reskill 1.6.0 → 1.8.0-beta.0

package/dist/cli/index.js

@@ -430,18 +430,20 @@ var external_node_fs_ = __webpack_require__("node:fs");
  * Maps registry URLs to their corresponding scopes.
  * Currently hardcoded; TODO: fetch from /api/registry/info in the future.
  */ /**
- * 公共 Registry URL
- * 用于无 scope 的 skill 安装
+ * Public Registry URL
+ * Used for installing skills without a scope
  */ const PUBLIC_REGISTRY = 'https://reskill.info/';
 /**
  * Hardcoded registry to scope mapping
  * TODO: Replace with dynamic fetching from /api/registry/info
  */ const REGISTRY_SCOPE_MAP = {
-    'https://reskill-test.zhenguanyu.com': '@kanyun',
-    'https://reskill-test.zhenguanyu.com/': '@kanyun',
+    // rush-app (private registry, new)
+    'https://rush-test.zhenguanyu.com': '@kanyun-test',
+    'https://rush.zhenguanyu.com': '@kanyun',
+    // reskill-app (private registry, legacy)
+    'https://reskill-test.zhenguanyu.com': '@kanyun-test',
     // Local development
-    'http://localhost:3000': '@kanyun',
-    'http://localhost:3000/': '@kanyun'
+    'http://localhost:3000': '@kanyun-test'
 };
 /**
  * Get the scope for a given registry URL
@@ -450,7 +452,7 @@ var external_node_fs_ = __webpack_require__("node:fs");
  * @returns Scope string (e.g., "@kanyun") or null if not found
  *
  * @example
- * getScopeForRegistry('https://reskill-test.zhenguanyu.com') // '@kanyun'
+ * getScopeForRegistry('https://rush-test.zhenguanyu.com') // '@kanyun'
  * getScopeForRegistry('https://unknown.com') // null
  */ function getScopeForRegistry(registry) {
     if (!registry) return null;
@@ -468,8 +470,8 @@ var external_node_fs_ = __webpack_require__("node:fs");
  * @returns Registry URL (with trailing slash) or null if not found
  *
  * @example
- * getRegistryForScope('@kanyun') // 'https://reskill-test.zhenguanyu.com/'
- * getRegistryForScope('kanyun') // 'https://reskill-test.zhenguanyu.com/'
+ * getRegistryForScope('@kanyun') // 'https://rush-test.zhenguanyu.com/'
+ * getRegistryForScope('kanyun') // 'https://rush-test.zhenguanyu.com/'
  * getRegistryForScope('@unknown') // null
  * getRegistryForScope('@mycompany', { '@mycompany': 'https://my.registry.com/' }) // 'https://my.registry.com/'
  */ function getRegistryForScope(scope, customRegistries) {
@@ -499,8 +501,8 @@ var external_node_fs_ = __webpack_require__("node:fs");
  * @throws Error if scope is provided but not found in the registry map
  *
  * @example
- * getRegistryUrl('@kanyun') // 'https://reskill-test.zhenguanyu.com/'
- * getRegistryUrl('kanyun') // 'https://reskill-test.zhenguanyu.com/'
+ * getRegistryUrl('@kanyun') // 'https://rush-test.zhenguanyu.com/'
+ * getRegistryUrl('kanyun') // 'https://rush-test.zhenguanyu.com/'
  * getRegistryUrl(null) // 'https://reskill.info/'
  * getRegistryUrl('') // 'https://reskill.info/'
  * getRegistryUrl('@unknown') // throws Error
@@ -575,21 +577,21 @@ var external_node_fs_ = __webpack_require__("node:fs");
 /**
  * Parse a skill identifier into its components (with version support)
  *
- * 支持私有 Registry（带 @scope）和公共 Registry（无 scope）两种格式。
+ * Supports both private registry (with @scope) and public registry (without scope) formats.
  *
  * @param identifier - Skill identifier string
  * @returns Parsed skill identifier with scope, name, version, and fullName
  * @throws Error if identifier is invalid
  *
  * @example
- * // 私有 Registry
+ * // Private registry
  * parseSkillIdentifier('@kanyun/planning-with-files')
  * // { scope: '@kanyun', name: 'planning-with-files', version: undefined, fullName: '@kanyun/planning-with-files' }
  *
  * parseSkillIdentifier('@kanyun/skill@2.4.5')
  * // { scope: '@kanyun', name: 'skill', version: '2.4.5', fullName: '@kanyun/skill' }
  *
- * // 公共 Registry
+ * // Public registry
  * parseSkillIdentifier('planning-with-files')
  * // { scope: null, name: 'planning-with-files', version: undefined, fullName: 'planning-with-files' }
  *
@@ -597,18 +599,18 @@ var external_node_fs_ = __webpack_require__("node:fs");
  * // { scope: null, name: 'skill', version: 'latest', fullName: 'skill' }
  */ function parseSkillIdentifier(identifier) {
     const trimmed = identifier.trim();
-    // 空字符串或仅空白
+    // Empty string or whitespace only
     if (!trimmed) throw new Error('Invalid skill identifier: empty string');
-    // 以 @@ 开头无效
+    // Starting with @@ is invalid
     if (trimmed.startsWith('@@')) throw new Error('Invalid skill identifier: invalid scope format');
-    // 只有 @ 无效
+    // Bare @ is invalid
     if ('@' === trimmed) throw new Error('Invalid skill identifier: missing scope and name');
-    // 带 scope 的格式: @scope/name[@version]
+    // Scoped format: @scope/name[@version]
     if (trimmed.startsWith('@')) {
-        // 正则匹配: @scope/name[@version]
-        // scope: 以 @ 开头，后面跟字母数字、连字符、下划线
-        // name: 字母数字、连字符、下划线
-        // version: 可选，@ 后跟任意非空字符
+        // Regex: @scope/name[@version]
+        // scope: starts with @, followed by alphanumeric, hyphens, underscores
+        // name: alphanumeric, hyphens, underscores
+        // version: optional, @ followed by any non-empty string
         const scopedMatch = trimmed.match(/^(@[\w-]+)\/([\w-]+)(?:@(.+))?$/);
         if (!scopedMatch) throw new Error(`Invalid skill identifier: ${identifier}`);
         const [, scope, name, version] = scopedMatch;
@@ -619,8 +621,8 @@ var external_node_fs_ = __webpack_require__("node:fs");
             fullName: `${scope}/${name}`
         };
     }
-    // 无 scope 的格式: name[@version]（公共 Registry）
-    // name 不能包含 /（否则可能是 git shorthand）
+    // Unscoped format: name[@version] (public registry)
+    // name must not contain / (otherwise it might be a git shorthand)
     const unscopedMatch = trimmed.match(/^([\w-]+)(?:@(.+))?$/);
     if (!unscopedMatch) throw new Error(`Invalid skill identifier: ${identifier}`);
     const [, name, version] = unscopedMatch;
@@ -1094,6 +1096,369 @@ const git_execAsync = (0, __WEBPACK_EXTERNAL_MODULE_node_util__.promisify)(__WEB
         if (external_node_fs_.existsSync(tempArchive)) external_node_fs_.unlinkSync(tempArchive);
     }
 }
+/**
+ * Skill Parser - SKILL.md parser
+ *
+ * Following agentskills.io specification: https://agentskills.io/specification
+ *
+ * SKILL.md format requirements:
+ * - YAML frontmatter containing name and description (required)
+ * - name: max 64 characters, lowercase letters, numbers, hyphens
+ * - description: max 1024 characters
+ * - Optional fields: license, compatibility, metadata, allowed-tools
+ */ /**
+ * Skill validation error
+ */ class SkillValidationError extends Error {
+    field;
+    constructor(message, field){
+        super(message), this.field = field;
+        this.name = 'SkillValidationError';
+    }
+}
+/**
+ * Simple YAML frontmatter parser
+ * Parses --- delimited YAML header
+ *
+ * Supports:
+ * - Basic key: value pairs
+ * - Multiline strings (| and >)
+ * - Nested objects (one level deep, for metadata field)
+ */ function parseFrontmatter(content) {
+    const frontmatterRegex = /^---\r?\n([\s\S]*?)\r?\n---\r?\n([\s\S]*)$/;
+    const match = content.match(frontmatterRegex);
+    if (!match) return {
+        data: {},
+        content
+    };
+    const yamlContent = match[1];
+    const markdownContent = match[2];
+    // Simple YAML parsing (supports basic key: value, one level of nesting,
+    // block scalars (| and >), and plain scalars spanning multiple indented lines)
+    const data = {};
+    const lines = yamlContent.split('\n');
+    let currentKey = '';
+    let currentValue = '';
+    let inMultiline = false;
+    let inNestedObject = false;
+    let inPlainScalar = false;
+    let nestedObject = {};
+    /**
+   * Save the current key/value accumulated so far, then reset state.
+   */ function flushCurrent() {
+        if (!currentKey) return;
+        if (inNestedObject) {
+            data[currentKey] = nestedObject;
+            nestedObject = {};
+            inNestedObject = false;
+        } else if (inPlainScalar || inMultiline) {
+            data[currentKey] = currentValue.trim();
+            inPlainScalar = false;
+            inMultiline = false;
+        } else data[currentKey] = parseYamlValue(currentValue.trim());
+        currentKey = '';
+        currentValue = '';
+    }
+    for (const line of lines){
+        const trimmedLine = line.trim();
+        if (!trimmedLine || trimmedLine.startsWith('#')) continue;
+        const isIndented = line.startsWith('  ');
+        // ---- Inside a block scalar (| or >) ----
+        if (inMultiline) {
+            if (isIndented) {
+                currentValue += (currentValue ? '\n' : '') + line.slice(2);
+                continue;
+            }
+            // Unindented line ends the block scalar — fall through to top-level parsing
+            flushCurrent();
+        }
+        // ---- Inside a plain scalar (multiline value without | or >) ----
+        if (inPlainScalar) {
+            if (isIndented) {
+                // Continuation line: join with a space (YAML plain scalar folding)
+                currentValue += ` ${trimmedLine}`;
+                continue;
+            }
+            // Unindented line ends the plain scalar — fall through to top-level parsing
+            flushCurrent();
+        }
+        // ---- Inside a nested object ----
+        if (inNestedObject && isIndented) {
+            const nestedMatch = line.match(/^ {2}([a-zA-Z_-]+):\s*(.*)$/);
+            if (nestedMatch) {
+                const [, nestedKey, nestedValue] = nestedMatch;
+                nestedObject[nestedKey] = parseYamlValue(nestedValue.trim());
+                continue;
+            }
+            // Indented line that isn't a nested key:value — this key was actually
+            // a plain scalar, not a nested object. Switch modes.
