apm-cli 0.8.2__tar.gz → 0.8.4__tar.gz

{apm_cli-0.8.2/src/apm_cli.egg-info → apm_cli-0.8.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: apm-cli
-Version: 0.8.2
+Version: 0.8.4
 Summary: MCP configuration tool
 Author-email: Daniel Meppiel <user@example.com>
 License: MIT License
@@ -52,6 +52,7 @@ Requires-Dist: GitPython>=3.1.0
 Provides-Extra: dev
 Requires-Dist: pytest>=7.0.0; extra == "dev"
 Requires-Dist: pytest-cov>=4.0.0; extra == "dev"
+Requires-Dist: pytest-xdist>=3.0.0; extra == "dev"
 Requires-Dist: black>=26.3.1; python_version >= "3.10" and extra == "dev"
 Requires-Dist: isort>=5.0.0; extra == "dev"
 Requires-Dist: mypy>=1.0.0; extra == "dev"
@@ -73,7 +74,7 @@ GitHub Copilot · Claude Code · Cursor · OpenCode
 
 AI coding agents need context to be useful — standards, prompts, skills, plugins — but today every developer sets this up manually. Nothing is portable nor reproducible. There's no manifest for it.
 
-**APM fixes this.** Declare your project's agentic dependencies once in `apm.yml`, and every developer who clones your repo gets a fully configured agent setup in seconds — with transitive dependency resolution, just like npm or pip.
+**APM fixes this.** Declare your project's agentic dependencies once in `apm.yml`, and every developer who clones your repo gets a fully configured agent setup in seconds — with transitive dependency resolution, just like npm or pip. It's also the first tool that lets you **author plugins** with a real dependency manager and export standard `plugin.json` packages.
 
 ```yaml
 # apm.yml — ships with your project
@@ -98,26 +99,26 @@ apm install    # every agent is configured
 
 ## Highlights
 
-- **One manifest for everything** — instructions, skills, prompts, agents, hooks, plugins, MCP servers
-- **Install from anywhere** — GitHub, GitLab, Bitbucket, Azure DevOps, GitHub Enterprise, any git host
-- **Transitive dependencies** — packages can depend on packages; APM resolves the full tree
-- **Compile to standards** — `apm compile` produces `AGENTS.md` (GitHub Copilot, OpenCode), `CLAUDE.md` (Claude Code), and `.cursor/rules/` (Cursor)
-- **Content security** — `apm audit` scans for hidden Unicode characters; `apm install` blocks compromised packages before agents can read them
-- **Create & share** — `apm pack` bundles your current configuration as a zipped package
-- **CI/CD ready** — [GitHub Action](https://github.com/microsoft/apm-action) for automated workflows
+- **[One manifest for everything](https://microsoft.github.io/apm/reference/primitive-types/)** — instructions, skills, prompts, agents, hooks, plugins, MCP servers
+- **[Install from anywhere](https://microsoft.github.io/apm/guides/dependencies/)** — GitHub, GitLab, Bitbucket, Azure DevOps, GitHub Enterprise, any git host
+- **[Transitive dependencies](https://microsoft.github.io/apm/guides/dependencies/)** — packages can depend on packages; APM resolves the full tree
+- **[Content security](https://microsoft.github.io/apm/enterprise/security/)** — `apm audit` scans for hidden Unicode; `apm install` blocks compromised packages before agents read them
+- **[Author plugins](https://microsoft.github.io/apm/guides/plugins/)** — build Copilot, Claude, and Cursor plugins with dependency management and security scanning, then export standard `plugin.json`
+- **[Pack & distribute](https://microsoft.github.io/apm/guides/pack-distribute/)** — `apm pack` bundles your configuration as a zipped package or a standalone plugin
+- **[CI/CD ready](https://github.com/microsoft/apm-action)** — GitHub Action for automated workflows
 
 ## Get Started
 
 #### Linux / macOS
 
 ```bash
-curl -sSL https://raw.githubusercontent.com/microsoft/apm/main/install.sh | sh
+curl -sSL https://aka.ms/apm-unix | sh
 ```
 
 #### Windows
 
