@302ai/media-studio-cli 0.1.0-beta.3 → 0.1.0-beta.4

package/README.md

@@ -81,6 +81,37 @@ Point at a different server via `MEDIA_STUDIO_API_URL` env var, or
 `msc login --region local|cn|default` (the server you log into is saved and
 reused).
 
+### Skills
+
+Reference a skill in the prompt and the CLI installs it into the session
+sandbox on demand:
+
+```bash
+msc chat "/always-hello 不管我说什么"      # leading slash command
+msc chat "%%/always-hello%%不管我说什么"    # web composer marker, paste-compatible
+```
+
+Both spellings resolve to the same thing. The upstream installs a skill only
+from the turn's `skill_urls` field, so the CLI looks the reference up in your
+catalog (`GET /api/skills`) and sends the matching package URL — prompt text
+alone triggers nothing.
+
+- A **bare `/command` counts only at the start of the prompt**, so mid-sentence
+  slashes stay prose (`check /etc/hosts` is not a skill reference). The `%%…%%`
+  marker works anywhere. The leading token can be any bare slug, single-segment
+  included — `/tmp what is this` resolves `/tmp` — and a reference that matches
+  nothing fails the turn with the catalog listed, so a typo never silently
+  degrades to a skill-less answer.
+- The catalog is fetched **only when the prompt references a skill**; skill-free
+  turns cost no extra request.
+- Unknown skills fail the turn with a non-zero exit before any session is
+  provisioned. A **disabled** skill is auto-enabled first — the same ADR-0001
+  behavior as the web's "Use in Chat" — because the upstream treats `enabled`
+  as a hard precondition for invocation and would otherwise download the
+  package and silently never run it. The enable flips the skill's `enabled`
+  flag on your account (a persistent change), is reported as
+  `Auto-enabled for this turn: …`, and a failed enable aborts the turn.
+
 ### Staging server (expired TLS certificate)
 
 The staging server's certificate is expired (ops declines renewal), so the

package/dist/index.js

@@ -1467,7 +1467,7 @@ function _getBuiltinFlags(long, short, userNames, userAliases) {
 // package.json
 var package_default = {
   name: "@302ai/media-studio-cli",
-  version: "0.1.0-beta.3",
+  version: "0.1.0-beta.4",
   description: "CLI for AI Media Studio — let external agents drive the core media-studio features",
   author: "302.AI",
   license: "Apache-2.0",
@@ -1885,7 +1885,7 @@ function F(t) {
   throw new I(t);
 }
 
-// ../media-studio-core/dist/transport/errors.js
+// ../media-studio-core/src/transport/errors.ts
 var ERR_SESSION_EXPIRED = "SESSION_EXPIRED";
 
 class ChatUpstreamError extends Error {
@@ -7307,7 +7307,7 @@ function refine(fn, _params = {}) {
 function superRefine(fn, params) {
   return _superRefine(fn, params);
 }
-// ../media-studio-core/dist/client/types.js
+// ../media-studio-core/src/client/types.ts
 var MeResponseSchema = object({
   uid: string2().nullable().optional(),
   name: string2().nullable().optional(),
@@ -7316,8 +7316,26 @@ var MeResponseSchema = object({
   exp: number2().optional(),
   valid: boolean2()
 });
+var SkillListItemSchema = object({
+  id: string2(),
+  name: string2(),
+  command: string2(),
+  link: string2(),
+  enabled: boolean2(),
+  added: boolean2(),
+  builtIn: boolean2(),
+  version: string2()
+});
+var SkillListResponseSchema = object({
+  success: boolean2(),
+  skills: array(SkillListItemSchema)
+});
+var SingleSkillResponseSchema = object({
+  success: boolean2(),
+  skill: SkillListItemSchema
+});
 
-// ../media-studio-core/dist/client/auth.js
+// ../media-studio-core/src/client/auth.ts
 class ClientAuth {
   baseUrl;
   apiKey;
@@ -7691,7 +7709,7 @@ function isPotentialField(line, field) {
   }
   return line.length <= field.length || line.charCodeAt(field.length) === 58;
 }
-// ../media-studio-core/dist/media/media-result.js
+// ../media-studio-core/src/media/media-result.ts
 var MediaResultSchema = object({
   status: string2().optional(),
   domain: string2().optional(),
@@ -7791,7 +7809,7 @@ function addOrMergeMediaResult(assets, incoming) {
   }
 }
 
