@solidactions/cli 1.11.0 → 1.13.0

package/dist/commands/role-push.js

@@ -0,0 +1,168 @@
+"use strict";
+/**
+ * solidactions role push <dir>
+ *
+ * Pushes a role definition to the crews library (idempotent upsert).
+ * Roles are flat peers of skills (per cli#34) — NOT nested under a role.
+ *
+ * The role def is a SKILL.md-shaped file (frontmatter name+description, body).
+ * Roles carry NO references.
+ *
+ * Supports --dry-run: pre-flight a read to detect existence; prints
+ * "[dry-run] would create/update '<name>'" without making any create/edit call.
+ *
+ * Upsert: create → on name_collision → edit.
+ * Roles use 'name' (NOT 'identifier') for read and edit.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rolePushWithConfig = rolePushWithConfig;
+exports.rolePush = rolePush;
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const chalk_1 = __importDefault(require("chalk"));
+const api_1 = require("../utils/api");
+const mcp_1 = require("../utils/mcp");
+const skill_push_1 = require("./skill-push");
+/**
+ * Core implementation — accepts an injected config so tests can point at a
+ * stub server without touching the filesystem config.
+ *
+ * Reads <dir>/SKILL.md (errors if missing), parses it via parseSkillFile,
+ * then upserts the role via the crews 'roles' MCP tool.
+ *
+ * Roles carry NO references. The 'roles' tool uses 'name' for read and edit
+ * (NOT 'identifier'). Dry-run pre-flight uses {action:'read', name}.
+ */
+async function rolePushWithConfig(dir, options, config) {
+    const absDir = path_1.default.resolve(dir);
+    // Verify the directory exists
+    if (!fs_1.default.existsSync(absDir) || !fs_1.default.statSync(absDir).isDirectory()) {
+        process.stderr.write(chalk_1.default.red(`error: "${dir}" is not a directory.\n`));
+        process.exit(1);
+    }
+    // Read and parse SKILL.md (roles use the same SKILL.md filename convention)
+    const skillMdPath = path_1.default.join(absDir, 'SKILL.md');
+    if (!fs_1.default.existsSync(skillMdPath)) {
+        process.stderr.write(chalk_1.default.red(`error: "${skillMdPath}" not found. The role directory must contain a SKILL.md file.\n`));
+        process.exit(1);
+    }
+    const skillMdContent = fs_1.default.readFileSync(skillMdPath, 'utf8');
+    let name;
+    let description;
+    let properties;
+    let body;
+    try {
+        ({ name, description, properties, body } = (0, skill_push_1.parseSkillFile)(skillMdContent));
+    }
+    catch (e) {
+        process.stderr.write(chalk_1.default.red(`error: ${e.message}\n`));
+        process.exit(1);
+    }
+    // --dry-run: pre-flight a read to detect existence; NO create or edit.
+    // Roles use {action:'read', name} (NOT identifier).
+    if (options.dryRun) {
+        let readResult;
+        try {
+            readResult = await (0, mcp_1.callCrewsTool)(config, 'roles', { action: 'read', name });
+        }
+        catch (e) {
+            process.stderr.write(chalk_1.default.red(`error: MCP request failed — ${e.message}\n`));
+            process.exit(1);
+        }
+        if (!readResult.ok) {
+            const code = readResult.data?.code;
+            if (code === 'role_not_found') {
+                if (options.json) {
+                    console.log(JSON.stringify({}));
+                }
+                else {
+                    console.log(chalk_1.default.cyan(`[dry-run] would create '${name}'`));
+                }
+                process.exit(0);
+            }
+            // Any other error is unexpected — surface it
+            const errMsg = readResult.data?.message ?? 'MCP returned an error with no message';
+            process.stderr.write(chalk_1.default.red(`error: ${code ?? 'unknown_error'}: ${errMsg}\n`));
+            process.exit(1);
+        }
+        // Read succeeded → role exists → would update
+        if (options.json) {
+            console.log(JSON.stringify({}));
+        }
+        else {
+            console.log(chalk_1.default.cyan(`[dry-run] would update '${name}'`));
+        }
+        process.exit(0);
+    }
+    // Upsert: try create first; on name_collision switch to edit.
+    // Roles carry NO references — do not send references key.
+    let result;
+    try {
+        result = await (0, mcp_1.callCrewsTool)(config, 'roles', {
+            action: 'create',
+            name,
+            description,
+            body,
+            properties,
+        });
+    }
+    catch (e) {
+        process.stderr.write(chalk_1.default.red(`error: MCP request failed — ${e.message}\n`));
+        process.exit(1);
+    }
+    // On name collision, switch to the edit path.
+    // Roles edit uses 'name' (NOT 'identifier'), and properties → properties_patch.
+    if (!result.ok && result.data?.code === 'name_collision') {
+        try {
+            result = await (0, mcp_1.callCrewsTool)(config, 'roles', {
+                action: 'edit',
+                name,
+                description,
+                body,
+                properties_patch: properties,
+            });
+        }
+        catch (e) {
+            process.stderr.write(chalk_1.default.red(`error: MCP request failed — ${e.message}\n`));
+            process.exit(1);
+        }
+        if (!result.ok) {
+            const errCode = result.data?.code ?? 'unknown_error';
+            const errMsg = result.data?.message ?? 'MCP returned an error with no message';
+            process.stderr.write(chalk_1.default.red(`error: ${errCode}: ${errMsg}\n`));
+            process.exit(1);
+        }
+        if (options.json) {
+            console.log(JSON.stringify(result.data ?? {}));
+        }
+        else {
+            console.log(chalk_1.default.green(`updated role '${name}'`));
+        }
+        process.exit(0);
+    }
+    if (!result.ok) {
+        const errCode = result.data?.code ?? 'unknown_error';
+        const errMsg = result.data?.message ?? 'MCP returned an error with no message';
+        process.stderr.write(chalk_1.default.red(`error: ${errCode}: ${errMsg}\n`));
+        process.exit(1);
+    }
+    if (options.json) {
+        console.log(JSON.stringify(result.data ?? {}));
+    }
+    else {
+        const data = result.data ?? {};
+        const roleDocId = data.role_doc_id ?? data.doc_id ?? data.id ?? '?';
+        console.log(chalk_1.default.green(`created role '${name}' (doc ${roleDocId})`));
+    }
+    process.exit(0);
+}
+/**
+ * Entry point called from index.ts.
+ */
+async function rolePush(dir, options) {
+    const config = await (0, api_1.requireConfigWithWorkspace)();
+    await rolePushWithConfig(dir, options, config);
+}

