comisai 1.0.36 → 1.0.37

package/node_modules/@comis/skills/dist/registry/skill-registry.js

@@ -14,7 +14,9 @@
 import { ok, err } from "@comis/shared";
 import * as fs from "node:fs";
 import { emitSkillAudit } from "../audit/skill-audit.js";
-import { parseFrontmatter, parseSkillManifest } from "../manifest/parser.js";
+import { parseComisCapabilityDefensively } from "../manifest/capability-parser.js";
+import { parseFrontmatter } from "../manifest/parser.js";
+import { SkillManifestSchema } from "../manifest/schema.js";
 import { formatAvailableSkillsXml } from "../prompt/processor.js";
 import { sanitizeSkillBody } from "../prompt/sanitizer.js";
 import { scanSkillContent } from "../prompt/content-scanner.js";
@@ -161,7 +163,10 @@ export function createSkillRegistry(config, eventBus, auditContext, logger, elig
             catch (e) {
                 return err(new Error(`Failed to read prompt skill file for ${name}: ${e instanceof Error ? e.message : String(e)}`));
             }
-            // Parse frontmatter to extract body
+            // Parse frontmatter; defensively strip a malformed comis.capability
+            // block before strict validation so a typo in capability does NOT hide
+            // the skill at load time. Mirrors the discovery-side enrichment in
+            // discovery.ts.
             const fmResult = parseFrontmatter(fileContent);
             if (!fmResult.ok) {
                 return err(fmResult.error);
@@ -171,11 +176,28 @@ export function createSkillRegistry(config, eventBus, auditContext, logger, elig
             if (!rawBody.trim()) {
                 return err(new Error(`Prompt skill "${name}" has no body content`));
             }
-            // Parse full manifest for allowedTools
-            const manifestResult = parseSkillManifest(fileContent);
-            if (!manifestResult.ok) {
-                return err(manifestResult.error);
+            const frontmatter = fmResult.value.frontmatter;
+            const ns = typeof frontmatter["comis"] === "object" &&
+                frontmatter["comis"] !== null &&
+                !Array.isArray(frontmatter["comis"])
+                ? frontmatter["comis"]
+                : undefined;
+            if (ns && ns["capability"] !== undefined) {
+                // Logger omitted: discovery enrichment already emitted the WARN for
+                // this file; a second identical line at load time is just noise.
+                const cap = parseComisCapabilityDefensively(ns["capability"], name, undefined);
+                if (cap === undefined) {
+                    delete ns["capability"];
+                }
+            }
+            const manifestValidation = SkillManifestSchema.safeParse(frontmatter);
+            if (!manifestValidation.success) {
+                const issues = manifestValidation.error.issues
+                    .map((issue) => `${issue.path.join(".")}: ${issue.message}`)
+                    .join("; ");
+                return err(new Error(`Manifest validation failed: ${issues}`));
             }
+            const manifest = manifestValidation.data;
             // Sanitize body content
             const sanitized = sanitizeSkillBody(rawBody, config.promptSkills.maxBodyLength);
             // Validate sanitized body is non-empty
@@ -250,7 +272,7 @@ export function createSkillRegistry(config, eventBus, auditContext, logger, elig
                 location: metadata.path,
                 userInvocable: metadata.userInvocable,
                 disableModelInvocation: metadata.disableModelInvocation,
-                allowedTools: manifestResult.value.allowedTools,
+                allowedTools: manifest.allowedTools,
                 argumentHint: metadata.argumentHint,
                 source: metadata.source,
             };
@@ -360,6 +382,41 @@ export function createSkillRegistry(config, eventBus, auditContext, logger, elig
             }
             return names;
         },
+        getPromptSkillCapabilities(getOperatorHint) {
+            const out = [];
+            for (const metadata of metadataMap.values()) {
+                // Filter chain -- mirrors getPromptSkillDescriptions PLUS the extra
+                // disableModelInvocation filter (skills hidden from the model are
+                // not capability-index entries).
+                if (!isSkillEligible(metadata.name, config.promptSkills))
+                    continue;
+                if (!checkRuntimeEligibility(metadata))
+                    continue;
+                if (metadata.disableModelInvocation)
+                    continue;
+                // Precedence:
+                //   operator(skillKey) > operator(skillName) > comis.capability > fallback.
+                const opByKey = metadata.skillKey
+                    ? getOperatorHint(metadata.name, metadata.skillKey)
+                    : undefined;
+                const opByName = !opByKey ? getOperatorHint(metadata.name) : undefined;
+                const operatorHint = opByKey ?? opByName;
+                const comisHint = metadata.capability;
+                const cluster = operatorHint?.cluster ?? comisHint?.cluster;
+                const summary = operatorHint?.description ?? comisHint?.summary ?? metadata.description;
+                const rawReplaces = operatorHint?.replacesPackages ?? comisHint?.replacesPackages ?? [];
+                out.push(Object.freeze({
+                    name: metadata.name,
+                    skillKey: metadata.skillKey,
+                    description: metadata.description,
+                    cluster,
+                    summary,
+                    replacesPackages: Object.freeze([...rawReplaces]),
+                    source: metadata.source,
+                }));
+            }
+            return Object.freeze(out);
+        },
         initFromSdkSkills(sdkSkills) {
             const prevMetadataCount = metadataMap.size;
             const prevCacheCount = promptCache.size;
@@ -379,6 +436,7 @@ export function createSkillRegistry(config, eventBus, auditContext, logger, elig
                 let skillKey;
                 let primaryEnv;
                 let commandDispatch;
+                let capability;
                 // Enrichment: read comis: namespace from skill file frontmatter
                 try {
                     const content = fs.readFileSync(sdkSkill.filePath, "utf-8");
@@ -441,6 +499,10 @@ export function createSkillRegistry(config, eventBus, auditContext, logger, elig
                         if (typeof rawCommandDispatch === "string") {
                             commandDispatch = rawCommandDispatch;
                         }
+                        // Capability layer -- defensive parse. A typo or type mismatch
+                        // in the inner block returns undefined + emits a WARN; the skill
+                        // itself is NEVER hidden by malformed capability metadata.
+                        capability = parseComisCapabilityDefensively(ns?.["capability"], sdkSkill.name, logger);
                     }
                 }
                 catch {
@@ -462,6 +524,7 @@ export function createSkillRegistry(config, eventBus, auditContext, logger, elig
                     skillKey,
                     primaryEnv,
                     commandDispatch,
+                    capability,
                 };
                 // Apply eligibility filtering during population
                 if (!isSkillEligible(metadata.name, config.promptSkills))

