@heurist-network/skills 0.1.1 → 0.1.3

package/README.md

@@ -160,7 +160,7 @@ These features are unique to the Heurist marketplace and not present in other sk
 
 | Variable | Description |
 |----------|-------------|
-| `HEURIST_SKILLS_API` | Override marketplace API URL (default: `https://mesh.heurist.ai`) |
+| `HEURIST_SKILLS_API` | Override marketplace API URL (default: `https://mesh.heurist.xyz`) |
 
 ## Lock File Compatibility
 

package/dist/cli.js

@@ -75,7 +75,7 @@ var DEFAULT_API_URL;
 var init_api = __esm({
   "src/api.ts"() {
     "use strict";
-    DEFAULT_API_URL = "https://mesh.heurist.ai";
+    DEFAULT_API_URL = "https://mesh.heurist.xyz";
   }
 });
 
@@ -588,25 +588,30 @@ async function addCommand(args) {
     slug = await interactiveSearch();
     if (!slug) return;
   }
-  const spinner5 = p.spinner();
-  spinner5.start(`Fetching skill info for ${pc.cyan(slug)}`);
+  const spinner6 = p.spinner();
+  spinner6.start(`Fetching skill info for ${pc.cyan(slug)}`);
   let detail;
   try {
     detail = await getSkill(slug);
   } catch (err) {
-    spinner5.stop("Skill lookup failed.");
+    spinner6.stop("Skill lookup failed.");
     if (err instanceof Error && err.message.includes("API error 404")) {
       throw new Error(`Skill ${slug} not found.`);
     }
     throw err;
   }
   if (detail.verification_status !== "verified") {
-    spinner5.stop(
+    spinner6.stop(
       `Skill ${pc.red(slug)} is ${pc.yellow(detail.verification_status)} and cannot be installed.`
     );
     throw new Error("Only verified skills can be installed.");
   }
-  spinner5.stop(`Found: ${pc.cyan(detail.name)} \u2014 ${detail.description}`);
+  spinner6.stop(`Found: ${pc.cyan(detail.name)} \u2014 ${detail.description}`);
+  if (detail.external_api_dependencies.length > 0) {
+    p.log.info(
+      `External APIs: ${pc.dim(detail.external_api_dependencies.join(", "))}`
+    );
+  }
   const warnings = getCapabilityWarnings(detail.capabilities);
   if (warnings.length > 0) {
     p.log.warn(
@@ -653,12 +658,12 @@ async function addCommand(args) {
   if (existing) {
     await cleanupLockEntry(existing);
   }
-  spinner5.start(`Downloading ${pc.cyan(slug)}`);
+  spinner6.start(`Downloading ${pc.cyan(slug)}`);
   const download = await downloadSkill(slug);
-  spinner5.stop(
+  spinner6.stop(
     `Downloaded ${pc.green(download.filename)} (${formatBytes(download.content.length)})`
   );
-  spinner5.start(`Installing to ${scope} scope`);
+  spinner6.start(`Installing to ${scope} scope`);
   const installResult = await installDownloadedSkill({
     scope,
     slug,
@@ -667,7 +672,7 @@ async function addCommand(args) {
     agents: targetAgents,
     mode: installMode
   });
-  spinner5.stop(`Installed to ${pc.dim(installResult.canonicalPath)}`);
+  spinner6.stop(`Installed to ${pc.dim(installResult.canonicalPath)}`);
   upsertLockEntry(scope, {
     slug,
     name: detail.name,
@@ -852,10 +857,10 @@ async function interactiveSearch() {
     placeholder: "e.g. defi, swap, analytics"
   });
   if (typeof searchTerm === "symbol" || !searchTerm) return void 0;
-  const spinner5 = p.spinner();
-  spinner5.start("Searching marketplace...");
+  const spinner6 = p.spinner();
+  spinner6.start("Searching marketplace...");
   const result = await listSkills({ search: searchTerm, limit: 20 });
-  spinner5.stop(`Found ${result.skills.length} skill(s).`);
+  spinner6.stop(`Found ${result.skills.length} skill(s).`);
   if (result.skills.length === 0) {
     p.log.warn("No skills found matching that query.");
     return void 0;
@@ -1113,7 +1118,7 @@ import * as p3 from "@clack/prompts";
 import pc3 from "picocolors";
 async function listCommand(args) {
   const options = parseListOptions(args);
-  if (options.showRemote) {
+  if (options.showRemote || options.search || options.category) {
     await listRemote(options);
     return;
   }
@@ -1194,14 +1199,14 @@ async function listLocal(scope, agentFilter) {
   }
 }
