bidtry-code-context 0.0.0-stage → 0.1.1

package/BIDTRY_TEAM_SOURCE.txt

@@ -0,0 +1,32 @@
+Bidtry — Open Source Acknowledgements
+
+Original project: Repomix
+
+========================================================================
+Original file: NOTICE.md
+========================================================================
+
+# Attribution
+
+## Bidtry product attribution
+
+Bidtry Code Context is the Bidtry-maintained project in this directory. Its implementation is derived from Repomix and retains compatible technical identifiers.
+
+Original authorship, copyright notices, project license terms, and third-party licenses remain with their respective holders. Bidtry branding does not replace those notices.
+
+Original package authors recorded before the branding update:
+
+- "Kazuki Yamada <koukun0120@gmail.com>"
+
+========================================================================
+Original source: https://github.com/yamadashy/repomix/blob/main/LICENSE
+Git blob: cc6cde3b20418ea0c9f503be0ab2e301bb02d6db
+========================================================================
+
+Copyright 2024 Kazuki Yamada
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

package/README.md

@@ -1,3 +1,43 @@
-# Temporary Holding Version
+# Bidtry Code Context
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+**Brand:** Bidtry · **Developer:** Keshab Amgain
+
+Bidtry Code Context: install project-local workflow instructions. Native engines are separate.
+
+A workflow for repository source, configuration, and relevant tests.
+
+## Why use it?
+
+Large repositories contain more information than one task needs. Select the relevant source and tests, respect ignore rules, and produce context your coding agent can actually use.
+
+## Install
+
+Requires Node.js 20 or newer. Open a terminal in your existing project folder, then run this command on macOS, Windows PowerShell, or Linux:
+
+```sh
+npx bidtry-code-context@0.1.1 install --target .
+```
+
+The command installs and verifies workflow files under `.bidtry/skills/`. No particular coding assistant is required. Open `.bidtry/skills/bidtry-code-context/START-HERE.md`, then read the workflow in `SKILL.md`. You can follow the instructions yourself or share them with your preferred assistant.
+
+## Preview, verify, and remove
+
+```sh
+npx bidtry-code-context@0.1.1 install --target . --dry-run
+npx bidtry-code-context@0.1.1 verify --target .
+npx bidtry-code-context@0.1.1 uninstall --target . --dry-run
+```
+
+Remove `--dry-run` from the removal command only when ready. Unknown or edited files are preserved by refusing unsafe changes. Symlinked destinations are rejected.
+
+Optional assistant integrations: pass `--agent codex`, `--agent claude`, or `--agent cursor`. These place instructions in that assistant's project skill directory. Start a new assistant session after installing. Dollar-sign and slash examples inside skill files are assistant requests, not terminal commands.
+
+## What is included?
+
+Workflow instructions and their supporting reference files. This npm release does not install a standalone application, native engine, compiler, browser, solver, API service, or project dependencies. Some workflow checks need separately installed native tools. They are not certified by installing these instructions. There are no npm runtime dependencies or install lifecycle scripts.
+
+## Copyright and license texts
+
+Original copyright notices and full license texts are included in `BIDTRY_TEAM_SOURCE.txt`. Different included materials retain their original terms. Bidtry branding does not replace original authorship.
+
+[Tool information](https://bidtry.com/code-context)

package/SOURCE.json

@@ -0,0 +1,15 @@
+{
+  "package": "bidtry-code-context@0.1.1",
+  "artifactKind": "project-local workflow installer; native engines excluded",
+  "runtimeSha256": "8a5a2db03bee2339c0d6085242a3fbdb1988f9bb75cc191683d48394cd52e00f",
+  "bundledRuntimeSha256": "baa502f978cf630a676d1d1bacc93c0bdc09488c1ee4d0c3ca1d0d0c27a514be",
+  "payloadSha256": "ceb3d6e7650e6595adeff2ed8194800be762740c0764991d92a9e211cd9c8111",
+  "products": [
+    {
+      "name": "bidtry-code-context",
+      "version": "0.1.1",
+      "slug": "code-context"
+    }
+  ],
+  "noticeSha256": "3616f99b015001b0c7e97bf529502adccc91cfb470b5d87ce6a81aefc7699f02"
+}

