vskill 1.0.15 → 1.0.18

package/dist/eval-server/install-engine-routes.js

@@ -21,11 +21,9 @@
 // Ref: .specweave/increments/0734-studio-create-skill-engine-selector
 // ACs: AC-US5-01..AC-US5-09
 // ---------------------------------------------------------------------------
-import { spawn } from "node:child_process";
-import { randomUUID } from "node:crypto";
 import { sendJson, readBody } from "./router.js";
-import { initSSE, sendSSE, sendSSEDone } from "./sse-helpers.js";
 import { isCliAvailable } from "./install-engine-routes-helpers.js";
+import { isLocalhost, mountSpawnStreamRoute, startSpawnJob, } from "./install-jobs.js";
 /**
  * Hard-coded engine→command allow-list. The HTTP request body NEVER reaches a
  * shell — only the engine *name* is read from the request, then mapped here.
@@ -43,86 +41,7 @@ const INSTALL_COMMANDS = {
     },
 };
 const INSTALL_TIMEOUT_MS = 120_000;
-const STDOUT_BUFFER_CAP = 1024 * 1024; // 1 MB
 const JOBS = new Map();
-function isLocalhost(req) {
-    const addr = req.socket.remoteAddress ?? "";
-    return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
-}
-function trimRing(buf, cap) {
-    return buf.length <= cap ? buf : buf.slice(buf.length - cap);
-}
-function emitToJob(job, event, data) {
-    job.pastEvents.push({ event, data });
-    for (const sub of job.subscribers) {
-        try {
-            sub(event, data);
-        }
-        catch { /* subscriber failed — ignore */ }
-    }
-}
-function startInstall(engine) {
-    const cmd = INSTALL_COMMANDS[engine];
-    const proc = spawn(cmd.command, cmd.args, { stdio: ["ignore", "pipe", "pipe"] });
-    const job = {
-        id: randomUUID(),
-        engine,
-        proc,
-        stdoutBuffer: "",
-        stderrBuffer: "",
-        exitCode: null,
-        done: false,
-        subscribers: new Set(),
-        pastEvents: [],
-    };
-    proc.stdout?.on("data", (chunk) => {
-        const text = chunk.toString();
-        job.stdoutBuffer = trimRing(job.stdoutBuffer + text, STDOUT_BUFFER_CAP);
-        for (const line of text.split(/\r?\n/)) {
-            if (line.length > 0)
-                emitToJob(job, "progress", { stream: "stdout", line });
-        }
-    });
-    proc.stderr?.on("data", (chunk) => {
-        const text = chunk.toString();
-        job.stderrBuffer = trimRing(job.stderrBuffer + text, STDOUT_BUFFER_CAP);
-        for (const line of text.split(/\r?\n/)) {
-            if (line.length > 0)
-                emitToJob(job, "progress", { stream: "stderr", line });
-        }
-    });
-    let timedOut = false;
-    const timer = setTimeout(() => {
-        timedOut = true;
-        try {
-            proc.kill("SIGTERM");
-        }
-        catch { /* process already gone */ }
-    }, INSTALL_TIMEOUT_MS);
-    proc.on("exit", (code) => {
-        clearTimeout(timer);
-        job.exitCode = timedOut ? -1 : code;
-        job.done = true;
-        const stderr = timedOut ? "timeout" : job.stderrBuffer.trim();
-        emitToJob(job, "done", {
-            success: !timedOut && code === 0,
-            exitCode: timedOut ? -1 : code,
-            stderr,
-        });
-    });
-    proc.on("error", (err) => {
-        clearTimeout(timer);
-        job.exitCode = -1;
-        job.done = true;
-        emitToJob(job, "done", {
-            success: false,
-            exitCode: -1,
-            stderr: err.message || "spawn failed",
-        });
-    });
-    JOBS.set(job.id, job);
-    return job;
-}
 export function registerInstallEngineRoutes(router, _root) {
     // POST /api/studio/install-engine
     router.post("/api/studio/install-engine", async (req, res) => {
@@ -153,51 +72,17 @@ export function registerInstallEngineRoutes(router, _root) {
             }, 412, req);
             return;
         }
-        const job = startInstall(engine);
+        const job = startSpawnJob({
+            command: cmd.command,
+            args: cmd.args,
+            meta: { engine },
+            timeoutMs: INSTALL_TIMEOUT_MS,
+            jobs: JOBS,
+        });
         sendJson(res, { jobId: job.id }, 202, req);
     });
     // GET /api/studio/install-engine/:jobId/stream
-    router.get("/api/studio/install-engine/:jobId/stream", async (req, res, params) => {
-        if (!isLocalhost(req)) {
-            sendJson(res, { error: "localhost-only endpoint" }, 403, req);
-            return;
-        }
-        const job = JOBS.get(params.jobId);
-        if (!job) {
-            sendJson(res, { error: "unknown jobId" }, 404, req);
-            return;
-        }
-        initSSE(res, req);
-        // Replay any events that fired before this stream connected.
