npm - prpm - Versions diffs - 2.1.21 → 2.1.22 - Mend

prpm 2.1.21 → 2.1.22

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (2) hide show

package/dist/index.js +585 -283
package/package.json +4 -4

package/dist/index.js CHANGED Viewed

@@ -1179,8 +1179,8 @@ function extractAtReferences(content) {
   const refs = Array.from(matches, (m) => m[1]);
   return [...new Set(refs)];
 }
-function categorizeFile(path11) {
-  const pathLower = path11.toLowerCase();
+function categorizeFile(path12) {
+  const pathLower = path12.toLowerCase();
   if (pathLower.includes("/patterns/") || pathLower.includes("/pattern/") || pathLower.startsWith("patterns/") || pathLower.startsWith("pattern/")) {
     return "pattern";
   }
@@ -1204,8 +1204,8 @@ function categorizeFile(path11) {
   }
   return "other";
 }
-function detectContentType(path11) {
-  const ext = (0, import_path5.extname)(path11).toLowerCase();
+function detectContentType(path12) {
+  const ext = (0, import_path5.extname)(path12).toLowerCase();
   const typeMap = {
     ".md": "text/markdown",
     ".txt": "text/plain",
@@ -1267,8 +1267,8 @@ function loadReferencedFiles(references, basePath) {
 }
 function extractDirectories(filePaths) {
   const dirs = /* @__PURE__ */ new Set();
-  for (const path11 of filePaths) {
-    const dir = (0, import_path5.dirname)(path11);
+  for (const path12 of filePaths) {
+    const dir = (0, import_path5.dirname)(path12);
     if (dir && dir !== ".") {
       dirs.add(dir);
       const parts = dir.split("/");
@@ -8953,11 +8953,11 @@ function validateFormat(format, data, subtype) {
     const warnings = [];
     if (!valid && validate.errors) {
       for (const error of validate.errors) {
-        const path11 = error.instancePath || "/" + error.params.missingProperty || "/";
+        const path12 = error.instancePath || "/" + error.params.missingProperty || "/";
         const message = error.message || "Validation error";
         const validationError = {
-          path: path11,
-          message: `${path11}: ${message}`,
+          path: path12,
+          message: `${path12}: ${message}`,
           value: error.data
         };
         if (error.keyword === "deprecated") {
@@ -15214,7 +15214,7 @@ async function handleCollectionsSearch(query, options) {
   const startTime = Date.now();
   try {
     const config = await getConfig();
-    const client = (0, import_registry_client4.getRegistryClient)(config);
+    const client = (0, import_registry_client5.getRegistryClient)(config);
     console.log(`\u{1F50D} Searching collections for "${query}"...
 `);
     const result = await client.getCollections({
@@ -15307,7 +15307,7 @@ async function handleCollectionsList(options) {
   const startTime = Date.now();
   try {
     const config = await getConfig();
-    const client = (0, import_registry_client4.getRegistryClient)(config);
+    const client = (0, import_registry_client5.getRegistryClient)(config);
     console.log("\u{1F4E6} Searching collections...\n");
     const result = await client.getCollections({
       category: options.category,
@@ -15408,7 +15408,7 @@ async function handleCollectionInfo(collectionSpec) {
     }
     [, name_slug, version] = match;
     const config = await getConfig();
-    const client = (0, import_registry_client4.getRegistryClient)(config);
+    const client = (0, import_registry_client5.getRegistryClient)(config);
     console.log(`\u{1F4E6} Loading collection: ${name_slug}...
 `);
     const collection = await client.getCollection(name_slug, version);
@@ -15499,14 +15499,14 @@ async function handleCollectionPublish(manifestPath = "./collection.json") {
   const startTime = Date.now();
   try {
     const config = await getConfig();
-    const client = (0, import_registry_client4.getRegistryClient)(config);
+    const client = (0, import_registry_client5.getRegistryClient)(config);
     if (!config.token) {
       console.error("\n\u274C Authentication required. Run `prpm login` first.\n");
       throw new CLIError("\n\u274C Authentication required. Run `prpm login` first.", 1);
     }
     console.log("\u{1F4E6} Publishing collection...\n");
-    const fs15 = await import("fs/promises");
-    const manifestContent = await fs15.readFile(manifestPath, "utf-8");
+    const fs16 = await import("fs/promises");
+    const manifestContent = await fs16.readFile(manifestPath, "utf-8");
     const manifest = JSON.parse(manifestContent);
     const required = ["id", "name", "description", "packages"];
     const missing = required.filter((field) => !manifest[field]);
@@ -15602,7 +15602,7 @@ async function handleCollectionDeprecate(collectionSpec, options) {
       console.error("\n\u274C Authentication required. Run `prpm login` first.\n");
       throw new CLIError("Authentication required. Run `prpm login` first.", 1);
     }
-    const client = (0, import_registry_client4.getRegistryClient)(config);
+    const client = (0, import_registry_client5.getRegistryClient)(config);
     const action = options.undo ? "Undeprecating" : "Deprecating";
     console.log(`\u26A0\uFE0F  ${action} collection: ${name_slug}...
 `);
@@ -15663,7 +15663,7 @@ async function handleCollectionInstall(collectionSpec, options) {
     }
     [, name_slug, version] = match;
     const config = await getConfig();
-    const client = (0, import_registry_client4.getRegistryClient)(config);
+    const client = (0, import_registry_client5.getRegistryClient)(config);
     console.log(`\u{1F4E6} Installing collection: ${name_slug}...
 `);
     const installResult = await client.installCollection({
@@ -15776,7 +15776,7 @@ async function handleCollectionInstall(collectionSpec, options) {
   }
 }
 function createCollectionsCommand() {
-  const command = new import_commander10.Command("collections");
+  const command = new import_commander11.Command("collections");
   command.description("Manage package collections").alias("collection").action(async (options) => {
     await handleCollectionsList(options);
   });
@@ -15798,13 +15798,13 @@ function createCollectionsCommand() {
   });
   return command;
 }
-var import_commander10, import_registry_client4;
+var import_commander11, import_registry_client5;
 var init_collections = __esm({
   "src/commands/collections.ts"() {
     "use strict";
     init_cjs_shims();
-    import_commander10 = require("commander");
-    import_registry_client4 = require("@pr-pm/registry-client");
+    import_commander11 = require("commander");
+    import_registry_client5 = require("@pr-pm/registry-client");
     init_user_config();
     init_install();
     init_telemetry();
@@ -16061,7 +16061,7 @@ function findMainFile(files, format, subtype) {
   const nestedIndicator = getNestedIndicator(format, subtype);
   if (nestedIndicator) {
     const match = files.find((f) => {
-      const filename = import_path14.default.basename(f.name);
+      const filename = import_path15.default.basename(f.name);
       return filename.toLowerCase() === nestedIndicator.toLowerCase();
     });
     if (match) return match;
@@ -16070,7 +16070,7 @@ function findMainFile(files, format, subtype) {
   if (filePatterns) {
     for (const pattern of filePatterns) {
       for (const file of files) {
-        const filename = import_path14.default.basename(file.name);
+        const filename = import_path15.default.basename(file.name);
         if (pattern.startsWith("*")) {
           const extension = pattern.slice(1);
           if (filename.endsWith(extension)) {
@@ -16101,7 +16101,7 @@ function findMainFile(files, format, subtype) {
   ];
   for (const pattern of fallbackPatterns) {
     for (const file of files) {
-      const filename = import_path14.default.basename(file.name);
+      const filename = import_path15.default.basename(file.name);
       if (filename.toLowerCase() === pattern.toLowerCase()) {
         return file;
       }
@@ -16182,10 +16182,10 @@ async function handleInstall(packageSpec, options) {
         let isDifferentLocation = false;
         if (requestedLocation && existingLocation) {
           if (installedPkg.subtype === "snippet") {
-            isDifferentLocation = import_path14.default.resolve(requestedLocation) !== import_path14.default.resolve(existingLocation);
+            isDifferentLocation = import_path15.default.resolve(requestedLocation) !== import_path15.default.resolve(existingLocation);
           } else {
-            const existingDir = import_path14.default.dirname(existingLocation);
-            isDifferentLocation = import_path14.default.resolve(requestedLocation) !== import_path14.default.resolve(existingDir);
+            const existingDir = import_path15.default.dirname(existingLocation);
+            isDifferentLocation = import_path15.default.resolve(requestedLocation) !== import_path15.default.resolve(existingDir);
           }
         }
         if (!requestedVersion || requestedVersion === "latest" || requestedVersion === installedPkg.version) {
@@ -16222,7 +16222,7 @@ async function handleInstall(packageSpec, options) {
       }
     }
     console.log(`\u{1F4E5} Installing ${packageId}@${version}...`);
-    const client = (0, import_registry_client5.getRegistryClient)(config);
+    const client = (0, import_registry_client6.getRegistryClient)(config);
     let isCollection = false;
     try {
       await client.getCollection(packageId, version === "latest" ? void 0 : version);
@@ -16534,9 +16534,9 @@ This could indicate:
         (f) => f.name.startsWith("agents/") && f.name.endsWith(".md")
       );
       if (agentFiles.length > 0) {
-        await import_promises2.default.mkdir(".claude/agents", { recursive: true });
+        await import_promises4.default.mkdir(".claude/agents", { recursive: true });
         for (const file of agentFiles) {
-          const filename = import_path14.default.basename(file.name);
+          const filename = import_path15.default.basename(file.name);
           const destFile = `.claude/agents/${filename}`;
           await saveFile(destFile, file.content);
           installedFiles.push(destFile);
@@ -16550,8 +16550,8 @@ This could indicate:
         for (const file of skillFiles) {
           const relativePath = file.name.replace(/^skills\//, "");
           const destFile = `.claude/skills/${relativePath}`;
-          const destFileDir = import_path14.default.dirname(destFile);
-          await import_promises2.default.mkdir(destFileDir, { recursive: true });
+          const destFileDir = import_path15.default.dirname(destFile);
+          await import_promises4.default.mkdir(destFileDir, { recursive: true });
           await saveFile(destFile, file.content);
           installedFiles.push(destFile);
         }
@@ -16561,9 +16561,9 @@ This could indicate:
         (f) => f.name.startsWith("commands/") && f.name.endsWith(".md")
       );
       if (commandFiles.length > 0) {
-        await import_promises2.default.mkdir(".claude/commands", { recursive: true });
+        await import_promises4.default.mkdir(".claude/commands", { recursive: true });
         for (const file of commandFiles) {
-          const filename = import_path14.default.basename(file.name);
+          const filename = import_path15.default.basename(file.name);
           const destFile = `.claude/commands/${filename}`;
           await saveFile(destFile, file.content);
           installedFiles.push(destFile);
@@ -16674,7 +16674,7 @@ This could indicate:
       destDir = getDestinationDir2(effectiveFormat, effectiveSubtype, pkg.name);
       if (locationOverride && effectiveFormat === "cursor") {
         const relativeDestDir = destDir.startsWith("./") ? destDir.slice(2) : destDir;
-        destDir = import_path14.default.join(locationOverride, relativeDestDir);
+        destDir = import_path15.default.join(locationOverride, relativeDestDir);
         console.log(`   \u{1F4C1} Installing Cursor package to custom location: ${destDir}`);
       }
       let mainFile = extractedFiles[0].content;
@@ -16705,7 +16705,7 @@ This could indicate:
           const manifestFilename = getManifestFilename(effectiveFormat);
           let targetPath = manifestFilename;
           if (locationOverride) {
-            targetPath = import_path14.default.join(locationOverride, `${manifestFilename.replace(".md", ".override.md")}`);
+            targetPath = import_path15.default.join(locationOverride, `${manifestFilename.replace(".md", ".override.md")}`);
             console.log(`   \u{1F4C1} Installing to custom location: ${targetPath}`);
           }
           destPath = targetPath;
