website-build-skill 0.1.8 → 0.1.10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (9) hide show
  1. package/.claude-plugin/plugin.json +1 -1
  2. package/CHANGELOG.md +16 -0
  3. package/CONTRIBUTING.md +2 -2
  4. package/RELEASING.md +4 -3
  5. package/docs/evidence/content-review.json +6 -6
  6. package/llms.txt +2 -2
  7. package/package.json +1 -1
  8. package/skills/website-build-skill/manifest.json +1 -1
  9. package/src/bundle.mjs +4 -1
package/.claude-plugin/plugin.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "website-build-skill",
3
- "version": "0.1.8",
3
+ "version": "0.1.10",
4
4
  "description": "A skill pack that turns your AI into an expert website builder: current research, design, code, accessibility, speed, SEO and security, alone or as a team.",
5
5
  "author": {
6
6
  "name": "website-build-skill contributors"
package/CHANGELOG.md CHANGED
@@ -6,6 +6,22 @@ Version policy: [Semantic Versioning 2.0.0](https://semver.org/spec/v2.0.0.html)
6
6
 
7
7
  ## [Unreleased]
8
8
 
9
+ ## [0.1.10] - 2026-09-26
10
+
11
+ ### Added
12
+
13
+ - `node scripts/build.mjs --rehash <asset-path> [<asset-path> ...]` refreshes the manifest SHA-256 for only the named canonical assets and prints each old and new digest. It refuses the manifest itself, the archive and unknown paths, and writes nothing on refusal. Plain `node scripts/build.mjs` never changes manifest digests, so an unreviewed edit still fails the source-hash check.
14
+
15
+ ### Changed
16
+
17
+ - CONTRIBUTING and RELEASING name the `--rehash` step for intentional canonical edits.
18
+
19
+ ## [0.1.9] - 2026-09-26
20
+
21
+ ### Fixed
22
+
23
+ - `llms.txt` labels: the manifest entry names what it indexes instead of the bare word "manifest", and a label no longer ends in a colon. A test fails if any catalog label ends in a colon or is a bare asset kind.
24
+
9
25
  ## [0.1.8] - 2026-09-26
10
26
 
11
27
  ### Added
package/CONTRIBUTING.md CHANGED
@@ -10,7 +10,7 @@ Use synthetic fixtures and reserved example domains. Never paste real project tr
10
10
  - Generated files: `docs/bundles/*.md` and `llms.txt`; never hand-edit them.
11
11
  - Team supplement: `adapters/grok.md` supplies the manual fallback appended by the generator.
12
12
  - Archive: preserve the inactive graphics original byte-for-byte. Keep it out of active routes and bundles.
13
- - Digests: after an intentional canonical edit, update only the affected manifest SHA-256 entry, review the diff, then regenerate.
13
+ - Digests: after an intentional canonical edit, run `node scripts/build.mjs --rehash <asset-path> [<asset-path> ...]` for only the edited assets, using paths from manifest `assets[].path` relative to `skills/website-build-skill/`. Review the manifest diff and regenerated bundles. The manifest itself and archive cannot be rehashed.
14
14
  - Claims: changed storefront/reference prose requires an explicit review entry in `docs/evidence/content-review.json`. Do not regenerate that ledger as part of the build.
15
15
  - Evidence: any affirmative test, measurement, publication or compatibility claim needs a repository evidence file with command, environment, date, result and artifact identity. A URL or an invented receipt is insufficient.
16
16
 
@@ -36,7 +36,7 @@ node scripts/check.mjs
36
36
  node --test test/*.test.mjs
37
37
  ```
38
38
 
39
- Build rewrites only the five bundles and the index. Check is read-only and fails on drift.
39
+ Plain build rewrites only the five bundles and the index; `--rehash` also refreshes only the named asset digests. Check is read-only and fails on drift.
