@funpixel/tools 0.0.0-stage → 0.1.0

package/plugins/kiro/LICENSE

@@ -0,0 +1,115 @@
+Funpixel GDK and funtools (@funpixel/tools)
+
+Required Notice: Copyright 2026 Funpixel (https://funpixel.ai)
+
+These files are licensed under the PolyForm Shield License 1.0.0, below, together with the
+additional permission that follows.
+
+## Additional Permission: Making Games
+
+In addition to the permissions in the license below, the licensor grants you permission to use the
+software, and to make changes and new works based on it, to make, test, publish, sell and run your
+own games and other playable works, whether or not you charge for them. The games you make are yours:
+this license does not reach a game's own code, art, sound, text or other content, or what you earn
+from it, and a game you make is not a product that competes with the licensor's, wherever you
+publish it.
+
+This permission does not cover providing the software, or a product or service based on it, that
+lets others make games (a game-making tool, kit, platform or service). That remains subject to the
+Noncompete section of the license below.
+
+The parts of this package under other licenses keep them: see NOTICE (the bundled devtools, MIT)
+and bench/LICENSE (the Blender bench scripts, GPL-3.0-or-later) where present, and
+THIRD_PARTY_NOTICES.md for the GDK.
+
+---
+
+# PolyForm Shield License 1.0.0
+
+<https://polyformproject.org/licenses/shield/1.0.0>
+
+## Acceptance
+
+In order to get any license under these terms, you must agree to them as both strict obligations and conditions to all your licenses.
+
+## Copyright License
+
+The licensor grants you a copyright license for the software to do everything you might do with the software that would otherwise infringe the licensor's copyright in it for any permitted purpose.  However, you may only distribute the software according to [Distribution License](#distribution-license) and make changes or new works based on the software according to [Changes and New Works License](#changes-and-new-works-license).
+
+## Distribution License
+
+The licensor grants you an additional copyright license to distribute copies of the software.  Your license to distribute covers distributing the software with changes and new works permitted by [Changes and New Works License](#changes-and-new-works-license).
+
+## Notices
+
+You must ensure that anyone who gets a copy of any part of the software from you also gets a copy of these terms or the URL for them above, as well as copies of any plain-text lines beginning with `Required Notice:` that the licensor provided with the software.  For example:
+
+> Required Notice: Copyright Yoyodyne, Inc. (http://example.com)
+
+## Changes and New Works License
+
+The licensor grants you an additional copyright license to make changes and new works based on the software for any permitted purpose.
+
+## Patent License
+
+The licensor grants you a patent license for the software that covers patent claims the licensor can license, or becomes able to license, that you would infringe by using the software.
+
+## Noncompete
+
+Any purpose is a permitted purpose, except for providing any product that competes with the software or any product the licensor or any of its affiliates provides using the software.
+
+## Competition
+
+Goods and services compete even when they provide functionality through different kinds of interfaces or for different technical platforms.  Applications can compete with services, libraries with plugins, frameworks with development tools, and so on, even if they're written in different programming languages or for different computer architectures.  Goods and services compete even when provided free of charge.  If you market a product as a practical substitute for the software or another product, it definitely competes.
+
+## New Products
+
+If you are using the software to provide a product that does not compete, but the licensor or any of its affiliates brings your product into competition by providing a new version of the software or another product using the software, you may continue using versions of the software available under these terms beforehand to provide your competing product, but not any later versions.
+
+## Discontinued Products
+
+You may begin using the software to compete with a product or service that the licensor or any of its affiliates has stopped providing, unless the licensor includes a plain-text line beginning with `Licensor Line of Business:` with the software that mentions that line of business.  For example:
+
+> Licensor Line of Business: YoyodyneCMS Content Management System (http://example.com/cms)
+
+## Sales of Business
+
+If the licensor or any of its affiliates sells a line of business developing the software or using the software to provide a product, the buyer can also enforce [Noncompete](#noncompete) for that product.
+
+## Fair Use
+
+You may have "fair use" rights for the software under the law. These terms do not limit them.
+
+## No Other Rights
+
+These terms do not allow you to sublicense or transfer any of your licenses to anyone else, or prevent the licensor from granting licenses to anyone else.  These terms do not imply any other licenses.
+
+## Patent Defense
+
+If you make any written claim that the software infringes or contributes to infringement of any patent, your patent license for the software granted under these terms ends immediately. If your company makes such a claim, your patent license ends immediately for work on behalf of your company.
+
+## Violations
+
+The first time you are notified in writing that you have violated any of these terms, or done anything with the software not covered by your licenses, your licenses can nonetheless continue if you come into full compliance with these terms, and take practical steps to correct past violations, within 32 days of receiving notice.  Otherwise, all your licenses end immediately.
+
+## No Liability
+
+***As far as the law allows, the software comes as is, without any warranty or condition, and the licensor will not be liable to you for any damages arising out of these terms or the use or nature of the software, under any kind of legal claim.***
+
+## Definitions
+
+The **licensor** is the individual or entity offering these terms, and the **software** is the software the licensor makes available under these terms.
+
+A **product** can be a good or service, or a combination of them.
+
+**You** refers to the individual or entity agreeing to these terms.
+
+**Your company** is any legal entity, sole proprietorship, or other kind of organization that you work for, plus all its affiliates.
+
+**Affiliates** means the other organizations than an organization has control over, is under the control of, or is under common control with.
+
+**Control** means ownership of substantially all the assets of an entity, or the power to direct its management and policies by vote, contract, or otherwise.  Control can be direct or indirect.
+
+**Your licenses** are all the licenses granted to you for the software under these terms.
+
+**Use** means anything you do with the software requiring one of your licenses.

