@hasna/skills 0.1.32 → 0.1.34

package/README.md

@@ -113,7 +113,6 @@ requirements explicitly document local provider use.
 | `skills schedule list` | | List all schedules (enabled/disabled/last run) |
 | `skills mcp` | | Start MCP server on stdio |
 | `skills mcp --register claude` | | Register the Skills MCP server in an agent config (also `codex`, `gemini`, `opencode`, `all`) |
-| `skills serve` | | Start the HTTP dashboard on localhost |
 | `skills self-update` | | Update this package to the latest version |
 | `skills completion <shell>` | | Generate shell completions (bash, zsh, fish) |
 
@@ -224,22 +223,12 @@ Hosted account, billing, and credit management use the configured hosted API.
 The public package only stores local configuration and CLI credentials; Stripe,
 customer records, and hosted execution remain platform concerns.
 
-## Dashboard
-
-```bash
-skills serve              # Start HTTP server (opens browser automatically)
-skills serve --no-open    # Start without opening the browser
-```
-
-Dashboard features: searchable/filterable skills table, detail dialogs, stats cards, dark/light/system theme, oklch color tokens.
-
 ## Project Structure
 
 ```
 src/
 ├── cli/index.tsx           # Commander.js CLI + Ink TUI
 ├── mcp/index.ts            # MCP server (stdio) with ~20 tools
-├── server/serve.ts          # Bun.serve HTTP server + REST API
 ├── lib/
 │   ├── registry.ts          # 202+ entries, search, categories, tags
 │   ├── installer.ts         # Project pins and disabled source-copy paths
@@ -254,9 +243,7 @@ src/
 
 skills/                      # 202+ public skill contracts and local OSS skills
 ├── _common/                 # Shared utilities
-└── */                       # Local skills include src/; premium package output excludes private src/
-
-dashboard/                   # Next.js + React 19 + Tailwind v4 app
+└── */                       # Local skills include src/; hosted skills are metadata-only
 ```
 
 ## Project Runtime State
@@ -283,8 +270,6 @@ belong in `~/.cache/skills` or the remote API, not inside project `.skills`.
 bun install
 bun run build              # Build CLI, MCP, library, and types
 bun run dev                # Run CLI in dev mode (no build needed)
-bun run dashboard:dev       # Vite dev server for web dashboard
-bun run server:dev          # HTTP server with --watch
 bun test                   # Run all tests
 bun run typecheck          # TypeScript type checking
 ```

package/bin/index.js

@@ -1910,7 +1910,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.1.32",
+    version: "0.1.34",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {
@@ -6648,7 +6648,13 @@ function formatCost(cents) {
   return `$${(cents / 100).toFixed(2)}`;
 }
 function getAllPremiumSlugs() {
-  return [...PREMIUM_SKILLS.map((s) => s.slug), ARTICLE_GENERATION_SLUG];
+  return [
+    ...new Set([
+      ...PREMIUM_SKILLS.map((skill) => skill.slug),
+      ...MEDIA_GENERATION_PRICES.map((price) => price.slug),
+      ARTICLE_GENERATION_SLUG
+    ])
+  ].sort();
 }
 var MUSIC_ALBUM_SLUG = "music-album", MUSIC_ALBUM_SONG_COUNTS, MUSIC_ALBUM_COST_CENTS_PER_SONG = 150, PREMIUM_SKILLS, ARTICLE_GENERATION_SLUG = "blog-article", ARTICLE_MAX_COUNT = 12, ARTICLE_COUNT_ERROR, ARTICLE_INTERNAL_COST_CENTS = 5, ARTICLE_MARKUP_MULTIPLIER = 5, ARTICLE_USER_COST_CENTS, ARTICLE_TONES, ARTICLE_LENGTHS, MEDIA_GENERATION_PRICES, premiumIndex, mediaSlugs;
 var init_pricing = __esm(() => {
@@ -21971,6 +21977,25 @@ function isSafeRelativePath(value) {
   const normalized = normalize(value).replace(/\\/g, "/");
   return normalized !== ".." && !normalized.startsWith("../") && !normalized.includes("/../");
 }
+function isHostedPackageMetadata(pkg) {
+  const skills = asRecord(pkg.skills);
+  if (!skills)
+    return false;
+  const runtime = typeof skills.runtime === "string" ? skills.runtime.trim().toLowerCase() : "";
+  const source = typeof skills.source === "string" ? skills.source.trim().toLowerCase() : "";
