@webpresso/agent-kit 0.21.4 → 0.21.5

package/dist/esm/blueprint/service/BlueprintCreationService.js

@@ -4,7 +4,7 @@ import path from 'node:path';
 import { parseBlueprint } from '#core/parser';
 import { scanBlueprintDirectory } from '#service/scanner';
 import { resolveBlueprintRoot } from '#utils/blueprint-root';
-import { resolvePackageAsset } from '#utils/package-assets';
+import { resolvePackageAssetPreferred } from '#utils/package-assets';
 const RESERVED_BLUEPRINT_SLUGS = new Set([
     'draft',
     'planned',
@@ -13,7 +13,10 @@ const RESERVED_BLUEPRINT_SLUGS = new Set([
     'completed',
     'archived',
 ]);
-const DEFAULT_TEMPLATE_PATH = resolvePackageAsset('docs/templates/blueprint.md');
+const DEFAULT_TEMPLATE_PATH = resolvePackageAssetPreferred([
+    'docs/templates/blueprint.md',
+    'catalog/docs/templates/blueprint.md',
+]);
 function formatDate(date) {
     return date.toISOString().split('T')[0] ?? date.toISOString();
 }

package/dist/esm/blueprint/utils/package-assets.d.ts

@@ -3,4 +3,15 @@
  * package root) is found. Works whether running from src/ or dist/esm/.
  */
 export declare function resolvePackageAsset(relativeFromRoot: string): string;
+/**
+ * Resolve the first existing candidate, in priority order. Use when an asset
+ * lives at one path in the source checkout but a different path in the
+ * published tarball — e.g. templates authored under repo-root `docs/templates/`
+ * but shipped under `catalog/docs/templates/` because the npm `files` list
+ * includes `catalog/` and not `docs/`. Prefers the dev/source location and
+ * falls back to the shipped one, mirroring `bin/_run.js`'s source→built path
+ * translation. Falls back to cwd-relative on the first candidate when none
+ * exist, matching `resolvePackageAsset`'s last-resort behavior.
+ */
+export declare function resolvePackageAssetPreferred(candidates: readonly string[]): string;
 //# sourceMappingURL=package-assets.d.ts.map

package/dist/esm/blueprint/utils/package-assets.js

@@ -1,10 +1,10 @@
 import { existsSync } from 'node:fs';
 import path from 'node:path';
 /**
- * Walk up from this file's location until the given path (relative to the
- * package root) is found. Works whether running from src/ or dist/esm/.
+ * Walk up from this file's location looking for `relativeFromRoot`. Returns the
+ * first existing match, or `null` if none is found within the ancestor budget.
  */
-export function resolvePackageAsset(relativeFromRoot) {
+function findPackageAsset(relativeFromRoot) {
     let dir = path.dirname(new URL(import.meta.url).pathname);
     for (let i = 0; i < 8; i++) {
         const candidate = path.join(dir, relativeFromRoot);
@@ -15,6 +15,35 @@ export function resolvePackageAsset(relativeFromRoot) {
             break;
         dir = parent;
     }
-    return path.join(process.cwd(), relativeFromRoot);
+    return null;
+}
+/**
+ * Walk up from this file's location until the given path (relative to the
+ * package root) is found. Works whether running from src/ or dist/esm/.
+ */
+export function resolvePackageAsset(relativeFromRoot) {
+    return findPackageAsset(relativeFromRoot) ?? path.join(process.cwd(), relativeFromRoot);
+}
+/**
+ * Resolve the first existing candidate, in priority order. Use when an asset
+ * lives at one path in the source checkout but a different path in the
+ * published tarball — e.g. templates authored under repo-root `docs/templates/`
+ * but shipped under `catalog/docs/templates/` because the npm `files` list
+ * includes `catalog/` and not `docs/`. Prefers the dev/source location and
+ * falls back to the shipped one, mirroring `bin/_run.js`'s source→built path
+ * translation. Falls back to cwd-relative on the first candidate when none
+ * exist, matching `resolvePackageAsset`'s last-resort behavior.
+ */
+export function resolvePackageAssetPreferred(candidates) {
+    for (const relativeFromRoot of candidates) {
+        const found = findPackageAsset(relativeFromRoot);
+        if (found)
+            return found;
+    }
+    const primary = candidates[0];
+    if (primary === undefined) {
+        throw new Error('resolvePackageAssetPreferred requires at least one candidate path');
+    }
+    return path.join(process.cwd(), primary);
 }
 //# sourceMappingURL=package-assets.js.map

