@jstn-sdk/ma 0.1.4 → 0.1.5

package/skills/vet/SKILL.md

@@ -1,25 +0,0 @@
----
-name: vet
-description: "Use when the user wants a security and trust-boundary review of the current design before implementation or release."
----
-
-# Vet
-
-Use this skill inside Codex to review security posture before the build lane.
-
-## Output
-
-Produce:
-- trust boundaries
-- authn/authz expectations
-- sensitive data paths
-- abuse cases and likely failure modes
-- concrete mitigations
-- release blockers vs acceptable risks
-- exact next trigger, usually `$vibe`
-
-## Rules
-
-- Prioritize material risks over exhaustive but low-value checklists.
-- Call out missing assumptions that affect security posture.
-- Distinguish between must-fix blockers and documented accepted risk.

package/skills/vet/agents/openai.yaml

@@ -1,4 +0,0 @@
-interface:
-  display_name: "$vet"
-  short_description: "Security and trust-boundary review"
-  default_prompt: "Use $vet to review trust boundaries, security risks, abuse cases, and safer alternatives in the current design."

package/skills/vibe/SKILL.md

@@ -1,24 +0,0 @@
----
-name: vibe
-description: "Use when the user wants a DX and UX review of the planned workflow before implementation proceeds."
----
-
-# Vibe
-
-Use this skill inside Codex to review whether the system will feel coherent for both operators and end users.
-
-## Output
-
-Produce:
-- developer workflow risks
-- user workflow risks
-- complexity hotspots
-- onboarding or operability friction
-- simplifications that improve clarity
-- exact next trigger, usually `$build`
-
-## Rules
-
-- Focus on concrete friction, not aesthetics-only feedback.
-- Prefer fewer surfaces, fewer steps, and clearer operator outcomes.
-- Preserve the architecture and security constraints established earlier in the flow.

package/skills/vibe/agents/openai.yaml

@@ -1,4 +0,0 @@
-interface:
-  display_name: "$vibe"
-  short_description: "DX and UX review before implementation"
-  default_prompt: "Use $vibe to review developer and user experience risks before the build lane proceeds."

