agent-economy 0.2.1 → 0.2.2

package/README.md

@@ -48,6 +48,16 @@ You can't police teammates' machines — you can police the repo:
 - run: npx agent-economy verify --min-level strict
 ```
 
+## Development
+
+```bash
+npm test                              # hermetic node:test suite
+git config core.hooksPath .githooks   # pre-commit verify (one-time per clone)
+node src/cli.js packs --check         # curated specs vs upstream HEAD (weekly in CI)
+```
+
+Releases: push a tag (`git tag vX.Y.Z && git push --tags`) — the `release` workflow runs the tests, then publishes to npm via **OIDC trusted publishing** (no token secret). One-time setup on npmjs.com: package → Settings → Trusted Publisher → `markymakes-dev/agent-economy` · workflow `release.yml`.
+
 ## Packs
 
 Curated, attributed, pinned fetch-on-demand integrations - never vendored:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-economy",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "files": [
     "src",
     "packs",
@@ -15,6 +15,9 @@
     "ae": "src/cli.js",
     "economy": "src/cli.js"
   },
+  "scripts": {
+    "test": "node --test"
+  },
   "engines": {
     "node": ">=18"
   },

package/packs/registry.json

@@ -34,13 +34,12 @@
       "kind": "harness",
       "status": "curated",
       "install": [
-        { "from": ".agents/skills/strategic-compact", "to": "strategic-compact" },
         { "from": ".agents/skills/verification-loop", "to": "verification-loop" },
         { "from": ".agents/skills/change-impact", "to": "change-impact" },
         { "from": ".agents/skills/coding-standards", "to": "coding-standards" },
         { "from": ".agents/skills/security-review", "to": "security-review" }
       ],
-      "note": "Request-economy-relevant subset of ECC's harness skills (strategic-compact alone earns the install); ECC-specific skills like ecc-conventions deliberately excluded"
+      "note": "Request-economy-relevant subset of ECC's harness skills. strategic-compact excluded: it pushes manual /compact at token thresholds, which conflicts with proxy-based compaction (billion-context) that owns the compaction lane. ECC-specific skills like ecc-conventions deliberately excluded"
     },
     {
       "id": "anthropic-skills",

package/src/cli.js

@@ -162,6 +162,34 @@ async function installPack(id, dir) {
   }
 }
 
+async function checkPack(id) {
+  const reg = JSON.parse(fs.readFileSync(path.join(ROOT, "packs", "registry.json"), "utf8"));
+  const list = id ? reg.packs.filter((p) => p.id === id) : reg.packs.filter((p) => Array.isArray(p.install) && p.install.length);
+  if (!list.length) { console.error(id ? `  ✘ unknown pack "${id}"` : "  = no installable packs"); process.exit(id ? 2 : 0); }
+  const work = fs.mkdtempSync(path.join(os.tmpdir(), "ae-check-"));
+  let bad = 0;
+  try {
+    for (const p of list) {
+      const url = `https://codeload.github.com/${p.source}/tar.gz/refs/heads/${p.ref || "main"}`;
+      console.log(`  … ${p.id} (${p.source}@${p.ref || "main"})`);
+      const res = await fetch(url);
+      if (!res.ok) { console.log(`    ✘ download failed: HTTP ${res.status}`); bad++; continue; }
+      const tgz = path.join(work, `${p.id}.tgz`);
+      fs.writeFileSync(tgz, Buffer.from(await res.arrayBuffer()));
+      const r = spawnSync("tar", ["-tzf", tgz], { encoding: "utf8", maxBuffer: 128 * 1024 * 1024 });
+      if (r.status !== 0) { console.log("    ✘ tar listing failed"); bad++; continue; }
+      const files = new Set(r.stdout.split(/\r?\n/).map((f) => f.replace(/^[^/]+\//, "")));
+      const missing = p.install.filter((s) => !files.has(`${s.from}/SKILL.md`));
+      if (missing.length) { for (const s of missing) console.log(`    ✘ drift: ${s.from}/SKILL.md gone from upstream`); bad++; }
+      else console.log(`    ✔ ${p.install.length}/${p.install.length} specs present`);
+    }
+  } finally {
+    fs.rmSync(work, { recursive: true, force: true });
+  }
+  console.log(bad ? `  ✘ ${bad} pack(s) drifted — update packs/registry.json` : "  = all curated install specs match upstream HEAD");
+  process.exit(bad ? 1 : 0);
+}
+
 function listDir(p, filter) {
   try { return fs.readdirSync(p, { withFileTypes: true }).filter((d) => filter(d, p)).map((d) => d.name); }
   catch { return []; }
@@ -255,6 +283,7 @@ const HELP = `
     packs     List curated third-party rule/skill packs
               --install <id> [--dir <target>]   fetch + install a curated pack
                                                 (default target: ~/.claude/skills)
+              --check [id]                      validate install specs against upstream HEAD
     skill     Install the agent-economy-setup skill (teaches any agent to run ae)
     help      This text
 
@@ -306,6 +335,8 @@ async function main() {
   if (cmd === "skill") return skill(get("--dir"));
   if (cmd === "inventory") return inventory();
   if (cmd === "packs") {
+    const cid = get("--check");
+    if (hasFlag("--check")) return checkPack(cid && !cid.startsWith("--") ? cid : undefined);
     if (get("--install")) return installPack(get("--install"), get("--dir"));
     return packs();
   }