pnpm-plugin-skills 0.1.0 → 0.2.0

package/README.md

@@ -0,0 +1,54 @@
+# pnpm-plugin-skills
+
+A pnpm plugin that automatically installs agent skills during `pnpm install`.
+
+## How It Works
+
+This plugin hooks into pnpm's `preResolution` lifecycle to run skill installation before dependency resolution. On every `pnpm install`, it:
+
+1. Reads `skills.json` from the workspace root
+2. Resolves and syncs `skills-lock.yaml`
+3. Materializes skills into the configured `installDir`
+4. Creates symlinks for configured `linkTargets`
+5. Skips if the lockfile hasn't changed (fast path)
+
+## Setup
+
+Install as a config dependency:
+
+```bash
+pnpm add pnpm-plugin-skills --config
+```
+
+Then create a `skills.json` in your project root:
+
+```jsonc
+{
+  "installDir": ".agents/skills",
+  "linkTargets": [".claude/skills"],
+  "skills": {
+    "my-skill": "https://github.com/owner/repo.git#path:/skills/my-skill"
+  }
+}
+```
+
+Now `pnpm install` will automatically install your skills.
+
+## Architecture
+
+The plugin is built as a single CJS bundle (via Rslib with `autoExternal: false`) that inlines all dependencies including `skills-package-manager`. This ensures it works as a standalone `pnpmfile.cjs` plugin without any external runtime dependencies.
+
+```
+pnpm-plugin-skills/
+├── pnpmfile.cjs     # Plugin entry — exports { hooks: { preResolution } }
+├── src/
+│   └── index.ts     # Imports installCommand from skills-pm
+└── dist/
+    └── index.js     # Bundled CJS output (~350 kB, all deps inlined)
+```
+
+## Build
+
+```bash
+pnpm build    # Builds with Rslib (CJS bundle mode)
+```

package/dist/index.js

@@ -1,5 +1,59 @@
 "use strict";
 var __webpack_modules__ = {
+    "../../node_modules/.pnpm/sisteransi@1.0.5/node_modules/sisteransi/src/index.js" (module) {
+        const ESC = '\x1B';
+        const CSI = `${ESC}[`;
+        const beep = '\u0007';
+        const cursor = {
+            to (x, y) {
+                if (!y) return `${CSI}${x + 1}G`;
+                return `${CSI}${y + 1};${x + 1}H`;
+            },
+            move (x, y) {
+                let ret = '';
+                if (x < 0) ret += `${CSI}${-x}D`;
+                else if (x > 0) ret += `${CSI}${x}C`;
+                if (y < 0) ret += `${CSI}${-y}A`;
+                else if (y > 0) ret += `${CSI}${y}B`;
+                return ret;
+            },
+            up: (count = 1)=>`${CSI}${count}A`,
+            down: (count = 1)=>`${CSI}${count}B`,
+            forward: (count = 1)=>`${CSI}${count}C`,
+            backward: (count = 1)=>`${CSI}${count}D`,
+            nextLine: (count = 1)=>`${CSI}E`.repeat(count),
+            prevLine: (count = 1)=>`${CSI}F`.repeat(count),
+            left: `${CSI}G`,
+            hide: `${CSI}?25l`,
+            show: `${CSI}?25h`,
+            save: `${ESC}7`,
+            restore: `${ESC}8`
+        };
+        const scroll = {
+            up: (count = 1)=>`${CSI}S`.repeat(count),
+            down: (count = 1)=>`${CSI}T`.repeat(count)
+        };
+        const erase = {
+            screen: `${CSI}2J`,
+            up: (count = 1)=>`${CSI}1J`.repeat(count),
+            down: (count = 1)=>`${CSI}J`.repeat(count),
+            line: `${CSI}2K`,
+            lineEnd: `${CSI}K`,
+            lineStart: `${CSI}1K`,
+            lines (count) {
+                let clear = '';
+                for(let i = 0; i < count; i++)clear += this.line + (i < count - 1 ? cursor.up() : '');
+                if (count) clear += cursor.left;
+                return clear;
+            }
+        };
+        module.exports = {
+            cursor,
+            scroll,
