@dotobokuri/fleet-console 1.23.0 → 1.24.0

package/dist/fleet-plugins/skills/routes.mjs

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
-import path from 'path';
+import path5 from 'path';
 import { execFile } from 'child_process';
-import fs3 from 'fs/promises';
+import fs4 from 'fs/promises';
 import os2 from 'os';
 import crypto4 from 'crypto';
 import 'http';
@@ -18,12 +18,12 @@ var __export = (target, all) => {
 function definePlugin(definition) {
   return definition;
 }
-function registerRouter(ctx, path7, handler) {
-  ctx.registerRouter(normalizePath(path7), handler);
+function registerRouter(ctx, path8, handler) {
+  ctx.registerRouter(normalizePath(path8), handler);
 }
-function normalizePath(path7) {
-  if (path7.length === 0 || path7 === "/") return "/";
-  return path7;
+function normalizePath(path8) {
+  if (path8.length === 0 || path8 === "/") return "/";
+  return path8;
 }
 
 // ../../node_modules/.pnpm/@agentclientprotocol+sdk@1.2.1_zod@4.4.1/node_modules/@agentclientprotocol/sdk/dist/schema/index.js
@@ -832,10 +832,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path7) {
-  if (!path7)
+function getElementAtPath(obj, path8) {
+  if (!path8)
     return obj;
-  return path7.reduce((acc, key) => acc?.[key], obj);
+  return path8.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -1244,11 +1244,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path7, issues) {
+function prefixIssues(path8, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path7);
+    iss.path.unshift(path8);
     return iss;
   });
 }
@@ -1395,16 +1395,16 @@ function flattenError(error51, mapper = (issue2) => issue2.message) {
 }
 function formatError(error51, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error52, path7 = []) => {
+  const processError = (error52, path8 = []) => {
     for (const issue2 of error52.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path7, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path8, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path7, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path8, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path7, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path8, ...issue2.path]);
       } else {
-        const fullpath = [...path7, ...issue2.path];
+        const fullpath = [...path8, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -1431,17 +1431,17 @@ function formatError(error51, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error51, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error52, path7 = []) => {
+  const processError = (error52, path8 = []) => {
     var _a3, _b;
     for (const issue2 of error52.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path7, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path8, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path7, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path8, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path7, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path8, ...issue2.path]);
       } else {
-        const fullpath = [...path7, ...issue2.path];
+        const fullpath = [...path8, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -1473,8 +1473,8 @@ function treeifyError(error51, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path7 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path7) {
+  const path8 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path8) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -14138,13 +14138,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path7 = ref.slice(1).split("/").filter(Boolean);
-  if (path7.length === 0) {
+  const path8 = ref.slice(1).split("/").filter(Boolean);
+  if (path8.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path7[0] === defsKey) {
-    const key = path7[1];
+  if (path8[0] === defsKey) {
+    const key = path8[1];
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -16312,7 +16312,7 @@ function findBinaryPath(command, env, options = {}) {
