@yargote/artifacts-cli 0.0.0-stage → 0.1.0-beta.2

package/src/index.js

@@ -0,0 +1,263 @@
+#!/usr/bin/env node
+import { randomUUID } from 'node:crypto';
+import { constants } from 'node:fs';
+import { open, readFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { join, resolve } from 'node:path';
+import { parseArgs } from 'node:util';
+import { z } from 'zod';
+import { createSchema, publishSchema, updateSchema } from '@yargote/artifacts-contracts';
+import { canonicalResource } from '@yargote/artifacts-contracts/http';
+import { createArtifactHttpClient, HttpError, prepareArtifactEdit } from '@yargote/artifacts-client';
+import { accessToken, login, logout } from "./auth.js";
+import { loadOperation, retainOperation, submitOperation } from "./operations.js";
+import { runSkillsCommand } from "./skills.js";
+const help = `Usage: artifacts COMMAND [OPTIONS]
+
+Global options:
+  --server RESOURCE       Canonical OAuth resource, or ARTIFACTS_SERVER
+  --state-dir DIR         Private local state, or ARTIFACTS_STATE_DIR
+                         Default: ~/.local/state/artifacts
+  --help                 Print this reference
+  --version              Print the installed package version
+
+Commands:
+  skills [list]
+  skills get NAME [--full]
+  skills get --all [--full]
+  skills path [NAME]
+  skills install [NAME] [--agent claude] [--global] [--force]
+  login [--no-browser]
+  logout
+  whoami
+  create --snapshot FILE [--request-id ID] [--response full|compact]
+  create --command FILE
+  list [--limit N] [--cursor CURSOR]
+  read ID [--revision REV] [--response full|compact] [--out FILE [--quiet]]
+  update ID --snapshot FILE --expected-revision REV [--request-id ID]
+         [--response full|compact]
+  update [ID] --command FILE
+  edit ID --changes FILE [--request-id ID]
+  history ID [--limit N] [--before-sequence N] [--summary]
+  publish ID --revision REV --expected-version N [--request-id ID]
+  publish [ID] --command FILE
+  export ID --revision REV --out FILE
+  retry REQUEST_ID
+
+Mutation command files contain the complete create, update, or publish JSON.
+Mutation request IDs default to a random UUID. Commands are retained before
+submission. Retry sends the exact retained command for the same server and owner.
+Read --out saves the returned artifact JSON. Export --out saves the ZIP.
+Read --quiet requires --out and suppresses successful JSON stdout.
+Output files are created exclusively and never overwrite an existing path.
+JSON results go to stdout. Diagnostics and recovery guidance go to stderr.
+ARTIFACTS_ACCESS_TOKEN supplies a token for automation without local login.
+Skills commands work offline without a server, login, or private state.
+They print plain text. Global server and state options are accepted and ignored.
+Skills install defaults to artifacts-cli under .agents/skills in the current
+directory. --agent claude uses .claude/skills. --global uses your home directory.
+The installed discovery file loads instructions through artifacts skills get.
+Identical files stay unchanged. Differing files require --force.
+`;
+class UsageError extends Error {
+}
+const commandOptions = {
+    login: ['no-browser'], logout: [], whoami: [],
+    create: ['snapshot', 'request-id', 'response', 'command'],
+    list: ['limit', 'cursor'], read: ['revision', 'response', 'out', 'quiet'],
+    update: ['snapshot', 'expected-revision', 'request-id', 'response', 'command'],
+    edit: ['changes', 'request-id'], history: ['limit', 'before-sequence', 'summary'],
+    publish: ['revision', 'expected-version', 'request-id', 'command'],
+    export: ['revision', 'out'], retry: [],
+    skills: ['full', 'all', 'agent', 'global', 'force'],
+};
+async function jsonFile(path) {
+    const file = await open(path, constants.O_RDONLY);
+    try {
+        const stat = await file.stat();
+        if (!stat.isFile() || stat.size > 8 * 1024 * 1024)
+            throw new UsageError('JSON input must be a regular file no larger than 8 MiB');
+        return JSON.parse(await file.readFile('utf8'));
+    }
+    finally {
+        await file.close();
+    }
+}
+async function writeOutput(path, bytes) {
+    const file = await open(path, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600);
+    try {
+        await file.writeFile(bytes);
+        await file.sync();
+    }
+    finally {
+        await file.close();
+    }
+}
+async function main() {
+    const { values, positionals, tokens } = parseArgs({
+        allowPositionals: true, tokens: true,
+        options: {
+            server: { type: 'string' }, 'state-dir': { type: 'string' }, help: { type: 'boolean' }, version: { type: 'boolean' },
