@theholocron/cli 2.0.2 → 2.1.1

package/dist/capabilities/index.d.mts

@@ -1,5 +1,4 @@
 import { ProviderApiError } from "@theholocron/http-client";
-
 //#region src/capabilities/index.d.ts
 /**
  * Capability interfaces — the contracts that providers implement.
@@ -276,7 +275,8 @@ interface Issues extends ProviderIdentity {
   create(input: {
     summary: string;
     body?: string;
-    labels?: string[]; /** Numeric id or exact title (case-insensitive). */
+    labels?: string[];
+    /** Numeric id or exact title (case-insensitive). */
     milestone?: string;
   }): Promise<{
     key: string;
@@ -322,7 +322,8 @@ interface Deployment extends ProviderIdentity {
   /** Create if missing, otherwise return existing. Idempotent. */
   ensureProject(input: {
     name: string;
-    framework?: string; /** "owner/repo" — passed when linking to a Git provider. */
+    framework?: string;
+    /** "owner/repo" — passed when linking to a Git provider. */
     repo?: string;
     rootDirectory?: string;
   }): Promise<DeploymentProject>;

package/dist/cli.mjs

@@ -3590,7 +3590,8 @@ async function runSetup(input) {
 			"prd"
 		]) {
 			steps.push(await runStep("vault", `ensureEnvironment ${envName}`, dryRun, async () => {
-				return `${envName} ${(await vault.ensureEnvironment(config.name, envName)).alreadyExists ? "exists" : "created"}`;
+				const result = await vault.ensureEnvironment(config.name, envName);
+				return `${envName} ${result.alreadyExists ? "exists" : "created"}`;
 			}));
 			print(formatStep(steps[steps.length - 1]));
 		}
@@ -3676,6 +3677,21 @@ async function runSetup(input) {
 		summary
 	};
 }
+/**
+* Fetch a single SKILL.md from its upstream GitHub source.
+* Verifies the SHA-256 hash when `computedHash` is present in the lock entry.
+*/
+async function fetchExternalSkill(entry) {
+	if (entry.sourceType !== "github") throw new Error(`unsupported sourceType: ${entry.sourceType}`);
+	const url = `https://raw.githubusercontent.com/${entry.source}/HEAD/${entry.skillPath}`;
+	const res = await fetch(url);
+	if (!res.ok) throw new Error(`HTTP ${res.status} fetching ${url}`);
+	const content = await res.text();
+	return {
+		content,
+		stale: !!entry.computedHash && createHash("sha256").update(content).digest("hex") !== entry.computedHash
+	};
+}
 const AGENTS_SKILLS_ROOT = ".agents/skills";
 /** Relative path of the agent-specific symlink. undefined = unsupported agent. */
 const AGENT_SYMLINK_PATHS = { claude: (name) => `.claude/skills/${name}` };
@@ -3723,9 +3739,45 @@ async function installSkills({ agent, skills, repoRoot }) {
 		await symlink(relative(dirname(symlinkPath), agentsDir).replace(/\\/g, "/"), symlinkPath);
 		installed.push(name);
 	}
-	if (installed.length > 0 || stale.length > 0 || missing.length > 0) await updateSkillsGitignore(gitignorePath, existingContent, [...installed, ...missing], symlinkFn);
+	const externalFailed = [];
+	const externalStale = [];
+	if (missing.length > 0) {
+		let lock = null;
+		try {
+			lock = JSON.parse(await readFile(join(skillsRoot, "skills-lock.json"), "utf8"));
+		} catch {}
+		if (lock?.skills) for (const name of [...missing]) {
+			const entry = lock.skills[name];
+			if (!entry) continue;
+			try {
+				const { content, stale: isStale } = await fetchExternalSkill(entry);
+				const agentsDir = join(repoRoot, AGENTS_SKILLS_ROOT, name);
+				await mkdir(agentsDir, { recursive: true });
+				await writeFile(join(agentsDir, "SKILL.md"), content);
+				const symlinkPath = join(repoRoot, symlinkFn(name));
+				await mkdir(dirname(symlinkPath), { recursive: true });
+				try {
+					await unlink(symlinkPath);
+				} catch {}
+				await symlink(relative(dirname(symlinkPath), agentsDir).replace(/\\/g, "/"), symlinkPath);
+				missing.splice(missing.indexOf(name), 1);
+				installed.push(name);
+				if (isStale) externalStale.push(name);
+			} catch {
+				missing.splice(missing.indexOf(name), 1);
+				externalFailed.push(name);
+			}
+		}
+	}
+	if (installed.length > 0 || stale.length > 0 || missing.length > 0 || externalFailed.length > 0) await updateSkillsGitignore(gitignorePath, existingContent, [
+		...installed,
+		...missing,
+		...externalFailed
+	], symlinkFn);
 	const parts = [`installed ${installed.length}`];
 	if (stale.length > 0) parts.push(`pruned: ${stale.join(", ")}`);
+	if (externalStale.length > 0) parts.push(`stale: ${externalStale.join(", ")} (run \`holocron skills update\` to refresh)`);
+	if (externalFailed.length > 0) parts.push(`fetch failed: ${externalFailed.join(", ")}`);
 	if (missing.length > 0) parts.push(`unknown: ${missing.join(", ")}`);
 	return parts.join("; ");
 }
@@ -3750,9 +3802,10 @@ async function copyDirRecursive(src, dest) {
 	}
 }
 async function updateSkillsGitignore(gitignorePath, existingContent, skills, symlinkFn) {
+	const entries = [`/${AGENTS_SKILLS_ROOT}/`, ...skills.map((n) => `/${symlinkFn(n)}`)];
 	const block = [
 		GITIGNORE_BLOCK_START,
-		...[`/${AGENTS_SKILLS_ROOT}/`, ...skills.map((n) => `/${symlinkFn(n)}`)],
+		...entries,
 		GITIGNORE_BLOCK_END
 	].join("\n");
 	let content;

