{"_id":"skill-publish","_rev":"12-60fd09d1aa15d686ff526cc78c86eb39","name":"skill-publish","dist-tags":{"latest":"1.0.13"},"versions":{"1.0.0":{"name":"skill-publish","version":"1.0.0","keywords":["hcs-26","skill-registry","registry-broker","hedera","cli","github-action"],"author":{"name":"Hashgraph Online","email":"hello@hashgraphonline.com"},"license":"Apache-2.0","_id":"skill-publish@1.0.0","maintainers":[{"name":"kantorcodes","email":"kantorcodes@gmail.com"}],"homepage":"https://github.com/hashgraph-online/skill-publish#readme","bugs":{"url":"https://github.com/hashgraph-online/skill-publish/issues"},"bin":{"skill-publish":"bin/cli.mjs"},"dist":{"shasum":"3dee58f6bf92866c5a8e12625d285a092a9e7376","tarball":"https://registry.npmjs.org/skill-publish/-/skill-publish-1.0.0.tgz","fileCount":13,"integrity":"sha512-ZAWft50G+KN09bPOfBrNFnQ3/FVFyNKdxMZAh38N6JUIVcutiI5hWR45QR8FCo72FFdLsj38Ubb+eKn1di0hWw==","signatures":[{"sig":"MEQCIBBr6Q+d+SBnnX8yQab+11hTuNEsIxQz/mJuBfs+fd3zAiBBbk4VyJ3Jw5EMTn5AMwDLhaZDgFpxFL4A82RQzimLLA==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":52446},"type":"module","engines":{"node":">=20"},"gitHead":"ec6f7113303061f2ec15a09afef8163c2c1a0686","scripts":{"lint":"node --check entrypoint.mjs && node --check bin/cli.mjs","smoke:help":"node bin/cli.mjs --help"},"_npmUser":{"name":"kantorcodes","email":"kantorcodes@gmail.com"},"repository":{"url":"git+https://github.com/hashgraph-online/skill-publish.git","type":"git"},"_npmVersion":"11.6.2","description":"Publish trustless, immutable, on-chain skill releases via the Hashgraph Online Registry Broker.","directories":{},"_nodeVersion":"25.2.1","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/skill-publish_1.0.0_1772720774341_0.6177016519473335","host":"s3://npm-registry-packages-npm-production"}},"1.0.1":{"name":"skill-publish","version":"1.0.1","keywords":["hashgraph-online","hcs-26","skill-registry","registry-broker","hedera","cli","github-action","github-actions","ci-cd","publish-skill","agent-skill","ai-skills","skill-publish","immutable-releases","on-chain-publishing","skill-release-automation"],"author":{"name":"Hashgraph Online","email":"hello@hashgraphonline.com"},"license":"Apache-2.0","_id":"skill-publish@1.0.1","maintainers":[{"name":"kantorcodes","email":"kantorcodes@gmail.com"}],"homepage":"https://hol.org/registry/skills/publish","bugs":{"url":"https://github.com/hashgraph-online/skill-publish/issues"},"bin":{"skill-publish":"bin/cli.mjs"},"dist":{"shasum":"71c48d0c4731b1332eb991aa91581bee74158a01","tarball":"https://registry.npmjs.org/skill-publish/-/skill-publish-1.0.1.tgz","fileCount":32,"integrity":"sha512-psEOX/CXtUy8tVh5x0i2psxNYBfXTI2Urhw71JDcCBRJdZQ8qzxzpa6L5BIZnhddK+JpsRpzF9og7qG9sgqyNA==","signatures":[{"sig":"MEUCICSbAXe3HAvNHrFhfs/C9HyCpCcZ+bVnsEwBibrvifmpAiEA1tvmN+V3Ra0tW/IrS2liI4dQb+23iY24cwkGCtuTp88=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/skill-publish@1.0.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":204479},"pnpm":{"overrides":{"bn.js":"5.2.3","elliptic":"npm:@soatok/elliptic-to-noble@9999.0.0"}},"type":"module","engines":{"node":">=20"},"funding":{"url":"https://github.com/sponsors/hashgraph-online","type":"individual"},"gitHead":"183f754d933e403051b3b36b13923aa4509ee508","scripts":{"lint":"node --check entrypoint.mjs && node --check bin/cli.mjs && node --check bin/lib/broker-api.mjs && node --check bin/lib/create-command.mjs && node --check bin/lib/credential-store.mjs && node --check bin/lib/setup-command.mjs && node --check bin/lib/account-commands.mjs && node --check bin/lib/local-commands.mjs && node --check bin/lib/doctor-command.mjs && node --check bin/lib/start-command.mjs && node --check bin/lib/cli-help.mjs && node --check bin/lib/repo-commands.mjs && node --check bin/lib/package-files.mjs && node --check bin/lib/skill-package.mjs && node --check bin/lib/skill-presets.mjs && node --check bin/lib/distribution-kit.mjs && node --check bin/lib/distribution-commands.mjs && node --check bin/lib/codemeta.mjs && node --check bin/lib/indexnow.mjs && node --check bin/lib/apply-distribution-kit.mjs","smoke:fund":"node bin/cli.mjs fund --help","smoke:help":"node bin/cli.mjs --help","smoke:badge":"node bin/cli.mjs badge --help","smoke:start":"node bin/cli.mjs start --non-interactive","smoke:create":"node bin/cli.mjs create --help","smoke:doctor":"node bin/cli.mjs doctor --json","smoke:whoami":"node bin/cli.mjs whoami --help","smoke:credits":"node bin/cli.mjs credits --help","smoke:apply-kit":"node bin/cli.mjs apply-kit --help","smoke:install-url":"node bin/cli.mjs install-url --help","smoke:attested-kit":"node bin/cli.mjs attested-kit --help","smoke:setup-action":"node bin/cli.mjs setup-action --help","smoke:scaffold-repo":"node bin/cli.mjs scaffold-repo --help","smoke:submit-indexnow":"node bin/cli.mjs submit-indexnow --help"},"_npmUser":{"name":"kantorcodes","email":"kantorcodes@gmail.com"},"repository":{"url":"git+https://github.com/hashgraph-online/skill-publish.git","type":"git"},"_npmVersion":"10.8.2","description":"Publish trustless, immutable, on-chain skill releases via the HOL Registry Broker.","directories":{},"_nodeVersion":"20.20.0","dependencies":{"picocolors":"^1.1.1","@hashgraph/sdk":"^2.78.0"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/skill-publish_1.0.1_1772975221236_0.36286340881972423","host":"s3://npm-registry-packages-npm-production"}},"1.0.2":{"name":"skill-publish","version":"1.0.2","keywords":["hashgraph-online","hcs-26","skill-registry","registry-broker","hedera","cli","github-action","github-actions","ci-cd","publish-skill","agent-skill","ai-skills","skill-publish","immutable-releases","on-chain-publishing","skill-release-automation"],"author":{"name":"Hashgraph Online","email":"hello@hashgraphonline.com"},"license":"Apache-2.0","_id":"skill-publish@1.0.2","maintainers":[{"name":"kantorcodes","email":"kantorcodes@gmail.com"}],"homepage":"https://hol.org/registry/skills/publish","bugs":{"url":"https://github.com/hashgraph-online/skill-publish/issues"},"bin":{"skill-publish":"bin/cli.mjs"},"dist":{"shasum":"0e0927cc0616c5a48b283b959831a6afe4e8986f","tarball":"https://registry.npmjs.org/skill-publish/-/skill-publish-1.0.2.tgz","fileCount":32,"integrity":"sha512-4/WpUYxdfsRTHGvmL/MjlMHENL0kVMkZeM3z7PlRSnrpDs8F9GQ9IvbvjCTfQgH4rHhYfwLk93A8aUI4bPsJsQ==","signatures":[{"sig":"MEQCIGkN8g9MP1V2igXN063ApBrhjdGl8/0I2CbpZ70ekF67AiAeDgkcSbUwj4B1Wiqf3e9jsQfyXl7YL3qezpkC8euBxQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/skill-publish@1.0.2","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":204557},"pnpm":{"overrides":{"bn.js":"5.2.3","elliptic":"npm:@soatok/elliptic-to-noble@9999.0.0"}},"type":"module","engines":{"node":">=20"},"funding":{"url":"https://github.com/sponsors/hashgraph-online","type":"individual"},"gitHead":"de634becbce9c43c60443ee00ad35ec58c3f7b04","scripts":{"lint":"node --check entrypoint.mjs && node --check bin/cli.mjs && node --check bin/lib/broker-api.mjs && node --check bin/lib/create-command.mjs && node --check bin/lib/credential-store.mjs && node --check bin/lib/setup-command.mjs && node --check bin/lib/account-commands.mjs && node --check bin/lib/local-commands.mjs && node --check bin/lib/doctor-command.mjs && node --check bin/lib/start-command.mjs && node --check bin/lib/cli-help.mjs && node --check bin/lib/repo-commands.mjs && node --check bin/lib/package-files.mjs && node --check bin/lib/skill-package.mjs && node --check bin/lib/skill-presets.mjs && node --check bin/lib/distribution-kit.mjs && node --check bin/lib/distribution-commands.mjs && node --check bin/lib/codemeta.mjs && node --check bin/lib/indexnow.mjs && node --check bin/lib/apply-distribution-kit.mjs","smoke:fund":"node bin/cli.mjs fund --help","smoke:help":"node bin/cli.mjs --help","smoke:badge":"node bin/cli.mjs badge --help","smoke:start":"node bin/cli.mjs start --non-interactive","smoke:create":"node bin/cli.mjs create --help","smoke:doctor":"node bin/cli.mjs doctor --json","smoke:whoami":"node bin/cli.mjs whoami --help","smoke:credits":"node bin/cli.mjs credits --help","smoke:apply-kit":"node bin/cli.mjs apply-kit --help","smoke:install-url":"node bin/cli.mjs install-url --help","smoke:attested-kit":"node bin/cli.mjs attested-kit --help","smoke:setup-action":"node bin/cli.mjs setup-action --help","test:package-files":"node test/package-files.test.mjs","smoke:scaffold-repo":"node bin/cli.mjs scaffold-repo --help","smoke:submit-indexnow":"node bin/cli.mjs submit-indexnow --help"},"_npmUser":{"name":"kantorcodes","email":"kantorcodes@gmail.com"},"repository":{"url":"git+https://github.com/hashgraph-online/skill-publish.git","type":"git"},"_npmVersion":"10.8.2","description":"Publish trustless, immutable, on-chain skill releases via the HOL Registry Broker.","directories":{},"_nodeVersion":"20.20.0","dependencies":{"picocolors":"^1.1.1","@hashgraph/sdk":"^2.78.0"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/skill-publish_1.0.2_1773053122989_0.28671297954088937","host":"s3://npm-registry-packages-npm-production"}},"1.0.3":{"name":"skill-publish","version":"1.0.3","keywords":["hashgraph-online","hcs-26","skill-registry","registry-broker","hedera","cli","github-action","github-actions","ci-cd","publish-skill","agent-skill","ai-skills","skill-publish","immutable-releases","on-chain-publishing","skill-release-automation"],"author":{"name":"Hashgraph