@codemieai/code 0.0.58 → 0.1.0

package/dist/cli/commands/skills/lib/skills-metrics.js

@@ -0,0 +1,268 @@
+/**
+ * Lifecycle event emitter for `codemie skills *` commands.
+ *
+ * Each event is POSTed to the CodeMie backend at `/v1/skills/events`, where
+ * it is persisted in Postgres (authoritative, durable) and mirrored to the
+ * legacy Elastic-backed metrics path. Postgres survives Elastic retention,
+ * so install-count / popularity queries remain accurate forever.
+ *
+ * Behaviour:
+ * - **Auth-gated (spec §7).** If no SSO credentials are present, the helper
+ *   becomes a no-op silently — no event is sent.
+ * - **Fan-out per skill.** When the wrapper knows which skills the operation
+ *   targets (explicit `--skill foo bar`), one POST is emitted per skill so
+ *   the backend stores `(event, skill)` rows and trivial COUNT(*) queries
+ *   work. For ops without a specific skill (bare `list`, interactive `add`),
+ *   a single POST is sent with `skill_*` fields null.
+ * - **Best-effort.** Any failure to load credentials, resolve the API URL,
+ *   or POST is logged at debug level and swallowed — telemetry must never
+ *   block a real user command.
+ */
+import { randomUUID } from 'node:crypto';
+import { readFileSync } from 'node:fs';
+import path from 'node:path';
+import { ConfigLoader } from '../../../../utils/config.js';
+import { logger } from '../../../../utils/logger.js';
+import { detectGitBranch, detectGitRemoteRepo } from '../../../../utils/processes.js';
+import { getDirname } from '../../../../utils/paths.js';
+const AGENT_NAME = 'codemie-skills';
+const ENDPOINT_PATH = '/v1/skills/events';
+/**
+ * Build a metric session for a single `codemie skills <command>` invocation.
+ * Loads SSO credentials best-effort; if anything fails, returns a session
+ * whose `transport` is null and the lifecycle helpers become no-ops.
+ */
+export async function startSkillMetric(command, workingDirectory = process.cwd()) {
+    const sessionId = process.env.CODEMIE_SESSION_ID ?? randomUUID();
+    const agentVersion = readPackageVersion();
+    const transport = await tryBuildTransport(agentVersion);
+    return {
+        command,
+        sessionId,
+        agentVersion,
+        workingDirectory,
+        transport,
+    };
+}
+export async function emitStarted(session, partial) {
+    // Kept as a lifecycle primitive for callers that need in-flight visibility.
+    // Current skills commands emit terminal states only so interrupted upstream
+    // prompts do not leave durable started-only rows.
+    await emit(session, 'started', partial);
+}
+export async function emitCompleted(session, partial) {
+    await emit(session, 'completed', partial);
+}
+export async function emitFailed(session, partial) {
+    await emit(session, 'failed', partial);
+}
+async function emit(session, status, partial) {
+    if (!session.transport) {
+        if (shouldLogSkillMetricDebug(session.command)) {
+            logSkillMetricDebug(session.command, {
+                sent: false,
+                reason: 'no event transport; missing CodeMie URL, SSO cookies, or API base',
+                command: session.command,
+                status,
+                session_id: session.sessionId,
+                partial,
+            });
+        }
+        return;
+    }
+    const transport = session.transport;
+    try {
+        const [branch, repository] = await Promise.all([
+            detectGitBranch(session.workingDirectory),
+            detectGitRemoteRepo(session.workingDirectory),
+        ]);
+        const baseBody = {
+            session_id: session.sessionId,
+            command: session.command,
+            status,
+            ...(partial.scope !== undefined && { scope: partial.scope }),
+            ...(partial.error_code !== undefined && { error_code: partial.error_code }),
+            ...(partial.agent_selection_mode !== undefined && {
+                agent_selection_mode: partial.agent_selection_mode,
+            }),
+            ...(partial.target_agents && partial.target_agents.length > 0 && {
+                target_agents: partial.target_agents,
+            }),
+            ...(partial.source !== undefined && { source: partial.source }),
+            agent: AGENT_NAME,
+            agent_version: session.agentVersion,
+            ...(repository && { repository }),
+            ...(branch && { branch }),
+            ...(partial.attributes && Object.keys(partial.attributes).length > 0 && {
+                attributes: partial.attributes,
+            }),
+        };
+        const targetedSkills = partial.skill_names ?? [];
+        const bodies = targetedSkills.length > 0
+            ? targetedSkills.map((name) => ({
+                ...baseBody,
+                skill_name: name,
+                skill_slug: toSkillSlug(name),
+                skill_id: composeSkillId(partial.source, toSkillSlug(name)),
+            }))
+            : [{ ...baseBody }];
+        logger.debug('[skills] Emitting skill events', {
+            command: session.command,
+            status,
+            scope: partial.scope,
+            session_id: session.sessionId,
+            events: bodies.length,
+        });
+        await Promise.all(bodies.map((body) => postOne(transport, body)));
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        logger.debug(`[skills] Event emission failed (${status}): ${message}`);
+    }
+}
+async function postOne(transport, body) {
