botmux 3.11.0 → 3.12.1

package/dist/core/skills/package.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"package.d.ts","sourceRoot":"","sources":["../../../src/core/skills/package.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAI5D,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEtD;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAGjG;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,GACzC,YAAY,CAmBd"}
+{"version":3,"file":"package.d.ts","sourceRoot":"","sources":["../../../src/core/skills/package.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAI5D,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEtD;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAGjG;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,GACzC,YAAY,CAyBd"}

package/dist/core/skills/package.js

@@ -1,5 +1,5 @@
-import { existsSync, readFileSync, realpathSync } from 'node:fs';
-import { basename, join } from 'node:path';
+import { existsSync, readFileSync, realpathSync, statSync } from 'node:fs';
+import { basename, isAbsolute, join, relative, sep } from 'node:path';
 import { readSkillFrontmatter } from './frontmatter.js';
 const NAME_RE = /^[a-zA-Z0-9][a-zA-Z0-9:_-]{0,127}$/;
 export function isValidSkillName(name) {
@@ -15,7 +15,14 @@ export function loadSkillPackage(dir, opts) {
     if (!valid.ok)
         throw new Error(valid.reason);
     const rootDir = realpathSync(dir);
-    const text = readFileSync(join(rootDir, 'SKILL.md'), 'utf-8');
+    const entrypoint = realpathSync(join(rootDir, 'SKILL.md'));
+    const entrypointRelative = relative(rootDir, entrypoint);
+    if (entrypointRelative === '..' || entrypointRelative.startsWith(`..${sep}`) || isAbsolute(entrypointRelative)) {
+        throw new Error('skill_entrypoint_outside_root');
+    }
+    if (!statSync(entrypoint).isFile())
+        throw new Error('skill_entrypoint_not_file');
+    const text = readFileSync(entrypoint, 'utf-8');
     const fm = readSkillFrontmatter(text);
     const name = fm.name?.trim() || basename(rootDir);
     if (!isValidSkillName(name))

package/dist/core/skills/package.js.map

@@ -1 +1 @@
-{"version":3,"file":"package.js","sourceRoot":"","sources":["../../../src/core/skills/package.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAGxD,MAAM,OAAO,GAAG,oCAAoC,CAAC;AAErD,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,GAAW;IACjD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IACzF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,GAAW,EACX,IAA0C;IAE1C,MAAM,KAAK,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC;IAC9D,MAAM,EAAE,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;IAC3E,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;QACnB,IAAI;QACJ,WAAW,EAAE,EAAE,CAAC,WAAW;QAC3B,WAAW,EAAE,EAAE,CAAC,WAAW;QAC3B,OAAO,EAAE,EAAE,CAAC,OAAO;QACnB,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,EAAE;QACnB,OAAO;QACP,UAAU,EAAE,UAAU;QACtB,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"package.js","sourceRoot":"","sources":["../../../src/core/skills/package.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC3E,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAGxD,MAAM,OAAO,GAAG,oCAAoC,CAAC;AAErD,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,GAAW;IACjD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IACzF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,GAAW,EACX,IAA0C;IAE1C,MAAM,KAAK,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;IAC3D,MAAM,kBAAkB,GAAG,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACzD,IAAI,kBAAkB,KAAK,IAAI,IAAI,kBAAkB,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC/G,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACjF,MAAM,IAAI,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,EAAE,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;IAC3E,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;QACnB,IAAI;QACJ,WAAW,EAAE,EAAE,CAAC,WAAW;QAC3B,WAAW,EAAE,EAAE,CAAC,WAAW;QAC3B,OAAO,EAAE,EAAE,CAAC,OAAO;QACnB,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,EAAE;QACnB,OAAO;QACP,UAAU,EAAE,UAAU;QACtB,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC;AACJ,CAAC"}

package/dist/core/skills/policy.d.ts

@@ -1,4 +1,4 @@
-import type { BotSkillPolicy, ResolvedSkill, SkillDiagnostic, SkillPackage } from './types.js';
+import type { BotSkillPolicy, ResolvedSkill, SkillDiagnostic, SkillPackage, SkillPack } from './types.js';
 export interface SkillPolicyInput {
     registrySkills: SkillPackage[];
     projectSkills: SkillPackage[];
@@ -7,6 +7,10 @@ export interface SkillPolicyInput {
     globalDelivery?: 'auto' | 'prompt' | 'native';
     botPolicy: BotSkillPolicy | undefined;
     workingDir: string;
+    /** Skill pack registry used to expand `pack:<id>` selectors. When absent,
+     *  `pack:*` selectors resolve to nothing and emit a `pack_not_found`
+     *  diagnostic, so callers that don't know about packs still behave safely. */
+    packs?: Record<string, SkillPack>;
 }
 export interface SkillPolicyResult {
     enabled: boolean;

package/dist/core/skills/policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../../src/core/skills/policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,aAAa,EACb,eAAe,EACf,YAAY,EAEb,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,gBAAgB;IAC/B,cAAc,EAAE,YAAY,EAAE,CAAC;IAC/B,aAAa,EAAE,YAAY,EAAE,CAAC;IAC9B,YAAY,CAAC,EAAE,YAAY,EAAE,CAAC;IAC9B,mBAAmB,CAAC,EAAE,KAAK,GAAG,SAAS,GAAG,KAAK,CAAC;IAChD,cAAc,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAC9C,SAAS,EAAE,cAAc,GAAG,SAAS,CAAC;IACtC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACvC,cAAc,EAAE,aAAa,EAAE,CAAC;IAChC,WAAW,EAAE,eAAe,EAAE,CAAC;CAChC;AAeD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,gBAAgB,GAAG,iBAAiB,CA6D7E"}
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../../src/core/skills/policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,aAAa,EACb,eAAe,EACf,YAAY,EACZ,SAAS,EAEV,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,gBAAgB;IAC/B,cAAc,EAAE,YAAY,EAAE,CAAC;IAC/B,aAAa,EAAE,YAAY,EAAE,CAAC;IAC9B,YAAY,CAAC,EAAE,YAAY,EAAE,CAAC;IAC9B,mBAAmB,CAAC,EAAE,KAAK,GAAG,SAAS,GAAG,KAAK,CAAC;IAChD,cAAc,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAC9C,SAAS,EAAE,cAAc,GAAG,SAAS,CAAC;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB;;kFAE8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACvC,cAAc,EAAE,aAAa,EAAE,CAAC;IAChC,WAAW,EAAE,eAAe,EAAE,CAAC;CAChC;AAmBD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,gBAAgB,GAAG,iBAAiB,CA4H7E"}