-        for (const ev of job.pastEvents) {
-            try {
-                sendSSE(res, ev.event, ev.data);
-            }
-            catch { /* stream closed */ }
-        }
-        if (job.done) {
-            try {
-                res.end();
-            }
-            catch { /* already closed */ }
-            return;
-        }
-        const subscriber = (event, data) => {
-            try {
-                if (event === "done")
-                    sendSSEDone(res, data);
-                else
-                    sendSSE(res, event, data);
-            }
-            catch { /* stream closed */ }
-        };
-        job.subscribers.add(subscriber);
-        const cleanup = () => {
-            job.subscribers.delete(subscriber);
-        };
-        req.on("close", cleanup);
-        req.on("aborted", cleanup);
-    });
+    mountSpawnStreamRoute(router, "/api/studio/install-engine", JOBS);
 }
 // ---------------------------------------------------------------------------
 // Internals exposed for tests.

package/dist/eval-server/install-engine-routes.js.map

@@ -1 +1 @@
-{"version":3,"file":"install-engine-routes.js","sourceRoot":"","sources":["../../src/eval-server/install-engine-routes.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,+EAA+E;AAC/E,8EAA8E;AAC9E,EAAE;AACF,6EAA6E;AAC7E,oDAAoD;AACpD,EAAE;AACF,wEAAwE;AACxE,2EAA2E;AAC3E,EAAE;AACF,sDAAsD;AACtD,6EAA6E;AAC7E,6EAA6E;AAC7E,4DAA4D;AAC5D,gFAAgF;AAChF,wEAAwE;AACxE,sDAAsD;AACtD,yEAAyE;AACzE,wDAAwD;AACxD,EAAE;AACF,sEAAsE;AACtE,4BAA4B;AAC5B,8EAA8E;AAG9E,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAWpE;;;GAGG;AACH,MAAM,gBAAgB,GAAsC;IAC1D,yBAAyB,EAAE;QACzB,OAAO,EAAE,QAAQ;QACjB,IAAI,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,eAAe,CAAC;QAC5C,YAAY,EAAE,QAAQ;KACvB;IACD,MAAM,EAAE;QACN,OAAO,EAAE,QAAQ;QACjB,IAAI,EAAE,CAAC,SAAS,EAAE,mCAAmC,CAAC;QACtD,YAAY,EAAE,QAAQ;KACvB;CACF,CAAC;AAEF,MAAM,kBAAkB,GAAG,OAAO,CAAC;AACnC,MAAM,iBAAiB,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO;AAgB9C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAsB,CAAC;AAE3C,SAAS,WAAW,CAAC,GAAyB;IAC5C,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC;IAC5C,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,kBAAkB,CAAC;AAC/E,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW,EAAE,GAAW;IACxC,OAAO,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,SAAS,CAAC,GAAe,EAAE,KAA0B,EAAE,IAAa;IAC3E,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;QAClC,IAAI,CAAC;YAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,gCAAgC,CAAC,CAAC;IACtE,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,MAAkB;IACtC,MAAM,GAAG,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IACjF,MAAM,GAAG,GAAe;QACtB,EAAE,EAAE,UAAU,EAAE;QAChB,MAAM;QACN,IAAI;QACJ,YAAY,EAAE,EAAE;QAChB,YAAY,EAAE,EAAE;QAChB,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,KAAK;QACX,WAAW,EAAE,IAAI,GAAG,EAAE;QACtB,UAAU,EAAE,EAAE;KACf,CAAC;IAEF,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACxC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC9B,GAAG,CAAC,YAAY,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,GAAG,IAAI,EAAE,iBAAiB,CAAC,CAAC;QACxE,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACvC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,SAAS,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACxC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC9B,GAAG,CAAC,YAAY,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,GAAG,IAAI,EAAE,iBAAiB,CAAC,CAAC;QACxE,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACvC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