agentpacks 1.7.6 → 1.7.9

package/dist/node/core/index.js

@@ -2,10 +2,10 @@ import { createRequire } from "node:module";
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
 // src/core/config.ts
-import { z } from "zod";
-import { readFileSync, existsSync } from "fs";
-import { resolve } from "path";
+import { existsSync, readFileSync } from "fs";
 import { parse as parseJsonc } from "jsonc-parser";
+import { resolve } from "path";
+import { z } from "zod";
 var TARGET_IDS = [
   "opencode",
   "cursor",
@@ -134,17 +134,138 @@ function resolveTargets(config) {
   return config.targets;
 }
 
+// src/core/dependency-resolver.ts
+function buildDependencyGraph(manifests) {
+  const graph = new Map;
+  for (const m of manifests) {
+    graph.set(m.name, {
+      name: m.name,
+      manifest: m,
+      dependencies: m.dependencies,
+      conflicts: m.conflicts
+    });
+  }
+  return graph;
+}
+function resolveDependencies(manifests) {
+  const graph = buildDependencyGraph(manifests);
+  const allNames = new Set(graph.keys());
+  const missingDeps = [];
+  for (const [name, node] of graph) {
+    for (const dep of node.dependencies) {
+      if (!allNames.has(dep)) {
+        missingDeps.push([name, dep]);
+      }
+    }
+  }
+  const { sorted, cycles } = topologicalSort(graph);
+  const conflictPairs = detectConflicts(graph);
+  const ok = cycles.length === 0 && conflictPairs.length === 0 && missingDeps.length === 0;
+  return { sorted, cycles, conflictPairs, missingDeps, ok };
+}
+function topologicalSort(graph) {
+  const inDegree = new Map;
+  for (const name of graph.keys()) {
+    inDegree.set(name, 0);
+  }
+  for (const [, node] of graph) {
+    for (const dep of node.dependencies) {
+      if (graph.has(dep)) {
+        inDegree.set(dep, (inDegree.get(dep) ?? 0) + 1);
+      }
+    }
+  }
+  const queue = [];
+  for (const [name, degree] of inDegree) {
+    if (degree === 0)
+      queue.push(name);
+  }
+  const sorted = [];
+  while (queue.length > 0) {
+    const current = queue.shift();
+    if (!current)
+      continue;
+    sorted.push(current);
+    const node = graph.get(current);
+    if (!node)
+      continue;
+    for (const dep of node.dependencies) {
+      if (!graph.has(dep))
+        continue;
+      const newDegree = (inDegree.get(dep) ?? 1) - 1;
+      inDegree.set(dep, newDegree);
+      if (newDegree === 0) {
+        queue.push(dep);
+      }
+    }
+  }
+  const cycles = [];
+  if (sorted.length < graph.size) {
+    const remaining = new Set;
+    for (const name of graph.keys()) {
+      if (!sorted.includes(name))
+        remaining.add(name);
+    }
+    const visited = new Set;
+    for (const start of remaining) {
+      if (visited.has(start))
+        continue;
+      const cycle = traceCycle(start, graph, remaining);
+      if (cycle.length > 0) {
+        cycles.push(cycle);
+        for (const n of cycle)
+          visited.add(n);
+      }
+    }
+  }
+  return { sorted: sorted.reverse(), cycles };
+}
+function traceCycle(start, graph, remaining) {
+  const path = [];
+  const pathSet = new Set;
+  let current = start;
+  while (current && !pathSet.has(current)) {
+    path.push(current);
+    pathSet.add(current);
+    const node = graph.get(current);
+    if (!node)
+      break;
+    current = node.dependencies.find((d) => remaining.has(d) && graph.has(d));
+  }
+  if (current && pathSet.has(current)) {
+    const cycleStart = path.indexOf(current);
+    return path.slice(cycleStart);
+  }
+  return path;
+}
+function detectConflicts(graph) {
+  const conflicts = [];
+  const seen = new Set;
+  for (const [name, node] of graph) {
+    for (const conflict of node.conflicts) {
+      if (graph.has(conflict)) {
+        const key = [name, conflict].sort().join(":");
+        if (!seen.has(key)) {
+          seen.add(key);
+          conflicts.push([name, conflict]);
+        }
+      }
+    }
+  }
+  return conflicts;
+}
+
 // src/utils/filesystem.ts
 import {
   existsSync as existsSync2,
   mkdirSync,
-  readFileSync as readFileSync2,
-  writeFileSync,
   readdirSync,
+  readFileSync as readFileSync2,
   rmSync,
-  statSync
+  statSync,
+  writeFileSync
 } from "fs";
-import { dirname, relative, join } from "path";
+import { dirname, join, relative } from "path";
 var GENERATED_HEADER_MD = "<!-- Generated by agentpacks. DO NOT EDIT. -->";
 var GENERATED_HEADER_JSON = "// Generated by agentpacks. DO NOT EDIT.";
 var GENERATED_HEADER_JS = "// Generated by agentpacks. DO NOT EDIT.";
@@ -244,398 +365,76 @@ function getHeader(type) {
   }
 }
 
-// src/utils/frontmatter.ts
-import matter from "gray-matter";
-function parseFrontmatter(source) {
-  const { data, content } = matter(source);
-  return {
-    data,
-    content: content.trim(),
-    raw: source
-  };
-}
-function serializeFrontmatter(data, content) {
-  const filtered = Object.fromEntries(Object.entries(data).filter(([, v]) => v !== undefined));
-  if (Object.keys(filtered).length === 0) {
-    return content;
-  }
-  return matter.stringify(content, filtered);
-}
-
-// src/features/rules.ts
-import { readFileSync as readFileSync3 } from "fs";
-import { basename } from "path";
-function parseRules(rulesDir, packName) {
-  const files = listFiles(rulesDir, { extension: ".md" });
-  return files.map((filepath) => parseRuleFile(filepath, packName));
-}
-function parseRuleFile(filepath, packName) {
-  const raw = readFileSync3(filepath, "utf-8");
-  const { data, content } = parseFrontmatter(raw);
-  return {
-    name: basename(filepath, ".md"),
-    sourcePath: filepath,
-    packName,
-    meta: data,