+            'no-browser': { type: 'boolean' }, command: { type: 'string' }, snapshot: { type: 'string' },
+            changes: { type: 'string' }, 'request-id': { type: 'string' }, response: { type: 'string' },
+            revision: { type: 'string' }, 'expected-revision': { type: 'string' }, 'expected-version': { type: 'string' },
+            limit: { type: 'string' }, cursor: { type: 'string' }, 'before-sequence': { type: 'string' },
+            summary: { type: 'boolean' }, out: { type: 'string' }, quiet: { type: 'boolean' },
+            full: { type: 'boolean' }, all: { type: 'boolean' }, agent: { type: 'string' },
+            global: { type: 'boolean' }, force: { type: 'boolean' },
+        },
+    });
+    const seen = new Set();
+    for (const token of tokens) {
+        if (token.kind !== 'option')
+            continue;
+        if (seen.has(token.name))
+            throw new UsageError(`Option --${token.name} cannot be repeated`);
+        seen.add(token.name);
+    }
+    if (values.version) {
+        const manifest = JSON.parse(await readFile(new URL('../package.json', import.meta.url), 'utf8'));
+        process.stdout.write(`${manifest.version}\n`);
+        return;
+    }
+    if (values.help) {
+        process.stdout.write(help);
+        return;
+    }
+    const [command, ...arguments_] = positionals;
+    if (!command || !Object.hasOwn(commandOptions, command))
+        throw new UsageError('Specify a command. Use artifacts --help for the reference.');
+    for (const option of seen)
+        if (!['server', 'state-dir', 'help', ...commandOptions[command]].includes(option))
+            throw new UsageError(`Option --${option} is not supported by ${command}`);
+    if (command === 'skills')
+        return runSkillsCommand(arguments_, values, seen);
+    const resourceValue = values.server ?? process.env.ARTIFACTS_SERVER;
+    if (!resourceValue)
+        throw new UsageError('Specify --server RESOURCE or ARTIFACTS_SERVER. No production server is selected by default.');
+    const resource = canonicalResource(resourceValue);
+    const stateDir = resolve(values['state-dir'] ?? process.env.ARTIFACTS_STATE_DIR ?? join(homedir(), '.local', 'state', 'artifacts'));
+    function argument(required = true) {
+        if (arguments_.length > 1 || (required && arguments_.length !== 1))
+            throw new UsageError(`${command} requires ${required ? 'one' : 'zero or one'} positional argument`);
+        return arguments_[0];
+    }
+    function none() {
+        if (arguments_.length)
+            throw new UsageError(`${command} does not accept positional arguments`);
+    }
+    function required(name) {
+        const value = values[name];
+        if (typeof value !== 'string' || !value)
+            throw new UsageError(`Specify --${name}`);
+        return value;
+    }
+    function integer(name) {
+        const value = values[name];
+        if (value === undefined)
+            return undefined;
+        if (typeof value !== 'string' || !/^(0|[1-9]\d*)$/.test(value) || !Number.isSafeInteger(Number(value)))
+            throw new UsageError(`--${name} requires a nonnegative safe integer`);
+        return Number(value);
+    }
+    const response = values.response;
+    if (response !== undefined && response !== 'full' && response !== 'compact')
+        throw new UsageError('--response requires full or compact');
+    const quiet = values.quiet ?? false;
+    if (quiet)
+        required('out');
+    let commandToken;
+    const client = createArtifactHttpClient({ resource, accessToken: () => commandToken ??= accessToken({ resource, stateDir }) });
+    async function mutate(mutation) {
+        const owner = await client.identity();
+        const operation = await retainOperation(stateDir, resource, owner.userId, mutation);
+        process.stderr.write(`Retained operation ${operation.command.requestId}. Recover with artifacts retry ${operation.command.requestId} using the same server and state directory.\n`);
+        return submitOperation(client, operation);
+    }
+    async function commandFile(kind) {
+        const extra = [...seen].filter((option) => !['server', 'state-dir', 'command'].includes(option));
+        if (extra.length)
+            throw new UsageError('--command cannot be combined with mutation options');
+        const value = await jsonFile(required('command'));
+        if (kind === 'create') {
+            none();
+            return { kind, command: createSchema.parse(value) };
+        }
+        const mutation = kind === 'update' ? { kind, command: updateSchema.parse(value) } : { kind, command: publishSchema.parse(value) };
+        const id = argument(false);
+        if (id !== undefined && id !== mutation.command.artifactId)
