@standards/cli 1.0.0-alpha.411 → 1.0.0-alpha.412

package/dist/bin.mjs

@@ -5,7 +5,7 @@ import { createRequire } from "node:module";
 import { styleText } from "node:util";
 import { BundleConflictError, StandardsRequestError, createTransport, syncBundle } from "@standards/client";
 import { Command } from "commander";
-import { BUNDLE_LOCALES, COUNT_MODES, MEETING_RESPONSES, RECORDING_OVERRIDES, RECORD_ACCESS_ROLES, RESOURCE_VISIBILITIES, ValidationError, canonicalStringify, diffSchemaState, formatByteSize, parseRecordAccessRole, parseSchemaState, schemaStateSourcePayload } from "@standards/schema";
+import { BUNDLE_LOCALES, COUNT_MODES, MEETING_RESPONSES, RECORDING_OVERRIDES, RECORD_ACCESS_ROLES, RESOURCE_VISIBILITIES, ValidationError, canonicalStringify, diffSchemaState, formatByteSize, parseRecordAccessRole, parseSchemaState, parseSkillSource, schemaStateSourcePayload } from "@standards/schema";
 import Table from "cli-table3";
 import { createAppClient } from "@standards/client/app";
 import { createWriteStream } from "node:fs";
@@ -102,6 +102,16 @@ function parseCountFlag(count) {
 	if (COUNT_MODES.includes(count)) return count;
 	throw new ValidationError(`Invalid --count value "${count}". Expected one of: ${COUNT_MODES.join(", ")}.`, []);
 }
+/**
+* A bound the API reads as a number: `Number("soon")` is `NaN`, which serializes
+* to `null` in JSON and would reach the server as an absent bound rather than as
+* the mistake it is.
+*/
+function parseCount(flag, value) {
+	const parsed = Number(value);
+	if (!Number.isInteger(parsed) || parsed < 0) throw new ValidationError(`${flag} must be a non-negative integer`, []);
+	return parsed;
+}
 function getClientFromCommand(cmd) {
 	const root = getGlobalOptions(cmd);
 	if (!(root.apiUrl && root.apiKey)) throw new Error("No Standards instance configured. Run \"standards login\" or pass --api-key.");
@@ -326,6 +336,29 @@ const CAPABILITIES = Object.keys({
 	modify: true,
 	send: true
 });
+const MAIL_PROVIDERS = ["gmail", "outlook"];
+const CALENDAR_PROVIDERS = ["google-calendar", "outlook-calendar"];
+/**
+* What the app's dialog says before a provider consent, for the person who
+* opens the URL from a terminal. `null` for GitHub and Slack.
+*/
+function connectDisclosure(provider, capabilities = []) {
+	const modify = capabilities.includes("modify");
+	const send = capabilities.includes("send");
+	const lines = ["Standards will be able to:"];
+	if (MAIL_PROVIDERS.includes(provider)) {
+		lines.push("- read your emails and their attachments");
+		if (modify || send && provider === "outlook") lines.push("- change your emails");
+		if (send) lines.push("- send emails from this address");
+		lines.push("It shows them in the workspace, links them to records and makes them searchable.", "AI providers process your email automatically: new emails are classified, your email history is indexed for search by meaning, and important exchanges feed memory. The default assistant can read this mailbox, and AI providers also process your email whenever an agent works on it.");
+	} else if (CALENDAR_PROVIDERS.includes(provider)) {
+		lines.push("- read your events, their guests and their details");
+		if (modify) lines.push("- create, change and delete your events");
+		lines.push("It shows them in the workspace, links them to records and makes them searchable.", "The default assistant can read this calendar, and AI providers process your events whenever an agent works on them.");
+	} else return null;
+	lines.push("Your data is not sold and not used for ads.", "Disconnect at any time in Settings > Integrations.", "Details: https://docs.standards.new/docs/integrations/connected-accounts");
+	return lines.join("\n");
+}
 /** Parse a comma-separated `--capabilities` flag; unknown tiers are refused before the request. */
 function parseCapabilities(raw) {
 	if (raw === void 0) return void 0;
@@ -345,9 +378,11 @@ function registerConnectorsCommand(program) {
 	connectors.command("list").description("List connector connections").option("--scope <scope>", "connection scope (tenant or actor)", "tenant").action(async (opts, cmd) => {
 		formatOutput(await getAppClientFromCommand(cmd).connectors.list({ scope: resolveScope(opts.scope) }), getFormat(cmd));
 	});
