prpm 2.1.37 → 2.1.38

package/dist/index.js

@@ -102,7 +102,8 @@ function parseLockfileKey(key) {
 function addToLockfile(lockfile, packageId, packageInfo) {
   var _a;
   const snippetLocation = packageInfo.subtype === "snippet" ? (_a = packageInfo.snippetMetadata) == null ? void 0 : _a.targetPath : void 0;
-  const lockfileKey = getLockfileKey(packageId, packageInfo.format, snippetLocation);
+  const locationKey = packageInfo.global ? "global" : snippetLocation;
+  const lockfileKey = getLockfileKey(packageId, packageInfo.format, locationKey);
   lockfile.packages[lockfileKey] = {
     version: packageInfo.version,
     resolved: packageInfo.tarballUrl,
@@ -111,6 +112,7 @@ function addToLockfile(lockfile, packageId, packageInfo) {
     dependencies: packageInfo.dependencies,
     format: packageInfo.format,
     subtype: packageInfo.subtype,
+    global: packageInfo.global,
     sourceFormat: packageInfo.sourceFormat,
     sourceSubtype: packageInfo.sourceSubtype,
     installedPath: packageInfo.installedPath,
@@ -140,13 +142,13 @@ function verifyPackageIntegrity(lockfile, packageId, tarballBuffer, format, loca
   const expectedHash = pkg.integrity.replace("sha256-", "");
   return hash === expectedHash;
 }
-function getLockedVersion(lockfile, packageId, format) {
+function getLockedVersion(lockfile, packageId, format, location) {
   var _a;
   if (!lockfile) {
     return null;
   }
   if (format) {
-    const lockfileKey = getLockfileKey(packageId, format);
+    const lockfileKey = getLockfileKey(packageId, format, location);
     return ((_a = lockfile.packages[lockfileKey]) == null ? void 0 : _a.version) || null;
   }
   if (lockfile.packages[packageId]) {
@@ -17641,6 +17643,36 @@ ${lines.join("\n")}
 ---
 ${body}`;
 }
+function replaceLeadingDirectory(filePath, from, to) {
+  const normalizedPath = filePath.startsWith("./") ? filePath.slice(2) : filePath;
+  if (normalizedPath === from) {
+    return to;
+  }
+  if (normalizedPath.startsWith(`${from}/`)) {
+    return import_path15.default.join(to, normalizedPath.slice(from.length + 1));
+  }
+  return filePath;
+}
+function getGlobalDestinationDir(format, destDir) {
+  const homeDir = import_os5.default.homedir();
+  if (format === "claude") {
+    return replaceLeadingDirectory(destDir, ".claude", import_path15.default.join(homeDir, ".claude"));
+  }
+  if (format === "codex") {
+    if (destDir === "." || destDir === "./") {
+      return import_path15.default.join(homeDir, ".codex");
+    }
+    const codexPath = replaceLeadingDirectory(destDir, ".codex", import_path15.default.join(homeDir, ".codex"));
+    if (codexPath !== destDir) {
+      return codexPath;
+    }
+    return replaceLeadingDirectory(destDir, ".agents", import_path15.default.join(homeDir, ".agents"));
+  }
+  return destDir;
+}
+function getLockfileLocationKey(options) {
+  return options.global ? "global" : void 0;
+}
 function getPackageLabel2(format, subtype) {
   const formatLabels = {
     "claude": "Claude",
@@ -17783,7 +17815,8 @@ async function handleInstall(packageSpec, options) {
     if (!targetFormat) {
       targetFormat = config.defaultFormat || await autoDetectFormat() || void 0;
     }
-    const lockedVersion = getLockedVersion(lockfile, packageId, targetFormat);
+    const lockfileLocationKey = getLockfileLocationKey(options);
+    const lockedVersion = getLockedVersion(lockfile, packageId, targetFormat, lockfileLocationKey);
     let version;
     if (options.frozenLockfile) {
       if (!lockedVersion) {
@@ -17804,7 +17837,7 @@ async function handleInstall(packageSpec, options) {
         matchedKey = snippetKey;
       }
       if (!installedPkg) {
-        const standardKey = getLockfileKey(packageId, targetFormat);
+        const standardKey = getLockfileKey(packageId, targetFormat, lockfileLocationKey);