+    const url = `${transport.apiUrl}${ENDPOINT_PATH}`;
+    const headers = {
+        'Content-Type': 'application/json',
+        'User-Agent': `codemie-cli/${transport.cliVersion}`,
+        'X-CodeMie-CLI': `codemie-cli/${transport.cliVersion}`,
+        'X-CodeMie-Client': 'codemie-cli',
+        Cookie: transport.cookieHeader,
+    };
+    if (body.repository)
+        headers['X-CodeMie-Repository'] = body.repository;
+    if (body.branch)
+        headers['X-CodeMie-Branch'] = body.branch;
+    if (body.project)
+        headers['X-CodeMie-Project'] = body.project;
+    if (shouldLogSkillMetricDebug(body.command)) {
+        const debugPayload = {
+            url,
+            headers: redactSensitiveHeaders(headers),
+            body,
+        };
+        logSkillMetricDebug(body.command, { sent: true, ...debugPayload });
+    }
+    try {
+        const response = await fetch(url, {
+            method: 'POST',
+            headers,
+            body: JSON.stringify(body),
+        });
+        if (!response.ok) {
+            const text = await response.text().catch(() => '');
+            logger.debug(`[skills] /v1/skills/events POST returned HTTP ${response.status} ${response.statusText}: ${text.slice(0, 200)}`);
+            return;
+        }
+        const data = (await response.json().catch(() => ({})));
+        logger.debug('[skills] Skill event recorded', {
+            id: data.id,
+            command: body.command,
+            status: body.status,
+            skill_id: body.skill_id,
+        });
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        logger.debug(`[skills] Skill event POST failed: ${message}`);
+    }
+}
+function redactSensitiveHeaders(headers) {
+    return Object.fromEntries(Object.entries(headers).map(([key, value]) => [
+        key,
+        key.toLowerCase() === 'cookie' ? '<redacted>' : value,
+    ]));
+}
+function shouldLogSkillMetricDebug(command) {
+    return command === 'add' || command === 'remove' || command === 'update';
+}
+function logSkillMetricDebug(command, payload) {
+    logger.debug(`[skills] CodeMie ${command} metric debug`, payload);
+}
+/**
+ * Mirror of upstream `skills` CLI `toSkillSlug`. Keeping the algorithm
+ * byte-for-byte identical means the canonical `<source>/<slug>` we send
+ * matches whatever the upstream tooling computes, so cross-system joins
+ * (e.g. comparing our install counts to skills.sh download counts) work
+ * without a translation layer.
+ */
+export function toSkillSlug(name) {
+    if (!name)
+        return '';
+    return name
+        .toLowerCase()
+        .replace(/[\s_]+/g, '-')
+        .replace(/[^a-z0-9-]/g, '')
+        .replace(/-+/g, '-')
+        .replace(/^-|-$/g, '');
+}
+function composeSkillId(source, slug) {
+    if (!slug)
+        return undefined;
+    return source ? `${source}/${slug}` : slug;
+}
+async function tryBuildTransport(agentVersion) {
+    let config;
+    try {
+        config = await ConfigLoader.load();
+    }
+    catch (error) {
+        logger.debug('[skills] Skipping event emission: configuration not loaded', error);
+        return null;
+    }
+    const ssoUrl = config.codeMieUrl || config.baseUrl;
+    if (!ssoUrl) {
+        logger.debug('[skills] Skipping event emission: no CodeMie URL configured');
+        return null;
+    }
+    let cookieHeader = '';
+    let apiUrl;
+    try {
+        const { CodeMieSSO } = await import('../../../../providers/plugins/sso/sso.auth.js');
+        const sso = new CodeMieSSO();
+        const credentials = await sso.getStoredCredentials(ssoUrl);
+        if (credentials?.cookies) {
+            cookieHeader = Object.entries(credentials.cookies)
+                .map(([key, value]) => `${key}=${value}`)
+                .join('; ');
+        }
+        // credentials.apiUrl is the resolved API base (e.g.
+        // "<codeMieUrl>/code-assistant-api"). The bare baseUrl from the profile
+        // points at the LLM proxy for SSO providers and does NOT serve our
+        // events endpoint, so we prefer the credential-stored URL.
+        apiUrl = credentials?.apiUrl;
+    }
+    catch (error) {
+        logger.debug('[skills] Failed to load SSO credentials for events', error);
+    }
+    if (!cookieHeader) {
+        logger.debug('[skills] Skipping event emission: no SSO cookies available');
+        return null;
+    }
+    if (!apiUrl) {
+        try {
+            const { ensureApiBase } = await import('../../../../providers/core/codemie-auth-helpers.js');
+            apiUrl = ensureApiBase(ssoUrl);
+        }
+        catch (error) {
+            logger.debug('[skills] Skipping event emission: cannot resolve API base URL', error);
+            return null;
+        }
+    }
+    logger.debug('[skills] Built skill events transport', { apiUrl });
+    return { apiUrl, cookieHeader, cliVersion: agentVersion };
+}
+function readPackageVersion() {
+    try {
+        const here = getDirname(import.meta.url);
+        // Walk up from <root>/{src,dist}/cli/commands/skills/lib to <root>.
+        const root = path.resolve(here, '..', '..', '..', '..', '..');
+        const pkgPath = path.join(root, 'package.json');
+        const pkg = JSON.parse(readFileSync(pkgPath, 'utf-8'));
+        return pkg.version ?? 'unknown';
+    }
+    catch {
+        return process.env.CODEMIE_CLI_VERSION ?? 'unknown';
+    }
+}
+//# sourceMappingURL=skills-metrics.js.map