-    content
-  };
-}
-function ruleMatchesTarget(rule, targetId) {
-  const { targets } = rule.meta;
-  if (!targets || targets === "*")
-    return true;
-  if (Array.isArray(targets) && targets.includes("*"))
-    return true;
-  return Array.isArray(targets) && targets.includes(targetId);
-}
-function getRootRules(rules) {
-  return rules.filter((r) => r.meta.root === true);
-}
-function getDetailRules(rules) {
-  return rules.filter((r) => r.meta.root !== true);
-}
-
-// src/features/commands.ts
-import { readFileSync as readFileSync4 } from "fs";
-import { basename as basename2 } from "path";
-function parseCommands(commandsDir, packName) {
-  const files = listFiles(commandsDir, { extension: ".md" });
-  return files.map((filepath) => parseCommandFile(filepath, packName));
-}
-function parseCommandFile(filepath, packName) {
-  const raw = readFileSync4(filepath, "utf-8");
-  const { data, content } = parseFrontmatter(raw);
+// src/features/models.ts
+import { join as join2 } from "path";
+import { z as z2 } from "zod";
+var SECRET_PATTERNS = [
+  /["']api[_-]?key["']\s*:/i,
+  /["']apiKey["']\s*:/i,
+  /["']secret["']\s*:/i,
+  /["']password["']\s*:/i,
+  /["'](?:auth_token|access_token|bearer_token)["']\s*:/i,
+  /["']private[_-]?key["']\s*:/i,
+  /-----BEGIN\s+(RSA|EC|DSA|OPENSSH|PGP)\s+PRIVATE\s+KEY-----/,
+  /sk-[a-zA-Z0-9]{20,}/,
+  /Bearer\s+[a-zA-Z0-9._-]{20,}/
+];
+var AgentModelSchema = z2.object({
+  model: z2.string(),
+  temperature: z2.number().min(0).max(2).optional(),
+  top_p: z2.number().min(0).max(1).optional()
+});
+var ModelProfileSchema = z2.object({
+  extends: z2.string().optional(),
+  description: z2.string().optional(),
+  default: z2.string().optional(),
+  small: z2.string().optional(),
+  agents: z2.record(z2.string(), AgentModelSchema).optional()
+});
+var RoutingConditionSchema = z2.object({
+  complexity: z2.enum(["low", "medium", "high", "critical"]).optional().describe("Task complexity level"),
+  urgency: z2.enum(["low", "normal", "high"]).optional().describe("Time sensitivity"),
+  budget: z2.enum(["minimal", "standard", "premium"]).optional().describe("Cost/token budget tier"),
+  contextWindowNeed: z2.enum(["small", "medium", "large", "max"]).optional().describe("Required context window size"),
+  toolUseIntensity: z2.enum(["none", "light", "heavy"]).optional().describe("Expected tool/function calling intensity")
+});
+var RoutingRuleSchema = z2.object({
+  when: z2.record(z2.string(), z2.string()),
+  use: z2.string(),
+  description: z2.string().optional(),
+  priority: z2.number().optional()
+});
+var ProviderModelSchema = z2.object({
+  options: z2.record(z2.string(), z2.unknown()).optional(),
+  variants: z2.record(z2.string(), z2.record(z2.string(), z2.unknown())).optional()
+});
+var ProviderConfigSchema = z2.object({
+  options: z2.record(z2.string(), z2.unknown()).optional(),
+  models: z2.record(z2.string(), ProviderModelSchema).optional()
+});
+var ModelsSchema = z2.object({
+  default: z2.string().optional(),
+  small: z2.string().optional(),
+  agents: z2.record(z2.string(), AgentModelSchema).optional(),
+  profiles: z2.record(z2.string(), ModelProfileSchema).optional(),
+  providers: z2.record(z2.string(), ProviderConfigSchema).optional(),
+  routing: z2.array(RoutingRuleSchema).optional(),
+  overrides: z2.record(z2.string(), z2.object({
+    default: z2.string().optional(),
+    small: z2.string().optional(),
+    agents: z2.record(z2.string(), AgentModelSchema).optional()
+  })).optional()
+});
+function parseModels(packDir, packName) {
+  const modelsPath = join2(packDir, "models.json");
+  const raw = readJsonOrNull(modelsPath);
+  if (!raw)
+    return null;
+  const parsed = ModelsSchema.parse(raw);
   return {
-    name: basename2(filepath, ".md"),
-    sourcePath: filepath,
     packName,
-    meta: data,
-    content
-  };
-}
-function commandMatchesTarget(cmd, targetId) {
-  const { targets } = cmd.meta;
-  if (!targets || targets === "*")
-    return true;
-  if (Array.isArray(targets) && targets.includes("*"))
-    return true;
-  return Array.isArray(targets) && targets.includes(targetId);
-}
-
-// src/features/agents.ts
-import { readFileSync as readFileSync5 } from "fs";
-import { basename as basename3 } from "path";
-function parseAgents(agentsDir, packName) {
-  const files = listFiles(agentsDir, { extension: ".md" });
-  return files.map((filepath) => parseAgentFile(filepath, packName));
-}
-function parseAgentFile(filepath, packName) {
-  const raw = readFileSync5(filepath, "utf-8");
-  const { data, content } = parseFrontmatter(raw);
-  return {
-    name: data.name ?? basename3(filepath, ".md"),
-    sourcePath: filepath,
-    packName,
-    meta: data,
-    content
-  };
-}
-function agentMatchesTarget(agent, targetId) {
-  const { targets } = agent.meta;
-  if (!targets || targets === "*")
-    return true;
-  if (Array.isArray(targets) && targets.includes("*"))
-    return true;
-  return Array.isArray(targets) && targets.includes(targetId);
-}
-
-// src/features/skills.ts
-import { readFileSync as readFileSync6, existsSync as existsSync3 } from "fs";
-import { basename as basename4, join as join2 } from "path";
-var SKILL_NAME_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
-var SKILL_NAME_MAX_LENGTH = 64;
-function parseSkills(skillsDir, packName) {
-  const dirs = listDirs(skillsDir);
-  const skills = [];
-  for (const dir of dirs) {
-    const skillMd = join2(dir, "SKILL.md");
-    if (existsSync3(skillMd)) {
-      skills.push(parseSkillFile(skillMd, dir, packName));
-    }
-  }
-  return skills;
-}
