@x-code-cli/core 0.2.10 → 0.3.1

package/dist/plugins/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/plugins/types.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C,EAAE;AACF,wEAAwE;AACxE,uEAAuE;AACvE,yEAAyE;AACzE,oEAAoE;AACpE,wEAAwE;AACxE,gBAAgB;AAChB,EAAE;AACF,sEAAsE;AACtE,2EAA2E;AAC3E,sEAAsE;AACtE,yEAAyE;AACzE,0CAA0C"}

package/dist/plugins/user-config.d.ts

@@ -0,0 +1,22 @@
+/** Value type for a single field. The manifest `type` field (string /
+ *  number / boolean) is enforced at prompt time, but we round-trip
+ *  through JSON which only knows these three primitives anyway. */
+export type UserConfigValue = string | number | boolean;
+/** Per-plugin user-config map: keyed by the manifest's `key` field. */
+export type PluginUserConfig = Record<string, UserConfigValue>;
+/** Read the saved config for one plugin. Returns an empty object when
+ *  the plugin has no saved config yet — caller can default keys from
+ *  the manifest. */
+export declare function getPluginUserConfig(pluginId: string): Promise<PluginUserConfig>;
+/** Write the config for one plugin. Merges with existing fields rather
+ *  than replacing — caller can call this once per field if they want
+ *  (e.g. interactive prompt loop). */
+export declare function setPluginUserConfig(pluginId: string, values: PluginUserConfig): Promise<void>;
+/** Drop the config for one plugin (e.g. on uninstall). */
+export declare function clearPluginUserConfig(pluginId: string): Promise<void>;
+/** Materialise a plugin's user-config map as an env-var record ready to
+ *  be merged into a child process's environment. Each manifest key
+ *  becomes the env var name; numbers and booleans coerce to their
+ *  string forms. Unset fields are skipped (env vars left untouched). */
+export declare function getPluginUserConfigEnv(pluginId: string): Promise<Record<string, string>>;
+//# sourceMappingURL=user-config.d.ts.map

package/dist/plugins/user-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-config.d.ts","sourceRoot":"","sources":["../../src/plugins/user-config.ts"],"names":[],"mappings":"AAmCA;;mEAEmE;AACnE,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAA;AAEvD,uEAAuE;AACvE,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;AAgC9D;;oBAEoB;AACpB,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAGrF;AAED;;sCAEsC;AACtC,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAInG;AAED,0DAA0D;AAC1D,wBAAsB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAK3E;AAED;;;wEAGwE;AACxE,wBAAsB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAO9F"}

package/dist/plugins/user-config.js

@@ -0,0 +1,96 @@
+// @x-code-cli/core — Plugin userConfig storage
+//
+// Each plugin can declare a `userConfig` block in its manifest — a list of
+// fields the plugin needs from the user (API keys, account ids, working
+// directories, etc). At install time the CLI prompts for each field's
+// value; this module owns the on-disk persistence layer.
+//
+// Layout:
+//
+//   ~/.x-code/plugins/user-config.json    →  {
+//                                              [pluginId]: { [key]: <value> }
+//                                            }
+//
+// Storage format is a plain JSON map; the file is created with 0600
+// (owner-read-write only) so a process in another user's session can't
+// read sensitive values. This is NOT a substitute for a real OS keychain
+// (macOS Keychain / Windows Credential Manager / Linux libsecret) — it's
+// a pragmatic v1 that avoids the native-build complexity. The
+// `sensitive: true` field still drives mask-on-input at prompt time; only
+// the at-rest storage shares one file.
+//
+// A future enhancement will move `sensitive` entries to a real keychain.
+// The reader merges from both sources, so adding it later is a non-
+// breaking change.
+//
+// Why not split sensitive vs non-sensitive into separate files: it would
+// just multiply file IO without raising the security bar (both files live
+// in the same dir with the same perms). Real protection requires a real
+// keychain; until then, one file is honest about what we're doing.
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { debugLog } from '../utils.js';
+import { pluginsRoot } from './paths.js';
+function userConfigPath() {
+    return path.join(pluginsRoot(), 'user-config.json');
+}
+async function readFile() {
+    try {
+        const raw = await fs.readFile(userConfigPath(), 'utf-8');
+        const parsed = JSON.parse(raw);
+        if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed))
+            return {};
+        return parsed;
+    }
+    catch (err) {
+        if (err.code === 'ENOENT')
+            return {};
+        debugLog('plugins.user-config-read-error', String(err));
+        return {};
+    }
+}
+async function writeFile(data) {
+    const p = userConfigPath();
+    await fs.mkdir(path.dirname(p), { recursive: true });
+    // 0600 keeps the file readable only by the owning user. On Windows
+    // this is a no-op (fs.chmod doesn't translate to ACLs the same way) —
+    // there's nothing meaningful we can do without shelling out to icacls.
+    // The keychain followup will solve Windows properly.
+    await fs.writeFile(p, JSON.stringify(data, null, 2) + '\n', { mode: 0o600 });
+}
+/** Read the saved config for one plugin. Returns an empty object when
+ *  the plugin has no saved config yet — caller can default keys from
+ *  the manifest. */
+export async function getPluginUserConfig(pluginId) {
+    const all = await readFile();
+    return all[pluginId] ?? {};
+}
+/** Write the config for one plugin. Merges with existing fields rather
+ *  than replacing — caller can call this once per field if they want
+ *  (e.g. interactive prompt loop). */
+export async function setPluginUserConfig(pluginId, values) {
+    const all = await readFile();
+    all[pluginId] = { ...(all[pluginId] ?? {}), ...values };
+    await writeFile(all);
+}
+/** Drop the config for one plugin (e.g. on uninstall). */
+export async function clearPluginUserConfig(pluginId) {
+    const all = await readFile();
+    if (!(pluginId in all))
+        return;
+    delete all[pluginId];
+    await writeFile(all);
+}
+/** Materialise a plugin's user-config map as an env-var record ready to
+ *  be merged into a child process's environment. Each manifest key
+ *  becomes the env var name; numbers and booleans coerce to their
+ *  string forms. Unset fields are skipped (env vars left untouched). */
+export async function getPluginUserConfigEnv(pluginId) {
+    const cfg = await getPluginUserConfig(pluginId);
+    const env = {};
+    for (const [k, v] of Object.entries(cfg)) {
+        env[k] = String(v);
+    }
+    return env;
+}
+//# sourceMappingURL=user-config.js.map