+            inNestedObject = false;
+            inPlainScalar = true;
+            currentValue = trimmedLine;
+            continue;
+        }
+        // ---- Top-level key: value ----
+        const keyValueMatch = line.match(/^([a-zA-Z_-]+):\s*(.*)$/);
+        if (keyValueMatch) {
+            flushCurrent();
+            currentKey = keyValueMatch[1];
+            currentValue = keyValueMatch[2];
+            if ('|' === currentValue || '>' === currentValue) {
+                inMultiline = true;
+                currentValue = '';
+            } else if ('' === currentValue) {
+                // Empty value — could be nested object or plain scalar; peek at next lines
+                inNestedObject = true;
+                nestedObject = {};
+            }
+            continue;
+        }
+        // ---- Unindented line that isn't key:value while in nested object ----
+        if (inNestedObject) flushCurrent();
+    }
+    // Save last accumulated value
+    flushCurrent();
+    return {
+        data,
+        content: markdownContent
+    };
+}
+/**
+ * Parse YAML value
+ */ function parseYamlValue(value) {
+    if (!value) return '';
+    // Boolean value
+    if ('true' === value) return true;
+    if ('false' === value) return false;
+    // Number
+    if (/^-?\d+$/.test(value)) return parseInt(value, 10);
+    if (/^-?\d+\.\d+$/.test(value)) return parseFloat(value);
+    // Remove quotes
+    if (value.startsWith('"') && value.endsWith('"') || value.startsWith("'") && value.endsWith("'")) return value.slice(1, -1);
+    return value;
+}
+/**
+ * Validate skill name format
+ *
+ * Specification requirements:
+ * - Max 64 characters
+ * - Only lowercase letters, numbers, hyphens allowed
+ * - Cannot start or end with hyphen
+ * - Cannot contain consecutive hyphens
+ */ function validateSkillName(name) {
+    if (!name) throw new SkillValidationError('Skill name is required', 'name');
+    if (name.length > 64) throw new SkillValidationError('Skill name must be at most 64 characters', 'name');
+    if (!/^[a-z0-9]/.test(name)) throw new SkillValidationError('Skill name must start with a lowercase letter or number', 'name');
+    if (!/[a-z0-9]$/.test(name)) throw new SkillValidationError('Skill name must end with a lowercase letter or number', 'name');
+    if (/--/.test(name)) throw new SkillValidationError('Skill name cannot contain consecutive hyphens', 'name');
+    if (!/^[a-z0-9][a-z0-9-]*[a-z0-9]$/.test(name) && name.length > 1) throw new SkillValidationError('Skill name can only contain lowercase letters, numbers, and hyphens', 'name');
+    // Single character name
+    if (1 === name.length && !/^[a-z0-9]$/.test(name)) throw new SkillValidationError('Single character skill name must be a lowercase letter or number', 'name');
+}
+/**
+ * Validate skill description
+ *
+ * Specification requirements:
+ * - Max 1024 characters
+ * - Angle brackets are allowed per agentskills.io spec
+ */ function validateSkillDescription(description) {
+    if (!description) throw new SkillValidationError('Skill description is required', 'description');
+    if (description.length > 1024) throw new SkillValidationError('Skill description must be at most 1024 characters', 'description');
+// Note: angle brackets are allowed per agentskills.io spec
+}
+/**
+ * Parse SKILL.md content
+ *
+ * @param content - SKILL.md file content
+ * @param options - Parse options
+ * @returns Parsed skill info, or null if format is invalid
+ * @throws SkillValidationError if validation fails in strict mode
+ */ function parseSkillMd(content, options = {}) {
+    const { strict = false } = options;
+    try {
+        const { data, content: body } = parseFrontmatter(content);
+        // Check required fields
+        if (!data.name || !data.description) {
+            if (strict) throw new SkillValidationError('SKILL.md must have name and description in frontmatter');
+            return null;
+        }
+        const name = String(data.name);
+        const description = String(data.description);
+        // Validate field format
+        if (strict) {
+            validateSkillName(name);
+            validateSkillDescription(description);
+        }
+        // Parse allowed-tools
+        let allowedTools;
+        if (data['allowed-tools']) {
+            const toolsStr = String(data['allowed-tools']);
+            allowedTools = toolsStr.split(/\s+/).filter(Boolean);
+        }
+        return {
+            name,
+            description,
+            version: data.version ? String(data.version) : void 0,
+            license: data.license ? String(data.license) : void 0,
+            compatibility: data.compatibility ? String(data.compatibility) : void 0,
+            metadata: data.metadata,
+            allowedTools,
+            content: body,
+            rawContent: content
+        };
+    } catch (error) {
+        if (error instanceof SkillValidationError) throw error;
+        if (strict) throw new SkillValidationError(`Failed to parse SKILL.md: ${error}`);
+        return null;
+    }
+}
+/**
+ * Parse SKILL.md from file path
+ */ function parseSkillMdFile(filePath, options = {}) {
+    if (!external_node_fs_.existsSync(filePath)) {
+        if (options.strict) throw new SkillValidationError(`SKILL.md not found: ${filePath}`);
+        return null;
+    }
+    const content = external_node_fs_.readFileSync(filePath, 'utf-8');
+    return parseSkillMd(content, options);
+}
+/**
+ * Parse SKILL.md from skill directory
+ */ function parseSkillFromDir(dirPath, options = {}) {
+    const skillMdPath = __WEBPACK_EXTERNAL_MODULE_node_path__.join(dirPath, 'SKILL.md');
+    return parseSkillMdFile(skillMdPath, options);
+}
+/**
+ * Check if directory contains valid SKILL.md
+ */ function hasValidSkillMd(dirPath) {
+    const skillMdPath = __WEBPACK_EXTERNAL_MODULE_node_path__.join(dirPath, 'SKILL.md');
+    if (!external_node_fs_.existsSync(skillMdPath)) return false;
+    try {
+        const skill = parseSkillMdFile(skillMdPath);
+        return null !== skill;
+    } catch  {
+        return false;
+    }
+}
+const SKIP_DIRS = [
+    'node_modules',
+    '.git',
+    'dist',
+    'build',
+    '__pycache__'
+];
+const MAX_DISCOVER_DEPTH = 5;
+const PRIORITY_SKILL_DIRS = [
+    'skills',
+    '.agents/skills',
+    '.cursor/skills',
+    '.claude/skills',
+    '.windsurf/skills',
+    '.github/skills'
+];
+function findSkillDirsRecursive(dir, depth, maxDepth, visitedDirs) {
+    if (depth > maxDepth) return [];
+    const resolvedDir = __WEBPACK_EXTERNAL_MODULE_node_path__.resolve(dir);
+    if (visitedDirs.has(resolvedDir)) return [];
+    if (!external_node_fs_.existsSync(dir) || !external_node_fs_.statSync(dir).isDirectory()) return [];
+    visitedDirs.add(resolvedDir);
+    const results = [];
+    let entries;
+    try {
+        entries = external_node_fs_.readdirSync(dir);
+    } catch  {
+        return [];
+    }
+    for (const entry of entries){
+        if (SKIP_DIRS.includes(entry)) continue;
+        const fullPath = __WEBPACK_EXTERNAL_MODULE_node_path__.join(dir, entry);
+        const resolvedFull = __WEBPACK_EXTERNAL_MODULE_node_path__.resolve(fullPath);
+        if (visitedDirs.has(resolvedFull)) continue;
+        let stat;
+        try {
+            stat = external_node_fs_.statSync(fullPath);
+        } catch  {
+            continue;
+        }
+        if (!!stat.isDirectory()) {
+            if (hasValidSkillMd(fullPath)) results.push(fullPath);
+            results.push(...findSkillDirsRecursive(fullPath, depth + 1, maxDepth, visitedDirs));
+        }
+    }
+    return results;
+}
+/**
+ * Discover all skills in a directory by scanning for SKILL.md files.
+ *
+ * Strategy:
+ * 1. Check root for SKILL.md
+ * 2. Search priority directories (skills/, .agents/skills/, .cursor/skills/, etc.)
+ * 3. Fall back to recursive search (max depth 5, skip node_modules, .git, dist, etc.)
+ *
+ * @param basePath - Root directory to search
+ * @returns List of parsed skills with their directory paths (absolute)
+ */ function discoverSkillsInDir(basePath) {
+    const resolvedBase = __WEBPACK_EXTERNAL_MODULE_node_path__.resolve(basePath);
+    const results = [];
+    const seenNames = new Set();
+    function addSkill(dirPath) {
+        const skill = parseSkillFromDir(dirPath);
+        if (skill && !seenNames.has(skill.name)) {
+            seenNames.add(skill.name);
+            results.push({
+                ...skill,
+                dirPath: __WEBPACK_EXTERNAL_MODULE_node_path__.resolve(dirPath)
+            });
+        }
+    }
+    if (hasValidSkillMd(resolvedBase)) addSkill(resolvedBase);
+    // Track visited directories to avoid redundant I/O during recursive scan
+    const visitedDirs = new Set();
+    for (const sub of PRIORITY_SKILL_DIRS){
+        const dir = __WEBPACK_EXTERNAL_MODULE_node_path__.join(resolvedBase, sub);
+        if (!!external_node_fs_.existsSync(dir) && !!external_node_fs_.statSync(dir).isDirectory()) {
+            visitedDirs.add(__WEBPACK_EXTERNAL_MODULE_node_path__.resolve(dir));
+            try {
+                const entries = external_node_fs_.readdirSync(dir);
+                for (const entry of entries){
+                    const skillDir = __WEBPACK_EXTERNAL_MODULE_node_path__.join(dir, entry);
+                    try {
+                        if (external_node_fs_.statSync(skillDir).isDirectory() && hasValidSkillMd(skillDir)) {
+                            addSkill(skillDir);
+                            visitedDirs.add(__WEBPACK_EXTERNAL_MODULE_node_path__.resolve(skillDir));
+                        }
+                    } catch  {
+                    // Skip entries that can't be stat'd (race condition, permission, etc.)
+                    }
+                }
+            } catch  {
+            // Skip if unreadable
+            }
+        }
+    }
+    const recursiveDirs = findSkillDirsRecursive(resolvedBase, 0, MAX_DISCOVER_DEPTH, visitedDirs);
+    for (const skillDir of recursiveDirs)addSkill(skillDir);
+    return results;
+}
+/**
+ * Filter skills by name (case-insensitive exact match).
+ *
+ * Note: an empty `names` array returns an empty result (not all skills).
+ * Callers should check `names.length` before calling if "no filter = all" is desired.
+ *
+ * @param skills - List of discovered skills
+ * @param names - Skill names to match (e.g. from --skill pdf commit)
+ * @returns Skills whose name matches any of the given names
+ */ function filterSkillsByName(skills, names) {
+    const normalized = names.map((n)=>n.toLowerCase());
+    return skills.filter((skill)=>{
+        // Match against SKILL.md name field
+        if (normalized.includes(skill.name.toLowerCase())) return true;
+        // Also match against the directory name (basename of dirPath)
+        // Users naturally refer to skills by their directory name
+        const dirName = __WEBPACK_EXTERNAL_MODULE_node_path__.basename(skill.dirPath).toLowerCase();
+        return normalized.includes(dirName);
+    });
+}
 /**
  * Installer - Multi-Agent installer
  *
@@ -1104,6 +1469,10 @@ const git_execAsync = (0, __WEBPACK_EXTERNAL_MODULE_node_util__.promisify)(__WEB
  * Reference: https://github.com/vercel-labs/add-skill/blob/main/src/installer.ts
  */ const installer_AGENTS_DIR = '.agents';
 const installer_SKILLS_SUBDIR = 'skills';
+/**
+ * Marker comment in auto-generated Cursor bridge rule files.
+ * Used to distinguish auto-generated files from manually created ones.
