Feat/235 mcp publish skills

[jsdevninja]

What changed

Adds mcp.publish_skills to .vouch/config.yaml (default true) and wires it through kb.list_skills, kb.get_skill, kb.capabilities, MCP, JSONL, and CLI (vouch list-skills, vouch get-skill). Also ships the skill-discovery surface itself — scanning project-local and user-global .claude/skills and .claude/commands trees — which was scoped on upstream/feat/hot-memory-skills but not yet on main.

Why

Closes #235(#235). For a company-brain KB, the skill catalogue itself can be sensitive. gbrain already gates this with mcp.publish_skills; vouch needs the same knob so MCP callers can't enumerate every slash command and SKILL.md when the operator wants the catalogue hidden. Default-on keeps existing KBs unchanged.

What might break

No breaking changes for existing .vouch/ directories. KBs with no mcp: block behave exactly as today (publish_skills defaults to true). On-disk layout, bundle format, and audit-log shape are untouched. kb.list_skills and kb.get_skill are new methods — clients that don't call them are unaffected. The only behavioural change for opted-in configs is when an operator explicitly sets mcp.publish_skills: false.

VEP

Not required — config knob + two new read-only kb.* methods; no object-model, on-disk layout, bundle, or audit-log changes.

Tests

• make check passes locally (lint + mypy + pytest)
• New / changed behaviour has a test
• CHANGELOG.md updated under ## [Unreleased]

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: a56f0d17-8363-41b4-a245-8c42262e5a21

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}