@soleur/opencode 0.0.0-stage → 3.354.2

package/skills/feature-video/scripts/check_deps.sh

@@ -0,0 +1,281 @@
+#!/usr/bin/env bash
+# feature-video dependency checker with optional auto-install
+# No set -euo pipefail: soft dependency checks and install failures
+# must not abort the script. Each install uses explicit if/then checks.
+
+AUTO_INSTALL=false
+[[ "${1:-}" == "--auto" ]] && AUTO_INSTALL=true
+
+# Ensure ~/.local/bin is in PATH for user-local installs
+[[ ":$PATH:" != *":$HOME/.local/bin:"* ]] && export PATH="$HOME/.local/bin:$PATH"
+
+# Detect OS for install commands
+_UNAME=$(uname -s)
+OS="unknown"
+[[ "$_UNAME" == "Darwin" ]] && OS="macos"
+[[ "$_UNAME" == "Linux" ]] && OS="linux"
+
+# Detect architecture for static binary downloads
+ARCH=$(uname -m)
+ARCH_SUFFIX=""
+case "$ARCH" in
+  x86_64)        ARCH_SUFFIX="amd64" ;;
+  aarch64|arm64) ARCH_SUFFIX="arm64" ;;
+esac
+
+# BtbN uses different arch names than rclone
+FFMPEG_ARCH=""
+case "$ARCH" in
+  x86_64)        FFMPEG_ARCH="linux64" ;;
+  aarch64|arm64) FFMPEG_ARCH="linuxarm64" ;;
+esac
+
+# --- Pinned Versions ---
+# To update: change version/build constants, fetch new checksums, update SHA256 constants.
+#
+# rclone:
+#   1. Pick version from https://downloads.rclone.org/
+#   2. Fetch checksums: curl -sL https://downloads.rclone.org/v<NEW_VERSION>/SHA256SUMS
+#   3. Extract hashes for linux-amd64.zip and linux-arm64.zip
+#
+# ffmpeg (BtbN autobuilds):
+#   1. Find latest autobuild tag:
+#      curl -s "https://api.github.com/repos/BtbN/FFmpeg-Builds/releases" | jq '.[1].tag_name'
+#      (index 1 because index 0 is the floating "latest" tag)
+#   2. Fetch checksums and extract build ID:
+#      curl -sL "https://github.com/BtbN/FFmpeg-Builds/releases/download/<tag>/checksums.sha256" \
+#        | grep linux64-gpl.tar.xz | grep -v shared
+#      Output: <hash>  ffmpeg-N-XXXXX-g<hash>-linux64-gpl.tar.xz
+#      The BUILD_ID is the "N-XXXXX-g<hash>" portion of the filename
+#   3. Update FFMPEG_AUTOBUILD (date from tag), FFMPEG_BUILD_ID, and both SHA256 constants
+
+RCLONE_VERSION="1.73.2"
+FFMPEG_AUTOBUILD="2026-03-20-13-06"
+FFMPEG_BUILD_ID="N-123570-gf72f692afa"
+
+# rclone checksums (from https://downloads.rclone.org/v1.73.2/SHA256SUMS)
+RCLONE_SHA256_AMD64="00a1d8cb85552b7b07bb0416559b2e78fcf9c6926662a52682d81b5f20c90535"
+RCLONE_SHA256_ARM64="2f7d8b807e6ea638855129052c834ca23aa538d3ad7786e30b8ad1e97c5db47b"
+
+# ffmpeg checksums (from BtbN autobuild-2026-03-20-13-06 checksums.sha256)
+FFMPEG_SHA256_LINUX64="f550cd5fad7bc9045f9e6b4370204ddd245b8120f6bc193e0c09c58569e3cb32"
