@litfamily/litopencode 1.0.9 → 1.0.11

package/docs/reference-Ko-KR.md

@@ -253,6 +253,45 @@ npm uninstall -g @litfamily/litopencode
 - Public-source retrieval에는 SSRF 검사, redirect 검증, byte 제한, access verdict가
   있습니다. 가져온 본문은 명령이 아니라 데이터로 처리합니다.
 
+## Jev 스킬 힌트 (선택)
+
+`chat.message` hook이 TypeSafe의 판단 모델 Jev에게 사용자 턴에 맞는 runtime 스킬을 물을 수
+있습니다. `LITOPENCODE_JEV=1`과 `TYPESAFE_API_KEY`가 모두 프로세스 환경에 있어야 켜지고, 그렇지
+않으면 네트워크 요청을 하지 않습니다. 키는 환경 변수에서만 읽고 `Authorization` header로만
+보내며, 파일·로그·화면에 남기지 않습니다.
+
+- **대상 턴.** 루트 세션만 해당합니다. 슬래시 명령(`command.execute.before`가 펼친 명령 포함),
+  lit 경로가 이미 처리한 턴, 첨부 파일 본문 같은 synthetic part, 공백을 뺀 4자 미만의
+  프롬프트는 건너뜁니다. OpenCode는 `command.execute.before`가 받은 parts 배열이 아니라 새 배열을
+  `chat.message`에 넘기므로, 명령은 세션에 표시를 남기고 그 세션의 다음 `chat.message`가 이
+  표시를 소비합니다.
+- **요청.** 조건에 맞는 턴마다 `POST https://api.typesafe.ai/v1/systemone`을 한 번 보내고
+  다시 시도하지 않으며 리다이렉트도 따르지 않습니다(`redirect: "error"`). 본문에는 `model`,
+  `state`, `questions`만 들어갑니다. `state`는 프롬프트 앞 8,000자에서 홈 경로를 `~`로, 이메일을
+  `[email]`로, 토큰 형태의 문자열(`password=`/`token=`/`secret=` 형식의 대입과 키 자체 포함)을
+  `[secret]`으로 바꾼 뒤 2,000자에서 자릅니다. 잘린 자리에 토큰 문자 8개 이상이 남으면 그것도
+  `[secret]`이 됩니다. 호스트 이름이나 고객 이름처럼 토큰 형태가 아닌 내용은 그대로 전송됩니다.
+  후보 목록은 runtime 스킬과 `none`입니다.
+- **붙는 문장.** 힌트와 실패 안내는 `synthetic` text part로 붙습니다. OpenCode는 이 part를
+  모델에 그대로 보내지만, 사용자가 쓴 글로 표시하거나 복사하지 않습니다.
+- **응답.** HTTP 200, 올바른 JSON, 후보 id와 정확히 같은 `answers.which.choice`, 기준 이상의
+  `answers.which.confidence`를 모두 만족할 때만 힌트를 붙입니다. 붙는 문장은 LitOpenCode가 정한
+  고정 문장이며 응답 본문을 옮기지 않습니다.
+- **실패 시.** 시간 초과, 네트워크 오류, 200이 아닌 상태, 잘못된 응답, 호출 한도 도달 때는 힌트
+  없이 평소대로 진행합니다. 세션의 첫 실패에만 짧은 안내 한 줄이 붙습니다.
+- **상태.** `litopencode doctor`의 `jevSkillHint` 값이 `Jev skill hint: off`, `on`,
+  `flag on but TYPESAFE_API_KEY missing` 가운데 하나로 나옵니다.
+
+| 변수 | 기본값 | 효과 |
+| --- | --- | --- |
+| `LITOPENCODE_JEV` | 없음 | `1`이면 키가 있을 때 힌트를 켭니다. |
+| `TYPESAFE_API_KEY` | 없음 | 본인의 TypeSafe 키입니다. 요금은 입력 토큰 100만 개당 약 0.04달러입니다. |
+| `LITOPENCODE_JEV_MODEL` | `jev-1.13.0` | 요청에 담는 모델 이름입니다. |
+| `LITOPENCODE_JEV_TIMEOUT_MS` | `1500` | 제한 시간(ms)이며 최대 `3000`입니다. |
+| `LITOPENCODE_JEV_MAX_CALLS` | `200` | 세션당 요청 수 한도입니다. |
+| `LITOPENCODE_JEV_MIN_CONFIDENCE` | `0.35` | 힌트를 붙이는 최소 확신도입니다. |
+| `LITOPENCODE_JEV_TRACE` | 없음 | `1`이면 요청마다 `.litopencode/logs/jev-skill-hint.jsonl`에 시각, 프롬프트 SHA-256, 고른 id, 확신도, 지연 시간, HTTP 상태, 실패 사유를 한 줄씩 남깁니다. 프롬프트 본문, 키, 응답 본문은 남기지 않습니다. |
+
 ## 패키지 경로
 
