@hasna/skills 0.10.73 → 0.10.75

package/bin/mcp.js

@@ -23,7 +23,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/skills",
-    version: "0.10.73",
+    version: "0.10.75",
     description: "Skills library for AI coding agents",
     type: "module",
     bin: {
@@ -22021,8 +22021,8 @@ function ensureInstructionSkillFiles(skillPath, manifest) {
     displayName: manifest.displayName ?? displayName(manifest.name),
     category: manifest.category ?? "Development Tools",
     tags: manifest.tags?.length ? manifest.tags : ["custom", manifest.name],
-    inputs: [],
-    commands: []
+    inputs: Array.isArray(manifest.inputs) ? manifest.inputs : [],
+    commands: Array.isArray(manifest.commands) ? manifest.commands : []
   };
   if (!existsSync6(join9(skillPath, "SKILL.md"))) {
     writeFileSync2(join9(skillPath, "SKILL.md"), renderSkillMd(next));
@@ -36452,6 +36452,118 @@ var init_skillinfo = __esm(() => {
   GENERIC_ENV_PATTERN = /\b((?:OPENAI|ANTHROPIC|GEMINI|XAI|ELEVENLABS|DEEPGRAM|REPLICATE|FAL|STABILITY|EXA|FIRECRAWL|TWILIO|SENDGRID|RESEND|SLACK|DISCORD|NOTION|LINEAR|GITHUB|AWS|GOOGLE|CLOUDFLARE|VERCEL|SUPABASE|STRIPE)_[A-Z_]+)\b/g;
 });
 
+// src/lib/search.ts
+function editDistance(a, b) {
+  if (a === b)
+    return 0;
+  if (a.length === 0)
+    return b.length;
+  if (b.length === 0)
+    return a.length;
+  const prev = Array.from({ length: b.length + 1 }, (_, i) => i);
+  const curr = new Array(b.length + 1);
+  for (let i = 1;i <= a.length; i++) {
+    curr[0] = i;
+    for (let j = 1;j <= b.length; j++) {
+      const cost = a[i - 1] === b[j - 1] ? 0 : 1;
+      curr[j] = Math.min(curr[j - 1] + 1, prev[j] + 1, prev[j - 1] + cost);
+    }
+    prev.splice(0, prev.length, ...curr);
+  }
+  return prev[b.length];
+}
+function fuzzyMatchScore(word, target) {
+  if (target.includes(word))
+    return 1;
+  const tokens = target.split(/[\s\-_]+/).filter(Boolean);
+  for (const token of tokens) {
+    if (token.startsWith(word))
+      return 0.6;
+  }
+  if (word.length >= 3) {
+    const maxDist = word.length <= 3 ? 1 : 2;
+    for (const token of tokens) {
+      if (Math.abs(token.length - word.length) <= maxDist) {
+        const dist = editDistance(word, token);
+        if (dist <= maxDist)
+          return 0.4;
+      }
+    }
+  }
+  return 0;
+}
+function searchSkills(query, registry2 = loadRegistry()) {
+  const words = query.toLowerCase().split(/\s+/).filter(Boolean);
+  if (words.length === 0)
+    return [];
+  const scored = [];
+  for (const skill of registry2) {
+    const nameLower = skill.name.toLowerCase();
+    const displayNameLower = skill.displayName.toLowerCase();
+    const descriptionLower = skill.description.toLowerCase();
+    const tagsLower = skill.tags.map((t2) => t2.toLowerCase());
+    const tagsCombined = tagsLower.join(" ");
+    let score = 0;
+    let allWordsMatch = true;
+    for (const word of words) {
+      let wordScore = 0;
+      const nameMatch = fuzzyMatchScore(word, nameLower);
+      if (nameMatch > 0)
+        wordScore += 10 * nameMatch;
+      const displayMatch = fuzzyMatchScore(word, displayNameLower);
+      if (displayMatch > 0)
+        wordScore += 7 * displayMatch;
+      const tagMatch = Math.max(...tagsLower.map((t2) => fuzzyMatchScore(word, t2)), fuzzyMatchScore(word, tagsCombined));
+      if (tagMatch > 0)
+        wordScore += 5 * tagMatch;
+      const descMatch = fuzzyMatchScore(word, descriptionLower);
+      if (descMatch > 0)
+        wordScore += 2 * descMatch;
+      if (wordScore === 0) {
+        allWordsMatch = false;
+        break;
+      }
+      score += wordScore;
+    }
+    if (allWordsMatch && score > 0) {
+      scored.push({ skill, score });
+    }
+  }
+  scored.sort((a, b) => b.score - a.score);
+  return scored.map((s) => s.skill);