@@ -16799,7 +16799,7 @@ This could indicate:
         let existingSettings = { hooks: {} };
         if (await fileExists(destPath)) {
           try {
-            const existingContent = await import_promises2.default.readFile(destPath, "utf-8");
+            const existingContent = await import_promises4.default.readFile(destPath, "utf-8");
             existingSettings = JSON.parse(existingContent);
             if (!existingSettings.hooks) {
               existingSettings.hooks = {};
@@ -16853,7 +16853,7 @@ This could indicate:
       }
       if (locationOverride && effectiveFormat === "cursor") {
         const relativeDestDir = destDir.startsWith("./") ? destDir.slice(2) : destDir;
-        destDir = import_path14.default.join(locationOverride, relativeDestDir);
+        destDir = import_path15.default.join(locationOverride, relativeDestDir);
         console.log(`   \u{1F4C1} Installing Cursor package to custom location: ${destDir}`);
       }
       const isCursorConversion = effectiveFormat === "cursor" && pkg.format === "claude" && pkg.subtype === "skill";
@@ -16920,7 +16920,7 @@ This could indicate:
       }
       if (isCursorConversion && jsonFiles.length > 0) {
         const mdcFile = `${packageDir}/${packageName}.mdc`;
-        let mdcContent = await import_promises2.default.readFile(mdcFile, "utf-8");
+        let mdcContent = await import_promises4.default.readFile(mdcFile, "utf-8");
         const frontmatterMatch = mdcContent.match(/^---\n[\s\S]*?\n---\n/);
         if (frontmatterMatch) {
           const frontmatterEnd = frontmatterMatch[0].length;
@@ -17074,12 +17074,12 @@ ${afterFrontmatter}`;
     await telemetry.shutdown();
   }
 }
-function isPathSafe(targetDir, filePath) {
-  const resolvedPath = import_path14.default.resolve(targetDir, filePath);
-  const resolvedTarget = import_path14.default.resolve(targetDir);
-  return resolvedPath.startsWith(resolvedTarget + import_path14.default.sep) || resolvedPath === resolvedTarget;
+function isPathSafe2(targetDir, filePath) {
+  const resolvedPath = import_path15.default.resolve(targetDir, filePath);
+  const resolvedTarget = import_path15.default.resolve(targetDir);
+  return resolvedPath.startsWith(resolvedTarget + import_path15.default.sep) || resolvedPath === resolvedTarget;
 }
-function hasUnsafePathPatterns(filePath) {
+function hasUnsafePathPatterns2(filePath) {
   if (filePath.includes("..")) return true;
   if (filePath.startsWith("/")) return true;
   if (/^[a-zA-Z]:/.test(filePath)) return true;
@@ -17090,7 +17090,7 @@ async function extractTarball(tarball, packageId) {
   let decompressed;
   try {
     decompressed = await new Promise((resolve3, reject) => {
-      import_zlib.default.gunzip(tarball, (err, result) => {
+      import_zlib2.default.gunzip(tarball, (err, result) => {
         if (err) {
           reject(new Error(`Failed to decompress tarball: ${err.message}`));
           return;
@@ -17101,10 +17101,10 @@ async function extractTarball(tarball, packageId) {
   } catch (error) {
     throw new CLIError(`Package decompression failed: ${error.message}`);
   }
-  const tmpDir = await import_promises2.default.mkdtemp(import_path14.default.join(import_os4.default.tmpdir(), "prpm-"));
+  const tmpDir = await import_promises4.default.mkdtemp(import_path15.default.join(import_os5.default.tmpdir(), "prpm-"));
   const cleanup = async () => {
     try {
-      await import_promises2.default.rm(tmpDir, { recursive: true, force: true });
+      await import_promises4.default.rm(tmpDir, { recursive: true, force: true });
     } catch {
     }
   };
@@ -17118,7 +17118,7 @@ async function extractTarball(tarball, packageId) {
     "LICENSE.md"
   ]);
   try {
-    const extract2 = tar.extract({
+    const extract3 = tar2.extract({
       cwd: tmpDir,
       strict: true,
       // Enable strict mode to reject malformed archives
@@ -17133,19 +17133,19 @@ async function extractTarball(tarball, packageId) {
           console.warn(`   \u26A0\uFE0F  Blocked symlink in package: ${entryPath}`);
           return false;
         }
-        if (hasUnsafePathPatterns(entryPath)) {
+        if (hasUnsafePathPatterns2(entryPath)) {
           console.warn(`   \u26A0\uFE0F  Blocked unsafe path in package: ${entryPath}`);
           return false;
         }
-        if (!isPathSafe(tmpDir, entryPath)) {
+        if (!isPathSafe2(tmpDir, entryPath)) {
           console.warn(`   \u26A0\uFE0F  Blocked path traversal attempt: ${entryPath}`);
           return false;
         }
         return true;
       }
     });
-    await (0, import_promises.pipeline)(import_stream.Readable.from(decompressed), extract2);
-    const extractedFiles = await collectExtractedFiles(tmpDir, excludedNames, import_promises2.default);
+    await (0, import_promises3.pipeline)(import_stream2.Readable.from(decompressed), extract3);
+    const extractedFiles = await collectExtractedFiles(tmpDir, excludedNames, import_promises4.default);
     if (extractedFiles.length === 0) {
       throw new CLIError("Package archive contains no valid files");
     }
@@ -17163,15 +17163,15 @@ async function extractTarball(tarball, packageId) {
     await cleanup();
   }
 }
-async function collectExtractedFiles(rootDir, excludedNames, fs15) {
+async function collectExtractedFiles(rootDir, excludedNames, fs16) {
   const files = [];
   const dirs = [rootDir];
   while (dirs.length > 0) {
     const currentDir = dirs.pop();
     if (!currentDir) continue;
-    const entries = await fs15.readdir(currentDir, { withFileTypes: true });
+    const entries = await fs16.readdir(currentDir, { withFileTypes: true });
     for (const entry of entries) {
-      const fullPath = import_path14.default.join(currentDir, entry.name);
+      const fullPath = import_path15.default.join(currentDir, entry.name);
       if (entry.isDirectory()) {
         dirs.push(fullPath);
         continue;
@@ -17182,8 +17182,8 @@ async function collectExtractedFiles(rootDir, excludedNames, fs15) {
       if (excludedNames.has(entry.name)) {
         continue;
       }
-      const content = await fs15.readFile(fullPath, "utf-8");
-      const relativePath = import_path14.default.relative(rootDir, fullPath).split(import_path14.default.sep).join("/");
+      const content = await fs16.readFile(fullPath, "utf-8");
+      const relativePath = import_path15.default.relative(rootDir, fullPath).split(import_path15.default.sep).join("/");
       files.push({
         name: relativePath,
         content
@@ -17217,11 +17217,11 @@ async function installFromLockfile(options) {
         console.log(`  Installing ${displayName}...`);
         let locationOverride = options.location;
         if (!locationOverride && lockEntry.format === "agents.md" && lockEntry.installedPath) {
-          const baseName = import_path14.default.basename(lockEntry.installedPath);
+          const baseName = import_path15.default.basename(lockEntry.installedPath);
           if (baseName === "AGENTS.override.md") {
-            locationOverride = import_path14.default.dirname(lockEntry.installedPath);
+            locationOverride = import_path15.default.dirname(lockEntry.installedPath);
           } else if (baseName !== "AGENTS.md") {
-            locationOverride = import_path14.default.dirname(lockEntry.installedPath);
+            locationOverride = import_path15.default.dirname(lockEntry.installedPath);
           }
         }
         const manifestFile = (_a = lockEntry.progressiveDisclosure) == null ? void 0 : _a.manifestPath;
@@ -17266,7 +17266,7 @@ async function installFromLockfile(options) {
   }
 }
 function createInstallCommand() {
-  const command = new import_commander11.Command("install");
+  const command = new import_commander12.Command("install");
   command.description("Install a package from the registry, or install all packages from prpm.lock if no package specified").argument("[package]", "Package to install (e.g., react-rules or react-rules@1.2.0). If omitted, installs all packages from prpm.lock").option("--version <version>", "Specific version to install").option("--as <format>", `Convert and install in specific format (${import_types.FORMATS.join(", ")})`).option("--format <format>", "Alias for --as").option("--location <path>", "Custom location for installed files (Agents.md or nested Cursor rules)").option("--subtype <subtype>", "Specify subtype when converting (skill, agent, rule, etc.)").option("--hook-mapping <strategy>", "Hook mapping strategy: auto (default), strict, skip", "auto").option("--frozen-lockfile", "Fail if lock file needs to be updated (for CI)").option("-y, --yes", "Auto-confirm prompts (overwrite files without asking)").option("--no-append", "Skip adding skill to manifest file (skill files only)").option("--manifest-file <filename>", "Custom manifest filename for progressive disclosure").option("--eager", "Force skill/agent to always activate (not on-demand)").option("--lazy", "Use default on-demand activation (overrides package eager setting)").action(async (packageSpec, options) => {
     const convertTo = options.format || options.as;
     const validFormats = import_types.FORMATS;
@@ -17315,27 +17315,27 @@ Valid strategies: ${VALID_HOOK_MAPPING_STRATEGIES.join(", ")}`
   });
   return command;
 }
-var import_commander11, import_registry_client5, import_stream, import_promises, tar, import_path14, import_zlib, import_promises2, import_os4, import_semver;
+var import_commander12, import_registry_client6, import_stream2, import_promises3, tar2, import_path15, import_zlib2, import_promises4, import_os5, import_semver;
 var init_install = __esm({
   "src/commands/install.ts"() {
     "use strict";
     init_cjs_shims();
-    import_commander11 = require("commander");
+    import_commander12 = require("commander");
     init_source();
-    import_registry_client5 = require("@pr-pm/registry-client");
+    import_registry_client6 = require("@pr-pm/registry-client");
     init_user_config();
     init_filesystem();
     init_telemetry();
     init_types();
-    import_stream = require("stream");
-    import_promises = require("stream/promises");
-    tar = __toESM(require("tar"));
+    import_stream2 = require("stream");
+    import_promises3 = require("stream/promises");
+    tar2 = __toESM(require("tar"));
     init_errors();
     init_prompts();
-    import_path14 = __toESM(require("path"));
-    import_zlib = __toESM(require("zlib"));
-    import_promises2 = __toESM(require("fs/promises"));
-    import_os4 = __toESM(require("os"));
+    import_path15 = __toESM(require("path"));
+    import_zlib2 = __toESM(require("zlib"));
+    import_promises4 = __toESM(require("fs/promises"));
+    import_os5 = __toESM(require("os"));
     import_semver = __toESM(require("semver"));
     init_collections();
     init_lockfile();
@@ -17441,7 +17441,7 @@ async function fileExists2(filePath) {
 }
 async function scanDirectory2(config, cwd) {
   const packages = [];
-  const fullDir = import_path20.default.join(cwd, config.directory);
+  const fullDir = import_path21.default.join(cwd, config.directory);
   if (!await directoryExists2(fullDir)) {
     return packages;
   }
@@ -17449,13 +17449,13 @@ async function scanDirectory2(config, cwd) {
   if (config.nested) {
     for (const entry of entries) {
       if (!entry.isDirectory()) continue;
-      const packageDir = import_path20.default.join(fullDir, entry.name);
+      const packageDir = import_path21.default.join(fullDir, entry.name);
       if (config.nestedIndicator) {
-        const indicatorPath = import_path20.default.join(packageDir, config.nestedIndicator);
+        const indicatorPath = import_path21.default.join(packageDir, config.nestedIndicator);
         if (!await fileExists2(indicatorPath)) continue;
         const packageFiles = await collectPackageFiles(packageDir, config.directory, entry.name);
         const metadata = await extractMetadata2(indicatorPath);
-        const relativePath = import_path20.default.join(config.directory, entry.name, config.nestedIndicator);
+        const relativePath = import_path21.default.join(config.directory, entry.name, config.nestedIndicator);
         packages.push({
           name: metadata.name || filenameToPackageName(entry.name),
           format: config.format,
@@ -17470,8 +17470,8 @@ async function scanDirectory2(config, cwd) {
         for (const subEntry of subEntries) {
           if (!subEntry.isFile()) continue;
           if (!matchesPattern(subEntry.name, config.patterns)) continue;
