hubskillz 0.2.2 → 0.3.1

package/README.md

@@ -102,7 +102,7 @@ Prompts are skipped when stdin is not a TTY: `sync` needs `--yes` to apply, `pro
 | `HUBSKILLZ_BASE_URL`       | Server URL for self-hosted instances.                                                                                                                                                   |
 | `NO_COLOR`                 | Disables colours. Colours are also off when stdout is not a TTY.                                                                                                                        |
 
-The server URL resolves in this order: `--base-url` flag, `HUBSKILLZ_BASE_URL`, the config file, then `https://hubskillz.com`.
+The server URL resolves in this order: `--base-url` flag, `HUBSKILLZ_BASE_URL`, the config file, then `https://api.hubskillz.com`.
 
 ## Exit codes
 

package/dist/index.js

@@ -18911,6 +18911,7 @@ var MAX_FILES_PER_SKILL = 100;
 var MAX_FILE_CONTENT_CHARS = 2e5;
 var MAX_SKILLS_PER_REQUEST = 500;
 var MAX_SNAPSHOT_CHARS = MAX_FILE_CONTENT_CHARS;
+var MAX_INVENTORY_CHUNK_BYTES = 15e5;
 var inventoryFileSchema = external_exports.object({
   path: skillFilePathSchema,
   hash: external_exports.string().min(1),
@@ -18961,7 +18962,12 @@ var inventoryRequestSchema = external_exports.object({
       files: external_exports.array(inventoryFileSchema).max(MAX_FILES_PER_SKILL),
       upstream: inventoryUpstreamSchema.optional()
     })
-  ).max(MAX_SKILLS_PER_REQUEST)
+  ).max(MAX_SKILLS_PER_REQUEST),
+  /** Big surfaces travel in chunks: chunk 0 replaces, the others append. */
+  chunk: external_exports.object({
+    index: external_exports.number().int().min(0),
+    total: external_exports.number().int().min(1)
+  }).optional()
 });
 var inventoryItemSchema = external_exports.object({
   name: external_exports.string(),
@@ -18981,7 +18987,9 @@ var inventoryResponseSchema = external_exports.object({
 });
 var approvedQuerySchema = external_exports.object({ surfaceId: external_exports.string().min(1) });
 var approvedSkillSchema = external_exports.object({
-  name: external_exports.string(),
+  // Kebab, not z.string(): the CLI joins this onto a path (commands/sync.ts),
+  // so the response is validated rather than trusted.
+  name: skillNameSchema,
   versionId: external_exports.string(),
   version: external_exports.number().int(),
   contentHash: external_exports.string(),
@@ -19160,7 +19168,7 @@ import { randomUUID } from "node:crypto";
 import { mkdir, readFile, rm, writeFile } from "node:fs/promises";
 import { homedir, hostname as hostname3 } from "node:os";
 import { join } from "node:path";
-var DEFAULT_BASE_URL = "https://hubskillz.com";
+var DEFAULT_BASE_URL = "https://api.hubskillz.com";
 var configSchema = external_exports.object({
   baseUrl: external_exports.string().min(1),
   token: external_exports.string().min(1),
@@ -19515,7 +19523,7 @@ function globalSurfaceLabel() {
   return hostname4();
 }
 function projectSurfaceLabel(dir) {
-  return `${hostname4()}:${basename(resolve2(dir))}`;
+  return `${basename(resolve2(dir))} (${hostname4()})`;
 }
 async function exists(path) {
   try {
@@ -19622,25 +19630,49 @@ async function isDir(path) {
 function inventoryRequestOf(surface) {
   return {
     surface: surface.descriptor,
-    skills: surface.skills.map((skill) => {
-      const snapshot = skill.upstream === void 0 && skill.files.reduce((sum, file2) => sum + file2.content.length, 0) <= MAX_SNAPSHOT_CHARS;
-      const item = {
-        name: skill.name,
-        contentHash: skill.contentHash,
-        files: skill.files.map((file2) => {
-          const entry = {
-            path: file2.path,
-            hash: file2.hash,
-            size: file2.size
-          };
-          if (snapshot) entry.content = file2.content;
-          return entry;
-        })
+    skills: surface.skills.map(inventorySkillOf)
+  };
+}
+function inventoryChunksOf(surface) {
+  const groups = [];
+  let group = [];
+  let bytes = 0;
+  for (const skill of surface.skills) {
+    const item = inventorySkillOf(skill);
+    const size = Buffer.byteLength(JSON.stringify(item), "utf8");
+    if (group.length > 0 && (bytes + size > MAX_INVENTORY_CHUNK_BYTES || group.length >= MAX_SKILLS_PER_REQUEST)) {
+      groups.push(group);
+      group = [];
+      bytes = 0;
+    }
+    group.push(item);
+    bytes += size;
+  }
+  groups.push(group);
+  if (groups.length === 1) return [inventoryRequestOf(surface)];
+  return groups.map((skills, index) => ({
+    surface: surface.descriptor,
+    skills,
+    chunk: { index, total: groups.length }
+  }));
+}
+function inventorySkillOf(skill) {
+  const snapshot = skill.upstream === void 0 && skill.files.reduce((sum, file2) => sum + file2.content.length, 0) <= MAX_SNAPSHOT_CHARS;
+  const item = {
+    name: skill.name,
+    contentHash: skill.contentHash,
+    files: skill.files.map((file2) => {
+      const entry = {
+        path: file2.path,
+        hash: file2.hash,
+        size: file2.size
       };
-      if (skill.upstream !== void 0) item.upstream = skill.upstream;
-      return item;
+      if (snapshot) entry.content = file2.content;
+      return entry;
     })
   };
+  if (skill.upstream !== void 0) item.upstream = skill.upstream;
+  return item;
 }
 