Online","email":"hello@hashgraphonline.com"},"license":"Apache-2.0","_id":"skill-publish@1.0.3","maintainers":[{"name":"kantorcodes","email":"kantorcodes@gmail.com"}],"homepage":"https://hol.org/registry/skills/publish","bugs":{"url":"https://github.com/hashgraph-online/skill-publish/issues"},"bin":{"skill-publish":"bin/cli.mjs"},"dist":{"shasum":"f313709c376e3773feae2e2042ca50bbc90d5125","tarball":"https://registry.npmjs.org/skill-publish/-/skill-publish-1.0.3.tgz","fileCount":32,"integrity":"sha512-xs0tj8HmQZ1TuStwoYrzK9TPxql2uJjB99jj9YtNiBz6dzP63lyqzGai2eQZhiZruv8kzkY6OKVjR7aHxV6fiw==","signatures":[{"sig":"MEYCIQCJ8RETtrtyqB0YnwGsuhZS8fuOFls230eQKim9cJTOPQIhAOGuzZj3FNYgsIrQIYS+1o0LNKCE5L5RpC9Jce5jNPDH","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/skill-publish@1.0.3","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":204590},"pnpm":{"overrides":{"bn.js":"5.2.3","elliptic":"npm:@soatok/elliptic-to-noble@9999.0.0"}},"type":"module","engines":{"node":">=20"},"funding":{"url":"https://github.com/sponsors/hashgraph-online","type":"individual"},"gitHead":"c182a4aa4dba68fb7f3c01be4ca560dfb759ae9e","scripts":{"lint":"node --check entrypoint.mjs && node --check bin/cli.mjs && node --check bin/lib/broker-api.mjs && node --check bin/lib/create-command.mjs && node --check bin/lib/credential-store.mjs && node --check bin/lib/setup-command.mjs && node --check bin/lib/account-commands.mjs && node --check bin/lib/local-commands.mjs && node --check bin/lib/doctor-command.mjs && node --check bin/lib/start-command.mjs && node --check bin/lib/cli-help.mjs && node --check bin/lib/repo-commands.mjs && node --check bin/lib/package-files.mjs && node --check bin/lib/skill-package.mjs && node --check bin/lib/skill-presets.mjs && node --check bin/lib/distribution-kit.mjs && node --check bin/lib/distribution-commands.mjs && node --check bin/lib/codemeta.mjs && node --check bin/lib/indexnow.mjs && node --check bin/lib/apply-distribution-kit.mjs","smoke:fund":"node bin/cli.mjs fund --help","smoke:help":"node bin/cli.mjs --help","smoke:badge":"node bin/cli.mjs badge --help","smoke:start":"node bin/cli.mjs start --non-interactive","smoke:create":"node bin/cli.mjs create --help","smoke:doctor":"node bin/cli.mjs doctor --json","smoke:whoami":"node bin/cli.mjs whoami --help","smoke:credits":"node bin/cli.mjs credits --help","smoke:apply-kit":"node bin/cli.mjs apply-kit --help","smoke:install-url":"node bin/cli.mjs install-url --help","smoke:attested-kit":"node bin/cli.mjs attested-kit --help","smoke:setup-action":"node bin/cli.mjs setup-action --help","test:package-files":"node test/package-files.test.mjs","smoke:scaffold-repo":"node bin/cli.mjs scaffold-repo --help","smoke:submit-indexnow":"node bin/cli.mjs submit-indexnow --help"},"_npmUser":{"name":"kantorcodes","email":"kantorcodes@gmail.com"},"repository":{"url":"git+https://github.com/hashgraph-online/skill-publish.git","type":"git"},"_npmVersion":"10.8.2","description":"Publish trustless, immutable, on-chain skill releases via the HOL Registry Broker.","directories":{},"_nodeVersion":"20.20.0","dependencies":{"picocolors":"^1.1.1","@hashgraph/sdk":"^2.78.0"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/skill-publish_1.0.3_1773053296190_0.27562708329030294","host":"s3://npm-registry-packages-npm-production"}},"1.0.6":{"name":"skill-publish","version":"1.0.6","keywords":["hashgraph-online","hcs-26","skill-registry","registry-broker","hedera","cli","github-action","github-actions","ci-cd","publish-skill","agent-skill","ai-skills","skill-publish","immutable-releases","on-chain-publishing","skill-release-automation"],"author":{"name":"Hashgraph Online","email":"hello@hashgraphonline.com"},"license":"Apache-2.0","_id":"skill-publish@1.0.6","maintainers":[{"name":"kantorcodes","email":"kantorcodes@gmail.com"}],"homepage":"https://hol.org/registry/skills/publish","bugs":{"url":"https://github.com/hashgraph-online/skill-publish/issues"},"bin":{"skill-publish":"bin/cli.mjs"},"dist":{"shasum":"c8623b044f98aa2c98bcf02901ba8ef4c423b774","tarball":"https://registry.npmjs.org/skill-publish/-/skill-publish-1.0.6.tgz","fileCount":36,"integrity":"sha512-jJ0oVCNDr1EJjGu/xGVMjnIrNxgrkmBuEl/uiUm5PkfeFeONFfw8y5Xp5SbyXBQ9s8RXt2glcp9Z/aYzcj66Pw==","signatures":[{"sig":"MEUCIAwT6VT8Rqj0ffGZpBh0OSVTJpyzp9N3U8WM0hUdH2WHAiEA5a5AiCqSwnIR/oVLDsxGs0vLvKHYZSyBQS9mfZ/TVAE=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/skill-publish@1.0.6","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":233585},"pnpm":{"overrides":{"bn.js":"5.2.3","elliptic":"npm:@soatok/elliptic-to-noble@9999.0.0"}},"type":"module","engines":{"node":">=20"},"funding":{"url":"https://github.com/sponsors/hashgraph-online","type":"individual"},"gitHead":"be25745bc45fe05617c033e840661a7f0576be81","scripts":{"lint":"node --check entrypoint.mjs && node --check bin/cli.mjs && node --check bin/lib/broker-api.mjs && node --check bin/lib/create-command.mjs && node --check bin/lib/credential-store.mjs && node --check bin/lib/setup-command.mjs && node --check bin/lib/account-commands.mjs && node --check bin/lib/local-commands.mjs && node --check bin/lib/doctor-command.mjs && node --check bin/lib/start-command.mjs && node --check bin/lib/cli-help.mjs && node --check bin/lib/repo-commands.mjs && node --check bin/lib/package-files.mjs && node --check bin/lib/skill-package.mjs && node --check bin/lib/skill-presets.mjs && node --check bin/lib/distribution-kit.mjs && node --check bin/lib/distribution-commands.mjs && node --check bin/lib/codemeta.mjs && node --check bin/lib/indexnow.mjs && node --check bin/lib/apply-distribution-kit.mjs && node --check bin/lib/preview-report.mjs && node --check bin/lib/preview-output.mjs && node --check test/cli-contract.test.mjs && node --check test/validate-preview.test.mjs && node --check test/readme-contract.test.mjs && node --check test/repo-workflows.test.mjs","smoke:fund":"node bin/cli.mjs fund --help","smoke:help":"node bin/cli.mjs --help","smoke:badge":"node bin/cli.mjs badge --help","smoke:start":"node bin/cli.mjs start --non-interactive","smoke:create":"node bin/cli.mjs create --help","smoke:doctor":"node bin/cli.mjs doctor --json","smoke:whoami":"node bin/cli.mjs whoami --help","smoke:credits":"node bin/cli.mjs credits --help","smoke:apply-kit":"node bin/cli.mjs apply-kit --help","smoke:install-url":"node bin/cli.mjs install-url --help","test:cli-contract":"node test/cli-contract.test.mjs","smoke:attested-kit":"node bin/cli.mjs attested-kit --help","smoke:setup-action":"node bin/cli.mjs setup-action --help","test:package-files":"node test/package-files.test.mjs","smoke:scaffold-repo":"node bin/cli.mjs scaffold-repo --help","test:repo-workflows":"node test/repo-workflows.test.mjs","test:readme-contract":"node test/readme-contract.test.mjs","smoke:submit-indexnow":"node bin/cli.mjs submit-indexnow --help","test:validate-preview":"node test/validate-preview.test.mjs"},"_npmUser":{"name":"kantorcodes","email":"kantorcodes@gmail.com"},"repository":{"url":"git+https://github.com/hashgraph-online/skill-publish.git","type":"git"},"_npmVersion":"11.11.0","description":"Publish trustless, immutable, on-chain skill releases via the HOL Registry Broker.","directories":{},"_nodeVersion":"24.14.1","dependencies":{"picocolors":"^1.1.1","@hashgraph/sdk":"^2.78.0"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/skill-publish_1.0.6_1775349763953_0.22162246311561273","host":"s3://npm-registry-packages-npm-production"}},"1.0.7":{"name":"skill-publish","version":"1.0.7","keywords":["hashgraph-online","hcs-26","skill-registry","registry-broker","hedera","cli","github-action","github-actions","ci-cd","publish-skill","agent-skill","ai-skills","skill-publish","immutable-releases","on-chain-publishing","skill-release-automation"],"author":{"name":"Hashgraph Online","email":"hello@hashgraphonline.com"},"license":"Apache-2.0","_id":"skill-publish@1.0.7","maintainers":[{"name":"kantorcodes","email":"kantorcodes@gmail.com"}],"homepage":"https://hol.org/registry/skills/publish","bugs":{"url":"https://github.com/hashgraph-online/skill-publish/issues"},"bin":{"skill-publish":"bin/cli.mjs"},"dist":{"shasum":"40d19ab490c18ca618867e418357b3b55736143e","tarball":"https://registry.npmjs.org/skill-publish/-/skill-publish-1.0.7.tgz","fileCount":37,"integrity":"sha512-5DNd0taWTqc0x6z5wI1msTB6OfnZLUQ/ZwdowdWUgs890RVz9ZGOI7H1TkBB2TndBTGDABXuRlzr5lu6BQ6Enw==","signatures":[{"sig":"MEUCIGvEOeKqgfB6l1d6zi9xVT7ORNwSElDR1kb0jfY60uhnAiEA6gRbbk5P6cHuAfXXq6rQdio7HcmR1l6lQq1IaDD4Wsg=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/skill-publish@1.0.7","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":254173},"pnpm":{"overrides":{"bn.js":"5.2.3","elliptic":"npm:@soatok/elliptic-to-noble@9999.0.0"}},"type":"module","engines":{"node":">=20"},"funding":{"url":"https://github.com/sponsors/hashgraph-online","type":"individual"},"gitHead":"78467e3d970fbc88146c472e74b013f10358dfa2","scripts":{"lint":"node --check entrypoint.mjs && node --check bin/cli.mjs && node --check bin/lib/broker-api.mjs && node --check bin/lib/create-command.mjs && node --check bin/lib/credential-store.mjs && node --check bin/lib/setup-command.mjs && node --check bin/lib/account-commands.mjs && node --check bin/lib/local-commands.mjs && node --check bin/lib/doctor-command.mjs && node --check bin/lib/start-command.mjs && node --check