🛡️ feat: Persist & enforce `disable-model-invocation` / `user-invocable` / `allowed-tools`#12745

Merged

danny-avila merged 14 commits intofeat/agent-skillsfrom

claude/phase-6-frontmatter-runtime

Apr 20, 2026

Commits on Apr 19, 2026

🧬 feat: Persist `disable-model-invocation` / `user-invocable` / `allowed-tools`
danny-avila
committed
🛡️ feat: Enforce frontmatter at runtime (catalog, skill tool, manual resolver, tool union)
danny-avila
committed
🎛️ feat: `$` popover reads `userInvocable` instead of UI-only `invocationMode`
danny-avila
committed
🔧 fix: Address Phase 6 review findings
danny-avila
committed
🔧 fix: Address codex iter 2 — catalog quota + duplicate-name dedup
danny-avila
committed
🔒 fix: Apply `disable-model-invocation` gate to read_file too (codex iter 3 P1)
danny-avila
committed
🔧 fix: Address codex iter 4 — manual-prime exception + legacy frontmatter backfill
danny-avila
committed
🔧 fix: Address codex iter 5 — propagate manualSkillNames + keep read_file
danny-avila
committed
🔧 fix: Address codex iter 6 — name-collision consistency via preferInvocable
danny-avila
committed
🔧 fix: Address codex iter 7 — split preferInvocable into per-axis flags
danny-avila
committed
🔧 fix: TypeScript type-check failure in handlers.spec.ts (CI green)
danny-avila
committed
🔧 fix: Address codex iter 8 — undefined-result fallback + read_file alignment
danny-avila
committed
🔧 fix: Address codex iter 9 — pin read_file lookup to primed skill _id
danny-avila
committed

Commits on Apr 20, 2026

🧹 fix: Address independent reviewer findings (DRY + types + tests + docs)
danny-avila
committed