zidane 6.0.0 → 6.1.0

package/dist/{skills-Bsb0rvWI.js.map → skills-BjeXSRlQ.js.map}

@@ -1 +1 @@
-{"version":3,"file":"skills-Bsb0rvWI.js","names":[],"sources":["../src/skills/install.ts","../src/skills/index.ts"],"sourcesContent":["/**\n * Skill installation — fetch a skill (or a collection of skills) from\n * GitHub / npm / skills.sh and land it under the zidane skills root,\n * where the existing discovery scan picks it up.\n *\n * Built on the shared install layer (`src/install/source.ts`), so the\n * spec grammar, transports, download caps, and subdir containment are\n * byte-identical with the extensions installer. What differs:\n *\n *   - **Validation never executes code.** A skill is data: candidates\n *     are validated by parsing `SKILL.md` (lenient parser, same one\n *     discovery uses) — unlike extensions, whose validation must import\n *     the module. Installing a hostile skill can plant instructions,\n *     never run a process.\n *   - **skills.sh interop, two-way.** The spec grammar accepts pasted\n *     `https://skills.sh/<owner>/<repo>[/<skill>]` catalog URLs (mapped\n *     to the GitHub repo + a skill selector — skills.sh uses GitHub as\n *     its registry). And when the `skills` CLI is on PATH,\n *     {@link installSkillFromSpec} delegates to it (`skills add … -y`)\n *     so installs land in the user's cross-agent `.agents/skills/`\n *     layout and feed the skills.sh lockfile/leaderboard; without the\n *     CLI the native fetch path installs the same repos directly.\n *   - **Target roots**: `~/.zidane/skills/<name>` (user) or\n *     `<gitRoot>/.zidane/skills/<name>` (project) — both already on\n *     discovery's default scan paths.\n *\n * Same hardening as extensions: staged `mkdtemp` fetch, physical\n * symlink containment for `:subdir`, folder-safe names, overwrite with\n * backup/rollback, and a provenance file (`.zidane-install.json`) so a\n * future update flow can replay the spec.\n */\n\nimport type { InstallIo, InstallScope, InstallSource } from '../install/source'\nimport { cpSync, existsSync, mkdirSync, mkdtempSync, readdirSync, readFileSync, renameSync, rmSync, writeFileSync } from 'node:fs'\nimport { tmpdir } from 'node:os'\nimport { basename, join, resolve } from 'node:path'\nimport { projectUserPaths } from '../chat/project-user-paths'\nimport { errorMessage } from '../errors'\nimport { defaultExec, defaultWhich, fetchInstallSource, InstallSourceError, lastLine, parseInstallSource, resolveSubdirRoot } from '../install/source'\nimport { parseSkillFile } from './discovery'\nimport { validateSkillName } from './validate'\n\n// ---------------------------------------------------------------------------\n// Errors\n// ---------------------------------------------------------------------------\n\nexport type SkillInstallErrorCode\n  = | 'invalid-source'\n    | 'fetch-failed'\n    | 'no-skill'\n    | 'multiple-candidates'\n    | 'validate-failed'\n    | 'exists'\n    | 'cli-failed'\n    | 'io-failed'\n\nexport class SkillInstallError extends InstallSourceError {\n  declare readonly code: SkillInstallErrorCode\n  constructor(code: SkillInstallErrorCode, message: string, candidates?: readonly string[]) {\n    super(code, message, candidates)\n    this.name = 'SkillInstallError'\n  }\n}\n\nfunction rethrowAsSkillError(err: unknown): never {\n  if (err instanceof InstallSourceError && !(err instanceof SkillInstallError))\n    throw new SkillInstallError(err.code as SkillInstallErrorCode, err.message, err.candidates)\n  throw err\n}\n\n// ---------------------------------------------------------------------------\n// Spec parsing (shared grammar + the skills.sh catalog URL form)\n// ---------------------------------------------------------------------------\n\nconst SKILLS_SH_URL_RE = /^(?:https?:\\/\\/)?(?:www\\.)?skills\\.sh\\/([\\w.-]+)\\/([\\w.-]+)(?:\\/([\\w.-]+))?\\/?$/\n\nexport interface SkillInstallSpec {\n  source: InstallSource\n  /**\n   * Skill name selector for multi-skill sources. From a skills.sh URL's\n   * third segment or the caller's explicit pick after a\n   * `multiple-candidates` error.\n   */\n  skill?: string\n  /**\n   * The spec string to hand the `skills` CLI (its `add` argument).\n   * skills.sh URLs pass through verbatim — the CLI understands them —\n   * while parsed shorthand re-serializes to `owner/repo`.\n   */\n  cliSpec: string\n}\n\n/**\n * Parse a raw skill source. Accepts everything the shared grammar does\n * (`owner/repo[#ref][:subdir]`, GitHub URLs, `pkg@version`, …) plus\n * pasted skills.sh catalog URLs — `skills.sh/vercel-labs/agent-skills/\n * react-best-practices` maps to the backing GitHub repo with the third\n * segment as the skill selector.\n */\nexport function parseSkillInstallSpec(raw: string): SkillInstallSpec {\n  const spec = raw.trim()\n  const skillsSh = SKILLS_SH_URL_RE.exec(spec)\n  if (skillsSh) {\n    return {\n      source: { kind: 'github', owner: skillsSh[1] as string, repo: skillsSh[2] as string },\n      ...(skillsSh[3] ? { skill: skillsSh[3] } : {}),\n      cliSpec: `${skillsSh[1]}/${skillsSh[2]}`,\n    }\n  }\n  try {\n    const source = parseInstallSource(spec)\n    return { source, cliSpec: spec }\n  }\n  catch (err) {\n    rethrowAsSkillError(err)\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Candidate enumeration + validation (data-only — no code execution)\n// ---------------------------------------------------------------------------\n\nexport interface SkillInstallCandidate {\n  /** Directory name candidate (validated against SKILL.md frontmatter later). */\n  name: string\n  dir: string\n  /**\n   * Root-relative path (`engineering/tdd`) — the unambiguous selector\n   * when the same skill NAME exists in several category directories.\n   */\n  rel: string\n}\n\n/**\n * How deep the candidate walk descends. Real-world collections nest\n * skills under category directories (`skills/engineering/tdd/SKILL.md`\n * in mattpocock/skills; `.github/skills/…` elsewhere) — one-level\n * enumeration missed all of them. Four levels covers every observed\n * layout while keeping the walk trivially bounded on the staged tree.\n */\nconst CANDIDATE_WALK_MAX_DEPTH = 4\n\n/**\n * List installable skills inside a fetched tree.\n *\n * A skill is ANY directory containing a `SKILL.md` — found by a\n * bounded recursive walk (depth {@link CANDIDATE_WALK_MAX_DEPTH}),\n * skipping dot-dirs and `node_modules`, and never descending INTO a\n * skill (its `references/` / `scripts/` subtree ships with it, it\n * doesn't nest further candidates). A root-level `SKILL.md` means\n * \"repo IS the skill\" and short-circuits, named from the fallback.\n *\n * Candidates carry their root-relative path (`rel`) so same-named\n * skills in different categories stay individually addressable.\n * Sorted by `rel`.\n */\nexport function listSkillCandidates(dir: string, fallbackName: string): SkillInstallCandidate[] {\n  if (existsSync(join(dir, 'SKILL.md')))\n    return [{ name: sanitizeName(fallbackName), dir, rel: '.' }]\n  const out: SkillInstallCandidate[] = []\n  const walk = (current: string, rel: string, depth: number): void => {\n    if (depth > CANDIDATE_WALK_MAX_DEPTH)\n      return\n    for (const entry of readdirSync(current, { withFileTypes: true })) {\n      if (!entry.isDirectory() || entry.name.startsWith('.') || entry.name === 'node_modules')\n        continue\n      const childDir = join(current, entry.name)\n      const childRel = rel.length === 0 ? entry.name : `${rel}/${entry.name}`\n      if (existsSync(join(childDir, 'SKILL.md')))\n        out.push({ name: entry.name, dir: childDir, rel: childRel })\n      else\n        walk(childDir, childRel, depth + 1)\n    }\n  }\n  walk(dir, '', 1)\n  return out.sort((a, b) => a.rel.localeCompare(b.rel))\n}\n\n/** Human-readable candidate list for error messages — capped, rel-qualified when ambiguous. */\nfunction describeCandidates(candidates: readonly SkillInstallCandidate[]): string {\n  const nameCounts = new Map<string, number>()\n  for (const c of candidates)\n    nameCounts.set(c.name, (nameCounts.get(c.name) ?? 