superacli 1.1.6 → 1.1.8

package/docs/features/server-plugins.md

@@ -0,0 +1,62 @@
+# Server Plugins
+
+Server plugins let the SUPERCLI server distribute plugin capabilities to CLI clients during `supercli sync`.
+
+## Plugin Types
+
+- `json`: manifest-only plugins for simple command wrappers or remote integrations.
+- `zip`: packaged plugins for assets such as `skills/`, hook scripts, and auxiliary files.
+
+## Sync Model
+
+1. Client runs `supercli sync` with `SUPERCLI_SERVER` configured.
+2. Client fetches `/api/config` and `/api/plugins?format=json`.
+3. Client downloads only changed enabled server plugins by checksum.
+4. Client stores server plugins locally under `~/.supercli/plugins/server`.
+5. Runtime command graph merges base config + plugins.
+
+## Precedence Rules
+
+- Local plugins always win over server plugins when names collide.
+- Server plugins never override local-only plugins.
+- Sync diagnostics include shadowing details (`shadowed_by_local`).
+
+## Enable/Disable Behavior
+
+- Server plugin records include `enabled`.
+- `enabled=false` removes the plugin from effective server-synced state on next sync.
+- This only affects server-distributed plugins.
+
+## Hook Policy
+
+- Hook execution is policy-driven, not environment-variable-driven.
+- Effective policy resolution:
+  - per-plugin `hooks_policy` (`allow|deny|inherit`)
+  - fallback to global server default (`settings.default_hooks_policy`)
+- When denied, plugin sync still succeeds and reports skipped hooks.
+
+## ZIP Safety Controls
+
+- Default max ZIP size: `10MB` (configurable via server plugin settings).
+- ZIP payload validation includes:
+  - ZIP signature check
+  - unsafe path detection (`../`, absolute paths, drive roots)
+  - uncompressed-size threshold checks
+
+## Storage Paths
+
+- Client plugin root: `~/.supercli/plugins`
+- Local plugin lock: `~/.supercli/plugins/plugins.lock.json`
+- Server plugin lock: `~/.supercli/plugins/server.lock.json`
+- Server plugin content: `~/.supercli/plugins/server/<name>/<version>/`
+
+## API Surface
+
+- `GET /api/plugins?format=json` list plugins + settings
+- `POST /api/plugins` create/update JSON plugin
+- `POST /api/plugins/upload` upload ZIP plugin (multipart or JSON base64)
+- `PATCH /api/plugins/:name` update metadata (`enabled`, `hooks_policy`)
+- `DELETE /api/plugins/:name` remove plugin
+- `GET /api/plugins/:name/manifest` fetch manifest
+- `GET /api/plugins/:name/archive` fetch ZIP payload
+- `GET /api/plugins/settings` and `PUT /api/plugins/settings` manage defaults

package/docs/features/skills.md

@@ -1,12 +1,16 @@
-# AI Skills Support
+# Skill Documents (SKILL.md)
 
-SUPERCLI natively integrates a teaching mechanism to empower local LLMs/agents with context about the application's CLI interface.
+SUPERCLI includes a SKILL.md teaching/catalog system for local LLMs and agents.
+
+Terminology:
+- **Capability**: executable command endpoint (commands, MCP tool bindings, OpenAPI-backed operations, workflows).
+- **Skill document**: instruction artifact returned by `supercli skills ...` commands.
 
 ## Key Features
 
-- **Bootstrapping Skills (`teach`)**: Emits a meta-skill document (in Markdown format compatible with Anthropic/OpenAI instructions) detailing the core architectural design of SUPERCLI and dynamically listing the namespaces and resources available.
-- **Micro-Skills Extraction (`get <cmd>`)**: Automatically pulls a specific SUPERCLI command's capabilities and formats it into a self-contained AI-actionable tool instruction (e.g., Markdown schema).
-- **Embedded DAG Planning**: Optionally injects execution plan information (`--show-dag`) into a skill's document to teach agents how to handle dry-runs for risky operations before execution.
+- **Bootstrapping Skill Docs (`teach`)**: Emits a meta-skill document (Markdown compatible with Anthropic/OpenAI instructions) describing SuperCLI and available namespaces/resources.
+- **Capability Doc Extraction (`get <cmd>`)**: Pulls one command capability and formats it as a self-contained agent instruction document.
+- **Embedded DAG Planning**: Optionally injects execution plan information (`--show-dag`) into the generated skill document to teach dry-run-first workflows.
 