   return findOnPath(command, pathValue, pathExts, platform);
 }
 function wrapWindowsShim(resolved, env, platform) {
-  if (platform !== "win32" || !WINDOWS_SHIM_EXTENSIONS.has(path.extname(resolved).toLowerCase())) {
+  if (platform !== "win32" || !WINDOWS_SHIM_EXTENSIONS.has(path5.extname(resolved).toLowerCase())) {
     return { bin: resolved, prefixArgs: [] };
   }
   rejectCmdExpansionSensitiveShim(resolved);
@@ -16330,13 +16330,13 @@ function forceWindowsArgQuoting(value) {
   return `${value} `;
 }
 function findOnPath(bin, pathValue, pathExts, platform) {
-  const pathSeparator = platform === "win32" ? WINDOWS_PATH_SEPARATOR : path.delimiter;
-  if (hasPathSeparator(bin, platform) || path.isAbsolute(bin)) {
+  const pathSeparator = platform === "win32" ? WINDOWS_PATH_SEPARATOR : path5.delimiter;
+  if (hasPathSeparator(bin, platform) || path5.isAbsolute(bin)) {
     return resolveWithExtensions(bin, pathExts, platform);
   }
   for (const entry of pathValue.split(pathSeparator)) {
     const searchDir = entry.length === 0 ? "." : entry;
-    const candidate = resolveWithExtensions(path.join(searchDir, bin), pathExts, platform);
+    const candidate = resolveWithExtensions(path5.join(searchDir, bin), pathExts, platform);
     if (candidate) {
       return candidate;
     }
@@ -16344,7 +16344,7 @@ function findOnPath(bin, pathValue, pathExts, platform) {
   return void 0;
 }
 function resolveWithExtensions(candidate, pathExts, platform) {
-  if (platform !== "win32" || path.extname(candidate).length > 0) {
+  if (platform !== "win32" || path5.extname(candidate).length > 0) {
     return isAccessibleExecutable(candidate, platform) ? candidate : void 0;
   }
   for (const ext of pathExts) {
@@ -16663,18 +16663,18 @@ async function ensureCliMjs(cliHome, onBootstrap) {
   if (_cliMjsPath) return _cliMjsPath;
   if (_bootstrapPromise) return _bootstrapPromise;
   _bootstrapPromise = (async () => {
-    const mjsPath = path.join(cliHome, "node_modules", SKILLS_PACKAGE, "bin", "cli.mjs");
-    const pkgPath = path.join(cliHome, "node_modules", SKILLS_PACKAGE, "package.json");
+    const mjsPath = path5.join(cliHome, "node_modules", SKILLS_PACKAGE, "bin", "cli.mjs");
+    const pkgPath = path5.join(cliHome, "node_modules", SKILLS_PACKAGE, "package.json");
     let needsInstall = true;
     try {
-      const raw = await fs3.readFile(pkgPath, "utf-8");
+      const raw = await fs4.readFile(pkgPath, "utf-8");
       const pkg = JSON.parse(raw);
       if (pkg.version === SKILLS_VERSION) needsInstall = false;
     } catch {
     }
     if (needsInstall) {
       onBootstrap?.(WARMUP_LINE);
-      await fs3.mkdir(cliHome, { recursive: true });
+      await fs4.mkdir(cliHome, { recursive: true });
       await runNpmInstall(cliHome);
     }
     _cliMjsPath = mjsPath;
@@ -16799,6 +16799,61 @@ function getJobResult(id, cursor) {
     exitCode: job.exitCode
   };
 }
+var ProjectPathError = class extends Error {
+  code;
+  constructor(code) {
+    super(code);
+    this.name = "ProjectPathError";
+    this.code = code;
+  }
+};
+async function resolveProjectCwd(theaterRoot, relPath) {
+  if (relPath !== null && !isSafeRelativePath(relPath)) {
+    throw new ProjectPathError("invalid_rel_path");
+  }
+  const lexicalRoot = path5.resolve(theaterRoot);
+  const lexicalTarget = path5.resolve(lexicalRoot, relPath ?? ".");
+  if (!isContainedBy(lexicalRoot, lexicalTarget)) {
+    throw new ProjectPathError("path_outside_theater");
+  }
+  let realRoot;
+  let realTarget;
+  try {
+    [realRoot, realTarget] = await Promise.all([
+      fs4.realpath(lexicalRoot),
+      fs4.realpath(lexicalTarget)
+    ]);
+  } catch (error51) {
+    throw mapFilesystemError(error51);
+  }
+  if (!isContainedBy(realRoot, realTarget)) {
+    throw new ProjectPathError("path_outside_theater");
+  }
+  try {
+    if (!(await fs4.stat(realTarget)).isDirectory()) {
+      throw new ProjectPathError("invalid_rel_path");
+    }
+  } catch (error51) {
+    if (error51 instanceof ProjectPathError) throw error51;