         if (lockfile.packages[standardKey]) {
           installedPkg = lockfile.packages[standardKey];
           matchedKey = standardKey;
@@ -17954,11 +17987,11 @@ async function handleInstall(packageSpec, options) {
     }
     console.log(`   \u2B07\uFE0F  Downloading...`);
     const tarball = await client.downloadPackage(tarballUrl);
-    const lockfileKeyForVerification = getLockfileKey(packageId, targetFormat);
+    const lockfileKeyForVerification = getLockfileKey(packageId, targetFormat, lockfileLocationKey);
     const existingEntry = lockfile == null ? void 0 : lockfile.packages[lockfileKeyForVerification];
     if ((existingEntry == null ? void 0 : existingEntry.integrity) && existingEntry.version === actualVersion) {
       console.log(`   \u{1F512} Verifying integrity...`);
-      const isValid = verifyPackageIntegrity(lockfile, packageId, tarball, targetFormat);
+      const isValid = verifyPackageIntegrity(lockfile, packageId, tarball, targetFormat, lockfileLocationKey);
       if (!isValid) {
         throw new CLIError(
           `\u274C Integrity verification failed for ${packageId}
@@ -18164,6 +18197,7 @@ This could indicate:
     const isClaudePlugin = pkg.format === "claude" && pkg.subtype === "plugin";
     if (isClaudePlugin) {
       console.log(`   \u{1F50C} Installing Claude Plugin...`);
+      const claudeRoot = options.global ? import_path15.default.join(import_os5.default.homedir(), ".claude") : ".claude";
       const pluginJsonFile = extractedFiles.find(
         (f) => f.name === "plugin.json" || f.name === ".claude-plugin/plugin.json" || f.name.endsWith("/plugin.json")
       );
@@ -18180,14 +18214,15 @@ This could indicate:
         (f) => f.name.startsWith("agents/") && f.name.endsWith(".md")
       );
       if (agentFiles.length > 0) {
-        await import_promises4.default.mkdir(".claude/agents", { recursive: true });
+        const agentDir = import_path15.default.join(claudeRoot, "agents");
+        await import_promises4.default.mkdir(agentDir, { recursive: true });
         for (const file of agentFiles) {
           const filename = import_path15.default.basename(file.name);
-          const destFile = `.claude/agents/${filename}`;
+          const destFile = import_path15.default.join(agentDir, filename);
           await saveFile(destFile, file.content);
           installedFiles.push(destFile);
         }
-        console.log(`   \u2713 Installed ${agentFiles.length} agents to .claude/agents/`);
+        console.log(`   \u2713 Installed ${agentFiles.length} agents to ${agentDir}/`);
       }
       const skillFiles = extractedFiles.filter(
         (f) => f.name.startsWith("skills/") && (f.name.endsWith(".md") || f.name.includes("SKILL.md"))
@@ -18195,26 +18230,27 @@ This could indicate:
       if (skillFiles.length > 0) {
         for (const file of skillFiles) {
           const relativePath = file.name.replace(/^skills\//, "");
-          const destFile = `.claude/skills/${relativePath}`;
+          const destFile = import_path15.default.join(claudeRoot, "skills", relativePath);
           const destFileDir = import_path15.default.dirname(destFile);
           await import_promises4.default.mkdir(destFileDir, { recursive: true });
           await saveFile(destFile, file.content);
           installedFiles.push(destFile);
         }
-        console.log(`   \u2713 Installed ${skillFiles.length} skill files to .claude/skills/`);
+        console.log(`   \u2713 Installed ${skillFiles.length} skill files to ${import_path15.default.join(claudeRoot, "skills")}/`);
       }
       const commandFiles = extractedFiles.filter(
         (f) => f.name.startsWith("commands/") && f.name.endsWith(".md")
       );
       if (commandFiles.length > 0) {
