All notable changes to this project will be documented in this file.
- repair npm README images and tighten package contents (#222)
- update changelog and version for v2.3.1 (#221)
- complete P3 polish — npm allowlist, docs accuracy, sitemap+OG (#220)
- verify 10 more agent skill directories (26 verified total) (#219)
- guard against slug path traversal and harden security scans (#218)
- cover converter utilities (#216)
- bump github/codeql-action/init from 4.37.3 to 4.37.6 (#215)
- bump github/codeql-action/analyze from 4.37.3 to 4.37.6 (#214)
- extract home helper to shared utility (#210)
- update changelog and version for v2.3.0 (#212)
- add alloutflo to contributors list (#217)
- add devmaster1987 to contributors list (#213)
- add apps.json for wvw.dev listing (#201)
- warn MCP servers execute arbitrary code for non-github sources (#211)
- handle rejected debounce callbacks
- security scan bypass in setup/profile/ci + bundle + P1 hardening (#202)
- cover shared debounce utility
- add shared debounce utility
- use shared watch debouncer
- share watch debounce logic
- restore console stubs and add progress bar fail coverage
- add unit tests for src/utils/spinner.js
- update changelog and version for v2.2.0 (#200)
- add Kegorapetse to contributors (#209)
- add Caner Bektaş to contributors list
- filter installed skills by agent (#158)
- update demo GIFs with corrected timing and fix init dispatch (#197)
- add template system to rolecraft init (--template, --list) (#196)
- add rollback mechanism, parallel install, error handling improvements (#195)
- silence init stdout to avoid node:test desync (#199)
- add rollback --help suggestion and showError integration test
- remove redundant deploy-docs job from release-publish (docs.yml auto-deploys on push)
- round 2 — fix remaining architectural issues (#194)
- fix top 5 architectural issues (#193)
- update changelog and version for v2.1.0 (#192)
- add adity982 to contributors
- update landing page for new features (#198)
- add RoleCraft branding to skills README
- update README positioning, tagline, and npm description
- update stale values — 87.4 kB, 86 agents
- auto-generate benchmark SVG from results data (#191)
- replace hardcoded claims with manifest tokens, update benchmark with current data (#190)
- add agents capability manifest command and generated agent docs (#186)
- add API modules for CLI-only commands and Node.js API cross-references (#183)
- update publish message for auto-merge workflow (#182)
- add category to publish flow; fix YAML quote stripping
- use full URL for SVG in RESULTS.md to fix VitePress build
- close watchers and debounce timers deterministically in watch tests (#189)
- update public claims — agent count and package size from manifest, soften absolute language (#188)
- publish directly to upstream registry, fall back to fork on 403
- remove check-updates from completions, add -d descriptions and -o/-s y flags to fish
- complete missing commands and flags
- add checkout step in deploy-docs job for gh workflow run
- bump postcss from 8.5.16 to 8.5.23 (#187)
- update repo references from sametcelikbicak to rolecraft-sh in docs and examples
- update changelog and version for v2.0.1 (#179)
- update comparison.md with garden-skills and fix duplicate row
- add MFA-G to contributors list
- fix auto-merge references to reflect maintainer merge workflow
- use upstream commit SHA for branch creation, add error bodies, document gh auth token
- bump version to 2.0.1 (registry publish fix + npm pack hygiene)
- bump github/codeql-action/analyze from 4.37.1 to 4.37.3 (#178)
- bump github/codeql-action/init from 4.37.1 to 4.37.3 (#177)
- release v2.0.0
- update publish success message to reflect maintainer review
- add marketplace badge to CI guide
- add Marketplace badge to CI section, fix agent count, add registry source link
- complete v2.0.0 docs audit (api diff/compose/test, comparison, CHANGELOG dup fix)
- add GitHub Registry MVP — search, publish, install by slug, version check, API exports (#172)
- progress bar, TUI flicker/resize fix, CLI help update (#170)
- add doctor --deep conflict detection (#169)
- add rolecraft diff and compose commands (#168)
- add rolecraft test command with assertion engine (#164)
- add Node.js API layer with src/api/ modules (#159)
- add rolecraft mcp check command for npm update checks
- add MCP config validation to rolecraft doctor (P2)
- add MCP security scan for gh: and npm: sources (P2)
- add version pinning for npm (@version) and gh (@branch/@tag) MCP sources (P1)
- add rolecraft mcp search command for GitHub and npm (P1) (#18)
- add MCP lockfile for ci restore (P0) (#151)
- add uvx:, pipx:, go:, deno:, cargo: MCP source types (#149)