-function parseSkillFile(filepath, skillDir, packName) {
-  const raw = readFileSync6(filepath, "utf-8");
-  const { data, content } = parseFrontmatter(raw);
-  return {
-    name: data.name ?? basename4(skillDir),
-    sourcePath: filepath,
-    sourceDir: skillDir,
-    packName,
-    meta: data,
-    content
-  };
-}
-function buildSkillFrontmatter(skill) {
-  return {
-    ...skill.meta,
-    name: skill.name
-  };
-}
-function serializeSkill(skill) {
-  return serializeFrontmatter(buildSkillFrontmatter(skill), skill.content);
-}
-function normalizeImportedSkillMarkdown(source, skillName) {
-  const { data, content } = parseFrontmatter(source);
-  const normalized = {
-    ...data,
-    name: skillName
-  };
-  let addedDescription = false;
-  const description = normalized.description;
-  if (typeof description !== "string" || description.trim().length === 0) {
-    normalized.description = `Imported skill: ${skillName}`;
-    addedDescription = true;
-  }
-  return {
-    content: serializeFrontmatter(normalized, content),
-    addedDescription
-  };
-}
-function validateAgentSkillsFrontmatter(skill) {
-  const errors = [];
-  const dirName = basename4(skill.sourceDir);
-  const declaredName = skill.meta.name;
-  if (typeof declaredName !== "string" || declaredName.trim().length === 0) {
-    errors.push('Missing required frontmatter field "name".');
-  } else {
-    if (declaredName.length > SKILL_NAME_MAX_LENGTH) {
-      errors.push(`Invalid "name": must be at most ${SKILL_NAME_MAX_LENGTH} characters.`);
-    }
-    if (!SKILL_NAME_PATTERN.test(declaredName)) {
-      errors.push('Invalid "name": use lowercase letters, numbers, and single hyphens only.');
-    }
-    if (declaredName !== dirName) {
-      errors.push(`Invalid "name": must match containing directory "${dirName}".`);
-    }
-  }
-  const description = skill.meta.description;
-  if (typeof description !== "string" || description.trim().length === 0) {
-    errors.push('Missing required frontmatter field "description".');
-  }
-  const allowedTools = skill.meta["allowed-tools"];
-  if (allowedTools !== undefined && (!Array.isArray(allowedTools) || allowedTools.some((tool) => typeof tool !== "string" || tool.length === 0))) {
-    errors.push('Invalid "allowed-tools": expected an array of non-empty strings.');
-  }
-  return errors;
-}
-function skillMatchesTarget(skill, targetId) {
-  const { targets } = skill.meta;
-  if (!targets || targets === "*")
-    return true;
-  if (Array.isArray(targets) && targets.includes("*"))
-    return true;
-  return Array.isArray(targets) && targets.includes(targetId);
-}
-
-// src/features/hooks.ts
-import { join as join3 } from "path";
-var TARGET_OVERRIDE_KEYS = ["cursor", "claudecode", "opencode"];
-function parseHooks(packDir, packName) {
-  const hooksPath = join3(packDir, "hooks", "hooks.json");
-  const raw = readJsonOrNull(hooksPath);
-  if (!raw)
-    return null;
-  const shared = raw.hooks ?? {};
-  const targetOverrides = {};
-  for (const key of TARGET_OVERRIDE_KEYS) {
-    const override = raw[key];
-    if (override && typeof override === "object" && "hooks" in override && override.hooks) {
-      targetOverrides[key] = override.hooks;
-    }
-  }
-  return {
-    packName,
-    sourcePath: hooksPath,
-    version: raw.version,
-    shared,
-    targetOverrides
-  };
-}
-function resolveHooksForTarget(hooks, targetId) {
-  const merged = {};
-  for (const [event, entries] of Object.entries(hooks.shared)) {
-    merged[event] = [...entries];
-  }
-  const overrides = hooks.targetOverrides[targetId];
-  if (overrides) {
-    for (const [event, entries] of Object.entries(overrides)) {
-      merged[event] = [...merged[event] ?? [], ...entries];
-    }
-  }
-  return merged;
-}
-
-// src/features/plugins.ts
-import { readFileSync as readFileSync7, existsSync as existsSync4 } from "fs";
-import { basename as basename5, join as join4 } from "path";
-function parsePlugins(packDir, packName) {
-  const pluginsDir = join4(packDir, "plugins");
-  if (!existsSync4(pluginsDir))
-    return [];
-  const tsFiles = listFiles(pluginsDir, { extension: ".ts" });
-  const jsFiles = listFiles(pluginsDir, { extension: ".js" });
-  const allFiles = [...tsFiles, ...jsFiles];
-  return allFiles.map((filepath) => parsePluginFile(filepath, packName));
-}
-function parsePluginFile(filepath, packName) {
-  const content = readFileSync7(filepath, "utf-8");
-  const ext = filepath.endsWith(".ts") ? "ts" : "js";
-  return {
-    name: basename5(filepath, `.${ext}`),
-    sourcePath: filepath,
-    packName,
-    content,
-    extension: ext
-  };
-}
-
-// src/features/mcp.ts
-import { join as join5 } from "path";
-function parseMcp(packDir, packName) {
-  const mcpPath = join5(packDir, "mcp.json");
-  const raw = readJsonOrNull(mcpPath);
-  if (!raw?.mcpServers)
-    return null;
-  return {
-    packName,
-    sourcePath: mcpPath,
-    servers: raw.mcpServers
-  };
-}
-function mergeMcpConfigs(configs) {
-  const servers = {};
-  const warnings = [];
-  for (const config of configs) {
-    for (const [name, entry] of Object.entries(config.servers)) {
-      if (name in servers) {
-        warnings.push(`MCP server "${name}" from pack "${config.packName}" skipped (already defined).`);
-        continue;
-      }
-      servers[name] = entry;
-    }
-  }
-  return { servers, warnings };
-}
-
-// src/features/ignore.ts
-import { existsSync as existsSync5, readFileSync as readFileSync8 } from "fs";
-import { join as join6 } from "path";
-var IGNORE_FILES = ["ignore", ".aiignore"];
-function parseIgnore(packDir, packName) {