package/dist/core/skills/policy.js

@@ -11,6 +11,9 @@ function appendMatches(out, skills, selector, reason) {
             out.push({ ...skill, priorityReason: reason });
     }
 }
+function skillNameFromSelector(selector) {
+    return selector.slice('skill:'.length);
+}
 export function resolveSkillPolicy(input) {
     const policy = input.botPolicy;
     const pluginSkills = input.pluginSkills ?? [];
@@ -31,10 +34,70 @@ export function resolveSkillPolicy(input) {
     else if (projectMode === 'all') {
         candidates.push(...input.projectSkills);
     }
+    // Keep the same source precedence as direct selectors: registry candidates
+    // are appended before project candidates, so the first package with a name
+    // must win for both `skill:*` and pack-expanded references.
+    const candidateByName = new Map();
+    for (const skill of candidates) {
+        if (!candidateByName.has(skill.name))
+            candidateByName.set(skill.name, skill);
+    }
     const raw = [];
-    for (const selector of policy?.include ?? []) {
-        if (selector.startsWith('skill:'))
-            appendMatches(raw, candidates, selector, 'bot:include');
+    // Partition the include array so direct `skill:*` references are ALWAYS
+    // expanded before `pack:*` references, regardless of the order the user wrote
+    // them in. This guarantees "direct always wins": a skill explicitly attached
+    // to a bot shadows the same skill pulled in via a pack, even if the pack
+    // selector appears first in the array. Within each partition the original
+    // policy order is preserved for stable, predictable resolution.
+    const include = policy?.include ?? [];
+    const directSelectors = include.filter((s) => s.startsWith('skill:'));
+    const packSelectors = include.filter((s) => s.startsWith('pack:'));
+    for (const selector of directSelectors) {
+        appendMatches(raw, candidates, selector, 'bot:include');
+    }
+    for (const selector of packSelectors) {
+        const packId = selector.slice('pack:'.length);
+        const pack = input.packs && Object.hasOwn(input.packs, packId)
+            ? input.packs[packId]
+            : undefined;
+        if (!pack) {
+            diagnostics.push({
+                level: 'warn',
+                code: 'pack_not_found',
+                message: `Skill pack not found: ${packId}`,
+            });
+            continue;
+        }
+        if (!Array.isArray(pack.include)) {
+            diagnostics.push({
+                level: 'warn',
+                code: 'pack_invalid',
+                message: `Skill pack "${packId}" has no valid include list`,
+            });
+            continue;
+        }
+        for (const member of pack.include) {
+            if (typeof member !== 'string' || !/^skill:.+$/.test(member)) {
+                diagnostics.push({
+                    level: 'warn',
+                    code: 'pack_invalid',
+                    message: `Skill pack "${packId}" contains a non-skill selector: ${String(member)}`,
+                });
+                continue;
+            }
+            const skillName = skillNameFromSelector(member);
+            const skill = candidateByName.get(skillName);
+            if (!skill) {
+                diagnostics.push({
+                    level: 'warn',
+                    code: 'pack_skill_missing',
+                    message: `Skill pack "${packId}" references missing skill: ${skillName}`,
+                    skillName,
+                });
+                continue;
+            }
+            raw.push({ ...skill, priorityReason: `bot:pack:${packId}` });
+        }
     }
     for (const skill of pluginSkills) {
         const reason = skill.source.type === 'plugin' ? `plugin:${skill.source.pluginId}` : 'plugin';

