@cryptolibertus/pi-peer 0.3.5 → 0.3.6

package/README.md

@@ -19,6 +19,7 @@ pi install ./packages/pi-peer
 - Idle watcher daemon: idle peers nudge stuck inbound activations and proactively inspect open goal-board work
 - Protocol compatibility metadata (`protocolVersion`, min/max compatible versions), peer manifests, capabilities, and trust summaries in descriptors/status/list output
 - `PI_PEER_ID` runtime override for running multiple local Pi sessions
+- `pi-peer-publish` skill for safe npm release checks, version bumping, tag push, publish, and verification
 
 ## Setup and health checks
 
@@ -30,7 +31,7 @@ pi install ./packages/pi-peer
 /peer cancel <message-id> "superseded"
 ```
 
-`/peer setup` is a guided alias for `/peer init`: it creates `.pi/peers.json` only when the file is missing, seeds protocol/capability/trust manifest metadata, and never overwrites an existing config. `/peer doctor` is read-only and checks enablement, local identity, advertised endpoint, protocol compatibility, discovered peers, warnings, and resumable disconnected tasks. `/peer reconnect` refreshes local discovery after starting or restarting another Pi session. Discovery is repo/project scoped: sessions under the same `.git` root see each other, while sessions in other repos are ignored. Outside git, the resolved cwd is used as the scope. `/peer resume` re-dispatches a disconnected message restored from `.pi/peer-messages.json`; `/peer cancel` records a local cancellation so stale work is no longer treated as active.
+`/peer setup` is a guided alias for `/peer init`: it creates `.pi/peers.json` only when the file is missing, seeds protocol/capability/trust manifest metadata, and never overwrites an existing config. `/peer doctor` is read-only and checks enablement, local identity, advertised endpoint, protocol compatibility, discovered peers, warnings, and resumable disconnected tasks. `/peer reconnect` refreshes local discovery after starting or restarting another Pi session. Discovery is repo/project scoped: sessions under the same `.git` root see each other, while sessions in other repos are ignored. Outside git, the resolved cwd is used as the scope. `/peer resume` re-dispatches a disconnected message restored from `.pi/peer-messages.json`; `/peer cancel` records a local cancellation so stale work is no longer treated as active. List-style flags such as `--peer`, `--path`, and `--claim` accept comma-separated values or repeated flags.
 
 ## Flat goal board
 
@@ -93,7 +94,9 @@ npm run check
 
 ## Publish to npm
 
-Use this release workflow after landing package changes on `main`:
+This package includes a `pi-peer-publish` Pi skill. Ask Pi to use it, or run `/skill:pi-peer-publish`, when you want an agent-guided release with safety checks, version bumping, tag push, publish, and npm verification.
+
+Use this manual release workflow after landing package changes on `main`:
 
 ```bash
 # Keep local peer runtime state out of release commits.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cryptolibertus/pi-peer",
-  "version": "0.3.5",
+  "version": "0.3.6",
   "description": "Pi package for local Pi-to-Pi peer messaging, slash commands, tools, and runtime transport.",
   "type": "module",
   "license": "MIT",
@@ -13,6 +13,7 @@
   ],
   "files": [
     "extensions",
+    "skills",
     "src",
     "README.md",
     "LICENSE"
@@ -32,6 +33,9 @@
   "pi": {
     "extensions": [
       "extensions/pi-peer/index.ts"
+    ],
+    "skills": [
+      "skills"
     ]
   },
   "engines": {

