@agenticmail/enterprise 0.5.3 → 0.5.5

package/dist/{chunk-ANW4OHXR.js → chunk-6CVIA5YL.js}

@@ -2,6 +2,9 @@ import {
   getSupportedDatabases
 } from "./chunk-NTVN3JHS.js";
 
+// src/setup/index.ts
+import { execSync } from "child_process";
+
 // src/setup/company.ts
 function toSlug(name) {
   return name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "").slice(0, 63);
@@ -310,7 +313,7 @@ async function promptDomain(inquirer, chalk, deployTarget) {
 
 // src/setup/registration.ts
 import { randomBytes } from "crypto";
-var REGISTRY_BASE_URL = process.env.AGENTICMAIL_REGISTRY_URL || "https://registry.agenticmail.com/v1";
+var REGISTRY_BASE_URL = process.env.AGENTICMAIL_REGISTRY_URL || "https://agenticmail.io/enterprise/v1";
 async function promptRegistration(inquirer, chalk, ora, domain, companyName, adminEmail) {
   if (!domain) {
     return { registered: false, verificationStatus: "skipped" };
@@ -329,9 +332,9 @@ async function promptRegistration(inquirer, chalk, ora, domain, companyName, adm
     return { registered: false, verificationStatus: "skipped" };
   }
   const spinner = ora("Generating deployment key...").start();
-  const { default: bcrypt } = await import("bcryptjs");
+  const { createHash } = await import("crypto");
   const plaintextKey = randomBytes(32).toString("hex");
-  const keyHash = await bcrypt.hash(plaintextKey, 12);
+  const keyHash = createHash("sha256").update(plaintextKey).digest("hex");
   spinner.succeed("Deployment key generated");
   spinner.start("Registering domain with AgenticMail registry...");
   const registryUrl = REGISTRY_BASE_URL.replace(/\/$/, "");
@@ -344,6 +347,7 @@ async function promptRegistration(inquirer, chalk, ora, domain, companyName, adm
       body: JSON.stringify({
         domain: domain.toLowerCase().trim(),
         keyHash,
+        sha256Hash: keyHash,
         orgName: companyName,
         contactEmail: adminEmail
       }),
@@ -354,7 +358,7 @@ async function promptRegistration(inquirer, chalk, ora, domain, companyName, adm
       spinner.fail("Domain already registered");
       console.log("");
       console.log(chalk.yellow("  This domain is already registered and verified."));
-      console.log(chalk.dim("  If this is your domain, use: agenticmail-enterprise recover"));
+      console.log(chalk.dim("  If this is your domain, use: npx @agenticmail/enterprise recover"));
       console.log("");
       const { continueAnyway } = await inquirer.prompt([{
         type: "confirm",
@@ -377,7 +381,7 @@ async function promptRegistration(inquirer, chalk, ora, domain, companyName, adm
     spinner.warn("Registry unavailable");
     console.log("");
     console.log(chalk.yellow(`  Could not reach registry: ${err.message}`));
-    console.log(chalk.dim("  You can register later with: agenticmail-enterprise verify-domain"));
+    console.log(chalk.dim("  You can register later with: npx @agenticmail/enterprise verify-domain"));
     console.log("");
     const { continueAnyway } = await inquirer.prompt([{
       type: "confirm",
@@ -444,11 +448,11 @@ async function promptRegistration(inquirer, chalk, ora, domain, companyName, adm
         await new Promise((r) => setTimeout(r, 1e4));
       } else {
         spinner.info("DNS record not found yet");
-        console.log(chalk.dim("  Run later: agenticmail-enterprise verify-domain"));
+        console.log(chalk.dim("  Run later: npx @agenticmail/enterprise verify-domain"));
       }
     }
   } else {
-    console.log(chalk.dim("  Run when ready: agenticmail-enterprise verify-domain"));
+    console.log(chalk.dim("  Run when ready: npx @agenticmail/enterprise verify-domain"));
   }
   console.log("");
   return {
@@ -636,7 +640,7 @@ async function deploy(config, db, jwtSecret, spinner, chalk) {
     return {};
   }
   spinner.start("Starting local server...");
-  const { createServer } = await import("./server-OGQWCOT6.js");
+  const { createServer } = await import("./server-6LWKND7R.js");
   const server = createServer({ port: 3e3, db, jwtSecret });
   const handle = await server.start();
   spinner.succeed("Server running");
@@ -714,6 +718,45 @@ function printCustomDomainInstructions(chalk, domain, target, cnameTarget) {
 }
 
