@seliseblocks/cli-os 0.2.10 → 0.2.12

package/dist/index.js

@@ -86,17 +86,13 @@ import { localizationValidate } from "./commands/localization/validate.js";
 import { login } from "./commands/login.js";
 import { logout } from "./commands/logout.js";
 import { newWeb } from "./commands/new/web.js";
-// import { createProject } from "./commands/projects/create.js"; // disabled for now
+import { createProject } from "./commands/projects/create.js";
 import { getProject } from "./commands/projects/get.js";
 import { listProjects } from "./commands/projects/list.js";
 import { releaseBuildsGet } from "./commands/release/builds/get.js";
 import { releaseBuildsList } from "./commands/release/builds/list.js";
 import { releaseDeploy } from "./commands/release/deploy.js";
 import { releaseStatus } from "./commands/release/status.js";
-import { sdkClient } from "./commands/sdk/client.js";
-import { skillAdd } from "./commands/skill/add.js";
-import { skillList } from "./commands/skill/list.js";
-import { skillShow } from "./commands/skill/show.js";
 import { useProject } from "./commands/use.js";
 import { authClientCredentialsDelete } from "./commands/auth/client-credentials/delete.js";
 import { authClientCredentialsList } from "./commands/auth/client-credentials/list.js";
@@ -200,6 +196,7 @@ const commands = {
     "init": () => init(),
     "login": login,
     "logout": logout,
+    "projects:create": createProject,
     "projects:list": listProjects,
     "use": useProject,
     "deselect": deselectProject,
@@ -401,10 +398,6 @@ const commands = {
     "iam:me": iamMe,
     "projects:get": getProject,
     "new:web": newWeb,
-    "skill:list": skillList,
-    "skill:show": skillShow,
-    "skill:add": skillAdd,
-    "sdk:client": sdkClient,
 };
 const MAX_COMMAND_WORDS = 4;
 function resolveCommand(argv) {
@@ -535,6 +528,18 @@ Auth:
     Revoke the current refresh token when possible and remove local session data.
 
 Projects:
+  blocks projects create <name> [--allow-duplicate-name] [--yes] [--dry-run] [--json]
+    Create a new Blocks project via /os/v4/Project/Create using the account
+    token (no project needs to be selected yet). Creates exactly one
+    application, always in the 'dev' environment -- environment, domain,
+    cookie domain, and production flag are fixed and not configurable here;
+    the domain sent is a placeholder the platform discards and replaces with
+    the one it assigns. Confirms first because it accepts the Blocks terms on
+    your behalf. Refuses a name already used by another project unless
+    --allow-duplicate-name is passed. Verifies the result against
+    Project/Gets and prints the new tenantId, tenantGroupId, and assigned
+    domain. Does not select the project -- run 'blocks use <tenantId>' next.
+
   blocks projects list [--json]
     List accessible Blocks projects via /os/v4/Project/Gets. Uses the
     impersonated project session when a project is selected, otherwise the
@@ -616,6 +621,9 @@ IAM:
     blocks iam permissions update <id> [same flags as create, plus --is-archived]
                               [--dry-run] [--yes] [--json]
     blocks iam permissions by-severity [--json]
+      --type is IAM's ResourceType: 0 None, 1 Endpoint, 2 FrontendAction, 3 DataProtection.
+      --severity is PermissionSeverity, ordered most-severe-first, not least: 0 None,
+      1 Critical, 2 High, 3 Medium, 4 Low.
 
   Resources (/iam/v4/iam/resource*):
     blocks iam resources groups [--json]
@@ -647,11 +655,15 @@ IAM:
                               [--body '<json>'|--file <path>] [--dry-run] [--yes] [--json]
 
