codiedev 0.9.87 → 0.9.89

package/dist/cli.d.ts

@@ -6,7 +6,7 @@
  *   codiedev connect                   — link agent CLIs to your org
  *   codiedev push <file>               — author/update a spec/review/decision/etc.
  *   codiedev pull <key>                — fetch an artifact by filename key
- *   codiedev ping <user> "<msg>"       — send a message (optionally --with <key>)
+ *   codiedev ping <user> ["<msg>"]     — message and/or share (--with <key>)
  *   codiedev inbox                     — list pings (use --unread to filter)
  *   codiedev read <ping-id>            — mark read + show full message
  *   codiedev reply <ping-id> "<msg>"   — answer a ping in its thread

package/dist/cli.js

@@ -7,7 +7,7 @@
  *   codiedev connect                   — link agent CLIs to your org
  *   codiedev push <file>               — author/update a spec/review/decision/etc.
  *   codiedev pull <key>                — fetch an artifact by filename key
- *   codiedev ping <user> "<msg>"       — send a message (optionally --with <key>)
+ *   codiedev ping <user> ["<msg>"]     — message and/or share (--with <key>)
  *   codiedev inbox                     — list pings (use --unread to filter)
  *   codiedev read <ping-id>            — mark read + show full message
  *   codiedev reply <ping-id> "<msg>"   — answer a ping in its thread
@@ -103,11 +103,10 @@ Artifacts:
                                          Asks for confirmation; -y to skip.
 
 Messaging:
-  codiedev ping <user> "<msg>" [--with <key>] [--file <path>]
-                                         Send a message to a teammate
-  codiedev send <key> <user> ["<msg>"]   Share an artifact + ping in one step
-  codiedev share <key> <user> [--role read|edit]
-                                         Silently grant access (no notification)
+  codiedev ping <user> ["<msg>"] [--with <key>] [--edit] [--file <path>]
+                                         Message a teammate (emails them). --with
+                                         gives them access to an artifact; with
+                                         no message it's a silent share
   codiedev inbox [--unread] [--limit N]  Show messages
   codiedev read <ping-id>                Mark read + show full message
   codiedev reply <ping-id> "<msg>" [--file <path>]
@@ -280,10 +279,14 @@ codiedev pull — fetch an artifact
     codiedev pull spec-cart-clear.md | less
 `.trim(),
     ping: `
-codiedev ping — send a teammate a message, optionally attached to an artifact
+codiedev ping — send a teammate a message, an artifact, or both
 
   Usage:
-    codiedev ping <user> "<message>" [--with <artifact-key>] [--file <path>]
+    codiedev ping <user> ["<message>"] [--with <artifact-key>] [--edit] [--file <path>]
+
+  --with gives them read access to the artifact (--edit: edit access; only
+  the owner can give edit access or share a private skill). With no message,
+  it's a silent share: access only, no inbox entry, no email.
 
   <user> resolves to a teammate in your org by first name, full name,
   or email. Ambiguous matches return a list — retry with the full email.

package/dist/commands/pack.d.ts

@@ -2,6 +2,7 @@ import { CodiedevConfig } from "../utils";
 import { InstallOptions, PackInstallResult, PackUninstallResult } from "../packs/install";
 import { HarnessName } from "../packs/harnesses";
 import { PackManifest } from "../packs/manifest";
+import { LocalSkill } from "../packs/localSkills";
 import { PackBundleFile } from "../packs/files";
 export declare const DEFAULT_BACKEND_URL = "https://cli.codiedev.com";
 /** CODIEDEV_TOKEN alone is enough: no ~/.codiedev/config.json needed (CI).
@@ -67,4 +68,13 @@ export interface PublishResult {
 /** `codiedev pack publish <slug> [--channel stable|beta|alpha]`: snapshot the
  * draft onto a channel. Re-running with no changes publishes nothing. */
 export declare function runPublish(config: CodiedevConfig, args: PackArgs): Promise<PublishResult>;
+/** The library key a skill name is stored under (server preferredSkillKey). */
+export declare function skillKeyFor(name: string): string;
+/** Push a local skill (and its folder's files) unless the library already
+ * has this exact text and files, so CI doesn't add a version on every merge.
+ * Team-visible: packs ship to teams. */
+export declare function pushLocalSkill(config: CodiedevConfig, skill: LocalSkill): Promise<{
+    key: string;
+    pushed: boolean;
+}>;
 export declare const PACK_HELP = "Usage:\n  codiedev pack list                     Packs assigned to your team\n  codiedev pack install [slug] [--harness claude,codex,copilot,cursor,codie,pi] [--dry-run] [--json] [--quiet]\n                                         Install one pack, or every pack that applies\n  codiedev pack status [--json]          Installed packs and whether they're up to date\n  codiedev pack export <slug> --out <dir> [--git] [--manifest]\n                                         Write the pack as a Claude-format plugin folder plus\n                                         .claude-plugin/marketplace.json (commit it for CI).\n                                         --git inits the folder and commits; --manifest writes\n                                         an editable <slug>.pack.md instead\n  codiedev pack apply <pack.md> [--publish] [--channel stable|beta|alpha] [--dry-run]\n                                         Create or update a pack from a pack.md\n                                         (--publish then publishes it, see below)\n  codiedev pack publish <slug> [--channel stable|beta|alpha]\n                                         Publish the pack's draft to a channel (default\n                                         stable). Nothing happens when it hasn't changed.\n\nFiles (scripts, PDFs, a runner folder): list them under \"## Files\" in pack.md,\none \"- <path in pack> <- <local path>\" per line (local paths are relative to\nthe pack.md; \".\" is the pack root):\n\n  ## Files\n\n  - runner <- ~/.claude/runner\n  - skills/healthcare-scan <- ~/.claude/skills/healthcare-scan\n\n`pack apply` uploads them (admins and team managers; 15MB per file, 50MB per\npack; caches, .git and hidden files are skipped). Without a \"## Files\"\nsection the pack's files are left alone. In skills, point at files relative to\nthe skill's folder, or use ${CLAUDE_PLUGIN_ROOT}/runner/...: Codiedev swaps in the\nreal path for Codex, Copilot, Cursor, pi and Codie.\n\nCursor: packs are copied to ~/.cursor/plugins/local/codiedev-<slug>/. A Cursor\nteam admin can disable \"user local plugin imports\"; then Cursor ignores them.\n\nAuto-update: session starts run `codiedev pack install --quiet` in the background\nabout once an hour. Opt out with CODIEDEV_PACK_AUTOSYNC=0.\n\nHooks for specific skills only: codiedev hook-gate --skills a,b --cmd-b64 <base64url of the command>\n(the pack editor writes this; the command runs via /bin/sh, or cmd.exe on Windows)\n\nCI: set CODIEDEV_TOKEN to a pack CI key (cdvci_\u2026, from the pack's page in the portal).\nNo `codiedev connect` or config file is needed. CI mode (a cdvci_ key, or CI=true)\nnever auto-syncs, reports or prunes, installs the one pack the key can see, defaults\n--harness to claude when it's on PATH, and exits non-zero unless every requested tool\ngot the pack. Skills from a pack are /<pack-slug>:<skill> in Claude Code.\n\n  GitLab CI (.gitlab-ci.yml; add CODIEDEV_TOKEN and ANTHROPIC_API_KEY as masked\n  CI/CD variables):\n    pack-scan:\n      image: node:22\n      script:\n        - npm i -g codiedev @anthropic-ai/claude-code\n        - codiedev pack install --harness claude\n        - claude -p \"/platform-starter:healthcare-scan\" --output-format text\n\n  GitHub Actions (repository secrets CODIEDEV_TOKEN and ANTHROPIC_API_KEY):\n    - uses: actions/setup-node@v4\n      with: { node-version: 22 }\n    - run: npm i -g codiedev @anthropic-ai/claude-code\n    - run: codiedev pack install --harness claude\n      env:\n        CODIEDEV_TOKEN: ${{ secrets.CODIEDEV_TOKEN }}\n    - run: claude -p \"/platform-starter:healthcare-scan\" --output-format text\n      env:\n        ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}\n\n  Keep a pack up to date from its repo (GitLab; on merges to main). Use a\n  personal Codiedev token of a pack owner (portal \u2192 Integrations \u2192 CLI tokens) as a\n  masked CODIEDEV_TOKEN: pack CI keys can only install, not publish.\n    pack-release:\n      image: node:22\n      rules: [{ if: '$CI_COMMIT_BRANCH == \"main\"' }]\n      script:\n        - npm i -g codiedev\n        - codiedev pack apply packs/platform-starter.pack.md --publish\n  Skills listed in pack.md as local folders (\"- ./skills/healthcare-scan\") are\n  pushed when their SKILL.md changed, and the rest of each folder ships with it.\n\n  Or vendor the plugin into the repo instead of installing at build time:\n    codiedev pack export <slug> --out .codiedev/packs";