 // src/setup/index.ts
+var DB_DRIVER_MAP = {
+  postgres: ["pg"],
+  supabase: ["pg"],
+  neon: ["pg"],
+  cockroachdb: ["pg"],
+  mysql: ["mysql2"],
+  planetscale: ["mysql2"],
+  mongodb: ["mongodb"],
+  sqlite: ["better-sqlite3"],
+  turso: ["@libsql/client"],
+  dynamodb: ["@aws-sdk/client-dynamodb", "@aws-sdk/lib-dynamodb"]
+};
+async function ensureDbDriver(dbType, ora, chalk) {
+  const packages = DB_DRIVER_MAP[dbType];
+  if (!packages?.length) return;
+  const missing = [];
+  for (const pkg of packages) {
+    try {
+      await import(pkg);
+    } catch {
+      missing.push(pkg);
+    }
+  }
+  if (!missing.length) return;
+  const spinner = ora(`Installing database driver: ${missing.join(", ")}...`).start();
+  try {
+    execSync(`npm install --no-save ${missing.join(" ")}`, {
+      stdio: "pipe",
+      timeout: 12e4
+    });
+    spinner.succeed(`Database driver installed: ${missing.join(", ")}`);
+  } catch (err) {
+    spinner.fail(`Failed to install ${missing.join(", ")}`);
+    console.error(chalk.red(`
+  Run manually: npm install ${missing.join(" ")}
+`));
+    process.exit(1);
+  }
+}
 async function runSetupWizard() {
   const { default: inquirer } = await import("inquirer");
   const { default: ora } = await import("ora");
@@ -736,6 +779,7 @@ async function runSetupWizard() {
     company.companyName,
     company.adminEmail
   );
+  await ensureDbDriver(database.type, ora, chalk);
   console.log("");
   console.log(chalk.dim("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
   console.log("");

package/dist/{chunk-PQADDAC2.js → chunk-VRRCELRN.js}

@@ -2,6 +2,9 @@ import {
   getSupportedDatabases
 } from "./chunk-NTVN3JHS.js";
 
+// src/setup/index.ts
+import { execSync } from "child_process";
+
 // src/setup/company.ts
 function toSlug(name) {
   return name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "").slice(0, 63);
@@ -715,6 +718,45 @@ function printCustomDomainInstructions(chalk, domain, target, cnameTarget) {
 }
 
 // src/setup/index.ts
+var DB_DRIVER_MAP = {
+  postgres: ["pg"],
+  supabase: ["pg"],
+  neon: ["pg"],
+  cockroachdb: ["pg"],
+  mysql: ["mysql2"],
+  planetscale: ["mysql2"],
+  mongodb: ["mongodb"],
+  sqlite: ["better-sqlite3"],
+  turso: ["@libsql/client"],
+  dynamodb: ["@aws-sdk/client-dynamodb", "@aws-sdk/lib-dynamodb"]
+};
+async function ensureDbDriver(dbType, ora, chalk) {
+  const packages = DB_DRIVER_MAP[dbType];
+  if (!packages?.length) return;
+  const missing = [];
+  for (const pkg of packages) {
+    try {
+      await import(pkg);
+    } catch {
+      missing.push(pkg);
+    }
+  }
+  if (!missing.length) return;
+  const spinner = ora(`Installing database driver: ${missing.join(", ")}...`).start();
+  try {
+    execSync(`npm install --no-save ${missing.join(" ")}`, {
+      stdio: "pipe",
+      timeout: 12e4
+    });
+    spinner.succeed(`Database driver installed: ${missing.join(", ")}`);
+  } catch (err) {
+    spinner.fail(`Failed to install ${missing.join(", ")}`);
+    console.error(chalk.red(`
+  Run manually: npm install ${missing.join(" ")}
+`));
+    process.exit(1);
+  }
+}
 async function runSetupWizard() {
   const { default: inquirer } = await import("inquirer");
   const { default: ora } = await import("ora");
@@ -737,6 +779,7 @@ async function runSetupWizard() {
     company.companyName,
     company.adminEmail
   );
+  await ensureDbDriver(database.type, ora, chalk);
   console.log("");
   console.log(chalk.dim("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
   console.log("");

