agenticros 0.4.0 → 0.5.0

package/runtime/packages/core/src/skill-refs.ts

@@ -1,17 +1,29 @@
 /**
- * skillRefs → ~/.agenticros/skills-cache resolver (marketplace auto-fetch v1).
+ * skillRefs → ~/.agenticros/skills-cache resolver (marketplace auto-fetch).
  *
- * Declarative refs like `agenticros/navigate-to` or `owner/skill@main` are
- * resolved via the skills marketplace install API, cloned into the cache,
- * built if needed, and returned as absolute skillPaths for capability
- * reading / OpenClaw loading.
+ * Declarative refs like `owner/skill`, `owner/skill@main`, or
+ * `@agenticros-skills/foo@^1.0.0` are resolved via the skills marketplace
+ * install API (or directly from npm), cached under ~/.agenticros/skills-cache,
+ * and returned as absolute skillPaths for capability reading / OpenClaw loading.
+ *
+ * Prefer npm when the install descriptor includes `npmPackage` (or the ref
+ * is already a scoped npm name). Fall back to git clone + build.
  *
  * Never auto-upgrades: if the cache dir for a pin already exists, reuse it
- * (optional pull when AGENTICROS_SKILLS_CACHE_PULL=1).
+ * (optional pull when AGENTICROS_SKILLS_CACHE_PULL=1 for git caches).
  */
 
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
-import { homedir } from "node:os";
+import {
+  existsSync,
+  mkdirSync,
+  mkdtempSync,
+  readFileSync,
+  readdirSync,
+  renameSync,
+  rmSync,
+  writeFileSync,
+} from "node:fs";
+import { tmpdir, homedir } from "node:os";
 import { basename, join } from "node:path";
 import { execFileSync } from "node:child_process";
 import type { AgenticROSConfig } from "./config.js";
@@ -20,12 +32,17 @@ export const DEFAULT_SKILLS_API = "https://skills.agenticros.com/api";
 export const DEFAULT_SKILLS_CACHE_DIR = join(homedir(), ".agenticros", "skills-cache");
 
 export interface ParsedSkillRef {
-  /** owner/skill (lowercase) */
-  marketplaceRef: string;
-  owner: string;
-  skill: string;
-  /** git ref / branch pin; default main */
-  gitRef: string;
+  kind: "marketplace" | "npm";
+  /** owner/skill (lowercase) — marketplace refs only */
+  marketplaceRef?: string;
+  owner?: string;
+  skill?: string;
+  /** git ref / branch pin; default main — marketplace refs */
+  gitRef?: string;
+  /** Scoped npm package name — npm refs */
+  npmPackage?: string;
+  /** Semver range or exact version pin — npm refs (default: latest resolved) */
+  npmVersion?: string;
 }
 
 export interface InstallDescriptor {
@@ -36,6 +53,10 @@ export interface InstallDescriptor {
   githubUrl: string;
   ref: string;
   buildCmd: string;
+  /** When set, prefer npm pack over git clone. */
+  npmPackage?: string;
+  /** Pinned npm version when known. */
+  npmVersion?: string;
 }
 
 export interface ResolveSkillRefsOptions {
@@ -54,10 +75,37 @@ export interface ResolveSkillRefsResult {
   errors: Array<{ ref: string; error: string }>;
 }
 
