chill-agent 1.4.0 → 1.6.0

package/cli/scripts/smoke-test.mjs

@@ -0,0 +1,95 @@
+#!/usr/bin/env node
+import fs from 'node:fs'
+import os from 'node:os'
+import path from 'node:path'
+import { fileURLToPath } from 'node:url'
+import { spawnSync } from 'node:child_process'
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url))
+const worker = path.join(__dirname, 'smoke-worker.mjs')
+
+function tree(dir, prefix = '') {
+  const out = []
+  for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
+    const p = path.join(dir, entry.name)
+    if (entry.isDirectory()) {
+      out.push(prefix + entry.name + '/')
+      out.push(...tree(p, prefix + '  '))
+    } else {
+      out.push(prefix + entry.name)
+    }
+  }
+  return out
+}
+
+const tmp = fs.mkdtempSync(path.join(os.tmpdir(), 'antislop-smoke-'))
+
+// Every child gets a throwaway home from launch: Bun's os.homedir() ignores a later HOME
+// change, so the worker's global install and --update would write into the real home.
+const home = fs.mkdtempSync(path.join(os.tmpdir(), 'antislop-home-'))
+const env = { ...process.env, HOME: home, USERPROFILE: home }
+for (const k of ['KIMI_CODE_HOME', 'CLINE_DIR', 'XDG_DATA_HOME']) delete env[k]
+
+const result = spawnSync(process.execPath, [worker], { cwd: tmp, env, encoding: 'utf8' })
+console.log('--- worker output ---')
+console.log(result.stdout.trim())
+if (result.status !== 0) console.error('worker stderr:', result.stderr)
+
+console.log('\n--- files written to temp project ---')
+console.log(tree(tmp).join('\n'))
+
+for (const name of ['CLAUDE.md', 'AGENTS.md', 'GEMINI.md']) {
+  const entry = path.join(tmp, name)
+  if (!fs.existsSync(entry)) continue
+  console.log(`\n--- ${name} ---`)
+  console.log(fs.readFileSync(entry, 'utf8'))
+}
+
+const coreSkill = path.join(tmp, '.claude', 'skills', 'antislop', 'SKILL.md')
+const coreInstalled = fs.existsSync(coreSkill)
+console.log('\ncore SKILL.md exists:', coreInstalled)
+
+// Every failure is collected here and decided before cleanup, so a failing run
+// still leaves a tidy temp dir behind.
+const reasons = []
+if (result.status !== 0) reasons.push(`worker exited ${result.status}`)
+if (!coreInstalled) reasons.push('core SKILL.md was not installed')
+
+// The wizard needs a terminal. With stdin closed it used to print its prompts, install
+// nothing, and still exit 0, so callers saw success. It has to refuse and say why.
+// Loading it needs the cli's dependencies, so a bare checkout reports a skip instead.
+const cliDeps = fs.existsSync(path.join(__dirname, '..', 'node_modules', '@clack'))
+if (cliDeps) {
+  const invalidMode = spawnSync(process.execPath, [path.join(__dirname, '..', 'index.mjs'), '--mode', 'invalid'], {
+    cwd: tmp,
+    env,
+    encoding: 'utf8',
+    stdio: ['ignore', 'pipe', 'pipe'],
+  })
+  const cleanError = /^antislop: /.test(invalidMode.stderr) && !/\n\s+at /.test(invalidMode.stderr)
+  if (invalidMode.status !== 1 || !/Usage: antislop-ai --mode/.test(invalidMode.stderr) || !cleanError) {
+    reasons.push('the mode command must exit 1 on one clean line, not a stack trace')
+  }
+  const noTty = spawnSync(process.execPath, [path.join(__dirname, '..', 'index.mjs')], {
+    cwd: tmp,
+    env,
+    encoding: 'utf8',
+    stdio: ['ignore', 'pipe', 'pipe'],
+  })
+  const refused = noTty.status === 1 && /needs a terminal/.test(noTty.stderr)
+  console.log('no-terminal run: exit', noTty.status, '| refused:', refused)
+  if (!refused) reasons.push(`a no-terminal run should exit 1 and say why, got exit ${noTty.status}`)
+
+} else {
+  console.log('no-terminal run: skipped, cli dependencies are not installed')
+}
+
+fs.rmSync(tmp, { recursive: true, force: true })
+fs.rmSync(home, { recursive: true, force: true })
+console.log('\ncleaned up temp project.')
