Managed source acquisition
Skillcaddy v0.15.0 adds one managed source workflow shared by the CLI and Manager.
Highlights
- Add complete Git repositories, GitHub tree URLs, public HTTP(S) ZIP files, local ZIP files, and local directories.
- Track stable source identities, sanitized provenance, integrity, install paths, and discovered skills in the sidecar source registry.
- Adopt existing Git and Local sources without moving their physical directories.
- Replace Local and Archive sources transactionally with validation, rollback, safety limits, and project-link protection.
- Update registered Git sources through a fast-forward-only path that preserves dirty or divergent worktrees.
- Keep source acquisition separate from project enablement; explicit combined Manager requests rescan and enable only the selected skill.
Breaking change
Runtime scans no longer read legacy <skill-dir>/skillcaddy.json metadata. Migrate legacy files to sidecar storage with:
npm run migrate:metadata
npm run migrate:metadata -- --yesThe migration command remains available throughout v0.15.x and retains legacy files for rollback.
Verification
- 154 tests passed
- Import lint passed
- Manager skill validation passed
- Version synchronization and diff checks passed