beth-copilot 1.0.10 → 1.0.12

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (13) hide show
  1. package/CHANGELOG.md +130 -0
  2. package/README.md +8 -0
  3. package/assets/beth-portrait-small.txt +13 -0
  4. package/assets/beth-portrait.txt +60 -0
  5. package/assets/beth-questioning.png +0 -0
  6. package/assets/yellowstone-beth.png +0 -0
  7. package/bin/beth-animation.sh +155 -0
  8. package/bin/cli.js +423 -12
  9. package/bin/lib/animation.js +189 -0
  10. package/bin/lib/pathValidation.js +233 -0
  11. package/bin/lib/pathValidation.test.js +280 -0
  12. package/package.json +10 -2
  13. package/sbom.json +129 -0
package/CHANGELOG.md ADDED
@@ -0,0 +1,130 @@
1
+ # Changelog
2
+
3
+ > *"Here's what changed. I don't repeat myself."*
4
+
5
+ All notable changes to Beth are documented here. Format based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), versioning follows [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
6
+
7
+ ---
8
+
9
+ ## [1.0.11] - 2026-02-01
10
+
11
+ ### Changed
12
+ - Reverted to fire animation for BETH banner (the way it should be)
13
+
14
+ ### Fixed
15
+ - SBOM regeneration for accurate dependency tracking
16
+
17
+ ---
18
+
19
+ ## [1.0.10] - 2026-01-31
20
+
21
+ ### Added
22
+ - **Path validation security** — 33 tests covering traversal detection, injection prevention, and allowlist validation
23
+ - **Work tracking for all agents** — Every agent now uses the dual tracking system (beads for agents, Backlog.md for humans)
24
+ - **Cross-platform npm installation** — Consistent installation across macOS, Linux, and Windows
25
+
26
+ ### Security
27
+ - Path validation for user-supplied binary paths to prevent command injection
28
+ - Documented shell:true security constraints in SECURITY.md
29
+
30
+ ---
31
+
32
+ ## [1.0.6] - 2026-01-29
33
+
34
+ ### Added
35
+ - **Multi-agent coordination system** — Epic patterns with dependencies, parallel execution, and hierarchical issue tracking
36
+ - **Beads integration** — Structured work tracking with `bd` CLI for agent memory and coordination
37
+ - **Subagent templates** — Ready-to-use patterns for spawning specialists
38
+
39
+ ### Changed
40
+ - Beth instructions now include full orchestration workflows
41
+ - Updated SYSTEM-FLOW.md with multi-agent patterns
42
+
43
+ ---
44
+
45
+ ## [1.0.5] - 2026-01-28
46
+
47
+ ### Added
48
+ - Beads multi-agent coordination documentation
49
+
50
+ ---
51
+
52
+ ## [1.0.4] - 2026-01-27
53
+
54
+ ### Added
55
+ - **backlog.md CLI installation prompt** — Auto-prompts during init for human-readable tracking
56
+ - **.vscode/settings.json template** — Auto-configured agent settings for VS Code
57
+
58
+ ---
59
+
60
+ ## [1.0.3] - 2026-01-26
61
+
62
+ ### Added
63
+ - **Version check** — CLI warns users when a newer version is available
64
+
65
+ ---
66
+
67
+ ## [1.0.2] - 2026-01-25
68
+
69
+ ### Added
70
+ - **Security automation** — GitHub Actions workflow with npm audit, gitleaks, CodeQL, SBOM generation
71
+ - **Pre-commit hooks** — Secret scanning with gitleaks before commits
72
+ - **Subagent delegation settings** — Documentation for enabling autonomous agent coordination
73
+
74
+ ### Changed
75
+ - Clarified Product Manager vs UX Designer roles in documentation
76
+
77
+ ### Fixed
78
+ - Security hardening for enterprise production readiness
