@klhapp/skillmux 1.10.0 → 1.11.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +31 -0
- package/README.md +18 -18
- package/docs/README.md +3 -3
- package/docs/assets/architecture-dark.svg +39 -32
- package/docs/assets/architecture-light.svg +25 -18
- package/docs/cli.md +73 -33
- package/docs/concepts.md +10 -10
- package/docs/configuration.md +6 -4
- package/docs/deployment.md +1 -1
- package/docs/getting-started.md +17 -13
- package/docs/mcp-routing.md +1 -1
- package/docs/skill-management.md +11 -11
- package/docs/troubleshooting.md +4 -4
- package/package.json +1 -1
- package/src/adapters.ts +11 -11
- package/src/cli.ts +173 -63
- package/src/commands/audit.ts +2 -2
- package/src/commands/config.ts +23 -15
- package/src/commands/context.ts +11 -10
- package/src/commands/core.ts +2 -2
- package/src/commands/doctor.ts +31 -10
- package/src/commands/eval.ts +14 -4
- package/src/commands/init.ts +175 -124
- package/src/commands/project.ts +161 -44
- package/src/commands/report.ts +3 -3
- package/src/commands/shared.ts +7 -14
- package/src/commands/skill.ts +2 -1
- package/src/commands/target.ts +27 -9
- package/src/completions.ts +41 -15
- package/src/config-service.ts +3 -3
- package/src/init-agents.ts +329 -0
- package/src/init-instructions.ts +47 -28
- package/src/mcp-registration.ts +89 -0
- package/src/output.ts +53 -16
- package/src/prompts.ts +75 -20
- package/src/scan.ts +19 -19
- package/src/server.ts +1 -1
- package/src/init-clients.ts +0 -220
package/docs/cli.md
CHANGED
|
@@ -4,11 +4,11 @@ The Bun package and standalone Linux executable expose the same Skillmux CLI.
|
|
|
4
4
|
For Linux installation, use the [pinned checksum-verified download](getting-started.md#install-the-cli)
|
|
5
5
|
or, when provenance verification is required, the
|
|
6
6
|
[attested GitHub CLI path](getting-started.md#install-with-github-cli-attestation).
|
|
7
|
-
Native management belongs on the machine that owns the
|
|
7
|
+
Native management belongs on the machine that owns the agent skill directories:
|
|
8
8
|
use the built-in `local` target for `init`, `install`, pinning, and `sync`.
|
|
9
9
|
Named remote contexts administer shared-server configuration through its
|
|
10
10
|
administrative API only; they do not install, pin, synchronize, or otherwise
|
|
11
|
-
manage skill directories on remote
|
|
11
|
+
manage skill directories on remote agent machines.
|
|
12
12
|
|
|
13
13
|
In this guide, **local target** means the filesystem and process selected by
|
|
14
14
|
the built-in CLI context. It does not describe local inference. A local target
|
|
@@ -161,59 +161,79 @@ The JSON response contains no credential, API-key, or token values.
|
|
|
161
161
|
|
|
162
162
|
`config init` writes only `vault_path`. It leaves an existing config unchanged
|
|
163
163
|
and does not add `local_vault_paths`. Remote contexts administer the deployed
|
|
164
|
-
server configuration; they never administer
|
|
165
|
-
sync, or any other remote-
|
|
164
|
+
server configuration; they never administer agent skill installation, pins,
|
|
165
|
+
sync, or any other remote-agent directory operation.
|
|
166
166
|
|
|
167
167
|
---
|
|
168
168
|
|
|
169
169
|
## Setup planner (`skillmux init`)
|
|
170
170
|
|
|
171
171
|
Run `skillmux init` with no arguments in a terminal to start guided setup.
|
|
172
|
-
|
|
173
|
-
|
|
172
|
+
On a machine with no config yet, it first asks for the skill vault path
|
|
173
|
+
(defaulting to `~/skills`) rather than assuming it silently — the vault
|
|
174
|
+
must already exist there (`skillmux scan`/`install` create it). Skillmux
|
|
175
|
+
preselects agents it can detect from filesystem evidence, asks for core
|
|
176
|
+
skills, prints one complete review, and applies after one confirmation.
|
|
174
177
|
The prompt stays line-oriented and does not use an alternate terminal screen.
|
|
175
178
|
|
|
176
|
-
Select
|
|
179
|
+
Select agents by product name:
|
|
177
180
|
|
|
178
181
|
```sh
|
|
179
|
-
skillmux init --
|
|
180
|
-
skillmux init --
|
|
182
|
+
skillmux init --agent claude-code --agent codex --core csv-formatter --dry-run
|
|
183
|
+
skillmux init --agent claude-code --agent codex --core csv-formatter --yes
|
|
181
184
|
```
|
|
182
185
|
|
|
183
|
-
Skillmux supports these
|
|
186
|
+
Skillmux supports these agent IDs:
|
|
184
187
|
|
|
185
|
-
|
|
|
188
|
+
| Agent | Skill delivery |
|
|
186
189
|
|--------|----------------|
|
|
187
190
|
| `claude-code` | `~/.claude/skills` |
|
|
188
191
|
| `codex` | `$CODEX_HOME/skills`, falling back to `~/.codex/skills` |
|
|
189
|
-
| `
|
|
192
|
+
| `opencode`, `github-copilot`, `windsurf` | Shared `~/.agents/skills` surface |
|
|
190
193
|
| `antigravity` | `~/.gemini/config/skills` |
|
|
191
194
|
| `goose`, `hermes` | Manual full-vault configuration |
|
|
192
|
-
| `skillmux-mcp` | Manual MCP registration |
|
|
193
195
|
|
|
194
|
-
|
|
195
|
-
|
|
196
|
-
|
|
196
|
+
There's no agent ID for "just MCP" — pass `--show-mcp-setup` to also print
|
|
197
|
+
the MCP registration snippet, independent of which (if any) agents you
|
|
198
|
+
select. A tool not in this table isn't supported by `init` yet; for an
|
|
199
|
+
arbitrary directory not tied to any supported agent, use `skillmux target
|
|
200
|
+
add <name> --dir <dir> --yes` directly instead of `init`.
