@x-code-cli/core 0.2.9 → 0.3.0

package/dist/plugins/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/plugins/types.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C,EAAE;AACF,wEAAwE;AACxE,uEAAuE;AACvE,yEAAyE;AACzE,oEAAoE;AACpE,wEAAwE;AACxE,gBAAgB;AAChB,EAAE;AACF,sEAAsE;AACtE,2EAA2E;AAC3E,sEAAsE;AACtE,yEAAyE;AACzE,0CAA0C"}

package/dist/plugins/user-config.d.ts

@@ -0,0 +1,22 @@
+/** Value type for a single field. The manifest `type` field (string /
+ *  number / boolean) is enforced at prompt time, but we round-trip
+ *  through JSON which only knows these three primitives anyway. */
+export type UserConfigValue = string | number | boolean;
+/** Per-plugin user-config map: keyed by the manifest's `key` field. */
+export type PluginUserConfig = Record<string, UserConfigValue>;
+/** Read the saved config for one plugin. Returns an empty object when
+ *  the plugin has no saved config yet — caller can default keys from
+ *  the manifest. */
+export declare function getPluginUserConfig(pluginId: string): Promise<PluginUserConfig>;
+/** Write the config for one plugin. Merges with existing fields rather
+ *  than replacing — caller can call this once per field if they want
+ *  (e.g. interactive prompt loop). */
+export declare function setPluginUserConfig(pluginId: string, values: PluginUserConfig): Promise<void>;
+/** Drop the config for one plugin (e.g. on uninstall). */
+export declare function clearPluginUserConfig(pluginId: string): Promise<void>;
+/** Materialise a plugin's user-config map as an env-var record ready to
+ *  be merged into a child process's environment. Each manifest key
+ *  becomes the env var name; numbers and booleans coerce to their
+ *  string forms. Unset fields are skipped (env vars left untouched). */
+export declare function getPluginUserConfigEnv(pluginId: string): Promise<Record<string, string>>;
+//# sourceMappingURL=user-config.d.ts.map

package/dist/plugins/user-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-config.d.ts","sourceRoot":"","sources":["../../src/plugins/user-config.ts"],"names":[],"mappings":"AAmCA;;mEAEmE;AACnE,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAA;AAEvD,uEAAuE;AACvE,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;AAgC9D;;oBAEoB;AACpB,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAGrF;AAED;;sCAEsC;AACtC,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAInG;AAED,0DAA0D;AAC1D,wBAAsB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAK3E;AAED;;;wEAGwE;AACxE,wBAAsB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAO9F"}

package/dist/plugins/user-config.js

@@ -0,0 +1,96 @@
+// @x-code-cli/core — Plugin userConfig storage
+//
+// Each plugin can declare a `userConfig` block in its manifest — a list of
+// fields the plugin needs from the user (API keys, account ids, working
+// directories, etc). At install time the CLI prompts for each field's
+// value; this module owns the on-disk persistence layer.
+//
+// Layout:
+//
+//   ~/.x-code/plugins/user-config.json    →  {
+//                                              [pluginId]: { [key]: <value> }
+//                                            }
+//
+// Storage format is a plain JSON map; the file is created with 0600
+// (owner-read-write only) so a process in another user's session can't
+// read sensitive values. This is NOT a substitute for a real OS keychain
+// (macOS Keychain / Windows Credential Manager / Linux libsecret) — it's
+// a pragmatic v1 that avoids the native-build complexity. The
+// `sensitive: true` field still drives mask-on-input at prompt time; only
+// the at-rest storage shares one file.
+//
+// A future enhancement will move `sensitive` entries to a real keychain.
+// The reader merges from both sources, so adding it later is a non-
+// breaking change.
+//
+// Why not split sensitive vs non-sensitive into separate files: it would
+// just multiply file IO without raising the security bar (both files live
+// in the same dir with the same perms). Real protection requires a real
+// keychain; until then, one file is honest about what we're doing.
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { debugLog } from '../utils.js';
+import { pluginsRoot } from './paths.js';
+function userConfigPath() {
+    return path.join(pluginsRoot(), 'user-config.json');
+}
+async function readFile() {
+    try {
+        const raw = await fs.readFile(userConfigPath(), 'utf-8');
+        const parsed = JSON.parse(raw);
+        if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed))
+            return {};
+        return parsed;
+    }
+    catch (err) {
+        if (err.code === 'ENOENT')
+            return {};
+        debugLog('plugins.user-config-read-error', String(err));
+        return {};
+    }
+}
+async function writeFile(data) {
+    const p = userConfigPath();
+    await fs.mkdir(path.dirname(p), { recursive: true });
+    // 0600 keeps the file readable only by the owning user. On Windows
+    // this is a no-op (fs.chmod doesn't translate to ACLs the same way) —
+    // there's nothing meaningful we can do without shelling out to icacls.
+    // The keychain followup will solve Windows properly.
+    await fs.writeFile(p, JSON.stringify(data, null, 2) + '\n', { mode: 0o600 });
+}
+/** Read the saved config for one plugin. Returns an empty object when
+ *  the plugin has no saved config yet — caller can default keys from
+ *  the manifest. */
+export async function getPluginUserConfig(pluginId) {
+    const all = await readFile();
+    return all[pluginId] ?? {};
+}
+/** Write the config for one plugin. Merges with existing fields rather
+ *  than replacing — caller can call this once per field if they want
+ *  (e.g. interactive prompt loop). */
+export async function setPluginUserConfig(pluginId, values) {
+    const all = await readFile();
+    all[pluginId] = { ...(all[pluginId] ?? {}), ...values };
+    await writeFile(all);
+}
+/** Drop the config for one plugin (e.g. on uninstall). */
+export async function clearPluginUserConfig(pluginId) {
+    const all = await readFile();
+    if (!(pluginId in all))
+        return;
+    delete all[pluginId];
+    await writeFile(all);
+}
+/** Materialise a plugin's user-config map as an env-var record ready to
+ *  be merged into a child process's environment. Each manifest key
+ *  becomes the env var name; numbers and booleans coerce to their
+ *  string forms. Unset fields are skipped (env vars left untouched). */
+export async function getPluginUserConfigEnv(pluginId) {
+    const cfg = await getPluginUserConfig(pluginId);
+    const env = {};
+    for (const [k, v] of Object.entries(cfg)) {
+        env[k] = String(v);
+    }
+    return env;
+}
+//# sourceMappingURL=user-config.js.map