-/** Parse `owner/skill` or `owner/skill@branch`. */
+/**
+ * Parse `owner/skill`, `owner/skill@branch`, or `@scope/name[@semver]`.
+ */
 export function parseSkillRef(raw: string): ParsedSkillRef | null {
   const trimmed = raw.trim();
   if (!trimmed) return null;
+
+  if (trimmed.startsWith("@")) {
+    // @scope/name or @scope/name@1.2.3 / @scope/name@^1.0.0
+    const withoutAt = trimmed.slice(1);
+    const slash = withoutAt.indexOf("/");
+    if (slash <= 0) return null;
+    const scope = withoutAt.slice(0, slash);
+    const rest = withoutAt.slice(slash + 1);
+    if (!scope || !rest) return null;
+    // Version pin is the last @ after the package name segment.
+    const at = rest.lastIndexOf("@");
+    let pkgName = rest;
+    let npmVersion: string | undefined;
+    if (at > 0) {
+      pkgName = rest.slice(0, at);
+      npmVersion = rest.slice(at + 1).trim() || undefined;
+    }
+    if (!pkgName || pkgName.includes("/")) return null;
+    return {
+      kind: "npm",
+      npmPackage: `@${scope}/${pkgName}`,
+      npmVersion,
+    };
+  }
+
   const at = trimmed.lastIndexOf("@");
   let body = trimmed;
   let gitRef = "main";
@@ -71,6 +119,7 @@ export function parseSkillRef(raw: string): ParsedSkillRef | null {
   const skill = parts.slice(1).join("/").toLowerCase();
   if (!owner || !skill) return null;
   return {
+    kind: "marketplace",
     marketplaceRef: `${owner}/${skill}`,
     owner,
     skill,
@@ -107,13 +156,15 @@ export async function fetchInstallDescriptor(
     throw new Error(`Marketplace install ${res.status}: ${body.slice(0, 200)}`);
   }
   const desc = (await res.json()) as InstallDescriptor;
-  if (!desc.githubUrl) {
-    throw new Error(`Install descriptor for ${marketplaceRef} has no githubUrl`);
+  if (!desc.githubUrl && !desc.npmPackage && !desc.packageName) {
+    throw new Error(
+      `Install descriptor for ${marketplaceRef} has neither githubUrl nor npmPackage`,
+    );
   }
   return desc;
 }
 
-function cachePathFor(
+function cachePathForGit(
   cacheDir: string,
   owner: string,
   skill: string,
@@ -123,6 +174,12 @@ function cachePathFor(
   return join(cacheDir, owner, skill, safeRef);
 }
 
+function cachePathForNpm(cacheDir: string, npmPackage: string, version: string): string {
+  const safeName = npmPackage.replace(/^@/, "").replace(/\//g, "__");
+  const safeVer = version.replace(/[^a-zA-Z0-9._+-]+/g, "_");
+  return join(cacheDir, "npm", safeName, safeVer);
+}
+
 function hasBuiltEntry(dir: string): boolean {
   try {
     const pkg = JSON.parse(readFileSync(join(dir, "package.json"), "utf8")) as {
@@ -140,6 +197,10 @@ function run(cmd: string, args: string[], cwd: string, log: (m: string) => void)
   execFileSync(cmd, args, { cwd, stdio: "inherit" });
 }
 
+function runCapture(cmd: string, args: string[], cwd: string): string {
+  return execFileSync(cmd, args, { cwd, encoding: "utf8" }).trim();
+}
+
 function hasBin(name: string): boolean {
   try {
     execFileSync(name, ["--version"], { stdio: "ignore" });
@@ -149,6 +210,124 @@ function hasBin(name: string): boolean {
   }
 }
 
