skillmds 1.3.1 → 1.3.3

package/dist/cli.js

@@ -34,7 +34,7 @@ import {
 
 // src/index.ts
 import { Command as Command13 } from "commander";
-import { readFileSync as readFileSync2 } from "fs";
+import { readFileSync as readFileSync3 } from "fs";
 import pc15 from "picocolors";
 
 // src/commands/lint.ts
@@ -623,7 +623,7 @@ function infoCommand() {
 import { Command as Command7, Option } from "commander";
 import { homedir as homedir4 } from "os";
 import * as p3 from "@clack/prompts";
-import { dirname, resolve as resolve3 } from "path";
+import { dirname as dirname2, resolve as resolve3 } from "path";
 import pc8 from "picocolors";
 import { lint as lint2, parseSkillMd as parseSkillMd2 } from "@skillmds/core";
 
@@ -633,6 +633,8 @@ import { existsSync as existsSync2 } from "fs";
 import { homedir as homedir3 } from "os";
 import { delimiter, join as join2 } from "path";
 import { promisify } from "util";
+import { mkdirSync as mkdirSync2, readFileSync, writeFileSync as writeFileSync3 } from "fs";
+import { dirname } from "path";
 var run = promisify(execFile);
 function resolveClaudeBin(env = process.env) {
   const override = env.SKILLMD_CLAUDE_BIN;
@@ -653,6 +655,7 @@ function resolveClaudeBin(env = process.env) {
 var needsShell = (bin) => /\.(cmd|bat)$/i.test(bin);
 var MARKETPLACE_URL = "https://skillmd.com/.claude-plugin/marketplace.json";
 var MARKETPLACE_NAME = "skillmd";
+var MARKETPLACE_SCHEMA = "https://anthropic.com/claude-code/marketplace.schema.json";
 var TIMEOUT_MS = 12e4;
 function exec(deps) {
   return deps.exec ?? ((file, args) => {
@@ -708,6 +711,123 @@ function msg(e) {
   }
   return e instanceof Error ? e.message.split(/\r?\n/)[0] : String(e);
 }
+var SITE_URL = "https://skillmd.com";
+function readJson(path) {
+  let text3;
+  try {
+    text3 = readFileSync(path, "utf8");
+  } catch {
+    return "absent";
+  }
+  try {
+    const v = JSON.parse(text3);
+    return v && typeof v === "object" && !Array.isArray(v) ? v : "unparsable";
+  } catch {
+    return "unparsable";
+  }
+}
+function writeJson(path, value) {
+  mkdirSync2(dirname(path), { recursive: true });
+  writeFileSync3(path, `${JSON.stringify(value, null, 2)}
+`);
+}
+var obj = (v) => v && typeof v === "object" && !Array.isArray(v) ? { ...v } : {};
+async function installPluginNatively(owner, slug, deps = {}) {
+  const home = deps.home ?? (process.env.USERPROFILE || process.env.HOME || homedir3());
+  const claudeDir = join2(home, ".claude");
+  if (!existsSync2(claudeDir)) return { ok: false, reason: "no Claude Code directory on this machine" };
+  const name = marketplacePluginName(owner, slug);
+  const qualified = `${name}@${MARKETPLACE_NAME}`;
+  const doFetch = deps.fetch ?? fetch;
+  let entries;
+  try {
+    const res = await doFetch(`${SITE_URL}/plugins/${owner}/${slug}/plugin.zip`, { headers: { accept: "application/zip" } });
+    if (!res.ok) return { ok: false, reason: `the plugin archive answered ${res.status}` };
+    const { unzipSync } = await import("fflate");
+    entries = unzipSync(new Uint8Array(await res.arrayBuffer()));
+  } catch (e) {
+    return { ok: false, reason: msg(e) };
+  }
+  let version2 = "1.0.0";
+  const manifest = entries[".claude-plugin/plugin.json"];
+  if (manifest) {
+    try {
+      const v = JSON.parse(new TextDecoder().decode(manifest));
+      if (typeof v.version === "string" && v.version) version2 = v.version;
+    } catch {
+    }
+  }
+  if (!manifest) return { ok: false, reason: "the plugin archive has no .claude-plugin/plugin.json" };
+  const pluginsDir = join2(claudeDir, "plugins");
+  const installPath = join2(pluginsDir, "cache", MARKETPLACE_NAME, name, version2);