package/src/runtime-artifacts.js

@@ -1,363 +0,0 @@
-import fs from "node:fs/promises";
-import path from "node:path";
-import { ensureDir, writeFileIfMissing } from "./fs-utils.js";
-import { getRuntimeWritePath } from "./paths.js";
-
-const runtimeDirs = ["context", "specs", "plans"];
-
-function renderProjectContext({ idea = null }) {
-  return [
-    "# Project Context",
-    "",
-    `Updated: ${new Date().toISOString()}`,
-    "",
-    "## Current Brief",
-    "",
-    idea ?? 'No project brief captured yet. Run `ma idea "..."` first.',
-    "",
-    "## Source Of Truth",
-    "",
-    "- `.ma/decisions.json` tracks gate and decision history",
-    "- `.ma/release.json` tracks release-state fields",
-    "- `.ma/runbook.md` defines the local helper workflow",
-    "",
-    "## Next Recommended Trigger",
-    "",
-    idea ? "`$arch`" : "`ma idea`",
-    "",
-  ].join("\n");
-}
-
-function renderArchitectureSpec({ idea, blueprint }) {
-  return [
-    "# Architecture Spec",
-    "",
-    `Updated: ${new Date().toISOString()}`,
-    "",
-    "## Problem Statement",
-    "",
-    idea,
-    "",
-    "## Blueprint Summary",
-    "",
-    blueprint.summary,
-    "",
-    "## Suggested Stack",
-    "",
-    ...blueprint.suggestedStack.map((item) => `- ${item}`),
-    "",
-    "## Intended Outcome",
-    "",
-    blueprint.outcome,
-    "",
-    "## Next Recommended Trigger",
-    "",
-    "`$sage`",
-    "",
-  ].join("\n");
-}
-
-function renderEvidenceSpec({ idea, sourceEntries, verified, blockers }) {
-  const status = verified ? "VERIFIED" : sourceEntries.length > 0 ? "PARTIAL" : "MISSING";
-  const lines = [
-    "# Evidence Spec",
-    "",
-    `Updated: ${new Date().toISOString()}`,
-    "",
-    "## Probe Basis",
-    "",
-    idea,
-    "",
-    "## Evidence Status",
-    "",
-    status,
-    "",
-    "## Sources",
-    "",
-  ];
-
-  if (sourceEntries.length === 0) {
-    lines.push("No approved GitMCP sources configured.", "");
-  } else {
-    for (const source of sourceEntries) {
-      lines.push(`- ${source.repo} (${source.category})`);
-      lines.push(`  - endpoint: ${source.endpoint}`);
-      if (source.liveProbe?.sampleText) {
-        lines.push(`  - live probe: ${source.liveProbe.sampleText}`);
-      } else if (source.liveProbe?.reason) {
-        lines.push(`  - live probe: ${source.liveProbe.reason}`);
-      } else if (source.liveProbe?.error) {
-        lines.push(`  - live probe error: ${source.liveProbe.error}`);
-      }
-    }
-    lines.push("");
-  }
-
-  lines.push("## Blockers", "");
-  if (blockers.length === 0) {
-    lines.push("None.", "");
-  } else {
-    lines.push(...blockers.map((blocker) => `- ${blocker}`), "");
-  }
-
-  lines.push("## Next Recommended Trigger", "", verified ? "`$flow`" : "`$sage`", "");
-  return lines.join("\n");
-}
-
-function renderLogicSpec(logicMap) {
-  return [
-    "# Logic Spec",
-    "",
-    `Updated: ${new Date().toISOString()}`,
-    "",
-    "## States",
-    "",
-    ...logicMap.states.map((state) => `- ${state}`),
-    "",
-    "## Blockers",
-    "",
-    ...(logicMap.blockers.length === 0 ? ["None."] : logicMap.blockers.map((item) => `- ${item}`)),
-    "",
-    "## Next Recommended Trigger",
-    "",
-    "`$vet`",
-    "",
-  ].join("\n");
-}