package/dist/core/skills/policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../src/core/skills/policy.ts"],"names":[],"mappings":"AA0BA,SAAS,eAAe,CAAC,KAAmB,EAAE,QAAuB;IACnE,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC;IAClD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,GAAoB,EAAE,MAAsB,EAAE,QAAuB,EAAE,MAAc;IAC1G,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAuB;IACxD,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC;IAC/B,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC;IAC9C,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IACrG,CAAC;IAED,MAAM,WAAW,GAAsB,EAAE,CAAC;IAC1C,MAAM,UAAU,GAAG,CAAC,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC;IAC7C,MAAM,WAAW,GAAG,KAAK,CAAC,mBAAmB,IAAI,KAAK,CAAC;IACvD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,WAAW,CAAC,IAAI,CAAC;YACf,KAAK,EAAE,MAAM;YACb,IAAI,EAAE,mCAAmC;YACzC,OAAO,EAAE,4GAA4G;SACtH,CAAC,CAAC;QACH,UAAU,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC;IAC1C,CAAC;SAAM,IAAI,WAAW,KAAK,KAAK,EAAE,CAAC;QACjC,UAAU,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,KAAK,MAAM,QAAQ,IAAI,MAAM,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC;QAC7C,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,aAAa,CAAC,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IAC7F,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC7F,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,cAAc,GAAoB,EAAE,CAAC;IAC3C,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,WAAW,CAAC,IAAI,CAAC;gBACf,KAAK,EAAE,MAAM;gBACb,IAAI,EAAE,0BAA0B;gBAChC,OAAO,EAAE,6BAA6B,KAAK,CAAC,IAAI,EAAE;gBAClD,SAAS,EAAE,KAAK,CAAC,IAAI;aACtB,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrB,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,WAAW,CAAC,IAAI,CAAC;YACf,KAAK,EAAE,MAAM;YACb,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,oCAAoC;SAC9C,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,KAAK,CAAC,cAAc,IAAI,MAAM;QACxC,cAAc;QACd,WAAW;KACZ,CAAC;AACJ,CAAC"}
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../src/core/skills/policy.ts"],"names":[],"mappings":"AA+BA,SAAS,eAAe,CAAC,KAAmB,EAAE,QAAuB;IACnE,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC;IAClD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,GAAoB,EAAE,MAAsB,EAAE,QAAuB,EAAE,MAAc;IAC1G,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAuB;IACpD,OAAO,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAuB;IACxD,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC;IAC/B,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC;IAC9C,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IACrG,CAAC;IAED,MAAM,WAAW,GAAsB,EAAE,CAAC;IAC1C,MAAM,UAAU,GAAG,CAAC,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC;IAC7C,MAAM,WAAW,GAAG,KAAK,CAAC,mBAAmB,IAAI,KAAK,CAAC;IACvD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,WAAW,CAAC,IAAI,CAAC;YACf,KAAK,EAAE,MAAM;YACb,IAAI,EAAE,mCAAmC;YACzC,OAAO,EAAE,4GAA4G;SACtH,CAAC,CAAC;QACH,UAAU,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC;IAC1C,CAAC;SAAM,IAAI,WAAW,KAAK,KAAK,EAAE,CAAC;QACjC,UAAU,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC;IAC1C,CAAC;IAED,2EAA2E;IAC3E,2EAA2E;IAC3E,4DAA4D;IAC5D,MAAM,eAAe,GAAG,IAAI,GAAG,EAAwB,CAAC;IACxD,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,GAAG,GAAoB,EAAE,CAAC;IAEhC,wEAAwE;IACxE,8EAA8E;IAC9E,6EAA6E;IAC7E,yEAAyE;IACzE,0EAA0E;IAC1E,gEAAgE;IAChE,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC;IACtC,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtE,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;IAEnE,KAAK,MAAM,QAAQ,IAAI,eAAe,EAAE,CAAC;QACvC,aAAa,CAAC,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IAC1D,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,aAAa,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC;YAC5D,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;YACrB,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,WAAW,CAAC,IAAI,CAAC;gBACf,KAAK,EAAE,MAAM;gBACb,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,yBAAyB,MAAM,EAAE;aAC3C,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,WAAW,CAAC,IAAI,CAAC;gBACf,KAAK,EAAE,MAAM;gBACb,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,eAAe,MAAM,6BAA6B;aAC5D,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7D,WAAW,CAAC,IAAI,CAAC;oBACf,KAAK,EAAE,MAAM;oBACb,IAAI,EAAE,cAAc;oBACpB,OAAO,EAAE,eAAe,MAAM,oCAAoC,MAAM,CAAC,MAAM,CAAC,EAAE;iBACnF,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,MAAM,SAAS,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;YAChD,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC7C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,WAAW,CAAC,IAAI,CAAC;oBACf,KAAK,EAAE,MAAM;oBACb,IAAI,EAAE,oBAAoB;oBAC1B,OAAO,EAAE,eAAe,MAAM,+BAA+B,SAAS,EAAE;oBACxE,SAAS;iBACV,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,cAAc,EAAE,YAAY,MAAM,EAAE,EAAE,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC7F,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,cAAc,GAAoB,EAAE,CAAC;IAC3C,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,WAAW,CAAC,IAAI,CAAC;gBACf,KAAK,EAAE,MAAM;gBACb,IAAI,EAAE,0BAA0B;gBAChC,OAAO,EAAE,6BAA6B,KAAK,CAAC,IAAI,EAAE;gBAClD,SAAS,EAAE,KAAK,CAAC,IAAI;aACtB,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrB,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,WAAW,CAAC,IAAI,CAAC;YACf,KAAK,EAAE,MAAM;YACb,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,oCAAoC;SAC9C,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,KAAK,CAAC,cAAc,IAAI,MAAM;QACxC,cAAc;QACd,WAAW;KACZ,CAAC;AACJ,CAAC"}

package/dist/core/skills/references.d.ts

@@ -1,4 +1,4 @@
-import type { BotSkillPolicy } from './types.js';
+import type { BotSkillPolicy, SkillPack } from './types.js';
 export interface SkillReferenceBotInput {
     larkAppId: string;
     name?: string;
@@ -12,10 +12,18 @@ export interface SkillReferenceBot {
 }
 export interface SkillReferenceSummary {
     bots: SkillReferenceBot[];
+    /** Packs that contain the skill (directly). Empty when no pack registry is
+     *  supplied to the analyzer. */
+    packs: string[];
 }
 export declare function directSkillNames(policy: BotSkillPolicy | null | undefined): string[];
+/** Returns the `pack:<id>` ids referenced by a bot policy, in policy order. */
+export declare function packIdsInPolicy(policy: BotSkillPolicy | null | undefined): string[];
 export declare function policyIncludesDirectSkill(policy: BotSkillPolicy | null | undefined, skillName: string): boolean;
+/** Returns the ids of packs that directly contain the given skill. */
+export declare function packsContainingSkill(skillName: string, packs: Record<string, SkillPack> | undefined): string[];
 export declare function analyzeSkillReferences(skillName: string, opts: {
     bots: SkillReferenceBotInput[];
+    packs?: Record<string, SkillPack>;
 }): SkillReferenceSummary;
 //# sourceMappingURL=references.d.ts.map

package/dist/core/skills/references.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"references.d.ts","sourceRoot":"","sources":["../../../src/core/skills/references.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAiB,MAAM,YAAY,CAAC;AAEhE,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;CAChC;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,iBAAiB,EAAE,CAAC;CAC3B;AAMD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,EAAE,CAIpF;AAED,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,cAAc,GAAG,IAAI,GAAG,SAAS,EACzC,SAAS,EAAE,MAAM,GAChB,OAAO,CAET;AAED,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;IACJ,IAAI,EAAE,sBAAsB,EAAE,CAAC;CAChC,GACA,qBAAqB,CAavB"}
+{"version":3,"file":"references.d.ts","sourceRoot":"","sources":["../../../src/core/skills/references.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,SAAS,EAAiB,MAAM,YAAY,CAAC;AAE3E,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;CAChC;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,iBAAiB,EAAE,CAAC;IAC1B;oCACgC;IAChC,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAMD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,EAAE,CAIpF;AAED,+EAA+E;AAC/E,wBAAgB,eAAe,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,EAAE,CAInF;AAED,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,cAAc,GAAG,IAAI,GAAG,SAAS,EACzC,SAAS,EAAE,MAAM,GAChB,OAAO,CAET;AAkBD,sEAAsE;AACtE,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,SAAS,GAC3C,MAAM,EAAE,CAOV;AAED,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;IACJ,IAAI,EAAE,sBAAsB,EAAE,CAAC;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;CACnC,GACA,qBAAqB,CAiBvB"}

