@oriro/orirocli 0.1.9 → 0.1.11

package/skills/craft/vercel-optimize/lib/gates/cwv-poor.mjs

@@ -1,95 +1,95 @@
-// Thresholds are Google's "Poor" band (https://web.dev/articles/vitals): LCP p75 > 2500ms, INP > 200ms, CLS > 0.1.
-// When Speed Insights isn't wired up the metrics come back empty and the gate is a no-op.
-import { withRouteShapeWarnings } from "../route-normalize.mjs";
-
-export const metadata = {
-  id: "cwv_poor",
-  threshold: "LCP p75>2500 OR INP p75>200 OR CLS p75>0.1, AND speed_insights count > 50",
-  billingDimension: "speed-insights",
-  scope: "route",
-  sourceCitation: "https://web.dev/articles/vitals",
-  description:
-    'Routes where Core Web Vitals fall into Google\'s "Poor" band on real-user traffic. LCP > 2500ms, INP > 200ms, or CLS > 0.1 each hurt SEO and conversion. Surfaces one candidate per (route, metric) pair to keep recommendations focused.',
-};
-
-// Below this floor p75 is too noisy to act on.
-const MIN_PER_ROUTE_SAMPLES = 50;
-
-export function gate(signals) {
-  const totalSamples = sumRows(signals.metrics?.cwvCount?.rows);
-  if (totalSamples === 0) return [];
-
-  const countByRoute = byRoute(signals.metrics?.cwvCountByRoute?.rows);
-  const lcpBy = byRoute(signals.metrics?.cwvLcpByRoute?.rows);
-  const inpBy = byRoute(signals.metrics?.cwvInpByRoute?.rows);
-  const clsBy = byRoute(signals.metrics?.cwvClsByRoute?.rows);
-
-  const routes = new Set([...lcpBy.keys(), ...inpBy.keys(), ...clsBy.keys()]);
-  const out = [];
-  for (const route of routes) {
-    const routeSamples = countByRoute.get(route) ?? 0;
-    if (routeSamples < MIN_PER_ROUTE_SAMPLES) continue;
-    const lcp = lcpBy.get(route);
-    const inp = inpBy.get(route);
-    const cls = clsBy.get(route);
-    const issues = [];
-    if (lcp != null && lcp > 2500)
-      issues.push({ metric: "LCP", value: Math.round(lcp), threshold: 2500, unit: "ms" });
-    if (inp != null && inp > 200)
-      issues.push({ metric: "INP", value: Math.round(inp), threshold: 200, unit: "ms" });
-    if (cls != null && cls > 0.1)
-      issues.push({ metric: "CLS", value: round2(cls), threshold: 0.1, unit: "" });
-    if (issues.length === 0) continue;
-
-    const summary = issues.map((i) => `${i.metric}=${i.value}${i.unit}`).join(",");
-    out.push(
-      withRouteShapeWarnings(
-        {
-          kind: metadata.id,
-          scope: "route",
-          route,
-          files: [],
-          priority: issues.reduce((s, i) => s + ratioOverThreshold(i), 0) * 10,
-          confidence: 0.82,
-          o11ySignal: summary,
-          reason: "real-user Core Web Vitals in poor band",
-          question: `On ${route}, ${summary}. Which client-side work (bundle weight, blocking scripts, layout shifts, hydration) is responsible, and which change would land first?`,
-          evidence: {
-            metric: "cwv",
-            route,
-            lcpMs: lcp != null ? Math.round(lcp) : null,
-            inpMs: inp != null ? Math.round(inp) : null,
-            cls: cls != null ? round2(cls) : null,
-            issues,
-            totalSpeedInsightsSamples: totalSamples,
-            routeSpeedInsightsSamples: routeSamples,
-          },
-        },
-        signals,
-      ),
-    );
-  }
-  return out;
-}
-
-function byRoute(rows) {
-  const m = new Map();
-  for (const r of rows ?? []) {
-    if (!r.route || r.value == null) continue;
-    m.set(r.route, r.value);
-  }
-  return m;
-}
-
-function sumRows(rows) {
-  if (!Array.isArray(rows)) return 0;
-  return rows.reduce((s, r) => s + (r.value ?? 0), 0);
-}
-
-function round2(n) {
-  return Math.round(n * 100) / 100;
-}
-
-function ratioOverThreshold(i) {
-  return i.value / (i.threshold || 1);
-}
+// Thresholds are Google's "Poor" band (https://web.dev/articles/vitals): LCP p75 > 2500ms, INP > 200ms, CLS > 0.1.
