agentpacks 1.7.13 → 1.8.0

package/dist/sources/local.js

@@ -1,24 +1,2 @@
 // @bun
-var __require = import.meta.require;
-
-// src/sources/local.ts
-import { existsSync } from "fs";
-import { isAbsolute, resolve } from "path";
-function resolveLocalPack(packRef, projectRoot) {
-  let resolved;
-  if (isAbsolute(packRef)) {
-    resolved = packRef;
-  } else {
-    resolved = resolve(projectRoot, packRef);
-  }
-  if (!existsSync(resolved))
-    return null;
-  return resolved;
-}
-function isLocalPackRef(packRef) {
-  return packRef.startsWith("./") || packRef.startsWith("../") || isAbsolute(packRef);
-}
-export {
-  resolveLocalPack,
-  isLocalPackRef
-};
+var D=import.meta.require;import{existsSync as z}from"fs";import{isAbsolute as q,resolve as B}from"path";function H(g,w){let m;if(q(g))m=g;else m=B(w,g);if(!z(m))return null;return m}function I(g){return g.startsWith("./")||g.startsWith("../")||q(g)}export{H as resolveLocalPack,I as isLocalPackRef};

package/dist/sources/npm-ref.js

@@ -1,56 +1,2 @@
 // @bun
-var __require = import.meta.require;
-
-// src/sources/npm-ref.ts
-function parseNpmSourceRef(source) {
-  let s = source;
-  if (s.startsWith("npm:")) {
-    s = s.slice(4);
-  }
-  let path = "";
-  const pathColonIdx = findPathColon(s);
-  if (pathColonIdx > -1) {
-    path = s.slice(pathColonIdx + 1);
-    s = s.slice(0, pathColonIdx);
-  }
-  let version = "latest";
-  const versionAtIdx = findVersionAt(s);
-  if (versionAtIdx > -1) {
-    version = s.slice(versionAtIdx + 1);
-    s = s.slice(0, versionAtIdx);
-  }
-  if (!s) {
-    throw new Error(`Invalid npm source reference: "${source}". Expected package name.`);
-  }
-  return { packageName: s, version, path };
-}
-function findPathColon(s) {
-  const startAfter = s.startsWith("@") ? s.indexOf("/") + 1 : 0;
-  const vAt = findVersionAt(s);
-  const searchFrom = vAt > -1 ? vAt : startAfter;
-  return s.indexOf(":", searchFrom);
-}
-function findVersionAt(s) {
-  if (s.startsWith("@")) {
-    const slashIdx = s.indexOf("/");
-    if (slashIdx === -1)
-      return -1;
-    return s.indexOf("@", slashIdx + 1);
-  }
-  return s.indexOf("@");
-}
-function isNpmPackRef(packRef) {
-  if (packRef.startsWith("npm:"))
-    return true;
-  if (packRef.startsWith("@") && packRef.includes("/"))
-    return true;
-  return false;
-}
-function npmSourceKey(parsed) {
-  return `npm:${parsed.packageName}`;
-}
-export {
-  parseNpmSourceRef,
-  npmSourceKey,
-  isNpmPackRef
-};
+var G=import.meta.require;function J(b){let g=b;if(g.startsWith("npm:"))g=g.slice(4);let j="",q=E(g);if(q>-1)j=g.slice(q+1),g=g.slice(0,q);let z="latest",w=D(g);if(w>-1)z=g.slice(w+1),g=g.slice(0,w);if(!g)throw Error(`Invalid npm source reference: "${b}". Expected package name.`);return{packageName:g,version:z,path:j}}function E(b){let g=b.startsWith("@")?b.indexOf("/")+1:0,j=D(b),q=j>-1?j:g;return b.indexOf(":",q)}function D(b){if(b.startsWith("@")){let g=b.indexOf("/");if(g===-1)return-1;return b.indexOf("@",g+1)}return b.indexOf("@")}function K(b){if(b.startsWith("npm:"))return!0;if(b.startsWith("@")&&b.includes("/"))return!0;return!1}function L(b){return`npm:${b.packageName}`}export{J as parseNpmSourceRef,L as npmSourceKey,K as isNpmPackRef};

package/dist/sources/npm.js

@@ -1,184 +1,3 @@
 // @bun
-var __require = import.meta.require;
-
-// src/core/lockfile.ts
-import { createHash } from "crypto";
-import { existsSync, readFileSync, writeFileSync } from "fs";
-import { resolve } from "path";
-var LOCKFILE_VERSION = 1;
-var LOCKFILE_NAME = "agentpacks.lock";
-function loadLockfile(projectRoot) {
-  const filepath = resolve(projectRoot, LOCKFILE_NAME);
-  if (!existsSync(filepath)) {
-    return { lockfileVersion: LOCKFILE_VERSION, sources: {} };
-  }
-  const raw = readFileSync(filepath, "utf-8");
-  return JSON.parse(raw);
-}
-function saveLockfile(projectRoot, lockfile) {
-  const filepath = resolve(projectRoot, LOCKFILE_NAME);
-  writeFileSync(filepath, JSON.stringify(lockfile, null, 2) + `
-`);
-}
-function getLockedSource(lockfile, sourceKey) {
-  return lockfile.sources[sourceKey];
