skillsauth 0.1.0 → 1.0.2

package/README.md

@@ -1,20 +1,137 @@
-# SkillsAuth
-
-Skills authentication and verification (in development).
-
-## Installation
-
-```bash
-npm install skillsauth
-```
-
-## Usage
-
-```javascript
-const skillsauth = require('skillsauth');
-console.log(skillsauth.description);
-```
-
-## License
-
-MIT
+# skillsauth
+
+Install verified AI agent skills from the [SkillsAI](https://skillsauth.com) marketplace.
+
+## Installation
+
+```bash
+npm install -g skillsauth
+# or
+npx skillsauth <command>
+```
+
+## Quick Start
+
+```bash
+# Search for skills
+skillsauth search "react"
+
+# List skills in a repository
+skillsauth list facebook/react
+
+# Install all skills from a repo
+skillsauth add facebook/react
+
+# Install with auto-confirm
+skillsauth add facebook/react --yes
+
+# Install globally (all projects)
+skillsauth add facebook/react --global
+```
+
+## Commands
+
+### `add <repo> [skill]`
+Install skills from a repository.
+
+```bash
+skillsauth add owner/repo              # Interactive install
+skillsauth add owner/repo --yes        # Auto-confirm
+skillsauth add owner/repo --global     # Install globally
+skillsauth add owner/repo skill-name   # Install specific skill
+```
+
+Options:
+- `-g, --global` — Install to global directory (~/.claude/skills/)
+- `-y, --yes` — Skip all prompts
+
+### `list <repo>`
+List all verified skills in a repository.
+
+```bash
+skillsauth list facebook/react
+```
+
+### `search <query>`
+Search the SkillsAI marketplace.
+
+```bash
+skillsauth search "typescript"
+skillsauth search "api" --limit 20
+```
+
+Options:
+- `-l, --limit <n>` — Max results (default: 10)
+
+### `installed`
+Show installed skills.
+
+```bash
+skillsauth installed            # Local installs
+skillsauth installed --global   # Global installs
+```
+
+Options:
+- `-g, --global` — Show global installs
+
+### `update`
+Update all installed skills to latest versions.
+
+```bash
+skillsauth update            # Update local
+skillsauth update --global   # Update global
+```
+
+Options:
+- `-g, --global` — Update global installs
+
+### `remove <slug>`
+Remove an installed skill.
+
+```bash
+skillsauth remove facebook-react-flow
+skillsauth remove facebook-react-flow --yes
+skillsauth remove facebook-react-flow --global
+```
+
+Options:
+- `-g, --global` — Remove from global install
+- `-y, --yes` — Skip confirmation
+
+## Supported AI Agents
+
+skillsauth automatically detects and installs to:
+
+| Agent | Local Path | Global Path |
+|-------|------------|-------------|
+| Claude Code | `.claude/skills/` | `~/.claude/skills/` |
+| Cursor | `.cursor/skills/` | `~/.cursor/skills/` |
+| Windsurf | `.windsurf/memories/` | `~/.windsurf/memories/` |
+
+## Security
+
+All skills on SkillsAI are:
+- ✓ Scanned with mcp-scan
+- ✓ Analyzed with Semgrep
+- ✓ Verified by VirusTotal
+
+Skills that fail security scans are quarantined and cannot be installed.
+
+## Environment Variables
+
+| Variable | Description |
+|----------|-------------|
+| `SKILLSAI_API_URL` | API base URL (default: https://skillsauth.com/api/cli) |
+| `SKILLSAI_YES` | Set to `true` to skip all prompts |
+| `SKILLSAI_NO_ANALYTICS` | Set to `true` to disable download tracking |
+| `SKILLSAI_DEBUG` | Set to `true` for verbose output |
+
+## Lockfile
+
+skillsauth maintains a lockfile to track installed skills:
+- Local: `.skillsai-lock.json` (in project root)
+- Global: `~/.skillsai/lock.json`
+
+## License
+
+MIT

package/dist/commands/add.d.ts

@@ -0,0 +1,5 @@
+export declare function addCommand(repoArg: string, specificSkill: string | undefined, opts: {
+    global?: boolean;
+    yes?: boolean;
+}): Promise<void>;
+//# sourceMappingURL=add.d.ts.map

package/dist/commands/add.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"add.d.ts","sourceRoot":"","sources":["../../src/commands/add.ts"],"names":[],"mappings":"AAUA,wBAAsB,UAAU,CAC9B,OAAO,EAAE,MAAM,EACf,aAAa,EAAE,MAAM,GAAG,SAAS,EACjC,IAAI,EAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,GACxC,OAAO,CAAC,IAAI,CAAC,CAwKf"}

