agents-inc 0.173.0 → 0.175.0

package/CHANGELOG.md

@@ -7,6 +7,108 @@ Each release has detailed notes in its own file under [`changelogs/`](./changelo
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.175.0] - 2026-10-27
+
+**A project config that declares nothing is no longer an installation, a project under a home holding both tools reads only its own tool's global installation, `init --from` and `edit --from` refuse two more broken links before they ask, and an account refuses a second stack under a name it already holds**
+
+- CLI-971: a project `config.ts` that declares nothing is not an installation; `compile`, `edit`, `list`, `share`, `update` and `doctor` say the global installation stands in, and `uninstall` leaves the file alone.
+- CLI-984: a Codex project under a home holding both tools' global installations reads only the Codex one.
+- CLI-934: a skill the marketplace ships and could not load is skipped as one it `could not load`, and a skill folder with no `SKILL.md` is warned on every load.
+- CLI-972: the notices under the `init --from` and `edit --from` panel name each skill as the panel does.
+- CLI-935: `init --from` and `edit --from` refuse a project-only skill on a global sub-agent whether or not the skill loads, writing nothing.
+- CLI-936: they refuse a carried skill id longer than a folder name can be, before the panel, instead of crashing half-way.
+- CLI-987: the confirm panel keeps its `Marketplace` and `Stack` labels whole beside a name too long for the line.
+- CLI-988: a marketplace document's value written across lines stays on its one error line.
+- CLI-933: `eject skills --force` and `eject all --force` restore every skill an earlier eject wrote.
+- CLI-938: `doctor` keeps a download made in the same second as giget's saved copy, and other commands stop warning about a cached copy they just downloaded.
+- CLI-930: a source checkout under a folder whose name starts with `dist` finds its own files.
+- CLI-957: reading a marketplace folder no longer replaces the catalogue the rest of the run names skills from.
+- CLI-939: the docs say a saved marketplace copy with no version stamp is checked only by `doctor`, and how to refresh it.
+- CLI-941: `doctor`'s config check names every state of the config; its verdicts are unchanged.
+- CLI-942: four metadata keys nothing read are gone.
+- CLI-985: the detected installation no longer carries `skillsDir`.
+- CLI-940: the e2e config writer accepts a project config carrying its global inline.
+- CLI-981: the `edit --from` plugin-switch specs pin every plugin-host call, and the old-folder specs share one writer.
+- CLI-983: `init --from`'s specs run behind a stand-in `claude`.
+- CLI-989: no spec reaches the developer's real `claude`.
+- CLI-986: a command spec's first Ink render in a test worker no longer fails its first attempt.
+- CLI-990: `list` and the startup config check are pinned for a Codex project under a home holding both tools.
+- SERVER-10: the worker refuses a stack save or rename under a name the account already holds, in any case, with a 409.
+- SERVER-11: an editor sign-in lasts 90 days, renewed on use.
+- SERVER-07: the worker's CORS check runs once per request.
+- SERVER-09: the server dev spec no longer depends on the developer's `wrangler` cache.
+- SERVER-12: the id-hashing spec finds its own qualifying stack id.
+- EDITOR-111: while the account's stacks cannot be read, Save sends nothing and says `Saving needs your account's stacks first.`, with Retry; a name the account holds is refused in place.
+- EDITOR-112: a failed read of the account's stack list reaches error monitoring.
+- EDITOR-113: a sign-in that ends mid-read is treated as a list that could not be read.
+- EDITOR-98: the Switch marketplace refusal reads as two sentences and offers a token only for 401, 403 or 404.
+- EDITOR-100: the Switch marketplace dialog no longer says "loses nothing" when a waiting link or stack would replace the screen.
+- EDITOR-114: leaving a shared link by loading another marketplace keeps the notice of what could not be placed.
+- EDITOR-99: the accounts specs pass reliably, and the e2e dev server runs without live reload.
+- EDITOR-115: the rail's six sign-in and sign-out refusal lines are pinned word for word.
