@floomhq/skills 0.2.0

package/dist/commands/outdated.js

@@ -0,0 +1,50 @@
+import { api } from "../api-client.js";
+import { readLock } from "../lib/floom-lock.js";
+import { log } from "../lib/output.js";
+function cmpSemver(a, b) {
+    const pa = a.split(".").map((p) => parseInt(p, 10));
+    const pb = b.split(".").map((p) => parseInt(p, 10));
+    for (let i = 0; i < 3; i++) {
+        const d = (pa[i] ?? 0) - (pb[i] ?? 0);
+        if (d !== 0)
+            return d;
+    }
+    return 0;
+}
+export async function outdatedCommand() {
+    const lock = await readLock(process.cwd());
+    const entries = Object.entries(lock.skills);
+    if (entries.length === 0) {
+        log.info("No skills installed.");
+        return;
+    }
+    log.heading("Checking for updates...");
+    const outdated = [];
+    for (const [ref, e] of entries) {
+        const [, owner, slug] = /^@([^/]+)\/([^@]+)/.exec(ref) ?? [];
+        if (!owner || !slug)
+            continue;
+        try {
+            const info = await api(`/skills/${owner}/${slug}`);
+            if (cmpSemver(info.latest_version, e.version) > 0) {
+                outdated.push({ ref, current: e.version, latest: info.latest_version });
+            }
+        }
+        catch (err) {
+            log.warn(`Could not check ${ref}: ${err.message}`);
+        }
+    }
+    log.blank();
+    if (outdated.length === 0) {
+        log.ok("All installed skills are up to date.");
+        return;
+    }
+    log.heading("Outdated skills");
+    for (const o of outdated) {
+        console.log(`  ${o.ref.padEnd(40)} ${o.current.padEnd(10)} -> ${o.latest.padEnd(10)}  floom update ${o.ref}`);
+    }
+    log.blank();
+    log.info(`${outdated.length} skill${outdated.length === 1 ? "" : "s"} can be updated.`);
+    process.exit(1); // useful in CI
+}
+//# sourceMappingURL=outdated.js.map

package/dist/commands/outdated.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outdated.js","sourceRoot":"","sources":["../../src/commands/outdated.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAOvC,SAAS,SAAS,CAAC,CAAS,EAAE,CAAS;IACrC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACpD,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACpD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACjC,OAAO;IACT,CAAC;IAED,GAAG,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACvC,MAAM,QAAQ,GAA4D,EAAE,CAAC;IAE7E,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;QAC/B,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC7D,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI;YAAE,SAAS;QAC9B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAY,WAAW,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC;YAC9D,IAAI,SAAS,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClD,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,mBAAmB,GAAG,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED,GAAG,CAAC,KAAK,EAAE,CAAC;IACZ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,GAAG,CAAC,EAAE,CAAC,sCAAsC,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IAED,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAChH,CAAC;IACD,GAAG,CAAC,KAAK,EAAE,CAAC;IACZ,GAAG,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,SAAS,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,kBAAkB,CAAC,CAAC;IACxF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe;AAClC,CAAC"}

package/dist/commands/publish.d.ts

@@ -0,0 +1,4 @@
+export interface PublishOptions {
+    library?: string;
+}
+export declare function publishCommand(opts?: PublishOptions): Promise<void>;

