skillcask 0.9.0 → 0.9.2

package/README.md

@@ -296,7 +296,7 @@ Every command except `publish`, `validate` and `projects` takes `-g, --global`.
 | `publish --vendor v --base-url URL --out DIR [--inline] [--dist-url TPL] [paths…]` | Build a static Composer repository from a monorepo. |
 | `validate [paths…]` | Check `SKILL.md` files against the Agent Skills spec, see below. |
 | `projects [dirs…]` | Directories that hold `skills.toml` under the given ones (default: the current one), up to 6 levels down; hidden directories, `node_modules`, `vendor`, `target` and `Library` are skipped. |
-| `ui` | A terminal UI over the commands above: skills with their state and updates, `info`, SKILL.md and `audit` per skill, add, adopt, update (diff first), remove, doctor, a filter of the list, search of the registries (and skills.sh, asked once), the repositories in use (`R`) and a projects picker; `g` switches between the project and `--global`. |
+| `ui` | A terminal UI over the commands above: skills with their state and updates, `info`, SKILL.md and `audit` per skill, add, adopt (also offered when an add hits a skill skillcask does not manage), update (diff first), remove, doctor, a filter of the list, search of the registries (and skills.sh, asked once), the repositories in use (`R`) and a projects picker; `g` switches between the project and `--global`. |
 | `<other>` | Runs `skillcask-<other>` from `PATH`, like git and cargo plugins. |
 
 `status`, `outdated`, `info`, `search`, `doctor`, `audit` and `projects` take `--json`: one JSON document on one line of
@@ -404,7 +404,10 @@ GitHub allows 60 anonymous API requests per hour. `add`, `update` and `outdated`
 entry; `install` from the lock uses none, it downloads the pinned archive. Set `GITHUB_TOKEN`
 (GitHub Actions has one) or Composer's `"github-oauth": {"github.com": "<token>"}` in `auth.json`
 for a higher limit and for private repositories. `SKILLCASK_GITHUB_API` points at GitHub
-Enterprise (`https://ghe.example.com/api/v3`).
+Enterprise (`https://ghe.example.com/api/v3`). `GITHUB_TOKEN` is sent only to the API the user or
+the runner names: `SKILLCASK_GITHUB_API`, else GitHub Actions' `GITHUB_API_URL`, else
+`api.github.com`; for an Enterprise URL set only in `skills.toml`, use
+`skillcask auth set ghe.example.com --username oauth2` or `github-oauth` in `auth.json`.
 
 skills.sh itself is not queried: its API is undocumented and may change without notice. Search
 on the website, then add what you picked.

package/npm-shrinkwrap.json

@@ -19,7 +19,7 @@
       "hasInstallScript": true,
       "license": "MIT OR Apache-2.0",
       "name": "skillcask",
-      "version": "0.9.0"
+      "version": "0.9.2"
     },
     "node_modules/detect-libc": {
       "engines": {
@@ -48,5 +48,5 @@
     }
   },
   "requires": true,
-  "version": "0.9.0"
+  "version": "0.9.2"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "artifactDownloadUrls": [
-    "https://github.com/puniserv/skillcask/releases/download/v0.9.0"
+    "https://github.com/puniserv/skillcask/releases/download/v0.9.2"
   ],
   "bin": {
     "skillcask": "run-skillcask.js"
@@ -104,7 +104,7 @@
       "zipExt": ".tar.xz"
     }
   },
-  "version": "0.9.0",
+  "version": "0.9.2",
   "volta": {
     "node": "18.14.1",
     "npm": "9.5.0"