happyskills 0.31.0 → 0.31.1

package/CHANGELOG.md

@@ -7,6 +7,16 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
 
 ## [Unreleased]
 
+## [0.31.1] - 2026-04-07
+
+### Fixed
+- Fix `check` and `update --all` ignoring kit dependencies and transitive dependencies — previously only root-level skills were checked, hiding available updates for skills installed via kits or as dependencies of other skills
+- Fix pre-existing test failure in lock reader caused by lazy `require` of `print_warn` breaking under Jest environment teardown
+
+### Added
+- Add `via` field to `check` and `update` JSON output showing which parent skill or kit pulled in each dependency (`null` for directly installed skills)
+- Add "Via" column to `check` table output (only shown when dependencies are present)
+
 ## [0.31.0] - 2026-04-06
 
 ### Added

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "happyskills",
-	"version": "0.31.0",
+	"version": "0.31.1",
 	"description": "Package manager for AI agent skills",
 	"license": "SEE LICENSE IN LICENSE",
 	"author": "Nicolas Dao <nic@cloudlesslabs.com> (https://cloudlesslabs.com)",

package/src/commands/check.js

@@ -1,5 +1,5 @@
 const { error: { catch_errors, wrap_errors: e } } = require('puffy-core')
-const { read_lock, get_all_locked_skills } = require('../lock/reader')
+const { read_lock, get_all_locked_skills, get_via } = require('../lock/reader')
 const repos_api = require('../api/repos')
 const { print_help, print_table, print_json, print_info, print_success, print_warn, print_hint, code } = require('../ui/output')
 const { green, yellow, red } = require('../ui/colors')
@@ -44,15 +44,15 @@ const run = (args) => catch_errors('Check failed', async () => {
 
 	const target_skill = args._[0]
 	const to_check = target_skill
-		? entries.filter(([name]) => name === target_skill)
-		: entries.filter(([, data]) => data.requested_by?.includes('__root__'))
+		? entries.filter(([name, data]) => name === target_skill && data !== null)
+		: entries.filter(([, data]) => data !== null)
 
 	if (to_check.length === 0) {
 		if (args.flags.json) {
 			print_json({ data: { results: [], outdated_count: 0, up_to_date_count: 0 } })
 			return
 		}
-		print_info(target_skill ? `${target_skill} is not installed.` : 'No directly installed skills found.')
+		print_info(target_skill ? `${target_skill} is not installed.` : 'No installed skills found.')
 		return
 	}
 
@@ -62,25 +62,26 @@ const run = (args) => catch_errors('Check failed', async () => {
 	const results = []
 	if (batch_err) {
 		for (const [name, data] of to_check) {
-			results.push({ skill: name, installed: data.version, latest: 'error', status: 'error' })
+			results.push({ skill: name, installed: data.version, latest: 'error', status: 'error', via: get_via(data) })
 		}
 	} else {
 		for (const [name, data] of to_check) {
 			const info = batch_data?.results?.[name]
+			const via = get_via(data)
 			const has_conflicts = (data.conflict_files || []).length > 0
 			if (has_conflicts) {
-				results.push({ skill: name, installed: data.version, latest: info?.latest_version || '-', status: 'conflicts' })
+				results.push({ skill: name, installed: data.version, latest: info?.latest_version || '-', status: 'conflicts', via })
 			} else if (info?.access_denied) {
-				results.push({ skill: name, installed: data.version, latest: '-', status: 'no-access' })
+				results.push({ skill: name, installed: data.version, latest: '-', status: 'no-access', via })
 			} else if (!info || !info.latest_version) {
-				results.push({ skill: name, installed: data.version, latest: '-', status: 'unknown' })
+				results.push({ skill: name, installed: data.version, latest: '-', status: 'unknown', via })
 			} else if (data.base_commit && info.commit && data.base_commit !== info.commit) {
-				results.push({ skill: name, installed: data.version, latest: info.latest_version, status: 'outdated' })
+				results.push({ skill: name, installed: data.version, latest: info.latest_version, status: 'outdated', via })
 			} else if (!data.base_commit && info.latest_version !== data.version) {
 				// Fallback to version comparison for old lock files without base_commit
-				results.push({ skill: name, installed: data.version, latest: info.latest_version, status: 'outdated' })
+				results.push({ skill: name, installed: data.version, latest: info.latest_version, status: 'outdated', via })
 			} else {
-				results.push({ skill: name, installed: data.version, latest: info.latest_version, status: 'up-to-date' })
+				results.push({ skill: name, installed: data.version, latest: info.latest_version, status: 'up-to-date', via })
 			}
 		}
 	}
@@ -102,14 +103,21 @@ const run = (args) => catch_errors('Check failed', async () => {
 		'unknown': (s) => s
 	}
 
-	const rows = results.map(r => [
-		r.skill,
-		r.installed,
-		r.latest,
-		(status_colors[r.status] || ((s) => s))(r.status)
-	])
-
-	print_table(['Skill', 'Installed', 'Latest', 'Status'], rows)
+	const has_via = results.some(r => r.via)
+	const rows = results.map(r => {
+		const row = [
+			r.skill,
+			r.installed,
+			r.latest,
+			(status_colors[r.status] || ((s) => s))(r.status)
+		]
+		if (has_via) row.push(r.via || '-')
+		return row
+	})
+
+	const headers = ['Skill', 'Installed', 'Latest', 'Status']
+	if (has_via) headers.push('Via')
+	print_table(headers, rows)
 
 	const outdated = results.filter(r => r.status === 'outdated')
 	const conflicts = results.filter(r => r.status === 'conflicts')
@@ -121,7 +129,7 @@ const run = (args) => catch_errors('Check failed', async () => {
 	}
 	if (outdated.length > 0) {
 		console.log()
-		print_info(`Run ${code('happyskills update')} to upgrade ${outdated.length} skill(s).`)
+		print_info(`Run ${code('happyskills update --all')} to upgrade ${outdated.length} skill(s).`)
 	} else if (conflicts.length === 0 && results.every(r => r.status === 'up-to-date')) {
 		console.log()
 		print_success('All skills are up to date.')