+  return runtime === "hosted" || source === "remote" || source === "private-hosted";
+}
+function isHostedMetadataSkill(skillName, frontmatter, registryMeta, packageDeclaresHosted) {
+  if (packageDeclaresHosted)
+    return true;
+  if (isPremiumSkill(skillName))
+    return true;
+  if (frontmatter?.source === "private-hosted")
+    return true;
+  if (frontmatter?.source === "remote" && !registryMeta?.tags.includes("local"))
+    return true;
+  return false;
+}
 function parseSkillFrontmatter(content) {
   const match = content.match(/^---\r?\n([\s\S]*?)\r?\n---/);
   if (!match)
@@ -22020,6 +22045,8 @@ function validateSkillDirectory(name, skillPath, registryMeta) {
   const bareName = name;
   const issues = [];
   const warnings = [];
+  let packageDeclaresHosted = false;
+  let packageSkillSource;
   const metadata = {
     binCommands: [],
     docFiles: []
@@ -22102,6 +22129,13 @@ function validateSkillDirectory(name, skillPath, registryMeta) {
       if (!packageRecord) {
         add(issues, "package.invalid_shape", "package.json must be an object");
       } else {
+        packageDeclaresHosted = isHostedPackageMetadata(pkg);
+        const skillsRecord = asRecord(pkg.skills);
+        if (skillsRecord && typeof skillsRecord.source === "string") {
+          packageSkillSource = skillsRecord.source;
+        }
+        const hostedMetadata2 = isHostedMetadataSkill(bareName, metadata.skillMdFrontmatter, registryMeta, packageDeclaresHosted);
+        metadata.runtime = hostedMetadata2 ? "hosted" : "local";
         if (typeof pkg.name === "string") {
           metadata.packageName = pkg.name;
           if (pkg.name !== bareName) {
@@ -22118,12 +22152,18 @@ function validateSkillDirectory(name, skillPath, registryMeta) {
           ...metadata.provenance ?? { directoryName: bareName },
           ...typeof pkg.name === "string" ? { packageName: pkg.name } : {},
           ...typeof pkg.version === "string" && pkg.version.trim() ? { packageVersion: pkg.version } : {},
-          ...registryMeta?.source ? { registrySource: registryMeta.source } : {}
+          ...registryMeta?.source ? { registrySource: registryMeta.source } : {},
+          ...packageSkillSource ? { packageSkillSource } : {}
         };
         const binRecord = asRecord(pkg.bin);
         if (!binRecord || Object.keys(binRecord).length === 0) {
-          add(issues, "package.bin_missing", "package.json missing non-empty bin object");
+          if (!hostedMetadata2) {
+            add(issues, "package.bin_missing", "package.json missing non-empty bin object");
+          }
         } else {
+          if (hostedMetadata2) {
+            add(issues, "package.hosted_bin_forbidden", "Hosted metadata packages must not expose a local bin entry");
+          }
           for (const [command, target] of Object.entries(binRecord)) {
             if (!VALID_BIN_COMMAND.test(command)) {
               add(issues, "package.bin_command_invalid", `package.json bin command '${command}' must use lowercase letters, numbers, dots, underscores, or hyphens`);
@@ -22150,8 +22190,14 @@ function validateSkillDirectory(name, skillPath, registryMeta) {
       add(issues, "package.invalid_json", `package.json is invalid JSON: ${error48.message}`);
     }
   }
+  const hostedMetadata = isHostedMetadataSkill(bareName, metadata.skillMdFrontmatter, registryMeta, packageDeclaresHosted);
+  metadata.runtime = hostedMetadata ? "hosted" : "local";
   const srcDir = join7(skillPath, "src");
-  if (!existsSync7(srcDir)) {
+  if (hostedMetadata) {
+    if (existsSync7(srcDir)) {
+      add(issues, "skill.hosted_source_forbidden", "Hosted metadata skills must not include local implementation source");
+    }
+  } else if (!existsSync7(srcDir)) {
     add(issues, "skill.src_missing", "Missing src/ directory");
   } else if (!existsSync7(join7(srcDir, "index.ts")) && !existsSync7(join7(srcDir, "index.js"))) {