-}
-function setLockedSource(lockfile, sourceKey, entry) {
-  lockfile.sources[sourceKey] = entry;
-}
-function computeIntegrity(content) {
-  const hash = createHash("sha256").update(content).digest("hex");
-  return `sha256-${hash}`;
-}
-function isLockfileFrozenValid(lockfile, sourceKeys) {
-  const missing = sourceKeys.filter((key) => !(key in lockfile.sources));
-  return { valid: missing.length === 0, missing };
-}
-
-// src/sources/npm-ref.ts
-function parseNpmSourceRef(source) {
-  let s = source;
-  if (s.startsWith("npm:")) {
-    s = s.slice(4);
-  }
-  let path = "";
-  const pathColonIdx = findPathColon(s);
-  if (pathColonIdx > -1) {
-    path = s.slice(pathColonIdx + 1);
-    s = s.slice(0, pathColonIdx);
-  }
-  let version = "latest";
-  const versionAtIdx = findVersionAt(s);
-  if (versionAtIdx > -1) {
-    version = s.slice(versionAtIdx + 1);
-    s = s.slice(0, versionAtIdx);
-  }
-  if (!s) {
-    throw new Error(`Invalid npm source reference: "${source}". Expected package name.`);
-  }
-  return { packageName: s, version, path };
-}
-function findPathColon(s) {
-  const startAfter = s.startsWith("@") ? s.indexOf("/") + 1 : 0;
-  const vAt = findVersionAt(s);
-  const searchFrom = vAt > -1 ? vAt : startAfter;
-  return s.indexOf(":", searchFrom);
-}
-function findVersionAt(s) {
-  if (s.startsWith("@")) {
-    const slashIdx = s.indexOf("/");
-    if (slashIdx === -1)
-      return -1;
-    return s.indexOf("@", slashIdx + 1);
-  }
-  return s.indexOf("@");
-}
-function isNpmPackRef(packRef) {
-  if (packRef.startsWith("npm:"))
-    return true;
-  if (packRef.startsWith("@") && packRef.includes("/"))
-    return true;
-  return false;
-}
-function npmSourceKey(parsed) {
-  return `npm:${parsed.packageName}`;
-}
-
-// src/sources/npm.ts
-import { execSync } from "child_process";
-import { existsSync as existsSync2, mkdirSync, readdirSync } from "fs";
-import { join, resolve as resolve2 } from "path";
-var NPM_REGISTRY = "https://registry.npmjs.org";
-async function resolveNpmVersion(parsed) {
-  const url = `${NPM_REGISTRY}/${encodeURIComponent(parsed.packageName)}/${parsed.version}`;
-  const res = await fetch(url, {
-    headers: { Accept: "application/json" }
-  });
-  if (!res.ok) {
-    throw new Error(`Could not resolve npm package "${parsed.packageName}@${parsed.version}": ${res.status}`);
-  }
-  const data = await res.json();
-  return { version: data.version, tarball: data.dist.tarball };
-}
-async function installNpmSource(projectRoot, source, lockfile, options = {}) {
-  const parsed = parseNpmSourceRef(source);
-  const sourceKey = npmSourceKey(parsed);
-  const installed = [];
-  const warnings = [];
-  const locked = getLockedSource(lockfile, sourceKey);
-  if (options.frozen && !locked) {
-    throw new Error(`Frozen mode: no lockfile entry for source "${sourceKey}".`);
-  }
-  let resolvedVersion;
-  if (locked && !options.update) {
-    resolvedVersion = locked.resolvedRef;
-  } else {
-    const resolved = await resolveNpmVersion(parsed);
-    resolvedVersion = resolved.version;
-  }
-  const curatedDir = resolve2(projectRoot, ".agentpacks", ".curated");
-  mkdirSync(curatedDir, { recursive: true });
-  extractNpmPack(parsed, resolvedVersion, curatedDir, installed, warnings);
-  const newEntry = {
-    requestedRef: parsed.version,
-    resolvedRef: resolvedVersion,
-    resolvedAt: new Date().toISOString(),
-    skills: {},
-    packs: {}
-  };
-  setLockedSource(lockfile, sourceKey, newEntry);
-  return { installed, warnings };
-}
-function extractNpmPack(parsed, version, curatedDir, installed, warnings) {
-  const pkgSpec = `${parsed.packageName}@${version}`;
-  const packName = parsed.packageName.replace(/^@/, "").replace(/\//g, "-");
-  const packOutDir = resolve2(curatedDir, packName);
-  try {
-    const tmpDir = resolve2(curatedDir, ".tmp-npm");
-    mkdirSync(tmpDir, { recursive: true });
-    execSync(`npm pack ${pkgSpec} --pack-destination "${tmpDir}"`, {
-      stdio: "pipe",
-      timeout: 30000
-    });
-    const tgzFiles = readdirSync(tmpDir).filter((f) => f.endsWith(".tgz"));
