@hover-dev/core 0.14.1 → 0.16.0

package/dist/service/saveHandlers.d.ts

@@ -1,17 +1,15 @@
 /**
- * Save-artifact WebSocket handlers (skill / spec / Jira CSV).
+ * Save-artifact WebSocket handlers (spec / Jira CSV).
  *
- * All three save-* messages share the same shape: validate `name + steps`,
- * call a per-kind writer, fork on Exists-error vs. success. The differences
- * (which writer, which message names, which fields to pluck, skill's
- * "push a fresh skills-list afterwards" tail) are captured in the
- * `SaveArtifactConfig` descriptor table below.
- *
- * Replaces three near-identical handlers that drifted apart over time —
- * see the v0.2.x refactor pass for the full rationale.
+ * Both save-* messages share the same shape: validate `name + steps`, call a
+ * per-kind writer, fork on Exists-error vs. success. The differences (which
+ * writer, which message names, which fields to pluck) are captured in the
+ * `SaveArtifactConfig` descriptor table below. (Save-as-Skill was retired; the
+ * generic `onSaved` hook it used is kept for any future artifact that needs a
+ * post-write tail.)
  */
 import type { WebSocket } from 'ws';
-import { writeSkill, type SkillStep } from '../skills/writeSkill.js';
+import { type SkillStep } from '../skills/writeSkill.js';
 import { writeSpec, type SpecAssertion } from '../specs/writeSpec.js';
 import { writeCaseCsv } from '../specs/writeCaseCsv.js';
 import { type ClientMessage } from './types.js';
@@ -25,8 +23,8 @@ interface SaveArtifactConfig<TWriteResult extends {
     savedType: string;
     /** Emitted when the writer threw an Exists-error. */
     existsType: string;
-    /** Optional — fires after a successful write. Used by the skill flow to
-     *  push a refreshed `skills-list` to the widget. */
+    /** Optional — fires after a successful write (e.g. to push a refreshed list
+     *  to the widget). Currently unused; kept generic for future artifacts. */
     onSaved?: (ws: WebSocket, devRoot: string) => Promise<void>;
     /** Class used in `err instanceof …` to detect "already exists" errors. */
     ExistsError: new (...args: never[]) => {
@@ -48,7 +46,6 @@ export declare function handleSaveArtifact<TWriteResult extends {
     slug: string;
     path: string;
 }>(ws: WebSocket, msg: ClientMessage, devRoot: string, cfg: SaveArtifactConfig<TWriteResult>): Promise<void>;
-export declare const SKILL_CONFIG: SaveArtifactConfig<Awaited<ReturnType<typeof writeSkill>>>;
 export declare const SPEC_CONFIG: SaveArtifactConfig<Awaited<ReturnType<typeof writeSpec>>>;
 export declare const CASE_CSV_CONFIG: SaveArtifactConfig<Awaited<ReturnType<typeof writeCaseCsv>>>;
 export {};

package/dist/service/saveHandlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"saveHandlers.d.ts","sourceRoot":"","sources":["../../src/service/saveHandlers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,EAAE,UAAU,EAAgC,KAAK,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACnG,OAAO,EAAE,SAAS,EAAmB,KAAK,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACvF,OAAO,EAAE,YAAY,EAAsB,MAAM,0BAA0B,CAAC;AAC5E,OAAO,EAAQ,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAEtD,UAAU,kBAAkB,CAAC,YAAY,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;IAC9E,qEAAqE;IACrE,WAAW,EAAE,MAAM,CAAC;IACpB,0BAA0B;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,qDAAqD;IACrD,UAAU,EAAE,MAAM,CAAC;IACnB;wDACoD;IACpD,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,0EAA0E;IAC1E,WAAW,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,KAAK,CAAC;IAC9E,wEAAwE;IACxE,KAAK,EAAE,CAAC,IAAI,EAAE;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,SAAS,EAAE,CAAC;QACnB,UAAU,EAAE,aAAa,EAAE,CAAC;QAC5B,OAAO,EAAE,WAAW,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;QAC/C,SAAS,EAAE,OAAO,CAAC;KACpB,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;CAC7B;AAED,wBAAsB,kBAAkB,CAAC,YAAY,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAC1F,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,aAAa,EAClB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,kBAAkB,CAAC,YAAY,CAAC,GACpC,OAAO,CAAC,IAAI,CAAC,CA0Cf;AAED,eAAO,MAAM,YAAY,EAAE,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,UAAU,CAAC,CAAC,CAanF,CAAC;AAEF,eAAO,MAAM,WAAW,EAAE,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC,CAOjF,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC,CAYxF,CAAC"}
+{"version":3,"file":"saveHandlers.d.ts","sourceRoot":"","sources":["../../src/service/saveHandlers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,SAAS,EAAmB,KAAK,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACvF,OAAO,EAAE,YAAY,EAAsB,MAAM,0BAA0B,CAAC;AAC5E,OAAO,EAAQ,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAEtD,UAAU,kBAAkB,CAAC,YAAY,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;IAC9E,qEAAqE;IACrE,WAAW,EAAE,MAAM,CAAC;IACpB,0BAA0B;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,qDAAqD;IACrD,UAAU,EAAE,MAAM,CAAC;IACnB;+EAC2E;IAC3E,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,0EAA0E;IAC1E,WAAW,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,KAAK,CAAC;IAC9E,wEAAwE;IACxE,KAAK,EAAE,CAAC,IAAI,EAAE;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,SAAS,EAAE,CAAC;QACnB,UAAU,EAAE,aAAa,EAAE,CAAC;QAC5B,OAAO,EAAE,WAAW,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;QAC/C,SAAS,EAAE,OAAO,CAAC;KACpB,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;CAC7B;AAED,wBAAsB,kBAAkB,CAAC,YAAY,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAC1F,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,aAAa,EAClB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,kBAAkB,CAAC,YAAY,CAAC,GACpC,OAAO,CAAC,IAAI,CAAC,CA0Cf;AAED,eAAO,MAAM,WAAW,EAAE,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC,CAOjF,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC,CAYxF,CAAC"}

