@easbot/skills 0.2.48

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 houjallen
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.en.md

@@ -0,0 +1,202 @@
+[中文](./README.md) | English
+
+# @easbot/skills
+
+Skill package management subsystem for the EAS Agent ecosystem. Discovers, installs, removes, searches, updates, syncs and one-shot uses skills (SKILL.md) from GitHub, Well-Known hosts, or local paths.
+
+Usable both as a standalone CLI (`easbot skills ...`) and as a library that the `@easbot/agent` host CLI delegates to via Commander.js, so `easbot agent skills ...` and `easbot skills ...` are equivalent.
+
+## Features
+
+- **Type Safety**: full TypeScript types + Zod frontmatter validation
+- **Multi-Source**: GitHub shorthand / HTTPS / SSH / Well-Known / local path
+- **Multi-Agent**: Claude Code, Cursor, AiderDesk, Amp, Antigravity, Zed, Codex, Hermes, Vibe, AutoHand, Eve, ...
+- **Dependency Injection**: `setGlobalAdapter / setInstanceAdapter / setAgentAdapter` lets the host (agent / gateway) inject `IGlobal.Path`, `IInstance.directory`, and SubAgentRunner / LocalAgentRunner — all data lives under one tree
+- **Incremental Sync**: lockfile-based add / remove / update / sync with local SHA-256 hashing
+- **i18n**: built-in zh-CN / en-US translations; user-facing strings go through `t()`, with fallback to the English literal when a key is missing
+- **Telemetry + Audit**: built-in `skills.sh` partner-audit reporting and OpenClaw risk gating
+
+## Installation
+
+```bash
+pnpm add @easbot/skills
+```
+
+Or as a monorepo workspace dependency:
+
+```json
+{
+  "dependencies": {
+    "@easbot/skills": "workspace:*"
+  }
+}
+```
+
+## CLI Usage
+
+### Standalone CLI
+
+```bash
+# Add a skill
+easbot skills add houjallen/agent-skills
+easbot skills add https://github.com/houjallen/agent-skills -g
+
+# Search
+easbot skills find typescript --owner houjallen
+
+# List installed
+easbot skills list --json
+
+# Remove
+easbot skills remove my-skill -y
+
+# Update
+easbot skills update -g
+
+# One-shot use (no lockfile mutation)
+easbot skills use houjallen/agent-skills@houjallen
+
+# Sync from node_modules / restore from lockfile
+easbot skills experimental_sync
+easbot skills experimental_install
+
+# Initialize a new skill
+easbot skills init my-skill
+```
+
+### Delegated from a host CLI
+
+`@easbot/agent` reuses every sub-command through `handleSkillsCli(args, deps)`:
+
+```typescript
+import { handleSkillsCli, setGlobalAdapter, setInstanceAdapter } from '@easbot/skills';
+
+setGlobalAdapter({ Path: Global.Path });
+setInstanceAdapter({ directory: ctx.config.directory, worktree: Instance.worktree });
+
+await handleSkillsCli(['add', 'houjallen/agent-skills', '-y'], {
+  version: ctx.programVersion,
+});
+```
+
+## API
+
+| Module | Exports | Notes |
+|---|---|---|
+| `add` | `runAdd / parseAddOptions / initTelemetry` | Skill add pipeline |
+| `remove` | `removeCommand / parseRemoveOptions` | Skill removal |
+| `list` | `runList / parseListOptions` | List installed skills |
+| `find` | `runFind / parseFindOptions / searchSkillsAPI` | skills.sh search |
+| `update` | `runUpdate / parseUpdateOptions` | Incremental update |
+| `install` | `runInstallFromLock` | Restore from skills-lock.json |
+| `sync` | `runSync / parseSyncOptions` | Sync from node_modules |
+| `use` | `runUse / parseUseOptions / buildUsePrompt` | One-shot use |
+| `cli-handler` | `handleSkillsCli / renderBanner / renderHelp / SkillsCliDeps / SkillsCliResult` | CLI bridge |
+| `interfaces` | `setGlobalAdapter / setInstanceAdapter / setAgentAdapter / getGlobal / getInstance / ...` | Dependency injection |
