@apitap/core 1.6.3 → 1.7.0

package/dist/skill/search.js

@@ -1,13 +1,15 @@
 // src/skill/search.ts
-import { listSkillFiles, readSkillFile } from './store.js';
+import { ensureIndex } from './index.js';
 /**
  * Search skill files for endpoints matching a query.
+ * Uses the search index for sub-second results.
  * Matches against domain names, endpoint IDs, and endpoint paths.
  * Query terms are matched case-insensitively.
  */
 export async function searchSkills(query, skillsDir) {
-    const summaries = await listSkillFiles(skillsDir);
-    if (summaries.length === 0) {
+    const index = await ensureIndex(skillsDir);
+    const domainCount = Object.keys(index.domains).length;
+    if (domainCount === 0) {
         return {
             found: false,
             suggestion: 'No skill files found. Run `apitap capture <url>` to capture API traffic first.',
@@ -15,32 +17,28 @@ export async function searchSkills(query, skillsDir) {
     }
     const terms = query.toLowerCase().split(/\s+/).filter(Boolean);
     const results = [];
-    for (const summary of summaries) {
-        const skill = await readSkillFile(summary.domain, skillsDir, { trustUnsigned: true });
-        if (!skill)
-            continue;
-        const domainLower = skill.domain.toLowerCase();
-        for (const ep of skill.endpoints) {
+    for (const [domain, entry] of Object.entries(index.domains)) {
+        const domainLower = domain.toLowerCase();
+        for (const ep of entry.endpoints) {
             const endpointIdLower = ep.id.toLowerCase();
             const pathLower = ep.path.toLowerCase();
             const methodLower = ep.method.toLowerCase();
-            // Check if all query terms match against the combined searchable text
             const searchText = `${domainLower} ${endpointIdLower} ${pathLower} ${methodLower}`;
             const allMatch = terms.every(term => searchText.includes(term));
             if (allMatch) {
                 results.push({
-                    domain: skill.domain,
+                    domain,
                     endpointId: ep.id,
                     method: ep.method,
                     path: ep.path,
-                    tier: ep.replayability?.tier ?? 'unknown',
-                    verified: ep.replayability?.verified ?? false,
+                    tier: ep.tier ?? 'unknown',
+                    verified: ep.verified ?? false,
                 });
             }
         }
     }
     if (results.length === 0) {
-        const domains = summaries.map(s => s.domain).join(', ');
+        const domains = Object.keys(index.domains).join(', ');
         return {
             found: false,
             suggestion: `No matches for "${query}". Available domains: ${domains}`,

package/dist/skill/search.js.map

@@ -1 +1 @@
-{"version":3,"file":"search.js","sourceRoot":"","sources":["../../src/skill/search.ts"],"names":[],"mappings":"AAAA,sBAAsB;AACtB,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAiB3D;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAa,EACb,SAAkB;IAElB,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;IAClD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,UAAU,EAAE,gFAAgF;SAC7F,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAmB,EAAE,CAAC;IAEnC,KAAK,MAAM,OAAO,IAAI,SAAS,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACtF,IAAI,CAAC,KAAK;YAAE,SAAS;QAErB,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAE/C,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACjC,MAAM,eAAe,GAAG,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;YAC5C,MAAM,SAAS,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACxC,MAAM,WAAW,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAE5C,sEAAsE;YACtE,MAAM,UAAU,GAAG,GAAG,WAAW,IAAI,eAAe,IAAI,SAAS,IAAI,WAAW,EAAE,CAAC;YACnF,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YAEhE,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC;oBACX,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,UAAU,EAAE,EAAE,CAAC,EAAE;oBACjB,MAAM,EAAE,EAAE,CAAC,MAAM;oBACjB,IAAI,EAAE,EAAE,CAAC,IAAI;oBACb,IAAI,EAAE,EAAE,CAAC,aAAa,EAAE,IAAI,IAAI,SAAS;oBACzC,QAAQ,EAAE,EAAE,CAAC,aAAa,EAAE,QAAQ,IAAI,KAAK;iBAC9C,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxD,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,UAAU,EAAE,mBAAmB,KAAK,yBAAyB,OAAO,EAAE;SACvE,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAClC,CAAC"}
+{"version":3,"file":"search.js","sourceRoot":"","sources":["../../src/skill/search.ts"],"names":[],"mappings":"AAAA,sBAAsB;AACtB,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAiBzC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAa,EACb,SAAkB;IAElB,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,CAAC;IAE3C,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IACtD,IAAI,WAAW,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,UAAU,EAAE,gFAAgF;SAC7F,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAmB,EAAE,CAAC;IAEnC,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;QAEzC,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACjC,MAAM,eAAe,GAAG,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;YAC5C,MAAM,SAAS,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACxC,MAAM,WAAW,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAE5C,MAAM,UAAU,GAAG,GAAG,WAAW,IAAI,eAAe,IAAI,SAAS,IAAI,WAAW,EAAE,CAAC;YACnF,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YAEhE,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC;oBACX,MAAM;oBACN,UAAU,EAAE,EAAE,CAAC,EAAE;oBACjB,MAAM,EAAE,EAAE,CAAC,MAAM;oBACjB,IAAI,EAAE,EAAE,CAAC,IAAI;oBACb,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,SAAS;oBAC1B,QAAQ,EAAE,EAAE,CAAC,QAAQ,IAAI,KAAK;iBAC/B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,UAAU,EAAE,mBAAmB,KAAK,yBAAyB,OAAO,EAAE;SACvE,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAClC,CAAC"}

