kward 0.80.1 → 0.81.0

data/lib/kward/prompt_interface/overlay_renderer.rb

@@ -11,12 +11,24 @@ module Kward
         return selection_overlay_rows(width, height: height) if @select_state
         return git_overlay_rows(width, height: height) if @git_state
         return project_browser_rows(width, height: height) if project_browser_visible?
+        return completion_overlay_rows(width, height: height) if @completion_overlay
         return history_search_overlay_rows(width, height: height) if history_search_active?
         return file_overlay_rows(width, height: height) if file_overlay_visible?
 
         slash_overlay_rows(width, height: height)
       end
 
+      def completion_overlay_rows(width, height: screen_height)
+        candidates = @completion_overlay[:candidates]
+        max_rows = max_overlay_list_rows(height)
+        selected = @completion_overlay[:index].to_i
+        start = centered_list_window_start(selected, candidates.length, max_rows)
+        rows = (candidates[start, max_rows] || []).each_with_index.map do |candidate, offset|
+          overlay_choice_line(candidate, selected: start + offset == selected)
+        end
+        overlay_card_rows("Completions", rows, width)
+      end
+
       def history_search_overlay_rows(width, height: screen_height)
         matches = history_search_matches
         if matches.empty?

data/lib/kward/prompt_interface/screen.rb

@@ -87,6 +87,11 @@ module Kward
         ensure_scroll_region_locked(rows.length, width: width, height: height)
       end
 
+      def make_room_for_composer_after_handoff_locked
+        rows, = composer_layout(screen_width, screen_height)
+        @output_io.print("\r\n" * rows.length)
+      end
+
       def ensure_scroll_region_locked(row_count, redraw_transcript: true, width: screen_width, height: screen_height)
         new_reserved_rows = [[row_count, 1].max, [height - 1, 1].max].min
         return if @reserved_rows == new_reserved_rows && @last_height == height

data/lib/kward/prompt_interface.rb

@@ -128,7 +128,7 @@ module Kward
       end
     end
 
-    def initialize(input: $stdin, output: $stdout, slash_commands: [], overlay_settings: nil, project_browser_icon_theme: "off", footer: nil, composer_status: nil, busy_help: true, attachment_badges: nil, attachment_parser: nil, banner_message: nil, tab_keybindings: nil, prompt_history: nil, workspace_root: Dir.pwd, editor_mode: nil, editor_mode_source: nil, editor_auto_indent: true, editor_auto_indent_source: nil, editor_auto_close_pairs: true, editor_auto_close_pairs_source: nil, editor_soft_wrap: true, editor_soft_wrap_source: nil, editor_bar_cursor: true, editor_bar_cursor_source: nil, editor_line_numbers: "absolute", editor_line_numbers_source: nil, diff_view: "auto", diff_view_source: nil)
+    def initialize(input: $stdin, output: $stdout, slash_commands: [], overlay_settings: nil, project_browser_icon_theme: "off", footer: nil, composer_status: nil, busy_help: true, attachment_badges: nil, attachment_parser: nil, banner_message: nil, tab_keybindings: nil, prompt_history: nil, workspace_root: Dir.pwd, editor_mode: nil, editor_mode_source: nil, editor_auto_indent: true, editor_auto_indent_source: nil, editor_auto_close_pairs: true, editor_auto_close_pairs_source: nil, editor_soft_wrap: true, editor_soft_wrap_source: nil, editor_bar_cursor: true, editor_bar_cursor_source: nil, editor_line_numbers: "absolute", editor_line_numbers_source: nil, diff_view: "auto", diff_view_source: nil, redraw_handler: nil)
       @input_io = input
       @output_io = output
       @reader = TTY::Reader.new(input: input, output: output, interrupt: :error)
@@ -162,6 +162,10 @@ module Kward
       @restoring_transcript = false
       @pending_keys = []
       @completion_provider = nil
+      @completion_cycle = nil
+      @completion_overlay = nil
+      @redraw_handler = redraw_handler
+      @transcript_redraw_requested = false
       @original_console_mode = nil
       @raw_mode_active = false
       @slash_commands = normalize_slash_commands(slash_commands)
@@ -258,24 +262,11 @@ module Kward
     end
 
     def say(message)
-      @mutex.synchronize do
-        text = message.to_s
-        if @restoring_transcript
-          write_transcript_text_locked(text)
-          write_transcript_text_locked("\n") unless text.end_with?("\n")
-          @stream_state.finish_block
-          next
-        end
+      write_transcript_message(message, preserve_composer: false)
+    end
 