-// ../media-studio-core/dist/stream/events.js
+// ../media-studio-core/src/stream/events.ts
 var TextDeltaEventSchema = object({
   type: literal("text-delta"),
   delta: string2(),
@@ -7837,7 +7855,7 @@ var ChatStreamEventSchema = discriminatedUnion("type", [
   StreamErrorEventSchema
 ]);
 
-// ../media-studio-core/dist/stream/stream.js
+// ../media-studio-core/src/stream/stream.ts
 function abortException(signal) {
   const reason = signal?.reason;
   if (reason instanceof Error)
@@ -7943,7 +7961,9 @@ class ChatStream {
         }
         const retryDelay = initialDelay * 2 ** attemptCount;
         attemptCount++;
-        await delay(retryDelay, { signal: this.options.signal });
+        await delay(retryDelay, {
+          ...this.options.signal ? { signal: this.options.signal } : {}
+        });
       }
     }
   }
@@ -8090,7 +8110,7 @@ class ChatStream {
   }
 }
 
-// ../media-studio-core/dist/client/chat.js
+// ../media-studio-core/src/client/chat.ts
 class ClientChat {
   baseUrl;
   apiKey;
@@ -8122,14 +8142,15 @@ class ClientChat {
       ...isNotNil(options.skillUrls) ? { skill_urls: options.skillUrls } : {},
       ...isNotNil(options.structuredOutput) ? { structured_output: options.structuredOutput } : {}
     };
-    if (options.messages.length === 1 && options.messages[0].role === "user" && isString(options.messages[0].content)) {
-      body.prompt = options.messages[0].content;
+    const firstMessage = options.messages[0];
+    if (options.messages.length === 1 && firstMessage?.role === "user" && isString(firstMessage.content)) {
+      body.prompt = firstMessage.content;
     }
     return this.customFetch(url, {
       method: "POST",
       headers,
       body: JSON.stringify(body),
-      signal: options.signal
+      ...options.signal ? { signal: options.signal } : {}
     });
   }
   async raw(promptOrOptions, maybeOptions) {
@@ -8172,44 +8193,122 @@ class ClientChat {
   }
 }
 
-// ../../node_modules/nanoid/index.js
-import { webcrypto as crypto } from "node:crypto";
-
-// ../../node_modules/nanoid/url-alphabet/index.js
+// ../media-studio-core/node_modules/nanoid/url-alphabet/index.js
 var urlAlphabet = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict";
 