package/dist/skill/store.d.ts

@@ -6,4 +6,11 @@ export declare function readSkillFile(domain: string, skillsDir?: string, option
     /** Allow loading unsigned files without throwing. Tampered signed files still reject. */
     trustUnsigned?: boolean;
 }): Promise<SkillFile | null>;
+/**
+ * Fault-tolerant wrapper around readSkillFile — returns null instead of
+ * throwing on validation errors, bad signatures, etc.  ENOENT (missing
+ * file) also returns null.  Use this when iterating many files where one
+ * bad file should not abort the whole operation.
+ */
+export declare function safeReadSkillFile(domain: string, skillsDir?: string, options?: Parameters<typeof readSkillFile>[2]): Promise<SkillFile | null>;
 export declare function listSkillFiles(skillsDir?: string): Promise<SkillSummary[]>;

package/dist/skill/store.js

@@ -1,8 +1,9 @@
 // src/skill/store.ts
-import { readFile, writeFile, mkdir, readdir, access, rename } from 'node:fs/promises';
+import { readFile, writeFile, mkdir, access, rename } from 'node:fs/promises';
 import { join, dirname } from 'node:path';
 import { homedir } from 'node:os';
 import { validateSkillFile } from './validate.js';
+import { updateIndex, ensureIndex } from './index.js';
 const DEFAULT_SKILLS_DIR = join(homedir(), '.apitap', 'skills');
 const BASE_GITIGNORE = `# ApiTap — prevent accidental credential commits
 auth.enc
@@ -28,6 +29,8 @@ async function ensureGitignore(skillsDir) {
     }
 }
 export async function writeSkillFile(skill, skillsDir = DEFAULT_SKILLS_DIR) {
+    // Validate before writing — catch bad data at the source, not on read
+    validateSkillFile(skill);
     await mkdir(skillsDir, { recursive: true, mode: 0o700 });
     await ensureGitignore(skillsDir);
     const filePath = skillPath(skill.domain, skillsDir);
@@ -35,6 +38,19 @@ export async function writeSkillFile(skill, skillsDir = DEFAULT_SKILLS_DIR) {
     const content = JSON.stringify(skill, null, 2) + '\n';
     await writeFile(tmpPath, content, { mode: 0o600 });
     await rename(tmpPath, filePath);
+    // Incrementally update the search index
+    try {
+        await updateIndex(skill.domain, skill.endpoints.map(ep => ({
+            id: ep.id,
+            method: ep.method,
+            path: ep.path,
+            ...(ep.replayability?.tier ? { tier: ep.replayability.tier } : {}),
+            ...(ep.replayability?.verified ? { verified: true } : {}),
+        })), skill.provenance ?? 'unsigned', skillsDir, skill.capturedAt);
+    }
+    catch {
+        // Index update failure should not block writes
+    }
     return filePath;
 }
 export async function readSkillFile(domain, skillsDir = DEFAULT_SKILLS_DIR, options) {
@@ -90,34 +106,31 @@ export async function readSkillFile(domain, skillsDir = DEFAULT_SKILLS_DIR, opti
         throw e;
     }
 }
-export async function listSkillFiles(skillsDir = DEFAULT_SKILLS_DIR) {
-    let files;
+/**
+ * Fault-tolerant wrapper around readSkillFile — returns null instead of
+ * throwing on validation errors, bad signatures, etc.  ENOENT (missing
+ * file) also returns null.  Use this when iterating many files where one
+ * bad file should not abort the whole operation.
+ */
+export async function safeReadSkillFile(domain, skillsDir = DEFAULT_SKILLS_DIR, options) {
     try {
-        files = await readdir(skillsDir);
+        return await readSkillFile(domain, skillsDir, options);
     }
-    catch (err) {
-        if (err.code === 'ENOENT')
-            return [];
-        throw err;
+    catch {
+        return null;
     }
+}
+export async function listSkillFiles(skillsDir = DEFAULT_SKILLS_DIR) {
+    const index = await ensureIndex(skillsDir);
     const summaries = [];
-    const DOMAIN_RE = /^[a-zA-Z0-9][a-zA-Z0-9._-]*$/;
-    for (const file of files) {
-        if (!file.endsWith('.json'))
-            continue;
-        const domain = file.replace(/\.json$/, '');
-        if (!DOMAIN_RE.test(domain))
-            continue; // skip non-conforming filenames
-        const skill = await readSkillFile(domain, skillsDir, { trustUnsigned: true });
-        if (skill) {
-            summaries.push({
-                domain: skill.domain,
-                skillFile: join(skillsDir, file),
-                endpointCount: skill.endpoints.length,
-                capturedAt: skill.capturedAt,
-                provenance: skill.provenance ?? 'unsigned',
-            });
-        }
+    for (const [domain, entry] of Object.entries(index.domains)) {
+        summaries.push({
+            domain,
+            skillFile: join(skillsDir, `${domain}.json`),
+            endpointCount: entry.endpointCount,
+            capturedAt: entry.capturedAt || index.builtAt,
+            provenance: entry.provenance,
+        });
     }
     return summaries;
 }

