@sulala/agent-os 0.1.23 → 0.1.25

package/dist/cli.js

@@ -8451,6 +8451,28 @@ var init_skill_tools = () => {};
 import { readFile as readFile5, readdir as readdir3, cp, mkdir as mkdir3, writeFile as writeFile3, rm } from "fs/promises";
 import { join as join5, resolve as resolve2, basename } from "path";
 import { tmpdir } from "os";
+async function readSkillMeta(skillDir, subEntries) {
+  if (!subEntries.includes(SULALA_META_FILE))
+    return null;
+  try {
+    const raw = await readFile5(join5(skillDir, SULALA_META_FILE), "utf-8");
+    const data = JSON.parse(raw);
+    return typeof data.version === "string" && data.version.trim() !== "" ? { version: data.version.trim() } : null;
+  } catch {
+    return null;
+  }
+}
+async function writeSkillMeta(skillId, meta) {
+  const skillDir = join5(getSkillsDir(), skillId);
+  const payload = {};
+  if (meta.version?.trim())
+    payload.version = meta.version.trim();
+  if (meta.source?.trim())
+    payload.source = meta.source.trim();
+  if (Object.keys(payload).length === 0)
+    return;
+  await writeFile3(join5(skillDir, SULALA_META_FILE), JSON.stringify(payload, null, 0), "utf-8");
+}
 async function loadSkill(name) {
   const dir = join5(getSkillsDir(), name);
   let entries;
@@ -8693,10 +8715,14 @@ async function listSkills() {
       continue;
     const skillName = doc.name ?? name;
     const requiredEnv = await getRequiredEnvForSkill(skillDir, subEntries, doc);
+    const docVersion = doc.version?.trim() || undefined;
+    const meta = await readSkillMeta(skillDir, subEntries);
+    const version = docVersion ?? meta?.version;
     results.push({
       id: name,
       name: skillName,
       description: doc.description,
+      version,
       tools: (doc.tools ?? []).map((t) => ({ id: t.id, description: t.description })),
       required_env: requiredEnv.length ? requiredEnv : undefined,
       system: SYSTEM_SKILL_IDS.has(name)
@@ -8766,7 +8792,7 @@ async function installSystemSkills() {
   }
   return { installed };
 }
-async function installSkillFromUrl(url, explicitId) {
+async function installSkillFromUrl(url, explicitId, meta) {
   const urlLower = url.toLowerCase();
   const isStoreSkillContentUrl = urlLower.includes("/api/sulalahub/skills/") && !urlLower.includes("/download") && !urlLower.endsWith(".zip");
   const headers = isStoreSkillContentUrl ? { Accept: "application/zip" } : {};
@@ -8781,31 +8807,35 @@ async function installSkillFromUrl(url, explicitId) {
   const tmpDir = join5(tmpdir(), `agent-os-skill-${Date.now()}`);
   await mkdir3(tmpDir, { recursive: true });
   try {
+    let destId;
     if (isZip) {
       const zipPath = join5(tmpDir, "archive.zip");
       await writeFile3(zipPath, new Uint8Array(buf));
-      const proc2 = Bun.spawn({ cmd: ["unzip", "-q", "-o", zipPath, "-d", tmpDir], stdout: "ignore", stderr: "pipe" });
-      const exit2 = await proc2.exited;
-      if (exit2 !== 0) {
-        const err = await new Response(proc2.stderr).text();
+      const proc = Bun.spawn({ cmd: ["unzip", "-q", "-o", zipPath, "-d", tmpDir], stdout: "ignore", stderr: "pipe" });
+      const exit = await proc.exited;
+      if (exit !== 0) {
+        const err = await new Response(proc.stderr).text();
         throw new Error(`unzip failed: ${err}`);
       }
-      const { id: id2, sourcePath: sourcePath2 } = await chooseSkillRootFromExtract(tmpDir, "archive.zip");
-      const destId2 = explicitId != null && explicitId.trim() !== "" ? slugToSkillId(explicitId) : id2;
-      await cp(sourcePath2, join5(skillsDir, destId2), { recursive: true });
-      return { id: destId2 };
-    }
-    const tarPath = join5(tmpDir, "archive.tar.gz");
-    await writeFile3(tarPath, new Uint8Array(buf));
-    const proc = Bun.spawn({ cmd: ["tar", "-xzf", tarPath, "-C", tmpDir], stdout: "ignore", stderr: "pipe" });
-    const exit = await proc.exited;
-    if (exit !== 0) {
-      const err = await new Response(proc.stderr).text();