+// When Speed Insights isn't wired up the metrics come back empty and the gate is a no-op.
+import { withRouteShapeWarnings } from "../route-normalize.mjs";
+
+export const metadata = {
+  id: "cwv_poor",
+  threshold: "LCP p75>2500 OR INP p75>200 OR CLS p75>0.1, AND speed_insights count > 50",
+  billingDimension: "speed-insights",
+  scope: "route",
+  sourceCitation: "https://web.dev/articles/vitals",
+  description:
+    'Routes where Core Web Vitals fall into Google\'s "Poor" band on real-user traffic. LCP > 2500ms, INP > 200ms, or CLS > 0.1 each hurt SEO and conversion. Surfaces one candidate per (route, metric) pair to keep recommendations focused.',
+};
+
+// Below this floor p75 is too noisy to act on.
+const MIN_PER_ROUTE_SAMPLES = 50;
+
+export function gate(signals) {
+  const totalSamples = sumRows(signals.metrics?.cwvCount?.rows);
+  if (totalSamples === 0) return [];
+
+  const countByRoute = byRoute(signals.metrics?.cwvCountByRoute?.rows);
+  const lcpBy = byRoute(signals.metrics?.cwvLcpByRoute?.rows);
+  const inpBy = byRoute(signals.metrics?.cwvInpByRoute?.rows);
+  const clsBy = byRoute(signals.metrics?.cwvClsByRoute?.rows);
+
+  const routes = new Set([...lcpBy.keys(), ...inpBy.keys(), ...clsBy.keys()]);
+  const out = [];
+  for (const route of routes) {
+    const routeSamples = countByRoute.get(route) ?? 0;
+    if (routeSamples < MIN_PER_ROUTE_SAMPLES) continue;
+    const lcp = lcpBy.get(route);
+    const inp = inpBy.get(route);
+    const cls = clsBy.get(route);
+    const issues = [];
+    if (lcp != null && lcp > 2500)
+      issues.push({ metric: "LCP", value: Math.round(lcp), threshold: 2500, unit: "ms" });
+    if (inp != null && inp > 200)
+      issues.push({ metric: "INP", value: Math.round(inp), threshold: 200, unit: "ms" });
+    if (cls != null && cls > 0.1)
+      issues.push({ metric: "CLS", value: round2(cls), threshold: 0.1, unit: "" });
+    if (issues.length === 0) continue;
+
+    const summary = issues.map((i) => `${i.metric}=${i.value}${i.unit}`).join(",");
+    out.push(
+      withRouteShapeWarnings(
+        {
+          kind: metadata.id,
+          scope: "route",
+          route,
+          files: [],
+          priority: issues.reduce((s, i) => s + ratioOverThreshold(i), 0) * 10,
+          confidence: 0.82,
+          o11ySignal: summary,
+          reason: "real-user Core Web Vitals in poor band",
+          question: `On ${route}, ${summary}. Which client-side work (bundle weight, blocking scripts, layout shifts, hydration) is responsible, and which change would land first?`,
+          evidence: {
+            metric: "cwv",
+            route,
+            lcpMs: lcp != null ? Math.round(lcp) : null,
+            inpMs: inp != null ? Math.round(inp) : null,
+            cls: cls != null ? round2(cls) : null,
+            issues,
+            totalSpeedInsightsSamples: totalSamples,
+            routeSpeedInsightsSamples: routeSamples,
+          },
+        },
+        signals,
+      ),
+    );
+  }
+  return out;
+}
+
+function byRoute(rows) {
+  const m = new Map();
+  for (const r of rows ?? []) {
+    if (!r.route || r.value == null) continue;
+    m.set(r.route, r.value);
+  }
+  return m;
+}
+
+function sumRows(rows) {
+  if (!Array.isArray(rows)) return 0;
+  return rows.reduce((s, r) => s + (r.value ?? 0), 0);
+}
+
+function round2(n) {
+  return Math.round(n * 100) / 100;
+}
+
+function ratioOverThreshold(i) {
+  return i.value / (i.threshold || 1);
+}

package/skills/craft/vercel-optimize/lib/gates/external-api-slow.mjs

@@ -1,60 +1,60 @@
-// Volume floor pairs p75 with call_count so a single 5s cron/day doesn't fire the gate.
