regpick 0.2.3

package/.github/workflows/release.yml

@@ -0,0 +1,51 @@
+name: Release
+
+on:
+  push:
+    branches:
+      - main
+  workflow_dispatch:
+    inputs:
+      dry_run:
+        description: 'Dry run (do not actually release)'
+        required: true
+        type: boolean
+        default: false
+
+permissions:
+  contents: write
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: 'npm'
+          registry-url: 'https://registry.npmjs.org'
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Configure Git user
+        run: |
+          git config --global user.name 'github-actions[bot]'
+          git config --global user.email 'github-actions[bot]@users.noreply.github.com'
+
+      - name: Run release-it
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: |
+          if [ "${{ github.event_name }}" = "workflow_dispatch" ] && [ "${{ github.event.inputs.dry_run }}" = "true" ]; then
+            npm run release -- --dry-run
+          else
+            npm run release -- --ci
+          fi

package/.release-it.json

@@ -0,0 +1,22 @@
+{
+  "git": {
+    "commitMessage": "chore: release v${version}",
+    "tagName": "v${version}",
+    "requireCleanWorkingDir": true
+  },
+  "plugins": {
+    "@release-it/conventional-changelog": {
+      "preset": "angular",
+      "infile": "CHANGELOG.md"
+    }
+  },
+  "github": {
+    "release": true
+  },
+  "npm": {
+    "publish": true
+  },
+  "hooks": {
+    "before:init": ["npm run test", "npm run build"]
+  }
+}

package/CHANGELOG.md

@@ -0,0 +1,12 @@
+# Changelog
+
+## [0.2.3](https://github.com/wojtowicz-artur/regpick/compare/v0.2.2...v0.2.3) (2026-02-27)
+
+## [0.2.2](https://github.com/wojtowicz-artur/regpick/compare/v0.2.1...v0.2.2) (2026-02-26)
+
+
+### Bug Fixes
+
+* refine dry run condition in release workflow ([1973f02](https://github.com/wojtowicz-artur/regpick/commit/1973f022ea3912e6999fe763b8e0c116a4edc177))
+
+## [0.2.1](https://github.com/wojtowicz-artur/regpick/compare/v0.2.0...v0.2.1) (2026-02-26)

package/README.md

@@ -0,0 +1,56 @@
+# regpick
+
+Lightweight CLI for selecting and installing registry entries from shadcn-compatible registries (v2), with support for local directory-based fat item JSON files.
+
+## Commands
+
+- `regpick init`
+- `regpick list [registry-name-or-url]`
+- `regpick add [registry-name-or-url]`
+
+## Quick start
+
+```bash
+cd /path/to/project
+cd /path/to/packages/regpick
+npm run build
+node ./dist/index.mjs init
+node ./dist/index.mjs list tebra
+node ./dist/index.mjs add tebra
+```
+
+## Config (`regpick.json`)
+
+```json
+{
+  "registries": {
+    "tebra": "./tebra-icon-registry/registry"
+  },
+  "targetsByType": {
+    "registry:icon": "src/components/ui/icons",
+    "registry:component": "src/components/ui",
+    "registry:file": "src/components/ui"
+  },
+  "overwritePolicy": "prompt",
+  "packageManager": "auto",
+  "preferManifestTarget": true,
+  "allowOutsideProject": false
+}
+```
+
+Optional JSON schema path (if the file is available in your project):
+
+```json
+{
+  "$schema": "./packages/regpick/regpick.config.schema.json"
+}
+```
+
+## Notes
+
+- Supports:
+  - full `registry.json` (with inline item definitions),
+  - item references (`url` / `href`) in `items[]`,
+  - single item JSON (`registry:file` style),
+  - directory source containing many item JSON files.
+- For safety, path traversal writes outside project root are blocked by default.

