@bastani/atomic 0.9.11-alpha.6 → 0.9.11-alpha.7

package/dist/builtin/workflows/skills/impeccable/scripts/detector/shared/constants.mjs

@@ -68,6 +68,15 @@ const GENERIC_FONTS = new Set([
 const WCAG_LARGE_TEXT_PX = 18 * (96 / 72);
 const WCAG_LARGE_BOLD_TEXT_PX = 14 * (96 / 72);
 
+// Em-dash overuse (advisory) thresholds, shared by the regex/static-HTML
+// analyzer and the browser DOM check so both fire on the same saturation
+// pattern. Two gates must hold: an absolute floor of EM_DASH_FLOOR dashes, and
+// a density of at least one dash per EM_DASH_CHARS_PER_DASH characters of body
+// text. A long article that uses a few em-dashes is left alone; a short,
+// dash-per-clause page is not.
+const EM_DASH_FLOOR = 8;
+const EM_DASH_CHARS_PER_DASH = 500;
+
 // Serif faces that show up in italic-display heroes. The rule also fires when
 // the primary face is unknown but the stack ends in the generic `serif` token,
 // which catches custom/private faces with a serif fallback.
@@ -97,5 +106,7 @@ export {
   GENERIC_FONTS,
   WCAG_LARGE_TEXT_PX,
   WCAG_LARGE_BOLD_TEXT_PX,
+  EM_DASH_FLOOR,
+  EM_DASH_CHARS_PER_DASH,
   KNOWN_SERIF_FONTS,
 };

package/dist/builtin/workflows/skills/impeccable/scripts/doctor.mjs

@@ -0,0 +1,336 @@
+#!/usr/bin/env node
+/**
+ * Deep staleness pass over Impeccable's own project artifacts.
+ *
+ *   node doctor.mjs                 # human-readable report
+ *   node doctor.mjs --json          # machine-readable, for the skill command
+ *   node doctor.mjs --fix           # apply the mechanical migrations only
+ *   node doctor.mjs --target <path> # pick a monorepo workspace
+ *
+ * The boot check in context.mjs reports what a session can afford to measure.
+ * This runs everything: git drift, per-workspace sweep, ignore-list validation
+ * against the live rule registry, hook script resolution.
+ *
+ * `--fix` is deliberately narrow. It performs only the migrations marked
+ * severity 'auto', the ones with no judgment in them: stamp the product record,
+ * move a sidecar out of a retired location. Anything that needs an answer from
+ * the user (a platform value, whether an inherited record still describes an
+ * app, whether a document has drifted from the code) is reported and left
+ * alone. Exit code is 0 unless the run itself failed; findings are not errors.
+ */
+
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+import { loadContext, extractPlatform, resolveTargetSelection } from './context.mjs';
+import { parseTargetOptions } from './lib/target-args.mjs';
+import { IMPECCABLE_COMMAND, IMPECCABLE_PROVIDER_ID } from './lib/provider.mjs';
+import { parseDesignMd } from './lib/design-parser.mjs';
+import {
+  PRODUCT_SCHEMA_VERSION,
+  readProductSchemaVersion,
+  stampProductSchema,
+} from './lib/artifact-schema.mjs';
+import {
+  checkConfig,
+  checkDesignSidecar,
+  checkNativePlatformEvidence,
+  checkProduct,
+  checkProjectRoots,
+  checkSurfaceBriefs,
+  designSidecarCandidatesFor,
+} from './lib/staleness.mjs';
+import {
+  checkDesignCoverage,
+  checkDesignDrift,
+  checkDetectorIgnores,
+  checkHookInstallation,
+  checkLegacyLiveState,
+  checkWorkspaces,
+  loadKnownRuleIds,
+} from './lib/staleness-deep.mjs';
+
+const SCRIPTS_DIR = path.dirname(fileURLToPath(import.meta.url));
+
+function safeRead(filePath) {
+  try {
+    return fs.readFileSync(filePath, 'utf-8');
+  } catch {
+    return null;
+  }
+}
+
+function parseArgs(argv) {
+  const passthrough = [];
+  const flags = { json: false, fix: false, help: false };
+  for (const arg of argv) {
+    if (arg === '--json') flags.json = true;
+    else if (arg === '--fix') flags.fix = true;