package/dist/skill/store.js.map

@@ -1 +1 @@
-{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/skill/store.ts"],"names":[],"mappings":"AAAA,qBAAqB;AACrB,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACvF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAElD,MAAM,kBAAkB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AAEhE,MAAM,cAAc,GAAG;;;CAGtB,CAAC;AAEF,SAAS,SAAS,CAAC,MAAc,EAAE,SAAiB;IAClD,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,EAAE,GAAG,MAAM,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,SAAiB;IAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACnC,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAElD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;QAC5B,+BAA+B;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,gCAAgC;QAChC,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,MAAM,SAAS,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAgB,EAChB,YAAoB,kBAAkB;IAEtC,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,MAAM,eAAe,CAAC,SAAS,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACjD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;IACtD,MAAM,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnD,MAAM,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAChC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAc,EACd,YAAoB,kBAAkB,EACtC,OAKC;IAED,iFAAiF;IACjF,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAErC,mDAAmD;QACnD,MAAM,YAAY,GAAG,OAAO,EAAE,eAAe,KAAK,KAAK,CAAC;QACxD,IAAI,YAAY,EAAE,CAAC;YACjB,0CAA0C;YAC1C,IAAI,UAAU,GAAG,OAAO,EAAE,UAAU,CAAC;YACrC,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;gBAC/D,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;gBAC5D,MAAM,SAAS,GAAG,MAAM,YAAY,EAAE,CAAC;gBACvC,UAAU,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;YAC3C,CAAC;YAED,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;gBACpC,+DAA+D;YACjE,CAAC;iBAAM,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;gBAC5B,0DAA0D;gBAC1D,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,CAAC;oBAC5B,MAAM,IAAI,KAAK,CACb,kBAAkB,MAAM,uCAAuC;wBAC/D,6EAA6E,CAC9E,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;gBACzD,IAAI,QAAQ,GAAG,eAAe,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;gBAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,2EAA2E;oBAC3E,kFAAkF;oBAClF,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;oBACxD,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;oBAC5D,MAAM,SAAS,GAAG,MAAM,YAAY,EAAE,CAAC;oBACvC,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;oBACvC,QAAQ,GAAG,eAAe,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;gBAC/C,CAAC;gBACD,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,MAAM,IAAI,KAAK,CAAC,gDAAgD,MAAM,yBAAyB,CAAC,CAAC;gBACnG,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QACpB,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAChE,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,YAAoB,kBAAkB;IAEtC,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAChE,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,MAAM,SAAS,GAAmB,EAAE,CAAC;IACrC,MAAM,SAAS,GAAG,8BAA8B,CAAC;IACjD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,SAAS,CAAC,gCAAgC;QACvE,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9E,IAAI,KAAK,EAAE,CAAC;YACV,SAAS,CAAC,IAAI,CAAC;gBACb,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC;gBAChC,aAAa,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM;gBACrC,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,UAAU;aAC3C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/skill/store.ts"],"names":[],"mappings":"AAAA,qBAAqB;AACrB,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAW,MAAM,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACvF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEtD,MAAM,kBAAkB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AAEhE,MAAM,cAAc,GAAG;;;CAGtB,CAAC;AAEF,SAAS,SAAS,CAAC,MAAc,EAAE,SAAiB;IAClD,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,EAAE,GAAG,MAAM,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,SAAiB;IAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACnC,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAElD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;QAC5B,+BAA+B;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,gCAAgC;QAChC,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,MAAM,SAAS,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAgB,EAChB,YAAoB,kBAAkB;IAEtC,sEAAsE;IACtE,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAEzB,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,MAAM,eAAe,CAAC,SAAS,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACjD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;IACtD,MAAM,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnD,MAAM,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAEhC,wCAAwC;IACxC,IAAI,CAAC;QACH,MAAM,WAAW,CACf,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACzB,EAAE,EAAE,EAAE,CAAC,EAAE;YACT,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,IAAI,EAAE,EAAE,CAAC,IAAI;YACb,GAAG,CAAC,EAAE,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,GAAG,CAAC,EAAE,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1D,CAAC,CAAC,EACH,KAAK,CAAC,UAAU,IAAI,UAAU,EAC9B,SAAS,EACT,KAAK,CAAC,UAAU,CACjB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,+CAA+C;IACjD,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAc,EACd,YAAoB,kBAAkB,EACtC,OAKC;IAED,iFAAiF;IACjF,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAErC,mDAAmD;QACnD,MAAM,YAAY,GAAG,OAAO,EAAE,eAAe,KAAK,KAAK,CAAC;QACxD,IAAI,YAAY,EAAE,CAAC;YACjB,0CAA0C;YAC1C,IAAI,UAAU,GAAG,OAAO,EAAE,UAAU,CAAC;YACrC,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;gBAC/D,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;gBAC5D,MAAM,SAAS,GAAG,MAAM,YAAY,EAAE,CAAC;gBACvC,UAAU,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;YAC3C,CAAC;YAED,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;gBACpC,+DAA+D;YACjE,CAAC;iBAAM,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;gBAC5B,0DAA0D;gBAC1D,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,CAAC;oBAC5B,MAAM,IAAI,KAAK,CACb,kBAAkB,MAAM,uCAAuC;wBAC/D,6EAA6E,CAC9E,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;gBACzD,IAAI,QAAQ,GAAG,eAAe,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;gBAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,2EAA2E;oBAC3E,kFAAkF;oBAClF,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;oBACxD,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;oBAC5D,MAAM,SAAS,GAAG,MAAM,YAAY,EAAE,CAAC;oBACvC,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;oBACvC,QAAQ,GAAG,eAAe,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;gBAC/C,CAAC;gBACD,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,MAAM,IAAI,KAAK,CAAC,gDAAgD,MAAM,yBAAyB,CAAC,CAAC;gBACnG,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QACpB,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAChE,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAc,EACd,YAAoB,kBAAkB,EACtC,OAA6C;IAE7C,IAAI,CAAC;QACH,OAAO,MAAM,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,YAAoB,kBAAkB;IAEtC,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAmB,EAAE,CAAC;IAErC,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,SAAS,CAAC,IAAI,CAAC;YACb,MAAM;YACN,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,MAAM,OAAO,CAAC;YAC5C,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,OAAO;YAC7C,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@apitap/core",
-  "version": "1.6.3",
+  "version": "1.7.0",
   "description": "Intercept web API traffic during browsing. Generate portable skill files so AI agents can call APIs directly instead of scraping.",
   "type": "module",
   "main": "dist/index.js",