|
|
201
|
+
|
|
202
|
+
`--show-mcp-setup` only prints the snippet; it never registers anything.
|
|
203
|
+
For `claude-code` and `codex`, `--register-mcp` goes further and runs that
|
|
204
|
+
agent's own CLI (`claude mcp add` / `codex mcp add`) to register skillmux as
|
|
205
|
+
an MCP server directly, so you don't have to paste the snippet yourself. In
|
|
206
|
+
guided mode, if any selected agent supports it, skillmux asks before
|
|
207
|
+
registering; noninteractive runs only register when `--register-mcp` is
|
|
208
|
+
passed explicitly. It is a no-op for agents with no known registration
|
|
209
|
+
command (skip it and use `--show-mcp-setup` instead).
|
|
210
|
+
|
|
211
|
+
The managed instruction block only teaches an agent to call `resolve_skill`/
|
|
212
|
+
`fetch_skill` (MCP tools), so `init` only writes it for an agent actually
|
|
213
|
+
getting MCP this run — one you passed `--register-mcp` for, or any agent at
|
|
214
|
+
all when `--show-mcp-setup` is set. A purely native run (neither flag) writes
|
|
215
|
+
no instruction files, by design; `--no-instructions` forces that off even
|
|
216
|
+
when MCP flags are present.
|
|
197
217
|
|
|
198
218
|
`--dry-run` prints the config, target, instruction, and core plan without
|
|
199
219
|
prompting or writing. `--json` emits one schema-versioned plan or result
|
|
200
220
|
object. Noninteractive writes require `--yes`. `--interactive` forces the
|
|
201
|
-
wizard and seeds it with supplied flags. `--no-
|
|
202
|
-
|
|
221
|
+
wizard and seeds it with supplied flags. `--no-sync` saves setup without
|
|
222
|
+
materializing links.
|
|
203
223
|
|
|
204
224
|
Skillmux rejects a target that currently links to the whole vault. Convert it
|
|
205
225
|
only after reviewing the smaller post-sync skill set:
|
|
206
226
|
|
|
207
227
|
```sh
|
|
208
|
-
skillmux init --
|
|
228
|
+
skillmux init --agent claude-code --migrate-full-vault \
|
|
209
229
|
--core csv-formatter --dry-run
|
|
210
|
-
skillmux init --
|
|
230
|
+
skillmux init --agent claude-code --migrate-full-vault \
|
|
211
231
|
--core csv-formatter --yes
|
|
212
232
|
```
|
|
213
233
|
|
|
214
|
-
|
|
234
|
+
Agent instruction adapters append one managed discovery block and preserve
|
|
215
235
|
the rest of each file. Skillmux uses `.hermes.md` for Hermes and refuses
|
|
216
|
-
`SOUL.md` or Hermes's installed-source `AGENTS.md`.
|
|
236
|
+
`SOUL.md` or Hermes's installed-source `AGENTS.md`. An agent without a safe
|
|
217
237
|
user-level convention reports manual setup.
|
|
218
238
|
|
|
219
239
|
---
|
|
@@ -230,24 +250,35 @@ Skillmux resolves the project directory from an explicit positional path, then
|
|
|
230
250
|
the current Git root, then the current directory. It suggests the directory
|
|
231
251
|
basename as the project-group name.
|
|
232
252
|
|
|
233
|
-
The noninteractive form accepts repeatable
|
|
253
|
+
The noninteractive form accepts repeatable agent and skill flags:
|
|
234
254
|
|
|
235
255
|
```sh
|
|
236
256
|
skillmux project init ~/code/skillmux \
|
|
237
257
|
--name skillmux \
|
|
238
|
-
--
|
|
239
|
-
--
|
|
258
|
+
--agent claude-code \
|
|
259
|
+
--agent codex \
|
|
240
260
|
--skill sdd-tdd \
|
|
241
261
|
--skill code-context \
|
|
242
262
|
--yes
|
|
243
263
|
```
|
|
244
264
|
|
|
245
|
-
`--
|
|
265
|
+
`--agent` maps product names to configured, deduplicated targets. Advanced
|
|
246
266
|
callers can attach a configured target with repeated `--target <name>`.
|
|
247
267
|
Re-running the command merges missing paths, skills, and target attachments.
|
|
248
268
|
It validates the complete manifest before an atomic write and runs `sync` by
|
|
249
269
|
default. Use `--no-sync` when another process will materialize the links.