-  for (const filename of IGNORE_FILES) {
-    const filepath = join6(packDir, filename);
-    if (existsSync5(filepath)) {
-      const raw = readFileSync8(filepath, "utf-8");
-      const patterns = parseIgnoreContent(raw);
-      return {
-        packName,
-        sourcePath: filepath,
-        patterns
-      };
-    }
-  }
-  return null;
-}
-function parseIgnoreContent(content) {
-  return content.split(`
-`).map((line) => line.trim()).filter((line) => line.length > 0 && !line.startsWith("#"));
-}
-function mergeIgnorePatterns(configs) {
-  const seen = new Set;
-  const result = [];
-  for (const config of configs) {
-    for (const pattern of config.patterns) {
-      if (!seen.has(pattern)) {
-        seen.add(pattern);
-        result.push(pattern);
-      }
-    }
-  }
-  return result;
-}
-
-// src/features/models.ts
-import { join as join7 } from "path";
-import { z as z2 } from "zod";
-var SECRET_PATTERNS = [
-  /["']api[_-]?key["']\s*:/i,
-  /["']apiKey["']\s*:/i,
-  /["']secret["']\s*:/i,
-  /["']password["']\s*:/i,
-  /["'](?:auth_token|access_token|bearer_token)["']\s*:/i,
-  /["']private[_-]?key["']\s*:/i,
-  /-----BEGIN\s+(RSA|EC|DSA|OPENSSH|PGP)\s+PRIVATE\s+KEY-----/,
-  /sk-[a-zA-Z0-9]{20,}/,
-  /Bearer\s+[a-zA-Z0-9._-]{20,}/
-];
-var AgentModelSchema = z2.object({
-  model: z2.string(),
-  temperature: z2.number().min(0).max(2).optional(),
-  top_p: z2.number().min(0).max(1).optional()
-});
-var ModelProfileSchema = z2.object({
-  extends: z2.string().optional(),
-  description: z2.string().optional(),
-  default: z2.string().optional(),
-  small: z2.string().optional(),
-  agents: z2.record(z2.string(), AgentModelSchema).optional()
-});
-var RoutingConditionSchema = z2.object({
-  complexity: z2.enum(["low", "medium", "high", "critical"]).optional().describe("Task complexity level"),
-  urgency: z2.enum(["low", "normal", "high"]).optional().describe("Time sensitivity"),
-  budget: z2.enum(["minimal", "standard", "premium"]).optional().describe("Cost/token budget tier"),
-  contextWindowNeed: z2.enum(["small", "medium", "large", "max"]).optional().describe("Required context window size"),
-  toolUseIntensity: z2.enum(["none", "light", "heavy"]).optional().describe("Expected tool/function calling intensity")
-});
-var RoutingRuleSchema = z2.object({
-  when: z2.record(z2.string(), z2.string()),
-  use: z2.string(),
-  description: z2.string().optional(),
-  priority: z2.number().optional()
-});
-var ProviderModelSchema = z2.object({
-  options: z2.record(z2.string(), z2.unknown()).optional(),
-  variants: z2.record(z2.string(), z2.record(z2.string(), z2.unknown())).optional()
-});
-var ProviderConfigSchema = z2.object({
-  options: z2.record(z2.string(), z2.unknown()).optional(),
-  models: z2.record(z2.string(), ProviderModelSchema).optional()
-});
-var ModelsSchema = z2.object({
-  default: z2.string().optional(),
-  small: z2.string().optional(),
-  agents: z2.record(z2.string(), AgentModelSchema).optional(),
-  profiles: z2.record(z2.string(), ModelProfileSchema).optional(),
-  providers: z2.record(z2.string(), ProviderConfigSchema).optional(),
-  routing: z2.array(RoutingRuleSchema).optional(),
-  overrides: z2.record(z2.string(), z2.object({
-    default: z2.string().optional(),
-    small: z2.string().optional(),
-    agents: z2.record(z2.string(), AgentModelSchema).optional()
-  })).optional()
-});
-function parseModels(packDir, packName) {
-  const modelsPath = join7(packDir, "models.json");
-  const raw = readJsonOrNull(modelsPath);
-  if (!raw)
-    return null;
-  const parsed = ModelsSchema.parse(raw);
-  return {
-    packName,
-    sourcePath: modelsPath,
-    config: parsed
+    sourcePath: modelsPath,
+    config: parsed
   };
 }
 function mergeModelsConfigs(configs) {
@@ -723,119 +522,16 @@ function mergeModelsConfigs(configs) {
     }
   }
   return { config: result, warnings };
-}
-function scanModelsForSecrets(config) {
-  const warnings = [];
-  const json = JSON.stringify(config);
-  for (const pattern of SECRET_PATTERNS) {
-    if (pattern.test(json)) {
-      warnings.push(`Potential secret detected in models.json matching pattern: ${pattern.source}`);
-    }
-  }
-  return warnings;
-}
-
-// src/core/pack-loader.ts
-import { existsSync as existsSync6 } from "fs";
-import { resolve as resolve2, isAbsolute } from "path";
-class PackLoader {
-  projectRoot;
-  config;
-  constructor(projectRoot, config) {
-    this.projectRoot = projectRoot;
-    this.config = config;
-  }
-  loadAll() {
-    const warnings = [];
-    const packs = [];
-    const disabledSet = new Set(this.config.disabled);
-    for (const packRef of this.config.packs) {
-      const packDir = this.resolvePackPath(packRef);
-      if (!packDir) {
-        warnings.push(`Pack "${packRef}" could not be resolved. Skipping.`);
-        continue;
-      }
-      if (!existsSync6(packDir)) {
-        warnings.push(`Pack directory "${packDir}" does not exist. Skipping.`);
-        continue;
-      }
-      const manifest = loadPackManifest(packDir);
-      if (disabledSet.has(manifest.name) || disabledSet.has(packRef)) {
-        continue;
-      }
-      const loaded = this.loadPack(packDir, manifest);
-      packs.push(loaded);
-    }
-    return { packs, warnings };
-  }
-  loadPack(packDir, manifest) {
-    const name = manifest.name;
-    const rulesDir = resolve2(packDir, "rules");
-    const commandsDir = resolve2(packDir, "commands");
-    const agentsDir = resolve2(packDir, "agents");
-    const skillsDir = resolve2(packDir, "skills");
-    return {
-      manifest,
-      directory: packDir,
