feat(skills): skill import pipeline — archive, well-known registry, and ClawHub sources#294

Closed

anconina wants to merge 168 commits into

mainfrom

feature/skill-archive-import

Commits on Jul 5, 2026

test(skills): failing spec allowed-set predicate + compatibility field
comis-agent
committed
feat(skills): spec allowed-set predicate + optional compatibility field
comis-agent
committed
test(skills): failing lift round-trip, honest-failure and read-compat cases
comis-agent
committed
feat(skills): normalize authored frontmatter carrier before strict validation
comis-agent
committed
test(skills): load path lifts spec-pure carrier + warns once on pre-migration form
comis-agent
committed
feat(skills): run the manifest lift on the load path before strict validation
comis-agent
committed
test(skills): spec-pure extensions must survive discovery + cache enrichment
comis-agent
committed
feat(skills): run the manifest lift on the fs-discovery and cache-enrichment paths
comis-agent
committed
test(skills): failing bundled-corpus spec-conformance gate
comis-agent
committed
refactor(skills): make bundled SKILL.md frontmatter spec-pure
comis-agent
committed
test(daemon): failing ground-truth cases for the seed version extractor
comis-agent
committed
fix(daemon): seed version check reads metadata.version from the whole frontmatter
comis-agent
committed
test(skills): drive the corpus verdict with the shipped spec-pure predicate
comis-agent
committed
test(skills): drift guard tracks the spec-pure authored field set
comis-agent
committed
fix(skills): in-product validator accepts the spec-pure six-field frontmatter
comis-agent
committed
docs(skills): skill-manifest reference teaches the spec-pure frontmatter
comis-agent
committed
docs(skills): manifest reference teaches the spec-pure frontmatter
comis-agent
committed
docs(skills): sweep the remaining skills docs to the spec-pure frontmatter
comis-agent
committed
fix(skills): drop internal-only lift exports from the manifest barrel
comis-agent
committed
test(skills): drift guard reads metadata.version; refresh manifest snapshot
comis-agent
committed
test(skills): lift must fail closed on a non-string allowed-tools
comis-agent
committed
fix(skills): fail closed on a non-string allowed-tools in the lift
comis-agent
committed
test(skills): lift must accept constructor/prototype data keys
comis-agent
committed
fix(skills): narrow the metadata.comis prototype guard to __proto__
comis-agent
committed
fix(daemon): bump bundled-skill versions so the seeder re-seeds them
comis-agent
committed
test(skills): discovery skip hint must name the metadata.comis carrier
comis-agent
committed
fix(skills): surface the lift error in the discovery skip hint
comis-agent
committed
fix(skills): stop validate-skill.py false-rejecting spec-pure without PyYAML
comis-agent
committed
fix(skills): state the constraint in the top-level-fields WARN
comis-agent
committed
test(skills): failing round-trip gate for in-memory zip/tar fixture builders
comis-agent
committed
test(skills): in-memory zip/tar fixture builders for the unpack reader
comis-agent
committed
test(skills): failing fail-closed boundary suite for the archive reader
comis-agent
committed
feat(skills): bounded in-house zip + tar/tar.gz archive reader
comis-agent
committed
test(skills): author the null-byte name via a \u0000 escape, not a literal byte
comis-agent
committed
test(skills): failing foreign-frontmatter mapper suite + real-shape fixtures
comis-agent
committed
feat(skills): foreign-frontmatter mapper onto the spec-pure carrier
comis-agent
committed
test(skills): failing provenance-store + keyed-mutex + installed-set-hash suite
comis-agent
committed
feat(skills): daemon-private provenance store + keyed import mutex
comis-agent
committed
test(skills): cover import mapper + provenance-store defensive branches