package/dist/commands/add.js

@@ -0,0 +1,177 @@
+import * as p from '@clack/prompts';
+import chalk from 'chalk';
+import { fetchRepo, fetchSkill, recordDownload, APIError } from '../lib/api.js';
+import { detectAgents } from '../lib/agents.js';
+import { installSkill } from '../lib/installer.js';
+import { addSkillToLockfile } from '../lib/lockfile.js';
+import { printScanBadge, printError, separator } from '../utils/display.js';
+import { SKIP_PROMPTS } from '../utils/constants.js';
+export async function addCommand(repoArg, specificSkill, opts) {
+    const parts = repoArg.split('/');
+    if (parts.length !== 2 || !parts[0] || !parts[1]) {
+        printError('Use: skillsauth add owner/repo');
+        process.exit(1);
+    }
+    const [owner, repo] = parts;
+    const scope = opts.global ? 'global' : 'local';
+    const skipAll = opts.yes || SKIP_PROMPTS;
+    p.intro(chalk.bold('◆ SkillsAuth') + chalk.dim(' — Trusted AI Agent Skills'));
+    const spinner = p.spinner();
+    spinner.start(`Fetching skills from ${chalk.cyan(repoArg)}...`);
+    let skills;
+    try {
+        if (specificSkill) {
+            const slug = `${owner}-${repo}-${specificSkill}`
+                .toLowerCase()
+                .replace(/[^a-z0-9]+/g, '-')
+                .replace(/^-|-$/g, '');
+            try {
+                skills = [await fetchSkill(owner, repo, slug)];
+            }
+            catch (e) {
+                if (e instanceof APIError && e.status === 404) {
+                    const { skills: repoSkills } = await fetchRepo(owner, repo);
+                    const matched = repoSkills.find((s) => s.name.toLowerCase() === specificSkill.toLowerCase());
+                    if (matched)
+                        skills = [matched];
+                    else
+                        throw e;
+                }
+                else
+                    throw e;
+            }
+        }
+        else {
+            skills = (await fetchRepo(owner, repo)).skills;
+        }
+        spinner.stop(`Found ${chalk.green(skills.length)} verified skill(s) ${chalk.dim('(all scan-clean)')}`);
+    }
+    catch (e) {
+        spinner.stop('Failed');
+        if (e instanceof APIError) {
+            if (e.status === 404)
+                printError(`No published skills found for ${repoArg}`);
+            else if (e.status === 403)
+                printError(`Skills from ${repoArg} are quarantined (failed security scan)`);
+            else
+                printError(e.message);
+        }
+        else {
+            const error = e;
+            printError(error.message);
+        }
+        process.exit(1);
+    }
+    // Select skills
+    let selectedSkills = skills;
+    if (!skipAll && !specificSkill) {
+        const sel = await p.multiselect({
+            message: 'Which skills to install?',
+            options: skills.map((s) => ({
+                value: s.slug,
+                label: `${s.name.padEnd(24)} ${chalk.dim(s.description.slice(0, 50))}`,
+                hint: `★${(s.stars ?? 0) >= 1000 ? Math.floor((s.stars ?? 0) / 1000) + 'k' : s.stars ?? 0}`,
+            })),
+            required: true,
+        });
+        if (p.isCancel(sel)) {
+            p.cancel('Cancelled');
+            process.exit(0);
+        }
+        selectedSkills = skills.filter((s) => sel.includes(s.slug));
+    }
+    // Select scope
+    let finalScope = scope;
+    if (!opts.global && !skipAll) {
+        const s = await p.select({
+            message: 'Install scope?',
+            options: [
+                { value: 'local', label: 'Local  (this project)', hint: '.cursor/skills/, .claude/skills/' },
+                { value: 'global', label: 'Global (all projects)', hint: '~/.cursor/skills/, ~/.claude/skills/' },
+            ],
+        });
+        if (p.isCancel(s)) {
+            p.cancel('Cancelled');
+            process.exit(0);
+        }
+        finalScope = s;
+    }
+    // Select agents
+    const agentList = detectAgents(finalScope, process.cwd());
+    let selectedAgents;
+    if (skipAll) {
+        selectedAgents = agentList.filter((a) => a.detected).map((a) => a.id);
+        if (selectedAgents.length === 0)
+            selectedAgents = ['claude-code'];
+    }
+    else {
+        const ag = await p.multiselect({
+            message: 'Install to which AI agents?',
+            options: agentList.map((a) => ({
+                value: a.id,
+                label: a.name,
+                hint: a.detected ? 'detected ✓' : 'not found',
+            })),
+            initialValues: agentList.filter((a) => a.detected).map((a) => a.id),
+        });
+        if (p.isCancel(ag)) {
+            p.cancel('Cancelled');
+            process.exit(0);
+        }
+        selectedAgents = ag;
+    }
+    if (selectedAgents.length === 0) {
+        printError('No agents selected');
+        process.exit(1);
+    }
+    // Security notice + confirmation
+    if (!skipAll) {
+        separator();
+        console.log(chalk.yellow('  ⚠  Security Notice'));
+        console.log(chalk.dim(`     Publisher: ${owner}/${repo}`));
+        printScanBadge(selectedSkills[0]);
+        separator();
+        const ok = await p.confirm({
+            message: `Confirm install of ${selectedSkills.length} skill(s) to ${selectedAgents.join(', ')}?`,
+        });
+        if (p.isCancel(ok) || !ok) {
+            p.cancel('Cancelled');
+            process.exit(0);
+        }
+    }
+    // Install (re-fetch each skill by slug so we get full files including assets; repo list only returns SKILL.md)
+    console.log('');
+    for (const skill of selectedSkills) {
+        const full = await fetchSkill(skill.repoOwner, skill.repoName, skill.slug);
+        const results = installSkill(full, selectedAgents, finalScope);
+        for (const r of results) {
+            if (r.status === 'error') {
+                console.log(chalk.red(`  ✗ ${skill.name} → ${r.path}: ${r.error}`));
+            }
+            else if (r.status === 'skipped') {
+                console.log(chalk.dim(`  ○ ${skill.name} → ${r.path} (unchanged)`));
+            }
+            else {
+                console.log(chalk.green(`  ✓ `) + `${skill.repoOwner}/${skill.name} → ${r.path}`);
+                recordDownload(skill.id, r.agent);
+            }
+        }
+        addSkillToLockfile(finalScope, {
+            slug: skill.slug,
+            name: skill.name,
+            repoOwner: skill.repoOwner,
+            repoName: skill.repoName,
+            version: skill.version,
+            sha: skill.sha,
+            description: skill.description,
+            installedAt: new Date().toISOString(),
+            updatedAt: new Date().toISOString(),
+            agents: selectedAgents,
+            scope: finalScope,
+            paths: Object.fromEntries(results.filter((r) => r.status !== 'error').map((r) => [r.agent, r.path])),
+        });
+    }
+    console.log(chalk.green('\n  ✓ ') + chalk.dim('Updated .skillsai-lock.json'));
+    p.outro(chalk.dim("Run 'skillsauth installed' to see all installed skills."));
+}
+//# sourceMappingURL=add.js.map

package/dist/commands/add.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"add.js","sourceRoot":"","sources":["../../src/commands/add.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,gBAAgB,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAChF,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAGrD,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,OAAe,EACf,aAAiC,EACjC,IAAyC;IAEzC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,UAAU,CAAC,gCAAgC,CAAC,CAAC;QAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC;IAC5B,MAAM,KAAK,GAAiB,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;IAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,IAAI,YAAY,CAAC;IAEzC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC;IAE9E,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;IAC5B,OAAO,CAAC,KAAK,CAAC,wBAAwB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAEhE,IAAI,MAAkB,CAAC;IACvB,IAAI,CAAC;QACH,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,IAAI,GAAG,GAAG,KAAK,IAAI,IAAI,IAAI,aAAa,EAAE;iBAC7C,WAAW,EAAE;iBACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;iBAC3B,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,MAAM,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YACjD,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,YAAY,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC9C,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;oBAC5D,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAC7B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,aAAa,CAAC,WAAW,EAAE,CAC5D,CAAC;oBACF,IAAI,OAAO;wBAAE,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC;;wBAC3B,MAAM,CAAC,CAAC;gBACf,CAAC;;oBAAM,MAAM,CAAC,CAAC;YACjB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,CAAC,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;QACjD,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,sBAAsB,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;IACzG,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QACpB,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvB,IAAI,CAAC,YAAY,QAAQ,EAAE,CAAC;YAC1B,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;gBAAE,UAAU,CAAC,iCAAiC,OAAO,EAAE,CAAC,CAAC;iBACxE,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;gBAAE,UAAU,CAAC,eAAe,OAAO,yCAAyC,CAAC,CAAC;;gBAClG,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAG,CAAU,CAAC;YACzB,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,gBAAgB;IAChB,IAAI,cAAc,GAAe,MAAM,CAAC;IACxC,IAAI,CAAC,OAAO,IAAI,CAAC,aAAa,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,WAAW,CAAC;YAC9B,OAAO,EAAE,0BAA0B;YACnC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC1B,KAAK,EAAE,CAAC,CAAC,IAAI;gBACb,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE;gBACtE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE;aAC5F,CAAC,CAAC;YACH,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACtB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,GAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,eAAe;IACf,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC;YACvB,OAAO,EAAE,gBAAgB;YACzB,OAAO,EAAE;gBACP,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,uBAAuB,EAAE,IAAI,EAAE,kCAAkC,EAAE;gBAC5F,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,uBAAuB,EAAE,IAAI,EAAE,sCAAsC,EAAE;aAClG;SACF,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YAClB,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACtB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,UAAU,GAAG,CAAiB,CAAC;IACjC,CAAC;IAED,gBAAgB;IAChB,MAAM,SAAS,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC1D,IAAI,cAA2B,CAAC;IAEhC,IAAI,OAAO,EAAE,CAAC;QACZ,cAAc,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACtE,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;YAAE,cAAc,GAAG,CAAC,aAAa,CAAC,CAAC;IACpE,CAAC;SAAM,CAAC;QACN,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,WAAW,CAAC;YAC7B,OAAO,EAAE,6BAA6B;YACtC,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC7B,KAAK,EAAE,CAAC,CAAC,EAAE;gBACX,KAAK,EAAE,CAAC,CAAC,IAAI;gBACb,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW;aAC9C,CAAC,CAAC;YACH,aAAa,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpE,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YACnB,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACtB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,cAAc,GAAG,EAAiB,CAAC;IACrC,CAAC;IAED,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,UAAU,CAAC,oBAAoB,CAAC,CAAC;QACjC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,iCAAiC;IACjC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,SAAS,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,mBAAmB,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;QAC3D,cAAc,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,SAAS,EAAE,CAAC;QACZ,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC;YACzB,OAAO,EAAE,sBAAsB,cAAc,CAAC,MAAM,gBAAgB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;SACjG,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YAC1B,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACtB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,+GAA+G;IAC/G,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;QAC/D,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBACzB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACtE,CAAC;iBAAM,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAClC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC;YACtE,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBAClF,cAAc,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QACD,kBAAkB,CAAC,UAAU,EAAE;YAC7B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,cAAc;YACtB,KAAK,EAAE,UAAU;YACjB,KAAK,EAAE,MAAM,CAAC,WAAW,CACvB,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAC1E;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC,CAAC;IAC9E,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC,CAAC;AAChF,CAAC"}

