feat: a Skills tab per project, to review drafts and edit the skills a project has

[lucazagaia]

Why

Skill++ takes a candidate all the way to an installed skill, and then the review page had nothing for it. Revise refused installed skills while the Drafts tab still showed the button, skills made by hand never appeared, and a skill could only be changed by hand.

What it does

The Drafts tab becomes Skills, one block per project: that project's drafts to review first, then every skill in its .claude/skills/, whoever made it, three cards to a row (two, then one, on narrower screens).

• A card is the skill's name and what it is for, with a label while an edit runs or waits. Clicking it opens the skill: its SKILL.md, rendered through the page's own escaped markdown, and never read through a link.
• Edit: your agent (SKILL_PLUS_PLUS_AGENT, claude -p by default) edits a copy in a temp folder, and the result waits as a per-file diff until Apply or Discard. The project is never written before Apply, and Apply is refused if the skill changed after the copy was taken. Nothing is proposed when the agent changed nothing, declined, renamed the skill, added a link, or touched the project's copy while it ran. skill-plus-plus edit-skill does the same from the terminal.
• Undo, right after Apply, puts the skill back as it was. It lasts until the next action or a reload of the page: Apply hands the page a token that the page drops at its next action, the copy stays in Skill++'s own folder, and Undo is refused once anything changed the skill since.
• Install copies a draft into its project's .claude/skills/<name>/ and keeps nothing else about it: from then on the folder is the skill. Deleting the folder takes it out, and its draft comes back to review. revise refuses an installed draft and names edit-skill instead.
• Every candidate belongs to a project. Dictation (/skill-plus-plus-new) now records the folder it runs in; it used to record none, which is where every "No project" entry came from. The page shows only candidates with a project, so the project menu has no "No project" any more.
• One project at a time, always. The project menu has no All projects: one project is always chosen, even when it is the only one. The page opens on the project chosen last, or else the one skill-plus-plus web was started in, or else the first.
• The page's own pop-ups. Questions (Ignore, Discard) and errors open in a <dialog> of the page. The browser's confirm and alert can be switched off, and Claude's in-app browser does: Ignore then did nothing, and errors never showed.

A request names a project the page lists and a folder in it, never a path. Every change to a project's skills, and every background job, runs under one lock.

Removed

Uninstall, Just for me, Download, Update, the personal gallery and web --skills-dir: a skill belongs to the project it was made from.

Turning a skill off is left out on purpose. 86cc7d6 takes it out, and it comes back on a branch of its own, which can start by reverting that commit.

Also fixed on the way

• tier no longer deletes a skill already in the target tier (the tiers are shared by every project).
• A revision starting with - (--shorter) reaches the agent.
• install.read_settings / write_settings write settings files whole.
• Every test gets a fake agent command by default, so a test that forgets to stub the agent fails at once instead of running claude -p.

Reading the history

The first six commits are the first design: a separate Project skills tab with View, Turn off and Archive. The last five reshape it into what is described above, so the whole diff reads better than commit by commit.

Developed on a stack of #25 and #26. After they merged, main was byte-identical to that stack, so the first six commits were replayed onto main with no conflicts.

Verified

• 611 tests pass: listing and cards, the viewer's caps and links, edit-skill (dry run, copy only, rename, decline, workspace removed, writes into the project caught), the edit flow end to end with a stub agent, Undo (its token, only the last Apply, refused after a change, cleared by a new server), install and a hand-deleted folder, request safety, dictation's project, and the page code in node (galleries, the project menu, pop-ups, escaped diffs). scripts/leak_guard.py: 0 hits.
• In a browser, on a scratch ledger with two projects:
  • the tab at 3, 2 and 1 columns, with no horizontal scroll on a phone;
  • Install from To review;
  • Edit through a stub agent to a diff, then Apply and Undo;
  • Undo gone after another action, and after a reload;
  • Ignore and Discard asking through the page's pop-up, and an error shown in it;
  • a hand-deleted skill's draft back to review;
  • the project menu listing only real projects, one always chosen, and the choice kept across a reload.

Not verified here

• A real edit with claude -p (only a stub agent ran).
• The README screenshots docs/images/skill-installed.png and docs/images/draft-questions.png still show the old Drafts tab, and need retaking.