package/bin/regpick.js

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+
+import "../dist/index.mjs";

package/docs/mvp-decisions.md

@@ -0,0 +1,77 @@
+# MVP Decisions and Documentation Gaps Closed
+
+This file closes the open items from the implementation plan for prototype scope.
+
+## 1) `regpick.json` contract
+
+- Formalized via `regpick.config.schema.json`.
+- Supported fields:
+  - `registries` (alias -> URL/path),
+  - `targetsByType`,
+  - `overwritePolicy` (`prompt` | `overwrite` | `skip`),
+  - `packageManager` (`auto` | `npm` | `yarn` | `pnpm`),
+  - `preferManifestTarget`,
+  - `allowOutsideProject`.
+
+## 2) `registry.json` support scope (MVP)
+
+- Supported inputs:
+  - top-level object with `items[]`,
+  - top-level array of items,
+  - single item JSON with `files[]`.
+- Supported `items[]` entries:
+  - inline entries containing `files[]`,
+  - references via `url` / `href` / `path` to separate item JSON files.
+
+## 3) Target path priority
+
+Order used by installer:
+1. `file.target` from manifest if `preferManifestTarget = true`,
+2. `targetsByType[itemType] + basename(file.path)` if mapped,
+3. `file.target` if present and not already used,
+4. fallback `src/<basename>`.
+
+## 4) Overwrite behavior
+
+- `overwritePolicy = prompt`: per-file interactive choice (`overwrite` / `skip` / `abort`).
+- `overwritePolicy = overwrite`: overwrite silently.
+- `overwritePolicy = skip`: skip existing files.
+- `--yes` bypasses overwrite prompt with overwrite behavior.
+
+## 5) Dependency installation rules
+
+- Candidate deps come from selected item `dependencies` and `devDependencies`.
+- Existing declarations are read from project `package.json`.
+- Missing packages can be installed after prompt.
+- Package manager detection:
+  - `pnpm-lock.yaml` -> `pnpm`,
+  - `yarn.lock` -> `yarn`,
+  - `package-lock.json` -> `npm`,
+  - fallback `npm`.
+
+## 6) Offline/cache for MVP
+
+- No cache layer in MVP.
+- Rationale: keep prototype minimal and deterministic.
+
+## 7) Path security
+
+- Writes outside the project root are blocked by default.
+- Can be relaxed with `allowOutsideProject: true` for advanced use.
+- Relative traversal (`../`) is effectively blocked by absolute path boundary check.
+
+## 8) Versioning policy for MVP
+
+- Config schema is versioned by package release (`regpick` semver).
+- For MVP, no separate manifest protocol version pinning beyond compatibility parser logic.
+
+## 9) Runtime adapters and error model
+
+- Runtime side effects are routed through adapter ports in `src/shell/runtime/ports.ts`:
+  - `FileSystemPort`,
+  - `HttpPort`,
+  - `PromptPort`,
+  - `ProcessPort`.
+- Commands receive adapters through `CommandContext.runtime` instead of importing IO libraries directly.
+- The app now uses a shared typed result model from `src/core/result.ts` (`Result`, `ok`, `err`).
+- Domain and shell errors are mapped to `AppError` in `src/core/errors.ts` and surfaced consistently in CLI output.

package/examples/README.md

@@ -0,0 +1,26 @@
+# Przykłady użycia `regpick`
+
+Ten folder zawiera przykłady różnych rodzajów rejestrów i komponentów, które można dystrybuować za pomocą `regpick`. Pokazują one elastyczność narzędzia - od prostych funkcji pomocniczych po złożone komponenty UI z własnymi zależnościami NPM.
+
+## Jak przetestować przykłady?
+
+Możesz uruchomić komendę `list` lub `add` bezpośrednio na plikach JSON z tego folderu:
+
+```bash
+# Wylistowanie zawartości prostego rejestru:
+npx regpick list ./examples/simple-utils-registry/registry.json
+
+# Interaktywne dodanie komponentu ze złożonego rejestru:
+npx regpick add ./examples/complex-ui-registry/registry.json
+```
+
+## Dostępne przykłady:
+
+### 1. `simple-utils-registry`
+Pokazuje najprostsze zastosowanie: dystrybucję czystej logiki biznesowej (funkcje pomocnicze, hooki) bez dodatkowych zależności NPM. Idealne do uwspólniania kodu między projektami backendowymi i frontendowymi.
+
+### 2. `complex-ui-registry`
+Pokazuje zaawansowane możliwości:
+- Komponenty składające się z wielu plików (np. główny plik TSX + plik ze stylami CSS/Tailwind).
+- Automatyczne instalowanie zależności NPM (np. `lucide-react`, `clsx`, `tailwind-merge`).
+- Różne typy elementów w jednym rejestrze (`registry:component`, `registry:hook`, `registry:ui`).

