@cleocode/caamp 1.9.1 → 2026.4.0

package/dist/{chunk-ZF4W3K5H.js → chunk-3WKBFXLE.js}

@@ -2,7 +2,7 @@ import {
   getAllProviders,
   groupByInstructFile,
   injectAll
-} from "./chunk-O7IVK5JY.js";
+} from "./chunk-5UUABVWS.js";
 import {
   __export,
   getAgentsConfigPath,
@@ -15,7 +15,33 @@ import {
   resolveProviderConfigPath,
   resolveProviderProjectPath,
   resolveProviderSkillsDirs
-} from "./chunk-TI6WOJDG.js";
+} from "./chunk-3IEKCREL.js";
+
+// src/core/logger.ts
+var verboseMode = false;
+var quietMode = false;
+var humanMode = false;
+function setVerbose(v) {
+  verboseMode = v;
+}
+function setQuiet(q) {
+  quietMode = q;
+}
+function debug(...args) {
+  if (verboseMode) console.error("[debug]", ...args);
+}
+function isVerbose() {
+  return verboseMode;
+}
+function isQuiet() {
+  return quietMode;
+}
+function setHuman(h) {
+  humanMode = h;
+}
+function isHuman() {
+  return humanMode;
+}
 
 // src/core/formats/utils.ts
 function deepMerge(target, source) {
@@ -49,35 +75,9 @@ async function ensureDir(filePath) {
   await mkdir4(dirname3(filePath), { recursive: true });
 }
 
-// src/core/logger.ts
-var verboseMode = false;
-var quietMode = false;
-var humanMode = false;
-function setVerbose(v) {
-  verboseMode = v;
-}
-function setQuiet(q) {
-  quietMode = q;
-}
-function debug(...args) {
-  if (verboseMode) console.error("[debug]", ...args);
-}
-function isVerbose() {
-  return verboseMode;
-}
-function isQuiet() {
-  return quietMode;
-}
-function setHuman(h) {
-  humanMode = h;
-}
-function isHuman() {
-  return humanMode;
-}
-
 // src/core/formats/json.ts
-import { readFile, writeFile } from "fs/promises";
 import { existsSync } from "fs";
+import { readFile, writeFile } from "fs/promises";
 import * as jsonc from "jsonc-parser";
 async function readJsonConfig(filePath) {
   if (!existsSync(filePath)) return {};
@@ -154,37 +154,32 @@ async function removeJsonConfig(filePath, configKey, serverName) {
   return true;
 }
 
-// src/core/formats/yaml.ts
+// src/core/formats/toml.ts
 import { existsSync as existsSync2 } from "fs";
 import { readFile as readFile2, writeFile as writeFile2 } from "fs/promises";
-import yaml from "js-yaml";
-async function readYamlConfig(filePath) {
+import TOML from "@iarna/toml";
+async function readTomlConfig(filePath) {
   if (!existsSync2(filePath)) return {};
   const content = await readFile2(filePath, "utf-8");
   if (!content.trim()) return {};
-  const result = yaml.load(content);
-  return result ?? {};
+  const result = TOML.parse(content);
+  return result;
 }
-async function writeYamlConfig(filePath, configKey, serverName, serverConfig) {
+async function writeTomlConfig(filePath, configKey, serverName, serverConfig) {
   await ensureDir(filePath);
-  const existing = await readYamlConfig(filePath);
+  const existing = await readTomlConfig(filePath);
   const keyParts = configKey.split(".");
   let newEntry = { [serverName]: serverConfig };
   for (const part of [...keyParts].reverse()) {
     newEntry = { [part]: newEntry };
   }
   const merged = deepMerge(existing, newEntry);
-  const content = yaml.dump(merged, {
-    indent: 2,
-    lineWidth: -1,
-    noRefs: true,
-    sortKeys: false
-  });
+  const content = TOML.stringify(merged);
   await writeFile2(filePath, content, "utf-8");
 }
-async function removeYamlConfig(filePath, configKey, serverName) {
+async function removeTomlConfig(filePath, configKey, serverName) {
   if (!existsSync2(filePath)) return false;
-  const existing = await readYamlConfig(filePath);
+  const existing = await readTomlConfig(filePath);
   const keyParts = configKey.split(".");
   let current = existing;
   for (const part of keyParts) {
@@ -194,42 +189,42 @@ async function removeYamlConfig(filePath, configKey, serverName) {
   }
   if (!(serverName in current)) return false;
   delete current[serverName];
-  const content = yaml.dump(existing, {
-    indent: 2,
-    lineWidth: -1,
-    noRefs: true,
-    sortKeys: false
-  });
+  const content = TOML.stringify(existing);
   await writeFile2(filePath, content, "utf-8");
   return true;
 }
 
-// src/core/formats/toml.ts
+// src/core/formats/yaml.ts
 import { existsSync as existsSync3 } from "fs";
 import { readFile as readFile3, writeFile as writeFile3 } from "fs/promises";
-import TOML from "@iarna/toml";
-async function readTomlConfig(filePath) {
+import yaml from "js-yaml";
+async function readYamlConfig(filePath) {
   if (!existsSync3(filePath)) return {};
   const content = await readFile3(filePath, "utf-8");
   if (!content.trim()) return {};
-  const result = TOML.parse(content);
-  return result;
+  const result = yaml.load(content);
+  return result ?? {};
 }
-async function writeTomlConfig(filePath, configKey, serverName, serverConfig) {
+async function writeYamlConfig(filePath, configKey, serverName, serverConfig) {
   await ensureDir(filePath);
-  const existing = await readTomlConfig(filePath);
+  const existing = await readYamlConfig(filePath);
   const keyParts = configKey.split(".");
   let newEntry = { [serverName]: serverConfig };
   for (const part of [...keyParts].reverse()) {
     newEntry = { [part]: newEntry };
   }
   const merged = deepMerge(existing, newEntry);
-  const content = TOML.stringify(merged);
+  const content = yaml.dump(merged, {
+    indent: 2,
+    lineWidth: -1,
+    noRefs: true,
+    sortKeys: false
+  });
   await writeFile3(filePath, content, "utf-8");
 }
-async function removeTomlConfig(filePath, configKey, serverName) {
+async function removeYamlConfig(filePath, configKey, serverName) {
   if (!existsSync3(filePath)) return false;
-  const existing = await readTomlConfig(filePath);
+  const existing = await readYamlConfig(filePath);
   const keyParts = configKey.split(".");
   let current = existing;
   for (const part of keyParts) {
@@ -239,7 +234,12 @@ async function removeTomlConfig(filePath, configKey, serverName) {
   }
   if (!(serverName in current)) return false;
   delete current[serverName];
-  const content = TOML.stringify(existing);
+  const content = yaml.dump(existing, {
+    indent: 2,
+    lineWidth: -1,
+    noRefs: true,
+    sortKeys: false
+  });
   await writeFile3(filePath, content, "utf-8");
   return true;
 }
@@ -802,15 +802,7 @@ async function listCanonicalSkills() {
 
 // src/core/advanced/orchestration.ts
 import { existsSync as existsSync7, lstatSync as lstatSync2 } from "fs";
-import {
-  cp as cp2,
-  mkdir as mkdir2,
-  readFile as readFile4,
-  readlink,
-  rm as rm2,
-  symlink as symlink2,
-  writeFile as writeFile4
-} from "fs/promises";
+import { cp as cp2, mkdir as mkdir2, readFile as readFile4, readlink, rm as rm2, symlink as symlink2, writeFile as writeFile4 } from "fs/promises";
 import { tmpdir } from "os";
 import { basename, dirname, join as join3 } from "path";
 
@@ -983,7 +975,9 @@ async function installBatchWithRollback(options) {
         isGlobal,
         projectDir
       );
-      const linkedProviders = providers.filter((provider) => result.linkedAgents.includes(provider.id));
+      const linkedProviders = providers.filter(
+        (provider) => result.linkedAgents.includes(provider.id)
+      );
       appliedSkills.push({
         skillName: operation.skillName,
         isGlobal,
@@ -1093,7 +1087,10 @@ async function applyMcpInstallWithPolicy(providers, operations, policy = "fail",
   const conflictKey = (providerId, serverName, scope) => `${providerId}::${serverName}::${scope}`;
   const conflictMap = /* @__PURE__ */ new Map();
   for (const conflict of conflicts) {
-    conflictMap.set(conflictKey(conflict.providerId, conflict.serverName, conflict.scope), conflict);
+    conflictMap.set(
+      conflictKey(conflict.providerId, conflict.serverName, conflict.scope),
+      conflict
+    );
   }
   if (policy === "fail" && conflicts.length > 0) {
     return { conflicts, applied: [], skipped: [] };
@@ -1156,35 +1153,59 @@ async function configureProviderGlobalAndProject(provider, options) {
   const projectOps = options.projectMcp ?? [];
   const globalResults = [];
   for (const operation of globalOps) {
-    globalResults.push(await installMcpServer(
-      provider,
-      operation.serverName,
-      operation.config,
-      "global",
-      projectDir
-    ));
+    globalResults.push(
+      await installMcpServer(
+        provider,
+        operation.serverName,
+        operation.config,
+        "global",
+        projectDir
+      )
+    );
   }
   const projectResults = [];
   for (const operation of projectOps) {
-    projectResults.push(await installMcpServer(
-      provider,
-      operation.serverName,
-      operation.config,
-      "project",
-      projectDir
-    ));
+    projectResults.push(
+      await installMcpServer(
+        provider,
+        operation.serverName,
+        operation.config,
+        "project",
+        projectDir
+      )
+    );
   }
   const instructionResults = {};
   const instructionContent = options.instructionContent;
   if (typeof instructionContent === "string") {
-    instructionResults.global = await injectAll([provider], projectDir, "global", instructionContent);
-    instructionResults.project = await injectAll([provider], projectDir, "project", instructionContent);
+    instructionResults.global = await injectAll(
+      [provider],
+      projectDir,
+      "global",
+      instructionContent
+    );
+    instructionResults.project = await injectAll(
+      [provider],
+      projectDir,
+      "project",
+      instructionContent
+    );
   } else if (instructionContent) {
     if (instructionContent.global) {
-      instructionResults.global = await injectAll([provider], projectDir, "global", instructionContent.global);
+      instructionResults.global = await injectAll(
+        [provider],
+        projectDir,
+        "global",
+        instructionContent.global
+      );
     }
     if (instructionContent.project) {
-      instructionResults.project = await injectAll([provider], projectDir, "project", instructionContent.project);
+      instructionResults.project = await injectAll(
+        [provider],
+        projectDir,
+        "project",
+        instructionContent.project
+      );
     }
   }
   return {
@@ -1205,7 +1226,7 @@ async function configureProviderGlobalAndProject(provider, options) {
 import { execFileSync as execFileSync2 } from "child_process";
 import { existsSync as existsSync8 } from "fs";
 import { homedir } from "os";
-import { isAbsolute, resolve as resolve2 } from "path";
+import { isAbsolute, resolve } from "path";
 var CLEO_SERVER_NAMES = {
   stable: "cleo",
   beta: "cleo-beta",
@@ -1288,7 +1309,7 @@ function buildCleoProfile(options) {
 function expandHome(pathValue) {
   if (pathValue === "~") return homedir();
   if (pathValue.startsWith("~/")) {
-    return resolve2(homedir(), pathValue.slice(2));
+    return resolve(homedir(), pathValue.slice(2));
   }
   return pathValue;
 }
@@ -1296,7 +1317,7 @@ function checkCommandReachability(command) {
   const hasPathSeparator = command.includes("/") || command.includes("\\");
   if (hasPathSeparator || command.startsWith("~")) {
     const expanded = expandHome(command);
-    const candidate = isAbsolute(expanded) ? expanded : resolve2(process.cwd(), expanded);
+    const candidate = isAbsolute(expanded) ? expanded : resolve(process.cwd(), expanded);
     if (existsSync8(candidate)) {
       return { reachable: true, method: "path", detail: candidate };
     }
@@ -1337,12 +1358,12 @@ function isCleoSource(source) {
 }
 
 // src/core/lock-utils.ts
-import { open, readFile as readFile5, writeFile as writeFile5, mkdir as mkdir3, rm as rm3, rename, stat } from "fs/promises";
 import { existsSync as existsSync9 } from "fs";
+import { mkdir as mkdir3, open, readFile as readFile5, rename, rm as rm3, stat, writeFile as writeFile5 } from "fs/promises";
 var LOCK_GUARD_PATH = `${LOCK_FILE_PATH}.lock`;
 var STALE_LOCK_MS = 5e3;
 function sleep(ms) {
-  return new Promise((resolve3) => setTimeout(resolve3, ms));
+  return new Promise((resolve2) => setTimeout(resolve2, ms));
 }
 async function removeStaleLock() {
   try {
@@ -1452,9 +1473,7 @@ async function getLastSelectedAgents() {
 function inferCleoLockData(config, channel) {
   const command = typeof config.command === "string" ? config.command : "";
   const args = Array.isArray(config.args) ? config.args.filter((a) => typeof a === "string") : [];
-  const packageArg = args.find(
-    (a) => a.includes(CLEO_MCP_NPM_PACKAGE)
-  );
+  const packageArg = args.find((a) => a.includes(CLEO_MCP_NPM_PACKAGE));
   if (packageArg) {
     const version = extractVersionTag(packageArg);
     return {
@@ -1639,7 +1658,9 @@ function inferName(source, type) {
   }
   if (type === "command") {
     const parts = source.split(/\s+/);
-    const command = parts.find((p) => !p.startsWith("-") && p !== "npx" && p !== "node" && p !== "python" && p !== "python3");
+    const command = parts.find(
+      (p) => !p.startsWith("-") && p !== "npx" && p !== "node" && p !== "python" && p !== "python3"
+    );
     return command ?? parts[0] ?? source;
   }
   return source;
@@ -1751,1169 +1772,13 @@ function isMarketplaceScoped(input) {
   return /^@[a-zA-Z0-9_.-]+\/[a-zA-Z0-9_.-]+$/.test(input);
 }
 
-// src/core/network/fetch.ts
-var DEFAULT_FETCH_TIMEOUT_MS = 1e4;
-var NetworkError = class extends Error {
-  /** Classification of the failure. */
-  kind;
-  /** URL that was being fetched. */
-  url;
-  /** HTTP status code (only present for `"http"` kind). */
-  status;
-  constructor(message, kind, url, status) {
-    super(message);
-    this.name = "NetworkError";
-    this.kind = kind;
-    this.url = url;
-    this.status = status;
-  }
-};
-function isAbortError(error) {
-  return error instanceof Error && error.name === "AbortError";
-}
-async function fetchWithTimeout(url, init, timeoutMs = DEFAULT_FETCH_TIMEOUT_MS) {
-  try {
-    return await fetch(url, {
-      ...init,
-      signal: AbortSignal.timeout(timeoutMs)
-    });
-  } catch (error) {
-    if (isAbortError(error)) {
-      throw new NetworkError(`Request timed out after ${timeoutMs}ms`, "timeout", url);
-    }
-    throw new NetworkError("Network request failed", "network", url);
-  }
-}
-function ensureOkResponse(response, url) {
-  if (!response.ok) {
-    throw new NetworkError(`Request failed with status ${response.status}`, "http", url, response.status);
-  }
-  return response;
-}
-function formatNetworkError(error) {
-  if (error instanceof NetworkError) {
-    if (error.kind === "timeout") {
-      return "Network request timed out. Please check your connection and try again.";
-    }
-    if (error.kind === "http") {
-      return `Marketplace request failed with HTTP ${error.status ?? "unknown"}. Please try again shortly.`;
-    }
-    return "Network request failed. Please check your connection and try again.";
-  }
-  if (error instanceof Error) return error.message;
-  return String(error);
-}
+// src/core/skills/audit/scanner.ts
+import { existsSync as existsSync10 } from "fs";
+import { readFile as readFile6 } from "fs/promises";
 
-// src/core/marketplace/skillsmp.ts
-var API_BASE = "https://www.agentskills.in/api/skills";
-function parseScopedName(value) {
-  const match = value.match(/^@([^/]+)\/([^/]+)$/);
-  if (!match) return null;
-  return {
-    author: match[1],
-    name: match[2]
-  };
-}
-function toResult(skill) {
-  return {
-    name: skill.name,
-    scopedName: skill.scopedName,
-    description: skill.description,
-    author: skill.author,
-    stars: skill.stars,
-    githubUrl: skill.githubUrl,
-    repoFullName: skill.repoFullName,
-    path: skill.path,
-    source: "agentskills.in"
-  };
-}
-var SkillsMPAdapter = class {
-  /** The marketplace identifier used in search results. */
-  name = "agentskills.in";
-  /**
-   * Search for skills by query string.