package/dist/commands/pack.js

@@ -47,6 +47,8 @@ exports.exportPluginFolder = exportPluginFolder;
 exports.runExport = runExport;
 exports.runApply = runApply;
 exports.runPublish = runPublish;
+exports.skillKeyFor = skillKeyFor;
+exports.pushLocalSkill = pushLocalSkill;
 const install_1 = require("../packs/install");
 const harnesses_1 = require("../packs/harnesses");
 const manifest_1 = require("../packs/manifest");
@@ -61,6 +63,7 @@ const harnesses_2 = require("../packs/harnesses");
 const os = __importStar(require("os"));
 const utils_1 = require("../utils");
 const push_1 = require("./push");
+const skillFiles_1 = require("../packs/skillFiles");
 const skillMarker_1 = require("../skillMarker");
 const localSkills_1 = require("../packs/localSkills");
 const shared_1 = require("./shared");
@@ -671,29 +674,31 @@ async function runApply(config, args) {
     if (!markdown.trim())
         throw new Error(`${file} is empty`);
     const baseDir = path.dirname(file);
-    // SIG-128: local skills under `## Skills` are pushed, and a skill folder's
-    // other contents ship as that skill's files.
+    // SIG-128: local skills under `## Skills` are pushed; a skill folder's other
+    // contents (scripts/, docs/) travel with the skill itself, so every pack
+    // that includes it ships them under skills/<name>/.
     const skills = (0, localSkills_1.findLocalSkills)(markdown, baseDir);
-    // `## Files` (SIG-127): local folders/files to ship in the plugin dir.
-    // Neither a Files section nor a local skill folder ⇒ the pack's files are
-    // left as they are; otherwise this list replaces them.
+    // `## Files` (SIG-127): shared folders/files for the plugin dir (a runner).
+    // No Files section ⇒ the pack's own files are left as they are.
     const entries = (0, files_1.parseFilesSection)(markdown);
-    const listed = new Set((entries ?? []).map((e) => e.dest.replace(/^\.\/+/, "").replace(/\/+$/, "").toLowerCase()));
-    const folderEntries = (0, localSkills_1.skillFolderEntries)(skills).filter((e) => !listed.has(e.dest.toLowerCase()));
-    const allEntries = entries || folderEntries.length ? [...(entries ?? []), ...folderEntries] : null;
-    const local = allEntries ? (0, files_1.collectLocalFiles)(allEntries, baseDir) : null;
-    const ownSkillMd = new Set(skills.map((s) => `${s.pluginDir}/SKILL.md`.toLowerCase()));
-    for (const note of local?.notes ?? []) {
-        // A local skill's own SKILL.md is pushed as the skill, not skipped.
-        if ([...ownSkillMd].some((p) => note.toLowerCase().includes(p)))
-            continue;
+    const local = entries ? (0, files_1.collectLocalFiles)(entries, baseDir) : null;
+    for (const note of local?.notes ?? [])
         console.log(`  · ${note}`);
-    }
     if (args.dryRun) {
         const extra = local ? `, ${local.files.length} file${local.files.length === 1 ? "" : "s"} (${formatBytes(local.files.reduce((n, f) => n + f.size, 0))})` : "";
         console.log(`Dry run — would apply ${file} (${Buffer.byteLength(markdown)} bytes${extra}).`);
-        for (const skill of skills)
-            console.log(`  skill ${skill.name} ← ${path.relative(baseDir, skill.skillFile) || skill.skillFile} (pushed if changed)`);
+        for (const skill of skills) {
+            const folder = skill.dir ? (0, skillFiles_1.skillFolderFiles)(skill.skillFile) : null;
+            const files = folder && "files" in folder ? folder : null;
+            const withFiles = files?.files.length ? `, with ${files.files.length} file${files.files.length === 1 ? "" : "s"} from its folder` : "";
+            console.log(`  skill ${skill.name} ← ${path.relative(baseDir, skill.skillFile) || skill.skillFile} (pushed if changed${withFiles})`);
+            if (folder && "skipped" in folder)
+                console.log(`    ! SKILL.md only: ${folder.skipped}`);
+            for (const note of files?.notes ?? [])
+                console.log(`    · ${note}`);
+            for (const f of files?.files ?? [])
+                console.log(`    ${skill.pluginDir}/${f.path}`);
+        }
         for (const f of local?.files ?? [])
             console.log(`  ${f.path}`);
         return {};
@@ -792,23 +797,50 @@ async function runPublish(config, args) {
         console.log(`✓ Published ${out.slug} v${out.version} to ${channel}. Teams on ${channel} get it at their next sync.`);
     return out;
 }
-/** Push a local skill unless the library already has this exact text (so CI
- * doesn't add a version on every merge). Team-visible: packs ship to teams. */
+/** The library key a skill name is stored under (server preferredSkillKey). */
+function skillKeyFor(name) {
+    const slug = name.trim().toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 64).replace(/-+$/g, "");
+    return slug ? `${slug}.md` : name;
+}
+/** Push a local skill (and its folder's files) unless the library already
+ * has this exact text and files, so CI doesn't add a version on every merge.
+ * Team-visible: packs ship to teams. */
 async function pushLocalSkill(config, skill) {
     const local = (0, skillMarker_1.stripSkillMarker)(fs.readFileSync(skill.skillFile, "utf8"));
-    try {
-        const current = await (0, shared_1.apiRequest)("GET", "/api/cli/pull", { config, query: { key: skill.name } });
-        const remote = current.artifact?.markdown;
-        if (current.artifact?.kind === "skill" && typeof remote === "string" && (0, skillMarker_1.stripSkillMarker)(remote).trimEnd() === local.trimEnd()) {
-            return { key: skill.name, pushed: false };
+    const found = skill.dir ? (0, skillFiles_1.skillFolderFiles)(skill.skillFile) : null;
+    if (found && "skipped" in found)
+        console.log(`  ! ${skill.name}: pushing SKILL.md only, ${found.skipped}. The skill keeps the files it had.`);
+    const folder = found && "files" in found ? found : null;
+    for (const note of folder?.notes ?? [])
+        console.log(`  · ${skill.name}: ${note}`);
+    const localRefs = folder ? folder.files.map(skillFiles_1.toRef) : undefined;
+    for (const key of [skillKeyFor(skill.name), skill.name]) {
+        try {
+            const current = await (0, shared_1.apiRequest)("GET", "/api/cli/pull", { config, query: { key } });
+            const remote = current.artifact?.markdown;
+            if (current.artifact?.kind === "skill" &&
+                typeof remote === "string" &&
+                (0, skillMarker_1.stripSkillMarker)(remote).trimEnd() === local.trimEnd() &&
+                (!localRefs || (0, skillFiles_1.sameFileRefs)(current.artifact.files, localRefs))) {
+                return { key: current.artifact.key ?? key, pushed: false };
+            }
+            break;
+        }
+        catch (error) {
+            if (error.status !== 404)
+                throw new Error(`couldn't check skill ${skill.name} (${error.message})`);
         }
-    }
-    catch (error) {
-        if (error.status !== 404)
-            throw new Error(`couldn't check skill ${skill.name} (${error.message})`);
     }
     try {
-        const res = await (0, push_1.pushFile)(config, { absPath: skill.skillFile, key: path.basename(skill.skillFile), kind: "skill", visibility: "team" });
+        if (folder)
+            await (0, skillFiles_1.uploadBlobs)(config, folder.files, "/api/cli/skills/files");
+        const res = await (0, push_1.pushFile)(config, {
+            absPath: skill.skillFile,
+            key: path.basename(skill.skillFile),
+            kind: "skill",
+            visibility: "team",
+            ...(localRefs ? { files: localRefs } : {}),
+        });
         return { key: res.key ?? skill.name, pushed: true };
     }
     catch (error) {
@@ -818,12 +850,10 @@ async function pushLocalSkill(config, skill) {
 function formatBytes(n) {
     return n >= 1024 * 1024 ? `${(n / (1024 * 1024)).toFixed(1)}MB` : n >= 1024 ? `${Math.round(n / 1024)}KB` : `${n}B`;
 }
-/** Upload the blobs Codiedev doesn't have yet. Returns how many were sent. */
+/** Upload the pack's own blobs Codiedev doesn't have yet. Returns how many were sent. */
 async function uploadPackFiles(config, files) {
-    const unique = [...new Map(files.map((f) => [f.sha256, f])).values()];
-    let known;
     try {
-        known = (await (0, shared_1.apiRequest)("POST", "/api/cli/packs/files/known", { config, body: { sha256s: unique.map((f) => f.sha256) } })).known ?? [];
+        return await (0, skillFiles_1.uploadBlobs)(config, files, "/api/cli/packs/files");
     }
     catch (error) {
         const e = error;
@@ -831,20 +861,5 @@ async function uploadPackFiles(config, files) {
             throw new Error(`Only admins and team managers can add files to a pack (${e.message})`);
         throw error;
     }
-    const have = new Set(known);
-    let sent = 0;
-    for (const f of unique) {
-        if (have.has(f.sha256))
-            continue;
-        const body = fs.readFileSync(f.abs);
-        try {
-            await (0, shared_1.apiRequestBytes)("POST", "/api/cli/packs/files/upload", { config, body, query: { sha256: f.sha256 } });
-        }
-        catch (error) {
-            throw new Error(`couldn't upload ${f.path} (${error.message})`);
-        }
-        sent += 1;
-    }
-    return sent;
 }
 exports.PACK_HELP = USAGE;

package/dist/commands/ping.d.ts

@@ -1 +1,10 @@
-export declare function runPing(args: string[]): Promise<void>;
+import type { CodiedevConfig } from "../utils";
+export declare const PING_USAGE = "Usage: codiedev ping <user> [\"<message>\"] [--with <artifact-key>] [--edit] [--file <path>]";
+export declare function parsePingArgs(allArgs: string[]): {
+    to: string;
+    body: string;
+    subjectKey?: string;
+    edit: boolean;
+    files: string[];
+};
+export declare function runPing(args: string[], configOverride?: CodiedevConfig): Promise<void>;

package/dist/commands/ping.js

@@ -1,16 +1,30 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.PING_USAGE = void 0;
+exports.parsePingArgs = parsePingArgs;
 exports.runPing = runPing;
+// `codiedev ping <user> ["<message>"] [--with <artifact>] [--edit] [--file <path>]`
+// The one way to send a teammate something:
+//   message only            → inbox + email
+//   message + --with        → inbox + email, and they get access to the artifact
+//   --with, no message      → access only, no notification (what `share` did)
+// `send` and `share` are kept as aliases that route here.
 const shared_1 = require("./shared");
 const pingFiles_1 = require("./pingFiles");
-function parseArgs(allArgs) {
+const share_1 = require("./share");
+exports.PING_USAGE = 'Usage: codiedev ping <user> ["<message>"] [--with <artifact-key>] [--edit] [--file <path>]';
+function parsePingArgs(allArgs) {
     const { files, rest: args } = (0, pingFiles_1.takeFileArgs)(allArgs);
     let to;
     const positional = [];
     let subjectKey;
+    let edit = false;
     for (let i = 0; i < args.length; i++) {
         const a = args[i];
-        if ((a === "--with" || a === "-w") && i + 1 < args.length) {
+        if (a === "--edit") {
+            edit = true;
+        }
+        else if ((a === "--with" || a === "-w") && i + 1 < args.length) {
             subjectKey = args[++i];
         }
         else if (a.startsWith("--with=")) {
@@ -20,26 +34,41 @@ function parseArgs(allArgs) {
             positional.push(a);
         }
     }
-    // A file can stand in for the message.
-    if (positional.length < 2 && !(positional.length === 1 && files.length > 0)) {
-        console.error("Usage: codiedev ping <user> \"<message>\" [--with <artifact-key>] [--file <path>]");
+    // A file can stand in for the message; --with alone shares without one.
+    if (positional.length < 2 && !(positional.length === 1 && (files.length > 0 || subjectKey))) {
+        console.error(exports.PING_USAGE);
+        process.exit(1);
+    }
+    if (edit && !subjectKey) {
+        console.error("--edit needs an artifact: --with <artifact-key>");
         process.exit(1);
     }
     to = positional[0];
     // Join remaining positionals in case the shell split the message on spaces
     // despite quoting (happens with some escape sequences).
     const body = (0, shared_1.stripQuotes)(positional.slice(1).join(" "));
-    return { to, body: body || (files.length ? "Sent a file." : ""), subjectKey, files };
+    return { to, body: body || (files.length ? "Sent a file." : ""), subjectKey, edit, files };
 }
-async function runPing(args) {
-    const { to, body, subjectKey, files } = parseArgs(args);
-    const config = (0, shared_1.requireConfig)();
+async function runPing(args, configOverride) {
+    const { to, body, subjectKey, edit, files } = parsePingArgs(args);
+    // Nothing to say, just access: a silent share.
+    if (!body && subjectKey) {
+        await (0, share_1.runShare)([subjectKey, to, "--role", edit ? "edit" : "read"], configOverride);
+        return;
+    }
+    const config = configOverride ?? (0, shared_1.requireConfig)();
     const start = Date.now();
     try {
         const attachmentIds = await (0, pingFiles_1.uploadOrExit)(config, files);
         const res = await (0, shared_1.apiRequest)("POST", "/api/cli/ping", {
             config,
-            body: { to, body, subjectKey, ...(attachmentIds.length ? { attachmentIds } : {}) },
+            body: {
+                to,
+                body,
+                subjectKey,
+                ...(subjectKey ? { grant: edit ? "edit" : "read" } : {}),
+                ...(attachmentIds.length ? { attachmentIds } : {}),
+            },
         });
         (0, shared_1.recordAgentEvent)(config, {
             tool: "codiedev_ping",

package/dist/commands/push.d.ts

@@ -1,4 +1,5 @@
 import { requireConfig } from "./shared";
+import { FileRef } from "../packs/skillFiles";
 interface PushResponse {
     ok: boolean;
     artifactId: string;
@@ -17,6 +18,8 @@ export interface ParsedArgs {
     force: boolean;
     as?: string;
     private?: boolean;
+    /** --no-files: push SKILL.md only; the skill keeps its current files. */
+    noFiles?: boolean;
 }
 export declare function parseArgs(args: string[]): ParsedArgs;
 export declare function pushFile(config: ReturnType<typeof requireConfig>, opts: {
@@ -28,6 +31,17 @@ export declare function pushFile(config: ReturnType<typeof requireConfig>, opts:
     kind?: string;
     tags?: string[];
     force?: boolean;
+    /** A skill folder's other files, already uploaded (uploadBlobs). Omitted =
+     *  the new version keeps the previous version's files. */
+    files?: FileRef[];
 }): Promise<PushResponse>;
+/** For a SKILL.md in its own folder: upload the folder's other files and
+ * return their refs. null = send no list (not a skill folder, or one over the
+ * limits, which is warned about): the skill keeps its current files. */
+export declare function uploadSkillFolder(config: ReturnType<typeof requireConfig>, skillFile: string, log?: (line: string) => void): Promise<{
+    files: FileRef[];
+    bytes: number;
+} | null>;
+export declare function formatBytes(n: number): string;
 export declare function runPush(args: string[]): Promise<void>;
 export {};