+            erase,
+            beep
+        };
+    },
     buffer (module) {
         module.exports = require("buffer");
     },
@@ -6382,9 +6436,144 @@ var __webpack_exports__ = {};
     const external_node_path_namespaceObject = require("node:path");
     var dist = __webpack_require__("../../node_modules/.pnpm/yaml@2.8.3/node_modules/yaml/dist/index.js");
     const external_node_crypto_namespaceObject = require("node:crypto");
+    const external_node_os_namespaceObject = require("node:os");
     const external_node_child_process_namespaceObject = require("node:child_process");
     const external_node_util_namespaceObject = require("node:util");
-    const external_node_os_namespaceObject = require("node:os");
+    if ("u" > typeof process) {
+        "u" > typeof Deno && "string" == typeof Deno.version?.deno || "u" > typeof Bun && Bun.version;
+        process.platform, process.arch, process.version;
+        process.argv;
+    } else "u" < typeof navigator || (navigator.platform, navigator.userAgent);
+    const external_node_process_namespaceObject = require("node:process");
+    require("node:readline");
+    __webpack_require__("../../node_modules/.pnpm/sisteransi@1.0.5/node_modules/sisteransi/src/index.js");
+    require("node:tty");
+    const dist_at = (t)=>161 === t || 164 === t || 167 === t || 168 === t || 170 === t || 173 === t || 174 === t || t >= 176 && t <= 180 || t >= 182 && t <= 186 || t >= 188 && t <= 191 || 198 === t || 208 === t || 215 === t || 216 === t || t >= 222 && t <= 225 || 230 === t || t >= 232 && t <= 234 || 236 === t || 237 === t || 240 === t || 242 === t || 243 === t || t >= 247 && t <= 250 || 252 === t || 254 === t || 257 === t || 273 === t || 275 === t || 283 === t || 294 === t || 295 === t || 299 === t || t >= 305 && t <= 307 || 312 === t || t >= 319 && t <= 322 || 324 === t || t >= 328 && t <= 331 || 333 === t || 338 === t || 339 === t || 358 === t || 359 === t || 363 === t || 462 === t || 464 === t || 466 === t || 468 === t || 470 === t || 472 === t || 474 === t || 476 === t || 593 === t || 609 === t || 708 === t || 711 === t || t >= 713 && t <= 715 || 717 === t || 720 === t || t >= 728 && t <= 731 || 733 === t || 735 === t || t >= 768 && t <= 879 || t >= 913 && t <= 929 || t >= 931 && t <= 937 || t >= 945 && t <= 961 || t >= 963 && t <= 969 || 1025 === t || t >= 1040 && t <= 1103 || 1105 === t || 8208 === t || t >= 8211 && t <= 8214 || 8216 === t || 8217 === t || 8220 === t || 8221 === t || t >= 8224 && t <= 8226 || t >= 8228 && t <= 8231 || 8240 === t || 8242 === t || 8243 === t || 8245 === t || 8251 === t || 8254 === t || 8308 === t || 8319 === t || t >= 8321 && t <= 8324 || 8364 === t || 8451 === t || 8453 === t || 8457 === t || 8467 === t || 8470 === t || 8481 === t || 8482 === t || 8486 === t || 8491 === t || 8531 === t || 8532 === t || t >= 8539 && t <= 8542 || t >= 8544 && t <= 8555 || t >= 8560 && t <= 8569 || 8585 === t || t >= 8592 && t <= 8601 || 8632 === t || 8633 === t || 8658 === t || 8660 === t || 8679 === t || 8704 === t || 8706 === t || 8707 === t || 8711 === t || 8712 === t || 8715 === t || 8719 === t || 8721 === t || 8725 === t || 8730 === t || t >= 8733 && t <= 8736 || 8739 === t || 8741 === t || t >= 8743 && t <= 8748 || 8750 === t || t >= 8756 && t <= 8759 || 8764 === t || 8765 === t || 8776 === t || 8780 === t || 8786 === t || 8800 === t || 8801 === t || t >= 8804 && t <= 8807 || 8810 === t || 8811 === t || 8814 === t || 8815 === t || 8834 === t || 8835 === t || 8838 === t || 8839 === t || 8853 === t || 8857 === t || 8869 === t || 8895 === t || 8978 === t || t >= 9312 && t <= 9449 || t >= 9451 && t <= 9547 || t >= 9552 && t <= 9587 || t >= 9600 && t <= 9615 || t >= 9618 && t <= 9621 || 9632 === t || 9633 === t || t >= 9635 && t <= 9641 || 9650 === t || 9651 === t || 9654 === t || 9655 === t || 9660 === t || 9661 === t || 9664 === t || 9665 === t || t >= 9670 && t <= 9672 || 9675 === t || t >= 9678 && t <= 9681 || t >= 9698 && t <= 9701 || 9711 === t || 9733 === t || 9734 === t || 9737 === t || 9742 === t || 9743 === t || 9756 === t || 9758 === t || 9792 === t || 9794 === t || 9824 === t || 9825 === t || t >= 9827 && t <= 9829 || t >= 9831 && t <= 9834 || 9836 === t || 9837 === t || 9839 === t || 9886 === t || 9887 === t || 9919 === t || t >= 9926 && t <= 9933 || t >= 9935 && t <= 9939 || t >= 9941 && t <= 9953 || 9955 === t || 9960 === t || 9961 === t || t >= 9963 && t <= 9969 || 9972 === t || t >= 9974 && t <= 9977 || 9979 === t || 9980 === t || 9982 === t || 9983 === t || 10045 === t || t >= 10102 && t <= 10111 || t >= 11094 && t <= 11097 || t >= 12872 && t <= 12879 || t >= 57344 && t <= 63743 || t >= 65024 && t <= 65039 || 65533 === t || t >= 127232 && t <= 127242 || t >= 127248 && t <= 127277 || t >= 127280 && t <= 127337 || t >= 127344 && t <= 127373 || 127375 === t || 127376 === t || t >= 127387 && t <= 127404 || t >= 917760 && t <= 917999 || t >= 983040 && t <= 1048573 || t >= 1048576 && t <= 1114109, dist_lt = (t)=>12288 === t || t >= 65281 && t <= 65376 || t >= 65504 && t <= 65510, dist_ht = (t)=>t >= 4352 && t <= 4447 || 8986 === t || 8987 === t || 9001 === t || 9002 === t || t >= 9193 && t <= 9196 || 9200 === t || 9203 === t || 9725 === t || 9726 === t || 9748 === t || 9749 === t || t >= 9800 && t <= 9811 || 9855 === t || 9875 === t || 9889 === t || 9898 === t || 9899 === t || 9917 === t || 9918 === t || 9924 === t || 9925 === t || 9934 === t || 9940 === t || 9962 === t || 9970 === t || 9971 === t || 9973 === t || 9978 === t || 9981 === t || 9989 === t || 9994 === t || 9995 === t || 10024 === t || 10060 === t || 10062 === t || t >= 10067 && t <= 10069 || 10071 === t || t >= 10133 && t <= 10135 || 10160 === t || 10175 === t || 11035 === t || 11036 === t || 11088 === t || 11093 === t || t >= 11904 && t <= 11929 || t >= 11931 && t <= 12019 || t >= 12032 && t <= 12245 || t >= 12272 && t <= 12287 || t >= 12289 && t <= 12350 || t >= 12353 && t <= 12438 || t >= 12441 && t <= 12543 || t >= 12549 && t <= 12591 || t >= 12593 && t <= 12686 || t >= 12688 && t <= 12771 || t >= 12783 && t <= 12830 || t >= 12832 && t <= 12871 || t >= 12880 && t <= 19903 || t >= 19968 && t <= 42124 || t >= 42128 && t <= 42182 || t >= 43360 && t <= 43388 || t >= 44032 && t <= 55203 || t >= 63744 && t <= 64255 || t >= 65040 && t <= 65049 || t >= 65072 && t <= 65106 || t >= 65108 && t <= 65126 || t >= 65128 && t <= 65131 || t >= 94176 && t <= 94180 || 94192 === t || 94193 === t || t >= 94208 && t <= 100343 || t >= 100352 && t <= 101589 || t >= 101632 && t <= 101640 || t >= 110576 && t <= 110579 || t >= 110581 && t <= 110587 || 110589 === t || 110590 === t || t >= 110592 && t <= 110882 || 110898 === t || t >= 110928 && t <= 110930 || 110933 === t || t >= 110948 && t <= 110951 || t >= 110960 && t <= 111355 || 126980 === t || 127183 === t || 127374 === t || t >= 127377 && t <= 127386 || t >= 127488 && t <= 127490 || t >= 127504 && t <= 127547 || t >= 127552 && t <= 127560 || 127568 === t || 127569 === t || t >= 127584 && t <= 127589 || t >= 127744 && t <= 127776 || t >= 127789 && t <= 127797 || t >= 127799 && t <= 127868 || t >= 127870 && t <= 127891 || t >= 127904 && t <= 127946 || t >= 127951 && t <= 127955 || t >= 127968 && t <= 127984 || 127988 === t || t >= 127992 && t <= 128062 || 128064 === t || t >= 128066 && t <= 128252 || t >= 128255 && t <= 128317 || t >= 128331 && t <= 128334 || t >= 128336 && t <= 128359 || 128378 === t || 128405 === t || 128406 === t || 128420 === t || t >= 128507 && t <= 128591 || t >= 128640 && t <= 128709 || 128716 === t || t >= 128720 && t <= 128722 || t >= 128725 && t <= 128727 || t >= 128732 && t <= 128735 || 128747 === t || 128748 === t || t >= 128756 && t <= 128764 || t >= 128992 && t <= 129003 || 129008 === t || t >= 129292 && t <= 129338 || t >= 129340 && t <= 129349 || t >= 129351 && t <= 129535 || t >= 129648 && t <= 129660 || t >= 129664 && t <= 129672 || t >= 129680 && t <= 129725 || t >= 129727 && t <= 129733 || t >= 129742 && t <= 129755 || t >= 129760 && t <= 129768 || t >= 129776 && t <= 129784 || t >= 131072 && t <= 196605 || t >= 196608 && t <= 262141, dist_O = /[\u001b\u009b][[()#;?]*(?:[0-9]{1,4}(?:;[0-9]{0,4})*)?[0-9A-ORZcf-nqry=><]/y, dist_y = /[\x00-\x08\x0A-\x1F\x7F-\x9F]{1,1000}/y, dist_L = /\t{1,1000}/y, dist_P = /[\u{1F1E6}-\u{1F1FF}]{2}|\u{1F3F4}[\u{E0061}-\u{E007A}]{2}[\u{E0030}-\u{E0039}\u{E0061}-\u{E007A}]{1,3}\u{E007F}|(?:\p{Emoji}\uFE0F\u20E3?|\p{Emoji_Modifier_Base}\p{Emoji_Modifier}?|\p{Emoji_Presentation})(?:\u200D(?:\p{Emoji_Modifier_Base}\p{Emoji_Modifier}?|\p{Emoji_Presentation}|\p{Emoji}\uFE0F\u20E3?))*/yu, dist_M = /(?:[\x20-\x7E\xA0-\xFF](?!\uFE0F)){1,1000}/y, dist_ct = /\p{M}+/gu, ft = {
+        limit: 1 / 0,
+        ellipsis: ""
+    }, X = (t, e = {}, s = {})=>{
+        const i = e.limit ?? 1 / 0, r = e.ellipsis ?? "", n = e?.ellipsisWidth ?? (r ? X(r, ft, s).width : 0), u = s.ansiWidth ?? 0, a = s.controlWidth ?? 0, l = s.tabWidth ?? 8, E = s.ambiguousWidth ?? 1, g = s.emojiWidth ?? 2, m = s.fullWidthWidth ?? 2, A = s.regularWidth ?? 1, V = s.wideWidth ?? 2;
+        let h = 0, o = 0, p = t.length, v = 0, F = !1, d = p, b = Math.max(0, i - n), C = 0, w = 0, c = 0, f = 0;
+        t: for(;;){
+            if (w > C || o >= p && o > h) {
+                const ut = t.slice(C, w) || t.slice(h, o);
+                v = 0;
+                for (const Y of ut.replaceAll(dist_ct, "")){
+                    const $ = Y.codePointAt(0) || 0;
+                    if (dist_lt($) ? f = m : dist_ht($) ? f = V : E !== A && dist_at($) ? f = E : f = A, c + f > b && (d = Math.min(d, Math.max(C, h) + v)), c + f > i) {
+                        F = !0;
+                        break t;
+                    }
+                    v += Y.length, c += f;
+                }
+                C = w = 0;
+            }
+            if (o >= p) break;
+            if (dist_M.lastIndex = o, dist_M.test(t)) {
+                if (v = dist_M.lastIndex - o, f = v * A, c + f > b && (d = Math.min(d, o + Math.floor((b - c) / A))), c + f > i) {
+                    F = !0;
+                    break;
+                }
+                c += f, C = h, w = o, o = h = dist_M.lastIndex;
+                continue;
+            }
+            if (dist_O.lastIndex = o, dist_O.test(t)) {
+                if (c + u > b && (d = Math.min(d, o)), c + u > i) {
+                    F = !0;
+                    break;
+                }
+                c += u, C = h, w = o, o = h = dist_O.lastIndex;
+                continue;
+            }
+            if (dist_y.lastIndex = o, dist_y.test(t)) {
+                if (v = dist_y.lastIndex - o, f = v * a, c + f > b && (d = Math.min(d, o + Math.floor((b - c) / a))), c + f > i) {
+                    F = !0;
+                    break;
+                }
+                c += f, C = h, w = o, o = h = dist_y.lastIndex;
+                continue;
+            }
