skilldrop-cli 1.1.3 → 1.2.0

package/packs/converters/skills/md-to-html/examples/ops-review.md

@@ -1,83 +0,0 @@
-# Example: a quarterly ops review as one HTML file
-
-**What the user said:** *"Turn `ops-review.md` into something the operations committee can
-open from an email and print. Add a contents box."*
-
-The input is [`inputs/ops-review.md`](inputs/ops-review.md). It has nested and task lists, a
-quote, an aligned table, a local SVG chart ([`inputs/chart.svg`](inputs/chart.svg)), a Mermaid
-fence, a Python code block, and two things that should not survive as-is: an inline
-`<script>` and a pasted `<div>` block. (A `javascript:` link would also be dropped, with a
-warning naming it.)
-
-## Command
-
-```bash
-python3 scripts/md_to_html.py examples/inputs/ops-review.md -o ops-review.html --toc
-```
-
-## What the script printed (real output)
-
-```text
-warning: 1 Mermaid diagram(s) kept as text; use --mermaid cdn to draw them (needs network when opened), or render them to SVG with mermaid-render
-warning: raw HTML found and shown as text (2 place(s)); this is deliberate, see --allow-html
-wrote ops-review.html (6 KB): 5 headings, 1 tables, 1 code blocks, 1 Mermaid, 1 images embedded, 0 remote, 0 missing
-```
-
-## The `<main>` of the output (real, base64 shortened)
-
-```html
-<h1 id="northwind-health-q3-platform-review">Northwind Health: Q3 platform review<a class="anchor" href="#northwind-health-q3-platform-review" aria-hidden="true">#</a></h1>
-<nav class="toc" aria-label="Contents"><p>Contents</p><ul><li><a href="#summary">Summary</a></li><li><a href="#numbers">Numbers</a></li><li><a href="#how-a-reminder-is-sent">How a reminder is sent</a></li><li><a href="#notes">Notes</a></li></ul></nav>
-<p>Prepared for the <strong>operations committee</strong>. Figures are <em>placeholders</em> for this example.</p>
-<h2 id="summary">Summary<a class="anchor" href="#summary" aria-hidden="true">#</a></h2>
-<ul>
-<li>Uptime held at the target for the quarter</li>
-<li>Two incidents, both under 30 minutes
-<ul>
-<li>INC-101: login latency</li>
-<li>INC-102: delayed reminder emails</li>
-</ul></li>
-<li class="task"><input type="checkbox" disabled checked> Migrate reminders to the new queue</li>
-<li class="task"><input type="checkbox" disabled> Retire the old scheduler</li>
-</ul>
-<blockquote><p>Decision needed: approve the scheduler retirement for October.</p></blockquote>
-<h2 id="numbers">Numbers<a class="anchor" href="#numbers" aria-hidden="true">#</a></h2>
-<div class="table-wrap"><table><thead><tr><th style="text-align:left">Metric</th><th style="text-align:right">Q2</th><th style="text-align:right">Q3</th><th style="text-align:center">Change</th></tr></thead><tbody><tr><td style="text-align:left">Uptime</td><td style="text-align:right">99.90%</td><td style="text-align:right">99.95%</td><td style="text-align:center">up</td></tr><tr><td style="text-align:left">Incidents</td><td style="text-align:right">4</td><td style="text-align:right">2</td><td style="text-align:center">down</td></tr><tr><td style="text-align:left"><code>p95</code> login (ms)</td><td style="text-align:right">410</td><td style="text-align:right">380</td><td style="text-align:center">down</td></tr></tbody></table></div>
-<p><img src="data:image/svg+xml;base64,…" alt="Weekly active members"></p>
-<h2 id="how-a-reminder-is-sent">How a reminder is sent<a class="anchor" href="#how-a-reminder-is-sent" aria-hidden="true">#</a></h2>
-<pre class="mermaid">flowchart LR
-    Sched([Scheduler]) --&gt;|enqueue| Q{{Reminder queue}}
-    Q --&gt; W[Worker]
-    W --&gt;|SMTP| Mail[(Mail relay)]</pre>
-<p>The worker retries with this rule:</p>
-<pre><code class="language-python">def backoff(attempt):
-    return min(2 ** attempt, 300)  # seconds, capped at 5 minutes</code></pre>
-<h2 id="notes">Notes<a class="anchor" href="#notes" aria-hidden="true">#</a></h2>
-<p>Raw HTML is shown as text, not run: &lt;script&gt;alert(&quot;hi&quot;)&lt;/script&gt;</p>
-<pre class="raw-html">&lt;div style=&quot;color:red&quot;&gt;This block came from a pasted email.&lt;/div&gt;</pre>
-<p>See the <a href="https://northwindhealth.example/runbooks/reminders">runbook</a> for the retry rules.</p>
-```
-
-## With `--mermaid cdn`
-
-The same command with `--mermaid cdn` adds exactly one script and a policy that allows only it
-(real output):
-
-```html
-<meta http-equiv="Content-Security-Policy" content="default-src 'none'; img-src data: https:; style-src 'unsafe-inline'; font-src data: https:; script-src 'sha256-FFdGvPoYRnPQ2cUJFzJW6IyZn0u1kdvZbGgLe0Qjl8Y=' https://cdn.jsdelivr.net; connect-src https://cdn.jsdelivr.net">
-<script type="module">import mermaid from "https://cdn.jsdelivr.net/npm/mermaid@11.4.1/dist/mermaid.esm.min.mjs";mermaid.initialize({startOnLoad:true,securityLevel:"strict"});</script>
-```
-
-Opened in headless Chrome with network, the `<pre class="mermaid">` was replaced by a drawn
-flowchart SVG.
-
-## What to tell the user
-
-> `ops-review.html` is ready: one 6 KB file with the chart embedded, so it works as an email
-> attachment. Three things to know:
-> - The reminder diagram shows as text. If the committee will be online, I can rebuild with
->   the diagram drawn (it then needs network when opened), or render it to an SVG and embed it.
-> - The pasted `<div>` and `<script>` show as text on purpose. Delete them from the source if they
->   were not meant to be there.
->
-> Print-preview it once: the table header repeats on each page and the runbook link prints its address.

