@skhema/cli 0.5.1 → 0.6.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Skhema
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,10 @@
+> [!IMPORTANT]
+> **Generated mirror of a private source repo — do not open PRs here.**
+> This repository is an automatically generated, read-only mirror of a package
+> built from Skhema's private monorepo. Pull requests are disabled and any change
+> pushed here is overwritten on the next release. Questions and bug reports:
+> support@skhema.com. Security: see [SECURITY.md](./SECURITY.md).
+
 # @skhema/cli
 
 The Skhema command-line interface (`skhema`). Authenticate as a human or an

package/dist/cli.js

@@ -1,8 +1,9 @@
+import { CommanderError } from 'commander';
 import { createRequire } from 'module';
 import { isApprovedContributor } from './lib/auth/entitlements.js';
 import { getStoredCredentials } from './lib/auth/token-store.js';
 import { outputError } from './lib/output.js';
-import { buildProgram } from './program.js';
+import { buildProgram, resolveCommanderExitCode } from './program.js';
 const require = createRequire(import.meta.url);
 const pkg = require('../package.json');
 const program = buildProgram(pkg.version);
@@ -35,6 +36,17 @@ async function main() {
             }
         }
     }
-    await program.parseAsync();
+    try {
+        await program.parseAsync();
+    }
+    catch (err) {
+        // With exitOverride set, commander throws instead of exiting for every
+        // parser-level outcome (usage error, --help, --version). Map those onto the
+        // ExitCode contract; anything else is a real failure and should propagate.
+        if (err instanceof CommanderError) {
+            process.exit(resolveCommanderExitCode(err));
+        }
+        throw err;
+    }
 }
 main();

package/dist/commands/element.d.ts

@@ -1,7 +1,8 @@
 import { Command } from 'commander';
 /**
- * Element commands — the strategic building blocks in a workspace. All are
- * workspace-scoped via `--workspace` (falling back to the default workspace).
+ * Element commands — the strategic building blocks in a workspace. Most are
+ * workspace-scoped via `--workspace` (falling back to the default workspace);
+ * `types` is a local, network-free lookup of the method vocabulary.
  */
 export declare function registerElementCommands(program: Command): void;
 //# sourceMappingURL=element.d.ts.map

package/dist/commands/element.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"element.d.ts","sourceRoot":"","sources":["../../src/commands/element.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAkBnC;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA8S9D"}
+{"version":3,"file":"element.d.ts","sourceRoot":"","sources":["../../src/commands/element.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AA2EnC;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA2T9D"}

package/dist/commands/element.js

@@ -1,3 +1,4 @@
+import { getElementDefinition, getElementsForComponent, SKHEMA_MAPPING, } from '@skhema/method';
 import chalk from 'chalk';
 import { resolveClient } from '../lib/api/client.js';
 import { asRecord, buildBody, coerceList, readPayloadFile, resolveWorkspaceId, } from '../lib/api/command-helpers.js';
@@ -8,9 +9,47 @@ function summarize(content) {
     const text = typeof content === 'string' ? content : '';
     return text.length > 48 ? `${text.slice(0, 47)}…` : text || '—';
 }
+/** Human-friendly rendering of an expected mood (e.g. `noun_phrase` → `noun phrase`). */
+function formatMood(mood) {
+    return mood ? mood.replace(/_/g, ' ') : '—';
+}
+/**
+ * The component → allowed-element-type mapping, read straight from
+ * `@skhema/method` (SKHEMA_MAPPING) in canonical component-flow order. This is
+ * the same vocabulary the backend enforces, so agents can discover the
+ * allow-list locally instead of probing it via `bad_request` errors.
+ */
+function buildElementTypeMapping() {
+    return SKHEMA_MAPPING.componentFlow.map((component) => ({
+        component: component.value,
+        label: component.label,
+        acronym: component.acronym,
+        elementTypes: getElementsForComponent(component.value).map((element) => ({
+            type: element.value,
+            label: element.label,
+            acronym: element.acronym,
+            mood: getElementDefinition(element.value)?.expectedMood ?? null,
+        })),
+    }));
+}
+/** Render the mapping as a per-component section with an element-type table. */
+function renderElementTypeMapping(mapping) {
+    logHeader('Element types by component');
+    for (const component of mapping) {
+        log('');
+        log(chalk.bold(`${component.label} ${chalk.dim(`(${component.acronym})`)}`));
+        logTable(['acronym', 'type', 'label', 'mood'], component.elementTypes.map((element) => [
+            element.acronym,
+            element.type,
+            element.label,
+            formatMood(element.mood),
+        ]));
+    }
+}
 /**
- * Element commands — the strategic building blocks in a workspace. All are
- * workspace-scoped via `--workspace` (falling back to the default workspace).
+ * Element commands — the strategic building blocks in a workspace. Most are
+ * workspace-scoped via `--workspace` (falling back to the default workspace);
+ * `types` is a local, network-free lookup of the method vocabulary.
  */
 export function registerElementCommands(program) {
     const element = program.command('element').description('Element commands');
@@ -200,4 +239,15 @@ export function registerElementCommands(program) {
             return data;
         });
     });
+    element
+        .command('types')
+        .description('List element types allowed in each component (method vocabulary, no network)')
+        .action(async () => {
+        await runCommand('element types', async () => {
+            const mapping = buildElementTypeMapping();
+            if (!getGlobalOptions().json)
+                renderElementTypeMapping(mapping);
+            return { components: mapping };
+        });
+    });
 }