bin/lib/cli-help.mjs && node --check bin/lib/repo-commands.mjs && node --check bin/lib/package-files.mjs && node --check bin/lib/skill-package.mjs && node --check bin/lib/skill-presets.mjs && node --check bin/lib/distribution-kit.mjs && node --check bin/lib/distribution-commands.mjs && node --check bin/lib/codemeta.mjs && node --check bin/lib/indexnow.mjs && node --check bin/lib/apply-distribution-kit.mjs && node --check bin/lib/managed-comments.mjs && node --check bin/lib/preview-report.mjs && node --check bin/lib/preview-output.mjs && node --check test/cli-contract.test.mjs && node --check test/validate-preview.test.mjs && node --check test/readme-contract.test.mjs && node --check test/repo-workflows.test.mjs","smoke:fund":"node bin/cli.mjs fund --help","smoke:help":"node bin/cli.mjs --help","smoke:badge":"node bin/cli.mjs badge --help","smoke:start":"node bin/cli.mjs start --non-interactive","smoke:create":"node bin/cli.mjs create --help","smoke:doctor":"node bin/cli.mjs doctor --json","smoke:whoami":"node bin/cli.mjs whoami --help","smoke:credits":"node bin/cli.mjs credits --help","smoke:apply-kit":"node bin/cli.mjs apply-kit --help","smoke:install-url":"node bin/cli.mjs install-url --help","test:cli-contract":"node test/cli-contract.test.mjs","smoke:attested-kit":"node bin/cli.mjs attested-kit --help","smoke:setup-action":"node bin/cli.mjs setup-action --help","test:package-files":"node test/package-files.test.mjs","smoke:scaffold-repo":"node bin/cli.mjs scaffold-repo --help","test:repo-workflows":"node test/repo-workflows.test.mjs","test:readme-contract":"node test/readme-contract.test.mjs","smoke:submit-indexnow":"node bin/cli.mjs submit-indexnow --help","test:validate-preview":"node test/validate-preview.test.mjs"},"_npmUser":{"name":"kantorcodes","email":"kantorcodes@gmail.com"},"repository":{"url":"git+https://github.com/hashgraph-online/skill-publish.git","type":"git"},"_npmVersion":"11.11.0","description":"Publish trustless, immutable, on-chain skill releases via the HOL Registry Broker.","directories":{},"_nodeVersion":"24.14.1","dependencies":{"picocolors":"^1.1.1","@hashgraph/sdk":"^2.78.0"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/skill-publish_1.0.7_1775421893998_0.6175558470611251","host":"s3://npm-registry-packages-npm-production"}},"1.0.8":{"name":"skill-publish","version":"1.0.8","keywords":["hashgraph-online","hcs-26","skill-registry","registry-broker","hedera","cli","github-action","github-actions","ci-cd","publish-skill","agent-skill","ai-skills","skill-publish","immutable-releases","on-chain-publishing","skill-release-automation"],"author":{"name":"Hashgraph Online","email":"hello@hashgraphonline.com"},"license":"Apache-2.0","_id":"skill-publish@1.0.8","maintainers":[{"name":"kantorcodes","email":"kantorcodes@gmail.com"}],"homepage":"https://hol.org/registry/skills/publish","bugs":{"url":"https://github.com/hashgraph-online/skill-publish/issues"},"bin":{"skill-publish":"bin/cli.mjs"},"dist":{"shasum":"30acd5505a11ff5ca7d58c5ed2e1f2c748508579","tarball":"https://registry.npmjs.org/skill-publish/-/skill-publish-1.0.8.tgz","fileCount":38,"integrity":"sha512-eZJ991Uh5kR0W3OymM++91Jj3NA8TDjeR7bnIZQhDdNRDXOr8vd8QxhQTLKGRK/RqcP14giMd3fkTGEjM9Zxqg==","signatures":[{"sig":"MEYCIQDsLnKOJmhKwakUBFlnQ5xTPPLQq9XNnN8zy0sdNNF+fgIhALEJigfwJAA3gB9oDZkMCN8tJ/3anIRLjaYdMr8dgTYr","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/skill-publish@1.0.8","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":276052},"pnpm":{"overrides":{"bn.js":"5.2.3","elliptic":"npm:@soatok/elliptic-to-noble@9999.0.0"}},"type":"module","engines":{"node":">=20"},"funding":{"url":"https://github.com/sponsors/hashgraph-online","type":"individual"},"gitHead":"4119400f6195122738899822e128c3c515b45301","scripts":{"lint":"node --check entrypoint.mjs && node --check bin/cli.mjs && node --check bin/lib/broker-api.mjs && node --check bin/lib/create-command.mjs && node --check bin/lib/credential-store.mjs && node --check bin/lib/setup-command.mjs && node --check bin/lib/account-commands.mjs && node --check bin/lib/local-commands.mjs && node --check bin/lib/doctor-command.mjs && node --check bin/lib/start-command.mjs && node --check bin/lib/cli-help.mjs && node --check bin/lib/repo-commands.mjs && node --check bin/lib/repo-skill-utils.mjs && node --check bin/lib/package-files.mjs && node --check bin/lib/skill-package.mjs && node --check bin/lib/skill-presets.mjs && node --check bin/lib/distribution-kit.mjs && node --check bin/lib/distribution-commands.mjs && node --check bin/lib/codemeta.mjs && node --check bin/lib/indexnow.mjs && node --check bin/lib/apply-distribution-kit.mjs && node --check bin/lib/managed-comments.mjs && node --check bin/lib/preview-report.mjs && node --check bin/lib/preview-output.mjs && node --check test/broker-api.test.mjs && node --check test/cli-contract.test.mjs && node --check test/validate-preview.test.mjs && node --check test/readme-contract.test.mjs && node --check test/repo-workflows.test.mjs","smoke:fund":"node bin/cli.mjs fund --help","smoke:help":"node bin/cli.mjs --help","smoke:badge":"node bin/cli.mjs badge --help","smoke:start":"node bin/cli.mjs start --non-interactive","smoke:create":"node bin/cli.mjs create --help","smoke:doctor":"node bin/cli.mjs doctor --json","smoke:whoami":"node bin/cli.mjs whoami --help","smoke:credits":"node bin/cli.mjs credits --help","smoke:apply-kit":"node bin/cli.mjs apply-kit --help","test:broker-api":"node test/broker-api.test.mjs","smoke:install-url":"node bin/cli.mjs install-url --help","test:cli-contract":"node test/cli-contract.test.mjs","smoke:attested-kit":"node bin/cli.mjs attested-kit --help","smoke:setup-action":"node bin/cli.mjs setup-action --help","test:package-files":"node test/package-files.test.mjs","smoke:scaffold-repo":"node bin/cli.mjs scaffold-repo --help","test:repo-workflows":"node test/repo-workflows.test.mjs","test:readme-contract":"node test/readme-contract.test.mjs","smoke:submit-indexnow":"node bin/cli.mjs submit-indexnow --help","test:validate-preview":"node test/validate-preview.test.mjs"},"_npmUser":{"name":"kantorcodes","email":"kantorcodes@gmail.com"},"repository":{"url":"git+https://github.com/hashgraph-online/skill-publish.git","type":"git"},"_npmVersion":"11.11.0","description":"Publish trustless, immutable, on-chain skill releases via the HOL Registry Broker.","directories":{},"_nodeVersion":"24.14.1","dependencies":{"picocolors":"^1.1.1","@hashgraph/sdk":"^2.78.0","@hol-org/rb-client":"^0.1.177"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/skill-publish_1.0.8_1775475797693_0.38387309492075117","host":"s3://npm-registry-packages-npm-production"}},"1.0.9":{"name":"skill-publish","version":"1.0.9","keywords":["hashgraph-online","hcs-26","skill-registry","registry-broker","hedera","cli","github-action","github-actions","ci-cd","publish-skill","agent-skill","ai-skills","skill-publish","immutable-releases","on-chain-publishing","skill-release-automation"],"author":{"name":"Hashgraph Online","email":"hello@hashgraphonline.com"},"license":"Apache-2.0","_id":"skill-publish@1.0.9","maintainers":[{"name":"kantorcodes","email":"kantorcodes@gmail.com"}],"homepage":"https://hol.org/registry/skills/publish","bugs":{"url":"https://github.com/hashgraph-online/skill-publish/issues"},"bin":{"skill-publish":"bin/cli.mjs"},"dist":{"shasum":"399f6048e0ee9402f0b062536c994687d40859da","tarball":"https://registry.npmjs.org/skill-publish/-/skill-publish-1.0.9.tgz","fileCount":38,"integrity":"sha512-Zfc7Nm/MzsEJZG9vVwaFh0rmVK/rWJ3tC/umUmMe6njCKCAXG8n+i2axmWWuEHKLj2lERvFyIwXLp57RxkDZ7A==","signatures":[{"sig":"MEUCIQCQ9IVMNh6t8j53MXwC0VHgW9fc6tlme6J4iOTFoYzKdAIgWlOhufSkyCZ0C6csXVJ9Sdl7XDV/a4aokdPUFyfwsTY=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/skill-publish@1.0.9","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":276052},"pnpm":{"overrides":{"bn.js":"5.2.3","elliptic":"npm:@soatok/elliptic-to-noble@9999.0.0"}},"type":"module","engines":{"node":">=20"},"funding":{"url":"https://github.com/sponsors/hashgraph-online","type":"individual"},"gitHead":"ee40f6501dee6e687a04c285b5b94343cbf64c42","scripts":{"lint":"node --check entrypoint.mjs && node --check bin/cli.mjs && node --check bin/lib/broker-api.mjs && node --check bin/lib/create-command.mjs && node --check bin/lib/credential-store.mjs && node --check bin/lib/setup-command.mjs && node --check bin/lib/account-commands.mjs && node --check bin/lib/local-commands.mjs && node --check bin/lib/doctor-command.mjs && node --check bin/lib/start-command.mjs && node --check bin/lib/cli-help.mjs && node --check bin/lib/repo-commands.mjs && node --check bin/lib/repo-skill-utils.mjs && node --check bin/lib/package-files.mjs && node --check bin/lib/skill-package.mjs && node --check bin/lib/skill-presets.mjs && node --check bin/lib/distribution-kit.mjs && node --check bin/lib/distribution-commands.mjs && node --check bin/lib/codemeta.mjs && node --check bin/lib/indexnow.mjs && node --check bin/lib/apply-distribution-kit.mjs && node --check bin/lib/managed-comments.mjs && node --check bin/lib/preview-report.mjs && node --check bin/lib/preview-output.mjs && node --check test/broker-api.test.mjs && node --check test/cli-contract.test.mjs && node --check test/validate-preview.test.mjs && node --check test/readme-contract.test.mjs && node --check test/repo-workflows.test.mjs","smoke:fund":"node