marvelous-ui-library 1.0.1 → 1.0.3

package/README.md

@@ -7,7 +7,9 @@ npx marvelous-ui-library@latest init
 npx marvelous-ui-library@latest add dialog tabs toast
 ```
 
-`init` detects the project and supported agent configuration. In an interactive terminal it asks whether to install the Pack in this project or in your user profile. Enter a Polar license key in the hidden prompt for Pro, or press Enter for Free. For automation, set `MARVELOUS_LICENSE_KEY` for Pro and optionally use `--scope project|user`. A noninteractive invocation without a key defaults to Free in the current project. `--edition free|pro` remains available for existing scripts.
+`init` detects the project and supported agent configuration. In an interactive terminal it asks whether to install the Pack in this project or in your user profile. Enter a Polar license key in the hidden prompt for Pro, or press Enter for Free. A noninteractive invocation without a key defaults to Free in the current project. `--edition free|pro` remains available for existing scripts.
+
+User setup detects Codex, Claude Code, Cursor and OpenCode where available. Choose several by entering comma-separated numbers or names; `all` selects every detected supported agent, and `none` installs only the shared Pack. A later interactive run remembers your choice. For automation, set `MARVELOUS_LICENSE_KEY` for Pro and use `--scope user --clients codex,cursor,opencode`, `--clients all`, or `--clients none`. The first noninteractive user setup connects no agent unless `--clients` is supplied. Codex and Claude Code require their command-line tools for automatic registration. Cursor receives a local plugin copy; OpenCode receives a user skill and MCP entry. Rerunning user setup disconnects agents you deselect. Restart an open agent session after setup, or reload Cursor. Other agents can use project setup or the manual instructions in the Pack's `docs/MCP.md`.
 
 The Pro Pack requires a Polar license key for the first download and for newer releases. A supplied invalid key causes an error. The key is not written to a project file. A project Pack remains at its installed version until you run:
 
@@ -25,4 +27,14 @@ npx marvelous-ui-library@latest restore --version 1.0.0
 
 Run `restore` without `--version` in an interactive terminal to choose from the saved releases. Use `--scope project|user` to choose the target. Restoration compares managed component hashes and preserves customized files. A saved release remains usable after the key expires; fetching a release that was never saved still requires an active key.
 
+To remove an installation while keeping your downloaded Pro ZIPs:
+
+```bash
+npx marvelous-ui-library@latest uninstall --scope user
+# Or, from the project you initialized:
+npx marvelous-ui-library@latest uninstall --scope project
+```
+
+User uninstall disconnects the agents registered by the CLI and removes its user Pack. Project uninstall removes that project's Pack. Both leave copied project components and existing project agent configuration files for you to review. Existing agent entries that the CLI does not manage are left alone. Pro ZIPs remain under `~/.marvelous-ui/archives`; add `--purge-archives` to `uninstall --scope user` only when you also want to delete those saved ZIPs. An expired key cannot download them again.
+
 The Free Pack is MIT licensed. The Pro Pack is subject to the commercial license shipped in its `LICENSE.md`.

package/bin.mjs

@@ -4,7 +4,8 @@ import { existsSync } from "node:fs";
 import { join, resolve } from "node:path";
 import { createInterface } from "node:readline/promises";
 import { Writable } from "node:stream";
-import { locations, readState, latestRelease, downloadRelease, installPack, addComponents, detectFramework, listProArchives, readProArchive } from "./lib/installer.mjs";
+import { locations, readState, latestRelease, downloadRelease, installPack, uninstallPack, addComponents, detectFramework, listProArchives, readProArchive } from "./lib/installer.mjs";
+import { SUPPORTED, LABELS, checkUserAgents, configureUserAgents, detectUserAgents, disconnectUserAgents, parseUserAgents, readUserAgents } from "./lib/agents.mjs";
 
 const HELP = `Marvelous UI
 
@@ -12,8 +13,9 @@ const HELP = `Marvelous UI
   npx marvelous-ui-library@latest add <component...> [--scope project|user] [--out path]
   npx marvelous-ui-library@latest update [--scope project|user]
   npx marvelous-ui-library@latest restore [--scope project|user] [--version 1.1.0]
+  npx marvelous-ui-library@latest uninstall [--scope project|user] [--purge-archives]
 
-Options: --project path, --clients names. At init, press Enter for Free or enter a Polar key for Pro. In automation, set MARVELOUS_LICENSE_KEY for Pro.
