shoplazza-ai-dev-cli 0.1.2 → 0.1.5

package/dist/cli.mjs

@@ -79,6 +79,11 @@ function decomposePortalRef(ref) {
 	}
 	return null;
 }
+function portalRefToSkillPath(ref) {
+	const m = ref.match(/^(?:@public|@teams\/[^/]+)\/(skills|rules)\/([^/]+)$/);
+	if (!m) return null;
+	return `${m[1]}/${m[2]}/SKILL.md`;
+}
 function sanitizeSubpath(subpath) {
 	const segments = subpath.replace(/\\/g, "/").split("/");
 	for (const segment of segments) if (segment === "..") throw new Error(`Unsafe subpath: "${subpath}" contains path traversal segments. Subpaths must not contain ".." components.`);
@@ -313,7 +318,8 @@ const agents = {
 		globalSkillsDir: join(codexHome, "skills"),
 		detectInstalled: async () => {
 			return existsSync(codexHome) || existsSync("/etc/codex");
-		}
+		},
+		hiddenInPicker: true
 	},
 	cursor: {
 		name: "cursor",
@@ -331,6 +337,9 @@ async function detectInstalledAgents() {
 		installed: await config.detectInstalled()
 	})))).filter((r) => r.installed).map((r) => r.type);
 }
+function getPickerVisibleAgents() {
+	return Object.entries(agents).filter(([_, config]) => !config.hiddenInPicker).map(([type]) => type);
+}
 function getUniversalAgents() {
 	return Object.entries(agents).filter(([_, config]) => config.skillsDir === ".agents/skills" && config.showInUniversalList !== false).map(([type]) => type);
 }
@@ -490,7 +499,153 @@ function configCommand(args) {
 	console.error("Available: get | set | unset | list | path");
 	process.exit(2);
 }
-const FORGE_HOOK_BASENAME$1 = "track-skill-read.mjs";
+const FORGE_CURSOR_EVENTS = ["beforeReadFile", "beforeSubmitPrompt"];
+const CURSOR_HOOK_SCRIPT_BASENAME = "track-skill-cursor.mjs";
+const LEGACY_CURSOR_HOOK_BASENAME = "track-skill-read.mjs";
+function getCursorHookScript(portalUrl) {
+	const portal = portalUrl.replace(/\/$/, "");
+	return `#!/usr/bin/env node
+// forge:track-skill-cursor
+// Auto-generated by ai-dev-cli. Do not edit; run \`ai-dev-cli add\` to refresh.
+// Cursor (2.4+) has no dedicated skill_invoked event. We listen on:
+//   - beforeReadFile  → agent reads SKILL.md when natural-language-loading
+//                       a skill into context.
+//   - beforeSubmitPrompt → user types \`/<skill-name>\` (slash command);
+//                       Cursor loads the skill internally without reading
+//                       SKILL.md, so we parse the prompt instead.
+// IMPORTANT: both are permission-gating hooks. We MUST output \`{}\` and
+// exit 0 on every path so Cursor never blocks user input or file reads.
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+
+const PORTAL = ${JSON.stringify(portal)};
+
+// Always allow; never block on any code path.
+function allowAndExit() {
+  try { process.stdout.write('{}'); } catch {}
+  process.exit(0);
+}
+
+// Hard ceiling: even if fetch hangs past its own 2s timeout, free Cursor
+// after 5s total.
+const exitTimer = setTimeout(allowAndExit, 5000);
+exitTimer.unref?.();
+
+function readManifest(dir) {
+  try {
+    const raw = fs.readFileSync(path.join(dir, '.forge-source.json'), 'utf8');
+    return JSON.parse(raw);
+  } catch {
+    return null;
+  }
+}
+
+// Walk up parent directories from a SKILL.md path looking for the
+// .forge-source.json manifest forge writes at install time. Bounded depth
+// so a stray read on an unrelated file can't walk to filesystem root.
+function manifestFromFilePath(filePath) {
+  if (!filePath || typeof filePath !== 'string') return null;
+  let dir = path.dirname(filePath);
+  for (let i = 0; i < 8; i++) {
+    const m = readManifest(dir);
+    if (m) return m;
+    const parent = path.dirname(dir);
+    if (parent === dir) break;
+    dir = parent;
+  }
+  return null;
+}
+
+// Resolve a skill name (as typed in a slash command) to its forge manifest.
+// Checks the IDE entry first (~/.cursor/skills/<name>/), then falls back
+// to the canonical store (~/.ai-dev-cli/store/skills|plugins) which is
+// authoritative regardless of where the IDE entry symlink lives.