+    throw mapFilesystemError(error51);
+  }
+  return realTarget;
+}
+function isSafeRelativePath(value) {
+  if (!value || value.includes("\0") || path5.isAbsolute(value) || path5.posix.isAbsolute(value) || path5.win32.isAbsolute(value)) {
+    return false;
+  }
+  return value.split(/[\\/]/).every((segment) => segment !== "" && segment !== "." && segment !== "..");
+}
+function isContainedBy(root, target) {
+  return target === root || target.startsWith(root.endsWith(path5.sep) ? root : root + path5.sep);
+}
+function mapFilesystemError(error51) {
+  const code = error51.code;
+  if (code === "EACCES" || code === "EPERM") return new ProjectPathError("path_outside_theater");
+  if (code === "ENOENT" || code === "ENOTDIR") return new ProjectPathError("not_found");
+  return new ProjectPathError("invalid_rel_path");
+}
 
 // ../fleet-plugins/skills/server/registry-search.ts
 var DEFAULT_SKILLS_API_URL = "https://skills.sh";
@@ -16873,10 +16928,12 @@ function validateScope(scope) {
 // ../fleet-plugins/skills/server/handlers.ts
 var PREVIEW_TIMEOUT_MS = 3e4;
 var CLI_TIMEOUT_MS = 12e4;
+var USERINFO_URL_RE = /\b[a-z][a-z0-9+.-]*:\/\/[^\s/@]+@[^\s]+/gi;
+var TOKEN_URL_PARAM_RE = /([?&](?:access_?token|token|api_?key|apikey|auth(?:orization)?|password|secret|credential)=)[^&#\s]*/gi;
 async function readSkillSources(cwd) {
   const sources = /* @__PURE__ */ new Map();
   try {
-    const raw = await fs3.readFile(path.join(cwd, "skills-lock.json"), "utf-8");
+    const raw = await fs4.readFile(path5.join(cwd, "skills-lock.json"), "utf-8");
     const parsed = JSON.parse(raw);
     if (typeof parsed === "object" && parsed !== null) {
       for (const [name, entry] of Object.entries(parsed)) {
@@ -16887,7 +16944,7 @@ async function readSkillSources(cwd) {
   } catch {
   }
   try {
-    const raw = await fs3.readFile(path.join(cwd, ".agents", ".skill-lock.json"), "utf-8");
+    const raw = await fs4.readFile(path5.join(cwd, ".agents", ".skill-lock.json"), "utf-8");
     const parsed = JSON.parse(raw);
     if (typeof parsed === "object" && parsed !== null) {
       for (const [name, entry] of Object.entries(parsed)) {
@@ -16913,6 +16970,21 @@ async function runListCommand(args, cwd, executor) {
 function buildDisplayPath(scope, name) {
   return scope === "global" ? `~/.agents/skills/${name}` : `.agents/skills/${name}`;
 }
+function parseOptionalRelPath(value) {
+  if (value === void 0 || value === null) return null;
+  return typeof value === "string" ? value : void 0;
+}
+async function resolveProjectScopeCwd(ctx, theaterId, relPath) {
+  if (!theaterId) return null;
+  if (relPath === void 0) throw new ProjectPathError("invalid_rel_path");
+  const theaterRoot = ctx.host.paths.resolveTheaterPath(theaterId);
+  return theaterRoot ? resolveProjectCwd(theaterRoot, relPath) : null;
+}
+function writeProjectPathError(res, ctx, error51) {
+  if (!(error51 instanceof ProjectPathError)) throw error51;
+  const status = error51.code === "path_outside_theater" ? 403 : error51.code === "not_found" ? 404 : 400;
+  ctx.host.http.writeJson(res, status, { error: error51.code });
+}
 function extractSkillMarkdown(raw) {
   const text = stripAnsi(raw);
   const openTag = "<SKILL.md>";
@@ -16924,13 +16996,28 @@ function extractSkillMarkdown(raw) {
   }
   return text.trim();
 }
-function spawnJobAsync(jobId, args, cwd, executor) {
+function redactJobOutput(chunk, paths) {
+  let redacted = chunk.replace(USERINFO_URL_RE, "[redacted credential URL]").replace(TOKEN_URL_PARAM_RE, "$1[redacted]");
+  const sensitivePaths = [.../* @__PURE__ */ new Set([paths.cwd, paths.homeDir, paths.pluginDataDir])].filter(Boolean).sort((a, b) => b.length - a.length);
+  for (const sensitivePath of sensitivePaths) {
+    redacted = redacted.replaceAll(sensitivePath, "[redacted path]");
+  }
+  return redacted;
+}
+function getJobOutputRedactionPaths(ctx, cwd) {
+  return {
+    cwd,
+    homeDir: os2.homedir(),
+    pluginDataDir: ctx.host.paths.pluginDataDir("skills")
