mewkit 1.7.1 → 1.8.1

package/dist/core/compute-checksums.d.ts

@@ -0,0 +1,25 @@
+/** File layer determines update behavior */
+export type FileLayer = "core" | "skill" | "user";
+export interface ManifestEntry {
+    sha256: string;
+    layer: FileLayer;
+}
+export interface Manifest {
+    version: string;
+    generatedAt: string;
+    checksums: Record<string, ManifestEntry>;
+}
+/** Compute SHA-256 hash of a file */
+export declare function hashFile(filePath: string): string;
+/** Determine the layer of a file based on its path relative to the project root */
+export declare function classifyLayer(relativePath: string): FileLayer;
+/**
+ * Build a manifest by scanning all files in the .claude/ directory.
+ * All MeowKit files live inside .claude/ — no root-level scanning.
+ */
+export declare function buildManifest(claudeDir: string): Manifest;
+/** Write manifest to disk */
+export declare function writeManifest(targetDir: string, manifest: Manifest): void;
+/** Read existing manifest from disk. Returns null if not found or invalid. */
+export declare function readManifest(targetDir: string): Manifest | null;
+//# sourceMappingURL=compute-checksums.d.ts.map

package/dist/core/compute-checksums.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compute-checksums.d.ts","sourceRoot":"","sources":["../../src/core/compute-checksums.ts"],"names":[],"mappings":"AAIA,4CAA4C;AAC5C,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;AAElD,MAAM,WAAW,aAAa;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,SAAS,CAAC;CACjB;AAED,MAAM,WAAW,QAAQ;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;CACzC;AAsBD,qCAAqC;AACrC,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAGjD;AAED,mFAAmF;AACnF,wBAAgB,aAAa,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAe7D;AA0BD;;;GAGG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,QAAQ,CAkBzD;AAED,6BAA6B;AAC7B,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAGzE;AAED,8EAA8E;AAC9E,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAQ/D"}

package/dist/core/compute-checksums.js

@@ -0,0 +1,105 @@
+import { createHash } from "node:crypto";
+import { readFileSync, writeFileSync, existsSync, readdirSync, statSync } from "node:fs";
+import { join, relative } from "node:path";
+const MANIFEST_FILENAME = "meowkit.manifest.json";
+/** Directories classified as "core" — overwritten on update if unchanged */
+const CORE_DIRS = new Set(["agents", "commands", "hooks", "modes", "rules", "scripts"]);
+/** Files classified as "user" — never overwritten */
+const USER_FILES = new Set([
+    "CLAUDE.md",
+    "meowkit.config.json",
+    ".env",
+    "env.example",
+    "mcp.json.example",
+    "mcp.json",
+    "gitignore.meowkit",
+    "meowkit.manifest.json",
+]);
+/** Directories classified as "user" — never overwritten */
+const USER_DIRS = new Set(["memory", "logs"]);
+/** Compute SHA-256 hash of a file */
+export function hashFile(filePath) {
+    const content = readFileSync(filePath);
+    return createHash("sha256").update(content).digest("hex");
+}
+/** Determine the layer of a file based on its path relative to the project root */
+export function classifyLayer(relativePath) {
+    // User-level files at project root
+    const basename = relativePath.split("/").pop() ?? "";
+    if (USER_FILES.has(basename) || USER_FILES.has(relativePath))
+        return "user";
+    // Check path segments for directory-based classification
+    const parts = relativePath.split("/");
+    const topDir = parts[0];
+    if (USER_DIRS.has(topDir))
+        return "user";
+    if (topDir === "skills")
+        return "skill";
+    if (CORE_DIRS.has(topDir))
+        return "core";
+    if (topDir === "settings.json")
+        return "core";
+    return "user";
+}
+/**
+ * Recursively collect all files in a directory, returning paths relative to baseDir.
+ * Skips __pycache__, node_modules, .DS_Store, .meowkit.manifest.json.
+ */
+function collectFiles(dir, baseDir) {
+    const files = [];
+    if (!existsSync(dir))
+        return files;
+    const SKIP = new Set(["__pycache__", "node_modules", ".DS_Store", MANIFEST_FILENAME]);
+    const entries = readdirSync(dir);
+    for (const entry of entries) {
+        if (SKIP.has(entry))
+            continue;
+        const fullPath = join(dir, entry);
+        const stat = statSync(fullPath);
+        if (stat.isDirectory()) {
+            files.push(...collectFiles(fullPath, baseDir));
+        }
+        else {
+            files.push(relative(baseDir, fullPath));
+        }
+    }
+    return files;
+}
+/**
+ * Build a manifest by scanning all files in the .claude/ directory.
+ * All MeowKit files live inside .claude/ — no root-level scanning.
+ */
+export function buildManifest(claudeDir) {
+    const checksums = {};
+    const files = collectFiles(claudeDir, claudeDir);
+    for (const relPath of files) {
+        const fullPath = join(claudeDir, relPath);
+        checksums[relPath] = {
+            sha256: hashFile(fullPath),
+            layer: classifyLayer(relPath),
+        };
+    }
+    return {
+        version: "0.1.0",
+        generatedAt: new Date().toISOString(),
+        checksums,
+    };
+}
+/** Write manifest to disk */
+export function writeManifest(targetDir, manifest) {
+    const path = join(targetDir, MANIFEST_FILENAME);
+    writeFileSync(path, JSON.stringify(manifest, null, 2) + "\n", "utf-8");
+}
+/** Read existing manifest from disk. Returns null if not found or invalid. */
+export function readManifest(targetDir) {
+    const path = join(targetDir, MANIFEST_FILENAME);
+    if (!existsSync(path))
+        return null;
+    try {
+        return JSON.parse(readFileSync(path, "utf-8"));
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=compute-checksums.js.map