package/dist/cli/commands/skills/lib/skills-metrics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills-metrics.js","sourceRoot":"","sources":["../../../../../src/cli/commands/skills/lib/skills-metrics.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAG9C,MAAM,UAAU,GAAG,gBAAgB,CAAC;AACpC,MAAM,aAAa,GAAG,mBAAmB,CAAC;AA2C1C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAqB,EACrB,gBAAgB,GAAG,OAAO,CAAC,GAAG,EAAE;IAEhC,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,UAAU,EAAE,CAAC;IACjE,MAAM,YAAY,GAAG,kBAAkB,EAAE,CAAC;IAC1C,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,YAAY,CAAC,CAAC;IAExD,OAAO;QACL,OAAO;QACP,SAAS;QACT,YAAY;QACZ,gBAAgB;QAChB,SAAS;KACV,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAA2B,EAC3B,OAGC;IAED,4EAA4E;IAC5E,4EAA4E;IAC5E,kDAAkD;IAClD,MAAM,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAA2B,EAC3B,OAA0B;IAE1B,MAAM,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,OAA2B,EAC3B,OAA0B;IAE1B,MAAM,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AACzC,CAAC;AAsBD,KAAK,UAAU,IAAI,CACjB,OAA2B,EAC3B,MAAmB,EACnB,OAA0B;IAE1B,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QACvB,IAAI,yBAAyB,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/C,mBAAmB,CAAC,OAAO,CAAC,OAAO,EAAE;gBACnC,IAAI,EAAE,KAAK;gBACX,MAAM,EAAE,mEAAmE;gBAC3E,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,MAAM;gBACN,UAAU,EAAE,OAAO,CAAC,SAAS;gBAC7B,OAAO;aACR,CAAC,CAAC;QACL,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IAEpC,IAAI,CAAC;QACH,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC7C,eAAe,CAAC,OAAO,CAAC,gBAAgB,CAAC;YACzC,mBAAmB,CAAC,OAAO,CAAC,gBAAgB,CAAC;SAC9C,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAmE;YAC/E,UAAU,EAAE,OAAO,CAAC,SAAS;YAC7B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,MAAM;YACN,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;YAC5D,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;YAC3E,GAAG,CAAC,OAAO,CAAC,oBAAoB,KAAK,SAAS,IAAI;gBAChD,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;aACnD,CAAC;YACF,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI;gBAC/D,aAAa,EAAE,OAAO,CAAC,aAAa;aACrC,CAAC;YACF,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;YAC/D,KAAK,EAAE,UAAU;YACjB,aAAa,EAAE,OAAO,CAAC,YAAY;YACnC,GAAG,CAAC,UAAU,IAAI,EAAE,UAAU,EAAE,CAAC;YACjC,GAAG,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,CAAC;YACzB,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI;gBACtE,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,CAAC;SACH,CAAC;QAEF,MAAM,cAAc,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;QACjD,MAAM,MAAM,GACV,cAAc,CAAC,MAAM,GAAG,CAAC;YACvB,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC5B,GAAG,QAAQ;gBACX,UAAU,EAAE,IAAI;gBAChB,UAAU,EAAE,WAAW,CAAC,IAAI,CAAC;gBAC7B,QAAQ,EAAE,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;aAC5D,CAAC,CAAC;YACL,CAAC,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;QAExB,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE;YAC7C,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,MAAM;YACN,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,UAAU,EAAE,OAAO,CAAC,SAAS;YAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;QAEH,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,CAAC,KAAK,CAAC,mCAAmC,MAAM,MAAM,OAAO,EAAE,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,SAA8B,EAAE,IAAoB;IACzE,MAAM,GAAG,GAAG,GAAG,SAAS,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;IAClD,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;QAClC,YAAY,EAAE,eAAe,SAAS,CAAC,UAAU,EAAE;QACnD,eAAe,EAAE,eAAe,SAAS,CAAC,UAAU,EAAE;QACtD,kBAAkB,EAAE,aAAa;QACjC,MAAM,EAAE,SAAS,CAAC,YAAY;KAC/B,CAAC;IACF,IAAI,IAAI,CAAC,UAAU;QAAE,OAAO,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;IACvE,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3D,IAAI,IAAI,CAAC,OAAO;QAAE,OAAO,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;IAE9D,IAAI,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5C,MAAM,YAAY,GAAG;YACnB,GAAG;YACH,OAAO,EAAE,sBAAsB,CAAC,OAAO,CAAC;YACxC,IAAI;SACL,CAAC;QACF,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACnD,MAAM,CAAC,KAAK,CACV,iDAAiD,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CACjH,CAAC;YACF,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAoB,CAAC;QAC1E,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE;YAC5C,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,CAAC,KAAK,CAAC,qCAAqC,OAAO,EAAE,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,OAA+B;IAC7D,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;QAC5C,GAAG;QACH,GAAG,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK;KACtD,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,OAAqB;IACtD,OAAO,OAAO,KAAK,KAAK,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,QAAQ,CAAC;AAC3E,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAqB,EAAE,OAAgC;IAClF,MAAM,CAAC,KAAK,CAAC,oBAAoB,OAAO,eAAe,EAAE,OAAO,CAAC,CAAC;AACpE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,OAAO,IAAI;SACR,WAAW,EAAE;SACb,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;SAC1B,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,cAAc,CAAC,MAA0B,EAAE,IAAY;IAC9D,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,YAAoB;IACnD,IAAI,MAA4B,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,4DAA4D,EAAE,KAAK,CAAC,CAAC;QAClF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,OAAO,CAAC;IACnD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,CAAC,KAAK,CAAC,6DAA6D,CAAC,CAAC;QAC5E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,YAAY,GAAG,EAAE,CAAC;IACtB,IAAI,MAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,qCAAqC,CAAC,CAAC;QAC3E,MAAM,GAAG,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAE3D,IAAI,WAAW,EAAE,OAAO,EAAE,CAAC;YACzB,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC;iBAC/C,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC;iBACxC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC;QACD,oDAAoD;QACpD,wEAAwE;QACxE,mEAAmE;QACnE,2DAA2D;QAC3D,MAAM,GAAG,WAAW,EAAE,MAAM,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,oDAAoD,EAAE,KAAK,CAAC,CAAC;IAC5E,CAAC;IAED,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAC3E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,0CAA0C,CAAC,CAAC;YACnF,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,+DAA+D,EAAE,KAAK,CAAC,CAAC;YACrF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,uCAAuC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAClE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;AAC5D,CAAC;AAED,SAAS,kBAAkB;IACzB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzC,oEAAoE;QACpE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAyB,CAAC;QAC/E,OAAO,GAAG,CAAC,OAAO,IAAI,SAAS,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,SAAS,CAAC;IACtD,CAAC;AACH,CAAC"}

