vet-skills 0.7.1 → 0.7.3

package/README.md

@@ -84,7 +84,7 @@ an artifact hash, looked up, and evaluated against your policy before it runs:
 ```
 $ vet-skills check deploy-helper
 Resolving deploy-helper …
-vet-skills 0.7.1 · policy acme/default-strict
+vet-skills 0.7.3 · policy acme/default-strict
 
  BLOCKED  14/100 deploy-helper@2.3.1 · devtools-cloud · 4,210 installs
 

package/dist/index.js

@@ -7910,7 +7910,7 @@ import { mkdirSync, readFileSync, writeFileSync, existsSync, appendFileSync, chm
 import { homedir } from "node:os";
 import { join } from "node:path";
 import { randomUUID } from "node:crypto";
-var VERSION = "0.7.1";
+var VERSION = "0.7.3";
 var HOME = process.env.VET_SKILLS_HOME ?? join(homedir(), ".vet-skills");
 var API = (process.env.KILLERSKILLS_API ?? "https://killerskills.ai").replace(/\/$/, "");
 var CACHE_TTL_MS = 24 * 60 * 60 * 1e3;
@@ -8064,10 +8064,10 @@ async function call(path, init = {}, timeoutMs = 8e3) {
     clearTimeout(t);
   }
 }
-function resolveSkill(q, registry) {
+function resolveSkill(q, registry, surface) {
   const qs = new URLSearchParams({ q });
   if (registry) qs.set("registry", registry);
-  return call(`/api/v1/resolve?${qs}`, { headers: orgHeaders() });
+  return call(`/api/v1/resolve?${qs}`, { headers: { ...orgHeaders(), ...surface ? { "x-vs-surface": surface } : {} } });
 }
 function orgHeaders() {
   const token = readToken();
@@ -8565,7 +8565,7 @@ var TOOLS = [
   }
 ];
 async function checkSkill(name, registry) {
-  const r = await resolveSkill(name, registry);
+  const r = await resolveSkill(name, registry, "mcp");
   if (!r.ok) return r.status === 404 ? `No skill or MCP server named "${name}" is indexed by KillerSkills${registry ? ` in ${registry}` : ""}. Treat it as unvetted.` : `KillerSkills lookup failed (${r.error}). Treat "${name}" as unvetted.`;
   const d = r.data;
   const page = `${API}${d.skill.page}`;
@@ -8587,7 +8587,7 @@ async function checkSkill(name, registry) {
 }
 async function searchSkills(query) {
   try {
-    const res = await fetch(`${API}/api/v1/leaderboard?q=${encodeURIComponent(query)}`, { headers: { accept: "application/json", "user-agent": `vet-skills/${VERSION} mcp` }, signal: AbortSignal.timeout(1e4) });
+    const res = await fetch(`${API}/api/v1/leaderboard?q=${encodeURIComponent(query)}`, { headers: { accept: "application/json", "user-agent": `vet-skills/${VERSION} mcp`, "x-vs-surface": "mcp", "x-vs-client": clientId() }, signal: AbortSignal.timeout(1e4) });
     if (!res.ok) return `Search failed (HTTP ${res.status}).`;
     const d = await res.json();
     if (!d.rows.length) return `Nothing in the KillerSkills index matches "${query}".`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vet-skills",
-  "version": "0.7.1",
+  "version": "0.7.3",
   "mcpName": "io.github.cyligence-karim/killerskills",
   "description": "Vet agent skills and MCP servers before they run, and give your agent the verdicts as an MCP server. Verdicts from KillerSkills, policy from your org.",
   "type": "module",
@@ -34,11 +34,10 @@
   "homepage": "https://killerskills.ai/docs/cli",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/cyligence-karim/killerskills.git",
-    "directory": "packages/cli"
+    "url": "git+https://github.com/cyligence-karim/vet-skills.git"
   },
   "bugs": {
-    "url": "https://github.com/cyligence-karim/killerskills/issues"
+    "url": "https://github.com/cyligence-karim/vet-skills/issues"
   },
   "keywords": [
     "agent-skills",