-    if (tgzFiles.length === 0) {
-      warnings.push(`No tarball found for ${pkgSpec}`);
-      return packOutDir;
-    }
-    const firstTgz = tgzFiles[0];
-    if (!firstTgz) {
-      warnings.push(`No tarball found for ${pkgSpec}`);
-      return packOutDir;
-    }
-    const tgzPath = join(tmpDir, firstTgz);
-    mkdirSync(packOutDir, { recursive: true });
-    execSync(`tar xzf "${tgzPath}" -C "${packOutDir}" --strip-components=1`, {
-      stdio: "pipe",
-      timeout: 15000
-    });
-    execSync(`rm -rf "${tmpDir}"`, { stdio: "pipe" });
-    const subpath = parsed.path || "";
-    const targetDir = subpath ? join(packOutDir, subpath) : packOutDir;
-    if (existsSync2(targetDir)) {
-      collectFiles(targetDir, installed);
-    }
-  } catch (err) {
-    warnings.push(`Failed to extract npm pack ${pkgSpec}: ${err instanceof Error ? err.message : String(err)}`);
-  }
-  return packOutDir;
-}
-function collectFiles(dir, out) {
-  const entries = readdirSync(dir, { withFileTypes: true });
-  for (const entry of entries) {
-    const full = join(dir, entry.name);
-    if (entry.isDirectory()) {
-      collectFiles(full, out);
-    } else {
-      out.push(full);
-    }
-  }
-}
-export {
-  resolveNpmVersion,
-  installNpmSource
-};
+var y=import.meta.require;import{createHash as I}from"crypto";import{existsSync as K,readFileSync as x,writeFileSync as m}from"fs";import{resolve as C}from"path";var R=1,E="agentpacks.lock";function p(q){let J=C(q,E);if(!K(J))return{lockfileVersion:R,sources:{}};let Q=x(J,"utf-8");return JSON.parse(Q)}function n(q,J){let Q=C(q,E);m(Q,JSON.stringify(J,null,2)+`
+`)}function L(q,J){return q.sources[J]}function N(q,J,Q){q.sources[J]=Q}function l(q){return`sha256-${I("sha256").update(q).digest("hex")}`}function a(q,J){let Q=J.filter((U)=>!(U in q.sources));return{valid:Q.length===0,missing:Q}}function V(q){let J=q;if(J.startsWith("npm:"))J=J.slice(4);let Q="",U=D(J);if(U>-1)Q=J.slice(U+1),J=J.slice(0,U);let W="latest",Z=A(J);if(Z>-1)W=J.slice(Z+1),J=J.slice(0,Z);if(!J)throw Error(`Invalid npm source reference: "${q}". Expected package name.`);return{packageName:J,version:W,path:Q}}function D(q){let J=q.startsWith("@")?q.indexOf("/")+1:0,Q=A(q),U=Q>-1?Q:J;return q.indexOf(":",U)}function A(q){if(q.startsWith("@")){let J=q.indexOf("/");if(J===-1)return-1;return q.indexOf("@",J+1)}return q.indexOf("@")}function i(q){if(q.startsWith("npm:"))return!0;if(q.startsWith("@")&&q.includes("/"))return!0;return!1}function F(q){return`npm:${q.packageName}`}import{execSync as M}from"child_process";import{existsSync as h,mkdirSync as T,readdirSync as j}from"fs";import{join as P,resolve as z}from"path";var v="https://registry.npmjs.org";async function g(q){let J=`${v}/${encodeURIComponent(q.packageName)}/${q.version}`,Q=await fetch(J,{headers:{Accept:"application/json"}});if(!Q.ok)throw Error(`Could not resolve npm package "${q.packageName}@${q.version}": ${Q.status}`);let U=await Q.json();return{version:U.version,tarball:U.dist.tarball}}async function Jq(q,J,Q,U={}){let W=V(J),Z=F(W),H=[],$=[],X=L(Q,Z);if(U.frozen&&!X)throw Error(`Frozen mode: no lockfile entry for source "${Z}".`);let B;if(X&&!U.update)B=X.resolvedRef;else B=(await g(W)).version;let G=z(q,".agentpacks",".curated");T(G,{recursive:!0}),S(W,B,G,H,$);let Y={requestedRef:W.version,resolvedRef:B,resolvedAt:new Date().toISOString(),skills:{},packs:{}};return N(Q,Z,Y),{installed:H,warnings:$}}function S(q,J,Q,U,W){let Z=`${q.packageName}@${J}`,H=q.packageName.replace(/^@/,"").replace(/\//g,"-"),$=z(Q,H);try{let X=z(Q,".tmp-npm");T(X,{recursive:!0}),M(`npm pack ${Z} --pack-destination "${X}"`,{stdio:"pipe",timeout:30000});let B=j(X).filter((O)=>O.endsWith(".tgz"));if(B.length===0)return W.push(`No tarball found for ${Z}`),$;let G=B[0];if(!G)return W.push(`No tarball found for ${Z}`),$;let Y=P(X,G);T($,{recursive:!0}),M(`tar xzf "${Y}" -C "${$}" --strip-components=1`,{stdio:"pipe",timeout:15000}),M(`rm -rf "${X}"`,{stdio:"pipe"});let b=q.path||"",_=b?P($,b):$;if(h(_))w(_,U)}catch(X){W.push(`Failed to extract npm pack ${Z}: ${X instanceof Error?X.message:String(X)}`)}return $}function w(q,J){let Q=j(q,{withFileTypes:!0});for(let U of Q){let W=P(q,U.name);if(U.isDirectory())w(W,J);else J.push(W)}}export{g as resolveNpmVersion,Jq as installNpmSource};