+ */ const CURSOR_BRIDGE_MARKER = '<!-- reskill:auto-generated -->';
 /**
  * Default files to exclude when copying skills
  * These files are typically used for repository metadata and should not be copied to agent directories
@@ -1282,45 +1651,50 @@ const installer_SKILLS_SUBDIR = 'skills';
             error: 'Invalid skill name: potential path traversal detected'
         };
         try {
+            let result;
             // Copy mode: directly copy to agent location
             if ('copy' === installMode) {
                 installer_ensureDir(agentDir);
                 installer_remove(agentDir);
                 copyDirectory(sourcePath, agentDir);
-                return {
+                result = {
                     success: true,
                     path: agentDir,
                     mode: 'copy'
                 };
-            }
-            // Symlink mode: copy to canonical location, then create symlink
-            installer_ensureDir(canonicalDir);
-            installer_remove(canonicalDir);
-            copyDirectory(sourcePath, canonicalDir);
-            const symlinkCreated = await installer_createSymlink(canonicalDir, agentDir);
-            if (!symlinkCreated) {
-                // Symlink failed, fallback to copy
-                try {
-                    installer_remove(agentDir);
-                } catch  {
-                // Ignore cleanup errors
-                }
-                installer_ensureDir(agentDir);
-                copyDirectory(sourcePath, agentDir);
-                return {
+            } else {
+                // Symlink mode: copy to canonical location, then create symlink
+                installer_ensureDir(canonicalDir);
+                installer_remove(canonicalDir);
+                copyDirectory(sourcePath, canonicalDir);
+                const symlinkCreated = await installer_createSymlink(canonicalDir, agentDir);
+                if (symlinkCreated) result = {
                     success: true,
                     path: agentDir,
                     canonicalPath: canonicalDir,
-                    mode: 'symlink',
-                    symlinkFailed: true
+                    mode: 'symlink'
                 };
+                else {
+                    // Symlink failed, fallback to copy
+                    try {
+                        installer_remove(agentDir);
+                    } catch  {
+                    // Ignore cleanup errors
+                    }
+                    installer_ensureDir(agentDir);
+                    copyDirectory(sourcePath, agentDir);
+                    result = {
+                        success: true,
+                        path: agentDir,
+                        canonicalPath: canonicalDir,
+                        mode: 'symlink',
+                        symlinkFailed: true
+                    };
+                }
             }
-            return {
-                success: true,
-                path: agentDir,
-                canonicalPath: canonicalDir,
-                mode: 'symlink'
-            };
+            // Create Cursor bridge rule file (project-level only)
+            if ('cursor' === agentType && !this.isGlobal) this.createCursorBridgeRule(sanitized, sourcePath);
+            return result;
         } catch (error) {
             return {
                 success: false,
@@ -1358,6 +1732,8 @@ const installer_SKILLS_SUBDIR = 'skills';
         const skillPath = this.getAgentSkillPath(skillName, agentType);
         if (!external_node_fs_.existsSync(skillPath)) return false;
         installer_remove(skillPath);
+        // Remove Cursor bridge rule file (project-level only)
+        if ('cursor' === agentType && !this.isGlobal) this.removeCursorBridgeRule(installer_sanitizeName(skillName));
         return true;
     }
     /**
@@ -1380,6 +1756,65 @@ const installer_SKILLS_SUBDIR = 'skills';
             withFileTypes: true
         }).filter((entry)=>entry.isDirectory() || entry.isSymbolicLink()).map((entry)=>entry.name);
     }
+    /**
+   * Create a Cursor bridge rule file (.mdc) for the installed skill.
+   *
+   * Cursor does not natively read SKILL.md from .cursor/skills/.
+   * This bridge file in .cursor/rules/ references the SKILL.md via @file directive,
+   * allowing Cursor to discover and activate the skill based on the description.
+   *
+   * @param skillName - Sanitized skill name
+   * @param sourcePath - Source directory containing SKILL.md
+   */ createCursorBridgeRule(skillName, sourcePath) {
+        try {
+            const skillMdPath = __WEBPACK_EXTERNAL_MODULE_node_path__.join(sourcePath, 'SKILL.md');
+            if (!external_node_fs_.existsSync(skillMdPath)) return;
+            const content = external_node_fs_.readFileSync(skillMdPath, 'utf-8');
+            const parsed = parseSkillMd(content);
+            if (!parsed || !parsed.description) return;
+            const rulesDir = __WEBPACK_EXTERNAL_MODULE_node_path__.join(this.cwd, '.cursor', 'rules');
+            installer_ensureDir(rulesDir);
+            // Do not overwrite manually created rule files (without auto-generated marker)
+            const bridgePath = __WEBPACK_EXTERNAL_MODULE_node_path__.join(rulesDir, `${skillName}.mdc`);
+            if (external_node_fs_.existsSync(bridgePath)) {
+                const existingContent = external_node_fs_.readFileSync(bridgePath, 'utf-8');
+                if (!existingContent.includes(CURSOR_BRIDGE_MARKER)) return;
+            }
+            // Quote description to prevent YAML injection from special characters
+            const safeDescription = parsed.description.replace(/"/g, '\\"');
+            const agent = getAgentConfig('cursor');
+            const bridgeContent = `---
+description: "${safeDescription}"
+globs: 
+alwaysApply: false
+---
+
+${CURSOR_BRIDGE_MARKER}
+@file ${agent.skillsDir}/${skillName}/SKILL.md
+`;
+            external_node_fs_.writeFileSync(bridgePath, bridgeContent, 'utf-8');
+        } catch  {
+        // Silently skip bridge file creation on errors
+        }
+    }
+    /**
+   * Remove a Cursor bridge rule file (.mdc) for the uninstalled skill.
+   *
+   * Only removes files that contain the auto-generated marker to avoid
+   * deleting manually created rule files.
+   *
+   * @param skillName - Sanitized skill name
+   */ removeCursorBridgeRule(skillName) {
+        try {
+            const bridgePath = __WEBPACK_EXTERNAL_MODULE_node_path__.join(this.cwd, '.cursor', 'rules', `${skillName}.mdc`);
+            if (!external_node_fs_.existsSync(bridgePath)) return;
+            const content = external_node_fs_.readFileSync(bridgePath, 'utf-8');
+            if (!content.includes(CURSOR_BRIDGE_MARKER)) return;
+            external_node_fs_.rmSync(bridgePath);
+        } catch  {
+        // Silently skip bridge file removal on errors
+        }
+    }
 }
 /**
  * CacheManager - Manage global skill cache
@@ -2112,11 +2547,25 @@ const installer_SKILLS_SUBDIR = 'skills';
         }
         // Parse owner/repo and possible subPath
         // E.g.: user/repo or org/monorepo/skills/pdf
+        // Also handle GitHub web URL style: owner/repo/tree/branch/path
         const parts = remaining.split('/');
         if (parts.length < 2) throw new Error(`Invalid skill reference: ${ref}. Expected format: owner/repo[@version]`);
         const owner = parts[0];
         const repo = parts[1];
-        const subPath = parts.length > 2 ? parts.slice(2).join('/') : void 0;
+        let subPath;
+        // Check for GitHub/GitLab web URL pattern: owner/repo/(tree|blob|raw)/branch/path
+        // e.g. vercel-labs/skills/tree/main/skills/find-skills
+        // Only apply this heuristic when no explicit @version is provided.
+        // With @version, treat tree/blob/raw as literal directory names (standard monorepo subPath).
+        if (parts.length >= 4 && [
+            'tree',
+            'blob',
+            'raw'
+        ].includes(parts[2]) && !version) {
+            const branch = parts[3];
+            version = `branch:${branch}`;
+            subPath = parts.length > 4 ? parts.slice(4).join('/') : void 0;
+        } else subPath = parts.length > 2 ? parts.slice(2).join('/') : void 0;
         return {
             registry,
             owner,
@@ -2345,20 +2794,31 @@ const installer_SKILLS_SUBDIR = 'skills';
    * Check if a reference is an HTTP/OSS URL (for archive downloads)
    *
    * Returns true for:
-   * - http:// or https:// URLs pointing to archive files (.tar.gz, .tgz, .zip, .tar)
-   * - Explicit oss:// or s3:// protocol URLs
+   * - http:// or https:// URLs with archive file extensions (.tar.gz, .tgz, .zip, .tar)
+   * - Explicit oss:// or s3:// protocol URLs (always treated as archive sources)
    *
    * Returns false for:
    * - Git repository URLs (*.git)
    * - GitHub/GitLab web URLs (/tree/, /blob/, /raw/)
+   * - Bare HTTPS repo URLs without archive extensions (e.g., https://github.com/user/repo)
+   *   These are treated as Git references and handled by GitResolver.
    */ static isHttpUrl(ref) {
         // Remove version suffix for checking (e.g., url@v1.0.0)
         const urlPart = ref.split('@')[0];
-        // 排除 Git 仓库 URL（以 .git 结尾）
-        if (urlPart.endsWith('.git')) return false;
-        // 排除 GitHub/GitLab web URL（包含 /tree/, /blob/, /raw/）
-        if (/\/(tree|blob|raw)\//.test(urlPart)) return false;
-        return urlPart.startsWith('http://') || urlPart.startsWith('https://') || urlPart.startsWith('oss://') || urlPart.startsWith('s3://');
+        // oss:// and s3:// are always archive download sources
+        if (urlPart.startsWith('oss://') || urlPart.startsWith('s3://')) return true;
+        // For http:// and https:// URLs, distinguish between Git repos and archive downloads
+        if (urlPart.startsWith('http://') || urlPart.startsWith('https://')) {
+            // Exclude Git repository URLs (ending with .git)
+            if (urlPart.endsWith('.git')) return false;
+            // Exclude GitHub/GitLab web URLs (containing /tree/, /blob/, /raw/)
+            if (/\/(tree|blob|raw)\//.test(urlPart)) return false;
+            // Only classify as HTTP archive if URL has a recognized archive extension.
+            // Bare HTTPS URLs like https://github.com/user/repo are Git references,
+            // not archive downloads, and should fall through to GitResolver.
+            return /\.(tar\.gz|tgz|zip|tar)$/i.test(urlPart);
+        }
+        return false;
     }
     /**
    * Parse an HTTP/OSS URL reference
@@ -2684,6 +3144,16 @@ class RegistryClient {
         this.config = config;
     }
     /**
+   * Get API base URL (registry + /api)
+   *
+   * All registries use the unified '/api' prefix.
+   *
+   * @returns Base URL for API calls, e.g., 'https://example.com/api'
+   */ getApiBase() {
+        const registry = this.config.registry.endsWith('/') ? this.config.registry.slice(0, -1) : this.config.registry;
+        return `${registry}/api`;
+    }
+    /**
    * Get authorization headers
    */ getAuthHeaders() {
         const headers = {
@@ -2696,7 +3166,7 @@ class RegistryClient {
     /**
    * Get current user info (whoami)
    */ async whoami() {
-        const url = `${this.config.registry}/api/auth/me`;
+        const url = `${this.getApiBase()}/skill-auth/me`;
         const response = await fetch(url, {
             method: 'GET',
             headers: this.getAuthHeaders()
@@ -2708,13 +3178,13 @@ class RegistryClient {
     /**
    * CLI login - verify token and get user info
    *
-   * Calls POST /api/auth/login-cli to validate the token and retrieve user information.
+   * Calls POST /api/skill-auth/login-cli to validate the token and retrieve user information.
    * This is the preferred method for CLI authentication.
    *
    * @returns User information if authentication succeeds
    * @throws RegistryError if authentication fails
    */ async loginCli() {
-        const url = `${this.config.registry}/api/auth/login-cli`;
+        const url = `${this.getApiBase()}/skill-auth/login-cli`;
         const response = await fetch(url, {
             method: 'POST',
             headers: this.getAuthHeaders()
@@ -2746,7 +3216,7 @@ class RegistryClient {
                 if (external_node_fs_.existsSync(filePath)) {
                     const content = external_node_fs_.readFileSync(filePath);
                     const stat = external_node_fs_.statSync(filePath);
-                    // 如果提供了 shortName，则在路径前添加顶层目录
+                    // Prepend shortName as top-level directory if provided
                     const entryName = shortName ? `${shortName}/${file}` : file;
                     tarPack.entry({
                         name: entryName,
@@ -2760,32 +3230,67 @@ class RegistryClient {
         });
     }
     // ============================================================================
-    // Skill Info Methods (页面发布适配)
+    // Skill Info Methods (web-published skill support)
     // ============================================================================
     /**
-   * 获取 skill 基本信息（包含 source_type）
-   * 用于 install 命令判断安装逻辑分支
+   * Get basic skill info (including source_type).
+   * Used by the install command to determine the installation logic branch.
