@hasna/skills 0.1.31 → 0.1.33

package/dist/index.js

@@ -3094,7 +3094,13 @@ function formatCost(cents) {
   return `$${(cents / 100).toFixed(2)}`;
 }
 function getAllPremiumSlugs() {
-  return [...PREMIUM_SKILLS.map((s) => s.slug), ARTICLE_GENERATION_SLUG];
+  return [
+    ...new Set([
+      ...PREMIUM_SKILLS.map((skill) => skill.slug),
+      ...MEDIA_GENERATION_PRICES.map((price) => price.slug),
+      ARTICLE_GENERATION_SLUG
+    ])
+  ].sort();
 }
 
 // src/lib/skillinfo.ts
@@ -3395,19 +3401,34 @@ import { existsSync as existsSync6, readFileSync as readFileSync6, writeFileSync
 import { join as join6, dirname as dirname2 } from "path";
 import { homedir as homedir3 } from "os";
 var ENUM_KEYS = {
-  mode: ["local", "skills.md"],
   defaultAgent: ["claude", "codex", "gemini", "pi", "opencode", "all"],
   defaultScope: ["global", "project"],
   format: ["compact", "json", "csv"]
 };
 var STRING_KEYS = ["apiUrl"];
+var MODE_VALUES = ["local", "hosted"];
+var MODE_ALIASES = {
+  local: "local",
+  offline: "local",
+  hosted: "hosted",
+  remote: "hosted",
+  "skills.md": "hosted",
+  skillsmd: "hosted"
+};
 function validKeys() {
-  return [...Object.keys(ENUM_KEYS), ...STRING_KEYS];
+  return ["mode", ...Object.keys(ENUM_KEYS), ...STRING_KEYS];
+}
+function allowedValues(key) {
+  if (key === "mode")
+    return MODE_VALUES;
+  return ENUM_KEYS[key];
 }
 function normalizeConfigValue(key, value) {
   if (typeof value !== "string")
     return;
-  const allowed = ENUM_KEYS[key];
+  if (key === "mode")
+    return MODE_ALIASES[value.trim().toLowerCase()];
+  const allowed = allowedValues(key);
   if (allowed)
     return allowed.includes(value) ? value : undefined;
   if (key === "apiUrl") {
@@ -3471,7 +3492,7 @@ function saveConfig(key, value, scope = "project") {
   }
   const normalized = normalizeConfigValue(key, value);
   if (normalized === undefined) {
-    const allowed = ENUM_KEYS[key];
+    const allowed = allowedValues(key);
     throw new Error(allowed ? `Invalid value '${value}' for ${key}. Allowed: ${allowed.join(", ")}` : `Invalid value '${value}' for ${key}. Expected an http(s) URL`);
   }
   const filePath = getConfigPath(scope);
@@ -17028,17 +17049,18 @@ function date4(params) {
 // node_modules/zod/v4/classic/external.js
 config(en_default());
 // src/lib/auth-store.ts
-import { mkdirSync as mkdirSync4, readFileSync as readFileSync7, writeFileSync as writeFileSync4, unlinkSync } from "fs";
+import { existsSync as existsSync7, mkdirSync as mkdirSync4, readFileSync as readFileSync7, writeFileSync as writeFileSync4, unlinkSync } from "fs";
 import { join as join7 } from "path";
 import { homedir as homedir4 } from "os";
-var AUTH_DIR = join7(homedir4(), ".skills");
+var AUTH_DIR = join7(homedir4(), ".hasna", "skills");
 var AUTH_FILE = join7(AUTH_DIR, "auth.json");
+var LEGACY_AUTH_FILE = join7(homedir4(), ".skills", "auth.json");
 var cachedConfig;
 function getAuthConfig() {
   if (cachedConfig !== undefined)
     return cachedConfig;
   try {
-    const raw = readFileSync7(AUTH_FILE, "utf-8");
+    const raw = readFileSync7(existsSync7(AUTH_FILE) ? AUTH_FILE : LEGACY_AUTH_FILE, "utf-8");
     const config2 = JSON.parse(raw);
     if (!config2.apiKey || !config2.email) {
       cachedConfig = null;
@@ -17472,14 +17494,14 @@ function createRemoteSkillsClient() {
   return new RemoteSkillsClient(apiKey);
 }
 // src/lib/scheduler.ts
-import { existsSync as existsSync7, readFileSync as readFileSync8, writeFileSync as writeFileSync5, mkdirSync as mkdirSync5 } from "fs";
+import { existsSync as existsSync8, readFileSync as readFileSync8, writeFileSync as writeFileSync5, mkdirSync as mkdirSync5 } from "fs";
 import { join as join8 } from "path";
 function getSchedulesPath(targetDir = process.cwd()) {
   return join8(targetDir, ".skills", "schedules.json");
 }
 function loadSchedules(targetDir = process.cwd()) {
   const path = getSchedulesPath(targetDir);
-  if (existsSync7(path)) {
+  if (existsSync8(path)) {
     try {
       return JSON.parse(readFileSync8(path, "utf-8"));
     } catch {}
@@ -17489,7 +17511,7 @@ function loadSchedules(targetDir = process.cwd()) {
 function saveSchedules(data, targetDir = process.cwd()) {
   const path = getSchedulesPath(targetDir);
   const dir = join8(targetDir, ".skills");
-  if (!existsSync7(dir))
+  if (!existsSync8(dir))
     mkdirSync5(dir, { recursive: true });
   writeFileSync5(path, JSON.stringify(data, null, 2));
 }
@@ -17676,7 +17698,7 @@ function recordScheduleRun(id, status, targetDir) {