package/dist/commands/publish.js

@@ -0,0 +1,84 @@
+import { readFile } from "node:fs/promises";
+import { join } from "node:path";
+import { readManifest, parseSkillFrontmatter, collectBundle, packBundle, FloomError, } from "@floom/shared";
+import { api, rawPut } from "../api-client.js";
+import { readAuth } from "../config.js";
+import { log } from "../lib/output.js";
+import { validateSkill } from "./validate.js";
+export async function publishCommand(opts = {}) {
+    const auth = await readAuth();
+    if (!auth) {
+        log.err("Not logged in. Run: floom login");
+        process.exit(1);
+    }
+    const dir = process.cwd();
+    log.heading("Validating skill...");
+    const report = await validateSkill(dir);
+    if (!report.ok) {
+        log.err("Validation failed. Run `floom validate` for details.");
+        process.exit(1);
+    }
+    log.ok("Validation passed.");
+    const m = await readManifest(dir);
+    if (!m.ok) {
+        log.err(m.error);
+        process.exit(1);
+    }
+    const manifest = m.manifest;
+    const skillMd = await readFile(join(dir, "SKILL.md"), "utf8");
+    const { meta } = parseSkillFrontmatter(skillMd);
+    const refRoot = opts.library ?? auth.handle;
+    log.heading(`Publishing ${refRoot}/${manifest.name}@${manifest.version}`);
+    log.step("Packing bundle...");
+    const bundle = await collectBundle(dir);
+    const packed = await packBundle(bundle);
+    log.kv("files", String(bundle.files.length));
+    log.kv("size", `${packed.bytes.length} bytes (${(packed.bytes.length / 1024).toFixed(1)} KB)`);
+    log.kv("sha256", packed.sha256);
+    log.step("Requesting upload URL...");
+    let initResp;
+    try {
+        initResp = await api(`/skills/${refRoot}/${manifest.name}/versions`, {
+            method: "POST",
+            authRequired: true,
+            body: {
+                manifest,
+                skill_md: skillMd,
+                bundle: {
+                    sha256: packed.sha256,
+                    size_bytes: packed.bytes.length,
+                },
+                files: bundle.files.map((f) => ({
+                    path: f.relPath,
+                    sha256: f.sha256,
+                    size_bytes: f.size,
+                })),
+                has_scripts: bundle.hasScripts,
+            },
+        });
+    }
+    catch (e) {
+        if (e instanceof FloomError && e.code === "VERSION_ALREADY_EXISTS") {
+            log.err(`Version ${manifest.version} already exists for @${auth.handle}/${manifest.name}.`);
+            log.info("Bump the version in skill.json (e.g. 0.1.1) and try again.");
+            process.exit(1);
+        }
+        throw e;
+    }
+    log.step("Uploading bundle...");
+    await rawPut(initResp.upload.url, packed.bytes, "application/gzip");
+    log.step("Finalizing...");
+    const complete = await api(`/versions/${initResp.version_id}/complete`, {
+        method: "POST",
+        authRequired: true,
+        body: { bundle_sha256: packed.sha256 },
+    });
+    log.blank();
+    log.ok(`Published ${complete.ref}`);
+    log.blank();
+    log.info("View:");
+    log.kv("", `${auth.apiUrl.replace("/api/v1", "")}/@${auth.handle}/${manifest.name}`);
+    log.info("Install:");
+    log.kv("", complete.install_command);
+}
+//# sourceMappingURL=publish.js.map

package/dist/commands/publish.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish.js","sourceRoot":"","sources":["../../src/commands/publish.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,aAAa,EACb,UAAU,EACV,UAAU,GACX,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAiB9C,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAuB,EAAE;IAC5D,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;IAC9B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,GAAG,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC3C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,GAAG,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,GAAG,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,GAAG,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC;IAE7B,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACV,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;IAC5B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;IAC9D,MAAM,EAAE,IAAI,EAAE,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAEhD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC;IAC5C,GAAG,CAAC,OAAO,CAAC,cAAc,OAAO,IAAI,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1E,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC;IACxC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7C,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC/F,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhC,GAAG,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACrC,IAAI,QAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,GAAG,CAAe,WAAW,OAAO,IAAI,QAAQ,CAAC,IAAI,WAAW,EAAE;YACjF,MAAM,EAAE,MAAM;YACd,YAAY,EAAE,IAAI;YAClB,IAAI,EAAE;gBACJ,QAAQ;gBACR,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE;oBACN,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;iBAChC;gBACD,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAoD,EAAE,EAAE,CAAC,CAAC;oBACjF,IAAI,EAAE,CAAC,CAAC,OAAO;oBACf,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,UAAU,EAAE,CAAC,CAAC,IAAI;iBACnB,CAAC,CAAC;gBACH,WAAW,EAAE,MAAM,CAAC,UAAU;aAC/B;SACF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,wBAAwB,EAAE,CAAC;YACnE,GAAG,CAAC,GAAG,CAAC,WAAW,QAAQ,CAAC,OAAO,wBAAwB,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;YAC5F,GAAG,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;YACvE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,CAAC,CAAC;IACV,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAChC,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;IAEpE,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC1B,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAmB,aAAa,QAAQ,CAAC,UAAU,WAAW,EAAE;QACxF,MAAM,EAAE,MAAM;QACd,YAAY,EAAE,IAAI;QAClB,IAAI,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE;KACvC,CAAC,CAAC;IAEH,GAAG,CAAC,KAAK,EAAE,CAAC;IACZ,GAAG,CAAC,EAAE,CAAC,aAAa,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;IACpC,GAAG,CAAC,KAAK,EAAE,CAAC;IACZ,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClB,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACrF,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACrB,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;AACvC,CAAC"}