 ## Usage
 

package/docs/index.html

@@ -1,164 +1,224 @@
 <!DOCTYPE html>
-<html lang="en" class="bg-slate-950">
+<html lang="en">
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <title>supercli — Universal Skill Router</title>
+    <title>supercli Documentation</title>
     <script src="https://cdn.tailwindcss.com?plugins=typography"></script>
     <script>
       tailwind.config = {
         theme: {
           extend: {
             fontFamily: {
-              display: ['Space Grotesk', 'sans-serif'],
-              body: ['Inter', 'sans-serif']
+              sans: ['Inter', 'system-ui', 'sans-serif'],
+              display: ['Space Grotesk', 'sans-serif']
             },
             colors: {
               brand: {
-                50: '#ECF8FF',
-                200: '#A5D8FF',
+                100: '#E0F2FE',
+                200: '#BAE6FD',
                 400: '#38BDF8',
-                500: '#0891B2',
-                900: '#0F172A'
+                500: '#0891B2'
               }
             }
           }
         }
-      }; 
+      };
     </script>
     <link rel="preconnect" href="https://fonts.googleapis.com" />
     <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
-    <link href="https://fonts.googleapis.com/css2?family=Space+Grotesk:wght@400;500;600&family=Inter:wght@400;500;600&display=swap" rel="stylesheet" />
+    <link href="https://fonts.googleapis.com/css2?family=Space+Grotesk:wght@500;600&family=Inter:wght@400;500;600&display=swap" rel="stylesheet" />
     <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/daisyui@4.7.2/dist/full.min.css" />
     <style>
       body {
         font-family: 'Inter', system-ui, -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif;
-        background: radial-gradient(circle at top, rgba(8,145,178,0.24), rgba(15,23,42,0.95)), #020617;
+        background-color: #020617;
+        color: #e2e8f0;
       }
-      .hero-grid {
-        background: linear-gradient(135deg, rgba(56,189,248,0.08), rgba(8,145,178,0.08));
-        border: 1px solid rgba(56,189,248,0.3);
+      .sidebar-link {
+        transition: background-color 0.2s ease, color 0.2s ease;
       }
     </style>
   </head>
-  <body class="text-slate-100">
-    <header class="max-w-6xl mx-auto px-6 py-12 md:py-16">
-      <div class="flex flex-col gap-6 text-center">
-        <div class="inline-flex items-center justify-center gap-2 text-xs uppercase tracking-[0.3em] text-brand-200">
-          <span class="h-px w-8 bg-brand-200/60"></span>
-          Universal Skill Router
-          <span class="h-px w-8 bg-brand-200/60"></span>
-        </div>
-        <h1 class="text-4xl md:text-5xl font-display font-semibold leading-tight">supercli — unify every CLI, API, and MCP tool as discoverable skills.</h1>
-        <p class="text-lg md:text-xl text-slate-300 max-w-3xl mx-auto">
-          Build a universal skill layer for your agents. supercli automatically exposes CLIs, OpenAPI endpoints, MCP servers, HTTP integrations, and workflows as structured skills so agents can discover, search, and execute capabilities through one interface.
-        </p>
-        <div class="flex flex-wrap justify-center gap-4">
-          <a class="btn btn-primary px-6" href="./docs.html#getting-started">Start Building</a>
-          <a class="btn btn-outline border-brand-400/50 text-brand-200 px-6" href="./docs.html">Explore the Docs</a>
-          <a class="btn btn-ghost text-slate-300 px-6" href="https://github.com/opencode-somewhere/dcli" target="_blank" rel="noreferrer">GitHub Repo</a>
-        </div>
-      </div>
-    </header>
-
-    <main class="max-w-6xl mx-auto px-6 pb-20 space-y-20">
-      <section class="grid gap-6 md:grid-cols-2 hero-grid rounded-3xl p-8">
-        <div class="space-y-4">
-          <p class="text-sm uppercase tracking-widest text-brand-200">Skill Discovery Layer</p>
-          <h2 class="text-3xl font-display font-semibold">Agents query a single skill graph.</h2>
-          <p class="text-slate-300">
-            supercli caches schemas, inputs, outputs, and rules for every harness. Agents explore skills via search, inspect action metadata, and trust consistent envelopes and exit codes.
-          </p>
-        </div>
-        <div class="space-y-3">
-          <div class="card bg-slate-900/60 border border-slate-700">
-            <div class="card-body">
-              <p class="text-xs uppercase tracking-widest text-brand-200">Example</p>
-              <pre class="text-sm bg-slate-950/70 p-4 rounded-xl overflow-x-auto"><code>supercli skills search "database"
-supercli skills get beads.issue.create
-supercli plan beads issue create --title "Task"</code></pre>
-            </div>
+  <body class="bg-slate-950">
+    <div class="flex min-h-screen">
+      <aside id="sidebar" class="w-72 flex-shrink-0 border-r border-slate-800 bg-slate-950/80 backdrop-blur hidden lg:block">
+        <div class="p-6 space-y-8">
+          <div>
+            <p class="text-xs uppercase tracking-[0.4em] text-brand-400">Docs</p>
+            <h1 class="text-2xl font-display font-semibold mt-3 text-white">supercli</h1>
+            <p class="text-sm text-slate-400">Universal Skill Router</p>
           </div>
+          <nav class="space-y-4">
+            <div>
+              <p class="text-xs uppercase tracking-widest text-slate-500 mb-2">Overview</p>
+              <ul class="space-y-2 text-sm">
+                <li><a class="sidebar-link block rounded-lg px-3 py-2 hover:bg-brand-500/10 hover:text-brand-100" href="#getting-started">Getting Started</a></li>