package/dist/sources/registry-ref.js

@@ -1,37 +1,2 @@
 // @bun
-var __require = import.meta.require;
-
-// src/sources/registry-ref.ts
-function parseRegistrySourceRef(source) {
-  let s = source;
-  if (s.startsWith("registry:")) {
-    s = s.slice(9);
-  }
-  if (!s) {
-    throw new Error(`Invalid registry source reference: "${source}". Expected pack name.`);
-  }
-  let version = "latest";
-  const atIdx = s.indexOf("@");
-  if (atIdx > 0) {
-    version = s.slice(atIdx + 1);
-    s = s.slice(0, atIdx);
-  }
-  if (!s) {
-    throw new Error(`Invalid registry source reference: "${source}". Pack name is empty.`);
-  }
-  if (!/^[a-z0-9]([a-z0-9-]*[a-z0-9])?$/.test(s)) {
-    throw new Error(`Invalid registry pack name: "${s}". Must be lowercase alphanumeric with hyphens.`);
-  }
-  return { packName: s, version };
-}
-function isRegistryPackRef(packRef) {
-  return packRef.startsWith("registry:");
-}
-function registrySourceKey(parsed) {
-  return `registry:${parsed.packName}`;
-}
-export {
-  registrySourceKey,
-  parseRegistrySourceRef,
-  isRegistryPackRef
-};
+var m=import.meta.require;function w(g){let b=g;if(b.startsWith("registry:"))b=b.slice(9);if(!b)throw Error(`Invalid registry source reference: "${g}". Expected pack name.`);let j="latest",h=b.indexOf("@");if(h>0)j=b.slice(h+1),b=b.slice(0,h);if(!b)throw Error(`Invalid registry source reference: "${g}". Pack name is empty.`);if(!/^[a-z0-9]([a-z0-9-]*[a-z0-9])?$/.test(b))throw Error(`Invalid registry pack name: "${b}". Must be lowercase alphanumeric with hyphens.`);return{packName:b,version:j}}function z(g){return g.startsWith("registry:")}function A(g){return`registry:${g.packName}`}export{A as registrySourceKey,w as parseRegistrySourceRef,z as isRegistryPackRef};

package/dist/sources/registry.js

@@ -1,355 +1,5 @@
 // @bun
-var __require = import.meta.require;
-
-// src/core/lockfile.ts
-import { createHash } from "crypto";
-import { existsSync, readFileSync, writeFileSync } from "fs";
-import { resolve } from "path";
-var LOCKFILE_VERSION = 1;
-var LOCKFILE_NAME = "agentpacks.lock";
-function loadLockfile(projectRoot) {
-  const filepath = resolve(projectRoot, LOCKFILE_NAME);
-  if (!existsSync(filepath)) {
-    return { lockfileVersion: LOCKFILE_VERSION, sources: {} };
-  }
-  const raw = readFileSync(filepath, "utf-8");
-  return JSON.parse(raw);
-}
-function saveLockfile(projectRoot, lockfile) {
-  const filepath = resolve(projectRoot, LOCKFILE_NAME);
-  writeFileSync(filepath, JSON.stringify(lockfile, null, 2) + `
-`);
-}
-function getLockedSource(lockfile, sourceKey) {
-  return lockfile.sources[sourceKey];
-}
-function setLockedSource(lockfile, sourceKey, entry) {
-  lockfile.sources[sourceKey] = entry;
-}
-function computeIntegrity(content) {
-  const hash = createHash("sha256").update(content).digest("hex");
-  return `sha256-${hash}`;
-}
-function isLockfileFrozenValid(lockfile, sourceKeys) {
-  const missing = sourceKeys.filter((key) => !(key in lockfile.sources));
-  return { valid: missing.length === 0, missing };
-}
-
-// src/sources/registry-ref.ts
-function parseRegistrySourceRef(source) {
-  let s = source;
-  if (s.startsWith("registry:")) {
-    s = s.slice(9);
-  }
-  if (!s) {
-    throw new Error(`Invalid registry source reference: "${source}". Expected pack name.`);
-  }
-  let version = "latest";
-  const atIdx = s.indexOf("@");
-  if (atIdx > 0) {
-    version = s.slice(atIdx + 1);
-    s = s.slice(0, atIdx);
-  }
-  if (!s) {
-    throw new Error(`Invalid registry source reference: "${source}". Pack name is empty.`);
-  }
-  if (!/^[a-z0-9]([a-z0-9-]*[a-z0-9])?$/.test(s)) {
-    throw new Error(`Invalid registry pack name: "${s}". Must be lowercase alphanumeric with hyphens.`);
-  }
-  return { packName: s, version };
-}
-function isRegistryPackRef(packRef) {
-  return packRef.startsWith("registry:");
-}