package/dist/commands/share.d.ts

@@ -0,0 +1,5 @@
+export interface ShareOptions {
+    role?: "viewer" | "editor";
+}
+export declare function shareCommand(refStr: string, email: string, opts?: ShareOptions): Promise<void>;
+export declare function unshareCommand(refStr: string, email: string): Promise<void>;

package/dist/commands/share.js

@@ -0,0 +1,34 @@
+import { parseSkillRef } from "@floom/shared";
+import { api } from "../api-client.js";
+import { log } from "../lib/output.js";
+export async function shareCommand(refStr, email, opts = {}) {
+    const ref = parseSkillRef(refStr);
+    if (!ref) {
+        log.err(`Invalid skill ref: ${refStr}`);
+        process.exit(1);
+    }
+    const role = opts.role ?? "viewer";
+    const r = await api(`/skills/${ref.owner}/${ref.slug}/grants`, {
+        method: "POST",
+        authRequired: true,
+        body: { email, role },
+    });
+    log.ok(`Shared ${refStr} with ${r.grant.email} as ${r.grant.role}.`);
+    log.info("No email is sent in V0. They will see the skill under 'Shared with Me' on next login.");
+}
+export async function unshareCommand(refStr, email) {
+    const ref = parseSkillRef(refStr);
+    if (!ref) {
+        log.err(`Invalid skill ref: ${refStr}`);
+        process.exit(1);
+    }
+    const list = await api(`/skills/${ref.owner}/${ref.slug}/grants`, { authRequired: true });
+    const grant = list.grants.find((g) => (g.email ?? "").toLowerCase() === email.toLowerCase());
+    if (!grant) {
+        log.err(`No active grant for ${email} on ${refStr}.`);
+        process.exit(1);
+    }
+    await api(`/skills/${ref.owner}/${ref.slug}/grants/${grant.id}`, { method: "DELETE", authRequired: true });
+    log.ok(`Removed ${email}'s access to ${refStr}.`);
+}
+//# sourceMappingURL=share.js.map

package/dist/commands/share.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"share.js","sourceRoot":"","sources":["../../src/commands/share.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAUvC,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,KAAa,EAAE,OAAqB,EAAE;IACvF,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,CAAC,GAAG,EAAE,CAAC;QAAC,GAAG,CAAC,GAAG,CAAC,sBAAsB,MAAM,EAAE,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IACvE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC;IACnC,MAAM,CAAC,GAAG,MAAM,GAAG,CAAgB,WAAW,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,IAAI,SAAS,EAAE;QAC5E,MAAM,EAAE,MAAM;QACd,YAAY,EAAE,IAAI;QAClB,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;KACtB,CAAC,CAAC;IACH,GAAG,CAAC,EAAE,CAAC,UAAU,MAAM,SAAS,CAAC,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;IACrE,GAAG,CAAC,IAAI,CAAC,uFAAuF,CAAC,CAAC;AACpG,CAAC;AAMD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAc,EAAE,KAAa;IAChE,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,CAAC,GAAG,EAAE,CAAC;QAAC,GAAG,CAAC,GAAG,CAAC,sBAAsB,MAAM,EAAE,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IACvE,MAAM,IAAI,GAAG,MAAM,GAAG,CAAoB,WAAW,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,IAAI,SAAS,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7G,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IAC7F,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,GAAG,CAAC,GAAG,CAAC,uBAAuB,KAAK,OAAO,MAAM,GAAG,CAAC,CAAC;QACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,GAAG,CAAC,WAAW,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,IAAI,WAAW,KAAK,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3G,GAAG,CAAC,EAAE,CAAC,WAAW,KAAK,gBAAgB,MAAM,GAAG,CAAC,CAAC;AACpD,CAAC"}

package/dist/commands/update.d.ts

@@ -0,0 +1,4 @@
+export interface UpdateOptions {
+    force?: boolean;
+}
+export declare function updateCommand(refStr?: string, opts?: UpdateOptions): Promise<void>;