package/plugins/kiro/README.md

@@ -0,0 +1,17 @@
+# Funpixel GDK for Kiro CLI
+
+Use Funpixel asset tools, game skills and optional studio workflows in your agent. Build, verify and publish browser games with advisory hooks and project-controlled review.
+
+```
+node install.mjs            # writes ~/.kiro/agents/funpixel.json pointing at this folder
+node install.mjs --workspace   # or ./.kiro/agents/funpixel.json for one project
+kiro-cli chat --agent funpixel
+```
+
+Commands: `/fp-new`, `/fp-first-look`, `/fp-verify`, `/fp-playtest`, `/fp-mobile-qa`, `/fp-publish`. Studio workflow: `/fp-studio`. Set `FUNPIXEL_API_KEY` before installing, or the
+Funpixel MCP is written disabled and the skills fall back to `npx @funpixel/tools`.
+
+Kiro shows hook output to the model only at the start of a turn, so the Stop gate cannot hold a turn open: it warns the person
+and hands its open items to the agent with the next message. See `hooks/host.md`.
+
+Generated by `funpixel-mono/gdk` (`npm run build`); edit the source there, never this copy.

package/plugins/kiro/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,75 @@
+# Third-party notices
+
+The Funpixel GDK adapts material from two MIT-licensed projects. Where a skill, agent or rule
+adapts one of them, it says so in a credit line. Everything else is Funpixel's own.
+
+One further source informed the GDK as ideas only, and none of its text is used: PixelLab
+(proprietary).
+
+## scenario-labs/skills (v0.47.0)
+
+Adapted: the skill house style (trigger line, worked example, common mistakes, length cap) and its
+lint; the refine-loop discipline (rubric first, one variable per round, round cap); reference and
+consistency handling; sprite-sheet grid and alignment recipes; audio prompt grammar; the
+"name the reflex" method for variety; and (from 0.48.0's critique rubrics) the critique order
+"numbers first, then eyes; a passing number never excuses a visual failure", used by the critic
+agent and the panel brief that ships with funtools (`panel/brief.md`); the identity-library flow
+(an accepted anchor, then a named collection drawn from it) and the model-comparison method (one
+input, a budget first, the same framing, measured before judged), in `funpixel-art`
+`references/cast.md` and `funpixel-3d` `references/bake-off.md`, and funtools'
+`cast` and `assets` bake-off.
+
+```
+MIT License
+
+Copyright (c) 2026 Scenario
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+```
+
+## Claude Code Game Studios (Donchitos)
+
+Adapted: the studio roles as agents (art director, audio director, QA lead, level designer), the
+session-start context and gap detection hooks, asset-spec and playtest-report practice, the HUD's
+information tiers and element budget (`funpixel-mobile-ui`), and "never two new mechanics in one
+encounter" (`funpixel-game-logic`, the level designer).
+
+```
+MIT License
+
+Copyright (c) 2026 Donchitos
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+```