79
+
80
+ ---
81
+
82
+ ## [1.0.1] - 2026-01-24
83
+
84
+ ### Added
85
+ - **Security Reviewer agent** — OWASP Top 10, compliance audits, threat modeling
86
+ - **Security Analysis skill** — Vulnerability assessment workflows
87
+ - **MCP setup guide** — docs/MCP-SETUP.md with all optional servers
88
+ - **Installation guide** — docs/INSTALLATION.md with full setup instructions
89
+ - **Dependabot configuration** — Weekly npm/GH Actions updates with grouped PRs
90
+
91
+ ### Changed
92
+ - **Consolidated frontend-engineer into developer** — Developer now handles UI, full-stack, and shadcn-ui MCP integration
93
+ - Updated all agent handoffs to include security-reviewer
94
+
95
+ ### Security
96
+ - Full enterprise security review completed
97
+ - HIGH findings addressed
98
+ - SECURITY.md created with security policies
99
+
100
+ ---
101
+
102
+ ## [1.0.0] - 2026-01-23
103
+
104
+ ### Added
105
+ - **Beth orchestrator** — The ruthless, hyper-competent AI coordinator
106
+ - **Six specialist agents** — Product Manager, Researcher, UX Designer, Developer, Tester, (later Security Reviewer)
107
+ - **Five skills** — PRD generation, Framer components, Vercel React best practices, Web Design guidelines, shadcn-ui
108
+ - **npm package** — `npx beth-copilot init` for one-command installation
109
+ - **IDEO Design Thinking workflow** — Empathize → Define → Ideate → Prototype → Test
110
+ - **Dual tracking system** — beads for agents, Backlog.md for humans
111
+ - **ASCII art animation** — Beth's entrance with fire effect banner
112
+
113
+ ### Architecture
114
+ - Agent definition format with YAML frontmatter
115
+ - Skills as domain-knowledge modules loaded on-demand
116
+ - Subagent vs handoff patterns for different control levels
117
+ - Hierarchical issue tracking for complex workflows
118
+
119
+ ---
120
+
121
+ ## What's Next
122
+
123
+ See [Backlog.md](Backlog.md) for planned work:
124
+ - MCP skill enhancements (web search, Playwright, Azure, Microsoft Learn)
125
+ - Agent consistency review
126
+ - Additional skills for API security and performance profiling
127
+
128
+ ---
129
+
130
+ *"That's the history. Now stop looking backward and let's build something."*
package/README.md CHANGED
@@ -73,6 +73,7 @@ Beth's team comes equipped:
73
73
  | **Framer Components** | Build custom React components with property controls |
74
74
  | **React/Next.js Best Practices** | Vercel-grade performance patterns |
75
75
  | **Web Design Guidelines** | WCAG compliance, UI review, accessibility |
76
+ | **shadcn/ui** | Component library patterns, installation, and best practices |
76
77
  | **Security Analysis** | OWASP, threat modeling, vulnerability assessment |
77
78
 
78
79
  ## How Beth Works
@@ -220,6 +221,13 @@ Beth's agents work fine without them, but these make them smarter:
220
221
 
221
222
  Full details: [docs/MCP-SETUP.md](docs/MCP-SETUP.md)
222
223
 
224
+ ## Documentation
225
+
226
+ - [Installation Guide](docs/INSTALLATION.md) — Full setup instructions
227
+ - [MCP Setup](docs/MCP-SETUP.md) — Optional server integrations
228
+ - [Changelog](CHANGELOG.md) — Version history and updates
229
+ - [Security Policy](SECURITY.md) — Vulnerability reporting
230
+
223
231
  ## License
224
232
 
225
233
  MIT — Take it. Run it. Build empires.
