reskill 1.14.0 → 1.15.0

package/dist/cli/commands/doctor.d.ts

@@ -49,6 +49,21 @@ export declare function checkGitVersion(): CheckResult;
  * Check Git authentication
  */
 export declare function checkGitAuth(): CheckResult;
+/**
+ * Check registry authentication status
+ *
+ * Verifies actual token availability, not just file existence.
+ * Uses AuthManager.getToken() which checks RESKILL_TOKEN env first,
+ * then reads ~/.reskillrc for the configured registry.
+ */
+export declare function checkAuthStatus(): CheckResult;
+/**
+ * Check environment variables used by reskill
+ *
+ * Security: Only report variable names, never values.
+ * RESKILL_TOKEN contains a secret and must not be displayed.
+ */
+export declare function checkEnvVars(): CheckResult;
 /**
  * Check cache directory
  */
@@ -65,6 +80,14 @@ export declare function checkRegistryConflicts(cwd: string): CheckResult[];
  * Check for dangerous installDir configuration
  */
 export declare function checkInstallDir(cwd: string): CheckResult | null;
+/**
+ * Check for invalid installMode configuration
+ */
+export declare function checkInstallMode(cwd: string): CheckResult | null;
+/**
+ * Check for invalid publishRegistry configuration
+ */
+export declare function checkPublishRegistry(cwd: string): CheckResult | null;
 /**
  * Check for invalid targetAgents configuration
  */
@@ -95,6 +118,17 @@ export interface SkillIssue {
  * Only checks for SKILL.md since that's the sole source of metadata
  */
 export declare function checkInstalledSkills(cwd: string): CheckResult[];
+/**
+ * Check detected agents
+ */
+export declare function checkDetectedAgents(): Promise<CheckResult>;
+/**
+ * Get custom registry URLs for network checks
+ *
+ * Reads registries from skills.json and publishRegistry,
+ * excluding built-in github.com/gitlab.com and deduplicating.
+ */
+export declare function getCustomRegistryUrls(cwd: string): string[];
 /**
  * Check network connectivity
  */

package/dist/cli/commands/doctor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/doctor.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAUpC;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,IAAI,GAAG,MAAM,GAAG,OAAO,CAAC;AAElD,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,WAAW,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CASzD;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAM1D;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAkBlD;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMjD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CA2B1D;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CACvC,cAAc,EAAE,MAAM,EACtB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,WAAW,CAAC,CAuBtB;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,WAAW,CAmB9C;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,WAAW,CAqB7C;AAED;;GAEG;AACH,wBAAgB,YAAY,IAAI,WAAW,CAiD1C;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,WAAW,CAmB3C;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CA4BxD;AAwCD;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,EAAE,CA2BjE;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAwC/D;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,EAAE,CA2B5D;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,EAAE,CAoDzD;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,EAAE,CAkEhE;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAsExD;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,GAAG,MAAM,CAAC;CAC5B;AAmBD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,EAAE,CA2E/D;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAoCrE;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI,CAUrD;AAED;;GAEG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE;IAC7C,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CA4CzB;AAED;;GAEG;AACH,eAAO,MAAM,aAAa,SAgDtB,CAAC;AAEL,eAAe,aAAa,CAAC"}
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/doctor.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAWpC;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,IAAI,GAAG,MAAM,GAAG,OAAO,CAAC;AAElD,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,WAAW,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CASzD;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAM1D;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAkBlD;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMjD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CA2B1D;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CACvC,cAAc,EAAE,MAAM,EACtB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,WAAW,CAAC,CAuBtB;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,WAAW,CAmB9C;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,WAAW,CAqB7C;AAED;;GAEG;AACH,wBAAgB,YAAY,IAAI,WAAW,CAiD1C;AAUD;;;;;;GAMG;AACH,wBAAgB,eAAe,IAAI,WAAW,CAwC7C;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,IAAI,WAAW,CA2B1C;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,WAAW,CAmB3C;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CA4BxD;AAwCD;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,EAAE,CAqCjE;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAwC/D;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CA4BhE;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CA4BpE;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,EAAE,CA2B5D;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,EAAE,CAoDzD;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,EAAE,CAkEhE;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAkFxD;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,GAAG,MAAM,CAAC;CAC5B;AAmBD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,EAAE,CA2E/D;AAED;;GAEG;AACH,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,WAAW,CAAC,CAwBhE;AAcD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAqC3D;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAoCrE;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI,CAUrD;AAED;;GAEG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE;IAC7C,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAiEzB;AAED;;GAEG;AACH,eAAO,MAAM,aAAa,SAgDtB,CAAC;AAEL,eAAe,aAAa,CAAC"}

package/dist/cli/index.js

@@ -5237,6 +5237,133 @@ class RegistryResolver {
     }
     return false;
 }
+/**
+ * AuthManager - Handle authentication token management
+ *
+ * Manages tokens for registry authentication.