-function registrySourceKey(parsed) {
-  return `registry:${parsed.packName}`;
-}
-
-// src/utils/credentials.ts
-import { existsSync as existsSync2, mkdirSync, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
-import { homedir } from "os";
-import { dirname, join } from "path";
-var CONFIG_DIR = join(homedir(), ".config", "agentpacks");
-var CREDENTIALS_FILE = join(CONFIG_DIR, "credentials.json");
-function loadCredentials() {
-  if (!existsSync2(CREDENTIALS_FILE)) {
-    return { registryUrl: "https://registry.agentpacks.dev" };
-  }
-  try {
-    const raw = readFileSync2(CREDENTIALS_FILE, "utf-8");
-    return JSON.parse(raw);
-  } catch {
-    return { registryUrl: "https://registry.agentpacks.dev" };
-  }
-}
-function saveCredentials(credentials) {
-  mkdirSync(dirname(CREDENTIALS_FILE), { recursive: true });
-  writeFileSync2(CREDENTIALS_FILE, JSON.stringify(credentials, null, 2) + `
-`, {
-    mode: 384
-  });
-}
-function clearCredentials() {
-  if (existsSync2(CREDENTIALS_FILE)) {
-    writeFileSync2(CREDENTIALS_FILE, JSON.stringify({ registryUrl: "https://registry.agentpacks.dev" }) + `
-`);
-  }
-}
-
-// src/utils/registry-client.ts
-var DEFAULT_REGISTRY_URL = "https://registry.agentpacks.dev";
-function createRegistryClient(config) {
-  return new RegistryClient({
-    registryUrl: config?.registryUrl ?? DEFAULT_REGISTRY_URL,
-    authToken: config?.authToken,
-    timeout: config?.timeout ?? 30000
-  });
-}
-
-class RegistryClient {
-  config;
-  constructor(config) {
-    this.config = {
-      registryUrl: config.registryUrl.replace(/\/+$/, ""),
-      authToken: config.authToken,
-      timeout: config.timeout ?? 30000
-    };
-  }
-  async search(params) {
-    const searchParams = new URLSearchParams;
-    if (params.query)
-      searchParams.set("q", params.query);
-    if (params.tags?.length)
-      searchParams.set("tags", params.tags.join(","));
-    if (params.targets?.length)
-      searchParams.set("targets", params.targets.join(","));
-    if (params.features?.length)
-      searchParams.set("features", params.features.join(","));
-    if (params.author)
-      searchParams.set("author", params.author);
-    if (params.sort)
-      searchParams.set("sort", params.sort);
-    if (params.limit)
-      searchParams.set("limit", String(params.limit));
-    if (params.offset)
-      searchParams.set("offset", String(params.offset));
-    const url = `${this.config.registryUrl}/packs?${searchParams.toString()}`;
-    const res = await this.fetch(url);
-    return res;
-  }
-  async info(packName) {
-    const url = `${this.config.registryUrl}/packs/${encodeURIComponent(packName)}`;
-    const res = await this.fetch(url);
-    return res;
-  }
-  async download(packName, version = "latest") {
-    const url = `${this.config.registryUrl}/packs/${encodeURIComponent(packName)}/versions/${encodeURIComponent(version)}/download`;
-    const response = await fetch(url, {
-      headers: this.headers(),
-      signal: AbortSignal.timeout(this.config.timeout)
-    });
-    if (!response.ok) {
-      throw new RegistryApiError(response.status, `Failed to download ${packName}@${version}: ${response.statusText}`);
-    }
-    const integrity = response.headers.get("x-integrity") ?? "";
-    const data = await response.arrayBuffer();
-    return { data, integrity };
-  }
-  async publish(tarball, metadata) {
-    if (!this.config.authToken) {
-      throw new Error("Authentication required. Run `agentpacks login` first.");
-    }
-    const formData = new FormData;
-    formData.append("tarball", new Blob([tarball], { type: "application/gzip" }), `${metadata.name}-${metadata.version}.tgz`);
-    formData.append("metadata", JSON.stringify(metadata));
-    const url = `${this.config.registryUrl}/packs`;
-    const response = await fetch(url, {
-      method: "POST",
-      headers: {
-        Authorization: `Bearer ${this.config.authToken}`
-      },
-      body: formData,
-      signal: AbortSignal.timeout(this.config.timeout)
-    });
-    if (!response.ok) {
-      const body = await response.text();
