@floomhq/skills 0.2.0 → 0.2.2

package/dist/lib/floom-lock.js

@@ -1,66 +0,0 @@
-import { readFile, writeFile, stat, readdir } from "node:fs/promises";
-import { join, relative, sep, posix } from "node:path";
-import { createHash } from "node:crypto";
-const EMPTY = { schema_version: "0.1", skills: {} };
-export async function readLock(projectDir) {
-    try {
-        const raw = await readFile(join(projectDir, "floom.lock"), "utf8");
-        const parsed = JSON.parse(raw);
-        return parsed.schema_version === "0.1" ? parsed : { ...EMPTY };
-    }
-    catch (e) {
-        if (e.code === "ENOENT")
-            return { ...EMPTY };
-        throw e;
-    }
-}
-export async function writeLock(projectDir, lock) {
-    await writeFile(join(projectDir, "floom.lock"), JSON.stringify(lock, null, 2) + "\n", "utf8");
-}
-export function setLockEntry(lock, ref, entry) {
-    return { ...lock, skills: { ...lock.skills, [ref]: entry } };
-}
-export function removeLockEntry(lock, ref) {
-    const { [ref]: _, ...rest } = lock.skills;
-    return { ...lock, skills: rest };
-}
-export async function hashInstalledFolder(folderAbs) {
-    const out = [];
-    async function walk(dir) {
-        let entries;
-        try {
-            entries = await readdir(dir, { withFileTypes: true });
-        }
-        catch {
-            return;
-        }
-        for (const entry of entries) {
-            const abs = join(dir, entry.name);
-            if (entry.isSymbolicLink())
-                continue;
-            if (entry.isDirectory()) {
-                await walk(abs);
-                continue;
-            }
-            if (!entry.isFile())
-                continue;
-            const buf = await readFile(abs);
-            const rel = relative(folderAbs, abs).split(sep).join(posix.sep);
-            out.push({
-                relPath: rel,
-                sha256: createHash("sha256").update(buf).digest("hex"),
-                size: buf.length,
-            });
-        }
-    }
-    try {
-        await stat(folderAbs);
-    }
-    catch {
-        return out;
-    }
-    await walk(folderAbs);
-    out.sort((a, b) => a.relPath.localeCompare(b.relPath));
-    return out;
-}
-//# sourceMappingURL=floom-lock.js.map

package/dist/lib/floom-lock.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"floom-lock.js","sourceRoot":"","sources":["../../src/lib/floom-lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAS,IAAI,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAiBzC,MAAM,KAAK,GAAc,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AAE/D,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,UAAkB;IAC/C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAc,CAAC;QAC5C,OAAO,MAAM,CAAC,cAAc,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC;IACjE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC;QACxE,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,UAAkB,EAAE,IAAe;IACjE,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;AAChG,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAe,EAAE,GAAW,EAAE,KAAqB;IAC9E,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAe,EAAE,GAAW;IAC1D,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;IAC1C,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACnC,CAAC;AAUD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,SAAiB;IACzD,MAAM,GAAG,GAAwB,EAAE,CAAC;IACpC,KAAK,UAAU,IAAI,CAAC,GAAW;QAC7B,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YAAC,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO;QAAC,CAAC;QAChF,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,KAAK,CAAC,cAAc,EAAE;gBAAE,SAAS;YACrC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YACvD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;gBAAE,SAAS;YAC9B,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;YAChC,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAChE,GAAG,CAAC,IAAI,CAAC;gBACP,OAAO,EAAE,GAAG;gBACZ,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBACtD,IAAI,EAAE,GAAG,CAAC,MAAM;aACjB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;IACtB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/lib/output.d.ts

