@ranimontagna/agent-toolkit 0.3.4 → 0.3.5

package/CHANGELOG.md

@@ -15,6 +15,9 @@ The release entries below are based on Git tag ranges and npm publication metada
 
 ## [Unreleased]
 
+- Added the bundled `media/brag-slim` launch-video skill, vendored from `latent-spaces/brag@fd7de7e` with its MIT license and attribution notice.
+- Refreshed the pinned external tools: RTK `v0.50.0` with new archive checksums, Caveman `3.0.0` at `f5d7294`, Graphify `0.9.73`, GSD Core `1.15.0`, Agent Skills CLI `1.7.0`, and the Claude Code `2.1.286`, Codex `0.159.3`, OpenCode `1.18.34` and Gemini `0.62.0` runtime CLIs, after re-checking the Ariadne headless flags on each.
+- Refreshed the pinned Agent Skills sources: `shadcn/improve`, `pbakaus/impeccable`, `millionco/react-doctor`, `remotion-dev/skills`, `mattpocock/skills`, and Agent Browser `0.38.1` with its matching `vercel-labs/agent-browser` tag commit.
 - Added deterministic `skills.index.json` generation, prompt-sized `BRIEF.md`
   auditing, six shared skill imports, and editorial merges for accessibility,
   UI/UX, and GSAP motion guidance.

package/README.md

@@ -62,13 +62,13 @@ Current external sources:
 
 | Tool | Locked source |
 |---|---|
-| RTK | `rtk-ai/rtk@v0.46.0`, with a SHA-256 pin for every supported archive |
-| Caveman | `JuliusBrussee/caveman@17f9f2ec2377b0bfe16b52ee03a462e7f0a02bc8` |
-| Graphify | `graphifyy==0.9.51` |
-| GSD | `@opengsd/gsd-core@1.11.0` |
-| Agent Browser | `agent-browser@0.35.1` |
-| Agent Skills CLI | `skills@1.5.23`, with each source repository pinned to a full commit |
-| Runtime CLIs | `@anthropic-ai/claude-code@2.1.251`, `@openai/codex@0.151.0`, `opencode-ai@1.18.25`, and `@google/gemini-cli@0.57.0` |
+| RTK | `rtk-ai/rtk@v0.50.0`, with a SHA-256 pin for every supported archive |
+| Caveman | `JuliusBrussee/caveman@f5d729488caa8f6a5b6c8086fe2cccd3e8a63f91` |
+| Graphify | `graphifyy==0.9.73` |
+| GSD | `@opengsd/gsd-core@1.15.0` |
+| Agent Browser | `agent-browser@0.38.1` |
+| Agent Skills CLI | `skills@1.7.0`, with each source repository pinned to a full commit |
+| Runtime CLIs | `@anthropic-ai/claude-code@2.1.286`, `@openai/codex@0.159.3`, `opencode-ai@1.18.34`, and `@google/gemini-cli@0.62.0` |
 | Ariadne adaptation provenance | `snarktank/ralph@6c53cb0b831ebe8739c6a003e22af14902d8b0b5`, with reviewed SHA-256 values for the MIT license and both adapted source skills |
 
 The Agent Skills catalog exposes these locked bundle IDs and skill names:
@@ -109,6 +109,8 @@ workflow; toolkit tags remain `vX.Y.Z`.
 
 The first-party `security` skills are defensive rewrites informed by [`uphiago/recon-skills`](https://github.com/uphiago/recon-skills), under its MIT License. They are intended for authorized, non-destructive reviews; upstream offensive infrastructure, agent instructions, scripts, and mass-scanning workflows are not included. See [`skills/security/NOTICE.md`](skills/security/NOTICE.md) for attribution.
 
+The bundled `media/brag-slim` skill is vendored from [`latent-spaces/brag`](https://github.com/latent-spaces/brag) at commit `fd7de7e418334876b3ea4e9258231a66a2c2a38d` under the MIT License. It turns a project directory or website URL into a short launch video with share copy, built with tools already on the machine; the full `/brag` skill, its render scripts, and bundled music are not included. See [`skills/media/brag-slim/NOTICE.md`](skills/media/brag-slim/NOTICE.md) for attribution.
+
 The first-party `ariadne` and `ariadne-prd` skills are Ariadne-specific adaptations of concepts from [`snarktank/ralph`](https://github.com/snarktank/ralph) under the MIT License. They install through the ordinary Custom Skills pipeline for all five runtimes; `tools.ariadne` records reviewed attribution only and is not fetched or executed during a normal Ariadne run. Each skill directory contains its source path, reviewed commit, and source hash in `NOTICE.md`.
 