-      throw new Error(`tar extract failed: ${err}`);
-    }
-    const { id, sourcePath } = await chooseSkillRootFromExtract(tmpDir, "archive.tar.gz");
-    const destId = explicitId != null && explicitId.trim() !== "" ? slugToSkillId(explicitId) : id;
-    await cp(sourcePath, join5(skillsDir, destId), { recursive: true });
+      const { id, sourcePath } = await chooseSkillRootFromExtract(tmpDir, "archive.zip");
+      destId = explicitId != null && explicitId.trim() !== "" ? slugToSkillId(explicitId) : id;
+      await cp(sourcePath, join5(skillsDir, destId), { recursive: true });
+    } else {
+      const tarPath = join5(tmpDir, "archive.tar.gz");
+      await writeFile3(tarPath, new Uint8Array(buf));
+      const proc = Bun.spawn({ cmd: ["tar", "-xzf", tarPath, "-C", tmpDir], stdout: "ignore", stderr: "pipe" });
+      const exit = await proc.exited;
+      if (exit !== 0) {
+        const err = await new Response(proc.stderr).text();
+        throw new Error(`tar extract failed: ${err}`);
+      }
+      const { id, sourcePath } = await chooseSkillRootFromExtract(tmpDir, "archive.tar.gz");
+      destId = explicitId != null && explicitId.trim() !== "" ? slugToSkillId(explicitId) : id;
+      await cp(sourcePath, join5(skillsDir, destId), { recursive: true });
+    }
+    if (meta?.version?.trim() || meta?.source?.trim()) {
+      await writeSkillMeta(destId, { version: meta.version, source: meta.source ?? (explicitId ? "hub" : undefined) });
+    }
     return { id: destId };
   } finally {
     await rm(tmpDir, { recursive: true, force: true });
@@ -8864,7 +8894,7 @@ async function installSkillFromSkillMd(buffer, filename, explicitId) {
   await writeFile3(join5(destDir, "SKILL.md"), text, "utf-8");
   return { id };
 }
-var SYSTEM_SKILL_IDS, DEFAULT_SYSTEM_SKILL_IDS;
+var SYSTEM_SKILL_IDS, DEFAULT_SYSTEM_SKILL_IDS, SULALA_META_FILE = ".sulala-meta.json";
 var init_loader = __esm(() => {
   init_config();
   init_tool_registry();
@@ -23180,8 +23210,8 @@ function formatLLMErrorForUser(err) {
 }
 function runAgentInner(options) {
   return (async () => {
-    const { task, agent, conversationHistory = [] } = options;
-    const maxTurns = agent.limits?.max_turns ?? 10;
+    const { task, agent, conversationHistory = [], maxTurnsOverride } = options;
+    const maxTurns = maxTurnsOverride ?? agent.limits?.max_turns ?? 10;
     const maxTokens = agent.limits?.max_tokens;
     await ensureWorkspace(agent.id);
     await loadSkillsForAgent(agent);
@@ -23415,8 +23445,8 @@ async function runAgent(options) {
   return runAgentInner(options);
 }
 async function runAgentStream(options, onEvent) {
-  const { task, agent, conversationHistory = [] } = options;
-  const maxTurns = agent.limits?.max_turns ?? 10;
+  const { task, agent, conversationHistory = [], maxTurnsOverride } = options;
+  const maxTurns = maxTurnsOverride ?? agent.limits?.max_turns ?? 10;
   const maxTokens = agent.limits?.max_tokens;
   await ensureWorkspace(agent.id);
   await loadSkillsForAgent(agent);
@@ -25375,44 +25405,87 @@ var require_node_cron = __commonJS((exports) => {
 });
 
 // src/core/graphs.ts
-import { readFile as readFile7, readdir as readdir4, writeFile as writeFile4, mkdir as mkdir5 } from "fs/promises";
+import { readFile as readFile7, readdir as readdir4, writeFile as writeFile4, mkdir as mkdir5, copyFile, unlink as unlink2 } from "fs/promises";
 import { join as join9 } from "path";
+import { existsSync as existsSync3 } from "fs";
 function getGraphsDir() {
   return process.env.AGENT_OS_GRAPHS_DIR || DEFAULT_GRAPHS_DIR;
 }
+function getSeedGraphsDir() {
+  if (process.env.AGENT_OS_SEED_GRAPHS_DIR)
+    return process.env.AGENT_OS_SEED_GRAPHS_DIR;
+  const fromDist = join9(import.meta.dir, "..", "data", "graphs");
+  const fromSrc = join9(import.meta.dir, "..", "..", "data", "graphs");
+  if (existsSync3(fromDist))
+    return fromDist;
+  if (existsSync3(fromSrc))
+    return fromSrc;