package/dist/esm/build/sync-catalog-doc-templates.d.ts

@@ -0,0 +1,23 @@
+#!/usr/bin/env bun
+/**
+ * sync-catalog-doc-templates.ts
+ *
+ * `docs/templates/` (repo root) is the editable source of truth for the
+ * blueprint / doc templates. `catalog/docs/templates/` is the published +
+ * scaffolded mirror: the npm `files` list ships `catalog/` but NOT repo-root
+ * `docs/` (which holds internal docs that must stay private), and `wp init`
+ * scaffolds templates into a consumer from `catalog/docs/templates/`.
+ *
+ * The two MUST stay byte-identical. Nothing synced them before, so they
+ * drifted — this script regenerates the mirror from the source and is wired
+ * into the build. The colocated drift test fails CI if they ever diverge.
+ *
+ * Default: regenerate the mirror from the source.
+ * `--check`: exit non-zero and list drift without writing (CI / pre-publish).
+ */
+/**
+ * Names that are out of sync between source and mirror: content mismatch,
+ * missing from the mirror, or orphaned in the mirror.
+ */
+export declare function diffDocTemplateMirror(): string[];
+//# sourceMappingURL=sync-catalog-doc-templates.d.ts.map

package/dist/esm/build/sync-catalog-doc-templates.js

@@ -0,0 +1,93 @@
+#!/usr/bin/env bun
+/**
+ * sync-catalog-doc-templates.ts
+ *
+ * `docs/templates/` (repo root) is the editable source of truth for the
+ * blueprint / doc templates. `catalog/docs/templates/` is the published +
+ * scaffolded mirror: the npm `files` list ships `catalog/` but NOT repo-root
+ * `docs/` (which holds internal docs that must stay private), and `wp init`
+ * scaffolds templates into a consumer from `catalog/docs/templates/`.
+ *
+ * The two MUST stay byte-identical. Nothing synced them before, so they
+ * drifted — this script regenerates the mirror from the source and is wired
+ * into the build. The colocated drift test fails CI if they ever diverge.
+ *
+ * Default: regenerate the mirror from the source.
+ * `--check`: exit non-zero and list drift without writing (CI / pre-publish).
+ */
+import { cpSync, existsSync, mkdirSync, readdirSync, readFileSync, rmSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { argv, exit } from 'node:process';
+import { fileURLToPath } from 'node:url';
+const PACKAGE_ROOT = dirname(dirname(import.meta.dirname));
+const SOURCE_DIR = join(PACKAGE_ROOT, 'docs', 'templates');
+const MIRROR_DIR = join(PACKAGE_ROOT, 'catalog', 'docs', 'templates');
+function listFiles(dir) {
+    if (!existsSync(dir))
+        return [];
+    return readdirSync(dir, { withFileTypes: true })
+        .filter((entry) => entry.isFile())
+        .map((entry) => entry.name)
+        .sort();
+}
+/**
+ * Names that are out of sync between source and mirror: content mismatch,
+ * missing from the mirror, or orphaned in the mirror.
+ */
+export function diffDocTemplateMirror() {
+    const sourceFiles = listFiles(SOURCE_DIR);
+    const mirrorFiles = listFiles(MIRROR_DIR);
+    const names = [...new Set([...sourceFiles, ...mirrorFiles])].sort();
+    const drift = [];
+    for (const name of names) {
+        const inSource = sourceFiles.includes(name);
+        const inMirror = mirrorFiles.includes(name);
+        if (!inSource || !inMirror) {
+            drift.push(name);
+            continue;
+        }
+        if (readFileSync(join(SOURCE_DIR, name), 'utf8') !== readFileSync(join(MIRROR_DIR, name), 'utf8')) {
+            drift.push(name);
+        }
+    }
+    return drift;
+}
+/** Regenerate the mirror from the source: copy every file, drop orphans. */
+function syncDocTemplateMirror() {
+    mkdirSync(MIRROR_DIR, { recursive: true });
+    const sourceFiles = listFiles(SOURCE_DIR);
+    for (const name of listFiles(MIRROR_DIR)) {
+        if (!sourceFiles.includes(name))
+            rmSync(join(MIRROR_DIR, name));
+    }
+    for (const name of sourceFiles) {
+        cpSync(join(SOURCE_DIR, name), join(MIRROR_DIR, name));
+    }
+    return sourceFiles.length;
+}
+function main() {
+    if (!existsSync(SOURCE_DIR)) {
+        console.error(`doc templates source not found: ${SOURCE_DIR}`);
+        exit(1);
+    }
+    if (argv.includes('--check')) {
+        const drift = diffDocTemplateMirror();
+        if (drift.length > 0) {
+            console.error([
+                'catalog/docs/templates/ is out of sync with docs/templates/:',
+                ...drift.map((name) => `  - ${name}`),
+                'Run `bun src/build/sync-catalog-doc-templates.ts` and commit the result.',
+            ].join('\n'));
+            exit(1);
+        }
+        console.log('catalog/docs/templates/ is in sync with docs/templates/');
+        return;
+    }
+    const count = syncDocTemplateMirror();
+    console.log(`Synced ${count} template(s) → catalog/docs/templates/`);
+}
+// Run as a script, but stay side-effect-free when imported (e.g. by the test).
+if (fileURLToPath(import.meta.url) === argv[1]) {
+    main();
+}
+//# sourceMappingURL=sync-catalog-doc-templates.js.map