+FFMPEG_SHA256_LINUXARM64="89b959bed4b6d63bad2d85870468a9a52cf84efd216a12fbf577a011ef391644"
+
+verify_checksum() {
+  local file="$1"
+  local expected="$2"
+  local actual
+  actual=$(sha256sum "$file" | cut -d' ' -f1)
+  if [[ "$actual" != "$expected" ]]; then
+    echo "  CHECKSUM MISMATCH for $file" >&2
+    echo "  Expected: $expected" >&2
+    echo "  Got:      $actual" >&2
+    return 1
+  fi
+  echo "  [ok] checksum verified"
+}
+
+install_ffmpeg_linux() {
+  local ffmpeg_arch="$1"
+  if [[ -z "$ffmpeg_arch" ]]; then
+    echo "  Unsupported architecture: $ARCH. Install ffmpeg manually." >&2
+    return 1
+  fi
+  if ! tar --help >/dev/null 2>&1 || ! xz --help >/dev/null 2>&1; then
+    echo "  tar and xz are required to install ffmpeg. Install them first." >&2
+    return 1
+  fi
+  local filename="ffmpeg-${FFMPEG_BUILD_ID}-${ffmpeg_arch}-gpl.tar.xz"
+  local url="https://github.com/BtbN/FFmpeg-Builds/releases/download/autobuild-${FFMPEG_AUTOBUILD}/${filename}"
+  local expected
+  case "$ffmpeg_arch" in
+    linux64)    expected="$FFMPEG_SHA256_LINUX64" ;;
+    linuxarm64) expected="$FFMPEG_SHA256_LINUXARM64" ;;
+    *) echo "  No checksum available for architecture: $ffmpeg_arch" >&2; return 1 ;;
+  esac
+  local tmpdir
+  tmpdir=$(mktemp -d)
+  trap "rm -rf '$tmpdir'" RETURN
+  echo "  Downloading ffmpeg (autobuild ${FFMPEG_AUTOBUILD})..."
+  mkdir -p "$HOME/.local/bin"
+  if ! curl -sfL "$url" -o "$tmpdir/ffmpeg.tar.xz"; then
+    echo "  Download failed. Install ffmpeg manually: https://github.com/BtbN/FFmpeg-Builds/releases" >&2
+    return 1
+  fi
+  if ! verify_checksum "$tmpdir/ffmpeg.tar.xz" "$expected"; then
+    return 1
+  fi
+  tar -xJf "$tmpdir/ffmpeg.tar.xz" -C "$tmpdir"
+  cp "$tmpdir"/ffmpeg-*/bin/ffmpeg "$HOME/.local/bin/ffmpeg"
+  chmod +x "$HOME/.local/bin/ffmpeg"
+}
+
+install_rclone_linux() {
+  local arch_suffix="$1"
+  if [[ -z "$arch_suffix" ]]; then
+    echo "  Unsupported architecture: $ARCH. Install rclone manually." >&2
+    return 1
+  fi
+  if ! command -v unzip >/dev/null 2>&1; then
+    echo "  unzip is required to install rclone. Install unzip first." >&2
+    return 1
+  fi
+  local url="https://downloads.rclone.org/v${RCLONE_VERSION}/rclone-v${RCLONE_VERSION}-linux-${arch_suffix}.zip"
+  local expected
+  case "$arch_suffix" in
+    amd64) expected="$RCLONE_SHA256_AMD64" ;;
+    arm64) expected="$RCLONE_SHA256_ARM64" ;;
+    *) echo "  No checksum available for architecture: $arch_suffix" >&2; return 1 ;;
+  esac
+  local tmpdir
+  tmpdir=$(mktemp -d)
+  trap "rm -rf '$tmpdir'" RETURN
+  echo "  Downloading rclone v${RCLONE_VERSION}..."