 MFA (/iam/v4/mfa*, project-scoped: requires a selected project, impersonated project token only):
+  Every mfa-type/auth-type/user-mfa-type value is IAM's UserMfaType enum: 0 None, 1 TOTP,
+  2 Email, 3 Sms, 4 WhatsApp. Only 1 and 2 have a working provider; 3 and 4 are declared
+  but unimplemented. Leaving --user-mfa-type empty means no method is allowed, so MFA is
+  never actually required no matter what else the policy says.
   blocks mfa config get [--json]
     Read the tenant's MFA policy.
   blocks mfa config save [--enable] [--require-for-all-users] [--allow-user-opt-out]
                               [--allow-backup-codes] [--backup-codes-count <n>]
-                              [--user-mfa-type 0,1] [--required-roles a,b] [--exempt-roles a,b]
+                              [--user-mfa-type 1,2] [--required-roles a,b] [--exempt-roles a,b]
                               [--body '<json>'|--file <path>] [--dry-run] [--yes] [--json]
     Save the tenant's MFA policy.
   blocks mfa totp setup [--json]
@@ -670,9 +682,12 @@ MFA (/iam/v4/mfa*, project-scoped: requires a selected project, impersonated pro
   blocks mfa resend <mfaId> [--send-phone-number-as-email-domain <domain>] [--json]
   blocks mfa verify <mfaId> <code> --auth-type <n> [--from-token-call] [--json]
   blocks mfa method set --mfa-type <n> [--json]
-    Switch the impersonated user's active MFA method.
+    Switch the impersonated user's active MFA method. IAM only branches on 1 (TOTP) and
+    2 (Email) here -- any other value falls through to its disable path and turns the
+    user's MFA off. Use 'blocks mfa disable' when that is what you mean.
   blocks mfa disable [--dry-run] [--yes] [--json]
   blocks mfa backup-codes list [--json]
+    Returns { remaining: <count> } only -- the codes themselves are shown once, at generate.
   blocks mfa backup-codes generate [--dry-run] [--yes] [--json]
   blocks mfa backup-codes use <userId> <code> [--json]
 
@@ -815,11 +830,11 @@ Auth Admin (/iam/v4/auth/identity-providers*, /config, /client-credentials, /oid
                               [--redirect-uris a,b] [--post-logout-redirect-uris a,b]
                               [--scope] [--allowed-scopes a,b] [--allowed-response-types a,b]
                               [--require-pkce] [--require-consent] [--require-mfa]
-                              [--allowed-mfa-methods 0,1] [--front-channel-logout-uri]
+                              [--allowed-mfa-methods 1,2] [--front-channel-logout-uri]
                               [--back-channel-logout-uri] [--auto-redirect]
                               [--external-discovery-endpoint] [--active] [--login-mode]
                               [--client-logo-url] [--client-brand-color] [--use-tokens-cookie]
-                              [--register-as-identity-provider] [--device-flow-client]
+                              [--register-as-identity-provider] [--oidc-url] [--device-flow-client]
                               [--body '<json>'|--file <path>] [--dry-run] [--yes] [--json]
     Upsert: omit --item-id to register a new client, pass it to update an existing one.
     The response's client_secret is shown once and is not retrievable again afterward.
@@ -828,9 +843,10 @@ Auth Admin (/iam/v4/auth/identity-providers*, /config, /client-credentials, /oid
     lets it request the client_credentials grant. Pass --client-type public for any
     PKCE/browser client.
     --register-as-identity-provider creates the linked identity provider in the same call.
-    Its authorize/token/userinfo/jwks/issuer values are filled from the discovery document
-    at --external-discovery-endpoint; with no discovery endpoint they are left null and the
-    provider's scope is replaced with "openid profile email". Verify with 'auth idp list'.
+    Its authorize/token/userinfo/jwks/issuer values are filled from the discovery document.
+    When omitted, --external-discovery-endpoint defaults to
+    <oidc-url>/<project>/.well-known/openid-configuration; pass it explicitly for an
+    external provider or non-standard IAM base URL.
   blocks auth oidc-clients delete <clientId> [--dry-run] [--yes] [--json]
     Irreversible; revokes all tokens issued to the client.
   blocks auth oidc-clients rotate-secret <clientId> [--dry-run] [--yes] [--json]
@@ -906,6 +922,7 @@ Data:
       Irreversible.
     blocks data schema info list [--json]
       Entity-type schema collections with basic info.
+      --schema-type: 1 Entity, 2 Dto. There is no 0.
     blocks data schema info save --schema-name <n> [--collection-name] [--schema-type <1|2>]
                               [--body '<json>'|--file <path>] [--dry-run] [--yes] [--json]
       Create schema metadata only (no fields yet) - pair with data schema fields.
@@ -1090,6 +1107,7 @@ Localization:
     blocks localization key uilm-import <fileId> [--message-co-relation-id]
                               [--dry-run] [--yes] [--json]
     blocks localization key uilm-export [--output-type <0-5>] [--app-ids a,b] [--languages a,b]
+      --output-type: 0 Json (default), 1 Xml, 2 Text, 3 Xlsx, 4 Csv, 5 Xlf.
                               [--reference-file-id] [--caller-tenant-id] [--start-date]
                               [--end-date] [--message-co-relation-id] [--dry-run] [--yes] [--json]
     blocks localization key get-uilm-exported-files [--search] [--page-number] [--page-size]
@@ -1163,29 +1181,5 @@ Scaffold:
     different Data/IAM/Localization/OS gateway URL explicitly only if your
     project uses a non-default one.
     --oidc-url defaults to https://iam.seliseblocks.com.
-
-Skills:
-  blocks skill list [--json]
-    List bundled blocks-skills/*/SKILL.md agent context docs (name +
-    description). Local-only, no cloud calls.
-  blocks skill show <name> [--json]
-    Print one skill's full SKILL.md content.
-  blocks skill add <name> [--dir <path>]
-    Copy a bundled skill's SKILL.md into <path>/<name>/SKILL.md in the
-    current directory (default --dir is 'blocks-skills'), for use in a
-    project outside this monorepo. Overwrites silently, same as
-    'data schema pull'.
-
-SDK:
-  blocks sdk client [--app-domain <domain>] [--client-id <oidcClientId>]
-                    [--x-blocks-key <tenantId>] [--blocks-api-url <url>] [--oidc-url <url>] [--json]
-    Read-only: "I want to use the Blocks SDK -- show me the client." Resolves this
-    project's @seliseblocks/client config using the selected project unless
-    --x-blocks-key overrides it, and the project's registered domain/OIDC client
-    when --app-domain/--client-id are omitted. Its API URL defaults to
-    https://api.seliseblocks.com unless --blocks-api-url is passed.
-    Prints a ready-to-paste createBlocksClient(...) snippet.
-    Passing both --app-domain and --client-id skips the project lookup entirely
-    (no login required). Never writes a file; to scaffold a new app use 'new web'.
 `);
 }