+  return join9(process.cwd(), "data", "graphs");
+}
 async function listGraphs() {
   const dir = getGraphsDir();
+  let entries;
   try {
-    const entries = await readdir4(dir);
-    const summaries = [];
-    for (const name of entries) {
-      if (name.endsWith(".json")) {
-        const id = name.replace(/\.graph\.json$/, "").replace(/\.json$/, "");
-        if (id)
-          summaries.push({ id });
+    entries = await readdir4(dir);
+  } catch (err) {
+    if (err.code !== "ENOENT")
+      throw err;
+    entries = [];
+  }
+  if (entries.length === 0) {
+    const seedDir = getSeedGraphsDir();
+    try {
+      const seedEntries = await readdir4(seedDir);
+      await mkdir5(dir, { recursive: true });
+      for (const name of seedEntries) {
+        if (name.endsWith(".json")) {
+          await copyFile(join9(seedDir, name), join9(dir, name));
+        }
       }
+      entries = await readdir4(dir);
+    } catch {}
+  }
+  const summaries = [];
+  for (const name of entries) {
+    if (name.endsWith(".json")) {
+      const id = name.replace(/\.graph\.json$/, "").replace(/\.json$/, "");
+      if (id)
+        summaries.push({ id });
     }
-    return summaries;
-  } catch (err) {
-    if (err.code === "ENOENT")
-      return [];
-    throw err;
   }
+  return summaries;
 }
 async function loadGraph(id) {
   const dir = getGraphsDir();
   try {
-    const entries = await readdir4(dir);
+    let entries;
+    try {
+      entries = await readdir4(dir);
+    } catch (e) {
+      if (e.code !== "ENOENT")
+        throw e;
+      entries = [];
+    }
     const file = entries.find((name) => name === `${id}.json` || name === `${id}.graph.json`);
-    if (!file)
+    if (file) {
+      const raw = await readFile7(join9(dir, file), "utf-8");
+      const parsed = JSON.parse(raw);
+      validateGraph(parsed);
+      return parsed;
+    }
+    const seedDir = getSeedGraphsDir();
+    const seedFile = `${id}.json`;
+    try {
+      const raw = await readFile7(join9(seedDir, seedFile), "utf-8");
+      const parsed = JSON.parse(raw);
+      validateGraph(parsed);
+      await mkdir5(dir, { recursive: true });
+      await writeFile4(join9(dir, seedFile), raw, "utf-8");
+      return parsed;
+    } catch {
       return null;
-    const raw = await readFile7(join9(dir, file), "utf-8");
-    const parsed = JSON.parse(raw);
-    validateGraph(parsed);
-    return parsed;
+    }
   } catch (err) {
-    if (err.code === "ENOENT")
-      return null;
     console.error("[graphs] Failed to load graph:", err);
     return null;
   }
@@ -25424,6 +25497,22 @@ async function saveGraph(graph) {
   const path = join9(dir, `${graph.id}.json`);
   await writeFile4(path, JSON.stringify(graph, null, 2), "utf-8");
 }
+async function deleteGraph(id) {
+  if (!id || typeof id !== "string")
+    throw new Error("Graph id required");
+  const dir = getGraphsDir();
+  let entries;
+  try {
+    entries = await readdir4(dir);
+  } catch (err) {
+    if (err.code !== "ENOENT")
+      throw err;
+    return;
+  }
+  const file = entries.find((name) => name === `${id}.json` || name === `${id}.graph.json`);
+  if (file)
+    await unlink2(join9(dir, file));
+}
 function validateGraph(graph) {
   if (!graph || typeof graph !== "object") {
     throw new Error("Graph must be an object");
@@ -25490,7 +25579,7 @@ function getPredecessors(graph) {
   return pred;
 }
 async function runGraph(options) {
-  const { graph, input } = options;
+  const { graph, input, max_turns_per_node = DEFAULT_GRAPH_MAX_TURNS_PER_NODE } = options;
   const levels = topologicalLevels(graph);
   const predecessors = getPredecessors(graph);
   const outputs = new Map;
@@ -25515,7 +25604,11 @@ async function runGraph(options) {
       const taskInput = preds.length === 0 ? input : preds.map((p) => outputs.get(p) ?? "").filter(Boolean).join(`
 
 `) || input;
-      const result = await runAgent({ agent, task: taskInput });
+      const result = await runAgent({