package/dist/plugins/user-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-config.js","sourceRoot":"","sources":["../../src/plugins/user-config.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAC/C,EAAE;AACF,2EAA2E;AAC3E,wEAAwE;AACxE,sEAAsE;AACtE,yDAAyD;AACzD,EAAE;AACF,UAAU;AACV,EAAE;AACF,+CAA+C;AAC/C,8EAA8E;AAC9E,+CAA+C;AAC/C,EAAE;AACF,oEAAoE;AACpE,uEAAuE;AACvE,yEAAyE;AACzE,yEAAyE;AACzE,8DAA8D;AAC9D,0EAA0E;AAC1E,uCAAuC;AACvC,EAAE;AACF,yEAAyE;AACzE,oEAAoE;AACpE,mBAAmB;AACnB,EAAE;AACF,yEAAyE;AACzE,0EAA0E;AAC1E,wEAAwE;AACxE,mEAAmE;AACnE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AACjC,OAAO,IAAI,MAAM,WAAW,CAAA;AAE5B,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AACtC,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAaxC,SAAS,cAAc;IACrB,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,kBAAkB,CAAC,CAAA;AACrD,CAAC;AAED,KAAK,UAAU,QAAQ;IACrB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,OAAO,CAAC,CAAA;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAA;QACzC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,CAAA;QAC7E,OAAO,MAAwB,CAAA;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAA;QAC/D,QAAQ,CAAC,gCAAgC,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;QACvD,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAoB;IAC3C,MAAM,CAAC,GAAG,cAAc,EAAE,CAAA;IAC1B,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACpD,mEAAmE;IACnE,sEAAsE;IACtE,uEAAuE;IACvE,qDAAqD;IACrD,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;AAC9E,CAAC;AAED;;oBAEoB;AACpB,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,QAAgB;IACxD,MAAM,GAAG,GAAG,MAAM,QAAQ,EAAE,CAAA;IAC5B,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAA;AAC5B,CAAC;AAED;;sCAEsC;AACtC,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,QAAgB,EAAE,MAAwB;IAClF,MAAM,GAAG,GAAG,MAAM,QAAQ,EAAE,CAAA;IAC5B,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,MAAM,EAAE,CAAA;IACvD,MAAM,SAAS,CAAC,GAAG,CAAC,CAAA;AACtB,CAAC;AAED,0DAA0D;AAC1D,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,QAAgB;IAC1D,MAAM,GAAG,GAAG,MAAM,QAAQ,EAAE,CAAA;IAC5B,IAAI,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC;QAAE,OAAM;IAC9B,OAAO,GAAG,CAAC,QAAQ,CAAC,CAAA;IACpB,MAAM,SAAS,CAAC,GAAG,CAAC,CAAA;AACtB,CAAC;AAED;;;wEAGwE;AACxE,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,QAAgB;IAC3D,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,QAAQ,CAAC,CAAA;IAC/C,MAAM,GAAG,GAA2B,EAAE,CAAA;IACtC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;IACpB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/skills/loader.d.ts

