codiedev 0.9.87 → 0.9.88

package/dist/commands/pack.d.ts

@@ -2,6 +2,7 @@ import { CodiedevConfig } from "../utils";
 import { InstallOptions, PackInstallResult, PackUninstallResult } from "../packs/install";
 import { HarnessName } from "../packs/harnesses";
 import { PackManifest } from "../packs/manifest";
+import { LocalSkill } from "../packs/localSkills";
 import { PackBundleFile } from "../packs/files";
 export declare const DEFAULT_BACKEND_URL = "https://cli.codiedev.com";
 /** CODIEDEV_TOKEN alone is enough: no ~/.codiedev/config.json needed (CI).
@@ -67,4 +68,13 @@ export interface PublishResult {
 /** `codiedev pack publish <slug> [--channel stable|beta|alpha]`: snapshot the
  * draft onto a channel. Re-running with no changes publishes nothing. */
 export declare function runPublish(config: CodiedevConfig, args: PackArgs): Promise<PublishResult>;
+/** The library key a skill name is stored under (server preferredSkillKey). */
+export declare function skillKeyFor(name: string): string;
+/** Push a local skill (and its folder's files) unless the library already
+ * has this exact text and files, so CI doesn't add a version on every merge.
+ * Team-visible: packs ship to teams. */
+export declare function pushLocalSkill(config: CodiedevConfig, skill: LocalSkill): Promise<{
+    key: string;
+    pushed: boolean;
+}>;
 export declare const PACK_HELP = "Usage:\n  codiedev pack list                     Packs assigned to your team\n  codiedev pack install [slug] [--harness claude,codex,copilot,cursor,codie,pi] [--dry-run] [--json] [--quiet]\n                                         Install one pack, or every pack that applies\n  codiedev pack status [--json]          Installed packs and whether they're up to date\n  codiedev pack export <slug> --out <dir> [--git] [--manifest]\n                                         Write the pack as a Claude-format plugin folder plus\n                                         .claude-plugin/marketplace.json (commit it for CI).\n                                         --git inits the folder and commits; --manifest writes\n                                         an editable <slug>.pack.md instead\n  codiedev pack apply <pack.md> [--publish] [--channel stable|beta|alpha] [--dry-run]\n                                         Create or update a pack from a pack.md\n                                         (--publish then publishes it, see below)\n  codiedev pack publish <slug> [--channel stable|beta|alpha]\n                                         Publish the pack's draft to a channel (default\n                                         stable). Nothing happens when it hasn't changed.\n\nFiles (scripts, PDFs, a runner folder): list them under \"## Files\" in pack.md,\none \"- <path in pack> <- <local path>\" per line (local paths are relative to\nthe pack.md; \".