@rosthq/cli 0.5.17 → 0.5.18

package/dist/index.js

@@ -42378,7 +42378,7 @@ External connectors are being rolled out provider by provider, conservatively (r
     order: 48,
     title: "CLI and MCP installation guide",
     summary: "Install the public CLI, register remote token-backed MCP clients, and find the full command and tool catalog.",
-    version: "2026-06-20.11",
+    version: "2026-06-20.12",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["company_setup", "staffing"],
@@ -42801,6 +42801,7 @@ These ergonomic wrappers (including the \`{{cli}} agent\` group) require **{{cli
 | \`{{cli}} agent templates|create|setup|tools|dry-run|go-live|status|run-now|fleet-digest|get-run|show\` | \`agent_template.list\`, \`agent.create_from_template\`, \`agent.create_custom\`, \`agent_setup.get\`, \`agent_setup.update\`, \`agent.configure_tools\`, \`agent.run_dry_run\`, \`agent.go_live\`, \`agent.status\`, \`agent.run_now\`, \`agent.fleet_digest\`, \`agent.get_run\`, \`agent.show_markdown\` | Run the full agent setup and operation flow: list templates, create a draft from a template or guided custom answers (with \`--model\` and \`--effort\`), read or answer setup state, connect or decline tools, dry-run, go live, run on demand, capture the fleet-health digest, read one run's transcript/error diagnostics, and show a markdown readout. Create and go-live stop at human gates; the dry-run is ungated by human approval but requires a signed manifest first. | Tenant and seat | \`{{cli}} agent fleet-digest --json\` |
 | \`{{cli}} tools list\` | \`tool.catalog\` | List the discoverable tool catalog the builder reads (id, scope tiers, credential requirement, access policy, and execution-boundary guidance). | Tenant | \`{{cli}} tools list --json\` |
 | \`{{cli}} skills list|get|file|assigned|check-dependencies\` | \`skill.list\`, \`skill.get\`, \`skill.file.get\`, \`skill.assigned.list\`, \`skill.check_dependencies\` | Discover reusable Skills, read descriptors and stored package files, list approved Seat assignments, and compare required/optional tool dependencies with a Seat's signed Charter manifest. Skills are instructions, not authority. | Tenant and seat | \`{{cli}} skills list --json\`; \`{{cli}} skills file --slug invoice-review --path SKILL.md\` |
+| \`{{cli}} skills create|update-draft|import|publish|assign|revoke\` | \`skill.create\`, \`skill.update_draft\`, \`skill.import_github\`, \`skill.import_upload\`, \`skill.publish\`, \`skill.assign_to_seat\`, \`skill.revoke_from_seat\` | Create or import bounded text Skill packages, publish reviewed immutable versions, propose or approve Seat assignments, and revoke future use without deleting historical activations. Publish, revoke, and approved assignment stop at human confirmation; blocked required tools cannot be approved. | Tenant and seat | \`{{cli}} skills import github --url https://github.com/acme/skills/tree/main/ap --json\`; \`{{cli}} skills assign --seat-id <id> --slug invoice-review --json\` |
 | \`{{cli}} model list\` | \`model.catalog\` | List guided model tiers with recommendations, token prices, cost bands, best-fit work, and model ids for \`--model\`. | Tenant | \`{{cli}} model list --json\` |
 | \`{{cli}} compass show\` | \`compass.show_markdown\` | Render the current Compass as a clean markdown card for review. | Tenant | \`{{cli}} compass show --markdown\` |
 | \`{{cli}} charter show\` | \`charter.show_markdown\` | Render a seat's Charter as a clean markdown card for review. | Tenant | \`{{cli}} charter show --seat-id <id> --markdown\` |
@@ -42971,6 +42972,13 @@ Several rows here are seat-operating commands (\`task.create\`, the \`signal.*\`
 | \`rost_get_skill_file\` | \`skill.file.get\` | Read stored Skill package file content by slug and package path; paths resolve only inside the stored package payload. Seat-scoped reads are available through \`rost://skills/{slug}/files/{path}\`. | Tenant-admin | Call with \`{"slug":"invoice-review","path":"SKILL.md"}\`. |
 | \`rost_list_assigned_skills\` | \`skill.assigned.list\` | List approved Skill assignments for a Seat, including immutable version, dependency status, rationale, and approval time. Seat-scoped reads are available through \`rost://seat/{id}/skills\`. | Tenant-admin | Call with \`{"seat_id":"<seat-id>"}\`. |
 | \`rost_check_skill_dependencies\` | \`skill.check_dependencies\` | Compare a Skill version's required and optional tools with a Seat's active or draft Charter permission manifest. Returns ready/blocked/warning and suggested \`agent.configure_tools\` input; it never grants permissions. | Tenant-admin | Call with \`{"seat_id":"<seat-id>","slug":"invoice-review"}\`. |