package/dist/plugins/user-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-config.js","sourceRoot":"","sources":["../../src/plugins/user-config.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAC/C,EAAE;AACF,2EAA2E;AAC3E,wEAAwE;AACxE,sEAAsE;AACtE,yDAAyD;AACzD,EAAE;AACF,UAAU;AACV,EAAE;AACF,+CAA+C;AAC/C,8EAA8E;AAC9E,+CAA+C;AAC/C,EAAE;AACF,oEAAoE;AACpE,uEAAuE;AACvE,yEAAyE;AACzE,yEAAyE;AACzE,8DAA8D;AAC9D,0EAA0E;AAC1E,uCAAuC;AACvC,EAAE;AACF,yEAAyE;AACzE,oEAAoE;AACpE,mBAAmB;AACnB,EAAE;AACF,yEAAyE;AACzE,0EAA0E;AAC1E,wEAAwE;AACxE,mEAAmE;AACnE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AACjC,OAAO,IAAI,MAAM,WAAW,CAAA;AAE5B,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AACtC,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAaxC,SAAS,cAAc;IACrB,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,kBAAkB,CAAC,CAAA;AACrD,CAAC;AAED,KAAK,UAAU,QAAQ;IACrB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,OAAO,CAAC,CAAA;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAA;QACzC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,CAAA;QAC7E,OAAO,MAAwB,CAAA;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAA;QAC/D,QAAQ,CAAC,gCAAgC,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;QACvD,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAoB;IAC3C,MAAM,CAAC,GAAG,cAAc,EAAE,CAAA;IAC1B,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACpD,mEAAmE;IACnE,sEAAsE;IACtE,uEAAuE;IACvE,qDAAqD;IACrD,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;AAC9E,CAAC;AAED;;oBAEoB;AACpB,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,QAAgB;IACxD,MAAM,GAAG,GAAG,MAAM,QAAQ,EAAE,CAAA;IAC5B,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAA;AAC5B,CAAC;AAED;;sCAEsC;AACtC,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,QAAgB,EAAE,MAAwB;IAClF,MAAM,GAAG,GAAG,MAAM,QAAQ,EAAE,CAAA;IAC5B,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,MAAM,EAAE,CAAA;IACvD,MAAM,SAAS,CAAC,GAAG,CAAC,CAAA;AACtB,CAAC;AAED,0DAA0D;AAC1D,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,QAAgB;IAC1D,MAAM,GAAG,GAAG,MAAM,QAAQ,EAAE,CAAA;IAC5B,IAAI,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC;QAAE,OAAM;IAC9B,OAAO,GAAG,CAAC,QAAQ,CAAC,CAAA;IACpB,MAAM,SAAS,CAAC,GAAG,CAAC,CAAA;AACtB,CAAC;AAED;;;wEAGwE;AACxE,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,QAAgB;IAC3D,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,QAAQ,CAAC,CAAA;IAC/C,MAAM,GAAG,GAA2B,EAAE,CAAA;IACtC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;IACpB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/providers/cache-control.d.ts