-	connectors.command("connect").description("Start an OAuth flow and return the authorization URL to open").requiredOption("--provider <provider>", `connector provider (${PROVIDERS.join(", ")}); run "connectors providers" for the ones this deployment configured`).option("--scope <scope>", "connection scope (tenant or actor)", "tenant").option("--capabilities <list>", `comma-separated capability tiers beyond read (${CAPABILITIES.join(", ")})`).action(async (opts, cmd) => {
+	connectors.command("connect").description("Start an OAuth flow and return the authorization URL to open").requiredOption("--provider <provider>", `connector provider (${PROVIDERS.join(", ")}); run "connectors providers" for the ones this deployment configured`).option("--scope <scope>", "connection scope (tenant or actor)", "tenant").option("--capabilities <list>", `comma-separated capability tiers beyond read (${CAPABILITIES.join(", ")})`).option("--yes", "confirm the access a mailbox or calendar connection gives Standards").action(async (opts, cmd) => {
 		if (!PROVIDERS.includes(opts.provider)) throw new ValidationError(`--provider must be one of: ${PROVIDERS.join(", ")}`, []);
 		const capabilities = parseCapabilities(opts.capabilities);
+		const disclosure = connectDisclosure(opts.provider, capabilities);
+		if (disclosure && !opts.yes) throw new Error(`${disclosure}\n\nRe-run with "--yes" to continue.`);
 		formatOutput(await getAppClientFromCommand(cmd).connectors.startAuth({
 			provider: opts.provider,
 			scope: resolveScope(opts.scope),
@@ -655,16 +690,6 @@ function parseOrder(order) {
 	if (ORDERS.includes(order)) return order;
 	throw new ValidationError(`--order must be one of: ${ORDERS.join(", ")}`, []);
 }
-/**
-* A bound the API reads as a number: `Number("soon")` is `NaN`, which serializes
-* to `null` in JSON and would reach the server as an absent bound rather than as
-* the mistake it is.
-*/
-function parseCount(flag, value) {
-	const parsed = Number(value);
-	if (!Number.isInteger(parsed) || parsed < 0) throw new ValidationError(`${flag} must be a non-negative integer`, []);
-	return parsed;
-}
 /** Build the `MeetingsQuery` body every meetings route accepts. Absent flags stay absent. */
 function buildQuery(opts) {
 	const query = {};
@@ -1159,6 +1184,7 @@ function registerSearchCommand(program) {
 //#endregion
 //#region src/commands/skills.ts
 const SKILL_FILE = "SKILL.md";
+const DEFAULT_SEARCH_LIMIT = 20;
 /** A folder name: one path segment under the rule (`isSafeSkillFilePath`). */
 function isSafeSegment(segment) {
 	return !segment.includes("/") && isSafeSkillFilePath(segment);
@@ -1278,19 +1304,90 @@ async function runSkillsPull(client, dir, names) {
 	}
 	return written;
 }
+/**
+* `standards skills search`: our index, or skills.sh with `community`. Every
+* row carries the same keys, because a table takes its columns from the first.
+*/
+async function runSkillsSearch(client, query, options = {}) {
+	const limit = options.limit === void 0 ? DEFAULT_SEARCH_LIMIT : parseCount("--limit", options.limit);
+	return (await client.skillCatalog.search({
+		query,
+		scope: options.community === true ? "community" : "official",
+		limit
+	})).map(({ source, name, state, reason, description, installs }) => ({
+		source,
+		name,
+		state,
+		reason,
+		description,
+		installs
+	}));
+}
+/** `standards skills preview`: what a source would install, the source checked here first. */
+async function runSkillsPreview(client, source) {
+	parseSkillSource(source);
+	return await client.skillCatalog.preview({ source });
+}
+/**
+* `standards skills add`: the source is previewed to pin it to a commit, then
+* that pinned source is what installs.
+*/
+async function runSkillsAdd(client, source) {
+	const { pinnedSource, follows, audience } = await runSkillsPreview(client, source);
+	return {
+		...await client.skillCatalog.install({
+			pinnedSource,
+			follows,
+			audience
+		}),
+		pinnedSource,
+		follows,
+		audience
+	};
+}
+/** Whether a refusal names the `discardChanges` field (the `ValidationError` details the client keeps). */
+function refusesWithoutDiscard(error) {
+	if (typeof error !== "object" || error === null) return false;
+	const errors = error.details?.errors;
+	return Array.isArray(errors) && errors.some((field) => Array.isArray(field.path) && field.path.includes("discardChanges"));
+}
+/**
+* `standards skills update`: `discardChanges` confirms losing the workspace's
+* edits. The server's refusal names that API field; the person types a flag,
+* so the CLI names the command that does it (#6635).
