@lythos/skill-deck 0.14.5 → 0.14.6

package/README.md

@@ -8,16 +8,16 @@
 
 ```bash
 # Add a skill from skills.sh (owner/repo syntax — no conversion needed)
-bunx @lythos/skill-deck@0.14.5 add vercel-labs/agent-skills
+bunx @lythos/skill-deck@0.14.6 add vercel-labs/agent-skills
 
 # Or with @skill filter (same as npx skills add):
-bunx @lythos/skill-deck@0.14.5 add mattpocock/skills@tdd
+bunx @lythos/skill-deck@0.14.6 add mattpocock/skills@tdd
 
 # Or FQ locator:
-bunx @lythos/skill-deck@0.14.5 add github.com/anthropics/skills/skills/frontend-design
+bunx @lythos/skill-deck@0.14.6 add github.com/anthropics/skills/skills/frontend-design
 
 # Sync working set (deny-by-default):
-bunx @lythos/skill-deck@0.14.5 link
+bunx @lythos/skill-deck@0.14.6 link
 ```
 
 ## For AI Agents
@@ -25,7 +25,7 @@ bunx @lythos/skill-deck@0.14.5 link
 This package exposes a **CLI**. Invoke via:
 
 ```bash
-bunx @lythos/skill-deck@0.14.5 <command> [options]
+bunx @lythos/skill-deck@0.14.6 <command> [options]
 ```
 
 No installation required. `bunx` auto-downloads the package.
@@ -73,15 +73,15 @@ prompt = "Search for latest info, then generate professional document with diagr
 
 | Situation | Command |
 |-----------|---------|
-| Sync working set with `skill-deck.toml` | `bunx @lythos/skill-deck@0.14.5 link` |
-| Validate `skill-deck.toml` before committing | `bunx @lythos/skill-deck@0.14.5 validate` |
-| Download a skill to cold pool and add to deck | `bunx @lythos/skill-deck@0.14.5 add owner/repo` |
-| Pull latest versions of declared skills | `bunx @lythos/skill-deck@0.14.5 refresh` |
-| Refresh a single skill by alias | `bunx @lythos/skill-deck@0.14.5 refresh tdd` |
-| Remove a skill from deck and working set | `bunx @lythos/skill-deck@0.14.5 remove tdd` |
-| Switch skill to symlink mode (live) | `bunx @lythos/skill-deck@0.14.5 to-symlink tdd` |
-| Switch skill to snapshot mode (pinned) | `bunx @lythos/skill-deck@0.14.5 to-snapshot tdd` |
-| Use a custom deck file or working dir | `bunx @lythos/skill-deck@0.14.5 link --deck ./my-deck.toml --workdir /path/to/project` |
+| Sync working set with `skill-deck.toml` | `bunx @lythos/skill-deck@0.14.6 link` |
+| Validate `skill-deck.toml` before committing | `bunx @lythos/skill-deck@0.14.6 validate` |
+| Download a skill to cold pool and add to deck | `bunx @lythos/skill-deck@0.14.6 add owner/repo` |
+| Pull latest versions of declared skills | `bunx @lythos/skill-deck@0.14.6 refresh` |
+| Refresh a single skill by alias | `bunx @lythos/skill-deck@0.14.6 refresh tdd` |
+| Remove a skill from deck and working set | `bunx @lythos/skill-deck@0.14.6 remove tdd` |
+| Switch skill to symlink mode (live) | `bunx @lythos/skill-deck@0.14.6 to-symlink tdd` |
+| Switch skill to snapshot mode (pinned) | `bunx @lythos/skill-deck@0.14.6 to-snapshot tdd` |
+| Use a custom deck file or working dir | `bunx @lythos/skill-deck@0.14.6 link --deck ./my-deck.toml --workdir /path/to/project` |
 
 ### Commands
 
@@ -104,13 +104,13 @@ prompt = "Search for latest info, then generate professional document with diagr
 
 | `--alias <alias>` | Explicit alias for the skill (default: basename of path) | — |
 | `--type <type>` | Target section for `add`: `innate`, `tool`, or `transient` | `tool` |
-| `--mode <mode>` | Link mode for `add`/`link`: `symlink` (default) or `snapshot` (copy, for Codex compat) | `symlink` |
+| `--mode <mode>` | Link mode for `add`/`link`: `symlink` (default) or `snapshot` (copy, pinned to cold pool HEAD) | `symlink` |
 
 ### Safety guards
 
 `link` refuses to operate if `working_set` resolves to your home directory or root (`/`).
 
-**Snapshot mode** (`--mode snapshot` or `link --mode snapshot`): copies the source directory into the working set instead of symlinking. This is needed for agents that don't support symlinks (e.g. Codex #11314). Snapshots are pinned to the cold pool version at link time. Use `deck to-symlink <alias>` to switch back to symlink mode, or `deck to-snapshot <alias>` to pin a symlink as a snapshot.
+**Snapshot mode** (`--mode snapshot` or `link --mode snapshot`): copies the source directory into the working set instead of symlinking. Snapshots are pinned to the cold pool version at link time — useful when you want the working set to be a stable copy rather than a live symlink that follows cold pool updates. Use `deck to-symlink <alias>` to switch back to symlink mode, or `deck to-snapshot <alias>` to pin a symlink as a snapshot.
 
