@jstn-sdk/ma 0.1.12 → 0.14.0

package/scripts/skills-manifest.js

@@ -3,31 +3,12 @@
 import fs from "node:fs/promises";
 import path from "node:path";
 import process from "node:process";
+import { parseSkillFrontmatter, validateSkillFrontmatter } from "../src/skill-frontmatter.js";
 
 const repoRoot = process.cwd();
 const skillsRoot = path.join(repoRoot, "skills");
 const manifestPath = path.join(skillsRoot, "index.json");
 
-function parseFrontmatterNameAndDescription(content) {
-  const match = content.match(/^---\n([\s\S]*?)\n---/);
-  if (!match) {
-    throw new Error("Missing SKILL.md frontmatter");
-  }
-
-  const lines = match[1].split("\n");
-  let name = "";
-  let description = "";
-  for (const line of lines) {
-    if (line.startsWith("name:")) {
-      name = line.slice("name:".length).trim();
-    }
-    if (line.startsWith("description:")) {
-      description = line.slice("description:".length).trim().replace(/^"|"$/g, "");
-    }
-  }
-  return { name, description };
-}
-
 async function main() {
   const entries = await fs.readdir(skillsRoot, { withFileTypes: true });
   const skills = [];
@@ -39,7 +20,7 @@ async function main() {
 
     const skillPath = path.join(skillsRoot, entry.name, "SKILL.md");
     const content = await fs.readFile(skillPath, "utf8");
-    const meta = parseFrontmatterNameAndDescription(content);
+    const meta = validateSkillFrontmatter(parseSkillFrontmatter(content), entry.name);
     skills.push({
       name: meta.name,
       path: `skills/${entry.name}`,

package/scripts/skills-pack.js

@@ -2,9 +2,9 @@
 
 import { spawnSync } from "node:child_process";
 import fs from "node:fs/promises";
-import os from "node:os";
 import path from "node:path";
 import process from "node:process";
+import { createTestNamespace } from "../src/test-fixtures.js";
 
 const repoRoot = process.cwd();
 const distRoot = path.join(repoRoot, "dist");
@@ -28,7 +28,7 @@ async function copyDir(src, dest) {
 async function main() {
   await fs.mkdir(distRoot, { recursive: true });
   await fs.rm(bundlePath, { force: true });
-  const tempRoot = await fs.mkdtemp(path.join(os.tmpdir(), "meta-architect-skills-"));
+  const tempRoot = createTestNamespace("meta-architect-skills");
   const frozenSkillsRoot = path.join(tempRoot, "skills");
   await copyDir(skillsRoot, frozenSkillsRoot);
 

package/scripts/skills-validate.js

@@ -3,6 +3,7 @@
 import fs from "node:fs/promises";
 import path from "node:path";
 import process from "node:process";
+import { parseSkillFrontmatter, validateSkillFrontmatter } from "../src/skill-frontmatter.js";
 
 const repoRoot = process.cwd();
 const skillsRoot = path.join(repoRoot, "skills");
@@ -12,42 +13,6 @@ function fail(message) {
   process.exitCode = 1;
 }
 
-function extractFrontmatter(content) {
-  const match = content.match(/^---\n([\s\S]*?)\n---\n?/);
-  if (!match) {
-    return null;
-  }
-
-  const yaml = match[1];
-  const result = {};
-
-  for (const rawLine of yaml.split("\n")) {
-    const line = rawLine.trim();
-    if (!line || line.startsWith("#")) {
-      continue;
-    }
-
-    const separator = line.indexOf(":");
-    if (separator === -1) {
-      continue;
-    }
-
-    const key = line.slice(0, separator).trim();
-    let value = line.slice(separator + 1).trim();
-
-    if (
-      (value.startsWith('"') && value.endsWith('"')) ||
-      (value.startsWith("'") && value.endsWith("'"))
-    ) {
-      value = value.slice(1, -1);
-    }
-
-    result[key] = value;
-  }
-
-  return result;
-}
-
 async function validateSkillDir(skillDir) {
   const skillName = path.basename(skillDir);
   const skillPath = path.join(skillDir, "SKILL.md");
@@ -58,25 +23,10 @@ async function validateSkillDir(skillDir) {
     throw new Error(`${skillName}: missing SKILL.md`);
   }
 
