rewritable 0.8.1 → 0.10.0

package/bin/rwa.mjs

@@ -71,6 +71,16 @@ Usage:
                               editing — the returned url carries the capability
                               token in its #k= fragment. Target: --url >
                               \$RWA_HOST_URL. --json emits {id,token,url}.
+  rwa install <skill> <host>  install a signed .rwa-skill.json into a skill-host
+                              container, offline. Verifies the signature + runs the
+                              same trust gates as the in-app dialog, then splices the
+                              skill into the frozen #rwa-skills zone. Requires --yes
+                              (no dialog to consent in); gate failures are final.
+                              --json emits {skillId,name,kind,verified,status}.
+  rwa skill publish <file>    publish a SIGNED .rwa-skill.json to the marketplace
+                              index (POST /skills/publish). The envelope is already
+                              signed — no key needed. Online; --url overrides the
+                              service, --json emits {skillId,registryUrl,verified}.
   rwa skin <path> <name>      apply a named style preset to a rewritable in
                               place (deterministic, offline, model-free). Names:
                               notion-clean, linear-dark, editorial-serif,
@@ -715,6 +725,60 @@ function detectProductKind(fileText) {
       return;
     }
 
+    // `rwa skill publish <file.rwa-skill.json> [--url base] [--json]` — publish a SIGNED skill
+    // envelope to the marketplace index (POST /skills/publish, I6 §11). The envelope is already
+    // signed (no key needed). Online by design; exit 4 labeled `publish_error` (like `publish`).
+    if (verb === 'skill') {
+      const sub = rest[0];
+      const subRest = rest.slice(1);
+      if (sub !== 'publish') {
+        process.stderr.write("rwa skill: unknown subcommand '" + (sub || '') + "' (try: rwa skill publish <file>)\n");
+        process.exitCode = 1;
+        return;
+      }
+      const jsonMode = subRest.includes('--json');
+      const urlFlag = getFlag('--url', subRest);
+      const urlIdx = subRest.indexOf('--url');
+      const skip = urlIdx >= 0 ? urlIdx + 1 : -1;
+      const filePath = subRest.find((a, i) => !a.startsWith('-') && i !== skip);
+      const emitSP = (payload) => {
+        if (jsonMode) { process.stderr.write(JSON.stringify(payload) + '\n'); return; }
+        const parts = [payload.code, payload.subcode].filter(Boolean);
+        let line = 'rwa skill publish: ' + parts.join('/');
+        if (payload.details && Object.keys(payload.details).length) line += ' ' + JSON.stringify(payload.details);
+        process.stderr.write(line + '\n');
+      };
+      if (!filePath) { emitSP({ code: 'usage_error', subcode: 'missing_file_arg' }); process.exitCode = 1; return; }
+      if (urlFlag.present && (urlFlag.value === undefined || urlFlag.value.startsWith('-'))) {
+        emitSP({ code: 'usage_error', subcode: 'missing_flag_value', details: { flag: '--url' } }); process.exitCode = 1; return;
+      }
+      const baseUrl = urlFlag.value || process.env.RWA_PUBLISH_URL || undefined;
+      const { skillPublishCmd } = await import('../src/skill-publish.mjs');
+      let result;
+      try {
+        result = await skillPublishCmd(filePath, { baseUrl });
+      } catch (e) {
+        if (e && typeof e.exitCode === 'number') {
+          const code = e.exitCode === 4 ? 'publish_error' : codeName(e.exitCode);
+          emitSP({ code, subcode: e.subcode, details: e.details });
+          process.exitCode = e.exitCode;
+          return;
+        }
+        throw e;
+      }
+      if (jsonMode) {
+        process.stdout.write(JSON.stringify(result) + '\n');
+      } else {
+        process.stdout.write(
+          '✓ Published skill to the index!\n' +
+          `  skillId:  ${result.skillId}\n` +
+          `  URL:      ${result.registryUrl}\n` +
+          `  verified: ${result.verified}\n`,
+        );
+      }
+      return;
+    }
+
     // `rwa publish-site <file> [--host h] [--path p] [--url base] [--json]` —
     // copy a rewritable VERBATIM onto a static site over scp; print the live URL.
     // Durable counterpart to `rwa publish` (ephemeral share). Online by design.
@@ -826,6 +890,66 @@ function detectProductKind(fileText) {
       return;
     }
 