40
40
  Tests use synthetic temporary directories inside this checkout or the OS temporary
41
41
  directory and remove them afterward. Live host behaviour is verified by receipts, not
42
42
  by `npm test`; follow the [manual host gate](docs/evaluation/host-gate.md) for each skip.
package/RELEASING.md CHANGED
@@ -22,11 +22,11 @@ push publishes. Creating the GitHub release page stays manual.
22
22
  When `package.json` description changes, update REPO_SETTINGS.md § Description in the same commit and run `gh repo edit https://github.com/aunysillyme/website-build-skill --description "<same string>"`.
23
23
 
24
24
  1. Read the candidate and resolve any source, privacy, claim-review or license defect.
25
- 2. Run `node scripts/build.mjs` to regenerate bundles and the index.
25
+ 2. Run `node scripts/build.mjs` to regenerate bundles and the index; for intentional canonical edits, append `--rehash <asset-path> [<asset-path> ...]` and review the manifest diff.
26
26
  3. Run `node scripts/check.mjs` without rewriting outputs.
27
27
  4. Run `node --test test/*.test.mjs` for rejection cases and valid controls.
28
28
  5. Review the exact candidate with an independent model family before wiring executable changes into live automation.
29
- 6. Update `CHANGELOG.md`, then set the same version in `package.json`, `.claude-plugin/plugin.json` and the manifest's `packageVersion`; the check fails when they disagree.
29
+ 6. Update `CHANGELOG.md`, then set the same version in `package.json`, both version fields of `package-lock.json`, `.claude-plugin/plugin.json` and the manifest's `packageVersion`; the check compares `package.json` with the plugin manifest and `packageVersion`, so bump the lock by hand in the same edit (it sat at 0.1.6 through 0.1.8).
30
30
  7. Commit, then push an immutable `v<version>` tag on that commit. Leave the tag where it is: npm provenance names that exact commit, so a later history rewrite would point the provenance at a commit that no longer exists.
31
31
  8. The workflow re-runs the gates, packs the tarball, installs it in a scratch project, runs the installed entry point, and only then publishes with `--provenance`.
32
32
  9. Wait for the registry, which lagged by roughly a minute on the sibling repository, then complete the verification loop below before recording the release as complete.
@@ -58,8 +58,9 @@ The archive is an immutable input and never an active bundle member.
58
58
 
59
59
  ## Writes
60
60
 
61
- Build writes exactly `docs/bundles/method.md`, `prompts.md`, `playbooks.md`, `checklists.md`,
61
+ Plain build writes exactly `docs/bundles/method.md`, `prompts.md`, `playbooks.md`, `checklists.md`,
62
62
  `team.md` below that same bundle directory, plus root `llms.txt`.
63
+ Explicit `--rehash` also updates only the named asset digests in the canonical manifest when changed.
63
64
  Check writes nothing. Tests create synthetic scratch directories only under `.test-work/` and remove their own directories.
64
65
  The installer writes only its destination, the output root probe it removes, and its receipt.