-   *
-   * @param query - Search query to match against skill names and descriptions.
-   * @param limit - Maximum number of results to return.
-   * @returns Array of marketplace results sorted by stars.
-   */
-  async search(query, limit = 20) {
-    const params = new URLSearchParams({
-      search: query,
-      limit: String(limit),
-      sortBy: "stars"
-    });
-    const url = `${API_BASE}?${params}`;
-    const response = ensureOkResponse(await fetchWithTimeout(url), url);
-    const data = await response.json();
-    return data.skills.map(toResult);
-  }
-  /**
-   * Look up a specific skill by its scoped name.
-   *
-   * @param scopedName - The scoped skill name (e.g. `"@author/skill-name"`).
-   * @returns The matching marketplace result, or `null` if not found.
-   */
-  async getSkill(scopedName) {
-    const parts = parseScopedName(scopedName);
-    const searchTerms = parts ? [parts.name, `${parts.author} ${parts.name}`, scopedName] : [scopedName];
-    const seen = /* @__PURE__ */ new Set();
-    for (const term of searchTerms) {
-      if (seen.has(term)) continue;
-      seen.add(term);
-      const params = new URLSearchParams({
-        search: term,
-        limit: "50",
-        sortBy: "stars"
-      });
-      const url = `${API_BASE}?${params}`;
-      const response = ensureOkResponse(await fetchWithTimeout(url), url);
-      const data = await response.json();
-      const match = data.skills.find(
-        (s) => s.scopedName === scopedName || `@${s.author}/${s.name}` === scopedName
-      );
-      if (match) {
-        return toResult(match);
-      }
-    }
-    return null;
-  }
-};
-
-// src/core/marketplace/skillssh.ts
-var API_BASE2 = "https://skills.sh/api";
-function toResult2(skill) {
-  return {
-    name: skill.name,
-    scopedName: `@${skill.author}/${skill.name}`,
-    description: skill.description,
-    author: skill.author,
-    stars: skill.stars ?? 0,
-    githubUrl: skill.url,
-    repoFullName: skill.repo,
-    path: "",
-    source: "skills.sh"
-  };
-}
-var SkillsShAdapter = class {
-  /** The marketplace identifier used in search results. */
-  name = "skills.sh";
-  /**
-   * Search for skills by query string.
-   *
-   * @param query - Search query to match against skill names.
-   * @param limit - Maximum number of results to return.
-   * @returns Array of marketplace results.
-   */
-  async search(query, limit = 20) {
-    const params = new URLSearchParams({
-      q: query,
-      limit: String(limit)
-    });
-    const url = `${API_BASE2}/search?${params}`;
-    const response = ensureOkResponse(await fetchWithTimeout(url), url);
-    const data = await response.json();
-    return data.results.map(toResult2);
-  }
-  /**
-   * Look up a specific skill by its scoped name.
-   *
-   * @param scopedName - The scoped skill name (e.g. `"@author/skill-name"`).
-   * @returns The matching marketplace result, or `null` if not found.
-   */
-  async getSkill(scopedName) {
-    const results = await this.search(scopedName, 5);
-    return results.find((r) => r.scopedName === scopedName) ?? null;
-  }
-};
-
-// src/core/marketplace/client.ts
-var MarketplaceUnavailableError = class extends Error {
-  /** Per-adapter failure messages. */
-  details;
-  constructor(message, details) {
-    super(message);
-    this.name = "MarketplaceUnavailableError";
-    this.details = details;
-  }
-};
-var MarketplaceClient = class {
-  /** Configured marketplace adapters. */
-  adapters;
-  /**
-   * Create a new marketplace client.
-   *
-   * @param adapters - Custom marketplace adapters (defaults to agentskills.in and skills.sh)
-   *
-   * @example
-   * ```typescript
-   * // Use default adapters
-   * const client = new MarketplaceClient();
-   *
-   * // Use custom adapters
-   * const client = new MarketplaceClient([myAdapter]);
-   * ```
-   */
-  constructor(adapters) {
-    this.adapters = adapters ?? [
-      new SkillsMPAdapter(),
-      new SkillsShAdapter()
-    ];
-  }
-  /**
-   * Search all marketplaces and return deduplicated, sorted results.
-   *
-   * Queries all adapters in parallel and deduplicates by `scopedName`,
-   * keeping the entry with the highest star count. Results are sorted by
-   * stars descending.
-   *
-   * @param query - Search query string
-   * @param limit - Maximum number of results to return (default: 20)
-   * @returns Deduplicated and sorted marketplace results
-   *
-   * @example
-   * ```typescript
-   * const results = await client.search("code review", 10);
-   * ```
-   */
-  async search(query, limit = 20) {
-    const settled = await Promise.allSettled(this.adapters.map((adapter) => adapter.search(query, limit)));
-    const flat = [];
-    const failures = [];
-    for (const [index, result] of settled.entries()) {
-      const adapterName = this.adapters[index]?.name ?? "unknown";
-      if (result.status === "fulfilled") {
-        flat.push(...result.value);
-      } else {
-        const reason = result.reason instanceof Error ? result.reason.message : String(result.reason);
-        failures.push(`${adapterName}: ${reason}`);
-      }
-    }
-    if (flat.length === 0 && failures.length > 0) {
-      throw new MarketplaceUnavailableError("All marketplace sources failed.", failures);
-    }
-    const seen = /* @__PURE__ */ new Map();
-    for (const result of flat) {
-      const existing = seen.get(result.scopedName);
-      if (!existing || result.stars > existing.stars) {
-        seen.set(result.scopedName, result);
-      }
-    }
-    const deduplicated = Array.from(seen.values());
-    deduplicated.sort((a, b) => b.stars - a.stars);
-    return deduplicated.slice(0, limit);
-  }
-  /**
-   * Get a specific skill by its scoped name from any marketplace.
-   *
-   * Tries each adapter in order and returns the first match.
-   *
-   * @param scopedName - Scoped skill name (e.g. `"@author/my-skill"`)
-   * @returns The marketplace result, or `null` if not found in any marketplace
-   *
-   * @example
-   * ```typescript
-   * const skill = await client.getSkill("@anthropic/memory");
-   * ```
-   */
-  async getSkill(scopedName) {
-    const failures = [];
-    for (const adapter of this.adapters) {
-      try {
-        const result = await adapter.getSkill(scopedName);
-        if (result) return result;
-      } catch (error) {
-        const reason = error instanceof Error ? error.message : String(error);
-        failures.push(`${adapter.name}: ${reason}`);
-      }
-    }
-    if (failures.length === this.adapters.length && this.adapters.length > 0) {
-      throw new MarketplaceUnavailableError("All marketplace sources failed.", failures);
-    }
-    return null;
-  }
-};
-
-// src/core/skills/library-loader.ts
-import { createRequire } from "module";
-import { existsSync as existsSync10, readdirSync, readFileSync } from "fs";
-import { basename as basename2, dirname as dirname2, join as join4 } from "path";
-var require2 = createRequire(import.meta.url);
-function loadLibraryFromModule(root) {
-  let mod;
-  try {
-    mod = require2(root);
-  } catch {
-    throw new Error(`Failed to load skill library module from ${root}`);
-  }
-  const requiredMethods = [
-    "listSkills",
-    "getSkill",
-    "getSkillPath",
-    "getSkillDir",
-    "readSkillContent",
-    "getCoreSkills",
-    "getSkillsByCategory",
-    "getSkillDependencies",
-    "resolveDependencyTree",
-    "listProfiles",
-    "getProfile",
-    "resolveProfile",
-    "listSharedResources",
-    "getSharedResourcePath",
-    "readSharedResource",
-    "listProtocols",
-    "getProtocolPath",
-    "readProtocol",
-    "validateSkillFrontmatter",
-    "validateAll",
-    "getDispatchMatrix"
-  ];
-  for (const method of requiredMethods) {
-    if (typeof mod[method] !== "function") {
-      throw new Error(
-        `Skill library at ${root} does not implement required method: ${method}`
-      );
-    }
-  }
-  if (!mod.version || typeof mod.version !== "string") {
-    throw new Error(`Skill library at ${root} is missing 'version' property`);
-  }
-  if (!mod.libraryRoot || typeof mod.libraryRoot !== "string") {
-    throw new Error(`Skill library at ${root} is missing 'libraryRoot' property`);
-  }
-  return mod;
-}
-function buildLibraryFromFiles(root) {
-  const catalogPath = join4(root, "skills.json");
-  if (!existsSync10(catalogPath)) {
-    throw new Error(`No skills.json found at ${root}`);
-  }
-  const catalogData = JSON.parse(readFileSync(catalogPath, "utf-8"));
-  const entries = catalogData.skills ?? [];
-  const version = catalogData.version ?? "0.0.0";
-  const manifestPath = join4(root, "skills", "manifest.json");
-  let manifest;
-  if (existsSync10(manifestPath)) {
-    manifest = JSON.parse(readFileSync(manifestPath, "utf-8"));
-  } else {
-    manifest = {
-      $schema: "",
-      _meta: {},
-      dispatch_matrix: { by_task_type: {}, by_keyword: {}, by_protocol: {} },
-      skills: []
-    };
-  }
-  const profilesDir = join4(root, "profiles");
-  const profiles = /* @__PURE__ */ new Map();
-  if (existsSync10(profilesDir)) {
-    for (const file of readdirSync(profilesDir)) {
-      if (!file.endsWith(".json")) continue;
-      try {
-        const profile = JSON.parse(
-          readFileSync(join4(profilesDir, file), "utf-8")
-        );
-        profiles.set(profile.name, profile);
-      } catch {
-      }
-    }
-  }
-  const skillMap = /* @__PURE__ */ new Map();
-  for (const entry of entries) {
-    skillMap.set(entry.name, entry);
-  }
-  function getSkillDir2(name) {
-    const entry = skillMap.get(name);
-    if (entry) {
-      return dirname2(join4(root, entry.path));
-    }
-    return join4(root, "skills", name);
-  }
-  function resolveDeps(names, visited = /* @__PURE__ */ new Set()) {
-    const result = [];
-    for (const name of names) {
-      if (visited.has(name)) continue;
-      visited.add(name);
-      const entry = skillMap.get(name);
-      if (entry && entry.dependencies.length > 0) {
-        result.push(...resolveDeps(entry.dependencies, visited));
-      }
-      result.push(name);
-    }
-    return result;
-  }
-  function resolveProfileByName(name, visited = /* @__PURE__ */ new Set()) {
-    if (visited.has(name)) return [];
-    visited.add(name);
-    const profile = profiles.get(name);
-    if (!profile) return [];
-    let skills = [];
-    if (profile.extends) {
-      skills = resolveProfileByName(profile.extends, visited);
-    }
-    skills.push(...profile.skills);
-    return resolveDeps([...new Set(skills)]);
-  }
-  function discoverFiles(dir, ext) {
-    if (!existsSync10(dir)) return [];
-    return readdirSync(dir).filter((f) => f.endsWith(ext)).map((f) => basename2(f, ext));
-  }
-  const library = {
-    version,
-    libraryRoot: root,
-    skills: entries,
-    manifest,
-    listSkills() {
-      return entries.map((e) => e.name);
-    },
-    getSkill(name) {
-      return skillMap.get(name);
-    },
-    getSkillPath(name) {
-      const entry = skillMap.get(name);
-      if (entry) {
-        return join4(root, entry.path);
-      }
-      return join4(root, "skills", name, "SKILL.md");
-    },
-    getSkillDir: getSkillDir2,
-    readSkillContent(name) {
-      const skillPath = library.getSkillPath(name);
-      if (!existsSync10(skillPath)) {
-        throw new Error(`Skill content not found: ${skillPath}`);
-      }
-      return readFileSync(skillPath, "utf-8");
-    },
-    getCoreSkills() {
-      return entries.filter((e) => e.core);
-    },
-    getSkillsByCategory(category) {
-      return entries.filter((e) => e.category === category);
-    },
-    getSkillDependencies(name) {
-      return skillMap.get(name)?.dependencies ?? [];
-    },
-    resolveDependencyTree(names) {
-      return resolveDeps(names);
-    },
-    listProfiles() {
-      return [...profiles.keys()];
-    },
-    getProfile(name) {
-      return profiles.get(name);
-    },
-    resolveProfile(name) {
-      return resolveProfileByName(name);
-    },
-    listSharedResources() {
-      return discoverFiles(join4(root, "skills", "_shared"), ".md");
-    },
-    getSharedResourcePath(name) {
-      const resourcePath = join4(root, "skills", "_shared", `${name}.md`);