     add(issues, "skill.src_index_missing", "Missing src/index.ts or src/index.js");
@@ -22172,6 +22218,7 @@ function validateSkillDirectory(name, skillPath, registryMeta) {
 }
 var DOC_FILES, RESERVED_SKILL_ENTRIES, KNOWN_TOP_LEVEL_ENTRIES, VALID_PROVENANCE_SOURCES, VALID_BIN_COMMAND;
 var init_skill_validation = __esm(() => {
+  init_pricing();
   DOC_FILES = ["SKILL.md", "README.md", "CLAUDE.md"];
   RESERVED_SKILL_ENTRIES = new Set([
     ".env",
@@ -39522,7 +39569,7 @@ function registerOperationTools(server) {
       const run = completeSkillRun(runContext, { status: "failed", error: error48, costCents });
       return mcpError("AUTH_REQUIRED", `${error48}. Local run metadata: ${run.paths.runDir}/run.json`, ["skills auth login"]);
     }
-    if (apiKey) {
+    if (isPremiumSkill2(skillName) && apiKey) {
       try {
         const { RemoteSkillsClient: RemoteSkillsClient2 } = await Promise.resolve().then(() => (init_remote_client(), exports_remote_client));
         const client = new RemoteSkillsClient2(apiKey);
@@ -39552,14 +39599,11 @@ function registerOperationTools(server) {
           nextActions: remoteRunNextActions(remoteRunId)
         });
       } catch (err) {
-        console.error(`[skills] hosted API failed for ${skillName}, falling back to local:`, err.message);
-        if (isPremiumSkill2(skillName)) {
-          const error48 = `Hosted skill ${skillName} requires hosted access: ${err.message}`;
-          writeRunLogs(runContext, "", error48 + `
+        const error48 = `Hosted skill ${skillName} requires hosted access: ${err.message}`;
+        writeRunLogs(runContext, "", error48 + `
 `);
-          const localRun2 = completeSkillRun(runContext, { status: "failed", error: error48 });
-          return mcpError("PLATFORM_ERROR", `${error48}. Local run metadata: ${localRun2.paths.runDir}/run.json`);
-        }
+        const localRun2 = completeSkillRun(runContext, { status: "failed", error: error48 });
+        return mcpError("PLATFORM_ERROR", `${error48}. Local run metadata: ${localRun2.paths.runDir}/run.json`);
       }
     }
     const result = await runSkill(skillName, runArgs, {
@@ -41549,7 +41593,6 @@ var init_completion = __esm(() => {
     "categories",
     "tags",
     "mcp",
-    "serve",
     "self-update",
     "completion",
     "export",

package/bin/mcp.js

@@ -6921,7 +6921,13 @@ function formatCost(cents) {
   return `$${(cents / 100).toFixed(2)}`;
 }
 function getAllPremiumSlugs() {
-  return [...PREMIUM_SKILLS.map((s) => s.slug), ARTICLE_GENERATION_SLUG];
+  return [
+    ...new Set([
+      ...PREMIUM_SKILLS.map((skill) => skill.slug),
+      ...MEDIA_GENERATION_PRICES.map((price) => price.slug),
+      ARTICLE_GENERATION_SLUG
+    ])
+  ].sort();
 }
 var MUSIC_ALBUM_SLUG = "music-album", MUSIC_ALBUM_SONG_COUNTS, MUSIC_ALBUM_COST_CENTS_PER_SONG = 150, PREMIUM_SKILLS, ARTICLE_GENERATION_SLUG = "blog-article", ARTICLE_MAX_COUNT = 12, ARTICLE_COUNT_ERROR, ARTICLE_INTERNAL_COST_CENTS = 5, ARTICLE_MARKUP_MULTIPLIER = 5, ARTICLE_USER_COST_CENTS, ARTICLE_TONES, ARTICLE_LENGTHS, MEDIA_GENERATION_PRICES, premiumIndex, mediaSlugs;
 var init_pricing = __esm(() => {
@@ -21787,7 +21793,7 @@ class StdioServerTransport {
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.1.32",
+  version: "0.1.34",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {
@@ -33296,7 +33302,7 @@ function registerOperationTools(server) {
       const run = completeSkillRun(runContext, { status: "failed", error: error48, costCents });
       return mcpError("AUTH_REQUIRED", `${error48}. Local run metadata: ${run.paths.runDir}/run.json`, ["skills auth login"]);
     }
-    if (apiKey) {
+    if (isPremiumSkill2(skillName) && apiKey) {
       try {
         const { RemoteSkillsClient: RemoteSkillsClient2 } = await Promise.resolve().then(() => (init_remote_client(), exports_remote_client));
         const client = new RemoteSkillsClient2(apiKey);
@@ -33326,14 +33332,11 @@ function registerOperationTools(server) {
