novahiz 0.9.0 → 0.9.1

package/CHANGELOG.md

@@ -3,6 +3,24 @@
 All notable changes to Novahiz are documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
+## [0.9.1] - 2026-10-10
+
+### Fixed
+
+- **Fresh-install scan stops reporting missing skill roots** — the default
+  `skillRoots` include `~/.agents/skills`, which most profiles do not have.
+  The first `sync` (run by the installer) used to surface it as a scan error
+  on every new machine; a declared root that does not exist yet now simply
+  contributes nothing (`scanErrors: []`).
+- **README install banner aligned with the shipped version** (0.8.0 → 0.9.0).
+
+### Notes
+
+- The npm installer path is verified end-to-end on npm 12.2: install with the
+  `postinstall` blocked by `allowScripts`, first `novahiz` run finishes the
+  setup itself (auto-install, `NOVAHIZ_AUTOINSTALL=0` to opt out), second run
+  clean. `novahiz doctor` exits 0 on the fresh sandbox.
+
 ## [0.9.0] - 2026-10-10
 
 ### Added

package/README.md

@@ -4,7 +4,7 @@
 
 17 catégories, 94 skills, 13 gate rules, 8 MCP providers — tout déterministe, tout local, tout JSON.
 
-> **Version 0.8.0** — publiée sur npm (`npm install -g --allow-scripts=novahiz novahiz` installe et configure tout : core, plugin, agent, skills packs et Playwright MCP). `CHANGELOG.md` et `scripts/` sont dans le tarball.
+> **Version 0.9.0** — publiée sur npm (`npm install -g --allow-scripts=novahiz novahiz` installe et configure tout : core, plugin, agent, skills packs et Playwright MCP). `CHANGELOG.md` et `scripts/` sont dans le tarball.
 
 ```
 ┌──────────────────────────────────────────────────────────────────────────┐

package/dist/catalog.js

@@ -1,4 +1,4 @@
-import { mkdirSync, readdirSync, readFileSync, realpathSync, statSync, writeFileSync } from "node:fs";
+import { existsSync, mkdirSync, readdirSync, readFileSync, realpathSync, statSync, writeFileSync } from "node:fs";
 import { basename, isAbsolute, join } from "node:path";
 import { DatabaseSync } from "node:sqlite";
 import { expandHome } from "./spec.js";
@@ -56,6 +56,12 @@ export function parseFrontmatter(content) {
     return result;
 }
 function walkForSkillFiles(root, found, visited, errors) {
+    // A declared skill root that does not exist yet is normal on a fresh machine:
+    // the default skillRoots include ~/.agents/skills, which most profiles do not
+    // have. It contributes nothing and must not surface as a scan error in every
+    // first sync (the installer prints that JSON).
+    if (!existsSync(root))
+        return;
     let real;
     try {
         real = realpathSync(root);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "novahiz",
-  "version": "0.9.0",
+  "version": "0.9.1",
   "description": "Enforce AI agent skills before every file edit: prompt classifier, skill catalog, and pre-edit gate.",
   "type": "module",
   "license": "Apache-2.0",

package/src/catalog.ts

@@ -1,4 +1,4 @@
-import { mkdirSync, readdirSync, readFileSync, realpathSync, statSync, writeFileSync } from "node:fs";
+import { existsSync, mkdirSync, readdirSync, readFileSync, realpathSync, statSync, writeFileSync } from "node:fs";
 import { basename, isAbsolute, join } from "node:path";
 import { DatabaseSync } from "node:sqlite";
 import { expandHome, type Spec } from "./spec.ts";
@@ -68,6 +68,11 @@ export function parseFrontmatter(content: string): Record<string, string> {
 }
 
 function walkForSkillFiles(root: string, found: string[], visited: Set<string>, errors: string[]): void {
+  // A declared skill root that does not exist yet is normal on a fresh machine:
+  // the default skillRoots include ~/.agents/skills, which most profiles do not
+  // have. It contributes nothing and must not surface as a scan error in every
+  // first sync (the installer prints that JSON).
+  if (!existsSync(root)) return;
   let real: string;
   try {
     real = realpathSync(root);