-// ../../node_modules/nanoid/index.js
-var POOL_SIZE_MULTIPLIER = 128;
-var pool;
-var poolOffset;
-function fillPool(bytes) {
+// ../media-studio-core/node_modules/nanoid/index.js
+var GET_RANDOM_LIMIT = 65536;
+function fillRandom(buffer) {
+  let from = 0;
+  while (from < buffer.length) {
+    let to = Math.min(from + GET_RANDOM_LIMIT, buffer.length);
+    crypto.getRandomValues(buffer.subarray(from, to));
+    from = to;
+  }
+}
+function random3(bytes) {
+  bytes |= 0;
   if (bytes < 0)
     throw new RangeError("Wrong ID size");
-  try {
-    if (!pool || pool.length < bytes) {
-      pool = Buffer.allocUnsafe(bytes * POOL_SIZE_MULTIPLIER);
-      crypto.getRandomValues(pool);
-      poolOffset = 0;
-    } else if (poolOffset + bytes > pool.length) {
-      crypto.getRandomValues(pool);
-      poolOffset = 0;
-    }
-  } catch (e) {
-    pool = undefined;
-    throw e;
+  let buffer = Buffer.allocUnsafe(bytes);
+  fillRandom(buffer);
+  return buffer;
+}
+function customRandom(alphabet, defaultSize, getRandom) {
+  let safeByteCutoff = 256 - 256 % alphabet.length;
+  if (safeByteCutoff === 256) {
+    let mask = alphabet.length - 1;
+    return (size = defaultSize) => {
+      if (!size)
+        return "";
+      let id = "";
+      while (true) {
+        let bytes = getRandom(size);
+        let i = size;
+        while (i--) {
+          id += alphabet[bytes[i] & mask];
+          if (id.length >= size)
+            return id;
+        }
+      }
+    };
   }
-  poolOffset += bytes;
+  let step = Math.ceil(1.6 * 256 * defaultSize / safeByteCutoff);
+  return (size = defaultSize) => {
+    if (!size)
+      return "";
+    let id = "";
+    while (true) {
+      let bytes = getRandom(step);
+      let i = step;
+      while (i--) {
+        if (bytes[i] < safeByteCutoff) {
+          id += alphabet[bytes[i] % alphabet.length];
+          if (id.length >= size)
+            return id;
+        }
+      }
+    }
+  };
 }
-function nanoid2(size = 21) {
-  fillPool(size |= 0);
-  let id = "";
-  for (let i = poolOffset - size;i < poolOffset; i++) {
-    id += urlAlphabet[pool[i] & 63];
+var POOL_MAX = GET_RANDOM_LIMIT / 2;
+function customAlphabet(alphabet, defaultSize = 21) {
+  if (typeof alphabet !== "string" || !alphabet || alphabet.length > 256) {
+    return customRandom(alphabet, defaultSize, random3);
+  }
+  for (let i = 0;i < alphabet.length; i++) {
+    if (alphabet.charCodeAt(i) > 255) {
+      return customRandom(alphabet, defaultSize, random3);
+    }
   }
-  return id;
+  let charCodes = Uint8Array.from(alphabet, (str) => {
+    return str.charCodeAt(0);
+  });
+  let alphabetLen = alphabet.length;
+  let mask = (2 << 31 - Math.clz32(alphabetLen - 1 | 1)) - 1;
+  let pool = "";
+  let poolOffset = 0;
+  let poolNext = 0;
+  return (size = defaultSize) => {
+    size |= 0;
+    if (size < 0)
+      throw new RangeError("Wrong ID size");
+    if (size === 0)
+      return "";
+    if (poolOffset + size > pool.length) {
+      let target = Math.max(poolNext, size);
+      poolNext = Math.min(target * 16, POOL_MAX);
+      let buffer = Buffer.allocUnsafe(target);
+      if (mask === alphabetLen - 1) {
+        fillRandom(buffer);
+        for (let i = 0;i < target; i++) {
+          buffer[i] = charCodes[buffer[i] & mask];
+        }
+      } else {
+        let randomBytes = Buffer.allocUnsafe(Math.ceil(1.6 * (mask + 1) * target / alphabetLen));
+        let accepted = 0;
+        while (accepted < target) {
+          fillRandom(randomBytes);
+          for (let i = 0;i < randomBytes.length; i++) {
+            let index = randomBytes[i] & mask;
+            if (index < alphabetLen) {
+              buffer[accepted++] = charCodes[index];
+              if (accepted === target)
+                break;
+            }
+          }
+        }
+      }
+      pool = buffer.toString("latin1");
+      poolOffset = 0;
+    }
+    poolOffset += size;
+    return pool.substring(poolOffset - size, poolOffset);
+  };
 }
+var nanoid2 = customAlphabet(urlAlphabet);
 
-// ../media-studio-core/dist/client/session.js
+// ../media-studio-core/src/client/session.ts
 class ChatSession {
   sessionId;
   chat;
@@ -8281,7 +8380,7 @@ class ChatSession {
   }
 }
 
-// ../media-studio-core/dist/sessions/types.js
+// ../media-studio-core/src/sessions/types.ts
 var SessionSourceSchema = _enum(["web", "cli"]);
 var ApiResponseBaseSchema = object({
   success: boolean2(),
@@ -8396,7 +8495,7 @@ var PrewarmErrorSchema = object({
   message: string2()
 });
 
-// ../media-studio-core/dist/client/sessions.js
+// ../media-studio-core/src/client/sessions.ts
 var PREWARM_TIMEOUT_MS = 60000;
 var MAX_NETWORK_RETRIES = 2;
 var RETRY_BASE_DELAY_MS = 500;
@@ -8573,7 +8672,71 @@ class ClientSessions {
   }
 }
 