@@ -0,0 +1,19 @@
+import type { SkillDefinition } from './registry.js';
+export interface LoadSkillsOptions {
+    /** Extra skill directories to scan after the built-in user + project
+     *  paths. Used to fold plugin-contributed `skills/` directories into
+     *  the same registry — see packages/core/src/plugins/integration.ts.
+     *  Order matters: later entries win on name collision. Plugin skills
+     *  are scanned BEFORE project skills (so a user-authored project skill
+     *  can override a plugin skill of the same name). */
+    extraDirs?: ReadonlyArray<{
+        dir: string;
+        pluginId: string;
+    }>;
+}
+/** Load skills from user + project directories, plus any extra dirs
+ *  passed in (used by the plugin system to fold in plugin-contributed
+ *  skill directories). Environment variable `XC_SKILLS_DIR` overrides
+ *  the built-in paths for testing (extras are still honoured). */
+export declare function loadSkills(opts?: LoadSkillsOptions): Promise<SkillDefinition[]>;
+//# sourceMappingURL=loader.d.ts.map

package/dist/skills/loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/skills/loader.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AA0KpD,MAAM,WAAW,iBAAiB;IAChC;;;;;yDAKqD;IACrD,SAAS,CAAC,EAAE,aAAa,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAC7D;AAED;;;kEAGkE;AAClE,wBAAsB,UAAU,CAAC,IAAI,GAAE,iBAAsB,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAkBzF"}

package/dist/skills/loader.js

@@ -0,0 +1,197 @@
+// @x-code-cli/core — Skill loader
+//
+// Scans ~/.x-code/skills/*/SKILL.md and <repo-root>/.x-code/skills/*/SKILL.md
+// for user-defined skills with YAML frontmatter. The subdirectory layout
+// mirrors all major competitors (Gemini CLI, Opencode, Codex) and allows
+// future support files alongside SKILL.md.
+//
+// Priority: project-level skills override user-level skills of the same name.
+// Bad files are skipped with a warning — one broken SKILL.md must never
+// crash the CLI.
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { z } from 'zod';
+import { USER_XCODE_DIR, XCODE_DIR } from '../utils.js';
+const SKILL_FILENAME = 'SKILL.md';
+/** Hard upper bound on the file count we list per skill — keeps the
+ *  activation payload bounded even for skills that ship dozens of
+ *  references / assets / scripts. Skills exceeding this get a truncation
+ *  marker appended so the model knows the list isn't exhaustive. */
+const MAX_LISTED_FILES = 50;
+/** Directory names skipped while listing a skill's bundled files —
+ *  hidden dirs and obvious heavy ones that almost never contain skill
+ *  resources. Listed by basename, not glob. */
+const SKILL_FILE_LIST_SKIP_DIRS = new Set([
+    'node_modules',
+    '__pycache__',
+    '.git',
+    '.venv',
+    'venv',
+    'dist',
+    'build',
+    'target',
+]);
+const frontmatterSchema = z.object({
+    name: z.string().min(1),
+    description: z.string().min(1),
+});
+/** Walk a skill directory and return relative paths of its non-hidden
+ *  files (excluding SKILL.md itself). Used at load time so SkillRegistry
+ *  has a ready-to-inject list of bundled resources — Opencode and
+ *  Gemini CLI do the same listing at activation, but X-Code caches it
+ *  alongside the SkillDefinition since the registry is frozen for the
+ *  session anyway (`/skill refresh` rebuilds). */
+async function listSkillFiles(skillDir) {
+    const out = [];
+    async function walk(currentDir) {
+        if (out.length >= MAX_LISTED_FILES)
+            return;
+        let entries;
+        try {
+            entries = await fs.readdir(currentDir, { withFileTypes: true });
+        }
+        catch {
+            return;
+        }
+        for (const entry of entries) {
+            if (out.length >= MAX_LISTED_FILES)
+                return;
+            if (entry.name.startsWith('.'))
+                continue;
+            if (entry.isDirectory()) {
+                if (SKILL_FILE_LIST_SKIP_DIRS.has(entry.name))
+                    continue;
+                await walk(path.join(currentDir, entry.name));
+                continue;
+            }
+            if (!entry.isFile())
+                continue;
+            const fullPath = path.join(currentDir, entry.name);
+            const rel = path.relative(skillDir, fullPath).split(path.sep).join('/');
+            if (rel === SKILL_FILENAME)
+                continue;
+            out.push(rel);
+        }
+    }
+    await walk(skillDir);
+    return out.sort();
+}
+/** Minimal YAML frontmatter parser — reuses the same subset logic as
+ *  sub-agent loader: string scalars only, no dependency on gray-matter. */
+function parseFrontmatter(raw) {
+    const match = raw.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n?([\s\S]*)$/);
+    if (!match)
+        return null;
+    const yamlBlock = match[1];
+    const body = match[2];
+    const data = {};
+    // Fold YAML continuation lines: an indented non-empty line is joined to
+    // the previous line with a single space. Mirrors the folded-scalar form
+    // used by skill SKILL.md files where a long `description:` is wrapped
+    // with 2-space indented continuations.
+    const foldedLines = [];
+    for (const line of yamlBlock.split(/\r?\n/)) {
+        if (/^\s/.test(line) && line.trim() && foldedLines.length > 0) {
+            foldedLines[foldedLines.length - 1] += ' ' + line.trim();
+        }
+        else {
+            foldedLines.push(line);
+        }
+    }
+    for (const line of foldedLines) {
+        const trimmed = line.trim();
+        if (!trimmed || trimmed.startsWith('#'))
+            continue;
+        const colonIdx = trimmed.indexOf(':');
+        if (colonIdx < 1)
+            continue;
+        const key = trimmed.slice(0, colonIdx).trim();
+        let value = trimmed.slice(colonIdx + 1).trim();
+        if ((value.startsWith('"') && value.endsWith('"')) || (value.startsWith("'") && value.endsWith("'"))) {
+            value = value.slice(1, -1);
+        }
+        data[key] = value;
+    }
+    return { data, body };
+}
+async function loadSkillsFromDir(dir, source, pluginId) {
+    const skills = [];
+    let entries;
+    try {
+        entries = await fs.readdir(dir);
+    }
+    catch {
+        return skills;
+    }
+    for (const entry of entries) {
+        const skillDir = path.join(dir, entry);
+        const skillFile = path.join(skillDir, SKILL_FILENAME);
+        try {
+            await fs.access(skillFile);
+        }
+        catch {
+            continue;
+        }
+        try {
+            const raw = await fs.readFile(skillFile, 'utf-8');
+            const parsed = parseFrontmatter(raw);
+            if (!parsed) {
+                console.error(`[skills] Skipping ${skillFile}: no valid YAML frontmatter`);
+                continue;
+            }
+            const result = frontmatterSchema.safeParse(parsed.data);
+            if (!result.success) {
+                console.error(`[skills] Skipping ${skillFile}: invalid frontmatter — ${result.error.issues.map((i) => i.message).join(', ')}`);
+                continue;
+            }
+            const files = await listSkillFiles(skillDir);
+            skills.push({
+                name: result.data.name,
+                description: result.data.description,
+                content: parsed.body.trim(),
+                source,
+                dir: skillDir,
+                files,
+                ...(pluginId ? { pluginId } : {}),
+            });
+        }
+        catch (err) {
+            console.error(`[skills] Skipping ${skillFile}: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    return skills;
+}
+/** Load skills from user + project directories, plus any extra dirs
+ *  passed in (used by the plugin system to fold in plugin-contributed
+ *  skill directories). Environment variable `XC_SKILLS_DIR` overrides
+ *  the built-in paths for testing (extras are still honoured). */
+export async function loadSkills(opts = {}) {
+    const override = process.env.XC_SKILLS_DIR;
+    if (override) {
+        const overrideSkills = await loadSkillsFromDir(override, 'project');
+        return [...overrideSkills, ...(await loadFromExtras(opts.extraDirs))];
+    }
+    const userDir = path.join(USER_XCODE_DIR, 'skills');
+    const projectDir = path.join(process.cwd(), XCODE_DIR, 'skills');
+    const userSkills = await loadSkillsFromDir(userDir, 'user');
+    const pluginSkills = await loadFromExtras(opts.extraDirs);
+    const projectSkills = await loadSkillsFromDir(projectDir, 'project');
+    // Merge order — last-wins in the registry (project overrides plugin
+    // overrides user builtin). This matches the precedence we tell users:
+    // a project-level skill always overrides anything from a plugin.
+    return [...userSkills, ...pluginSkills, ...projectSkills];
+}
+async function loadFromExtras(extras) {
+    if (!extras || extras.length === 0)
+        return [];
+    const out = [];
+    for (const { dir, pluginId } of extras) {
+        // Plugin-provided skills' filesystem source is technically the cache
+        // dir under ~/.x-code/plugins/cache/..., which makes 'user' the
+        // closest fit (it's installed user-wide, not per-project). `pluginId`
+        // carries the real provenance for the UI.
+        out.push(...(await loadSkillsFromDir(dir, 'user', pluginId)));
+    }
+    return out;
+}
+//# sourceMappingURL=loader.js.map