+| \`rost_create_skill\` | \`skill.create\` | Create a tenant Skill draft or pending-review Skill from a bounded text package. | Tenant-admin | Call with \`{"package":{"files":[{"path":"SKILL.md","content":"..."}]},"status":"draft"}\`. |
+| \`rost_update_skill_draft\` | \`skill.update_draft\` | Replace or create the current unpublished draft version for an existing Skill. | Tenant-admin | Call with \`{"slug":"invoice-review","package":{"files":[{"path":"SKILL.md","content":"..."}]}}\`. |
+| \`rost_import_github_skill\` | \`skill.import_github\` | Import a public GitHub Skill package into pending review or draft after validation. | Tenant-admin | Call with \`{"url":"https://github.com/acme/skills/tree/main/ap","status":"pending_review"}\`. |
+| \`rost_import_uploaded_skill\` | \`skill.import_upload\` | Import a bounded structured text package. MCP does not accept direct binary uploads in this release. | Tenant-admin | Call with \`{"package":{"files":[{"path":"SKILL.md","content":"..."}]},"status":"draft"}\`. |
+| \`rost_publish_skill\` | \`skill.publish\` | Human-gated publication of an unpublished Skill version. Published versions are immutable and assignable. | Tenant-admin | Call with \`{"slug":"invoice-review"}\`; non-interactive callers receive a confirmation handoff. |
+| \`rost_assign_skill_to_seat\` | \`skill.assign_to_seat\` | Propose or human-approve a published Skill version for a Seat after dependency checks. Missing required tools block approval; optional tools warn. | Tenant-admin | Call with \`{"seat_id":"<seat-id>","slug":"invoice-review","status":"proposed","rationale":"Use for AP exception work."}\`. |
+| \`rost_revoke_skill_from_seat\` | \`skill.revoke_from_seat\` | Human-gated revocation that stops future Skill use without deleting historical activations. | Tenant-admin | Call with \`{"assignment_id":"<assignment-id>"}\`; non-interactive callers receive a confirmation handoff. |
 | \`rost_list_model_catalog\` | \`model.catalog\` | List guided model tiers \u2014 recommendations, token prices, cost bands, best-fit work, and model ids for \`--model\`. | Tenant | Call with \`{}\`. |
 
 ### Seat-scoped operating tools
@@ -45097,6 +45105,7 @@ function parseSemver(value) {
 }
 
 // src/operations.ts
+import { readFileSync as readFileSync2 } from "node:fs";
 var UsageError = class extends Error {
 };
 function parseFlags(args, booleanFlags = /* @__PURE__ */ new Set()) {
@@ -46241,7 +46250,89 @@ function formatDependencyCheck(output) {
     render("optional", asArray(record2.optional))
   ].join("\n");
 }
+function packageFromSkillFile(filePath) {
+  return {
+    files: [{ path: "SKILL.md", content: readFileSync2(filePath, "utf8") }]
+  };
+}
+function formatSkillWrite(label) {
+  return (output) => {
+    const skill = asRecord(asRecord(output).skill);
+    const warnings = asArray(asRecord(skill.validation).warnings).length;
+    return [
+      `${label}: \`${field(skill, "slug")}\` v${field(skill, "version")} (${field(skill, "skill_version_id")})`,
+      `status: ${field(skill, "status")}`,
+      `content_sha256: ${field(skill, "content_sha256")}`,
+      `validation_warnings: ${warnings}`
+    ].join("\n");
+  };
+}
+function formatAssignment(output) {
+  const record2 = asRecord(output);
+  const assignment = asRecord(record2.assignment);
+  return [
+    `Skill assignment ${field(record2, "approval_status")}: \`${field(assignment, "slug")}\` v${field(assignment, "version")} \u2192 seat ${field(assignment, "seat_id")}`,
+    `assignment_id: ${field(assignment, "assignment_id")}`,
+    `skill_version_id: ${field(assignment, "skill_version_id")}`,
+    `dependency_status: ${field(asRecord(record2.dependency_status), "status")}`,
+    `next: ${field(record2, "local_sync_next_step")}`
+  ].join("\n");
+}
+function formatRevocation(output) {
+  const record2 = asRecord(output);
+  return [
+    `Skill assignment revoked: \`${field(record2, "slug")}\` from seat ${field(record2, "seat_id")}`,
+    `assignment_id: ${field(record2, "assignment_id")}`,
+    `skill_version_id: ${field(record2, "skill_version_id")}`,
+    `next: ${field(record2, "local_sync_next_step")}`
+  ].join("\n");
+}
 var skillsWrapper = (context, args) => dispatch(context, "skills", args, {
+  create: (ctx, rest) => {
+    const parsed = parseFlags(rest);
+    const body = withOptional({ package: packageFromSkillFile(requireValue2(parsed, "file")) }, {
+      status: optionalValue(parsed, "status")
+    });
+    return execute(ctx, parsed, "skill.create", body, formatSkillWrite("Skill draft created"));
+  },
+  "update-draft": (ctx, rest) => {
+    const parsed = parseFlags(rest);
+    const body = withOptional({
+      slug: requireValue2(parsed, "slug"),
