skilld 1.5.5 → 1.7.0

package/README.md

@@ -1,8 +1,8 @@
-<h1>skilld</h1>
+<h1><a href="https://skilld.dev"><img src=".github/logos/logo-mark.svg" alt="" width="28" height="28" valign="middle"></a> skilld</h1>
 
 [![npm version](https://img.shields.io/npm/v/skilld?color=yellow)](https://npmjs.com/package/skilld)
 [![npm downloads](https://img.shields.io/npm/dm/skilld?color=yellow)](https://npm.chart.dev/skilld)
-[![license](https://img.shields.io/npm/l/skilld?color=yellow)](https://github.com/harlan-zw/skilld/blob/main/LICENSE)
+[![license](https://img.shields.io/npm/l/skilld?color=yellow)](https://github.com/skilld-dev/skilld/blob/main/LICENSE)
 
 > Generate AI agent skills from your NPM dependencies.
 
@@ -51,7 +51,7 @@ __Requires Node 22.6.0 or higher.__
 Or add a specific package directly:
 
 ```bash
-npx -y skilld add vue
+npx -y skilld add npm:vue
 ```
 
 If you need to re-configure skilld, just run `npx -y skilld config` to update your agent, model, or preferences.
@@ -59,10 +59,10 @@ If you need to re-configure skilld, just run `npx -y skilld config` to update yo
 **No agent CLI?** No problem - choose "No agent" when prompted. You get a base skill immediately, plus portable prompts you can run in any LLM:
 
 ```bash
-npx -y skilld add vue
+npx -y skilld add npm:vue
 # Choose "No agent" -> base skill + prompts exported
 # Paste prompts into ChatGPT/Claude web, save outputs, then:
-npx -y skilld assemble
+npx -y skilld author assemble
 ```
 
 ### Tips
@@ -143,8 +143,14 @@ Yes. Add `skilld prepare` to your prepare script. It restores references, auto-i
 # Interactive mode - auto-discover from package.json
 skilld
 
-# Add skills for specific package(s)
-skilld add vue nuxt pinia
+# Add skills for specific package(s) — npm: prefix for registry packages
+skilld add npm:vue npm:nuxt npm:pinia
+
+# Add a pre-authored skill from a GitHub repo
+skilld add gh:vercel-labs/agent-skills
+
+# Add a skill for a Rust crate (crates.io)
+skilld add crate:serde
 
 # Update outdated skills
 skilld update
@@ -156,13 +162,13 @@ skilld search "error" -p nuxt --filter '{"type":"issue"}'
 skilld search --guide -p nuxt
 
 # Target a specific agent
-skilld add react --agent cursor
+skilld add npm:react --agent cursor
 
 # Install globally to ~/.claude/skills
-skilld add zod --global
+skilld add npm:zod --global
 
 # Skip prompts
-skilld add drizzle-orm --yes
+skilld add npm:drizzle-orm --yes
 
 # Check skill info
 skilld info
@@ -180,8 +186,8 @@ skilld config
 | Command | Description |
 |---------|-------------|
 | `skilld` | Interactive wizard (first run) or status menu (existing skills) |
-| `skilld add <pkg...>` | Add skills for package(s), space or comma-separated |
-| `skilld update [pkg]` | Update outdated skills (all or specific) |
+| `skilld add <source...>` | Add skills. Sources: `npm:<pkg>`, `crate:<name>`, `gh:<owner/repo>`, or bare names (deprecated) |
+| `skilld update [pkg]`   | Update outdated skills (all or specific) |
 | `skilld search [query]` | Search indexed docs (`-p` package, `--filter` JSON, `--limit`, `--guide`) |
 | `skilld list`           | List installed skills (`--json` for machine-readable output) |
 | `skilld info`           | Show skill info and config |
@@ -190,15 +196,18 @@ skilld config
 | `skilld remove`         | Remove installed skills |
 | `skilld uninstall`      | Remove all skilld data |
 | `skilld cache`          | Cache management (clean expired LLM cache entries) |
-| `skilld eject <pkg>`    | Eject skill as portable directory (no symlinks) |
-| `skilld assemble [dir]` | Merge LLM output files back into SKILL.md (auto-discovers) |
+| `skilld author package <pkg>`  | Generate a portable package skill from docs |
+| `skilld author publish` | Publish skills to skilld.dev |
+| `skilld author eject <pkg>`    | Eject skill as portable directory (no symlinks) |
+| `skilld author validate <file>`| Validate a skill section |
+| `skilld author assemble [dir]` | Merge LLM output files back into SKILL.md (auto-discovers) |
 
