@orkestrel/scaffold 0.0.2 → 0.0.3

package/dist/host/manifest.json

@@ -1,137 +1,355 @@
-[
-	{
-		"storage": "claude/agents/builder.md",
-		"destination": ".claude/agents/builder.md",
-		"executable": false
-	},
-	{
-		"storage": "claude/agents/checker.md",
-		"destination": ".claude/agents/checker.md",
-		"executable": false
-	},
-	{
-		"storage": "claude/agents/composer.md",
-		"destination": ".claude/agents/composer.md",
-		"executable": false
-	},
-	{
-		"storage": "claude/agents/grok.md",
-		"destination": ".claude/agents/grok.md",
-		"executable": false
-	},
-	{
-		"storage": "claude/agents/orkestrel.md",
-		"destination": ".claude/agents/orkestrel.md",
-		"executable": false
-	},
-	{
-		"storage": "claude/agents/planner.md",
-		"destination": ".claude/agents/planner.md",
-		"executable": false
-	},
-	{
-		"storage": "claude/agents/researcher.md",
-		"destination": ".claude/agents/researcher.md",
-		"executable": false
-	},
-	{
-		"storage": "claude/agents/reviewer.md",
-		"destination": ".claude/agents/reviewer.md",
-		"executable": false
-	},
-	{
-		"storage": "claude/agents/scout.md",
-		"destination": ".claude/agents/scout.md",
-		"executable": false
-	},
-	{
-		"storage": "claude/agents/verifier.md",
-		"destination": ".claude/agents/verifier.md",
-		"executable": false
-	},
-	{
-		"storage": "claude/settings.json",
-		"destination": ".claude/settings.json",
-		"executable": false
-	},
-	{
-		"storage": "dotfiles/editorconfig",
-		"destination": ".editorconfig",
-		"executable": false
-	},
-	{
-		"storage": "dotfiles/gitattributes",
-		"destination": ".gitattributes",
-		"executable": false
-	},
-	{
-		"storage": "github/workflows/ci.yml",
-		"destination": ".github/workflows/ci.yml",
-		"executable": false
-	},
-	{
-		"storage": "dotfiles/gitignore",
-		"destination": ".gitignore",
-		"executable": false
-	},
-	{
-		"storage": "dotfiles/oxfmtrc.json",
-		"destination": ".oxfmtrc.json",
-		"executable": false
-	},
-	{
-		"storage": "dotfiles/oxlintignore",
-		"destination": ".oxlintignore",
-		"executable": false
-	},
-	{
-		"storage": "dotfiles/oxlintrc.json",
-		"destination": ".oxlintrc.json",
-		"executable": false
-	},
-	{
-		"storage": "dotfiles/prettierignore",
-		"destination": ".prettierignore",
-		"executable": false
-	},
-	{
-		"storage": "AGENTS.md",
-		"destination": "AGENTS.md",
-		"executable": false
-	},
-	{
-		"storage": "CLAUDE.md",
-		"destination": "CLAUDE.md",
-		"executable": false
-	},
-	{
-		"storage": "LICENSE",
-		"destination": "LICENSE",
-		"executable": false
-	},
-	{
-		"storage": "guides/src/guide.md",
-		"destination": "guides/src/guide.md",
-		"executable": false
-	},
-	{
-		"storage": "guides/src/scaffold.md",
-		"destination": "guides/src/scaffold.md",
-		"executable": false
-	},
-	{
-		"storage": "scripts/cursor.sh",
-		"destination": "scripts/cursor.sh",
-		"executable": true
-	},
-	{
-		"storage": "scripts/deps.sh",
-		"destination": "scripts/deps.sh",
-		"executable": true
-	},
-	{
-		"storage": "scripts/ollama.sh",
-		"destination": "scripts/ollama.sh",
-		"executable": true
-	}
-]
+{
+	"entries": [
+		{
+			"storage": "agents/skills/orkestrel-align-packages/SKILL.md",
+			"destination": ".agents/skills/orkestrel-align-packages/SKILL.md",
+			"executable": false
+		},
+		{
+			"storage": "agents/skills/orkestrel-align-packages/agents/openai.yaml",
+			"destination": ".agents/skills/orkestrel-align-packages/agents/openai.yaml",
+			"executable": false
+		},
+		{
+			"storage": "agents/skills/orkestrel-align-packages/references/fleet.md",
+			"destination": ".agents/skills/orkestrel-align-packages/references/fleet.md",
+			"executable": false
+		},
+		{
+			"storage": "agents/skills/orkestrel-align-packages/references/integration.md",
+			"destination": ".agents/skills/orkestrel-align-packages/references/integration.md",
+			"executable": false
+		},
+		{
+			"storage": "agents/skills/orkestrel-build-application/SKILL.md",
+			"destination": ".agents/skills/orkestrel-build-application/SKILL.md",
+			"executable": false
+		},
+		{
+			"storage": "agents/skills/orkestrel-build-application/agents/openai.yaml",
+			"destination": ".agents/skills/orkestrel-build-application/agents/openai.yaml",
+			"executable": false
+		},
+		{
+			"storage": "agents/skills/orkestrel-build-application/references/application.md",
