@tanstack/ai-sandbox 0.5.2 → 0.5.3

package/README.md

@@ -52,6 +52,7 @@ Pick a **provider** package for where the sandbox runs:
 | `@tanstack/ai-sandbox-cloudflare`    | Cloudflare Workers + Containers        |
 | `@tanstack/ai-sandbox-vercel`        | Vercel Sandbox                         |
 | `@tanstack/ai-sandbox-daytona`       | Daytona cloud sandboxes, snapshots     |
+| `@tanstack/ai-sandbox-upstash-box`   | Upstash Box cloud sandboxes, snapshots |
 | `@tanstack/ai-sandbox-sprites`       | Sprites stateful sandboxes             |
 
 **Harness adapters** are separate packages. The default path is **Grok Build** (`@tanstack/ai-grok-build`); others include `@tanstack/ai-claude-code`, `@tanstack/ai-codex`, and `@tanstack/ai-opencode`. All require `withSandbox(...)` middleware — `chat()` fails fast without it.

package/dist/esm/agents-file.d.ts

@@ -31,6 +31,12 @@ export interface DiscoveredSkillDir {
  * A flat clone with `SKILL.md` at the root is returned as one entry named
  * after the clone. If no `SKILL.md` is found, the clone itself is returned
  * so existing basename projection still works.
+ *
+ * The tree walk itself is the shared `walkSkillDirs` from `@tanstack/ai-skills`
+ * (parameterized over an injected lister — here `handle.fs.list`). The
+ * empty→clone-dir fallback is kept here because it is correct for harness
+ * projection but wrong for a skills catalog, so it must not live in the shared
+ * helper.
  */
 export declare function discoverSkillDirs(handle: SandboxHandle, cloneDir: string): Promise<Array<DiscoveredSkillDir>>;
 /** Format workspace scripts as a `## Workspace scripts` markdown section. */

package/dist/esm/agents-file.js

@@ -1,4 +1,18 @@
+import { walkSkillDirs } from "@tanstack/ai-skills";
 //#region src/agents-file.ts
+/**
+* Universal AGENTS.md writer with per-CLI symlink projection, plus the
+* canonical helper for locating cloned gitSkill repositories inside a sandbox.
+*
+* The known-names set below lists the canonical instruction-file names for
+* each AI coding assistant CLI. Keep the list in one place so it is easy to
+* extend. The copy fallback ensures correctness on platforms without symlink
+* support (e.g. Windows).
+*
+* External per-CLI convention: each assistant looks for its own instruction
+* file by name (CLAUDE.md for Claude Code, GEMINI.md for Gemini CLI, …).
+* We write a single authoritative AGENTS.md and point each name at it.
+*/
 /** CLI instruction-file names that should resolve to AGENTS.md. */
 var SYMLINK_NAMES = ["CLAUDE.md", "GEMINI.md"];
 /**
@@ -20,9 +34,6 @@ function resolveGitSkillDir(root, skill) {
 	const rawBasename = skill.repo.split("/").pop() ?? skill.repo;
 	return `${root}/.tanstack-skills/${rawBasename.endsWith(".git") ? rawBasename.slice(0, -4) : rawBasename}`;
 }
-var SKILL_FILE = "SKILL.md";
-var SKIP_DIR_NAMES = /* @__PURE__ */ new Set([".git", "node_modules"]);
-var MAX_SKILL_WALK_DEPTH = 6;
 function basenameOf(path) {
 	const segments = path.split("/").filter((segment) => segment !== "");
 	return segments[segments.length - 1] ?? path;
@@ -35,37 +46,21 @@ function basenameOf(path) {
 * A flat clone with `SKILL.md` at the root is returned as one entry named
 * after the clone. If no `SKILL.md` is found, the clone itself is returned
 * so existing basename projection still works.
+*
+* The tree walk itself is the shared `walkSkillDirs` from `@tanstack/ai-skills`
+* (parameterized over an injected lister — here `handle.fs.list`). The
+* empty→clone-dir fallback is kept here because it is correct for harness
+* projection but wrong for a skills catalog, so it must not live in the shared
+* helper.
 */
 async function discoverSkillDirs(handle, cloneDir) {
-	const found = [];
-	await walkSkillDirs(handle, cloneDir, found, 0);
+	const found = await walkSkillDirs((dir) => handle.fs.list(dir), cloneDir);
 	if (found.length === 0) return [{
 		name: basenameOf(cloneDir),
 		dir: cloneDir
 	}];
 	return found;
 }
-async function walkSkillDirs(handle, dir, found, depth) {
-	if (depth > MAX_SKILL_WALK_DEPTH) return;
-	let entries;
-	try {
-		entries = await handle.fs.list(dir);
-	} catch {
-		return;
-	}
-	if (entries.some((entry) => entry.type === "file" && entry.name.toLowerCase() === SKILL_FILE.toLowerCase())) {
-		found.push({
-			name: basenameOf(dir),
-			dir
-		});
-		return;
-	}
-	for (const entry of entries) {
-		if (entry.type !== "dir") continue;
-		if (entry.name.startsWith(".") || SKIP_DIR_NAMES.has(entry.name)) continue;
-		await walkSkillDirs(handle, entry.path, found, depth + 1);
-	}
-}
 /** Format workspace scripts as a `## Workspace scripts` markdown section. */
 function formatWorkspaceScriptsSection(scripts) {
 	const names = Object.keys(scripts).sort();