+    else if (arg === '--help' || arg === '-h') flags.help = true;
+    else passthrough.push(arg);
+  }
+  return { flags, targetOptions: parseTargetOptions(passthrough, { strict: true }) };
+}
+
+function usage() {
+  return [
+    `Usage: node doctor.mjs [--json] [--fix] [--target <path>]`,
+    '',
+    "Report drift between this project's Impeccable artifacts and what the",
+    'installed version reads: PRODUCT.md, DESIGN.md and its sidecar,',
+    '.impeccable/config.json, surface briefs, and the design hook.',
+    '',
+    '  --json           Emit findings as JSON.',
+    '  --fix            Apply the mechanical migrations (severity "auto") only.',
+    '  --target <path>  Select a workspace in a monorepo.',
+  ].join('\n');
+}
+
+async function collect(cwd, targetOptions) {
+  const ctx = loadContext(cwd, targetOptions);
+  const projectRoot = ctx.projectRoot || cwd;
+  const absProductPath = ctx.productPath ? path.resolve(cwd, ctx.productPath) : null;
+  const absDesignPath = ctx.designPath ? path.resolve(cwd, ctx.designPath) : null;
+  const sidecarCandidates = designSidecarCandidatesFor(projectRoot, ctx.contextDir);
+  const knownRuleIds = await loadKnownRuleIds(SCRIPTS_DIR);
+
+  const selection = resolveTargetSelection(cwd, targetOptions);
+  const workspaceCandidates = selection?.targetCandidates || [];
+
+  const workspaceResult = checkWorkspaces({
+    repoRoot: ctx.repoRoot,
+    candidates: workspaceCandidates,
+    checkNativePlatformEvidence,
+    extractPlatform,
+    readFile: safeRead,
+  });
+
+  const findings = [
+    ...checkProduct(ctx.product, ctx.productPath || 'PRODUCT.md'),
+    ...(ctx.product
+      ? checkNativePlatformEvidence({
+          projectRoot,
+          platform: ctx.platform,
+          product: ctx.product,
+          productPath: ctx.productPath,
+        })
+      : []),
+    ...checkDesignSidecar({ designPath: absDesignPath, sidecarCandidates, projectRoot }),
+    ...checkDesignDrift({ designPath: absDesignPath, projectRoot }),
+    ...checkDesignCoverage({ design: ctx.design, designPath: ctx.designPath, parseDesignMd }),
+    ...checkConfig({ projectRoot, repoRoot: ctx.repoRoot }),
+    ...checkDetectorIgnores({ projectRoot, knownRuleIds }),
+    ...checkSurfaceBriefs({ candidates: ctx.surfaceBriefCandidates, projectRoot }),
+    ...checkHookInstallation({
+      projectRoot,
+      repoRoot: ctx.repoRoot,
+      providerId: IMPECCABLE_PROVIDER_ID,
+    }),
+    ...checkLegacyLiveState({ projectRoot }),
+    ...checkProjectRoots({
+      patterns: readProjectRootPatterns(ctx.repoRoot),
+      candidates: workspaceCandidates,
+    }),
+    ...workspaceResult.findings,
+  ];
+
+  return {
+    ctx,
+    projectRoot,
+    absProductPath,
+    sidecarCandidates,
+    findings,
+    workspaces: workspaceResult.workspaces,
+    ruleRegistryAvailable: knownRuleIds !== null,
+  };
+}
+
+// Read straight from disk rather than importing context.mjs's private reader.
+// Only the positive/negative pattern strings matter here.
+function readProjectRootPatterns(repoRoot) {
+  if (!repoRoot) return [];
+  const patterns = [];
+  for (const name of ['config.json', 'config.local.json']) {
+    try {
+      const raw = JSON.parse(fs.readFileSync(path.join(repoRoot, '.impeccable', name), 'utf-8'));
+      if (Array.isArray(raw?.projectRoots)) {
+        for (const entry of raw.projectRoots) {
+          if (typeof entry === 'string' && entry.trim()) patterns.push(entry.trim());
+        }
+      }
+    } catch { /* missing or malformed: nothing to check */ }
+  }
+  return patterns;
+}
+
+/**
+ * Apply the migrations that carry no decision. Returns what was done and what
+ * was deliberately left for the user.