package/dist/service/saveHandlers.js

@@ -1,16 +1,13 @@
 /**
- * Save-artifact WebSocket handlers (skill / spec / Jira CSV).
+ * Save-artifact WebSocket handlers (spec / Jira CSV).
  *
- * All three save-* messages share the same shape: validate `name + steps`,
- * call a per-kind writer, fork on Exists-error vs. success. The differences
- * (which writer, which message names, which fields to pluck, skill's
- * "push a fresh skills-list afterwards" tail) are captured in the
- * `SaveArtifactConfig` descriptor table below.
- *
- * Replaces three near-identical handlers that drifted apart over time —
- * see the v0.2.x refactor pass for the full rationale.
+ * Both save-* messages share the same shape: validate `name + steps`, call a
+ * per-kind writer, fork on Exists-error vs. success. The differences (which
+ * writer, which message names, which fields to pluck) are captured in the
+ * `SaveArtifactConfig` descriptor table below. (Save-as-Skill was retired; the
+ * generic `onSaved` hook it used is kept for any future artifact that needs a
+ * post-write tail.)
  */
-import { writeSkill, listSkills, SkillExistsError } from '../skills/writeSkill.js';
 import { writeSpec, SpecExistsError } from '../specs/writeSpec.js';
 import { writeCaseCsv, CaseCsvExistsError } from '../specs/writeCaseCsv.js';
 import { send } from './types.js';
@@ -45,8 +42,8 @@ export async function handleSaveArtifact(ws, msg, devRoot, cfg) {
         return;
     }
     send(ws, { type: cfg.savedType, payload: { name: result.slug, path: result.path } });
-    // The artifact is already on disk; an onSaved failure (e.g. listSkills
-    // re-scan) shouldn't surface as if the save itself failed — log and move on.
+    // The artifact is already on disk; an onSaved failure (e.g. a follow-up
+    // list re-scan) shouldn't surface as if the save itself failed — log on.
     if (cfg.onSaved) {
         try {
             await cfg.onSaved(ws, devRoot);
@@ -57,19 +54,6 @@ export async function handleSaveArtifact(ws, msg, devRoot, cfg) {
         }
     }
 }
-export const SKILL_CONFIG = {
-    requestName: 'save-skill',
-    savedType: 'skill-saved',
-    existsType: 'skill-exists',
-    ExistsError: SkillExistsError,
-    write: ({ devRoot, name, description, steps, overwrite }) => writeSkill({ devRoot, name, description, steps, overwrite }),
-    onSaved: async (ws, devRoot) => {
-        // Push a fresh list so the widget's skills overlay updates without a
-        // round-trip — most relevant right after the save.
-        const skills = await listSkills(devRoot);
-        send(ws, { type: 'skills-list', payload: { skills } });
-    },
-};
 export const SPEC_CONFIG = {
     requestName: 'save-spec',
     savedType: 'spec-saved',

package/dist/service/types.d.ts

@@ -35,6 +35,11 @@ export interface ClientMessage {
         /** set-mode only — id of the plugin-contributed mode to activate,
          *  or null to return to normal (unmoded) operation. */
         modeId?: string | null;
+        /** optimize-spec / promote-optimized / discard-optimized — the spec slug. */
+        slug?: string;
+        /** set-api-key only — the model API key to inject into the spawned CLI's
+         *  env (or empty/missing to clear it). Held in memory only, never logged. */
+        key?: string;
     };
 }
 export declare function send(ws: WebSocket, message: {