bin/cli.mjs fund --help","smoke:help":"node bin/cli.mjs --help","smoke:badge":"node bin/cli.mjs badge --help","smoke:start":"node bin/cli.mjs start --non-interactive","smoke:create":"node bin/cli.mjs create --help","smoke:doctor":"node bin/cli.mjs doctor --json","smoke:whoami":"node bin/cli.mjs whoami --help","smoke:credits":"node bin/cli.mjs credits --help","smoke:apply-kit":"node bin/cli.mjs apply-kit --help","test:broker-api":"node test/broker-api.test.mjs","smoke:install-url":"node bin/cli.mjs install-url --help","test:cli-contract":"node test/cli-contract.test.mjs","smoke:attested-kit":"node bin/cli.mjs attested-kit --help","smoke:setup-action":"node bin/cli.mjs setup-action --help","test:package-files":"node test/package-files.test.mjs","smoke:scaffold-repo":"node bin/cli.mjs scaffold-repo --help","test:repo-workflows":"node test/repo-workflows.test.mjs","test:readme-contract":"node test/readme-contract.test.mjs","smoke:submit-indexnow":"node bin/cli.mjs submit-indexnow --help","test:validate-preview":"node test/validate-preview.test.mjs"},"_npmUser":{"name":"kantorcodes","email":"kantorcodes@gmail.com"},"repository":{"url":"git+https://github.com/hashgraph-online/skill-publish.git","type":"git"},"_npmVersion":"11.11.0","description":"Publish trustless, immutable, on-chain skill releases via the HOL Registry Broker.","directories":{},"_nodeVersion":"24.14.1","dependencies":{"picocolors":"^1.1.1","@hashgraph/sdk":"^2.78.0","@hol-org/rb-client":"^0.1.177"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/skill-publish_1.0.9_1775483561648_0.9510889794586639","host":"s3://npm-registry-packages-npm-production"}},"1.0.10":{"name":"skill-publish","version":"1.0.10","keywords":["hashgraph-online","hcs-26","skill-registry","registry-broker","hedera","cli","github-action","github-actions","ci-cd","publish-skill","agent-skill","ai-skills","skill-publish","immutable-releases","on-chain-publishing","skill-release-automation"],"author":{"name":"Hashgraph Online","email":"hello@hashgraphonline.com"},"license":"Apache-2.0","_id":"skill-publish@1.0.10","maintainers":[{"name":"kantorcodes","email":"kantorcodes@gmail.com"}],"homepage":"https://hol.org/registry/skills/publish","bugs":{"url":"https://github.com/hashgraph-online/skill-publish/issues"},"bin":{"skill-publish":"bin/cli.mjs"},"dist":{"shasum":"93709c70cc109dc1e1f6944828a6817e8772b617","tarball":"https://registry.npmjs.org/skill-publish/-/skill-publish-1.0.10.tgz","fileCount":38,"integrity":"sha512-7X/Dg1dtGhfoR0gurVcxPStCk72aRzSqVT6twXxUCJuBQ3dcl4feU24l05u/2n8CxfeJpp/uwGVVEzsQSZ3aJg==","signatures":[{"sig":"MEYCIQCiHV/9gmnobY5R2Ajtd/dFY+AVzNLHVy2woKocFixNOgIhAPs9az4/byW3U2VpTb0/XUigV1oE7GV2F1EZqGd5f25y","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/skill-publish@1.0.10","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":278128},"pnpm":{"overrides":{"bn.js":"5.2.3","elliptic":"npm:@soatok/elliptic-to-noble@9999.0.0"}},"type":"module","engines":{"node":">=20"},"funding":{"url":"https://github.com/sponsors/hashgraph-online","type":"individual"},"gitHead":"5bd15487206db33996042021fcc54549b3ba90a7","scripts":{"lint":"node --check entrypoint.mjs && node --check bin/cli.mjs && node --check bin/lib/broker-api.mjs && node --check bin/lib/create-command.mjs && node --check bin/lib/credential-store.mjs && node --check bin/lib/setup-command.mjs && node --check bin/lib/account-commands.mjs && node --check bin/lib/local-commands.mjs && node --check bin/lib/doctor-command.mjs && node --check bin/lib/start-command.mjs && node --check bin/lib/cli-help.mjs && node --check bin/lib/repo-commands.mjs && node --check bin/lib/repo-skill-utils.mjs && node --check bin/lib/package-files.mjs && node --check bin/lib/skill-package.mjs && node --check bin/lib/skill-presets.mjs && node --check bin/lib/distribution-kit.mjs && node --check bin/lib/distribution-commands.mjs && node --check bin/lib/codemeta.mjs && node --check bin/lib/indexnow.mjs && node --check bin/lib/apply-distribution-kit.mjs && node --check bin/lib/managed-comments.mjs && node --check bin/lib/preview-report.mjs && node --check bin/lib/preview-output.mjs && node --check test/broker-api.test.mjs && node --check test/cli-contract.test.mjs && node --check test/validate-preview.test.mjs && node --check test/readme-contract.test.mjs && node --check test/repo-workflows.test.mjs","smoke:fund":"node bin/cli.mjs fund --help","smoke:help":"node bin/cli.mjs --help","smoke:badge":"node bin/cli.mjs badge --help","smoke:start":"node bin/cli.mjs start --non-interactive","smoke:create":"node bin/cli.mjs create --help","smoke:doctor":"node bin/cli.mjs doctor --json","smoke:whoami":"node bin/cli.mjs whoami --help","smoke:credits":"node bin/cli.mjs credits --help","smoke:apply-kit":"node bin/cli.mjs apply-kit --help","test:broker-api":"node test/broker-api.test.mjs","smoke:install-url":"node bin/cli.mjs install-url --help","test:cli-contract":"node test/cli-contract.test.mjs","smoke:attested-kit":"node bin/cli.mjs attested-kit --help","smoke:setup-action":"node bin/cli.mjs setup-action --help","test:package-files":"node test/package-files.test.mjs","smoke:scaffold-repo":"node bin/cli.mjs scaffold-repo --help","test:repo-workflows":"node test/repo-workflows.test.mjs","test:readme-contract":"node test/readme-contract.test.mjs","smoke:submit-indexnow":"node bin/cli.mjs submit-indexnow --help","test:validate-preview":"node test/validate-preview.test.mjs"},"_npmUser":{"name":"kantorcodes","email":"kantorcodes@gmail.com"},"repository":{"url":"git+https://github.com/hashgraph-online/skill-publish.git","type":"git"},"_npmVersion":"11.11.0","description":"Publish trustless, immutable, on-chain skill releases via the HOL Registry Broker.","directories":{},"_nodeVersion":"24.14.1","dependencies":{"picocolors":"^1.1.1","@hashgraph/sdk":"^2.78.0","@hol-org/rb-client":"^0.1.177"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/skill-publish_1.0.10_1775486853787_0.28509533139374676","host":"s3://npm-registry-packages-npm-production"}},"1.0.11":{"name":"skill-publish","version":"1.0.11","keywords":["hashgraph-online","hcs-26","skill-registry","registry-broker","hedera","cli","github-action","github-actions","ci-cd","publish-skill","agent-skill","ai-skills","skill-publish","immutable-releases","on-chain-publishing","skill-release-automation"],"author":{"name":"Hashgraph Online","email":"hello@hashgraphonline.com"},"license":"Apache-2.0","_id":"skill-publish@1.0.11","maintainers":[{"name":"kantorcodes","email":"kantorcodes@gmail.com"}],"homepage":"https://hol.org/registry/skills/publish","bugs":{"url":"https://github.com/hashgraph-online/skill-publish/issues"},"bin":{"skill-publish":"bin/cli.mjs"},"dist":{"shasum":"d2e51ccdb44a1e55099ff794579a23e9455c8409","tarball":"https://registry.npmjs.org/skill-publish/-/skill-publish-1.0.11.tgz","fileCount":40,"integrity":"sha512-rNmEjFhPiOLduq4aUGFVtRJOd9Ax97eq8J8qiYvKxQtJcKW45IL5r8ztDPV6EKPW7wIn3wk2VnEh3YlUwHoEOw==","signatures":[{"sig":"MEUCIHO4AMKsFBDOqG1oIKaApVDyCZ610XuimB6KLpgGY6mWAiEAueoFWjWIWRRTM2lYMLanL8aA1UyJeUM8XmEJk44T6yU=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/skill-publish@1.0.11","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":305687},"pnpm":{"overrides":{"bn.js":"5.2.3","elliptic":"npm:@soatok/elliptic-to-noble@9999.0.0"}},"type":"module","engines":{"node":">=20"},"funding":{"url":"https://github.com/sponsors/hashgraph-online","type":"individual"},"gitHead":"47895cf40f6214511c713628dbbafd0c3316f4dd","scripts":{"lint":"node --check entrypoint.mjs && node --check bin/cli.mjs && node --check bin/lib/broker-api.mjs && node --check bin/lib/create-command.mjs && node --check bin/lib/credential-store.mjs && node --check bin/lib/setup-command.mjs && node --check bin/lib/account-commands.mjs && node --check bin/lib/local-commands.mjs && node --check bin/lib/doctor-command.mjs && node --check bin/lib/start-command.mjs && node --check bin/lib/cli-help.mjs && node --check bin/lib/repo-commands.mjs && node --check bin/lib/repo-skill-utils.mjs && node --check bin/lib/package-files.mjs && node --check bin/lib/skill-package.mjs && node --check bin/lib/skill-presets.mjs && node --check bin/lib/distribution-kit.mjs && node --check bin/lib/distribution-commands.mjs && node --check bin/lib/codemeta.mjs && node --check bin/lib/hcs-28.mjs && node --check bin/lib/hcs-28-github-health.mjs && node --check bin/lib/indexnow.mjs && node --check bin/lib/apply-distribution-kit.mjs && node --check bin/lib/managed-comments.mjs && node --check bin/lib/preview-report.mjs && node --check bin/lib/preview-output.mjs && node --check test/broker-api.test.mjs && node --check test/cli-contract.test.mjs && node --check test/hcs-28.test.mjs && node --check test/validate-preview.test.mjs && node --check test/readme-contract.test.mjs && node --check test/repo-workflows.test.mjs","smoke:fund":"node bin/cli.mjs fund --help","smoke:help":"node bin/cli.mjs --help","smoke:badge":"node bin/cli.mjs badge --help","smoke:start":"node bin/cli.mjs start --non-interactive","test:hcs-28":"node test/hcs-28.test.mjs","smoke:create":"node bin/cli.mjs create --help","smoke:doctor":"node bin/cli.mjs doctor --json","smoke:whoami":"node bin/cli.mjs whoami --help","smoke:credits":"node bin/cli.mjs credits --help","smoke:apply-kit":"node bin/cli.mjs apply-kit --help","test:broker-api":"node