+            if (dist_L.lastIndex = o, dist_L.test(t)) {
+                if (v = dist_L.lastIndex - o, f = v * l, c + f > b && (d = Math.min(d, o + Math.floor((b - c) / l))), c + f > i) {
+                    F = !0;
+                    break;
+                }
+                c += f, C = h, w = o, o = h = dist_L.lastIndex;
+                continue;
+            }
+            if (dist_P.lastIndex = o, dist_P.test(t)) {
+                if (c + g > b && (d = Math.min(d, o)), c + g > i) {
+                    F = !0;
+                    break;
+                }
+                c += g, C = h, w = o, o = h = dist_P.lastIndex;
+                continue;
+            }
+            o += 1;
+        }
+        return {
+            width: F ? b : c,
+            index: F ? d : p,
+            truncated: F,
+            ellipsed: F && i >= n
+        };
+    }, pt = {
+        limit: 1 / 0,
+        ellipsis: "",
+        ellipsisWidth: 0
+    }, dist_j = "\x07", Q = "[", dist_dt = "]", U = `${dist_dt}8;;`, dist_et = new RegExp(`(?:\\${Q}(?<code>\\d+)m|\\${U}(?<uri>.*)${dist_j})`, "y");
+    const At = [
+        "up",
+        "down",
+        "left",
+        "right",
+        "space",
+        "enter",
+        "cancel"
+    ], dist_ = {
+        actions: new Set(At),
+        aliases: new Map([
+            [
+                "k",
+                "up"
+            ],
+            [
+                "j",
+                "down"
+            ],
+            [
+                "h",
+                "left"
+            ],
+            [
+                "l",
+                "right"
+            ],
+            [
+                "",
+                "cancel"
+            ],
+            [
+                "escape",
+                "cancel"
+            ]
+        ]),
+        messages: {
+            cancel: "Canceled",
+            error: "Something went wrong"
+        },
+        withGuide: !0
+    };
+    globalThis.process.platform.startsWith("win");
+    Symbol("clack:cancel");
+    require("node:fs");
+    function dist_pt() {
+        return "win32" !== external_node_process_namespaceObject.platform ? "linux" !== external_node_process_namespaceObject.env.TERM : !!external_node_process_namespaceObject.env.CI || !!external_node_process_namespaceObject.env.WT_SESSION || !!external_node_process_namespaceObject.env.TERMINUS_SUBLIME || "{cmd::Cmder}" === external_node_process_namespaceObject.env.ConEmuTask || "Terminus-Sublime" === external_node_process_namespaceObject.env.TERM_PROGRAM || "vscode" === external_node_process_namespaceObject.env.TERM_PROGRAM || "xterm-256color" === external_node_process_namespaceObject.env.TERM || "alacritty" === external_node_process_namespaceObject.env.TERM || "JetBrains-JediTerm" === external_node_process_namespaceObject.env.TERMINAL_EMULATOR;
+    }
+    const ee = dist_pt(), dist_I = (e, r)=>ee ? e : r, dist_h = (dist_I("\u25C6", "*"), dist_I("\u25A0", "x"), dist_I("\u25B2", "x"), dist_I("\u25C7", "o"), dist_I("\u250C", "T"), dist_I("\u2502", "|")), Ce = (dist_I("\u2514", "\u2014"), dist_I("\u2510", "T"), dist_I("\u2518", "\u2014"), dist_I("\u25CF", ">"), dist_I("\u25CB", " "), dist_I("\u25FB", "[\u2022]"), dist_I("\u25FC", "[+]"), dist_I("\u25FB", "[ ]"), dist_I("\u25AA", "\u2022"), dist_I("\u2500", "-"), dist_I("\u256E", "+"), dist_I("\u251C", "+"), dist_I("\u256F", "+"), dist_I("\u2570", "+"), dist_I("\u256D", "+"), dist_I("\u25CF", "\u2022"), dist_I("\u25C6", "*"), dist_I("\u25B2", "!"), dist_I("\u25A0", "x"), "\x07"), ke = "[", dist_wt = "]", Se = `${dist_wt}8;;`;
+    new RegExp(`(?:\\${ke}(?<code>\\d+)m|\\${Se}(?<uri>.*)${Ce})`, "y");