-      return existsSync10(resourcePath) ? resourcePath : void 0;
-    },
-    readSharedResource(name) {
-      const resourcePath = library.getSharedResourcePath(name);
-      if (!resourcePath) return void 0;
-      return readFileSync(resourcePath, "utf-8");
-    },
-    listProtocols() {
-      const rootProtocols = discoverFiles(join4(root, "protocols"), ".md");
-      if (rootProtocols.length > 0) return rootProtocols;
-      return discoverFiles(join4(root, "skills", "protocols"), ".md");
-    },
-    getProtocolPath(name) {
-      const rootPath = join4(root, "protocols", `${name}.md`);
-      if (existsSync10(rootPath)) return rootPath;
-      const skillsPath = join4(root, "skills", "protocols", `${name}.md`);
-      return existsSync10(skillsPath) ? skillsPath : void 0;
-    },
-    readProtocol(name) {
-      const protocolPath = library.getProtocolPath(name);
-      if (!protocolPath) return void 0;
-      return readFileSync(protocolPath, "utf-8");
-    },
-    validateSkillFrontmatter(name) {
-      const entry = skillMap.get(name);
-      if (!entry) {
-        return {
-          valid: false,
-          issues: [{ level: "error", field: "name", message: `Skill not found: ${name}` }]
-        };
-      }
-      const issues = [];
-      if (!entry.name) {
-        issues.push({ level: "error", field: "name", message: "Missing name" });
-      }
-      if (!entry.description) {
-        issues.push({ level: "error", field: "description", message: "Missing description" });
-      }
-      if (!entry.version) {
-        issues.push({ level: "warn", field: "version", message: "Missing version" });
-      }
-      const skillPath = join4(root, entry.path);
-      if (!existsSync10(skillPath)) {
-        issues.push({ level: "error", field: "path", message: `SKILL.md not found at ${entry.path}` });
-      }
-      return {
-        valid: !issues.some((i) => i.level === "error"),
-        issues
-      };
-    },
-    validateAll() {
-      const results = /* @__PURE__ */ new Map();
-      for (const entry of entries) {
-        results.set(entry.name, library.validateSkillFrontmatter(entry.name));
-      }
-      return results;
-    },
-    getDispatchMatrix() {
-      return manifest.dispatch_matrix;
-    }
-  };
-  return library;
-}
-
-// src/core/skills/catalog.ts
-var catalog_exports = {};
-__export(catalog_exports, {
-  clearRegisteredLibrary: () => clearRegisteredLibrary,
-  getCoreSkills: () => getCoreSkills,
-  getDispatchMatrix: () => getDispatchMatrix,
-  getLibraryRoot: () => getLibraryRoot,
-  getManifest: () => getManifest,
-  getProfile: () => getProfile,
-  getProtocolPath: () => getProtocolPath,
-  getSharedResourcePath: () => getSharedResourcePath,
-  getSkill: () => getSkill,
-  getSkillDependencies: () => getSkillDependencies,
-  getSkillDir: () => getSkillDir,
-  getSkillPath: () => getSkillPath,
-  getSkills: () => getSkills,
-  getSkillsByCategory: () => getSkillsByCategory,
-  getVersion: () => getVersion,
-  isCatalogAvailable: () => isCatalogAvailable,
-  listProfiles: () => listProfiles,
-  listProtocols: () => listProtocols,
-  listSharedResources: () => listSharedResources,
-  listSkills: () => listSkills,
-  readProtocol: () => readProtocol,
-  readSharedResource: () => readSharedResource,
-  readSkillContent: () => readSkillContent,
-  registerSkillLibrary: () => registerSkillLibrary,
-  registerSkillLibraryFromPath: () => registerSkillLibraryFromPath,
-  resolveDependencyTree: () => resolveDependencyTree,
-  resolveProfile: () => resolveProfile,
-  validateAll: () => validateAll,
-  validateSkillFrontmatter: () => validateSkillFrontmatter
-});
-import { existsSync as existsSync11 } from "fs";
-import { join as join5 } from "path";
-var _library = null;
-function registerSkillLibrary(library) {
-  _library = library;
-}
-function registerSkillLibraryFromPath(root) {
-  const indexPath = join5(root, "index.js");
-  if (existsSync11(indexPath)) {
-    _library = loadLibraryFromModule(root);
-    return;
-  }
-  _library = buildLibraryFromFiles(root);
-}
-function clearRegisteredLibrary() {
-  _library = null;
-}
-function discoverLibrary() {
-  const envPath = process.env["CAAMP_SKILL_LIBRARY"];
-  if (envPath && existsSync11(envPath)) {
-    try {
-      const indexPath = join5(envPath, "index.js");
-      if (existsSync11(indexPath)) {
-        return loadLibraryFromModule(envPath);
-      }
-      if (existsSync11(join5(envPath, "skills.json"))) {
-        return buildLibraryFromFiles(envPath);
-      }
-    } catch {
-    }
-  }
-  return null;
-}
-function getLibrary() {
-  if (!_library) {
-    const discovered = discoverLibrary();
-    if (discovered) {
-      _library = discovered;
-    }
-  }
-  if (!_library) {
-    throw new Error(
-      "No skill library registered. Register one with registerSkillLibraryFromPath() or set the CAAMP_SKILL_LIBRARY environment variable."
-    );
-  }
-  return _library;
-}
-function isCatalogAvailable() {
-  try {
-    getLibrary();
-    return true;
-  } catch {
-    return false;
-  }
-}
-function getSkills() {
-  return getLibrary().skills;
-}
-function getManifest() {
-  return getLibrary().manifest;
-}
-function listSkills() {
-  return getLibrary().listSkills();
-}
-function getSkill(name) {
-  return getLibrary().getSkill(name);
-}
-function getSkillPath(name) {
-  return getLibrary().getSkillPath(name);
-}
-function getSkillDir(name) {
-  return getLibrary().getSkillDir(name);
-}
-function readSkillContent(name) {
-  return getLibrary().readSkillContent(name);
-}
-function getCoreSkills() {
-  return getLibrary().getCoreSkills();
-}
-function getSkillsByCategory(category) {
-  return getLibrary().getSkillsByCategory(category);
-}
-function getSkillDependencies(name) {
-  return getLibrary().getSkillDependencies(name);
-}
-function resolveDependencyTree(names) {
-  return getLibrary().resolveDependencyTree(names);
-}
-function listProfiles() {
-  return getLibrary().listProfiles();
-}
-function getProfile(name) {
-  return getLibrary().getProfile(name);
-}
-function resolveProfile(name) {
-  return getLibrary().resolveProfile(name);
-}
-function listSharedResources() {
-  return getLibrary().listSharedResources();
-}
-function getSharedResourcePath(name) {
-  return getLibrary().getSharedResourcePath(name);
-}
-function readSharedResource(name) {
-  return getLibrary().readSharedResource(name);
-}
-function listProtocols() {
-  return getLibrary().listProtocols();
-}
-function getProtocolPath(name) {
-  return getLibrary().getProtocolPath(name);
-}
-function readProtocol(name) {
-  return getLibrary().readProtocol(name);
-}
-function validateSkillFrontmatter(name) {
-  return getLibrary().validateSkillFrontmatter(name);
-}
-function validateAll() {
-  return getLibrary().validateAll();
-}
-function getDispatchMatrix() {
-  return getLibrary().getDispatchMatrix();
-}
-function getVersion() {
-  return getLibrary().version;
-}
-function getLibraryRoot() {
-  return getLibrary().libraryRoot;
-}
-
-// src/core/skills/discovery.ts
-import { readFile as readFile6, readdir } from "fs/promises";
-import { existsSync as existsSync12 } from "fs";
-import { join as join6 } from "path";
-import matter from "gray-matter";
-async function parseSkillFile(filePath) {
-  try {
-    const content = await readFile6(filePath, "utf-8");
-    const { data } = matter(content);
-    if (!data.name || !data.description) {
-      return null;
-    }
-    const allowedTools = data["allowed-tools"] ?? data.allowedTools;
-    return {
-      name: String(data.name),
-      description: String(data.description),
-      license: data.license ? String(data.license) : void 0,
-      compatibility: data.compatibility ? String(data.compatibility) : void 0,
-      metadata: data.metadata,
-      allowedTools: typeof allowedTools === "string" ? allowedTools.split(/\s+/) : Array.isArray(allowedTools) ? allowedTools.map(String) : void 0,
-      version: data.version ? String(data.version) : void 0
-    };
-  } catch {
-    return null;
-  }
-}
-async function discoverSkill(skillDir) {
-  const skillFile = join6(skillDir, "SKILL.md");
-  if (!existsSync12(skillFile)) return null;
-  const metadata = await parseSkillFile(skillFile);
-  if (!metadata) return null;
-  return {
-    name: metadata.name,
-    scopedName: metadata.name,
-    path: skillDir,
-    metadata
-  };
-}
-async function discoverSkills(rootDir) {
-  if (!existsSync12(rootDir)) return [];
-  const entries = await readdir(rootDir, { withFileTypes: true });
-  const skills = [];
-  for (const entry of entries) {
-    if (!entry.isDirectory() && !entry.isSymbolicLink()) continue;
-    const skillDir = join6(rootDir, entry.name);
-    const skill = await discoverSkill(skillDir);
-    if (skill) {
-      skills.push(skill);
-    }
-  }
-  return skills;
-}
-async function discoverSkillsMulti(dirs) {
-  const all = [];
-  const seen = /* @__PURE__ */ new Set();
-  for (const dir of dirs) {
-    const skills = await discoverSkills(dir);
-    for (const skill of skills) {
-      if (!seen.has(skill.name)) {
-        seen.add(skill.name);
-        all.push(skill);
-      }
-    }
-  }
-  return all;
-}
-
-// src/core/skills/lock.ts
-import { simpleGit } from "simple-git";
-import { execFile } from "child_process";
-import { promisify } from "util";
-var execFileAsync = promisify(execFile);
-async function recordSkillInstall(skillName, scopedName, source, sourceType, agents, canonicalPath, isGlobal, projectDir, version) {
-  await updateLockFile((lock) => {
-    const now = (/* @__PURE__ */ new Date()).toISOString();
-    const existing = lock.skills[skillName];
-    lock.skills[skillName] = {
-      name: skillName,
-      scopedName: existing?.scopedName ?? scopedName,
-      source: existing?.source ?? source,
-      sourceType: existing?.sourceType ?? sourceType,
-      version: version ?? existing?.version,
-      installedAt: existing?.installedAt ?? now,
-      updatedAt: now,
-      agents: [.../* @__PURE__ */ new Set([...existing?.agents ?? [], ...agents])],
-      canonicalPath,
-      isGlobal: existing?.isGlobal ?? isGlobal,
-      projectDir: existing?.projectDir ?? projectDir
-    };
-  });
-}
-async function removeSkillFromLock(skillName) {
-  let removed = false;
-  await updateLockFile((lock) => {
-    if (!(skillName in lock.skills)) return;
-    delete lock.skills[skillName];
-    removed = true;
-  });
-  return removed;
-}
-async function getTrackedSkills() {
-  const lock = await readLockFile();
-  return lock.skills;
-}
-async function fetchLatestSha(repoUrl, ref) {
-  try {
-    const git = simpleGit();
-    const target = ref ?? "HEAD";
-    const args = target === "HEAD" ? [repoUrl, "HEAD"] : ["--refs", repoUrl, target];
-    const result = await git.listRemote(args);
-    const firstLine = result.trim().split("\n")[0];
-    if (!firstLine) return null;
-    const sha = firstLine.split("	")[0];
-    return sha ?? null;
-  } catch {
-    return null;
-  }
-}
-async function fetchLatestPackageVersion(packageName) {
-  try {
-    const { stdout } = await execFileAsync("npm", ["view", packageName, "version"]);
-    return stdout.trim() || null;
-  } catch {
-    return null;
-  }
-}
-async function checkSkillUpdate(skillName) {
-  const lock = await readLockFile();
-  const entry = lock.skills[skillName];
-  if (!entry) {
-    return { hasUpdate: false, status: "unknown" };
-  }
-  if (entry.sourceType !== "github" && entry.sourceType !== "gitlab" && entry.sourceType !== "library") {
-    return {
-      hasUpdate: false,
-      currentVersion: entry.version,
-      status: "unknown"
-    };
-  }
-  const parsed = parseSource(entry.source);
-  if (!parsed.owner) {
-    return {
-      hasUpdate: false,
-      currentVersion: entry.version,
-      status: "unknown"
-    };
-  }
-  if (entry.sourceType === "library") {
-    const packageName = parsed.owner;
-    const latestVersion = await fetchLatestPackageVersion(packageName);
-    if (!latestVersion) {
-      return {
-        hasUpdate: false,
-        currentVersion: entry.version,
-        status: "unknown"
-      };
-    }
-    const currentVersion2 = entry.version;
