shelfware 0.1.1 → 0.1.2

package/.output/server/chunks/nitro/nitro.mjs

@@ -4056,7 +4056,7 @@ function _expandFromEnv(value) {
 const _inlineRuntimeConfig = {
   "app": {
     "baseURL": "/",
-    "buildId": "e0d2b6a3-3a30-44b7-8c79-a56f66400005",
+    "buildId": "bc384f67-a2f8-4b6b-9aa1-cb68fb93d366",
     "buildAssetsDir": "/_nuxt/",
     "cdnURL": ""
   },
@@ -4500,7 +4500,7 @@ async function errorHandler(error, event) {
 
 const script = "\"use strict\";(()=>{const o=window,e=document.documentElement,c=[\"dark\",\"light\"],s=getStorageValue(\"localStorage\",\"nuxt-color-mode\")||\"system\";let r=s===\"system\"?f():s;const l=e.getAttribute(\"data-color-mode-forced\");l&&(r=l),i(r),o[\"__NUXT_COLOR_MODE__\"]={preference:s,value:r,getColorScheme:f,addColorScheme:i,removeColorScheme:d};function i(t){const a=\"\"+t+\"\",n=\"\";e.classList?e.classList.add(a):e.className+=\" \"+a,n&&e.setAttribute(\"data-\"+n,t)}function d(t){const a=\"\"+t+\"\",n=\"\";e.classList?e.classList.remove(a):e.className=e.className.replace(new RegExp(a,\"g\"),\"\"),n&&e.removeAttribute(\"data-\"+n)}function u(t){return o.matchMedia(\"(prefers-color-scheme\"+t+\")\")}function f(){if(o.matchMedia&&u(\"\").media!==\"not all\"){for(const t of c)if(u(\":\"+t).matches)return t}return\"light\"}})();function getStorageValue(o,e){switch(o){case\"localStorage\":try{return window.localStorage.getItem(e)}catch{return null}case\"sessionStorage\":try{return window.sessionStorage.getItem(e)}catch{return null}case\"cookie\":try{return getCookie(e)}catch{return null}default:return null}}function getCookie(o){const c=(\"; \"+window.document.cookie).split(\"; \"+o+\"=\");if(c.length===2){const s=c.pop();return s?s.split(\";\").shift():null}}";
 
-const _sy8WL5gvfy834j9E8qs4pEkXtOnD5hjDQZM7n5pkxM = (function(nitro) {
+const _4H4culGvQ1Dp8myD2WdjQ3S6IGUumm_St2Zw0wwTTE = (function(nitro) {
   nitro.hooks.hook("render:html", (htmlContext) => {
     htmlContext.head.push(`<script>${script}<\/script>`);
   });
@@ -4559,122 +4559,122 @@ function tokenMatches(actual, expected) {
   return timingSafeEqual(a, b);
 }
 
-const _QOaOEwx81eDlZeFZjWojtfFoitcjIhtHIqt37VdYuSg = defineNitroPlugin(() => {
+const _YY93QxfadySKCpwmDM6dAIPqjH6q5NYi1I7q0CwP0w = defineNitroPlugin(() => {
   if (!isWellFormedToken(process.env.NUXT_PUBLIC_SHELFWARE_TOKEN)) {
     process.env.NUXT_PUBLIC_SHELFWARE_TOKEN = `sw_${randomBytes(32).toString("hex")}`;
   }
 });
 
 const plugins = [
-  _sy8WL5gvfy834j9E8qs4pEkXtOnD5hjDQZM7n5pkxM,
-_QOaOEwx81eDlZeFZjWojtfFoitcjIhtHIqt37VdYuSg
+  _4H4culGvQ1Dp8myD2WdjQ3S6IGUumm_St2Zw0wwTTE,
+_YY93QxfadySKCpwmDM6dAIPqjH6q5NYi1I7q0CwP0w
 ];
 
