@jaybeeuu/agent-cortex 1.37.1 → 1.39.0

package/.github/workflows/ci.test.ts

@@ -1,217 +0,0 @@
-import { describe, it } from "node:test";
-import assert from "node:assert/strict";
-import { readFileSync, existsSync } from "node:fs";
-import { join } from "node:path";
-import { parse as parseYaml } from "yaml";
-
-const ROOT = join(import.meta.dirname, "..", "..");
-
-function loadYaml(relPath: string): Record<string, unknown> {
-  const fullPath = join(ROOT, relPath);
-  assert.ok(existsSync(fullPath), `${relPath} does not exist`);
-  const content = readFileSync(fullPath, "utf-8");
-  return parseYaml(content) as Record<string, unknown>;
-}
-
-function loadJson(relPath: string): Record<string, unknown> {
-  const fullPath = join(ROOT, relPath);
-  assert.ok(existsSync(fullPath), `${relPath} does not exist`);
-  const content = readFileSync(fullPath, "utf-8");
-  return JSON.parse(content) as Record<string, unknown>;
-}
-
-// ─── CI Workflow ─────────────────────────────────────────────────────────────
-
-describe("CI workflow", () => {
-  const ci = loadYaml(".github/workflows/ci.yml") as Record<string, unknown>;
-
-  it("triggers on push to main and pull requests", () => {
-    const on = ci.on as Record<string, unknown>;
-    assert.ok(on.push, "has push trigger");
-    assert.ok("pull_request" in on, "has pull_request trigger");
-
-    const push = on.push as Record<string, unknown>;
-    assert.deepStrictEqual(push.branches, ["main"]);
-  });
-
-  it("has a job that runs on ubuntu-latest", () => {
-    const jobs = ci.jobs as Record<string, unknown>;
-    const jobNames = Object.keys(jobs);
-    assert.ok(jobNames.length > 0, "has at least one job");
-
-    const firstJob = jobs[jobNames[0]] as Record<string, unknown>;
-    assert.equal(firstJob["runs-on"], "ubuntu-latest");
-  });
-
-  it("checks out code", () => {
-    const steps = getSteps(ci);
-    const checkout = steps.find(
-      (s: Record<string, unknown>) => s.name === "Checkout"
-    );
-    assert.ok(checkout, "has Checkout step");
-    const uses = (checkout as Record<string, unknown>).uses as string;
-    assert.ok(uses.startsWith("actions/checkout@"), "uses actions/checkout");
-  });
-
-  it("sets up Node.js", () => {
-    const steps = getSteps(ci);
-    const setupNode = steps.find(
-      (s: Record<string, unknown>) => s.name === "Setup Node"
-    );
-    assert.ok(setupNode, "has Setup Node step");
-  });
-
-  it("sets up pnpm", () => {
-    const steps = getSteps(ci);
-    const setupPnpm = steps.find(
-      (s: Record<string, unknown>) => s.name === "Setup pnpm"
-    );
-    assert.ok(setupPnpm, "has Setup pnpm step");
-    const uses = (setupPnpm as Record<string, unknown>).uses as string;
-    assert.ok(uses.startsWith("pnpm/action-setup@"), "uses pnpm/action-setup");
-  });
-
-  it("installs dependencies", () => {
-    const steps = getSteps(ci);
-    const install = steps.find(
-      (s: Record<string, unknown>) => s.name === "Install dependencies"
-    );
-    assert.ok(install, "has Install dependencies step");
-  });
-
-  it("runs lint", () => {
-    const steps = getSteps(ci);
-    const lint = steps.find(
-      (s: Record<string, unknown>) => s.name === "Lint"
-    );
-    assert.ok(lint, "has Lint step");
-  });
-
-  it("runs tests", () => {
-    const steps = getSteps(ci);
-    const test = steps.find(
-      (s: Record<string, unknown>) => s.name === "Test"
-    );
-    assert.ok(test, "has Test step");
-  });
-
-  it("runs build", () => {
-    const steps = getSteps(ci);
-    const build = steps.find(
-      (s: Record<string, unknown>) => s.name === "Build"
-    );
-    assert.ok(build, "has Build step");
-  });
-});
-
-// ─── Publish Workflow ────────────────────────────────────────────────────────
-