-      rules: existsSync6(rulesDir) ? parseRules(rulesDir, name) : [],
-      commands: existsSync6(commandsDir) ? parseCommands(commandsDir, name) : [],
-      agents: existsSync6(agentsDir) ? parseAgents(agentsDir, name) : [],
-      skills: existsSync6(skillsDir) ? parseSkills(skillsDir, name) : [],
-      hooks: parseHooks(packDir, name),
-      plugins: parsePlugins(packDir, name),
-      mcp: parseMcp(packDir, name),
-      ignore: parseIgnore(packDir, name),
-      models: parseModels(packDir, name)
-    };
-  }
-  loadForBaseDir(baseDir) {
-    const baseDirRoot = resolve2(this.projectRoot, baseDir);
-    const localConfigPath = resolve2(baseDirRoot, "agentpacks.jsonc");
-    if (!existsSync6(localConfigPath)) {
-      return { packs: [], warnings: [] };
-    }
-    const localConfig = loadWorkspaceConfig(baseDirRoot);
-    const loader = new PackLoader(baseDirRoot, localConfig);
-    return loader.loadAll();
-  }
-  resolveCuratedPack(packRef) {
-    const curatedDir = resolve2(this.projectRoot, ".agentpacks", ".curated");
-    let packName = packRef;
-    if (packName.startsWith("registry:"))
-      packName = packName.slice(9);
-    if (packName.startsWith("npm:"))
-      packName = packName.slice(4);
-    if (packName.startsWith("github:"))
-      packName = packName.slice(7);
-    if (packName.startsWith("@"))
-      packName = packName.slice(1);
-    if (packName.includes("/")) {
-      const parts = packName.split("/");
-      packName = packName.includes("@") ? parts.join("-") : parts[parts.length - 1] ?? packName;
-    }
-    const withoutVersion = packName.split("@")[0] ?? packName;
-    packName = withoutVersion.split(":")[0] ?? withoutVersion;
-    const resolved = resolve2(curatedDir, packName);
-    return existsSync6(resolved) ? resolved : null;
-  }
-  resolvePackPath(packRef) {
-    if (packRef.startsWith("./") || packRef.startsWith("../")) {
-      return resolve2(this.projectRoot, packRef);
-    }
-    if (isAbsolute(packRef)) {
-      return packRef;
-    }
-    if (packRef.startsWith("registry:")) {
-      return this.resolveCuratedPack(packRef);
-    }
-    if (packRef.startsWith("@") || packRef.startsWith("npm:") || !packRef.includes("/")) {
-      return this.resolveCuratedPack(packRef);
-    }
-    if (packRef.startsWith("github:") || packRef.includes("/")) {
-      return this.resolveCuratedPack(packRef);
+}
+function scanModelsForSecrets(config) {
+  const warnings = [];
+  const json = JSON.stringify(config);
+  for (const pattern of SECRET_PATTERNS) {
+    if (pattern.test(json)) {
+      warnings.push(`Potential secret detected in models.json matching pattern: ${pattern.source}`);
     }
-    return resolve2(this.projectRoot, packRef);
   }
+  return warnings;
 }
 
 // src/core/feature-merger.ts
@@ -954,158 +650,462 @@ class FeatureMerger {
 }
 
 // src/core/lockfile.ts
-import { existsSync as existsSync7, readFileSync as readFileSync9, writeFileSync as writeFileSync2 } from "fs";
-import { resolve as resolve3 } from "path";
 import { createHash } from "crypto";
+import { existsSync as existsSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "fs";
+import { resolve as resolve2 } from "path";
 var LOCKFILE_VERSION = 1;
 var LOCKFILE_NAME = "agentpacks.lock";
 function loadLockfile(projectRoot) {
-  const filepath = resolve3(projectRoot, LOCKFILE_NAME);
-  if (!existsSync7(filepath)) {
+  const filepath = resolve2(projectRoot, LOCKFILE_NAME);
+  if (!existsSync3(filepath)) {
     return { lockfileVersion: LOCKFILE_VERSION, sources: {} };
   }
-  const raw = readFileSync9(filepath, "utf-8");
-  return JSON.parse(raw);
-}
-function saveLockfile(projectRoot, lockfile) {
-  const filepath = resolve3(projectRoot, LOCKFILE_NAME);
-  writeFileSync2(filepath, JSON.stringify(lockfile, null, 2) + `
-`);
-}
-function getLockedSource(lockfile, sourceKey) {
-  return lockfile.sources[sourceKey];
+  const raw = readFileSync3(filepath, "utf-8");
+  return JSON.parse(raw);
+}
+function saveLockfile(projectRoot, lockfile) {
+  const filepath = resolve2(projectRoot, LOCKFILE_NAME);
+  writeFileSync2(filepath, JSON.stringify(lockfile, null, 2) + `
+`);
+}
+function getLockedSource(lockfile, sourceKey) {
+  return lockfile.sources[sourceKey];
+}
+function setLockedSource(lockfile, sourceKey, entry) {
+  lockfile.sources[sourceKey] = entry;
+}
+function computeIntegrity(content) {
+  const hash = createHash("sha256").update(content).digest("hex");
+  return `sha256-${hash}`;
+}
+function isLockfileFrozenValid(lockfile, sourceKeys) {
+  const missing = sourceKeys.filter((key) => !(key in lockfile.sources));
+  return { valid: missing.length === 0, missing };
+}
+
+// src/utils/frontmatter.ts
+import matter from "gray-matter";
+function parseFrontmatter(source) {
+  const { data, content } = matter(source);
+  return {
+    data,
+    content: content.trim(),
+    raw: source
+  };
+}
+function serializeFrontmatter(data, content) {
+  const filtered = Object.fromEntries(Object.entries(data).filter(([, v]) => v !== undefined));
+  if (Object.keys(filtered).length === 0) {
+    return content;
+  }
+  return matter.stringify(content, filtered);
+}
+
+// src/features/agents.ts
+import { readFileSync as readFileSync4 } from "fs";
+import { basename } from "path";
+function parseAgents(agentsDir, packName) {
+  const files = listFiles(agentsDir, { extension: ".md" });
+  return files.map((filepath) => parseAgentFile(filepath, packName));
+}
+function parseAgentFile(filepath, packName) {
+  const raw = readFileSync4(filepath, "utf-8");
+  const { data, content } = parseFrontmatter(raw);
+  return {