   saveSchedules(data, targetDir);
 }
 // src/lib/skill-validation.ts
-import { existsSync as existsSync8, lstatSync, readFileSync as readFileSync9, readdirSync as readdirSync3, statSync as statSync2 } from "fs";
+import { existsSync as existsSync9, lstatSync, readFileSync as readFileSync9, readdirSync as readdirSync3, statSync as statSync2 } from "fs";
 import { isAbsolute, join as join9, normalize } from "path";
 var DOC_FILES = ["SKILL.md", "README.md", "CLAUDE.md"];
 var RESERVED_SKILL_ENTRIES = new Set([
@@ -17740,6 +17762,25 @@ function isSafeRelativePath(value) {
   const normalized = normalize(value).replace(/\\/g, "/");
   return normalized !== ".." && !normalized.startsWith("../") && !normalized.includes("/../");
 }
+function isHostedPackageMetadata(pkg) {
+  const skills = asRecord(pkg.skills);
+  if (!skills)
+    return false;
+  const runtime = typeof skills.runtime === "string" ? skills.runtime.trim().toLowerCase() : "";
+  const source = typeof skills.source === "string" ? skills.source.trim().toLowerCase() : "";
+  return runtime === "hosted" || source === "remote" || source === "private-hosted";
+}
+function isHostedMetadataSkill(skillName, frontmatter, registryMeta, packageDeclaresHosted) {
+  if (packageDeclaresHosted)
+    return true;
+  if (isPremiumSkill(skillName))
+    return true;
+  if (frontmatter?.source === "private-hosted")
+    return true;
+  if (frontmatter?.source === "remote" && !registryMeta?.tags.includes("local"))
+    return true;
+  return false;
+}
 function parseSkillFrontmatter(content) {
   const match = content.match(/^---\r?\n([\s\S]*?)\r?\n---/);
   if (!match)
@@ -17789,11 +17830,13 @@ function validateSkillDirectory(name, skillPath, registryMeta) {
   const bareName = name;
   const issues = [];
   const warnings = [];
+  let packageDeclaresHosted = false;
+  let packageSkillSource;
   const metadata = {
     binCommands: [],
     docFiles: []
   };
-  if (!existsSync8(skillPath)) {
+  if (!existsSync9(skillPath)) {
     add(issues, "skill.dir_missing", `Skill directory not found: ${skillPath}`);
     return {
       name: bareName,
@@ -17820,14 +17863,14 @@ function validateSkillDirectory(name, skillPath, registryMeta) {
     }
   }
   for (const docFile of DOC_FILES) {
-    if (existsSync8(join9(skillPath, docFile)))
+    if (existsSync9(join9(skillPath, docFile)))
       metadata.docFiles.push(docFile);
   }
   if (metadata.docFiles.length === 0) {
     add(issues, "skill.docs_missing", "Missing documentation file: expected SKILL.md, README.md, or CLAUDE.md");
   }
   const skillMdPath = join9(skillPath, "SKILL.md");
-  if (existsSync8(skillMdPath)) {
+  if (existsSync9(skillMdPath)) {
     const frontmatter = parseSkillFrontmatter(readFileSync9(skillMdPath, "utf-8"));
     if (!frontmatter) {
       add(warnings, "skill.frontmatter_missing", "SKILL.md has no YAML frontmatter");
@@ -17862,7 +17905,7 @@ function validateSkillDirectory(name, skillPath, registryMeta) {
     add(warnings, "skill.skill_md_missing", "Missing SKILL.md; registry docs may need generated agent-facing instructions");
   }
   const pkgPath = join9(skillPath, "package.json");
-  if (!existsSync8(pkgPath)) {
+  if (!existsSync9(pkgPath)) {
     add(issues, "package.missing", "Missing package.json");
   } else {
     try {
@@ -17871,6 +17914,13 @@ function validateSkillDirectory(name, skillPath, registryMeta) {
       if (!packageRecord) {
         add(issues, "package.invalid_shape", "package.json must be an object");
       } else {
+        packageDeclaresHosted = isHostedPackageMetadata(pkg);
+        const skillsRecord = asRecord(pkg.skills);
+        if (skillsRecord && typeof skillsRecord.source === "string") {
+          packageSkillSource = skillsRecord.source;
+        }
+        const hostedMetadata2 = isHostedMetadataSkill(bareName, metadata.skillMdFrontmatter, registryMeta, packageDeclaresHosted);
+        metadata.runtime = hostedMetadata2 ? "hosted" : "local";
         if (typeof pkg.name === "string") {
           metadata.packageName = pkg.name;
           if (pkg.name !== bareName) {
@@ -17887,12 +17937,18 @@ function validateSkillDirectory(name, skillPath, registryMeta) {
           ...metadata.provenance ?? { directoryName: bareName },
           ...typeof pkg.name === "string" ? { packageName: pkg.name } : {},
           ...typeof pkg.version === "string" && pkg.version.trim() ? { packageVersion: pkg.version } : {},
-          ...registryMeta?.source ? { registrySource: registryMeta.source } : {}