package/dist/commands/skill-delete.js

@@ -0,0 +1,54 @@
+"use strict";
+/**
+ * solidactions skill delete <name>
+ *
+ * Deletes a skill from the crews library. Admin only.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.skillDeleteWithConfig = skillDeleteWithConfig;
+exports.skillDelete = skillDelete;
+const chalk_1 = __importDefault(require("chalk"));
+const api_1 = require("../utils/api");
+const mcp_1 = require("../utils/mcp");
+/**
+ * Core implementation — accepts an injected config so tests can point at a
+ * stub server without touching the filesystem config.
+ */
+async function skillDeleteWithConfig(name, options, config) {
+    let result;
+    try {
+        result = await (0, mcp_1.callCrewsTool)(config, 'skills', { action: 'delete', identifier: name });
+    }
+    catch (e) {
+        process.stderr.write(chalk_1.default.red(`error: ${e.message}\n`));
+        process.exit(1);
+    }
+    if (!result.ok) {
+        const code = result.data?.code ?? 'unknown_error';
+        const message = result.data?.message ?? 'MCP returned an error with no message';
+        if (code === 'permission_denied') {
+            process.stderr.write(chalk_1.default.red(`error: permission denied — deleting a skill requires Admin access.\n`));
+        }
+        else {
+            process.stderr.write(chalk_1.default.red(`error: ${code}: ${message}\n`));
+        }
+        process.exit(1);
+    }
+    if (options.json) {
+        console.log(JSON.stringify(result.data));
+        process.exit(0);
+    }
+    const deleteToken = result.data?.delete_token ?? '';
+    console.log(chalk_1.default.green(`deleted skill '${name}'`) + (deleteToken ? chalk_1.default.gray(` (token: ${deleteToken})`) : ''));
+    process.exit(0);
+}
+/**
+ * Entry point called from index.ts.
+ */
+async function skillDelete(name, options) {
+    const config = await (0, api_1.requireConfigWithWorkspace)();
+    await skillDeleteWithConfig(name, options, config);
+}

package/dist/commands/skill-list.js

@@ -0,0 +1,60 @@
+"use strict";
+/**
+ * solidactions skill list
+ *
+ * Lists skills in the crews library.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.skillListWithConfig = skillListWithConfig;
+exports.skillList = skillList;
+const chalk_1 = __importDefault(require("chalk"));
+const api_1 = require("../utils/api");
+const mcp_1 = require("../utils/mcp");
+/**
+ * Core implementation — accepts an injected config so tests can point at a
+ * stub server without touching the filesystem config.
+ */
+async function skillListWithConfig(options, config) {
+    const args = { action: 'list' };
+    if (options.limit !== undefined) {
+        args.limit = options.limit;
+    }
+    let result;
+    try {
+        result = await (0, mcp_1.callCrewsTool)(config, 'skills', args);
+    }
+    catch (e) {
+        process.stderr.write(chalk_1.default.red(`error: ${e.message}\n`));
+        process.exit(1);
+    }
+    if (!result.ok) {
+        const code = result.data?.code ?? 'unknown_error';
+        const message = result.data?.message ?? 'MCP returned an error with no message';
+        process.stderr.write(chalk_1.default.red(`error: ${code}: ${message}\n`));
+        process.exit(1);
+    }
+    const skills = result.data?.skills ?? [];
+    if (options.json) {
+        console.log(JSON.stringify(result.data));
+        process.exit(0);
+    }
+    if (skills.length === 0) {
+        console.log(chalk_1.default.gray('No skills found.'));
+        process.exit(0);
+    }
+    for (const skill of skills) {
+        const advertisedMarker = skill.catalog_advertised ? chalk_1.default.gray(' (advertised)') : '';
+        console.log(`${chalk_1.default.green(skill.name)} — ${chalk_1.default.gray(skill.description)}${advertisedMarker}`);
+    }
+    process.exit(0);
+}
+/**
+ * Entry point called from index.ts.
+ */
+async function skillList(options) {
+    const config = await (0, api_1.requireConfigWithWorkspace)();
+    await skillListWithConfig(options, config);
+}

