pageship 0.4.1 → 0.6.0

package/README.md

@@ -14,7 +14,7 @@ pnpm add -g pageship
 bun add -g pageship
 ```
 
-Then run `pageship --version` to check that the shell finds it. To have an agent install the CLI and the Pageship skills and sign you in, give it the [setup guide](https://pageship.dev/setup-guide) instead.
+Then run `pageship --version` to check that the shell finds it. Run `pageship update` later to update it with the same package manager. To have an agent install the CLI and the Pageship skills and sign you in, give it the [setup guide](https://pageship.dev/setup-guide) instead.
 
 ## Get started
 

package/dist/cli.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { execFile } from "node:child_process";
+import { exec, execFile, spawn } from "node:child_process";
 import { access, cp, lstat, mkdir, open, readFile, readdir, readlink, realpath, rename, rm, stat, symlink, writeFile } from "node:fs/promises";
 import { dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
 import { createInterface } from "node:readline/promises";
@@ -675,14 +675,22 @@ const documentsRestore = (options) => (options.client ?? client).post({
 		...options.headers
 	}
 });
-const documentsUpdateVisibility = (options) => (options.client ?? client).patch({
-	url: "/api/v1/documents/{id}/visibility",
+const viewersList = (options) => (options.client ?? client).get({
+	url: "/api/v1/documents/{id}/viewers",
+	...options
+});
+const viewersUpdateSharing = (options) => (options.client ?? client).patch({
+	url: "/api/v1/documents/{id}/sharing",
 	...options,
 	headers: {
 		"Content-Type": "application/json",
 		...options.headers
 	}
 });
+const githubGetUser = (options) => (options.client ?? client).get({
+	url: "/api/v1/github/users/{login}",
+	...options
+});
 //#endregion
 //#region ../../packages/api-client/src/generated/workspace-domain.gen.ts
 /** Every workspace address and document URL is a subdomain of this domain. */
@@ -760,14 +768,16 @@ function validTitle(value) {
 }
 function normalizeDocument(value) {
 	if (!record(value) || typeof value.slug !== "string") return;
-	const normalized = value.title === void 0 ? {
+	const normalized = {
 		...value,
-		title: value.slug
-	} : value;
+		...value.title === void 0 ? { title: value.slug } : {},
+		...value.viewCount === void 0 ? { viewCount: 0 } : {},
+		...value.sharedWith === void 0 ? { sharedWith: 0 } : {}
+	};
 	return validDocument(normalized) ? normalized : void 0;
 }
 function validDocument(value) {
-	return record(value) && isDocumentId(value.id) && typeof value.slug === "string" && /^[a-z0-9]+(?:-[a-z0-9]+)*(?![\s\S])/u.test(value.slug) && validTitle(value.title) && typeof value.sourcePath === "string" && value.sourcePath.length <= 1024 && /^(?!\/)(?!.*(?:^|\/)\.{1,2}(?:\/|$))(?!.*\/\/)[^\x00-\x1f\x7f\\:]*\.[hH][tT][mM][lL]?(?![\s\S])/u.test(value.sourcePath) && (value.repository === null || isRepository(value.repository)) && (value.visibility === "private" || value.visibility === "public") && isRevisionId(value.revisionId) && typeof value.byteLength === "number" && Number.isSafeInteger(value.byteLength) && value.byteLength > 0 && typeof value.createdAt === "number" && Number.isSafeInteger(value.createdAt) && value.createdAt >= 0 && typeof value.publishedAt === "number" && Number.isSafeInteger(value.publishedAt) && value.publishedAt >= 0 && typeof value.url === "string" && new RegExp(`^https://[a-z0-9-]+\\.${workspaceDomainPattern}/d/${value.id}-${value.slug}$`, "u").test(value.url);
+	return record(value) && isDocumentId(value.id) && typeof value.slug === "string" && /^[a-z0-9]+(?:-[a-z0-9]+)*(?![\s\S])/u.test(value.slug) && validTitle(value.title) && typeof value.sourcePath === "string" && value.sourcePath.length <= 1024 && /^(?!\/)(?!.*(?:^|\/)\.{1,2}(?:\/|$))(?!.*\/\/)[^\x00-\x1f\x7f\\:]*\.[hH][tT][mM][lL]?(?![\s\S])/u.test(value.sourcePath) && (value.repository === null || isRepository(value.repository)) && (value.visibility === "private" || value.visibility === "public") && isRevisionId(value.revisionId) && typeof value.byteLength === "number" && Number.isSafeInteger(value.byteLength) && value.byteLength > 0 && typeof value.createdAt === "number" && Number.isSafeInteger(value.createdAt) && value.createdAt >= 0 && typeof value.publishedAt === "number" && Number.isSafeInteger(value.publishedAt) && value.publishedAt >= 0 && typeof value.viewCount === "number" && Number.isSafeInteger(value.viewCount) && value.viewCount >= 0 && typeof value.sharedWith === "number" && Number.isSafeInteger(value.sharedWith) && value.sharedWith >= 0 && typeof value.url === "string" && new RegExp(`^https://[a-z0-9-]+\\.${workspaceDomainPattern}/d/${value.id}-${value.slug}$`, "u").test(value.url);
 }
 function validRevision(value, documentId) {
 	return record(value) && isRevisionId(value.id) && typeof value.createdAt === "number" && Number.isSafeInteger(value.createdAt) && value.createdAt >= 0 && typeof value.byteLength === "number" && Number.isSafeInteger(value.byteLength) && value.byteLength > 0 && typeof value.isCurrent === "boolean" && (value.cliVersion === null || isCliVersion(value.cliVersion)) && typeof value.url === "string" && new RegExp(`^https://[a-z0-9-]+\\.${workspaceDomainPattern}/d/${documentId}-[a-z0-9]+(?:-[a-z0-9]+)*/revisions/${value.id}$`, "u").test(value.url);
@@ -775,10 +785,12 @@ function validRevision(value, documentId) {
 var DocumentRequestError = class extends Error {
 	status;
 	httpStatus;
-	constructor(status, message, httpStatus) {
+	account;
+	constructor(status, message, httpStatus, account) {
 		super(message);
 		this.status = status;
 		this.httpStatus = httpStatus;
+		this.account = account;
 	}
 };
 function failed(response, error) {
@@ -899,26 +911,6 @@ async function restoreDocumentRevision(baseUrl, id, input, options = {}) {
 	if (record(data) && data.status === "idempotency_conflict") return { status: "idempotency_conflict" };
 	throw new Error("Invalid document restoration response. Retry with the same idempotency key.");
 }
-async function updateDocumentVisibility(baseUrl, id, visibility, options = {}) {
-	const { data: received, response, error } = await documentsUpdateVisibility({
-		...changeOptions(baseUrl, options),
-		path: { id },
-		body: { visibility }
-	});
-	if (!response?.ok) {
-		if (response?.status === 400) throw new DocumentRequestError("invalid_visibility", "Choose private or public.", 400);
-		if (response?.status === 401) throw new DocumentRequestError("signed_out", "Sign in to update this document.", 401);
-		if (response?.status === 403) throw new DocumentRequestError("uninvited", "Access unavailable.", 403);
-		if (response?.status === 404) throw new DocumentRequestError("unavailable", "Document unavailable.", 404);
-		throw new Error("Could not update document visibility. Try again.", { cause: error });
-	}
-	const data = received;
-	if (record(data) && data.status === "visibility_updated" && validDocument(data.document) && data.document.visibility === visibility) return {
-		status: "visibility_updated",
-		document: data.document
-	};
-	throw new Error("Invalid document visibility response.");
-}
 async function publishDocument(baseUrl, input, options = {}) {
 	if (input.action) {
 		if (!(await getDocumentLimits(baseUrl, options)).publicationActions.includes(input.action)) throw new DocumentRequestError("publication_action_unsupported", "This server does not support explicit publication actions. Ask the operator to update the server. No HTML was uploaded.", 400);
@@ -957,6 +949,96 @@ async function publishDocument(baseUrl, input, options = {}) {
 	if (record(data) && (data.status === "idempotency_conflict" || data.status === "address_required" || data.status === "unavailable" || data.status === "document_id_taken")) return { status: data.status };
 	throw new Error("Invalid publication response. Retry with the same idempotency key.");