+- WWW-17: the site's tests fail on a new-tab link without `rel="noopener noreferrer"`.
+- REPO-42: a spec runs the real pre-push hook and fails if it stops running a suite it must.
+- REPO-46: CI's Node setup steps use `actions/setup-node@v7`.
+- REPO-47: how two stack names compare has one definition, in `@workspace/matrix`.
+- REPO-48: a change to a file outside `packages/cli` that a CLI spec reads reruns the CLI's tests.
+- REPO-44: the standards, the journey page and the findings follow the code.
+
+See [changelogs/0.175.0.md](./changelogs/0.175.0.md) for full details.
+
+## [0.174.0] - 2026-10-24
+
+**Every summary names a skill by the display name its install recorded, `init --from` and `edit --from` stop when a marketplace refuses the version check, every command says an old `.claude-src/` is ignored, and the editor says when an account's stacks could not be read, with Retry**
+
+- REPO-44: the standards, the journey page and the findings follow the code.
+- REPO-45: the git rule in both `CLAUDE.md` files names its one exception, a `commit-plan` skill run.
+- CLI-963: `init --from` and `edit --from` record each skill's display name in `config.ts`, and every summary names a skill by it, then by the catalogue's name, then by its id.
+- CLI-959: `list` at a terminal shows each skill by the name its install recorded, plugins included.
+- CLI-978: piped `list` names each skill on its own line, with its scope.
+- CLI-954: `uninstall`'s panel names a kept global copy and a local-marketplace plugin by name, where it printed the id.
+- CLI-960: `uninstall`'s panel header names the marketplace of what it removes, or of what it keeps when it removes no skill.
+- CLI-973: the line naming what a sub-agent gains or loses under `edit --from`'s panel names each skill as the panel does.
+- CLI-975: `edit --from` asks the plugin host once, not twice, when a skill changes both mode and scope.
+- CLI-946: a 404 or 403 from the version check stops `init --from` and `edit --from` with exit 1, leaving everything as it was.
+- CLI-958: they stop on every 4xx but 405; on a 5xx or 405 they keep the saved copy and warn once a run.
+- CLI-962: `compile`, `search`, `eject` and `uninstall` keep the saved copy over a refusal, warning on a 5xx or 405 only.
+- CLI-966: offline with only giget's saved tarball left, every load but `doctor`'s warns that it is using the cached copy.
+- CLI-931: every command prints one line to stderr for each place holding an old `.claude-src/`: it is ignored, and which folder agents-inc reads.
+- CLI-965: that line names `.agents-inc/codex/` for a root whose installation is Codex.
+- CLI-967: on a run given `--provider`, that line names that provider's folder.
+- CLI-968: a run no longer inherits the provider an earlier run in the same process named.
+- CLI-977: without `--provider`, HOME's line names HOME's folder for the project's tool.
+- CLI-969: a bare `list` under a HOME holding one installation no longer says it "holds 1 installations".
+- CLI-964: the findings check gives the same verdict in a clean `git archive` as in a checkout, so publishing needs no extra files copied in.
+- CLI-980: `generate:types:check` without the skills checkout stops with one line naming the folder it looked in.
+- CLI-947: the summary panel's scrolling code is gone; its output is unchanged.
+- CLI-948: `clean-code-standards.md` 15.19 says how to ask a library that can answer from its own cache which it did.
+- CLI-949: the editor's preview crossing spec gets a row setting both sources for the model.
+- CLI-950: doctor's row patterns in the e2e specs are built once, by `doctorRow`.
+- CLI-951: a spec that counts a rate limiter stubs it and pins the callers its key separates and merges.
+- CLI-952: the editor standard says to ask which saved configuration was read, never the stored marketplace choice.
+- CLI-953: the stack-switch question's cost is covered with a restore waiting and with a shared link open.
+- CLI-955: the resize specs wait for the settled frame instead of reading it once after a delay.
+- CLI-956: every path, URL, id and mirrored text in a spec's pattern goes through one tested escaper, `matchedAsWritten`.