-          const filePath = import_path20.default.join(packageDir, subEntry.name);
-          const relativePath = import_path20.default.join(config.directory, entry.name, subEntry.name);
+          const filePath = import_path21.default.join(packageDir, subEntry.name);
+          const relativePath = import_path21.default.join(config.directory, entry.name, subEntry.name);
           const metadata = await extractMetadata2(filePath);
           packages.push({
             name: metadata.name || filenameToPackageName(entry.name),
@@ -17489,8 +17489,8 @@ async function scanDirectory2(config, cwd) {
     for (const entry of entries) {
       if (!entry.isFile()) continue;
       if (!matchesPattern(entry.name, config.patterns)) continue;
-      const filePath = import_path20.default.join(fullDir, entry.name);
-      const relativePath = import_path20.default.join(config.directory, entry.name);
+      const filePath = import_path21.default.join(fullDir, entry.name);
+      const relativePath = import_path21.default.join(config.directory, entry.name);
       const metadata = await extractMetadata2(filePath);
       packages.push({
         name: metadata.name || filenameToPackageName(entry.name),
@@ -17510,22 +17510,22 @@ async function collectPackageFiles(packageDir, baseDir, packageName) {
   async function walkDir(dir, relativeBase) {
     const entries = await import_fs16.promises.readdir(dir, { withFileTypes: true });
     for (const entry of entries) {
-      const fullPath = import_path20.default.join(dir, entry.name);
-      const relativePath = import_path20.default.join(relativeBase, entry.name);
+      const fullPath = import_path21.default.join(dir, entry.name);
+      const relativePath = import_path21.default.join(relativeBase, entry.name);
       if (entry.isDirectory()) {
         if (["node_modules", "dist", ".git", "coverage"].includes(entry.name)) {
           continue;
         }
         await walkDir(fullPath, relativePath);
       } else if (entry.isFile()) {
-        const ext = import_path20.default.extname(entry.name).toLowerCase();
+        const ext = import_path21.default.extname(entry.name).toLowerCase();
         if ([".md", ".json", ".js", ".ts", ".toml"].includes(ext)) {
           files.push(relativePath);
         }
       }
     }
   }
-  await walkDir(packageDir, import_path20.default.join(baseDir, packageName));
+  await walkDir(packageDir, import_path21.default.join(baseDir, packageName));
   return files;
 }
 function buildRootManifestFiles() {
@@ -17547,7 +17547,7 @@ async function scanForPackages(cwd = process.cwd()) {
     allPackages.push(...packages);
   }
   for (const { file, format } of ROOT_MANIFEST_FILES) {
-    const filePath = import_path20.default.join(cwd, file);
+    const filePath = import_path21.default.join(cwd, file);
     if (await fileExists2(filePath)) {
       const metadata = await extractMetadata2(filePath);
       allPackages.push({
@@ -17561,7 +17561,7 @@ async function scanForPackages(cwd = process.cwd()) {
       });
     }
   }
-  const copilotInstructionsPath = import_path20.default.join(cwd, ".github/copilot-instructions.md");
+  const copilotInstructionsPath = import_path21.default.join(cwd, ".github/copilot-instructions.md");
   if (await fileExists2(copilotInstructionsPath)) {
     const metadata = await extractMetadata2(copilotInstructionsPath);
     allPackages.push({
@@ -17576,13 +17576,13 @@ async function scanForPackages(cwd = process.cwd()) {
   }
   return allPackages;
 }
-var import_fs16, import_path20, SCAN_CONFIGS, ROOT_MANIFEST_FILES;
+var import_fs16, import_path21, SCAN_CONFIGS, ROOT_MANIFEST_FILES;
 var init_package_scanner = __esm({
   "src/core/package-scanner.ts"() {
     "use strict";
     init_cjs_shims();
     import_fs16 = require("fs");
-    import_path20 = __toESM(require("path"));
+    import_path21 = __toESM(require("path"));
     init_dist();
     SCAN_CONFIGS = buildScanConfigs();
     ROOT_MANIFEST_FILES = buildRootManifestFiles();
@@ -17592,7 +17592,7 @@ var init_package_scanner = __esm({
 // src/core/package-reconciler.ts
 async function readManifest(cwd = process.cwd()) {
   try {
-    const manifestPath = import_path21.default.join(cwd, "prpm.json");
+    const manifestPath = import_path22.default.join(cwd, "prpm.json");
     const content = await import_fs17.promises.readFile(manifestPath, "utf-8");
     const raw = JSON.parse(content);
     if ("packages" in raw && Array.isArray(raw.packages)) {
@@ -17675,7 +17675,7 @@ async function reconcilePackages(detected, manifest, cwd = process.cwd()) {
     const manifestPkg = manifest[mi];
     let anyFileExists = false;
     for (const file of manifestPkg.files) {
-      const fullPath = import_path21.default.join(cwd, file);
+      const fullPath = import_path22.default.join(cwd, file);
       if (await fileExists3(fullPath)) {
         anyFileExists = true;
         break;
@@ -17744,7 +17744,7 @@ function createManifestFromDetected(packages, defaults) {
       files: pkg.files
     };
   }
-  const projectName = import_path21.default.basename(process.cwd()).toLowerCase().replace(/[^a-z0-9-]/g, "-");
+  const projectName = import_path22.default.basename(process.cwd()).toLowerCase().replace(/[^a-z0-9-]/g, "-");
   return {
     name: `${projectName}-packages`,
     version: "1.0.0",
@@ -17755,13 +17755,13 @@ function createManifestFromDetected(packages, defaults) {
     packages: packages.map(detectedToManifest)
   };
 }
-var import_fs17, import_path21;
+var import_fs17, import_path22;
 var init_package_reconciler = __esm({
   "src/core/package-reconciler.ts"() {
     "use strict";
     init_cjs_shims();
     import_fs17 = require("fs");
-    import_path21 = __toESM(require("path"));
+    import_path22 = __toESM(require("path"));
   }
 });
@@ -17812,7 +17812,7 @@ ${question}`);
 }
 async function extractMetadataFromFile(filePath) {
   try {
-    const content = await (0, import_promises8.readFile)(filePath, "utf-8");
+    const content = await (0, import_promises10.readFile)(filePath, "utf-8");
     const metadata = {};
     const frontmatterMatch = content.match(/^---\s*\n([\s\S]*?)\n---/);
     if (frontmatterMatch) {
@@ -17876,10 +17876,10 @@ function getDefaultAuthor() {
 async function createExampleFiles(format, files, packageName) {
   const templates = EXAMPLE_TEMPLATES[format] || {};
   for (const file of files) {
-    const filePath = (0, import_path22.join)(process.cwd(), file);
-    const dirPath = (0, import_path22.join)(filePath, "..");
+    const filePath = (0, import_path23.join)(process.cwd(), file);
+    const dirPath = (0, import_path23.join)(filePath, "..");
     if (!(0, import_fs18.existsSync)(dirPath)) {
-      await (0, import_promises8.mkdir)(dirPath, { recursive: true });
+      await (0, import_promises10.mkdir)(dirPath, { recursive: true });
     }
     if ((0, import_fs18.existsSync)(filePath)) {
       console.log(`  Skipping ${file} (already exists)`);
@@ -17890,12 +17890,12 @@ async function createExampleFiles(format, files, packageName) {
 Add your content here.
 `;
     content = content.replace(/example-skill/g, packageName);
-    await (0, import_promises8.writeFile)(filePath, content, "utf-8");
+    await (0, import_promises10.writeFile)(filePath, content, "utf-8");
     console.log(`  Created ${file}`);
   }
 }
 async function createReadme(config) {
-  const readmePath = (0, import_path22.join)(process.cwd(), "README.md");
+  const readmePath = (0, import_path23.join)(process.cwd(), "README.md");
   if ((0, import_fs18.existsSync)(readmePath)) {
     console.log("  Skipping README.md (already exists)");
     return;
@@ -17926,7 +17926,7 @@ ${config.author}
 ${config.license}
 `;
-  await (0, import_promises8.writeFile)(readmePath, content, "utf-8");
+  await (0, import_promises10.writeFile)(readmePath, content, "utf-8");
   console.log("  Created README.md");
 }
 function displayPackagesTable(packages) {
@@ -18005,7 +18005,7 @@ async function reviewMissingPackage(rl, pkg, index, total) {
   return await confirm(rl, "\n  Remove from prpm.json?", true);
 }
 async function smartInit(options) {
-  const manifestPath = (0, import_path22.join)(process.cwd(), "prpm.json");
+  const manifestPath = (0, import_path23.join)(process.cwd(), "prpm.json");
   const hasManifest = (0, import_fs18.existsSync)(manifestPath);
   console.log("\nScanning for packages...\n");
   const detected = await scanForPackages();
@@ -18079,7 +18079,7 @@ ${summaryParts.join(" and ")} package${changes === 1 ? "" : "s"}?`,
           packagesToRemove,
           existingManifest.isMultiPackage
         );
-        await (0, import_promises8.writeFile)(
+        await (0, import_promises10.writeFile)(
           manifestPath,
           JSON.stringify(updatedManifest, null, 2) + "\n",
           "utf-8"
@@ -18138,7 +18138,7 @@ Create multi-package prpm.json with these ${detected.length} packages?` : "\nCre
       author: defaultAuthor || void 0,
       license: "MIT"
     });
-    await (0, import_promises8.writeFile)(
+    await (0, import_promises10.writeFile)(
       manifestPath,
       JSON.stringify(manifest, null, 2) + "\n",
       "utf-8"
@@ -18156,7 +18156,7 @@ Create multi-package prpm.json with these ${detected.length} packages?` : "\nCre
   }
 }
 async function classicInit(options) {
-  const manifestPath = (0, import_path22.join)(process.cwd(), "prpm.json");
+  const manifestPath = (0, import_path23.join)(process.cwd(), "prpm.json");
   if ((0, import_fs18.existsSync)(manifestPath) && !options.force) {
     throw new Error(
       "prpm.json already exists. Use --force to overwrite, or run this command in a different directory."
@@ -18328,7 +18328,7 @@ Current files (${config.files.length}):`);
     manifest.tags = config.tags;
   }
   manifest.files = config.files;
-  await (0, import_promises8.writeFile)(
+  await (0, import_promises10.writeFile)(
     manifestPath,
     JSON.stringify(manifest, null, 2) + "\n",
     "utf-8"
@@ -18415,11 +18415,11 @@ async function scanMode(directories, options) {
     console.log("\u{1F50D} Dry run - no changes made\n");
     return;
   }
-  const prpmJsonPath = options.output || (0, import_path22.join)(process.cwd(), "prpm.json");
+  const prpmJsonPath = options.output || (0, import_path23.join)(process.cwd(), "prpm.json");
   let manifest;
   if (options.append) {
     try {
-      const existingContent = await (0, import_promises8.readFile)(prpmJsonPath, "utf-8");
+      const existingContent = await (0, import_promises10.readFile)(prpmJsonPath, "utf-8");
       const existing = JSON.parse(existingContent);
       if ("packages" in existing && Array.isArray(existing.packages)) {
         manifest = existing;
@@ -18465,7 +18465,7 @@ async function scanMode(directories, options) {
     manifest.packages.push(packageManifest);
     addedCount++;
   }
-  await (0, import_promises8.writeFile)(
+  await (0, import_promises10.writeFile)(
     prpmJsonPath,
     JSON.stringify(manifest, null, 2) + "\n",
     "utf-8"
@@ -18491,7 +18491,7 @@ async function initPackage(options, scanDirectories) {
   return smartInit(options);
 }
 function createInitCommand() {
-  const command = new import_commander12.Command("init");
+  const command = new import_commander13.Command("init");
   command.description("Initialize a new PRPM package with interactive prompts").argument("[directories...]", "Directories to scan (only used with --scan)").option("-y, --yes", "Skip prompts and use defaults").option("--private", "Create a private package").option("-f, --force", "Overwrite existing prpm.json").option(
     "-s, --scan",
     "Scan mode: discover packages in directories without prompts"
@@ -18517,14 +18517,14 @@ function createInitCommand() {
   });
   return command;
 }
-var import_commander12, import_promises8, import_path22, import_fs18, readline4, import_process, FORMAT_EXAMPLES, EXAMPLE_TEMPLATES;
+var import_commander13, import_promises10, import_path23, import_fs18, readline4, import_process, FORMAT_EXAMPLES, EXAMPLE_TEMPLATES;
 var init_init = __esm({
   "src/commands/init.ts"() {
     "use strict";
     init_cjs_shims();
-    import_commander12 = require("commander");
-    import_promises8 = require("fs/promises");
-    import_path22 = require("path");
+    import_commander13 = require("commander");
+    import_promises10 = require("fs/promises");
+    import_path23 = require("path");
     import_fs18 = require("fs");
     readline4 = __toESM(require("readline/promises"));
     import_process = require("process");
@@ -18907,9 +18907,9 @@ Include examples if helpful.