package/dist/core/compute-checksums.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compute-checksums.js","sourceRoot":"","sources":["../../src/core/compute-checksums.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAgB3C,MAAM,iBAAiB,GAAG,uBAAuB,CAAC;AAElD,4EAA4E;AAC5E,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;AAExF,qDAAqD;AACrD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IAC1B,WAAW;IACX,qBAAqB;IACrB,MAAM;IACN,aAAa;IACb,kBAAkB;IAClB,UAAU;IACV,mBAAmB;IACnB,uBAAuB;CACvB,CAAC,CAAC;AAEH,2DAA2D;AAC3D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AAE9C,qCAAqC;AACrC,MAAM,UAAU,QAAQ,CAAC,QAAgB;IACxC,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACvC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC3D,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,aAAa,CAAC,YAAoB;IACjD,mCAAmC;IACnC,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IACrD,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC;QAAE,OAAO,MAAM,CAAC;IAE5E,yDAAyD;IACzD,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAExB,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACzC,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IACxC,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACzC,IAAI,MAAM,KAAK,eAAe;QAAE,OAAO,MAAM,CAAC;IAE9C,OAAO,MAAM,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,GAAW,EAAE,OAAe;IACjD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAEnC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,cAAc,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAEtF,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAChC,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;QAChD,CAAC;aAAM,CAAC;YACP,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;QACzC,CAAC;IACF,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,SAAiB;IAC9C,MAAM,SAAS,GAAkC,EAAE,CAAC;IAEpD,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAEjD,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC1C,SAAS,CAAC,OAAO,CAAC,GAAG;YACpB,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC;YAC1B,KAAK,EAAE,aAAa,CAAC,OAAO,CAAC;SAC7B,CAAC;IACH,CAAC;IAED,OAAO;QACN,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,SAAS;KACT,CAAC;AACH,CAAC;AAED,6BAA6B;AAC7B,MAAM,UAAU,aAAa,CAAC,SAAiB,EAAE,QAAkB;IAClE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IAChD,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;AACxE,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,YAAY,CAAC,SAAiB;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IAChD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAa,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC"}

package/dist/core/core-logger.d.ts

@@ -0,0 +1,9 @@
+export declare function setVerbose(v: boolean): void;
+export declare function info(msg: string): void;
+export declare function success(msg: string): void;
+export declare function warn(msg: string): void;
+export declare function error(msg: string): void;
+export declare function debug(msg: string): void;
+/** No-op: structured data is not used in mewkit's console-based output */
+export declare function setData(_key: string, _value: unknown): void;
+//# sourceMappingURL=core-logger.d.ts.map