package/src/commands/update.js

@@ -1,7 +1,6 @@
-const path = require('path')
 const { error: { catch_errors, wrap_errors: e } } = require('puffy-core')
 const { install } = require('../engine/installer')
-const { read_lock, get_all_locked_skills } = require('../lock/reader')
+const { read_lock, get_all_locked_skills, get_via } = require('../lock/reader')
 const { detect_status } = require('../merge/detector')
 const { print_help, print_success, print_info, print_warn, print_json } = require('../ui/output')
 const { exit_with_error, UsageError } = require('../utils/errors')
@@ -48,7 +47,7 @@ const run = (args) => catch_errors('Update failed', async () => {
 
 	const to_update = target_skill
 		? [[target_skill, skills[target_skill]]]
-		: Object.entries(skills).filter(([, data]) => data.requested_by?.includes('__root__'))
+		: Object.entries(skills).filter(([, data]) => data !== null)
 
 	if (to_update.length === 0) {
 		if (args.flags.json) {
@@ -96,9 +95,9 @@ const run = (args) => catch_errors('Update failed', async () => {
 		const [errors, result] = await install(name, options)
 		if (errors) throw e(`Update ${name} failed`, errors)
 		if (!result.no_op) {
-			updated.push({ skill: name, from: before_version, to: result.version })
+			updated.push({ skill: name, from: before_version, to: result.version, via: get_via(data) })
 		} else {
-			already_up_to_date.push({ skill: name, version: result.version })
+			already_up_to_date.push({ skill: name, version: result.version, via: get_via(data) })
 		}
 	}
 

package/src/lock/reader.js

@@ -2,6 +2,7 @@ const { error: { catch_errors } } = require('puffy-core')
 const { read_json } = require('../utils/fs')
 const { lock_file_path } = require('../config/paths')
 const { LOCK_VERSION } = require('../constants')
+const { print_warn } = require('../ui/output')
 
 const read_lock = (project_root) => catch_errors('Failed to read lock file', async () => {
 	const lock_path = lock_file_path(project_root)
@@ -9,7 +10,6 @@ const read_lock = (project_root) => catch_errors('Failed to read lock file', asy
 	if (errors) return null
 
 	if (data.lockVersion !== LOCK_VERSION) {
-		const { print_warn } = require('../ui/output')
 		print_warn(`Lock file version mismatch (found ${data.lockVersion}, expected ${LOCK_VERSION}). Consider running with --fresh.`)
 	}
 
@@ -26,4 +26,10 @@ const get_all_locked_skills = (lock_data) => {
 	return lock_data.skills
 }
 
-module.exports = { read_lock, get_locked_skill, get_all_locked_skills }
+const get_via = (data) => {
+	const requester = data?.requested_by?.[0]
+	if (!requester || requester === '__root__') return null
+	return requester
+}
+
+module.exports = { read_lock, get_locked_skill, get_all_locked_skills, get_via }

package/src/lock/reader.test.js

@@ -5,7 +5,7 @@ const os = require('os')
 const path = require('path')
 const fs = require('fs')
 
-const { read_lock, get_locked_skill, get_all_locked_skills } = require('./reader')
+const { read_lock, get_locked_skill, get_all_locked_skills, get_via } = require('./reader')
 const { LOCK_VERSION } = require('../constants')
 
 // ─── helpers ──────────────────────────────────────────────────────────────────
@@ -126,3 +126,39 @@ describe('get_all_locked_skills', () => {
 		assert.deepEqual(get_all_locked_skills({ skills: {} }), {})
 	})
 })
+
+// ─── get_via ────────────────────────────────────────────────────────────────
+
+describe('get_via', () => {
+	it('returns null for a directly installed skill (__root__)', () => {
+		assert.strictEqual(get_via({ requested_by: ['__root__'] }), null)
+	})
+
+	it('returns the parent skill name for a dependency', () => {
+		assert.strictEqual(get_via({ requested_by: ['acme/deploy-aws'] }), 'acme/deploy-aws')
+	})
+
+	it('returns the kit name for a kit dependency', () => {
+		assert.strictEqual(get_via({ requested_by: ['acme/_kit-react'] }), 'acme/_kit-react')
+	})
+
+	it('returns the first requester when multiple exist', () => {
+		assert.strictEqual(get_via({ requested_by: ['acme/foo', 'acme/bar'] }), 'acme/foo')
+	})
+
+	it('returns null when requested_by is empty', () => {
+		assert.strictEqual(get_via({ requested_by: [] }), null)
+	})
+
+	it('returns null when requested_by is missing', () => {
+		assert.strictEqual(get_via({}), null)
+	})
+
+	it('returns null when data is null', () => {
+		assert.strictEqual(get_via(null), null)
+	})
+
+	it('returns null when data is undefined', () => {
+		assert.strictEqual(get_via(undefined), null)
+	})
+})