skillmds 1.0.20 → 1.1.0

package/dist/cli.js

@@ -1,314 +1,17 @@
-// ../cli/src/index.ts
+// src/index.ts
 import { Command as Command13 } from "commander";
 import { readFileSync as readFileSync4 } from "fs";
 
-// ../cli/src/commands/lint.ts
+// src/commands/lint.ts
 import { Command } from "commander";
 import { writeFileSync } from "fs";
 import { homedir } from "os";
 import { resolve } from "path";
 import pc2 from "picocolors";
 import * as p from "@clack/prompts";
+import { lint, toJson, toSarif, toGithub } from "@skillmds/core";
 
-// ../../packages/core/src/parse.ts
-import { parse as parseYaml } from "yaml";
-var MAX_SKILL_BYTES = 256 * 1024;
-var MAX_DESCRIPTION = 1024;
-var MAX_NAME = 120;
-var slugify = (s) => String(s).toLowerCase().trim().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 60) || "skill";
-function parseSkillMd(raw, type = "single") {
-  if (!raw || raw.length > MAX_SKILL_BYTES) return { error: "SKILL.md missing or too large (max 256KB)" };
-  const m = raw.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n?([\s\S]*)$/);
-  if (!m) return { error: "Missing YAML frontmatter (--- ... ---)" };
-  let fm;
-  try {
-    fm = parseYaml(m[1] ?? "") ?? {};
-  } catch {
-    return { error: "Invalid YAML frontmatter" };
-  }
-  const name = String(fm.name ?? "").trim();
-  const description = String(fm.description ?? "").replace(/\s+/g, " ").trim();
-  if (!name) return { error: "frontmatter 'name' is required" };
-  if (!description) return { error: "frontmatter 'description' is required" };
-  if (description.length > MAX_DESCRIPTION) return { error: `description must be <= ${MAX_DESCRIPTION} chars` };
-  return {
-    name: name.slice(0, MAX_NAME),
-    description: description.slice(0, MAX_DESCRIPTION),
-    license: fm.license ? String(fm.license).slice(0, 64) : null,
-    body: m[2] ?? "",
-    type
-  };
-}
-
-// ../../packages/core/src/security.ts
-var UNTRUSTED_INSTALL_RE = new RegExp(
-  [
-    /(?:npx|npm|yarn|pnpm|bun)\b[^\n]*--registry[= ]/.source,
-    // custom npm registry
-    /npm\s+config\s+set\s+registry/.source,
-    /pip3?\s+install\b[^\n]*(?:--index-url|--extra-index-url|-i\s+https?:)/.source,
-    // custom pip index
-    /(?:curl|wget)\b[^\n|]*\|\s*(?:sudo\s+)?(?:ba|z|fi)?sh\b/.source,
-    // curl … | sh
-    /(?:iwr|irm|invoke-webrequest|invoke-restmethod)\b[^\n|]*\|\s*iex\b/.source,
-    // PowerShell pipe-to-exec
-    /bash\s+<\(\s*(?:curl|wget)/.source,
-    // bash <(curl …)
-    /(?:pip3?|npm|npx)\s+(?:install|--yes|-y)?\s*[^\n]*https?:\/\/(?!registry\.npmjs\.org|pypi\.org|files\.pythonhosted\.org)[^\s'"`]+\.(?:whl|tar\.gz|tgz|zip)\b/.source
-    // install from raw archive URL
-  ].join("|"),
-  "i"
-);
-var RULES = [
-  ["untrusted_install", UNTRUSTED_INSTALL_RE],
-  ["executes_scripts", /```(?:sh|bash|python|py|js|ts|ruby|rb)\b|\b(subprocess|os\.system|child_process|exec\()/i],
-  ["network_calls", /\b(fetch|requests\.|urllib|axios|curl|wget|https?:\/\/|websocket)\b/i],
-  ["reads_secrets", /\b(api[_-]?key|secret|token|password|os\.environ|process\.env|getenv)\b/i]
-];
-function scanSecurity(body) {
-  const findings = [];
-  body.split(/\r?\n/).forEach((text3, i) => {
-    for (const [flag, re] of RULES) {
-      if (re.test(text3)) findings.push({ flag, line: i + 1, snippet: text3.trim().slice(0, 120) });
-    }
-  });
-  const flags = [...new Set(findings.map((f) => f.flag))];
-  return { flags: flags.length ? flags : ["docs_only"], findings };
-}
-
-// ../../packages/core/src/rules.ts
-function utf8Bytes(s) {
-  let bytes = 0;
-  for (let i = 0; i < s.length; i++) {
-    const c = s.charCodeAt(i);
-    if (c < 128) bytes += 1;
-    else if (c < 2048) bytes += 2;
-    else if (c >= 55296 && c <= 56319) {
-      bytes += 4;
-      i++;
-    } else bytes += 3;
-  }
-  return bytes;
-}
-var diag = (rule, message, line) => ({