package/dist/core/core-logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"core-logger.d.ts","sourceRoot":"","sources":["../../src/core/core-logger.ts"],"names":[],"mappings":"AAQA,wBAAgB,UAAU,CAAC,CAAC,EAAE,OAAO,GAAG,IAAI,CAE3C;AAED,wBAAgB,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAEtC;AAED,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAEzC;AAED,wBAAgB,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAEtC;AAED,wBAAgB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAEvC;AAED,wBAAgB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAIvC;AAED,0EAA0E;AAC1E,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,IAAI,CAE3D"}

package/dist/core/core-logger.js

@@ -0,0 +1,31 @@
+/**
+ * Thin logger shim for core modules.
+ * Maps the logger API to console calls — mewkit uses console directly.
+ */
+import pc from "picocolors";
+let verbose = false;
+export function setVerbose(v) {
+    verbose = v;
+}
+export function info(msg) {
+    console.log(msg);
+}
+export function success(msg) {
+    console.log(`${pc.green("✓")} ${msg}`);
+}
+export function warn(msg) {
+    console.warn(pc.yellow(`⚠ ${msg}`));
+}
+export function error(msg) {
+    console.error(pc.red(`✗ ${msg}`));
+}
+export function debug(msg) {
+    if (verbose) {
+        console.log(pc.dim(`[debug] ${msg}`));
+    }
+}
+/** No-op: structured data is not used in mewkit's console-based output */
+export function setData(_key, _value) {
+    // No-op in mewkit context
+}
+//# sourceMappingURL=core-logger.js.map

package/dist/core/core-logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core-logger.js","sourceRoot":"","sources":["../../src/core/core-logger.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,MAAM,YAAY,CAAC;AAE5B,IAAI,OAAO,GAAG,KAAK,CAAC;AAEpB,MAAM,UAAU,UAAU,CAAC,CAAU;IACpC,OAAO,GAAG,CAAC,CAAC;AACb,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,GAAW;IAC/B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,GAAW;IAClC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,GAAW;IAC/B,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,GAAW;IAChC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,GAAW;IAChC,IAAI,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC,CAAC;IACvC,CAAC;AACF,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,MAAe;IACpD,0BAA0B;AAC3B,CAAC"}

package/dist/core/dependency-installer.d.ts

@@ -0,0 +1,29 @@
+/** Dependency installer — venv creation, pip install, package verification */
+import type { SkillsDependency } from "./skills-dependencies.js";
+export interface InstallResult {
+    name: string;
+    success: boolean;
+    error?: string;
+}
+export interface PackageVerification {
+    name: string;
+    installed: boolean;
+}
+/** Check if a command exists in PATH. Cross-platform: `where` on Windows, `which` on Unix. */
+export declare function commandAvailable(cmd: string): boolean;
+/** Find python command. Returns "python3", "python", "py" (Windows), or null. */
+export declare function findPython(): string | null;
+/** Get platform-correct pip binary path inside the venv */
+export declare function getPipPath(projectDir: string): string;
+/** Get platform-correct python binary path inside the venv */
+export declare function getVenvPythonPath(projectDir: string): string;
+/** Ensure the skills venv exists. Creates it if missing. */
+export declare function ensureVenv(projectDir: string): {
+    venvDir: string;
+    created: boolean;
+};
+/** Install pip packages sequentially into the venv */
+export declare function installPipPackages(projectDir: string, packages: readonly SkillsDependency[]): Promise<InstallResult[]>;
+/** Verify which packages are installed in the venv */
+export declare function verifyPackages(projectDir: string, packages: readonly SkillsDependency[]): PackageVerification[];
+//# sourceMappingURL=dependency-installer.d.ts.map