65
66
  The check workflow has only `contents: read`. The release workflow's publish job adds exactly
package/docs/evidence/content-review.json CHANGED
@@ -10,9 +10,9 @@
10
10
  "disposition": "instructions-and-qualified-status-only"
11
11
  },
12
12
  "CHANGELOG.md": {
13
- "sha256": "0982434d410179d8225d930c551f6874300f8827841c65c2ae8ea7981f6e76a7",
13
+ "sha256": "a8dcd4d35e23c7dc84299b8102437eb76454216f33c2882b7f4dedd8c497c14e",
14
14
  "disposition": "instructions-and-qualified-status-only",
15
- "review": "0.1.2: the installer prompt block became a two-row choice table and one save-location sentence; reviewed by Claude against install-choice.txt and SKILL.md, same facts. Reviewed the added 0.1.1 framing note against the presentation copy changes; publication is a separate release action. Implementation-agent editorial review; independent review remains pending. Reviewed the copied-install checker ladder fix against the canonical instructions and regression test. Live host retrial remains pending release. Reviewed for the ROUND 1 audit: added Fixed/Added/Changed lines for the restored positive-and-accurate adapter, SKILL.md, designer.md, grok.md and validate.mjs fixes. Claude (builder, non-author fixer) editorial review; independent review remains pending. 0.1.3: reviewed the #13 description check and #14 Hermes path documentation entries against the implementation and regression tests; publication remains a separate maintainer action. Implementation-agent editorial review; independent review remains pending. 0.1.4: reviewed the added coding-research description and fourteen-domain wording against the canonical prompts and checklists; package release remains a separate maintainer action. Implementation-agent editorial review; independent review remains pending. Reviewed #16 manual-gate instructions against the explicit skips, packed consumer test and configured OS matrix; reviewed #17 TEAM wording against file-only installation and human session/handoff responsibilities. Implementation-agent editorial review only; host trials and independent review remain pending. Reviewed the #15 Fixed line for the symlinked-parent receipt path against src/install.mjs and installer tests 7e-7g, and the #15 Added line against the two receipts. 0.1.5 (#15): host-status wording promoted only for SOLO native loading on the exact client versions in the 2026-09-24 receipts; Claude (orchestrator, ran both trials) editorial review, independent review remains pending. 0.1.5 release heading moved the Unreleased lines under [0.1.5] - 2026-09-24 unchanged. 0.1.6 (#15): Grok Build CLI 1.0.40 SOLO native-loading receipt added; wording promoted only for that client, in a trusted folder, one run; Grok Bot (Bots app) stays awaiting its trial. Claude (orchestrator, ran the trial) editorial review, independent review remains pending. 0.1.7: Grok Bot setup and one-description entries reviewed against the diff. Claude editorial review. 0.1.8: reviewed the Added lines against the committed BM05, CQ06, B08, prompt 04 and PROVENANCE.md diff; every named tell, default and credit matches the checklist text. Claude editorial review; the change itself had an independent codex audit (CLEAN)."
15
+ "review": "0.1.2: the installer prompt block became a two-row choice table and one save-location sentence; reviewed by Claude against install-choice.txt and SKILL.md, same facts. Reviewed the added 0.1.1 framing note against the presentation copy changes; publication is a separate release action. Implementation-agent editorial review; independent review remains pending. Reviewed the copied-install checker ladder fix against the canonical instructions and regression test. Live host retrial remains pending release. Reviewed for the ROUND 1 audit: added Fixed/Added/Changed lines for the restored positive-and-accurate adapter, SKILL.md, designer.md, grok.md and validate.mjs fixes. Claude (builder, non-author fixer) editorial review; independent review remains pending. 0.1.3: reviewed the #13 description check and #14 Hermes path documentation entries against the implementation and regression tests; publication remains a separate maintainer action. Implementation-agent editorial review; independent review remains pending. 0.1.4: reviewed the added coding-research description and fourteen-domain wording against the canonical prompts and checklists; package release remains a separate maintainer action. Implementation-agent editorial review; independent review remains pending. Reviewed #16 manual-gate instructions against the explicit skips, packed consumer test and configured OS matrix; reviewed #17 TEAM wording against file-only installation and human session/handoff responsibilities. Implementation-agent editorial review only; host trials and independent review remain pending. Reviewed the #15 Fixed line for the symlinked-parent receipt path against src/install.mjs and installer tests 7e-7g, and the #15 Added line against the two receipts. 0.1.5 (#15): host-status wording promoted only for SOLO native loading on the exact client versions in the 2026-09-24 receipts; Claude (orchestrator, ran both trials) editorial review, independent review remains pending. 0.1.5 release heading moved the Unreleased lines under [0.1.5] - 2026-09-24 unchanged. 0.1.6 (#15): Grok Build CLI 1.0.40 SOLO native-loading receipt added; wording promoted only for that client, in a trusted folder, one run; Grok Bot (Bots app) stays awaiting its trial. Claude (orchestrator, ran the trial) editorial review, independent review remains pending. 0.1.7: Grok Bot setup and one-description entries reviewed against the diff. Claude editorial review. 0.1.8: reviewed the Added lines against the committed BM05, CQ06, B08, prompt 04 and PROVENANCE.md diff; every named tell, default and credit matches the checklist text. Claude editorial review; the change itself had an independent codex audit (CLEAN). 0.1.9: reviewed the Fixed line against the src/bundle.mjs describe() diff, the regenerated llms.txt lines 19 and 21 and test/llms-labels.test.mjs. Claude editorial review; the change had an independent codex audit (CLEAN). 0.1.10: reviewed the Added and Changed lines against scripts/build.mjs --rehash, its tests and the CONTRIBUTING/RELEASING diff; the claims match (code-reviewer audit CLEAN)."