package/dist/skills/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/skills/loader.ts"],"names":[],"mappings":"AAAA,kCAAkC;AAClC,EAAE;AACF,8EAA8E;AAC9E,yEAAyE;AACzE,yEAAyE;AACzE,2CAA2C;AAC3C,EAAE;AACF,8EAA8E;AAC9E,wEAAwE;AACxE,iBAAiB;AACjB,OAAO,EAAE,MAAM,kBAAkB,CAAA;AACjC,OAAO,IAAI,MAAM,WAAW,CAAA;AAE5B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAGvD,MAAM,cAAc,GAAG,UAAU,CAAA;AAEjC;;;oEAGoE;AACpE,MAAM,gBAAgB,GAAG,EAAE,CAAA;AAE3B;;+CAE+C;AAC/C,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC;IACxC,cAAc;IACd,aAAa;IACb,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,OAAO;IACP,QAAQ;CACT,CAAC,CAAA;AAEF,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC/B,CAAC,CAAA;AAEF;;;;;kDAKkD;AAClD,KAAK,UAAU,cAAc,CAAC,QAAgB;IAC5C,MAAM,GAAG,GAAa,EAAE,CAAA;IAExB,KAAK,UAAU,IAAI,CAAC,UAAkB;QACpC,IAAI,GAAG,CAAC,MAAM,IAAI,gBAAgB;YAAE,OAAM;QAE1C,IAAI,OAAmC,CAAA;QACvC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,OAAM;QACR,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,GAAG,CAAC,MAAM,IAAI,gBAAgB;gBAAE,OAAM;YAC1C,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAQ;YACxC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,IAAI,yBAAyB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;oBAAE,SAAQ;gBACvD,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;gBAC7C,SAAQ;YACV,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;gBAAE,SAAQ;YAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;YAClD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACvE,IAAI,GAAG,KAAK,cAAc;gBAAE,SAAQ;YACpC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACf,CAAC;IACH,CAAC;IAED,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAA;IACpB,OAAO,GAAG,CAAC,IAAI,EAAE,CAAA;AACnB,CAAC;AAED;2EAC2E;AAC3E,SAAS,gBAAgB,CAAC,GAAW;IACnC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAA;IACtE,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IAEvB,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAE,CAAA;IAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAA;IACtB,MAAM,IAAI,GAA4B,EAAE,CAAA;IAExC,wEAAwE;IACxE,wEAAwE;IACxE,sEAAsE;IACtE,uCAAuC;IACvC,MAAM,WAAW,GAAa,EAAE,CAAA;IAChC,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5C,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9D,WAAW,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QAC1D,CAAC;aAAM,CAAC;YACN,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACxB,CAAC;IACH,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QAC3B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAQ;QAEjD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QACrC,IAAI,QAAQ,GAAG,CAAC;YAAE,SAAQ;QAE1B,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAA;QAC7C,IAAI,KAAK,GAAW,OAAO,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QAEtD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACrG,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QAC5B,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;IACnB,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;AACvB,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,GAAW,EACX,MAAiC,EACjC,QAAiB;IAEjB,MAAM,MAAM,GAAsB,EAAE,CAAA;IAEpC,IAAI,OAAiB,CAAA;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAA;IACf,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QACtC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAA;QAErD,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,SAAQ;QACV,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;YACjD,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAA;YACpC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,CAAC,KAAK,CAAC,qBAAqB,SAAS,6BAA6B,CAAC,CAAA;gBAC1E,SAAQ;YACV,CAAC;YAED,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YACvD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,CAAC,KAAK,CACX,qBAAqB,SAAS,2BAA2B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChH,CAAA;gBACD,SAAQ;YACV,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,CAAA;YAE5C,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;gBACtB,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;gBACpC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE;gBAC3B,MAAM;gBACN,GAAG,EAAE,QAAQ;gBACb,KAAK;gBACL,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClC,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,qBAAqB,SAAS,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACtG,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAYD;;;kEAGkE;AAClE,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAA0B,EAAE;IAC3D,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAA;IAC1C,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;QACnE,OAAO,CAAC,GAAG,cAAc,EAAE,GAAG,CAAC,MAAM,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IACvE,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAA;IACnD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAA;IAEhE,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IAC3D,MAAM,YAAY,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACzD,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;IAEpE,oEAAoE;IACpE,sEAAsE;IACtE,iEAAiE;IACjE,OAAO,CAAC,GAAG,UAAU,EAAE,GAAG,YAAY,EAAE,GAAG,aAAa,CAAC,CAAA;AAC3D,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,MAAsC;IAClE,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAC7C,MAAM,GAAG,GAAsB,EAAE,CAAA;IACjC,KAAK,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,MAAM,EAAE,CAAC;QACvC,qEAAqE;QACrE,gEAAgE;QAChE,sEAAsE;QACtE,0CAA0C;QAC1C,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAA;IAC/D,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/skills/registry.d.ts