package/examples/complex-ui-registry/registry.json

@@ -0,0 +1,35 @@
+{
+  "name": "Tebra UI Components",
+  "description": "Złożone komponenty UI dla projektów React z TailwindCSS.",
+  "items": [
+    {
+      "name": "button",
+      "type": "registry:component",
+      "description": "Główny przycisk systemowy ze wsparciem dla ikon i wariantów.",
+      "dependencies": ["lucide-react", "clsx", "tailwind-merge"],
+      "devDependencies": ["@types/react"],
+      "files": [
+        {
+          "path": "Button.tsx",
+          "content": "import * as React from 'react';\nimport { Slot } from '@radix-ui/react-slot';\nimport { clsx, type ClassValue } from 'clsx';\nimport { twMerge } from 'tailwind-merge';\nimport { Loader2 } from 'lucide-react';\n\nexport function cn(...inputs: ClassValue[]) {\n  return twMerge(clsx(inputs));\n}\n\nexport interface ButtonProps extends React.ButtonHTMLAttributes<HTMLButtonElement> {\n  asChild?: boolean;\n  isLoading?: boolean;\n}\n\nexport const Button = React.forwardRef<HTMLButtonElement, ButtonProps>(\n  ({ className, asChild = false, isLoading, children, ...props }, ref) => {\n    const Comp = asChild ? Slot : \"button\";\n    return (\n      <Comp\n        className={cn(\"inline-flex items-center justify-center rounded-md text-sm font-medium transition-colors focus-visible:outline-none disabled:pointer-events-none disabled:opacity-50\", className)}\n        ref={ref}\n        {...props}\n      >\n        {isLoading && <Loader2 className=\"mr-2 h-4 w-4 animate-spin\" />}\n        {children}\n      </Comp>\n    );\n  }\n);\nButton.displayName = \"Button\";\n"
+        }
+      ]
+    },
+    {
+      "name": "auth-form",
+      "type": "registry:feature",
+      "description": "Kompletny formularz logowania z walidacją i obsługą stanu.",
+      "dependencies": ["react-hook-form", "zod", "@hookform/resolvers"],
+      "files": [
+        {
+          "path": "AuthForm.tsx",
+          "content": "import React from 'react';\nimport { useForm } from 'react-hook-form';\nimport { zodResolver } from '@hookform/resolvers/zod';\nimport * as z from 'zod';\nimport { authApi } from './api';\n\nconst schema = z.object({\n  email: z.string().email(),\n  password: z.string().min(8),\n});\n\ntype FormData = z.infer<typeof schema>;\n\nexport function AuthForm() {\n  const { register, handleSubmit } = useForm<FormData>({\n    resolver: zodResolver(schema)\n  });\n\n  const onSubmit = async (data: FormData) => {\n    await authApi.login(data);\n  };\n\n  return (\n    <form onSubmit={handleSubmit(onSubmit)} className=\"space-y-4\">\n      <input {...register('email')} type=\"email\" placeholder=\"Email\" />\n      <input {...register('password')} type=\"password\" placeholder=\"Hasło\" />\n      <button type=\"submit\">Zaloguj</button>\n    </form>\n  );\n}\n"
+        },
+        {
+          "path": "api.ts",
+          "content": "export const authApi = {\n  login: async (credentials: any) => {\n    // Mock API call\n    return new Promise(resolve => setTimeout(resolve, 1000));\n  }\n};\n"
+        }
+      ]
+    }
+  ]
+}

package/examples/simple-utils-registry/registry.json

@@ -0,0 +1,28 @@
+{
+  "name": "Tebra Utils Registry",
+  "description": "Kolekcja prostych funkcji pomocniczych używanych w organizacji.",
+  "items": [
+    {
+      "name": "format-date",
+      "type": "registry:util",
+      "description": "Funkcja do bezpiecznego formatowania dat",
+      "files": [
+        {
+          "path": "formatDate.ts",
+          "content": "export function formatDate(date: Date | string): string {\n  const d = new Date(date);\n  if (isNaN(d.getTime())) return '';\n  return new Intl.DateTimeFormat('pl-PL', {\n    year: 'numeric',\n    month: 'long',\n    day: 'numeric'\n  }).format(d);\n}\n"
+        }
+      ]
+    },
+    {
+      "name": "use-debounce",
+      "type": "registry:hook",
+      "description": "React hook do opóźniania wywołań (debounce)",
+      "files": [
+        {
+          "path": "useDebounce.ts",
+          "content": "import { useState, useEffect } from 'react';\n\nexport function useDebounce<T>(value: T, delay: number): T {\n  const [debouncedValue, setDebouncedValue] = useState<T>(value);\n\n  useEffect(() => {\n    const handler = setTimeout(() => {\n      setDebouncedValue(value);\n    }, delay);\n\n    return () => {\n      clearTimeout(handler);\n    };\n  }, [value, delay]);\n\n  return debouncedValue;\n}\n"
+        }
+      ]
+    }
+  ]
+}

