@csark0812/skeleton 1.1.1 → 1.1.3

package/dist/hooks/customize-on-skill-read.js

@@ -3524,49 +3524,49 @@ var require_fast_uri = __commonJS((exports, module) => {
     schemelessOptions.skipEscape = true;
     return serialize(resolved, schemelessOptions);
   }
-  function resolveComponent(base, relative, options, skipNormalization) {
+  function resolveComponent(base, relative2, options, skipNormalization) {
     const target = {};
     if (!skipNormalization) {
       base = parse(serialize(base, options), options);
-      relative = parse(serialize(relative, options), options);
+      relative2 = parse(serialize(relative2, options), options);
     }
     options = options || {};
-    if (!options.tolerant && relative.scheme) {
-      target.scheme = relative.scheme;
-      target.userinfo = relative.userinfo;
-      target.host = relative.host;
-      target.port = relative.port;
-      target.path = removeDotSegments(relative.path || "");
-      target.query = relative.query;
+    if (!options.tolerant && relative2.scheme) {
+      target.scheme = relative2.scheme;
+      target.userinfo = relative2.userinfo;
+      target.host = relative2.host;
+      target.port = relative2.port;
+      target.path = removeDotSegments(relative2.path || "");
+      target.query = relative2.query;
     } else {
-      if (relative.userinfo !== undefined || relative.host !== undefined || relative.port !== undefined) {
-        target.userinfo = relative.userinfo;
-        target.host = relative.host;
-        target.port = relative.port;
-        target.path = removeDotSegments(relative.path || "");
-        target.query = relative.query;
+      if (relative2.userinfo !== undefined || relative2.host !== undefined || relative2.port !== undefined) {
+        target.userinfo = relative2.userinfo;
+        target.host = relative2.host;
+        target.port = relative2.port;
+        target.path = removeDotSegments(relative2.path || "");
+        target.query = relative2.query;
       } else {
-        if (!relative.path) {
+        if (!relative2.path) {
           target.path = base.path;
-          if (relative.query !== undefined) {
-            target.query = relative.query;
+          if (relative2.query !== undefined) {
+            target.query = relative2.query;
           } else {
             target.query = base.query;
           }
         } else {
-          if (relative.path[0] === "/") {
-            target.path = removeDotSegments(relative.path);
+          if (relative2.path[0] === "/") {
+            target.path = removeDotSegments(relative2.path);
           } else {
             if ((base.userinfo !== undefined || base.host !== undefined || base.port !== undefined) && !base.path) {
-              target.path = "/" + relative.path;
+              target.path = "/" + relative2.path;
             } else if (!base.path) {
-              target.path = relative.path;
+              target.path = relative2.path;
             } else {
-              target.path = base.path.slice(0, base.path.lastIndexOf("/") + 1) + relative.path;
+              target.path = base.path.slice(0, base.path.lastIndexOf("/") + 1) + relative2.path;
             }
             target.path = removeDotSegments(target.path);
           }
-          target.query = relative.query;
+          target.query = relative2.query;
         }
         target.userinfo = base.userinfo;
         target.host = base.host;
@@ -3574,7 +3574,7 @@ var require_fast_uri = __commonJS((exports, module) => {
       }
       target.scheme = base.scheme;
     }
-    target.fragment = relative.fragment;
+    target.fragment = relative2.fragment;
     return target;
   }
   function equal(uriA, uriB, options) {
@@ -13237,14 +13237,75 @@ var require_public_api = __commonJS((exports) => {
 // src/hooks/customize-on-skill-read.ts
 import { readFileSync as readFileSync4 } from "node:fs";
 