package/dist/cli-build-skill-AE7QC5C5.js

@@ -0,0 +1,235 @@
+import {
+  VALID_CATEGORIES,
+  VALID_RISK_LEVELS,
+  validateSkillManifest
+} from "./chunk-TY7NVD4U.js";
+import "./chunk-KFQGP6VL.js";
+
+// src/engine/cli-build-skill.ts
+async function runBuildSkill(_args) {
+  const chalk = (await import("chalk")).default;
+  const ora = (await import("ora")).default;
+  const inquirer = (await import("inquirer")).default;
+  const fs = await import("fs/promises");
+  const path = await import("path");
+  console.log("");
+  console.log(chalk.bold("\u{1F6E0}\uFE0F  AgenticMail Community Skill Builder"));
+  console.log(chalk.dim("  Generate a valid agenticmail-skill.json for any application"));
+  console.log("");
+  const answers = await inquirer.prompt([
+    {
+      type: "input",
+      name: "application",
+      message: "What application or service should this skill integrate with?",
+      validate: (v) => v.trim().length > 0 || "Application name is required"
+    },
+    {
+      type: "input",
+      name: "operations",
+      message: "What operations should it support? (comma-separated)",
+      default: "read, create, update, delete, list"
+    },
+    {
+      type: "list",
+      name: "category",
+      message: "Category:",
+      choices: [...VALID_CATEGORIES],
+      default: "productivity"
+    },
+    {
+      type: "list",
+      name: "risk",
+      message: "Risk level:",
+      choices: [...VALID_RISK_LEVELS],
+      default: "medium"
+    },
+    {
+      type: "input",
+      name: "author",
+      message: "Your GitHub username:",
+      validate: (v) => /^[a-zA-Z0-9_-]+$/.test(v.trim()) || "Must be a valid GitHub username"
+    },
+    {
+      type: "input",
+      name: "outputDir",
+      message: "Output directory:",
+      default: (a) => `./community-skills/${a.application.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "")}`
+    }
+  ]);
+  const appSlug = answers.application.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "");
+  const toolPrefix = appSlug.replace(/-/g, "_");
+  const operations = answers.operations.split(",").map((s) => s.trim()).filter(Boolean);
+  let manifest = null;
+  const spinner = ora("Generating skill manifest...").start();
+  try {
+    const res = await fetch("http://localhost:3000/health", { signal: AbortSignal.timeout(2e3) });
+    if (res.ok) {
+      spinner.text = "Agent runtime detected \u2014 using AI to generate manifest...";
+      const aiRes = await fetch("http://localhost:3000/api/chat", {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({
+          message: buildAIPrompt(answers.application, operations, answers.category, answers.risk, answers.author, appSlug, toolPrefix),
+          system: "You are a skill manifest generator. Respond with ONLY valid JSON, no markdown, no explanation."
+        }),
+        signal: AbortSignal.timeout(3e4)
+      });
+      if (aiRes.ok) {
+        const aiData = await aiRes.json();
+        const content = aiData.response || aiData.message || "";
+        const jsonMatch = content.match(/\{[\s\S]*\}/);
+        if (jsonMatch) {
+          manifest = JSON.parse(jsonMatch[0]);
+        }
+      }
+    }
+  } catch {
+  }
+  if (!manifest) {
+    spinner.text = "Generating from template...";
+    manifest = generateFromTemplate(answers.application, operations, answers.category, answers.risk, answers.author, appSlug, toolPrefix);
+  }
+  spinner.succeed("Manifest generated");
+  const validation = validateSkillManifest(manifest);
+  if (!validation.valid) {
+    console.log(chalk.yellow("\n  Validation warnings (auto-fixing)..."));
+    if (!manifest.category) manifest.category = answers.category;
+    if (!manifest.risk) manifest.risk = answers.risk;
+    if (!manifest.license) manifest.license = "MIT";
+    if (!manifest.description || manifest.description.length < 20) {
+      manifest.description = `Integrates with ${answers.application} to ${operations.slice(0, 3).join(", ")} and more.`;
+    }
+  }
+  const outDir = path.resolve(answers.outputDir);
+  await fs.mkdir(outDir, { recursive: true });
+  const manifestPath = path.join(outDir, "agenticmail-skill.json");
+  await fs.writeFile(manifestPath, JSON.stringify(manifest, null, 2) + "\n");
+  console.log(chalk.green("  \u2714") + ` Written: ${manifestPath}`);
+  const readmePath = path.join(outDir, "README.md");
+  await fs.writeFile(readmePath, generateReadme(manifest));
+  console.log(chalk.green("  \u2714") + ` Written: ${readmePath}`);