package/dist/core/skills/references.js

@@ -6,14 +6,44 @@ export function directSkillNames(policy) {
         .filter((item) => item.startsWith('skill:'))
         .map((item) => item.slice('skill:'.length));
 }
+/** Returns the `pack:<id>` ids referenced by a bot policy, in policy order. */
+export function packIdsInPolicy(policy) {
+    return (policy?.include ?? [])
+        .filter((item) => item.startsWith('pack:'))
+        .map((item) => item.slice('pack:'.length));
+}
 export function policyIncludesDirectSkill(policy, skillName) {
     return Array.isArray(policy?.include) && policy.include.includes(directSkillSelector(skillName));
 }
+/** True when any pack in `packs` that is referenced by `policy` contains the
+ *  given skill. Used for indirect (via-pack) impact analysis. */
+function policyReferencesSkillViaPack(policy, skillName, packs) {
+    if (!packs)
+        return false;
+    const selector = directSkillSelector(skillName);
+    for (const packId of packIdsInPolicy(policy)) {
+        const pack = Object.hasOwn(packs, packId) ? packs[packId] : undefined;
+        if (pack && Array.isArray(pack.include) && pack.include.includes(selector))
+            return true;
+    }
+    return false;
+}
+/** Returns the ids of packs that directly contain the given skill. */
+export function packsContainingSkill(skillName, packs) {
+    if (!packs)
+        return [];
+    const selector = directSkillSelector(skillName);
+    return Object.values(packs)
+        .filter((pack) => Array.isArray(pack.include) && pack.include.includes(selector))
+        .map((pack) => pack.id)
+        .sort();
+}
 export function analyzeSkillReferences(skillName, opts) {
     const bots = [];
     for (const bot of opts.bots) {
         const direct = policyIncludesDirectSkill(bot.skills, skillName);
-        if (!direct)
+        const viaPack = !direct && policyReferencesSkillViaPack(bot.skills, skillName, opts.packs);
+        if (!direct && !viaPack)
             continue;
         bots.push({
             larkAppId: bot.larkAppId,
@@ -22,6 +52,9 @@ export function analyzeSkillReferences(skillName, opts) {
         });
     }
     bots.sort((a, b) => a.botName.localeCompare(b.botName));
-    return { bots };
+    return {
+        bots,
+        packs: packsContainingSkill(skillName, opts.packs),
+    };
 }
 //# sourceMappingURL=references.js.map

package/dist/core/skills/references.js.map

@@ -1 +1 @@
-{"version":3,"file":"references.js","sourceRoot":"","sources":["../../../src/core/skills/references.ts"],"names":[],"mappings":"AAmBA,SAAS,mBAAmB,CAAC,SAAiB;IAC5C,OAAO,SAAS,SAAS,EAAmB,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAyC;IACxE,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC;SAC3B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;SAC3C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,MAAyC,EACzC,SAAiB;IAEjB,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC;AACnG,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,SAAiB,EACjB,IAEC;IAED,MAAM,IAAI,GAAwB,EAAE,CAAC;IACrC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,yBAAyB,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,IAAI,CAAC,IAAI,CAAC;YACR,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,SAAS;YACjD,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACxD,OAAO,EAAE,IAAI,EAAE,CAAC;AAClB,CAAC"}
+{"version":3,"file":"references.js","sourceRoot":"","sources":["../../../src/core/skills/references.ts"],"names":[],"mappings":"AAsBA,SAAS,mBAAmB,CAAC,SAAiB;IAC5C,OAAO,SAAS,SAAS,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAyC;IACxE,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC;SAC3B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;SAC3C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,eAAe,CAAC,MAAyC;IACvE,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC;SAC3B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;SAC1C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,MAAyC,EACzC,SAAiB;IAEjB,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC;AACnG,CAAC;AAED;iEACiE;AACjE,SAAS,4BAA4B,CACnC,MAAyC,EACzC,SAAiB,EACjB,KAA4C;IAE5C,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAChD,KAAK,MAAM,MAAM,IAAI,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACtE,IAAI,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;IAC1F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,oBAAoB,CAClC,SAAiB,EACjB,KAA4C;IAE5C,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAChD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;SACxB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;SAChF,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;SACtB,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,SAAiB,EACjB,IAGC;IAED,MAAM,IAAI,GAAwB,EAAE,CAAC;IACrC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,yBAAyB,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,4BAA4B,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3F,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO;YAAE,SAAS;QAClC,IAAI,CAAC,IAAI,CAAC;YACR,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,SAAS;YACjD,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACxD,OAAO;QACL,IAAI;QACJ,KAAK,EAAE,oBAAoB,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC;KACnD,CAAC;AACJ,CAAC"}

package/dist/core/skills/registry-paths.d.ts

@@ -1,5 +1,6 @@
 export declare function botmuxSkillsHome(): string;
 export declare function skillRegistryPath(): string;
+export declare function skillPackRegistryPath(): string;
 export declare function skillStoreDir(): string;
 export declare function skillSourcesDir(): string;
 //# sourceMappingURL=registry-paths.d.ts.map

package/dist/core/skills/registry-paths.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry-paths.d.ts","sourceRoot":"","sources":["../../../src/core/skills/registry-paths.ts"],"names":[],"mappings":"AAGA,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,wBAAgB,eAAe,IAAI,MAAM,CAExC"}
+{"version":3,"file":"registry-paths.d.ts","sourceRoot":"","sources":["../../../src/core/skills/registry-paths.ts"],"names":[],"mappings":"AAGA,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,wBAAgB,eAAe,IAAI,MAAM,CAExC"}

package/dist/core/skills/registry-paths.js

@@ -6,6 +6,9 @@ export function botmuxSkillsHome() {
 export function skillRegistryPath() {
     return join(botmuxSkillsHome(), 'registry.json');
 }
+export function skillPackRegistryPath() {
+    return join(botmuxSkillsHome(), 'packs.json');
+}
 export function skillStoreDir() {
     return join(botmuxSkillsHome(), 'store');
 }

