@se-studio/skills 1.9.7 → 1.9.9

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @se-studio/skills
 
+## 1.9.9
+
+### Patch Changes
+
+- 96e1908: Add fleet-status so an agent session lists every local checkout, its drift, and its worktrees before and after the work.
+
+## 1.9.8
+
+### Patch Changes
+
+- Document role-gated publish, and allow browser CORS on the OAuth token and register routes.
+
 ## 1.9.7
 
 ### Patch Changes

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@se-studio/skills",
-  "version": "1.9.7",
+  "version": "1.9.9",
   "description": "SE Studio agent skills for marketing site development with Contentful CMS",
   "repository": {
     "type": "git",

package/references/agent-session/fleet-status.mjs

@@ -0,0 +1,125 @@
+#!/usr/bin/env node
+/**
+ * Read-only status of every registry checkout on this machine.
+ * Run from any directory: node packages/skills/references/agent-session/fleet-status.mjs
+ */
+import { execFileSync } from 'node:child_process';
+import { readFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const registryPath = join(dirname(fileURLToPath(import.meta.url)), 'projects.registry.json');
+const registry = JSON.parse(readFileSync(registryPath, 'utf8'));
+
+function expand(path) {
+  if (path.startsWith('~/')) return join(homedir(), path.slice(2));
+  return path;
+}
+
+function git(cwd, args) {
+  try {
+    return execFileSync('git', args, {
+      cwd,
+      encoding: 'utf8',
+      stdio: ['ignore', 'pipe', 'pipe'],
+    }).trim();
+  } catch (error) {
+    const stderr = error.stderr?.toString().trim() || error.message;
+    return { error: stderr.split('\n')[0] };
+  }
+}
+
+function ignored(file) {
+  const base = file.split('/').pop();
+  if (base === 'skills-lock.json' || base === 'next-env.d.ts' || base === 'redirects.ts') {
+    return true;
+  }
+  return file === '.agents/skills' || file.startsWith('.agents/skills/');
+}
+
+function statusPaths(cwd) {
+  const raw = git(cwd, ['status', '--porcelain']);
+  if (raw.error) return raw;
+  const tracked = [];
+  const untracked = [];
+  for (const line of raw.split('\n').filter(Boolean)) {
+    const path = line.slice(3).split(' -> ').pop();
+    if (ignored(path)) continue;
+    if (line.startsWith('??')) untracked.push(path);
+    else tracked.push(`${line.slice(0, 2).trim()} ${path}`);
+  }
+  return { tracked, untracked };
+}
+
+function worktrees(cwd, primary) {
+  const raw = git(cwd, ['worktree', 'list', '--porcelain']);
+  if (raw.error) return [];
+  const trees = [];
+  let current = null;
+  for (const line of raw.split('\n')) {
+    if (line.startsWith('worktree ')) {
+      if (current) trees.push(current);
+      current = { path: line.slice(9), branch: '(detached)' };
+    } else if (current && line.startsWith('branch ')) {
+      current.branch = line.slice('branch refs/heads/'.length);
+    } else if (current && line.startsWith('HEAD ')) {
+      current.head = line.slice(5, 12);
+    }
+  }
+  if (current) trees.push(current);
+  return trees.filter((tree) => tree.path !== primary);
+}
+
+function printList(label, items, limit = 12) {
+  const shown = items.slice(0, limit);
+  for (const item of shown) console.log(`  ${label} ${item}`);
+  if (items.length > limit) console.log(`  ${label} +${items.length - limit} more`);
+}
+
+console.log(`fleet-status ${new Date().toISOString().slice(0, 10)}`);
+
+for (const project of registry.projects) {
+  const path = expand(project.path);
+  const branch = project.branch;
+  console.log('');
+  const inside = git(path, ['rev-parse', '--is-inside-work-tree']);
+  if (inside.error || inside !== 'true') {
+    console.log(`${project.key}  MISSING  ${path}`);
+    continue;
+  }
+
+  const fetched = git(path, ['fetch', '--prune', 'origin', branch]);
+  const current = git(path, ['branch', '--show-current']);
+  const head = git(path, ['rev-parse', '--short', 'HEAD']);
+  const ahead = git(path, ['rev-list', '--count', `origin/${branch}..HEAD`]);
+  const behind = git(path, ['rev-list', '--count', `HEAD..origin/${branch}`]);
+  const wrong = current !== branch ? `  primary is ${current}` : '';
+  const drift =
+    ahead.error || behind.error ? '  origin unknown' : `  ahead ${ahead} behind ${behind}`;
+  console.log(`${project.key}  ${branch}  ${head.error ? '?' : head}${drift}${wrong}`);
+  if (fetched.error) console.log(`  fetch: ${fetched.error}`);
+
+  const status = statusPaths(path);
+  if (status.error) {
+    console.log(`  status: ${status.error}`);
+  } else {
+    printList('dirty', status.tracked);
+    printList('untracked', status.untracked);
+  }
+
+  for (const tree of worktrees(path, path)) {
+    const when = git(tree.path, ['log', '-1', '--format=%cs']);
+    const date = when.error ? '?' : when;
+    const feature = tree.branch.startsWith('feature/') || tree.branch.startsWith('cursor/');
+    if (!feature) {
+      console.log(`  checkout ${tree.path}  ${tree.branch}  ${tree.head ?? ''}  ${date}`);
+      continue;
+    }
+    const extra = git(tree.path, ['rev-list', '--count', `origin/${branch}..HEAD`]);
+    const aheadOf = extra.error ? '?' : extra;
+    console.log(
+      `  worktree ${tree.path}  ${tree.branch}  ${tree.head ?? ''}  ${date}  commits not in origin/${branch}: ${aheadOf}`,
+    );
+  }
+}