 ```powershell
-irm https://raw.githubusercontent.com/microsoft/apm/main/install.ps1 | iex
+irm https://aka.ms/apm-windows | iex
 ```
 
 Native release binaries are published for macOS, Linux, and Windows x86_64. `apm update` reuses the matching platform installer.

{apm_cli-0.8.2 → apm_cli-0.8.4}/README.md

@@ -12,7 +12,7 @@ GitHub Copilot · Claude Code · Cursor · OpenCode
 
 AI coding agents need context to be useful — standards, prompts, skills, plugins — but today every developer sets this up manually. Nothing is portable nor reproducible. There's no manifest for it.
 
-**APM fixes this.** Declare your project's agentic dependencies once in `apm.yml`, and every developer who clones your repo gets a fully configured agent setup in seconds — with transitive dependency resolution, just like npm or pip.
+**APM fixes this.** Declare your project's agentic dependencies once in `apm.yml`, and every developer who clones your repo gets a fully configured agent setup in seconds — with transitive dependency resolution, just like npm or pip. It's also the first tool that lets you **author plugins** with a real dependency manager and export standard `plugin.json` packages.
 
 ```yaml
 # apm.yml — ships with your project
@@ -37,26 +37,26 @@ apm install    # every agent is configured
 
 ## Highlights
 
-- **One manifest for everything** — instructions, skills, prompts, agents, hooks, plugins, MCP servers
-- **Install from anywhere** — GitHub, GitLab, Bitbucket, Azure DevOps, GitHub Enterprise, any git host
-- **Transitive dependencies** — packages can depend on packages; APM resolves the full tree
-- **Compile to standards** — `apm compile` produces `AGENTS.md` (GitHub Copilot, OpenCode), `CLAUDE.md` (Claude Code), and `.cursor/rules/` (Cursor)
-- **Content security** — `apm audit` scans for hidden Unicode characters; `apm install` blocks compromised packages before agents can read them
-- **Create & share** — `apm pack` bundles your current configuration as a zipped package
-- **CI/CD ready** — [GitHub Action](https://github.com/microsoft/apm-action) for automated workflows
+- **[One manifest for everything](https://microsoft.github.io/apm/reference/primitive-types/)** — instructions, skills, prompts, agents, hooks, plugins, MCP servers
+- **[Install from anywhere](https://microsoft.github.io/apm/guides/dependencies/)** — GitHub, GitLab, Bitbucket, Azure DevOps, GitHub Enterprise, any git host
+- **[Transitive dependencies](https://microsoft.github.io/apm/guides/dependencies/)** — packages can depend on packages; APM resolves the full tree
+- **[Content security](https://microsoft.github.io/apm/enterprise/security/)** — `apm audit` scans for hidden Unicode; `apm install` blocks compromised packages before agents read them
+- **[Author plugins](https://microsoft.github.io/apm/guides/plugins/)** — build Copilot, Claude, and Cursor plugins with dependency management and security scanning, then export standard `plugin.json`
+- **[Pack & distribute](https://microsoft.github.io/apm/guides/pack-distribute/)** — `apm pack` bundles your configuration as a zipped package or a standalone plugin
+- **[CI/CD ready](https://github.com/microsoft/apm-action)** — GitHub Action for automated workflows
 
 ## Get Started
 
 #### Linux / macOS
 
 ```bash
-curl -sSL https://raw.githubusercontent.com/microsoft/apm/main/install.sh | sh
+curl -sSL https://aka.ms/apm-unix | sh
 ```
 
 #### Windows
 
 ```powershell
-irm https://raw.githubusercontent.com/microsoft/apm/main/install.ps1 | iex
+irm https://aka.ms/apm-windows | iex
 ```
 
 Native release binaries are published for macOS, Linux, and Windows x86_64. `apm update` reuses the matching platform installer.

{apm_cli-0.8.2 → apm_cli-0.8.4}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "apm-cli"
-version = "0.8.2"
+version = "0.8.4"
 description = "MCP configuration tool"
 readme = "README.md"
 requires-python = ">=3.10"
@@ -41,6 +41,7 @@ dependencies = [
 dev = [
     "pytest>=7.0.0",
     "pytest-cov>=4.0.0",
+    "pytest-xdist>=3.0.0",
     "black>=26.3.1; python_version>='3.10'",
     "isort>=5.0.0",
     "mypy>=1.0.0",
@@ -70,7 +71,7 @@ warn_return_any = true
 warn_unused_configs = true
 
 [tool.pytest.ini_options]
-addopts = "-m 'not benchmark'"
+addopts = "-m 'not benchmark' -n auto"
 markers = [
     "integration: marks tests as integration tests that may require network access",
     "slow: marks tests as slow running tests",