-        with_synchronized_output_locked do
-          clear_prompt_for_output_locked
-          write_transcript_text_locked(text)
-          write_transcript_text_locked("\n") unless text.end_with?("\n")
-          @stream_state.finish_block
-          render_prompt_after_output_locked
-        end
-        @output_io.flush
-      end
+    def write_transcript(message)
+      write_transcript_message(message, preserve_composer: true)
     end
 
     def say_visual(message)
@@ -328,6 +319,16 @@ module Kward
       @slash_overlay_disabled = previous_slash_overlay_disabled
     end
 
+    def update_completion_provider(provider, slash_overlay: true)
+      @mutex.synchronize do
+        @completion_provider = provider
+        @completion_cycle = nil
+        @completion_overlay = nil
+        @slash_overlay_disabled = !slash_overlay
+        render_prompt_locked if @started
+      end
+    end
+
     def with_prompt_history(history)
       previous_history = @prompt_history
       @prompt_history = history
@@ -435,6 +436,8 @@ module Kward
           reset_history_navigation
         end
         @pending_keys.clear
+        @completion_cycle = nil
+        @completion_overlay = nil
         @asking = true
         @busy = false
         @queued_count = 0
@@ -454,11 +457,14 @@ module Kward
             render_prompt_locked unless result.is_a?(String) || result == EXIT_INPUT || prompt_action_result?(result)
           end
         end
+        perform_pending_transcript_redraw
         return result if result.is_a?(String) || prompt_action_result?(result)
         return nil if result == EXIT_INPUT
 
         sleep 0.02 if key.nil?
       end
+    ensure
+      perform_pending_transcript_redraw
     end
 
     def yes?(message, default: false)
@@ -573,13 +579,19 @@ module Kward
       end
     end
 
-    def with_terminal_handoff
+    def with_terminal_handoff(preserve_composer: false)
       start
       input = nil
       output = nil
       @mutex.synchronize do
-        clear_prompt_for_output_locked
-        restore_scroll_region_locked
+        if preserve_composer
+          handle_resize_locked
+          reserve_composer_region_locked
+          move_to_transcript_cursor_locked
+        else
+          clear_prompt_for_output_locked
+          restore_scroll_region_locked
+        end
         disable_editor_mouse_reporting(force: true)
         @output_io.print(BRACKETED_PASTE_RESTORE)
         @output_io.print(KEYBOARD_PROTOCOL_RESTORE)
@@ -594,6 +606,8 @@ module Kward
       yield(input, output)
     ensure
       @mutex.synchronize do
+        restore_scroll_region_locked if preserve_composer
+        make_room_for_composer_after_handoff_locked if !preserve_composer && @started && @asking
         enter_raw_mode_locked
         @output_io.print(KEYBOARD_PROTOCOL_ENABLE)
         @output_io.print(BRACKETED_PASTE_ENABLE)
@@ -683,6 +697,8 @@ module Kward
 
     def restore_composer_snapshot_locked(snapshot)
       @composer = snapshot[:composer] || new_composer_state_with_history
+      @completion_cycle = nil
+      @completion_overlay = nil
       @prompt_label = snapshot[:prompt_label].to_s.empty? ? "You>" : snapshot[:prompt_label].to_s
       self.composer_input = @composer.input
       self.composer_cursor = @composer.cursor
@@ -811,6 +827,8 @@ module Kward
         render_prompt_locked unless [EXIT_INPUT, CANCEL_INPUT].include?(result) || prompt_action_result?(result)
         [EXIT_INPUT, CANCEL_INPUT].include?(result) ? result : result
       end
+    ensure
+      perform_pending_transcript_redraw
     end
 
     def update_assistant_label(label)
@@ -855,6 +873,21 @@ module Kward
       end
     end
 