+          ...registryMeta?.source ? { registrySource: registryMeta.source } : {},
+          ...packageSkillSource ? { packageSkillSource } : {}
         };
         const binRecord = asRecord(pkg.bin);
         if (!binRecord || Object.keys(binRecord).length === 0) {
-          add(issues, "package.bin_missing", "package.json missing non-empty bin object");
+          if (!hostedMetadata2) {
+            add(issues, "package.bin_missing", "package.json missing non-empty bin object");
+          }
         } else {
+          if (hostedMetadata2) {
+            add(issues, "package.hosted_bin_forbidden", "Hosted metadata packages must not expose a local bin entry");
+          }
           for (const [command, target] of Object.entries(binRecord)) {
             if (!VALID_BIN_COMMAND.test(command)) {
               add(issues, "package.bin_command_invalid", `package.json bin command '${command}' must use lowercase letters, numbers, dots, underscores, or hyphens`);
@@ -17907,7 +17963,7 @@ function validateSkillDirectory(name, skillPath, registryMeta) {
               continue;
             }
             const targetPath = join9(skillPath, target);
-            if (!existsSync8(targetPath)) {
+            if (!existsSync9(targetPath)) {
               add(warnings, "package.bin_target_missing", `package.json bin '${command}' target '${target}' is not present before build`);
             } else if (statSync2(targetPath).isDirectory()) {
               add(issues, "package.bin_target_directory", `package.json bin '${command}' target '${target}' must point to a file, not a directory`);
@@ -17919,13 +17975,19 @@ function validateSkillDirectory(name, skillPath, registryMeta) {
       add(issues, "package.invalid_json", `package.json is invalid JSON: ${error48.message}`);
     }
   }
+  const hostedMetadata = isHostedMetadataSkill(bareName, metadata.skillMdFrontmatter, registryMeta, packageDeclaresHosted);
+  metadata.runtime = hostedMetadata ? "hosted" : "local";
   const srcDir = join9(skillPath, "src");
-  if (!existsSync8(srcDir)) {
+  if (hostedMetadata) {
+    if (existsSync9(srcDir)) {
+      add(issues, "skill.hosted_source_forbidden", "Hosted metadata skills must not include local implementation source");
+    }
+  } else if (!existsSync9(srcDir)) {
     add(issues, "skill.src_missing", "Missing src/ directory");
-  } else if (!existsSync8(join9(srcDir, "index.ts")) && !existsSync8(join9(srcDir, "index.js"))) {
+  } else if (!existsSync9(join9(srcDir, "index.ts")) && !existsSync9(join9(srcDir, "index.js"))) {
     add(issues, "skill.src_index_missing", "Missing src/index.ts or src/index.js");
   } else {
-    const indexPath = existsSync8(join9(srcDir, "index.ts")) ? join9(srcDir, "index.ts") : join9(srcDir, "index.js");
+    const indexPath = existsSync9(join9(srcDir, "index.ts")) ? join9(srcDir, "index.ts") : join9(srcDir, "index.js");
     const size = statSync2(indexPath).size;
     if (size < 50)
       add(warnings, "skill.src_index_minimal", `Source entry point is very small (${size}B)`);
@@ -17948,7 +18010,7 @@ function validateRegistryConsistency(registry2, skillsDir) {
     seen.add(name);
     return false;
   })));
-  const skillDirs = existsSync8(skillsDir) ? readdirSync3(skillsDir).filter((entry) => {
+  const skillDirs = existsSync9(skillsDir) ? readdirSync3(skillsDir).filter((entry) => {
     const fullPath = join9(skillsDir, entry);
     return !entry.startsWith(".") && entry !== "_common" && statSync2(fullPath).isDirectory();
   }) : [];
@@ -17969,7 +18031,7 @@ import { dirname as dirname3, relative as relative2 } from "path";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.1.31",
+  version: "0.1.33",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {
@@ -18763,7 +18825,7 @@ function clone2(value) {
   return JSON.parse(JSON.stringify(value));
 }
 // src/lib/feedback.ts
-import { existsSync as existsSync9, mkdirSync as mkdirSync7 } from "fs";
+import { existsSync as existsSync10, mkdirSync as mkdirSync7 } from "fs";
 import { homedir as homedir5 } from "os";
 import { dirname as dirname4, join as join10 } from "path";
 import { Database } from "bun:sqlite";
@@ -18773,7 +18835,7 @@ function getFeedbackDbPath() {
 function getFeedbackDb() {
   const dbPath = getFeedbackDbPath();
   const dir = dirname4(dbPath);
-  if (!existsSync9(dir))
+  if (!existsSync10(dir))
     mkdirSync7(dir, { recursive: true });
   const db = new Database(dbPath);
   db.exec("PRAGMA journal_mode = WAL");