-  id: rule.id,
-  severity: rule.severity,
-  message,
-  ...line !== void 0 ? { line } : {}
-});
-var RULES2 = [
-  {
-    id: "SK002",
-    severity: "error",
-    description: "name must be present and \u2264 120 chars",
-    check(s, _ctx) {
-      const out = [];
-      if (!s.name.trim()) out.push(diag(this, "frontmatter 'name' is required"));
-      else if (s.name.length > MAX_NAME) out.push(diag(this, `name must be \u2264 ${MAX_NAME} chars`));
-      return out;
-    }
-  },
-  {
-    id: "SK003",
-    severity: "error",
-    description: "description must be present and \u2264 1024 chars",
-    check(s, _ctx) {
-      const out = [];
-      if (!s.description.trim()) out.push(diag(this, "frontmatter 'description' is required"));
-      else if (s.description.length > MAX_DESCRIPTION) out.push(diag(this, `description must be \u2264 ${MAX_DESCRIPTION} chars`));
-      return out;
-    }
-  },
-  {
-    id: "SK010",
-    severity: "warn",
-    description: "description should be \u2265 20 chars (not too terse)",
-    check(s, _ctx) {
-      return s.description.trim().length > 0 && s.description.trim().length < 20 ? [diag(this, "description is very terse (< 20 chars); add more detail to help discovery")] : [];
-    }
-  },
-  {
-    id: "SK011",
-    severity: "warn",
-    description: "license should be declared in frontmatter",
-    check(s, _ctx) {
-      return s.license ? [] : [diag(this, "no 'license' declared in frontmatter")];
-    }
-  },
-  {
-    id: "SK020",
-    severity: "warn",
-    description: "body should be \u2265 200 chars (not a stub)",
-    check(s, _ctx) {
-      return s.body.trim().length < 200 ? [diag(this, "body is very short (< 200 chars); this looks like a stub")] : [];
-    }
-  },
-  {
-    id: "SK021",
-    severity: "warn",
-    description: "body should contain at least one Markdown heading",
-    check(s, _ctx) {
-      return /^#{1,6}\s/m.test(s.body) ? [] : [diag(this, "body has no Markdown headings; add structure with '#' headings")];
-    }
-  },
-  {
-    id: "SK030",
-    severity: "error",
-    description: "total SKILL.md size must be \u2264 256KB",
-    check(s, _ctx) {
-      return utf8Bytes(s.body) > MAX_SKILL_BYTES ? [diag(this, "SKILL.md exceeds 256KB")] : [];
-    }
-  },
-  {
-    id: "SK040",
-    severity: "warn",
-    description: "name should match its directory/slug",
-    check(s, ctx) {
-      if (!ctx.slug) return [];
-      const expected = slugify(s.name);
-      return expected === ctx.slug ? [] : [diag(this, `name slug '${expected}' does not match directory '${ctx.slug}'`)];
-    }
-  }
-];
-function runRules(skill, ctx = {}) {
-  return RULES2.flatMap((r) => r.check(skill, ctx));
-}
-
-// ../../packages/core/src/quality.ts
-var WEIGHT = {
-  error: 30,
-  warn: 10,
-  info: 3
-};
-var RISK = {
-  docs_only: 0,
-  reads_secrets: 2,
-  network_calls: 1,
-  executes_scripts: 5,
-  // fetch-and-execute from a non-standard source — the supply-chain pattern the
-  // AI verdict floors to "warning"; the heaviest penalty here for the same reason
-  untrusted_install: 15
-};
-var VERIFIED_FLOOR = 85;
-function qualityScore(diagnostics, security, opts = {}) {
-  let penalty = diagnostics.reduce((sum, d) => sum + WEIGHT[d.severity], 0);
-  if (security) {
-    for (const flag of security.flags) penalty += RISK[flag] ?? 0;
-  }
-  const score = Math.max(0, Math.min(100, 100 - penalty));
-  const hasError = diagnostics.some((d) => d.severity === "error");
-  return opts.verified && !hasError ? Math.max(score, VERIFIED_FLOOR) : score;
-}
-
-// ../../packages/core/src/lint.ts
-function lint(raw, opts = {}) {
-  const parsed = parseSkillMd(raw, opts.type ?? "single");
-  if ("error" in parsed) {
-    const diagnostics2 = [{ id: "SK001", severity: "error", message: parsed.error }];