0) + 1)\n  const labels = candidates.map(c => ((nameCounts.get(c.name) ?? 0) > 1 ? c.rel : c.name))\n  const shown = labels.slice(0, 20)\n  const more = labels.length - shown.length\n  return shown.join(', ') + (more > 0 ? `, … and ${more} more` : '')\n}\n\n/**\n * Validate a staged candidate by PARSING its SKILL.md — the same lenient\n * parser discovery runs, so \"installs cleanly\" and \"discovers cleanly\"\n * are the same predicate. Returns the frontmatter name (which wins over\n * the directory-derived candidate name for the target folder).\n */\nasync function validateSkillCandidate(candidate: SkillInstallCandidate): Promise<{ name: string }> {\n  const parsed = await parseSkillFile(join(candidate.dir, 'SKILL.md'))\n  if (!parsed)\n    throw new SkillInstallError('validate-failed', `${candidate.dir}/SKILL.md is not a valid skill (missing name or description in frontmatter).`)\n  const name = parsed.name\n  if (!validateSkillName(name))\n    throw new SkillInstallError('validate-failed', `Skill name \"${name}\" is invalid (lowercase alphanumerics + single hyphens, max 64 chars).`)\n  return { name }\n}\n\n// ---------------------------------------------------------------------------\n// Install\n// ---------------------------------------------------------------------------\n\nexport interface SkillInstallOptions {\n  /** Raw source spec — see {@link parseSkillInstallSpec} for the grammar. */\n  source: string\n  scope: InstallScope\n  /** Pick one skill from a multi-skill source (names from the `multiple-candidates` error). */\n  skill?: string\n  /** Overwrite an existing install of the same name. */\n  overwrite?: boolean\n  cwd?: string\n  home?: string\n  /** Storage prefix (default `.zidane`) — mirrors `ResolvedConfig.prefix`. */\n  prefix?: string\n  io?: InstallIo\n  onProgress?: (message: string) => void\n  /**\n   * Prefer the skills.sh CLI when `skills` is on PATH (default true).\n   * The CLI owns scope + layout decisions (`.agents/skills/`, their\n   * lockfile); the native path is the fallback and the forced path in\n   * tests. Set false to always install natively.\n   */\n  preferSkillsCli?: boolean\n}\n\nexport interface SkillInstallResult {\n  /** Final skill name(s) installed. The CLI path reports the spec, not names. */\n  installed: readonly string[]\n  /** Absolute target directory (native path only — the CLI owns its layout). */\n  dir?: string\n  /** `skills-cli` when delegated to the skills.sh CLI, else `native`. */\n  engine: 'skills-cli' | 'native'\n  provenance?: string\n}\n\n/**\n * Install a skill (or one skill out of a multi-skill source).\n *\n * Engine selection: the skills.sh CLI when present on PATH (unless\n * `preferSkillsCli: false`), else the native fetch pipeline. Both accept\n * the same specs; the CLI path additionally understands anything newer\n * their grammar grows, since the spec passes through verbatim.\n */\nexport async function installSkillFromSpec(opts: SkillInstallOptions): Promise<SkillInstallResult> {\n  const io = opts.io ?? {}\n  const which = io.which ?? defaultWhich\n  const spec = parseSkillInstallSpec(opts.source)\n  const skillSelector = opts.skill ?? spec.skill\n\n  if ((opts.preferSkillsCli ?? true) && which('skills'))\n    return await installViaSkillsCli(spec, skillSelector, opts)\n\n  return await installNatively(spec, skillSelector, opts)\n}\n\n/**\n * Delegate to the skills.sh CLI. Non-interactive by construction: `-y`\n * skips confirmation prompts, `-g` maps our `user` scope to their\n * global scope (project scope is their default, keyed off cwd). The CLI\n * decides the on-disk layout (`.agents/skills/`), which zidane's\n * discovery already scans.\n */\nasync function installViaSkillsCli(\n  spec: SkillInstallSpec,\n  skillSelector: string | undefined,\n  opts: SkillInstallOptions,\n): Promise<SkillInstallResult> {\n  const exec = opts.io?.exec ?? defaultExec\n  const args = ['add', spec.cliSpec, '-y']\n  if (skillSelector)\n    args.push('--skill', skillSelector)\n  if (opts.scope === 'user')\n    args.push('-g')\n  opts.onProgress?.(`skills add ${spec.cliSpec}${skillSelector ? ` --skill ${skillSelector}` : ''}…`)\n  const res = await exec('skills', args, { cwd: opts.cwd ?? process.cwd() })\n  if (!res.ok)\n    throw new SkillInstallError('cli-failed', `skills.sh CLI failed: ${lastLine(res.stderr) || lastLine(res.stdout) || 'unknown error'}`)\n  return {\n    installed: [skillSelector ?? spec.cliSpec],\n    engine: 'skills-cli',\n  }\n}\n\nasync function installNatively(\n  spec: SkillInstallSpec,\n  skillSelector: string | undefined,\n  opts: SkillInstallOptions,\n): Promise<SkillInstallResult> {\n  const io = opts.io ?? {}\n  const source = spec.source\n  const stage = mkdtempSync(join(tmpdir(), 'zidane-skill-install-'))\n  try {\n    const fetchedInto = join(stage, 'fetched')\n    mkdirSync(fetchedInto, { recursive: true })\n    let provenance: string\n    try {\n      provenance = (await fetchInstallSource(source, fetchedInto, io, opts.onProgress)).provenance\n    }\n    catch (err) {\n      rethrowAsSkillError(err)\n    }\n\n    // `:subdir` re-roots the search — same physical containment as\n    // extensions (hostile symlinks must not walk out of the stage).\n    let candidateRoot = fetchedInto\n    let fallbackName = source.kind === 'github' ? source.repo : source.pkg\n    if (source.kind === 'github' && source.subdir) {\n      const rooted = resolveSubdirRoot(fetchedInto, source.subdir)\n      if (!rooted.ok) {\n        if (rooted.reason === 'missing')\n          throw new SkillInstallError('no-skill', `\"${source.subdir}\" is not a directory in ${source.owner}/${source.repo}.`)\n        throw new SkillInstallError('invalid-source', `Subdirectory \"${source.subdir}\" escapes the repository root${rooted.reason === 'escape-symlink' ? ' through a symlink' : ''}.`)\n      }\n      candidateRoot = rooted.dir\n      fallbackName = basename(resolve(fetchedInto, source.subdir))\n    }\n\n    const candidates = listSkillCandidates(candidateRoot, fallbackName)\n    if (candidates.length === 0)\n      throw new SkillInstallError('no-skill', `No skill found in ${opts.source} — no SKILL.md anywhere in the tree (searched ${CANDIDATE_WALK_MAX_DEPTH} levels deep).`)\n    let picked: SkillInstallCandidate\n    if (skillSelector) {\n      // Selector matches the skill name OR its root-relative path — the\n      // path form disambiguates same-named skills in different category\n      // directories (`engineering/tdd` vs `personal/tdd`).\n      const matches = candidates.filter(c => c.name === skillSelector || c.rel === skillSelector)\n      if (matches.length === 0)\n        throw new SkillInstallError('no-skill', `No skill named \"${skillSelector}\" in ${opts.source}. Available: ${describeCandidates(candidates)}`, candidates.map(c => c.rel))\n      if (matches.length > 1)\n        throw new SkillInstallError('multiple-candidates', `\"${skillSelector}\" is ambiguous in ${opts.source} — pick a path: ${matches.map(c => c.rel).join(', ')}`, matches.map(c => c.rel))\n      picked = matches[0] as SkillInstallCandidate\n    }\n    else if (candidates.length > 1) {\n      throw new SkillInstallError('multiple-candidates', `${opts.source} contains ${candidates.length} skills — pick one: ${describeCandidates(candidates)}`, candidates.map(c => c.rel))\n    }\n    else {\n      picked = candidates[0] as SkillInstallCandidate\n    }\n\n    // Frontmatter name wins over the directory-derived candidate name —\n    // mirrors \"target folder is named from the VALIDATED definition\".