-
-function renderSecuritySpec({ finding, auditCount, cveCount }) {
-  return [
-    "# Security Spec",
-    "",
-    `Updated: ${new Date().toISOString()}`,
-    "",
-    "## Latest Finding",
-    "",
-    `- severity: ${finding.severity}`,
-    `- summary: ${finding.summary}`,
-    `- unresolved: ${finding.unresolved}`,
-    "",
-    "## Evidence Files",
-    "",
-    `- audits logged: ${auditCount}`,
-    `- cve entries logged: ${cveCount}`,
-    "",
-    "## Next Recommended Trigger",
-    "",
-    "`$vibe`",
-    "",
-  ].join("\n");
-}
-
-function renderExperienceSpec({ note, outcomeCount }) {
-  return [
-    "# Experience Spec",
-    "",
-    `Updated: ${new Date().toISOString()}`,
-    "",
-    "## Latest Outcome",
-    "",
-    `- area: ${note.area}`,
-    `- summary: ${note.summary}`,
-    "",
-    "## Evidence Files",
-    "",
-    `- outcomes logged: ${outcomeCount}`,
-    "",
-    "## Next Recommended Trigger",
-    "",
-    "`$build`",
-    "",
-  ].join("\n");
-}
-
-function renderImplementationPlan({ idea, blueprint }) {
-  return [
-    "# Implementation Plan",
-    "",
-    `Updated: ${new Date().toISOString()}`,
-    "",
-    "## Goal",
-    "",
-    idea,
-    "",
-    "## Planned Phases",
-    "",
-    "- Capture the approved architecture baseline",
-    "- Validate evidence through approved GitMCP sources",
-    "- Validate logic and state transitions",
-    "- Review security and experience gates",
-    "- Unlock bounded build execution",
-    "",
-    "## Architecture Anchor",
-    "",
-    blueprint.summary,
-    "",
-  ].join("\n");
-}
-
-function renderBuildPlan({ allowed, blockers, nextTriggers, suggestedBranches = [] }) {
-  const lines = [
-    "# Build Plan",
-    "",
-    `Updated: ${new Date().toISOString()}`,
-    "",
-    "## Gate State",
-    "",
-    allowed ? "READY" : "LOCKED",
-    "",
-    "## Blockers",
-    "",
-  ];
-
-  if (blockers.length === 0) {
-    lines.push("None.", "");
-  } else {
-    lines.push(...blockers.map((blocker) => `- ${blocker}`), "");
-  }
-
-  lines.push("## Next Allowed Triggers", "");
-  lines.push(
-    ...(nextTriggers.length === 0 ? ["- $build"] : nextTriggers.map((item) => `- ${item}`)),
-    "",
-  );
-
-  if (suggestedBranches.length > 0) {
-    lines.push(
-      "## Suggested Branches",
-      "",
-      ...suggestedBranches.map((branch) => `- ${branch}`),
-      "",
-    );
-  }
-
-  return lines.join("\n");
-}
-
-function renderRunbook() {
-  return [
-    "# Meta-Architect Runbook",
-    "",
-    "## Purpose",
-    "",
-    "This runbook defines the local helper-path workflow that supports the primary in-session skill flow.",
-    "",
-    "## Canonical Sequence",
-    "",
-    "1. `ma setup`",
-    '2. `ma idea "..."`',
-    "3. `ma run '$arch'`",
-    "4. `ma run '$sage'`",
-    "5. `ma run '$flow'`",
-    "6. `ma run '$vet'`",
-    "7. `ma run '$vibe'`",
-    "8. `ma status`",
-    "9. `ma run '$build'`",
-    "",
-    "## Runtime Artifacts",
-    "",
-    "- `.ma/context/project.md`",
-    "- `.ma/specs/architecture.md`",
-    "- `.ma/specs/evidence.md`",
-    "- `.ma/specs/logic.md`",
-    "- `.ma/specs/security.md`",
-    "- `.ma/specs/experience.md`",
-    "- `.ma/plans/implementation.md`",
-    "- `.ma/plans/build.md`",
-    "- `.ma/decisions.json`",