package/dist/commands/push.js

@@ -35,6 +35,8 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.parseArgs = parseArgs;
 exports.pushFile = pushFile;
+exports.uploadSkillFolder = uploadSkillFolder;
+exports.formatBytes = formatBytes;
 exports.runPush = runPush;
 const fs = __importStar(require("fs"));
 const skillMarker_1 = require("../skillMarker");
@@ -42,6 +44,7 @@ const path = __importStar(require("path"));
 const shared = __importStar(require("./shared"));
 const shared_1 = require("./shared");
 const utils_1 = require("../utils");
+const skillFiles_1 = require("../packs/skillFiles");
 const VALID_TYPES = new Set([
     "spec",
     "bugfix",
@@ -58,6 +61,7 @@ function parseArgs(args) {
     let force = false;
     let as;
     let priv = false;
+    let noFiles = false;
     const tags = [];
     for (let i = 0; i < args.length; i++) {
         const a = args[i];
@@ -91,12 +95,15 @@ function parseArgs(args) {
         else if (a === "--private") {
             priv = true;
         }
+        else if (a === "--no-files") {
+            noFiles = true;
+        }
         else if (!a.startsWith("--") && !file) {
             file = a;
         }
     }
     if (!file) {
-        console.error("Usage: codiedev push <file.md> [--as <key>] [--kind doc|skill] [--tag <name>] [--private] [--force]");
+        console.error("Usage: codiedev push <file.md> [--as <key>] [--kind doc|skill] [--tag <name>] [--private] [--force] [--no-files]");
         process.exit(1);
     }
     if (type && !VALID_TYPES.has(type)) {
@@ -118,7 +125,7 @@ function parseArgs(args) {
             process.exit(1);
         }
     }
-    return { file, type, kind, tags, force, as, private: priv };
+    return { file, type, kind, tags, force, as, private: priv, noFiles };
 }
 async function pushFile(config, opts) {
     // Never upload another artifact's identity marker (skillMarker.ts).
@@ -136,11 +143,31 @@ async function pushFile(config, opts) {
             gitRemoteUrl,
             visibility: opts.visibility,
             contentHash: opts.contentHash,
+            ...(opts.files ? { files: opts.files } : {}),
         },
     });
 }
+/** For a SKILL.md in its own folder: upload the folder's other files and
+ * return their refs. null = send no list (not a skill folder, or one over the
+ * limits, which is warned about): the skill keeps its current files. */
+async function uploadSkillFolder(config, skillFile, log = () => { }) {
+    const folder = (0, skillFiles_1.skillFolderFiles)(skillFile);
+    if (!folder)
+        return null;
+    if ("skipped" in folder) {
+        log(`  ! Pushing SKILL.md only: ${folder.skipped}. The skill keeps the files it had.`);
+        return null;
+    }
+    for (const note of folder.notes)
+        log(`  · ${note}`);
+    await (0, skillFiles_1.uploadBlobs)(config, folder.files, "/api/cli/skills/files");
+    return { files: folder.files.map(skillFiles_1.toRef), bytes: folder.bytes };
+}
+function formatBytes(n) {
+    return n >= 1024 * 1024 ? `${(n / (1024 * 1024)).toFixed(1)}MB` : n >= 1024 ? `${Math.round(n / 1024)}KB` : `${n}B`;
+}
 async function runPush(args) {
-    const { file, type, kind, tags, force, as, private: priv } = parseArgs(args);
+    const { file, type, kind, tags, force, as, private: priv, noFiles } = parseArgs(args);
     const config = (0, shared_1.requireConfig)();
     let absolute = file;
     if (!path.isAbsolute(absolute)) {
@@ -162,6 +189,8 @@ async function runPush(args) {
     const filename = as ?? path.basename(absolute);
     const start = Date.now();
     try {
+        // A skill's folder (scripts/, docs/, PDFs) travels with it.
+        const folder = !noFiles && kind !== "doc" ? await uploadSkillFolder(config, absolute, (l) => console.log(l)) : null;
         const res = await pushFile(config, {
             absPath: absolute,
             key: filename,
@@ -170,6 +199,7 @@ async function runPush(args) {
             tags,
             force,
             visibility: priv ? "private" : undefined,
+            ...(folder ? { files: folder.files } : {}),
         });
         (0, shared_1.recordAgentEvent)(config, {
             tool: "codiedev_push",
@@ -177,7 +207,10 @@ async function runPush(args) {
             latencyMs: Date.now() - start,
         });
         const tagSummary = res.tags && res.tags.length > 0 ? ` tags=[${res.tags.join(", ")}]` : "";
-        console.log(`✓ Pushed ${filename} (kind=${res.kind}${tagSummary}).`);
+        const fileSummary = folder?.files.length
+            ? `, with ${folder.files.length} file${folder.files.length === 1 ? "" : "s"} from its folder, ${formatBytes(folder.bytes)}`
+            : "";
+        console.log(`✓ Pushed ${filename} (kind=${res.kind}${tagSummary}${fileSummary}).`);
         console.log(`  Visible under: ${res.destination}`);
         // Echo the *resolved* key the server stored, not the local filename —
         // skills are keyed by their frontmatter name (so two `SKILL.md` files

package/dist/commands/send.d.ts

@@ -1,2 +1,3 @@
 import type { CodiedevConfig } from "../utils";
+export declare function sendToPingArgs(args: string[]): string[] | null;
 export declare function runSend(args: string[], configOverride?: CodiedevConfig): Promise<void>;

package/dist/commands/send.js

@@ -1,67 +1,27 @@
 "use strict";
-// `codiedev send <filename> <recipient> [message]` — share an artifact AND
-// send a short message that lands in the teammate's inbox. The active-
-// handoff version of `codiedev share`. Use this when the user is actively
-// looping someone in.
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.sendToPingArgs = sendToPingArgs;
 exports.runSend = runSend;
+// `codiedev send <artifact> <recipient> ["<message>"]` — kept as an alias for
+// `codiedev ping <recipient> ["<message>"] --with <artifact>`. With a message
+// the teammate gets it in their inbox and by email plus read access; without
+// one it's a silent share.
+const ping_1 = require("./ping");
 const shared_1 = require("./shared");
-function parseArgs(args) {
+function sendToPingArgs(args) {
     const positionals = args.filter((a) => !a.startsWith("--"));
     const [filename, to, ...rest] = positionals;
-    if (!filename || !to) {
-        console.error('Usage: codiedev send <filename> <recipient> ["<message>"]');
-        process.exit(1);
-    }
+    if (!filename || !to)
+        return null;
     // Recombine remaining tokens — supports both quoted and unquoted messages.
-    const message = rest.length > 0 ? (0, shared_1.stripQuotes)(rest.join(" ")) : undefined;
-    return { filename, to, message };
+    const message = rest.length > 0 ? (0, shared_1.stripQuotes)(rest.join(" ")) : "";
+    return [to, ...(message ? [message] : []), "--with", filename];
 }
 async function runSend(args, configOverride) {
-    const parsed = parseArgs(args);
-    const config = configOverride ?? (0, shared_1.requireConfig)();
-    const start = Date.now();
-    try {
-        const body = {
-            filename: parsed.filename,
-            to: parsed.to,
-        };
-        if (parsed.message)
-            body.message = parsed.message;
-        const res = await (0, shared_1.apiRequest)("POST", "/api/cli/send-to", {
-            config,
-            body,
-        });
-        (0, shared_1.recordAgentEvent)(config, {
-            tool: "codiedev_send_to",
-            ok: true,
-            latencyMs: Date.now() - start,
-        });
-        const who = res.recipient ? `${res.recipient.name} (${res.recipient.email})` : parsed.to;
-        if (parsed.message) {
-            console.log(`Sent ${parsed.filename} to ${who}.`);
-        }
-        else {
-            console.log(`Shared ${parsed.filename} with ${who} (no message).`);
-        }
-    }
-    catch (err) {
-        (0, shared_1.recordAgentEvent)(config, {
-            tool: "codiedev_send_to",
-            ok: false,
-            latencyMs: Date.now() - start,
-            error: err.message,
-        });
-        const body = err.body;
-        if (body && Array.isArray(body.candidates) && body.candidates.length > 0) {
-            console.error(`Recipient "${parsed.to}" is ambiguous. Candidates:`);
-            for (const c of body.candidates) {
-                console.error(`  - ${c.name} (${c.email})`);
-            }
-        }
-        else {
-            console.error(`Send failed: ${err.message}`);
-        }
+    const pingArgs = sendToPingArgs(args);
+    if (!pingArgs) {
+        console.error('Usage: codiedev send <artifact> <recipient> ["<message>"]  (same as: codiedev ping <recipient> ["<message>"] --with <artifact>)');
         process.exit(1);
     }
+    await (0, ping_1.runPing)(pingArgs, configOverride);
 }