-const MIN_CALL_COUNT = 500;
-
-export const metadata = {
-  id: "external_api_slow",
-  threshold: `p75Ms > 2000 AND callCount >= ${MIN_CALL_COUNT}`,
-  billingDimension: "function-duration",
-  scope: "route",
-  sourceCitation: "vercel-optimize gate threshold",
-  description:
-    "External API hostnames with p75 latency above 2 seconds AND at least 500 calls in the window. External API latency is a primary driver of function duration cost when the upstream is on a hot path; a single slow stale call isn't worth recommending against.",
-};
-
-export function gate(signals) {
-  const apis = extractExternalApis(signals);
-  const calls = extractCallCounts(signals);
-  return apis
-    .map((a) => ({ ...a, callCount: calls.get(a.hostname) ?? 0 }))
-    .filter((a) => a.p75Ms > 2000 && a.callCount >= MIN_CALL_COUNT)
-    .map((a) => ({
-      kind: metadata.id,
-      scope: "route",
-      route: null,
-      files: [],
-      hostname: a.hostname,
-      // Weight by latency × call volume so 100k-call/2.1s outranks 1k-call/8s.
-      priority: Math.round((a.p75Ms * a.callCount) / 1000),
-      confidence: 0.88,
-      o11ySignal: `host=${a.hostname},p75=${a.p75Ms}ms,calls=${a.callCount}`,
-      reason: "slow external dependency on hot path",
-      question: `Which routes call ${a.hostname} (p75=${a.p75Ms}ms across ${a.callCount} calls), and can the call be parallelized, cached, or moved off the critical path?`,
-      evidence: {
-        metric: "externalApiP75",
-        hostname: a.hostname,
-        p75Ms: a.p75Ms,
-        callCount: a.callCount,
-      },
-    }));
-}
-
-function extractExternalApis(signals) {
-  const m = signals.metrics?.externalApiP75;
-  if (!m?.ok && !Array.isArray(m?.rows)) return [];
-  return (m?.rows ?? [])
-    .map((r) => ({
-      hostname: r.origin_hostname,
-      p75Ms: Math.round(r.value ?? 0),
-    }))
-    .filter((a) => a.hostname);
-}
-
-function extractCallCounts(signals) {
-  const m = signals.metrics?.externalApiCount;
-  const out = new Map();
-  if (!m) return out;
-  for (const r of m.rows ?? []) {
-    if (r?.origin_hostname) out.set(r.origin_hostname, r.value ?? 0);
-  }
-  return out;
-}
+// Volume floor pairs p75 with call_count so a single 5s cron/day doesn't fire the gate.
+const MIN_CALL_COUNT = 500;
+
+export const metadata = {
+  id: "external_api_slow",
+  threshold: `p75Ms > 2000 AND callCount >= ${MIN_CALL_COUNT}`,
+  billingDimension: "function-duration",
+  scope: "route",
+  sourceCitation: "vercel-optimize gate threshold",
+  description:
+    "External API hostnames with p75 latency above 2 seconds AND at least 500 calls in the window. External API latency is a primary driver of function duration cost when the upstream is on a hot path; a single slow stale call isn't worth recommending against.",
+};
+
+export function gate(signals) {
+  const apis = extractExternalApis(signals);
+  const calls = extractCallCounts(signals);
+  return apis
+    .map((a) => ({ ...a, callCount: calls.get(a.hostname) ?? 0 }))
+    .filter((a) => a.p75Ms > 2000 && a.callCount >= MIN_CALL_COUNT)
+    .map((a) => ({
+      kind: metadata.id,
+      scope: "route",
+      route: null,
+      files: [],
+      hostname: a.hostname,
+      // Weight by latency × call volume so 100k-call/2.1s outranks 1k-call/8s.