+
+if (reasons.length > 0) {
+  console.error('\nsmoke test failed: ' + reasons.join('; '))
+  process.exit(1)
+}
+console.log('smoke test passed.')

package/cli/scripts/smoke-worker.mjs

@@ -0,0 +1,411 @@
+import fs from 'node:fs'
+import os from 'node:os'
+import path from 'node:path'
+import assert from 'node:assert/strict'
+import { configureMode, readSettings, resolveSettingsPath } from '../lib/settings.mjs'
+import {
+  AGENTS,
+  CORE,
+  PLUGIN_DOORS,
+  skillSourceDir,
+  resolveTargets,
+  detectAgents,
+  detectConflicts,
+  detectDuplicateReads,
+  detectPluginDoors,
+  installSkills,
+  installedVersion,
+  updateAll,
+  updatePointers,
+  VERSION,
+} from '../lib/install.mjs'
+
+const skills = ['antislop', 'antislop-ui']
+
+assert.equal(
+  resolveSettingsPath({ platform: 'linux', env: {}, home: '/home/ada' }),
+  '/home/ada/.config/antislop/settings.json'
+)
+assert.equal(
+  resolveSettingsPath({ platform: 'darwin', env: {}, home: '/Users/ada' }),
+  '/Users/ada/.config/antislop/settings.json'
+)
+assert.equal(
+  resolveSettingsPath({ platform: 'win32', env: { APPDATA: 'C:\\Users\\Ada\\AppData\\Roaming' }, home: 'C:\\Users\\Ada' }),
+  'C:\\Users\\Ada\\AppData\\Roaming\\antislop\\settings.json'
+)
+assert.equal(
+  resolveSettingsPath({ platform: 'win32', env: {}, home: 'C:\\Users\\Ada' }),
+  'C:\\Users\\Ada\\.config\\antislop\\settings.json'
+)
+
+const settingsFile = path.join(process.cwd(), 'preferences', 'settings.json')
+assert.match(configureMode([], settingsFile), /ask \(default\)/)
+assert.equal(fs.existsSync(settingsFile), false)
+for (const mode of ['during', 'after', 'ask']) {
+  assert.match(configureMode([mode], settingsFile), new RegExp(`global mode: ${mode}`))
+  assert.equal(readSettings(settingsFile).mode, mode)
+  assert.match(configureMode([], settingsFile), new RegExp(`global mode: ${mode}`))
+}
+fs.writeFileSync(settingsFile, '{"other":true,"mode":"during"}')
+configureMode(['after'], settingsFile)
+assert.deepEqual(readSettings(settingsFile), { other: true, mode: 'after' })
+assert.throws(() => configureMode(['invalid'], settingsFile), /Usage:/)
+assert.throws(() => configureMode(['during', 'extra'], settingsFile), /Usage:/)
+assert.equal(readSettings(settingsFile).mode, 'after')
+for (const content of ['{broken', 'null', '[]', '"during"']) {
+  fs.writeFileSync(settingsFile, content)
+  // The refusal is right, but it has to name the way out: --mode is the only command
+  // that can fix this file, so a message with no instruction is a dead end.
+  assert.throws(() => configureMode(['during'], settingsFile), /Fix or delete/)
+  assert.equal(fs.readFileSync(settingsFile, 'utf8'), content)
+}
+for (const mode of ['invalid', null, 1]) {
+  fs.writeFileSync(settingsFile, JSON.stringify({ mode }))
+  assert.throws(() => configureMode([], settingsFile), /Invalid mode/)
+  configureMode(['during'], settingsFile)
+  assert.equal(readSettings(settingsFile).mode, 'during')
+}
+console.log('ok   global mode preferences: persistence, validation, and preservation')
+
+const failures = []
+
+/** Prints the line this always printed and records whether it held, so one run
+ * reports every break rather than stopping at the first.