@@ -1,11 +0,0 @@
-export declare const log: {
-    info: (msg: string) => void;
-    ok: (msg: string) => void;
-    warn: (msg: string) => void;
-    err: (msg: string) => void;
-    step: (msg: string) => void;
-    heading: (msg: string) => void;
-    kv: (key: string, value: string) => void;
-    blank: () => void;
-};
-export declare function exitWith(code: number, msg?: string): never;

package/dist/lib/output.js

@@ -1,17 +0,0 @@
-import chalk from "chalk";
-export const log = {
-    info: (msg) => console.log(msg),
-    ok: (msg) => console.log(chalk.green("✓ ") + msg),
-    warn: (msg) => console.log(chalk.yellow("! ") + msg),
-    err: (msg) => console.error(chalk.red("✗ ") + msg),
-    step: (msg) => console.log(chalk.dim("· ") + msg),
-    heading: (msg) => console.log("\n" + chalk.bold(msg)),
-    kv: (key, value) => console.log(`  ${chalk.dim(key.padEnd(16))}${value}`),
-    blank: () => console.log(""),
-};
-export function exitWith(code, msg) {
-    if (msg)
-        log.err(msg);
-    process.exit(code);
-}
-//# sourceMappingURL=output.js.map

package/dist/lib/output.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"output.js","sourceRoot":"","sources":["../../src/lib/output.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,MAAM,CAAC,MAAM,GAAG,GAAG;IACjB,IAAI,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;IACvC,EAAE,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC;IACzD,IAAI,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC;IAC5D,GAAG,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC;IAC1D,IAAI,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC;IACzD,OAAO,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7D,EAAE,EAAE,CAAC,GAAW,EAAE,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,EAAE,CAAC;IACzF,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;CAC7B,CAAC;AAEF,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,GAAY;IACjD,IAAI,GAAG;QAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACtB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC"}

package/dist/version.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC"}

package/src/api-client.ts

@@ -1,80 +0,0 @@
-import { FloomError, type ErrorCode } from "@floom/shared";
-import { getApiUrl, readAuth } from "./config.js";
-import { VERSION } from "./version.js";
-
-export interface ApiOptions {
-  method?: "GET" | "POST" | "PATCH" | "DELETE" | "PUT";
-  body?: unknown;
-  authRequired?: boolean;
-  query?: Record<string, string | number | boolean | undefined>;
-}
-
-export async function api<T = unknown>(path: string, opts: ApiOptions = {}): Promise<T> {
-  const auth = await readAuth();
-  if (opts.authRequired && !auth) {
-    throw new FloomError("AUTH_REQUIRED" as ErrorCode, "Not logged in. Run: floom login");
-  }
-
-  const url = new URL((auth?.apiUrl ?? getApiUrl()) + path);
-  if (opts.query) {
-    for (const [k, v] of Object.entries(opts.query)) {
-      if (v !== undefined) url.searchParams.set(k, String(v));
-    }
-  }
-
-  const headers: Record<string, string> = {
-    "Content-Type": "application/json",
-    "User-Agent": `floom-cli/${VERSION}`,
-    "x-floom-cli-version": VERSION,
-  };
-  if (auth) headers.Authorization = `Bearer ${auth.token}`;
-
-  const res = await fetch(url.toString(), {
-    method: opts.method ?? "GET",
-    headers,
-    body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined,
-  });
-
-  const text = await res.text();
-  let json: any = null;
-  try { json = text ? JSON.parse(text) : null; } catch { /* not JSON */ }
-
-  if (!res.ok) {
-    const err = json?.error ?? {};
-    throw new FloomError(
-      (err.code ?? "INTERNAL_ERROR") as ErrorCode,
-      err.message ?? `HTTP ${res.status} ${res.statusText}`,
-      { status: res.status, requestId: err.request_id },
-    );
-  }
-  return json as T;
-}
-
-// Variants for binary upload/download to Supabase Storage signed URLs (no auth header)
-export async function rawPut(url: string, body: Buffer | Uint8Array, contentType = "application/octet-stream"): Promise<void> {
-  // Convert to BufferSource that fetch accepts
-  const u8 = body instanceof Buffer ? new Uint8Array(body) : body;
-  const res = await fetch(url, {
-    method: "PUT",
-    headers: { "Content-Type": contentType },
-    body: u8 as BodyInit,
-  });
-  if (!res.ok) {
-    throw new FloomError(
-      "UPLOAD_FAILED" as ErrorCode,
-      `Upload failed: HTTP ${res.status} ${res.statusText}`,
-    );
-  }
-}
-
-export async function rawGet(url: string): Promise<Buffer> {
-  const res = await fetch(url);
-  if (!res.ok) {
-    throw new FloomError(
-      "DOWNLOAD_FAILED" as ErrorCode,
-      `Download failed: HTTP ${res.status} ${res.statusText}`,
-    );
-  }
-  const ab = await res.arrayBuffer();
-  return Buffer.from(ab);
-}