-    "- `.ma/release.json`",
-    "",
-    "## Guardrails",
-    "",
-    "- Do not edit gate status files manually.",
-    "- Treat GitHub release state and npm registry state as separate facts.",
-    "- Do not claim a publish channel succeeded without evidence from that channel.",
-    "",
-  ].join("\n");
-}
-
-async function writeArtifact(relativePath, content) {
-  const target = getRuntimeWritePath(...relativePath.split("/"));
-  await ensureDir(path.dirname(target));
-  await fs.writeFile(target, `${content.trimEnd()}\n`);
-}
-
-export async function seedRuntimeArtifacts() {
-  for (const dir of runtimeDirs) {
-    await ensureDir(getRuntimeWritePath(dir));
-  }
-
-  await writeFileIfMissing(
-    getRuntimeWritePath("context", "project.md"),
-    `${renderProjectContext({})}\n`,
-  );
-  await writeFileIfMissing(
-    getRuntimeWritePath("specs", "architecture.md"),
-    "# Architecture Spec\n\nNo architecture captured yet.\n",
-  );
-  await writeFileIfMissing(
-    getRuntimeWritePath("specs", "evidence.md"),
-    "# Evidence Spec\n\nNo evidence captured yet.\n",
-  );
-  await writeFileIfMissing(
-    getRuntimeWritePath("specs", "logic.md"),
-    "# Logic Spec\n\nNo logic review captured yet.\n",
-  );
-  await writeFileIfMissing(
-    getRuntimeWritePath("specs", "security.md"),
-    "# Security Spec\n\nNo security review captured yet.\n",
-  );
-  await writeFileIfMissing(
-    getRuntimeWritePath("specs", "experience.md"),
-    "# Experience Spec\n\nNo experience review captured yet.\n",
-  );
-  await writeFileIfMissing(
-    getRuntimeWritePath("plans", "implementation.md"),
-    "# Implementation Plan\n\nNo implementation plan captured yet.\n",
-  );
-  await writeFileIfMissing(
-    getRuntimeWritePath("plans", "build.md"),
-    "# Build Plan\n\nBuild is still locked.\n",
-  );
-  await writeFileIfMissing(getRuntimeWritePath("runbook.md"), `${renderRunbook()}\n`);
-}
-
-export async function writeProjectContext(idea) {
-  await writeArtifact("context/project.md", renderProjectContext({ idea }));
-}
-
-export async function writeArchitectureArtifacts({ idea, blueprint }) {
-  await writeArtifact("specs/architecture.md", renderArchitectureSpec({ idea, blueprint }));
-  await writeArtifact("plans/implementation.md", renderImplementationPlan({ idea, blueprint }));
-}
-
-export async function writeEvidenceSpec({ idea, sourceEntries, verified, blockers }) {
-  await writeArtifact(
-    "specs/evidence.md",
-    renderEvidenceSpec({ idea, sourceEntries, verified, blockers }),
-  );
-}
-
-export async function writeLogicSpec(logicMap) {
-  await writeArtifact("specs/logic.md", renderLogicSpec(logicMap));
-}
-
-export async function writeSecuritySpec({ finding, auditCount, cveCount }) {
-  await writeArtifact("specs/security.md", renderSecuritySpec({ finding, auditCount, cveCount }));
-}
-
-export async function writeExperienceSpec({ note, outcomeCount }) {
-  await writeArtifact("specs/experience.md", renderExperienceSpec({ note, outcomeCount }));
-}
-
-export async function writeBuildPlanArtifact({
-  allowed,
-  blockers,
-  nextTriggers,
-  suggestedBranches = [],
-}) {
-  await writeArtifact(
-    "plans/build.md",
-    renderBuildPlan({ allowed, blockers, nextTriggers, suggestedBranches }),
-  );
-}