-    const security2 = scanSecurity(raw);
-    return {
-      ok: false,
-      diagnostics: diagnostics2,
-      security: security2,
-      score: qualityScore(diagnostics2, security2, { verified: opts.verified })
-    };
-  }
-  const ctx = opts.slug !== void 0 ? { slug: opts.slug } : {};
-  const diagnostics = runRules(parsed, ctx);
-  const security = scanSecurity(parsed.body);
-  const ok = !diagnostics.some((d) => d.severity === "error");
-  return { ok, skill: parsed, diagnostics, security, score: qualityScore(diagnostics, security, { verified: opts.verified }) };
-}
-
-// ../../packages/core/src/format/text.ts
-var BADGE = { error: "ERROR", warn: " WARN", info: " INFO" };
-function toText(results, opts = {}) {
-  const paint = opts.decorate ?? ((t) => t);
-  const out = [];
-  for (const { file, result } of results) {
-    const status = result.ok ? paint("PASS", "ok") : paint("FAIL", "error");
-    out.push(`${status}  ${file}  ${paint(`score ${result.score}/100`, "dim")}`);
-    for (const d of result.diagnostics) {
-      const where = d.line !== void 0 ? `:${d.line}` : "";
-      out.push(`  ${paint(BADGE[d.severity], d.severity)}  ${d.id}${where}  ${d.message}`);
-    }
-    if (result.security.flags.length && result.security.flags[0] !== "docs_only") {
-      out.push(`  ${paint("SEC ", "warn")}  flags: ${result.security.flags.join(", ")}`);
-    }
-    out.push("");
-  }
-  const failed = results.filter((r) => !r.result.ok).length;
-  const summary = failed === 0 ? paint(`\u2713 ${results.length} skill(s) passed`, "ok") : paint(`\u2717 ${failed}/${results.length} skill(s) failed`, "error");
-  out.push(summary);
-  return out.join("\n");
-}
-
-// ../../packages/core/src/format/json.ts
-function toJson(results) {
-  return results.map(({ file, result }) => ({
-    file,
-    ok: result.ok,
-    score: result.score,
-    diagnostics: result.diagnostics,
-    security: result.security
-  }));
-}
-
-// ../../packages/core/src/format/sarif.ts
-var SARIF_LEVEL = { error: "error", warn: "warning", info: "note" };
-function toSarif(results) {
-  const sarifResults = results.flatMap(
-    ({ file, result }) => result.diagnostics.map((d) => ({
-      ruleId: d.id,
-      level: SARIF_LEVEL[d.severity] ?? "note",
-      message: { text: d.message },
-      locations: [
-        {
-          physicalLocation: {
-            artifactLocation: { uri: file },
-            region: { startLine: d.line ?? 1 }
-          }
-        }
-      ]
-    }))
-  );
-  return {
-    $schema: "https://json.schemastore.org/sarif-2.1.0.json",
-    version: "2.1.0",
-    runs: [
-      {
-        tool: {
-          driver: {
-            name: "skillmd",
-            informationUri: "https://skillmd.com",
-            rules: RULES2.map((r) => ({
-              id: r.id,
-              shortDescription: { text: r.description },
-              defaultConfiguration: { level: SARIF_LEVEL[r.severity] ?? "note" }
-            }))
-          }
-        },
-        results: sarifResults
-      }
-    ]
-  };
-}
-
-// ../../packages/core/src/format/github.ts
-var LEVEL = { error: "error", warn: "warning", info: "notice" };
-function toGithub(results) {
-  const lines = [];
-  for (const { file, result } of results) {
-    for (const d of result.diagnostics) {
-      const level = LEVEL[d.severity] ?? "notice";
-      const loc = d.line !== void 0 ? `,line=${d.line}` : "";
-      lines.push(`::${level} file=${file}${loc},title=${d.id}::${d.message}`);
-    }
-  }
-  return lines.join("\n");
-}
-
-// ../cli/src/source.ts
+// src/source.ts
 import { existsSync, statSync, lstatSync, readFileSync, readdirSync, mkdtempSync, rmSync } from "fs";
 import { tmpdir } from "os";
 import { join, basename, dirname, relative, sep } from "path";
@@ -427,7 +130,7 @@ function normalizeGiget(arg) {
   return `github:${arg}`;
 }
 