package/dist/esm/agents-file.js.map

@@ -1 +1 @@
-{"version":3,"file":"agents-file.js","names":[],"sources":["../../src/agents-file.ts"],"sourcesContent":["/**\n * Universal AGENTS.md writer with per-CLI symlink projection, plus the\n * canonical helper for locating cloned gitSkill repositories inside a sandbox.\n *\n * The known-names set below lists the canonical instruction-file names for\n * each AI coding assistant CLI. Keep the list in one place so it is easy to\n * extend. The copy fallback ensures correctness on platforms without symlink\n * support (e.g. Windows).\n *\n * External per-CLI convention: each assistant looks for its own instruction\n * file by name (CLAUDE.md for Claude Code, GEMINI.md for Gemini CLI, …).\n * We write a single authoritative AGENTS.md and point each name at it.\n */\nimport type { SandboxHandle } from './contracts'\nimport type { WorkspaceSkill } from './workspace'\n\n/** CLI instruction-file names that should resolve to AGENTS.md. */\nconst SYMLINK_NAMES: ReadonlyArray<string> = ['CLAUDE.md', 'GEMINI.md']\n\n/**\n * Resolve the directory a `gitSkill` repo is cloned into when no explicit\n * `into` override is provided. The convention is:\n *\n *   `<root>/.tanstack-skills/<basename>`\n *\n * where `basename` is derived from the `repo` field by taking the last\n * path segment and stripping a trailing `.git` suffix.\n *\n * Per-harness projectors (e.g. the Claude Code adapter) import this helper\n * so they can locate cloned skill repos consistently.\n *\n * @param root  - Workspace root inside the sandbox (e.g. `/workspace`).\n * @param skill - A `WorkspaceSkill` of `kind === 'git'`.\n */\nexport function resolveGitSkillDir(\n  root: string,\n  skill: Extract<WorkspaceSkill, { kind: 'git' }>,\n): string {\n  const rawBasename = skill.repo.split('/').pop() ?? skill.repo\n  const basename = rawBasename.endsWith('.git')\n    ? rawBasename.slice(0, -4)\n    : rawBasename\n  return `${root}/.tanstack-skills/${basename}`\n}\n\n/** A folder that contains `SKILL.md`, ready to project under a harness skills dir. */\nexport interface DiscoveredSkillDir {\n  name: string\n  dir: string\n}\n\nconst SKILL_FILE = 'SKILL.md'\nconst SKIP_DIR_NAMES = new Set(['.git', 'node_modules'])\nconst MAX_SKILL_WALK_DEPTH = 6\n\nfunction basenameOf(path: string): string {\n  const segments = path.split('/').filter((segment) => segment !== '')\n  return segments[segments.length - 1] ?? path\n}\n\n/**\n * Find every skill folder under a cloned `gitSkill` repo.\n *\n * A skill folder is a directory that contains `SKILL.md`. Nested packs\n * (`skills/foo/SKILL.md`) are returned as `{ name: 'foo', dir: '…/skills/foo' }`.\n * A flat clone with `SKILL.md` at the root is returned as one entry named\n * after the clone. If no `SKILL.md` is found, the clone itself is returned\n * so existing basename projection still works.