package/package.json

@@ -0,0 +1,39 @@
+{
+  "name": "regpick",
+  "version": "0.2.3",
+  "description": "Lightweight CLI for selecting and installing registry entries.",
+  "type": "module",
+  "bin": {
+    "regpick": "./bin/regpick.js"
+  },
+  "scripts": {
+    "build": "tsdown",
+    "test": "vitest run",
+    "release": "release-it",
+    "start": "node ./dist/index.mjs",
+    "dev": "tsx ./src/index.ts",
+    "init": "node ./dist/index.mjs init",
+    "list": "node ./dist/index.mjs list",
+    "add": "node ./dist/index.mjs add",
+    "validate:tebra": "node ./dist/index.mjs list ../../tebra-icon-registry/registry"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "dependencies": {
+    "@clack/prompts": "^1.0.1",
+    "cosmiconfig": "^9.0.0",
+    "diff": "^8.0.3",
+    "picocolors": "^1.1.1"
+  },
+  "devDependencies": {
+    "@release-it/conventional-changelog": "^10.0.5",
+    "@types/diff": "^7.0.2",
+    "@types/node": "^24.3.0",
+    "release-it": "^19.2.4",
+    "tsdown": "^0.21.0-beta.2",
+    "tsx": "^4.20.5",
+    "typescript": "^5.9.2",
+    "vitest": "^2.1.8"
+  }
+}

package/regpick.config.schema.json

@@ -0,0 +1,40 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "regpick config",
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "registries": {
+      "type": "object",
+      "description": "Alias map for registry URLs or local paths.",
+      "additionalProperties": {
+        "type": "string"
+      }
+    },
+    "targetsByType": {
+      "type": "object",
+      "description": "Maps registry item types to local output directories.",
+      "additionalProperties": {
+        "type": "string"
+      }
+    },
+    "overwritePolicy": {
+      "type": "string",
+      "enum": ["prompt", "overwrite", "skip"],
+      "default": "prompt"
+    },
+    "packageManager": {
+      "type": "string",
+      "enum": ["auto", "npm", "yarn", "pnpm"],
+      "default": "auto"
+    },
+    "preferManifestTarget": {
+      "type": "boolean",
+      "default": true
+    },
+    "allowOutsideProject": {
+      "type": "boolean",
+      "default": false
+    }
+  }
+}