+            throw new UsageError('The positional artifact ID must match the command file');
+        return mutation;
+    }
+    switch (command) {
+        case 'login':
+            none();
+            return login({ resource, stateDir, noBrowser: values['no-browser'] ?? false, onAuthorizationUrl: (url) => { process.stderr.write(`Authorize this login in your browser:\n${url}\n`); } });
+        case 'logout':
+            none();
+            return logout({ resource, stateDir });
+        case 'whoami':
+            none();
+            return client.identity();
+        case 'create': {
+            if (values.command)
+                return mutate(await commandFile('create'));
+            none();
+            return mutate({ kind: 'create', command: createSchema.parse({ requestId: values['request-id'] ?? randomUUID(), snapshot: await jsonFile(required('snapshot')), ...(response === undefined ? {} : { response }) }) });
+        }
+        case 'list':
+            none();
+            return client.list({ ...(values.limit === undefined ? {} : { limit: integer('limit') }), ...(values.cursor === undefined ? {} : { cursor: values.cursor }) });
+        case 'read': {
+            const result = await client.read({ artifactId: argument(), ...(values.revision === undefined ? {} : { revisionId: values.revision }), ...(response === undefined ? {} : { response }) });
+            if (values.out)
+                await writeOutput(values.out, `${JSON.stringify(result, null, 2)}\n`);
+            return quiet ? undefined : result;
+        }
+        case 'update': {
+            if (values.command)
+                return mutate(await commandFile('update'));
+            return mutate({ kind: 'update', command: updateSchema.parse({ artifactId: argument(), requestId: values['request-id'] ?? randomUUID(), expectedRevisionId: required('expected-revision'), snapshot: await jsonFile(required('snapshot')), ...(response === undefined ? {} : { response }) }) });
+        }
+        case 'edit': {
+            const artifactId = argument();
+            const changes = await jsonFile(required('changes'));
+            const input = await prepareArtifactEdit(client, { artifactId, requestId: values['request-id'] ?? randomUUID(), changes: changes });
+            return mutate({ kind: 'update', command: updateSchema.parse(input) });
+        }
+        case 'history': return client.history({ artifactId: argument(), ...(values.limit === undefined ? {} : { limit: integer('limit') }), ...(values['before-sequence'] === undefined ? {} : { beforeSequence: integer('before-sequence') }), ...(values.summary ? { response: 'summary' } : {}) });
+        case 'publish': {
+            if (values.command)
+                return mutate(await commandFile('publish'));
+            required('expected-version');
+            return mutate({ kind: 'publish', command: publishSchema.parse({ artifactId: argument(), requestId: values['request-id'] ?? randomUUID(), revisionId: required('revision'), expectedPublicationVersion: integer('expected-version') }) });
+        }
+        case 'export': {
+            const output = required('out');
+            const archive = await client.export({ artifactId: argument(), revisionId: required('revision') });
+            await writeOutput(output, archive.bytes);
+            return { filename: archive.filename, path: resolve(output), mediaType: archive.mediaType, sha256: archive.sha256, bytes: archive.bytes.byteLength };
+        }
+        case 'retry': {
+            const requestId = argument();
+            const owner = await client.identity();
+            const operation = await loadOperation(stateDir, requestId, resource, owner.userId);
+            process.stderr.write(`Replaying retained ${operation.kind} operation ${requestId}. The result is its retained receipt and may differ from current state.\n`);
+            return submitOperation(client, operation);
+        }
+    }
+}
+try {
+    const result = await main();
+    if (result !== undefined)
+        process.stdout.write(`${JSON.stringify(result)}\n`);
+}
+catch (error) {
+    const body = error instanceof HttpError
+        ? { code: error.code, message: error.message, status: error.status, details: error.details }
+        : error instanceof z.ZodError
+            ? { code: 'invalid_input', message: 'Input does not match the artifact command schema', details: { issues: error.issues } }
+            : { code: error instanceof UsageError || error instanceof TypeError || error instanceof SyntaxError ? 'invalid_arguments' : 'local_error', message: error instanceof Error ? error.message : 'Command failed', details: {} };