+    name: data.name ?? basename(filepath, ".md"),
+    sourcePath: filepath,
+    packName,
+    meta: data,
+    content
+  };
+}
+function agentMatchesTarget(agent, targetId) {
+  const { targets } = agent.meta;
+  if (!targets || targets === "*")
+    return true;
+  if (Array.isArray(targets) && targets.includes("*"))
+    return true;
+  return Array.isArray(targets) && targets.includes(targetId);
+}
+
+// src/features/commands.ts
+import { readFileSync as readFileSync5 } from "fs";
+import { basename as basename2 } from "path";
+function parseCommands(commandsDir, packName) {
+  const files = listFiles(commandsDir, { extension: ".md" });
+  return files.map((filepath) => parseCommandFile(filepath, packName));
+}
+function parseCommandFile(filepath, packName) {
+  const raw = readFileSync5(filepath, "utf-8");
+  const { data, content } = parseFrontmatter(raw);
+  return {
+    name: basename2(filepath, ".md"),
+    sourcePath: filepath,
+    packName,
+    meta: data,
+    content
+  };
+}
+function commandMatchesTarget(cmd, targetId) {
+  const { targets } = cmd.meta;
+  if (!targets || targets === "*")
+    return true;
+  if (Array.isArray(targets) && targets.includes("*"))
+    return true;
+  return Array.isArray(targets) && targets.includes(targetId);
+}
+
+// src/features/hooks.ts
+import { join as join3 } from "path";
+var TARGET_OVERRIDE_KEYS = ["cursor", "claudecode", "opencode"];
+function parseHooks(packDir, packName) {
+  const hooksPath = join3(packDir, "hooks", "hooks.json");
+  const raw = readJsonOrNull(hooksPath);
+  if (!raw)
+    return null;
+  const shared = raw.hooks ?? {};
+  const targetOverrides = {};
+  for (const key of TARGET_OVERRIDE_KEYS) {
+    const override = raw[key];
+    if (override && typeof override === "object" && "hooks" in override && override.hooks) {
+      targetOverrides[key] = override.hooks;
+    }
+  }
+  return {
+    packName,
+    sourcePath: hooksPath,
+    version: raw.version,
+    shared,
+    targetOverrides
+  };
+}
+function resolveHooksForTarget(hooks, targetId) {
+  const merged = {};
+  for (const [event, entries] of Object.entries(hooks.shared)) {
+    merged[event] = [...entries];
+  }
+  const overrides = hooks.targetOverrides[targetId];
+  if (overrides) {
+    for (const [event, entries] of Object.entries(overrides)) {
+      merged[event] = [...merged[event] ?? [], ...entries];
+    }
+  }
+  return merged;
+}
+
+// src/features/ignore.ts
+import { existsSync as existsSync4, readFileSync as readFileSync6 } from "fs";
+import { join as join4 } from "path";
+var IGNORE_FILES = ["ignore", ".aiignore"];
+function parseIgnore(packDir, packName) {
+  for (const filename of IGNORE_FILES) {
+    const filepath = join4(packDir, filename);
+    if (existsSync4(filepath)) {
+      const raw = readFileSync6(filepath, "utf-8");
+      const patterns = parseIgnoreContent(raw);
+      return {
+        packName,
+        sourcePath: filepath,
+        patterns
+      };
+    }
+  }
+  return null;
+}
+function parseIgnoreContent(content) {
+  return content.split(`
+`).map((line) => line.trim()).filter((line) => line.length > 0 && !line.startsWith("#"));
+}
+function mergeIgnorePatterns(configs) {
+  const seen = new Set;
+  const result = [];
+  for (const config of configs) {
+    for (const pattern of config.patterns) {
+      if (!seen.has(pattern)) {
+        seen.add(pattern);
+        result.push(pattern);
+      }
+    }
+  }
+  return result;
+}
+
+// src/features/mcp.ts
+import { join as join5 } from "path";
+function parseMcp(packDir, packName) {
+  const mcpPath = join5(packDir, "mcp.json");
+  const raw = readJsonOrNull(mcpPath);
+  if (!raw?.mcpServers)
+    return null;
+  return {
+    packName,
+    sourcePath: mcpPath,
+    servers: raw.mcpServers
+  };
+}
+function mergeMcpConfigs(configs) {
+  const servers = {};
+  const warnings = [];
+  for (const config of configs) {
+    for (const [name, entry] of Object.entries(config.servers)) {
+      if (name in servers) {
+        warnings.push(`MCP server "${name}" from pack "${config.packName}" skipped (already defined).`);
+        continue;
+      }
+      servers[name] = entry;
+    }
+  }
+  return { servers, warnings };
+}
+
+// src/features/plugins.ts
+import { existsSync as existsSync5, readFileSync as readFileSync7 } from "fs";
+import { basename as basename3, join as join6 } from "path";
+function parsePlugins(packDir, packName) {
+  const pluginsDir = join6(packDir, "plugins");
+  if (!existsSync5(pluginsDir))
+    return [];
+  const tsFiles = listFiles(pluginsDir, { extension: ".ts" });
+  const jsFiles = listFiles(pluginsDir, { extension: ".js" });
+  const allFiles = [...tsFiles, ...jsFiles];
+  return allFiles.map((filepath) => parsePluginFile(filepath, packName));
+}
+function parsePluginFile(filepath, packName) {
+  const content = readFileSync7(filepath, "utf-8");
+  const ext = filepath.endsWith(".ts") ? "ts" : "js";
+  return {
+    name: basename3(filepath, `.${ext}`),
+    sourcePath: filepath,
+    packName,
+    content,
+    extension: ext
+  };
+}
+
+// src/features/rules.ts
+import { readFileSync as readFileSync8 } from "fs";
+import { basename as basename4 } from "path";
+function parseRules(rulesDir, packName) {
+  const files = listFiles(rulesDir, { extension: ".md" });
+  return files.map((filepath) => parseRuleFile(filepath, packName));
+}
+function parseRuleFile(filepath, packName) {
+  const raw = readFileSync8(filepath, "utf-8");
+  const { data, content } = parseFrontmatter(raw);
+  return {
+    name: basename4(filepath, ".md"),
+    sourcePath: filepath,
