bip-skills 1.4.9 → 1.4.10

package/dist/cli.mjs

@@ -9,11 +9,10 @@ import { t as require_gray_matter } from "./_chunks/libs/gray-matter.mjs";
 import "./_chunks/libs/extend-shallow.mjs";
 import "./_chunks/libs/esprima.mjs";
 import { t as xdgConfig } from "./_chunks/libs/xdg-basedir.mjs";
-import { execSync, spawn, spawnSync } from "child_process";
+import { execSync, spawnSync } from "child_process";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";
 import { basename, dirname, isAbsolute, join, normalize, posix, relative, resolve, sep } from "path";
 import { homedir, platform, tmpdir } from "os";
-import { createHash } from "crypto";
 import { fileURLToPath } from "url";
 import * as readline from "readline";
 import { Writable } from "stream";
@@ -21,6 +20,7 @@ import { Buffer } from "node:buffer";
 import { access, cp, lstat, mkdir, mkdtemp, readFile, readdir, readlink, realpath, rm, stat, symlink, writeFile } from "fs/promises";
 import http from "node:http";
 import https from "node:https";
+import { createHash } from "crypto";
 var import_picocolors = /* @__PURE__ */ __toESM(require_picocolors(), 1);
 const AGENTS_DIR$2 = ".agents";
 const SKILLS_SUBDIR = "skills";
@@ -2070,7 +2070,7 @@ function createEmptyLocalLock() {
 		skills: {}
 	};
 }
-var version$1 = "1.4.9";
+var version$1 = "1.4.10";
 const isCancelled$1 = (value) => typeof value === "symbol";
 async function isSourcePrivate(source) {
 	const ownerRepo = parseOwnerRepo(source);
@@ -2083,6 +2083,14 @@ function initTelemetry(version) {
 function getWellKnownFileCount(skill) {
 	return skill.declaredFiles.length > 0 ? skill.declaredFiles.length : skill.files.size;
 }
+function getWellKnownSkillHash(skill) {
+	return skill.indexEntry.hash || skill.indexEntry.contentHash || skill.indexEntry.skillFolderHash || "";
+}
+function getWellKnownSkillPath(skill) {
+	if (skill.indexEntry.entry) return skill.indexEntry.entry;
+	if (skill.installTarget.type === "inline") return skill.installTarget.skillRoot ? posix.join(skill.installTarget.skillRoot, "SKILL.md") : "SKILL.md";
+	return skill.installTarget.subpath ? posix.join(skill.installTarget.subpath, "SKILL.md") : "SKILL.md";
+}
 function getWellKnownEmptyStateMessage(status, totalSkillCount, invalidSkillCount) {
 	switch (status) {
 		case "no-valid-entries": return totalSkillCount > 0 ? `Found a skills index, but all ${totalSkillCount} entr${totalSkillCount === 1 ? "y is" : "ies are"} invalid. Check that each entry has a top-level SKILL.md in files[].` : "Found a skills index, but it does not contain any valid skill entries.";
@@ -2590,7 +2598,8 @@ async function handleWellKnownSkills(source, url, options, spinner, allowFallbac
 					source: sourceIdentifier,
 					sourceType: "well-known",
 					sourceUrl: skill.sourceUrl,
-					skillFolderHash: ""
+					skillPath: getWellKnownSkillPath(skill),
+					skillFolderHash: getWellKnownSkillHash(skill)
 				});
 			} catch {}
 		}
@@ -4106,6 +4115,146 @@ function parseRemoveOptions(args) {
 		options
 	};
 }
+function getUpdateCheckApiBase() {
+	return process.env.SKILLS_API_URL || DEFAULT_SEARCH_API_BASE;
+}
+function canCheckWithServer(skill) {
+	return skill.entry.sourceType !== "github";
+}
+function canCheckWithGitHub(skill) {
+	return skill.entry.sourceType === "github" && Boolean(skill.entry.skillFolderHash) && Boolean(skill.entry.skillPath);
+}
+function buildUpdateCheckRequest(skills) {
+	return {
+		forceRefresh: true,
+		skills: skills.map(({ name, entry }) => ({
+			name,
+			source: entry.source,
+			sourceType: entry.sourceType,
+			sourceUrl: entry.sourceUrl,
+			skillPath: entry.skillPath,
+			skillFolderHash: entry.skillFolderHash
+		}))
+	};
+}
+async function checkServerUpdates(skills, apiBaseUrl) {
