opkg 0.9.2 → 0.9.4

package/packages/cli/dist/chunk-HYKYECAE.js

@@ -0,0 +1,222 @@
+#!/usr/bin/env node
+import {
+  DIR_PATTERNS,
+  FILE_PATTERNS,
+  UNVERSIONED
+} from "./chunk-IHVZ5AUJ.js";
+import {
+  ensureDir,
+  exists,
+  readTextFile,
+  writeTextFile
+} from "./chunk-S47F4OG4.js";
+import {
+  ValidationError
+} from "./chunk-ID4SVDQZ.js";
+import {
+  logger
+} from "./chunk-5EFWGD33.js";
+
+// ../core/src/utils/version-generator.ts
+import * as semver from "semver";
+function extractBaseVersion(version) {
+  let hyphenIndex = version.indexOf("-"), candidate = hyphenIndex === -1 ? version : version.slice(0, hyphenIndex), parsed = semver.parse(candidate);
+  return parsed ? `${parsed.major}.${parsed.minor}.${parsed.patch}` : candidate;
+}
+
+// ../core/src/core/package-versioning.ts
+import * as semver2 from "semver";
+import yaml from "js-yaml";
+function isUnversionedVersion(version) {
+  return version == null || version === UNVERSIONED;
+}
+function formatVersionLabel(version) {
+  return isUnversionedVersion(version) ? UNVERSIONED : version;
+}
+
+// ../core/src/utils/tarball.ts
+import * as tar from "tar";
+import { createHash } from "crypto";
+import { unlink, readdir, stat, readFile, writeFile } from "fs/promises";
+import { join } from "path";
+import { tmpdir } from "os";
+async function createTarballFromPackage(pkg) {
+  logger.debug(`Creating tarball for package: ${pkg.metadata.name}@${pkg.metadata.version}`);
+  let tempDir = join(tmpdir(), `openpackage-tarball-${Date.now()}`), tarballPath = join(tempDir, "package.tar.gz");
+  try {
+    await ensureDir(tempDir);
+    for (let file of pkg.files) {
+      let filePath = join(tempDir, file.path);
+      await ensureDir(join(filePath, "..")), await writeTextFile(filePath, file.content, file.encoding || "utf8");
+    }
+    await tar.create(
+      {
+        gzip: !0,
+        file: tarballPath,
+        cwd: tempDir
+      },
+      pkg.files.map((f) => f.path)
+    );
+    let tarballBuffer = await readFile(tarballPath), checksum = createHash("sha256").update(tarballBuffer).digest("hex");
+    return logger.debug(`Tarball created: ${tarballBuffer.length} bytes, checksum: ${checksum}`), {
+      buffer: tarballBuffer,
+      size: tarballBuffer.length,
+      checksum
+    };
+  } catch (error) {
+    throw logger.error("Failed to create tarball", { error, packageName: pkg.metadata.name }), new ValidationError(`Failed to create tarball: ${error}`);
+  } finally {
+    try {
+      await exists(tarballPath) && await unlink(tarballPath);
+    } catch (cleanupError) {
+      logger.warn("Failed to clean up temp files", { cleanupError });
+    }
+  }
+}
+async function extractPackageFromTarball(tarballBuffer, expectedChecksum) {
+  logger.debug(`Extracting package from tarball (${tarballBuffer.length} bytes)`);
+  let tempDir = join(tmpdir(), `openpackage-extract-${Date.now()}`), isGzipBuffer = (buffer) => buffer.length >= 2 && buffer[0] === 31 && buffer[1] === 139, previewBufferAsText = (buffer, maxBytes = 200) => buffer.subarray(0, Math.min(maxBytes, buffer.length)).toString("utf8").replace(/[\u0000-\u0008\u000B\u000C\u000E-\u001F\u007F]/g, "\uFFFD"), isGzip = isGzipBuffer(tarballBuffer), tarballPath = join(tempDir, isGzip ? "package.tar.gz" : "package.tar");
+  try {
+    let actualChecksum = createHash("sha256").update(tarballBuffer).digest("hex");
+    if (expectedChecksum && actualChecksum !== expectedChecksum)
+      throw new ValidationError(
+        `Tarball checksum mismatch. Expected: ${expectedChecksum}, Got: ${actualChecksum}`
+      );
+    await ensureDir(tempDir), await writeFile(tarballPath, tarballBuffer), await tar.extract({
+      file: tarballPath,
+      cwd: tempDir
+    });
+    let files = [], extractFiles = async (dir, basePath = "") => {
+      let entries = await readdir(dir);
+      for (let entry of entries) {
+        let fullPath = join(dir, entry), relativePath = basePath ? join(basePath, entry) : entry, stats = await stat(fullPath);
+        if (stats.isFile()) {
+          let content = await readTextFile(fullPath);
+          files.push({
+            path: relativePath,
+            content,
+            encoding: "utf8"
+          });
+        } else stats.isDirectory() && await extractFiles(fullPath, relativePath);
+      }
+    };
+    await extractFiles(tempDir);
+    let filteredFiles = files.filter((f) => f.path !== "package.tar.gz" && f.path !== "package.tar");
+    return logger.debug(`Extracted ${filteredFiles.length} files from tarball`), {
+      files: filteredFiles,
+      checksum: actualChecksum
+    };
+  } catch (error) {
+    let hint = (() => {
+      if (isGzip)
+        return;
+      let preview = previewBufferAsText(tarballBuffer), trimmed = preview.trimStart();
+      return trimmed.startsWith("{") || trimmed.startsWith("[") || trimmed.startsWith("<") ? `Downloaded payload does not look like a tarball (starts with: '${trimmed.slice(0, 60)}')` : `Downloaded payload does not look gzip-compressed (first bytes: '${preview.slice(0, 60)}')`;
+    })();
+    logger.error("Failed to extract tarball", { error, isGzip, hint });
+    let baseMessage = error instanceof Error ? error.message : String(error);
+    throw new ValidationError(hint ? `${baseMessage}. ${hint}` : `Failed to extract tarball: ${baseMessage}`);
+  } finally {
+    try {
+      await exists(tarballPath) && await unlink(tarballPath);
+    } catch (cleanupError) {
+      logger.warn("Failed to clean up temp files", { cleanupError });
+    }
+  }
+}
+function createFormDataForUpload(packageName, version, tarballInfo) {
+  let formData = new FormData();
+  formData.append("name", packageName), version && formData.append("version", version);
+  let blob = new Blob([tarballInfo.buffer], { type: "application/gzip" }), filename = version ? `${packageName}-${version}${FILE_PATTERNS.TGZ_FILES}` : `${packageName}-${UNVERSIONED}${FILE_PATTERNS.TGZ_FILES}`;
+  return formData.append("file", blob, filename), formData;
+}
+function verifyTarballIntegrity(buffer, expectedSize, expectedChecksum) {
+  try {
+    if (expectedSize && buffer.length !== expectedSize)
+      return logger.warn("Tarball size mismatch", {
+        expected: expectedSize,
+        actual: buffer.length
+      }), !1;
+    if (expectedChecksum) {
+      let actualChecksum = createHash("sha256").update(buffer).digest("hex");
+      if (actualChecksum !== expectedChecksum)
+        return logger.warn("Tarball checksum mismatch", {
+          expected: expectedChecksum,
+          actual: actualChecksum
+        }), !1;
+    }
+    return !0;
+  } catch (error) {
+    return logger.error("Tarball integrity check failed", { error }), !1;
+  }
+}
+
+// ../core/src/core/install/plugin-detector.ts
+import { join as join2 } from "path";
+import { promises as fs } from "fs";
+async function detectPluginType(dirPath) {
+  let pluginDir = join2(dirPath, DIR_PATTERNS.CLAUDE_PLUGIN), pluginManifestPath = join2(pluginDir, FILE_PATTERNS.PLUGIN_JSON);
+  if (await exists(pluginManifestPath))
+    return logger.info("Detected individual Claude Code plugin", { path: pluginManifestPath }), {
+      isPlugin: !0,
+      type: "individual",
+      manifestPath: pluginManifestPath
+    };
+  let marketplaceManifestPath = join2(pluginDir, FILE_PATTERNS.MARKETPLACE_JSON);
+  return await exists(marketplaceManifestPath) ? (logger.info("Detected Claude Code plugin marketplace", { path: marketplaceManifestPath }), {
+    isPlugin: !0,
+    type: "marketplace",
+    manifestPath: marketplaceManifestPath
+  }) : { isPlugin: !1 };
+}
+async function detectPluginWithMarketplace(dirPath, marketplaceEntry) {
+  let standardDetection = await detectPluginType(dirPath);
+  return standardDetection.isPlugin ? standardDetection : marketplaceEntry?.strict === !1 && await hasPluginContent(dirPath) ? (logger.info("Detected marketplace-defined plugin (strict:false)", {
+    dirPath,
+    pluginName: marketplaceEntry.name
+  }), {
+    isPlugin: !0,
+    type: "marketplace-defined"
+  }) : { isPlugin: !1 };
+}
+async function hasPluginContent(dirPath) {