-      throw new RegistryApiError(response.status, `Publish failed: ${body || response.statusText}`);
-    }
-    return await response.json();
-  }
-  async featured(limit) {
-    const url = limit ? `${this.config.registryUrl}/featured?limit=${limit}` : `${this.config.registryUrl}/featured`;
-    const res = await this.fetch(url);
-    return res.packs;
-  }
-  async tags() {
-    const url = `${this.config.registryUrl}/tags`;
-    const res = await this.fetch(url);
-    return res.tags;
-  }
-  async stats() {
-    const url = `${this.config.registryUrl}/stats`;
-    return await this.fetch(url);
-  }
-  async health() {
-    try {
-      const url = `${this.config.registryUrl}/health`;
-      await this.fetch(url);
-      return true;
-    } catch {
-      return false;
-    }
-  }
-  async fetch(url) {
-    const response = await fetch(url, {
-      headers: this.headers(),
-      signal: AbortSignal.timeout(this.config.timeout)
-    });
-    if (!response.ok) {
-      const body = await response.text();
-      throw new RegistryApiError(response.status, body || response.statusText);
-    }
-    return response.json();
-  }
-  headers() {
-    const h = {
-      Accept: "application/json"
-    };
-    if (this.config.authToken) {
-      h["Authorization"] = `Bearer ${this.config.authToken}`;
-    }
-    return h;
-  }
-}
-
-class RegistryApiError extends Error {
-  status;
-  constructor(status, message) {
-    super(message);
-    this.name = "RegistryApiError";
-    this.status = status;
-  }
-}
-
-// src/utils/tarball.ts
-import { execSync } from "child_process";
-import { createHash as createHash2 } from "crypto";
-import { existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync3, rmSync } from "fs";
-import { tmpdir } from "os";
-import { join as join2, resolve as resolve2 } from "path";
-async function createTarball(packDir) {
-  const absDir = resolve2(packDir);
-  const tmpFile = join2(tmpdir(), `agentpacks-${Date.now()}.tgz`);
-  try {
-    execSync(`tar -czf "${tmpFile}" -C "${absDir}" .`, {
-      stdio: "pipe"
-    });
-    const buffer = readFileSync3(tmpFile);
-    return buffer.buffer.slice(buffer.byteOffset, buffer.byteOffset + buffer.byteLength);
-  } finally {
-    if (existsSync3(tmpFile)) {
-      rmSync(tmpFile);
-    }
-  }
-}
-async function extractTarball(data, targetDir) {
-  mkdirSync2(targetDir, { recursive: true });
-  const tmpFile = join2(tmpdir(), `agentpacks-${Date.now()}.tgz`);
-  try {
-    const buffer = Buffer.from(data);
-    const { writeFileSync: writeFileSync3 } = await import("fs");
-    writeFileSync3(tmpFile, buffer);
-    execSync(`tar -xzf "${tmpFile}" -C "${targetDir}"`, {
-      stdio: "pipe"
-    });
-  } finally {
-    if (existsSync3(tmpFile)) {
-      rmSync(tmpFile);
-    }
-  }
-}
-function computeTarballIntegrity(data) {
-  const hash = createHash2("sha256").update(Buffer.from(data)).digest("hex");
-  return `sha256-${hash}`;
-}
-
-// src/sources/registry.ts
-import { existsSync as existsSync4, mkdirSync as mkdirSync3, readdirSync, rmSync as rmSync2 } from "fs";
-import { join as join3, resolve as resolve3 } from "path";
-async function installRegistrySource(projectRoot, source, lockfile, options = {}) {
-  const parsed = parseRegistrySourceRef(source);
-  const sourceKey = registrySourceKey(parsed);
-  const installed = [];
-  const warnings = [];
-  const locked = getLockedSource(lockfile, sourceKey);
-  if (options.frozen && !locked) {
-    throw new Error(`Frozen mode: no lockfile entry for source "${sourceKey}".`);
-  }
-  let targetVersion = parsed.version;
-  if (locked && !options.update) {
-    targetVersion = locked.resolvedRef;
-  } else if (targetVersion === "latest") {
-    const clientCfg2 = buildClientConfig(options.registryUrl);
-    const client2 = createRegistryClient(clientCfg2);
-    const info = await client2.info(parsed.packName);
-    targetVersion = info.latestVersion;
-  }
-  const clientCfg = buildClientConfig(options.registryUrl);
-  const client = createRegistryClient(clientCfg);
-  const { data } = await client.download(parsed.packName, targetVersion);