@@ -5,6 +5,11 @@ export interface CacheControlArgs {
     system: string;
     /** Conversation messages to send. */
     messages: ModelMessage[];
+    /** Tool registry passed to streamText. For Anthropic we tag the last entry
+     *  with cache_control so the whole tools schema enters the cache prefix.
+     *  buildTools() returns the same Record reference for the session, so key
+     *  order — and therefore the cached prefix — is byte-stable across turns. */
+    tools?: Record<string, any>;
     /** provider:model id used to select the caching strategy. */
     modelId: string;
     /** Stable per-session key. Used by OpenAI's `promptCacheKey` to pin
@@ -17,6 +22,10 @@ export interface CacheControlResult {
      *  called without a separate `system` param. */
     system?: string;
     messages: ModelMessage[];
+    /** For Anthropic, a shallow-cloned tools record with cache_control attached
+     *  to the last entry. Other providers get the input record returned as-is
+     *  (or undefined if none was passed). */
+    tools?: Record<string, any>;
     /** Top-level providerOptions to pass through to streamText. */
     providerOptions?: Record<string, unknown>;
 }

package/dist/providers/cache-control.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cache-control.d.ts","sourceRoot":"","sources":["../../src/providers/cache-control.ts"],"names":[],"mappings":"AA6BA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,IAAI,CAAA;AAWtC,MAAM,WAAW,gBAAgB;IAC/B;uDACmD;IACnD,MAAM,EAAE,MAAM,CAAA;IACd,qCAAqC;IACrC,QAAQ,EAAE,YAAY,EAAE,CAAA;IACxB,6DAA6D;IAC7D,OAAO,EAAE,MAAM,CAAA;IACf;sDACkD;IAClD,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC;;oDAEgD;IAChD,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,YAAY,EAAE,CAAA;IACxB,+DAA+D;IAC/D,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC1C;AAyBD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,gBAAgB,GAAG,kBAAkB,CAkC5E"}
+{"version":3,"file":"cache-control.d.ts","sourceRoot":"","sources":["../../src/providers/cache-control.ts"],"names":[],"mappings":"AAkCA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,IAAI,CAAA;AAYtC,MAAM,WAAW,gBAAgB;IAC/B;uDACmD;IACnD,MAAM,EAAE,MAAM,CAAA;IACd,qCAAqC;IACrC,QAAQ,EAAE,YAAY,EAAE,CAAA;IACxB;;;iFAG6E;IAE7E,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC3B,6DAA6D;IAC7D,OAAO,EAAE,MAAM,CAAA;IACf;sDACkD;IAClD,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC;;oDAEgD;IAChD,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,YAAY,EAAE,CAAA;IACxB;;6CAEyC;IAEzC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC3B,+DAA+D;IAC/D,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC1C;AAyBD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,gBAAgB,GAAG,kBAAkB,CAoC5E"}

package/dist/providers/cache-control.js

@@ -1,9 +1,10 @@
 import { providerOf } from './capabilities.js';
 /** Max messages we attach an Anthropic cache breakpoint to. Anthropic allows
  *  up to 4 `cache_control` blocks per request; we spend one on the system
- *  prompt, leaving three for the message tail. Two is the sweet spot from
- *  opencode's testing — a third breakpoint costs a cache-write against a
- *  region (the just-before-last message) that's about to be evicted anyway. */
+ *  prompt and one on the last tool definition, leaving two for the message
+ *  tail. Two is the sweet spot from opencode's testing — a third message
+ *  breakpoint costs a cache-write against a region (the just-before-last
+ *  message) that's about to be evicted anyway. */
 const MESSAGE_CACHE_BREAKPOINTS = 2;
 /** Attach the given providerOptions entry to a message non-destructively. */
 function tagMessage(msg, provider, entry) {
@@ -42,6 +43,7 @@ export function applyCacheControl(args) {
         return {
             system: undefined,
             messages: [anthropicSystemMessage(args.system), ...tagged],
+            tools: tagLastTool(args.tools),
         };
     }
     if (provider === 'openai') {
@@ -51,6 +53,7 @@ export function applyCacheControl(args) {
         return {
             system: args.system,
             messages: args.messages,
+            tools: args.tools,
             providerOptions: {
                 openai: { promptCacheKey: args.sessionId, store: false },
             },
@@ -59,6 +62,30 @@ export function applyCacheControl(args) {
     // OpenAI-compatible & Gemini: no explicit flags, just rely on stable prefix.
     // Callers must ensure buildSystemPrompt is cached in LoopState so the same
     // system string is re-sent every turn.
-    return { system: args.system, messages: args.messages };
+    return { system: args.system, messages: args.messages, tools: args.tools };
+}
+/** Shallow-clone `tools` and attach an Anthropic cache_control breakpoint to
+ *  the last entry, so the entire tools schema enters one cached prefix slot.
+ *  Returns the input unchanged when there are no tools — Anthropic rejects
+ *  empty `cache_control` on a non-existent block and there's nothing to
+ *  cache anyway. */
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+function tagLastTool(tools) {
+    if (!tools)
+        return tools;
+    const names = Object.keys(tools);
+    if (names.length === 0)
+        return tools;
+    const lastName = names[names.length - 1];
+    const lastTool = tools[lastName];
+    const existing = (lastTool?.providerOptions ?? {});
+    const tagged = {
+        ...lastTool,
+        providerOptions: {
+            ...existing,
+            anthropic: { ...(existing.anthropic ?? {}), cacheControl: { type: 'ephemeral' } },
+        },
+    };
+    return { ...tools, [lastName]: tagged };
 }
 //# sourceMappingURL=cache-control.js.map

