk.red(`
-Publish failed: ${err instanceof Error ? err.message : String(err)}`));
-    process.exit(1);
-  }
-}
-export {
-  runPublish
-};
+var s=import.meta.require;import{existsSync as v,readFileSync as T}from"fs";import{parse as i}from"jsonc-parser";import{resolve as C}from"path";import{z as X}from"zod";var t=["opencode","cursor","claudecode","codexcli","mistralvibe","geminicli","copilot","cline","kilo","roo","qwencode","kiro","factorydroid","antigravity","junie","augmentcode","windsurf","warp","replit","zed"],G=["rules","commands","agents","skills","hooks","plugins","mcp","ignore","models"],r=["repo","monorepo","metarepo"],j=X.object({name:X.string().min(1),version:X.string().default("1.0.0"),description:X.string().default(""),author:X.union([X.string(),X.object({name:X.string(),email:X.string().optional()})]).optional(),homepage:X.string().optional(),repository:X.union([X.string(),X.object({url:X.string(),type:X.string().optional()})]).optional(),license:X.string().optional(),logo:X.string().optional(),tags:X.array(X.string()).default([]),dependencies:X.array(X.string()).default([]),conflicts:X.array(X.string()).default([]),targets:X.union([X.literal("*"),X.array(X.string())]).default("*"),features:X.union([X.literal("*"),X.array(X.string())]).default("*")}),a=X.union([X.literal("*"),X.array(X.string()),X.record(X.string(),X.union([X.literal("*"),X.array(X.string())]))]),x=X.object({$schema:X.string().optional(),packs:X.array(X.string()).default(["./packs/default"]),disabled:X.array(X.string()).default([]),targets:X.union([X.literal("*"),X.array(X.string())]).default("*"),features:a.default("*"),mode:X.enum(r).default("repo"),baseDirs:X.array(X.string()).default(["."]),global:X.boolean().default(!1),delete:X.boolean().default(!0),verbose:X.boolean().default(!1),silent:X.boolean().default(!1),overrides:X.record(X.string(),X.record(X.string(),X.string())).default({}),sources:X.array(X.object({source:X.string(),packs:X.array(X.string()).optional(),skills:X.array(X.string()).optional()})).default([]),modelProfile:X.string().optional()}),e=["agentpacks.local.jsonc","agentpacks.jsonc"];function yq(q){for(let K of e){let Q=C(q,K);if(v(Q)){let Z=T(Q,"utf-8"),$=i(Z);return x.parse($)}}return x.parse({})}function I(q){let K=C(q,"pack.json");if(!v(K)){let $=q.split("/").pop()??"unknown";return j.parse({name:$})}let Q=T(K,"utf-8"),Z=JSON.parse(Q);return j.parse(Z)}function Sq(q,K){let{features:Q}=q;if(Q==="*")return[...G];if(Array.isArray(Q)){if(Q.includes("*"))return[...G];return Q.filter(($)=>G.includes($))}let Z=Q[K];if(!Z)return[];if(Z==="*")return[...G];if(Array.isArray(Z)&&Z.includes("*"))return[...G];return Z.filter(($)=>G.includes($))}function Eq(q){if(q.targets==="*")return[...t];return q.targets}import{existsSync as L,mkdirSync as qq,readdirSync as _,readFileSync as Kq,rmSync as Qq,statSync as A,writeFileSync as Xq}from"fs";import{dirname as Yq,join as N,relative as Zq}from"path";var F="<!-- Generated by agentpacks. DO NOT EDIT. -->",P="// Generated by agentpacks. DO NOT EDIT.",k="// Generated by agentpacks. DO NOT EDIT.";function $q(q,K,Q={}){let{header:Z=!0,type:$}=Q,W=$??Wq(q);Bq(Yq(q));let B=K;if(Z){let V=Uq(W);if(V)B=`${V}
+${K}`}Xq(q,B,"utf-8")}function hq(q,K,Q={}){let Z=JSON.stringify(K,null,2);$q(q,Z+`