+| `agents` | `agents / detectInstalledAgents / getUniversalAgents / ...` | Agent metadata |
+| `installer` | `installSkillForAgent / listInstalledSkills / getCanonicalSkillsDir` | Physical install |
+| `skill-lock` | `readSkillLock / writeSkillLock / addSkillToLock / removeSkillFromLock` | Global lockfile |
+| `local-lock` | `readLocalLock / writeLocalLock / computeSkillFolderHash` | Project lockfile |
+| `telemetry` | `track / flushTelemetry / setVersion / fetchAuditData` | Usage stats + security audit |
+| `i18n` | `t / initI18n / registerI18nResources / changeI18nLanguage` | Internationalization |
+| `frontmatter` | `parseFrontmatter` | YAML frontmatter parser |
+| `providers` | `wellKnownProvider / registry / findProvider` | Well-Known & custom host providers |
+
+## Global Path Injection
+
+To avoid fighting with the host (agent / gateway) over XDG / home, `@easbot/skills` resolves paths through dependency injection by default:
+
+```typescript
+import {
+  setGlobalAdapter,    // inject IGlobal.Path
+  setInstanceAdapter,  // inject IInstance.directory / worktree
+  setAgentAdapter,     // inject SubAgentRunner / LocalAgentRunner / triggerEvent
+  getHomeDir,
+  getXdgConfig,
+  getXdgData,
+  getProjectDirectory,
+} from '@easbot/skills';
+
+setGlobalAdapter({
+  Path: {
+    home: '/Users/me',
+    data: '/Users/me/.local/share/easbot',
+    config: '/Users/me/.config/easbot',
+    state: '/Users/me/.local/state/easbot',
+    cache: '/Users/me/.cache/easbot',
+    log: '/Users/me/.local/state/easbot/log',
+    bin: '/Users/me/.local/bin',
+  },
+});
+
+setInstanceAdapter({
+  directory: '/repo',
+  worktree: '/repo',
+});
+```
+
+When no adapter is set, `@easbot/skills` falls back to `xdg-basedir` + `homedir()`, keeping full backward compatibility with the v1 standalone CLI.
+
+## Data Layout
+
+| Path | Purpose |
+|---|---|
+| `${Global.Path.data}/skills/` | Skill directory loaded by the agent at runtime |
+| `${Global.Path.data}/state/skills/.skill-lock.json` | Global install lockfile |
+| `<cwd>/.agents/skills/` / `<cwd>/skills/` | Project-level skill directories |
+| `<cwd>/skills-lock.json` | Project-level lockfile |
+| `<home>/.config/easbot/skills/` | XDG config fallback |
+
+> When delegated from `@easbot/agent`, everything lands under `${Global.Path.data}` — sibling to Gateway / MCP / Session / Contact modules.
+
+## Development
+
+```bash
+# Install dependencies
+pnpm install
+
+# Build (produces dist/ + .d.ts)
+pnpm build
+
+# Watch build
+pnpm dev
+
+# Tests (vitest; single file: npx vitest run src/__tests__/xxx.test.ts)
+pnpm test
+pnpm test:run
+
+# Code quality
+pnpm biome-lint      # biome check .
+pnpm biome-fix       # biome check --write .
+pnpm biome-format    # biome format .
+
+# Type check
+pnpm type-check
+
+# Clean
+pnpm clean
+```
+
+## Publishing
+
+```bash
+# Linux / macOS
+pnpm publish:npm           # = bash scripts/publish.sh
+
+# Windows PowerShell
+pnpm publish:npm:win       # = powershell -ExecutionPolicy Bypass -File scripts/publish.ps1
+
+# Equivalent manual flow
+pnpm build
+pnpm publish --access public --git-checks false --registry https://registry.npmjs.org
+```
+
+## Runtime Notes
+
+- Uses Node built-ins (`fs/promises`, `node:os`, `node:path`, `node:child_process`); **not** browser-compatible.
+- Pulls in `simple-git`, `@vercel/detect-agent`, `@clack/prompts`, `picocolors`, `xdg-basedir`, `zod`, `yaml` for GitHub access, agent detection, interactive prompts, terminal styling, XDG resolution, and frontmatter validation.
+- `engines.node >= 22.22.3` — Node 22 LTS recommended.