-        await import_promises4.default.mkdir(".claude/commands", { recursive: true });
+        const commandDir = import_path15.default.join(claudeRoot, "commands");
+        await import_promises4.default.mkdir(commandDir, { recursive: true });
         for (const file of commandFiles) {
           const filename = import_path15.default.basename(file.name);
-          const destFile = `.claude/commands/${filename}`;
+          const destFile = import_path15.default.join(commandDir, filename);
           await saveFile(destFile, file.content);
           installedFiles.push(destFile);
         }
-        console.log(`   \u2713 Installed ${commandFiles.length} commands to .claude/commands/`);
+        console.log(`   \u2713 Installed ${commandFiles.length} commands to ${commandDir}/`);
       }
       if (pluginConfig.mcpServers && Object.keys(pluginConfig.mcpServers).length > 0) {
         const editor = options.editor || "claude";
@@ -18251,7 +18287,7 @@ This could indicate:
           files: installedFiles
         };
       }
-      destPath = ".claude/";
+      destPath = `${claudeRoot}/`;
       fileCount = installedFiles.length;
     } else if (effectiveFormat === "mcp" && (effectiveSubtype === "server" || effectiveSubtype === "tool") || isMCPServerPackage && (pkg.subtype === "server" || pkg.subtype === "tool") && isMCPToEditor) {
       console.log(`   \u{1F527} Installing MCP Server...`);
@@ -18341,11 +18377,18 @@ This could indicate:
         throw new Error("CLAUDE.md format only supports single-file packages");
       }
       let mainFile = extractedFiles[0].content;
-      destPath = "CLAUDE.md";
+      destPath = options.global ? import_path15.default.join(import_os5.default.homedir(), ".claude", "CLAUDE.md") : "CLAUDE.md";
       await saveFile(destPath, mainFile);
       fileCount = 1;
     } else if (extractedFiles.length === 1) {
       destDir = getDestinationDir2(effectiveFormat, effectiveSubtype, pkg.name);
+      if (options.global) {
+        const globalDestDir = getGlobalDestinationDir(effectiveFormat, destDir);
+        if (globalDestDir !== destDir) {
+          destDir = globalDestDir;
+          console.log(`   \u{1F310} Installing globally to ${destDir}`);
+        }
+      }
       if (locationOverride && effectiveFormat === "cursor") {
         const relativeDestDir = destDir.startsWith("./") ? destDir.slice(2) : destDir;
         destDir = import_path15.default.join(locationOverride, relativeDestDir);
@@ -18369,7 +18412,11 @@ This could indicate:
       } else if (effectiveFormat === "agents.md" || effectiveFormat === "gemini.md" || effectiveFormat === "claude.md" || effectiveFormat === "codex") {
         if (effectiveSubtype === "skill") {
           destPath = `${destDir}/SKILL.md`;
-          console.log(`   \u{1F4E6} Installing skill to ${destDir}/ for progressive disclosure`);
+          if (effectiveFormat === "codex") {
+            console.log(`   \u{1F4E6} Installing Codex skill to ${destDir}/`);
+          } else {
+            console.log(`   \u{1F4E6} Installing skill to ${destDir}/ for progressive disclosure`);
+          }
         } else if (effectiveSubtype === "agent") {
           if (effectiveFormat === "codex") {
             destPath = `${destDir}/${packageName}.toml`;
@@ -18541,6 +18588,13 @@ This could indicate:
       } else {
         destDir = getDestinationDir2(effectiveFormat, effectiveSubtype, pkg.name);
       }
+      if (options.global) {
+        const globalDestDir = getGlobalDestinationDir(effectiveFormat, destDir);
+        if (globalDestDir !== destDir) {
+          destDir = globalDestDir;
+          console.log(`   \u{1F310} Installing globally to ${destDir}`);
+        }
+      }
       if (locationOverride && effectiveFormat === "cursor") {