 async function listRemote(options) {
-  const spinner5 = p3.spinner();
-  spinner5.start("Fetching skills from marketplace...");
+  const spinner6 = p3.spinner();
+  spinner6.start("Fetching skills from marketplace...");
   const result = await listSkills({
     category: options.category || void 0,
     search: options.search || void 0,
     limit: 50
   });
-  spinner5.stop(`Showing ${result.skills.length} verified skill(s).`);
+  spinner6.stop(`Showing ${result.skills.length} verified skill(s).`);
   if (result.skills.length === 0) {
     p3.log.warn("No skills found.");
     return;
@@ -1212,7 +1217,8 @@ async function listRemote(options) {
     const status = installed.has(skill.slug) ? pc3.green(" [installed]") : "";
     const category = skill.category ? pc3.dim(` [${skill.category}]`) : "";
     const risk = skill.risk_tier ? pc3.dim(` risk:${skill.risk_tier}`) : "";
-    console.log(`  ${pc3.cyan(skill.slug)}${category}${risk}${status}`);
+    const externalApis = skill.external_api_dependencies.length > 0 ? pc3.dim(` apis:${skill.external_api_dependencies.join(", ")}`) : "";
+    console.log(`  ${pc3.cyan(skill.slug)}${category}${risk}${externalApis}${status}`);
     console.log(`    ${skill.description}`);
     const warnings = [];
     if (skill.capabilities.requires_private_keys) warnings.push("private-keys");
@@ -1303,20 +1309,20 @@ async function infoCommand(args) {
     p4.log.error("Usage: heurist-skills info <slug>");
     return;
   }
-  const spinner5 = p4.spinner();
-  spinner5.start(`Fetching info for ${pc4.cyan(slug)}`);
+  const spinner6 = p4.spinner();
+  spinner6.start(`Fetching info for ${pc4.cyan(slug)}`);
   let detail;
   try {
     detail = await getSkill(slug);
   } catch (err) {
     if (err instanceof Error && err.message.includes("API error 404")) {
-      spinner5.stop(`Skill ${pc4.red(slug)} not found.`);
+      spinner6.stop(`Skill ${pc4.red(slug)} not found.`);
       throw new Error(`Skill ${slug} not found.`);
     }
-    spinner5.stop(`Failed to fetch info for ${pc4.cyan(slug)}.`);
+    spinner6.stop(`Failed to fetch info for ${pc4.cyan(slug)}.`);
     throw err;
   }
-  spinner5.stop(`${pc4.bold(detail.slug)}`);
+  spinner6.stop(`${pc4.bold(detail.slug)}`);
   console.log();
   console.log(`  ${pc4.bold("Name:")}         ${detail.name}`);
   console.log(`  ${pc4.bold("Slug:")}         ${detail.slug}`);
@@ -1325,6 +1331,9 @@ async function infoCommand(args) {
   console.log(`  ${pc4.bold("Risk Tier:")}    ${detail.risk_tier || "\u2014"}`);
   console.log(`  ${pc4.bold("Status:")}       ${detail.verification_status}`);
   console.log(`  ${pc4.bold("Source:")}       ${detail.source_url || "\u2014"}`);
+  if (detail.external_api_dependencies.length > 0) {
+    console.log(`  ${pc4.bold("External APIs:")} ${detail.external_api_dependencies.join(", ")}`);
+  }
   if (detail.author?.display_name) {
     console.log(`  ${pc4.bold("Author:")}       ${detail.author.display_name}`);
   }
@@ -1399,8 +1408,8 @@ async function checkUpdatesCommand(_args) {
     p5.log.info("No skills installed. Nothing to check.");
     return;
   }
-  const spinner5 = p5.spinner();
-  spinner5.start(
+  const spinner6 = p5.spinner();
+  spinner6.start(
     `Checking updates for ${installed.length} installed skill(s)...`
   );
   const uniqueInstalled = Array.from(
@@ -1420,10 +1429,10 @@ async function checkUpdatesCommand(_args) {
     return approvedSha && approvedSha !== entry.sha256;
   });
   if (outdated.length === 0) {
-    spinner5.stop(pc5.green("All skills are up to date."));
+    spinner6.stop(pc5.green("All skills are up to date."));
     return;
   }
-  spinner5.stop(pc5.yellow(`${outdated.length} update(s) available:`));
+  spinner6.stop(pc5.yellow(`${outdated.length} update(s) available:`));
   console.log();
   for (const entry of outdated) {
     const approvedSha = updatesBySlug.get(entry.slug) || "unknown";
@@ -1444,45 +1453,165 @@ var init_check_updates = __esm({
   }
 });
 