package/dist/commands/installed.d.ts

@@ -0,0 +1,4 @@
+export declare function installedCommand(opts: {
+    global?: boolean;
+}): void;
+//# sourceMappingURL=installed.d.ts.map

package/dist/commands/installed.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"installed.d.ts","sourceRoot":"","sources":["../../src/commands/installed.ts"],"names":[],"mappings":"AAIA,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAiBjE"}

package/dist/commands/installed.js

@@ -0,0 +1,20 @@
+import chalk from 'chalk';
+import { getAllInstalled } from '../lib/lockfile.js';
+import { printInstalledRow } from '../utils/display.js';
+export function installedCommand(opts) {
+    const scope = opts.global ? 'global' : 'local';
+    const skills = getAllInstalled(scope);
+    if (!skills.length) {
+        console.log(chalk.dim(`\n  No ${scope} skills installed.\n`));
+        console.log(chalk.dim('  Install: npx skillsauth add owner/repo\n'));
+        return;
+    }
+    console.log('');
+    console.log(chalk.dim('  ' + 'SKILL'.padEnd(38) + 'VERSION'.padEnd(12) + 'AGENTS'));
+    console.log(chalk.dim('  ' + '─'.repeat(60)));
+    skills.forEach((s) => printInstalledRow(s));
+    console.log('');
+    console.log(chalk.dim(`  ${skills.length} skill(s) — ${scope}`));
+    console.log('');
+}
+//# sourceMappingURL=installed.js.map

package/dist/commands/installed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"installed.js","sourceRoot":"","sources":["../../src/commands/installed.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAExD,MAAM,UAAU,gBAAgB,CAAC,IAA0B;IACzD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;IAC/C,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IAEtC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,KAAK,sBAAsB,CAAC,CAAC,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC,CAAC;QACrE,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC;IACpF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9C,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,MAAM,eAAe,KAAK,EAAE,CAAC,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC"}

package/dist/commands/list.d.ts

@@ -0,0 +1,2 @@
+export declare function listCommand(repoArg: string): Promise<void>;
+//# sourceMappingURL=list.d.ts.map

package/dist/commands/list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../src/commands/list.ts"],"names":[],"mappings":"AAKA,wBAAsB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAuBhE"}

package/dist/commands/list.js

@@ -0,0 +1,28 @@
+import * as p from '@clack/prompts';
+import chalk from 'chalk';
+import { fetchRepo } from '../lib/api.js';
+import { printSkillRow, printError } from '../utils/display.js';
+export async function listCommand(repoArg) {
+    const parts = repoArg.split('/');
+    if (parts.length !== 2) {
+        printError('Use: skillsauth list owner/repo');
+        process.exit(1);
+    }
+    const spinner = p.spinner();
+    spinner.start(`Fetching ${chalk.cyan(repoArg)}...`);
+    try {
+        const { skills, totalSkills } = await fetchRepo(parts[0], parts[1]);
+        spinner.stop(`${totalSkills} verified skills in ${chalk.cyan(repoArg)}`);
+        console.log('');
+        skills.forEach((s, i) => printSkillRow(s, i));
+        console.log('');
+        console.log(chalk.dim(`  Install: npx skillsauth add ${repoArg}`));
+    }
+    catch (e) {
+        const error = e;
+        spinner.stop('Failed');
+        printError(error.message);
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=list.js.map

package/dist/commands/list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.js","sourceRoot":"","sources":["../../src/commands/list.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,gBAAgB,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEhE,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAe;IAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,UAAU,CAAC,iCAAiC,CAAC,CAAC;QAC9C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;IAC5B,OAAO,CAAC,KAAK,CAAC,YAAY,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAEpD,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,OAAO,CAAC,IAAI,CAAC,GAAG,WAAW,uBAAuB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACzE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,iCAAiC,OAAO,EAAE,CAAC,CAAC,CAAC;IACrE,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,CAAU,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvB,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC1B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/commands/remove.d.ts

@@ -0,0 +1,5 @@
+export declare function removeCommand(slug: string, opts: {
+    global?: boolean;
+    yes?: boolean;
+}): Promise<void>;
+//# sourceMappingURL=remove.d.ts.map

package/dist/commands/remove.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remove.d.ts","sourceRoot":"","sources":["../../src/commands/remove.ts"],"names":[],"mappings":"AAOA,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,GACxC,OAAO,CAAC,IAAI,CAAC,CAsBf"}

package/dist/commands/remove.js

@@ -0,0 +1,26 @@
+import * as p from '@clack/prompts';
+import chalk from 'chalk';
+import { getInstalledSkill, removeSkillFromLockfile } from '../lib/lockfile.js';
+import { uninstallSkill } from '../lib/installer.js';
+import { printError, printSuccess } from '../utils/display.js';
+export async function removeCommand(slug, opts) {
+    const scope = opts.global ? 'global' : 'local';
+    const skill = getInstalledSkill(scope, slug);
+    if (!skill) {
+        printError(`"${slug}" is not installed (${scope})`);
+        process.exit(1);
+    }
+    if (!opts.yes) {
+        const ok = await p.confirm({
+            message: `Remove ${chalk.cyan(slug)} from ${skill.agents.join(', ')}?`,
+        });
+        if (p.isCancel(ok) || !ok) {
+            p.cancel('Cancelled');
+            return;
+        }
+    }
+    uninstallSkill(slug, skill.agents, scope);
+    removeSkillFromLockfile(scope, slug);
+    printSuccess(`Removed ${slug}`);
+}
+//# sourceMappingURL=remove.js.map

package/dist/commands/remove.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remove.js","sourceRoot":"","sources":["../../src/commands/remove.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,gBAAgB,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAG/D,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAY,EACZ,IAAyC;IAEzC,MAAM,KAAK,GAAiB,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;IAC7D,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAE7C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,UAAU,CAAC,IAAI,IAAI,uBAAuB,KAAK,GAAG,CAAC,CAAC;QACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACd,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC;YACzB,OAAO,EAAE,UAAU,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;SACvE,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YAC1B,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACtB,OAAO;QACT,CAAC;IACH,CAAC;IAED,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC1C,uBAAuB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACrC,YAAY,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;AAClC,CAAC"}

package/dist/commands/search.d.ts

@@ -0,0 +1,4 @@
+export declare function searchCommand(query: string, opts: {
+    limit?: number;
+}): Promise<void>;
+//# sourceMappingURL=search.d.ts.map

package/dist/commands/search.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"search.d.ts","sourceRoot":"","sources":["../../src/commands/search.ts"],"names":[],"mappings":"AAKA,wBAAsB,aAAa,CACjC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GACvB,OAAO,CAAC,IAAI,CAAC,CAuBf"}

package/dist/commands/search.js

@@ -0,0 +1,27 @@
+import * as p from '@clack/prompts';
+import chalk from 'chalk';
+import { searchSkills } from '../lib/api.js';
+import { printSkillRow, printError } from '../utils/display.js';
+export async function searchCommand(query, opts) {
+    const spinner = p.spinner();
+    spinner.start(`Searching "${chalk.cyan(query)}"...`);
+    try {
+        const { results, total } = await searchSkills(query, opts.limit ?? 10);
+        spinner.stop(`${total} result(s) for "${query}"`);
+        if (!results.length) {
+            console.log(chalk.dim('\n  No results found.\n'));
+            return;
+        }
+        console.log('');
+        results.forEach((s, i) => printSkillRow(s, i));
+        console.log('');
+        console.log(chalk.dim('  Install: npx skillsauth add owner/repo skill-name'));
+    }
+    catch (e) {
+        const error = e;
+        spinner.stop('Failed');
+        printError(error.message);
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=search.js.map

package/dist/commands/search.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"search.js","sourceRoot":"","sources":["../../src/commands/search.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,gBAAgB,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEhE,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAAa,EACb,IAAwB;IAExB,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;IAC5B,OAAO,CAAC,KAAK,CAAC,cAAc,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAErD,IAAI,CAAC;QACH,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACvE,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,mBAAmB,KAAK,GAAG,CAAC,CAAC;QAElD,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC,CAAC;IAChF,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,CAAU,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvB,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC1B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/commands/update.d.ts