+`,{...Q,type:"json"})}function R(q){if(!L(q))return null;return Kq(q,"utf-8")}function D(q){let K=R(q);if(K===null)return null;return JSON.parse(K)}function Bq(q){if(!L(q))qq(q,{recursive:!0})}function zq(q){if(L(q))Qq(q,{recursive:!0,force:!0})}function Vq(q,K={}){let{extension:Q,recursive:Z=!1}=K;if(!L(q))return[];let $=[],W=_(q);for(let B of W){let V=N(q,B),J=A(V);if(J.isDirectory()&&Z)$.push(...Vq(V,K));else if(J.isFile()){if(!Q||B.endsWith(Q))$.push(V)}}return $}function mq(q){if(!L(q))return[];return _(q).map((K)=>N(q,K)).filter((K)=>A(K).isDirectory())}function fq(q,K){return Zq(q,K)}function pq(q){let K=R(q);if(!K)return!1;return K.startsWith(F)||K.startsWith(P)||K.startsWith(k)}function Wq(q){if(q.endsWith(".json")||q.endsWith(".jsonc"))return"json";if(q.endsWith(".ts")||q.endsWith(".mts"))return"ts";if(q.endsWith(".js")||q.endsWith(".mjs"))return"js";return"md"}function Uq(q){switch(q){case"md":return F;case"json":return P;case"js":case"ts":return k;default:return null}}import{join as Jq}from"path";import{z as Y}from"zod";var Oq=[/["']api[_-]?key["']\s*:/i,/["']apiKey["']\s*:/i,/["']secret["']\s*:/i,/["']password["']\s*:/i,/["'](?:auth_token|access_token|bearer_token)["']\s*:/i,/["']private[_-]?key["']\s*:/i,/-----BEGIN\s+(RSA|EC|DSA|OPENSSH|PGP)\s+PRIVATE\s+KEY-----/,/sk-[a-zA-Z0-9]{20,}/,/Bearer\s+[a-zA-Z0-9._-]{20,}/],w=Y.object({model:Y.string(),temperature:Y.number().min(0).max(2).optional(),top_p:Y.number().min(0).max(1).optional()}),Gq=Y.object({extends:Y.string().optional(),description:Y.string().optional(),default:Y.string().optional(),small:Y.string().optional(),agents:Y.record(Y.string(),w).optional()}),sq=Y.object({complexity:Y.enum(["low","medium","high","critical"]).optional().describe("Task complexity level"),urgency:Y.enum(["low","normal","high"]).optional().describe("Time sensitivity"),budget:Y.enum(["minimal","standard","premium"]).optional().describe("Cost/token budget tier"),contextWindowNeed:Y.enum(["small","medium","large","max"]).optional().describe("Required context window size"),toolUseIntensity:Y.enum(["none","light","heavy"]).optional().describe("Expected tool/function calling intensity")}),Hq=Y.object({when:Y.record(Y.string(),Y.string()),use:Y.string(),description:Y.string().optional(),priority:Y.number().optional()}),Lq=Y.object({options:Y.record(Y.string(),Y.unknown()).optional(),variants:Y.record(Y.string(),Y.record(Y.string(),Y.unknown())).optional()}),Mq=Y.object({options:Y.record(Y.string(),Y.unknown()).optional(),models:Y.record(Y.string(),Lq).optional()}),bq=Y.object({default:Y.string().optional(),small:Y.string().optional(),agents:Y.record(Y.string(),w).optional(),profiles:Y.record(Y.string(),Gq).optional(),providers:Y.record(Y.string(),Mq).optional(),routing:Y.array(Hq).optional(),overrides:Y.record(Y.string(),Y.object({default:Y.string().optional(),small:Y.string().optional(),agents:Y.record(Y.string(),w).optional()})).optional()});function y(q,K){let Q=Jq(q,"models.json"),Z=D(Q);if(!Z)return null;let $=bq.parse(Z);return{packName:K,sourcePath:Q,config:$}}function iq(q){let K=[],Q={};for(let Z of q){let{config:$,packName:W}=Z;if($.default!==void 0&&Q.default===void 0)Q.default=$.default;else if($.default!==void 0&&Q.default!==void 0)K.push(`Models "default" from pack "${W}" skipped (already defined).