16
16
  },
17
17
  "CLAUDE.md": {
18
18
  "sha256": "4bc19853ddcdea0b2b751f82fba1d7c2451d2ae42f173dba1da2f6035df6e464",
@@ -38,9 +38,9 @@
38
38
  "disposition": "instructions-and-qualified-status-only"
39
39
  },
40
40
  "CONTRIBUTING.md": {
41
- "sha256": "f72ebfa07c6a23bb06778c708633b31b2628f2d287b3d02e3248f72ce88fe1e7",
41
+ "sha256": "ff672ae1445219685445fa0a8438325c4047418f9d0ae0a17b08ee3e54988b49",
42
42
  "disposition": "instructions-and-qualified-status-only",
43
- "review": "Reviewed #16 manual-gate instructions against the explicit skips, packed consumer test and configured OS matrix; reviewed #17 TEAM wording against file-only installation and human session/handoff responsibilities. Implementation-agent editorial review only; host trials and independent review remain pending."
43
+ "review": "Reviewed #16 manual-gate instructions against the explicit skips, packed consumer test and configured OS matrix; reviewed #17 TEAM wording against file-only installation and human session/handoff responsibilities. Implementation-agent editorial review only; host trials and independent review remain pending. Reviewed the Digests line and the build note against scripts/build.mjs --rehash: named assets only, manifest and archive refused, write only on change; the review-the-diff step is kept. Claude editorial review; code audited separately by another model family."
44
44
  },
45
45
  "MAINTAINERS.md": {
46
46
  "sha256": "8632008661d5ad3d60300ea2028715217c298d24d3d66af7224c52b6e0e24552",
@@ -66,9 +66,9 @@
66
66
  ]
67
67
  },
68
68
  "RELEASING.md": {
69
- "sha256": "7e89b30d20fef7570fc0485f80844c651a861a18956efd43e1555967f3e8dde4",
69
+ "sha256": "bf1e8205d309d906b225b6bc76a5fb09012f6068ddaf0e64cc8fe406f726c6e4",
70
70
  "disposition": "instructions-and-qualified-status-only",
71
- "review": "0.1.3: reviewed the same-commit description update and explicit GitHub command against the task specification; no live repository setting was changed in this offline implementation pass. Implementation-agent editorial review; independent review remains pending. The command uses the exact repository URL to preserve the existing privacy allowance for public repository references."
71
+ "review": "0.1.3: reviewed the same-commit description update and explicit GitHub command against the task specification; no live repository setting was changed in this offline implementation pass. Implementation-agent editorial review; independent review remains pending. The command uses the exact repository URL to preserve the existing privacy allowance for public repository references. 0.1.9: step 6 now names both package-lock.json version fields, matching vault 05_how_we_build_repos 6.2; the lock had stayed at 0.1.6 through 0.1.8. Claude editorial review against scripts/check.mjs version comparison. Reviewed step 2 and the Writes section against scripts/build.mjs --rehash; plain build still writes only bundles and llms.txt. Claude editorial review; code audited separately by another model family."