package/dist/core/dependency-installer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dependency-installer.d.ts","sourceRoot":"","sources":["../../src/core/dependency-installer.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAM9E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAGjE,MAAM,WAAW,aAAa;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,mBAAmB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,CAAC;CACnB;AAaD,8FAA8F;AAC9F,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAQrD;AAED,iFAAiF;AACjF,wBAAgB,UAAU,IAAI,MAAM,GAAG,IAAI,CAS1C;AAED,2DAA2D;AAC3D,wBAAgB,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAKrD;AAED,8DAA8D;AAC9D,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAM5D;AAED,4DAA4D;AAC5D,wBAAgB,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAWpF;AAoCD,sDAAsD;AACtD,wBAAsB,kBAAkB,CACvC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,SAAS,gBAAgB,EAAE,GACnC,OAAO,CAAC,aAAa,EAAE,CAAC,CAY1B;AASD,sDAAsD;AACtD,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,gBAAgB,EAAE,GAAG,mBAAmB,EAAE,CA0B/G"}

package/dist/core/dependency-installer.js

@@ -0,0 +1,150 @@
+/** Dependency installer — venv creation, pip install, package verification */
+import { existsSync } from "node:fs";
+import { join, resolve } from "node:path";
+import { execFileSync, spawn } from "node:child_process";
+import pc from "picocolors";
+import { validatePackageName, getBasePackageName } from "./skills-dependencies.js";
+const VENV_RELATIVE = join(".claude", "skills", ".venv");
+const PIP_TIMEOUT_MS = 120_000;
+/** Validate a path stays inside the .claude directory */
+function validateInsideClaude(projectDir, targetPath) {
+    const claudeDir = resolve(projectDir, ".claude");
+    if (!resolve(targetPath).startsWith(claudeDir)) {
+        throw new Error(`Path escapes .claude directory: ${targetPath}`);
+    }
+}
+/** Check if a command exists in PATH. Cross-platform: `where` on Windows, `which` on Unix. */
+export function commandAvailable(cmd) {
+    const whichCmd = process.platform === "win32" ? "where" : "which";
+    try {
+        execFileSync(whichCmd, [cmd], { stdio: "pipe" });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/** Find python command. Returns "python3", "python", "py" (Windows), or null. */
+export function findPython() {
+    if (process.platform === "win32") {
+        if (commandAvailable("py"))
+            return "py";
+        if (commandAvailable("python"))
+            return "python";
+    }
+    else {
+        if (commandAvailable("python3"))
+            return "python3";
+        if (commandAvailable("python"))
+            return "python";
+    }
+    return null;
+}
+/** Get platform-correct pip binary path inside the venv */
+export function getPipPath(projectDir) {
+    const venvDir = join(projectDir, VENV_RELATIVE);
+    const pipPath = process.platform === "win32" ? join(venvDir, "Scripts", "pip.exe") : join(venvDir, "bin", "pip");
+    validateInsideClaude(projectDir, pipPath);
+    return pipPath;
+}
+/** Get platform-correct python binary path inside the venv */
+export function getVenvPythonPath(projectDir) {
+    const venvDir = join(projectDir, VENV_RELATIVE);
+    const pythonPath = process.platform === "win32" ? join(venvDir, "Scripts", "python.exe") : join(venvDir, "bin", "python3");
+    validateInsideClaude(projectDir, pythonPath);
+    return pythonPath;
+}
+/** Ensure the skills venv exists. Creates it if missing. */
+export function ensureVenv(projectDir) {
+    const venvDir = join(projectDir, VENV_RELATIVE);
+    validateInsideClaude(projectDir, venvDir);
+    if (existsSync(venvDir))
+        return { venvDir, created: false };
+    const python = findPython();
+    if (!python)
+        throw new Error("python3 not found in PATH. Install Python 3.9+ first.");
+    console.log(pc.dim("  Creating Python venv..."));
+    execFileSync(python, ["-m", "venv", venvDir], { stdio: "pipe" });
+    return { venvDir, created: true };
+}
+/** Install a single pip package with timeout */
+function installOnePackage(pipPath, packageName) {
+    if (!validatePackageName(packageName)) {
+        return Promise.resolve({ name: packageName, success: false, error: "Invalid package name" });
+    }
+    return new Promise((done) => {
+        const proc = spawn(pipPath, ["install", packageName], { stdio: ["ignore", "pipe", "pipe"] });
+        let stderr = "";
+        const timer = setTimeout(() => {
+            proc.kill("SIGTERM");
+            stderr += "\nTimeout: exceeded 120s";
+        }, PIP_TIMEOUT_MS);
+        proc.stderr.on("data", (chunk) => {
+            stderr += chunk.toString();
+        });
+        proc.stdout.on("data", (chunk) => {
+            process.stdout.write(pc.dim(`    ${chunk.toString().trim()}\n`));
+        });
+        proc.on("close", (code) => {
+            clearTimeout(timer);
+            done(code === 0
+                ? { name: packageName, success: true }
+                : { name: packageName, success: false, error: stderr.trim().split("\n").pop() || "Unknown error" });
+        });
+        proc.on("error", (err) => {
+            clearTimeout(timer);
+            done({ name: packageName, success: false, error: err.message });
+        });
+    });
+}
+/** Install pip packages sequentially into the venv */
+export async function installPipPackages(projectDir, packages) {
+    const pipPath = getPipPath(projectDir);
+    if (!existsSync(pipPath))
+        throw new Error(`pip not found at ${pipPath}. Run 'mewkit setup --only=venv' first.`);
+    const results = [];
+    for (const pkg of packages) {
+        console.log(`  ${pc.cyan(">")} Installing ${pc.bold(pkg.name)}...`);
+        const result = await installOnePackage(pipPath, pkg.name);
+        results.push(result);
+        console.log(result.success ? `  ${pc.green("✓")} ${pkg.name}` : `  ${pc.red("✗")} ${pkg.name}: ${result.error}`);
+    }
+    return results;
+}
+/** Map pip package names to Python import names */
+const IMPORT_NAME_MAP = {
+    pillow: "PIL",
+    "python-dotenv": "dotenv",
+    "google-genai": "google.genai",
+};
+/** Verify which packages are installed in the venv */
+export function verifyPackages(projectDir, packages) {
+    const pythonPath = getVenvPythonPath(projectDir);
+    if (!existsSync(pythonPath))
+        return packages.map((p) => ({ name: p.name, installed: false }));
+    const pipPath = getPipPath(projectDir);
+    return packages.map((pkg) => {
+        const basePkgName = getBasePackageName(pkg.name);
+        const importName = IMPORT_NAME_MAP[basePkgName];
+        if (importName) {
+            if (!/^[a-zA-Z0-9][a-zA-Z0-9._]*$/.test(importName))
+                return { name: pkg.name, installed: false };
+            try {
+                execFileSync(pythonPath, ["-c", `import ${importName}`], { stdio: "pipe" });
+                return { name: pkg.name, installed: true };
+            }
+            catch {
+                return { name: pkg.name, installed: false };
+            }
+        }
+        // Unknown package — pip show fallback
+        try {
+            execFileSync(pipPath, ["show", basePkgName], { stdio: "pipe" });
+            return { name: pkg.name, installed: true };
+        }
+        catch {
+            return { name: pkg.name, installed: false };
+        }
+    });
+}
+//# sourceMappingURL=dependency-installer.js.map