package/dist/esm/cli/commands/audit.js

@@ -9,6 +9,7 @@ import { existsSync, readFileSync } from 'node:fs';
 import path from 'node:path';
 import { runAuditDispatch } from './audit-core.js';
 import { runStryker } from '#audit/run-stryker';
+import { resolveAuditScriptPath } from '#audit/resolve-audit-script';
 const REPO_AUDIT_REGISTRY = {
     'catalog-drift': async (root) => (await import('#audit/repo-guardrails')).auditCatalogDrift(root),
     'package-surface': async (root) => (await import('#audit/package-surface')).auditPackageSurface(root),
@@ -119,13 +120,7 @@ const AUDIT_KINDS = [
 ];
 const AUDIT_KIND_LIST = AUDIT_KINDS.join(', ');
 function resolveAuditScript(name) {
-    const fromSource = new URL(`../../audit/${name}`, import.meta.url);
-    if (existsSync(fromSource)) {
-        return fromSource.pathname;
-    }
-    const bundleDir = path.dirname(new URL(import.meta.url).pathname);
-    const packageRoot = path.resolve(bundleDir, '..');
-    return path.join(packageRoot, 'src', 'audit', name);
+    return resolveAuditScriptPath(name, { moduleUrl: import.meta.url });
 }
 async function runAuditScript(script, extraArgs) {
     const runtime = process.env.BUN_INSTALL ? 'bun' : 'bun';

package/dist/esm/cli/commands/blueprint/router.js

@@ -6,7 +6,7 @@ import { blueprintToSpecKit } from '#export/spec-kit/index';
 import { getProjectRoot } from '#cli/utils';
 import { resolveBlueprintRoot } from '#utils/blueprint-root';
 import { applyBlueprintLifecycleToFile, BlueprintCreationService, BlueprintService, complexitySchema, relativeBlueprintSlug, parseBlueprint, planStatusSchema, runBlueprintAudit, resolveBlueprintFile, serializeBlueprint, validateAllTasksDone, } from '#local';
-import { resolvePackageAsset } from '#utils/package-assets';
+import { resolvePackageAssetPreferred } from '#utils/package-assets';
 import { describeBlueprintExecutionRuntime, buildBlueprintLaunchSpec, buildStoppedRuntimeEvidence, controlBlueprintExecution, initializeBlueprintExecutionProgressBridge, launchBlueprintExecution, persistBlueprintExecutionArtifacts, persistBlueprintExecutionMetadata, recordLaunchFailure, reconcileBlueprintRuntimeSnapshot, readBlueprintExecutionState, syncBlueprintExecutionProgress, writeBlueprintRuntimeSnapshot, } from './execution.js';
 import { advanceTask as advanceTaskMutation, finalizeBlueprint as finalizeBlueprintMutation, promoteBlueprint as promoteBlueprintMutation, } from './mutations.js';
 import { BlueprintAuditFailedError, executeBlueprintSubcommand } from './router-dispatch.js';
@@ -40,7 +40,10 @@ function assertBlueprintCanMoveToStatus(blueprint, nextStatus) {
  * when the lookup fails in unrelated contexts (e.g. `wp --help`).
  */
 function resolveRepoBlueprintTemplatePath() {
-    return resolvePackageAsset('docs/templates/blueprint.md');
+    return resolvePackageAssetPreferred([
+        'docs/templates/blueprint.md',
+        'catalog/docs/templates/blueprint.md',
+    ]);
 }
 function todayIsoDate() {
     return new Date().toISOString().split('T')[0] ?? new Date().toISOString();

