docs: fix license fields, document test helpers, and consolidate references

Align license to Apache-2.0 in core and cli package.json (was MIT,
contradicting LICENSE.txt). Document the four @obsidian-vfs/core/testing
exports. Reword bundle/ ignore-pattern for clarity, consolidate vault
config references to the root README, clarify obs-read vs inspect --body
relationship, and fold the pnpm ci warning into the scripts table.

Assisted-by: Claude

Author: otaviof

CONTRIBUTING.md

@@ -27,7 +27,7 @@ TypeScript 6 strict, ESM-only (`"type": "module"`) | pnpm 11 workspaces, Node 22
 |---------|-------------|
 | `pnpm build` | Build all packages (`tsc -b`) |
 | `pnpm test` | Run tests (Vitest) |
-| `pnpm run ci` | Full check: lint, build, test (in sequence) |
+| `pnpm run ci` | Full check: lint, build, test (not bare `pnpm ci`, which wipes `node_modules`) |
 | `pnpm lint` | Run ESLint |
 | `pnpm format` | Format with Prettier |
 | `pnpm format:check` | Check formatting without writing |
@@ -42,8 +42,6 @@ TypeScript 6 strict, ESM-only (`"type": "module"`) | pnpm 11 workspaces, Node 22
 | `pnpm publish:vscode` | Publish VS Code extension to marketplace (requires `VSCE_PAT`) |
 | `pnpm reset` | Wipe and reinstall `node_modules` |
 
-**Do NOT run bare `pnpm ci`** — that is pnpm's clean-install and wipes `node_modules`. Use `pnpm run ci`.
-
 ## Architecture
 
 The consumer packages (`vscode`, `claude-plugin`, `cli`) depend on `core` but have no cross-dependencies between each other. Shared logic belongs in `packages/core`.
@@ -80,7 +78,7 @@ The consumer packages (`vscode`, `claude-plugin`, `cli`) depend on `core` but ha
 
 ### Ignore Patterns
 
-Shared ignores across `.gitignore`, `.prettierignore`, `eslint.config.ts`: `node_modules/`, `dist/`, `coverage/`. When adding generated/vendored directories, add to all three files. Exception: `bundle/` is ignored by ESLint and Prettier but **not** `.gitignore` — it must be tracked in git for marketplace installs.
+Shared ignores across `.gitignore`, `.prettierignore`, `eslint.config.ts`: `node_modules/`, `dist/`, `coverage/`. When adding generated/vendored directories, add to all three files. Exception: `bundle/` is ignored by ESLint and Prettier but tracked in git — it must be committed for marketplace installs.
 
 ### Versioning
 

packages/cli/README.md

@@ -68,9 +68,11 @@ npx @obsidian-vfs/cli inspect "/obs:obsidian"
 | `--body` | Output only the raw content body (no metadata headers, no truncation) |
 | `--full` | Show full content without truncation |
 
+The plugin's [`obs-read`](../claude-plugin/README.md#obs-read) bin script calls `inspect --body` internally for hook-triggered reads. `inspect` is the general-purpose CLI command; `obs-read` is a thin entry point used by plugin hooks at runtime.
+
 ### `list-skills`
 
-Enumerate all skills discovered from the vault's `skillsDirs` (configured in `.obsidian/obsidian-vfs.json`).
+Enumerate all skills discovered from the vault's `skillsDirs` (see [Vault Configuration](../../README.md#vault-configuration)).
 
 ```sh
 npx @obsidian-vfs/cli list-skills
@@ -175,7 +177,7 @@ When `OBSIDIAN_VFS_PROJECT_DIR` is set, the rule uses the local path instead: `B
 
 #### Behavior
 
-- Enumerates every `skillsDir` in `.obsidian/obsidian-vfs.json`, finds subdirectories containing `SKILL.md`, extracts frontmatter, and writes proxy files.
+- Enumerates every `skillsDir` from the [vault config](../../README.md#vault-configuration), finds subdirectories containing `SKILL.md`, extracts frontmatter, and writes proxy files.
 - Writes are idempotent — identical proxies are skipped.
 - Skill names validated against `/^[a-zA-Z0-9._-]+$/`; shell metacharacters rejected.
 - When multiple `skillsDirs` contain a skill with the same name, the first directory wins.

packages/cli/package.json

@@ -3,7 +3,7 @@
   "version": "0.1.4",
   "type": "module",
   "description": "CLI for Obsidian VFS — provision skills/agents, inspect vault resources",
-  "license": "MIT",
+  "license": "Apache-2.0",
   "repository": {
     "type": "git",
     "url": "https://github.com/otaviof/obsidian-vfs",

packages/core/README.md

@@ -11,7 +11,7 @@ Shared engine for Obsidian VFS. Provides `obs://` URI resolution, file I/O, Obsi
 - **Frontmatter** — Extraction, curation, and formatting of YAML frontmatter. Model field mapping to Claude model identifiers via `mapModelToClaude()`.
 - **Caching** — Generic `LRUCache<K, V>` with TTL expiration.
 - **Security** — `path.resolve` + vault-root prefix check on all I/O. Symlink rejection outside vault. `allowedFolders` enforcement.
-- **Configuration** — Vault config from `.obsidian/obsidian-vfs.json` (`agentsDirs`, `skillsDirs`, `allowedFolders`).
+- **Configuration** — Vault config from [`.obsidian/obsidian-vfs.json`](../../README.md#vault-configuration) (`agentsDirs`, `skillsDirs`, `allowedFolders`).
 
 ## Exports
 
@@ -22,6 +22,17 @@ The package exposes two entry points:
 | `.` | `dist/index.js` | All production exports |
 | `./testing` | `dist/test-helpers.js` | Test utilities and mocks |
 
+### Testing Utilities
+
+The `./testing` entry point provides test doubles for consumer packages:
+
+| Utility | Description |
+|---------|-------------|
+| `mockCLI(overrides?)` | Fully-stubbed `ObsidianCLI` mock with optional per-method overrides |
+| `mockFsFunction(fn)` | Type-safe cast wrapper for mocked `node:fs/promises` functions |
+| `makeLocalIndexTrackerWith(methodName, result, extraMethods?, contextOverrides?)` | Build a mock `LocalIndexTracker` whose single method resolves to a given `VFSResult` |
+| `makeDiscoveredResource(overrides?)` | Build a `DiscoveredResource` with sensible defaults |
+
 ### Key Exports
 
 | Category | Symbols |

packages/core/package.json

@@ -3,7 +3,7 @@
   "version": "0.1.4",
   "type": "module",
   "description": "Core library for Obsidian VFS — vault resolution, content processing, path security",
-  "license": "MIT",
+  "license": "Apache-2.0",
   "repository": {
     "type": "git",
     "url": "https://github.com/otaviof/obsidian-vfs",