@controllerai/cli 0.2.21 → 0.2.23

package/skills/controllerai-template-setup/SKILL.md

@@ -0,0 +1,132 @@
+---
+name: controllerai-template-setup
+description: Complete an assisted Controller AI agent-template setup from the injected setup brief. Use when the system prompt contains a `## Template Setup` section with copied workflows, required connections, expected workflow tools, and a brief.
+---
+<!-- generated from .claude/skills by cli/scripts/render-skills.mjs; edit the source -->
+
+# Assisted template setup
+
+## Use this when
+
+Use this skill first whenever the system prompt contains `## Template Setup`. That block is the authoritative inventory for one copied agent and its workflows; the brief decides which customer-specific values to collect, while the completion check decides whether every workflow is live and every expected workflow tool is attached.
+
+Load `controllerai-node-config` for props, options, connections and node readiness, `controllerai-runs` for development checks, `controllerai-workflows` for validation and publication, and `controllerai-agents` for workflow-tool attachment. The setup procedure below owns their order.
+
+## How it works
+
+Read the entire injected block before acting. Its exact sections are `## Template Setup`, `### Copied Workflows`, `### Required Connections`, `### Expected Workflow Tools`, `### Brief`, and `### Completion Rule`; the opening fields are `Template`, `Template description`, and `Agent`. Keep every agent ID, copied workflow ID, source workflow-template ID, node ID, `nodeSlug`, `flow ID`, tool description, and `requiresConfirmation` value paired with its displayed name. Never rediscover one of these targets by a similar name.
+
+The copied workflows are development drafts. Setup is complete only after every workflow under `### Copied Workflows` has been configured, checked, and published, and every binding under `### Expected Workflow Tools` is attached to the copied agent. Publishing the workflows does not publish the agent.
+
+## Rules
+
+1. **Explain before asking.** Before any connection handoff or brief question, explain what the template will do in exactly two plain-language sentences, using the template description and brief without exposing IDs, slugs, props, or commands. The kickoff already approves the template's shape, so do not insert the generic new-build planning round.
+2. **Connections come first and are never optional.** Do not ask a brief decision while a connection required by the current graph is missing. A brief may offer an optional branch, but not an optional connection: if the user declines that branch, remove or disable the branch as the brief directs so the declined integration is no longer required.
+3. **Ask one brief decision at a time.** Read the target's current props and any option list before framing that decision, ask in user-facing labels, end the turn, and wait. Do not bundle the next decision into the same message.
+4. **Configure only what the brief asks for.** Do not infer channels, sheets, calendars, schedules, recipients, filters, defaults, or optional behavior from names or sample data. Preserve copied configuration that the brief does not direct you to change.
+5. **Never publish a placeholder.** Values such as `TODO`, example IDs, angle-bracket placeholders, setup notes, unset required props, and a declined branch that still needs its connection are blockers. Fix or remove the affected path before publication.
+6. **Use development evidence.** Check the smallest relevant node or flow after configuration, then the containing flow when an isolated node cannot prove wiring or expressions. A successful status without the intended output is not evidence.
+7. **Treat completion failure as the repair list.** A failed completion returns `Agent template setup is incomplete:` followed by one bullet per problem. Fix exactly those bullets and nothing else. Do not redesign the template, add speculative tools, or mark success around a failed completion command.
+
+## Procedure
+
+### Establish the setup
+
+Run `cai template-setup status --json` when starting or resuming. Continue only for the active setup bound to this thread; a missing, failed, or abandoned state is a stop condition, and a completed state should be reported without repeating setup. Read the block inventory, then give the required two-sentence explanation before asking the user to do or choose anything.
+
+### Resolve every connection
+
+For each unique `nodeSlug` in `### Required Connections`, inspect active accounts:
+
+```bash
+cai connection list --integration <nodeSlug> --json
+```
+
+If none exists, request the connection:
+
+```bash
+cai connection request <nodeSlug> --json
+```
+
+Tell the user in one plain sentence which service to connect and why, then stop and wait. If several accounts exist and the brief does not identify one, ask which displayed account to use and wait. After the user responds, verify with a fresh list; a connect card or a promise to connect is not authorization evidence.
+
+```bash
+cai connection list --integration <nodeSlug> --json
+```
+
+Bind the selected active connection to every matching node, using its copied workflow ID explicitly, and read readiness back:
+
+```bash
+cai node set-connection <nodeId> --connection <connectionId> --workflow <workflowId> --json
+cai node status <nodeId> --workflow <workflowId> --json
+```
+
+Do not move to brief decisions until all connections still required by the graph are bound. When the user declines an optional branch, make the brief-directed removal or disablement first, then confirm the remaining nodes no longer require that integration.