+    def record_transient_terminal_output(text)
+      value = text.to_s
+      return if value.empty?
+
+      @mutex.synchronize do
+        append_transcript_buffer(value)
+        append_transcript_buffer("\n") unless value.end_with?("\n")
+        @stream_state.finish_block
+        width, height = screen_size
+        remember_transcript_viewport_locked(height)
+        with_synchronized_output_locked { redraw_screen_locked(width: width, height: height) }
+        @output_io.flush
+      end
+    end
+
     def write_transcript_delta(delta)
       @mutex.synchronize do
         with_synchronized_output_locked do
@@ -904,6 +937,45 @@ module Kward
 
     private
 
+    def write_transcript_message(message, preserve_composer:)
+      @mutex.synchronize do
+        text = message.to_s
+        if @restoring_transcript
+          write_transcript_text_locked(text)
+          write_transcript_text_locked("\n") unless text.end_with?("\n")
+          @stream_state.finish_block
+          next
+        end
+
+        with_synchronized_output_locked do
+          if preserve_composer
+            prepare_transcript_output_locked
+          else
+            clear_prompt_for_output_locked
+          end
+          write_transcript_text_locked(text)
+          write_transcript_text_locked("\n") unless text.end_with?("\n")
+          @stream_state.finish_block
+          preserve_composer ? restore_composer_cursor_locked : render_prompt_after_output_locked
+        end
+        @output_io.flush
+      end
+    end
+
+    def request_transcript_redraw
+      redraw_screen_locked
+      @transcript_redraw_requested = true
+    end
+
+    def perform_pending_transcript_redraw
+      requested = @mutex.synchronize do
+        pending = @transcript_redraw_requested
+        @transcript_redraw_requested = false
+        pending
+      end
+      @redraw_handler&.call if requested
+    end
+
     def prompt_workspace_root
       @workspace_root
     end

data/lib/kward/prompts/commands.rb

@@ -28,6 +28,7 @@ module Kward
       { name: "diff", description: "Open the file changes recorded in this session.", argument_hint: "" },
       { name: "files", description: "Browse project files.", argument_hint: "" },
       { name: "shell", description: "Open the embedded Kward shell.", argument_hint: "" },
+      { name: "capture", description: "Run a command with bounded transcript capture.", argument_hint: "<command>" },
       { name: "scratchpad", description: "Open an unsaved editor buffer.", argument_hint: "[text|markdown|ruby]" },
       { name: "pty", description: "Run a command in an interactive PTY passthrough session.", argument_hint: "<command>" },
       { name: "tab", description: "Manage tabs.", argument_hint: "[1-n|move|close|new|name|worktree]" },
@@ -36,6 +37,7 @@ module Kward
       { name: "sandbox", description: "Inspect or configure model command sandboxing.", argument_hint: "[status|off|read_only|workspace_write|network allow|network deny]" },
       { name: "hooks", description: "Inspect lifecycle hooks.", argument_hint: "[list|events|logs|doctor|trust|untrust]" },
       { name: "skill", description: "Activate a skill or capture one from a saved session.", argument_hint: "<name>|capture" },
+      { name: "skills", description: "Review project skill trust.", argument_hint: "[status|trust|untrust]" },
       { name: "memory", description: "Inspect and manage Kward memory.", argument_hint: "[enable|disable|auto-summary|core|add|list|forget|promote|relax|inspect|why|summarize]" }
     ].freeze
     BUILTIN_RESERVED_COMMAND_NAMES = BUILTIN_COMMANDS.map { |command| command[:name] }.freeze