-describe("Publish workflow", () => {
-  const publish = loadYaml(
-    ".github/workflows/publish.yml"
-  ) as Record<string, unknown>;
-
-  it("triggers on release published", () => {
-    const on = publish.on as Record<string, unknown>;
-    assert.ok(on.release, "has release trigger");
-    const release = on.release as Record<string, unknown>;
-    assert.deepStrictEqual(release.types, ["published"]);
-  });
-
-  it("has a job that runs on ubuntu-latest", () => {
-    const jobs = publish.jobs as Record<string, unknown>;
-    const jobNames = Object.keys(jobs);
-    assert.ok(jobNames.length > 0, "has at least one job");
-
-    const firstJob = jobs[jobNames[0]] as Record<string, unknown>;
-    assert.equal(firstJob["runs-on"], "ubuntu-latest");
-  });
-
-  it("sets up Node 24 with setup-node v6 for OIDC", () => {
-    const steps = getSteps(publish);
-    const setupNode = steps.find(
-      (s: Record<string, unknown>) => s.name === "Setup Node"
-    );
-    assert.ok(setupNode, "has Setup Node step");
-    const uses = (setupNode as Record<string, unknown>).uses as string;
-    assert.ok(uses.startsWith("actions/setup-node@v6"), "uses setup-node v6");
-    const with_ = (setupNode as Record<string, unknown>).with as Record<
-      string,
-      unknown
-    >;
-    assert.equal(with_["node-version"], 24);
-    assert.equal(
-      with_["registry-url"],
-      undefined,
-      "no registry-url — OIDC auth needs no registry config"
-    );
-  });
-
-  it("packs the tarball then publishes with npm", () => {
-    const steps = getSteps(publish);
-    const publishStep = steps.find(
-      (s: Record<string, unknown>) => s.name === "Publish to npm"
-    );
-    assert.ok(publishStep, "has Publish to npm step");
-    const run = (publishStep as Record<string, unknown>).run as string;
-    assert.ok(run.includes("pnpm pack"), "packs with pnpm");
-    assert.ok(run.includes("npm publish"), "publishes with npm");
-    assert.ok(!run.includes("pnpm publish"), "does not publish via pnpm");
-  });
-
-  it("grants contents: read and id-token: write permissions for OIDC", () => {
-    const jobs = publish.jobs as Record<string, unknown>;
-    const jobNames = Object.keys(jobs);
-    const job = jobs[jobNames[0]] as Record<string, unknown>;
-    const permissions = job.permissions as Record<string, unknown>;
-    assert.equal(permissions["contents"], "read");
-    assert.equal(permissions["id-token"], "write");
-  });
-
-  it("has no NPM_TOKEN secret or NODE_AUTH_TOKEN auth", () => {
-    const content = readFileSync(
-      join(ROOT, ".github/workflows/publish.yml"),
-      "utf-8"
-    );
-    assert.ok(!content.includes("NPM_TOKEN"), "no NPM_TOKEN secret reference");
-    assert.ok(
-      !content.includes("NODE_AUTH_TOKEN"),
-      "no NODE_AUTH_TOKEN auth env"
-    );
-  });
-});
-
-// ─── Package.json ────────────────────────────────────────────────────────────
-
-describe("package.json", () => {
-  const pkg = loadJson("package.json") as Record<string, unknown>;
-
-  it("is not private (publishable to npm)", () => {
-    assert.equal(pkg.private, undefined, "package is not private");
-  });
-
-  it("has a build script", () => {
-    const scripts = pkg.scripts as Record<string, unknown>;
-    assert.ok(scripts.build, "has build script");
-  });
-
-  it("has a lint script", () => {
-    const scripts = pkg.scripts as Record<string, unknown>;
-    assert.ok(scripts.lint, "has lint script");
-  });
-
-  it("has publishConfig with public access", () => {
-    const publishConfig = pkg.publishConfig as Record<string, unknown>;
-    assert.ok(publishConfig, "has publishConfig");
-    assert.equal(publishConfig.access, "public");
-  });
-});
-
-// ─── Helpers ─────────────────────────────────────────────────────────────────
