agent-skill-manager 1.21.0 → 2.0.0

package/README.md

@@ -275,7 +275,7 @@ asm publish --yes ./my-skill
 4. Test with your AI agent
 5. **Security audit** — `asm audit security awesome-skill`
 6. **Verify metadata** — `asm inspect awesome-skill`
-7. **Score quality** — `asm eval ./awesome-skill` (add `--runtime` for skillgrade runtime evals)
+7. **Score quality** — `asm eval ./awesome-skill`
 8. Push to GitHub
 9. **Verify install flow** — `asm install github:you/awesome-skill`
 10. **Publish to registry** — `asm publish ./awesome-skill`
@@ -318,36 +318,25 @@ asm index search "your-skill" --json
 
 Each indexed skill in the output JSON includes `"verified": true` or `"verified": false`. If verification fails, the ingestion debug log (set `ASM_DEBUG=1`) prints the specific reasons.
 
-### Runtime Evaluation (`asm eval`)
+### Quality Evaluation (`asm eval`)
 
-Static verification tells you the SKILL.md is well-formed. `asm eval` goes further and answers two orthogonal questions about any skill on disk:
-
-1. **Is it well-written?** — `quality@1.0.0` ships by default and runs a scored rubric over structure, frontmatter, clarity, and safety.
-2. **Does it actually work?** — `asm eval --runtime` shells out to [skillgrade](https://github.com/mgechev/skillgrade) for deterministic + LLM-judge runtime evals in a Docker sandbox, with CI-ready exit codes.
-
-**Zero-setup install:** skillgrade ships as a direct dependency of `asm`. After `npm install -g agent-skill-manager`, `asm eval --runtime` just works — no `npm i -g skillgrade`, no PATH hijacking. Override with `ASM_SKILLGRADE_BIN=/path/to/skillgrade` if you want to point at a different binary.
+Static verification tells you the SKILL.md is well-formed. `asm eval` goes further: the built-in `quality` provider runs a scored rubric over structure, frontmatter, clarity, prompt engineering, context efficiency, safety, testability, and naming — and emits per-category scores plus concrete suggestions for improvement. Zero setup, zero API keys, zero external binaries.
 
 ```bash
-# Static quality lint (default)
+# Score the skill and print recommendations
 asm eval ./my-skill
 
-# Scaffold eval.yaml for runtime tests
-asm eval ./my-skill --runtime init
-
-# Run the skillgrade runtime provider
-asm eval ./my-skill --runtime --preset smoke
+# CI-friendly machine-readable output
+asm eval ./my-skill --machine
 
-# CI-friendly JSON
-asm eval ./my-skill --runtime --machine --threshold 0.8
+# Apply deterministic auto-fixes to SKILL.md
+asm eval ./my-skill --fix
 
 # List registered eval providers
 asm eval-providers list
-
-# Diff two provider versions before promoting an upgrade
-asm eval ./my-skill --compare skillgrade@1.0.0,skillgrade@2.0.0-next
 ```
 
-The eval surface is a pluggable provider framework: each provider implements a common `EvalProvider` contract and resolves via semver range, so you can pin a version in `~/.asm/config.yml`, diff two versions side-by-side with `--compare`, and add new providers without touching the CLI. See [`docs/eval-providers.md`](./docs/eval-providers.md) for the provider model and [`docs/skillgrade-integration.md`](./docs/skillgrade-integration.md) for skillgrade install, presets, and CI usage.
+The eval surface is a pluggable provider framework: each provider implements a common `EvalProvider` contract and resolves via semver range. See [`docs/eval-providers.md`](./docs/eval-providers.md) for the provider model.
 
 ---
 
@@ -431,6 +420,28 @@ asm
   <a href="#cli-commands"><strong>See All Commands &rarr;</strong></a>
 </p>
 
+### Pick one package manager
+
+Install `asm` via **either** `npm` **or** `bun` — not both. Each global install drops an `asm` binary in a different directory (`/opt/homebrew/bin/asm` via npm, `~/.bun/bin/asm` via bun), and shells resolve whichever appears first on `PATH`. An older install can silently shadow a fresh upgrade: you run `asm --version` and still see the old version even though the upgrade succeeded.
+
+<a id="troubleshooting"></a>
+
+**Diagnose:** `asm --version` detects and warns when it sees multiple `asm` binaries on `PATH`. For a full report, run `asm doctor` — it lists the resolved path and any shadowed installs.
+
+**Fix:** remove the duplicate install.
+
+```bash
+# If you're switching to npm:
+bun remove -g agent-skill-manager
+
+# If you're switching to bun:
+npm uninstall -g agent-skill-manager
+```
+
+Re-run `asm --version` to confirm only one binary is left. The postinstall step emits the same warning during `npm install -g agent-skill-manager` so you catch it at install time.
+
+> **Note:** Bun skips lifecycle scripts by default, so the postinstall warning does not fire for `bun add -g agent-skill-manager`. Use `asm --version` or `asm doctor` to check for shadowing after a bun install.
+
 ---
 
 ## Open-Source Skill Collections
@@ -514,7 +525,7 @@ Need a tool not listed? Add a custom provider entry to the config.
 Yes. `asm` is MIT licensed and free forever. No accounts, no telemetry, no paywalls.
 