package/dist/esm/cli/commands/blueprint/template-resolver.js

@@ -1,12 +1,16 @@
 import { readdirSync } from 'node:fs';
 import path from 'node:path';
-import { resolvePackageAsset } from '#utils/package-assets.js';
+import { resolvePackageAssetPreferred } from '#utils/package-assets.js';
 /**
- * Default templates directory: docs/templates/ resolved relative to the
- * package root (same strategy as resolveRepoBlueprintTemplatePath in router.ts).
+ * Default templates directory: docs/templates/ in a source checkout, falling
+ * back to the shipped catalog/docs/templates/ in the published package (same
+ * strategy as resolveRepoBlueprintTemplatePath in router.ts).
  */
 function defaultTemplatesDir() {
-    return path.dirname(resolvePackageAsset('docs/templates/blueprint.md'));
+    return path.dirname(resolvePackageAssetPreferred([
+        'docs/templates/blueprint.md',
+        'catalog/docs/templates/blueprint.md',
+    ]));
 }
 /**
  * List available templates from `templatesDir` (defaults to docs/templates/).

package/dist/esm/cli/commands/init/host-visibility.js

@@ -5,6 +5,8 @@ export const AGENT_HOSTS = ['codex', 'claude', 'opencode'];
 export const REQUIRED_CORE_CAPABILITIES = ['verify', 'plan-refine'];
 export const VISIBILITY_STATUSES = ['visible-now', 'visible-after-restart', 'not-visible'];
 export function parseAgentHosts(value) {
+    if (value?.trim() === 'none')
+        return [];
     if (!value || value.trim().length === 0 || value.trim() === 'all')
         return [...AGENT_HOSTS];
     const out = [];
@@ -19,7 +21,7 @@ export function parseAgentHosts(value) {
             unknown.push(token);
     }
     if (unknown.length > 0) {
-        throw new Error(`Unknown host(s): ${unknown.join(', ')}. Expected one of: ${AGENT_HOSTS.join(', ')}, all.`);
+        throw new Error(`Unknown host(s): ${unknown.join(', ')}. Expected one of: ${AGENT_HOSTS.join(', ')}, all, none.`);
     }
     return [...new Set(out)];
 }
@@ -54,7 +56,7 @@ export function hostSkillRoots(repoRoot, host, homeDir = homedir()) {
     }
 }
 export function auditHostSkillVisibility(input) {
-    const selectedHosts = input.hosts && input.hosts.length > 0 ? [...input.hosts] : [...AGENT_HOSTS];
+    const selectedHosts = input.hosts ? [...input.hosts] : [...AGENT_HOSTS];
     const requiredCapabilities = input.requiredCapabilities && input.requiredCapabilities.length > 0
         ? [...input.requiredCapabilities]
         : [...REQUIRED_CORE_CAPABILITIES];