\n */\nexport async function discoverSkillDirs(\n  handle: SandboxHandle,\n  cloneDir: string,\n): Promise<Array<DiscoveredSkillDir>> {\n  const found: Array<DiscoveredSkillDir> = []\n  await walkSkillDirs(handle, cloneDir, found, 0)\n  if (found.length === 0) {\n    return [{ name: basenameOf(cloneDir), dir: cloneDir }]\n  }\n  return found\n}\n\nasync function walkSkillDirs(\n  handle: SandboxHandle,\n  dir: string,\n  found: Array<DiscoveredSkillDir>,\n  depth: number,\n): Promise<void> {\n  if (depth > MAX_SKILL_WALK_DEPTH) return\n  let entries: Awaited<ReturnType<SandboxHandle['fs']['list']>>\n  try {\n    entries = await handle.fs.list(dir)\n  } catch {\n    return\n  }\n  const hasSkill = entries.some(\n    (entry) =>\n      entry.type === 'file' &&\n      entry.name.toLowerCase() === SKILL_FILE.toLowerCase(),\n  )\n  if (hasSkill) {\n    found.push({ name: basenameOf(dir), dir })\n    return\n  }\n  for (const entry of entries) {\n    if (entry.type !== 'dir') continue\n    if (entry.name.startsWith('.') || SKIP_DIR_NAMES.has(entry.name)) continue\n    await walkSkillDirs(handle, entry.path, found, depth + 1)\n  }\n}\n\n/** Format workspace scripts as a `## Workspace scripts` markdown section. */\nexport function formatWorkspaceScriptsSection(\n  scripts: Record<string, string>,\n): string {\n  const names = Object.keys(scripts).sort()\n  if (names.length === 0) return ''\n  const lines = names.map((name) => `- ${name} → ${scripts[name]}`)\n  return `## Workspace scripts\\n\\n${lines.join('\\n')}`\n}\n\n/**\n * Merge base AGENTS.md content with an optional workspace scripts section.\n * Returns `undefined` when there is nothing to write.\n */\nexport function mergeAgentsContent(\n  base: string | undefined,\n  scripts: Record<string, string> | undefined,\n): string | undefined {\n  const scriptsSection =\n    scripts !== undefined ? formatWorkspaceScriptsSection(scripts) : ''\n  if (base === undefined && scriptsSection.length === 0) return undefined\n  if (base === undefined) return scriptsSection\n  if (scriptsSection.length === 0) return base\n  return `${base.trimEnd()}\\n\\n${scriptsSection}`\n}\n\n/** Escape a string for safe use as a single-quoted shell argument. */\nfunction sqEscape(value: string): string {\n  return value.replace(/'/g, `'\\\\''`)\n}\n\n/**\n * Write `AGENTS.md` under `root` and create per-CLI symlinks (or copies as a\n * fallback when `ln -s` is unavailable).\n *\n * @param handle - The sandbox handle providing `fs` and `process`.\n * @param root   - Absolute path inside the sandbox under which to write.\n * @param content - Markdown content for the instruction file.\n */\nexport async function writeAgentsFile(\n  handle: SandboxHandle,\n  root: string,\n  content: string,\n): Promise<void> {\n  const agentsPath = `${root}/AGENTS.md`\n  await handle.fs.write(agentsPath, content)\n\n  for (const name of SYMLINK_NAMES) {\n    const lnCmd = `ln -s '${sqEscape('AGENTS.md')}' '${sqEscape(name)}'`\n    const result = await handle.process.exec(lnCmd, { cwd: root })\n    if (result.exitCode !== 0) {\n      // Symlinks are not supported on this platform — fall back to a copy.