{apm_cli-0.8.2 → apm_cli-0.8.4}/src/apm_cli/adapters/client/copilot.py

@@ -12,6 +12,7 @@ from .base import MCPClientAdapter
 from ...registry.client import SimpleRegistryClient
 from ...registry.integration import RegistryIntegration
 from ...core.docker_args import DockerArgsProcessor
+from ...core.token_manager import GitHubTokenManager
 from ...utils.github_host import is_github_hostname
 
 
@@ -199,8 +200,10 @@ class CopilotClientAdapter(MCPClientAdapter):
             is_github_server = self._is_github_server(server_name, remote.get("url", ""))
             
             if is_github_server:
-                # Check for GitHub Personal Access Token
-                github_token = os.getenv("GITHUB_PERSONAL_ACCESS_TOKEN")
+                # Use centralized token manager (copilot chain: GITHUB_COPILOT_PAT → GITHUB_TOKEN → GITHUB_APM_PAT),
+                # falling back to GITHUB_PERSONAL_ACCESS_TOKEN for Copilot CLI compat.
+                _tm = GitHubTokenManager()
+                github_token = _tm.get_token_for_purpose('copilot') or os.getenv("GITHUB_PERSONAL_ACCESS_TOKEN")
                 if github_token:
                     config["headers"] = {
                         "Authorization": f"Bearer {github_token}"

{apm_cli-0.8.2 → apm_cli-0.8.4}/src/apm_cli/adapters/client/vscode.py

@@ -32,7 +32,7 @@ class VSCodeClientAdapter(MCPClientAdapter):
         self.registry_client = SimpleRegistryClient(registry_url)
         self.registry_integration = RegistryIntegration(registry_url)
     
-    def get_config_path(self):
+    def get_config_path(self, logger=None):
         """Get the path to the VSCode MCP configuration file in the repository.
         
         Returns:
@@ -50,11 +50,14 @@ class VSCodeClientAdapter(MCPClientAdapter):
             if not vscode_dir.exists():
                 vscode_dir.mkdir(parents=True, exist_ok=True)
         except Exception as e:
-            print(f"Warning: Could not create .vscode directory: {e}")
+            if logger:
+                logger.warning(f"Could not create .vscode directory: {e}")
+            else:
+                print(f"Warning: Could not create .vscode directory: {e}")
             
         return str(mcp_config_path)
     
-    def update_config(self, new_config):
+    def update_config(self, new_config, logger=None):
         """Update the VSCode MCP configuration with new values.
         
         Args:
@@ -63,7 +66,7 @@ class VSCodeClientAdapter(MCPClientAdapter):
         Returns:
             bool: True if successful, False otherwise.
         """
-        config_path = self.get_config_path()
+        config_path = self.get_config_path(logger=logger)
         
         try:
             # Write the updated config
@@ -72,16 +75,19 @@ class VSCodeClientAdapter(MCPClientAdapter):
                 
             return True
         except Exception as e:
-            print(f"Error updating VSCode MCP configuration: {e}")
+            if logger:
+                logger.error(f"Error updating VSCode MCP configuration: {e}")
+            else:
+                print(f"Error updating VSCode MCP configuration: {e}")
             return False
     
-    def get_current_config(self):
+    def get_current_config(self, logger=None):
         """Get the current VSCode MCP configuration.
         
         Returns:
             dict: Current VSCode MCP configuration from the local .vscode/mcp.json file.
         """
-        config_path = self.get_config_path()
+        config_path = self.get_config_path(logger=logger)
         
         try:
             try:
@@ -90,10 +96,13 @@ class VSCodeClientAdapter(MCPClientAdapter):
             except (FileNotFoundError, json.JSONDecodeError):
                 return {}
         except Exception as e:
-            print(f"Error reading VSCode MCP configuration: {e}")
+            if logger:
+                logger.error(f"Error reading VSCode MCP configuration: {e}")
+            else:
+                print(f"Error reading VSCode MCP configuration: {e}")
             return {}
     
-    def configure_mcp_server(self, server_url, server_name=None, enabled=True, env_overrides=None, server_info_cache=None, runtime_vars=None):
+    def configure_mcp_server(self, server_url, server_name=None, enabled=True, env_overrides=None, server_info_cache=None, runtime_vars=None, logger=None):
         """Configure an MCP server in VS Code mcp.json file.
         
         This method updates the .vscode/mcp.json file to add or update
@@ -105,6 +114,7 @@ class VSCodeClientAdapter(MCPClientAdapter):
             enabled (bool, optional): Whether to enable the server. Defaults to True.
             env_overrides (dict, optional): Environment variable overrides. Defaults to None.
             server_info_cache (dict, optional): Pre-fetched server info to avoid duplicate registry calls.
+            logger: Optional CommandLogger for structured output.
             