package/dist/lib/oidc-discovery.d.ts

@@ -0,0 +1,2 @@
+export declare function blocksOidcWellKnownUrl(oidcUrl: string, tenantId: string): string;
+export declare function withBlocksIdentityProviderDiscovery<T extends Record<string, unknown>>(body: T, oidcUrl: string, tenantId: string): T;

package/dist/lib/oidc-discovery.js

@@ -0,0 +1,12 @@
+export function blocksOidcWellKnownUrl(oidcUrl, tenantId) {
+    return `${oidcUrl.replace(/\/$/, "")}/${tenantId}/.well-known/openid-configuration`;
+}
+export function withBlocksIdentityProviderDiscovery(body, oidcUrl, tenantId) {
+    if (body.registerAsIdentityProvider !== true || (typeof body.externalDiscoveryEndpoint === "string" && body.externalDiscoveryEndpoint)) {
+        return body;
+    }
+    return {
+        ...body,
+        externalDiscoveryEndpoint: blocksOidcWellKnownUrl(oidcUrl, tenantId)
+    };
+}

package/package.json

@@ -1,47 +1,47 @@
-{
-  "name": "@seliseblocks/cli-os",
-  "version": "0.2.10",
-  "description": "CLI for SELISE Blocks project setup and configuration.",
-  "license": "MIT",
-  "type": "module",
-  "bin": {
-    "blocks": "bin/run.js"
-  },
-  "main": "./dist/index.js",
-  "types": "./dist/index.d.ts",
-  "exports": {
-    ".": {
-      "types": "./dist/index.d.ts",
-      "import": "./dist/index.js"
-    },
-    "./package.json": "./package.json"
-  },
-  "publishConfig": {
-    "access": "public"
-  },
-  "sideEffects": false,
-  "files": [
-    "bin",
-    "dist",
-    "README.md",
-    "AI_USAGE_GUIDE.md",
-    "LICENSE"
-  ],
-  "scripts": {
-    "clean": "node -e \"require('node:fs').rmSync('dist',{recursive:true,force:true})\"",
-    "build": "npm run clean && tsc -p tsconfig.json && node scripts/copy-skills.mjs",
-    "dev": "tsx src/index.ts",
-    "lint": "tsc -p tsconfig.json --noEmit",
-    "test": "npm run build && node --test test/*.test.mjs",
-    "prepack": "npm run build",
-    "prepublishOnly": "npm test"
-  },
-  "devDependencies": {
-    "@types/node": "^22.0.0",
-    "tsx": "^4.16.0",
-    "typescript": "^5.5.0"
-  },
-  "engines": {
-    "node": ">=20"
-  }
-}
+{
+  "name": "@seliseblocks/cli-os",
+  "version": "0.2.12",
+  "description": "CLI for SELISE Blocks project setup and configuration.",
+  "license": "MIT",
+  "type": "module",
+  "bin": {
+    "blocks": "bin/run.js"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "sideEffects": false,
+  "files": [
+    "bin",
+    "dist",
+    "README.md",
+    "AI_USAGE_GUIDE.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "clean": "node -e \"require('node:fs').rmSync('dist',{recursive:true,force:true})\"",
+    "build": "npm run clean && tsc -p tsconfig.json",
+    "dev": "tsx src/index.ts",
+    "lint": "tsc -p tsconfig.json --noEmit",
+    "test": "npm run build && node --test test/*.test.mjs",
+    "prepack": "npm run build",
+    "prepublishOnly": "npm test"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "tsx": "^4.16.0",
+    "typescript": "^5.5.0"
+  },
+  "engines": {
+    "node": ">=20"
+  }
+}

package/dist/commands/sdk/client.d.ts

@@ -1 +0,0 @@
-export declare function sdkClient(argv: string[]): Promise<void>;

package/dist/commands/sdk/client.js

@@ -1,99 +0,0 @@
-import { blocksRequest } from "../../lib/api.js";
-import { stringFlag } from "../../lib/args.js";
-import { defaults } from "../../lib/config.js";
-import { findProjectByTenantId } from "../../lib/project-info.js";
-import { writeOutput } from "../../lib/output.js";
-import { requestContext } from "../../lib/request-context.js";
-import { parseCommand, selectedProject } from "../../lib/workspace.js";
-// Read-only: "I want to use the Blocks SDK in my app -- show me the client."
-// Resolves this project's createBlocksClient() config and prints it, same
-// values 'new web' scaffolds with. Never writes a file and never mutates
-// anything -- if you want the SDK wired into a new app, use 'new web'.
