agy-plugins-cli 1.1.14

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 ZaunEkko
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,94 @@
+<div align="center">
+
+# 🚀 Antigravity CLI Package Manager
+**The official, ultra-fast plugin manager for Google Antigravity (agy).**
+
+[English](README.md) · [简体中文](i18n/zh-CN/README.md) · [繁體中文](i18n/zh-TW/README.md) · [日本語](i18n/ja/README.md) · [한국어](i18n/ko/README.md)
+
+[![TypeScript](https://img.shields.io/badge/TypeScript-007ACC?style=for-the-badge&logo=typescript&logoColor=white)](https://www.typescriptlang.org/)
+[![Node.js](https://img.shields.io/badge/Node.js-43853D?style=for-the-badge&logo=node.js&logoColor=white)](https://nodejs.org/)
+[![NPM Version](https://img.shields.io/npm/v/agy-plugins-cli.svg?style=for-the-badge&logo=npm)](https://www.npmjs.com/package/agy-plugins-cli)
+[![CLI](https://img.shields.io/badge/CLI-Command_Line-black?style=for-the-badge&logo=gnometerminal)](https://github.com/ZaunEkko/agy-plugins-cli)
+[![License](https://img.shields.io/badge/License-MIT-yellow?style=for-the-badge)](https://github.com/ZaunEkko/agy-plugins-cli/blob/main/LICENSE)
+
+> Seamlessly install, update, and manage Antigravity plugins across multiple repositories, with interactive terminal UI, granular namespace support, and secure context merging.
+
+</div>
+
+<br />
+
+## ✨ Features
+
+- **🌐 Multi-Marketplace Support**: Add and switch between multiple remote GitHub repositories as your plugin sources (e.g. `ZaunEkko/agy-plugins`).
+- **⚡ Hot Updates with Precision**: Fetch the newest `commit` fingerprint from remote repos and perform updates instantly at global, namespace, or individual plugin levels.
+- **🖥️ Interactive TUI**: Browse, check update status, and batch-install plugins via a stunning terminal user interface built with `@clack/prompts`.
+- **🔐 Zero-Config Private Repos**: Natively detects and utilizes your local `gh auth token` to bypass GitHub API rate limits and access enterprise private plugin repositories.
+- **🛡️ Hook & MCP Merging**: Merges remote `hooks.json` and `mcp.json` into your Antigravity config. Hook arrays are deduplicated, and same-name MCP servers are replaced with a warning so updates stay explicit.
+
+<br />
+
+## 📦 Installation
+
+To install `agy-plugins-cli` globally on your machine, simply run:
+
+Requires Node.js `^22.13.0 || >=23.5.0`.
+
+```bash
+npm install -g agy-plugins-cli@latest
+```
+
+*Now you can use the `agy-plugin` command anywhere in your terminal!*
+
+<br />
+
+## 🚀 Quick Start
+
+### 1. Add and Explore Marketplaces
+Link a GitHub repository to your local registry and explore its plugins interactively.
+```bash
+# Add a repository as a marketplace
+agy-plugin marketplace add ZaunEkko/agy-plugins
+
+# Open the interactive marketplace dashboard (Shows Outdated/Installed status!)
+agy-plugin marketplace list
+```
+*(The interactive TUI lets you browse available plugins, see update dates, and batch install them with a single keystroke!)*
+
+### 2. Install a Plugin
+Install plugins from the connected marketplace by specifying the plugin name and the repository namespace.
+```bash
+agy-plugin add commit-commands@zaunekko
+agy-plugin add explanatory-output-style@zaunekko
+```
+*(The CLI will securely download the `skills`, and `hooks` to your local `.gemini/config/` directory!)*
+
+### 3. Keep Plugins Updated
+Easily fetch and sync the latest plugin updates from the remote authors. Our CLI tracks the local and remote SHA fingerprints to dynamically detect out-of-date plugins.
+```bash
+# Update all installed plugins across all namespaces globally
+agy-plugin update
+
+# Update all plugins in a specific namespace
+agy-plugin update @zaunekko
+
+# Update a specific plugin directly
+agy-plugin update commit-commands@zaunekko
+```
+
+<br />
+
+## 🧠 Architecture & Security
+
+- **Fingerprint Tracking**: `agy-plugin` caches the latest Git `sha` for downloaded directories in `~/.agy-plugin/installed.json`, while marketplace configuration lives in `~/.agy-plugin/config.json`. This enables intelligent delta-updates and distinct visual states (Installed vs Update Available) in the TUI.
+- **Dynamic Context Injection**: Antigravity natively loads everything dropped into the `.gemini/config/` directory. Our CLI acts as the secure bridge between remote community repos and your local AI context.
+- **`gh` CLI Integration**: Under the hood, if `GITHUB_TOKEN` is missing, the tool attempts to extract tokens via `gh auth token` to ensure your local git workflow is entirely uninterrupted.
+
+## 📄 License
+
+This project is open-sourced under the [MIT License](https://github.com/ZaunEkko/agy-plugins-cli/blob/main/LICENSE).
+
+<br />
+
+<div align="center">
+  <i>Built for Antigravity, by Antigravity.</i>
+</div>