\" is the pack root):\n\n  ## Files\n\n  - runner <- ~/.claude/runner\n  - skills/healthcare-scan <- ~/.claude/skills/healthcare-scan\n\n`pack apply` uploads them (admins and team managers; 15MB per file, 50MB per\npack; caches, .git and hidden files are skipped). Without a \"## Files\"\nsection the pack's files are left alone. In skills, point at files relative to\nthe skill's folder, or use ${CLAUDE_PLUGIN_ROOT}/runner/...: Codiedev swaps in the\nreal path for Codex, Copilot, Cursor, pi and Codie.\n\nCursor: packs are copied to ~/.cursor/plugins/local/codiedev-<slug>/. A Cursor\nteam admin can disable \"user local plugin imports\"; then Cursor ignores them.\n\nAuto-update: session starts run `codiedev pack install --quiet` in the background\nabout once an hour. Opt out with CODIEDEV_PACK_AUTOSYNC=0.\n\nHooks for specific skills only: codiedev hook-gate --skills a,b --cmd-b64 <base64url of the command>\n(the pack editor writes this; the command runs via /bin/sh, or cmd.exe on Windows)\n\nCI: set CODIEDEV_TOKEN to a pack CI key (cdvci_\u2026, from the pack's page in the portal).\nNo `codiedev connect` or config file is needed. CI mode (a cdvci_ key, or CI=true)\nnever auto-syncs, reports or prunes, installs the one pack the key can see, defaults\n--harness to claude when it's on PATH, and exits non-zero unless every requested tool\ngot the pack. Skills from a pack are /<pack-slug>:<skill> in Claude Code.\n\n  GitLab CI (.gitlab-ci.yml; add CODIEDEV_TOKEN and ANTHROPIC_API_KEY as masked\n  CI/CD variables):\n    pack-scan:\n      image: node:22\n      script:\n        - npm i -g codiedev @anthropic-ai/claude-code\n        - codiedev pack install --harness claude\n        - claude -p \"/platform-starter:healthcare-scan\" --output-format text\n\n  GitHub Actions (repository secrets CODIEDEV_TOKEN and ANTHROPIC_API_KEY):\n    - uses: actions/setup-node@v4\n      with: { node-version: 22 }\n    - run: npm i -g codiedev @anthropic-ai/claude-code\n    - run: codiedev pack install --harness claude\n      env:\n        CODIEDEV_TOKEN: ${{ secrets.CODIEDEV_TOKEN }}\n    - run: claude -p \"/platform-starter:healthcare-scan\" --output-format text\n      env:\n        ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}\n\n  Keep a pack up to date from its repo (GitLab; on merges to main). Use a\n  personal Codiedev token of a pack owner (portal \u2192 Integrations \u2192 CLI tokens) as a\n  masked CODIEDEV_TOKEN: pack CI keys can only install, not publish.\n    pack-release:\n      image: node:22\n      rules: [{ if: '$CI_COMMIT_BRANCH == \"main\"' }]\n      script:\n        - npm i -g codiedev\n        - codiedev pack apply packs/platform-starter.pack.md --publish\n  Skills listed in pack.md as local folders (\"- ./skills/healthcare-scan\") are\n  pushed when their SKILL.md changed, and the rest of each folder ships with it.\n\n  Or vendor the plugin into the repo instead of installing at build time:\n    codiedev pack export <slug> --out .codiedev/packs";