\n      await handle.fs.write(`${root}/${name}`, content)\n    }\n  }\n}\n"],"mappings":";;AAiBA,IAAM,gBAAuC,CAAC,aAAa,WAAW;;;;;;;;;;;;;;;;AAiBtE,SAAgB,mBACd,MACA,OACQ;CACR,MAAM,cAAc,MAAM,KAAK,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK,MAAM;CAIzD,OAAO,GAAG,KAAK,oBAHE,YAAY,SAAS,MAAM,IACxC,YAAY,MAAM,GAAG,EAAE,IACvB;AAEN;AAQA,IAAM,aAAa;AACnB,IAAM,iCAAiB,IAAI,IAAI,CAAC,QAAQ,cAAc,CAAC;AACvD,IAAM,uBAAuB;AAE7B,SAAS,WAAW,MAAsB;CACxC,MAAM,WAAW,KAAK,MAAM,GAAG,CAAC,CAAC,QAAQ,YAAY,YAAY,EAAE;CACnE,OAAO,SAAS,SAAS,SAAS,MAAM;AAC1C;;;;;;;;;;AAWA,eAAsB,kBACpB,QACA,UACoC;CACpC,MAAM,QAAmC,CAAC;CAC1C,MAAM,cAAc,QAAQ,UAAU,OAAO,CAAC;CAC9C,IAAI,MAAM,WAAW,GACnB,OAAO,CAAC;EAAE,MAAM,WAAW,QAAQ;EAAG,KAAK;CAAS,CAAC;CAEvD,OAAO;AACT;AAEA,eAAe,cACb,QACA,KACA,OACA,OACe;CACf,IAAI,QAAQ,sBAAsB;CAClC,IAAI;CACJ,IAAI;EACF,UAAU,MAAM,OAAO,GAAG,KAAK,GAAG;CACpC,QAAQ;EACN;CACF;CAMA,IALiB,QAAQ,MACtB,UACC,MAAM,SAAS,UACf,MAAM,KAAK,YAAY,MAAM,WAAW,YAAY,CAEpD,GAAU;EACZ,MAAM,KAAK;GAAE,MAAM,WAAW,GAAG;GAAG;EAAI,CAAC;EACzC;CACF;CACA,KAAK,MAAM,SAAS,SAAS;EAC3B,IAAI,MAAM,SAAS,OAAO;EAC1B,IAAI,MAAM,KAAK,WAAW,GAAG,KAAK,eAAe,IAAI,MAAM,IAAI,GAAG;EAClE,MAAM,cAAc,QAAQ,MAAM,MAAM,OAAO,QAAQ,CAAC;CAC1D;AACF;;AAGA,SAAgB,8BACd,SACQ;CACR,MAAM,QAAQ,OAAO,KAAK,OAAO,CAAC,CAAC,KAAK;CACxC,IAAI,MAAM,WAAW,GAAG,OAAO;CAE/B,OAAO,2BADO,MAAM,KAAK,SAAS,KAAK,KAAK,KAAK,QAAQ,OACvB,CAAA,CAAM,KAAK,IAAI;AACnD;;;;;AAMA,SAAgB,mBACd,MACA,SACoB;CACpB,MAAM,iBACJ,YAAY,KAAA,IAAY,8BAA8B,OAAO,IAAI;CACnE,IAAI,SAAS,KAAA,KAAa,eAAe,WAAW,GAAG,OAAO,KAAA;CAC9D,IAAI,SAAS,KAAA,GAAW,OAAO;CAC/B,IAAI,eAAe,WAAW,GAAG,OAAO;CACxC,OAAO,GAAG,KAAK,QAAQ,EAAE,MAAM;AACjC;;AAGA,SAAS,SAAS,OAAuB;CACvC,OAAO,MAAM,QAAQ,MAAM,OAAO;AACpC;;;;;;;;;AAUA,eAAsB,gBACpB,QACA,MACA,SACe;CACf,MAAM,aAAa,GAAG,KAAK;CAC3B,MAAM,OAAO,GAAG,MAAM,YAAY,OAAO;CAEzC,KAAK,MAAM,QAAQ,eAAe;EAChC,MAAM,QAAQ,UAAU,SAAS,WAAW,EAAE,KAAK,SAAS,IAAI,EAAE;EAElE,KAAI,MADiB,OAAO,QAAQ,KAAK,OAAO,EAAE,KAAK,KAAK,CAAC,EAAA,CAClD,aAAa,GAEtB,MAAM,OAAO,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,OAAO;CAEpD;AACF"}
+{"version":3,"file":"agents-file.js","names":[],"sources":["../../src/agents-file.ts"],"sourcesContent":["/**\n * Universal AGENTS.md writer with per-CLI symlink projection, plus the\n * canonical helper for locating cloned gitSkill repositories inside a sandbox.\n *\n * The known-names set below lists the canonical instruction-file names for\n * each AI coding assistant CLI. Keep the list in one place so it is easy to\n * extend. The copy fallback ensures correctness on platforms without symlink\n * support (e.g. Windows).\n *\n * External per-CLI convention: each assistant looks for its own instruction\n * file by name (CLAUDE.md for Claude Code, GEMINI.md for Gemini CLI, …).\n * We write a single authoritative AGENTS.md and point each name at it.\n */\nimport { walkSkillDirs } from '@tanstack/ai-skills'\nimport type { SandboxHandle } from './contracts'\nimport type { WorkspaceSkill } from './workspace'\n\n/** CLI instruction-file names that should resolve to AGENTS.md. */\nconst SYMLINK_NAMES: ReadonlyArray<string> = ['CLAUDE.md', 'GEMINI.md']\n\n/**\n * Resolve the directory a `gitSkill` repo is cloned into when no explicit\n * `into` override is provided. The convention is:\n *\n *   `<root>/.tanstack-skills/<basename>`\n *\n * where `basename` is derived from the `repo` field by taking the last\n * path segment and stripping a trailing `.git` suffix.\n *\n * Per-harness projectors (e.g. the Claude Code adapter) import this helper\n * so they can locate cloned skill repos consistently.\n *\n * @param root  - Workspace root inside the sandbox (e.g. `/workspace`).\n * @param skill - A `WorkspaceSkill` of `kind === 'git'`.