package/dist/commands/skills.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"skills.d.ts","sourceRoot":"","sources":["../../src/commands/skills.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAenC,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAgO7D"}
+{"version":3,"file":"skills.d.ts","sourceRoot":"","sources":["../../src/commands/skills.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAwCnC,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA6U7D"}

package/dist/commands/skills.js

@@ -1,10 +1,28 @@
+import readline from 'readline';
 import chalk from 'chalk';
 import ora from 'ora';
 import { getGlobalOptions, log, logHeader, logTable, outputError, outputSuccess, } from '../lib/output.js';
 import { listBundledSkills, readBundledSkill } from '../lib/skills/bundled.js';
-import { installSkills, updateSkills } from '../lib/skills/installer.js';
+import { installSkills, pruneSkills, updateSkills, } from '../lib/skills/installer.js';
 import { readLock } from '../lib/skills/lock.js';
 import { detectPlatforms } from '../lib/skills/platform-detect.js';
+function interactiveTerminal() {
+    return (Boolean(process.stdin.isTTY && process.stdout.isTTY) &&
+        !getGlobalOptions().json);
+}
+async function confirm(question) {
+    const rl = readline.createInterface({
+        input: process.stdin,
+        output: process.stdout,
+    });
+    const answer = await new Promise((resolve) => {
+        rl.question(`${question} [y/N]: `, (value) => {
+            rl.close();
+            resolve(value.trim().toLowerCase());
+        });
+    });
+    return answer === 'y' || answer === 'yes';
+}
 export function registerSkillsCommands(program) {
     const skills = program.command('skills').description('AI skills management');
     skills
@@ -171,4 +189,83 @@ export function registerSkillsCommands(program) {
             process.exit(1);
         }
     });
+    skills
+        .command('prune')
+        .description('Remove installed skills that are no longer bundled with this CLI (retired or renamed)')
+        .option('--platform <id>', 'Prune a specific platform only')
+        .option('--yes', 'Actually remove; without it, only preview what would go')
+        .action(async (options) => {
+        const opts = getGlobalOptions();
+        const spinner = opts.json || opts.quiet
+            ? null
+            : ora('Detecting agent platforms...').start();
+        try {
+            const platforms = detectPlatforms().filter((p) => p.detected);
+            const targets = options.platform
+                ? platforms.filter((p) => p.id === options.platform)
+                : platforms;
+            if (targets.length === 0) {
+                spinner?.warn(options.platform
+                    ? `Platform "${options.platform}" not detected.`
+                    : 'No agent platforms detected.');
+                if (opts.json)
+                    outputSuccess([], 'skills prune');
+                return;
+            }
+            // Preview first — this never writes.
+            const preview = await pruneSkills(targets, { apply: false });
+            if (preview.length === 0) {
+                spinner?.succeed('No retired skills to prune. Everything is current.');
+                if (opts.json)
+                    outputSuccess([], 'skills prune');
+                return;
+            }
+            spinner?.info(`Found ${preview.length} retired skill install(s) across ${new Set(preview.map((r) => r.platform.id)).size} platform(s).`);
+            // Mutate only with --yes, or after an interactive confirmation.
+            let apply = Boolean(options.yes);
+            if (!apply) {
+                if (interactiveTerminal()) {
+                    logHeader('Would remove');
+                    logTable(['Platform', 'Skill', 'Path'], preview.map((r) => [
+                        r.platform.name,
+                        r.skill,
+                        chalk.dim(r.targetPath),
+                    ]));
+                    apply = await confirm('Remove these skills?');
+                }
+            }
+            if (!apply) {
+                const results = preview;
+                if (opts.json) {
+                    outputSuccess(results, 'skills prune');
+                    return;
+                }
+                logHeader('Prune Preview (dry run — pass --yes to remove)');
+                logTable(['Platform', 'Skill', 'Path'], results.map((r) => [
+                    r.platform.name,
+                    r.skill,
+                    chalk.dim(r.targetPath),
+                ]));
+                log('');
+                log(chalk.dim('Re-run with --yes to remove these skills.'));
+                return;
+            }
+            const results = await pruneSkills(targets, { apply: true });
+            if (opts.json) {
+                outputSuccess(results, 'skills prune');
+                return;
+            }
+            logHeader('Prune Results');
+            logTable(['Platform', 'Skill', 'Status'], results.map((r) => [
+                r.platform.name,
+                r.skill,
+                chalk.red(r.action),
+            ]));
+        }
+        catch (error) {
+            spinner?.fail('Prune failed');
+            outputError(error instanceof Error ? error.message : 'Unknown error', 'skills prune');
+            process.exit(1);
+        }
+    });
 }