+  mkdir -p "$HOME/.local/bin"
+  if ! curl -sfL "$url" -o "$tmpdir/rclone.zip"; then
+    echo "  Download failed. Install rclone manually: https://rclone.org/install/" >&2
+    return 1
+  fi
+  if ! verify_checksum "$tmpdir/rclone.zip" "$expected"; then
+    return 1
+  fi
+  unzip -q "$tmpdir/rclone.zip" -d "$tmpdir"
+  cp "$tmpdir"/rclone-*/rclone "$HOME/.local/bin/rclone"
+  chmod +x "$HOME/.local/bin/rclone"
+}
+
+install_tool() {
+  local tool="$1"
+  if ! command -v curl >/dev/null 2>&1; then
+    echo "  curl is required for auto-install. Install curl first." >&2
+    return 1
+  fi
+  case "$OS" in
+    linux)
+      case "$tool" in
+        ffmpeg) install_ffmpeg_linux "$FFMPEG_ARCH" ;;
+        rclone) install_rclone_linux "$ARCH_SUFFIX" ;;
+        *)
+          echo "  No installer for $tool. Install manually." >&2
+          return 1
+          ;;
+      esac
+      ;;
+    macos)
+      # Homebrew handles its own integrity verification (bottle SHA256)
+      if command -v brew >/dev/null 2>&1; then
+        brew install "$tool"
+      else
+        echo "  Install Homebrew first: https://brew.sh" >&2
+        return 1
+      fi
+      ;;
+    *)
+      echo "  Unsupported OS. Install $tool manually." >&2
+      return 1
+      ;;
+  esac
+}
+
+verify_install() {
+  local tool="$1"
+  if command -v "$tool" >/dev/null 2>&1; then
+    echo "  [ok] $tool (installed)"
+  else
+    echo "  [FAILED] $tool installed but not found in PATH"
+    echo "    Try opening a new terminal or check your PATH"
+  fi
+}
+
+attempt_install() {
+  local tool="$1"
+
+  if [[ "$AUTO_INSTALL" != "true" ]]; then
+    echo "  $tool not installed. Install it? (y/N)"
+    read -r response
+    if [[ ! "$response" =~ ^[Yy]$ ]]; then
+      echo "  [skip] $tool (declined)"
+      return
+    fi
+  fi
+
+  echo "  [installing] $tool..."
+  if install_tool "$tool"; then
+    verify_install "$tool"
+  else
+    echo "  [FAILED] $tool installation"
+  fi
+}
+
+echo "=== feature-video Dependency Check ==="
+echo
+
+# Hard dependency -- cannot record without this
+if command -v agent-browser >/dev/null 2>&1; then
+  # Version guard: must be 0.21.x+ (Chrome for Testing, no Playwright dep)
+  AB_VERSION=$(agent-browser --version 2>/dev/null | grep -oE '[0-9]+\.[0-9]+\.[0-9]+')
+  if [[ -n "$AB_VERSION" ]]; then
+    AB_MAJOR=$(echo "$AB_VERSION" | cut -d. -f1)
+    AB_MINOR=$(echo "$AB_VERSION" | cut -d. -f2)
+    if [[ "$AB_MAJOR" -eq 0 && "$AB_MINOR" -lt 21 ]]; then
+      echo "  [ERROR] agent-browser $AB_VERSION is too old (pre-0.21 uses Playwright, causes version mismatch)"
+      echo "    Required: >= 0.21.1 (uses Chrome for Testing, no shared Playwright cache)"
+      echo "    Fix: sudo npm uninstall -g agent-browser && npm install --prefix ~/.local -g agent-browser@0.22.3 && agent-browser install"
+      exit 1
+    fi
+  fi
+  echo "  [ok] agent-browser${AB_VERSION:+ ($AB_VERSION)}"
+
+  # Launch smoke test (issue #6605): a broken Chrome launch otherwise hangs
+  # ~150s with zero output. `timeout` bounds it; isolated sessions avoid reusing
+  # a prior attempt's daemon state. The dominant Linux failure is the AppArmor
+  # unprivileged-user-namespace restriction (Ubuntu 23.10+, containers, VMs),
+  # fixed by launching Chrome with --no-sandbox.