+}
+function findCloseSkillNames(query, names, maxResults = 3) {
+  if (maxResults <= 0)
+    return [];
+  const q = query.trim().toLowerCase();
+  if (q.length === 0)
+    return [];
+  const tokens = q.split("-").filter(Boolean);
+  const ranked = [];
+  if (q.length >= 3) {
+    for (const name of names) {
+      const candidate = name.toLowerCase();
+      const rank = candidate === q ? 0 : candidate.endsWith(`-${q}`) || candidate.startsWith(`${q}-`) ? 1 : tokens.length > 1 && tokens.every((token) => candidate.split("-").includes(token)) ? 2 : undefined;
+      if (rank !== undefined)
+        ranked.push([name, rank]);
+    }
+  }
+  ranked.sort((a, b) => a[1] - b[1] || a[0].length - b[0].length || a[0].localeCompare(b[0]));
+  const found = ranked.slice(0, maxResults).map(([name]) => name);
+  if (found.length === maxResults)
+    return found;
+  const taken = new Set(found);
+  const threshold = Math.max(3, Math.floor(q.length / 2));
+  const byDistance = names.filter((name) => !taken.has(name)).map((name) => ({ name, distance: editDistance(q, name.toLowerCase()) })).filter((entry) => entry.distance <= threshold).sort((a, b) => a.distance - b.distance || a.name.localeCompare(b.name));
+  return [...found, ...byDistance.slice(0, maxResults - found.length).map((entry) => entry.name)];
+}
+function findSimilarSkills(query, maxResults = 3, registry2 = loadRegistry()) {
+  return findCloseSkillNames(query, registry2.map((skill) => skill.name), maxResults);
+}
+var init_search = __esm(() => {
+  init_registry();
+});
+
 // src/lib/selected-document.ts
 function readSelectedDocument(entries, file2) {
   const entry = file2 !== undefined ? entries.find((candidate) => candidate.path === file2) : DOCUMENT_PATHS.map((path) => entries.find((candidate) => candidate.path === path && candidate.bytes.length > 0)).find(Boolean);
@@ -36532,11 +36644,30 @@ function exactProfileSelection(spec, profile) {
   const at = spec.lastIndexOf("@");
   const slug = at > 0 ? spec.slice(0, at) : spec;
   const version2 = at > 0 ? spec.slice(at + 1) : undefined;
-  const selection = profile.selections.find((entry) => (entry.slug === slug || entry.aliases?.includes(slug)) && (version2 === undefined || version2 === entry.version));
-  if (!selection || version2 === "")
-    throw new SkillSelectionError("SKILL_NOT_SELECTED", "The requested exact skill version is not selected by this profile or project lock.");
+  const named = profile.selections.filter((entry) => entry.slug === slug || entry.aliases?.includes(slug));
+  if (version2 === "")
+    throw new SkillSelectionError("SKILL_NOT_SELECTED", emptyVersionRefusal(spec));
+  if (named.length === 0)
+    throw new SkillSelectionError("SKILL_NOT_SELECTED", unknownNameRefusal(slug, profile));
+  const selection = version2 === undefined ? named[0] : named.find((entry) => entry.version === version2);
+  if (!selection)
+    throw new SkillSelectionError("SKILL_NOT_SELECTED", wrongVersionRefusal(slug, version2, named));
   return selection;
 }
+function emptyVersionRefusal(spec) {
+  return `The requested name '${spec}' has an empty version. ${ACCEPTED_FORM}`;
+}
+function wrongVersionRefusal(slug, version2, named) {
+  const versions2 = [...new Set(named.map((entry) => entry.version))].sort();
+  const canonical9 = named[0].slug;
+  return `Skill '${slug}' is selected at version '${versions2.join("', '")}', but '${version2}' was requested. ` + `Accepted form: '${canonical9}@${versions2[0]}'.`;
+}
+function unknownNameRefusal(slug, profile) {
+  const names = profile.selections.flatMap((entry) => [entry.slug, ...entry.aliases ?? []]);
+  const close = findCloseSkillNames(slug, names);
+  const hint = close.length > 0 ? ` Did you mean: ${close.join(", ")}?` : "";