package/dist/providers/cache-control.js.map

@@ -1 +1 @@
-{"version":3,"file":"cache-control.js","sourceRoot":"","sources":["../../src/providers/cache-control.ts"],"names":[],"mappings":"AA+BA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAE9C;;;;+EAI+E;AAC/E,MAAM,yBAAyB,GAAG,CAAC,CAAA;AAyBnC,6EAA6E;AAC7E,SAAS,UAAU,CAAC,GAAiB,EAAE,QAAgB,EAAE,KAA8B;IACrF,MAAM,QAAQ,GAAI,GAAqE,CAAC,eAAe,IAAI,EAAE,CAAA;IAC7G,OAAO;QACL,GAAG,GAAG;QACN,eAAe,EAAE;YACf,GAAG,QAAQ;YACX,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,KAAK,EAAE;SACxD;KACc,CAAA;AACnB,CAAC;AAED,yEAAyE;AACzE,SAAS,sBAAsB,CAAC,MAAc;IAC5C,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,MAAM;QACf,eAAe,EAAE;YACf,SAAS,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE;SACnD;KACyB,CAAA;AAC9B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAsB;IACtD,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAEzC,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;QAC7B,uEAAuE;QACvE,iEAAiE;QACjE,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,yBAAyB,CAAC,CAAA;QACrE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAA;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACrC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CACzF,CAAA;QACD,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,QAAQ,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC;SAC3D,CAAA;IACH,CAAC;IAED,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,yEAAyE;QACzE,sEAAsE;QACtE,iDAAiD;QACjD,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,eAAe,EAAE;gBACf,MAAM,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE;aACzD;SACF,CAAA;IACH,CAAC;IAED,6EAA6E;IAC7E,2EAA2E;IAC3E,uCAAuC;IACvC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAA;AACzD,CAAC"}
+{"version":3,"file":"cache-control.js","sourceRoot":"","sources":["../../src/providers/cache-control.ts"],"names":[],"mappings":"AAoCA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAE9C;;;;;kDAKkD;AAClD,MAAM,yBAAyB,GAAG,CAAC,CAAA;AAoCnC,6EAA6E;AAC7E,SAAS,UAAU,CAAC,GAAiB,EAAE,QAAgB,EAAE,KAA8B;IACrF,MAAM,QAAQ,GAAI,GAAqE,CAAC,eAAe,IAAI,EAAE,CAAA;IAC7G,OAAO;QACL,GAAG,GAAG;QACN,eAAe,EAAE;YACf,GAAG,QAAQ;YACX,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,KAAK,EAAE;SACxD;KACc,CAAA;AACnB,CAAC;AAED,yEAAyE;AACzE,SAAS,sBAAsB,CAAC,MAAc;IAC5C,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,MAAM;QACf,eAAe,EAAE;YACf,SAAS,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE;SACnD;KACyB,CAAA;AAC9B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAsB;IACtD,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAEzC,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;QAC7B,uEAAuE;QACvE,iEAAiE;QACjE,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,yBAAyB,CAAC,CAAA;QACrE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAA;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACrC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CACzF,CAAA;QACD,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,QAAQ,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC;YAC1D,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;SAC/B,CAAA;IACH,CAAC;IAED,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,yEAAyE;QACzE,sEAAsE;QACtE,iDAAiD;QACjD,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,eAAe,EAAE;gBACf,MAAM,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE;aACzD;SACF,CAAA;IACH,CAAC;IAED,6EAA6E;IAC7E,2EAA2E;IAC3E,uCAAuC;IACvC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAA;AAC5E,CAAC;AAED;;;;oBAIoB;AACpB,8DAA8D;AAC9D,SAAS,WAAW,CAAC,KAAsC;IACzD,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAA;IACxB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACpC,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IACxC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAA;IAChC,MAAM,QAAQ,GAAG,CAAC,QAAQ,EAAE,eAAe,IAAI,EAAE,CAA4C,CAAA;IAC7F,MAAM,MAAM,GAAG;QACb,GAAG,QAAQ;QACX,eAAe,EAAE;YACf,GAAG,QAAQ;YACX,SAAS,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE;SAClF;KACF,CAAA;IACD,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;AACzC,CAAC"}