\n */\nexport function resolveGitSkillDir(\n  root: string,\n  skill: Extract<WorkspaceSkill, { kind: 'git' }>,\n): string {\n  const rawBasename = skill.repo.split('/').pop() ?? skill.repo\n  const basename = rawBasename.endsWith('.git')\n    ? rawBasename.slice(0, -4)\n    : rawBasename\n  return `${root}/.tanstack-skills/${basename}`\n}\n\n/** A folder that contains `SKILL.md`, ready to project under a harness skills dir. */\nexport interface DiscoveredSkillDir {\n  name: string\n  dir: string\n}\n\nfunction basenameOf(path: string): string {\n  const segments = path.split('/').filter((segment) => segment !== '')\n  return segments[segments.length - 1] ?? path\n}\n\n/**\n * Find every skill folder under a cloned `gitSkill` repo.\n *\n * A skill folder is a directory that contains `SKILL.md`. Nested packs\n * (`skills/foo/SKILL.md`) are returned as `{ name: 'foo', dir: '…/skills/foo' }`.\n * A flat clone with `SKILL.md` at the root is returned as one entry named\n * after the clone. If no `SKILL.md` is found, the clone itself is returned\n * so existing basename projection still works.\n *\n * The tree walk itself is the shared `walkSkillDirs` from `@tanstack/ai-skills`\n * (parameterized over an injected lister — here `handle.fs.list`). The\n * empty→clone-dir fallback is kept here because it is correct for harness\n * projection but wrong for a skills catalog, so it must not live in the shared\n * helper.\n */\nexport async function discoverSkillDirs(\n  handle: SandboxHandle,\n  cloneDir: string,\n): Promise<Array<DiscoveredSkillDir>> {\n  const found = await walkSkillDirs((dir) => handle.fs.list(dir), cloneDir)\n  if (found.length === 0) {\n    return [{ name: basenameOf(cloneDir), dir: cloneDir }]\n  }\n  return found\n}\n\n/** Format workspace scripts as a `## Workspace scripts` markdown section. */\nexport function formatWorkspaceScriptsSection(\n  scripts: Record<string, string>,\n): string {\n  const names = Object.keys(scripts).sort()\n  if (names.length === 0) return ''\n  const lines = names.map((name) => `- ${name} → ${scripts[name]}`)\n  return `## Workspace scripts\\n\\n${lines.join('\\n')}`\n}\n\n/**\n * Merge base AGENTS.md content with an optional workspace scripts section.\n * Returns `undefined` when there is nothing to write.\n */\nexport function mergeAgentsContent(\n  base: string | undefined,\n  scripts: Record<string, string> | undefined,\n): string | undefined {\n  const scriptsSection =\n    scripts !== undefined ? formatWorkspaceScriptsSection(scripts) : ''\n  if (base === undefined && scriptsSection.length === 0) return undefined\n  if (base === undefined) return scriptsSection\n  if (scriptsSection.length === 0) return base\n  return `${base.trimEnd()}\\n\\n${scriptsSection}`\n}\n\n/** Escape a string for safe use as a single-quoted shell argument. */\nfunction sqEscape(value: string): string {\n  return value.replace(/'/g, `'\\\\''`)\n}\n\n/**\n * Write `AGENTS.md` under `root` and create per-CLI symlinks (or copies as a\n * fallback when `ln -s` is unavailable).\n *\n * @param handle - The sandbox handle providing `fs` and `process`.\n * @param root   - Absolute path inside the sandbox under which to write.