skilllib 1.12.2 → 1.14.0

package/dist/{tui-P3HKRNHI.js → tui-N6NRJYLZ.js}

@@ -1,4 +1,5 @@
 import {
+  FEATURED_HARNESSES,
   HARNESSES,
   PROJECT_SKILLS_DIR,
   addRefusal,
@@ -87,7 +88,7 @@ import {
   versionHistory,
   visibleProjects,
   withoutForceHint
-} from "./chunk-YQFLFWAY.js";
+} from "./chunk-XMXC2XM2.js";
 
 // src/tui/index.tsx
 import { render } from "ink";
@@ -302,17 +303,6 @@ function copyText(text) {
   return { copied: false, savedTo };
 }
 
-// src/search.ts
-function matchScore(text, query) {
-  if (!query) return 0;
-  const t = text.toLowerCase();
-  const q = query.toLowerCase();
-  if (t.startsWith(q)) return 0;
-  if (t.includes(q)) return 1;
-  const initials = t.split(/[-_\s./]+/).filter(Boolean).map((w) => w[0]).join("");
-  return q.length >= 2 && initials.startsWith(q) ? 2 : null;
-}
-
 // src/tui/world.ts
 var failed = (message) => ({ message, failed: true });
 var isFailure = (r) => typeof r !== "string" && "failed" in r;
@@ -623,7 +613,12 @@ function groupLabel(g, names) {
   return `${top} + ${names.length - 1} more \xB7 ${g.label}`;
 }
 function matches(name, query) {
-  return matchScore(name, query) !== null;
+  if (!query) return true;
+  const text = name.toLowerCase();
+  const q = query.toLowerCase();
+  if (text.includes(q)) return true;
+  const initials = text.split(/[-_\s./]+/).filter(Boolean).map((w) => w[0]).join("");
+  return q.length >= 2 && initials.startsWith(q);
 }
 function addRows(w, target, q) {
   const taken = new Set(target ? project(w, target).skills.map((s) => s.name) : []);
@@ -1509,8 +1504,11 @@ function App({ initial, reload, loadUsage: loadUsage2 }) {
   }
   useEffect(() => {
     const folder = () => !initial.roots.length && askForFolder("Where are your projects? skilllib finds the git repos in there");
-    if (!initial.agentsChosen) setModal({ kind: "agents", selected: initial.agents, cursor: 0, then: folder });
-    else folder();
+    if (!initial.agentsChosen) {
+      const installed = HARNESSES.filter((h) => h.installed()).map((h) => h.id);
+      const ids = [...FEATURED_HARNESSES, ...installed.filter((id) => !FEATURED_HARNESSES.includes(id))];
+      setModal({ kind: "agents", selected: initial.agents, ids, cursor: 0, then: folder });
+    } else folder();
   }, []);
   function openInGlobal(name) {
     goPlace("global");
@@ -1530,14 +1528,24 @@ function App({ initial, reload, loadUsage: loadUsage2 }) {
       cells: [{ text, width: 34, color: c }, { text: sub, grow: true, color: color.faint }],
       onEnter
     });
+    const shown = [
+      ...FEATURED_HARNESSES.map((id) => harness(id)),
+      ...world.agents.filter((id) => !FEATURED_HARNESSES.includes(id)).map((id) => harness(id))
+    ];
     return [
       header("#agents", "Agents"),
-      ...HARNESSES.map(
+      ...shown.map(
         (h) => row(`agent:${h.id}`, `${world.agents.includes(h.id) ? "[x]" : "[ ]"} ${h.icon} ${h.name}`, h.projectDirs.join(", "), () => {
           const wasOn = world.agents.includes(h.id);
           apply((w) => (w.ops.setAgents(wasOn ? w.agents.filter((a) => a !== h.id) : HARNESSES.map((x) => x.id).filter((id) => id === h.id || w.agents.includes(id))), `${h.name} ${wasOn ? "off" : "on"}`));
         })
       ),
+      row(
+        "agents:more",
+        "More agents\u2026",
+        "Copilot, Gemini, OpenCode, Windsurf, and the rest",
+        () => setModal({ kind: "agents", selected: world.agents, ids: HARNESSES.map((h) => h.id), cursor: 0 })
+      ),
       // The skill that lets your agents use skilllib: installing adds a global skill, so it asks first.
       row(
         "agent-skill",
@@ -1667,11 +1675,13 @@ function App({ initial, reload, loadUsage: loadUsage2 }) {
     if (m.kind === "add") return addKeys(m, input, key);
   }
   function agentsKeys(m, input, key) {
+    const list2 = m.ids.map((id) => harness(id));
     if (key.escape && !m.then) return setModal(null);
     if (key.upArrow) return setModal({ ...m, cursor: Math.max(0, m.cursor - 1) });
-    if (key.downArrow) return setModal({ ...m, cursor: Math.min(HARNESSES.length - 1, m.cursor + 1) });
+    if (key.downArrow) return setModal({ ...m, cursor: Math.min(list2.length - 1, m.cursor + 1) });
     if (input === " ") {
-      const id = HARNESSES[m.cursor].id;
+      const id = list2[m.cursor]?.id;
+      if (!id) return;
       return setModal({ ...m, selected: m.selected.includes(id) ? m.selected.filter((x) => x !== id) : [...m.selected, id] });
     }
     if (key.return) {
@@ -1905,11 +1915,11 @@ function App({ initial, reload, loadUsage: loadUsage2 }) {
         empty: "",
         header: /* @__PURE__ */ jsx2(Text2, { color: color.muted, children: "skilllib makes your skills visible to each one. Detected ones are ticked." }),
         headerHeight: 1,
-        rows: HARNESSES.map((h) => ({
+        rows: modal.ids.map((id) => harness(id)).map((h) => ({
           key: h.id,
           cells: [
             { text: modal.selected.includes(h.id) ? "[x] " : "[ ] ", width: 4, color: modal.selected.includes(h.id) ? color.green : color.faint },
-            { text: `${h.icon} ${h.name}`, width: 18, color: h.color },
+            { text: `${h.icon} ${h.name}`, width: 22, color: h.color },
             { text: `reads ${h.projectDirs.join(", ")}`, grow: true, color: color.faint }
           ]
         }))