+  };
+}
+function spawnJobAsync(jobId, args, cwd, redactionPaths, executor) {
   setImmediate(() => {
     void executor(args, {
       cwd,
       timeout: CLI_TIMEOUT_MS,
-      onChunk: (chunk) => appendChunk(jobId, chunk),
-      onBootstrap: (line) => appendChunk(jobId, line + "\n")
+      onChunk: (chunk) => appendChunk(jobId, redactJobOutput(chunk, redactionPaths)),
+      onBootstrap: (line) => appendChunk(jobId, redactJobOutput(line + "\n", redactionPaths))
     }).then((result) => finishJob(jobId, result.exitCode)).catch(() => finishJob(jobId, 1));
   });
 }
@@ -16945,13 +17032,26 @@ async function handleList(req, res, ctx, executor) {
   }
   const url2 = new URL(req.url ?? "/", `http://${req.headers.host ?? "localhost"}`);
   const theaterId = url2.searchParams.get("theaterId") ?? void 0;
-  const theaterPath = theaterId ? ctx.host.paths.resolveTheaterPath(theaterId) : null;
+  const relPath = url2.searchParams.has("relPath") ? url2.searchParams.get("relPath") || null : null;
+  let projectCwd = null;
+  if (theaterId) {
+    try {
+      projectCwd = await resolveProjectScopeCwd(ctx, theaterId, relPath);
+    } catch (error51) {
+      writeProjectPathError(res, ctx, error51);
+      return;
+    }
+    if (!projectCwd) {
+      ctx.host.http.writeJson(res, 404, { error: "theater_not_found" });
+      return;
+    }
+  }
   try {
-    if (theaterPath) {
+    if (projectCwd) {
       const [projectRaw, globalRaw, projectSources, globalSources] = await Promise.all([
-        runListCommand(["list", "--json"], theaterPath, executor),
+        runListCommand(["list", "--json"], projectCwd, executor),
         runListCommand(["list", "-g", "--json"], os2.homedir(), executor),
-        readSkillSources(theaterPath),
+        readSkillSources(projectCwd),
         readSkillSources(os2.homedir())
       ]);
       const projectSkills = projectRaw.map((entry) => ({
@@ -17025,8 +17125,9 @@ async function handleInstall(req, res, ctx, executor) {
     ctx.host.http.writeJson(res, 400, { error: "invalid_argument" });
     return;
   }
-  const { source, skill, scope, agents, theaterId: rawTheaterId } = body;
+  const { source, skill, scope, agents, theaterId: rawTheaterId, relPath: rawRelPath } = body;
   const theaterId = typeof rawTheaterId === "string" ? rawTheaterId : void 0;
+  const relPath = parseOptionalRelPath(rawRelPath);
   if (!validateSource(source)) {
     ctx.host.http.writeJson(res, 400, { error: "invalid_argument" });
     return;
@@ -17049,12 +17150,16 @@ async function handleInstall(req, res, ctx, executor) {
       return;
     }
   }
-  const theaterPath = scope === "project" ? theaterId ? ctx.host.paths.resolveTheaterPath(theaterId) : null : null;
-  if (scope === "project" && !theaterPath) {
-    ctx.host.http.writeJson(res, 404, { error: "theater_not_found" });
-    return;
+  let projectCwd = null;
+  if (scope === "project") {
+    try {
+      projectCwd = await resolveProjectScopeCwd(ctx, theaterId, relPath);
+    } catch (error51) {
+      writeProjectPathError(res, ctx, error51);
+      return;
+    }
   }
-  const cwd = scope === "global" ? defaultCwd() : theaterPath;
+  const cwd = scope === "global" ? defaultCwd() : projectCwd;
   if (!cwd) {
     ctx.host.http.writeJson(res, 404, { error: "theater_not_found" });
     return;
@@ -17067,7 +17172,7 @@ async function handleInstall(req, res, ctx, executor) {
   const agentArgs = agents.flatMap((a) => ["--agent", a]);
   const scopeFlag = scope === "global" ? ["-g"] : [];
   const args = ["add", source, "-y", "--skill", skill, ...scopeFlag, ...agentArgs];
-  spawnJobAsync(jobId, args, cwd, executor);
+  spawnJobAsync(jobId, args, cwd, getJobOutputRedactionPaths(ctx, cwd), executor);
   ctx.host.http.writeJson(res, 202, { jobId });
 }
 async function handleUpdate(req, res, ctx, executor) {
@@ -17084,18 +17189,23 @@ async function handleUpdate(req, res, ctx, executor) {
     ctx.host.http.writeJson(res, 400, { error: "invalid_argument" });
     return;
   }
