@ichintansoni/skills-master 0.2.4 → 0.3.1

package/README.md

@@ -23,6 +23,8 @@ npx @ichintansoni/skills-master doctor                        # same detection,
 
 `status` and `doctor` share their drift detection but answer different questions. `status` is an inventory — it lists every installed skill with its version, targets, and whether the output has been edited or deleted, works entirely offline, and always exits 0, so it is safe to pipe (`status --json`, `status --problems`, `status <name>…`). `doctor` is the gate: same findings, but it exits non-zero, which is what you want in CI.
 
+Both answer "is what I installed intact?" — neither answers "is what I installed **current?**", because both compare emitted files against the lockfile and never the lockfile against the source. An install pinned to a release from six months ago is perfectly healthy by that measure. `update --check` is the second gate: it resolves the content, reports which skills are behind, and exits non-zero. It catches the case a version comparison misses — a skill edited upstream *without* a version bump, which is what resource-file and description changes usually are.
+
 `add` writes, per detected tool:
 
 | Tool | Output |
@@ -59,7 +61,7 @@ Run `skills-master <command> --help` for the full flag list on any of these.
 |---|---|
 | `init` | Detect which tools the project uses and write `skills-master.json`. `--target` · `--commit` · `--ref` · `--force` |
 | `add <names…>` | Install skills by name, category, or class |
-| `update [names…]` | Re-install skills whose **content** changed upstream. Only touches targets a skill is already installed to |
+| `update [names…]` | Re-install skills whose **content** changed upstream. Only touches targets a skill is already installed to. `--check` reports what is behind and exits non-zero |
 | `sync [names…]` | Re-emit to match the **current config** — new targets, moved `paths`, deleted files. `--overwrite` · `--prune` · `--dry-run` |
 | `remove <names…>` | Remove installed skills. `--target` removes from one tool only |
 | `status [names…]` | Inventory: versions, targets, and local-edit state. Offline, always exits 0. `--problems` · `--json` |

package/dist/bin.js

@@ -4,7 +4,7 @@
 import { Command } from "commander";
 
 // package.json
-var version = "0.2.4";
+var version = "0.3.1";
 
 // src/schema/projectConfig.ts
 import { z } from "zod";
@@ -1216,6 +1216,52 @@ async function updateCommand(opts) {
   const content = await resolveContent({ content: opts.content, ref, cwd: opts.cwd });
   const paths = resolvePaths(cfg);
   const prefix = opts.dryRun ? "[dry-run] " : "";
+  if (opts.check) {
+    const behind = [];
+    for (const name of names.sort()) {
+      const locked = lock.skills[name];
+      if (!locked) {
+        log.warn(`"${name}" is not installed.`);
+        skipped.push(name);
+        continue;
+      }
+      let skill;
+      try {
+        skill = content.loadSkill(name);
+      } catch (err) {
+        if (err instanceof SkillNotFoundError) {
+          log.warn(`"${name}" no longer exists in the content library.`);
+        } else {
+          log.error(
+            `Failed to load "${name}": ${err instanceof Error ? err.message : String(err)}`
+          );
+        }
+        skipped.push(name);
+        continue;
+      }
+      const available = skill.frontmatter["x-skills-master"].version;
+      const sourceChanged = locked.sourceHash !== sourceHashOf(skill);
+      const refChanged = lock.contentRef !== ref;
+      if (!sourceChanged && !refChanged) {
+        upToDate.push(name);
+        continue;
+      }
+      const reason = !sourceChanged ? "ref" : available !== locked.version ? "version" : "content";
+      behind.push({ name, installed: locked.version, available, reason });
+    }
+    for (const b of behind) {
+      const detail = b.reason === "version" ? `${b.installed} \u2192 ${b.available}` : b.reason === "content" ? `${b.installed} (content changed without a version bump)` : `${b.installed} (content ref moved to ${ref})`;
+      log.info(`\u2191 ${b.name.padEnd(32)} ${detail}`);
+    }
+    if (behind.length === 0) {
+      log.success(`All ${upToDate.length} installed skill(s) are current.`);
+    } else {
+      log.warn(
+        `${behind.length} of ${behind.length + upToDate.length} installed skill(s) are behind \u2014 run \`update\`.`
+      );
+    }
+    return { updated, upToDate, skipped, behind };
+  }
   for (const name of names.sort()) {
     const locked = lock.skills[name];
     if (!locked) {
@@ -2297,17 +2343,19 @@ program.command("add <names...>").description("Install skills (by name, category
     })
   )
 );
-program.command("update [names...]").description("Re-install skills whose content changed").option("--dry-run", "preview without writing").option("--overwrite", "force re-install, replacing local edits").option("--content <dir>", "local skills directory").option("--ref <ref>", "content git ref (tag/branch/sha)").action(
-  (names, opts) => run(
-    () => updateCommand({
+program.command("update [names...]").description("Re-install skills whose content changed").option("--check", "report which installed skills are behind; exit 1 if any are").option("--dry-run", "preview without writing").option("--overwrite", "force re-install, replacing local edits").option("--content <dir>", "local skills directory").option("--ref <ref>", "content git ref (tag/branch/sha)").action(
+  (names, opts) => run(async () => {
+    const res = await updateCommand({
       cwd: process.cwd(),
       names,
+      check: opts.check,
       dryRun: opts.dryRun,
       overwrite: opts.overwrite,
       content: opts.content,
       ref: opts.ref
-    })
-  )
+    });
+    return opts.check ? (res.behind?.length ?? 0) === 0 : void 0;
+  }, true)
 );
 program.command("remove <names...>").description("Remove installed skills").option("--target <list>", "comma list or 'all'").option("--dry-run", "preview without writing").action(
   (names, opts) => run(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ichintansoni/skills-master",
-  "version": "0.2.4",
+  "version": "0.3.1",
   "description": "Install tool-agnostic Apple & Android development skills into any AI coding tool (Claude Code, Cursor, Copilot, AGENTS.md).",
   "keywords": [
     "skills",