-
-function getSteps(workflow: Record<string, unknown>): Record<string, unknown>[] {
-  const jobs = workflow.jobs as Record<string, unknown>;
-  const jobNames = Object.keys(jobs);
-  const firstJob = jobs[jobNames[0]] as Record<string, unknown>;
-  return firstJob.steps as Record<string, unknown>[];
-}

package/.github/workflows/release.yml

@@ -1,58 +0,0 @@
-name: Release
-
-on:
-  push:
-    branches:
-      - main
-
-concurrency: ${{ github.workflow }}-${{ github.ref }}
-
-jobs:
-  release:
-    name: Release
-    runs-on: ubuntu-latest
-    permissions:
-      contents: write
-      pull-requests: write
-      id-token: write
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-
-      - name: Setup Node
-        uses: actions/setup-node@v6
-        with:
-          node-version: 24
-
-      - name: Setup pnpm
-        uses: pnpm/action-setup@v4
-        with:
-          version: 10
-
-      - name: Install dependencies
-        run: pnpm install --frozen-lockfile
-
-      # changesets/action is used ONLY to version packages and open/update
-      # the "Version Packages" PR. We deliberately do NOT pass a publish
-      # script here - changesets/action does not propagate the OIDC env vars
-      # (ACTIONS_ID_TOKEN_REQUEST_URL / _TOKEN) to the spawned npm process,
-      # so npm publish would fail with ENEEDAUTH. Publishing happens in a
-      # separate top-level step below where env vars flow through cleanly.
-      - name: Create Version Packages PR
-        id: changesets
-        uses: changesets/action@v1
-        with:
-          version: pnpm version-packages
-          commit: "chore: version packages"
-          title: "chore: version packages"
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-      # When there are no changesets (i.e. the "Version Packages" PR was
-      # merged), changesets/action does nothing - so we publish directly.
-      # NOTE: @v1 (v1.9.0) exposes the output as 'hasChangesets' (camelCase).
-      - name: Publish to npm
-        if: steps.changesets.outputs.hasChangesets == 'false'
-        run: bash scripts/publish-release.sh

package/scripts/build-claude-agents.mjs

@@ -1,179 +0,0 @@
-// Builds the self-contained Claude Code plugin subtree at claude/ from the canonical
-// Copilot sources. The Copilot files (agents/*.agent.md) and the grouped skills/ tree
-// stay the single source of truth; the claude/ subtree is generated and committed.
-// CI runs this and checks `git diff --exit-code claude/` to guarantee it is never stale.
-//
-//   claude/agents/*.md   generated from agents/*.agent.md (frontmatter + tools converted)
-//   claude/skills/<name> symlinks to the grouped skills/<group>/<name> dirs (single source)
-//
-// Claude only loads agents from the default ./agents/ dir of the plugin root (custom
-// `agents` manifest paths are ignored), so the plugin root is claude/ — isolating it
-// from the Copilot .agent.md files, which would otherwise load as broken agents.
-//
-// Run: pnpm build:claude   (node scripts/build-claude-agents.mjs)
-// Zero dependencies so it runs on the CI Node (20) and local Node alike.
-
-import { readdirSync, readFileSync, writeFileSync, mkdirSync, rmSync, symlinkSync, statSync, copyFileSync, existsSync } from "node:fs";
-import { join, dirname, relative } from "node:path";
-import { fileURLToPath } from "node:url";
-
-const ROOT = join(dirname(fileURLToPath(import.meta.url)), "..");
-const AGENT_SRC = join(ROOT, "agents");
-const NATIVE_SRC = join(ROOT, "agents-native");
-const SKILL_SRC = join(ROOT, "skills");
-const AGENT_OUT = join(ROOT, "claude", "agents");
-const SKILL_OUT = join(ROOT, "claude", "skills");
-
-// Copilot tool name -> Claude tool name. `null` = drop (no Claude equivalent).