+Options: --project path, --clients codex,claude,cursor,opencode|all|none. At init, press Enter for Free or enter a Polar key for Pro. In automation, set MARVELOUS_LICENSE_KEY for Pro. Uninstall keeps saved Pro ZIPs unless --purge-archives is passed.
 `;
 
 function options(args) {
@@ -22,6 +24,7 @@ function options(args) {
   for (let i = 0; i < args.length; i++) {
     const arg = args[i];
     if (arg === "--help" || arg === "-h") parsed.help = true;
+    else if (arg === "--purge-archives") parsed.purgeArchives = true;
     else if (arg.startsWith("--")) {
       const name = arg.slice(2);
       if (!values.has(name) || !args[i + 1] || args[i + 1].startsWith("--")) throw new Error(`Invalid option: ${arg}`);
@@ -69,8 +72,18 @@ function chosenOut(project, supplied, componentState) {
 }
 
 function pluginRefresh(place) {
-  console.log("If your agent installed a copy of the plugin, register the updated Pack again:");
-  execFileSync(process.execPath, [join(place.pack, "scripts", "init-agent.mjs"), "--plugin"], { stdio: "inherit" });
+  if (place.scope !== "user") return;
+  const agents = readUserAgents(place);
+  if (agents.length) {
+    const names = configureUserAgents(place, agents);
+    console.log(`Updated agent plugins: ${names.join(", ")}.`);
+  }
+}
+
+function defaultUserAgents(place) {
+  const previous = readUserAgents(place);
+  if (existsSync(join(place.base, "agents.json"))) return previous.length ? previous.join(",") : "none";
+  return detectUserAgents(place).join(",") || "none";
 }
 
 async function init(opts, project) {
@@ -82,9 +95,22 @@ async function init(opts, project) {
   const edition = opts.edition ?? (key || current?.edition === "pro" ? "pro" : "free");
   if (!["project", "user"].includes(scope) || !["free", "pro"].includes(edition)) throw new Error("Choose --scope project|user and --edition free|pro.");
   if (opts.edition === "free" && key) throw new Error("A Polar key was provided with --edition free. Remove the key or choose Pro.");
+  let selectedAgents = null;
+  if (scope === "user") {
+    const available = detectUserAgents(place);
+    if (!opts.clients && process.stdin.isTTY) {
+      console.log("Connect Marvelous UI to your coding agents:");
+      SUPPORTED.forEach((name, index) => console.log(`  ${index + 1}. ${LABELS[name]} (${available.includes(name) ? "detected" : "not detected"})`));
+    }
+    const choice = opts.clients ?? (process.stdin.isTTY
+      ? await ask("Choose numbers or names, 'all' for detected, 'none' for Pack only: ", defaultUserAgents(place))
+      : existsSync(join(place.base, "agents.json")) ? defaultUserAgents(place) : "none");
+    selectedAgents = parseUserAgents(choice, available);
+  }
+  if (selectedAgents) checkUserAgents(selectedAgents);
   const componentState = readState(place.components);
   const hasComponents = !!(current && componentState?.slugs?.length && componentState.sourceScope === scope);
-  console.log(`Marvelous UI: ${edition} Pack, ${scope} scope, ${detectFramework(project)} project`);
+  console.log(`Marvelous UI: ${edition} Pack, ${scope === "user" ? "user profile" : `${detectFramework(project)} project`}${key ? ", Polar key received" : ""}.`);
   if (!current || current.edition !== edition) {
     const meta = await latestRelease(edition);
     const bytes = await downloadRelease(edition, meta, edition === "pro" ? key || await licenseKey() : "");
@@ -109,10 +135,24 @@ async function init(opts, project) {
     if (opts.clients) args.push("--clients", opts.clients);
     execFileSync(process.execPath, args, { stdio: "inherit" });
   } else {
-    console.log("Register the user Pack with your agent using these commands:");
-    execFileSync(process.execPath, [join(place.pack, "scripts", "init-agent.mjs"), "--plugin"], { stdio: "inherit" });
+    const names = configureUserAgents(place, selectedAgents);
+    console.log(names.length ? `Connected for all projects: ${names.join(", ")}.` : "No agent connected by choice.");
+    if (selectedAgents.includes("cursor")) console.log("Reload Cursor to activate its local plugin.");