+  let pluginContentDirs = ["commands", "agents", "skills", "hooks"], pluginContentFiles = [".mcp.json", ".lsp.json"];
+  for (let subdir of pluginContentDirs) {
+    let subdirPath = join2(dirPath, subdir);
+    if (await exists(subdirPath))
+      try {
+        if ((await fs.readdir(subdirPath)).length > 0)
+          return !0;
+      } catch {
+      }
+  }
+  for (let file of pluginContentFiles) {
+    let filePath = join2(dirPath, file);
+    if (await exists(filePath))
+      return !0;
+  }
+  return !1;
+}
+async function validatePluginManifest(manifestPath) {
+  try {
+    let content = await readTextFile(manifestPath);
+    return JSON.parse(content), !0;
+  } catch (error) {
+    return logger.error("Failed to parse plugin manifest", { manifestPath, error }), !1;
+  }
+}
+
+export {
+  extractBaseVersion,
+  isUnversionedVersion,
+  formatVersionLabel,
+  createTarballFromPackage,
+  extractPackageFromTarball,
+  createFormDataForUpload,
+  verifyTarballIntegrity,
+  detectPluginType,
+  detectPluginWithMarketplace,
+  hasPluginContent,
+  validatePluginManifest
+};
+//# sourceMappingURL=chunk-HYKYECAE.js.map

package/packages/cli/dist/chunk-HYKYECAE.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../core/src/utils/version-generator.ts", "../../core/src/core/package-versioning.ts", "../../core/src/utils/tarball.ts", "../../core/src/core/install/plugin-detector.ts"],
+  "sourcesContent": ["import { createHash } from 'crypto';\nimport * as semver from 'semver';\n\n/**\n * Version generation utilities for local and WIP versions.\n */\n\nexport const WIP_TIMESTAMP_TOKEN_LENGTH = 6;\nexport const WORKSPACE_HASH_TOKEN_LENGTH = 8;\n// Length of the short workspace tag used in WIP versions (e.g. 3 base36 chars)\nexport const WIP_WORKSPACE_TAG_LENGTH = 3;\n\n\n\n/**\n * Extract the stable base (major.minor.patch) portion of a version string.\n *\n * - For any valid semver (including pre-releases like \"1.2.3-000fz8.a3k\"\n *   or legacy \"1.2.3-wip.abc\"), this returns \"1.2.3\".\n * - For non-semver strings, it returns the portion before the first \"-\"\n *   (if any), otherwise the input unchanged.\n */\nexport function extractBaseVersion(version: string): string {\n  const hyphenIndex = version.indexOf('-');\n  const candidate = hyphenIndex === -1 ? version : version.slice(0, hyphenIndex);\n\n  const parsed = semver.parse(candidate);\n  if (parsed) {\n    return `${parsed.major}.${parsed.minor}.${parsed.patch}`;\n  }\n  return candidate;\n}\n\nconst TIMESTAMP_ALPHABET = '0123456789abcdefghijklmnopqrstuvwxyz';\n\n/**\n * Encode a non-negative integer into a fixed-length base36-like string.\n * Values that exceed the requested length are truncated from the left (highest order digits).\n */\nexport function encodeBase62(value: number, length: number = WIP_TIMESTAMP_TOKEN_LENGTH): string {\n  if (!Number.isFinite(value) || value < 0) {\n    value = 0;\n  }\n\n  const base = TIMESTAMP_ALPHABET.length;\n  let remaining = Math.floor(value);\n  let encoded = '';\n\n  do {\n    const digit = remaining % base;\n    encoded = `${TIMESTAMP_ALPHABET[digit]}${encoded}`;\n    remaining = Math.floor(remaining / base);\n  } while (remaining > 0);\n\n  if (encoded.length < length) {\n    encoded = encoded.padStart(length, '0');\n  } else if (encoded.length > length) {\n    encoded = encoded.slice(-length);\n  }\n\n  return encoded;\n}\n\n/**\n * Generate a 6-character base36 timestamp from the provided Date (defaults to now).\n */\nexport function generateBase62Timestamp(\n  date: Date = new Date(),\n  length: number = WIP_TIMESTAMP_TOKEN_LENGTH\n): string {\n  const seconds = Math.floor(date.getTime() / 1000);\n  return encodeBase62(seconds, length);\n}\n\n/**\n * Create a deterministic hash for the current workspace path.\n * Returns a lower-case hex slice (default 8 characters).\n */\nexport function createWorkspaceHash(\n  inputPath: string,\n  length: number = WORKSPACE_HASH_TOKEN_LENGTH\n): string {\n  const normalizedPath = inputPath.replace(/\\\\/g, '/');\n  const digest = createHash('sha256').update(normalizedPath).digest('hex');\n  if (length <= 0) {\n    return '';\n  }\n  if (digest.length <= length) {\n    return digest.padEnd(length, '0');\n  }\n  return digest.slice(0, length);\n}\n\n/**\n * Sanitize a workspace hash string to a fixed length.\n * Internal helper used for tag generation.\n */\nfunction sanitizeWorkspaceHash(\n  hash: string,\n  length: number\n): string {\n  const cleaned = (hash || '').toLowerCase().replace(/[^0-9a-z]/g, '');\n  if (cleaned.length === 0) {\n    return ''.padEnd(length, '0');\n  }\n  if (cleaned.length >= length) {\n    return cleaned.slice(0, length);\n  }\n  return `${cleaned}${'0'.repeat(length - cleaned.length)}`;\n}\n\n/**\n * Create the workspace tag used in WIP versions.\n * Returns a 3-character tag derived from the workspace path hash.\n * This is the single source of truth for workspace tags used in version strings.\n */\nexport function createWorkspaceTag(inputPath: string): string {\n  const workspaceHash = createWorkspaceHash(inputPath);\n  return sanitizeWorkspaceHash(workspaceHash, WIP_WORKSPACE_TAG_LENGTH);\n}\n\n/**\n * Generate a WIP version string in the canonical S-<t>.<w> form.\n *\n * - `stable` is the normalized base stable version (e.g. \"1.2.3\").\n * - `workspacePath` is the workspace path; the tag is derived from it.\n * - `options.now` can be provided for deterministic testing.\n */\nexport function generateWipVersion(\n  stable: string,\n  workspacePath: string,\n  options?: { now?: Date }\n): string {\n  const timestampPart = generateBase62Timestamp(\n    options?.now ?? new Date(),\n    WIP_TIMESTAMP_TOKEN_LENGTH\n  );\n  const hashPart = createWorkspaceTag(workspacePath);\n  return `${stable}-${timestampPart}.${hashPart}`;\n}\n\nexport interface ParsedWipVersion {\n  baseStable: string;\n  timestamp: string;\n  workspaceHash: string;\n}\n\n/**\n * Parse a WIP version string.\n *\n * Supports the S-<t>.<w> scheme: {base}-{timestamp}.{workspaceTag} (e.g. 1.2.3-000fz8.a3k)\n */\nexport function parseWipVersion(version: string): ParsedWipVersion | null {\n  const parsed = semver.parse(version);\n  if (parsed && parsed.prerelease.length === 2) {\n    const [timestamp, workspaceHash] = parsed.prerelease;\n    if (typeof timestamp === 'string' && typeof workspaceHash === 'string') {\n      return {\n        baseStable: `${parsed.major}.${parsed.minor}.${parsed.patch}`,\n        timestamp,\n        workspaceHash\n      };\n    }\n  }\n\n    return null;\n}\n\nexport function extractWorkspaceHashFromVersion(version: string): string | null {\n  const parsed = parseWipVersion(version);\n  return parsed?.workspaceHash ?? null;\n}\n\n", "import * as semver from 'semver';\nimport yaml from 'js-yaml';\nimport { PackageFile, PackageYml } from '../types/index.js';\nimport { extractBaseVersion } from '../utils/version-generator.js';\nimport { getPackageVersionPath } from './directory.js';\nimport { exists } from '../utils/fs.js';\nimport { FILE_PATTERNS, UNVERSIONED } from '../constants/index.js';\nimport { isScopedName } from '../utils/package-name.js';\n\n/**\n * Compute stable version from a prerelease version\n * Example: \"1.2.3-dev.abc123\" -> \"1.2.3\"\n */\nexport function computeStableVersion(version: string): string {\n  const parsed = semver.parse(version);\n  if (parsed) {\n    return `${parsed.major}.${parsed.minor}.${parsed.patch}`;\n  }\n  return extractBaseVersion(version);\n}\n\n/**\n * Dump YAML with proper quoting for scoped names (e.g., @scope/name)\n */\nexport function dumpYamlWithScopedQuoting(config: PackageYml, options: yaml.DumpOptions = {}): string {\n  let dumped = yaml.dump(config, { flowLevel: 1, ...options, quotingType: '\"' });\n  \n  // Ensure scoped names are quoted\n  if (isScopedName(config.name)) {\n    const lines = dumped.split('\\n');\n    for (let i = 0; i < lines.length; i++) {\n      if (lines[i].trim().startsWith('name:')) {\n        const valueMatch = lines[i].match(/name:\\s*(.+)$/);\n        if (valueMatch) {\n          const value = valueMatch[1].trim();\n          if (!value.startsWith('\"') && !value.startsWith(\"'\")) {\n            lines[i] = lines[i].replace(/name:\\s*(.