           nextActions: remoteRunNextActions(remoteRunId)
         });
       } catch (err) {
-        console.error(`[skills] hosted API failed for ${skillName}, falling back to local:`, err.message);
-        if (isPremiumSkill2(skillName)) {
-          const error48 = `Hosted skill ${skillName} requires hosted access: ${err.message}`;
-          writeRunLogs(runContext, "", error48 + `
+        const error48 = `Hosted skill ${skillName} requires hosted access: ${err.message}`;
+        writeRunLogs(runContext, "", error48 + `
 `);
-          const localRun2 = completeSkillRun(runContext, { status: "failed", error: error48 });
-          return mcpError("PLATFORM_ERROR", `${error48}. Local run metadata: ${localRun2.paths.runDir}/run.json`);
-        }
+        const localRun2 = completeSkillRun(runContext, { status: "failed", error: error48 });
+        return mcpError("PLATFORM_ERROR", `${error48}. Local run metadata: ${localRun2.paths.runDir}/run.json`);
       }
     }
     const result = await runSkill(skillName, runArgs, {
@@ -33818,6 +33821,7 @@ function removeSchedule(idOrName, targetDir) {
 }
 
 // src/lib/skill-validation.ts
+init_pricing();
 import { existsSync as existsSync11, lstatSync, readFileSync as readFileSync9, readdirSync as readdirSync4, statSync as statSync3 } from "fs";
 import { isAbsolute, join as join11, normalize } from "path";
 var DOC_FILES = ["SKILL.md", "README.md", "CLAUDE.md"];
@@ -33882,6 +33886,25 @@ function isSafeRelativePath(value) {
   const normalized = normalize(value).replace(/\\/g, "/");
   return normalized !== ".." && !normalized.startsWith("../") && !normalized.includes("/../");
 }
+function isHostedPackageMetadata(pkg) {
+  const skills = asRecord(pkg.skills);
+  if (!skills)
+    return false;
+  const runtime = typeof skills.runtime === "string" ? skills.runtime.trim().toLowerCase() : "";
+  const source = typeof skills.source === "string" ? skills.source.trim().toLowerCase() : "";
+  return runtime === "hosted" || source === "remote" || source === "private-hosted";
+}
+function isHostedMetadataSkill(skillName, frontmatter, registryMeta, packageDeclaresHosted) {
+  if (packageDeclaresHosted)
+    return true;
+  if (isPremiumSkill(skillName))
+    return true;
+  if (frontmatter?.source === "private-hosted")
+    return true;
+  if (frontmatter?.source === "remote" && !registryMeta?.tags.includes("local"))
+    return true;
+  return false;
+}
 function parseSkillFrontmatter(content) {
   const match = content.match(/^---\r?\n([\s\S]*?)\r?\n---/);
   if (!match)
@@ -33931,6 +33954,8 @@ function validateSkillDirectory(name, skillPath, registryMeta) {
   const bareName = name;
   const issues = [];
   const warnings = [];
+  let packageDeclaresHosted = false;
+  let packageSkillSource;
   const metadata = {
     binCommands: [],
     docFiles: []
@@ -34013,6 +34038,13 @@ function validateSkillDirectory(name, skillPath, registryMeta) {
       if (!packageRecord) {
         add(issues, "package.invalid_shape", "package.json must be an object");
       } else {
+        packageDeclaresHosted = isHostedPackageMetadata(pkg);
+        const skillsRecord = asRecord(pkg.skills);
+        if (skillsRecord && typeof skillsRecord.source === "string") {
+          packageSkillSource = skillsRecord.source;
+        }
+        const hostedMetadata2 = isHostedMetadataSkill(bareName, metadata.skillMdFrontmatter, registryMeta, packageDeclaresHosted);
+        metadata.runtime = hostedMetadata2 ? "hosted" : "local";
         if (typeof pkg.name === "string") {
           metadata.packageName = pkg.name;
           if (pkg.name !== bareName) {
@@ -34029,12 +34061,18 @@ function validateSkillDirectory(name, skillPath, registryMeta) {
           ...metadata.provenance ?? { directoryName: bareName },
           ...typeof pkg.name === "string" ? { packageName: pkg.name } : {},
           ...typeof pkg.version === "string" && pkg.version.trim() ? { packageVersion: pkg.version } : {},