+	if (skills.length === 0) return {
+		checkedCount: 0,
+		skippedCount: 0,
+		updates: [],
+		errors: []
+	};
+	const byName = new Map(skills.map((skill) => [skill.name, skill]));
+	const url = `${apiBaseUrl.replace(/\/$/, "")}/api/check-updates`;
+	const request = buildUpdateCheckRequest(skills);
+	debugLog(`[update] requesting update check: ${url}`);
+	debugLog(`[update] update check request: ${JSON.stringify(request)}`);
+	const response = await fetchWithSelectiveTls(url, {
+		method: "POST",
+		headers: {
+			"Content-Type": "application/json",
+			Accept: "application/json"
+		},
+		body: JSON.stringify(request)
+	});
+	debugLog(`[update] update check response status: ${response.status} ${response.statusText}`);
+	if (!response.ok) throw new Error(`Update check failed with status ${response.status}`);
+	const responseText = await response.text();
+	debugLog(`[update] update check response body: ${responseText}`);
+	const data = JSON.parse(responseText);
+	return {
+		checkedCount: data.checked ?? skills.length,
+		skippedCount: data.skipped ?? 0,
+		updates: (data.updates || []).flatMap((update) => {
+			const skill = byName.get(update.name);
+			if (!skill) return [];
+			return [{
+				name: update.name,
+				source: update.source,
+				entry: skill.entry,
+				currentHash: update.currentHash,
+				latestHash: update.latestHash
+			}];
+		}),
+		errors: data.errors || []
+	};
+}
+async function checkGitHubUpdates(skills, token) {
+	const updates = [];
+	const errors = [];
+	for (const { name, entry } of skills) try {
+		const latestHash = await fetchSkillFolderHash(entry.source, entry.skillPath, token);
+		if (!latestHash) {
+			errors.push({
+				name,
+				source: entry.source,
+				error: "Could not fetch from GitHub"
+			});
+			continue;
+		}
+		if (latestHash !== entry.skillFolderHash) updates.push({
+			name,
+			source: entry.source,
+			entry,
+			currentHash: entry.skillFolderHash,
+			latestHash
+		});
+	} catch (err) {
+		errors.push({
+			name,
+			source: entry.source,
+			error: err instanceof Error ? err.message : "Unknown error"
+		});
+	}
+	return {
+		checkedCount: skills.length,
+		skippedCount: 0,
+		updates,
+		errors
+	};
+}
+async function checkSkillUpdates(skills, options = {}) {
+	const serverSkills = skills.filter(canCheckWithServer);
+	const githubSkills = skills.filter(canCheckWithGitHub);
+	let checkedCount = 0;
+	let skippedCount = skills.length - serverSkills.length - githubSkills.length;
+	const updates = [];
+	const errors = [];
+	debugLog(`[update] prepared ${serverSkills.length} server skill(s), ${githubSkills.length} github skill(s), ${skippedCount} skipped`);
+	for (const skill of skills) {
+		if (serverSkills.includes(skill)) {
+			debugLog(`[update] server check ${skill.name}: sourceType=${skill.entry.sourceType} hash=${skill.entry.skillFolderHash || "(empty)"}`);
+			continue;
+		}
+		if (githubSkills.includes(skill)) {
+			debugLog(`[update] github check ${skill.name}: path=${skill.entry.skillPath || "(missing)"} hash=${skill.entry.skillFolderHash || "(empty)"}`);
+			continue;
+		}
+		debugLog(`[update] skipped ${skill.name}: sourceType=${skill.entry.sourceType} path=${skill.entry.skillPath || "(missing)"} hash=${skill.entry.skillFolderHash || "(empty)"}`);
+	}
+	if (serverSkills.length > 0) try {
+		const serverResult = await checkServerUpdates(serverSkills, options.apiBaseUrl || getUpdateCheckApiBase());
+		checkedCount += serverResult.checkedCount;
+		skippedCount += serverResult.skippedCount;
+		updates.push(...serverResult.updates);
+		errors.push(...serverResult.errors);
+	} catch (err) {
+		debugLog(`[update] server update check failed: ${err instanceof Error ? err.message : "Unknown error"}`);
+	}
+	if (githubSkills.length > 0) {