package/dist/lib/config.d.ts

@@ -9,7 +9,7 @@
  * Values from the project config override global config.
  */
 export interface SkillsConfig {
-    mode?: "local" | "skills.md";
+    mode?: "local" | "hosted";
     defaultAgent?: "claude" | "codex" | "gemini" | "pi" | "opencode" | "all";
     defaultScope?: "global" | "project";
     format?: "compact" | "json" | "csv";

package/dist/lib/skill-validation.d.ts

@@ -16,6 +16,7 @@ export interface SkillValidationResult {
         docFiles: string[];
         skillMdFrontmatter?: SkillFrontmatter;
         provenance?: SkillValidationProvenance;
+        runtime?: "local" | "hosted";
     };
 }
 export interface RegistryConsistencyResult {
@@ -39,6 +40,7 @@ export interface SkillValidationProvenance {
     packageVersion?: string;
     frontmatterSource?: string;
     registrySource?: string;
+    packageSkillSource?: string;
 }
 export declare function parseSkillFrontmatter(content: string): SkillFrontmatter | null;
 export declare function validateSkillDirectory(name: string, skillPath: string, registryMeta?: SkillMeta): SkillValidationResult;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/skills",
-  "version": "0.1.31",
+  "version": "0.1.33",
   "description": "Skills library for AI coding agents",
   "type": "module",
   "bin": {

package/skills/ad-creative-pack/package.json

@@ -1,14 +1,11 @@
 {
   "name": "ad-creative-pack",
   "version": "0.1.0",
+  "private": true,
   "description": "Hosted premium paid ad creative artifact generator",
   "type": "module",
-  "bin": {
-    "ad-creative-pack": "./src/index.ts"
-  },
-  "dependencies": {},
-  "devDependencies": {
-    "@types/bun": "latest",
-    "typescript": "^5.7.0"
+  "skills": {
+    "runtime": "hosted",
+    "source": "remote"
   }
 }

package/skills/api-docs-portal/package.json

@@ -1,9 +1,11 @@
 {
   "name": "api-docs-portal",
   "version": "0.1.0",
-  "type": "module",
   "private": true,
-  "bin": {
-    "api-docs-portal": "src/index.ts"
+  "description": "Hosted skill metadata for api-docs-portal",
+  "type": "module",
+  "skills": {
+    "runtime": "hosted",
+    "source": "remote"
   }
 }