package/dist/esm/cli/commands/init/index.js

@@ -6,7 +6,7 @@
  * config keys, and generated surfaces it owns while leaving consumer-owned
  * divergent files untouched unless `--overwrite` is passed.
  */
-import { existsSync, mkdirSync, writeFileSync } from 'node:fs';
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { basename, dirname, join, relative } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { isTelemetryEnabled, reportTthw } from '#telemetry/setup-tthw';
@@ -26,7 +26,7 @@ import { GENERATED_PATHS_BLOCK, patchGitignore } from './gitignore-patcher.js';
 import { scaffoldAgentsMd } from './scaffold-agents-md.js';
 import { scaffoldBlueprints } from './scaffold-blueprints.js';
 import { scaffoldDocs } from './scaffold-docs.js';
-import { scaffoldBaseKit } from './scaffold-base-kit.js';
+import { BASE_KIT_QUALITY_TARGETS, collectRuntimeContractGuidance, scaffoldBaseKit, } from './scaffold-base-kit.js';
 import { scaffoldMonorepoNav } from './scaffold-monorepo-nav.js';
 import { REQUIRED_CORE_CAPABILITIES, auditHostSkillVisibility, parseAgentHosts, serializeHostVisibility, summarizeHostVisibility, } from './host-visibility.js';
 import { scaffoldAgentHooks, trustCodexWebpressoHooksForRepo, trustCodexPresetHooksForUser, } from './scaffolders/agent-hooks/index.js';
@@ -103,6 +103,31 @@ function inferBlueprintsDirOverride(repoRoot, existingConfig) {
     }
     return relativePath;
 }
+function readPackageJsonSafe(repoRoot) {
+    const packageJsonPath = join(repoRoot, 'package.json');
+    if (!existsSync(packageJsonPath)) {
+        return null;
+    }
+    try {
+        return JSON.parse(readFileSync(packageJsonPath, 'utf8'));
+    }
+    catch {
+        return null;
+    }
+}
+function printRuntimeContractGuidance(packageJson) {
+    const guidance = collectRuntimeContractGuidance(packageJson);
+    console.log('\nRuntime-owned tooling contract:');
+    console.log('  wp now owns execution for test, e2e, lint, format, and typecheck.');
+    console.log('  Keep local dependencies that your tests, configs, or tsconfig types import directly.');
+    if (guidance.keepLocalAuthoringDeps.length > 0) {
+        console.log(`  Keep local authoring deps when imported directly: ${guidance.keepLocalAuthoringDeps.join(', ')}`);
+    }
+    if (guidance.reviewForRemovalDeps.length > 0) {
+        console.log(`  Review execution-only deps for removal if they only powered local binaries: ${guidance.reviewForRemovalDeps.join(', ')}`);
+    }
+    console.log('  Do not blanket-remove devDependencies just because wp can execute the tool.');
+}
 export async function runInit(flags) {
     const startMs = Date.now();
     const cwd = flags.cwd ?? process.cwd();
@@ -612,6 +637,14 @@ export async function runInit(flags) {
         console.log(`  drifted:         ${summary.drifted}`);
         if (options.dryRun)
             console.log(`  would-change:    ${summary['skipped-dry']}`);
+        if (tier3Selection.includes('base-kit')) {
+            const qualityTargets = new Set(BASE_KIT_QUALITY_TARGETS);
+            const qualityResults = baseKitResults.filter((result) => qualityTargets.has(relative(consumer.repoRoot, result.targetPath).replaceAll('\\', '/')));
+            const qualityCreated = qualityResults.filter((result) => result.action === 'created').length;
+            const qualityPreserved = qualityResults.filter((result) => result.action === 'identical').length;
+            const qualityDryRun = qualityResults.filter((result) => result.action === 'skipped-dry').length;
+            console.log(`  repo quality scaffold: ${options.dryRun ? `${qualityDryRun} would be created` : `${qualityCreated} created, ${qualityPreserved} preserved`}`);
+        }
         if (summary.drifted > 0) {
             console.log('\n  Note: some consumer-owned files exist with different content and were left unchanged.\n' +
                 '  Review the drift or re-run with `--overwrite` to force eligible managed files.');
@@ -629,8 +662,13 @@ export async function runInit(flags) {
             };
             writeConfig(consumer.repoRoot, config);
             console.log('\nHost skill visibility:');
-            for (const line of summarizeHostVisibility(consumer.repoRoot, visibilityAudit)) {
-                console.log(line);
+            if (visibilityAudit.selectedHosts.length === 0) {
+                console.log('  hosts: - skipped (--host none)');
+            }
+            else {
+                for (const line of summarizeHostVisibility(consumer.repoRoot, visibilityAudit)) {
+                    console.log(line);
+                }
             }
             const missing = visibilityAudit.results.filter((result) => result.status === 'not-visible');
             if (missing.length > 0) {
@@ -659,7 +697,8 @@ export async function runInit(flags) {
                 }
             }
         }
-        console.log('\nwp init: done.');
+        printRuntimeContractGuidance(options.dryRun ? consumer.packageJson : readPackageJsonSafe(consumer.repoRoot) ?? consumer.packageJson);
+        console.log('\nwp init: setup phases finished.');
         if (omxFailure === 'not-found')
             return EXIT_SETUP_FAIL;
         if (omxFailure === 'spawn-failed')
@@ -698,7 +737,7 @@ export async function runInit(flags) {
         if (!options.dryRun) {
             console.log([
                 '',
-                '✅ Setup complete.',
+                '✅ Setup complete for the verified phases above.',
                 '',
                 '  Next: wp blueprint new "your first task"',
                 '        wp gain          # token savings after your first session',
@@ -730,7 +769,7 @@ export function registerInitCommand(cli, commandName = 'init') {
         .command(commandName, description)
         .option('--with <skills>', withHelp)
         .option('--without <skills>', withoutHelp)
-        .option('--host <hosts>', 'Comma-separated host targets: codex, claude, opencode, all')
+        .option('--host <hosts>', 'Comma-separated host targets: codex, claude, opencode, all, none')
         .option('--all', 'Install every skill (Tier-1 + Tier-2 + all Tier-3)')
         .option('--overwrite', 'Force full-file replacement for eligible managed files (default: reconcile owned content and preserve divergent consumer files)')
         .option('--dry-run', 'Show what would change without writing anything')