@@ -0,0 +1,74 @@
+import { type LoadSkillsOptions } from './loader.js';
+export interface SkillDefinition {
+    name: string;
+    description: string;
+    content: string;
+    source: 'user' | 'project';
+    /** Absolute path to the skill's directory (the one containing SKILL.md).
+     *  Used at activation time so the model can resolve relative paths to
+     *  bundled scripts / references / assets. */
+    dir: string;
+    /** Relative paths of files in the skill directory, excluding SKILL.md and
+     *  hidden / heavy directories. Listed at activation time alongside the body
+     *  so the model knows what bundled resources exist without globbing. Capped
+     *  at MAX_LISTED_FILES — long lists get truncated with a "... N more" marker. */
+    files: string[];
+    /** When this skill comes from a plugin contribution, the owning plugin's
+     *  id (`name@marketplace`). UI shows this as "(from plugin: …)" and
+     *  `/skill uninstall` redirects to `/plugin uninstall`. */
+    pluginId?: string;
+}
+export interface SkillEntry extends SkillDefinition {
+    disabled: boolean;
+}
+/** Summary returned by `reloadSkillRegistry()`. Drives the message
+ *  surface in /skill refresh — caller can show "added: a, b" /
+ *  "removed: c" / "unchanged: d, e" the same way /mcp refresh does. */
+export interface SkillReloadSummary {
+    added: string[];
+    removed: string[];
+    changed: string[];
+    unchanged: string[];
+}
+export declare class SkillRegistry {
+    private byName;
+    constructor(skills: SkillDefinition[], disabled?: ReadonlySet<string>);
+    /** Replace the in-memory skill list with a fresh load. Used by
+     *  /skill refresh — keeps the same SkillRegistry object identity so
+     *  every cached `options.skillRegistry` reference (agent loop, CLI
+     *  slash completion, App.tsx handlers) keeps pointing at the right
+     *  thing. Returns a per-name diff vs the previous state so the
+     *  caller can render an "added / removed / changed / unchanged"
+     *  summary in the user-facing message. */
+    reload(skills: SkillDefinition[], disabled: ReadonlySet<string>): SkillReloadSummary;
+    /** Enabled skill by name. Disabled skills are hidden from the agent loop
+     *  and slash-command dispatch — use `getEntry()` if you need to inspect
+     *  the disabled flag (the /skill list handler does). */
+    get(name: string): SkillDefinition | undefined;
+    /** Enabled skills only. */
+    list(): SkillDefinition[];
+    /** Enabled skill names only. */
+    names(): string[];
+    /** Every loaded skill, with `disabled` flag. Used by /skill list and the
+     *  disable/enable/remove handlers so they can act on disabled skills too. */
+    listAll(): SkillEntry[];
+    getEntry(name: string): SkillEntry | undefined;
+}
+/** Build the exact text that goes inside `<activated_skill name="...">...</activated_skill>`
+ *  for both activation paths (model self-decide via `activateSkill` tool, and
+ *  user explicit `/<skillname>`). Format follows Opencode's convention: body
+ *  first, then a footer with base directory + relative-paths hint + file list.
+ *  Sharing one formatter between the two call sites keeps the byte stream the
+ *  model sees identical regardless of who triggered activation. */
+export declare function formatSkillActivationBody(skill: SkillDefinition): string;
+/** Wrap a skill's activation body in the `<activated_skill name="X">`
+ *  XML envelope. Used by both activation paths so the wrapper is byte-
+ *  identical regardless of trigger. */
+export declare function wrapActivatedSkill(skill: SkillDefinition): string;
+export declare function createSkillRegistry(opts?: LoadSkillsOptions): Promise<SkillRegistry>;
+/** Re-scan skill directories + settings.json, then mutate the given
+ *  registry in place. Caller is responsible for invalidating any
+ *  systemPromptCache that embedded the previous skill list — the
+ *  /skill refresh handler does exactly this. */
+export declare function reloadSkillRegistry(registry: SkillRegistry, opts?: LoadSkillsOptions): Promise<SkillReloadSummary>;
+//# sourceMappingURL=registry.d.ts.map