 const assets = {
-  "/_nuxt/6IstVYrV.js": {
-    "type": "text/javascript; charset=utf-8",
-    "etag": "\"e90-QSo0QKAvkvHEus5Dhcj+CyKCqD4\"",
-    "mtime": "2026-09-06T14:46:29.734Z",
-    "size": 3728,
-    "path": "../public/_nuxt/6IstVYrV.js"
-  },
   "/_nuxt/BDNMzG2s.js": {
     "type": "text/javascript; charset=utf-8",
     "etag": "\"54-MasMfSk/A98C3Gn9uIOxtFxkWNw\"",
-    "mtime": "2026-09-06T14:46:29.734Z",
+    "mtime": "2026-09-06T17:42:02.389Z",
     "size": 84,
     "path": "../public/_nuxt/BDNMzG2s.js"
   },
   "/_nuxt/BW3xJdEx.js": {
     "type": "text/javascript; charset=utf-8",
     "etag": "\"2da-zDmvCG/tLW/peRiDRHBkm+3Edw4\"",
-    "mtime": "2026-09-06T14:46:29.735Z",
+    "mtime": "2026-09-06T17:42:02.389Z",
     "size": 730,
     "path": "../public/_nuxt/BW3xJdEx.js"
   },
-  "/_nuxt/BXXtFil5.js": {
+  "/_nuxt/Bzmuhhqm.js": {
     "type": "text/javascript; charset=utf-8",
-    "etag": "\"1bd2-NDdun38lYj0OD2wayMdetDX3ehc\"",
-    "mtime": "2026-09-06T14:46:29.735Z",
-    "size": 7122,
-    "path": "../public/_nuxt/BXXtFil5.js"
+    "etag": "\"d4e-gP63vGSa9YNUx8rX9IMYEHDofck\"",
+    "mtime": "2026-09-06T17:42:02.389Z",
+    "size": 3406,
+    "path": "../public/_nuxt/Bzmuhhqm.js"
   },
-  "/_nuxt/BeLyMmd4.js": {
+  "/_nuxt/CJmYvhe6.js": {
     "type": "text/javascript; charset=utf-8",
-    "etag": "\"1c1-HX03BAMzK3TbabTUt+zazZac6jY\"",
-    "mtime": "2026-09-06T14:46:29.735Z",
-    "size": 449,
-    "path": "../public/_nuxt/BeLyMmd4.js"
+    "etag": "\"e90-WCRBrvGTpCy77xWxtXI2/olAzuA\"",
+    "mtime": "2026-09-06T17:42:02.389Z",
+    "size": 3728,
+    "path": "../public/_nuxt/CJmYvhe6.js"
   },
-  "/_nuxt/BZuUK3cr.js": {
+  "/_nuxt/CMk5jOCS.js": {
     "type": "text/javascript; charset=utf-8",
-    "etag": "\"d4e-rtWL1k144ZrYuBUrIE7FN7q4gDI\"",
-    "mtime": "2026-09-06T14:46:29.735Z",
-    "size": 3406,
-    "path": "../public/_nuxt/BZuUK3cr.js"
+    "etag": "\"1c01-lGS5cFf7bjhmRvkeRxUtYYhz3dw\"",
+    "mtime": "2026-09-06T17:42:02.389Z",
+    "size": 7169,
+    "path": "../public/_nuxt/CMk5jOCS.js"
   },
-  "/_nuxt/C_VgD9ZI.js": {
+  "/_nuxt/DJQqUjJu.js": {
     "type": "text/javascript; charset=utf-8",
-    "etag": "\"16e9b-CaBNJIMBZbSuSxfSRmsiBioAcZc\"",
-    "mtime": "2026-09-06T14:46:29.735Z",
-    "size": 93851,
-    "path": "../public/_nuxt/C_VgD9ZI.js"
+    "etag": "\"9f1d-Ja0Ka8FFBfh/wxDphcm6zq2k/Aw\"",
+    "mtime": "2026-09-06T17:42:02.389Z",
+    "size": 40733,
+    "path": "../public/_nuxt/DJQqUjJu.js"
   },
-  "/_nuxt/DB5Vxbte.js": {
+  "/_nuxt/DfJzPSBi.js": {
     "type": "text/javascript; charset=utf-8",
-    "etag": "\"9f1f-lZvm375DqcFM+vOcKc2rvEVowVM\"",
-    "mtime": "2026-09-06T14:46:29.735Z",
-    "size": 40735,
-    "path": "../public/_nuxt/DB5Vxbte.js"
+    "etag": "\"1c1-4bfhhLtFN8RKoheWCeIIphoXgv0\"",
+    "mtime": "2026-09-06T17:42:02.389Z",
+    "size": 449,
+    "path": "../public/_nuxt/DfJzPSBi.js"
   },
-  "/_nuxt/error-404.CHsn7XF-.css": {
+  "/_nuxt/error-404.1qC5mjOI.css": {
     "type": "text/css; charset=utf-8",
-    "etag": "\"97d-2Jv1I5SVRWWiHcs7d0fjdFylhP4\"",
-    "mtime": "2026-09-06T14:46:29.735Z",
+    "etag": "\"97d-ClY1xVMSVUOi3w+npB6k6oGQGlM\"",
+    "mtime": "2026-09-06T17:42:02.389Z",
     "size": 2429,
-    "path": "../public/_nuxt/error-404.CHsn7XF-.css"
+    "path": "../public/_nuxt/error-404.1qC5mjOI.css"
   },
-  "/_nuxt/error-500.Bawx2bLr.css": {
+  "/_nuxt/error-500.BcOmuN7K.css": {
     "type": "text/css; charset=utf-8",
-    "etag": "\"772-1WbEnJKsOodm+94L4M1TNGEMGdA\"",
-    "mtime": "2026-09-06T14:46:29.735Z",
+    "etag": "\"772-O0XjmZiN9Tmmh4xccNArXpeMXMg\"",
+    "mtime": "2026-09-06T17:42:02.390Z",
     "size": 1906,
-    "path": "../public/_nuxt/error-500.Bawx2bLr.css"
+    "path": "../public/_nuxt/error-500.BcOmuN7K.css"
   },
-  "/_nuxt/9C5WUlLE.js": {
+  "/_nuxt/EBA28doP.js": {
     "type": "text/javascript; charset=utf-8",
-    "etag": "\"76057-x5s6sLzHAii+nwAfxpSA3vSHenw\"",
-    "mtime": "2026-09-06T14:46:29.735Z",
-    "size": 483415,
-    "path": "../public/_nuxt/9C5WUlLE.js"
+    "etag": "\"25526-S2M2g51QVQiD0lfERMcQ2TJCNvo\"",
+    "mtime": "2026-09-06T17:42:02.389Z",
+    "size": 152870,
+    "path": "../public/_nuxt/EBA28doP.js"
+  },
+  "/_nuxt/entry.CKteCcdN.css": {
+    "type": "text/css; charset=utf-8",
+    "etag": "\"300c8-0WAu9DRw8xrNZdnpJNGrjxOdjtk\"",
+    "mtime": "2026-09-06T17:42:02.389Z",
+    "size": 196808,
+    "path": "../public/_nuxt/entry.CKteCcdN.css"
+  },
+  "/_nuxt/sK9Xse3o.js": {
+    "type": "text/javascript; charset=utf-8",
+    "etag": "\"16ebc-llACAH/LeVfHtbCyV/Od8ae+rn8\"",
+    "mtime": "2026-09-06T17:42:02.390Z",
+    "size": 93884,
+    "path": "../public/_nuxt/sK9Xse3o.js"
   },
   "/_nuxt/builds/latest.json": {
     "type": "application/json",
-    "etag": "\"47-gnWfjO3atXpuKHcTeevtRdg7IRg\"",
-    "mtime": "2026-09-06T14:46:29.732Z",
+    "etag": "\"47-y/Uibk2CT3wmZ2jWKLpHXHWksOc\"",
+    "mtime": "2026-09-06T17:42:02.382Z",
     "size": 71,
     "path": "../public/_nuxt/builds/latest.json"
   },
-  "/_nuxt/entry.b3_DJTEt.css": {
-    "type": "text/css; charset=utf-8",
-    "etag": "\"2fd30-a1fPhKsI3m5s3WkUz/aQvIKj6Ow\"",
-    "mtime": "2026-09-06T14:46:29.735Z",
-    "size": 195888,
-    "path": "../public/_nuxt/entry.b3_DJTEt.css"
+  "/_nuxt/rWsrwf2L.js": {
+    "type": "text/javascript; charset=utf-8",
+    "etag": "\"7606d-30wm5zPsBwgXACgEnaCLHx2ZHVk\"",
+    "mtime": "2026-09-06T17:42:02.390Z",
+    "size": 483437,
+    "path": "../public/_nuxt/rWsrwf2L.js"
   },
-  "/_nuxt/builds/meta/e0d2b6a3-3a30-44b7-8c79-a56f66400005.json": {
+  "/_nuxt/builds/meta/bc384f67-a2f8-4b6b-9aa1-cb68fb93d366.json": {
     "type": "application/json",
-    "etag": "\"58-/O8b6cy7JVz90KrikBRsiFQaWdI\"",
-    "mtime": "2026-09-06T14:46:29.731Z",
+    "etag": "\"58-t+Qo1Xc7SXVzy2SU0Q6z9Np3At0\"",
+    "mtime": "2026-09-06T17:42:02.343Z",
     "size": 88,
-    "path": "../public/_nuxt/builds/meta/e0d2b6a3-3a30-44b7-8c79-a56f66400005.json"
-  },
-  "/_nuxt/DMg0j7gv.js": {
-    "type": "text/javascript; charset=utf-8",
-    "etag": "\"25529-MrmjBHZKW5MJ6UC+MAR50nTTq7U\"",
-    "mtime": "2026-09-06T14:46:29.735Z",
-    "size": 152873,
-    "path": "../public/_nuxt/DMg0j7gv.js"
+    "path": "../public/_nuxt/builds/meta/bc384f67-a2f8-4b6b-9aa1-cb68fb93d366.json"
   }
 };
 
