@mcp-s/skills 1.0.2 → 1.0.5

package/dist/api.js

@@ -43,3 +43,56 @@ export async function fetchSkillContent(baseUrl, skillSlug, auth) {
     const data = await response.json();
     return data.content;
 }
+export async function fetchSkillFiles(baseUrl, skillSlug, auth) {
+    const headers = {
+        "Content-Type": "application/json",
+    };
+    if (auth) {
+        headers["Authorization"] = `${auth.userAccessKey}:${auth.userOTT}`;
+    }
+    const response = await fetch(`${baseUrl}/skills/${skillSlug}/files`, {
+        headers,
+    });
+    if (!response.ok) {
+        const errorText = await response.text();
+        if (response.status === 401) {
+            const error = new Error("Unauthorized");
+            error.status = 401;
+            throw error;
+        }
+        if (response.status === 404) {
+            const error = new Error("Skill not found");
+            error.status = 404;
+            throw error;
+        }
+        throw new Error(`Failed to fetch skill files: ${response.status} ${response.statusText}\n${errorText}`);
+    }
+    const data = await response.json();
+    return data.data;
+}
+export async function fetchSkillFile(baseUrl, skillSlug, filePath, auth) {
+    const headers = {
+        "Content-Type": "application/json",
+    };
+    if (auth) {
+        headers["Authorization"] = `${auth.userAccessKey}:${auth.userOTT}`;
+    }
+    const response = await fetch(`${baseUrl}/skills/${skillSlug}/file/${filePath}`, {
+        headers,
+    });
+    if (!response.ok) {
+        const errorText = await response.text();
+        if (response.status === 401) {
+            const error = new Error("Unauthorized");
+            error.status = 401;
+            throw error;
+        }
+        if (response.status === 404) {
+            const error = new Error("File not found");
+            error.status = 404;
+            throw error;
+        }
+        throw new Error(`Failed to fetch skill file: ${response.status} ${response.statusText}\n${errorText}`);
+    }
+    return response.json();
+}

package/dist/auth.js

@@ -52,8 +52,34 @@ export async function authenticate({ baseUrl, userAccessKey, userOTT, openBrowse
     }
     return { url, opened };
 }
-export async function getOrCreateAuth(org) {
+export async function getOrCreateAuth(org, providedUserAccessKey) {
     const existing = await loadAuthConfig();
+    // If a userAccessKey is provided via CLI, use it
+    if (providedUserAccessKey) {
+        // Check if it matches existing config
+        if (existing &&
+            existing.userAccessKey === providedUserAccessKey &&
+            existing.userOTT &&
+            existing.org === org) {
+            return {
+                userAccessKey: existing.userAccessKey,
+                userOTT: existing.userOTT,
+                isNew: false,
+            };
+        }
+        // New key provided or org changed, generate new OTT
+        const userOTT = generateToken();
+        await saveAuthConfig({
+            userAccessKey: providedUserAccessKey,
+            userOTT,
+            org,
+        });
+        return {
+            userAccessKey: providedUserAccessKey,
+            userOTT,
+            isNew: true,
+        };
+    }
     if (existing && existing.userAccessKey && existing.userOTT) {
         // If org changed, generate new OTT
         if (org && existing.org !== org) {
@@ -71,23 +97,16 @@ export async function getOrCreateAuth(org) {
             isNew: false,
         };
     }
-    // Create new auth
-    const userAccessKey = generateToken();
-    const userOTT = generateToken();
-    await saveAuthConfig({
-        userAccessKey,
-        userOTT,
-        org,
-    });
-    return {
-        userAccessKey,
-        userOTT,
-        isNew: true,
-    };
+    // No existing auth and no key provided - this is an error
+    // The user must provide their userAccessKey
+    throw new Error("No user access key found. Please provide your MCP-S user access key with --key <userAccessKey>");
 }
-export async function refreshToken(org) {
+export async function refreshToken(org, providedUserAccessKey) {
     const existing = await loadAuthConfig();
-    const userAccessKey = (existing === null || existing === void 0 ? void 0 : existing.userAccessKey) || generateToken();
+    const userAccessKey = providedUserAccessKey || (existing === null || existing === void 0 ? void 0 : existing.userAccessKey);
+    if (!userAccessKey) {
+        throw new Error("No user access key found. Please provide your MCP-S user access key with --key <userAccessKey>");
+    }
     const userOTT = generateToken();
     await saveAuthConfig({
         userAccessKey,