package/src/cli.ts

@@ -30,6 +30,7 @@ import { attach, parseDomainPatterns } from './capture/cdp-attach.js';
 import { isOpenAPISpec, convertOpenAPISpec } from './skill/openapi-converter.js';
 import { mergeSkillFile } from './skill/merge.js';
 import { fetchApisGuruList, filterEntries, fetchSpec } from './skill/apis-guru.js';
+import { buildIndex, removeFromIndex } from './skill/index.js';
 
 const __dirname = fileURLToPath(new URL('.', import.meta.url));
 const pkg = JSON.parse(readFileSync(join(__dirname, '..', 'package.json'), 'utf-8'));
@@ -92,6 +93,7 @@ function printUsage(): void {
     apitap audit               Audit stored skill files and credentials
     apitap forget <domain>     Remove skill file and credentials for a domain
     apitap stats               Show token savings report
+    apitap index build         Rebuild search index (run after manual edits)
     apitap extension install   Register native messaging host for Chrome
 
   Discover options:
@@ -367,7 +369,8 @@ async function handleShow(positional: string[], flags: Record<string, string | b
     process.exit(1);
   }
 
-  const skill = await readSkillFile(domain, SKILLS_DIR, { trustUnsigned: true });
+  // Intentionally skip HMAC for browse-only — verification happens at replay time
+  const skill = await readSkillFile(domain, SKILLS_DIR, { verifySignature: false });
   if (!skill) {
     console.error(`Error: No skill file found for "${domain}". Run \`apitap capture\` first.`);
     process.exit(1);
@@ -1599,6 +1602,7 @@ async function handleForget(positional: string[]): Promise<void> {
     notFound = false;
     await unlink(skillFilePath);
     skillRemoved = true;
+    try { await removeFromIndex(domain, skillsDir); } catch {}
   } catch {}
 
   // Remove stored auth
@@ -1628,6 +1632,22 @@ async function handleForget(positional: string[]): Promise<void> {
   console.log(`Forgot ${domain} — ${parts.join(' and ')} removed`);
 }
 
+async function handleIndex(positional: string[]): Promise<void> {
+  const subcommand = positional[0];
+  if (subcommand !== 'build') {
+    console.error('Usage: apitap index build');
+    console.error('  Force rebuild the search index from all skill files on disk.');
+    console.error('  Run this after manually editing skill files outside of apitap commands.');
+    process.exit(1);
+  }
+
+  const skillsDir = SKILLS_DIR || join(APITAP_DIR, 'skills');
+  console.log('\n  Rebuilding search index...');
+  const index = await buildIndex(skillsDir);
+  const endpointCount = Object.values(index.domains).reduce((sum, d) => sum + d.endpointCount, 0);
+  console.log(`  Done: ${Object.keys(index.domains).length} domains, ${endpointCount.toLocaleString()} endpoints indexed\n`);
+}
+
 async function handleExtension(positional: string[], flags: Record<string, string | boolean>): Promise<void> {
   const subcommand = positional[0];
 
