@clue-ai/cli 0.0.3

package/src/setup-tool.mjs

@@ -0,0 +1,141 @@
+import { mkdir, writeFile } from "node:fs/promises";
+import { join, resolve } from "node:path";
+import readline from "node:readline/promises";
+
+const SKILL_NAMES = [
+  "clue-route-semantic-snapshot",
+  "clue-semantic-ci",
+  "clue-sdk-instrumentation",
+  "clue-setup-audit",
+  "clue-local-verification",
+  "clue-setup-report",
+];
+
+const TARGETS = new Set(["codex", "claude_code"]);
+
+const TARGET_SKILL_ROOTS = {
+  codex: [".agents", "skills"],
+  claude_code: [".claude", "skills"],
+};
+
+const normalizeTarget = (target) => {
+  const normalized = String(target ?? "").trim().toLowerCase().replace(/[\s-]+/g, "_");
+  if (!TARGETS.has(normalized)) {
+    throw new Error("target must be codex or claude_code");
+  }
+  return normalized;
+};
+
+const skillBody = (name) => {
+  const descriptions = {
+    "clue-route-semantic-snapshot":
+      "Use when analyzing backend routes, handlers, controllers, or endpoints to create privacy-safe Clue semantic snapshots.",
+    "clue-semantic-ci":
+      "Use when adding or updating Clue semantic snapshot CI for this repository.",
+    "clue-sdk-instrumentation":
+      "Use when adding ClueInit, ClueIdentify, ClueSetAccount, and ClueLogout lifecycle calls to a customer repository.",
+    "clue-setup-audit":
+      "Use when reviewing Clue setup changes for missing lifecycle calls, unsafe instrumentation, leaked secrets, or bad insertion points.",
+    "clue-local-verification":
+      "Use when verifying local Clue setup artifacts before checking event delivery in the Clue setup screen.",
+    "clue-setup-report":
+      "Use when producing the final Clue setup report with changed files, blockers, env names, and next steps.",
+  };
+
+  const steps = {
+    "clue-route-semantic-snapshot": [
+      "Inspect only allowed source paths.",
+      "Identify route, handler, controller, and endpoint behavior from privacy-safe evidence.",
+      "Create semantic snapshot inputs without raw source, secrets, prompts, or completions.",
+      "Report unresolved routes as blockers instead of guessing.",
+    ],
+    "clue-semantic-ci": [
+      "Create or update `.github/workflows/clue-semantic-snapshot.yml`.",
+      "Use `npx @clue-ai/cli semantic-ci --request .clue/semantic-request.runtime.json --repo .`.",
+      "Reference GitHub Secrets and Variables by name only.",
+      "Do not print or commit secret values.",
+    ],
+    "clue-sdk-instrumentation": [
+      "Find the app/bootstrap entrypoint and add ClueInit only when the location is clear.",
+      "Find login success handling and add ClueIdentify only when the user identity is available.",
+      "Find account, workspace, organization, or tenant resolution and add ClueSetAccount only when the subject is available.",
+      "Find logout/sign-out completion and add ClueLogout only when the session reset point is clear.",
+      "Skip unclear lifecycle points and report blockers.",
+    ],
+    "clue-setup-audit": [
+      "Review changed files line by line.",
+      "Reject broad ClueTrack instrumentation and DOM clue tags.",
+      "Confirm no project key, API key, secret, or env value appears in diff or report.",
+      "Confirm lifecycle insertions are minimal and reviewable.",
+    ],
+    "clue-local-verification": [
+      "Confirm generated skill files exist.",
+      "Confirm workflow files and SDK lifecycle imports/calls exist when those phases have run.",
+      "Confirm only env names are reported.",
+      "Leave event delivery verification to the Clue setup screen.",
+    ],
+    "clue-setup-report": [
+      "Summarize changed files.",
+      "List completed setup phases.",
+      "List blockers with exact file or environment names when available.",
+      "List required env names without values.",
+      "State that commit and push were not performed.",
+    ],
+  };
+
+  return [
+    "---",
+    `name: ${name}`,
+    `description: ${descriptions[name]}`,
+    "---",
+    "",
+    "# Rules",
+    "",
+    "- Do not expose project keys, API keys, secrets, tokens, or environment variable values.",
+    "- Do not commit or push changes.",
+    "- Prefer existing repository patterns and minimal diffs.",
+    "- If evidence is unclear, report a blocker instead of guessing.",
+    "",
+    "# Workflow",
+    "",
+    ...steps[name].map((step, index) => `${index + 1}. ${step}`),
+    "",
+  ].join("\n");
+};
+
+const askTarget = async ({ input = process.stdin, output = process.stdout } = {}) => {
+  const rl = readline.createInterface({ input, output });
+  try {
+    const answer = await rl.question("Use Clue setup skills for which AI tool? [codex/claude_code] ");
+    return normalizeTarget(answer);
+  } finally {
+    rl.close();
+  }
+};
+
+export const installSetupSkills = async ({
+  repoRoot,
+  target,
+  input,
+  output,
+} = {}) => {
+  const resolvedTarget = target ? normalizeTarget(target) : await askTarget({ input, output });
+  const resolvedRepoRoot = resolve(repoRoot ?? ".");
+  const skillRoot = join(resolvedRepoRoot, ...TARGET_SKILL_ROOTS[resolvedTarget]);
+  const installed = [];
+
+  for (const skillName of SKILL_NAMES) {
+    const skillDir = join(skillRoot, skillName);
+    const skillPath = join(skillDir, "SKILL.md");
+    await mkdir(skillDir, { recursive: true });
+    await writeFile(skillPath, skillBody(skillName), "utf8");
+    installed.push(skillPath);
+  }
+
+  return {
+    target: resolvedTarget,
+    skill_root: join(...TARGET_SKILL_ROOTS[resolvedTarget]),
+    skills: SKILL_NAMES,
+    installed_files: installed.map((path) => path.replace(`${resolvedRepoRoot}/`, "")),
+  };
+};