+  if [[ "$OS" == "linux" ]]; then
+    if timeout 45 agent-browser open about:blank --headless --session ab-smoke-a >/dev/null 2>&1; then
+      echo "  [ok] agent-browser can launch Chrome"
+    elif AGENT_BROWSER_ARGS="--no-sandbox" timeout 45 agent-browser open about:blank --headless --session ab-smoke-b >/dev/null 2>&1; then
+      echo "  [WARN] agent-browser needs --no-sandbox to launch Chrome on this host"
+      echo "    (Ubuntu 23.10+/container/VM restricts unprivileged user namespaces via AppArmor)."
+      echo "    Fix -- export before running the recording flow:"
+      echo "      export AGENT_BROWSER_ARGS=\"--no-sandbox\""
+    else
+      echo "  [WARN] agent-browser could not launch Chrome within 45s, even with --no-sandbox."
+      echo "    A wedged daemon may hold the socket. Clear it and retry:"
+      echo "      pkill -f agent-browser-linux-x64; rm -rf /tmp/agent-browser/* \"/run/user/\$(id -u)/agent-browser/\"*"
+    fi
+    timeout 10 agent-browser close --session ab-smoke-a >/dev/null 2>&1 || true
+    AGENT_BROWSER_ARGS="--no-sandbox" timeout 10 agent-browser close --session ab-smoke-b >/dev/null 2>&1 || true
+  fi
+else
+  echo "  [MISSING] agent-browser (required)"
+  echo "    Install: npm install --prefix ~/.local -g agent-browser@0.22.3 && agent-browser install"
+  echo "    On Linux: agent-browser install --with-deps (if system deps missing)"
+  echo
+  echo "Cannot proceed without agent-browser."
+  exit 1
+fi
+
+# Soft dependency: ffmpeg (video/GIF conversion)
+if command -v ffmpeg >/dev/null 2>&1; then
+  echo "  [ok] ffmpeg"
+else
+  attempt_install "ffmpeg"
+fi
+
+# Soft dependency: rclone (cloud upload)
+if command -v rclone >/dev/null 2>&1; then
+  echo "  [ok] rclone"
+  REMOTES=$(rclone listremotes 2>/dev/null || true)
+  if [ -z "$REMOTES" ]; then
+    echo "  [skip] rclone: no remotes configured (see rclone skill)"
+  else
+    REMOTE_COUNT=$(echo "$REMOTES" | wc -l | tr -d ' ')
+    echo "  [ok] rclone: $REMOTE_COUNT remote(s) configured"
+  fi
+else
+  attempt_install "rclone"
+fi
+
+echo
+echo "=== Check Complete ==="

package/skills/file-todos/SKILL.md

@@ -0,0 +1,267 @@
+---
+name: file-todos
+description: "This skill should be used when managing the file-based todo tracking system in the todos/ directory. It provides workflows for creating todos, managing status and dependencies, conducting triage, and integrating with code review."
+---
+
+<!-- grok-harness-invoke:start -->
+**Grok Build (`plugins/soleur/lib/harness.ts` `invokeSkill()`):** Read this SKILL.md in this process and run it to completion. A one-segment `soleur:<name>` in this document names a SKILL — on Grok Build, Read `plugins/soleur/skills/<name>/SKILL.md` in this process; it is not a nested tool_use. A multi-segment id such as `soleur:<domain>:<name>` names an AGENT: spawn it, never Read it, and on Grok Build spawn_subagent takes the id with its colons replaced by hyphens (`agentIdToGrokSubagentType`). **Claude Code:** Skill tool for a skill (`soleur:<name>`), Task tool with `subagent_type` for an agent. Forbidden is executing a subset, not the Read.
+<!-- grok-harness-invoke:end -->
+
+# File-Based Todo Tracking Skill
+
+## Overview
+
+The `todos/` directory contains a file-based tracking system for managing code review feedback, technical debt, feature requests, and work items. Each todo is a markdown file with YAML frontmatter and structured sections.