@@ -0,0 +1,4 @@
+export declare function updateCommand(opts: {
+    global?: boolean;
+}): Promise<void>;
+//# sourceMappingURL=update.d.ts.map

package/dist/commands/update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../src/commands/update.ts"],"names":[],"mappings":"AAQA,wBAAsB,aAAa,CAAC,IAAI,EAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA2C7E"}

package/dist/commands/update.js

@@ -0,0 +1,44 @@
+import * as p from '@clack/prompts';
+import chalk from 'chalk';
+import { fetchSkill, APIError } from '../lib/api.js';
+import { getAllInstalled, addSkillToLockfile } from '../lib/lockfile.js';
+import { installSkill } from '../lib/installer.js';
+import { printError } from '../utils/display.js';
+export async function updateCommand(opts) {
+    const scope = opts.global ? 'global' : 'local';
+    const installed = getAllInstalled(scope);
+    if (!installed.length) {
+        console.log(chalk.dim('\n  No skills installed.\n'));
+        return;
+    }
+    p.intro(`Checking ${installed.length} skill(s) for updates...`);
+    let updated = 0;
+    let quarantined = 0;
+    let errors = 0;
+    for (const skill of installed) {
+        try {
+            const latest = await fetchSkill(skill.repoOwner, skill.repoName, skill.slug);
+            if (latest.sha === skill.sha) {
+                console.log(chalk.dim(`  ○ ${skill.slug} (up to date)`));
+                continue;
+            }
+            installSkill(latest, skill.agents, scope, true);
+            addSkillToLockfile(scope, { ...skill, sha: latest.sha, version: latest.version });
+            console.log(chalk.green(`  ✓ ${skill.slug}`) + chalk.dim(` → v${latest.version}`));
+            updated++;
+        }
+        catch (e) {
+            if (e instanceof APIError && e.status === 403) {
+                console.log(chalk.red(`  ✗ ${skill.slug} QUARANTINED — run: skillsauth remove ${skill.slug}`));
+                quarantined++;
+            }
+            else {
+                const error = e;
+                printError(`${skill.slug}: ${error.message}`);
+                errors++;
+            }
+        }
+    }
+    p.outro(`${updated} updated · ${quarantined} quarantine warnings · ${errors} errors`);
+}
+//# sourceMappingURL=update.js.map

package/dist/commands/update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.js","sourceRoot":"","sources":["../../src/commands/update.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,gBAAgB,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAGjD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAA0B;IAC5D,MAAM,KAAK,GAAiB,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;IAC7D,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IAEzC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC;QACrD,OAAO;IACT,CAAC;IAED,CAAC,CAAC,KAAK,CAAC,YAAY,SAAS,CAAC,MAAM,0BAA0B,CAAC,CAAC;IAEhE,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAE7E,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,EAAE,CAAC;gBAC7B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,eAAe,CAAC,CAAC,CAAC;gBACzD,SAAS;YACX,CAAC;YAED,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YAChD,kBAAkB,CAAC,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YAClF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACnF,OAAO,EAAE,CAAC;QACZ,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,IAAI,CAAC,YAAY,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC9C,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,yCAAyC,KAAK,CAAC,IAAI,EAAE,CAAC,CAClF,CAAC;gBACF,WAAW,EAAE,CAAC;YAChB,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,GAAG,CAAU,CAAC;gBACzB,UAAU,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC9C,MAAM,EAAE,CAAC;YACX,CAAC;QACH,CAAC;IACH,CAAC;IAED,CAAC,CAAC,KAAK,CAAC,GAAG,OAAO,cAAc,WAAW,0BAA0B,MAAM,SAAS,CAAC,CAAC;AACxF,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js

@@ -0,0 +1,49 @@
+#!/usr/bin/env node
+import { Command } from 'commander';
+import { readFileSync } from 'fs';
+import { fileURLToPath } from 'url';
+import { dirname, join } from 'path';
+import { addCommand } from './commands/add.js';
+import { listCommand } from './commands/list.js';
+import { searchCommand } from './commands/search.js';
+import { installedCommand } from './commands/installed.js';
+import { updateCommand } from './commands/update.js';
+import { removeCommand } from './commands/remove.js';
+const pkg = JSON.parse(readFileSync(join(dirname(fileURLToPath(import.meta.url)), '../package.json'), 'utf8'));
+const program = new Command()
+    .name('skillsauth')
+    .description('Install verified AI agent skills from the SkillsAI marketplace')
+    .version(pkg.version);
+program
+    .command('add <repo> [skill]')
+    .description('Install skills (format: owner/repo)')
+    .option('-g, --global', 'Install globally')
+    .option('-y, --yes', 'Skip all prompts')
+    .action(addCommand);
+program
+    .command('list <repo>')
+    .description('List skills in a repo')
+    .action(listCommand);
+program
+    .command('search <query>')
+    .description('Search the marketplace')
+    .option('-l, --limit <n>', 'Max results', '10')
+    .action((q, o) => searchCommand(q, { limit: parseInt(o.limit) }));
+program
+    .command('installed')
+    .description('Show installed skills')
+    .option('-g, --global', 'Show global installs')
+    .action(installedCommand);
+program
+    .command('update')
+    .description('Update all installed skills')
+    .option('-g, --global', 'Update global installs')
+    .action(updateCommand);
+program
+    .command('remove <slug>')
+    .description('Remove an installed skill')
+    .option('-g, --global', 'Remove from global install')
+    .option('-y, --yes', 'Skip confirmation')
+    .action(removeCommand);
+program.parse();
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CACpB,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,iBAAiB,CAAC,EAAE,MAAM,CAAC,CAChE,CAAC;AAEzB,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE;KAC1B,IAAI,CAAC,YAAY,CAAC;KAClB,WAAW,CAAC,gEAAgE,CAAC;KAC7E,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAExB,OAAO;KACJ,OAAO,CAAC,oBAAoB,CAAC;KAC7B,WAAW,CAAC,qCAAqC,CAAC;KAClD,MAAM,CAAC,cAAc,EAAE,kBAAkB,CAAC;KAC1C,MAAM,CAAC,WAAW,EAAE,kBAAkB,CAAC;KACvC,MAAM,CAAC,UAAU,CAAC,CAAC;AAEtB,OAAO;KACJ,OAAO,CAAC,aAAa,CAAC;KACtB,WAAW,CAAC,uBAAuB,CAAC;KACpC,MAAM,CAAC,WAAW,CAAC,CAAC;AAEvB,OAAO;KACJ,OAAO,CAAC,gBAAgB,CAAC;KACzB,WAAW,CAAC,wBAAwB,CAAC;KACrC,MAAM,CAAC,iBAAiB,EAAE,aAAa,EAAE,IAAI,CAAC;KAC9C,MAAM,CAAC,CAAC,CAAS,EAAE,CAAoB,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;AAE/F,OAAO;KACJ,OAAO,CAAC,WAAW,CAAC;KACpB,WAAW,CAAC,uBAAuB,CAAC;KACpC,MAAM,CAAC,cAAc,EAAE,sBAAsB,CAAC;KAC9C,MAAM,CAAC,gBAAgB,CAAC,CAAC;AAE5B,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,6BAA6B,CAAC;KAC1C,MAAM,CAAC,cAAc,EAAE,wBAAwB,CAAC;KAChD,MAAM,CAAC,aAAa,CAAC,CAAC;AAEzB,OAAO;KACJ,OAAO,CAAC,eAAe,CAAC;KACxB,WAAW,CAAC,2BAA2B,CAAC;KACxC,MAAM,CAAC,cAAc,EAAE,4BAA4B,CAAC;KACpD,MAAM,CAAC,WAAW,EAAE,mBAAmB,CAAC;KACxC,MAAM,CAAC,aAAa,CAAC,CAAC;AAEzB,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/lib/agents.d.ts