+		const githubResult = await checkGitHubUpdates(githubSkills, options.githubToken);
+		checkedCount += githubResult.checkedCount;
+		skippedCount += githubResult.skippedCount;
+		updates.push(...githubResult.updates);
+		errors.push(...githubResult.errors);
+	}
+	return {
+		checkedCount,
+		skippedCount,
+		updates,
+		errors
+	};
+}
 const __dirname = dirname(fileURLToPath(import.meta.url));
 function getVersion() {
 	try {
@@ -4122,12 +4271,12 @@ const BOLD = "\x1B[1m";
 const DIM = "\x1B[38;5;102m";
 const TEXT = "\x1B[38;5;145m";
 const LOGO_LINES = [
-	"███████╗██╗  ██╗██╗██╗     ██╗     ███████╗",
-	"██╔════╝██║ ██╔╝██║██║     ██║     ██╔════╝",
-	"███████╗█████╔╝ ██║██║     ██║     ███████╗",
-	"╚════██║██╔═██╗ ██║██║     ██║     ╚════██║",
-	"███████║██║  ██╗██║███████╗███████╗███████║",
-	"╚══════╝╚═╝  ╚═╝╚═╝╚══════╝╚══════╝╚══════╝"
+	"██████╗   ██╗   ██████╗       ███████╗██╗  ██╗██╗██╗     ██╗     ███████╗",
+	"██╔══██╗  ██║   ██╔══██╗      ██╔════╝██║ ██╔╝██║██║     ██║     ██╔════╝",
+	"██████╔╝  ██║   ██████╔╝█████╗███████╗█████╔╝ ██║██║     ██║     ███████╗",
+	"██╔══██╗  ██║   ██╔═══╝ ╚════╝╚════██║██╔═██╗ ██║██║     ██║     ╚════██║",
+	"██████╔╝  ██║   ██║           ███████║██║  ██╗██║███████╗███████╗███████║",
+	"╚═════╝   ╚═╝   ╚═╝           ╚══════╝╚═╝  ╚═╝╚═╝╚══════╝╚══════╝╚══════╝"
 ];
 const GRAYS = [
 	"\x1B[38;5;250m",
@@ -4146,6 +4295,8 @@ function showLogo() {
 function showBanner() {
 	showLogo();
 	console.log();
+	console.log(`${BOLD}${TEXT}BIP-SKILLS${RESET}`);
+	console.log();
 	console.log(`${DIM}The open agent skills ecosystem${RESET}`);
 	console.log();
 	console.log(`  ${DIM}$${RESET} ${TEXT}${CLI_NPX_COMMAND} add ${DIM}<package>${RESET}    ${DIM}Add a new skill${RESET}`);
@@ -4343,82 +4494,69 @@ function readSkillLock() {
 		};
 	}
 }
+function getLockedSkillsForUpdate(lock) {
+	return Object.entries(lock.skills).map(([name, entry]) => ({
+		name,
+		entry
+	}));
+}
+function buildWellKnownUpdateUrl(name, entry) {
+	try {
+		if (entry.sourceUrl.startsWith("http://") || entry.sourceUrl.startsWith("https://")) {
+			const parsed = new URL(entry.sourceUrl);
+			const markerIndex = parsed.pathname.indexOf("/.well-known/skills");
+			const basePath = markerIndex >= 0 ? parsed.pathname.slice(0, markerIndex) : "";
+			return `${parsed.origin}${basePath}@${name}`;
+		}
+	} catch {}
+	if (entry.source.startsWith("http://") || entry.source.startsWith("https://")) return `${entry.source.replace(/\/$/, "")}@${name}`;
+	if (entry.source.includes(".")) return `https://${entry.source.replace(/\/$/, "")}@${name}`;
+	return entry.sourceUrl;
+}
+function buildUpdateInstallUrl(name, entry) {
+	if (entry.sourceType === "well-known") return buildWellKnownUpdateUrl(name, entry);
+	if (entry.sourceType !== "github" || !entry.skillPath) return entry.sourceUrl;
+	let skillFolder = entry.skillPath;
+	if (skillFolder.endsWith("/SKILL.md")) skillFolder = skillFolder.slice(0, -9);
+	else if (skillFolder.endsWith("SKILL.md")) skillFolder = skillFolder.slice(0, -8);
+	if (skillFolder.endsWith("/")) skillFolder = skillFolder.slice(0, -1);
+	return `${entry.sourceUrl.replace(/\.git$/, "").replace(/\/$/, "")}/tree/main/${skillFolder}`;
+}
 async function runCheck(args = []) {
 	console.log(`${TEXT}Checking for skill updates...${RESET}`);
 	console.log();
 	const lock = readSkillLock();
-	const skillNames = Object.keys(lock.skills);
-	if (skillNames.length === 0) {
+	if (Object.keys(lock.skills).length === 0) {
 		console.log(`${DIM}No skills tracked in lock file.${RESET}`);
 		console.log(`${DIM}Install skills with${RESET} ${TEXT}${CLI_NPX_COMMAND} add <package>${RESET}`);
 		return;
 	}
-	const token = getGitHubToken();
-	const skillsBySource = /* @__PURE__ */ new Map();