+function manifestFromSkillName(skillId) {
+  if (!skillId || typeof skillId !== 'string') return null;
+  const name = skillId.includes(':') ? skillId.split(':').pop() : skillId;
+  if (!name) return null;
+  const cursorHome = path.join(os.homedir(), '.cursor');
+  const m = readManifest(path.join(cursorHome, 'skills', name));
+  if (m) return m;
+  const storeRoot = path.join(os.homedir(), '.ai-dev-cli', 'store');
+  for (const sub of ['skills', 'plugins']) {
+    try {
+      const root = path.join(storeRoot, sub);
+      for (const entry of fs.readdirSync(root)) {
+        if (sub === 'skills') {
+          if (!entry.endsWith('__' + name)) continue;
+          const m2 = readManifest(path.join(root, entry));
+          if (m2 && m2.name === name) return m2;
+        } else {
+          const m2 = readManifest(path.join(root, entry, 'skills', name));
+          if (m2 && m2.name === name) return m2;
+        }
+      }
+    } catch {
+      /* store dir missing — fall through */
+    }
+  }
+  return null;
+}
+
+let buf = '';
+process.stdin.on('data', (c) => (buf += c));
+process.stdin.on('end', () => {
+  try {
+    const ev = JSON.parse(buf);
+    let manifest = null;
+
+    if (ev.hook_event_name === 'beforeReadFile') {
+      const filePath = ev.file_path;
+      if (
+        typeof filePath !== 'string' ||
+        (!filePath.endsWith(path.sep + 'SKILL.md') && !filePath.endsWith('/SKILL.md'))
+      ) {
+        return allowAndExit();
+      }
+      manifest = manifestFromFilePath(filePath);
+    } else if (ev.hook_event_name === 'beforeSubmitPrompt') {
+      const prompt = typeof ev.prompt === 'string' ? ev.prompt.trimStart() : '';
+      // Slash commands are at the start of the prompt; the token after \`/\`
+      // up to the first whitespace is the skill identifier the user typed.
+      const m = prompt.match(/^\\/([^\\s]+)/);
+      if (!m) return allowAndExit();
+      manifest = manifestFromSkillName(m[1]);
+    } else {
+      return allowAndExit();
+    }
+
+    if (!manifest?.ref) return allowAndExit();
+
+    fetch(PORTAL + '/events', {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({
+        event_type: 'skill_invoked',
+        asset_ref: manifest.ref,
+        install_mode: manifest.install_mode || 'cursor',
+        metadata: {
+          parent_plugin_ref: manifest.parent_plugin_ref || null,
+        },
+      }),
+      signal: AbortSignal.timeout(2000),
+    })
+      .catch(() => {})
+      .finally(allowAndExit);
+  } catch {
+    allowAndExit();
+  }
+});
+`;
+}
+function isForgeOwnedCommand(command) {
+	if (typeof command !== "string") return false;
+	return command.includes(CURSOR_HOOK_SCRIPT_BASENAME) || command.includes(LEGACY_CURSOR_HOOK_BASENAME);
+}
+function isFlatEntry(e) {
+	return !!e && typeof e === "object" && typeof e.command === "string";
+}
 async function upsertCursorHooks(hooksJsonPath, scriptPath) {
 	let raw = "";
 	try {
@@ -498,24 +653,37 @@ async function upsertCursorHooks(hooksJsonPath, scriptPath) {
 	} catch {}
 	const cfg = raw.trim() ? JSON.parse(raw) : { version: 1 };
 	if (!cfg.hooks) cfg.hooks = {};
-	if (!Array.isArray(cfg.hooks.postToolUse)) cfg.hooks.postToolUse = [];
-	let readMatcher = cfg.hooks.postToolUse.find((m) => m.matcher === "Read");
-	if (!readMatcher) {
-		readMatcher = {
-			matcher: "Read",
-			hooks: []
-		};
-		cfg.hooks.postToolUse.push(readMatcher);
+	if (Array.isArray(cfg.hooks.postToolUse)) {
+		for (let i = cfg.hooks.postToolUse.length - 1; i >= 0; i--) {
+			const m = cfg.hooks.postToolUse[i];
+			if (!m || !Array.isArray(m.hooks)) continue;
+			m.hooks = m.hooks.filter((h) => !isForgeOwnedCommand(h.command));
+			if (m.hooks.length === 0 && m.matcher === "Read") cfg.hooks.postToolUse.splice(i, 1);
+		}
+		if (cfg.hooks.postToolUse.length === 0) delete cfg.hooks.postToolUse;
 	}
-	if (!Array.isArray(readMatcher.hooks)) readMatcher.hooks = [];
 	const command = `node ${shellEscape$2(scriptPath)}`;
-	const ourEntry = readMatcher.hooks.find((h) => h.command.includes(FORGE_HOOK_BASENAME$1));
-	if (ourEntry) {
-		if (ourEntry.command !== command) ourEntry.command = command;
-	} else readMatcher.hooks.push({
-		type: "command",
-		command
-	});
+	for (const eventName of FORGE_CURSOR_EVENTS) {
+		if (!Array.isArray(cfg.hooks[eventName])) cfg.hooks[eventName] = [];
+		const arr = cfg.hooks[eventName];
+		for (let i = arr.length - 1; i >= 0; i--) {
+			const item = arr[i];
+			if (!item || typeof item !== "object") continue;
+			if (isFlatEntry(item)) {
+				if (isForgeOwnedCommand(item.command)) arr.splice(i, 1);
+				continue;
+			}
+			const wrapper = item;
+			if (Array.isArray(wrapper.hooks)) {
+				wrapper.hooks = wrapper.hooks.filter((h) => !isForgeOwnedCommand(h?.command));
+				if (wrapper.hooks.length === 0 && wrapper.matcher === void 0) arr.splice(i, 1);
