@csark0812/skeleton 4.0.2 → 5.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +5 -9
- package/dist/audit/config/types.d.ts +0 -5
- package/dist/cli.js +111 -574
- package/package.json +2 -2
- package/schemas/config.schema.json +1 -17
- package/templates/skeleton-init/config.yaml +0 -5
- package/templates/skeleton-init/skeleton.toml +1 -5
- package/dist/hooks/customize-on-skill-read.js +0 -14813
- package/templates/skeleton-init/claude-settings.fragment.json +0 -24
- package/templates/skeleton-init/codex-hooks.fragment.json +0 -15
- package/templates/skeleton-init/cursor-hooks.fragment.json +0 -11
package/README.md
CHANGED
|
@@ -10,7 +10,7 @@ Agent repos get messy fast. Skills get copied around, docs disagree, links go st
|
|
|
10
10
|
|
|
11
11
|
Skeleton is an SSOT linter for that layer. Define the contract once; Skeleton checks it locally and in CI. If a canonical doc disappears, SSOT markers drift, a skill index stops matching disk, or a local link breaks, the audit fails before merge.
|
|
12
12
|
|
|
13
|
-
Think ESLint — for the docs and skills your agents rely on. Primary CLI from `src/cli.ts`: `audit`, `validate`, `catalog`, `init`, and `build-plugin
|
|
13
|
+
Think ESLint — for the docs and skills your agents rely on. Primary CLI from `src/cli.ts`: `audit`, `validate`, `catalog`, `init`, and `build-plugin`. Commands dispatch through that entry file.
|
|
14
14
|
|
|
15
15
|
Skeleton is **not** a runtime agent harness. It doesn't execute tools, enforce permissions, or manage memory. It checks whether the repo around those systems still holds together.
|
|
16
16
|
|
|
@@ -78,7 +78,7 @@ npm install -D @csark0812/skeleton
|
|
|
78
78
|
npx skeleton init --skills
|
|
79
79
|
```
|
|
80
80
|
|
|
81
|
-
That writes `skeleton.toml`,
|
|
81
|
+
That writes `skeleton.toml`, adds validation scripts, and writes `.pre-commit-config.yaml`.
|
|
82
82
|
|
|
83
83
|
Edit `skeleton.toml` for your repo layout, then verify:
|
|
84
84
|
|
|
@@ -119,9 +119,7 @@ skeleton.toml # scan perimeter, deny.paths, docsLint, …
|
|
|
119
119
|
.skeleton/
|
|
120
120
|
├── catalog.md # generated by `skeleton catalog` (gitignored)
|
|
121
121
|
├── review-lock.json # generated review evidence when reviewProof.mode = "hash"
|
|
122
|
-
|
|
123
|
-
└── customize/ # project-specific skill overrides (optional)
|
|
124
|
-
└── code-review.md
|
|
122
|
+
└── plugins/ # optional consumer audit plugins (.ts + built .mjs)
|
|
125
123
|
```
|
|
126
124
|
|
|
127
125
|
Legacy `.skeleton/config.yaml` still loads when no TOML is present.
|
|
@@ -138,18 +136,17 @@ Then refresh the agent index:
|
|
|
138
136
|
skeleton catalog
|
|
139
137
|
```
|
|
140
138
|
|
|
141
|
-
|
|
139
|
+
Edit synced skills in the owning toolbox repo. Consumer copies stay read-only.
|
|
142
140
|
|
|
143
141
|
## Commands
|
|
144
142
|
|
|
145
143
|
```bash
|
|
146
|
-
skeleton init [--skills]
|
|
144
|
+
skeleton init [--skills]
|
|
147
145
|
skeleton catalog [--check] [--strict]
|
|
148
146
|
skeleton audit docs|skills|self [--strict] [--json] [--paths=a,b] [--fix[=doc-meta|anchors|ssot]] [--dry-run]
|
|
149
147
|
skeleton audit docs --paths=docs/a.md --fix=doc-meta --confirm-reviewed
|
|
150
148
|
skeleton build-plugin [path] [--check]
|
|
151
149
|
skeleton validate changed [--staged | --base <ref>] [paths…]
|
|
152
|
-
skeleton customize resolve <slug>
|
|
153
150
|
```
|
|
154
151
|
|
|
155
152
|
**Validate changed** routes git diffs to the right audit:
|
|
@@ -186,7 +183,6 @@ See [tiers](docs/tiers.md). Related work: [Toolbox](https://github.com/csark0812
|
|
|
186
183
|
- [Validation](docs/developer/validation.md)
|
|
187
184
|
- [Audit rules](docs/developer/audit.md)
|
|
188
185
|
- [Plugins](docs/developer/plugins.md)
|
|
189
|
-
- [Customize](docs/developer/customize.md)
|
|
190
186
|
- [Authoring conventions](docs/authoring.md)
|
|
191
187
|
|
|
192
188
|
## Development
|
|
@@ -8,10 +8,6 @@ export interface DenyConfig {
|
|
|
8
8
|
/** Repo-wide globs that must not exist — audit fails if matched. */
|
|
9
9
|
paths?: string[];
|
|
10
10
|
}
|
|
11
|
-
export interface CustomizeConfig {
|
|
12
|
-
/** Basenames under `.skeleton/customize/` appended on every customize inject. */
|
|
13
|
-
alwaysInclude?: string[];
|
|
14
|
-
}
|
|
15
11
|
/**
|
|
16
12
|
* Ownership policy for skill-body linting.
|
|
17
13
|
* Lockfile `sourceType` other than `local` (e.g. `github`) marks skills foreign by default.
|
|
@@ -58,7 +54,6 @@ export interface SkeletonConfig {
|
|
|
58
54
|
/** Re-read cadence (days) for doc-meta last-reviewed; separate from git edit-behind-review. */
|
|
59
55
|
daysUntilStale: number;
|
|
60
56
|
deny?: DenyConfig;
|
|
61
|
-
customize?: CustomizeConfig;
|
|
62
57
|
skillOwnership?: SkillOwnershipConfig;
|
|
63
58
|
reviewProof?: ReviewProofConfig;
|
|
64
59
|
reviewCoverage?: ReviewCoverageConfig;
|