+    packName,
+    meta: data,
+    content
+  };
+}
+function ruleMatchesTarget(rule, targetId) {
+  const { targets } = rule.meta;
+  if (!targets || targets === "*")
+    return true;
+  if (Array.isArray(targets) && targets.includes("*"))
+    return true;
+  return Array.isArray(targets) && targets.includes(targetId);
+}
+function getRootRules(rules) {
+  return rules.filter((r) => r.meta.root === true);
+}
+function getDetailRules(rules) {
+  return rules.filter((r) => r.meta.root !== true);
+}
+
+// src/features/skills.ts
+import { existsSync as existsSync6, readFileSync as readFileSync9 } from "fs";
+import { basename as basename5, join as join7 } from "path";
+var SKILL_NAME_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+var SKILL_NAME_MAX_LENGTH = 64;
+function parseSkills(skillsDir, packName) {
+  const dirs = listDirs(skillsDir);
+  const skills = [];
+  for (const dir of dirs) {
+    const skillMd = join7(dir, "SKILL.md");
+    if (existsSync6(skillMd)) {
+      skills.push(parseSkillFile(skillMd, dir, packName));
+    }
+  }
+  return skills;
 }
-function setLockedSource(lockfile, sourceKey, entry) {
-  lockfile.sources[sourceKey] = entry;
+function parseSkillFile(filepath, skillDir, packName) {
+  const raw = readFileSync9(filepath, "utf-8");
+  const { data, content } = parseFrontmatter(raw);
+  return {
+    name: data.name ?? basename5(skillDir),
+    sourcePath: filepath,
+    sourceDir: skillDir,
+    packName,
+    meta: data,
+    content
+  };
 }
-function computeIntegrity(content) {
-  const hash = createHash("sha256").update(content).digest("hex");
-  return `sha256-${hash}`;
+function buildSkillFrontmatter(skill) {
+  return {
+    ...skill.meta,
+    name: skill.name
+  };
 }
-function isLockfileFrozenValid(lockfile, sourceKeys) {
-  const missing = sourceKeys.filter((key) => !(key in lockfile.sources));
-  return { valid: missing.length === 0, missing };
+function serializeSkill(skill) {
+  return serializeFrontmatter(buildSkillFrontmatter(skill), skill.content);
 }
-
-// src/core/dependency-resolver.ts
-function buildDependencyGraph(manifests) {
-  const graph = new Map;
-  for (const m of manifests) {
-    graph.set(m.name, {
-      name: m.name,
-      manifest: m,
-      dependencies: m.dependencies,
-      conflicts: m.conflicts
-    });
+function normalizeImportedSkillMarkdown(source, skillName) {
+  const { data, content } = parseFrontmatter(source);
+  const normalized = {
+    ...data,
+    name: skillName
+  };
+  let addedDescription = false;
+  const description = normalized.description;
+  if (typeof description !== "string" || description.trim().length === 0) {
+    normalized.description = `Imported skill: ${skillName}`;
+    addedDescription = true;
   }
-  return graph;
+  return {
+    content: serializeFrontmatter(normalized, content),
+    addedDescription
+  };
 }
-function resolveDependencies(manifests) {
-  const graph = buildDependencyGraph(manifests);
-  const allNames = new Set(graph.keys());
-  const missingDeps = [];
-  for (const [name, node] of graph) {
-    for (const dep of node.dependencies) {
-      if (!allNames.has(dep)) {
-        missingDeps.push([name, dep]);
-      }
+function validateAgentSkillsFrontmatter(skill) {
+  const errors = [];
+  const dirName = basename5(skill.sourceDir);
+  const declaredName = skill.meta.name;
+  if (typeof declaredName !== "string" || declaredName.trim().length === 0) {
+    errors.push('Missing required frontmatter field "name".');
+  } else {
+    if (declaredName.length > SKILL_NAME_MAX_LENGTH) {
+      errors.push(`Invalid "name": must be at most ${SKILL_NAME_MAX_LENGTH} characters.`);
+    }
+    if (!SKILL_NAME_PATTERN.test(declaredName)) {
+      errors.push('Invalid "name": use lowercase letters, numbers, and single hyphens only.');
+    }
+    if (declaredName !== dirName) {
+      errors.push(`Invalid "name": must match containing directory "${dirName}".`);
     }
   }
-  const { sorted, cycles } = topologicalSort(graph);
-  const conflictPairs = detectConflicts(graph);
-  const ok = cycles.length === 0 && conflictPairs.length === 0 && missingDeps.length === 0;
-  return { sorted, cycles, conflictPairs, missingDeps, ok };
-}
-function topologicalSort(graph) {
-  const inDegree = new Map;
-  for (const name of graph.keys()) {
-    inDegree.set(name, 0);
+  const description = skill.meta.description;
+  if (typeof description !== "string" || description.trim().length === 0) {
+    errors.push('Missing required frontmatter field "description".');
   }
-  for (const [, node] of graph) {
-    for (const dep of node.dependencies) {
-      if (graph.has(dep)) {
-        inDegree.set(dep, (inDegree.get(dep) ?? 0) + 1);
-      }
-    }
+  const allowedTools = skill.meta["allowed-tools"];
+  if (allowedTools !== undefined && (!Array.isArray(allowedTools) || allowedTools.some((tool) => typeof tool !== "string" || tool.length === 0))) {
+    errors.push('Invalid "allowed-tools": expected an array of non-empty strings.');
   }
-  const queue = [];
-  for (const [name, degree] of inDegree) {
-    if (degree === 0)
-      queue.push(name);
+  return errors;
+}
+function skillMatchesTarget(skill, targetId) {
+  const { targets } = skill.meta;
+  if (!targets || targets === "*")
+    return true;
+  if (Array.isArray(targets) && targets.includes("*"))
+    return true;
+  return Array.isArray(targets) && targets.includes(targetId);
+}
+
+// src/core/pack-loader.ts
+import { existsSync as existsSync7 } from "fs";
+import { isAbsolute, resolve as resolve3 } from "path";
+class PackLoader {