package/dist/commands/share.js

@@ -1,7 +1,7 @@
 "use strict";
 // `codiedev share <filename> <recipient> [--role read|edit]` — silently
-// grant a teammate access to an artifact (no notification). Use
-// `codiedev send` instead when the user wants to actively loop someone in.
+// grant a teammate access to an artifact (no notification). Kept as an alias:
+// `codiedev ping <recipient> --with <filename> [--edit]` lands here too.
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.runShare = runShare;
 const shared_1 = require("./shared");

package/dist/mcp.js

@@ -174,10 +174,10 @@ const TOOLS = [
     },
     {
         name: "codiedev_ping",
-        description: "Send a message to a teammate on Codiedev, optionally attached to a " +
-            "specific artifact. Use when the user asks to ping, ask, share with, " +
-            "or get feedback from a teammate by name (e.g. 'ping a teammate about " +
-            "this spec'). Recipients are resolved by first name, full name, or email " +
+        description: "Send a message to a teammate on Codiedev, optionally with an " +
+            "artifact (they also get read access to it). Use when the user asks to " +
+            "ping, ask, send something to, or get feedback from a teammate by name " +
+            "(e.g. 'send this spec to a teammate'). Recipients are resolved by first name, full name, or email " +
             "within the current org. They're notified by email and can reply " +
             "from their own agent.",
         inputSchema: {
@@ -194,8 +194,13 @@ const TOOLS = [
                 },
                 subjectKey: {
                     type: "string",
-                    description: "Optional filename key of an artifact the message is about " +
-                        "(e.g. 'spec-214.md'). Leaving blank sends a standalone ping.",
+                    description: "Optional filename key of an artifact to send (e.g. " +
+                        "'spec-214.md'). The teammate also gets read access to it. " +
+                        "Leaving blank sends a standalone ping.",
+                },
+                edit: {
+                    type: "boolean",
+                    description: "With subjectKey: give edit access instead of read (owner only).",
                 },
             },
             required: ["to", "body"],
@@ -245,7 +250,7 @@ const TOOLS = [
             "without sending a notification. Use when the user says 'share this " +
             "with a teammate' or 'give someone access', and doesn't want to surface " +
             "it as a message. If they want the teammate actively notified, use " +
-            "codiedev_send_to instead.",
+            "codiedev_ping with subjectKey instead.",
         inputSchema: {
             type: "object",
             properties: {
@@ -264,27 +269,6 @@ const TOOLS = [
             required: ["filename", "to"],
         },
     },
-    {
-        name: "codiedev_send_to",
-        description: "Grant access to an artifact AND send a short message to a " +
-            "teammate. Use when the user asks to 'send this to a teammate', 'ask " +
-            "someone to look at this', or 'share this with a teammate and tell them X'. " +
-            "This is the active handoff version of codiedev_share_with — the " +
-            "recipient gets a ping in their inbox.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                filename: { type: "string", description: "Artifact filename." },
-                to: { type: "string", description: "Teammate first name, full name, or email." },
-                message: {
-                    type: "string",
-                    description: "Optional short note to send with the share. If omitted, only " +
-                        "the grant is created (no ping).",
-                },
-            },
-            required: ["filename", "to"],
-        },
-    },
     {
         name: "codiedev_search",
         description: "Search the team's artifact library by natural-language query. Use " +
@@ -534,12 +518,13 @@ async function handlePing(args, config) {
     const to = asString(args.to);
     const body = asString(args.body);
     const subjectKey = asStringOrUndefined(args.subjectKey);
+    const grant = subjectKey ? (args.edit === true ? "edit" : "read") : undefined;
     if (!to)
         throw new Error("to required");
     if (!body)
         throw new Error("body required");
     try {
-        const res = await (0, shared_1.apiRequest)("POST", "/api/cli/ping", { config, body: { to, body, subjectKey } });
+        const res = await (0, shared_1.apiRequest)("POST", "/api/cli/ping", { config, body: { to, body, subjectKey, ...(grant ? { grant } : {}) } });
         return {
             content: [
                 {

package/dist/packs/files.d.ts

@@ -36,9 +36,13 @@ export declare function expandHome(p: string, home?: string): string;
 /** Walk each `## Files` entry. Junk (caches, VCS, editor files) is skipped
  * quietly; symlinks, hidden files and a skill folder's own SKILL.md are
  * skipped with a note. Throws on a missing source or a bad destination. */
-export declare function collectLocalFiles(entries: FilesEntry[], baseDir: string, home?: string): {
+export declare function collectLocalFiles(entries: FilesEntry[], baseDir: string, home?: string, opts?: {
+    lenient?: boolean;
+    checkAs?: (dest: string) => string;
+}): {
     files: LocalFile[];
     notes: string[];
+    total: number;
 };
 /** Only Claude Code sets ${CLAUDE_PLUGIN_ROOT}. In the copy other tools read,
  * replace it with the plugin dir's real path (forward slashes, which every

package/dist/packs/files.js

@@ -218,12 +218,15 @@ function expandHome(p, home = os.homedir()) {
 /** Walk each `## Files` entry. Junk (caches, VCS, editor files) is skipped
  * quietly; symlinks, hidden files and a skill folder's own SKILL.md are
  * skipped with a note. Throws on a missing source or a bad destination. */
-function collectLocalFiles(entries, baseDir, home = os.homedir()) {
+function collectLocalFiles(entries, baseDir, home = os.homedir(), opts = {}) {
     const files = new Map();
     const notes = [];
     let total = 0;
     const add = (dest, abs) => {
-        const problem = packFilePathProblem(dest);
+        // A skill folder's own SKILL.md is the skill itself (pushed separately).
+        if (opts.lenient && dest.toLowerCase() === "skill.md")
+            return;
+        const problem = packFilePathProblem(opts.checkAs ? opts.checkAs(dest) : dest);
         if (problem) {
             const parts = dest.split("/");
             if (parts.length === 3 && parts[0] === "skills" && parts[2].toLowerCase() === "skill.md") {
@@ -234,9 +237,18 @@ function collectLocalFiles(entries, baseDir, home = os.homedir()) {
                 notes.push(`skipped hidden file ${dest}`);
                 return;
             }
+            if (opts.lenient) {
+                // A skill folder: skip what can't ship, never fail the push.
+                notes.push(`skipped ${dest} (${problem})`);
+                return;
+            }
             throw new Error(`can't ship ${dest}: ${problem}`);
         }
         const stat = fs.statSync(abs);
+        if (stat.size > exports.PACK_FILE_MAX_BYTES && opts.lenient) {
+            notes.push(`skipped ${dest} (over ${exports.PACK_FILE_MAX_BYTES / (1024 * 1024)}MB)`);
+            return;
+        }
         if (stat.size > exports.PACK_FILE_MAX_BYTES)
             throw new Error(`${abs} is over ${exports.PACK_FILE_MAX_BYTES / (1024 * 1024)}MB`);
         const key = dest.toLowerCase();
@@ -291,11 +303,13 @@ function collectLocalFiles(entries, baseDir, home = os.homedir()) {
             throw new Error(`pack.md line ${entry.line}: ${entry.source} is not a file or folder`);
     }
     const list = [...files.values()].sort((a, b) => (a.path < b.path ? -1 : a.path > b.path ? 1 : 0));
+    if (opts.lenient)
+        return { files: list, notes, total };
     if (list.length > exports.PACK_MAX_FILES)
         throw new Error(`a pack holds at most ${exports.PACK_MAX_FILES} files (found ${list.length})`);
     if (total > exports.PACK_FILES_MAX_TOTAL_BYTES)
         throw new Error(`pack files total over ${exports.PACK_FILES_MAX_TOTAL_BYTES / (1024 * 1024)}MB`);
-    return { files: list, notes };
+    return { files: list, notes, total };
 }
 // ─── Portable copies ────────────────────────────────────────────────────────
 /** Only Claude Code sets ${CLAUDE_PLUGIN_ROOT}. In the copy other tools read,