+      priority: Math.round((a.p75Ms * a.callCount) / 1000),
+      confidence: 0.88,
+      o11ySignal: `host=${a.hostname},p75=${a.p75Ms}ms,calls=${a.callCount}`,
+      reason: "slow external dependency on hot path",
+      question: `Which routes call ${a.hostname} (p75=${a.p75Ms}ms across ${a.callCount} calls), and can the call be parallelized, cached, or moved off the critical path?`,
+      evidence: {
+        metric: "externalApiP75",
+        hostname: a.hostname,
+        p75Ms: a.p75Ms,
+        callCount: a.callCount,
+      },
+    }));
+}
+
+function extractExternalApis(signals) {
+  const m = signals.metrics?.externalApiP75;
+  if (!m?.ok && !Array.isArray(m?.rows)) return [];
+  return (m?.rows ?? [])
+    .map((r) => ({
+      hostname: r.origin_hostname,
+      p75Ms: Math.round(r.value ?? 0),
+    }))
+    .filter((a) => a.hostname);
+}
+
+function extractCallCounts(signals) {
+  const m = signals.metrics?.externalApiCount;
+  const out = new Map();
+  if (!m) return out;
+  for (const r of m.rows ?? []) {
+    if (r?.origin_hostname) out.set(r.origin_hostname, r.value ?? 0);
+  }
+  return out;
+}

package/skills/craft/vercel-optimize/lib/gates/hard-gates.mjs

@@ -1,70 +1,70 @@
-import { canonicalizeRoute } from "../route-normalize.mjs";
-
-export const FLAGS_ENDPOINT = "/.well-known/vercel/flags";
-export const VERCEL_FLAGS_PACKAGES = [
-  "@vercel/flags",
-  "@vercel/flags/next",
-  "@vercel/flags/sveltekit",
-  "@vercel/flags/nuxt",
-];
-export const WORKFLOW_ENDPOINT_PREFIXES = ["/.well-known/workflow", "/api/.well-known/workflow"];
-
-export function applyHardGates(candidates, signals = {}) {
-  const allowed = [];
-  const gated = [];
-  for (const candidate of candidates) {
-    if (isFlagsEndpointCandidate(candidate)) {
-      gated.push({
-        ...candidate,
-        gatedReason: flagsEndpointReason(signals),
-      });
-      continue;
-    }
-    if (isWorkflowRuntimeEndpointCandidate(candidate)) {
-      gated.push({
-        ...candidate,
-        gatedReason: workflowEndpointReason(signals),
-      });
-      continue;
-    }
-    allowed.push(candidate);
-  }
-  return { allowed, gated };
-}
-
-export function isFlagsEndpointCandidate(candidate) {
-  if (!candidate || candidate.scope === "account") return false;
-  const route = normalizeRoute(candidate.route);
-  return route === FLAGS_ENDPOINT;
-}
-
-export function isWorkflowRuntimeEndpointCandidate(candidate) {
-  if (!candidate || candidate.scope === "account") return false;
-  const route = normalizeRoute(candidate.route);
-  if (!route) return false;
-  return WORKFLOW_ENDPOINT_PREFIXES.some(
-    (prefix) => route === prefix || route.startsWith(`${prefix}/`),
-  );
-}
-
-function normalizeRoute(route) {
-  if (typeof route !== "string") return null;
-  const normalized = canonicalizeRoute(route).replace(/\/+$/, "");
-  return normalized === "" ? "/" : normalized;
-}
-
-function flagsEndpointReason(signals) {
-  const packages = signals.stack?.vercelFlagsPackages;
-  if (Array.isArray(packages) && packages.length > 0) {
-    return `hardGated: ${FLAGS_ENDPOINT} is the Vercel Flags endpoint (${packages.join(", ")} detected), not an optimization target`;
-  }
-  return `hardGated: ${FLAGS_ENDPOINT} is the Vercel Flags endpoint, not an optimization target`;
-}
-
-function workflowEndpointReason(signals) {
-  const packages = signals.stack?.workflowPackages;
-  if (Array.isArray(packages) && packages.length > 0) {
-    return `hardGated: Vercel Workflow runtime endpoint (${packages.join(", ")} detected); long-running step/flow requests are expected orchestration, not an app-route optimization target`;
-  }
-  return "hardGated: Vercel Workflow runtime endpoint; long-running step/flow requests are expected orchestration, not an app-route optimization target";