 // src/index.ts
 init_cjs_shims();
-var import_commander31 = require("commander");
+var import_commander32 = require("commander");
 var import_fs22 = require("fs");
-var import_path26 = require("path");
+var import_path27 = require("path");
 // src/commands/list.ts
 init_cjs_shims();
@@ -20364,24 +20364,325 @@ function createInfoCommand() {
   return command;
 }
+// src/commands/show.ts
+init_cjs_shims();
+var import_commander10 = require("commander");
+var import_registry_client4 = require("@pr-pm/registry-client");
+init_user_config();
+init_telemetry();
+init_errors();
+var import_stream = require("stream");
+var import_promises = require("stream/promises");
+var tar = __toESM(require("tar"));
+var import_zlib = __toESM(require("zlib"));
+var import_path14 = __toESM(require("path"));
+var import_os4 = __toESM(require("os"));
+var import_promises2 = __toESM(require("fs/promises"));
+function isPathSafe(targetDir, filePath) {
+  const resolvedPath = import_path14.default.resolve(targetDir, filePath);
+  const resolvedTarget = import_path14.default.resolve(targetDir);
+  return resolvedPath.startsWith(resolvedTarget + import_path14.default.sep) || resolvedPath === resolvedTarget;
+}
+function hasUnsafePathPatterns(filePath) {
+  if (filePath.includes("..")) return true;
+  if (filePath.startsWith("/")) return true;
+  if (/^[a-zA-Z]:/.test(filePath)) return true;
+  if (filePath.includes("\0")) return true;
+  return false;
+}
+function isBinaryContent(buffer) {
+  if (buffer.includes(0)) return true;
+  const sampleSize = Math.min(buffer.length, 512);
+  let nonPrintable = 0;
+  for (let i = 0; i < sampleSize; i++) {
+    const byte = buffer[i];
+    if (byte !== 9 && byte !== 10 && byte !== 13 && (byte < 32 || byte > 126)) {
+      nonPrintable++;
+    }
+  }
+  return nonPrintable / sampleSize > 0.3;
+}
+async function extractTarballContents(tarball) {
+  let decompressed;
+  try {
+    decompressed = await new Promise((resolve3, reject) => {
+      import_zlib.default.gunzip(tarball, (err, result) => {
+        if (err) {
+          reject(new Error(`Failed to decompress tarball: ${err.message}`));
+          return;
+        }
+        resolve3(result);
+      });
+    });
+  } catch (error) {
+    throw new CLIError(`Package decompression failed: ${error.message}`);
+  }
+  const tmpDir = await import_promises2.default.mkdtemp(import_path14.default.join(import_os4.default.tmpdir(), "prpm-show-"));
+  const cleanup = async () => {
+    try {
+      await import_promises2.default.rm(tmpDir, { recursive: true, force: true });
+    } catch {
+    }
+  };
+  try {
+    const extract3 = tar.extract({
+      cwd: tmpDir,
+      strict: true,
+      // Security: filter out dangerous entries before extraction
+      filter: (entryPath, entry) => {
+        const entryType = "type" in entry ? entry.type : null;
+        if (entryType === "SymbolicLink" || entryType === "Link") {
+          console.warn(`   \u26A0\uFE0F  Blocked symlink in package: ${entryPath}`);
+          return false;
+        }
+        if ("isSymbolicLink" in entry && entry.isSymbolicLink()) {
+          console.warn(`   \u26A0\uFE0F  Blocked symlink in package: ${entryPath}`);
+          return false;
+        }
+        if (hasUnsafePathPatterns(entryPath)) {
+          console.warn(`   \u26A0\uFE0F  Blocked unsafe path in package: ${entryPath}`);
+          return false;
+        }
+        if (!isPathSafe(tmpDir, entryPath)) {
+          console.warn(`   \u26A0\uFE0F  Blocked path traversal attempt: ${entryPath}`);
+          return false;
+        }
+        return true;
+      }
+    });
+    await (0, import_promises.pipeline)(import_stream.Readable.from(decompressed), extract3);
+    const files = [];
+    const dirs = [tmpDir];
+    while (dirs.length > 0) {
+      const currentDir = dirs.pop();
+      if (!currentDir) continue;
+      const entries = await import_promises2.default.readdir(currentDir, { withFileTypes: true });
+      for (const entry of entries) {
+        const fullPath = import_path14.default.join(currentDir, entry.name);
+        if (entry.isDirectory()) {
+          dirs.push(fullPath);
+          continue;
+        }
+        if (!entry.isFile()) {
+          continue;
+        }
+        const buffer = await import_promises2.default.readFile(fullPath);
+        const stats = await import_promises2.default.stat(fullPath);
+        const relativePath = import_path14.default.relative(tmpDir, fullPath).split(import_path14.default.sep).join("/");
+        const binary2 = isBinaryContent(buffer);
+        files.push({
+          name: relativePath,
+          content: binary2 ? `[Binary file - ${stats.size} bytes]` : buffer.toString("utf-8"),
+          size: stats.size,
+          isBinary: binary2
+        });
+      }
+    }
+    return files;
+  } finally {
+    await cleanup();
+  }
+}
+function formatSize(bytes) {
+  if (bytes < 1024) return `${bytes} B`;
+  if (bytes < 1024 * 1024) return `${(bytes / 1024).toFixed(1)} KB`;
+  return `${(bytes / (1024 * 1024)).toFixed(1)} MB`;
+}
+function getFileIcon(filename, isBinary2 = false) {
+  if (isBinary2) return "\u{1F512}";
+  const ext = import_path14.default.extname(filename).toLowerCase();
+  const iconMap = {
+    ".md": "\u{1F4C4}",
+    ".mdc": "\u{1F4CB}",
+    ".json": "\u{1F4E6}",
+    ".toml": "\u2699\uFE0F",
+    ".yaml": "\u2699\uFE0F",
+    ".yml": "\u2699\uFE0F",
+    ".ts": "\u{1F4DC}",
+    ".js": "\u{1F4DC}",
+    ".sh": "\u{1F527}",
+    ".txt": "\u{1F4DD}"
+  };
+  return iconMap[ext] || "\u{1F4C4}";
+}
+async function handleShow(packageSpec, options) {
+  const startTime = Date.now();
+  let success = false;
+  let error;
+  try {
+    let packageId;
+    let specVersion;
+    if (packageSpec.startsWith("@")) {
+      const match = packageSpec.match(/^(@[^/]+\/[^@]+)(?:@(.+))?$/);
+      if (!match) {
+        throw new Error("Invalid package spec format. Use: @scope/package or @scope/package@version");
+      }
+      packageId = match[1];
+      specVersion = match[2];
+    } else {
+      const parts = packageSpec.split("@");
+      packageId = parts[0];
+      specVersion = parts[1];
+    }
+    console.log(`\u{1F4E6} Fetching package contents for "${packageId}"...`);
+    const config = await getConfig();
+    const client = (0, import_registry_client4.getRegistryClient)(config);
+    const pkg = await client.getPackage(packageId);
+    let tarballUrl;
+    let actualVersion;
+    if (specVersion && specVersion !== "latest") {
+      const versionInfo = await client.getPackageVersion(packageId, specVersion);
+      tarballUrl = versionInfo.tarball_url;
+      actualVersion = specVersion;
+    } else {
+      if (!pkg.latest_version) {
+        throw new Error("No versions available for this package");
+      }
+      tarballUrl = pkg.latest_version.tarball_url;
+      actualVersion = pkg.latest_version.version;
+    }
+    console.log(`   Version: ${actualVersion}`);
+    console.log(`   \u2B07\uFE0F  Downloading package...`);
+    const tarball = await client.downloadPackage(tarballUrl);
+    console.log(`   \u{1F4C2} Extracting contents...
+`);
+    const files = await extractTarballContents(tarball);
+    if (files.length === 0) {
+      console.log("\u26A0\uFE0F  Package contains no files");
+      success = true;
+      return;
+    }
+    if (options.json) {
+      const output2 = {
+        package: packageId,
+        version: actualVersion,
+        format: pkg.format,
+        subtype: pkg.subtype,
+        description: pkg.description,
+        files: files.map((f) => ({
+          path: f.name,
+          size: f.size,
+          isBinary: f.isBinary,
+          content: options.full ? f.content : void 0
+        }))
+      };
+      console.log(JSON.stringify(output2, null, 2));
+      success = true;
+      return;
+    }
+    console.log("=".repeat(60));
+    console.log(`  ${pkg.name} v${actualVersion}`);
+    console.log("=".repeat(60));
+    if (pkg.description) {
+      console.log(`
+\u{1F4DD} ${pkg.description}`);
+    }
+    console.log(`
+\u{1F4C2} Type: ${pkg.format} ${pkg.subtype}`);
+    console.log(`\u{1F4E6} Files: ${files.length}`);
+    console.log(`\u{1F4CA} Total size: ${formatSize(files.reduce((sum, f) => sum + f.size, 0))}`);
+    if (options.file) {
+      const targetFile = files.find(
+        (f) => f.name === options.file || f.name.endsWith("/" + options.file) || import_path14.default.basename(f.name) === options.file
+      );
+      if (!targetFile) {
+        console.log(`
+\u274C File not found: ${options.file}`);
+        console.log("\n\u{1F4CB} Available files:");
+        for (const file of files) {
+          console.log(`   ${getFileIcon(file.name, file.isBinary)} ${file.name}`);
+        }
+        throw new CLIError(`File "${options.file}" not found in package`, 1);
+      }
+      console.log("\n" + "\u2500".repeat(60));
+      console.log(`\u{1F4C4} ${targetFile.name} (${formatSize(targetFile.size)})`);
+      console.log("\u2500".repeat(60));
+      console.log(targetFile.content);
+      success = true;
+      return;
+    }
+    console.log("\n" + "\u2500".repeat(60));
+    console.log("  \u{1F4CB} Package Contents");
+    console.log("\u2500".repeat(60));
+    for (const file of files) {
+      const binaryLabel = file.isBinary ? " [binary]" : "";
+      console.log(`   ${getFileIcon(file.name, file.isBinary)} ${file.name} (${formatSize(file.size)})${binaryLabel}`);
+    }
+    if (options.full) {
+      console.log("\n" + "\u2550".repeat(60));
+      console.log("  \u{1F4D6} Full File Contents");
+      console.log("\u2550".repeat(60));
+      for (const file of files) {
+        console.log("\n" + "\u2500".repeat(60));
+        console.log(`\u{1F4C4} ${file.name}`);
+        console.log("\u2500".repeat(60));
+        console.log(file.content);
+      }
+    } else {
+      console.log("\n\u{1F4A1} Tip: Use --full to see complete file contents");
+      console.log(`   prpm show ${packageSpec} --full`);
+      console.log(`   prpm show ${packageSpec} --file <filename>  # View specific file`);
+    }
+    console.log("\n" + "=".repeat(60));
+    console.log(`
+\u{1F4BB} To install: prpm install ${packageId}`);
+    success = true;
+  } catch (err) {
+    error = err instanceof Error ? err.message : String(err);
+    if (err instanceof CLIError) {
+      throw err;
+    }
+    throw new CLIError(
+      `
+\u274C Failed to show package contents: ${error}
+\u{1F4A1} Tips:
+   - Check the package ID spelling
+   - Search for packages: prpm search <query>
+   - Get package info: prpm info <package>`,
+      1
+    );
+  } finally {
+    await telemetry.track({
+      command: "show",
+      success,
+      error,
+      duration: Date.now() - startTime,
+      data: {
+        packageName: packageSpec,
+        full: options.full,
+        json: options.json
+      }
+    });
+    await telemetry.shutdown();
+  }
+}
+function createShowCommand() {
+  const command = new import_commander10.Command("show");