,SAAS,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;QAC5B,QAAQ,GAAG,IAAI,CAAC;QAChB,IAAI,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,0BAA0B,CAAC,CAAC;IACpE,CAAC,EAAE,kBAAkB,CAAC,CAAC;IAEvB,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;QACvB,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACpC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAChB,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QAC9D,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE;YACrB,OAAO,EAAE,CAAC,QAAQ,IAAI,IAAI,KAAK,CAAC;YAChC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;YAC9B,MAAM;SACP,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;QACvB,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;QAClB,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAChB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE;YACrB,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,CAAC,CAAC;YACZ,MAAM,EAAG,GAAa,CAAC,OAAO,IAAI,cAAc;SACjD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IACtB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAAc,EAAE,KAAa;IACvE,kCAAkC;IAClC,MAAM,CAAC,IAAI,CACT,4BAA4B,EAC5B,KAAK,EAAE,GAAyB,EAAE,GAAwB,EAAE,EAAE;QAC5D,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YAC9D,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAwB,CAAC;QAC1D,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,CAAC;QAE5B,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,yBAAyB,EAAE,CAAC;YAChE,QAAQ,CAAC,GAAG,EAAE;gBACZ,KAAK,EAAE,kEAAkE;aAC1E,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YACb,OAAO;QACT,CAAC;QAED,MAAM,GAAG,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YACtC,IAAI,MAAM,KAAK,yBAAyB,EAAE,CAAC;gBACzC,QAAQ,CAAC,GAAG,EAAE;oBACZ,KAAK,EAAE,oBAAoB;oBAC3B,WAAW,EAAE,oEAAoE;iBAClF,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBACb,OAAO;YACT,CAAC;YACD,QAAQ,CAAC,GAAG,EAAE;gBACZ,KAAK,EAAE,GAAG,GAAG,CAAC,YAAY,cAAc;gBACxC,WAAW,EAAE,WAAW,GAAG,CAAC,YAAY,aAAa;aACtD,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YACb,OAAO;QACT,CAAC;QAED,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QACjC,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC7C,CAAC,CACF,CAAC;IAEF,+CAA+C;IAC/C,MAAM,CAAC,GAAG,CACR,0CAA0C,EAC1C,KAAK,EAAE,GAAyB,EAAE,GAAwB,EAAE,MAA8B,EAAE,EAAE;QAC5F,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YAC9D,OAAO;QACT,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAElB,6DAA6D;QAC7D,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;YAChC,IAAI,CAAC;gBAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YACb,IAAI,CAAC;gBAAC,GAAG,CAAC,GAAG,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;YACjD,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,CAAC,KAA0B,EAAE,IAAa,EAAE,EAAE;YAC/D,IAAI,CAAC;gBACH,IAAI,KAAK,KAAK,MAAM;oBAAE,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;;oBACxC,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YACjC,CAAC;YAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,CAAC;QACjC,CAAC,CAAC;QACF,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAEhC,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACrC,CAAC,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACzB,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC7B,CAAC,CACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,+BAA+B;AAC/B,8EAA8E;AAC9E,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,gBAAgB;IAChB,kBAAkB;IAClB,IAAI,EAAE,IAAI;CACX,CAAC"}
+{"version":3,"file":"install-engine-routes.js","sourceRoot":"","sources":["../../src/eval-server/install-engine-routes.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,+EAA+E;AAC/E,8EAA8E;AAC9E,EAAE;AACF,6EAA6E;AAC7E,oDAAoD;AACpD,EAAE;AACF,wEAAwE;AACxE,2EAA2E;AAC3E,EAAE;AACF,sDAAsD;AACtD,6EAA6E;AAC7E,6EAA6E;AAC7E,4DAA4D;AAC5D,gFAAgF;AAChF,wEAAwE;AACxE,sDAAsD;AACtD,yEAAyE;AACzE,wDAAwD;AACxD,EAAE;AACF,sEAAsE;AACtE,4BAA4B;AAC5B,8EAA8E;AAK9E,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACpE,OAAO,EACL,WAAW,EACX,qBAAqB,EACrB,aAAa,GAEd,MAAM,mBAAmB,CAAC;AAW3B;;;GAGG;AACH,MAAM,gBAAgB,GAAsC;IAC1D,yBAAyB,EAAE;QACzB,OAAO,EAAE,QAAQ;QACjB,IAAI,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,eAAe,CAAC;QAC5C,YAAY,EAAE,QAAQ;KACvB;IACD,MAAM,EAAE;QACN,OAAO,EAAE,QAAQ;QACjB,IAAI,EAAE,CAAC,SAAS,EAAE,mCAAmC,CAAC;QACtD,YAAY,EAAE,QAAQ;KACvB;CACF,CAAC;AAEF,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAMnC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAmC,CAAC;AAExD,MAAM,UAAU,2BAA2B,CAAC,MAAc,EAAE,KAAa;IACvE,kCAAkC;IAClC,MAAM,CAAC,IAAI,CACT,4BAA4B,EAC5B,KAAK,EAAE,GAAyB,EAAE,GAAwB,EAAE,EAAE;QAC5D,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YAC9D,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAwB,CAAC;QAC1D,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,CAAC;QAE5B,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,yBAAyB,EAAE,CAAC;YAChE,QAAQ,CAAC,GAAG,EAAE;gBACZ,KAAK,EAAE,kEAAkE;aAC1E,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YACb,OAAO;QACT,CAAC;QAED,MAAM,GAAG,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YACtC,IAAI,MAAM,KAAK,yBAAyB,EAAE,CAAC;gBACzC,QAAQ,CAAC,GAAG,EAAE;oBACZ,KAAK,EAAE,oBAAoB;oBAC3B,WAAW,EAAE,oEAAoE;iBAClF,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBACb,OAAO;YACT,CAAC;YACD,QAAQ,CAAC,GAAG,EAAE;gBACZ,KAAK,EAAE,GAAG,GAAG,CAAC,YAAY,cAAc;gBACxC,WAAW,EAAE,WAAW,GAAG,CAAC,YAAY,aAAa;aACtD,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YACb,OAAO;QACT,CAAC;QAED,MAAM,GAAG,GAAG,aAAa,CAAgB;YACvC,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI,EAAE,EAAE,MAAM,EAAE;YAChB,SAAS,EAAE,kBAAkB;YAC7B,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;QACH,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC7C,CAAC,CACF,CAAC;IAEF,+CAA+C;IAC/C,qBAAqB,CAAC,MAAM,EAAE,4BAA4B,EAAE,IAAI,CAAC,CAAC;AACpE,CAAC;AAED,8EAA8E;AAC9E,+BAA+B;AAC/B,8EAA8E;AAC9E,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,gBAAgB;IAChB,kBAAkB;IAClB,IAAI,EAAE,IAAI;CACX,CAAC"}

package/dist/eval-server/install-jobs.d.ts

@@ -0,0 +1,41 @@
+import * as http from "node:http";
+import { type ChildProcess } from "node:child_process";
+import type { Router } from "./router.js";
+export declare const STDOUT_BUFFER_CAP: number;
+export type JobEvent = "progress" | "done";
+export interface SpawnJob<TMeta extends object> {
+    id: string;
+    meta: TMeta;
+    proc: ChildProcess;
+    stdoutBuffer: string;
+    stderrBuffer: string;
+    exitCode: number | null;
+    done: boolean;
+    subscribers: Set<(event: JobEvent, data: unknown) => void>;
+    pastEvents: Array<{
+        event: JobEvent;
+        data: unknown;
+    }>;
+}
+export interface StartSpawnJobOptions<TMeta extends object> {
+    command: string;
+    args: string[];
+    meta: TMeta;
+    timeoutMs: number;
+    jobs: Map<string, SpawnJob<TMeta>>;
+}
+export declare function isLocalhost(req: http.IncomingMessage): boolean;
+export declare function trimRing(buf: string, cap: number): string;
+/**
+ * Spawn `command` with `args`, wire stdout/stderr to per-line "progress"
+ * events, register the job in `jobs`, and emit "done" on exit / error /
+ * timeout. Returns the registered job synchronously so the HTTP handler
+ * can reply with `{ jobId }` immediately.