+
+### Resolve brief decisions
+
+Take the decisions in brief order. Before each question, inspect the exact target:
+
+```bash
+cai node props <nodeId> --workflow <workflowId> --json
+cai node options <nodeId> --prop <exactName> --workflow <workflowId> --json
+```
+
+Fetch option lists only after the connection and upstream selectors they depend on exist. If a selector reveals later props, set it, read props again, and only then prepare the next question. Present the returned labels, retain their exact values, and after the user's answer make one write and read it back:
+
+```bash
+cai node set <nodeId> --prop <exactName> --value '<returned-value>' --label '<returned-label>' --workflow <workflowId> --json
+cai node props <nodeId> --workflow <workflowId> --json
+cai node status <nodeId> --workflow <workflowId> --json
+```
+
+For a free-form value, respect the prop's type and ask for it in normal assistant text. If the brief does not call for a decision, do not create one.
+
+### Check and publish every workflow
+
+Use safe representative inputs on development and inspect the actual output:
+
+```bash
+cai run node <nodeId> --inputs '<json>' --workflow <workflowId> --json
+cai run flow <flowId> --inputs '<json>' --workflow <workflowId> --json
+```
+
+Choose the node or flow that proves the configured decision; run the containing flow where wiring matters. Resolve every placeholder and readiness blocker, then publish each copied workflow listed in the block, including one with no expected tool:
+
+```bash
+cai workflow publish --workflow <workflowId> --json
+cai workflow status --workflow <workflowId> --json
+```
+
+### Attach the expected tools and complete
+
+For every line under `### Expected Workflow Tools`, attach that exact `(workflow ID, flow ID)` pair to the block's agent ID. Preserve the supplied description; omit `--description` only when it is `(none)`. Include `--require-confirmation` exactly when `requiresConfirmation` is `true`, and omit it when false.
+
+```bash
+cai agent add-workflow <agentId> --workflow-id <workflowId> --flow <flowId> --description '<description>' --require-confirmation --json
+cai agent tools <agentId> --json
+```
+
+Do not attach an extra flow and do not publish the agent. Once every expected pair reads back, run:
+
+```bash
+cai template-setup complete --json
+```
+
+Success requires the returned setup status to be `completed`. If it fails, the error lists every remaining problem as a bullet. Each bullet maps to one repair:
+
+- `<workflow> has unpublished changes`: the development state differs from the live release; publish that workflow again.
+- `<node> in <workflow> has no connected account`: bind an active connection to that node, then publish again.
+- `<workflow / flowId> is not present in the published workflow`: the expected flow is missing from the live release; restore it and publish.
+- `<workflow / flowId> is missing its workflow tool binding`: attach that exact pair to the agent.
+- `<workflow / flowId> must require confirmation`: update the tool so confirmation is required.
+
+Verify each repair with the same read-back commands, then run completion again.
+
+## Verify
+
+Every connection still required by the final graph is active and bound; every brief decision reads back with the user's value; development evidence proves the configured path; each copied workflow has a live release; the agent tool list contains every expected workflow/flow pair with the supplied description and confirmation policy; and `cai template-setup complete` returns `completed`.
+
+## Report
+
+Tell the user what the configured template now does, the choices applied, what the development checks proved, and that its workflows are live and its tools attached. Name any untested external effect or remaining blocker plainly; never call a setup complete unless the completion command did.

package/skills/controllerai-template-setup/agents/openai.yaml

@@ -0,0 +1,4 @@
+interface:
+  display_name: "Controller AI Template Setup"
+  short_description: "Finish guided agent-template setup"
+  default_prompt: "Use $controllerai-template-setup to finish the assisted template setup in this builder thread, following its brief one decision at a time."

package/skills/controllerai-workflows/references/command-map.md

@@ -50,6 +50,7 @@ cai trigger list|get|create|search|replay|test-events
 cai schema list|create|update|delete
 cai data collections|query|create|update|delete|import
 cai agent create|get|list|update|add-workflow|add-action|add-file|remove-tool|publish|conversation
+cai template-setup status|complete
 ```
 
 Each family has its own skill; the map above covers CLI-to-MCP names for all of them.

