@floomhq/skills 0.2.17 → 0.2.19

package/dist/index.js

@@ -2547,7 +2547,7 @@ function isLegacyApiUrl(apiUrl) {
 }
 
 // src/version.ts
-var VERSION = "0.2.17";
+var VERSION = "0.2.19";
 
 // src/api-client.ts
 var DEFAULT_TIMEOUT_MS = 2e4;
@@ -3104,37 +3104,31 @@ function buildAuthenticatedSkillUrl(appUrl, librarySlug, skillSlug) {
 }
 function buildPublicSkillUrl(appUrl, handle, librarySlug, skillSlug) {
   const base = trimAppUrl(appUrl);
-  if (librarySlug !== handle) return null;
-  return `${base}/@${handle}/${skillSlug}`;
+  if (librarySlug === handle) return `${base}/@${encodeURIComponent(handle)}/${encodeURIComponent(skillSlug)}`;
+  return `${base}/${encodeURIComponent(librarySlug)}/${encodeURIComponent(skillSlug)}`;
 }
 function buildPublishViewLines(args) {
   const manageUrl = buildAuthenticatedSkillUrl(args.appUrl, args.refRoot, args.slug);
   const publicUrl = buildPublicSkillUrl(args.appUrl, args.handle, args.refRoot, args.slug);
   if (args.visibility === "public") {
     return {
-      heading: publicUrl ? "View (public):" : "Manage (workspace skill):",
-      primaryUrl: publicUrl ?? manageUrl,
-      ...publicUrl ? {} : { note: "Workspace skills stay under their authenticated library URL unless copied to your personal library." },
+      heading: "View (public):",
+      primaryUrl: publicUrl,
       shareUrl: args.shareUrl ?? void 0
     };
   }
   if (args.visibility === "unlisted") {
     return {
-      heading: publicUrl ? "View (unlisted - use a share link for unauthenticated access):" : "Manage (unlisted workspace skill):",
-      primaryUrl: publicUrl ?? manageUrl,
-      ...publicUrl ? {} : { note: "Use the share link for unauthenticated access; workspace detail URLs remain authenticated." },
+      heading: "View (unlisted - use a share link for unauthenticated access):",
+      primaryUrl: publicUrl,
       shareUrl: args.shareUrl ?? void 0
     };
   }
   return {
     heading: "Manage (private - sign in to your workspace):",
     primaryUrl: manageUrl,
-    ...publicUrl ? {
-      secondaryHeading: "Public URL after you make it public or unlisted:",
-      secondaryUrl: publicUrl
-    } : {
-      note: "Workspace skills stay under their authenticated library URL unless copied to your personal library."
-    }
+    secondaryHeading: "Public URL after you make it public or unlisted:",
+    secondaryUrl: publicUrl
   };
 }
 
@@ -3189,6 +3183,7 @@ async function publishCommand(opts = {}) {
       authRequired: true,
       body: {
         manifest,
+        folder_id: opts.folder,
         skill_md: skillMd,
         bundle: {
           sha256: packed.sha256,
@@ -3755,6 +3750,8 @@ async function infoCommand(refStr) {
   log.kv("Latest", r.latest_version);
   log.kv("Visibility", r.visibility);
   log.kv("Owner", `@${r.owner.handle}${r.owner.display_name ? ` (${r.owner.display_name})` : ""}`);
+  if (r.folder) log.kv("Folder", `${r.folder.name} (${r.folder.slug}, ${r.folder.access_mode})`);
+  if (r.tags?.length) log.kv("Tags", r.tags.map((tag) => `#${tag}`).join(" "));
   if (r.has_scripts) {
     log.kv("Scripts", "yes (review before activating)");
   }
@@ -3764,9 +3761,30 @@ async function infoCommand(refStr) {
 }
 