+        agent,
+        task: taskInput,
+        maxTurnsOverride: max_turns_per_node
+      });
       outputs.set(node.id, result.output || "");
       return {
         node_id: node.id,
@@ -25538,7 +25631,7 @@ async function runGraph(options) {
   };
 }
 async function runGraphStream(options, onEvent) {
-  const { graph, input } = options;
+  const { graph, input, max_turns_per_node = DEFAULT_GRAPH_MAX_TURNS_PER_NODE } = options;
   const levels = topologicalLevels(graph);
   const predecessors = getPredecessors(graph);
   const outputs = new Map;
@@ -25564,7 +25657,11 @@ async function runGraphStream(options, onEvent) {
         const taskInput = preds.length === 0 ? input : preds.map((p) => outputs.get(p) ?? "").filter(Boolean).join(`
 
 `) || input;
-        const result = await runAgent({ agent, task: taskInput });
+        const result = await runAgent({
+          agent,
+          task: taskInput,
+          maxTurnsOverride: max_turns_per_node
+        });
         outputs.set(node.id, result.output || "");
         const payload = {
           node_id: node.id,
@@ -25592,7 +25689,7 @@ async function runGraphStream(options, onEvent) {
     throw err;
   }
 }
-var DEFAULT_GRAPHS_DIR;
+var DEFAULT_GRAPHS_DIR, DEFAULT_GRAPH_MAX_TURNS_PER_NODE = 5;
 var init_graphs = __esm(() => {
   init_agent_registry();
   init_runtime();
@@ -26028,8 +26125,10 @@ async function handleSkillInstall(req) {
     return jsonResponse({ error: "Provide path or url" }, 400);
   }
   const slug = typeof body.slug === "string" && body.slug.trim() !== "" ? body.slug.trim() : undefined;
+  const version2 = typeof body.version === "string" && body.version.trim() !== "" ? body.version.trim() : undefined;
+  const meta = version2 || slug ? { version: version2, source: slug ? "hub" : undefined } : undefined;
   try {
-    const result = hasPath ? await installSkillFromPath(body.path.trim()) : await installSkillFromUrl(body.url.trim(), slug);
+    const result = hasPath ? await installSkillFromPath(body.path.trim()) : await installSkillFromUrl(body.url.trim(), slug, meta);
     return jsonResponse({ skill: result }, 201);
   } catch (err) {
     const msg = errorMessage(err);
@@ -29609,7 +29708,7 @@ __export(exports_server, {
   startServer: () => startServer
 });
 import { join as join13, dirname as dirname2, resolve as resolve4 } from "path";
-import { mkdirSync, existsSync as existsSync3 } from "fs";
+import { mkdirSync, existsSync as existsSync4 } from "fs";
 import { mkdir as mkdir7 } from "fs/promises";
 function isAuthExempt(pathname, method) {
   if (method === "OPTIONS")
@@ -29683,7 +29782,7 @@ function broadcastEvent(event) {
   }
 }
 function serveDashboard(pathname) {
-  if (!existsSync3(DASHBOARD_DIST) || !existsSync3(join13(DASHBOARD_DIST, "index.html"))) {
+  if (!existsSync4(DASHBOARD_DIST) || !existsSync4(join13(DASHBOARD_DIST, "index.html"))) {
     return null;
   }
   const decoded = decodeURIComponent(pathname);
@@ -29692,7 +29791,7 @@ function serveDashboard(pathname) {
   }
   const subpath = decoded === "/" ? "index.html" : decoded.slice(1);
   const filePath = join13(DASHBOARD_DIST, subpath);
-  if (existsSync3(filePath)) {
+  if (existsSync4(filePath)) {
     const file = Bun.file(filePath);
     const ext = subpath.split(".").pop() ?? "";
     const mime = {
@@ -29713,7 +29812,7 @@ function serveDashboard(pathname) {
     });
   }
   const indexPath = join13(DASHBOARD_DIST, "index.html");
-  if (existsSync3(indexPath)) {
+  if (existsSync4(indexPath)) {
     return new Response(Bun.file(indexPath), {
       headers: { "Content-Type": "text/html" }
     });
@@ -29930,6 +30029,16 @@ function createRoutes() {
           const msg = e instanceof Error ? e.message : String(e);
           return jsonResponse({ error: msg }, 400);
         }
+      },
+      DELETE: async (req) => {
+        const id = decodeURIComponent(req.params.id);
+        try {
+          await deleteGraph(id);