package/dist/commands/update.js

@@ -0,0 +1,92 @@
+import { rm, rename, mkdir } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join, resolve } from "node:path";
+import { extractBundle, verifyBundleHash } from "@floom/shared";
+import { api, rawGet } from "../api-client.js";
+import { readLock, writeLock, setLockEntry, hashInstalledFolder } from "../lib/floom-lock.js";
+import { log } from "../lib/output.js";
+function cmpSemver(a, b) {
+    const pa = a.split(".").map((p) => parseInt(p, 10));
+    const pb = b.split(".").map((p) => parseInt(p, 10));
+    for (let i = 0; i < 3; i++) {
+        const d = (pa[i] ?? 0) - (pb[i] ?? 0);
+        if (d !== 0)
+            return d;
+    }
+    return 0;
+}
+export async function updateCommand(refStr, opts = {}) {
+    const projectDir = process.cwd();
+    const lock = await readLock(projectDir);
+    const all = Object.entries(lock.skills);
+    if (all.length === 0) {
+        log.info("No installed skills.");
+        return;
+    }
+    const targets = refStr ? all.filter(([r]) => r === refStr) : all;
+    if (refStr && targets.length === 0) {
+        log.err(`Not installed: ${refStr}`);
+        process.exit(1);
+    }
+    let updated = 0, skipped = 0;
+    for (const [ref, entry] of targets) {
+        const [, owner, slug] = /^@([^/]+)\/([^@]+)/.exec(ref) ?? [];
+        if (!owner || !slug)
+            continue;
+        let info;
+        try {
+            info = await api(`/skills/${owner}/${slug}`);
+        }
+        catch (e) {
+            log.warn(`Skip ${ref}: ${e.message}`);
+            skipped++;
+            continue;
+        }
+        if (cmpSemver(info.latest_version, entry.version) <= 0) {
+            log.step(`${ref} is already at latest (${entry.version}).`);
+            continue;
+        }
+        const installDir = resolve(projectDir, entry.path);
+        // Detect local edits via floom-lock recorded bundle_sha256 — simplistic: we
+        // re-compute on-disk content and compare collective hash to recorded bundle.
+        // V0 hardening: full per-file lock would be richer; we use a simple gate.
+        if (!opts.force) {
+            const current = await hashInstalledFolder(installDir);
+            // The recorded bundle_sha256 is the tarball hash, not folder hash, so we
+            // can't compare directly. For now: if force isn't set and folder exists,
+            // we proceed with confirmation in a real terminal. In V0 we just warn.
+            // (Full editorial detection lands when files-table-per-version syncs.)
+            log.step(`Updating ${ref}: ${entry.version} -> ${info.latest_version}`);
+        }
+        const dl = await api(`/skills/${owner}/${slug}/download`);
+        const buf = await rawGet(dl.download.url);
+        if (!verifyBundleHash(buf, dl.bundle_sha256)) {
+            log.err(`Bundle hash mismatch for ${ref} — skipping.`);
+            skipped++;
+            continue;
+        }
+        const tmp = await import("node:fs/promises").then((m) => m.mkdtemp(join(tmpdir(), `floom-update-${slug}-`)));
+        try {
+            await extractBundle(buf, tmp);
+            await rm(installDir, { recursive: true, force: true });
+            await mkdir(installDir.replace(/\/[^/]+$/, ""), { recursive: true });
+            await rename(tmp, installDir);
+        }
+        catch (e) {
+            await rm(tmp, { recursive: true, force: true }).catch(() => { });
+            throw e;
+        }
+        const next = setLockEntry(lock, ref, {
+            ...entry,
+            version: dl.version,
+            bundle_sha256: dl.bundle_sha256,
+            installed_at: new Date().toISOString(),
+        });
+        await writeLock(projectDir, next);
+        log.ok(`Updated ${ref}: ${entry.version} -> ${dl.version}`);
+        updated++;
+    }
+    log.blank();
+    log.info(`${updated} updated, ${skipped} skipped.`);
+}
+//# sourceMappingURL=update.js.map