package/node_modules/@comis/skills/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/skills",
   "private": true,
-  "version": "1.0.36",
+  "version": "1.0.37",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Skill system, MCP integration, and tool sandbox for Comis agents",

package/node_modules/@comis/web/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@comis/web",
-  "version": "1.0.36",
+  "version": "1.0.37",
   "description": "Web dashboard SPA for Comis agent management",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "comisai",
-  "version": "1.0.36",
+  "version": "1.0.37",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Security-first AI agent platform — connects AI agents to Discord, Telegram, Slack, WhatsApp, and more",
@@ -115,19 +115,19 @@
     "file-uri-to-path"
   ],
   "dependencies": {
-    "@comis/shared": "1.0.36",
-    "@comis/core": "1.0.36",
-    "@comis/infra": "1.0.36",
-    "@comis/memory": "1.0.36",
-    "@comis/gateway": "1.0.36",
-    "@comis/skills": "1.0.36",
-    "@comis/scheduler": "1.0.36",
-    "@comis/agent": "1.0.36",
-    "@comis/channels": "1.0.36",
-    "@comis/cli": "1.0.36",
-    "@comis/daemon": "1.0.36",
-    "@comis/web": "1.0.36",
-    "@agentclientprotocol/sdk": "0.19.2",
+    "@comis/shared": "1.0.37",
+    "@comis/core": "1.0.37",
+    "@comis/infra": "1.0.37",
+    "@comis/memory": "1.0.37",
+    "@comis/gateway": "1.0.37",
+    "@comis/skills": "1.0.37",
+    "@comis/scheduler": "1.0.37",
+    "@comis/agent": "1.0.37",
+    "@comis/channels": "1.0.37",
+    "@comis/cli": "1.0.37",
+    "@comis/daemon": "1.0.37",
+    "@comis/web": "1.0.37",
+    "@agentclientprotocol/sdk": "0.21.0",
     "@clack/core": "1.2.0",
     "@clack/prompts": "1.2.0",
     "@elevenlabs/elevenlabs-js": "2.45.0",
@@ -147,8 +147,8 @@
     "@modelcontextprotocol/sdk": "1.29.0",
     "@mozilla/readability": "0.6.0",
     "@napi-rs/canvas": "0.1.100",
-    "typebox": "1.1.24",
-    "@slack/bolt": "4.7.1",
+    "typebox": "1.1.37",
+    "@slack/bolt": "4.7.2",
     "@slack/web-api": "7.15.1",
     "@whiskeysockets/baileys": "7.0.0-rc.9",
     "better-sqlite3": "12.9.0",
@@ -160,16 +160,16 @@
     "commander": "14.0.3",
     "croner": "10.0.1",
     "diff": "8.0.4",
-    "discord.js": "14.26.3",
+    "discord.js": "14.26.4",
     "edge-tts-universal": "1.4.0",
     "file-type": "21.3.4",
     "file-uri-to-path": "1.0.0",
     "grammy": "1.42.0",
-    "hono": "4.12.15",
+    "hono": "4.12.16",
     "hono-rate-limiter": "0.5.3",
     "iconv-lite": "0.7.2",
     "ignore": "7.0.5",
-    "imapflow": "1.3.2",
+    "imapflow": "1.3.3",
     "impit": "0.13.0",
     "ipaddr.js": "2.3.0",
     "irc-framework": "4.14.0",
@@ -193,8 +193,8 @@
     "sqlite-vec": "0.1.9",
     "undici": "8.1.0",
     "ws": "8.20.0",
-    "yaml": "2.8.3",
-    "zod": "4.3.6"
+    "yaml": "2.8.4",
+    "zod": "4.4.2"
   },
   "optionalDependencies": {
     "sd-notify": "2.8.0"