package/dist/core/dependency-installer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dependency-installer.js","sourceRoot":"","sources":["../../src/core/dependency-installer.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAE9E,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,MAAM,YAAY,CAAC;AAE5B,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAanF,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AACzD,MAAM,cAAc,GAAG,OAAO,CAAC;AAE/B,yDAAyD;AACzD,SAAS,oBAAoB,CAAC,UAAkB,EAAE,UAAkB;IACnE,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IACjD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,mCAAmC,UAAU,EAAE,CAAC,CAAC;IAClE,CAAC;AACF,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC3C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IAClE,IAAI,CAAC;QACJ,YAAY,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,UAAU;IACzB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAClC,IAAI,gBAAgB,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACxC,IAAI,gBAAgB,CAAC,QAAQ,CAAC;YAAE,OAAO,QAAQ,CAAC;IACjD,CAAC;SAAM,CAAC;QACP,IAAI,gBAAgB,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAClD,IAAI,gBAAgB,CAAC,QAAQ,CAAC;YAAE,OAAO,QAAQ,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,UAAU,CAAC,UAAkB;IAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACjH,oBAAoB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC1C,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,iBAAiB,CAAC,UAAkB;IACnD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IAChD,MAAM,UAAU,GACf,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IACzG,oBAAoB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAC7C,OAAO,UAAU,CAAC;AACnB,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,UAAU,CAAC,UAAkB;IAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IAChD,oBAAoB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC1C,IAAI,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAE5D,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAEtF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,CAAC;IACjD,YAAY,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACjE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACnC,CAAC;AAED,gDAAgD;AAChD,SAAS,iBAAiB,CAAC,OAAe,EAAE,WAAmB;IAC9D,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,EAAE,CAAC;QACvC,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,IAAI,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7F,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC7B,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACrB,MAAM,IAAI,0BAA0B,CAAC;QACtC,CAAC,EAAE,cAAc,CAAC,CAAC;QAEnB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CACH,IAAI,KAAK,CAAC;gBACT,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE;gBACtC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,eAAe,EAAE,CACnG,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,sDAAsD;AACtD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,UAAkB,EAClB,QAAqC;IAErC,MAAM,OAAO,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACvC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,yCAAyC,CAAC,CAAC;IAEhH,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1D,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAClH,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,mDAAmD;AACnD,MAAM,eAAe,GAA2B;IAC/C,MAAM,EAAE,KAAK;IACb,eAAe,EAAE,QAAQ;IACzB,cAAc,EAAE,cAAc;CAC9B,CAAC;AAEF,sDAAsD;AACtD,MAAM,UAAU,cAAc,CAAC,UAAkB,EAAE,QAAqC;IACvF,MAAM,UAAU,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IACjD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAC9F,MAAM,OAAO,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IAEvC,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAC3B,MAAM,WAAW,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;QAEhD,IAAI,UAAU,EAAE,CAAC;YAChB,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,UAAU,CAAC;gBAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YACjG,IAAI,CAAC;gBACJ,YAAY,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,UAAU,UAAU,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC5E,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;YAC5C,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YAC7C,CAAC;QACF,CAAC;QACD,sCAAsC;QACtC,IAAI,CAAC;YACJ,YAAY,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAChE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QAC7C,CAAC;IACF,CAAC,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/github-releases.d.ts