package/dist/skills/loader.d.ts

@@ -0,0 +1,19 @@
+import type { SkillDefinition } from './registry.js';
+export interface LoadSkillsOptions {
+    /** Extra skill directories to scan after the built-in user + project
+     *  paths. Used to fold plugin-contributed `skills/` directories into
+     *  the same registry — see packages/core/src/plugins/integration.ts.
+     *  Order matters: later entries win on name collision. Plugin skills
+     *  are scanned BEFORE project skills (so a user-authored project skill
+     *  can override a plugin skill of the same name). */
+    extraDirs?: ReadonlyArray<{
+        dir: string;
+        pluginId: string;
+    }>;
+}
+/** Load skills from user + project directories, plus any extra dirs
+ *  passed in (used by the plugin system to fold in plugin-contributed
+ *  skill directories). Environment variable `XC_SKILLS_DIR` overrides
+ *  the built-in paths for testing (extras are still honoured). */
+export declare function loadSkills(opts?: LoadSkillsOptions): Promise<SkillDefinition[]>;
+//# sourceMappingURL=loader.d.ts.map

package/dist/skills/loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/skills/loader.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AA0KpD,MAAM,WAAW,iBAAiB;IAChC;;;;;yDAKqD;IACrD,SAAS,CAAC,EAAE,aAAa,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAC7D;AAED;;;kEAGkE;AAClE,wBAAsB,UAAU,CAAC,IAAI,GAAE,iBAAsB,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAkBzF"}