|
|
250
270
|
|
|
271
|
+
`--register-mcp` is the project-local counterpart to `skillmux init
|
|
272
|
+
--register-mcp`, narrowed to `claude-code` — the only agent whose own CLI
|
|
273
|
+
has a project MCP scope (`codex mcp add` has no scope flag at all, so codex
|
|
274
|
+
stays global-only regardless). It runs `claude mcp add -s project` with this
|
|
275
|
+
project directory as the working directory, which writes a committed
|
|
276
|
+
`.mcp.json` shared with your team rather than the global, personal
|
|
277
|
+
registration `skillmux init` makes. Same instruction-writing rule as `init`:
|
|
278
|
+
a project-root `CLAUDE.md` is written only for an agent actually getting
|
|
279
|
+
registered this run, never unconditionally. Guided mode asks before
|
|
280
|
+
registering, when the selected agents include one that supports it.
|
|
281
|
+
|
|
251
282
|
Direct project commands support later maintenance:
|
|
252
283
|
|
|
253
284
|
```sh
|
|
@@ -257,13 +288,13 @@ skillmux project add-path skillmux ~/code/skillmux --yes
|
|
|
257
288
|
skillmux project remove-path skillmux ~/old/skillmux --yes
|
|
258
289
|
skillmux project pin skillmux sdd-tdd code-context --yes
|
|
259
290
|
skillmux project unpin skillmux old-skill --yes
|
|
260
|
-
skillmux project attach skillmux --
|
|
291
|
+
skillmux project attach skillmux --agent claude-code --agent codex --yes
|
|
261
292
|
skillmux project detach skillmux --target codex --yes
|
|
262
293
|
```
|
|
263
294
|
|
|
264
295
|
`add-path` and `remove-path` detect the current Git root when the path is
|
|
265
|
-
omitted.
|
|
266
|
-
|
|
296
|
+
omitted. Agent attachments map to configured physical targets and deduplicate
|
|
297
|
+
agents that share `~/.agents/skills`. Mutating commands validate the complete
|
|
267
298
|
manifest and replace it atomically. Run `skillmux sync` after direct
|
|
268
299
|
maintenance commands to materialize the new state.
|
|
269
300
|
|
|
@@ -271,7 +302,7 @@ maintenance commands to materialize the new state.
|
|
|
271
302
|
|
|
272
303
|
## Advanced targets (`skillmux target`)
|
|
273
304
|
|
|
274
|
-
Most users should select products with `init --
|
|
305
|
+
Most users should select products with `init --agent`. Use `target` commands
|
|
275
306
|
for custom delivery directories and manifest inspection:
|
|
276
307
|
|
|
277
308
|
```sh
|
|
@@ -358,7 +389,7 @@ skillmux audit prune --older-than 30d --json
|
|
|
358
389
|
# Promote observed, correlated fetches into an eval case file
|
|
359
390
|
skillmux eval promote --since 7d --dry-run
|
|
360
391
|
skillmux eval promote --since 7d --yes
|
|
361
|
-
skillmux eval promote --since 7d --
|
|
392
|
+
skillmux eval promote --since 7d --out eval/observed.json --yes
|
|
362
393
|
```
|
|
363
394
|
|
|
364
395
|
`report` reads `--server <url>`, `--db <path>` (an explicit SQLite file,
|
|
@@ -383,7 +414,7 @@ manual pruning is for on-demand cleanup or a tighter window.
|
|
|
383
414
|
|
|
384
415
|
`eval promote` reads correlated fetches since `--since`, deduplicates them by
|
|
385
416
|
normalized query, and writes `{ query, split: "observed", relevant_skill_ids
|
|
386
|
-
}` cases to `--
|
|
417
|
+
}` cases to `--out` (or deprecated alias `--target`; default an `eval-observed.json` file under
|
|
387
418
|
`state_dir`; never the hand-curated `eval/queries.json` unless given
|
|
388
419
|
explicitly). It never rewrites a case for a query already present in the
|
|
389
420
|
target file; skipped counts are reported in the summary. Because promoted
|
|
@@ -404,7 +435,7 @@ The HTTP server has two separate surfaces:
|
|
|
404
435
|
The MCP bearer token applies only to `/mcp`. The administrative bearer token
|
|
405
436
|
below applies only to `/admin/v1/*` (and `GET /stats`); neither credential grants access to the
|
|
406
437
|
other surface. Named contexts use the latter to administer the deployed server,
|
|
407
|
-
not any remote
|
|
438
|
+
not any remote agent skill directory.
|
|
408
439
|
|
|
409
440
|
Remote servers expose administrative control endpoints under `/admin/v1/*` when enabled in configuration:
|
|
410
441
|
|
|
@@ -456,12 +487,21 @@ When `--json` or `SKILLMUX_JSON=true` is set, all output is emitted to `stdout`
|
|
|
456
487
|
{
|
|
457
488
|
"schema_version": 1,
|
|
458
489
|
"ok": true,
|
|
490
|
+
"context": "local",
|
|
459
491
|
"target": "local",
|
|
460
492
|
"data": { ... },
|
|
461
493
|
"error": null
|
|
462
494
|
}
|
|
463
495
|
```
|
|
464
496
|
|
|
497
|
+
The `context` field identifies the execution context (`"local"` or `{ "name": "<context>", "server": "<url>" }`). The `target` field carries identical content but is deprecated and slated for removal in the next major version; consumers should read `context`.