 // src/discover.ts
@@ -19863,13 +19895,20 @@ ${quickstart(config2)}`);
   return Result.ok(void 0);
 }
 async function postInventory(session, surface) {
-  return apiRequest({
-    session,
-    method: "POST",
-    path: "/api/cli/inventory",
-    schema: inventoryResponseSchema,
-    body: inventoryRequestOf(surface)
-  });
+  const chunks = inventoryChunksOf(surface);
+  let merged;
+  for (const body of chunks) {
+    const posted = await apiRequest({
+      session,
+      method: "POST",
+      path: "/api/cli/inventory",
+      schema: inventoryResponseSchema,
+      body
+    });
+    if (posted.isFailure) return posted;
+    merged = merged === void 0 ? posted.value : { ...merged, items: [...merged.items, ...posted.value.items] };
+  }
+  return Result.ok(merged ?? { surfaceId: "", items: [] });
 }
 function originOf(surface, name) {
   const skill = surface.skills.find((entry) => entry.name === name);
@@ -20107,6 +20146,10 @@ async function maybeAdopt(session, surface, inventory, options) {
     `Adopt ${plural(importable.length)} found here as approved in your directory?`
   );
   if (!wanted) return Result.ok(inventory);
+  process.stdout.write(
+    dim(`adopting ${plural(importable.length)}, this can take a minute...
+`)
+  );
   const adopted = await apiRequest({
     session,
     method: "POST",
@@ -20276,7 +20319,7 @@ function detailOf(plan) {
 var GLOBAL_FLAGS = [
   {
     spec: "--base-url URL",
-    help: "Server to talk to (default: config file, then https://hubskillz.com)"
+    help: "Server to talk to (default: config file, then https://api.hubskillz.com)"
   },
   { spec: "-h, --help", help: "Show help" },
   { spec: "-v, --version", help: "Show the version" }
@@ -20353,7 +20396,7 @@ function flagLines(flags) {
 }
 function usage() {
   const width = Math.max(...COMMANDS.map((command) => command.name.length));
-  return `${bold("hubskillz")} ${dim(`v${"0.2.2"}`)}  keep your agent skills in sync
+  return `${bold("hubskillz")} ${dim(`v${"0.3.1"}`)}  keep your agent skills in sync
 
 ${bold("Usage")}
   hubskillz <command> [flags]
@@ -20432,7 +20475,7 @@ Run \`hubskillz help\` for usage.`)
     );
   }
   if (values.version === true) {
-    process.stdout.write(`${"0.2.2"}
+    process.stdout.write(`${"0.3.1"}
 `);
     return Result.ok(void 0);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hubskillz",
-  "version": "0.2.2",
+  "version": "0.3.1",
   "description": "Keep your Claude Code skills in sync with your organization's approved catalog.",
   "license": "MIT",
   "author": "Jérôme Desmares",