+    dist_I("\u2500", "-"), dist_I("\u2501", "="), dist_I("\u2588", "#");
+    (0, external_node_util_namespaceObject.styleText)("gray", dist_h);
     async function readSkillsLock(rootDir) {
         const filePath = external_node_path_namespaceObject.join(rootDir, 'skills-lock.yaml');
         try {
@@ -6458,19 +6647,58 @@ var __webpack_exports__ = {};
         return `sha256-${(0, external_node_crypto_namespaceObject.createHash)('sha256').update(content).digest('hex')}`;
     }
     const execFileAsync = (0, external_node_util_namespaceObject.promisify)(external_node_child_process_namespaceObject.execFile);
+    async function resolveGitCommitByLsRemote(url, target) {
+        try {
+            const { stdout } = await execFileAsync('git', [
+                'ls-remote',
+                url,
+                target,
+                `${target}^{}`
+            ]);
+            const lines = stdout.trim().split('\n').map((line)=>line.trim()).filter(Boolean);
+            const peeledLine = lines.find((line)=>line.endsWith('^{}'));
+            const resolvedLine = peeledLine ?? lines[0];
+            return resolvedLine?.split('\t')[0]?.trim() || null;
+        } catch  {
+            return null;
+        }
+    }
+    async function resolveGitCommitByClone(url, target) {
+        const checkoutRoot = await (0, promises_namespaceObject.mkdtemp)(external_node_path_namespaceObject.join((0, external_node_os_namespaceObject.tmpdir)(), 'skills-pm-git-ref-'));
+        try {
+            await execFileAsync('git', [
+                'clone',
+                '--bare',
+                '--quiet',
+                url,
+                checkoutRoot
+            ]);
+            const { stdout } = await execFileAsync('git', [
+                'rev-parse',
+                '--verify',
+                `${target}^{commit}`
+            ], {
+                cwd: checkoutRoot
+            });
+            return stdout.trim().split('\n')[0]?.trim() || null;
+        } catch  {
+            return null;
+        } finally{
+            await (0, promises_namespaceObject.rm)(checkoutRoot, {
+                recursive: true,
+                force: true
+            }).catch(()=>{});
+        }
+    }
     async function resolveGitCommit(url, ref) {
         const target = ref ?? 'HEAD';
-        const { stdout } = await execFileAsync('git', [
-            'ls-remote',
-            url,
-            target
-        ]);
-        const line = stdout.trim().split('\n')[0];
-        const commit = line?.split('\t')[0]?.trim();
-        if (!commit) throw new Error(`Unable to resolve git ref ${target} for ${url}`);
-        return commit;
+        const commit = await resolveGitCommitByLsRemote(url, target);
+        if (commit) return commit;
+        const clonedCommit = await resolveGitCommitByClone(url, target);
+        if (clonedCommit) return clonedCommit;
+        throw new Error(`Unable to resolve git ref ${target} for ${url}`);
     }
-    async function createLockEntry(cwd, specifier) {
+    async function resolveLockEntry(cwd, specifier) {
         const normalized = normalizeSpecifier(specifier);
         if ('file' === normalized.type) {
             const sourceRoot = external_node_path_namespaceObject.resolve(cwd, normalized.source.slice(5));
@@ -6480,7 +6708,7 @@ var __webpack_exports__ = {};
                     specifier: normalized.normalized,
                     resolution: {
                         type: 'file',
-                        path: sourceRoot
+                        path: external_node_path_namespaceObject.relative(cwd, sourceRoot) || '.'