   }
-  console.log("Ready. Ask your coding agent to build a UI with Marvelous UI.");
+  console.log(scope === "user" && !selectedAgents.length ? "Pack installed." : "Ready. Restart your agent to load Marvelous UI.");
+}
+
+function uninstall(opts, project) {
+  const scope = opts.scope ?? existingScope(project) ?? "user";
+  if (!["project", "user"].includes(scope)) throw new Error("Choose --scope project|user.");
+  if (opts.purgeArchives && scope !== "user") throw new Error("--purge-archives is available only with --scope user.");
+  const place = locations(scope, project);
+  if (scope === "user") disconnectUserAgents(place);
+  const result = uninstallPack(place, { purgeArchives: opts.purgeArchives });
+  console.log(`Marvelous UI ${scope} Pack uninstalled.`);
+  if (result.archivesKept) console.log(`Saved Pro ZIPs kept in ${place.archives}. Use --purge-archives to remove them.`);
+  if (result.projectFilesKept) console.log("Copied project components were kept. Remove them separately after reviewing local changes.");
+  if (scope === "project") console.log("Project agent configuration files were kept. Review their Marvelous UI entries before deleting them.");
 }
 
 async function restore(opts, project) {
@@ -208,12 +248,13 @@ async function run(args = process.argv.slice(2)) {
   if (command === "--help" || command === "-h") return console.log(HELP);
   const opts = options(args.slice(1));
   if (!command || opts.help || command === "help") return console.log(HELP);
-  if (!["init", "add", "update", "restore"].includes(command)) throw new Error(`Unknown command: ${command}\n${HELP}`);
+  if (!["init", "add", "update", "restore", "uninstall"].includes(command)) throw new Error(`Unknown command: ${command}\n${HELP}`);
   const project = resolve(opts.project ?? process.cwd());
   if (!existsSync(project)) throw new Error(`Project does not exist: ${project}`);
   if (command === "init") return init(opts, project);
   if (command === "add") return add(opts, project);
   if (command === "restore") return restore(opts, project);
+  if (command === "uninstall") return uninstall(opts, project);
   return update(opts, project);
 }
 

package/lib/agent-targets.mjs

@@ -0,0 +1,161 @@
+import { cpSync, existsSync, lstatSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
+import { createHash } from "node:crypto";
+import { dirname, join, resolve, sep } from "node:path";
+import jsonc from "jsonc-parser";
+
+const { applyEdits, modify, parse } = jsonc;
+const MARKER = ".marvelous-ui-managed.json";
+
+function homeOf(place) { return dirname(place.base); }
+
+function safePath(home, target) {
+  const root = resolve(home);
+  const path = resolve(target);
+  if (!path.startsWith(root + sep)) throw new Error(`Agent target is outside the user profile: ${path}`);
+  let cursor = root;
+  for (const part of path.slice(root.length + 1).split(sep)) {
+    cursor = join(cursor, part);
+    if (existsSync(cursor) && lstatSync(cursor).isSymbolicLink()) throw new Error(`Agent target contains a symbolic link: ${cursor}`);
+  }
+  return path;
+}
+
+function markerAt(target) { return join(target, MARKER); }
+function digest(content) { return createHash("sha256").update(content).digest("hex"); }
+
+function managed(target, place) {
+  const file = markerAt(target);
+  if (!existsSync(file)) return false;
+  const state = JSON.parse(readFileSync(file, "utf8"));
+  if (state.schema !== 1 || state.pack !== place.pack) throw new Error(`Marvelous UI does not own ${target}`);
+  if (state.pluginHash && digest(readFileSync(join(target, "plugin.json"))) !== state.pluginHash) throw new Error(`The Cursor plugin at ${target} was customized. It was left unchanged.`);
+  if (state.skillHash && digest(readFileSync(join(target, "SKILL.md"))) !== state.skillHash) throw new Error(`The OpenCode skill at ${target} was customized. It was left unchanged.`);
+  return true;
+}
+
+function writeMarker(target, place, extra = {}) {
+  writeFileSync(markerAt(target), JSON.stringify({ schema: 1, pack: place.pack, ...extra }, null, 2) + "\n");