-// ../cli/src/ui.ts
+// src/ui.ts
 import pc from "picocolors";
 var decorate = (text3, kind) => {
   switch (kind) {
@@ -561,7 +264,7 @@ function exitCodeFor(results, policy = {}) {
   return 0;
 }
 
-// ../cli/src/commands/lint.ts
+// src/commands/lint.ts
 function applyLicenseFix(raw) {
   if (/^---[\s\S]*?\blicense:\s*\S+[\s\S]*?^---/m.test(raw)) return null;
   const m = raw.match(/^(---\r?\n)([\s\S]*?)(\r?\n---)/);
@@ -633,8 +336,9 @@ function lintCommand() {
   });
 }
 
-// ../cli/src/commands/scan.ts
+// src/commands/scan.ts
 import { Command as Command2 } from "commander";
+import { scanSecurity, parseSkillMd } from "@skillmds/core";
 import pc3 from "picocolors";
 async function runScan(target, flags) {
   const resolved = await resolveSource(target);
@@ -673,12 +377,13 @@ function scanCommand() {
   });
 }
 
-// ../cli/src/commands/rules.ts
+// src/commands/rules.ts
 import { Command as Command3 } from "commander";
+import { RULES } from "@skillmds/core";
 import pc4 from "picocolors";
 function rulesCommand() {
   return new Command3("rules").description("List lint rules, or show detail for one rule id").argument("[id]", "a rule id, e.g. SK010").option("--json", "machine-readable output").action((id, opts) => {
-    const list = id ? RULES2.filter((r) => r.id.toLowerCase() === id.toLowerCase()) : RULES2;
+    const list = id ? RULES.filter((r) => r.id.toLowerCase() === id.toLowerCase()) : RULES;
     if (id && list.length === 0) {
       console.error(`Unknown rule: ${id}`);
       process.exitCode = 1;
@@ -695,10 +400,11 @@ function rulesCommand() {
   });
 }
 
-// ../cli/src/commands/init.ts
+// src/commands/init.ts
 import { Command as Command4 } from "commander";
 import { mkdirSync, writeFileSync as writeFileSync2, existsSync as existsSync2 } from "fs";
 import { join as join2 } from "path";
+import { slugify } from "@skillmds/core";
 import * as p2 from "@clack/prompts";
 function skillTemplate(name, description, license) {
   const desc = description.trim() || `A skill that helps agents with ${name}.`;
@@ -756,15 +462,15 @@ function initCommand() {
   });
 }
 
-// ../cli/src/commands/search.ts
+// src/commands/search.ts
 import { Command as Command5 } from "commander";
 import pc5 from "picocolors";
 