+// src/audit/core/shared.ts
+var REGISTRY_REL_PATH = ".skeleton/registry.md";
+var REGISTRY_DIR_REL = ".skeleton";
+function normalizeRelPath(p) {
+  return p.replace(/\\/g, "/");
+}
+
+// src/audit/core/skill-roots.ts
+import { existsSync, readdirSync, readlinkSync, realpathSync } from "node:fs";
+import { join, relative } from "node:path";
+var FLAT_SKILL_DENYLIST = new Set([
+  ".git",
+  ".github",
+  ".skeleton",
+  ".cursor",
+  ".claude",
+  ".agents",
+  ".codex",
+  "docs",
+  "refs",
+  "scripts",
+  "src",
+  "dist",
+  "node_modules",
+  "templates",
+  "fixtures",
+  "schemas"
+]);
+var NESTED_EXCLUDED_DIRS = new Set(["references", "_shared"]);
+var NESTED_SKILL_SLUG_RE = /(?:^|\/)\.(?:claude|agents)\/skills\/([a-z0-9-]+)\//;
+var FLAT_SKILL_REFERENCES_RE = /(?:^|\/)([a-z0-9-]+)\/references(?:\/|$)/;
+function slugFromSkillPath(relPath) {
+  const normalized = normalizeRelPath(relPath);
+  const nested = normalized.match(NESTED_SKILL_SLUG_RE);
+  if (nested?.[1])
+    return nested[1];
+  if (normalized.endsWith("/SKILL.md")) {
+    const parts = normalized.split("/");
+    return parts.at(-2) ?? null;
+  }
+  return null;
+}
+function slugFromPath(filePath, workspaceRoot) {
+  const normalized = normalizeRelPath(filePath);
+  const nested = normalized.match(NESTED_SKILL_SLUG_RE);
+  if (nested?.[1])
+    return nested[1];
+  if (normalized.endsWith("/SKILL.md")) {
+    return slugFromSkillPath(normalized);
+  }
+  const flatRef = normalized.match(FLAT_SKILL_REFERENCES_RE);
+  const flatSlug = flatRef?.[1];
+  if (!flatSlug || FLAT_SKILL_DENYLIST.has(flatSlug))
+    return null;
+  if (workspaceRoot) {
+    if (!existsSync(join(workspaceRoot, flatSlug, "SKILL.md")))
+      return null;
+  }
+  return flatSlug;
+}
+
 // src/customize/resolve.ts
-import { existsSync as existsSync3, readFileSync as readFileSync3 } from "node:fs";
-import { basename, join as join3, relative as relative2 } from "node:path";
+import { existsSync as existsSync4, readFileSync as readFileSync3 } from "node:fs";
+import { basename, join as join4, relative as relative3 } from "node:path";
 
 // src/audit/config/load.ts
 var import_ajv = __toESM(require_ajv(), 1);
-import { existsSync, readFileSync } from "node:fs";
-import { dirname, join } from "node:path";
+import { existsSync as existsSync2, readFileSync } from "node:fs";
+import { dirname, join as join2 } from "node:path";
 import { fileURLToPath } from "node:url";
 
 // node_modules/yaml/dist/index.js
@@ -13295,24 +13356,18 @@ var $visitAsync = visit.visitAsync;
 
 // src/audit/config/load.ts
 var SCHEMA_CANDIDATES = [
-  join(dirname(fileURLToPath(import.meta.url)), "../../../schemas/config.schema.json"),
-  join(dirname(fileURLToPath(import.meta.url)), "../schemas/config.schema.json"),
-  join(dirname(fileURLToPath(import.meta.url)), "../../schemas/config.schema.json")
+  join2(dirname(fileURLToPath(import.meta.url)), "../../../schemas/config.schema.json"),
+  join2(dirname(fileURLToPath(import.meta.url)), "../schemas/config.schema.json"),
+  join2(dirname(fileURLToPath(import.meta.url)), "../../schemas/config.schema.json")
 ];
 function resolveSchemaPath() {
   for (const candidate of SCHEMA_CANDIDATES) {
-    if (existsSync(candidate))
+    if (existsSync2(candidate))
       return candidate;
   }
   throw new Error("Missing schemas/config.schema.json in package");
 }
-var BUILTIN_EXCLUDES = [
-  "node_modules/**",
-  ".git/**",
-  "dist/**",
-  "refs/**",
-  "_agent/**"
-];
+var BUILTIN_EXCLUDES = ["node_modules/**", ".git/**", "dist/**", "refs/**", "_agent/**"];
 var COVERAGE_BUILTIN_EXCLUDES = [
   ...BUILTIN_EXCLUDES,
   "**/__tests__/**",
@@ -13322,7 +13377,7 @@ var COVERAGE_BUILTIN_EXCLUDES = [
 function findRepoRoot(startDir = process.cwd()) {
   let dir = startDir;
   while (true) {
-    if (existsSync(join(dir, ".skeleton", "config.yaml")))
+    if (existsSync2(join2(dir, ".skeleton", "config.yaml")))
       return dir;
     const parent = dirname(dir);
     if (parent === dir) {
@@ -13342,31 +13397,22 @@ function validateConfig(raw) {
   return raw;
 }
 function loadConfig(root) {
-  const configPath = join(root, ".skeleton", "config.yaml");
-  if (!existsSync(configPath)) {
-    throw new Error(`Missing ${join(".skeleton", "config.yaml")}`);
+  const configPath = join2(root, ".skeleton", "config.yaml");
+  if (!existsSync2(configPath)) {
+    throw new Error(`Missing ${join2(".skeleton", "config.yaml")}`);
   }
   const raw = $parse(readFileSync(configPath, "utf8"));
   return validateConfig(raw);
 }
 