+}
+
+export function cursorTarget(place) { return join(homeOf(place), ".cursor", "plugins", "local", "marvelous-ui"); }
+export function opencodeTarget(place) { return join(homeOf(place), ".config", "opencode", "skills", "marvelous-ui"); }
+
+export function cursorPresent(place) {
+  const home = homeOf(place);
+  return existsSync(join(home, ".cursor")) ||
+    process.platform === "win32" && existsSync(join(process.env.LOCALAPPDATA ?? "", "Programs", "cursor", "Cursor.exe")) ||
+    process.platform === "darwin" && existsSync("/Applications/Cursor.app");
+}
+
+export function opencodePresent(place) { return existsSync(join(homeOf(place), ".config", "opencode")); }
+
+export function installCursor(place) {
+  const home = homeOf(place);
+  const target = safePath(home, cursorTarget(place));
+  if (!existsSync(place.pack)) throw new Error("Install the Pack before connecting Cursor.");
+  if (existsSync(target) && !managed(target, place)) throw new Error(`A Cursor plugin already exists at ${target}. It was not installed by Marvelous UI.`);
+  const parent = dirname(target);
+  mkdirSync(parent, { recursive: true });
+  const stage = safePath(home, join(parent, `.marvelous-ui-stage-${process.pid}-${Math.random().toString(16).slice(2)}`));
+  const backup = safePath(home, join(parent, `.marvelous-ui-backup-${process.pid}`));
+  if (existsSync(backup)) throw new Error("A previous Cursor plugin update is still being recovered.");
+  try {
+    cpSync(place.pack, stage, { recursive: true });
+    writeMarker(stage, place, { pluginHash: digest(readFileSync(join(stage, "plugin.json"))) });
+    if (existsSync(target)) renameSync(target, backup);
+    try { renameSync(stage, target); }
+    catch (error) { if (existsSync(backup)) renameSync(backup, target); throw error; }
+    if (existsSync(backup)) rmSync(backup, { recursive: true, force: true });
+  } finally { if (existsSync(stage)) rmSync(stage, { recursive: true, force: true }); }
+}
+
+export function removeCursor(place) {
+  const target = safePath(homeOf(place), cursorTarget(place));
+  if (!existsSync(target)) return;
+  if (!managed(target, place)) throw new Error(`Refusing to remove an unmanaged Cursor plugin: ${target}`);
+  rmSync(target, { recursive: true, force: true });
+}
+
+function configPath(place) {
+  const base = join(homeOf(place), ".config", "opencode");
+  const json = join(base, "opencode.json");
+  const jsoncPath = join(base, "opencode.jsonc");
+  if (existsSync(json) && existsSync(jsoncPath)) throw new Error("Both OpenCode config files exist. Choose one before connecting Marvelous UI.");
+  return existsSync(jsoncPath) ? jsoncPath : json;
+}
+
+function readConfig(file) {
+  const source = existsSync(file) ? readFileSync(file, "utf8") : "{}\n";
+  const errors = [];
+  const value = parse(source, errors, { allowTrailingComma: true });
+  if (errors.length || !value || typeof value !== "object" || Array.isArray(value)) throw new Error(`Invalid OpenCode config: ${file}`);
+  return { source, value };
+}
+
+function entryPath(config) {
+  return config.mcp?.servers && typeof config.mcp.servers === "object" && !Array.isArray(config.mcp.servers)
+    ? ["mcp", "servers", "marvelous-ui"] : ["mcp", "marvelous-ui"];
+}
+
+function atPath(config, path) { return path.reduce((value, part) => value?.[part], config); }
+
+function writeConfig(file, source, path, value) {
+  const updated = applyEdits(source, modify(source, path, value, { formattingOptions: { insertSpaces: true, tabSize: 2, eol: "\n" } }));
+  const temporary = `${file}.${process.pid}.tmp`;
+  try { writeFileSync(temporary, updated); renameSync(temporary, file); }
+  finally { if (existsSync(temporary)) rmSync(temporary, { force: true }); }
+}
+
+export function installOpenCode(place) {
+  const home = homeOf(place);
+  const target = safePath(home, opencodeTarget(place));
+  const file = safePath(home, configPath(place));
+  if (!existsSync(place.pack)) throw new Error("Install the Pack before connecting OpenCode.");
+  const priorManaged = existsSync(target) && managed(target, place);