package/dist/commands/update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.js","sourceRoot":"","sources":["../../src/commands/update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAc,MAAM,eAAe,CAAC;AAC5E,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC9F,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAcvC,SAAS,SAAS,CAAC,CAAS,EAAE,CAAS;IACrC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACpD,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACpD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAMD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAe,EAAE,OAAsB,EAAE;IAC3E,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,GAAG,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACjC,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACjE,IAAI,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,GAAG,CAAC,GAAG,CAAC,kBAAkB,MAAM,EAAE,CAAC,CAAC;QACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC;IAC7B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACnC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC7D,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI;YAAE,SAAS;QAE9B,IAAI,IAAe,CAAC;QACpB,IAAI,CAAC;YAAC,IAAI,GAAG,MAAM,GAAG,CAAY,WAAW,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAChE,OAAO,CAAC,EAAE,CAAC;YACT,GAAG,CAAC,IAAI,CAAC,QAAQ,GAAG,KAAM,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;YACjD,OAAO,EAAE,CAAC;YACV,SAAS;QACX,CAAC;QAED,IAAI,SAAS,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,0BAA0B,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;YAC5D,SAAS;QACX,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAEnD,4EAA4E;QAC5E,6EAA6E;QAC7E,0EAA0E;QAC1E,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,UAAU,CAAC,CAAC;YACtD,yEAAyE;YACzE,yEAAyE;YACzE,uEAAuE;YACvE,uEAAuE;YACvE,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,KAAK,KAAK,CAAC,OAAO,OAAO,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,EAAE,GAAG,MAAM,GAAG,CAAmB,WAAW,KAAK,IAAI,IAAI,WAAW,CAAC,CAAC;QAC5E,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC;YAC7C,GAAG,CAAC,GAAG,CAAC,4BAA4B,GAAG,cAAc,CAAC,CAAC;YACvD,OAAO,EAAE,CAAC;YACV,SAAS;QACX,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACtD,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,IAAI,GAAG,CAAC,CAAC,CACnD,CAAC;QACF,IAAI,CAAC;YACH,MAAM,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC9B,MAAM,EAAE,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACvD,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACrE,MAAM,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAChE,MAAM,CAAC,CAAC;QACV,CAAC;QAED,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,GAAG,EAAE;YACnC,GAAG,KAAK;YACR,OAAO,EAAE,EAAE,CAAC,OAAO;YACnB,aAAa,EAAE,EAAE,CAAC,aAAa;YAC/B,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACvC,CAAC,CAAC;QACH,MAAM,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAClC,GAAG,CAAC,EAAE,CAAC,WAAW,GAAG,KAAK,KAAK,CAAC,OAAO,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5D,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,GAAG,CAAC,KAAK,EAAE,CAAC;IACZ,GAAG,CAAC,IAAI,CAAC,GAAG,OAAO,aAAa,OAAO,WAAW,CAAC,CAAC;AACtD,CAAC"}

package/dist/commands/validate.d.ts

@@ -0,0 +1,32 @@
+import { scanSkillMarkdown } from "@floom/shared";
+export interface ValidateOptions {
+    json?: boolean;
+}
+export interface ValidateReport {
+    ok: boolean;
+    manifest: {
+        ok: boolean;
+        message?: string;
+    };
+    skill_md: {
+        ok: boolean;
+        message?: string;
+    };
+    name_matches: {
+        ok: boolean;
+        message?: string;
+    };
+    bundle: {
+        ok: boolean;
+        message?: string;
+        files?: number;
+        size?: number;
+        has_scripts?: boolean;
+    };
+    security: {
+        ok: boolean;
+        findings: ReturnType<typeof scanSkillMarkdown>;
+    };
+}
+export declare function validateSkill(dir: string): Promise<ValidateReport>;
+export declare function validateCommand(opts?: ValidateOptions): Promise<void>;