+)$/, `name: \"${config.name}\"`);\n          }\n        }\n        break;\n      }\n    }\n    dumped = lines.join('\\n');\n  }\n  \n  return dumped;\n}\n\n/**\n * Transform package files for version change only (no name change)\n * Updates openpackage.yml version field\n */\nexport function transformPackageFilesForVersionChange(\n  files: PackageFile[],\n  newVersion: string,\n  packageName: string\n): PackageFile[] {\n  return files.map((file) => {\n    if (file.path === FILE_PATTERNS.OPENPACKAGE_YML) {\n      try {\n        const parsed = yaml.load(file.content) as PackageYml;\n        const updated: PackageYml = {\n          ...parsed,\n          version: newVersion\n        };\n        const dumped = dumpYamlWithScopedQuoting(updated, { lineWidth: 120 });\n        return { ...file, content: dumped };\n      } catch {\n        // Fallback: minimal rewrite if parsing fails\n        const fallback: PackageYml = {\n          name: packageName,\n          version: newVersion\n        };\n        const dumped = dumpYamlWithScopedQuoting(fallback, { lineWidth: 120 });\n        return { ...file, content: dumped };\n      }\n    }\n    return file;\n  });\n}\n\n/**\n * Check if a package version already exists\n */\nexport async function packageVersionExists(packageName: string, version?: string): Promise<boolean> {\n  const targetPath = getPackageVersionPath(packageName, version ?? UNVERSIONED);\n  return await exists(targetPath);\n}\n\n/**\n * Returns true when a version is absent or explicitly marked as unversioned.\n */\nexport function isUnversionedVersion(version?: string | null): boolean {\n  return version === undefined || version === null || version === UNVERSIONED;\n}\n\n/**\n * Normalizes a version string for display/logging.\n */\nexport function formatVersionLabel(version?: string | null): string {\n  return isUnversionedVersion(version) ? UNVERSIONED : (version as string);\n}\n\n/**\n * Filter a list of versions down to semver-valid stable releases.\n */\nexport function filterStableVersions(versions: string[]): string[] {\n  return versions.filter((version) => semver.valid(version) && !semver.prerelease(version));\n}\n\n/**\n * Find the latest stable version from a list (returns null if none).\n */\nexport function getLatestStableVersion(versions: string[]): string | null {\n  const stableVersions = filterStableVersions(versions);\n  if (stableVersions.length === 0) {\n    return null;\n  }\n  return semver.rsort(stableVersions)[0];\n}\n", "import * as tar from 'tar';\nimport { createHash } from 'crypto';\nimport { unlink, readdir, stat, readFile, writeFile } from 'fs/promises';\nimport { join } from 'path';\nimport { tmpdir } from 'os';\nimport { PackageFile, Package } from '../types/index.js';\nimport { logger } from './logger.js';\nimport { ValidationError } from './errors.js';\nimport { writeTextFile, readTextFile, ensureDir, exists } from './fs.js';\nimport { UNVERSIONED, FILE_PATTERNS } from '../constants/index.js';\n\n/**\n * Tarball utilities for package packaging and extraction\n */\n\nexport interface TarballInfo {\n  buffer: Buffer;\n  size: number;\n  checksum: string;\n}\n\nexport interface ExtractedPackage {\n  files: PackageFile[];\n  checksum: string;\n}\n\n/**\n * Create a tarball from package files\n */\nexport async function createTarballFromPackage(pkg: Package): Promise<TarballInfo> {\n  logger.debug(`Creating tarball for package: ${pkg.metadata.name}@${pkg.metadata.version}`);\n  \n  const tempDir = join(tmpdir(), `openpackage-tarball-${Date.now()}`);\n  const tarballPath = join(tempDir, 'package.tar.gz');\n  \n  try {\n    // Create temp directory\n    await ensureDir(tempDir);\n    \n    // Write package files to temp directory\n    for (const file of pkg.files) {\n      const filePath = join(tempDir, file.path);\n      await ensureDir(join(filePath, '..'));\n      await writeTextFile(filePath, file.content, (file.encoding as BufferEncoding) || 'utf8');\n    }\n    \n    // Create tarball\n    await tar.create(\n      {\n        gzip: true,\n        file: tarballPath,\n        cwd: tempDir\n      },\n      pkg.files.map(f => f.path)\n    );\n    \n    // Read tarball into buffer\n    const tarballBuffer = await readFile(tarballPath);\n    \n    // Calculate checksum\n    const checksum = createHash('sha256').update(tarballBuffer).digest('hex');\n    \n    logger.debug(`Tarball created: ${tarballBuffer.length} bytes, checksum: ${checksum}`);\n    \n    return {\n      buffer: tarballBuffer,\n      size: tarballBuffer.length,\n      checksum\n    };\n  } catch (error) {\n    logger.error('Failed to create tarball', { error, packageName: pkg.metadata.name });\n    throw new ValidationError(`Failed to create tarball: ${error}`);\n  } finally {\n    // Clean up temp directory\n    try {\n      if (await exists(tarballPath)) {\n        await unlink(tarballPath);\n      }\n      // Note: We're not removing the temp dir itself as it may have subdirectories\n      // The OS temp cleanup will handle this\n    } catch (cleanupError) {\n      logger.warn('Failed to clean up temp files', { cleanupError });\n    }\n  }\n}\n\n/**\n * Extract package files from tarball buffer\n */\nexport async function extractPackageFromTarball(\n  tarballBuffer: Buffer, \n  expectedChecksum?: string\n): Promise<ExtractedPackage> {\n  logger.debug(`Extracting package from tarball (${tarballBuffer.length} bytes)`);\n  \n  const tempDir = join(tmpdir(), `openpackage-extract-${Date.now()}`);\n\n  const isGzipBuffer = (buffer: Buffer): boolean => {\n    // gzip magic header: 1f 8b\n    return buffer.length >= 2 && buffer[0] === 0x1f && buffer[1] === 0x8b;\n  };\n\n  const previewBufferAsText = (buffer: Buffer, maxBytes: number = 200): string => {\n    const slice = buffer.subarray(0, Math.min(maxBytes, buffer.length));\n    // Replace control characters to keep logs readable\n    return slice\n      .toString('utf8')\n      .replace(/[\\u0000-\\u0008\\u000B\\u000C\\u000E-\\u001F\\u007F]/g, '\uFFFD');\n  };\n\n  const isGzip = isGzipBuffer(tarballBuffer);\n  const tarballPath = join(tempDir, isGzip ? 'package.tar.gz' : 'package.tar');\n  \n  try {\n    // Verify checksum if provided\n    const actualChecksum = createHash('sha256').update(tarballBuffer).digest('hex');\n    \n    if (expectedChecksum && actualChecksum !== expectedChecksum) {\n      throw new ValidationError(\n        `Tarball checksum mismatch. Expected: ${expectedChecksum}, Got: ${actualChecksum}`\n      );\n    }\n    \n    // Create temp directory and write tarball\n    await ensureDir(tempDir);\n    await writeFile(tarballPath, tarballBuffer);\n    \n    // Extract tarball\n    await tar.extract({\n      file: tarballPath,\n      cwd: tempDir\n    });\n    \n    // Read extracted files\n    const files: PackageFile[] = [];\n    const extractFiles = async (dir: string, basePath: string = ''): Promise<void> => {\n      const entries = await readdir(dir);\n      \n      for (const entry of entries) {\n        const fullPath = join(dir, entry);\n        const relativePath = basePath ? join(basePath, entry) : entry;\n        \n        const stats = await stat(fullPath);\n        if (stats.isFile()) {\n          const content = await readTextFile(fullPath);\n          files.push({\n            path: relativePath,\n            content,\n            encoding: 'utf8'\n          });\n        } else if (stats.isDirectory()) {\n          await extractFiles(fullPath, relativePath);\n        }\n      }\n    };\n    \n    await extractFiles(tempDir);\n    \n    // Remove the tarball file itself from the list\n    const filteredFiles = files.filter(f => f.path !== 'package.tar.gz' && f.path !