package/assets/beth-portrait-small.txt ADDED
@@ -0,0 +1,13 @@
1
+ [38;2;218;165;32m .╭━━━━━━━╮.[0m
2
+ [38;2;218;165;32m ╭──╯[0m[38;2;235;210;160m ▒▓▓▓▓▒ [0m[38;2;218;165;32m╰──╮[0m
3
+ [38;2;218;165;32m ╱[0m[38;2;240;220;180m ▓██████████▓ [0m[38;2;218;165;32m╲[0m
4
+ [38;2;218;165;32m ╱[0m[38;2;235;215;170m ████[0m[38;2;139;90;43m▓▓[0m[38;2;235;215;170m██[0m[38;2;139;90;43m▓▓[0m[38;2;235;215;170m████ [0m[38;2;218;165;32m╲[0m
5
+ [38;2;218;165;32m │[0m[38;2;240;225;190m ███ [0m[38;2;70;110;150m◉[0m[38;2;240;225;190m ██ [0m[38;2;70;110;150m◉[0m[38;2;240;225;190m ███ [0m[38;2;218;165;32m│[0m
6
+ [38;2;218;165;32m │[0m[38;2;235;210;165m ███▄▄▄▄▄▄███ [0m[38;2;218;165;32m│[0m
7
+ [38;2;218;165;32m │[0m[38;2;230;200;150m ▀██[0m[38;2;180;80;80m▄══▄[0m[38;2;230;200;150m██▀ [0m[38;2;218;165;32m│[0m
8
+ [38;2;218;165;32m │[0m[38;2;220;190;140m ╰────╯ [0m[38;2;218;165;32m│[0m
9
+ [38;2;218;165;32m │[0m[38;2;200;175;130m ▓██████████▓ [0m[38;2;218;165;32m│[0m
10
+ [38;2;218;165;32m ╲[0m[38;2;180;155;110m ████████████ [0m[38;2;218;165;32m╱[0m
11
+ [38;2;218;165;32m ╲[0m[38;2;160;135;90m ▀██████████▀ [0m[38;2;218;165;32m╱[0m
12
+ [38;2;218;165;32m ╰───╮ ╭───╯[0m
13
+ [38;2;218;165;32m ╰──────╯[0m
package/assets/beth-portrait.txt ADDED
@@ -0,0 +1,60 @@
1
+                                    ::*########%%%%%######%%%*=*                                     
2
+                                   *+#####%%%####%#%########%%%%*+. .=*+:                            
3
+                                 :*%%#%###%%%%%%%%%%###%%%###%%%%#######+ .:-.                       
4
+                                :###%#######%%%###**###%%%%%%%%%%%%###%#%#%#+**=                     
5
+                               -+**######%%%#%#*#####*####%%%%%%############+-+*:                    
6
+                              .=*######%%%%###**##*##%%***####%%%%############*#+                    
7
+                              =+*###*##%***#****##*********#***#%%%#############*++.                 
8
+                              =+####%%%****#*******+#++*+*+*++*##%%###********#####                  
9
+                             :=*###%%%#*###****+*+=++=+*+**#****#%%#%%%##+++*****##.                 
10
+                             #####%%%##%%%%%%%#***###**#+####*###%###%%%#*+==+******:                
11
+                            +###%%%%#%#%%%%%%%%%%#%%#%%%%%#*#*+++#*###%%%#**+==+**###=               
12
+                           -###%%%%##%##%%#####**###%####%#+*####*#***###%%%#*+=+**##*:.             
13
+                          .#%####%#######**+**++**+**+**###=####**##*+*##%####**+=**###=             
14
+                         -*#####%##***##**+**+++*=+**+*******#*#*+**#*####%####**+=+*##+             
15
+                         =########***#********+**++**+*****++***#+****###########*+=**##             
16
+                        :#########**#####**#******************+******+***##**####**++**#:            
17
+                       .##################*#*#*****##*****#*#**+******+*******#**#*+++*#.            
18
+                       *################***###*****###*******##++**+++++*********#***+**=            
19
+                       ########*****************+**###++******#*+**++++++*****+*******+*#-           
20
+                      :########*+***+***********+***#*++********++++++++==***++++****+++*.           