+- CLI-961: the test fixtures write each skill's real display name, so specs assert names where the CLI prints names.
+- CLI-974: eleven `edit --from` plugin specs check what each run left behind, not only what it printed.
+- CLI-976: the compile and `init --from` spec files check what each run left behind.
+- EDITOR-103: an account's saved stack that fails to load with nothing unsaved says `Couldn't load this stack.`, with Retry.
+- EDITOR-104: that click and its Retry read through the account store, so the stack's tile lights and no false "discarding" is shown.
+- EDITOR-108: while an account's stack list cannot be read, `Couldn't load your saved stacks.` shows with Retry, and the grid shows this browser's saves.
+- EDITOR-106: a list that could not be read no longer counts as an empty account, so no save is carried in again.
+- EDITOR-110: a Retry that works hands keyboard focus to the stack it loaded or to the Stacks grid.
+- EDITOR-101: pressing the skill option already in effect saves nothing and reports nothing.
+- EDITOR-105: applying a stack already in effect saves nothing and reports nothing.
+- EDITOR-107: "already in effect" is judged by value, whatever the key order.
+- EDITOR-102: a "nothing saved" test checks both that the state is unchanged and that nothing was written.
+- EDITOR-109: every editor store action is filed by what a second identical call does, checked by a census spec.
+- EDITOR-85: the owed-save dialog, Escape in a skill's options panel and Apply on a proposal put keyboard focus where it was.
+- CLI-979: known gap. When `edit --from` at home drops a skill whose plugin came from another marketplace, the plugin stays installed. The fix waits on the owner's card `q-cli-979-fix`.
+- CLI-971: known gap. A project config that declares nothing, under a HOME holding both tools, is counted as an installation by the refusal and `list`, while commands skip it. The fix is queued.
+- CLI-982: known gap. `init --from` that cannot write the project's config leaves a half-install. Waiting on the owner's card `q-cli-init-half-install`.
+
+See [changelogs/0.174.0.md](./changelogs/0.174.0.md) for full details.
+
 ## [0.173.0] - 2026-10-23
 
 **`doctor` downloads each marketplace on every run, the editor keeps a saved configuration per marketplace and its stack-switch question waits for the stack, and a sub-agent goes off with its last skill**

package/dist/{chunk-LJQXQTFC.js → chunk-37QFHJUW.js}

@@ -1,12 +1,15 @@
 #!/usr/bin/env node
 import {
+  INFO_MESSAGES,
   STATUS_MESSAGES,
   addedToGlobalSubAgents,
   buildMarketplacePluginRef,
+  chooseProviderForThisRun,
   claimSlug,
   completedWithFailures,
   copy,
   defaultUsageGuidance,
+  detectInstallations,
   directoryExists,
   fetchMarketplace,
   fileExists,
@@ -16,6 +19,7 @@ import {
   getErrorMessage,
   getStackSkillIds,
   glob,
+  holdsAConfigDeclaringNothing,
   hostAt,
   installationConfigsUnreadable,
   isHomeDirectory,
@@ -44,13 +48,13 @@ import {
   sharedConfigProjectScopeAtHome,
   skillAssignedToNoAgent,
   skillMetadataUnusableDetail,
+  skippedSkills,
   skippedUnknownAgents,
-  skippedUnknownSkills,
   validateSkillPath,
   verbose,
   warn,
   writeFile
-} from "./chunk-WVFBBZEP.js";
+} from "./chunk-YM3VEDAP.js";
 import {
   BUILT_IN_MATRIX,
   getCategoryDomain,
@@ -60,22 +64,24 @@ import {
   typedEntries,
   typedKeys,
   typedValues
-} from "./chunk-7OG635DK.js";
+} from "./chunk-TG3SPPZY.js";
 import {
   CLI_COLORS,