package/plugins/kiro/agent.template.json

@@ -0,0 +1,45 @@
+{
+  "name": "funpixel",
+  "description": "Funpixel GDK: Use Funpixel asset tools, game skills and optional studio workflows in your agent. Build, verify and publish browser games with advisory hooks and project-controlled review.",
+  "tools": [
+    "*"
+  ],
+  "allowedTools": [
+    "read",
+    "grep",
+    "glob",
+    "code"
+  ],
+  "resources": [
+    "skill://{{ROOT}}/skills/*/SKILL.md"
+  ],
+  "hooks": {
+    "userPromptSubmit": [
+      {
+        "command": "node \"{{ROOT}}/hooks/kiro-prompt.mjs\"",
+        "timeout_ms": 30000
+      }
+    ],
+    "postToolUse": [
+      {
+        "command": "node \"{{ROOT}}/hooks/nudge.mjs\"",
+        "timeout_ms": 30000
+      }
+    ],
+    "stop": [
+      {
+        "command": "node \"{{ROOT}}/hooks/stop-gate.mjs\"",
+        "timeout_ms": 30000
+      }
+    ]
+  },
+  "mcpServers": {
+    "funpixel": {
+      "url": "https://api.funpixel.ai/mcp",
+      "headers": {
+        "Authorization": "Bearer ${FUNPIXEL_API_KEY}"
+      }
+    }
+  },
+  "welcomeMessage": "Funpixel GDK: /fp-new to start a game, /fp-verify, /fp-playtest, /fp-publish."
+}

