feat(skills): create, edit, and delete user and repo skills

[k11kirky]

Problem

Users had no way to create, edit, or delete skills from the UI — the skills panel was read-only. This adds full CRUD support for skills, including creating new skills, editing the manifest and companion files, renaming/deleting files within a skill, and deleting or renaming entire skills.

Changes

Backend (workspace-server)

• Added createSkill, saveSkillManifest, saveSkillFile, renameSkillFile, deleteSkillFile, deleteSkill, and renameSkill methods to SkillsService.
• All mutations are guarded by resolveWritableSkillDir, which enforces that the target skill lives directly under a writable root (~/.claude/skills or a workspace folder's .claude/skills). Bundled/plugin skills are rejected server-side.
• Added validateSkillDirName (lowercase letters, numbers, dots, dashes, underscores; max 64 chars) and resolveSkillFilePath (prevents path traversal out of the skill directory) as shared helpers.
• Added write-skill-frontmatter.ts with serializeSkillMarkdown, which serializes name/description/body back to a valid SKILL.md. Scalars fall back from plain → double-quoted → YAML literal block to handle colons, quotes, backslashes, and multi-line values.
• Fixed a bug in collectIndentedLines in parse-skill-frontmatter.ts where blank lines inside a multi-line YAML value were being dropped instead of preserved.
• Extended schemas.ts with Zod schemas and TypeScript types for all new operations.

Host router (host-router)

• Exposed create, saveManifest, saveFile, renameFile, deleteFile, delete, and rename tRPC mutations on the skillsRouter.

UI (ui)

• useSkillMutations.ts — new hooks (useCreateSkill, useSaveSkillManifest, useSaveSkillFile, useRenameSkillFile, useDeleteSkillFile, useDeleteSkill) that each invalidate all skills queries on success.
• NewSkillDialog.tsx — dialog for creating a skill with a name and a scope selector (user skills or a specific open repository).
• SkillCodeEditor.tsx — uncontrolled CodeMirror wrapper that reports document changes via onDocChanged.
• SkillManifestEditor.tsx — edit mode for SKILL.md: a small form for name/description frontmatter fields plus a CodeMirror body editor.
• SkillFileEditor.tsx — edit mode for companion files inside a skill directory.
• SkillDetailPanel.tsx — added edit, add-file, delete-skill toolbar buttons (visible only for editable skills), wired up SkillManifestEditor and SkillFileEditor for the active file, and added dialogs for adding a file, renaming a file, confirming file deletion, and confirming skill deletion.
• SkillFileTree.tsx — added optional onRenameFile/onDeleteFile callbacks; when present, non-SKILL.md file rows show inline rename and delete icon buttons.
• SkillsView.tsx — added a "New skill" button next to the search field that opens NewSkillDialog and selects the newly created skill.

How did you test this?

• Added unit tests in skills.test.ts covering createSkill (happy path, invalid names, non-open repo, duplicate names), the write-path guard (bundled skills, arbitrary directories, traversal attacks, file-path escapes), and all mutation methods (manifest round-trip, companion file lifecycle, SKILL.md protection, full skill delete, skill rename).
• Added unit tests in write-skill-frontmatter.test.ts covering round-trip fidelity for plain values, empty descriptions, colons, special leading characters, double quotes, backslashes, multi-line descriptions, multi-paragraph descriptions, and body sections that contain fake frontmatter fences.

Automatic notifications

• Publish to changelog?
• Alert Sales and Marketing teams?

[k11kirky]

• refactor(skills): apply simplify-pass cleanups across the stack #2612
• feat(skills): Codex unification — bring your skills, use them anywhere #2611
• feat(skills): publish skills to the team and install team skills locally #2610
• feat(skills): PostHog cloud team skills — read path #2609
• feat(skills): skills.sh marketplace browse and install #2608
• feat(skills): validation and shadowing signals #2607
• feat(skills): live refresh from the filesystem #2606
• feat(skills): create, edit, and delete user and repo skills #2605 👈 (View in Graphite)
• feat(skills): render full skill directories #2604
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.

[github-actions]

React Doctor could not complete this scan.

No React dependency found in /tmp/react-doctor-baseline-dcJ4ur/package.json. Add "react" to dependencies (or peerDependencies) and re-run.

_{Reviewed by React Doctor for commit fc872b6.}

[greptile-apps]

Prompt To Fix All With AI

Fix the following 3 code review issues. Work through them one at a time, proposing concise fixes.

---

### Issue 1 of 3
packages/ui/src/features/skills/SkillDetailPanel.tsx:166
**Edit button enabled while body content is unavailable**

When the `SKILL.md` fetch has settled (e.g. a query error) `isLoading` is `false` but `fileContent` is still `null`, so `body` is `null`. Clicking "Edit" opens `SkillManifestEditor` with `initialBody=""`, and saving immediately overwrites whatever the real body contained with an empty string.

```suggestion
                    disabled={isLoading || (isSkillMd && !fileContent)}
```

### Issue 2 of 3
packages/ui/src/features/skills/NewSkillDialog.tsx:68
**Hint text omits dots and underscores that the validator allows**

`SKILL_DIR_NAME_PATTERN` (`/^[a-z0-9][a-z0-9._-]*$/`) accepts dots and underscores, and the server error message even mentions them explicitly. A user who types `my_skill` will be surprised if the hint told them only dashes were allowed.

```suggestion
              Lowercase letters, numbers, dashes, dots, and underscores
```

### Issue 3 of 3
packages/ui/src/features/skills/useSkillMutations.ts:59
**`useRenameSkill` hook missing — router endpoint is unreachable from the UI**

`skills.ts` implements `renameSkill` and the tRPC router exposes a `rename` procedure, but there is no corresponding hook here and no UI that calls it. If this is intentional (planned for a follow-up), consider either removing the router endpoint from this PR to keep the surface consistent, or adding the hook now so the feature is at least reachable.

_{Reviews (1): Last reviewed commit: "feat(skills): create, edit, and delete u..." | Re-trigger Greptile}

[k11kirky]

Merge activity

• Jun 12, 11:31 AM UTC: A user started a stack merge that includes this pull request via Graphite.
• Jun 12, 11:32 AM UTC: Graphite couldn't merge this PR because it had merge conflicts.
• Jun 12, 11:54 AM UTC: A user started a stack merge that includes this pull request via Graphite.
• Jun 12, 11:54 AM UTC: @k11kirky merged this pull request with Graphite.