package/dist/cli/commands/skills/lib/skills-search-client.d.ts

@@ -0,0 +1,36 @@
+export interface SkillSearchResult {
+    name: string;
+    slug: string;
+    source: string;
+    installs?: number;
+}
+export interface SearchSection {
+    available: boolean;
+    results: SkillSearchResult[];
+}
+/**
+ * Pre-resolved internal endpoint plus the SSO/identification headers
+ * that the internal HTTP call needs. `null` when no internal URL is
+ * configured (env var unset and `skillsSearchUrl` empty).
+ */
+export interface InternalSearchContext {
+    url: string;
+    headers: Record<string, string>;
+}
+export declare function searchPublic(query: string, limit: number): Promise<SearchSection>;
+/**
+ * Search the internal CodeMie catalog.
+ *
+ * If `context` is supplied, no `ConfigLoader.load` happens here — the
+ * orchestrator already resolved the URL and headers. Falling back to
+ * `null` keeps the function callable in isolation (e.g. ad-hoc scripts
+ * or future call sites) at the cost of one config read.
+ */
+export declare function searchInternal(query: string, limit: number, context?: InternalSearchContext | null): Promise<SearchSection>;
+/**
+ * Resolve the internal endpoint URL and SSO/identification headers in a
+ * single config load. Returns `null` when no URL is configured (env var
+ * unset and `skillsSearchUrl` profile field empty).
+ */
+export declare function resolveInternalContext(): Promise<InternalSearchContext | null>;
+//# sourceMappingURL=skills-search-client.d.ts.map