+ * Tokens are stored in ~/.reskillrc or via RESKILL_TOKEN environment variable.
+ */ // ============================================================================
+// Constants
+// ============================================================================
+const CONFIG_FILE_NAME = '.reskillrc';
+// ============================================================================
+// AuthManager Class
+// ============================================================================
+class AuthManager {
+    configPath;
+    constructor(){
+        const home = process.env.HOME || process.env.USERPROFILE || '';
+        this.configPath = __WEBPACK_EXTERNAL_MODULE_node_path__.join(home, CONFIG_FILE_NAME);
+    }
+    /**
+   * Get the default registry URL from environment variable
+   *
+   * Returns undefined if no registry is configured - there is no hardcoded default
+   * to prevent accidental publishing to unintended registries.
+   */ getDefaultRegistry() {
+        return process.env.RESKILL_REGISTRY;
+    }
+    /**
+   * Get path to config file
+   */ getConfigPath() {
+        return this.configPath;
+    }
+    /**
+   * Get token for a registry
+   *
+   * Priority:
+   * 1. RESKILL_TOKEN environment variable
+   * 2. Token from ~/.reskillrc for the specified registry
+   */ getToken(registry) {
+        // Check environment variable first
+        const envToken = process.env.RESKILL_TOKEN;
+        if (envToken) return envToken;
+        // Read from config file
+        const config = this.readConfig();
+        if (!config?.registries) return;
+        const targetRegistry = registry || this.getDefaultRegistry();
+        if (!targetRegistry) return;
+        const auth = config.registries[targetRegistry];
+        return auth?.token;
+    }
+    /**
+   * Check if token exists for a registry
+   */ hasToken(registry) {
+        return void 0 !== this.getToken(registry);
+    }
+    /**
+   * Get email for a registry
+   */ getEmail(registry) {
+        const config = this.readConfig();
+        if (!config?.registries) return;
+        const targetRegistry = registry || this.getDefaultRegistry();
+        if (!targetRegistry) return;
+        const auth = config.registries[targetRegistry];
+        return auth?.email;
+    }
+    /**
+   * Get handle for a registry
+   */ getHandle(registry) {
+        const config = this.readConfig();
+        if (!config?.registries) return;
+        const targetRegistry = registry || this.getDefaultRegistry();
+        if (!targetRegistry) return;
+        const auth = config.registries[targetRegistry];
+        return auth?.handle;
+    }
+    /**
+   * Set token for a registry
+   *
+   * Note: When no registry is specified and RESKILL_REGISTRY env var is not set,
+   * this method will throw an error. The calling code should ensure a registry
+   * is always provided (either explicitly or via environment variable).