+			}
+		}
+		arr.push({
+			type: "command",
+			command
+		});
+	}
 	await mkdir(dirname(hooksJsonPath), { recursive: true });
 	await writeFile(hooksJsonPath, JSON.stringify(cfg, null, 2) + "\n", "utf-8");
 }
@@ -574,7 +742,7 @@ function removeSection(toml, header) {
 function jsonString(s) {
 	return JSON.stringify(s);
 }
-const FORGE_HOOK_BASENAME = "track-skill-read.mjs";
+const FORGE_HOOK_BASENAME = "track-skill-claude-code.mjs";
 async function upsertCodexHooks(hooksJsonPath, configTomlPath, scriptPath) {
 	let raw = "";
 	try {
@@ -615,9 +783,9 @@ function shellEscape$1(p) {
 	if (!/[\s"'$`\\]/.test(p)) return p;
 	return `'${p.replace(/'/g, `'\\''`)}'`;
 }
-const HOOK_SCRIPT_BASENAME = "track-skill-read.mjs";
+const HOOK_SCRIPT_BASENAME = "track-skill-claude-code.mjs";
 const HOOK_DIRNAME = "forge-hooks";
-const FORGE_HOOK_TAG = "forge:track-skill-read";
+const FORGE_HOOK_TAG = "forge:track-skill-claude-code";
 async function writeForgeSourceManifest(skillDir, manifest) {
 	const target = join(skillDir, ".forge-source.json");
 	await mkdir(skillDir, { recursive: true });
@@ -742,27 +910,34 @@ async function ensureForgeHooks(agent) {
 	try {
 		const portal = loadConfig().portal || DEFAULT_PORTAL;
 		const home = getAgentHome(agent);
-		const scriptPath = join(home, HOOK_DIRNAME, HOOK_SCRIPT_BASENAME);
-		await writeHookScript(scriptPath, portal);
-		if (agent === "claude-code") await upsertClaudeCodeSettings(join(home, "settings.json"), scriptPath);
-		else if (agent === "cursor") await upsertCursorHooks(join(home, "hooks.json"), scriptPath);
-		else if (agent === "codex") await upsertCodexHooks(join(home, "hooks.json"), join(home, "config.toml"), scriptPath);
+		if (agent === "claude-code") {
+			const scriptPath = join(home, HOOK_DIRNAME, HOOK_SCRIPT_BASENAME);
+			await writeScriptIfChanged(scriptPath, getForgeHookScript(portal));
+			await upsertClaudeCodeSettings(join(home, "settings.json"), scriptPath);
+		} else if (agent === "cursor") {
+			const cursorScriptPath = join(home, HOOK_DIRNAME, CURSOR_HOOK_SCRIPT_BASENAME);
+			await writeScriptIfChanged(cursorScriptPath, getCursorHookScript(portal));
+			await upsertCursorHooks(join(home, "hooks.json"), cursorScriptPath);
+		} else if (agent === "codex") {
+			const scriptPath = join(home, HOOK_DIRNAME, HOOK_SCRIPT_BASENAME);
+			await writeScriptIfChanged(scriptPath, getForgeHookScript(portal));
+			await upsertCodexHooks(join(home, "hooks.json"), join(home, "config.toml"), scriptPath);
+		}
 	} catch (err) {
 		warnings.push(`Failed to install forge hooks for ${agent}: ${err instanceof Error ? err.message : String(err)}`);
 	}
 	return { warnings };
 }
-async function writeHookScript(scriptPath, portalUrl) {
-	const next = getForgeHookScript(portalUrl);
+async function writeScriptIfChanged(scriptPath, content) {
 	let prev = null;
 	if (existsSync(scriptPath)) try {
 		prev = await readFile(scriptPath, "utf-8");
 	} catch {
 		prev = null;
 	}
-	if (prev === next) return;
+	if (prev === content) return;
 	await mkdir(dirname(scriptPath), { recursive: true });
-	await writeFile(scriptPath, next, {
+	await writeFile(scriptPath, content, {
 		encoding: "utf-8",
 		mode: 493
 	});
@@ -1598,7 +1773,6 @@ async function installSkillForAgent(skill, agentType, opts) {
 	if (!isPathSafe(join(storeRoot, "skills"), canonicalDir)) return {
 		success: false,
 		path: "",
-		mode: "symlink",
 		error: "Invalid skill name: path traversal detected",
 		forgeOtherReplacements: []
 	};
@@ -1625,7 +1799,6 @@ async function installSkillForAgent(skill, agentType, opts) {
 			if (!proceed) return {
 				success: false,
 				path: entry,
-				mode: "symlink",
 				error: "aborted: user-owned content at entry path",
 				forgeOtherReplacements: []
 			};
@@ -1659,7 +1832,6 @@ async function installSkillForAgent(skill, agentType, opts) {
 			return {
 				success: true,
 				path: entry,
-				mode: "symlink",
 				symlinkFailed: true,
 				canonicalPath: canonicalDir,
 				forgeOtherReplacements
@@ -1668,7 +1840,6 @@ async function installSkillForAgent(skill, agentType, opts) {
 		return {
 			success: true,
 			path: entry,
-			mode: "symlink",
 			canonicalPath: canonicalDir,
 			forgeOtherReplacements
 		};
@@ -1676,7 +1847,6 @@ async function installSkillForAgent(skill, agentType, opts) {
 		return {
 			success: false,
 			path: entry,
-			mode: "symlink",
 			error: error instanceof Error ? error.message : "Unknown error",
 			forgeOtherReplacements: []
 		};
@@ -1689,7 +1859,6 @@ async function _installSkillForAgentLegacy(skill, agentType, options) {
 	if (isGlobal && agent.globalSkillsDir === void 0) return {
 		success: false,
 		path: "",
-		mode: options.mode ?? "symlink",
 		error: `${agent.displayName} does not support global skill installation`,