test/broker-api.test.mjs","smoke:install-url":"node bin/cli.mjs install-url --help","test:cli-contract":"node test/cli-contract.test.mjs","smoke:attested-kit":"node bin/cli.mjs attested-kit --help","smoke:setup-action":"node bin/cli.mjs setup-action --help","test:package-files":"node test/package-files.test.mjs","smoke:scaffold-repo":"node bin/cli.mjs scaffold-repo --help","test:repo-workflows":"node test/repo-workflows.test.mjs","test:readme-contract":"node test/readme-contract.test.mjs","smoke:submit-indexnow":"node bin/cli.mjs submit-indexnow --help","test:validate-preview":"node test/validate-preview.test.mjs"},"_npmUser":{"name":"kantorcodes","email":"kantorcodes@gmail.com"},"repository":{"url":"git+https://github.com/hashgraph-online/skill-publish.git","type":"git"},"_npmVersion":"11.11.0","description":"Publish trustless, immutable, on-chain skill releases via the HOL Registry Broker.","directories":{},"_nodeVersion":"24.14.1","dependencies":{"picocolors":"^1.1.1","@hashgraph/sdk":"^2.78.0","@hol-org/rb-client":"^0.1.177"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/skill-publish_1.0.11_1775522762552_0.21509966942783287","host":"s3://npm-registry-packages-npm-production"}},"1.0.12":{"name":"skill-publish","version":"1.0.12","keywords":["hashgraph-online","hcs-26","skill-registry","registry-broker","hedera","cli","github-action","github-actions","ci-cd","publish-skill","agent-skill","ai-skills","skill-publish","immutable-releases","on-chain-publishing","skill-release-automation"],"author":{"name":"Hashgraph Online","email":"hello@hashgraphonline.com"},"license":"Apache-2.0","_id":"skill-publish@1.0.12","maintainers":[{"name":"kantorcodes","email":"kantorcodes@gmail.com"}],"homepage":"https://hol.org/registry/skills/publish","bugs":{"url":"https://github.com/hashgraph-online/skill-publish/issues"},"bin":{"skill-publish":"bin/cli.mjs"},"dist":{"shasum":"82a970d65a105b0126e84c9247c13bb9cb221fd2","tarball":"https://registry.npmjs.org/skill-publish/-/skill-publish-1.0.12.tgz","fileCount":40,"integrity":"sha512-Yuttmrc7tS0hwWFjlD3jMoXZKsxK0N8x45IJK92a/J9f5WfYKjKxqdppiBb5jbLiwOPJGitiWh02SZkyJ+WYkw==","signatures":[{"sig":"MEYCIQCiHrB/w4gQi3ylvLl1UKpb8iZxY4pXQs6IoCFRbgnorQIhAMj4z2EExzOn4nPaXBzqEHl0m/GP03INzneb7cbFUH5L","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/skill-publish@1.0.12","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":310802},"pnpm":{"overrides":{"bn.js":"5.2.3","elliptic":"npm:@soatok/elliptic-to-noble@9999.0.0"}},"type":"module","engines":{"node":">=20"},"funding":{"url":"https://github.com/sponsors/hashgraph-online","type":"individual"},"gitHead":"44eeecdb67dac7ed11504c43ff0122c46599994f","scripts":{"lint":"node --check entrypoint.mjs && node --check bin/cli.mjs && node --check bin/lib/broker-api.mjs && node --check bin/lib/create-command.mjs && node --check bin/lib/credential-store.mjs && node --check bin/lib/setup-command.mjs && node --check bin/lib/account-commands.mjs && node --check bin/lib/local-commands.mjs && node --check bin/lib/doctor-command.mjs && node --check bin/lib/start-command.mjs && node --check bin/lib/cli-help.mjs && node --check bin/lib/repo-commands.mjs && node --check bin/lib/repo-skill-utils.mjs && node --check bin/lib/package-files.mjs && node --check bin/lib/skill-package.mjs && node --check bin/lib/skill-presets.mjs && node --check bin/lib/distribution-kit.mjs && node --check bin/lib/distribution-commands.mjs && node --check bin/lib/codemeta.mjs && node --check bin/lib/hcs-28.mjs && node --check bin/lib/hcs-28-github-health.mjs && node --check bin/lib/indexnow.mjs && node --check bin/lib/apply-distribution-kit.mjs && node --check bin/lib/managed-comments.mjs && node --check bin/lib/preview-report.mjs && node --check bin/lib/preview-output.mjs && node --check test/broker-api.test.mjs && node --check test/cli-contract.test.mjs && node --check test/hcs-28.test.mjs && node --check test/managed-comments.test.mjs && node --check test/validate-preview.test.mjs && node --check test/readme-contract.test.mjs && node --check test/repo-workflows.test.mjs","smoke:fund":"node bin/cli.mjs fund --help","smoke:help":"node bin/cli.mjs --help","smoke:badge":"node bin/cli.mjs badge --help","smoke:start":"node bin/cli.mjs start --non-interactive","test:hcs-28":"node test/hcs-28.test.mjs","smoke:create":"node bin/cli.mjs create --help","smoke:doctor":"node bin/cli.mjs doctor --json","smoke:whoami":"node bin/cli.mjs whoami --help","smoke:credits":"node bin/cli.mjs credits --help","smoke:apply-kit":"node bin/cli.mjs apply-kit --help","test:broker-api":"node test/broker-api.test.mjs","smoke:install-url":"node bin/cli.mjs install-url --help","test:cli-contract":"node test/cli-contract.test.mjs","smoke:attested-kit":"node bin/cli.mjs attested-kit --help","smoke:setup-action":"node bin/cli.mjs setup-action --help","test:package-files":"node test/package-files.test.mjs","smoke:scaffold-repo":"node bin/cli.mjs scaffold-repo --help","test:repo-workflows":"node test/repo-workflows.test.mjs","test:readme-contract":"node test/readme-contract.test.mjs","smoke:submit-indexnow":"node bin/cli.mjs submit-indexnow --help","test:managed-comments":"node test/managed-comments.test.mjs","test:validate-preview":"node test/validate-preview.test.mjs"},"_npmUser":{"name":"kantorcodes","email":"kantorcodes@gmail.com"},"repository":{"url":"git+https://github.com/hashgraph-online/skill-publish.git","type":"git"},"_npmVersion":"11.11.0","description":"Publish trustless, immutable, on-chain skill releases via the HOL Registry Broker.","directories":{},"_nodeVersion":"24.14.1","dependencies":{"picocolors":"^1.1.1","@hashgraph/sdk":"^2.78.0","@hol-org/rb-client":"^0.1.177"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/skill-publish_1.0.12_1775531164430_0.3646589883132436","host":"s3://npm-registry-packages-npm-production"}},"1.0.13":{"name":"skill-publish","version":"1.0.13","description":"Publish trustless, immutable, on-chain skill releases via the HOL Registry Broker.","type":"module","homepage":"https://hol.org/registry/skills/publish","bugs":{"url":"https://github.com/hashgraph-online/skill-publish/issues"},"funding":{"type":"individual","url":"https://github.com/sponsors/hashgraph-online"},"bin":{"skill-publish":"bin/cli.mjs"},"keywords":["hashgraph-online","hcs-26","skill-registry","registry-broker","hedera","cli","github-action","github-actions","ci-cd","publish-skill","agent-skill","ai-skills","skill-publish","immutable-releases","on-chain-publishing","skill-release-automation"],"repository":{"type":"git","url":"git+https://github.com/hashgraph-online/skill-publish.git"},"license":"Apache-2.0","author":{"name":"Hashgraph Online","email":"hello@hashgraphonline.com"},"engines":{"node":">=20"},"dependencies":{"@hol-org/rb-client":"^0.1.177","@hashgraph/sdk":"^2.78.0","picocolors":"^1.1.1"},"scripts":{"lint":"node --check entrypoint.mjs && node --check bin/cli.mjs && node --check bin/lib/broker-api.mjs && node --check bin/lib/create-command.mjs && node --check bin/lib/credential-store.mjs && node --check bin/lib/setup-command.mjs && node --check bin/lib/account-commands.mjs && node --check bin/lib/local-commands.mjs && node --check bin/lib/doctor-command.mjs && node --check bin/lib/start-command.mjs && node --check bin/lib/cli-help.mjs && node --check bin/lib/repo-commands.mjs && node --check bin/lib/repo-skill-utils.mjs && node --check bin/lib/package-files.mjs && node --check bin/lib/skill-package.mjs && node --check bin/lib/skill-presets.mjs && node --check bin/lib/distribution-kit.mjs && node --check bin/lib/distribution-commands.mjs && node --check bin/lib/codemeta.mjs && node --check bin/lib/hcs-28.mjs && node --check bin/lib/hcs-28-github-health.mjs && node --check bin/lib/indexnow.mjs && node --check bin/lib/apply-distribution-kit.mjs && node --check bin/lib/managed-comments.mjs && node --check bin/lib/preview-report.mjs && node --check bin/lib/preview-output.mjs && node --check test/broker-api.test.mjs && node --check test/cli-contract.test.mjs && node --check test/hcs-28.test.mjs && node --check test/managed-comments.test.mjs && node --check test/validate-preview.test.mjs && node --check test/readme-contract.test.mjs && node --check test/repo-workflows.test.mjs","test:broker-api":"node test/broker-api.test.mjs","test:package-files":"node test/package-files.test.mjs","test:cli-contract":"node test/cli-contract.test.mjs","test:hcs-28":"node test/hcs-28.test.mjs","test:managed-comments":"node test/managed-comments.test.mjs","test:validate-preview":"node test/validate-preview.test.mjs","test:readme-contract":"node test/readme-contract.test.mjs","test:repo-workflows":"node test/repo-workflows.test.mjs","smoke:help":"node bin/cli.mjs --help","smoke:start":"node bin/cli.mjs start --non-interactive","smoke:doctor":"node bin/cli.mjs doctor --json","smoke:whoami":"node bin/cli.mjs whoami --help","smoke:credits":"node bin/cli.mjs credits --help","smoke:fund":"node bin/cli.mjs fund --help","smoke:setup-action":"node bin/cli.mjs setup-action --help","smoke:scaffold-repo":"node bin/cli.mjs scaffold-repo --help","smoke:create":"node bin/cli.mjs create --help","smoke:badge":"node bin/cli.mjs badge --help","smoke:install-url":"node bin/cli.mjs install-url --help","smoke:attested-kit":"node bin/cli.mjs attested-kit --help","smoke:apply-kit":"node bin/cli.mjs apply-kit --help","smoke:submit-indexnow":"node