package/dist/skills/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/skills/registry.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,KAAK,iBAAiB,EAAc,MAAM,aAAa,CAAA;AAGhE,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1B;;iDAE6C;IAC7C,GAAG,EAAE,MAAM,CAAA;IACX;;;qFAGiF;IACjF,KAAK,EAAE,MAAM,EAAE,CAAA;IACf;;+DAE2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,UAAW,SAAQ,eAAe;IACjD,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED;;uEAEuE;AACvE,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,SAAS,EAAE,MAAM,EAAE,CAAA;CACpB;AAED,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAyB;gBAE3B,MAAM,EAAE,eAAe,EAAE,EAAE,QAAQ,GAAE,WAAW,CAAC,MAAM,CAAa;IAShF;;;;;;8CAM0C;IAC1C,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,EAAE,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,kBAAkB;IA+BpF;;4DAEwD;IACxD,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAM9C,2BAA2B;IAC3B,IAAI,IAAI,eAAe,EAAE;IAIzB,gCAAgC;IAChC,KAAK,IAAI,MAAM,EAAE;IAIjB;iFAC6E;IAC7E,OAAO,IAAI,UAAU,EAAE;IAIvB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS;CAG/C;AAQD;;;;;mEAKmE;AACnE,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,CAexE;AAED;;uCAEuC;AACvC,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,CAEjE;AAED,wBAAsB,mBAAmB,CAAC,IAAI,GAAE,iBAAsB,GAAG,OAAO,CAAC,aAAa,CAAC,CAG9F;AAED;;;gDAGgD;AAChD,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,aAAa,EACvB,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,CAG7B"}