+			"destination": ".agents/skills/orkestrel-build-application/references/application.md",
+			"executable": false
+		},
+		{
+			"storage": "agents/skills/orkestrel-harden-package/SKILL.md",
+			"destination": ".agents/skills/orkestrel-harden-package/SKILL.md",
+			"executable": false
+		},
+		{
+			"storage": "agents/skills/orkestrel-harden-package/agents/openai.yaml",
+			"destination": ".agents/skills/orkestrel-harden-package/agents/openai.yaml",
+			"executable": false
+		},
+		{
+			"storage": "agents/skills/orkestrel-harden-package/references/centralization.md",
+			"destination": ".agents/skills/orkestrel-harden-package/references/centralization.md",
+			"executable": false
+		},
+		{
+			"storage": "agents/skills/orkestrel-harden-package/references/contract.md",
+			"destination": ".agents/skills/orkestrel-harden-package/references/contract.md",
+			"executable": false
+		},
+		{
+			"storage": "agents/skills/orkestrel-harden-package/references/hardening.md",
+			"destination": ".agents/skills/orkestrel-harden-package/references/hardening.md",
+			"executable": false
+		},
+		{
+			"storage": "agents/skills/orkestrel-harden-package/references/research.md",
+			"destination": ".agents/skills/orkestrel-harden-package/references/research.md",
+			"executable": false
+		},
+		{
+			"storage": "claude/agents/application.md",
+			"destination": ".claude/agents/application.md",
+			"executable": false
+		},
+		{
+			"storage": "claude/agents/builder.md",
+			"destination": ".claude/agents/builder.md",
+			"executable": false
+		},
+		{
+			"storage": "claude/agents/checker.md",
+			"destination": ".claude/agents/checker.md",
+			"executable": false
+		},
+		{
+			"storage": "claude/agents/codex.md",
+			"destination": ".claude/agents/codex.md",
+			"executable": false
+		},
+		{
+			"storage": "claude/agents/grok.md",
+			"destination": ".claude/agents/grok.md",
+			"executable": false
+		},
+		{
+			"storage": "claude/agents/orkestrel.md",
+			"destination": ".claude/agents/orkestrel.md",
+			"executable": false
+		},
+		{
+			"storage": "claude/agents/planner.md",
+			"destination": ".claude/agents/planner.md",
+			"executable": false
+		},
+		{
+			"storage": "claude/agents/reviewer.md",
+			"destination": ".claude/agents/reviewer.md",
+			"executable": false
+		},
+		{
+			"storage": "claude/agents/verifier.md",
+			"destination": ".claude/agents/verifier.md",
+			"executable": false
+		},
+		{
+			"storage": "claude/rules/application.md",
+			"destination": ".claude/rules/application.md",
+			"executable": false
+		},
+		{
+			"storage": "claude/rules/architecture.md",
+			"destination": ".claude/rules/architecture.md",
+			"executable": false
+		},
+		{
+			"storage": "claude/rules/browser.md",
+			"destination": ".claude/rules/browser.md",
+			"executable": false
+		},
+		{
+			"storage": "claude/rules/documentation.md",
+			"destination": ".claude/rules/documentation.md",
+			"executable": false
+		},
+		{
+			"storage": "claude/rules/names.md",
+			"destination": ".claude/rules/names.md",
+			"executable": false
+		},
+		{
+			"storage": "claude/rules/patterns.md",
+			"destination": ".claude/rules/patterns.md",
+			"executable": false
+		},
+		{
+			"storage": "claude/rules/quality.md",
+			"destination": ".claude/rules/quality.md",
+			"executable": false
+		},
+		{
+			"storage": "claude/rules/styles.md",
+			"destination": ".claude/rules/styles.md",
+			"executable": false
+		},
+		{
+			"storage": "claude/rules/tests.md",
+			"destination": ".claude/rules/tests.md",
+			"executable": false
+		},
+		{
+			"storage": "claude/rules/typescript.md",
+			"destination": ".claude/rules/typescript.md",
+			"executable": false
+		},
+		{
+			"storage": "claude/rules/workspace.md",
+			"destination": ".claude/rules/workspace.md",
+			"executable": false
+		},
+		{
+			"storage": "claude/settings.json",
+			"destination": ".claude/settings.json",
+			"executable": false
+		},
+		{
+			"storage": "claude/skills/orkestrel-align-packages/SKILL.md",
+			"destination": ".claude/skills/orkestrel-align-packages/SKILL.md",
+			"executable": false
+		},
+		{
+			"storage": "claude/skills/orkestrel-build-application/SKILL.md",
+			"destination": ".claude/skills/orkestrel-build-application/SKILL.md",