-  const frontmatter = extractFrontmatter(skillContent);
-  if (!frontmatter) {
-    throw new Error(`${skillName}: SKILL.md missing frontmatter`);
-  }
-
-  if (!frontmatter.name) {
-    throw new Error(`${skillName}: frontmatter missing name`);
-  }
-
-  if (frontmatter.name !== skillName) {
-    throw new Error(`${skillName}: frontmatter name must match directory name`);
-  }
-
-  if (!/^[a-z0-9-]+$/.test(frontmatter.name)) {
-    throw new Error(`${skillName}: frontmatter name must be lowercase kebab-case`);
-  }
-
-  if (!frontmatter.description || frontmatter.description.length < 10) {
-    throw new Error(`${skillName}: frontmatter description is missing or too short`);
+  try {
+    validateSkillFrontmatter(parseSkillFrontmatter(skillContent), skillName);
+  } catch (error) {
+    throw new Error(`${skillName}: ${error.message}`);
   }
 
   const agentContent = await fs.readFile(agentPath, "utf8").catch(() => null);

package/skills/arch/SKILL.md

@@ -11,9 +11,11 @@ Use this skill inside Codex to turn a product idea into a concrete architecture
 
 Produce:
 - problem framing
+- `decision`, `status`, `evidence`, `blockers`, `next_allowed_triggers`
 - user and workload assumptions
 - system architecture and subsystem boundaries
 - stack recommendation with tradeoffs
+- rejected alternatives with rationale
 - data model and storage choices
 - auth, security, and operational concerns
 - phased delivery plan

package/skills/build/SKILL.md

@@ -14,11 +14,14 @@ Produce:
 - blockers that still prevent implementation
 - the narrowest viable build slice
 - branch or worktree suggestions when relevant
+- bounded execution state when the build lane is already in progress
 - test and verification expectations
+- repair path when the bounded slice needs another pass
 - the exact next implementation step
 
 ## Rules
 
 - Do not claim readiness if architecture, evidence, logic, security, or DX/UX gaps remain unresolved.
 - Keep the recommended build slice small, testable, and reversible.
+- Treat `$build` as the sole owner of `.ma/plans/build.md` and `build_status`.
 - If the user wants code immediately and the path is clear, end with a concrete implementation plan rather than more review prose.

package/skills/flow/SKILL.md

@@ -10,7 +10,9 @@ Use this skill inside Codex to pressure-test how the system behaves, not just ho
 ## Output
 
 Produce:
+- `decision`, `status`, `evidence`, `blockers`, `next_allowed_triggers`
 - key actors and system states
+- state map and failure flows
 - main flows and failure flows
 - invariants and state transitions
 - race conditions, dead ends, and consistency risks

package/skills/sage/SKILL.md

@@ -11,8 +11,10 @@ Use this skill inside Codex to verify or challenge stack choices with real sourc
 
 Produce:
 - candidate tools, libraries, or services
+- `decision`, `status`, `evidence`, `blockers`, `next_allowed_triggers`
 - why each option fits or fails the architecture
 - source-backed evidence from official docs, upstream repos, or approved GitMCP sources
+- evidence grade and exact upstream mapping
 - recommendation with tradeoffs
 - unresolved gaps or missing evidence
 - exact next trigger, usually `$flow`

package/skills/sage/references/source-selection.md

@@ -23,6 +23,14 @@ Use this reference pack inside `$sage` when the repo needs evidence-backed selec
 - Claimed capability verified from a primary source
 - Maturity caveats called out when evidence is weak
 
+## Evidence grades
+
+- `VERIFIED`: exact upstream mapping plus primary-source confirmation
+- `PARTIAL`: candidate is mapped, but live proof or maturity proof is incomplete
+- `MISSING`: no trustworthy exact upstream mapping yet
+
+Always expose the evidence grade and the exact upstream mapping in user-facing `$sage` output.
+
 ## Native posture
 
 Meta-Architect ships curated guidance and playbooks. It does not ship a raw mirror of external catalogs. External sources remain evidence inputs, not user-facing skill identities.

package/skills/vet/SKILL.md

@@ -10,11 +10,13 @@ Use this skill inside Codex to review security posture before the build lane. `$
 ## Output
 
 Produce:
+- `decision`, `status`, `evidence`, `blockers`, `next_allowed_triggers`
 - trust boundaries
 - authn/authz expectations
 - sensitive data paths
 - abuse cases and likely failure modes
 - concrete mitigations
+- accepted risks
 - release blockers vs acceptable risks
 - exact next trigger, usually `$vibe`
 

package/skills/vet/references/security-playbooks.md

@@ -18,6 +18,13 @@ Use this reference pack inside `$vet` for repeatable trust-boundary reviews that
 - Distinguish blockers from accepted risk.
 - Route remediation back to the owning lane rather than creating a parallel security workflow.
 