@@ -0,0 +1,32 @@
+export interface ReleaseInfo {
+    tag: string;
+    version: string;
+    isBeta: boolean;
+    downloadUrl: string;
+    publishedAt: string;
+}
+/**
+ * Fetch available releases from GitHub API.
+ * Returns stable and beta releases, sorted by newest first.
+ */
+export declare function fetchReleases(): Promise<ReleaseInfo[]>;
+/**
+ * Get the latest stable release.
+ */
+export declare function getLatestStable(): Promise<ReleaseInfo | null>;
+/**
+ * Get the latest beta release.
+ */
+export declare function getLatestBeta(): Promise<ReleaseInfo | null>;
+/**
+ * Download a release zip and extract to a temp directory.
+ * Returns the path to the extracted directory.
+ */
+export declare function downloadRelease(release: ReleaseInfo): Promise<string>;
+/**
+ * Clean up a downloaded release temp directory.
+ * Uses fs.rmSync (Node 14.14+) instead of `rm -rf` so it works on Windows,
+ * where cmd.exe has no `rm -rf` equivalent.
+ */
+export declare function cleanupDownload(tempDir: string): void;
+//# sourceMappingURL=github-releases.d.ts.map

package/dist/core/github-releases.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-releases.d.ts","sourceRoot":"","sources":["../../src/core/github-releases.ts"],"names":[],"mappings":"AAuBA,MAAM,WAAW,WAAW;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,wBAAsB,aAAa,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CA6B5D;AAED;;GAEG;AACH,wBAAsB,eAAe,IAAI,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAGnE;AAED;;GAEG;AACH,wBAAsB,aAAa,IAAI,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAGjE;AAED;;;GAGG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAiC3E;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAMrD"}