+
+## License
+
+MIT

package/README.md

@@ -0,0 +1,202 @@
+[English](./README.en.md) | 中文
+
+# @easbot/skills
+
+EASBot 技能包管理子系统：负责从 GitHub / Well-Known / 本地路径发现、安装、移除、搜索、更新、同步与一次性使用技能（SKILL.md）。
+
+既可作为独立 CLI（`easbot skills ...`），也可被 `@easbot/agent` 主 CLI 通过 Commander.js 委派调用，实现 `easbot agent skills ...` 与 `easbot skills ...` 等价。
+
+## 特性
+
+- **类型安全**：完整 TypeScript 类型 + Zod frontmatter 校验
+- **多源支持**：GitHub 仓库 shorthand / HTTPS / SSH / Well-Known / 本地路径
+- **多 Agent 兼容**：Claude Code、Cursor、AiderDesk、Amp、Antigravity、Zed、Codex、Hermes、Vibe、AutoHand、Eve 等
+- **依赖注入**：`setGlobalAdapter / setInstanceAdapter / setAgentAdapter` 让宿主（agent / gateway）注入 `IGlobal.Path`、`IInstance.directory`、SubAgentRunner / LocalAgentRunner，统一数据树
+- **增量同步**：基于本地 SHA-256 锁文件的 `add / remove / update / sync` 增量操作
+- **i18n**：内置 zh-CN / en-US 两套翻译，所有面向用户文案走 `t()`，未命中 key 时回退原文
+- **遥测与安全审计**：内置 `skills.sh` partner audit 上报与 OpenClaw 风险提示
+
+## 安装
+
+```bash
+pnpm add @easbot/skills
+```
+
+或作为 monorepo 工作区依赖：
+
+```json
+{
+  "dependencies": {
+    "@easbot/skills": "workspace:*"
+  }
+}
+```
+
+## CLI 用法
+
+### 独立 CLI
+
+```bash
+# 添加技能
+easbot skills add houjallen/agent-skills
+easbot skills add https://github.com/houjallen/agent-skills -g
+
+# 搜索
+easbot skills find typescript --owner houjallen
+
+# 列出已安装
+easbot skills list --json
+
+# 移除
+easbot skills remove my-skill -y
+
+# 更新
+easbot skills update -g
+
+# 一次性使用（不修改锁定文件）
+easbot skills use houjallen/agent-skills@houjallen
+
+# 从 node_modules 同步 / 从锁定文件还原
+easbot skills experimental_sync
+easbot skills experimental_install
+
+# 初始化新技能
+easbot skills init my-skill
+```
+
+### 被宿主 CLI 委派
+
+`@easbot/agent` 通过 `handleSkillsCli(args, deps)` 复用所有子命令：
+
+```typescript
+import { handleSkillsCli, setGlobalAdapter, setInstanceAdapter } from '@easbot/skills';
+
+setGlobalAdapter({ Path: Global.Path });
+setInstanceAdapter({ directory: ctx.config.directory, worktree: Instance.worktree });
+
+await handleSkillsCli(['add', 'houjallen/agent-skills', '-y'], {
+  version: ctx.programVersion,
+});
+```
+
+## API
+
+| 模块 | 导出 | 说明 |
+|---|---|---|
+| `add` | `runAdd / parseAddOptions / initTelemetry` | 技能添加主流程 |
+| `remove` | `removeCommand / parseRemoveOptions` | 技能移除 |
+| `list` | `runList / parseListOptions` | 列出已安装技能 |
+| `find` | `runFind / parseFindOptions / searchSkillsAPI` | skills.sh 搜索 |
+| `update` | `runUpdate / parseUpdateOptions` | 增量更新 |
+| `install` | `runInstallFromLock` | 从 skills-lock.json 还原 |
+| `sync` | `runSync / parseSyncOptions` | 从 node_modules 同步 |
+| `use` | `runUse / parseUseOptions / buildUsePrompt` | 一次性使用 |
+| `cli-handler` | `handleSkillsCli / renderBanner / renderHelp / SkillsCliDeps / SkillsCliResult` | CLI 桥接 |
+| `interfaces` | `setGlobalAdapter / setInstanceAdapter / setAgentAdapter / getGlobal / getInstance / ...` | 依赖注入 |
+| `agents` | `agents / detectInstalledAgents / getUniversalAgents / ...` | Agent 元数据 |
+| `installer` | `installSkillForAgent / listInstalledSkills / getCanonicalSkillsDir` | 物理安装 |
+| `skill-lock` | `readSkillLock / writeSkillLock / addSkillToLock / removeSkillFromLock` | 全局锁定文件 |
+| `local-lock` | `readLocalLock / writeLocalLock / computeSkillFolderHash` | 项目级锁定文件 |