data/lib/kward/prompts.rb

@@ -22,22 +22,22 @@ module Kward
     # @param plugin_context [String, nil] trusted plugin-provided instructions
     # @return [Hash] role/content system message
     # @api public
-    def system_message(workspace_root: Dir.pwd, include_workspace_personality: true, model: nil, reasoning_effort: nil, now: Time.now, memory_context: nil, plugin_context: nil, execution_profile_context: nil)
+    def system_message(workspace_root: Dir.pwd, include_workspace_personality: true, model: nil, reasoning_effort: nil, now: Time.now, memory_context: nil, plugin_context: nil, execution_profile_context: nil, project_skill_paths: nil)
       {
         role: "system",
-        content: prompt_parts(workspace_root: workspace_root, include_workspace_personality: include_workspace_personality, model: model, reasoning_effort: reasoning_effort, now: now, memory_context: memory_context, plugin_context: plugin_context, execution_profile_context: execution_profile_context).compact.join("\n\n")
+        content: prompt_parts(workspace_root: workspace_root, include_workspace_personality: include_workspace_personality, model: model, reasoning_effort: reasoning_effort, now: now, memory_context: memory_context, plugin_context: plugin_context, execution_profile_context: execution_profile_context, project_skill_paths: project_skill_paths).compact.join("\n\n")
       }
     end
 
-    def prompt_parts(workspace_root: Dir.pwd, include_workspace_personality: true, model: nil, reasoning_effort: nil, now: Time.now, memory_context: nil, plugin_context: nil, execution_profile_context: nil)
-      prompt_sections(workspace_root: workspace_root, include_workspace_personality: include_workspace_personality, model: model, reasoning_effort: reasoning_effort, now: now, memory_context: memory_context, plugin_context: plugin_context, execution_profile_context: execution_profile_context).map { |section| section[:content] }
+    def prompt_parts(workspace_root: Dir.pwd, include_workspace_personality: true, model: nil, reasoning_effort: nil, now: Time.now, memory_context: nil, plugin_context: nil, execution_profile_context: nil, project_skill_paths: nil)
+      prompt_sections(workspace_root: workspace_root, include_workspace_personality: include_workspace_personality, model: model, reasoning_effort: reasoning_effort, now: now, memory_context: memory_context, plugin_context: plugin_context, execution_profile_context: execution_profile_context, project_skill_paths: project_skill_paths).map { |section| section[:content] }
     end
 
     # Returns labeled prompt sections for inspection by CLI and RPC frontends.
     #
     # @return [Array<Hash>] section hashes with label, content, and optional source
     # @api public
-    def prompt_sections(workspace_root: Dir.pwd, include_workspace_personality: true, model: nil, reasoning_effort: nil, now: Time.now, memory_context: nil, plugin_context: nil, execution_profile_context: nil)
+    def prompt_sections(workspace_root: Dir.pwd, include_workspace_personality: true, model: nil, reasoning_effort: nil, now: Time.now, memory_context: nil, plugin_context: nil, execution_profile_context: nil, project_skill_paths: nil)
       return replacement_prompt_sections if ConfigFiles.replacement_system_prompt?
 
       sections = [prompt_section("Built-in system prompt", base_prompt)]
@@ -48,7 +48,7 @@ module Kward
         sections << prompt_section("Persona", persona_prompt(workspace_root, model: model, reasoning_effort: reasoning_effort, now: now))
         sections << prompt_section("Plugin context", plugin_context) unless plugin_context.to_s.empty?
       end
-      skills = ConfigFiles.skills(workspace_root: workspace_root)
+      skills = ConfigFiles.skills(workspace_root: workspace_root, project_skill_paths: project_skill_paths)
       sections << prompt_section("Configured skills", skills_prompt(skills), source: skills.empty? ? nil : File.join(ConfigFiles.config_dir, "skills"))
       sections << prompt_section(workspace_agents_context_label(workspace_root), workspace_agents_context(workspace_root), source: ConfigFiles.workspace_agents_file?(workspace_root) ? ConfigFiles.workspace_agents_path(workspace_root) : nil)
       sections.compact