package/skills/manifest.json

@@ -1,29 +1,29 @@
 {
   "schemaVersion": 1,
-  "skillSetVersion": "2026.09.07.1",
+  "skillSetVersion": "2026.09.15.3",
   "minCliVersion": "0.2.0",
-  "latestCliVersion": "0.2.21",
+  "latestCliVersion": "0.2.23",
   "skills": [
     {
       "name": "controllerai-start",
       "files": [
         {
           "path": "controllerai-start/SKILL.md",
-          "url": "https://getcontroller.ai/skills/2026.09.07.1/controllerai-start/SKILL.md",
-          "sha256": "0d79439019310289d9f1a19ceb153756f6cec6d6cf80e46c9da1caf33cc6b183",
-          "size": 11209
+          "url": "https://getcontroller.ai/skills/2026.09.15.3/controllerai-start/SKILL.md",
+          "sha256": "5034c98ea02fe27fdb492a768c025deee7724a77e053e9d7ab204ce72b34cb08",
+          "size": 11414
         },
         {
           "path": "controllerai-start/agents/openai.yaml",
-          "url": "https://getcontroller.ai/skills/2026.09.07.1/controllerai-start/agents/openai.yaml",
+          "url": "https://getcontroller.ai/skills/2026.09.15.3/controllerai-start/agents/openai.yaml",
           "sha256": "3240c24df8ba5ebfb67bc3e9dbce97f4a78384c352123210197a2dbf27c51150",
           "size": 226
         },
         {
           "path": "controllerai-start/references/mcp-tool-map.md",
-          "url": "https://getcontroller.ai/skills/2026.09.07.1/controllerai-start/references/mcp-tool-map.md",
-          "sha256": "f08325ad01ada76a2fac75c0969367167441931638dd9d91c87cce94cbf9620b",
-          "size": 26595
+          "url": "https://getcontroller.ai/skills/2026.09.15.3/controllerai-start/references/mcp-tool-map.md",
+          "sha256": "d293310ed5fd7c7495579f717df0fa9ea59f27d5e494ca6bfb805f9975186ce9",
+          "size": 26919
         }
       ]
     },
@@ -32,21 +32,21 @@
       "files": [
         {
           "path": "controllerai-workflows/SKILL.md",
-          "url": "https://getcontroller.ai/skills/2026.09.07.1/controllerai-workflows/SKILL.md",
+          "url": "https://getcontroller.ai/skills/2026.09.15.3/controllerai-workflows/SKILL.md",
           "sha256": "a2419265809b6f822ed22be4cfbfc1c56107e7afffffc41a0f527fd93018dc8a",
           "size": 9472
         },
         {
           "path": "controllerai-workflows/agents/openai.yaml",
-          "url": "https://getcontroller.ai/skills/2026.09.07.1/controllerai-workflows/agents/openai.yaml",
+          "url": "https://getcontroller.ai/skills/2026.09.15.3/controllerai-workflows/agents/openai.yaml",
           "sha256": "6fb00a93a5f83fc2664679eb633ab07b477105472f8790fcf6dbcca913921a84",
           "size": 251
         },
         {
           "path": "controllerai-workflows/references/command-map.md",
-          "url": "https://getcontroller.ai/skills/2026.09.07.1/controllerai-workflows/references/command-map.md",
-          "sha256": "81cc467172c5e431f4d9a9b833e24dfed42392d679f766d4fc6d1ac0722c71e7",
-          "size": 2091
+          "url": "https://getcontroller.ai/skills/2026.09.15.3/controllerai-workflows/references/command-map.md",
+          "sha256": "b99adeb3ff1e9c441805f533191c6b4435007ce8522d7965b4856f90db118e1a",
+          "size": 2126
         }
       ]
     },
@@ -55,19 +55,19 @@
       "files": [
         {
           "path": "controllerai-node-config/SKILL.md",
-          "url": "https://getcontroller.ai/skills/2026.09.07.1/controllerai-node-config/SKILL.md",
+          "url": "https://getcontroller.ai/skills/2026.09.15.3/controllerai-node-config/SKILL.md",
           "sha256": "fb7ad0999e772079d7ce94f25d9fddca9b483b81a11bbaba47d618825d5585fe",
           "size": 11614
         },
         {
           "path": "controllerai-node-config/agents/openai.yaml",
-          "url": "https://getcontroller.ai/skills/2026.09.07.1/controllerai-node-config/agents/openai.yaml",
+          "url": "https://getcontroller.ai/skills/2026.09.15.3/controllerai-node-config/agents/openai.yaml",
           "sha256": "7fbd6f0c1f9ea40c41051d532736a4718895cfa397608a2c716300bcf4256df1",
           "size": 242
         },
         {
           "path": "controllerai-node-config/references/prop-and-readiness.md",
-          "url": "https://getcontroller.ai/skills/2026.09.07.1/controllerai-node-config/references/prop-and-readiness.md",
+          "url": "https://getcontroller.ai/skills/2026.09.15.3/controllerai-node-config/references/prop-and-readiness.md",
           "sha256": "6a1aa046bac6c5f1a68cbe242bdeb584f9a01e2de7248742460064a4d2708f75",
           "size": 5583
         }
@@ -78,19 +78,19 @@
       "files": [
         {
           "path": "controllerai-expressions/SKILL.md",
-          "url": "https://getcontroller.ai/skills/2026.09.07.1/controllerai-expressions/SKILL.md",