package/dist/core/skills/registry-paths.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry-paths.js","sourceRoot":"","sources":["../../../src/core/skills/registry-paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,UAAU,gBAAgB;IAC9B,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,IAAI,CAAC,gBAAgB,EAAE,EAAE,eAAe,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,IAAI,CAAC,gBAAgB,EAAE,EAAE,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,IAAI,CAAC,gBAAgB,EAAE,EAAE,SAAS,CAAC,CAAC;AAC7C,CAAC"}
+{"version":3,"file":"registry-paths.js","sourceRoot":"","sources":["../../../src/core/skills/registry-paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,UAAU,gBAAgB;IAC9B,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,IAAI,CAAC,gBAAgB,EAAE,EAAE,eAAe,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,OAAO,IAAI,CAAC,gBAAgB,EAAE,EAAE,YAAY,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,IAAI,CAAC,gBAAgB,EAAE,EAAE,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,IAAI,CAAC,gBAAgB,EAAE,EAAE,SAAS,CAAC,CAAC;AAC7C,CAAC"}

package/dist/core/skills/session-resolver.d.ts

@@ -1,5 +1,5 @@
 import type { CliId } from '../../adapters/cli/types.js';
-import type { BotSkillPolicy, SessionSkillManifest, SkillPackage } from './types.js';
+import type { BotSkillPolicy, SessionSkillManifest, SkillPackage, SkillPack } from './types.js';
 export declare function resolveSessionSkillManifest(opts: {
     sessionId: string;
     cliId: CliId;
@@ -10,6 +10,7 @@ export declare function resolveSessionSkillManifest(opts: {
     globalDelivery?: 'auto' | 'prompt' | 'native';
     registrySkills: SkillPackage[];
     projectSkills: SkillPackage[];
+    packs?: Record<string, SkillPack>;
     now?: () => string;
 }): SessionSkillManifest | null;
 //# sourceMappingURL=session-resolver.d.ts.map

package/dist/core/skills/session-resolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-resolver.d.ts","sourceRoot":"","sources":["../../../src/core/skills/session-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAGrF,wBAAgB,2BAA2B,CAAC,IAAI,EAAE;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,KAAK,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,cAAc,GAAG,SAAS,CAAC;IACtC,YAAY,CAAC,EAAE,YAAY,EAAE,CAAC;IAC9B,mBAAmB,CAAC,EAAE,KAAK,GAAG,SAAS,GAAG,KAAK,CAAC;IAChD,cAAc,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAC9C,cAAc,EAAE,YAAY,EAAE,CAAC;IAC/B,aAAa,EAAE,YAAY,EAAE,CAAC;IAC9B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB,GAAG,oBAAoB,GAAG,IAAI,CAqB9B"}
+{"version":3,"file":"session-resolver.d.ts","sourceRoot":"","sources":["../../../src/core/skills/session-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,oBAAoB,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAGhG,wBAAgB,2BAA2B,CAAC,IAAI,EAAE;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,KAAK,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,cAAc,GAAG,SAAS,CAAC;IACtC,YAAY,CAAC,EAAE,YAAY,EAAE,CAAC;IAC9B,mBAAmB,CAAC,EAAE,KAAK,GAAG,SAAS,GAAG,KAAK,CAAC;IAChD,cAAc,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAC9C,cAAc,EAAE,YAAY,EAAE,CAAC;IAC/B,aAAa,EAAE,YAAY,EAAE,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAClC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB,GAAG,oBAAoB,GAAG,IAAI,CAsB9B"}

package/dist/core/skills/session-resolver.js

@@ -8,6 +8,7 @@ export function resolveSessionSkillManifest(opts) {
         globalDelivery: opts.globalDelivery,
         botPolicy: opts.botPolicy,
         workingDir: opts.workingDir,
+        packs: opts.packs,
     });
     if (!resolved.enabled)
         return null;

package/dist/core/skills/session-resolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"session-resolver.js","sourceRoot":"","sources":["../../../src/core/skills/session-resolver.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD,MAAM,UAAU,2BAA2B,CAAC,IAW3C;IACC,MAAM,QAAQ,GAAG,kBAAkB,CAAC;QAClC,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO;QACL,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,UAAU,EAAE,QAAQ,CAAC,IAAI;QACzB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAC9D,CAAC;AACJ,CAAC"}
+{"version":3,"file":"session-resolver.js","sourceRoot":"","sources":["../../../src/core/skills/session-resolver.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD,MAAM,UAAU,2BAA2B,CAAC,IAY3C;IACC,MAAM,QAAQ,GAAG,kBAAkB,CAAC;QAClC,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO;QACL,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,UAAU,EAAE,QAAQ,CAAC,IAAI;QACzB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAC9D,CAAC;AACJ,CAAC"}

package/dist/core/skills/session-runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-runtime.d.ts","sourceRoot":"","sources":["../../../src/core/skills/session-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AAGzD,OAAO,KAAK,EAAE,cAAc,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAMrF,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,oBAAoB,GAAG,IAAI,CAAC;CACvC;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,KAAK,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,cAAc,GAAG,SAAS,CAAC;IACtC,YAAY,CAAC,EAAE,YAAY,EAAE,CAAC;CAC/B,GAAG,0BAA0B,CA6B7B"}
+{"version":3,"file":"session-runtime.d.ts","sourceRoot":"","sources":["../../../src/core/skills/session-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AAIzD,OAAO,KAAK,EAAE,cAAc,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAMrF,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,oBAAoB,GAAG,IAAI,CAAC;CACvC;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,KAAK,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,cAAc,GAAG,SAAS,CAAC;IACtC,YAAY,CAAC,EAAE,YAAY,EAAE,CAAC;CAC/B,GAAG,0BAA0B,CA8B7B"}

package/dist/core/skills/session-runtime.js

@@ -1,5 +1,6 @@
 import { readGlobalConfig } from '../../global-config.js';
 import { readSkillRegistry } from '../../services/skill-registry-store.js';
+import { readSkillPackRegistry } from '../../services/skill-pack-store.js';
 import { discoverProjectSkills } from './discovery.js';
 import { removeSessionSkillManifest, writeSessionSkillManifest } from './manifest-store.js';
 import { renderSkillCatalogBlock } from './prompt.js';
@@ -20,6 +21,7 @@ export function prepareSessionSkillPrompt(opts) {
         globalDelivery: globalSkills?.delivery,
         registrySkills: Object.values(readSkillRegistry().skills),
         projectSkills: discoverProjectSkills(opts.workingDir),
+        packs: readSkillPackRegistry().packs,
     });
     if (!manifest || manifest.prioritySkills.length === 0) {
         removeSessionSkillManifest(opts.sessionId);