+| `telemetry` | `track / flushTelemetry / setVersion / fetchAuditData` | 使用统计 + 安全审计 |
+| `i18n` | `t / initI18n / registerI18nResources / changeI18nLanguage` | 国际化 |
+| `frontmatter` | `parseFrontmatter` | YAML frontmatter 解析 |
+| `providers` | `wellKnownProvider / registry / findProvider` | Well-Known 等主机提供方 |
+
+## 全局路径注入
+
+为避免与宿主（agent / gateway）抢用 XDG / home 目录，`@easbot/skills` 默认通过依赖注入获取路径：
+
+```typescript
+import {
+  setGlobalAdapter,    // 注入 IGlobal.Path
+  setInstanceAdapter,  // 注入 IInstance.directory / worktree
+  setAgentAdapter,     // 注入 SubAgentRunner / LocalAgentRunner / triggerEvent
+  getHomeDir,
+  getXdgConfig,
+  getXdgData,
+  getProjectDirectory,
+} from '@easbot/skills';
+
+setGlobalAdapter({
+  Path: {
+    home: '/Users/me',
+    data: '/Users/me/.local/share/easbot',
+    config: '/Users/me/.config/easbot',
+    state: '/Users/me/.local/state/easbot',
+    cache: '/Users/me/.cache/easbot',
+    log: '/Users/me/.local/state/easbot/log',
+    bin: '/Users/me/.local/bin',
+  },
+});
+
+setInstanceAdapter({
+  directory: '/repo',
+  worktree: '/repo',
+});
+```
+
+未注入时，skills 包回退到 `xdg-basedir` + `homedir()`，保持与 v1 CLI 完全兼容。
+
+## 数据目录约定
+
+| 路径 | 用途 |
+|---|---|
+| `${Global.Path.data}/skills/` | Agent 运行时加载的技能目录（运行时扫描） |
+| `${Global.Path.data}/state/skills/.skill-lock.json` | 全局安装锁定文件 |
+| `<cwd>/.agents/skills/` / `<cwd>/skills/` | 项目级技能目录 |
+| `<cwd>/skills-lock.json` | 项目级锁定文件 |
+| `<home>/.config/easbot/skills/` | XDG 配置兜底 |
+
+> 当被 `@easbot/agent` 委派时，所有路径会落到 `${Global.Path.data}` 这棵统一数据树下，与 Gateway / MCP / Session / Contact 等模块并列。
+
+## 开发
+
+```bash
+# 安装依赖
+pnpm install
+
+# 构建（产出 dist/，同时生成 .d.ts）
+pnpm build
+
+# 监听构建
+pnpm dev
+
+# 测试（vitest，单跑某个文件：npx vitest run src/__tests__/xxx.test.ts）
+pnpm test
+pnpm test:run
+
+# 代码质量
+pnpm biome-lint      # biome check .
+pnpm biome-fix       # biome check --write .
+pnpm biome-format    # biome format .
+
+# 类型检查
+pnpm type-check
+
+# 清理
+pnpm clean
+```
+
+## 发布
+
+```bash
+# Linux / macOS
+pnpm publish:npm           # = bash scripts/publish.sh
+
+# Windows PowerShell
+pnpm publish:npm:win       # = powershell -ExecutionPolicy Bypass -File scripts/publish.ps1
+
+# 手动等价
+pnpm build
+pnpm publish --access public --git-checks false --registry https://registry.npmjs.org
+```
+
+## 浏览器 / 跨运行时说明
+
+- 内部使用 Node 内置模块（`fs/promises`、`node:os`、`node:path`、`node:child_process`），不能直接在浏览器运行。
+- 通过 `simple-git`、`@vercel/detect-agent`、`@clack/prompts`、`picocolors`、`xdg-basedir`、`zod`、`yaml` 等实现 GitHub 拉取、Agent 环境探测、交互问答、终端着色、XDG 解析与 frontmatter 校验。
+- `engines.node >= 22.22.3`，推荐 Node 22 LTS。
+
+## 许可证
+
+MIT

package/dist/chunks/blob-BHATBRFW.cjs

@@ -0,0 +1 @@
+'use strict';var chunkEOOPF3RI_cjs=require('./chunk-EOOPF3RI.cjs');Object.defineProperty(exports,"BLOB_ALLOWED_REPOS",{enumerable:true,get:function(){return chunkEOOPF3RI_cjs.f}});Object.defineProperty(exports,"fetchRepoTree",{enumerable:true,get:function(){return chunkEOOPF3RI_cjs.i}});Object.defineProperty(exports,"findSkillMdPaths",{enumerable:true,get:function(){return chunkEOOPF3RI_cjs.k}});Object.defineProperty(exports,"getSkillFolderHashFromTree",{enumerable:true,get:function(){return chunkEOOPF3RI_cjs.j}});Object.defineProperty(exports,"resetRepoTreeAuthState",{enumerable:true,get:function(){return chunkEOOPF3RI_cjs.h}});Object.defineProperty(exports,"toSkillSlug",{enumerable:true,get:function(){return chunkEOOPF3RI_cjs.g}});Object.defineProperty(exports,"tryBlobInstall",{enumerable:true,get:function(){return chunkEOOPF3RI_cjs.l}});

