skillvault 0.5.1 → 0.5.3

package/dist/cli.js

@@ -20,7 +20,7 @@
 import { existsSync, readFileSync, writeFileSync, mkdirSync, readdirSync, rmSync } from 'node:fs';
 import { join } from 'node:path';
 import { createDecipheriv, createPublicKey, diffieHellman, hkdfSync, generateKeyPairSync, } from 'node:crypto';
-const VERSION = '0.5.1';
+const VERSION = '0.5.3';
 const HOME = process.env.HOME || process.env.USERPROFILE || '~';
 const API_URL = process.env.SKILLVAULT_API_URL || 'https://api.getskillvault.com';
 const CONFIG_DIR = join(HOME, '.skillvault');
@@ -479,14 +479,60 @@ async function installSkillStubs() {
                     meta = JSON.parse(readFileSync(metaPath, 'utf8'));
             }
             catch { }
+            // Decrypt vault to extract frontmatter (name, description, triggers)
+            // The frontmatter is the "public storefront" — body stays encrypted
+            let frontmatter = '';
+            let frontmatterFields = {};
+            try {
+                const cek = await fetchCEK(skillName, pub.token);
+                const vaultData = readFileSync(vaultPath);
+                const vault = decryptVault(vaultData, cek);
+                cek.fill(0);
+                const skillMd = vault.files.find(f => f.path === 'SKILL.md');
+                if (skillMd) {
+                    const fmMatch = skillMd.content.match(/^---\n([\s\S]*?)\n---/);
+                    if (fmMatch) {
+                        frontmatter = fmMatch[1];
+                        // Parse YAML-like frontmatter fields
+                        for (const line of frontmatter.split('\n')) {
+                            const kv = line.match(/^(\S+):\s*(.+)$/);
+                            if (kv)
+                                frontmatterFields[kv[1]] = kv[2].replace(/^["']|["']$/g, '');
+                        }
+                    }
+                }
+            }
+            catch {
+                // If decrypt fails during stub install (e.g. offline), fall back to meta
+            }
+            const stubName = frontmatterFields['name'] || skillName;
+            const stubDescription = frontmatterFields['description'] || meta.description || '';
+            // Build frontmatter for stub — copy all fields except body-related ones
+            let stubFrontmatter = `name: ${stubName}\n`;
+            stubFrontmatter += `description: "${stubDescription.replace(/"/g, '\\"')}"\n`;
+            // Preserve publisher's allowed-tools, trigger config, etc. but always include our load tool
+            const publisherAllowedTools = frontmatterFields['allowed-tools'] || '';
+            const loadTool = `"Bash(npx skillvault@${VERSION} --load *)"`;
+            if (publisherAllowedTools && !publisherAllowedTools.includes('skillvault')) {
+                // Merge publisher's allowed-tools with ours
+                const merged = publisherAllowedTools.replace(/\]$/, `, ${loadTool}]`);
+                stubFrontmatter += `allowed-tools: ${merged}\n`;
+            }
+            else {
+                stubFrontmatter += `allowed-tools: [${loadTool}]\n`;
+            }
+            // Copy through other frontmatter fields the publisher set (for Claude triggering)
+            for (const [key, value] of Object.entries(frontmatterFields)) {
+                if (!['name', 'description', 'allowed-tools'].includes(key)) {
+                    stubFrontmatter += `${key}: ${value}\n`;
+                }
+            }
             mkdirSync(skillDir, { recursive: true });
             const stub = `---
-name: ${skillName}
-description: "${(meta.description || '').replace(/"/g, '\\"')}"
-allowed-tools: ["Bash(npx skillvault@${VERSION} --load *)"]
+${stubFrontmatter.trimEnd()}
 ---
 
-# ${skillName}
+# ${stubName}
 
 This is an encrypted SkillVault skill from **${meta.publisher_name || pub.name}**.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skillvault",
-  "version": "0.5.1",
+  "version": "0.5.3",
   "description": "SkillVault — secure skill distribution for Claude Code",
   "type": "module",
   "bin": {