|
|
498
|
+
|
|
499
|
+
`skillmux init` additionally repeats its payload as deprecated top-level
|
|
500
|
+
`command`, `phase`, `dry_run`, `applied`, `plan`, and `result` keys, which
|
|
501
|
+
predate this envelope. They carry exactly the same content as `data` and are
|
|
502
|
+
kept only so existing automation keeps working. Read `data` instead; the
|
|
503
|
+
duplicated keys will be removed in the next major version.
|
|
504
|
+
|
|
465
505
|
### Exit codes
|
|
466
506
|
|
|
467
507
|
| Code | Meaning | Examples |
|
package/docs/concepts.md
CHANGED
|
@@ -5,7 +5,7 @@ Skillmux separates three decisions:
|
|
|
5
5
|
| Decision | Choices |
|
|
6
6
|
| --- | --- |
|
|
7
7
|
| Skill delivery | Native core/project pins or routed MCP retrieval |
|
|
8
|
-
| Process location | On the
|
|
8
|
+
| Process location | On the agent machine or as a shared HTTP service |
|
|
9
9
|
| Packaging | Skillmux CLI installation or Skillmux server deployment |
|
|
10
10
|
|
|
11
11
|
Retrieval capability is a fourth, independent concern: lexical, hybrid,
|
|
@@ -25,7 +25,7 @@ The default vault checkout path is `~/skills`. Set `vault_path` in
|
|
|
25
25
|
`~/.config/skillmux/config.toml` when its checkout lives elsewhere. On one
|
|
26
26
|
machine, `~/skills` can be both the vault source of truth and its checkout.
|
|
27
27
|
In a shared topology, use a Git-backed vault source of truth, a checkout on
|
|
28
|
-
each
|
|
28
|
+
each agent machine for the Skillmux CLI, and a checkout on the server for
|
|
29
29
|
Skillmux server. Skillmux does not pull, push, replicate, or determine
|
|
30
30
|
freshness between checkouts; Git and the deployment process own those jobs.
|
|
31
31
|
|
|
@@ -45,7 +45,7 @@ Skillmux applies three policies to one vault checkout:
|
|
|
45
45
|
|
|
46
46
|
| Tier | Scope | Delivery |
|
|
47
47
|
| --- | --- | --- |
|
|
48
|
-
| Core | Each configured target | Native
|
|
48
|
+
| Core | Each configured target | Native agent skill directory |
|
|
49
49
|
| Project | Selected project paths and targets | Project-local native skill directory |
|
|
50
50
|
| Routed | Full indexed vault | MCP on demand |
|
|
51
51
|
|
|
@@ -55,7 +55,7 @@ one.
|
|
|
55
55
|
|
|
56
56
|
One skill can serve different roles across machines or projects, but the
|
|
57
57
|
shared manifest prevents conflicting core and project assignments. Core stays
|
|
58
|
-
capped at 25 skills to protect
|
|
58
|
+
capped at 25 skills to protect agent startup context.
|
|
59
59
|
|
|
60
60
|
Delivery tiers do not select a deployment. A local Skillmux process can serve
|
|
61
61
|
routed skills over stdio, while a shared Skillmux process can serve its server
|
|
@@ -66,7 +66,7 @@ checkout over HTTP.
|
|
|
66
66
|
```mermaid
|
|
67
67
|
flowchart TD
|
|
68
68
|
V[Git-backed vault source of truth]
|
|
69
|
-
V -->|
|
|
69
|
+
V -->|agent checkout| CLI[Skillmux CLI]
|
|
70
70
|
V -->|server checkout| SRV[Skillmux server]
|
|
71
71
|
CLI --> NM[Native management: filesystem links]
|
|
72
72
|
CLI --> LM[Local MCP: stdio]
|
|
@@ -75,7 +75,7 @@ flowchart TD
|
|
|
75
75
|
|
|
76
76
|
| Topology | Process location | Transport | Typical installation |
|
|
77
77
|
| --- | --- | --- | --- |
|
|
78
|
-
| Native management |
|
|
78
|
+
| Native management | Agent machine | Filesystem links | Skillmux CLI |
|
|
79
79
|
| Local MCP | Beside one client | stdio | Skillmux CLI |
|
|
80
80
|
| Shared MCP | Server or container host | Streamable HTTP | Skillmux server (full image) |
|
|
81
81
|
|
|
@@ -99,7 +99,7 @@ An HTTP server has two separate surfaces:
|
|
|
99
99
|
MCP authentication protects `/mcp`; administrative authentication protects
|
|
100
100
|
`/admin/v1/*`. Their bearer tokens are distinct and do not grant access across
|
|
101
101
|
surfaces. A named CLI context is an operator connection to the deployed server,
|
|
102
|
-
not a way to manage skill directories on remote
|
|
102
|
+
not a way to manage skill directories on remote agent machines. The server
|
|
103
103
|
and its full/slim images never manage host agent directories. See
|
|
104
104
|
[Deployment](deployment.md#http-surfaces).
|
|
105
105
|
|
|
@@ -109,13 +109,13 @@ package downloads and caches GTE-small when local inference first loads it;
|
|
|
109
109
|
`skillmux models download` prefetches it. Neither Skillmux server image
|
|
110
110
|
bundles a local reranker; configure one remotely when needed.