package/dist/chunks/blob-SJSODFTU.mjs

@@ -0,0 +1 @@
+export{e as BLOB_ALLOWED_REPOS,h as fetchRepoTree,j as findSkillMdPaths,i as getSkillFolderHashFromTree,g as resetRepoTreeAuthState,f as toSkillSlug,k as tryBlobInstall}from'./chunk-MH2XZDJ5.mjs';

package/dist/chunks/chunk-EOOPF3RI.cjs

@@ -0,0 +1,2 @@
+'use strict';var crypto=require('crypto'),yaml=require('yaml');var C=Object.defineProperty;var y=(n,t,e)=>t in n?C(n,t,{enumerable:true,configurable:true,writable:true,value:e}):n[t]=e;var N=(n,t,e)=>y(n,typeof t!="symbol"?t+"":t,e);var P=()=>typeof document>"u"?new URL(`file:${__filename}`).href:document.currentScript&&document.currentScript.tagName.toUpperCase()==="SCRIPT"?document.currentScript.src:new URL("main.js",document.baseURI).href,S=P();function b(n){let t=n.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n?([\s\S]*)$/);return t?{data:yaml.parse(t[1])??{},content:t[2]??""}:{data:{},content:n}}var I=/\x1b\[[\x30-\x3f]*[\x20-\x2f]*[\x40-\x7e]/g,E=/\x1b\][\s\S]*?(?:\x07|\x1b\\)/g,T=/\x1b[P^_][\s\S]*?(?:\x1b\\)/g,F=/\x1b[\x20-\x7e]/g,U=/[\x80-\x9f]/g,$=/[\x00-\x06\x07\x08\x0b\x0c\x0d-\x1a\x1c-\x1f\x7f]/g;function A(n){return n.replace(E,"").replace(T,"").replace(I,"").replace(F,"").replace(U,"").replace($,"")}function x(n){return A(n).replace(/[\r\n]+/g," ").trim()}var B=process.env.SKILLS_DOWNLOAD_URL||"https://skills.sh",D={"zapier/connectors":{downloadUrl:n=>`https://connectors-skills.zapier.com/download/${encodeURIComponent(n)}/snapshot.json`}},L=1e4;function m(n){return n.toLowerCase().replace(/[\s_]+/g,"-").replace(/[^a-z0-9-]/g,"").replace(/-+/g,"-").replace(/^-|-$/g,"")}var R=false;function et(){R=false;}async function w(n,t,e){try{let i=`https://api.github.com/repos/${n}/git/trees/${encodeURIComponent(t)}?recursive=1`,l={Accept:"application/vnd.github.v3+json","User-Agent":"skills-cli"};e&&(l.Authorization=`Bearer ${e}`);let a=await fetch(i,{headers:l,signal:AbortSignal.timeout(L)});if(a.ok){let c=await a.json();return {tree:{sha:c.sha,branch:t,tree:c.tree},rateLimited:!1}}return {tree:null,rateLimited:a.status===403&&a.headers.get("x-ratelimit-remaining")==="0"}}catch{return {tree:null,rateLimited:false}}}async function O(n,t,e){let i=t?[t]:["HEAD","main","master"];if(R&&e){let o=e();if(!o)return null;for(let c of i){let h=await w(n,c,o);if(h.tree)return h.tree}return null}let l=false;for(let o of i){let c=await w(n,o,null);if(c.tree)return c.tree;if(c.rateLimited){l=true;break}}if(!l||!e)return null;R=true;let a=e();if(!a)return null;for(let o of i){let c=await w(n,o,a);if(c.tree)return c.tree}return null}function nt(n,t){let e=t.replace(/\\/g,"/");return e.toLowerCase().endsWith("/skill.md")?e=e.slice(0,-9):e.toLowerCase().endsWith("skill.md")&&(e=e.slice(0,-8)),e.endsWith("/")&&(e=e.slice(0,-1)),e?n.tree.find(l=>l.type==="tree"&&l.path===e)?.sha??null:n.sha}var