bin/cli.mjs submit-indexnow --help"},"pnpm":{"overrides":{"bn.js":"5.2.3","elliptic":"npm:@soatok/elliptic-to-noble@9999.0.0"}},"gitHead":"5ea6109cf9c3f8c3d9dad028f963790a56497257","_id":"skill-publish@1.0.13","_nodeVersion":"24.14.1","_npmVersion":"11.11.0","dist":{"integrity":"sha512-ZeGUApzShWYlpRgXBQxjnO5v6rE/hjFZV6simAC/xtF/2UpZnQoUE2uwKr02Gj+/t8owEKVVLHM7xKSOpCM6Yw==","shasum":"a73a43d8b7539058237c10570e95b35ea1ca592d","tarball":"https://registry.npmjs.org/skill-publish/-/skill-publish-1.0.13.tgz","fileCount":40,"unpackedSize":313843,"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/skill-publish@1.0.13","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEQCIHY9JqYoBCUVt8+bJ889Q4LtEcmRl+Qt9sOqAfVYjCBhAiACLNtzK8y/v+h0JYODvamlSSEDear9yrSvyUT322k5Rw=="}]},"_npmUser":{"name":"kantorcodes","email":"kantorcodes@gmail.com"},"directories":{},"maintainers":[{"name":"kantorcodes","email":"kantorcodes@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/skill-publish_1.0.13_1775563528374_0.5650589393180729"},"_hasShrinkwrap":false}},"time":{"created":"2026-03-05T14:26:14.259Z","modified":"2026-04-07T12:05:28.830Z","1.0.0":"2026-03-05T14:26:14.473Z","1.0.1":"2026-03-08T13:07:01.406Z","1.0.2":"2026-03-09T10:45:23.135Z","1.0.3":"2026-03-09T10:48:16.323Z","1.0.6":"2026-04-05T00:42:44.107Z","1.0.7":"2026-04-05T20:44:54.133Z","1.0.8":"2026-04-06T11:43:17.860Z","1.0.9":"2026-04-06T13:52:41.842Z","1.0.10":"2026-04-06T14:47:33.981Z","1.0.11":"2026-04-07T00:46:02.685Z","1.0.12":"2026-04-07T03:06:04.580Z","1.0.13":"2026-04-07T12:05:28.525Z"},"bugs":{"url":"https://github.com/hashgraph-online/skill-publish/issues"},"author":{"name":"Hashgraph Online","email":"hello@hashgraphonline.com"},"license":"Apache-2.0","homepage":"https://hol.org/registry/skills/publish","keywords":["hashgraph-online","hcs-26","skill-registry","registry-broker","hedera","cli","github-action","github-actions","ci-cd","publish-skill","agent-skill","ai-skills","skill-publish","immutable-releases","on-chain-publishing","skill-release-automation"],"repository":{"type":"git","url":"git+https://github.com/hashgraph-online/skill-publish.git"},"description":"Publish trustless, immutable, on-chain skill releases via the HOL Registry Broker.","maintainers":[{"name":"kantorcodes","email":"kantorcodes@gmail.com"}],"readme":"# skill-publish\n\n| ![Hashgraph Online Logo](https://hol.org/brand/Logo_Whole_Dark.png) | The official **skill-publish** CLI and GitHub Action for validating, quoting, and publishing trustless, immutable, on-chain skill releases through the HOL Registry Broker.<br><br>Built and maintained by [Hashgraph Online](https://hol.org).<br><br>[npm Package](https://www.npmjs.com/package/skill-publish)<br>[GitHub Marketplace](https://github.com/marketplace/actions/skill-publish)<br>[HOL Registry](https://hol.org/registry)<br>[DeepWiki Wiki](https://deepwiki.com/hashgraph-online/skill-publish) |\n| :--- | :--- |\n\nInstead of sharing mutable URLs or copy/paste blobs, each `name@version` release is recorded on Hedera (HCS) and exposed via `hcs://...` references. That immutability is the value: the published artifact is tamper-evident, reproducible, and audit-friendly.\n\nImmutability gives you:\n\n- **Version pinning:** consumers can depend on an exact `name@version`.\n- **Reproducible retrieval:** the same canonical references resolve later (not “whatever is at this URL today”).\n- **Audit trail:** topic IDs, job IDs, and optional repo+commit stamping connect releases back to source.\n\nA skill package starts with `SKILL.md`. `skill.json` is optional metadata; when it is absent, `skill-publish` synthesizes it during validate, quote, and publish flows.\n\nBy default, `skill-publish` excludes hidden files and directories, env files, lockfiles, build output, local databases, and key/certificate material from package discovery before quote or publish.\n\n[![npm](https://img.shields.io/npm/v/skill-publish?style=for-the-badge&logo=npm)](https://www.npmjs.com/package/skill-publish)\n[![GitHub Marketplace](https://img.shields.io/badge/GitHub_Marketplace-skill--publish-2EA44F?style=for-the-badge&logo=github)](https://github.com/marketplace/actions/skill-publish)\n[![OpenAPI Spec](https://img.shields.io/badge/OpenAPI-3.1.0-6BA539?style=for-the-badge&logo=openapiinitiative&logoColor=white)](https://hol.org/registry/api/v1/openapi.json)\n[![HOL Registry](https://img.shields.io/badge/HOL-Registry-5599FE?style=for-the-badge)](https://hol.org/registry)\n[![DeepWiki](https://img.shields.io/badge/DeepWiki-Wiki-0F172A?style=for-the-badge&logo=bookstack&logoColor=white)](https://deepwiki.com/hashgraph-online/skill-publish)\n\n## Quick Start\n\nChoose the path that matches how you work:\n\n### GitHub Action (validate-first quickstart)\n\nStart with a validate-only pull request workflow. This does not require `RB_API_KEY`, does not request `id-token: write`, and keeps the first rollout fork-safe by disabling preview upload until maintainers explicitly opt in.\n\n```yaml\nname: Validate Skill\non:\n  pull_request:\n    paths:\n      - skills/my-skill/**\n      - .hol/skill-publish.yml\n      - .github/workflows/validate-skill.yml\n\njobs:\n  validate:\n    concurrency:\n      group: validate-skill-${{ github.event.pull_request.number || github.ref }}\n      cancel-in-progress: true\n    runs-on: ubuntu-latest\n    permissions:\n      contents: read\n    steps:\n      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683\n      - name: Validate skill package\n        uses: hashgraph-online/skill-publish@df6ae95e010d9792158a441eec9ac50d4d17139d\n        with:\n          mode: validate\n          skill-dir: skills/my-skill\n          annotate: \"false\"\n          preview-upload: \"false\"\n```\n\nIf you want preview uploads later, enable them only in a trusted repo-owned workflow such as `workflow_dispatch` or a protected-branch `push`, then add `id-token: write` and `preview-upload: \"true\"` there.\n\n### GitHub Action (release publishing)\n\nPublishing immutable releases still consumes HOL Registry Broker credits. Add `RB_API_KEY` only when you are ready to request an authenticated quote and then publish on-chain:\n\n```yaml\nname: Publish Skill\non:\n  release:\n    types: [published]\n\njobs:\n  publish:\n    runs-on: ubuntu-latest\n    permissions:\n      contents: write\n      pull-requests: write\n      issues: write\n    steps:\n      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683\n      - name: Publish skill package\n        uses: hashgraph-online/skill-publish@df6ae95e010d9792158a441eec9ac50d4d17139d\n        with:\n          mode: publish\n          api-key: ${{ secrets.RB_API_KEY }}\n          skill-dir: skills/my-skill\n          annotate: \"true\"\n          github-token: ${{ github.token }}\n```\n\n### CLI (recommended for local setup and first publish)\n\n```bash\nnpx skill-publish\nnpx skill-publish validate ./weather-skill\nnpx skill-publish setup --account-id 0.0.12345 --hedera-private-key <key>\nnpx skill-publish create ./weather-skill --name weather-skill --preset api\nnpx skill-publish quote ./weather-skill\nnpx skill-publish publish ./weather-skill\n```\n\nAfter publish, use the returned canonical skill page, badge snippet, and resolver URLs to share a version-pinned release.\n\n## 60-Second Path\n\nIf you already have a repo and wallet, this is the shortest path to a live page:\n\n```bash\nnpx skill-publish inspect-repo .\nnpx skill-publish setup-action . --skill-dir .\nnpx skill-publish setup --account-id 0.0.12345 --hedera-private-key <key>\ngit tag v1.0.0 && git push --tags\n```\n\nThat gives you validate-only CI first, then a live Registry page, pinned install URLs, and share-ready badge snippets once you have funded credits and publish a release.\n\n## Jump To\n\n- [CLI (npx)](#cli-npx)\n- [First Publish in Under 5 Minutes](#first-publish-in-under-5-minutes)\n- [Golden Workflow Templates](#golden-workflow-templates)\n- [Trust and Security Defaults](#trust-and-security-defaults)\n- [Troubleshooting Matrix](#troubleshooting-matrix)\n- [Canonical References](#canonical-references)\n\n## CLI (npx)\n\nThe CLI now supports guided, Vercel-style command discovery:\n\n```bash\nnpx skill-publish\nnpx skill-publish --help\n```\n\nCore flows:\n\n```bash\nnpx skill-publish setup --account-id 0.0.12345 --hedera-private-key <key> --hbar 5\nnpx skill-publish create ./weather-skill --name weather-skill --preset api\nnpx skill-publish init ./skills/my-skill\nnpx skill-publish doctor ./skills/my-skill\nnpx skill-publish doctor ./skills/my-skill --fix --local-only\nnpx skill-publish validate ./skills/my-skill\nnpx skill-publish monitor ./skills/my-skill --quote-preview\nnpx skill-publish quote --skill-dir ./skills/my-skill\nnpx skill-publish publish --skill-dir ./skills/my-skill\n```\n\nRepository automation flows:\n\n```bash\n# Inspect an existing repo before opening a workflow PR\nnpx skill-publish inspect-repo .