 ### Exit codes
 
@@ -143,7 +143,7 @@ source = "https://github.com/lythos-labs/lythoskill/blob/HEAD/skills/lythoskill-
 EOF
 
 # 2. Link — creates symlinks in .claude/skills/
-bunx @lythos/skill-deck@0.14.5 link
+bunx @lythos/skill-deck@0.14.6 link
 ```
 
 ### Key Concepts
@@ -229,7 +229,7 @@ Caution: deck's deny-by-default will remove any skills not declared in your deck
 
 | Symptom | Cause | Fix |
 |---------|-------|-----|
-| `❌ Skill not found: <name>` | Skill declared in deck but not in cold pool | `bunx @lythos/skill-deck@0.14.5 add github.com/owner/repo/skill` or clone manually into cold pool |
+| `❌ Skill not found: <name>` | Skill declared in deck but not in cold pool | `bunx @lythos/skill-deck@0.14.6 add github.com/owner/repo/skill` or clone manually into cold pool |
 | `link` skips entries with warnings | Real files/directories exist in working set (not symlinks) | Delete the real directories in `working_set` and re-run `link`. Never create directories manually there |
 | `refresh` reports "Not a git repository" | Skill was copied (not cloned) into cold pool | Re-clone with `git clone` or use `deck add` which clones by default |
 | `deck update` prints deprecation warning | `update` was renamed to `refresh` in v0.8+ | Use `deck refresh` instead |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lythos/skill-deck",
-  "version": "0.14.5",
+  "version": "0.14.6",
   "description": "Declarative skill deck governance — cold pool, working set, deny-by-default",
   "keywords": [
     "ai-agent",
@@ -31,8 +31,8 @@
   ],
   "dependencies": {
     "@iarna/toml": "^2.2.5",
-    "@lythos/cold-pool": "^0.14.5",
-    "@lythos/infra": "^0.14.5",
+    "@lythos/cold-pool": "^0.14.6",
+    "@lythos/infra": "^0.14.6",
     "yaml": "^2.8.3",
     "zod": "^4.3.6"
   },

package/src/add.ts

@@ -272,7 +272,7 @@ export async function addSkill(
       console.error(`   Network probe failed — the host may be unreachable or blocked.`)
       console.error(``)
       console.error(`   To fix:`)
-      console.error(`     export LYTHOSKILL_GH_MIRROR="https://your-mirror.com"`)
+      console.error(`     export LYTHOS_GH_MIRROR="https://your-mirror.com"`)
       console.error(`     # Or set LYTHOS_SOCKS_PROXY for SOCKS5 routing`)
       console.error(`     # See: AGENTS.md → Network Restrictions`)
       process.exit(1)

package/src/cli.ts

@@ -114,12 +114,17 @@ switch (command) {
     updateDeck(deckPath, workdir, updateTarget)
     break
   }
-  case 'validate':
-    await validateDeck(deckPath, workdir, {
+  case 'validate': {
+    let validateDeckPath = deckPath
+    if (!validateDeckPath && args[1] && !args[1].startsWith('-')) {
+      validateDeckPath = resolveDeckPathSync(args[1]).path
+    }
+    await validateDeck(validateDeckPath, workdir, {
       remote,
       format: format === 'json' ? 'json' : 'text',
     })
     break
+  }
   case 'remove': {
     const removeTarget = args[1] && !args[1].startsWith('-') ? args[1] : undefined
     if (!removeTarget) {

package/src/refresh.ts

@@ -127,7 +127,7 @@ export async function refreshDeck(
     if (!probe) {
       console.error(`⚠️  Network probe failed for ${probeUrl}`)
       console.error(`   Refresh may fail for git targets. To fix:`)
-      console.error(`     export LYTHOSKILL_GH_MIRROR="https://your-mirror.com"`)
+      console.error(`     export LYTHOS_GH_MIRROR="https://your-mirror.com"`)
       console.error(`     # Or set LYTHOS_SOCKS_PROXY for SOCKS5 routing`)
       console.error(`   Continuing anyway — per-target errors will be reported below.`)
       console.error()

package/src/resolve-deck.ts

@@ -82,7 +82,7 @@ export async function fetchDeckUrl(url: string, io?: FetchDeckIO): Promise<strin
   }
 
   if (!res?.ok) {
-    throw new Error(`Failed to fetch deck: ${normalized}\n   Set LYTHOSKILL_GH_MIRROR to use a custom mirror, or LYTHOS_SOCKS_PROXY for SOCKS5.`)
+    throw new Error(`Failed to fetch deck: ${normalized}\n   Set LYTHOS_GH_MIRROR to use a custom mirror, or LYTHOS_SOCKS_PROXY for SOCKS5.`)
   }
 
   writeFn(dest, await res.text())