+  const knownPath = join2(pluginsDir, "known_marketplaces.json");
+  const installedPath = join2(pluginsDir, "installed_plugins.json");
+  const settingsPath = join2(claudeDir, "settings.json");
+  const known = readJson(knownPath);
+  if (known === "unparsable") return { ok: false, reason: "known_marketplaces.json is not readable JSON \u2014 left untouched" };
+  const installed = readJson(installedPath);
+  if (installed === "unparsable") return { ok: false, reason: "installed_plugins.json is not readable JSON \u2014 left untouched" };
+  const settings = readJson(settingsPath);
+  if (settings === "unparsable") return { ok: false, reason: "settings.json is not readable JSON \u2014 left untouched" };
+  try {
+    for (const [path, data] of Object.entries(entries)) {
+      if (path.endsWith("/")) continue;
+      const dest = join2(installPath, ...path.split("/"));
+      mkdirSync2(dirname(dest), { recursive: true });
+      writeFileSync3(dest, data);
+    }
+    writeFileSync3(join2(installPath, ".in_use"), "");
+    const now = (/* @__PURE__ */ new Date()).toISOString();
+    const source = { source: "url", url: MARKETPLACE_URL };
+    const marketplaceDir = join2(pluginsDir, "marketplaces", MARKETPLACE_NAME);
+    const cachedPath = join2(marketplaceDir, ".claude-plugin", "marketplace.json");
+    const cached = readJson(cachedPath);
+    if (cached === "unparsable") return { ok: false, reason: "the cached marketplace manifest is not readable JSON \u2014 left untouched" };
+    const cachedDoc = cached === "absent" ? {
+      $schema: MARKETPLACE_SCHEMA,
+      name: MARKETPLACE_NAME,
+      owner: { name: "SkillMD", email: "hi@skillmd.com" },
+      description: "Agent Skill plugins from the SkillMD registry.",
+      plugins: []
+    } : cached;
+    const list = Array.isArray(cachedDoc.plugins) ? cachedDoc.plugins : [];
+    cachedDoc.plugins = [
+      ...list.filter((e) => e?.name !== name),
+      {
+        name,
+        version: version2,
+        homepage: `${SITE_URL}/plugins/${owner}/${slug}`,
+        author: { name: owner === "skillmd" ? "SkillMD" : `@${owner}` },
+        source: { source: "archive", url: `${SITE_URL}/plugins/${owner}/${slug}/plugin.zip` }
+      }
+    ];
+    writeJson(cachedPath, cachedDoc);
+    const knownDoc = known === "absent" ? {} : known;
+    if (!knownDoc[MARKETPLACE_NAME]) {
+      knownDoc[MARKETPLACE_NAME] = { source, installLocation: marketplaceDir, lastUpdated: now };
+      writeJson(knownPath, knownDoc);
+    }
+    const installedDoc = installed === "absent" ? { version: 2, plugins: {} } : installed;
+    const plugins = obj(installedDoc.plugins);
+    const prior = Array.isArray(plugins[qualified]) ? plugins[qualified] : [];
+    plugins[qualified] = [
+      ...prior.filter((p7) => p7?.scope !== "user"),
+      { scope: "user", installPath, version: version2, installedAt: now, lastUpdated: now }
+    ];
+    installedDoc.plugins = plugins;
+    if (typeof installedDoc.version !== "number") installedDoc.version = 2;
+    writeJson(installedPath, installedDoc);
+    const settingsDoc = settings === "absent" ? {} : settings;
+    const declared = obj(settingsDoc.extraKnownMarketplaces);
+    if (!declared[MARKETPLACE_NAME]) declared[MARKETPLACE_NAME] = { source };
+    settingsDoc.extraKnownMarketplaces = declared;
+    settingsDoc.enabledPlugins = { ...obj(settingsDoc.enabledPlugins), [qualified]: true };
+    writeJson(settingsPath, settingsDoc);
+  } catch (e) {
+    return { ok: false, reason: msg(e) };
+  }
+  return { ok: true, name: qualified, marketplace: MARKETPLACE_NAME };
+}
 