+ */
+function applyFixes(report) {
+  const applied = [];
+  const skipped = [];
+
+  for (const entry of report.findings) {
+    if (entry.severity !== 'auto') {
+      skipped.push({ id: entry.id, reason: 'needs a decision from the user' });
+      continue;
+    }
+    if (entry.id === 'design-sidecar-legacy-path') {
+      const canonical = report.sidecarCandidates[0];
+      const present = report.sidecarCandidates.find((candidate) => fs.existsSync(candidate));
+      if (!canonical || !present || path.resolve(canonical) === path.resolve(present)) continue;
+      if (fs.existsSync(canonical)) {
+        skipped.push({ id: entry.id, reason: `${rel(canonical, report.projectRoot)} already exists; not overwriting` });
+        continue;
+      }
+      fs.mkdirSync(path.dirname(canonical), { recursive: true });
+      fs.renameSync(present, canonical);
+      applied.push(`Moved ${rel(present, report.projectRoot)} to ${rel(canonical, report.projectRoot)}.`);
+      continue;
+    }
+    if (entry.id === 'legacy-live-state') {
+      // Reported, never deleted here: a running live session still reads these,
+      // and losing session state to a doctor run is a worse outcome than a
+      // stale file. The report says what to remove and when.
+      skipped.push({ id: entry.id, reason: 'delete by hand once no live session is running' });
+      continue;
+    }
+    skipped.push({ id: entry.id, reason: 'no automatic migration implemented' });
+  }
+
+  // Stamping the product record is additive and safe, and it is what stops a
+  // later version proposing an interview the user has already sat through.
+  const productPath = report.absProductPath;
+  if (productPath && report.ctx.product && readProductSchemaVersion(report.ctx.product) === null
+    && !report.findings.some((entry) => entry.id === 'product-schema-legacy')) {
+    fs.writeFileSync(productPath, stampProductSchema(report.ctx.product), 'utf-8');
+    applied.push(`Stamped ${rel(productPath, report.projectRoot)} as product-schema ${PRODUCT_SCHEMA_VERSION}.`);
+  }
+
+  return { applied, skipped };
+}
+
+function rel(filePath, root) {
+  const value = path.relative(root, filePath);
+  return value && !value.startsWith('..') ? value.split(path.sep).join('/') : filePath;
+}
+
+const SEVERITY_LABEL = {
+  auto: 'automatic',
+  mention: 'worth saying',
+  route: 'needs a command',
+};
+
+function renderText(report, fixes) {
+  const lines = [];
+  const { findings } = report;
+
+  lines.push(`Impeccable doctor: ${rel(report.projectRoot, process.cwd()) || '.'}`);
+  if (report.ctx.isMonorepo) {
+    lines.push(`Monorepo, repo root ${rel(report.ctx.repoRoot, process.cwd()) || '.'}.`);
+  }
+  lines.push('');
+
+  if (!findings.length) {
+    lines.push('No drift found. Every artifact matches what this version reads.');
+  } else {
+    const order = ['route', 'mention', 'auto'];
+    for (const severity of order) {
+      const group = findings.filter((entry) => entry.severity === severity);
+      if (!group.length) continue;
+      lines.push(`${SEVERITY_LABEL[severity]} (${group.length}):`);
+      for (const entry of group) {
+        lines.push(`  ${entry.id}${entry.path ? `  [${entry.path}]` : ''}`);
+        lines.push(`    ${entry.summary}`);
+        lines.push(`    → ${entry.fix}`);
+      }
+      lines.push('');
+    }
+  }
+
+  if (report.workspaces.length) {
+    lines.push('Workspaces:');
+    for (const workspace of report.workspaces) {
+      lines.push(`  ${workspace.path}  product: ${workspace.productStatus}`
+        + `  design: ${workspace.designStatus}`
+        + `${workspace.platform ? `  platform: ${workspace.platform}` : ''}`);
+    }
+    lines.push('');
+  }
+
+  if (!report.ruleRegistryAvailable) {
+    lines.push('Note: the bundled detector could not be resolved, so ignored rule ids were not validated.');
+    lines.push('');
+  }
+
+  if (fixes) {
+    lines.push(fixes.applied.length ? 'Applied:' : 'Applied nothing.');
+    for (const entry of fixes.applied) lines.push(`  ${entry}`);
+    const held = fixes.skipped.filter((entry) => entry.reason !== 'needs a decision from the user');
+    if (held.length) {
+      lines.push('Left alone:');
+      for (const entry of held) lines.push(`  ${entry.id}: ${entry.reason}`);
+    }
+  } else if (findings.some((entry) => entry.severity === 'auto')) {