+  const finalCheck = validateSkillManifest(manifest);
+  if (finalCheck.valid) {
+    console.log(chalk.green("\n  \u2714 Manifest is valid!"));
+  } else {
+    console.log(chalk.yellow("\n  \u26A0 Manifest has issues:"));
+    for (const err of finalCheck.errors) console.log(chalk.red("    " + err));
+  }
+  for (const warn of finalCheck.warnings) console.log(chalk.yellow("    \u26A0 " + warn));
+  console.log("");
+  const { submit } = await inquirer.prompt([{
+    type: "confirm",
+    name: "submit",
+    message: "Submit this skill as a PR to agenticmail/enterprise?",
+    default: false
+  }]);
+  if (submit) {
+    const { runSubmitSkill } = await import("./cli-submit-skill-LDFJGSKO.js");
+    await runSubmitSkill([outDir]);
+  } else {
+    console.log(chalk.dim("\n  To submit later: npx @agenticmail/enterprise submit-skill " + answers.outputDir));
+  }
+}
+function generateFromTemplate(app, operations, category, risk, author, slug, prefix) {
+  const tools = operations.map((op) => {
+    const opSlug = op.toLowerCase().replace(/[^a-z0-9]+/g, "_").replace(/^_|_$/g, "");
+    const isRead = ["read", "get", "list", "search", "fetch", "view", "query"].some((r) => opSlug.includes(r));
+    const isDelete = ["delete", "remove", "destroy"].some((r) => opSlug.includes(r));
+    const toolCategory = isDelete ? "destroy" : isRead ? "read" : "write";
+    const toolRisk = isDelete ? "high" : isRead ? "low" : "medium";
+    const sideEffects = [];
+    if (!isRead) sideEffects.push("network-request");
+    if (isDelete) sideEffects.push("deletes-data");
+    return {
+      id: `${prefix}_${opSlug}`,
+      name: op.charAt(0).toUpperCase() + op.slice(1),
+      description: `${op.charAt(0).toUpperCase() + op.slice(1)} in ${app}`,
+      category: toolCategory,
+      riskLevel: toolRisk,
+      sideEffects,
+      parameters: {}
+    };
+  });
+  return {
+    id: slug,
+    name: app,
+    description: `Integrates with ${app} to ${operations.slice(0, 3).join(", ")}${operations.length > 3 ? " and more" : ""}. Community-contributed skill for AgenticMail agents.`,
+    version: "1.0.0",
+    author,
+    repository: `https://github.com/${author}/${slug}`,
+    license: "MIT",
+    category,
+    risk,
+    tags: [slug, category],
+    tools,
+    configSchema: {
+      apiKey: { type: "secret", label: "API Key", description: `Your ${app} API key`, required: true }
+    },
+    minEngineVersion: "0.3.0",
+    homepage: `https://github.com/${author}/${slug}`
+  };
+}
+function buildAIPrompt(app, operations, category, risk, author, slug, prefix) {
+  return `Generate a valid agenticmail-skill.json manifest for "${app}".
+
+Requirements:
+- id: "${slug}"
+- name: "${app}"
+- Operations: ${operations.join(", ")}
+- category: "${category}"
+- risk: "${risk}"
+- author: "${author}"
+- repository: "https://github.com/${author}/${slug}"
+- license: "MIT"
+- Each tool needs: id (${prefix}_<action>), name, description, category (read/write/execute/communicate/destroy), riskLevel (low/medium/high/critical), sideEffects array
+- Valid sideEffects: sends-email, sends-message, sends-sms, posts-social, runs-code, modifies-files, deletes-data, network-request, controls-device, accesses-secrets, financial
+- Include a configSchema with any API keys or settings needed
+- version: "1.0.0"
+- minEngineVersion: "0.3.0"
+- description must be 20-500 chars
+
+Output ONLY the JSON object, no explanation.`;
+}
+function generateReadme(manifest) {
+  const tools = (manifest.tools || []).map(
+    (t) => `| \`${t.id}\` | ${t.name} | ${t.description} | ${t.riskLevel || "medium"} |`
+  ).join("\n");
+  return `# ${manifest.name}
+
+${manifest.description}
+
+## Tools
+
+| ID | Name | Description | Risk |
+|----|------|-------------|------|
+${tools}
+
+## Configuration
+
+${manifest.configSchema ? Object.entries(manifest.configSchema).map(
+    ([k, v]) => `- **${k}** (${v.type || "string"}): ${v.description || k}${v.required ? " *(required)*" : ""}`
+  ).join("\n") : "No configuration required."}
+
+## Installation
+
+Install this skill from the AgenticMail Enterprise dashboard:
+
+1. Go to **Community Skills** in the sidebar
+2. Search for "${manifest.name}"
+3. Click **Install**
+
+Or via the API:
+\`\`\`bash
+curl -X POST /api/engine/community/skills/${manifest.id}/install \\
+  -H "Content-Type: application/json" \\
+  -d '{"orgId": "your-org-id"}'
+\`\`\`
+
+## License
+
+${manifest.license || "MIT"}
+`;
+}
+export {
+  runBuildSkill
+};