@@ -4821,7 +4821,7 @@ function getAsset (id) {
 
 const METHODS = /* @__PURE__ */ new Set(["HEAD", "GET"]);
 const EncodingMap = { gzip: ".gz", br: ".br" };
-const _tlswgW = eventHandler((event) => {
+const _WmhSKo = eventHandler((event) => {
   if (event.method && !METHODS.has(event.method)) {
     return;
   }
@@ -4885,14 +4885,14 @@ const _tlswgW = eventHandler((event) => {
   return readAsset(id);
 });
 
-const _v67BtD = defineEventHandler((event) => {
+const _bZ6qrV = defineEventHandler((event) => {
   if (!isAllowedHost(getRequestHeader(event, "host"), expectedPort(process.env))) {
     setResponseStatus(event, 403);
     return { error: "Host not allowed" };
   }
 });
 
-const _5cPz3u = defineEventHandler((event) => {
+const _IXLPhU = defineEventHandler((event) => {
   var _a;
   const method = event.method.toUpperCase();
   if (method === "GET" || method === "HEAD" || method === "OPTIONS") return;
@@ -4915,33 +4915,33 @@ const _5cPz3u = defineEventHandler((event) => {
 
 const _SxA8c9 = defineEventHandler(() => {});
 
-const _lazy_qOPFff = () => import('../routes/api/_..._.mjs');
-const _lazy_Sow6wq = () => import('../routes/api/health.get.mjs');
-const _lazy_iUT6p9 = () => import('../routes/api/skills.get.mjs');
-const _lazy_N1Eb6F = () => import('../routes/api/skills/_id_.get.mjs');
-const _lazy_gDlnHU = () => import('../routes/api/skills/_id_.put.mjs');
-const _lazy_WLPUzg = () => import('../routes/api/skills/_id/file.get.mjs');
-const _lazy_BDJKLn = () => import('../routes/api/skills/delete.post.mjs');
-const _lazy_5j2vs5 = () => import('../routes/api/skills/quarantine.post.mjs');
-const _lazy_p56u7_ = () => import('../routes/api/skills/restore.post.mjs');
-const _lazy_U5uhtF = () => import('../routes/renderer.mjs');
+const _lazy_i3xXvc = () => import('../routes/api/_..._.mjs');
+const _lazy_ODywhX = () => import('../routes/api/health.get.mjs');
+const _lazy_QLBXsz = () => import('../routes/api/skills.get.mjs');
+const _lazy_phqsH7 = () => import('../routes/api/skills/_id_.get.mjs');
+const _lazy_E5xWx6 = () => import('../routes/api/skills/_id_.put.mjs');
+const _lazy_zp4eSy = () => import('../routes/api/skills/_id/file.get.mjs');
+const _lazy_GSqKbk = () => import('../routes/api/skills/delete.post.mjs');
+const _lazy_8aROGo = () => import('../routes/api/skills/quarantine.post.mjs');
+const _lazy_Z7y_Vb = () => import('../routes/api/skills/restore.post.mjs');
+const _lazy_ZyvLhi = () => import('../routes/renderer.mjs');
 
 const handlers = [
-  { route: '', handler: _tlswgW, lazy: false, middleware: true, method: undefined },
-  { route: '', handler: _v67BtD, lazy: false, middleware: true, method: undefined },
-  { route: '', handler: _5cPz3u, lazy: false, middleware: true, method: undefined },
-  { route: '/api/**', handler: _lazy_qOPFff, lazy: true, middleware: false, method: undefined },
-  { route: '/api/health', handler: _lazy_Sow6wq, lazy: true, middleware: false, method: "get" },
-  { route: '/api/skills', handler: _lazy_iUT6p9, lazy: true, middleware: false, method: "get" },
-  { route: '/api/skills/:id', handler: _lazy_N1Eb6F, lazy: true, middleware: false, method: "get" },
-  { route: '/api/skills/:id', handler: _lazy_gDlnHU, lazy: true, middleware: false, method: "put" },
-  { route: '/api/skills/:id/file', handler: _lazy_WLPUzg, lazy: true, middleware: false, method: "get" },
-  { route: '/api/skills/delete', handler: _lazy_BDJKLn, lazy: true, middleware: false, method: "post" },
-  { route: '/api/skills/quarantine', handler: _lazy_5j2vs5, lazy: true, middleware: false, method: "post" },
-  { route: '/api/skills/restore', handler: _lazy_p56u7_, lazy: true, middleware: false, method: "post" },
-  { route: '/__nuxt_error', handler: _lazy_U5uhtF, lazy: true, middleware: false, method: undefined },
+  { route: '', handler: _WmhSKo, lazy: false, middleware: true, method: undefined },
+  { route: '', handler: _bZ6qrV, lazy: false, middleware: true, method: undefined },
+  { route: '', handler: _IXLPhU, lazy: false, middleware: true, method: undefined },
+  { route: '/api/**', handler: _lazy_i3xXvc, lazy: true, middleware: false, method: undefined },
+  { route: '/api/health', handler: _lazy_ODywhX, lazy: true, middleware: false, method: "get" },
+  { route: '/api/skills', handler: _lazy_QLBXsz, lazy: true, middleware: false, method: "get" },
+  { route: '/api/skills/:id', handler: _lazy_phqsH7, lazy: true, middleware: false, method: "get" },
+  { route: '/api/skills/:id', handler: _lazy_E5xWx6, lazy: true, middleware: false, method: "put" },
+  { route: '/api/skills/:id/file', handler: _lazy_zp4eSy, lazy: true, middleware: false, method: "get" },
+  { route: '/api/skills/delete', handler: _lazy_GSqKbk, lazy: true, middleware: false, method: "post" },
+  { route: '/api/skills/quarantine', handler: _lazy_8aROGo, lazy: true, middleware: false, method: "post" },
+  { route: '/api/skills/restore', handler: _lazy_Z7y_Vb, lazy: true, middleware: false, method: "post" },
+  { route: '/__nuxt_error', handler: _lazy_ZyvLhi, lazy: true, middleware: false, method: undefined },
   { route: '/__nuxt_island/**', handler: _SxA8c9, lazy: false, middleware: false, method: undefined },
-  { route: '/**', handler: _lazy_U5uhtF, lazy: true, middleware: false, method: undefined }
+  { route: '/**', handler: _lazy_ZyvLhi, lazy: true, middleware: false, method: undefined }
 ];
 
 function createNitroApp() {

package/.output/server/chunks/routes/renderer.mjs

@@ -185,7 +185,7 @@ function encodeForwardSlashes(str) {
 
 const renderSSRHeadOptions = {"omitLineBreaks":true};
 
