@aiwg/cli 2026.8.28 → 2026.9.0

package/dist/src/cli/handlers/use.js

@@ -1022,12 +1022,13 @@ async function countBundleDeployedArtifacts(bundlePath, target, provider) {
 }
 const SKILL_SUPPORT_REFERENCE = /(?:^|[\s`('"\[])((?:templates|references|scripts|assets)\/[A-Za-z0-9._@/+\-]+)(?=$|[\s`)'"\],:;])/gm;
 /**
- * Project skill-relative support files may live beside the skill or at the
- * bundle root (plugin payloads commonly share report templates). Materialize
+ * Skill-relative support files may live beside the skill or at the bundle root
+ * (plugin payloads commonly share report templates). Materialize
  * only paths explicitly named by SKILL.md, and fail closed on missing or
  * unsafe sources so a deployed instruction can never point at absent assets.
  */
-async function reconcileProjectLocalSkillAssets(bundlePath, target, provider) {
+async function reconcileDeployedSkillAssets(bundlePath, target, provider, options = {}) {
+    const strictReferences = options.strictReferences ?? true;
     const skillsRoot = path.join(bundlePath, 'skills');
     let skillDirs;
     try {
@@ -1054,7 +1055,13 @@ async function reconcileProjectLocalSkillAssets(bundlePath, target, provider) {
         catch {
             continue;
         }
-        const references = [...new Set([...content.matchAll(SKILL_SUPPORT_REFERENCE)].map(match => match[1]))];
+        const frontmatter = content.match(/^---\r?\n([\s\S]*?)\r?\n---/)?.[1] ?? '';
+        const declaredEntrypoint = frontmatter
+            .match(/^[ \t]+entrypoint:\s*["']?([^"'\s]+)["']?\s*$/m)?.[1];
+        const declaredEntrypoints = new Set(declaredEntrypoint ? [declaredEntrypoint] : []);
+        const references = [...new Set([
+                ...content.matchAll(SKILL_SUPPORT_REFERENCE),
+            ].map(match => match[1]).concat([...declaredEntrypoints]))];
         for (const relative of references) {
             const normalized = path.posix.normalize(relative);
             if (normalized !== relative || normalized.startsWith('../') || path.isAbsolute(normalized)) {
@@ -1072,8 +1079,12 @@ async function reconcileProjectLocalSkillAssets(bundlePath, target, provider) {
                 }
                 catch { /* try bundle-root fallback */ }
             }
-            if (!source)
-                throw new Error(`missing skill support asset '${relative}' referenced by ${sourceSkillMd}`);
+            if (!source) {
+                if (strictReferences || declaredEntrypoints.has(relative)) {
+                    throw new Error(`missing skill support asset '${relative}' referenced by ${sourceSkillMd}`);
+                }
+                continue;
+            }
             let deployedSkillRoot;
             for (const root of deployRoots) {
                 // The deployer may select the bulk or kernel tier; use the tier that
@@ -1162,7 +1173,7 @@ async function deployOneProjectLocalBundle(opts) {
         exitCode = result.exitCode;
         if (exitCode === 0 && !dryRun) {
             try {
-                await reconcileProjectLocalSkillAssets(bundle.artifactPath, target, provider);
+                await reconcileDeployedSkillAssets(bundle.artifactPath, target, provider);
             }
             catch (error) {
                 ui.warn(`Project-local skill asset deployment failed for '${bundle.id}': ${error.message}`);
@@ -2733,6 +2744,17 @@ export class UseHandler {
                             || `Failed to deploy required addon '${dependency}'`,
                     };
                 }
+                if (!dryRunAddon) {
+                    try {
+                        await reconcileDeployedSkillAssets(dependencySource, target, provider, { strictReferences: false });
+                    }
+                    catch (error) {
+                        return {
+                            exitCode: 1,
+                            message: `Required addon '${dependency}' skill asset deployment failed: ${error instanceof Error ? error.message : String(error)}`,
+                        };
+                    }
+                }
                 try {
                     await registerSourceCliCommands({
                         source: dependencySource,
@@ -2764,6 +2786,17 @@ export class UseHandler {
             if (addonResult.exitCode !== 0) {
                 return addonResult;
             }
+            if (!dryRunAddon) {
+                try {
+                    await reconcileDeployedSkillAssets(addonSource, target, provider, { strictReferences: false });
+                }
+                catch (error) {
+                    return {
+                        exitCode: 1,
+                        message: `${kind} '${framework}' skill asset deployment failed: ${error instanceof Error ? error.message : String(error)}`,
+                    };
+                }
+            }
             // Register only artifacts actually written by a confirmed deployment.
             if (!dryRunAddon) {
                 try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aiwg/cli",
-  "version": "2026.8.28",
+  "version": "2026.9.0",
   "description": "Lightweight AIWG CLI for signed, versioned web-backed resources.",
   "type": "module",
   "license": "MIT",
@@ -68,6 +68,7 @@
     "@fortemi/core": "2026.7.15",
     "@modelcontextprotocol/sdk": "^1.30.0",
     "ajv": "^8.20.0",
+    "ajv-formats": "^3.0.1",
     "chalk": "^4.1.2",
     "chokidar": "^4.0.3",
     "commander": "^12.1.0",