+          return Response.json({ ok: true }, { headers: CORS_HEADERS });
+        } catch (e) {
+          const msg = e instanceof Error ? e.message : String(e);
+          return jsonResponse({ error: msg }, 400);
+        }
       }
     },
     "/api/memory/write": {
@@ -30150,7 +30259,7 @@ async function startServer() {
   await loadPlugins();
   await seedAgentsIfEmpty();
   const dashboardSecret = await getDashboardSecret();
-  const dashboardMissing = !existsSync3(DASHBOARD_DIST) || !existsSync3(join13(DASHBOARD_DIST, "index.html"));
+  const dashboardMissing = !existsSync4(DASHBOARD_DIST) || !existsSync4(join13(DASHBOARD_DIST, "index.html"));
   if (dashboardMissing) {
     console.warn(`[sulala] Dashboard not found at ${DASHBOARD_DIST}. From package root run: cd dashboard && npm run build. If using a global install, reinstall: bun install -g @sulala/agent-os@latest`);
   }
@@ -30239,7 +30348,7 @@ var init_server = __esm(() => {
     const root = join13(import.meta.dir, "..");
     const a = resolve4(join13(root, "dashboard-dist"));
     const b = resolve4(join13(root, "dashboard", "dist"));
-    if (existsSync3(a) && existsSync3(join13(a, "index.html")))
+    if (existsSync4(a) && existsSync4(join13(a, "index.html")))
       return a;
     return b;
   })();
@@ -30272,8 +30381,8 @@ init_loader();
 init_agent_registry();
 init_runtime();
 import { join as join14, dirname as dirname3 } from "path";
-import { readFile as readFile10, writeFile as writeFile6, mkdir as mkdir8, unlink as unlink2 } from "fs/promises";
-import { existsSync as existsSync4, readFileSync } from "fs";
+import { readFile as readFile10, writeFile as writeFile6, mkdir as mkdir8, unlink as unlink3 } from "fs/promises";
+import { existsSync as existsSync5, readFileSync } from "fs";
 var PID_FILE = join14(getAgentOsHome(), "sulala.pid");
 var DEFAULT_PORT = 3010;
 function openDashboard() {
@@ -30312,6 +30421,7 @@ Commands:
   onboard              First-time setup: create config, seed agents & skills, open dashboard
   update               Update package from npm and system agents/skills
   run <agent_id> <task>  Run an agent with a one-off task
+  skill install <slug> Install a skill from the store by slug (e.g. crm-hubspot)
   dashboard-token [--regenerate]  Show or regenerate dashboard login token (copy to log in)
 
 Examples:
@@ -30322,6 +30432,7 @@ Examples:
   sulala onboard
   sulala update
   sulala run echo_agent What is 2+2?
+  sulala skill install crm-hubspot
   sulala dashboard-token
   sulala dashboard-token --regenerate
 `);
@@ -30336,7 +30447,7 @@ async function cmdStart(args) {
     await mkdir8(getAgentOsHome(), { recursive: true });
     const projectRoot = join14(import.meta.dir, "..");
     const distEntry = join14(projectRoot, "dist", "index.js");
-    const serverEntry = existsSync4(distEntry) ? "dist/index.js" : "src/index.ts";
+    const serverEntry = existsSync5(distEntry) ? "dist/index.js" : "src/index.ts";
     const child = Bun.spawn(["bun", "run", serverEntry], {
       cwd: projectRoot,
       stdout: "ignore",
@@ -30353,7 +30464,7 @@ async function cmdStart(args) {
   await startServer2();
 }
 async function cmdStop() {
-  if (!existsSync4(PID_FILE)) {
+  if (!existsSync5(PID_FILE)) {
     console.error("No PID file found. Is the server running with 'sulala start --daemon'?");
     process.exit(1);
   }
@@ -30374,11 +30485,11 @@ async function cmdStop() {
       process.exit(1);
     }
   }
-  await unlink2(PID_FILE).catch(() => {});
+  await unlink3(PID_FILE).catch(() => {});
   console.log("Sulala server stopped.");
 }
 async function startServerDaemonIfNeeded() {
-  if (existsSync4(PID_FILE)) {
+  if (existsSync5(PID_FILE)) {
     try {
       const pidStr = await readFile10(PID_FILE, "utf-8");
       const pid = parseInt(pidStr.trim(), 10);
@@ -30391,7 +30502,7 @@ async function startServerDaemonIfNeeded() {
   await mkdir8(getAgentOsHome(), { recursive: true });