   CLI_INVOKE_COMMAND,
   DEFAULT_BRANDING,
+  EDITOR_URL,
   EJECT_SOURCE,
   GITHUB_PREFIX,
   GITHUB_SOURCE,
   LOCAL_SKILLS_PATH,
   MIN_TERMINAL_SIZE,
+  PROVIDERS,
   STANDARD_FILES,
   externalIdsNamingNoDirectory,
   isActiveAt,
   orderDomains,
   seedExternalSkillSchema
-} from "./chunk-MHAQWMNJ.js";
+} from "./chunk-U46LYYRA.js";
 
 // src/cli/utils/terminal.ts
 function clearTerminalScreen() {
@@ -103,8 +109,90 @@ var EXIT_CODES = {
   COMPLETED_WITH_FAILURES: 5
 };
 
-// src/cli/lib/seed/external-skills.ts
+// src/cli/lib/installation/provider-flag.ts
 import os from "os";
+import { Flags } from "@oclif/core";
+function providerFlag() {
+  return Flags.string({
+    description: "Which provider's installation this run is about",
+    helpValue: `<${PROVIDERS.join("|")}>`,
+    options: [...PROVIDERS]
+  });
+}
+function providerNamedBy(flagValue) {
+  if (flagValue === void 0) return void 0;
+  return PROVIDERS.find((provider) => provider === flagValue);
+}
+var PROVIDER_FLAG = "--provider";
+var PROVIDER_FLAG_WITH_ITS_VALUE = `${PROVIDER_FLAG}=`;
+var END_OF_FLAGS = "--";
+function providerNamedIn(argv) {
+  const end = argv.indexOf(END_OF_FLAGS);
+  const flags = end === -1 ? argv : argv.slice(0, end);
+  const spaced = flags.indexOf(PROVIDER_FLAG);
+  if (spaced !== -1) return providerNamedBy(flags[spaced + 1]);
+  const joined = flags.find((token) => token.startsWith(PROVIDER_FLAG_WITH_ITS_VALUE));
+  return providerNamedBy(joined?.slice(PROVIDER_FLAG_WITH_ITS_VALUE.length));
+}
+function providerNeedsAConfigurationToInstall() {
+  return `--provider names which installation to create and needs the configuration to create it from, so it is only meaningful beside --from. Build one at ${EDITOR_URL}, then run '${CLI_INVOKE_COMMAND} init --from <id> --provider <provider>'.`;
+}
+function ambiguousInstallation(subject, providers, scopeRoot) {
+  return `${scopeRoot} holds ${providers.length} installations \u2014 ${providers.join(" and ")} \u2014 so ${subject} cannot tell which one you mean. Name it with --provider <${providers.join("|")}>. Nothing has been changed.`;
+}
+async function installationsInPlay(cwd) {
+  const found = await detectInstallations(cwd);
+  const inTheProject = atScope(found, "project");
+  if (inTheProject.length > 0) return { scopeRoot: cwd, providers: providersOf(inTheProject) };
+  return { scopeRoot: os.homedir(), providers: providersOf(atScope(found, "global")) };
+}
+function atScope(found, scope) {
+  return found.filter((installation) => installation.scope === scope);
+}
+function providersOf(installations) {
+  return installations.map((installation) => installation.provider);
+}
+async function refuseAnAmbiguousInstallation(cwd, subject, named, onAmbiguous) {
+  if (named !== void 0) {
+    chooseProviderForThisRun(named);
+    return;
+  }
+  const { scopeRoot, providers } = await installationsInPlay(cwd);
+  if (providers.length <= 1) return;
+  onAmbiguous(ambiguousInstallation(subject, providers, scopeRoot));
+}
+async function globalInstallationStandsIn(cwd, named) {
+  if (!await holdsAConfigDeclaringNothing(cwd)) return false;
+  const { scopeRoot, providers } = await installationsInPlay(cwd);
+  const theProjectHoldsNone = scopeRoot !== cwd;
+  const homeHoldsOneToWorkOn = providers.some(
+    (provider) => named === void 0 || provider === named
+  );
+  return theProjectHoldsNone && homeHoldsOneToWorkOn;
+}
+async function providersInPlay(cwd) {