-// ../media-studio-core/dist/client/client.js
+// ../media-studio-core/src/client/skills.ts
+var LIST_PAGE_SIZE = 50;
+var MAX_LIST_PAGES = 100;
+
+class ClientSkills {
+  baseUrl;
+  apiKey;
+  customFetch;
+  constructor(baseUrl, apiKey, customFetch) {
+    this.baseUrl = baseUrl;
+    this.apiKey = apiKey;
+    this.customFetch = customFetch ?? fetch;
+  }
+  async list(query) {
+    const url = new URL(`${this.baseUrl}/api/skills`);
+    if (query?.limit !== undefined) {
+      url.searchParams.set("limit", String(query.limit));
+    }
+    if (query?.offset !== undefined) {
+      url.searchParams.set("offset", String(query.offset));
+    }
+    const parsed = await this.request(url.toString(), { method: "GET", headers: this.headers() }, SkillListResponseSchema, (status) => `Skill catalog request failed with status ${status}`);
+    return parsed.skills;
+  }
+  async listAll() {
+    const all = [];
+    const seenIds = new Set;
+    for (let pages = 0;pages < MAX_LIST_PAGES; pages += 1) {
+      const page = await this.list({
+        limit: LIST_PAGE_SIZE,
+        offset: all.length
+      });
+      const fresh = page.filter((skill) => !seenIds.has(skill.id));
+      if (fresh.length === 0)
+        break;
+      for (const skill of fresh)
+        seenIds.add(skill.id);
+      all.push(...fresh);
+    }
+    return all;
+  }
+  async setEnabled(skillId, enabled) {
+    const parsed = await this.request(`${this.baseUrl}/api/skills/enabled`, {
+      method: "POST",
+      headers: { ...this.headers(), "Content-Type": "application/json" },
+      body: JSON.stringify({ skillId, enabled })
+    }, SingleSkillResponseSchema, (status) => `Skill enabled-state request failed with status ${status}`);
+    return parsed.skill;
+  }
+  headers() {
+    return { Authorization: `Bearer ${this.apiKey}` };
+  }
+  async request(url, init, schema, fallbackMessage) {
+    const response = await this.customFetch(url, init);
+    if (!response.ok) {
+      const rawBody = await response.text();
+      const message = extractUpstreamErrorMessage(rawBody) || fallbackMessage(response.status);
+      throw new ChatUpstreamError(message, response.status, rawBody);
+    }
+    const rawJson = await response.json();
+    return schema.parse(rawJson);
+  }
+}
+
+// ../media-studio-core/src/client/client.ts
 class MediaStudioClient {
   baseUrl;
   apiKey;
@@ -8581,6 +8744,7 @@ class MediaStudioClient {
   auth;
   chat;
   sessions;
+  skills;
   constructor(options) {
     const trimmedKey = options.apiKey.trim();
     if (!trimmedKey) {
@@ -8592,6 +8756,7 @@ class MediaStudioClient {
     this.auth = new ClientAuth(this.baseUrl, this.apiKey, options.fetch);
     this.chat = new ClientChat(this.baseUrl, this.apiKey, this.locale, options.fetch);
     this.sessions = new ClientSessions(this.baseUrl, this.apiKey, options.fetch);
+    this.skills = new ClientSkills(this.baseUrl, this.apiKey, options.fetch);
   }
   createSession(options) {
     return new ChatSession(this.chat, options);
@@ -8601,7 +8766,7 @@ function createMediaStudioClient(options) {
   return new MediaStudioClient(options);
 }
 
-// ../media-studio-core/dist/format/tool-formatter.js
+// ../media-studio-core/src/format/tool-formatter.ts
 var ASPECT_RATIO_PATTERN = /aspect_ratio:\s*([^\s,;]+)/i;
 var MODEL_PATTERN = /(?:^|\n)\s*-\s*model:\s*([^\s,;]+)/i;
 var DURATION_PATTERN = /(?:^|\n)\s*-\s*duration:\s*([^\s,;]+)/i;
@@ -8691,8 +8856,8 @@ function formatToolMilestone(toolName, args) {
       }
     };
   }
-  if (normalized in CREATE_TOOL_META) {
-    const meta = CREATE_TOOL_META[normalized];
+  const meta = CREATE_TOOL_META[normalized];
+  if (meta) {
     const model = isString(input.model) ? input.model : extractFromPrompt(input.prompt, MODEL_PATTERN);
     const aspectRatio = isString(input.aspect_ratio) ? input.aspect_ratio : extractFromPrompt(input.prompt, ASPECT_RATIO_PATTERN);
     const duration = isString(input.duration) ? input.duration : typeof input.duration === "number" ? `${input.duration}s` : isString(input.seconds) ? `${input.seconds}s` : extractFromPrompt(input.prompt, DURATION_PATTERN);
@@ -8865,7 +9030,9 @@ function formatToolMilestone(toolName, args) {
     };
   }
   if (normalized === "skill" || normalized === "skill_created") {
-    const skillName = isString(input.skill_name) ? input.skill_name : isString(input.name) ? input.name : "";
+    const dir = isString(input.skills_dir) ? input.skills_dir.replace(/[/\\]+$/, "") : "";
+    const dirName = dir.slice(Math.max(dir.lastIndexOf("/"), dir.lastIndexOf("\\")) + 1);
+    const skillName = isString(input.skill) ? input.skill : dirName;
     return {
       rawName: toolName,
       normalizedName: normalized,
@@ -8885,6 +9052,72 @@ function formatToolMilestone(toolName, args) {
   };
 }
 