\n * @param content - Markdown content for the instruction file.\n */\nexport async function writeAgentsFile(\n  handle: SandboxHandle,\n  root: string,\n  content: string,\n): Promise<void> {\n  const agentsPath = `${root}/AGENTS.md`\n  await handle.fs.write(agentsPath, content)\n\n  for (const name of SYMLINK_NAMES) {\n    const lnCmd = `ln -s '${sqEscape('AGENTS.md')}' '${sqEscape(name)}'`\n    const result = await handle.process.exec(lnCmd, { cwd: root })\n    if (result.exitCode !== 0) {\n      // Symlinks are not supported on this platform — fall back to a copy.\n      await handle.fs.write(`${root}/${name}`, content)\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAkBA,IAAM,gBAAuC,CAAC,aAAa,WAAW;;;;;;;;;;;;;;;;AAiBtE,SAAgB,mBACd,MACA,OACQ;CACR,MAAM,cAAc,MAAM,KAAK,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK,MAAM;CAIzD,OAAO,GAAG,KAAK,oBAHE,YAAY,SAAS,MAAM,IACxC,YAAY,MAAM,GAAG,EAAE,IACvB;AAEN;AAQA,SAAS,WAAW,MAAsB;CACxC,MAAM,WAAW,KAAK,MAAM,GAAG,CAAC,CAAC,QAAQ,YAAY,YAAY,EAAE;CACnE,OAAO,SAAS,SAAS,SAAS,MAAM;AAC1C;;;;;;;;;;;;;;;;AAiBA,eAAsB,kBACpB,QACA,UACoC;CACpC,MAAM,QAAQ,MAAM,eAAe,QAAQ,OAAO,GAAG,KAAK,GAAG,GAAG,QAAQ;CACxE,IAAI,MAAM,WAAW,GACnB,OAAO,CAAC;EAAE,MAAM,WAAW,QAAQ;EAAG,KAAK;CAAS,CAAC;CAEvD,OAAO;AACT;;AAGA,SAAgB,8BACd,SACQ;CACR,MAAM,QAAQ,OAAO,KAAK,OAAO,CAAC,CAAC,KAAK;CACxC,IAAI,MAAM,WAAW,GAAG,OAAO;CAE/B,OAAO,2BADO,MAAM,KAAK,SAAS,KAAK,KAAK,KAAK,QAAQ,OACvB,CAAA,CAAM,KAAK,IAAI;AACnD;;;;;AAMA,SAAgB,mBACd,MACA,SACoB;CACpB,MAAM,iBACJ,YAAY,KAAA,IAAY,8BAA8B,OAAO,IAAI;CACnE,IAAI,SAAS,KAAA,KAAa,eAAe,WAAW,GAAG,OAAO,KAAA;CAC9D,IAAI,SAAS,KAAA,GAAW,OAAO;CAC/B,IAAI,eAAe,WAAW,GAAG,OAAO;CACxC,OAAO,GAAG,KAAK,QAAQ,EAAE,MAAM;AACjC;;AAGA,SAAS,SAAS,OAAuB;CACvC,OAAO,MAAM,QAAQ,MAAM,OAAO;AACpC;;;;;;;;;AAUA,eAAsB,gBACpB,QACA,MACA,SACe;CACf,MAAM,aAAa,GAAG,KAAK;CAC3B,MAAM,OAAO,GAAG,MAAM,YAAY,OAAO;CAEzC,KAAK,MAAM,QAAQ,eAAe;EAChC,MAAM,QAAQ,UAAU,SAAS,WAAW,EAAE,KAAK,SAAS,IAAI,EAAE;EAElE,KAAI,MADiB,OAAO,QAAQ,KAAK,OAAO,EAAE,KAAK,KAAK,CAAC,EAAA,CAClD,aAAa,GAEtB,MAAM,OAAO,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,OAAO;CAEpD;AACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tanstack/ai-sandbox",
-  "version": "0.5.2",
+  "version": "0.5.3",
   "description": "Provider-agnostic sandbox layer for TanStack AI — run harness adapters inside isolated sandboxes (defineSandbox, defineWorkspace, withSandbox) with a uniform SandboxHandle, workspace bootstrap, policy, and resumable lifecycle.",
   "author": "",
   "license": "MIT",
@@ -55,13 +55,14 @@
     }
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.29.0"
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "@tanstack/ai-skills": "^0.1.0"
   },
   "peerDependencies": {
     "@ngrok/ngrok": "^1.0.0",
     "vitest": "^4.1.10",
-    "@tanstack/ai": "^0.50.0",
-    "@tanstack/ai-persistence": "^0.5.2"
+    "@tanstack/ai": "^0.51.0",
+    "@tanstack/ai-persistence": "^0.5.3"
   },
   "peerDependenciesMeta": {
     "@ngrok/ngrok": {
@@ -78,8 +79,8 @@
     "@ngrok/ngrok": "^1.7.0",
     "@vitest/coverage-v8": "4.1.10",
     "vitest": "^4.1.10",
-    "@tanstack/ai": "0.50.0",
-    "@tanstack/ai-persistence": "0.5.2"
+    "@tanstack/ai": "0.51.0",
+    "@tanstack/ai-persistence": "0.5.3"
   },
   "scripts": {
     "build": "vite build",