72
72
  },
73
73
  "REPO_SETTINGS.md": {
74
74
  "sha256": "4460fa8f5379df2991fc11eb55ba7ae6319ca66acc5a2f8702b3b64b6847d967",
package/llms.txt CHANGED
@@ -16,9 +16,9 @@ TEAM: one command installs the seven workers' files; you open each session yours
16
16
  ## Active sources
17
17
 
18
18
  - [SKILL.md](skills/website-build-skill/SKILL.md): Website Build Skill
19
- - [manifest.json](skills/website-build-skill/manifest.json): manifest
19
+ - [manifest.json](skills/website-build-skill/manifest.json): Index of all 57 skill assets with kind, version and bundles, plus the stage gates
20
20
  - [prompts/00-start.md](skills/website-build-skill/prompts/00-start.md): Help me build a website using Research. Learn. Ingest. Execute: Match. Mock. Build. Pro...
21
- - [prompts/01-website-deep-research.md](skills/website-build-skill/prompts/01-website-deep-research.md): Deep Research prompt to make your agent good at building websites:
21
+ - [prompts/01-website-deep-research.md](skills/website-build-skill/prompts/01-website-deep-research.md): Deep Research prompt to make your agent good at building websites
22
22
  - [prompts/03-extract-brand-kit.md](skills/website-build-skill/prompts/03-extract-brand-kit.md): Turn my approved materials into a brand kit that a website builder can use and test.
23
23
  - [prompts/04-three-mockups.md](skills/website-build-skill/prompts/04-three-mockups.md): Show me three visual mockups for this website before writing any website code.
24
24
  - [prompts/05-stack-and-build.md](skills/website-build-skill/prompts/05-stack-and-build.md): Build the selected design using the smallest stack that meets the approved brief.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "website-build-skill",
3
- "version": "0.1.8",
3
+ "version": "0.1.10",
4
4
  "description": "A skill pack that turns your AI into an expert website builder: current research, design, code, accessibility, speed, SEO and security, alone or as a team.",
5
5
  "type": "module",
6
6
  "license": "MIT",
package/skills/website-build-skill/manifest.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "schemaVersion": 1,
3
- "packageVersion": "0.1.8",
3
+ "packageVersion": "0.1.10",
4
4
  "skillName": "website-build-skill",
5
5
  "pathBase": "All asset paths resolve from this manifest directory; runtime paths resolve in the authorized user project.",
6
6
  "assets": [
package/src/bundle.mjs CHANGED
@@ -69,7 +69,8 @@ export function rebase(text, source, target) {
69
69
  // only falls back to the bare asset kind when nothing readable is found. Never hand-write
70
70
  // this text in llms.txt itself: it is derived here so the catalog stays truthful as files change.
71
71
  export function describe(root, asset) {
72
- const truncate = s => s.length > 90 ? s.slice(0, 87).trimEnd() + '...' : s;
72
+ // A label ending in a colon reads as a cut-off lead-in in the catalog, so it is dropped.
73
+ const truncate = s => (s.length > 90 ? s.slice(0, 87).trimEnd() + '...' : s).replace(/:\s*$/, '');
73
74
  const plain = s => s.replace(/\[([^\]]+)\]\([^)]*\)/g, '$1').replace(/[`*_]/g, '').trim();
74
75
  // Several role/prompt files open with the same shared ASK DATE preamble, so it names the
75
76
  // convention every file follows rather than what that specific file teaches. Skip it when
@@ -79,6 +80,8 @@ export function describe(root, asset) {
79
80
  try {
80
81
  const data = JSON.parse(read(root, `${CORE}/${asset.path}`));
81
82
  if (typeof data.description === 'string' && data.description.trim()) return truncate(plain(data.description));
83
+ // The skill manifest carries no description field; name what it indexes instead of its kind.
84
+ if (Array.isArray(data.assets)) return `Index of all ${data.assets.length} skill assets with kind, version and bundles, plus the stage gates`;
82
85
  } catch { /* not readable JSON; fall through to kind */ }
83
86
  return asset.kind;
84
87
  }