+function safeNpmVersionPin(raw: string | undefined): string {
+  if (!raw || !raw.trim()) return "latest";
+  return raw.trim();
+}
+
+/**
+ * Resolve the exact version npm would install for a package@range.
+ */
+function resolveNpmVersion(npmPackage: string, versionRange: string, log: (m: string) => void): string {
+  const spec = versionRange === "latest" ? npmPackage : `${npmPackage}@${versionRange}`;
+  log(`Resolving npm version for ${spec}`);
+  const out = runCapture("npm", ["view", spec, "version"], process.cwd());
+  // npm view can return a single version or a JSON array for ranges — take last line.
+  const lines = out.split("\n").map((l) => l.trim()).filter(Boolean);
+  const last = lines[lines.length - 1] ?? "";
+  // Strip quotes if JSON-ish
+  const cleaned = last.replace(/^"|"$/g, "");
+  if (!cleaned) throw new Error(`Could not resolve npm version for ${spec}`);
+  return cleaned;
+}
+
+/**
+ * Pack an npm package into the skills cache and return the absolute dir.
+ */
+export async function ensureNpmPackageCached(
+  npmPackage: string,
+  versionRange: string | undefined,
+  opts: ResolveSkillRefsOptions = {},
+): Promise<string> {
+  const log = opts.onLog ?? (() => undefined);
+  const cacheRoot = skillsCacheDir(opts.cacheDir);
+  const pin = safeNpmVersionPin(versionRange);
+
+  // Fast path: exact version already cached
+  if (pin !== "latest" && !pin.startsWith("^") && !pin.startsWith("~") && !pin.includes("*")) {
+    const exactDir = cachePathForNpm(cacheRoot, npmPackage, pin);
+    if (existsSync(join(exactDir, "package.json"))) {
+      if (!hasBuiltEntry(exactDir) && !opts.offline) {
+        await buildInPlace(exactDir, log);
+      }
+      return exactDir;
+    }
+  }
+
+  if (opts.offline) {
+    // Best-effort: look for any cached version of this package
+    const safeName = npmPackage.replace(/^@/, "").replace(/\//g, "__");
+    const pkgRoot = join(cacheRoot, "npm", safeName);
+    if (existsSync(pkgRoot)) {
+      const versions = readdirSync(pkgRoot).filter((v) =>
+        existsSync(join(pkgRoot, v, "package.json")),
+      );
+      if (versions.length > 0) {
+        versions.sort();
+        return join(pkgRoot, versions[versions.length - 1]!);
+      }
+    }
+    throw new Error(`npm package ${npmPackage}@${pin} not in cache (offline)`);
+  }
+
+  const resolvedVersion = resolveNpmVersion(npmPackage, pin, log);
+  const dir = cachePathForNpm(cacheRoot, npmPackage, resolvedVersion);
+  if (existsSync(join(dir, "package.json"))) {
+    if (!hasBuiltEntry(dir)) {
+      await buildInPlace(dir, log);
+    }
+    return dir;
+  }
+
+  mkdirSync(join(cacheRoot, "npm", npmPackage.replace(/^@/, "").replace(/\//g, "__")), {
+    recursive: true,
+  });
+
+  const tmp = mkdtempSync(join(tmpdir(), "agenticros-skill-npm-"));
+  try {
+    const spec = `${npmPackage}@${resolvedVersion}`;
+    log(`npm pack ${spec} → ${tmp}`);
+    const tgzName = runCapture("npm", ["pack", spec, "--pack-destination", tmp], tmp);
+    const tgzPath = join(tmp, tgzName);
+    const extractDir = join(tmp, "extract");
+    mkdirSync(extractDir, { recursive: true });
+    run("tar", ["-xzf", tgzPath, "-C", extractDir], tmp, log);
+    const packedRoot = join(extractDir, "package");
+    if (!existsSync(join(packedRoot, "package.json"))) {
+      throw new Error(`npm pack for ${spec} did not produce package/package.json`);
+    }
+    mkdirSync(join(dir, ".."), { recursive: true });
+    if (existsSync(dir)) {
+      rmSync(dir, { recursive: true, force: true });
+    }
+    renameSync(packedRoot, dir);
+    writeFileSync(
+      join(dir, ".agenticros-skill-ref.json"),
+      JSON.stringify(
+        {
+          kind: "npm",
+          npmPackage,
+          npmVersion: resolvedVersion,
+          cachedAt: new Date().toISOString(),
+        },
+        null,
+        2,
+      ),
+    );
+  } finally {
+    try {
+      rmSync(tmp, { recursive: true, force: true });
+    } catch {
+      /* ignore */
+    }
+  }
+
+  if (!hasBuiltEntry(dir)) {
+    await buildInPlace(dir, log);
+  }
+  return dir;
+}
+
 /**
  * Ensure one skillRef is present under the cache. Returns absolute path or throws.
  */
@@ -158,11 +337,18 @@ export async function ensureSkillRefCached(
 ): Promise<string> {
   const parsed = parseSkillRef(rawRef);
   if (!parsed) {
-    throw new Error(`Invalid skillRef "${rawRef}" (expected owner/skill or owner/skill@ref)`);
+    throw new Error(
+      `Invalid skillRef "${rawRef}" (expected owner/skill, owner/skill@ref, or @scope/name[@semver])`,
+    );
   }
   const log = opts.onLog ?? (() => undefined);
+
+  if (parsed.kind === "npm") {
+    return ensureNpmPackageCached(parsed.npmPackage!, parsed.npmVersion, opts);
+  }
+
   const cacheRoot = skillsCacheDir(opts.cacheDir);
-  const dir = cachePathFor(cacheRoot, parsed.owner, parsed.skill, parsed.gitRef);
+  const dir = cachePathForGit(cacheRoot, parsed.owner!, parsed.skill!, parsed.gitRef!);
 
