fix(cli): report skipped hidden directories during skill install

[senthilr-nv]

Summary

• collectFiles() silently dropped dot-directories (e.g. .secret/) without reporting them in skippedDotfiles. Users were warned about skipped dot-files but not about entire hidden directory trees being omitted.
• Now both dot-files and dot-directories are reported, with a trailing / to distinguish directories in the CLI output (e.g. Skipping 2 hidden path(s): .env, .secret/).
• Fixed misleading comment in postInstall() that said "shellQuote the relative part" when the code actually uses double-quoted interpolation (safe due to validateRelativePath charset restriction).

Reported by @brandonpelfrey.

Test plan

• Added regression test: hidden directory with nested files (.secret/token.txt) is now reported as .secret/ in skippedDotfiles
• All 25 unit tests pass (npx vitest run src/lib/skill-install.test.ts)
• Pre-commit hooks pass (lint, commitlint, gitleaks)

Summary by CodeRabbit

• Bug Fixes

  • Hidden directories and dot-prefixed files inside folders are now properly recorded and reported when skipped during skill installation.
  • Status messaging updated to display "hidden path(s)" instead of "dotfile(s)" for clearer upload feedback.

• Tests

  • Added test coverage validating collection and reporting of non-hidden files and skipped hidden paths (directories and dot-prefixed files).

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 242fe035-476f-4343-a0e8-7b491c184dca

📥 Commits

Reviewing files that changed from the base of the PR and between d64a19c and f099346.

📒 Files selected for processing (3)

• src/lib/skill-install.test.ts
• src/lib/skill-install.ts
• src/nemoclaw.ts

✅ Files skipped from review due to trivial changes (2)

• src/nemoclaw.ts
• src/lib/skill-install.ts

🚧 Files skipped from review as they are similar to previous changes (1)

• src/lib/skill-install.test.ts

---

📝 Walkthrough

Walkthrough

collectFiles() now records hidden directories with a trailing / in skippedDotfiles and also captures hidden files inside non-hidden directories. Console messaging changed from "dotfile(s)" to "hidden path(s)". A new test verifies these behaviors.

Changes

Cohort / File(s)	Summary
Collect & Skip Hidden Paths src/lib/skill-install.ts, src/lib/skill-install.test.ts	collectFiles(): treat entries starting with . as skipped; record directory dot-entries with a trailing / and include hidden files within non-hidden dirs in skippedDotfiles. Added test collectFiles to assert returned files and skippedDotfiles.
User-Facing Message src/nemoclaw.ts	Updated status text from "Skipping … dotfile(s)" to "Skipping … hidden path(s)" while keeping skipped list/count unchanged.
Comment Clarification src/lib/skill-install.ts	Reworded comment in postInstall() to state values are quoted (not shell-quoted) and rely on validateRelativePath restrictions; no command construction logic changed.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Poem

🐰 I found the dots and placed a slash with care,
Hidden paths now shown, no secret lair,
Tests hop in line to prove what I did,
A tidy trail where shadows once slid. 🥕

🚥 Pre-merge checks | ✅ 2 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 50.00% which is insufficient. The required threshold is 80.00%.	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (2 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately captures the main objective of the pull request: fixing the CLI reporting of skipped hidden directories during skill install by now including dot-directories (with trailing slashes) in the skipped paths output.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}