+// ../media-studio-core/src/skills/activation.ts
+var SKILL_ACTIVATION_MARKER = "%%";
+var SKILL_ACTIVATION_RE = /%%(\/[^%\s]+)%%/g;
+function formatSkillActivation(command) {
+  return `${SKILL_ACTIVATION_MARKER}${command}${SKILL_ACTIVATION_MARKER}`;
+}
+function findSkillActivationMatches(text) {
+  return Array.from(text.matchAll(SKILL_ACTIVATION_RE)).flatMap((match, index) => {
+    const start = match.index;
+    const command = match[1];
+    if (start === undefined || !command)
+      return [];
+    return [
+      {
+        start,
+        end: start + match[0].length,
+        command,
+        displayText: command,
+        id: `skill-${command.slice(1)}-${index}`
+      }
+    ];
+  });
+}
+
+// ../media-studio-core/src/skills/compose-turn.ts
+function applySkillActivations(text, spans) {
+  const ordered = spans.toSorted((a, b) => b.start - a.start);
+  let composed = text;
+  for (const span of ordered) {
+    composed = composed.slice(0, span.start) + formatSkillActivation(span.command) + composed.slice(span.end);
+  }
+  return composed;
+}
+function composeSkillTurn(prompt, spans, skills) {
+  return {
+    text: applySkillActivations(prompt, spans),
+    skillUrls: skills.map((skill) => skill.link).filter((link) => link !== "")
+  };
+}
+
+// ../media-studio-core/src/skills/ensure-enabled.ts
+async function ensureSkillEnabled(skill, deps) {
+  if (skill.enabled)
+    return true;
+  let userSkillId = skill.userSkillId;
+  if (!userSkillId) {
+    if (!deps.add) {
+      deps.onFailure();
+      return false;
+    }
+    try {
+      userSkillId = await deps.add();
+    } catch {
+      deps.onFailure();
+      return false;
+    }
+  }
+  try {
+    await deps.enable(userSkillId);
+    return true;
+  } catch {
+    deps.onFailure();
+    return false;
+  }
+}
+
 // ../../node_modules/consola/dist/core.mjs
 var LogLevels = {
   silent: Number.NEGATIVE_INFINITY,
@@ -9870,6 +10103,121 @@ import {
 import { homedir } from "node:os";
 import { join as join2 } from "node:path";
 