 		forgeOtherReplacements: []
 	};
@@ -1698,39 +1867,25 @@ async function _installSkillForAgentLegacy(skill, agentType, options) {
 	const canonicalDir = join(canonicalBase, skillName);
 	const agentBase = getAgentBaseDir(agentType, isGlobal, cwd);
 	const agentDir = join(agentBase, skillName);
-	const installMode = options.mode ?? "symlink";
 	if (!isPathSafe(canonicalBase, canonicalDir)) return {
 		success: false,
 		path: agentDir,
-		mode: installMode,
 		error: "Invalid skill name: potential path traversal detected",
 		forgeOtherReplacements: []
 	};
 	if (!isPathSafe(agentBase, agentDir)) return {
 		success: false,
 		path: agentDir,
-		mode: installMode,
 		error: "Invalid skill name: potential path traversal detected",
 		forgeOtherReplacements: []
 	};
 	try {
-		if (installMode === "copy") {
-			await cleanAndCreateDirectory(agentDir);
-			await copyDirectory(skill.path, agentDir);
-			return {
-				success: true,
-				path: agentDir,
-				mode: "copy",
-				forgeOtherReplacements: []
-			};
-		}
 		await cleanAndCreateDirectory(canonicalDir);
 		await copyDirectory(skill.path, canonicalDir);
 		if (isGlobal && isUniversalAgent(agentType)) return {
 			success: true,
 			path: canonicalDir,
 			canonicalPath: canonicalDir,
-			mode: "symlink",
 			forgeOtherReplacements: []
 		};
 		if (!await createSymlink(canonicalDir, agentDir)) {
@@ -1740,7 +1895,6 @@ async function _installSkillForAgentLegacy(skill, agentType, options) {
 				success: true,
 				path: agentDir,
 				canonicalPath: canonicalDir,
-				mode: "symlink",
 				symlinkFailed: true,
 				forgeOtherReplacements: []
 			};
@@ -1749,14 +1903,12 @@ async function _installSkillForAgentLegacy(skill, agentType, options) {
 			success: true,
 			path: agentDir,
 			canonicalPath: canonicalDir,
-			mode: "symlink",
 			forgeOtherReplacements: []
 		};
 	} catch (error) {
 		return {
 			success: false,
 			path: agentDir,
-			mode: installMode,
 			error: error instanceof Error ? error.message : "Unknown error",
 			forgeOtherReplacements: []
 		};
@@ -1816,11 +1968,9 @@ async function installWellKnownSkillForAgent(skill, agentType, options = {}) {
 	const agent = agents[agentType];
 	const isGlobal = options.global ?? false;
 	const cwd = options.cwd || process.cwd();
-	const installMode = options.mode ?? "symlink";
 	if (isGlobal && agent.globalSkillsDir === void 0) return {
 		success: false,
 		path: "",
-		mode: installMode,
 		error: `${agent.displayName} does not support global skill installation`
 	};
 	const skillName = sanitizeName(skill.installName);
@@ -1831,13 +1981,11 @@ async function installWellKnownSkillForAgent(skill, agentType, options = {}) {
 	if (!isPathSafe(canonicalBase, canonicalDir)) return {
 		success: false,
 		path: agentDir,
-		mode: installMode,
 		error: "Invalid skill name: potential path traversal detected"
 	};
 	if (!isPathSafe(agentBase, agentDir)) return {
 		success: false,
 		path: agentDir,
-		mode: installMode,
 		error: "Invalid skill name: potential path traversal detected"
 	};
 	async function writeSkillFiles(targetDir) {
@@ -1850,22 +1998,12 @@ async function installWellKnownSkillForAgent(skill, agentType, options = {}) {
 		}
 	}
 	try {
-		if (installMode === "copy") {
-			await cleanAndCreateDirectory(agentDir);
-			await writeSkillFiles(agentDir);
-			return {
-				success: true,
-				path: agentDir,
-				mode: "copy"
-			};
-		}
 		await cleanAndCreateDirectory(canonicalDir);
 		await writeSkillFiles(canonicalDir);
 		if (isGlobal && isUniversalAgent(agentType)) return {
 			success: true,
 			path: canonicalDir,
-			canonicalPath: canonicalDir,
-			mode: "symlink"
+			canonicalPath: canonicalDir
 		};
 		if (!await createSymlink(canonicalDir, agentDir)) {
 			await cleanAndCreateDirectory(agentDir);
@@ -1874,21 +2012,18 @@ async function installWellKnownSkillForAgent(skill, agentType, options = {}) {
 				success: true,
 				path: agentDir,
 				canonicalPath: canonicalDir,
-				mode: "symlink",
 				symlinkFailed: true
 			};
 		}
 		return {
 			success: true,
 			path: agentDir,
-			canonicalPath: canonicalDir,
-			mode: "symlink"
+			canonicalPath: canonicalDir
 		};
 	} catch (error) {
 		return {
 			success: false,
 			path: agentDir,
-			mode: installMode,
 			error: error instanceof Error ? error.message : "Unknown error"
 		};
 	}
@@ -1897,11 +2032,9 @@ async function installBlobSkillForAgent(skill, agentType, options = {}) {
 	const agent = agents[agentType];
 	const isGlobal = options.global ?? false;
 	const cwd = options.cwd || process.cwd();
-	const installMode = options.mode ?? "symlink";
 	if (isGlobal && agent.globalSkillsDir === void 0) return {
 		success: false,
 		path: "",
-		mode: installMode,
 		error: `${agent.displayName} does not support global skill installation`