-  const { scope, theaterId: rawTheaterId } = body;
+  const { scope, theaterId: rawTheaterId, relPath: rawRelPath } = body;
   const theaterId = typeof rawTheaterId === "string" ? rawTheaterId : void 0;
+  const relPath = parseOptionalRelPath(rawRelPath);
   if (!validateScope(scope)) {
     ctx.host.http.writeJson(res, 400, { error: "invalid_argument" });
     return;
   }
-  const theaterPath = scope === "project" ? theaterId ? ctx.host.paths.resolveTheaterPath(theaterId) : null : null;
-  if (scope === "project" && !theaterPath) {
-    ctx.host.http.writeJson(res, 404, { error: "theater_not_found" });
-    return;
+  let projectCwd = null;
+  if (scope === "project") {
+    try {
+      projectCwd = await resolveProjectScopeCwd(ctx, theaterId, relPath);
+    } catch (error51) {
+      writeProjectPathError(res, ctx, error51);
+      return;
+    }
   }
-  const cwd = scope === "global" ? defaultCwd() : theaterPath;
+  const cwd = scope === "global" ? defaultCwd() : projectCwd;
   if (!cwd) {
     ctx.host.http.writeJson(res, 404, { error: "theater_not_found" });
     return;
@@ -17107,7 +17217,7 @@ async function handleUpdate(req, res, ctx, executor) {
   }
   const scopeFlag = scope === "global" ? "-g" : "-p";
   const args = ["update", "-y", scopeFlag];
-  spawnJobAsync(jobId, args, cwd, executor);
+  spawnJobAsync(jobId, args, cwd, getJobOutputRedactionPaths(ctx, cwd), executor);
   ctx.host.http.writeJson(res, 202, { jobId });
 }
 async function handleGetJob(req, res, ctx) {
@@ -17148,8 +17258,9 @@ async function handleRemove(req, res, ctx, executor) {
     ctx.host.http.writeJson(res, 400, { error: "invalid_argument" });
     return;
   }
-  const { scope, skill, theaterId: rawTheaterId } = body;
+  const { scope, skill, theaterId: rawTheaterId, relPath: rawRelPath } = body;
   const theaterId = typeof rawTheaterId === "string" ? rawTheaterId : void 0;
+  const relPath = parseOptionalRelPath(rawRelPath);
   if (!validateScope(scope)) {
     ctx.host.http.writeJson(res, 400, { error: "invalid_argument" });
     return;
@@ -17158,12 +17269,16 @@ async function handleRemove(req, res, ctx, executor) {
     ctx.host.http.writeJson(res, 400, { error: "invalid_argument" });
     return;
   }
-  const theaterPath = scope === "project" ? theaterId ? ctx.host.paths.resolveTheaterPath(theaterId) : null : null;
-  if (scope === "project" && !theaterPath) {
-    ctx.host.http.writeJson(res, 404, { error: "theater_not_found" });
-    return;
+  let projectCwd = null;
+  if (scope === "project") {
+    try {
+      projectCwd = await resolveProjectScopeCwd(ctx, theaterId, relPath);
+    } catch (error51) {
+      writeProjectPathError(res, ctx, error51);
+      return;
+    }
   }
-  const cwd = scope === "global" ? defaultCwd() : theaterPath;
+  const cwd = scope === "global" ? defaultCwd() : projectCwd;
   if (!cwd) {
     ctx.host.http.writeJson(res, 404, { error: "theater_not_found" });
     return;
@@ -17193,7 +17308,9 @@ async function handlePreview(req, res, ctx, executor) {
     ctx.host.http.writeJson(res, 400, { error: "invalid_argument" });
     return;
   }
-  const { source, skill } = body;
+  const { source, skill, theaterId: rawTheaterId, relPath: rawRelPath } = body;
+  const theaterId = typeof rawTheaterId === "string" ? rawTheaterId : void 0;
+  const relPath = parseOptionalRelPath(rawRelPath);
   if (!validateSource(source)) {
     ctx.host.http.writeJson(res, 400, { error: "invalid_argument" });
     return;
@@ -17202,8 +17319,22 @@ async function handlePreview(req, res, ctx, executor) {
     ctx.host.http.writeJson(res, 400, { error: "invalid_argument" });
     return;
   }
+  let cwd = defaultCwd();
+  if (theaterId) {
+    try {
+      const projectCwd = await resolveProjectScopeCwd(ctx, theaterId, relPath);
+      if (!projectCwd) {
+        ctx.host.http.writeJson(res, 404, { error: "theater_not_found" });
+        return;
+      }
+      cwd = projectCwd;
+    } catch (error51) {
+      writeProjectPathError(res, ctx, error51);