    *
-   * @param skillName - 完整名称，如 @kanyun/my-skill
-   * @returns Skill 基本信息
-   * @throws RegistryError 如果 skill 不存在或请求失败
+   * @param skillName - Full skill name, e.g., @kanyun/my-skill
+   * @returns Basic skill information
+   * @throws RegistryError if skill not found or request failed
    */ async getSkillInfo(skillName) {
-        const url = `${this.config.registry}/api/skills/${encodeURIComponent(skillName)}`;
+        const url = `${this.getApiBase()}/skills/${encodeURIComponent(skillName)}`;
         const response = await fetch(url, {
             method: 'GET',
             headers: this.getAuthHeaders()
         });
         if (!response.ok) {
             const data = await response.json();
-            // 404 时给出明确的 skill 不存在错误
+            // Return a clear "not found" error for 404 responses
             if (404 === response.status) throw new RegistryError(`Skill not found: ${skillName}`, response.status, data);
             throw new RegistryError(data.error || `Failed to get skill info: ${response.statusText}`, response.status, data);
         }
-        // API 返回格式: { success: true, data: { ... } }
+        // API response format: { success: true, data: { ... } }
         const responseData = await response.json();
         return responseData.data || responseData;
     }
     // ============================================================================
+    // Search Methods
+    // ============================================================================
+    /**
+   * Search for skills in the registry
+   *
+   * @param query - Search query string
+   * @param options - Search options (limit, offset)
+   * @returns Array of matching skills
+   * @throws RegistryError if the request fails
+   *
+   * @example
+   * const results = await client.search('typescript');
+   * const results = await client.search('planning', { limit: 5 });
+   */ async search(query, options = {}) {
+        const params = new URLSearchParams({
+            q: query
+        });
+        if (void 0 !== options.limit) params.set('limit', String(options.limit));
+        if (void 0 !== options.offset) params.set('offset', String(options.offset));
+        const url = `${this.getApiBase()}/skills?${params.toString()}`;
+        const response = await fetch(url, {
+            method: 'GET',
+            headers: this.getAuthHeaders()
+        });
+        if (!response.ok) {
+            const data = await response.json();
+            throw new RegistryError(data.error || `Search failed: ${response.status}`, response.status, data);
+        }
+        const data = await response.json();
+        return {
+            items: data.data || [],
+            total: data.meta?.pagination?.totalItems ?? data.data?.length ?? 0
+        };
+    }
+    // ============================================================================
     // Download Methods (Step 3.3)
     // ============================================================================
     /**
@@ -2798,13 +3303,13 @@ class RegistryClient {
    *
    * @example
    * await client.resolveVersion('@kanyun/test-skill', 'latest') // '2.4.5'
-   * await client.resolveVersion('@kanyun/test-skill', '2.4.5') // '2.4.5' (直接返回)
+   * await client.resolveVersion('@kanyun/test-skill', '2.4.5') // '2.4.5' (returned as-is)
    */ async resolveVersion(skillName, tagOrVersion) {
         const version = tagOrVersion || 'latest';
-        // 如果是 semver 版本号，直接返回
+        // If it's already a semver version number, return as-is
         if (/^\d+\.\d+\.\d+/.test(version)) return version;
-        // 否则视为 tag，需要查询 dist-tags
-        const url = `${this.config.registry}/api/skills/${encodeURIComponent(skillName)}`;
+        // Otherwise treat it as a tag and query dist-tags
+        const url = `${this.getApiBase()}/skills/${encodeURIComponent(skillName)}`;
         const response = await fetch(url, {
             method: 'GET',
             headers: this.getAuthHeaders()
@@ -2813,14 +3318,14 @@ class RegistryClient {
             const data = await response.json();
             throw new RegistryError(data.error || `Failed to fetch skill metadata: ${response.status}`, response.status, data);
         }
-        // API 返回格式: { success: true, data: { dist_tags: [{ tag, version }] } }
+        // API response format: { success: true, data: { dist_tags: [{ tag, version }] } }
         const responseData = await response.json();
-        // 优先使用 npm 风格的 dist-tags（如果存在）
+        // Prefer npm-style dist-tags if present
         if (responseData['dist-tags']) {
             const resolvedVersion = responseData['dist-tags'][version];
             if (resolvedVersion) return resolvedVersion;
         }
-        // 使用 reskill-app 的 dist_tags 数组格式
+        // Fall back to reskill-app's dist_tags array format
         const distTags = responseData.data?.dist_tags;
         if (distTags && Array.isArray(distTags)) {
             const tagEntry = distTags.find((t)=>t.tag === version);
@@ -2839,15 +3344,34 @@ class RegistryClient {
    * @example
    * const { tarball, integrity } = await client.downloadSkill('@kanyun/test-skill', '1.0.0');
    */ async downloadSkill(skillName, version) {
-        const url = `${this.config.registry}/api/skills/${encodeURIComponent(skillName)}/versions/${version}/download`;
+        const url = `${this.getApiBase()}/skills/${encodeURIComponent(skillName)}/versions/${version}/download`;
+        // Use redirect: 'manual' to capture x-integrity header from 302 responses.
+        // The registry returns a 302 redirect to OSS with the integrity header,
+        // which would be lost if fetch auto-follows the redirect.
         const response = await fetch(url, {
             method: 'GET',
-            headers: this.getAuthHeaders()
+            headers: this.getAuthHeaders(),
+            redirect: 'manual'
         });
+        // Handle 302 redirect (registry → OSS signed URL)
+        if (301 === response.status || 302 === response.status) {
+            const integrity = response.headers.get('x-integrity') || '';
+            const location = response.headers.get('location');
+            if (!location) throw new RegistryError('Missing redirect location in download response', response.status);
+            const downloadResponse = await fetch(location);
+            if (!downloadResponse.ok) throw new RegistryError(`Download from storage failed: ${downloadResponse.status}`, downloadResponse.status);
+            const arrayBuffer = await downloadResponse.arrayBuffer();
+            const tarball = Buffer.from(arrayBuffer);
+            return {
+                tarball,
+                integrity
+            };
+        }
         if (!response.ok) {
             const data = await response.json();
             throw new RegistryError(data.error || `Download failed: ${response.status}`, response.status, data);
         }
+        // Direct response (no redirect) - read tarball and integrity directly
         const arrayBuffer = await response.arrayBuffer();
         const tarball = Buffer.from(arrayBuffer);
         const integrity = response.headers.get('x-integrity') || '';
@@ -2882,11 +3406,11 @@ class RegistryClient {
    * @example
    * RegistryClient.verifyIntegrity(buffer, 'sha256-abc123...') // true or false
    */ static verifyIntegrity(content, expectedIntegrity) {
-        // 解析 integrity 格式: algorithm-hash
+        // Parse integrity format: algorithm-hash
         const match = expectedIntegrity.match(/^(\w+)-(.+)$/);
         if (!match) throw new Error(`Invalid integrity format: ${expectedIntegrity}`);
         const [, algorithm, expectedHash] = match;
-        // 只支持 sha256 和 sha512
+        // Only sha256 and sha512 are supported
         if ('sha256' !== algorithm && 'sha512' !== algorithm) throw new Error(`Unsupported integrity algorithm: ${algorithm}`);
         const actualHash = __WEBPACK_EXTERNAL_MODULE_node_crypto__.createHash(algorithm).update(content).digest('base64');
         return actualHash === expectedHash;
@@ -2897,8 +3421,8 @@ class RegistryClient {
     /**
    * Publish a skill to the registry
    */ async publish(skillName, payload, skillPath, options = {}) {
-        const url = `${this.config.registry}/api/skills/publish`;
-        // 提取短名称作为 tarball 顶层目录（不含 scope 前缀）
+        const url = `${this.getApiBase()}/skills/publish`;
+        // Extract short name as tarball top-level directory (without scope prefix)
         const shortName = getShortName(skillName);
         // Create tarball with short name as top-level directory
         const tarball = await this.createTarball(skillPath, payload.files, shortName);
@@ -3137,23 +3661,23 @@ class RegistryResolver {
    * - HTTP/OSS: https://example.com/skill.tar.gz
    * - Registry shorthand: github:user/repo, gitlab:org/repo
    */ static isRegistryRef(ref) {
-        // 排除 Git SSH 格式 (git@...)
+        // Exclude Git SSH format (git@...)
         if (ref.startsWith('git@') || ref.startsWith('git://')) return false;
-        // 排除 .git 结尾的 URL
+        // Exclude URLs ending with .git
         if (ref.includes('.git')) return false;
-        // 排除 HTTP/HTTPS/OSS URL
+        // Exclude HTTP/HTTPS/OSS URLs
         if (ref.startsWith('http://') || ref.startsWith('https://') || ref.startsWith('oss://') || ref.startsWith('s3://')) return false;
-        // 排除 registry shorthand 格式 (github:, gitlab:, custom.com:)
-        // 这类格式是 "registry:owner/repo" 而不是 "@scope/name"
+        // Exclude registry shorthand format (github:, gitlab:, custom.com:)
+        // These follow "registry:owner/repo" pattern, not "@scope/name"
         if (/^[a-zA-Z0-9.-]+:[^@]/.test(ref)) return false;
-        // 检查是否是 @scope/name 格式（私有 registry）
+        // Check for @scope/name format (private registry)
         if (ref.startsWith('@') && ref.includes('/')) {
-            // @scope/name 或 @scope/name@version
+            // @scope/name or @scope/name@version
             const scopeNamePattern = /^@[a-zA-Z0-9._-]+\/[a-zA-Z0-9._-]+(@[a-zA-Z0-9._-]+)?$/;
             return scopeNamePattern.test(ref);
         }
-        // 检查是否是简单的 name 或 name@version 格式（公共 registry）
-        // 简单名称只包含字母、数字、连字符、下划线和点
+        // Check for simple name or name@version format (public registry)
+        // Simple names contain only letters, digits, hyphens, underscores, and dots
         const namePattern = /^[a-zA-Z0-9._-]+(@[a-zA-Z0-9._-]+)?$/;
         return namePattern.test(ref);
     }
@@ -3161,26 +3685,27 @@ class RegistryResolver {
    * Resolve a registry skill reference
    *
    * @param ref - Skill reference (e.g., "@kanyun/planning-with-files@2.4.5" or "my-skill@latest")
+   * @param overrideRegistryUrl - Optional registry URL override (bypasses scope-based lookup)
    * @returns Resolved skill information including downloaded tarball
    *
    * @example
    * const result = await resolver.resolve('@kanyun/planning-with-files@2.4.5');
    * console.log(result.shortName); // 'planning-with-files'
    * console.log(result.version); // '2.4.5'
-   */ async resolve(ref) {
-        // 1. 解析 skill 标识
+   */ async resolve(ref, overrideRegistryUrl) {
+        // 1. Parse skill identifier
         const parsed = parseSkillIdentifier(ref);
         const shortName = getShortName(parsed.fullName);
-        // 2. 获取 registry URL
-        const registryUrl = getRegistryUrl(parsed.scope);
-        // 3. 创建 client 并解析版本
+        // 2. Get registry URL (CLI override takes precedence)
+        const registryUrl = overrideRegistryUrl || getRegistryUrl(parsed.scope);
+        // 3. Create client and resolve version
         const client = new RegistryClient({
             registry: registryUrl
         });
         const version = await client.resolveVersion(parsed.fullName, parsed.version);
-        // 4. 下载 tarball
+        // 4. Download tarball
         const { tarball, integrity } = await client.downloadSkill(parsed.fullName, version);
-        // 5. 验证 integrity
+        // 5. Verify integrity
         const isValid = RegistryClient.verifyIntegrity(tarball, integrity);
         if (!isValid) throw new Error(`Integrity verification failed for ${ref}`);
         return {
@@ -3197,217 +3722,14 @@ class RegistryResolver {
    *
    * @param tarball - Tarball buffer
    * @param destDir - Destination directory
-   * @returns Path to the extracted skill directory
-   */ async extract(tarball, destDir) {
-        await extractTarballBuffer(tarball, destDir);
-        // 获取顶层目录名（即 skill 名称）
-        const topDir = await getTarballTopDir(tarball);
-        if (topDir) return `${destDir}/${topDir}`;
-        return destDir;
-    }
-}
-/**
- * Skill Parser - SKILL.md parser
- *
- * Following agentskills.io specification: https://agentskills.io/specification
- *
- * SKILL.md format requirements:
- * - YAML frontmatter containing name and description (required)
- * - name: max 64 characters, lowercase letters, numbers, hyphens
- * - description: max 1024 characters
- * - Optional fields: license, compatibility, metadata, allowed-tools
- */ /**
- * Skill validation error
- */ class SkillValidationError extends Error {
-    field;
