@baselane/packs 0.1.0 → 0.1.2

package/dist/index.d.ts

@@ -32,7 +32,7 @@ export { ingestHarness } from "./ingest.ts";
 export type { IngestInput, IngestResult } from "./ingest.ts";
 export { packFromFileset } from "./pack-from-fileset.ts";
 export type { PackFromFilesetResult } from "./pack-from-fileset.ts";
-export { validateManifest, buildManifest, MANIFEST_PATH, LEGACY_MANIFEST_PATH, KNOWN_CAPABILITIES, type HarnessManifest, type CapabilityName, type CapabilityReceipt } from "./manifest.ts";
+export { validateManifest, buildManifest, serializeManifest, MANIFEST_PATH, LEGACY_MANIFEST_PATH, MANIFEST_SCHEMA_URL, KNOWN_CAPABILITIES, type HarnessManifest, type CapabilityName, type CapabilityReceipt } from "./manifest.ts";
 export { materializeHarness, sha256Hex } from "./materialize-harness.ts";
 export type { MaterializeInput, MaterializeResult } from "./materialize-harness.ts";
 export { detectPackDrift } from "./drift-detect.ts";

package/dist/index.js

@@ -16,6 +16,6 @@ export { buildWikiSeed } from "./seed/wiki-seed.js";
 export { buildGraphSeed } from "./seed/graph-seed.js";
 export { ingestHarness } from "./ingest.js";
 export { packFromFileset } from "./pack-from-fileset.js";
-export { validateManifest, buildManifest, MANIFEST_PATH, LEGACY_MANIFEST_PATH, KNOWN_CAPABILITIES } from "./manifest.js";
+export { validateManifest, buildManifest, serializeManifest, MANIFEST_PATH, LEGACY_MANIFEST_PATH, MANIFEST_SCHEMA_URL, KNOWN_CAPABILITIES } from "./manifest.js";
 export { materializeHarness, sha256Hex } from "./materialize-harness.js";
 export { detectPackDrift } from "./drift-detect.js";

package/dist/manifest.d.ts

@@ -49,6 +49,9 @@ export interface HarnessManifest {
     };
 }
 export declare const MANIFEST_PATH = "harness.json";
+/** Served from the landing site (landing/harness.schema.json); documented in baselane-sh/harness.json.
+ * Written as the first key of every generated harness.json for editor validation/autocomplete. */
+export declare const MANIFEST_SCHEMA_URL = "https://baselane.sh/harness.schema.json";
 /** Pre-2026-07-16 repo manifest location. `readManifestWithFallback` (packages/materialize)
  * reads from here when the root manifest is absent; `install` migrates it forward. */
 export declare const LEGACY_MANIFEST_PATH = ".baselane/harness.json";
@@ -56,6 +59,11 @@ export declare const LEGACY_MANIFEST_PATH = ".baselane/harness.json";
  * normalized object — absent registry → null, absent capabilities → {}, absent materialized
  * lists → []. Throws with a reason on anything invalid. Never mutates `raw`. */
 export declare function validateManifest(raw: unknown): HarnessManifest;
+/** Canonical serialization of a generated harness.json: $schema first key (editor
+ * validation/autocomplete against the published schema), 2-space indent, trailing newline.
+ * Every writer of a harness.json file — CLI/agent (writeManifestFile) and portal install
+ * PRs — goes through this, so the $schema key can never drift per-writer. */
+export declare function serializeManifest(manifest: HarnessManifest): string;
 /** Builds the manifest an install writes. If a `receipt` is supplied (hashed vendored files,
  * managed-region receipts, resolutions), it is used verbatim. Otherwise the receipt half is
  * derived from the file paths the materializer produced — entry files become managedRegions,