+			"executable": false
+		},
+		{
+			"storage": "claude/skills/orkestrel-harden-package/SKILL.md",
+			"destination": ".claude/skills/orkestrel-harden-package/SKILL.md",
+			"executable": false
+		},
+		{
+			"storage": "codex/agents/analyst.toml",
+			"destination": ".codex/agents/analyst.toml",
+			"executable": false
+		},
+		{
+			"storage": "codex/agents/application.toml",
+			"destination": ".codex/agents/application.toml",
+			"executable": false
+		},
+		{
+			"storage": "codex/agents/builder.toml",
+			"destination": ".codex/agents/builder.toml",
+			"executable": false
+		},
+		{
+			"storage": "codex/agents/checker.toml",
+			"destination": ".codex/agents/checker.toml",
+			"executable": false
+		},
+		{
+			"storage": "codex/agents/grok.toml",
+			"destination": ".codex/agents/grok.toml",
+			"executable": false
+		},
+		{
+			"storage": "codex/agents/implementer.toml",
+			"destination": ".codex/agents/implementer.toml",
+			"executable": false
+		},
+		{
+			"storage": "codex/agents/orkestrel.toml",
+			"destination": ".codex/agents/orkestrel.toml",
+			"executable": false
+		},
+		{
+			"storage": "codex/agents/planner.toml",
+			"destination": ".codex/agents/planner.toml",
+			"executable": false
+		},
+		{
+			"storage": "codex/agents/reviewer.toml",
+			"destination": ".codex/agents/reviewer.toml",
+			"executable": false
+		},
+		{
+			"storage": "codex/agents/verifier.toml",
+			"destination": ".codex/agents/verifier.toml",
+			"executable": false
+		},
+		{
+			"storage": "codex/config.toml",
+			"destination": ".codex/config.toml",
+			"executable": false
+		},
+		{
+			"storage": "dotfiles/editorconfig",
+			"destination": ".editorconfig",
+			"executable": false
+		},
+		{
+			"storage": "dotfiles/gitattributes",
+			"destination": ".gitattributes",
+			"executable": false
+		},
+		{
+			"storage": "dotfiles/gitignore",
+			"destination": ".gitignore",
+			"executable": false
+		},
+		{
+			"storage": "dotfiles/oxfmtrc.json",
+			"destination": ".oxfmtrc.json",
+			"executable": false
+		},
+		{
+			"storage": "dotfiles/oxlintignore",
+			"destination": ".oxlintignore",
+			"executable": false
+		},
+		{
+			"storage": "dotfiles/oxlintrc.json",
+			"destination": ".oxlintrc.json",
+			"executable": false
+		},
+		{
+			"storage": "dotfiles/prettierignore",
+			"destination": ".prettierignore",
+			"executable": false
+		},
+		{
+			"storage": "AGENTS.md",
+			"destination": "AGENTS.md",
+			"executable": false
+		},
+		{
+			"storage": "CLAUDE.md",
+			"destination": "CLAUDE.md",
+			"executable": false
+		},
+		{
+			"storage": "LICENSE",
+			"destination": "LICENSE",
+			"executable": false
+		},
+		{
+			"storage": "guides/src/guide.md",
+			"destination": "guides/src/guide.md",
+			"executable": false
+		},
+		{
+			"storage": "guides/src/scaffold.md",
+			"destination": "guides/src/scaffold.md",
+			"executable": false
+		},
+		{
+			"storage": "scripts/codex.sh",
+			"destination": "scripts/codex.sh",
+			"executable": true
+		},
+		{
+			"storage": "scripts/cursor.sh",
+			"destination": "scripts/cursor.sh",
+			"executable": true
+		},
+		{
+			"storage": "scripts/deps.sh",
+			"destination": "scripts/deps.sh",
+			"executable": true
+		},
+		{
+			"storage": "scripts/ollama.sh",
+			"destination": "scripts/ollama.sh",
+			"executable": true
+		},
+		{
+			"storage": "tests/setupPolicy.ts",
+			"destination": "tests/setupPolicy.ts",
+			"executable": false
+		}
+	],
+	"roots": [
+		".agents",
+		".agents/skills",
+		".agents/skills/orkestrel-align-packages",
+		".agents/skills/orkestrel-align-packages/agents",
+		".agents/skills/orkestrel-align-packages/references",
+		".agents/skills/orkestrel-build-application",
+		".agents/skills/orkestrel-build-application/agents",
+		".agents/skills/orkestrel-build-application/references",
+		".agents/skills/orkestrel-harden-package",
+		".agents/skills/orkestrel-harden-package/agents",
+		".agents/skills/orkestrel-harden-package/references",
+		".claude",
+		".claude/agents",
+		".claude/rules",
+		".claude/skills",
+		".claude/skills/orkestrel-align-packages",
+		".claude/skills/orkestrel-build-application",
+		".claude/skills/orkestrel-harden-package",
+		".codex",
+		".codex/agents",
+		"guides",
+		"guides/src",
+		"scripts",
+		"tests"
+	]
+}