package/dist/commands/skill-pull.js

@@ -0,0 +1,120 @@
+"use strict";
+/**
+ * solidactions skill pull <name> [dest]
+ *
+ * Fetches a skill from the crews library and reconstructs a local skill folder
+ * (the inverse of `skill push`): writes <dest>/SKILL.md + any bundled reference
+ * files under <dest>/. Default dest = ./<name>/.
+ *
+ * --json mode: prints the raw read result from the server and exits WITHOUT
+ * writing any files. This is useful for scripting/inspection. The default
+ * (no --json) writes the folder.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.skillPullWithConfig = skillPullWithConfig;
+exports.skillPull = skillPull;
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const chalk_1 = __importDefault(require("chalk"));
+const js_yaml_1 = __importDefault(require("js-yaml"));
+const api_1 = require("../utils/api");
+const mcp_1 = require("../utils/mcp");
+/**
+ * Core implementation — accepts an injected config so tests can point at a
+ * stub server without touching the filesystem config.
+ *
+ * Steps:
+ *  1. Call skills.read to fetch the skill from the library.
+ *  2. If --json: print the raw result, exit 0 (no file writes).
+ *  3. Otherwise: reconstruct SKILL.md from the returned `properties` (which
+ *     contains name, description, and any extra props), OMITTING `type` (the
+ *     server sets it; stripping mirrors what parseSkillFile does on push so a
+ *     push→pull→push round-trip is idempotent). Write <dest>/SKILL.md, then
+ *     write each reference file under <dest>/ with a path-traversal guard.
+ */
+async function skillPullWithConfig(name, dest, options, config) {
+    // Call the crews MCP server for a skills.read
+    let result;
+    try {
+        result = await (0, mcp_1.callCrewsTool)(config, 'skills', { action: 'read', identifier: name });
+    }
+    catch (e) {
+        process.stderr.write(chalk_1.default.red(`error: MCP request failed — ${e.message}\n`));
+        process.exit(1);
+    }
+    if (!result.ok) {
+        const code = result.data?.code ?? 'unknown_error';
+        const message = result.data?.message ?? 'MCP returned an error with no message';
+        process.stderr.write(chalk_1.default.red(`error: ${code}: ${message}\n`));
+        process.exit(1);
+    }
+    const data = result.data;
+    // --json mode: print raw result and exit WITHOUT writing files.
+    // This is intentionally non-destructive: inspect the raw server payload
+    // without side-effects. File reconstruction is the default (no --json) mode.
+    if (options.json) {
+        console.log(JSON.stringify(data));
+        process.exit(0);
+    }
+    // Resolve the output directory (default: ./<name>/)
+    const out = dest ?? './' + name;
+    const absOut = path_1.default.resolve(out);
+    // Build the frontmatter object from `properties`, OMITTING `type`.
+    // The server stores a `type` field but it is stripped on push (parseSkillFile
+    // does `const { type: _type, ...properties } = rest`). We mirror that here
+    // so that pull → push is idempotent.
+    const { type: _type, name: propName, description: propDescription, ...extraProps } = data.properties;
+    // Reconstruct the full frontmatter: name + description (from properties)
+    // followed by all remaining extra props (minus type).
+    const frontmatterObj = {
+        name: propName,
+        description: propDescription,
+        ...extraProps,
+    };
+    // yaml.dump produces "key: value\n" lines; we wrap in ---\n...\n---\n
+    const yamlBlock = js_yaml_1.default.dump(frontmatterObj, { lineWidth: -1 });
+    const body = data.body ?? '';
+    // Ensure the body starts on its own line after the closing ---
+    const skillMdContent = `---\n${yamlBlock}---\n${body.startsWith('\n') ? body : '\n' + body}`;
+    // Create the output directory (and parents) if needed
+    fs_1.default.mkdirSync(absOut, { recursive: true });
+    // Write SKILL.md
+    fs_1.default.writeFileSync(path_1.default.join(absOut, 'SKILL.md'), skillMdContent, 'utf8');
+    // Write reference files, guarding against path traversal
+    const reference = data.reference ?? {};
+    const absOutNorm = path_1.default.resolve(absOut) + path_1.default.sep;
+    let writtenCount = 0;
+    let skippedCount = 0;
+    for (const [key, content] of Object.entries(reference)) {
+        // Guard 1: reject absolute paths
+        if (path_1.default.isAbsolute(key)) {
+            process.stderr.write(chalk_1.default.yellow(`warn: skipping unsafe reference key (absolute path): ${key}\n`));
+            skippedCount++;
+            continue;
+        }
+        // Guard 2: reject path traversal (any key that resolves outside absOut)
+        const target = path_1.default.resolve(absOut, key);
+        if (!target.startsWith(absOutNorm)) {
+            process.stderr.write(chalk_1.default.yellow(`warn: skipping unsafe reference key (traversal): ${key}\n`));
+            skippedCount++;
+            continue;
+        }
+        // Safe: create parent dirs and write the file
+        fs_1.default.mkdirSync(path_1.default.dirname(target), { recursive: true });
+        fs_1.default.writeFileSync(target, content, 'utf8');
+        writtenCount++;
+    }
+    const refSummary = writtenCount === 1 ? '1 reference' : `${writtenCount} references`;
+    console.log(chalk_1.default.green(`pulled skill '${name}' → ${out} (${refSummary})`));
+    process.exit(0);
+}
+/**
+ * Entry point called from index.ts.
+ */
+async function skillPull(name, dest, options) {
+    const config = await (0, api_1.requireConfigWithWorkspace)();
+    await skillPullWithConfig(name, dest, options, config);
+}