+    lines.push(`Run \`node doctor.mjs --fix\` to apply the automatic migrations, `
+      + `or \`${IMPECCABLE_COMMAND} doctor\` to work through all of them.`);
+  }
+
+  return lines.join('\n');
+}
+
+async function cli() {
+  let parsed;
+  try {
+    parsed = parseArgs(process.argv.slice(2));
+  } catch (err) {
+    process.stderr.write(`${err.message}\n`);
+    process.exit(1);
+  }
+  if (parsed.flags.help) {
+    process.stdout.write(`${usage()}\n`);
+    return;
+  }
+
+  const report = await collect(process.cwd(), parsed.targetOptions);
+  const fixes = parsed.flags.fix ? applyFixes(report) : null;
+
+  if (parsed.flags.json) {
+    process.stdout.write(`${JSON.stringify({
+      projectRoot: report.projectRoot,
+      repoRoot: report.ctx.repoRoot,
+      isMonorepo: report.ctx.isMonorepo,
+      productPath: report.ctx.productPath,
+      designPath: report.ctx.designPath,
+      platform: report.ctx.platform,
+      ruleRegistryAvailable: report.ruleRegistryAvailable,
+      findings: report.findings,
+      workspaces: report.workspaces,
+      ...(fixes ? { fixes } : {}),
+    }, null, 2)}\n`);
+    return;
+  }
+
+  process.stdout.write(`${renderText(report, fixes)}\n`);
+}
+
+function invokedAsScript() {
+  const arg = process.argv[1];
+  if (!arg) return false;
+  try {
+    return fs.realpathSync(arg) === fs.realpathSync(fileURLToPath(import.meta.url));
+  } catch {
+    return false;
+  }
+}
+
+if (invokedAsScript()) {
+  cli().catch((err) => {
+    process.stderr.write(`impeccable doctor failed: ${err?.message || err}\n`);
+    process.exit(1);
+  });
+}
+
+export { collect, applyFixes, renderText };

package/dist/builtin/workflows/skills/impeccable/scripts/generate-image.mjs

@@ -0,0 +1,232 @@
+#!/usr/bin/env node
+/**
+ * API image generation fallback: renders a mock or world board with the
+ * user's own OpenAI key when the harness has no native image generation.
+ *
+ * context.mjs reports availability (it checks OPENAI_API_KEY); harness-native
+ * generation always wins when present. This uses gpt-image-2 and spends the
+ * user's API credit (roughly $0.05-0.25 per image at default quality), so the
+ * skill states that before the first call in a session.
+ *
+ *   node generate-image.mjs --prompt "..." --out mock.png [--size 1536x1024] [--quality medium]
+ *   node generate-image.mjs --prompt-file prompt.txt --out mock.png
+ */
+import fs from 'node:fs';
+import zlib from 'node:zlib';
+
+function arg(name, fallback = null) {
+  const i = process.argv.indexOf(`--${name}`);
+  if (i === -1) return fallback;
+  const v = process.argv[i + 1];
+  return v && !v.startsWith('--') ? v : fallback;
+}
+
+// ---------------------------------------------------------------------------
+// Fake mode (IMPECCABLE_IMAGE_GEN_FAKE=1)
+//
+// Deterministic offline stand-in for the OpenAI call: same prompt -> identical
+// bytes, no network, no key, cost line reads $0.00. Used by the new-work smoke
+// suite so the concept/serve-question/image chain can run without spend. The
+// output renders the prompt over a 2-3 color palette hashed from the prompt,
+// plus a "SYNTHETIC COMP" corner label. SVG carries the readable text; the
+// raster (.png/.webp/.jpg) fallback carries palette stripes and stows the
+// prompt + marker in a PNG tEXt chunk so downstream stays a valid image.
+// ---------------------------------------------------------------------------
+
+// FNV-1a 32-bit: tiny, dependency-free, stable across runs and platforms.
+function hash32(str) {
+  let h = 0x811c9dc5;
+  for (let i = 0; i < str.length; i++) {
+    h ^= str.charCodeAt(i);
+    h = Math.imul(h, 0x01000193);
+  }
+  return h >>> 0;
+}
+
+function hslToRgb(hDeg, s, l) {
+  const h = ((hDeg % 360) + 360) % 360 / 360;
+  const q = l < 0.5 ? l * (1 + s) : l + s - l * s;
+  const p = 2 * l - q;
+  const hue = (t) => {
+    let tt = t;
+    if (tt < 0) tt += 1;
+    if (tt > 1) tt -= 1;
+    if (tt < 1 / 6) return p + (q - p) * 6 * tt;
+    if (tt < 1 / 2) return q;
+    if (tt < 2 / 3) return p + (q - p) * (2 / 3 - tt) * 6;
+    return p;
+  };
+  return [hue(h + 1 / 3), hue(h), hue(h - 1 / 3)].map((c) => Math.round(c * 255));
+}
+
+const toHex = ([r, g, b]) =>
+  '#' + [r, g, b].map((c) => c.toString(16).padStart(2, '0')).join('');
+
+// Two or three deterministic swatches derived from the prompt hash. The band
+// count itself is prompt-derived, so different prompts differ in palette.