data/lib/kward/rpc/server.rb

@@ -579,6 +579,7 @@ module Kward
           stability: { protocol: "stable", compatibility: "additive-fields-unless-protocol-version-changes", experimentalCapabilities: [] },
           commands: { supported: true, methods: COMMAND_METHODS, method: COMMAND_METHODS[0], runMethod: COMMAND_METHODS[1], sources: ["builtin", "prompt", "skill", "plugin"], executableSources: ["builtin", "plugin"] },
           skillCapture: { supported: true, methods: SKILL_CAPTURE_METHODS, destination: "personal", source: "savedSessionActiveLeaf", reviewRequired: true, overwrite: "explicit", autoActivate: false },
+          projectSkillTrust: { supported: false, trustRequired: true, reason: "RPC has no interactive trust decision bridge; project skills remain skipped unless globally enabled." },
           mcp: {
             supported: true,
             transport: "stdio",

data/lib/kward/session_store.rb

@@ -297,7 +297,7 @@ module Kward
     # `workspace` is used both for the active root and to restore read-before-write
     # paths from successful read tool results. If a session moved workspaces, load
     # it through `session_location` first so the original cwd is respected.
-    def load(path, workspace: Workspace.new, provider: nil, model: nil, reasoning_effort: nil)
+    def load(path, workspace: Workspace.new, provider: nil, model: nil, reasoning_effort: nil, project_skill_paths: nil)
       resolved_path = resolve_session_path(path)
       records = records_from_file(resolved_path)
       header = session_header(records, resolved_path)
@@ -317,7 +317,8 @@ module Kward
         model: runtime["model"] || model,
         reasoning_effort: runtime["reasoningEffort"] || reasoning_effort,
         session_memories: memory_state["sessionMemories"],
-        last_memory_retrieval: memory_state["lastRetrieval"]
+        last_memory_retrieval: memory_state["lastRetrieval"],
+        project_skill_paths: project_skill_paths
       )
       restore_tool_output_artifacts(records, conversation)
       conversation.mark_last_entry_compaction! if latest_record_type(records) == "compaction"

data/lib/kward/skills/registry.rb

@@ -1,4 +1,5 @@
 require "pathname"
+require_relative "trust_store"
 
 # Namespace for the Kward CLI agent runtime.
 module Kward
@@ -13,8 +14,9 @@ module Kward
     # @api public
     class Registry
       SkillSource = Struct.new(:root, :label, :scope, :precedence, keyword_init: true)
+      SkillCandidate = Struct.new(:path, :root, :label, :scope, :digest, keyword_init: true)
 
-      def initialize(config_dir:, workspace_root:, project_skills_trusted:, skill_class:, max_file_bytes:, markdown_parser:, inside_directory:, warning_sink: nil)
+      def initialize(config_dir:, workspace_root:, project_skills_trusted:, skill_class:, max_file_bytes:, markdown_parser:, inside_directory:, warning_sink: nil, project_skill_paths: nil)
         @config_dir = config_dir
         @workspace_root = workspace_root
         @project_skills_trusted = project_skills_trusted
@@ -23,6 +25,32 @@ module Kward
         @markdown_parser = markdown_parser
         @inside_directory = inside_directory
         @warning_sink = warning_sink
+        @project_skill_paths = project_skill_paths&.map do |path|
+          File.realpath(path)
+        rescue SystemCallError
+          File.expand_path(path)
+        end
+      end
+
+      # Returns project skill files without activating their instructions.
+      #
+      # @return [Array<SkillCandidate>]
+      # @api public
+      def project_skill_candidates
+        skill_sources.select { |source| source.scope == :project }.flat_map do |source|
+          discover_source(source).filter_map do |path|
+            SkillCandidate.new(
+              path: path,
+              root: source.root,
+              label: source.label,
+              scope: source.scope,
+              digest: skill_digest(path)
+            )
+          rescue StandardError => e
+            emit_warning "Warning: skipping Kward skill #{path}: #{e.message}"
+            nil
+          end
+        end
       end
 