-}
+import { canonicalizeRoute } from "../route-normalize.mjs";
+
+export const FLAGS_ENDPOINT = "/.well-known/vercel/flags";
+export const VERCEL_FLAGS_PACKAGES = [
+  "@vercel/flags",
+  "@vercel/flags/next",
+  "@vercel/flags/sveltekit",
+  "@vercel/flags/nuxt",
+];
+export const WORKFLOW_ENDPOINT_PREFIXES = ["/.well-known/workflow", "/api/.well-known/workflow"];
+
+export function applyHardGates(candidates, signals = {}) {
+  const allowed = [];
+  const gated = [];
+  for (const candidate of candidates) {
+    if (isFlagsEndpointCandidate(candidate)) {
+      gated.push({
+        ...candidate,
+        gatedReason: flagsEndpointReason(signals),
+      });
+      continue;
+    }
+    if (isWorkflowRuntimeEndpointCandidate(candidate)) {
+      gated.push({
+        ...candidate,
+        gatedReason: workflowEndpointReason(signals),
+      });
+      continue;
+    }
+    allowed.push(candidate);
+  }
+  return { allowed, gated };
+}
+
+export function isFlagsEndpointCandidate(candidate) {
+  if (!candidate || candidate.scope === "account") return false;
+  const route = normalizeRoute(candidate.route);
+  return route === FLAGS_ENDPOINT;
+}
+
+export function isWorkflowRuntimeEndpointCandidate(candidate) {
+  if (!candidate || candidate.scope === "account") return false;
+  const route = normalizeRoute(candidate.route);
+  if (!route) return false;
+  return WORKFLOW_ENDPOINT_PREFIXES.some(
+    (prefix) => route === prefix || route.startsWith(`${prefix}/`),
+  );
+}
+
+function normalizeRoute(route) {
+  if (typeof route !== "string") return null;
+  const normalized = canonicalizeRoute(route).replace(/\/+$/, "");
+  return normalized === "" ? "/" : normalized;
+}
+
+function flagsEndpointReason(signals) {
+  const packages = signals.stack?.vercelFlagsPackages;
+  if (Array.isArray(packages) && packages.length > 0) {
+    return `hardGated: ${FLAGS_ENDPOINT} is the Vercel Flags endpoint (${packages.join(", ")} detected), not an optimization target`;
+  }
+  return `hardGated: ${FLAGS_ENDPOINT} is the Vercel Flags endpoint, not an optimization target`;
+}
+
+function workflowEndpointReason(signals) {
+  const packages = signals.stack?.workflowPackages;
+  if (Array.isArray(packages) && packages.length > 0) {
+    return `hardGated: Vercel Workflow runtime endpoint (${packages.join(", ")} detected); long-running step/flow requests are expected orchestration, not an app-route optimization target`;
+  }
+  return "hardGated: Vercel Workflow runtime endpoint; long-running step/flow requests are expected orchestration, not an app-route optimization target";
+}

package/skills/craft/vercel-optimize/lib/gates/index.mjs

@@ -1,45 +1,45 @@
-import * as buildMinutesFanout from "./build-minutes-fanout.mjs";
-import * as coldStart from "./cold-start.mjs";
-import * as cwvPoor from "./cwv-poor.mjs";
-import * as externalApiSlow from "./external-api-slow.mjs";
-import * as isrOverrevalidation from "./isr-overrevalidation.mjs";
-import * as middlewareHeavy from "./middleware-heavy.mjs";
-import * as observabilityEventsAttribution from "./observability-events-attribution.mjs";
-import * as platformBotProtection from "./platform-bot-protection.mjs";
-import * as platformFluidCompute from "./platform-fluid-compute.mjs";
-import * as regionMisconfig from "./region-misconfig.mjs";
-import * as routeErrors from "./route-errors.mjs";
-import * as scannerDriven from "./scanner-driven.mjs";
-import * as slowRoute from "./slow-route.mjs";
-import * as uncachedRoute from "./uncached-route.mjs";
-import * as usageSpikeTriage from "./usage-spike-triage.mjs";
-
-// Intentionally NOT registered:
-//   - `oversized_memory`: Fluid Compute floor is 2GB; per-route memory right-sizing isn't a customer lever.