W=["","skills/","skills/.curated/","skills/.experimental/","skills/.system/",".agents/skills/",".claude/skills/",".cline/skills/",".codebuddy/skills/",".codex/skills/",".commandcode/skills/",".continue/skills/",".github/skills/",".goose/skills/",".iflow/skills/",".junie/skills/",".kilocode/skills/",".kiro/skills/",".mux/skills/",".neovate/skills/",".opencode/skills/",".openhands/skills/",".pi/skills/",".qoder/skills/",".roo/skills/",".trae/skills/",".windsurf/skills/",".zencoder/skills/"];function H(n,t){let e=n.tree.filter(d=>d.type==="blob"&&d.path.toLowerCase().endsWith("skill.md")).map(d=>d.path),i=t?t.endsWith("/")?t:t+"/":"",l=i?e.filter(d=>d.startsWith(i)||d===i+"SKILL.md"):e;if(l.length===0)return [];let a=[],o=new Set,c=new Set(["node_modules",".git","dist","build","__pycache__"]),h=new Set(l.map(d=>d.toLowerCase()));for(let d of W){let g=i+d,r=d!=="";for(let s of l){if(!s.startsWith(g))continue;let u=s.slice(g.length);if(u.toLowerCase()==="skill.md"){o.has(s)||(a.push(s),o.add(s));continue}let f=u.split("/");if(f.length===2&&f[1].toLowerCase()==="skill.md"){o.has(s)||(a.push(s),o.add(s));continue}if(r&&f.length===3&&f[2].toLowerCase()==="skill.md"&&!c.has(f[0])&&!c.has(f[1])){let p=`${g}${f[0]}/SKILL.md`.toLowerCase();!h.has(p)&&!o.has(s)&&(a.push(s),o.add(s));}}}return a.length>0?a:l.filter(d=>d.split("/").length<=6)}async function z(n,t,e){try{let i=`https://raw.githubusercontent.com/${n}/${t}/${e}`,l=await fetch(i,{signal:AbortSignal.timeout(L)});return l.ok?await l.text():null}catch{return null}}async function v(n,t){try{let[e,i]=n.split("/"),l=`${B}/api/download/${encodeURIComponent(e)}/${encodeURIComponent(i)}/${encodeURIComponent(t)}`,o=D[n.toLowerCase()]?.downloadUrl(t)??l,c=await fetch(o,{signal:AbortSignal.timeout(L)});return c.ok?await c.json():null}catch{return null}}function j(n){let t=crypto.createHash("sha256");for(let e of [...n].sort((i,l)=>i.path.localeCompare(l.path)))t.update(e.path),t.update(e.contents);return t.digest("hex")}async function st(n,t={}){let e=await O(n,t.ref,t.getToken);if(!e)return null;let i=H(e,t.subpath);if(i.length===0)return null;if(t.skillFilter){let r=m(t.skillFilter),s=i.filter(u=>{let f=u.split("/");if(f.length<2)return  false;let p=f[f.length-2];return m(p)===r});s.length>0&&(i=s);}let l=await Promise.all(i.map(async r=>{let s=await z(n,e.branch,r);return {mdPath:r,content:s}})),a=[];for(let{mdPath:r,content:s}of l){if(!s)continue;let{data:u}=b(s);if(!u.name||!u.description||typeof u.name!="string"||typeof u.description!="string"||u.metadata?.internal===true&&!t.includeInternal)continue;let p=x(u.name),k=x(u.description);a.push({mdPath:r,name:p,description:k,content:s,slug:m(p),metadata:u.metadata});}if(a.length===0)return null;let o=a;if(t.skillFilter){let r=m(t.skillFilter),s=a.filter(u=>u.slug===r);if(s.length>0&&(o=s),o.length===0)return null}let c=n.toLowerCase(),h=await Promise.all(o.map(async r=>{let s=await v(c,r.slug);return {skill:r,download:s}}));return h.every(r=>r.download!==null)?{skills:h.map(({skill:r,download:s})=>{let u=r.mdPath.toLowerCase(),p=(u.endsWith("/skill.md")?r.mdPath.slice(0,-9):u==="skill.md"?"":r.mdPath.slice(0,-9))?s.files:s.files.filter(k=>k.path.toLowerCase()==="skill.md");return {name:r.name,description:r.description,path:"",rawContent:r.content,metadata:r.metadata,files:p,snapshotHash:p.length===s.files.length?s.hash:j(p),repoPath:r.mdPath}}),tree:e}:null}