package/plugins/kiro/hooks/brief.md

@@ -0,0 +1,135 @@
+<!-- funpixel-gdk:brief -->
+# Game development with the Funpixel toolkit
+
+Start with the creator's goal. An asset repair stays an asset repair; a new game gets the path
+below. The creator and host agent own scope, style and workflow. Recipes here and in the
+skills are defaults, not boundaries: keep locked choices, explore open ones, find another way when
+no recipe fits.
+
+Assets work in any engine; build, preview and publish target browser games (Pixi 8 or Three.js,
+Preact, the SDK).
+
+## The shelf
+
+Skills hold what great looks like, with numbers; each loads in one call (Skill tool or `SKILL.md`):
+- starting, planning or reshaping a game, the GDD: `funpixel-gdd`; code, the SDK, multiplayer:
+  `funpixel-game-spine`; rules, levels, balance, depth and replay: `funpixel-game-logic`
+- the look, 2D art, light and effects: `funpixel-art`; 3D models, the bench and levels: `funpixel-3d`
+- feel and payoffs: `funpixel-game-feel`; a place with a story: `funpixel-world-and-story`; sound
+  and music: `funpixel-audio`; phone HUD, touch: `funpixel-mobile-ui`
+- proving it plays, the panel and blind player: `funpixel-verify`; dev log: `funpixel-feedback`;
+  publish, trailer, store shots, playable ads: `funpixel-publish`; a store: `funpixel-store`;
+  Unity: `funpixel-unity-game`
+
+The session start names the few this game needs. Local hooks advise (`funpixel.json` `gdk.gate`:
+`"block"` or `"off"`; `FUNPIXEL_GDK_GATE`); no setting changes publishing's own checks.
+
+## The path
+
+For a complete game, the path our best games took: you are the person's copilot, not an autopilot.
+A plan made with them is a contract, target frames show what done looks like, and every round
+closes the gap between the two. The locked plan
+is the job; how you build it is yours. Why, tool and signal per step:
+`funpixel-gdd/references/the-path.md`.
+
+Start each session from `npx @funpixel/tools flow`: the owner's notes first (they outrank an
+agent's claim), then the one next step. After every step, a short status in the chat with a
+capture of the build: the owner watches and steers.
+
+1. **Brief back, one screen, one question.** A short brief (title, kind, verb, world, length,
+   failing, look, platforms), your calls in a line each, then one question: is it right? Decide
+   the rest and say it: their ask outranks a standing request.
+2. **First look, then a first playable.** The key art and the hero's reference sheet, shown in
+   the chat for the owner to steer. Then a playable built from them with real assets (the hero,
+   the place in the key art's light, title, music, the verb's sounds), sized by the game (short:
+   about 1 minute; long: 3 to 5), judged against the key art. They play: potential, or not.
+3. **Plan the whole game around it** (skill `funpixel-gdd`): the genre's best, pillars, story,
+   levels and maps, fun and wow moments, screens and HUD, a numbers contract with named tests,
+   the rest of the first look (target frames), the asset list with its price.
+4. **Lock** (`flow ask`): the owner's "looks good, let's build" (price shown; not a cap). It
+   stands until they say otherwise; a new direction is a new GDD version locked again; a
+   departure goes in "Where the build moved", with why.
+5. **Sim first** (`sim`, `test`), then **build with the assets as they land** in `public/assets/`,
+   each judged under the game's light. The slice: one verb, a win and a loss, progress, keys and
+   touch, `check` exits 0.
+6. **Each round, the look-dev loop**: capture at the target moments, set each beside its target
+   (`compare --target`), fix the biggest difference, then play it (`play`, `playtest`). Repeat
+   until each beat is close. Matching the targets is the job, never a style choice: only the owner
+   relaxes a target.
+7. **Extend** chapter by chapter (each to its targets, then the owner's yes); fold a new
+   request into the pillars first.
+8. **Finish when the person plays it and says yes.** Green means stop. When verify passes and the
+   goal is met, stop editing. No renames, restyles or polish nobody asked for; they break what
+   worked and hide which change did what.
+Hand back what plays now (keys and touch), what is out on purpose, the next two or three steps,
+and every stand-in. File the dev log with `report_feedback` before you finish.
+
+## A funtools scaffold
+
+A folder `funtools init` made is a finished frame around a demo round (`init --bare`: none). Replace