 }
+/** Same GitHub username grammar as the Effect contract. */
+function isGitHubLogin(value) {
+	return typeof value === "string" && /^[A-Za-z0-9][A-Za-z0-9-]{0,38}(?![\s\S])/u.test(value);
+}
+function isGitHubAccountId(value) {
+	return typeof value === "string" && /^[1-9][0-9]{0,19}(?![\s\S])/u.test(value);
+}
+function validViewer(value) {
+	return record(value) && isGitHubAccountId(value.githubAccountId) && isGitHubLogin(value.login) && (value.name === null || typeof value.name === "string") && typeof value.addedAt === "number" && Number.isSafeInteger(value.addedAt) && value.addedAt >= 0;
+}
+function validUserMatch(value) {
+	return record(value) && isGitHubAccountId(value.githubAccountId) && isGitHubLogin(value.login);
+}
+function validUserProfile(value) {
+	return record(value) && (value.name === null || typeof value.name === "string") && (value.type === "user" || value.type === "organization" || value.type === "other") && validUserMatch(value);
+}
+/**
+* One message per viewer refusal. The body's status picks it, not the HTTP code: a refused
+* GitHub token and a signed-out session are both 401.
+*/
+const viewerRefusals = {
+	signed_out: "Sign in to manage viewers.",
+	uninvited: "Access unavailable.",
+	forbidden: "A trusted browser origin is required.",
+	unavailable: "Document unavailable.",
+	document_public: "Make the document private before adding viewers.",
+	github_user_not_found: "GitHub has no user with that username.",
+	github_account_mismatch: "That username now belongs to a different GitHub account. Look it up again.",
+	not_personal_account: "Only a personal GitHub account can be a viewer.",
+	owner_account: "You already have access to your own document.",
+	github_sign_in_required: "GitHub refused your sign-in. Sign in to Pageship again.",
+	github_rate_limited: "GitHub is limiting requests. Try again in a minute.",
+	github_unavailable: "GitHub is unavailable. Try again.",
+	invalid_sharing: "A change can't both add and remove the same account."
+};
+function isViewerRefusal(value) {
+	return typeof value === "string" && Object.hasOwn(viewerRefusals, value);
+}
+function viewerFailed(response, error) {
+	if (response && record(error) && isViewerRefusal(error.status)) throw new DocumentRequestError(error.status, validUserMatch(error.account) && typeof error.message === "string" ? error.message : viewerRefusals[error.status], response.status, validUserMatch(error.account) ? error.account : void 0);
+	failed(response, error);
+}
+async function getDocumentViewers(baseUrl, id, options = {}) {
+	const { data, response, error } = await viewersList({
+		...requestOptions(baseUrl, options),
+		path: { id }
+	});
+	if (!response?.ok) viewerFailed(response, error);
+	if (data?.status === "listed" && Array.isArray(data.viewers) && data.viewers.every(validViewer)) return data;
+	throw new Error("Invalid document viewer listing response.");
+}
+/**
+* The most accounts one sharing change adds and removes. The contract's DocumentSharingChange
+* refuses more; tests/document-contract.test.ts keeps the two equal.
+*/
+const sharingLimits = {
+	add: 20,
+	remove: 50
+};
+/**
+* Changes visibility and viewers together or not at all. The server looks up each added account
+* that isn't a viewer yet, as addDocumentViewer does.
+*/
+async function updateDocumentSharing(baseUrl, id, change, options = {}) {
+	const { data, response, error } = await viewersUpdateSharing({
+		...changeOptions(baseUrl, options),
+		path: { id },
+		body: change
+	});
+	if (!response?.ok) viewerFailed(response, error);
+	const document = data?.status === "sharing_updated" ? normalizeDocument(data.document) : void 0;
+	if (data && document && (change.visibility === void 0 || document.visibility === change.visibility) && [
+		data.viewers,
+		data.added,
+		data.removed
+	].every((list) => Array.isArray(list) && list.every(validViewer))) return {
+		...data,
+		document
+	};
+	throw new Error("Invalid document sharing response.");
+}
+async function getGitHubUser(baseUrl, login, options = {}) {
+	const { data, response, error } = await githubGetUser({
+		...requestOptions(baseUrl, options),
+		path: { login }
+	});
+	if (!response?.ok) viewerFailed(response, error);
+	if (data?.status === "found" && validUserProfile(data.user)) return data;
+	throw new Error("Invalid GitHub user response.");
+}
 //#endregion
 //#region ../../packages/api-client/src/index.ts
 async function getWorkspace(baseUrl, options = {}) {
@@ -971,7 +1053,17 @@ async function getWorkspace(baseUrl, options = {}) {
 		throwOnError: false
 	});
 	if (!response?.ok) throw new Error("Could not load your workspace.", { cause: error });
-	if (data?.status === "signed_out" || data?.status === "uninvited") return { status: data.status };
+	if (data?.status === "signed_out") return { status: data.status };
+	if (data?.status === "uninvited") {
+		const user = data.user;
+		return user && typeof user.name === "string" && (user.login === void 0 || typeof user.login === "string") ? {
+			status: data.status,
+			user: {
+				name: user.name,
+				...user.login ? { login: user.login } : {}
+			}
+		} : { status: data.status };
+	}
 	if (data?.status === "admitted" && typeof data.user?.id === "string" && data.user.id.length > 0 && typeof data.user?.name === "string" && (data.user.login === void 0 || typeof data.user.login === "string") && (data.user.githubAccountId === void 0 || typeof data.user.githubAccountId === "string" && /^[1-9]\d*$/u.test(data.user.githubAccountId)) && typeof data.workspace?.id === "string" && data.workspace.id.length > 0 && (data.address === void 0 || data.address === null || isWorkspaceAddress(data.address))) return data;
 	throw new Error("Invalid workspace response.");
 }
@@ -1325,7 +1417,10 @@ const outcomes = {
 	downloaded: "succeeded",
 	visibility_updated: "succeeded",
 	restored: "succeeded",
+	viewers_updated: "succeeded",
 	skills_installed: "succeeded",
+	cli_updated: "succeeded",
+	cli_current: "succeeded",
 	authorization_pending: "pending",
 	expired: "pending",
 	signed_out: "pending",
@@ -1336,6 +1431,7 @@ const outcomes = {
 	repository_mismatch: "pending",
 	marker_unavailable: "pending",
 	revision_conflict: "pending",
+	github_sign_in_required: "pending",
 	cancelled: "pending",
 	usage_error: "failed",
 	internal_error: "failed",
@@ -1359,7 +1455,17 @@ const outcomes = {
 	idempotency_conflict: "failed",
 	document_id_taken: "failed",
 	publication_action_unsupported: "failed",
-	skills_modified: "failed"
+	skills_modified: "failed",
+	install_unknown: "failed",
+	update_failed: "failed",
+	ambiguous_viewer: "failed",
+	document_public: "failed",
+	github_user_not_found: "failed",
+	github_account_mismatch: "failed",
+	not_personal_account: "failed",
+	owner_account: "failed",
+	github_rate_limited: "failed",
+	github_unavailable: "failed"
 };
 const isStatus = (value) => Object.hasOwn(outcomes, value);
 const commandNames = [
@@ -1371,8 +1477,10 @@ const commandNames = [
 	"history",
 	"download",
 	"visibility",
+	"viewers",
 	"restore",
-	"skills"
+	"skills",
+	"update"
 ];
 const isCommandName = (value) => commandNames.some((name) => name === value);
 /** Exit codes follow the outcome, except an interruption, which exits 130. */
@@ -1422,7 +1530,7 @@ function commandLine(command, args) {
 }
 //#endregion
 //#region package.json
-var version = "0.4.1";
+var version = "0.6.0";
 //#endregion
 //#region src/publish.ts
 const execute = promisify(execFile);
@@ -2142,6 +2250,25 @@ async function identify(serverValue, signal) {
 }
 //#endregion
 //#region src/documents.ts
+/** `1 viewer`, `2 viewers`. */
+const viewerCount = (count) => `${count} viewer${count === 1 ? "" : "s"}`;
+/** The result for a request the server refused. `login` signs in again. */
+function refusal(error, login) {
+	const status = error.status;