+    process.stderr.write(`${JSON.stringify({ error: body })}\n`);
+    process.exitCode = 1;
+}

package/src/operations.d.ts

@@ -0,0 +1,144 @@
+import { z } from 'zod';
+import { createSchema, publishSchema, updateSchema } from '@yargote/artifacts-contracts';
+import type { ArtifactHttpClient } from '@yargote/artifacts-client';
+export declare const operationSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"create">;
+    command: z.ZodObject<{
+        requestId: z.ZodString;
+        snapshot: z.ZodObject<{
+            metadata: z.ZodObject<{
+                title: z.ZodString;
+                description: z.ZodString;
+                custom: z.ZodOptional<z.ZodJSONSchema>;
+            }, z.core.$strict>;
+            content: z.ZodObject<{
+                kind: z.ZodEnum<{
+                    text: "text";
+                    html: "html";
+                    markdown: "markdown";
+                }>;
+                text: z.ZodString;
+            }, z.core.$strict>;
+            files: z.ZodArray<z.ZodObject<{
+                path: z.ZodString;
+                mediaType: z.ZodString;
+                encoding: z.ZodEnum<{
+                    utf8: "utf8";
+                    base64: "base64";
+                }>;
+                data: z.ZodString;
+            }, z.core.$strict>>;
+        }, z.core.$strict>;
+        response: z.ZodOptional<z.ZodEnum<{
+            full: "full";
+            compact: "compact";
+        }>>;
+    }, z.core.$strict>;
+    version: z.ZodLiteral<1>;
+    resource: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    ownerId: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"update">;
+    command: z.ZodObject<{
+        requestId: z.ZodString;
+        artifactId: z.ZodString;
+        expectedRevisionId: z.ZodString;
+        snapshot: z.ZodObject<{
+            metadata: z.ZodObject<{
+                title: z.ZodString;
+                description: z.ZodString;
+                custom: z.ZodOptional<z.ZodJSONSchema>;
+            }, z.core.$strict>;
+            content: z.ZodObject<{
+                kind: z.ZodEnum<{
+                    text: "text";
+                    html: "html";
+                    markdown: "markdown";
+                }>;
+                text: z.ZodString;
+            }, z.core.$strict>;
+            files: z.ZodArray<z.ZodObject<{
+                path: z.ZodString;
+                mediaType: z.ZodString;
+                encoding: z.ZodEnum<{
+                    utf8: "utf8";
+                    base64: "base64";
+                }>;
+                data: z.ZodString;
+            }, z.core.$strict>>;
+        }, z.core.$strict>;
+        response: z.ZodOptional<z.ZodEnum<{
+            full: "full";
+            compact: "compact";
+        }>>;
+    }, z.core.$strict>;
+    version: z.ZodLiteral<1>;
+    resource: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    ownerId: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"publish">;
+    command: z.ZodObject<{
+        requestId: z.ZodString;
+        artifactId: z.ZodString;
+        revisionId: z.ZodString;
+        expectedPublicationVersion: z.ZodNumber;
+    }, z.core.$strict>;
+    version: z.ZodLiteral<1>;
+    resource: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    ownerId: z.ZodString;
+}, z.core.$strict>], "kind">;
+export type PreparedOperation = z.infer<typeof operationSchema>;
+export type Mutation = {
+    kind: 'create';
+    command: z.input<typeof createSchema>;
+} | {
+    kind: 'update';
+    command: z.input<typeof updateSchema>;
+} | {
+    kind: 'publish';
+    command: z.input<typeof publishSchema>;
+};
+export declare function operationPath(stateDir: string, resource: string, requestId: string): string;
+export declare function retainOperation(stateDir: string, resource: string, ownerId: string, mutation: Mutation): Promise<PreparedOperation>;
+export declare function loadOperation(stateDir: string, requestId: string, resource: string, ownerId: string): Promise<PreparedOperation>;
+export declare function submitOperation(client: ArtifactHttpClient, operation: PreparedOperation): Promise<{
+    revisionId: string;
+    version: number;
+    url: string;
+    artifactId: string;
+}> | Promise<{
+    artifactId: string;
+    ownerId: string;
+    headRevisionId: string;
+    publication: {
+        revisionId: string;
+        version: number;
+        url: string;
+    } | null;
+    revision: {
+        id: string;
+        parentRevisionId: string | null;
+        sequence: number;
+        authorUserId: string;
+        authorClientId: string;
+        createdAt: string;
+        sha256: string;
+        snapshot: {
+            metadata: {
+                title: string;