+   */ setToken(token, registry, email, handle) {
+        const config = this.readConfig() || {};
+        const targetRegistry = registry || this.getDefaultRegistry();
+        if (!targetRegistry) throw new Error('No registry specified. Set RESKILL_REGISTRY environment variable or provide registry explicitly.');
+        if (!config.registries) config.registries = {};
+        config.registries[targetRegistry] = {
+            token,
+            ...email && {
+                email
+            },
+            ...handle && {
+                handle
+            }
+        };
+        this.writeConfig(config);
+    }
+    /**
+   * Remove token for a registry
+   */ removeToken(registry) {
+        const config = this.readConfig();
+        if (!config?.registries) return;
+        const targetRegistry = registry || this.getDefaultRegistry();
+        if (!targetRegistry) return;
+        delete config.registries[targetRegistry];
+        this.writeConfig(config);
+    }
+    /**
+   * Read config file
+   */ readConfig() {
+        try {
+            if (!external_node_fs_.existsSync(this.configPath)) return null;
+            const content = external_node_fs_.readFileSync(this.configPath, 'utf-8');
+            if (!content.trim()) return null;
+            return JSON.parse(content);
+        } catch  {
+            return null;
+        }
+    }
+    /**
+   * Write config file
+   */ writeConfig(config) {
+        const content = JSON.stringify(config, null, 2);
+        external_node_fs_.writeFileSync(this.configPath, content, {
+            mode: 384
+        });
+    }
+}
 /**
  * Get status icon
  */ function getStatusIcon(status) {
@@ -5444,6 +5571,73 @@ class RegistryResolver {
         hint: 'For private repos, add SSH key: ssh-keygen -t ed25519'
     };
 }
+/**
+ * Valid install modes
+ *
+ * Must stay in sync with InstallMode type from installer.ts ('symlink' | 'copy').
+ * TypeScript literal union types are erased at runtime, so we maintain this list manually.
+ */ const VALID_INSTALL_MODES = [
+    'symlink',
+    'copy'
+];
+/**
+ * Check registry authentication status
+ *
+ * Verifies actual token availability, not just file existence.
+ * Uses AuthManager.getToken() which checks RESKILL_TOKEN env first,
+ * then reads ~/.reskillrc for the configured registry.
+ */ function checkAuthStatus() {
+    const hasEnvToken = !!process.env.RESKILL_TOKEN;
+    if (hasEnvToken) return {
+        name: 'Registry auth',
+        status: 'ok',
+        message: 'RESKILL_TOKEN set'
+    };
+    // Check if ~/.reskillrc has any valid tokens
+    const authManager = new AuthManager();
+    const configPath = authManager.getConfigPath();
+    if (!(0, external_node_fs_.existsSync)(configPath)) return {
+        name: 'Registry auth',
+        status: 'warn',
+        message: 'no token configured',
+        hint: 'Run: reskill login (needed for publish and private skills)'
+    };
+    // File exists — check if it actually contains a token for any registry
+    const hasToken = authManager.hasToken();
+    if (hasToken) return {
+        name: 'Registry auth',
+        status: 'ok',
+        message: 'token configured via ~/.reskillrc'
+    };
+    return {
+        name: 'Registry auth',
+        status: 'warn',
+        message: '~/.reskillrc exists but no token found for current registry',
+        hint: 'Run: reskill login (needed for publish and private skills)'
+    };
+}
+/**
+ * Check environment variables used by reskill
+ *
+ * Security: Only report variable names, never values.
+ * RESKILL_TOKEN contains a secret and must not be displayed.
