claudeup 3.8.0 → 3.9.0

package/src/services/skills-manager.ts

@@ -0,0 +1,328 @@
+import fs from "fs-extra";
+import path from "node:path";
+import os from "node:os";
+import type {
+	SkillSource,
+	SkillInfo,
+	SkillFrontmatter,
+	GitTreeResponse,
+} from "../types/index.js";
+
+// ─── In-process cache ─────────────────────────────────────────────────────────
+
+interface TreeCacheEntry {
+	etag: string;
+	tree: GitTreeResponse;
+	fetchedAt: number;
+}
+
+const treeCache = new Map<string, TreeCacheEntry>();
+
+// ─── Path helpers ──────────────────────────────────────────────────────────────
+
+export function getUserSkillsDir(): string {
+	return path.join(os.homedir(), ".claude", "skills");
+}
+
+export function getProjectSkillsDir(projectPath?: string): string {
+	return path.join(projectPath ?? process.cwd(), ".claude", "skills");
+}
+
+// ─── GitHub Tree API ──────────────────────────────────────────────────────────
+
+async function fetchGitTree(repo: string): Promise<GitTreeResponse> {
+	const cached = treeCache.get(repo);
+
+	const url = `https://api.github.com/repos/${repo}/git/trees/HEAD?recursive=1`;
+	const headers: Record<string, string> = {
+		Accept: "application/vnd.github+json",
+		"X-GitHub-Api-Version": "2022-11-28",
+	};
+
+	if (cached?.etag) {
+		headers["If-None-Match"] = cached.etag;
+	}
+
+	const token =
+		process.env.GITHUB_TOKEN || process.env.GITHUB_PERSONAL_ACCESS_TOKEN;
+	if (token) {
+		headers.Authorization = `Bearer ${token}`;
+	}
+
+	const response = await fetch(url, {
+		headers,
+		signal: AbortSignal.timeout(10000),
+	});
+
+	if (response.status === 304 && cached) {
+		return cached.tree;
+	}
+
+	if (response.status === 403 || response.status === 429) {
+		const resetHeader = response.headers.get("X-RateLimit-Reset");
+		const resetTime = resetHeader
+			? new Date(Number(resetHeader) * 1000).toLocaleTimeString()
+			: "unknown";
+		throw new Error(
+			`GitHub API rate limit exceeded. Resets at ${resetTime}. Set GITHUB_TOKEN to increase limits.`,
+		);
+	}
+
+	if (!response.ok) {
+		throw new Error(
+			`GitHub API error: ${response.status} ${response.statusText}`,
+		);
+	}
+
+	const etag = response.headers.get("ETag") || "";
+	const tree = (await response.json()) as GitTreeResponse;
+
+	treeCache.set(repo, { etag, tree, fetchedAt: Date.now() });
+	return tree;
+}
+
+// ─── Frontmatter parser ───────────────────────────────────────────────────────
+
+function parseYamlFrontmatter(content: string): Partial<SkillFrontmatter> {
+	const frontmatterMatch = content.match(/^---\s*\n([\s\S]*?)\n---/);
+	if (!frontmatterMatch) return {};
+
+	const yaml = frontmatterMatch[1];
+	const result: Record<string, unknown> = {};
+
+	for (const line of yaml.split("\n")) {
+		const colonIdx = line.indexOf(":");
+		if (colonIdx === -1) continue;
+
+		const key = line.slice(0, colonIdx).trim();
+		const rawValue = line.slice(colonIdx + 1).trim();
+
+		if (!key) continue;
+
+		// Handle arrays (simple inline: [a, b, c])
+		if (rawValue.startsWith("[") && rawValue.endsWith("]")) {
+			const items = rawValue
+				.slice(1, -1)
+				.split(",")
+				.map((s) => s.trim().replace(/^["']|["']$/g, ""))
+				.filter(Boolean);
+			result[key] = items;
+		} else {
+			// Strip quotes
+			result[key] = rawValue.replace(/^["']|["']$/g, "");
+		}
+	}
+
+	return result as Partial<SkillFrontmatter>;
+}
+
+export async function fetchSkillFrontmatter(
+	skill: SkillInfo,
+): Promise<SkillFrontmatter> {
+	const url = `https://raw.githubusercontent.com/${skill.source.repo}/HEAD/${skill.repoPath}`;
+
+	const response = await fetch(url, {
+		signal: AbortSignal.timeout(10000),
+	});
+
+	if (!response.ok) {
+		return {
+			name: skill.name,
+			description: "(no description)",
+			category: "general",
+		};
+	}
+
+	const content = await response.text();
+	const parsed = parseYamlFrontmatter(content);
+
+	return {
+		name: parsed.name || skill.name,
+		description: parsed.description || "(no description)",
+		category: parsed.category,
+		author: parsed.author,
+		version: parsed.version,
+		tags: parsed.tags,
+	};
+}
+
+// ─── Check installation ───────────────────────────────────────────────────────
+
+export async function getInstalledSkillNames(
+	scope: "user" | "project",
+	projectPath?: string,
+): Promise<Set<string>> {
+	const dir =
+		scope === "user"
+			? getUserSkillsDir()
+			: getProjectSkillsDir(projectPath);
+
+	const installed = new Set<string>();
+
