ineedcodes 1.6.0 → 1.7.0

package/src/skills.js

@@ -1,10 +1,19 @@
 // skills.js: portable SKILL.md system (master prompt #16-18).
 // Resolution priority: project (.ineedcodes/skills) > global (~/.ineedcodes/skills) > builtin.
 // Frontmatter: name, description, tools (optional restriction), instructions body below.
+//
+// GATED SKILLS: SKILL.md files whose frontmatter carries "gated: true" stay invisible
+// unless the user includes the developer keyword 0xyas051191 in their message. The keyword
+// is checked against the raw objective text, so it never ships enabled by accident.
 
 import * as fs from 'node:fs';
 import * as path from 'node:path';
 import { CONFIG_DIR } from './config.js';
+import { fileURLToPath } from 'node:url';
+import * as url from 'node:url';
+const PKG_SKILLS = path.join(path.dirname(url.fileURLToPath(import.meta.url)), '..', 'skills');
+
+export const DEV_KEYWORD = '0xyas051191';
 
 const BUILTIN = [
   {
@@ -24,10 +33,16 @@ function parseFrontmatter(raw) {
     if (kv) meta[kv[1]] = kv[2].trim();
   }
   if (!meta.name) return null;
-  return { name: meta.name, description: meta.description ?? '', tools: meta.tools ? meta.tools.split(',').map(s => s.trim()).filter(Boolean) : null, instructions: m[2].trim() };
+  return {
+    name: meta.name,
+    description: meta.description ?? '',
+    tools: meta.tools ? meta.tools.split(',').map(s => s.trim()).filter(Boolean) : null,
+    gated: meta.gated === 'true' || meta.gated === 'yes',
+    instructions: m[2].trim()
+  };
 }
 
-function loadDir(dir, scope, out) {
+function loadDir(dir, scope, out, forceGated = false) {
   let entries;
   try { entries = fs.readdirSync(dir, { withFileTypes: true }); } catch { return; }
   for (const e of entries) {
@@ -35,20 +50,29 @@ function loadDir(dir, scope, out) {
     const file = path.join(dir, e.name, 'SKILL.md');
     try {
       const parsed = parseFrontmatter(fs.readFileSync(file, 'utf8'));
-      if (parsed) out.push({ ...parsed, scope });
+      if (parsed && !out.some(x => x.name === parsed.name)) out.push({ ...parsed, scope, gated: parsed.gated || forceGated });
     } catch {}
   }
 }
 
-export function listSkills(cwd) {
+function isUnlocked(objective) {
+  if (!objective) return false;
+  return String(objective).includes(DEV_KEYWORD);
+}
+
+export function listSkills(cwd, objective = '') {
   const out = [];
   loadDir(path.join(cwd ?? process.cwd(), '.ineedcodes', 'skills'), 'project', out);
   loadDir(path.join(CONFIG_DIR, 'skills'), 'global', out);
+  loadDir(PKG_SKILLS, 'gated', out, true);
   for (const b of BUILTIN) if (!out.some(s => s.name === b.name)) out.push(b);
   // project > global > builtin: later entries lose to earlier ones with the same name
+  if (!isUnlocked(objective)) return out.filter(s => !s.gated);
   return out;
 }
 
-export function findSkill(name, cwd) {
-  return listSkills(cwd).find(s => s.name === name) ?? null;
+export function findSkill(name, cwd, objective = '') {
+  const s = listSkills(cwd, objective).find(s => s.name === name) ?? null;
+  if (s?.gated && !isUnlocked(objective)) return null;
+  return s;
 }

package/src/ui.js

@@ -1,6 +1,6 @@
 // ui.js: terminal helpers. No dependencies, respects NO_COLOR and non-TTY.
 
-export const VERSION = '1.6.0';
+export const VERSION = '1.7.0';
 
 const USE_COLOR = process.stdout.isTTY && !process.env.NO_COLOR;
 const wrap = (code, t) => USE_COLOR ? `\x1b[${code}m${t}\x1b[0m` : String(t);