package/bin/cli.mjs

@@ -0,0 +1,24 @@
+#!/usr/bin/env node
+import { runCli } from '../lib/runtime.mjs';
+const product = {"name":"bidtry-code-context","title":"Bidtry Code Context","slug":"code-context","version":"0.1.1"};
+const args = process.argv.slice(2);
+const command = args[0];
+const help = "\nBidtry Code Context — project workflow installer\n\nUsage:\n  bidtry-code-context install [--target PATH] [--agent project|codex|claude|cursor|all] [--dry-run]\n  bidtry-code-context verify [options]\n  bidtry-code-context uninstall [options] [--dry-run]\n  bidtry-code-context list\n\nDefault: editor-readable workflow files in .bidtry/skills/ inside your project.\nInstall verifies the managed files automatically. Requires Node.js 20 or newer.\nThis package installs workflow instructions, not native engines or application dependencies.\nOriginal copyright notices and license texts: BIDTRY_TEAM_SOURCE.txt\n";
+try {
+  if (!command || args.includes('--help') || args.includes('-h') || command === 'help') {
+    process.stdout.write(help);
+  } else if (args.includes('--version') || args.includes('-v') || command === 'version') {
+    process.stdout.write("0.1.1" + '\n');
+  } else {
+    if (!['install', 'verify', 'uninstall', 'remove', 'list'].includes(command)) throw new Error('Unknown command. Use --help.');
+    if (product && args.some(value => /^--(?:tool|tools|preset)(?:=|$)/.test(value))) throw new Error('This package installs ' + product.name + ' only. Use @bidtry/tools to choose other tools.');
+    const options = args.slice(1);
+    if (!args.some(value => /^--agent(?:=|$)/.test(value))) options.push('--agent', 'project');
+    if (product && command !== 'list') options.push('--tool', product.slug);
+    process.stdout.write(runCli([command, ...options], process.cwd()));
+    if (command === 'install' && !args.includes('--dry-run')) process.stdout.write(runCli(['verify', ...options], process.cwd()));
+  }
+} catch (error) {
+  process.stderr.write(error.message + '\n');
+  process.exitCode = 1;
+}