         Returns:
             bool: True if successful, False otherwise.
@@ -113,7 +123,10 @@ class VSCodeClientAdapter(MCPClientAdapter):
             ValueError: If server is not found in registry.
         """
         if not server_url:
-            print("Error: server_url cannot be empty")
+            if logger:
+                logger.error("server_url cannot be empty")
+            else:
+                print("Error: server_url cannot be empty")
             return False
             
         try:
@@ -133,14 +146,17 @@ class VSCodeClientAdapter(MCPClientAdapter):
             server_config, input_vars = self._format_server_config(server_info)
             
             if not server_config:
-                print(f"Unable to configure server: {server_url}")
+                if logger:
+                    logger.error(f"Unable to configure server: {server_url}")
+                else:
+                    print(f"Unable to configure server: {server_url}")
                 return False
             
             # Use provided server name or fallback to server_url
             config_key = server_name or server_url
             
             # Get current config
-            current_config = self.get_current_config()
+            current_config = self.get_current_config(logger=logger)
             
             # Ensure servers and inputs sections exist
             if "servers" not in current_config:
@@ -159,17 +175,23 @@ class VSCodeClientAdapter(MCPClientAdapter):
                     existing_input_ids.add(var.get("id"))
             
             # Update the configuration
-            result = self.update_config(current_config)
+            result = self.update_config(current_config, logger=logger)
             
             if result:
-                print(f"Successfully configured MCP server '{config_key}' for VS Code")
+                if logger:
+                    logger.verbose_detail(f"Configured MCP server '{config_key}' for VS Code")
+                else:
+                    print(f"Successfully configured MCP server '{config_key}' for VS Code")
             return result
             
         except ValueError:
             # Re-raise ValueError for registry errors
             raise
         except Exception as e:
-            print(f"Error configuring MCP server: {e}")
+            if logger:
+                logger.error(f"Error configuring MCP server: {e}")
+            else:
+                print(f"Error configuring MCP server: {e}")
             return False
 
     def _format_server_config(self, server_info):

apm_cli-0.8.4/src/apm_cli/bundle/__init__.py

@@ -0,0 +1,13 @@
+"""Bundle creation and consumption for APM packages."""
+
+from .packer import pack_bundle, PackResult
+from .plugin_exporter import export_plugin_bundle
+from .unpacker import unpack_bundle, UnpackResult
+
+__all__ = [
+    "pack_bundle",
+    "PackResult",
+    "export_plugin_bundle",
+    "unpack_bundle",
+    "UnpackResult",
+]

apm_cli-0.8.4/src/apm_cli/bundle/lockfile_enrichment.py

@@ -0,0 +1,76 @@
+"""Lockfile enrichment for pack-time metadata."""
+
+from datetime import datetime, timezone
+from typing import List
+
+from ..deps.lockfile import LockFile
+
+
+# Must stay in sync with packer._TARGET_PREFIXES
+_TARGET_PREFIXES = {
+    "copilot": [".github/"],
+    "vscode": [".github/"],
+    "claude": [".claude/"],
+    "cursor": [".cursor/"],
+    "opencode": [".opencode/"],
+    "all": [".github/", ".claude/", ".cursor/", ".opencode/"],
+}
+
+
+def _filter_files_by_target(deployed_files: List[str], target: str) -> List[str]:
+    """Filter deployed file paths by target prefix."""
+    prefixes = _TARGET_PREFIXES.get(target, _TARGET_PREFIXES["all"])
+    return [f for f in deployed_files if any(f.startswith(p) for p in prefixes)]
+
+
+def enrich_lockfile_for_pack(
+    lockfile: LockFile,
+    fmt: str,
+    target: str,
+) -> str:
+    """Create an enriched copy of the lockfile YAML with a ``pack:`` section.
+
+    Filters each dependency's ``deployed_files`` to only include paths
+    matching the pack *target*, so the bundle lockfile is consistent with
+    the files actually shipped in the bundle.
+
+    Does NOT mutate the original *lockfile* object  -- serialises a copy and
+    prepends the pack metadata.
+
+    Args:
+        lockfile: The resolved lockfile to enrich.
+        fmt: Bundle format (``"apm"`` or ``"plugin"``).
+        target: Effective target used for packing (``"vscode"``, ``"claude"``, ``"all"``).
+
+    Returns:
+        A YAML string with the ``pack:`` block followed by the original
+        lockfile content.
+    """
+    import yaml
+
+    pack_section = yaml.dump(
+        {
+            "pack": {
+                "format": fmt,
+                "target": target,
+                "packed_at": datetime.now(timezone.utc).isoformat(),
+            }
+        },
+        default_flow_style=False,
+        sort_keys=False,
+    )
+
+    # Build a filtered lockfile YAML: each dep's deployed_files is narrowed
+    # to only the paths matching the pack target.
+    data = yaml.safe_load(lockfile.to_yaml())
+    if data and "dependencies" in data:
+        for dep in data["dependencies"]:
+            if "deployed_files" in dep:
+                dep["deployed_files"] = _filter_files_by_target(
+                    dep["deployed_files"], target
+                )
+
+    lockfile_yaml = yaml.dump(
+        data, default_flow_style=False, sort_keys=False, allow_unicode=True
+    )
+    return pack_section + lockfile_yaml