package/src/skill-installer.js

@@ -1,198 +0,0 @@
-import fs from "node:fs/promises";
-import os from "node:os";
-import path from "node:path";
-import { packageRoot } from "./paths.js";
-
-function resolveCodexHome() {
-  return process.env.CODEX_HOME ?? path.join(os.homedir(), ".codex");
-}
-
-function resolveSkillInstallRoot() {
-  return path.join(resolveCodexHome(), "skills");
-}
-
-function resolveSupportBundleRoot() {
-  return path.join(resolveCodexHome(), "meta-architect-sdk");
-}
-
-async function copyDir(src, dest) {
-  await fs.mkdir(dest, { recursive: true });
-  const entries = await fs.readdir(src, { withFileTypes: true });
-  for (const entry of entries) {
-    const srcPath = path.join(src, entry.name);
-    const destPath = path.join(dest, entry.name);
-    if (entry.isDirectory()) {
-      await copyDir(srcPath, destPath);
-    } else {
-      await fs.copyFile(srcPath, destPath);
-    }
-  }
-}
-
-export function getSkillInstallRoot() {
-  return resolveSkillInstallRoot();
-}
-
-export function getSupportBundleRoot() {
-  return resolveSupportBundleRoot();
-}
-
-export async function loadSkillManifest() {
-  const manifestPath = path.join(packageRoot, "skills", "index.json");
-  const manifest = JSON.parse(await fs.readFile(manifestPath, "utf8"));
-  return manifest.skills ?? [];
-}
-
-export async function installSkills({ targetRoot = getSkillInstallRoot() } = {}) {
-  const skills = await loadSkillManifest();
-  await fs.mkdir(targetRoot, { recursive: true });
-
-  const installed = [];
-  for (const skill of skills) {
-    const src = path.join(packageRoot, skill.path);
-    const dest = path.join(targetRoot, path.basename(skill.path));
-    await fs.rm(dest, { recursive: true, force: true });
-    await copyDir(src, dest);
-    installed.push({ name: skill.name, dest });
-  }
-
-  return { targetRoot, installed };
-}
-
-async function copyPath(src, dest) {
-  const stat = await fs.stat(src);
-  if (stat.isDirectory()) {
-    await fs.rm(dest, { recursive: true, force: true });
-    await copyDir(src, dest);
-    return "directory";
-  }
-
-  await fs.mkdir(path.dirname(dest), { recursive: true });
-  await fs.copyFile(src, dest);
-  return "file";
-}
-
-export async function installSupportBundle({ targetRoot = getSupportBundleRoot() } = {}) {
-  const assets = [
-    {
-      name: "mcp",
-      src: path.join(packageRoot, "mcp"),
-      dest: path.join(targetRoot, "mcp"),
-    },
-    {
-      name: "sprint",
-      src: path.join(packageRoot, "sprint"),
-      dest: path.join(targetRoot, "sprint"),
-    },
-    {
-      name: "prompts",
-      src: path.join(packageRoot, ".codex", "prompts"),
-      dest: path.join(targetRoot, "prompts"),
-    },
-    {
-      name: "scripts",
-      src: path.join(packageRoot, "scripts"),
-      dest: path.join(targetRoot, "scripts"),
-    },
-    {
-      name: "plugin",
-      src: path.join(packageRoot, "plugins", "meta-architect"),
-      dest: path.join(targetRoot, "plugins", "meta-architect"),
-    },
-    {
-      name: "templates",
-      src: path.join(packageRoot, "templates"),
-      dest: path.join(targetRoot, "templates"),
-    },
-    {
-      name: "docs-readme",
-      src: path.join(packageRoot, "docs", "README.md"),
-      dest: path.join(targetRoot, "docs", "README.md"),
-    },
-  ];
-
-  await fs.mkdir(targetRoot, { recursive: true });
-  const installed = [];
-  for (const asset of assets) {
-    await copyPath(asset.src, asset.dest);
-    installed.push({ name: asset.name, dest: asset.dest });
-  }
-
-  const pkg = JSON.parse(await fs.readFile(path.join(packageRoot, "package.json"), "utf8"));
-  const manifest = {
-    packageName: pkg.name,
-    packageVersion: pkg.version,
-    installedAt: new Date().toISOString(),
-    root: targetRoot,
-    assets: installed,
-  };
-  await fs.writeFile(
-    path.join(targetRoot, "asset-manifest.json"),
-    `${JSON.stringify(manifest, null, 2)}\n`,
-  );
-
-  return { targetRoot, installed };
-}
-
-export async function areSkillsInstalled({ targetRoot = getSkillInstallRoot() } = {}) {
-  const skills = await loadSkillManifest();
-
-  for (const skill of skills) {
-    const skillDir = path.join(targetRoot, path.basename(skill.path));
-    try {
-      await fs.access(path.join(skillDir, "SKILL.md"));
-    } catch {
-      return false;
-    }
-  }
-
-  return true;
-}
-
-export async function isSupportBundleInstalled({ targetRoot = getSupportBundleRoot() } = {}) {
-  const requiredFiles = [
-    path.join(targetRoot, "asset-manifest.json"),
-    path.join(targetRoot, "mcp", "servers.json"),
-    path.join(targetRoot, "sprint", "07-release.md"),
-    path.join(targetRoot, "prompts", "onboarding.md"),
-    path.join(targetRoot, "scripts", "skills-install.js"),
-    path.join(targetRoot, "plugins", "meta-architect", ".codex-plugin", "plugin.json"),
-    path.join(targetRoot, "templates", "AGENTS.md"),
-  ];
-
-  for (const file of requiredFiles) {
-    try {
-      await fs.access(file);
-    } catch {
-      return false;
-    }
-  }
-
-  return true;
-}
-
-export async function ensureSkillsInstalled({ targetRoot = getSkillInstallRoot() } = {}) {
-  if (process.env.MA_SKIP_AUTO_INSTALL === "1") {
-    return { targetRoot, installed: [], skipped: true };
-  }
-
-  if (await areSkillsInstalled({ targetRoot })) {
-    return { targetRoot, installed: [], skipped: false };
-  }
-
-  const result = await installSkills({ targetRoot });
-  return { ...result, skipped: false };
-}
-
-export async function ensureSupportBundleInstalled({ targetRoot = getSupportBundleRoot() } = {}) {
-  if (process.env.MA_SKIP_AUTO_INSTALL === "1") {
-    return { targetRoot, installed: [], skipped: true };
-  }
-
-  if (await isSupportBundleInstalled({ targetRoot })) {
-    return { targetRoot, installed: [], skipped: false };
-  }
-
-  const result = await installSupportBundle({ targetRoot });
-  return { ...result, skipped: false };
-}