== 'package.tar');\n    \n    logger.debug(`Extracted ${filteredFiles.length} files from tarball`);\n    \n    return {\n      files: filteredFiles,\n      checksum: actualChecksum\n    };\n  } catch (error) {\n    const hint = (() => {\n      // If we didn't get gzip bytes, the first bytes are often informative (JSON/XML)\n      if (isGzip) {\n        return undefined;\n      }\n      const preview = previewBufferAsText(tarballBuffer);\n      const trimmed = preview.trimStart();\n      if (trimmed.startsWith('{') || trimmed.startsWith('[') || trimmed.startsWith('<')) {\n        return `Downloaded payload does not look like a tarball (starts with: '${trimmed.slice(0, 60)}')`;\n      }\n      return `Downloaded payload does not look gzip-compressed (first bytes: '${preview.slice(0, 60)}')`;\n    })();\n\n    logger.error('Failed to extract tarball', { error, isGzip, hint });\n    const baseMessage = error instanceof Error ? error.message : String(error);\n    throw new ValidationError(hint ? `${baseMessage}. ${hint}` : `Failed to extract tarball: ${baseMessage}`);\n  } finally {\n    // Clean up temp files\n    try {\n      if (await exists(tarballPath)) {\n        await unlink(tarballPath);\n      }\n    } catch (cleanupError) {\n      logger.warn('Failed to clean up temp files', { cleanupError });\n    }\n  }\n}\n\n/**\n * Create FormData for multipart upload\n */\nexport function createFormDataForUpload(\n  packageName: string,\n  version: string | undefined,\n  tarballInfo: TarballInfo\n): FormData {\n  const formData = new FormData();\n  \n  // Add form fields\n  formData.append('name', packageName);\n  if (version) {\n    formData.append('version', version);\n  }\n  \n  // Add tarball file\n  const blob = new Blob([tarballInfo.buffer], { type: 'application/gzip' });\n  const filename = version ? `${packageName}-${version}${FILE_PATTERNS.TGZ_FILES}` : `${packageName}-${UNVERSIONED}${FILE_PATTERNS.TGZ_FILES}`;\n  formData.append('file', blob, filename);\n  \n  return formData;\n}\n\n/**\n * Verify tarball integrity\n */\nexport function verifyTarballIntegrity(\n  buffer: Buffer,\n  expectedSize?: number,\n  expectedChecksum?: string\n): boolean {\n  try {\n    // Check size\n    if (expectedSize && buffer.length !== expectedSize) {\n      logger.warn('Tarball size mismatch', { \n        expected: expectedSize, \n        actual: buffer.length \n      });\n      return false;\n    }\n    \n    // Check checksum\n    if (expectedChecksum) {\n      const actualChecksum = createHash('sha256').update(buffer).digest('hex');\n      if (actualChecksum !== expectedChecksum) {\n        logger.warn('Tarball checksum mismatch', { \n          expected: expectedChecksum, \n          actual: actualChecksum \n        });\n        return false;\n      }\n    }\n    \n    return true;\n  } catch (error) {\n    logger.error('Tarball integrity check failed', { error });\n    return false;\n  }\n}\n\n", "import { join } from 'path';\nimport { promises as fs } from 'fs';\nimport { exists, readTextFile } from '../../utils/fs.js';\nimport { logger } from '../../utils/logger.js';\nimport { DIR_PATTERNS, FILE_PATTERNS } from '../../constants/index.js';\nimport type { MarketplacePluginEntry } from './marketplace-handler.js';\n\nexport type PluginType = 'individual' | 'marketplace' | 'marketplace-defined';\n\nexport interface PluginDetectionResult {\n  isPlugin: boolean;\n  type?: PluginType;\n  manifestPath?: string;\n}\n\n/**\n * Detect if a directory contains a Claude Code plugin.\n * \n * Detection order:\n * 1. Check for .claude-plugin/plugin.json (individual plugin)\n * 2. Check for .claude-plugin/marketplace.json (marketplace)\n * \n * @param dirPath - Absolute path to directory to check\n * @returns Detection result with plugin type if found\n */\nexport async function detectPluginType(dirPath: string): Promise<PluginDetectionResult> {\n  const pluginDir = join(dirPath, DIR_PATTERNS.CLAUDE_PLUGIN);\n  \n  // Check for individual plugin\n  const pluginManifestPath = join(pluginDir, FILE_PATTERNS.PLUGIN_JSON);\n  if (await exists(pluginManifestPath)) {\n    logger.info('Detected individual Claude Code plugin', { path: pluginManifestPath });\n    return {\n      isPlugin: true,\n      type: 'individual',\n      manifestPath: pluginManifestPath\n    };\n  }\n  \n  // Check for marketplace\n  const marketplaceManifestPath = join(pluginDir, FILE_PATTERNS.MARKETPLACE_JSON);\n  if (await exists(marketplaceManifestPath)) {\n    logger.info('Detected Claude Code plugin marketplace', { path: marketplaceManifestPath });\n    return {\n      isPlugin: true,\n      type: 'marketplace',\n      manifestPath: marketplaceManifestPath\n    };\n  }\n  \n  // Not a plugin\n  return { isPlugin: false };\n}\n\n/**\n * Detect if a directory contains a Claude Code plugin, with marketplace context.\n * \n * This enhanced detection supports marketplace-defined plugins (strict:false) that\n * may not have their own plugin.json file.\n * \n * Detection order:\n * 1. Check for .claude-plugin/plugin.json (individual plugin)\n * 2. Check for .claude-plugin/marketplace.json (marketplace)\n * 3. If marketplaceEntry exists AND strict:false, check for plugin content\n * \n * @param dirPath - Absolute path to directory to check\n * @param marketplaceEntry - Optional marketplace entry for this plugin\n * @returns Detection result with plugin type if found\n */\nexport async function detectPluginWithMarketplace(\n  dirPath: string,\n  marketplaceEntry?: MarketplacePluginEntry\n): Promise<PluginDetectionResult> {\n  // First try standard detection\n  const standardDetection = await detectPluginType(dirPath);\n  \n  if (standardDetection.isPlugin) {\n    return standardDetection;\n  }\n  \n  // If no plugin.json and marketplace entry with strict:false, check for plugin content\n  if (marketplaceEntry?.strict === false) {\n    const hasContent = await hasPluginContent(dirPath);\n    \n    if (hasContent) {\n      logger.info('Detected marketplace-defined plugin (strict:false)', { \n        dirPath,\n        pluginName: marketplaceEntry.name \n      });\n      \n      return {\n        isPlugin: true,\n        type: 'marketplace-defined'\n      };\n    }\n  }\n  \n  return { isPlugin: false };\n}\n\n/**\n * Check if a directory has plugin content (commands, agents, etc.)\n * Used to validate marketplace-defined plugins that don't have plugin.json.\n * Exported for use in file-discovery and path-package-loader.\n */\nexport async function hasPluginContent(dirPath: string): Promise<boolean> {\n  const pluginContentDirs = ['commands', 'agents', 'skills', 'hooks'];\n  const pluginContentFiles = ['.mcp.json', '.lsp.json'];\n  \n  // Check for plugin content directories\n  for (const subdir of pluginContentDirs) {\n    const subdirPath = join(dirPath, subdir);\n    if (await exists(subdirPath)) {\n      // Check if directory is not empty\n      try {\n        const items = await fs.readdir(subdirPath);\n        if (items.length > 0) {\n          return true;\n        }\n      } catch {\n        // Ignore errors reading directory\n      }\n    }\n  }\n  \n  // Check for plugin content files\n  for (const file of pluginContentFiles) {\n    const filePath = join(dirPath, file);\n    if (await exists(filePath)) {\n      return true;\n    }\n  }\n  \n  return false;\n}\n\n/**\n * Validate that a plugin manifest can be parsed.\n * Returns true if the manifest is valid JSON.