`);if($.small!==void 0&&Q.small===void 0)Q.small=$.small;else if($.small!==void 0&&Q.small!==void 0)K.push(`Models "small" from pack "${W}" skipped (already defined).`);if($.agents){if(!Q.agents)Q.agents={};for(let[B,V]of Object.entries($.agents)){if(B in Q.agents){K.push(`Models agent "${B}" from pack "${W}" skipped (already defined).`);continue}Q.agents[B]=V}}if($.profiles){if(!Q.profiles)Q.profiles={};for(let[B,V]of Object.entries($.profiles)){if(B in Q.profiles){K.push(`Models profile "${B}" from pack "${W}" skipped (already defined).`);continue}Q.profiles[B]=V}}if($.providers){if(!Q.providers)Q.providers={};for(let[B,V]of Object.entries($.providers))if(!(B in Q.providers))Q.providers[B]=V;else{let J=Q.providers[B];if(!J){Q.providers[B]=V;continue}if(V.options)J.options={...V.options,...J.options};if(V.models){if(!J.models)J.models={};for(let[U,b]of Object.entries(V.models))if(!(U in J.models))J.models[U]=b}}}if($.routing){if(!Q.routing)Q.routing=[];Q.routing.push(...$.routing)}if($.overrides){if(!Q.overrides)Q.overrides={};for(let[B,V]of Object.entries($.overrides)){if(B in Q.overrides){K.push(`Models override for target "${B}" from pack "${W}" skipped (already defined).`);continue}Q.overrides[B]=V}}}return{config:Q,warnings:K}}function S(q){let K=[],Q=JSON.stringify(q);for(let Z of Oq)if(Z.test(Q))K.push(`Potential secret detected in models.json matching pattern: ${Z.source}`);return K}import{existsSync as E,mkdirSync as wq,readFileSync as jq,writeFileSync as u}from"fs";import{homedir as xq}from"os";import{dirname as vq,join as g}from"path";var Tq=g(xq(),".config","agentpacks"),H=g(Tq,"credentials.json");function d(){if(!E(H))return{registryUrl:"https://registry.agentpacks.dev"};try{let q=jq(H,"utf-8");return JSON.parse(q)}catch{return{registryUrl:"https://registry.agentpacks.dev"}}}function qK(q){wq(vq(H),{recursive:!0}),u(H,JSON.stringify(q,null,2)+`
+`,{mode:384})}function KK(){if(E(H))u(H,JSON.stringify({registryUrl:"https://registry.agentpacks.dev"})+`
+`)}function h(q){return new z({registryUrl:q?.registryUrl??"https://registry.agentpacks.dev",authToken:q?.authToken,timeout:q?.timeout??30000})}class z{config;constructor(q){this.config={registryUrl:q.registryUrl.replace(/\/+$/,""),authToken:q.authToken,timeout:q.timeout??30000}}async search(q){let K=new URLSearchParams;if(q.query)K.set("q",q.query);if(q.tags?.length)K.set("tags",q.tags.join(","));if(q.targets?.length)K.set("targets",q.targets.join(","));if(q.features?.length)K.set("features",q.features.join(","));if(q.author)K.set("author",q.author);if(q.sort)K.set("sort",q.sort);if(q.limit)K.set("limit",String(q.limit));if(q.offset)K.set("offset",String(q.offset));let Q=`${this.config.registryUrl}/packs?${K.toString()}`;return await this.fetch(Q)}async info(q){let K=`${this.config.registryUrl}/packs/${encodeURIComponent(q)}`;return await this.fetch(K)}async download(q,K="latest"){let Q=`${this.config.registryUrl}/packs/${encodeURIComponent(q)}/versions/${encodeURIComponent(K)}/download`,Z=await fetch(Q,{headers:this.headers(),signal:AbortSignal.timeout(this.config.timeout)});if(!Z.ok)throw new M(Z.status,`Failed to download ${q}@${K}: ${Z.statusText}`);let $=Z.headers.get("x-integrity")??"";return{data:await Z.arrayBuffer(),integrity:$}}async publish(q,K){if(!this.config.authToken)throw Error("Authentication required. Run `agentpacks login` first.");let Q=new FormData;Q.append("tarball",new Blob([q],{type:"application/gzip"}),`${K.name}-${K.version}.tgz`),Q.append("metadata",JSON.stringify(K));let Z=`${this.config.registryUrl}/packs`,$=await fetch(Z,{method:"POST",headers:{Authorization:`Bearer ${this.config.authToken}`},body:Q,signal:AbortSignal.timeout(this.config.timeout)});if(!