package/lib/runtime.mjs

@@ -0,0 +1,502 @@
+#!/usr/bin/env node
+import { createHash, randomUUID } from 'node:crypto';
+import {
+  chmodSync,
+  existsSync,
+  lstatSync,
+  mkdirSync,
+  readFileSync,
+  readdirSync,
+  realpathSync,
+  renameSync,
+  rmdirSync,
+  unlinkSync,
+  writeFileSync
+} from 'node:fs';
+import path from 'node:path';
+import { pathToFileURL } from 'node:url';
+
+export default runCli;
+
+const INSTALLER_VERSION = '1.1.0';
+const PAYLOAD = JSON.parse(Buffer.from('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', 'base64').toString('utf8'));
+const AGENT_PATHS = { codex: '.agents', claude: '.claude', cursor: '.cursor', project: '.bidtry' };
+const MANIFEST = '.bidtry-install.json';
+const DESIGN_PRESET = [
+  'design-improve',
+  'accessibility-improve',
+  'graph-interface'
+];
+
+function digest(contents) {
+  return createHash('sha256').update(contents).digest('hex');
+}
+
+function assertPayload() {
+  if (PAYLOAD?.schemaVersion !== 1 || !Array.isArray(PAYLOAD.products)) {
+    throw new Error('The Bidtry installer payload is missing or invalid.');
+  }
+}
+
+function productMap() {
+  assertPayload();
+  return new Map(PAYLOAD.products.map(product => [product.slug, product]));
+}
+
+function parseValue(args, index, option) {
+  const argument = args[index];
+  const value = argument.includes('=')
+    ? argument.slice(option.length + 1)
+    : args[index + 1];
+  if (!value || value.startsWith('--')) {
+    throw new Error(`Missing value for ${option}.`);
+  }
+  return { value, consumed: argument.includes('=') ? 0 : 1 };
+}
+
+/** Parse options without touching the target project. */
+export function parseArguments(args, cwd) {
+  const knownCommands = new Set([
+    'help',
+    'version',
+    'list',
+    'install',
+    'verify',
+    'uninstall',
+    'remove'
+  ]);
+  let command = 'help';
+  let agent = 'codex';
+  let target = cwd;
+  let dryRun = false;
+  let selector = null;
+  for (let index = 0; index < args.length; index += 1) {
+    const argument = args[index];
+    if (index === 0 && knownCommands.has(argument)) {
+      command = argument === 'remove' ? 'uninstall' : argument;
+      continue;
+    }
+    if (argument === '--help' || argument === '-h') {
+      command = 'help';
+      continue;
+    }
+    if (argument === '--version' || argument === '-v') {
+      command = 'version';
+      continue;
+    }
+    if (argument === '--dry-run') {
+      dryRun = true;
+      continue;
+    }
+    const option = argument.split('=', 1)[0];
+    if (!['--agent', '--target', '--tool', '--tools', '--preset'].includes(option)) {
+      throw new Error(`Unknown argument: ${argument}. Use --help for usage.`);
+    }
+    const parsed = parseValue(args, index, option);
+    index += parsed.consumed;
+    if (option === '--agent') agent = parsed.value;
+    if (option === '--target') target = parsed.value;
+    if (['--tool', '--tools', '--preset'].includes(option)) {
+      if (selector) {
+        throw new Error('Choose exactly one of --tool, --tools, or --preset.');
+      }
+      selector = { option, value: parsed.value };
+    }
+  }
+  if (agent !== 'all' && !Object.hasOwn(AGENT_PATHS, agent)) {
+    throw new Error(
+      `Unsupported installation format: ${agent}. Choose project, codex, claude, cursor, or all.`
+    );
+  }
+  if (['install', 'verify', 'uninstall'].includes(command) && !selector) {
+    throw new Error('Choose tools with --tool, --tools, or --preset.');
+  }
+  return {
+    command,
+    target: path.resolve(cwd, target),
+    agents: agent === 'all' ? ['codex', 'claude', 'cursor'] : [agent],
+    dryRun,
+    selector
+  };
+}
+
+function selectProducts(selector) {
+  const products = productMap();
+  let slugs;
+  if (selector.option === '--preset') {
+    if (selector.value === 'design') slugs = DESIGN_PRESET;
+    else if (selector.value === 'all') slugs = [...products.keys()].sort();
+    else throw new Error('Unsupported preset. Choose design or all.');
+  } else if (selector.option === '--tool') {
+    slugs = [selector.value];
+  } else {
+    slugs = selector.value.split(',').map(value => value.trim()).filter(Boolean);
+  }
+  if (!slugs.length) throw new Error('No tools were selected.');
+  if (new Set(slugs).size !== slugs.length) {
+    throw new Error('Tool selection contains duplicates.');
+  }
+  return slugs.map(slug => {
+    const product = products.get(slug);
+    if (!product) throw new Error(`Unknown Bidtry tool: ${slug}.`);
+    return product;
+  });
+}
+
+function assertRelative(relative) {
+  if (
+    typeof relative !== 'string' ||
+    !relative ||
+    path.isAbsolute(relative) ||
+    relative.split(/[\\/]/).includes('..')
+  ) {
+    throw new Error(`Invalid packaged file path: ${relative}`);
+  }
+}
+
+function assertRegularPath(root, relative) {