+## Adversarial hardening
+
+- For higher-risk changes, run a bounded adversarial hardening pass before final approval.
+- Keep the hardening work inside the private scratchpad/runtime layer.
+- Return structured findings, not direct gate mutations.
+- If the hardening pass cannot resolve or clearly classify the risk, keep `$vet` in a non-terminal state instead of over-approving.
+
 ## Product boundary
 
 This pack deepens `$vet`; it does not create a new security skill family. Security patterns are packaged as Meta-Architect guidance, not as mirrored external catalogs or branded upstream surfaces.

package/skills/vibe/SKILL.md

@@ -10,8 +10,10 @@ Use this skill inside Codex to review whether the system will feel coherent for
 ## Output
 
 Produce:
+- `decision`, `status`, `evidence`, `blockers`, `next_allowed_triggers`
 - developer workflow risks
 - user workflow risks
+- operator friction and user friction
 - complexity hotspots
 - onboarding or operability friction
 - simplifications that improve clarity

package/src/agents.js

@@ -0,0 +1,279 @@
+import { spawnSync } from "node:child_process";
+import path from "node:path";
+
+const definitions = {
+  codex: {
+    id: "codex",
+    displayName: "Codex CLI",
+    skillsDir: ".agents/skills",
+    globalSkillsDir: "~/.agents/skills",
+    isUniversal: true,
+    command: "codex",
+    surface: "cli",
+    vendor: "openai",
+    probeable: true,
+  },
+  "claude-code": {
+    id: "claude-code",
+    displayName: "Claude Code",
+    skillsDir: ".claude/skills",
+    globalSkillsDir: "~/.claude/skills",
+    isUniversal: false,
+    command: "claude",
+    surface: "cli",
+    vendor: "anthropic",
+    probeable: true,
+  },
+  cursor: {
+    id: "cursor",
+    displayName: "Cursor",
+    skillsDir: ".agents/skills",
+    globalSkillsDir: "~/.agents/skills",
+    isUniversal: true,
+    command: "cursor",
+    surface: "ide",
+    vendor: "cursor",
+    probeable: true,
+  },
+  opencode: {
+    id: "opencode",
+    displayName: "OpenCode",
+    skillsDir: ".agents/skills",
+    globalSkillsDir: "~/.config/opencode/skills",
+    isUniversal: true,
+    command: "opencode",
+    surface: "cli",
+    vendor: "sst",
+    probeable: true,
+  },
+  "gemini-cli": {
+    id: "gemini-cli",
+    displayName: "Gemini CLI",
+    skillsDir: ".agents/skills",
+    globalSkillsDir: "~/.gemini/skills",
+    isUniversal: true,
+    command: "gemini",
+    surface: "cli",
+    vendor: "google",
+    probeable: true,
+  },
+  amp: {
+    id: "amp",
+    displayName: "Amp",
+    skillsDir: ".agents/skills",
+    globalSkillsDir: "~/.config/agents/skills",
+    isUniversal: true,
+    command: "amp",
+    surface: "cli",
+    vendor: "sourcegraph",
+    probeable: true,
+  },
+  goose: {
+    id: "goose",
+    displayName: "Goose",
+    skillsDir: ".goose/skills",
+    globalSkillsDir: "~/.config/goose/skills",
+    isUniversal: false,
+    command: "goose",
+    surface: "cli",
+    vendor: "block",
+    probeable: true,
+  },
+  "hermes-agent": {
+    id: "hermes-agent",
+    displayName: "Hermes Agent",
+    skillsDir: ".hermes/skills",
+    globalSkillsDir: "~/.hermes/skills",
+    isUniversal: false,
+    command: "hermes",
+    surface: "cli",
+    vendor: "nous-research",
+    probeable: true,
+  },
+  pi: {
+    id: "pi",
+    displayName: "Pi Coding Agent",
+    skillsDir: ".pi/skills",
+    globalSkillsDir: "~/.pi/agent/skills",
+    isUniversal: false,
+    command: "pi",
+    surface: "cli",
+    vendor: "pi",
+    probeable: true,
+  },
+  windsurf: {
+    id: "windsurf",
+    displayName: "Windsurf",
+    skillsDir: ".windsurf/skills",
+    globalSkillsDir: "~/.codeium/windsurf/skills",
+    isUniversal: false,
+    command: null,
+    surface: "ide",
+    vendor: "windsurf",
+    probeable: false,
+  },
+  cline: {
+    id: "cline",
+    displayName: "Cline",
+    skillsDir: ".agents/skills",
+    globalSkillsDir: "~/.agents/skills",
+    isUniversal: true,
+    command: null,