- enhance doctor command with comprehensive health checks (#147)
- add multi-skill support to use and setup commands (#146)
- multi-skill install with interactive selection, --list, and --skill flags (#145)
- readme table formatting and move mgalore to new row
- reject empty convert sources (#171)
- execSync→spawnSync for CodeQL alert, fix doc build (unclosed array tag), add publish/registry to sidebar and nav (#173)
- resolve CodeQL alerts 88 and 89 (#166)
- resolve CodeQL alerts in test command (#165)
- remove unused imports flagged by CodeQL (#82, #83) (#162)
- remove unused imports flagged by CodeQL (#160)
- validate MCP agent support — only 7 of 86+ agents have MCP (#150)
- remove unused report function in doctor.js (CodeQL #73)
- replace string concat with template literals
- add Biome lint/format with pre-commit hook and fix CodeQL alerts
- trigger CodeQL re-analysis
- exclude test files and dev artifacts from npm bundle
- bump actions/checkout from 7.0.0 to 7.0.1 (#148)
- update repo references from sametcelikbicak to rolecraft-sh
- release v1.6.0
- add mgalore to contributors (#175)
- fix badge logo visibility with logoColor=white
- collapse nav to 3 items with dropdowns for small screens
- update AGENTS.md with interaction rules and branch strategy
- add mcp update/check docs, add mcp to shell completions
- add GitHub Action badge, CI guide, and docs page
- Update paths
- add --json flag to list command (#120)
- add git and npm availability checks
- add skills.sh search with --skills-sh flag (experimental) (#101)
- add convert command for SKILL.md <-> .mdc format conversion (#100)
- add droid, chatgpt, codearts-agent, universal agents (86 total)
- log reinstall failure in watch command
- document install yes flag in help
- resolve CodeQL alerts and flaky ENOTEMPTY tests
- enable docs deployment after release
- bump version to v1.6.0
- bump github/codeql-action/analyze from 4.37.0 to 4.37.1 (#115)
- bump github/codeql-action/init from 4.37.0 to 4.37.1
- bump actions/setup-node from 6.4.0 to 7.0.0
- add star CTA to README (#102)
- update changelog and version for v1.5.0 [skip ci] (#97)
- add Benjamin Ayivoh to contributors, convert to grid layout
- add star request to CONTRIBUTING.md
- add Gaohar Imran and Ajay Krishnan to contributors table
- add Yurii201811 to contributors table
- add getting-started, use-cases, and CLI reference pages (#103)
- streamline README for Show HN launch
- improve UX with dry-run consistency, spinner, and error formatting (#96)
- agent profile system (save, apply, diff, edit, export, import, link) (#89)
- add demo GIF to hero section and show version in site title (#88)
- add benchmark comparison SVG visual with color contrast fixes (#87)
- use full URL for benchmark SVG to prevent VitePress build failure
- bump actions/upload-pages-artifact from 3.0.1 to 5.0.0 (#86)
- bump actions/configure-pages from 5.0.0 to 6.0.0 (#85)
- bump actions/deploy-pages from 4.0.5 to 5.0.0 (#84)
- bump github/codeql-action/init from 4.36.3 to 4.37.0 (#83)
- bump github/codeql-action/analyze from 4.36.3 to 4.37.0 (#82)
- update changelog and version for v1.4.0 [skip ci] (#81)
- simplify CONTRIBUTING, move release process to RELEASE.md, add good first issues
- onboarding guide + profile guide + fix dry-run priority and flag ordering (#90)
- update architecture.md with missing commands and utils
- add profile command to sidebar and fix formatting
- improve README, add GitHub templates, fix CodeQL alert, resolve Dependabot CVEs, 100% watch.js coverage (#74)
- add watch command for auto-syncing skills on file change
- add benchmark to docs site, remove ANALYSIS from sidebar (#72)
- add VitePress docs site with GitHub Pages deploy (#71)
- highlight MCP + Skills as key differentiator in README
- MCP server management for AI agents
- use real user identity for tag signing in release-prep workflow
- use web streams pipeTo for downloadFile to resolve CodeQL http-to-file-access (#79)
- use web streams pipeTo for downloadFile to resolve CodeQL http-to-file-access
- resolve CodeQL alerts — http-to-file-access and log-injection (#78)
- close security vulnerabilities and add watch to comparison (#75)
- async/sync cleanup, process.exit removal, magic string dedup (#77)
- centralize agent list into src/agents.js and extend MCP to all 82 agents
- update changelog and version for v1.3.0 [skip ci] (#68)
- deduplicate nav links and add benchmark reference
- Revert "fix: use web streams pipeTo for downloadFile to resolve CodeQL http-to-file-access"
- add agents-xml command for AGENTS.md XML generation (#63)
- add 16 new agent targets, surpass Vercel (82 vs 72 agents) (#61)
- add rolecraft doctor command for system health checks (#60)