+exports.a=N;exports.b=S;exports.c=b;exports.d=A;exports.e=x;exports.f=D;exports.g=m;exports.h=et;exports.i=O;exports.j=nt;exports.k=H;exports.l=st;

package/dist/chunks/chunk-MH2XZDJ5.mjs

@@ -0,0 +1,2 @@
+import {createHash}from'crypto';import {parse}from'yaml';var C=Object.defineProperty;var P=(n,t,e)=>t in n?C(n,t,{enumerable:true,configurable:true,writable:true,value:e}):n[t]=e;var K=(n,t,e)=>P(n,typeof t!="symbol"?t+"":t,e);function y(n){let t=n.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n?([\s\S]*)$/);return t?{data:parse(t[1])??{},content:t[2]??""}:{data:{},content:n}}var I=/\x1b\[[\x30-\x3f]*[\x20-\x2f]*[\x40-\x7e]/g,E=/\x1b\][\s\S]*?(?:\x07|\x1b\\)/g,F=/\x1b[P^_][\s\S]*?(?:\x1b\\)/g,T=/\x1b[\x20-\x7e]/g,$=/[\x80-\x9f]/g,A=/[\x00-\x06\x07\x08\x0b\x0c\x0d-\x1a\x1c-\x1f\x7f]/g;function B(n){return n.replace(E,"").replace(F,"").replace(I,"").replace(T,"").replace($,"").replace(A,"")}function S(n){return B(n).replace(/[\r\n]+/g," ").trim()}var U=process.env.SKILLS_DOWNLOAD_URL||"https://skills.sh",M={"zapier/connectors":{downloadUrl:n=>`https://connectors-skills.zapier.com/download/${encodeURIComponent(n)}/snapshot.json`}},L=1e4;function m(n){return n.toLowerCase().replace(/[\s_]+/g,"-").replace(/[^a-z0-9-]/g,"").replace(/-+/g,"-").replace(/^-|-$/g,"")}var w=false;function tt(){w=false;}async function x(n,t,e){try{let l=`https://api.github.com/repos/${n}/git/trees/${encodeURIComponent(t)}?recursive=1`,i={Accept:"application/vnd.github.v3+json","User-Agent":"skills-cli"};e&&(i.Authorization=`Bearer ${e}`);let a=await fetch(l,{headers:i,signal:AbortSignal.timeout(L)});if(a.ok){let c=await a.json();return {tree:{sha:c.sha,branch:t,tree:c.tree},rateLimited:!1}}return {tree:null,rateLimited:a.status===403&&a.headers.get("x-ratelimit-remaining")==="0"}}catch{return {tree:null,rateLimited:false}}}async function O(n,t,e){let l=t?[t]:["HEAD","main","master"];if(w&&e){let o=e();if(!o)return null;for(let c of l){let p=await x(n,c,o);if(p.tree)return p.tree}return null}let i=false;for(let o of l){let c=await x(n,o,null);if(c.tree)return c.tree;if(c.rateLimited){i=true;break}}if(!i||!e)return null;w=true;let a=e();if(!a)return null;for(let o of l){let c=await x(n,o,a);if(c.tree)return c.tree}return null}function et(n,t){let e=t.replace(/\\/g,"/");return e.toLowerCase().endsWith("/skill.md")?e=e.slice(0,-9):e.toLowerCase().endsWith("skill.md")&&(e=e.slice(0,-8)),e.endsWith("/")&&(e=e.slice(0,-1)),e?n.tree.find(i=>i.type==="tree"&&i.path===e)?.sha??null:n.sha}var W=["","skills/","skills/.curated/","skills/.experimental/","skills/.system/",".agents/skills/",".claude/skills/",".cline/skills/",".codebuddy/skills/",".codex/skills/",".commandcode/skills/",".continue/skills/",".github/skills/",".goose/skills/",".iflow/skills/",".junie/skills/",".kilocode/skills/",".kiro/skills/",".mux/skills/",".neovate/skills/",".opencode/skills/",".openhands/skills/",".pi/skills/",".qoder/skills/",".roo/skills/",".trae/skills/",".windsurf/skills/",".zencoder/skills/"];function