@@ -0,0 +1,8 @@
+import type { AgentType } from '../types.js';
+export interface AgentDetection {
+    id: AgentType;
+    name: string;
+    detected: boolean;
+}
+export declare function detectAgents(scope: 'local' | 'global', cwd: string): AgentDetection[];
+//# sourceMappingURL=agents.d.ts.map

package/dist/lib/agents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../src/lib/agents.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,SAAS,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,cAAc,EAAE,CAOrF"}

package/dist/lib/agents.js

@@ -0,0 +1,12 @@
+import { existsSync } from 'fs';
+import { join } from 'path';
+import { homedir } from 'os';
+export function detectAgents(scope, cwd) {
+    const base = scope === 'local' ? cwd : homedir();
+    return [
+        { id: 'claude-code', name: 'Claude Code', detected: existsSync(join(base, '.claude')) },
+        { id: 'cursor', name: 'Cursor', detected: existsSync(join(base, '.cursor')) },
+        { id: 'windsurf', name: 'Windsurf', detected: existsSync(join(base, '.windsurf')) },
+    ];
+}
+//# sourceMappingURL=agents.js.map

package/dist/lib/agents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agents.js","sourceRoot":"","sources":["../../src/lib/agents.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAS7B,MAAM,UAAU,YAAY,CAAC,KAAyB,EAAE,GAAW;IACjE,MAAM,IAAI,GAAG,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACjD,OAAO;QACL,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,EAAE;QACvF,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,EAAE;QAC7E,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,EAAE;KACpF,CAAC;AACJ,CAAC"}

package/dist/lib/api.d.ts

@@ -0,0 +1,10 @@
+import type { CLISkill, RepoResponse, SearchResponse } from '../types.js';
+export declare class APIError extends Error {
+    status: number;
+    constructor(status: number, message: string);
+}
+export declare function fetchRepo(owner: string, repo: string): Promise<RepoResponse>;
+export declare function fetchSkill(owner: string, repo: string, slug: string): Promise<CLISkill>;
+export declare function searchSkills(query: string, limit?: number): Promise<SearchResponse>;
+export declare function recordDownload(skillId: string, agentType: string): void;
+//# sourceMappingURL=api.d.ts.map

package/dist/lib/api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/lib/api.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE1E,qBAAa,QAAS,SAAQ,KAAK;IACd,MAAM,EAAE,MAAM;gBAAd,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAInD;AAmCD,wBAAsB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAElF;AAED,wBAAsB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAE7F;AAED,wBAAsB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,OAAO,CAAC,cAAc,CAAC,CAErF;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAQvE"}

package/dist/lib/api.js

@@ -0,0 +1,60 @@
+import { API_BASE_URL, DEBUG, NO_ANALYTICS } from '../utils/constants.js';
+export class APIError extends Error {
+    status;
+    constructor(status, message) {
+        super(message);
+        this.status = status;
+        this.name = 'APIError';
+    }
+}
+async function apiFetch(path) {
+    const url = `${API_BASE_URL}${path}`;
+    if (DEBUG)
+        console.error(`[debug] GET ${url}`);
+    let res;
+    try {
+        res = await fetch(url, {
+            headers: { 'User-Agent': 'skillsauth-cli/1.0.0' },
+            signal: AbortSignal.timeout(15000),
+        });
+    }
+    catch (e) {
+        const error = e;
+        if (error.name === 'TimeoutError') {
+            throw new Error(`Request timed out (${API_BASE_URL}). Is the server running?`);
+        }
+        const hint = !process.env['SKILLSAI_API_URL']
+            ? `\n  Hint: set SKILLSAI_API_URL to point to your SkillsAI instance.`
+            : '';
+        throw new Error(`Cannot reach SkillsAI API at ${API_BASE_URL}: ${error.message}${hint}`);
+    }
+    if (!res.ok) {
+        const body = await res.json().catch(() => ({}));
+        const msg = body.error ?? `HTTP ${res.status}`;
+        if (res.status === 404 && !DEBUG) {
+            throw new APIError(res.status, `${msg} — ${url}`);
+        }
+        throw new APIError(res.status, msg);
+    }
+    return res.json();
+}
+export async function fetchRepo(owner, repo) {
+    return apiFetch(`/repo/${owner}/${repo}`);
+}
+export async function fetchSkill(owner, repo, slug) {
+    return apiFetch(`/repo/${owner}/${repo}/${slug}`);
+}
+export async function searchSkills(query, limit = 10) {
+    return apiFetch(`/search?${new URLSearchParams({ q: query, limit: String(limit) })}`);
+}
+export function recordDownload(skillId, agentType) {
+    if (NO_ANALYTICS)
+        return;
+    fetch(`${API_BASE_URL}/download`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', 'User-Agent': 'skillsauth-cli/1.0.0' },
+        body: JSON.stringify({ skillId, agentType }),
+        signal: AbortSignal.timeout(5000),
+    }).catch(() => { });
+}
+//# sourceMappingURL=api.js.map

package/dist/lib/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../../src/lib/api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAG1E,MAAM,OAAO,QAAS,SAAQ,KAAK;IACd;IAAnB,YAAmB,MAAc,EAAE,OAAe;QAChD,KAAK,CAAC,OAAO,CAAC,CAAC;QADE,WAAM,GAAN,MAAM,CAAQ;QAE/B,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF;AAED,KAAK,UAAU,QAAQ,CAAI,IAAY;IACrC,MAAM,GAAG,GAAG,GAAG,YAAY,GAAG,IAAI,EAAE,CAAC;IACrC,IAAI,KAAK;QAAE,OAAO,CAAC,KAAK,CAAC,eAAe,GAAG,EAAE,CAAC,CAAC;IAE/C,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YACrB,OAAO,EAAE,EAAE,YAAY,EAAE,sBAAsB,EAAE;YACjD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;SACnC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,CAAU,CAAC;QACzB,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,sBAAsB,YAAY,2BAA2B,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;YAC3C,CAAC,CAAC,oEAAoE;YACtE,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,gCAAgC,YAAY,KAAK,KAAK,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAChD,MAAM,GAAG,GAAI,IAA2B,CAAC,KAAK,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;QACvE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YACjC,MAAM,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,GAAG,MAAM,GAAG,EAAE,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACtC,CAAC;IAED,OAAO,GAAG,CAAC,IAAI,EAAgB,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,KAAa,EAAE,IAAY;IACzD,OAAO,QAAQ,CAAe,SAAS,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAa,EAAE,IAAY,EAAE,IAAY;IACxE,OAAO,QAAQ,CAAW,SAAS,KAAK,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAa,EAAE,KAAK,GAAG,EAAE;IAC1D,OAAO,QAAQ,CAAiB,WAAW,IAAI,eAAe,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AACxG,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,SAAiB;IAC/D,IAAI,YAAY;QAAE,OAAO;IACzB,KAAK,CAAC,GAAG,YAAY,WAAW,EAAE;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,YAAY,EAAE,sBAAsB,EAAE;QACrF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;QAC5C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;KAClC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AACrB,CAAC"}