package/skills/audio/package.json

@@ -1,29 +1,11 @@
 {
   "name": "audio",
   "version": "1.0.0",
+  "private": true,
   "description": "Generate speech and audio using provider-cost AI backends",
-  "main": "src/index.ts",
   "type": "module",
-  "bin": {
-    "audio": "src/index.ts"
-  },
-  "scripts": {
-    "start": "bun run src/index.ts",
-    "generate": "bun run src/index.ts generate"
-  },
-  "keywords": [
-    "audio-generation",
-    "speech",
-    "tts",
-    "ai",
-    "openai",
-    "minimax",
-    "gemini"
-  ],
-  "devDependencies": {
-    "@types/bun": "latest"
-  },
-  "peerDependencies": {
-    "typescript": "^5.0.0"
+  "skills": {
+    "runtime": "hosted",
+    "source": "remote"
   }
 }

package/skills/audio-transcript-pack/package.json

@@ -4,7 +4,8 @@
   "private": true,
   "description": "Hosted premium audio transcript package generator",
   "type": "module",
-  "bin": {
-    "audio-transcript-pack": "./src/index.ts"
+  "skills": {
+    "runtime": "hosted",
+    "source": "remote"
   }
 }

package/skills/blog-article/package.json

@@ -1,27 +1,11 @@
 {
   "name": "blog-article",
   "version": "0.1.0",
+  "private": true,
   "description": "Hosted premium blog article artifact generator",
   "type": "module",
-  "bin": {
-    "blog-article": "./src/index.ts"
-  },
-  "scripts": {
-    "dev": "bun run src/index.ts",
-    "build": "bun build src/index.ts --outdir dist --target node",
-    "typecheck": "tsc --noEmit"
-  },
-  "dependencies": {},
-  "devDependencies": {
-    "@types/bun": "latest",
-    "typescript": "^5.7.0"
-  },
-  "publishConfig": {
-    "access": "restricted",
-    "registry": "https://registry.npmjs.org/"
-  },
-  "files": [
-    "src",
-    "tsconfig.json"
-  ]
+  "skills": {
+    "runtime": "hosted",
+    "source": "remote"
+  }
 }

package/skills/brand-kit/package.json

@@ -1,14 +1,11 @@
 {
   "name": "brand-kit",
   "version": "0.1.0",
+  "private": true,
   "description": "Hosted premium brand kit artifact generator",
   "type": "module",
-  "bin": {
-    "brand-kit": "./src/index.ts"
-  },
-  "dependencies": {},
-  "devDependencies": {
-    "@types/bun": "latest",
-    "typescript": "^5.7.0"
+  "skills": {
+    "runtime": "hosted",
+    "source": "remote"
   }
 }

package/skills/brand-photo-shoot/package.json

@@ -4,7 +4,8 @@
   "private": true,
   "description": "Hosted premium brand photo shoot package generator",
   "type": "module",
-  "bin": {
-    "brand-photo-shoot": "./src/index.ts"
+  "skills": {
+    "runtime": "hosted",
+    "source": "remote"
   }
 }

package/skills/browse/package.json

@@ -1,40 +1,11 @@
 {
   "name": "browse",
   "version": "1.0.0",
+  "private": true,
   "description": "MCP Browse server for AI agents - Browser automation using Browser-Use Cloud API",
   "type": "module",
-  "main": "src/index.ts",
-  "bin": {
-    "browse": "src/index.ts"
-  },
-  "scripts": {
-    "start": "bun run src/index.ts",
-    "dev": "bun run --watch src/index.ts",
-    "sse": "bun run src/sse-server.ts",
-    "sse:dev": "bun run --watch src/sse-server.ts"
-  },
-  "keywords": [
-    "browser",
-    "automation",
-    "scraping",
-    "web",
-    "ai-agent",
-    "browser-use",
-    "mcp"
-  ],
-  "author": "",
-  "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.0.0",
-    "cors": "^2.8.5",
-    "express": "^4.21.0",
-    "zod": "^3.23.8"
-  },
-  "devDependencies": {
-    "@types/bun": "latest",
-    "@types/cors": "^2.8.17",
-    "@types/express": "^4.17.21"
-  },
-  "peerDependencies": {
-    "typescript": "^5.0.0"
+  "skills": {
+    "runtime": "hosted",
+    "source": "remote"
   }
 }

