stacklok / toolhive / 22761626411

64%

push

github

Resolve locally-built artifacts during skill install (#4018)

When a user runs `thv skill build` followed by `thv skill install <name>`,
the install now checks the local OCI store for a tag matching the skill
name before falling back to a pending record. This unblocks the local
dev workflow (build → install) where the artifact is already available
locally.

The new resolveFromLocalStore method validates the artifact's embedded
name matches the install name (supply-chain defense), extracts layer
data and metadata, and hydrates the install options so the existing
installWithExtraction flow handles the rest.

Closes #4015

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

49 of 54 new or added lines in 1 file covered. (90.74%)

47126 of 73743 relevant lines covered (63.91%)

76.03 hits per line