-const entryFileName = "9C5WUlLE.js";
+const entryFileName = "rWsrwf2L.js";
 
 //#region src/runtime/handlers/renderer.ts
 globalThis.__buildAssetsURL = buildAssetsURL;

package/.output/server/chunks/virtual/precomputed.mjs

@@ -1,3 +1,3 @@
-const client_precomputed = ((h,j,k,m,o,q,u,x,z,A)=>({dependencies:{"_C_VgD9ZI.js":{scripts:{},styles:{},preload:{"_C_VgD9ZI.js":h={resourceType:"script",module:true,prefetch:true,preload:true,file:"C_VgD9ZI.js",name:"nuxt"}},prefetch:{}},"_BW3xJdEx.js":{scripts:{},styles:{},preload:{"_BW3xJdEx.js":j={resourceType:"script",module:true,prefetch:true,preload:true,file:"BW3xJdEx.js",name:"defu"}},prefetch:{}},"_DB5Vxbte.js":{scripts:{},styles:{},preload:{"_DB5Vxbte.js":k={resourceType:"script",module:true,prefetch:true,preload:true,file:"DB5Vxbte.js",name:"ready",imports:["_C_VgD9ZI.js","_BW3xJdEx.js"]},"_C_VgD9ZI.js":h,"_BW3xJdEx.js":j},prefetch:{}},"_BXXtFil5.js":{scripts:{},styles:{},preload:{"_BXXtFil5.js":m={resourceType:"script",module:true,prefetch:true,preload:true,file:"BXXtFil5.js",name:"config",imports:["_C_VgD9ZI.js","_BW3xJdEx.js"]},"_C_VgD9ZI.js":h,"_BW3xJdEx.js":j},prefetch:{}},"../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_7873c345affe15219d14831c3a4018df/node_modules/nuxt/dist/app/entry.js":{scripts:{"../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_7873c345affe15219d14831c3a4018df/node_modules/nuxt/dist/app/entry.js":q={resourceType:"script",module:true,prefetch:true,preload:true,file:"9C5WUlLE.js",name:"entry",src:"../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_7873c345affe15219d14831c3a4018df/node_modules/nuxt/dist/app/entry.js",isEntry:true,imports:["_C_VgD9ZI.js","_DB5Vxbte.js","_BW3xJdEx.js","_BXXtFil5.js"],dynamicImports:o=["../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_7873c345affe15219d14831c3a4018df/node_modules/nuxt/dist/app/entry.js","../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_7873c345affe15219d14831c3a4018df/node_modules/nuxt/dist/app/components/error-404.vue","../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_7873c345affe15219d14831c3a4018df/node_modules/nuxt/dist/app/components/error-500.vue"],css:["entry.b3_DJTEt.css"]}},styles:{"entry.b3_DJTEt.css":u={file:"entry.b3_DJTEt.css",resourceType:"style",prefetch:true,preload:true}},preload:{"../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_7873c345affe15219d14831c3a4018df/node_modules/nuxt/dist/app/entry.js":q,"entry.b3_DJTEt.css":u,"_C_VgD9ZI.js":h,"_DB5Vxbte.js":k,"_BW3xJdEx.js":j,"_BXXtFil5.js":m},prefetch:{"entry.b3_DJTEt.css":u}},"_BDNMzG2s.js":{scripts:{},styles:{},preload:{"_BDNMzG2s.js":x={resourceType:"script",module:true,prefetch:true,preload:true,file:"BDNMzG2s.js",name:"_plugin-vue_export-helper"}},prefetch:{}},"../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_7873c345affe15219d14831c3a4018df/node_modules/nuxt/dist/app/components/error-404.vue":{scripts:{},styles:{"error-404.CHsn7XF-.css":z={file:"error-404.CHsn7XF-.css",resourceType:"style",prefetch:true,preload:true},"entry.b3_DJTEt.css":u},preload:{"../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_7873c345affe15219d14831c3a4018df/node_modules/nuxt/dist/app/components/error-404.vue":{resourceType:"script",module:true,prefetch:true,preload:true,file:"6IstVYrV.js",name:"error-404",src:"../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_7873c345affe15219d14831c3a4018df/node_modules/nuxt/dist/app/components/error-404.vue",isDynamicEntry:true,imports:["_C_VgD9ZI.js","../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_7873c345affe15219d14831c3a4018df/node_modules/nuxt/dist/app/entry.js","_BDNMzG2s.js"],css:["error-404.CHsn7XF-.css"]},"error-404.CHsn7XF-.css":z,"_C_VgD9ZI.js":h,"../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_7873c345affe15219d14831c3a4018df/node_modules/nuxt/dist/app/entry.js":q,"entry.b3_DJTEt.css":u,"_DB5Vxbte.js":k,"_BW3xJdEx.js":j,"_BXXtFil5.js":m,"_BDNMzG2s.js":x},prefetch:{"error-404.CHsn7XF-.css":z,"entry.b3_DJTEt.css":u}},"error-404.CHsn7XF-.css":{scripts:{},styles:{},preload:{"error-404.CHsn7XF-.css":z},prefetch:{}},"../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_7873c345affe15219d14831c3a4018df/node_modules/nuxt/dist/app/components/error-500.vue":{scripts:{},styles:{"error-500.Bawx2bLr.css":A={file:"error-500.Bawx2bLr.css",resourceType:"style",prefetch:true,preload:true},"entry.b3_DJTEt.css":u},preload:{"../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_7873c345affe15219d14831c3a4018df/node_modules/nuxt/dist/app/components/error-500.vue":{resourceType:"script",module:true,prefetch:true,preload:true,file:"BZuUK3cr.js",name:"error-500",src:"../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_7873c345affe15219d14831c3a4018df/node_modules/nuxt/dist/app/components/error-500.vue",isDynamicEntry:true,imports:["_C_VgD9ZI.js","../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_7873c345affe15219d14831c3a4018df/node_modules/nuxt/dist/app/entry.js","_BDNMzG2s.js"],css:["error-500.Bawx2bLr.css"]},"error-500.Bawx2bLr.css":A,"_C_VgD9ZI.js":h,"../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_7873c345affe15219d14831c3a4018df/node_modules/nuxt/dist/app/entry.js":q,"entry.b3_DJTEt.css":u,"_DB5Vxbte.js":k,"_BW3xJdEx.js":j,"_BXXtFil5.js":m,"_BDNMzG2s.js":x},prefetch:{"error-500.Bawx2bLr.css":A,"entry.b3_DJTEt.css":u}},"error-500.Bawx2bLr.css":{scripts:{},styles:{},preload:{"error-500.Bawx2bLr.css":A},prefetch:{}},"entry.b3_DJTEt.css":{scripts:{},styles:{},preload:{"entry.b3_DJTEt.css":u},prefetch:{}},"pages/index.vue":{scripts:{},styles:{"entry.b3_DJTEt.css":u},preload:{"pages/index.vue":{resourceType:"script",module:true,prefetch:true,preload:true,file:"BeLyMmd4.js",name:"pages",src:"pages/index.vue",isDynamicEntry:true,imports:["_C_VgD9ZI.js","../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_7873c345affe15219d14831c3a4018df/node_modules/nuxt/dist/app/entry.js","_BDNMzG2s.js"]},"_C_VgD9ZI.js":h,"../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_7873c345affe15219d14831c3a4018df/node_modules/nuxt/dist/app/entry.js":q,"entry.b3_DJTEt.css":u,"_DB5Vxbte.js":k,"_BW3xJdEx.js":j,"_BXXtFil5.js":m,"_BDNMzG2s.js":x},prefetch:{"entry.b3_DJTEt.css":u}},"pages/skills/[id].vue":{scripts:{},styles:{"entry.b3_DJTEt.css":u},preload:{"pages/skills/[id].vue":{resourceType:"script",module:true,prefetch:true,preload:true,file:"DMg0j7gv.js",name:"_id_",src:"pages/skills/[id].vue",isDynamicEntry:true,imports:["_C_VgD9ZI.js","_DB5Vxbte.js","_BXXtFil5.js","../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_7873c345affe15219d14831c3a4018df/node_modules/nuxt/dist/app/entry.js"]},"_C_VgD9ZI.js":h,"_DB5Vxbte.js":k,"_BW3xJdEx.js":j,"_BXXtFil5.js":m,"../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_7873c345affe15219d14831c3a4018df/node_modules/nuxt/dist/app/entry.js":q,"entry.b3_DJTEt.css":u},prefetch:{"entry.b3_DJTEt.css":u}}},entrypoints:["../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_7873c345affe15219d14831c3a4018df/node_modules/nuxt/dist/app/entry.js"],modules:{"../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_7873c345affe15219d14831c3a4018df/node_modules/nuxt/dist/app/components/error-404.vue":{file:"6IstVYrV.js",resourceType:"script",mimeType:void 0,module:true},"error-404.CHsn7XF-.css":{file:"error-404.CHsn7XF-.css",resourceType:"style",mimeType:void 0,module:void 0},"../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_7873c345affe15219d14831c3a4018df/node_modules/nuxt/dist/app/components/error-500.vue":{file:"BZuUK3cr.js",resourceType:"script",mimeType:void 0,module:true},"error-500.Bawx2bLr.css":{file:"error-500.Bawx2bLr.css",resourceType:"style",mimeType:void 0,module:void 0},"../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_7873c345affe15219d14831c3a4018df/node_modules/nuxt/dist/app/entry.js":{file:"9C5WUlLE.js",resourceType:"script",mimeType:void 0,module:true,dynamicImports:o},"entry.b3_DJTEt.css":{file:"entry.b3_DJTEt.css",resourceType:"style",mimeType:void 0,module:void 0},"_BDNMzG2s.js":{file:"BDNMzG2s.js",resourceType:"script",mimeType:void 0,module:true},"_BW3xJdEx.js":{file:"BW3xJdEx.js",resourceType:"script",mimeType:void 0,module:true},"_BXXtFil5.js":{file:"BXXtFil5.js",resourceType:"script",mimeType:void 0,module:true},"_C_VgD9ZI.js":{file:"C_VgD9ZI.js",resourceType:"script",mimeType:void 0,module:true},"_DB5Vxbte.js":{file:"DB5Vxbte.js",resourceType:"script",mimeType:void 0,module:true},"pages/index.vue":{file:"BeLyMmd4.js",resourceType:"script",mimeType:void 0,module:true},"pages/skills/[id].vue":{file:"DMg0j7gv.js",resourceType:"script",mimeType:void 0,module:true}}}))();
+const client_precomputed = ((h,j,k,m,o,q,u,x,z,A)=>({dependencies:{"_sK9Xse3o.js":{scripts:{},styles:{},preload:{"_sK9Xse3o.js":h={resourceType:"script",module:true,prefetch:true,preload:true,file:"sK9Xse3o.js",name:"nuxt"}},prefetch:{}},"_BW3xJdEx.js":{scripts:{},styles:{},preload:{"_BW3xJdEx.js":j={resourceType:"script",module:true,prefetch:true,preload:true,file:"BW3xJdEx.js",name:"defu"}},prefetch:{}},"_DJQqUjJu.js":{scripts:{},styles:{},preload:{"_DJQqUjJu.js":k={resourceType:"script",module:true,prefetch:true,preload:true,file:"DJQqUjJu.js",name:"ready",imports:["_sK9Xse3o.js","_BW3xJdEx.js"]},"_sK9Xse3o.js":h,"_BW3xJdEx.js":j},prefetch:{}},"_CMk5jOCS.js":{scripts:{},styles:{},preload:{"_CMk5jOCS.js":m={resourceType:"script",module:true,prefetch:true,preload:true,file:"CMk5jOCS.js",name:"config",imports:["_sK9Xse3o.js","_BW3xJdEx.js"]},"_sK9Xse3o.js":h,"_BW3xJdEx.js":j},prefetch:{}},"../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_fa55ea51c020cff6ad35d86710859083/node_modules/nuxt/dist/app/entry.js":{scripts:{"../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_fa55ea51c020cff6ad35d86710859083/node_modules/nuxt/dist/app/entry.js":q={resourceType:"script",module:true,prefetch:true,preload:true,file:"rWsrwf2L.js",name:"entry",src:"../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_fa55ea51c020cff6ad35d86710859083/node_modules/nuxt/dist/app/entry.js",isEntry:true,imports:["_sK9Xse3o.js","_DJQqUjJu.js","_BW3xJdEx.js","_CMk5jOCS.js"],dynamicImports:o=["../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_fa55ea51c020cff6ad35d86710859083/node_modules/nuxt/dist/app/entry.js","../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_fa55ea51c020cff6ad35d86710859083/node_modules/nuxt/dist/app/components/error-404.vue","../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_fa55ea51c020cff6ad35d86710859083/node_modules/nuxt/dist/app/components/error-500.vue"],css:["entry.CKteCcdN.css"]}},styles:{"entry.CKteCcdN.css":u={file:"entry.CKteCcdN.css",resourceType:"style",prefetch:true,preload:true}},preload:{"../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_fa55ea51c020cff6ad35d86710859083/node_modules/nuxt/dist/app/entry.js":q,"entry.CKteCcdN.css":u,"_sK9Xse3o.js":h,"_DJQqUjJu.js":k,"_BW3xJdEx.js":j,"_CMk5jOCS.js":m},prefetch:{"entry.CKteCcdN.css":u}},"_BDNMzG2s.js":{scripts:{},styles:{},preload:{"_BDNMzG2s.js":x={resourceType:"script",module:true,prefetch:true,preload:true,file:"BDNMzG2s.js",name:"_plugin-vue_export-helper"}},prefetch:{}},"../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_fa55ea51c020cff6ad35d86710859083/node_modules/nuxt/dist/app/components/error-404.vue":{scripts:{},styles:{"error-404.1qC5mjOI.css":z={file:"error-404.1qC5mjOI.css",resourceType