{apm_cli-0.8.2 → apm_cli-0.8.4}/src/apm_cli/bundle/packer.py

@@ -10,18 +10,7 @@ from typing import List, Optional
 from ..deps.lockfile import LockFile, get_lockfile_path, migrate_lockfile_if_needed
 from ..models.apm_package import APMPackage
 from ..core.target_detection import detect_target
-from .lockfile_enrichment import enrich_lockfile_for_pack
-
-
-# Target prefix mapping ("copilot" and "vscode" both map to .github/)
-_TARGET_PREFIXES = {
-    "copilot": [".github/"],
-    "vscode": [".github/"],
-    "claude": [".claude/"],
-    "cursor": [".cursor/"],
-    "opencode": [".opencode/"],
-    "all": [".github/", ".claude/", ".cursor/", ".opencode/"],
-}
+from .lockfile_enrichment import enrich_lockfile_for_pack, _TARGET_PREFIXES, _filter_files_by_target
 
 
 @dataclass
@@ -33,12 +22,6 @@ class PackResult:
     lockfile_enriched: bool = False
 
 
-def _filter_files_by_target(deployed_files: List[str], target: str) -> List[str]:
-    """Filter deployed file paths by target prefix."""
-    prefixes = _TARGET_PREFIXES.get(target, _TARGET_PREFIXES["all"])
-    return [f for f in deployed_files if any(f.startswith(p) for p in prefixes)]
-
-
 def pack_bundle(
     project_root: Path,
     output_dir: Path,
@@ -46,6 +29,8 @@ def pack_bundle(
     target: Optional[str] = None,
     archive: bool = False,
     dry_run: bool = False,
+    force: bool = False,
+    logger=None,
 ) -> PackResult:
     """Create a self-contained bundle from installed APM dependencies.
 
@@ -57,6 +42,7 @@ def pack_bundle(
             (auto-detect from apm.yml / project structure).
         archive: If *True*, produce a ``.tar.gz`` and remove the directory.
         dry_run: If *True*, resolve the file list but write nothing to disk.
+        force: On collision (plugin format), last writer wins.
 
     Returns:
         :class:`PackResult` describing what was (or would be) produced.
@@ -67,6 +53,21 @@ def pack_bundle(
     """
     # 1. Read lockfile (migrate legacy apm.lock → apm.lock.yaml if needed)
     migrate_lockfile_if_needed(project_root)
+
+    # Plugin format: delegate to dedicated exporter
+    if fmt == "plugin":
+        from .plugin_exporter import export_plugin_bundle
+
+        return export_plugin_bundle(
+            project_root=project_root,
+            output_dir=output_dir,
+            target=target,
+            archive=archive,
+            dry_run=dry_run,
+            force=force,
+            logger=logger,
+        )
+
     lockfile_path = get_lockfile_path(project_root)
     lockfile = LockFile.read(lockfile_path)
     if lockfile is None:
@@ -180,10 +181,14 @@ def pack_bundle(
             )
             _scan_findings_total += len(verdict.all_findings)
     if _scan_findings_total:
-        _rich_warning(
+        _warn_msg = (
             f"Bundle contains {_scan_findings_total} hidden character(s) across source files "
             f"— run 'apm audit' to inspect before publishing"
         )
+        if logger:
+            logger.warning(_warn_msg)
+        else:
+            _rich_warning(_warn_msg)
 
     # 6. Build output directory
     bundle_dir = output_dir / f"{pkg_name}-{pkg_version}"