+
+This skill should be used when:
+
+- Creating new todos from findings or feedback
+- Managing todo lifecycle (pending → ready → complete)
+- Triaging pending items for approval
+- Checking or managing dependencies
+- Converting PR comments or code findings into tracked work
+- Updating work logs during todo execution
+
+## File Naming Convention
+
+Todo files follow this naming pattern:
+
+```
+{issue_id}-{status}-{priority}-{description}.md
+```
+
+**Components:**
+
+- **issue_id**: Sequential number (001, 002, 003...) - never reused
+- **status**: `pending` (needs triage), `ready` (approved), `complete` (done)
+- **priority**: `p1` (critical), `p2` (important), `p3` (nice-to-have)
+- **description**: kebab-case, brief description
+
+**Examples:**
+
+```
+001-pending-p1-mailer-test.md
+002-ready-p1-fix-n-plus-1.md
+005-complete-p2-refactor-csv.md
+```
+
+## File Structure
+
+Each todo is a markdown file with YAML frontmatter and structured sections. Use the template at [todo-template.md](./assets/todo-template.md) as a starting point when creating new todos.
+
+**Required sections:**
+
+- **Problem Statement** - What is broken, missing, or needs improvement?
+- **Findings** - Investigation results, root cause, key discoveries
+- **Proposed Solutions** - Multiple options with pros/cons, effort, risk
+- **Recommended Action** - Clear plan (filled during triage)
+- **Acceptance Criteria** - Testable checklist items
+- **Work Log** - Chronological record with date, actions, learnings
+
+**Optional sections:**
+
+- **Technical Details** - Affected files, related components, DB changes
+- **Resources** - Links to errors, tests, PRs, documentation
+- **Notes** - Additional context or decisions
+
+**YAML frontmatter fields:**
+
+```yaml
+---
+status: ready              # pending | ready | complete
+priority: p1              # p1 | p2 | p3
+issue_id: "002"
+tags: [rails, performance, database]
+dependencies: ["001"]     # Issue IDs this is blocked by
+---
+```
+
+## Common Workflows
+
+### Creating a New Todo
+
+**To create a new todo from findings or feedback:**
+
+1. Determine next issue ID: `ls todos/ | grep -o '^[0-9]\+' | sort -n | tail -1`
+2. Copy template: `cp assets/todo-template.md todos/{NEXT_ID}-pending-{priority}-{description}.md`
+3. Edit and fill required sections:
+   - Problem Statement
+   - Findings (if from investigation)
+   - Proposed Solutions (multiple options)
+   - Acceptance Criteria
+   - Add initial Work Log entry
+4. Determine status: `pending` (needs triage) or `ready` (pre-approved)
+5. Add relevant tags for filtering
+
+**When to create a todo:**
+
+- Requires more than 15-20 minutes of work
+- Needs research, planning, or multiple approaches considered
+- Has dependencies on other work
+- Requires manager approval or prioritization
+- Part of larger feature or refactor
+- Technical debt needing documentation
+
+**When to act immediately instead:**
+
+- Issue is trivial (< 15 minutes)
+- Complete context available now
+- No planning needed
+- User explicitly requests immediate action
+- Simple bug fix with obvious solution
+
+### Triaging Pending Items
+
+**To triage pending todos:**
+
+1. List pending items: `ls todos/*-pending-*.md`
+2. For each todo:
+   - Read Problem Statement and Findings
+   - Review Proposed Solutions
+   - Make decision: approve, defer, or modify priority
+3. Update approved todos:
+   - Rename file: `mv {file}-pending-{pri}-{desc}.md {file}-ready-{pri}-{desc}.md`
+   - Update frontmatter: `status: pending` → `status: ready`
+   - Fill "Recommended Action" section with clear plan
+   - Adjust priority if different from initial assessment
+4. Deferred todos stay in `pending` status
+
+**Use slash command:** `soleur:triage` for interactive approval workflow
+
+### Managing Dependencies
+
+**To track dependencies:**
+
+```yaml
+dependencies: ["002", "005"]  # This todo blocked by issues 002 and 005
+dependencies: []               # No blockers - can work immediately
+```
+
+**To check what blocks a todo:**
+
+```bash
+grep "^dependencies:" todos/003-*.md
+```
+
+**To find what a todo blocks:**
+
+```bash
+grep -l 'dependencies:.*"002"' todos/*.md
+```
+
+**To verify blockers are complete before starting:** Check each dependency ID by running `ls todos/<dep-id>-complete-*.md 2>/dev/null` for each dependency. Replace `<dep-id>` with the actual dependency number (e.g., `001`, `002`).