-    const hasUpdate2 = !currentVersion2 || currentVersion2 !== latestVersion;
-    return {
-      hasUpdate: hasUpdate2,
-      currentVersion: currentVersion2 ?? "unknown",
-      latestVersion,
-      status: hasUpdate2 ? "update-available" : "up-to-date"
-    };
-  }
-  if (!parsed.repo) {
-    return {
-      hasUpdate: false,
-      currentVersion: entry.version,
-      status: "unknown"
-    };
-  }
-  const host = parsed.type === "gitlab" ? "gitlab.com" : "github.com";
-  const repoUrl = `https://${host}/${parsed.owner}/${parsed.repo}.git`;
-  const latestSha = await fetchLatestSha(repoUrl, parsed.ref);
-  if (!latestSha) {
-    return {
-      hasUpdate: false,
-      currentVersion: entry.version,
-      status: "unknown"
-    };
-  }
-  const currentVersion = entry.version;
-  const hasUpdate = !currentVersion || !latestSha.startsWith(currentVersion.slice(0, 7));
-  return {
-    hasUpdate,
-    currentVersion: currentVersion ?? "unknown",
-    latestVersion: latestSha.slice(0, 12),
-    status: hasUpdate ? "update-available" : "up-to-date"
-  };
-}
-async function checkAllSkillUpdates() {
-  const lock = await readLockFile();
-  const skillNames = Object.keys(lock.skills);
-  const results = {};
-  await Promise.all(skillNames.map(async (name) => {
-    results[name] = await checkSkillUpdate(name);
-  }));
-  return results;
-}
-
-// src/core/skills/recommendation.ts
-var RECOMMENDATION_ERROR_CODES = {
-  QUERY_INVALID: "E_SKILLS_QUERY_INVALID",
-  NO_MATCHES: "E_SKILLS_NO_MATCHES",
-  SOURCE_UNAVAILABLE: "E_SKILLS_SOURCE_UNAVAILABLE",
-  CRITERIA_CONFLICT: "E_SKILLS_CRITERIA_CONFLICT"
-};
-var DEFAULT_WEIGHTS = {
-  mustHaveMatch: 10,
-  preferMatch: 4,
-  queryTokenMatch: 3,
-  starsFactor: 2,
-  metadataBoost: 2,
-  modernMarkerBoost: 3,
-  legacyMarkerPenalty: 3,
-  excludePenalty: 25,
-  missingMustHavePenalty: 20
-};
-var DEFAULT_MODERN_MARKERS = ["svelte 5", "runes", "lafs", "slsa", "drizzle", "better-auth"];
-var DEFAULT_LEGACY_MARKERS = ["svelte 3", "jquery", "bower", "legacy", "book.json", "gitbook-cli"];
-function tokenizeCriteriaValue(value) {
-  return value.split(",").map((part) => part.trim().toLowerCase()).filter(Boolean);
-}
-function normalizeList(value) {
-  if (value === void 0) return [];
-  if (!(typeof value === "string" || Array.isArray(value))) return [];
-  const source = Array.isArray(value) ? value : [value];
-  const flattened = source.flatMap((item) => typeof item === "string" ? tokenizeCriteriaValue(item) : []);
-  return Array.from(new Set(flattened)).sort((a, b) => a.localeCompare(b));
-}
-function hasAnyCriteriaInput(input) {
-  const query = typeof input.query === "string" ? input.query.trim() : "";
-  if (query.length > 0) return true;
-  const lists = [input.mustHave, input.prefer, input.exclude];
-  return lists.some((list) => normalizeList(list).length > 0);
-}
-function validateRecommendationCriteria(input) {
-  const issues = [];
-  if (input.query !== void 0 && typeof input.query !== "string") {
-    issues.push({
-      code: RECOMMENDATION_ERROR_CODES.QUERY_INVALID,
-      field: "query",
-      message: "query must be a string"
-    });
-  }
-  if (input.mustHave !== void 0 && !(typeof input.mustHave === "string" || Array.isArray(input.mustHave))) {
-    issues.push({
-      code: RECOMMENDATION_ERROR_CODES.QUERY_INVALID,
-      field: "mustHave",
-      message: "mustHave must be a string or string[]"
-    });
-  }
-  if (input.prefer !== void 0 && !(typeof input.prefer === "string" || Array.isArray(input.prefer))) {
-    issues.push({
-      code: RECOMMENDATION_ERROR_CODES.QUERY_INVALID,
-      field: "prefer",
-      message: "prefer must be a string or string[]"
-    });
-  }
-  if (input.exclude !== void 0 && !(typeof input.exclude === "string" || Array.isArray(input.exclude))) {
-    issues.push({
-      code: RECOMMENDATION_ERROR_CODES.QUERY_INVALID,
-      field: "exclude",
-      message: "exclude must be a string or string[]"
-    });
-  }
-  const mustHave = normalizeList(input.mustHave);
-  const prefer = normalizeList(input.prefer);
-  const exclude = normalizeList(input.exclude);
-  const conflict = mustHave.some((term) => exclude.includes(term)) || prefer.some((term) => exclude.includes(term));
-  if (conflict) {
-    issues.push({
-      code: RECOMMENDATION_ERROR_CODES.CRITERIA_CONFLICT,
-      field: "exclude",
-      message: "criteria terms cannot appear in both prefer/must-have and exclude"
-    });
-  }
-  if (issues.length === 0 && !hasAnyCriteriaInput(input)) {
-    issues.push({
-      code: RECOMMENDATION_ERROR_CODES.QUERY_INVALID,
-      field: "query",
-      message: "at least one criteria value is required"
-    });
-  }
-  return {
-    valid: issues.length === 0,
-    issues
-  };
-}
-function normalizeRecommendationCriteria(input) {
-  const query = (input.query ?? "").trim().toLowerCase();
-  return {
-    query,
-    queryTokens: query ? Array.from(new Set(tokenizeCriteriaValue(query.replace(/\s+/g, ",")))).sort((a, b) => a.localeCompare(b)) : [],
-    mustHave: normalizeList(input.mustHave),
-    prefer: normalizeList(input.prefer),
-    exclude: normalizeList(input.exclude)
-  };
-}
-function countMatches(haystack, needles) {
-  let count = 0;
-  for (const needle of needles) {
-    if (haystack.includes(needle)) {
-      count += 1;
-    }
-  }
-  return count;
-}
-function clampScore(value) {
-  return Number(value.toFixed(6));
-}
-function buildSearchText(skill) {
-  return `${skill.name} ${skill.scopedName} ${skill.description} ${skill.author}`.toLowerCase();
-}
-function scoreSkillRecommendation(skill, criteria, options = {}) {
-  const weights = { ...DEFAULT_WEIGHTS, ...options.weights };
-  const modernMarkers = (options.modernMarkers ?? DEFAULT_MODERN_MARKERS).map((marker) => marker.toLowerCase());
-  const legacyMarkers = (options.legacyMarkers ?? DEFAULT_LEGACY_MARKERS).map((marker) => marker.toLowerCase());
-  const text = buildSearchText(skill);
-  const reasons = [];
-  const tradeoffs = [];
-  const mustHaveMatches = countMatches(text, criteria.mustHave);
-  const missingMustHave = Math.max(criteria.mustHave.length - mustHaveMatches, 0);
-  const preferMatches = countMatches(text, criteria.prefer);
-  const queryMatches = countMatches(text, criteria.queryTokens);
-  const excludeMatches = countMatches(text, criteria.exclude);
-  const modernMatches = countMatches(text, modernMarkers);
-  const legacyMatches = countMatches(text, legacyMarkers);
-  const metadataSignal = skill.description.trim().length >= 80 ? 1 : 0;
-  const starsSignal = Math.log10(skill.stars + 1);
-  const sourceConfidence = skill.source === "agentskills.in" ? 1 : skill.source === "skills.sh" ? 0.8 : 0.6;
-  const mustHaveScore = mustHaveMatches * weights.mustHaveMatch - missingMustHave * weights.missingMustHavePenalty;
-  const preferScore = preferMatches * weights.preferMatch;
-  const queryScore = queryMatches * weights.queryTokenMatch;
-  const starsScore = starsSignal * weights.starsFactor;
-  const metadataScore = (metadataSignal + sourceConfidence) * weights.metadataBoost;
-  const modernityScore = modernMatches * weights.modernMarkerBoost - legacyMatches * weights.legacyMarkerPenalty;
-  const exclusionPenalty = excludeMatches * weights.excludePenalty;
-  const hasGitbookTopic = text.includes("gitbook");
-  const hasGitSync = text.includes("git sync") || text.includes("git") && text.includes("sync");
-  const hasApiWorkflow = text.includes("api") && (text.includes("workflow") || text.includes("sync"));
-  const hasLegacyCli = text.includes("gitbook-cli") || text.includes("book.json");
-  const topicScore = (hasGitbookTopic ? 3 : 0) + (hasGitSync ? 2 : 0) + (hasApiWorkflow ? 2 : 0) - (hasLegacyCli ? 4 : 0);
-  const total = clampScore(
-    mustHaveScore + preferScore + queryScore + starsScore + metadataScore + modernityScore + topicScore - exclusionPenalty
-  );
-  if (hasGitbookTopic) reasons.push({ code: "MATCH_TOPIC_GITBOOK" });
-  if (hasGitSync) reasons.push({ code: "HAS_GIT_SYNC" });
-  if (hasApiWorkflow) reasons.push({ code: "HAS_API_WORKFLOW" });
-  if (hasLegacyCli) reasons.push({ code: "PENALTY_LEGACY_CLI" });
-  if (mustHaveMatches > 0) reasons.push({ code: "MUST_HAVE_MATCH", detail: String(mustHaveMatches) });
-  if (missingMustHave > 0) reasons.push({ code: "MISSING_MUST_HAVE", detail: String(missingMustHave) });
-  if (preferMatches > 0) reasons.push({ code: "PREFER_MATCH", detail: String(preferMatches) });
-  if (queryMatches > 0) reasons.push({ code: "QUERY_MATCH", detail: String(queryMatches) });
-  if (starsSignal > 0) reasons.push({ code: "STAR_SIGNAL" });
-  if (metadataSignal > 0) reasons.push({ code: "METADATA_SIGNAL" });
-  if (modernMatches > 0) reasons.push({ code: "MODERN_MARKER", detail: String(modernMatches) });
-  if (legacyMatches > 0) reasons.push({ code: "LEGACY_MARKER", detail: String(legacyMatches) });
-  if (excludeMatches > 0) reasons.push({ code: "EXCLUDE_MATCH", detail: String(excludeMatches) });
-  if (missingMustHave > 0) tradeoffs.push("Missing one or more required criteria terms.");
-  if (excludeMatches > 0) tradeoffs.push("Matches one or more excluded terms.");
-  if (skill.stars < 10) tradeoffs.push("Low quality signal from repository stars.");
-  if (hasLegacyCli) tradeoffs.push("Contains legacy GitBook CLI markers.");
-  const result = {
-    skill,
-    score: total,
-    reasons,
-    tradeoffs,
-    excluded: excludeMatches > 0
-  };
-  if (options.includeDetails) {
-    result.breakdown = {
-      mustHave: clampScore(mustHaveScore),
-      prefer: clampScore(preferScore),
-      query: clampScore(queryScore),
-      stars: clampScore(starsScore),
-      metadata: clampScore(metadataScore),
-      modernity: clampScore(modernityScore),
-      exclusionPenalty: clampScore(exclusionPenalty),
-      total
-    };
-  }
-  return result;
-}
-function recommendSkills(skills, criteriaInput, options = {}) {
-  const validation = validateRecommendationCriteria(criteriaInput);
-  if (!validation.valid) {
-    const first = validation.issues[0];
-    const error = new Error(first?.message ?? "Invalid recommendation criteria");
-    error.code = first?.code;
-    error.issues = validation.issues;
-    throw error;
-  }
-  const criteria = normalizeRecommendationCriteria(criteriaInput);
-  const ranking = skills.map((skill) => scoreSkillRecommendation(skill, criteria, options)).sort((a, b) => {
-    if (b.score !== a.score) return b.score - a.score;
-    if (b.skill.stars !== a.skill.stars) return b.skill.stars - a.skill.stars;
-    return a.skill.scopedName.localeCompare(b.skill.scopedName);
-  });
-  return {
-    criteria,
-    ranking: typeof options.top === "number" ? ranking.slice(0, Math.max(0, options.top)) : ranking
-  };
-}
-var rankSkills = recommendSkills;
-
-// src/core/skills/recommendation-api.ts
-function formatSkillRecommendations(result, opts) {
-  const top = result.ranking;
-  if (opts.mode === "human") {
-    if (top.length === 0) return "No recommendations found.";
-    const lines = ["Recommended skills:", ""];
-    for (const [index, entry] of top.entries()) {
-      const marker = index === 0 ? " (Recommended)" : "";
-      lines.push(`${index + 1}) ${entry.skill.scopedName}${marker}`);
-      lines.push(`   why: ${entry.reasons.map((reason) => reason.code).join(", ") || "score-based match"}`);
-      lines.push(`   tradeoff: ${entry.tradeoffs[0] ?? "none"}`);
-    }
-    lines.push("");
-    lines.push(`CHOOSE: ${top.map((_, index) => index + 1).join(",")}`);
-    return lines.join("\n");
-  }
-  const options = top.map((entry, index) => ({
-    rank: index + 1,
-    scopedName: entry.skill.scopedName,
-    score: entry.score,
-    reasons: entry.reasons,
-    tradeoffs: entry.tradeoffs,
-    ...opts.details ? {
-      description: entry.skill.description,
-      source: entry.skill.source,
-      evidence: entry.breakdown ?? null
-    } : {}
-  }));
-  return {
-    query: result.criteria.query,
-    recommended: options[0] ?? null,
-    options
-  };
-}
-async function searchSkills(query, options = {}) {
-  const trimmed = query.trim();
-  if (!trimmed) {
-    const error = new Error("query must be non-empty");