+  if (existsSync(target) && !priorManaged) throw new Error(`An unmanaged OpenCode skill already exists at ${target}.`);
+  const { source, value } = readConfig(file);
+  const path = entryPath(value);
+  const existing = atPath(value, path);
+  if (existing && !priorManaged) throw new Error("An unmanaged OpenCode MCP entry named marvelous-ui already exists.");
+  if (existing && existing.command?.[1] !== join(place.pack, "mcp", "server.mjs")) throw new Error("The OpenCode MCP entry was customized. It was left unchanged.");
+  const entry = path.length === 3
+    ? { type: "local", command: ["node", join(place.pack, "mcp", "server.mjs")], disabled: false }
+    : { type: "local", command: ["node", join(place.pack, "mcp", "server.mjs")], enabled: true };
+  const sourceSkill = join(place.pack, "skills", "marvelous-ui", "SKILL.md");
+  const original = readFileSync(sourceSkill, "utf8");
+  const replacement = `**Pack root**: \`${place.pack.replaceAll("\\", "/")}\`.`;
+  const skill = original.replace("**Pack root**: the folder two levels above this file.", replacement);
+  if (skill === original) throw new Error("The OpenCode skill could not locate its Pack root instruction.");
+  mkdirSync(target, { recursive: true });
+  const priorSkill = priorManaged ? readFileSync(join(target, "SKILL.md")) : null;
+  const priorMarker = priorManaged ? readFileSync(markerAt(target)) : null;
+  try {
+    writeFileSync(join(target, "SKILL.md"), skill);
+    writeMarker(target, place, { config: file, skillHash: digest(skill) });
+    mkdirSync(dirname(file), { recursive: true });
+    writeConfig(file, source, path, entry);
+  } catch (error) {
+    if (priorSkill) {
+      writeFileSync(join(target, "SKILL.md"), priorSkill);
+      writeFileSync(markerAt(target), priorMarker);
+    } else rmSync(target, { recursive: true, force: true });
+    throw error;
+  }
+}
+
+export function removeOpenCode(place) {
+  const home = homeOf(place);
+  const target = safePath(home, opencodeTarget(place));
+  if (!existsSync(target)) return;
+  if (!managed(target, place)) throw new Error(`Refusing to remove an unmanaged OpenCode skill: ${target}`);
+  const marker = JSON.parse(readFileSync(markerAt(target), "utf8"));
+  const file = safePath(home, marker.config);
+  if (existsSync(file)) {
+    const { source, value } = readConfig(file);
+    const path = entryPath(value);
+    const existing = atPath(value, path);
+    if (existing && existing.command?.[1] !== join(place.pack, "mcp", "server.mjs")) throw new Error("The OpenCode MCP entry was customized. It was left unchanged.");
+    if (existing) writeConfig(file, source, path, undefined);
+  }
+  rmSync(target, { recursive: true, force: true });
+}

package/lib/agents.mjs

@@ -0,0 +1,104 @@
+import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { cursorPresent, installCursor, installOpenCode, opencodePresent, removeCursor, removeOpenCode } from "./agent-targets.mjs";
+import { runCommand } from "./command.mjs";
+
+export const SUPPORTED = ["codex", "claude", "cursor", "opencode"];
+export const LABELS = { codex: "Codex", claude: "Claude Code", cursor: "Cursor", opencode: "OpenCode" };
+
+export function parseUserAgents(value, available = []) {
+  const names = [...new Set(value.toLowerCase().split(",").map((name) => name.trim()).filter(Boolean))];
+  if (names.length === 1 && names[0] === "none") return [];
+  if (names.length === 1 && names[0] === "all") return [...available];
+  const chosen = names.map((name) => /^\d+$/.test(name) ? SUPPORTED[Number(name) - 1] ?? name : name);
+  const unsupported = chosen.filter((name) => !SUPPORTED.includes(name));
+  if (unsupported.length) throw new Error(`Unsupported agent choice: ${unsupported.join(", ")}. Choose codex, claude, cursor, opencode, all, or none.`);
+  if (!chosen.length) throw new Error("Choose an agent, all, or none.");
+  return [...new Set(chosen)];
+}
+
+export function readUserAgents(place) {
+  const file = join(place.base, "agents.json");
+  if (!existsSync(file)) return [];