\n */\nexport async function validatePluginManifest(manifestPath: string): Promise<boolean> {\n  try {\n    const content = await readTextFile(manifestPath);\n    JSON.parse(content);\n    return true;\n  } catch (error) {\n    logger.error('Failed to parse plugin manifest', { manifestPath, error });\n    return false;\n  }\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;AACA,YAAY,YAAY;AAqBjB,SAAS,mBAAmB,SAAyB;AAC1D,MAAM,cAAc,QAAQ,QAAQ,GAAG,GACjC,YAAY,gBAAgB,KAAK,UAAU,QAAQ,MAAM,GAAG,WAAW,GAEvE,SAAgB,aAAM,SAAS;AACrC,SAAI,SACK,GAAG,OAAO,KAAK,IAAI,OAAO,KAAK,IAAI,OAAO,KAAK,KAEjD;AACT;;;AC/BA,YAAYA,aAAY;AACxB,OAAO,UAAU;AA2FV,SAAS,qBAAqB,SAAkC;AACrE,SAAgC,WAAY,QAAQ,YAAY;AAClE;AAKO,SAAS,mBAAmB,SAAiC;AAClE,SAAO,qBAAqB,OAAO,IAAI,cAAe;AACxD;;;ACrGA,YAAY,SAAS;AACrB,SAAS,kBAAkB;AAC3B,SAAS,QAAQ,SAAS,MAAM,UAAU,iBAAiB;AAC3D,SAAS,YAAY;AACrB,SAAS,cAAc;AAyBvB,eAAsB,yBAAyB,KAAoC;AACjF,SAAO,MAAM,iCAAiC,IAAI,SAAS,IAAI,IAAI,IAAI,SAAS,OAAO,EAAE;AAEzF,MAAM,UAAU,KAAK,OAAO,GAAG,uBAAuB,KAAK,IAAI,CAAC,EAAE,GAC5D,cAAc,KAAK,SAAS,gBAAgB;AAElD,MAAI;AAEF,UAAM,UAAU,OAAO;AAGvB,aAAW,QAAQ,IAAI,OAAO;AAC5B,UAAM,WAAW,KAAK,SAAS,KAAK,IAAI;AACxC,YAAM,UAAU,KAAK,UAAU,IAAI,CAAC,GACpC,MAAM,cAAc,UAAU,KAAK,SAAU,KAAK,YAA+B,MAAM;AAAA,IACzF;AAGA,UAAU;AAAA,MACR;AAAA,QACE,MAAM;AAAA,QACN,MAAM;AAAA,QACN,KAAK;AAAA,MACP;AAAA,MACA,IAAI,MAAM,IAAI,OAAK,EAAE,IAAI;AAAA,IAC3B;AAGA,QAAM,gBAAgB,MAAM,SAAS,WAAW,GAG1C,WAAW,WAAW,QAAQ,EAAE,OAAO,aAAa,EAAE,OAAO,KAAK;AAExE,kBAAO,MAAM,oBAAoB,cAAc,MAAM,qBAAqB,QAAQ,EAAE,GAE7E;AAAA,MACL,QAAQ;AAAA,MACR,MAAM,cAAc;AAAA,MACpB;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,iBAAO,MAAM,4BAA4B,EAAE,OAAO,aAAa,IAAI,SAAS,KAAK,CAAC,GAC5E,IAAI,gBAAgB,6BAA6B,KAAK,EAAE;AAAA,EAChE,UAAE;AAEA,QAAI;AACF,MAAI,MAAM,OAAO,WAAW,KAC1B,MAAM,OAAO,WAAW;AAAA,IAI5B,SAAS,cAAc;AACrB,aAAO,KAAK,iCAAiC,EAAE,aAAa,CAAC;AAAA,IAC/D;AAAA,EACF;AACF;AAKA,eAAsB,0BACpB,eACA,kBAC2B;AAC3B,SAAO,MAAM,oCAAoC,cAAc,MAAM,SAAS;AAE9E,MAAM,UAAU,KAAK,OAAO,GAAG,uBAAuB,KAAK,IAAI,CAAC,EAAE,GAE5D,eAAe,CAAC,WAEb,OAAO,UAAU,KAAK,OAAO,CAAC,MAAM,MAAQ,OAAO,CAAC,MAAM,KAG7D,sBAAsB,CAAC,QAAgB,WAAmB,QAChD,OAAO,SAAS,GAAG,KAAK,IAAI,UAAU,OAAO,MAAM,CAAC,EAG/D,SAAS,MAAM,EACf,QAAQ,mDAAmD,QAAG,GAG7D,SAAS,aAAa,aAAa,GACnC,cAAc,KAAK,SAAS,SAAS,mBAAmB,aAAa;AAE3E,MAAI;AAEF,QAAM,iBAAiB,WAAW,QAAQ,EAAE,OAAO,aAAa,EAAE,OAAO,KAAK;AAE9E,QAAI,oBAAoB,mBAAmB;AACzC,YAAM,IAAI;AAAA,QACR,wCAAwC,gBAAgB,UAAU,cAAc;AAAA,MAClF;AAIF,UAAM,UAAU,OAAO,GACvB,MAAM,UAAU,aAAa,aAAa,GAG1C,MAAU,YAAQ;AAAA,MAChB,MAAM;AAAA,MACN,KAAK;AAAA,IACP,CAAC;AAGD,QAAM,QAAuB,CAAC,GACxB,eAAe,OAAO,KAAa,WAAmB,OAAsB;AAChF,UAAM,UAAU,MAAM,QAAQ,GAAG;AAEjC,eAAW,SAAS,SAAS;AAC3B,YAAM,WAAW,KAAK,KAAK,KAAK,GAC1B,eAAe,WAAW,KAAK,UAAU,KAAK,IAAI,OAElD,QAAQ,MAAM,KAAK,QAAQ;AACjC,YAAI,MAAM,OAAO,GAAG;AAClB,cAAM,UAAU,MAAM,aAAa,QAAQ;AAC3C,gBAAM,KAAK;AAAA,YACT,MAAM;AAAA,YACN;AAAA,YACA,UAAU;AAAA,UACZ,CAAC;AAAA,QACH,MAAO,CAAI,MAAM,YAAY,KAC3B,MAAM,aAAa,UAAU,YAAY;AAAA,MAE7C;AAAA,IACF;AAEA,UAAM,aAAa,OAAO;AAG1B,QAAM,gBAAgB,MAAM,OAAO,OAAK,EAAE,SAAS,oBAAoB,EAAE,SAAS,aAAa;AAE/F,kBAAO,MAAM,aAAa,cAAc,MAAM,qBAAqB,GAE5D;AAAA,MACL,OAAO;AAAA,MACP,UAAU;AAAA,IACZ;AAAA,EACF,SAAS,OAAO;AACd,QAAM,QAAQ,MAAM;AAElB,UAAI;AACF;AAEF,UAAM,UAAU,oBAAoB,aAAa,GAC3C,UAAU,QAAQ,UAAU;AAClC,aAAI,QAAQ,WAAW,GAAG,KAAK,QAAQ,WAAW,GAAG,KAAK,QAAQ,WAAW,GAAG,IACvE,kEAAkE,QAAQ,MAAM,GAAG,EAAE,CAAC,OAExF,mEAAmE,QAAQ,MAAM,GAAG,EAAE,CAAC;AAAA,IAChG,GAAG;AAEH,WAAO,MAAM,6BAA6B,EAAE,OAAO,QAAQ,KAAK,CAAC;AACjE,QAAM,cAAc,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACzE,UAAM,IAAI,gBAAgB,OAAO,GAAG,WAAW,KAAK,IAAI,KAAK,8BAA8B,WAAW,EAAE;AAAA,EAC1G,UAAE;AAEA,QAAI;AACF,MAAI,MAAM,OAAO,WAAW,KAC1B,MAAM,OAAO,WAAW;AAAA,IAE5B,SAAS,cAAc;AACrB,aAAO,KAAK,iCAAiC,EAAE,aAAa,CAAC;AAAA,IAC/D;AAAA,EACF;AACF;AAKO,SAAS,wBACd,aACA,SACA,aACU;AACV,MAAM,WAAW,IAAI,SAAS;AAG9B,WAAS,OAAO,QAAQ,WAAW,GAC/B,WACF,SAAS,OAAO,WAAW,OAAO;AAIpC,MAAM,OAAO,IAAI,KAAK,CAAC,YAAY,MAAM,GAAG,EAAE,MAAM,mBAAmB,CAAC,GAClE,WAAW,UAAU,GAAG,WAAW,IAAI,OAAO,GAAG,cAAc,SAAS,KAAK,GAAG,WAAW,IAAI,WAAW,GAAG,cAAc,SAAS;AAC1I,kBAAS,OAAO,QAAQ,MAAM,QAAQ,GAE/B;AACT;AAKO,SAAS,uBACd,QACA,cACA,kBACS;AACT,MAAI;AAEF,QAAI,gBAAgB,OAAO,WAAW;AACpC,oBAAO,KAAK,yBAAyB;AAAA,QACnC,UAAU;AAAA,QACV,QAAQ,OAAO;AAAA,MACjB,CAAC,GACM;AAIT,QAAI,kBAAkB;AACpB,UAAM,iBAAiB,WAAW,QAAQ,EAAE,OAAO,MAAM,EAAE,OAAO,KAAK;AACvE,UAAI,mBAAmB;AACrB,sBAAO,KAAK,6BAA6B;AAAA,UACvC,UAAU;AAAA,UACV,QAAQ;AAAA,QACV,CAAC,GACM;AAAA,IAEX;AAEA,WAAO;AAAA,EACT,SAAS,OAAO;AACd,kBAAO,MAAM,kCAAkC,EAAE,MAAM,CAAC,GACjD;AAAA,EACT;AACF;;;AC/PA,SAAS,QAAAC,aAAY;AACrB,SAAS,YAAY,UAAU;AAwB/B,eAAsB,iBAAiB,SAAiD;AACtF,MAAM,YAAYC,MAAK,SAAS,aAAa,aAAa,GAGpD,qBAAqBA,MAAK,WAAW,cAAc,WAAW;AACpE,MAAI,MAAM,OAAO,kBAAkB;AACjC,kBAAO,KAAK,0CAA0C,EAAE,MAAM,mBAAmB,CAAC,GAC3E;AAAA,MACL,UAAU;AAAA,MACV,MAAM;AAAA,MACN,cAAc;AAAA,IAChB;AAIF,MAAM,0BAA0BA,MAAK,WAAW,cAAc,gBAAgB;AAC9E,SAAI,MAAM,OAAO,uBAAuB,KACtC,OAAO,KAAK,2CAA2C,EAAE,MAAM,wBAAwB,CAAC,GACjF;AAAA,IACL,UAAU;AAAA,IACV,MAAM;AAAA,IACN,cAAc;AAAA,EAChB,KAIK,EAAE,UAAU,GAAM;AAC3B;AAiBA,eAAsB,4BACpB,SACA,kBACgC;AAEhC,MAAM,oBAAoB,MAAM,iBAAiB,OAAO;AAExD,SAAI,kBAAkB,WACb,oBAIL,kBAAkB,WAAW,MACZ,MAAM,iBAAiB,OAAO,KAG/C,OAAO,KAAK,sDAAsD;AAAA,IAChE;AAAA,IACA,YAAY,iBAAiB;AAAA,EAC/B,CAAC,GAEM;AAAA,IACL,UAAU;AAAA,IACV,MAAM;AAAA,EACR,KAIG,EAAE,UAAU,GAAM;AAC3B;AAOA,eAAsB,iBAAiB,SAAmC;AACxE,MAAM,oBAAoB,CAAC,YAAY,UAAU,UAAU,OAAO,GAC5D,qBAAqB,CAAC,aAAa,WAAW;AAGpD,WAAW,UAAU,mBAAmB;AACtC,QAAM,aAAaA,MAAK,SAAS,MAAM;AACvC,QAAI,MAAM,OAAO,UAAU;AAEzB,UAAI;AAEF,aADc,MAAM,GAAG,QAAQ,UAAU,GAC/B,SAAS;AACjB,iBAAO;AAAA,MAEX,QAAQ;AAAA,MAER;AAAA,EAEJ;AAGA,WAAW,QAAQ,oBAAoB;AACrC,QAAM,WAAWA,MAAK,SAAS,IAAI;AACnC,QAAI,MAAM,OAAO,QAAQ;AACvB,aAAO;AAAA,EAEX;AAEA,SAAO;AACT;AAMA,eAAsB,uBAAuB,cAAwC;AACnF,MAAI;AACF,QAAM,UAAU,MAAM,aAAa,YAAY;AAC/C,gBAAK,MAAM,OAAO,GACX;AAAA,EACT,SAAS,OAAO;AACd,kBAAO,MAAM,mCAAmC,EAAE,cAAc,MAAM,CAAC,GAChE;AAAA,EACT;AACF;",
+  "names": ["semver", "join", "join"]
+}

package/packages/cli/dist/chunk-I7FEAHB4.js

@@ -0,0 +1,100 @@
+#!/usr/bin/env node
+import {
+  getOpenPackageDirectories
+} from "./chunk-GDVFS3YP.js";
+import {
+  SCOPED_PACKAGE_REGEX,
+  normalizePackageName
+} from "./chunk-VN22A7NW.js";
+import {
+  DIR_PATTERNS,
+  OPENPACKAGE_DIRS
+} from "./chunk-IHVZ5AUJ.js";
+
+// ../core/src/core/scope-resolution.ts
+import { join } from "path";
+function getScopePackageDir(cwd, scope, packageName, customPath) {
+  if (customPath)
+    return customPath;
+  if (scope === "root")
+    return cwd;
+  if (!packageName)
+    throw new Error(`Package name is required for ${scope} scope`);
+  let normalizedName = normalizePackageName(packageName);
+  if (scope === "project")
+    return getScopedPackagePath(
+      join(cwd, DIR_PATTERNS.OPENPACKAGE, OPENPACKAGE_DIRS.PACKAGES),
+      normalizedName
+    );
+  if (scope === "global") {
+    let dirs = getOpenPackageDirectories();
+    return getScopedPackagePath(
+      join(dirs.data, OPENPACKAGE_DIRS.PACKAGES),
+      normalizedName
+    );
+  }
+  throw new Error(`Invalid scope: ${scope}`);
+}
+function getScopePackageYmlPath(cwd, scope, packageName, customPath) {
+  let packageDir = getScopePackageDir(cwd, scope, packageName, customPath);
+  return join(packageDir, "openpackage.yml");
+}
+function getScopeDescription(scope) {
+  switch (scope) {
+    case "root":
+      return "Current directory (root package)";
+    case "project":
+      return "Project-scoped (.openpackage/packages/)";
+    case "global":
+      return "Global shared (~/.openpackage/packages/)";
+    default:
+      return "Unknown scope";
+  }
+}
+function getScopeDisplayPath(scope, packageName, customPath) {
+  if (customPath)
+    return customPath;
+  if (scope === "root")
+    return "./openpackage.yml";
+  if (!packageName)
+    return scope === "project" ? "./.openpackage/packages/<package-name>/" : "~/.openpackage/packages/<package-name>/";
+  let normalizedName = normalizePackageName(packageName);
+  return scope === "project" ? `./.openpackage/packages/${normalizedName}/` : `~/.openpackage/packages/${normalizedName}/`;
+}
+function parseWorkspaceScope(scopeValue) {
+  let parsed = parseScope(scopeValue);
+  if (parsed === "root")
+    throw new Error("root scope not supported; use project or global");
+  return parsed;
+}
+function parseScope(scopeValue) {
+  let normalized = scopeValue.toLowerCase().trim();
+  if (normalized === "root" || normalized === "r")
+    return "root";
+  if (normalized === "project" || normalized === "p")
+    return "project";
+  if (normalized === "global" || normalized === "g")
+    return "global";
+  throw new Error(
+    `Invalid scope: '${scopeValue}'
+Valid scopes: root, project, global`
+  );
+}
+function getScopedPackagePath(baseDir, packageName) {
+  let scopedMatch = packageName.match(SCOPED_PACKAGE_REGEX);
+  if (scopedMatch) {
+    let [, scope, localName] = scopedMatch;
+    return join(baseDir, "@" + scope, localName);
+  }
+  return join(baseDir, packageName);
+}
+
+export {
+  getScopePackageDir,
+  getScopePackageYmlPath,
+  getScopeDescription,
+  getScopeDisplayPath,
+  parseWorkspaceScope,
+  parseScope
+};
+//# sourceMappingURL=chunk-I7FEAHB4.js.map

package/packages/cli/dist/chunk-I7FEAHB4.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../core/src/core/scope-resolution.ts"],