package/dist/commands/skill-push.js

@@ -0,0 +1,417 @@
+"use strict";
+/**
+ * solidactions skill push <dir>
+ *
+ * Pushes a local skill folder into the crews library via the crews MCP server.
+ * Idempotent upsert: create, or update on name collision.
+ *
+ * Supports two modes:
+ *   - Single-skill: <dir>/SKILL.md exists → push that one skill.
+ *   - Plugin: <dir>/skills/<name>/SKILL.md and/or <dir>/commands/<name>.md → push all.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseSkillFile = parseSkillFile;
+exports.readReferences = readReferences;
+exports.readSkillDir = readSkillDir;
+exports.parseCommandFile = parseCommandFile;
+exports.pushParsedSkill = pushParsedSkill;
+exports.skillPushWithConfig = skillPushWithConfig;
+exports.skillPush = skillPush;
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const chalk_1 = __importDefault(require("chalk"));
+const js_yaml_1 = __importDefault(require("js-yaml"));
+const api_1 = require("../utils/api");
+const mcp_1 = require("../utils/mcp");
+/**
+ * Parse a SKILL.md file that begins with a YAML frontmatter block.
+ *
+ * Returns { name, description, properties, body } where:
+ *   - name and description come from the frontmatter
+ *   - properties is the rest of the frontmatter (excluding name and description)
+ *   - body is everything after the closing --- delimiter
+ *
+ * Throws with a descriptive message if the file is malformed or missing
+ * required fields.
+ */
+function parseSkillFile(content) {
+    if (!content.startsWith('---')) {
+        throw new Error('SKILL.md must begin with a YAML frontmatter block (---).');
+    }
+    // Find the closing --- delimiter (must be on its own line after the opening ---)
+    const afterOpen = content.slice(3);
+    const closeIdx = afterOpen.indexOf('\n---');
+    if (closeIdx === -1) {
+        throw new Error('SKILL.md frontmatter is not closed (missing closing ---).');
+    }
+    const yamlBlock = afterOpen.slice(0, closeIdx);
+    // Body is everything after the closing ---\n
+    const body = afterOpen.slice(closeIdx + 4).replace(/^\n/, '');
+    let fm;
+    try {
+        fm = js_yaml_1.default.load(yamlBlock);
+    }
+    catch (e) {
+        throw new Error(`Failed to parse SKILL.md frontmatter YAML: ${e.message}`);
+    }
+    if (!fm || typeof fm !== 'object') {
+        throw new Error('SKILL.md frontmatter is empty or not a YAML object.');
+    }
+    if (!fm.name || typeof fm.name !== 'string') {
+        throw new Error('SKILL.md frontmatter must contain a "name" field (string).');
+    }
+    if (!fm.description || typeof fm.description !== 'string') {
+        throw new Error('SKILL.md frontmatter must contain a "description" field (string).');
+    }
+    const { name, description, ...rest } = fm;
+    // Remove 'type' if present — the server sets it
+    const { type: _type, ...properties } = rest;
+    return { name, description, properties, body };
+}
+/**
+ * Recursively read every bundled file under a skill dir, excluding the
+ * top-level SKILL.md. Returns a map of reference-key → utf8 contents.
+ *
+ * Keys are the file's POSIX path relative to the skill dir: top-level files
+ * keep a bare-filename key (e.g. "helper.py"), and files in subfolders keep
+ * their relative path (e.g. "references/member-roles.md") — matching how
+ * SKILL.md cites them, so bundled reference docs land complete (#247).
+ */
+function readReferences(dir) {
+    const references = {};
+    const walk = (current) => {
+        for (const entry of fs_1.default.readdirSync(current, { withFileTypes: true })) {
+            const abs = path_1.default.join(current, entry.name);
+            if (entry.isDirectory()) {
+                walk(abs);
+                continue;
+            }
+            if (!entry.isFile())
+                continue;
+            // POSIX-normalised path relative to the skill dir, used as the key.
+            const key = path_1.default.relative(dir, abs).split(path_1.default.sep).join('/');
+            if (key === 'SKILL.md')
+                continue; // exclude only the top-level skill file
+            references[key] = fs_1.default.readFileSync(abs, 'utf8');
+        }
+    };
+    walk(dir);
+    return references;
+}
+/**
+ * Read a skill directory: validates the dir exists, reads SKILL.md, parses it,
+ * and reads bundled reference files. Returns the full payload for pushParsedSkill.
+ *
+ * Throws with a descriptive message on any filesystem or parse error.
+ */
+function readSkillDir(dir) {
+    const absDir = path_1.default.resolve(dir);
+    if (!fs_1.default.existsSync(absDir) || !fs_1.default.statSync(absDir).isDirectory()) {
+        throw new Error(`"${dir}" is not a directory.`);
+    }
+    const skillMdPath = path_1.default.join(absDir, 'SKILL.md');
+    if (!fs_1.default.existsSync(skillMdPath)) {
+        throw new Error(`"${skillMdPath}" not found. The skill directory must contain a SKILL.md file.`);
+    }
+    const skillMdContent = fs_1.default.readFileSync(skillMdPath, 'utf8');
+    const { name, description, properties, body } = parseSkillFile(skillMdContent);
+    const references = readReferences(absDir);
+    return { name, description, properties, body, references };
+}
+/**
+ * Parse a commands/<name>.md file (plugin command format).
+ *
+ * Derives the skill name from the filename (kebab-case: lowercase, spaces and
+ * underscores replaced with hyphens). The frontmatter must contain `description`;
+ * `name`, `allowed-tools`, and `argument-hint` are not carried forward.
+ *
+ * Returns a SkillPayload with properties={} and references={}.
+ * Throws with a descriptive message if description is missing or frontmatter malformed.
+ */
+function parseCommandFile(filename, content) {
+    // Derive name from filename (basename without extension, converted to kebab-case)
+    const base = path_1.default.basename(filename, '.md');
+    const name = base.toLowerCase().replace(/[\s_]+/g, '-');
+    if (!content.startsWith('---')) {