   const projectRoot = join14(import.meta.dir, "..");
   const distEntry = join14(projectRoot, "dist", "index.js");
-  const serverEntry = existsSync4(distEntry) ? "dist/index.js" : "src/index.ts";
+  const serverEntry = existsSync5(distEntry) ? "dist/index.js" : "src/index.ts";
   const child = Bun.spawn(["bun", "run", serverEntry], {
     cwd: projectRoot,
     stdout: "ignore",
@@ -30408,7 +30519,7 @@ async function cmdOnboard() {
   await mkdir8(home, { recursive: true });
   await mkdir8(dirname3(getMemoryDbPath()), { recursive: true });
   const configPath = join14(home, "config.json");
-  if (!existsSync4(configPath)) {
+  if (!existsSync5(configPath)) {
     const dashboardSecret = generateDashboardSecret();
     await writeFile6(configPath, JSON.stringify({
       provider: null,
@@ -30471,7 +30582,7 @@ async function cmdUpdate() {
     console.warn("Could not update package from npm (run 'bun install -g @sulala/agent-os@latest' manually):", err.trim() || out.trim());
   }
   const dbPath = getMemoryDbPath();
-  if (!existsSync4(dbPath)) {
+  if (!existsSync5(dbPath)) {
     console.log("No database found. Run 'sulala onboard' to set up agents and skills.");
     return;
   }
@@ -30511,7 +30622,7 @@ async function cmdRun(args) {
     process.exit(1);
   }
   const dbPath = getMemoryDbPath();
-  if (existsSync4(dbPath)) {
+  if (existsSync5(dbPath)) {
     setAgentStore(new MemoryStore(dbPath));
   }
   const agent = await getAgent(agentId);
@@ -30528,6 +30639,57 @@ async function cmdRun(args) {
     process.exit(1);
   }
 }
+async function cmdSkill(args) {
+  const sub = args[0]?.toLowerCase();
+  const rest = args.slice(1);
+  if (sub === "install") {
+    await cmdSkillInstall(rest);
+    return;
+  }
+  if (!sub || sub === "help" || sub === "-h" || sub === "--help") {
+    console.log("Usage: sulala skill install <slug>");
+    console.log("  Install a skill from the store by slug (e.g. crm-hubspot).");
+    console.log("  Installs the latest version; you can pin a specific version in your skill config if needed.");
+    console.log("");
+    console.log("Example: sulala skill install crm-hubspot");
+    return;
+  }
+  console.error(`Unknown subcommand: skill ${sub}`);
+  console.error("Usage: sulala skill install <slug>");
+  process.exit(1);
+}
+async function cmdSkillInstall(args) {
+  const slug = args[0]?.trim();
+  if (!slug) {
+    console.error("Usage: sulala skill install <slug>");
+    console.error("Example: sulala skill install crm-hubspot");
+    process.exit(1);
+  }
+  const { skills, storeBase } = await getStoreRegistry();
+  if (!storeBase) {
+    console.error("Could not reach the skills store. Check config (skills_registry_url) or run 'sulala onboard' first.");
+    process.exit(1);
+  }
+  const entry = skills.find((s) => s.slug === slug);
+  if (!entry) {
+    console.error(`Skill '${slug}' not found in the store. Check the slug at hub.sulala.ai or install from the dashboard (Skills page).`);
+    process.exit(1);
+  }
+  const downloadUrl = entry.downloadUrl ?? `${storeBase}/api/sulalahub/skills/${encodeURIComponent(slug)}/download`;
+  const version2 = entry.version;
+  try {
+    const { id } = await installSkillFromUrl(downloadUrl, slug, {
+      version: version2 ?? undefined,
+      source: "hub"
+    });
+    const verStr = version2 ? ` (v${version2})` : "";
+    console.log(`Installed ${id}${verStr}. Add it to your agent in the dashboard (Edit agent \u2192 Skills).`);
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    console.error("Install failed:", msg);
+    process.exit(1);
+  }
+}
 async function main() {
   if (!process.versions.bun) {
     console.error("Sulala CLI requires Bun. Use: bun run src/cli.ts");
@@ -30557,6 +30719,9 @@ async function main() {
     case "run":
       await cmdRun(rest);
       break;
+    case "skill":
+      await cmdSkill(rest);
+      break;
     case "dashboard-token":
       await cmdDashboardToken(rest);
       break;