-// ../cli/src/api.ts
+// src/api.ts
 import { createHash } from "crypto";
-import { stringify as stringifyYaml } from "yaml";
+import { isAllowedSourceUrl } from "@skillmds/core";
 
-// ../cli/src/config.ts
+// src/config.ts
 import { readFileSync as readFileSync2, writeFileSync as writeFileSync3, mkdirSync as mkdirSync2 } from "fs";
 import { homedir as homedir2 } from "os";
 import { join as join3 } from "path";
@@ -791,7 +497,8 @@ function resolveApi(flags = {}) {
   return flags.api || process.env.SKILLMD_API || readConfig().api || DEFAULT_API;
 }
 
-// ../cli/src/api.ts
+// src/api.ts
+import { isAllowedSourceUrl as isAllowedSourceUrl2, reconstructSkillMd, skillMdFor } from "@skillmds/core";
 var IntegrityError = class extends Error {
   integrity = true;
   constructor(message) {
@@ -807,15 +514,6 @@ var RegistryError = class extends Error {
   }
   status;
 };
-var ALLOWED_SOURCE_HOSTS = /* @__PURE__ */ new Set(["raw.githubusercontent.com", "gist.githubusercontent.com"]);
-function isAllowedSourceUrl(u) {
-  try {
-    const parsed = new URL(u);
-    return parsed.protocol === "https:" && ALLOWED_SOURCE_HOSTS.has(parsed.hostname.toLowerCase());
-  } catch {
-    return false;
-  }
-}
 function createClient(flags = {}) {
   const base = resolveApi(flags);
   const token = resolveToken(flags);
@@ -862,20 +560,8 @@ async function fetchBundle(base, slug, token) {
   }
   return out;
 }
-function skillMdFor(skill) {
-  if (skill.raw_md) return skill.raw_md;
-  return reconstructSkillMd(skill);
-}
-function reconstructSkillMd(skill) {
-  const name = skill.slug.split("/")[1] || skill.title;
-  const fm = { name, description: String(skill.description).replace(/\n/g, " ") };
-  if (skill.license) fm.license = skill.license;
-  return `---
-${stringifyYaml(fm)}---
-${skill.body_md || ""}`;
-}
 
-// ../cli/src/commands/search.ts
+// src/commands/search.ts
 var MAX_LINE_WIDTH = 100;
 function formatStars(n) {
   if (n >= 1e6) {
@@ -925,7 +611,7 @@ function searchCommand() {
   });
 }
 
-// ../cli/src/commands/info.ts
+// src/commands/info.ts
 import { Command as Command6 } from "commander";
 import pc6 from "picocolors";
 async function runInfo(slug, flags) {
@@ -974,14 +660,15 @@ function infoCommand() {
   });
 }
 
-// ../cli/src/commands/add.ts
+// src/commands/add.ts
 import { Command as Command7, Option } from "commander";
 import { existsSync as existsSync4 } from "fs";
 import { homedir as homedir4 } from "os";
 import { resolve as resolve3 } from "path";
 import pc7 from "picocolors";
+import { lint as lint2 } from "@skillmds/core";
 
-// ../cli/src/agents.ts
+// src/agents.ts
 import { mkdirSync as mkdirSync3, writeFileSync as writeFileSync4, rmSync as rmSync2, symlinkSync, existsSync as existsSync3, readdirSync as readdirSync2, statSync as statSync2, readFileSync as readFileSync3 } from "fs";
 import { homedir as homedir3 } from "os";
 import { join as join4, resolve as resolve2, dirname as dirname2, sep as sep2 } from "path";
@@ -1106,7 +793,7 @@ function installedSkills(opts = {}) {
   return out;
 }
 