+        throw new Error(`${filename}: command file must begin with a YAML frontmatter block (---).`);
+    }
+    const afterOpen = content.slice(3);
+    const closeIdx = afterOpen.indexOf('\n---');
+    if (closeIdx === -1) {
+        throw new Error(`${filename}: command file frontmatter is not closed (missing closing ---).`);
+    }
+    const yamlBlock = afterOpen.slice(0, closeIdx);
+    const body = afterOpen.slice(closeIdx + 4).replace(/^\n/, '');
+    let fm;
+    try {
+        fm = js_yaml_1.default.load(yamlBlock);
+    }
+    catch (e) {
+        throw new Error(`${filename}: failed to parse command file frontmatter YAML: ${e.message}`);
+    }
+    if (!fm || typeof fm !== 'object') {
+        throw new Error(`${filename}: command file frontmatter is empty or not a YAML object.`);
+    }
+    if (!fm.description || typeof fm.description !== 'string') {
+        throw new Error(`${filename}: command file frontmatter must contain a "description" field (string).`);
+    }
+    return {
+        name,
+        description: fm.description,
+        properties: {},
+        body,
+        references: {},
+    };
+}
+/**
+ * Core upsert: try create; on name_collision, switch to edit.
+ * Returns a result object — does NOT call process.exit and does NOT print.
+ * Throws on non-collision MCP errors.
+ *
+ * When options.dryRun is true, performs only a skills.read pre-flight and
+ * returns {status:'would-create'} or {status:'would-update'} without any
+ * create or edit call.
+ */
+async function pushParsedSkill(payload, options, config) {
+    const { name, description, properties, body, references } = payload;
+    const isRole = !!options.role;
+    const tool = isRole ? 'roles' : 'skills';
+    // --dry-run: pre-flight a read to detect existence; make NO create/edit calls.
+    if (options.dryRun) {
+        // Role-scoped skills are read via the roles tool's read_skill {role, name};
+        // shared skills via the skills tool's read {identifier}. Both return
+        // `skill_not_found` when absent. (read does NOT accept `identifier` on the
+        // roles tool, so the action/args must branch on isRole.)
+        const readArgs = isRole
+            ? { action: 'read_skill', role: options.role, name }
+            : { action: 'read', identifier: name };
+        let readResult;
+        try {
+            readResult = await (0, mcp_1.callCrewsTool)(config, tool, readArgs);
+        }
+        catch (e) {
+            throw new Error(`MCP request failed — ${e.message}`);
+        }
+        if (!readResult.ok) {
+            const code = readResult.data?.code;
+            if (code === 'skill_not_found') {
+                return { status: 'would-create', name, data: {} };
+            }
+            // Any other error is unexpected — surface it
+            const errMsg = readResult.data?.message ?? 'MCP returned an error with no message';
+            throw new Error(`${code ?? 'unknown_error'}: ${errMsg}`);
+        }
+        // Read succeeded → skill exists → would update
+        return { status: 'would-update', name, data: {} };
+    }
+    const createArgs = isRole
+        ? { action: 'create_skill', role: options.role, name, description, body, properties, references }
+        : { action: 'create', name, description, body, properties, references };
+    let result;
+    try {
+        result = await (0, mcp_1.callCrewsTool)(config, tool, createArgs);
+    }
+    catch (e) {
+        throw new Error(`MCP request failed — ${e.message}`);
+    }
+    // On name collision, switch to the edit path. properties → properties_patch.
+    if (!result.ok && result.data?.code === 'name_collision') {
+        const editArgs = isRole
+            ? { action: 'edit_skill', role: options.role, name, description, body, properties_patch: properties, references }
+            : { action: 'edit', identifier: name, description, body, properties_patch: properties, references };
+        try {
+            result = await (0, mcp_1.callCrewsTool)(config, tool, editArgs);
+        }
+        catch (e) {
+            throw new Error(`MCP request failed — ${e.message}`);
+        }
+        if (!result.ok) {
+            const errData = result.data;
+            const errCode = errData?.code ?? 'unknown_error';
+            const errMsg = errData?.message ?? 'MCP returned an error with no message';
+            throw new Error(`${errCode}: ${errMsg}`);
+        }
+        return { status: 'updated', name, data: result.data ?? {} };
+    }
+    if (!result.ok) {
+        const errData = result.data;
+        const errCode = errData?.code ?? 'unknown_error';
+        const errMsg = errData?.message ?? 'MCP returned an error with no message';
+        throw new Error(`${errCode}: ${errMsg}`);
+    }
+    return { status: 'created', name, data: result.data ?? {} };
+}
+/**
+ * Print a single skill push result line (shared between single and plugin modes).
+ */
+function printPushResult(result, options) {
+    if (options.json) {
+        console.log(JSON.stringify(result.data));
+        return;
+    }
+    const { status, name, data } = result;
+    if (status === 'would-create') {
+        console.log(chalk_1.default.cyan(`[dry-run] would create '${name}'`));
+    }
+    else if (status === 'would-update') {
+        console.log(chalk_1.default.cyan(`[dry-run] would update '${name}'`));
+    }
+    else if (status === 'updated') {
+        console.log(chalk_1.default.green(`updated skill '${name}' (version ${data.version_id ?? '?'})`));
+    }
+    else {
+        const skillDocId = data.skill_doc_id ?? data.doc_id ?? data.id ?? '?';
+        const refCount = Object.keys(data.reference_doc_ids ?? {}).length;
+        console.log(chalk_1.default.green(`created skill '${name}' (doc ${skillDocId}, ${refCount} refs)`));
+    }
+}
+/**
+ * Core implementation — accepts an injected config so tests can point at a
+ * stub server without touching the filesystem config.
+ *
+ * Routes between single-skill mode (top-level SKILL.md) and plugin mode