+    // `rwa install <skill.rwa-skill.json> <skill-host.html> [--yes|--trust] [--json]` (v0.9 §3 / I11).
+    // The offline, headless counterpart of the seed's install dialog: verify the Ed25519
+    // signature, run the SAME gates (unsigned-capability / compute-with-perms / permission
+    // grammar / dynamic-import reject), then splice the envelope into the frozen #rwa-skills
+    // zone and write atomically. No dialog to consent in → an explicit --yes/--trust is
+    // required, and gate failures (exit 3) are FINAL — --yes cannot override them. Exit codes:
+    // 1 usage, 2 file, 3 envelope/gate (reuses codeName — no verb-specific exit-4 class). See
+    // src/install.mjs. The CLI is the sole audited exception to runtime-sole-writer (Inv 39).
+    if (verb === 'install') {
+      const jsonMode = rest.includes('--json');
+      const consent = rest.includes('--yes') || rest.includes('--trust');
+      const [envPath, hostPath] = rest.filter((a) => !a.startsWith('-'));
+      const emitInstall = (payload) => {
+        if (jsonMode) { process.stderr.write(JSON.stringify(payload) + '\n'); return; }
+        const parts = [payload.code, payload.subcode].filter(Boolean);
+        let line = 'rwa install: ' + parts.join('/');
+        if (payload.details && Object.keys(payload.details).length) line += ' ' + JSON.stringify(payload.details);
+        process.stderr.write(line + '\n');
+      };
+      if (!envPath || !hostPath) {
+        emitInstall({ code: 'usage_error', subcode: 'missing_file_args', details: { usage: 'rwa install <skill.rwa-skill.json> <skill-host.html> [--yes] [--json]' } });
+        process.exitCode = 1;
+        return;
+      }
+      const { installSkillFile } = await import('../src/install.mjs');
+      let result;
+      try {
+        result = await installSkillFile(envPath, hostPath, { consent });
+      } catch (e) {
+        if (e && typeof e.exitCode === 'number') {
+          emitInstall({ code: codeName(e.exitCode), subcode: e.subcode, details: e.details });
+          process.exitCode = e.exitCode;
+          return;
+        }
+        throw e;
+      }
+      // Non-blocking lookalike warning (spec §3 / Inv 23) → always to stderr; --json also
+      // carries result.lookalike in the stdout object. The install already succeeded.
+      if (result.lookalike) {
+        process.stderr.write('⚠ rwa install: the name "' + result.name + '" closely matches "' + result.lookalike + '", installed from a DIFFERENT key. The author is identified by the key, not the name — review before trusting.\n');
+      }
+      // I5 — same-key rename heads-up (non-blocking, registry-derived). This author published other
+      // names in this host; surfaced so a rename reads as continuity, not a new author.
+      if (Array.isArray(result.priorNames) && result.priorNames.length) {
+        process.stderr.write('note: rwa install: this author (same key) previously published: ' + result.priorNames.join(', ') + '. The current name is "' + result.name + '" — identity is the key, not the name.\n');
+      }
+      if (jsonMode) {
+        process.stdout.write(JSON.stringify(result) + '\n');
+      } else {
+        const label = result.status === 'updated' ? 'Updated' : result.status === 'already_installed' ? 'Already installed' : 'Installed';
+        process.stdout.write(
+          '✓ ' + label + ' ' + result.name + ' (' + result.kind + ', ' + (result.verified ? 'verified' : 'UNVERIFIED') + ')\n' +
+          '  skillId: ' + result.skillId + '\n' +
+          (result.update && result.update.added.length ? '  + added: ' + result.update.added.join(', ') + '\n' : '') +
+          (result.update && result.update.removed.length ? '  − removed: ' + result.update.removed.join(', ') + '\n' : ''),
+        );
+      }
+      return;
+    }
+
     // `rwa skin <file> <name|reset> [--l1] [--theme-only] [--json]`.
     //
     // DEFAULT (no --l1): deterministic, model-free theme swap. Applies a preset's

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rewritable",
-  "version": "0.8.1",
+  "version": "0.10.0",
   "description": "CLI for re-writeable: emit and import single-file rwa documents.",
   "type": "module",
   "bin": {