package/dist/lib/installer.d.ts

@@ -0,0 +1,11 @@
+import type { CLISkill, AgentType, InstallScope } from '../types.js';
+export interface InstallResult {
+    agent: AgentType;
+    path: string;
+    status: 'installed' | 'updated' | 'skipped' | 'error';
+    error?: string;
+}
+export declare function getInstallPath(slug: string, agent: AgentType, scope: InstallScope): string;
+export declare function installSkill(skill: CLISkill, agents: AgentType[], scope: InstallScope, force?: boolean): InstallResult[];
+export declare function uninstallSkill(slug: string, agents: AgentType[], scope: InstallScope): void;
+//# sourceMappingURL=installer.d.ts.map

package/dist/lib/installer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"installer.d.ts","sourceRoot":"","sources":["../../src/lib/installer.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAGrE,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,SAAS,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;IACtD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,GAAG,MAAM,CAI1F;AAQD,wBAAgB,YAAY,CAC1B,KAAK,EAAE,QAAQ,EACf,MAAM,EAAE,SAAS,EAAE,EACnB,KAAK,EAAE,YAAY,EACnB,KAAK,UAAQ,GACZ,aAAa,EAAE,CAyCjB;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,YAAY,GAAG,IAAI,CAY3F"}

package/dist/lib/installer.js

@@ -0,0 +1,74 @@
+import { writeFileSync, mkdirSync, existsSync, readFileSync, rmSync } from 'fs';
+import { dirname, join, resolve, sep } from 'path';
+import { AGENT_PATHS } from '../utils/constants.js';
+export function getInstallPath(slug, agent, scope) {
+    return scope === 'global'
+        ? AGENT_PATHS[agent].global(slug)
+        : AGENT_PATHS[agent].local(slug);
+}
+function isPathUnderBase(absPath, baseDirAbs) {
+    const base = resolve(baseDirAbs) + sep;
+    const resolved = resolve(absPath);
+    return resolved === resolve(baseDirAbs) || resolved.startsWith(base);
+}
+export function installSkill(skill, agents, scope, force = false) {
+    return agents.map((agent) => {
+        const filePath = getInstallPath(skill.slug, agent, scope);
+        const baseDirRel = dirname(filePath);
+        const baseDirAbs = scope === 'local' ? resolve(process.cwd(), baseDirRel) : resolve(baseDirRel);
+        try {
+            const baseExisted = existsSync(baseDirAbs);
+            let anyWritten = false;
+            let allUnchanged = true;
+            for (const file of skill.files) {
+                if (!file.path || file.path.includes('..') || file.path.startsWith('/'))
+                    continue;
+                const normalizedPath = file.path.replace(/\\/g, '/');
+                const absPath = resolve(join(baseDirAbs, normalizedPath));
+                if (!isPathUnderBase(absPath, baseDirAbs))
+                    continue;
+                const alreadyExists = existsSync(absPath);
+                const content = file.content ?? '';
+                if (alreadyExists && !force) {
+                    try {
+                        if (readFileSync(absPath, 'utf8') === content)
+                            continue;
+                    }
+                    catch {
+                        // file missing or unreadable, write it
+                    }
+                    allUnchanged = false;
+                }
+                mkdirSync(dirname(absPath), { recursive: true });
+                writeFileSync(absPath, content, 'utf8');
+                anyWritten = true;
+                allUnchanged = false;
+            }
+            if (allUnchanged && !force)
+                return { agent, path: filePath, status: 'skipped' };
+            const status = anyWritten
+                ? (baseExisted ? 'updated' : 'installed')
+                : 'skipped';
+            return { agent, path: filePath, status };
+        }
+        catch (e) {
+            const error = e;
+            return { agent, path: filePath, status: 'error', error: error.message };
+        }
+    });
+}
+export function uninstallSkill(slug, agents, scope) {
+    agents.forEach((agent) => {
+        const p = getInstallPath(slug, agent, scope);
+        const skillBaseDir = scope === 'local' ? join(process.cwd(), dirname(p)) : dirname(p);
+        try {
+            if (existsSync(skillBaseDir)) {
+                rmSync(skillBaseDir, { recursive: true, force: true });
+            }
+        }
+        catch {
+            // Directory may already be missing or permission error
+        }
+    });
+}
+//# sourceMappingURL=installer.js.map

package/dist/lib/installer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"installer.js","sourceRoot":"","sources":["../../src/lib/installer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAChF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAEnD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AASpD,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,KAAgB,EAAE,KAAmB;IAChF,OAAO,KAAK,KAAK,QAAQ;QACvB,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;QACjC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,eAAe,CAAC,OAAe,EAAE,UAAkB;IAC1D,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC;IACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAClC,OAAO,QAAQ,KAAK,OAAO,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,KAAe,EACf,MAAmB,EACnB,KAAmB,EACnB,KAAK,GAAG,KAAK;IAEb,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC1B,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,UAAU,GAAG,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAEhG,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;YAC3C,IAAI,UAAU,GAAG,KAAK,CAAC;YACvB,IAAI,YAAY,GAAG,IAAI,CAAC;YACxB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBAC/B,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAClF,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBACrD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC;gBAC1D,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,UAAU,CAAC;oBAAE,SAAS;gBAEpD,MAAM,aAAa,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;gBAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;gBACnC,IAAI,aAAa,IAAI,CAAC,KAAK,EAAE,CAAC;oBAC5B,IAAI,CAAC;wBACH,IAAI,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,OAAO;4BAAE,SAAS;oBAC1D,CAAC;oBAAC,MAAM,CAAC;wBACP,uCAAuC;oBACzC,CAAC;oBACD,YAAY,GAAG,KAAK,CAAC;gBACvB,CAAC;gBACD,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACjD,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;gBACxC,UAAU,GAAG,IAAI,CAAC;gBAClB,YAAY,GAAG,KAAK,CAAC;YACvB,CAAC;YACD,IAAI,YAAY,IAAI,CAAC,KAAK;gBAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAkB,EAAE,CAAC;YACzF,MAAM,MAAM,GAAwC,UAAU;gBAC5D,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;gBACzC,CAAC,CAAC,SAAS,CAAC;YACd,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;QAC3C,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,CAAU,CAAC;YACzB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAgB,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QACnF,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,MAAmB,EAAE,KAAmB;IACnF,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACvB,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAC7C,MAAM,YAAY,GAAG,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACtF,IAAI,CAAC;YACH,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC7B,MAAM,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uDAAuD;QACzD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/lockfile.d.ts

@@ -0,0 +1,8 @@
+import type { Lockfile, InstalledSkill, InstallScope } from '../types.js';
+export declare function readLockfile(scope: InstallScope): Lockfile;
+export declare function writeLockfile(scope: InstallScope, lock: Lockfile): void;
+export declare function addSkillToLockfile(scope: InstallScope, skill: InstalledSkill): void;
+export declare function removeSkillFromLockfile(scope: InstallScope, slug: string): void;
+export declare const getInstalledSkill: (scope: InstallScope, slug: string) => InstalledSkill | null;
+export declare const getAllInstalled: (scope: InstallScope) => InstalledSkill[];
+//# sourceMappingURL=lockfile.d.ts.map

package/dist/lib/lockfile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lockfile.d.ts","sourceRoot":"","sources":["../../src/lib/lockfile.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAW1E,wBAAgB,YAAY,CAAC,KAAK,EAAE,YAAY,GAAG,QAAQ,CAQ1D;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,GAAG,IAAI,CAOvE;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,cAAc,GAAG,IAAI,CASnF;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAI/E;AAED,eAAO,MAAM,iBAAiB,GAAI,OAAO,YAAY,EAAE,MAAM,MAAM,KAAG,cAAc,GAAG,IAC7C,CAAC;AAE3C,eAAO,MAAM,eAAe,GAAI,OAAO,YAAY,KAAG,cAAc,EACzB,CAAC"}