\n    const { name } = await validateSkillCandidate(picked)\n\n    const root = scopeRoot(opts)\n    const targetDir = join(root, name)\n    const backupDir = `${targetDir}.zidane-backup`\n    if (existsSync(targetDir) && !opts.overwrite)\n      throw new SkillInstallError('exists', `Skill \"${name}\" is already installed at ${targetDir}. Overwrite to replace it.`)\n\n    mkdirSync(root, { recursive: true })\n    const hadPrevious = existsSync(targetDir)\n    if (hadPrevious) {\n      rmSync(backupDir, { recursive: true, force: true })\n      renameSync(targetDir, backupDir)\n    }\n    try {\n      // `dereference` materializes in-tree symlinked files so the install\n      // has no dangling links once the stage is deleted.\n      cpSync(picked.dir, targetDir, { recursive: true, dereference: true })\n      writeProvenance(targetDir, { spec: opts.source, ...(skillSelector ? { skill: skillSelector } : {}), scope: opts.scope, provenance, installedAt: Date.now() })\n    }\n    catch (err) {\n      rmSync(targetDir, { recursive: true, force: true })\n      if (hadPrevious)\n        renameSync(backupDir, targetDir)\n      throw new SkillInstallError('io-failed', `Writing ${targetDir} failed: ${errorMessage(err)}`)\n    }\n    rmSync(backupDir, { recursive: true, force: true })\n\n    return { installed: [name], dir: targetDir, engine: 'native', provenance }\n  }\n  finally {\n    rmSync(stage, { recursive: true, force: true })\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/** Provenance sidecar — lets a future update flow replay the recorded spec. */\nexport const SKILL_PROVENANCE_FILE = '.zidane-install.json'\n\ninterface SkillProvenance {\n  spec: string\n  skill?: string\n  scope: InstallScope\n  provenance: string\n  installedAt: number\n}\n\nfunction writeProvenance(dir: string, data: SkillProvenance): void {\n  writeFileSync(join(dir, SKILL_PROVENANCE_FILE), `${JSON.stringify(data, null, 2)}\\n`)\n}\n\n/** Read a skill directory's install provenance, `null` for hand-authored skills. */\nexport function readSkillProvenance(dir: string): (SkillProvenance & { spec: string }) | null {\n  try {\n    const raw = JSON.parse(readFileSync(join(dir, SKILL_PROVENANCE_FILE), 'utf8')) as Partial<SkillProvenance>\n    return typeof raw.spec === 'string' && raw.spec.length > 0 ? (raw as SkillProvenance) : null\n  }\n  catch {\n    return null\n  }\n}\n\n/**\n * Native-install target root: the `<prefix>/skills` flavor of the\n * project/user convention (`~/.zidane/skills`, `<gitRoot>/.zidane/skills`).\n * The `.agents/skills` siblings stay read-only for us — they belong to\n * the cross-agent ecosystem (and the skills.sh CLI writes there).\n */\nfunction scopeRoot(opts: SkillInstallOptions): string {\n  const roots = projectUserPaths({\n    subPath: 'skills',\n    ...(opts.cwd ? { cwd: opts.cwd } : {}),\n    ...(opts.home ? { home: opts.home } : {}),\n    ...(opts.prefix ? { prefix: opts.prefix } : {}),\n  })\n  const root = roots.find(r => r.source === opts.scope && r.path.includes(`.${(opts.prefix ?? '.zidane').replace(/^\\./, '')}`))\n  if (!root)\n    throw new SkillInstallError('io-failed', `No ${opts.scope} skills root resolved.`)\n  return root.path\n}\n\nfunction sanitizeName(raw: string): string {\n  const cleaned = raw.toLowerCase().replace(/[^a-z0-9-]+/g, '-').replace(/^-+|-+$/g, '').replace(/-{2,}/g, '-')\n  return cleaned.length > 0 ? cleaned : 'skill'\n}\n","import type { SkillConfig } from './types'\nimport { validateSkillForWrite } from './validate'\n\nexport {\n  type ActivationVia,\n  type ActiveSkill,\n  createSkillActivationState,\n  type DeactivationReason,\n  type SkillActivationState,\n  type SkillActivationStateOptions,\n} from './activation'\nexport {\n  IMPLICITLY_ALLOWED_SKILL_TOOLS,\n  installAllowedToolsGate,\n} from './allowed-tools'\nexport { buildCatalog } from './catalog'\nexport {\n  discoverSkills,\n  getDefaultScanPaths,\n  inferSource,\n  parseFrontmatter,\n  parseSkillFile,\n} from './discovery'\nexport type { SourcedScanPath } from './discovery'\nexport {\n  installSkillFromSpec,\n  listSkillCandidates,\n  parseSkillInstallSpec,\n  readSkillProvenance,\n  SKILL_PROVENANCE_FILE,\n  SkillInstallError,\n} from './install'\nexport type {\n  SkillInstallCandidate,\n  SkillInstallErrorCode,\n  SkillInstallOptions,\n  SkillInstallResult,\n  SkillInstallSpec,\n} from './install'\nexport { interpolateShellCommands, stripShellInterpolations } from './interpolate'\nexport type { InterpolateShellCommandsOptions } from './interpolate'\nexport { resolveSkills } from './resolve'\nexport type {\n  ShellInterpolationApproval,\n  SkillConfig,\n  SkillDiagnostic,\n  SkillResource,\n  SkillsConfig,\n  SkillSource,\n} from './types'\nexport {\n  isToolAllowedByUnion,\n  matchesAllowedTool,\n  parseAllowedToolPattern,\n  validateResourcePath,\n  validateResourcePathReal,\n  validateSkillForWrite,\n  validateSkillName,\n} from './validate'\nexport type { SkillValidationIssue, SkillValidationResult } from './validate'\nexport { writeSkillsToDisk, writeSkillToDisk } from './writer'\n\n// ---------------------------------------------------------------------------\n// defineSkill helper\n// ---------------------------------------------------------------------------\n\n/**\n * Define an inline skill configuration.\n *\n * Strict-validates at author-time — throws if the config would be rejected by\n * `writeSkillToDisk` or the spec. Source defaults to `'inline'`.\n */\nexport function defineSkill(config: Omit<SkillConfig, 'source'> & { source?: SkillConfig['source'] }): SkillConfig {\n  const normalized: SkillConfig = {\n    ...config,\n    source: config.source ?? 'inline',\n  }\n  const result = validateSkillForWrite(normalized)\n  if (!result.valid) {\n    const summary = result.errors.map(e => `  - [${e.code}] ${e.message}`).join('\\n')\n    throw new Error(`Invalid skill \"${normalized.name}\":\\n${summary}`)\n  }\n  return normalized\n}\n"],"mappings":";;;;;;AAwDA,IAAa,oBAAb,cAAuC,mBAAmB;CAExD,YAAY,MAA6B,SAAiB,YAAgC;EACxF,MAAM,MAAM,SAAS,UAAU;EAC/B,KAAK,OAAO;CACd;AACF;AAEA,SAAS,oBAAoB,KAAqB;CAChD,IAAI,eAAe,sBAAsB,EAAE,eAAe,oBACxD,MAAM,IAAI,kBAAkB,IAAI,MAA+B,IAAI,SAAS,IAAI,UAAU;CAC5F,MAAM;AACR;AAMA,MAAM,mBAAmB;;;;;;;;AAyBzB,SAAgB,sBAAsB,KAA+B;CACnE,MAAM,OAAO,IAAI,KAAK;CACtB,MAAM,WAAW,iBAAiB,KAAK,IAAI;CAC3C,IAAI,UACF,OAAO;EACL,QAAQ;GAAE,MAAM;GAAU,OAAO,SAAS;GAAc,MAAM,SAAS;EAAa;EACpF,GAAI,SAAS,KAAK,EAAE,OAAO,SAAS,GAAG,IAAI,CAAC;EAC5C,SAAS,GAAG,SAAS,GAAG,GAAG,SAAS;CACtC;CAEF,IAAI;EAEF,OAAO;GAAE,QADM,mBAAmB,IACpB;GAAG,SAAS;EAAK;CACjC,SACO,KAAK;EACV,oBAAoB,GAAG;CACzB;AACF;;;;;;;;AAwBA,MAAM,2BAA2B;;;;;;;;;;;;;;;AAgBjC,SAAgB,oBAAoB,KAAa,cAA+C;CAC9F,IAAI,WAAW,KAAK,KAAK,UAAU,CAAC,GAClC,OAAO,CAAC;EAAE,MAAM,aAAa,YAAY;EAAG;EAAK,KAAK;CAAI,CAAC;CAC7D,MAAM,MAA+B,CAAC;CACtC,MAAM,QAAQ,SAAiB,KAAa,UAAwB;EAClE,IAAI,QAAQ,0BACV;EACF,KAAK,MAAM,SAAS,YAAY,SAAS,EAAE,eAAe,KAAK,CAAC,GAAG;GACjE,IAAI,CAAC,MAAM,YAAY,KAAK,MAAM,KAAK,WAAW,GAAG,KAAK,MAAM,SAAS,gBACvE;GACF,MAAM,WAAW,KAAK,SAAS,MAAM,IAAI;GACzC,MAAM,WAAW,IAAI,WAAW,IAAI,MAAM,OAAO,GAAG,IAAI,GAAG,MAAM;GACjE,IAAI,WAAW,KAAK,UAAU,UAAU,CAAC,GACvC,IAAI,KAAK;IAAE,MAAM,MAAM;IAAM,KAAK;IAAU,KAAK;GAAS,CAAC;QAE3D,KAAK,UAAU,UAAU,QAAQ,CAAC;EACtC;CACF;CACA,KAAK,KAAK,IAAI,CAAC;CACf,OAAO,IAAI,MAAM,GAAG,MAAM,EAAE,IAAI,cAAc,EAAE,GAAG,CAAC;AACtD;;AAGA,SAAS,mBAAmB,YAAsD;CAChF,MAAM,6BAAa,IAAI,IAAoB;CAC3C,KAAK,MAAM,KAAK,YACd,WAAW,IAAI,EAAE,OAAO,WAAW,IAAI,EAAE,