+                <li><a class="sidebar-link block rounded-lg px-3 py-2 hover:bg-brand-500/10 hover:text-brand-100" href="#skill-layer">Skill Layer Basics</a></li>
+                <li><a class="sidebar-link block rounded-lg px-3 py-2 hover:bg-brand-500/10 hover:text-brand-100" href="#skill-sources">Skill Sources</a></li>
+              </ul>
+            </div>
+            <div>
+              <p class="text-xs uppercase tracking-widest text-slate-500 mb-2">Runtime</p>
+              <ul class="space-y-2 text-sm">
+                <li><a class="sidebar-link block rounded-lg px-3 py-2 hover:bg-brand-500/10 hover:text-brand-100" href="#architecture">Architecture</a></li>
+                <li><a class="sidebar-link block rounded-lg px-3 py-2 hover:bg-brand-500/10 hover:text-brand-100" href="#cli-usage">CLI Usage</a></li>
+                <li><a class="sidebar-link block rounded-lg px-3 py-2 hover:bg-brand-500/10 hover:text-brand-100" href="#plugins">Plugins & Harnesses</a></li>
+              </ul>
+            </div>
+            <div>
+              <p class="text-xs uppercase tracking-widest text-slate-500 mb-2">Vision</p>
+              <ul class="space-y-2 text-sm">
+                <li><a class="sidebar-link block rounded-lg px-3 py-2 hover:bg-brand-500/10 hover:text-brand-100" href="#skill-vision">Skill Mesh Vision</a></li>
+                <li><a class="sidebar-link block rounded-lg px-3 py-2 hover:bg-brand-500/10 hover:text-brand-100" href="#resources">Resources</a></li>
+              </ul>
+            </div>
+          </nav>
         </div>
-      </section>
-
-      <section class="space-y-10">
-        <div class="space-y-3">
-          <p class="text-sm uppercase tracking-widest text-brand-200">Skill Sources</p>
-          <h2 class="text-3xl font-display font-semibold">Every tool becomes a skill.</h2>
-          <p class="text-slate-300 max-w-3xl">
-            supercli ingests multiple ecosystems so the router stays agnostic to execution details.
-          </p>
-        </div>
-        <div class="grid gap-5 md:grid-cols-3">
-          <article class="p-6 rounded-2xl border border-slate-800 bg-slate-900/50">
-            <h3 class="text-xl font-semibold">CLI Harnesses</h3>
-            <p class="text-slate-400">Route commands for beads, gwc, commiat, docker, kubectl, gh, aws, terraform, and more via manifests or passthrough adapters.</p>
-          </article>
-          <article class="p-6 rounded-2xl border border-slate-800 bg-slate-900/50">
-            <h3 class="text-xl font-semibold">OpenAPI & HTTP</h3>
-            <p class="text-slate-400">Import specs, auto-generate skills, and let agents execute normalized HTTP requests with schema validation.</p>
-          </article>
-          <article class="p-6 rounded-2xl border border-slate-800 bg-slate-900/50">
-            <h3 class="text-xl font-semibold">MCP + Workflows</h3>
-            <p class="text-slate-400">Expose MCP tools, AI-driven plans, and declarative workflows as first-class skills with consistent envelopes.</p>
-          </article>
-        </div>
-      </section>
-
-      <section class="grid gap-10 md:grid-cols-2 items-center">
-        <div class="order-2 md:order-1">
-          <p class="text-sm uppercase tracking-widest text-brand-200">Architecture</p>
-          <h2 class="text-3xl font-display font-semibold mb-4">From agent request to tool execution.</h2>
-          <p class="text-slate-300 mb-2">Skills flow through a discovery layer, router, and harness/adapters that target CLIs, APIs, or custom runtimes.</p>
-          <pre class="bg-slate-900 border border-slate-800 rounded-2xl p-6 text-sm leading-relaxed overflow-x-auto"><code>Agent → Skill Discovery → Router → Harness / Adapter → Tool</code></pre>
-        </div>
-        <div class="order-1 md:order-2">
-          <div class="rounded-3xl border border-slate-800 p-6 bg-slate-900/40">
-            <ul class="space-y-4 text-slate-300">
-              <li><span class="font-semibold text-slate-100">Discovery</span> – catalog every skill with metadata & policy.</li>
-              <li><span class="font-semibold text-slate-100">Routing</span> – resolve namespaces to adapters automatically.</li>
-              <li><span class="font-semibold text-slate-100">Execution</span> – normalize inputs/outputs and exit codes.</li>
-              <li><span class="font-semibold text-slate-100">Extension</span> – drop in new harnesses, plugins, or specs.</li>
-            </ul>
+      </aside>
+
+      <div class="flex-1 flex flex-col">
+        <header class="border-b border-slate-800 px-6 py-4 flex items-center justify-between">
+          <button id="mobileToggle" class="lg:hidden btn btn-sm btn-outline border-brand-400 text-brand-100" type="button">Menu</button>
+          <div>
+            <p class="text-xs uppercase tracking-[0.4em] text-brand-400">Documentation</p>
+            <h1 class="text-2xl font-display font-semibold text-white">supercli Knowledge Base</h1>
           </div>
-        </div>
-      </section>
+        </header>
+
+        <main class="flex-1 overflow-y-auto">
+          <section class="border-b border-slate-900 bg-slate-900/60 px-6 py-6">
+            <div class="max-w-4xl">
+              <p class="text-sm uppercase tracking-widest text-brand-200">Quick filter</p>
+              <input id="filterInput" type="text" placeholder="Search anything (e.g. OpenAPI, plugins, plans)" class="mt-3 w-full rounded-2xl bg-slate-950/70 border border-slate-700 px-4 py-3 text-slate-100 placeholder:text-slate-500 focus:border-brand-400 focus:outline-none" />
+            </div>
+          </section>
 