                     },
                     digest: sha256(`${sourceRoot}:${normalized.path}`)
                 }
@@ -6507,7 +6735,7 @@ var __webpack_exports__ = {};
     async function syncSkillsLock(cwd, manifest, existingLock) {
         const nextSkills = {};
         for (const specifier of Object.values(manifest.skills)){
-            const { skillName, entry } = await createLockEntry(cwd, specifier);
+            const { skillName, entry } = await resolveLockEntry(cwd, specifier);
             nextSkills[skillName] = entry;
         }
         return {
@@ -6521,6 +6749,14 @@ var __webpack_exports__ = {};
         const filePath = external_node_path_namespaceObject.join(rootDir, 'skills-lock.yaml');
         await (0, promises_namespaceObject.writeFile)(filePath, dist.stringify(lockfile), 'utf8');
     }
+    (0, external_node_util_namespaceObject.promisify)(external_node_child_process_namespaceObject.execFile);
+    new Set([
+        'node_modules',
+        '.git',
+        'dist',
+        'build',
+        '__pycache__'
+    ]);
     async function ensureDir(dirPath) {
         await (0, promises_namespaceObject.mkdir)(dirPath, {
             recursive: true
@@ -6575,11 +6811,59 @@ var __webpack_exports__ = {};
         });
         await writeJson(external_node_path_namespaceObject.join(targetDir, '.skills-pm.json'), {
             name: skillName,
-            installedBy: 'skills-pm',
+            installedBy: 'skills-package-manager',
             version: '0.1.0'
         });
     }
     const materializeGitSkill_execFileAsync = (0, external_node_util_namespaceObject.promisify)(external_node_child_process_namespaceObject.execFile);
+    async function checkoutCommit(checkoutRoot, commit) {
+        await materializeGitSkill_execFileAsync('git', [
+            'checkout',
+            commit
+        ], {
+            cwd: checkoutRoot
+        });
+    }
+    async function fetchCommitFallback(checkoutRoot, commit) {
+        try {
+            await materializeGitSkill_execFileAsync('git', [
+                'fetch',
+                '--depth',
+                '1',
+                'origin',
+                commit
+            ], {
+                cwd: checkoutRoot
+            });
+            return;
+        } catch  {}
+        try {
+            await materializeGitSkill_execFileAsync('git', [
+                'fetch',
+                '--tags',
+                'origin'
+            ], {
+                cwd: checkoutRoot
+            });
+            return;
+        } catch  {}
+        try {
+            await materializeGitSkill_execFileAsync('git', [
+                'fetch',
+                '--unshallow',
+                'origin'
+            ], {
+                cwd: checkoutRoot
+            });
+        } catch  {
+            await materializeGitSkill_execFileAsync('git', [
+                'fetch',
+                'origin'
+            ], {
+                cwd: checkoutRoot
+            });
+        }
+    }
     async function materializeGitSkill(rootDir, skillName, repoUrl, commit, sourcePath, installDir) {
         const checkoutRoot = await (0, promises_namespaceObject.mkdtemp)(external_node_path_namespaceObject.join((0, external_node_os_namespaceObject.tmpdir)(), 'skills-pm-git-checkout-'));
         try {
@@ -6590,12 +6874,12 @@ var __webpack_exports__ = {};
                 repoUrl,
                 checkoutRoot
             ]);
-            if (commit && 'HEAD' !== commit) await materializeGitSkill_execFileAsync('git', [
-                'checkout',
-                commit
-            ], {
-                cwd: checkoutRoot
-            });
+            if (commit && 'HEAD' !== commit) try {
+                await checkoutCommit(checkoutRoot, commit);
+            } catch  {
+                await fetchCommitFallback(checkoutRoot, commit);
+                await checkoutCommit(checkoutRoot, commit);
+            }
             const skillDocPath = external_node_path_namespaceObject.join(checkoutRoot, sourcePath.replace(/^\//, ''), 'SKILL.md');
             await (0, promises_namespaceObject.readFile)(skillDocPath, 'utf8');
             await materializeLocalSkill(rootDir, skillName, checkoutRoot, sourcePath, installDir);
@@ -6609,7 +6893,7 @@ var __webpack_exports__ = {};
     async function isManagedSkillDir(dirPath) {
         try {
             const marker = JSON.parse(await (0, promises_namespaceObject.readFile)(external_node_path_namespaceObject.join(dirPath, '.skills-pm.json'), 'utf8'));
-            return marker?.installedBy === 'skills-pm';
+            return marker?.installedBy === 'skills-package-manager';
