- Add corezoid-alias-manager skill for managing process aliases (create, list, modify, delete, link/unlink)
- Add corezoid-variable-manager skill for managing env_var (create, list, modify, delete)
- Update variables-guide.md and node docs with alias/variable usage patterns
- Add test-cases-alias-variable.md covering alias and variable flows
- Update existing skills to reference new alias/variable managers

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

…manager-skills

feat: add alias and variable manager skills

Adds 17 new MCP access-control tools covering the workflow that previously
required dropping out of the IDE into the Corezoid admin UI:

  Sharing       share-object (privs="none" revokes), list-shares
  Groups        create-group, modify-group, delete-group, list-group-objects,
                list-groups, add-to-group, remove-from-group
  API keys      create-api-key, modify-api-key, delete-api-key, list-api-keys
  Discovery     find-principal (name -> obj_id)
  Invitations   invite-user (external email + initial share in one call)

Secret hygiene: create-api-key writes login+secret to
~/.corezoid/api-keys/<slug>-<obj_id>.json with mode 0600 and only reports
the file path in chat — secrets never appear in agent responses.

Platform quirks discovered during live verification against Corezoid and
documented in plugins/corezoid/skills/corezoid-access/SKILL.md:
- API keys are user records with logins.type=api, so share to obj_to=user
  (not api_key) using the key's obj_id
- remove-from-group sends level="" (server rejects level=0 and
  type:"unlink")
- modify-api-key requires the key to be a member of at least one group
- delete-group refuses by default if the group still has active shares;
  pass force=true to override (cascade is automatic server-side)

New sub-skill corezoid-access/ wired into the main router; CLAUDE.md and
the main SKILL.md tools table updated. README MCP Tools section and the
Architecture diagram extended with the new Access section.

docs/corezoid-swagger.json bundled as the canonical reference for future
endpoint work.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Introduce first-class support for Corezoid state diagrams (conv_type
"state") alongside regular processes. Add a new MCP tool
create-state-diagram, two sub-skills (corezoid-state-diagram-create and
corezoid-state-diagram-edit), reference docs under docs/state-diagrams/,
and runnable samples under samples/state-diagrams/.

The shared CreateEmptyConv executor replaces the hard-coded "process"
conv_type so both regular processes and state diagrams flow through the
same creation path. createConv unifies the two handlers, and the
process JSON schema now accepts both conv_type values.

Update the main SKILL.md, README, and CLAUDE.md to route users to the
new sub-skills and reference docs.

Cover the classify-error / analytics logging path, the access privs
payload builders, env-file/config bootstrap, the access MCP handlers,
and the dashboard argument helpers. These areas previously had no
direct coverage.