@hagicode/skillsbase 0.1.3 → 0.1.4

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 HagiCode
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -4,7 +4,8 @@
 
 [![npm version](https://img.shields.io/npm/v/%40hagicode%2Fskillsbase?logo=npm&color=cb3837)](https://www.npmjs.com/package/@hagicode/skillsbase)
 [![npm downloads](https://img.shields.io/npm/dm/%40hagicode%2Fskillsbase?logo=npm&color=2d8cf0)](https://www.npmjs.com/package/@hagicode/skillsbase)
-[![Node.js](https://img.shields.io/badge/node-%3E%3D22.12.0-339933?logo=node.js&logoColor=white)](https://nodejs.org/)
+[![license](https://img.shields.io/badge/license-MIT-ffd43b)](./LICENSE)
+[![Node.js](https://img.shields.io/badge/node-%3E%3D24.0.0-339933?logo=node.js&logoColor=white)](https://nodejs.org/)
 
 `skillsbase` is a standalone Node.js CLI for bootstrapping and maintaining managed skills repositories.
 It ships the CLI and templates only. The generated `skills/` content belongs in the target repository, not in this package repository.
@@ -13,7 +14,7 @@ It ships the CLI and templates only. The generated `skills/` content belongs in
 
 Requirements:
 
-- Node.js `>= 22.12.0`
+- Node.js `>= 24.0.0`
 - npm `>= 10.9.2`
 
 Install globally:
@@ -122,4 +123,10 @@ The GitHub Actions workflow supports two npm authentication modes:
 - Fallback: `NPM_TOKEN` repository secret mapped to `NODE_AUTH_TOKEN`
 
 Before relying on trusted publishing, make sure the npm package settings for `@hagicode/skillsbase` trust the `HagiCode-org/skillsbase` repository.
+Use workflow filename `npm-publish.yml` in npm trusted publisher settings, not the full `.github/workflows/...` path.
+If the package has not been published before, that is still acceptable as long as the `hagicode` scope already exists and the publishing identity can create `@hagicode/skillsbase`.
 The npm docs currently require Node.js `>= 22.14.0` and npm `>= 11.5.1` for trusted publishing.
+
+## License
+
+MIT. See [LICENSE](./LICENSE).

package/README.zh-CN.md

@@ -4,7 +4,7 @@
 
 [![npm version](https://img.shields.io/npm/v/%40hagicode%2Fskillsbase?logo=npm&color=cb3837)](https://www.npmjs.com/package/@hagicode/skillsbase)
 [![npm downloads](https://img.shields.io/npm/dm/%40hagicode%2Fskillsbase?logo=npm&color=2d8cf0)](https://www.npmjs.com/package/@hagicode/skillsbase)
-[![Node.js](https://img.shields.io/badge/node-%3E%3D22.12.0-339933?logo=node.js&logoColor=white)](https://nodejs.org/)
+[![Node.js](https://img.shields.io/badge/node-%3E%3D24.0.0-339933?logo=node.js&logoColor=white)](https://nodejs.org/)
 
 `skillsbase` 是一个独立的 Node.js CLI，用于初始化并维护受管 skills 仓库。
 本仓库只提供 CLI 与模板，不提交目标仓库中的 `skills/` 产物。
@@ -13,7 +13,7 @@
 
 要求：
 
-- Node.js `>= 22.12.0`
+- Node.js `>= 24.0.0`
 - npm `>= 10.9.2`
 
 全局安装：
@@ -122,4 +122,6 @@ GitHub Actions 发布流支持两种 npm 认证模式：
 - 兜底：仓库 `NPM_TOKEN` secret，经 `NODE_AUTH_TOKEN` 注入
 
 若使用 trusted publishing，需先在 npm 的 `@hagicode/skillsbase` 包设置中，将 `HagiCode-org/skillsbase` 配置为 trusted publisher。
+在 npm trusted publisher 设置里填写的 workflow filename 应为 `npm-publish.yml`，不要填完整的 `.github/workflows/...` 路径。
+如果这个包还没有首发，只要 npm 上已经存在 `hagicode` scope，且当前发布身份有权创建 `@hagicode/skillsbase`，也仍然可以正常发布。
 npm 官方当前要求 Node.js `>= 22.14.0` 且 npm `>= 11.5.1`。

package/dist/cli.mjs

@@ -63,7 +63,6 @@ var DEFAULT_INSTALL_AGENT = "codex";
 var DEFAULT_SKILLS_ROOT = "skills";
 var DEFAULT_METADATA_FILE = ".skill-source.json";
 var DEFAULT_MANAGED_BY = "skillsbase";
-var DEFAULT_NODE_VERSION = "22.12.0";
 //#endregion
 //#region src/lib/files.ts
 async function pathExists(targetPath) {
@@ -817,7 +816,7 @@ async function writeManagedFile(targetPath, content, options = {}) {
 }
 async function writeGithubActions(repoPath, options = {}) {
 	const kind = options.kind ?? "workflow";
-	const variables = { NODE_VERSION: DEFAULT_NODE_VERSION };
+	const variables = { NODE_VERSION: "24" };
 	const targets = [];
 	if (kind === "workflow" || kind === "all") targets.push({
 		relativePath: path.join(".github", "workflows", "skills-sync.yml"),

package/package.json

@@ -1,7 +1,8 @@
 {
   "name": "@hagicode/skillsbase",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "Managed skills repository CLI",
+  "license": "MIT",
   "homepage": "https://github.com/HagiCode-org/skillsbase#readme",
   "bugs": {
     "url": "https://github.com/HagiCode-org/skillsbase/issues"
@@ -35,7 +36,7 @@
     "typecheck": "tsc --noEmit -p tsconfig.json"
   },
   "engines": {
-    "node": ">=22.12.0",
+    "node": ">=24.0.0",
     "npm": ">=10.9.2"
   },
   "publishConfig": {