|
|
111
111
|
|
|
112
|
-
##
|
|
112
|
+
## Agents and targets
|
|
113
113
|
|
|
114
|
-
|
|
114
|
+
An **agent** is a supported product name such as `claude-code` or `codex`.
|
|
115
115
|
Skillmux maps it to the product's skill directory and safe instruction-file
|
|
116
116
|
conventions.
|
|
117
117
|
|
|
118
|
-
A **target** is a physical directory managed by sync. Several
|
|
118
|
+
A **target** is a physical directory managed by sync. Several agents can map
|
|
119
119
|
to one target. Gemini CLI, OpenCode, GitHub Copilot, and Windsurf share
|
|
120
120
|
`~/.agents/skills`, so Skillmux deduplicates that directory.
|
|
121
121
|
|
package/docs/configuration.md
CHANGED
|
@@ -216,7 +216,7 @@ Before exposing HTTP beyond localhost, set `hostname` to a reachable interface,
|
|
|
216
216
|
calling `/admin/v1/*` when that API is enabled. Do not reuse or imply either
|
|
217
217
|
token authorizes the other surface. Named CLI contexts use the administrative
|
|
218
218
|
token to inspect or update the deployed server configuration only; they cannot
|
|
219
|
-
install, pin, synchronize, or otherwise manage remote
|
|
219
|
+
install, pin, synchronize, or otherwise manage remote agent skill directories.
|
|
220
220
|
Docker images likewise do not manage host agent directories.
|
|
221
221
|
Inside the server image, only read-only `config show`, `get`, `validate`,
|
|
222
222
|
`diff`, and `status` are available. Run `config init` or `config set` with the
|
|
@@ -299,7 +299,7 @@ project_groups = ["repo1"] # which [project.*] groups materialize into
|
|
|
299
299
|
- `[core].skills`: symlinked into every `[targets.*]` dir on `sync`. Capped at 25 skills; `sync` fails if a listed skill id isn't actually in the vault.
|
|
300
300
|
- `[project.<group>].skills`: symlinked only into `<path>/<relative path from $HOME to the target dir>`, for each `paths` entry, and only for targets whose `project_groups` names that group. `paths` entries must resolve under `$HOME` (that's how the pin path is derived). A skill can't appear in both `[core]` and the same `[project.*]` group.
|
|
301
301
|
- `[project.<group>].paths` can list the same project's checkout on more than one machine (e.g. `["/home/alice/code/repo1", "/Users/alice/code/repo1"]`). `sync` silently skips any entry that doesn't exist on the machine it's running on (see below), so one shared manifest can span machines with different checkout locations without needing per-machine manifests.
|
|
302
|
-
- `[targets.<name>]`: one entry per adopted surface. `skillmux init --
|
|
302
|
+
- `[targets.<name>]`: one entry per adopted surface. `skillmux init --agent <name> --yes` writes these for each supported agent and scopes newly added targets to the current hostname; `skillmux target add <name> --dir <dir> --yes` writes one directly for a directory not tied to any supported agent. Hand-editing is fine as long as `sync` is still allowed to own the directory (see below). An optional `host` limits the target to an exact machine-hostname match; omit it for a global, backward-compatible target. A host mismatch is reported and skipped before any target filesystem operation. `project_groups` is an explicit list, not a boolean: a target only receives the specific groups it names, never every group in the manifest.
|
|
303
303
|
|
|
304
304
|
**Pin/unpin without hand-editing.** `skillmux core pin`/`unpin` mutate `[core]` for you, and `skillmux project pin`/`unpin` mutate `[project.*]`, validating with the same rules `sync` enforces (skill must resolve from `vault_path`, no duplicate pins, `[core]` stays under the 25-skill cap) before writing anything:
|
|
305
305
|
|
|
@@ -338,8 +338,10 @@ content, and rejects a desired skill that collides with an unmanaged entry
|
|
|
338
338
|
before changing anything.
|
|
339
339
|
|
|
340
340
|
`sync` refuses to touch a directory that exists but has no marker; run
|
|
341
|
-
`skillmux init --
|
|
342
|
-
|
|
341
|
+
`skillmux init --agent <name> --yes` (or `skillmux target add <name> --dir
|
|
342
|
+
<dir> --yes` for a directory not tied to any supported agent) first, which
|
|
343
|
+
either creates the directory fresh or adopts an existing one in place
|
|
344
|
+
(contents untouched).
|
|
343
345
|
`sync --restore-monolith` likewise refuses a `local_vault` marker or any
|
|
344
346
|
unmanaged target content before replacing a target directory with a symlink
|
|
345
347
|
to the vault.
|
package/docs/deployment.md
CHANGED
|
@@ -296,7 +296,7 @@ Read [CLI reference](cli.md#administrative-http-api-adminv1) for routes and
|
|
|
296
296
|
|
|
297
297
|
Named contexts administer the deployed server only — configuration, stats,
|
|
298
298
|
audit prune, evaluation, and remote diagnostics. They do not install, pin,
|
|
299
|
-
synchronize, or otherwise manage skill directories on remote
|
|
299
|
+
synchronize, or otherwise manage skill directories on remote agent machines.
|
|
300
300
|
Run those filesystem-management commands through Skillmux CLI on the machine
|
|
301
301
|
that owns the directories. The full and slim server images read their mounted
|
|
302
302
|
vault checkout and do not manage host agent directories.