-    constructor(message, field){
-        super(message), this.field = field;
-        this.name = 'SkillValidationError';
-    }
-}
-/**
- * Simple YAML frontmatter parser
- * Parses --- delimited YAML header
- *
- * Supports:
- * - Basic key: value pairs
- * - Multiline strings (| and >)
- * - Nested objects (one level deep, for metadata field)
- */ function parseFrontmatter(content) {
-    const frontmatterRegex = /^---\r?\n([\s\S]*?)\r?\n---\r?\n([\s\S]*)$/;
-    const match = content.match(frontmatterRegex);
-    if (!match) return {
-        data: {},
-        content
-    };
-    const yamlContent = match[1];
-    const markdownContent = match[2];
-    // Simple YAML parsing (supports basic key: value format and one level of nesting)
-    const data = {};
-    const lines = yamlContent.split('\n');
-    let currentKey = '';
-    let currentValue = '';
-    let inMultiline = false;
-    let inNestedObject = false;
-    let nestedObject = {};
-    for (const line of lines){
-        const trimmedLine = line.trim();
-        if (!trimmedLine || trimmedLine.startsWith('#')) continue;
-        // Check if it's a nested key: value pair (indented with 2 spaces)
-        const nestedMatch = line.match(/^ {2}([a-zA-Z_-]+):\s*(.*)$/);
-        if (nestedMatch && inNestedObject) {
-            const [, nestedKey, nestedValue] = nestedMatch;
-            nestedObject[nestedKey] = parseYamlValue(nestedValue.trim());
-            continue;
-        }
-        // Check if it's a new key: value pair (no indent)
-        const keyValueMatch = line.match(/^([a-zA-Z_-]+):\s*(.*)$/);
-        if (keyValueMatch && !inMultiline) {
-            // Save previous nested object if any
-            if (inNestedObject && currentKey) {
-                data[currentKey] = nestedObject;
-                nestedObject = {};
-                inNestedObject = false;
-            }
-            // Save previous value
-            if (currentKey && !inNestedObject) data[currentKey] = parseYamlValue(currentValue.trim());
-            currentKey = keyValueMatch[1];
-            currentValue = keyValueMatch[2];
-            // Check if it's start of multiline string
-            if ('|' === currentValue || '>' === currentValue) {
-                inMultiline = true;
-                currentValue = '';
-            } else if ('' === currentValue) {
-                // Empty value - might be start of nested object
-                inNestedObject = true;
-                nestedObject = {};
-            }
-        } else if (inMultiline && line.startsWith('  ')) // Multiline string continuation
-        currentValue += (currentValue ? '\n' : '') + line.slice(2);
-        else if (inMultiline && !line.startsWith('  ')) {
-            // Multiline string end
-            inMultiline = false;
-            data[currentKey] = currentValue.trim();
-            // Try to parse new line
-            const newKeyMatch = line.match(/^([a-zA-Z_-]+):\s*(.*)$/);
-            if (newKeyMatch) {
-                currentKey = newKeyMatch[1];
-                currentValue = newKeyMatch[2];
-            }
-        }
-    }
-    // Save last value
-    if (inNestedObject && currentKey) data[currentKey] = nestedObject;
-    else if (currentKey) data[currentKey] = parseYamlValue(currentValue.trim());
-    return {
-        data,
-        content: markdownContent
-    };
-}
-/**
- * Parse YAML value
- */ function parseYamlValue(value) {
-    if (!value) return '';
-    // Boolean value
-    if ('true' === value) return true;
-    if ('false' === value) return false;
-    // Number
-    if (/^-?\d+$/.test(value)) return parseInt(value, 10);
-    if (/^-?\d+\.\d+$/.test(value)) return parseFloat(value);
-    // Remove quotes
-    if (value.startsWith('"') && value.endsWith('"') || value.startsWith("'") && value.endsWith("'")) return value.slice(1, -1);
-    return value;
-}
-/**
- * Validate skill name format
- *
- * Specification requirements:
- * - Max 64 characters
- * - Only lowercase letters, numbers, hyphens allowed
- * - Cannot start or end with hyphen
- * - Cannot contain consecutive hyphens
- */ function validateSkillName(name) {
-    if (!name) throw new SkillValidationError('Skill name is required', 'name');
-    if (name.length > 64) throw new SkillValidationError('Skill name must be at most 64 characters', 'name');
-    if (!/^[a-z0-9]/.test(name)) throw new SkillValidationError('Skill name must start with a lowercase letter or number', 'name');
-    if (!/[a-z0-9]$/.test(name)) throw new SkillValidationError('Skill name must end with a lowercase letter or number', 'name');
-    if (/--/.test(name)) throw new SkillValidationError('Skill name cannot contain consecutive hyphens', 'name');
-    if (!/^[a-z0-9][a-z0-9-]*[a-z0-9]$/.test(name) && name.length > 1) throw new SkillValidationError('Skill name can only contain lowercase letters, numbers, and hyphens', 'name');
-    // Single character name
-    if (1 === name.length && !/^[a-z0-9]$/.test(name)) throw new SkillValidationError('Single character skill name must be a lowercase letter or number', 'name');
-}
-/**
- * Validate skill description
- *
- * Specification requirements:
- * - Max 1024 characters
- * - Angle brackets are allowed per agentskills.io spec
- */ function validateSkillDescription(description) {
-    if (!description) throw new SkillValidationError('Skill description is required', 'description');
-    if (description.length > 1024) throw new SkillValidationError('Skill description must be at most 1024 characters', 'description');
-// Note: angle brackets are allowed per agentskills.io spec
-}
-/**
- * Parse SKILL.md content
- *
- * @param content - SKILL.md file content
- * @param options - Parse options
- * @returns Parsed skill info, or null if format is invalid
- * @throws SkillValidationError if validation fails in strict mode
- */ function parseSkillMd(content, options = {}) {
-    const { strict = false } = options;
-    try {
-        const { data, content: body } = parseFrontmatter(content);
-        // Check required fields
-        if (!data.name || !data.description) {
-            if (strict) throw new SkillValidationError('SKILL.md must have name and description in frontmatter');
-            return null;
-        }
-        const name = String(data.name);
-        const description = String(data.description);
-        // Validate field format
-        if (strict) {
-            validateSkillName(name);
-            validateSkillDescription(description);
-        }
-        // Parse allowed-tools
-        let allowedTools;
-        if (data['allowed-tools']) {
-            const toolsStr = String(data['allowed-tools']);
-            allowedTools = toolsStr.split(/\s+/).filter(Boolean);
-        }
-        return {
-            name,
-            description,
-            version: data.version ? String(data.version) : void 0,
-            license: data.license ? String(data.license) : void 0,
-            compatibility: data.compatibility ? String(data.compatibility) : void 0,
-            metadata: data.metadata,
-            allowedTools,
-            content: body,
-            rawContent: content
-        };
-    } catch (error) {
-        if (error instanceof SkillValidationError) throw error;
-        if (strict) throw new SkillValidationError(`Failed to parse SKILL.md: ${error}`);
-        return null;
-    }
-}
-/**
- * Parse SKILL.md from file path
- */ function parseSkillMdFile(filePath, options = {}) {
-    if (!external_node_fs_.existsSync(filePath)) {
-        if (options.strict) throw new SkillValidationError(`SKILL.md not found: ${filePath}`);
-        return null;
-    }
-    const content = external_node_fs_.readFileSync(filePath, 'utf-8');
-    return parseSkillMd(content, options);
-}
-/**
- * Parse SKILL.md from skill directory
- */ function parseSkillFromDir(dirPath, options = {}) {
-    const skillMdPath = __WEBPACK_EXTERNAL_MODULE_node_path__.join(dirPath, 'SKILL.md');
-    return parseSkillMdFile(skillMdPath, options);
+   * @returns Path to the extracted skill directory
+   */ async extract(tarball, destDir) {
+        await extractTarballBuffer(tarball, destDir);
+        // Get top-level directory name (i.e. skill name)
+        const topDir = await getTarballTopDir(tarball);
+        if (topDir) return `${destDir}/${topDir}`;
+        return destDir;
+    }
 }
 /**
  * SkillManager - Core Skill management class
@@ -3890,12 +4212,112 @@ class RegistryResolver {
    * @param options - Installation options
    */ async installToAgents(ref, targetAgents, options = {}) {
         // Detect source type and delegate to appropriate installer
-        // Priority: Registry > HTTP > Git (registry 优先，因为它的格式最受限)
+        // Priority: Registry > HTTP > Git (registry first, as its format is most constrained)
         if (this.isRegistrySource(ref)) return this.installToAgentsFromRegistry(ref, targetAgents, options);
         if (this.isHttpSource(ref)) return this.installToAgentsFromHttp(ref, targetAgents, options);
         return this.installToAgentsFromGit(ref, targetAgents, options);
     }
     /**
+   * Multi-skill install: discover skills in a Git repo and install selected ones (or list only).
+   * Only Git references are supported (including https://github.com/...); registry refs are not.
+   *
+   * @param ref - Git skill reference (e.g. github:user/repo@v1.0.0 or https://github.com/user/repo); any #fragment is stripped for resolution
+   * @param skillNames - If non-empty, install only these skills (by SKILL.md name). If empty and !listOnly, install all.
+   * @param targetAgents - Target agents
+   * @param options - Install options; listOnly: true means discover and return skills without installing
+   */ async installSkillsFromRepo(ref, skillNames, targetAgents, options = {}) {
+        const { listOnly = false, force = false, save = true, mode = 'symlink' } = options;
+        const refForResolve = ref.replace(/#.*$/, '').trim();
+        const resolved = await this.resolver.resolve(refForResolve);
+        const { parsed, repoUrl } = resolved;
+        const gitRef = resolved.ref;
+        let cacheResult = await this.cache.get(parsed, gitRef);
+        if (!cacheResult) {
+            logger_logger.debug(`Caching from ${repoUrl}@${gitRef}`);
+            cacheResult = await this.cache.cache(repoUrl, parsed, gitRef, gitRef);
+        }
+        const cachePath = this.cache.getCachePath(parsed, gitRef);
+        const discovered = discoverSkillsInDir(cachePath);
+        if (0 === discovered.length) throw new Error('No valid skills found. Skills require a SKILL.md with name and description.');
+        if (listOnly) return {
+            listOnly: true,
+            skills: discovered
+        };
+        const selected = skillNames.length > 0 ? filterSkillsByName(discovered, skillNames) : discovered;
+        if (skillNames.length > 0 && 0 === selected.length) {
+            const available = discovered.map((s)=>s.name).join(', ');
+            throw new Error(`No matching skills found for: ${skillNames.join(', ')}. Available skills: ${available}`);
+        }
+        const baseRefForSave = this.config.normalizeSkillRef(refForResolve);
+        const defaults = this.config.getDefaults();
+        // Only pass custom installDir to Installer; default '.skills' should use
+        // the Installer's built-in canonical path (.agents/skills/)
+        const customInstallDir = '.skills' !== defaults.installDir ? defaults.installDir : void 0;
+        const installer = new Installer({
+            cwd: this.projectRoot,
+            global: this.isGlobal,
+            installDir: customInstallDir
+        });
+        const installed = [];
+        const skipped = [];
+        const skillSource = `${parsed.registry}:${parsed.owner}/${parsed.repo}${parsed.subPath ? `/${parsed.subPath}` : ''}`;
+        for (const skillInfo of selected){
+            const semanticVersion = skillInfo.version ?? gitRef;
+            // Skip already-installed skills unless --force is set
+            if (!force) {
+                const existingSkill = this.getInstalledSkill(skillInfo.name);
+                if (existingSkill) {
+                    const locked = this.lockManager.get(skillInfo.name);
+                    const lockedRef = locked?.ref || locked?.version;
+                    if (lockedRef === gitRef) {
+                        const reason = `already installed at ${gitRef}`;
+                        logger_logger.info(`${skillInfo.name}@${gitRef} is already installed, skipping`);
+                        skipped.push({
+                            name: skillInfo.name,
+                            reason
+                        });
+                        continue;
+                    }
+                // Different version installed — allow upgrade without --force
+                // Only skip when the exact same ref is already locked
+                }
+            }
+            logger_logger["package"](`Installing ${skillInfo.name}@${gitRef} to ${targetAgents.length} agent(s)...`);
+            // Note: force is handled at the SkillManager level (skip-if-installed check above).