package/dist/esm/cli/commands/init/scaffold-base-kit.d.ts

@@ -5,5 +5,17 @@ export interface ScaffoldBaseKitInput {
     options: MergeOptions;
     globalInstall?: boolean;
 }
+export interface RuntimeContractGuidance {
+    keepLocalAuthoringDeps: string[];
+    reviewForRemovalDeps: string[];
+}
+interface PackageJsonLike {
+    dependencies?: Record<string, string>;
+    devDependencies?: Record<string, string>;
+    [key: string]: unknown;
+}
+export declare function collectRuntimeContractGuidance(packageJson: PackageJsonLike | null | undefined): RuntimeContractGuidance;
+export declare const BASE_KIT_QUALITY_TARGETS: string[];
 export declare function scaffoldBaseKit(input: ScaffoldBaseKitInput): MergeResult[];
+export {};
 //# sourceMappingURL=scaffold-base-kit.d.ts.map

package/dist/esm/cli/commands/init/scaffold-base-kit.js

@@ -1,6 +1,30 @@
 import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { dirname, join } from 'node:path';
 import { writeFileMerged } from './merge.js';
+const AUTHORING_TIME_DEPENDENCIES = [
+    'vitest',
+    '@playwright/test',
+    '@testing-library/jest-dom',
+    'typescript',
+];
+const EXECUTION_ONLY_REVIEW_DEPENDENCIES = [
+    'oxlint',
+    'oxfmt',
+    'prettier',
+    'markdownlint-cli2',
+    'stryker',
+];
+export function collectRuntimeContractGuidance(packageJson) {
+    const deps = {
+        ...readDependencyBucket(packageJson?.['dependencies']),
+        ...readDependencyBucket(packageJson?.['devDependencies']),
+    };
+    const installed = new Set(Object.keys(deps));
+    return {
+        keepLocalAuthoringDeps: AUTHORING_TIME_DEPENDENCIES.filter((name) => installed.has(name)),
+        reviewForRemovalDeps: EXECUTION_ONLY_REVIEW_DEPENDENCIES.filter((name) => installed.has(name)),
+    };
+}
 /** Template files relative to `catalog/base-kit/`, and their target paths relative to repoRoot. */
 const TEMPLATE_MAP = [
     ['.editorconfig.tmpl', '.editorconfig'],
@@ -18,6 +42,19 @@ const TEMPLATE_MAP = [
     ['test/.gitkeep.tmpl', 'test/.gitkeep'],
     ['e2e/.gitkeep.tmpl', 'e2e/.gitkeep'],
 ];
+/** Consumer-owned quality scaffold: create for fresh repos, never clobber. */
+const QUALITY_BOOTSTRAP_ONLY_MAP = [
+    ['tsconfig.json.tmpl', 'tsconfig.json'],
+    ['vitest.config.ts.tmpl', 'vitest.config.ts'],
+    ['oxlint.config.ts.tmpl', 'oxlint.config.ts'],
+    ['stryker.config.ts.tmpl', 'stryker.config.ts'],
+    ['playwright.config.ts.tmpl', 'playwright.config.ts'],
+    ['src/quality-sample.ts.tmpl', 'src/quality-sample.ts'],
+    ['src/quality-sample.test.ts.tmpl', 'src/quality-sample.test.ts'],
+    ['e2e/fixtures/smoke.html.tmpl', 'e2e/fixtures/smoke.html'],
+    ['e2e/smoke.spec.ts.tmpl', 'e2e/smoke.spec.ts'],
+];
+export const BASE_KIT_QUALITY_TARGETS = QUALITY_BOOTSTRAP_ONLY_MAP.map(([, targetRel]) => targetRel);
 /**
  * Bootstrap-only templates: the scaffolder writes them when absent (so a
  * fresh repo gets sane defaults) but NEVER overwrites them once they exist
@@ -75,35 +112,85 @@ function mergePackageJson(repoRoot, options, globalInstall = false) {
     const hasVerifySecrets = typeof scripts['verify:secrets'] === 'string';
     const hasSecretQuarantineAudit = typeof scripts['audit:secret-provider-quarantine'] === 'string';
     const hasPrepareScript = typeof scripts['prepare'] === 'string';
+    const hasLintScript = typeof scripts['lint'] === 'string';