-      <section class="space-y-6">
-        <div class="flex items-center gap-3 text-brand-200 text-sm uppercase tracking-widest">
-          <span class="h-px w-10 bg-brand-200/60"></span>
-          Skill Mesh Vision
+          <div class="max-w-4xl px-6 py-10 space-y-10">
+            <article class="doc-section space-y-4" id="getting-started" data-keywords="install npm start quick start env">
+              <p class="text-sm uppercase tracking-widest text-brand-200">Start here</p>
+              <h2 class="text-3xl font-display font-semibold">Getting Started</h2>
+              <p class="text-slate-300">Run `npx supercli help` for instant usage or `npx supercli --help` to see all available options, install dependencies with `npm install`, copy `.env.example`, and start the local server via `npm start` or `supercli --server`. The web UI (EJS + Vue + Tailwind) is reachable at `http://localhost:3000`. Refer to the repository README for additional context.</p>
+            </article>
+
+            <article class="doc-section space-y-4" id="skill-layer" data-keywords="skill layer discovery routing execution mesh">
+              <p class="text-sm uppercase tracking-widest text-brand-200">Concept</p>
+              <h2 class="text-3xl font-display font-semibold">Skill Layer Basics</h2>
+              <p class="text-slate-300">Every capability becomes a skill, whether it originates from CLI commands, OpenAPI endpoints, MCP tools, workflows, or HTTP requests. supercli indexes names like `namespace.resource.action`, exposes schemas, and lets agents discover, inspect, and execute consistently.</p>
+              <pre class="bg-slate-900 border border-slate-800 rounded-2xl p-4 text-sm"><code>supercli skills list
+supercli skills search "database"
+supercli skills get beads.issue.create</code></pre>
+            </article>
+
+            <article class="doc-section space-y-4" id="skill-sources" data-keywords="bundled adapters openapi http mcp workflows plugins">
+              <p class="text-sm uppercase tracking-widest text-brand-200">Sources</p>
+              <h2 class="text-3xl font-display font-semibold">Skill Sources</h2>
+              <ul class="list-disc list-inside text-slate-300 space-y-2">
+                <li><strong>Bundled Harnesses</strong> – beads, gwc, commiat ship with the CLI.</li>
+                <li><strong>Built-in Adapters</strong> – OpenAPI specs, raw HTTP, and MCP servers become skills automatically.</li>
+                <li><strong>Plugins</strong> – Install docker, gh, aws, kubectl, terraform harnesses via `supercli plugins install`.</li>
+                <li><strong>AI Plans / Workflows</strong> – Natural language `ask` and `plan` commands create DAGs of skills.</li>
+              </ul>
+            </article>
+
+            <article class="doc-section space-y-4" id="architecture" data-keywords="router discovery layer adapters harness diagram">
+              <p class="text-sm uppercase tracking-widest text-brand-200">Runtime</p>
+              <h2 class="text-3xl font-display font-semibold">Architecture</h2>
+              <p class="text-slate-300">Agents route requests through the skill discovery layer, which maps namespaces to harnesses/adapters. Execution envelopes guarantee deterministic JSON responses and exit codes.</p>
+              <pre class="bg-slate-900 border border-slate-800 rounded-2xl p-4 text-sm"><code>Agents/Humans → supercli runtime → Skill Router → Harness / Adapter → Tool</code></pre>
+            </article>
+
+            <article class="doc-section space-y-4" id="cli-usage" data-keywords="cli usage beads gwc docker plan ask plugins config">
+              <p class="text-sm uppercase tracking-widest text-brand-200">Interface</p>
+              <h2 class="text-3xl font-display font-semibold">CLI Usage</h2>
+              <div class="space-y-3">
+                <pre class="bg-slate-900 border border-slate-800 rounded-2xl p-4 text-sm"><code>supercli &lt;harness&gt;                # list skills
+supercli beads issue list --json
+supercli skills search --harness beads "task"
+supercli ask "deploy staging"
+supercli plugins explore --tags git,ai</code></pre>