package/dist/{cli-recover-SSGGSKZJ.js → cli-recover-5M74V7V4.js}

@@ -1,6 +1,6 @@
 import {
   DomainLock
-} from "./chunk-HSF6OJ5Z.js";
+} from "./chunk-UPU23ZRG.js";
 import "./chunk-KFQGP6VL.js";
 
 // src/domain-lock/cli-recover.ts
@@ -89,7 +89,7 @@ async function runRecover(args) {
   console.log(`  ${chalk.bold("Type:")}   ${chalk.cyan("TXT")}`);
   console.log(`  ${chalk.bold("Value:")}  ${chalk.cyan(result.dnsChallenge)}`);
   console.log("");
-  console.log(chalk.dim("  Then run: agenticmail-enterprise verify-domain"));
+  console.log(chalk.dim("  Then run: npx @agenticmail/enterprise verify-domain"));
   console.log("");
 }
 export {

package/dist/cli-submit-skill-LDFJGSKO.js

@@ -0,0 +1,162 @@
+import {
+  validateSkillManifest
+} from "./chunk-TY7NVD4U.js";
+import "./chunk-KFQGP6VL.js";
+
+// src/engine/cli-submit-skill.ts
+var UPSTREAM_REPO = "agenticmail/enterprise";
+async function runSubmitSkill(args) {
+  const chalk = (await import("chalk")).default;
+  const ora = (await import("ora")).default;
+  const { execSync } = await import("child_process");
+  const fs = await import("fs/promises");
+  const path = await import("path");
+  const target = args.filter((a) => !a.startsWith("--"))[0];
+  if (!target) {
+    console.log(`${chalk.bold("Usage:")} npx @agenticmail/enterprise submit-skill <path-to-skill-dir>`);
+    process.exit(1);
+    return;
+  }
+  const skillDir = path.resolve(target);
+  console.log("");
+  console.log(chalk.bold("\u{1F680} Submit Community Skill"));
+  console.log("");
+  const spinner = ora("Checking prerequisites...").start();
+  try {
+    execSync("gh --version", { stdio: "pipe" });
+  } catch {
+    spinner.fail("GitHub CLI (gh) is not installed");
+    console.log("");
+    console.log(chalk.dim("  Install it from: https://cli.github.com/"));
+    console.log(chalk.dim("  Then run: gh auth login"));
+    process.exit(1);
+    return;
+  }
+  try {
+    execSync("gh auth status", { stdio: "pipe" });
+  } catch {
+    spinner.fail("Not authenticated with GitHub CLI");
+    console.log(chalk.dim("  Run: gh auth login"));
+    process.exit(1);
+    return;
+  }
+  spinner.succeed("GitHub CLI authenticated");
+  const validateSpinner = ora("Validating skill manifest...").start();
+  const manifestPath = path.join(skillDir, "agenticmail-skill.json");
+  let manifest;
+  try {
+    const raw = await fs.readFile(manifestPath, "utf-8");
+    manifest = JSON.parse(raw);
+  } catch (err) {
+    validateSpinner.fail(`Cannot read manifest: ${err.message}`);
+    process.exit(1);
+    return;
+  }
+  const validation = validateSkillManifest(manifest);
+  if (!validation.valid) {
+    validateSpinner.fail("Manifest validation failed");
+    for (const err of validation.errors) {
+      console.log(chalk.red("  \u2502 " + err));
+    }
+    console.log(chalk.dim("\n  Fix the errors above and try again."));
+    process.exit(1);
+    return;
+  }
+  validateSpinner.succeed(`Manifest valid: ${manifest.name} v${manifest.version}`);
+  const skillId = manifest.id;
+  const branchName = `community/add-${skillId}`;
+  const forkSpinner = ora("Forking repository...").start();
+  try {
+    execSync(`gh repo fork ${UPSTREAM_REPO} --clone=false 2>&1 || true`, { stdio: "pipe" });