 // src/audit/core/registry.ts
-import { existsSync as existsSync2, readFileSync as readFileSync2 } from "node:fs";
-import { join as join2, relative, resolve } from "node:path";
-
-// src/audit/core/shared.ts
-var REGISTRY_REL_PATH = ".skeleton/registry.md";
-var REGISTRY_DIR_REL = ".skeleton";
-function normalizeRelPath(p) {
-  return p.replace(/\\/g, "/");
-}
-
-// src/audit/core/registry.ts
+import { existsSync as existsSync3, readFileSync as readFileSync2 } from "node:fs";
+import { join as join3, relative as relative2, resolve } from "node:path";
 var REGISTRY_TABLE_ROW_RE = /^\|\s*[^|]+\|\s*\[[^\]]*\]\(([^)]+)\)\s*\|/;
 var REGISTRY_TABLE_HEADER_RE = /\|\s*Topic\s*\|\s*Canonical file\s*\|/i;
 function parseRegistry(root) {
-  const abs = join2(root, REGISTRY_REL_PATH);
-  if (!existsSync2(abs)) {
+  const abs = join3(root, REGISTRY_REL_PATH);
+  if (!existsSync3(abs)) {
     return { paths: [], hasTableHeader: false };
   }
   const content = readFileSync2(abs, "utf8");
@@ -13380,8 +13426,8 @@ function parseRegistry(root) {
     const linkTarget = match[1].trim();
     if (linkTarget.startsWith("#"))
       continue;
-    const resolved = resolve(join2(root, REGISTRY_DIR_REL), linkTarget);
-    paths.push(normalizeRelPath(relative(root, resolved)));
+    const resolved = resolve(join3(root, REGISTRY_DIR_REL), linkTarget);
+    paths.push(normalizeRelPath(relative2(root, resolved)));
   }
   return { paths: [...new Set(paths)], hasTableHeader };
 }
@@ -13391,15 +13437,15 @@ function parseRegistryPaths(root) {
 
 // src/customize/resolve.ts
 function customizeDir(root) {
-  return join3(root, REGISTRY_DIR_REL, "customize");
+  return join4(root, REGISTRY_DIR_REL, "customize");
 }
 function customizePathForSlug(root, slug) {
-  return join3(customizeDir(root), `${slug}.md`);
+  return join4(customizeDir(root), `${slug}.md`);
 }
 function findCustomizeViaRegistry(root, slug) {
   for (const rel of parseRegistryPaths(root)) {
     const expected = `${REGISTRY_DIR_REL}/customize/${slug}.md`;
-    if (normalizeRelPath(rel) === expected && existsSync3(join3(root, rel))) {
+    if (normalizeRelPath(rel) === expected && existsSync4(join4(root, rel))) {
       return rel;
     }
   }
@@ -13407,15 +13453,15 @@ function findCustomizeViaRegistry(root, slug) {
 }
 function resolveSlugFile(root, slug) {
   const direct = customizePathForSlug(root, slug);
-  if (existsSync3(direct)) {
+  if (existsSync4(direct)) {
     return {
       content: readFileSync3(direct, "utf8"),
-      path: normalizeRelPath(relative2(root, direct))
+      path: normalizeRelPath(relative3(root, direct))
     };
   }
   const registryPath = findCustomizeViaRegistry(root, slug);
   if (registryPath) {
-    const abs = join3(root, registryPath);
+    const abs = join4(root, registryPath);
     return {
       content: readFileSync3(abs, "utf8"),
       path: registryPath
@@ -13439,11 +13485,11 @@ function readAlwaysInclude(root, basenames, skipBasename) {
     const file = basename(name);
     if (skipBasename && file === skipBasename)
       continue;
-    const abs = join3(dir, file);
-    if (!existsSync3(abs))
+    const abs = join4(dir, file);
+    if (!existsSync4(abs))
       continue;
     parts.push(readFileSync3(abs, "utf8").trimEnd());
-    paths.push(normalizeRelPath(relative2(root, abs)));
+    paths.push(normalizeRelPath(relative3(root, abs)));
   }
   return { parts, paths };
 }
@@ -13466,11 +13512,11 @@ function resolveCustomize(root, slug) {
   }
   return {
     slug,
-    content: parts.join(`
+    content: `${parts.join(`
 