+      package: packageFromSkillFile(requireValue2(parsed, "file"))
+    }, {
+      status: optionalValue(parsed, "status")
+    });
+    return execute(ctx, parsed, "skill.update_draft", body, formatSkillWrite("Skill draft updated"));
+  },
+  publish: (ctx, rest) => {
+    const parsed = parseFlags(rest, /* @__PURE__ */ new Set(["allow-warnings"]));
+    const body = withOptional({ allow_warnings: parsed.flags.has("allow-warnings") }, {
+      slug: optionalValue(parsed, "slug"),
+      skill_version_id: optionalValue(parsed, "skill-version-id")
+    });
+    return execute(ctx, parsed, "skill.publish", body, formatSkillWrite("Skill published"));
+  },
+  import: (ctx, rest) => {
+    const [kind, ...remaining] = rest;
+    if (kind === "github") {
+      const parsed = parseFlags(remaining);
+      const body = withOptional({ url: requireValue2(parsed, "url") }, {
+        ref: optionalValue(parsed, "ref"),
+        path: optionalValue(parsed, "path"),
+        status: optionalValue(parsed, "status")
+      });
+      return execute(ctx, parsed, "skill.import_github", body, formatSkillWrite("GitHub skill imported"));
+    }
+    if (kind === "upload") {
+      const parsed = parseFlags(remaining);
+      const body = withOptional({ package: packageFromSkillFile(requireValue2(parsed, "file")) }, {
+        status: optionalValue(parsed, "status")
+      });
+      return execute(ctx, parsed, "skill.import_upload", body, formatSkillWrite("Uploaded skill imported"));
+    }
+    throw new UsageError(`Usage: ${ctx.binName} skills import github|upload ...`);
+  },
   list: (ctx, rest) => {
     const parsed = parseFlags(rest, /* @__PURE__ */ new Set(["include-archived"]));
     const body = withOptional({}, {
@@ -46273,15 +46364,46 @@ var skillsWrapper = (context, args) => dispatch(context, "skills", args, {
       skill_version_id: optionalValue(parsed, "skill-version-id")
     });
     return execute(ctx, parsed, "skill.check_dependencies", body, formatDependencyCheck);
+  },
+  assign: (ctx, rest) => {
+    const parsed = parseFlags(rest, /* @__PURE__ */ new Set(["approve", "allow-blocked-proposal"]));
+    const body = withOptional({
+      seat_id: requireValue2(parsed, "seat-id"),
+      status: parsed.flags.has("approve") ? "approved" : "proposed",
+      rationale: optionalValue(parsed, "rationale") ?? "Skill assignment requested from the CLI.",
+      allow_blocked_proposal: parsed.flags.has("allow-blocked-proposal")
+    }, {
+      slug: optionalValue(parsed, "slug") ?? optionalValue(parsed, "skill"),
+      skill_version_id: optionalValue(parsed, "skill-version-id")
+    });
+    return execute(ctx, parsed, "skill.assign_to_seat", body, formatAssignment);
+  },
+  revoke: (ctx, rest) => {
+    const parsed = parseFlags(rest);
+    const body = withOptional({}, {
+      assignment_id: optionalValue(parsed, "assignment-id"),
+      seat_id: optionalValue(parsed, "seat-id"),
+      slug: optionalValue(parsed, "slug") ?? optionalValue(parsed, "skill"),
+      skill_version_id: optionalValue(parsed, "skill-version-id"),
+      rationale: optionalValue(parsed, "rationale")
+    });
+    return execute(ctx, parsed, "skill.revoke_from_seat", body, formatRevocation);
   }
 }, skillsUsage(context.binName));
 function skillsUsage(bin) {
-  return `Usage: ${bin} skills list|get|file|assigned|check-dependencies [--json]
+  return `Usage: ${bin} skills create|update-draft|publish|import|list|get|file|assigned|check-dependencies|assign|revoke [--json]
+  ${bin} skills create --file ./SKILL.md [--status draft|pending_review]
+  ${bin} skills update-draft --slug <slug> --file ./SKILL.md [--status draft|pending_review]
+  ${bin} skills import github --url <github-url> [--ref <ref>] [--path <dir>] [--status draft|pending_review]
+  ${bin} skills import upload --file ./SKILL.md [--status draft|pending_review]
+  ${bin} skills publish (--slug <slug>|--skill-version-id <id>) [--allow-warnings]
   ${bin} skills list [--status draft|pending_review|published|archived] [--visibility private|seat|tenant] [--query <text>]
   ${bin} skills get --slug <slug>
   ${bin} skills file --slug <slug> --path SKILL.md
   ${bin} skills assigned [--seat-id <id>] [--seat <id>]
-  ${bin} skills check-dependencies --seat-id <id> (--slug <slug>|--skill-version-id <id>)`;
+  ${bin} skills check-dependencies --seat-id <id> (--slug <slug>|--skill-version-id <id>)
+  ${bin} skills assign --seat-id <id> (--slug <slug>|--skill-version-id <id>) [--approve] [--allow-blocked-proposal]
+  ${bin} skills revoke (--assignment-id <id>|--seat-id <id> --slug <slug>)`;
 }
 var modelWrapper = (context, args) => dispatch(context, "model", args, {
   list: (ctx, rest) => {