package/src/commands/info.ts

@@ -1,36 +0,0 @@
-import { parseSkillRef } from "@floom/shared";
-import { api } from "../api-client.js";
-import { log } from "../lib/output.js";
-
-interface InfoResponse {
-  ref: string;
-  title: string;
-  description: string;
-  visibility: "private" | "unlisted" | "public";
-  latest_version: string;
-  owner: { handle: string; display_name?: string };
-  has_scripts: boolean;
-  declared_scripts?: Array<{ path: string; description: string }>;
-}
-
-export async function infoCommand(refStr: string): Promise<void> {
-  const ref = parseSkillRef(refStr);
-  if (!ref) {
-    log.err(`Invalid skill ref: ${refStr}`);
-    process.exit(1);
-  }
-  const r = await api<InfoResponse>(`/skills/${ref.owner}/${ref.slug}`);
-
-  log.heading(r.ref);
-  log.kv("Title", r.title);
-  log.kv("Description", r.description);
-  log.kv("Latest", r.latest_version);
-  log.kv("Visibility", r.visibility);
-  log.kv("Owner", `@${r.owner.handle}${r.owner.display_name ? ` (${r.owner.display_name})` : ""}`);
-  if (r.has_scripts) {
-    log.kv("Scripts", "yes (review before activating)");
-  }
-  log.blank();
-  log.info("Install:");
-  log.info(`  floom install ${r.ref}`);
-}

package/src/commands/init.ts

@@ -1,109 +0,0 @@
-import { writeFile, stat, readFile } from "node:fs/promises";
-import { join, basename } from "node:path";
-import prompts from "prompts";
-import { isValidSlug, slugErrorMessage, type SkillManifest } from "@floom/shared";
-import { log } from "../lib/output.js";
-
-async function pathExists(p: string): Promise<boolean> {
-  try { await stat(p); return true; } catch { return false; }
-}
-
-export async function initCommand(): Promise<void> {
-  const cwd = process.cwd();
-  const folderName = basename(cwd);
-
-  if (await pathExists(join(cwd, "skill.json"))) {
-    log.err("skill.json already exists in this folder. Edit it directly or run from a fresh directory.");
-    process.exit(1);
-  }
-
-  const defaultName = folderName.toLowerCase().replace(/[^a-z0-9-]/g, "-").replace(/-+/g, "-").replace(/^-|-$/g, "");
-
-  const answers = await prompts([
-    {
-      type: "text",
-      name: "name",
-      message: "Skill name (lowercase, hyphens):",
-      initial: isValidSlug(defaultName) ? defaultName : "",
-      validate: (v: string) => slugErrorMessage(v) ?? true,
-    },
-    {
-      type: "text",
-      name: "title",
-      message: "Title (human-readable):",
-      initial: (prev: string) => prev.split("-").map((w: string) => w[0]?.toUpperCase() + w.slice(1)).join(" "),
-      validate: (v: string) => v.trim().length > 0 ? true : "title required",
-    },
-    {
-      type: "text",
-      name: "description",
-      message: "One-line description:",
-      validate: (v: string) => v.trim().length > 0 ? true : "description required",
-    },
-    {
-      type: "text",
-      name: "version",
-      message: "Version:",
-      initial: "0.1.0",
-    },
-  ]);
-
-  if (!answers.name) { log.err("Init cancelled."); process.exit(1); }
-
-  const manifest: SkillManifest = {
-    schema_version: "0.1",
-    name: answers.name,
-    title: answers.title,
-    description: answers.description,
-    version: answers.version,
-    entrypoint: "SKILL.md",
-    targets: ["generic"],
-  };
-
-  const skillMd = `---
-name: ${answers.name}
-description: ${answers.description}
----
-
-# ${answers.title}
-
-## Purpose
-
-${answers.description}
-
-## When to use
-
-(Describe when this skill should be activated.)
-
-## Process
-
-1. (Step one)
-2. (Step two)
-
-## Output
-
-(Describe what the skill produces.)
-`;
-
-  const floomIgnore = `# Floom CLI ignore patterns
-# One pattern per line, glob-style
-tmp/
-drafts/
-*.log
-`;
-
-  await writeFile(join(cwd, "skill.json"), JSON.stringify(manifest, null, 2) + "\n", "utf8");
-  await writeFile(join(cwd, "SKILL.md"), skillMd, "utf8");
-  await writeFile(join(cwd, ".floomignore"), floomIgnore, "utf8");
-
-  log.blank();
-  log.ok("Skill scaffolded.");
-  log.kv("skill.json", "manifest (edit metadata)");
-  log.kv("SKILL.md", "instructions for the agent");
-  log.kv(".floomignore", "patterns to exclude from publish");
-  log.blank();
-  log.info("Next:");
-  log.info("  1. Edit SKILL.md");
-  log.info("  2. floom validate");
-  log.info("  3. floom publish");
-}