-          ...registryMeta?.source ? { registrySource: registryMeta.source } : {}
+          ...registryMeta?.source ? { registrySource: registryMeta.source } : {},
+          ...packageSkillSource ? { packageSkillSource } : {}
         };
         const binRecord = asRecord(pkg.bin);
         if (!binRecord || Object.keys(binRecord).length === 0) {
-          add(issues, "package.bin_missing", "package.json missing non-empty bin object");
+          if (!hostedMetadata2) {
+            add(issues, "package.bin_missing", "package.json missing non-empty bin object");
+          }
         } else {
+          if (hostedMetadata2) {
+            add(issues, "package.hosted_bin_forbidden", "Hosted metadata packages must not expose a local bin entry");
+          }
           for (const [command, target] of Object.entries(binRecord)) {
             if (!VALID_BIN_COMMAND.test(command)) {
               add(issues, "package.bin_command_invalid", `package.json bin command '${command}' must use lowercase letters, numbers, dots, underscores, or hyphens`);
@@ -34061,8 +34099,14 @@ function validateSkillDirectory(name, skillPath, registryMeta) {
       add(issues, "package.invalid_json", `package.json is invalid JSON: ${error48.message}`);
     }
   }
+  const hostedMetadata = isHostedMetadataSkill(bareName, metadata.skillMdFrontmatter, registryMeta, packageDeclaresHosted);
+  metadata.runtime = hostedMetadata ? "hosted" : "local";
   const srcDir = join11(skillPath, "src");
-  if (!existsSync11(srcDir)) {
+  if (hostedMetadata) {
+    if (existsSync11(srcDir)) {
+      add(issues, "skill.hosted_source_forbidden", "Hosted metadata skills must not include local implementation source");
+    }
+  } else if (!existsSync11(srcDir)) {
     add(issues, "skill.src_missing", "Missing src/ directory");
   } else if (!existsSync11(join11(srcDir, "index.ts")) && !existsSync11(join11(srcDir, "index.js"))) {
     add(issues, "skill.src_index_missing", "Missing src/index.ts or src/index.js");

package/dist/cli/commands/runtime.d.ts

@@ -1,5 +1,5 @@
 /**
- * run / mcp / serve / self-update — runtime commands
+ * run / mcp / self-update — runtime commands
  */
 import type { Command } from "commander";
 export declare function registerRuntime(parent: Command): void;

package/dist/index.js

@@ -3094,7 +3094,13 @@ function formatCost(cents) {
   return `$${(cents / 100).toFixed(2)}`;
 }
 function getAllPremiumSlugs() {
-  return [...PREMIUM_SKILLS.map((s) => s.slug), ARTICLE_GENERATION_SLUG];
+  return [
+    ...new Set([
+      ...PREMIUM_SKILLS.map((skill) => skill.slug),
+      ...MEDIA_GENERATION_PRICES.map((price) => price.slug),
+      ARTICLE_GENERATION_SLUG
+    ])
+  ].sort();
 }
 
 // src/lib/skillinfo.ts
@@ -17756,6 +17762,25 @@ function isSafeRelativePath(value) {
   const normalized = normalize(value).replace(/\\/g, "/");
   return normalized !== ".." && !normalized.startsWith("../") && !normalized.includes("/../");
 }
+function isHostedPackageMetadata(pkg) {
+  const skills = asRecord(pkg.skills);
+  if (!skills)
+    return false;
+  const runtime = typeof skills.runtime === "string" ? skills.runtime.trim().toLowerCase() : "";
+  const source = typeof skills.source === "string" ? skills.source.trim().toLowerCase() : "";
+  return runtime === "hosted" || source === "remote" || source === "private-hosted";
+}
+function isHostedMetadataSkill(skillName, frontmatter, registryMeta, packageDeclaresHosted) {
+  if (packageDeclaresHosted)
+    return true;
+  if (isPremiumSkill(skillName))
+    return true;
+  if (frontmatter?.source === "private-hosted")
+    return true;
+  if (frontmatter?.source === "remote" && !registryMeta?.tags.includes("local"))
+    return true;
+  return false;
+}
 function parseSkillFrontmatter(content) {
   const match = content.match(/^---\r?\n([\s\S]*?)\r?\n---/);
   if (!match)
@@ -17805,6 +17830,8 @@ function validateSkillDirectory(name, skillPath, registryMeta) {