-  const localIntegrity = computeTarballIntegrity(data);
-  if (locked && !options.update && locked.skills?.["__integrity"]) {
-    const expectedIntegrity = locked.skills["__integrity"].integrity;
-    if (expectedIntegrity && localIntegrity !== expectedIntegrity) {
-      throw new Error(`Integrity mismatch for ${parsed.packName}@${targetVersion}. ` + `Expected ${expectedIntegrity}, got ${localIntegrity}.`);
-    }
-  }
-  const curatedDir = resolve3(projectRoot, ".agentpacks", ".curated");
-  const packOutDir = resolve3(curatedDir, parsed.packName);
-  if (existsSync4(packOutDir)) {
-    rmSync2(packOutDir, { recursive: true, force: true });
-  }
-  mkdirSync3(packOutDir, { recursive: true });
-  await extractTarball(data, packOutDir);
-  collectFiles(packOutDir, installed);
-  const newEntry = {
-    requestedRef: parsed.version,
-    resolvedRef: targetVersion,
-    resolvedAt: new Date().toISOString(),
-    skills: {
-      __integrity: { integrity: localIntegrity }
-    },
-    packs: {
-      [parsed.packName]: { integrity: localIntegrity }
-    }
-  };
-  setLockedSource(lockfile, sourceKey, newEntry);
-  return { installed, warnings };
-}
-function buildClientConfig(registryUrl) {
-  const cfg = {};
-  if (registryUrl) {
-    cfg.registryUrl = registryUrl;
-  }
-  try {
-    const creds = loadCredentials();
-    if (creds?.token) {
-      cfg.authToken = creds.token;
-    }
-  } catch {}
-  return cfg;
-}
-function collectFiles(dir, out) {
-  const entries = readdirSync(dir, { withFileTypes: true });
-  for (const entry of entries) {
-    const full = join3(dir, entry.name);
-    if (entry.isDirectory()) {
-      collectFiles(full, out);
-    } else {
-      out.push(full);
-    }
-  }
-}
-export {
-  installRegistrySource
-};
+var m=import.meta.require;import{createHash as p}from"crypto";import{existsSync as n,readFileSync as l,writeFileSync as c}from"fs";import{resolve as O}from"path";var o=1,T="agentpacks.lock";function Vq(q){let z=O(q,T);if(!n(z))return{lockfileVersion:o,sources:{}};let J=l(z,"utf-8");return JSON.parse(J)}function wq(q,z){let J=O(q,T);c(J,JSON.stringify(z,null,2)+`
+`)}function P(q,z){return q.sources[z]}function _(q,z,J){q.sources[z]=J}function Oq(q){return`sha256-${p("sha256").update(q).digest("hex")}`}function Tq(q,z){let J=z.filter((Q)=>!(Q in q.sources));return{valid:J.length===0,missing:J}}function K(q){let z=q;if(z.startsWith("registry:"))z=z.slice(9);if(!z)throw Error(`Invalid registry source reference: "${q}". Expected pack name.`);let J="latest",Q=z.indexOf("@");if(Q>0)J=z.slice(Q+1),z=z.slice(0,Q);if(!z)throw Error(`Invalid registry source reference: "${q}". Pack name is empty.`);if(!/^[a-z0-9]([a-z0-9-]*[a-z0-9])?$/.test(z))throw Error(`Invalid registry pack name: "${z}". Must be lowercase alphanumeric with hyphens.`);return{packName:z,version:J}}function _q(q){return q.startsWith("registry:")}function v(q){return`registry:${q.packName}`}import{existsSync as b,mkdirSync as i,readFileSync as t,writeFileSync as x}from"fs";import{homedir as a}from"os";import{dirname as s,join as j}from"path";var r=j(a(),".config","agentpacks"),$=j(r,"credentials.json");function N(){if(!b($))return{registryUrl:"https://registry.agentpacks.dev"};try{let q=t($,"utf-8");return JSON.parse(q)}catch{return{registryUrl:"https://registry.agentpacks.dev"}}}function jq(q){i(s($),{recursive:!0}),x($,JSON.stringify(q,null,2)+`
+`,{mode:384})}function Nq(){if(b($))x($,JSON.stringify({registryUrl:"https://registry.agentpacks.dev"})+`