       # Returns discovered, validated skills in precedence order.
@@ -99,17 +127,39 @@ module Kward
 
       def scan_source(source)
         return [] unless Dir.exist?(source.root)
-        if source.scope == :project && !@project_skills_trusted
+        if source.scope == :project && @project_skill_paths.nil? && !@project_skills_trusted
           emit_warning "Warning: skipping #{source.label} in #{source.root}: project skills are not trusted"
           return []
         end
 
+        paths = discover_source(source)
+        return paths unless source.scope == :project && @project_skill_paths
+
+        paths.select { |path| @project_skill_paths.include?(canonical_path(path)) }
+      end
+
+      def canonical_path(path)
+        File.realpath(path)
+      rescue SystemCallError
+        File.expand_path(path)
+      end
+
+      def discover_source(source)
         Dir.glob(File.join(source.root, "*", "SKILL.md")).sort
       rescue StandardError => e
         emit_warning "Warning: skipping #{source.label} in #{source.root}: #{e.message}"
         []
       end
 
+      def skill_digest(path)
+        TrustStore.digest_files(skill_files(path), root: @workspace_root)
+      end
+
+      def skill_files(path)
+        folder = File.dirname(path)
+        [path] + skill_resources(folder).map { |resource| File.join(folder, resource) }
+      end
+
       def skill_content(skill, content)
         lines = [
           %(<skill_content name="#{xml_escape(skill.name)}">),

data/lib/kward/skills/trust_coordinator.rb

@@ -0,0 +1,45 @@
+require_relative "trust_store"
+
+# Namespace for Agent Skills discovery and trust management.
+module Kward
+  module Skills
+    # Resolves which discovered project skills need a user decision.
+    class TrustCoordinator
+      def initialize(workspace_root:, trust_store:)
+        @workspace_root = workspace_root
+        @trust_store = trust_store
+      end
+
+      def decision(candidate)
+        @trust_store.decision(
+          workspace_root: @workspace_root,
+          skill_path: candidate.path,
+          digest: candidate.digest
+        )
+      end
+
+      def pending(candidates)
+        candidates.reject { |candidate| decision(candidate) }
+      end
+
+      def allowed_paths(candidates)
+        candidates.filter_map { |candidate| candidate.path if decision(candidate) == "allow" }
+      end
+
+      def remove_workspace!
+        @trust_store.remove_workspace!(workspace_root: @workspace_root)
+      end
+
+      def record!(candidates, decision)
+        candidates.each do |candidate|
+          @trust_store.set_decision!(
+            workspace_root: @workspace_root,
+            skill_path: candidate.path,
+            digest: candidate.digest,
+            decision: decision
+          )
+        end
+      end
+    end
+  end
+end