+ * (skills/ + commands/ subdirectories) based on directory structure.
+ */
+async function skillPushWithConfig(dir, options, config) {
+    const absDir = path_1.default.resolve(dir);
+    if (!fs_1.default.existsSync(absDir) || !fs_1.default.statSync(absDir).isDirectory()) {
+        process.stderr.write(chalk_1.default.red(`error: "${dir}" is not a directory.\n`));
+        process.exit(1);
+    }
+    const topLevelSkillMd = path_1.default.join(absDir, 'SKILL.md');
+    // -------------------------------------------------------------------------
+    // Single-skill mode: <dir>/SKILL.md exists
+    // -------------------------------------------------------------------------
+    if (fs_1.default.existsSync(topLevelSkillMd)) {
+        let payload;
+        try {
+            payload = readSkillDir(dir);
+        }
+        catch (e) {
+            process.stderr.write(chalk_1.default.red(`error: ${e.message}\n`));
+            process.exit(1);
+        }
+        let pushResult;
+        try {
+            pushResult = await pushParsedSkill(payload, options, config);
+        }
+        catch (e) {
+            process.stderr.write(chalk_1.default.red(`error: ${e.message}\n`));
+            process.exit(1);
+        }
+        if (options.json) {
+            console.log(JSON.stringify(pushResult.data));
+        }
+        else {
+            printPushResult(pushResult, options);
+        }
+        process.exit(0);
+    }
+    // -------------------------------------------------------------------------
+    // Plugin mode: push skills/<name>/SKILL.md + commands/<name>.md
+    // -------------------------------------------------------------------------
+    const payloads = [];
+    // One-level glob: skills/*/SKILL.md
+    const skillsDir = path_1.default.join(absDir, 'skills');
+    if (fs_1.default.existsSync(skillsDir) && fs_1.default.statSync(skillsDir).isDirectory()) {
+        for (const entry of fs_1.default.readdirSync(skillsDir, { withFileTypes: true })) {
+            if (!entry.isDirectory())
+                continue;
+            const skillSubdir = path_1.default.join(skillsDir, entry.name);
+            const skillMd = path_1.default.join(skillSubdir, 'SKILL.md');
+            if (!fs_1.default.existsSync(skillMd))
+                continue;
+            try {
+                payloads.push(readSkillDir(skillSubdir));
+            }
+            catch (e) {
+                process.stderr.write(chalk_1.default.red(`error: skills/${entry.name}/SKILL.md: ${e.message}\n`));
+                process.exit(1);
+            }
+        }
+    }
+    // One-level glob: commands/*.md
+    const commandsDir = path_1.default.join(absDir, 'commands');
+    if (fs_1.default.existsSync(commandsDir) && fs_1.default.statSync(commandsDir).isDirectory()) {
+        for (const entry of fs_1.default.readdirSync(commandsDir, { withFileTypes: true })) {
+            if (!entry.isFile())
+                continue;
+            if (!entry.name.endsWith('.md'))
+                continue;
+            const cmdPath = path_1.default.join(commandsDir, entry.name);
+            const content = fs_1.default.readFileSync(cmdPath, 'utf8');
+            try {
+                payloads.push(parseCommandFile(entry.name, content));
+            }
+            catch (e) {
+                process.stderr.write(chalk_1.default.red(`error: commands/${entry.name}: ${e.message}\n`));
+                process.exit(1);
+            }
+        }
+    }
+    if (payloads.length === 0) {
+        process.stderr.write(chalk_1.default.red(`error: no skills/ or commands/ under "${dir}" — nothing to push.\n`));
+        process.exit(1);
+    }
+    // Detect duplicate names BEFORE any push
+    const seen = new Map();
+    for (const p of payloads) {
+        seen.set(p.name, (seen.get(p.name) ?? 0) + 1);
+    }
+    const conflicts = [...seen.entries()].filter(([, count]) => count > 1).map(([name]) => name);
+    if (conflicts.length > 0) {
+        process.stderr.write(chalk_1.default.red(`error: duplicate skill names detected — aborting before any push.\n`) +
+            chalk_1.default.red(`  conflicts: ${conflicts.join(', ')}\n`) +
+            chalk_1.default.red(`  Rename the conflicting skills/commands so all names are unique.\n`));
+        process.exit(1);
+    }
+    // Push each skill, print a summary line per item
+    let createdCount = 0;
+    let updatedCount = 0;
+    for (const payload of payloads) {
+        let pushResult;
+        try {
+            pushResult = await pushParsedSkill(payload, options, config);
+        }
+        catch (e) {
+            process.stderr.write(chalk_1.default.red(`error: ${payload.name}: ${e.message}\n`));
+            process.exit(1);
+        }
+        printPushResult(pushResult, options);
+        if (pushResult.status === 'created' || pushResult.status === 'would-create') {
+            createdCount++;
+        }
+        else {
+            updatedCount++;
+        }
+    }
+    // Final tally
+    if (!options.json) {
+        const parts = [];
+        if (options.dryRun) {
+            if (createdCount > 0)
+                parts.push(`${createdCount} would create`);
+            if (updatedCount > 0)
+                parts.push(`${updatedCount} would update`);
+            console.log(chalk_1.default.cyan(`\n[dry-run] ${payloads.length} skill(s) (${parts.join(', ')})`));
+        }
+        else {
+            if (createdCount > 0)
+                parts.push(`${createdCount} created`);
+            if (updatedCount > 0)
+                parts.push(`${updatedCount} updated`);
+            console.log(chalk_1.default.cyan(`\ndone: ${payloads.length} skill(s) pushed (${parts.join(', ')})`));
+        }
+    }
+    process.exit(0);
+}
+/**
+ * Entry point called from index.ts.
+ */
+async function skillPush(dir, options) {
+    const config = await (0, api_1.requireConfigWithWorkspace)();
+    await skillPushWithConfig(dir, options, config);
+}