package/dist/core/github-releases.js

@@ -0,0 +1,96 @@
+import { mkdirSync, writeFileSync, rmSync } from "node:fs";
+import { join } from "node:path";
+import { tmpdir } from "node:os";
+import AdmZip from "adm-zip";
+import * as log from "./core-logger.js";
+/** GitHub repository for MeowKit releases */
+const GITHUB_OWNER = "ngocsangyem";
+const GITHUB_REPO = "MeowKit";
+/**
+ * Fetch available releases from GitHub API.
+ * Returns stable and beta releases, sorted by newest first.
+ */
+export async function fetchReleases() {
+    const url = `https://api.github.com/repos/${GITHUB_OWNER}/${GITHUB_REPO}/releases`;
+    const response = await fetch(url, {
+        headers: {
+            Accept: "application/vnd.github.v3+json",
+            "User-Agent": "mewkit",
+        },
+    });
+    if (!response.ok) {
+        throw new Error(`GitHub API error: ${response.status} ${response.statusText}`);
+    }
+    const releases = (await response.json());
+    return releases
+        .filter((r) => !r.draft)
+        .map((r) => {
+        // Find the release zip asset
+        const zipAsset = r.assets.find((a) => a.name.endsWith(".zip"));
+        return {
+            tag: r.tag_name,
+            version: r.tag_name.replace(/^v/, ""),
+            isBeta: r.prerelease,
+            downloadUrl: zipAsset?.browser_download_url ?? "",
+            publishedAt: r.published_at,
+        };
+    })
+        .filter((r) => r.downloadUrl !== "");
+}
+/**
+ * Get the latest stable release.
+ */
+export async function getLatestStable() {
+    const releases = await fetchReleases();
+    return releases.find((r) => !r.isBeta) ?? null;
+}
+/**
+ * Get the latest beta release.
+ */
+export async function getLatestBeta() {
+    const releases = await fetchReleases();
+    return releases.find((r) => r.isBeta) ?? null;
+}
+/**
+ * Download a release zip and extract to a temp directory.
+ * Returns the path to the extracted directory.
+ */
+export async function downloadRelease(release) {
+    const tempDir = join(tmpdir(), `meowkit-release-${release.version}-${Date.now()}`);
+    mkdirSync(tempDir, { recursive: true });
+    const zipPath = join(tempDir, "release.zip");
+    log.debug(`Downloading ${release.downloadUrl}`);
+    // Download the zip
+    const response = await fetch(release.downloadUrl, {
+        headers: { "User-Agent": "mewkit" },
+        redirect: "follow",
+    });
+    if (!response.ok) {
+        throw new Error(`Download failed: ${response.status} ${response.statusText}`);
+    }
+    const buffer = Buffer.from(await response.arrayBuffer());
+    writeFileSync(zipPath, buffer);
+    log.debug(`Downloaded ${buffer.length} bytes to ${zipPath}`);
+    // Extract the zip — pure JS, works identically on macOS, Linux, Windows.
+    // (Previous `unzip` shell call failed on Windows which has no unzip by default.)
+    const extractDir = join(tempDir, "extracted");
+    mkdirSync(extractDir, { recursive: true });
+    const zip = new AdmZip(zipPath);
+    zip.extractAllTo(extractDir, /* overwrite */ true);
+    log.debug(`Extracted to ${extractDir}`);
+    return extractDir;
+}
+/**
+ * Clean up a downloaded release temp directory.
+ * Uses fs.rmSync (Node 14.14+) instead of `rm -rf` so it works on Windows,
+ * where cmd.exe has no `rm -rf` equivalent.
+ */
+export function cleanupDownload(tempDir) {
+    try {
+        rmSync(tempDir, { recursive: true, force: true });
+    }
+    catch {
+        // Best effort cleanup
+    }
+}
+//# sourceMappingURL=github-releases.js.map