|
package/docs/getting-started.md
CHANGED
|
@@ -6,7 +6,7 @@ an installation.
|
|
|
6
6
|
```mermaid
|
|
7
7
|
flowchart LR
|
|
8
8
|
Q{What do you need?}
|
|
9
|
-
Q -->|Managed links in
|
|
9
|
+
Q -->|Managed links in agent skill directories| A[Manage native skills]
|
|
10
10
|
Q -->|Local stdio MCP| B[Add local MCP retrieval]
|
|
11
11
|
Q -->|Streamable HTTP MCP for several clients| C[Run a shared MCP service]
|
|
12
12
|
A --> A1[Skillmux CLI]
|
|
@@ -16,7 +16,7 @@ flowchart LR
|
|
|
16
16
|
|
|
17
17
|
| Goal | Skill delivery | Recommended installation |
|
|
18
18
|
| --- | --- | --- |
|
|
19
|
-
| [Manage native skills](#manage-native-skills) | Managed links in
|
|
19
|
+
| [Manage native skills](#manage-native-skills) | Managed links in agent skill directories | Skillmux CLI |
|
|
20
20
|
| [Add local MCP retrieval](#add-local-mcp-retrieval) | Local stdio MCP | Skillmux CLI |
|
|
21
21
|
| [Run a shared MCP service](#run-a-shared-mcp-service) | Streamable HTTP MCP | Skillmux server (full image) |
|
|
22
22
|
|
|
@@ -122,7 +122,7 @@ Run `skillmux scan ~/skills` before adopting an existing collection.
|
|
|
122
122
|
|
|
123
123
|
## Manage native skills
|
|
124
124
|
|
|
125
|
-
Run the guided setup on the machine that owns the
|
|
125
|
+
Run the guided setup on the machine that owns the agent skill directories:
|
|
126
126
|
|
|
127
127
|
```sh
|
|
128
128
|
skillmux init
|
|
@@ -131,7 +131,7 @@ skillmux init
|
|
|
131
131
|
The planner:
|
|
132
132
|
|
|
133
133
|
1. validates the vault;
|
|
134
|
-
2. detects
|
|
134
|
+
2. detects agents from filesystem evidence;
|
|
135
135
|
3. asks which skills belong in the core tier;
|
|
136
136
|
4. shows the config, target, instruction, and sync plan;
|
|
137
137
|
5. applies the plan after confirmation.
|
|
@@ -145,14 +145,14 @@ Use explicit flags for automation:
|
|
|
145
145
|
|
|
146
146
|
```sh
|
|
147
147
|
skillmux init \
|
|
148
|
-
--
|
|
149
|
-
--
|
|
148
|
+
--agent claude-code \
|
|
149
|
+
--agent codex \
|
|
150
150
|
--core csv-formatter \
|
|
151
151
|
--dry-run
|
|
152
152
|
|
|
153
153
|
skillmux init \
|
|
154
|
-
--
|
|
155
|
-
--
|
|
154
|
+
--agent claude-code \
|
|
155
|
+
--agent codex \
|
|
156
156
|
--core csv-formatter \
|
|
157
157
|
--yes
|
|
158
158
|
```
|
|
@@ -172,13 +172,13 @@ root:
|
|
|
172
172
|
skillmux project init
|
|
173
173
|
```
|
|
174
174
|
|
|
175
|
-
The noninteractive form accepts repeatable
|
|
175
|
+
The noninteractive form accepts repeatable agent and skill flags:
|
|
176
176
|
|
|
177
177
|
```sh
|
|
178
178
|
skillmux project init ~/code/my-project \
|
|
179
179
|
--name my-project \
|
|
180
|
-
--
|
|
181
|
-
--
|
|
180
|
+
--agent claude-code \
|
|
181
|
+
--agent codex \
|
|
182
182
|
--skill code-context \
|
|
183
183
|
--yes
|
|
184
184
|
```
|
|
@@ -225,6 +225,10 @@ Register it with your MCP client:
|
|
|
225
225
|
The client launches the process and closes it with the MCP session. Continue
|
|
226
226
|
with [MCP routing](mcp-routing.md) for client behavior and ranked candidate retrieval.
|
|
227
227
|
|
|
228
|
+
For `claude-code` and `codex`, `skillmux init --register-mcp` runs this
|
|
229
|
+
registration for you via the agent's own CLI instead of editing config by
|
|
230
|
+
hand — see [Setup planner](cli.md#setup-planner-skillmux-init).
|
|
231
|
+
|
|
228
232
|
## Run a shared MCP service
|
|
229
233
|
|
|
230
234
|
Use the full image when you want local embeddings without configuring an
|
|
@@ -266,7 +270,7 @@ The server keeps its two HTTP surfaces separate:
|
|
|
266
270
|
Configure separate MCP and administrative bearer tokens; one never grants
|
|
267
271
|
access to the other. Named CLI contexts can administer this deployed server,
|
|
268
272
|
but cannot install, pin, synchronize, or otherwise manage skill directories on
|
|
269
|
-
remote
|
|
273
|
+
remote agent machines. See [Deployment](deployment.md#http-surfaces).
|
|
270
274
|
|
|
271
275
|
Manage the mounted vault on the host. A retrieval-only container should mount
|
|
272
276
|
it read-only.