 ### Works Without an Agent CLI
 
 No Claude, Gemini, or Codex CLI? Choose "No agent" when prompted. You get a base skill immediately, plus portable prompts you can run in any LLM to enhance it:
 
 ```bash
-skilld add vue
+skilld add npm:vue
 # Choose "No agent" -> installs to .claude/skills/vue-skilld/
 
 # What you get:
@@ -208,23 +217,23 @@ skilld add vue
 
 # Run each PROMPT_*.md in ChatGPT/Claude web/any LLM
 # Save outputs as _BEST_PRACTICES.md, _API_CHANGES.md, then:
-skilld assemble
+skilld author assemble
 ```
 
-`skilld assemble` auto-discovers skills with pending output files. `skilld update` re-exports prompts for outdated packages.
+`skilld author assemble` auto-discovers skills with pending output files. `skilld update` re-exports prompts for outdated packages.
 
 ### Eject
 
 Export a skill as a portable, self-contained directory for sharing via git repos:
 
 ```bash
-skilld eject vue                    # Default skill directory
-skilld eject vue --name vue         # Custom directory name
-skilld eject vue --out ./skills/    # Custom path
-skilld eject vue --from 2025-07-01  # Only recent releases/issues
+skilld author eject vue                    # Default skill directory
+skilld author eject vue --name vue         # Custom directory name
+skilld author eject vue --out ./skills/    # Custom path
+skilld author eject vue --from 2025-07-01  # Only recent releases/issues
 ```
 
-Share via `skilld add owner/repo` - consumers get fully functional skills with no LLM cost.
+Share via `skilld add gh:owner/repo` - consumers get fully functional skills with no LLM cost.
 
 ### CLI Options
 
@@ -330,4 +339,4 @@ DO_NOT_TRACK=1
 
 ## License
 
-Licensed under the [MIT license](https://github.com/harlan-zw/skilld/blob/main/LICENSE).
+Licensed under the [MIT license](https://github.com/skilld-dev/skilld/blob/main/LICENSE).