   if (existsSync(join(dir, "package.json"))) {
     if (opts.pullIfPresent || process.env.AGENTICROS_SKILLS_CACHE_PULL === "1") {
@@ -182,25 +368,42 @@ export async function ensureSkillRefCached(
     throw new Error(`skillRef ${parsed.marketplaceRef} not in cache (offline)`);
   }
 
-  const descriptor = await fetchInstallDescriptor(parsed.marketplaceRef, opts.apiBase);
-  const gitRef = parsed.gitRef !== "main" ? parsed.gitRef : descriptor.ref || "main";
+  const descriptor = await fetchInstallDescriptor(parsed.marketplaceRef!, opts.apiBase);
+
+  // Prefer npm when the marketplace advertises an npm package.
+  const npmPkg = descriptor.npmPackage || (descriptor.packageName?.startsWith("@") ? descriptor.packageName : undefined);
+  if (npmPkg) {
+    const version =
+      parsed.gitRef && parsed.gitRef !== "main"
+        ? parsed.gitRef
+        : descriptor.npmVersion;
+    log(`Install descriptor prefers npm: ${npmPkg}${version ? `@${version}` : ""}`);
+    return ensureNpmPackageCached(npmPkg, version, opts);
+  }
+
+  if (!descriptor.githubUrl) {
+    throw new Error(
+      `Install descriptor for ${parsed.marketplaceRef} has no githubUrl or npmPackage`,
+    );
+  }
+
+  const gitRef = parsed.gitRef !== "main" ? parsed.gitRef! : descriptor.ref || "main";
   const repoUrl = descriptor.githubUrl.endsWith(".git")
     ? descriptor.githubUrl
     : `${descriptor.githubUrl}.git`;
 
-  mkdirSync(join(cacheRoot, parsed.owner, parsed.skill), { recursive: true });
+  mkdirSync(join(cacheRoot, parsed.owner!, parsed.skill!), { recursive: true });
   if (!existsSync(join(dir, ".git"))) {
     log(`Cloning ${repoUrl} (${gitRef}) → ${dir}`);
     try {
       run(
         "git",
         ["clone", "--branch", gitRef, "--single-branch", "--depth", "1", repoUrl, dir],
-        join(cacheRoot, parsed.owner, parsed.skill),
+        join(cacheRoot, parsed.owner!, parsed.skill!),
         log,
       );
     } catch {
-      // Branch pin may be a tag or default branch name mismatch — full clone + checkout.
-      run("git", ["clone", "--depth", "1", repoUrl, dir], join(cacheRoot, parsed.owner, parsed.skill), log);
+      run("git", ["clone", "--depth", "1", repoUrl, dir], join(cacheRoot, parsed.owner!, parsed.skill!), log);
       try {
         run("git", ["checkout", gitRef], dir, log);
       } catch {
@@ -209,12 +412,12 @@ export async function ensureSkillRefCached(
     }
   }
 
-  // Marker for which marketplace ref produced this cache entry
   try {
     writeFileSync(
       join(dir, ".agenticros-skill-ref.json"),
       JSON.stringify(
         {
+          kind: "git",
           marketplaceRef: parsed.marketplaceRef,
           gitRef,
           githubUrl: descriptor.githubUrl,
@@ -274,8 +477,6 @@ export async function resolveSkillRefs(
 