package/package.json

@@ -1,15 +1,19 @@
 {
   "name": "skilllib",
-  "version": "1.12.2",
-  "description": "Manage your agent skills like dependencies. One library for all your skills; each repo gets only the ones it needs, and every agent can see them. Works with Claude Code, Cursor, Codex, Zed and Grok.",
+  "version": "1.14.0",
+  "description": "Manage your agent skills like dependencies. One library, install from skills.sh, and every agent you use can see them.",
   "keywords": [
     "agent-skills",
     "skills",
+    "skills.sh",
     "skill-md",
     "claude-code",
     "claude",
     "cursor",
     "codex",
+    "gemini",
+    "github-copilot",
+    "opencode",
     "zed",
     "grok",
     "ai-agents",

package/skills/skilllib/SKILL.md

@@ -1,14 +1,14 @@
 ---
 name: skilllib
-description: Agent skills (SKILL.md) loaded in this repo and the user's skill library, via the skilllib CLI. Use for which skills you can use here and where each comes from, which library skills to add, what's out of date, broken or duplicated, and adding, removing or updating skills.
+description: Agent skills (SKILL.md) loaded in this repo and the user's skill library, via the skilllib CLI. Use for which skills you can use here and where each comes from, which library skills to add, what's out of date, broken or duplicated, adding, removing or updating skills, and installing skills from skills.sh or GitHub.
 allowed-tools: Bash(skilllib:*)
 ---
 
 # skilllib
 
-The user manages agent skills with the `skilllib` CLI. Their **library** (`~/.skilllib/library`, "my skills", "the registry") holds versioned skills that load nowhere until added to a repo. A repo pins its skills in `skilllib.json` (shared, committed), or in the user's personal pins (`~/.skilllib/pins`, kept out of git: `personal: true` in the output).
+The user manages agent skills with the `skilllib` CLI. Their **library** (`~/.skilllib/library`, "my skills", "the registry") holds versioned skills that load nowhere until added to a repo. Adding a skill pins it in the user's personal pins (`~/.skilllib/pins`, kept out of git: `personal: true`). `skilllib.json` is only for sharing a skill with the team, and only when they ask: `--shared` writes it, and they commit it.
 