+	if (status === "signed_out") return {
+		status,
+		message: `Your credential was revoked, expired or is invalid. Run ${commandLine(login.command, login.args)} to sign in again.`,
+		next: login
+	};
+	if (status === "uninvited") return {
+		status,
+		message: "This account is not invited. Contact the server owner."
+	};
+	return {
+		status,
+		message: error.message
+	};
+}
 /** Checks compatibility and the stored credential; the server enforces ownership and admission. */
 async function asOwner(serverValue, signal, operation) {
 	const selection = selectServer(serverValue);
@@ -2174,14 +2301,11 @@ async function asOwner(serverValue, signal, operation) {
 			signal
 		});
 	} catch (error) {
-		if (!(error instanceof DocumentRequestError && isStatus(error.status))) throw error;
-		return {
-			status: error.status,
-			message: error.status === "signed_out" ? `Your credential was revoked, expired or is invalid. Run ${login} to sign in again.` : error.status === "uninvited" ? "This account is not invited. Contact the server owner." : error.message,
-			...error.status === "signed_out" ? { next } : {}
-		};
+		if (!isRefusal(error)) throw error;
+		return refusal(error, next);
 	}
 }
+const isRefusal = (error) => error instanceof DocumentRequestError && isStatus(error.status);
 function listDocuments(options) {
 	return asOwner(options.server, options.signal, async ({ origin, args }, request) => {
 		const page = await getDocuments(origin, {
@@ -2201,7 +2325,7 @@ function listDocuments(options) {
 			...next ? { next } : {},
 			message: [
 				page.documents.length ? "Documents:" : options.cursor ? "No more documents." : "No documents.",
-				...page.documents.map((document) => `${document.id}  ${document.visibility}  ${document.title}\n` + (document.repository ? `  repository ${document.repository}\n` : "") + `  source ${document.sourcePath}\n  current revision ${document.revisionId}\n  ${document.url}`),
+				...page.documents.map((document) => `${document.id}  ${document.visibility}  ${viewerCount(document.sharedWith)}  ${document.title}\n` + (document.repository ? `  repository ${document.repository}\n` : "") + `  source ${document.sourcePath}\n  current revision ${document.revisionId}\n  ${document.url}`),
 				...next ? [`More documents: run ${commandLine(next.command, next.args)}`] : []
 			].join("\n")
 		};
@@ -2279,10 +2403,13 @@ function downloadDocument(options) {
 }
 function changeVisibility(options) {
 	return asOwner(options.server, options.signal, async ({ origin }, request) => {
-		const result = await updateDocumentVisibility(origin, options.documentId, options.visibility, request);
+		const { document, removed } = await updateDocumentSharing(origin, options.documentId, { visibility: options.visibility }, request);
+		const removedViewers = removed.length;
 		return {
-			...result,
-			message: result.document.visibility === "public" ? `${result.document.id} is public. Anyone with the URL can read its current revision: ${result.document.url}` : `${result.document.id} is private. Only you can read it after signing in: ${result.document.url}`
+			status: "visibility_updated",
+			document,
+			removedViewers,
+			message: document.visibility === "public" ? `${document.id} is public.${removedViewers ? ` Removed its ${viewerCount(removedViewers)}.` : ""} Anyone with the URL can read its current revision: ${document.url}` : `${document.id} is private. Only you and its ${document.sharedWith ? viewerCount(document.sharedWith) : "viewers"} can read it after signing in: ${document.url}`
 		};
 	});
 }
@@ -2361,6 +2488,10 @@ const installNext = {
 	command: "skills",
 	args: ["install"]
 };
+const updateNext = {
+	command: "update",
+	args: []
+};
 /** The output of `node --version` from PATH, or undefined when it does not run. */
 const nodeOnPath = () => new Promise((resolve) => {
 	execFile("node", ["--version"], {
@@ -2445,6 +2576,7 @@ async function replaceFolder(source, target) {
 	}
 }
 const parseMajor = (version) => Number(/^v?(\d+)\./u.exec(version)?.[1] ?? NaN);
+/** Whether version `installed` is older than `cli`. An unreadable `installed` counts as older. */
 const older = (installed, cli) => {
 	const parts = (version) => version.split(/[.+-]/u).slice(0, 3).map(Number);
 	const [a, b] = [parts(installed), parts(cli)];
@@ -2468,7 +2600,7 @@ async function inspectCli(environment, signal) {
 	return {
 		cli: "older",
 		latest,
-		message: `A newer Pageship CLI is published (${latest}; this is ${environment.version}). Update it with the package manager that installed it, then run ${commandLine(installNext.command, installNext.args)}.`
+		message: `A newer Pageship CLI is published (${latest}; this is ${environment.version}). Run ${commandLine(updateNext.command, updateNext.args)} to update it, then run ${commandLine(installNext.command, installNext.args)}.`
 	};
 }
 /** The recommended skills and Node that the CLI could not find. It installs none of them. */
@@ -2752,6 +2884,293 @@ async function checkReadiness(serverValue, signal) {
 	};
 }
 //#endregion
+//#region src/viewers.ts
+/** `octocat (Mona Lisa), GitHub ID 583231` */
+const account = ({ login, name, githubAccountId }) => `${login}${name ? ` (${name})` : ""}, GitHub ID ${githubAccountId}`;
+function viewerList(documentId, viewers) {
+	return viewers.length ? [`Viewers of ${documentId}:`, ...viewers.map((viewer) => `  ${account(viewer)}`)].join("\n") : `${documentId} has no viewers.`;
+}
+/**
+* Lists a document's viewers, or changes them. Every removal is matched and every added username
+* looked up first, then one sharing change applies them all or none.
+*/
+function manageViewers(options) {
+	const { documentId, add, remove } = options;
+	return asOwner(options.server, options.signal, async ({ origin, args }, request) => {
+		const login = {
+			command: "login",
+			args
+		};
+		const next = {
+			command: "viewers",
+			args: [
+				documentId,
+				...args,
+				...remove.flatMap((value) => ["--remove", value]),
+				...add.flatMap((value) => ["--add", value])
+			]
+		};
+		if (add.length > sharingLimits.add || remove.length > sharingLimits.remove) return {
+			status: "usage_error",
+			message: `Add up to ${sharingLimits.add} and remove up to ${sharingLimits.remove} viewers at a time. Nothing was changed.`
+		};
+		const progress = [];
+		try {
+			const { viewers } = await getDocumentViewers(origin, documentId, request);
+			if (!add.length && !remove.length) return {
+				status: "listed",
+				documentId,
+				viewers,
+				message: viewerList(documentId, viewers)
+			};
+			const removals = [];
+			const notViewers = [];
+			for (const value of remove) {
+				const matches = /^[0-9]+$/u.test(value) ? viewers.filter((viewer) => viewer.githubAccountId === value) : viewers.filter((viewer) => viewer.login.toLowerCase() === value.toLowerCase());
+				if (matches.length > 1) return {
+					status: "ambiguous_viewer",
+					documentId,
+					value,
+					matches,
+					message: [`${value} matches ${matches.length} viewers of ${documentId}. Nothing was changed. Remove one by its GitHub ID with --remove <id>:`, ...matches.map((viewer) => `  ${account(viewer)}`)].join("\n")
+				};
+				if (!matches[0]) notViewers.push(value);
+				else if (!removals.includes(matches[0])) removals.push(matches[0]);
+			}
+			const accounts = [];
+			for (const value of add) {
+				const { user } = await getGitHubUser(origin, value, request);
+				if (user.type !== "user") return {
+					status: "not_personal_account",
+					documentId,
+					user,
+					message: `${account(user)} is ${user.type === "organization" ? "an organization" : "not a personal account"}. Only a personal GitHub account can be a viewer. Nothing was changed.`
+				};
+				if (removals.some(({ githubAccountId }) => githubAccountId === user.githubAccountId)) return {