package/dist/cli/commands/skills/lib/skills-search-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills-search-client.d.ts","sourceRoot":"","sources":["../../../../../src/cli/commands/skills/lib/skills-search-client.ts"],"names":[],"mappings":"AA8BA,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,iBAAiB,EAAE,CAAC;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AAaD,wBAAsB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAGvF;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAClC,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,qBAAqB,GAAG,IAAI,GACrC,OAAO,CAAC,aAAa,CAAC,CASxB;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAuBpF"}

package/dist/cli/commands/skills/lib/skills-search-client.js

@@ -0,0 +1,147 @@
+/**
+ * HTTP search clients for `codemie skills find`.
+ *
+ * Two sources, both behind the same shape (`SearchSection`):
+ *
+ * - Internal (EPAM catalog): URL resolved from
+ *   `CODEMIE_SKILLS_SEARCH_URL` env var, then `skillsSearchUrl` profile
+ *   field. SSO cookies are attached so the future internal API can
+ *   gate on identity. When the URL is unresolved we return
+ *   `{ available: false, results: [] }` immediately (no HTTP call) so
+ *   the friendly placeholder renders.
+ * - Public (skills.sh): fixed `https://skills.sh/api/search`. No auth.
+ *
+ * Both functions are designed to never throw. Any error path returns
+ * `{ available: false, results: [] }` and logs at debug level so that
+ * one source going down never breaks the other.
+ *
+ * `resolveInternalContext` is exposed so the orchestrator can decide
+ * once whether the internal section is configured (used both as a
+ * "render placeholder vs no-results" hint and to short-circuit the
+ * HTTP call) without paying the cost of a second `ConfigLoader.load`.
+ */
+import { ConfigLoader } from '../../../../utils/config.js';
+import { logger } from '../../../../utils/logger.js';
+import { stripControlChars } from './sanitize.js';
+const PUBLIC_API_URL = 'https://skills.sh/api/search';
+const INTERNAL_ENV_VAR = 'CODEMIE_SKILLS_SEARCH_URL';
+const REQUEST_TIMEOUT_MS = 5_000;
+export async function searchPublic(query, limit) {
+    const url = `${PUBLIC_API_URL}?q=${encodeURIComponent(query)}&limit=${limit}`;
+    return fetchSearchResults(url, {});
+}
+/**
+ * Search the internal CodeMie catalog.
+ *
+ * If `context` is supplied, no `ConfigLoader.load` happens here — the
+ * orchestrator already resolved the URL and headers. Falling back to
+ * `null` keeps the function callable in isolation (e.g. ad-hoc scripts
+ * or future call sites) at the cost of one config read.
+ */
+export async function searchInternal(query, limit, context) {
+    const ctx = context === undefined ? await resolveInternalContext() : context;
+    if (!ctx) {
+        logger.debug('[skills] No internal search URL configured; rendering placeholder');
+        return { available: false, results: [] };
+    }
+    const url = appendQuery(ctx.url, query, limit);
+    return fetchSearchResults(url, ctx.headers);
+}
+/**
+ * Resolve the internal endpoint URL and SSO/identification headers in a
+ * single config load. Returns `null` when no URL is configured (env var
+ * unset and `skillsSearchUrl` profile field empty).
+ */
+export async function resolveInternalContext() {
+    const envOverride = process.env[INTERNAL_ENV_VAR];
+    if (envOverride && envOverride.trim().length > 0) {
+        return {
+            url: envOverride.trim(),
+            headers: await buildInternalHeaders(),
+        };
+    }
+    try {
+        const config = await ConfigLoader.load();
+        const fromConfig = config.skillsSearchUrl;
+        if (!fromConfig || fromConfig.trim().length === 0) {
+            return null;
+        }
+        return {
+            url: fromConfig.trim(),
+            headers: await buildInternalHeaders(config.codeMieUrl || config.baseUrl),
+        };
+    }
+    catch (error) {
+        logger.debug('[skills] Failed to resolve internal search context', error);
+        return null;
+    }
+}
+async function buildInternalHeaders(ssoUrl) {
+    const headers = {
+        Accept: 'application/json',
+        'X-CodeMie-Client': 'codemie-cli',
+    };
+    let resolvedSsoUrl = ssoUrl;
+    if (!resolvedSsoUrl) {
+        try {
+            const config = await ConfigLoader.load();
+            resolvedSsoUrl = config.codeMieUrl || config.baseUrl;
+        }
+        catch {
+            // fall through; we just won't have cookies
+        }
+    }
+    if (!resolvedSsoUrl)
+        return headers;
+    try {
+        const { CodeMieSSO } = await import('../../../../providers/plugins/sso/sso.auth.js');
+        const sso = new CodeMieSSO();
+        const credentials = await sso.getStoredCredentials(resolvedSsoUrl);
+        if (credentials?.cookies) {
+            const cookieHeader = Object.entries(credentials.cookies)
+                .map(([key, value]) => `${key}=${value}`)
+                .join('; ');
+            if (cookieHeader) {
+                headers.Cookie = cookieHeader;
+            }
+        }
+    }
+    catch (error) {
+        logger.debug('[skills] Failed to attach SSO cookies for internal search', error);
+    }
+    return headers;
+}
+function appendQuery(baseUrl, query, limit) {
+    const sep = baseUrl.includes('?') ? '&' : '?';
+    return `${baseUrl}${sep}q=${encodeURIComponent(query)}&limit=${limit}`;
+}
+async function fetchSearchResults(url, headers) {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), REQUEST_TIMEOUT_MS);
+    try {
+        const response = await fetch(url, { headers, signal: controller.signal });
+        if (!response.ok) {
+            logger.debug(`[skills] Search request returned HTTP ${response.status} ${response.statusText}: ${url}`);
+            return { available: false, results: [] };
+        }
+        const data = (await response.json().catch(() => ({})));
+        const skills = Array.isArray(data.skills) ? data.skills : [];
+        const results = skills
+            .map((raw) => ({
+            name: stripControlChars(raw.name ?? ''),
+            slug: stripControlChars(raw.id ?? ''),
+            source: stripControlChars(raw.source ?? ''),
+            installs: typeof raw.installs === 'number' ? raw.installs : undefined,
+        }))
+            .filter((entry) => entry.slug.length > 0);
+        return { available: true, results };
+    }
+    catch (error) {
+        logger.debug(`[skills] Search request failed for ${url}`, error);
+        return { available: false, results: [] };
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+//# sourceMappingURL=skills-search-client.js.map