 ## Documentation

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ranimontagna/agent-toolkit",
-  "version": "0.3.4",
+  "version": "0.3.5",
   "description": "Personal AI agent toolkit installer for Claude Code, Codex CLI, OpenCode, Gemini CLI, Antigravity and graph-aware workflows.",
   "type": "module",
   "engines": {

package/skills/media/brag-slim/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Shunit Haviv Hakimi
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/skills/media/brag-slim/NOTICE.md

@@ -0,0 +1,13 @@
+# Third-party notice
+
+This skill was copied from the latent-spaces brag repository.
+
+- Source: https://github.com/latent-spaces/brag/tree/fd7de7e418334876b3ea4e9258231a66a2c2a38d/skills/brag-slim
+- Source commit: fd7de7e418334876b3ea4e9258231a66a2c2a38d
+- Source SHA-256 (`skills/brag-slim/SKILL.md`): c97ea53d7c5df2a3dd64694a388c013a05c363ac7c2e4e0d956c18ad3bfaa5ee
+- License: MIT
+- Copyright: Copyright (c) 2026 Shunit Haviv Hakimi
+
+The upstream MIT license is included in `LICENSE`. The full `/brag` skill, its
+render scripts and bundled music are not vendored; this slim variant is a single
+`SKILL.md` that builds the video with tools already on the machine.