 - 패키지와 plugin id: `litopencode`

package/docs/reference.md

@@ -364,6 +364,49 @@ when discarding that project's ledger and receipts is intentional.
   Metadata-only overflow emits a bounded digest/omission rule fragment.
 - session-scoped rule delivery deduplicates matching content and stays bounded after compaction.
 
+## Jev skill hint (optional)
+
+The `chat.message` hook can ask Jev, TypeSafe's hosted typed-decision model, which runtime skill
+fits a user turn. It is off unless `LITOPENCODE_JEV=1` and `TYPESAFE_API_KEY` are both set in the
+process environment; otherwise it makes no network call. The key is read from the environment
+only. It is sent only in the `Authorization` header and is never written, logged or shown.
+
+- **Eligible turns.** Root sessions only. Slash commands (including every command expanded by
+  `command.execute.before`), turns a deterministic lit route already claimed, synthetic parts
+  such as attached file text, and prompts under four non-space characters are skipped. OpenCode
+  hands `chat.message` a new parts array rather than the one `command.execute.before` saw, so a
+  command marks its session instead, and that session's next `chat.message` consumes the mark.
+- **Request.** One `POST https://api.typesafe.ai/v1/systemone` per eligible turn, no retry and no
+  redirects (`redirect: "error"`). The body holds only `model`, `state` and `questions`. `state`
+  is built from the first 8,000 characters of the user's prompt text: home paths become `~`,
+  e-mail addresses `[email]`, and token-shaped strings (provider key prefixes, JWTs, PEM blocks,
+  `password=`/`token=`/`secret=`-style assignments, runs of 32 or more hex or base64
+  characters, and the key itself) `[secret]`. Only then is it cut to 2,000 characters, and a
+  run of eight or more token characters left at the cut also becomes `[secret]`. Anything
+  without a token shape, such as a hostname or a customer name, is sent as written. The catalog
+  is the Runtime Skills list above, each with its summary cut to 300 characters, plus `none`.
+- **Added text.** The hint or the fallback note is a `synthetic` text part: OpenCode still sends
+  it to the model, but does not show or copy it as the user's own words.
+- **Answer.** A hint is added only for HTTP 200, parseable JSON, an `answers.which.choice` that is
+  exactly a catalog id, and an `answers.which.confidence` at or above the threshold. The added text is
+  LitOpenCode's own fixed sentence with that id; no response text is copied into the turn.
+- **Fallback.** On a timeout, network error, non-200 status, invalid answer or reached cap, the
+  turn continues as it would without the hint. The first failure in a session adds one short
+  `LitOpenCode skill hint unavailable (<reason>); continuing normally.` line; later failures are
+  silent.
+- **Status.** `litopencode doctor` reports `jevSkillHint` as `Jev skill hint: off`, `on`, or
+  `flag on but TYPESAFE_API_KEY missing`.
+
+| Variable | Default | Effect |
+| --- | --- | --- |
+| `LITOPENCODE_JEV` | unset | `1` turns the hint on when the key is also set. |
+| `TYPESAFE_API_KEY` | unset | Your own TypeSafe key. TypeSafe bills about $0.04 per million input tokens. |
+| `LITOPENCODE_JEV_MODEL` | `jev-1.13.0` | Model name sent with each request. |
+| `LITOPENCODE_JEV_TIMEOUT_MS` | `1500` | Hard timeout in milliseconds, capped at `3000`. |
+| `LITOPENCODE_JEV_MAX_CALLS` | `200` | Requests allowed per session. |
+| `LITOPENCODE_JEV_MIN_CONFIDENCE` | `0.35` | Lowest confidence that produces a hint. |
+| `LITOPENCODE_JEV_TRACE` | unset | `1` appends one record per request to `.litopencode/logs/jev-skill-hint.jsonl`: time, prompt SHA-256, chosen id, confidence, latency, HTTP status and fallback reason. It holds no prompt text, key or response body. |
+
 ## Package surface
 