package/dist/packs/skillFiles.d.ts

@@ -0,0 +1,37 @@
+import { CodiedevConfig } from "../utils";
+import { LocalFile } from "./files";
+export type FileRef = {
+    path: string;
+    sha256: string;
+    executable?: boolean;
+};
+export declare const toRef: (f: {
+    path: string;
+    sha256: string;
+    executable?: boolean;
+}) => FileRef;
+export type SkillFolder = {
+    files: LocalFile[];
+    notes: string[];
+    bytes: number;
+}
+/** A skill folder that can't ship (over the limits): send no list, so the
+ *  skill keeps its current files, and warn. */
+ | {
+    skipped: string;
+};
+/** The other files in a SKILL.md's folder, paths relative to that folder.
+ * null when the file isn't a skill in its own folder (a repo root or the home
+ * folder is never walked). Files that can't ship are skipped with a note, so
+ * the folder never fails a push. */
+export declare function skillFolderFiles(skillFile: string, home?: string): SkillFolder | null;
+/** Same files (path, content, executable bit), order-insensitive? */
+export declare function sameFileRefs(a: FileRef[] | undefined, b: FileRef[] | undefined): boolean;
+/** Upload the blobs Codiedev doesn't have yet. `base` is
+ * /api/cli/packs/files (admins and managers) or /api/cli/skills/files (anyone).
+ * Returns how many were sent. */
+export declare function uploadBlobs(config: CodiedevConfig, files: Array<{
+    path: string;
+    sha256: string;
+    abs: string;
+}>, base: "/api/cli/packs/files" | "/api/cli/skills/files"): Promise<number>;

package/dist/packs/skillFiles.js

@@ -0,0 +1,120 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toRef = void 0;
+exports.skillFolderFiles = skillFolderFiles;
+exports.sameFileRefs = sameFileRefs;
+exports.uploadBlobs = uploadBlobs;
+// A skill's folder files: everything beside SKILL.md (scripts/, docs/, PDFs)
+// travels with the skill. `codiedev push` of a SKILL.md uploads them as blobs
+// and sends the list with the push; packs then ship them under
+// skills/<name>/ automatically. Blobs share the pack-file store (files.ts).
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const shared_1 = require("../commands/shared");
+const files_1 = require("./files");
+const manifest_1 = require("./manifest");
+const toRef = (f) => ({
+    path: f.path,
+    sha256: f.sha256,
+    ...(f.executable ? { executable: true } : {}),
+});
+exports.toRef = toRef;
+/** The other files in a SKILL.md's folder, paths relative to that folder.
+ * null when the file isn't a skill in its own folder (a repo root or the home
+ * folder is never walked). Files that can't ship are skipped with a note, so
+ * the folder never fails a push. */
+function skillFolderFiles(skillFile, home = os.homedir()) {
+    const abs = path.resolve(skillFile);
+    if (path.basename(abs).toLowerCase() !== "skill.md")
+        return null;
+    // Only a real skill (name: + description:) carries files.
+    let data;
+    try {
+        data = (0, manifest_1.parseFrontmatter)(fs.readFileSync(abs, "utf8")).data;
+    }
+    catch {
+        return null;
+    }
+    if (!(data.name ?? "").trim() || !(data.description ?? "").trim())
+        return null;
+    const dir = path.dirname(abs);
+    if (dir === path.resolve(home) || dir === path.parse(dir).root || fs.existsSync(path.join(dir, ".git")))
+        return null;
+    let walked;
+    try {
+        // Checked as the server does: as if under skills/<name>/ in a pack.
+        walked = (0, files_1.collectLocalFiles)([{ dest: ".", source: dir, line: 0 }], dir, home, { lenient: true, checkAs: (p) => `skills/s/${p}` });
+    }
+    catch (error) {
+        return { skipped: `couldn't read its folder (${error.message})` };
+    }
+    const files = walked.files.filter((f) => f.path.toLowerCase() !== "skill.md");
+    const bytes = files.reduce((n, f) => n + f.size, 0);
+    if (files.length > files_1.PACK_MAX_FILES || bytes > files_1.PACK_FILES_MAX_TOTAL_BYTES) {
+        return {
+            skipped: `its folder is over the limit (${files.length} files, ${(bytes / (1024 * 1024)).toFixed(1)}MB; at most ${files_1.PACK_MAX_FILES} files and ${files_1.PACK_FILES_MAX_TOTAL_BYTES / (1024 * 1024)}MB)`,
+        };
+    }
+    return { files, notes: walked.notes, bytes };
+}
+/** Same files (path, content, executable bit), order-insensitive? */
+function sameFileRefs(a, b) {
+    const key = (l) => JSON.stringify((l ?? []).map((f) => [f.path, f.sha256, !!f.executable]).sort());
+    return key(a) === key(b);
+}
+/** Upload the blobs Codiedev doesn't have yet. `base` is
+ * /api/cli/packs/files (admins and managers) or /api/cli/skills/files (anyone).
+ * Returns how many were sent. */
+async function uploadBlobs(config, files, base) {
+    const unique = [...new Map(files.map((f) => [f.sha256, f])).values()];
+    if (!unique.length)
+        return 0;
+    const have = new Set((await (0, shared_1.apiRequest)("POST", `${base}/known`, { config, body: { sha256s: unique.map((f) => f.sha256) } })).known ?? []);
+    let sent = 0;
+    for (const f of unique) {
+        if (have.has(f.sha256))
+            continue;
+        try {
+            await (0, shared_1.apiRequestBytes)("POST", `${base}/upload`, { config, body: fs.readFileSync(f.abs), query: { sha256: f.sha256 } });
+        }
+        catch (error) {
+            throw new Error(`couldn't upload ${f.path} (${error.message})`);
+        }
+        sent += 1;
+    }
+    return sent;
+}