package/references/agent-session/projects.registry.json

@@ -118,13 +118,15 @@
     {
       "key": "eagle",
       "displayName": "Eagle Website",
-      "path": "~/source/customers/eagle/eagle-website",
+      "path": "~/source/customers/eaglecap/eagle-website",
       "worktreesRoot": "~/source/customers/eagle/worktrees",
-      "branch": "main",
+      "branch": "develop",
       "productionBranch": "main",
       "type": "customer",
+      "contentfulSpaceId": "dnov2dthcze8",
+      "hostedMcp": "cms-edit-eagle",
       "validate": "pnpm validate",
-      "notes": "Currently tracks main (no separate develop yet). Agents use feature/* PRs into main until a develop integration branch exists. Prefer adding develop when the site joins the standard customer train."
+      "notes": "Integration is origin/develop. Production is origin/main. cms-edit host builds only on main. Hosted MCP: https://eagle.content.se.studio/api/mcp. This machine's develop checkout is ~/source/customers/eaglecap/eagle-website. Feature worktrees go under worktreesRoot."
     }
   ]
 }

package/skills/contentful-cms-core/SKILL.md

@@ -25,12 +25,7 @@ Use this skill when you need to read or edit content in Contentful using **hoste
 
 ## Safety Rules
 
-**This tool CANNOT and WILL NOT:**
-- Publish any entry
-- Unpublish any entry
-- Archive or delete published entries
-
-All `save` operations create **draft** versions. A human must review and publish in Contentful.
+`save` writes **drafts**. Publish, unpublish, and archive use `publish plan`, then `publish apply` after an explicit yes, and only when the signed-in Contentful role allows it. AI Editor cannot. Do not publish as part of save.
 