IAAI,KAAK,KAAK,CAAC;CAC1D,MAAM,SAAS,WAAW,KAAI,OAAO,WAAW,IAAI,EAAE,IAAI,KAAK,KAAK,IAAI,EAAE,MAAM,EAAE,IAAK;CACvF,MAAM,QAAQ,OAAO,MAAM,GAAG,EAAE;CAChC,MAAM,OAAO,OAAO,SAAS,MAAM;CACnC,OAAO,MAAM,KAAK,IAAI,KAAK,OAAO,IAAI,WAAW,KAAK,SAAS;AACjE;;;;;;;AAQA,eAAe,uBAAuB,WAA6D;CACjG,MAAM,SAAS,MAAM,eAAe,KAAK,UAAU,KAAK,UAAU,CAAC;CACnE,IAAI,CAAC,QACH,MAAM,IAAI,kBAAkB,mBAAmB,GAAG,UAAU,IAAI,6EAA6E;CAC/I,MAAM,OAAO,OAAO;CACpB,IAAI,CAAC,kBAAkB,IAAI,GACzB,MAAM,IAAI,kBAAkB,mBAAmB,eAAe,KAAK,uEAAuE;CAC5I,OAAO,EAAE,KAAK;AAChB;;;;;;;;;AA+CA,eAAsB,qBAAqB,MAAwD;CAEjG,MAAM,SADK,KAAK,MAAM,CAAC,GACN,SAAS;CAC1B,MAAM,OAAO,sBAAsB,KAAK,MAAM;CAC9C,MAAM,gBAAgB,KAAK,SAAS,KAAK;CAEzC,KAAK,KAAK,mBAAmB,SAAS,MAAM,QAAQ,GAClD,OAAO,MAAM,oBAAoB,MAAM,eAAe,IAAI;CAE5D,OAAO,MAAM,gBAAgB,MAAM,eAAe,IAAI;AACxD;;;;;;;;AASA,eAAe,oBACb,MACA,eACA,MAC6B;CAC7B,MAAM,OAAO,KAAK,IAAI,QAAQ;CAC9B,MAAM,OAAO;EAAC;EAAO,KAAK;EAAS;CAAI;CACvC,IAAI,eACF,KAAK,KAAK,WAAW,aAAa;CACpC,IAAI,KAAK,UAAU,QACjB,KAAK,KAAK,IAAI;CAChB,KAAK,aAAa,cAAc,KAAK,UAAU,gBAAgB,YAAY,kBAAkB,GAAG,EAAE;CAClG,MAAM,MAAM,MAAM,KAAK,UAAU,MAAM,EAAE,KAAK,KAAK,OAAO,QAAQ,IAAI,EAAE,CAAC;CACzE,IAAI,CAAC,IAAI,IACP,MAAM,IAAI,kBAAkB,cAAc,yBAAyB,SAAS,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,iBAAiB;CACtI,OAAO;EACL,WAAW,CAAC,iBAAiB,KAAK,OAAO;EACzC,QAAQ;CACV;AACF;AAEA,eAAe,gBACb,MACA,eACA,MAC6B;CAC7B,MAAM,KAAK,KAAK,MAAM,CAAC;CACvB,MAAM,SAAS,KAAK;CACpB,MAAM,QAAQ,YAAY,KAAK,OAAO,GAAG,uBAAuB,CAAC;CACjE,IAAI;EACF,MAAM,cAAc,KAAK,OAAO,SAAS;EACzC,UAAU,aAAa,EAAE,WAAW,KAAK,CAAC;EAC1C,IAAI;EACJ,IAAI;GACF,cAAc,MAAM,mBAAmB,QAAQ,aAAa,IAAI,KAAK,UAAU,GAAG;EACpF,SACO,KAAK;GACV,oBAAoB,GAAG;EACzB;EAIA,IAAI,gBAAgB;EACpB,IAAI,eAAe,OAAO,SAAS,WAAW,OAAO,OAAO,OAAO;EACnE,IAAI,OAAO,SAAS,YAAY,OAAO,QAAQ;GAC7C,MAAM,SAAS,kBAAkB,aAAa,OAAO,MAAM;GAC3D,IAAI,CAAC,OAAO,IAAI;IACd,IAAI,OAAO,WAAW,WACpB,MAAM,IAAI,kBAAkB,YAAY,IAAI,OAAO,OAAO,0BAA0B,OAAO,MAAM,GAAG,OAAO,KAAK,EAAE;IACpH,MAAM,IAAI,kBAAkB,kBAAkB,iBAAiB,OAAO,OAAO,+BAA+B,OAAO,WAAW,mBAAmB,uBAAuB,GAAG,EAAE;GAC/K;GACA,gBAAgB,OAAO;GACvB,eAAe,SAAS,QAAQ,aAAa,OAAO,MAAM,CAAC;EAC7D;EAEA,MAAM,aAAa,oBAAoB,eAAe,YAAY;EAClE,IAAI,WAAW,WAAW,GACxB,MAAM,IAAI,kBAAkB,YAAY,qBAAqB,KAAK,OAAO,gDAAgD,yBAAyB,eAAe;EACnK,IAAI;EACJ,IAAI,eAAe;GAIjB,MAAM,UAAU,WAAW,QAAO,MAAK,EAAE,SAAS,iBAAiB,EAAE,QAAQ,aAAa;GAC1F,IAAI,QAAQ,WAAW,GACrB,MAAM,IAAI,kBAAkB,YAAY,mBAAmB,cAAc,OAAO,KAAK,OAAO,eAAe,mBAAmB,UAAU,KAAK,WAAW,KAAI,MAAK,EAAE,GAAG,CAAC;GACzK,IAAI,QAAQ,SAAS,GACnB,MAAM,IAAI,kBAAkB,uBAAuB,IAAI,cAAc,oBAAoB,KAAK,OAAO,kBAAkB,QAAQ,KAAI,MAAK,EAAE,GAAG,EAAE,KAAK,IAAI,KAAK,QAAQ,KAAI,MAAK,EAAE,GAAG,CAAC;GACtL,SAAS,QAAQ;EACnB,OACK,IAAI,WAAW,SAAS,GAC3B,MAAM,IAAI,kBAAkB,uBAAuB,GAAG,KAAK,OAAO,YAAY,WAAW,OAAO,sBAAsB,mBAAmB,UAAU,KAAK,WAAW,KAAI,MAAK,EAAE,GAAG,CAAC;OAGlL,SAAS,WAAW;EAKtB,MAAM,EAAE,SAAS,MAAM,uBAAuB,MAAM;EAEpD,MAAM,OAAO,UAAU,IAAI;EAC3B,MAAM,YAAY,KAAK,MAAM,IAAI;EACjC,MAAM,YAAY,GAAG,UAAU;EAC/B,IAAI,WAAW,SAAS,KAAK,CAAC,KAAK,WACjC,MAAM,IAAI,kBAAkB,UAAU,UAAU,KAAK,4BAA4B,UAAU,2BAA2B;EAExH,UAAU,MAAM,EAAE,WAAW,KAAK,CAAC;EACnC,MAAM,cAAc,WAAW,SAAS;EACxC,IAAI,aAAa;GACf,OAAO,WAAW;IAAE,WAAW;IAAM,OAAO;GAAK,CAAC;GAClD,WAAW,WAAW,SAAS;EACjC;EACA,IAAI;GAGF,OAAO,OAAO,KAAK,WAAW;IAAE,WAAW;IAAM,aAAa;GAAK,CAAC;GACpE,gBAAgB,WAAW;IAAE,MAAM,KAAK;IAAQ,GAAI,gBAAgB,EAAE,OAAO,cAAc,IAAI,CAAC;IAAI,OAAO,KAAK;IAAO;IAAY,aAAa,KAAK,IAAI;GAAE,CAAC;EAC9J,SACO,KAAK;GACV,OAAO,WAAW;IAAE,WAAW;IAAM,OAAO;GAAK,CAAC;GAClD,IAAI,aACF,WAAW,WAAW,SAAS;GACjC,MAAM,IAAI,kBAAkB,aAAa,WAAW,UAAU,WAAW,aAAa,GAAG,GAAG;EAC9F;EACA,OAAO,WAAW;GAAE,WAAW;GAAM,OAAO;EAAK,CAAC;EAElD,OAAO;GAAE,WAAW,CAAC,IAAI;GAAG,KAAK;GAAW,QAAQ;GAAU;EAAW;CAC3E,UACQ;EACN,OAAO,OAAO;GAAE,WAAW;GAAM,OAAO;EAAK,CAAC;CAChD;AACF;;AAOA,MAAa,wBAAwB;AAUrC,SAAS,gBAAgB,KAAa,MAA6B;CACjE,cAAc,KAAK,KAAK,qBAAqB,GAAG,GAAG,KAAK,UAAU,MAAM,MAAM,CAAC,EAAE,GAAG;AACtF;;AAGA,SAAgB,oBAAoB,KAA0D;CAC5F,IAAI;EACF,MAAM,MAAM,KAAK,MAAM,aAAa,KAAK,KAAK,qBAAqB,GAAG,MAAM,CAAC;EAC7E,OAAO,OAAO,IAAI,SAAS,YAAY,IAAI,KAAK,SAAS,IAAK,MAA0B;CAC1F,QACM;EACJ,OAAO;CACT;AACF;;;;;;;AAQA,SAAS,UAAU,MAAmC;CAOpD,MAAM,OANQ,iBAAiB;EAC7B,SAAS;EACT,GAAI,KAAK,MAAM,EAAE,KAAK,KAAK,IAAI,IAAI,CAAC;EACpC,GAAI,KAAK,OAAO,EAAE,MAAM,KAAK,KAAK,IAAI,CAAC;EACvC,GAAI,KAAK,SAAS,EAAE,QAAQ,KAAK,OAAO,IAAI,CAAC;CAC/C,CACiB,EAAE,MAAK,MAAK,EAAE,WAAW,KAAK,SAAS,EAAE,KAAK,SAAS,KAAK,KAAK,UAAU,WAAW,QAAQ,OAAO,EAAE,GAAG,CAAC;CAC5H,IAAI,CAAC,MACH,MAAM,IAAI,kBAAkB,aAAa,MAAM,KAAK,MAAM,uBAAuB;CACnF,OAAO,KAAK;AACd;AAEA,SAAS,aAAa,KAAqB;CACzC,MAAM,UAAU,IAAI,YAAY,EAAE,QAAQ,gBAAgB,GAAG,EAAE,QAAQ,YAAY,EAAE,EAAE,QAAQ,UAAU,GAAG;CAC5G,OAAO,QAAQ,SAAS,IAAI,UAAU;AACxC;;;;;;;;;AC3WA,SAAgB,YAAY,QAAuF;CACjH,MAAM,aAA0B;EAC9B,GAAG;EACH,QAAQ,OAAO,UAAU;CAC3B;CACA,MAAM,SAAS,sBAAsB,UAAU;CAC/C,IAAI,CAAC,OAAO,OAAO;EACjB,MAAM,UAAU,OAAO,OAAO,KAAI,MAAK,QAAQ,EAAE,KAAK,IAAI,EAAE,SAAS,EAAE,KAAK,IAAI;EAChF,MAAM,IAAI,MAAM,kBAAkB,WAAW,KAAK,MAAM,SAAS;CACnE;CACA,OAAO;AACT"}
+{"version":3,"file":"skills-BjeXSRlQ.js","names":[],"sources":["../src/skills/install.ts","../src/skills/index.ts"],"sourcesContent":["/**\n * Skill installation — fetch a skill (or a collection of skills) from\n * GitHub / npm / skills.sh and land it under the zidane skills root,\n * where the existing discovery scan picks it up.\n *\n * Built on the shared install layer (`src/install/source.ts`), so the\n * spec grammar, transports, download caps, and subdir containment are\n * byte-identical with the extensions installer. What differs:\n *\n *   - **Validation never executes code.** A skill is data: candidates\n *     are validated by parsing `SKILL.md` (lenient parser, same one\n *     discovery uses) — unlike extensions, whose validation must import\n *     the module. Installing a hostile skill can plant instructions,\n *     never run a process.\n *   - **skills.sh interop, two-way.** The spec grammar accepts pasted\n *     `https://skills.sh/<owner>/<repo>[/<skill>]` catalog URLs (mapped\n *     to the GitHub repo + a skill selector — skills.sh uses GitHub as\n *     its registry). And when the `skills` CLI is on PATH,\n *     {@link installSkillFromSpec} delegates to it (`skills add … -y`)\n *     so installs land in the user's cross-agent `.agents/skills/`\n *     layout and feed the skills.sh lockfile/leaderboard; without the\n *     CLI the native fetch path installs the same repos directly.\n *   - **Target roots**: `~/.zidane/skills/<name>` (user) or\n *     `<gitRoot>/.zidane/skills/<name>` (project) — both already on\n *     discovery's default scan paths.\n *\n * Same hardening as extensions: staged `mkdtemp` fetch, physical\n * symlink containment for `:subdir`, folder-safe names, overwrite with\n * backup/rollback, and a provenance file (`.zidane-install.json`) so a\n * future update flow can replay the spec.\n */\n\nimport type { InstallIo, InstallScope, InstallSource } from '../install/source'\nimport { cpSync, existsSync, mkdirSync, mkdtempSync, readdirSync, readFileSync, renameSync, rmSync, writeFileSync } from 'node:fs'\nimport { tmpdir } from 'node:os'\nimport { basename, join, resolve } from 'node:path'\nimport { projectUserPaths } from '../chat/project-user-paths'\nimport { errorMessage } from '../errors'\nimport { defaultExec, defaultWhich, fetchInstallSource, InstallSourceError, lastLine, parseInstallSource, resolveSubdirRoot } from '../install/source'\nimport { parseSkillFile } from './discovery'\nimport { validateSkillName } from './validate'\n\n// ---------------------------------------------------------------------------\n// Errors\n// ---------------------------------------------------------------------------\n\nexport type SkillInstallErrorCode\n  = | 'invalid-source'\n    | 'fetch-failed'\n    | 'no-skill'\n    | 'multiple-candidates'\n    | 'validate-failed'\n    | 'exists'\n    | 'cli-failed'\n    | 'io-failed'\n\nexport class SkillInstallError extends InstallSourceError {\n  declare readonly code: SkillInstallErrorCode\n  constructor(code: SkillInstallErrorCode, message: string, candidates?: readonly string[]) {\n    super(code, message, candidates)\n    this.name = 'SkillInstallError'\n  }\n}\n\nfunction rethrowAsSkillError(err: unknown): never {\n  if (err instanceof InstallSourceError && !