package/skills/contract-review-report/package.json

@@ -4,7 +4,8 @@
   "private": true,
   "description": "Hosted premium contract review report generator",
   "type": "module",
-  "bin": {
-    "contract-review-report": "./src/index.ts"
+  "skills": {
+    "runtime": "hosted",
+    "source": "remote"
   }
 }

package/skills/customer-feedback-report/package.json

@@ -4,7 +4,8 @@
   "private": true,
   "description": "Hosted premium customer feedback report generator",
   "type": "module",
-  "bin": {
-    "customer-feedback-report": "./src/index.ts"
+  "skills": {
+    "runtime": "hosted",
+    "source": "remote"
   }
 }

package/skills/deepresearch/package.json

@@ -1,44 +1,11 @@
 {
   "name": "deepresearch",
   "version": "0.1.3",
+  "private": true,
   "description": "Agentic deep research skill using Exa.ai for search and Claude/OpenAI for synthesis",
   "type": "module",
-  "main": "src/index.ts",
-  "bin": {
-    "deepresearch": "src/index.ts"
-  },
-  "files": [
-    "src",
-    "README.md",
-    "SKILL.md"
-  ],
-  "publishConfig": {
-    "access": "restricted"
-  },
-  "keywords": [
-    "research",
-    "ai",
-    "exa",
-    "claude",
-    "openai",
-    "rag",
-    "deep-research"
-  ],
-  "scripts": {
-    "start": "bun run src/index.ts",
-    "dev": "bun --watch src/index.ts",
-    "typecheck": "tsc --noEmit"
-  },
-  "dependencies": {
-    "@anthropic-ai/sdk": "^0.30.0",
-    "chalk": "^5.3.0",
-    "commander": "^12.1.0",
-    "exa-js": "^1.0.12",
-    "openai": "^4.0.0",
-    "ora": "^8.0.1"
-  },
-  "devDependencies": {
-    "@types/bun": "latest",
-    "typescript": "^5.7.0"
+  "skills": {
+    "runtime": "hosted",
+    "source": "remote"
   }
 }

package/skills/domainpurchase/SKILL.md

@@ -1,46 +1,29 @@
 ---
 name: domainpurchase
-description: Purchase and manage domains via GoDaddy API with CLI and HTTP server
+description: Public contract for domain purchase workflows through hosted or external registrar connectors.
 ---
 
 # Domain Purchase
 
-Purchase and manage domains via the GoDaddy API. Provides both a CLI tool and an HTTP server for domain purchasing workflows.
-
-## Features
-
-- Purchase domains through GoDaddy API
-- Manage domain configurations and settings
-- HTTP server mode for API-driven purchases
-- AWS Secrets Manager integration for credential storage
-- Remote server proxy mode for centralized domain management
+This public skill describes domain purchase and management workflows for agents.
+The OSS package intentionally does not ship registrar purchasing logic, remote
+server proxy code, or cloud secret-store integration.
 
 ## Usage
 
 ```bash
-# Run the CLI
-domainpurchase
-
-# Start the HTTP server
-bun run start
-
-# Development mode with watch
-bun run dev
+skills run domainpurchase --help
 ```
 
-## Environment Variables
+For production domain purchase workflows, route execution through a hosted or
+external connector that owns registrar credentials, audit logs, payment
+approval, and account-specific policy.
 
-| Variable | Description |
-|----------|-------------|
-| `DOMAIN_API_KEY` | GoDaddy API key |
-| `DOMAIN_API_SECRET` | GoDaddy API secret |
-| `DOMAIN_CUSTOMER_ID` | GoDaddy customer ID |
-| `DOMAIN_API_URL` | API base URL (default: `https://api.godaddy.com`) |
-| `DOMAIN_USE_REMOTE_SERVER` | Use remote server proxy (`true`/`false`) |
-| `DOMAIN_REMOTE_SERVER_URL` | Remote server URL |
-| `DOMAIN_REMOTE_API_KEY` | Remote server API key |
-| `AWS_SECRET_NAME` | AWS Secrets Manager secret name for credentials |
+## Boundary
 
-## Configuration
+- Local package: skill metadata, docs, and a CLI stub.
+- Hosted or external connector: registrar API calls, credentials, approvals,
+  purchase records, and billing-sensitive workflows.
 
-Config is stored at `~/.config/service-domainpurchase/config.json`. Environment variables take priority over the config file. AWS Secrets Manager is also supported as a credential source.
+Provider credentials and cloud secret names must not be stored in this OSS
+skill package.