package/dist/skills/registry.js

@@ -0,0 +1,136 @@
+// @x-code-cli/core — Skill registry
+//
+// Built once at CLI startup and reused across the session. The skill list
+// is embedded in two byte-stable surfaces — the system prompt's
+// `## Available Skills` block and the `activateSkill` tool description —
+// both cached on LoopState.systemPromptCache. Adding, removing, enabling,
+// or disabling a skill therefore needs to either (a) run before the next
+// streamText call AND invalidate that cache, or (b) wait for a CLI
+// restart. The /skill disable|enable|remove handlers do (b) — they write
+// settings to disk and print a "Restart the CLI to apply." hint. The
+// /skill refresh handler does (a) — it calls `reloadSkillRegistry()` on
+// this object to rebuild the internal map in place, then triggers a
+// systemPromptCache invalidation so the next turn picks up the change.
+// Keeping the same SkillRegistry object reference across refresh means
+// every other code path that captured `options.skillRegistry` (agent
+// loop's buildTools, App.tsx's slash-command tab completion, …) stays
+// pointed at the right thing without needing to be re-wired.
+import { loadSkills } from './loader.js';
+import { loadDisabledSkillsSet } from './settings.js';
+export class SkillRegistry {
+    byName;
+    constructor(skills, disabled = new Set()) {
+        this.byName = new Map();
+        // Last-write wins: project skills override user-scope skills of the
+        // same name because loadSkills() returns user-scope first, then project.
+        for (const skill of skills) {
+            this.byName.set(skill.name, { ...skill, disabled: disabled.has(skill.name) });
+        }
+    }
+    /** Replace the in-memory skill list with a fresh load. Used by
+     *  /skill refresh — keeps the same SkillRegistry object identity so
+     *  every cached `options.skillRegistry` reference (agent loop, CLI
+     *  slash completion, App.tsx handlers) keeps pointing at the right
+     *  thing. Returns a per-name diff vs the previous state so the
+     *  caller can render an "added / removed / changed / unchanged"
+     *  summary in the user-facing message. */
+    reload(skills, disabled) {
+        const previous = this.byName;
+        const next = new Map();
+        for (const skill of skills) {
+            next.set(skill.name, { ...skill, disabled: disabled.has(skill.name) });
+        }
+        const summary = { added: [], removed: [], changed: [], unchanged: [] };
+        for (const [name, entry] of next) {
+            const prev = previous.get(name);
+            if (!prev) {
+                summary.added.push(name);
+            }
+            else if (prev.description !== entry.description ||
+                prev.content !== entry.content ||
+                prev.source !== entry.source ||
+                prev.disabled !== entry.disabled) {
+                summary.changed.push(name);
+            }
+            else {
+                summary.unchanged.push(name);
+            }
+        }
+        for (const name of previous.keys()) {
+            if (!next.has(name))
+                summary.removed.push(name);
+        }
+        this.byName = next;
+        return summary;
+    }
+    /** Enabled skill by name. Disabled skills are hidden from the agent loop
+     *  and slash-command dispatch — use `getEntry()` if you need to inspect
+     *  the disabled flag (the /skill list handler does). */
+    get(name) {
+        const entry = this.byName.get(name);
+        if (!entry || entry.disabled)
+            return undefined;
+        return entry;
+    }
+    /** Enabled skills only. */
+    list() {
+        return [...this.byName.values()].filter((s) => !s.disabled);
+    }
+    /** Enabled skill names only. */
+    names() {
+        return [...this.byName.values()].filter((s) => !s.disabled).map((s) => s.name);
+    }
+    /** Every loaded skill, with `disabled` flag. Used by /skill list and the
+     *  disable/enable/remove handlers so they can act on disabled skills too. */
+    listAll() {
+        return [...this.byName.values()];
+    }
+    getEntry(name) {
+        return this.byName.get(name);
+    }
+}
+/** Hard upper bound mirrored from loader's MAX_LISTED_FILES — the
+ *  injection formatter caps the rendered file list at the same value so
+ *  the two stay aligned. Loader sorts + truncates first, this function
+ *  treats `skill.files` as already-bounded. */
+const MAX_RENDERED_FILES = 50;
+/** Build the exact text that goes inside `<activated_skill name="...">...</activated_skill>`
+ *  for both activation paths (model self-decide via `activateSkill` tool, and
+ *  user explicit `/<skillname>`). Format follows Opencode's convention: body
+ *  first, then a footer with base directory + relative-paths hint + file list.
+ *  Sharing one formatter between the two call sites keeps the byte stream the
+ *  model sees identical regardless of who triggered activation. */
+export function formatSkillActivationBody(skill) {
+    const lines = [skill.content.trim(), ''];
+    lines.push(`Base directory for this skill: ${skill.dir}`);
+    lines.push('Relative paths in this skill (e.g., scripts/foo.sh, references/api.md) are resolved against the base directory above.');
+    if (skill.files.length > 0) {
+        lines.push('', 'Files in this skill directory:');
+        const shown = skill.files.slice(0, MAX_RENDERED_FILES);
+        for (const f of shown)
+            lines.push(`- ${f}`);
+        if (skill.files.length > MAX_RENDERED_FILES) {
+            lines.push(`- ... and ${skill.files.length - MAX_RENDERED_FILES} more file(s) not shown`);
+        }
+    }
+    return lines.join('\n');
+}
+/** Wrap a skill's activation body in the `<activated_skill name="X">`
+ *  XML envelope. Used by both activation paths so the wrapper is byte-
+ *  identical regardless of trigger. */
+export function wrapActivatedSkill(skill) {
+    return `<activated_skill name="${skill.name}">\n${formatSkillActivationBody(skill)}\n</activated_skill>`;
+}
+export async function createSkillRegistry(opts = {}) {
+    const [skills, disabled] = await Promise.all([loadSkills(opts), loadDisabledSkillsSet()]);
+    return new SkillRegistry(skills, disabled);
+}
+/** Re-scan skill directories + settings.json, then mutate the given
+ *  registry in place. Caller is responsible for invalidating any
+ *  systemPromptCache that embedded the previous skill list — the
+ *  /skill refresh handler does exactly this. */
+export async function reloadSkillRegistry(registry, opts = {}) {
+    const [skills, disabled] = await Promise.all([loadSkills(opts), loadDisabledSkillsSet()]);
+    return registry.reload(skills, disabled);
+}
+//# sourceMappingURL=registry.js.map

