ccprofiles-core 0.7.0 → 0.7.2

package/dist/assets.js

@@ -4,7 +4,13 @@ import { join, relative } from 'node:path';
 import { renderPath } from './platform.js';
 import { atomicWrite, backupFiles } from './fsutil.js';
 import { physicalLinkEntry } from './links.js';
-const HUB_DIRS = ['skills', 'commands', 'plugins'];
+// Deliberately NOT 'plugins': plugin state syncs via the manifest's declarative
+// `plugins[]`/`marketplaces{}` fields (already inside manifestYaml) plus a `claude plugin
+// install` reconcile after sync/import — never by copying the plugins/ directory tree.
+// That tree is marketplace git clones + installed plugin caches, routinely multi-GB; walking
+// and JSON.stringify-ing it here blew past V8's max string length in sealJson on a real user's
+// machine (their ~/.claude-oauth/plugins/ alone was 3.9 GB).
+const HUB_DIRS = ['skills', 'commands'];
 function safeParts(rel) {
     if (rel.includes('\\') || rel.includes('\0'))
         throw new Error(`unsafe asset path: ${JSON.stringify(rel)}`);

package/dist/discovery.d.ts

@@ -10,6 +10,10 @@ export interface LiveProfile {
     links: Record<string, string>;
     settingsEnv: Record<string, string>;
     enabledPlugins: Record<string, boolean>;
+    /** Plugin ids actually installed (keys of plugins/installed_plugins.json) — the ground truth
+     *  for "present". enabledPlugins alone can be stale: an enabled-but-never-installed entry
+     *  (e.g. written by the retired union-sharing feature) must still trigger an install. */
+    installedPlugins: string[];
     marketplaces: Record<string, {
         source: string;
     }>;

package/dist/discovery.js

@@ -85,6 +85,14 @@ export async function discoverProfiles(home) {
                     }
             }
             catch { /* no plugins/known_marketplaces.json */ }
+        const installedPlugins = [];
+        if (agent === 'claude')
+            try {
+                const ip = JSON.parse(await readFile(join(dir, 'plugins', 'installed_plugins.json'), 'utf8'));
+                if (ip && typeof ip.plugins === 'object' && ip.plugins !== null)
+                    installedPlugins.push(...Object.keys(ip.plugins));
+            }
+            catch { /* no plugins/installed_plugins.json */ }
         out.push({
             agent,
             dirName: e.name,
@@ -96,6 +104,7 @@ export async function discoverProfiles(home) {
             links,
             settingsEnv,
             enabledPlugins,
+            installedPlugins,
             marketplaces,
         });
     }

package/dist/syncserver.js

@@ -95,8 +95,11 @@ export async function startSyncServer(deps) {
             }
             return send(res, 404, { error: 'not found' });
         }
-        catch {
-            // never leak internal error detail (paths, parse internals) to callers
+        catch (e) {
+            // never leak internal error detail (paths, parse internals) to callers — but log it
+            // locally (this process's own stderr, never sent over the wire) so whoever runs
+            // `ccprofiles serve` can actually diagnose the failure instead of a bare 500.
+            process.stderr.write(`ccprofiles serve error: ${e.stack ?? e}\n`);
             return send(res, 500, { error: 'internal error' });
         }
     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ccprofiles-core",
-  "version": "0.7.0",
+  "version": "0.7.2",
   "description": "Core library for ccprofiles — discovery, manifest, secrets, apply, and LAN sync for Claude Code multi-account setups",
   "type": "module",
   "main": "./dist/index.js",