+                <p class="text-slate-300">`--json`, `--human`, and `--compact` control output, while exit codes communicate validation, resource, or integration errors.</p>
+              </div>
+            </article>
+
+            <article class="doc-section space-y-4" id="plugins" data-keywords="plugin harness guide manifest commiat docker install">
+              <p class="text-sm uppercase tracking-widest text-brand-200">Extension</p>
+              <h2 class="text-3xl font-display font-semibold">Plugins & Harnesses</h2>
+              <p class="text-slate-300">Wrap any CLI with a `plugin.json` manifest that defines commands, schemas, dependency checks, and passthrough rules. Install from the registry, Git repos, or local paths.</p>
+              <p class="text-slate-400 text-sm">Need more? Check `docs/plugin-harness-guide.md` in the repository for step-by-step authoring details.</p>
+            </article>
+
+            <article class="doc-section space-y-4" id="skill-vision" data-keywords="skill mesh registry graph governance dag api telemetry">
+              <p class="text-sm uppercase tracking-widest text-brand-200">Vision</p>
+              <h2 class="text-3xl font-display font-semibold">Skill Mesh Direction</h2>
+              <p class="text-slate-300">The platform is evolving toward a mesh that handles discovery, routing, execution, composition, and governance. Key areas under exploration include a unified skill registry, graph-native discovery, mesh-wide policy, DAG orchestration, agent endpoints, composition tooling, telemetry, and richer plugin UX.</p>
+            </article>
+
+            <article class="doc-section space-y-4" id="resources" data-keywords="readme docs skills catalog supported harnesses">
+              <p class="text-sm uppercase tracking-widest text-brand-200">Resources</p>
+              <h2 class="text-3xl font-display font-semibold">More Documentation</h2>
+              <ul class="list-disc list-inside text-slate-300 space-y-2">
+                <li>README.md (repository root)</li>
+                <li>docs/skills-catalog.md</li>
+                <li>docs/supported-harnesses.md</li>
+                <li>docs/features/skills.md</li>
+              </ul>
+            </article>
+          </div>
+        </main>
+      </div>
+    </div>
+
+    <div id="mobileDrawer" class="fixed inset-0 bg-black/60 hidden z-40 lg:hidden">
+      <div class="w-72 bg-slate-950 h-full border-r border-slate-800 p-6 overflow-y-auto">
+        <div class="flex items-center justify-between mb-6">
+          <h2 class="text-white text-xl font-display">Navigate</h2>
+          <button id="drawerClose" class="btn btn-sm btn-ghost">Close</button>
         </div>
-        <div class="grid gap-5 md:grid-cols-2">
-          <article class="p-6 rounded-2xl border border-slate-800 bg-slate-900/60">
-            <h3 class="text-2xl font-display mb-3">Toward a universal skill mesh.</h3>
-            <p class="text-slate-300">supercli is growing into a mesh that handles discovery, routing, execution, composition, and governance for every capability in your environment.</p>
-          </article>
-          <article class="p-6 rounded-2xl border border-slate-800 bg-slate-900/60">
-            <ul class="list-disc list-inside text-slate-300 space-y-2">
-              <li>Graph-native discovery & tagging</li>
-              <li>Execution DAG observability</li>
-              <li>Agent-facing HTTP/WebSocket endpoints</li>
-              <li>Policy controls across harnesses</li>
-            </ul>
-          </article>
+        <div id="drawerNav" class="space-y-6 text-sm">
+          <!-- Populated from sidebar -->
         </div>
-        <p class="text-sm text-slate-400">Follow along in the docs for upcoming mesh capabilities and long-term direction.</p>
-      </section>
-    </main>
-
-    <footer class="border-t border-slate-800/60 py-8 text-center text-sm text-slate-400">
-      <p>© <span id="year"></span> supercli — Universal Skill Router for AI Agents.</p>
-      <div class="flex justify-center gap-4 mt-3">
-        <a class="underline" href="./docs.html#getting-started">Start</a>
-        <a class="underline" href="./docs.html">Docs</a>
-        <a class="underline" href="./docs.html#skill-vision">Skill vision</a>
       </div>
-    </footer>
+    </div>
 