package/dist/core/skills/session-runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"session-runtime.js","sourceRoot":"","sources":["../../../src/core/skills/session-runtime.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAE3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAC5F,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AAOpE,MAAM,UAAU,yBAAyB,CAAC,IAOzC;IACC,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;QAClD,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3C,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACjD,CAAC;IACD,MAAM,YAAY,GAAG,gBAAgB,EAAE,CAAC,MAAM,CAAC;IAC/C,MAAM,QAAQ,GAAG,2BAA2B,CAAC;QAC3C,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,mBAAmB,EAAE,YAAY,EAAE,kBAAkB;QACrD,cAAc,EAAE,YAAY,EAAE,QAAQ;QACtC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC,MAAM,CAAC;QACzD,aAAa,EAAE,qBAAqB,CAAC,IAAI,CAAC,UAAU,CAAC;KACtD,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3C,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC3C,CAAC;IACD,yBAAyB,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC9E,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC3C,CAAC;IACD,OAAO;QACL,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,OAAO,uBAAuB,CAAC,QAAQ,CAAC,EAAE;QAChE,QAAQ;KACT,CAAC;AACJ,CAAC"}
+{"version":3,"file":"session-runtime.js","sourceRoot":"","sources":["../../../src/core/skills/session-runtime.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAC3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAE3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAC5F,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AAOpE,MAAM,UAAU,yBAAyB,CAAC,IAOzC;IACC,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;QAClD,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3C,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACjD,CAAC;IACD,MAAM,YAAY,GAAG,gBAAgB,EAAE,CAAC,MAAM,CAAC;IAC/C,MAAM,QAAQ,GAAG,2BAA2B,CAAC;QAC3C,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,mBAAmB,EAAE,YAAY,EAAE,kBAAkB;QACrD,cAAc,EAAE,YAAY,EAAE,QAAQ;QACtC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC,MAAM,CAAC;QACzD,aAAa,EAAE,qBAAqB,CAAC,IAAI,CAAC,UAAU,CAAC;QACrD,KAAK,EAAE,qBAAqB,EAAE,CAAC,KAAK;KACrC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3C,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC3C,CAAC;IACD,yBAAyB,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC9E,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC3C,CAAC;IACD,OAAO;QACL,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,OAAO,uBAAuB,CAAC,QAAQ,CAAC,EAAE;QAChE,QAAQ;KACT,CAAC;AACJ,CAAC"}

package/dist/core/skills/sources.d.ts

@@ -21,6 +21,10 @@ export interface AgentbuddySource {
     skill?: string;
     version?: string;
 }
+/** Stable identifier persisted in the skill registry and rendered back to
+ * users. Keep this formatter beside the parser so every emitted identifier is
+ * guaranteed to have a matching parse form. */
+export declare function formatAgentbuddyIdentifier(opts: AgentbuddySource): string;
 export declare function redactGitUrlCredentials(raw: string): string;
 export declare function assertNoGitUrlCredentials(raw: string): void;
 export declare function assertAllowedGitProtocol(raw: string): void;
@@ -34,12 +38,31 @@ export declare function assertSafeGitSkillPath(path: string): void;
  *    agentbuddy skill collection add <uid>
  *    agentbuddy plugin collection add <uid>
  *    agentbuddy skill add <group> --skill <name> [--version <v>]
+ *    agentbuddy skill add <group>/<name> [--version <v>]
  *  and tolerates a leading `KEY=VALUE … npx [-y] agentbuddy@latest …` prefix
  *  (the env + runner the site prepends). Only install subcommands (`add`,
  *  `collection add`) of `skill`/`plugin` are accepted — other agentbuddy
  *  subcommands (publish/remove/login/…) return null so a stray command can't
  *  drive the CLI. Returns null for anything that isn't such a command. */
 export declare function parseAgentbuddyCommand(raw: string): AgentbuddySource | null;
+/** Parse the canonical `agentbuddy:` identifiers documented in
+ *  docs/setup/skills.md, which the dashboard install box accepts directly:
+ *    agentbuddy:collection/<uid>
+ *    agentbuddy:<group>/<skill>[@<version>]
+ *  A leading `skill`/`plugin` segment is always treated as the protocol, for
+ *  both `collection/<uid>` and `<group>/<skill>` — that is the exact shape
+ *  formatAgentbuddyIdentifier() writes into the registry, so a saved source
+ *  re-parses back to the same target (see the round-trip test in
+ *  test/skill-sources.test.ts).
+ *  Consequence, deliberate: a group whose FIRST segment is literally `skill` or
+ *  `plugin` cannot be expressed here — `agentbuddy:skill/health` reads as
+ *  protocol `skill` + an incomplete target and throws. Real groups are
+ *  registry-host prefixed (`skills.example.com/team`), so this does not collide
+ *  in practice; the round-trip guarantee is worth more than that name.
+ *  Throws `invalid_agentbuddy_*` for malformed identifiers (an `agentbuddy:`
+ *  prefix is an explicit intent — it must never fall through to another kind).
+ *  Returns null when `raw` carries no `agentbuddy:` prefix at all. */
+export declare function parseAgentbuddyIdentifier(raw: string): AgentbuddySource | null;
 /** Recognize the open-source `skills` CLI (vercel-labs/skills) add command and
  *  route its GitHub source into botmux's native GitHub/Git install — no extra
  *  dependency, and public repos need no auth. Accepts:

package/dist/core/skills/sources.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sources.d.ts","sourceRoot":"","sources":["../../../src/core/skills/sources.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,OAAO,GAAG,KAAK,GAAG,QAAQ,GAAG,YAAY,CAAC;IAChD,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACtE,UAAU,CAAC,EAAE,gBAAgB,CAAC;CAC/B;AAED;;;6DAG6D;AAC7D,MAAM,WAAW,gBAAgB;IAC/B,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAUD,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAQ3D;AAED,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAM3D;AAeD,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAU1D;AAED;;gDAEgD;AAChD,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAG9D;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAIzD;AAuED;;;;;;;;;0EAS0E;AAC1E,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI,CA4B3E;AAED;;;;;;8CAM8C;AAC9C,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,wBAAwB,GAAG,IAAI,CAmBtF;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,wBAAwB,CAiC7E;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAElE"}
+{"version":3,"file":"sources.d.ts","sourceRoot":"","sources":["../../../src/core/skills/sources.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,OAAO,GAAG,KAAK,GAAG,QAAQ,GAAG,YAAY,CAAC;IAChD,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACtE,UAAU,CAAC,EAAE,gBAAgB,CAAC;CAC/B;AAED;;;6DAG6D;AAC7D,MAAM,WAAW,gBAAgB;IAC/B,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;+CAE+C;AAC/C,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,gBAAgB,GAAG,MAAM,CAKzE;AAUD,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAQ3D;AAED,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAU3D;AAeD,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAU1D;AAED;;gDAEgD;AAChD,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAG9D;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAIzD;AAuED;;;;;;;;;;0EAU0E;AAC1E,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI,CAwC3E;AAED;;;;;;;;;;;;;;;;sEAgBsE;AACtE,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI,CAiC9E;AAQD;;;;;;8CAM8C;AAC9C,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,wBAAwB,GAAG,IAAI,CAYtF;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,wBAAwB,CAkE7E;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAElE"}

