create-adsk - npm Package Compare versions

Comparing version 0.1.0 to 0.2.0

kit-snapshot/.cursor/commands/create-pr.md

+# /create-pr
+
+Open or refresh a GitHub pull request with title and body filled from branch commits.
+
+## Skill
+
+Read and follow **`skills/pull-request-authoring`** (adopter apps: `.agents/skills/pull-request-authoring`).
+
+## Usage
+
+```
+/create-pr
+/create-pr "base main"
+/create-pr "fill the existing empty PR body"
+```
+
+## Behavior
+
+1. Gather `git log <base>...HEAD` and the branch diff.
+2. Draft a Conventional Commits title plus Summary / Changes (repo PR template when present).
+3. `gh pr create`, or `gh pr edit` if an empty-template PR already exists.
+4. Return the PR URL.

kit-snapshot/.cursor/commands/setup-socket.md

+# /setup-socket
+
+Triage Socket / supply-chain gates and harden dependency changes before merge or publish.
+
+## Skill
+
+Read and follow **`skills/supply-chain-gate`** (adopter apps: `.agents/skills/supply-chain-gate`).
+
+## Usage
+
+```
+/setup-socket
+/setup-socket "Socket CI failed on this PR"
+/setup-socket "Can we add lodash? Check supply chain"
+/setup-socket "Refresh Socket Actions + policy allowlist"
+```
+
+## Behavior
+
+1. Classify: PR triage, workflow setup, dependency intake, or publish hygiene.
+2. Apply block/warn/monitor from the skill policy allowlist (and `SECURITY.md` in this kit).
+3. Fix blockers or stop for an explicit exception; call out secrets/dashboard steps still required.

kit-snapshot/skills/pull-request-authoring/SKILL.md

+# pull-request-authoring

kit-snapshot/skills/supply-chain-gate/SKILL.md

+# supply-chain-gate

kit-snapshot/.cursor/commands/update-readme.md

@@ -20,5 +20,6 @@ # /update-readme
 1. Scope the README path (root or package) and gather evidence (manifests, scripts, entry points, existing docs).
-2. List missing / stale / wrong-audience findings before editing.
+2. List missing / stale / wrong-audience / dense-Quick-Start findings before editing.
 3. Patch README sections to match reality; prefer links over duplicated content.
-4. Verify install/run commands and claimed stack against actual files.
-5. Do not invent features, APIs, or dependencies.
+4. For npm CLIs: Interactive happy path first, Non-interactive flags second (readme-authoring `quick-start-patterns`).
+5. Verify install/run commands and claimed stack against actual files.
+6. Do not invent features, APIs, or dependencies.

kit-snapshot/.cursor/rules/project-cmds/RULE.md

@@ -29,2 +29,3 @@ ---
 # create-adsk npm verify:    ./scripts/verify-create-adsk-registry.sh [--npx]
+# release-please refresh:    gh workflow run release-please.yml
 # create-adsk test:     npm test -w create-adsk
@@ -31,0 +32,0 @@ # create-adsk build:    npm run build -w create-adsk

kit-snapshot/profiles.json

@@ -39,3 +39,5 @@ {
         "skill-optimizer",
-        "readme-authoring"
+        "readme-authoring",
+        "supply-chain-gate",
+        "pull-request-authoring"
       ],
@@ -52,3 +54,5 @@ "cursor": "commands",
         "skill-optimizer",
-        "readme-authoring"
+        "readme-authoring",
+        "supply-chain-gate",
+        "pull-request-authoring"
       ],
@@ -55,0 +59,0 @@ "cursor": "none",

package.json

 {
   "name": "create-adsk",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Adopt the Agentic Development Starter Kit as a versioned profile (skills + Cursor wiring).",
@@ -25,4 +25,4 @@ "type": "module",
   "dependencies": {
-    "@clack/prompts": "^0.10.1",
-    "commander": "^13.1.0"
+    "@clack/prompts": "0.10.1",
+    "commander": "13.1.0"
   },
@@ -29,0 +29,0 @@ "devDependencies": {

README.md

@@ -12,38 +12,63 @@ ```text
 
-Adopt the **Agentic Development Starter Kit (ADSK)** as a versioned **profile** — first-party skills via the skills CLI plus optional Cursor commands/rules — without a skills marketplace UX.
+Adopt the **Agentic Development Starter Kit (ADSK)** as a versioned **profile** — skills via the skills CLI plus optional Cursor commands/rules. Not a skills marketplace.
 
