vskill 0.5.138 → 0.5.139

package/README.md

@@ -18,8 +18,8 @@
 <br/>
 
 ```bash
-npx vskill studio        # open the local IDE for AI skills
-npx vskill install remotion-best-practices
+npx vskill@latest studio        # open the local IDE for AI skills
+npx vskill@latest install remotion-best-practices
 ```
 
 <br/>
@@ -40,7 +40,7 @@ vskill is built around three problems:
 ## Skill Studio — the local IDE for skills
 
 ```bash
-npx vskill studio
+npx vskill@latest studio
 ```
 
 A localhost workbench opens at a deterministic per-project port. You can:
@@ -77,13 +77,13 @@ Every install runs the full pipeline. SARIF v2.1.0 output is available for CI (`
 
 ```bash
 # Install one skill
-npx vskill install remotion-dev/skills/remotion-best-practices
+npx vskill@latest install remotion-dev/skills/remotion-best-practices
 
 # Browse a repo, pick interactively
-npx vskill install remotion-dev/skills
+npx vskill@latest install remotion-dev/skills
 
 # Install a Claude Code plugin (full domain bundle)
-npx vskill install --repo anton-abyzov/vskill --plugin frontend
+npx vskill@latest install --repo anton-abyzov/vskill --plugin frontend
 ```
 
 Install globally for repeat use: `npm i -g vskill`
@@ -115,7 +115,7 @@ Install globally for repeat use: `npm i -g vskill`
 | **easychamp** | tournament-manager |
 | **productivity** | survey-passing |
 
-Install all eight: `npx vskill install --repo anton-abyzov/vskill --all`
+Install all eight: `npx vskill@latest install --repo anton-abyzov/vskill --all`
 
 Browse the full catalog → [verified-skill.com/docs/plugins](https://verified-skill.com/docs/plugins)
 
@@ -124,15 +124,15 @@ Browse the full catalog → [verified-skill.com/docs/plugins](https://verified-s
 ## Commands you'll actually use
 
 ```bash
-vskill studio                          # open local IDE
-vskill install <skill-or-plugin>       # install with full security scan
-vskill find <query>                    # search verified-skill.com registry
-vskill list --installed                # what's installed where
-vskill diff <skill> v1 v2              # compare versions before upgrading
-vskill skill new                       # create a new skill (AI-assisted)
-vskill eval sweep <skill>              # benchmark across models
-vskill audit --ci                      # SARIF v2.1.0 for CI
-vskill keys set anthropic              # store API keys in ~/.vskill/keys.env
+npx vskill@latest studio               # open local IDE
+npx vskill@latest install <skill>      # install with full security scan
+npx vskill@latest find <query>         # search verified-skill.com registry
+npx vskill@latest list --installed     # what's installed where
+npx vskill@latest diff <skill> v1 v2   # compare versions before upgrading
+npx vskill@latest skill new            # create a new skill (AI-assisted)
+npx vskill@latest eval sweep <skill>   # benchmark across models
+npx vskill@latest audit --ci           # SARIF v2.1.0 for CI
+npx vskill@latest keys set anthropic   # store API keys in ~/.vskill/keys.env
 ```
 
 Full reference → [verified-skill.com/docs/cli-reference](https://verified-skill.com/docs/cli-reference)

package/agents.json

@@ -1,6 +1,6 @@
 {
   "version": 1,
-  "generatedAt": "2026-04-26T17:43:52.006Z",
+  "generatedAt": "2026-04-26T18:37:09.719Z",
   "agentPrefixes": [
     ".adal",
     ".agent",

package/dist/eval-server/api-routes.js

@@ -14,7 +14,7 @@ import { resolveSkillApiName as resolveSkillApiNameImpl } from "./skill-name-res
 import { runBenchmarkSSE, runSingleCaseSSE } from "./benchmark-runner.js";
 import { getSkillSemaphore } from "./concurrency.js";
 import { resolveSkillDir, resolveAllowedSkillDir } from "./skill-resolver.js";
-import { setSkillDirEntry } from "./skill-dir-registry.js";
+import { setSkillDirEntry, ensurePluginCacheEntry } from "./skill-dir-registry.js";
 import { pickInstalledVersion, readSkillMd, sha256Hex, } from "./installed-version.js";
 import { extractFrontmatterVersion } from "../utils/version.js";
 import { classifyOrigin, scanSkillsTriScope, dedupeByDir } from "../eval/skill-scanner.js";
@@ -1876,12 +1876,20 @@ export function registerRoutes(router, root, projectName) {
             join(home, ".claude/skills"),
         ];
     };
-    const resolveSkillDirForFsRoute = (plugin, skill) => resolveAllowedSkillDir(root, plugin, skill, skillFsAllowedRoots());
+    // 0769 F-002: cold-server deep links to /api/skills/:plugin/:skill/files (or
+    // /file) hit the route before the user has visited /api/skills, so the
+    // SkillDirRegistry hasn't been populated yet. Lazy-fill it on registry miss
+    // by running scanInstalledPluginSkills once. Subsequent calls hit the fast
+    // path via setSkillDirEntry inside ensurePluginCacheEntry.
+    const resolveSkillDirForFsRoute = async (plugin, skill) => {
+        await ensurePluginCacheEntry(plugin, skill);
+        return resolveAllowedSkillDir(root, plugin, skill, skillFsAllowedRoots());
+    };
     // Get skill detail
     router.get("/api/skills/:plugin/:skill", async (req, res, params) => {
         let skillDir;
         try {
-            skillDir = resolveSkillDirForFsRoute(params.plugin, params.skill);
+            skillDir = await resolveSkillDirForFsRoute(params.plugin, params.skill);
         }
         catch (err) {
             sendJson(res, { error: err.message }, 400, req);
@@ -1899,7 +1907,7 @@ export function registerRoutes(router, root, projectName) {
     router.get("/api/skills/:plugin/:skill/files", async (req, res, params) => {
         let skillDir;
         try {
-            skillDir = resolveSkillDirForFsRoute(params.plugin, params.skill);
+            skillDir = await resolveSkillDirForFsRoute(params.plugin, params.skill);
         }
         catch (err) {
             sendJson(res, { error: err.message }, 400, req);
@@ -1960,7 +1968,7 @@ export function registerRoutes(router, root, projectName) {
     router.get("/api/skills/:plugin/:skill/file", async (req, res, params) => {
         let skillDir;
         try {
-            skillDir = resolveSkillDirForFsRoute(params.plugin, params.skill);
+            skillDir = await resolveSkillDirForFsRoute(params.plugin, params.skill);
         }
         catch (err) {
             sendJson(res, { error: err.message }, 400, req);