+// node_modules/nanoid/url-alphabet/index.js
+var urlAlphabet2 = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict";
+
+// node_modules/nanoid/index.js
+var GET_RANDOM_LIMIT2 = 65536;
+function fillRandom2(buffer) {
+  let from = 0;
+  while (from < buffer.length) {
+    let to = Math.min(from + GET_RANDOM_LIMIT2, buffer.length);
+    crypto.getRandomValues(buffer.subarray(from, to));
+    from = to;
+  }
+}
+function random4(bytes) {
+  bytes |= 0;
+  if (bytes < 0)
+    throw new RangeError("Wrong ID size");
+  let buffer = Buffer.allocUnsafe(bytes);
+  fillRandom2(buffer);
+  return buffer;
+}
+function customRandom2(alphabet, defaultSize, getRandom) {
+  let safeByteCutoff = 256 - 256 % alphabet.length;
+  if (safeByteCutoff === 256) {
+    let mask = alphabet.length - 1;
+    return (size = defaultSize) => {
+      if (!size)
+        return "";
+      let id = "";
+      while (true) {
+        let bytes = getRandom(size);
+        let i = size;
+        while (i--) {
+          id += alphabet[bytes[i] & mask];
+          if (id.length >= size)
+            return id;
+        }
+      }
+    };
+  }
+  let step = Math.ceil(1.6 * 256 * defaultSize / safeByteCutoff);
+  return (size = defaultSize) => {
+    if (!size)
+      return "";
+    let id = "";
+    while (true) {
+      let bytes = getRandom(step);
+      let i = step;
+      while (i--) {
+        if (bytes[i] < safeByteCutoff) {
+          id += alphabet[bytes[i] % alphabet.length];
+          if (id.length >= size)
+            return id;
+        }
+      }
+    }
+  };
+}
+var POOL_MAX2 = GET_RANDOM_LIMIT2 / 2;
+function customAlphabet2(alphabet, defaultSize = 21) {
+  if (typeof alphabet !== "string" || !alphabet || alphabet.length > 256) {
+    return customRandom2(alphabet, defaultSize, random4);
+  }
+  for (let i = 0;i < alphabet.length; i++) {
+    if (alphabet.charCodeAt(i) > 255) {
+      return customRandom2(alphabet, defaultSize, random4);
+    }
+  }
+  let charCodes = Uint8Array.from(alphabet, (str) => {
+    return str.charCodeAt(0);
+  });
+  let alphabetLen = alphabet.length;
+  let mask = (2 << 31 - Math.clz32(alphabetLen - 1 | 1)) - 1;
+  let pool = "";
+  let poolOffset = 0;
+  let poolNext = 0;
+  return (size = defaultSize) => {
+    size |= 0;
+    if (size < 0)
+      throw new RangeError("Wrong ID size");
+    if (size === 0)
+      return "";
+    if (poolOffset + size > pool.length) {
+      let target = Math.max(poolNext, size);
+      poolNext = Math.min(target * 16, POOL_MAX2);
+      let buffer = Buffer.allocUnsafe(target);
+      if (mask === alphabetLen - 1) {
+        fillRandom2(buffer);
+        for (let i = 0;i < target; i++) {
+          buffer[i] = charCodes[buffer[i] & mask];
+        }
+      } else {
+        let randomBytes = Buffer.allocUnsafe(Math.ceil(1.6 * (mask + 1) * target / alphabetLen));
+        let accepted = 0;
+        while (accepted < target) {
+          fillRandom2(randomBytes);
+          for (let i = 0;i < randomBytes.length; i++) {
+            let index = randomBytes[i] & mask;
+            if (index < alphabetLen) {
+              buffer[accepted++] = charCodes[index];
+              if (accepted === target)
+                break;