- add security scoring for installed skills (0-100 static analysis) (#57)
- add npm package source support (npm:package) (#53)
- add missing return after process.exit in frozenLockfile, update, and remove blocks (#66)
- stop after blocked installs (#62)
- support SSH signing in release-prep workflow + update docs (#59)
- preserve GPG signature when release-prep moves tag to changelog commit (#58)
- remove unused mkdirSync import (CodeQL #42) + AGENTS.md merge rule
- use mkdtempSync for npm temp dir (CodeQL insecure-temporary-file)
- resolve CodeQL audit findings and improve test hygiene
- release v1.2.0
- improve repo quality - code of conduct, support, benchmark, migration guide (#67)
- reorganize Contributing and Contributors sections in README
- add contributors section to README (#65)
- add SKILL.md for skills.sh leaderboard visibility (#50)
- add --yes flag, check command, GitLab/SSH URL support, and 20 new agents
- remaining 5 code scanning alerts (unused vars, file-system-race)
- resolve remaining CodeQL alerts
- allow workflow_dispatch in publish job condition
- add workflow_dispatch to release-publish workflow (#43)
- improve coverage to 95% - add missing tests, fix coverage config (#46)
- upgrade Node to 24, migrate CodeQL to v4, fix code scanning alerts
- update changelog and version for v1.1.0 [skip ci] (#42)
- add startup checklist to AGENTS.md (#51)
- update AGENTS.md workflow instructions
- add AGENTS.md with development guidelines
- security hardening - provenance, CodeQL, Dependabot, action pinning, npm audit (#36)
- add rolecraft upgrade self-update command (#35)
- add 13 new agent targets (43 total), update analysis and docs (#34)
- shell completions + interactive TUI search (#32)
- improve repo visibility with demo GIF, badges, and enhanced metadata (#31)
- rolecraft install --help shows help instead of installing; --copy clears previous symlinks (#41)
- copilot path now uses .github/copilot/skills/ + docs update
- bump github/codeql-action/init
- bump actions/setup-node from 5.0.0 to 6.4.0
- bump actions/checkout from 5.0.1 to 7.0.0 (#37)
- bump github/codeql-action/analyze
- update changelog and version for v1.0.0 [skip ci] (#30)
- add Product Hunt badge, Node version badge
- add bundle command with inline sources and bundle create (#26)
- add interactive search mode (--interactive) (#25)
- add --dry-run mode for install and setup commands (#24)
- add 9 new agent targets (roo, trae, hermes, kiro, augment, kilo, openhands, junie, factory) (#23)
- add verify, ci, content hash, symlink mode (#22)
- add init, search, 20 agent targets, frozen-lockfile (#21)
- update changelog and version for v0.2.0 [skip ci] (#19)
- restructure README into modular documentation hub (#28)
- update ANALYSIS.md and README.md with accurate competitive data (#27)
- remove test coverage metrics from analysis and update roadmap
- Bug fixes and improvements for stable release (#29)
- add devin (Devin Desktop) agent target with windsurf backward compat (#20)
- make project scope default install target
- add rolecraft setup command to detect agents and install
- add rolecraft use command to preview skills without installing
- add windsurf, codex, copilot, aider, cline agent targets
- enable npm provenance and add SECURITY.md
- add coverage improvements for install, update, resolver (#13)
- release v0.1.4
- add competitive analysis and roadmap
- cursor target, update command, project-scoped remove, and more (#11)
- release v0.1.3
- add contributing guide and CODEOWNERS (#10)
- remove unnecessary npm install step
- release v0.1.2
- add changelog automation with GitHub Actions
- add version command (version, --version, -v) (#4)
- use pull_request_target and npm install for release-publish
- use echo -e instead of printf for newlines; skip merge commits in changelog
- delete existing branch before creating new one
- restructure release-prep workflow YAML and use PAT_TOKEN
- resolve YAML syntax error in release-prep workflow and fix script for Linux compatibility
- list command now includes project-scoped skills (#3)
- release v0.1.1
- Update README
- add changelog automation with GitHub Actions
- add version command (version, --version, -v) (#4)
- use echo -e instead of printf for newlines; skip merge commits in changelog
- delete existing branch before creating new one
- restructure release-prep workflow YAML and use PAT_TOKEN
- resolve YAML syntax error in release-prep workflow and fix script for Linux compatibility
- list command now includes project-scoped skills (#3)
- Update README
- Initial release with core CLI functionality
- Version command (
version,--version,-v) - List command with project-scoped skills support
- Zero-dependency CLI for opencode, claude-code, cursor, and more