+`)}function U(q){return new A({registryUrl:q?.registryUrl??"https://registry.agentpacks.dev",authToken:q?.authToken,timeout:q?.timeout??30000})}class A{config;constructor(q){this.config={registryUrl:q.registryUrl.replace(/\/+$/,""),authToken:q.authToken,timeout:q.timeout??30000}}async search(q){let z=new URLSearchParams;if(q.query)z.set("q",q.query);if(q.tags?.length)z.set("tags",q.tags.join(","));if(q.targets?.length)z.set("targets",q.targets.join(","));if(q.features?.length)z.set("features",q.features.join(","));if(q.author)z.set("author",q.author);if(q.sort)z.set("sort",q.sort);if(q.limit)z.set("limit",String(q.limit));if(q.offset)z.set("offset",String(q.offset));let J=`${this.config.registryUrl}/packs?${z.toString()}`;return await this.fetch(J)}async info(q){let z=`${this.config.registryUrl}/packs/${encodeURIComponent(q)}`;return await this.fetch(z)}async download(q,z="latest"){let J=`${this.config.registryUrl}/packs/${encodeURIComponent(q)}/versions/${encodeURIComponent(z)}/download`,Q=await fetch(J,{headers:this.headers(),signal:AbortSignal.timeout(this.config.timeout)});if(!Q.ok)throw new H(Q.status,`Failed to download ${q}@${z}: ${Q.statusText}`);let W=Q.headers.get("x-integrity")??"";return{data:await Q.arrayBuffer(),integrity:W}}async publish(q,z){if(!this.config.authToken)throw Error("Authentication required. Run `agentpacks login` first.");let J=new FormData;J.append("tarball",new Blob([q],{type:"application/gzip"}),`${z.name}-${z.version}.tgz`),J.append("metadata",JSON.stringify(z));let Q=`${this.config.registryUrl}/packs`,W=await fetch(Q,{method:"POST",headers:{Authorization:`Bearer ${this.config.authToken}`},body:J,signal:AbortSignal.timeout(this.config.timeout)});if(!W.ok){let X=await W.text();throw new H(W.status,`Publish failed: ${X||W.statusText}`)}return await W.json()}async featured(q){let z=q?`${this.config.registryUrl}/featured?limit=${q}`:`${this.config.registryUrl}/featured`;return(await this.fetch(z)).packs}async tags(){let q=`${this.config.registryUrl}/tags`;return(await this.fetch(q)).tags}async stats(){let q=`${this.config.registryUrl}/stats`;return await this.fetch(q)}async health(){try{let q=`${this.config.registryUrl}/health`;return await this.fetch(q),!0}catch{return!1}}async fetch(q){let z=await fetch(q,{headers:this.headers(),signal:AbortSignal.timeout(this.config.timeout)});if(!z.ok){let J=await z.text();throw new H(z.status,J||z.statusText)}return z.json()}headers(){let q={Accept:"application/json"};if(this.config.authToken)q.Authorization=`Bearer ${this.config.authToken}`;return q}}class H extends Error{status;constructor(q,z){super(z);this.name="RegistryApiError",this.status=q}}import{execSync as L}from"child_process";import{createHash as e}from"crypto";import{existsSync as D,mkdirSync as qq,readFileSync as zq,rmSync as C}from"fs";import{tmpdir as h}from"os";import{join as F,resolve as Jq}from"path";async function Rq(q){let z=Jq(q),J=F(h(),`agentpacks-${Date.now()}.tgz`);try{L(`tar -czf "${J}" -C "${z}" .`,{stdio:"pipe"});let Q=zq(J);return Q.buffer.slice(Q.byteOffset,Q.byteOffset+Q.byteLength)}finally{if(D(J))C(J)}}async function I(q,z){qq(z,{recursive:!0});let J=F(h(),`agentpacks-${Date.now()}.tgz`);try{let Q=Buffer.from(q),{writeFileSync:W}=await import("fs");W(J,Q),L(`tar -xzf "${J}" -C "${z}"`,{stdio:"pipe"})}finally{if(D(J))C(J)}}function R(q){return`sha256-${e("sha256").update(Buffer.from(q)).digest("hex")}`}import{existsSync as Qq,mkdirSync as Wq,readdirSync as Xq,rmSync as Yq}from"fs";import{join as Zq,resolve as E}from"path";async function mq(q,z,J,Q={}){let W=K(z),X=v(W),V=[],u=[],Y=P(J,X);if(Q.frozen&&!Y)throw Error(`Frozen mode: no lockfile entry for source "${X}".`);let Z=W.version;if(Y&&!Q.update)Z=Y.resolvedRef;else if(Z==="latest"){let B=S(Q.registryUrl);Z=(await U(B).info(W.packName)).latestVersion}let g=S(Q.registryUrl),f=U(g),{data:w}=await f.download(W.packName,Z),M=R(w);if(Y&&!Q.update&&Y.skills?.__integrity){let B=Y.skills.__integrity.integrity;if(B&&M!==B)throw Error(`Integrity mismatch for ${W.packName}@${Z}. Expected ${B}, got ${M}.`)}let d=E(q,".agentpacks",".curated"),G=E(d,W.packName);if(Qq(G))Yq(G,{recursive:!0,force:!0});Wq(G,{recursive:!0}),await I(w,G),k(G,V);let y={requestedRef:W.version,resolvedRef:Z,resolvedAt:new Date().toISOString(),skills:{__integrity:{integrity:M}},packs:{[W.packName]:{integrity:M}}};return _(J,X,y),{installed:V,warnings:u}}function S(q){let z={};if(q)z.registryUrl=q;try{let J=N();if(J?.token)z.authToken=J.token}catch{}return z}function k(q,z){let J=Xq(q,{withFileTypes:!0});for(let Q of J){let W=Zq(q,Q.name);if(Q.isDirectory())k(W,z);else z.push(W)}}export{mq as installRegistrySource};