+	try {
+		if (!(await fs.pathExists(dir))) return installed;
+		const entries = await fs.readdir(dir);
+		for (const entry of entries) {
+			const skillMd = path.join(dir, entry, "SKILL.md");
+			if (await fs.pathExists(skillMd)) {
+				installed.add(entry);
+			}
+		}
+	} catch {
+		// ignore
+	}
+
+	return installed;
+}
+
+// ─── Fetch available skills ───────────────────────────────────────────────────
+
+export async function fetchAvailableSkills(
+	repos: SkillSource[],
+	projectPath?: string,
+): Promise<SkillInfo[]> {
+	const userInstalled = await getInstalledSkillNames("user");
+	const projectInstalled = await getInstalledSkillNames("project", projectPath);
+
+	const skills: SkillInfo[] = [];
+
+	for (const source of repos) {
+		let tree: GitTreeResponse;
+		try {
+			tree = await fetchGitTree(source.repo);
+		} catch {
+			// Skip this repo on error
+			continue;
+		}
+
+		// Filter for SKILL.md files under skillsPath
+		const prefix = source.skillsPath ? `${source.skillsPath}/` : "";
+
+		for (const item of tree.tree) {
+			if (item.type !== "blob") continue;
+			if (!item.path.endsWith("/SKILL.md")) continue;
+			if (prefix && !item.path.startsWith(prefix)) continue;
+
+			// Extract skill name: second-to-last segment of path
+			const parts = item.path.split("/");
+			if (parts.length < 2) continue;
+			const skillName = parts[parts.length - 2];
+
+			// Validate name (prevent traversal)
+			if (!/^[a-z0-9][a-z0-9-_]*$/i.test(skillName)) continue;
+
+			const isUserInstalled = userInstalled.has(skillName);
+			const isProjInstalled = projectInstalled.has(skillName);
+			const installed = isUserInstalled || isProjInstalled;
+			const installedScope: "user" | "project" | null = isProjInstalled
+				? "project"
+				: isUserInstalled
+					? "user"
+					: null;
+
+			skills.push({
+				id: `${source.repo}/${item.path}`,
+				name: skillName,
+				source,
+				repoPath: item.path,
+				gitBlobSha: item.sha,
+				frontmatter: null,
+				installed,
+				installedScope,
+				hasUpdate: false,
+			});
+		}
+	}
+
+	// Sort by name within each repo
+	skills.sort((a, b) => a.name.localeCompare(b.name));
+
+	return skills;
+}
+
+// ─── Install / Uninstall ──────────────────────────────────────────────────────
+
+export async function installSkill(
+	skill: SkillInfo,
+	scope: "user" | "project",
+	projectPath?: string,
+): Promise<void> {
+	const url = `https://raw.githubusercontent.com/${skill.source.repo}/HEAD/${skill.repoPath}`;
+
+	const response = await fetch(url, {
+		signal: AbortSignal.timeout(15000),
+	});
+
+	if (!response.ok) {
+		throw new Error(
+			`Failed to fetch skill: ${response.status} ${response.statusText}`,
+		);
+	}
+
+	const content = await response.text();
+
+	const installDir =
+		scope === "user"
+			? path.join(getUserSkillsDir(), skill.name)
+			: path.join(getProjectSkillsDir(projectPath), skill.name);
+
+	await fs.ensureDir(installDir);
+	await fs.writeFile(path.join(installDir, "SKILL.md"), content, "utf8");
+}
+
+export async function uninstallSkill(
+	skillName: string,
+	scope: "user" | "project",
+	projectPath?: string,
+): Promise<void> {
+	const installDir =
+		scope === "user"
+			? path.join(getUserSkillsDir(), skillName)
+			: path.join(getProjectSkillsDir(projectPath), skillName);
+
+	const skillMdPath = path.join(installDir, "SKILL.md");
+
+	if (await fs.pathExists(skillMdPath)) {
+		await fs.remove(skillMdPath);
+	}
+
+	// Try to remove directory if empty
+	try {
+		await fs.rmdir(installDir);
+	} catch {
+		// Ignore if not empty or doesn't exist
+	}
+}
+
+// ─── Check installed skills from file system ──────────────────────────────────
+
+export async function getInstalledSkillsFromFs(
+	projectPath?: string,
+): Promise<{ name: string; scope: "user" | "project" }[]> {
+	const result: { name: string; scope: "user" | "project" }[] = [];
+
+	const userDir = getUserSkillsDir();
+	const projDir = getProjectSkillsDir(projectPath);
+
+	const scopedDirs: Array<[string, "user" | "project"]> = [
+		[userDir, "user"],
+		[projDir, "project"],
+	];
+
+	for (const [dir, scope] of scopedDirs) {
+		try {
+			if (!(await fs.pathExists(dir))) continue;
+			const entries = await fs.readdir(dir);
+			for (const entry of entries) {
+				const skillMd = path.join(dir, entry, "SKILL.md");
+				if (await fs.pathExists(skillMd)) {
+					result.push({ name: entry, scope });
+				}
+			}
+		} catch {
+			// ignore
+		}
+	}
+
+	return result;
+}