package/dist/_chunks/agent.mjs

@@ -3,7 +3,8 @@ import { n as sanitizeMarkdown } from "./sanitize.mjs";
 import { h as writeSections, m as readCachedSection } from "./cache.mjs";
 import { i as resolveSkilldCommand } from "./shared.mjs";
 import { a as targets, t as detectInstalledAgents } from "./detect.mjs";
-import { c as SECTION_OUTPUT_FILES, f as getSectionValidator, l as buildAllSectionPrompts, m as wrapSection, s as SECTION_MERGE_ORDER } from "./prompts.mjs";
+import { i as buildAllSectionPrompts, l as wrapSection, n as SECTION_MERGE_ORDER, r as SECTION_OUTPUT_FILES, s as getSectionValidator } from "./prompts.mjs";
+import "./install.mjs";
 import { t as Type } from "./libs/@sinclair/typebox.mjs";
 import { homedir } from "node:os";
 import { dirname, join } from "pathe";
@@ -20,7 +21,6 @@ import { getEnvApiKey, getModel, getModels, getProviders, streamSimple } from "@
 import { getOAuthApiKey, getOAuthProvider, getOAuthProviders } from "@mariozechner/pi-ai/oauth";
 import { readFile } from "node:fs/promises";
 import { parseSync } from "oxc-parser";
-//#region src/agent/clis/claude.ts
 var claude_exports = /* @__PURE__ */ __exportAll({
 	agentId: () => agentId$2,
 	buildArgs: () => buildArgs$2,
@@ -73,16 +73,6 @@ function buildArgs$2(model, skillDir, symlinkDirs) {
 		"--no-session-persistence"
 	];
 }
-/**
-* Parse claude stream-json events
-*
-* Event types:
-* - stream_event/content_block_delta/text_delta → token streaming
-* - stream_event/content_block_start/tool_use → tool invocation starting
-* - assistant message with tool_use content → tool name + input
-* - assistant message with text content → full text (non-streaming fallback)
-* - result → usage, cost, turns
-*/
 function parseLine$2(line) {
 	try {
 		const obj = JSON.parse(line);
@@ -126,8 +116,6 @@ function parseLine$2(line) {
 	} catch {}
 	return {};
 }
-//#endregion
-//#region src/agent/clis/codex.ts
 var codex_exports = /* @__PURE__ */ __exportAll({
 	agentId: () => agentId$1,
 	buildArgs: () => buildArgs$1,
@@ -201,8 +189,6 @@ function parseLine$1(line) {
 	} catch {}
 	return {};
 }
-//#endregion
-//#region src/agent/clis/gemini.ts
 var gemini_exports = /* @__PURE__ */ __exportAll({
 	agentId: () => agentId,
 	buildArgs: () => buildArgs,
@@ -238,7 +224,6 @@ function buildArgs(model, skillDir, symlinkDirs) {
 		...symlinkDirs.flatMap((d) => ["--include-directories", d])
 	];
 }
-/** Parse gemini stream-json events — turn level (full message per event) */
 function parseLine(line) {
 	try {
 		const obj = JSON.parse(line);
@@ -271,12 +256,9 @@ function parseLine(line) {
 	} catch {}
 	return {};
 }
-//#endregion
-//#region src/agent/clis/pi-ai.ts
 function isPiAiModel(model) {
 	return model.startsWith("pi:");
 }
-/** Parse a pi:provider/model-id string → { provider, modelId } */
 function parsePiAiModelId(model) {
 	if (!model.startsWith("pi:")) return null;
 	const rest = model.slice(3);
@@ -294,9 +276,7 @@ const BLOCKED_OAUTH_PROVIDERS = new Set([
 	"anthropic",
 	"openai-codex"
 ]);
-/** pi coding agent stores auth here; env var can override */
 const PI_AGENT_AUTH_PATH = join(process.env.PI_CODING_AGENT_DIR || join(homedir(), ".pi", "agent"), "auth.json");
-/** skilld's own auth file — used when user logs in via skilld */
 const SKILLD_AUTH_PATH = join(homedir(), ".skilld", "pi-ai-auth.json");
 function readAuthFile(path) {
 	if (!existsSync(path)) return {};
@@ -306,7 +286,6 @@ function readAuthFile(path) {
 		return {};
 	}
 }
-/** Load auth from pi coding agent first (~/.pi/agent/auth.json), then skilld's own */
 function loadAuth() {