         const relativeDestDir = destDir.startsWith("./") ? destDir.slice(2) : destDir;
         destDir = import_path15.default.join(locationOverride, relativeDestDir);
@@ -18704,11 +18758,13 @@ ${afterFrontmatter}`;
       progressiveDisclosure: progressiveDisclosureMetadata,
       pluginMetadata,
       // Track plugin installation metadata for uninstall
-      snippetMetadata
+      snippetMetadata,
       // Track snippet installation metadata for uninstall
+      global: options.global
     });
     const snippetTargetPath = effectiveSubtype === "snippet" ? snippetMetadata == null ? void 0 : snippetMetadata.targetPath : void 0;
-    setPackageIntegrity(updatedLockfile, packageId, tarball, effectiveFormat, snippetTargetPath);
+    const integrityLocationKey = lockfileLocationKey || snippetTargetPath;
+    setPackageIntegrity(updatedLockfile, packageId, tarball, effectiveFormat, integrityLocationKey);
     await writeLockfile(updatedLockfile);
     await client.trackDownload(packageId, {
       version: actualVersion || version,
@@ -18889,7 +18945,7 @@ async function collectExtractedFiles(rootDir, excludedNames, fs16) {
   return files;
 }
 async function installFromLockfile(options) {
-  var _a, _b;
+  var _a, _b, _c, _d;
   try {
     const lockfile = await readLockfile();
     if (!lockfile) {
@@ -18906,7 +18962,7 @@ async function installFromLockfile(options) {
     let failCount = 0;
     for (const lockfileKey of packageIds) {
       const lockEntry = lockfile.packages[lockfileKey];
-      const { packageId, format } = parseLockfileKey(lockfileKey);
+      const { packageId, format, location } = parseLockfileKey(lockfileKey);
       const displayName = format ? `${packageId} (${format})` : packageId;
       try {
         const packageSpec = packageId.includes("@") && !packageId.startsWith("@") ? packageId.substring(0, packageId.lastIndexOf("@")) : packageId;
@@ -18921,6 +18977,8 @@ async function installFromLockfile(options) {
           }
         }
         const manifestFile = (_a = lockEntry.progressiveDisclosure) == null ? void 0 : _a.manifestPath;
+        const preservedGlobal = options.global ?? lockEntry.global ?? ((_b = lockEntry.pluginMetadata) == null ? void 0 : _b.mcpGlobal) ?? (location === "global" ? true : void 0);
+        const preservedEditor = options.editor ?? ((_c = lockEntry.pluginMetadata) == null ? void 0 : _c.mcpEditor);
         await handleInstall(packageSpec, {
           version: lockEntry.version,
           as: options.as || lockEntry.format,
@@ -18931,8 +18989,10 @@ async function installFromLockfile(options) {
           location: locationOverride,
           manifestFile,
           hookMapping: options.hookMapping,
-          fromCollection: lockEntry.fromCollection
+          fromCollection: lockEntry.fromCollection,
           // Preserve collection metadata
+          global: preservedGlobal,
+          editor: preservedEditor
         });
         successCount++;
       } catch (error) {
@@ -18941,7 +19001,7 @@ async function installFromLockfile(options) {
         } else {
           failCount++;
           console.error(`  \u274C Failed to install ${displayName}:`);
-          console.error(`     Type: ${(_b = error == null ? void 0 : error.constructor) == null ? void 0 : _b.name}`);
+          console.error(`     Type: ${(_d = error == null ? void 0 : error.constructor) == null ? void 0 : _d.name}`);
           console.error(`     Message: ${error instanceof Error ? error.message : String(error)}`);
           if (error instanceof CLIError) {
             console.error(`     ExitCode: ${error.exitCode}`);
@@ -18963,7 +19023,7 @@ async function installFromLockfile(options) {
 }
 function createInstallCommand() {
   const command = new import_commander12.Command("install");
