@klhapp/skillmux 0.2.0 → 0.2.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +2 -0
- package/README.md +7 -4
- package/docs/releasing.md +3 -10
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -5,6 +5,8 @@ All notable changes to this project are documented in this file.
|
|
|
5
5
|
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
|
|
6
6
|
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
|
|
7
7
|
|
|
8
|
+
## [0.2.1](https://github.com/klhq/skillmux/compare/skillmux-v0.2.0...skillmux-v0.2.1) (2026-07-21)
|
|
9
|
+
|
|
8
10
|
## [0.2.0](https://github.com/klhq/skillmux/compare/skillmux-v0.1.1...skillmux-v0.2.0) (2026-07-21)
|
|
9
11
|
|
|
10
12
|
|
package/README.md
CHANGED
|
@@ -1,4 +1,6 @@
|
|
|
1
|
-
|
|
1
|
+
<p align="center">
|
|
2
|
+
<img src="https://raw.githubusercontent.com/klhq/skillmux/main/docs/assets/logo.png" alt="skillmux" width="400">
|
|
3
|
+
</p>
|
|
2
4
|
|
|
3
5
|
A local, read-only [MCP](https://modelcontextprotocol.io) stdio server that gives agents **on-demand skill discovery**: route a natural-language task description to the right skill in your vault and deliver its `SKILL.md` byte-for-byte, verified by SHA-256.
|
|
4
6
|
|
|
@@ -60,10 +62,11 @@ Download the latest release for your architecture:
|
|
|
60
62
|
```sh
|
|
61
63
|
# AMD64
|
|
62
64
|
gh release download --repo klhq/skillmux \
|
|
63
|
-
--pattern 'skillmux-linux-*'
|
|
64
|
-
|
|
65
|
+
--pattern 'skillmux-linux-*'
|
|
66
|
+
|
|
67
|
+
# Optional: verify build provenance
|
|
68
|
+
gh attestation verify skillmux-linux-amd64 --repo klhq/skillmux
|
|
65
69
|
|
|
66
|
-
sha256sum --check SHA256SUMS
|
|
67
70
|
# Install the binary matching your machine (amd64 or arm64)
|
|
68
71
|
chmod +x skillmux-linux-amd64
|
|
69
72
|
sudo install skillmux-linux-amd64 /usr/local/bin/skillmux
|
package/docs/releasing.md
CHANGED
|
@@ -25,7 +25,6 @@ The release workflow publishes:
|
|
|
25
25
|
|
|
26
26
|
- `skillmux-linux-amd64`
|
|
27
27
|
- `skillmux-linux-arm64`
|
|
28
|
-
- `SHA256SUMS`
|
|
29
28
|
- GitHub build provenance attestations when the repository is public
|
|
30
29
|
- Full image: `:<version>`, `:<major>.<minor>`, `:<major>`, and `:latest`
|
|
31
30
|
- Slim image: `:<version>-slim`, `:<major>.<minor>-slim`, `:<major>-slim`, and `:latest-slim`
|
|
@@ -36,20 +35,14 @@ Each Docker tag is a multi-architecture manifest. Users run the same tag on AMD6
|
|
|
36
35
|
Container images are published to GitHub Container Registry only; the release workflow does not require external registry credentials.
|
|
37
36
|
Private repositories still publish BuildKit SBOM/provenance with container images, but GitHub artifact attestations are skipped because GitHub does not support them for user-owned private repositories.
|
|
38
37
|
|
|
39
|
-
Verify downloaded binaries with:
|
|
38
|
+
Verify downloaded binaries with build provenance attestation:
|
|
40
39
|
|
|
41
40
|
```bash
|
|
42
|
-
|
|
41
|
+
gh release download v0.1.1 --repo klhq/skillmux --pattern 'skillmux-linux-*'
|
|
42
|
+
gh attestation verify skillmux-linux-amd64 --repo klhq/skillmux
|
|
43
43
|
./skillmux-linux-amd64 config show
|
|
44
44
|
```
|
|
45
45
|
|
|
46
|
-
Verify release assets from GitHub without cloning the repository:
|
|
47
|
-
|
|
48
|
-
```bash
|
|
49
|
-
gh release download v0.1.1 --repo klhq/skillmux
|
|
50
|
-
sha256sum --check SHA256SUMS
|
|
51
|
-
```
|
|
52
|
-
|
|
53
46
|
Verify the container with a read-only vault mount:
|
|
54
47
|
|
|
55
48
|
```bash
|
package/package.json
CHANGED