@@ -1754,6 +1774,9 @@ async function main(): Promise<void> {
     case 'attach':
       await handleAttach(positional, flags);
       break;
+    case 'index':
+      await handleIndex(positional);
+      break;
     default:
       printUsage();
   }

package/src/skill/index.ts

@@ -0,0 +1,238 @@
+// src/skill/index.ts
+import { readFile, writeFile, readdir, rename } from 'node:fs/promises';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+
+// --- Types ---
+
+export interface IndexEndpoint {
+  id: string;
+  method: string;
+  path: string;
+  tier?: string;
+  verified?: boolean;
+}
+
+export interface IndexDomain {
+  endpointCount: number;
+  provenance: 'self' | 'imported-signed' | 'imported' | 'unsigned';
+  capturedAt: string;
+  endpoints: IndexEndpoint[];
+}
+
+export interface IndexFile {
+  version: number;
+  fileCount: number;
+  builtAt: string;
+  domains: Record<string, IndexDomain>;
+}
+
+// --- Paths ---
+
+const DEFAULT_SKILLS_DIR = join(homedir(), '.apitap', 'skills');
+const INDEX_VERSION = 1;
+
+function indexPath(skillsDir: string): string {
+  return join(skillsDir, '..', 'index.json');
+}
+
+// --- Read ---
+
+/**
+ * Read the index file. Returns null if missing or unparseable.
+ */
+export async function readIndex(skillsDir: string = DEFAULT_SKILLS_DIR): Promise<IndexFile | null> {
+  try {
+    const content = await readFile(indexPath(skillsDir), 'utf-8');
+    const parsed = JSON.parse(content);
+    if (parsed.version !== INDEX_VERSION) return null;
+    return parsed as IndexFile;
+  } catch {
+    return null;
+  }
+}
+
+// --- Stale detection ---
+
+const STALE_AGE_MS = 24 * 60 * 60 * 1000; // 24 hours
+
+async function countSkillFiles(skillsDir: string): Promise<number> {
+  try {
+    const files = await readdir(skillsDir);
+    return files.filter(f => f.endsWith('.json')).length;
+  } catch {
+    return 0;
+  }
+}
+
+export interface StaleCheck {
+  stale: boolean;
+  reason?: 'missing' | 'filecount-mismatch' | 'version-mismatch';
+  ageWarning?: boolean;
+}
+
+/**
+ * Check if the index is stale. Returns { stale, reason, ageWarning }.
+ * ageWarning is true if the index is >24h old but fileCount matches (soft signal).
+ */
+export async function checkStale(
+  index: IndexFile | null,
+  skillsDir: string = DEFAULT_SKILLS_DIR,
+): Promise<StaleCheck> {
+  if (!index) return { stale: true, reason: 'missing' };
+  if (index.version !== INDEX_VERSION) return { stale: true, reason: 'version-mismatch' };
+
+  const diskCount = await countSkillFiles(skillsDir);
+  if (diskCount !== index.fileCount) return { stale: true, reason: 'filecount-mismatch' };
+
+  const age = Date.now() - new Date(index.builtAt).getTime();
+  if (age > STALE_AGE_MS) return { stale: false, ageWarning: true };
+
+  return { stale: false };
+}
+
+// --- Build (full rebuild) ---
+
+/**
+ * Full rebuild of the index from all skill files on disk.
+ * No validation or HMAC checks — index is a read-only metadata cache.
+ */
+export async function buildIndex(skillsDir: string = DEFAULT_SKILLS_DIR): Promise<IndexFile> {
+  let files: string[];
+  try {
+    files = await readdir(skillsDir);
+  } catch {
+    files = [];
+  }
+
+  const jsonFiles = files.filter(f => f.endsWith('.json'));
+  const domains: Record<string, IndexDomain> = {};
+
+  for (const file of jsonFiles) {
+    try {
+      const content = await readFile(join(skillsDir, file), 'utf-8');
+      const skill = JSON.parse(content);
+      const domain = file.replace(/\.json$/, '');