-    error.code = RECOMMENDATION_ERROR_CODES.QUERY_INVALID;
-    throw error;
-  }
-  const client = new MarketplaceClient();
-  try {
-    return await client.search(trimmed, options.limit ?? 20);
-  } catch (error) {
-    const wrapped = new Error(error instanceof Error ? error.message : String(error));
-    wrapped.code = RECOMMENDATION_ERROR_CODES.SOURCE_UNAVAILABLE;
-    throw wrapped;
-  }
-}
-async function recommendSkills2(query, criteria, options = {}) {
-  const hits = await searchSkills(query, { limit: options.limit ?? Math.max((options.top ?? 3) * 5, 20) });
-  const ranked = recommendSkills(hits, { ...criteria, query }, options);
-  if (ranked.ranking.length === 0) {
-    const error = new Error("no matches found");
-    error.code = RECOMMENDATION_ERROR_CODES.NO_MATCHES;
-    throw error;
-  }
-  return ranked;
-}
-
-// src/core/skills/audit/scanner.ts
-import { existsSync as existsSync13 } from "fs";
-import { readFile as readFile7 } from "fs/promises";
-
-// src/core/skills/audit/rules.ts
-function rule(id, name, description, severity, category, pattern) {
-  return { id, name, description, severity, category, pattern };
+// src/core/skills/audit/rules.ts
+function rule(id, name, description, severity, category, pattern) {
+  return { id, name, description, severity, category, pattern };
 }
 var AUDIT_RULES = [
   // ── Prompt Injection ────────────────────────────────────────
@@ -2998,14 +1863,7 @@ var AUDIT_RULES = [
     "command-injection",
     /(?:curl|wget|fetch)\s+.*\|\s*(?:sh|bash|zsh|python|node|eval)/i
   ),
-  rule(
-    "CI003",
-    "Eval usage",
-    "Dynamic code execution",
-    "high",
-    "command-injection",
-    /\beval\s*\(/
-  ),
+  rule("CI003", "Eval usage", "Dynamic code execution", "high", "command-injection", /\beval\s*\(/),
   rule(
     "CI004",
     "Shell spawn",
@@ -3279,108 +2137,1295 @@ var AUDIT_RULES = [
   )
 ];
 
-// src/core/skills/audit/scanner.ts
-var SEVERITY_WEIGHTS = {
-  critical: 25,
-  high: 15,
-  medium: 8,
-  low: 3,
-  info: 0
-};
-async function scanFile(filePath, rules) {
-  if (!existsSync13(filePath)) {
-    return { file: filePath, findings: [], score: 100, passed: true };
+// src/core/skills/audit/scanner.ts
+var SEVERITY_WEIGHTS = {
+  critical: 25,
+  high: 15,
+  medium: 8,
+  low: 3,
+  info: 0
+};
+async function scanFile(filePath, rules) {
+  if (!existsSync10(filePath)) {
+    return { file: filePath, findings: [], score: 100, passed: true };
+  }
+  const content = await readFile6(filePath, "utf-8");
+  const lines = content.split("\n");
+  const activeRules = rules ?? AUDIT_RULES;
+  const findings = [];
+  for (const rule2 of activeRules) {
+    for (let i = 0; i < lines.length; i++) {
+      const line = lines[i] ?? "";
+      const match = line.match(rule2.pattern);
+      if (match) {
+        findings.push({
+          rule: rule2,
+          line: i + 1,
+          column: (match.index ?? 0) + 1,
+          match: match[0],
+          context: line.trim()
+        });
+      }
+    }
+  }
+  const totalPenalty = findings.reduce(
+    (sum, f) => sum + (SEVERITY_WEIGHTS[f.rule.severity] ?? 0),
+    0
+  );
+  const score = Math.max(0, 100 - totalPenalty);
+  const passed = !findings.some(
+    (f) => f.rule.severity === "critical" || f.rule.severity === "high"
+  );
+  return { file: filePath, findings, score, passed };
+}
+async function scanDirectory(dirPath) {
+  const { readdir: readdir2 } = await import("fs/promises");
+  const { join: join7 } = await import("path");
+  if (!existsSync10(dirPath)) return [];
+  const entries = await readdir2(dirPath, { withFileTypes: true });
+  const results = [];
+  for (const entry of entries) {
+    if (entry.isDirectory() || entry.isSymbolicLink()) {
+      const skillFile = join7(dirPath, entry.name, "SKILL.md");
+      if (existsSync10(skillFile)) {
+        results.push(await scanFile(skillFile));
+      }
+    }
+  }
+  return results;
+}
+function toSarif(results) {
+  return {
+    $schema: "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/main/sarif-2.1/schema/sarif-schema-2.1.0.json",
+    version: "2.1.0",
+    runs: [
+      {
+        tool: {
+          driver: {
+            name: "caamp-audit",
+            version: "0.1.0",
+            rules: AUDIT_RULES.map((r) => ({
+              id: r.id,
+              name: r.name,
+              shortDescription: { text: r.description },
+              defaultConfiguration: {
+                level: r.severity === "critical" || r.severity === "high" ? "error" : "warning"
+              },
+              properties: { category: r.category }
+            }))
+          }
+        },
+        results: results.flatMap(
+          (result) => result.findings.map((f) => ({
+            ruleId: f.rule.id,
+            level: f.rule.severity === "critical" || f.rule.severity === "high" ? "error" : "warning",
+            message: { text: `${f.rule.description}: ${f.match}` },
+            locations: [
+              {
+                physicalLocation: {
+                  artifactLocation: { uri: result.file },
+                  region: {
+                    startLine: f.line,
+                    startColumn: f.column
+                  }
+                }
+              }
+            ]
+          }))
+        )
+      }
+    ]
+  };
+}
+
+// src/core/skills/lock.ts
+import { execFile } from "child_process";
+import { promisify } from "util";
+import { simpleGit } from "simple-git";
+var execFileAsync = promisify(execFile);
+async function recordSkillInstall(skillName, scopedName, source, sourceType, agents, canonicalPath, isGlobal, projectDir, version) {
+  await updateLockFile((lock) => {
+    const now = (/* @__PURE__ */ new Date()).toISOString();
+    const existing = lock.skills[skillName];
+    lock.skills[skillName] = {
+      name: skillName,
+      scopedName: existing?.scopedName ?? scopedName,
+      source: existing?.source ?? source,
+      sourceType: existing?.sourceType ?? sourceType,
+      version: version ?? existing?.version,
+      installedAt: existing?.installedAt ?? now,
+      updatedAt: now,
+      agents: [.../* @__PURE__ */ new Set([...existing?.agents ?? [], ...agents])],
+      canonicalPath,
+      isGlobal: existing?.isGlobal ?? isGlobal,
+      projectDir: existing?.projectDir ?? projectDir
+    };
+  });
+}
+async function removeSkillFromLock(skillName) {
+  let removed = false;
+  await updateLockFile((lock) => {
+    if (!(skillName in lock.skills)) return;
+    delete lock.skills[skillName];
+    removed = true;
+  });
+  return removed;
+}
+async function getTrackedSkills() {
+  const lock = await readLockFile();
+  return lock.skills;
+}
+async function fetchLatestSha(repoUrl, ref) {
+  try {
+    const git = simpleGit();
+    const target = ref ?? "HEAD";
+    const args = target === "HEAD" ? [repoUrl, "HEAD"] : ["--refs", repoUrl, target];
+    const result = await git.listRemote(args);
+    const firstLine = result.trim().split("\n")[0];
+    if (!firstLine) return null;
+    const sha = firstLine.split("	")[0];
+    return sha ?? null;
+  } catch {
+    return null;
+  }
+}
+async function fetchLatestPackageVersion(packageName) {
+  try {
+    const { stdout } = await execFileAsync("npm", ["view", packageName, "version"]);
+    return stdout.trim() || null;
+  } catch {
+    return null;
+  }
+}
+async function checkSkillUpdate(skillName) {
+  const lock = await readLockFile();
+  const entry = lock.skills[skillName];
+  if (!entry) {
+    return { hasUpdate: false, status: "unknown" };
+  }
+  if (entry.sourceType !== "github" && entry.sourceType !== "gitlab" && entry.sourceType !== "library") {
+    return {
+      hasUpdate: false,
+      currentVersion: entry.version,
+      status: "unknown"
+    };
+  }
+  const parsed = parseSource(entry.source);
+  if (!parsed.owner) {
+    return {
+      hasUpdate: false,
+      currentVersion: entry.version,
+      status: "unknown"
+    };
+  }
+  if (entry.sourceType === "library") {
+    const packageName = parsed.owner;
+    const latestVersion = await fetchLatestPackageVersion(packageName);
+    if (!latestVersion) {
+      return {
+        hasUpdate: false,
+        currentVersion: entry.version,
+        status: "unknown"
+      };
+    }
+    const currentVersion2 = entry.version;
+    const hasUpdate2 = !currentVersion2 || currentVersion2 !== latestVersion;
+    return {
+      hasUpdate: hasUpdate2,
+      currentVersion: currentVersion2 ?? "unknown",
+      latestVersion,
+      status: hasUpdate2 ? "update-available" : "up-to-date"
+    };
+  }
+  if (!parsed.repo) {
+    return {
+      hasUpdate: false,
+      currentVersion: entry.version,
+      status: "unknown"
+    };
+  }
+  const host = parsed.type === "gitlab" ? "gitlab.com" : "github.com";
+  const repoUrl = `https://${host}/${parsed.owner}/${parsed.repo}.git`;
+  const latestSha = await fetchLatestSha(repoUrl, parsed.ref);
+  if (!latestSha) {
+    return {
+      hasUpdate: false,
+      currentVersion: entry.version,
+      status: "unknown"
+    };
+  }
+  const currentVersion = entry.version;
+  const hasUpdate = !currentVersion || !latestSha.startsWith(currentVersion.slice(0, 7));
+  return {
+    hasUpdate,
+    currentVersion: currentVersion ?? "unknown",
+    latestVersion: latestSha.slice(0, 12),
+    status: hasUpdate ? "update-available" : "up-to-date"
+  };
+}
+async function checkAllSkillUpdates() {
+  const lock = await readLockFile();
+  const skillNames = Object.keys(lock.skills);
+  const results = {};
+  await Promise.all(
+    skillNames.map(async (name) => {
+      results[name] = await checkSkillUpdate(name);
+    })
+  );
+  return results;
+}
+
+// src/core/network/fetch.ts
+var DEFAULT_FETCH_TIMEOUT_MS = 1e4;
+var NetworkError = class extends Error {
+  /** Classification of the failure. */
+  kind;
+  /** URL that was being fetched. */
+  url;
+  /** HTTP status code (only present for `"http"` kind). */
+  status;
+  constructor(message, kind, url, status) {
+    super(message);
+    this.name = "NetworkError";
+    this.kind = kind;
+    this.url = url;
+    this.status = status;
+  }
+};
+function isAbortError(error) {
+  return error instanceof Error && error.name === "AbortError";
+}
+async function fetchWithTimeout(url, init, timeoutMs = DEFAULT_FETCH_TIMEOUT_MS) {
+  try {
+    return await fetch(url, {
+      ...init,
+      signal: AbortSignal.timeout(timeoutMs)
+    });
+  } catch (error) {
+    if (isAbortError(error)) {
+      throw new NetworkError(`Request timed out after ${timeoutMs}ms`, "timeout", url);
+    }
+    throw new NetworkError("Network request failed", "network", url);
+  }
+}
+function ensureOkResponse(response, url) {
+  if (!response.ok) {
+    throw new NetworkError(
+      `Request failed with status ${response.status}`,
+      "http",
+      url,
+      response.status
+    );
+  }
+  return response;
+}
+function formatNetworkError(error) {
+  if (error instanceof NetworkError) {
+    if (error.kind === "timeout") {
+      return "Network request timed out. Please check your connection and try again.";
+    }
+    if (error.kind === "http") {
+      return `Marketplace request failed with HTTP ${error.status ?? "unknown"}. Please try again shortly.`;
+    }
+    return "Network request failed. Please check your connection and try again.";
+  }
+  if (error instanceof Error) return error.message;
+  return String(error);
+}
+
+// src/core/marketplace/skillsmp.ts
+var API_BASE = "https://www.agentskills.in/api/skills";
+function parseScopedName(value) {
+  const match = value.match(/^@([^/]+)\/([^/]+)$/);
+  if (!match) return null;
+  return {
+    author: match[1],
+    name: match[2]
+  };
+}
+function toResult(skill) {
+  return {
+    name: skill.name,
+    scopedName: skill.scopedName,
+    description: skill.description,
+    author: skill.author,
+    stars: skill.stars,
+    githubUrl: skill.githubUrl,
+    repoFullName: skill.repoFullName,
+    path: skill.path,
+    source: "agentskills.in"
+  };
+}
+var SkillsMPAdapter = class {
+  /** The marketplace identifier used in search results. */
+  name = "agentskills.in";
+  /**
+   * Search for skills by query string.