         } catch  {
             return false;
         }
@@ -6643,21 +6927,17 @@ var __webpack_exports__ = {};
             }
         } catch  {}
     }
+    const installStageHooks = {
+        beforeFetch: async (_rootDir, _manifest, _lockfile)=>{}
+    };
     function extractSkillPath(specifier, skillName) {
         const marker = '#path:';
         const index = specifier.indexOf(marker);
         if (index >= 0) return specifier.slice(index + marker.length);
         return `/${skillName}`;
     }
-    async function installSkills(rootDir) {
-        const manifest = await readSkillsManifest(rootDir);
-        if (!manifest) return {
-            status: 'skipped',
-            reason: 'manifest-missing'
-        };
-        const currentLock = await readSkillsLock(rootDir);
-        const lockfile = await syncSkillsLock(rootDir, manifest, currentLock);
-        await writeSkillsLock(rootDir, lockfile);
+    async function fetchSkillsFromLock(rootDir, manifest, lockfile) {
+        await installStageHooks.beforeFetch(rootDir, manifest, lockfile);
         const lockDigest = sha256(JSON.stringify(lockfile));
         const state = await readInstallState(rootDir);
         if (state?.lockDigest === lockDigest) return {
@@ -6668,10 +6948,15 @@ var __webpack_exports__ = {};
         const linkTargets = manifest.linkTargets ?? [];
         await pruneManagedSkills(rootDir, installDir, linkTargets, Object.keys(lockfile.skills));
         for (const [skillName, entry] of Object.entries(lockfile.skills)){
-            if ('file' === entry.resolution.type) await materializeLocalSkill(rootDir, skillName, entry.resolution.path, extractSkillPath(entry.specifier, skillName), installDir);
-            else if ('git' === entry.resolution.type) await materializeGitSkill(rootDir, skillName, entry.resolution.url, entry.resolution.commit, entry.resolution.path, installDir);
-            else throw new Error(`Unsupported resolution type in 0.1.0 core flow: ${entry.resolution.type}`);
-            for (const linkTarget of linkTargets)await linkSkill(rootDir, installDir, linkTarget, skillName);
+            if ('file' === entry.resolution.type) {
+                await materializeLocalSkill(rootDir, skillName, external_node_path_namespaceObject.resolve(rootDir, entry.resolution.path), extractSkillPath(entry.specifier, skillName), installDir);
+                continue;
+            }
+            if ('git' === entry.resolution.type) {
+                await materializeGitSkill(rootDir, skillName, entry.resolution.url, entry.resolution.commit, entry.resolution.path, installDir);
+                continue;
+            }
+            throw new Error(`Unsupported resolution type in 0.1.0 core flow: ${entry.resolution.type}`);
         }
         await writeInstallState(rootDir, {
             lockDigest,
@@ -6680,6 +6965,31 @@ var __webpack_exports__ = {};
             installerVersion: '0.1.0',
             installedAt: new Date().toISOString()
         });
+        return {
+            status: 'fetched',
+            fetched: Object.keys(lockfile.skills)
+        };
+    }
+    async function linkSkillsFromLock(rootDir, manifest, lockfile) {
+        const installDir = manifest.installDir ?? '.agents/skills';
+        const linkTargets = manifest.linkTargets ?? [];
+        for (const skillName of Object.keys(lockfile.skills))for (const linkTarget of linkTargets)await linkSkill(rootDir, installDir, linkTarget, skillName);
+        return {
+            status: 'linked',
+            linked: Object.keys(lockfile.skills)
+        };
+    }
+    async function installSkills(rootDir) {
+        const manifest = await readSkillsManifest(rootDir);
+        if (!manifest) return {
+            status: 'skipped',
+            reason: 'manifest-missing'
+        };
+        const currentLock = await readSkillsLock(rootDir);
+        const lockfile = await syncSkillsLock(rootDir, manifest, currentLock);
+        await fetchSkillsFromLock(rootDir, manifest, lockfile);
+        await linkSkillsFromLock(rootDir, manifest, lockfile);
+        await writeSkillsLock(rootDir, lockfile);
         return {
             status: 'installed',
             installed: Object.keys(lockfile.skills)
@@ -6688,6 +6998,10 @@ var __webpack_exports__ = {};
     async function installCommand(options) {
         return installSkills(options.cwd);
     }
+    var package_namespaceObject = {
+        rE: "0.2.0"
+    };
+    package_namespaceObject.rE;
     async function preResolution(options = {}) {
         const lockfileDir = options.lockfileDir;
         if (!lockfileDir) return;