-// src/cli.ts
-import "dotenv/config";
+// src/commands/update.ts
+var update_exports = {};
+__export(update_exports, {
+  updateCommand: () => updateCommand
+});
 import * as p6 from "@clack/prompts";
 import pc6 from "picocolors";
+async function updateCommand(_args) {
+  const installed = getInstalledEntries("all");
+  if (installed.length === 0) {
+    p6.log.info("No skills installed. Nothing to update.");
+    return;
+  }
+  const spinner6 = p6.spinner();
+  spinner6.start(
+    `Checking updates for ${installed.length} installed skill(s)...`
+  );
+  const uniqueInstalled = Array.from(
+    new Map(
+      installed.map((entry) => [
+        `${entry.slug}:${entry.sha256}`,
+        { slug: entry.slug, sha256: entry.sha256 }
+      ])
+    ).values()
+  );
+  let updates;
+  try {
+    updates = await checkUpdates(uniqueInstalled);
+  } catch (err) {
+    spinner6.stop("Failed to check for updates.");
+    throw err;
+  }
+  const updatesBySlug = new Map(
+    updates.map((update) => [update.slug, update.approved_sha256])
+  );
+  const outdated = installed.filter((entry) => {
+    const approvedSha = updatesBySlug.get(entry.slug);
+    return approvedSha && approvedSha !== entry.sha256;
+  });
+  if (outdated.length === 0) {
+    spinner6.stop(pc6.green("All skills are up to date."));
+    return;
+  }
+  spinner6.stop(pc6.yellow(`${outdated.length} update(s) available:`));
+  console.log();
+  for (const entry of outdated) {
+    const approvedSha = updatesBySlug.get(entry.slug) || "unknown";
+    console.log(`  ${pc6.cyan(entry.slug)} ${pc6.dim(`[${entry.scope}]`)}`);
+    console.log(`    current: ${pc6.dim(entry.sha256.slice(0, 16))}...`);
+    console.log(`    latest:  ${pc6.dim(approvedSha.slice(0, 16))}...`);
+    console.log();
+  }
+  let successCount = 0;
+  let failCount = 0;
+  for (const entry of outdated) {
+    const targetAgents = Object.keys(entry.agent_installs);
+    const scope = entry.scope;
+    const installMode = entry.install_method;
+    p6.log.info(`Updating ${pc6.cyan(entry.slug)}...`);
+    try {
+      await cleanupEntry(entry);
+      const download = await downloadSkill(entry.slug);
+      const installResult = await installDownloadedSkill({
+        scope,
+        slug: entry.slug,
+        content: download.content,
+        isZip: download.isZip,
+        agents: targetAgents,
+        mode: installMode
+      });
+      upsertLockEntry(scope, {
+        slug: entry.slug,
+        name: entry.name,
+        sha256: download.sha256,
+        installed_at: entry.installed_at,
+        is_zip: download.isZip,
+        install_method: installMode,
+        canonical_path: installResult.canonicalPath,
+        agent_installs: installResult.agentInstalls
+      });
+      p6.log.success(`${pc6.green("\u2713")} ${pc6.bold(entry.slug)} updated.`);
+      successCount++;
+    } catch (err) {
+      p6.log.error(
+        `Failed to update ${entry.slug}: ${err.message}`
+      );
+      failCount++;
+    }
+  }
+  console.log();
+  if (successCount > 0) {
+    p6.log.success(`Updated ${successCount} skill(s).`);
+  }
+  if (failCount > 0) {
+    p6.log.warn(`Failed to update ${failCount} skill(s).`);
+  }
+}
+async function cleanupEntry(entry) {
+  const paths = /* @__PURE__ */ new Set();
+  paths.add(entry.canonical_path);
+  for (const install of Object.values(entry.agent_installs)) {
+    if (install?.path) {
+      paths.add(install.path);
+    }
+  }
+  for (const path of paths) {
+    await removePathIfExists(path);
+  }
+}
+var init_update = __esm({
+  "src/commands/update.ts"() {
+    "use strict";
+    init_api();
+    init_agents();
+    init_installer();
+    init_lock();
+  }
+});
+
+// src/cli.ts
+import "dotenv/config";
+import * as p7 from "@clack/prompts";
+import pc7 from "picocolors";
 var VERSION = "0.1.0";
 var LOGO = `
-${pc6.cyan("\u2588\u2588\u2557  \u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2557   \u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557")}