package/dist/skills/loader.js

@@ -0,0 +1,197 @@
+// @x-code-cli/core — Skill loader
+//
+// Scans ~/.x-code/skills/*/SKILL.md and <repo-root>/.x-code/skills/*/SKILL.md
+// for user-defined skills with YAML frontmatter. The subdirectory layout
+// mirrors all major competitors (Gemini CLI, Opencode, Codex) and allows
+// future support files alongside SKILL.md.
+//
+// Priority: project-level skills override user-level skills of the same name.
+// Bad files are skipped with a warning — one broken SKILL.md must never
+// crash the CLI.
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { z } from 'zod';
+import { USER_XCODE_DIR, XCODE_DIR } from '../utils.js';
+const SKILL_FILENAME = 'SKILL.md';
+/** Hard upper bound on the file count we list per skill — keeps the
+ *  activation payload bounded even for skills that ship dozens of
+ *  references / assets / scripts. Skills exceeding this get a truncation
+ *  marker appended so the model knows the list isn't exhaustive. */
+const MAX_LISTED_FILES = 50;
+/** Directory names skipped while listing a skill's bundled files —
+ *  hidden dirs and obvious heavy ones that almost never contain skill
+ *  resources. Listed by basename, not glob. */
+const SKILL_FILE_LIST_SKIP_DIRS = new Set([
+    'node_modules',
+    '__pycache__',
+    '.git',
+    '.venv',
+    'venv',
+    'dist',
+    'build',
+    'target',
+]);
+const frontmatterSchema = z.object({
+    name: z.string().min(1),
+    description: z.string().min(1),
+});
+/** Walk a skill directory and return relative paths of its non-hidden
+ *  files (excluding SKILL.md itself). Used at load time so SkillRegistry
+ *  has a ready-to-inject list of bundled resources — Opencode and
+ *  Gemini CLI do the same listing at activation, but X-Code caches it
+ *  alongside the SkillDefinition since the registry is frozen for the
+ *  session anyway (`/skill refresh` rebuilds). */
+async function listSkillFiles(skillDir) {
+    const out = [];
+    async function walk(currentDir) {
+        if (out.length >= MAX_LISTED_FILES)
+            return;
+        let entries;
+        try {
+            entries = await fs.readdir(currentDir, { withFileTypes: true });
+        }
+        catch {
+            return;
+        }
+        for (const entry of entries) {
+            if (out.length >= MAX_LISTED_FILES)
+                return;
+            if (entry.name.startsWith('.'))
+                continue;
+            if (entry.isDirectory()) {
+                if (SKILL_FILE_LIST_SKIP_DIRS.has(entry.name))
+                    continue;
+                await walk(path.join(currentDir, entry.name));
+                continue;
+            }
+            if (!entry.isFile())
+                continue;
+            const fullPath = path.join(currentDir, entry.name);
+            const rel = path.relative(skillDir, fullPath).split(path.sep).join('/');
+            if (rel === SKILL_FILENAME)
+                continue;
+            out.push(rel);
+        }
+    }
+    await walk(skillDir);
+    return out.sort();
+}
+/** Minimal YAML frontmatter parser — reuses the same subset logic as
+ *  sub-agent loader: string scalars only, no dependency on gray-matter. */
+function parseFrontmatter(raw) {
+    const match = raw.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n?([\s\S]*)$/);
+    if (!match)
+        return null;
+    const yamlBlock = match[1];
+    const body = match[2];
+    const data = {};
+    // Fold YAML continuation lines: an indented non-empty line is joined to
+    // the previous line with a single space. Mirrors the folded-scalar form
+    // used by skill SKILL.md files where a long `description:` is wrapped
+    // with 2-space indented continuations.
+    const foldedLines = [];
+    for (const line of yamlBlock.split(/\r?\n/)) {
+        if (/^\s/.test(line) && line.trim() && foldedLines.length > 0) {
+            foldedLines[foldedLines.length - 1] += ' ' + line.trim();
+        }
+        else {
+            foldedLines.push(line);
+        }
+    }
+    for (const line of foldedLines) {
+        const trimmed = line.trim();
+        if (!trimmed || trimmed.startsWith('#'))
+            continue;
+        const colonIdx = trimmed.indexOf(':');
+        if (colonIdx < 1)
+            continue;
+        const key = trimmed.slice(0, colonIdx).trim();
+        let value = trimmed.slice(colonIdx + 1).trim();
+        if ((value.startsWith('"') && value.endsWith('"')) || (value.startsWith("'") && value.endsWith("'"))) {
+            value = value.slice(1, -1);
+        }
+        data[key] = value;
+    }
+    return { data, body };
+}
+async function loadSkillsFromDir(dir, source, pluginId) {
+    const skills = [];
+    let entries;
+    try {
+        entries = await fs.readdir(dir);
+    }
+    catch {
+        return skills;
+    }
+    for (const entry of entries) {
+        const skillDir = path.join(dir, entry);
+        const skillFile = path.join(skillDir, SKILL_FILENAME);
+        try {
+            await fs.access(skillFile);
+        }
+        catch {
+            continue;
+        }
+        try {
+            const raw = await fs.readFile(skillFile, 'utf-8');
+            const parsed = parseFrontmatter(raw);
+            if (!parsed) {
+                console.error(`[skills] Skipping ${skillFile}: no valid YAML frontmatter`);
+                continue;
+            }
+            const result = frontmatterSchema.safeParse(parsed.data);
+            if (!result.success) {
+                console.error(`[skills] Skipping ${skillFile}: invalid frontmatter — ${result.error.issues.map((i) => i.message).join(', ')}`);
+                continue;
+            }
+            const files = await listSkillFiles(skillDir);
+            skills.push({
+                name: result.data.name,
+                description: result.data.description,
+                content: parsed.body.trim(),
+                source,
+                dir: skillDir,
+                files,
+                ...(pluginId ? { pluginId } : {}),
+            });
+        }
+        catch (err) {
+            console.error(`[skills] Skipping ${skillFile}: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    return skills;
+}
+/** Load skills from user + project directories, plus any extra dirs
+ *  passed in (used by the plugin system to fold in plugin-contributed
+ *  skill directories). Environment variable `XC_SKILLS_DIR` overrides
+ *  the built-in paths for testing (extras are still honoured). */
+export async function loadSkills(opts = {}) {
+    const override = process.env.XC_SKILLS_DIR;
+    if (override) {
+        const overrideSkills = await loadSkillsFromDir(override, 'project');
+        return [...overrideSkills, ...(await loadFromExtras(opts.extraDirs))];
+    }
+    const userDir = path.join(USER_XCODE_DIR, 'skills');
+    const projectDir = path.join(process.cwd(), XCODE_DIR, 'skills');
+    const userSkills = await loadSkillsFromDir(userDir, 'user');
+    const pluginSkills = await loadFromExtras(opts.extraDirs);
+    const projectSkills = await loadSkillsFromDir(projectDir, 'project');
+    // Merge order — last-wins in the registry (project overrides plugin
+    // overrides user builtin). This matches the precedence we tell users:
+    // a project-level skill always overrides anything from a plugin.
+    return [...userSkills, ...pluginSkills, ...projectSkills];
+}
+async function loadFromExtras(extras) {
+    if (!extras || extras.length === 0)
+        return [];
+    const out = [];
+    for (const { dir, pluginId } of extras) {
+        // Plugin-provided skills' filesystem source is technically the cache
+        // dir under ~/.x-code/plugins/cache/..., which makes 'user' the
+        // closest fit (it's installed user-wide, not per-project). `pluginId`
+        // carries the real provenance for the UI.
+        out.push(...(await loadSkillsFromDir(dir, 'user', pluginId)));
+    }
+    return out;
+}
+//# sourceMappingURL=loader.js.map