package/dist/lib/auth/api-key-admin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-key-admin.d.ts","sourceRoot":"","sources":["../../../src/lib/auth/api-key-admin.ts"],"names":[],"mappings":"AAaA,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,OAAO,GAAG,YAAY,CAAA;AAC9D,MAAM,MAAM,WAAW,GAAG,KAAK,GAAG,MAAM,CAAA;AAExC,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,MAAM,CAAA;IACZ,cAAc,EAAE,MAAM,CAAA;IACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,UAAU,EAAE,gBAAgB,CAAA;IAC5B,KAAK,EAAE,WAAW,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB;AAED,MAAM,WAAW,aAAc,SAAQ,aAAa;IAClD,4DAA4D;IAC5D,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,aAAa,EAAE,CAAA;IACrB,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAA;CACtC;AAsDD,wBAAsB,YAAY,CAChC,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE;IACL,cAAc,EAAE,MAAM,CAAA;IACtB,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,gBAAgB,CAAA;IAC5B,KAAK,EAAE,WAAW,CAAA;CACnB,GACA,OAAO,CAAC,aAAa,CAAC,CAKxB;AAED,wBAAsB,WAAW,CAC/B,WAAW,EAAE,MAAM,EACnB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,iBAAiB,CAAC,CAK5B;AAED,wBAAsB,YAAY,CAChC,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAK9C"}
+{"version":3,"file":"api-key-admin.d.ts","sourceRoot":"","sources":["../../../src/lib/auth/api-key-admin.ts"],"names":[],"mappings":"AAYA,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,OAAO,GAAG,YAAY,CAAA;AAC9D,MAAM,MAAM,WAAW,GAAG,KAAK,GAAG,MAAM,CAAA;AAExC,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,MAAM,CAAA;IACZ,cAAc,EAAE,MAAM,CAAA;IACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,UAAU,EAAE,gBAAgB,CAAA;IAC5B,KAAK,EAAE,WAAW,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB;AAED,MAAM,WAAW,aAAc,SAAQ,aAAa;IAClD,4DAA4D;IAC5D,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,aAAa,EAAE,CAAA;IACrB,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAA;CACtC;AAsDD,wBAAsB,YAAY,CAChC,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE;IACL,cAAc,EAAE,MAAM,CAAA;IACtB,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,gBAAgB,CAAA;IAC5B,KAAK,EAAE,WAAW,CAAA;CACnB,GACA,OAAO,CAAC,aAAa,CAAC,CAKxB;AAED,wBAAsB,WAAW,CAC/B,WAAW,EAAE,MAAM,EACnB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,iBAAiB,CAAC,CAK5B;AAED,wBAAsB,YAAY,CAChC,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAK9C"}

package/dist/lib/auth/api-key-admin.js

@@ -1,11 +1,10 @@
 import { SkhemaApiError } from '@skhema/sdk';
 import { SUPABASE_PUBLISHABLE_KEY, SUPABASE_URL } from '../config.js';
 /**
- * Client for the `api-key-manage` edge function — the same function the web
- * dashboard uses to create/list/revoke API keys. It authenticates with the
- * caller's OAuth bearer (`verifyAuth` + `requireUser`), so issuance authorization
- * (org owner/admin, plan limits, one-time key display, security emails) is
- * enforced server-side and unchanged. This is NOT the public gateway.
+ * Client for creating, listing, and revoking the caller's Skhema API keys.
+ * Authenticates with the user's OAuth bearer; key-issuance authorization
+ * (org role, plan limits, one-time key display, security notifications) is
+ * enforced by the server, not the CLI.
  */
 const API_KEY_MANAGE_URL = `${SUPABASE_URL}/functions/v1/api-key-manage`;
 async function callApiKeyManage(accessToken, body) {

package/dist/lib/config.js

@@ -25,10 +25,10 @@ export const API_KEY_ENV_VAR = 'SKHEMA_API_KEY';
 // never injects a credential here.
 // Override via env for staging/preview environments.
 export const MCP_SERVER_URL = process.env.SKHEMA_MCP_URL ?? 'https://mcp.skhema.com/mcp';
-// Supabase project configuration.
-// Publishable keys are safe to embed in client-side code (they are the new
-// replacement for the legacy anon key and rely on RLS + server-side auth
-// checks for security). Override via env for staging/preview environments.
+// Backend project configuration for the CLI's authenticated data calls.
+// The publishable key is safe to embed in client-side code — it carries no
+// privileged access and relies on server-side authorization. Override via env
+// for staging/preview environments.
 export const SUPABASE_URL = process.env.SKHEMA_SUPABASE_URL ?? 'https://uiybgpcjjrdqmdbarqlx.supabase.co';
 export const SUPABASE_PUBLISHABLE_KEY = process.env.SKHEMA_SUPABASE_PUBLISHABLE_KEY ??
     'sb_publishable_G9uXii5AYDLK6vUpyaqy3A_-NmdwQF1';

package/dist/lib/contribute/api.d.ts

@@ -1,7 +1,7 @@
-/** Supabase edge functions the contributor commands talk to. */
+/** Backend actions the contributor commands invoke. */
 export type ContributeEdgeFunction = 'contributor-manage' | 'embed-manage' | 'contributor-payout';
 /**
- * POST a JSON action to a Supabase edge function with the stored OAuth session.
+ * POST a JSON action to the contributor backend with the stored OAuth session.
  * Shared by every authenticated `contribute` subcommand so the auth headers,
  * base URL, and error mapping live in exactly one place.
  *