package/dist/cli/commands/skills/lib/skills-search-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills-search-client.js","sourceRoot":"","sources":["../../../../../src/cli/commands/skills/lib/skills-search-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAElD,MAAM,cAAc,GAAG,8BAA8B,CAAC;AACtD,MAAM,gBAAgB,GAAG,2BAA2B,CAAC;AACrD,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAmCjC,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAa,EAAE,KAAa;IAC7D,MAAM,GAAG,GAAG,GAAG,cAAc,MAAM,kBAAkB,CAAC,KAAK,CAAC,UAAU,KAAK,EAAE,CAAC;IAC9E,OAAO,kBAAkB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AACrC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAa,EACb,KAAa,EACb,OAAsC;IAEtC,MAAM,GAAG,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,sBAAsB,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;IAC7E,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,CAAC,KAAK,CAAC,mEAAmE,CAAC,CAAC;QAClF,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC3C,CAAC;IAED,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/C,OAAO,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAC1C,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAClD,IAAI,WAAW,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjD,OAAO;YACL,GAAG,EAAE,WAAW,CAAC,IAAI,EAAE;YACvB,OAAO,EAAE,MAAM,oBAAoB,EAAE;SACtC,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;QACzC,MAAM,UAAU,GAAG,MAAM,CAAC,eAAe,CAAC;QAC1C,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO;YACL,GAAG,EAAE,UAAU,CAAC,IAAI,EAAE;YACtB,OAAO,EAAE,MAAM,oBAAoB,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,OAAO,CAAC;SACzE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,oDAAoD,EAAE,KAAK,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,MAAe;IACjD,MAAM,OAAO,GAA2B;QACtC,MAAM,EAAE,kBAAkB;QAC1B,kBAAkB,EAAE,aAAa;KAClC,CAAC;IAEF,IAAI,cAAc,GAAG,MAAM,CAAC;IAC5B,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;YACzC,cAAc,GAAG,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,OAAO,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,2CAA2C;QAC7C,CAAC;IACH,CAAC;IACD,IAAI,CAAC,cAAc;QAAE,OAAO,OAAO,CAAC;IAEpC,IAAI,CAAC;QACH,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,qCAAqC,CAAC,CAAC;QAC3E,MAAM,GAAG,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC;QACnE,IAAI,WAAW,EAAE,OAAO,EAAE,CAAC;YACzB,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC;iBACrD,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC;iBACxC,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,IAAI,YAAY,EAAE,CAAC;gBACjB,OAAO,CAAC,MAAM,GAAG,YAAY,CAAC;YAChC,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,2DAA2D,EAAE,KAAK,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,WAAW,CAAC,OAAe,EAAE,KAAa,EAAE,KAAa;IAChE,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAC9C,OAAO,GAAG,OAAO,GAAG,GAAG,KAAK,kBAAkB,CAAC,KAAK,CAAC,UAAU,KAAK,EAAE,CAAC;AACzE,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,GAAW,EACX,OAA+B;IAE/B,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,kBAAkB,CAAC,CAAC;IACvE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,CAAC,KAAK,CACV,yCAAyC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,KAAK,GAAG,EAAE,CAC1F,CAAC;YACF,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAC3C,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAqB,CAAC;QAC3E,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,MAAM,OAAO,GAAwB,MAAM;aACxC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACb,IAAI,EAAE,iBAAiB,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;YACvC,IAAI,EAAE,iBAAiB,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;YACrC,MAAM,EAAE,iBAAiB,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;YAC3C,QAAQ,EAAE,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;SACtE,CAAC,CAAC;aACF,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAE5C,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,sCAAsC,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;QACjE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC3C,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC"}