 	};
 	const skillName = sanitizeName(skill.installName);
@@ -1912,13 +2045,11 @@ async function installBlobSkillForAgent(skill, agentType, options = {}) {
 	if (!isPathSafe(canonicalBase, canonicalDir)) return {
 		success: false,
 		path: agentDir,
-		mode: installMode,
 		error: "Invalid skill name: potential path traversal detected"
 	};
 	if (!isPathSafe(agentBase, agentDir)) return {
 		success: false,
 		path: agentDir,
-		mode: installMode,
 		error: "Invalid skill name: potential path traversal detected"
 	};
 	async function writeSkillFiles(targetDir) {
@@ -1931,22 +2062,12 @@ async function installBlobSkillForAgent(skill, agentType, options = {}) {
 		}
 	}
 	try {
-		if (installMode === "copy") {
-			await cleanAndCreateDirectory(agentDir);
-			await writeSkillFiles(agentDir);
-			return {
-				success: true,
-				path: agentDir,
-				mode: "copy"
-			};
-		}
 		await cleanAndCreateDirectory(canonicalDir);
 		await writeSkillFiles(canonicalDir);
 		if (isGlobal && isUniversalAgent(agentType)) return {
 			success: true,
 			path: canonicalDir,
-			canonicalPath: canonicalDir,
-			mode: "symlink"
+			canonicalPath: canonicalDir
 		};
 		if (!await createSymlink(canonicalDir, agentDir)) {
 			await cleanAndCreateDirectory(agentDir);
@@ -1955,21 +2076,18 @@ async function installBlobSkillForAgent(skill, agentType, options = {}) {
 				success: true,
 				path: agentDir,
 				canonicalPath: canonicalDir,
-				mode: "symlink",
 				symlinkFailed: true
 			};
 		}
 		return {
 			success: true,
 			path: agentDir,
-			canonicalPath: canonicalDir,
-			mode: "symlink"
+			canonicalPath: canonicalDir
 		};
 	} catch (error) {
 		return {
 			success: false,
 			path: agentDir,
-			mode: installMode,
 			error: error instanceof Error ? error.message : "Unknown error"
 		};
 	}
@@ -3270,23 +3388,18 @@ function splitAgentsByType(agentTypes) {
 		symlinked
 	};
 }
-function buildAgentSummaryLines(targetAgents, installMode, entry) {
+function buildAgentSummaryLines(targetAgents, entry) {
 	const lines = [];
 	const { universal, symlinked } = splitAgentsByType(targetAgents);
-	if (installMode === "symlink") {
-		if (universal.length > 0) lines.push(`  ${import_picocolors.default.green("universal:")} ${formatList(universal)}`);
-		if (symlinked.length > 0) if (entry) {
-			const sanitized = sanitizeName(entry.skillName);
-			for (const a of targetAgents) {
-				if (isUniversalAgent(a)) continue;
-				const entryPath = join(getAgentBaseDir(a, entry.scope === "global", entry.cwd), sanitized);
-				lines.push(`  ${import_picocolors.default.dim("symlink →")} ${import_picocolors.default.cyan(shortenPath$2(entryPath, entry.cwd))}  ${import_picocolors.default.dim(`(${agents[a].displayName})`)}`);
-			}
-		} else lines.push(`  ${import_picocolors.default.dim("symlink →")} ${formatList(symlinked)}`);
-	} else {
-		const allNames = targetAgents.map((a) => agents[a].displayName);
-		lines.push(`  ${import_picocolors.default.dim("copy →")} ${formatList(allNames)}`);
-	}
+	if (universal.length > 0) lines.push(`  ${import_picocolors.default.green("universal:")} ${formatList(universal)}`);
+	if (symlinked.length > 0) if (entry) {
+		const sanitized = sanitizeName(entry.skillName);
+		for (const a of targetAgents) {
+			if (isUniversalAgent(a)) continue;
+			const entryPath = join(getAgentBaseDir(a, entry.scope === "global", entry.cwd), sanitized);
+			lines.push(`  ${import_picocolors.default.dim("symlink →")} ${import_picocolors.default.cyan(shortenPath$2(entryPath, entry.cwd))}  ${import_picocolors.default.dim(`(${agents[a].displayName})`)}`);
+		}
+	} else lines.push(`  ${import_picocolors.default.dim("symlink →")} ${formatList(symlinked)}`);
 	return lines;
 }
 function ensureUniversalAgents(targetAgents) {
@@ -3347,7 +3460,7 @@ async function selectAgentsInteractive(options) {
 	const supportsGlobalFilter = (a) => !options.global || agents[a].globalSkillsDir;
 	return await searchMultiselect({
 		message: "Which agents do you want to install to?",
-		items: buildAgentChoices(Object.keys(agents).filter(supportsGlobalFilter), options),
+		items: buildAgentChoices(getPickerVisibleAgents().filter(supportsGlobalFilter), options),
 		initialSelected: [],
 		required: true
 	});
@@ -3436,7 +3549,7 @@ async function handleWellKnownSkills(source, url, options, spinner) {
 			M.info("Installing to all agents");
 		} else {
 			M.info("Select agents to install skills to");
-			const selected = await promptForAgents("Which agents do you want to install to?", buildAgentChoices(Object.keys(agents), { global: options.global }));
+			const selected = await promptForAgents("Which agents do you want to install to?", buildAgentChoices(getPickerVisibleAgents(), { global: options.global }));
 			if (pD(selected)) {
 				xe("Installation cancelled");