-${pc6.cyan("\u2588\u2588\u2551  \u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D\u2588\u2588\u2551   \u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D\u255A\u2550\u2550\u2588\u2588\u2554\u2550\u2550\u255D")}
-${pc6.cyan("\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2551\u2588\u2588\u2588\u2588\u2588\u2557  \u2588\u2588\u2551   \u2588\u2588\u2551\u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255D\u2588\u2588\u2551\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557   \u2588\u2588\u2551")}
-${pc6.cyan("\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u255D  \u2588\u2588\u2551   \u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2551\u255A\u2550\u2550\u2550\u2550\u2588\u2588\u2551   \u2588\u2588\u2551")}
-${pc6.cyan("\u2588\u2588\u2551  \u2588\u2588\u2551\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u255A\u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255D\u2588\u2588\u2551  \u2588\u2588\u2551\u2588\u2588\u2551\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2551   \u2588\u2588\u2551")}
-${pc6.cyan("\u255A\u2550\u255D  \u255A\u2550\u255D\u255A\u2550\u2550\u2550\u2550\u2550\u2550\u255D \u255A\u2550\u2550\u2550\u2550\u2550\u255D \u255A\u2550\u255D  \u255A\u2550\u255D\u255A\u2550\u255D\u255A\u2550\u2550\u2550\u2550\u2550\u2550\u255D   \u255A\u2550\u255D")}
-${pc6.dim(`  skills v${VERSION}`)}
+${pc7.cyan("\u2588\u2588\u2557  \u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2557   \u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557")}
+${pc7.cyan("\u2588\u2588\u2551  \u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D\u2588\u2588\u2551   \u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D\u255A\u2550\u2550\u2588\u2588\u2554\u2550\u2550\u255D")}
+${pc7.cyan("\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2551\u2588\u2588\u2588\u2588\u2588\u2557  \u2588\u2588\u2551   \u2588\u2588\u2551\u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255D\u2588\u2588\u2551\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557   \u2588\u2588\u2551")}
+${pc7.cyan("\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u255D  \u2588\u2588\u2551   \u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2551\u255A\u2550\u2550\u2550\u2550\u2588\u2588\u2551   \u2588\u2588\u2551")}
+${pc7.cyan("\u2588\u2588\u2551  \u2588\u2588\u2551\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u255A\u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255D\u2588\u2588\u2551  \u2588\u2588\u2551\u2588\u2588\u2551\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2551   \u2588\u2588\u2551")}
+${pc7.cyan("\u255A\u2550\u255D  \u255A\u2550\u255D\u255A\u2550\u2550\u2550\u2550\u2550\u2550\u255D \u255A\u2550\u2550\u2550\u2550\u2550\u255D \u255A\u2550\u255D  \u255A\u2550\u255D\u255A\u2550\u255D\u255A\u2550\u2550\u2550\u2550\u2550\u2550\u255D   \u255A\u2550\u255D")}
+${pc7.dim(`  skills v${VERSION}`)}
 `;
 function printHelp() {
   console.log(LOGO);
-  console.log(`${pc6.bold("Usage:")} heurist-skills <command> [options]`);
+  console.log(`${pc7.bold("Usage:")} heurist-skills <command> [options]`);
   console.log();
-  console.log(`${pc6.bold("Commands:")}`);
-  console.log(`  ${pc6.cyan("add")} <slug>          Install a skill from the marketplace  (aliases: install)`);
-  console.log(`  ${pc6.cyan("remove")} <slug>       Uninstall a skill                    (aliases: rm, uninstall)`);
-  console.log(`  ${pc6.cyan("list")}                List project-installed skills          (aliases: ls)`);
-  console.log(`  ${pc6.cyan("list")} --global       List global-installed skills`);
-  console.log(`  ${pc6.cyan("find")} [query]        Search the skill marketplace          (aliases: search, f)`);
-  console.log(`  ${pc6.cyan("info")} <slug>         Show detailed skill info              (aliases: show)`);
-  console.log(`  ${pc6.cyan("check")}               Check for available updates           (aliases: check-updates, update-check)`);
-  console.log(`  ${pc6.cyan("help")}                Show this help`);
+  console.log(`${pc7.bold("Commands:")}`);