+   *
+   * @param query - Search query to match against skill names and descriptions.
+   * @param limit - Maximum number of results to return.
+   * @returns Array of marketplace results sorted by stars.
+   */
+  async search(query, limit = 20) {
+    const params = new URLSearchParams({
+      search: query,
+      limit: String(limit),
+      sortBy: "stars"
+    });
+    const url = `${API_BASE}?${params}`;
+    const response = ensureOkResponse(await fetchWithTimeout(url), url);
+    const data = await response.json();
+    return data.skills.map(toResult);
+  }
+  /**
+   * Look up a specific skill by its scoped name.
+   *
+   * @param scopedName - The scoped skill name (e.g. `"@author/skill-name"`).
+   * @returns The matching marketplace result, or `null` if not found.
+   */
+  async getSkill(scopedName) {
+    const parts = parseScopedName(scopedName);
+    const searchTerms = parts ? [parts.name, `${parts.author} ${parts.name}`, scopedName] : [scopedName];
+    const seen = /* @__PURE__ */ new Set();
+    for (const term of searchTerms) {
+      if (seen.has(term)) continue;
+      seen.add(term);
+      const params = new URLSearchParams({
+        search: term,
+        limit: "50",
+        sortBy: "stars"
+      });
+      const url = `${API_BASE}?${params}`;
+      const response = ensureOkResponse(await fetchWithTimeout(url), url);
+      const data = await response.json();
+      const match = data.skills.find(
+        (s) => s.scopedName === scopedName || `@${s.author}/${s.name}` === scopedName
+      );
+      if (match) {
+        return toResult(match);
+      }
+    }
+    return null;
+  }
+};
+
+// src/core/marketplace/skillssh.ts
+var API_BASE2 = "https://skills.sh/api";
+function toResult2(skill) {
+  return {
+    name: skill.name,
+    scopedName: `@${skill.author}/${skill.name}`,
+    description: skill.description,
+    author: skill.author,
+    stars: skill.stars ?? 0,
+    githubUrl: skill.url,
+    repoFullName: skill.repo,
+    path: "",
+    source: "skills.sh"
+  };
+}
+var SkillsShAdapter = class {
+  /** The marketplace identifier used in search results. */
+  name = "skills.sh";
+  /**
+   * Search for skills by query string.
+   *
+   * @param query - Search query to match against skill names.
+   * @param limit - Maximum number of results to return.
+   * @returns Array of marketplace results.
+   */
+  async search(query, limit = 20) {
+    const params = new URLSearchParams({
+      q: query,
+      limit: String(limit)
+    });
+    const url = `${API_BASE2}/search?${params}`;
+    const response = ensureOkResponse(await fetchWithTimeout(url), url);
+    const data = await response.json();
+    return data.results.map(toResult2);
+  }
+  /**
+   * Look up a specific skill by its scoped name.
+   *
+   * @param scopedName - The scoped skill name (e.g. `"@author/skill-name"`).
+   * @returns The matching marketplace result, or `null` if not found.
+   */
+  async getSkill(scopedName) {
+    const results = await this.search(scopedName, 5);
+    return results.find((r) => r.scopedName === scopedName) ?? null;
+  }
+};
+
+// src/core/marketplace/client.ts
+var MarketplaceUnavailableError = class extends Error {
+  /** Per-adapter failure messages. */
+  details;
+  constructor(message, details) {
+    super(message);
+    this.name = "MarketplaceUnavailableError";
+    this.details = details;
+  }
+};
+var MarketplaceClient = class {
+  /** Configured marketplace adapters. */
+  adapters;
+  /**
+   * Create a new marketplace client.
+   *
+   * @param adapters - Custom marketplace adapters (defaults to agentskills.in and skills.sh)
+   *
+   * @example
+   * ```typescript
+   * // Use default adapters
+   * const client = new MarketplaceClient();
+   *
+   * // Use custom adapters
+   * const client = new MarketplaceClient([myAdapter]);
+   * ```
+   */
+  constructor(adapters) {
+    this.adapters = adapters ?? [new SkillsMPAdapter(), new SkillsShAdapter()];
+  }
+  /**
+   * Search all marketplaces and return deduplicated, sorted results.
+   *
+   * Queries all adapters in parallel and deduplicates by `scopedName`,
+   * keeping the entry with the highest star count. Results are sorted by
+   * stars descending.
+   *
+   * @param query - Search query string
+   * @param limit - Maximum number of results to return (default: 20)
+   * @returns Deduplicated and sorted marketplace results
+   *
+   * @example
+   * ```typescript
+   * const results = await client.search("code review", 10);
+   * ```
+   */
+  async search(query, limit = 20) {
+    const settled = await Promise.allSettled(
+      this.adapters.map((adapter) => adapter.search(query, limit))
+    );
+    const flat = [];
+    const failures = [];
+    for (const [index, result] of settled.entries()) {
+      const adapterName = this.adapters[index]?.name ?? "unknown";
+      if (result.status === "fulfilled") {
+        flat.push(...result.value);
+      } else {
+        const reason = result.reason instanceof Error ? result.reason.message : String(result.reason);
+        failures.push(`${adapterName}: ${reason}`);
+      }
+    }
+    if (flat.length === 0 && failures.length > 0) {
+      throw new MarketplaceUnavailableError("All marketplace sources failed.", failures);
+    }
+    const seen = /* @__PURE__ */ new Map();
+    for (const result of flat) {
+      const existing = seen.get(result.scopedName);
+      if (!existing || result.stars > existing.stars) {
+        seen.set(result.scopedName, result);
+      }
+    }
+    const deduplicated = Array.from(seen.values());
+    deduplicated.sort((a, b) => b.stars - a.stars);
+    return deduplicated.slice(0, limit);
+  }
+  /**
+   * Get a specific skill by its scoped name from any marketplace.
+   *
+   * Tries each adapter in order and returns the first match.
+   *
+   * @param scopedName - Scoped skill name (e.g. `"@author/my-skill"`)
+   * @returns The marketplace result, or `null` if not found in any marketplace
+   *
+   * @example
+   * ```typescript
+   * const skill = await client.getSkill("@anthropic/memory");
+   * ```
+   */
+  async getSkill(scopedName) {
+    const failures = [];
+    for (const adapter of this.adapters) {
+      try {
+        const result = await adapter.getSkill(scopedName);
+        if (result) return result;
+      } catch (error) {
+        const reason = error instanceof Error ? error.message : String(error);
+        failures.push(`${adapter.name}: ${reason}`);
+      }
+    }
+    if (failures.length === this.adapters.length && this.adapters.length > 0) {
+      throw new MarketplaceUnavailableError("All marketplace sources failed.", failures);
+    }
+    return null;
+  }
+};
+
+// src/core/skills/recommendation.ts
+var RECOMMENDATION_ERROR_CODES = {
+  QUERY_INVALID: "E_SKILLS_QUERY_INVALID",
+  NO_MATCHES: "E_SKILLS_NO_MATCHES",
+  SOURCE_UNAVAILABLE: "E_SKILLS_SOURCE_UNAVAILABLE",
+  CRITERIA_CONFLICT: "E_SKILLS_CRITERIA_CONFLICT"
+};
+var DEFAULT_WEIGHTS = {
+  mustHaveMatch: 10,
+  preferMatch: 4,
+  queryTokenMatch: 3,
+  starsFactor: 2,
+  metadataBoost: 2,
+  modernMarkerBoost: 3,
+  legacyMarkerPenalty: 3,
+  excludePenalty: 25,
+  missingMustHavePenalty: 20
+};
+var DEFAULT_MODERN_MARKERS = ["svelte 5", "runes", "lafs", "slsa", "drizzle", "better-auth"];
+var DEFAULT_LEGACY_MARKERS = [
+  "svelte 3",
+  "jquery",
+  "bower",
+  "legacy",
+  "book.json",
+  "gitbook-cli"
+];
+function tokenizeCriteriaValue(value) {
+  return value.split(",").map((part) => part.trim().toLowerCase()).filter(Boolean);
+}
+function normalizeList(value) {
+  if (value === void 0) return [];
+  if (!(typeof value === "string" || Array.isArray(value))) return [];
+  const source = Array.isArray(value) ? value : [value];
+  const flattened = source.flatMap(
+    (item) => typeof item === "string" ? tokenizeCriteriaValue(item) : []
+  );
+  return Array.from(new Set(flattened)).sort((a, b) => a.localeCompare(b));
+}
+function hasAnyCriteriaInput(input) {
+  const query = typeof input.query === "string" ? input.query.trim() : "";
+  if (query.length > 0) return true;
+  const lists = [input.mustHave, input.prefer, input.exclude];
+  return lists.some((list) => normalizeList(list).length > 0);
+}
+function validateRecommendationCriteria(input) {
+  const issues = [];
+  if (input.query !== void 0 && typeof input.query !== "string") {
+    issues.push({
+      code: RECOMMENDATION_ERROR_CODES.QUERY_INVALID,
+      field: "query",
+      message: "query must be a string"
+    });
+  }
+  if (input.mustHave !== void 0 && !(typeof input.mustHave === "string" || Array.isArray(input.mustHave))) {
+    issues.push({
+      code: RECOMMENDATION_ERROR_CODES.QUERY_INVALID,
+      field: "mustHave",
+      message: "mustHave must be a string or string[]"
+    });
+  }
+  if (input.prefer !== void 0 && !(typeof input.prefer === "string" || Array.isArray(input.prefer))) {
+    issues.push({
+      code: RECOMMENDATION_ERROR_CODES.QUERY_INVALID,
+      field: "prefer",
+      message: "prefer must be a string or string[]"
+    });
+  }
+  if (input.exclude !== void 0 && !(typeof input.exclude === "string" || Array.isArray(input.exclude))) {
+    issues.push({
+      code: RECOMMENDATION_ERROR_CODES.QUERY_INVALID,
+      field: "exclude",
+      message: "exclude must be a string or string[]"
+    });
+  }
+  const mustHave = normalizeList(input.mustHave);
+  const prefer = normalizeList(input.prefer);
+  const exclude = normalizeList(input.exclude);
+  const conflict = mustHave.some((term) => exclude.includes(term)) || prefer.some((term) => exclude.includes(term));
+  if (conflict) {
+    issues.push({
+      code: RECOMMENDATION_ERROR_CODES.CRITERIA_CONFLICT,
+      field: "exclude",
+      message: "criteria terms cannot appear in both prefer/must-have and exclude"
+    });
+  }
+  if (issues.length === 0 && !hasAnyCriteriaInput(input)) {
+    issues.push({
+      code: RECOMMENDATION_ERROR_CODES.QUERY_INVALID,
+      field: "query",
+      message: "at least one criteria value is required"
+    });
+  }
+  return {
+    valid: issues.length === 0,
+    issues
+  };
+}
+function normalizeRecommendationCriteria(input) {
+  const query = (input.query ?? "").trim().toLowerCase();
+  return {
+    query,
+    queryTokens: query ? Array.from(new Set(tokenizeCriteriaValue(query.replace(/\s+/g, ",")))).sort(
+      (a, b) => a.localeCompare(b)
+    ) : [],
+    mustHave: normalizeList(input.mustHave),
+    prefer: normalizeList(input.prefer),
+    exclude: normalizeList(input.exclude)
+  };
+}
+function countMatches(haystack, needles) {
+  let count = 0;
+  for (const needle of needles) {
+    if (haystack.includes(needle)) {
+      count += 1;
+    }
+  }
+  return count;
+}
+function clampScore(value) {
+  return Number(value.toFixed(6));
+}
+function buildSearchText(skill) {
+  return `${skill.name} ${skill.scopedName} ${skill.description} ${skill.author}`.toLowerCase();
+}
+function scoreSkillRecommendation(skill, criteria, options = {}) {
+  const weights = { ...DEFAULT_WEIGHTS, ...options.weights };
+  const modernMarkers = (options.modernMarkers ?? DEFAULT_MODERN_MARKERS).map(
+    (marker) => marker.toLowerCase()
+  );
+  const legacyMarkers = (options.legacyMarkers ?? DEFAULT_LEGACY_MARKERS).map(
+    (marker) => marker.toLowerCase()
+  );
+  const text = buildSearchText(skill);
+  const reasons = [];
+  const tradeoffs = [];
+  const mustHaveMatches = countMatches(text, criteria.mustHave);
+  const missingMustHave = Math.max(criteria.mustHave.length - mustHaveMatches, 0);
+  const preferMatches = countMatches(text, criteria.prefer);
+  const queryMatches = countMatches(text, criteria.queryTokens);
+  const excludeMatches = countMatches(text, criteria.exclude);
+  const modernMatches = countMatches(text, modernMarkers);
+  const legacyMatches = countMatches(text, legacyMarkers);
+  const metadataSignal = skill.description.trim().length >= 80 ? 1 : 0;
+  const starsSignal = Math.log10(skill.stars + 1);
+  const sourceConfidence = skill.source === "agentskills.in" ? 1 : skill.source === "skills.sh" ? 0.8 : 0.6;
+  const mustHaveScore = mustHaveMatches * weights.mustHaveMatch - missingMustHave * weights.missingMustHavePenalty;
+  const preferScore = preferMatches * weights.preferMatch;
+  const queryScore = queryMatches * weights.queryTokenMatch;
+  const starsScore = starsSignal * weights.starsFactor;
+  const metadataScore = (metadataSignal + sourceConfidence) * weights.metadataBoost;
+  const modernityScore = modernMatches * weights.modernMarkerBoost - legacyMatches * weights.legacyMarkerPenalty;
+  const exclusionPenalty = excludeMatches * weights.excludePenalty;
+  const hasGitbookTopic = text.includes("gitbook");
+  const hasGitSync = text.includes("git sync") || text.includes("git") && text.includes("sync");
+  const hasApiWorkflow = text.includes("api") && (text.includes("workflow") || text.includes("sync"));
+  const hasLegacyCli = text.includes("gitbook-cli") || text.includes("book.json");
+  const topicScore = (hasGitbookTopic ? 3 : 0) + (hasGitSync ? 2 : 0) + (hasApiWorkflow ? 2 : 0) - (hasLegacyCli ? 4 : 0);
+  const total = clampScore(
+    mustHaveScore + preferScore + queryScore + starsScore + metadataScore + modernityScore + topicScore - exclusionPenalty
+  );
+  if (hasGitbookTopic) reasons.push({ code: "MATCH_TOPIC_GITBOOK" });
+  if (hasGitSync) reasons.push({ code: "HAS_GIT_SYNC" });
+  if (hasApiWorkflow) reasons.push({ code: "HAS_API_WORKFLOW" });
+  if (hasLegacyCli) reasons.push({ code: "PENALTY_LEGACY_CLI" });
+  if (mustHaveMatches > 0)
+    reasons.push({ code: "MUST_HAVE_MATCH", detail: String(mustHaveMatches) });
+  if (missingMustHave > 0)
+    reasons.push({ code: "MISSING_MUST_HAVE", detail: String(missingMustHave) });
+  if (preferMatches > 0) reasons.push({ code: "PREFER_MATCH", detail: String(preferMatches) });
+  if (queryMatches > 0) reasons.push({ code: "QUERY_MATCH", detail: String(queryMatches) });
+  if (starsSignal > 0) reasons.push({ code: "STAR_SIGNAL" });
+  if (metadataSignal > 0) reasons.push({ code: "METADATA_SIGNAL" });
+  if (modernMatches > 0) reasons.push({ code: "MODERN_MARKER", detail: String(modernMatches) });
+  if (legacyMatches > 0) reasons.push({ code: "LEGACY_MARKER", detail: String(legacyMatches) });
+  if (excludeMatches > 0) reasons.push({ code: "EXCLUDE_MATCH", detail: String(excludeMatches) });
+  if (missingMustHave > 0) tradeoffs.push("Missing one or more required criteria terms.");