 				process.exit(0);
@@ -3479,27 +3592,6 @@ async function handleWellKnownSkills(source, url, options, spinner) {
 		}
 		installGlobally = scope;
 	}
-	let installMode = options.copy ? "copy" : "symlink";
-	const uniqueDirs = new Set(targetAgents.map((a) => agents[a].skillsDir));
-	if (!options.copy && !options.yes && uniqueDirs.size > 1) {
-		const modeChoice = await ve({
-			message: "Installation method",
-			options: [{
-				value: "symlink",
-				label: "Symlink (Recommended)",
-				hint: "Single source of truth, easy updates"
-			}, {
-				value: "copy",
-				label: "Copy to all agents",
-				hint: "Independent copies for each agent"
-			}]
-		});
-		if (pD(modeChoice)) {
-			xe("Installation cancelled");
-			process.exit(0);
-		}
-		installMode = modeChoice;
-	} else if (uniqueDirs.size <= 1) installMode = "copy";
 	const cwd = process.cwd();
 	const summaryLines = [];
 	targetAgents.map((a) => agents[a].displayName);
@@ -3517,7 +3609,7 @@ async function handleWellKnownSkills(source, url, options, spinner) {
 		if (summaryLines.length > 0) summaryLines.push("");
 		const shortCanonical = shortenPath$2(getCanonicalPath(skill.installName, { global: installGlobally }), cwd);
 		summaryLines.push(`${import_picocolors.default.cyan(shortCanonical)}`);
-		summaryLines.push(...buildAgentSummaryLines(targetAgents, installMode, {
+		summaryLines.push(...buildAgentSummaryLines(targetAgents, {
 			skillName: skill.installName,
 			scope: installGlobally ? "global" : "project",
 			cwd
@@ -3541,10 +3633,7 @@ async function handleWellKnownSkills(source, url, options, spinner) {
 	spinner.start("Installing skills...");
 	const results = [];
 	for (const skill of selectedSkills) for (const agent of targetAgents) {
-		const result = await installWellKnownSkillForAgent(skill, agent, {
-			global: installGlobally,
-			mode: installMode
-		});
+		const result = await installWellKnownSkillForAgent(skill, agent, { global: installGlobally });
 		results.push({
 			skill: skill.installName,
 			agent: agents[agent].displayName,
@@ -3596,24 +3685,16 @@ async function handleWellKnownSkills(source, url, options, spinner) {
 			bySkill.set(r.skill, skillResults);
 		}
 		const skillCount = bySkill.size;
-		const symlinkFailures = successful.filter((r) => r.mode === "symlink" && r.symlinkFailed);
+		const symlinkFailures = successful.filter((r) => r.symlinkFailed);
 		const copiedAgents = symlinkFailures.map((r) => r.agent);
 		const resultLines = [];
 		for (const [skillName, skillResults] of bySkill) {
 			const firstResult = skillResults[0];
-			if (firstResult.mode === "copy") {
-				resultLines.push(`${import_picocolors.default.green("✓")} ${skillName} ${import_picocolors.default.dim("(copied)")}`);
-				for (const r of skillResults) {
-					const shortPath = shortenPath$2(r.path, cwd);
-					resultLines.push(`  ${import_picocolors.default.dim("→")} ${shortPath}`);
-				}
-			} else {
-				if (firstResult.canonicalPath) {
-					const shortPath = shortenPath$2(firstResult.canonicalPath, cwd);
-					resultLines.push(`${import_picocolors.default.green("✓")} ${shortPath}`);
-				} else resultLines.push(`${import_picocolors.default.green("✓")} ${skillName}`);
-				resultLines.push(...buildResultLines(skillResults, targetAgents));
-			}
+			if (firstResult.canonicalPath) {
+				const shortPath = shortenPath$2(firstResult.canonicalPath, cwd);
+				resultLines.push(`${import_picocolors.default.green("✓")} ${shortPath}`);
+			} else resultLines.push(`${import_picocolors.default.green("✓")} ${skillName}`);
+			resultLines.push(...buildResultLines(skillResults, targetAgents));
 		}
 		const title = import_picocolors.default.green(`Installed ${skillCount} skill${skillCount !== 1 ? "s" : ""}`);
 		Me(resultLines.join("\n"), title);
@@ -3848,7 +3929,7 @@ async function runAdd(args, options = {}) {
 					spinner.stop(`${Object.keys(agents).length} agents`);
 					if (options.yes) targetAgents = installedAgents.length > 0 ? ensureUniversalAgents(installedAgents) : validAgents;
 					else if (installedAgents.length === 0) {
-						const selected = await promptForAgents("Which IDEs do you want to install this plugin to?", buildAgentChoices(Object.keys(agents), {
+						const selected = await promptForAgents("Which IDEs do you want to install this plugin to?", buildAgentChoices(getPickerVisibleAgents(), {
 							global: options.global,
 							forPlugin: true
 						}));
@@ -4257,7 +4338,7 @@ async function runAdd(args, options = {}) {
 				M.info("Installing to all agents");
 			} else {
 				M.info("Select agents to install skills to");
-				const selected = await promptForAgents("Which agents do you want to install to?", buildAgentChoices(Object.keys(agents), { global: options.global }));