 // src/commands/share.ts
+import prompts2 from "prompts";
 function isValidEmail(email) {
   return /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email);
 }
+function isValidRole(role) {
+  return role === "viewer" || role === "editor";
+}
+async function confirmShare(refStr, email, role, opts) {
+  if (opts.yes) return;
+  if (!process.stdin.isTTY) {
+    log.err(`Sharing ${refStr} with ${email} requires confirmation. Re-run with --yes to confirm.`);
+    process.exit(1);
+  }
+  const answer = await prompts2({
+    type: "confirm",
+    name: "confirmed",
+    message: `Share ${refStr} with ${email} as ${role}?`,
+    initial: false
+  });
+  if (!answer.confirmed) {
+    log.info("Share cancelled.");
+    process.exit(1);
+  }
+}
 async function shareCommand(refStr, email, opts = {}) {
   const ref = parseSkillRef(refStr);
   if (!ref) {
@@ -3778,12 +3796,18 @@ async function shareCommand(refStr, email, opts = {}) {
     process.exit(1);
   }
   const role = opts.role ?? "viewer";
+  if (!isValidRole(role)) {
+    log.err(`Invalid role: ${role}. Expected viewer or editor.`);
+    process.exit(1);
+  }
+  await confirmShare(refStr, email, role, opts);
   const r = await api(`/skills/${ref.owner}/${ref.slug}/grants`, {
     method: "POST",
     authRequired: true,
     body: { email, role }
   });
   log.ok(`Shared ${refStr} with ${r.grant.email} as ${r.grant.role}.`);
+  log.info(`Undo: floom unshare ${refStr} ${r.grant.email}`);
   if (r.email_status) log.kv("email", r.email_status);
 }
 async function unshareCommand(refStr, email) {
@@ -4956,8 +4980,8 @@ program.command("logout").description("Log out and revoke local token.").action(
 program.command("whoami").description("Show the logged-in user.").action(whoamiCommand);
 program.command("init").description("Scaffold a new skill in the current directory.").action(initCommand);
 program.command("validate").description("Validate the skill in the current directory.").option("--json", "Emit machine-readable JSON").action((opts) => validateCommand(opts));
-program.command("publish").description("Publish the skill in the current directory.").option("--dry-run", "Validate and pack locally without uploading.").option("--workspace <slug>", "Publish into a shared workspace slug (default: personal)").option("--library <slug>", "Legacy alias for --workspace").addHelpText("after", "\nExamples:\n  $ floom publish\n  $ floom publish --workspace team-workspace").action((opts) => publishCommand(opts));
-program.command("push [dir]").description("Publish one skill folder or every immediate child skill folder.").option("--dry-run", "Validate and pack locally without uploading.").option("--workspace <slug>", "Publish into a shared workspace slug").option("--library <slug>", "Legacy alias for --workspace").option("--concurrency <n>", "Bulk push concurrency, 1-16", "6").addHelpText("after", "\nExamples:\n  $ floom push\n  $ floom push ./skills --workspace team-workspace --concurrency 4").action((dir, opts) => pushCommand(dir ?? ".", opts));
+program.command("publish").description("Publish the skill in the current directory.").option("--dry-run", "Validate and pack locally without uploading.").option("--workspace <slug>", "Publish into a shared workspace slug (default: personal)").option("--library <slug>", "Legacy alias for --workspace").option("--folder <uuid>", "Publish into a workspace folder id").addHelpText("after", "\nExamples:\n  $ floom publish\n  $ floom publish --workspace team-workspace\n  $ floom publish --workspace team-workspace --folder 00000000-0000-0000-0000-000000000000").action((opts) => publishCommand(opts));
+program.command("push [dir]").description("Publish one skill folder or every immediate child skill folder.").option("--dry-run", "Validate and pack locally without uploading.").option("--workspace <slug>", "Publish into a shared workspace slug").option("--library <slug>", "Legacy alias for --workspace").option("--folder <uuid>", "Publish into a workspace folder id").option("--concurrency <n>", "Bulk push concurrency, 1-16", "6").addHelpText("after", "\nExamples:\n  $ floom push\n  $ floom push ./skills --workspace team-workspace --concurrency 4\n  $ floom push ./skills --workspace team-workspace --folder 00000000-0000-0000-0000-000000000000").action((dir, opts) => pushCommand(dir ?? ".", opts));
 program.command("install <ref>").description("Install a skill (default: .agents/skills/<slug>/).").option("--for <target>", "Tool preset: claude | codex | cursor | gemini | opencode | kimi | all").option("--to <path>", "Parent directory; installs to <path>/<skill-slug>/ (not the skill folder itself)").option("--global", "Install to user-level folder instead of project-local").option("--force", "Overwrite existing folder").addHelpText("after", "\nExamples:\n  $ floom install @alice/research-brief\n  $ floom install @alice/research-brief --for codex\n  $ floom install @alice/research-brief --to .agents/skills\n\nNote: --to is the parent folder. The skill lands in .agents/skills/research-brief/, not directly in .agents/skills/.").action((ref, opts) => installCommand(ref, opts));
 program.command("installed").description("List installed skills in this project.").option("--json").action(installedCommand);
 program.command("outdated").description("Show installed skills with newer versions available.").action(outdatedCommand);
@@ -4969,7 +4993,7 @@ program.command("pull").description("Pull account/workspace instructions for act
 program.command("pin <ref>").description("Pin a workspace skill for local pull").option("--workspace <slug>", "Workspace slug").option("--target <target>", "claude | codex | cursor | kimi | opencode", "codex").action((ref, opts) => pinCommand(ref, opts));
 program.command("pinned").alias("pins").description("List workspace skills pinned for local pull").option("--workspace <slug>", "Workspace slug").option("--target <target>", "claude | codex | cursor | kimi | opencode", "codex").option("--json", "Emit machine-readable JSON").action((opts) => pinnedCommand(opts));
 program.command("unpin <ref>").description("Unpin a workspace skill for local pull").option("--workspace <slug>", "Workspace slug").option("--target <target>", "claude | codex | cursor | kimi | opencode", "codex").action((ref, opts) => unpinCommand(ref, opts));
-program.command("share <ref> <email>").description("Invite someone to a skill by email.").option("--role <role>", "viewer (default) or editor").action((ref, email, opts) => shareCommand(ref, email, opts));
+program.command("share <ref> <email>").description("Invite someone to a skill by email.").option("--role <role>", "viewer (default) or editor").option("--yes", "Confirm the share without an interactive prompt").action((ref, email, opts) => shareCommand(ref, email, opts));
 program.command("unshare <ref> <email>").description("Revoke someone's access.").action((ref, email) => unshareCommand(ref, email));
 var linkCmd = program.command("link").description("Create opaque share links for unlisted/public skills");
 linkCmd.command("create <ref>").description("Create a share link URL for a skill.").option("--name <name>", "Optional link label").option("--role <role>", "viewer (default) or editor").action((ref, opts) => linkCreateCommand(ref, opts));

package/dist/version.js

@@ -1 +1 @@
-export const VERSION = "0.2.17";
+export const VERSION = "0.2.19";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@floomhq/skills",
-  "version": "0.2.17",
+  "version": "0.2.19",
   "description": "Floom CLI — publish, install, sync, and share AI agent skills.",
   "license": "MIT",
   "homepage": "https://skills.floom.dev",