@floomhq/skills 0.2.18 → 0.2.19

package/dist/index.js

@@ -2547,7 +2547,7 @@ function isLegacyApiUrl(apiUrl) {
 }
 
 // src/version.ts
-var VERSION = "0.2.18";
+var VERSION = "0.2.19";
 
 // src/api-client.ts
 var DEFAULT_TIMEOUT_MS = 2e4;
@@ -3104,37 +3104,31 @@ function buildAuthenticatedSkillUrl(appUrl, librarySlug, skillSlug) {
 }
 function buildPublicSkillUrl(appUrl, handle, librarySlug, skillSlug) {
   const base = trimAppUrl(appUrl);
-  if (librarySlug !== handle) return null;
-  return `${base}/@${handle}/${skillSlug}`;
+  if (librarySlug === handle) return `${base}/@${encodeURIComponent(handle)}/${encodeURIComponent(skillSlug)}`;
+  return `${base}/${encodeURIComponent(librarySlug)}/${encodeURIComponent(skillSlug)}`;
 }
 function buildPublishViewLines(args) {
   const manageUrl = buildAuthenticatedSkillUrl(args.appUrl, args.refRoot, args.slug);
   const publicUrl = buildPublicSkillUrl(args.appUrl, args.handle, args.refRoot, args.slug);
   if (args.visibility === "public") {
     return {
-      heading: publicUrl ? "View (public):" : "Manage (workspace skill):",
-      primaryUrl: publicUrl ?? manageUrl,
-      ...publicUrl ? {} : { note: "Workspace skills stay under their authenticated library URL unless copied to your personal library." },
+      heading: "View (public):",
+      primaryUrl: publicUrl,
       shareUrl: args.shareUrl ?? void 0
     };
   }
   if (args.visibility === "unlisted") {
     return {
-      heading: publicUrl ? "View (unlisted - use a share link for unauthenticated access):" : "Manage (unlisted workspace skill):",
-      primaryUrl: publicUrl ?? manageUrl,
-      ...publicUrl ? {} : { note: "Use the share link for unauthenticated access; workspace detail URLs remain authenticated." },
+      heading: "View (unlisted - use a share link for unauthenticated access):",
+      primaryUrl: publicUrl,
       shareUrl: args.shareUrl ?? void 0
     };
   }
   return {
     heading: "Manage (private - sign in to your workspace):",
     primaryUrl: manageUrl,
-    ...publicUrl ? {
-      secondaryHeading: "Public URL after you make it public or unlisted:",
-      secondaryUrl: publicUrl
-    } : {
-      note: "Workspace skills stay under their authenticated library URL unless copied to your personal library."
-    }
+    secondaryHeading: "Public URL after you make it public or unlisted:",
+    secondaryUrl: publicUrl
   };
 }
 
@@ -3767,9 +3761,30 @@ async function infoCommand(refStr) {
 }
 
 // src/commands/share.ts
+import prompts2 from "prompts";
 function isValidEmail(email) {
   return /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email);
 }
+function isValidRole(role) {
+  return role === "viewer" || role === "editor";
+}
+async function confirmShare(refStr, email, role, opts) {
+  if (opts.yes) return;
+  if (!process.stdin.isTTY) {
+    log.err(`Sharing ${refStr} with ${email} requires confirmation. Re-run with --yes to confirm.`);
+    process.exit(1);
+  }
+  const answer = await prompts2({
+    type: "confirm",
+    name: "confirmed",
+    message: `Share ${refStr} with ${email} as ${role}?`,
+    initial: false
+  });
+  if (!answer.confirmed) {
+    log.info("Share cancelled.");
+    process.exit(1);
+  }
+}
 async function shareCommand(refStr, email, opts = {}) {
   const ref = parseSkillRef(refStr);
   if (!ref) {
@@ -3781,12 +3796,18 @@ async function shareCommand(refStr, email, opts = {}) {
     process.exit(1);
   }
   const role = opts.role ?? "viewer";
+  if (!isValidRole(role)) {
+    log.err(`Invalid role: ${role}. Expected viewer or editor.`);
+    process.exit(1);
+  }
+  await confirmShare(refStr, email, role, opts);
   const r = await api(`/skills/${ref.owner}/${ref.slug}/grants`, {
     method: "POST",
     authRequired: true,
     body: { email, role }
   });
   log.ok(`Shared ${refStr} with ${r.grant.email} as ${r.grant.role}.`);
+  log.info(`Undo: floom unshare ${refStr} ${r.grant.email}`);
   if (r.email_status) log.kv("email", r.email_status);
 }
 async function unshareCommand(refStr, email) {
@@ -4972,7 +4993,7 @@ program.command("pull").description("Pull account/workspace instructions for act
 program.command("pin <ref>").description("Pin a workspace skill for local pull").option("--workspace <slug>", "Workspace slug").option("--target <target>", "claude | codex | cursor | kimi | opencode", "codex").action((ref, opts) => pinCommand(ref, opts));
 program.command("pinned").alias("pins").description("List workspace skills pinned for local pull").option("--workspace <slug>", "Workspace slug").option("--target <target>", "claude | codex | cursor | kimi | opencode", "codex").option("--json", "Emit machine-readable JSON").action((opts) => pinnedCommand(opts));
 program.command("unpin <ref>").description("Unpin a workspace skill for local pull").option("--workspace <slug>", "Workspace slug").option("--target <target>", "claude | codex | cursor | kimi | opencode", "codex").action((ref, opts) => unpinCommand(ref, opts));
-program.command("share <ref> <email>").description("Invite someone to a skill by email.").option("--role <role>", "viewer (default) or editor").action((ref, email, opts) => shareCommand(ref, email, opts));
+program.command("share <ref> <email>").description("Invite someone to a skill by email.").option("--role <role>", "viewer (default) or editor").option("--yes", "Confirm the share without an interactive prompt").action((ref, email, opts) => shareCommand(ref, email, opts));
 program.command("unshare <ref> <email>").description("Revoke someone's access.").action((ref, email) => unshareCommand(ref, email));
 var linkCmd = program.command("link").description("Create opaque share links for unlisted/public skills");
 linkCmd.command("create <ref>").description("Create a share link URL for a skill.").option("--name <name>", "Optional link label").option("--role <role>", "viewer (default) or editor").action((ref, opts) => linkCreateCommand(ref, opts));

package/dist/version.js

@@ -1 +1 @@
-export const VERSION = "0.2.18";
+export const VERSION = "0.2.19";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@floomhq/skills",
-  "version": "0.2.18",
+  "version": "0.2.19",
   "description": "Floom CLI — publish, install, sync, and share AI agent skills.",
   "license": "MIT",
   "homepage": "https://skills.floom.dev",