+  return `Skill '${slug}' is not selected by this Skills profile or project lock.${hint} ` + `Read the accepted names with 'skills search <term>' or 'skills list --all --json'; accept one with 'skills pin <name>'. ${ACCEPTED_FORM}`;
+}
 async function loadSelectedSkill(spec, profileId, options = {}) {
   const context = await resolveSelectionContext(profileId, options);
   const selection = exactProfileSelection(spec, context.receipt.profile);
@@ -36581,9 +36712,11 @@ async function selectedSkillRequirements(spec, profileId, options = {}) {
   }
   return { ...getSkillRequirementsFromContent(selection.slug, texts, dependencies), selection };
 }
+var ACCEPTED_FORM = "Accepted form: '<slug>' or '<slug>@<version>'.";
 var init_selection_resolver = __esm(() => {
   init_profile_client();
   init_skillinfo();
+  init_search();
   init_selected_document();
   init_selection_cache();
 });
@@ -37726,6 +37859,12 @@ function verifyAgentDiscovery(binding, codexRecovery, reviewedRootAliases, witne
       throw new Error("Retired native materialization changed during discovery verification");
   }
 }
+function claudeControlSource(source) {
+  return CLAUDE_CONTROL_WITNESS_MODES.has(source.hashMode ?? "") || CLAUDE_CONTROL_FILES.has(basename12(source.path)) && !source.path.includes(`${sep11}.claude${sep11}plugins${sep11}cache${sep11}`);
+}
+function retainedAbsentClaudeRoot(absentRoots, source) {
+  return claudeControlSource(source) ? undefined : retainedAbsentRoot(absentRoots, source);
+}
 function codexInstallationRoots(binding) {
   const proof = binding.codexInstallationInputs;
   if (proof === undefined)
@@ -37921,7 +38060,10 @@ function resolveAgentDiscovery(options) {
     if (!review.sources.some((source) => source.path === canonical9(configPath)))
       throw new Error("Discovery review must include the agent configuration source");
     const reviewedSources = supersedesSettingsProjection(agent, review.sources, canonical9(configPath)) ? sources.filter((source) => !isSupersededSettingsProjection(agent, canonical9(configPath), source)) : sources;
+    const absentRoots = absentRetiredClaudeRoots(supplied);
     const reviewedSourcesWithManifestProjection = review.sources.map((source) => {
+      if (retainedAbsentClaudeRoot(absentRoots, source) !== undefined)
+        return source;
       if (agent === "claude" && source.format === undefined && source.fields === undefined && source.managedPlugins === undefined && source.reviewArtifact === undefined && [undefined, "bytes", "path-bytes"].includes(source.hashMode) && isClaudePluginCacheOrphanMarker(source.path)) {
         return { path: source.path, hashMode: CLAUDE_ORPHAN_MARKER_MODE, sha256: hashClaudePluginCacheOrphanMarker(source.path) };
       }
@@ -37954,6 +38096,11 @@ function resolveAgentDiscovery(options) {
     });
     if (agent === "claude")
       assertReviewedClaudeCacheClosures(home, config2, review, canonical9);
+    for (const root of absentRoots) {
+      safe6(root);
+      if (lstatSync23(root, { throwIfNoEntry: false }))
+        throw new Error("Retired native materialization changed during discovery review");
+    }
     const combined = [...reviewedSources, ...reviewedSourcesWithManifestProjection];
     const unique = combined.filter((source, index) => combined.findIndex((candidate) => isDeepStrictEqual5(candidate, source)) === index);
     return { ...supplied, roots: [...new Set([...roots, ...supplied.roots])].sort(), sources: unique, ...agent === "gemini" ? { builtinNames } : {} };
@@ -38601,95 +38748,6 @@ var init_registry_types = __esm(() => {
   ];
 });
 
-// src/lib/search.ts
-function editDistance(a, b) {
-  if (a === b)
-    return 0;
-  if (a.length === 0)
-    return b.length;
-  if (b.length === 0)
-    return a.length;
-  const prev = Array.from({ length: b.length + 1 }, (_, i) => i);