+
+      if (!skill.endpoints || !Array.isArray(skill.endpoints)) continue;
+
+      domains[domain] = {
+        endpointCount: skill.endpoints.length,
+        provenance: skill.provenance ?? 'unsigned',
+        capturedAt: skill.capturedAt ?? '',
+        endpoints: skill.endpoints.map((ep: any) => ({
+          id: ep.id ?? '',
+          method: ep.method ?? 'GET',
+          path: ep.path ?? '/',
+          ...(ep.replayability?.tier ? { tier: ep.replayability.tier } : {}),
+          ...(ep.replayability?.verified ? { verified: true } : {}),
+        })),
+      };
+    } catch {
+      // Skip unparseable files
+    }
+  }
+
+  const index: IndexFile = {
+    version: INDEX_VERSION,
+    fileCount: jsonFiles.length,
+    builtAt: new Date().toISOString(),
+    domains,
+  };
+
+  await writeIndexAtomic(index, skillsDir);
+  return index;
+}
+
+// --- Incremental update ---
+
+/**
+ * Update a single domain entry in the index after writeSkillFile().
+ * Increments fileCount only for genuinely new domains.
+ */
+export async function updateIndex(
+  domain: string,
+  endpoints: IndexEndpoint[],
+  provenance: string,
+  skillsDir: string = DEFAULT_SKILLS_DIR,
+  capturedAt: string = '',
+): Promise<void> {
+  const existing = await readIndex(skillsDir);
+  const index: IndexFile = existing ?? {
+    version: INDEX_VERSION,
+    fileCount: 0,
+    builtAt: '',
+    domains: {},
+  };
+
+  const isNew = !(domain in index.domains);
+
+  index.domains[domain] = {
+    endpointCount: endpoints.length,
+    provenance: (provenance ?? 'unsigned') as IndexDomain['provenance'],
+    capturedAt,
+    endpoints,
+  };
+
+  if (isNew) {
+    index.fileCount += 1;
+  }
+  index.builtAt = new Date().toISOString();
+
+  await writeIndexAtomic(index, skillsDir);
+}
+
+// --- Remove from index ---
+
+/**
+ * Remove a domain from the index after forgetSkillFile().
+ */
+export async function removeFromIndex(
+  domain: string,
+  skillsDir: string = DEFAULT_SKILLS_DIR,
+): Promise<void> {
+  const existing = await readIndex(skillsDir);
+  if (!existing) return;
+
+  if (domain in existing.domains) {
+    delete existing.domains[domain];
+    existing.fileCount -= 1;
+    existing.builtAt = new Date().toISOString();
+    await writeIndexAtomic(existing, skillsDir);
+  }
+}
+
+// --- Ensure index (read with stale check + auto-rebuild) ---
+
+/**
+ * Read the index, rebuilding if stale or missing.
+ * Logs warnings to stderr for observability.
+ */
+export async function ensureIndex(skillsDir: string = DEFAULT_SKILLS_DIR): Promise<IndexFile> {
+  let index = await readIndex(skillsDir);
+  const staleCheck = await checkStale(index, skillsDir);
+
+  if (staleCheck.stale) {
+    if (staleCheck.reason === 'missing') {
+      process.stderr.write('Search index not found — rebuilding (this may take a moment)...\n');
+    } else {
+      process.stderr.write('Search index is stale — rebuilding...\n');
+    }
+    index = await buildIndex(skillsDir);
+  } else if (staleCheck.ageWarning) {
+    process.stderr.write(
+      "Search index is over 24h old — run 'apitap index build' if you've edited skill files manually\n",
+    );
+  }
+
+  return index!;
+}
+
+// --- Internal ---
+
+async function writeIndexAtomic(index: IndexFile, skillsDir: string): Promise<void> {
+  const path = indexPath(skillsDir);
+  const tmpPath = `${path}.${process.pid}.tmp`;
+  await writeFile(tmpPath, JSON.stringify(index));
+  await rename(tmpPath, path);
+}