+          "url": "https://getcontroller.ai/skills/2026.09.15.3/controllerai-expressions/SKILL.md",
           "sha256": "01240f493ec5bbd1ed562f988d243e3797577eee5ccc9d207f8bc45485b99108",
           "size": 10310
         },
         {
           "path": "controllerai-expressions/agents/openai.yaml",
-          "url": "https://getcontroller.ai/skills/2026.09.07.1/controllerai-expressions/agents/openai.yaml",
+          "url": "https://getcontroller.ai/skills/2026.09.15.3/controllerai-expressions/agents/openai.yaml",
           "sha256": "280d1f4d0a44cb5cfd3e5649e0a123b91b57b1484dcbc3a02ace988233234bc3",
           "size": 249
         },
         {
           "path": "controllerai-expressions/references/dsl-and-recipes.md",
-          "url": "https://getcontroller.ai/skills/2026.09.07.1/controllerai-expressions/references/dsl-and-recipes.md",
+          "url": "https://getcontroller.ai/skills/2026.09.15.3/controllerai-expressions/references/dsl-and-recipes.md",
           "sha256": "efe4a5eba0ea7636387443af0a6cc082a41209404b92c3af5c8a029075db70f6",
           "size": 5197
         }
@@ -101,19 +101,19 @@
       "files": [
         {
           "path": "controllerai-flow-control/SKILL.md",
-          "url": "https://getcontroller.ai/skills/2026.09.07.1/controllerai-flow-control/SKILL.md",
+          "url": "https://getcontroller.ai/skills/2026.09.15.3/controllerai-flow-control/SKILL.md",
           "sha256": "c535a1ff61cc65cca53af083081935dc8672f7ce5d048dbb29334808428feec3",
           "size": 11563
         },
         {
           "path": "controllerai-flow-control/agents/openai.yaml",
-          "url": "https://getcontroller.ai/skills/2026.09.07.1/controllerai-flow-control/agents/openai.yaml",
+          "url": "https://getcontroller.ai/skills/2026.09.15.3/controllerai-flow-control/agents/openai.yaml",
           "sha256": "164adf3b887bf9f67bba9cd210b5b49935c29ea0f52f76325fe5df517d279592",
           "size": 229
         },
         {
           "path": "controllerai-flow-control/references/patterns.md",
-          "url": "https://getcontroller.ai/skills/2026.09.07.1/controllerai-flow-control/references/patterns.md",
+          "url": "https://getcontroller.ai/skills/2026.09.15.3/controllerai-flow-control/references/patterns.md",
           "sha256": "f1a718de837dc541e58914f40b4a89e6e81ba80afac37731e381db73a4712d90",
           "size": 4901
         }
@@ -124,19 +124,19 @@
       "files": [
         {
           "path": "controllerai-runs/SKILL.md",
-          "url": "https://getcontroller.ai/skills/2026.09.07.1/controllerai-runs/SKILL.md",
+          "url": "https://getcontroller.ai/skills/2026.09.15.3/controllerai-runs/SKILL.md",
           "sha256": "5eeda1f95f8c18c12b968d6c2ea9008c2dd99d8953268c4ffd06652f43a91516",
           "size": 9196
         },
         {
           "path": "controllerai-runs/agents/openai.yaml",
-          "url": "https://getcontroller.ai/skills/2026.09.07.1/controllerai-runs/agents/openai.yaml",
+          "url": "https://getcontroller.ai/skills/2026.09.15.3/controllerai-runs/agents/openai.yaml",
           "sha256": "63180f12974e19ce7b714695944608760e4132bfb88947543e52616098a88f5c",
           "size": 234
         },
         {
           "path": "controllerai-runs/references/debugging.md",
-          "url": "https://getcontroller.ai/skills/2026.09.07.1/controllerai-runs/references/debugging.md",
+          "url": "https://getcontroller.ai/skills/2026.09.15.3/controllerai-runs/references/debugging.md",
           "sha256": "341f9e056445bdffdcc67771fd62b28fb2125a661d5d8a5c4fb16bcac57417c0",
           "size": 3127
         }
@@ -147,19 +147,19 @@
       "files": [
         {
           "path": "controllerai-triggers/SKILL.md",
-          "url": "https://getcontroller.ai/skills/2026.09.07.1/controllerai-triggers/SKILL.md",
+          "url": "https://getcontroller.ai/skills/2026.09.15.3/controllerai-triggers/SKILL.md",
           "sha256": "c8a88bb69a0e032f1fd2716e1a2cd0690e62ae0b9bb996bf30643d4bd3b8fab2",
           "size": 11800
         },
         {
           "path": "controllerai-triggers/agents/openai.yaml",
-          "url": "https://getcontroller.ai/skills/2026.09.07.1/controllerai-triggers/agents/openai.yaml",
+          "url": "https://getcontroller.ai/skills/2026.09.15.3/controllerai-triggers/agents/openai.yaml",
           "sha256": "56aa1bd33e54045d88002ade0c420be7bca37ac39433e6eedccef2e22bbd9515",
           "size": 239
         },
         {
           "path": "controllerai-triggers/references/lifecycle.md",
-          "url": "https://getcontroller.ai/skills/2026.09.07.1/controllerai-triggers/references/lifecycle.md",
+          "url": "https://getcontroller.ai/skills/2026.09.15.3/controllerai-triggers/references/lifecycle.md",