+  "sourcesContent": ["import { join } from 'path';\nimport { getOpenPackageDirectories } from './directory.js';\nimport { DIR_PATTERNS, OPENPACKAGE_DIRS } from '../constants/index.js';\nimport { normalizePackageName, SCOPED_PACKAGE_REGEX } from '../utils/package-name.js';\n\n/**\n * Package scope types\n * - root: Current directory (cwd) as a package\n * - project: Workspace-scoped package in .openpackage/packages/\n * - global: User-scoped package in ~/.openpackage/packages/\n */\nexport type PackageScope = 'root' | 'project' | 'global';\n\n/**\n * Get the package directory for a given scope\n * \n * @param cwd - Current working directory\n * @param scope - Package scope\n * @param packageName - Package name (required for project/global, ignored for root)\n * @param customPath - Optional custom path (overrides scope-based resolution)\n * @returns Absolute path to package directory\n */\nexport function getScopePackageDir(\n  cwd: string,\n  scope: PackageScope,\n  packageName?: string,\n  customPath?: string\n): string {\n  // Custom path takes precedence over scope\n  if (customPath) {\n    // Note: This is a simple delegation - full validation happens elsewhere\n    // This function just returns the path for consistency with the API\n    return customPath;\n  }\n\n  if (scope === 'root') {\n    // Root scope: current directory is the package\n    return cwd;\n  }\n\n  if (!packageName) {\n    throw new Error(`Package name is required for ${scope} scope`);\n  }\n\n  const normalizedName = normalizePackageName(packageName);\n\n  if (scope === 'project') {\n    // Project scope: .openpackage/packages/<name>/\n    return getScopedPackagePath(\n      join(cwd, DIR_PATTERNS.OPENPACKAGE, OPENPACKAGE_DIRS.PACKAGES),\n      normalizedName\n    );\n  }\n\n  if (scope === 'global') {\n    // Global scope: ~/.openpackage/packages/<name>/\n    const dirs = getOpenPackageDirectories();\n    return getScopedPackagePath(\n      join(dirs.data, OPENPACKAGE_DIRS.PACKAGES),\n      normalizedName\n    );\n  }\n\n  throw new Error(`Invalid scope: ${scope}`);\n}\n\n/**\n * Get the openpackage.yml path for a given scope\n * \n * @param cwd - Current working directory\n * @param scope - Package scope\n * @param packageName - Package name (required for project/global, ignored for root)\n * @param customPath - Optional custom path (overrides scope-based resolution)\n * @returns Absolute path to openpackage.yml\n */\nexport function getScopePackageYmlPath(\n  cwd: string,\n  scope: PackageScope,\n  packageName?: string,\n  customPath?: string\n): string {\n  const packageDir = getScopePackageDir(cwd, scope, packageName, customPath);\n  return join(packageDir, 'openpackage.yml');\n}\n\n/**\n * Get a human-readable description of the scope\n * \n * @param scope - Package scope\n * @returns Description string\n */\nexport function getScopeDescription(scope: PackageScope): string {\n  switch (scope) {\n    case 'root':\n      return 'Current directory (root package)';\n    case 'project':\n      return 'Project-scoped (.openpackage/packages/)';\n    case 'global':\n      return 'Global shared (~/.openpackage/packages/)';\n    default:\n      return 'Unknown scope';\n  }\n}\n\n/**\n * Get the relative display path for a scope\n * Used in CLI output to show where package will be created\n * \n * @param scope - Package scope\n * @param packageName - Package name (optional)\n * @param customPath - Optional custom path for display\n * @returns Display path string\n */\nexport function getScopeDisplayPath(\n  scope: PackageScope,\n  packageName?: string,\n  customPath?: string\n): string {\n  if (customPath) {\n    return customPath;\n  }\n\n  if (scope === 'root') {\n    return './openpackage.yml';\n  }\n\n  if (!packageName) {\n    return scope === 'project'\n      ? './.openpackage/packages/<package-name>/'\n      : '~/.openpackage/packages/<package-name>/';\n  }\n\n  const normalizedName = normalizePackageName(packageName);\n  return scope === 'project'\n    ? `./.openpackage/packages/${normalizedName}/`\n    : `~/.openpackage/packages/${normalizedName}/`;\n}\n\n/**\n * Workspace scope for list/uninstall/view (project or global only, no root)\n */\nexport type WorkspaceScope = 'project' | 'global';\n\n/**\n * Parse and validate workspace scope from CLI (project or global only)\n * Used by list, uninstall, view - rejects root scope.\n *\n * @param scopeValue - Raw scope value from CLI option\n * @returns Validated WorkspaceScope\n */\nexport function parseWorkspaceScope(scopeValue: string): WorkspaceScope {\n  const parsed = parseScope(scopeValue);\n  if (parsed === 'root') {\n    throw new Error('root scope not supported; use project or global');\n  }\n  return parsed;\n}\n\n/**\n * Parse and validate scope option from CLI\n * \n * @param scopeValue - Raw scope value from CLI option\n * @returns Validated PackageScope\n */\nexport function parseScope(scopeValue: string): PackageScope {\n  const normalized = scopeValue.toLowerCase().trim();\n\n  if (normalized === 'root' || normalized === 'r') {\n    return 'root';\n  }\n\n  if (normalized === 'project' || normalized === 'p') {\n    return 'project';\n  }\n\n  if (normalized === 'global' || normalized === 'g') {\n    return 'global';\n  }\n\n  throw new Error(\n    `Invalid scope: '${scopeValue}'\\n` +\n    `Valid scopes: root, project, global`\n  );\n}\n\n/**\n * Helper to get the package path handling scoped packages (@scope/name)\n * Scoped packages get nested directory structure: @scope/name/\n */\nfunction getScopedPackagePath(baseDir: string, packageName: string): string {\n  const scopedMatch = packageName.match(SCOPED_PACKAGE_REGEX);\n  if (scopedMatch) {\n    const [, scope, localName] = scopedMatch;\n    return join(baseDir, '@' + scope, localName);\n  }\n  return join(baseDir, packageName);\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;AAAA,SAAS,YAAY;AAsBd,SAAS,mBACd,KACA,OACA,aACA,YACQ;AAER,MAAI;AAGF,WAAO;AAGT,MAAI,UAAU;AAEZ,WAAO;AAGT,MAAI,CAAC;AACH,UAAM,IAAI,MAAM,gCAAgC,KAAK,QAAQ;AAG/D,MAAM,iBAAiB,qBAAqB,WAAW;AAEvD,MAAI,UAAU;AAEZ,WAAO;AAAA,MACL,KAAK,KAAK,aAAa,aAAa,iBAAiB,QAAQ;AAAA,MAC7D;AAAA,IACF;AAGF,MAAI,UAAU,UAAU;AAEtB,QAAM,OAAO,0BAA0B;AACvC,WAAO;AAAA,MACL,KAAK,KAAK,MAAM,iBAAiB,QAAQ;AAAA,MACzC;AAAA,IACF;AAAA,EACF;AAEA,QAAM,IAAI,MAAM,kBAAkB,KAAK,EAAE;AAC3C;AAWO,SAAS,uBACd,KACA,OACA,aACA,YACQ;AACR,MAAM,aAAa,mBAAmB,KAAK,OAAO,aAAa,UAAU;AACzE,SAAO,KAAK,YAAY,iBAAiB;AAC3C;AAQO,SAAS,oBAAoB,OAA6B;AAC/D,UAAQ,OAAO;AAAA,IACb,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;AAWO,SAAS,oBACd,OACA,aACA,YACQ;AACR,MAAI;AACF,WAAO;AAGT,MAAI,UAAU;AACZ,WAAO;AAGT,MAAI,CAAC;AACH,WAAO,UAAU,YACb,4CACA;AAGN,MAAM,iBAAiB,qBAAqB,WAAW;AACvD,SAAO,UAAU,YACb,2BAA2B,cAAc,MACzC,2BAA2B,cAAc;AAC/C;AAcO,SAAS,oBAAoB,YAAoC;AACtE,MAAM,SAAS,WAAW,UAAU;AACpC,MAAI,WAAW;AACb,UAAM,IAAI,MAAM,iDAAiD;AAEnE,SAAO;AACT;AAQO,SAAS,WAAW,YAAkC;AAC3D,MAAM,aAAa,WAAW,YAAY,EAAE,KAAK;AAEjD,MAAI,eAAe,UAAU,eAAe;AAC1C,WAAO;AAGT,MAAI,eAAe,aAAa,eAAe;AAC7C,WAAO;AAGT,MAAI,eAAe,YAAY,eAAe;AAC5C,WAAO;AAGT,QAAM,IAAI;AAAA,IACR,mBAAmB,UAAU;AAAA;AAAA,EAE/B;AACF;AAMA,SAAS,qBAAqB,SAAiB,aAA6B;AAC1E,MAAM,cAAc,YAAY,MAAM,oBAAoB;AAC1D,MAAI,aAAa;AACf,QAAM,CAAC,EAAE,OAAO,SAAS,IAAI;AAC7B,WAAO,KAAK,SAAS,MAAM,OAAO,SAAS;AAAA,EAC7C;AACA,SAAO,KAAK,SAAS,WAAW;AAClC;",
+  "names": []
+}

package/packages/cli/dist/chunk-IHVZ5AUJ.js

@@ -0,0 +1,107 @@
+#!/usr/bin/env node
+
+// ../core/src/constants/index.ts
+var DIR_PATTERNS = {
+  OPENPACKAGE: ".openpackage",
+  CLAUDE_PLUGIN: ".claude-plugin"
+}, FILE_PATTERNS = {
+  MD_FILES: ".md",
+  MDC_FILES: ".mdc",
+  TOML_FILES: ".toml",
+  OPENPACKAGE_YML: "openpackage.yml",
+  OPENPACKAGE_INDEX_YML: "openpackage.index.yml",
+  README_MD: "README.md",
+  // Platform-specific root files
+  AGENTS_MD: "AGENTS.md",
+  CLAUDE_MD: "CLAUDE.md",
+  GEMINI_MD: "GEMINI.md",
+  QWEN_MD: "QWEN.md",
+  WARP_MD: "WARP.md",
+  // Claude Code plugin manifest files
+  PLUGIN_JSON: "plugin.json",
+  MARKETPLACE_JSON: "marketplace.json",
+  // Archive file extensions
+  TGZ_FILES: ".tgz",
+  TAR_GZ_FILES: ".tar.gz",
+  // File patterns arrays
+  MARKDOWN_FILES: [".md", ".mdc"],
+  YML_FILE: ".yml"
+}, OPENPACKAGE_DIRS = {
+  REGISTRY: "registry",
+  PACKAGES: "packages",
+  CACHE: "cache",
+  RUNTIME: "runtime"
+}, PACKAGE_ROOT_DIRS = {
+  /**
+   * Direct copy directory: files under `root/**` are copied 1:1 to workspace root
+   * with the `root/` prefix stripped during install.