+ */
+export declare function startSpawnJob<TMeta extends object>(opts: StartSpawnJobOptions<TMeta>): SpawnJob<TMeta>;
+/**
+ * Mount `GET <prefix>/:jobId/stream` on `router`. The handler enforces the
+ * localhost gate, replays buffered events, then subscribes the SSE response
+ * to live "progress"/"done" events until disconnect.
+ */
+export declare function mountSpawnStreamRoute<TMeta extends object>(router: Router, prefix: string, jobs: Map<string, SpawnJob<TMeta>>): void;

package/dist/eval-server/install-jobs.js

@@ -0,0 +1,161 @@
+// ---------------------------------------------------------------------------
+// install-jobs — shared spawn-job runtime for install-skill / install-engine
+// ---------------------------------------------------------------------------
+// Both install-skill-routes and install-engine-routes were ~90% duplicate code:
+//   - InstallJob interface (proc, buffers, subscribers, pastEvents)
+//   - JOBS Map per route (UUID → job)
+//   - localhost-only guard
+//   - stdout/stderr ring-buffered into per-line "progress" events
+//   - SIGTERM on timeout, "done" event on exit/error
+//   - SSE replay-then-subscribe `/:jobId/stream` route
+//
+// Extracting that here means an SSE / timeout / replay bug fix lands once,
+// not twice. Each route file now declares only:
+//   - its argv builder + body validation
+//   - its prefix and metadata shape (TMeta)
+// ---------------------------------------------------------------------------
+import { spawn } from "node:child_process";
+import { randomUUID } from "node:crypto";
+import { sendJson } from "./router.js";
+import { initSSE, sendSSE, sendSSEDone } from "./sse-helpers.js";
+import { buildSpawnEnv } from "./utils/spawn-env.js";
+export const STDOUT_BUFFER_CAP = 1024 * 1024; // 1 MiB ring per stream.
+export function isLocalhost(req) {
+    const addr = req.socket.remoteAddress ?? "";
+    return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
+}
+export function trimRing(buf, cap) {
+    return buf.length <= cap ? buf : buf.slice(buf.length - cap);
+}
+function emitToJob(job, event, data) {
+    job.pastEvents.push({ event, data });
+    for (const sub of job.subscribers) {
+        try {
+            sub(event, data);
+        }
+        catch { /* subscriber failed — ignore */ }
+    }
+}
+/**
+ * Spawn `command` with `args`, wire stdout/stderr to per-line "progress"
+ * events, register the job in `jobs`, and emit "done" on exit / error /
+ * timeout. Returns the registered job synchronously so the HTTP handler
+ * can reply with `{ jobId }` immediately.
+ */
+export function startSpawnJob(opts) {
+    const proc = spawn(opts.command, opts.args, {
+        stdio: ["ignore", "pipe", "pipe"],
+        // Scrub env — provider keys / studio overrides are not needed by the
+        // installer command and shouldn't leak to subprocess descendants.