package/dist/lib/contribute/api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../../src/lib/contribute/api.ts"],"names":[],"mappings":"AAGA,gEAAgE;AAChE,MAAM,MAAM,sBAAsB,GAC9B,oBAAoB,GACpB,cAAc,GACd,oBAAoB,CAAA;AAExB;;;;;;;;;GASG;AACH,wBAAsB,sBAAsB,CAAC,CAAC,EAC5C,EAAE,EAAE,sBAAsB,EAC1B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,CAAC,CAAC,CA+BZ"}
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../../src/lib/contribute/api.ts"],"names":[],"mappings":"AAGA,uDAAuD;AACvD,MAAM,MAAM,sBAAsB,GAC9B,oBAAoB,GACpB,cAAc,GACd,oBAAoB,CAAA;AAExB;;;;;;;;;GASG;AACH,wBAAsB,sBAAsB,CAAC,CAAC,EAC5C,EAAE,EAAE,sBAAsB,EAC1B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,CAAC,CAAC,CA+BZ"}

package/dist/lib/contribute/api.js

@@ -1,7 +1,7 @@
 import { getStoredCredentials } from '../auth/token-store.js';
 import { SUPABASE_PUBLISHABLE_KEY, SUPABASE_URL } from '../config.js';
 /**
- * POST a JSON action to a Supabase edge function with the stored OAuth session.
+ * POST a JSON action to the contributor backend with the stored OAuth session.
  * Shared by every authenticated `contribute` subcommand so the auth headers,
  * base URL, and error mapping live in exactly one place.
  *
@@ -25,8 +25,8 @@ export async function postContributeFunction(fn, body) {
         body: JSON.stringify(body),
     });
     if (!response.ok) {
-        // Supabase edge functions and the gateway return `{ message }`, while some
-        // handlers return `{ error }` — accept either before the generic fallback.
+        // The backend returns `{ message }`, while some handlers return
+        // `{ error }` — accept either before the generic fallback.
         const detail = (await response.json().catch(() => ({})));
         throw new Error(detail.error ||
             detail.message ||