:"style",prefetch:true,preload:true},"entry.CKteCcdN.css":u},preload:{"../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_fa55ea51c020cff6ad35d86710859083/node_modules/nuxt/dist/app/components/error-404.vue":{resourceType:"script",module:true,prefetch:true,preload:true,file:"CJmYvhe6.js",name:"error-404",src:"../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_fa55ea51c020cff6ad35d86710859083/node_modules/nuxt/dist/app/components/error-404.vue",isDynamicEntry:true,imports:["_sK9Xse3o.js","../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_fa55ea51c020cff6ad35d86710859083/node_modules/nuxt/dist/app/entry.js","_BDNMzG2s.js"],css:["error-404.1qC5mjOI.css"]},"error-404.1qC5mjOI.css":z,"_sK9Xse3o.js":h,"../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_fa55ea51c020cff6ad35d86710859083/node_modules/nuxt/dist/app/entry.js":q,"entry.CKteCcdN.css":u,"_DJQqUjJu.js":k,"_BW3xJdEx.js":j,"_CMk5jOCS.js":m,"_BDNMzG2s.js":x},prefetch:{"error-404.1qC5mjOI.css":z,"entry.CKteCcdN.css":u}},"error-404.1qC5mjOI.css":{scripts:{},styles:{},preload:{"error-404.1qC5mjOI.css":z},prefetch:{}},"../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_fa55ea51c020cff6ad35d86710859083/node_modules/nuxt/dist/app/components/error-500.vue":{scripts:{},styles:{"error-500.BcOmuN7K.css":A={file:"error-500.BcOmuN7K.css",resourceType:"style",prefetch:true,preload:true},"entry.CKteCcdN.css":u},preload:{"../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_fa55ea51c020cff6ad35d86710859083/node_modules/nuxt/dist/app/components/error-500.vue":{resourceType:"script",module:true,prefetch:true,preload:true,file:"Bzmuhhqm.js",name:"error-500",src:"../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_fa55ea51c020cff6ad35d86710859083/node_modules/nuxt/dist/app/components/error-500.vue",isDynamicEntry:true,imports:["_sK9Xse3o.js","../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_fa55ea51c020cff6ad35d86710859083/node_modules/nuxt/dist/app/entry.js","_BDNMzG2s.js"],css:["error-500.BcOmuN7K.css"]},"error-500.BcOmuN7K.css":A,"_sK9Xse3o.js":h,"../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_fa55ea51c020cff6ad35d86710859083/node_modules/nuxt/dist/app/entry.js":q,"entry.CKteCcdN.css":u,"_DJQqUjJu.js":k,"_BW3xJdEx.js":j,"_CMk5jOCS.js":m,"_BDNMzG2s.js":x},prefetch:{"error-500.BcOmuN7K.css":A,"entry.CKteCcdN.css":u}},"error-500.BcOmuN7K.css":{scripts:{},styles:{},preload:{"error-500.BcOmuN7K.css":A},prefetch:{}},"entry.CKteCcdN.css":{scripts:{},styles:{},preload:{"entry.CKteCcdN.css":u},prefetch:{}},"pages/index.vue":{scripts:{},styles:{"entry.CKteCcdN.css":u},preload:{"pages/index.vue":{resourceType:"script",module:true,prefetch:true,preload:true,file:"DfJzPSBi.js",name:"pages",src:"pages/index.vue",isDynamicEntry:true,imports:["_sK9Xse3o.js","../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_fa55ea51c020cff6ad35d86710859083/node_modules/nuxt/dist/app/entry.js","_BDNMzG2s.js"]},"_sK9Xse3o.js":h,"../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_fa55ea51c020cff6ad35d86710859083/node_modules/nuxt/dist/app/entry.js":q,"entry.CKteCcdN.css":u,"_DJQqUjJu.js":k,"_BW3xJdEx.js":j,"_CMk5jOCS.js":m,"_BDNMzG2s.js":x},prefetch:{"entry.CKteCcdN.css":u}},"pages/skills/[id].vue":{scripts:{},styles:{"entry.CKteCcdN.css":u},preload:{"pages/skills/[id].vue":{resourceType:"script",module:true,prefetch:true,preload:true,file:"EBA28doP.js",name:"_id_",src:"pages/skills/[id].vue",isDynamicEntry:true,imports:["_sK9Xse3o.js","_DJQqUjJu.js","_CMk5jOCS.js","../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_fa55ea51c020cff6ad35d86710859083/node_modules/nuxt/dist/app/entry.js"]},"_sK9Xse3o.js":h,"_DJQqUjJu.js":k,"_BW3xJdEx.js":j,"_CMk5jOCS.js":m,"../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_fa55ea51c020cff6ad35d86710859083/node_modules/nuxt/dist/app/entry.js":q,"entry.CKteCcdN.css":u},prefetch:{"entry.CKteCcdN.css":u}}},entrypoints:["../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_fa55ea51c020cff6ad35d86710859083/node_modules/nuxt/dist/app/entry.js"],modules:{"../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_fa55ea51c020cff6ad35d86710859083/node_modules/nuxt/dist/app/components/error-404.vue":{file:"CJmYvhe6.js",resourceType:"script",mimeType:void 0,module:true},"error-404.1qC5mjOI.css":{file:"error-404.1qC5mjOI.css",resourceType:"style",mimeType:void 0,module:void 0},"../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_fa55ea51c020cff6ad35d86710859083/node_modules/nuxt/dist/app/components/error-500.vue":{file:"Bzmuhhqm.js",resourceType:"script",mimeType:void 0,module:true},"error-500.BcOmuN7K.css":{file:"error-500.BcOmuN7K.css",resourceType:"style",mimeType:void 0,module:void 0},"../node_modules/.pnpm/nuxt@4.5.2_@babel+plugin-syntax-jsx@7.29.7_@babel+core@7.29.7__@babel+plugin-syntax-typ_fa55ea51c020cff6ad35d86710859083/node_modules/nuxt/dist/app/entry.js":{file:"rWsrwf2L.js",resourceType:"script",mimeType:void 0,module:true,dynamicImports:o},"entry.CKteCcdN.css":{file:"entry.CKteCcdN.css",resourceType:"style",mimeType:void 0,module:void 0},"_BDNMzG2s.js":{file:"BDNMzG2s.js",resourceType:"script",mimeType:void 0,module:true},"_BW3xJdEx.js":{file:"BW3xJdEx.js",resourceType:"script",mimeType:void 0,module:true},"_CMk5jOCS.js":{file:"CMk5jOCS.js",resourceType:"script",mimeType:void 0,module:true},"_DJQqUjJu.js":{file:"DJQqUjJu.js",resourceType:"script",mimeType:void 0,module:true},"_sK9Xse3o.js":{file:"sK9Xse3o.js",resourceType:"script",mimeType:void 0,module:true},"pages/index.vue":{file:"DfJzPSBi.js",resourceType:"script",mimeType:void 0,module:true},"pages/skills/[id].vue":{file:"EBA28doP.js",resourceType:"script",mimeType:void 0,module:true}}}))();
 