21
+                      -########*+++++++++****+*++*+***++****+***++++=++++=+**+++++***+****:          
22
+                  .:.:=######***+**++++++****+++***+**+=***+++***+=====+++=*++=+++***++****          
23
+                  ==:-#######*****+++++++****+++*+++**++**+++=*+*+===-===+++++=++*****+****          
24
+                  :+##*###****###+++++++*****+++*+++**==+++===+=++=--=====+++++++**++*****#          
25
+               .--+*-*#*##****##+++++++******++***+**+==++==-=+=++=-::=====++++=+**++++***#          
26
+                .-=*######***#*+++++++******+****++**=-++===:==-==-----=====+++=+**+*++**+           
27
+               .=:###*###******++*+++******+**+*++**+-++==--:-====-:---======++**********=           
28
+                =#*+#######*******++*********++++**+-=+==-:::-===-:-+=:--=--===+++****###:           
29
+                .-+########**+**+++*****+**++++***+===--::..:-=+-:::=+:::=+=-===++**####+            
30
+                :+########****+++++++=====-==+++====--:.....:-=-::--:----=++=-=+++**###+             
31
+              .*######%%###**++=---=====-::---=-===-:....::::-::::-:-::==-===-==++**##-              
32
+              .*+*########*+=+=----=-:......:-==+*+=-...:::::    .:::-:-=--=--=+++***-               
33
+              .*=.=##*##****++=--===:::=----=+++*#*+-::--.==-::.. .-==--+=:=--=++++*+                
34
+               :-. #**###***+====+***++=====+****#*+=-==+++==-:::---=++-+=====-++++*-                
35
+                 -=--+*###*+++===**############*##*+=-=++****++===+++**+=+*=+-:++**+-                
36
+                .-  -. **#*++++==*################*+=-=++*******+++++***=++=+=:++++*=                
37
+                     :-#*#*+++++=*################*++==++********++++**+=+==+++*+****                
38
+                       =+#**++*+=*################**+=-=+*******+++++**==+--+***+****                
39
+                       *#***+=**+**##########**###**+=:-=+******++++++++=+::****+****                
40
+                      :##***++=+==**########****###*++=:=+*****+++=====+=-::+***+***+                
41
+                      :##***+++**=+**########*+=+++-::-:-+***++++======+=-.:+**+++**:                
42
+                       #****+++**=++*******###+==-:. ...=++++++=====--==+-++***+++**                 
43
+                       ++*++++-+==+++******#####**=-..:-==++++====----=-+=+++*++++-                  
44
+                       =*++++*=-=++++++****######***=====+++===------=-=+=-+++**+*                   
45
+                       :*+++**++++++++*****######***++++=====-------==-==+=+++***=                   
46
+                       :*+++****+++++**********+++=====--==---=-----=====+++++***:                   
47
+                       .*++++*##***++*******++++=----:::...:-==----==--=++++++++*                    
48
+                        :++++*****++++*******+++++++==----:-==----==--=+=+=++::..                    
49
+                         =++++++*+===+********++=----:::-====-----==+ -==+==:                        
50
+                          :====++===:-+************+++=======----==++=+==-                           
51
+                           ===-:.::..:*++*****######****+++==-----==:.:=-:                           
52
+                         .--:.. .:-...**+=+****##******++===--:---=:. .=                             
53
+                     .:--:..  .:.::...+***+=++*****++++==--------==.. .:                             
54
+                  :-==--..   .:..-....-****+======----:::::------=....:.                             
55
+              .======-...   .....-....:*****++=---::::::.::-----=- ....-   :.                        
56
+              .--==-:..      ..:::.....=*****++==--:::...::-:---=  ... :.   ..                       
57
+              .==-:..    . ..::::.......*****+++==---::..::::--=.  ...  :   .  ...                   
58
+              .-:...       .::..........=*****+++===--:::::::-=.   ..   :    .  . .:-::              
59
+               ...          ............:*****+++++==--:::::--.    ..   .    .     ..::--:.          
60
+               ...         ..............+*****++++===-::::::.     ..    .         .:::::-:          
package/assets/beth-questioning.png ADDED
Binary file
package/assets/yellowstone-beth.png ADDED
Binary file