+  console.log(`  ${pc7.cyan("add")} <slug>          Install a skill from the marketplace  (aliases: install)`);
+  console.log(`  ${pc7.cyan("remove")} <slug>       Uninstall a skill                    (aliases: rm, uninstall)`);
+  console.log(`  ${pc7.cyan("list")}                List project-installed skills          (aliases: ls)`);
+  console.log(`  ${pc7.cyan("list")} --global       List global-installed skills`);
+  console.log(`  ${pc7.cyan("find")} [query]        Search the skill marketplace          (aliases: search, f)`);
+  console.log(`  ${pc7.cyan("info")} <slug>         Show detailed skill info              (aliases: show)`);
+  console.log(`  ${pc7.cyan("check")}               Check for available updates           (aliases: check-updates, update-check)`);
+  console.log(`  ${pc7.cyan("update")}              Update all installed skills            (aliases: upgrade)`);
+  console.log(`  ${pc7.cyan("help")}                Show this help`);
   console.log();
-  console.log(`${pc6.bold("Options:")}`);
-  console.log(`  ${pc6.dim("-g, --global")}         Use the global scope (~/.agents/skills/)`);
-  console.log(`  ${pc6.dim("-a, --agent <agent>")}  Target or filter specific agents`);
-  console.log(`  ${pc6.dim("--copy")}               Copy files instead of symlinking`);
-  console.log(`  ${pc6.dim("-y, --yes")}            Skip confirmation prompts`);
-  console.log(`  ${pc6.dim("--category, -c")}       Filter by category (use with find/list --remote)`);
-  console.log(`  ${pc6.dim("--search, -s")}         Filter by search term (use with list --remote)`);
+  console.log(`${pc7.bold("Options:")}`);
+  console.log(`  ${pc7.dim("-g, --global")}         Use the global scope (~/.agents/skills/)`);
+  console.log(`  ${pc7.dim("-a, --agent <agent>")}  Target or filter specific agents`);
+  console.log(`  ${pc7.dim("--copy")}               Copy files instead of symlinking`);
+  console.log(`  ${pc7.dim("-y, --yes")}            Skip confirmation prompts`);
+  console.log(`  ${pc7.dim("--category, -c")}       Filter by category (use with find/list --remote)`);
+  console.log(`  ${pc7.dim("--search, -s")}         Filter by search term (use with list --remote)`);
   console.log();
-  console.log(`${pc6.bold("Environment:")}`);
-  console.log(`  ${pc6.dim("HEURIST_SKILLS_API")}   Override marketplace API URL`);
-  console.log(`                       ${pc6.dim("(default: https://mesh.heurist.ai)")}`);
+  console.log(`${pc7.bold("Environment:")}`);
+  console.log(`  ${pc7.dim("HEURIST_SKILLS_API")}   Override marketplace API URL`);
+  console.log(`                       ${pc7.dim("(default: https://mesh.heurist.xyz)")}`);
   console.log();
 }
 async function main() {
@@ -1497,7 +1626,7 @@ async function main() {
     console.log(VERSION);
     return;
   }
-  p6.intro(pc6.cyan("heurist-skills"));
+  p7.intro(pc7.cyan("heurist-skills"));
   try {
     switch (command) {
       case "add":
@@ -1539,16 +1668,22 @@ async function main() {
         await checkUpdatesCommand2(commandArgs);
         break;
       }
+      case "update":
+      case "upgrade": {
+        const { updateCommand: updateCommand2 } = await Promise.resolve().then(() => (init_update(), update_exports));
+        await updateCommand2(commandArgs);
+        break;
+      }
       default:
-        p6.log.error(`Unknown command: ${pc6.red(command)}`);
+        p7.log.error(`Unknown command: ${pc7.red(command)}`);
         console.log();
         printHelp();
         process.exit(1);
     }
   } catch (err) {
-    p6.log.error(err.message);
+    p7.log.error(err.message);
     process.exit(1);
   }
-  p6.outro(pc6.dim("Done."));
+  p7.outro(pc7.dim("Done."));
 }
 main();

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "@heurist-network/skills",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "CLI tool for browsing, installing, and managing Heurist Mesh skills from the skill marketplace registry.",
   "type": "module",
   "bin": {
-    "heurist-skills": "./bin/cli.mjs"
+    "heurist-skills": "bin/cli.mjs"
   },
   "files": [
     "dist",