comis-agent
committed
test(core): skills.list wire enum accepts imported + learned trust tiers
comis-agent
committed
feat(core): add imported trust tier to SkillSource + wire enum
comis-agent
committed
test(core): skills.import unpack-caps sub-block defaults + strict bounds
comis-agent
committed
feat(core): strict per-agent skills.import unpack-caps sub-block
comis-agent
committed
test(core): action classifier pins skill.import=mutate + skill.validation.coercion=read
comis-agent
committed
feat(core): register skill.import + skill.validation.coercion actions; skill:failed import phase
comis-agent
committed
fix(core): keep SkillsImportConfig type module-local (no dead public re-export)
comis-agent
committed
test(skills): rephrase installed-set-hash test name to a recognized use-case shape
comis-agent
committed
test(skills): add failing suites for D5 text-filter + SSRF-capped acquire
comis-agent
committed
feat(skills): SSRF-capped acquire + text-only import filter
comis-agent
committed
test(skills): add failing suite for the staged import pipeline
comis-agent
committed
feat(skills): staged import pipeline (stageImport)
comis-agent
committed
test(skills): cover acquire fetch-throw + no-body branches; drop unreachable post-decode check
comis-agent
committed
test(daemon): add failing suite for the serialized skill-import commit
comis-agent
committed
feat(daemon): serialized skill-import commit + single runSkillImport orchestration
comis-agent
committed
test(daemon): add failing suite for the skill-import boot sweep
comis-agent
committed
feat(daemon): boot sweep reconciles crash-orphaned skill-import staging dirs
comis-agent
committed
test(skills): add failing suite for discovery source:imported enrichment
comis-agent
committed
feat(skills): discovery stamps source:imported from provenance + ground-truth commit test
comis-agent
committed
fix(skills,daemon): satisfy globals/dead-export/file-size/errorKind gates for skill import
comis-agent
committed
test(daemon): imported-tier MCP persists disabled + never auto-connects (R3)
comis-agent
committed
feat(daemon): imported-tier MCP persist-disabled seam (applyImportedBundleInstall)
comis-agent
committed
test(skills): imported skills force dynamic-context off at resolution
comis-agent
committed
feat(skills): imported-tier dynamic-context force-off at the resolution layer
comis-agent
committed
test(daemon): skills.delete unwind + skills.update re-pin (PROV-05/PROV-04)
comis-agent
committed
feat(daemon): skills.delete MCP/provenance unwind + skills.update re-pin
comis-agent
committed
style(daemon): drop requirement-ID markers from skill-provenance comments/titles
comis-agent
committed
refactor(skills): relocate dynamic-context force-off to the discovery module
comis-agent
committed
test(daemon): cover skill-provenance-hooks error branches
comis-agent
committed
test(daemon): retrofit skills.import through the staged pipeline (RED)
comis-agent
committed
feat(daemon): retrofit skills.import + skills.upload through the staged pipeline (GREEN)
comis-agent
committed
test(skills): skills_manage import threads archive params, no force (RED)
comis-agent
committed
feat(skills): skills_manage import gains archive params (GREEN)
comis-agent
committed
test(cli): comis skills import round-trips via typed RPC (RED)
comis-agent
committed
feat(cli): comis skills import verb (typed RPC round-trip) (GREEN)
comis-agent
committed
test(cli): account for the new skills command in the registration count
comis-agent
committed
test(skills): refresh tool-registry snapshot for skills_manage archive params
comis-agent
committed
docs(skills): add importing.mdx — archive import, trust model, honest scan caveat
comis-agent
committed
docs(skills,reference,operations): document the shipped archive-import surface
comis-agent
committed