+        env: buildSpawnEnv(),
+    });
+    const job = {
+        id: randomUUID(),
+        meta: opts.meta,
+        proc,
+        stdoutBuffer: "",
+        stderrBuffer: "",
+        exitCode: null,
+        done: false,
+        subscribers: new Set(),
+        pastEvents: [],
+    };
+    proc.stdout?.on("data", (chunk) => {
+        const text = chunk.toString();
+        job.stdoutBuffer = trimRing(job.stdoutBuffer + text, STDOUT_BUFFER_CAP);
+        for (const line of text.split(/\r?\n/)) {
+            if (line.length > 0)
+                emitToJob(job, "progress", { stream: "stdout", line });
+        }
+    });
+    proc.stderr?.on("data", (chunk) => {
+        const text = chunk.toString();
+        job.stderrBuffer = trimRing(job.stderrBuffer + text, STDOUT_BUFFER_CAP);
+        for (const line of text.split(/\r?\n/)) {
+            if (line.length > 0)
+                emitToJob(job, "progress", { stream: "stderr", line });
+        }
+    });
+    let timedOut = false;
+    const timer = setTimeout(() => {
+        timedOut = true;
+        try {
+            proc.kill("SIGTERM");
+        }
+        catch { /* process already gone */ }
+    }, opts.timeoutMs);
+    proc.on("exit", (code) => {
+        clearTimeout(timer);
+        job.exitCode = timedOut ? -1 : code;
+        job.done = true;
+        const stderr = timedOut ? "timeout" : job.stderrBuffer.trim();
+        emitToJob(job, "done", {
+            success: !timedOut && code === 0,
+            exitCode: timedOut ? -1 : code,
+            stderr,
+        });
+    });
+    proc.on("error", (err) => {
+        clearTimeout(timer);
+        job.exitCode = -1;
+        job.done = true;
+        emitToJob(job, "done", {
+            success: false,
+            exitCode: -1,
+            stderr: err.message || "spawn failed",
+        });
+    });
+    opts.jobs.set(job.id, job);
+    return job;
+}
+/**
+ * Mount `GET <prefix>/:jobId/stream` on `router`. The handler enforces the
+ * localhost gate, replays buffered events, then subscribes the SSE response
+ * to live "progress"/"done" events until disconnect.
+ */
+export function mountSpawnStreamRoute(router, prefix, jobs) {
+    router.get(`${prefix}/:jobId/stream`, async (req, res, params) => {
+        if (!isLocalhost(req)) {
+            sendJson(res, { error: "localhost-only endpoint" }, 403, req);
+            return;
+        }
+        const job = jobs.get(params.jobId);
+        if (!job) {
+            sendJson(res, { error: "unknown jobId" }, 404, req);
+            return;
+        }
+        initSSE(res, req);
+        // Replay any events that fired before this stream connected.
+        for (const ev of job.pastEvents) {
+            try {
+                sendSSE(res, ev.event, ev.data);
+            }
+            catch { /* stream closed */ }
+        }
+        if (job.done) {
+            try {
+                res.end();
+            }
+            catch { /* already closed */ }
+            return;
+        }
+        const subscriber = (event, data) => {
+            try {
+                if (event === "done")
+                    sendSSEDone(res, data);
+                else
+                    sendSSE(res, event, data);
+            }
+            catch {
+                // Stream write failed — eagerly drop this subscriber so we don't
+                // accumulate dead listeners on half-open sockets.
+                job.subscribers.delete(subscriber);
+            }
+        };
+        job.subscribers.add(subscriber);
+        const cleanup = () => { job.subscribers.delete(subscriber); };
+        req.on("close", cleanup);
+        req.on("aborted", cleanup);
+    });
+}
+//# sourceMappingURL=install-jobs.js.map

package/dist/eval-server/install-jobs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-jobs.js","sourceRoot":"","sources":["../../src/eval-server/install-jobs.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,6EAA6E;AAC7E,8EAA8E;AAC9E,gFAAgF;AAChF,oEAAoE;AACpE,sCAAsC;AACtC,2BAA2B;AAC3B,kEAAkE;AAClE,qDAAqD;AACrD,uDAAuD;AACvD,EAAE;AACF,2EAA2E;AAC3E,gDAAgD;AAChD,yCAAyC;AACzC,4CAA4C;AAC5C,8EAA8E;AAG9E,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,yBAAyB;AAwBvE,MAAM,UAAU,WAAW,CAAC,GAAyB;IACnD,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC;IAC5C,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,kBAAkB,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,GAAW,EAAE,GAAW;IAC/C,OAAO,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,SAAS,CAChB,GAAoB,EACpB,KAAe,EACf,IAAa;IAEb,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;QAClC,IAAI,CAAC;YAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,gCAAgC,CAAC,CAAC;IACtE,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAiC;IAEjC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;QAC1C,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;QACjC,qEAAqE;QACrE,kEAAkE;QAClE,GAAG,EAAE,aAAa,EAAE;KACrB,CAAC,CAAC;IAEH,MAAM,GAAG,GAAoB;QAC3B,EAAE,EAAE,UAAU,EAAE;QAChB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI;QACJ,YAAY,EAAE,EAAE;QAChB,YAAY,EAAE,EAAE;QAChB,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,KAAK;QACX,WAAW,EAAE,IAAI,GAAG,EAAE;QACtB,UAAU,EAAE,EAAE;KACf,CAAC;IAEF,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACxC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC9B,GAAG,CAAC,YAAY,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,GAAG,IAAI,EAAE,iBAAiB,CAAC,CAAC;QACxE,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACvC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,SAAS,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACxC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC9B,GAAG,CAAC,YAAY,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,GAAG,IAAI,EAAE,iBAAiB,CAAC,CAAC;QACxE,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACvC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,SAAS,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;QAC5B,QAAQ,GAAG,IAAI,CAAC;QAChB,IAAI,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,0BAA0B,CAAC,CAAC;IACpE,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAEnB,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;QACvB,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACpC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAChB,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QAC9D,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE;YACrB,OAAO,EAAE,CAAC,QAAQ,IAAI,IAAI,KAAK,CAAC;YAChC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;YAC9B,MAAM;SACP,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;QACvB,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;QAClB,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAChB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE;YACrB,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,CAAC,CAAC;YACZ,MAAM,EAAG,GAAa,CAAC,OAAO,IAAI,cAAc;SACjD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAC3B,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAAc,EACd,MAAc,EACd,IAAkC;IAElC,MAAM,CAAC,GAAG,CACR,GAAG,MAAM,gBAAgB,EACzB,KAAK,EAAE,GAAyB,EAAE,GAAwB,EAAE,MAA8B,EAAE,EAAE;QAC5F,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YAC9D,OAAO;QACT,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAElB,6DAA6D;QAC7D,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;YAChC,IAAI,CAAC;gBAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YACb,IAAI,CAAC;gBAAC,GAAG,CAAC,GAAG,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;YACjD,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,CAAC,KAAe,EAAE,IAAa,EAAE,EAAE;YACpD,IAAI,CAAC;gBACH,IAAI,KAAK,KAAK,MAAM;oBAAE,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;;oBACxC,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YACjC,CAAC;YAAC,MAAM,CAAC;gBACP,iEAAiE;gBACjE,kDAAkD;gBAClD,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACrC,CAAC;QACH,CAAC,CAAC;QACF,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAEhC,MAAM,OAAO,GAAG,GAAG,EAAE,GAAG,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACzB,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC7B,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/eval-server/install-skill-routes.d.ts