package/packs/converters/skills/md-to-html/manifest.json

@@ -1,43 +0,0 @@
-{
-  "name": "md-to-html",
-  "version": "0.1.3",
-  "description": "Turn a Markdown draft into one self-contained, print-friendly HTML file that survives being emailed or attached, with headings that have anchor links, tables, code, quotes, an optional table of contents, local images embedded, brand colours and fonts from a brand.json, Mermaid diagrams kept as text or drawn from a pinned CDN, and raw HTML escaped so nothing in the source runs. Use when the user wants Markdown \"as a web page\", \"as an HTML file I can send\", \"something people can open in a browser and print\", or says \"convert this to HTML\".",
-  "entrypoint": "SKILL.md",
-  "deps": {
-    "npm": [],
-    "pip": []
-  },
-  "env": {
-    "required": [],
-    "optional": []
-  },
-  "related": [
-    "brand-kit",
-    "guide-builder",
-    "marketing-flyer",
-    "md-to-docx",
-    "md-to-xlsx",
-    "mermaid-render"
-  ],
-  "handoff": [
-    {
-      "to": "mermaid-render",
-      "when": "the document has Mermaid diagrams and readers may be offline",
-      "purpose": "Render each diagram to SVG so it can be embedded and needs no network.",
-      "fallback": "If mermaid-render is absent, keep the diagrams as text (the default) and tell the user they show as source, or use --mermaid cdn and say it needs network."
-    }
-  ],
-  "tags": [
-    "html",
-    "markdown",
-    "convert",
-    "print",
-    "export",
-    "brand"
-  ],
-  "permissions": {"network": [], "commands": [], "files": "named-paths", "notes": "The script makes no network calls. With --mermaid cdn, the HTML it writes loads Mermaid from cdn.jsdelivr.net when someone opens it."},
-  "model": {
-    "tier": "light",
-    "rationale": "A deterministic stdlib script does the conversion; the model picks options, fixes a few unsupported Markdown constructs and relays the script's warnings. Little judgment."
-  }
-}