package/dist/lib/lockfile.js

@@ -0,0 +1,45 @@
+import { readFileSync, writeFileSync, existsSync, mkdirSync } from 'fs';
+import { LOCAL_LOCK, GLOBAL_LOCK, LOCKFILE_VERSION, GLOBAL_DIR } from '../utils/constants.js';
+const getPath = (scope) => scope === 'global' ? GLOBAL_LOCK : LOCAL_LOCK;
+const empty = () => ({
+    version: LOCKFILE_VERSION,
+    generatedAt: new Date().toISOString(),
+    skills: {},
+});
+export function readLockfile(scope) {
+    const path = getPath(scope);
+    if (!existsSync(path))
+        return empty();
+    try {
+        return JSON.parse(readFileSync(path, 'utf8'));
+    }
+    catch {
+        return empty();
+    }
+}
+export function writeLockfile(scope, lock) {
+    const path = getPath(scope);
+    lock.generatedAt = new Date().toISOString();
+    if (scope === 'global' && !existsSync(GLOBAL_DIR)) {
+        mkdirSync(GLOBAL_DIR, { recursive: true });
+    }
+    writeFileSync(path, JSON.stringify(lock, null, 2) + '\n', 'utf8');
+}
+export function addSkillToLockfile(scope, skill) {
+    const lock = readLockfile(scope);
+    const prev = lock.skills[skill.slug];
+    lock.skills[skill.slug] = {
+        ...skill,
+        installedAt: prev?.installedAt ?? new Date().toISOString(),
+        updatedAt: new Date().toISOString(),
+    };
+    writeLockfile(scope, lock);
+}
+export function removeSkillFromLockfile(scope, slug) {
+    const lock = readLockfile(scope);
+    delete lock.skills[slug];
+    writeLockfile(scope, lock);
+}
+export const getInstalledSkill = (scope, slug) => readLockfile(scope).skills[slug] ?? null;
+export const getAllInstalled = (scope) => Object.values(readLockfile(scope).skills);
+//# sourceMappingURL=lockfile.js.map

package/dist/lib/lockfile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lockfile.js","sourceRoot":"","sources":["../../src/lib/lockfile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAG9F,MAAM,OAAO,GAAG,CAAC,KAAmB,EAAU,EAAE,CAC9C,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC;AAEhD,MAAM,KAAK,GAAG,GAAa,EAAE,CAAC,CAAC;IAC7B,OAAO,EAAE,gBAAgB;IACzB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IACrC,MAAM,EAAE,EAAE;CACX,CAAC,CAAC;AAEH,MAAM,UAAU,YAAY,CAAC,KAAmB;IAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,EAAE,CAAC;IACtC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAa,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,EAAE,CAAC;IACjB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAmB,EAAE,IAAc;IAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,IAAI,KAAK,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAClD,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAmB,EAAE,KAAqB;IAC3E,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG;QACxB,GAAG,KAAK;QACR,WAAW,EAAE,IAAI,EAAE,WAAW,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC1D,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IACF,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAmB,EAAE,IAAY;IACvE,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzB,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAAmB,EAAE,IAAY,EAAyB,EAAE,CAC5F,YAAY,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;AAE3C,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAmB,EAAoB,EAAE,CACvE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,52 @@
+export interface CLISkill {
+    id: string;
+    slug: string;
+    name: string;
+    description: string;
+    version: string;
+    sha: string;
+    repoOwner: string;
+    repoName: string;
+    triggerPhrase: string;
+    category: string;
+    stars: number;
+    scanStatus: 'clean';
+    scannedAt: string | null;
+    files: Array<{
+        path: string;
+        content: string;
+    }>;
+}
+export interface RepoResponse {
+    repoOwner: string;
+    repoName: string;
+    totalSkills: number;
+    skills: CLISkill[];
+}
+export interface SearchResponse {
+    query: string;
+    total: number;
+    results: CLISkill[];
+}
+export type AgentType = 'claude-code' | 'cursor' | 'windsurf';
+export type InstallScope = 'local' | 'global';
+export interface InstalledSkill {
+    slug: string;
+    name: string;
+    repoOwner: string;
+    repoName: string;
+    version: string;
+    sha: string;
+    description: string;
+    installedAt: string;
+    updatedAt: string;
+    agents: AgentType[];
+    scope: InstallScope;
+    paths: Partial<Record<AgentType, string>>;
+}
+export interface Lockfile {
+    version: number;
+    generatedAt: string;
+    skills: Record<string, InstalledSkill>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACjD;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,QAAQ,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,QAAQ,EAAE,CAAC;CACrB;AAED,MAAM,MAAM,SAAS,GAAG,aAAa,GAAG,QAAQ,GAAG,UAAU,CAAC;AAC9D,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE9C,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,KAAK,EAAE,YAAY,CAAC;IACpB,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CACxC"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/dist/utils/constants.d.ts

@@ -0,0 +1,24 @@
+export declare const API_BASE_URL: string;
+export declare const SKIP_PROMPTS: boolean;
+export declare const NO_ANALYTICS: boolean;
+export declare const DEBUG: boolean;
+export declare const HOME_DIR: string;
+export declare const GLOBAL_DIR: string;
+export declare const GLOBAL_LOCK: string;
+export declare const LOCAL_LOCK = ".skillsai-lock.json";
+export declare const LOCKFILE_VERSION = 1;
+export declare const AGENT_PATHS: {
+    readonly 'claude-code': {
+        readonly local: (slug: string) => string;
+        readonly global: (slug: string) => string;
+    };
+    readonly cursor: {
+        readonly local: (slug: string) => string;
+        readonly global: (slug: string) => string;
+    };
+    readonly windsurf: {
+        readonly local: (slug: string) => string;
+        readonly global: (slug: string) => string;
+    };
+};
+//# sourceMappingURL=constants.d.ts.map

package/dist/utils/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/utils/constants.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,YAAY,QAAsE,CAAC;AAChG,eAAO,MAAM,YAAY,SAAyC,CAAC;AACnE,eAAO,MAAM,YAAY,SAAkD,CAAC;AAC5E,eAAO,MAAM,KAAK,SAA2C,CAAC;AAC9D,eAAO,MAAM,QAAQ,QAAY,CAAC;AAClC,eAAO,MAAM,UAAU,QAA8B,CAAC;AACtD,eAAO,MAAM,WAAW,QAAgC,CAAC;AACzD,eAAO,MAAM,UAAU,wBAAwB,CAAC;AAChD,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAElC,eAAO,MAAM,WAAW;;+BAEN,MAAM;gCACL,MAAM;;;+BAGP,MAAM;gCACL,MAAM;;;+BAGP,MAAM;gCACL,MAAM;;CAEf,CAAC"}

package/dist/utils/constants.js

@@ -0,0 +1,27 @@
+import { homedir } from 'os';
+import { join } from 'path';
+// Production default: https://skillsauth.com/api/cli; override with SKILLSAI_API_URL (e.g. http://localhost:3000/api/cli for dev).
+export const API_BASE_URL = process.env['SKILLSAI_API_URL'] ?? 'https://skillsauth.com/api/cli';
+export const SKIP_PROMPTS = process.env['SKILLSAI_YES'] === 'true';
+export const NO_ANALYTICS = process.env['SKILLSAI_NO_ANALYTICS'] === 'true';
+export const DEBUG = process.env['SKILLSAI_DEBUG'] === 'true';
+export const HOME_DIR = homedir();
+export const GLOBAL_DIR = join(HOME_DIR, '.skillsai');
+export const GLOBAL_LOCK = join(GLOBAL_DIR, 'lock.json');
+export const LOCAL_LOCK = '.skillsai-lock.json';
+export const LOCKFILE_VERSION = 1;
+export const AGENT_PATHS = {
+    'claude-code': {
+        local: (slug) => `.claude/skills/${slug}/SKILL.md`,
+        global: (slug) => join(HOME_DIR, `.claude/skills/${slug}/SKILL.md`),
+    },
+    'cursor': {
+        local: (slug) => `.cursor/skills/${slug}/SKILL.md`,
+        global: (slug) => join(HOME_DIR, `.cursor/skills/${slug}/SKILL.md`),
+    },
+    'windsurf': {
+        local: (slug) => `.windsurf/memories/${slug}.md`,
+        global: (slug) => join(HOME_DIR, `.windsurf/memories/${slug}.md`),
+    },
+};
+//# sourceMappingURL=constants.js.map

