@lythos/skill-deck 0.7.1 → 0.7.2

package/README.md

@@ -55,6 +55,7 @@ skills = ["github.com/anthropics/skills/skills/pdf"]
 | Sync working set with `skill-deck.toml` | `bunx @lythos/skill-deck link` |
 | Validate `skill-deck.toml` before committing | `bunx @lythos/skill-deck validate` |
 | Download a skill to cold pool and add to deck | `bunx @lythos/skill-deck add owner/repo` |
+| Pull latest versions of declared skills | `bunx @lythos/skill-deck update` |
 | Use a custom deck file or working dir | `bunx @lythos/skill-deck link --deck ./my-deck.toml --workdir /path/to/project` |
 
 ### Commands
@@ -64,6 +65,7 @@ skills = ["github.com/anthropics/skills/skills/pdf"]
 | `link` | `[--deck <path>] [--workdir <dir>]` | Sync working set. Removes undeclared skills (deny-by-default). |
 | `validate` | `[deck.toml] [--workdir <dir>]` | Validate deck config without modifying files. |
 | `add` | `<locator> [--via <backend>] [--deck <path>]` | Download skill to cold pool and append to skill-deck.toml. |
+| `update` | `[--deck <path>]` | Pull latest versions of declared skills from upstream git repos. |
 
 ### Options
 
@@ -138,6 +140,7 @@ Different agents look for skills in different directories. `skill-deck.toml` con
 |---------|-------|-----|
 | `❌ Skill not found: <name>` | Skill declared in deck but not in cold pool | `bunx @lythos/skill-deck add github.com/owner/repo/skill` or clone manually into cold pool |
 | `link` skips entries with warnings | Real files/directories exist in working set (not symlinks) | Delete the real directories in `working_set` and re-run `link`. Never create directories manually there |
+| `update` reports "Not a git repository" | Skill was copied (not cloned) into cold pool | Re-clone with `git clone` or use `deck add` which clones by default |
 | `link` refuses with "budget exceeded" | Declared skills > `max_cards` | Increase `max_cards` in `skill-deck.toml` or remove unused skills |
 | `link` refuses with "unsafe working_set" | `working_set` resolves to `~` or `/` | Check `skill-deck.toml` has correct relative path (e.g. `.claude/skills/`) |
 | Agent doesn't see skills after `link` | `working_set` path doesn't match agent's scan location | Claude Code: `.claude/skills/`; Cursor: `.cursor/skills/`; Kimi: check your platform docs. Set `working_set` correctly |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lythos/skill-deck",
-  "version": "0.7.1",
+  "version": "0.7.2",
   "description": "Declarative skill deck governance — cold pool, working set, deny-by-default",
   "keywords": [
     "ai-agent",

package/src/link.ts

@@ -175,8 +175,10 @@ const deckRaw = readFileSync(DECK_PATH, "utf-8");
 const deckHash = hashContent(deckRaw);
 const deck = parseToml(deckRaw) as any;
 
-const WORKING_SET = expandHome(deck.deck?.working_set || ".claude/skills", PROJECT_DIR);
-const COLD_POOL = expandHome(deck.deck?.cold_pool || "~/.agents/skill-repos", PROJECT_DIR);
+const WORKING_SET_RAW = deck.deck?.working_set || ".claude/skills";
+const COLD_POOL_RAW = deck.deck?.cold_pool || "~/.agents/skill-repos";
+const WORKING_SET = expandHome(WORKING_SET_RAW, PROJECT_DIR);
+const COLD_POOL = expandHome(COLD_POOL_RAW, PROJECT_DIR);
 const MAX_CARDS = Number(deck.deck?.max_cards || 10);
 
 // ── 收集声明 ────────────────────────────────────────────────
@@ -396,12 +398,17 @@ for (const item of declared) {
     contentHash = hashContent(readFileSync(skillMdPath, "utf-8"));
   } catch {}
 
+  // source: relative to cold_pool (non-transient) or project dir (transient)
+  const sourceRel = item.type === "transient"
+    ? relative(PROJECT_DIR, item.sourcePath)
+    : relative(COLD_POOL, item.sourcePath);
+
   linkedSkills.push({
     name: item.name,
     deck_niche: niche,
     type: item.type,
-    source: item.sourcePath,
-    dest,
+    source: sourceRel,
+    dest: relative(PROJECT_DIR, dest),
     content_hash: contentHash,
     linked_at: new Date().toISOString(),
     ...(item.expires ? { expires: item.expires } : {}),
@@ -479,9 +486,9 @@ const constraints: ConstraintReport = {
 const lock: SkillDeckLock = {
   version: "1.0.0",
   generated_at: new Date().toISOString(),
-  deck_source: { path: DECK_PATH, content_hash: deckHash },
-  working_set: WORKING_SET,
-  cold_pool: COLD_POOL,
+  deck_source: { path: relative(PROJECT_DIR, DECK_PATH), content_hash: deckHash },
+  working_set: WORKING_SET_RAW,
+  cold_pool: COLD_POOL_RAW,
   skills: linkedSkills,
   constraints,
 };