package/dist/utils.d.ts

@@ -143,7 +143,7 @@ export declare function ensureAllCodiedevHooksInstalled(): void;
 export declare function hasDirectHookPath(configText: string): boolean;
 export declare function migrateHooksToLauncher(): string[];
 export declare function ensureSessionStartHookInstalled(): void;
-export declare const CODIEDEV_INSTRUCTIONS_BODY = "## Codiedev \u2014 team artifact layer\n\nThis machine is connected to Codiedev. Teammates share specs, reviews,\ndecisions, and messages via a CLI on every dev's machine.\n\n**When the user asks to share, push, ping, check messages, or capture a\nthought, use the `codiedev` CLI via Bash:**\n\n| Intent | Command |\n|---|---|\n| \"push this spec\" / \"save this as a skill\" | `codiedev push <file.md>` |\n| \"pull X\" / \"grab the latest spec-X\" / \"what did a teammate push?\" | `codiedev pull <key>` |\n| \"delete X\" / \"remove that test push\" / \"rm spec-old\" | `codiedev delete <key>` (always confirm with the user first) |\n| \"ping a teammate about this\" / \"ask someone for their take\" / \"send them this file\" | `codiedev ping <name> \"<msg>\" [--with <key>] [--file <path>]` |\n| \"any messages?\" / \"check my inbox\" / \"what did a teammate say?\" | `codiedev inbox` |\n| \"read that reply\" / \"mark that ping read\" | `codiedev read <ping-id>` |\n| \"reply to that\" / \"tell them X\" (answering a message from `codiedev inbox`) | `codiedev reply <ping-id> \"<msg>\" [--file <path>]` (not a new ping: this threads it and marks theirs answered) |\n| \"note that X is a follow-up\" / \"remember X\" | `codiedev note \"<text>\"` |\n| \"share with a teammate\" / \"give someone access\" (no notification) | `codiedev share <key> <name> [--role read\\|edit]` |\n| \"send this to a teammate\" / \"ask someone to look at this\" | `codiedev send <key> <name> [\"<msg>\"]` |\n| \"find something about X\" / \"has anyone solved Y?\" | `codiedev search \"<query>\" [--limit N]` |\n| \"show my library\" / \"what artifacts exist?\" | `codiedev library [--scope mine\\|shared\\|all] [--kind doc\\|skill]` |\n| \"run my agent's test cases\" / \"check the dataset on model Y\" / \"run v2 of the dataset\" | `codiedev traces cases <agent> [--dataset <name> [--version <n>]] [--model <id>]` (writes cases + RUN_CASES.md + results.json; follow it, then `codiedev traces report <results.json>`) |\n| \"how are my agents doing?\" / \"what's failing this week?\" / \"show the booking agent's failed runs\" / \"why did run X fail?\" | `codiedev traces overview`; `codiedev traces runs <agent> [--failed] [--flag <issue>] [--days n]`; `codiedev traces run <run> --agent <name>` (add `--json` to read the data yourself) |\n| \"add a helpfulness 1\u20135 score\" / \"make a review queue for tone\" | `codiedev traces score-kinds add <name> --type number --min 1 --max 5`; `codiedev traces queue create <name> --scores <a,b>` |\n| \"score that run 4 for helpfulness\" / \"how is my agent scoring?\" | `codiedev traces score <run> <score> <value> [--agent <name>] [--comment <why>]`; `codiedev traces scores <agent>` |\n| \"put this week's failed runs in the review queue\" | `codiedev traces queue list`; `codiedev traces queue add <queue> --agent <name> [--failed] [--days n]` |\n| \"have a judge score 10% of my agent's runs\" / \"turn off automatic scoring\" | `codiedev traces judge <agent> --on --scores <a,b> --sample 10 [--budget 25]`; `--off`; no flags shows it |\n| \"import these test cases from a CSV\" / \"add an example to the dataset\" / \"save the dataset as a version\" | `codiedev traces import <agent> <file> --dataset <name>`; `codiedev traces add-example <agent> --dataset <name> --input \"\u2026\" [--expected \"\u2026\"]`; `codiedev traces save-version <dataset>`; `codiedev traces versions <dataset>` |\n| \"make a starter pack\" / \"add this to our pack\" / \"package these skills for my team\" | write a `<slug>.pack.md` (start from `codiedev pack export <slug> --manifest --out .` for an existing pack), then `codiedev pack apply <file> [--publish]` \u2014 see **Starter packs** below |\n| \"publish the pack\" / \"ship the pack to my team\" | `codiedev pack publish <slug> [--channel stable\\|beta\\|alpha]` |\n| \"what was the last eval on X?\" / \"file these eval results\" | `codiedev evals last <subject>` before starting a related eval; `codiedev evals report <run.json>` after each variant runs (scores only \u2014 `codiedev evals help` for the shape) |\n\n**Starter packs** (team managers and admins): a pack.md is frontmatter\n(`name:`, `slug:`, optional `description:`) then sections. Ask the user\nwhat to include, write the file, run `codiedev pack apply <file> --dry-run`\nto show them, then apply for real:\n\n```\n---\nname: \"Healthcare scan\"\nslug: \"healthcare-scan\"\n---\n\n# Healthcare scan\n\n## Skills\n\n- ./skills/healthcare-scan\n- lint.md @teammate@example.com\n\n## Files\n\n- runner <- ~/.claude/runner\n```\n\nUnder **Skills**, a local path (`./\u2026`, `~/\u2026` or `/\u2026`) to a skill folder\nor SKILL.md is pushed to the library and added, with the rest of its folder\nshipped as the skill's files; `<key> @<author email>` adds a teammate's\nlibrary skill. **Files** maps local folders to paths in the pack\n(`.` is the pack root). In skills, point at shipped files relative to the\nskill's folder or with `${CLAUDE_PLUGIN_ROOT}/\u2026`. Applying changes the\ndraft; `--publish` (or `codiedev pack publish`) sends it to the team.\n\n**Just push the file \u2014 we'll figure out where it goes.** Every artifact\nis classified into one of two kinds at upload time:\n\n- **skill** \u2014 the file has SKILL.md frontmatter (`name:` + `description:`\n  inside a `---` block). Shows on the Skills page in the portal and is\n  invokable as a slash command (`/<name>`).\n- **doc** \u2014 everything else. Lives in the library: list it with\n  `codiedev library`, fetch it with `codiedev pull <key>`.\n\nDetection is content-based, not filename-based. The filename prefix\n(`spec-` / `decision-` / `proposal-` / `bugfix-` / `review-` /\n`note-`) is preserved as a *tag* you can filter by, but it never gates\nvisibility. A SKILL-frontmatter file named `note-foo.md` still becomes\na skill.\n\nThe `codiedev push` response always says where the artifact landed \u2014\nread it back to the user so they can confirm.\n\n**Resolving \"the spec we just worked on\":**\n- If a file was recently edited in this session matching the conventions\n  above, push that file.\n- If content was drafted inline in the conversation, write it to a file\n  first (e.g., `/tmp/spec-xxx.md`) then push.\n\n**Teammate names:** first name usually works (`codiedev ping <name> ...`).\nIf ambiguous, the CLI returns candidates \u2014 retry with the full email.\n\n**Search before pushing.** For any \"save this as \u2026\" request, run\n`codiedev search \"<query>\"` first. If prior art exists, pull it and\niterate rather than duplicating.\n\n**Sharing vs sending:** `codiedev share` is silent (access only, no\nnotification). `codiedev send` both grants access AND pings the\nrecipient. Use send when the user is actively looping someone in.\n\n**Errors:**\n- \"not connected\" \u2192 user needs to run `npx codiedev connect` with their\n  API token from https://codiedev.com/portal/integrations/claude-code\n- \"ambiguous recipient\" \u2192 surface candidates to the user\n";
+export declare const CODIEDEV_INSTRUCTIONS_BODY = "## Codiedev \u2014 team artifact layer\n\nThis machine is connected to Codiedev. Teammates share specs, reviews,\ndecisions, and messages via a CLI on every dev's machine.\n\n**When the user asks to share, push, ping, check messages, or capture a\nthought, use the `codiedev` CLI via Bash:**\n\n| Intent | Command |\n|---|---|\n| \"push this spec\" / \"save this as a skill\" | `codiedev push <file.md>` |\n| \"pull X\" / \"grab the latest spec-X\" / \"what did a teammate push?\" | `codiedev pull <key>` |\n| \"delete X\" / \"remove that test push\" / \"rm spec-old\" | `codiedev delete <key>` (always confirm with the user first) |\n| \"ping a teammate about this\" / \"send them this spec\" / \"send them this file\" | `codiedev ping <name> \"<msg>\" [--with <key>] [--file <path>]` (`--with` also gives them access) |\n| \"any messages?\" / \"check my inbox\" / \"what did a teammate say?\" | `codiedev inbox` |\n| \"read that reply\" / \"mark that ping read\" | `codiedev read <ping-id>` |\n| \"reply to that\" / \"tell them X\" (answering a message from `codiedev inbox`) | `codiedev reply <ping-id> \"<msg>\" [--file <path>]` (not a new ping: this threads it and marks theirs answered) |\n| \"note that X is a follow-up\" / \"remember X\" | `codiedev note \"<text>\"` |\n| \"share with a teammate\" / \"give someone access\" (no notification) | `codiedev ping <name> --with <key> [--edit]` (no message = silent share) |\n| \"find something about X\" / \"has anyone solved Y?\" | `codiedev search \"<query>\" [--limit N]` |\n| \"show my library\" / \"what artifacts exist?\" | `codiedev library [--scope mine\\|shared\\|all] [--kind doc\\|skill]` |\n| \"run my agent's test cases\" / \"check the dataset on model Y\" / \"run v2 of the dataset\" | `codiedev traces cases <agent> [--dataset <name> [--version <n>]] [--model <id>]` (writes cases + RUN_CASES.md + results.json; follow it, then `codiedev traces report <results.json>`) |\n| \"how are my agents doing?\" / \"what's failing this week?\" / \"show the booking agent's failed runs\" / \"why did run X fail?\" | `codiedev traces overview`; `codiedev traces runs <agent> [--failed] [--flag <issue>] [--days n]`; `codiedev traces run <run> --agent <name>` (add `--json` to read the data yourself) |\n| \"add a helpfulness 1\u20135 score\" / \"make a review queue for tone\" | `codiedev traces score-kinds add <name> --type number --min 1 --max 5`; `codiedev traces queue create <name> --scores <a,b>` |\n| \"score that run 4 for helpfulness\" / \"how is my agent scoring?\" | `codiedev traces score <run> <score> <value> [--agent <name>] [--comment <why>]`; `codiedev traces scores <agent>` |\n| \"put this week's failed runs in the review queue\" | `codiedev traces queue list`; `codiedev traces queue add <queue> --agent <name> [--failed] [--days n]` |\n| \"have a judge score 10% of my agent's runs\" / \"turn off automatic scoring\" | `codiedev traces judge <agent> --on --scores <a,b> --sample 10 [--budget 25]`; `--off`; no flags shows it |\n| \"import these test cases from a CSV\" / \"add an example to the dataset\" / \"save the dataset as a version\" | `codiedev traces import <agent> <file> --dataset <name>`; `codiedev traces add-example <agent> --dataset <name> --input \"\u2026\" [--expected \"\u2026\"]`; `codiedev traces save-version <dataset>`; `codiedev traces versions <dataset>` |\n| \"make a starter pack\" / \"add this to our pack\" / \"package these skills for my team\" | write a `<slug>.pack.md` (start from `codiedev pack export <slug> --manifest --out .` for an existing pack), then `codiedev pack apply <file> [--publish]` \u2014 see **Starter packs** below |\n| \"publish the pack\" / \"ship the pack to my team\" | `codiedev pack publish <slug> [--channel stable\\|beta\\|alpha]` |\n| \"what was the last eval on X?\" / \"file these eval results\" | `codiedev evals last <subject>` before starting a related eval; `codiedev evals report <run.json>` after each variant runs (scores only \u2014 `codiedev evals help` for the shape) |\n\n**Starter packs** (team managers and admins): a pack.md is frontmatter\n(`name:`, `slug:`, optional `description:`) then sections. Ask the user\nwhat to include, write the file, run `codiedev pack apply <file> --dry-run`\nto show them, then apply for real:\n\n```\n---\nname: \"Healthcare scan\"\nslug: \"healthcare-scan\"\n---\n\n# Healthcare scan\n\n## Skills\n\n- ./skills/healthcare-scan\n- lint.md @teammate@example.com\n\n## Files\n\n- runner <- ~/.claude/runner\n```\n\nUnder **Skills**, a local path (`./\u2026`, `~/\u2026` or `/\u2026`) to a skill folder\nor SKILL.md is pushed to the library and added, with the rest of its folder\nshipped as the skill's files; `<key> @<author email>` adds a teammate's\nlibrary skill. **Files** maps local folders to paths in the pack\n(`.` is the pack root). In skills, point at shipped files relative to the\nskill's folder or with `${CLAUDE_PLUGIN_ROOT}/\u2026`. Applying changes the\ndraft; `--publish` (or `codiedev pack publish`) sends it to the team.\n\n**Just push the file \u2014 we'll figure out where it goes.** Every artifact\nis classified into one of two kinds at upload time:\n\n- **skill** \u2014 the file has SKILL.md frontmatter (`name:` + `description:`\n  inside a `---` block). Shows on the Skills page in the portal and is\n  invokable as a slash command (`/<name>`).\n- **doc** \u2014 everything else. Lives in the library: list it with\n  `codiedev library`, fetch it with `codiedev pull <key>`.\n\nDetection is content-based, not filename-based. The filename prefix\n(`spec-` / `decision-` / `proposal-` / `bugfix-` / `review-` /\n`note-`) is preserved as a *tag* you can filter by, but it never gates\nvisibility. A SKILL-frontmatter file named `note-foo.md` still becomes\na skill.\n\nThe `codiedev push` response always says where the artifact landed \u2014\nread it back to the user so they can confirm.\n\n**Resolving \"the spec we just worked on\":**\n- If a file was recently edited in this session matching the conventions\n  above, push that file.\n- If content was drafted inline in the conversation, write it to a file\n  first (e.g., `/tmp/spec-xxx.md`) then push.\n\n**Teammate names:** first name usually works (`codiedev ping <name> ...`).\nIf ambiguous, the CLI returns candidates \u2014 retry with the full email.\n\n**Search before pushing.** For any \"save this as \u2026\" request, run\n`codiedev search \"<query>\"` first. If prior art exists, pull it and\niterate rather than duplicating.\n\n**One command for messaging and sharing:** `codiedev ping`. A message\nlands in their inbox and emails them; `--with <key>` also gives them read\naccess (`--edit` for edit). With `--with` and no message it's a silent\nshare. (`codiedev send` / `share` still work as aliases.)\n\n**Errors:**\n- \"not connected\" \u2192 user needs to run `npx codiedev connect` with their\n  API token from https://codiedev.com/portal/integrations/claude-code\n- \"ambiguous recipient\" \u2192 surface candidates to the user\n";
 /** The full Codiedev instructions (team-skill context + command table), for
  * harnesses Codiedev launches itself (Codie, Codie's pi) rather than a
  * user-owned instructions file. */