+  const state = JSON.parse(readFileSync(file, "utf8"));
+  if (state.schema !== 1 || !Array.isArray(state.clients) || state.clients.some((name) => !SUPPORTED.includes(name))) {
+    throw new Error(`Unsupported Marvelous UI agent state: ${file}`);
+  }
+  return state.clients;
+}
+
+function runAgent(command, args, runner, phase = "setup") {
+  try { return runner(command, args, { encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] }); }
+  catch (error) {
+    if (phase === "check" && error.code === "ENOENT") throw new Error(`${LABELS[command]} CLI was not found. Install its command-line tool or choose another agent.`);
+    const detail = String(error.stderr ?? error.message ?? "").trim().split(/\r?\n/).at(-1);
+    throw new Error(`${LABELS[command]} ${phase} failed${detail ? `: ${detail}` : "."}${phase === "check" ? "" : " The Pack remains installed. Rerun init to retry agent setup."}`);
+  }
+}
+
+export function detectUserAgents(place, runner = runCommand) {
+  return SUPPORTED.filter((client) => {
+    if (client === "cursor") return cursorPresent(place);
+    if (client === "opencode" && opencodePresent(place)) return true;
+    try { runAgent(client, ["--version"], runner, "check"); return true; }
+    catch { return false; }
+  });
+}
+
+export function checkUserAgents(clients, runner = runCommand) {
+  for (const client of clients.filter((name) => name === "codex" || name === "claude")) runAgent(client, ["--version"], runner, "check");
+}
+
+function register(place, client, prior, runner) {
+  if (client === "codex") {
+    runAgent("codex", ["plugin", "marketplace", "add", place.pack], runner);
+    runAgent("codex", ["plugin", "add", "marvelous-ui@marvelous-ui"], runner);
+  } else if (client === "claude") {
+    if (prior.includes("claude")) {
+      runAgent("claude", ["plugin", "marketplace", "update", "marvelous-ui"], runner);
+      runAgent("claude", ["plugin", "update", "marvelous-ui@marvelous-ui"], runner);
+    } else {
+      runAgent("claude", ["plugin", "marketplace", "add", place.pack], runner);
+      runAgent("claude", ["plugin", "install", "marvelous-ui@marvelous-ui", "--scope", "user"], runner);
+    }
+  } else if (client === "cursor") installCursor(place);
+  else installOpenCode(place);
+}
+
+function unregister(place, client, runner) {
+  if (client === "codex") {
+    runAgent("codex", ["plugin", "remove", "marvelous-ui@marvelous-ui"], runner);
+    runAgent("codex", ["plugin", "marketplace", "remove", "marvelous-ui"], runner);
+  } else if (client === "claude") {
+    runAgent("claude", ["plugin", "uninstall", "marvelous-ui@marvelous-ui", "--scope", "user"], runner);
+    runAgent("claude", ["plugin", "marketplace", "remove", "marvelous-ui"], runner);
+  } else if (client === "cursor") removeCursor(place);
+  else removeOpenCode(place);
+}
+
+export function configureUserAgents(place, clients, runner = runCommand) {
+  let connected = readUserAgents(place);
+  for (const client of clients) {
+    register(place, client, connected, runner);
+    if (!connected.includes(client)) {
+      connected = [...connected, client];
+      saveUserAgents(place, connected);
+    }
+  }
+  for (const client of connected.filter((name) => !clients.includes(name))) {
+    unregister(place, client, runner);
+    connected = connected.filter((name) => name !== client);
+    saveUserAgents(place, connected);
+  }
+  return clients.map((name) => LABELS[name]);
+}
+
+export function disconnectUserAgents(place, runner = runCommand) { configureUserAgents(place, [], runner); }
+
+function saveUserAgents(place, clients) {
+  const file = join(place.base, "agents.json");
+  mkdirSync(place.base, { recursive: true });
+  const temporary = `${file}.${process.pid}.tmp`;
+  writeFileSync(temporary, JSON.stringify({ schema: 1, clients }, null, 2) + "\n", { mode: 0o600 });
+  renameSync(temporary, file);
+}

package/lib/command.mjs

@@ -0,0 +1,17 @@
+import spawn from "cross-spawn";
+
+/** Run agent CLIs, including npm .cmd shims on Windows, without building a shell command. */
+export function runCommand(command, args, options = {}) {