+				const selected = await promptForAgents("Which agents do you want to install to?", buildAgentChoices(getPickerVisibleAgents(), { global: options.global }));
 				if (pD(selected)) {
 					xe("Installation cancelled");
 					await cleanup(tempDir);
@@ -4303,28 +4384,6 @@ async function runAdd(args, options = {}) {
 			}
 			installGlobally = scope;
 		}
-		let installMode = options.copy ? "copy" : "symlink";
-		const uniqueDirs = new Set(targetAgents.map((a) => agents[a].skillsDir));
-		if (!options.copy && !options.yes && uniqueDirs.size > 1) {
-			const modeChoice = await ve({
-				message: "Installation method",
-				options: [{
-					value: "symlink",
-					label: "Symlink (Recommended)",
-					hint: "Single source of truth, easy updates"
-				}, {
-					value: "copy",
-					label: "Copy to all agents",
-					hint: "Independent copies for each agent"
-				}]
-			});
-			if (pD(modeChoice)) {
-				xe("Installation cancelled");
-				await cleanup(tempDir);
-				process.exit(0);
-			}
-			installMode = modeChoice;
-		}
 		const cwd = process.cwd();
 		const _summaryPortalRef = parsed.type === "portal" || parsed.type === "public" || parsed.type === "team" ? parsed.portalRef ?? null : null;
 		const _summaryIsTeam = _summaryPortalRef?.startsWith("@teams/") ?? false;
@@ -4356,7 +4415,7 @@ async function runAdd(args, options = {}) {
 				if (summaryLines.length > 0) summaryLines.push("");
 				const shortCanonical = shortenPath$2(join(_summaryStoreRoot, "skills", `${_summaryScopeNs}__${sanitizeName(skill.name)}`), cwd);
 				summaryLines.push(`${import_picocolors.default.cyan(shortCanonical)}`);
-				summaryLines.push(...buildAgentSummaryLines(targetAgents, installMode, {
+				summaryLines.push(...buildAgentSummaryLines(targetAgents, {
 					skillName: skill.name,
 					scope: _summaryScope,
 					cwd
@@ -4414,17 +4473,13 @@ async function runAdd(args, options = {}) {
 				result = await installBlobSkillForAgent({
 					installName: blobSkill.name,
 					files: blobSkill.files
-				}, agent, {
-					global: installGlobally,
-					mode: installMode
-				});
+				}, agent, { global: installGlobally });
 			} else {
 				const skillRef = _installPortalRef ? `${_installPortalRef}/${skill.name ?? ""}` : skill.name ?? "unknown";
 				result = await installSkillForAgent(skill, agent, {
 					scope: installGlobally ? "global" : "project",
 					ref: skillRef,
 					scopeNamespace: _installScopeNs,
-					mode: installMode,
 					forceOverwrite: options.force || options.yes,
 					onConflictPrompt: (conflicts) => promptForeignOverwrite(conflicts, {
 						yes: options.yes,
@@ -4537,7 +4592,7 @@ async function runAdd(args, options = {}) {
 						const hash = await computeSkillFolderHash(join(repoRoot, dirname(rawSkillPath)));
 						if (hash) skillFolderHash = hash;
 					}
-					const lockSkillPath = portalDecomp && rawSkillPath && rawSkillPath.startsWith(portalDecomp.pathPrefix) ? rawSkillPath.slice(portalDecomp.pathPrefix.length) : rawSkillPath;
+					const lockSkillPath = parsed.portalRef ? portalRefToSkillPath(parsed.portalRef) ?? rawSkillPath : portalDecomp && rawSkillPath && rawSkillPath.startsWith(portalDecomp.pathPrefix) ? rawSkillPath.slice(portalDecomp.pathPrefix.length) : rawSkillPath;
 					await addSkillToLock(skill.name, {
 						source: lockSource ?? normalizedSource ?? "",
 						sourceType: parsed.type,
@@ -4557,7 +4612,7 @@ async function runAdd(args, options = {}) {
 				if (successfulSkillNames.has(skillDisplayName)) try {
 					const computedHash = blobResult && "snapshotHash" in skill ? skill.snapshotHash : await computeSkillFolderHash(skill.path);
 					const rawSkillPath = skillFiles[skill.name];
-					const lockSkillPath = portalDecomp && rawSkillPath && rawSkillPath.startsWith(portalDecomp.pathPrefix) ? rawSkillPath.slice(portalDecomp.pathPrefix.length) : rawSkillPath;
+					const lockSkillPath = parsed.portalRef ? portalRefToSkillPath(parsed.portalRef) ?? rawSkillPath : portalDecomp && rawSkillPath && rawSkillPath.startsWith(portalDecomp.pathPrefix) ? rawSkillPath.slice(portalDecomp.pathPrefix.length) : rawSkillPath;
 					await addSkillToLocalLock(skill.name, {
 						source: lockSource || parsed.url,
 						ref: parsed.ref,
@@ -4583,26 +4638,18 @@ async function runAdd(args, options = {}) {
 				} else ungroupedResults.push(r);
 			}
 			const skillCount = bySkill.size;
-			const symlinkFailures = successful.filter((r) => r.mode === "symlink" && r.symlinkFailed);
+			const symlinkFailures = successful.filter((r) => r.symlinkFailed);
 			const copiedAgents = symlinkFailures.map((r) => r.agent);
 			const resultLines = [];
 			const printSkillResults = (entries) => {
 				for (const entry of entries) {
 					const skillResults = bySkill.get(entry.skill) || [];
 					const firstResult = skillResults[0];
-					if (firstResult.mode === "copy") {
