@hasna/skills 0.2.0 → 0.3.0

package/dist/server/artifact-storage.d.ts

@@ -113,6 +113,17 @@ export declare class ArtifactStorage {
      *   <prefix>/skills/<org>/<slug>/<version>/manifest.json
      * The content-addressed object under bundles/ stays the read path (dedupe); these keys
      * are the durable, browsable history and are never deleted by orphan collection.
+     *
+     * RETENTION (hasna/apps#1671): these objects accumulate without bound by design — every
+     * version keeps a full copy — so the bucket lifecycle is the retention story, not the
+     * store. The intended rule (operated in the bucket's lifecycle config, outside this
+     * repository): expire `<prefix>/skills/` objects older than N days per the slot policy,
+     * while `<prefix>/bundles/` (content-addressed, deduped across versions and slugs) is
+     * NEVER expired by lifecycle — only the reference-guarded delete path removes those,
+     * because one object can serve many versions. A busy org that pushes thousands of
+     * versions should pair the lifecycle rule with a documented cap on retained versions
+     * per slug (e.g. the newest K, pruned by a maintenance job that deletes the version row
+     * and its two objects together); row deletion alone would strand the objects.
      * Returns the placement recorded on the version row; in db mode nothing is written.
      */
     putVersionObjects(orgId: string, slug: string, version: string, bytes: OwnedBytes, manifest: Record<string, unknown>, contentType?: string): Promise<{

package/dist/server/skills-api.d.ts

@@ -22,7 +22,15 @@ export declare class SkillRequestError extends Error {
 }
 /** SkillMeta shape for a published row, so a client can treat both kinds alike. */
 export declare function publishedSkillMeta(record: ServerSkillRecord): SkillMeta;
-export declare function publishedPayload(record: ServerSkillRecord): Record<string, unknown>;
+/**
+ * SkillMeta shape for a published row, plus a payload-level "alreadyPublished" flag:
+ * true when the accepted publish found the version already recorded with the same
+ * digest (an idempotent re-push), so the CLI can distinguish "published as X" from
+ * "already published as X" (hasna/apps#1671).
+ */
+export declare function publishedPayload(record: ServerSkillRecord, opts?: {
+    alreadyPublished?: boolean;
+}): Record<string, unknown>;
 /**
  * The HTTP ETag for a published row: the revision id, quoted exactly as RFC 9110 wants.
  * The quotes are load-bearing — a client that echoes the whole header value back as
@@ -143,7 +151,10 @@ interface ParsedPublish {
  * measured.
  */
 export declare function parsePublishRequest(request: Request, config: SkillsServerConfig): Promise<ParsedPublish>;
-export declare function storePublishedSkill(store: SkillsProductStore, artifactStorage: ArtifactStorage, principal: ApiPrincipal, parsed: ParsedPublish, expectedRevisionId?: string): Promise<ServerSkillRecord>;
+export declare function storePublishedSkill(store: SkillsProductStore, artifactStorage: ArtifactStorage, principal: ApiPrincipal, parsed: ParsedPublish, expectedRevisionId?: string): Promise<{
+    record: ServerSkillRecord;
+    alreadyPublished: boolean;
+}>;
 /**
  * Tombstone a published skill (todos d061fcda): the row survives with a tombstone
  * marker for `tombstoneWindowMs`, so reads answer 410 and a pulling client can

package/dist/storage.js

@@ -65,7 +65,12 @@ import { join as join2, dirname } from "path";
 // src/lib/retired-settings.ts
 var RETIRED_ENV_SUFFIXES = ["_STORAGE_MODE", "_DEPLOYMENT_MODE", "_CLOUD_MODE"];
 var RETIRED_CONFIG_KEYS = {
-  mode: "apiUrl"
+  mode: "a configured API origin",
+  apiUrl: "skills setup --api-url <origin>"
+};
+var RETIRED_CONFIG_KEY_REASONS = {
+  mode: "Deployment modes were removed: a Skills client either resolves a credential " + "or it does not, and that is the whole of it.",
+  apiUrl: "The service address is no longer kept in this app's config file: it is read from " + "HASNA_SKILLS_API_URL, then the macOS Keychain item hasna.credentials.skills.api-url, " + "then ~/.hasna/skills/config/credentials, then the fleet gateway."
 };
 