package/dist/skills/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/skills/loader.ts"],"names":[],"mappings":"AAAA,kCAAkC;AAClC,EAAE;AACF,8EAA8E;AAC9E,yEAAyE;AACzE,yEAAyE;AACzE,2CAA2C;AAC3C,EAAE;AACF,8EAA8E;AAC9E,wEAAwE;AACxE,iBAAiB;AACjB,OAAO,EAAE,MAAM,kBAAkB,CAAA;AACjC,OAAO,IAAI,MAAM,WAAW,CAAA;AAE5B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAGvD,MAAM,cAAc,GAAG,UAAU,CAAA;AAEjC;;;oEAGoE;AACpE,MAAM,gBAAgB,GAAG,EAAE,CAAA;AAE3B;;+CAE+C;AAC/C,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC;IACxC,cAAc;IACd,aAAa;IACb,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,OAAO;IACP,QAAQ;CACT,CAAC,CAAA;AAEF,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC/B,CAAC,CAAA;AAEF;;;;;kDAKkD;AAClD,KAAK,UAAU,cAAc,CAAC,QAAgB;IAC5C,MAAM,GAAG,GAAa,EAAE,CAAA;IAExB,KAAK,UAAU,IAAI,CAAC,UAAkB;QACpC,IAAI,GAAG,CAAC,MAAM,IAAI,gBAAgB;YAAE,OAAM;QAE1C,IAAI,OAAmC,CAAA;QACvC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,OAAM;QACR,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,GAAG,CAAC,MAAM,IAAI,gBAAgB;gBAAE,OAAM;YAC1C,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAQ;YACxC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,IAAI,yBAAyB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;oBAAE,SAAQ;gBACvD,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;gBAC7C,SAAQ;YACV,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;gBAAE,SAAQ;YAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;YAClD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACvE,IAAI,GAAG,KAAK,cAAc;gBAAE,SAAQ;YACpC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACf,CAAC;IACH,CAAC;IAED,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAA;IACpB,OAAO,GAAG,CAAC,IAAI,EAAE,CAAA;AACnB,CAAC;AAED;2EAC2E;AAC3E,SAAS,gBAAgB,CAAC,GAAW;IACnC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAA;IACtE,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IAEvB,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAE,CAAA;IAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAA;IACtB,MAAM,IAAI,GAA4B,EAAE,CAAA;IAExC,wEAAwE;IACxE,wEAAwE;IACxE,sEAAsE;IACtE,uCAAuC;IACvC,MAAM,WAAW,GAAa,EAAE,CAAA;IAChC,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5C,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9D,WAAW,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QAC1D,CAAC;aAAM,CAAC;YACN,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACxB,CAAC;IACH,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QAC3B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAQ;QAEjD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QACrC,IAAI,QAAQ,GAAG,CAAC;YAAE,SAAQ;QAE1B,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAA;QAC7C,IAAI,KAAK,GAAW,OAAO,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QAEtD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACrG,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QAC5B,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;IACnB,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;AACvB,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,GAAW,EACX,MAAiC,EACjC,QAAiB;IAEjB,MAAM,MAAM,GAAsB,EAAE,CAAA;IAEpC,IAAI,OAAiB,CAAA;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAA;IACf,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QACtC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAA;QAErD,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,SAAQ;QACV,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;YACjD,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAA;YACpC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,CAAC,KAAK,CAAC,qBAAqB,SAAS,6BAA6B,CAAC,CAAA;gBAC1E,SAAQ;YACV,CAAC;YAED,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YACvD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,CAAC,KAAK,CACX,qBAAqB,SAAS,2BAA2B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChH,CAAA;gBACD,SAAQ;YACV,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,CAAA;YAE5C,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;gBACtB,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;gBACpC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE;gBAC3B,MAAM;gBACN,GAAG,EAAE,QAAQ;gBACb,KAAK;gBACL,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClC,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,qBAAqB,SAAS,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACtG,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAYD;;;kEAGkE;AAClE,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAA0B,EAAE;IAC3D,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAA;IAC1C,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;QACnE,OAAO,CAAC,GAAG,cAAc,EAAE,GAAG,CAAC,MAAM,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IACvE,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAA;IACnD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAA;IAEhE,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IAC3D,MAAM,YAAY,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACzD,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;IAEpE,oEAAoE;IACpE,sEAAsE;IACtE,iEAAiE;IACjE,OAAO,CAAC,GAAG,UAAU,EAAE,GAAG,YAAY,EAAE,GAAG,aAAa,CAAC,CAAA;AAC3D,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,MAAsC;IAClE,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAC7C,MAAM,GAAG,GAAsB,EAAE,CAAA;IACjC,KAAK,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,MAAM,EAAE,CAAC;QACvC,qEAAqE;QACrE,gEAAgE;QAChE,sEAAsE;QACtE,0CAA0C;QAC1C,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAA;IAC/D,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/skills/registry.d.ts

