fix(ci): invoke workspace CLIs from dist

Author: tuanductran

AGENTS.md

@@ -99,7 +99,9 @@ nextdns-skills/
 
 The two CLI packages declare their package-manager `bin` metadata directly as `./dist/cli.mjs`; no
 checked-in `bin/` directory or wrapper is required. The pack step grants execute permission to the
-CLI artifact and pnpm creates its `.bin` shim from the package metadata.
+CLI artifact and pnpm creates its `.bin` shim from the package metadata. Repository automation invokes
+`node dist/cli.mjs` (or the root package's direct `packages/*/dist/cli.mjs` path) instead of relying on a
+self-referential workspace bin shim during fresh CI installs.
 
 The shared `nextdns-markdown` package owns unified/remark parsing, YAML normalization, MDAST
 traversal helpers, and Valibot frontmatter validation. The two CLI packages consume it rather than

CLAUDE.md

@@ -83,7 +83,9 @@ nextdns-skills/
 
 The two CLI packages declare their package-manager `bin` metadata directly as `./dist/cli.mjs`; no
 checked-in `bin/` directory or wrapper is required. The pack step grants execute permission to the
-CLI artifact and pnpm creates its `.bin` shim from the package metadata.
+CLI artifact and pnpm creates its `.bin` shim from the package metadata. Repository automation invokes
+`node dist/cli.mjs` (or the root package's direct `packages/*/dist/cli.mjs` path) instead of relying on a
+self-referential workspace bin shim during fresh CI installs.
 
 The shared `nextdns-markdown` package owns unified/remark parsing, YAML normalization, MDAST
 traversal helpers, and Valibot frontmatter validation. The two CLI packages consume it rather than

package.json

@@ -41,11 +41,11 @@
     "build:frontend": "turbo run build-frontend",
     "build:integrations": "turbo run build-integrations",
     "build:skills": "turbo run build-all",
-    "build:check": "nextdns-skills-build build --all --check",
+    "build:check": "node packages/nextdns-skills-build/dist/cli.mjs build --all --check",
     "build:ui": "turbo run build-ui",
     "check-duplicates": "turbo run check-duplicates",
     "check-tags": "turbo run check-tags",
-    "audit": "nextdns-skills-scripts audit",
+    "audit": "node packages/nextdns-scripts/dist/cli.mjs audit",
     "dev": "turbo run dev",
     "format": "vp fmt",
     "format:check": "vp fmt --check",

packages/nextdns-scripts/package.json

@@ -24,18 +24,18 @@
   },
   "scripts": {
     "build": "vp pack",
-    "check-duplicates": "nextdns-skills-scripts check-duplicates",
-    "check-tags": "nextdns-skills-scripts check-tags",
-    "audit": "nextdns-skills-scripts audit",
+    "check-duplicates": "node dist/cli.mjs check-duplicates",
+    "check-tags": "node dist/cli.mjs check-tags",
+    "audit": "node dist/cli.mjs audit",
     "dev": "vp pack --watch",
-    "generate-stats": "nextdns-skills-scripts generate-stats",
+    "generate-stats": "node dist/cli.mjs generate-stats",
     "prepublishOnly": "pnpm build",
     "test": "vp test run",
     "test:coverage": "vp test run --coverage",
     "test:watch": "vp test",
     "types:check": "tsc --noEmit",
-    "update-counts": "nextdns-skills-scripts update-counts",
-    "validate-rules": "nextdns-skills-scripts validate-rules"
+    "update-counts": "node dist/cli.mjs update-counts",
+    "validate-rules": "node dist/cli.mjs validate-rules"
   },
   "dependencies": {
     "nextdns-markdown": "workspace:*",

packages/nextdns-skills-build/package.json

@@ -25,25 +25,25 @@
   },
   "scripts": {
     "build": "vp pack",
-    "build-agents": "nextdns-skills-build build",
-    "build-all": "nextdns-skills-build build --all",
-    "build-check": "nextdns-skills-build build --all --check",
-    "build-api": "nextdns-skills-build build --skill=nextdns-api",
-    "build-cli": "nextdns-skills-build build --skill=nextdns-cli",
-    "build-frontend": "nextdns-skills-build build --skill=nextdns-frontend",
-    "build-integrations": "nextdns-skills-build build --skill=integrations",
-    "build-ui": "nextdns-skills-build build --skill=nextdns-ui",
+    "build-agents": "node dist/cli.mjs build",
+    "build-all": "node dist/cli.mjs build --all",
+    "build-check": "node dist/cli.mjs build --all --check",
+    "build-api": "node dist/cli.mjs build --skill=nextdns-api",
+    "build-cli": "node dist/cli.mjs build --skill=nextdns-cli",
+    "build-frontend": "node dist/cli.mjs build --skill=nextdns-frontend",
+    "build-integrations": "node dist/cli.mjs build --skill=integrations",
+    "build-ui": "node dist/cli.mjs build --skill=nextdns-ui",
     "dev": "vp pack --watch",
-    "export": "nextdns-skills-build export",
-    "extract-tests": "nextdns-skills-build extract-tests",
-    "migrate": "nextdns-skills-build migrate",
+    "export": "node dist/cli.mjs export",
+    "extract-tests": "node dist/cli.mjs extract-tests",
+    "migrate": "node dist/cli.mjs migrate",
     "prepublishOnly": "pnpm build",
-    "search": "nextdns-skills-build search",
+    "search": "node dist/cli.mjs search",
     "test": "vp test run",
     "test:coverage": "vp test run --coverage",
     "test:watch": "vp test",
     "types:check": "tsc --noEmit",
-    "validate": "nextdns-skills-build validate"
+    "validate": "node dist/cli.mjs validate"
   },
   "dependencies": {
     "nextdns-markdown": "workspace:*",