data/lib/kward/skills/trust_store.rb

@@ -0,0 +1,107 @@
+require "digest"
+require "json"
+require "pathname"
+require_relative "../path_guard"
+require_relative "../private_file"
+
+# Namespace for Agent Skills discovery and trust management.
+module Kward
+  module Skills
+    # Persists workspace-scoped decisions for project skill snapshots.
+    class TrustStore
+      DECISIONS = %w[allow deny].freeze
+
+      attr_reader :path
+
+      def initialize(config_dir:)
+        @path = File.join(File.expand_path(config_dir), "trusted_project_skills.json")
+      end
+
+      def decision(workspace_root:, skill_path:, digest:)
+        record = skill_record(workspace_root: workspace_root, skill_path: skill_path)
+        return unless record
+        return unless record["digest"] == digest.to_s
+
+        decision = record["decision"]
+        decision if DECISIONS.include?(decision)
+      end
+
+      def set_decision!(workspace_root:, skill_path:, digest:, decision:)
+        decision = decision.to_s
+        raise ArgumentError, "invalid project skill trust decision: #{decision}" unless DECISIONS.include?(decision)
+
+        config = read_config
+        workspace = workspace_key(workspace_root)
+        skill = skill_key(workspace_root, skill_path)
+        config["workspaces"] ||= {}
+        config["workspaces"][workspace] ||= { "skills" => {} }
+        config["workspaces"][workspace]["skills"] ||= {}
+        config["workspaces"][workspace]["skills"][skill] = {
+          "digest" => digest.to_s,
+          "decision" => decision
+        }
+        PrivateFile.write_json(path, config)
+      end
+
+      def remove_workspace!(workspace_root:)
+        config = read_config
+        config.fetch("workspaces", {}).delete(workspace_key(workspace_root))
+        PrivateFile.write_json(path, config)
+      end
+
+      def remove_skill!(workspace_root:, skill_path:)
+        config = read_config
+        workspace = config.fetch("workspaces", {})[workspace_key(workspace_root)]
+        workspace&.fetch("skills", {})&.delete(skill_key(workspace_root, skill_path))
+        PrivateFile.write_json(path, config)
+      end
+
+      def self.digest_files(paths, root: nil)
+        root = File.realpath(root) if root
+        digest = Digest::SHA256.new
+        paths.map { |path| File.realpath(path) }.sort.each do |path|
+          raise ArgumentError, "file is outside digest root" if root && !PathGuard.inside?(path, root)
+
+          relative_path = root ? Pathname.new(path).relative_path_from(Pathname.new(root)).to_s : path
+          digest.update(relative_path)
+          digest.update("\0")
+          digest.update(File.binread(path))
+          digest.update("\0")
+        end
+        digest.hexdigest
+      end
+
+      private
+
+      def skill_record(workspace_root:, skill_path:)
+        workspace = read_config.fetch("workspaces", {})[workspace_key(workspace_root)]
+        workspace&.fetch("skills", {})&.[](skill_key(workspace_root, skill_path))
+      end
+
+      def read_config
+        return {} unless File.file?(path)
+
+        config = JSON.parse(File.read(path))
+        config.is_a?(Hash) ? config : {}
+      rescue JSON::ParserError, SystemCallError
+        {}
+      end
+
+      def workspace_key(workspace_root)
+        File.realpath(workspace_root)
+      rescue SystemCallError
+        File.expand_path(workspace_root)
+      end
+
+      def skill_key(workspace_root, skill_path)
+        workspace = workspace_key(workspace_root)
+        skill = File.realpath(skill_path)
+        raise ArgumentError, "project skill is outside workspace" unless PathGuard.inside?(skill, workspace)
+
+        Pathname.new(skill).relative_path_from(Pathname.new(workspace)).to_s
+      rescue SystemCallError
+        raise ArgumentError, "project skill path does not exist"
+      end
+    end
+  end
+end

data/lib/kward/version.rb

@@ -1,5 +1,5 @@
 # Namespace for the Kward CLI agent runtime.
 module Kward
   # Current gem version.
-  VERSION = "0.80.1"
+  VERSION = "0.81.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kward
 version: !ruby/object:Gem::Version
-  version: 0.80.1
+  version: 0.81.0
 platform: ruby
 authors:
 - Kai Wood
@@ -191,6 +191,8 @@ files:
 - lib/kward/cli/memory_commands.rb
 - lib/kward/cli/openrouter_commands.rb
 - lib/kward/cli/plugins.rb
+- lib/kward/cli/project_skills.rb
+- lib/kward/cli/project_skills_commands.rb
 - lib/kward/cli/prompt_interface.rb
 - lib/kward/cli/rendering.rb
 - lib/kward/cli/runtime_helpers.rb
@@ -353,6 +355,8 @@ files:
 - lib/kward/session_tree_tool_display.rb
 - lib/kward/skills/capture.rb
 - lib/kward/skills/registry.rb
+- lib/kward/skills/trust_coordinator.rb
+- lib/kward/skills/trust_store.rb
 - lib/kward/starter_pack_installer.rb
 - lib/kward/steering.rb
 - lib/kward/tab_driver.rb