(err instanceof SkillInstallError))\n    throw new SkillInstallError(err.code as SkillInstallErrorCode, err.message, err.candidates)\n  throw err\n}\n\n// ---------------------------------------------------------------------------\n// Spec parsing (shared grammar + the skills.sh catalog URL form)\n// ---------------------------------------------------------------------------\n\nconst SKILLS_SH_URL_RE = /^(?:https?:\\/\\/)?(?:www\\.)?skills\\.sh\\/([\\w.-]+)\\/([\\w.-]+)(?:\\/([\\w.-]+))?\\/?$/\n\nexport interface SkillInstallSpec {\n  source: InstallSource\n  /**\n   * Skill name selector for multi-skill sources. From a skills.sh URL's\n   * third segment or the caller's explicit pick after a\n   * `multiple-candidates` error.\n   */\n  skill?: string\n  /**\n   * The spec string to hand the `skills` CLI (its `add` argument).\n   * skills.sh URLs pass through verbatim — the CLI understands them —\n   * while parsed shorthand re-serializes to `owner/repo`.\n   */\n  cliSpec: string\n}\n\n/**\n * Parse a raw skill source. Accepts everything the shared grammar does\n * (`owner/repo[#ref][:subdir]`, GitHub URLs, `pkg@version`, …) plus\n * pasted skills.sh catalog URLs — `skills.sh/vercel-labs/agent-skills/\n * react-best-practices` maps to the backing GitHub repo with the third\n * segment as the skill selector.\n */\nexport function parseSkillInstallSpec(raw: string): SkillInstallSpec {\n  const spec = raw.trim()\n  const skillsSh = SKILLS_SH_URL_RE.exec(spec)\n  if (skillsSh) {\n    return {\n      source: { kind: 'github', owner: skillsSh[1] as string, repo: skillsSh[2] as string },\n      ...(skillsSh[3] ? { skill: skillsSh[3] } : {}),\n      cliSpec: `${skillsSh[1]}/${skillsSh[2]}`,\n    }\n  }\n  try {\n    const source = parseInstallSource(spec)\n    return { source, cliSpec: spec }\n  }\n  catch (err) {\n    rethrowAsSkillError(err)\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Candidate enumeration + validation (data-only — no code execution)\n// ---------------------------------------------------------------------------\n\nexport interface SkillInstallCandidate {\n  /** Directory name candidate (validated against SKILL.md frontmatter later). */\n  name: string\n  dir: string\n  /**\n   * Root-relative path (`engineering/tdd`) — the unambiguous selector\n   * when the same skill NAME exists in several category directories.\n   */\n  rel: string\n}\n\n/**\n * How deep the candidate walk descends. Real-world collections nest\n * skills under category directories (`skills/engineering/tdd/SKILL.md`\n * in mattpocock/skills; `.github/skills/…` elsewhere) — one-level\n * enumeration missed all of them. Four levels covers every observed\n * layout while keeping the walk trivially bounded on the staged tree.\n */\nconst CANDIDATE_WALK_MAX_DEPTH = 4\n\n/**\n * List installable skills inside a fetched tree.\n *\n * A skill is ANY directory containing a `SKILL.md` — found by a\n * bounded recursive walk (depth {@link CANDIDATE_WALK_MAX_DEPTH}),\n * skipping dot-dirs and `node_modules`, and never descending INTO a\n * skill (its `references/` / `scripts/` subtree ships with it, it\n * doesn't nest further candidates). A root-level `SKILL.md` means\n * \"repo IS the skill\" and short-circuits, named from the fallback.\n *\n * Candidates carry their root-relative path (`rel`) so same-named\n * skills in different categories stay individually addressable.\n * Sorted by `rel`.\n */\nexport function listSkillCandidates(dir: string, fallbackName: string): SkillInstallCandidate[] {\n  if (existsSync(join(dir, 'SKILL.md')))\n    return [{ name: sanitizeName(fallbackName), dir, rel: '.' }]\n  const out: SkillInstallCandidate[] = []\n  const walk = (current: string, rel: string, depth: number): void => {\n    if (depth > CANDIDATE_WALK_MAX_DEPTH)\n      return\n    for (const entry of readdirSync(current, { withFileTypes: true })) {\n      if (!entry.isDirectory() || entry.name.startsWith('.') || entry.name === 'node_modules')\n        continue\n      const childDir = join(current, entry.name)\n      const childRel = rel.length === 0 ? entry.name : `${rel}/${entry.name}`\n      if (existsSync(join(childDir, 'SKILL.md')))\n        out.push({ name: entry.name, dir: childDir, rel: childRel })\n      else\n        walk(childDir, childRel, depth + 1)\n    }\n  }\n  walk(dir, '', 1)\n  return out.sort((a, b) => a.rel.localeCompare(b.rel))\n}\n\n/** Human-readable candidate list for error messages — capped, rel-qualified when ambiguous. */\nfunction describeCandidates(candidates: readonly SkillInstallCandidate[]): string {\n  const nameCounts = new Map<string, number>()\n  for (const c of candidates)\n    nameCounts.set(c.name, (nameCounts.get(c.name) ?? 0) + 1)\n  const labels = candidates.map(c => ((nameCounts.get(c.name) ?? 0) > 1 ? c.rel : c.name))\n  const shown = labels.slice(0, 20)\n  const more = labels.length - shown.length\n  return shown.join(', ') + (more > 0 ? `, … and ${more} more` : '')\n}\n\n/**\n * Validate a staged candidate by PARSING its SKILL.md — the same lenient\n * parser discovery runs, so \"installs cleanly\" and \"discovers cleanly\"\n * are the same predicate. Returns the frontmatter name (which wins over\n * the directory-derived candidate name for the target folder).\n */\nasync function validateSkillCandidate(candidate: SkillInstallCandidate): Promise<{ name: string }> {\n  const parsed = await parseSkillFile(join(candidate.dir, 'SKILL.md'))\n  if (!parsed)\n    throw new SkillInstallError('validate-failed', `${candidate.dir}/SKILL.md is not a valid skill (missing name or description in frontmatter).`)\n  const name = parsed.name\n  if (!validateSkillName(name))\n    throw new SkillInstallError('validate-failed', `Skill name \"${name}\" is invalid (lowercase alphanumerics + single hyphens, max 64 chars).`)\n  return { name }\n}\n\n// ---------------------------------------------------------------------------\n// Install\n// ---------------------------------------------------------------------------\n\nexport interface SkillInstallOptions {\n  /** Raw source spec — see {@link parseSkillInstallSpec} for the grammar. */\n  source: string\n  scope: InstallScope\n  /** Pick one skill from a multi-skill source (names from the `multiple-candidates` error). */\n  skill?: string\n  /** Overwrite an existing install of the same name. */\n  overwrite?: boolean\n  cwd?: string\n  home?: string\n  /** Storage prefix (default `.zidane`) — mirrors `ResolvedConfig.prefix`. */\n  prefix?: string\n  io?: InstallIo\n  onProgress?: (message: string) => void\n  /**\n   * Prefer the skills.sh CLI when `skills` is on PATH (default true).\n   * The CLI owns scope + layout decisions (`.agents/skills/`, their\n   * lockfile); the native path is the fallback and the forced path in\n   * tests. Set false to always install natively.\n   */\n  preferSkillsCli?: boolean\n}\n\nexport interface SkillInstallResult {\n  /** Final skill name(s) installed. The CLI path reports the spec, not names. */\n  installed: readonly string[]\n  /** Absolute target directory (native path only — the CLI owns its layout). */\n  dir?: string\n  /** `skills-cli` when delegated to the skills.sh CLI, else `native`. */\n  engine: 'skills-cli' | 'native'\n  provenance?: string\n}\n\n/**\n * Install a skill (or one skill out of a multi-skill source).