H(n,t){let e=n.tree.filter(d=>d.type==="blob"&&d.path.toLowerCase().endsWith("skill.md")).map(d=>d.path),l=t?t.endsWith("/")?t:t+"/":"",i=l?e.filter(d=>d.startsWith(l)||d===l+"SKILL.md"):e;if(i.length===0)return [];let a=[],o=new Set,c=new Set(["node_modules",".git","dist","build","__pycache__"]),p=new Set(i.map(d=>d.toLowerCase()));for(let d of W){let g=l+d,r=d!=="";for(let s of i){if(!s.startsWith(g))continue;let u=s.slice(g.length);if(u.toLowerCase()==="skill.md"){o.has(s)||(a.push(s),o.add(s));continue}let f=u.split("/");if(f.length===2&&f[1].toLowerCase()==="skill.md"){o.has(s)||(a.push(s),o.add(s));continue}if(r&&f.length===3&&f[2].toLowerCase()==="skill.md"&&!c.has(f[0])&&!c.has(f[1])){let h=`${g}${f[0]}/SKILL.md`.toLowerCase();!p.has(h)&&!o.has(s)&&(a.push(s),o.add(s));}}}return a.length>0?a:i.filter(d=>d.split("/").length<=6)}async function z(n,t,e){try{let l=`https://raw.githubusercontent.com/${n}/${t}/${e}`,i=await fetch(l,{signal:AbortSignal.timeout(L)});return i.ok?await i.text():null}catch{return null}}async function v(n,t){try{let[e,l]=n.split("/"),i=`${U}/api/download/${encodeURIComponent(e)}/${encodeURIComponent(l)}/${encodeURIComponent(t)}`,o=M[n.toLowerCase()]?.downloadUrl(t)??i,c=await fetch(o,{signal:AbortSignal.timeout(L)});return c.ok?await c.json():null}catch{return null}}function j(n){let t=createHash("sha256");for(let e of [...n].sort((l,i)=>l.path.localeCompare(i.path)))t.update(e.path),t.update(e.contents);return t.digest("hex")}async function nt(n,t={}){let e=await O(n,t.ref,t.getToken);if(!e)return null;let l=H(e,t.subpath);if(l.length===0)return null;if(t.skillFilter){let r=m(t.skillFilter),s=l.filter(u=>{let f=u.split("/");if(f.length<2)return  false;let h=f[f.length-2];return m(h)===r});s.length>0&&(l=s);}let i=await Promise.all(l.map(async r=>{let s=await z(n,e.branch,r);return {mdPath:r,content:s}})),a=[];for(let{mdPath:r,content:s}of i){if(!s)continue;let{data:u}=y(s);if(!u.name||!u.description||typeof u.name!="string"||typeof u.description!="string"||u.metadata?.internal===true&&!t.includeInternal)continue;let h=S(u.name),k=S(u.description);a.push({mdPath:r,name:h,description:k,content:s,slug:m(h),metadata:u.metadata});}if(a.length===0)return null;let o=a;if(t.skillFilter){let r=m(t.skillFilter),s=a.filter(u=>u.slug===r);if(s.length>0&&(o=s),o.length===0)return null}let c=n.toLowerCase(),p=await Promise.all(o.map(async r=>{let s=await v(c,r.slug);return {skill:r,download:s}}));return p.every(r=>r.download!==null)?{skills:p.map(({skill:r,download:s})=>{let u=r.mdPath.toLowerCase(),h=(u.endsWith("/skill.md")?r.mdPath.slice(0,-9):u==="skill.md"?"":r.mdPath.slice(0,-9))?s.files:s.files.filter(k=>k.path.toLowerCase()==="skill.md");return {name:r.name,description:r.description,path:"",rawContent:r.content,metadata:r.metadata,files:h,snapshotHash:h.length===s.files.length?s.hash:j(h),repoPath:r.mdPath}}),tree:e}:null}
+export{K as a,y as b,B as c,S as d,M as e,m as f,tt as g,O as h,et as i,H as j,nt as k};