package/dist/lib/contribute/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/lib/contribute/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAA;IACnB,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,CAAA;IACjC,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAA;IACnB,aAAa,EAAE,MAAM,CAAA;IACrB,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACnC;AAED,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAA;IACX,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,6BAA6B;IAC5C,aAAa,EAAE,MAAM,CAAA;IACrB,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,KAAK,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACzD,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,CAAA;IACjC,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,4BAA4B;IAC3C,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAClC,YAAY,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,4BAA4B;IAC3C,aAAa,EAAE,MAAM,CAAA;IACrB,aAAa,EAAE,MAAM,CAAA;IACrB,QAAQ,EAAE,KAAK,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACzD,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,2BAA2B;IAC1C,GAAG,EAAE,MAAM,CAAA;IACX,aAAa,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,aAAa,EAAE,MAAM,CAAA;IACrB,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,gCAAgC;IAC/C,aAAa,EAAE,MAAM,CAAA;IACrB,aAAa,EAAE,MAAM,CAAA;IACrB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,KAAK,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACzD,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;CACpB;AASD,wCAAwC;AACxC,MAAM,WAAW,yBAAyB;IACxC,aAAa,EAAE,OAAO,CAAA;IACtB,QAAQ,EAAE,OAAO,CAAA;IACjB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7B;AAED,uCAAuC;AACvC,MAAM,WAAW,0BAA0B;IACzC,aAAa,EAAE,MAAM,CAAA;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,qBAAqB,EAAE,UAAU,GAAG,cAAc,CAAA;IAClD,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,mBAAmB,EAAE,MAAM,CAAA;IAC3B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;CAChC;AAED,wEAAwE;AACxE,MAAM,WAAW,4BAA4B;IAC3C,OAAO,EAAE;QACP,YAAY,EAAE,MAAM,CAAA;QACpB,WAAW,EAAE,MAAM,CAAA;QACnB,YAAY,EAAE,MAAM,CAAA;QACpB,kBAAkB,EAAE,MAAM,CAAA;KAC3B,CAAA;IACD,WAAW,EAAE;QACX,sBAAsB,EAAE,KAAK,CAAC;YAC5B,OAAO,EAAE,MAAM,CAAA;YACf,MAAM,EAAE,MAAM,CAAA;YACd,KAAK,EAAE,MAAM,CAAA;YACb,GAAG,EAAE,MAAM,CAAA;YACX,YAAY,EAAE,MAAM,CAAA;YACpB,YAAY,EAAE,MAAM,CAAA;SACrB,CAAC,CAAA;QACF,eAAe,EAAE,KAAK,CAAC;YACrB,MAAM,EAAE,MAAM,CAAA;YACd,KAAK,EAAE,MAAM,CAAA;YACb,MAAM,EAAE,MAAM,CAAA;YACd,UAAU,EAAE,MAAM,CAAA;SACnB,CAAC,CAAA;KACH,CAAA;CACF;AAED,gFAAgF;AAChF,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE;QACP,YAAY,EAAE,MAAM,CAAA;QACpB,WAAW,EAAE,MAAM,CAAA;QACnB,YAAY,EAAE,MAAM,CAAA;QACpB,kBAAkB,EAAE,MAAM,CAAA;QAC1B,YAAY,EAAE,MAAM,CAAA;QACpB,YAAY,EAAE,MAAM,CAAA;QACpB,OAAO,EAAE,MAAM,CAAA;KAChB,CAAA;IACD,KAAK,EAAE,KAAK,CAAC;QACX,OAAO,EAAE,MAAM,CAAA;QACf,SAAS,EAAE,MAAM,CAAA;QACjB,KAAK,EAAE,MAAM,CAAA;QACb,MAAM,EAAE,MAAM,CAAA;KACf,CAAC,CAAA;CACH;AAED,wCAAwC;AACxC,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,YAAY,EAAE,CAAA;CACxB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/lib/contribute/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAA;IACnB,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,CAAA;IACjC,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAA;IACnB,aAAa,EAAE,MAAM,CAAA;IACrB,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACnC;AAED,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAA;IACX,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,6BAA6B;IAC5C,aAAa,EAAE,MAAM,CAAA;IACrB,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,KAAK,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACzD,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,CAAA;IACjC,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,4BAA4B;IAC3C,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAClC,YAAY,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,4BAA4B;IAC3C,aAAa,EAAE,MAAM,CAAA;IACrB,aAAa,EAAE,MAAM,CAAA;IACrB,QAAQ,EAAE,KAAK,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACzD,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,2BAA2B;IAC1C,GAAG,EAAE,MAAM,CAAA;IACX,aAAa,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,aAAa,EAAE,MAAM,CAAA;IACrB,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,gCAAgC;IAC/C,aAAa,EAAE,MAAM,CAAA;IACrB,aAAa,EAAE,MAAM,CAAA;IACrB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,KAAK,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACzD,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;CACpB;AAOD,wCAAwC;AACxC,MAAM,WAAW,yBAAyB;IACxC,aAAa,EAAE,OAAO,CAAA;IACtB,QAAQ,EAAE,OAAO,CAAA;IACjB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7B;AAED,uCAAuC;AACvC,MAAM,WAAW,0BAA0B;IACzC,aAAa,EAAE,MAAM,CAAA;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,qBAAqB,EAAE,UAAU,GAAG,cAAc,CAAA;IAClD,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,mBAAmB,EAAE,MAAM,CAAA;IAC3B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;CAChC;AAED,wEAAwE;AACxE,MAAM,WAAW,4BAA4B;IAC3C,OAAO,EAAE;QACP,YAAY,EAAE,MAAM,CAAA;QACpB,WAAW,EAAE,MAAM,CAAA;QACnB,YAAY,EAAE,MAAM,CAAA;QACpB,kBAAkB,EAAE,MAAM,CAAA;KAC3B,CAAA;IACD,WAAW,EAAE;QACX,sBAAsB,EAAE,KAAK,CAAC;YAC5B,OAAO,EAAE,MAAM,CAAA;YACf,MAAM,EAAE,MAAM,CAAA;YACd,KAAK,EAAE,MAAM,CAAA;YACb,GAAG,EAAE,MAAM,CAAA;YACX,YAAY,EAAE,MAAM,CAAA;YACpB,YAAY,EAAE,MAAM,CAAA;SACrB,CAAC,CAAA;QACF,eAAe,EAAE,KAAK,CAAC;YACrB,MAAM,EAAE,MAAM,CAAA;YACd,KAAK,EAAE,MAAM,CAAA;YACb,MAAM,EAAE,MAAM,CAAA;YACd,UAAU,EAAE,MAAM,CAAA;SACnB,CAAC,CAAA;KACH,CAAA;CACF;AAED,gFAAgF;AAChF,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE;QACP,YAAY,EAAE,MAAM,CAAA;QACpB,WAAW,EAAE,MAAM,CAAA;QACnB,YAAY,EAAE,MAAM,CAAA;QACpB,kBAAkB,EAAE,MAAM,CAAA;QAC1B,YAAY,EAAE,MAAM,CAAA;QACpB,YAAY,EAAE,MAAM,CAAA;QACpB,OAAO,EAAE,MAAM,CAAA;KAChB,CAAA;IACD,KAAK,EAAE,KAAK,CAAC;QACX,OAAO,EAAE,MAAM,CAAA;QACf,SAAS,EAAE,MAAM,CAAA;QACjB,KAAK,EAAE,MAAM,CAAA;QACb,MAAM,EAAE,MAAM,CAAA;KACf,CAAC,CAAA;CACH;AAED,wCAAwC;AACxC,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,YAAY,EAAE,CAAA;CACxB"}