package/dist/core/skills/sources.js

@@ -1,4 +1,15 @@
+import { existsSync } from 'node:fs';
 import { isAbsolute } from 'node:path';
+import { extractSkillsInstallCommandSource } from './install-command.js';
+/** Stable identifier persisted in the skill registry and rendered back to
+ * users. Keep this formatter beside the parser so every emitted identifier is
+ * guaranteed to have a matching parse form. */
+export function formatAgentbuddyIdentifier(opts) {
+    const protocol = opts.protocol ?? 'skill';
+    return opts.collection
+        ? `${protocol}/collection/${opts.collection}`
+        : `${protocol}/${opts.group}/${opts.skill}${opts.version ? `@${opts.version}` : ''}`;
+}
 function parseMaybeUrl(raw) {
     try {
         return new URL(raw.replace(/^git\+/, ''));
@@ -22,7 +33,11 @@ export function assertNoGitUrlCredentials(raw) {
     const url = parseMaybeUrl(raw);
     if (!url)
         return;
-    if ((url.protocol === 'http:' || url.protocol === 'https:') && (url.username || url.password)) {
+    const httpUserInfo = (url.protocol === 'http:' || url.protocol === 'https:') && !!url.username;
+    // Preserve standard ssh://git@host URLs: the SSH username selects an account
+    // and is not a secret. Passwords embedded in any supported URL protocol are
+    // credentials and must never reach the registry.
+    if (httpUserInfo || url.password) {
         throw new Error('git_url_credentials_not_allowed');
     }
 }
@@ -145,6 +160,7 @@ function assertSafeAgentbuddyGroup(group) {
  *    agentbuddy skill collection add <uid>
  *    agentbuddy plugin collection add <uid>
  *    agentbuddy skill add <group> --skill <name> [--version <v>]
+ *    agentbuddy skill add <group>/<name> [--version <v>]
  *  and tolerates a leading `KEY=VALUE … npx [-y] agentbuddy@latest …` prefix
  *  (the env + runner the site prepends). Only install subcommands (`add`,
  *  `collection add`) of `skill`/`plugin` are accepted — other agentbuddy
@@ -167,10 +183,23 @@ export function parseAgentbuddyCommand(raw) {
         return { protocol, collection: rest[3] };
     }
     // <protocol> add <group> --skill <name> [--version <v>]
+    // <protocol> add <group>/<skill> [--version <v>]
+    //
+    // The second form is the copy-command emitted by the internal marketplace,
+    // commonly with a leading npm_config_registry=... npx -y prefix. Parse the
+    // final path segment as the skill while retaining the existing explicit
+    // --skill form for backwards compatibility.
     if (rest[1] === 'add' && rest[2] && !rest[2].startsWith('-')) {
-        const group = rest[2];
+        let group = rest[2];
         const skillIdx = Math.max(rest.indexOf('--skill'), rest.indexOf('-s'));
-        const skill = skillIdx >= 0 ? rest[skillIdx + 1] : undefined;
+        let skill = skillIdx >= 0 ? rest[skillIdx + 1] : undefined;
+        if (!skill) {
+            const segments = group.split('/');
+            if (segments.length < 2)
+                return null;
+            skill = segments.pop();
+            group = segments.join('/');
+        }
         if (!skill)
             return null;
         const verIdx = Math.max(rest.indexOf('--version'), rest.indexOf('-v'));
@@ -183,6 +212,67 @@ export function parseAgentbuddyCommand(raw) {
     }
     return null;
 }
+/** Parse the canonical `agentbuddy:` identifiers documented in
+ *  docs/setup/skills.md, which the dashboard install box accepts directly:
+ *    agentbuddy:collection/<uid>
+ *    agentbuddy:<group>/<skill>[@<version>]
+ *  A leading `skill`/`plugin` segment is always treated as the protocol, for
+ *  both `collection/<uid>` and `<group>/<skill>` — that is the exact shape
+ *  formatAgentbuddyIdentifier() writes into the registry, so a saved source
+ *  re-parses back to the same target (see the round-trip test in
+ *  test/skill-sources.test.ts).
+ *  Consequence, deliberate: a group whose FIRST segment is literally `skill` or
+ *  `plugin` cannot be expressed here — `agentbuddy:skill/health` reads as
+ *  protocol `skill` + an incomplete target and throws. Real groups are
+ *  registry-host prefixed (`skills.example.com/team`), so this does not collide
+ *  in practice; the round-trip guarantee is worth more than that name.
+ *  Throws `invalid_agentbuddy_*` for malformed identifiers (an `agentbuddy:`
+ *  prefix is an explicit intent — it must never fall through to another kind).
+ *  Returns null when `raw` carries no `agentbuddy:` prefix at all. */
+export function parseAgentbuddyIdentifier(raw) {
+    const trimmed = raw.trim();
+    if (!/^agentbuddy:/i.test(trimmed))
+        return null;
+    const rest = trimmed.slice('agentbuddy:'.length).replace(/^\/+/, '');
+    if (!rest)
+        throw new Error('invalid_agentbuddy_identifier');
+    let segments = rest.split('/').filter((segment) => segment.length > 0);
+    if (segments.length !== rest.split('/').length)
+        throw new Error('invalid_agentbuddy_identifier');
+    let protocol;
+    // Registry identifiers always carry the protocol for both collections and
+    // individual skills. Strip it before parsing the remaining collection or
+    // group/skill shape so a rendered source round-trips into the same target.
+    if (segments[0] === 'skill' || segments[0] === 'plugin') {
+        protocol = segments[0];
+        segments = segments.slice(1);
+    }
+    // collection/<uid>
+    if (segments[0] === 'collection') {
+        if (segments.length !== 2)
+            throw new Error('invalid_agentbuddy_collection');
+        assertSafeAgentbuddyToken(segments[1], 'collection');
+        return { protocol: protocol ?? 'skill', collection: segments[1] };
+    }
+    // <group>/<skill>[@<version>] — last segment is the skill, the rest the group
+    if (segments.length < 2)
+        throw new Error('invalid_agentbuddy_identifier');
+    const last = segments[segments.length - 1];
+    const at = last.lastIndexOf('@');
+    const skill = at > 0 ? last.slice(0, at) : last;
+    const version = at > 0 ? last.slice(at + 1) : undefined;
+    const group = segments.slice(0, -1).join('/');
+    assertSafeAgentbuddyGroup(group);
+    assertSafeAgentbuddyToken(skill, 'skill');
+    if (version !== undefined)
+        assertSafeAgentbuddyToken(version, 'version', AGENTBUDDY_VERSION_RE);
+    return { protocol: protocol ?? 'skill', group, skill, ...(version ? { version } : {}) };
+}
+/** Bare GitHub shorthand: `owner/repo` or `owner/repo/path`. GitHub owners are
+ *  alphanumeric + hyphen, which keeps this from matching most relative paths;
+ *  an existing local directory still wins (checked by the caller) so a real
+ *  relative path is never hijacked. */
+const GITHUB_SHORTHAND_RE = /^[A-Za-z0-9][A-Za-z0-9-]*\/[A-Za-z0-9._-]+(?:\/[\w./-]+)?$/;
 /** Recognize the open-source `skills` CLI (vercel-labs/skills) add command and
  *  route its GitHub source into botmux's native GitHub/Git install — no extra
  *  dependency, and public repos need no auth. Accepts:
@@ -191,15 +281,7 @@ export function parseAgentbuddyCommand(raw) {
  *  where <owner/repo> is a GitHub shorthand or a GitHub/Git URL. Returns null
  *  for anything that isn't such a command. */
 export function parseSkillsInstallCommand(raw) {
-    const tokens = raw.trim().split(/\s+/).filter(Boolean);
-    const binIdx = tokens.findIndex((t) => t === 'skills' || t === 'add-skill' || t.startsWith('skills@'));
-    if (binIdx < 0)
-        return null;
-    const bin = tokens[binIdx];
-    const rest = tokens.slice(binIdx + 1).filter((t) => t !== '-y' && t !== '--yes');
-    const source = rest[0] === 'add'
-        ? rest[1]
-        : (bin === 'add-skill' && rest[0] && !rest[0].startsWith('-') ? rest[0] : undefined);
+    const source = extractSkillsInstallCommandSource(raw);
     if (!source)
         return null;
     // Bare owner/repo[/path] → GitHub shorthand; explicit URLs pass through.
@@ -218,6 +300,13 @@ export function parseSkillInstallSource(raw) {
     if (command) {
         return { kind: 'agentbuddy', value: raw, agentbuddy: command };
     }
+    // Canonical `agentbuddy:` identifiers (documented in docs/setup/skills.md).
+    // Throws on malformed input rather than falling through — an explicit scheme
+    // must never be reinterpreted as a local path.
+    const identifier = parseAgentbuddyIdentifier(raw);
+    if (identifier) {
+        return { kind: 'agentbuddy', value: raw, agentbuddy: identifier };
+    }
     const skillsCommand = parseSkillsInstallCommand(raw);
     if (skillsCommand)
         return skillsCommand;
@@ -249,6 +338,33 @@ export function parseSkillInstallSource(raw) {
         assertAllowedGitProtocol(value);
         return { kind: 'git', value };
     }
+    // Bare GitHub shorthand (`owner/repo`, `owner/repo/path`). Authoritative here
+    // rather than in the dashboard so the CLI/IM entry points behave identically.
+    // An existing local directory of the same name always wins.
+    if (!isAbsolute(raw) && !/^[.~]/.test(raw) && GITHUB_SHORTHAND_RE.test(raw) && !existsSync(raw)) {
+        const parts = raw.split('/').filter(Boolean);
+        const path = parts.slice(2).join('/') || undefined;
+        if (path)
+            assertSafeGitSkillPath(path);
+        return {
+            kind: 'github',
+            value: `github:${raw}`,
+            github: { owner: parts[0], repo: parts[1], ...(path ? { path } : {}) },
+        };
+    }
+    // Any remaining http(s) URL is a git remote (e.g. a self-hosted GitLab), not
+    // a filesystem path. Previously these fell through to `local` and failed with
+    // a confusing "path not found"; the dashboard papered over it by prefixing
+    // `git+` client-side, which the CLI/IM paths never did.
+    if (/^https?:\/\//i.test(raw)) {
+        assertAllowedGitProtocol(raw);
+        return { kind: 'git', value: raw };
+    }
+    // A scheme we don't handle must fail loudly instead of being treated as a
+    // relative path (`foo://bar` is not a directory).
+    if (/^[A-Za-z][A-Za-z0-9+.-]*:\/\//.test(raw)) {
+        throw new Error('unsupported_skill_source_scheme');
+    }
     return { kind: 'local', value: raw };
 }
 export function githubToGitUrl(owner, repo) {