cli4ai 1.1.3 → 1.1.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cli4ai",
-  "version": "1.1.3",
+  "version": "1.1.5",
   "description": "The package manager for AI CLI tools - cli4ai.com",
   "type": "module",
   "bin": {

package/src/commands/add.ts

@@ -2,7 +2,7 @@
  * cli4ai add - Install packages
  */
 
-import { existsSync, symlinkSync, mkdirSync, cpSync, rmSync } from 'fs';
+import { existsSync, symlinkSync, mkdirSync, cpSync, rmSync, readdirSync, statSync, unlinkSync, lstatSync } from 'fs';
 import { resolve, dirname, join, basename, normalize } from 'path';
 import { createInterface } from 'readline';
 import { tmpdir } from 'os';
@@ -107,8 +107,6 @@ async function confirm(message: string): Promise<boolean> {
  * Validate extracted tarball paths to prevent path traversal attacks
  */
 function validateTarballPaths(extractedDir: string): boolean {
-  const { readdirSync, statSync } = require('fs');
-
   function checkPath(dir: string): boolean {
     const entries = readdirSync(dir, { withFileTypes: true });
     for (const entry of entries) {
@@ -151,12 +149,15 @@ async function downloadFromNpm(packageName: string, targetDir: string): Promise<
       encoding: 'utf-8'
     });
 
+    if (packResult.error) {
+      throw new Error(`npm not found or failed to execute: ${packResult.error.message}`);
+    }
+
     if (packResult.status !== 0) {
-      throw new Error(`Failed to download package: ${packResult.stderr || 'npm pack failed'}`);
+      throw new Error(`npm pack failed: ${packResult.stderr || packResult.stdout || 'unknown error'}`);
     }
 
     // Find the tarball (it will be named like cli4ai-slack-1.0.2.tgz)
-    const { readdirSync } = await import('fs');
     const files = readdirSync(tmpDir);
     const tarball = files.find(f => f.endsWith('.tgz'));
 
@@ -501,17 +502,19 @@ async function resolvePackage(
 
   // Auto-resolve to @cli4ai/ scope and try npm
   const scopedName = `@cli4ai/${pkg}`;
+  let npmError: string | undefined;
   try {
     log(`Resolving ${pkg} as ${scopedName}...`);
     const pkgPath = await downloadFromNpm(scopedName, targetDir);
     const manifest = loadManifest(pkgPath);
     return { manifest, path: pkgPath, fromNpm: true };
-  } catch {
-    // Fall through to error
+  } catch (err) {
+    npmError = err instanceof Error ? err.message : String(err);
   }
 
   outputError('NOT_FOUND', `Package not found: ${pkg}`, {
-    hint: `Tried @cli4ai/${pkg} on npm. Use --local flag for local paths, or add a local registry with "cli4ai config --add-registry <path>"`
+    hint: `Tried @cli4ai/${pkg} on npm. Use --local flag for local paths, or add a local registry with "cli4ai config --add-registry <path>"`,
+    npmError
   });
 }
 
@@ -527,7 +530,6 @@ async function installPackage(
   // Remove existing if present
   if (existsSync(pkgDir)) {
     try {
-      const { unlinkSync, rmSync, lstatSync } = await import('fs');
       const stat = lstatSync(pkgDir);
       if (stat.isSymbolicLink()) {
         unlinkSync(pkgDir);