+  command.description("Display package contents before installing").argument("<package>", "Package ID to show (e.g., @user/package or @user/package@1.0.0)").option("--full", "Show complete file contents").option("--file <name>", "Show contents of a specific file").option("--json", "Output in JSON format (for programmatic use)").action(async (packageSpec, options) => {
+    await handleShow(packageSpec, options);
+  });
+  return command;
+}
 // src/index.ts
 init_install();
 // src/commands/publish.ts
 init_cjs_shims();
-var import_commander13 = require("commander");
-var import_promises9 = require("fs/promises");
-var import_path23 = require("path");
+var import_commander14 = require("commander");
+var import_promises11 = require("fs/promises");
+var import_path24 = require("path");
 var import_fs19 = require("fs");
-var import_registry_client6 = require("@pr-pm/registry-client");
+var import_registry_client7 = require("@pr-pm/registry-client");
 init_user_config();
 init_telemetry();
 init_errors();
 // src/utils/license-extractor.ts
 init_cjs_shims();
-var import_promises3 = require("fs/promises");
-var import_path15 = require("path");
+var import_promises5 = require("fs/promises");
+var import_path16 = require("path");
 var import_fs14 = require("fs");
 var LICENSE_FILE_PATTERNS = [
   "LICENSE",
@@ -20431,10 +20732,10 @@ function generateLicenseUrl(repositoryUrl, fileName) {
 async function extractLicenseInfo(repositoryUrl) {
   const cwd = process.cwd();
   for (const fileName of LICENSE_FILE_PATTERNS) {
-    const filePath = (0, import_path15.join)(cwd, fileName);
+    const filePath = (0, import_path16.join)(cwd, fileName);
     try {
-      await (0, import_promises3.access)(filePath, import_fs14.constants.R_OK);
-      const text = await (0, import_promises3.readFile)(filePath, "utf-8");
+      await (0, import_promises5.access)(filePath, import_fs14.constants.R_OK);
+      const text = await (0, import_promises5.readFile)(filePath, "utf-8");
       const type2 = detectLicenseType(text);
       const url = generateLicenseUrl(repositoryUrl, fileName);
       return {
@@ -20466,8 +20767,8 @@ function validateLicenseInfo(licenseInfo, packageName) {
 // src/utils/snippet-extractor.ts
 init_cjs_shims();
-var import_promises4 = require("fs/promises");
-var import_path16 = require("path");
+var import_promises6 = require("fs/promises");
+var import_path17 = require("path");
 var MAX_SNIPPET_LENGTH = 2e3;
 async function extractSnippet(manifest) {
   const cwd = process.cwd();
@@ -20483,13 +20784,13 @@ async function extractSnippet(manifest) {
       const firstFile = manifest.files[0];
       fileName = typeof firstFile === "string" ? firstFile : firstFile.path;
     }
-    const fullPath = (0, import_path16.join)(cwd, fileName);
-    const stats = await (0, import_promises4.stat)(fullPath);
+    const fullPath = (0, import_path17.join)(cwd, fileName);
+    const stats = await (0, import_promises6.stat)(fullPath);
     if (stats.isDirectory()) {
       console.warn(`\u26A0\uFE0F  Skipping snippet extraction: "${fullPath}" is a directory`);
       return null;
     }
-    const content = await (0, import_promises4.readFile)(fullPath, "utf-8");
+    const content = await (0, import_promises6.readFile)(fullPath, "utf-8");
     if (content.length <= MAX_SNIPPET_LENGTH) {
       return content.trim();
     }
@@ -20572,7 +20873,7 @@ async function executePrepublishOnly(scripts, options = {}) {
 // src/utils/format-file-validator.ts
 init_cjs_shims();
-var import_promises5 = require("fs/promises");
+var import_promises7 = require("fs/promises");
 init_dist();
 function normalizeFilePaths(files) {
   return files.map((file) => {
@@ -20598,7 +20899,7 @@ function getFormatType(format) {
 }
 async function validateMarkdownFile(filePath, formatType, subtype) {
   try {
-    const content = await (0, import_promises5.readFile)(filePath, "utf-8");
+    const content = await (0, import_promises7.readFile)(filePath, "utf-8");
     const result = validateMarkdown(formatType, content, subtype);
     return {
       valid: result.valid,
@@ -20617,7 +20918,7 @@ Stack: ${error.stack}` : String(error);
 }
 async function validateStructuredFile(filePath, formatType, subtype) {
   try {
-    const content = await (0, import_promises5.readFile)(filePath, "utf-8");
+    const content = await (0, import_promises7.readFile)(filePath, "utf-8");
     let data;
     try {
       data = JSON.parse(content);
@@ -20724,13 +21025,13 @@ async function validatePackageFiles(manifest) {
     }
   }
   if (manifest.format === "claude" && manifest.subtype === "skill") {
-    const hasSkillMd = filePaths.some((path11) => path11.endsWith("/SKILL.md") || path11 === "SKILL.md");
-    const mdFiles = filePaths.filter((path11) => {
+    const hasSkillMd = filePaths.some((path12) => path12.endsWith("/SKILL.md") || path12 === "SKILL.md");
+    const mdFiles = filePaths.filter((path12) => {
       var _a;
-      if (!path11.endsWith(".md")) return false;
-      const filename = ((_a = path11.split(/[\\/]/).pop()) == null ? void 0 : _a.toLowerCase()) || "";
+      if (!path12.endsWith(".md")) return false;
+      const filename = ((_a = path12.split(/[\\/]/).pop()) == null ? void 0 : _a.toLowerCase()) || "";
       if (filename === "readme.md") return false;
-      if (path11.includes("examples/") || path11.includes("example/") || path11.includes("tests/") || path11.includes("__tests__/") || path11.includes("docs/") || path11.includes("doc/")) return false;
+      if (path12.includes("examples/") || path12.includes("example/") || path12.includes("tests/") || path12.includes("__tests__/") || path12.includes("docs/") || path12.includes("doc/")) return false;
       return true;
     });
     if (!hasSkillMd && mdFiles.length === 0) {
@@ -20742,7 +21043,7 @@ async function validatePackageFiles(manifest) {
     }
   }
   if (manifest.format === "windsurf") {
-    const hasWindsurfRules = filePaths.some((path11) => path11.includes(".windsurf/rules"));
+    const hasWindsurfRules = filePaths.some((path12) => path12.includes(".windsurf/rules"));
     if (!hasWindsurfRules) {
       warnings.push("Windsurf packages typically use .windsurf/rules filename");
     }
@@ -20752,8 +21053,8 @@ async function validatePackageFiles(manifest) {
 // src/utils/manifest-loader.ts
 init_cjs_shims();
-var import_promises6 = require("fs/promises");
-var import_path18 = require("path");
+var import_promises8 = require("fs/promises");
+var import_path19 = require("path");
 // src/core/marketplace-converter.ts
 init_cjs_shims();
@@ -20920,13 +21221,13 @@ init_cjs_shims();
 var import_ajv2 = __toESM(require("ajv"));
 var import_ajv_formats2 = __toESM(require("ajv-formats"));
 var import_fs15 = require("fs");
-var import_path17 = require("path");
+var import_path18 = require("path");
 var schema2;
 var schemaCandidates = [
   // Source file layout (src/core → ../../schemas)
-  (0, import_path17.join)(__dirname, "../../schemas/prpm-manifest.schema.json"),
+  (0, import_path18.join)(__dirname, "../../schemas/prpm-manifest.schema.json"),
   // Bundled layout (dist/index.js → ../schemas)
-  (0, import_path17.join)(__dirname, "../schemas/prpm-manifest.schema.json")
+  (0, import_path18.join)(__dirname, "../schemas/prpm-manifest.schema.json")
 ];
 for (const candidate of schemaCandidates) {
   try {
@@ -20953,27 +21254,27 @@ function validateManifestSchema(manifest) {
   const valid = validate(manifest);
   if (!valid && validate.errors) {
     const errors = validate.errors.map((err) => {
-      const path11 = err.instancePath || "manifest";
+      const path12 = err.instancePath || "manifest";
       const message = err.message || "validation failed";
       if (err.keyword === "required") {
         const missingProp = err.params.missingProperty;
         return `Missing required field: ${missingProp}`;
       }
       if (err.keyword === "pattern") {
-        return `${path11}: ${message}. Value does not match required pattern.`;
+        return `${path12}: ${message}. Value does not match required pattern.`;
       }
       if (err.keyword === "enum") {
         const allowedValues = err.params.allowedValues;
-        return `${path11}: ${message}. Allowed values: ${allowedValues.join(", ")}`;
+        return `${path12}: ${message}. Allowed values: ${allowedValues.join(", ")}`;
       }
       if (err.keyword === "minLength" || err.keyword === "maxLength") {
         const limit = err.params.limit;
-        return `${path11}: ${message} (${err.keyword}: ${limit})`;
+        return `${path12}: ${message} (${err.keyword}: ${limit})`;
       }
       if (err.keyword === "oneOf") {
-        return `${path11}: must match exactly one schema (check if files array uses either all strings or all objects, not mixed)`;
+        return `${path12}: must match exactly one schema (check if files array uses either all strings or all objects, not mixed)`;
       }
-      return `${path11}: ${message}`;
+      return `${path12}: ${message}`;
     });
     return { valid: false, errors };
   }
@@ -20988,10 +21289,10 @@ function toOrganizationSlug(value) {
   return value.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").replace(/-+/g, "-");
 }
 async function findAndLoadManifests() {
-  const prpmJsonPath = (0, import_path18.join)(process.cwd(), "prpm.json");
+  const prpmJsonPath = (0, import_path19.join)(process.cwd(), "prpm.json");
   let prpmJsonExists = false;
   try {
-    const content = await (0, import_promises6.readFile)(prpmJsonPath, "utf-8");
+    const content = await (0, import_promises8.readFile)(prpmJsonPath, "utf-8");
     prpmJsonExists = true;
     const manifest = JSON.parse(content);
     const collections = [];
@@ -21049,13 +21350,13 @@ async function findAndLoadManifests() {
       throw error;
     }
   }
-  const marketplaceJsonPath = (0, import_path18.join)(
+  const marketplaceJsonPath = (0, import_path19.join)(
     process.cwd(),
     ".claude",
     "marketplace.json"
   );
   try {
-    const content = await (0, import_promises6.readFile)(marketplaceJsonPath, "utf-8");
+    const content = await (0, import_promises8.readFile)(marketplaceJsonPath, "utf-8");
     const marketplaceData = JSON.parse(content);
     if (!validateMarketplaceJson(marketplaceData)) {
       throw new Error("Invalid marketplace.json format");
@@ -21069,13 +21370,13 @@ async function findAndLoadManifests() {
     return { manifests, collections: [], source: ".claude/marketplace.json" };
   } catch (error) {
   }
-  const marketplaceJsonPluginPath = (0, import_path18.join)(
+  const marketplaceJsonPluginPath = (0, import_path19.join)(
     process.cwd(),
     ".claude-plugin",
     "marketplace.json"
   );
   try {
-    const content = await (0, import_promises6.readFile)(marketplaceJsonPluginPath, "utf-8");
+    const content = await (0, import_promises8.readFile)(marketplaceJsonPluginPath, "utf-8");
     const marketplaceData = JSON.parse(content);
     if (!validateMarketplaceJson(marketplaceData)) {
       throw new Error("Invalid marketplace.json format");
@@ -21126,7 +21427,7 @@ function validateManifest(manifest, contextLabel) {
   if (manifest.format === "claude" && manifest.subtype === "skill") {
     const filePaths = normalizeFilePaths2(manifest.files);
     const hasSkillMd = filePaths.some(
-      (path11) => path11.endsWith("/SKILL.md") || path11 === "SKILL.md"