package/dist/commands/validate.js

@@ -0,0 +1,108 @@
+import { readFile } from "node:fs/promises";
+import { join } from "node:path";
+import { readManifest, parseSkillFrontmatter, validateSkillFrontmatter, collectBundle, scanSkillMarkdown, } from "@floom/shared";
+import { log } from "../lib/output.js";
+export async function validateSkill(dir) {
+    const report = {
+        ok: true,
+        manifest: { ok: true },
+        skill_md: { ok: true },
+        name_matches: { ok: true },
+        bundle: { ok: true },
+        security: { ok: true, findings: [] },
+    };
+    // manifest
+    const m = await readManifest(dir);
+    if (!m.ok) {
+        report.manifest = { ok: false, message: m.error };
+        report.ok = false;
+        return report;
+    }
+    // SKILL.md presence + frontmatter
+    let skillMd;
+    try {
+        skillMd = await readFile(join(dir, "SKILL.md"), "utf8");
+    }
+    catch {
+        report.skill_md = { ok: false, message: "SKILL.md not found" };
+        report.ok = false;
+        return report;
+    }
+    const { meta } = parseSkillFrontmatter(skillMd);
+    const fmErr = validateSkillFrontmatter(meta);
+    if (fmErr) {
+        report.skill_md = { ok: false, message: fmErr };
+        report.ok = false;
+    }
+    if (meta.name && meta.name !== m.manifest.name) {
+        report.name_matches = {
+            ok: false,
+            message: `skill.json name="${m.manifest.name}" but SKILL.md frontmatter name="${meta.name}"`,
+        };
+        report.ok = false;
+    }
+    // bundle (path traversal, symlinks, file/size limits)
+    try {
+        const bundle = await collectBundle(dir);
+        report.bundle = {
+            ok: true,
+            files: bundle.files.length,
+            size: bundle.totalUncompressedBytes,
+            has_scripts: bundle.hasScripts,
+        };
+    }
+    catch (e) {
+        report.bundle = { ok: false, message: e.message };
+        report.ok = false;
+    }
+    // security: secrets + prompt injection in SKILL.md
+    const findings = scanSkillMarkdown(skillMd);
+    if (findings.length > 0) {
+        const secretFindings = findings.filter((f) => f.category === "secret");
+        report.security = { ok: secretFindings.length === 0, findings };
+        if (secretFindings.length > 0)
+            report.ok = false;
+    }
+    return report;
+}
+export async function validateCommand(opts = {}) {
+    const dir = process.cwd();
+    const r = await validateSkill(dir);
+    if (opts.json) {
+        console.log(JSON.stringify(r, null, 2));
+        process.exit(r.ok ? 0 : 1);
+    }
+    log.heading("Validating skill...");
+    const line = (ok, label, detail) => ok ? log.ok(`${label.padEnd(28)} ${detail ?? ""}`.trim())
+        : log.err(`${label.padEnd(28)} ${detail ?? ""}`.trim());
+    line(r.manifest.ok, "manifest schema", r.manifest.message);
+    line(r.skill_md.ok, "SKILL.md present", r.skill_md.message);
+    line(r.name_matches.ok, "name fields match", r.name_matches.message);
+    if (r.bundle.ok) {
+        line(true, "files + size limits", `${r.bundle.files} files, ${(r.bundle.size ?? 0) / 1024 | 0} KB`);
+    }
+    else {
+        line(false, "files + size limits", r.bundle.message);
+    }
+    if (r.security.findings.length === 0) {
+        line(true, "secrets + prompt injection", "clean");
+    }
+    else {
+        line(r.security.ok, "secrets + prompt injection", `${r.security.findings.length} finding(s)`);
+        for (const f of r.security.findings) {
+            log.warn(`  line ${f.line} [${f.category}] ${f.label}: ${f.preview}`);
+        }
+    }
+    if (r.bundle.has_scripts) {
+        log.warn("This skill contains scripts/. Agents may execute these — review before activating.");
+    }
+    log.blank();
+    if (r.ok) {
+        log.ok("Valid.");
+    }
+    else {
+        log.err("Invalid.");
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=validate.js.map

package/dist/commands/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../src/commands/validate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAQ,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,wBAAwB,EACxB,aAAa,EACb,iBAAiB,GAClB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAevC,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAW;IAC7C,MAAM,MAAM,GAAmB;QAC7B,EAAE,EAAE,IAAI;QACR,QAAQ,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;QACtB,QAAQ,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;QACtB,YAAY,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;QAC1B,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;QACpB,QAAQ,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;KACrC,CAAC;IAEF,WAAW;IACX,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACV,MAAM,CAAC,QAAQ,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QAClD,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC;QAClB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,kCAAkC;IAClC,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,QAAQ,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;QAC/D,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC;QAClB,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,CAAC,QAAQ,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAChD,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC;IACpB,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC/C,MAAM,CAAC,YAAY,GAAG;YACpB,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAAC,IAAI,oCAAoC,IAAI,CAAC,IAAI,GAAG;SAC7F,CAAC;QACF,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC;IACpB,CAAC;IAED,sDAAsD;IACtD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,GAAG;YACd,EAAE,EAAE,IAAI;YACR,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;YAC1B,IAAI,EAAE,MAAM,CAAC,sBAAsB;YACnC,WAAW,EAAE,MAAM,CAAC,UAAU;SAC/B,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC;QAC7D,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC;IACpB,CAAC;IAED,mDAAmD;IACnD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QACvE,MAAM,CAAC,QAAQ,GAAG,EAAE,EAAE,EAAE,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC;QAChE,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC;IACnD,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAAwB,EAAE;IAC9D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;IAEnC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IAED,GAAG,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,CAAC,EAAW,EAAE,KAAa,EAAE,MAAe,EAAE,EAAE,CAC3D,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,MAAM,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;QACtD,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,MAAM,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IAE7D,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,kBAAkB,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC5D,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,mBAAmB,EAAE,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IACrE,IAAI,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QAChB,IAAI,CAAC,IAAI,EAAE,qBAAqB,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACtG,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC,IAAI,EAAE,4BAA4B,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,4BAA4B,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,aAAa,CAAC,CAAC;QAC9F,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACpC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACzB,GAAG,CAAC,IAAI,CAAC,oFAAoF,CAAC,CAAC;IACjG,CAAC;IACD,GAAG,CAAC,KAAK,EAAE,CAAC;IACZ,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;QACT,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;IACnB,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/commands/whoami.d.ts