 - Package and plugin id: `litopencode`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@litfamily/litopencode",
-  "version": "1.0.9",
+  "version": "1.0.11",
   "description": "LitOpenCode OpenCode plugin bootstrap package.",
   "license": "MIT",
   "repository": {
@@ -28,10 +28,12 @@
     "build": "node tools/run-build.mjs",
     "check:pack-payload": "npm run build && npm pack --dry-run --json --ignore-scripts | node tools/check-pack-payload.mjs --stdin",
     "check:version": "node tools/check-version-lockstep.mjs",
+    "check:npm-readme": "node tools/readme-for-npm.mjs check",
     "check:managed-skill-manifest": "node tools/gen-managed-skill-manifest.mjs --check",
     "gen:managed-skill-manifest": "node tools/gen-managed-skill-manifest.mjs",
     "prepublishOnly": "node tools/prepublish-test-gate.mjs",
-    "prepack": "npm run build",
+    "prepack": "npm run build && node tools/readme-for-npm.mjs apply",
+    "postpack": "node tools/readme-for-npm.mjs restore",
     "pretest": "npm run build",
     "qa:behavior-replacement": "node tools/run-behavior-replacement-probes.mjs",
     "qa:installed-resource-tamper": "node tools/run-installed-resource-tamper-probe.mjs",

package/skills/lit-typographic-motion/package-lock.json

@@ -10,7 +10,7 @@
       "dependencies": {
         "opentype.js": "1.3.4",
         "playwright-core": "1.55.1",
-        "ws": "8.18.3"
+        "ws": "8.22.0"
       }
     },
     "node_modules/opentype.js": {
@@ -54,9 +54,9 @@
       "license": "MIT"
     },
     "node_modules/ws": {
-      "version": "8.18.3",
-      "resolved": "https://registry.npmjs.org/ws/-/ws-8.18.3.tgz",
-      "integrity": "sha512-PEIGCY5tSlUt50cqyMXfCzX+oOPqN0vuGqWzbcJ2xvnkzkq46oOpz7dQaTDBdfICb4N14+GARUDw2XV2N4tvzg==",
+      "version": "8.22.0",
+      "resolved": "https://registry.npmjs.org/ws/-/ws-8.22.0.tgz",
+      "integrity": "sha512-Ydggc987+RO0AnWtZ/7Wq9FtNvcrL1b/RO0ud9mWjUPgDrsAAwQSF51sm2hm1XofbU/4jkpGEsLFsZZxU+1DOg==",
       "license": "MIT",
       "engines": {
         "node": ">=10.0.0"

package/skills/lit-typographic-motion/package.json

@@ -6,6 +6,6 @@
   "dependencies": {
     "opentype.js": "1.3.4",
     "playwright-core": "1.55.1",
-    "ws": "8.18.3"
+    "ws": "8.22.0"
   }
 }

package/skills/managed-skill-manifest.json

@@ -3273,11 +3273,11 @@
         },
         {
           "path": "package-lock.json",
-          "sha256": "20c343e515fe08f7e4b0cf07a5ba0b91462d0f22b4ff3531448206ac24a475f1"
+          "sha256": "141539ca253c3cf4f81988db6f69aaf78574d0c8ca9e9d7e45f56af8f2e96cac"
         },
         {
           "path": "package.json",
-          "sha256": "e75e13ba0060e99b21e8e8c945710ecf3a65e44f851f3ebde54ab7f562c96400"
+          "sha256": "5962e5607dba2b2d8e08fbf51e982e8517ee26a84c43ac838934e8394f3551cd"
         },
         {
           "path": "probe.mjs",

package/tools/check-pack-payload.mjs

@@ -13,6 +13,9 @@ const FORBIDDEN_PATH_RULES = [
   { label: "repository cover vector", pattern: /^docs\/assets\/cover\.svg$/u },
   { label: "unapproved README presentation asset", pattern: /^docs\/assets\/readme\/(?!(?:ascii-readme|badge-version|badge-license|lucide-book-open|lucide-play|lucide-shield-check)\.svg$|litopencode-wordmark\.svg$|litopencode-clay-icon\.png$|(?:litfamily-machines|poster)\.png$|ignition-film\.mp4$|ignition-readme\.gif$|(?:Lucide-LICENSE|JetBrainsMono-OFL)\.txt$)/u },
   { label: "maintainer release checklist", pattern: /^docs\/release-checklist\.md$/u },
+  { label: "npm README source (packed as README.md / README-Ko-KR.md)", pattern: /^README-npm(?:-Ko-KR)?\.md$/u },
+  { label: "GitHub README backup from the npm README swap", pattern: /^\.readme-npm-backup(?:\/|$)/u },
+  { label: "npm README swap script", pattern: /^tools\/readme-for-npm\.mjs$/u },
   { label: "internal recon/spec document", pattern: /^docs\/(?:recon|spec)(\/|$)/u },
   { label: "implementation plan", pattern: /(^|\/)plans(\/|$)/u },
   { label: ".litcodex runtime state", pattern: /(^|\/)\.litcodex(\/|$)/u },
@@ -70,18 +73,33 @@ const REQUIRED_README_PATHS = [
   "docs/assets/readme/poster.png"
 ];
 