package/src/services/skillsmp-client.js

@@ -0,0 +1,67 @@
+/**
+ * Skills API client — calls our Firebase aggregator function
+ * instead of hitting SkillsMP/GitHub APIs directly.
+ *
+ * The Firebase function handles:
+ * - SkillsMP keyword + AI search (with server-side API key)
+ * - GitHub Tree API with ETag caching
+ * - Recommended skills list
+ */
+// TODO: Update to production URL after Firebase deploy
+const SKILLS_API_BASE = process.env.SKILLS_API_URL || "https://us-central1-claudish-6da10.cloudfunctions.net/skills";
+/**
+ * Search skills across all sources (SkillsMP keyword + AI search)
+ */
+export async function searchSkills(query, options) {
+    const params = new URLSearchParams({ q: query });
+    if (options?.page)
+        params.set("page", String(options.page));
+    if (options?.limit)
+        params.set("limit", String(options.limit));
+    try {
+        const res = await fetch(`${SKILLS_API_BASE}/search?${params}`, {
+            signal: AbortSignal.timeout(12000),
+        });
+        if (!res.ok)
+            return [];
+        const data = (await res.json());
+        return data.skills || [];
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Fetch skills from a specific GitHub repo (via our proxy)
+ */
+export async function fetchRepoSkills(owner, repo) {
+    try {
+        const res = await fetch(`${SKILLS_API_BASE}/repo/${owner}/${repo}`, {
+            signal: AbortSignal.timeout(10000),
+        });
+        if (!res.ok)
+            return [];
+        const data = (await res.json());
+        return data.skills || [];
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Get recommended skills list (curated, server-side)
+ */
+export async function fetchRecommendedSkills() {
+    try {
+        const res = await fetch(`${SKILLS_API_BASE}/recommended`, {
+            signal: AbortSignal.timeout(5000),
+        });
+        if (!res.ok)
+            return [];
+        const data = (await res.json());
+        return data.skills || [];
+    }
+    catch {
+        return [];
+    }
+}