\n\n# Add a publish workflow to an existing SKILL.md repository\nnpx skill-publish setup-action . --skill-dir skills/my-skill\n\n# Scaffold a new repository with skill package + GitHub workflow preconfigured\nnpx skill-publish scaffold-repo ./weather-skill --name weather-skill\n\n# Golden path: scaffold repo, repair package metadata, and prepare for publish\nnpx skill-publish create ./weather-skill --name weather-skill --preset api\n```\n\nDistribution helper flows:\n\n```bash\nnpx skill-publish badge ./skills/my-skill\nnpx skill-publish install-url ./skills/my-skill --format summary\nnpx skill-publish install-url --name programmable-secrets --version 1.0.1 --format pinned-skill-md\nnpx skill-publish release-notes ./skills/my-skill\nnpx skill-publish readme-snippet ./skills/my-skill\nnpx skill-publish attested-kit ./skills/my-skill --format json\nnpx skill-publish apply-kit ./skills/my-skill --repo-dir . --docs-path docs/my-skill.md\nnpx skill-publish submit-indexnow ./skills/my-skill\n```\n\n## Attested Distribution Kit\n\n`skill-publish` can now generate an attested distribution kit for each resolved `name@version`.\n\nThe kit includes:\n\n- canonical HOL page URL\n- machine-readable `entity.json`\n- badge markdown and HTML\n- release notes, README, and docs snippets\n- package metadata block\n- `codemeta.json`\n- IndexNow submission targets\n\nTypical flow:\n\n```bash\nnpx skill-publish attested-kit ./skills/my-skill --format json\nnpx skill-publish apply-kit ./skills/my-skill --repo-dir . --docs-path docs/my-skill.md\nnpx skill-publish submit-indexnow ./skills/my-skill\n```\n\nWallet-first bootstrap:\n\n```bash\n# Create API key via ledger challenge/verify and top up credits in one command\nnpx skill-publish setup \\\n  --account-id 0.0.12345 \\\n  --network hedera:testnet \\\n  --hedera-private-key <key> \\\n  --hbar 5\n```\n\nWhat `setup` does:\n- requests a ledger challenge from the broker\n- signs locally with your Hedera private key\n- verifies the challenge and receives an API key\n- stores the key in `~/.skill-publish/credentials.json` (unless `--no-save`)\n- optionally purchases credits with `--hbar`\n\n## Repo Qualification Before Outreach\n\nOutreach PRs only work when the target repository already contains a real HOL skill package. Use `inspect-repo` first:\n\n```bash\nnpx skill-publish inspect-repo .\nnpx skill-publish inspect-repo . --json\n```\n\nWhat `inspect-repo` checks:\n- valid HOL packages with `SKILL.md` present\n- partial skill-like directories that are missing `SKILL.md`\n- whether `setup-action` can be added safely without guessing a skill directory\n\n`setup-action` now refuses to generate workflows for repos that do not already contain a valid HOL skill package.\n\nAfter setup, `quote` and `publish` automatically reuse the stored key, so you can run:\n\n```bash\nnpx skill-publish doctor ./skills/my-skill\nnpx skill-publish validate ./skills/my-skill\nnpx skill-publish quote ./skills/my-skill\nnpx skill-publish publish ./skills/my-skill\n```\n\n`quote` requires broker authentication, and `publish` requires both broker authentication and funded credits because the release is written on-chain.\n\n`publish` remains the default command, so legacy flag-only usage still works:\n\n```bash\nRB_API_KEY=rbk_xxx npx skill-publish --skill-dir ./skills/my-skill\n```\n\nOptional overrides:\n\n```bash\nnpx skill-publish \\\n  --mode validate \\\n  --skill-dir ./skills/my-skill\n```\n\n```bash\nnpx skill-publish \\\n  publish \\\n  --api-key rbk_xxx \\\n  --skill-dir ./skills/my-skill \\\n  --version 1.2.3 \\\n  --annotate false\n```\n\nDry run behavior:\n\n```bash\nnpx skill-publish publish ./skills/my-skill --dry-run\n# no key => validate-only\n# with key => quote-only\n```\n\nGitHub Action modes:\n\n```yaml\nwith:\n  mode: validate # no RB_API_KEY required\n  annotate: \"false\"\n```\n\n```yaml\nwith:\n  mode: publish\n  api-key: ${{ secrets.RB_API_KEY }}\n```\n\n## First Publish in Under 5 Minutes\n\nUse this path when you want the full CI/CD setup with GitHub releases and annotations.\n\n1. Generate an API key: https://hol.org/registry/docs?tab=api-keys\n2. Add credits: https://hol.org/registry/docs?tab=credits\n3. Add `RB_API_KEY` as a GitHub secret.\n4. Commit `SKILL.md` to your repo. Add `skill.json` only if you want to pin metadata explicitly instead of using synthesized defaults.\n5. Add the validate workflow for pull requests, then add the publish workflow for releases.\n\nValidate on pull requests without secrets:\n\n```yaml\nname: Validate Skill\n\non:\n  pull_request:\n    paths:\n      - skills/my-skill/**\n      - .github/workflows/validate-skill.yml\n\njobs:\n  validate:\n    runs-on: ubuntu-latest\n    permissions:\n      contents: read\n    steps:\n      - uses: actions/checkout@v4\n      - name: Validate skill package\n        uses: hashgraph-online/skill-publish@v1\n        with:\n          mode: validate\n          skill-dir: skills/my-skill\n          annotate: \"false\"\n```\n\nPublish immutable releases:\n\n```yaml\nname: Publish Skill\non:\n  release:\n    types: [published]\n\njobs:\n  publish:\n    runs-on: ubuntu-latest\n    permissions:\n      contents: write\n      pull-requests: write\n      issues: write\n    steps:\n      - uses: actions/checkout@v4\n      - name: Publish skill package\n        uses: hashgraph-online/skill-publish@v1\n        with:\n          mode: publish\n          api-key: ${{ secrets.RB_API_KEY }}\n          skill-dir: skills/my-skill\n          annotate: \"true\"\n          github-token: ${{ github.token }}\n```\n\nExpected success signal:\n- workflow output includes `published=true`\n- output includes `skill-json-hrl` (`hcs://...`) for your immutable release reference\n\n## Minimal Skill Package\n\n```\nskills/my-skill/\n├── SKILL.md\n└── skill.json\n```\n\nExample `skill.json`:\n\n```json\n{\n  \"name\": \"my-skill\",\n  \"version\": \"0.1.0\",\n  \"description\": \"Example skill package\"\n}\n```\n\n## Default Package Exclusions\n\nThese paths are never included in publish payloads:\n\n- hidden paths such as `.env`, `.env.local`, `.gitignore`, `.github/`, `.vscode/`\n- lockfiles such as `pnpm-lock.yaml`, `package-lock.json`, `yarn.lock`, `bun.lockb`\n- build and dependency output such as `node_modules/`, `dist/`, `build/`, `.next/`, `coverage/`\n- local state and sensitive material such as `*.db`, `*.sqlite`, `*.pem`, `*.key`, `*.p12`, `*.pfx`\n\nIf you need to ship a supporting artifact, keep it in a normal visible path inside the skill directory.\n\n## Golden Workflow Templates\n\nUse these copy-ready templates:\n\n- Release-driven publish: `examples/workflows/publish-on-release.yml`\n- Manual publish (`workflow_dispatch`): `examples/workflows/publish-manual.yml`\n- Monorepo path-filtered publish: `examples/workflows/publish-monorepo-paths.yml`\n\n## Why This Matters (Trustless Skills)\n\nMost “skills” get shared as copy/paste blobs or mutable links. That works until you need version pinning, audits, or reproducibility.\n\nIn this context, a “trustless skill release” means:\n\n- you publish an exact `name@version`\n- consumers can later re-fetch the same published artifact by its canonical reference\n- you can compare versions over time without relying on a private server or a package registry\n- the published payload can be traced back to a repo + commit (default behavior)\n\nThis action exists to make that publish step deterministic and automated in CI.\n\n## What You Provide vs What Runs in CI\n\n| You provide | Action handles |\n| --- | --- |\n| `skill-dir` with `SKILL.md` | file discovery, MIME detection, size checks, synthesized metadata when `skill.json` is absent |\n| `RB_API_KEY` secret for `quote` and `publish` only | authenticated broker calls that estimate or write on-chain state |\n| optional overrides (`name`, `version`) | payload shaping and metadata stamping |\n| optional annotation settings | release/PR annotation behavior |\n| workflow trigger | quote/publish/job polling orchestration |\n\n## Inputs\n\n| Input | Required | Default | Description |\n| --- | --- | --- | --- |\n| `mode` | No | `publish` | Execution mode: `validate`, `quote`, or `publish`. |\n| `api-key` | Validate: No, Quote/Publish: Yes | - | Registry Broker API key. Publish still consumes credits and requires funded broker auth. |\n| `skill-dir` | Yes | - | Path containing `SKILL.md`. `skill.json` is optional and will be synthesized when missing. |\n| `api-base-url` | No | `https://hol.org/registry/api/v1` | Broker base URL (`.../registry` or `.../registry/api/v1`). |\n| `account-id` | No | - | Optional Hedera account ID for publish authorization edge cases. |\n| `name` | No | - | Optional skill name override for `skill.json`. |\n| `version` | No | - | Optional version override for `skill.json`. Non-stable overrides are blocked on production by default. |\n| `allow-nonstable-production-version` | No | `false` | Explicitly permits publishing a non-stable custom version to the production registry. |\n| `stamp-repo-commit` | No | `true` | Stamp `repo` and `commit` metadata into payload. |\n| `poll-timeout-ms` | No | `720000` | Max time to wait for publish job completion. |\n| `poll-interval-ms` | No | `4000` | Interval between publish job status polls. |\n| `annotate` | No | `true` | Post publish result to release notes or merged PR comments. |\n| `preview-upload` | No | `true` | When `mode=validate` or `mode=monitor`, upload preview state through GitHub OIDC when available. |\n| `submit-indexnow` | No | `false` | Submit canonical HOL skill URLs to IndexNow after publish or skip-existing. |\n| `github-token` | No | - | Token used only when `annotate=true`. |\n| `comment-mode` | No | `state-changes` | Controls low-noise managed PR comment behavior for monitor