@@ -1,28 +1,91 @@
-import { type ChildProcess } from "node:child_process";
 import type { Router } from "./router.js";
+import { type SpawnJob, type JobEvent } from "./install-jobs.js";
+import { type AgentInstallResult } from "../installer/multi-install.js";
+import type { ParsedSkill } from "../installer/transformers/index.js";
 type InstallScope = "project" | "user" | "global";
-interface InstallJob {
-    id: string;
+type MultiInstallScope = "project" | "user";
+interface SkillJobMeta {
     skill: string;
     scope: InstallScope;
-    proc: ChildProcess;
-    stdoutBuffer: string;
-    stderrBuffer: string;
-    exitCode: number | null;
+}
+interface MultiInstallJob {
+    id: string;
     done: boolean;
-    subscribers: Set<(event: "progress" | "done", data: unknown) => void>;
+    subscribers: Set<(event: MultiInstallJobEvent, data: unknown) => void>;
     pastEvents: Array<{
-        event: "progress" | "done";
+        event: MultiInstallJobEvent;
         data: unknown;
     }>;
 }
+type MultiInstallJobEvent = JobEvent | "result";
 declare function buildArgs(skill: string, scope: InstallScope): string[];
-export declare function registerInstallSkillRoutes(router: Router): void;
+declare function normalizeInstallScope(scope: InstallScope): MultiInstallScope;
+declare function isValidParsedSkill(s: unknown): s is ParsedSkill;
+type FetchLike = typeof fetch;
+interface ResolveSkillOptions {
+    cwd?: string;
+    home?: string;
+    fetchImpl?: FetchLike;
+    platformBaseUrl?: string;
+    githubTokenProvider?: () => string | null;
+}
+declare function fetchSkillMdFromGitHub(opts: {
+    repoUrl: string;
+    skillPath: string;
+    refs: string[];
+    fetchImpl: FetchLike;
+    token: string | null;
+}): Promise<string | null>;
+declare function resolveParsedSkillFromPlatform(identifier: string, opts?: ResolveSkillOptions): Promise<ParsedSkill | null>;
+/**
+ * Server-side fallback: when the frontend posts a multi-agent install
+ * without `parsedSkill`, locate the skill on disk (project / personal /
+ * plugin cache via {@link locateSkill}), read its SKILL.md, and build a
+ * minimal {@link ParsedSkill}. Keeps the POST payload trivial — the
+ * frontend doesn't need to fetch, parse, and re-marshal SKILL.md itself.
+ *
+ * Returns `null` when no on-disk skill matches the identifier (the route
+ * surfaces this as a 404 so the caller can retry with an explicit
+ * `parsedSkill`).
+ */
+export declare function resolveParsedSkillFromIdentifier(identifier: string, opts?: ResolveSkillOptions): Promise<ParsedSkill | null>;
+declare function validateAgentIds(ids: unknown): {
+    ok: true;
+    ids: string[];
+} | {
+    ok: false;
+    error: string;
+};
+declare function writeMultiInstallLockfile(opts: {
+    identifier: string;
+    skill: ParsedSkill;
+    scope: "project" | "user";
+    projectRoot: string;
+    results: AgentInstallResult[];
+}): void;
+declare function runMultiInstallJob(opts: {
+    identifier: string;
+    skill: ParsedSkill;
+    agentIds: string[];
+    scope: "project" | "user";
+    projectRoot: string;
+}): Promise<MultiInstallJob>;
+export declare function registerInstallSkillRoutes(router: Router, root?: string): void;
 export declare const __test__: {
-    JOBS: Map<string, InstallJob>;
+    JOBS: Map<string, SpawnJob<SkillJobMeta>>;
+    MULTI_JOBS: Map<string, MultiInstallJob>;
     SAFE_NAME: RegExp;
+    SAFE_AGENT_ID: RegExp;
     VALID_SCOPES: ReadonlySet<string>;
     INSTALL_TIMEOUT_MS: number;
     buildArgs: typeof buildArgs;
+    normalizeInstallScope: typeof normalizeInstallScope;
+    validateAgentIds: typeof validateAgentIds;
+    isValidParsedSkill: typeof isValidParsedSkill;
+    resolveParsedSkillFromIdentifier: typeof resolveParsedSkillFromIdentifier;
+    resolveParsedSkillFromPlatform: typeof resolveParsedSkillFromPlatform;
+    fetchSkillMdFromGitHub: typeof fetchSkillMdFromGitHub;
+    runMultiInstallJob: typeof runMultiInstallJob;
+    writeMultiInstallLockfile: typeof writeMultiInstallLockfile;
 };
 export {};