-  const curr = new Array(b.length + 1);
-  for (let i = 1;i <= a.length; i++) {
-    curr[0] = i;
-    for (let j = 1;j <= b.length; j++) {
-      const cost = a[i - 1] === b[j - 1] ? 0 : 1;
-      curr[j] = Math.min(curr[j - 1] + 1, prev[j] + 1, prev[j - 1] + cost);
-    }
-    prev.splice(0, prev.length, ...curr);
-  }
-  return prev[b.length];
-}
-function fuzzyMatchScore(word, target) {
-  if (target.includes(word))
-    return 1;
-  const tokens = target.split(/[\s\-_]+/).filter(Boolean);
-  for (const token of tokens) {
-    if (token.startsWith(word))
-      return 0.6;
-  }
-  if (word.length >= 3) {
-    const maxDist = word.length <= 3 ? 1 : 2;
-    for (const token of tokens) {
-      if (Math.abs(token.length - word.length) <= maxDist) {
-        const dist = editDistance(word, token);
-        if (dist <= maxDist)
-          return 0.4;
-      }
-    }
-  }
-  return 0;
-}
-function searchSkills(query, registry2 = loadRegistry()) {
-  const words = query.toLowerCase().split(/\s+/).filter(Boolean);
-  if (words.length === 0)
-    return [];
-  const scored = [];
-  for (const skill of registry2) {
-    const nameLower = skill.name.toLowerCase();
-    const displayNameLower = skill.displayName.toLowerCase();
-    const descriptionLower = skill.description.toLowerCase();
-    const tagsLower = skill.tags.map((t2) => t2.toLowerCase());
-    const tagsCombined = tagsLower.join(" ");
-    let score = 0;
-    let allWordsMatch = true;
-    for (const word of words) {
-      let wordScore = 0;
-      const nameMatch = fuzzyMatchScore(word, nameLower);
-      if (nameMatch > 0)
-        wordScore += 10 * nameMatch;
-      const displayMatch = fuzzyMatchScore(word, displayNameLower);
-      if (displayMatch > 0)
-        wordScore += 7 * displayMatch;
-      const tagMatch = Math.max(...tagsLower.map((t2) => fuzzyMatchScore(word, t2)), fuzzyMatchScore(word, tagsCombined));
-      if (tagMatch > 0)
-        wordScore += 5 * tagMatch;
-      const descMatch = fuzzyMatchScore(word, descriptionLower);
-      if (descMatch > 0)
-        wordScore += 2 * descMatch;
-      if (wordScore === 0) {
-        allWordsMatch = false;
-        break;
-      }
-      score += wordScore;
-    }
-    if (allWordsMatch && score > 0) {
-      scored.push({ skill, score });
-    }
-  }
-  scored.sort((a, b) => b.score - a.score);
-  return scored.map((s) => s.skill);
-}
-function findSimilarSkills(query, maxResults = 3, registry2 = loadRegistry()) {
-  const q = query.toLowerCase();
-  const scored = registry2.map((s) => ({ name: s.name, dist: editDistance(q, s.name.toLowerCase()) })).filter((s) => s.dist <= Math.max(3, Math.floor(q.length / 2))).sort((a, b) => a.dist - b.dist);
-  return scored.slice(0, maxResults).map((s) => s.name);
-}
-var init_search = __esm(() => {
-  init_registry();
-});
-
 // src/lib/registry.ts
 import { existsSync as existsSync13, readFileSync as readFileSync18, readdirSync as readdirSync10 } from "fs";
 import { join as join33 } from "path";
@@ -46399,7 +46457,11 @@ var exports_selected_run = {};
 __export(exports_selected_run, {
   resolveSelectedRun: () => resolveSelectedRun,
   prepareSelectedSecretBindings: () => prepareSelectedSecretBindings,
-  executeSelectedLocal: () => executeSelectedLocal
+  instructionRunRefusal: () => instructionRunRefusal,
+  instructionEntrypointMismatch: () => instructionEntrypointMismatch,
+  instructionCommandEntry: () => instructionCommandEntry,
+  executeSelectedLocal: () => executeSelectedLocal,
+  declaredOperation: () => declaredOperation
 });
 import { createHash as createHash28 } from "crypto";
 import { spawn as spawn2 } from "child_process";
@@ -46412,12 +46474,51 @@ async function resolveSelectedRun(spec, profileId, options = {}) {