+  const result = spawn.sync(command, args, {
+    encoding: "utf8",
+    stdio: ["ignore", "pipe", "pipe"],
+    ...options,
+  });
+  if (result.error) throw result.error;
+  if (result.status !== 0) {
+    const error = new Error(`${command} exited with code ${result.status ?? "unknown"}`);
+    error.stderr = result.stderr;
+    throw error;
+  }
+  return result.stdout;
+}

package/lib/installer.mjs

@@ -1,4 +1,4 @@
-import { execFileSync } from "node:child_process";
+import { execFileSync, execSync } from "node:child_process";
 import { existsSync, lstatSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { homedir, tmpdir } from "node:os";
 import { dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
@@ -27,6 +27,22 @@ export function readState(file) {
   return state;
 }
 
+/** Remove only CLI-owned Pack data. Copied project files and Pro ZIPs remain by default. */
+export function uninstallPack(place, { purgeArchives = false } = {}) {
+  const base = resolve(place.base);
+  if (existsSync(base) && lstatSync(base).isSymbolicLink()) throw new Error("The Marvelous UI installation directory cannot be a symbolic link.");
+  const targets = [place.pack, join(place.base, "versions")];
+  if (purgeArchives) targets.push(place.archives);
+  for (const target of targets) {
+    const absolute = resolve(target);
+    if (!absolute.startsWith(base + sep)) throw new Error(`Refusing to remove a path outside the installation: ${absolute}`);
+    if (existsSync(absolute) && lstatSync(absolute).isSymbolicLink()) throw new Error(`Refusing to remove a symbolic link: ${absolute}`);
+  }
+  for (const target of targets) if (existsSync(target)) rmSync(target, { recursive: true, force: true });
+  for (const file of [place.state, join(place.base, "agents.json")]) if (existsSync(file)) rmSync(file);
+  return { archivesKept: !purgeArchives && existsSync(place.archives), projectFilesKept: existsSync(place.components) };
+}
+
 function saveState(file, state) {
   mkdirSync(dirname(file), { recursive: true });
   const tmp = `${file}.${process.pid}.tmp`;
@@ -193,9 +209,15 @@ export function installPack(bytes, edition, meta, place, { installDependencies =
     validPack(stage, edition, meta.version);
     if (edition === "pro") saveProArchive(bytes, meta, place);
     if (installDependencies) {
-      const npmArgs = ["ci", "--omit=dev", "--ignore-scripts", "--no-audit"];
-      if (process.env.npm_execpath?.endsWith(".js")) execFileSync(process.execPath, [process.env.npm_execpath, ...npmArgs], { cwd: stage, stdio: "inherit" });
-      else execFileSync("npm", npmArgs, { cwd: stage, stdio: "inherit", shell: process.platform === "win32" });
+      const npmArgs = ["ci", "--omit=dev", "--ignore-scripts", "--no-audit", "--no-fund", "--silent"];
+      try {
+        if (process.env.npm_execpath?.endsWith(".js")) execFileSync(process.execPath, [process.env.npm_execpath, ...npmArgs], { cwd: stage, stdio: ["ignore", "pipe", "pipe"] });
+        else if (process.platform === "win32") execSync(`npm ${npmArgs.join(" ")}`, { cwd: stage, stdio: ["ignore", "pipe", "pipe"] });
+        else execFileSync("npm", npmArgs, { cwd: stage, stdio: ["ignore", "pipe", "pipe"] });
+      } catch (error) {
+        const detail = String(error.stderr ?? error.message ?? "").trim().split(/\r?\n/).at(-1);
+        throw new Error(`The Pack dependencies could not be installed${detail ? `: ${detail}` : "."}`);
+      }
     }
     beforeCommit?.(stage);
     if (existsSync(backup)) throw new Error("A previous installation is still being recovered.");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "marvelous-ui-library",
-  "version": "1.0.1",
+  "version": "1.0.3",
   "description": "Install and update the Marvelous UI component Pack for coding agents",
   "type": "module",
   "license": "MIT",
@@ -22,5 +22,9 @@
     "type": "git",
     "url": "git+https://github.com/baz-fkr/marvelous-ui-library.git",
     "directory": "cli"
+  },
+  "dependencies": {
+    "cross-spawn": "7.0.6",
+    "jsonc-parser": "3.3.1"
   }
 }