package/skills/pi-peer-publish/SKILL.md

@@ -0,0 +1,82 @@
+---
+name: pi-peer-publish
+description: Publish @cryptolibertus/pi-peer to npm safely. Use when the user asks to publish, release, npm publish, bump the package version, or verify/package/push an npm release for this pi-peer package.
+---
+
+# Pi peer publish
+
+This skill publishes `@cryptolibertus/pi-peer` from the repository root.
+
+## Safety rules
+
+- Never publish with uncommitted source changes unless the user explicitly asks to include them and they have been committed first.
+- Never commit `.pi/`, local peer runtime state, npm debug logs, or generated tarballs.
+- Stop before `npm publish` unless the user has explicitly asked to publish now in the current conversation. If they only asked to prepare a release, stop after the dry run and show the exact publish command.
+- If `npm whoami` fails, stop and ask the user to authenticate with `npm login` or configure an automation token outside the chat.
+- For scoped packages, always publish with `--access public` unless `package.json` says otherwise.
+
+## Workflow
+
+1. Inspect release state:
+   ```bash
+   git status --short --branch
+   git remote get-url origin
+   git branch --show-current
+   npm whoami
+   npm view @cryptolibertus/pi-peer version --json
+   node -p "require('./package.json').version"
+   ```
+
+2. Ensure local peer state will not be committed:
+   ```bash
+   grep -qxF '.pi/' .git/info/exclude 2>/dev/null || echo '.pi/' >> .git/info/exclude
+   ```
+
+3. Verify package quality and tarball contents:
+   ```bash
+   npm run check
+   npm pack --dry-run
+   ```
+
+4. Choose the version bump:
+   - Default to `patch` for small fixes and docs.
+   - Use `minor` only for new user-facing capabilities.
+   - Use `major` only for breaking changes, and ask the user first.
+
+5. Bump, commit, and tag using npm so `package.json`, `package-lock.json` if present, and the git tag stay consistent:
+   ```bash
+   npm version patch
+   ```
+
+6. Push the release commit and tag:
+   ```bash
+   git push origin HEAD --follow-tags
+   ```
+
+7. Publish:
+   ```bash
+   npm publish --access public
+   ```
+
+8. Verify the published package:
+   ```bash
+   npm view @cryptolibertus/pi-peer version
+   npm view @cryptolibertus/pi-peer dist-tags --json
+   ```
+
+## Failure handling
+
+- If `npm version` fails because the working tree is dirty, inspect `git status --short`; commit intended changes or revert accidental/generated files before retrying.
+- If the tag already exists locally or remotely, compare the package version with `npm view`. Do not force-push tags. Pick the next valid version instead.
+- If `npm publish` says the version already exists, do not retry the same version. Verify with `npm view`, then bump to the next patch version if the user still wants to publish.
+- If tests fail, stop and fix the failure before bumping or publishing.
+
+## Final response
+
+Report:
+
+- Package name and version published
+- Commit hash and tag pushed
+- Verification commands with exit status
+- npm package URL
+- Any skipped step or blocker

package/src/peers/command.mjs

@@ -251,11 +251,13 @@ function parsePeerGoalCommand(parsed, flags, positionals) {
 }
 
 function stringFlag(value, fallback) {
+  if (Array.isArray(value)) return stringFlag(value.at(-1), fallback);
   if (typeof value === "string" && value.trim()) return value.trim();
   return fallback;
 }
 
 function positiveIntegerFlag(value) {
+  if (Array.isArray(value)) return positiveIntegerFlag(value.at(-1));
   if (value === undefined || value === true) return undefined;
   const number = Number(value);
   return Number.isInteger(number) && number > 0 ? number : undefined;
@@ -288,7 +290,9 @@ function capabilitiesFromFlags(flags = {}) {
 }
 
 function listFlag(value) {
-  if (Array.isArray(value)) return [...new Set(value.map((item) => String(item).trim()).filter(Boolean))];
-  if (typeof value !== "string" || !value.trim()) return [];
-  return [...new Set(value.split(",").map((item) => item.trim()).filter(Boolean))];
+  const values = Array.isArray(value) ? value : [value];
+  return [...new Set(values.flatMap((item) => {
+    if (typeof item !== "string") return [];
+    return item.split(",").map((part) => part.trim()).filter(Boolean);
+  }))];
 }

package/src/utils.mjs

@@ -58,21 +58,22 @@ export function parseFlags(args) {
     const [rawKey, rawValue] = arg.slice(2).split(/=(.*)/s, 2);
     const key = rawKey.replace(/-([a-z])/g, (_, c) => c.toUpperCase());
     if (rawValue !== undefined) {
-      flags[key] = rawValue;
+      appendFlagValue(flags, key, rawValue);
       continue;
     }
     const next = args[i + 1];
     if (next !== undefined && !next.startsWith("--")) {
-      flags[key] = next;
+      appendFlagValue(flags, key, next);
       i += 1;
     } else {
-      flags[key] = true;
+      appendFlagValue(flags, key, true);
     }
   }
   return { flags, positionals };
 }
 
 export function flagEnabled(value) {
+  if (Array.isArray(value)) return flagEnabled(value.at(-1));
   if (value === true) return true;
   if (typeof value === "number") return Number.isFinite(value) && value !== 0;
   if (typeof value === "string") {
@@ -81,3 +82,11 @@ export function flagEnabled(value) {
   }
   return false;
 }
+
+function appendFlagValue(flags, key, value) {
+  if (Object.prototype.hasOwnProperty.call(flags, key)) {
+    flags[key] = Array.isArray(flags[key]) ? [...flags[key], value] : [flags[key], value];
+  } else {
+    flags[key] = value;
+  }
+}