@open-agent-toolkit/cli 0.2.34 → 0.2.36

package/assets/bundle-metadata.json

@@ -1,4 +1,4 @@
 {
   "schemaVersion": 1,
-  "oatVersion": "0.2.34"
+  "oatVersion": "0.2.36"
 }

package/assets/docs/cli-utilities/configuration.md

@@ -198,6 +198,26 @@ project settings. Neither has a config key.
 
 Both accept `1`, `true` or `on`.
 
+### Bundled assets root (`OAT_ASSETS_DIR`)
+
+The CLI reads its bundled skills, agents, templates, and scripts from the
+packaged `assets/` directory next to the installed CLI. Setting a non-empty
+`OAT_ASSETS_DIR` makes `resolveAssetsRoot` read that directory instead:
+
+- The value is trimmed; unset, empty, or whitespace-only values keep the
+  packaged default. A relative value is resolved against the process working
+  directory.
+- The override is validated exactly like the packaged root and fails closed:
+  the path must be a directory containing bundle metadata whose version matches
+  the running CLI (`OAT_VERSION`). A missing, malformed, or version-mismatched
+  override is an error — the CLI never silently falls back to packaged assets.
+- Produce a matching bundle with `bash packages/cli/scripts/bundle-assets.sh`
+  while `OAT_ASSETS_DIR` points at the target directory (the script already
+  honors the variable as its destination).
+
+This is primarily a test-isolation and packaging seam; day-to-day use of the CLI
+does not need it.
+
 `EXPLAINER_KIT_ALLOW_PRIVATE_PUBLIC_ROOT` disables an anti-SSRF control. Public
 verification issues an outbound GET against whatever `publicBaseUrl` names, so
 by default the connector refuses internal addresses — including the

package/assets/public-package-versions.json

@@ -1,6 +1,6 @@
 {
-  "cli": "0.2.34",
-  "docs-config": "0.2.34",
-  "docs-theme": "0.2.34",
-  "docs-transforms": "0.2.34"
+  "cli": "0.2.36",
+  "docs-config": "0.2.36",
+  "docs-theme": "0.2.36",
+  "docs-transforms": "0.2.36"
 }

package/dist/fs/assets.d.ts

@@ -1,3 +1,13 @@
 export declare function validateAssetsBundle(assetsRoot: string, expectedVersion?: string): Promise<void>;
-export declare function resolveAssetsRoot(): Promise<string>;
+/**
+ * Resolve the directory the CLI reads bundled assets from.
+ *
+ * A non-empty `OAT_ASSETS_DIR` selects an explicit root; an unset or blank
+ * value keeps the packaged `<cliRoot>/assets` default. Both paths run the same
+ * directory and bundle-integrity checks, and an explicit root never falls back
+ * to the packaged one: a missing, non-directory, malformed, or
+ * version-mismatched override fails closed with the same actionable errors.
+ * A relative value is resolved against the process working directory.
+ */
+export declare function resolveAssetsRoot(env?: NodeJS.ProcessEnv): Promise<string>;
 //# sourceMappingURL=assets.d.ts.map

package/dist/fs/assets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"assets.d.ts","sourceRoot":"","sources":["../../src/fs/assets.ts"],"names":[],"mappings":"AA2BA,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,MAAM,EAClB,eAAe,SAAc,GAC5B,OAAO,CAAC,IAAI,CAAC,CAoCf;AAED,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,MAAM,CAAC,CAwBzD"}
+{"version":3,"file":"assets.d.ts","sourceRoot":"","sources":["../../src/fs/assets.ts"],"names":[],"mappings":"AA2BA,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,MAAM,EAClB,eAAe,SAAc,GAC5B,OAAO,CAAC,IAAI,CAAC,CAoCf;AAQD;;;;;;;;;GASG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,MAAM,CAAC,CAwBjB"}

package/dist/fs/assets.js

@@ -36,10 +36,24 @@ export async function validateAssetsBundle(assetsRoot, expectedVersion = OAT_VER
         throw new CliError(`Bundled assets version mismatch: CLI ${expectedVersion}, assets ${metadata.oatVersion}. Reinstall @open-agent-toolkit/cli or rebuild the CLI before updating tools.`, 2);
     }
 }
-export async function resolveAssetsRoot() {
+function resolvePackagedAssetsRoot() {
     const modulePath = fileURLToPath(import.meta.url);
     const cliRoot = resolve(dirname(modulePath), '..', '..');
-    const assetsRoot = join(cliRoot, 'assets');
+    return join(cliRoot, 'assets');
+}
+/**
+ * Resolve the directory the CLI reads bundled assets from.
+ *
+ * A non-empty `OAT_ASSETS_DIR` selects an explicit root; an unset or blank
+ * value keeps the packaged `<cliRoot>/assets` default. Both paths run the same
+ * directory and bundle-integrity checks, and an explicit root never falls back
+ * to the packaged one: a missing, non-directory, malformed, or
+ * version-mismatched override fails closed with the same actionable errors.
+ * A relative value is resolved against the process working directory.
+ */
+export async function resolveAssetsRoot(env = process.env) {
+    const override = env.OAT_ASSETS_DIR?.trim() ?? '';
+    const assetsRoot = override.length > 0 ? resolve(override) : resolvePackagedAssetsRoot();
     try {
         const assetsStat = await stat(assetsRoot);
         if (!assetsStat.isDirectory()) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-agent-toolkit/cli",
-  "version": "0.2.34",
+  "version": "0.2.36",
   "private": false,
   "description": "Open Agent Toolkit CLI",
   "homepage": "https://github.com/voxmedia/open-agent-toolkit/tree/main/packages/cli",
@@ -34,7 +34,7 @@
     "ora": "^9.0.0",
     "yaml": "2.8.2",
     "zod": "^3.25.76",
-    "@open-agent-toolkit/control-plane": "0.2.34"
+    "@open-agent-toolkit/control-plane": "0.2.36"
   },
   "devDependencies": {
     "@types/node": "^22.10.0",