     <script>
-      document.getElementById('year').textContent = new Date().getFullYear();
+      const filterInput = document.getElementById('filterInput');
+      const sections = document.querySelectorAll('.doc-section');
+
+      filterInput.addEventListener('input', (event) => {
+        const query = event.target.value.trim().toLowerCase();
+        sections.forEach((section) => {
+          const text = section.textContent.toLowerCase();
+          const keywords = section.dataset.keywords || '';
+          const match = text.includes(query) || keywords.includes(query);
+          section.style.display = match ? 'block' : 'none';
+        });
+      });
+
+      const sidebar = document.getElementById('sidebar');
+      const mobileDrawer = document.getElementById('mobileDrawer');
+      const drawerNav = document.getElementById('drawerNav');
+      const mobileToggle = document.getElementById('mobileToggle');
+      const drawerClose = document.getElementById('drawerClose');
+
+      const cloneSidebarNav = () => {
+        if (!sidebar) return;
+        drawerNav.innerHTML = sidebar.querySelector('nav').innerHTML;
+      };
+      cloneSidebarNav();
+
+      const openDrawer = () => {
+        mobileDrawer.classList.remove('hidden');
+      };
+      const closeDrawer = () => {
+        mobileDrawer.classList.add('hidden');
+      };
+
+      mobileToggle.addEventListener('click', openDrawer);
+      drawerClose.addEventListener('click', closeDrawer);
+      mobileDrawer.addEventListener('click', (event) => {
+        if (event.target === mobileDrawer) closeDrawer();
+      });
     </script>
   </body>
 </html>