+    const hasTypecheckScript = typeof scripts['typecheck'] === 'string';
+    const hasTestScript = typeof scripts['test'] === 'string' && !isNpmInitPlaceholderTestScript(scripts['test']);
+    const hasMutationScript = typeof scripts['mutation'] === 'string';
+    const hasTestMutationScript = typeof scripts['test:mutation'] === 'string';
+    const hasE2eScript = typeof scripts['e2e'] === 'string';
+    const hasQaScript = typeof scripts['qa'] === 'string';
     const verifyPathsScript = 'WP_SKIP_UPDATE_CHECK=1 wp audit absolute-path-policy --root .';
     const verifySecretsScript = 'bun scripts/check-no-dev-vars.ts';
     const secretQuarantineAuditScript = 'bun scripts/audit-secret-provider-quarantine.ts';
+    const lintScript = 'wp lint src e2e *.config.ts';
+    const typecheckScript = 'wp typecheck';
+    const testScript = 'wp test --file vitest.config.ts';
+    const mutationScript = 'wp test --mutation';
+    const testMutationScript = 'stryker run stryker.config.ts';
+    const e2eScript = 'wp e2e --config playwright.config.ts';
+    const qaScript = [
+        'wp lint src e2e *.config.ts',
+        'wp typecheck',
+        'wp test --file vitest.config.ts',
+        'wp test --mutation',
+        'wp e2e --config playwright.config.ts',
+    ].join(' && ');
     const devDeps = (pkg['devDependencies'] ?? {});
-    const hasAgentKitDevDep = typeof devDeps['webpresso'] === 'string';
-    const shouldSkipSelfInstall = packageName === 'webpresso';
+    const hasAgentKitDevDep = typeof devDeps['@webpresso/agent-kit'] === 'string';
+    const hasLegacyAgentKitDevDep = typeof devDeps['webpresso'] === 'string';
+    const shouldSkipSelfInstall = packageName === '@webpresso/agent-kit' || packageName === 'webpresso';
     const shouldManageAgentKitAsGlobal = globalInstall && !shouldSkipSelfInstall;
+    const requiredAuthoringDeps = {
+        '@playwright/test': 'latest',
+        '@stryker-mutator/core': 'latest',
+        '@stryker-mutator/vitest-runner': 'latest',
+        '@types/node': 'latest',
+        typescript: 'latest',
+        vitest: 'latest',
+    };
     if (alreadyHasEngines &&
         alreadyHasPm &&
-        (shouldSkipSelfInstall || shouldManageAgentKitAsGlobal || hasAgentKitDevDep) &&
+        (shouldSkipSelfInstall ||
+            shouldManageAgentKitAsGlobal ||
+            hasAgentKitDevDep ||
+            hasLegacyAgentKitDevDep) &&
+        Object.keys(requiredAuthoringDeps).every((name) => typeof devDeps[name] === 'string') &&
         (shouldSkipSelfInstall || hasSetupAgent) &&
         (shouldSkipSelfInstall || hasVerifyPaths) &&
         (shouldSkipSelfInstall || hasVerifySecrets) &&
         (shouldSkipSelfInstall || hasSecretQuarantineAudit) &&
-        (shouldSkipSelfInstall || hasPrepareScript)) {
+        (shouldSkipSelfInstall || hasPrepareScript) &&
+        hasLintScript &&
+        hasTypecheckScript &&
+        hasTestScript &&
+        hasMutationScript &&
+        hasTestMutationScript &&
+        hasE2eScript &&
+        hasQaScript) {
         return { targetPath: pkgPath, action: 'identical' };
     }
     pkg['engines'] = { ...existing, node: engines.node };
     if (!alreadyHasPm)
         pkg['packageManager'] = packageManager;
+    if (typeof pkg['type'] !== 'string')
+        pkg['type'] = 'module';
     // Ensure husky is in devDependencies so `vp exec husky init` works