+
+### Updating Work Logs
+
+**When working on a todo, always add a work log entry:**
+
+```markdown
+### YYYY-MM-DD - Session Title
+
+**By:** Claude Code / Developer Name
+
+**Actions:**
+- Specific changes made (include file:line references)
+- Commands executed
+- Tests run
+- Results of investigation
+
+**Learnings:**
+- What worked / what didn't
+- Patterns discovered
+- Key insights for future work
+```
+
+Work logs serve as:
+
+- Historical record of investigation
+- Documentation of approaches attempted
+- Knowledge sharing for team
+- Context for future similar work
+
+### Completing a Todo
+
+**To mark a todo as complete:**
+
+1. Verify all acceptance criteria checked off
+2. Update Work Log with final session and results
+3. Rename file: `mv {file}-ready-{pri}-{desc}.md {file}-complete-{pri}-{desc}.md`
+4. Update frontmatter: `status: ready` → `status: complete`
+5. Check for unblocked work: `grep -l 'dependencies:.*"002"' todos/*-ready-*.md`
+6. Commit with issue reference: `feat: resolve issue 002`
+
+## Integration with Development Workflows
+
+| Trigger | Flow | Tool |
+|---------|------|------|
+| Code review | `soleur:review` → Findings → `soleur:triage` → Todos | Review agent + skill |
+| PR comments | `/resolve_pr_parallel` → Individual fixes → Todos | gh CLI + skill |
+| Code TODOs | `/resolve_todo_parallel` → Fixes + Complex todos | Agent + skill |
+| Planning | Brainstorm → Create todo → Work → Complete | Skill |
+| Feedback | Discussion → Create todo → Triage → Work | Skill + slash |
+
+## Quick Reference Commands
+
+**Finding work:**
+
+```bash
+# List highest priority unblocked work
+grep -l 'dependencies: \[\]' todos/*-ready-p1-*.md
+
+# List all pending items needing triage
+ls todos/*-pending-*.md
+
+# Find next issue ID
+ls todos/ | grep -o '^[0-9]\+' | sort -n | tail -1 | awk '{printf "%03d", $1+1}'
+
+# Count by status
+ls -1 todos/*-pending-*.md 2>/dev/null | wc -l
+ls -1 todos/*-ready-*.md 2>/dev/null | wc -l
+ls -1 todos/*-complete-*.md 2>/dev/null | wc -l
+```
+
+**Dependency management:**
+
+```bash
+# What blocks this todo?
+grep "^dependencies:" todos/003-*.md
+
+# What does this todo block?
+grep -l 'dependencies:.*"002"' todos/*.md
+```
+
+**Searching:**
+
+```bash
+# Search by tag
+grep -l "tags:.*rails" todos/*.md
+
+# Search by priority
+ls todos/*-p1-*.md
+
+# Full-text search
+grep -r "payment" todos/
+```
+
+## Key Distinctions
+
+**File-todos system (this skill):**
+
+- Markdown files in `todos/` directory
+- Development/project tracking
+- Standalone markdown files with YAML frontmatter
+- Used by humans and agents
+
+**Rails Todo model:**
+
+- Database model in `app/models/todo.rb`
+- User-facing feature in the application
+- Active Record CRUD operations
+- Different from this file-based system
+
+**TodoWrite tool:**
+
+- In-memory task tracking during agent sessions
+- Temporary tracking for single conversation
+- Not persisted to disk
+- Different from both systems above