Skip to content

feat(cli): link every remote Skill to its exact source - #130

Merged
harlan-zw merged 4 commits into
mainfrom
brand/cli-provenance-output
Sep 4, 2026
Merged

feat(cli): link every remote Skill to its exact source#130
harlan-zw merged 4 commits into
mainfrom
brand/cli-provenance-output

Conversation

@harlan-zw

@harlan-zw harlan-zw commented Sep 1, 2026

Copy link
Copy Markdown
Collaborator

❓ Type of change

  • 📖 Documentation
  • 🐞 Bug fix
  • 👌 Enhancement
  • ✨ New feature
  • 🧹 Chore
  • ⚠️ Breaking change

📚 Description

A remote Skill should show its exact source before an Agent follows it.

Locked source data feeds exact provenance across search, run, install, add, and view

search now names the owner and repository. run, install, add, and view use the recorded commit and Skill path to link the exact SKILL.md. Multi-skill installs keep the same provenance output for every result.

An install result carries locked source data through provenance rendering to the user

The Artifact contract still has no licence or source update time, so this PR leaves them out. skilld install still has no JSON mode.

🤖 AI disclosure: Harlan Agent Kit modified this description. My AI open-source policy.

https://claude.ai/code/session_018T67Ndp8FAjnHWthXABbJW

Every surface that shows a remote Skill now names the GitHub owner and
Repository, the commit, and the exact SKILL.md URL at that commit.

- `skilld run`: headline `name · owner/repository @ commit`, then
  `Read it first: <SKILL.md URL>` after the source status caution.
  JSON origin gains owner, repository, skillPath, commit, sourceUrl.
- `skilld install`: the same block plus the source status and its
  meaning for verified, local, and unverified. Replaces the bare
  "Review the unverified Skill before use." hint.
- `skilld search`: `owner/repository` before the star count in human,
  plain, and JSON rows.
- `skilld view`: the Source link points at the exact SKILL.md.

`Host::install` and `Host::install_request` return `InstalledSkill`
(name, locked source, source status) instead of names.

Claude-Session: https://claude.ai/code/session_018T67Ndp8FAjnHWthXABbJW
@harlan-github-agent harlan-github-agent Bot added harlan-agent-running An Agent holds a Task on this issue or pull request right now. harlan-agent-review-required Pull request triage requires an adversarial Review for this head commit. labels Sep 1, 2026
@harlan-github-agent

harlan-github-agent Bot commented Sep 1, 2026

Copy link
Copy Markdown
Contributor

🤖 MERGED

Harlan Agent Kit posted this automated review. It is not Harlan's personal review or approval. AI open source policy. Last updated: 2026-09-04 03:37 UTC.

GitHub merged this pull request. No further automated Review will run.

@harlan-github-agent harlan-github-agent Bot added harlan-agent-running An Agent holds a Task on this issue or pull request right now. harlan-agent-review-required Pull request triage requires an adversarial Review for this head commit. harlan-agent-ready The automated Review passed every gate on this head commit. and removed harlan-agent-running An Agent holds a Task on this issue or pull request right now. harlan-agent-review-required Pull request triage requires an adversarial Review for this head commit. labels Sep 1, 2026
…output

# Conflicts:
#	crates/skilld-command/src/lib.rs
The merge with main brought in the openclaw target test from #129, which
compared the install result with plain names. The result now carries
author and source per Skill.

Claude-Session: https://claude.ai/code/session_018T67Ndp8FAjnHWthXABbJW
@harlan-github-agent harlan-github-agent Bot added harlan-agent-running An Agent holds a Task on this issue or pull request right now. harlan-agent-ready The automated Review passed every gate on this head commit. harlan-agent-blocked The automated Review found a material defect in this head commit. and removed harlan-agent-ready The automated Review passed every gate on this head commit. harlan-agent-running An Agent holds a Task on this issue or pull request right now. labels Sep 1, 2026
@harlan-zw harlan-zw changed the title feat(cli): show author and source after run and install feat(cli): link every remote Skill to its exact source Sep 4, 2026
@harlan-github-agent harlan-github-agent Bot added harlan-agent-running An Agent holds a Task on this issue or pull request right now. harlan-agent-pending The automated Review is waiting on a gate for this head commit. and removed harlan-agent-blocked The automated Review found a material defect in this head commit. harlan-agent-running An Agent holds a Task on this issue or pull request right now. labels Sep 4, 2026
@harlan-zw
harlan-zw merged commit 73ef0ce into main Sep 4, 2026
2 checks passed
@harlan-github-agent harlan-github-agent Bot removed the harlan-agent-pending The automated Review is waiting on a gate for this head commit. label Sep 4, 2026
@harlan-zw
harlan-zw deleted the brand/cli-provenance-output branch September 4, 2026 03:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant