@vruum/skills 0.6.44 → 0.6.46

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "vruum",
-  "version": "0.6.44",
+  "version": "0.6.46",
   "description": "Vruum AI skills + remote MCP server for B2B GTM teams. Slash commands for outreach triage, engagement triage, pipeline filling, prospect enrichment, and reply diagnosis, paired with the full Vruum MCP tool surface over OAuth 2.1.",
   "author": {
     "name": "Vruum AI",

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "vruum",
-  "version": "0.6.44",
+  "version": "0.6.46",
   "description": "Vruum AI skills + remote MCP server for B2B GTM teams. Skills for outreach triage, engagement triage, pipeline filling, prospect enrichment, and reply diagnosis, paired with the full Vruum MCP tool surface over OAuth 2.1.",
   "author": {
     "name": "Vruum AI",

package/README.md

@@ -4,7 +4,11 @@ Vruum AI skills for Claude Code, Codex CLI, and any AI assistant with a skill di
 
 Once installed, run `/vruum-guide` in your harness — it takes you from an empty account to your first reviewed outreach draft, then keeps recommending the next most valuable action.
 
-Pairs with the Vruum MCP server at [https://api.vruum.ai/mcp](https://api.vruum.ai/mcp). The MCP server exposes the `skill` tool (action=invoke to run a skill, action=publish to publish one), with `search` type=skills and `fetch` type=skill for discovery, so any connected client can run these skills. Skills themselves are distributed via the Claude Code plugin / marketplace; this npm package installs them into the agent-standard skills directory for harnesses without plugin support (Codex CLI, ChatGPT, Windsurf).
+Pairs with the Vruum MCP server at [https://api.vruum.ai/mcp](https://api.vruum.ai/mcp). The MCP server exposes the `skill` tool (action=invoke to run a skill, action=publish to publish one), with `search` type=skills and `fetch` type=skill for discovery, so any connected client can run these skills. This package installs Vruum-shipped skills into the standard skill directories used by Claude Code, Codex CLI, and other compatible harnesses.
+
+You do not need `@vruum/cli` to use Vruum. Connect the Vruum MCP and install
+this skills package; the CLI is optional for local files, scripting, CI, auth
+debugging, and the convenience `vruum init` command.
 
 ## Install
 
@@ -20,7 +24,15 @@ Add to `~/.claude.json`:
 }
 ```
 
-Install the skills via the Claude Code plugin / marketplace (below); the MCP server provides the `skill` tool (action=invoke). You don't need this npm package for Claude Code.
+Install through the Claude Code plugin / marketplace when available. Otherwise
+install the skills directly:
+
+```sh
+npx --yes @vruum/skills@latest install
+```
+
+Restart Claude Code afterward. On Windows, the installer uses directory
+junctions and does not require Administrator access or Developer Mode.
 
 ### Codex CLI
 
@@ -41,8 +53,8 @@ url = "https://api.vruum.ai/mcp"
 ```
 
 ```bash
-npx @vruum/skills install                                # detects ~/.agents/skills/
-npx @vruum/skills install --target /path/to/skills/dir   # any other harness
+npx --yes @vruum/skills@latest install                                # detects ~/.agents/skills/
+npx --yes @vruum/skills@latest install --target /path/to/skills/dir   # any other harness
 ```
 
 ### Cursor / VS Code Copilot / Cline
@@ -60,7 +72,7 @@ Download and upload via **Settings → Customize → Plugins → "+"**.
 ### ChatGPT / Windsurf / other harnesses without plugin support
 
 ```bash
-npx @vruum/skills install --target /path/to/skills/dir
+npx --yes @vruum/skills@latest install --target /path/to/skills/dir
 ```
 
 ## Coexisting with operator skills
@@ -99,16 +111,16 @@ the public skill instead of leaving a broken link.
 Skills auto-prompt to upgrade via the preamble. To upgrade explicitly:
 
 ```bash
-npx @vruum/skills install
+npx --yes @vruum/skills@latest install
 ```
 
 ## Uninstall
 
 ```bash
-npx @vruum/skills uninstall
+npx --yes @vruum/skills@latest uninstall
 ```
 
-Removes all symlinks this installer created. Does not touch `~/.vruum/auth.json` or other co-resident tool state.
+Removes all links or Windows junctions this installer created. Does not touch `~/.vruum/auth.json` or other co-resident tool state.
 
 ## Links
 

package/install.js

@@ -119,15 +119,15 @@ function printHelp() {
   console.log(`@vruum/skills v${VERSION}
 
 Usage:
-  npx @vruum/skills install                  Install into every detected harness
-  npx @vruum/skills install --target <dir>   Add an extra target (repeatable)
-  npx @vruum/skills install --dry-run        Preview changes, don't touch disk
-  npx @vruum/skills uninstall                Remove previously-installed symlinks
-  npx @vruum/skills list                     Show detected targets + what's installed
+  npx --yes @vruum/skills@latest install                  Install into every detected harness
+  npx --yes @vruum/skills@latest install --target <dir>   Add an extra target (repeatable)
+  npx --yes @vruum/skills@latest install --dry-run        Preview changes, don't touch disk
+  npx --yes @vruum/skills@latest uninstall                Remove installed links or junctions
+  npx --yes @vruum/skills@latest list                     Show detected targets + what's installed
 
 Pairs with the Vruum MCP server at https://api.vruum.ai/mcp, which provides
-the invoke_skill tool. This installer puts the SKILL.md files into a harness's
-local skill directory so the skills are available there too.
+the skill tool (action=invoke). This installer puts the SKILL.md files into a
+harness's local skill directory so the skills are available there too.
 
 Supported auto-detection:
   - Claude Code  ~/.claude/skills/
@@ -135,10 +135,9 @@ Supported auto-detection:
 
 Any other harness: pass --target <its skills directory>.
 
-Note: for Claude Code, install the skills via the Vruum plugin / marketplace
-instead of this installer. This installer is for Codex CLI, ChatGPT, Windsurf,
-and other assistants without plugin support. In every case the MCP server's
-invoke_skill tool can run a skill on demand.`);
+For Claude Code, prefer the Vruum plugin / marketplace when available;
+otherwise this installer auto-detects ~/.claude/skills. The Vruum CLI is not
+required. Restart the harness after installation so it discovers the skills.`);
 }
 
 function listAvailableSkills() {
@@ -196,6 +195,45 @@ function syncVruumRoot({ dryRun }) {
   return rows;
 }
 
+function pathApiFor(platform) {
+  return platform === 'win32' ? path.win32 : path.posix;
+}
+
+function normalizePathForComparison(value, platform = process.platform) {
+  const pathApi = pathApiFor(platform);
+  let normalized = pathApi.resolve(value);
+  if (platform === 'win32') {
+    // Junction readlink results may use a \\?\ namespace prefix and different
+    // casing from os.homedir(). Normalize both forms for identity/ownership.
+    normalized = pathApi.toNamespacedPath(normalized).toLowerCase();
+  }
+  const root = pathApi.parse(normalized).root;
+  while (normalized.length > root.length && normalized.endsWith(pathApi.sep)) {
+    normalized = normalized.slice(0, -1);
+  }
+  return normalized;
+}
+
+function pathsEqual(left, right, platform = process.platform) {
+  return normalizePathForComparison(left, platform)
+    === normalizePathForComparison(right, platform);
+}
+
+function pathIsWithin(candidate, root, platform = process.platform) {
+  const pathApi = pathApiFor(platform);
+  const normalizedCandidate = normalizePathForComparison(candidate, platform);
+  const normalizedRoot = normalizePathForComparison(root, platform);
+  return normalizedCandidate === normalizedRoot
+    || normalizedCandidate.startsWith(normalizedRoot + pathApi.sep);
+}
+
+function resolveLinkTarget(dst, linkTarget, platform = process.platform) {
+  const pathApi = pathApiFor(platform);
+  return pathApi.isAbsolute(linkTarget)
+    ? pathApi.resolve(linkTarget)
+    : pathApi.resolve(pathApi.dirname(dst), linkTarget);
+}
+
 // A symlink is "ours" if its target resolves into ~/.vruum/skills/. Resolve
 // textually from the readlink string (relative links against the link's own
 // dir) — never realpathSync, which THROWS on a dangling link, i.e. exactly the
@@ -204,21 +242,14 @@ function syncVruumRoot({ dryRun }) {
 // ~/.vruum/skills-operator, so a bare startsWith would wrongly claim the
 // operator installer's links. Equality covers a link straight at the dir.
 function isOurLink(dst, linkTarget) {
-  const resolved = path.isAbsolute(linkTarget)
-    ? path.resolve(linkTarget)
-    : path.resolve(path.dirname(dst), linkTarget);
-  return resolved === VRUUM_SKILLS || resolved.startsWith(VRUUM_SKILLS + path.sep);
+  return pathIsWithin(resolveLinkTarget(dst, linkTarget), VRUUM_SKILLS);
 }
 
 // Operator skills are a strict superset with multi-company scoping. When both
 // installers are present, operator links win for overlapping names regardless
 // of install order. Public-only names still link normally.
 function isOperatorLink(dst, linkTarget) {
-  const resolved = path.isAbsolute(linkTarget)
-    ? path.resolve(linkTarget)
-    : path.resolve(path.dirname(dst), linkTarget);
-  return resolved === VRUUM_OPERATOR_ROOT
-    || resolved.startsWith(VRUUM_OPERATOR_ROOT + path.sep);
+  return pathIsWithin(resolveLinkTarget(dst, linkTarget), VRUUM_OPERATOR_ROOT);
 }
 
 function hasSkillFile(dir) {
@@ -297,14 +328,12 @@ function linkSkill({ name, srcAbs, target, dryRun }) {
     if (err.code !== 'ENOENT') throw err;
   }
 
-  if (existing?.kind === 'symlink' && existing.target === srcAbs) {
-    return { name, target, action: 'already-linked' };
-  }
   const resolvedExistingTarget = existing?.kind === 'symlink'
-    ? (path.isAbsolute(existing.target)
-      ? path.resolve(existing.target)
-      : path.resolve(path.dirname(dst), existing.target))
+    ? resolveLinkTarget(dst, existing.target)
     : null;
+  if (resolvedExistingTarget && pathsEqual(resolvedExistingTarget, srcAbs)) {
+    return { name, target, action: 'already-linked' };
+  }
   const operatorSkillIsUsable = resolvedExistingTarget
     && isOperatorLink(dst, existing.target)
     && hasSkillFile(resolvedExistingTarget);
@@ -330,7 +359,9 @@ function linkSkill({ name, srcAbs, target, dryRun }) {
   if (existing?.kind === 'symlink') {
     fs.unlinkSync(dst);
   }
-  fs.symlinkSync(srcAbs, dst, 'dir');
+  // Windows directory symlinks require Developer Mode or elevation. Directory
+  // junctions work for this absolute, same-machine target without either.
+  fs.symlinkSync(srcAbs, dst, process.platform === 'win32' ? 'junction' : 'dir');
   return { name, target, action: existing ? 'relinked' : 'linked' };
 }
 
@@ -545,7 +576,7 @@ function commandList({ targets: extraTargets }) {
         const lstat = fs.lstatSync(dst);
         if (lstat.isSymbolicLink()) {
           const linkTarget = fs.readlinkSync(dst);
-          const match = linkTarget === srcAbs;
+          const match = pathsEqual(resolveLinkTarget(dst, linkTarget), srcAbs);
           console.log(`  ${match ? 'installed' : 'other-link'.padEnd(10)}  ${skillName}${match ? '' : `  -> ${linkTarget}`}`);
         } else {
           console.log(`  present      ${skillName}  (not our symlink)`);
@@ -598,6 +629,8 @@ if (require.main === module) main();
 module.exports = {
   parseArgs,
   listAvailableSkills,
+  pathsEqual,
+  pathIsWithin,
   linkSkill,
   isOurLink,
   isOperatorLink,

package/package.json

@@ -1,12 +1,11 @@
 {
   "name": "@vruum/skills",
-  "version": "0.6.44",
+  "version": "0.6.46",
   "description": "Vruum AI skills for Claude Code, Claude Desktop, Codex CLI, and any AI assistant with a skill directory. Slash commands for outreach triage, engagement triage, pipeline filling, prospect enrichment, and reply diagnosis. Pairs with the Vruum MCP server at https://api.vruum.ai/mcp.",
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "https://github.com/vruum-gtm/vruum_ai.git",
-    "directory": ".agents"
+    "url": "git+https://github.com/vruum-gtm/skills.git"
   },
   "homepage": "https://vruum.ai",
   "bugs": {
@@ -42,5 +41,5 @@
     "outreach",
     "gtm"
   ],
-  "contentHash": "dd7363b37525cb10ffce653db525fa540f3877c2fa6e72727e26b6c56e041df3"
+  "contentHash": "642c88b2d663edb9fc50184409cd7f569f412bc8e64bed2961c1802e85d19246"
 }