+            // The Installer always overwrites (remove + copy), so no force flag is needed there.
+            const results = await installer.installToAgents(skillInfo.dirPath, skillInfo.name, targetAgents, {
+                mode: mode
+            });
+            if (!this.isGlobal) this.lockManager.lockSkill(skillInfo.name, {
+                source: skillSource,
+                version: semanticVersion,
+                ref: gitRef,
+                resolved: repoUrl,
+                commit: cacheResult.commit
+            });
+            if (!this.isGlobal && save) {
+                this.config.ensureExists();
+                this.config.addSkill(skillInfo.name, `${baseRefForSave}#${skillInfo.name}`);
+            }
+            const successCount = Array.from(results.values()).filter((r)=>r.success).length;
+            logger_logger.success(`Installed ${skillInfo.name}@${semanticVersion} to ${successCount} agent(s)`);
+            installed.push({
+                skill: {
+                    name: skillInfo.name,
+                    path: skillInfo.dirPath,
+                    version: semanticVersion,
+                    source: skillSource
+                },
+                results
+            });
+        }
+        return {
+            listOnly: false,
+            installed,
+            skipped
+        };
+    }
+    /**
    * Install skill from Git to multiple agents
    */ async installToAgentsFromGit(ref, targetAgents, options = {}) {
         const { save = true, mode = 'symlink' } = options;
@@ -4036,13 +4458,13 @@ class RegistryResolver {
    * - Web-published skills (github/gitlab/oss_url/custom_url/local)
    */ async installToAgentsFromRegistry(ref, targetAgents, options = {}) {
         const { force = false, save = true, mode = 'symlink' } = options;
-        // 解析 skill 标识（获取 fullName 和 version）
+        // Parse skill identifier and resolve registry URL once (single source of truth)
         const parsed = parseSkillIdentifier(ref);
-        const registryUrl = getRegistryUrl(parsed.scope);
+        const registryUrl = options.registry || getRegistryUrl(parsed.scope);
         const client = new RegistryClient({
             registry: registryUrl
         });
-        // 新增：先查询 skill 信息获取 source_type
+        // Query skill info to determine source_type
         let skillInfo;
         try {
             skillInfo = await client.getSkillInfo(parsed.fullName);
@@ -4053,12 +4475,15 @@ class RegistryResolver {
             };
             else throw error;
         }
-        // 新增：根据 source_type 分支
+        // Branch based on source_type (pass resolved registryUrl via options to avoid re-computation)
         const sourceType = skillInfo.source_type;
-        if (sourceType && 'registry' !== sourceType) return this.installFromWebPublished(skillInfo, parsed, targetAgents, options);
-        // 1. Resolve registry skill（现有流程）
+        if (sourceType && 'registry' !== sourceType) return this.installFromWebPublished(skillInfo, parsed, targetAgents, {
+            ...options,
+            registry: registryUrl
+        });
+        // 1. Resolve registry skill (pass pre-resolved registryUrl)
         logger_logger["package"](`Resolving ${ref} from registry...`);
-        const resolved = await this.registryResolver.resolve(ref);
+        const resolved = await this.registryResolver.resolve(ref, registryUrl);
         const { shortName, version, registryUrl: resolvedRegistryUrl, tarball, parsed: resolvedParsed } = resolved;
         // 2. Check if already installed (skip if --force)
         const skillPath = this.getSkillPath(shortName);
@@ -4097,100 +4522,157 @@ class RegistryResolver {
             };
         }
         logger_logger["package"](`Installing ${shortName}@${version} from ${resolvedRegistryUrl} to ${targetAgents.length} agent(s)...`);
-        // 3. Create temp directory for extraction
+        // 3. Create temp directory for extraction (clean stale files first)
         const tempDir = __WEBPACK_EXTERNAL_MODULE_node_path__.join(this.cache.getCacheDir(), 'registry-temp', `${shortName}-${version}`);
+        await remove(tempDir);
         await ensureDir(tempDir);
-        // 4. Extract tarball
-        const extractedPath = await this.registryResolver.extract(tarball, tempDir);
-        logger_logger.debug(`Extracted to ${extractedPath}`);
-        // 5. Create Installer with custom installDir from config
-        const defaults = this.config.getDefaults();
-        const installer = new Installer({
-            cwd: this.projectRoot,
-            global: this.isGlobal,
-            installDir: defaults.installDir
-        });
-        // 6. Install to all target agents
-        const results = await installer.installToAgents(extractedPath, shortName, targetAgents, {
-            mode: mode
-        });
-        // 7. Update lock file (project mode only)
-        if (!this.isGlobal) this.lockManager.lockSkill(shortName, {
-            source: `registry:${resolvedParsed.fullName}`,
-            version,
-            ref: version,
-            resolved: resolvedRegistryUrl,
-            commit: resolved.integrity
-        });
-        // 8. Update skills.json (project mode only)
-        if (!this.isGlobal && save) {
-            this.config.ensureExists();
-            // Save with full name for registry skills
-            this.config.addSkill(shortName, ref);
+        try {
+            // 4. Extract tarball
+            const extractedPath = await this.registryResolver.extract(tarball, tempDir);
+            logger_logger.debug(`Extracted to ${extractedPath}`);
+            // 5. Create Installer with custom installDir from config
+            const defaults = this.config.getDefaults();
+            const installer = new Installer({
+                cwd: this.projectRoot,
+                global: this.isGlobal,
+                installDir: defaults.installDir
+            });
+            // 6. Install to all target agents
+            const results = await installer.installToAgents(extractedPath, shortName, targetAgents, {
+                mode: mode
+            });
+            // 7. Update lock file (project mode only)
+            if (!this.isGlobal) this.lockManager.lockSkill(shortName, {
+                source: `registry:${resolvedParsed.fullName}`,
+                version,
+                ref: version,
+                resolved: resolvedRegistryUrl,
+                commit: resolved.integrity
+            });
+            // 8. Update skills.json (project mode only)
+            if (!this.isGlobal && save) {
+                this.config.ensureExists();
+                // Save with full name for registry skills
+                this.config.addSkill(shortName, ref);
+            }
+            // 9. Count results and log
+            const successCount = Array.from(results.values()).filter((r)=>r.success).length;
+            const failCount = results.size - successCount;
+            if (0 === failCount) logger_logger.success(`Installed ${shortName}@${version} to ${successCount} agent(s)`);
+            else logger_logger.warn(`Installed ${shortName}@${version} to ${successCount} agent(s), ${failCount} failed`);
+            // 10. Build the InstalledSkill to return
+            const skill = {
+                name: shortName,
+                path: extractedPath,
+                version,
+                source: `registry:${resolvedParsed.fullName}`
+            };
+            return {
+                skill,
+                results
+            };
+        } finally{
+            // Clean up temp directory after installation
+            await remove(tempDir);
         }
-        // 9. Count results and log
-        const successCount = Array.from(results.values()).filter((r)=>r.success).length;
-        const failCount = results.size - successCount;
-        if (0 === failCount) logger_logger.success(`Installed ${shortName}@${version} to ${successCount} agent(s)`);
-        else logger_logger.warn(`Installed ${shortName}@${version} to ${successCount} agent(s), ${failCount} failed`);
-        // 9. Build the InstalledSkill to return
-        const skill = {
-            name: shortName,
-            path: extractedPath,
-            version,
-            source: `registry:${resolvedParsed.fullName}`
-        };
-        return {
-            skill,
-            results
-        };
     }
     // ============================================================================
-    // Web-published skill installation (页面发布适配)
+    // Web-published skill installation
     // ============================================================================
     /**
-   * 安装页面发布的 skill
+   * Install a web-published skill.
    *
-   * 页面发布的 skill 不支持版本管理，根据 source_type 分支到不同的安装逻辑：
-   * - github/gitlab: 复用 installToAgentsFromGit
-   * - oss_url/custom_url: 复用 installToAgentsFromHttp
-   * - local: 通过 Registry API 下载 tarball
+   * Web-published skills do not support versioning. Branches to different
+   * installation logic based on source_type:
+   * - github/gitlab: reuses installToAgentsFromGit
+   * - oss_url/custom_url: reuses installToAgentsFromHttp
+   * - local: downloads tarball via Registry API
    */ async installFromWebPublished(skillInfo, parsed, targetAgents, options = {}) {
         const { source_type, source_url } = skillInfo;
-        // 页面发布的 skill 不支持版本指定
+        // Web-published skills do not support version specifiers
         if (parsed.version && 'latest' !== parsed.version) throw new Error(`Version specifier not supported for web-published skills.\n'${parsed.fullName}' was published via web and does not support versioning.\nUse: reskill install ${parsed.fullName}`);
         if (!source_url) throw new Error(`Missing source_url for web-published skill: ${parsed.fullName}`);
         logger_logger["package"](`Installing ${parsed.fullName} from ${source_type} source...`);
         switch(source_type){
             case 'github':
             case 'gitlab':
-                // source_url 是完整的 Git URL（包含 ref 和 path）
-                // 复用已有的 Git 安装逻辑
+                // source_url is a full Git URL (includes ref and path)
+                // Reuse existing Git installation logic
                 return this.installToAgentsFromGit(source_url, targetAgents, options);
             case 'oss_url':
             case 'custom_url':
-                // 直接下载 URL
+                // Direct download URL
                 return this.installToAgentsFromHttp(source_url, targetAgents, options);
             case 'local':
-                // 通过 Registry API 下载 tarball
-                return this.installFromRegistryLocal(skillInfo, parsed, targetAgents, options);
+                // Download tarball via Registry API
+                return this.installFromRegistryLocal(parsed, targetAgents, options);
             default:
                 throw new Error(`Unknown source_type: ${source_type}`);
         }
     }
     /**
-   * 安装 Local Folder 模式发布的 skill
+   * Install a skill published via "local folder" mode.
    *
-   * 通过 Registry 的 /api/skills/:name/download API 下载 tarball
-   */ async installFromRegistryLocal(_skillInfo, parsed, targetAgents, options = {}) {
-        const registryUrl = getRegistryUrl(parsed.scope);
-        // 构造下载 URL（通过 Registry API）
-        // Ensure trailing slash for proper URL concatenation (defensive coding)
-        const baseUrl = registryUrl.endsWith('/') ? registryUrl : `${registryUrl}/`;
-        const downloadUrl = `${baseUrl}api/skills/${encodeURIComponent(parsed.fullName)}/download`;
-        logger_logger.debug(`Downloading from: ${downloadUrl}`);
-        // 复用 HTTP 下载逻辑
-        return this.installToAgentsFromHttp(downloadUrl, targetAgents, options);
+   * Downloads tarball via RegistryClient (handles 302 redirects to signed OSS URLs),
+   * then extracts and installs using the same flow as registry source_type.