package/dist/index.d.mts

@@ -1,6 +1,5 @@
 import { Analytics, Auth, AuthDescription, AuthEvent, AuthEventType, AuthIdentity, AuthUser, CARDINALITY, CapabilityImpls, CapabilityKey, Cardinality, CardinalityFor, Ci, CiRun, CiRunFilter, CiRunStatus, ConnectionStringOptions, CreateAuthUserInput, Deployment, DeploymentProject, DeploymentProjectSettings, DeploymentRecord, DeploymentTarget, DeploymentTrigger, Dns, DnsRecord, DnsRecordType, EnsureResult, Environment, EnvironmentReviewer, Environments, Issue, IssueSearchFilter, Issues, LabelDef, LifecycleResult, LifecycleSlot, NormalizedAuthUser, Notifications, Observability, ParseWebhookInput, ProviderApiError, ProviderIdentity, REQUIRED_CAPABILITIES, RepoRef, RepoSettings, ResolvedCapability, Ruleset, SecretScope, Secrets, Source, StatusCategory, Storage, StorageBranch, TeamEntry, TeamPermission, Tooling, ToolingDoctorReport, TrackerDoctorReport, TrackerUser, Vault, WebhookDashboardInfo, WebhookVerificationError, isMulti } from "./capabilities/index.mjs";
 import { AuthError, RequestOptions, ResolveTokenConfig as ResolveTokenConfig$1, ResolveTokenInput, RestClient, RestClientConfig, createRestClient } from "@theholocron/http-client";
-
 //#region src/auth-resolver.d.ts
 type ResolveTokenConfig = Omit<ResolveTokenConfig$1, "getKeyringToken">;
 /** Wraps `createResolveToken` from `@theholocron/http` and injects the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@theholocron/cli",
-  "version": "2.0.2",
+  "version": "2.1.1",
   "description": "The Holocron CLI — a pluggable, capability-based orchestrator for spinning up and operating software projects.",
   "homepage": "https://github.com/theholocron/holocron/tree/main/packages/cli#readme",
   "bugs": "https://github.com/theholocron/holocron/issues",