           "sha256": "4dce6484b6abaa0eaf4ddbe366e60480180fc5b5aeb7e3c975bbe316b88dc0e5",
           "size": 3340
         }
@@ -170,19 +170,19 @@
       "files": [
         {
           "path": "controllerai-data/SKILL.md",
-          "url": "https://getcontroller.ai/skills/2026.09.07.1/controllerai-data/SKILL.md",
+          "url": "https://getcontroller.ai/skills/2026.09.15.3/controllerai-data/SKILL.md",
           "sha256": "1418b287af30968634c69dbdbd54d22354f5f79f52389e6d1c94a87421c20e78",
           "size": 12059
         },
         {
           "path": "controllerai-data/agents/openai.yaml",
-          "url": "https://getcontroller.ai/skills/2026.09.07.1/controllerai-data/agents/openai.yaml",
+          "url": "https://getcontroller.ai/skills/2026.09.15.3/controllerai-data/agents/openai.yaml",
           "sha256": "5c54b0a714086088213c679fb904a69a599374847f9aa1d6c0756172c2a2f227",
           "size": 219
         },
         {
           "path": "controllerai-data/references/data-rails.md",
-          "url": "https://getcontroller.ai/skills/2026.09.07.1/controllerai-data/references/data-rails.md",
+          "url": "https://getcontroller.ai/skills/2026.09.15.3/controllerai-data/references/data-rails.md",
           "sha256": "0c03f25a099d168b8ae1fe54087ce59d06fcfc8631046927a996a88f0c4f9835",
           "size": 2819
         }
@@ -193,19 +193,19 @@
       "files": [
         {
           "path": "controllerai-ai-nodes/SKILL.md",
-          "url": "https://getcontroller.ai/skills/2026.09.07.1/controllerai-ai-nodes/SKILL.md",
+          "url": "https://getcontroller.ai/skills/2026.09.15.3/controllerai-ai-nodes/SKILL.md",
           "sha256": "4e4bdf53e300adedf5e03f282687d0d20e200baf056cd59bf8df98d7b8b21403",
           "size": 8940
         },
         {
           "path": "controllerai-ai-nodes/agents/openai.yaml",
-          "url": "https://getcontroller.ai/skills/2026.09.07.1/controllerai-ai-nodes/agents/openai.yaml",
+          "url": "https://getcontroller.ai/skills/2026.09.15.3/controllerai-ai-nodes/agents/openai.yaml",
           "sha256": "3ba8b8bb6f0cd4b0d5675ebda0af10bb79dc7a42e394eb98479343c83da92599",
           "size": 256
         },
         {
           "path": "controllerai-ai-nodes/references/selection-and-testing.md",
-          "url": "https://getcontroller.ai/skills/2026.09.07.1/controllerai-ai-nodes/references/selection-and-testing.md",
+          "url": "https://getcontroller.ai/skills/2026.09.15.3/controllerai-ai-nodes/references/selection-and-testing.md",
           "sha256": "66b235b9e81645ab877b31443505c7b07ea3f2e5a357053f266c121415f8cf5c",
           "size": 3111
         }
@@ -216,13 +216,13 @@
       "files": [
         {
           "path": "controllerai-integration-actions/SKILL.md",
-          "url": "https://getcontroller.ai/skills/2026.09.07.1/controllerai-integration-actions/SKILL.md",
-          "sha256": "855556937687acc9dbfc22f65f75e98fb9974838776b5c53414193e19b490b7b",
-          "size": 8764
+          "url": "https://getcontroller.ai/skills/2026.09.15.3/controllerai-integration-actions/SKILL.md",
+          "sha256": "df33bc2c8dadeec05b08f981caf76b2aa2b59fcdaf2b8c9c39fcc0128f175ab5",
+          "size": 10434
         },
         {
           "path": "controllerai-integration-actions/agents/openai.yaml",
-          "url": "https://getcontroller.ai/skills/2026.09.07.1/controllerai-integration-actions/agents/openai.yaml",
+          "url": "https://getcontroller.ai/skills/2026.09.15.3/controllerai-integration-actions/agents/openai.yaml",
           "sha256": "82ee62aa48a644e658c9bb6a78c417dc15eb4f3ec9f4abc9081b6d24d16fe92d",
           "size": 262
         }
@@ -233,23 +233,40 @@
       "files": [
         {
           "path": "controllerai-agents/SKILL.md",
-          "url": "https://getcontroller.ai/skills/2026.09.07.1/controllerai-agents/SKILL.md",
-          "sha256": "5dadcac767c9f2e7a701081d38e1e1d5350fd2cf2f273dd3ee6d5be818371124",
-          "size": 11539
+          "url": "https://getcontroller.ai/skills/2026.09.15.3/controllerai-agents/SKILL.md",
+          "sha256": "391c5f411c1ddde305417a5765c213acfad91fb65cb3ce5710cd247004720912",
+          "size": 12200
         },
         {
           "path": "controllerai-agents/agents/openai.yaml",
-          "url": "https://getcontroller.ai/skills/2026.09.07.1/controllerai-agents/agents/openai.yaml",
+          "url": "https://getcontroller.ai/skills/2026.09.15.3/controllerai-agents/agents/openai.yaml",
           "sha256": "f4684ec904f3ebb051bb48460375756899c3316fbb16304aad5fff3d89692b09",
           "size": 293
         },
         {
           "path": "controllerai-agents/references/instructions-and-versioning.md",