package/dist/manifest.js

@@ -3,6 +3,9 @@ import { isEntryFile } from "./merge-region.js";
 /** Capabilities a pack can declare as materialized (centrally computed, then distributed). */
 export const KNOWN_CAPABILITIES = ["system-map", "wiki", "graph"];
 export const MANIFEST_PATH = "harness.json";
+/** Served from the landing site (landing/harness.schema.json); documented in baselane-sh/harness.json.
+ * Written as the first key of every generated harness.json for editor validation/autocomplete. */
+export const MANIFEST_SCHEMA_URL = "https://baselane.sh/harness.schema.json";
 /** Pre-2026-07-16 repo manifest location. `readManifestWithFallback` (packages/materialize)
  * reads from here when the root manifest is absent; `install` migrates it forward. */
 export const LEGACY_MANIFEST_PATH = ".baselane/harness.json";
@@ -182,6 +185,13 @@ export function validateManifest(raw) {
         materialized: { vendored, managedRegions, derivedCommitted, resolutions, capabilities: materializedCapabilities },
     };
 }
+/** Canonical serialization of a generated harness.json: $schema first key (editor
+ * validation/autocomplete against the published schema), 2-space indent, trailing newline.
+ * Every writer of a harness.json file — CLI/agent (writeManifestFile) and portal install
+ * PRs — goes through this, so the $schema key can never drift per-writer. */
+export function serializeManifest(manifest) {
+    return JSON.stringify({ $schema: MANIFEST_SCHEMA_URL, ...manifest }, null, 2) + "\n";
+}
 /** Builds the manifest an install writes. If a `receipt` is supplied (hashed vendored files,
  * managed-region receipts, resolutions), it is used verbatim. Otherwise the receipt half is
  * derived from the file paths the materializer produced — entry files become managedRegions,

package/dist/pack-from-fileset.js

@@ -4,6 +4,12 @@ const VERSION_TAG_RE = /^v?(\d+\.\d+\.\d+)$/;
 const ONE_LEVEL_SKILL_RE = /^skills\/([^/]+)\/SKILL\.md$/;
 const TWO_LEVEL_SKILL_RE = /^skills\/([^/]+)\/([^/]+)\/SKILL\.md$/;
 const AGENTS_SKILL_RE = /^\.agents\/skills\/([^/]+)\/SKILL\.md$/;
+// gstack layout: every non-dot top-level dir holding a SKILL.md is a skill (autoplan/SKILL.md,
+// careful/SKILL.md, ...). Dot dirs are excluded so .github/ etc. can never smuggle a skill in.
+const TOP_LEVEL_SKILL_RE = /^([^./][^/]*)\/SKILL\.md$/;
+// Claude plugin-marketplace layout (trailofbits/skills, anthropics/claude-code, expo/skills):
+// plugins/<plugin>/skills/<name>/SKILL.md.
+const PLUGIN_SKILL_RE = /^plugins\/([^/]+)\/skills\/([^/]+)\/SKILL\.md$/;
 const ROOT_SKILL_PATH = "SKILL.md";
 function stampVersion(ref, sha) {
     const m = VERSION_TAG_RE.exec(ref);
@@ -29,6 +35,8 @@ function findSkillMatches(paths, repoName) {
             const oneLevel = ONE_LEVEL_SKILL_RE.exec(path);
             const twoLevel = !oneLevel ? TWO_LEVEL_SKILL_RE.exec(path) : null;
             const agentsLevel = !oneLevel && !twoLevel ? AGENTS_SKILL_RE.exec(path) : null;
+            const pluginLevel = !oneLevel && !twoLevel && !agentsLevel ? PLUGIN_SKILL_RE.exec(path) : null;
+            const topLevel = !oneLevel && !twoLevel && !agentsLevel && !pluginLevel ? TOP_LEVEL_SKILL_RE.exec(path) : null;
             if (oneLevel) {
                 name = oneLevel[1];
                 sourceDir = `skills/${oneLevel[1]}`;
@@ -41,6 +49,14 @@ function findSkillMatches(paths, repoName) {
                 name = agentsLevel[1];
                 sourceDir = `.agents/skills/${agentsLevel[1]}`;
             }
+            else if (pluginLevel) {
+                name = pluginLevel[2];
+                sourceDir = `plugins/${pluginLevel[1]}/skills/${pluginLevel[2]}`;
+            }
+            else if (topLevel) {
+                name = topLevel[1];
+                sourceDir = topLevel[1];
+            }
         }
         if (name === null)
             continue;