+      (path12) => path12.endsWith("/SKILL.md") || path12 === "SKILL.md"
     );
     const mdFiles = filePaths.filter((filePath) => {
       var _a2;
@@ -21235,10 +21536,10 @@ function getSafePackageName(manifest, userInfo, fallbackName) {
 // src/utils/tarball-creator.ts
 init_cjs_shims();
-var import_promises7 = require("fs/promises");
-var import_path19 = require("path");
-var tar2 = __toESM(require("tar"));
-var import_os5 = require("os");
+var import_promises9 = require("fs/promises");
+var import_path20 = require("path");
+var tar3 = __toESM(require("tar"));
+var import_os6 = require("os");
 var import_crypto2 = require("crypto");
 var RELOCATION_CONFIG = {
   claude: {
@@ -21326,12 +21627,12 @@ var RELOCATION_CONFIG = {
   }
 };
 async function createTarball(manifest) {
-  const tmpDir = (0, import_path19.join)((0, import_os5.tmpdir)(), `prpm-${(0, import_crypto2.randomBytes)(8).toString("hex")}`);
-  const tarballPath = (0, import_path19.join)(tmpDir, "package.tar.gz");
-  const stagingDir = (0, import_path19.join)(tmpDir, "staging");
+  const tmpDir = (0, import_path20.join)((0, import_os6.tmpdir)(), `prpm-${(0, import_crypto2.randomBytes)(8).toString("hex")}`);
+  const tarballPath = (0, import_path20.join)(tmpDir, "package.tar.gz");
+  const stagingDir = (0, import_path20.join)(tmpDir, "staging");
   try {
-    await (0, import_promises7.mkdir)(tmpDir, { recursive: true });
-    await (0, import_promises7.mkdir)(stagingDir, { recursive: true });
+    await (0, import_promises9.mkdir)(tmpDir, { recursive: true });
+    await (0, import_promises9.mkdir)(stagingDir, { recursive: true });
     const filePaths = normalizeFilePaths2(manifest.files);
     const standardFiles = ["prpm.json", "README.md", "LICENSE"];
     for (const file of standardFiles) {
@@ -21343,18 +21644,18 @@ async function createTarball(manifest) {
     const fileRenames = /* @__PURE__ */ new Map();
     if (manifest.format === "claude" && manifest.subtype === "skill") {
       const hasSkillMd = filePaths.some(
-        (path11) => path11.endsWith("/SKILL.md") || path11 === "SKILL.md"
+        (path12) => path12.endsWith("/SKILL.md") || path12 === "SKILL.md"
       );
       if (!hasSkillMd) {
         const mdFiles = filePaths.filter(
-          (path11) => path11.endsWith(".md") && !path11.toLowerCase().includes("readme")
+          (path12) => path12.endsWith(".md") && !path12.toLowerCase().includes("readme")
         );
         if (mdFiles.length === 1) {
           const file = mdFiles[0];
           try {
-            await (0, import_promises7.stat)(file);
-            const dir = (0, import_path19.dirname)(file);
-            const newPath = dir === "." ? "SKILL.md" : (0, import_path19.join)(dir, "SKILL.md");
+            await (0, import_promises9.stat)(file);
+            const dir = (0, import_path20.dirname)(file);
+            const newPath = dir === "." ? "SKILL.md" : (0, import_path20.join)(dir, "SKILL.md");
             fileRenames.set(file, newPath);
             console.log(`   \u{1F4DD} Renaming ${file} \u2192 ${newPath}`);
           } catch {
@@ -21366,20 +21667,20 @@ async function createTarball(manifest) {
     const subtypeConfig = formatConfig == null ? void 0 : formatConfig[manifest.subtype || "rule"];
     if (subtypeConfig) {
       const contentFiles = filePaths.filter(
-        (path11) => !path11.toLowerCase().includes("readme") && !path11.toLowerCase().includes("license") && path11 !== "prpm.json" && (path11.endsWith(".md") || path11.endsWith(".mdc") || path11.endsWith(".json"))
+        (path12) => !path12.toLowerCase().includes("readme") && !path12.toLowerCase().includes("license") && path12 !== "prpm.json" && (path12.endsWith(".md") || path12.endsWith(".mdc") || path12.endsWith(".json"))
       );
       for (const file of contentFiles) {
         if (file.includes(subtypeConfig.checkPath)) {
           continue;
         }
         try {
-          await (0, import_promises7.stat)(file);
-          let fileName = (0, import_path19.basename)(file);
+          await (0, import_promises9.stat)(file);
+          let fileName = (0, import_path20.basename)(file);
           if (subtypeConfig.extension) {
             const nameWithoutExt = fileName.replace(/\.[^.]+$/, "");
             fileName = nameWithoutExt + subtypeConfig.extension;
           }
-          const newPath = (0, import_path19.join)(subtypeConfig.directory, fileName);
+          const newPath = (0, import_path20.join)(subtypeConfig.directory, fileName);
           fileRenames.set(file, newPath);
           console.log(`   \u{1F4DD} Relocating ${file} \u2192 ${newPath}`);
         } catch {
@@ -21388,11 +21689,11 @@ async function createTarball(manifest) {
     }
     for (const file of filePaths) {
       try {
-        await (0, import_promises7.stat)(file);
+        await (0, import_promises9.stat)(file);
         const targetPath = fileRenames.get(file) || file;
-        const stagingPath = (0, import_path19.join)(stagingDir, targetPath);
-        await (0, import_promises7.mkdir)((0, import_path19.dirname)(stagingPath), { recursive: true });
-        await (0, import_promises7.copyFile)(file, stagingPath);
+        const stagingPath = (0, import_path20.join)(stagingDir, targetPath);
+        await (0, import_promises9.mkdir)((0, import_path20.dirname)(stagingPath), { recursive: true });
+        await (0, import_promises9.copyFile)(file, stagingPath);
         existingFiles.push(targetPath);
       } catch {
       }
@@ -21400,7 +21701,7 @@ async function createTarball(manifest) {
     if (existingFiles.length === 0) {
       throw new Error("No package files found to include in tarball");
     }
-    await tar2.create(
+    await tar3.create(
       {
         gzip: true,
         file: tarballPath,
@@ -21408,7 +21709,7 @@ async function createTarball(manifest) {
       },
       existingFiles
     );
-    const tarballBuffer = await (0, import_promises7.readFile)(tarballPath);
+    const tarballBuffer = await (0, import_promises9.readFile)(tarballPath);
     const sizeMB = tarballBuffer.length / (1024 * 1024);
     if (sizeMB > 10) {
       throw new Error(
@@ -21420,7 +21721,7 @@ async function createTarball(manifest) {
     throw error;
   } finally {
     try {
-      await (0, import_promises7.rm)(tmpDir, { recursive: true, force: true });
+      await (0, import_promises9.rm)(tmpDir, { recursive: true, force: true });
     } catch {
     }
   }
@@ -21513,13 +21814,13 @@ async function handlePublish(options) {
       console.log("\u{1F916} CI Mode: Publishing without authentication\n");
     }
     console.log("\u{1F4E6} Publishing package...\n");
-    const prpmJsonPath = (0, import_path23.join)(process.cwd(), "prpm.json");
-    const marketplaceJsonPath = (0, import_path23.join)(
+    const prpmJsonPath = (0, import_path24.join)(process.cwd(), "prpm.json");
+    const marketplaceJsonPath = (0, import_path24.join)(
       process.cwd(),
       ".claude",
       "marketplace.json"
     );
-    const marketplaceJsonPluginPath = (0, import_path23.join)(
+    const marketplaceJsonPluginPath = (0, import_path24.join)(
       process.cwd(),
       ".claude-plugin",
       "marketplace.json"
@@ -21540,8 +21841,8 @@ async function handlePublish(options) {
     const { manifests, collections, source } = await findAndLoadManifests();
     if (source === "prpm.json (multi-package)" || source === "prpm.json") {
       try {
-        const prpmJsonPath2 = (0, import_path23.join)(process.cwd(), "prpm.json");
-        const prpmContent = await (0, import_promises9.readFile)(prpmJsonPath2, "utf-8");
+        const prpmJsonPath2 = (0, import_path24.join)(process.cwd(), "prpm.json");
+        const prpmContent = await (0, import_promises11.readFile)(prpmJsonPath2, "utf-8");
         const prpmManifest = JSON.parse(prpmContent);
         if (prpmManifest.scripts) {
           await executePrepublishOnly(prpmManifest.scripts);
@@ -21585,7 +21886,7 @@ async function handlePublish(options) {
 `);
     }
     console.log("\u{1F50D} Checking authentication...");
-    const client = (0, import_registry_client6.getRegistryClient)(config);
+    const client = (0, import_registry_client7.getRegistryClient)(config);
     let userInfo;
     try {
       userInfo = await client.whoami();
@@ -22130,7 +22431,7 @@ ${"=".repeat(60)}`);
   }
 }
 function createPublishCommand() {
-  return new import_commander13.Command("publish").description("Publish packages and collections to the registry").option(
+  return new import_commander14.Command("publish").description("Publish packages and collections to the registry").option(
     "--access <type>",
     "Package access (public or private) - overrides manifest setting"
   ).option("--tag <tag>", "NPM-style tag (e.g., latest, beta)", "latest").option("--dry-run", "Validate package without publishing").option(
@@ -22146,8 +22447,8 @@ function createPublishCommand() {
 // src/commands/deprecate.ts
 init_cjs_shims();
-var import_commander14 = require("commander");
-var import_registry_client7 = require("@pr-pm/registry-client");
+var import_commander15 = require("commander");
+var import_registry_client8 = require("@pr-pm/registry-client");
 init_user_config();
 init_telemetry();
 init_errors();
@@ -22162,7 +22463,7 @@ async function handleDeprecate(packageName, options) {
     if (!config.token) {
       throw new CLIError("\u274C Authentication required. Run `prpm login` first.", 1);
     }
-    const client = (0, import_registry_client7.getRegistryClient)(config);
+    const client = (0, import_registry_client8.getRegistryClient)(config);
     const action = options.undo ? "Undeprecating" : "Deprecating";
     console.log(`\u26A0\uFE0F  ${action} package: ${packageName}...
 `);
@@ -22210,7 +22511,7 @@ async function handleDeprecate(packageName, options) {
   }
 }
 function createDeprecateCommand() {
-  const command = new import_commander14.Command("deprecate");
+  const command = new import_commander15.Command("deprecate");
   command.description("Deprecate a package (owner only)").argument("<package>", "Package name to deprecate").option("--reason <reason>", "Reason for deprecation").option("--undo", "Remove deprecation status").action(async (packageName, options) => {
     await handleDeprecate(packageName, options);
   });
@@ -22219,8 +22520,8 @@ function createDeprecateCommand() {
 // src/commands/visibility.ts
 init_cjs_shims();
-var import_commander15 = require("commander");
-var import_registry_client8 = require("@pr-pm/registry-client");
+var import_commander16 = require("commander");
+var import_registry_client9 = require("@pr-pm/registry-client");
 init_user_config();
 init_telemetry();
 init_errors();
@@ -22241,7 +22542,7 @@ async function handleVisibility(packageName, options) {
       throw new CLIError("\u274C Must specify either --public or --private", 1);
     }
     visibility = options.public ? "public" : "private";
-    const client = (0, import_registry_client8.getRegistryClient)(config);
+    const client = (0, import_registry_client9.getRegistryClient)(config);
     console.log(`\u{1F504} Setting package visibility: ${packageName} -> ${visibility}...