+                description: string;
+                custom?: z.core.util.JSONType | undefined;
+            };
+            content: {
+                kind: "text" | "html" | "markdown";
+                text: string;
+            };
+            files: {
+                path: string;
+                mediaType: string;
+                encoding: "utf8" | "base64";
+                data: string;
+            }[];
+        };
+    };
+} | import("@yargote/artifacts-client").CompactArtifactRead>;

package/src/operations.js

@@ -0,0 +1,90 @@
+import { constants } from 'node:fs';
+import { lstat, mkdir, open } from 'node:fs/promises';
+import { createHash } from 'node:crypto';
+import { join } from 'node:path';
+import { z } from 'zod';
+import { createSchema, publishSchema, updateSchema } from '@yargote/artifacts-contracts';
+import { canonicalResource } from '@yargote/artifacts-contracts/http';
+const binding = {
+    version: z.literal(1),
+    resource: z.string().transform(canonicalResource),
+    ownerId: z.string().min(1).max(128),
+};
+export const operationSchema = z.discriminatedUnion('kind', [
+    z.strictObject({ ...binding, kind: z.literal('create'), command: createSchema }),
+    z.strictObject({ ...binding, kind: z.literal('update'), command: updateSchema }),
+    z.strictObject({ ...binding, kind: z.literal('publish'), command: publishSchema }),
+]);
+export function operationPath(stateDir, resource, requestId) {
+    createSchema.shape.requestId.parse(requestId);
+    return join(stateDir, 'operations', `${createHash('sha256').update(JSON.stringify([canonicalResource(resource), requestId])).digest('hex')}.json`);
+}
+async function privateDirectory(path) {
+    await mkdir(path, { recursive: true, mode: 0o700 });
+    const stat = await lstat(path);
+    if (!stat.isDirectory() || stat.isSymbolicLink() || (process.getuid && stat.uid !== process.getuid()) || (process.platform !== 'win32' && (stat.mode & 0o077) !== 0))
+        throw new Error(`The state directory must be private and owned by the current user: ${path}`);
+}
+export async function retainOperation(stateDir, resource, ownerId, mutation) {
+    const operation = operationSchema.parse({ version: 1, resource, ownerId, ...mutation });
+    await privateDirectory(stateDir);
+    const directory = join(stateDir, 'operations');
+    await privateDirectory(directory);
+    const path = operationPath(stateDir, resource, operation.command.requestId);
+    let file;
+    try {
+        file = await open(path, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600);
+    }
+    catch (error) {
+        if (error.code === 'EEXIST')
+            throw new Error(`An operation already exists for ${operation.command.requestId}. Use artifacts retry ${operation.command.requestId} to send the retained command.`);
+        throw error;
+    }
+    try {
+        await file.writeFile(`${JSON.stringify(operation)}\n`, 'utf8');
+        await file.sync();
+    }
+    finally {
+        await file.close();
+    }
+    if (process.platform !== 'win32') {
+        const handle = await open(directory, constants.O_RDONLY);
+        try {
+            await handle.sync();
+        }
+        finally {
+            await handle.close();
+        }
+    }
+    return operation;
+}
+export async function loadOperation(stateDir, requestId, resource, ownerId) {
+    await privateDirectory(stateDir);
+    await privateDirectory(join(stateDir, 'operations'));
+    const file = await open(operationPath(stateDir, resource, requestId), constants.O_RDONLY | constants.O_NOFOLLOW);
+    let bytes;
+    try {
+        const stat = await file.stat();
+        if (!stat.isFile() || stat.size > 8 * 1024 * 1024 || (process.getuid && stat.uid !== process.getuid()) || (process.platform !== 'win32' && (stat.mode & 0o077) !== 0))
+            throw new Error('The retained operation must be a private regular file no larger than 8 MiB');
+        bytes = await file.readFile();
+    }
+    finally {
+        await file.close();
+    }
+    const operation = operationSchema.parse(JSON.parse(bytes.toString('utf8')));
+    if (operation.command.requestId !== requestId)
+        throw new Error('The retained request ID does not match the requested operation');
+    if (operation.resource !== canonicalResource(resource))
+        throw new Error('The retained operation belongs to a different server resource');
+    if (operation.ownerId !== ownerId)
+        throw new Error('The retained operation belongs to a different owner');
+    return operation;
+}
+export function submitOperation(client, operation) {
+    switch (operation.kind) {
+        case 'create': return client.create(operation.command);