package/dist/cli/commands/skills/lib/skills-sh-telemetry.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Parses structured payloads captured from upstream `skills` telemetry.
+ *
+ * The egress guard blocks the upstream network request but writes the query
+ * payload to stderr with this marker. This gives the wrapper the selected
+ * skill names from interactive upstream flows without parsing human output.
+ */
+export declare const SKILLS_SH_TELEMETRY_MARKER = "CODEMIE_SKILLS_SH_TELEMETRY";
+export declare function parseSkillNamesFromSkillsTelemetry(stderr: string, event: string): string[] | undefined;
+//# sourceMappingURL=skills-sh-telemetry.d.ts.map

package/dist/cli/commands/skills/lib/skills-sh-telemetry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills-sh-telemetry.d.ts","sourceRoot":"","sources":["../../../../../src/cli/commands/skills/lib/skills-sh-telemetry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,eAAO,MAAM,0BAA0B,gCAAgC,CAAC;AAOxE,wBAAgB,kCAAkC,CAChD,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GACZ,MAAM,EAAE,GAAG,SAAS,CAsBtB"}

package/dist/cli/commands/skills/lib/skills-sh-telemetry.js

@@ -0,0 +1,33 @@
+/**
+ * Parses structured payloads captured from upstream `skills` telemetry.
+ *
+ * The egress guard blocks the upstream network request but writes the query
+ * payload to stderr with this marker. This gives the wrapper the selected
+ * skill names from interactive upstream flows without parsing human output.
+ */
+import { logger } from '../../../../utils/logger.js';
+import { capList } from './sanitize.js';
+export const SKILLS_SH_TELEMETRY_MARKER = 'CODEMIE_SKILLS_SH_TELEMETRY';
+export function parseSkillNamesFromSkillsTelemetry(stderr, event) {
+    const skillNames = [];
+    const lines = stderr
+        .split(/\r?\n/)
+        .filter((line) => line.startsWith(`${SKILLS_SH_TELEMETRY_MARKER} `));
+    for (const line of lines) {
+        const rawPayload = line.slice(SKILLS_SH_TELEMETRY_MARKER.length + 1);
+        try {
+            const payload = JSON.parse(rawPayload);
+            if (payload.event !== event || !payload.skills) {
+                continue;
+            }
+            skillNames.push(...payload.skills.split(',').map((skill) => skill.trim()));
+        }
+        catch (error) {
+            logger.debug('[skills] Failed to parse skills.sh telemetry payload', {
+                error: error instanceof Error ? error.message : String(error),
+            });
+        }
+    }
+    return capList(skillNames);
+}
+//# sourceMappingURL=skills-sh-telemetry.js.map

package/dist/cli/commands/skills/lib/skills-sh-telemetry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills-sh-telemetry.js","sourceRoot":"","sources":["../../../../../src/cli/commands/skills/lib/skills-sh-telemetry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC,MAAM,CAAC,MAAM,0BAA0B,GAAG,6BAA6B,CAAC;AAOxE,MAAM,UAAU,kCAAkC,CAChD,MAAc,EACd,KAAa;IAEb,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,KAAK,GAAG,MAAM;SACjB,KAAK,CAAC,OAAO,CAAC;SACd,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,0BAA0B,GAAG,CAAC,CAAC,CAAC;IAEvE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrE,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAA2B,CAAC;YACjE,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;gBAC/C,SAAS;YACX,CAAC;YACD,UAAU,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC7E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,sDAAsD,EAAE;gBACnE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC,UAAU,CAAC,CAAC;AAC7B,CAAC"}

package/dist/cli/commands/skills/list.d.ts

@@ -0,0 +1,13 @@
+/**
+ * `codemie skills list` — pass-through wrapper around the upstream
+ * `skills list` subcommand. Auth-gated only; no CodeMie lifecycle metrics.
+ * List is a read-only inspection command and was intentionally excluded from
+ * backend skill lifecycle metrics to avoid low-value noise.
+ *
+ * `--json` is forwarded to the upstream CLI so machine-readable output
+ * stays under upstream's control. The wrapper never parses output to
+ * extract installed skill metadata.
+ */
+import { Command } from 'commander';
+export declare function createListCommand(): Command;
+//# sourceMappingURL=list.d.ts.map