package/dist/validate.d.ts

@@ -2,7 +2,7 @@ import type { Capability, PackAgent, PackCommand, PackHook, PackScope, SkillBloc
 export declare const KNOWN_HOOK_EVENTS: readonly ["PreToolUse", "PostToolUse", "Notification", "UserPromptSubmit", "Stop", "SubagentStop", "PreCompact", "SessionStart", "SessionEnd"];
 export declare const SKILL_NAME_MAX = 64;
 export declare const SKILL_DESC_MAX = 1024;
-export declare const SKILL_BODY_MAX_LINES = 500;
+export declare const SKILL_BODY_MAX_LINES = 5000;
 export declare const SKILL_BODY_WARN_LINES = 400;
 export interface SkillLint {
     field: string;

package/dist/validate.js

@@ -258,7 +258,10 @@ function onboarding(v) {
 }
 export const SKILL_NAME_MAX = 64;
 export const SKILL_DESC_MAX = 1024;
-export const SKILL_BODY_MAX_LINES = 500;
+// Hard ceiling is a sanity bound, not an authoring target — real ecosystem skills routinely run
+// 1-2k lines (garrytan/gstack's spec/SKILL.md is ~2.4k), and ingest must not reject them. The
+// 400-line soft warning below is the authoring-quality nudge.
+export const SKILL_BODY_MAX_LINES = 5000;
 export const SKILL_BODY_WARN_LINES = 400;
 const XML_TAG = /<\/?[a-zA-Z][^>]*>/;
 /** name: slug, ≤64 chars. A name containing "anthropic"/"claude" is NOT rejected here — that
@@ -283,7 +286,7 @@ function skillDescription(obj, path) {
         fail(`${path}.description`, "free of XML tags");
     return v;
 }
-/** body: non-empty markdown, ≤500 lines (hard ceiling; the 400-line soft warning is a skillLint). */
+/** body: non-empty markdown, ≤5000 lines (hard ceiling; the 400-line soft warning is a skillLint). */
 function skillBody(obj, path) {
     const v = str(obj, "body", `${path}.body`);
     if (v.split("\n").length > SKILL_BODY_MAX_LINES) {
@@ -333,7 +336,7 @@ export function validateSkill(raw) {
 export function skillLints(block) {
     const lints = [];
     if (block.body.split("\n").length >= SKILL_BODY_WARN_LINES) {
-        lints.push({ field: "body", message: `body is approaching the ${SKILL_BODY_MAX_LINES}-line limit; split into references` });
+        lints.push({ field: "body", message: `body is over ${SKILL_BODY_WARN_LINES} lines; consider splitting into references` });
     }
     if (block.name.includes("anthropic") || block.name.includes("claude")) {
         lints.push({ field: "name", message: 'name contains the reserved word "anthropic" or "claude" — confirm this is legitimate first-party content, not impersonation' });

package/package.json

@@ -1,16 +1,16 @@
 {
   "name": "@baselane/packs",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "type": "module",
   "description": "WorkflowPack schema, validation, and render pipeline, plus the built-in packs shipped by the baselane CLI.",
   "main": "./dist/index.js",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/mohammad0omar/baselane.sh.git",
+    "url": "git+https://github.com/baselane-sh/baselane.git",
     "directory": "packages/packs"
   },
-  "homepage": "https://baselane.sh",
+  "homepage": "https://github.com/baselane-sh/baselane",
   "files": [
     "dist/",
     "packs/",
@@ -22,13 +22,16 @@
     "access": "public"
   },
   "dependencies": {
-    "@baselane/analyze": "0.1.0"
+    "@baselane/analyze": "0.1.2"
   },
   "devDependencies": {
     "@types/node": "^24.0.0",
     "typescript": "^5.9.0",
     "vitest": "^2.0.0"
   },
+  "bugs": {
+    "url": "https://github.com/baselane-sh/baselane/issues"
+  },
   "scripts": {
     "test": "vitest run",
     "typecheck": "tsc --noEmit",