+        case 'update': return client.update(operation.command);
+        case 'publish': return client.publish(operation.command);
+    }
+}

package/src/skills.d.ts

@@ -0,0 +1,9 @@
+interface SkillsOptions {
+    full?: boolean;
+    all?: boolean;
+    agent?: string;
+    global?: boolean;
+    force?: boolean;
+}
+export declare function runSkillsCommand(positionals: string[], options: SkillsOptions, seen: ReadonlySet<string>): Promise<void>;
+export {};

package/src/skills.js

@@ -0,0 +1,166 @@
+import { randomUUID } from 'node:crypto';
+import { constants } from 'node:fs';
+import { lstat, mkdir, open, readFile, readdir, rename, rm } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { dirname, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+const catalogDirectory = resolve(fileURLToPath(new URL(import.meta.url.endsWith('.ts') ? '../../../skills/' : '../skills/', import.meta.url)));
+function parseCommand(positionals, options, seen) {
+    const [kind = 'list', ...arguments_] = positionals;
+    const allowed = { list: [], get: ['all', 'full'], path: [], install: ['agent', 'global', 'force'] };
+    if (!Object.hasOwn(allowed, kind))
+        throw new TypeError(`Unknown skills command ${kind}. Use artifacts --help for the reference.`);
+    for (const option of seen) {
+        if (!['server', 'state-dir', ...allowed[kind]].includes(option))
+            throw new TypeError(`Option --${option} is not supported by skills ${kind}`);
+    }
+    switch (kind) {
+        case 'list':
+            if (arguments_.length)
+                throw new TypeError('skills list does not accept positional arguments');
+            return { kind };
+        case 'get':
+            if (arguments_.length > 1 || (options.all ? arguments_.length !== 0 : arguments_.length !== 1))
+                throw new TypeError('skills get requires either one skill name or --all');
+            return { kind, selection: options.all ? { all: true } : { name: arguments_[0] }, full: options.full ?? false };
+        case 'path':
+            if (arguments_.length > 1)
+                throw new TypeError('skills path accepts zero or one skill name');
+            return { kind, name: arguments_[0] };
+        case 'install':
+            if (arguments_.length > 1)
+                throw new TypeError('skills install accepts zero or one skill name');
+            if (options.agent !== undefined && options.agent !== 'claude')
+                throw new TypeError('--agent requires claude. Omit --agent to install under .agents.');
+            return { kind, name: arguments_[0] ?? 'artifacts-cli', agent: options.agent === 'claude' ? 'claude' : 'agents', global: options.global ?? false, force: options.force ?? false };
+        default:
+            throw new TypeError(`Unknown skills command ${kind}`);
+    }
+}
+async function loadCatalog() {
+    const manifest = JSON.parse(await readFile(new URL('../package.json', import.meta.url), 'utf8'));
+    const names = manifest.artifactsSkills;
+    if (!Array.isArray(names) || names.some((name) => typeof name !== 'string' || !/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(name)) || new Set(names).size !== names.length)
+        throw new Error('Invalid bundled skills declaration');
+    return Promise.all(names.toSorted().map(async (name) => {
+        const directory = join(catalogDirectory, name);
+        const skillText = await readFile(join(directory, 'SKILL.md'));
+        const frontmatter = /^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/.exec(skillText.toString('utf8'))?.[1];
+        const declaredName = frontmatter && /^name: (.+)$/m.exec(frontmatter)?.[1];
+        const description = frontmatter && /^description: (.+)$/m.exec(frontmatter)?.[1];
+        if (declaredName !== name || !description)
+            throw new Error(`Invalid bundled skill frontmatter at ${join(directory, 'SKILL.md')}`);
+        return { name, description, directory, skillText };
+    }));
+}
+async function fullFiles(directory, prefix = '') {
+    const entries = await readdir(directory, { withFileTypes: true });
+    const files = [];
+    for (const entry of entries.toSorted((a, b) => a.name.localeCompare(b.name, 'en'))) {
+        const relative = prefix ? `${prefix}/${entry.name}` : entry.name;
+        if (entry.isDirectory())
+            files.push(...await fullFiles(join(directory, entry.name), relative));
+        else if (entry.isFile())
+            files.push(relative);
+        else
+            throw new Error(`Bundled skill contains a non-regular file at ${join(directory, entry.name)}`);
+    }
+    return files;
+}
+async function labeledContent(skills, full) {
+    const chunks = [];