 ---
 
-`) + `
+`)}
 `,
     path: slugFile.path ?? always.paths[0] ?? null,
     included
@@ -13481,41 +13527,6 @@ function resolveCustomizeFromRoot(slug, startDir) {
   return resolveCustomize(root, slug);
 }
 
-// src/audit/core/skill-roots.ts
-var FLAT_SKILL_DENYLIST = new Set([
-  ".git",
-  ".github",
-  ".skeleton",
-  ".cursor",
-  ".claude",
-  ".agents",
-  ".codex",
-  "docs",
-  "refs",
-  "scripts",
-  "src",
-  "dist",
-  "node_modules",
-  "templates",
-  "fixtures",
-  "schemas"
-]);
-var NESTED_EXCLUDED_DIRS = new Set(["references", "_shared"]);
-function slugFromSkillPath(relPath) {
-  const normalized = normalizeRelPath(relPath);
-  if (normalized.endsWith("/SKILL.md")) {
-    const parts = normalized.split("/");
-    return parts.at(-2) ?? null;
-  }
-  return null;
-}
-function slugFromPath(filePath) {
-  const normalized = normalizeRelPath(filePath);
-  if (!normalized.endsWith("/SKILL.md"))
-    return null;
-  return slugFromSkillPath(normalized);
-}
-
 // src/hooks/customize-on-skill-read.ts
 function parsePayload(raw) {
   if (!raw.trim())
@@ -13547,7 +13558,7 @@ function extractSkillSlug(payload) {
   }
   const path = extractPath(payload);
   if (path)
-    return slugFromPath(path);
+    return slugFromPath(path, process.cwd());
   return null;
 }
 function cursorResponse(content) {
@@ -13579,11 +13590,6 @@ function main() {
   try {
     const raw = readFileSync4(0, "utf8");
     const payload = parsePayload(raw);
-    const path = extractPath(payload);
-    if (path && !path.endsWith("/SKILL.md")) {
-      process.stdout.write("{}");
-      return;
-    }
     const slug = extractSkillSlug(payload);
     if (!slug) {
       process.stdout.write("{}");

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@csark0812/skeleton",
-	"version": "1.1.1",
+	"version": "1.1.3",
 	"description": "SSOT audit CLI for agent harness repos",
 	"type": "module",
 	"bin": {
@@ -11,6 +11,7 @@
 		"templates",
 		"schemas"
 	],
+	"license": "MIT",
 	"engines": {
 		"node": ">=22"
 	},
@@ -20,12 +21,21 @@
 		"test": "bun test",
 		"test:audit": "bun test src/audit/__tests__",
 		"test:cli": "bun test src/__tests__/cli",
+		"test:coverage": "bun test --coverage",
+		"typecheck": "tsc -p tsconfig.json --noEmit",
+		"lint": "biome check .",
+		"format": "biome format --write .",
+		"format:check": "biome check --formatter-enabled=true --linter-enabled=false .",
+		"audit:deps": "bun audit",
 		"validate:changed": "bun src/cli.ts validate changed",
 		"validate:ci": "bun src/cli.ts validate changed --base origin/main",
 		"audit:docs": "bun src/cli.ts audit docs",
 		"audit:skills": "bun src/cli.ts audit skills",
 		"audit:self": "bun src/cli.ts audit self",
-		"prepack": "bun test && bun run build"
+		"check": "bun run lint && bun test && bun run typecheck && bun run build && bun run audit:self",
+		"start": "bun src/cli.ts --help",
+		"dev": "bun src/cli.ts --help",
+		"prepack": "bun test && bun run typecheck && bun run build"
 	},
 	"dependencies": {
 		"ajv": "^8.17.1",
@@ -37,6 +47,7 @@
 		"yaml": "^2.8.0"
 	},
 	"devDependencies": {
+		"@biomejs/biome": "^2.5.3",
 		"@types/bun": "^1.3.8",
 		"@types/github-slugger": "^2.0.0",
 		"typescript": "~5.8.3"

package/schemas/config.schema.json

@@ -24,9 +24,14 @@
 					"type": "array",
 					"items": { "type": "string" }
 				},
-				"retiredSkills": {
+	"retiredSkills": {
 					"type": "array",
 					"items": { "type": "string", "pattern": "^[a-z0-9-]+$" }
+				},
+				"nonPublicSkills": {
+					"type": "array",
+					"items": { "type": "string", "pattern": "^[a-z0-9-]+$" },
+					"description": "Skill slugs that exist on disk but must not appear in README Taxonomy (consumer-internal skills)"
 				}
 			}
 		},