+  assertRelative(relative);
+  let current = root;
+  const parts = relative.split(/[\\/]/);
+  for (const [index, part] of parts.entries()) {
+    current = path.join(current, part);
+    let info;
+    try {
+      info = lstatSync(current);
+    } catch (error) {
+      if (error.code === 'ENOENT') return;
+      throw error;
+    }
+    if (info.isSymbolicLink()) {
+      throw new Error(`Refusing to follow a symlink: ${current}`);
+    }
+    if (index < parts.length - 1 && !info.isDirectory()) {
+      throw new Error(`Expected a directory: ${current}`);
+    }
+    if (index === parts.length - 1 && !info.isFile()) {
+      throw new Error(`Expected a regular file: ${current}`);
+    }
+  }
+}
+
+function materializeFiles(product, agent) {
+  const result = {};
+  const agentSkill = `${AGENT_PATHS[agent]}/skills/bidtry-design-improve`;
+  for (const [name, file] of Object.entries(product.files)) {
+    assertRelative(name);
+    if (
+      typeof file?.content !== 'string' ||
+      ![0o644, 0o755].includes(file.mode)
+    ) {
+      throw new Error(`Invalid packaged skill file: ${product.slug}/${name}`);
+    }
+    let contents = file.content;
+    if (product.slug === 'design-improve') {
+      contents = contents.replaceAll(
+        '.agents/skills/bidtry-design-improve',
+        agentSkill
+      );
+      if (agent !== 'codex' && agent !== 'project') {
+        contents = contents.replaceAll(
+          '$bidtry-design-improve',
+          '/bidtry-design-improve'
+        );
+      }
+    }
+    result[name] = { contents, mode: file.mode };
+  }
+  if (agent === 'project') {
+    result['START-HERE.md'] = {
+      contents: `# ${product.title}\n\nThese are project-local workflow files. Open SKILL.md in any editor, follow the workflow yourself, or give the instructions to your coding assistant. No particular assistant is required to store or read these files.\n\nThe skill's dollar-sign and slash examples are requests for compatible assistants, not shell commands. This installation does not install a standalone application, native engine, or project dependencies.\n\nTool: https://bidtry.com/${product.slug}\n`,
+      mode: 0o644
+    };
+  }
+  return result;
+}
+
+function readManifest(root, relative, productName, isRequired = false) {
+  assertRegularPath(root, relative);
+  const absolute = path.join(root, relative);
+  if (!existsSync(absolute)) {
+    if (isRequired) throw new Error(`Bidtry installation not found: ${absolute}`);
+    return null;
+  }
+  let manifest;
+  try {
+    manifest = JSON.parse(readFileSync(absolute, 'utf8'));
+  } catch {
+    throw new Error(`Invalid installer manifest: ${absolute}`);
+  }
+  if (
+    manifest?.schemaVersion !== 1 ||
+    manifest?.package !== productName ||
+    !manifest.files ||
+    typeof manifest.files !== 'object'
+  ) {
+    throw new Error(`Unrecognized installer manifest: ${absolute}`);
+  }
+  return manifest;
+}
+
+/** Validate every requested destination before any file changes. */
+export function createInstallPlan(selected, options) {
+  const root = realpathSync(options.target);
+  if (!lstatSync(root).isDirectory()) {
+    throw new Error(`Target is not a directory: ${root}`);
+  }
+  const files = [];
+  for (const product of selected) {
+    if (!/^bidtry-[a-z0-9]+(?:-[a-z0-9]+)*$/.test(product.name)) {
+      throw new Error(`Invalid Bidtry package name: ${product.name}`);
+    }
+    for (const agent of options.agents) {
+      const skillDirectory = path.join(
+        AGENT_PATHS[agent],
+        'skills',
+        product.name
+      );
+      const manifestRelative = path.join(skillDirectory, MANIFEST);
+      const previousManifest = readManifest(
+        root,
+        manifestRelative,
+        product.name
+      );
+      const payload = materializeFiles(product, agent);
+      const hashes = {};
+      for (const [name, file] of Object.entries(payload)) {
+        const relative = path.join(skillDirectory, name);
+        assertRegularPath(root, relative);
+        const destination = path.join(root, relative);
+        const previous = existsSync(destination)
+          ? readFileSync(destination, 'utf8')
+          : null;
+        if (
+          previous !== null &&
+          previous !== file.contents &&
+          previousManifest?.files?.[name] !== digest(previous)
+        ) {
+          throw new Error(
+            `Preserving your existing file: ${destination}. Move or rename this skill folder before installing.`
+          );
+        }
+        hashes[name] = digest(file.contents);
+        files.push({
+          path: destination,
+          relative,
+          contents: file.contents,
+          previous,
+          mode: file.mode
+        });
+      }
+      const manifestContents =
+        JSON.stringify(
+          {