package/src/commands/install.ts

@@ -1,176 +0,0 @@
-import { mkdir, readdir, rm, rename } from "node:fs/promises";
-import { join, resolve } from "node:path";
-import { tmpdir } from "node:os";
-import {
-  parseSkillRef,
-  formatSkillRef,
-  resolveInstallDir,
-  describeTargetForCli,
-  extractBundle,
-  verifyBundleHash,
-  FloomError,
-  type InstallTarget,
-} from "@floom/shared";
-import { api, rawGet } from "../api-client.js";
-import { readAuth } from "../config.js";
-import { log } from "../lib/output.js";
-import { readLock, writeLock, setLockEntry, hashInstalledFolder } from "../lib/floom-lock.js";
-import { VERSION } from "../version.js";
-
-export interface InstallOptions {
-  for?: InstallTarget;
-  to?: string;
-  global?: boolean;
-  force?: boolean;
-}
-
-interface SkillResponse {
-  ref: string;
-  visibility: "private" | "unlisted" | "public";
-  latest_version: string;
-  has_scripts: boolean;
-  min_floom_version?: string;
-}
-
-interface DownloadResponse {
-  ref: string;
-  version: string;
-  download: { url: string; expires_at: string };
-  bundle_sha256: string;
-  has_scripts: boolean;
-}
-
-const CLI_VERSION = VERSION;
-
-function semverGte(a: string, b: string): boolean {
-  const pa = a.split(".").map(Number);
-  const pb = b.split(".").map(Number);
-  for (let i = 0; i < 3; i++) {
-    if ((pa[i] ?? 0) > (pb[i] ?? 0)) return true;
-    if ((pa[i] ?? 0) < (pb[i] ?? 0)) return false;
-  }
-  return true;
-}
-
-export async function installCommand(refStr: string, opts: InstallOptions = {}): Promise<void> {
-  const ref = parseSkillRef(refStr);
-  if (!ref) {
-    log.err(`Invalid skill ref: ${refStr}`);
-    log.info("Expected: @owner/slug, library-slug/slug, or with @version suffix");
-    process.exit(1);
-  }
-
-  // Get metadata (works anonymously for public skills)
-  let info: SkillResponse;
-  try {
-    info = await api<SkillResponse>(`/skills/${ref.owner}/${ref.slug}`);
-  } catch (e) {
-    if (e instanceof FloomError && e.code === "SKILL_ACCESS_DENIED") {
-      const auth = await readAuth();
-      if (!auth) {
-        log.err(`Cannot access ${formatSkillRef(ref)}.`);
-        log.info("Run `floom login` to install private or unlisted skills.");
-        process.exit(1);
-      }
-      log.err(`You do not have access to ${formatSkillRef(ref)}.`);
-      log.info(`Ask the owner to share it with: ${auth.email}`);
-      process.exit(1);
-    }
-    throw e;
-  }
-
-  if (info.min_floom_version && !semverGte(CLI_VERSION, info.min_floom_version)) {
-    log.err(`This skill requires Floom CLI >= ${info.min_floom_version} (you have ${CLI_VERSION}).`);
-    log.info("Upgrade:");
-    log.info("  npm install -g @floomhq/skills@latest");
-    process.exit(1);
-  }
-
-  // Resolve install destination
-  const target = resolveInstallDir({
-    target: opts.for ?? "generic",
-    to: opts.to,
-    global: opts.global,
-  });
-  const projectDir = opts.global ? process.cwd() : process.cwd();
