agent-skillboard 0.2.5 → 0.2.7

package/CHANGELOG.md

@@ -2,6 +2,22 @@
 
 ## Unreleased
 
+## 0.2.7 — 2026-07-03
+
+### Fixed
+
+- Direct `skillboard activate` and `skillboard prefer` now refuse reviewed
+  runtime/plugin skills that remain `status: blocked`, preserving the blocked
+  state outside action-card flows.
+
+## 0.2.6 — 2026-07-03
+
+### Fixed
+
+- Reviewed runtime/plugin skills with `status: blocked` no longer receive
+  activation action cards or apply through `apply-action`; only reviewed
+  quarantined blocked-invocation skills can be activated as manual-only.
+
 ## 0.2.5 — 2026-07-03
 
 ### Fixed

package/docs/versioning.md

@@ -8,7 +8,7 @@ source profiles, and the generated lockfile.
 
 ## Status
 
-Current package version: `0.2.5`
+Current package version: `0.2.7`
 
 Current config schema version:
 
@@ -59,7 +59,7 @@ must call them out clearly.
 Suggested tags:
 
 - `v0.1.0-alpha`: first public GitHub alpha.
-- `v0.2.5`: one-time runtime source review before manual activation, ask-after
+- `v0.2.7`: one-time runtime source review before manual activation, ask-after
   skill routing, purge uninstall, README benefit-first positioning,
   source inventory refresh, doctor/status, source pin refresh,
   installer/config detection, resilient detector warnings, and richer dry-run
@@ -194,8 +194,8 @@ Before tagging a public release:
   provenance with GitHub Actions OIDC, so keep `permissions.id-token: write`,
   the npm registry URL in `setup-node`, and
   `NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}` on the publish step.
-- Push a version tag that exactly matches `package.json`, for example `v0.2.5`
-  for package version `0.2.5`.
+- Push a version tag that exactly matches `package.json`, for example `v0.2.7`
+  for package version `0.2.7`.
 - Let `.github/workflows/publish.yml` publish from the tag. The workflow runs
   the full check suite, validates that the tag matches the package version, and
   skips `npm publish` only when that exact version already exists on npm.
@@ -229,6 +229,17 @@ completion notes:
 - update README quick-start to verify the installed version before running
   policy commands.
 
+## 0.2.7 Completion Notes
+
+- reject direct `skillboard activate` and `skillboard prefer` attempts for
+  reviewed runtime/plugin skills that remain `status: blocked`, while
+  preserving reviewed quarantined manual-only activation.
+
+## 0.2.6 Completion Notes
+
+- keep reviewed `status: blocked` runtime/plugin skills non-activatable while
+  preserving the reviewed quarantined runtime/plugin manual activation path.
+
 ## 0.2.5 Completion Notes
 
 - align reset-cleanup action-card preview and apply internals with the full

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-skillboard",
-  "version": "0.2.5",
+  "version": "0.2.7",
   "description": "Let AI agents pick and use allowed skills in each workflow.",
   "keywords": [
     "ai-agent",

package/src/advisor/actions.mjs

@@ -12,7 +12,7 @@ import { buildSetupGuidanceActions } from "./setup-actions.mjs";
 import { trustRecommendationAction } from "./trust-policy.mjs";
 
 const WRITABLE_MODES = new Set(["manual-only", "router-only", "workflow-auto"]);
-const NON_ACTIVATABLE_STATUSES = new Set(["deprecated", "archived", "removed"]);
+const NON_ACTIVATABLE_STATUSES = new Set(["blocked", "deprecated", "archived", "removed"]);
 
 export function buildInitActions(paths) {
   return [makeAction({
@@ -246,7 +246,8 @@ function activationMode(skill) {
   if (
     skill.advanced.owner_install_unit !== undefined
     && skill.advanced.owner_install_unit !== null
-    && (skill.advanced.status === "quarantined" || skill.advanced.invocation === "blocked")
+    && skill.advanced.status === "quarantined"
+    && skill.advanced.invocation === "blocked"
   ) {
     return "manual-only";
   }