package/dist/commands/pack.js

@@ -47,6 +47,8 @@ exports.exportPluginFolder = exportPluginFolder;
 exports.runExport = runExport;
 exports.runApply = runApply;
 exports.runPublish = runPublish;
+exports.skillKeyFor = skillKeyFor;
+exports.pushLocalSkill = pushLocalSkill;
 const install_1 = require("../packs/install");
 const harnesses_1 = require("../packs/harnesses");
 const manifest_1 = require("../packs/manifest");
@@ -61,6 +63,7 @@ const harnesses_2 = require("../packs/harnesses");
 const os = __importStar(require("os"));
 const utils_1 = require("../utils");
 const push_1 = require("./push");
+const skillFiles_1 = require("../packs/skillFiles");
 const skillMarker_1 = require("../skillMarker");
 const localSkills_1 = require("../packs/localSkills");
 const shared_1 = require("./shared");
@@ -671,29 +674,31 @@ async function runApply(config, args) {
     if (!markdown.trim())
         throw new Error(`${file} is empty`);
     const baseDir = path.dirname(file);
-    // SIG-128: local skills under `## Skills` are pushed, and a skill folder's
-    // other contents ship as that skill's files.
+    // SIG-128: local skills under `## Skills` are pushed; a skill folder's other
+    // contents (scripts/, docs/) travel with the skill itself, so every pack
+    // that includes it ships them under skills/<name>/.
     const skills = (0, localSkills_1.findLocalSkills)(markdown, baseDir);
-    // `## Files` (SIG-127): local folders/files to ship in the plugin dir.
-    // Neither a Files section nor a local skill folder ⇒ the pack's files are
-    // left as they are; otherwise this list replaces them.
+    // `## Files` (SIG-127): shared folders/files for the plugin dir (a runner).
+    // No Files section ⇒ the pack's own files are left as they are.
     const entries = (0, files_1.parseFilesSection)(markdown);
-    const listed = new Set((entries ?? []).map((e) => e.dest.replace(/^\.\/+/, "").replace(/\/+$/, "").toLowerCase()));
-    const folderEntries = (0, localSkills_1.skillFolderEntries)(skills).filter((e) => !listed.has(e.dest.toLowerCase()));
-    const allEntries = entries || folderEntries.length ? [...(entries ?? []), ...folderEntries] : null;
-    const local = allEntries ? (0, files_1.collectLocalFiles)(allEntries, baseDir) : null;
-    const ownSkillMd = new Set(skills.map((s) => `${s.pluginDir}/SKILL.md`.toLowerCase()));
-    for (const note of local?.notes ?? []) {
-        // A local skill's own SKILL.md is pushed as the skill, not skipped.
-        if ([...ownSkillMd].some((p) => note.toLowerCase().includes(p)))
-            continue;
+    const local = entries ? (0, files_1.collectLocalFiles)(entries, baseDir) : null;
+    for (const note of local?.notes ?? [])
         console.log(`  · ${note}`);
-    }
     if (args.dryRun) {
         const extra = local ? `, ${local.files.length} file${local.files.length === 1 ? "" : "s"} (${formatBytes(local.files.reduce((n, f) => n + f.size, 0))})` : "";
         console.log(`Dry run — would apply ${file} (${Buffer.byteLength(markdown)} bytes${extra}).`);
-        for (const skill of skills)
-            console.log(`  skill ${skill.name} ← ${path.relative(baseDir, skill.skillFile) || skill.skillFile} (pushed if changed)`);
+        for (const skill of skills) {
+            const folder = skill.dir ? (0, skillFiles_1.skillFolderFiles)(skill.skillFile) : null;
+            const files = folder && "files" in folder ? folder : null;
+            const withFiles = files?.files.length ? `, with ${files.files.length} file${files.files.length === 1 ? "" : "s"} from its folder` : "";
+            console.log(`  skill ${skill.name} ← ${path.relative(baseDir, skill.skillFile) || skill.skillFile} (pushed if changed${withFiles})`);
+            if (folder && "skipped" in folder)
+                console.log(`    ! SKILL.md only: ${folder.skipped}`);
+            for (const note of files?.notes ?? [])
+                console.log(`    · ${note}`);
+            for (const f of files?.files ?? [])
+                console.log(`    ${skill.pluginDir}/${f.path}`);
+        }
         for (const f of local?.files ?? [])
             console.log(`  ${f.path}`);
         return {};
@@ -792,23 +797,50 @@ async function runPublish(config, args) {
         console.log(`✓ Published ${out.slug} v${out.version} to ${channel}. Teams on ${channel} get it at their next sync.`);
     return out;
 }
-/** Push a local skill unless the library already has this exact text (so CI
- * doesn't add a version on every merge). Team-visible: packs ship to teams. */
+/** The library key a skill name is stored under (server preferredSkillKey). */