package/dist/cli/commands/skills/list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/skills/list.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAWpC,wBAAgB,iBAAiB,IAAI,OAAO,CAyC3C"}

package/dist/cli/commands/skills/list.js

@@ -0,0 +1,55 @@
+/**
+ * `codemie skills list` — pass-through wrapper around the upstream
+ * `skills list` subcommand. Auth-gated only; no CodeMie lifecycle metrics.
+ * List is a read-only inspection command and was intentionally excluded from
+ * backend skill lifecycle metrics to avoid low-value noise.
+ *
+ * `--json` is forwarded to the upstream CLI so machine-readable output
+ * stays under upstream's control. The wrapper never parses output to
+ * extract installed skill metadata.
+ */
+import { Command } from 'commander';
+import { logger } from '../../../utils/logger.js';
+import { runSkillsCli } from './lib/run-skills-cli.js';
+import { requireAuthenticatedSession } from './lib/require-auth.js';
+export function createListCommand() {
+    return new Command('list')
+        .description('List installed skills via the upstream skills CLI')
+        .option('-g, --global', 'list user-scoped skills')
+        .option('-a, --agent <agent>', 'filter by target agent')
+        .option('--json', 'emit JSON output (forwarded to upstream)')
+        .action(async (options) => {
+        await requireAuthenticatedSession();
+        const cwd = process.cwd();
+        const args = ['list'];
+        if (options.global)
+            args.push('--global');
+        if (options.agent)
+            args.push('--agent', options.agent);
+        if (options.json)
+            args.push('--json');
+        // List is read-only; capture output instead of inheriting stdio so the
+        // upstream JSON mode (when requested) can be piped cleanly.
+        const interactive = !options.json;
+        try {
+            const result = await runSkillsCli(args, { cwd, interactive });
+            // In non-interactive (--json) mode the child output was captured but
+            // not echoed, so forward it to the caller verbatim.
+            if (!interactive) {
+                if (result.stdout)
+                    process.stdout.write(`${result.stdout}\n`);
+                if (result.stderr)
+                    process.stderr.write(`${result.stderr}\n`);
+            }
+            if (result.code === 0) {
+                return;
+            }
+            process.exit(result.code || 1);
+        }
+        catch (error) {
+            logger.error(`[skills] list failed: ${error instanceof Error ? error.message : String(error)}`);
+            process.exit(1);
+        }
+    });
+}
+//# sourceMappingURL=list.js.map

package/dist/cli/commands/skills/list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.js","sourceRoot":"","sources":["../../../../src/cli/commands/skills/list.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AAQpE,MAAM,UAAU,iBAAiB;IAC/B,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC;SACvB,WAAW,CAAC,mDAAmD,CAAC;SAChE,MAAM,CAAC,cAAc,EAAE,yBAAyB,CAAC;SACjD,MAAM,CAAC,qBAAqB,EAAE,wBAAwB,CAAC;SACvD,MAAM,CAAC,QAAQ,EAAE,0CAA0C,CAAC;SAC5D,MAAM,CAAC,KAAK,EAAE,OAAoB,EAAE,EAAE;QACrC,MAAM,2BAA2B,EAAE,CAAC;QAEpC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAE1B,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QACtB,IAAI,OAAO,CAAC,MAAM;YAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1C,IAAI,OAAO,CAAC,KAAK;YAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACvD,IAAI,OAAO,CAAC,IAAI;YAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEtC,uEAAuE;QACvE,4DAA4D;QAC5D,MAAM,WAAW,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;QAElC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;YAE9D,qEAAqE;YACrE,oDAAoD;YACpD,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,IAAI,MAAM,CAAC,MAAM;oBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;gBAC9D,IAAI,MAAM,CAAC,MAAM;oBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;YAChE,CAAC;YAED,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACtB,OAAO;YACT,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CACV,yBAAyB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAClF,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/cli/commands/skills/remove.d.ts

@@ -0,0 +1,11 @@
+/**
+ * `codemie skills remove [skills...]` — pass-through wrapper around the
+ * upstream `skills remove` subcommand. Auth-gated and lifecycle-metricked.
+ *
+ * `target_agents` is emitted only when the user explicitly passed `--agent`
+ * — the wrapper never auto-detects on remove because removal is destructive
+ * and the user should be specific.
+ */
+import { Command } from 'commander';
+export declare function createRemoveCommand(): Command;
+//# sourceMappingURL=remove.d.ts.map

package/dist/cli/commands/skills/remove.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remove.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/skills/remove.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAsBpC,wBAAgB,mBAAmB,IAAI,OAAO,CAgF7C"}