+            }
+          }
+        }
+      }
+      pool = buffer.toString("latin1");
+      poolOffset = 0;
+    }
+    poolOffset += size;
+    return pool.substring(poolOffset - size, poolOffset);
+  };
+}
+var nanoid3 = customAlphabet2(urlAlphabet2);
+
 // node_modules/zod/v4/core/util.js
 function getEnumValues2(entries) {
   const numericValues = Object.values(entries).filter((v) => typeof v === "number");
@@ -10754,7 +11102,7 @@ var cuid22 = /^[0-9a-z]+$/;
 var ulid2 = /^[0-7][0-9A-HJKMNP-TV-Za-hjkmnp-tv-z]{25}$/;
 var xid2 = /^[0-9a-vA-V]{20}$/;
 var ksuid2 = /^[A-Za-z0-9]{27}$/;
-var nanoid3 = /^[a-zA-Z0-9_-]{21}$/;
+var nanoid4 = /^[a-zA-Z0-9_-]{21}$/;
 function nanoidOfLength2(length) {
   return new RegExp(`^[a-zA-Z0-9_-]{${length}}$`);
 }
@@ -11508,7 +11856,7 @@ var $ZodEmoji2 = /* @__PURE__ */ $constructor2("$ZodEmoji", (inst, def) => {
 var $ZodNanoID2 = /* @__PURE__ */ $constructor2("$ZodNanoID", (inst, def) => {
   if (def.length !== undefined && (!Number.isInteger(def.length) || def.length < 1))
     throw new Error(`Invalid nanoid length: ${def.length}`);
-  def.pattern ?? (def.pattern = def.length === undefined ? nanoid3 : nanoidOfLength2(def.length));
+  def.pattern ?? (def.pattern = def.length === undefined ? nanoid4 : nanoidOfLength2(def.length));
   $ZodStringFormat2.init(inst, def);
 });
 var $ZodCUID3 = /* @__PURE__ */ $constructor2("$ZodCUID", (inst, def) => {
@@ -15156,7 +15504,7 @@ function saveAuthFile(data) {
   const dir = getConfigDir();
   mkdirSync(dir, { recursive: true });
   const authPath = getAuthFilePath();
-  const tmpPath = `${authPath}.${nanoid2()}.tmp`;
+  const tmpPath = `${authPath}.${nanoid3()}.tmp`;
   writeFileSync(tmpPath, JSON.stringify(data, null, 2), "utf8");
   chmodSync(tmpPath, 384);
   renameSync(tmpPath, authPath);
@@ -15179,7 +15527,7 @@ function saveConfigFile(data) {
   const dir = getConfigDir();
   mkdirSync(dir, { recursive: true });
   const configPath = getConfigFilePath();
-  const tmpPath = `${configPath}.${nanoid2()}.tmp`;
+  const tmpPath = `${configPath}.${nanoid3()}.tmp`;
   writeFileSync(tmpPath, JSON.stringify(data, null, 2), "utf8");
   chmodSync(tmpPath, 384);
   renameSync(tmpPath, configPath);
@@ -15301,9 +15649,11 @@ async function* startChatStream(opts) {
     apiKey: opts.apiKey,
     fetch: opts.fetch
   });
-  const stream = await client.chat.stream(opts.prompt, {
+  const stream = await client.chat.stream({
     sessionId: opts.sessionId,
+    messages: [{ role: "user", content: opts.prompt }],
     chatTaskId: opts.chatTaskId,
+    ...opts.skillUrls && opts.skillUrls.length > 0 ? { skillUrls: opts.skillUrls } : {},
     signal: opts.signal,
     maxRetries: opts.retries,
     initialRetryDelayMs: opts.initialRetryDelayMs
@@ -15320,7 +15670,7 @@ function isSessionGoneError(err) {
   return err.body.includes(ERR_SESSION_EXPIRED);
 }
 async function provisionSession(options) {
-  const sessionId = nanoid2();
+  const sessionId = nanoid3();
   const client = createMediaStudioClient({
     baseUrl: options.apiBaseUrl,
     apiKey: options.apiKey,
@@ -15338,6 +15688,99 @@ async function provisionSession(options) {
   })).with({ status: "failed" }, () => ({ status: "failed" })).exhaustive();
 }
 