-export async function sdkClient(argv) {
-    const { flags } = parseCommand(argv);
-    const tenantId = stringFlag(flags, "x-blocks-key") || (await selectedProject(flags));
-    const apiUrl = stringFlag(flags, "blocks-api-url", { defaultValue: defaults().apiUrl });
-    const oidcUrl = stringFlag(flags, "oidc-url", { defaultValue: defaults().oidcUrl });
-    let appDomain = stringFlag(flags, "app-domain");
-    let oidcClientId = stringFlag(flags, "client-id");
-    const notes = [];
-    if (!appDomain || !oidcClientId) {
-        const { project } = await findProjectByTenantId(tenantId, flags);
-        if (!appDomain) {
-            const domains = (project.applications ?? [])
-                .map((application) => application.domain)
-                .filter((domain) => Boolean(domain));
-            if (domains.length === 1) {
-                appDomain = domains[0];
-            }
-            else if (domains.length > 1) {
-                notes.push(`Multiple domains registered for this project (${domains.join(", ")}) -- pass --app-domain to pick one.`);
-            }
-            else {
-                notes.push("This project has no domains registered in Blocks -- pass --app-domain explicitly.");
-            }
-        }
-        if (!oidcClientId) {
-            const clients = await listOidcClients(tenantId, flags);
-            if (clients.length === 1) {
-                oidcClientId = clients[0].id;
-            }
-            else if (clients.length > 1) {
-                notes.push(`Multiple OIDC clients found (${clients.map((client) => `${client.label} [${client.id}]`).join(", ")}) -- pass --client-id to pick one.`);
-            }
-            else {
-                notes.push("No OIDC client registered for this project -- create one ('auth:oidc-clients:save') and pass --client-id.");
-            }
-        }
-    }
-    if (flags.json) {
-        writeOutput({ apiUrl, appDomain: appDomain || undefined, notes, oidcClientId: oidcClientId || undefined, oidcUrl, xBlocksKey: tenantId }, flags);
-        return;
-    }
-    console.log("import { createBlocksClient } from \"@seliseblocks/client\";");
-    console.log("");
-    console.log("export const blocksClient = createBlocksClient({");
-    console.log(`  apiUrl: "${apiUrl}",`);
-    if (appDomain)
-        console.log(`  appDomain: "${appDomain}",`);
-    console.log("  oidc: {");
-    console.log(`    clientId: "${oidcClientId || "<register a public OIDC client, see auth:oidc-clients:save>"}",`);
-    console.log("    scope: \"openid profile\",");
-    console.log(`    url: "${oidcUrl}"`);
-    console.log("  },");
-    console.log(`  xBlocksKey: "${tenantId}"`);
-    console.log("});");
-    for (const note of notes)
-        console.log(`\n${note}`);
-}
-async function listOidcClients(tenantId, flags) {
-    const raw = await blocksRequest("/iam/v4/oidc-clients", {
-        impersonatedProjectAuth: true,
-        projectTenantId: tenantId,
-        ...requestContext(flags)
-    });
-    const clients = [];
-    for (const item of normalizeList(raw)) {
-        if (typeof item !== "object" || item === null)
-            continue;
-        const record = item;
-        const id = record.itemId ?? record.clientId ?? record.id;
-        if (typeof id !== "string" || !id)
-            continue;
-        const label = typeof record.clientDisplayName === "string" && record.clientDisplayName ? record.clientDisplayName : id;
-        clients.push({ id, label });
-    }
-    return clients;
-}
-function normalizeList(raw) {
-    if (Array.isArray(raw))
-        return raw;
-    if (raw && typeof raw === "object") {
-        for (const key of ["data", "items", "results"]) {
-            const value = raw[key];
-            if (Array.isArray(value))
-                return value;
-        }
-    }
-    return [];
-}