package/dist/commands/skill-view.js

@@ -0,0 +1,59 @@
+"use strict";
+/**
+ * solidactions skill view <name>
+ *
+ * Shows the full details of a single skill from the crews library.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.skillViewWithConfig = skillViewWithConfig;
+exports.skillView = skillView;
+const chalk_1 = __importDefault(require("chalk"));
+const api_1 = require("../utils/api");
+const mcp_1 = require("../utils/mcp");
+/**
+ * Core implementation — accepts an injected config so tests can point at a
+ * stub server without touching the filesystem config.
+ */
+async function skillViewWithConfig(name, options, config) {
+    let result;
+    try {
+        result = await (0, mcp_1.callCrewsTool)(config, 'skills', { action: 'read', identifier: name });
+    }
+    catch (e) {
+        process.stderr.write(chalk_1.default.red(`error: ${e.message}\n`));
+        process.exit(1);
+    }
+    if (!result.ok) {
+        const code = result.data?.code ?? 'unknown_error';
+        const message = result.data?.message ?? 'MCP returned an error with no message';
+        process.stderr.write(chalk_1.default.red(`error: ${code}: ${message}\n`));
+        process.exit(1);
+    }
+    if (options.json) {
+        console.log(JSON.stringify(result.data));
+        process.exit(0);
+    }
+    const data = result.data ?? {};
+    const identifier = data.identifier ?? name;
+    const description = data.properties?.description ?? '';
+    const body = data.body ?? '';
+    console.log(chalk_1.default.green(identifier));
+    if (description) {
+        console.log(chalk_1.default.gray(description));
+    }
+    if (body) {
+        console.log('');
+        console.log(body);
+    }
+    process.exit(0);
+}
+/**
+ * Entry point called from index.ts.
+ */
+async function skillView(name, options) {
+    const config = await (0, api_1.requireConfigWithWorkspace)();
+    await skillViewWithConfig(name, options, config);
+}