package/src/services/skillsmp-client.ts

@@ -0,0 +1,89 @@
+/**
+ * Skills API client — calls our Firebase aggregator function
+ * instead of hitting SkillsMP/GitHub APIs directly.
+ *
+ * The Firebase function handles:
+ * - SkillsMP keyword + AI search (with server-side API key)
+ * - GitHub Tree API with ETag caching
+ * - Recommended skills list
+ */
+
+// TODO: Update to production URL after Firebase deploy
+const SKILLS_API_BASE =
+	process.env.SKILLS_API_URL || "https://us-central1-claudish-6da10.cloudfunctions.net/skills";
+
+export interface SkillSearchResult {
+	name: string;
+	displayName?: string;
+	repo: string;
+	skillPath: string;
+	description?: string;
+	source?: string;
+	stars?: number;
+	installCommand?: string;
+}
+
+export interface RepoSkillResult {
+	name: string;
+	skillPath: string;
+	treeSha?: string;
+	description?: string;
+}
+
+/**
+ * Search skills across all sources (SkillsMP keyword + AI search)
+ */
+export async function searchSkills(
+	query: string,
+	options?: { page?: number; limit?: number },
+): Promise<SkillSearchResult[]> {
+	const params = new URLSearchParams({ q: query });
+	if (options?.page) params.set("page", String(options.page));
+	if (options?.limit) params.set("limit", String(options.limit));
+
+	try {
+		const res = await fetch(`${SKILLS_API_BASE}/search?${params}`, {
+			signal: AbortSignal.timeout(12000),
+		});
+		if (!res.ok) return [];
+		const data = (await res.json()) as { skills: SkillSearchResult[] };
+		return data.skills || [];
+	} catch {
+		return [];
+	}
+}
+
+/**
+ * Fetch skills from a specific GitHub repo (via our proxy)
+ */
+export async function fetchRepoSkills(
+	owner: string,
+	repo: string,
+): Promise<RepoSkillResult[]> {
+	try {
+		const res = await fetch(`${SKILLS_API_BASE}/repo/${owner}/${repo}`, {
+			signal: AbortSignal.timeout(10000),
+		});
+		if (!res.ok) return [];
+		const data = (await res.json()) as { skills: RepoSkillResult[] };
+		return data.skills || [];
+	} catch {
+		return [];
+	}
+}
+
+/**
+ * Get recommended skills list (curated, server-side)
+ */
+export async function fetchRecommendedSkills(): Promise<SkillSearchResult[]> {
+	try {
+		const res = await fetch(`${SKILLS_API_BASE}/recommended`, {
+			signal: AbortSignal.timeout(5000),
+		});
+		if (!res.ok) return [];
+		const data = (await res.json()) as { skills: SkillSearchResult[] };
+		return data.skills || [];
+	} catch {
+		return [];
+	}
+}

package/src/types/index.ts

@@ -116,7 +116,73 @@ export type Screen =
 	| "plugins"
 	| "statusline"
 	| "cli-tools"
-	| "env-vars";
+	| "env-vars"
+	| "skills";
+
+// ─── Skill Types ──────────────────────────────────────────────────────────────
+
+/** A configured skill repository (entry in skill-repos.ts) */
+export interface SkillSource {
+	/** Human-readable label, e.g. "vercel-labs/agent-skills" */
+	label: string;
+	/** GitHub owner/repo, e.g. "vercel-labs/agent-skills" */
+	repo: string;
+	/** Sub-path within the repo where skills live, e.g. "skills" */
+	skillsPath: string;
+}
+
+/** YAML frontmatter extracted from a SKILL.md file */
+export interface SkillFrontmatter {
+	name: string;
+	description: string;
+	category?: string;
+	author?: string;
+	version?: string;
+	tags?: string[];
+	[key: string]: unknown;
+}
+
+/** A skill entry from the available-skills list (may or may not be installed) */
+export interface SkillInfo {
+	/** Unique key: "{owner}/{repo}/{path}" */
+	id: string;
+	/** Slug used as directory name: last segment of path */
+	name: string;
+	/** Source repo this skill comes from */
+	source: SkillSource;
+	/** Relative path within repo, e.g. "skills/researcher/SKILL.md" */
+	repoPath: string;
+	/** Git blob SHA from Tree API response */
+	gitBlobSha: string;
+	/** Parsed frontmatter (null if not yet fetched) */
+	frontmatter: SkillFrontmatter | null;
+	/** Whether the skill is installed (either scope) */
+	installed: boolean;
+	/** Scope of the installed copy */
+	installedScope: "user" | "project" | null;
+	/** True when lock file SHA differs from Tree API SHA */
+	hasUpdate: boolean;
+	/** Whether this is a recommended skill */
+	isRecommended?: boolean;
+}
+
+// ─── GitHub Tree API types ────────────────────────────────────────────────────
+
+export interface GitTreeItem {
+	path: string;
+	mode: string;
+	type: "blob" | "tree";
+	sha: string;
+	size?: number;
+	url: string;
+}
+
+export interface GitTreeResponse {
+	sha: string;
+	url: string;
+	tree: GitTreeItem[];
+	truncated: boolean;
+}
 
 // MCP Registry Types (registry.modelcontextprotocol.io)
 export interface McpRegistryServer {