 	const piAuth = readAuthFile(PI_AGENT_AUTH_PATH);
 	return {
@@ -314,7 +293,6 @@ function loadAuth() {
 		...piAuth
 	};
 }
-/** Save auth to skilld's own file — never writes to pi agent's auth */
 function saveAuth(auth) {
 	mkdirSync(join(homedir(), ".skilld"), {
 		recursive: true,
@@ -322,16 +300,10 @@ function saveAuth(auth) {
 	});
 	writeFileSync(SKILLD_AUTH_PATH, JSON.stringify(auth, null, 2), { mode: 384 });
 }
-/**
-* Overrides for model-provider → OAuth-provider mapping.
-* Most providers share the same ID in both systems (auto-matched).
-* Only list exceptions where the IDs diverge.
-*/
 const OAUTH_PROVIDER_OVERRIDES = {
 	google: "google-gemini-cli",
 	openai: "openai-codex"
 };
-/** Resolve model provider ID → OAuth provider ID (returns null for blocked providers) */
 function resolveOAuthProviderId(modelProvider) {
 	const oauthId = OAUTH_PROVIDER_OVERRIDES[modelProvider] ?? modelProvider;
 	if (BLOCKED_OAUTH_PROVIDERS.has(oauthId)) return null;
@@ -339,7 +311,6 @@ function resolveOAuthProviderId(modelProvider) {
 	if (new Set(getOAuthProviders().map((p) => p.id)).has(modelProvider)) return modelProvider;
 	return null;
 }
-/** Resolve API key for a provider — checks env vars first, then OAuth credentials */
 async function resolveApiKey(provider) {
 	const envKey = getEnvApiKey(provider);
 	if (envKey) return envKey;
@@ -357,7 +328,6 @@ async function resolveApiKey(provider) {
 	saveAuth(skilldAuth);
 	return result.apiKey;
 }
-/** Get available OAuth providers for login (excludes blocked providers) */
 function getOAuthProviderList() {
 	const auth = loadAuth();
 	return getOAuthProviders().filter((p) => !BLOCKED_OAUTH_PROVIDERS.has(p.id)).map((p) => ({
@@ -366,7 +336,6 @@ function getOAuthProviderList() {
 		loggedIn: !!auth[p.id]
 	}));
 }
-/** Run OAuth login for a provider, saving credentials to ~/.skilld/ */
 async function loginOAuthProvider(providerId, callbacks) {
 	const provider = getOAuthProvider(providerId);
 	if (!provider) return false;
@@ -383,14 +352,12 @@ async function loginOAuthProvider(providerId, callbacks) {
 	saveAuth(auth);
 	return true;
 }
-/** Remove OAuth credentials for a provider */
 function logoutOAuthProvider(providerId) {
 	const auth = loadAuth();
 	delete auth[providerId];
 	saveAuth(auth);
 }
 const MIN_CONTEXT_WINDOW = 32e3;
-/** Legacy model patterns — old generations that clutter the model list */
 const LEGACY_MODEL_PATTERNS = [
 	/^claude-3-/,
 	/^claude-3\.5-/,
@@ -407,13 +374,11 @@ const LEGACY_MODEL_PATTERNS = [
 function isLegacyModel(modelId) {
 	return LEGACY_MODEL_PATTERNS.some((p) => p.test(modelId));
 }
-/** Preferred model per provider for auto-selection (cheapest reliable option) */
 const RECOMMENDED_MODELS = {
 	anthropic: /haiku/,
 	google: /flash/,
 	openai: /gpt-4\.1-mini/
 };
-/** Get all pi-ai models for providers with auth configured */
 function getAvailablePiAiModels() {
 	const providers = getProviders();
 	const auth = loadAuth();
@@ -491,13 +456,11 @@ const SAFE_COMMANDS = new Set([
 	"find"
 ]);
 const SHELL_META_RE = /[;&|`$()<>]/;
-/** Resolve a path safely within skilldDir, blocking traversal */
 function resolveSandboxedPath(p, skilldDir) {
 	const resolved = resolve$1(skilldDir, String(p).replace(/^\.\/\.skilld\//, "./").replace(/^\.skilld\//, "./").replace(/^\.\//, ""));
 	if (!resolved.startsWith(`${skilldDir}/`) && resolved !== skilldDir) throw new Error(`Path traversal blocked: ${p}`);
 	return resolved;
 }
-/** Match a file path against a glob pattern using simple segment matching (no regex from user input) */
 function globMatch(filePath, pattern) {