-	let skippedCount = 0;
-	for (const skillName of skillNames) {
-		const entry = lock.skills[skillName];
-		if (!entry) continue;
-		if (entry.sourceType !== "github" || !entry.skillFolderHash || !entry.skillPath) {
-			skippedCount++;
-			continue;
-		}
-		const existing = skillsBySource.get(entry.source) || [];
-		existing.push({
-			name: skillName,
-			entry
-		});
-		skillsBySource.set(entry.source, existing);
-	}
-	const totalSkills = skillNames.length - skippedCount;
-	if (totalSkills === 0) {
-		console.log(`${DIM}No GitHub skills to check.${RESET}`);
+	const result = await checkSkillUpdates(getLockedSkillsForUpdate(lock), { githubToken: getGitHubToken() });
+	if (result.checkedCount === 0) {
+		console.log(`${DIM}No skills to check.${RESET}`);
 		return;
 	}
-	console.log(`${DIM}Checking ${totalSkills} skill(s) for updates...${RESET}`);
-	const updates = [];
-	const errors = [];
-	for (const [source, skills] of skillsBySource) for (const { name, entry } of skills) try {
-		const latestHash = await fetchSkillFolderHash(source, entry.skillPath, token);
-		if (!latestHash) {
-			errors.push({
-				name,
-				source,
-				error: "Could not fetch from GitHub"
-			});
-			continue;
-		}
-		if (latestHash !== entry.skillFolderHash) updates.push({
-			name,
-			source
-		});
-	} catch (err) {
-		errors.push({
-			name,
-			source,
-			error: err instanceof Error ? err.message : "Unknown error"
-		});
-	}
+	console.log(`${DIM}Checking ${result.checkedCount} skill(s) for updates...${RESET}`);
 	console.log();
-	if (updates.length === 0) console.log(`${TEXT}✓ All skills are up to date${RESET}`);
+	if (result.updates.length === 0) console.log(`${TEXT}✓ All skills are up to date${RESET}`);
 	else {
-		console.log(`${TEXT}${updates.length} update(s) available:${RESET}`);
+		console.log(`${TEXT}${result.updates.length} update(s) available:${RESET}`);
 		console.log();
-		for (const update of updates) {
+		for (const update of result.updates) {
 			console.log(`  ${TEXT}↑${RESET} ${update.name}`);
 			console.log(`    ${DIM}source: ${update.source}${RESET}`);
 		}
 		console.log();
 		console.log(`${DIM}Run${RESET} ${TEXT}${CLI_NPX_COMMAND} update${RESET} ${DIM}to update all skills${RESET}`);
 	}
-	if (errors.length > 0) {
+	if (result.errors.length > 0) {
 		console.log();
-		console.log(`${DIM}Could not check ${errors.length} skill(s) (may need reinstall)${RESET}`);
+		console.log(`${DIM}Could not check ${result.errors.length} skill(s) (may need reinstall)${RESET}`);
 	}
 	track({
 		event: "check",
-		skillCount: String(totalSkills),
-		updatesAvailable: String(updates.length)
+		skillCount: String(result.checkedCount),
+		updatesAvailable: String(result.updates.length)
 	});
 	console.log();
 }
@@ -4426,58 +4564,32 @@ async function runUpdate() {
 	console.log(`${TEXT}Checking for skill updates...${RESET}`);
 	console.log();
 	const lock = readSkillLock();
-	const skillNames = Object.keys(lock.skills);
-	if (skillNames.length === 0) {
+	if (Object.keys(lock.skills).length === 0) {
 		console.log(`${DIM}No skills tracked in lock file.${RESET}`);
 		console.log(`${DIM}Install skills with${RESET} ${TEXT}${CLI_NPX_COMMAND} add <package>${RESET}`);
 		return;
 	}
-	const token = getGitHubToken();
-	const updates = [];
-	let checkedCount = 0;
-	for (const skillName of skillNames) {
-		const entry = lock.skills[skillName];
-		if (!entry) continue;
-		if (entry.sourceType !== "github" || !entry.skillFolderHash || !entry.skillPath) continue;
-		checkedCount++;
-		try {
-			const latestHash = await fetchSkillFolderHash(entry.source, entry.skillPath, token);
-			if (latestHash && latestHash !== entry.skillFolderHash) updates.push({
-				name: skillName,
-				source: entry.source,
-				entry