 /**
  * Return a config copy with skillRefs resolved into skillPaths (deduped).
- * Sync-friendly path: if offline or empty refs, returns config unchanged
- * except merging any already-cached paths when possible without network.
  */
 export async function withResolvedSkillRefs(
   config: AgenticROSConfig,
@@ -314,7 +515,33 @@ export function applyCachedSkillRefs(config: AgenticROSConfig): AgenticROSConfig
   for (const raw of refs) {
     const parsed = parseSkillRef(raw);
     if (!parsed) continue;
-    const dir = cachePathFor(cacheRoot, parsed.owner, parsed.skill, parsed.gitRef);
+    if (parsed.kind === "npm") {
+      const safeName = parsed.npmPackage!.replace(/^@/, "").replace(/\//g, "__");
+      const pkgRoot = join(cacheRoot, "npm", safeName);
+      if (!existsSync(pkgRoot)) continue;
+      const pin = parsed.npmVersion;
+      if (pin && !pin.startsWith("^") && !pin.startsWith("~") && !pin.includes("*") && pin !== "latest") {
+        const dir = cachePathForNpm(cacheRoot, parsed.npmPackage!, pin);
+        if (existsSync(join(dir, "package.json")) && !have.has(dir)) {
+          have.add(dir);
+          merged.push(dir);
+        }
+        continue;
+      }
+      // Any cached version — prefer highest lexical version dir
+      const versions = readdirSync(pkgRoot).filter((v) =>
+        existsSync(join(pkgRoot, v, "package.json")),
+      );
+      if (versions.length === 0) continue;
+      versions.sort();
+      const dir = join(pkgRoot, versions[versions.length - 1]!);
+      if (!have.has(dir)) {
+        have.add(dir);
+        merged.push(dir);
+      }
+      continue;
+    }
+    const dir = cachePathForGit(cacheRoot, parsed.owner!, parsed.skill!, parsed.gitRef!);
     if (existsSync(join(dir, "package.json")) && !have.has(dir)) {
       have.add(dir);
       merged.push(dir);

package/runtime/pnpm-lock.yaml

@@ -66,8 +66,8 @@ importers:
   packages/agenticros-cli:
     dependencies:
       '@agenticros/core':
-        specifier: workspace:*
-        version: link:../core
+        specifier: ^0.8.0
+        version: 0.8.0
       '@inquirer/prompts':
         specifier: ^7.0.0
         version: 7.10.1(@types/node@20.19.35)
@@ -178,6 +178,10 @@ importers:
 
 packages:
 
+  '@agenticros/core@0.8.0':
+    resolution: {integrity: sha512-E6WJBHhd0QE2YTGBrKe84q+SAGjgLMCp785BRh8UJDS4WUKqL80B04TMjZ1JLjtphCl/uk9XNZPjIjzBixz0kg==}
+    engines: {node: '>=20'}
+
   '@eclipse-zenoh/zenoh-ts@1.9.0':
     resolution: {integrity: sha512-qG3VR9Yt81+KjH0WOybyKcNVS0vtBmmhyUJ7dCc5n+8AeAEYTpEvMBTh43Lwu8P+imzMYvFqjaMAO2HFK+x9hA==}
 
@@ -1977,6 +1981,23 @@ packages:
 
 snapshots:
 
+  '@agenticros/core@0.8.0':
+    dependencies:
+      '@eclipse-zenoh/zenoh-ts': 1.9.0(patch_hash=pdjq6ms3zvqwikn6vpqzasydsy)
+      '@foxglove/cdr': 3.5.0
+      '@foxglove/rosmsg': 4.2.2
+      '@foxglove/rosmsg2-serialization': 3.1.0
+      ws: 8.19.0
+      zod: 3.25.76
+    optionalDependencies:
+      node-datachannel: 0.12.0
+      rclnodejs: 1.8.2
+    transitivePeerDependencies:
+      - bufferutil
+      - jiti
+      - supports-color
+      - utf-8-validate
+
   '@eclipse-zenoh/zenoh-ts@1.9.0(patch_hash=pdjq6ms3zvqwikn6vpqzasydsy)':
     dependencies:
       '@thi.ng/leb128': 3.1.79