|
|
@@ -277,7 +281,7 @@ Use this topology when users need native core or project pins and also one
|
|
|
277
281
|
shared MCP endpoint. Keep one Git-backed vault source of truth. A vault
|
|
278
282
|
checkout is its physical copy; on one machine, `~/skills` can be both:
|
|
279
283
|
|
|
280
|
-
- each machine that owns
|
|
284
|
+
- each machine that owns agent skill directories keeps its own checkout and
|
|
281
285
|
runs the Skillmux CLI for `init`, pinning, and `sync`;
|
|
282
286
|
- the shared server mounts its own checkout and serves routed retrieval over
|
|
283
287
|
HTTP;
|
package/docs/mcp-routing.md
CHANGED
|
@@ -59,7 +59,7 @@ and network exposure before serving other machines. See
|
|
|
59
59
|
This is the MCP surface for AI clients. Its bearer token applies only to
|
|
60
60
|
`/mcp`; server configuration uses the separate operator surface at
|
|
61
61
|
`/admin/v1/*`. AI clients do not need the CLI to use `/mcp`; named CLI contexts
|
|
62
|
-
are for administering the deployed server, not remote
|
|
62
|
+
are for administering the deployed server, not remote agent skill directories.
|
|
63
63
|
See [Deployment](deployment.md#http-surfaces).
|
|
64
64
|
|
|
65
65
|
## Tool contract
|
package/docs/skill-management.md
CHANGED
|
@@ -1,11 +1,11 @@
|
|
|
1
1
|
# Managing skills
|
|
2
2
|
|
|
3
3
|
Skillmux keeps skill content in a vault checkout and materializes selected
|
|
4
|
-
skills into
|
|
4
|
+
skills into agent directories. The vault source of truth is the logical
|
|
5
5
|
collection; a checkout is its physical copy. This guide covers the commands
|
|
6
6
|
that change or inspect that state.
|
|
7
7
|
|
|
8
|
-
Run these commands on the machine that owns the vault checkout and
|
|
8
|
+
Run these commands on the machine that owns the vault checkout and agent
|
|
9
9
|
directories. For a retrieval-only Docker service, manage the mounted checkout
|
|
10
10
|
on the host and keep the container mount read-only; the server image does not
|
|
11
11
|
manage host agent directories.
|
|
@@ -114,28 +114,28 @@ skill whose on-disk content has drifted from what was last installed —
|
|
|
114
114
|
someone may have hand-edited it. Pass `--force` to overwrite anyway. Like
|
|
115
115
|
`audit prune`, a non-interactive or `--json` run needs `--yes`.
|
|
116
116
|
|
|
117
|
-
## Plan
|
|
117
|
+
## Plan agent delivery
|
|
118
118
|
|
|
119
|
-
Use product names for common
|
|
119
|
+
Use product names for common agents:
|
|
120
120
|
|
|
121
121
|
```sh
|
|
122
|
-
skillmux init --
|
|
122
|
+
skillmux init --agent claude-code --agent codex --dry-run
|
|
123
123
|
```
|
|
124
124
|
|
|
125
|
-
|
|
125
|
+
For a directory that isn't tied to any supported agent, use `target add`
|
|
126
|
+
directly instead of `init`:
|
|
126
127
|
|
|
127
128
|
```sh
|
|
128
|
-
skillmux
|
|
129
|
-
skillmux init --target custom --dir /srv/my-agent/skills --yes
|
|
129
|
+
skillmux target add my-agent --dir /srv/my-agent/skills --yes
|
|
130
130
|
```
|
|
131
131
|
|
|
132
132
|
Skillmux refuses to adopt a target that points to the whole vault because sync
|
|
133
133
|
would reduce its visible skills. Review that migration first:
|
|
134
134
|
|
|
135
135
|
```sh
|
|
136
|
-
skillmux init --
|
|
136
|
+
skillmux init --agent claude-code --migrate-full-vault \
|
|
137
137
|
--core csv-formatter --dry-run
|
|
138
|
-
skillmux init --
|
|
138
|
+
skillmux init --agent claude-code --migrate-full-vault \
|
|
139
139
|
--core csv-formatter --yes
|
|
140
140
|
```
|
|
141
141
|
|
|
@@ -170,7 +170,7 @@ skillmux project list
|
|
|
170
170
|
skillmux project show my-project
|
|
171
171
|
skillmux project add-path my-project ~/code/my-project --yes
|
|
172
172
|
skillmux project pin my-project code-context --yes
|
|
173
|
-
skillmux project attach my-project --
|
|
173
|
+
skillmux project attach my-project --agent claude-code --agent codex --yes
|
|
174
174
|
skillmux project unpin my-project code-context --yes
|
|
175
175
|
skillmux project detach my-project --target codex --yes
|
|
176
176
|
skillmux project remove-path my-project ~/code/my-project --yes
|
package/docs/troubleshooting.md
CHANGED
|
@@ -113,8 +113,8 @@ also reveals local-overlay shadowing.