-			});
-		} catch {}
-	}
-	if (checkedCount === 0) {
+	const result = await checkSkillUpdates(getLockedSkillsForUpdate(lock), { githubToken: getGitHubToken() });
+	if (result.checkedCount === 0) {
 		console.log(`${DIM}No skills to check.${RESET}`);
 		return;
 	}
-	if (updates.length === 0) {
+	if (result.updates.length === 0) {
 		console.log(`${TEXT}✓ All skills are up to date${RESET}`);
 		console.log();
 		return;
 	}
-	console.log(`${TEXT}Found ${updates.length} update(s)${RESET}`);
+	console.log(`${TEXT}Found ${result.updates.length} update(s)${RESET}`);
 	console.log();
 	let successCount = 0;
 	let failCount = 0;
-	for (const update of updates) {
+	for (const update of result.updates) {
 		console.log(`${TEXT}Updating ${update.name}...${RESET}`);
-		let installUrl = update.entry.sourceUrl;
-		if (update.entry.skillPath) {
-			let skillFolder = update.entry.skillPath;
-			if (skillFolder.endsWith("/SKILL.md")) skillFolder = skillFolder.slice(0, -9);
-			else if (skillFolder.endsWith("SKILL.md")) skillFolder = skillFolder.slice(0, -8);
-			if (skillFolder.endsWith("/")) skillFolder = skillFolder.slice(0, -1);
-			installUrl = update.entry.sourceUrl.replace(/\.git$/, "").replace(/\/$/, "");
-			installUrl = `${installUrl}/tree/main/${skillFolder}`;
-		}
 		if (spawnSync("npx", [
 			"-y",
 			CLI_PACKAGE_NAME,
 			"add",
-			installUrl,
+			buildUpdateInstallUrl(update.name, update.entry),
 			"-g",
 			"-y"
 		], { stdio: [
@@ -4497,7 +4609,7 @@ async function runUpdate() {
 	if (failCount > 0) console.log(`${DIM}Failed to update ${failCount} skill(s)${RESET}`);
 	track({
 		event: "update",
-		skillCount: String(updates.length),
+		skillCount: String(result.updates.length),
 		successCount: String(successCount),
 		failCount: String(failCount)
 	});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bip-skills",
-  "version": "1.4.9",
+  "version": "1.4.10",
   "description": "The open agent skills ecosystem",
   "type": "module",
   "bin": {
@@ -14,20 +14,6 @@
     "README.md",
     "ThirdPartyNoticeText.txt"
   ],
-  "scripts": {
-    "build": "obuild && node scripts/generate-licenses.ts",
-    "generate-licenses": "node scripts/generate-licenses.ts",
-    "dev": "node src/cli.ts",
-    "exec:test": "node scripts/execute-tests.ts",
-    "pack:check": "npm pack --dry-run --ignore-scripts --cache .npm-cache",
-    "prepublishOnly": "npm run build",
-    "format": "prettier --write 'src/**/*.ts' 'scripts/**/*.ts'",
-    "format:check": "prettier --check 'src/**/*.ts' 'scripts/**/*.ts'",
-    "prepare": "husky",
-    "test": "vitest",
-    "type-check": "tsc --noEmit",
-    "publish:snapshot": "npm version prerelease --preid=snapshot --no-git-tag-version && npm publish --tag snapshot"
-  },
   "lint-staged": {
     "src/**/*.ts": "prettier --write",
     "scripts/**/*.ts": "prettier --write",
@@ -88,7 +74,8 @@
   "author": "",
   "license": "MIT",
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
   },
   "devDependencies": {
     "@clack/prompts": "^0.11.0",
@@ -108,5 +95,16 @@
   "engines": {
     "node": ">=18"
   },
-  "packageManager": "pnpm@10.17.1"
-}
+  "scripts": {
+    "build": "obuild && node scripts/generate-licenses.ts",
+    "generate-licenses": "node scripts/generate-licenses.ts",
+    "dev": "node src/cli.ts",
+    "exec:test": "node scripts/execute-tests.ts",
+    "pack:check": "npm pack --dry-run --ignore-scripts --cache .npm-cache",
+    "format": "prettier --write 'src/**/*.ts' 'scripts/**/*.ts'",
+    "format:check": "prettier --check 'src/**/*.ts' 'scripts/**/*.ts'",
+    "test": "vitest",
+    "type-check": "tsc --noEmit",
+    "publish:snapshot": "npm version prerelease --preid=snapshot --no-git-tag-version && npm publish --tag snapshot"
+  }
+}