package/src/ui/App.js

@@ -5,7 +5,7 @@ import fs from "node:fs";
 import { AppProvider, useApp, useNavigation, useModal, } from "./state/AppContext.js";
 import { DimensionsProvider, useDimensions, } from "./state/DimensionsContext.js";
 import { ModalContainer } from "./components/modals/index.js";
-import { PluginsScreen, McpScreen, McpRegistryScreen, SettingsScreen, CliToolsScreen, ModelSelectorScreen, ProfilesScreen, } from "./screens/index.js";
+import { PluginsScreen, McpScreen, McpRegistryScreen, SettingsScreen, CliToolsScreen, ModelSelectorScreen, ProfilesScreen, SkillsScreen, } from "./screens/index.js";
 import { repairAllMarketplaces } from "../services/local-marketplace.js";
 import { migrateMarketplaceRename } from "../services/claude-settings.js";
 import { checkForUpdates, getCurrentVersion, } from "../services/version-check.js";
@@ -34,6 +34,8 @@ function Router() {
             return _jsx(ModelSelectorScreen, {});
         case "profiles":
             return _jsx(ProfilesScreen, {});
+        case "skills":
+            return _jsx(SkillsScreen, {});
         default:
             return _jsx(PluginsScreen, {});
     }
@@ -84,6 +86,7 @@ function GlobalKeyHandler({ onDebugToggle, onExit, }) {
             "cli-tools",
             "model-selector",
             "profiles",
+            "skills",
         ].includes(state.currentRoute.screen);
         if (isTopLevel) {
             if (input === "1")
@@ -96,6 +99,8 @@ function GlobalKeyHandler({ onDebugToggle, onExit, }) {
                 navigateToScreen("cli-tools");
             else if (input === "5")
                 navigateToScreen("profiles");
+            else if (input === "6")
+                navigateToScreen("skills");
             // Tab navigation cycling
             if (key.tab) {
                 const screens = [
@@ -104,6 +109,7 @@ function GlobalKeyHandler({ onDebugToggle, onExit, }) {
                     "settings",
                     "cli-tools",
                     "profiles",
+                    "skills",
                 ];
                 const currentIndex = screens.indexOf(state.currentRoute.screen);
                 if (currentIndex !== -1) {
@@ -140,7 +146,7 @@ function GlobalKeyHandler({ onDebugToggle, onExit, }) {
 Quick Navigation
   1  Plugins      4  CLI Tools
   2  MCP Servers  5  Profiles
-  3  Settings
+  3  Settings     6  Skills
 
 Plugin Actions
   u  Update        d  Uninstall

package/src/ui/App.tsx

@@ -20,6 +20,7 @@ import {
 	CliToolsScreen,
 	ModelSelectorScreen,
 	ProfilesScreen,
+	SkillsScreen,
 } from "./screens/index.js";
 import type { Screen } from "./state/types.js";
 import { repairAllMarketplaces } from "../services/local-marketplace.js";
@@ -57,6 +58,8 @@ function Router() {
 			return <ModelSelectorScreen />;
 		case "profiles":
 			return <ProfilesScreen />;
+		case "skills":
+			return <SkillsScreen />;
 		default:
 			return <PluginsScreen />;
 	}
@@ -116,6 +119,7 @@ function GlobalKeyHandler({
 			"cli-tools",
 			"model-selector",
 			"profiles",
+			"skills",
 		].includes(state.currentRoute.screen);
 
 		if (isTopLevel) {
@@ -124,6 +128,7 @@ function GlobalKeyHandler({
 			else if (input === "3") navigateToScreen("settings");
 			else if (input === "4") navigateToScreen("cli-tools");
 			else if (input === "5") navigateToScreen("profiles");
+			else if (input === "6") navigateToScreen("skills");
 
 			// Tab navigation cycling
 			if (key.tab) {
@@ -133,6 +138,7 @@ function GlobalKeyHandler({
 					"settings",
 					"cli-tools",
 					"profiles",
+					"skills",
 				];
 				const currentIndex = screens.indexOf(
 					state.currentRoute.screen as Screen,
@@ -173,7 +179,7 @@ function GlobalKeyHandler({
 Quick Navigation
   1  Plugins      4  CLI Tools
   2  MCP Servers  5  Profiles
-  3  Settings
+  3  Settings     6  Skills
 
 Plugin Actions
   u  Update        d  Uninstall

package/src/ui/components/TabBar.js

@@ -6,6 +6,7 @@ const TABS = [
     { key: "3", label: "Settings", screen: "settings" },
     { key: "4", label: "CLI", screen: "cli-tools" },
     { key: "5", label: "Profiles", screen: "profiles" },
+    { key: "6", label: "Skills", screen: "skills" },
 ];
 export function TabBar({ currentScreen, onTabChange }) {
     // Handle number key shortcuts (1-5)

package/src/ui/components/TabBar.tsx

@@ -14,6 +14,7 @@ const TABS: Tab[] = [
 	{ key: "3", label: "Settings", screen: "settings" },
 	{ key: "4", label: "CLI", screen: "cli-tools" },
 	{ key: "5", label: "Profiles", screen: "profiles" },
+	{ key: "6", label: "Skills", screen: "skills" },
 ];
 
 interface TabBarProps {