-//   - `deploy_regression`: overlaps Vercel Agent Investigations; `vercel inspect` 404s across teams. slow_route deep-dive already carries per-deployment p95 trend.
-export const gates = [
-  uncachedRoute,
-  slowRoute,
-  routeErrors,
-  coldStart,
-  isrOverrevalidation,
-  cwvPoor,
-  externalApiSlow,
-  scannerDriven,
-  // Account-scoped last so platform-scoped sort doesn't dilute code-scoped priority ordering during budget application.
-  platformFluidCompute,
-  platformBotProtection,
-  middlewareHeavy,
-  observabilityEventsAttribution,
-  usageSpikeTriage,
-  buildMinutesFanout,
-  regionMisconfig,
-];
-
-// Overridable via `--max-candidates N` or `VERCEL_OPTIMIZE_MAX_CANDIDATES` (accepts `all`).
-// `MAX_CODE_CANDIDATES` is a back-compat alias for tests importing the old name.
-export const DEFAULT_MAX_CODE_CANDIDATES = 6;
-export const MAX_CODE_CANDIDATES = DEFAULT_MAX_CODE_CANDIDATES;
-
-// Bump on any threshold change so report + iteration baselines can detect gate-logic drift.
-export const GATE_VERSION = "1.8.0";
+import * as buildMinutesFanout from "./build-minutes-fanout.mjs";
+import * as coldStart from "./cold-start.mjs";
+import * as cwvPoor from "./cwv-poor.mjs";
+import * as externalApiSlow from "./external-api-slow.mjs";
+import * as isrOverrevalidation from "./isr-overrevalidation.mjs";
+import * as middlewareHeavy from "./middleware-heavy.mjs";
+import * as observabilityEventsAttribution from "./observability-events-attribution.mjs";
+import * as platformBotProtection from "./platform-bot-protection.mjs";
+import * as platformFluidCompute from "./platform-fluid-compute.mjs";
+import * as regionMisconfig from "./region-misconfig.mjs";
+import * as routeErrors from "./route-errors.mjs";
+import * as scannerDriven from "./scanner-driven.mjs";
+import * as slowRoute from "./slow-route.mjs";
+import * as uncachedRoute from "./uncached-route.mjs";
+import * as usageSpikeTriage from "./usage-spike-triage.mjs";
+
+// Intentionally NOT registered:
+//   - `oversized_memory`: Fluid Compute floor is 2GB; per-route memory right-sizing isn't a customer lever.
+//   - `deploy_regression`: overlaps Vercel Agent Investigations; `vercel inspect` 404s across teams. slow_route deep-dive already carries per-deployment p95 trend.
+export const gates = [
+  uncachedRoute,
+  slowRoute,
+  routeErrors,
+  coldStart,
+  isrOverrevalidation,
+  cwvPoor,
+  externalApiSlow,
+  scannerDriven,
+  // Account-scoped last so platform-scoped sort doesn't dilute code-scoped priority ordering during budget application.
+  platformFluidCompute,
+  platformBotProtection,
+  middlewareHeavy,
+  observabilityEventsAttribution,
+  usageSpikeTriage,
+  buildMinutesFanout,
+  regionMisconfig,
+];
+
+// Overridable via `--max-candidates N` or `VERCEL_OPTIMIZE_MAX_CANDIDATES` (accepts `all`).
+// `MAX_CODE_CANDIDATES` is a back-compat alias for tests importing the old name.
+export const DEFAULT_MAX_CODE_CANDIDATES = 6;
+export const MAX_CODE_CANDIDATES = DEFAULT_MAX_CODE_CANDIDATES;
+
+// Bump on any threshold change so report + iteration baselines can detect gate-logic drift.
+export const GATE_VERSION = "1.8.0";