Add support for Autohand Code CLI in skills installation

[igorcosta]

Fixes #16276.

Wrangler's locked rosie-skills@0.8.1 registry does not include Autohand Code CLI, so its Cloudflare skills installation and update flows omit it. Raise the dependency floor to 0.8.5, whose published registry detects ~/.autohand as autohand-code / Autohand Code CLI and installs into ~/.autohand/skills.

This reuses Wrangler's existing discovery, installation, backup, metadata, and update logic. The regression uses the real installed Rosie registry for detection, with mocked skill downloads, and checks both initial installation and the exact update success message. It fails with the old 0.8.1 registry and passes with 0.8.5.

Autohand is published as autohand-cli; its official site and skill discovery documentation identify the CLI and paths.

Validation:

• Required workspace dependency builds completed.
• Skills installer/update suite: 90 tests passed.
• Regression verified against the old and updated published registries.
• Wrangler check:type and type:tests passed.
• Changed TypeScript file passed type-aware oxlint; formatting and git diff --check passed.
• Full monorepo and credentialed Cloudflare E2E suites were not run locally; upstream CI results are described below.

---

• Tests
  • Tests included/updated
  • Automated tests not possible - manual testing has been completed as follows:
  • Additional testing not necessary because:
• Public documentation
  • Cloudflare docs PR(s):
  • Documentation not necessary because: this refreshes the existing installer registry without introducing a command or configuration option. Autohand's supported skill paths are documented above; the companion MCP connection guide is proposed in Document Autohand Code MCP setup mcp#291.

---

Latest contribution and validation (2026-10-16):

The Vouch gate closed this PR before follow-up commits were pushed. Its recorded head still points to the initial submission; the current patch is commit 32013d9 on autohand-code-support.

• Clarified the existing-installation workflow: run wrangler --install-skills once to rediscover Autohand; ordinary updates retain their stored agent list.
• Fixed the real-registry test fixture on Windows by isolating USERPROFILE, which Rosie reads instead of HOME there.
• Local skills suite: 90 passed. Type-aware lint, package and test type checks passed.
• Windows validation passed: 89 passed, one existing test skipped. The validation branch differs from the contribution branch only by its isolated CI workflow.
• The initial broader upstream CI was not fully green: its Windows fixture failure is now corrected; the other inspected failures were a Miniflare email ECONNRESET and C3 template dependency resolution (@graphql-tools/schema). The aggregate suite is not claimed green.

Maintainer registration/reopening is needed under the contribution policy. The current branch above is ready for triage.

[changeset-bot]

🦋 Changeset detected

Latest commit: dc7c168

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 3 packages

Name	Type
wrangler	Patch
@cloudflare/vite-plugin	Patch
@cloudflare/vitest-plugin	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[github-actions]

Hi @igorcosta. Thanks for taking the time to contribute to Workers SDK.

This PR has been automatically closed because you are not currently a registered (vouched) collaborator for this repository.

AI tools now let our team generate proposed code changes quickly. Reviewing changes, checking that they solve the right problem, and maintaining code quality over time still take substantial care and effort. We therefore limit PRs to registered collaborators so we can focus that effort where it is most useful.

For the majority of external contributors, the most effective way to help is through issues: describing a problem or use case, providing a minimal reproduction, investigating its cause, or helping us verify a fix. Those contributions help us understand what needs to change and are very welcome.

We will take an initial look at this PR and decide whether it is something we want to invest time in reviewing and maintaining. We may reopen it if we decide to proceed, but we cannot guarantee that it will be reopened or receive a full review.

[workers-devprod]

Codeowners approval required for this PR:

• @cloudflare/wrangler

Show detailed file reviewers

• .changeset/autohand-code-skills.md: [@cloudflare/wrangler]
• packages/wrangler/package.json: [@cloudflare/wrangler]
• packages/wrangler/src/tests/agents-skills-install.test.ts: [@cloudflare/wrangler]
• pnpm-lock.yaml: [@cloudflare/wrangler]

[devin-ai-integration]

Devin Review found 1 potential issue.