package/dist/host/scripts/codex.sh

@@ -0,0 +1,49 @@
+#!/bin/bash
+# SessionStart capability probe for the Codex bench. External command output
+# and route identifiers never cross the hook-to-context boundary.
+
+if [ "${CLAUDE_CODE_REMOTE:-}" != "true" ]; then
+  exit 0
+fi
+
+if ! command -v codex >/dev/null 2>&1; then
+  echo "codex.sh: bench unavailable."
+  exit 0
+fi
+
+analyst_model="${CODEX_ANALYST_MODEL:-gpt-5.6-sol}"
+analyst_effort="${CODEX_ANALYST_EFFORT:-high}"
+implementer_model="${CODEX_IMPLEMENTER_MODEL:-gpt-5.6-sol}"
+implementer_effort="${CODEX_IMPLEMENTER_EFFORT:-high}"
+
+valid_model() {
+  case "$1" in
+    ''|*[!A-Za-z0-9._-]*) return 1 ;;
+  esac
+  [ "${#1}" -le 128 ]
+}
+
+valid_effort() {
+  case "$1" in
+    low|medium|high|xhigh|max|ultra) return 0 ;;
+    *) return 1 ;;
+  esac
+}
+
+if codex login status >/dev/null 2>&1; then
+  auth="authentication ready"
+else
+  auth="authentication unavailable"
+fi
+
+if valid_model "$analyst_model" &&
+  valid_model "$implementer_model" &&
+  valid_effort "$analyst_effort" &&
+  valid_effort "$implementer_effort"; then
+  routes="routes configured"
+else
+  routes="routes invalid"
+fi
+
+echo "codex.sh: bench detected; ${auth}; ${routes}."
+exit 0

package/dist/host/scripts/cursor.sh

@@ -1,74 +1,60 @@
 #!/bin/bash
-# ============================================================================
-# scripts/cursor.sh — SessionStart hook: Cursor bench ONLY
-# ----------------------------------------------------------------------------
-# The Cursor CLI has no daemon to launch: `agent` is invoked on demand by the
-# composer/grok dispatchers. This hook SENSES the bench at session start and
-# announces the result into Claude's context (SessionStart stdout).
-#
-# AUTH SENSING — evidence-based, in order of authority:
-#   1. `agent status` exits 0 even when it prints "Not logged in" — its exit
-#      code proves nothing, and under CURSOR_API_KEY auth "Not logged in" is
-#      COSMETIC on headless hosts (status reflects interactive login only;
-#      key auth here is verified end-to-end and works regardless).
-#   2. The per-session functional signal is `agent models`: reachable + pins
-#      present on the account ⇒ the bench is usable. A live dispatch remains
-#      the final arbiter; only USER API keys work (admin/org keys fail at
-#      dispatch time).
-# NEVER prints CURSOR_API_KEY. Always exits 0 — problems are announcements,
-# not session blockers.
-# ============================================================================
+# SessionStart capability probe for the Cursor bench. External command output,
+# model identifiers, and credentials never cross the hook-to-context boundary.
 