\n *\n * Engine selection: the skills.sh CLI when present on PATH (unless\n * `preferSkillsCli: false`), else the native fetch pipeline. Both accept\n * the same specs; the CLI path additionally understands anything newer\n * their grammar grows, since the spec passes through verbatim.\n */\nexport async function installSkillFromSpec(opts: SkillInstallOptions): Promise<SkillInstallResult> {\n  const io = opts.io ?? {}\n  const which = io.which ?? defaultWhich\n  const spec = parseSkillInstallSpec(opts.source)\n  const skillSelector = opts.skill ?? spec.skill\n\n  if ((opts.preferSkillsCli ?? true) && which('skills'))\n    return await installViaSkillsCli(spec, skillSelector, opts)\n\n  return await installNatively(spec, skillSelector, opts)\n}\n\n/**\n * Delegate to the skills.sh CLI. Non-interactive by construction: `-y`\n * skips confirmation prompts, `-g` maps our `user` scope to their\n * global scope (project scope is their default, keyed off cwd). The CLI\n * decides the on-disk layout (`.agents/skills/`), which zidane's\n * discovery already scans.\n */\nasync function installViaSkillsCli(\n  spec: SkillInstallSpec,\n  skillSelector: string | undefined,\n  opts: SkillInstallOptions,\n): Promise<SkillInstallResult> {\n  const exec = opts.io?.exec ?? defaultExec\n  const args = ['add', spec.cliSpec, '-y']\n  if (skillSelector)\n    args.push('--skill', skillSelector)\n  if (opts.scope === 'user')\n    args.push('-g')\n  opts.onProgress?.(`skills add ${spec.cliSpec}${skillSelector ? ` --skill ${skillSelector}` : ''}…`)\n  const res = await exec('skills', args, { cwd: opts.cwd ?? process.cwd() })\n  if (!res.ok)\n    throw new SkillInstallError('cli-failed', `skills.sh CLI failed: ${lastLine(res.stderr) || lastLine(res.stdout) || 'unknown error'}`)\n  return {\n    installed: [skillSelector ?? spec.cliSpec],\n    engine: 'skills-cli',\n  }\n}\n\nasync function installNatively(\n  spec: SkillInstallSpec,\n  skillSelector: string | undefined,\n  opts: SkillInstallOptions,\n): Promise<SkillInstallResult> {\n  const io = opts.io ?? {}\n  const source = spec.source\n  const stage = mkdtempSync(join(tmpdir(), 'zidane-skill-install-'))\n  try {\n    const fetchedInto = join(stage, 'fetched')\n    mkdirSync(fetchedInto, { recursive: true })\n    let provenance: string\n    try {\n      provenance = (await fetchInstallSource(source, fetchedInto, io, opts.onProgress)).provenance\n    }\n    catch (err) {\n      rethrowAsSkillError(err)\n    }\n\n    // `:subdir` re-roots the search — same physical containment as\n    // extensions (hostile symlinks must not walk out of the stage).\n    let candidateRoot = fetchedInto\n    let fallbackName = source.kind === 'github' ? source.repo : source.pkg\n    if (source.kind === 'github' && source.subdir) {\n      const rooted = resolveSubdirRoot(fetchedInto, source.subdir)\n      if (!rooted.ok) {\n        if (rooted.reason === 'missing')\n          throw new SkillInstallError('no-skill', `\"${source.subdir}\" is not a directory in ${source.owner}/${source.repo}.`)\n        throw new SkillInstallError('invalid-source', `Subdirectory \"${source.subdir}\" escapes the repository root${rooted.reason === 'escape-symlink' ? ' through a symlink' : ''}.`)\n      }\n      candidateRoot = rooted.dir\n      fallbackName = basename(resolve(fetchedInto, source.subdir))\n    }\n\n    const candidates = listSkillCandidates(candidateRoot, fallbackName)\n    if (candidates.length === 0)\n      throw new SkillInstallError('no-skill', `No skill found in ${opts.source} — no SKILL.md anywhere in the tree (searched ${CANDIDATE_WALK_MAX_DEPTH} levels deep).`)\n    let picked: SkillInstallCandidate\n    if (skillSelector) {\n      // Selector matches the skill name OR its root-relative path — the\n      // path form disambiguates same-named skills in different category\n      // directories (`engineering/tdd` vs `personal/tdd`).\n      const matches = candidates.filter(c => c.name === skillSelector || c.rel === skillSelector)\n      if (matches.length === 0)\n        throw new SkillInstallError('no-skill', `No skill named \"${skillSelector}\" in ${opts.source}. Available: ${describeCandidates(candidates)}`, candidates.map(c => c.rel))\n      if (matches.length > 1)\n        throw new SkillInstallError('multiple-candidates', `\"${skillSelector}\" is ambiguous in ${opts.source} — pick a path: ${matches.map(c => c.rel).join(', ')}`, matches.map(c => c.rel))\n      picked = matches[0] as SkillInstallCandidate\n    }\n    else if (candidates.length > 1) {\n      throw new SkillInstallError('multiple-candidates', `${opts.source} contains ${candidates.length} skills — pick one: ${describeCandidates(candidates)}`, candidates.map(c => c.rel))\n    }\n    else {\n      picked = candidates[0] as SkillInstallCandidate\n    }\n\n    // Frontmatter name wins over the directory-derived candidate name —\n    // mirrors \"target folder is named from the VALIDATED definition\".\n    const { name } = await validateSkillCandidate(picked)\n\n    const root = scopeRoot(opts)\n    const targetDir = join(root, name)\n    const backupDir = `${targetDir}.zidane-backup`\n    if (existsSync(targetDir) && !opts.overwrite)\n      throw new SkillInstallError('exists', `Skill \"${name}\" is already installed at ${targetDir}. Overwrite to replace it.`)\n\n    mkdirSync(root, { recursive: true })\n    const hadPrevious = existsSync(targetDir)\n    if (hadPrevious) {\n      rmSync(backupDir, { recursive: true, force: true })\n      renameSync(targetDir, backupDir)\n    }\n    try {\n      // `dereference` materializes in-tree symlinked files so the install\n      // has no dangling links once the stage is deleted.\n      cpSync(picked.dir, targetDir, { recursive: true, dereference: true })\n      writeProvenance(targetDir, { spec: opts.source, ...(skillSelector ? { skill: skillSelector } : {}), scope: opts.scope, provenance, installedAt: Date.now() })\n    }\n    catch (err) {\n      rmSync(targetDir, { recursive: true, force: true })\n      if (hadPrevious)\n        renameSync(backupDir, targetDir)\n      throw new SkillInstallError('io-failed', `Writing ${targetDir} failed: ${errorMessage(err)}`)\n    }\n    rmSync(backupDir, { recursive: true, force: true })\n\n    return { installed: [name], dir: targetDir, engine: 'native', provenance }\n  }\n  finally {\n    rmSync(stage, { recursive: true, force: true })\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/** Provenance sidecar — lets a future update flow replay the recorded spec. */\nexport const SKILL_PROVENANCE_FILE = '.zidane-install.json'\n\ninterface SkillProvenance {\n  spec: string\n  skill?: string\n  scope: InstallScope\n  provenance: string\n  installedAt: number\n}\n\nfunction writeProvenance(dir: string, data: SkillProvenance): void {\n  writeFileSync(join(dir, SKILL_PROVENANCE_FILE), `${JSON.stringify(data, null, 2)}\\n`)\n}\n\n/** Read a skill directory's install provenance, `null` for hand-authored skills. */\nexport function readSkillProvenance(dir: string): (SkillProvenance & { spec: string }) | null {\n  try {\n    const raw = JSON.parse(readFileSync(join(dir, SKILL_PROVENANCE_FILE), 'utf8')) as Partial<SkillProvenance>\n    return typeof raw.spec === 'string' && raw.spec.length > 0 ? (raw as SkillProvenance) : null\n  }\n  catch {\n    return null\n  }\n}\n\n/**\n * Native-install target root: the `<prefix>/skills` flavor of the\n * project/user convention (`~/.zidane/skills`, `<gitRoot>/.zidane/skills`).\n * The `.agents/skills` siblings stay read-only for us — they belong to\n * the cross-agent ecosystem (and the skills.sh CLI writes there).\n */\nfunction scopeRoot(opts: SkillInstallOptions): string {\n  const roots = projectUserPaths({\n    subPath: 'skills',\n    ...