package/src/agents-file.ts

@@ -11,6 +11,7 @@
  * file by name (CLAUDE.md for Claude Code, GEMINI.md for Gemini CLI, …).
  * We write a single authoritative AGENTS.md and point each name at it.
  */
+import { walkSkillDirs } from '@tanstack/ai-skills'
 import type { SandboxHandle } from './contracts'
 import type { WorkspaceSkill } from './workspace'
 
@@ -49,10 +50,6 @@ export interface DiscoveredSkillDir {
   dir: string
 }
 
-const SKILL_FILE = 'SKILL.md'
-const SKIP_DIR_NAMES = new Set(['.git', 'node_modules'])
-const MAX_SKILL_WALK_DEPTH = 6
-
 function basenameOf(path: string): string {
   const segments = path.split('/').filter((segment) => segment !== '')
   return segments[segments.length - 1] ?? path
@@ -66,48 +63,24 @@ function basenameOf(path: string): string {
  * A flat clone with `SKILL.md` at the root is returned as one entry named
  * after the clone. If no `SKILL.md` is found, the clone itself is returned
  * so existing basename projection still works.
+ *
+ * The tree walk itself is the shared `walkSkillDirs` from `@tanstack/ai-skills`
+ * (parameterized over an injected lister — here `handle.fs.list`). The
+ * empty→clone-dir fallback is kept here because it is correct for harness
+ * projection but wrong for a skills catalog, so it must not live in the shared
+ * helper.
  */
 export async function discoverSkillDirs(
   handle: SandboxHandle,
   cloneDir: string,
 ): Promise<Array<DiscoveredSkillDir>> {
-  const found: Array<DiscoveredSkillDir> = []
-  await walkSkillDirs(handle, cloneDir, found, 0)
+  const found = await walkSkillDirs((dir) => handle.fs.list(dir), cloneDir)
   if (found.length === 0) {
     return [{ name: basenameOf(cloneDir), dir: cloneDir }]
   }
   return found
 }
 
-async function walkSkillDirs(
-  handle: SandboxHandle,
-  dir: string,
-  found: Array<DiscoveredSkillDir>,
-  depth: number,
-): Promise<void> {
-  if (depth > MAX_SKILL_WALK_DEPTH) return
-  let entries: Awaited<ReturnType<SandboxHandle['fs']['list']>>
-  try {
-    entries = await handle.fs.list(dir)
-  } catch {
-    return
-  }
-  const hasSkill = entries.some(
-    (entry) =>
-      entry.type === 'file' &&
-      entry.name.toLowerCase() === SKILL_FILE.toLowerCase(),
-  )
-  if (hasSkill) {
-    found.push({ name: basenameOf(dir), dir })
-    return
-  }
-  for (const entry of entries) {
-    if (entry.type !== 'dir') continue
-    if (entry.name.startsWith('.') || SKIP_DIR_NAMES.has(entry.name)) continue
-    await walkSkillDirs(handle, entry.path, found, depth + 1)
-  }
-}
-
 /** Format workspace scripts as a `## Workspace scripts` markdown section. */
 export function formatWorkspaceScriptsSection(
   scripts: Record<string, string>,