-// Every image the bilingual READMEs load from the package CDN must ship in the tarball.
+// Every image the READMEs show must ship: the npm pages load pinned package-CDN copies, and the
+// GitHub pages load the same files by relative path. Inside a packed artifact the npm sources
+// are absent and README.md / README-Ko-KR.md already hold the npm pages.
 async function readmeImagePaths() {
   const { version } = JSON.parse(await fs.readFile("package.json", "utf8"));
   const prefix = `https://cdn.jsdelivr.net/npm/@litfamily/litopencode@${version}/`;
   const paths = new Set();
-  for (const file of ["README.md", "README-Ko-KR.md"]) {
+  const sources = [];
+  for (const [npmSource, target] of [["README-npm.md", "README.md"], ["README-npm-Ko-KR.md", "README-Ko-KR.md"]]) {
+    sources.push(target);
+    try {
+      await fs.access(npmSource);
+      sources.push(npmSource);
+    } catch {
+      // Packed artifact: the target already is the npm page.
+    }
+  }
+  for (const file of sources) {
     const text = await fs.readFile(file, "utf8");
     const targets = [
       ...[...text.matchAll(/!\[[^\]]*\]\(([^)\s]+)\)/gu)].map((match) => match[1]),
       ...[...text.matchAll(/\b(?:src|srcset)="([^"\s]+)"/gu)].map((match) => match[1])
     ];
-    for (const target of targets) if (target.startsWith(prefix)) paths.add(target.slice(prefix.length));
+    for (const target of targets) {
+      if (target.startsWith(prefix)) paths.add(target.slice(prefix.length));
+      else if (target.startsWith("./")) paths.add(target.slice(2));
+    }
   }
   return [...paths];
 }

package/tools/version-manifests.json

@@ -11,14 +11,26 @@
     {
       "path": "README-Ko-KR.md",
       "kind": "pinned",
-      "occurrences": 101,
-      "why": "The bilingual landing pages pin artwork and package links to the current package version."
+      "occurrences": 2,
+      "why": "The GitHub landing pages load assets by relative path; the release badge alt text and the checkout-version note repeat the package version."
+    },
+    {
+      "path": "README-npm-Ko-KR.md",
+      "kind": "pinned",
+      "occurrences": 18,
+      "why": "The npm package pages pin artwork and package links to the current package version; tools/readme-for-npm.mjs copies them over README.md and README-Ko-KR.md at pack time."
+    },
+    {
+      "path": "README-npm.md",
+      "kind": "pinned",
+      "occurrences": 18,
+      "why": "The npm package pages pin artwork and package links to the current package version; tools/readme-for-npm.mjs copies them over README.md and README-Ko-KR.md at pack time."
     },
     {
       "path": "README.md",
       "kind": "pinned",
-      "occurrences": 100,
-      "why": "The bilingual landing pages pin artwork and package links to the current package version."
+      "occurrences": 2,
+      "why": "The GitHub landing pages load assets by relative path; the release badge alt text and the checkout-version note repeat the package version."
     },
     {
       "path": "docs/assets/readme/badge-version.svg",
@@ -45,10 +57,10 @@
       "why": "This package manifest is the source of truth used by the lockstep guard."
     },
     {
-      "path": "skills/readme-studio/templates/remotion/package-lock.json",
+      "path": "skills/lit-pptx/package-lock.json",
       "kind": "derived",
       "occurrences": 2,
-      "why": "The Remotion template lockfile has 2 occurrence(s) of an unrelated dependency version matching this package release by coincidence; it is not release metadata, and the count follows the current package version."
+      "why": "The lit-pptx runtime lockfile has 2 occurrence(s) of an unrelated dependency version matching this package release by coincidence; it is not release metadata, and the count follows the current package version."
     },
     {
       "path": "test/docs.test.mjs",