 export { client_precomputed as default };

package/.output/server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shelfware-prod",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "type": "module",
   "private": true,
   "dependencies": {

package/README.md

@@ -42,6 +42,16 @@ Skills outside your home directory (project-level `.claude/skills` inside a repo
 - No CORS headers, ever. File reads and saves are contained to the skill's directory; symlinks are never followed for destructive actions.
 - Nothing leaves the machine. There is no network feature.
 
+## Security scanners
+
+Supply-chain scanners such as Socket.dev raise a few alerts on this package. None of them is shelfware's own code; all come from the prebuilt Nuxt server that ships in `.output/`:
+
+- **"Obfuscated code"** in `entities/…/decode-data-html.js`: the HTML entity table of the `entities` library, stored as Base64 and decoded into a `Uint16Array` at load time. Byte-identical to the published `entities` package.
+- **"Dynamic code execution"** in `source-map-js` and the Vue compiler: `new Function` used by a sort routine and by Vue's template compiler. shelfware never compiles templates at runtime (`ssr: false`, no runtime compiler).
+- **"URL strings"**: the Iconify API hosts baked into `@nuxt/icon` (the provider is disabled and every icon is bundled), XML namespaces, documentation links in framework error messages, and file names such as `SKILL.md` that merely contain a dot.
+
+The launcher itself uses only Node built-ins, binds `127.0.0.1`, spawns nothing but your browser opener, and has no `preinstall`/`install`/`postinstall` scripts. `pnpm pack:verify` packs and runs the exact tarball through `npx` before every release, refusing to run against a stale build, and releases are published from GitHub Actions with npm provenance.
+
 ## Credits
 
 Scanner rules, audit heuristics and the quarantine format are ported from [skill-cabinet](https://github.com/subsy/skill-cabinet) (MIT), whose audit rules were adapted from [Adaptive Skills](https://github.com/wangsoft/Adaptive-Skills) (MIT). shelfware is a rebuild in Nuxt 4 with an editor and a hardened local security model.

package/bin/launch.d.mts

@@ -0,0 +1,54 @@
+// Types for bin/launch.mjs. Hand-written: keep every export here in step with the .mjs.
+
+export const DEFAULT_PORT: 3781
+export const PORT_ATTEMPTS: 20
+export const HOST: '127.0.0.1'
+export const TOKEN_ENV: 'NUXT_PUBLIC_SHELFWARE_TOKEN'
+export const HELP: string
+
+export type Env = Record<string, string | undefined>
+
+export interface ParsedArgs {
+  help: boolean
+  port: number | null
+  open: boolean
+}
+
+/** The subset of child_process.spawn the launcher relies on, so tests can pass a stub. */
+export type SpawnLike = (
+  cmd: string,
+  args: string[],
+  options: { stdio: 'ignore', detached: true, env: Env },
+) => { unref?: () => void, on?: (event: 'error', listener: (err: Error) => unknown) => unknown }
+
+export interface LaunchOptions {
+  argv?: string[]
+  env?: Env
+  importServer: () => Promise<unknown>
+  log?: (line: string) => void
+  exit?: (code: number) => unknown
+  entry?: string
+  spawn?: SpawnLike
+}
+
+export function makeToken(): string
+export function parseArgs(argv?: string[], env?: Env): ParsedArgs
+export function portReason(code: string): string
+export function checkPort(port: number, host?: string): Promise<string | null>
+export function isPortFree(port: number, host?: string): Promise<boolean>
+export function pickPort(start?: number, options?: { attempts?: number, host?: string }): Promise<number>
+export function probeHealth(port: number, host?: string): Promise<boolean>
+export function waitForHealth(
+  port: number,
+  options?: {
+    timeoutMs?: number
+    intervalMs?: number
+    host?: string
+    probe?: (port: number, host: string) => Promise<boolean>
+    signal?: AbortSignal
+  },
+): Promise<boolean>
+export function openBrowser(url: string, options?: { platform?: string, spawn?: SpawnLike, env?: Env }): { cmd: string, args: string[] }
+export function serverEntry(binDir?: string): string
+export function describeError(err: unknown): string
+export function launch(options: LaunchOptions): Promise<{ port: number, url: string } | null>

package/bin/launch.mjs

@@ -11,6 +11,9 @@ export const DEFAULT_PORT = 3781
 export const PORT_ATTEMPTS = 20
 export const HOST = '127.0.0.1'
 
+/** Spec §10.3: the env var the server reads the session token from. */
+export const TOKEN_ENV = 'NUXT_PUBLIC_SHELFWARE_TOKEN'
+
 export const HELP = `shelfware — a local catalog of the AI-agent skills on this machine
 
 Usage: shelfware [--port <n>] [--no-open] [--help]
@@ -28,22 +31,27 @@ export function makeToken() {
 