package/docs/{supported-harnesses.md → plugins-available.md}

@@ -1,10 +1,10 @@
 # Supported Harnesses
 
-A comprehensive guide to all currently supported harnesses in dcli, including bundled harnesses, built-in adapters, and popular community harnesses available via the plugin system.
+A comprehensive guide to all currently supported harnesses in supercli, including bundled harnesses, built-in adapters, and popular community harnesses available via the plugin system.
 
 ## Bundled Harnesses
 
-These harnesses are included with dcli and require only the underlying CLI tool to be installed.
+These harnesses are included with supercli and require only the underlying CLI tool to be installed.
 
 ### beads (Task/Issue Management)
 
@@ -258,6 +258,7 @@ These harnesses are in active development and will be available as plugins. Stat
 
 | Harness | CLI | Status | Purpose |
 |---------|-----|--------|---------|
+| **cocoindex-code** | cocoindex-code | Available via plugin | Semantic code search via local MCP with bound `cocoindex.code.search` capability |
 | **huggingface** | huggingface-cli | Planned | Hugging Face model management |
 | **langchain** | langchain CLI | Planned | LangChain utilities |
 | **ollama** | ollama | Planned | Local LLM management |
@@ -289,7 +290,7 @@ For detailed instructions, see [plugin-harness-guide.md](plugin-harness-guide.md
 
 ## Request a Harness
 
-Missing a CLI you'd like to use with dcli? [Open an issue](https://github.com/anomalyco/dcli/issues) with:
+Missing a CLI you'd like to use with supercli? [Open an issue](https://github.com/anomalyco/supercli/issues) with:
 - CLI name and link
 - Use cases in your workflow
 - Relevant commands/operations

package/docs/{plugin-harness-guide.md → plugins-how-to.md}

@@ -8,7 +8,7 @@ A **plugin harness** bridges dcli to an external CLI tool. It allows dcli to:
 - Discover and route commands to the external CLI
 - Expose the CLI's functionality through dcli's unified interface
 - Provide consistent output formatting and error handling
-- Integrate AI-driven skill discovery across all harnesses
+- Integrate AI-driven capability discovery across all harnesses
 
 ## Anatomy of a Plugin Harness
 

package/docs/plugins.md

@@ -1,6 +1,6 @@
 # Plugins
 
-DCLI supports plugin discovery through the registry file at `plugins/plugins.json`.
+supercli supports plugin discovery through `plugins/plugins.json` plus auto-discovery of bundled manifests at `plugins/*/plugin.json`.
 
 Plugin owners can submit PRs that add or update metadata in this registry:
 
@@ -8,30 +8,31 @@ Plugin owners can submit PRs that add or update metadata in this registry:
 - `description`
 - `tags`
 - `source` (`bundled` path or remote `git` repo + manifest path)
+- `install_guidance` (optional plugin-specific dependency/setup hints)
 
 ## Plugin Commands
 
 ```bash
-dcli plugins list
-dcli plugins explore
-dcli plugins explore --name commiat
-dcli plugins explore --tags git,ai
-dcli plugins explore --has-learn true --installed false --source bundled --limit 10 --json
-dcli plugins learn <plugin-name>
-dcli plugins install <plugin-name>
-dcli plugins install --git https://github.com/org/repo.git --manifest-path plugins/supercli/plugin.json --ref main
-dcli plugins show <plugin-name>
-dcli plugins doctor
-dcli plugins doctor <plugin-name>
-dcli plugins remove <plugin-name>
+supercli plugins list
+supercli plugins explore
+supercli plugins explore --name commiat
+supercli plugins explore --tags git,ai
+supercli plugins explore --has-learn true --installed false --source bundled --limit 10 --json
+supercli plugins learn <plugin-name>
+supercli plugins install <plugin-name>
+supercli plugins install --git https://github.com/org/repo.git --manifest-path plugins/supercli/plugin.json --ref main
+supercli plugins show <plugin-name>
+supercli plugins doctor
+supercli plugins doctor <plugin-name>
+supercli plugins remove <plugin-name>
 ```
 