package/dist/lib/docs/reference-generator.js

@@ -7,8 +7,8 @@ import { ExitCode } from '../api/run-command.js';
  * options, or exit codes change — never on a plain version bump.
  *
  * The committed copy lives at docs/cli-reference.mdx and is drift-tested
- * (src/__tests__/cli-reference-drift.test.ts). The deployed copy is
- * skhema-web content/docs/api/cli.mdx — sync it when this file changes.
+ * (src/__tests__/cli-reference-drift.test.ts). A copy is also published to the
+ * public docs site — regenerate and sync both when this file changes.
  */
 /** Human meanings for the stable exit-code contract (run-command.ts). */
 const EXIT_CODE_MEANINGS = {
@@ -137,7 +137,7 @@ export function generateCliReference() {
     lines.push('---');
     lines.push('');
     lines.push('{/* AUTO-GENERATED from the @skhema/cli command tree — do not edit by hand.');
-    lines.push('    Regenerate with `npm run generate:cli-reference` in skhema-packages/skhema-cli. */}');
+    lines.push('    Regenerate with `npm run generate:cli-reference`. */}');
     lines.push('');
     lines.push('This page is generated from the CLI itself, so it always matches the installed command surface. For a guided tour, start with [Using the CLI](/docs/guides/using-the-cli).');
     lines.push('');

package/dist/lib/skills/installer.d.ts

@@ -1,4 +1,17 @@
-import type { DetectedPlatform, InstallResult } from './types.js';
+import type { DetectedPlatform, InstallResult, PruneResult } from './types.js';
 export declare function installSkills(platforms: DetectedPlatform[]): Promise<InstallResult[]>;
 export declare function updateSkills(platforms: DetectedPlatform[]): Promise<InstallResult[]>;
+/**
+ * Find skills we previously installed that are no longer bundled with this CLI
+ * (retired or renamed) and remove them from each platform.
+ *
+ * Attribution is anchored on the per-platform lock file: only skills recorded
+ * there by our own installer are candidates, so a skill authored by the user or
+ * another tool that happens to share the skills directory is never touched. With
+ * `apply: false` (the default), nothing is written — the returned list is a
+ * preview of what removal would do.
+ */
+export declare function pruneSkills(platforms: DetectedPlatform[], options?: {
+    apply: boolean;
+}): Promise<PruneResult[]>;
 //# sourceMappingURL=installer.d.ts.map

package/dist/lib/skills/installer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"installer.d.ts","sourceRoot":"","sources":["../../../src/lib/skills/installer.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AA+DjE,wBAAsB,aAAa,CACjC,SAAS,EAAE,gBAAgB,EAAE,GAC5B,OAAO,CAAC,aAAa,EAAE,CAAC,CA0C1B;AAED,wBAAsB,YAAY,CAChC,SAAS,EAAE,gBAAgB,EAAE,GAC5B,OAAO,CAAC,aAAa,EAAE,CAAC,CAG1B"}
+{"version":3,"file":"installer.d.ts","sourceRoot":"","sources":["../../../src/lib/skills/installer.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AA+D9E,wBAAsB,aAAa,CACjC,SAAS,EAAE,gBAAgB,EAAE,GAC5B,OAAO,CAAC,aAAa,EAAE,CAAC,CA0C1B;AAED,wBAAsB,YAAY,CAChC,SAAS,EAAE,gBAAgB,EAAE,GAC5B,OAAO,CAAC,aAAa,EAAE,CAAC,CAG1B;AAED;;;;;;;;;GASG;AACH,wBAAsB,WAAW,CAC/B,SAAS,EAAE,gBAAgB,EAAE,EAC7B,OAAO,GAAE;IAAE,KAAK,EAAE,OAAO,CAAA;CAAqB,GAC7C,OAAO,CAAC,WAAW,EAAE,CAAC,CAmCxB"}

package/dist/lib/skills/installer.js

@@ -83,3 +83,43 @@ export async function updateSkills(platforms) {
     // Update uses the same logic as install — content comparison handles skip/update
     return installSkills(platforms);
 }
+/**
+ * Find skills we previously installed that are no longer bundled with this CLI
+ * (retired or renamed) and remove them from each platform.
+ *
+ * Attribution is anchored on the per-platform lock file: only skills recorded
+ * there by our own installer are candidates, so a skill authored by the user or
+ * another tool that happens to share the skills directory is never touched. With
+ * `apply: false` (the default), nothing is written — the returned list is a
+ * preview of what removal would do.
+ */
+export async function pruneSkills(platforms, options = { apply: false }) {
+    const bundledNames = new Set(getBundledSkills().map((skill) => skill.name));
+    const results = [];
+    for (const platform of platforms) {
+        const lock = readLock(platform);
+        const retired = Object.keys(lock.skills)
+            .filter((name) => !bundledNames.has(name))
+            .sort((a, b) => a.localeCompare(b));
+        for (const name of retired) {
+            const targetPath = path.join(platform.skillsDir, name);
+            if (options.apply) {
+                // Remove only the directory our lock attributes to this skill.
+                if (fs.existsSync(targetPath)) {
+                    fs.rmSync(targetPath, { recursive: true, force: true });
+                }
+                delete lock.skills[name];
+            }
+            results.push({
+                platform,
+                skill: name,
+                action: options.apply ? 'removed' : 'would-remove',
+                targetPath,
+            });
+        }
+        if (options.apply && retired.length > 0) {
+            writeLock(platform, lock);
+        }
+    }
+    return results;
+}

package/dist/lib/skills/types.d.ts

@@ -17,6 +17,12 @@ export interface InstallResult {
     action: 'installed' | 'updated' | 'skipped';
     targetPath: string;
 }
+export interface PruneResult {
+    platform: DetectedPlatform;
+    skill: string;
+    action: 'removed' | 'would-remove';
+    targetPath: string;
+}
 export interface SkillLock {
     version: string;
     installedAt: string;