package/dist/core/github-releases.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-releases.js","sourceRoot":"","sources":["../../src/core/github-releases.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,MAAM,MAAM,SAAS,CAAC;AAC7B,OAAO,KAAK,GAAG,MAAM,kBAAkB,CAAC;AAExC,6CAA6C;AAC7C,MAAM,YAAY,GAAG,aAAa,CAAC;AACnC,MAAM,WAAW,GAAG,SAAS,CAAC;AAuB9B;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa;IAClC,MAAM,GAAG,GAAG,gCAAgC,YAAY,IAAI,WAAW,WAAW,CAAC;IACnF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QACjC,OAAO,EAAE;YACR,MAAM,EAAE,gCAAgC;YACxC,YAAY,EAAE,QAAQ;SACtB;KACD,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAoB,CAAC;IAE5D,OAAO,QAAQ;SACb,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;SACvB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACV,6BAA6B;QAC7B,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/D,OAAO;YACN,GAAG,EAAE,CAAC,CAAC,QAAQ;YACf,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YACrC,MAAM,EAAE,CAAC,CAAC,UAAU;YACpB,WAAW,EAAE,QAAQ,EAAE,oBAAoB,IAAI,EAAE;YACjD,WAAW,EAAE,CAAC,CAAC,YAAY;SAC3B,CAAC;IACH,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe;IACpC,MAAM,QAAQ,GAAG,MAAM,aAAa,EAAE,CAAC;IACvC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC;AAChD,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa;IAClC,MAAM,QAAQ,GAAG,MAAM,aAAa,EAAE,CAAC;IACvC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAAoB;IACzD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACnF,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAExC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAE7C,GAAG,CAAC,KAAK,CAAC,eAAe,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAEhD,mBAAmB;IACnB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE;QACjD,OAAO,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE;QACnC,QAAQ,EAAE,QAAQ;KAClB,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,oBAAoB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IACzD,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAE/B,GAAG,CAAC,KAAK,CAAC,cAAc,MAAM,CAAC,MAAM,aAAa,OAAO,EAAE,CAAC,CAAC;IAE7D,yEAAyE;IACzE,iFAAiF;IACjF,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC9C,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;IAChC,GAAG,CAAC,YAAY,CAAC,UAAU,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC;IAEnD,GAAG,CAAC,KAAK,CAAC,gBAAgB,UAAU,EAAE,CAAC,CAAC;IAExC,OAAO,UAAU,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe;IAC9C,IAAI,CAAC;QACJ,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACR,sBAAsB;IACvB,CAAC;AACF,CAAC"}

package/dist/core/index.d.ts

@@ -0,0 +1,12 @@
+/** Core modules — shared by init and upgrade commands */
+export * from "./github-releases.js";
+export * from "./compute-checksums.js";
+export * from "./merge-settings.js";
+export * from "./substitute-placeholders.js";
+export * from "./validate-install.js";
+export * from "./smart-update.js";
+export * from "./smart-update-utils.js";
+export * from "./core-logger.js";
+export * from "./skills-dependencies.js";
+export * from "./dependency-installer.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/core/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,yBAAyB,CAAC;AACxC,cAAc,kBAAkB,CAAC;AACjC,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC"}

package/dist/core/index.js

@@ -0,0 +1,12 @@
+/** Core modules — shared by init and upgrade commands */
+export * from "./github-releases.js";
+export * from "./compute-checksums.js";
+export * from "./merge-settings.js";
+export * from "./substitute-placeholders.js";
+export * from "./validate-install.js";
+export * from "./smart-update.js";
+export * from "./smart-update-utils.js";
+export * from "./core-logger.js";
+export * from "./skills-dependencies.js";
+export * from "./dependency-installer.js";
+//# sourceMappingURL=index.js.map

package/dist/core/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,yBAAyB,CAAC;AACxC,cAAc,kBAAkB,CAAC;AACjC,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC"}

package/dist/core/merge-settings.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Merge template settings.json into existing user settings.json.
+ * Strategy: append-only — add new hooks/permissions, never modify existing.
+ * Returns true if merge succeeded, false if skipped or failed.
+ */
+export declare function mergeSettingsFile(templatePath: string, destPath: string, dryRun: boolean): boolean;
+//# sourceMappingURL=merge-settings.d.ts.map

package/dist/core/merge-settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"merge-settings.d.ts","sourceRoot":"","sources":["../../src/core/merge-settings.ts"],"names":[],"mappings":"AA2BA;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAsDlG"}