 **Assets:** Upload **is** supported (`asset upload`). Default workflow: **search and reuse** existing assets first (`index sync` → `asset search`). Search by concept (`asset search --concept` / `--concept-all`) finds a subject and a tone, including files no page uses yet. Concepts are not blog tags. When uploading:
 - **Raster/video:** `cms_edit_request_staged_upload` → curl → `cms_edit_media` prepare → wait → catalog → import with real alt. Video, and an image master over 4MB, is a presigned direct PUT (100MB, `intake: direct`) then prepare with that URL. Smaller images still use `stagedUploadIds`. Never `asset upload --staged/--url/--base64` for jpeg/png/webp/gif/mp4. The stored asset is the processed file.
@@ -204,7 +199,7 @@ Shows a diff of all modified fields across all changed entries.
 cms-edit save
 ```
 
-Writes all changes to Contentful as **drafts**. The changes are visible in Contentful's web app but NOT live until a human publishes them.
+Writes all changes to Contentful as **drafts**. They stay drafts until `publish plan` then `publish apply`, after an explicit yes, and only if the Contentful role allows it.
 
 After saving, the session is cleared automatically if all changes were saved.
 

package/skills/site-workflows-agent-session/SKILL.md

@@ -66,6 +66,16 @@ Integration branches (agents push feature branches here via PR or merge — **ne
 
 **Never** work in `productionPath`. Agent work uses `path` (develop checkout) only.
 
+### Fleet status
+
+Run this at the **start** of every coding session, and **again before you say the session is done**:
+
+```bash
+pnpm --dir ~/source/se/se-core-product fleet-status
+```
+
+Read the whole report before editing. A tracked dirty file or a worktree is unfinished work: commit it, push it, drop it, or name it in the handoff. Do not start another feature on a dirty primary checkout. The script lists every registry checkout, hides generated paths, and is the only list of those paths.
+
 ---
 
 ## Step 2 — Ledger: PRs and worktrees (not yaml)
@@ -74,8 +84,8 @@ Customer-only work **must not** create or update files in `se-core-product`. Cro
 
 **What's in flight** (when the user asks, or before a tidy-up):
 
-1. **Open PRs** targeting `dev` (core) or `develop` (customer) — `gh pr list --base <integration> --state open`. This includes Cursor cloud / other machines.
-2. **This machine:** `git fetch --prune` then `git worktree list` on the registry primary checkout.
+1. **This machine:** `pnpm --dir ~/source/se/se-core-product fleet-status`.
+2. **Open PRs** targeting `dev` (core) or `develop` (customer) — `gh pr list --base <integration> --state open`. This includes Cursor cloud / other machines. Fleet-status does not see those.
 
 Do not invent a second ledger in git. Stale local trees vs merged PRs are a prune problem, not a yaml problem.
 
@@ -351,7 +361,7 @@ Do not merge until the human asks **and** confirms (`production-merge.md`). Not
 
 | Outcome | Action |
 |---------|--------|
-| Merged / done | Remove the **local** worktree if you created one; the PR close is the record |
+| Merged / done | Remove the **local** worktree if you created one; the PR close is the record. Run fleet-status again and deal with anything it still lists |
 | Parked | Leave the branch + draft PR; say why in chat |
 
 ```bash
@@ -372,7 +382,7 @@ Feature: hero-redesign
 Branch: feature/om1/hero-redesign
 ```
 
-Agent must load this skill, run placement checklist, create a **local** worktree (or use the cloud checkout), then proceed. **Do not** write `work/active/*.yaml`.
+Agent must load this skill, run fleet-status, run the placement checklist, create a **local** worktree (or use the cloud checkout), then proceed. **Do not** write `work/active/*.yaml`.
 
 ---
 
@@ -388,6 +398,6 @@ Agent must load this skill, run placement checklist, create a **local** worktree
 | `pedestal` | `develop` | `main` | customer monorepo |
 | `hsd` | `develop` (`develop-hsd-website`) | `production` (`production-hsd-website`) | customer |
 | `highlander` | `develop` | `main` | customer |
-| `eagle` | `main` (until `develop` exists) | `main` | customer |
+| `eagle` | `develop` | `main` | customer |
 
 Full paths (`path`, `worktreesRoot`, `productionPath`), MCP keys: `projects.registry.json`.