-A ready-to-adopt kit for agentic, spec-driven development — workflow skills, Cursor slash commands, and a versioned profile for your team.
+## Quick Start
 
-## Two-tool model
+### Interactive
 
-| Tool | Owns |
-|------|------|
-| **`npx skills`** | Install and update skill folders into `.agents/skills/` |
-| **`npx create-adsk`** | Apply an ADSK profile (skills + Cursor + `.adsk/config.json`) |
+```bash
+npx create-adsk
+```
 
-Use `npx skills` to install skill folders. Use `npx create-adsk` when you want this kit’s workflow + Cursor adopted as a versioned profile in your repo.
+Follow the prompts. You pick a profile, optionally add product packs, then the CLI installs skills, syncs Cursor commands when the profile includes them, and writes `.adsk/config.json`.
 
-## Quick start
+| Profile | You get |
+|---------|---------|
+| `core` | Spec-driven workflow + Cursor commands |
+| `delivery` | Core + DevOps strategy + release automation |
+| `maintainer` | Delivery + skill/README authoring + supply-chain gate + stock rules |
+| `skills-only` | All first-party skills; no `.cursor/` writes |
 
+Source: [`profiles.json`](../../profiles.json). Contract: [`docs/product/create-adsk.md`](../../docs/product/create-adsk.md).
+
+### Non-interactive
+
 ```bash
-# From an app repo (after npm publish):
 npx create-adsk --profile delivery --yes
-
-# From a kit checkout (until publish):
-npx --yes /path/to/agentic-development-starter-kit/packages/create-adsk --profile delivery --yes
 ```
 
-Profiles (`core` | `delivery` | `maintainer` | `skills-only`) are defined in the kit [`profiles.json`](../../profiles.json). Product contract: [`docs/product/create-adsk.md`](../../docs/product/create-adsk.md).
+| Flag | Meaning |
+|------|---------|
+| `--profile <id>` | Choose a profile without prompting |
+| `--yes` / `-y` | Skip prompts (`core` if `--profile` is omitted; optional packs off unless `--with-optional-packs`) |
 
+See `npx create-adsk --help` for the full option list.
+
 ## Commands
 
 ```bash
-npx create-adsk init --profile delivery --yes   # default command
-npx create-adsk update                          # from .adsk/config.json
-npx create-adsk status                          # profile + drift (exit 1 if drift)
-npx create-adsk --help                          # skills-style banner + command list
+npx create-adsk          # init (interactive; default)
+npx create-adsk update   # refresh from .adsk/config.json
+npx create-adsk status   # profile + drift (exit 1 if drift)
 ```
 
-Flags: `--yes` / `-y`, `--dry-run`, `--scope project|global`, `--force-rules`, `--with-optional-packs`, `--target <dir>`.
+Other useful flags: `--dry-run`, `--scope project|global`, `--force-rules`, `--with-optional-packs`, `--target <dir>`.
 
+## Two tools
+
+| Tool | Owns |
+|------|------|
+| **`npx skills`** | Skill folders in `.agents/skills/` |
+| **`npx create-adsk`** | ADSK profile (skills + Cursor + `.adsk/config.json`) |
+
+## Local kit path (optional)
+
+Developing against a checkout instead of the published package:
+
+```bash
+npx --yes /path/to/agentic-development-starter-kit/packages/create-adsk
+```
+
+(`npx --yes` skips the npx install prompt for that path — not the same as create-adsk `--yes`.)
+
 ## Develop in this monorepo
@@ -58,4 +83,12 @@
 
-## Publishing
+## Releases (kit vs npm)
 
-Releases use npm [Trusted Publishing](https://docs.npmjs.com/trusted-publishers/) from [`.github/workflows/publish-create-adsk.yml`](../../.github/workflows/publish-create-adsk.yml) (OIDC + provenance). Day-to-day and bootstrap steps: [`docs/RELEASE.md`](../../docs/RELEASE.md).
+Kit GitHub releases (`v*`) and this npm package are **independent**.
+
+| You want… | Do this |
+|-----------|---------|
+| Land code on GitHub | PR → green `tier1` → merge to `main` |
+| Kit changelog / GitHub Release | Merge the release-please PR when ready |
+| New `npx create-adsk` on npm | Bump `package.json` version on `main`, then tag `create-adsk-vX.Y.Z` |
+
+Full workflow: [`docs/RELEASE.md`](../../docs/RELEASE.md). Publishing uses [Trusted Publishing](https://docs.npmjs.com/trusted-publishers/) via [`.github/workflows/publish-create-adsk.yml`](../../.github/workflows/publish-create-adsk.yml).

New alerts

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Fixed alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Improved metrics

Total package byte prevSize

99929

2.4%

Number of package files

70

6.06%

Lines of code

1236

0.32%

Number of lines in readme file

93

55%

Number of medium supply chain risk alerts

1

-50%

Dependency changes

• Updated

  @clack/prompts@0.10.1

• Updated

  commander@13.1.0