package/dist/index.js

@@ -46,6 +46,7 @@ program
     .option("-l, --list", "List available skills without installing")
     .option("-y, --yes", "Skip confirmation prompts")
     .option("--all", "Install all skills to all agents without any prompts (implies -y -g)")
+    .option("-k, --key <userAccessKey>", "Your MCP-S user access key (found in your MCP-S dashboard)")
     .configureOutput({
     outputError: (str, write) => {
         if (str.includes("error: required option")) {
@@ -102,7 +103,19 @@ async function main(options) {
     try {
         // Get or create authentication
         spinner.start("Checking authentication...");
-        let auth = await getOrCreateAuth(options.org);
+        let auth;
+        try {
+            auth = await getOrCreateAuth(options.org, options.key);
+        }
+        catch (error) {
+            spinner.stop(chalk.red("Authentication required"));
+            if (error instanceof Error && error.message.includes("No user access key")) {
+                p.log.error(error.message);
+                p.log.info(`You can find your user access key in your MCP-S dashboard at ${chalk.cyan("https://<org>.mcp-s.com/settings")}`);
+                process.exit(1);
+            }
+            throw error;
+        }
         spinner.stop(auth.isNew
             ? "New authentication created"
             : "Using existing authentication");
@@ -130,7 +143,7 @@ async function main(options) {
             spinner.stop("Authentication required");
             p.log.info("You need to authenticate to access skills.");
             // Generate new token and authenticate
-            const newAuth = await refreshToken(options.org);
+            const newAuth = await refreshToken(options.org, options.key);
             auth = Object.assign(Object.assign({}, newAuth), { isNew: true });
             const { url, opened } = await authenticate({
                 baseUrl,

package/dist/installer.js

@@ -1,5 +1,5 @@
 import { mkdir, access, symlink, lstat, rm, readlink, writeFile, } from "fs/promises";
-import { join, normalize, resolve, sep, relative } from "path";
+import { join, normalize, resolve, sep, relative, dirname } from "path";
 import { homedir, platform } from "os";
 import { agents } from "./agents.js";
 const AGENTS_DIR = ".agents";
@@ -65,6 +65,55 @@ async function createSymlink(target, linkPath) {
         return false;
     }
 }
+/**
+ * Write all skill files to a directory
+ * Structure:
+ * skill-name/
+ * ├── SKILL.md          # Required: instructions + metadata
+ * ├── scripts/          # Optional: executable code
+ * ├── references/       # Optional: documentation
+ * └── assets/           # Optional: templates, resources
+ */
+async function writeSkillFiles(skill, targetDir) {
+    // Ensure the target directory exists
+    await mkdir(targetDir, { recursive: true });
+    // Write SKILL.md
+    const skillMdPath = join(targetDir, "SKILL.md");
+    await writeFile(skillMdPath, skill.content, "utf-8");
+    // Write scripts if present
+    if (skill.scripts && skill.scripts.length > 0) {
+        for (const script of skill.scripts) {
+            const scriptPath = join(targetDir, script.path);
+            const scriptDir = dirname(scriptPath);
+            await mkdir(scriptDir, { recursive: true });
+            await writeFile(scriptPath, script.content, "utf-8");
+        }
+    }
+    // Write references if present
+    if (skill.references && skill.references.length > 0) {
+        for (const reference of skill.references) {
+            const refPath = join(targetDir, reference.path);
+            const refDir = dirname(refPath);
+            await mkdir(refDir, { recursive: true });
+            await writeFile(refPath, reference.content, "utf-8");
+        }
+    }
+    // Write assets if present
+    if (skill.assets && skill.assets.length > 0) {
+        for (const asset of skill.assets) {
+            const assetPath = join(targetDir, asset.path);
+            const assetDir = dirname(assetPath);
+            await mkdir(assetDir, { recursive: true });
+            // Assets may be base64 encoded for binary files
+            if (asset.mimeType && !asset.mimeType.startsWith("text/")) {
+                await writeFile(assetPath, Buffer.from(asset.content, "base64"));
+            }
+            else {
+                await writeFile(assetPath, asset.content, "utf-8");
+            }
+        }
+    }
+}
 export async function installSkillForAgent(skill, agentType, options = {}) {
     var _a, _b;
     const agent = agents[agentType];
@@ -96,9 +145,7 @@ export async function installSkillForAgent(skill, agentType, options = {}) {
     }
     try {
         if (installMode === "copy") {
-            await mkdir(agentDir, { recursive: true });
-            const skillMdPath = join(agentDir, "SKILL.md");
-            await writeFile(skillMdPath, skill.content, "utf-8");
+            await writeSkillFiles(skill, agentDir);
             return {
                 success: true,
                 path: agentDir,
@@ -106,9 +153,7 @@ export async function installSkillForAgent(skill, agentType, options = {}) {
             };
         }
         // Symlink mode
-        await mkdir(canonicalDir, { recursive: true });
-        const skillMdPath = join(canonicalDir, "SKILL.md");
-        await writeFile(skillMdPath, skill.content, "utf-8");
+        await writeSkillFiles(skill, canonicalDir);
         const symlinkCreated = await createSymlink(canonicalDir, agentDir);
         if (!symlinkCreated) {
             // Fallback to copy
@@ -118,9 +163,7 @@ export async function installSkillForAgent(skill, agentType, options = {}) {
             catch (_c) {
                 // Ignore
             }
-            await mkdir(agentDir, { recursive: true });
-            const agentSkillMdPath = join(agentDir, "SKILL.md");
-            await writeFile(agentSkillMdPath, skill.content, "utf-8");
+            await writeSkillFiles(skill, agentDir);
             return {
                 success: true,
                 path: agentDir,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mcp-s/skills",
-  "version": "1.0.2",
+  "version": "1.0.5",
   "description": "Install skills onto coding agents from MCP-S server",
   "type": "module",
   "files": [