   const bareName = name;
   const issues = [];
   const warnings = [];
+  let packageDeclaresHosted = false;
+  let packageSkillSource;
   const metadata = {
     binCommands: [],
     docFiles: []
@@ -17887,6 +17914,13 @@ function validateSkillDirectory(name, skillPath, registryMeta) {
       if (!packageRecord) {
         add(issues, "package.invalid_shape", "package.json must be an object");
       } else {
+        packageDeclaresHosted = isHostedPackageMetadata(pkg);
+        const skillsRecord = asRecord(pkg.skills);
+        if (skillsRecord && typeof skillsRecord.source === "string") {
+          packageSkillSource = skillsRecord.source;
+        }
+        const hostedMetadata2 = isHostedMetadataSkill(bareName, metadata.skillMdFrontmatter, registryMeta, packageDeclaresHosted);
+        metadata.runtime = hostedMetadata2 ? "hosted" : "local";
         if (typeof pkg.name === "string") {
           metadata.packageName = pkg.name;
           if (pkg.name !== bareName) {
@@ -17903,12 +17937,18 @@ function validateSkillDirectory(name, skillPath, registryMeta) {
           ...metadata.provenance ?? { directoryName: bareName },
           ...typeof pkg.name === "string" ? { packageName: pkg.name } : {},
           ...typeof pkg.version === "string" && pkg.version.trim() ? { packageVersion: pkg.version } : {},
-          ...registryMeta?.source ? { registrySource: registryMeta.source } : {}
+          ...registryMeta?.source ? { registrySource: registryMeta.source } : {},
+          ...packageSkillSource ? { packageSkillSource } : {}
         };
         const binRecord = asRecord(pkg.bin);
         if (!binRecord || Object.keys(binRecord).length === 0) {
-          add(issues, "package.bin_missing", "package.json missing non-empty bin object");
+          if (!hostedMetadata2) {
+            add(issues, "package.bin_missing", "package.json missing non-empty bin object");
+          }
         } else {
+          if (hostedMetadata2) {
+            add(issues, "package.hosted_bin_forbidden", "Hosted metadata packages must not expose a local bin entry");
+          }
           for (const [command, target] of Object.entries(binRecord)) {
             if (!VALID_BIN_COMMAND.test(command)) {
               add(issues, "package.bin_command_invalid", `package.json bin command '${command}' must use lowercase letters, numbers, dots, underscores, or hyphens`);
@@ -17935,8 +17975,14 @@ function validateSkillDirectory(name, skillPath, registryMeta) {
       add(issues, "package.invalid_json", `package.json is invalid JSON: ${error48.message}`);
     }
   }
+  const hostedMetadata = isHostedMetadataSkill(bareName, metadata.skillMdFrontmatter, registryMeta, packageDeclaresHosted);
+  metadata.runtime = hostedMetadata ? "hosted" : "local";
   const srcDir = join9(skillPath, "src");
-  if (!existsSync9(srcDir)) {
+  if (hostedMetadata) {
+    if (existsSync9(srcDir)) {
+      add(issues, "skill.hosted_source_forbidden", "Hosted metadata skills must not include local implementation source");
+    }
+  } else if (!existsSync9(srcDir)) {
     add(issues, "skill.src_missing", "Missing src/ directory");
   } else if (!existsSync9(join9(srcDir, "index.ts")) && !existsSync9(join9(srcDir, "index.js"))) {
     add(issues, "skill.src_index_missing", "Missing src/index.ts or src/index.js");
@@ -17985,7 +18031,7 @@ import { dirname as dirname3, relative as relative2 } from "path";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.1.32",
+  version: "0.1.34",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/dist/lib/skill-validation.d.ts

@@ -16,6 +16,7 @@ export interface SkillValidationResult {
         docFiles: string[];
         skillMdFrontmatter?: SkillFrontmatter;
         provenance?: SkillValidationProvenance;
+        runtime?: "local" | "hosted";
     };
 }
 export interface RegistryConsistencyResult {
@@ -39,6 +40,7 @@ export interface SkillValidationProvenance {
