@csark0812/skeleton 1.5.1 → 1.5.3

package/dist/hooks/customize-on-skill-read.js

@@ -13552,7 +13552,7 @@ function resolveCustomizeFromRoot(slug, startDir) {
   return resolveCustomize(root, slug);
 }
 
-// src/hooks/customize-on-skill-read.ts
+// src/hooks/run.ts
 function parsePayload(raw) {
   if (!raw.trim())
     return {};
@@ -13611,20 +13611,15 @@ function formatResponse(payload, content) {
     return claudeResponse(content);
   return cursorResponse(content);
 }
-function main() {
+function runCustomizeHook(raw) {
   try {
-    const raw = readFileSync4(0, "utf8");
     const payload = parsePayload(raw);
     const slug = extractSkillSlug(payload);
-    if (!slug) {
-      process.stdout.write("{}");
-      return;
-    }
+    if (!slug)
+      return "{}";
     const resolved = resolveCustomizeFromRoot(slug);
-    if (!resolved.content) {
-      process.stdout.write("{}");
-      return;
-    }
+    if (!resolved.content)
+      return "{}";
     const from = resolved.included.length > 0 ? resolved.included.join(", ") : resolved.path ?? ".skeleton/customize";
     const prefix = `
 
@@ -13632,10 +13627,12 @@ function main() {
 Customize override for /${slug} (from ${from}):
 
 `;
-    process.stdout.write(formatResponse(payload, prefix + resolved.content));
+    return formatResponse(payload, prefix + resolved.content);
   } catch (error) {
     console.error(`customize hook error: ${error}`);
-    process.stdout.write("{}");
+    return "{}";
   }
 }
-main();
+
+// src/hooks/customize-on-skill-read.ts
+process.stdout.write(runCustomizeHook(readFileSync4(0, "utf8")));

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@csark0812/skeleton",
-	"version": "1.5.1",
+	"version": "1.5.3",
 	"description": "SSOT audit CLI for agent harness repos",
 	"type": "module",
 	"bin": {

package/schemas/config.schema.json

@@ -55,6 +55,28 @@
 				}
 			}
 		},
+		"skillOwnership": {
+			"type": "object",
+			"additionalProperties": false,
+			"description": "Provenance-aware skill body linting: foreign (synced) skills are skipped; owned local skills and .skeleton/customize stay audited",
+			"properties": {
+				"lockfile": {
+					"type": "string",
+					"minLength": 1,
+					"description": "Repo-relative skills lock path (default: skills-lock.json)"
+				},
+				"ownedSlugs": {
+					"type": "array",
+					"items": { "type": "string", "pattern": "^[a-z0-9-]+$" },
+					"description": "Force these skill slugs to be treated as owned (lint here) even when the lockfile marks them foreign"
+				},
+				"foreignSlugs": {
+					"type": "array",
+					"items": { "type": "string", "pattern": "^[a-z0-9-]+$" },
+					"description": "Force these skill slugs to be treated as foreign (skip body lint) even when absent from the lockfile"
+				}
+			}
+		},
 		"plugins": {
 			"type": "array",
 			"items": { "type": "string", "minLength": 1 },

package/templates/skeleton-init/config.yaml

@@ -18,6 +18,12 @@ daysUntilStale: 180
 #   alwaysInclude:
 #     - shared-agent-references.md
 
+# Optional: skill body ownership (skills-lock.json github entries are foreign by default)
+# skillOwnership:
+#   lockfile: skills-lock.json
+#   ownedSlugs: []
+#   foreignSlugs: []
+
 # Optional: plugin `.ts` entries relative to .skeleton/ (built sibling `.mjs` required)
 # plugins: []
 # Optional: draft-marker allow-list prefixes (plus `_draft-*.md` filenames)