package/skills/media/brag-slim/SKILL.md

@@ -0,0 +1,101 @@
+---
+name: brag-slim
+description: Turn a project directory or a website URL into a short, shareable launch video with music, motion, and share copy. One file, no bundled assets — built entirely by the model with the tools already on the machine. Use when someone says "/brag-slim", "let's /brag about this", "brag about a website", "make a launch video", or wants to show off what they built. If the /brag skill is also installed, let /brag handle those phrases; it hands off here on Opus 5.5.
+---
+
+# /brag-slim
+
+You built it. Now brag. You make the whole video yourself — story, visuals, audio, render — with whatever tools are on the machine.
+
+Whatever the tone, it should feel like a modern, slick, polished launch video: nothing on screen or in the soundtrack that doesn't earn its place.
+
+Usage: `/brag-slim [input] [options]`. Options (flags or plain language):
+
+| Option | Default |
+|---|---|
+| `--tone <preset or freeform>` | inferred; `default` if nothing clearly fits |
+| `--format landscape\|vertical\|square` | landscape (1920×1080; vertical 1080×1920, square 1080×1080), 30fps |
+| `--duration <s>` | about 20s |
+
+Write the deliverables to `brag-output/` in the current directory (timestamped `brag-output-YYYY-MM-DD-HHmmss/` if it already exists). Keep every intermediate file (frames, downloads, scripts, stems) in a `work/` subfolder inside it.
+
+## 1. Inspect
+
+First decide what the input is, then gather material from it. Only the source changes; everything from the questions below onward is the same for every input.
+
+| Input | How to recognize it | Where the material comes from |
+|---|---|---|
+| Project | No input given, and the current directory is a project | The code |
+| Website | An `http(s)://` URL, or a bare domain like `example.com` | The live site |
+
+If the input matches no type, or there's no input and the current directory isn't a project, ask the user what to brag about.
+
+### Project
+
+Read the code: the main page, styles (exact colors and fonts), README, routes and key components. The best material is the product **in use** — find its 2–3 beats: entry → key action → result.
+
+You have the source, so use it directly: import or render the project's real components, stylesheets, fonts, images and animations in the video instead of rebuilding them.
+
+### Website
+
+Get the site as a visitor sees it. Many sites build their page with JavaScript, so a plain download can come back as an almost empty shell. If it does, load the page in a headless browser to get the rendered result. Dismiss cookie banners and other overlays, and scroll section by section, since content that animates in on scroll stays blank in a single full-page capture.
+
+- **Copy:** headline, tagline, section headings, feature names, calls to action, testimonials. Also check the title, meta description and social-preview tags.
+- **Identity:** exact colors from the site's CSS and the fonts it loads.
+- **Visuals:** the logo, product screenshots, hero images, demo videos. Download the ones you'll use into `work/`.
+- **Screenshots:** capture the page at the video's aspect ratio to understand the layout. In the video, reuse the site's real markup, CSS and assets and animate those, rather than panning over flat screenshots.
+- **The product in use:** check the demo videos, how-it-works sections and linked docs for the entry → key action → result flow.
+
+### Then, for every input
+
+Before planning, answer: What is it (one sentence)? Who is it for, and what does it do for them? What sets it apart? What's the most impressive or funniest claim? What's the visual hook? What real UI or flow should be shown? What tone fits? What's the one-line share caption?
+
+## 2. Plan
+
+Write `brag-plan.md`: the angle, the hook, 2–3 highlights, the punchline, tone, visual identity, and a scene-by-scene storyboard with durations that sum to the target.
+
+If the user points at one part — a new version, a new feature, one angle — make this the focus of the video.
+
+**Shape:** Hook (2–3s) → Reveal (2–4s) → 2–3 sharp highlights → Punchline/outro (2–4s). A starting shape, not a template.
+
+## Creative laws
+
+- **Short.** 15–25 seconds; 18–22 is the sweet spot.
+- **Clear to a stranger.** After one viewing, someone who's never heard of it knows what it does, who it's for, and how to get it. Lead with that, not with how it's built.
+- **The hook is everything.** The first 2 seconds decide whether anyone keeps watching. Plan it first.
+- **Show the thing.** Reuse the real thing from the source — its UI, components, copy, images, videos and animations — rather than re-creating it. Rebuild only what you can't reuse. Prefer the working app doing its job over a landing page describing it. Small illustrative UI text is fine when showing the product in use (a filename, an "Exported" toast); invented claims, numbers, or testimonials are not. Never abstract filler.
+- **Specific.** It must feel made for this exact project. Use its own copy and claims; no generic SaaS language ("streamline your workflow" is banned).
+- **Readable.** Pace comes from motion and cuts, not from pulling text away early. Any line the viewer is meant to read stays fully visible and settled long enough to read it (roughly 0.3s per word), counted from when the whole line is on screen. Text that's only texture doesn't need to be read.
+- **Make it alive.** Things that appear one by one, simulated clicks, swipes, and typing beat static slides.
+- **Funny earns its place.** Humor comes from the project's own absurdity, not from trying.
+- **Every frame postable.** Any frozen frame should be worth sharing.
+
+## Tones
+
+Presets are defaults; freeform direction ("fake Series A launch from 2016") refines or overrides them.
+
+| Tone | Feel | Pacing / transitions |
+|---|---|---|
+| `default` | Punchy, playful, clean | 4–5 scenes; soft transitions |
+| `polished` | Serious, elegant, restrained | 3–4 scenes, long holds; soft fades |
+| `yc-parody` | Deadpan startup launch, played straight | 4–5 scenes, one claim each; hard cuts |
+| `chaotic` | FAST, LOUD, ALL CAPS | 6–8 scenes, some under 2s; flash/zoom cuts |
+| `deadpan` | Calm, dry, nothing is a joke | 3–4 scenes, big empty space; slow fades |
+| `cinematic` | Trailer-scale, epic claims | 4–5 scenes, big type; dramatic wipes |
+| `app-store` | Clean feature cards | 4–6 scenes; smooth slides |
+
+## Sound
+
+Write the music and sound effects as one piece: effects in the same key and the same space as the music, blended in rather than laid on top. Give it a basic, proper mix, the way a real track is mixed: effects sit softly under the music, nothing harsh or spiky, and repeated little sounds stay in the background.
+
+## 3. Build, check, render
+
+Build it with whatever works on this machine. If you draw the video in a browser, make every frame a pure function of time and wait for fonts and images to load before capturing each one.
+
+Before the full render, look at stills from every scene *and* from mid-transition, and fix overflow, collisions, and low contrast. A plain crossfade between two busy layouts makes a muddy double exposure; stagger it (old content out, then new content in) or dip through the background. Then render `brag.mp4`.
+
+## 4. Deliver
+
+- **Poster:** pull the strongest *settled* frame (text fully in, not mid-transition) to `brag.jpg`, and bake it in as frame 0 of `brag.mp4` so every platform's thumbnail shows it. Replace frame 0 rather than adding a frame, so the duration and audio sync stay the same.
+- **`share-copy.txt`:** 1–3 sentences, postable as-is, specific, matching the tone. No "excited to share."
+- **Tell the user** where the video and copy are, give one sentence on the creative angle, and offer to re-roll a scene or try another tone.

package/skills.index.json

@@ -229,6 +229,12 @@
       "path": "skills/general/thermo-nuclear-code-quality-review/SKILL.md",
       "brief": null
     },
+    {
+      "name": "brag-slim",
+      "ref": "media/brag-slim",
+      "path": "skills/media/brag-slim/SKILL.md",
+      "brief": null
+    },
     {
       "name": "biome-formatting",
       "ref": "quality/biome-formatting",