-Always pass `--json` (one line of JSON on stdout; messages go to stderr). A failure exits 1 with `{"error": "..."}` as that line. `link`, `tidy`, `global` (its listing, `keep` and `unkeep`), `restore`, `new`, `folders`, `harnesses`, `scan` and `unhide` print messages only (read the exit code). Unknown flags are errors. Never run bare `skilllib` or `skilllib ui`: that's an interactive app.
+Always pass `--json` (one line of JSON on stdout; messages go to stderr). A failure exits 1 with `{"error": "..."}` as that line. `link`, `tidy`, `global` (its listing, `keep` and `unkeep`), `restore`, `new`, `folders`, `harnesses`, `scan`, `search` (without `--json`) and `unhide` print messages only (read the exit code). Unknown flags are errors. Never run bare `skilllib` or `skilllib ui`: that's an interactive app.
 
 ## Reading
 
@@ -23,9 +23,11 @@ The **Now** section at the end has this repo's `status` and `list` output. Answe
 
 Also: `usage --json` (Claude Code usage only, so "unused" is a hint; each skill lists the `projects` that used it), `projects --json` (every repo), `outdated --all --json`, `doctor --json` (every issue in every repo and globally, each with an `id`).
 
+`check --json` reads the global skills and, in a repo, that repo's. It stores nothing. `brief` is the report: how many tokens the names and descriptions cost on every prompt, whether that is heavy, and the cuts that can actually be made. A Claude Code plugin it names turns off with `plugin off <id> --json`, and `plugin on <id>` puts it back. Run that only after the user agrees: the switch is global, and a skill in the plugin that was used goes too. Cursor plugins turn off in Cursor. claude.ai skills turn off on claude.ai. Built-ins ship with Cursor, Codex, and Grok, and skilllib can't unload them. Your own unused globals can move into the repos that need them. `uses` is Claude Code only, so 0 means it wasn't seen. Read `brief` to the user. The `skills` list is there if they ask about one.
+
 ## Changing (ask first unless the user asked for this exact change)
 
-`add <name>...` (pins in `skilllib.json` when the repo has one, else in personal pins; `--personal` / `--shared` choose, and move an existing pin without changing its version) · `remove <name>...` (skills skilllib manages, `source: library`) · `update [name...]` · `sync` (installs what's pinned, in `skilllib.json` and your personal pins; takes no names). Pass several names in one call. Their result is `[{name, action, from, to, dirs, personal, moved, reason, blocked, uncommitted, inTheWay, backedUp}]` (`personal: true` when the pin is in your personal pins; `moved` when `--personal`/`--shared` moved it), which is the whole result: there's no need to check files afterwards. `import <dir>...` (into the library) prints `[{path, name, status}]` and exits 1 if a folder was skipped (`exists`, `no SKILL.md`). `doctor --fix` prints doctor's issues, each fix with `fixed: {ok, message}`.
+`plugin off|on <id>` (a Claude Code plugin, `name@marketplace` from `check`; a name alone works when only one plugin has it; it stays installed. The copy that loads in every repo. A per-repo install is left on, and the message says where) · `add <name>...` (personal pins; `--shared` writes `skilllib.json` for the team, and only when they asked to share it; `--personal` moves a shared pin back. Either flag moves an existing pin without changing its version. A pin stays where it already is) · `remove <name>...` (skills skilllib manages, `source: library`) · `update [name...]` · `sync` (installs what's pinned, personal pins and `skilllib.json`; takes no names). Pass several names in one call. Their result is `[{name, action, from, to, dirs, personal, moved, reason, blocked, uncommitted, inTheWay, backedUp}]` (`personal: true` when the pin is in your personal pins; `moved` when `--personal`/`--shared` moved it), which is the whole result: there's no need to check files afterwards. `import <dir>...` (into the library) prints `[{path, name, status}]` and exits 1 if a folder was skipped (`exists`, `no SKILL.md`). `doctor --fix` prints doctor's issues, each fix with `fixed: {ok, message}`.
 