-  const destFolder = join(target.dir, ref.slug);
-
-  // Conflict check
-  const lock = await readLock(projectDir);
-  const refKey = formatSkillRef({ owner: ref.owner, slug: ref.slug });
-  const existing = lock.skills[refKey];
-  let folderExists = false;
-  try {
-    const entries = await readdir(destFolder);
-    folderExists = entries.length > 0;
-  } catch { /* not exists */ }
-
-  if (folderExists) {
-    if (existing && existing.path === destFolder.replace(projectDir + "/", "")) {
-      // Tracked. Check local edits.
-      const current = await hashInstalledFolder(destFolder);
-      // For V0 we don't have file-level hashes in lock; we conservatively warn unless --force.
-      if (!opts.force) {
-        log.warn(`Folder already exists at ${destFolder} and may contain local edits.`);
-        log.info(`Re-run with --force to overwrite, or remove the folder manually.`);
-        process.exit(1);
-      }
-    } else if (!opts.force) {
-      log.err(`Folder already exists at ${destFolder} (not tracked by floom.lock).`);
-      log.info("Re-run with --force to overwrite, or remove the folder manually.");
-      process.exit(1);
-    }
-  }
-
-  // Download
-  log.step("Fetching skill metadata...");
-  const dl = await api<DownloadResponse>(`/skills/${ref.owner}/${ref.slug}/download`, {
-    query: { version: ref.version },
-  });
-
-  log.step("Downloading bundle...");
-  const buf = await rawGet(dl.download.url);
-  if (!verifyBundleHash(buf, dl.bundle_sha256)) {
-    log.err("Bundle hash mismatch — refusing to extract.");
-    process.exit(1);
-  }
-  log.ok(`Bundle verified (${(buf.length / 1024).toFixed(1)} KB).`);
-
-  // Extract to temp, then swap
-  const tmp = await import("node:fs/promises").then((m) =>
-    m.mkdtemp(join(tmpdir(), `floom-install-${ref.slug}-`)),
-  );
-  try {
-    await extractBundle(buf, tmp);
-    await mkdir(target.dir, { recursive: true });
-    if (folderExists) {
-      await rm(destFolder, { recursive: true, force: true });
-    }
-    await rename(tmp, destFolder);
-  } catch (e) {
-    await rm(tmp, { recursive: true, force: true }).catch(() => {});
-    throw e;
-  }
-
-  // Update floom.lock
-  const next = setLockEntry(lock, refKey, {
-    version: dl.version,
-    resolved: `${process.env.FLOOM_APP_URL ?? "https://floom-v0.vercel.app"}/${refKey}`,
-    bundle_sha256: dl.bundle_sha256,
-    installed_at: new Date().toISOString(),
-    path: destFolder.replace(projectDir + "/", ""),
-    preset: opts.for,
-  });
-  await writeLock(projectDir, next);
-
-  log.blank();
-  log.ok(`Installed ${refKey}@${dl.version}`);
-  log.kv("Path", destFolder);
-  log.kv("Target", target.target);
-  log.kv("Compatible with", target.compatibleAgents.join(", "));
-  if (dl.has_scripts) {
-    log.blank();
-    log.warn("This skill contains executable scripts. Floom does not run them; your agent may.");
-    log.warn("Review the scripts/ folder before activating.");
-  }
-}

