@rckflr/llms-skills 0.2.0 → 0.2.1

package/CHANGELOG.md

@@ -0,0 +1,49 @@
+# Changelog
+
+All notable changes to the [`@rckflr/llms-skills`](https://www.npmjs.com/package/@rckflr/llms-skills)
+package. Format based on [Keep a Changelog](https://keepachangelog.com/); dates
+are the npm publish dates.
+
+## [0.2.0] — 2026-07-10
+
+### Added
+- **`memory <bundle-dir>` — the RAG-OKF builder.** Turns a directory of
+  [OKF 0.1](https://github.com/GoogleCloudPlatform/knowledge-catalog/blob/main/okf/SPEC.md)
+  concepts (`*.md` with `type`/`title` frontmatter; `index.md`/`log.md`
+  reserved) into a serverless RAG:
+  - a **byte-deterministic** BM25 snapshot (`minimemory-okf-v1`), pinned by
+    `snapshot_sha256` in the `skills-memory` line. Determinism requires
+    canonicalization: minimemory's export order comes from a Rust HashMap and
+    varies run to run — chunks are sorted by id and re-serialized, which is
+    what makes `--check`/CI content-addressing possible at all;
+  - three generated executable skills: `search_knowledge` (a **universal
+    template** — identical bytes for every publisher, so its `tool_sha256` is
+    a stable ecosystem-wide constant: audit once, attest once), `get_concept`
+    and `list_concepts` (concept metadata embedded at build time,
+    content-addressed);
+  - manifest wiring (`memory` block + `published` entries) so a plain
+    `publish` emits everything, and a `.gitattributes` pin
+    (`skills-index.snapshot -text`) so git CRLF conversion can never break
+    the published hash.
+  - `memory <bundle> --check` is the CI drift guard. Consumers need nothing
+    new: `@rckflr/mcpwasm` ≥ 0.4.0 verifies the snapshot and injects
+    `host.memorySearch` on both runtimes (covered by a real end-to-end test
+    against the published mcpwasm tarball).
+
+### Changed
+- `@rckflr/minimemory` (~630 KB wasm BM25 engine) added as an
+  **optionalDependency**: installed by default, lazily imported by `memory`;
+  if omitted, `memory` fails with a clear message and every other command
+  works exactly as before (the CLI keeps zero hard dependencies).
+
+## [0.1.0] — 2026-07-10
+
+### Added
+- Initial release: one-command publisher CLI for the llms.txt Skills
+  standard — `init` (scaffold SKILL.md + optional tool.js + manifest),
+  `publish [--check]` (sha256, `## Skills` into llms.txt,
+  `.well-known/agent-skills/index.json`, ed25519 signing), `validate`
+  (llms.txt + skills, local path or URL), `keygen`. Zero dependencies
+  (hashing and ed25519 via `node:crypto`); output **byte-identical** to the
+  reference Python generator (`scripts/generate.py`), enforced by
+  `cli/test.mjs` in CI.

package/lib/core.mjs

@@ -30,7 +30,16 @@ export function parseFrontmatter(text) {
   const result = {};
   for (const line of body.split(/\r?\n/)) {
     const m = line.match(/^([a-zA-Z_][a-zA-Z0-9_-]*)\s*:\s*(.*)$/);
-    if (m) result[m[1]] = m[2].trim().replace(/^"|"$/g, "");
+    if (m) {
+      let v = m[2].trim();
+      // strip one MATCHING pair of quotes (double or single) — real-world YAML
+      // frontmatter uses both (e.g. type: 'Concept'), and stripping only one
+      // style leaves quote characters inside the value.
+      if (v.length >= 2 && ((v[0] === '"' && v[v.length - 1] === '"') || (v[0] === "'" && v[v.length - 1] === "'"))) {
+        v = v.slice(1, -1);
+      }
+      result[m[1]] = v;
+    }
   }
   return result;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rckflr/llms-skills",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "One-command publisher CLI for the llms.txt Skills standard: scaffold, hash, sign, and sync the ## Skills section + .well-known/agent-skills/index.json. Byte-identical to the reference Python generator; zero hard dependencies (BM25 knowledge snapshots via an optional wasm engine).",
   "type": "module",
   "license": "MIT",
@@ -35,6 +35,7 @@
     "./memory": "./lib/memory.mjs"
   },
   "files": [
+    "CHANGELOG.md",
     "bin/llms-skills.mjs",
     "lib/core.mjs",
     "lib/memory.mjs",