   const entries = await readSelectedEntries(selection2, context2, options);
   return { selection: selection2, profileId: context2.receipt.profile.profileId, entries, ...describeEntries(entries), cacheDir: selectionCacheRoot(options) };
 }
+function declaredOperation(manifest) {
+  const entry = instructionCommandEntry(manifest);
+  if (!entry)
+    return null;
+  const runtime = manifest.runtime;
+  if (!runtime || typeof runtime !== "object" || Array.isArray(runtime))
+    return null;
+  if (runtime.runtime !== "bun" && runtime.runtime !== "node" && runtime.runtime !== "python3")
+    return null;
+  if (instructionEntrypointMismatch(manifest))
+    return null;
+  return { entry };
+}
+function instructionCommandEntry(manifest) {
+  const commands = Array.isArray(manifest.commands) ? manifest.commands : [];
+  const command = commands[0];
+  if (!command || typeof command !== "object" || typeof command.entry !== "string" || command.entry.length === 0)
+    return null;
+  return command.entry;
+}
+function instructionEntrypointMismatch(manifest) {
+  const entry = instructionCommandEntry(manifest);
+  const declared = manifest.runtime;
+  if (!entry || !declared || typeof declared !== "object" || Array.isArray(declared))
+    return null;
+  const runtimeEntrypoint = declared.entrypoint;
+  return typeof runtimeEntrypoint === "string" && runtimeEntrypoint !== entry ? runtimeEntrypoint : null;
+}
+function instructionRunRefusal(manifest, isBundledFile) {
+  const declaredEntry = instructionCommandEntry(manifest);
+  if (declaredEntry && !isBundledFile(declaredEntry))
+    return { code: "LOCAL_ENTRYPOINT_MISSING", message: `This selected instruction skill declares its operation entry as ${declaredEntry}, which is not a regular file in the selected bundle; a different runtime.entrypoint never substitutes for it.` };
+  const mismatch = instructionEntrypointMismatch(manifest);
+  if (mismatch)
+    return { code: "LOCAL_ENTRYPOINT_MISMATCH", message: `This selected instruction skill declares its operation entry as ${declaredEntry}, but its runtime.entrypoint is ${mismatch}; the two must agree.` };
+  if (!declaredOperation(manifest))
+    return { code: "INSTRUCTION_SKILL", message: "This selected skill contains instructions. Use skills load instead of skills run." };
+  return null;
+}
 async function prepareSelectedSecretBindings(selected, cwd = process.cwd()) {
   const entries = await readCachedSelection(selected.selection, { cacheDir: selected.cacheDir });
   if (!entries)
     throw new SkillSelectionError("CACHED_BUNDLE_MISSING", "The selected execution bundle is not cached.");
   const { kind, manifest } = describeEntries(entries);
-  if (kind !== "executable")
+  if (kind !== "executable" && !declaredOperation(manifest))
     throw new SkillSelectionError("INSTRUCTION_SKILL", "Instruction skills do not accept execution secret bindings.");
   const names = declaredSecretNames(manifest.runtime?.env);
   if (!names.length)
@@ -46430,8 +46531,12 @@ async function executeSelectedLocal(selected, options = {}) {
   if (!entries)
     throw new SkillSelectionError("CACHED_BUNDLE_MISSING", "The selected local execution bundle is not cached.");
   const { kind, manifest, packageJson } = describeEntries(entries);
-  if (kind === "instruction")
-    throw new SkillSelectionError("INSTRUCTION_SKILL", "This selected skill contains instructions. Use skills load instead of skills run.");
+  const operation = declaredOperation(manifest);
+  if (kind === "instruction") {
+    const refusal3 = instructionRunRefusal(manifest, (path) => entries.some((entry) => entry.path === path));
+    if (refusal3)
+      throw new SkillSelectionError(refusal3.code, refusal3.message);
+  }
   const runtime = manifest.runtime ?? {};
   if (!runtime || typeof runtime !== "object" || Array.isArray(runtime))