-          "url": "https://getcontroller.ai/skills/2026.09.07.1/controllerai-agents/references/instructions-and-versioning.md",
+          "url": "https://getcontroller.ai/skills/2026.09.15.3/controllerai-agents/references/instructions-and-versioning.md",
           "sha256": "88b059e74aef03ccb12a53815d1090e5449090ff6dfd863b6cef5a12b434cb65",
           "size": 5644
         }
       ]
+    },
+    {
+      "name": "controllerai-template-setup",
+      "files": [
+        {
+          "path": "controllerai-template-setup/SKILL.md",
+          "url": "https://getcontroller.ai/skills/2026.09.15.3/controllerai-template-setup/SKILL.md",
+          "sha256": "6ed665a2b33f8197fb990a30c296a69ab1d0e334bd10998e851508fa99d2d603",
+          "size": 9316
+        },
+        {
+          "path": "controllerai-template-setup/agents/openai.yaml",
+          "url": "https://getcontroller.ai/skills/2026.09.15.3/controllerai-template-setup/agents/openai.yaml",
+          "sha256": "0abb1b4691e3163eb6c2f27404ce3512aabf86d048f0eedbac587415004146e3",
+          "size": 275
+        }
+      ]
     }
   ],
   "surfaces": {

package/skills-mcp/controllerai-agents/SKILL.md

@@ -16,7 +16,7 @@ Direct actions belong to `controllerai-integration-actions`; the workflows behin
 
 ## How it works
 
-**What an agent is.** A person chats with it; it reasons, reads conversation attachments and reference knowledge, calls tools, and creates files for the user. It is the right shape for judgment, conversation and file handling; deterministic business rules, custom workflow data and multi-step processing belong in workflow tools it calls, and one existing app operation is a direct action.
+**What an agent is.** A person chats with it; it reasons, reads conversation attachments and reference knowledge, calls tools, and creates files for the user. It is the right shape for judgment, conversation and file handling; deterministic business rules, custom workflow data and multi-step processing belong in workflow tools it calls, and one catalog-marked operation from a provider integration or native registry service is a direct action. Both direct-action sources follow the same attachment and approval rules; a native action may not need a connection.
 
 **One draft, immutable versions.** Editing changes only the mutable draft, and saving the draft updates the owner-only Test environment at once. Publishing snapshots the display name, instructions, tool identities, descriptions, approval policies and knowledge files into a new immutable version, moves the live pointer, and restamps every existing live conversation to it; that cutover interrupts in-flight answers and expires pending approvals. The runtime model is not part of the snapshot. There is no rollback: a bad version is corrected forward.
 
@@ -32,7 +32,9 @@ Direct actions belong to `controllerai-integration-actions`; the workflows behin
 
 **Three kinds of files.** Conversation attachments belong to one chat. Knowledge is versioned reference material in the draft: text types only (`txt`, `md`, `json`, `csv`, `html`, `xml`), each added once under the name the agent should see. When the user asks for a PDF or another unsupported format, store a supported text type under the plain requested name and say why; a name that still carries the wrong extension is not the same document. Shared runtime files are live workspace state, visible without a publish, and no substitute for an upload. Paths come from returned metadata; runtime mounts can prefix them.
 
-**Live-bound state.** Enabling or disabling is runtime state, independent of publication: disabling pauses live use, while the owner's Test conversations still work. A workflow publish changes every live agent that follows that workflow without an agent publish, and live workflow resolution is cached per session, so an in-flight turn may finish on the prior release. A direct action's connection is a live grant: rebinding redirects it and revocation or detachment blocks it immediately; detachment still needs a later agent publish to remove the tool from the published list.
+**Live-bound state.** Enabling or disabling is runtime state, independent of publication: disabling pauses live use, while the owner's Test conversations still work. A workflow publish changes every live agent that follows that workflow without an agent publish, and live workflow resolution is cached per session, so an in-flight turn may finish on the prior release. When a direct action needs a connection, that connection is a live grant: rebinding redirects it and revocation blocks it immediately. Detachment blocks every direct action immediately and still needs a later agent publish to remove the tool from the published list.