package/dist/skills/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/skills/registry.ts"],"names":[],"mappings":"AAAA,oCAAoC;AACpC,EAAE;AACF,0EAA0E;AAC1E,gEAAgE;AAChE,yEAAyE;AACzE,0EAA0E;AAC1E,yEAAyE;AACzE,mEAAmE;AACnE,yEAAyE;AACzE,qEAAqE;AACrE,wEAAwE;AACxE,oEAAoE;AACpE,uEAAuE;AACvE,uEAAuE;AACvE,qEAAqE;AACrE,sEAAsE;AACtE,6DAA6D;AAC7D,OAAO,EAA0B,UAAU,EAAE,MAAM,aAAa,CAAA;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAA;AAoCrD,MAAM,OAAO,aAAa;IAChB,MAAM,CAAyB;IAEvC,YAAY,MAAyB,EAAE,WAAgC,IAAI,GAAG,EAAE;QAC9E,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,EAAE,CAAA;QACvB,oEAAoE;QACpE,yEAAyE;QACzE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC/E,CAAC;IACH,CAAC;IAED;;;;;;8CAM0C;IAC1C,MAAM,CAAC,MAAyB,EAAE,QAA6B;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAA;QAC5B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAsB,CAAA;QAC1C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACxE,CAAC;QAED,MAAM,OAAO,GAAuB,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAA;QAC1F,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YAC/B,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC1B,CAAC;iBAAM,IACL,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;gBACtC,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;gBAC9B,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;gBAC5B,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,EAChC,CAAC;gBACD,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC5B,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC9B,CAAC;QACH,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;YACnC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACjD,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;QAClB,OAAO,OAAO,CAAA;IAChB,CAAC;IAED;;4DAEwD;IACxD,GAAG,CAAC,IAAY;QACd,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACnC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ;YAAE,OAAO,SAAS,CAAA;QAC9C,OAAO,KAAK,CAAA;IACd,CAAC;IAED,2BAA2B;IAC3B,IAAI;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;IAC7D,CAAC;IAED,gCAAgC;IAChC,KAAK;QACH,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IAChF,CAAC;IAED;iFAC6E;IAC7E,OAAO;QACL,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;IAClC,CAAC;IAED,QAAQ,CAAC,IAAY;QACnB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC9B,CAAC;CACF;AAED;;;+CAG+C;AAC/C,MAAM,kBAAkB,GAAG,EAAE,CAAA;AAE7B;;;;;mEAKmE;AACnE,MAAM,UAAU,yBAAyB,CAAC,KAAsB;IAC9D,MAAM,KAAK,GAAa,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAA;IAClD,KAAK,CAAC,IAAI,CAAC,kCAAkC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAA;IACzD,KAAK,CAAC,IAAI,CACR,uHAAuH,CACxH,CAAA;IACD,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,gCAAgC,CAAC,CAAA;QAChD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAA;QACtD,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAC3C,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;YAC5C,KAAK,CAAC,IAAI,CAAC,aAAa,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,kBAAkB,yBAAyB,CAAC,CAAA;QAC3F,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC;AAED;;uCAEuC;AACvC,MAAM,UAAU,kBAAkB,CAAC,KAAsB;IACvD,OAAO,0BAA0B,KAAK,CAAC,IAAI,OAAO,yBAAyB,CAAC,KAAK,CAAC,sBAAsB,CAAA;AAC1G,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAA0B,EAAE;IACpE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAA;IACzF,OAAO,IAAI,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;AAC5C,CAAC;AAED;;;gDAGgD;AAChD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,QAAuB,EACvB,OAA0B,EAAE;IAE5B,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAA;IACzF,OAAO,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;AAC1C,CAAC"}

package/dist/skills/settings.d.ts

@@ -0,0 +1,13 @@
+export type SkillSettingsScope = 'user' | 'project';
+export interface SkillSettings {
+    disabledSkills?: string[];
+}
+export declare function skillSettingsPath(scope: SkillSettingsScope): string;
+export declare function loadDisabledSkillsSet(): Promise<Set<string>>;
+/** Toggle a skill's disabled state in the given scope. `disable=true` adds
+ *  the name; `disable=false` removes it. Returns the action that actually
+ *  happened so the caller can render an accurate message
+ *  ("already disabled" vs "disabled"). */
+export declare function setSkillDisabled(name: string, scope: SkillSettingsScope, disable: boolean): Promise<'changed' | 'noop'>;
+export declare function getScopedDisabledSkills(scope: SkillSettingsScope): Promise<string[]>;
+//# sourceMappingURL=settings.d.ts.map

package/dist/skills/settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.d.ts","sourceRoot":"","sources":["../../src/skills/settings.ts"],"names":[],"mappings":"AAgBA,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,SAAS,CAAA;AAEnD,MAAM,WAAW,aAAa;IAC5B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;CAC1B;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAGnE;AA4CD,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAMlE;AAED;;;0CAG0C;AAC1C,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,kBAAkB,EACzB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,SAAS,GAAG,MAAM,CAAC,CAa7B;AAED,wBAAsB,uBAAuB,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAG1F"}