 	const segments = pattern.split("**");
 	if (segments.length === 1) {
@@ -541,7 +504,6 @@ function globMatch(filePath, pattern) {
 	}
 	return true;
 }
-/** Execute a tool call against the .skilld/ directory */
 function executeTool(toolCall, skilldDir) {
 	const args = toolCall.arguments;
 	switch (toolCall.name) {
@@ -588,7 +550,6 @@ function executeTool(toolCall, skilldDir) {
 		default: return `Unknown tool: ${toolCall.name}`;
 	}
 }
-/** Optimize a single section using pi-ai agentic API with tool use */
 async function optimizeSectionPiAi(opts) {
 	const parsed = parsePiAiModelId(opts.model);
 	if (!parsed) throw new Error(`Invalid pi-ai model ID: ${opts.model}. Expected format: pi:provider/model-id`);
@@ -702,8 +663,6 @@ async function optimizeSectionPiAi(opts) {
 		cost: totalCost
 	};
 }
-//#endregion
-//#region src/agent/clis/index.ts
 const TOOL_VERBS = {
 	Read: "Reading",
 	Glob: "Searching",
@@ -717,11 +676,9 @@ const TOOL_VERBS = {
 	search_file_content: "Searching",
 	run_shell_command: "Running"
 };
-/** Create a progress callback that emits one line per tool call, Claude Code style */
 function createToolProgress(log) {
 	let lastMsg = "";
 	let repeatCount = 0;
-	/** Per-section timestamp of last "Writing..." emission — throttles text_delta spam */
 	const lastTextEmit = /* @__PURE__ */ new Map();
 	const TEXT_THROTTLE_MS = 2e3;
 	function emit(msg) {
@@ -786,7 +743,6 @@ const CLI_PARSE_LINE = {
 	gemini: parseLine,
 	codex: parseLine$1
 };
-/** Map CLI agent IDs to their LLM provider name (not the agent/tool name) */
 const CLI_PROVIDER_NAMES = {
 	"claude-code": "Anthropic",
 	"gemini-cli": "Google",
@@ -869,7 +825,6 @@ async function getAvailableModels() {
 	});
 	return [...cliModels, ...piAiEntries];
 }
-/** Resolve symlinks in .skilld/ to get real paths for --add-dir */
 function resolveReferenceDirs(skillDir) {
 	const refsDir = join(skillDir, ".skilld");
 	if (!existsSync(refsDir)) return [];
@@ -882,7 +837,6 @@ function resolveReferenceDirs(skillDir) {
 	return [...resolved, ...parents];
 }
 const CACHE_DIR = join(homedir(), ".skilld", "llm-cache");
-/** Strip absolute paths from prompt so the hash is project-independent */
 function normalizePromptForHash(prompt) {
 	return prompt.replace(/\/[^\s`]*\.(?:claude|codex|gemini)\/skills\/[^\s/`]+/g, "<SKILL_DIR>");
 }
@@ -971,7 +925,6 @@ async function optimizeSectionViaPiAi(opts) {
 		};
 	}
 }
-/** Spawn a single CLI process for one section, or call pi-ai directly */
 function optimizeSection(opts) {
 	const { section, prompt, outputFile, skillDir, model, onProgress, timeout, debug, preExistingFiles } = opts;
 	if (isPiAiModel(model)) return optimizeSectionViaPiAi({
@@ -1342,37 +1295,31 @@ async function optimizeDocs(opts) {
 		debugLogsDir
 	};
 }
-/** Check if an error string indicates a rate limit (429) */
 function isRateLimitError(error) {
 	if (!error) return false;
 	return /\b429\b/.test(error) || /rate.?limit/i.test(error) || /exhausted.*capacity/i.test(error) || /quota.*reset/i.test(error);
 }
-/** Parse delay hint from rate limit error (e.g. "reset after 5s" → 5). Returns undefined if not a rate limit. */
 function parseRateLimitDelay(error) {
 	if (!error || !isRateLimitError(error)) return void 0;
 	const match = error.match(/reset\s+after\s+(\d+)s/i);
 	return match ? Number(match[1]) : 10;
 }
-/** Extract error string from a PromiseSettledResult */
 function getRetryError(result) {
 	if (result.status === "rejected") return String(result.reason);
 	return result.value.error;
 }