+function skillKeyFor(name) {
+    const slug = name.trim().toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 64).replace(/-+$/g, "");
+    return slug ? `${slug}.md` : name;
+}
+/** Push a local skill (and its folder's files) unless the library already
+ * has this exact text and files, so CI doesn't add a version on every merge.
+ * Team-visible: packs ship to teams. */
 async function pushLocalSkill(config, skill) {
     const local = (0, skillMarker_1.stripSkillMarker)(fs.readFileSync(skill.skillFile, "utf8"));
-    try {
-        const current = await (0, shared_1.apiRequest)("GET", "/api/cli/pull", { config, query: { key: skill.name } });
-        const remote = current.artifact?.markdown;
-        if (current.artifact?.kind === "skill" && typeof remote === "string" && (0, skillMarker_1.stripSkillMarker)(remote).trimEnd() === local.trimEnd()) {
-            return { key: skill.name, pushed: false };
+    const found = skill.dir ? (0, skillFiles_1.skillFolderFiles)(skill.skillFile) : null;
+    if (found && "skipped" in found)
+        console.log(`  ! ${skill.name}: pushing SKILL.md only, ${found.skipped}. The skill keeps the files it had.`);
+    const folder = found && "files" in found ? found : null;
+    for (const note of folder?.notes ?? [])
+        console.log(`  · ${skill.name}: ${note}`);
+    const localRefs = folder ? folder.files.map(skillFiles_1.toRef) : undefined;
+    for (const key of [skillKeyFor(skill.name), skill.name]) {
+        try {
+            const current = await (0, shared_1.apiRequest)("GET", "/api/cli/pull", { config, query: { key } });
+            const remote = current.artifact?.markdown;
+            if (current.artifact?.kind === "skill" &&
+                typeof remote === "string" &&
+                (0, skillMarker_1.stripSkillMarker)(remote).trimEnd() === local.trimEnd() &&
+                (!localRefs || (0, skillFiles_1.sameFileRefs)(current.artifact.files, localRefs))) {
+                return { key: current.artifact.key ?? key, pushed: false };
+            }
+            break;
+        }
+        catch (error) {
+            if (error.status !== 404)
+                throw new Error(`couldn't check skill ${skill.name} (${error.message})`);
         }
-    }
-    catch (error) {
-        if (error.status !== 404)
-            throw new Error(`couldn't check skill ${skill.name} (${error.message})`);
     }
     try {
-        const res = await (0, push_1.pushFile)(config, { absPath: skill.skillFile, key: path.basename(skill.skillFile), kind: "skill", visibility: "team" });
+        if (folder)
+            await (0, skillFiles_1.uploadBlobs)(config, folder.files, "/api/cli/skills/files");
+        const res = await (0, push_1.pushFile)(config, {
+            absPath: skill.skillFile,
+            key: path.basename(skill.skillFile),
+            kind: "skill",
+            visibility: "team",
+            ...(localRefs ? { files: localRefs } : {}),
+        });
         return { key: res.key ?? skill.name, pushed: true };
     }
     catch (error) {
@@ -818,12 +850,10 @@ async function pushLocalSkill(config, skill) {
 function formatBytes(n) {
     return n >= 1024 * 1024 ? `${(n / (1024 * 1024)).toFixed(1)}MB` : n >= 1024 ? `${Math.round(n / 1024)}KB` : `${n}B`;
 }
-/** Upload the blobs Codiedev doesn't have yet. Returns how many were sent. */
+/** Upload the pack's own blobs Codiedev doesn't have yet. Returns how many were sent. */
 async function uploadPackFiles(config, files) {
-    const unique = [...new Map(files.map((f) => [f.sha256, f])).values()];
-    let known;
     try {
-        known = (await (0, shared_1.apiRequest)("POST", "/api/cli/packs/files/known", { config, body: { sha256s: unique.map((f) => f.sha256) } })).known ?? [];
+        return await (0, skillFiles_1.uploadBlobs)(config, files, "/api/cli/packs/files");
     }
     catch (error) {
         const e = error;
@@ -831,20 +861,5 @@ async function uploadPackFiles(config, files) {
             throw new Error(`Only admins and team managers can add files to a pack (${e.message})`);
         throw error;
     }
-    const have = new Set(known);
-    let sent = 0;
-    for (const f of unique) {
-        if (have.has(f.sha256))
-            continue;
-        const body = fs.readFileSync(f.abs);
-        try {
-            await (0, shared_1.apiRequestBytes)("POST", "/api/cli/packs/files/upload", { config, body, query: { sha256: f.sha256 } });
-        }
-        catch (error) {
-            throw new Error(`couldn't upload ${f.path} (${error.message})`);
-        }
-        sent += 1;
-    }
-    return sent;
 }
 exports.PACK_HELP = USAGE;