+ */ function checkEnvVars() {
+    // Only collect names, never values (RESKILL_TOKEN is a secret)
+    const vars = [];
+    if (process.env.RESKILL_TOKEN) vars.push('RESKILL_TOKEN');
+    if (process.env.RESKILL_REGISTRY) vars.push('RESKILL_REGISTRY');
+    if (process.env.RESKILL_CACHE_DIR) vars.push('RESKILL_CACHE_DIR');
+    if (0 === vars.length) return {
+        name: 'Environment vars',
+        status: 'ok',
+        message: 'none set'
+    };
+    return {
+        name: 'Environment vars',
+        status: 'ok',
+        message: `${vars.join(', ')} set`
+    };
+}
 /**
  * Check cache directory
  */ function checkCacheDir() {
@@ -5535,12 +5729,21 @@ class RegistryResolver {
     try {
         const config = configLoader.load();
         const registries = config.registries || {};
-        for (const name of Object.keys(registries))if (RESERVED_REGISTRIES.includes(name.toLowerCase())) results.push({
-            name: 'Registry conflict',
-            status: 'warn',
-            message: `"${name}" overrides built-in registry`,
-            hint: 'Consider using a different name for custom registries'
-        });
+        for (const [name, url] of Object.entries(registries)){
+            if (RESERVED_REGISTRIES.includes(name.toLowerCase())) results.push({
+                name: 'Registry conflict',
+                status: 'warn',
+                message: `"${name}" overrides built-in registry`,
+                hint: 'Consider using a different name for custom registries'
+            });
+            // Validate URL format
+            if ('string' == typeof url && !/^https?:\/\//.test(url)) results.push({
+                name: 'Invalid registry URL',
+                status: 'error',
+                message: `"${name}": "${url}" is not a valid URL`,
+                hint: 'Registry URLs must start with http:// or https://'
+            });
+        }
     } catch  {
     // Ignore parse errors, handled by checkSkillsJson
     }
@@ -5575,6 +5778,46 @@ class RegistryResolver {
     }
     return null;
 }
+/**
+ * Check for invalid installMode configuration
+ */ function checkInstallMode(cwd) {
+    const configLoader = new ConfigLoader(cwd);
+    if (!configLoader.exists()) return null;
+    try {
+        const defaults = configLoader.getDefaults();
+        const installMode = defaults.installMode;
+        if (!installMode) return null;
+        if (!VALID_INSTALL_MODES.includes(installMode)) return {
+            name: 'Invalid installMode',
+            status: 'error',
+            message: `"${installMode}" is not a valid install mode`,
+            hint: 'Valid values: symlink, copy'
+        };
+    } catch  {
+    // Ignore parse errors
+    }
+    return null;
+}
+/**
+ * Check for invalid publishRegistry configuration
+ */ function checkPublishRegistry(cwd) {
+    const configLoader = new ConfigLoader(cwd);
+    if (!configLoader.exists()) return null;
+    try {
+        const defaults = configLoader.getDefaults();
+        const publishRegistry = defaults.publishRegistry;
+        if (!publishRegistry) return null;
+        if (!/^https?:\/\//.test(publishRegistry)) return {
+            name: 'Invalid publishRegistry',
+            status: 'warn',
+            message: `"${publishRegistry}" is not a valid URL`,
+            hint: 'publishRegistry must start with http:// or https://'
+        };
+    } catch  {
+    // Ignore parse errors
+    }
+    return null;
+}
 /**
  * Check for invalid targetAgents configuration
  */ function checkTargetAgents(cwd) {
@@ -5711,6 +5954,15 @@ class RegistryResolver {
             hint: 'Run: reskill install'
         };
     }
+    // Check lockfile version compatibility before sync check
+    // If version is unsupported, sync results would be meaningless
+    const lockData = lockManager.load();
+    if (lockData.lockfileVersion !== LOCKFILE_VERSION) return {
+        name: 'skills.lock',
+        status: 'warn',
+        message: `unsupported lockfile version: ${lockData.lockfileVersion}`,
+        hint: 'Run: reskill install to regenerate'
+    };
     // Check if lock is in sync with config
     const configSkills = configLoader.getSkills();
     const lockedSkills = lockManager.getAll();
@@ -5821,6 +6073,66 @@ class RegistryResolver {
     }
     return results;
 }
+/**
+ * Check detected agents
+ */ async function checkDetectedAgents() {
+    try {
+        const installed = await detectInstalledAgents();
+        if (0 === installed.length) return {
+            name: 'Detected agents',
+            status: 'ok',
+            message: 'none detected'
+        };
+        return {
+            name: 'Detected agents',
+            status: 'ok',
+            message: `${installed.length} detected: ${installed.join(', ')}`
+        };
+    } catch  {
+        return {
+            name: 'Detected agents',
+            status: 'warn',
+            message: 'detection failed'
+        };
+    }
+}
+/**
+ * Normalize a URL to its origin for comparison.