package/runtime/scripts/check-cli-tarball-install.mjs

@@ -32,7 +32,16 @@
  */
 
 import { execSync, spawnSync } from "node:child_process";
-import { existsSync, mkdirSync, mkdtempSync, readdirSync, rmSync } from "node:fs";
+import {
+  existsSync,
+  mkdirSync,
+  mkdtempSync,
+  readdirSync,
+  readFileSync,
+  rmSync,
+  statSync,
+  writeFileSync,
+} from "node:fs";
 import { tmpdir } from "node:os";
 import { dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
@@ -132,6 +141,31 @@ try {
   }
   ok(`Extracted to ${pkgDir}`);
 
+  // 3a. published package.json must not contain pnpm workspace: protocol
+  // (npm / npx consumers cannot resolve workspace:* — broke agenticros@0.4.0).
+  step("Checking published package.json has no workspace: dependencies...");
+  const publishedPkg = JSON.parse(
+    readFileSync(join(pkgDir, "package.json"), "utf8"),
+  );
+  const badDeps = [];
+  for (const section of ["dependencies", "optionalDependencies", "peerDependencies"]) {
+    const block = publishedPkg[section];
+    if (!block || typeof block !== "object") continue;
+    for (const [name, range] of Object.entries(block)) {
+      if (typeof range === "string" && range.startsWith("workspace:")) {
+        badDeps.push(`${section}.${name}=${range}`);
+      }
+    }
+  }
+  if (badDeps.length > 0) {
+    fail(
+      `Published package.json still has workspace: protocol (npm cannot install this):\n    ${badDeps.join("\n    ")}\n` +
+        `Use a semver range against the published @agenticros/core (e.g. "^0.7.0").`,
+    );
+    process.exit(1);
+  }
+  ok("No workspace: protocol in published dependencies.");
+
   // 3. critical files present in the SHIPPED tarball
   step("Verifying critical runtime files are in the tarball...");
   const runtimeInTar = join(pkgDir, "runtime");
@@ -150,8 +184,7 @@ try {
 
   // 5. write inline .npmrc (mirrors init.ts writeInitNpmrcInline)
   step("Writing inline .npmrc (mirroring writeInitNpmrcInline)...");
-  const fs = await import("node:fs");
-  fs.writeFileSync(
+  writeFileSync(
     join(installDir, ".npmrc"),
     [
       "shamefully-hoist=false",
@@ -220,9 +253,9 @@ try {
   step("Simulating refresh over a pre-existing snapshot (regression test for 0.1.7)...");
   const fakeOld = join(work, "old-install");
   mkdirSync(fakeOld);
-  fs.writeFileSync(join(fakeOld, "tsconfig.base.json"), '{"old":"to-be-overwritten"}');
+  writeFileSync(join(fakeOld, "tsconfig.base.json"), '{"old":"to-be-overwritten"}');
   mkdirSync(join(fakeOld, "packages"), { recursive: true });
-  fs.writeFileSync(
+  writeFileSync(
     join(fakeOld, "packages", "preserved.txt"),
     "must survive overlay refresh",
   );
@@ -234,7 +267,7 @@ try {
     const src = join(runtimeInTar, rel);
     const dst = join(fakeOld, rel);
     if (!existsSync(src)) continue;
-    const srcIsDir = fs.statSync(src).isDirectory();
+    const srcIsDir = statSync(src).isDirectory();
     if (srcIsDir && existsSync(dst)) {
       run("cp", ["-a", `${src}/.`, `${dst}/`]);
     } else {
@@ -243,12 +276,12 @@ try {
     }
   }
 