+    forkSpinner.succeed("Repository forked (or already exists)");
+  } catch {
+    forkSpinner.succeed("Fork exists");
+  }
+  let forkUrl;
+  try {
+    const ghUser = execSync("gh api user --jq .login", { encoding: "utf-8" }).trim();
+    forkUrl = `https://github.com/${ghUser}/enterprise.git`;
+  } catch {
+    forkSpinner.fail("Cannot determine GitHub username");
+    process.exit(1);
+    return;
+  }
+  const tmpDir = path.join(process.env.TMPDIR || "/tmp", `agenticmail-submit-${Date.now()}`);
+  const pushSpinner = ora("Cloning fork...").start();
+  try {
+    execSync(`git clone --depth 1 ${forkUrl} "${tmpDir}"`, { stdio: "pipe" });
+    pushSpinner.text = "Creating branch...";
+    const run = (cmd) => execSync(cmd, { cwd: tmpDir, stdio: "pipe", encoding: "utf-8" });
+    run(`git remote add upstream https://github.com/${UPSTREAM_REPO}.git`);
+    run("git fetch upstream main --depth 1");
+    run(`git checkout -b ${branchName} upstream/main`);
+    pushSpinner.text = "Copying skill files...";
+    const destDir = path.join(tmpDir, "community-skills", skillId);
+    await fs.mkdir(destDir, { recursive: true });
+    const files = await fs.readdir(skillDir);
+    for (const file of files) {
+      await fs.copyFile(path.join(skillDir, file), path.join(destDir, file));
+    }
+    pushSpinner.text = "Committing...";
+    run(`git add community-skills/${skillId}/`);
+    run(`git commit -m "Add community skill: ${manifest.name}"`);
+    pushSpinner.text = "Pushing to fork...";
+    run(`git push origin ${branchName} --force`);
+    pushSpinner.succeed("Pushed to fork");
+  } catch (err) {
+    pushSpinner.fail(`Git operation failed: ${err.message}`);
+    process.exit(1);
+    return;
+  }
+  const prSpinner = ora("Opening pull request...").start();
+  const toolsList = (manifest.tools || []).map(
+    (t) => `- \`${t.id}\` \u2014 ${t.name}: ${t.description}`
+  ).join("\n");
+  const prBody = `## Community Skill Submission
+
+**Skill ID:** \`${manifest.id}\`
+**Application:** ${manifest.name}
+**Category:** ${manifest.category}
+**Risk Level:** ${manifest.risk}
+**Author:** @${manifest.author}
+**License:** ${manifest.license}
+
+### Description
+
+${manifest.description}
+
+### Tools Provided
+
+${toolsList}
+
+### Validation
+
+- [x] Manifest passes \`npx @agenticmail/enterprise validate\`
+- [x] All required fields present
+- [x] No duplicate tool IDs
+${manifest.tags ? `
+**Tags:** ${manifest.tags.join(", ")}` : ""}`;
+  try {
+    const prUrl = execSync(
+      `gh pr create --repo ${UPSTREAM_REPO} --head ${branchName} --title "Add community skill: ${manifest.name}" --body "${prBody.replace(/"/g, '\\"')}"`,
+      { cwd: tmpDir, encoding: "utf-8", stdio: "pipe" }
+    ).trim();
+    prSpinner.succeed("Pull request opened!");
+    console.log(chalk.green(`
+  ${prUrl}
+`));
+  } catch (err) {
+    if (err.stderr?.includes("already exists")) {
+      prSpinner.warn("A PR for this skill already exists");
+    } else {
+      prSpinner.fail(`Could not open PR: ${err.message}`);
+    }
+  }
+  try {
+    await fs.rm(tmpDir, { recursive: true, force: true });
+  } catch {
+  }
+}
+export {
+  runSubmitSkill
+};