+  if (excludeMatches > 0) tradeoffs.push("Matches one or more excluded terms.");
+  if (skill.stars < 10) tradeoffs.push("Low quality signal from repository stars.");
+  if (hasLegacyCli) tradeoffs.push("Contains legacy GitBook CLI markers.");
+  const result = {
+    skill,
+    score: total,
+    reasons,
+    tradeoffs,
+    excluded: excludeMatches > 0
+  };
+  if (options.includeDetails) {
+    result.breakdown = {
+      mustHave: clampScore(mustHaveScore),
+      prefer: clampScore(preferScore),
+      query: clampScore(queryScore),
+      stars: clampScore(starsScore),
+      metadata: clampScore(metadataScore),
+      modernity: clampScore(modernityScore),
+      exclusionPenalty: clampScore(exclusionPenalty),
+      total
+    };
+  }
+  return result;
+}
+function recommendSkills(skills, criteriaInput, options = {}) {
+  const validation = validateRecommendationCriteria(criteriaInput);
+  if (!validation.valid) {
+    const first = validation.issues[0];
+    const error = new Error(first?.message ?? "Invalid recommendation criteria");
+    error.code = first?.code;
+    error.issues = validation.issues;
+    throw error;
+  }
+  const criteria = normalizeRecommendationCriteria(criteriaInput);
+  const ranking = skills.map((skill) => scoreSkillRecommendation(skill, criteria, options)).sort((a, b) => {
+    if (b.score !== a.score) return b.score - a.score;
+    if (b.skill.stars !== a.skill.stars) return b.skill.stars - a.skill.stars;
+    return a.skill.scopedName.localeCompare(b.skill.scopedName);
+  });
+  return {
+    criteria,
+    ranking: typeof options.top === "number" ? ranking.slice(0, Math.max(0, options.top)) : ranking
+  };
+}
+var rankSkills = recommendSkills;
+
+// src/core/skills/recommendation-api.ts
+function formatSkillRecommendations(result, opts) {
+  const top = result.ranking;
+  if (opts.mode === "human") {
+    if (top.length === 0) return "No recommendations found.";
+    const lines = ["Recommended skills:", ""];
+    for (const [index, entry] of top.entries()) {
+      const marker = index === 0 ? " (Recommended)" : "";
+      lines.push(`${index + 1}) ${entry.skill.scopedName}${marker}`);
+      lines.push(
+        `   why: ${entry.reasons.map((reason) => reason.code).join(", ") || "score-based match"}`
+      );
+      lines.push(`   tradeoff: ${entry.tradeoffs[0] ?? "none"}`);
+    }
+    lines.push("");
+    lines.push(`CHOOSE: ${top.map((_, index) => index + 1).join(",")}`);
+    return lines.join("\n");
+  }
+  const options = top.map((entry, index) => ({
+    rank: index + 1,
+    scopedName: entry.skill.scopedName,
+    score: entry.score,
+    reasons: entry.reasons,
+    tradeoffs: entry.tradeoffs,
+    ...opts.details ? {
+      description: entry.skill.description,
+      source: entry.skill.source,
+      evidence: entry.breakdown ?? null
+    } : {}
+  }));
+  return {
+    query: result.criteria.query,
+    recommended: options[0] ?? null,
+    options
+  };
+}
+async function searchSkills(query, options = {}) {
+  const trimmed = query.trim();
+  if (!trimmed) {
+    const error = new Error("query must be non-empty");
+    error.code = RECOMMENDATION_ERROR_CODES.QUERY_INVALID;
+    throw error;
+  }
+  const client = new MarketplaceClient();
+  try {
+    return await client.search(trimmed, options.limit ?? 20);
+  } catch (error) {
+    const wrapped = new Error(error instanceof Error ? error.message : String(error));
+    wrapped.code = RECOMMENDATION_ERROR_CODES.SOURCE_UNAVAILABLE;
+    throw wrapped;
+  }
+}
+async function recommendSkills2(query, criteria, options = {}) {
+  const hits = await searchSkills(query, {
+    limit: options.limit ?? Math.max((options.top ?? 3) * 5, 20)
+  });
+  const ranked = recommendSkills(hits, { ...criteria, query }, options);
+  if (ranked.ranking.length === 0) {
+    const error = new Error("no matches found");
+    error.code = RECOMMENDATION_ERROR_CODES.NO_MATCHES;
+    throw error;
+  }
+  return ranked;
+}
+
+// src/core/skills/library-loader.ts
+import { existsSync as existsSync11, readdirSync, readFileSync } from "fs";
+import { createRequire } from "module";
+import { basename as basename2, dirname as dirname2, join as join4 } from "path";
+var require2 = createRequire(import.meta.url);
+function loadLibraryFromModule(root) {
+  let mod;
+  try {
+    mod = require2(root);
+  } catch {
+    throw new Error(`Failed to load skill library module from ${root}`);
+  }
+  const requiredMethods = [
+    "listSkills",
+    "getSkill",
+    "getSkillPath",
+    "getSkillDir",
+    "readSkillContent",
+    "getCoreSkills",
+    "getSkillsByCategory",
+    "getSkillDependencies",
+    "resolveDependencyTree",
+    "listProfiles",
+    "getProfile",
+    "resolveProfile",
+    "listSharedResources",
+    "getSharedResourcePath",
+    "readSharedResource",
+    "listProtocols",
+    "getProtocolPath",
+    "readProtocol",
+    "validateSkillFrontmatter",
+    "validateAll",
+    "getDispatchMatrix"
+  ];
+  for (const method of requiredMethods) {
+    if (typeof mod[method] !== "function") {
+      throw new Error(`Skill library at ${root} does not implement required method: ${method}`);
+    }
+  }
+  if (!mod.version || typeof mod.version !== "string") {
+    throw new Error(`Skill library at ${root} is missing 'version' property`);
+  }
+  if (!mod.libraryRoot || typeof mod.libraryRoot !== "string") {
+    throw new Error(`Skill library at ${root} is missing 'libraryRoot' property`);
+  }
+  return mod;
+}
+function buildLibraryFromFiles(root) {
+  const catalogPath = join4(root, "skills.json");
+  if (!existsSync11(catalogPath)) {
+    throw new Error(`No skills.json found at ${root}`);
+  }
+  const catalogData = JSON.parse(readFileSync(catalogPath, "utf-8"));
+  const entries = catalogData.skills ?? [];
+  const version = catalogData.version ?? "0.0.0";
+  const manifestPath = join4(root, "skills", "manifest.json");
+  let manifest;
+  if (existsSync11(manifestPath)) {
+    manifest = JSON.parse(readFileSync(manifestPath, "utf-8"));
+  } else {
+    manifest = {
+      $schema: "",
+      _meta: {},
+      dispatch_matrix: { by_task_type: {}, by_keyword: {}, by_protocol: {} },
+      skills: []
+    };
+  }
+  const profilesDir = join4(root, "profiles");
+  const profiles = /* @__PURE__ */ new Map();
+  if (existsSync11(profilesDir)) {
+    for (const file of readdirSync(profilesDir)) {
+      if (!file.endsWith(".json")) continue;
+      try {
+        const profile = JSON.parse(
+          readFileSync(join4(profilesDir, file), "utf-8")
+        );
+        profiles.set(profile.name, profile);
+      } catch {
+      }
+    }
+  }
+  const skillMap = /* @__PURE__ */ new Map();
+  for (const entry of entries) {
+    skillMap.set(entry.name, entry);
+  }
+  function getSkillDir2(name) {
+    const entry = skillMap.get(name);
+    if (entry) {
+      return dirname2(join4(root, entry.path));
+    }
+    return join4(root, "skills", name);
+  }
+  function resolveDeps(names, visited = /* @__PURE__ */ new Set()) {
+    const result = [];
+    for (const name of names) {
+      if (visited.has(name)) continue;
+      visited.add(name);
+      const entry = skillMap.get(name);
+      if (entry && entry.dependencies.length > 0) {
+        result.push(...resolveDeps(entry.dependencies, visited));
+      }
+      result.push(name);
+    }
+    return result;
+  }
+  function resolveProfileByName(name, visited = /* @__PURE__ */ new Set()) {
+    if (visited.has(name)) return [];
+    visited.add(name);
+    const profile = profiles.get(name);
+    if (!profile) return [];
+    let skills = [];
+    if (profile.extends) {
+      skills = resolveProfileByName(profile.extends, visited);
+    }
+    skills.push(...profile.skills);
+    return resolveDeps([...new Set(skills)]);
+  }
+  function discoverFiles(dir, ext) {
+    if (!existsSync11(dir)) return [];
+    return readdirSync(dir).filter((f) => f.endsWith(ext)).map((f) => basename2(f, ext));
+  }
+  const library = {
+    version,
+    libraryRoot: root,
+    skills: entries,
+    manifest,
+    listSkills() {
+      return entries.map((e) => e.name);
+    },
+    getSkill(name) {
+      return skillMap.get(name);
+    },
+    getSkillPath(name) {
+      const entry = skillMap.get(name);
+      if (entry) {
+        return join4(root, entry.path);
+      }
+      return join4(root, "skills", name, "SKILL.md");
+    },
+    getSkillDir: getSkillDir2,
+    readSkillContent(name) {
+      const skillPath = library.getSkillPath(name);
+      if (!existsSync11(skillPath)) {
+        throw new Error(`Skill content not found: ${skillPath}`);
+      }
+      return readFileSync(skillPath, "utf-8");
+    },
+    getCoreSkills() {
+      return entries.filter((e) => e.core);
+    },
+    getSkillsByCategory(category) {
+      return entries.filter((e) => e.category === category);
+    },
+    getSkillDependencies(name) {
+      return skillMap.get(name)?.dependencies ?? [];
+    },
+    resolveDependencyTree(names) {
+      return resolveDeps(names);
+    },
+    listProfiles() {
+      return [...profiles.keys()];
+    },
+    getProfile(name) {
+      return profiles.get(name);
+    },
+    resolveProfile(name) {
+      return resolveProfileByName(name);
+    },
+    listSharedResources() {
+      return discoverFiles(join4(root, "skills", "_shared"), ".md");
+    },
+    getSharedResourcePath(name) {
+      const resourcePath = join4(root, "skills", "_shared", `${name}.md`);
+      return existsSync11(resourcePath) ? resourcePath : void 0;
+    },
+    readSharedResource(name) {
+      const resourcePath = library.getSharedResourcePath(name);
+      if (!resourcePath) return void 0;
+      return readFileSync(resourcePath, "utf-8");
+    },
+    listProtocols() {
+      const rootProtocols = discoverFiles(join4(root, "protocols"), ".md");
+      if (rootProtocols.length > 0) return rootProtocols;
+      return discoverFiles(join4(root, "skills", "protocols"), ".md");
+    },
+    getProtocolPath(name) {
+      const rootPath = join4(root, "protocols", `${name}.md`);
+      if (existsSync11(rootPath)) return rootPath;
+      const skillsPath = join4(root, "skills", "protocols", `${name}.md`);
+      return existsSync11(skillsPath) ? skillsPath : void 0;
+    },
+    readProtocol(name) {
+      const protocolPath = library.getProtocolPath(name);
+      if (!protocolPath) return void 0;
+      return readFileSync(protocolPath, "utf-8");
+    },
+    validateSkillFrontmatter(name) {
+      const entry = skillMap.get(name);
+      if (!entry) {
+        return {
+          valid: false,
+          issues: [{ level: "error", field: "name", message: `Skill not found: ${name}` }]
+        };
+      }
+      const issues = [];
+      if (!entry.name) {
+        issues.push({ level: "error", field: "name", message: "Missing name" });
+      }
+      if (!entry.description) {
+        issues.push({ level: "error", field: "description", message: "Missing description" });
+      }
+      if (!entry.version) {
+        issues.push({ level: "warn", field: "version", message: "Missing version" });
+      }
+      const skillPath = join4(root, entry.path);
+      if (!existsSync11(skillPath)) {
+        issues.push({
+          level: "error",
+          field: "path",
+          message: `SKILL.md not found at ${entry.path}`
+        });
+      }
+      return {
+        valid: !issues.some((i) => i.level === "error"),
+        issues
+      };
+    },
+    validateAll() {
+      const results = /* @__PURE__ */ new Map();
+      for (const entry of entries) {
+        results.set(entry.name, library.validateSkillFrontmatter(entry.name));
+      }
+      return results;
+    },
+    getDispatchMatrix() {
+      return manifest.dispatch_matrix;
+    }
+  };
+  return library;
+}
+
+// src/core/skills/catalog.ts
+var catalog_exports = {};
+__export(catalog_exports, {
+  clearRegisteredLibrary: () => clearRegisteredLibrary,
+  getCoreSkills: () => getCoreSkills,
+  getDispatchMatrix: () => getDispatchMatrix,
+  getLibraryRoot: () => getLibraryRoot,
+  getManifest: () => getManifest,
+  getProfile: () => getProfile,
+  getProtocolPath: () => getProtocolPath,
+  getSharedResourcePath: () => getSharedResourcePath,
+  getSkill: () => getSkill,
+  getSkillDependencies: () => getSkillDependencies,
+  getSkillDir: () => getSkillDir,
+  getSkillPath: () => getSkillPath,
+  getSkills: () => getSkills,
+  getSkillsByCategory: () => getSkillsByCategory,
+  getVersion: () => getVersion,
+  isCatalogAvailable: () => isCatalogAvailable,
+  listProfiles: () => listProfiles,
+  listProtocols: () => listProtocols,
+  listSharedResources: () => listSharedResources,
+  listSkills: () => listSkills,
+  readProtocol: () => readProtocol,
+  readSharedResource: () => readSharedResource,
+  readSkillContent: () => readSkillContent,
+  registerSkillLibrary: () => registerSkillLibrary,
+  registerSkillLibraryFromPath: () => registerSkillLibraryFromPath,
+  resolveDependencyTree: () => resolveDependencyTree,
+  resolveProfile: () => resolveProfile,
+  validateAll: () => validateAll,
+  validateSkillFrontmatter: () => validateSkillFrontmatter
+});
+import { existsSync as existsSync12 } from "fs";
+import { join as join5 } from "path";
+var _library = null;
+function registerSkillLibrary(library) {
+  _library = library;
+}
+function registerSkillLibraryFromPath(root) {
+  const indexPath = join5(root, "index.js");
+  if (existsSync12(indexPath)) {
+    _library = loadLibraryFromModule(root);
+    return;
+  }
+  _library = buildLibraryFromFiles(root);
+}
+function clearRegisteredLibrary() {
+  _library = null;
+}
+function discoverLibrary() {
+  const envPath = process.env["CAAMP_SKILL_LIBRARY"];
+  if (envPath && existsSync12(envPath)) {
+    try {
+      const indexPath = join5(envPath, "index.js");
+      if (existsSync12(indexPath)) {
+        return loadLibraryFromModule(envPath);
+      }
+      if (existsSync12(join5(envPath, "skills.json"))) {
+        return buildLibraryFromFiles(envPath);
+      }
+    } catch {
+    }
+  }
+  return null;
+}
+function getLibrary() {
+  if (!_library) {
+    const discovered = discoverLibrary();
+    if (discovered) {
+      _library = discovered;
+    }
+  }
+  if (!_library) {
+    throw new Error(
+      "No skill library registered. Register one with registerSkillLibraryFromPath() or set the CAAMP_SKILL_LIBRARY environment variable."