+   */
+  ROOT_COPY: "root"
+}, PACKAGE_PATHS = {
+  /**
+   * The canonical location of the package manifest within a package:
+   * <package-root>/openpackage.yml
+   */
+  MANIFEST_RELATIVE: `${FILE_PATTERNS.OPENPACKAGE_YML}`,
+  /**
+   * The canonical location of the package index file within a cached package copy:
+   * <cached-package-root>/openpackage.index.yml
+   */
+  INDEX_RELATIVE: `${FILE_PATTERNS.OPENPACKAGE_INDEX_YML}`
+}, CLAUDE_PLUGIN_PATHS = {
+  /**
+   * The Claude plugin manifest file path (relative to plugin directory):
+   * <plugin-root>/.claude-plugin/plugin.json
+   */
+  PLUGIN_MANIFEST: `${DIR_PATTERNS.CLAUDE_PLUGIN}/${FILE_PATTERNS.PLUGIN_JSON}`,
+  /**
+   * The Claude plugin marketplace manifest file path (relative to marketplace directory):
+   * <marketplace-root>/.claude-plugin/marketplace.json
+   */
+  MARKETPLACE_MANIFEST: `${DIR_PATTERNS.CLAUDE_PLUGIN}/${FILE_PATTERNS.MARKETPLACE_JSON}`
+}, DEPENDENCY_ARRAYS = {
+  DEPENDENCIES: "dependencies",
+  DEV_DEPENDENCIES: "dev-dependencies",
+  // Deprecated - kept for backward compatibility
+  PACKAGES: "packages",
+  DEV_PACKAGES: "dev-packages"
+};
+var UNVERSIONED = "0.0.0", SOURCE_TYPES = {
+  PATH: "path",
+  REGISTRY: "registry",
+  GIT: "git"
+}, MUTABILITY = {
+  MUTABLE: "mutable",
+  IMMUTABLE: "immutable"
+};
+var DEFAULT_VERSION_CONSTRAINT = "*", REGISTRY_PATH_PREFIXES = {
+  BASE: "~/.openpackage/registry/",
+  GIT: "~/.openpackage/registry/git/"
+}, DIR_TO_TYPE = {
+  rules: "rule",
+  agents: "agent",
+  commands: "command",
+  skills: "skill",
+  hooks: "hook"
+}, STRUCTURAL_PREFIX_DIRS = /* @__PURE__ */ new Set([
+  "plugins",
+  "packages"
+]);
+
+export {
+  DIR_PATTERNS,
+  FILE_PATTERNS,
+  OPENPACKAGE_DIRS,
+  PACKAGE_ROOT_DIRS,
+  PACKAGE_PATHS,
+  CLAUDE_PLUGIN_PATHS,
+  DEPENDENCY_ARRAYS,
+  UNVERSIONED,
+  SOURCE_TYPES,
+  MUTABILITY,
+  DEFAULT_VERSION_CONSTRAINT,
+  REGISTRY_PATH_PREFIXES,
+  DIR_TO_TYPE,
+  STRUCTURAL_PREFIX_DIRS
+};
+//# sourceMappingURL=chunk-IHVZ5AUJ.js.map

package/packages/cli/dist/chunk-IHVZ5AUJ.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../core/src/constants/index.ts"],
+  "sourcesContent": ["/**\n * Shared constants for the OpenPackage CLI application\n * This file provides a single source of truth for all directory names,\n * file patterns, and other constants used throughout the application.\n */\n\nexport const DIR_PATTERNS = {\n  OPENPACKAGE: '.openpackage',\n  CLAUDE_PLUGIN: '.claude-plugin'\n} as const;\n\nexport const FILE_PATTERNS = {\n  MD_FILES: '.md',\n  MDC_FILES: '.mdc',\n  TOML_FILES: '.toml',\n  OPENPACKAGE_YML: 'openpackage.yml',\n  OPENPACKAGE_INDEX_YML: 'openpackage.index.yml',\n  README_MD: 'README.md',\n  // Platform-specific root files\n  AGENTS_MD: 'AGENTS.md',\n  CLAUDE_MD: 'CLAUDE.md',\n  GEMINI_MD: 'GEMINI.md',\n  QWEN_MD: 'QWEN.md',\n  WARP_MD: 'WARP.md',\n  // Claude Code plugin manifest files\n  PLUGIN_JSON: 'plugin.json',\n  MARKETPLACE_JSON: 'marketplace.json',\n  // Archive file extensions\n  TGZ_FILES: '.tgz',\n  TAR_GZ_FILES: '.tar.gz',\n  // File patterns arrays\n  MARKDOWN_FILES: ['.md', '.mdc'],\n  YML_FILE: '.yml',\n} as const;\n\n// Universal subdirectory names are now dynamically discovered from platform configs\n// No hardcoded subdirs - platforms define their own universal directories\n\nexport const OPENPACKAGE_DIRS = {\n  REGISTRY: 'registry',\n  PACKAGES: 'packages',\n  CACHE: 'cache',\n  RUNTIME: 'runtime'\n} as const;\n\n/**\n * Package root directory names (relative to package root).\n */\nexport const PACKAGE_ROOT_DIRS = {\n  /**\n   * Direct copy directory: files under `root/**` are copied 1:1 to workspace root\n   * with the `root/` prefix stripped during install.\n   */\n  ROOT_COPY: 'root'\n} as const;\n\n/**\n * Canonical paths within a package or cached copy (relative to the package root).\n */\nexport const PACKAGE_PATHS = {\n  /**\n   * The canonical location of the package manifest within a package:\n   * <package-root>/openpackage.yml\n   */\n  MANIFEST_RELATIVE: `${FILE_PATTERNS.OPENPACKAGE_YML}`,\n  /**\n   * The canonical location of the package index file within a cached package copy:\n   * <cached-package-root>/openpackage.index.yml\n   */\n  INDEX_RELATIVE: `${FILE_PATTERNS.OPENPACKAGE_INDEX_YML}`,\n} as const;\n\n/**\n * Claude Code plugin-related paths.\n */\nexport const CLAUDE_PLUGIN_PATHS = {\n  /**\n   * The Claude plugin manifest file path (relative to plugin directory):\n   * <plugin-root>/.claude-plugin/plugin.json\n   */\n  PLUGIN_MANIFEST: `${DIR_PATTERNS.CLAUDE_PLUGIN}/${FILE_PATTERNS.PLUGIN_JSON}`,\n  /**\n   * The Claude plugin marketplace manifest file path (relative to marketplace directory):\n   * <marketplace-root>/.claude-plugin/marketplace.json\n   */\n  MARKETPLACE_MANIFEST: `${DIR_PATTERNS.CLAUDE_PLUGIN}/${FILE_PATTERNS.MARKETPLACE_JSON}`,\n} as const;\n\nexport const DEPENDENCY_ARRAYS = {\n  DEPENDENCIES: 'dependencies',\n  DEV_DEPENDENCIES: 'dev-dependencies',\n  // Deprecated - kept for backward compatibility\n  PACKAGES: 'packages',\n  DEV_PACKAGES: 'dev-packages'\n} as const;\n\nexport const CONFLICT_RESOLUTION = {\n  SKIPPED: 'skipped',\n  KEPT: 'kept',\n  OVERWRITTEN: 'overwritten'\n} as const;\n\nexport const UNVERSIONED = '0.0.0' as const;\n\n/**\n * Source type constants for package resolution.\n */\nexport const SOURCE_TYPES = {\n  PATH: 'path',\n  REGISTRY: 'registry',\n  GIT: 'git'\n} as const;\n\n/**\n * Mutability constants for package sources.\n */\nexport const MUTABILITY = {\n  MUTABLE: 'mutable',\n  IMMUTABLE: 'immutable'\n} as const;\n\n/**\n * Resolution source constants (where version was resolved from).\n */\nexport const RESOLUTION_SOURCES = {\n  LOCAL: 'local',\n  REMOTE: 'remote'\n} as const;\n\n/**\n * Git-related constants.\n */\nexport const GIT = {\n  DIRECTORY: 'git',\n  DEFAULT_REF: 'HEAD',\n  COMMANDS: {\n    CLONE: 'clone',\n    FETCH: 'fetch',\n    CHECKOUT: 'checkout',\n    PULL: 'pull',\n    DEPTH_FLAG: '--depth',\n    DEPTH_VALUE: '1',\n    BRANCH_FLAG: '--branch',\n    ORIGIN: 'origin'\n  }\n} as const;\n\n/**\n * Default version constraint (wildcard/latest).\n */\nexport const DEFAULT_VERSION_CONSTRAINT = '*' as const;\n\n/**\n * Registry path prefixes (for constructing declared paths).