 Install conflict policy:
 
 ```bash
-dcli plugins install <plugin-name> --on-conflict fail
-dcli plugins install <plugin-name> --on-conflict skip
-dcli plugins install <plugin-name> --on-conflict replace
+supercli plugins install <plugin-name> --on-conflict fail
+supercli plugins install <plugin-name> --on-conflict skip
+supercli plugins install <plugin-name> --on-conflict replace
 ```
 
 Default is `fail`.
@@ -39,13 +40,18 @@ Default is `fail`.
 ## Notes
 
 - `plugins list` shows installed plugins.
-- `plugins explore` shows discoverable plugins from `plugins/plugins.json`.
+- `plugins explore` shows discoverable plugins from merged sources: curated registry entries plus bundled manifest auto-discovery.
 - `plugins explore` supports filters: `--name`, `--tags`, `--has-learn true|false`, `--installed true|false`, `--source bundled|git`, `--limit <n>`.
 - `plugins explore --json` includes `has_learn`, `installed`, and `filters` metadata so agents can prioritize plugins with learning content.
 - `plugins learn <name>` prints plugin-provided learning content before or after install.
 - `plugins install` supports local path, registry name, and direct remote git manifest installs.
 - Plugin manifests can define `learn` content via `learn.text` or `learn.file` (path inside plugin folder).
 - Plugin manifests can define `post_install` hooks (`script`, optional `runtime`, optional `timeout_ms`) that execute from the plugin folder after install.
-- `agency-agents` is a bundled zero-command plugin. Installing it adds a remote skills provider named `agency-agents` and refreshes the local skills catalog.
-- `visual-explainer` is a bundled zero-command plugin. Installing it adds a remote skills provider named `visual-explainer` sourced from normalized markdown skills in `javimosch/visual-explainer` and refreshes the local skills catalog.
-- `browser-use` is a bundled hybrid plugin. Installing it auto-registers a `browser-use` MCP server, discovers and binds Browser Use MCP tools into direct `browseruse.tool.*` commands, and installs local Browser Use skills from the plugin folder.
+- Plugin manifests can define `install_guidance` so plugin-specific setup guidance does not require core edits in `cli/plugin-install-guidance.js`.
+- `agency-agents` is a bundled zero-command plugin. Installing it adds a remote skill-document provider named `agency-agents` and refreshes the local skill-doc catalog.
+- `visual-explainer` is a bundled zero-command plugin. Installing it adds a remote skill-document provider named `visual-explainer` sourced from normalized markdown skill documents in `javimosch/visual-explainer` and refreshes the local skill-doc catalog.
+- `browser-use` is a bundled hybrid plugin. Installing it auto-registers a `browser-use` MCP server, discovers and binds Browser Use MCP tools into direct `browseruse.tool.*` commands, and installs local Browser Use skill documents from the plugin folder.
+- `cocoindex-code` is a bundled hybrid plugin. Installing it auto-registers a local `cocoindex-code` MCP server, exposes fast direct search via `cocoindex.code.search`, keeps `cocoindex.mcp.search` for MCP-native flows, and installs local quickstart skill documents.
+- `squirrelscan` is a bundled Docker-backed plugin with broad CLI coverage (`audit`, `crawl`, `analyze`, `report`, `auth`, `config`, `init`, `feedback`, `self`, `skills`) plus passthrough. It lazily builds a pinned local image on first use, then reuses it for fast repeat scans (example: `supercli squirrel audit https://example.com -C quick`).
+- `openhands` is a bundled plugin for OpenHands headless workflows (`task run`, `task file`, `task json`) plus passthrough for full CLI coverage.
+- `uipathcli` is a bundled plugin for UiPath automation lifecycle wrappers (`project pack`, `project analyze`, `project deploy`) plus passthrough.