     packageVersion?: string;
     frontmatterSource?: string;
     registrySource?: string;
+    packageSkillSource?: string;
 }
 export declare function parseSkillFrontmatter(content: string): SkillFrontmatter | null;
 export declare function validateSkillDirectory(name: string, skillPath: string, registryMeta?: SkillMeta): SkillValidationResult;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/skills",
-  "version": "0.1.32",
+  "version": "0.1.34",
   "description": "Skills library for AI coding agents",
   "type": "module",
   "bin": {

package/skills/ad-creative-pack/package.json

@@ -1,14 +1,11 @@
 {
   "name": "ad-creative-pack",
   "version": "0.1.0",
+  "private": true,
   "description": "Hosted premium paid ad creative artifact generator",
   "type": "module",
-  "bin": {
-    "ad-creative-pack": "./src/index.ts"
-  },
-  "dependencies": {},
-  "devDependencies": {
-    "@types/bun": "latest",
-    "typescript": "^5.7.0"
+  "skills": {
+    "runtime": "hosted",
+    "source": "remote"
   }
 }

package/skills/api-docs-portal/package.json

@@ -1,9 +1,11 @@
 {
   "name": "api-docs-portal",
   "version": "0.1.0",
-  "type": "module",
   "private": true,
-  "bin": {
-    "api-docs-portal": "src/index.ts"
+  "description": "Hosted skill metadata for api-docs-portal",
+  "type": "module",
+  "skills": {
+    "runtime": "hosted",
+    "source": "remote"
   }
 }

package/skills/audio/package.json

@@ -1,29 +1,11 @@
 {
   "name": "audio",
   "version": "1.0.0",
+  "private": true,
   "description": "Generate speech and audio using provider-cost AI backends",
-  "main": "src/index.ts",
   "type": "module",
-  "bin": {
-    "audio": "src/index.ts"
-  },
-  "scripts": {
-    "start": "bun run src/index.ts",
-    "generate": "bun run src/index.ts generate"
-  },
-  "keywords": [
-    "audio-generation",
-    "speech",
-    "tts",
-    "ai",
-    "openai",
-    "minimax",
-    "gemini"
-  ],
-  "devDependencies": {
-    "@types/bun": "latest"
-  },
-  "peerDependencies": {
-    "typescript": "^5.0.0"
+  "skills": {
+    "runtime": "hosted",
+    "source": "remote"
   }
 }

package/skills/audio-transcript-pack/package.json

@@ -4,7 +4,8 @@
   "private": true,
   "description": "Hosted premium audio transcript package generator",
   "type": "module",
-  "bin": {
-    "audio-transcript-pack": "./src/index.ts"
+  "skills": {
+    "runtime": "hosted",
+    "source": "remote"
   }
 }

package/skills/blog-article/package.json

@@ -1,27 +1,11 @@
 {
   "name": "blog-article",
   "version": "0.1.0",
+  "private": true,
   "description": "Hosted premium blog article artifact generator",
   "type": "module",
-  "bin": {
-    "blog-article": "./src/index.ts"
-  },
-  "scripts": {
-    "dev": "bun run src/index.ts",
-    "build": "bun build src/index.ts --outdir dist --target node",
-    "typecheck": "tsc --noEmit"
-  },
-  "dependencies": {},
-  "devDependencies": {
-    "@types/bun": "latest",
-    "typescript": "^5.7.0"
-  },
-  "publishConfig": {
-    "access": "restricted",
-    "registry": "https://registry.npmjs.org/"
-  },
-  "files": [
-    "src",
-    "tsconfig.json"
-  ]
+  "skills": {
+    "runtime": "hosted",
+    "source": "remote"
+  }
 }

package/skills/brand-kit/package.json

@@ -1,14 +1,11 @@
 {
   "name": "brand-kit",
   "version": "0.1.0",
+  "private": true,
   "description": "Hosted premium brand kit artifact generator",
   "type": "module",
-  "bin": {
-    "brand-kit": "./src/index.ts"
-  },
-  "dependencies": {},
-  "devDependencies": {
-    "@types/bun": "latest",
-    "typescript": "^5.7.0"
+  "skills": {
+    "runtime": "hosted",
+    "source": "remote"
   }
 }

package/skills/brand-photo-shoot/package.json

@@ -4,7 +4,8 @@
   "private": true,
   "description": "Hosted premium brand photo shoot package generator",
   "type": "module",
-  "bin": {
-    "brand-photo-shoot": "./src/index.ts"
+  "skills": {
+    "runtime": "hosted",
+    "source": "remote"
   }
 }