-const TOOL_MAP = {
-  bash: "Bash",
-  view: "Read",
-  edit: "Edit",
-  create: "Write",
-  grep: "Grep",
-  rg: "Grep",
-  glob: "Glob",
-  ask_user: "AskUserQuestion",
-  web_fetch: "WebFetch",
-  skill: "Skill",
-  task: "Task",
-  read_agent: null, // Claude's Task returns results inline; no separate read step.
-};
-
-// Agents NOT transformed from the Copilot source. `ralph` is authored natively for Claude
-// instead (agents-native/ralph.md) — its event-driven orchestration can't be produced by
-// token substitution from the poll-loop Copilot source.
-const DEFER = new Set(["ralph"]);
-
-// Ralph-coupled Copilot skills that don't apply to the lean Claude Ralph (and carry dead
-// ~/.copilot orchestration paths). Not symlinked into the Claude plugin.
-const SKILL_EXCLUDE = new Set(["ralph", "run-pipeline-stage"]);
-
-const COPILOT_PLUGIN_ROOT = "~/.copilot/installed-plugins/_direct/agent-cortex";
-const CLAUDE_PLUGIN_ROOT = "${CLAUDE_PLUGIN_ROOT}";
-const NAME_PREFIX = "agent-cortex:";
-
-function parseFrontmatter(text, file) {
-  const m = text.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n?/);
-  if (!m) throw new Error(`${file}: no YAML frontmatter found`);
-  return { fm: m[1], body: text.slice(m[0].length) };
-}
-
-function scalarLine(fm, key) {
-  const m = fm.match(new RegExp(`^${key}:[ \\t]*(.+?)[ \\t]*$`, "m"));
-  return m ? m[1] : undefined;
-}
-
-function stripQuotes(s) {
-  return s === undefined ? undefined : s.replace(/^["']([\s\S]*)["']$/, "$1");
-}
-
-function mapTools(fm, file) {
-  const raw = scalarLine(fm, "tools");
-  if (!raw) throw new Error(`${file}: no tools field`);
-  let list;
-  try {
-    list = JSON.parse(raw);
-  } catch {
-    throw new Error(`${file}: tools is not a JSON array: ${raw}`);
-  }
-  const out = [];
-  for (const t of list) {
-    if (!(t in TOOL_MAP)) throw new Error(`${file}: unknown tool "${t}" — extend TOOL_MAP`);
-    const mapped = TOOL_MAP[t];
-    if (mapped && !out.includes(mapped)) out.push(mapped);
-  }
-  return out;
-}
-
-// Rewrite harness-specific tokens in the prose body: exact backticked tool names and
-// the hardcoded Copilot plugin path. Only touches `\`token\`` so shell snippets like
-// `bd create` inside code fences are untouched.
-function transformBody(body) {
-  let out = body;
-  for (const [copilot, claude] of Object.entries(TOOL_MAP)) {
-    if (claude) out = out.split("`" + copilot + "`").join("`" + claude + "`");
-  }
-  return out.split(COPILOT_PLUGIN_ROOT).join(CLAUDE_PLUGIN_ROOT);
-}
-
-function buildAgents() {
-  rmSync(AGENT_OUT, { recursive: true, force: true });
-  mkdirSync(AGENT_OUT, { recursive: true });
-
-  const written = [];
-  const skipped = [];
-  for (const file of readdirSync(AGENT_SRC).filter((f) => f.endsWith(".agent.md")).sort()) {
-    const { fm, body } = parseFrontmatter(readFileSync(join(AGENT_SRC, file), "utf8"), file);
-
-    const rawName = stripQuotes(scalarLine(fm, "name"));
-    if (!rawName) throw new Error(`${file}: no name field`);
-    const slug = rawName.startsWith(NAME_PREFIX) ? rawName.slice(NAME_PREFIX.length) : rawName;
-    if (DEFER.has(slug)) {
-      skipped.push(slug);
-      continue;
-    }
-
-    const description = scalarLine(fm, "description");
-    if (!description) throw new Error(`${file}: no description field`);
-
-    const header =
-      `---\n` +
-      `# GENERATED from agents/${file} by scripts/build-claude-agents.mjs — DO NOT EDIT.\n` +
-      `name: ${slug}\n` +
-      `description: ${description}\n` +
-      `tools: ${mapTools(fm, file).join(", ")}\n` +
-      `---\n`;
-    const out = `${header}\n${transformBody(body).replace(/^\r?\n+/, "").replace(/\s*$/, "")}\n`;
-    writeFileSync(join(AGENT_OUT, `${slug}.md`), out);
-    written.push(slug);
-  }
-  console.log(`Generated ${written.length} Claude agent(s): ${written.join(", ")}`);
-  if (skipped.length) console.log(`Skipped Copilot source(s): ${skipped.join(", ")}`);
-}
-
-// Copy hand-authored Claude-native agents into claude/agents/ verbatim, alongside the
-// generated ones. These have no Copilot source (their bodies differ structurally per harness).