package/dist/commands/push.d.ts

@@ -1,4 +1,5 @@
 import { requireConfig } from "./shared";
+import { FileRef } from "../packs/skillFiles";
 interface PushResponse {
     ok: boolean;
     artifactId: string;
@@ -17,6 +18,8 @@ export interface ParsedArgs {
     force: boolean;
     as?: string;
     private?: boolean;
+    /** --no-files: push SKILL.md only; the skill keeps its current files. */
+    noFiles?: boolean;
 }
 export declare function parseArgs(args: string[]): ParsedArgs;
 export declare function pushFile(config: ReturnType<typeof requireConfig>, opts: {
@@ -28,6 +31,17 @@ export declare function pushFile(config: ReturnType<typeof requireConfig>, opts:
     kind?: string;
     tags?: string[];
     force?: boolean;
+    /** A skill folder's other files, already uploaded (uploadBlobs). Omitted =
+     *  the new version keeps the previous version's files. */
+    files?: FileRef[];
 }): Promise<PushResponse>;
+/** For a SKILL.md in its own folder: upload the folder's other files and
+ * return their refs. null = send no list (not a skill folder, or one over the
+ * limits, which is warned about): the skill keeps its current files. */
+export declare function uploadSkillFolder(config: ReturnType<typeof requireConfig>, skillFile: string, log?: (line: string) => void): Promise<{
+    files: FileRef[];
+    bytes: number;
+} | null>;
+export declare function formatBytes(n: number): string;
 export declare function runPush(args: string[]): Promise<void>;
 export {};

package/dist/commands/push.js

@@ -35,6 +35,8 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.parseArgs = parseArgs;
 exports.pushFile = pushFile;
+exports.uploadSkillFolder = uploadSkillFolder;
+exports.formatBytes = formatBytes;
 exports.runPush = runPush;
 const fs = __importStar(require("fs"));
 const skillMarker_1 = require("../skillMarker");
@@ -42,6 +44,7 @@ const path = __importStar(require("path"));
 const shared = __importStar(require("./shared"));
 const shared_1 = require("./shared");
 const utils_1 = require("../utils");
+const skillFiles_1 = require("../packs/skillFiles");
 const VALID_TYPES = new Set([
     "spec",
     "bugfix",
@@ -58,6 +61,7 @@ function parseArgs(args) {
     let force = false;
     let as;
     let priv = false;
+    let noFiles = false;
     const tags = [];
     for (let i = 0; i < args.length; i++) {
         const a = args[i];
@@ -91,12 +95,15 @@ function parseArgs(args) {
         else if (a === "--private") {
             priv = true;
         }
+        else if (a === "--no-files") {
+            noFiles = true;
+        }
         else if (!a.startsWith("--") && !file) {
             file = a;
         }
     }
     if (!file) {
-        console.error("Usage: codiedev push <file.md> [--as <key>] [--kind doc|skill] [--tag <name>] [--private] [--force]");
+        console.error("Usage: codiedev push <file.md> [--as <key>] [--kind doc|skill] [--tag <name>] [--private] [--force] [--no-files]");
         process.exit(1);
     }
     if (type && !VALID_TYPES.has(type)) {
@@ -118,7 +125,7 @@ function parseArgs(args) {
             process.exit(1);
         }
     }
-    return { file, type, kind, tags, force, as, private: priv };
+    return { file, type, kind, tags, force, as, private: priv, noFiles };