 `);
     const result = await client.setPackageVisibility(packageName, visibility);
@@ -22284,7 +22585,7 @@ async function handleVisibility(packageName, options) {
   }
 }
 function createVisibilityCommand() {
-  const command = new import_commander15.Command("visibility");
+  const command = new import_commander16.Command("visibility");
   command.description("Change package visibility (owner only)").argument("<package>", "Package name to update").option("--public", "Make the package public (visible in search)").option("--private", "Make the package private (org members only)").action(async (packageName, options) => {
     await handleVisibility(packageName, options);
   });
@@ -22293,7 +22594,7 @@ function createVisibilityCommand() {
 // src/commands/login.ts
 init_cjs_shims();
-var import_commander16 = require("commander");
+var import_commander17 = require("commander");
 var jwt = __toESM(require("jsonwebtoken"));
 init_telemetry();
 init_user_config();
@@ -22460,16 +22761,16 @@ async function handleLogin(options) {
   }
 }
 function createLoginCommand() {
-  return new import_commander16.Command("login").description("Login to the PRMP registry").option("--token <token>", "Login with a personal access token").action(async (options) => {
+  return new import_commander17.Command("login").description("Login to the PRMP registry").option("--token <token>", "Login with a personal access token").action(async (options) => {
     await handleLogin(options);
   });
 }
 // src/commands/whoami.ts
 init_cjs_shims();
-var import_commander17 = require("commander");
+var import_commander18 = require("commander");
 init_user_config();
-var import_registry_client9 = require("@pr-pm/registry-client");
+var import_registry_client10 = require("@pr-pm/registry-client");
 init_telemetry();
 init_errors();
 async function handleWhoami() {
@@ -22485,7 +22786,7 @@ async function handleWhoami() {
       return;
     }
     try {
-      const client = (0, import_registry_client9.getRegistryClient)(config);
+      const client = (0, import_registry_client10.getRegistryClient)(config);
       const userProfile = await client.getUserProfile(config.username);
       console.log(`
 \u{1F464} ${userProfile.username}${userProfile.verified_author ? " \u2713" : ""}`);
@@ -22525,7 +22826,7 @@ async function handleWhoami() {
   }
 }
 function createWhoamiCommand() {
-  return new import_commander17.Command("whoami").description("Show current logged-in user").action(async () => {
+  return new import_commander18.Command("whoami").description("Show current logged-in user").action(async () => {
     await handleWhoami();
   });
 }
@@ -22535,8 +22836,8 @@ init_collections();
 // src/commands/outdated.ts
 init_cjs_shims();
-var import_commander18 = require("commander");
-var import_registry_client10 = require("@pr-pm/registry-client");
+var import_commander19 = require("commander");
+var import_registry_client11 = require("@pr-pm/registry-client");
 init_user_config();
 init_lockfile();
 init_telemetry();
@@ -22548,7 +22849,7 @@ async function handleOutdated() {
   try {
     console.log("\u{1F50D} Checking for package updates...\n");
     const config = await getConfig();
-    const client = (0, import_registry_client10.getRegistryClient)(config);
+    const client = (0, import_registry_client11.getRegistryClient)(config);
     const installedPackages = await listPackages();
     if (installedPackages.length === 0) {
       console.log("No packages installed.");
@@ -22638,15 +22939,15 @@ function getUpdateType(current, latest) {
   return "patch";
 }
 function createOutdatedCommand() {
-  return new import_commander18.Command("outdated").description("Check for package updates").action(async () => {
+  return new import_commander19.Command("outdated").description("Check for package updates").action(async () => {
     await handleOutdated();
   });
 }
 // src/commands/update.ts
 init_cjs_shims();
-var import_commander19 = require("commander");
-var import_registry_client11 = require("@pr-pm/registry-client");
+var import_commander20 = require("commander");
+var import_registry_client12 = require("@pr-pm/registry-client");
 init_user_config();
 init_lockfile();
 init_install();
@@ -22659,7 +22960,7 @@ async function handleUpdate(packageName, options = {}) {
   let updatedCount = 0;
   try {
     const config = await getConfig();
-    const client = (0, import_registry_client11.getRegistryClient)(config);
+    const client = (0, import_registry_client12.getRegistryClient)(config);
     const installedPackages = await listPackages();
     if (installedPackages.length === 0) {
       console.log("No packages installed.");
@@ -22751,7 +23052,7 @@ function getUpdateType2(current, latest) {
   return "patch";
 }
 function createUpdateCommand() {
-  return new import_commander19.Command("update").description(
+  return new import_commander20.Command("update").description(
     "Update packages to latest compatible versions (minor/patch only)"
   ).argument("[package]", "Specific package to update (optional)").option("--all", "Update all packages").action(async (packageName, options) => {
     await handleUpdate(packageName, options);
@@ -22760,8 +23061,8 @@ function createUpdateCommand() {
 // src/commands/upgrade.ts
 init_cjs_shims();
-var import_commander20 = require("commander");
-var import_registry_client12 = require("@pr-pm/registry-client");
+var import_commander21 = require("commander");
+var import_registry_client13 = require("@pr-pm/registry-client");
 init_user_config();
 init_lockfile();
 init_install();
@@ -22775,7 +23076,7 @@ async function handleUpgrade(packageName, options = {}) {
   let upgradedCount = 0;
   try {
     const config = await getConfig();
-    const client = (0, import_registry_client12.getRegistryClient)(config);
+    const client = (0, import_registry_client13.getRegistryClient)(config);
     const installedPackages = await listPackages();
     if (installedPackages.length === 0) {
       console.log("No packages installed.");
@@ -22942,7 +23243,7 @@ function getUpdateType3(current, latest) {
   return "patch";
 }
 function createUpgradeCommand() {
-  return new import_commander20.Command("upgrade").description(
+  return new import_commander21.Command("upgrade").description(
     "Upgrade packages to latest versions (including major updates)"
   ).argument("[package]", "Specific package to upgrade (optional)").option("--all", "Upgrade all packages").option("--force", "Skip warning for major version upgrades").action(
     async (packageName, options) => {
@@ -22953,7 +23254,7 @@ function createUpgradeCommand() {
 // src/commands/schema.ts
 init_cjs_shims();
-var import_commander21 = require("commander");
+var import_commander22 = require("commander");
 init_errors();
 async function handleSchema() {
   try {
@@ -22970,7 +23271,7 @@ async function handleSchema() {
   }
 }
 function createSchemaCommand() {
-  const command = new import_commander21.Command("schema");
+  const command = new import_commander22.Command("schema");
   command.description("Display the PRPM manifest JSON schema").action(async () => {
     await handleSchema();
   });
@@ -22982,7 +23283,7 @@ init_init();
 // src/commands/config.ts
 init_cjs_shims();
-var import_commander22 = require("commander");
+var import_commander23 = require("commander");
 init_user_config();
 init_errors();
 async function handleConfigGet(key) {
@@ -23073,7 +23374,7 @@ async function handleConfigDelete(key) {
   }
 }
 function createConfigCommand() {
-  const command = new import_commander22.Command("config").description("Manage CLI configuration");
+  const command = new import_commander23.Command("config").description("Manage CLI configuration");
   command.command("list").alias("ls").description("List all configuration values").action(async () => {
     await handleConfigList();
   });
@@ -23094,9 +23395,9 @@ function createConfigCommand() {
 // src/commands/catalog.ts
 init_cjs_shims();
-var import_commander23 = require("commander");
+var import_commander24 = require("commander");
 function createCatalogCommand() {
-  return new import_commander23.Command("catalog").description(
+  return new import_commander24.Command("catalog").description(
     "[DEPRECATED] Use 'prpm init --scan' instead. Discover and catalog packages."
   ).argument("[directories...]", "Directories to scan for packages").option("-o, --output <path>", "Output path for prpm.json").option("-a, --append", "Append to existing prpm.json").option("--dry-run", "Show what would be cataloged without making changes").action(
     async (directories, options) => {
@@ -23135,12 +23436,12 @@ function createCatalogCommand() {
 // src/commands/playground.ts
 init_cjs_shims();
-var import_commander24 = require("commander");
+var import_commander25 = require("commander");
 init_user_config();
 init_telemetry();
 var readline5 = __toESM(require("readline"));
-var fs13 = __toESM(require("fs"));
-var path10 = __toESM(require("path"));
+var fs14 = __toESM(require("fs"));
+var path11 = __toESM(require("path"));
 init_errors();
 function createReadline() {
   return readline5.createInterface({
@@ -23258,11 +23559,11 @@ async function runCustomPrompt(customPrompt, input2, options, sessionId) {
   return response.json();
 }
 function readPromptFile(filePath) {
-  const absolutePath = path10.resolve(filePath);
-  if (!fs13.existsSync(absolutePath)) {
+  const absolutePath = path11.resolve(filePath);
+  if (!fs14.existsSync(absolutePath)) {
     throw new Error(`Prompt file not found: ${filePath}`);
   }
-  return fs13.readFileSync(absolutePath, "utf-8");
+  return fs14.readFileSync(absolutePath, "utf-8");
 }
 function displayResponse(result, showStats = true) {
   const lastMessage = result.conversation[result.conversation.length - 1];
@@ -23575,7 +23876,7 @@ async function handlePlayground(options) {
   }
 }
 function createPlaygroundCommand() {
-  const command = new import_commander24.Command("playground");
+  const command = new import_commander25.Command("playground");
   command.description("Test a package or custom prompt with AI models in the playground").option("-p, --package <name>", "Package name to test").option("--input <text>", "Input text to send to the model (omit for interactive mode)").option(
     "-m, --model <model>",
     "AI model to use (sonnet, opus, gpt-4o, gpt-4o-mini, gpt-4-turbo)",
@@ -23644,7 +23945,7 @@ Note: Playground usage requires credits. Run 'prpm credits' to check balance.
 // src/commands/credits.ts
 init_cjs_shims();
-var import_commander25 = require("commander");
+var import_commander26 = require("commander");
 init_user_config();
 init_telemetry();
 init_errors();
@@ -23771,7 +24072,7 @@ async function handleCredits(options) {
   }
 }
 function createCreditsCommand() {
-  const command = new import_commander25.Command("credits");
+  const command = new import_commander26.Command("credits");
   command.description("Check playground credits balance and transaction history").option("-h, --history", "Show transaction history instead of balance", false).option("-l, --limit <number>", "Number of transactions to show in history", "10").addHelpText(
     "after",
     `
@@ -23806,7 +24107,7 @@ Get more credits:
 // src/commands/subscribe.ts
 init_cjs_shims();
-var import_commander26 = require("commander");
+var import_commander27 = require("commander");
 init_user_config();
 init_telemetry();
 var import_child_process2 = require("child_process");
@@ -23965,7 +24266,7 @@ async function handleSubscribe() {
   }
 }
 function createSubscribeCommand() {
-  const command = new import_commander26.Command("subscribe");
+  const command = new import_commander27.Command("subscribe");
   command.description("Subscribe to PRPM+ for monthly playground credits and benefits").addHelpText(
     "after",
     `
@@ -24006,7 +24307,7 @@ Note: You can cancel anytime from https://prpm.dev/settings/billing
 // src/commands/buy-credits.ts
 init_cjs_shims();
-var import_commander27 = require("commander");
+var import_commander28 = require("commander");
 init_user_config();
 init_telemetry();
 var import_child_process3 = require("child_process");
@@ -24147,7 +24448,7 @@ async function handleBuyCredits(options) {
   }
 }
 function createBuyCreditsCommand() {
-  const command = new import_commander27.Command("buy-credits");
+  const command = new import_commander28.Command("buy-credits");
   command.description("Purchase one-time playground credits (never expire)").option(
     "-p, --package <package>",
     "Credit package to purchase (small, medium, large)"
@@ -24200,8 +24501,8 @@ Note: Purchased credits are one-time and never expire, unlike monthly credits.