package/src/commands/add.ts

@@ -0,0 +1,261 @@
+import path from "node:path";
+
+import { appError, type AppError } from "../core/errors.js";
+import { err, ok, type Result } from "../core/result.js";
+import type { CommandContext, CommandOutcome, PlannedWrite, RegpickConfig, RegistryItem } from "../types.js";
+import { buildInstallPlan } from "../domain/addPlan.js";
+import { selectItemsFromFlags } from "../domain/selection.js";
+import { readConfig, resolveRegistrySource } from "../shell/config.js";
+import { resolveFileContent, loadRegistry } from "../shell/registry.js";
+import { collectMissingDependencies, installDependencies } from "../shell/installer.js";
+import { resolvePackageManager } from "../shell/packageManagers/resolver.js";
+import { readLockfile, writeLockfile, computeHash } from "../shell/lockfile.js";
+import { applyAliases } from "../domain/aliasCore.js";
+
+async function promptForSource(
+  context: CommandContext,
+  config: RegpickConfig,
+  positionals: string[],
+): Promise<Result<string | null, AppError>> {
+  const argValue = positionals[1];
+  if (argValue) {
+    return ok(resolveRegistrySource(argValue, config));
+  }
+
+  const aliases = Object.entries(config.registries || {}).map(([alias, value]) => ({
+    label: `${alias} -> ${value}`,
+    value: alias,
+  }));
+
+  if (aliases.length) {
+    const picked = await context.runtime.prompt.multiselect({
+      message: "Pick registry alias (or cancel and provide URL/path manually)",
+      options: aliases,
+      maxItems: 1,
+      required: false,
+    });
+
+    if (context.runtime.prompt.isCancel(picked)) {
+      return err(appError("UserCancelled", "Operation cancelled."));
+    }
+
+    if (Array.isArray(picked) && picked.length > 0) {
+      return ok(resolveRegistrySource(String(picked[0]), config));
+    }
+  }
+
+  const manual = await context.runtime.prompt.text({
+    message: "Registry URL/path:",
+    placeholder: "https://example.com/registry.json",
+  });
+
+  if (context.runtime.prompt.isCancel(manual)) {
+    return err(appError("UserCancelled", "Operation cancelled."));
+  }
+
+  return ok(String(manual));
+}
+
+function mapOptions(items: RegistryItem[]): Array<{ value: string; label: string; hint: string }> {
+  return items.map((item) => ({
+    value: item.name,
+    label: `${item.name} (${item.type || "registry:file"})`,
+    hint: item.description || `${item.files.length} file(s)`,
+  }));
+}
+
+async function promptForItems(
+  context: CommandContext,
+  items: RegistryItem[],
+): Promise<Result<RegistryItem[], AppError>> {
+  if (!items.length) {
+    return ok([]);
+  }
+
+  const selectedNames = await context.runtime.prompt.autocompleteMultiselect({
+    message: "Select items to install",
+    options: mapOptions(items),
+    maxItems: 10,
+    required: true,
+  });
+
+  if (context.runtime.prompt.isCancel(selectedNames)) {
+    return err(appError("UserCancelled", "Operation cancelled."));
+  }
+
+  const selectedValues = Array.isArray(selectedNames) ? selectedNames : [];
+  const selectedSet = new Set(selectedValues.map((entry: string) => String(entry)));
+  return ok(items.filter((item) => selectedSet.has(item.name)));
+}
+
+export async function runAddCommand(
+  context: CommandContext,
+): Promise<Result<CommandOutcome, AppError>> {
+  const assumeYes = Boolean(context.args.flags.yes);
+  const { config } = await readConfig(context.cwd);
+  const sourceResult = await promptForSource(context, config, context.args.positionals);
+  if (!sourceResult.ok) {
+    return sourceResult;
+  }
+  const source = sourceResult.value;
+  if (!source) {
+    return ok({ kind: "noop", message: "No registry source provided." });
+  }
+
+  const registryResult = await loadRegistry(source, context.cwd, context.runtime);
+  if (!registryResult.ok) {
+    return registryResult;
+  }
+  const { items } = registryResult.value;
+  if (!items.length) {
+    context.runtime.prompt.warn("No installable items in registry.");
+    return ok({ kind: "noop", message: "No installable items in registry." });
+  }
+
+  const preselected = selectItemsFromFlags(items, context);
+  const promptedSelectionResult = preselected.ok && preselected.value ? preselected : await promptForItems(context, items);
+  if (!promptedSelectionResult.ok) {
+    return promptedSelectionResult;
+  }
+  const selectedItems = promptedSelectionResult.value;
+
+  if (!selectedItems || !selectedItems.length) {
+    context.runtime.prompt.warn("No items selected.");
+    return ok({ kind: "noop", message: "No items selected." });
+  }
+
+  if (!assumeYes) {
+    const proceed = await context.runtime.prompt.confirm({
+      message: `Install ${selectedItems.length} item(s)?`,
+      initialValue: true,
+    });
+
+    if (context.runtime.prompt.isCancel(proceed) || !proceed) {
+      return err(appError("UserCancelled", "Operation cancelled."));
+    }
+  }
+
+  const existingTargets = new Set<string>();
+  const installPlanProbeRes = buildInstallPlan(selectedItems, context.cwd, config);