+  projectRoot;
+  config;
+  constructor(projectRoot, config) {
+    this.projectRoot = projectRoot;
+    this.config = config;
   }
-  const sorted = [];
-  while (queue.length > 0) {
-    const current = queue.shift();
-    if (!current)
-      continue;
-    sorted.push(current);
-    const node = graph.get(current);
-    if (!node)
-      continue;
-    for (const dep of node.dependencies) {
-      if (!graph.has(dep))
+  loadAll() {
+    const warnings = [];
+    const packs = [];
+    const disabledSet = new Set(this.config.disabled);
+    for (const packRef of this.config.packs) {
+      const packDir = this.resolvePackPath(packRef);
+      if (!packDir) {
+        warnings.push(`Pack "${packRef}" could not be resolved. Skipping.`);
         continue;
-      const newDegree = (inDegree.get(dep) ?? 1) - 1;
-      inDegree.set(dep, newDegree);
-      if (newDegree === 0) {
-        queue.push(dep);
       }
-    }
-  }
-  const cycles = [];
-  if (sorted.length < graph.size) {
-    const remaining = new Set;
-    for (const name of graph.keys()) {
-      if (!sorted.includes(name))
-        remaining.add(name);
-    }
-    const visited = new Set;
-    for (const start of remaining) {
-      if (visited.has(start))
+      if (!existsSync7(packDir)) {
+        warnings.push(`Pack directory "${packDir}" does not exist. Skipping.`);
+        continue;
+      }
+      const manifest = loadPackManifest(packDir);
+      if (disabledSet.has(manifest.name) || disabledSet.has(packRef)) {
         continue;
-      const cycle = traceCycle(start, graph, remaining);
-      if (cycle.length > 0) {
-        cycles.push(cycle);
-        for (const n of cycle)
-          visited.add(n);
       }
+      const loaded = this.loadPack(packDir, manifest);
+      packs.push(loaded);
     }
+    return { packs, warnings };
   }
-  return { sorted: sorted.reverse(), cycles };
-}
-function traceCycle(start, graph, remaining) {
-  const path = [];
-  const pathSet = new Set;
-  let current = start;
-  while (current && !pathSet.has(current)) {
-    path.push(current);
-    pathSet.add(current);
-    const node = graph.get(current);
-    if (!node)
-      break;
-    current = node.dependencies.find((d) => remaining.has(d) && graph.has(d));
+  loadPack(packDir, manifest) {
+    const name = manifest.name;
+    const rulesDir = resolve3(packDir, "rules");
+    const commandsDir = resolve3(packDir, "commands");
+    const agentsDir = resolve3(packDir, "agents");
+    const skillsDir = resolve3(packDir, "skills");
+    return {
+      manifest,
+      directory: packDir,
+      rules: existsSync7(rulesDir) ? parseRules(rulesDir, name) : [],
+      commands: existsSync7(commandsDir) ? parseCommands(commandsDir, name) : [],
+      agents: existsSync7(agentsDir) ? parseAgents(agentsDir, name) : [],
+      skills: existsSync7(skillsDir) ? parseSkills(skillsDir, name) : [],
+      hooks: parseHooks(packDir, name),
+      plugins: parsePlugins(packDir, name),
+      mcp: parseMcp(packDir, name),
+      ignore: parseIgnore(packDir, name),
+      models: parseModels(packDir, name)
+    };
   }
-  if (current && pathSet.has(current)) {
-    const cycleStart = path.indexOf(current);
-    return path.slice(cycleStart);
+  loadForBaseDir(baseDir) {
+    const baseDirRoot = resolve3(this.projectRoot, baseDir);
+    const localConfigPath = resolve3(baseDirRoot, "agentpacks.jsonc");
+    if (!existsSync7(localConfigPath)) {
+      return { packs: [], warnings: [] };
+    }
+    const localConfig = loadWorkspaceConfig(baseDirRoot);
+    const loader = new PackLoader(baseDirRoot, localConfig);
+    return loader.loadAll();
   }
-  return path;
-}
-function detectConflicts(graph) {
-  const conflicts = [];
-  const seen = new Set;
-  for (const [name, node] of graph) {
-    for (const conflict of node.conflicts) {
-      if (graph.has(conflict)) {
-        const key = [name, conflict].sort().join(":");
-        if (!seen.has(key)) {
-          seen.add(key);
-          conflicts.push([name, conflict]);
-        }
-      }
+  resolveCuratedPack(packRef) {
+    const curatedDir = resolve3(this.projectRoot, ".agentpacks", ".curated");
+    let packName = packRef;
+    if (packName.startsWith("registry:"))
+      packName = packName.slice(9);
+    if (packName.startsWith("npm:"))
+      packName = packName.slice(4);
+    if (packName.startsWith("github:"))
+      packName = packName.slice(7);
+    if (packName.startsWith("@"))
+      packName = packName.slice(1);
+    if (packName.includes("/")) {
+      const parts = packName.split("/");
+      packName = packName.includes("@") ? parts.join("-") : parts[parts.length - 1] ?? packName;
     }
+    const withoutVersion = packName.split("@")[0] ?? packName;
+    packName = withoutVersion.split(":")[0] ?? withoutVersion;
+    const resolved = resolve3(curatedDir, packName);
+    return existsSync7(resolved) ? resolved : null;
+  }
+  resolvePackPath(packRef) {
+    if (packRef.startsWith("./") || packRef.startsWith("../")) {
+      return resolve3(this.projectRoot, packRef);
+    }
+    if (isAbsolute(packRef)) {
+      return packRef;
+    }
+    if (packRef.startsWith("registry:")) {
+      return this.resolveCuratedPack(packRef);
+    }
+    if (packRef.startsWith("@") || packRef.startsWith("npm:") || !packRef.includes("/")) {
+      return this.resolveCuratedPack(packRef);
+    }
+    if (packRef.startsWith("github:") || packRef.includes("/")) {
+      return this.resolveCuratedPack(packRef);
+    }
+    return resolve3(this.projectRoot, packRef);
   }
-  return conflicts;
 }
 export {
   setLockedSource,