 if [ "${CLAUDE_CODE_REMOTE:-}" != "true" ]; then
   exit 0
 fi
 
 if ! command -v agent >/dev/null 2>&1; then
-  echo "cursor.sh: bench dark — Cursor CLI not installed in this environment; route external-bench units to their Claude counterparts."
+  echo "cursor.sh: bench unavailable; use an in-session research route."
   exit 0
 fi
 
-# --- evidence gathering ------------------------------------------------------
-agent status >/tmp/cursor-status.log 2>&1 || true
-status_line="$(head -n 1 /tmp/cursor-status.log 2>/dev/null)"
+MODELS_LOG="$(mktemp /tmp/orkestrel-cursor-models.XXXXXX)" || exit 0
+chmod 600 "$MODELS_LOG"
+cleanup_cursor_log() {
+  rm -f -- "$MODELS_LOG"
+}
+trap cleanup_cursor_log EXIT
 
 models_ok=0
-if agent models >/tmp/cursor-models.log 2>&1; then
+if agent models >"$MODELS_LOG" 2>&1; then
   models_ok=1
 fi
 
-# Exact-token match so a pin can't false-positive on a longer variant
-# (e.g. pin "composer-2.5" must not be satisfied by "composer-2.5-fast").
+valid_pin() {
+  case "$1" in
+    ''|-*|*[!A-Za-z0-9._-]*) return 1 ;;
+  esac
+  [ "${#1}" -le 128 ]
+}
+
 id_ok() {
-  esc="$(printf '%s' "$1" | sed 's/[][\.^$*+?(){}|]/\\&/g')"
-  grep -Eq "${esc}([^A-Za-z0-9._-]|$)" /tmp/cursor-models.log
+  escaped="$(printf '%s' "$1" | sed 's/[][\.^$*+?(){}|]/\\&/g')"
+  grep -Eq -- "${escaped}([^A-Za-z0-9._-]|$)" "$MODELS_LOG"
 }
 
-# --- pins verdict ------------------------------------------------------------
-pins="pins ok (composer=${CURSOR_COMPOSER_MODEL:-}, grok=${CURSOR_GROK_MODEL:-})"
-if [ -z "${CURSOR_COMPOSER_MODEL:-}" ] || [ -z "${CURSOR_GROK_MODEL:-}" ]; then
-  pins="PINS MISSING — run \`agent models\` and record CURSOR_COMPOSER_MODEL / CURSOR_GROK_MODEL in the environment variables"
+pins="pins ready"
+if [ -z "${CURSOR_GROK_MODEL:-}" ]; then
+  pins="pins missing"
+elif ! valid_pin "$CURSOR_GROK_MODEL"; then
+  pins="pins invalid"
 elif [ "$models_ok" = "1" ]; then
-  for id in "$CURSOR_COMPOSER_MODEL" "$CURSOR_GROK_MODEL"; do
-    if ! id_ok "$id"; then
-      pins="PIN NOT FOUND on this account: ${id} — re-run \`agent models\` and update the environment variable"
-      break
-    fi
-  done
+  if ! id_ok "$CURSOR_GROK_MODEL"; then
+    pins="pins unavailable"
+  fi
 else
-  pins="pins set (composer=${CURSOR_COMPOSER_MODEL}, grok=${CURSOR_GROK_MODEL}) — unvalidated (\`agent models\` unreachable)"
+  pins="pins unverified"
 fi
 
-# --- auth verdict: functional evidence over status text ----------------------
-if [ -s /tmp/cursor-status.log ] && ! grep -qi "not logged in" /tmp/cursor-status.log; then
-  auth="interactive login present (${status_line})"
+if [ "$models_ok" = "1" ]; then
+  auth="authentication reachable"
 elif [ -z "${CURSOR_API_KEY:-}" ]; then
-  auth="AUTH DARK — no interactive login and no CURSOR_API_KEY set; add a USER API key in the environment settings"
-elif [ "$models_ok" = "1" ]; then
-  auth="key-auth reachable (status 'Not logged in' is cosmetic under key auth)"
+  auth="authentication unavailable"
 else
-  auth="key-auth UNVERIFIED — \`agent models\` unreachable (auth or network; see /tmp/cursor-models.log); if dispatches auth-fail, confirm the key is a USER API key, not admin"
+  auth="authentication unverified"
 fi
 
-echo "cursor.sh: bench lit — $(agent --version 2>/dev/null | head -n 1); ${auth}; ${pins}."
+echo "cursor.sh: bench detected; ${auth}; ${pins}."
 exit 0