+					status: "usage_error",
+					message: `${account(user)} is both added and removed. Nothing was changed.`
+				};
+				progress.push(`Found ${account(user)}.`);
+				if (!accounts.some(({ githubAccountId }) => githubAccountId === user.githubAccountId)) accounts.push(user);
+			}
+			const { added, removed, ...shared } = await updateDocumentSharing(origin, documentId, {
+				add: accounts.map(({ githubAccountId, login }) => ({
+					githubAccountId,
+					login
+				})),
+				remove: removals.map(({ githubAccountId }) => githubAccountId)
+			}, request);
+			return {
+				status: "viewers_updated",
+				documentId,
+				added,
+				removed,
+				notViewers,
+				viewers: shared.viewers,
+				message: [
+					...progress,
+					...removed.map((viewer) => `Removed ${account(viewer)}.`),
+					...added.map((viewer) => `Added ${account(viewer)}.`),
+					...notViewers.map((value) => `${value} is not a viewer of ${documentId}.`),
+					viewerList(documentId, shared.viewers)
+				].join("\n")
+			};
+		} catch (error) {
+			const prefix = (result) => ({
+				...result,
+				documentId,
+				message: [...progress, result.message].join("\n")
+			});
+			if (isRefusal(error)) {
+				const { status } = error;
+				if (status === "github_sign_in_required") return prefix({
+					status,
+					message: `GitHub refused the sign-in Pageship uses to look up GitHub users. Sign in to the Pageship dashboard again with GitHub, then run ${commandLine(next.command, next.args)}.`,
+					next
+				});
+				if (status === "github_rate_limited" || status === "github_unavailable") return prefix({
+					status,
+					message: error.message,
+					next
+				});
+				return prefix(refusal(error, login));
+			}
+			return prefix(options.signal.aborted ? {
+				status: "interrupted",
+				message: `Operation interrupted. Run ${commandLine(next.command, next.args)} to finish.`,
+				next
+			} : {
+				status: "request_failed",
+				message: `${error instanceof Error ? error.message : String(error)} Run ${commandLine(next.command, next.args)} to retry.`,
+				next
+			});
+		}
+	});
+}
+//#endregion
+//#region src/update.ts
+/**
+* The command that updates a global install with each manager. Keep in sync with the setup
+* guide. The package names an exact version where one is known: pnpm resolves `latest` to the
+* newest version older than its minimum release age, so a fresh release would not install.
+*/
+const updateCommand$1 = (manager, spec) => ({
+	npm: [
+		"npm",
+		"i",
+		"-g",
+		spec
+	],
+	pnpm: [
+		"pnpm",
+		"add",
+		"-g",
+		spec
+	],
+	bun: [
+		"bun",
+		"add",
+		"-g",
+		spec
+	],
+	yarn: [
+		"yarn",
+		"global",
+		"add",
+		spec
+	],
+	vp: [
+		"vp",
+		"install",
+		"-g",
+		spec
+	]
+})[manager];
+const npmRoot = (signal) => new Promise((resolve) => {
+	exec("npm root -g", {
+		timeout: 1e4,
+		windowsHide: true,
+		signal
+	}, (error, stdout) => resolve(error ? void 0 : stdout.trim() || void 0));
+});
+/**
+* Run a command with the terminal attached, or, for `--json`, with its output collected so
+* standard output stays one JSON value.
+*/
+const runCommand = (json) => (argv, signal) => new Promise((resolve, reject) => {
+	const [command, ...args] = argv;
+	if (!json) console.log(`Running ${argv.join(" ")}`);
+	const stdio = json ? [
+		"ignore",
+		"pipe",
+		"pipe"
+	] : "inherit";
+	const child = process.platform === "win32" ? spawn(argv.join(" "), {
+		stdio,
+		shell: true,
+		windowsHide: true
+	}) : spawn(command, args, { stdio });
+	const stop = () => child.kill("SIGTERM");
+	signal.addEventListener("abort", stop, { once: true });
+	const settle = () => signal.removeEventListener("abort", stop);
+	let output = "";
+	const collect = (chunk) => {
+		output = (output + chunk.toString()).slice(-4e3);
+	};
+	child.stdout?.on("data", collect);
+	child.stderr?.on("data", collect);
+	child.once("error", (error) => {
+		settle();
+		reject(error);
+	});
+	child.once("close", (exitCode) => {
+		settle();
+		resolve({
+			exitCode,
+			output
+		});
+	});
+});
+/** A path with forward slashes and a trailing slash, compared without case on Windows. */
+function comparable(path, platform) {
+	const slashed = `${path.replaceAll("\\", "/").replace(/\/+$/u, "")}/`;
+	return platform === "win32" ? slashed.toLowerCase() : slashed;
+}
+/**
+* Which manager installed this CLI globally, from where its package is. Undefined for anything
+* else, such as a project dependency or an npx cache, which `update` must not replace.
+*/
+async function detectManager(environment, signal) {
+	const { platform, env } = environment;
+	const root = comparable(environment.packageRoot, platform);
+	const installed = (folders, layout) => folders.some((folder) => {
+		if (!folder) return false;
+		const base = comparable(folder, platform);
+		const index = root.lastIndexOf(base);
+		return index !== -1 && layout.test(root.slice(index + base.length));
+	});
+	if (installed(["/vite-plus/packages/"], /^pageship\/[^/]+\/(?:lib\/)?node_modules\/pageship\/$/u)) return "vp";
+	if (installed(["/pnpm/global/", env.PNPM_HOME && join(env.PNPM_HOME, "global")], /^[^/]+\/(?:[^/]+\/)?node_modules\/\.pnpm\/pageship@[^/]+\/node_modules\/pageship\/$/u)) return "pnpm";
+	if (installed(["/.bun/", env.BUN_INSTALL], /^install\/global\/node_modules\/pageship\/$/u) || installed([env.BUN_INSTALL_GLOBAL_DIR], /^node_modules\/pageship\/$/u)) return "bun";
+	if (installed(["/yarn/global/", "/yarn/data/global/"], /^node_modules\/pageship\/$/u)) return "yarn";
+	const npm = await environment.npmRoot(signal);
+	const parent = root.slice(0, root.lastIndexOf("/", root.length - 2) + 1);
+	if (npm !== void 0 && parent === comparable(npm, platform)) return "npm";
+}
+/**
+* Update this CLI to the version npm publishes as latest, with the package manager that
+* installed it. It changes nothing when this CLI is already the latest.
+*/
+async function update(environment, signal) {
+	const { version } = environment;
+	const latest = await environment.publishedVersion(signal);
+	if (latest !== void 0 && !older(version, latest)) return {
+		status: "cli_current",
+		message: `Pageship ${version} is the latest version.`,
+		version,
+		latest
+	};
+	const manager = await detectManager(environment, signal);
+	signal.throwIfAborted();
+	if (manager === void 0) return {
+		status: "install_unknown",
+		message: `This Pageship CLI, in ${environment.packageRoot}, was not installed globally by npm, pnpm, bun, Yarn or Vite+, so update cannot tell how to replace it. Update it the way you installed it.`,
+		version,
+		...latest === void 0 ? {} : { latest },
+		path: environment.packageRoot
+	};
+	const argv = updateCommand$1(manager, `pageship@${latest ?? "latest"}`);
+	const run = argv.join(" ");
+	const ran = await environment.run(argv, signal).catch((error) => {
+		if (signal.aborted) throw error;
+		return {
+			exitCode: null,
+			output: error instanceof Error ? error.message : String(error)
+		};
+	});
+	signal.throwIfAborted();
+	if (ran.exitCode !== 0) return {
+		status: "update_failed",
+		message: [ran.exitCode === null ? `Could not run ${run}.` : `${run} failed with exit code ${ran.exitCode}.`, ran.output.trim()].filter(Boolean).join("\n"),
+		version,
+		...latest === void 0 ? {} : { latest },
+		manager,
+		run,
+		exitCode: ran.exitCode,
+		output: ran.output
+	};
+	const skills = await stat(join(environment.home, ".agents", "skills", "pageship")).then(() => true, () => false);
+	return {
+		status: "cli_updated",
+		message: [latest === void 0 ? `Updated Pageship from ${version} with ${run}.` : `Updated Pageship from ${version} to ${latest} with ${run}.`, ...skills ? [`Run ${commandLine(installNext.command, installNext.args)} to update the Pageship skills to match.`] : []].join("\n"),
+		version,
+		...latest === void 0 ? {} : { latest },
+		manager,
+		run,