package/dist/config.js

@@ -0,0 +1,90 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadConfig = loadConfig;
+exports.saveConfig = saveConfig;
+exports.addMarketplace = addMarketplace;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const os = __importStar(require("os"));
+// Path to the configuration file (e.g. ~/.agy-plugin/config.json)
+const CONFIG_DIR = path.join(os.homedir(), '.agy-plugin');
+const CONFIG_FILE = path.join(CONFIG_DIR, 'config.json');
+const DEFAULT_CONFIG = {
+    marketplaces: []
+};
+/**
+ * Ensure the config file exists and load it.
+ */
+function loadConfig() {
+    if (!fs.existsSync(CONFIG_DIR)) {
+        fs.mkdirSync(CONFIG_DIR, { recursive: true });
+    }
+    if (!fs.existsSync(CONFIG_FILE)) {
+        saveConfig(DEFAULT_CONFIG);
+        return DEFAULT_CONFIG;
+    }
+    try {
+        const data = fs.readFileSync(CONFIG_FILE, 'utf-8');
+        return JSON.parse(data);
+    }
+    catch (error) {
+        console.error('Error reading config file. Using default config.');
+        return DEFAULT_CONFIG;
+    }
+}
+/**
+ * Save the config to disk.
+ */
+function saveConfig(config) {
+    if (!fs.existsSync(CONFIG_DIR)) {
+        fs.mkdirSync(CONFIG_DIR, { recursive: true });
+    }
+    fs.writeFileSync(CONFIG_FILE, JSON.stringify(config, null, 2), 'utf-8');
+}
+/**
+ * Add a marketplace repository if it doesn't already exist.
+ */
+function addMarketplace(repo) {
+    const config = loadConfig();
+    if (!config.marketplaces.includes(repo)) {
+        config.marketplaces.push(repo);
+        saveConfig(config);
+        console.log(`Successfully added marketplace: ${repo}`);
+    }
+    else {
+        console.log(`Marketplace ${repo} already exists in your config.`);
+    }
+}