 **Is it actively maintained?**
-v1.21.0 shipped on April 19, 2026. The project has had 30 releases. Check the [changelog](docs/CHANGELOG.md) for the full history.
+v2.0.0 shipped on April 19, 2026. The project has had 32 releases. Check the [changelog](docs/CHANGELOG.md) for the full history.
 
 **Which AI agents does it support?**
 18 providers built-in: Claude Code, Codex, OpenClaw, Cursor, Windsurf, Cline, Roo Code, Continue, GitHub Copilot, Aider, OpenCode, Zed, Augment, Amp, Gemini CLI, Google Antigravity, Hermes, and a generic Agents provider. All 18 are enabled by default; disable any you don't need via `asm config edit`. You can also add any custom agent that stores skills as directories with a `SKILL.md` file.
@@ -578,8 +589,7 @@ asm
 | `asm link <path> [<path2> ...]` | Symlink one or more local skills for live development |
 | `asm audit`                     | Detect duplicate skills                               |
 | `asm audit security <name>`     | Run security audit on a skill                         |
-| `asm eval <skill>`              | Score a skill via the pluggable eval framework        |
-| `asm eval <skill> --runtime`    | Runtime evaluation via skillgrade (LLM-judge)         |
+| `asm eval <skill>`              | Score a skill and print improvement suggestions       |
 | `asm eval-providers list`       | List registered eval providers and versions           |
 | `asm stats`                     | Show aggregate skill metrics dashboard                |
 | `asm export`                    | Export skill inventory as JSON manifest               |
@@ -648,12 +658,6 @@ Score a skill with the static quality provider:
 asm eval ./my-skill
 ```
 
-Run the skillgrade runtime evaluator (requires `skillgrade` on PATH):
-
-```bash
-asm eval ./my-skill --runtime --preset smoke
-```
-
 List registered eval providers:
 
 ```bash
@@ -1139,18 +1143,17 @@ agent-skill-manager/
 <details>
 <summary><strong>Documentation</strong></summary>
 
-| Document                                                 | Description                                              |
-| -------------------------------------------------------- | -------------------------------------------------------- |
-| [Architecture](docs/ARCHITECTURE.md)                     | System design, components, and data flow                 |
-| [Eval Providers](docs/eval-providers.md)                 | Pluggable eval framework, `--compare`, adding a provider |
-| [Skillgrade Integration](docs/skillgrade-integration.md) | Install, presets, CI usage, troubleshooting              |
-| [Development](docs/DEVELOPMENT.md)                       | Local setup, testing, and debugging                      |
-| [Deployment](docs/DEPLOYMENT.md)                         | Publishing and CI pipeline                               |
-| [Changelog](docs/CHANGELOG.md)                           | Version history                                          |
-| [Brand Kit](docs/brand_kit.md)                           | Logo, colors, and typography                             |
-| [Contributing](CONTRIBUTING.md)                          | How to contribute                                        |
-| [Security](SECURITY.md)                                  | Vulnerability reporting                                  |
-| [Code of Conduct](CODE_OF_CONDUCT.md)                    | Community guidelines                                     |
+| Document                                 | Description                                        |
+| ---------------------------------------- | -------------------------------------------------- |
+| [Architecture](docs/ARCHITECTURE.md)     | System design, components, and data flow           |
+| [Eval Providers](docs/eval-providers.md) | Pluggable eval framework and how to add a provider |
+| [Development](docs/DEVELOPMENT.md)       | Local setup, testing, and debugging                |
+| [Deployment](docs/DEPLOYMENT.md)         | Publishing and CI pipeline                         |
+| [Changelog](docs/CHANGELOG.md)           | Version history                                    |
+| [Brand Kit](docs/brand_kit.md)           | Logo, colors, and typography                       |
+| [Contributing](CONTRIBUTING.md)          | How to contribute                                  |
+| [Security](SECURITY.md)                  | Vulnerability reporting                            |
+| [Code of Conduct](CODE_OF_CONDUCT.md)    | Community guidelines                               |
 
 </details>