package/src/commands/installed.ts

@@ -1,29 +0,0 @@
-import { readLock } from "../lib/floom-lock.js";
-import { log } from "../lib/output.js";
-
-export interface InstalledOptions {
-  json?: boolean;
-}
-
-export async function installedCommand(opts: InstalledOptions = {}): Promise<void> {
-  const lock = await readLock(process.cwd());
-  const entries = Object.entries(lock.skills);
-
-  if (opts.json) {
-    console.log(JSON.stringify(lock, null, 2));
-    return;
-  }
-
-  if (entries.length === 0) {
-    log.info("No skills installed in this project.");
-    log.info("Get one: floom install @owner/slug");
-    return;
-  }
-
-  log.heading("Installed skills in this project");
-  for (const [ref, e] of entries) {
-    console.log(`  ${ref.padEnd(40)} ${e.version.padEnd(8)} ${(e.preset ?? "-").padEnd(8)} ${e.path}`);
-  }
-  log.blank();
-  log.info(`${entries.length} skill${entries.length === 1 ? "" : "s"} installed.`);
-}

package/src/commands/library.ts

@@ -1,41 +0,0 @@
-import { api } from "../api-client.js";
-import { log } from "../lib/output.js";
-
-interface LibraryRow {
-  id: string;
-  slug: string;
-  name: string;
-  type: "personal" | "shared";
-  role: "viewer" | "editor" | "admin";
-  archived_at: string | null;
-}
-
-export async function libraryListCommand(): Promise<void> {
-  const resp = await api<{ libraries: LibraryRow[] }>("/libraries", { authRequired: true });
-  if (!resp.libraries.length) {
-    log.info("No libraries.");
-    return;
-  }
-  for (const l of resp.libraries) {
-    console.log(`${l.slug.padEnd(24)} ${l.type.padEnd(8)} ${l.role.padEnd(6)} ${l.name}`);
-  }
-}
-
-export async function libraryCreateCommand(slug: string, name: string): Promise<void> {
-  const resp = await api<LibraryRow>("/libraries", { method: "POST", authRequired: true, body: { slug, name } });
-  log.ok(`Created library ${resp.slug}`);
-}
-
-export async function libraryInviteCommand(librarySlug: string, email: string, role = "viewer"): Promise<void> {
-  await api(`/libraries/${librarySlug}/pending-invites`, {
-    method: "POST",
-    authRequired: true,
-    body: { email, role },
-  });
-  log.ok(`Invited ${email} to ${librarySlug} as ${role}`);
-}
-
-export async function libraryLeaveCommand(librarySlug: string): Promise<void> {
-  await api(`/libraries/${librarySlug}/members/me`, { method: "DELETE", authRequired: true });
-  log.ok(`Left library ${librarySlug}`);
-}

package/src/commands/list.ts

@@ -1,59 +0,0 @@
-import { api } from "../api-client.js";
-import { log } from "../lib/output.js";
-
-export interface ListOptions {
-  query?: string;
-  library?: string;
-  folder?: string;
-  flat?: boolean;
-}
-
-interface SkillRow {
-  id: string;
-  slug: string;
-  title: string;
-  description: string | null;
-  visibility: "private" | "unlisted" | "public";
-  latest_version_id: string | null;
-  updated_at: string;
-  library: { id: string; slug: string; name: string };
-}
-
-interface ListResponse {
-  skills: SkillRow[];
-  total: number;
-}
-
-export async function listCommand(opts: ListOptions = {}): Promise<void> {
-  const resp = await api<ListResponse>("/skills", {
-    authRequired: true,
-    query: { q: opts.query, library: opts.library, folder: opts.folder },
-  });
-
-  if (resp.skills.length === 0) {
-    log.info("No skills.");
-    return;
-  }
-
-  if (opts.flat) {
-    for (const s of resp.skills) {
-      console.log(`${s.library.slug}/${s.slug}`);
-    }
-    return;
-  }
-
-  const groups = new Map<string, SkillRow[]>();
-  for (const skill of resp.skills) {
-    const k = `${skill.library.slug} (${skill.library.name})`;
-    const arr = groups.get(k) ?? [];
-    arr.push(skill);
-    groups.set(k, arr);
-  }
-
-  for (const [library, rows] of groups.entries()) {
-    log.heading(library);
-    for (const s of rows) {
-      console.log(`  ${`${s.library.slug}/${s.slug}`.padEnd(40)} ${s.visibility.padEnd(10)} ${s.title}`);
-    }
-  }
-}