+
+**Slack approvals.** Send approval requests to Slack through `slackRoute`. Routes publish with the agent; Test conversations use the draft, live conversations the published version. The route lists who can answer in `slackRoute.approvers`, defaulting to whoever connected Slack. Chat-in-Slack approvers also count; the app's approval card still works.
 
 **Runtime usage.** Test and live conversations consume the organization's runtime usage and cause the connected providers' side effects; the builder's own subscription pays only for building.
 
@@ -63,8 +65,7 @@ A draft is private and by default enabled on creation, so the user can open it a
 ### Attach tools and knowledge
 
 - `run_flow` — `flowId`, `confirmLive`, `inputs`, `target`, `waitSeconds`, `workflowId`
-- `agent_tool_workflow_add` — `agentId`, `description`, `flow`, `requireConfirmation`, `workflowId`
-- `agent_tool_workflow_add` — `agentId`, `description`, `flow`, `requireConfirmation`, `workflowId`
+- `agent_tool_workflow_add` — `agentId`, `description`, `flow`, `requireConfirmation`, `workflowId`, `slackRoute`
 - `agent_knowledge_file_add` — `agentId`, `content`, `name`, `type` / `agent_workspace_file_add` — `agentId`, `content`, `name`, `space`, `type`
 - `agent_tool_list` — `agentId`
 - `agent_file_list` — `agentId`, `cursor`, `environment`, `folderPrefix`, `limit`, `live`, `search`, `space`
@@ -101,7 +102,6 @@ Publish an attached workflow only when its verified development state must go li
 
 ### Runtime state
 
-- `agent_update` — `agentId`, `instructions`, `name` / `agent_set_enabled` — `agentId`, `enabled`
 - `agent_update` — `agentId`, `instructions`, `name` / `agent_set_enabled` — `agentId`, `enabled`
 - `agent_delete` — `agentId`
 

package/skills-mcp/controllerai-ai-nodes/SKILL.md

@@ -56,7 +56,6 @@ A conversational assistant with tools and knowledge is an agent (`controllerai-a
 - `node_prop_set` — `nodeId`, `js`, `label`, `prop`, `rawExpressionJson`, `value`, `workflowId`, `valueJson`
 - `expr_context` — `nodeId`, `methods`, `prop`, `workflowId`
 - `node_prop_set` — `nodeId`, `js`, `label`, `prop`, `rawExpressionJson`, `value`, `workflowId`, `valueJson`
-- `node_prop_set` — `nodeId`, `js`, `label`, `prop`, `rawExpressionJson`, `value`, `workflowId`, `valueJson`
 
 The query is a label substring, not a preference: search a family name, then judge the returned options by cost, quality, latency and constraints. The schema step applies only when downstream nodes need fields.
 

package/skills-mcp/controllerai-data/SKILL.md

@@ -69,7 +69,6 @@ The update is a patch: omitted fields keep their values. A `get` of a missing re
 
 ### Delete many
 
-- `data_record_delete_many` — `all`, `env`, `recordIds`, `type`, `workflowId`
 - `data_record_delete_many` — `all`, `env`, `recordIds`, `type`, `workflowId`
 
 Pass exactly one of `recordIds` or `all: true`; there is no confirmation parameter, which changes nothing about needing the user's intent.
@@ -77,7 +76,6 @@ Soft deletes have no undo. On the live store the published workflow sees the cha
 
 ### Import a CSV
 
-- `data_record_import_commit` — `env`, `content`, `type`, `workflowId` / `data_record_import_validate` — `env`, `content`, `type`, `workflowId`
 - `data_record_import_commit` — `env`, `content`, `type`, `workflowId` / `data_record_import_validate` — `env`, `content`, `type`, `workflowId`
 
 The CSV travels inline as `content`; `data_record_import_validate` (`type`, `content`, `env`) is the dry run, and `data_record_import_commit` with the same arguments writes.
@@ -98,7 +96,6 @@ For a CRM, tracker or lookup table that flows and agents will call: define each
 
 ### Diagnose development versus live
 
-- `data_collection_list` — `env`, `workflowId`
 - `data_collection_list` — `env`, `workflowId`
 - `data_record_query` — `env`, `limit`, `offset`, `query`, `type`, `workflowId`
 

package/skills-mcp/controllerai-data/references/data-rails.md

@@ -38,8 +38,6 @@ Resolve the exact workflow, store, type and records before any of these. A schem
 If a manual run passes but a trigger or agent tool does not, compare the two stores:
 
 - `data_collection_list` — `env`, `workflowId`
-- `data_collection_list` — `env`, `workflowId`
-- `data_record_query` — `env`, `limit`, `offset`, `query`, `type`, `workflowId`
 - `data_record_query` — `env`, `limit`, `offset`, `query`, `type`, `workflowId`
 
 No live collections usually means no publish since a store-eligible schema existed. An empty live collection with a populated development one usually means the data was never promoted or was cleared since. Confirm with publish status, the live schema and record history; different counts are normal until data is intentionally written on both stores.