+*/
+async function runSkillsUpdate(client, name, options = {}) {
+	try {
+		return await client.skillCatalog.update({
+			name,
+			discardChanges: options.discardChanges === true
+		});
+	} catch (error) {
+		if (!refusesWithoutDiscard(error)) throw error;
+		throw new Error(`\`${name}\` was changed in this workspace: run \`standards skills update ${name} --discard-changes\` to overwrite those edits`, { cause: error });
+	}
+}
+/** `standards skills refresh`: checks the caller's private catalogue skills. */
+async function runSkillsRefresh(client) {
+	return await client.skillCatalog.refresh({});
+}
 function collectName(value, names) {
 	return [...names, value];
 }
+/** Prints what a command answers; any failure prints once on stderr and exits 1. */
+async function printAnswer(cmd, answer) {
+	try {
+		formatOutput(await answer(), getFormat(cmd));
+	} catch (error) {
+		console.error(styleText("red", `✗ ${messageOf(error)}`));
+		process.exit(1);
+	}
+}
 /** Skills as Agent Skills folders: pull them to disk, push folders back. */
 function registerSkillsCommand(program) {
-	const skills = program.command("skills").description("Pull and push skills as Agent Skills folders (SKILL.md and its files)");
+	const skills = program.command("skills").description("Pull, push, find, add and update skills (Agent Skills folders: SKILL.md and its files)");
 	skills.command("pull").description("Write each skill as a folder <dir>/<name>/ (every skill you can open by default)").argument("[dir]", "directory to write the folders into", ".").option("--name <name>", "a skill to pull (repeat for several)", collectName, []).action(async (dir, opts, cmd) => {
-		try {
-			formatOutput({ written: await runSkillsPull(getAppClientFromCommand(cmd), dir, opts.name) }, getFormat(cmd));
-		} catch (error) {
-			console.error(styleText("red", `✗ ${messageOf(error)}`));
-			process.exit(1);
-		}
+		await printAnswer(cmd, async () => ({ written: await runSkillsPull(getAppClientFromCommand(cmd), dir, opts.name) }));
 	});
 	skills.command("push").description("Import skill folders: a folder holding SKILL.md, or a directory of such folders. All or nothing").argument("<dirs...>", "skill folders, or directories of skill folders").option("--replace", "rewrite the skill a name already reads instead of refusing it").action(async (dirs, opts, cmd) => {
 		const outcome = await runSkillsPush(getAppClientFromCommand(cmd), dirs, opts);
@@ -1302,6 +1399,21 @@ function registerSkillsCommand(program) {
 		for (const warning of outcome.result.warnings) console.warn(styleText("yellow", `! ${warning}`));
 		formatOutput(outcome.result, getFormat(cmd));
 	});
+	skills.command("search").description("Find skills to add: the official catalogue, or skills.sh with --community").argument("<query>", "what the skill should do").option("--community", "search skills.sh instead of the official catalogue").option("--limit <n>", "max results to return (up to 50)").action(async (query, opts, cmd) => {
+		await printAnswer(cmd, () => runSkillsSearch(getAppClientFromCommand(cmd), query, opts));
+	});
+	skills.command("preview").description("Show what a source would install, without installing it").argument("<source>", "owner/repo@skill or owner/repo@skill#ref").action(async (source, _opts, cmd) => {
+		await printAnswer(cmd, () => runSkillsPreview(getAppClientFromCommand(cmd), source));
+	});
+	skills.command("add").description("Install a skill from a GitHub repository: what its preview read lands, and an official skill then follows stable").argument("<source>", "owner/repo@skill or owner/repo@skill#ref").action(async (source, _opts, cmd) => {
+		await printAnswer(cmd, () => runSkillsAdd(getAppClientFromCommand(cmd), source));
+	});
+	skills.command("update").description("Bring an installed catalogue skill to the latest version of its source").argument("<name>", "name of the installed skill").option("--discard-changes", "overwrite the edits the workspace made to the skill").action(async (name, opts, cmd) => {
+		await printAnswer(cmd, () => runSkillsUpdate(getAppClientFromCommand(cmd), name, opts));
+	});
+	skills.command("refresh").description("Check your private catalogue skills against their sources").action(async (_opts, cmd) => {
+		await printAnswer(cmd, () => runSkillsRefresh(getAppClientFromCommand(cmd)));
+	});
 }
 //#endregion
 //#region src/version.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@standards/cli",
-  "version": "1.0.0-alpha.411",
+  "version": "1.0.0-alpha.412",
   "description": "CLI tool to interact with Standards API",
   "type": "module",
   "bin": {
@@ -26,9 +26,9 @@
     "cli-table3": "^0.6.5",
     "commander": "^13.1.0",
     "jiti": "2.7.0",
-    "@standards/client": "1.0.0-alpha.411",
-    "@standards/constants": "1.0.0-alpha.411",
-    "@standards/schema": "1.0.0-alpha.411"
+    "@standards/client": "1.0.0-alpha.412",
+    "@standards/constants": "1.0.0-alpha.412",
+    "@standards/schema": "1.0.0-alpha.412"
   },
   "devDependencies": {
     "@types/node": "^25.6.0",