package/dist/service/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/service/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE;QACR,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC;QACpB,UAAU,CAAC,EAAE,aAAa,EAAE,CAAC;QAC7B,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB;uDAC+C;QAC/C,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB;;2DAEmD;QACnD,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,oEAAoE;QACpE,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB;+DACuD;QACvD,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACxB,CAAC;CACH;AAED,wBAAgB,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAEtF;AAED;;;;sEAIsE;AACtE,wBAAgB,UAAU,CACxB,EAAE,EAAE,SAAS,EACb,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAC3C,OAAO,CAIT"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/service/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE;QACR,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC;QACpB,UAAU,CAAC,EAAE,aAAa,EAAE,CAAC;QAC7B,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB;uDAC+C;QAC/C,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB;;2DAEmD;QACnD,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,oEAAoE;QACpE,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB;+DACuD;QACvD,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,6EAA6E;QAC7E,IAAI,CAAC,EAAE,MAAM,CAAC;QACd;qFAC6E;QAC7E,GAAG,CAAC,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AAED,wBAAgB,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAEtF;AAED;;;;sEAIsE;AACtE,wBAAgB,UAAU,CACxB,EAAE,EAAE,SAAS,EACb,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAC3C,OAAO,CAIT"}

package/dist/service.d.ts

@@ -4,13 +4,16 @@ export interface ServiceOptions {
     agentId?: string;
     model?: string;
     maxBudgetUsd?: number;
+    /** How the optimization pass (F7) surfaces in the widget. Default 'suggest'.
+     *  'off' = no nudge, 'suggest' = ✦ hint, 'on' = auto-run after Save-as-spec. */
+    optimizeMode?: 'off' | 'suggest' | 'on';
     mcpConfig?: string;
     /** CDP URL to preflight before each command (default http://localhost:9222). */
     cdpUrl?: string;
-    /** Working directory for the spawned agent. Also where skills are saved
-     *  ('<devRoot>/.claude/skills/<slug>/SKILL.md'). Defaults to process.cwd().
-     *  In Vite plugin context, set to `server.config.root` so Claude
-     *  auto-discovers skills the user previously saved from this project. */
+    /** Working directory for the spawned agent. Also the root under which saved
+     *  specs (`__vibe_tests__/`), sidecars + seeds (`.hover/`) live. Defaults to
+     *  process.cwd(); in Vite plugin context, set to `server.config.root` so the
+     *  agent runs against the project (and Claude Code reads its CLAUDE.md). */
     devRoot?: string;
     /** Plugins contributed by the bundler-plugin wrapper. Each manifest can
      *  add a widget mode, MCP servers, Chrome flags, and lifecycle hooks.
@@ -26,6 +29,12 @@ export interface ServiceOptions {
      *  see the proxy; moving it here is what enables the single-Chrome model.
      *  Default false (shims pass it through from their own option). */
     autoLaunchChrome?: boolean;
+    /** Opt-in: give the agent READ-ONLY, fenced access to the project's source
+     *  via a `read_source` / `list_source` MCP server (in addition to Playwright
+     *  MCP), in every mode. Lets it author against real selectors/routes and do
+     *  white-box security/pentest. Fenced to devRoot, secrets/keys/.git/build
+     *  excluded, no write/exec. Default false — the agent stays browser-only. */
+    codeContext?: boolean;
     /** The dev-server URL the auto-launched Chrome should open. Each shim knows
      *  its own framework's dev URL and passes it here. Defaults to the cdp host
      *  if unset, but shims should always provide it. */

package/dist/service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AA8EA,OAAO,EAEL,KAAK,mBAAmB,EAEzB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gFAAgF;IAChF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;6EAGyE;IACzE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;uBAImB;IACnB,OAAO,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAChC;;;;;;uEAMmE;IACnE,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;wDAEoD;IACpD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B;4EACwE;IACxE,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAiED,wBAAsB,YAAY,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAs2B/E"}
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AA+EA,OAAO,EAEL,KAAK,mBAAmB,EAEzB,MAAM,iBAAiB,CAAC;AAQzB,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;oFACgF;IAChF,YAAY,CAAC,EAAE,KAAK,GAAG,SAAS,GAAG,IAAI,CAAC;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gFAAgF;IAChF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;gFAG4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;uBAImB;IACnB,OAAO,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAChC;;;;;;uEAMmE;IACnE,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;;iFAI6E;IAC7E,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;wDAEoD;IACpD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B;4EACwE;IACxE,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAiED,wBAAsB,YAAY,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CA49B/E"}