+		...skills ? { next: installNext } : {}
+	};
+}
+//#endregion
 //#region src/cli.ts
 const args = process.argv.slice(2);
 const separator = args.indexOf("--");
@@ -2818,6 +3237,13 @@ const skills = Command.make("skills").pipe(Command.withDescription("Manage the P
 	force,
 	signal
 }))).pipe(Command.withDescription("Install the Pageship skills in ~/.agents/skills, and link them in ~/.claude/skills when ~/.claude exists."))]));
+const updateCommand = Command.make("update", {}, () => authCommand("update", (signal) => update({
+	...skillsEnvironment,
+	packageRoot: dirname(dirname(fileURLToPath(import.meta.url))),
+	env: process.env,
+	npmRoot,
+	run: runCommand(json)
+}, signal))).pipe(Command.withDescription("Update this CLI to the latest version with the package manager that installed it: npm, pnpm, bun, Yarn or Vite+."));
 const login = Command.make("login", {
 	complete: Flag.boolean("complete").pipe(Flag.withDefault(false), Flag.withDescription("Check a pending authorization once, without waiting.")),
 	restart: Flag.boolean("restart").pipe(Flag.withDefault(false), Flag.withDescription("Start a new authorization code.")),
@@ -2905,6 +3331,18 @@ const visibility = Command.make("visibility", {
 	visibility,
 	signal
 }))).pipe(Command.withDescription("Make a document private or public."));
+const viewers = Command.make("viewers", {
+	documentId: documentIdArgument,
+	add: Flag.string("add").pipe(Flag.filter((value) => isGitHubLogin(value), () => "Use a GitHub username."), Flag.withDescription("Look up this GitHub username and add the account it names as a viewer. Repeat to add several."), Flag.atLeast(0)),
+	remove: Flag.string("remove").pipe(Flag.filter((value) => isGitHubLogin(value), () => "Use a viewer's GitHub username or GitHub ID."), Flag.withDescription("Remove the viewer with this GitHub username or GitHub ID. Repeat to remove several."), Flag.atLeast(0)),
+	server: serverFlag
+}, ({ documentId, add, remove, server }) => authCommand("viewers", (signal) => manageViewers({
+	server: Option.getOrUndefined(server),
+	documentId,
+	add,
+	remove,
+	signal
+}))).pipe(Command.withDescription("List the GitHub users who can read a private document, or add and remove them."));
 const restore = Command.make("restore", {
 	documentId: documentIdArgument,
 	server: serverFlag,
@@ -2966,7 +3404,7 @@ function authCommand(name, operation) {
 			settle(name, result);
 			if (json) return;
 			if (thrown) {
-				console.error(`${name === "status" ? "Could not check status" : name === "skills" ? "Could not install the Pageship skills" : "Pageship request failed"}: ${result.message}`);
+				console.error(`${name === "status" ? "Could not check status" : name === "skills" ? "Could not install the Pageship skills" : name === "update" ? "Could not update Pageship" : "Pageship request failed"}: ${result.message}`);
 				return;
 			}
 			console.log(result.message);
@@ -2977,7 +3415,7 @@ function authCommand(name, operation) {
 		}
 	});
 }
-const command = Command.make("pageship").pipe(Command.withDescription("Pageship publishes private HTML documents on the hosted Pageship service.\n\nEarly development: check whether this installation is ready with the status command. Authorize this installation with login, then publish one HTML file with publish. Manage published documents with list, history, download, visibility and restore. Install the Pageship skills for your agents with skills install."), Command.withSubcommands([
+const command = Command.make("pageship").pipe(Command.withDescription("Pageship publishes private HTML documents on the hosted Pageship service.\n\nEarly development: check whether this installation is ready with the status command. Authorize this installation with login, then publish one HTML file with publish. Manage published documents with list, history, download, visibility, viewers and restore. Install the Pageship skills for your agents with skills install, and update the CLI with update."), Command.withSubcommands([
 	status,
 	login,
 	whoami,
@@ -2986,8 +3424,10 @@ const command = Command.make("pageship").pipe(Command.withDescription("Pageship
 	history,
 	download,
 	visibility,
+	viewers,
 	restore,
-	skills
+	skills,
+	updateCommand
 ]), Command.withGlobalFlags([jsonFlag]));
 const effectiveArgs = args.every((arg, index) => arg === "--json" || arg.startsWith("--json=") && booleanValue(arg.slice(7)) !== void 0 || index > 0 && args[index - 1] === "--json" && booleanValue(arg) !== void 0) ? [...args, "--help"] : args;
 const program = Command.runWith(command, {

package/dist/skills/pageship/SKILL.md

@@ -1,9 +1,9 @@
 ---
 name: pageship
-description: Publish an HTML file to Pageship and manage what is published. Use when the user asks to publish, share or get a link to a document, update its published copy, change its visibility, list, inspect history, download or restore published documents, or sign in to Pageship. To write, edit, rename or move a document, load pageship-docs instead.
+description: Publish an HTML file to Pageship and manage what is published. Use when the user asks to publish, share or get a link to a document, update its published copy, change its visibility or viewers, list, inspect history, download or restore published documents, or sign in to Pageship. To write, edit, rename or move a document, load pageship-docs instead.
 license: MIT
 metadata:
-  version: "0.4.1"
+  version: "0.6.0"
 ---
 
 # Pageship
@@ -33,6 +33,7 @@ With `--json`, the CLI prints one JSON object on one line. Parse it before you d
 - `next` is one follow-up command. `resolutions` holds named alternatives for a decision, each a follow-up command or a list of them.
 - Other fields depend on the status, such as `document`, `candidates`, `choices`, `user` or `idempotencyKey`.
 - `skills install` returns `skills_installed` or `skills_modified`, as described in [Install the Pageship skills](#install-the-pageship-skills).
+- `update` returns `cli_updated`, `cli_current`, `install_unknown` or `update_failed`, as described in [Update the CLI](#update-the-cli).
 
 A follow-up has a `command` and an `args` array. Run it as `pageship --json <command> <args...>` with `args` unchanged. They already carry the server, target document, expected revision and retry key, so never rebuild them from memory.
 
@@ -50,7 +51,17 @@ pageship --json status
 
 Status only reads; it never signs in, claims an address or uploads. On `admitted`, sign-in and the workspace address are set, unless `next` is a `login`: that comes from an older server that does not report the address, and running it confirms the address. A `next` of `skills install` on `admitted` is about the skills, below. On `signed_out` or `address_required`, sign in as described below. On `uninvited`, report the `message`: the user must ask the server owner for an invitation, or sign in with another account using `login --restart`. On `unreachable`, `client_too_old`, `server_too_old`, `unsupported` or `configuration_unreadable`, report the `message`; signing in does not fix these. A ready status does not prove that a publish will succeed.
 
-Status also reports the Pageship skills in `skills`: `missing`, `current` or `older` than the CLI. They never block publishing, and a status that is otherwise ready still succeeds. When `skills` is `missing` or `older`, tell the user, and install them as below only if they agree. Never run a `skills install` from `next` without asking. When `cli` is `older`, a newer CLI is published: tell the user, and offer to update it with the package manager that installed it before installing the skills.
+Status also reports the Pageship skills in `skills`: `missing`, `current` or `older` than the CLI. They never block publishing, and a status that is otherwise ready still succeeds. When `skills` is `missing` or `older`, tell the user, and install them as below only if they agree. Never run a `skills install` from `next` without asking. When `cli` is `older`, a newer CLI is published: tell the user, and offer to update it, as below, before installing the skills.