 class RetiredSettingError extends Error {
@@ -104,7 +109,7 @@ function assertNoRetiredConfigKeys(config, source) {
   for (const [key, replacement] of Object.entries(RETIRED_CONFIG_KEYS)) {
     if (!(key in config))
       continue;
-    throw new RetiredSettingError(key, `${source}: "${key}" is no longer a configuration key. ` + "Deployment modes were removed: a Skills client either has an API origin " + "configured or it does not, and that is the whole of it. " + `Use "${replacement}" instead (skills config set ${replacement} <origin>), and ` + `remove the old key with: skills config unset ${key}. ` + "Refused rather than ignored, because silently dropping it would leave an " + "operator believing they had pointed this install at a server.");
+    throw new RetiredSettingError(key, `${source}: "${key}" is no longer a configuration key. ` + `${RETIRED_CONFIG_KEY_REASONS[key] ?? ""} ` + `Use ${replacement} instead, and remove the old key with: skills config unset ${key}. ` + "Refused rather than ignored, because silently dropping it would leave an " + "operator believing they had pointed this install at a server.");
   }
 }
 
@@ -232,7 +237,7 @@ var ENUM_KEYS = {
   defaultScope: ["global", "project"],
   format: ["compact", "json", "csv"]
 };
-var STRING_KEYS = ["apiUrl", "extensionsDir"];
+var STRING_KEYS = ["extensionsDir"];
 function validKeys() {
   return [...Object.keys(ENUM_KEYS), ...STRING_KEYS];
 }
@@ -263,16 +268,6 @@ function normalizeConfigValue(key, value) {
   const allowed = allowedValues(key);
   if (allowed)
     return allowed.includes(value) ? value : undefined;
-  if (key === "apiUrl") {
-    try {
-      const url = new URL(value);
-      if (url.protocol !== "http:" && url.protocol !== "https:")
-        return;
-      return value.replace(/\/+$/, "");
-    } catch {
-      return;
-    }
-  }
   if (key === "extensionsDir")
     return value.trim() ? value : undefined;
   return;
@@ -342,7 +337,7 @@ function saveConfig(key, value, scope = "project") {
   const normalized = normalizeConfigValue(key, value);
   if (normalized === undefined) {
     const allowed = allowedValues(key);
-    throw new Error(allowed ? `Invalid value '${value}' for ${key}. Allowed: ${allowed.join(", ")}` : `Invalid value '${value}' for ${key}. Expected ${key === "apiUrl" ? "an http(s) URL" : "a non-empty path"}`);
+    throw new Error(allowed ? `Invalid value '${value}' for ${key}. Allowed: ${allowed.join(", ")}` : `Invalid value '${value}' for ${key}. Expected a non-empty path`);
   }
   const filePath = getConfigPath(scope);
   let existing = {};

package/package.json

@@ -1,11 +1,12 @@
 {
   "name": "@hasna/skills",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Skills library for AI coding agents",
   "type": "module",
   "bin": {
     "skills": "bin/index.js",
     "skills-mcp": "bin/mcp.js",
+    "skills-serve": "bin/server.js",
     "skills-server": "bin/server.js",
     "skills-worker": "bin/worker.js",
     "skills-migrate": "bin/migrate.js"
@@ -91,6 +92,7 @@
   "dependencies": {
     "@aws-sdk/client-ecs": "^3.1079.0",
     "@aws-sdk/client-s3": "^3.1079.0",
+    "@hasna/contracts": "1.0.1",
     "@hasna/events": "0.1.16",
     "@modelcontextprotocol/sdk": "^1.26.0",
     "chalk": "^5.3.0",