+// src/lib/skill-refs.ts
+var LEADING_COMMAND_RE = /^\s*(\/[A-Za-z0-9][\w.-]*)(?=\s|$)/;
+function findSkillRefSpans(prompt) {
+  const spans = findSkillActivationMatches(prompt).map(({ start, end, command }) => ({ start, end, command }));
+  const leading = LEADING_COMMAND_RE.exec(prompt);
+  const command = leading?.[1];
+  if (leading && command) {
+    const end = leading[0].length;
+    spans.unshift({ start: end - command.length, end, command });
+  }
+  return spans.sort((a, b) => a.start - b.start);
+}
+
+// src/services/skills.ts
+class SkillResolutionError extends Error {
+}
+function stripControlChars(text) {
+  return [...text].filter((ch) => {
+    const code = ch.codePointAt(0) ?? 0;
+    return code > 31 && (code < 127 || code > 159);
+  }).join("");
+}
+function describeUnknownSkill(command, catalog) {
+  const shown = stripControlChars(command);
+  if (catalog.length === 0) {
+    return `Unknown skill "${shown}": your skill library is empty. Add skills in the Media Studio web app first.`;
+  }
+  const available = catalog.map((skill) => stripControlChars(skill.command)).sort().join(", ");
+  return `Unknown skill "${shown}". Available: ${available}`;
+}
+function describeNotInLibrary(skill) {
+  return `Skill "${stripControlChars(skill.command)}" is disabled and not in your library yet, so the CLI ` + `cannot enable it. Add it on the Media Studio web app's Skills page, then retry.`;
+}
+function describeEnableFailure(skill, cause) {
+  const reason = stripControlChars(cause instanceof Error ? cause.message : String(cause));
+  return `Failed to enable skill "${stripControlChars(skill.command)}": ${reason}
+` + `The turn was aborted because upstream ignores disabled skills — sending it ` + `anyway would download the package and then silently do nothing.`;
+}
+async function ensureUsable(client, skill) {
+  let cause;
+  const ensured = await ensureSkillEnabled({ enabled: skill.enabled, userSkillId: skill.id }, {
+    enable: async (skillId) => {
+      try {
+        await client.skills.setEnabled(skillId, true);
+      } catch (err) {
+        cause = err;
+        throw err;
+      }
+    },
+    onFailure: () => {}
+  });
+  if (ensured)
+    return;
+  throw new SkillResolutionError(describeEnableFailure(skill, cause));
+}
+async function resolvePromptSkills(options) {
+  const spans = findSkillRefSpans(options.prompt);
+  if (spans.length === 0) {
+    return { text: options.prompt, skillUrls: [], autoEnabled: [] };
+  }
+  const client = createMediaStudioClient({
+    baseUrl: options.apiBaseUrl,
+    apiKey: options.apiKey,
+    fetch: options.fetch
+  });
+  const catalog = await client.skills.listAll();
+  const catalogByCommand = new Map;
+  for (const skill of catalog) {
+    if (!catalogByCommand.has(skill.command)) {
+      catalogByCommand.set(skill.command, skill);
+    }
+  }
+  const matched = [];
+  for (const command of new Set(spans.map((span) => span.command))) {
+    const skill = catalogByCommand.get(command);
+    if (!skill) {
+      throw new SkillResolutionError(describeUnknownSkill(command, catalog));
+    }
+    if (!skill.added) {
+      throw new SkillResolutionError(describeNotInLibrary(skill));
+    }
+    matched.push(skill);
+  }
+  const autoEnabled = [];
+  for (const skill of matched) {
+    if (!skill.enabled)
+      autoEnabled.push(stripControlChars(skill.command));
+    await ensureUsable(client, skill);
+  }
+  const composed = composeSkillTurn(options.prompt, spans, matched);
+  return { text: composed.text, skillUrls: composed.skillUrls, autoEnabled };
+}
+
 // src/commands/chat.ts
 var PROVISION_STAGE_LABELS = {
   creating: "Creating session...",
@@ -15402,7 +15845,7 @@ async function resolveChatSession(options) {
   return { sessionId, recreateOnGone: false };
 }
 async function streamTurn(options) {
-  const { args, sessionId, spinner } = options;
+  const { args, sessionId, spinner, autoEnabled } = options;
   if (!args.json) {
     spinner.start("Connecting to Media Studio...");
   }
@@ -15410,7 +15853,8 @@ async function streamTurn(options) {
     apiBaseUrl: options.apiBaseUrl,
     apiKey: options.apiKey,
     sessionId,
-    prompt: args.prompt
+    prompt: options.prompt,
+    skillUrls: options.skillUrls
   });
   let fullText = "";
   let reasoning = "";
@@ -15486,6 +15930,7 @@ async function streamTurn(options) {
           text: fullText,
           steps,
           media: mediaAssets,
+          ...autoEnabled.length > 0 ? { autoEnabled } : {},
           ...args["show-reasoning"] && reasoning ? { reasoning } : {}
         };
         process.stdout.write(`${JSON.stringify(output, null, 2)}
@@ -15506,6 +15951,7 @@ async function streamTurn(options) {
         text: fullText,
         steps,
         media: mediaAssets,
+        ...autoEnabled.length > 0 ? { autoEnabled } : {},
         ...args["show-reasoning"] && reasoning ? { reasoning } : {}
       };
       process.stdout.write(`${JSON.stringify(output, null, 2)}
@@ -15568,6 +16014,14 @@ var chatCommand = defineCommand({
     try {
       const apiKey = resolveApiKey();
       const apiBaseUrl = resolveApiBaseUrl();
+      const { text, skillUrls, autoEnabled } = await resolvePromptSkills({
+        prompt: args.prompt,
+        apiBaseUrl,
+        apiKey
+      });
+      if (autoEnabled.length > 0 && args.json !== true) {
+        consola.info(`Auto-enabled for this turn: ${autoEnabled.join(", ")}`);
+      }
       const resolved = await resolveChatSession({
         sessionFlag: args.session,
         apiBaseUrl,
@@ -15577,11 +16031,14 @@ var chatCommand = defineCommand({
       });
       await runTurn({
         args,
+        prompt: text,
         sessionId: resolved.sessionId,
         recreateOnGone: resolved.recreateOnGone,
         apiBaseUrl,
         apiKey,
-        spinner
+        spinner,
+        skillUrls,
+        autoEnabled
       });
     } catch (err) {
       spinner.stop();
@@ -16521,7 +16978,7 @@ import fs3 from "node:fs";
 // ../../node_modules/is-inside-container/index.js
 import fs2 from "node:fs";
 
-// ../../node_modules/is-inside-container/node_modules/is-docker/index.js
+// ../../node_modules/is-docker/index.js
 import fs from "node:fs";
 var isDockerCached;
 function hasDockerEnv() {
@@ -17185,7 +17642,7 @@ function shutdownServer(server) {
   server.close();
 }
 async function runLoopbackLogin(opts) {
-  const state = opts.state ?? nanoid2();
+  const state = opts.state ?? nanoid3();
   const opener = opts.openBrowser ?? defaultOpenBrowser;
   const timeoutMs = opts.timeoutMs ?? 120000;
   return new Promise((resolve, reject) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@302ai/media-studio-cli",
-  "version": "0.1.0-beta.3",
+  "version": "0.1.0-beta.4",
   "description": "CLI for AI Media Studio — let external agents drive the core media-studio features",
   "author": "302.AI",
   "license": "Apache-2.0",