 }
 async function pushFile(config, opts) {
     // Never upload another artifact's identity marker (skillMarker.ts).
@@ -136,11 +143,31 @@ async function pushFile(config, opts) {
             gitRemoteUrl,
             visibility: opts.visibility,
             contentHash: opts.contentHash,
+            ...(opts.files ? { files: opts.files } : {}),
         },
     });
 }
+/** For a SKILL.md in its own folder: upload the folder's other files and
+ * return their refs. null = send no list (not a skill folder, or one over the
+ * limits, which is warned about): the skill keeps its current files. */
+async function uploadSkillFolder(config, skillFile, log = () => { }) {
+    const folder = (0, skillFiles_1.skillFolderFiles)(skillFile);
+    if (!folder)
+        return null;
+    if ("skipped" in folder) {
+        log(`  ! Pushing SKILL.md only: ${folder.skipped}. The skill keeps the files it had.`);
+        return null;
+    }
+    for (const note of folder.notes)
+        log(`  · ${note}`);
+    await (0, skillFiles_1.uploadBlobs)(config, folder.files, "/api/cli/skills/files");
+    return { files: folder.files.map(skillFiles_1.toRef), bytes: folder.bytes };
+}
+function formatBytes(n) {
+    return n >= 1024 * 1024 ? `${(n / (1024 * 1024)).toFixed(1)}MB` : n >= 1024 ? `${Math.round(n / 1024)}KB` : `${n}B`;
+}
 async function runPush(args) {
-    const { file, type, kind, tags, force, as, private: priv } = parseArgs(args);
+    const { file, type, kind, tags, force, as, private: priv, noFiles } = parseArgs(args);
     const config = (0, shared_1.requireConfig)();
     let absolute = file;
     if (!path.isAbsolute(absolute)) {
@@ -162,6 +189,8 @@ async function runPush(args) {
     const filename = as ?? path.basename(absolute);
     const start = Date.now();
     try {
+        // A skill's folder (scripts/, docs/, PDFs) travels with it.
+        const folder = !noFiles && kind !== "doc" ? await uploadSkillFolder(config, absolute, (l) => console.log(l)) : null;
         const res = await pushFile(config, {
             absPath: absolute,
             key: filename,
@@ -170,6 +199,7 @@ async function runPush(args) {
             tags,
             force,
             visibility: priv ? "private" : undefined,
+            ...(folder ? { files: folder.files } : {}),
         });
         (0, shared_1.recordAgentEvent)(config, {
             tool: "codiedev_push",
@@ -177,7 +207,10 @@ async function runPush(args) {
             latencyMs: Date.now() - start,
         });
         const tagSummary = res.tags && res.tags.length > 0 ? ` tags=[${res.tags.join(", ")}]` : "";
-        console.log(`✓ Pushed ${filename} (kind=${res.kind}${tagSummary}).`);
+        const fileSummary = folder?.files.length
+            ? `, with ${folder.files.length} file${folder.files.length === 1 ? "" : "s"} from its folder, ${formatBytes(folder.bytes)}`
+            : "";
+        console.log(`✓ Pushed ${filename} (kind=${res.kind}${tagSummary}${fileSummary}).`);
         console.log(`  Visible under: ${res.destination}`);
         // Echo the *resolved* key the server stored, not the local filename —
         // skills are keyed by their frontmatter name (so two `SKILL.md` files