-// ../cli/src/commands/add.ts
+// src/commands/add.ts
 function isLocalish(arg) {
   return arg === "." || arg.startsWith("./") || arg.startsWith("../") || arg.startsWith("/") || /^[a-zA-Z]:[\\/]/.test(arg) || existsSync4(arg);
 }
@@ -1229,7 +916,7 @@ async function runAdd(arg, flags, deps = defaultDeps) {
     dirAgents.set(dir, [...dirAgents.get(dir) ?? [], agentId]);
   }
   for (const c of candidates) {
-    const result = lint(c.raw, { slug: c.slug });
+    const result = lint2(c.raw, { slug: c.slug });
     const allFlags = [.../* @__PURE__ */ new Set([...result.security.flags, ...c.securityFlags ?? []])];
     const deniedFlags = allFlags.filter((f) => deny.has(f));
     if (!flags.skipLint && !result.ok) {
@@ -1271,9 +958,10 @@ function addCommand() {
   });
 }
 
-// ../cli/src/commands/list.ts
+// src/commands/list.ts
 import { Command as Command8 } from "commander";
 import pc8 from "picocolors";
+import { parseSkillMd as parseSkillMd2 } from "@skillmds/core";
 function listCommand() {
   return new Command8("list").alias("ls").description("List installed skills across detected agents").option("-g, --global", "only global skills").option("--json", "machine-readable output").action((opts) => {
     const scope = { global: opts.global };
@@ -1287,7 +975,7 @@ function listCommand() {
       return;
     }
     for (const s of skills) {
-      const parsed = parseSkillMd(s.raw);
+      const parsed = parseSkillMd2(s.raw);
       const desc = "error" in parsed ? pc8.red(`(invalid SKILL.md \u2014 ${parsed.error})`) : pc8.dim(parsed.description.slice(0, 80));
       console.log(`${pc8.bold(s.name)} ${pc8.dim(`[${s.agent}/${s.scope}]`)}
     ${desc}`);
@@ -1295,7 +983,7 @@ function listCommand() {
   });
 }
 
-// ../cli/src/commands/remove.ts
+// src/commands/remove.ts
 import { Command as Command9 } from "commander";
 import { rmSync as rmSync3 } from "fs";
 import pc9 from "picocolors";
@@ -1321,11 +1009,12 @@ function removeCommand() {
   });
 }
 
-// ../cli/src/commands/update.ts
+// src/commands/update.ts
 import { Command as Command10 } from "commander";
 import { writeFileSync as writeFileSync5 } from "fs";
 import { join as join5 } from "path";
 import pc10 from "picocolors";
+import { lint as lint3 } from "@skillmds/core";
 async function runUpdate(names, flags, scope = {}) {
   const { api } = createClient(flags);
   const installed = installedSkills(scope).filter((s) => names.length === 0 || names.includes(s.name));
@@ -1345,7 +1034,7 @@ async function runUpdate(names, flags, scope = {}) {
         lines.push(pc10.dim(`- ${s.name} already up to date`));
         continue;
       }
-      const result = lint(next, { slug: s.name });
+      const result = lint3(next, { slug: s.name });
       if (!result.ok) {
         lines.push(pc10.red(`\u2717 ${s.name} update failed lint \u2014 skipped`));
         continue;
@@ -1372,9 +1061,10 @@ function updateCommand() {
   });
 }
 
-// ../cli/src/commands/publish.ts
+// src/commands/publish.ts
 import { Command as Command11 } from "commander";
 import pc11 from "picocolors";
+import { lint as lint4, toText } from "@skillmds/core";
 var defaultDeps2 = {
   resolve: resolveSource,
   async submit(payload, flags) {
@@ -1390,10 +1080,10 @@ var defaultDeps2 = {
 async function runPublish(target, flags, deps = defaultDeps2) {
   const sources = await deps.resolve(target);
   if (sources.length !== 1) {
-    return { result: lint(""), published: false, exitCode: 1, output: `Expected exactly one SKILL.md, found ${sources.length}.` };
+    return { result: lint4(""), published: false, exitCode: 1, output: `Expected exactly one SKILL.md, found ${sources.length}.` };
   }
   const src = sources[0];
-  const result = lint(src.raw, { slug: src.slug });
+  const result = lint4(src.raw, { slug: src.slug });
   const report = toText([{ file: src.path, result }], { decorate });
   if (!result.ok) {
     return { result, published: false, exitCode: 1, output: `${report}
@@ -1421,7 +1111,7 @@ function publishCommand() {
   });
 }
 