     throw new SkillSelectionError("INVALID_SKILL_MANIFEST", "The selected runtime declaration is invalid.");
@@ -46450,9 +46555,9 @@ async function executeSelectedLocal(selected, options = {}) {
   const executable = runtimeName === "bun" ? process.execPath : Bun.which(runtimeName);
   if (!executable)
     throw new SkillSelectionError("LOCAL_RUNTIME_UNAVAILABLE", "The selected runtime is not installed on this station.");
-  const declaredEntry = runtime.entrypoint ?? (typeof packageJson.bin === "string" ? packageJson.bin : packageJson.bin && typeof packageJson.bin === "object" ? Object.values(packageJson.bin)[0] : undefined);
+  const declaredEntry = (kind === "instruction" ? operation?.entry : undefined) ?? runtime.entrypoint ?? (typeof packageJson.bin === "string" ? packageJson.bin : packageJson.bin && typeof packageJson.bin === "object" ? Object.values(packageJson.bin)[0] : undefined);
   if (typeof declaredEntry !== "string" || !entries.some((entry) => entry.path === declaredEntry))
-    throw new SkillSelectionError("LOCAL_ENTRYPOINT_MISSING", "The selected bundle must declare a regular-file entrypoint in its runtime manifest or package bin.");
+    throw new SkillSelectionError("LOCAL_ENTRYPOINT_MISSING", kind === "instruction" ? "The selected instruction skill must declare the operation entrypoint it ships in its manifest, and that declared entry must be a regular file in the selected bundle; a different runtime.entrypoint never substitutes for it." : "The selected bundle must declare a regular-file entrypoint in its runtime manifest or package bin.");
   const args = options.args ?? [];
   if (args.length > 128 || args.some((arg) => typeof arg !== "string" || arg.length > 16384 || arg.includes("\x00")))
     throw new SkillSelectionError("INVALID_RUN_INPUT", "Local skill arguments exceed their limits.");
@@ -46527,6 +46632,7 @@ async function executeSelectedLocal(selected, options = {}) {
     selection: selection2,
     target: "local",
     runtime: runtimeName,
+    entrypoint: declaredEntry,
     inputDigest: `sha256:${createHash28("sha256").update(input2).digest("hex")}`,
     runDirectory,
     ...executionGrant ? { executionGrant } : {},
@@ -46973,13 +47079,18 @@ function registerOperationTools(server) {
       return mcpError("CONFLICTING_EXECUTION_MODES", "Use remote for the configured server catalog and quote, or target for selected execution, not both.");
     if (managed && !remote) {
       try {
-        const { resolveSelectedRun: resolveSelectedRun2, executeSelectedLocal: executeSelectedLocal2 } = await Promise.resolve().then(() => (init_selected_run(), exports_selected_run));
+        const { resolveSelectedRun: resolveSelectedRun2, executeSelectedLocal: executeSelectedLocal2, instructionRunRefusal: instructionRunRefusal2 } = await Promise.resolve().then(() => (init_selected_run(), exports_selected_run));
         const resolved = await resolveSelectedRun2(name, selectedProfileId(), { projectDir: process.cwd() });
-        if (resolved.kind === "instruction")
-          return mcpError("INSTRUCTION_SKILL", "This selected skill contains instructions. Load it with skills load instead of running it.");
+        if (resolved.kind === "instruction") {
+          const refusal3 = instructionRunRefusal2(resolved.manifest, (path) => resolved.entries.some((entry) => entry.path === path));
+          if (refusal3)
+            return mcpError(refusal3.code, refusal3.message);
+        }
         if (files?.length)
           return mcpError("SELECTED_INPUT_REQUIRED", "Selected executions require their declared JSON input; use the CLI cloud execution input contract for files.");
         if (target === "cloud") {
+          if (resolved.kind === "instruction")