+
+## Update the CLI
+
+With the user's agreement, update the CLI with the package manager that installed it:
+
+```sh
+pageship --json update
+```
+
+On `cli_updated`, the new version is installed. Its `next` is a `skills install`, present when the Pageship skills are installed, since they still match the old version: install them as below if the user agrees. On `cli_current`, the CLI is already the latest. On `install_unknown`, no supported package manager installed it globally, so nothing ran; tell the user to update it the way they installed it. On `update_failed`, report the `message`, which carries the package manager's error.
 
 ## Install the Pageship skills
 
@@ -97,7 +108,7 @@ After a successful upload the CLI adds the document marker to the end of the loc
 On `published`, tell the user:
 
 - the document URL, `document.url`;
-- who can read it, from `document.visibility`: a private document opens only for its owner, signed in;
+- who can read it, from `document.visibility`: a private document opens only for its owner and its viewers, signed in;
 - whether this publish created a new document or revised an existing one, from `change`: `created` or `revised`.
 
 Keep `idempotencyKey` only while you resolve an uncertain attempt.
@@ -124,7 +135,11 @@ This works for any document the user owns, even when the file moved or belongs t
 
 ## Share a document
 
-A request to share a document, or to send someone its link, is a request to publish it. Publish it as above and report the publish. A new document is private. When the result is private, ask whether to make it public, and say in the question that anyone with the link can then read it. When it is already public, because the user made it public earlier, say so and don't ask. Change visibility only after the user agrees, as in [visibility](references/visibility.md).
+A request to share a document, or to send someone its link, is a request to publish it. Publish it as above and report the publish. A new document is private.
+
+When the user names the people to share it with, keep it private and add them as viewers, as in [viewers](references/viewers.md). Sharing with named people never makes a document public.
+
+When the user names no one and the result is private, ask whether to make it public, and say in the question that anyone with the link can then read it. Mention that it can instead stay private and be shared with named GitHub users. When it is already public, because the user made it public earlier, say so and don't ask. Change visibility only after the user agrees, as in [visibility](references/visibility.md).
 
 ## Use another server
 
@@ -137,6 +152,7 @@ Load the reference for the task:
 - [List and history](references/list-and-history.md): find a document's `id`, `visibility`, current `revisionId` and `url`, and inspect its revisions.
 - [Download](references/download.md): read a document's HTML, current or from an earlier revision.
 - [Visibility](references/visibility.md): make a document public or private.
+- [Viewers](references/viewers.md): list, add or remove the GitHub users who can read a private document.
 - [Restore](references/restore.md): make an earlier revision current again.
 
 Deleting a document, recovering a deleted one, changing a document's display title and revoking a CLI installation happen in the dashboard, at https://app.pageship.dev for the hosted service. The CLI has no commands for them yet, so give the user the dashboard link.

package/dist/skills/pageship/references/viewers.md

@@ -0,0 +1,43 @@
+# Viewers
+
+A viewer is a GitHub user who can read a private document after signing in with GitHub. The owner always can. Viewers see only the current revision, never the history.
+
+## Share with named people
+
+Add viewers only for people the user named in this conversation. When the user names a person without a GitHub username, ask for it; a GitHub username is the only way to name a viewer. Sharing with people keeps the document private: a request to share a document with someone is never a request to make it public. A public document can't have viewers, so if it is public, ask the user whether to make it private first, as in [visibility](visibility.md), and add no one until they agree.
+
+Set `PAGESHIP_DOCUMENT` to the document's `id`, then add each named username with its own `--add`:
+
+```sh
+pageship --json viewers "$PAGESHIP_DOCUMENT" --add octocat --add hubot
+```
+
+The CLI looks each username up on GitHub before it changes anything. On `viewers_updated`, `added` holds each account it added, with `login`, `name` and `githubAccountId`. Show the user every account in `added` by `login` and `name`, and ask them to confirm each is the person they meant. A username can belong to someone else. If one is wrong, remove it as below. Then give the user the document's `url` to send: Pageship sends no invitations.
+
+## List and remove viewers
+
+To see who can read the document, run:
+
+```sh
+pageship --json viewers "$PAGESHIP_DOCUMENT"
+```
+
+On `listed`, `viewers` holds each viewer's `login`, `name` and `githubAccountId`. A viewer's `login` is the one they had when added or last signed in, so two viewers can show the same `login`.
+
+Remove viewers only when the user asks. Pass a `login` or a `githubAccountId`, one `--remove` each. A value of only digits is always a `githubAccountId`, so remove a viewer whose `login` is all digits by its `githubAccountId`:
+
+```sh
+pageship --json viewers "$PAGESHIP_DOCUMENT" --remove octocat
+```
+
+`notViewers` names values that matched no viewer; nothing was needed for them. On `ambiguous_viewer`, the value matched more than one viewer and nothing changed. Show the user `matches` and ask which one, then remove it by its `githubAccountId`.
+
+## Outcomes
+
+- `github_user_not_found`, `not_personal_account` or `owner_account`: nothing changed for that username. Report the `message` and ask the user for the right GitHub username. Only a personal account can be a viewer, and the owner can always read their own document.
+- `github_account_mismatch`: the username moved to another account between the lookup and the change. Report the `message` and ask the user to confirm the username before you run the same command again.
+- `document_public`: the document is public. Ask whether to make it private before adding anyone.
+- `github_sign_in_required`: GitHub refused the sign-in Pageship uses to look up users. Ask the user to sign in to the Pageship dashboard again with GitHub, then run the returned `next`. A CLI `login` doesn't fix this.
+- `github_rate_limited` or `github_unavailable`: wait a minute, then run the returned `next`.
+
+The command adds and removes everyone together or no one. On any failure, nothing changed. Its `next` repeats the whole command. It takes up to 20 `--add` and 50 `--remove` values; split a longer list across several commands.

package/dist/skills/pageship/references/visibility.md

@@ -1,6 +1,6 @@
 # Visibility
 
-A private document opens only for its owner, signed in. Anyone with the link can read a public one, without signing in.
+A private document opens only for its owner and its [viewers](viewers.md), signed in. Anyone with the link can read a public one, without signing in. Making a document public removes all its viewers.
 
 Change visibility only when the user asked for a policy by name, such as "make it public", or agreed when you asked after sharing. Set `PAGESHIP_DOCUMENT` to the document's `id`, then run one of:
 
@@ -9,4 +9,4 @@ pageship --json visibility "$PAGESHIP_DOCUMENT" public
 pageship --json visibility "$PAGESHIP_DOCUMENT" private
 ```
 