+function palette(prompt) {
+  const h = hash32(prompt);
+  const base = h % 360;
+  const bands = 2 + (h >>> 9) % 2; // 2 or 3
+  const spread = 40 + (h >>> 3) % 120;
+  const out = [];
+  for (let i = 0; i < bands; i++) {
+    const hue = base + i * spread;
+    const light = 0.32 + ((h >>> (i * 5)) % 40) / 100; // 0.32 - 0.71
+    out.push(hslToRgb(hue, 0.55, light));
+  }
+  return out;
+}
+
+function svgFake(prompt, [w, h]) {
+  const colors = palette(prompt).map(toHex);
+  const stops = colors
+    .map((c, i) => `<stop offset="${Math.round((i / (colors.length - 1)) * 100)}%" stop-color="${c}"/>`)
+    .join('');
+  // Greedy word wrap tuned to the canvas width so the prompt stays legible.
+  const perLine = Math.max(12, Math.floor(w / 26));
+  const words = String(prompt).replace(/\s+/g, ' ').trim().split(' ');
+  const lines = [];
+  let cur = '';
+  for (const word of words) {
+    if ((cur + ' ' + word).trim().length > perLine) {
+      if (cur) lines.push(cur);
+      cur = word;
+    } else {
+      cur = (cur + ' ' + word).trim();
+    }
+    if (lines.length >= 10) break;
+  }
+  if (cur && lines.length < 11) lines.push(cur);
+  const escape = (s) => String(s).replace(/[&<>]/g, (c) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;' }[c]));
+  const fontSize = Math.round(w / 24);
+  const startY = h / 2 - ((lines.length - 1) * fontSize * 1.3) / 2;
+  const text = lines
+    .map((line, i) => `<text x="${w / 2}" y="${Math.round(startY + i * fontSize * 1.3)}" font-family="Helvetica, Arial, sans-serif" font-size="${fontSize}" fill="#ffffff" text-anchor="middle" dominant-baseline="middle">${escape(line)}</text>`)
+    .join('');
+  return `<?xml version="1.0" encoding="UTF-8"?>
+<svg xmlns="http://www.w3.org/2000/svg" width="${w}" height="${h}" viewBox="0 0 ${w} ${h}">
+  <defs><linearGradient id="g" x1="0" y1="0" x2="1" y2="1">${stops}</linearGradient></defs>
+  <rect width="${w}" height="${h}" fill="url(#g)"/>
+  <rect x="0" y="0" width="${w}" height="${h}" fill="#000000" fill-opacity="0.22"/>
+  ${text}
+  <rect x="${w - Math.round(w / 4.2)}" y="${h - Math.round(h / 16)}" width="${Math.round(w / 4.2)}" height="${Math.round(h / 16)}" fill="#000000" fill-opacity="0.55"/>
+  <text x="${w - Math.round(w / 8.4)}" y="${h - Math.round(h / 32)}" font-family="Helvetica, Arial, sans-serif" font-size="${Math.round(w / 60)}" letter-spacing="2" fill="#ffffff" text-anchor="middle" dominant-baseline="middle">SYNTHETIC COMP</text>
+</svg>
+`;
+}
+
+// Minimal valid PNG: palette stripes plus a tEXt chunk carrying the marker and
+// prompt, so a .png/.webp fake stays a decodable image and still contains the
+// "SYNTHETIC" bytes downstream tools look for.
+function crc32(buf) {
+  let c = 0xffffffff;
+  for (let i = 0; i < buf.length; i++) {
+    c ^= buf[i];
+    for (let k = 0; k < 8; k++) c = (c & 1) ? (0xedb88320 ^ (c >>> 1)) : (c >>> 1);
+  }
+  return (c ^ 0xffffffff) >>> 0;
+}
+
+function pngChunk(type, data) {
+  const typeBuf = Buffer.from(type, 'latin1');
+  const body = Buffer.concat([typeBuf, data]);
+  const len = Buffer.alloc(4);
+  len.writeUInt32BE(data.length, 0);
+  const crc = Buffer.alloc(4);
+  crc.writeUInt32BE(crc32(body), 0);
+  return Buffer.concat([len, body, crc]);
+}
+
+function pngFake(prompt, [w, h]) {
+  const colors = palette(prompt); // [[r,g,b], ...]