package/dist/fetcher.js

@@ -0,0 +1,265 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getLatestCommitInfo = getLatestCommitInfo;
+exports.getLatestCommitSha = getLatestCommitSha;
+exports.downloadPlugin = downloadPlugin;
+exports.listPluginsInRepo = listPluginsInRepo;
+const axios_1 = __importDefault(require("axios"));
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const chalk_1 = __importDefault(require("chalk"));
+const readline = __importStar(require("readline"));
+const child_process_1 = require("child_process");
+const mcp_merger_1 = require("./mcp-merger");
+const hooks_merger_1 = require("./hooks-merger");
+let cachedToken = null;
+function getGithubToken() {
+    if (cachedToken)
+        return cachedToken;
+    if (process.env.GITHUB_TOKEN) {
+        cachedToken = process.env.GITHUB_TOKEN;
+        return cachedToken;
+    }
+    try {
+        const token = (0, child_process_1.execSync)('gh auth token', { stdio: ['pipe', 'pipe', 'ignore'], encoding: 'utf-8' }).trim();
+        if (token) {
+            cachedToken = token;
+            return token;
+        }
+    }
+    catch (e) {
+        // Ignore error
+    }
+    return null;
+}
+const GITHUB_API_BASE = 'https://api.github.com/repos';
+function askQuestion(query) {
+    const rl = readline.createInterface({
+        input: process.stdin,
+        output: process.stdout,
+    });
+    return new Promise(resolve => rl.question(query, ans => {
+        rl.close();
+        resolve(ans.toLowerCase().startsWith('y'));
+    }));
+}
+/**
+ * Get the latest commit info (SHA, date, message) for a specific path
+ */
+async function getLatestCommitInfo(repo, pluginPath) {
+    const url = `${GITHUB_API_BASE}/${repo}/commits?path=${pluginPath}&per_page=1`;
+    try {
+        const headers = {
+            'Accept': 'application/vnd.github.v3+json',
+            'User-Agent': 'agy-plugins-cli'
+        };
+        const token = getGithubToken();
+        if (token) {
+            headers['Authorization'] = `Bearer ${token}`;
+        }
+        const response = await axios_1.default.get(url, { headers });
+        if (response.data && response.data.length > 0) {
+            return {
+                sha: response.data[0].sha,
+                date: response.data[0].commit.committer.date,
+                message: response.data[0].commit.message.split('\n')[0]
+            };
+        }
+    }
+    catch (e) {
+        // Ignore, just return null if we can't fetch it
+    }
+    return null;
+}
+/**
+ * Get the latest commit SHA for a specific path in the repository
+ */
+async function getLatestCommitSha(repo, pluginPath) {
+    const info = await getLatestCommitInfo(repo, pluginPath);
+    return info ? info.sha : null;
+}
+/**
+ * Check if the plugin contains dangerous executable hooks before downloading
+ */
+async function checkSecurity(repo, pluginPath) {
+    const url = `${GITHUB_API_BASE}/${repo}/contents/${pluginPath}`;
+    try {
+        const headers = {
+            'Accept': 'application/vnd.github.v3+json',
+            'User-Agent': 'agy-plugins-cli'
+        };
+        const token = getGithubToken();
+        if (token) {
+            headers['Authorization'] = `Bearer ${token}`;
+        }
+        const response = await axios_1.default.get(url, { headers });
+        const hasHooks = response.data.some(item => item.name === 'hooks' && item.type === 'dir');
+        if (hasHooks) {
+            console.log(chalk_1.default.red.bold(`\n⚠️  SECURITY WARNING ⚠️`));
+            console.log(chalk_1.default.yellow(`The plugin '${pluginPath}' contains executable hooks scripts.`));
+            console.log(chalk_1.default.yellow(`Executing unverified scripts can be dangerous and compromise your system.`));
+            const isTrusted = await askQuestion(chalk_1.default.white.bold(`Do you trust this plugin and want to proceed? (y/N): `));
+            if (!isTrusted) {
+                return false;
+            }
+        }
+    }
+    catch (e) {
+        // Ignore errors here, they will be caught during actual download
+    }
+    return true;
+}
+/**
+ * Fetch and download a plugin folder from GitHub
+ */
+async function downloadPlugin(repo, pluginPath, targetDir, skipSecurityCheck = false, rootTargetDir) {
+    if (!skipSecurityCheck) {
+        const safeToProceed = await checkSecurity(repo, pluginPath);
+        if (!safeToProceed) {
+            throw new Error("Installation cancelled by user due to security warning.");
+        }
+    }
+    // If this is the initial call, set rootTargetDir to targetDir
+    const activeRootTargetDir = rootTargetDir || targetDir;
+    let installedFiles = [];
+    let installedHooks = [];
+    const url = `${GITHUB_API_BASE}/${repo}/contents/${pluginPath}`;
+    try {
+        const headers = {
+            'Accept': 'application/vnd.github.v3+json',
+            'User-Agent': 'agy-plugins-cli'
+        };
+        const token = getGithubToken();
+        if (token) {
+            headers['Authorization'] = `Bearer ${token}`;
+        }
+        const response = await axios_1.default.get(url, { headers });
+        const contents = Array.isArray(response.data) ? response.data : [response.data];
+        for (const item of contents) {
+            const localPath = path.join(targetDir, item.name);
+            if (item.type === 'dir') {
+                // Recursive fetch for directories
+                if (!fs.existsSync(localPath)) {
+                    fs.mkdirSync(localPath, { recursive: true });
+                }
+                const subResult = await downloadPlugin(repo, item.path, localPath, true, activeRootTargetDir);
+                installedFiles = [...installedFiles, ...subResult.files];
+                installedHooks = [...installedHooks, ...subResult.hooks];
+            }
+            else if (item.type === 'file' && item.download_url) {
+                console.log(chalk_1.default.gray(`Downloading ${item.path}...`));
+                const fileResponse = await axios_1.default.get(item.download_url, { responseType: 'arraybuffer' });
+                // Handle mcp.json merge specially
+                if (item.name === 'mcp.json' && targetDir === activeRootTargetDir) {
+                    console.log(chalk_1.default.blue(`Found mcp.json. Merging...`));
+                    const remoteContent = Buffer.from(fileResponse.data).toString('utf-8');
+                    (0, mcp_merger_1.mergeMcpConfig)(localPath, remoteContent);
+                    installedFiles.push(localPath);
+                    continue;
+                }
+                // Handle hooks.json merge specially
+                if (item.name === 'hooks.json' && path.basename(path.dirname(localPath)) === 'hooks') {
+                    console.log(chalk_1.default.blue(`Found hooks.json. Merging into root hooks.json...`));
+                    const remoteContent = Buffer.from(fileResponse.data).toString('utf-8');
+                    const rootHooksPath = path.join(activeRootTargetDir, 'hooks.json');
+                    const mergedKeys = (0, hooks_merger_1.mergeHooksConfig)(rootHooksPath, remoteContent);
+                    installedHooks = [...installedHooks, ...mergedKeys];
+                    continue;
+                }
+                // Ensure parent dir exists
+                const parentDir = path.dirname(localPath);
+                if (!fs.existsSync(parentDir)) {
+                    fs.mkdirSync(parentDir, { recursive: true });
+                }
+                fs.writeFileSync(localPath, fileResponse.data);
+                installedFiles.push(localPath);
+            }
+        }
+        return { files: installedFiles, hooks: installedHooks };
+    }
+    catch (error) {
+        if (error.response && error.response.status === 404) {
+            console.error(chalk_1.default.red(`Error: Plugin '${pluginPath}' not found in repository '${repo}'.`));
+        }
+        else if (error.message !== "Installation cancelled by user due to security warning.") {
+            console.error(chalk_1.default.red(`Failed to fetch from GitHub API: ${error.message}`));
+        }
+        throw error;
+    }
+}
+/**
+ * List all available plugins (directories) in a remote repository along with update date
+ */
+async function listPluginsInRepo(repo) {
+    const url = `${GITHUB_API_BASE}/${repo}/contents/`;
+    try {
+        const headers = {
+            'Accept': 'application/vnd.github.v3+json',
+            'User-Agent': 'agy-plugins-cli'
+        };
+        const token = getGithubToken();
+        if (token) {
+            headers['Authorization'] = `Bearer ${token}`;
+        }
+        const response = await axios_1.default.get(url, { headers });
+        const dirs = response.data.filter(item => item.type === 'dir' && !item.name.startsWith('.'));
+        // Fetch commit info concurrently for all plugin directories
+        const plugins = await Promise.all(dirs.map(async (dir) => {
+            const info = await getLatestCommitInfo(repo, dir.name);
+            return { name: dir.name, date: info ? info.date : null, sha: info ? info.sha : null };
+        }));
+        // Sort by most recently updated
+        return plugins.sort((a, b) => {
+            if (!a.date)
+                return 1;
+            if (!b.date)
+                return -1;
+            return new Date(b.date).getTime() - new Date(a.date).getTime();
+        });
+    }
+    catch (error) {
+        if (error.response && error.response.status === 404) {
+            console.error(chalk_1.default.red(`Error: Repository '${repo}' not found.`));
+        }
+        else {
+            console.error(chalk_1.default.red(`Failed to fetch repository contents: ${error.message}`));
+        }
+        return [];
+    }
+}