+ * Handles trailing slashes and case differences (e.g., GITHUB.COM → github.com).
+ */ function normalizeUrlOrigin(url) {
+    try {
+        return new URL(url).origin;
+    } catch  {
+        return url;
+    }
+}
+/**
+ * Get custom registry URLs for network checks
+ *
+ * Reads registries from skills.json and publishRegistry,
+ * excluding built-in github.com/gitlab.com and deduplicating.
+ */ function getCustomRegistryUrls(cwd) {
+    const urls = new Set();
+    const builtinOrigins = new Set(Object.values(DEFAULT_REGISTRIES).map((u)=>normalizeUrlOrigin(u)));
+    try {
+        const configLoader = new ConfigLoader(cwd);
+        if (!configLoader.exists()) return [];
+        // Collect custom registry URLs
+        const config = configLoader.load();
+        const registries = config.registries || {};
+        for (const url of Object.values(registries))if ('string' == typeof url && /^https?:\/\//.test(url) && !builtinOrigins.has(normalizeUrlOrigin(url))) urls.add(url);
+        // Collect publishRegistry
+        const defaults = configLoader.getDefaults();
+        if (defaults.publishRegistry && /^https?:\/\//.test(defaults.publishRegistry)) {
+            if (!builtinOrigins.has(normalizeUrlOrigin(defaults.publishRegistry))) urls.add(defaults.publishRegistry);
+        }
+    } catch  {
+    // Ignore errors
+    }
+    return [
+        ...urls
+    ];
+}
 /**
  * Check network connectivity
  */ async function checkNetwork(host) {
@@ -5867,23 +6179,32 @@ class RegistryResolver {
  */ async function runDoctorChecks(options) {
     const { cwd, packageName, packageVersion, skipNetwork, skipConfigChecks } = options;
     const results = [];
-    // Version checks
+    // Environment checks
     results.push(await checkReskillVersion(packageVersion, packageName));
     results.push(checkNodeVersion());
     results.push(checkGitVersion());
     results.push(checkGitAuth());
+    results.push(checkAuthStatus());
+    results.push(checkEnvVars());
     // Directory checks
     results.push(checkCacheDir());
     results.push(checkSkillsJson(cwd));
     results.push(checkSkillsLock(cwd));
     results.push(...checkInstalledSkills(cwd));
+    results.push(await checkDetectedAgents());
     // Deep config checks (can be skipped for faster checks)
     if (!skipConfigChecks) {
-        // Registry conflicts
+        // Registry conflicts + URL validation
         results.push(...checkRegistryConflicts(cwd));
         // installDir validation
         const installDirCheck = checkInstallDir(cwd);
         if (installDirCheck) results.push(installDirCheck);
+        // installMode validation
+        const installModeCheck = checkInstallMode(cwd);
+        if (installModeCheck) results.push(installModeCheck);
+        // publishRegistry validation
+        const publishRegistryCheck = checkPublishRegistry(cwd);
+        if (publishRegistryCheck) results.push(publishRegistryCheck);
         // targetAgents validation
         results.push(...checkTargetAgents(cwd));
         // Skill reference format validation
@@ -5895,6 +6216,9 @@ class RegistryResolver {
     if (!skipNetwork) {
         results.push(await checkNetwork('https://github.com'));
         results.push(await checkNetwork('https://gitlab.com'));
+        // Custom registry connectivity
+        const customUrls = getCustomRegistryUrls(cwd);
+        for (const url of customUrls)results.push(await checkNetwork(url));
     }
     return results;
 }
@@ -6191,133 +6515,6 @@ const DEFAULT_INSTALL_DIR = '.skills';
     // Display summary (use options.installDir directly since we just set it)
     displayConfigSummary(options.installDir);
 });
-/**
- * AuthManager - Handle authentication token management
- *
- * Manages tokens for registry authentication.