+  return (await installationsInPlay(cwd)).providers;
+}
+async function installationToName(cwd, named) {
+  if (named !== void 0) return named;
+  const providers = await providersInPlay(cwd);
+  return providers.length > 1 ? providers : void 0;
+}
+async function ambiguityFinding(cwd) {
+  const { scopeRoot, providers } = await installationsInPlay(cwd);
+  if (providers.length <= 1) return null;
+  return ambiguousInstallation("every command that acts on one", providers, scopeRoot);
+}
+async function otherInstallationsInThisScope(cwd) {
+  const { scopeRoot, providers } = await installationsInPlay(cwd);
+  const showing = providerInUse(scopeRoot);
+  const others = providers.filter((provider) => provider !== showing);
+  if (others.length === 0) return null;
+  return `${scopeRoot} holds ${providers.length} installations \u2014 ${providers.join(" and ")} \u2014 and this is the ${showing} one. Show another with --provider <${providers.join("|")}>.`;
+}
+
+// src/cli/lib/seed/external-skills.ts
+import os2 from "os";
 import path from "path";
 import { mkdtemp } from "fs/promises";
 
@@ -326,9 +414,25 @@ function notADirectoryNameError(ids) {
     "A skill id is the directory the skill is written into, so an id holding a path separator, or naming '.' or '..', would be written somewhere other than a directory of its own, and one holding a control character would hand it to the terminal wherever that directory is named. Re-share it with each skill above added again, which mints an id \u2014 'external-<category>-<name>' \u2014 that names one directory."
   ].join("\n");
 }
+var DIRECTORY_NAME_MAX_BYTES = 255;
+function overrunsADirectoryName(id) {
+  return Buffer.byteLength(id, "utf8") > DIRECTORY_NAME_MAX_BYTES;
+}
+function externalIdsTooLongForADirectory(payload) {
+  return Object.keys(payload.external ?? {}).filter(overrunsADirectoryName);
+}
+function tooLongForADirectoryError(ids) {
+  return [
+    "This configuration cannot be installed: these skills travel inside it under ids longer than a directory name may be:",
+    ...ids.map((id) => `  ${JSON.stringify(id)}`),
+    `A skill id is the directory the skill is written into, and a directory name may hold at most ${String(DIRECTORY_NAME_MAX_BYTES)} bytes, so none of these could be written. Re-share it without each skill above.`
+  ].join("\n");
+}
 function registerExternalSkills(payload, matrix2, projectDir) {
   const notDirectoryNames = externalIdsNamingNoDirectory(payload);
   if (notDirectoryNames.length > 0) throw new Error(notADirectoryNameError(notDirectoryNames));
+  const tooLong = externalIdsTooLongForADirectory(payload);
+  if (tooLong.length > 0) throw new Error(tooLongForADirectoryError(tooLong));
   const externals = selectedExternals(payload);
   const asPlugin = askedForAsPlugin(externals);
   const colliding = claimingACatalogueId(externals, matrix2);
@@ -344,7 +448,7 @@ async function writeExternalSkills(installs) {
 var SCRATCH_DIR_PREFIX = "agents-inc-carried-";
 async function carriedSkillsThatDiffer(installs) {
   if (installs.length === 0) return [];
-  const scratch = await mkdtemp(path.join(os.tmpdir(), SCRATCH_DIR_PREFIX));
+  const scratch = await mkdtemp(path.join(os2.tmpdir(), SCRATCH_DIR_PREFIX));
   try {
     const written = await Promise.all(
       installs.map(async (install) => writeExternalSkill(await scratchCopyOf(install, scratch)))
@@ -495,8 +599,8 @@ async function readCarriedSkills(owned) {
 }
 
 // src/cli/lib/seed/seed-apply.ts