package/dist/packs/files.d.ts

@@ -36,9 +36,13 @@ export declare function expandHome(p: string, home?: string): string;
 /** Walk each `## Files` entry. Junk (caches, VCS, editor files) is skipped
  * quietly; symlinks, hidden files and a skill folder's own SKILL.md are
  * skipped with a note. Throws on a missing source or a bad destination. */
-export declare function collectLocalFiles(entries: FilesEntry[], baseDir: string, home?: string): {
+export declare function collectLocalFiles(entries: FilesEntry[], baseDir: string, home?: string, opts?: {
+    lenient?: boolean;
+    checkAs?: (dest: string) => string;
+}): {
     files: LocalFile[];
     notes: string[];
+    total: number;
 };
 /** Only Claude Code sets ${CLAUDE_PLUGIN_ROOT}. In the copy other tools read,
  * replace it with the plugin dir's real path (forward slashes, which every

package/dist/packs/files.js

@@ -218,12 +218,15 @@ function expandHome(p, home = os.homedir()) {
 /** Walk each `## Files` entry. Junk (caches, VCS, editor files) is skipped
  * quietly; symlinks, hidden files and a skill folder's own SKILL.md are
  * skipped with a note. Throws on a missing source or a bad destination. */
-function collectLocalFiles(entries, baseDir, home = os.homedir()) {
+function collectLocalFiles(entries, baseDir, home = os.homedir(), opts = {}) {
     const files = new Map();
     const notes = [];
     let total = 0;
     const add = (dest, abs) => {
-        const problem = packFilePathProblem(dest);
+        // A skill folder's own SKILL.md is the skill itself (pushed separately).
+        if (opts.lenient && dest.toLowerCase() === "skill.md")
+            return;
+        const problem = packFilePathProblem(opts.checkAs ? opts.checkAs(dest) : dest);
         if (problem) {
             const parts = dest.split("/");
             if (parts.length === 3 && parts[0] === "skills" && parts[2].toLowerCase() === "skill.md") {
@@ -234,9 +237,18 @@ function collectLocalFiles(entries, baseDir, home = os.homedir()) {
                 notes.push(`skipped hidden file ${dest}`);
                 return;
             }
+            if (opts.lenient) {
+                // A skill folder: skip what can't ship, never fail the push.
+                notes.push(`skipped ${dest} (${problem})`);
+                return;
+            }
             throw new Error(`can't ship ${dest}: ${problem}`);
         }
         const stat = fs.statSync(abs);
+        if (stat.size > exports.PACK_FILE_MAX_BYTES && opts.lenient) {
+            notes.push(`skipped ${dest} (over ${exports.PACK_FILE_MAX_BYTES / (1024 * 1024)}MB)`);
+            return;
+        }
         if (stat.size > exports.PACK_FILE_MAX_BYTES)
             throw new Error(`${abs} is over ${exports.PACK_FILE_MAX_BYTES / (1024 * 1024)}MB`);
         const key = dest.toLowerCase();
@@ -291,11 +303,13 @@ function collectLocalFiles(entries, baseDir, home = os.homedir()) {
             throw new Error(`pack.md line ${entry.line}: ${entry.source} is not a file or folder`);
     }
     const list = [...files.values()].sort((a, b) => (a.path < b.path ? -1 : a.path > b.path ? 1 : 0));
+    if (opts.lenient)
+        return { files: list, notes, total };
     if (list.length > exports.PACK_MAX_FILES)
         throw new Error(`a pack holds at most ${exports.PACK_MAX_FILES} files (found ${list.length})`);
     if (total > exports.PACK_FILES_MAX_TOTAL_BYTES)
         throw new Error(`pack files total over ${exports.PACK_FILES_MAX_TOTAL_BYTES / (1024 * 1024)}MB`);
-    return { files: list, notes };
+    return { files: list, notes, total };
 }
 // ─── Portable copies ────────────────────────────────────────────────────────
 /** Only Claude Code sets ${CLAUDE_PLUGIN_ROOT}. In the copy other tools read,

package/dist/packs/skillFiles.d.ts

@@ -0,0 +1,37 @@
+import { CodiedevConfig } from "../utils";
+import { LocalFile } from "./files";
+export type FileRef = {
+    path: string;
+    sha256: string;
+    executable?: boolean;
+};
+export declare const toRef: (f: {
+    path: string;
+    sha256: string;
+    executable?: boolean;
+}) => FileRef;
+export type SkillFolder = {
+    files: LocalFile[];
+    notes: string[];
+    bytes: number;
+}
+/** A skill folder that can't ship (over the limits): send no list, so the
+ *  skill keeps its current files, and warn. */
+ | {
+    skipped: string;
+};
+/** The other files in a SKILL.md's folder, paths relative to that folder.
+ * null when the file isn't a skill in its own folder (a repo root or the home
+ * folder is never walked). Files that can't ship are skipped with a note, so
+ * the folder never fails a push. */
+export declare function skillFolderFiles(skillFile: string, home?: string): SkillFolder | null;
+/** Same files (path, content, executable bit), order-insensitive? */
+export declare function sameFileRefs(a: FileRef[] | undefined, b: FileRef[] | undefined): boolean;
+/** Upload the blobs Codiedev doesn't have yet. `base` is
+ * /api/cli/packs/files (admins and managers) or /api/cli/skills/files (anyone).
+ * Returns how many were sent. */
+export declare function uploadBlobs(config: CodiedevConfig, files: Array<{
+    path: string;
+    sha256: string;
+    abs: string;
+}>, base: "/api/cli/packs/files" | "/api/cli/skills/files"): Promise<number>;