+            schemaVersion: 1,
+            package: product.name,
+            version: product.version,
+            installedBy: `bidtry-tools-installer@${INSTALLER_VERSION}`,
+            files: hashes
+          },
+          null,
+          2
+        ) + '\n';
+      const manifestPath = path.join(root, manifestRelative);
+      files.push({
+        path: manifestPath,
+        relative: manifestRelative,
+        contents: manifestContents,
+        previous: existsSync(manifestPath)
+          ? readFileSync(manifestPath, 'utf8')
+          : null,
+        mode: 0o644
+      });
+    }
+  }
+  return { root, files, skills: selected.length * options.agents.length };
+}
+
+function applyInstallPlan(plan) {
+  let changed = 0;
+  for (const file of plan.files) {
+    assertRegularPath(plan.root, file.relative);
+    const current = existsSync(file.path)
+      ? readFileSync(file.path, 'utf8')
+      : null;
+    if (current !== file.previous) {
+      throw new Error(`File changed during installation: ${file.path}`);
+    }
+    const currentMode = existsSync(file.path) ? lstatSync(file.path).mode & 0o777 : null;
+    if (current === file.contents && currentMode === file.mode) continue;
+    mkdirSync(path.dirname(file.path), { recursive: true });
+    if (current !== file.contents) {
+      const temporary = `${file.path}.${randomUUID()}.tmp`;
+      try {
+        writeFileSync(temporary, file.contents, {
+          flag: 'wx',
+          mode: file.mode
+        });
+        renameSync(temporary, file.path);
+      } finally {
+        if (existsSync(temporary)) unlinkSync(temporary);
+      }
+    }
+    chmodSync(file.path, file.mode);
+    changed += 1;
+  }
+  return changed;
+}
+
+function createVerification(selected, options) {
+  const root = realpathSync(options.target);
+  const failures = [];
+  let skills = 0;
+  for (const product of selected) {
+    for (const agent of options.agents) {
+      const skillDirectory = path.join(
+        AGENT_PATHS[agent],
+        'skills',
+        product.name
+      );
+      const manifestRelative = path.join(skillDirectory, MANIFEST);
+      const manifest = readManifest(root, manifestRelative, product.name, true);
+      const payload = materializeFiles(product, agent);
+      for (const [name, file] of Object.entries(payload)) {
+        const relative = path.join(skillDirectory, name);
+        try {
+          assertRegularPath(root, relative);
+          const absolute = path.join(root, relative);
+          if (!existsSync(absolute)) throw new Error('file is missing');
+          const actual = digest(readFileSync(absolute));
+          if (actual !== digest(file.contents)) throw new Error('file is outdated or edited');
+          if (manifest.files[name] !== actual) throw new Error('manifest hash does not match');
+        } catch (error) {
+          failures.push(`${relative}: ${error.message}`);
+        }
+      }
+      skills += 1;
+    }
+  }
+  if (failures.length) {
+    throw new Error(`Verification failed:\n${failures.map(item => `  ${item}`).join('\n')}`);
+  }
+  return { root, skills };
+}
+
+function createUninstallPlan(selected, options) {
+  const root = realpathSync(options.target);
+  const files = [];
+  const directories = new Set();
+  for (const product of selected) {
+    for (const agent of options.agents) {
+      const skillDirectory = path.join(
+        AGENT_PATHS[agent],
+        'skills',
+        product.name
+      );
+      const manifestRelative = path.join(skillDirectory, MANIFEST);
+      const manifest = readManifest(root, manifestRelative, product.name, true);
+      for (const [name, expected] of Object.entries(manifest.files)) {
+        assertRelative(name);
+        if (!/^[a-f0-9]{64}$/.test(expected)) {
+          throw new Error(`Invalid managed-file hash: ${manifestRelative}`);
+        }
+        const relative = path.join(skillDirectory, name);
+        assertRegularPath(root, relative);
+        const absolute = path.join(root, relative);
+        if (!existsSync(absolute)) {
+          throw new Error(`Managed file is missing: ${absolute}`);
+        }
+        if (digest(readFileSync(absolute)) !== expected) {
+          throw new Error(`Preserving your edited file: ${absolute}`);
+        }
+        files.push({ path: absolute, relative });
+        let directory = path.dirname(absolute);
+        const skillRoot = path.join(root, skillDirectory);
+        while (directory.startsWith(skillRoot)) {
+          directories.add(directory);
+          if (directory === skillRoot) break;
+          directory = path.dirname(directory);
+        }
+      }
+      files.push({
+        path: path.join(root, manifestRelative),
+        relative: manifestRelative
+      });
+    }
+  }
+  return {
+    root,
+    files,