 // src/commands/add.ts
 var infoNotice = (text3) => ({ text: text3, style: "info" });
@@ -914,7 +1034,7 @@ function makeDefaultDeps(flags) {
           raw: r.raw,
           slug: r.slug,
           source,
-          ...spec.kind === "local" && r.file ? { files: collectFiles(dirname(r.file), dirname(r.file)) } : {}
+          ...spec.kind === "local" && r.file ? { files: collectFiles(dirname2(r.file), dirname2(r.file)) } : {}
         }));
       }
       let registryDown = null;
@@ -1171,9 +1291,12 @@ async function tryPluginInstall(arg, flags) {
   }
   if (spec.kind !== "plugin") return null;
   if (flags.agent?.length || flags.skill?.length || flags.list || flags.mode === "copy") return null;
-  if (!await claudeCliAvailable()) return null;
-  const res = await installClaudePlugin(spec.owner, spec.slug);
-  if (!res.ok) return { ok: false, reason: res.reason };
+  const viaCli = await claudeCliAvailable() ? await installClaudePlugin(spec.owner, spec.slug) : null;
+  const res = viaCli?.ok ? viaCli : await installPluginNatively(spec.owner, spec.slug, { home: flags.home });
+  if (!res.ok) {
+    if (!viaCli && /no Claude Code directory/.test(res.reason)) return null;
+    return { ok: false, reason: viaCli && !viaCli.ok ? viaCli.reason : res.reason };
+  }
   return {
     ok: true,
     agent: "claude-code",
@@ -1297,7 +1420,7 @@ async function runAddWithUI(source, flags, opts = {}) {
 
 // src/commands/list.ts
 import { Command as Command8 } from "commander";
-import { existsSync as existsSync3, readFileSync } from "fs";
+import { existsSync as existsSync3, readFileSync as readFileSync2 } from "fs";
 import { join as join4 } from "path";
 import pc9 from "picocolors";
 import { parseSkillMd as parseSkillMd3 } from "@skillmds/core";
@@ -1309,7 +1432,7 @@ function runList(flags = {}) {
       const md = join4(s.path, "SKILL.md");
       let description = "";
       if (existsSync3(md)) {
-        const parsed = parseSkillMd3(readFileSync(md, "utf8"));
+        const parsed = parseSkillMd3(readFileSync2(md, "utf8"));
         description = "error" in parsed ? `(invalid SKILL.md \u2014 ${parsed.error})` : parsed.description;
       }
       items.push({ ...s, description: safeText(description, 80) });
@@ -1941,7 +2064,7 @@ async function runInteractive() {
 // src/index.ts
 var version = "0.0.0";
 try {
-  version = JSON.parse(readFileSync2(new URL("../package.json", import.meta.url), "utf8")).version;
+  version = JSON.parse(readFileSync3(new URL("../package.json", import.meta.url), "utf8")).version;
 } catch {
 }
 var program = new Command13("skillmd").version(version).description("Lint, validate, and install Agent Skills from the SkillMD registry.").option("--json", "machine-readable output").option("--token <token>", "personal access token (prefer `skillmd login` or SKILLMD_TOKEN \u2014 command-line tokens show up in process lists)").option("--api <url>", "override the registry API base URL").option("--insecure-http", "allow an http:// --api base (local development only)");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skillmds",
-  "version": "1.3.1",
+  "version": "1.3.3",
   "description": "SkillMD for agents: the `skillmds` MCP server + the `skillmd` CLI (lint, scan, search, install, publish Agent Skills) from skillmd.com.",
   "license": "MIT",
   "author": "SkillMD",