runs. |\n| `comment-on-success` | No | `true` | When false, skips managed PR comment updates after successful validate or monitor runs. |\n| `quote-preview` | No | `false` | Requests anonymous publish cost estimates during validate or monitor when available. |\n| `group-key` | No | skill directory | Optional grouping key for multi-skill monitor summaries. |\n\n## Outputs\n\n| Output | Description |\n| --- | --- |\n| `published` | `true` when publish executed, `false` when skipped. |\n| `skip-reason` | Skip reason (currently `version-exists`). |\n| `preview-json` | JSON preview report emitted for validate or monitor runs. |\n| `preview-json-path` | Path to the local preview report JSON file. |\n| `status-url` | Canonical status or preview page URL for validate, monitor, or publish. |\n| `trust-tier` | Lifecycle trust tier resolved from validate, monitor, or publish state. |\n| `publish-readiness` | Readiness summary for whether a publish can proceed cleanly. |\n| `missing-requirements` | JSON array of missing conditions blocking publish readiness. |\n| `estimated-credits-range` | Estimated publish credit range for anonymous quote previews. |\n| `managed-comment-url` | URL of the managed PR comment for monitor state changes. |\n| `purchase-url` | HOL purchase/setup entrypoint for funded publish readiness. |\n| `publish-url` | HOL publish flow entrypoint. |\n| `verification-url` | HOL verification flow entrypoint for the resolved skill. |\n| `skill-name` | Skill name from publish result. |\n| `skill-version` | Skill version from publish result. |\n| `preview-json` | Validate-mode `skill-preview.v1` payload. |\n| `preview-json-path` | Path to the generated preview JSON file. |\n| `status-url` | Preview or published lifecycle URL, depending on mode. |\n| `quote-id` | Broker quote identifier. |\n| `job-id` | Publish job identifier. |\n| `directory-topic-id` | Skill directory topic ID. |\n| `package-topic-id` | Skill package topic ID. |\n| `skill-json-hrl` | Canonical `hcs://...` reference for `skill.json`. |\n| `credits` | Credits consumed. |\n| `estimated-cost-hbar` | Estimated HBAR cost from quote. |\n| `skill-page-url` | Canonical skill detail page URL for the resolved `name@version`. |\n| `entity-url` | Machine-readable `entity.json` URL for the canonical skill page. |\n| `docs-url` | Canonical HOL docs URL for the registry. |\n| `openapi-url` | Canonical OpenAPI URL for the registry API. |\n| `install-url-pinned-skill-md` | Pinned `SKILL.md` resolver URL. |\n| `install-url-latest-skill-md` | Latest `SKILL.md` resolver URL. |\n| `install-url-pinned-manifest` | Pinned `manifest` resolver URL. |\n| `install-url-latest-manifest` | Latest `manifest` resolver URL. |\n| `install-metadata-pinned-url` | Pinned install metadata URL. |\n| `install-metadata-latest-url` | Latest install metadata URL. |\n| `badge-markdown` | Markdown badge snippet for the resolved version. |\n| `badge-html` | HTML badge snippet for the resolved version. |\n| `markdown-link` | Markdown link snippet for the canonical skill page. |\n| `html-link` | HTML link snippet for the canonical skill page. |\n| `readme-snippet` | README snippet with canonical install links. |\n| `docs-snippet` | Docs snippet with canonical HOL links. |\n| `citation-snippet` | Citation snippet pointing to canonical HOL metadata. |\n| `release-notes` | Release notes snippet with install links and badge markdown. |\n| `package-metadata-json` | JSON block for package metadata pointing at HOL canonical URLs. |\n| `codemeta-json` | CodeMeta document for the resolved skill version. |\n| `attested-kit-json` | Full attested distribution kit payload. |\n| `next-actions` | Post-publish checklist with the best distribution next steps. |\n| `annotation-target` | Annotation destination (`release:<id>`, `pr:<id>`, `none`, `failed`). |\n| `indexnow-result` | IndexNow submission result when enabled. |\n| `result-json` | Full result payload as JSON string. |\n\nUseful references after publish:\n- `directory-topic-id`: where the skill record lives\n- `package-topic-id`: package/version topic reference\n- `skill-json-hrl`: canonical reference you can paste into docs, release notes, or tooling\n- `skill-page-url`, install URL outputs, and snippets: ready-to-share distribution kit output for READMEs and release notes\n\nAn HRL looks like: `hcs://1/0.0.12345`\n\n## Example: Gate Follow-up Jobs on Publish State\n\n```yaml\n- name: Publish skill\n  id: publish_skill\n  uses: hashgraph-online/skill-publish@v1\n  with:\n    api-key: ${{ secrets.RB_API_KEY }}\n    skill-dir: skills/my-skill\n\n- name: Notify only when new version published\n  if: steps.publish_skill.outputs.published == 'true'\n  run: |\n    echo \"Published ${{\n      steps.publish_skill.outputs.skill-name\n    }}@${{\n      steps.publish_skill.outputs.skill-version\n    }}\"\n```\n\n## Runtime Behavior\n\n`mode=validate`\n1. Discovers and validates package files in `skill-dir`.\n2. Resolves broker limits from `/skills/config`.\n3. Emits `skill-preview.v1` JSON plus lifecycle/share outputs.\n4. Optionally uploads preview state through GitHub OIDC.\n\n`mode=quote`\n1. Discovers and validates package files in `skill-dir`.\n2. Resolves broker limits from `/skills/config`.\n3. Checks if `name@version` already exists.\n4. Requests quote via `POST /skills/quote`.\n5. Emits quote metadata without publishing.\n\n`mode=publish`\n1. Discovers and validates package files in `skill-dir`.\n2. Resolves broker limits from `/skills/config`.\n3. In `validate` and `monitor`, emits preview/status outputs without requiring an API key.\n4. In `monitor`, polls broker lifecycle state and can update a single managed PR comment.\n5. In `quote`, requests authenticated cost estimates via `POST /skills/quote`.\n6. In `publish`, checks if `name@version` already exists, publishes via `POST /skills/publish`, then polls `GET /skills/jobs/{jobId}` until completion.\n7. Emits outputs, step summary, and optional GitHub annotations.\n\n## Idempotency and Failure Behavior\n\n- If `name@version` already exists, the action exits cleanly with `published=false` and `skip-reason=version-exists`.\n- Publish failures return structured output in `result-json` so CI can gate follow-up jobs.\n- Annotation failures do not hide publish status; `annotation-target` reports where comments were attempted.\n- Validate mode never quotes or publishes, and it does not require `RB_API_KEY`.\n\n## Trust and Security Defaults\n\n- Validate workflows should grant only `contents: read` by default.\n- Preview uploads should be opt-in and limited to trusted repo-owned workflows. Do not grant `id-token: write` to fork-triggered `pull_request` jobs just to validate package structure.\n- Publish workflows that annotate releases or PRs typically also need `contents: write`, `pull-requests: write`, and `issues: write`.\n- Store `RB_API_KEY` in repository or organization secrets.\n- If you do not need GitHub annotations, set `annotate: \"false\"` and omit `github-token`.\n- For strict supply-chain pinning, pin to a full commit SHA instead of `@v1`:\n\n```yaml\nuses: hashgraph-online/skill-publish@df6ae95e010d9792158a441eec9ac50d4d17139d\n```\n\n- When annotations are disabled, this tighter permission set is sufficient:\n\n```yaml\npermissions:\n  contents: read\n```\n\n## Troubleshooting Matrix\n\n| Symptom | Likely Cause | Fix |\n| --- | --- | --- |\n| `skip-reason=version-exists` | Same `name@version` already published | Bump `version` in `skill.json` and re-run. |\n| Quote request fails | Missing credits or invalid package metadata | Top up credits, then validate package metadata or pass explicit `name` / `version` overrides if needed. |\n| Publish job times out | Broker load or long queue | Increase `poll-timeout-ms` (for example, `1200000`) and re-run. |\n| `published=true` but no PR/release annotation | Missing write scopes or missing `github-token` | Add `pull-requests: write`, `issues: write`, `contents: write`, and pass `github-token`. |\n| Missing file validation error | `SKILL.md` not found under `skill-dir` | Verify folder structure and `skill-dir` path in workflow. |\n| API authentication error | Wrong or revoked API key | Regenerate key at `/registry/docs?tab=api-keys` and update `RB_API_KEY` secret. |\n\n## How Verification Works (HCS-26)\n\nYou do not need the full standard to use this action, but the storage and lookup rules follow HCS-26.\n\n- the Registry Broker is the publish API surface\n- the publish result includes topic IDs and `hcs://...` HRLs that can be resolved independently\n\nFull standard:\n- https://github.com/hashgraph-online/hiero-consensus-specifications/blob/main/docs/standards/hcs-26.md\n\n## Canonical References\n\n- npm package: https://www.npmjs.com/package/skill-publish\n- Marketplace listing: https://github.com/marketplace/actions/skill-publish\n- Registry landing page: https://hol.org/registry\n- Skill index: https://hol.org/registry/skills\n- Product docs: https://hol.org/docs/registry-broker/\n- Interactive API docs: https://hol.org/registry/docs\n- OpenAPI: https://hol.org/registry/api/v1/openapi.json\n- Skill schema: https://raw.githubusercontent.com/hashgraph-online/skill-publish/main/schemas/skill.schema.json\n\n## Citation\n\nIf you reference this action in documentation or research, use [`CITATION.cff`](./CITATION.cff).\n","readmeFilename":"README.md"}