package/dist/hooks-merger.js

@@ -0,0 +1,89 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.mergeHooksConfig = mergeHooksConfig;
+const fs = __importStar(require("fs"));
+const chalk_1 = __importDefault(require("chalk"));
+/**
+ * Deep merge two hook configurations.
+ */
+function mergeHooksConfigData(target, source) {
+    for (const key of Object.keys(source)) {
+        if (!target[key]) {
+            target[key] = source[key];
+        }
+        else {
+            for (const hookType of Object.keys(source[key])) {
+                if (!target[key][hookType]) {
+                    target[key][hookType] = source[key][hookType];
+                }
+                else if (Array.isArray(target[key][hookType]) && Array.isArray(source[key][hookType])) {
+                    const merged = [...target[key][hookType], ...source[key][hookType]];
+                    const unique = Array.from(new Set(merged.map(item => JSON.stringify(item)))).map(item => JSON.parse(item));
+                    target[key][hookType] = unique;
+                }
+                else {
+                    target[key][hookType] = source[key][hookType];
+                }
+            }
+        }
+    }
+}
+function mergeHooksConfig(targetPath, remoteContent) {
+    let targetData = {};
+    if (fs.existsSync(targetPath)) {
+        try {
+            targetData = JSON.parse(fs.readFileSync(targetPath, 'utf-8'));
+        }
+        catch (e) {
+            console.warn(chalk_1.default.yellow(`Warning: Could not parse existing hooks.json at ${targetPath}. Overwriting.`));
+        }
+    }
+    let remoteData = {};
+    try {
+        remoteData = JSON.parse(remoteContent);
+    }
+    catch (e) {
+        console.error(chalk_1.default.red(`Error parsing remote hooks.json content.`));
+        return [];
+    }
+    mergeHooksConfigData(targetData, remoteData);
+    fs.writeFileSync(targetPath, JSON.stringify(targetData, null, 2), 'utf-8');
+    console.log(chalk_1.default.green(`✓ Successfully merged hooks.json into ${targetPath}`));
+    return Object.keys(remoteData);
+}