 // src/commands/starred.ts
 init_cjs_shims();
-var import_commander28 = require("commander");
-var import_registry_client13 = require("@pr-pm/registry-client");
+var import_commander29 = require("commander");
+var import_registry_client14 = require("@pr-pm/registry-client");
 init_user_config();
 init_telemetry();
 init_errors();
@@ -24214,7 +24515,7 @@ async function handleStarred(options) {
       throw new CLIError("You must be logged in to view starred items. Run `prpm login` first.");
     }
     const registryUrl = config.registryUrl || process.env.PRPM_REGISTRY_URL || "https://registry.prpm.dev";
-    const client = (0, import_registry_client13.getRegistryClient)({ registryUrl, token });
+    const client = (0, import_registry_client14.getRegistryClient)({ registryUrl, token });
     const showPackages = options.packages || !options.packages && !options.collections;
     const showCollections = options.collections || !options.packages && !options.collections;
     const limit = options.limit || 100;
@@ -24316,91 +24617,91 @@ Total: ${packages.length + collections.length} starred items`);
   }
 }
 function createStarredCommand() {
-  const command = new import_commander28.Command("starred");
+  const command = new import_commander29.Command("starred");
   command.description("List your starred packages and collections").option("--packages", "Show only starred packages").option("--collections", "Show only starred collections").option("--format <format>", "Filter packages by format (cursor, claude, continue, windsurf, etc.)").option("--limit <number>", "Maximum number of items to fetch (default: 100)", (val) => parseInt(val, 10)).action(handleStarred);
   return command;
 }
 // src/commands/convert.ts
 init_cjs_shims();
-var import_commander29 = require("commander");
-var import_promises10 = require("fs/promises");
-var import_path24 = require("path");
+var import_commander30 = require("commander");
+var import_promises12 = require("fs/promises");
+var import_path25 = require("path");
 var import_fs20 = require("fs");
 var import_readline = require("readline");
 init_source();
 init_errors();
 init_dist();
 function getDefaultPath(format, filename, subtype, customName) {
-  const baseName = customName || (0, import_path24.basename)(filename, (0, import_path24.extname)(filename));
+  const baseName = customName || (0, import_path25.basename)(filename, (0, import_path25.extname)(filename));
   switch (format) {
     case "cursor":
       if (subtype === "slash-command") {
-        return (0, import_path24.join)(process.cwd(), ".cursor", "commands", `${baseName}.md`);
+        return (0, import_path25.join)(process.cwd(), ".cursor", "commands", `${baseName}.md`);
       }
       if (subtype === "hook") {
-        return (0, import_path24.join)(process.cwd(), ".cursor", "hooks", "hooks.json");
+        return (0, import_path25.join)(process.cwd(), ".cursor", "hooks", "hooks.json");
       }
-      return (0, import_path24.join)(process.cwd(), ".cursor", "rules", `${baseName}.mdc`);
+      return (0, import_path25.join)(process.cwd(), ".cursor", "rules", `${baseName}.mdc`);
     case "claude":
       if (subtype === "skill") {
-        return (0, import_path24.join)(process.cwd(), ".claude", "skills", baseName, "SKILL.md");
+        return (0, import_path25.join)(process.cwd(), ".claude", "skills", baseName, "SKILL.md");
       } else if (subtype === "slash-command") {
-        return (0, import_path24.join)(process.cwd(), ".claude", "commands", `${baseName}.md`);
+        return (0, import_path25.join)(process.cwd(), ".claude", "commands", `${baseName}.md`);
       } else {
-        return (0, import_path24.join)(process.cwd(), ".claude", "agents", `${baseName}.md`);
+        return (0, import_path25.join)(process.cwd(), ".claude", "agents", `${baseName}.md`);
       }
     case "windsurf":
-      return (0, import_path24.join)(process.cwd(), ".windsurf", "rules", `${baseName}.md`);
+      return (0, import_path25.join)(process.cwd(), ".windsurf", "rules", `${baseName}.md`);
     case "kiro":
       if (subtype === "hook") {
-        return (0, import_path24.join)(process.cwd(), ".kiro", "hooks", `${baseName}.kiro.hook`);
+        return (0, import_path25.join)(process.cwd(), ".kiro", "hooks", `${baseName}.kiro.hook`);
       }
       if (subtype === "agent") {
-        return (0, import_path24.join)(process.cwd(), ".kiro", "agents", `${baseName}.json`);
+        return (0, import_path25.join)(process.cwd(), ".kiro", "agents", `${baseName}.json`);
       }
-      return (0, import_path24.join)(process.cwd(), ".kiro", "steering", `${baseName}.md`);
+      return (0, import_path25.join)(process.cwd(), ".kiro", "steering", `${baseName}.md`);
     case "copilot":
-      return (0, import_path24.join)(process.cwd(), ".github", "instructions", `${baseName}.instructions.md`);
+      return (0, import_path25.join)(process.cwd(), ".github", "instructions", `${baseName}.instructions.md`);
     case "continue":
       if (subtype === "slash-command" || subtype === "prompt") {
-        return (0, import_path24.join)(process.cwd(), ".continue", "prompts", `${baseName}.md`);
+        return (0, import_path25.join)(process.cwd(), ".continue", "prompts", `${baseName}.md`);
       }
-      return (0, import_path24.join)(process.cwd(), ".continue", "rules", `${baseName}.md`);
+      return (0, import_path25.join)(process.cwd(), ".continue", "rules", `${baseName}.md`);
     case "agents.md":
-      return (0, import_path24.join)(process.cwd(), "agents.md");
+      return (0, import_path25.join)(process.cwd(), "agents.md");
     case "gemini":
-      return (0, import_path24.join)(process.cwd(), ".gemini", "commands", `${baseName}.toml`);
+      return (0, import_path25.join)(process.cwd(), ".gemini", "commands", `${baseName}.toml`);
     case "ruler":
-      return (0, import_path24.join)(process.cwd(), ".ruler", `${baseName}.md`);
+      return (0, import_path25.join)(process.cwd(), ".ruler", `${baseName}.md`);
     case "zed":
       if (subtype === "slash-command") {
-        return (0, import_path24.join)(process.cwd(), ".zed", "slash_commands", `${baseName}.md`);
+        return (0, import_path25.join)(process.cwd(), ".zed", "slash_commands", `${baseName}.md`);
       }
-      return (0, import_path24.join)(process.cwd(), ".zed", "extensions", `${baseName}.json`);
+      return (0, import_path25.join)(process.cwd(), ".zed", "extensions", `${baseName}.json`);
     case "opencode":
-      return (0, import_path24.join)(process.cwd(), ".opencode", `${baseName}.md`);
+      return (0, import_path25.join)(process.cwd(), ".opencode", `${baseName}.md`);
     case "aider":
-      return (0, import_path24.join)(process.cwd(), ".aider", `${baseName}.md`);
+      return (0, import_path25.join)(process.cwd(), ".aider", `${baseName}.md`);
     case "trae":
-      return (0, import_path24.join)(process.cwd(), ".trae", "rules", `${baseName}.md`);
+      return (0, import_path25.join)(process.cwd(), ".trae", "rules", `${baseName}.md`);
     case "replit":
-      return (0, import_path24.join)(process.cwd(), ".replit", `${baseName}.md`);
+      return (0, import_path25.join)(process.cwd(), ".replit", `${baseName}.md`);
     case "zencoder":
-      return (0, import_path24.join)(process.cwd(), ".zencoder", `${baseName}.md`);
+      return (0, import_path25.join)(process.cwd(), ".zencoder", `${baseName}.md`);
     case "droid":
-      return (0, import_path24.join)(process.cwd(), ".factory", `${baseName}.md`);
+      return (0, import_path25.join)(process.cwd(), ".factory", `${baseName}.md`);
     case "codex":
       if (subtype === "skill") {
-        return (0, import_path24.join)(process.cwd(), ".codex", "skills", baseName, "SKILL.md");
+        return (0, import_path25.join)(process.cwd(), ".codex", "skills", baseName, "SKILL.md");
       }
-      return (0, import_path24.join)(process.cwd(), "AGENTS.md");
+      return (0, import_path25.join)(process.cwd(), "AGENTS.md");
     default:
       throw new CLIError(`Unknown format: ${format}`);
   }
 }
 function detectFormat(content, filepath) {
-  const ext = (0, import_path24.extname)(filepath).toLowerCase();
+  const ext = (0, import_path25.extname)(filepath).toLowerCase();
   if (ext === ".mdc" || filepath.includes(".cursor/rules") || filepath.includes(".cursor/commands")) {
     return "cursor";
   }
@@ -24422,10 +24723,10 @@ function detectFormat(content, filepath) {
   if (filepath.includes(".continue/rules") || filepath.includes(".continue/prompts") || filepath.includes(".continuerules")) {
     return "continue";
   }
-  if ((0, import_path24.basename)(filepath) === "agents.md") {
+  if ((0, import_path25.basename)(filepath) === "agents.md") {
     return "agents.md";
   }
-  if ((0, import_path24.basename)(filepath) === "gemini-extension.json" || filepath.includes(".gemini/extensions")) {
+  if ((0, import_path25.basename)(filepath) === "gemini-extension.json" || filepath.includes(".gemini/extensions")) {
     return "gemini-extension";
   }
   if (ext === ".toml" || filepath.includes(".gemini/commands")) {
@@ -24478,7 +24779,7 @@ async function handleConvert(sourcePath, options) {
     console.log(source_default.dim("Reading source file..."));
     let content;
     try {
-      content = await (0, import_promises10.readFile)(sourcePath, "utf-8");
+      content = await (0, import_promises12.readFile)(sourcePath, "utf-8");
     } catch (error) {
       throw new CLIError(`Failed to read source file: ${error.message}`);
     }
@@ -24514,7 +24815,7 @@ async function handleConvert(sourcePath, options) {
         }
         canonicalPkg = fromCursor(content, metadata, {
           resolveFiles: hasFileReferences,
-          basePath: hasFileReferences ? (0, import_path24.dirname)(sourcePath) : void 0
+          basePath: hasFileReferences ? (0, import_path25.dirname)(sourcePath) : void 0
         });
         break;
       case "cursor-hooks":
@@ -24671,10 +24972,10 @@ async function handleConvert(sourcePath, options) {
         return;
       }
     }
-    const outputDir = (0, import_path24.dirname)(outputPath);
-    await (0, import_promises10.mkdir)(outputDir, { recursive: true });
+    const outputDir = (0, import_path25.dirname)(outputPath);
+    await (0, import_promises12.mkdir)(outputDir, { recursive: true });
     console.log(source_default.dim("Writing converted file..."));
-    await (0, import_promises10.writeFile)(outputPath, result.content, "utf-8");
+    await (0, import_promises12.writeFile)(outputPath, result.content, "utf-8");
     console.log(source_default.green(`\u2713 Converted file written to ${outputPath}`));
     console.log();
     if (options.to === "cursor") {
@@ -24698,7 +24999,7 @@ async function handleConvert(sourcePath, options) {
   }
 }
 function createConvertCommand() {
-  const command = new import_commander29.Command("convert").description("Convert AI prompt files between formats").argument("<source>", "Source file path to convert").option("-t, --to <format>", `Target format (${CLI_SUPPORTED_FORMATS.join(", ")})`).option("-s, --subtype <subtype>", "Target subtype (agent, skill, slash-command, rule, hook, prompt, etc.)").option("-o, --output <path>", "Output path (defaults to format-specific location)").option("-n, --name <name>", 'Custom output filename (without extension, e.g., "my-rule")').option("--hook-mapping <strategy>", "Hook mapping strategy: auto (default), strict, skip", "auto").option("-y, --yes", "Skip confirmation prompts").action(async (source, options) => {
+  const command = new import_commander30.Command("convert").description("Convert AI prompt files between formats").argument("<source>", "Source file path to convert").option("-t, --to <format>", `Target format (${CLI_SUPPORTED_FORMATS.join(", ")})`).option("-s, --subtype <subtype>", "Target subtype (agent, skill, slash-command, rule, hook, prompt, etc.)").option("-o, --output <path>", "Output path (defaults to format-specific location)").option("-n, --name <name>", 'Custom output filename (without extension, e.g., "my-rule")').option("--hook-mapping <strategy>", "Hook mapping strategy: auto (default), strict, skip", "auto").option("-y, --yes", "Skip confirmation prompts").action(async (source, options) => {
     try {
       if (!options.to) {
         throw new CLIError("Target format is required. Use --to <format>");
@@ -24747,9 +25048,9 @@ Valid subtypes: ${validSubtypes.join(", ")}`
 // src/commands/export.ts
 init_cjs_shims();
-var import_commander30 = require("commander");
+var import_commander31 = require("commander");
 var import_fs21 = require("fs");
-var import_path25 = require("path");
+var import_path26 = require("path");
 init_source();
 init_errors();
 init_lockfile();
@@ -24765,7 +25066,7 @@ async function exportToRuler(options) {
   }
   console.log(source_default.green(`\u2713 Found ${packages.length} installed package${packages.length === 1 ? "" : "s"}`));
   console.log();
-  const outputDir = options.output || (0, import_path25.join)(process.cwd(), ".ruler");
+  const outputDir = options.output || (0, import_path26.join)(process.cwd(), ".ruler");
   let rulerExists = false;
   try {
     await import_fs21.promises.access(outputDir);
@@ -24792,7 +25093,7 @@ async function exportToRuler(options) {
       const content = await import_fs21.promises.readFile(pkg.installedPath, "utf-8");
       const rulerContent = createRulerFormat(pkg.id, pkg.version, content, pkg.format, pkg.subtype);
       const rulerFilename = `${packageName}.md`;
-      const rulerPath = (0, import_path25.join)(outputDir, rulerFilename);
+      const rulerPath = (0, import_path26.join)(outputDir, rulerFilename);
       await import_fs21.promises.writeFile(rulerPath, rulerContent, "utf-8");
       console.log(source_default.green(`\u2713 Exported ${pkg.id} \u2192 ${rulerFilename}`));
       exportedCount++;
@@ -24832,7 +25133,7 @@ function createRulerFormat(packageId, version, content, format, subtype) {
   return frontmatter + contentWithoutFrontmatter;
 }
 async function ensureRulerConfig(rulerDir) {
-  const configPath = (0, import_path25.join)((0, import_path25.dirname)(rulerDir), "ruler.toml");
+  const configPath = (0, import_path26.join)((0, import_path26.dirname)(rulerDir), "ruler.toml");
   try {
     await import_fs21.promises.access(configPath);
     console.log(source_default.dim("\u2139 ruler.toml already exists (not modified)"));
@@ -24896,7 +25197,7 @@ async function handleExport(options) {
   }
 }
 function createExportCommand() {
-  const command = new import_commander30.Command("export");
+  const command = new import_commander31.Command("export");
   command.description("Export installed packages to external tools").option("--to <tool>", "Export target (currently supports: ruler)", "ruler").option("-o, --output <dir>", "Custom output directory").option("-y, --yes", "Skip confirmation prompts").action(async (options) => {
     try {
       if (!options.to) {
@@ -24930,14 +25231,14 @@ init_telemetry();
 init_errors();
 function getVersion() {
   try {
-    const packageJsonPath = (0, import_path26.join)(__dirname, "../package.json");
+    const packageJsonPath = (0, import_path27.join)(__dirname, "../package.json");
     const packageJson = JSON.parse((0, import_fs22.readFileSync)(packageJsonPath, "utf-8"));
     return packageJson.version || "0.0.0";
   } catch {
     return "0.0.0";
   }
 }
-var program = new import_commander31.Command();
+var program = new import_commander32.Command();
 program.name("prpm").description("Prompt Package Manager - Install and manage prompt-based files").version(getVersion());
 program.addCommand(createInitCommand());
 program.addCommand(createCatalogCommand());
@@ -24945,6 +25246,7 @@ program.addCommand(createSearchCommand());
 program.addCommand(createAISearchCommand());
 program.addCommand(createInstallCommand());
 program.addCommand(createInfoCommand());
+program.addCommand(createShowCommand());
 program.addCommand(createTrendingCommand());
 program.addCommand(createPopularCommand());
 program.addCommand(createPublishCommand());