+   */ async installFromRegistryLocal(parsed, targetAgents, options = {}) {
+        const { save = true, mode = 'symlink' } = options;
+        const registryUrl = options.registry || getRegistryUrl(parsed.scope);
+        const shortName = getShortName(parsed.fullName);
+        const version = 'latest';
+        // Download tarball via RegistryClient (handles auth + 302 redirect to signed URL)
+        const client = new RegistryClient({
+            registry: registryUrl
+        });
+        const { tarball } = await client.downloadSkill(parsed.fullName, version);
+        logger_logger["package"](`Installing ${shortName} from ${registryUrl} to ${targetAgents.length} agent(s)...`);
+        // Extract tarball to temp directory (clean stale files first)
+        const tempDir = __WEBPACK_EXTERNAL_MODULE_node_path__.join(this.cache.getCacheDir(), 'registry-temp', `${shortName}-${version}`);
+        await remove(tempDir);
+        await ensureDir(tempDir);
+        try {
+            const extractedPath = await this.registryResolver.extract(tarball, tempDir);
+            logger_logger.debug(`Extracted to ${extractedPath}`);
+            // Install to all target agents
+            const defaults = this.config.getDefaults();
+            const installer = new Installer({
+                cwd: this.projectRoot,
+                global: this.isGlobal,
+                installDir: defaults.installDir
+            });
+            const results = await installer.installToAgents(extractedPath, shortName, targetAgents, {
+                mode: mode
+            });
+            // Get metadata from extracted path
+            const metadata = this.getSkillMetadataFromDir(extractedPath);
+            const skillName = metadata?.name ?? shortName;
+            const semanticVersion = metadata?.version ?? version;
+            // Update lock file (project mode only)
+            if (!this.isGlobal) this.lockManager.lockSkill(skillName, {
+                source: `registry:${parsed.fullName}`,
+                version: semanticVersion,
+                ref: version,
+                resolved: registryUrl,
+                commit: ''
+            });
+            // Update skills.json (project mode only)
+            if (!this.isGlobal && save) {
+                this.config.ensureExists();
+                this.config.addSkill(skillName, parsed.fullName);
+            }
+            return {
+                skill: {
+                    name: skillName,
+                    path: extractedPath,
+                    version: semanticVersion,
+                    source: `registry:${parsed.fullName}`
+                },
+                results
+            };
+        } finally{
+            // Clean up temp directory after installation
+            await remove(tempDir);
+        }
     }
     /**
    * Get default target agents
@@ -5173,6 +5655,172 @@ class RegistryResolver {
     if (warnings > 0) logger_logger.warn(`Found ${warnings} warning${1 !== warnings ? 's' : ''}, but reskill should work`);
     else logger_logger.success('All checks passed! reskill is ready to use.');
 });
+/**
+ * Registry URL resolution utilities
+ *
+ * Shared utility for resolving registry URLs across CLI commands.
+ */ /**
+ * Attempt to resolve registry URL from multiple sources.
+ *
+ * Priority (highest to lowest):
+ * 1. --registry CLI option
+ * 2. RESKILL_REGISTRY environment variable
+ * 3. defaults.publishRegistry in skills.json
+ *
+ * Returns the resolved URL, or null if none found.
+ *
+ * @param cliRegistry - Registry URL from CLI option
+ * @param projectRoot - Project root directory (defaults to cwd)
+ * @returns Resolved registry URL, or null if not configured
+ */ function tryResolveRegistry(cliRegistry, projectRoot = process.cwd()) {
+    // 1. CLI option (highest priority)
+    if (cliRegistry) return cliRegistry;
+    // 2. Environment variable
+    const envRegistry = process.env.RESKILL_REGISTRY;
+    if (envRegistry) return envRegistry;
+    // 3. From skills.json
+    try {
+        const configLoader = new ConfigLoader(projectRoot);
+        if (configLoader.exists()) {
+            const publishRegistry = configLoader.getPublishRegistry();
+            if (publishRegistry) return publishRegistry;
+        }
+    } catch  {
+    // Config loading failed, return null
+    }
+    return null;
+}
+/**
+ * Resolve registry URL from multiple sources (strict — required for publish)
+ *
+ * Priority (highest to lowest):
+ * 1. --registry CLI option
+ * 2. RESKILL_REGISTRY environment variable
+ * 3. defaults.publishRegistry in skills.json
+ *
+ * Intentionally has NO default - users must explicitly configure their registry.
+ *
+ * @param cliRegistry - Registry URL from CLI option
+ * @param projectRoot - Project root directory (defaults to cwd)
+ * @returns Resolved registry URL
+ * @throws Exits process with code 1 if no registry is configured
+ */ function resolveRegistry(cliRegistry, projectRoot = process.cwd()) {
+    const resolved = tryResolveRegistry(cliRegistry, projectRoot);
+    if (resolved) return resolved;
+    // No registry configured - error
+    logger_logger.error('No registry specified');
+    logger_logger.newline();
+    logger_logger.log('Please specify a registry using one of these methods:');
+    logger_logger.log('  • --registry <url> option');
+    logger_logger.log('  • RESKILL_REGISTRY environment variable');
+    logger_logger.log('  • "defaults.publishRegistry" in skills.json');
+    process.exit(1);
+}
+/**
+ * Resolve registry URL for search, with graceful fallback to public registry.
+ *
+ * Same priority as `resolveRegistry()`, but falls back to the public registry
+ * instead of exiting when no registry is configured.
+ *
+ * @param cliRegistry - Registry URL from CLI option
+ * @param projectRoot - Project root directory (defaults to cwd)
+ * @returns Resolved registry URL (never null)
+ */ function resolveRegistryForSearch(cliRegistry, projectRoot = process.cwd()) {
+    return tryResolveRegistry(cliRegistry, projectRoot) ?? PUBLIC_REGISTRY;
+}
+/**
+ * find command - Search for skills in the registry
+ *
+ * Supports both public and private registries via --registry option.
+ * Resolves registry from CLI option > RESKILL_REGISTRY env > skills.json config.
+ *
+ * Usage:
+ *   reskill find <query>                  # Search public registry
+ *   reskill find <query> --registry <url> # Search private registry
+ *   reskill find <query> --json           # Output as JSON
+ *   reskill find <query> --limit 5        # Limit results
+ */ // ============================================================================
+// Display Helpers
+// ============================================================================
+/**
+ * Format a single search result for terminal display
+ */ function formatResultItem(item, index) {
+    const lines = [];
+    const name = __WEBPACK_EXTERNAL_MODULE_chalk__["default"].bold.cyan(item.name);
+    const version = item.latest_version ? __WEBPACK_EXTERNAL_MODULE_chalk__["default"].gray(`@${item.latest_version}`) : '';
+    lines.push(`  ${__WEBPACK_EXTERNAL_MODULE_chalk__["default"].gray(`${index + 1}.`)} ${name}${version}`);
+    if (item.description) {
+        const desc = item.description.length > 80 ? `${item.description.slice(0, 80)}...` : item.description;
+        lines.push(`     ${desc}`);
+    }
+    const meta = [];
+    if (item.keywords && item.keywords.length > 0) meta.push(__WEBPACK_EXTERNAL_MODULE_chalk__["default"].gray(`keywords: ${item.keywords.join(', ')}`));
+    if (item.publisher?.handle) meta.push(__WEBPACK_EXTERNAL_MODULE_chalk__["default"].gray(`by ${item.publisher.handle}`));
+    if (meta.length > 0) lines.push(`     ${meta.join(' · ')}`);
+    return lines.join('\n');
+}
+/**
+ * Display search results in human-readable format
+ */ function displayResults(items, total, query) {
+    if (0 === items.length) {
+        logger_logger.warn(`No skills found for "${query}"`);
+        return;
+    }
+    logger_logger.newline();
+    logger_logger.log(`Found ${__WEBPACK_EXTERNAL_MODULE_chalk__["default"].bold(String(total))} skill${1 === total ? '' : 's'} matching "${__WEBPACK_EXTERNAL_MODULE_chalk__["default"].bold(query)}":`);
+    logger_logger.newline();
+    for(let i = 0; i < items.length; i++){
+        logger_logger.log(formatResultItem(items[i], i));
+        if (i < items.length - 1) logger_logger.newline();
+    }
+    logger_logger.newline();
+    logger_logger.log(__WEBPACK_EXTERNAL_MODULE_chalk__["default"].gray('Install with: reskill install <name>'));
+}
+/**
+ * Display search results as JSON
+ */ function displayJsonResults(items, total) {
+    console.log(JSON.stringify({
+        total,
+        items
+    }, null, 2));
+}
+// ============================================================================
+// Main Action
+// ============================================================================
+/**
+ * Execute the find command
+ *
+ * @internal Exported for testing
+ */ async function findAction(query, options) {
+    const limit = Number.parseInt(options.limit || '10', 10);
+    if (Number.isNaN(limit) || limit < 1) {
+        logger_logger.error('Invalid --limit value. Must be a positive integer.');
+        process.exit(1);
+        return;
+    }
+    const registry = resolveRegistryForSearch(options.registry);
+    const client = new RegistryClient({
+        registry
+    });
+    try {
+        const { items, total } = await client.search(query, {
+            limit
+        });
+        if (options.json) displayJsonResults(items, total);
+        else displayResults(items, total, query);
+    } catch (error) {
+        if (error instanceof RegistryError) {
+            logger_logger.error(`Search failed: ${error.message}`);
+            if (401 === error.statusCode || 403 === error.statusCode) logger_logger.log('This registry may require authentication. Try: reskill login');
+        } else logger_logger.error(`Search failed: ${error.message}`);
+        process.exit(1);
+        return;
+    }
+}
+// ============================================================================
+// Command Definition
+// ============================================================================
+const findCommand = new __WEBPACK_EXTERNAL_MODULE_commander__.Command('find').alias('search').description('Search for skills in the registry').argument('<query>', 'Search query').option('-r, --registry <url>', 'Registry URL (or set RESKILL_REGISTRY env var, or defaults.publishRegistry in skills.json)').option('-l, --limit <n>', 'Maximum number of results', '10').option('-j, --json', 'Output as JSON').action(findAction);
 /**
  * info command - Show skill details
  */ const infoCommand = new __WEBPACK_EXTERNAL_MODULE_commander__.Command('info').description('Show skill details').argument('<skill>', 'Skill name').option('-j, --json', 'Output as JSON').action((skillName, options)=>{
@@ -5513,7 +6161,8 @@ const DEFAULT_INSTALL_DIR = '.skills';
         const { results } = await skillManager.installToAgents(ref, targetAgents, {
             force: options.force,
             save: false,
-            mode: installMode
+            mode: installMode,
+            registry: options.registry
         });
         const successCount = Array.from(results.values()).filter((r)=>r.success).length;
         totalInstalled += successCount;
@@ -5562,7 +6211,8 @@ const DEFAULT_INSTALL_DIR = '.skills';
     const { skill: installed, results } = await skillManager.installToAgents(skill, targetAgents, {
         force: options.force,
         save: false !== options.save && !installGlobally,
-        mode: installMode
+        mode: installMode,
+        registry: options.registry
     });
     spinner.stop('Installation complete');
     // Process and display results
@@ -5578,6 +6228,77 @@ const DEFAULT_INSTALL_DIR = '.skills';
         });
     }
 }
+/**
+ * Multi-skill path: list or install selected skills from a single repo (--skill / --list)
+ */ async function installMultiSkillFromRepo(ref, skillNames, listOnly, ctx, targetAgents, installGlobally, installMode, spinner) {
+    const skillManager = new SkillManager(void 0, {
+        global: installGlobally
+    });
+    if (listOnly) {
+        spinner.start('Discovering skills...');
+        const result = await skillManager.installSkillsFromRepo(ref, [], [], {
+            listOnly: true
+        });
+        if (!result.listOnly || 0 === result.skills.length) {
+            spinner.stop('No skills found');
+            __WEBPACK_EXTERNAL_MODULE__clack_prompts__.outro(__WEBPACK_EXTERNAL_MODULE_chalk__["default"].dim('No skills found.'));
+            return;
+        }
+        spinner.stop(`Found ${result.skills.length} skill(s)`);
+        __WEBPACK_EXTERNAL_MODULE__clack_prompts__.log.message('');
+        __WEBPACK_EXTERNAL_MODULE__clack_prompts__.log.step(__WEBPACK_EXTERNAL_MODULE_chalk__["default"].bold('Available skills'));
+        for (const s of result.skills){
+            __WEBPACK_EXTERNAL_MODULE__clack_prompts__.log.message(`  ${__WEBPACK_EXTERNAL_MODULE_chalk__["default"].cyan(s.name)}`);
+            __WEBPACK_EXTERNAL_MODULE__clack_prompts__.log.message(`    ${__WEBPACK_EXTERNAL_MODULE_chalk__["default"].dim(s.description)}`);
+        }
+        __WEBPACK_EXTERNAL_MODULE__clack_prompts__.log.message('');
+        __WEBPACK_EXTERNAL_MODULE__clack_prompts__.outro(__WEBPACK_EXTERNAL_MODULE_chalk__["default"].dim('Use --skill <name> to install specific skills.'));
+        return;
+    }
+    const summaryLines = [
+        __WEBPACK_EXTERNAL_MODULE_chalk__["default"].cyan(ref),
+        `  ${__WEBPACK_EXTERNAL_MODULE_chalk__["default"].dim('→')} ${formatAgentNames(targetAgents)}`,
+        `  ${__WEBPACK_EXTERNAL_MODULE_chalk__["default"].dim('Skills:')} ${__WEBPACK_EXTERNAL_MODULE_chalk__["default"].cyan(skillNames.join(', '))}`,
+        `  ${__WEBPACK_EXTERNAL_MODULE_chalk__["default"].dim('Scope:')} ${installGlobally ? 'Global' : 'Project'}${__WEBPACK_EXTERNAL_MODULE_chalk__["default"].dim(', Mode:')} ${installMode}`
+    ];
+    __WEBPACK_EXTERNAL_MODULE__clack_prompts__.note(summaryLines.join('\n'), 'Installation Summary');
+    if (!ctx.skipConfirm) {
+        const confirmed = await __WEBPACK_EXTERNAL_MODULE__clack_prompts__.confirm({
+            message: 'Proceed with installation?'