package/src/skill/merge.ts

@@ -140,10 +140,14 @@ export function mergeSkillFile(
 
   // --- Case: no existing file — create a new SkillFile from imported endpoints ---
   if (existing === null) {
-    const endpoints = imported.map(ep => ({
+    let endpoints = imported.map(ep => ({
       ...ep,
       normalizedPath: normalizePath(ep.path),
     }));
+    if (endpoints.length > 500) {
+      endpoints.sort((a, b) => (b.confidence ?? 0) - (a.confidence ?? 0));
+      endpoints = endpoints.slice(0, 500);
+    }
 
     const skillFile: SkillFile = {
       version: '1.2',
@@ -306,6 +310,24 @@ export function mergeSkillFile(
     }
   }
 
+  // Cap at MAX_ENDPOINTS after merge — keep captured/high-confidence first
+  const MAX_ENDPOINTS = 500;
+  if (resultEndpoints.length > MAX_ENDPOINTS) {
+    const overflow = resultEndpoints.length - MAX_ENDPOINTS;
+    resultEndpoints.sort((a, b) => {
+      // Captured endpoints always win over imported
+      const aIsCaptured = !a.endpointProvenance || a.endpointProvenance === 'captured';
+      const bIsCaptured = !b.endpointProvenance || b.endpointProvenance === 'captured';
+      if (aIsCaptured !== bIsCaptured) return aIsCaptured ? -1 : 1;
+      // Then by confidence descending
+      return (b.confidence ?? 0) - (a.confidence ?? 0);
+    });
+    resultEndpoints.length = MAX_ENDPOINTS;
+    process.stderr.write(
+      `[openapi-import] Warning: merged result has ${MAX_ENDPOINTS + overflow} endpoints, truncated to ${MAX_ENDPOINTS}\n`,
+    );
+  }
+
   // Build updated import history
   const prevHistory = existing.metadata.importHistory ?? [];
   const newHistoryEntry = {

package/src/skill/search.ts

@@ -1,5 +1,5 @@
 // src/skill/search.ts
-import { listSkillFiles, readSkillFile } from './store.js';
+import { ensureIndex } from './index.js';
 
 export interface SearchResult {
   domain: string;
@@ -18,6 +18,7 @@ export interface SearchResponse {
 
 /**
  * Search skill files for endpoints matching a query.
+ * Uses the search index for sub-second results.
  * Matches against domain names, endpoint IDs, and endpoint paths.
  * Query terms are matched case-insensitively.
  */
@@ -25,8 +26,10 @@ export async function searchSkills(
   query: string,
   skillsDir?: string,
 ): Promise<SearchResponse> {
-  const summaries = await listSkillFiles(skillsDir);
-  if (summaries.length === 0) {
+  const index = await ensureIndex(skillsDir);
+
+  const domainCount = Object.keys(index.domains).length;
+  if (domainCount === 0) {
     return {
       found: false,
       suggestion: 'No skill files found. Run `apitap capture <url>` to capture API traffic first.',
@@ -36,36 +39,32 @@ export async function searchSkills(
   const terms = query.toLowerCase().split(/\s+/).filter(Boolean);
   const results: SearchResult[] = [];
 
-  for (const summary of summaries) {
-    const skill = await readSkillFile(summary.domain, skillsDir, { trustUnsigned: true });
-    if (!skill) continue;
-
-    const domainLower = skill.domain.toLowerCase();
+  for (const [domain, entry] of Object.entries(index.domains)) {
+    const domainLower = domain.toLowerCase();
 
-    for (const ep of skill.endpoints) {
+    for (const ep of entry.endpoints) {
       const endpointIdLower = ep.id.toLowerCase();
       const pathLower = ep.path.toLowerCase();
       const methodLower = ep.method.toLowerCase();
 
-      // Check if all query terms match against the combined searchable text
       const searchText = `${domainLower} ${endpointIdLower} ${pathLower} ${methodLower}`;
       const allMatch = terms.every(term => searchText.includes(term));
 
       if (allMatch) {
         results.push({
-          domain: skill.domain,
+          domain,
           endpointId: ep.id,
           method: ep.method,
           path: ep.path,
-          tier: ep.replayability?.tier ?? 'unknown',
-          verified: ep.replayability?.verified ?? false,
+          tier: ep.tier ?? 'unknown',
+          verified: ep.verified ?? false,
         });
       }
     }
   }
 
   if (results.length === 0) {
-    const domains = summaries.map(s => s.domain).join(', ');
+    const domains = Object.keys(index.domains).join(', ');
     return {
       found: false,
       suggestion: `No matches for "${query}". Available domains: ${domains}`,