package/tools.lock.json

@@ -4,67 +4,67 @@
     "rtk": {
       "source": "github-release",
       "repository": "rtk-ai/rtk",
-      "tag": "v0.46.0",
+      "tag": "v0.50.0",
       "assets": {
         "rtk-aarch64-apple-darwin.tar.gz": {
-          "sha256": "484e5dd2b4bfdbbb910727a0ba1e2d63b2e23efa922cfcc7300fd131bca3e10a"
+          "sha256": "fe54761a9950266e3a78ddb66a8af5e067251169da306a288e0751de63d836fe"
         },
         "rtk-aarch64-unknown-linux-gnu.tar.gz": {
-          "sha256": "e8c2e1787f46017ea7c5a711b2bc6a7f7cf61c7ad69385b4c1e4daff1135dcd1"
+          "sha256": "d1cc49dfa2cd443fc32625444b59fe616b6c80478cca210985118347174dd758"
         },
         "rtk-x86_64-apple-darwin.tar.gz": {
-          "sha256": "67eb651fa9cfc4a4ea65876242eb71b8837abdac40521d0dd363214ec1a068dd"
+          "sha256": "ac23e20024ab3c71e7f50069f8b34190aec1b2d8f0c2cc19834039b3dac73373"
         },
         "rtk-x86_64-pc-windows-msvc.zip": {
-          "sha256": "9bc5acd54d35a916e4a561435963e0acf2f1a0115cf43dcfe2b719f361c8a970"
+          "sha256": "cb03399305135dd59ee23eb59a3260ccdeea5a8e08fbc7a271b115b85583a6c9"
         },
         "rtk-x86_64-unknown-linux-musl.tar.gz": {
-          "sha256": "79aa5b89c69566bbfeceb66c8a27cfbe52237fc7ee3e683115f43745a3262d21"
+          "sha256": "bc2b8902b0d9c796c82ef45f16ae2307e17757afeca5ee156235a3dc7bda5f89"
         }
       }
     },
     "caveman": {
       "source": "github",
       "repository": "JuliusBrussee/caveman",
-      "ref": "17f9f2ec2377b0bfe16b52ee03a462e7f0a02bc8"
+      "ref": "f5d729488caa8f6a5b6c8086fe2cccd3e8a63f91"
     },
     "graphify": {
       "source": "pypi",
       "package": "graphifyy",
-      "version": "0.9.51"
+      "version": "0.9.73"
     },
     "gsd": {
       "source": "npm",
       "package": "@opengsd/gsd-core",
-      "version": "1.11.0"
+      "version": "1.15.0"
     },
     "agentBrowser": {
       "source": "npm",
       "package": "agent-browser",
-      "version": "0.35.1"
+      "version": "0.38.1"
     },
     "agentSkills": {
       "source": "skills-cli",
       "skillsCli": {
         "source": "npm",
         "package": "skills",
-        "version": "1.5.23"
+        "version": "1.7.0"
       },
       "repositories": {
         "shadcnImprove": {
           "source": "github",
           "repository": "shadcn/improve",
-          "ref": "03369ee6d7cafbfcecc4346539b05b3dc0a603bb"
+          "ref": "cac56e1ebd3c279aa9153616cfeac7b174ab90f9"
         },
         "agentBrowser": {
           "source": "github",
           "repository": "vercel-labs/agent-browser",
-          "ref": "fbd046c23a2c1156891bda294aaaee715c23b3f1"
+          "ref": "aff6125c023b810ea3f2e5deec5379e9a4270bdc"
         },
         "impeccable": {
           "source": "github",
           "repository": "pbakaus/impeccable",
-          "ref": "b0594c72d18006b5865c70eb3a97e8b04064e600"
+          "ref": "c74755d920985f7a92cef691ca970ba95f90126e"
         },
         "webDesignGuidelines": {
           "source": "github",
@@ -74,17 +74,17 @@
         "reactDoctor": {
           "source": "github",
           "repository": "millionco/react-doctor",
-          "ref": "afa1780254bfd72175e6d0025841560582d32ad1"
+          "ref": "631366777e01637f3c36b8a8c2ae8f19ba1060e8"
         },
         "remotionBestPractices": {
           "source": "github",
           "repository": "remotion-dev/skills",
-          "ref": "7a3d0ca45d2f6a00bf35cb3c525734a36d55a834"
+          "ref": "0b5db9daae40f42c73544d1cc0a8c733bd530eaa"
         },
         "mattPocockSkills": {
           "source": "github",
           "repository": "mattpocock/skills",
-          "ref": "6654f6b60cd9d5be8b54c6fafe44346dabeb3b76"
+          "ref": "d81f3a183412e71a5b1e84ca21bc1a35eea03a60"
         }
       },
       "bundles": {
@@ -176,22 +176,22 @@
     "claude": {
       "source": "npm",
       "package": "@anthropic-ai/claude-code",
-      "version": "2.1.251"
+      "version": "2.1.286"
     },
     "codex": {
       "source": "npm",
       "package": "@openai/codex",
-      "version": "0.151.0"
+      "version": "0.159.3"
     },
     "opencode": {
       "source": "npm",
       "package": "opencode-ai",
-      "version": "1.18.25"
+      "version": "1.18.34"
     },
     "gemini": {
       "source": "npm",
       "package": "@google/gemini-cli",
-      "version": "0.57.0"
+      "version": "0.62.0"
     }
   }
 }