Skip to content

feat(skills): prototype hosted skill installation and updates #26

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
tobi12345 wants to merge 3 commits into from
Closed

feat(skills): prototype hosted skill installation and updates #26

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
263337b
feat(skills): prototype hosted skill installation and updates
tobi12345 Oct 8, 2026
6f36485
fix(skills): protect installations and clarify response errors
tobi12345 Oct 8, 2026
a0e1113
fix(skills): confine locked paths and bound tag listing
tobi12345 Oct 8, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -147,6 +147,7 @@ without a clean discriminator stay `--body-json`-only rather than guessing.
| 4 | Network, DNS, TLS, or timeout failure reaching the host |
| 5 | The API responded with a non-success HTTP status (response is still printed) |
| 6 | Local file or bundled-contract failure |
| 7 | Invalid or inconsistent API response |

## Agent Usage

Expand Down
3 changes: 3 additions & 0 deletions bun.lock
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

3 changes: 2 additions & 1 deletion conformance/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ The primary test invokes every operation in every cataloged spec through the rea

For operations marked `deprecated: true`, it instead verifies exit code 2, a helpful error on stderr, and zero network requests.

The black-box oracle does not share request-building code with the CLI. `bun run conformance:all` checks all 596 operations across 6 pinned snapshots through the actual CLI using lossless `--body-json` input, including pre-network rejection for deprecated operations.
The black-box oracle does not share request-building code with the CLI. `bun run conformance:all` checks all 720 operations across 7 pinned snapshots through the actual CLI using lossless `--body-json` input, including pre-network rejection for deprecated operations.

Supporting unit tests verify immutable spec hashes, valid sampling, serialization, naming, invocation generation, and the capture runner itself.

Expand All @@ -30,6 +30,7 @@ OpenAPI cannot describe database setup, generated IDs, cross-request bindings, c
| 3.225.3 | 69 | 113 |
| 4.10.0 | 70 | 114 |
| 4.35.0 | 71 | 117 |
| 4.48.0 | 75 | 124 |

Each source file is downloaded by immutable commit and verified against the SHA-256 in `catalog.json`. Tests are network-free after sync.

Expand Down
7 changes: 7 additions & 0 deletions conformance/catalog.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -46,6 +46,13 @@
"commit": "3089a77f2b86e08058a868802f43e417982094f0",
"sha256": "8f3a25d28afbf8bdd710d8e7a5c60d65ff5c71315764c46c8dea504e8f67adb6",
"knownIssues": ["oas3.0-const-keyword"]
},
{
"version": "4.48.0",
"ref": "v4.48.0",
"commit": "0de9ccd64e0f9d35c1990fb6c851fa00530e7960",
"sha256": "0cfedceece040eb5d042dc0db7f561c4f5bb96ebfd5971a4807fb490f0a328ed",
"knownIssues": ["oas3.0-const-keyword"]
}
]
}
Loading
Loading