+the demo with your game (`rules.ts`, `session.ts`, `game.ts`, `feel.ts`, `hud.tsx`, `screens.tsx`,
+`look.json`, a check per mechanic in `funpixel.json`); keep the frame, host integration and checks.
+
+## Silent failures
+
+- dt is in seconds and clamped: `dt = Math.min(dt, 0.1)`. A background tab hands you one huge
+  frame and everything tunnels. Pixi: `ticker.deltaMS / 1000`, never `deltaTime`.
+- Resize with `setupGameResize((w, h) => …)` from `@funpixel/sdk`, never a `resize` listener or
+  `resizeTo: window`: those miss iframe resizes. It fires once at the call, so create the renderer
+  first.
+- Audio: one `new AudioEngine({ iosPatch: false })` from `@funpixel/sdk/audio`; connect every
+  source to `audio.master` and call `audio.unlock()` from the first click, pointerup or keydown.
+  `iosPatch: false` lets the iPhone ringer switch mute the game; pass `true`
+  only when sound is the game (rhythm, music). Keep an existing game's choice.
+- Pointer handlers use `addEventListener`. Assigning `onpointerdown = …` twice kills the first
+  control without an error.
+- Three: GLBs need `DRACOLoader`, `KTX2Loader` and the meshopt decoder with same-origin decoder
+  paths, an environment map (they render flat grey without one), and `mixer.update(dt)` every frame.
+- Pixi: every display object gets a `.label`; `window.__PIXI_APP__ = app` after `app.init()`.
+- Room codes, share codes and seeds carry `data-funpixel-selectable` (else they cannot be copied).
+- `@funpixel/sdk` is pinned exactly (`"0.6.0"`). Import the root only for `setupGameResize`;
+  everything else from a subpath. Multiplayer is `Room.autoJoin(getGameKey(), …)`, never a raw
+  WebSocket (skill `funpixel-game-spine`).
+- A performance fix changes how a frame is made (pooling, atlases, instancing), never what it shows.
+- Assets arrive as expiring URLs: `npx @funpixel/tools job <id> --wait --out public/assets/<file>`;
+  never base64 in code.
+- Hosts may refuse chains, loops, `sed -i`, heredocs and outside paths: use the edit tool, one
+  command per call (`doctor --host`); keep captures in `design/shots/`.
+
+## Red flags: thoughts before broken games
+
+- "It compiles, so it works." Verify it; a runtime crash builds green.
+- "I'll cast it to make the error go away." Look the name up (skill `funpixel-game-spine`); `as any` and
+  `?.` compile code that does nothing.
+- "The class exists, so the feature exists." Trace it from boot, the loop or an input handler, and
+  give it a check.
+- "The shapes will do for now." They won't: make the planned asset. A shape is only a fallback
+  until it lands; name every one still in the game at hand-back.
+- "The Play button surely works." Press it (skill `funpixel-verify`, front door).
+
+## Spending
+
+Scope, time and spend are the creator's: never shrink an agreed game to save them. The locked plan
+is the go-ahead for its assets: make them (pass `confirm_cost`); before each paid call say the
+route and its cost in one line. No budget unless the owner sets a cap. Out of credits is a pause: say so;
+they top up and you go on. Long jobs return an id: collect
+with `get_job`. Never end a session (headless `-p` too) while a background job, subagent
+or recording runs: a session that ends does not come back. Do the work in the session.
+
+## Hosted and local
+
+The Funpixel MCP does the paid and hosted work; `funtools` runs locally and free. When the MCP is
+not connected, use the local column and say which steps you could not do.
+
+| Job | MCP tool | Local (`npx @funpixel/tools …`) |
+|---|---|---|
+| New game | `create_game`, only with no local files (`init` mints the id) | `init` |
+| Build and preview | `build`, `preview` | `npm run build`, `dev` |
+| Check it plays | `probe`, `screenshot` (`click` presses Play) | `verify`, `verify --watch`, `verify --front-door` |
+| Look at a state | `capture_view`, `audit_screens`, `inspect_scene` | `capture` (`--all`: every view), `audit-screens`, `scene` |
+| Critic panel, blind player | `review`, `play` | `playtest`: `critic`, `player` agent seats |
+| Images, sprites, sheets | `generate_image`, `generate_sprite`, `edit_image`, `generate_spritesheet` | `gen image\|sprite\|edit\|sheet`, `assets gen` |
+| Sound and music | `generate_sound`, `generate_music` | `gen sound`, `gen music` |
+| 3D models | `generate_3d_model`, then the bench tools (skill `funpixel-3d`) | `gen model3d`, `model …` (`--local` on your Blender) |
+| Publish | `publish_game` | `publish` (needs `funtools login`) |
+| Dev log and feedback | `report_feedback` | lines in `.funtools/devlog.jsonl` |