 - `skipped` + `reason`: nothing changed for that skill, and the command exits 1; tell the user. `--force` overwrites local edits (`backedUp` says where they went; `skilllib restore <name>` brings them back), but only use it with their OK.
 - `removed` + `reason`: removed from skilllib.json, but something was left as it is (its copy behind a folder that links out of the repo, a file of the user's, or a link in such a folder). Tell the user what the reason says is still there.
@@ -33,16 +35,16 @@ Also: `usage --json` (Claude Code usage only, so "unused" is a hint; each skill
 - `inTheWay`: something else is where a link goes (a file, or another copy), so that agent may not run this copy there, and the command exits 1. Tell the user what's there; once they move it, `skilllib link` adds the link. (A skills folder that's a file or links out of the repo makes the skill `skipped` instead, with the reason.)
 - `blocked`: git tracks that folder. Re-run with `--allow-tracked` (for that command only) only with their OK.
 - `uncommitted`: git tracks that folder but not the skill's real copy, so a link there would break for teammates; `--allow-tracked` doesn't change that. Once the copy is committed, `link --allow-tracked` adds it.
-- Changes apply from the agent's next session. For a change without `personal`, remind the user to commit `skilllib.json` and the folders in `dirs`; a `personal` one has nothing to commit.
+- Changes apply from the agent's next session. A `personal` change has nothing to commit. Without `personal` (`--shared`, or a pin that was already in `skilllib.json`), remind the user to commit `skilllib.json` and the folders in `dirs`.
 
 **Prefer per-repo skills to global ones.** A global skill loads in every repo, for every agent. When `usage --json` shows one used in only a few repos, propose moving it there:
 
-- `global move <name>... --to <repo>[,<repo>...]` (a project name from `projects`, or the path of a repo's top folder): imports it into the library, adds it to each repo, and only then stops loading it globally (restorable with `skilllib restore`). Prints `[{skill, moved, reason, left, projects: [{project, path, change}]}]` (`left`: links in a repo or its packages that now point at nothing, though a copy in the repo still serves them; tell the user to remove them); `moved: false` means it still loads globally, and `reason` says why (for example, git tracks the folder a link goes in, so an agent couldn't see it there: re-run with `--allow-tracked` only with the user's OK).
+- `global move <name>... --to <repo>[,<repo>...]` (a project name from `projects`, or the path of a repo's top folder): imports it into the library, adds it to each repo, and only then stops loading it globally (restorable with `skilllib restore`). Prints `[{skill, moved, reason, left, projects: [{project, path, change}]}]` (`left`: links in a repo or its packages that now point at nothing, though a copy in the repo still serves them; tell the user to remove them); `moved: false` means it still loads globally, and `reason` says why.
 - `global keep <name>...`: the user wants it everywhere; skilllib stops flagging it.
 
 **Fixes and decisions.** `apply <id> [choice]` runs one problem's `fix`, or the choice you name: its label (safest), or its number from 1. With several choices it needs one. Prints `{id, applied, ok, message}`. Ids come from `issues` in `status --json` (Now, below) or from `doctor --json` (every repo; pass `apply` the same `--days` you gave `doctor`). A few issues span repos and offer different choices in each; then `apply` takes only the label.
 
-**Importing.** `import <dir>...` copies skill folders (each with a `SKILL.md`) into the library; skilllib doesn't download anything. For a skill on GitHub, clone the repo into a temporary folder, `import` the skill's folder, then `add` it here.
+**Importing and installing.** `import <dir>...` copies skill folders (each with a `SKILL.md`) into the library; it doesn't download anything. `install <source>...` does: `owner/repo`, `owner/repo@skill`, a `https://skills.sh/...` or GitHub URL, or a local folder. It puts each skill in the library. In a repo it also adds them here; `--global` loads them in every repo instead (and marks them kept). A repo with several skills is listed, not installed, until you pass `@name` or `--all`. `search <query>` lists matches from skills.sh. `install` and `search` accept `--json`.
 
 ## Now