-  command.description("Install a package from the registry, or install all packages from prpm.lock if no package specified").argument("[package]", "Package to install (e.g., react-rules or react-rules@1.2.0). If omitted, installs all packages from prpm.lock").option("--version <version>", "Specific version to install").option("--as <format>", `Convert and install in specific format. Accepts a comma-separated list to install to multiple formats in one command (${import_types.FORMATS.join(", ")})`).option("--format <format>", "Alias for --as").option("--location <path>", "Custom location for installed files (Agents.md or nested Cursor rules)").option("--subtype <subtype>", "Specify subtype when converting (skill, agent, rule, etc.)").option("--hook-mapping <strategy>", "Hook mapping strategy: auto (default), strict, skip", "auto").option("--frozen-lockfile", "Fail if lock file needs to be updated (for CI)").option("-y, --yes", "Auto-confirm prompts (overwrite files without asking)").option("--no-append", "Skip adding skill to manifest file (skill files only)").option("--manifest-file <filename>", "Custom manifest filename for progressive disclosure").option("--eager", "Force skill/agent to always activate (not on-demand)").option("--lazy", "Use default on-demand activation (overrides package eager setting)").option("--tools <tools>", "Override Claude/Codex tool list for this install (comma- or space-separated)").option("--global", "Install MCP servers to global config (e.g., ~/.claude/settings.json, ~/.codex/config.toml, ~/.cursor/mcp.json, ~/.kiro/settings/mcp.json)").option("--editor <editor>", "[Deprecated: use --as] Target editor for MCP server installation").action(async (packageSpec, options) => {
+  command.description("Install a package from the registry, or install all packages from prpm.lock if no package specified").argument("[package]", "Package to install (e.g., react-rules or react-rules@1.2.0). If omitted, installs all packages from prpm.lock").option("--version <version>", "Specific version to install").option("--as <format>", `Convert and install in specific format. Accepts a comma-separated list to install to multiple formats in one command (${import_types.FORMATS.join(", ")})`).option("--format <format>", "Alias for --as").option("--location <path>", "Custom location for installed files (Agents.md or nested Cursor rules)").option("--subtype <subtype>", "Specify subtype when converting (skill, agent, rule, etc.)").option("--hook-mapping <strategy>", "Hook mapping strategy: auto (default), strict, skip", "auto").option("--frozen-lockfile", "Fail if lock file needs to be updated (for CI)").option("-y, --yes", "Auto-confirm prompts (overwrite files without asking)").option("--no-append", "Skip adding skill to manifest file (skill files only)").option("--manifest-file <filename>", "Custom manifest filename for progressive disclosure").option("--eager", "Force skill/agent to always activate (not on-demand)").option("--lazy", "Use default on-demand activation (overrides package eager setting)").option("--tools <tools>", "Override Claude/Codex tool list for this install (comma- or space-separated)").option("--global", "Install to user-level/global locations where supported (e.g., ~/.claude/skills, ~/.agents/skills, ~/.codex/agents, or global MCP config)").option("--editor <editor>", "[Deprecated: use --as] Target editor for MCP server installation").action(async (packageSpec, options) => {
     const rawAs = options.format || options.as;
     const validFormats = import_types.FORMATS;
     const asTokens = rawAs ? Array.from(new Set(rawAs.split(",").map((s) => s.trim()).filter(Boolean))) : [];
@@ -19040,7 +19100,9 @@ The lockfile already records the target format for each package. Run prpm instal