+    directories: [...directories].sort((a, b) => b.length - a.length),
+    skills: selected.length * options.agents.length
+  };
+}
+
+function applyUninstallPlan(plan) {
+  for (const file of plan.files) {
+    assertRegularPath(plan.root, file.relative);
+    if (existsSync(file.path)) unlinkSync(file.path);
+  }
+  for (const directory of plan.directories) {
+    if (existsSync(directory) && readdirSync(directory).length === 0) {
+      rmdirSync(directory);
+    }
+  }
+}
+
+function help() {
+  return `Bidtry Tools Installer ${INSTALLER_VERSION}\n\nUsage:\n  node bidtry-install.mjs list\n  node bidtry-install.mjs install --tool SLUG [options]\n  node bidtry-install.mjs install --tools SLUG,SLUG [options]\n  node bidtry-install.mjs install --preset design|all [options]\n  node bidtry-install.mjs verify --tool|--tools|--preset VALUE [options]\n  node bidtry-install.mjs uninstall --tool|--tools|--preset VALUE [options]\n\nOptions:\n  --agent project|codex|claude|cursor|all   Default: codex\n  --target PATH                     Default: current directory\n  --dry-run                         Show changes without writing\n\nThe installer adds project-local agent skills only, or editor-readable workflow files with --agent project. It does not change application code, install dependencies, configure credentials, or install native engines.\n`;
+}
+
+/** Run a complete installer command. */
+export function runCli(args, cwd) {
+  const options = parseArguments(args, cwd);
+  if (options.command === 'help') return help();
+  if (options.command === 'version') return `bidtry-tools-installer ${INSTALLER_VERSION}\n`;
+  if (options.command === 'list') {
+    return `${[...productMap().values()]
+      .sort((a, b) => a.title.localeCompare(b.title))
+      .map(product => `${product.slug}\t${product.title}`)
+      .join('\n')}\n`;
+  }
+  const selected = selectProducts(options.selector);
+  if (options.command === 'install') {
+    const plan = createInstallPlan(selected, options);
+    if (options.dryRun) {
+      return `Dry run — no files written (${plan.skills} skills):\n${plan.files
+        .map(file => `  ${file.path}`)
+        .join('\n')}\n`;
+    }
+    const changed = applyInstallPlan(plan);
+    const first = selected[0].name;
+    if (options.agents.includes('project')) {
+      return `${changed ? 'Installed or updated' : 'Already current:'} ${plan.skills} Bidtry workflow${plan.skills === 1 ? '' : 's'} in ${plan.root}.\nOpen .bidtry/skills/${first}/START-HERE.md in your editor.\nWorkflow files only; native engines and project dependencies remain separate.\n`;
+    }
+    const invocation = options.agents.includes('codex') ? `$${first} init` : `/${first} init`;
+    return `${changed ? 'Installed or updated' : 'Already current:'} ${plan.skills} Bidtry skill${plan.skills === 1 ? '' : 's'} in ${plan.root}.\nReload your coding agent, then start with ${invocation} inside the agent.\nApplication code and dependencies were not changed. Native engines remain separate.\n`;
+  }
+  if (options.command === 'verify') {
+    const result = createVerification(selected, options);
+    return `Verified ${result.skills} current Bidtry skill${result.skills === 1 ? '' : 's'} in ${result.root}.\n`;
+  }
+  const plan = createUninstallPlan(selected, options);
+  if (options.dryRun) {
+    return `Dry run — no files removed (${plan.skills} skills):\n${plan.files
+      .map(file => `  ${file.path}`)
+      .join('\n')}\n`;
+  }
+  applyUninstallPlan(plan);
+  return `Removed ${plan.skills} managed Bidtry skill${plan.skills === 1 ? '' : 's'} from ${plan.root}. Unrelated files were preserved.\n`;
+}
+
+if (
+  process.argv[1] &&
+  import.meta.url === pathToFileURL(realpathSync(process.argv[1])).href
+) {
+  try {
+    process.stdout.write(runCli(process.argv.slice(2), process.cwd()));
+  } catch (error) {
+    process.stderr.write(`${error.message}\n`);
+    process.exitCode = 1;
+  }
+}

package/package.json

@@ -1,6 +1,40 @@
 {
   "name": "bidtry-code-context",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.1",
+  "description": "Bidtry Code Context: install project-local workflow instructions. Native engines are separate.",
+  "type": "module",
+  "license": "SEE LICENSE IN BIDTRY_TEAM_SOURCE.txt",
+  "author": {
+    "name": "Bidtry",
+    "url": "https://bidtry.com"
+  },
+  "contributors": [
+    {
+      "name": "Keshab Amgain"
+    }
+  ],
+  "homepage": "https://bidtry.com/code-context",
+  "engines": {
+    "node": ">=20"
+  },
+  "bin": {
+    "bidtry-code-context": "bin/cli.mjs"
+  },
+  "files": [
+    "bin/cli.mjs",
+    "lib/runtime.mjs",
+    "README.md",
+    "BIDTRY_TEAM_SOURCE.txt",
+    "SOURCE.json"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "keywords": [
+    "bidtry",
+    "developer-tools",
+    "project-workflow",
+    "code-context"
+  ]
+}