-import os2 from "os";
-import { isDeepEqual, omit, partition, pick } from "remeda";
+import os3 from "os";
+import { indexBy, isDeepEqual, omit, partition, pick } from "remeda";
 var NOTHING_KEPT = {
   authoredSkillIds: [],
   unplaceableSkillIds: []
@@ -572,7 +676,7 @@ function withAgentKeptRows(carried, agent, keptRows, payloadRows) {
   };
 }
 async function readInstalledGlobal(projectDir) {
-  const loaded = await loadProjectConfigFromDir(os2.homedir(), providerInUse(projectDir));
+  const loaded = await loadProjectConfigFromDir(os3.homedir(), providerInUse(projectDir));
   return loaded?.config ?? null;
 }
 var NO_GLOBAL_ENTRIES = { skillIds: [], agentNames: [] };
@@ -750,8 +854,13 @@ function entriesActiveAt(skills, agents, scope) {
     agentNames: agents.filter((agent) => isActiveAt(agent, scope)).map((agent) => agent.name)
   };
 }
+function panelRowEntries(held) {
+  const active = held.result.skills.filter((skill) => !skill.excluded);
+  return indexBy(active, (skill) => skill.id);
+}
 function joinedStatement(held) {
-  return held.joined.length === 0 ? [] : [addedToGlobalSubAgents(held.joined)];
+  if (held.joined.length === 0) return [];
+  return [addedToGlobalSubAgents(held.joined, panelRowEntries(held))];
 }
 function projectScopedContent(result) {
   return entriesActiveAt(result.skills, result.agentConfigs, "project");
@@ -876,6 +985,16 @@ var BaseCommand = class extends Command {
     await super.init();
     await this.ensureTerminalSize();
   }
+  /**
+   * Called first where a command starts work on the installation in play, which for a project whose
+   * config declares nothing is the global one. On stderr, as the init hook's old-folder lines are,
+   * so piped output is unchanged.
+   */
+  async sayWhenTheGlobalInstallationStandsIn(named) {
+    if (!await globalInstallationStandsIn(process.cwd(), named)) return;
+    process.stderr.write(`${INFO_MESSAGES.GLOBAL_INSTALLATION_STANDS_IN}
+`);
+  }
   async ensureTerminalSize() {
     if (isTerminalBigEnough()) return;
     clearTerminalScreen();
@@ -1018,10 +1137,11 @@ var BaseCommand = class extends Command {
       exit: EXIT_CODES.ERROR
     });
   }
-  warnOfSkippedEntries(mapping) {
+  /** `unloadedSkillIds`: skills the marketplace ships and could not load, never unknown ones. */
+  warnOfSkippedEntries(mapping, unloadedSkillIds) {
     const { skippedSkillIds, skippedAgentNames, agentsOnlySkippedSkillsCarried } = mapping;
     if (skippedSkillIds.length > 0) {
-      this.warn(skippedUnknownSkills(skippedSkillIds, agentsOnlySkippedSkillsCarried));
+      this.warn(skippedSkills(skippedSkillIds, agentsOnlySkippedSkillsCarried, unloadedSkillIds));
     }
     if (skippedAgentNames.length > 0) this.warn(skippedUnknownAgents(skippedAgentNames));
   }
@@ -1079,6 +1199,14 @@ ${chalk.hex(CLI_COLORS.WARNING)(completedWithFailures(this.incompleteWork))}
 export {
   clearTerminalScreen,
   EXIT_CODES,
+  providerFlag,
+  providerNamedBy,
+  providerNamedIn,
+  providerNeedsAConfigurationToInstall,
+  refuseAnAmbiguousInstallation,
+  installationToName,
+  ambiguityFinding,
+  otherInstallationsInThisScope,
   registerExternalSkills,
   writeExternalSkills,
   carriedSkillsThatDiffer,
@@ -1089,8 +1217,9 @@ export {
   restoreInstalledGlobal,
   sameAssignments,
   notInstalledGlobally,
+  panelRowEntries,
   joinedStatement,
   installsAtHome,
   BaseCommand
 };
-//# sourceMappingURL=chunk-LJQXQTFC.js.map
+//# sourceMappingURL=chunk-37QFHJUW.js.map