- * Tokens are stored in ~/.reskillrc or via RESKILL_TOKEN environment variable.
- */ // ============================================================================
-// Constants
-// ============================================================================
-const CONFIG_FILE_NAME = '.reskillrc';
-// ============================================================================
-// AuthManager Class
-// ============================================================================
-class AuthManager {
-    configPath;
-    constructor(){
-        const home = process.env.HOME || process.env.USERPROFILE || '';
-        this.configPath = __WEBPACK_EXTERNAL_MODULE_node_path__.join(home, CONFIG_FILE_NAME);
-    }
-    /**
-   * Get the default registry URL from environment variable
-   *
-   * Returns undefined if no registry is configured - there is no hardcoded default
-   * to prevent accidental publishing to unintended registries.
-   */ getDefaultRegistry() {
-        return process.env.RESKILL_REGISTRY;
-    }
-    /**
-   * Get path to config file
-   */ getConfigPath() {
-        return this.configPath;
-    }
-    /**
-   * Get token for a registry
-   *
-   * Priority:
-   * 1. RESKILL_TOKEN environment variable
-   * 2. Token from ~/.reskillrc for the specified registry
-   */ getToken(registry) {
-        // Check environment variable first
-        const envToken = process.env.RESKILL_TOKEN;
-        if (envToken) return envToken;
-        // Read from config file
-        const config = this.readConfig();
-        if (!config?.registries) return;
-        const targetRegistry = registry || this.getDefaultRegistry();
-        if (!targetRegistry) return;
-        const auth = config.registries[targetRegistry];
-        return auth?.token;
-    }
-    /**
-   * Check if token exists for a registry
-   */ hasToken(registry) {
-        return void 0 !== this.getToken(registry);
-    }
-    /**
-   * Get email for a registry
-   */ getEmail(registry) {
-        const config = this.readConfig();
-        if (!config?.registries) return;
-        const targetRegistry = registry || this.getDefaultRegistry();
-        if (!targetRegistry) return;
-        const auth = config.registries[targetRegistry];
-        return auth?.email;
-    }
-    /**
-   * Get handle for a registry
-   */ getHandle(registry) {
-        const config = this.readConfig();
-        if (!config?.registries) return;
-        const targetRegistry = registry || this.getDefaultRegistry();
-        if (!targetRegistry) return;
-        const auth = config.registries[targetRegistry];
-        return auth?.handle;
-    }
-    /**
-   * Set token for a registry
-   *
-   * Note: When no registry is specified and RESKILL_REGISTRY env var is not set,
-   * this method will throw an error. The calling code should ensure a registry
-   * is always provided (either explicitly or via environment variable).