+            return mcpError("INSTRUCTION_SKILL", "Cloud execution requires an executable skill version; run the declared operation locally on a managed station, or load the instructions with skills load.");
           if (args?.length || quoteReceipt || maxCredits !== undefined || maxCostCents !== undefined)
             return mcpError("SELECTED_INPUT_REQUIRED", "The selected cloud execution contract accepts declared JSON input, not legacy run arguments or quote receipts.");
           const { CloudExecutionClient: CloudExecutionClient2 } = await Promise.resolve().then(() => (init_cloud_executions(), exports_cloud_executions));

package/bin/migrate.js

@@ -25,7 +25,7 @@ import { join as join5 } from "path";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.73",
+  version: "0.10.75",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/server.js

@@ -24140,7 +24140,7 @@ restoreLaunchCwd();
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.73",
+  version: "0.10.75",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/bin/worker.js

@@ -24143,7 +24143,7 @@ import { randomUUID as randomUUID6 } from "crypto";
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.73",
+  version: "0.10.75",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {

package/dist/cli/commands/provenance.d.ts

@@ -0,0 +1,18 @@
+import type { Command } from "commander";
+import { type SelectionProvenanceReceipt } from "../../lib/selection-provenance.js";
+export interface ProvenanceCommandOptions {
+    selectionProfile?: string;
+    station?: string;
+    session?: string;
+    cached?: boolean;
+    json?: boolean;
+}
+/**
+ * One read-only receipt for the selection chain: selected, activated, applied,
+ * pinned and consumed are named separately, and every consumer carries its
+ * status and reason. An exit code here only reports a bad request: a read that
+ * could not be answered is recorded as `unverified`, because that is the fact
+ * the caller came for.
+ */
+export declare function provenanceLines(receipt: SelectionProvenanceReceipt): string[];
+export declare function registerProvenance(parent: Command): void;

package/dist/cli/stray-arguments.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Stray positionals on a verb that declares none are a phantom verb, not a
+ * no-op. Commander's `allowExcessArguments` defaults to true (12.1.0,
+ * `lib/command.js:28`), so `skills categories typo` exited 0 with the ordinary
+ * output and `skills list typo` printed the whole catalogue: a caller reading
+ * the exit code is told the word was understood (BUG e3997558).
+ *
+ * The default command refuses by hand so it can name the verbs that exist, and
+ * `skills mcp` refuses by hand so it can name its three forms. Those two keep
+ * their own, better sentences. Every other command that declares no argument of
+ * its own is closed here in one pass, so the next command added gets the
+ * refusal without its author having to remember the hole exists.
+ */
+import type { Command } from "commander";
+/**
+ * Opt a command out of the pass because it owns a more precise refusal than
+ * commander's. Chainable, and it keeps `allowExcessArguments(true)` so the
+ * command still receives the stray word it wants to report.
+ */
+export declare function permitStrayArguments(command: Command): Command;
+/**
+ * Refuse positionals on every command that declares no argument of its own.
+ *
+ * A command that declares arguments keeps commander's own arity check, and a
+ * command with subcommands never reaches the excess check for a word that names
+ * a child (commander dispatches the subcommand first). Commands without an
+ * action handler reach it only with zero operands, so the flag is inert there.
+ */
+export declare function rejectStrayArguments(command: Command): void;