+  const bandH = Math.ceil(h / colors.length);
+  // Raw image: each scanline prefixed with a 0 filter byte, RGB pixels.
+  const stride = w * 3;
+  const raw = Buffer.alloc(h * (stride + 1));
+  for (let y = 0; y < h; y++) {
+    const rowStart = y * (stride + 1);
+    raw[rowStart] = 0;
+    const [r, g, b] = colors[Math.min(colors.length - 1, Math.floor(y / bandH))];
+    for (let x = 0; x < w; x++) {
+      const p = rowStart + 1 + x * 3;
+      raw[p] = r;
+      raw[p + 1] = g;
+      raw[p + 2] = b;
+    }
+  }
+  const ihdr = Buffer.alloc(13);
+  ihdr.writeUInt32BE(w, 0);
+  ihdr.writeUInt32BE(h, 4);
+  ihdr[8] = 8;  // bit depth
+  ihdr[9] = 2;  // color type: truecolor RGB
+  const idat = zlib.deflateSync(raw, { level: 9 });
+  const textData = Buffer.concat([
+    Buffer.from('Comment', 'latin1'),
+    Buffer.from([0]),
+    Buffer.from(`SYNTHETIC COMP: ${String(prompt).replace(/\s+/g, ' ').trim()}`, 'latin1'),
+  ]);
+  return Buffer.concat([
+    Buffer.from([0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a]),
+    pngChunk('IHDR', ihdr),
+    pngChunk('tEXt', textData),
+    pngChunk('IDAT', idat),
+    pngChunk('IEND', Buffer.alloc(0)),
+  ]);
+}
+
+function parseSize(sizeStr) {
+  const m = String(sizeStr).match(/^(\d+)x(\d+)$/);
+  if (!m) return [1536, 1024];
+  return [Number(m[1]), Number(m[2])];
+}
+
+if (process.env.IMPECCABLE_IMAGE_GEN_FAKE) {
+  const fakePromptFile = arg('prompt-file');
+  const fakePrompt = fakePromptFile ? fs.readFileSync(fakePromptFile, 'utf8') : arg('prompt');
+  const fakeOut = arg('out');
+  if (!fakePrompt || !fakeOut) {
+    console.error('generate-image: --prompt (or --prompt-file) and --out are required.');
+    process.exit(1);
+  }
+  const dims = parseSize(arg('size', '1536x1024'));
+  const bytes = fakeOut.endsWith('.svg')
+    ? Buffer.from(svgFake(fakePrompt, dims), 'utf8')
+    : pngFake(fakePrompt, dims);
+  fs.writeFileSync(fakeOut, bytes);
+  console.log(`IMAGE: ${fakeOut} (${dims[0]}x${dims[1]}, fake synthetic comp, $0.00, no API call)`);
+  process.exit(0);
+}
+
+const key = process.env.OPENAI_API_KEY;
+if (!key) {
+  console.error('generate-image: OPENAI_API_KEY is not set; use the harness-native image tool instead.');
+  process.exit(1);
+}
+const promptFile = arg('prompt-file');
+const prompt = promptFile ? fs.readFileSync(promptFile, 'utf8') : arg('prompt');
+const out = arg('out');
+if (!prompt || !out) {
+  console.error('generate-image: --prompt (or --prompt-file) and --out are required.');
+  process.exit(1);
+}
+const size = arg('size', '1536x1024');
+const quality = arg('quality', 'medium');
+
+const response = await fetch('https://api.openai.com/v1/images/generations', {
+  method: 'POST',
+  headers: { Authorization: `Bearer ${key}`, 'content-type': 'application/json' },
+  body: JSON.stringify({ model: 'gpt-image-2', prompt, size, quality, n: 1 }),
+});
+if (!response.ok) {
+  console.error(`generate-image: API error ${response.status}: ${(await response.text()).slice(0, 300)}`);
+  process.exit(1);
+}
+const json = await response.json();
+const b64 = json?.data?.[0]?.b64_json;
+if (!b64) {
+  console.error('generate-image: no image in response');
+  process.exit(1);
+}
+fs.writeFileSync(out, Buffer.from(b64, 'base64'));
+console.log(`IMAGE: ${out} (${size}, ${quality}, gpt-image-2, billed to your OpenAI key)`);