package/dist/packs/skillFiles.js

@@ -0,0 +1,120 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toRef = void 0;
+exports.skillFolderFiles = skillFolderFiles;
+exports.sameFileRefs = sameFileRefs;
+exports.uploadBlobs = uploadBlobs;
+// A skill's folder files: everything beside SKILL.md (scripts/, docs/, PDFs)
+// travels with the skill. `codiedev push` of a SKILL.md uploads them as blobs
+// and sends the list with the push; packs then ship them under
+// skills/<name>/ automatically. Blobs share the pack-file store (files.ts).
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const shared_1 = require("../commands/shared");
+const files_1 = require("./files");
+const manifest_1 = require("./manifest");
+const toRef = (f) => ({
+    path: f.path,
+    sha256: f.sha256,
+    ...(f.executable ? { executable: true } : {}),
+});
+exports.toRef = toRef;
+/** The other files in a SKILL.md's folder, paths relative to that folder.
+ * null when the file isn't a skill in its own folder (a repo root or the home
+ * folder is never walked). Files that can't ship are skipped with a note, so
+ * the folder never fails a push. */
+function skillFolderFiles(skillFile, home = os.homedir()) {
+    const abs = path.resolve(skillFile);
+    if (path.basename(abs).toLowerCase() !== "skill.md")
+        return null;
+    // Only a real skill (name: + description:) carries files.
+    let data;
+    try {
+        data = (0, manifest_1.parseFrontmatter)(fs.readFileSync(abs, "utf8")).data;
+    }
+    catch {
+        return null;
+    }
+    if (!(data.name ?? "").trim() || !(data.description ?? "").trim())
+        return null;
+    const dir = path.dirname(abs);
+    if (dir === path.resolve(home) || dir === path.parse(dir).root || fs.existsSync(path.join(dir, ".git")))
+        return null;
+    let walked;
+    try {
+        // Checked as the server does: as if under skills/<name>/ in a pack.
+        walked = (0, files_1.collectLocalFiles)([{ dest: ".", source: dir, line: 0 }], dir, home, { lenient: true, checkAs: (p) => `skills/s/${p}` });
+    }
+    catch (error) {
+        return { skipped: `couldn't read its folder (${error.message})` };
+    }
+    const files = walked.files.filter((f) => f.path.toLowerCase() !== "skill.md");
+    const bytes = files.reduce((n, f) => n + f.size, 0);
+    if (files.length > files_1.PACK_MAX_FILES || bytes > files_1.PACK_FILES_MAX_TOTAL_BYTES) {
+        return {
+            skipped: `its folder is over the limit (${files.length} files, ${(bytes / (1024 * 1024)).toFixed(1)}MB; at most ${files_1.PACK_MAX_FILES} files and ${files_1.PACK_FILES_MAX_TOTAL_BYTES / (1024 * 1024)}MB)`,
+        };
+    }
+    return { files, notes: walked.notes, bytes };
+}
+/** Same files (path, content, executable bit), order-insensitive? */
+function sameFileRefs(a, b) {
+    const key = (l) => JSON.stringify((l ?? []).map((f) => [f.path, f.sha256, !!f.executable]).sort());
+    return key(a) === key(b);
+}
+/** Upload the blobs Codiedev doesn't have yet. `base` is
+ * /api/cli/packs/files (admins and managers) or /api/cli/skills/files (anyone).
+ * Returns how many were sent. */
+async function uploadBlobs(config, files, base) {
+    const unique = [...new Map(files.map((f) => [f.sha256, f])).values()];
+    if (!unique.length)
+        return 0;
+    const have = new Set((await (0, shared_1.apiRequest)("POST", `${base}/known`, { config, body: { sha256s: unique.map((f) => f.sha256) } })).known ?? []);
+    let sent = 0;
+    for (const f of unique) {
+        if (have.has(f.sha256))
+            continue;
+        try {
+            await (0, shared_1.apiRequestBytes)("POST", `${base}/upload`, { config, body: fs.readFileSync(f.abs), query: { sha256: f.sha256 } });
+        }
+        catch (error) {
+            throw new Error(`couldn't upload ${f.path} (${error.message})`);
+        }
+        sent += 1;
+    }
+    return sent;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codiedev",
-  "version": "0.9.87",
+  "version": "0.9.88",
   "description": "Connect Claude Code, Codex, Cursor, OpenCode, or VS Code Copilot to Codiedev for team session capture and artifact collaboration — and run the governed Codie harness",
   "bin": {
     "codiedev": "dist/cli.js",