package/dist/lib/skills/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/lib/skills/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,EAAE,CAAA;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,gBAAgB,CAAA;IAC1B,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,SAAS,CAAA;IAC3C,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,MAAM,CACZ,MAAM,EACN;QACE,OAAO,EAAE,MAAM,CAAA;QACf,QAAQ,EAAE,MAAM,CAAA;QAChB,WAAW,EAAE,MAAM,CAAA;KACpB,CACF,CAAA;CACF"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/lib/skills/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,EAAE,CAAA;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,gBAAgB,CAAA;IAC1B,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,SAAS,CAAA;IAC3C,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,gBAAgB,CAAA;IAC1B,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,SAAS,GAAG,cAAc,CAAA;IAClC,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,MAAM,CACZ,MAAM,EACN;QACE,OAAO,EAAE,MAAM,CAAA;QACf,QAAQ,EAAE,MAAM,CAAA;QAChB,WAAW,EAAE,MAAM,CAAA;KACpB,CACF,CAAA;CACF"}

package/dist/program.d.ts

@@ -1,4 +1,16 @@
-import { Command } from 'commander';
+import { Command, CommanderError } from 'commander';
+/**
+ * Resolve the process exit code for a parser-level {@link CommanderError}.
+ *
+ * Commander's own defaults are inconsistent (unknown option → 1, unknown
+ * command silently swallowed → 0, missing subcommand → 1). We collapse them
+ * onto the CLI's stable {@link ExitCode} contract: printing help or the version
+ * is an informational success (`0`), and every other parser failure — unknown
+ * option, unknown/missing command, missing or excess argument — is a usage
+ * error ({@link ExitCode.Usage}). Commander tags the informational cases with
+ * `exitCode === 0`, which is the only discriminator we need.
+ */
+export declare function resolveCommanderExitCode(err: CommanderError): number;
 /**
  * Assemble the full skhema CLI program. The runtime entry (cli.ts) and the
  * docs reference generator both build from here, so every registered command

package/dist/program.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"program.d.ts","sourceRoot":"","sources":["../src/program.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAqBnC;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAiDrD"}
+{"version":3,"file":"program.d.ts","sourceRoot":"","sources":["../src/program.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAsBnD;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,cAAc,GAAG,MAAM,CAEpE;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAqErD"}

package/dist/program.js

@@ -16,8 +16,23 @@ import { registerStrategyCommands } from './commands/strategy.js';
 import { registerWebhookCommands } from './commands/webhook.js';
 import { registerWorkspaceCommands } from './commands/workspace.js';
 import { setApiKeyFlag } from './lib/api/credential-context.js';
+import { ExitCode } from './lib/api/run-command.js';
 import { showBanner } from './lib/banner.js';
 import { setGlobalOptions } from './lib/output.js';
+/**
+ * Resolve the process exit code for a parser-level {@link CommanderError}.
+ *
+ * Commander's own defaults are inconsistent (unknown option → 1, unknown
+ * command silently swallowed → 0, missing subcommand → 1). We collapse them
+ * onto the CLI's stable {@link ExitCode} contract: printing help or the version
+ * is an informational success (`0`), and every other parser failure — unknown
+ * option, unknown/missing command, missing or excess argument — is a usage
+ * error ({@link ExitCode.Usage}). Commander tags the informational cases with
+ * `exitCode === 0`, which is the only discriminator we need.
+ */
+export function resolveCommanderExitCode(err) {
+    return err.exitCode === 0 ? ExitCode.Ok : ExitCode.Usage;
+}
 /**
  * Assemble the full skhema CLI program. The runtime entry (cli.ts) and the
  * docs reference generator both build from here, so every registered command
@@ -25,6 +40,15 @@ import { setGlobalOptions } from './lib/output.js';
  */
 export function buildProgram(version) {
     const program = new Command();
+    // Throw a CommanderError instead of calling process.exit directly, so the
+    // entry point can map every parser-level failure onto the ExitCode taxonomy.
+    // Set before registering subcommands: commander copies the exit callback into
+    // each child at `.command()` time, so this one call covers the whole tree.
+    program.exitOverride();
+    // The default `.action()` below (banner on bare invocation) otherwise
+    // suppresses commander's implicit `help` command, so `skhema help [command]`
+    // would fall through to the unknown-command guard. Re-enable it explicitly.
+    program.helpCommand(true);
     program
         .name('skhema')
         .description('Skhema CLI — drive the Skhema Public API from your terminal, CI, or agent')
@@ -43,7 +67,16 @@ export function buildProgram(version) {
         setApiKeyFlag(opts.apiKey);
     })
         .action(() => {
-        // Show banner when run with no subcommand
+        // A bare `skhema` invocation shows the banner. Any leftover operand means
+        // an unknown command was given: commander routes it here (the default
+        // action) instead of erroring, so we must reject it ourselves — otherwise
+        // the banner prints and the process exits 0, hiding the mistake.
+        if (program.args.length > 0) {
+            program.error(`unknown command '${program.args[0]}'`, {
+                code: 'commander.unknownCommand',
+                exitCode: ExitCode.Usage,
+            });
+        }
         showBanner(version);
         program.help();
     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skhema/cli",
-  "version": "0.5.1",
+  "version": "0.6.1",
   "description": "Skhema CLI - Authentication and AI skills management for agent platforms",
   "type": "module",
   "main": "dist/index.js",
@@ -20,29 +20,12 @@
     "skills"
   ],
   "scripts": {
-    "dev": "tsc --watch",
     "build": "tsc",
-    "lint": "eslint .",
-    "lint:fix": "eslint . --fix",
-    "format": "prettier --write .",
-    "format:check": "prettier --check .",
-    "typecheck": "tsc --noEmit",
-    "test": "vitest run",
-    "test:watch": "vitest",
-    "clean": "rm -rf dist node_modules skills",
-    "clean:dist": "rm -rf dist",
-    "sync-skills": "tsx scripts/sync-skills.ts",
-    "prebuild": "npm run clean:dist && npm run sync-skills",
-    "prepack": "npm run sync-skills",
-    "check": "npm run typecheck && npm run lint && npm run format:check",
-    "check:fix": "npm run format && npm run lint:fix",
-    "prepublishOnly": "npm run build",
-    "postinstall": "node dist/postinstall.js || true",
-    "generate:cli-reference": "tsx scripts/generate-cli-reference.ts"
+    "prebuild": "rm -rf dist"
   },
   "dependencies": {
     "@skhema/agent-sdk": "0.1.4",
-    "@skhema/method": "0.3.0",
+    "@skhema/method": "0.4.1",
     "@skhema/sdk": "0.2.4",
     "chalk": "^5.3.0",
     "commander": "^12.0.0",
@@ -50,8 +33,6 @@
   },
   "devDependencies": {
     "@mdx-js/mdx": "3.1.1",
-    "@skhema/linter": "2.3.0",
-    "@skhema/prettier-config": "1.0.0",
     "@types/node": "^22.0.0",
     "eslint": "^9.0.0",
     "prettier": "^3.0.0",
@@ -67,5 +48,12 @@
   "publishConfig": {
     "access": "public"
   },
-  "homepage": "https://skhema.com/docs/api"
+  "homepage": "https://skhema.com/docs/cli",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/skhema/cli.git"
+  },
+  "bugs": {
+    "url": "https://github.com/skhema/cli/issues"
+  }
 }