+      return;
+    }
+  }
   try {
-    const result = await executor([`use`, `${source}@${skill}`], { cwd: defaultCwd(), timeout: PREVIEW_TIMEOUT_MS });
+    const result = await executor([`use`, `${source}@${skill}`], { cwd, timeout: PREVIEW_TIMEOUT_MS });
     ctx.host.http.writeJson(res, 200, { markdown: extractSkillMarkdown(result.stdout) });
   } catch {
     ctx.host.http.writeJson(res, 502, { error: "preview_failed" });
@@ -17223,8 +17354,9 @@ async function handleInstalledFile(req, res, ctx, executor) {
     ctx.host.http.writeJson(res, 400, { error: "invalid_argument" });
     return;
   }
-  const { scope, skill, theaterId: rawTheaterId } = body;
+  const { scope, skill, theaterId: rawTheaterId, relPath: rawRelPath } = body;
   const theaterId = typeof rawTheaterId === "string" ? rawTheaterId : void 0;
+  const relPath = parseOptionalRelPath(rawRelPath);
   if (!validateScope(scope)) {
     ctx.host.http.writeJson(res, 400, { error: "invalid_argument" });
     return;
@@ -17233,12 +17365,16 @@ async function handleInstalledFile(req, res, ctx, executor) {
     ctx.host.http.writeJson(res, 400, { error: "invalid_argument" });
     return;
   }
-  const theaterPath = scope === "project" ? theaterId ? ctx.host.paths.resolveTheaterPath(theaterId) : null : null;
-  if (scope === "project" && !theaterPath) {
-    ctx.host.http.writeJson(res, 404, { error: "theater_not_found" });
-    return;
+  let projectCwd = null;
+  if (scope === "project") {
+    try {
+      projectCwd = await resolveProjectScopeCwd(ctx, theaterId, relPath);
+    } catch (error51) {
+      writeProjectPathError(res, ctx, error51);
+      return;
+    }
   }
-  const cwd = scope === "global" ? defaultCwd() : theaterPath;
+  const cwd = scope === "global" ? defaultCwd() : projectCwd;
   if (!cwd) {
     ctx.host.http.writeJson(res, 404, { error: "theater_not_found" });
     return;
@@ -17252,28 +17388,28 @@ async function handleInstalledFile(req, res, ctx, executor) {
       return;
     }
     const skillRoot = entry.path;
-    const skillMdPath = path.join(skillRoot, "SKILL.md");
+    const skillMdPath = path5.join(skillRoot, "SKILL.md");
     const [realAllowedRoot, realRoot, realMd] = await Promise.all([
       // CLI가 보고한 skillRoot 자체도 신뢰하지 않는다 — scope의 정당한 상위 경계
       // (project=theater 루트, global=홈)를 벗어나면 읽지 않는다. `.agents/skills`로
       // 고정하지 않는 이유: claude 단독 설치는 `.claude/skills` 아래에 놓인다.
-      fs3.realpath(cwd),
-      fs3.realpath(skillRoot),
-      fs3.realpath(skillMdPath).catch(() => null)
+      fs4.realpath(cwd),
+      fs4.realpath(skillRoot),
+      fs4.realpath(skillMdPath).catch(() => null)
     ]);
     if (!realMd) {
       ctx.host.http.writeJson(res, 404, { error: "skill_not_found" });
       return;
     }
-    if (realRoot !== realAllowedRoot && !realRoot.startsWith(realAllowedRoot + path.sep)) {
+    if (realRoot !== realAllowedRoot && !realRoot.startsWith(realAllowedRoot + path5.sep)) {
       ctx.host.http.writeJson(res, 403, { error: "path_outside_theater" });
       return;
     }
-    if (realMd !== realRoot && !realMd.startsWith(realRoot + path.sep)) {
+    if (realMd !== realRoot && !realMd.startsWith(realRoot + path5.sep)) {
       ctx.host.http.writeJson(res, 403, { error: "path_outside_theater" });
       return;
     }
-    const markdown = await fs3.readFile(realMd, "utf-8");
+    const markdown = await fs4.readFile(realMd, "utf-8");
     ctx.host.http.writeJson(res, 200, { markdown });
   } catch {
     ctx.host.http.writeJson(res, 502, { error: "read_failed" });
@@ -17284,7 +17420,7 @@ async function handleInstalledFile(req, res, ctx, executor) {
 var routes_default = definePlugin({
   id: "skills",
   register(ctx) {
-    const cliHome = path.join(ctx.host.paths.pluginDataDir("skills"), "cli");
+    const cliHome = path5.join(ctx.host.paths.pluginDataDir("skills"), "cli");
     const executor = createDefaultExecutor(cliHome);
     registerRouter(ctx, "list", async ({ req, res }) => {
       await handleList(req, res, ctx, executor);