package/src/control/skill-crud.mjs

@@ -1,4 +1,3 @@
-import YAML from "yaml";
 import {
   EXPOSURE_VALUES,
   INVOCATION_VALUES,
@@ -28,6 +27,7 @@ import {
 import { canUseSkill } from "./can-use-guard.mjs";
 
 const WRITABLE_INVOCATIONS = new Set(["manual-only", "router-only", "workflow-auto", "global-auto"]);
+const NON_ACTIVATABLE_STATUSES = new Set(["blocked", "deprecated", "archived", "removed"]);
 
 export async function activateSkill(options) {
   const { document, originalText } = await loadConfig(options.configPath);
@@ -38,6 +38,7 @@ export async function activateSkill(options) {
   if (!WRITABLE_INVOCATIONS.has(mode) || mode === "global-auto") {
     throw new Error(`activate requires --mode manual-only, router-only, or workflow-auto; got ${mode}`);
   }
+  ensureCanActivateSkill(options.skillId, skill, mode);
   skill.set("status", "active");
   skill.set("invocation", mode);
   addUnique(ensureSeq(workflow, "active_skills", document), options.skillId);
@@ -193,6 +194,7 @@ export async function preferSkill(options) {
   if (capabilityDefinition === undefined) {
     throw new Error(`Unknown capability: ${options.capability}`);
   }
+  ensureCanPreferSkill(options.skillId, skill);
   const required = ensureRequiredCapability(workflow, options.capability, document);
   const previousPreferred = readMapString(required, "preferred", "");
   if (previousPreferred.length > 0 && previousPreferred !== options.skillId) {
@@ -202,17 +204,6 @@ export async function preferSkill(options) {
   removeValue(ensureSeq(required, "fallback", document), options.skillId);
   addUnique(ensureSeq(workflow, "active_skills", document), options.skillId);
   removeValue(ensureSeq(workflow, "blocked_skills", document), options.skillId);
-  const status = readMapString(skill, "status", "vendor");
-  const invocation = readMapString(skill, "invocation", "manual-only");
-  if (status === "quarantined" || status === "blocked") {
-    skill.set("status", "active");
-  }
-  if (invocation === "blocked" || invocation === "deprecated") {
-    const requiredPolicy = readMapString(required, "policy", "");
-    const defaultPolicy = YAML.isMap(capabilityDefinition) ? readMapString(capabilityDefinition, "default_policy", "manual-only") : "manual-only";
-    skill.set("invocation", requiredPolicy.length > 0 ? requiredPolicy : defaultPolicy);
-  }
-
   return await writeCheckedConfig(
     document,
     originalText,
@@ -221,6 +212,31 @@ export async function preferSkill(options) {
   );
 }
 
+function ensureCanActivateSkill(skillId, skill, mode) {
+  const status = readMapString(skill, "status", "vendor");
+  const invocation = readMapString(skill, "invocation", "manual-only");
+  if (NON_ACTIVATABLE_STATUSES.has(status)) {
+    throw new Error(`Cannot activate non-callable skill ${skillId} with status: ${status}`);
+  }
+  if (status === "quarantined" && mode !== "manual-only") {
+    throw new Error(`Cannot activate quarantined skill ${skillId} as ${mode}; use manual-only after source review`);
+  }
+  if (NON_CALLABLE_WORKFLOW_INVOCATIONS.has(invocation) && !(status === "quarantined" && invocation === "blocked" && mode === "manual-only")) {
+    throw new Error(`Cannot activate non-callable skill ${skillId} with invocation: ${invocation}`);
+  }
+}
+
+function ensureCanPreferSkill(skillId, skill) {
+  const status = readMapString(skill, "status", "vendor");
+  const invocation = readMapString(skill, "invocation", "manual-only");
+  if (NON_CALLABLE_WORKFLOW_STATUSES.has(status)) {
+    throw new Error(`Cannot prefer non-callable skill ${skillId} with status: ${status}`);
+  }
+  if (NON_CALLABLE_WORKFLOW_INVOCATIONS.has(invocation)) {
+    throw new Error(`Cannot prefer non-callable skill ${skillId} with invocation: ${invocation}`);
+  }
+}
+
 function requireConfigSkill(document, skillId) {
   const skills = requireMapAt(document, ["skills"], "skills");
   const skill = skills.get(skillId, true);