+  if (!installPlanProbeRes.ok) return installPlanProbeRes;
+  const installPlanProbe = installPlanProbeRes.value;
+  
+  for (const write of installPlanProbe.plannedWrites) {
+    if (await context.runtime.fs.pathExists(write.absoluteTarget)) {
+      existingTargets.add(write.absoluteTarget);
+    }
+  }
+
+  const installPlanRes = buildInstallPlan(selectedItems, context.cwd, config, existingTargets);
+  if (!installPlanRes.ok) return installPlanRes;
+  const installPlan = installPlanRes.value;
+
+  // --- UI INTERACTION PHASE: Gather Overwrite Decisions ---
+  const finalWrites: PlannedWrite[] = [];
+  for (const write of installPlan.plannedWrites) {
+    if (existingTargets.has(write.absoluteTarget)) {
+      if (assumeYes || config.overwritePolicy === "overwrite") {
+        finalWrites.push(write);
+      } else if (config.overwritePolicy === "skip") {
+        context.runtime.prompt.warn(`Skipped existing file: ${write.absoluteTarget}`);
+      } else {
+        const answer = await context.runtime.prompt.select({
+          message: `File exists: ${write.absoluteTarget}`,
+          options: [
+            { value: "overwrite", label: "Overwrite this file" },
+            { value: "skip", label: "Skip this file" },
+            { value: "abort", label: "Abort installation" },
+          ],
+        });
+        if (context.runtime.prompt.isCancel(answer) || answer === "abort") {
+          return err(appError("UserCancelled", "Installation aborted by user."));
+        }
+        if (answer === "overwrite") {
+          finalWrites.push(write);
+        }
+      }
+    } else {
+      finalWrites.push(write);
+    }
+  }
+
+  // --- UI INTERACTION PHASE: Gather Dependency Decisions ---
+  const { missingDependencies, missingDevDependencies } = collectMissingDependencies(selectedItems, context.cwd, context.runtime);
+  let shouldInstallDeps = false;
+  if (missingDependencies.length || missingDevDependencies.length) {
+    if (assumeYes) {
+      shouldInstallDeps = true;
+    } else {
+      const packageManager = resolvePackageManager(context.cwd, config.packageManager, context.runtime);
+      const messageParts: string[] = [];
+      if (missingDependencies.length) messageParts.push(`dependencies: ${missingDependencies.join(", ")}`);
+      if (missingDevDependencies.length) messageParts.push(`devDependencies: ${missingDevDependencies.join(", ")}`);
+      
+      const proceed = await context.runtime.prompt.confirm({
+        message: `Install missing packages with ${packageManager}? (${messageParts.join(" | ")})`,
+        initialValue: true,
+      });
+
+      if (context.runtime.prompt.isCancel(proceed)) {
+        return err(appError("UserCancelled", "Dependency installation cancelled by user."));
+      }
+      shouldInstallDeps = Boolean(proceed);
+      if (!shouldInstallDeps) {
+        context.runtime.prompt.warn("Skipped dependency installation.");
+      }
+    }
+  }
+
+  // --- EXECUTION PHASE: Pure IO without UI interruptions ---
+  let writtenFiles = 0;
+  const lockfile = await readLockfile(context.cwd, context.runtime);
+  const hashesAcc: Record<string, string[]> = {};
+
+  for (const write of finalWrites) {
+    const item = selectedItems.find((entry) => entry.name === write.itemName);
+    if (!item) continue;
+
+    const contentResult = await resolveFileContent(write.sourceFile, item, context.cwd, context.runtime);
+    if (!contentResult.ok) {
+      return contentResult;
+    }
+
+    let content = applyAliases(contentResult.value, config);
+
+    const ensureRes = await context.runtime.fs.ensureDir(path.dirname(write.absoluteTarget));
+    if (!ensureRes.ok) return ensureRes;
+    const writeRes = await context.runtime.fs.writeFile(write.absoluteTarget, content, "utf8");
+    if (!writeRes.ok) return writeRes;
+    
+    // Update lockfile
+    const contentHash = computeHash(content);
+    if (!hashesAcc[item.name]) hashesAcc[item.name] = [];
+    hashesAcc[item.name].push(contentHash);
+    
+    writtenFiles += 1;
+    context.runtime.prompt.success(`Wrote ${write.relativeTarget}`);
+  }
+
+  if (writtenFiles > 0) {
+    for (const [itemName, fileHashes] of Object.entries(hashesAcc)) {
+      const combinedHash = computeHash(fileHashes.sort().join(""));
+      lockfile.components[itemName] = {
+        source: source,
+        hash: combinedHash,
+      };
+    }
+    await writeLockfile(context.cwd, lockfile, context.runtime);
+  }
+
+  if (shouldInstallDeps) {
+    const packageManager = resolvePackageManager(context.cwd, config.packageManager, context.runtime);
+    const depsRes = installDependencies(context.cwd, packageManager, missingDependencies, missingDevDependencies, context.runtime);
+    if (!depsRes.ok) return depsRes;
+  }
+
+  context.runtime.prompt.info(`Installed ${selectedItems.length} item(s), wrote ${writtenFiles} file(s).`);
+  return ok({
+    kind: "success",
+    message: `Installed ${selectedItems.length} item(s), wrote ${writtenFiles} file(s).`,
+  });
+}