-On `visibility_updated`, report the returned `document.visibility` and `document.url`. Publishing a new revision keeps the document's visibility.
+On `visibility_updated`, report the returned `document.visibility` and `document.url`, and `removedViewers` when it is more than 0. Publishing a new revision keeps the document's visibility.

package/dist/skills/pageship-chart/SKILL.md

@@ -1,9 +1,9 @@
 ---
 name: pageship-chart
-description: Later step of pageship-docs: for a request to write or edit a document, load pageship-docs first; load this skill first only when the user names it. Pattern for charts in a Pageship HTML document, loaded by a pageship- kind skill before it draws a chart.
+description: "Later step of pageship-docs: for a request to write or edit a document, load pageship-docs first; load this skill first only when the user names it. Pattern for charts in a Pageship HTML document, loaded by a pageship- kind skill before it draws a chart."
 license: MIT
 metadata:
-  version: "0.4.1"
+  version: "0.6.0"
 ---
 
 # Chart

package/dist/skills/pageship-code-block/SKILL.md

@@ -1,9 +1,9 @@
 ---
 name: pageship-code-block
-description: Later step of pageship-docs: for a request to write or edit a document, load pageship-docs first; load this skill first only when the user names it. Pattern for code in a Pageship HTML document, such as source code, commands, configuration or logs, loaded by a pageship- kind skill before the first code block.
+description: "Later step of pageship-docs: for a request to write or edit a document, load pageship-docs first; load this skill first only when the user names it. Pattern for code in a Pageship HTML document, such as source code, commands, configuration or logs, loaded by a pageship- kind skill before the first code block."
 license: MIT
 metadata:
-  version: "0.4.1"
+  version: "0.6.0"
 ---
 
 # Code block

package/dist/skills/pageship-decision-record/SKILL.md

@@ -3,7 +3,7 @@ name: pageship-decision-record
 description: HTML decision records, as the second step of pageship-docs. For any request to record, write, regenerate, edit or move a decision, load pageship-docs first; load this skill first only when the user names it.
 license: MIT
 metadata:
-  version: "0.4.1"
+  version: "0.6.0"
 ---
 
 # Decision record

package/dist/skills/pageship-diagram/SKILL.md

@@ -1,9 +1,9 @@
 ---
 name: pageship-diagram
-description: Later step of pageship-docs: for a request to write or edit a document, load pageship-docs first; load this skill first only when the user names it. Pattern for diagrams in a Pageship HTML document, such as a process, a timeline, a system map or states, loaded by a pageship- kind skill before it draws a diagram.
+description: "Later step of pageship-docs: for a request to write or edit a document, load pageship-docs first; load this skill first only when the user names it. Pattern for diagrams in a Pageship HTML document, such as a process, a timeline, a system map or states, loaded by a pageship- kind skill before it draws a diagram."
 license: MIT
 metadata:
-  version: "0.4.1"
+  version: "0.6.0"
 ---
 