package/dist/commands/skill/add.d.ts

@@ -1 +0,0 @@
-export declare function skillAdd(argv: string[]): Promise<void>;

package/dist/commands/skill/add.js

@@ -1,19 +0,0 @@
-import { cp } from "node:fs/promises";
-import { dirname, join } from "node:path";
-import { stringFlag } from "../../lib/args.js";
-import { readSkill } from "../../lib/skills.js";
-import { parseCommand } from "../../lib/workspace.js";
-export async function skillAdd(argv) {
-    const { args, flags } = parseCommand(argv);
-    const name = args[0];
-    if (!name)
-        throw new Error("Missing skill name. Run 'blocks skill list' to see available skills.");
-    const skill = await readSkill(name);
-    const sourceDir = dirname(skill.path);
-    const targetDir = stringFlag(flags, "dir", { defaultValue: "blocks-skills" });
-    const targetPath = join(process.cwd(), targetDir, name);
-    // Copy the whole skill directory, not just SKILL.md -- some skills also ship
-    // supporting files (e.g. flows/*.md) that SKILL.md links to.
-    await cp(sourceDir, targetPath, { recursive: true });
-    console.log(`Added ${targetPath}`);
-}

package/dist/commands/skill/list.d.ts

@@ -1 +0,0 @@
-export declare function skillList(argv: string[]): Promise<void>;

package/dist/commands/skill/list.js

@@ -1,15 +0,0 @@
-import { listSkills, SKILLS_REPO_URL } from "../../lib/skills.js";
-import { writeOutput } from "../../lib/output.js";
-import { parseCommand } from "../../lib/workspace.js";
-export async function skillList(argv) {
-    const { flags } = parseCommand(argv);
-    const skills = await listSkills();
-    if (flags.json) {
-        writeOutput(skills, flags);
-        return;
-    }
-    for (const skill of skills) {
-        console.log(`${skill.name}  ${skill.description}`);
-    }
-    console.log(`\nFull catalog (may be ahead of this bundled list): ${SKILLS_REPO_URL}`);
-}

package/dist/commands/skill/show.d.ts

@@ -1 +0,0 @@
-export declare function skillShow(argv: string[]): Promise<void>;

package/dist/commands/skill/show.js

@@ -1,15 +0,0 @@
-import { readSkill } from "../../lib/skills.js";
-import { writeOutput } from "../../lib/output.js";
-import { parseCommand } from "../../lib/workspace.js";
-export async function skillShow(argv) {
-    const { args, flags } = parseCommand(argv);
-    const name = args[0];
-    if (!name)
-        throw new Error("Missing skill name. Run 'blocks skill list' to see available skills.");
-    const skill = await readSkill(name);
-    if (flags.json) {
-        writeOutput(skill, flags);
-        return;
-    }
-    console.log(skill.content);
-}