-						resultLines.push(`${import_picocolors.default.green("✓")} ${entry.skill} ${import_picocolors.default.dim("(copied)")}`);
-						for (const r of skillResults) {
-							const shortPath = shortenPath$2(r.path, cwd);
-							resultLines.push(`  ${import_picocolors.default.dim("→")} ${shortPath}`);
-						}
-					} else {
-						if (firstResult.canonicalPath) {
-							const shortPath = shortenPath$2(firstResult.canonicalPath, cwd);
-							resultLines.push(`${import_picocolors.default.green("✓")} ${shortPath}`);
-						} else resultLines.push(`${import_picocolors.default.green("✓")} ${entry.skill}`);
-						resultLines.push(...buildResultLines(skillResults, targetAgents));
-					}
+					if (firstResult.canonicalPath) {
+						const shortPath = shortenPath$2(firstResult.canonicalPath, cwd);
+						resultLines.push(`${import_picocolors.default.green("✓")} ${shortPath}`);
+					} else resultLines.push(`${import_picocolors.default.green("✓")} ${entry.skill}`);
+					resultLines.push(...buildResultLines(skillResults, targetAgents));
 				}
 			};
 			const sortedResultGroups = Object.keys(groupedResults).sort();
@@ -4744,8 +4791,7 @@ function parseAddOptions(args) {
 		else if (arg === "--team") {
 			i++;
 			options.team = args[i];
-		} else if (arg === "--copy") options.copy = true;
-		else if (arg === "--dangerously-accept-openclaw-risks") options.dangerouslyAcceptOpenclawRisks = true;
+		} else if (arg === "--dangerously-accept-openclaw-risks") options.dangerouslyAcceptOpenclawRisks = true;
 		else if (arg && !arg.startsWith("-")) source.push(arg);
 	}
 	return {
@@ -5102,7 +5148,7 @@ async function runSync(args, options = {}) {
 		} else {
 			const selected = await searchMultiselect({
 				message: "Which agents do you want to install to?",
-				items: Object.keys(agents).map((a) => {
+				items: getPickerVisibleAgents().map((a) => {
 					const cfg = agents[a];
 					const baseHint = cfg.skillsDir;
 					const hint = isUniversalAgent(a) ? `${baseHint}, shared` : baseHint;
@@ -5125,7 +5171,7 @@ async function runSync(args, options = {}) {
 			targetAgents = [...installedAgents];
 			for (const ua of universalAgents) if (!targetAgents.includes(ua)) targetAgents.push(ua);
 		} else {
-			const allAgents = Object.keys(agents).filter((a) => installedAgents.includes(a));
+			const allAgents = getPickerVisibleAgents().filter((a) => installedAgents.includes(a));
 			const selected = await searchMultiselect({
 				message: "Which agents do you want to install to?",
 				items: allAgents.map((a) => {
@@ -5168,8 +5214,7 @@ async function runSync(args, options = {}) {
 	for (const skill of toInstall) for (const agent of targetAgents) {
 		const result = await installSkillForAgent(skill, agent, {
 			global: false,
-			cwd,
-			mode: "symlink"
+			cwd
 		});
 		results.push({
 			skill: skill.name,
@@ -6303,7 +6348,6 @@ ${BOLD}Add Options:${RESET}
   -y, --yes              Skip confirmation prompts
   --team <scope>         Install every skill owned by the team
                          (no positional source; mutually exclusive with <source>)
-  --copy                 Copy files instead of symlinking to agent directories
   --all                  Shorthand for --skill '*' --agent '*' -y
   --full-depth           Search all subdirectories even when a root SKILL.md exists
 
@@ -6464,12 +6508,14 @@ async function runUpdate(args = []) {
 		name: pl.name,
 		ref: pl.ref,
 		canonical: pl.canonical,
+		agents: pl.agents,
 		hasProjectEntry: hasProjectEntryFor(pl.canonical, cwd)
 	})), ...inventory.skills.filter((s) => Boolean(s.ref)).map((s) => ({
 		kind: "skill",
 		name: s.name,
 		ref: s.ref,
 		canonical: s.canonical,
+		agents: s.agents,
 		hasProjectEntry: hasProjectEntryFor(s.canonical, cwd)
 	}))];
 	if (options.names && options.names.length > 0) {
@@ -6511,12 +6557,23 @@ async function runUpdate(args = []) {
 	for (const t of targets) {
 		const safeName = sanitizeMetadata(t.name);
 		if (!options.json) console.log(`${TEXT}Updating ${safeName}...${RESET} ${DIM}(${t.ref})${RESET}`);
+		if (t.agents.length === 0) {
+			fail++;
+			if (!options.json) console.log(`  ${DIM}✗ skipped ${safeName} — no IDE entries point at this canonical${RESET}`);
+			results.push({
+				name: t.name,
+				kind: t.kind,
+				ok: false
+			});
+			continue;
+		}
 		const passthrough = [
 			"add",
 			t.ref,
 			"-y"
 		];
 		if (!t.hasProjectEntry) passthrough.push("-g");
+		passthrough.push("-a", ...t.agents);
 		const ok = spawnSync(process.execPath, [cliEntry, ...passthrough], {
 			stdio: options.json ? [
 				"ignore",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shoplazza-ai-dev-cli",
-  "version": "0.1.2",
+  "version": "0.1.5",
   "description": "Shoplazza AI Dev CLI: install, publish and manage AI agent skills/rules",
   "type": "module",
   "bin": {