Commits on Jul 6, 2026

fix(daemon): restore prior provenance pin on update-mode mid-commit unwind
comis-agent
committed
fix(daemon): make the skill-import boot sweep fail-safe against a throwing fs op
comis-agent
committed
fix(skills): fail closed on a non-string allowed-tools list in the frontmatter mapper
comis-agent
committed
fix(skills): scan reference files' raw persisted bytes at import, not a sanitized copy
comis-agent
committed
fix(skills): warn that an imported skill's permissions/inputSchema are inert
comis-agent
committed
fix(skills): keep the sibling-namespace WARN prose free of a reference-project name
comis-agent
committed
fix(skills): reject symlink zip entries for parity with the tar reader
comis-agent
committed
fix(skills): constrain the provenance record name to the manifest slug (no key-injection)
comis-agent
committed
refactor(core): drop the dead name field from the skills.import contract request
comis-agent
committed
test(core): pin the skills.import.registries allowlist (default [])
comis-agent
committed
feat(core): add the skills.import.registries allowlist (default [])
comis-agent
committed
test(core): pin skills.import registry-import request params
comis-agent
committed
feat(core): accept source wellknown + registry + name on skills.import
comis-agent
committed
test(skills): pin the optional registry field on the provenance record
comis-agent
committed
feat(skills): add the optional registry field to the provenance record
comis-agent
committed
test(daemon): pin registry threading through the commit record + list summary
comis-agent
committed
feat(daemon): thread the provenance registry through the commit + list summary
comis-agent
committed
test(skills): add well-known index fixtures for the registry resolver
comis-agent
committed
test(skills): add bounded TTL names+paths index-cache suite (RED)
comis-agent
committed
feat(skills): bounded TTL names+paths well-known index cache
comis-agent
committed
test(skills): well-known resolver index/shape/path/cache suite (RED)
comis-agent
committed
feat(skills): well-known registry resolver — SSRF-pinned index + file fetch
comis-agent
committed
test(skills): well-known resolver fan-out bound + require-SKILL.md (RED)
comis-agent
committed
feat(skills): bound the resolver fan-out + require the SKILL.md manifest
comis-agent
committed
test(skills): imported-skill posture counts + per-record drift producer (RED)
comis-agent
committed
feat(skills): boot imported-skill posture counts on config_posture snapshot
comis-agent
committed
test(skills): fleet config_posture:imported_skills finding + extractor (RED)
comis-agent
committed
feat(skills): fleet config_posture:imported_skills finding (allowlist drift)
comis-agent
committed
docs(skills): document the config_posture:imported_skills fleet finding
comis-agent
committed
test(daemon): well-known registry allowlist gate — fail-closed before fetch (RED)
comis-agent
committed
feat(daemon): fail-closed registry allowlist gate + barrel-export the resolver/cache (GREEN)
comis-agent
committed
test(daemon): source:wellknown dispatch + registry threading + PROV-04-over-registry (RED)
comis-agent
committed
feat(daemon): source:wellknown dispatch + thread the registry into provenance (GREEN)
comis-agent
committed
style(daemon): keep the well-known gate comments free of process IDs
comis-agent
committed
test(skills): source:wellknown + --registry surface delta (RED)
comis-agent
committed
feat(skills): source:wellknown + registry on skills_manage + CLI import (GREEN)
comis-agent
committed
docs(skills): document source:wellknown registry import + index cache
comis-agent
committed
test(skills): typed reject (not throw) on mid-stream body error / streaming timeout
comis-agent
committed
fix(skills): return a typed reject instead of throwing on a mid-stream body error
comis-agent
committed
test(skills): encoded-but-safe advertised path resolves to its decoded form
comis-agent
committed
fix(skills): return the safePath-validated (decoded) advertised path
comis-agent
committed
test(skills): a sibling index entry missing description must not deny the registry
comis-agent
committed
fix(skills): make the well-known index entry description optional
comis-agent
committed
docs(daemon): correct the config-posture hasIssue docstring to match the code
comis-agent
committed
test(skills): pin requireOfficialPublisher config + clawhub/officialPublisher/warnings contract deltas
comis-agent
committed
feat(skills): requireOfficialPublisher config + clawhub source / officialPublisher summary / warnings response
comis-agent
committed
test(skills): pin two-warnable-classes single-confirm + officialPublisher provenance write
comis-agent
committed
feat(skills): two-warnable-classes single-confirm + officialPublisher provenance write
comis-agent
committed
test(skills): pin the clawhub install-resolver happy path + Zod fail-loud
comis-agent
committed
feat(skills): clawhub install-resolver happy path + Zod fail-loud
comis-agent
committed
test(skills): pin the clawhub verdict refusals + sha256-when-present + non-archive refuse
comis-agent
committed
feat(skills): clawhub verdict-refuse-before-download + sha256-when-present + non-archive refuse
comis-agent
committed
test(daemon): pin the clawhub gate + archiveBytes ground-truth + two-class confirm
comis-agent
committed
feat(daemon): clawhub allowlist gate + pipeline threading + enrich + barrel export
comis-agent
committed
test(daemon): pin the source:clawhub dispatch (infer registry, thread officialPublisher, surface warnings)
comis-agent
committed
feat(daemon): source:clawhub dispatch — infer registry, thread officialPublisher, surface warnings
comis-agent
committed
test(architecture): add 'refuse' to the test-naming verb set (legitimate missing verb)
comis-agent
committed
test(skills): pin source:clawhub in the import union + CLI 4th routing branch
comis-agent
committed
feat(skills): source:clawhub on skills_manage + CLI import 4th routing branch
comis-agent
committed
docs(skills): document the shipped ClawHub import flow + requireOfficialPublisher
comis-agent
committed
test(skills): fail-closed on the top-level clawhub verify verdict
comis-agent
committed
fix(skills): honor the top-level clawhub verify verdict (fail-closed)
comis-agent
committed
test(skills): clawhub verdict reasons match on token boundaries
comis-agent
committed
fix(skills): match clawhub verdict reasons by token, not substring
comis-agent
committed
test(skills): percent-encode the clawhub slug in request paths
comis-agent
committed
fix(skills): percent-encode the clawhub slug into install/verify URLs
comis-agent
committed
docs(skills): frame officialPublisher as a server-asserted signal
comis-agent
committed
test(skills): confirm description names both warnable classes
comis-agent
committed
fix(skills): name both warnable classes in confirm descriptions (tool + CLI)
comis-agent
committed
test(cli): surface acknowledged warnings on skills import success
comis-agent
committed
fix(cli): print acknowledged warnings on skills import success
comis-agent
committed
test(skills): refresh tool-registry parity snapshot for the confirm description
comis-agent
committed
test(skills): assert the import mapper rewrites the legacy Comis top-level form to spec-pure
comis-agent
committed
fix(skills): import mapper rewrites the legacy Comis top-level form to spec-pure
comis-agent
committed

Commits on Jul 7, 2026

Commits on Jul 13, 2026

Merge remote-tracking branch 'origin/main' into feature/skill-archive-import
comis-agent
committed

Commits on Jul 14, 2026

Merge remote-tracking branch 'origin/main' into feature/skill-archive-import
comis-agent
committed