@sechroom/cli 2026.6.229-rc.0d108cee → 2026.6.230-rc.326bc4de

package/dist/index.js

@@ -4697,6 +4697,10 @@ Examples:
   });
 }
 
+// src/commands/skills.ts
+import { existsSync as existsSync11, mkdirSync as mkdirSync9, statSync as statSync4, writeFileSync as writeFileSync9 } from "fs";
+import { join as join13 } from "path";
+
 // src/commands/lane.ts
 var LANE_KEYS = ["code-lane", "design-lane"];
 function showLane(json) {
@@ -4905,6 +4909,51 @@ function runClean(spec, cmd, opts, slugArg) {
 }
 
 // src/commands/skills.ts
+function filenameFromDisposition(header) {
+  if (!header) return void 0;
+  const m = /filename\*?=(?:UTF-8'')?"?([^";]+)"?/i.exec(header);
+  return m?.[1];
+}
+function resolveOutputPath(output, serverFilename) {
+  const filename = serverFilename || "skills.zip";
+  if (!output) return join13(process.cwd(), filename);
+  const looksLikeDir = output.endsWith("/") || existsSync11(output) && statSync4(output).isDirectory();
+  if (looksLikeDir) {
+    mkdirSync9(output, { recursive: true });
+    return join13(output, filename);
+  }
+  return output;
+}
+async function downloadZip(label, call, output) {
+  const s = spinner(label);
+  let res;
+  try {
+    res = await call();
+  } catch (err2) {
+    s.fail();
+    fail(err2);
+  }
+  if (!res.response || !res.response.ok) {
+    s.fail();
+    let detail = res.response ? `HTTP ${res.response.status} ${res.response.statusText}`.trim() : "request failed";
+    const e = res.error;
+    if (e && typeof e === "object" && "title" in e) detail = String(e.title);
+    else if (e instanceof ArrayBuffer) {
+      try {
+        const j = JSON.parse(new TextDecoder().decode(e));
+        detail = j.title ?? j.detail ?? detail;
+      } catch {
+      }
+    }
+    fail(detail);
+  }
+  s.succeed();
+  const buf = Buffer.from(res.data);
+  const filename = filenameFromDisposition(res.response.headers.get("content-disposition")) ?? "skills.zip";
+  const path = resolveOutputPath(output, filename);
+  writeFileSync9(path, buf);
+  return { path, bytes: buf.length, filename };
+}
 function registerSkills(program2) {
   const skills = program2.command("skills").description("Manage operator skills (install to disk, list, clean)");
   skills.addHelpText(
@@ -4915,6 +4964,9 @@ Examples:
   $ sechroom skills install --scope project  write them to ./.claude/skills instead
   $ sechroom skills list                     what's materialised on disk
   $ sechroom skills clean                    remove the materialised skill files
+  $ sechroom skills preview --workspace wsp_abc        render a draft bundle from source (no install)
+  $ sechroom skills package my-bundle                  download the installed bundle's skills as a zip
+  $ sechroom skills package --from-source --workspace wsp_abc -o ./dist   zip a draft from source
   $ sechroom skills set-lane --code-lane claude-code-chris --design-lane claude-design-chris
 
 `
@@ -4922,6 +4974,80 @@ Examples:
   skills.command("install").description("Materialise your installed skills to disk (the already-installed bundle \u2014 no server install)").option("--scope <scope>", "global (config dir / CLAUDE_CONFIG_DIR) or project (<cwd>/.claude) \u2014 default global").option("--local", "alias for --scope project").option("--dry-run", "print what would be written; write nothing").option("--json", "machine output").action((opts, cmd) => runInstall(SKILL_SPEC, cmd, opts));
   skills.command("list").description("List the skills materialised on disk (per resolved config dir)").option("--scope <scope>", "global (config dir / CLAUDE_CONFIG_DIR) or project (<cwd>/.claude) \u2014 default global").option("--local", "alias for --scope project").option("--json", "machine output").action((opts, cmd) => runList(SKILL_SPEC, cmd, opts));
   skills.command("clean [slug]").description(`Remove skill files materialised to disk (default ${DEFAULT_SKILLS_SLUG})`).option("--scope <scope>", "global (config dir / CLAUDE_CONFIG_DIR) or project (<cwd>/.claude) \u2014 default global").option("--local", "alias for --scope project").option("--json", "machine output").action((slugArg, opts, cmd) => runClean(SKILL_SPEC, cmd, opts, slugArg));
+  skills.command("preview").description("Render a workspace's draft bundle from source (no publish/install) and report the components").requiredOption("--workspace <id>", "workspace holding the draft bundle sources (wsp_\u2026)").option("--slug <slug>", "override the derived bundle slug").option("--title <title>", "override the derived bundle title").option("--version <version>", "override the derived bundle version").option("--default-install-parent <path>", "override the derived default install parent").option("--json", "machine output (the full RenderBundlePreviewResponse)").action(async (opts, cmd) => {
+    const json = Boolean(opts.json) || Boolean(cmd.optsWithGlobals().json);
+    const client = await makeClient(resolveConfig(cmd.optsWithGlobals()));
+    const data = await runApi(
+      "rendering bundle preview",
+      () => client.POST("/workspaces/{workspaceId}/render-bundle-preview", {
+        params: { path: { workspaceId: opts.workspace } },
+        body: {
+          slug: opts.slug ?? null,
+          title: opts.title ?? null,
+          version: opts.version ?? null,
+          defaultInstallParent: opts.defaultInstallParent ?? null
+        }
+      })
+    );
+    if (json) return emit(data, true);
+    console.log(
+      style.bold(data.bundleSlug) + style.dim("@") + (data.bundleVersion || style.dim("(no version)"))
+    );
+    const components = data.components ?? [];
+    if (components.length === 0) console.log("  " + style.dim("(no components rendered)"));
+    for (const c of components) {
+      const bits = [c.role, c.skillName ? style.dim("skill=") + c.skillName : null, c.target ? style.dim("target=") + c.target : null].filter(Boolean).join("  ");
+      const flags = [
+        c.intakeBlocked ? style.yellow("intake-blocked") : null,
+        c.unresolvedTokens?.length ? style.yellow(`${c.unresolvedTokens.length} unresolved`) : null
+      ].filter(Boolean).join(" ");
+      console.log("  " + style.green("\u2022") + " " + style.bold(c.slug) + "  " + bits + (flags ? "  " + flags : ""));
+    }
+    const skipped = data.skipped ?? [];
+    if (skipped.length) {
+      console.log(style.dim(`  skipped ${skipped.length}:`));
+      for (const sk of skipped) console.log("    " + style.dim(`- ${sk.slug ?? sk.reason ?? JSON.stringify(sk)}`));
+    }
+  });
+  skills.command("package [slug]").description("Download a bundle's skill-templates as a zip to disk (installed bundle, or --from-source draft)").option("--from-source", "package a workspace's DRAFT from source (requires --workspace) instead of an installed bundle").option("--workspace <id>", "with --from-source: the workspace holding the draft (wsp_\u2026)").option("--target <surface>", "surface to render (server default: claude-web installed, claude-code from-source)").option("--slug <slug>", "with --from-source: override the derived bundle slug").option("--title <title>", "with --from-source: override the derived bundle title").option("--version <version>", "with --from-source: override the derived bundle version").option("--default-install-parent <path>", "with --from-source: override the derived default install parent").option("-o, --output <path>", "where to write the zip \u2014 a dir gets the server filename, a file path is used as-is (default: cwd)").option("--json", "machine output ({ path, filename, bytes })").action(async (slugArg, opts, cmd) => {
+    const json = Boolean(opts.json) || Boolean(cmd.optsWithGlobals().json);
+    if (opts.fromSource) {
+      if (!opts.workspace) fail("--from-source requires --workspace <id> (the workspace holding the draft).");
+    } else if (!slugArg) {
+      fail("Provide a bundle slug to package, or use --from-source --workspace <id>.");
+    }
+    const client = await makeClient(resolveConfig(cmd.optsWithGlobals()));
+    let result;
+    if (opts.fromSource) {
+      const query = {};
+      if (opts.target) query.target = opts.target;
+      if (slugArg ?? opts.slug) query.slug = slugArg ?? opts.slug;
+      if (opts.title) query.title = opts.title;
+      if (opts.version) query.version = opts.version;
+      if (opts.defaultInstallParent) query.defaultInstallParent = opts.defaultInstallParent;
+      result = await downloadZip(
+        "packaging draft from source",
+        () => client.GET("/workspaces/{workspaceId}/bundle-preview/package", {
+          params: { path: { workspaceId: opts.workspace }, query },
+          parseAs: "arrayBuffer"
+        }),
+        opts.output
+      );
+    } else {
+      const query = {};
+      if (opts.target) query.target = opts.target;
+      result = await downloadZip(
+        "packaging installed bundle",
+        () => client.GET("/me/bundle-installs/{bundleSlug}/package", {
+          params: { path: { bundleSlug: slugArg }, query },
+          parseAs: "arrayBuffer"
+        }),
+        opts.output
+      );
+    }
+    if (json) return emit(result, true);
+    console.log(style.green("\u2713") + ` wrote ${style.bold(result.path)} ${style.dim(`(${result.bytes} bytes)`)}`);
+  });
   skills.command("set-lane").description("Alias of `sechroom lane set` (kept for back-compat) \u2014 write this checkout's lane pin").option("--code-lane <id>", "code-surface lane id (e.g. claude-code-chris)").option("--design-lane <id>", "design / substrate-authoring lane id (e.g. claude-design-chris)").option("--json", "machine output").action(
     (opts, cmd) => setLane({
       codeLane: opts.codeLane,
@@ -5015,23 +5141,23 @@ workers your loop skills call (e.g. find-prior-art \u2192 substrate-miner).`
 