 # Diagram

package/dist/skills/pageship-docs/SKILL.md

@@ -3,7 +3,7 @@ name: pageship-docs
 description: First step for any document people read, such as a report, plan, spec, explainer, review, decision record or slide deck, in HTML or Markdown. Load it before any other pageship- skill. Use when the user asks for one of these documents, asks to regenerate, redesign, edit, rename, move or copy an HTML source file, or asks to record whether they want HTML or Markdown.
 license: MIT
 metadata:
-  version: "0.4.1"
+  version: "0.6.0"
 ---
 
 # Pageship documents

package/dist/skills/pageship-explainer/SKILL.md

@@ -3,7 +3,7 @@ name: pageship-explainer
 description: HTML explainers, as the second step of pageship-docs. For any request to explain how something works, or to write, regenerate, edit or move an explainer, load pageship-docs first; load this skill first only when the user names it.
 license: MIT
 metadata:
-  version: "0.4.1"
+  version: "0.6.0"
 ---
 
 # Explainer

package/dist/skills/pageship-interaction/SKILL.md

@@ -1,9 +1,9 @@
 ---
 name: pageship-interaction
-description: Later step of pageship-docs: for a request to write or edit a document, load pageship-docs first; load this skill first only when the user names it. Pattern for controls in a Pageship HTML document, such as stepping through stages, tracing a path, tabs, filters, revealing detail and pointer states on charts and diagrams, loaded by a pageship- kind skill before it adds any control.
+description: "Later step of pageship-docs: for a request to write or edit a document, load pageship-docs first; load this skill first only when the user names it. Pattern for controls in a Pageship HTML document, such as stepping through stages, tracing a path, tabs, filters, revealing detail and pointer states on charts and diagrams, loaded by a pageship- kind skill before it adds any control."
 license: MIT
 metadata:
-  version: "0.4.1"
+  version: "0.6.0"
 ---
 
 # Interaction

package/dist/skills/pageship-key-figures/SKILL.md

@@ -1,9 +1,9 @@
 ---
 name: pageship-key-figures
-description: Later step of pageship-docs: for a request to write or edit a document, load pageship-docs first; load this skill first only when the user names it. Pattern for the few numbers and callouts a Pageship HTML document opens with, loaded by a pageship- kind skill before it writes key figures.
+description: "Later step of pageship-docs: for a request to write or edit a document, load pageship-docs first; load this skill first only when the user names it. Pattern for the few numbers and callouts a Pageship HTML document opens with, loaded by a pageship- kind skill before it writes key figures."
 license: MIT
 metadata:
-  version: "0.4.1"
+  version: "0.6.0"
 ---
 
 # Key figures

package/dist/skills/pageship-media/SKILL.md

@@ -1,9 +1,9 @@
 ---
 name: pageship-media
-description: Later step of pageship-docs: for a request to write or edit a document, load pageship-docs first; load this skill first only when the user names it. Pattern for images, video and audio in a Pageship HTML document, loaded by a pageship- kind skill before it shows media.
+description: "Later step of pageship-docs: for a request to write or edit a document, load pageship-docs first; load this skill first only when the user names it. Pattern for images, video and audio in a Pageship HTML document, loaded by a pageship- kind skill before it shows media."
 license: MIT
 metadata:
-  version: "0.4.1"
+  version: "0.6.0"
 ---
 
 # Media

package/dist/skills/pageship-motion/SKILL.md

@@ -1,9 +1,9 @@
 ---
 name: pageship-motion
-description: Later step of pageship-docs: for a request to write or edit a document, load pageship-docs first; load this skill first only when the user names it. Pattern for animation and transitions in a Pageship HTML document, such as a chart that grows into view, a sequence that plays through a diagram, or a marker moving along a path, loaded by a pageship- kind skill before it draws a chart, a graphic or a sequence, or before anything else on the page moves.
+description: "Later step of pageship-docs: for a request to write or edit a document, load pageship-docs first; load this skill first only when the user names it. Pattern for animation and transitions in a Pageship HTML document, such as a chart that grows into view, a sequence that plays through a diagram, or a marker moving along a path, loaded by a pageship- kind skill before it draws a chart, a graphic or a sequence, or before anything else on the page moves."
 license: MIT
 metadata:
-  version: "0.4.1"
+  version: "0.6.0"
 ---
 
 # Motion

package/dist/skills/pageship-plan/SKILL.md

@@ -3,7 +3,7 @@ name: pageship-plan
 description: HTML plans, as the second step of pageship-docs. For any request to write, regenerate, edit or move a plan, load pageship-docs first; load this skill first only when the user names it.
 license: MIT
 metadata:
-  version: "0.4.1"
+  version: "0.6.0"
 ---
 
 # Plan

package/dist/skills/pageship-report/SKILL.md

@@ -3,7 +3,7 @@ name: pageship-report
 description: HTML reports, as the second step of pageship-docs. For any request to write, regenerate, edit or move a report, load pageship-docs first; load this skill first only when the user names it.
 license: MIT
 metadata:
-  version: "0.4.1"
+  version: "0.6.0"
 ---
 
 # Report

package/dist/skills/pageship-review-report/SKILL.md

@@ -3,7 +3,7 @@ name: pageship-review-report
 description: HTML review reports, as the second step of pageship-docs. For any request to review a change or a plan and write up the findings, or to write, regenerate, edit or move a review report, load pageship-docs first; load this skill first only when the user names it.
 license: MIT
 metadata:
-  version: "0.4.1"
+  version: "0.6.0"
 ---
 
 # Review report

package/dist/skills/pageship-slide-deck/SKILL.md

@@ -3,7 +3,7 @@ name: pageship-slide-deck
 description: HTML slide decks, as the second step of pageship-docs. For any request to make slides or a presentation, or to regenerate, edit or move a deck, load pageship-docs first; load this skill first only when the user names it.
 license: MIT
 metadata:
-  version: "0.4.1"
+  version: "0.6.0"
 ---
 
 # Slide deck

package/dist/skills/pageship-spec/SKILL.md

@@ -3,7 +3,7 @@ name: pageship-spec
 description: HTML specs, as the second step of pageship-docs. For any request to write, regenerate, edit or move a spec, load pageship-docs first; load this skill first only when the user names it.
 license: MIT
 metadata:
-  version: "0.4.1"
+  version: "0.6.0"
 ---
 
 # Spec

package/dist/skills/pageship-table/SKILL.md

@@ -1,9 +1,9 @@
 ---
 name: pageship-table
-description: Later step of pageship-docs: for a request to write or edit a document, load pageship-docs first; load this skill first only when the user names it. Pattern for tables in a Pageship HTML document, loaded by a pageship- kind skill before it writes a table.
+description: "Later step of pageship-docs: for a request to write or edit a document, load pageship-docs first; load this skill first only when the user names it. Pattern for tables in a Pageship HTML document, loaded by a pageship- kind skill before it writes a table."
 license: MIT
 metadata:
-  version: "0.4.1"
+  version: "0.6.0"
 ---
 
 # Table

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pageship",
-  "version": "0.4.1",
+  "version": "0.6.0",
   "description": "Pageship CLI for checking server API compatibility.",
   "license": "UNLICENSED",
   "repository": {