@@ -0,0 +1 @@
+export declare function whoamiCommand(): Promise<void>;

package/dist/commands/whoami.js

@@ -0,0 +1,14 @@
+import { readAuth } from "../config.js";
+import { log } from "../lib/output.js";
+export async function whoamiCommand() {
+    const auth = await readAuth();
+    if (!auth) {
+        log.info("Not logged in. Run: floom login");
+        return;
+    }
+    log.heading("Logged in as:");
+    log.kv("handle", `@${auth.handle}`);
+    log.kv("email", auth.email);
+    log.kv("api url", auth.apiUrl);
+}
+//# sourceMappingURL=whoami.js.map

package/dist/commands/whoami.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"whoami.js","sourceRoot":"","sources":["../../src/commands/whoami.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAEvC,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;IAC9B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,GAAG,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QAC5C,OAAO;IACT,CAAC;IACD,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC7B,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACpC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5B,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,11 @@
+export interface AuthState {
+    token: string;
+    handle: string;
+    email: string;
+    apiUrl: string;
+}
+export declare const DEFAULT_API_URL: string;
+export declare function readAuth(): Promise<AuthState | null>;
+export declare function writeAuth(state: AuthState): Promise<void>;
+export declare function clearAuth(): Promise<void>;
+export declare function getApiUrl(): string;

package/dist/config.js

@@ -0,0 +1,39 @@
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { mkdir, readFile, writeFile, chmod } from "node:fs/promises";
+const CONFIG_DIR = join(homedir(), ".floom");
+const AUTH_FILE = join(CONFIG_DIR, "auth.json");
+export const DEFAULT_API_URL = process.env.FLOOM_API_URL ?? "https://floom-v0.vercel.app/api/v1";
+async function ensureDir() {
+    await mkdir(CONFIG_DIR, { recursive: true, mode: 0o700 });
+}
+export async function readAuth() {
+    try {
+        const raw = await readFile(AUTH_FILE, "utf8");
+        return JSON.parse(raw);
+    }
+    catch (e) {
+        if (e.code === "ENOENT")
+            return null;
+        throw e;
+    }
+}
+export async function writeAuth(state) {
+    await ensureDir();
+    await writeFile(AUTH_FILE, JSON.stringify(state, null, 2), { mode: 0o600 });
+    try {
+        await chmod(AUTH_FILE, 0o600);
+    }
+    catch { /* best effort on win */ }
+}
+export async function clearAuth() {
+    const { unlink } = await import("node:fs/promises");
+    try {
+        await unlink(AUTH_FILE);
+    }
+    catch { /* ignore */ }
+}
+export function getApiUrl() {
+    return process.env.FLOOM_API_URL ?? DEFAULT_API_URL;
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAErE,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;AAShD,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,oCAAoC,CAAC;AAEjG,KAAK,UAAU,SAAS;IACtB,MAAM,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAc,CAAC;IACtC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAChE,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,KAAgB;IAC9C,MAAM,SAAS,EAAE,CAAC;IAClB,MAAM,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,IAAI,CAAC;QAAC,MAAM,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,wBAAwB,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACpD,IAAI,CAAC;QAAC,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,eAAe,CAAC;AACtD,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/index.js