package/dist/index.js

@@ -32,6 +32,12 @@ const oauth_actions_search_1 = require("./commands/oauth-actions-search");
 const oauth_actions_list_1 = require("./commands/oauth-actions-list");
 const oauth_actions_show_1 = require("./commands/oauth-actions-show");
 const workspaces_1 = require("./commands/workspaces");
+const skill_push_1 = require("./commands/skill-push");
+const skill_pull_1 = require("./commands/skill-pull");
+const skill_list_1 = require("./commands/skill-list");
+const skill_view_1 = require("./commands/skill-view");
+const skill_delete_1 = require("./commands/skill-delete");
+const role_push_1 = require("./commands/role-push");
 const config_1 = require("./utils/config");
 // eslint-disable-next-line @typescript-eslint/no-var-requires
 const pkg = require('../package.json');
@@ -391,6 +397,63 @@ ai
     .option('--all', 'Install all available examples')
     .option('--overwrite', 'Overwrite existing examples without warning')
     .action((names, options) => { (0, ai_examples_1.aiExamples)(names, options); });
+// =============================================================================
+// skill <subcommand>  (SOP surface — flat top-level noun per cli#34)
+// =============================================================================
+const skill = program.command('skill').description('Manage agent skills (crews SOP surface)');
+skill
+    .command('push')
+    .description('Push a local skill folder into the library (create, or update if it already exists)')
+    .argument('<dir>', 'Path to the skill directory (must contain SKILL.md)')
+    .option('--role <name>', 'Scope the skill to a role instead of the shared library')
+    .option('--json', 'Output result as JSON')
+    .option('--dry-run', 'Preview create vs update without writing')
+    .action(async (dir, options) => {
+    await (0, skill_push_1.skillPush)(dir, options);
+});
+skill
+    .command('pull')
+    .description('Fetch a skill from the library to a local folder for editing (inverse of push)')
+    .argument('<name>', 'Skill name or identifier')
+    .argument('[dest]', 'Destination directory (defaults to ./<name>/)')
+    .option('--json', 'Output raw read result as JSON (no file writes)')
+    .action(async (name, dest, options) => {
+    await (0, skill_pull_1.skillPull)(name, dest, options);
+});
+skill
+    .command('list')
+    .description('List skills in the library')
+    .option('--json', 'Output as JSON')
+    .option('--limit <n>', 'Maximum number of skills to return', (v) => parseInt(v, 10))
+    .action(async (options) => {
+    await (0, skill_list_1.skillList)(options);
+});
+skill
+    .command('view <name>')
+    .description('Show one skill')
+    .option('--json', 'Output as JSON')
+    .action(async (name, options) => {
+    await (0, skill_view_1.skillView)(name, options);
+});
+skill
+    .command('delete <name>')
+    .description('Delete a skill (Admin only)')
+    .option('--json', 'Output as JSON')
+    .action(async (name, options) => {
+    await (0, skill_delete_1.skillDelete)(name, options);
+});
+// =============================================================================
+// role <subcommand>  (SOP surface — flat peer of skill, per cli#34)
+// =============================================================================
+const role = program.command('role').description('Manage roles (crews SOP surface)');
+role
+    .command('push <dir>')
+    .description('Push a role definition (create or update)')
+    .option('--dry-run', 'Preview create vs update without writing')
+    .option('--json', 'Output result as JSON')
+    .action(async (dir, options) => {
+    await (0, role_push_1.rolePush)(dir, options);
+});
 program.parseAsync().catch((err) => {
     console.error(chalk_1.default.red(err.message ?? String(err)));
     process.exit(1);

package/dist/utils/mcp.js

@@ -0,0 +1,117 @@
+"use strict";
+/**
+ * Minimal MCP client for the SolidActions crews MCP server.
+ *
+ * Sends a single stateless JSON-RPC tools/call POST.  No initialize handshake
+ * required — the streamable-HTTP transport at /mcp/crews accepts single
+ * stateless POSTs (confirmed live).
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.callCrewsTool = callCrewsTool;
+const http = __importStar(require("http"));
+const https = __importStar(require("https"));
+const url_1 = require("url");
+const api_1 = require("./api");
+/**
+ * Call a single MCP tool on /mcp/crews.
+ *
+ * Returns { ok: true, data: <success shape> } or { ok: false, data: { code, message } }.
+ */
+async function callCrewsTool(config, toolName, args) {
+    const baseHeaders = (0, api_1.getApiHeaders)(config, 'application/json');
+    // Override Accept to include text/event-stream for streamable-HTTP transport
+    const headers = {
+        ...baseHeaders,
+        'Accept': 'application/json, text/event-stream',
+    };
+    const body = JSON.stringify({
+        jsonrpc: '2.0',
+        id: 1,
+        method: 'tools/call',
+        params: {
+            name: toolName,
+            arguments: args,
+        },
+    });
+    const parsed = new url_1.URL(`${config.host}/mcp/crews`);
+    const isHttps = parsed.protocol === 'https:';
+    const transport = isHttps ? https : http;
+    const responseData = await new Promise((resolve, reject) => {
+        const options = {
+            hostname: parsed.hostname,
+            port: parsed.port || (isHttps ? 443 : 80),
+            path: parsed.pathname + (parsed.search || ''),
+            method: 'POST',
+            headers: {
+                ...headers,
+                'Content-Length': Buffer.byteLength(body),
+            },
+        };
+        const req = transport.request(options, (res) => {
+            let raw = '';
+            res.on('data', (chunk) => { raw += chunk; });
+            res.on('end', () => {
+                if (res.statusCode && res.statusCode >= 400) {
+                    reject(new Error(`MCP request failed with HTTP ${res.statusCode}: ${raw}`));
+                }
+                else {
+                    resolve(raw);
+                }
+            });
+        });
+        req.on('error', reject);
+        req.write(body);
+        req.end();
+    });
+    let parsed2;
+    try {
+        parsed2 = JSON.parse(responseData);
+    }
+    catch {
+        throw new Error(`MCP server returned non-JSON response: ${responseData}`);
+    }
+    const result = parsed2?.result;
+    const isError = result?.isError === true;
+    const textContent = result?.content?.[0]?.text ?? '{}';
+    let toolData;
+    try {
+        toolData = JSON.parse(textContent);
+    }
+    catch {
+        throw new Error(`MCP tool result content is not valid JSON: ${textContent}`);
+    }
+    return { ok: !isError, data: toolData };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solidactions/cli",
-  "version": "1.11.0",
+  "version": "1.13.0",
   "description": "SolidActions CLI - Deploy and manage workflow automation",
   "main": "dist/index.js",
   "bin": {