+    for (const skill of skills) {
+        const files = full ? ['SKILL.md', ...(await fullFiles(skill.directory)).filter((path) => path !== 'SKILL.md')] : ['SKILL.md'];
+        for (const path of files) {
+            const content = path === 'SKILL.md' ? skill.skillText : await readFile(join(skill.directory, path));
+            chunks.push(Buffer.from(`=== ${skill.name}/${path} ===\n`), content);
+            if (content.at(-1) !== 10)
+                chunks.push(Buffer.from('\n'));
+        }
+    }
+    return Buffer.concat(chunks);
+}
+function discoveryText(skill) {
+    return `---\nname: ${skill.name}\ndescription: ${skill.description}\n---\n\nBefore using this skill, run \`artifacts skills get ${skill.name} --full\`.\nLoad and follow the complete instructions, references, and templates bundled with the installed CLI version.\nRelative paths refer to the bundled directory reported by \`artifacts skills path ${skill.name}\`.\n`;
+}
+async function installSkill(skill, command) {
+    const destination = resolve(command.global ? homedir() : process.cwd(), command.agent === 'claude' ? '.claude' : '.agents', 'skills', skill.name, 'SKILL.md');
+    const content = Buffer.from(discoveryText(skill));
+    await mkdir(dirname(destination), { recursive: true });
+    try {
+        const file = await open(destination, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o644);
+        try {
+            await file.writeFile(content);
+        }
+        finally {
+            await file.close();
+        }
+        return destination;
+    }
+    catch (error) {
+        if (!(error instanceof Error && 'code' in error && error.code === 'EEXIST'))
+            throw error;
+    }
+    const existing = await lstat(destination);
+    if (!existing.isFile())
+        throw new TypeError(`Cannot install ${destination}. The destination must be a regular file, not a directory or symbolic link.`);
+    const file = await open(destination, constants.O_RDONLY | constants.O_NOFOLLOW);
+    let previous;
+    try {
+        if (!(await file.stat()).isFile())
+            throw new TypeError(`Cannot install ${destination}. The destination must be a regular file.`);
+        previous = await file.readFile();
+    }
+    finally {
+        await file.close();
+    }
+    if (previous.equals(content))
+        return destination;
+    if (!command.force)
+        throw new TypeError(`Cannot replace differing file ${destination}. Use --force to replace it.`);
+    const temporary = join(dirname(destination), `.SKILL.md.${randomUUID()}.tmp`);
+    try {
+        const replacement = await open(temporary, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o644);
+        try {
+            await replacement.writeFile(content);
+        }
+        finally {
+            await replacement.close();
+        }
+        const current = await lstat(destination);
+        if (!current.isFile())
+            throw new TypeError(`Cannot install ${destination}. The destination must be a regular file, not a directory or symbolic link.`);
+        if (current.ino !== existing.ino || current.dev !== existing.dev || current.mtimeMs !== existing.mtimeMs || current.ctimeMs !== existing.ctimeMs)
+            throw new TypeError(`Cannot replace ${destination}. The destination changed during installation. Run the command again.`);
+        await rename(temporary, destination);
+    }
+    finally {
+        await rm(temporary, { force: true });
+    }
+    return destination;
+}
+export async function runSkillsCommand(positionals, options, seen) {
+    const command = parseCommand(positionals, options, seen);
+    const skills = await loadCatalog();
+    function named(name) {
+        const skill = skills.find((entry) => entry.name === name);
+        if (!skill)
+            throw new TypeError(`Unknown bundled skill ${name}. Use artifacts skills list to inspect available skills.`);
+        return skill;
+    }
+    switch (command.kind) {
+        case 'list':
+            process.stdout.write(skills.map((skill) => `${skill.name}\t${skill.description}\n`).join(''));
+            return;
+        case 'get': {
+            const selection = 'all' in command.selection ? skills : [named(command.selection.name)];
+            process.stdout.write(!command.full && 'name' in command.selection ? selection[0].skillText : await labeledContent(selection, command.full));
+            return;
+        }
+        case 'path':
+            process.stdout.write(`${command.name === undefined ? catalogDirectory : named(command.name).directory}\n`);
+            return;
+        case 'install':
+            process.stdout.write(`${await installSkill(named(command.name), command)}\n`);
+    }
+}