 // src/commands/reset.ts
 import { homedir as homedir4 } from "os";
-import { join as join13 } from "path";
-import { existsSync as existsSync11, readFileSync as readFileSync7, rmSync as rmSync3 } from "fs";
+import { join as join14 } from "path";
+import { existsSync as existsSync12, readFileSync as readFileSync7, rmSync as rmSync3 } from "fs";
 var SKILLS_LOCK2 = ".sechroom-skills.json";
-var localSkillsDir = () => join13(process.cwd(), ".claude", "skills");
-var globalSkillsDir = () => join13(homedir4(), ".claude", "skills");
-var localAgentsDir = () => join13(process.cwd(), ".claude", "agents");
-var globalAgentsDir = () => join13(homedir4(), ".claude", "agents");
+var localSkillsDir = () => join14(process.cwd(), ".claude", "skills");
+var globalSkillsDir = () => join14(homedir4(), ".claude", "skills");
+var localAgentsDir = () => join14(process.cwd(), ".claude", "agents");
+var globalAgentsDir = () => join14(homedir4(), ".claude", "agents");
 function removeMaterialisedSkills(dir) {
   const removed = [];
-  const lockPath = join13(dir, SKILLS_LOCK2);
-  if (!existsSync11(lockPath)) return removed;
+  const lockPath = join14(dir, SKILLS_LOCK2);
+  if (!existsSync12(lockPath)) return removed;
   try {
     const lock = JSON.parse(readFileSync7(lockPath, "utf8"));
     for (const entry of Object.values(lock)) {
       for (const name of entry.skills ?? []) {
-        const p = join13(dir, name);
-        if (existsSync11(p)) {
+        const p = join14(dir, name);
+        if (existsSync12(p)) {
           rmSync3(p, { recursive: true, force: true });
           removed.push(p);
         }
@@ -5076,18 +5202,18 @@ function registerReset(program2) {
       }
     }
     const removed = [];
-    const stateDir = join13(process.cwd(), ".sechroom");
-    if (existsSync11(stateDir)) {
+    const stateDir = join14(process.cwd(), ".sechroom");
+    if (existsSync12(stateDir)) {
       rmSync3(stateDir, { recursive: true, force: true });
       removed.push(stateDir);
     }
-    const legacyCfg = join13(process.cwd(), ".sechroom.json");
-    if (existsSync11(legacyCfg)) {
+    const legacyCfg = join14(process.cwd(), ".sechroom.json");
+    if (existsSync12(legacyCfg)) {
       rmSync3(legacyCfg, { force: true });
       removed.push(legacyCfg);
     }
-    const legacySem = join13(process.cwd(), ".sem");
-    if (existsSync11(legacySem)) {
+    const legacySem = join14(process.cwd(), ".sem");
+    if (existsSync12(legacySem)) {
       rmSync3(legacySem, { force: true });
       removed.push(legacySem);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sechroom/cli",
-  "version": "2026.6.229-rc.0d108cee",
+  "version": "2026.6.230-rc.326bc4de",
   "description": "Sechroom CLI — a thin, generated client over the Sechroom HTTP API. An agent/human surface alongside MCP.",
   "type": "module",
   "license": "UNLICENSED",