+        });
+        if (__WEBPACK_EXTERNAL_MODULE__clack_prompts__.isCancel(confirmed) || !confirmed) {
+            __WEBPACK_EXTERNAL_MODULE__clack_prompts__.cancel('Installation cancelled');
+            process.exit(0);
+        }
+    }
+    spinner.start('Installing skills...');
+    const result = await skillManager.installSkillsFromRepo(ref, skillNames, targetAgents, {
+        force: ctx.options.force,
+        save: false !== ctx.options.save && !installGlobally,
+        mode: installMode,
+        registry: ctx.options.registry
+    });
+    spinner.stop('Installation complete');
+    // listOnly is always false here (the listOnly path returns early above)
+    if (result.listOnly) return;
+    const { installed, skipped } = result;
+    if (0 === installed.length && skipped.length > 0) {
+        const skipLines = skipped.map((s)=>`  ${__WEBPACK_EXTERNAL_MODULE_chalk__["default"].dim('–')} ${s.name}: ${__WEBPACK_EXTERNAL_MODULE_chalk__["default"].dim(s.reason)}`);
+        __WEBPACK_EXTERNAL_MODULE__clack_prompts__.note(skipLines.join('\n'), __WEBPACK_EXTERNAL_MODULE_chalk__["default"].yellow('All skills were already installed'));
+        __WEBPACK_EXTERNAL_MODULE__clack_prompts__.log.info('Use --force to reinstall.');
+        return;
+    }
+    const resultLines = installed.map((r)=>`  ${__WEBPACK_EXTERNAL_MODULE_chalk__["default"].green('✓')} ${r.skill.name}@${r.skill.version}`);
+    if (skipped.length > 0) for (const s of skipped)resultLines.push(`  ${__WEBPACK_EXTERNAL_MODULE_chalk__["default"].dim('–')} ${s.name}: ${__WEBPACK_EXTERNAL_MODULE_chalk__["default"].dim(s.reason)}`);
+    __WEBPACK_EXTERNAL_MODULE__clack_prompts__.note(resultLines.join('\n'), __WEBPACK_EXTERNAL_MODULE_chalk__["default"].green(`Installed ${installed.length} skill(s)`));
+    if (!installGlobally && installed.length > 0 && ctx.configLoader.exists()) {
+        ctx.configLoader.reload();
+        ctx.configLoader.updateDefaults({
+            targetAgents,
+            installMode
+        });
+    }
+}
 /**
  * Install multiple skills in batch
  */ async function installMultipleSkills(ctx, targetAgents, installGlobally, installMode, spinner) {
@@ -5614,6 +6335,7 @@ const DEFAULT_INSTALL_DIR = '.skills';
             const { skill: installed, results } = await skillManager.installToAgents(skillRef, targetAgents, {
                 force: options.force,
                 save: false !== options.save && !installGlobally,
+                registry: options.registry,
                 mode: installMode
             });
             const successful = Array.from(results.values()).filter((r)=>r.success);
@@ -5651,7 +6373,7 @@ const DEFAULT_INSTALL_DIR = '.skills';
         __WEBPACK_EXTERNAL_MODULE__clack_prompts__.log.error(`${__WEBPACK_EXTERNAL_MODULE_chalk__["default"].red('✗')} ${result.skillRef}`);
     }
     // Display batch results
-    console.log();
+    __WEBPACK_EXTERNAL_MODULE__clack_prompts__.log.message('');
     displayBatchInstallResults(successfulSkills, failedSkills, targetAgents.length);
     // Save installation defaults (only for project installs with success)
     if (!installGlobally && successfulSkills.length > 0 && configLoader.exists()) {
@@ -5740,7 +6462,7 @@ const DEFAULT_INSTALL_DIR = '.skills';
  * Behavior:
  * - Single skill install: Prompts for agents/mode (stored config as defaults)
  * - Reinstall all (no args): Uses stored config directly, no confirmation
- */ const installCommand = new __WEBPACK_EXTERNAL_MODULE_commander__.Command('install').alias('i').description('Install one or more skills, or all skills from skills.json').argument('[skills...]', 'Skill references (e.g., github:user/skill@v1.0.0 or git@github.com:user/repo.git)').option('-f, --force', 'Force reinstall even if already installed').option('-g, --global', 'Install globally to user home directory').option('--no-save', 'Do not save to skills.json').option('-a, --agent <agents...>', 'Specify target agents (e.g., cursor, claude-code)').option('--mode <mode>', 'Installation mode: symlink or copy').option('-y, --yes', 'Skip confirmation prompts').option('--all', 'Install to all agents (implies -y -g)').action(async (skills, options)=>{
+ */ const installCommand = new __WEBPACK_EXTERNAL_MODULE_commander__.Command('install').alias('i').description('Install one or more skills, or all skills from skills.json').argument('[skills...]', 'Skill references (e.g., github:user/skill@v1.0.0 or git@github.com:user/repo.git)').option('-f, --force', 'Force reinstall even if already installed').option('-g, --global', 'Install globally to user home directory').option('--no-save', 'Do not save to skills.json').option('-a, --agent <agents...>', 'Specify target agents (e.g., cursor, claude-code)').option('--mode <mode>', 'Installation mode: symlink or copy').option('-y, --yes', 'Skip confirmation prompts').option('--all', 'Install to all agents (implies -y -g)').option('-s, --skill <names...>', 'Select specific skill(s) by name from a multi-skill repository').option('--list', 'List available skills in the repository without installing').option('-r, --registry <url>', 'Registry URL override for registry-based installs').action(async (skills, options)=>{
     // Handle --all flag implications
     if (options.all) {
         options.yes = true;
@@ -5753,19 +6475,34 @@ const DEFAULT_INSTALL_DIR = '.skills';
     __WEBPACK_EXTERNAL_MODULE__clack_prompts__.intro(__WEBPACK_EXTERNAL_MODULE_chalk__["default"].bgCyan.black(' reskill '));
     try {
         const spinner = __WEBPACK_EXTERNAL_MODULE__clack_prompts__.spinner();
-        // Step 1: Resolve target agents
-        const targetAgents = await resolveTargetAgents(ctx, spinner);
-        // Step 2: Resolve installation scope
-        const installGlobally = await resolveInstallScope(ctx);
-        // Validate: Cannot install all skills globally
-        if (ctx.isReinstallAll && installGlobally) {
-            __WEBPACK_EXTERNAL_MODULE__clack_prompts__.log.error('Cannot install all skills globally. Please specify a skill to install.');
-            process.exit(1);
+        // Multi-skill path (single ref + --skill or --list): list only skips scope/mode/agents
+        const hasMultiSkillFlags = true === ctx.options.list || ctx.options.skill && ctx.options.skill.length > 0;
+        const isMultiSkillPath = !ctx.isReinstallAll && 1 === ctx.skills.length && hasMultiSkillFlags;
+        // Warn if --skill/--list used with multiple refs (flags will be ignored)
+        if (ctx.skills.length > 1 && hasMultiSkillFlags) __WEBPACK_EXTERNAL_MODULE__clack_prompts__.log.warn('--skill and --list are only supported with a single repository reference');
+        let targetAgents;
+        let installGlobally;
+        let installMode;
+        if (isMultiSkillPath && true === ctx.options.list) {
+            targetAgents = [];
+            installGlobally = false;
+            installMode = 'symlink';
+        } else {
+            // Step 1: Resolve target agents
+            targetAgents = await resolveTargetAgents(ctx, spinner);
+            // Step 2: Resolve installation scope
+            installGlobally = await resolveInstallScope(ctx);
+            // Validate: Cannot install all skills globally
+            if (ctx.isReinstallAll && installGlobally) {
+                __WEBPACK_EXTERNAL_MODULE__clack_prompts__.log.error('Cannot install all skills globally. Please specify a skill to install.');
+                process.exit(1);
+            }
+            // Step 3: Resolve installation mode
+            installMode = await resolveInstallMode(ctx);
         }
-        // Step 3: Resolve installation mode
-        const installMode = await resolveInstallMode(ctx);
         // Step 4: Execute installation
         if (ctx.isReinstallAll) await installAllSkills(ctx, targetAgents, installMode, spinner);
+        else if (isMultiSkillPath) await installMultiSkillFromRepo(ctx.skills[0], ctx.options.skill ?? [], true === ctx.options.list, ctx, targetAgents, installGlobally, installMode, spinner);
         else if (ctx.isBatchInstall) await installMultipleSkills(ctx, targetAgents, installGlobally, installMode, spinner);
         else await installSingleSkill(ctx, targetAgents, installGlobally, installMode, spinner);
         // Done
@@ -5938,45 +6675,6 @@ class AuthManager {
         });
     }
 }
-/**
- * Registry URL resolution utilities
- *
- * Shared utility for resolving registry URLs across CLI commands.
- */ /**
- * Resolve registry URL from multiple sources
- *
- * Priority (highest to lowest):
- * 1. --registry CLI option
- * 2. RESKILL_REGISTRY environment variable
- * 3. defaults.publishRegistry in skills.json
- *
- * Intentionally has NO default - users must explicitly configure their registry.
- *
- * @param cliRegistry - Registry URL from CLI option
- * @param projectRoot - Project root directory (defaults to cwd)
- * @returns Resolved registry URL
- * @throws Exits process with code 1 if no registry is configured
- */ function resolveRegistry(cliRegistry, projectRoot = process.cwd()) {
-    // 1. CLI option (highest priority)
-    if (cliRegistry) return cliRegistry;
-    // 2. Environment variable
-    const envRegistry = process.env.RESKILL_REGISTRY;
-    if (envRegistry) return envRegistry;
-    // 3. From skills.json
-    const configLoader = new ConfigLoader(projectRoot);
-    if (configLoader.exists()) {
-        const publishRegistry = configLoader.getPublishRegistry();
-        if (publishRegistry) return publishRegistry;
-    }
-    // No registry configured - error
-    logger_logger.error('No registry specified');
-    logger_logger.newline();
-    logger_logger.log('Please specify a registry using one of these methods:');
-    logger_logger.log('  • --registry <url> option');
-    logger_logger.log('  • RESKILL_REGISTRY environment variable');
-    logger_logger.log('  • "defaults.publishRegistry" in skills.json');
-    process.exit(1);
-}
 /**
  * login command - Authenticate with a reskill registry
  *
@@ -7339,6 +8037,7 @@ const program = new __WEBPACK_EXTERNAL_MODULE_commander__.Command();
 program.name('reskill').description('AI Skills Package Manager - Git-based skills management for AI agents').version(cli_rslib_entry_packageJson.version);
 // Register all commands
 program.addCommand(initCommand);
+program.addCommand(findCommand);
 program.addCommand(installCommand);
 program.addCommand(listCommand);
 program.addCommand(infoCommand);