 /**
  * The raw text stays in the message so `--port abc` reads back as "abc", not NaN.
- * Digits only: `Number()` would otherwise accept `0x10`, `1e3` and `' 4000 '`,
- * none of which the help text (`--port <n>`) promises.
+ * Decimal digits without a leading zero: `Number()` would otherwise accept `0x10`,
+ * `1e3`, `' 4000 '` and `065535`, none of which the help text (`--port <n>`) promises.
  */
 function parsePort(raw) {
-  if (!/^\d+$/.test(raw)) throw new Error(`Invalid port: ${JSON.stringify(raw)}`)
+  if (!/^[1-9]\d*$/.test(raw)) throw new Error(`Invalid port: ${JSON.stringify(raw)}`)
   const port = Number(raw)
-  if (port < 1 || port > 65535) throw new Error(`Invalid port: ${JSON.stringify(raw)}`)
+  if (port > 65535) throw new Error(`Invalid port: ${JSON.stringify(raw)}`)
   return port
 }
 
 export function parseArgs(argv = [], env = {}) {
   let port = null
   let open = env.SHELFWARE_NO_OPEN !== '1'
+  let optionsEnded = false
   for (let i = 0; i < argv.length; i += 1) {
     const arg = argv[i]
-    if (arg === '--no-open') {
+    if (optionsEnded || !arg.startsWith('-')) {
+      throw new Error(`Unexpected argument: ${arg}`)
+    } else if (arg === '--') {
+      optionsEnded = true
+    } else if (arg === '--no-open') {
       open = false
     } else if (arg === '--port') {
       if (i + 1 >= argv.length) throw new Error('--port needs a value')
@@ -57,19 +65,32 @@ export function parseArgs(argv = [], env = {}) {
       throw new Error(`Unknown option: ${arg}`)
     }
   }
-  if (port === null && env.PORT) port = parsePort(env.PORT)
+  // Unset or empty means unset; anything else must be a real port.
+  if (port === null && env.PORT !== undefined && env.PORT !== '') port = parsePort(env.PORT)
   return { help: false, port, open }
 }
 
-export function isPortFree(port, host = HOST) {
+/** Why `port` cannot be bound, in words a user can act on. */
+export function portReason(code) {
+  if (code === 'EADDRINUSE') return 'is already in use'
+  if (code === 'EACCES') return 'needs elevated privileges (EACCES)'
+  return `cannot be bound (${code})`
+}
+
+/** Resolves null when `port` can be bound on `host`, otherwise the reason (see `portReason`). */
+export function checkPort(port, host = HOST) {
   return new Promise((resolve) => {
     const server = net.createServer()
     server.unref()
-    server.once('error', () => resolve(false))
-    server.listen({ port, host }, () => server.close(() => resolve(true)))
+    server.once('error', err => resolve(portReason(err.code ?? 'UNKNOWN')))
+    server.listen({ port, host }, () => server.close(() => resolve(null)))
   })
 }
 
+export async function isPortFree(port, host = HOST) {
+  return (await checkPort(port, host)) === null
+}
+
 export async function pickPort(start = DEFAULT_PORT, { attempts = PORT_ATTEMPTS, host = HOST } = {}) {
   for (let port = start; port < start + attempts; port += 1) {
     if (await isPortFree(port, host)) return port
@@ -132,7 +153,7 @@ export function openBrowser(url, { platform = process.platform, spawn = spawnPro
   const args = platform === 'win32' ? ['/c', 'start', '', url] : [url]
   // The opener execs the browser; strip the session token so it never sits in the
   // browser's environment (the served page is the only place it belongs).
-  const { NUXT_PUBLIC_SHELFWARE_TOKEN: _token, ...childEnv } = env
+  const { [TOKEN_ENV]: _token, ...childEnv } = env
   // A missing browser opener (e.g. no xdg-open on a headless box) must never take
   // the running server down with it: spawn can throw synchronously (rare) or emit
   // an async 'error' (the common ENOENT case), and an unhandled 'error' on an
@@ -151,6 +172,11 @@ export function serverEntry(binDir = path.dirname(fileURLToPath(import.meta.url)
   return path.resolve(binDir, '..', '.output', 'server', 'index.mjs')
 }
 
+/** One line for the user whatever was thrown: Error, string, or nothing at all. */
+export function describeError(err) {
+  return err instanceof Error ? err.message : String(err)
+}
+
 /**
  * Orchestration with injectable I/O so it can be unit-tested end to end:
  * flags → port → env → import the prebuilt server → wait for health → open.
@@ -168,7 +194,7 @@ export async function launch({
   try {
     args = parseArgs(argv, env)
   } catch (err) {
-    log(`shelfware: ${err.message}`)
+    log(`shelfware: ${describeError(err)}`)
     log(HELP)
     exit(1)
     return null
@@ -182,10 +208,13 @@ export async function launch({
     exit(1)
     return null
   }
-  if (args.port !== null && !(await isPortFree(args.port))) {
-    log(`shelfware: port ${args.port} is already in use on ${HOST}; pick another with --port`)
-    exit(1)
-    return null
+  if (args.port !== null) {
+    const problem = await checkPort(args.port)
+    if (problem) {
+      log(`shelfware: port ${args.port} ${problem} on ${HOST}; pick another (--port or PORT)`)
+      exit(1)
+      return null
+    }
   }
   // Both of these can fail for reasons the user can act on — every port in the
   // range is taken, or the server throws at import (a Nitro crash, or an
@@ -194,13 +223,13 @@ export async function launch({
   let port
   try {
     port = args.port ?? await pickPort(DEFAULT_PORT)
-    env.NUXT_PUBLIC_SHELFWARE_TOKEN = makeToken()
+    env[TOKEN_ENV] = makeToken()
     env.NITRO_HOST = HOST
     env.NITRO_PORT = String(port)
     env.NODE_ENV = 'production'
     await importServer()
   } catch (err) {
-    log(`shelfware: ${err.message}`)
+    log(`shelfware: ${describeError(err)}`)
     exit(1)
     return null
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shelfware",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "shelfware finds the shelfware in your skill drawers.",
   "keywords": [
     "skills",
@@ -37,7 +37,7 @@
     "dev": "nuxt dev",
     "build": "nuxt build",
     "prepare": "nuxt prepare",
-    "typecheck": "nuxt typecheck",
+    "typecheck": "nuxt typecheck && tsc -p tsconfig.unit.json",
     "test": "vitest run",
     "test:unit": "vitest run --project unit --passWithNoTests",
     "test:nuxt": "vitest run --project nuxt --passWithNoTests",
@@ -51,6 +51,7 @@
     "@nuxt/test-utils": "^4.2.0",
     "@nuxt/ui": "^4.11.0",
     "@types/markdown-it": "^14.2.0",
+    "@types/node": "^20.19.43",
     "@vue/test-utils": "^2.5.0",
     "@vueuse/core": "^14.4.0",
     "happy-dom": "^20.14.0",
@@ -63,6 +64,9 @@
     "yaml": "^2.9.0"
   },
   "pnpm": {
-    "onlyBuiltDependencies": ["esbuild", "vue-demi"]
+    "onlyBuiltDependencies": [
+      "esbuild",
+      "vue-demi"
+    ]
   }
 }