package/plugins/kiro/hooks/critic-receipts.mjs

@@ -0,0 +1,86 @@
+import { createHash } from 'node:crypto';
+import { mkdirSync, readdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+const hash = (s) => createHash('sha256').update(s).digest('hex');
+const AXES = ['lookAndFeel', 'readability', 'intuitiveness', 'juice', 'fun', 'mobile', 'hud', 'overall'];
+const BAR = ['art_direction', 'consistency', 'motion', 'juice', 'screens'];
+const PERSONAS = { veteran: 'veteran player', ux: 'UX designer', skeptic: 'skeptic' };
+const directory = (root) => join(root, '.funtools', 'critic');
+export function captureDigest(root) {
+    try {
+        return hash(readFileSync(join(root, '.funtools', 'capture', 'index.json')));
+    }
+    catch {
+        return null;
+    }
+}
+export function panelScore(surfaces) {
+    if (!Array.isArray(surfaces) || surfaces.length < 2 || surfaces.length > 32)
+        return null;
+    const persona = Object.keys(PERSONAS).find((p) => surfaces[0]?.persona === p || surfaces[0]?.persona === PERSONAS[p]);
+    if (!persona || !surfaces.every((s) => s && (s.persona === persona || s.persona === PERSONAS[persona]) &&
+        typeof s.surface === 'string' && AXES.every((a) => Number.isFinite(s.scores?.[a]) && s.scores[a] >= 1 && s.scores[a] <= 10) &&
+        Array.isArray(s.findings) && s.findings.every((f) => f && ['high', 'medium', 'low'].includes(f.severity)) &&
+        BAR.every((k) => ['met', 'missing', 'unseen'].includes(s.bar?.[k]))))
+        return null;
+    if (!['phone', 'desktop'].every((vp) => surfaces.some((s) => s.surface.toLowerCase().startsWith(`${vp} `))))
+        return null;
+    const mean = (axis) => surfaces.reduce((n, s) => n + s.scores[axis], 0) / surfaces.length;
+    const entries = new Map();
+    for (const s of surfaces) {
+        for (const [k, v] of Object.entries(s.bar))
+            if (v === 'missing')
+                entries.set(`${s.surface}: ${k} missing`, k);
+        for (const f of s.findings.filter((x) => x.severity === 'high')) {
+            entries.set(`${s.surface}: ${f.id ?? 'high finding'} ${f.issue ?? ''}`.trim(), String(f.id ?? f.issue ?? 'high finding'));
+        }
+    }
+    const unseen = [...new Set(surfaces.flatMap((s) => Object.entries(s.bar).filter(([, v]) => v === 'unseen').map(([k]) => k)))];
+    return { persona, overall: mean('overall'), look: mean('lookAndFeel'), open: [...entries.keys()], openKeys: [...entries.values()], unseen };
+}
+export function recordCritic(root, input, fingerprint, now = Date.now()) {
+    if (input.hook_event_name !== 'SubagentStop' || typeof input.agent_id !== 'string' || !input.agent_id ||
+        input.agent_id.length > 200 || typeof input.last_assistant_message !== 'string' || input.last_assistant_message.length > 65536)
+        return false;
+    let value;
+    try {
+        value = JSON.parse(input.last_assistant_message);
+    }
+    catch {
+        return false;
+    }
+    const digest = captureDigest(root);
+    if (value?.kind !== 'funpixel-critic' || !digest || value.fingerprint !== fingerprint || value.capture_digest !== digest || !panelScore(value.surfaces))
+        return false;
+    const dir = directory(root);
+    mkdirSync(dir, { recursive: true });
+    const file = join(dir, `${hash(input.agent_id)}.json`);
+    const temp = `${file}.${process.pid}.tmp`;
+    writeFileSync(temp, JSON.stringify({ ...value, agent_id: input.agent_id, at: now }));
+    renameSync(temp, file);
+    return true;
+}
+export function codexPanel(root, fingerprint) {
+    const digest = captureDigest(root);
+    if (!digest)
+        return [];
+    let files;
+    try {
+        files = readdirSync(directory(root));
+    }
+    catch {
+        return [];
+    }
+    const records = [];
+    for (const file of files.filter((f) => /^[a-f0-9]{64}\.json$/.test(f))) {
+        try {
+            const value = JSON.parse(readFileSync(join(directory(root), file), 'utf8'));
+            const score = panelScore(value?.surfaces);
+            if (score && value.kind === 'funpixel-critic' && value.fingerprint === fingerprint && value.capture_digest === digest &&
+                typeof value.agent_id === 'string' && file === `${hash(value.agent_id)}.json` && Number.isFinite(value.at))
+                records.push({ ...score, at: value.at });
+        }
+        catch { }
+    }
+    return records.sort((a, b) => a.at - b.at);
+}