|
|
|
113
113
|
Skillmux will not change an existing unmarked directory. Adopt it first:
|
|
114
114
|
|
|
115
115
|
```sh
|
|
116
|
-
skillmux init --
|
|
117
|
-
skillmux init --
|
|
116
|
+
skillmux init --agent claude-code --dry-run
|
|
117
|
+
skillmux init --agent claude-code --yes
|
|
118
118
|
```
|
|
119
119
|
|
|
120
120
|
### Target points to the full vault
|
|
@@ -122,7 +122,7 @@ skillmux init --client claude-code --yes
|
|
|
122
122
|
Review the smaller pinned set before converting:
|
|
123
123
|
|
|
124
124
|
```sh
|
|
125
|
-
skillmux init --
|
|
125
|
+
skillmux init --agent claude-code \
|
|
126
126
|
--migrate-full-vault \
|
|
127
127
|
--core code-context \
|
|
128
128
|
--dry-run
|
|
@@ -239,7 +239,7 @@ skillmux --context prod config status
|
|
|
239
239
|
An MCP token for `/mcp` cannot authenticate this request, and the administrative
|
|
240
240
|
token cannot authenticate an MCP client. A named context administers the
|
|
241
241
|
deployed server configuration only; use Skillmux CLI on the machine that owns
|
|
242
|
-
|
|
242
|
+
agent directories for `install`, pinning, or `sync`.
|
|
243
243
|
|
|
244
244
|
### Client receives `429`
|
|
245
245
|
|
package/package.json
CHANGED
package/src/adapters.ts
CHANGED
|
@@ -28,7 +28,7 @@ export interface Capabilities {
|
|
|
28
28
|
restart_required_keys: string[];
|
|
29
29
|
}
|
|
30
30
|
|
|
31
|
-
export interface
|
|
31
|
+
export interface ContextAdapterOptions {
|
|
32
32
|
configPath?: string;
|
|
33
33
|
allowInsecure?: boolean;
|
|
34
34
|
clients?: Clients;
|
|
@@ -46,10 +46,10 @@ export interface AuditPruneResult extends PruneResult {
|
|
|
46
46
|
}
|
|
47
47
|
|
|
48
48
|
/**
|
|
49
|
-
*
|
|
49
|
+
* Context adapter: `local` = this CLI process has the Skillmux runtime (vault, index,
|
|
50
50
|
* audit db, embeddings/reranker clients) in-process; `remote` = thin network client to an external process.
|
|
51
51
|
*/
|
|
52
|
-
export interface
|
|
52
|
+
export interface ContextAdapter {
|
|
53
53
|
getCapabilities(): Promise<Capabilities>;
|
|
54
54
|
getConfigShow(): Promise<{ effective: Config; sources: Record<string, string>; active_revision: string }>;
|
|
55
55
|
getConfigGet(key: string): Promise<unknown>;
|
|
@@ -74,11 +74,11 @@ export function isLoopbackHost(hostname: string): boolean {
|
|
|
74
74
|
);
|
|
75
75
|
}
|
|
76
76
|
|
|
77
|
-
export class LocalAdapter implements
|
|
77
|
+
export class LocalAdapter implements ContextAdapter {
|
|
78
78
|
private configPath: string;
|
|
79
79
|
private clients?: Clients;
|
|
80
80
|
|
|
81
|
-
constructor(opts?:
|
|
81
|
+
constructor(opts?: ContextAdapterOptions) {
|
|
82
82
|
this.configPath = resolveConfigPath(opts?.configPath);
|
|
83
83
|
this.clients = opts?.clients;
|
|
84
84
|
}
|
|
@@ -132,7 +132,7 @@ export class LocalAdapter implements TargetAdapter {
|
|
|
132
132
|
return setDottedKey(key, rawValStr, {
|
|
133
133
|
configPath: this.configPath,
|
|
134
134
|
dryRun: opts?.dryRun,
|
|
135
|
-
|
|
135
|
+
contextName: "local",
|
|
136
136
|
});
|
|
137
137
|
}
|
|
138
138
|
|
|
@@ -210,12 +210,12 @@ export class LocalAdapter implements TargetAdapter {
|
|
|
210
210
|
}
|
|
211
211
|
}
|
|
212
212
|
|
|
213
|
-
export class RemoteAdapter implements
|
|
213
|
+
export class RemoteAdapter implements ContextAdapter {
|
|
214
214
|
private serverUrl: string;
|
|
215
215
|
private tokenEnv?: string;
|
|
216
216
|
private allowInsecure: boolean;
|
|
217
217
|
|
|
218
|
-
constructor(target: { server: string; token_env?: string }, opts?:
|
|
218
|
+
constructor(target: { server: string; token_env?: string }, opts?: ContextAdapterOptions) {
|
|
219
219
|
this.serverUrl = target.server.replace(/\/$/, "");
|
|
220
220
|
this.tokenEnv = target.token_env;
|
|
221
221
|
this.allowInsecure = opts?.allowInsecure ?? false;
|
|
@@ -429,10 +429,10 @@ export class RemoteAdapter implements TargetAdapter {
|
|
|
429
429
|
}
|
|
430
430
|
}
|
|
431
431
|
|
|
432
|
-
export function
|
|
433
|
-
if (
|
|
432
|
+
export function createContextAdapter(context: ResolvedContext, opts?: ContextAdapterOptions): ContextAdapter {
|
|
433
|
+
if (context.type === "local") {
|
|
434
434
|
return new LocalAdapter(opts);
|
|
435
435
|
} else {
|
|
436
|
-
return new RemoteAdapter({ server:
|
|
436
|
+
return new RemoteAdapter({ server: context.server, token_env: context.token_env }, opts);
|
|
437
437
|
}
|
|
438
438
|
}
|