     if (!devDeps['husky']) {
         devDeps['husky'] = '^9.0.0';
     }
-    if (!shouldSkipSelfInstall && !shouldManageAgentKitAsGlobal && !hasAgentKitDevDep) {
+    if (!shouldSkipSelfInstall &&
+        !shouldManageAgentKitAsGlobal &&
+        !hasAgentKitDevDep &&
+        !hasLegacyAgentKitDevDep) {
         // Keep consumers on the currently published dist-tag rather than a
         // repo-internal path. Do not wire this through `prepare`: `wp` is not
         // reliably on PATH during `vp install`, so `setup:agent` stays opt-in.
-        devDeps['webpresso'] = 'latest';
+        devDeps['@webpresso/agent-kit'] = 'latest';
+    }
+    for (const [name, version] of Object.entries(requiredAuthoringDeps)) {
+        if (!devDeps[name]) {
+            devDeps[name] = version;
+        }
     }
     pkg['devDependencies'] = devDeps;
     if (!shouldSkipSelfInstall && !hasSetupAgent) {
@@ -121,6 +208,27 @@ function mergePackageJson(repoRoot, options, globalInstall = false) {
     if (!shouldSkipSelfInstall && !hasPrepareScript) {
         scripts['prepare'] = 'husky';
     }
+    if (!hasLintScript) {
+        scripts['lint'] = lintScript;
+    }
+    if (!hasTypecheckScript) {
+        scripts['typecheck'] = typecheckScript;
+    }
+    if (!hasTestScript) {
+        scripts['test'] = testScript;
+    }
+    if (!hasMutationScript) {
+        scripts['mutation'] = mutationScript;
+    }
+    if (!hasTestMutationScript) {
+        scripts['test:mutation'] = testMutationScript;
+    }
+    if (!hasE2eScript) {
+        scripts['e2e'] = e2eScript;
+    }
+    if (!hasQaScript) {
+        scripts['qa'] = qaScript;
+    }
     if (Object.keys(scripts).length > 0) {
         pkg['scripts'] = scripts;
     }
@@ -161,6 +269,24 @@ export function scaffoldBaseKit(input) {
         writeFileSync(targetPath, content);
         results.push({ targetPath, action: 'created' });
     }
+    for (const [tmplRel, targetRel] of QUALITY_BOOTSTRAP_ONLY_MAP) {
+        const tmplPath = join(baseKitDir, tmplRel);
+        if (!existsSync(tmplPath))
+            continue;
+        const targetPath = join(repoRoot, targetRel);
+        if (existsSync(targetPath)) {
+            results.push({ targetPath, action: 'identical' });
+            continue;
+        }
+        const content = readFileSync(tmplPath, 'utf8');
+        if (options.dryRun) {
+            results.push({ targetPath, action: 'skipped-dry' });
+            continue;
+        }
+        mkdirSync(dirname(targetPath), { recursive: true });
+        writeFileSync(targetPath, content);
+        results.push({ targetPath, action: 'created' });
+    }
     // Make husky hook files executable
     if (!options.dryRun) {
         for (const [tmplRel, targetRel] of TEMPLATE_MAP) {
@@ -180,4 +306,13 @@ export function scaffoldBaseKit(input) {
     results.push(mergePackageJson(repoRoot, options, globalInstall));
     return results;
 }
+function readDependencyBucket(value) {
+    if (!value || typeof value !== 'object') {
+        return {};
+    }
+    return Object.fromEntries(Object.entries(value).filter((entry) => typeof entry[0] === 'string' && typeof entry[1] === 'string'));
+}
+function isNpmInitPlaceholderTestScript(value) {
+    return /^echo ['"]?Error: no test specified['"]? && exit 1$/u.test(value.trim());
+}
 //# sourceMappingURL=scaffold-base-kit.js.map