package/skills-mcp/controllerai-expressions/SKILL.md

@@ -70,7 +70,6 @@ The setter fetches the prop's metadata, enables a catalog-only optional prop whe
 
 - `expr_validate` — `nodeId`, `js`, `mode`, `prop`, `workflowId`
 - `node_only_when_set` — `nodeId`, `clear`, `groups`, `js`, `workflowId`
-- `node_only_when_set` — `nodeId`, `clear`, `groups`, `js`, `workflowId`
 - `branch_update` — `nodeId`, `conditionJson`, `js`, `name`, `branchId`, `workflowId`
 
 A node guard takes one boolean expression, or groups where each inner list is AND and the outer list is OR; a root `&&` or `||` inside one expression is not supported, so compound guards use groups. Branch conditions use the same grouped shape, each string compiled separately. Make a missing number fail a comparison with a same-type boundary: `(flow.unitsLeft ?? 5) < 5`.

package/skills-mcp/controllerai-flow-control/SKILL.md

@@ -50,7 +50,6 @@ A fresh If/Else ships with one blank `If` branch and an Else; the blank conditio
 - `expr_context` — `nodeId`, `methods`, `prop`, `workflowId`
 - `expr_validate` — `nodeId`, `js`, `mode`, `prop`, `workflowId`
 - `node_only_when_set` — `nodeId`, `clear`, `groups`, `js`, `workflowId`
-- `node_only_when_set` — `nodeId`, `clear`, `groups`, `js`, `workflowId`
 
 `expr_validate` takes `mode: "onlyWhen"` and no `prop`. `node_only_when_set` takes `js` for one expression or `groups` as the parsed arrays, for example `groups: [["flow.email.isNotEmpty()", "flow.units < 5"], ["flow.override === true"]]`; pass `clear: true` only when removing the guard is the user's intent.
 
@@ -72,7 +71,6 @@ Find the control component with `controllerai-node-config`, then read the branch
 - `node_get` — `nodeId`, `workflowId`
 - `flow_for_each_scaffold` — `continueOnError`, `flow`, `from`, `itemField`, `itemName`, `itemType`, `listField`, `listJs`, `maxItems`, `name`, `sourceOutput`, `workflowId`
 - `node_prop_set` — `nodeId`, `js`, `label`, `prop`, `rawExpressionJson`, `value`, `workflowId`, `valueJson`
-- `node_prop_set` — `nodeId`, `js`, `label`, `prop`, `rawExpressionJson`, `value`, `workflowId`, `valueJson`
 
 `sourceOutput` is the exact `outputs[].id` of the selected node, never a display name, and there is no first-output default (branch and error outputs included). When the whole output is the list, omit the list selectors; for a nested list pass `listField` with the dot path below `.data`; reserve `listJs` for an exact advanced expression whose shape you took from the context; the two are mutually exclusive. `itemField` (an array of `id:type[:display]` strings) is only for creating a new `custom.*` item type; stored records use `dataRecord.custom.*`. Set `maxItems` on purpose when the requirement differs from 500, decide `continueOnError` explicitly, then read the returned warnings and follow `nextSteps` in order; a list/item type mismatch means created but unverified. In mappings, `item` exists only where the context exposes it; inside the body flow the item is `flow.<itemInput>`; aggregate results are iteration records with child outputs under `outputs`.
 

package/skills-mcp/controllerai-flow-control/references/patterns.md

@@ -58,7 +58,6 @@ The scaffold creates the item flow, its typed item input, the loop node and the
 - `node_prop_list` — `nodeId`, `workflowId`
 - `node_prop_set` — `nodeId`, `js`, `label`, `prop`, `rawExpressionJson`, `value`, `workflowId`, `valueJson`
 - `node_connect` — `flow`, `from`, `output`, `to`, `workflowId`
-- `node_connect` — `flow`, `from`, `output`, `to`, `workflowId`
 - `node_add` — `after`, `connection`, `enableProp`, `flow`, `key`, `name`, `node`, `output`, `props`, `workflowId`
 
 Set `pathDataType` from the returned options once `chooseActivePath` reveals it. Repeat the tail connection for every type-compatible exclusive path; if the shared action already exists, connect it after Join Paths instead of adding a replacement. `chooseActivePath` allows at most one active input and stops the flow when none is active unless `continueIfNoActivePath` is enabled (then it passes null); after a Router whose routes can overlap use `passThrough`, which returns one field per connected input with the blocked ones null. Run one test per branch and stop after all pass.