$.ok){let W=await $.text();throw new M($.status,`Publish failed: ${W||$.statusText}`)}return await $.json()}async featured(q){let K=q?`${this.config.registryUrl}/featured?limit=${q}`:`${this.config.registryUrl}/featured`;return(await this.fetch(K)).packs}async tags(){let q=`${this.config.registryUrl}/tags`;return(await this.fetch(q)).tags}async stats(){let q=`${this.config.registryUrl}/stats`;return await this.fetch(q)}async health(){try{let q=`${this.config.registryUrl}/health`;return await this.fetch(q),!0}catch{return!1}}async fetch(q){let K=await fetch(q,{headers:this.headers(),signal:AbortSignal.timeout(this.config.timeout)});if(!K.ok){let Q=await K.text();throw new M(K.status,Q||K.statusText)}return K.json()}headers(){let q={Accept:"application/json"};if(this.config.authToken)q.Authorization=`Bearer ${this.config.authToken}`;return q}}class M extends Error{status;constructor(q,K){super(K);this.name="RegistryApiError",this.status=q}}import{execSync as m}from"child_process";import{createHash as Cq}from"crypto";import{existsSync as f,mkdirSync as Iq,readFileSync as _q,rmSync as p}from"fs";import{tmpdir as c}from"os";import{join as l,resolve as Aq}from"path";async function o(q){let K=Aq(q),Q=l(c(),`agentpacks-${Date.now()}.tgz`);try{m(`tar -czf "${Q}" -C "${K}" .`,{stdio:"pipe"});let Z=_q(Q);return Z.buffer.slice(Z.byteOffset,Z.byteOffset+Z.byteLength)}finally{if(f(Q))p(Q)}}async function WK(q,K){Iq(K,{recursive:!0});let Q=l(c(),`agentpacks-${Date.now()}.tgz`);try{let Z=Buffer.from(q),{writeFileSync:$}=await import("fs");$(Q,Z),m(`tar -xzf "${Q}" -C "${K}"`,{stdio:"pipe"})}finally{if(f(Q))p(Q)}}function UK(q){return`sha256-${Cq("sha256").update(Buffer.from(q)).digest("hex")}`}import O from"chalk";import{existsSync as Nq}from"fs";import{resolve as n}from"path";async function xK(q,K){let Q=d();if(!Q.token)console.log(O.red("Not authenticated. Run `agentpacks login` first.")),process.exit(1);let Z=n(q),$=n(Z,"pack.json");if(!Nq($))console.log(O.red("No pack.json found. Are you in a pack directory?")),process.exit(1);let W=I(Z);console.log(O.bold(`Publishing ${W.name}@${W.version}...`));let B=y(Z,W.name);if(B){let U=S(B.config);if(U.length>0){console.log(O.red(`
+Blocked: secrets detected in models.json:`));for(let b of U)console.log(O.red(`  - ${b}`));process.exit(1)}}if(K.verbose)console.log(O.dim("  Creating tarball..."));let V=await o(Z);if(K.verbose)console.log(O.dim("  Uploading..."));let J=h({registryUrl:Q.registryUrl,authToken:Q.token});try{let U=await J.publish(V,{name:W.name,version:W.version,manifest:W});console.log(O.green(`
+Published ${U.name}@${U.version}`)),console.log(O.dim(`  integrity: ${U.integrity}`))}catch(U){console.log(O.red(`
+Publish failed: ${U instanceof Error?U.message:String(U)}`)),process.exit(1)}}export{xK as runPublish};