\n */\nexport const REGISTRY_PATH_PREFIXES = {\n  BASE: '~/.openpackage/registry/',\n  GIT: '~/.openpackage/registry/git/'\n} as const;\n\nexport type FilePattern = typeof FILE_PATTERNS[keyof typeof FILE_PATTERNS];\nexport type UniversalSubdir = string;\nexport type OpenPackageDir = typeof OPENPACKAGE_DIRS[keyof typeof OPENPACKAGE_DIRS];\nexport type DependencyArray = typeof DEPENDENCY_ARRAYS[keyof typeof DEPENDENCY_ARRAYS];\nexport type ConflictResolution = typeof CONFLICT_RESOLUTION[keyof typeof CONFLICT_RESOLUTION];\nexport type SourceType = typeof SOURCE_TYPES[keyof typeof SOURCE_TYPES];\nexport type Mutability = typeof MUTABILITY[keyof typeof MUTABILITY];\nexport type ResolutionSource = typeof RESOLUTION_SOURCES[keyof typeof RESOLUTION_SOURCES];\n\nimport type { ResourceTypeId } from '../types/resources.js';\n\n/**\n * Maps resource directory names to their canonical type IDs.\n * Moved from core/resources/resource-registry.ts for utils accessibility.\n */\nexport const DIR_TO_TYPE: Readonly<Record<string, ResourceTypeId>> = {\n  rules: 'rule',\n  agents: 'agent',\n  commands: 'command',\n  skills: 'skill',\n  hooks: 'hook',\n};\n\n/**\n * Known structural prefix directories used to organize plugins/collections\n * within a repository (e.g. `plugins/code-review`, `packages/my-tool`).\n *\n * These are NOT resource types \u2014 they are organizational containers that sit\n * above resource directories in the repo hierarchy. Used by the namespace\n * slug derivation algorithm to identify meaningful package names.\n */\nexport const STRUCTURAL_PREFIX_DIRS: ReadonlySet<string> = new Set([\n  'plugins',\n  'packages',\n]);"],
+  "mappings": ";;;AAMO,IAAM,eAAe;AAAA,EAC1B,aAAa;AAAA,EACb,eAAe;AACjB,GAEa,gBAAgB;AAAA,EAC3B,UAAU;AAAA,EACV,WAAW;AAAA,EACX,YAAY;AAAA,EACZ,iBAAiB;AAAA,EACjB,uBAAuB;AAAA,EACvB,WAAW;AAAA;AAAA,EAEX,WAAW;AAAA,EACX,WAAW;AAAA,EACX,WAAW;AAAA,EACX,SAAS;AAAA,EACT,SAAS;AAAA;AAAA,EAET,aAAa;AAAA,EACb,kBAAkB;AAAA;AAAA,EAElB,WAAW;AAAA,EACX,cAAc;AAAA;AAAA,EAEd,gBAAgB,CAAC,OAAO,MAAM;AAAA,EAC9B,UAAU;AACZ,GAKa,mBAAmB;AAAA,EAC9B,UAAU;AAAA,EACV,UAAU;AAAA,EACV,OAAO;AAAA,EACP,SAAS;AACX,GAKa,oBAAoB;AAAA;AAAA;AAAA;AAAA;AAAA,EAK/B,WAAW;AACb,GAKa,gBAAgB;AAAA;AAAA;AAAA;AAAA;AAAA,EAK3B,mBAAmB,GAAG,cAAc,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA,EAKnD,gBAAgB,GAAG,cAAc,qBAAqB;AACxD,GAKa,sBAAsB;AAAA;AAAA;AAAA;AAAA;AAAA,EAKjC,iBAAiB,GAAG,aAAa,aAAa,IAAI,cAAc,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA,EAK3E,sBAAsB,GAAG,aAAa,aAAa,IAAI,cAAc,gBAAgB;AACvF,GAEa,oBAAoB;AAAA,EAC/B,cAAc;AAAA,EACd,kBAAkB;AAAA;AAAA,EAElB,UAAU;AAAA,EACV,cAAc;AAChB;AAQO,IAAM,cAAc,SAKd,eAAe;AAAA,EAC1B,MAAM;AAAA,EACN,UAAU;AAAA,EACV,KAAK;AACP,GAKa,aAAa;AAAA,EACxB,SAAS;AAAA,EACT,WAAW;AACb;AA+BO,IAAM,6BAA6B,KAK7B,yBAAyB;AAAA,EACpC,MAAM;AAAA,EACN,KAAK;AACP,GAiBa,cAAwD;AAAA,EACnE,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,UAAU;AAAA,EACV,QAAQ;AAAA,EACR,OAAO;AACT,GAUa,yBAA8C,oBAAI,IAAI;AAAA,EACjE;AAAA,EACA;AACF,CAAC;",
+  "names": []
+}

package/packages/cli/dist/chunk-KI7FDU3H.js

@@ -0,0 +1,99 @@
+#!/usr/bin/env node
+import {
+  configManager
+} from "./chunk-S6OARUVQ.js";
+import {
+  resolvePrompt
+} from "./chunk-BROJ6OUT.js";
+import {
+  getPackagePath
+} from "./chunk-XEPVYZO3.js";
+import {
+  isScopedName,
+  normalizePackageName,
+  validatePackageName
+} from "./chunk-VN22A7NW.js";
+import {
+  exists
+} from "./chunk-S47F4OG4.js";
+import {
+  UserCancellationError
+} from "./chunk-ID4SVDQZ.js";
+
+// ../core/src/core/scoping/package-scoping.ts
+async function isPackageNameTaken(name) {
+  let normalized = normalizePackageName(name);
+  return await exists(getPackagePath(normalized));
+}
+function buildScopedNameFromScope(unscopedName, scope) {
+  let normalizedScope = normalizePackageName(scope.replace(/^@/, "")), normalizedName = normalizePackageName(unscopedName);
+  return `@${normalizedScope}/${normalizedName}`;
+}
+async function ensureScopedNameAvailable(name) {
+  try {
+    validatePackageName(name);
+  } catch (error) {
+    throw new Error(error.message.replace("%s", name));
+  }
+  if (!isScopedName(name))
+    throw new Error("Name must be scoped (e.g. @scope/name)");
+  if (await isPackageNameTaken(name))
+    throw new Error(
+      `Package '${name}' already exists in local registry. Choose a different scoped name.`
+    );
+}
+async function getDefaultScopeForProfile(profileName) {
+  return profileName ? (await configManager.getAll()).profiles?.[profileName]?.defaults?.scope : void 0;
+}
+async function resolveScopedNameForPushWithUserScope(unscopedName, username, profileName, prompt) {
+  if (isScopedName(unscopedName))
+    throw new Error(`Expected unscoped name, received '${unscopedName}'`);
+  if (!username?.trim())
+    throw new Error("Username is required to apply default scope.");
+  let prm = prompt ?? resolvePrompt(), normalizedName = normalizePackageName(unscopedName), choice = await prm.select(
+    `Package '${normalizedName}' must be scoped before pushing. Choose a scope:`,
+    [
+      {
+        title: `Use default scope @${username}`,
+        value: "default",
+        description: `Renames to @${username}/${normalizedName}`
+      },
+      {
+        title: "Enter scope...",
+        value: "custom",
+        description: `Enter a custom scope for ${normalizedName}`
+      }
+    ],
+    "Use arrow keys to select, Enter to confirm"
+  );
+  if (!choice)
+    throw new UserCancellationError("Operation cancelled by user");
+  let scope = username;
+  if (choice === "custom") {
+    let initialScope = (await getDefaultScopeForProfile(profileName))?.replace(/^@/, "") || username, enteredScope = await prm.text(
+      `Enter a scope (without @) for '${normalizedName}':`,
+      {
+        initial: initialScope,
+        validate: async (value) => {
+          if (!value) return "Scope is required";
+          let candidate = buildScopedNameFromScope(normalizedName, value);
+          try {
+            return await ensureScopedNameAvailable(candidate), !0;
+          } catch (error) {
+            return error.message;
+          }
+        }
+      }
+    );
+    if (!enteredScope)
+      throw new UserCancellationError("Operation cancelled by user");
+    scope = enteredScope;
+  }
+  let scopedName = buildScopedNameFromScope(normalizedName, scope);
+  return await ensureScopedNameAvailable(scopedName), scopedName;
+}
+
+export {
+  resolveScopedNameForPushWithUserScope
+};
+//# sourceMappingURL=chunk-KI7FDU3H.js.map