-/** Shorten absolute paths for display: /home/user/project/.claude/skills/vue/SKILL.md → .claude/.../SKILL.md */
 function shortenPath(p) {
 	const refIdx = p.indexOf(".skilld/");
 	if (refIdx !== -1) return p.slice(refIdx + 8);
 	const parts = p.split("/");
 	return parts.length > 2 ? `.../${parts.slice(-2).join("/")}` : p;
 }
-/** Replace absolute paths in a command string with shortened versions */
 function shortenCommand(cmd) {
 	return cmd.replace(/\/[^\s"']+/g, (match) => {
 		if (match.includes(".claude/") || match.includes(".skilld/") || match.includes("node_modules/")) return `.../${match.split("/").slice(-2).join("/")}`;
 		return match;
 	});
 }
-/** Clean a single section's LLM output: strip markdown fences, frontmatter, sanitize */
 function cleanSectionOutput(content) {
 	let cleaned = content.trim();
 	const wrapMatch = cleaned.match(/^```(?:markdown|md)?[^\S\n]*\n([\s\S]+)\n```[^\S\n]*$/);
@@ -1408,8 +1355,6 @@ function cleanSectionOutput(content) {
 	if (!/^##\s/m.test(cleaned) && !/^- (?:BREAKING|DEPRECATED|NEW): /m.test(cleaned) && !/\[source\]/.test(cleaned)) return "";
 	return cleaned;
 }
-//#endregion
-//#region src/agent/detect-presets.ts
 const NUXT_CONFIG_FILES = [
 	"nuxt.config.ts",
 	"nuxt.config.js",
@@ -1431,10 +1376,6 @@ async function findNuxtConfig(cwd) {
 	}
 	return null;
 }
-/**
-* Walk AST node to find all string values inside a `modules` array property.
-* Handles: defineNuxtConfig({ modules: [...] }) and export default { modules: [...] }
-*/
 function extractModuleStrings(node) {
 	if (!node || typeof node !== "object") return [];
 	if (node.type === "Property" && !node.computed && node.key?.type === "Identifier" && node.key.name === "modules" && node.value?.type === "ArrayExpression") return node.value.elements.filter((el) => el?.type === "Literal" && typeof el.value === "string").map((el) => el.value);
@@ -1447,9 +1388,6 @@ function extractModuleStrings(node) {
 	}
 	return results;
 }
-/**
-* Detect Nuxt modules from nuxt.config.{ts,js,mjs}
-*/
 async function detectNuxtModules(cwd) {
 	const config = await findNuxtConfig(cwd);
 	if (!config) return [];
@@ -1474,18 +1412,9 @@ async function detectNuxtModules(cwd) {
 	}
 	return packages;
 }
-/**
-* Run all preset detectors and merge results
-*/
 async function detectPresetPackages(cwd) {
 	return detectNuxtModules(cwd);
 }
-//#endregion
-//#region src/agent/detect-imports.ts
-/**
-* Detect directly-used npm packages by scanning source files
-* Uses mlly for proper ES module parsing + tinyglobby for file discovery
-*/
 const PATTERNS = ["**/*.{ts,js,vue,mjs,cjs,tsx,jsx,mts,cts}"];
 const IGNORE = [
 	"**/node_modules/**",
@@ -1499,10 +1428,6 @@ function addPackage(counts, specifier) {
 	const name = specifier.startsWith("@") ? specifier.split("/").slice(0, 2).join("/") : specifier.split("/")[0];
 	if (!isNodeBuiltin(name)) counts.set(name, (counts.get(name) || 0) + 1);
 }
-/**
-* Scan source files to detect all directly-imported npm packages
-* Async with gitignore support for proper spinner animation
-*/
 async function detectImportedPackages(cwd = process.cwd()) {
 	try {
 		const counts = /* @__PURE__ */ new Map();
@@ -1587,7 +1512,6 @@ function isNodeBuiltin(pkg) {
 	const base = pkg.startsWith("node:") ? pkg.slice(5) : pkg;
 	return NODE_BUILTINS.has(base.split("/")[0]);
 }
-//#endregion
 export { getModelLabel as a, getOAuthProviderList as c, getAvailableModels as i, loginOAuthProvider as l, cleanSectionOutput as n, getModelName as o, createToolProgress as r, optimizeDocs as s, detectImportedPackages as t, logoutOAuthProvider as u };
 
 //# sourceMappingURL=agent.mjs.map