package/packs/converters/skills/md-to-html/reference.md

@@ -1,70 +0,0 @@
-# md-to-html reference
-
-## Markdown the script supports
-
-| Construct | Supported | Notes |
-|---|---|---|
-| ATX headings `#` to `######` | ✅ | Each gets an `id` from its text (`## Rollout plan` becomes `#rollout-plan`); duplicates get `-1`, `-2` |
-| Setext headings (`Title` over `===`) | ❌ | Comes through as a paragraph. Rewrite as `# Title` |
-| Paragraphs, hard breaks (two trailing spaces or `\`) | ✅ | |
-| `**bold**`, `*italic*`, `_italic_`, `~~strike~~`, `` `code` `` | ✅ | |
-| Links `[text](...)` with an optional `"title"`, `<https://…>`, bare `https://…` | ✅ | `javascript:`, `vbscript:` and non-image `data:` targets are dropped with a warning |
-| Reference links `[text][id]` | ❌ | Rewrite as inline links |
-| Images `![alt](...)` | ✅ | Local files embedded as data URIs; remote URLs kept and warned about; missing files shown as `[image not found: alt]` |
-| Ordered, unordered, nested lists; `- [ ]` task lists | ✅ | A blank line between items makes the list loose (each item a paragraph) |
-| GFM pipe tables with `:---:` alignment | ✅ | `\|` for a literal pipe; pipes inside `` `code` `` are kept |
-| Fenced code (```` ``` ```` or `~~~`) with a language | ✅ | `class="language-x"` on the `<code>`, no colouring |
-| Indented code (4 spaces) | ✅ | |
-| Blockquotes `>` | ✅ | Nested Markdown inside is rendered |
-| `---` / `***` rules | ✅ | |
-| YAML front matter at the top | ✅ | Removed from the output |
-| Footnotes `[^1]`, definition lists, math | ❌ | Plain text. Rewrite footnotes as a Notes section |
-| Raw HTML | Escaped | Shown as text; see below |
-
-## Why raw HTML is escaped by default
-
-The output is usually shared: attached to email, uploaded to an intranet, opened by people who
-did not write the source. Markdown drafts pick up pasted HTML from emails, web pages and other
-tools, and a `<script>`, an `onerror=` attribute or a `<form>` in that paste would run in every
-reader's browser. Escaping shows the HTML as text, so nothing is lost and nothing runs.
-`--allow-html` passes raw HTML *blocks* through (a line that starts with a tag, up to the next
-blank line). Inline tags inside a paragraph stay escaped either way.
-
-The file also carries a Content-Security-Policy that allows no scripts at all, or, with
-`--mermaid cdn`, only the one Mermaid loader (by hash) and jsDelivr.
-
-## brand.json fields read
-
-From the `brand-kit` shape:
-
-| Field | Used for |
-|---|---|
-| `colors.primary` | Headings, table header background, the header rule |
-| `colors.secondary` | Links |
-| `colors.accent` | Blockquote bar |
-| `colors.background`, `colors.text` | Page background and body text |
-| `fonts.heading.family` + `fallback` | Headings |
-| `fonts.body.family` + `fallback` | Body text |
-| `logo.primary` | Embedded at the top of the page, path relative to brand.json |
-| `legal.footer` | Footer line |
-
-A colour that is not a hex code is ignored with a warning. Fonts are named, not embedded: the
-reader's machine must have them, or the fallback is used. Say so when the brand font is not a
-common system font.
-
-## Print rules in the stylesheet
-
-- Page margins 18 mm top and bottom, 16 mm left and right; body text 11 pt.
-- Table header rows repeat on every page; tables, code blocks, quotes and images avoid page breaks inside.
-- Headings avoid being the last line on a page.
-- Code wraps instead of running off the page.
-- External links print their address after the link text.
-- Anchor `#` markers are hidden.
-
-## Mermaid
-
-| Mode | What the reader sees | Needs network |
-|---|---|---|
-| default (`--mermaid none`) | The diagram source in a box | No |
-| `--mermaid cdn` | The drawn diagram, by Mermaid 11.4.1 from jsDelivr, pinned to that exact version | Yes, each time the file is opened |
-| Pre-render with `mermaid-render`, reference the SVG as an image | The drawn diagram, embedded | No |