-// ../cli/src/commands/login.ts
+// src/commands/login.ts
 import { Command as Command12 } from "commander";
 import * as p3 from "@clack/prompts";
 function loginCommand() {
@@ -1456,9 +1146,10 @@ function logoutCommand() {
   });
 }
 
-// ../cli/src/commands/interactive.ts
+// src/commands/interactive.ts
 import * as p4 from "@clack/prompts";
 import pc12 from "picocolors";
+import { parseSkillMd as parseSkillMd3 } from "@skillmds/core";
 function bail(v) {
   if (p4.isCancel(v)) {
     p4.cancel("Cancelled.");
@@ -1604,7 +1295,7 @@ async function runInteractive() {
         } else {
           p4.log.message(
             skills.map((sk) => {
-              const parsed = parseSkillMd(sk.raw);
+              const parsed = parseSkillMd3(sk.raw);
               const desc = "error" in parsed ? pc12.red(`(invalid SKILL.md \u2014 ${parsed.error})`) : pc12.dim(parsed.description.slice(0, 70));
               return `${pc12.bold(sk.name)} ${pc12.dim(`[${sk.agent}/${sk.scope}]`)}
   ${desc}`;
@@ -1635,7 +1326,7 @@ async function runInteractive() {
   p4.outro(pc12.dim("skillmd.com"));
 }
 
-// ../cli/src/index.ts
+// src/index.ts
 var version = "0.0.0";
 try {
   version = JSON.parse(readFileSync4(new URL("../package.json", import.meta.url), "utf8")).version;

package/package.json

@@ -1,12 +1,25 @@
 {
   "name": "skillmds",
-  "version": "1.0.20",
+  "version": "1.1.0",
   "description": "SkillMD for agents: the `skillmds` MCP server + the `skillmd` CLI (lint, scan, search, install, publish Agent Skills) from skillmd.com.",
+  "license": "MIT",
+  "author": "SkillMD",
   "type": "module",
+  "mcpName": "com.skillmd/skillmd",
   "bin": {
     "skillmds": "bin/skillmd-mcp.mjs",
     "skillmd": "bin/skillmd.mjs"
   },
+  "files": [
+    "bin",
+    "dist",
+    "assets",
+    "README.md",
+    "CHANGELOG.md"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
   "keywords": [
     "mcp",
     "model-context-protocol",
@@ -23,37 +36,37 @@
     "ai-agents",
     "llm"
   ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/skillmds/skillmd.git",
+    "directory": "packages/skillmds"
+  },
   "homepage": "https://skillmd.com",
   "bugs": {
-    "url": "https://skillmd.com/contact"
+    "url": "https://github.com/skillmds/skillmd/issues"
   },
-  "author": "SkillMD",
-  "license": "MIT",
-  "files": [
-    "bin",
-    "dist",
-    "vendor",
-    "assets",
-    "README.md",
-    "CHANGELOG.md"
-  ],
-  "engines": {
-    "node": ">=18"
+  "publishConfig": {
+    "provenance": true
+  },
+  "scripts": {
+    "build": "tsup",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit",
+    "prepublishOnly": "npm run build"
   },
   "dependencies": {
     "@clack/prompts": "^0.8.0",
     "@modelcontextprotocol/sdk": "^1.13.0",
+    "@skillmds/core": "^1.0.0",
     "commander": "^12.1.0",
-    "giget": "^1.2.0",
+    "giget": "^3.3.0",
     "picocolors": "^1.1.0",
     "yaml": "^2.6.1"
   },
   "devDependencies": {
-    "@skillmd/core": "*",
-    "tsup": "^8.3.0"
-  },
-  "scripts": {
-    "build": "tsup",
-    "prepublishOnly": "tsup"
+    "@types/node": "^22.10.0",
+    "tsup": "^8.3.0",
+    "typescript": "^5.7.2",
+    "vitest": "^2.1.0"
   }
 }