-function copyNativeAgents() {
-  if (!existsSync(NATIVE_SRC)) return;
-  const copied = [];
-  for (const file of readdirSync(NATIVE_SRC).filter((f) => f.endsWith(".md")).sort()) {
-    copyFileSync(join(NATIVE_SRC, file), join(AGENT_OUT, file));
-    copied.push(file.replace(/\.md$/, ""));
-  }
-  if (copied.length) console.log(`Copied ${copied.length} native Claude agent(s): ${copied.join(", ")}`);
-}
-
-// Symlink each grouped skill (skills/<group>/<name>/) into the flat claude/skills/ dir
-// so Claude's one-level-deep skill scan discovers them without duplicating content.
-function buildSkills() {
-  rmSync(SKILL_OUT, { recursive: true, force: true });
-  mkdirSync(SKILL_OUT, { recursive: true });
-
-  const byName = new Map();
-  for (const group of readdirSync(SKILL_SRC).sort()) {
-    const groupDir = join(SKILL_SRC, group);
-    if (!statSync(groupDir).isDirectory()) continue;
-    for (const name of readdirSync(groupDir).sort()) {
-      const skillDir = join(groupDir, name);
-      let hasSkill;
-      try {
-        hasSkill = statSync(join(skillDir, "SKILL.md")).isFile();
-      } catch {
-        hasSkill = false;
-      }
-      if (!hasSkill) continue;
-      if (SKILL_EXCLUDE.has(name)) continue;
-      if (byName.has(name)) {
-        throw new Error(`duplicate skill name "${name}" (${byName.get(name)} and ${group}) — names must be unique when flattened`);
-      }
-      byName.set(name, group);
-      symlinkSync(relative(SKILL_OUT, skillDir), join(SKILL_OUT, name));
-    }
-  }
-  console.log(`Linked ${byName.size} skill(s) into claude/skills/`);
-}
-
-buildAgents();
-copyNativeAgents();
-buildSkills();

package/scripts/publish-release.sh

@@ -1,32 +0,0 @@
-#!/usr/bin/env bash
-# Custom publish script for changesets that uses pnpm pack + npm publish
-# This is needed because changeset publish doesn't properly handle OIDC
-
-set -euo pipefail
-
-# Check if there are any packages to publish
-VERSION=$(node -p "require('./package.json').version")
-PACKAGE_NAME=$(node -p "require('./package.json').name")
-
-echo "Publishing $PACKAGE_NAME@$VERSION"
-
-# Check if this version is already published
-if npm view "$PACKAGE_NAME@$VERSION" version 2>/dev/null; then
-  echo "Version $VERSION is already published, skipping"
-  exit 0
-fi
-
-# Pack the tarball
-TARBALL=$(pnpm pack | tail -n 1)
-echo "Created tarball: $TARBALL"
-
-# Publish using npm with OIDC trusted publishing.
-# NOTE: provenance is disabled because this repo is private - npm's
-# trusted publishing auto-enables provenance, but sigstore only supports
-# public repos. The masked error would be ENEEDAUTH.
-npm publish "$TARBALL" --access public --no-provenance
-
-echo "✓ Published $PACKAGE_NAME@$VERSION"
-
-# Create git tag
-git tag -a "v$VERSION" -m "Release $PACKAGE_NAME@$VERSION" || echo "Tag already exists"