         subtype: options.subtype,
         frozenLockfile: options.frozenLockfile,
         location: options.location,
-        hookMapping: options.hookMapping
+        hookMapping: options.hookMapping,
+        global: options.global,
+        editor: options.editor ?? (isMCPEditorOnly ? singleAs : void 0)
       });
       return;
     }
@@ -21074,7 +21136,14 @@ async function handleUninstall(name, options = {}) {
     if (requestedFormat) {
       const requestedKey = getLockfileKey(name, requestedFormat);
       if (!lockfile.packages[requestedKey]) {
-        if (lockfile.packages[name] && lockfile.packages[name].format === requestedFormat) {
+        const matchingFormatKeys = matchingKeys.filter((key) => {
+          const parsed = parseLockfileKey(key);
+          const pkg = lockfile.packages[key];
+          return parsed.format === requestedFormat || pkg.format === requestedFormat;
+        });
+        if (matchingFormatKeys.length > 0) {
+          keysToUninstall = matchingFormatKeys;
+        } else if (lockfile.packages[name] && lockfile.packages[name].format === requestedFormat) {
           keysToUninstall = [name];
         } else {
           throw new CLIError(`\u274C Package "${name}" with format "${requestedFormat}" not found`, 1);
@@ -24760,6 +24829,14 @@ init_lockfile();
 init_install();
 init_telemetry();
 init_errors();
+function getPreservedGlobal(pkg, location) {
+  var _a;
+  return pkg.global ?? ((_a = pkg.pluginMetadata) == null ? void 0 : _a.mcpGlobal) ?? (location === "global" ? true : void 0);
+}
+function getPreservedEditor(pkg) {
+  var _a;
+  return (_a = pkg.pluginMetadata) == null ? void 0 : _a.mcpEditor;
+}
 async function handleUpdate(packageName, options = {}) {
   const startTime = Date.now();
   let success = false;
@@ -24786,7 +24863,7 @@ async function handleUpdate(packageName, options = {}) {
     }
     console.log("\u{1F504} Checking for updates...\n");
     for (const pkg of packagesToUpdate) {
-      const { packageId, format: installedFormat } = parseLockfileKey(pkg.id);
+      const { packageId, format: installedFormat, location } = parseLockfileKey(pkg.id);
       try {
         const registryPkg = await client.getPackage(packageId);
         if (!registryPkg.latest_version || !pkg.version) {
@@ -24812,9 +24889,16 @@ async function handleUpdate(packageName, options = {}) {
 \u{1F4E6} Updating ${packageId}: ${currentVersion} \u2192 ${latestVersion}`
         );
         const targetFormat = pkg.format || installedFormat;
-        await handleInstall(`${packageId}@${latestVersion}`, {
-          as: targetFormat
-        });
+        const installOptions = { as: targetFormat };
+        const preservedGlobal = getPreservedGlobal(pkg, location);
+        const preservedEditor = getPreservedEditor(pkg);
+        if (preservedGlobal !== void 0) {
+          installOptions.global = preservedGlobal;
+        }
+        if (preservedEditor) {
+          installOptions.editor = preservedEditor;
+        }
+        await handleInstall(`${packageId}@${latestVersion}`, installOptions);
         updatedCount++;
       } catch (err) {
         console.error(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "prpm",
-  "version": "2.1.37",
+  "version": "2.1.38",
   "description": "Prompt Package Manager CLI - Install and manage prompt-based files",
   "main": "dist/index.js",
   "bin": {
@@ -45,9 +45,9 @@
   "license": "MIT",
   "dependencies": {
     "@octokit/rest": "^22.0.0",
-    "@pr-pm/converters": "^2.1.38",
-    "@pr-pm/registry-client": "^2.3.37",
-    "@pr-pm/types": "^2.1.38",
+    "@pr-pm/converters": "^2.1.39",
+    "@pr-pm/registry-client": "^2.3.38",
+    "@pr-pm/types": "^2.1.39",
     "ajv": "^8.17.1",
     "ajv-formats": "^3.0.1",
     "chalk": "^5.6.2",