+    );
+  }
+  return _library;
+}
+function isCatalogAvailable() {
+  try {
+    getLibrary();
+    return true;
+  } catch {
+    return false;
   }
-  const content = await readFile7(filePath, "utf-8");
-  const lines = content.split("\n");
-  const activeRules = rules ?? AUDIT_RULES;
-  const findings = [];
-  for (const rule2 of activeRules) {
-    for (let i = 0; i < lines.length; i++) {
-      const line = lines[i] ?? "";
-      const match = line.match(rule2.pattern);
-      if (match) {
-        findings.push({
-          rule: rule2,
-          line: i + 1,
-          column: (match.index ?? 0) + 1,
-          match: match[0],
-          context: line.trim()
-        });
-      }
+}
+function getSkills() {
+  return getLibrary().skills;
+}
+function getManifest() {
+  return getLibrary().manifest;
+}
+function listSkills() {
+  return getLibrary().listSkills();
+}
+function getSkill(name) {
+  return getLibrary().getSkill(name);
+}
+function getSkillPath(name) {
+  return getLibrary().getSkillPath(name);
+}
+function getSkillDir(name) {
+  return getLibrary().getSkillDir(name);
+}
+function readSkillContent(name) {
+  return getLibrary().readSkillContent(name);
+}
+function getCoreSkills() {
+  return getLibrary().getCoreSkills();
+}
+function getSkillsByCategory(category) {
+  return getLibrary().getSkillsByCategory(category);
+}
+function getSkillDependencies(name) {
+  return getLibrary().getSkillDependencies(name);
+}
+function resolveDependencyTree(names) {
+  return getLibrary().resolveDependencyTree(names);
+}
+function listProfiles() {
+  return getLibrary().listProfiles();
+}
+function getProfile(name) {
+  return getLibrary().getProfile(name);
+}
+function resolveProfile(name) {
+  return getLibrary().resolveProfile(name);
+}
+function listSharedResources() {
+  return getLibrary().listSharedResources();
+}
+function getSharedResourcePath(name) {
+  return getLibrary().getSharedResourcePath(name);
+}
+function readSharedResource(name) {
+  return getLibrary().readSharedResource(name);
+}
+function listProtocols() {
+  return getLibrary().listProtocols();
+}
+function getProtocolPath(name) {
+  return getLibrary().getProtocolPath(name);
+}
+function readProtocol(name) {
+  return getLibrary().readProtocol(name);
+}
+function validateSkillFrontmatter(name) {
+  return getLibrary().validateSkillFrontmatter(name);
+}
+function validateAll() {
+  return getLibrary().validateAll();
+}
+function getDispatchMatrix() {
+  return getLibrary().getDispatchMatrix();
+}
+function getVersion() {
+  return getLibrary().version;
+}
+function getLibraryRoot() {
+  return getLibrary().libraryRoot;
+}
+
+// src/core/skills/discovery.ts
+import { existsSync as existsSync13 } from "fs";
+import { readdir, readFile as readFile7 } from "fs/promises";
+import { join as join6 } from "path";
+import matter from "gray-matter";
+async function parseSkillFile(filePath) {
+  try {
+    const content = await readFile7(filePath, "utf-8");
+    const { data } = matter(content);
+    if (!data.name || !data.description) {
+      return null;
     }
+    const allowedTools = data["allowed-tools"] ?? data.allowedTools;
+    return {
+      name: String(data.name),
+      description: String(data.description),
+      license: data.license ? String(data.license) : void 0,
+      compatibility: data.compatibility ? String(data.compatibility) : void 0,
+      metadata: data.metadata,
+      allowedTools: typeof allowedTools === "string" ? allowedTools.split(/\s+/) : Array.isArray(allowedTools) ? allowedTools.map(String) : void 0,
+      version: data.version ? String(data.version) : void 0
+    };
+  } catch {
+    return null;
   }
-  const totalPenalty = findings.reduce(
-    (sum, f) => sum + (SEVERITY_WEIGHTS[f.rule.severity] ?? 0),
-    0
-  );
-  const score = Math.max(0, 100 - totalPenalty);
-  const passed = !findings.some((f) => f.rule.severity === "critical" || f.rule.severity === "high");
-  return { file: filePath, findings, score, passed };
 }
-async function scanDirectory(dirPath) {
-  const { readdir: readdir2 } = await import("fs/promises");
-  const { join: join7 } = await import("path");
-  if (!existsSync13(dirPath)) return [];
-  const entries = await readdir2(dirPath, { withFileTypes: true });
-  const results = [];
+async function discoverSkill(skillDir) {
+  const skillFile = join6(skillDir, "SKILL.md");
+  if (!existsSync13(skillFile)) return null;
+  const metadata = await parseSkillFile(skillFile);
+  if (!metadata) return null;
+  return {
+    name: metadata.name,
+    scopedName: metadata.name,
+    path: skillDir,
+    metadata
+  };
+}
+async function discoverSkills(rootDir) {
+  if (!existsSync13(rootDir)) return [];
+  const entries = await readdir(rootDir, { withFileTypes: true });
+  const skills = [];
   for (const entry of entries) {
-    if (entry.isDirectory() || entry.isSymbolicLink()) {
-      const skillFile = join7(dirPath, entry.name, "SKILL.md");
-      if (existsSync13(skillFile)) {
-        results.push(await scanFile(skillFile));
-      }
+    if (!entry.isDirectory() && !entry.isSymbolicLink()) continue;
+    const skillDir = join6(rootDir, entry.name);
+    const skill = await discoverSkill(skillDir);
+    if (skill) {
+      skills.push(skill);
     }
   }
-  return results;
+  return skills;
 }
-function toSarif(results) {
-  return {
-    $schema: "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/main/sarif-2.1/schema/sarif-schema-2.1.0.json",
-    version: "2.1.0",
-    runs: [
-      {
-        tool: {
-          driver: {
-            name: "caamp-audit",
-            version: "0.1.0",
-            rules: AUDIT_RULES.map((r) => ({
-              id: r.id,
-              name: r.name,
-              shortDescription: { text: r.description },
-              defaultConfiguration: {
-                level: r.severity === "critical" || r.severity === "high" ? "error" : "warning"
-              },
-              properties: { category: r.category }
-            }))
-          }
-        },
-        results: results.flatMap(
-          (result) => result.findings.map((f) => ({
-            ruleId: f.rule.id,
-            level: f.rule.severity === "critical" || f.rule.severity === "high" ? "error" : "warning",
-            message: { text: `${f.rule.description}: ${f.match}` },
-            locations: [
-              {
-                physicalLocation: {
-                  artifactLocation: { uri: result.file },
-                  region: {
-                    startLine: f.line,
-                    startColumn: f.column
-                  }
-                }
-              }
-            ]
-          }))
-        )
+async function discoverSkillsMulti(dirs) {
+  const all = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const dir of dirs) {
+    const skills = await discoverSkills(dir);
+    for (const skill of skills) {
+      if (!seen.has(skill.name)) {
+        seen.add(skill.name);
+        all.push(skill);
       }
-    ]
-  };
+    }
+  }
+  return all;
 }
 
 // src/core/skills/validator.ts
-import { readFile as readFile8 } from "fs/promises";
 import { existsSync as existsSync14 } from "fs";
+import { readFile as readFile8 } from "fs/promises";
 import matter2 from "gray-matter";
 var RESERVED_NAMES = [
   "anthropic",
@@ -3465,7 +3510,11 @@ async function validateSkill(filePath) {
     }
   }
   if (!data.description) {
-    issues.push({ level: "error", field: "description", message: "Missing required field: description" });
+    issues.push({
+      level: "error",
+      field: "description",
+      message: "Missing required field: description"
+    });
   } else {
     const desc = String(data.description);
     if (desc.length > MAX_DESCRIPTION_LENGTH) {
@@ -3514,15 +3563,15 @@ async function validateSkill(filePath) {
 }
 
 export {
-  deepMerge,
-  getNestedValue,
-  ensureDir,
   setVerbose,
   setQuiet,
   isVerbose,
   isQuiet,
   setHuman,
   isHuman,
+  deepMerge,
+  getNestedValue,
+  ensureDir,
   readConfig,
   writeConfig,
   removeConfig,
@@ -3568,8 +3617,25 @@ export {
   reconcileCleoLock,
   parseSource,
   isMarketplaceScoped,
+  scanFile,
+  scanDirectory,
+  toSarif,
+  recordSkillInstall,
+  removeSkillFromLock,
+  getTrackedSkills,
+  checkSkillUpdate,
+  checkAllSkillUpdates,
   formatNetworkError,
   MarketplaceClient,
+  RECOMMENDATION_ERROR_CODES,
+  tokenizeCriteriaValue,
+  validateRecommendationCriteria,
+  normalizeRecommendationCriteria,
+  scoreSkillRecommendation,
+  rankSkills,
+  formatSkillRecommendations,
+  searchSkills,
+  recommendSkills2 as recommendSkills,
   loadLibraryFromModule,
   buildLibraryFromFiles,
   registerSkillLibrary,
@@ -3586,23 +3652,6 @@ export {
   discoverSkill,
   discoverSkills,
   discoverSkillsMulti,
-  recordSkillInstall,
-  removeSkillFromLock,
-  getTrackedSkills,
-  checkSkillUpdate,
-  checkAllSkillUpdates,
-  RECOMMENDATION_ERROR_CODES,
-  tokenizeCriteriaValue,
-  validateRecommendationCriteria,
-  normalizeRecommendationCriteria,
-  scoreSkillRecommendation,
-  rankSkills,
-  formatSkillRecommendations,
-  searchSkills,
-  recommendSkills2 as recommendSkills,
-  scanFile,
-  scanDirectory,
-  toSarif,
   validateSkill
 };
-//# sourceMappingURL=chunk-ZF4W3K5H.js.map
+//# sourceMappingURL=chunk-3WKBFXLE.js.map