package/plugins/kiro/hooks/durable.mjs

@@ -0,0 +1,56 @@
+import { spawnSync } from 'node:child_process';
+import { realpathSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { readState, writeState } from './lib.mjs';
+const git = (root, ...args) => spawnSync('git', ['-C', root, ...args], { encoding: 'utf8', timeout: 5000 });
+const real = (p) => { try {
+    return realpathSync(p);
+}
+catch {
+    return p;
+} };
+export function inTemp(root) {
+    const r = real(root);
+    return [real(tmpdir()), '/tmp', '/private/tmp', '/var/folders', '/private/var/folders'].some((t) => r === t || r.startsWith(`${t}/`));
+}
+export function gitState(root) {
+    const inside = git(root, 'rev-parse', '--is-inside-work-tree');
+    if (inside.error)
+        return { repo: null };
+    if (inside.status !== 0 || inside.stdout.trim() !== 'true')
+        return { repo: false };
+    const status = git(root, 'status', '--porcelain', '--untracked-files=all', '--', '.');
+    const files = status.status === 0 ? status.stdout.split('\n').filter((l) => l.trim()).map((l) => l.slice(3)) : [];
+    const remote = git(root, 'remote').stdout.trim().length > 0;
+    const ahead = git(root, 'rev-list', '--count', '@{u}..HEAD');
+    return { repo: true, files, remote, unpushed: ahead.status === 0 ? Number(ahead.stdout.trim()) || 0 : null };
+}
+export function durableLine(root, st = gitState(root)) {
+    const parts = [];
+    if (inTemp(root))
+        parts.push(`the game lives in a temp folder (${root}), which the system wipes — move it to a folder of its own`);
+    if (st.repo === false)
+        parts.push('the game is not in git — `git init`, commit, and push to a remote so it cannot be lost');
+    else if (st.repo) {
+        const n = st.files.length;
+        if (n)
+            parts.push(`${n} file${n === 1 ? '' : 's'} not committed — commit and push (\`git add -A\`, \`git commit\`, \`git push\`)`);
+        if (!st.remote)
+            parts.push('no remote — push the game somewhere it survives this machine (`git remote add origin …`, then `git push -u origin HEAD`)');
+        else if (!n && st.unpushed)
+            parts.push(`${st.unpushed} commit${st.unpushed === 1 ? '' : 's'} not pushed — \`git push\``);
+    }
+    return parts.length ? `Funpixel: keep the game — ${parts.join('; ')}.` : null;
+}
+export function durableNote(input, root) {
+    if (process.env.FUNPIXEL_GDK_DURABLE === 'off')
+        return null;
+    const state = readState(input);
+    if (state.durableNoted)
+        return null;
+    const line = durableLine(root);
+    if (!line)
+        return null;
+    writeState(input, { ...readState(input), durableNoted: Date.now() });
+    return line;
+}

package/plugins/kiro/hooks/fence.mjs

@@ -0,0 +1,30 @@
+#!/usr/bin/env node
+import { forHost, isMain, readInput, readState, startDir, writeState } from './lib.mjs';
+import { fence } from './vendor/lanes/fence.mjs';
+export function fenceAnswer(input) {
+    let a = null;
+    try {
+        a = fence({ cwd: startDir(input), agentType: input.agent_type, tool: String(input.tool_name ?? ''), input: input.tool_input ?? {} });
+    }
+    catch {
+        return null;
+    }
+    if (!a)
+        return null;
+    if ('deny' in a)
+        return { hookSpecificOutput: { hookEventName: 'PreToolUse', permissionDecision: 'deny', permissionDecisionReason: a.deny } };
+    const state = readState(input);
+    const noted = Array.isArray(state.fenceNoted) ? state.fenceNoted : [];
+    if (noted.includes(a.lane))
+        return null;
+    writeState(input, { ...state, fenceNoted: [...noted, a.lane] });
+    return { hookSpecificOutput: { hookEventName: 'PreToolUse', additionalContext: a.note } };
+}
+async function main() {
+    const out = fenceAnswer(await readInput());
+    if (out)
+        process.stdout.write(forHost(JSON.stringify(out)));
+}
+if (isMain(import.meta.url)) {
+    main().catch((e) => process.stderr.write(`funpixel fence: ${e instanceof Error ? e.message : e}\n`));
+}