package/dist/utils.js

@@ -1674,13 +1674,12 @@ thought, use the \`codiedev\` CLI via Bash:**
 | "push this spec" / "save this as a skill" | \`codiedev push <file.md>\` |
 | "pull X" / "grab the latest spec-X" / "what did a teammate push?" | \`codiedev pull <key>\` |
 | "delete X" / "remove that test push" / "rm spec-old" | \`codiedev delete <key>\` (always confirm with the user first) |
-| "ping a teammate about this" / "ask someone for their take" / "send them this file" | \`codiedev ping <name> "<msg>" [--with <key>] [--file <path>]\` |
+| "ping a teammate about this" / "send them this spec" / "send them this file" | \`codiedev ping <name> "<msg>" [--with <key>] [--file <path>]\` (\`--with\` also gives them access) |
 | "any messages?" / "check my inbox" / "what did a teammate say?" | \`codiedev inbox\` |
 | "read that reply" / "mark that ping read" | \`codiedev read <ping-id>\` |
 | "reply to that" / "tell them X" (answering a message from \`codiedev inbox\`) | \`codiedev reply <ping-id> "<msg>" [--file <path>]\` (not a new ping: this threads it and marks theirs answered) |
 | "note that X is a follow-up" / "remember X" | \`codiedev note "<text>"\` |
-| "share with a teammate" / "give someone access" (no notification) | \`codiedev share <key> <name> [--role read\\|edit]\` |
-| "send this to a teammate" / "ask someone to look at this" | \`codiedev send <key> <name> ["<msg>"]\` |
+| "share with a teammate" / "give someone access" (no notification) | \`codiedev ping <name> --with <key> [--edit]\` (no message = silent share) |
 | "find something about X" / "has anyone solved Y?" | \`codiedev search "<query>" [--limit N]\` |
 | "show my library" / "what artifacts exist?" | \`codiedev library [--scope mine\\|shared\\|all] [--kind doc\\|skill]\` |
 | "run my agent's test cases" / "check the dataset on model Y" / "run v2 of the dataset" | \`codiedev traces cases <agent> [--dataset <name> [--version <n>]] [--model <id>]\` (writes cases + RUN_CASES.md + results.json; follow it, then \`codiedev traces report <results.json>\`) |
@@ -1756,9 +1755,10 @@ If ambiguous, the CLI returns candidates — retry with the full email.
 \`codiedev search "<query>"\` first. If prior art exists, pull it and
 iterate rather than duplicating.
 
-**Sharing vs sending:** \`codiedev share\` is silent (access only, no
-notification). \`codiedev send\` both grants access AND pings the
-recipient. Use send when the user is actively looping someone in.
+**One command for messaging and sharing:** \`codiedev ping\`. A message
+lands in their inbox and emails them; \`--with <key>\` also gives them read
+access (\`--edit\` for edit). With \`--with\` and no message it's a silent
+share. (\`codiedev send\` / \`share\` still work as aliases.)
 
 **Errors:**
 - "not connected" → user needs to run \`npx codiedev connect\` with their

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codiedev",
-  "version": "0.9.87",
+  "version": "0.9.89",
   "description": "Connect Claude Code, Codex, Cursor, OpenCode, or VS Code Copilot to Codiedev for team session capture and artifact collaboration — and run the governed Codie harness",
   "bin": {
     "codiedev": "dist/cli.js",