package/dist/utils/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/utils/constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,mIAAmI;AACnI,MAAM,CAAC,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,gCAAgC,CAAC;AAChG,MAAM,CAAC,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,MAAM,CAAC;AACnE,MAAM,CAAC,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,KAAK,MAAM,CAAC;AAC5E,MAAM,CAAC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,MAAM,CAAC;AAC9D,MAAM,CAAC,MAAM,QAAQ,GAAG,OAAO,EAAE,CAAC;AAClC,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;AACtD,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;AACzD,MAAM,CAAC,MAAM,UAAU,GAAG,qBAAqB,CAAC;AAChD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAElC,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,aAAa,EAAE;QACb,KAAK,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,kBAAkB,IAAI,WAAW;QAC1D,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,kBAAkB,IAAI,WAAW,CAAC;KAC5E;IACD,QAAQ,EAAE;QACR,KAAK,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,kBAAkB,IAAI,WAAW;QAC1D,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,kBAAkB,IAAI,WAAW,CAAC;KAC5E;IACD,UAAU,EAAE;QACV,KAAK,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,sBAAsB,IAAI,KAAK;QACxD,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,sBAAsB,IAAI,KAAK,CAAC;KAC1E;CACO,CAAC"}

package/dist/utils/display.d.ts

@@ -0,0 +1,9 @@
+import type { CLISkill, InstalledSkill } from '../types.js';
+export declare const printError: (m: string) => void;
+export declare const printSuccess: (m: string) => void;
+export declare const printWarning: (m: string) => void;
+export declare const separator: () => void;
+export declare function printSkillRow(s: CLISkill, i?: number): void;
+export declare function printInstalledRow(s: InstalledSkill): void;
+export declare function printScanBadge(s: CLISkill): void;
+//# sourceMappingURL=display.d.ts.map

package/dist/utils/display.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"display.d.ts","sourceRoot":"","sources":["../../src/utils/display.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE5D,eAAO,MAAM,UAAU,GAAI,GAAG,MAAM,KAAG,IAAuD,CAAC;AAC/F,eAAO,MAAM,YAAY,GAAI,GAAG,MAAM,KAAG,IAA4C,CAAC;AACtF,eAAO,MAAM,YAAY,GAAI,GAAG,MAAM,KAAG,IAA6C,CAAC;AACvF,eAAO,MAAM,SAAS,QAAO,IAAqD,CAAC;AAEnF,wBAAgB,aAAa,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAW3D;AAED,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,cAAc,GAAG,IAAI,CAUzD;AAED,wBAAgB,cAAc,CAAC,CAAC,EAAE,QAAQ,GAAG,IAAI,CAQhD"}

package/dist/utils/display.js

@@ -0,0 +1,32 @@
+import chalk from 'chalk';
+export const printError = (m) => console.error(chalk.red('  ✗ ') + chalk.red(m));
+export const printSuccess = (m) => console.log(chalk.green('  ✓ ') + m);
+export const printWarning = (m) => console.log(chalk.yellow('  ⚠ ') + m);
+export const separator = () => console.log(chalk.dim('  ' + '─'.repeat(60)));
+export function printSkillRow(s, i) {
+    const num = i !== undefined ? chalk.dim(`${i + 1}.`) : ' ';
+    const name = chalk.white.bold(s.name.padEnd(28));
+    const desc = chalk.dim((s.description.length > 50 ? s.description.slice(0, 49) + '…' : s.description).padEnd(52));
+    const starCount = s.stars ?? 0;
+    const stars = chalk.yellow(`★${starCount >= 1000 ? Math.floor(starCount / 1000) + 'k' : starCount}`);
+    console.log(`  ${num} ${name} ${desc}  ${stars}`);
+}
+export function printInstalledRow(s) {
+    const name = chalk.white.bold(s.slug.padEnd(36));
+    const agentLabels = {
+        'claude-code': 'Claude',
+        cursor: 'Cursor',
+        windsurf: 'Windsurf',
+    };
+    const agents = s.agents.map((a) => chalk.cyan(agentLabels[a] ?? a)).join(', ');
+    const version = chalk.dim(`v${s.version}`);
+    console.log(`  ${name} ${version}   ${agents}`);
+}
+export function printScanBadge(s) {
+    const date = s.scannedAt ? new Date(s.scannedAt).toLocaleDateString() : 'recently';
+    console.log(chalk.dim(`     Scanned: ${date}`) +
+        chalk.green(' ✓ mcp-scan') +
+        chalk.green(' ✓ Semgrep') +
+        chalk.green(' ✓ VirusTotal'));
+}
+//# sourceMappingURL=display.js.map

package/dist/utils/display.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"display.js","sourceRoot":"","sources":["../../src/utils/display.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAG1B,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAS,EAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/F,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAS,EAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AACtF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAS,EAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AACvF,MAAM,CAAC,MAAM,SAAS,GAAG,GAAS,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAEnF,MAAM,UAAU,aAAa,CAAC,CAAW,EAAE,CAAU;IACnD,MAAM,GAAG,GAAG,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC3D,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CACpB,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAC1F,CAAC;IACF,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CACxB,IAAI,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,CACzE,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,IAAI,IAAI,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,CAAiB;IACjD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACjD,MAAM,WAAW,GAA2B;QAC1C,aAAa,EAAE,QAAQ;QACvB,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,UAAU;KACrB,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,OAAO,MAAM,MAAM,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,CAAW;IACxC,MAAM,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;IACnF,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC;QAChC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC;QAC1B,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC;QACzB,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC,CAC/B,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,21 +1,51 @@
 {
   "name": "skillsauth",
-  "version": "0.1.0",
-  "description": "Skills authentication and verification (in development)",
-  "main": "index.js",
-  "keywords": ["ai", "skills", "auth", "verification", "registry"],
-  "author": "Himanshu",
+  "version": "1.0.2",
+  "description": "Install verified AI agent skills from the SkillsAuth marketplace",
+  "type": "module",
+  "bin": {
+    "skillsauth": "./dist/index.js"
+  },
+  "files": [
+    "dist/**/*",
+    "README.md"
+  ],
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "keywords": [
+    "ai",
+    "agents",
+    "claude",
+    "cursor",
+    "skills",
+    "skillsauth",
+    "windsurf"
+  ],
+  "author": "SkillsAuth",
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/beinghimansh/skillsauth.git"
+    "url": "https://github.com/beinghimansh/skillsauth"
   },
-  "bugs": {
-    "url": "https://github.com/beinghimansh/skillsauth/issues"
+  "homepage": "https://skillsauth.com",
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org/"
   },
-  "homepage": "https://github.com/beinghimansh/skillsauth#readme",
-  "files": [
-    "index.js",
-    "README.md"
-  ]
-}
+  "dependencies": {
+    "@clack/prompts": "^0.9.0",
+    "chalk": "^5.3.0",
+    "commander": "^12.1.0"
+  },
+  "devDependencies": {
+    "typescript": "^5.5.0",
+    "@types/node": "^22.0.0",
+    "tsx": "^4.0.0",
+    "vitest": "^2.0.0"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsx watch src/index.ts",
+    "test": "vitest run"
+  }
+}

package/index.js

@@ -1,11 +0,0 @@
-/**
- * SkillsAuth - Skills authentication and verification
- * (in development)
- * @module skillsauth
- */
-
-module.exports = {
-  name: 'skillsauth',
-  version: '0.1.0',
-  description: 'Skills authentication and verification (in development)',
-};