@@ -0,0 +1,74 @@
+import { type LoadSkillsOptions } from './loader.js';
+export interface SkillDefinition {
+    name: string;
+    description: string;
+    content: string;
+    source: 'user' | 'project';
+    /** Absolute path to the skill's directory (the one containing SKILL.md).
+     *  Used at activation time so the model can resolve relative paths to
+     *  bundled scripts / references / assets. */
+    dir: string;
+    /** Relative paths of files in the skill directory, excluding SKILL.md and
+     *  hidden / heavy directories. Listed at activation time alongside the body
+     *  so the model knows what bundled resources exist without globbing. Capped
+     *  at MAX_LISTED_FILES — long lists get truncated with a "... N more" marker. */
+    files: string[];
+    /** When this skill comes from a plugin contribution, the owning plugin's
+     *  id (`name@marketplace`). UI shows this as "(from plugin: …)" and
+     *  `/skill uninstall` redirects to `/plugin uninstall`. */
+    pluginId?: string;
+}
+export interface SkillEntry extends SkillDefinition {
+    disabled: boolean;
+}
+/** Summary returned by `reloadSkillRegistry()`. Drives the message
+ *  surface in /skill refresh — caller can show "added: a, b" /
+ *  "removed: c" / "unchanged: d, e" the same way /mcp refresh does. */
+export interface SkillReloadSummary {
+    added: string[];
+    removed: string[];
+    changed: string[];
+    unchanged: string[];
+}
+export declare class SkillRegistry {
+    private byName;
+    constructor(skills: SkillDefinition[], disabled?: ReadonlySet<string>);
+    /** Replace the in-memory skill list with a fresh load. Used by
+     *  /skill refresh — keeps the same SkillRegistry object identity so
+     *  every cached `options.skillRegistry` reference (agent loop, CLI
+     *  slash completion, App.tsx handlers) keeps pointing at the right
+     *  thing. Returns a per-name diff vs the previous state so the
+     *  caller can render an "added / removed / changed / unchanged"
+     *  summary in the user-facing message. */
+    reload(skills: SkillDefinition[], disabled: ReadonlySet<string>): SkillReloadSummary;
+    /** Enabled skill by name. Disabled skills are hidden from the agent loop
+     *  and slash-command dispatch — use `getEntry()` if you need to inspect
+     *  the disabled flag (the /skill list handler does). */
+    get(name: string): SkillDefinition | undefined;
+    /** Enabled skills only. */
+    list(): SkillDefinition[];
+    /** Enabled skill names only. */
+    names(): string[];
+    /** Every loaded skill, with `disabled` flag. Used by /skill list and the
+     *  disable/enable/remove handlers so they can act on disabled skills too. */
+    listAll(): SkillEntry[];
+    getEntry(name: string): SkillEntry | undefined;
+}
+/** Build the exact text that goes inside `<activated_skill name="...">...</activated_skill>`
+ *  for both activation paths (model self-decide via `activateSkill` tool, and
+ *  user explicit `/<skillname>`). Format follows Opencode's convention: body
+ *  first, then a footer with base directory + relative-paths hint + file list.
+ *  Sharing one formatter between the two call sites keeps the byte stream the
+ *  model sees identical regardless of who triggered activation. */
+export declare function formatSkillActivationBody(skill: SkillDefinition): string;
+/** Wrap a skill's activation body in the `<activated_skill name="X">`
+ *  XML envelope. Used by both activation paths so the wrapper is byte-
+ *  identical regardless of trigger. */
+export declare function wrapActivatedSkill(skill: SkillDefinition): string;
+export declare function createSkillRegistry(opts?: LoadSkillsOptions): Promise<SkillRegistry>;
+/** Re-scan skill directories + settings.json, then mutate the given
+ *  registry in place. Caller is responsible for invalidating any
+ *  systemPromptCache that embedded the previous skill list — the
+ *  /skill refresh handler does exactly this. */
+export declare function reloadSkillRegistry(registry: SkillRegistry, opts?: LoadSkillsOptions): Promise<SkillReloadSummary>;
+//# sourceMappingURL=registry.d.ts.map

package/dist/skills/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/skills/registry.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,KAAK,iBAAiB,EAAc,MAAM,aAAa,CAAA;AAGhE,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1B;;iDAE6C;IAC7C,GAAG,EAAE,MAAM,CAAA;IACX;;;qFAGiF;IACjF,KAAK,EAAE,MAAM,EAAE,CAAA;IACf;;+DAE2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,UAAW,SAAQ,eAAe;IACjD,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED;;uEAEuE;AACvE,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,SAAS,EAAE,MAAM,EAAE,CAAA;CACpB;AAED,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAyB;gBAE3B,MAAM,EAAE,eAAe,EAAE,EAAE,QAAQ,GAAE,WAAW,CAAC,MAAM,CAAa;IAShF;;;;;;8CAM0C;IAC1C,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,EAAE,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,kBAAkB;IA+BpF;;4DAEwD;IACxD,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAM9C,2BAA2B;IAC3B,IAAI,IAAI,eAAe,EAAE;IAIzB,gCAAgC;IAChC,KAAK,IAAI,MAAM,EAAE;IAIjB;iFAC6E;IAC7E,OAAO,IAAI,UAAU,EAAE;IAIvB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS;CAG/C;AAQD;;;;;mEAKmE;AACnE,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,CAexE;AAED;;uCAEuC;AACvC,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,CAEjE;AAED,wBAAsB,mBAAmB,CAAC,IAAI,GAAE,iBAAsB,GAAG,OAAO,CAAC,aAAa,CAAC,CAG9F;AAED;;;gDAGgD;AAChD,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,aAAa,EACvB,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,CAG7B"}