package/dist/lib/skills.d.ts

@@ -1,17 +0,0 @@
-export type SkillSummary = {
-    description: string;
-    name: string;
-    path: string;
-};
-export type SkillDetail = SkillSummary & {
-    content: string;
-};
-export declare const SKILLS_REPO_URL = "https://github.com/SELISEdigitalplatforms/blocks-cli/tree/main/blocks-skills";
-export declare function resolveSkillsDir(): string;
-export declare function parseFrontmatter(raw: string): {
-    body: string;
-    description?: string;
-    name?: string;
-};
-export declare function listSkills(): Promise<SkillSummary[]>;
-export declare function readSkill(name: string): Promise<SkillDetail>;

package/dist/lib/skills.js

@@ -1,69 +0,0 @@
-import { existsSync } from "node:fs";
-import { readdir, readFile } from "node:fs/promises";
-import { dirname, join } from "node:path";
-import { fileURLToPath } from "node:url";
-// Canonical public catalog -- the source of truth when the locally bundled
-// skills are missing a name, or out of date relative to what's published.
-export const SKILLS_REPO_URL = "https://github.com/SELISEdigitalplatforms/blocks-cli/tree/main/blocks-skills";
-// Resolves where blocks-skills/*/SKILL.md content lives, in priority order:
-// 1. Bundled into this package at build time (see scripts/copy-skills.mjs) --
-//    what a published npm install actually ships.
-// 2. The monorepo root's blocks-skills/ folder -- covers 'npm run dev' (tsx,
-//    no build step) and running straight from a source checkout.
-export function resolveSkillsDir() {
-    const moduleDir = dirname(fileURLToPath(import.meta.url));
-    const candidates = [join(moduleDir, "..", "skills"), join(moduleDir, "..", "..", "..", "blocks-skills")];
-    for (const candidate of candidates) {
-        if (existsSync(candidate))
-            return candidate;
-    }
-    throw new Error("No blocks-skills content found. Expected a bundled 'skills' folder next to this package, or a 'blocks-skills' folder at the monorepo root.");
-}
-// Hand-rolled parser for this repo's flat, single-line SKILL.md frontmatter
-// (`name: ...` / `description: "..."`) -- no YAML dependency exists in this
-// package and none of these fields span multiple lines.
-export function parseFrontmatter(raw) {
-    const match = raw.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n?([\s\S]*)$/);
-    if (!match)
-        return { body: raw };
-    const [, frontmatter, body] = match;
-    const fields = {};
-    for (const line of frontmatter.split(/\r?\n/)) {
-        const separator = line.indexOf(":");
-        if (separator === -1)
-            continue;
-        const key = line.slice(0, separator).trim();
-        let value = line.slice(separator + 1).trim();
-        if (value.length >= 2 && value.startsWith("\"") && value.endsWith("\"")) {
-            value = value.slice(1, -1);
-        }
-        fields[key] = value;
-    }
-    return { body, description: fields.description, name: fields.name };
-}
-export async function listSkills() {
-    const dir = resolveSkillsDir();
-    const entries = await readdir(dir, { withFileTypes: true });
-    const summaries = [];
-    for (const entry of entries) {
-        if (!entry.isDirectory())
-            continue;
-        const skillPath = join(dir, entry.name, "SKILL.md");
-        if (!existsSync(skillPath))
-            continue;
-        const raw = await readFile(skillPath, "utf8");
-        const { description, name } = parseFrontmatter(raw);
-        summaries.push({ description: description ?? "", name: name ?? entry.name, path: skillPath });
-    }
-    return summaries.sort((a, b) => a.name.localeCompare(b.name));
-}
-export async function readSkill(name) {
-    const skills = await listSkills();
-    const match = skills.find((skill) => skill.name === name);
-    if (!match) {
-        const available = skills.map((skill) => skill.name).join(", ") || "(none found)";
-        throw new Error(`Unknown skill '${name}'. Available skills: ${available}. If the skill you're looking for isn't listed (the bundled set may be out of date), check the full catalog at ${SKILLS_REPO_URL}.`);
-    }
-    const content = await readFile(match.path, "utf8");
-    return { ...match, content };
-}