+    surface: "ide",
+    vendor: "cline",
+    probeable: false,
+  },
+  continue: {
+    id: "continue",
+    displayName: "Continue",
+    skillsDir: ".continue/skills",
+    globalSkillsDir: "~/.continue/skills",
+    isUniversal: false,
+    command: "continue",
+    surface: "ide",
+    vendor: "continue",
+    probeable: true,
+  },
+  roo: {
+    id: "roo",
+    displayName: "Roo Code",
+    skillsDir: ".roo/skills",
+    globalSkillsDir: "~/.roo/skills",
+    isUniversal: false,
+    command: null,
+    surface: "ide",
+    vendor: "roo-code",
+    probeable: false,
+  },
+  "kiro-cli": {
+    id: "kiro-cli",
+    displayName: "Kiro CLI",
+    skillsDir: ".kiro/skills",
+    globalSkillsDir: "~/.kiro/skills",
+    isUniversal: false,
+    command: "kiro",
+    surface: "ide",
+    vendor: "amazon",
+    probeable: true,
+  },
+  junie: {
+    id: "junie",
+    displayName: "Junie",
+    skillsDir: ".junie/skills",
+    globalSkillsDir: "~/.junie/skills",
+    isUniversal: false,
+    command: null,
+    surface: "ide",
+    vendor: "jetbrains",
+    probeable: false,
+  },
+  "github-copilot": {
+    id: "github-copilot",
+    displayName: "GitHub Copilot",
+    skillsDir: ".agents/skills",
+    globalSkillsDir: "~/.copilot/skills",
+    isUniversal: true,
+    command: null,
+    surface: "ide",
+    vendor: "github",
+    probeable: false,
+  },
+  antigravity: {
+    id: "antigravity",
+    displayName: "Antigravity",
+    skillsDir: ".agents/skills",
+    globalSkillsDir: "~/.gemini/antigravity/skills",
+    isUniversal: true,
+    command: null,
+    surface: "ide",
+    vendor: "google",
+    probeable: false,
+  },
+  universal: {
+    id: "universal",
+    displayName: "Universal Agent Skills",
+    skillsDir: ".agents/skills",
+    globalSkillsDir: "~/.agents/skills",
+    isUniversal: true,
+    command: null,
+    surface: "generic",
+    vendor: "universal",
+    probeable: false,
+  },
+};
+
+export const agentRegistry = Object.freeze(
+  Object.fromEntries(
+    Object.entries(definitions).map(([id, definition]) => [id, Object.freeze(definition)]),
+  ),
+);
+
+export function getAgent(type = process.env.MA_AGENT || "codex") {
+  return agentRegistry[type] ?? agentRegistry.codex;
+}
+
+export function getNonUniversalAgents() {
+  return Object.values(agentRegistry).filter((agent) => !agent.isUniversal);
+}
+
+export function isUniversalAgent(type) {
+  return getAgent(type).isUniversal;
+}
+
+export function resolveAgentCommand(type = process.env.MA_AGENT || "codex") {
+  const agent = getAgent(type);
+  if (!agent.command) return null;
+  const envKey = `MA_${agent.id.replaceAll("-", "_").toUpperCase()}_BIN`;
+  return process.env[envKey]?.trim() || agent.command;
+}
+
+export function detectInstalled(type = process.env.MA_AGENT || "codex") {
+  const agent = getAgent(type);
+  const command = resolveAgentCommand(agent.id);
+  if (!command || !agent.probeable) {
+    return {
+      ...agent,
+      installed: false,
+      command: command ?? null,
+      version: "",
+      probe: "unsupported",
+    };
+  }
+  const script = [".js", ".mjs", ".cjs"].includes(path.extname(command));
+  const result = spawnSync(
+    script ? process.execPath : command,
+    script ? [command, "--version"] : ["--version"],
+    {
+      encoding: "utf8",
+    },
+  );
+  return {
+    ...agent,
+    command,
+    installed: result.status === 0,
+    version: result.status === 0 ? result.stdout.trim() : "",
+    error: result.error?.message || result.stderr?.trim() || "",
+  };
+}
+
+export function listAgents() {
+  return Object.values(agentRegistry);
+}
+
+const slashInvocationAgents = new Set([
+  "cursor",
+  "windsurf",
+  "cline",
+  "continue",
+  "roo",
+  "kiro-cli",
+  "junie",
+  "github-copilot",
+  "antigravity",
+]);
+
+export function getAgentInvocation(type, command = "maestro") {
+  if (type === "codex") return `$${command}`;
+  if (slashInvocationAgents.has(type)) return `/${command}`;
+  return command;
+}