(opts.cwd ? { cwd: opts.cwd } : {}),\n    ...(opts.home ? { home: opts.home } : {}),\n    ...(opts.prefix ? { prefix: opts.prefix } : {}),\n  })\n  const root = roots.find(r => r.source === opts.scope && r.path.includes(`.${(opts.prefix ?? '.zidane').replace(/^\\./, '')}`))\n  if (!root)\n    throw new SkillInstallError('io-failed', `No ${opts.scope} skills root resolved.`)\n  return root.path\n}\n\nfunction sanitizeName(raw: string): string {\n  const cleaned = raw.toLowerCase().replace(/[^a-z0-9-]+/g, '-').replace(/^-+|-+$/g, '').replace(/-{2,}/g, '-')\n  return cleaned.length > 0 ? cleaned : 'skill'\n}\n","import type { SkillConfig } from './types'\nimport { validateSkillForWrite } from './validate'\n\nexport {\n  type ActivationVia,\n  type ActiveSkill,\n  createSkillActivationState,\n  type DeactivationReason,\n  type SkillActivationState,\n  type SkillActivationStateOptions,\n} from './activation'\nexport {\n  IMPLICITLY_ALLOWED_SKILL_TOOLS,\n  installAllowedToolsGate,\n} from './allowed-tools'\nexport { buildCatalog } from './catalog'\nexport {\n  discoverSkills,\n  getDefaultScanPaths,\n  inferSource,\n  parseFrontmatter,\n  parseSkillFile,\n} from './discovery'\nexport type { SourcedScanPath } from './discovery'\nexport {\n  installSkillFromSpec,\n  listSkillCandidates,\n  parseSkillInstallSpec,\n  readSkillProvenance,\n  SKILL_PROVENANCE_FILE,\n  SkillInstallError,\n} from './install'\nexport type {\n  SkillInstallCandidate,\n  SkillInstallErrorCode,\n  SkillInstallOptions,\n  SkillInstallResult,\n  SkillInstallSpec,\n} from './install'\nexport { interpolateShellCommands, stripShellInterpolations } from './interpolate'\nexport type { InterpolateShellCommandsOptions } from './interpolate'\nexport { resolveSkills } from './resolve'\nexport type {\n  ShellInterpolationApproval,\n  SkillConfig,\n  SkillDiagnostic,\n  SkillResource,\n  SkillsConfig,\n  SkillSource,\n} from './types'\nexport {\n  isToolAllowedByUnion,\n  matchesAllowedTool,\n  parseAllowedToolPattern,\n  validateResourcePath,\n  validateResourcePathReal,\n  validateSkillForWrite,\n  validateSkillName,\n} from './validate'\nexport type { SkillValidationIssue, SkillValidationResult } from './validate'\nexport { writeSkillsToDisk, writeSkillToDisk } from './writer'\n\n// ---------------------------------------------------------------------------\n// defineSkill helper\n// ---------------------------------------------------------------------------\n\n/**\n * Define an inline skill configuration.\n *\n * Strict-validates at author-time — throws if the config would be rejected by\n * `writeSkillToDisk` or the spec. Source defaults to `'inline'`.\n */\nexport function defineSkill(config: Omit<SkillConfig, 'source'> & { source?: SkillConfig['source'] }): SkillConfig {\n  const normalized: SkillConfig = {\n    ...config,\n    source: config.source ?? 'inline',\n  }\n  const result = validateSkillForWrite(normalized)\n  if (!result.valid) {\n    const summary = result.errors.map(e => `  - [${e.code}] ${e.message}`).join('\\n')\n    throw new Error(`Invalid skill \"${normalized.name}\":\\n${summary}`)\n  }\n  return normalized\n}\n"],"mappings":";;;;;;AAwDA,IAAa,oBAAb,cAAuC,mBAAmB;CAExD,YAAY,MAA6B,SAAiB,YAAgC;EACxF,MAAM,MAAM,SAAS,UAAU;EAC/B,KAAK,OAAO;CACd;AACF;AAEA,SAAS,oBAAoB,KAAqB;CAChD,IAAI,eAAe,sBAAsB,EAAE,eAAe,oBACxD,MAAM,IAAI,kBAAkB,IAAI,MAA+B,IAAI,SAAS,IAAI,UAAU;CAC5F,MAAM;AACR;AAMA,MAAM,mBAAmB;;;;;;;;AAyBzB,SAAgB,sBAAsB,KAA+B;CACnE,MAAM,OAAO,IAAI,KAAK;CACtB,MAAM,WAAW,iBAAiB,KAAK,IAAI;CAC3C,IAAI,UACF,OAAO;EACL,QAAQ;GAAE,MAAM;GAAU,OAAO,SAAS;GAAc,MAAM,SAAS;EAAa;EACpF,GAAI,SAAS,KAAK,EAAE,OAAO,SAAS,GAAG,IAAI,CAAC;EAC5C,SAAS,GAAG,SAAS,GAAG,GAAG,SAAS;CACtC;CAEF,IAAI;EAEF,OAAO;GAAE,QADM,mBAAmB,IACpB;GAAG,SAAS;EAAK;CACjC,SACO,KAAK;EACV,oBAAoB,GAAG;CACzB;AACF;;;;;;;;AAwBA,MAAM,2BAA2B;;;;;;;;;;;;;;;AAgBjC,SAAgB,oBAAoB,KAAa,cAA+C;CAC9F,IAAI,WAAW,KAAK,KAAK,UAAU,CAAC,GAClC,OAAO,CAAC;EAAE,MAAM,aAAa,YAAY;EAAG;EAAK,KAAK;CAAI,CAAC;CAC7D,MAAM,MAA+B,CAAC;CACtC,MAAM,QAAQ,SAAiB,KAAa,UAAwB;EAClE,IAAI,QAAQ,0BACV;EACF,KAAK,MAAM,SAAS,YAAY,SAAS,EAAE,eAAe,KAAK,CAAC,GAAG;GACjE,IAAI,CAAC,MAAM,YAAY,KAAK,MAAM,KAAK,WAAW,GAAG,KAAK,MAAM,SAAS,gBACvE;GACF,MAAM,WAAW,KAAK,SAAS,MAAM,IAAI;GACzC,MAAM,WAAW,IAAI,WAAW,IAAI,MAAM,OAAO,GAAG,IAAI,GAAG,MAAM;GACjE,IAAI,WAAW,KAAK,UAAU,UAAU,CAAC,GACvC,IAAI,KAAK;IAAE,MAAM,MAAM;IAAM,KAAK;IAAU,KAAK;GAAS,CAAC;QAE3D,KAAK,UAAU,UAAU,QAAQ,CAAC;EACtC;CACF;CACA,KAAK,KAAK,IAAI,CAAC;CACf,OAAO,IAAI,MAAM,GAAG,MAAM,EAAE,IAAI,cAAc,EAAE,GAAG,CAAC;AACtD;;AAGA,SAAS,mBAAmB,YAAsD;CAChF,MAAM,6BAAa,IAAI,IAAoB;CAC3C,KAAK,MAAM,KAAK,YACd,WAAW,IAAI,EAAE,OAAO,WAAW,IAAI,EAAE,IAAI,KAAK,KAAK,CAAC;CAC1D,MAAM,SAAS,WAAW,KAAI,OAAO,WAAW,IAAI,EAAE,IAAI,KAAK,KAAK,IAAI,EAAE,MAAM,EAAE,IAAK;CACvF,MAAM,QAAQ,OAAO,MAAM,GAAG,EAAE;CAChC,MAAM,OAAO,OAAO,SAAS,MAAM;CACnC,OAAO,MAAM,KAAK,IAAI,KAAK,OAAO,IAAI,WAAW,KAAK,SAAS;AACjE;;;;;;;AAQA,eAAe,uBAAuB,WAA6D;CACjG,MAAM,SAAS,MAAM,eAAe,KAAK,UAAU,KAAK,UAAU,CAAC;CACnE,IAAI,CAAC,QACH,MAAM,IAAI,kBAAkB,mBAAmB,GAAG,UAAU,IAAI,6EAA6E;CAC/I,MAAM,OAAO,OAAO;CACpB,IAAI,CAAC,kBAAkB,IAAI,GACzB,MAAM,IAAI,kBAAkB,mBAAmB,eAAe,KAAK,uEAAuE;CAC5I,OAAO,EAAE,KAAK;AAChB;;;;;;;;;AA+CA,eAAsB,qBAAqB,MAAwD;CAEjG,MAAM,SADK,KAAK,MAAM,CAAC,EAAA,CACN,SAAS;CAC1B,MAAM,OAAO,sBAAsB,KAAK,MAAM;CAC9C,MAAM,gBAAgB,KAAK,SAAS,KAAK;CAEzC,KAAK,KAAK,mBAAmB,SAAS,MAAM,QAAQ,GAClD,OAAO,MAAM,oBAAoB,MAAM,eAAe,IAAI;CAE5D,OAAO,MAAM,gBAAgB,MAAM,eAAe,IAAI;AACxD;;;;;;;;AASA,eAAe,oBACb,MACA,eACA,MAC6B;CAC7B,MAAM,OAAO,KAAK,IAAI,QAAQ;CAC9B,MAAM,OAAO;EAAC;EAAO,KAAK;EAAS;CAAI;CACvC,IAAI,eACF,KAAK,KAAK,WAAW,aAAa;CACpC,IAAI,KAAK,UAAU,QACjB,KAAK,KAAK,IAAI;CAChB,KAAK,aAAa,cAAc,KAAK,UAAU,gBAAgB,YAAY,kBAAkB,GAAG,EAAE;CAClG,MAAM,MAAM,MAAM,KAAK,UAAU,MAAM,EAAE,KAAK,KAAK,OAAO,QAAQ,IAAI,EAAE,CAAC;CACzE,IAAI,CAAC,IAAI,IACP,MAAM,IAAI,kBAAkB,cAAc,yBAAyB,SAAS,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,iBAAiB;CACtI,OAAO;EACL,WAAW,CAAC,iBAAiB,KAAK,OAAO;EACzC,QAAQ;CACV;AACF;AAEA,eAAe,gBACb,MACA,eACA,MAC6B;CAC7B,MAAM,KAAK,KAAK,MAAM,CAAC;CACvB,MAAM,SAAS,KAAK;CACpB,MAAM,QAAQ,YAAY,KAAK,OAAO,GAAG,uBAAuB,CAAC;CACjE,IAAI;EACF,MAAM,cAAc,KAAK,OAAO,SAAS;EACzC,UAAU,aAAa,EAAE,WAAW,KAAK,CAAC;EAC1C,IAAI;EACJ,IAAI;GACF,cAAc,MAAM,mBAAmB,QAAQ,aAAa,IAAI,KAAK,UAAU,EAAA,CAAG;EACpF,SACO,KAAK;GACV,oBAAoB,GAAG;EACzB;EAIA,IAAI,gBAAgB;EACpB,IAAI,eAAe,OAAO,SAAS,WAAW,OAAO,OAAO,OAAO;EACnE,IAAI,OAAO,SAAS,YAAY,OAAO,QAAQ;GAC7C,MAAM,SAAS,kBAAkB,aAAa,OAAO,MAAM;GAC3D,IAAI,CAAC,OAAO,IAAI;IACd,IAAI,OAAO,WAAW,WACpB,MAAM,IAAI,kBAAkB,YAAY,IAAI,OAAO,OAAO,0BAA0B,OAAO,MAAM,GAAG,OAAO,KAAK,EAAE;IACpH,MAAM,IAAI,kBAAkB,kBAAkB,iBAAiB,OAAO,OAAO,+BAA+B,OAAO,WAAW,mBAAmB,uBAAuB,GAAG,EAAE;GAC/K;GACA,gBAAgB,OAAO;GACvB,eAAe,SAAS,QAAQ,aAAa,OAAO,MAAM,CAAC;EAC7D;EAEA,MAAM,aAAa,oBAAoB,eAAe,YAAY;EAClE,IAAI,WAAW,WAAW,GACxB,MAAM,IAAI,kBAAkB,YAAY,qBAAqB,KAAK,OAAO,gDAAgD,yBAAyB,eAAe;EACnK,IAAI;EACJ,IAAI,eAAe;GAIjB,MAAM,UAAU,WAAW,QAAO,MAAK,EAAE,SAAS,iBAAiB,EAAE,QAAQ,aAAa;GAC1F,IAAI,QAAQ,WAAW,GACrB,MAAM,IAAI,kBAAkB,YAAY,mBAAmB,cAAc,OAAO,KAAK,OAAO,eAAe,mBAAmB,UAAU,KAAK,WAAW,KAAI,MAAK,EAAE,GAAG,CAAC;GACzK,IAAI,QAAQ,SAAS,GACnB,MAAM,IAAI,kBAAkB,uBAAuB,IAAI,cAAc,oBAAoB,KAAK,OAAO,kBAAkB,QAAQ,KAAI,MAAK,EAAE,GAAG,CAAC,CAAC,KAAK,IAAI,KAAK,QAAQ,KAAI,MAAK,EAAE,GAAG,CAAC;GACtL,SAAS,QAAQ;EACnB,OACK,IAAI,WAAW,SAAS,GAC3B,MAAM,IAAI,kBAAkB,uBAAuB,GAAG,KAAK,OAAO,YAAY,WAAW,OAAO,sBAAsB,mBAAmB,UAAU,KAAK,WAAW,KAAI,MAAK,EAAE,GAAG,CAAC;OAGlL,SAAS,WAAW;EAKtB,MAAM,EAAE,SAAS,MAAM,uBAAuB,MAAM;EAEpD,MAAM,OAAO,UAAU,IAAI;EAC3B,MAAM,YAAY,KAAK,MAAM,IAAI;EACjC,MAAM,YAAY,GAAG,UAAU;EAC/B,IAAI,WAAW,SAAS,KAAK,CAAC,KAAK,WACjC,MAAM,IAAI,kBAAkB,UAAU,UAAU,KAAK,4BAA4B,UAAU,2BAA2B;EAExH,UAAU,MAAM,EAAE,WAAW,KAAK,CAAC;EACnC,MAAM,cAAc,WAAW,SAAS;EACxC,IAAI,aAAa;GACf,OAAO,WAAW;IAAE,WAAW;IAAM,OAAO;GAAK,CAAC;GAClD,WAAW,WAAW,SAAS;EACjC;EACA,IAAI;GAGF,OAAO,OAAO,KAAK,WAAW;IAAE,WAAW;IAAM,aAAa;GAAK,CAAC;GACpE,gBAAgB,WAAW;IAAE,MAAM,KAAK;IAAQ,GAAI,gBAAgB,EAAE,OAAO,cAAc,IAAI,CAAC;IAAI,OAAO,KAAK;IAAO;IAAY,aAAa,KAAK,IAAI;GAAE,CAAC;EAC9J,SACO,KAAK;GACV,OAAO,WAAW;IAAE,WAAW;IAAM,OAAO;GAAK,CAAC;GAClD,IAAI,aACF,WAAW,WAAW,SAAS;GACjC,MAAM,IAAI,kBAAkB,aAAa,WAAW,UAAU,WAAW,aAAa,GAAG,GAAG;EAC9F;EACA,OAAO,WAAW;GAAE,WAAW;GAAM,OAAO;EAAK,CAAC;EAElD,OAAO;GAAE,WAAW,CAAC,IAAI;GAAG,KAAK;GAAW,QAAQ;GAAU;EAAW;CAC3E,UACQ;EACN,OAAO,OAAO;GAAE,WAAW;GAAM,OAAO;EAAK,CAAC;CAChD;AACF;;AAOA,MAAa,wBAAwB;AAUrC,SAAS,gBAAgB,KAAa,MAA6B;CACjE,cAAc,KAAK,KAAK,qBAAqB,GAAG,GAAG,KAAK,UAAU,MAAM,MAAM,CAAC,EAAE,GAAG;AACtF;;AAGA,SAAgB,oBAAoB,KAA0D;CAC5F,IAAI;EACF,MAAM,MAAM,KAAK,MAAM,aAAa,KAAK,KAAK,qBAAqB,GAAG,MAAM,CAAC;EAC7E,OAAO,OAAO,IAAI,SAAS,YAAY,IAAI,KAAK,SAAS,IAAK,MAA0B;CAC1F,QACM;EACJ,OAAO;CACT;AACF;;;;;;;AAQA,SAAS,UAAU,MAAmC;CAOpD,MAAM,OANQ,iBAAiB;EAC7B,SAAS;EACT,GAAI,KAAK,MAAM,EAAE,KAAK,KAAK,IAAI,IAAI,CAAC;EACpC,GAAI,KAAK,OAAO,EAAE,MAAM,KAAK,KAAK,IAAI,CAAC;EACvC,GAAI,KAAK,SAAS,EAAE,QAAQ,KAAK,OAAO,IAAI,CAAC;CAC/C,CACiB,CAAC,CAAC,MAAK,MAAK,EAAE,WAAW,KAAK,SAAS,EAAE,KAAK,SAAS,KAAK,KAAK,UAAU,UAAA,CAAW,QAAQ,OAAO,EAAE,GAAG,CAAC;CAC5H,IAAI,CAAC,MACH,MAAM,IAAI,kBAAkB,aAAa,MAAM,KAAK,MAAM,uBAAuB;CACnF,OAAO,KAAK;AACd;AAEA,SAAS,aAAa,KAAqB;CACzC,MAAM,UAAU,IAAI,YAAY,CAAC,CAAC,QAAQ,gBAAgB,GAAG,CAAC,CAAC,QAAQ,YAAY,EAAE,CAAC,CAAC,QAAQ,UAAU,GAAG;CAC5G,OAAO,QAAQ,SAAS,IAAI,UAAU;AACxC;;;;;;;;;AC3WA,SAAgB,YAAY,QAAuF;CACjH,MAAM,aAA0B;EAC9B,GAAG;EACH,QAAQ,OAAO,UAAU;CAC3B;CACA,MAAM,SAAS,sBAAsB,UAAU;CAC/C,IAAI,CAAC,OAAO,OAAO;EACjB,MAAM,UAAU,OAAO,OAAO,KAAI,MAAK,QAAQ,EAAE,KAAK,IAAI,EAAE,SAAS,CAAC,CAAC,KAAK,IAAI;EAChF,MAAM,IAAI,MAAM,kBAAkB,WAAW,KAAK,MAAM,SAAS;CACnE;CACA,OAAO;AACT"}

package/dist/skills.d.ts

@@ -1,2 +1,2 @@
-import { $s as ActiveSkill, As as interpolateShellCommands, Bs as listSkillCandidates, Cf as SkillResource, Cs as parseAllowedToolPattern, Ds as validateSkillName, Es as validateSkillForWrite, Fs as SkillInstallErrorCode, Gs as getDefaultScanPaths, Hs as readSkillProvenance, Is as SkillInstallOptions, Js as parseSkillFile, Ks as inferSource, Ls as SkillInstallResult, Ms as SKILL_PROVENANCE_FILE, Ns as SkillInstallCandidate, Os as resolveSkills, Ps as SkillInstallError, Qs as ActivationVia, Rs as SkillInstallSpec, Sf as SkillDiagnostic, Ss as matchesAllowedTool, Tf as SkillsConfig, Ts as validateResourcePathReal, Us as SourcedScanPath, Vs as parseSkillInstallSpec, Ws as discoverSkills, Xs as IMPLICITLY_ALLOWED_SKILL_TOOLS, Ys as buildCatalog, Zs as installAllowedToolsGate, _s as writeSkillToDisk, bf as ShellInterpolationApproval, bs as SkillValidationResult, ec as DeactivationReason, gs as defineSkill, js as stripShellInterpolations, ks as InterpolateShellCommandsOptions, nc as SkillActivationStateOptions, qs as parseFrontmatter, rc as createSkillActivationState, tc as SkillActivationState, vs as writeSkillsToDisk, wf as SkillSource, ws as validateResourcePath, xf as SkillConfig, xs as isToolAllowedByUnion, ys as SkillValidationIssue, zs as installSkillFromSpec } from "./index-B8UtiZy7.js";
+import { $s as parseFrontmatter, As as validateResourcePath, Bf as SkillResource, Bs as SkillInstallError, Cs as writeSkillToDisk, Ds as isToolAllowedByUnion, Es as SkillValidationResult, Fs as InterpolateShellCommandsOptions, Gs as installSkillFromSpec, Hf as SkillsConfig, Hs as SkillInstallOptions, Is as interpolateShellCommands, Js as readSkillProvenance, Ks as listSkillCandidates, Lf as ShellInterpolationApproval, Ls as stripShellInterpolations, Ms as validateSkillForWrite, Ns as validateSkillName, Os as matchesAllowedTool, Ps as resolveSkills, Qs as inferSource, Rf as SkillConfig, Rs as SKILL_PROVENANCE_FILE, Ss as defineSkill, Ts as SkillValidationIssue, Us as SkillInstallResult, Vf as SkillSource, Vs as SkillInstallErrorCode, Ws as SkillInstallSpec, Xs as discoverSkills, Ys as SourcedScanPath, Zs as getDefaultScanPaths, ac as ActiveSkill, cc as SkillActivationStateOptions, ec as parseSkillFile, ic as ActivationVia, js as validateResourcePathReal, ks as parseAllowedToolPattern, lc as createSkillActivationState, nc as IMPLICITLY_ALLOWED_SKILL_TOOLS, oc as DeactivationReason, qs as parseSkillInstallSpec, rc as installAllowedToolsGate, sc as SkillActivationState, tc as buildCatalog, ws as writeSkillsToDisk, zf as SkillDiagnostic, zs as SkillInstallCandidate } from "./index-BGpM2YaU.js";
 export { type ActivationVia, type ActiveSkill, type DeactivationReason, IMPLICITLY_ALLOWED_SKILL_TOOLS, type InterpolateShellCommandsOptions, SKILL_PROVENANCE_FILE, type ShellInterpolationApproval, type SkillActivationState, type SkillActivationStateOptions, type SkillConfig, type SkillDiagnostic, type SkillInstallCandidate, SkillInstallError, type SkillInstallErrorCode, type SkillInstallOptions, type SkillInstallResult, type SkillInstallSpec, type SkillResource, type SkillSource, type SkillValidationIssue, type SkillValidationResult, type SkillsConfig, type SourcedScanPath, buildCatalog, createSkillActivationState, defineSkill, discoverSkills, getDefaultScanPaths, inferSource, installAllowedToolsGate, installSkillFromSpec, interpolateShellCommands, isToolAllowedByUnion, listSkillCandidates, matchesAllowedTool, parseAllowedToolPattern, parseFrontmatter, parseSkillFile, parseSkillInstallSpec, readSkillProvenance, resolveSkills, stripShellInterpolations, validateResourcePath, validateResourcePathReal, validateSkillForWrite, validateSkillName, writeSkillToDisk, writeSkillsToDisk };

package/dist/skills.js

@@ -1,3 +1,3 @@
-import { A as validateSkillName, C as stripShellInterpolations, D as validateResourcePath, E as parseAllowedToolPattern, O as validateResourcePathReal, S as interpolateShellCommands, T as matchesAllowedTool, a as getDefaultScanPaths, c as parseSkillFile, d as installAllowedToolsGate, f as createSkillActivationState, i as discoverSkills, k as validateSkillForWrite, l as buildCatalog, n as writeSkillToDisk, o as inferSource, r as writeSkillsToDisk, s as parseFrontmatter, t as resolveSkills, u as IMPLICITLY_ALLOWED_SKILL_TOOLS, w as isToolAllowedByUnion } from "./resolve-Cr8JSL_O.js";
-import { a as listSkillCandidates, i as installSkillFromSpec, n as SKILL_PROVENANCE_FILE, o as parseSkillInstallSpec, r as SkillInstallError, s as readSkillProvenance, t as defineSkill } from "./skills-Bsb0rvWI.js";
+import { A as validateSkillName, C as stripShellInterpolations, D as validateResourcePath, E as parseAllowedToolPattern, O as validateResourcePathReal, S as interpolateShellCommands, T as matchesAllowedTool, a as getDefaultScanPaths, c as parseSkillFile, d as installAllowedToolsGate, f as createSkillActivationState, i as discoverSkills, k as validateSkillForWrite, l as buildCatalog, n as writeSkillToDisk, o as inferSource, r as writeSkillsToDisk, s as parseFrontmatter, t as resolveSkills, u as IMPLICITLY_ALLOWED_SKILL_TOOLS, w as isToolAllowedByUnion } from "./resolve-CC8Lmwcj.js";
+import { a as listSkillCandidates, i as installSkillFromSpec, n as SKILL_PROVENANCE_FILE, o as parseSkillInstallSpec, r as SkillInstallError, s as readSkillProvenance, t as defineSkill } from "./skills-BjeXSRlQ.js";
 export { IMPLICITLY_ALLOWED_SKILL_TOOLS, SKILL_PROVENANCE_FILE, SkillInstallError, buildCatalog, createSkillActivationState, defineSkill, discoverSkills, getDefaultScanPaths, inferSource, installAllowedToolsGate, installSkillFromSpec, interpolateShellCommands, isToolAllowedByUnion, listSkillCandidates, matchesAllowedTool, parseAllowedToolPattern, parseFrontmatter, parseSkillFile, parseSkillInstallSpec, readSkillProvenance, resolveSkills, stripShellInterpolations, validateResourcePath, validateResourcePathReal, validateSkillForWrite, validateSkillName, writeSkillToDisk, writeSkillsToDisk };