-  const tsStat = fs.statSync(join(fakeOld, "tsconfig.base.json"));
+  const tsStat = statSync(join(fakeOld, "tsconfig.base.json"));
   if (!tsStat.isFile()) {
     fail("Refresh turned tsconfig.base.json into a non-file. cp branching is wrong.");
     process.exit(1);
   }
-  const tsContent = fs.readFileSync(join(fakeOld, "tsconfig.base.json"), "utf8");
+  const tsContent = readFileSync(join(fakeOld, "tsconfig.base.json"), "utf8");
   if (tsContent.includes('"old":"to-be-overwritten"')) {
     fail("Refresh failed to overwrite tsconfig.base.json with the bundle's version.");
     process.exit(1);

package/templates/skills/camera/package.json

@@ -1,5 +1,5 @@
 {
-  "name": "agenticros-skill-{{slug}}",
+  "name": "@agenticros-skills/{{slug}}",
   "version": "0.1.0",
   "type": "module",
   "description": "{{description}}",
@@ -15,8 +15,12 @@
     "displayName": "{{displayName}}",
     "description": "{{description}}",
     "tutorial": false,
-    "categories": ["vision"],
-    "screenshots": ["docs/icon.png"],
+    "categories": [
+      "vision"
+    ],
+    "screenshots": [
+      "docs/icon.png"
+    ],
     "capabilities": [
       {
         "id": "{{toolName}}",
@@ -26,13 +30,20 @@
     ]
   },
   "dependencies": {
-    "@agenticros/core": "^0.6.0",
+    "@agenticros/core": "^0.8.0",
     "@sinclair/typebox": "^0.34.0"
   },
   "devDependencies": {
     "@types/node": "^20.17.0",
     "typescript": "^5.7.0"
   },
-  "keywords": ["agenticros", "camera", "vision"],
-  "license": "Apache-2.0"
+  "keywords": [
+    "agenticros",
+    "camera",
+    "vision"
+  ],
+  "license": "Apache-2.0",
+  "publishConfig": {
+    "access": "public"
+  }
 }

package/templates/skills/depth/package.json

@@ -1,5 +1,5 @@
 {
-  "name": "agenticros-skill-{{slug}}",
+  "name": "@agenticros-skills/{{slug}}",
   "version": "0.1.0",
   "type": "module",
   "description": "{{description}}",
@@ -15,8 +15,13 @@
     "displayName": "{{displayName}}",
     "description": "{{description}}",
     "tutorial": false,
-    "categories": ["vision", "telemetry"],
-    "screenshots": ["docs/icon.png"],
+    "categories": [
+      "vision",
+      "telemetry"
+    ],
+    "screenshots": [
+      "docs/icon.png"
+    ],
     "capabilities": [
       {
         "id": "{{toolName}}",
@@ -26,13 +31,20 @@
     ]
   },
   "dependencies": {
-    "@agenticros/core": "^0.6.0",
+    "@agenticros/core": "^0.8.0",
     "@sinclair/typebox": "^0.34.0"
   },
   "devDependencies": {
     "@types/node": "^20.17.0",
     "typescript": "^5.7.0"
   },
-  "keywords": ["agenticros", "depth", "realsense"],
-  "license": "Apache-2.0"
+  "keywords": [
+    "agenticros",
+    "depth",
+    "realsense"
+  ],
+  "license": "Apache-2.0",
+  "publishConfig": {
+    "access": "public"
+  }
 }

package/templates/skills/hello/package.json

@@ -1,5 +1,5 @@
 {
-  "name": "agenticros-skill-{{slug}}",
+  "name": "@agenticros-skills/{{slug}}",
   "version": "0.1.0",
   "type": "module",
   "description": "{{description}}",
@@ -15,8 +15,12 @@
     "displayName": "{{displayName}}",
     "description": "{{description}}",
     "tutorial": true,
-    "categories": ["communication"],
-    "screenshots": ["docs/icon.png"],
+    "categories": [
+      "communication"
+    ],
+    "screenshots": [
+      "docs/icon.png"
+    ],
     "capabilities": [
       {
         "id": "{{toolName}}",
@@ -32,6 +36,13 @@
     "@types/node": "^20.17.0",
     "typescript": "^5.7.0"
   },
-  "keywords": ["agenticros", "tutorial", "getting-started"],
-  "license": "Apache-2.0"
+  "keywords": [
+    "agenticros",
+    "tutorial",
+    "getting-started"
+  ],
+  "license": "Apache-2.0",
+  "publishConfig": {
+    "access": "public"
+  }
 }