-   */ setToken(token, registry, email, handle) {
-        const config = this.readConfig() || {};
-        const targetRegistry = registry || this.getDefaultRegistry();
-        if (!targetRegistry) throw new Error('No registry specified. Set RESKILL_REGISTRY environment variable or provide registry explicitly.');
-        if (!config.registries) config.registries = {};
-        config.registries[targetRegistry] = {
-            token,
-            ...email && {
-                email
-            },
-            ...handle && {
-                handle
-            }
-        };
-        this.writeConfig(config);
-    }
-    /**
-   * Remove token for a registry
-   */ removeToken(registry) {
-        const config = this.readConfig();
-        if (!config?.registries) return;
-        const targetRegistry = registry || this.getDefaultRegistry();
-        if (!targetRegistry) return;
-        delete config.registries[targetRegistry];
-        this.writeConfig(config);
-    }
-    /**
-   * Read config file
-   */ readConfig() {
-        try {
-            if (!external_node_fs_.existsSync(this.configPath)) return null;
-            const content = external_node_fs_.readFileSync(this.configPath, 'utf-8');
-            if (!content.trim()) return null;
-            return JSON.parse(content);
-        } catch  {
-            return null;
-        }
-    }
-    /**
-   * Write config file
-   */ writeConfig(config) {
-        const content = JSON.stringify(config, null, 2);
-        external_node_fs_.writeFileSync(this.configPath, content, {
-            mode: 384
-        });
-    }
-}
 // ============================================================================
 // Utility Functions
 // ============================================================================

package/dist/core/lock-manager.d.ts

@@ -1,4 +1,8 @@
 import type { LockedSkill, SkillsLock } from '../types/index.js';
+/**
+ * Current lockfile version
+ */
+export declare const LOCKFILE_VERSION = 1;
 /**
  * LockManager - Manage skills.lock file
  *

package/dist/core/lock-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lock-manager.d.ts","sourceRoot":"","sources":["../../src/core/lock-manager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAQjE;;;;GAIG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,QAAQ,CAA2B;gBAE/B,WAAW,CAAC,EAAE,MAAM;IAKhC;;OAEG;IACH,WAAW,IAAI,MAAM;IAIrB;;OAEG;IACH,MAAM,IAAI,OAAO;IAIjB;;OAEG;IACH,IAAI,IAAI,UAAU;IAsBlB;;OAEG;IACH,MAAM,IAAI,UAAU;IAKpB;;OAEG;IACH,IAAI,CAAC,UAAU,CAAC,EAAE,UAAU,GAAG,IAAI;IASnC;;OAEG;IACH,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAK1C;;OAEG;IACH,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,IAAI;IAM3C;;OAEG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAU7B;;OAEG;IACH,SAAS,CACP,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE;QACP,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,GAAG,EAAE,MAAM,CAAC;QACZ,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GACA,WAAW;IAmBd;;OAEG;IACH,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC;IAKrC;;OAEG;IACH,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAK1B;;OAEG;IACH,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO;IAQtD;;OAEG;IACH,KAAK,IAAI,IAAI;IAQb;;OAEG;IACH,MAAM,IAAI,IAAI;CAOf;AAED,eAAe,WAAW,CAAC"}
+{"version":3,"file":"lock-manager.d.ts","sourceRoot":"","sources":["../../src/core/lock-manager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAGjE;;GAEG;AACH,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAElC;;;;GAIG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,QAAQ,CAA2B;gBAE/B,WAAW,CAAC,EAAE,MAAM;IAKhC;;OAEG;IACH,WAAW,IAAI,MAAM;IAIrB;;OAEG;IACH,MAAM,IAAI,OAAO;IAIjB;;OAEG;IACH,IAAI,IAAI,UAAU;IAsBlB;;OAEG;IACH,MAAM,IAAI,UAAU;IAKpB;;OAEG;IACH,IAAI,CAAC,UAAU,CAAC,EAAE,UAAU,GAAG,IAAI;IASnC;;OAEG;IACH,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAK1C;;OAEG;IACH,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,IAAI;IAM3C;;OAEG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAU7B;;OAEG;IACH,SAAS,CACP,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE;QACP,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,GAAG,EAAE,MAAM,CAAC;QACZ,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GACA,WAAW;IAmBd;;OAEG;IACH,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC;IAKrC;;OAEG;IACH,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAK1B;;OAEG;IACH,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO;IAQtD;;OAEG;IACH,KAAK,IAAI,IAAI;IAQb;;OAEG;IACH,MAAM,IAAI,IAAI;CAOf;AAED,eAAe,WAAW,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "reskill",
-  "version": "1.14.0",
+  "version": "1.15.0",
   "description": "AI Skills Package Manager - Git-based skills management for AI agents",
   "type": "module",
   "main": "./dist/index.js",