@@ -0,0 +1,99 @@
+#!/usr/bin/env node
+import { Command } from "commander";
+import { FloomError } from "@floom/shared";
+import { log } from "./lib/output.js";
+import { loginCommand } from "./commands/login.js";
+import { logoutCommand } from "./commands/logout.js";
+import { whoamiCommand } from "./commands/whoami.js";
+import { initCommand } from "./commands/init.js";
+import { validateCommand } from "./commands/validate.js";
+import { publishCommand } from "./commands/publish.js";
+import { installCommand } from "./commands/install.js";
+import { installedCommand } from "./commands/installed.js";
+import { outdatedCommand } from "./commands/outdated.js";
+import { updateCommand } from "./commands/update.js";
+import { listCommand } from "./commands/list.js";
+import { infoCommand } from "./commands/info.js";
+import { shareCommand, unshareCommand } from "./commands/share.js";
+import { libraryCreateCommand, libraryInviteCommand, libraryLeaveCommand, libraryListCommand } from "./commands/library.js";
+import { VERSION } from "./version.js";
+const program = new Command();
+program
+    .name("floom")
+    .description("Floom CLI — publish, install, sync, and share AI agent skills.")
+    .version(VERSION);
+program.command("login").description("Log in via browser (device code).").action(loginCommand);
+program.command("logout").description("Log out and revoke local token.").action(logoutCommand);
+program.command("whoami").description("Show the logged-in user.").action(whoamiCommand);
+program.command("init").description("Scaffold a new skill in the current directory.").action(initCommand);
+program
+    .command("validate")
+    .description("Validate the skill in the current directory.")
+    .option("--json", "Emit machine-readable JSON")
+    .action((opts) => validateCommand(opts));
+program
+    .command("publish")
+    .description("Publish the skill in the current directory.")
+    .option("--library <slug>", "Publish into a shared library slug (default: personal)")
+    .action((opts) => publishCommand(opts));
+program.command("push").description("Alias for `publish`.").option("--library <slug>").action((opts) => publishCommand(opts));
+program
+    .command("install <ref>")
+    .description("Install a skill (default: .agents/skills/<slug>/).")
+    .option("--for <target>", "Tool preset: claude | codex | cursor | gemini | opencode | kimi | all")
+    .option("--to <path>", "Explicit install directory")
+    .option("--global", "Install to user-level folder instead of project-local")
+    .option("--force", "Overwrite existing folder")
+    .action((ref, opts) => installCommand(ref, opts));
+program.command("installed").description("List installed skills in this project.").option("--json").action(installedCommand);
+program.command("outdated").description("Show installed skills with newer versions available.").action(outdatedCommand);
+program
+    .command("update [ref]")
+    .description("Update installed skills to latest.")
+    .option("--force", "Overwrite local edits")
+    .action((ref, opts) => updateCommand(ref, opts));
+program
+    .command("list")
+    .description("List remote skills.")
+    .option("--mine", "Only your own skills (default)")
+    .option("--library <slug>", "Filter by library slug")
+    .option("--folder <uuid>", "Filter by folder id")
+    .option("--flat", "Print one ref per line")
+    .option("--query <q>", "Filter by query")
+    .action(listCommand);
+program.command("info <ref>").description("Show details for a remote skill.").action(infoCommand);
+program
+    .command("share <ref> <email>")
+    .description("Invite someone to a skill by email.")
+    .option("--role <role>", "viewer (default) or editor")
+    .action((ref, email, opts) => shareCommand(ref, email, opts));
+program
+    .command("unshare <ref> <email>")
+    .description("Revoke someone's access.")
+    .action((ref, email) => unshareCommand(ref, email));
+const lib = program.command("library").description("Manage libraries");
+lib.command("list").action(libraryListCommand);
+lib.command("create <slug> <name>").action((slug, name) => libraryCreateCommand(slug, name));
+lib.command("invite <librarySlug> <email>").option("--role <role>", "viewer|editor|admin", "viewer").action((librarySlug, email, opts) => libraryInviteCommand(librarySlug, email, opts.role));
+lib.command("leave <librarySlug>").action((librarySlug) => libraryLeaveCommand(librarySlug));
+// Global error handler
+async function main() {
+    try {
+        await program.parseAsync(process.argv);
+    }
+    catch (e) {
+        if (e instanceof FloomError) {
+            log.err(e.message);
+            if (e.code === "AUTH_REQUIRED" || e.code === "TOKEN_EXPIRED") {
+                log.info("Run: floom login");
+            }
+            process.exit(1);
+        }
+        log.err(e.message ?? "Unknown error");
+        if (process.env.FLOOM_DEBUG)
+            console.error(e);
+        process.exit(1);
+    }
+}
+main();
+//# sourceMappingURL=index.js.map