package/skills/skhema-operate/references/author-elements.md

@@ -38,8 +38,9 @@ to *write* the element — indicative for a judgment, imperative for a command,
 a noun phrase for a thing. It is a check on the sentence. **Placement** tells
 you *where the element is allowed to live*, and the platform enforces a strict
 type→component allow-list that does NOT follow mood. Put a type in the wrong
-component and `element create` rejects it. There is no discovery command for
-this; the allow-list is:
+component and `element create` rejects it. Discover it locally (no network)
+with `skhema element types` (add `--json` for machine-readable output); the
+allow-list is:
 
 | Component | Element types it accepts |
 |---|---|

package/skills/skhema-pressure-test/references/pre-mortem.md

@@ -83,13 +83,18 @@ thing we've decided is true" and "a thing we've decided to do about a danger" is
 the whole discipline — an assumption you never test and a risk you never watch
 are the same landmine wearing two hats.
 
-**Encoding this in Skhema.** There is no `risk` element type in the taxonomy, so
-both halves land as `assumption_hypothesis`. A belief is the bet stated as a
-claim. A risk is *also* an `assumption_hypothesis` — the bet that the danger
-stays away — paired with a linked `experiment` or `action` that carries the
-tripwire: the signal you'll watch and what you'll do when it fires. The tripwire
-condition itself goes in the element's `reasoning` field until the taxonomy
-grows a better home for it. Don't reach for a `risk` type; it doesn't exist.
+**Encoding this in Skhema.** There is no `risk` element type in the taxonomy —
+a deliberate decision (2026-07-20), not a gap. Encode both halves with the
+types that exist. A belief is the bet stated as a claim: an
+`assumption_hypothesis`. A risk is *also* an `assumption_hypothesis` — the bet
+that the danger stays away — paired with a linked `experiment` or `action` that
+carries the tripwire: the signal you'll watch and what you'll do when it fires.
+The tripwire condition goes in the element's `reasoning` field. One refinement:
+when the risk is really "this quantity must hold for the solution to stay
+valid" — a threshold, a rate, a level — encode it as a `performance_variable`
+(in Measures) instead; that is exactly what the type means, and it gives the
+tripwire a measurable home. Don't reach for a `risk` type; it doesn't exist,
+and won't unless a feature ever needs to query risks as first-class objects.
 
 ```
 CAUSE 1 → ASSUMPTION: Sales team can sell upmarket.

package/skills/.manifest.json

@@ -1,13 +0,0 @@
-{
-  "syncedAt": "2026-07-09T17:15:20.908Z",
-  "source": "/Users/michaellovell/Desktop/GitHub/skhema-skills",
-  "sourceSha": "2a3abbb24f2fb2539608102eabc90de10fc9984b",
-  "skills": [
-    "skhema-frame",
-    "skhema-compose",
-    "skhema-calibrate",
-    "skhema-pressure-test",
-    "skhema-communicate",
-    "skhema-operate"
-  ]
-}