+ */
+const check = (label, actual, expected) => {
+  const ok = JSON.stringify(actual) === JSON.stringify(expected)
+  console.log(ok ? `ok   ${label}:` : `FAIL ${label}:`, actual, ok ? '' : `(expected ${JSON.stringify(expected)})`)
+  if (!ok) failures.push(label)
+}
+
+// Fresh state: nothing detected, and the default selection is every agent.
+const fresh = detectAgents('project')
+check('A detected (fresh project)', fresh, [])
+const defaultTargets = resolveTargets('project')
+console.log('A default targets:', defaultTargets.map((t) => `${t.agents.map((a) => a.id).join('+')}@${t.path} exists=${t.exists}`).join(' | '))
+// Copilot, Kimi Code, and Amp share Antigravity's folder, so twelve resolve to nine.
+check('A twelve agents over nine folders', [AGENTS.length, defaultTargets.length], [12, 9])
+check('A copilot and kimi share the antigravity folder', resolveTargets('project', ['antigravity', 'copilot', 'kimi']).length, 1)
+
+// Claude Code only, via explicit selection (old behavior preserved).
+const targets = resolveTargets('project', ['claude'])
+let written = installSkills({ skills, targets, overwrite: false })
+let pointers = updatePointers({ targets, skills })
+console.log('B targets:', targets.map((t) => `${t.agents.map((a) => a.id).join('+')}@${t.path} exists=${t.exists}`).join(' | '))
+console.log('B written:', written.map((w) => `${w.agents.join('+')}:${w.skill}`).join(', '))
+check('B pointers', pointers.map((p) => path.basename(p)), ['CLAUDE.md'])
+const pointer = fs.readFileSync(pointers[0], 'utf8')
+assert.match(pointer, /explicit session instruction first, then global preference, then ask/)
+assert.match(pointer, /A session instruction always wins/)
+assert.ok(pointer.includes('antislop active: <mode> (session override).'))
+assert.ok(pointer.includes('antislop active: <mode> (global preference).'))
+assert.ok(pointer.includes('ask during/after and end the response'))
+assert.ok(pointer.includes('only at the start of the final answer, never in progress messages'))
+assert.ok(pointer.includes('announce before the first edit and omit it from the final answer'))
+assert.ok(pointer.includes('`.claude/skills/antislop/SKILL.md`'))
+assert.ok(pointer.includes('`.claude/skills/antislop-ui/SKILL.md`'))
+
+const conflicts = detectConflicts({ skills, targets })
+written = installSkills({ skills, targets, overwrite: false })
+check('C conflicts', conflicts.length, 2)
+check('C written without overwrite', written.length, 0)
+written = installSkills({ skills, targets, overwrite: true })
+check('C overwritten', written.length, 2)
+
+// Antigravity on a fresh project: .agents/ does not exist yet, install creates it.
+const agTargets = resolveTargets('project', ['antigravity'])
+console.log('D antigravity targets:', agTargets.map((t) => `${t.agents.map((a) => a.id).join('+')}@${t.path} exists=${t.exists}`).join(' | '), '(exists=false before install)')
+const agWritten = installSkills({ skills, targets: agTargets, overwrite: false })
+check('D antigravity written', agWritten.length, 2)
+const agPointers = updatePointers({ targets: agTargets, skills })
+check('D antigravity pointers', agPointers.map((p) => path.basename(p)), ['AGENTS.md'])
+check('D .agents/skills/antislop/SKILL.md exists', fs.existsSync(path.join(process.cwd(), '.agents', 'skills', 'antislop', 'SKILL.md')), true)
+
+// OpenCode, Cursor, and Gemini each install and point to their own entry file.
+for (const agent of ['opencode', 'cursor', 'gemini']) {
+  const t = resolveTargets('project', [agent])
+  const w = installSkills({ skills, targets: t, overwrite: false })
+  const pointers = updatePointers({ targets: t, skills })
+  check(`D2 ${agent} written`, w.length, 2)
+  check(`D2 ${agent} pointer`, pointers.map((p) => path.basename(p)), [agent === 'gemini' ? 'GEMINI.md' : 'AGENTS.md'])
+  check(`D2 ${agent} folder exists`, fs.existsSync(path.join(process.cwd(), agent === 'gemini' ? '.gemini' : agent === 'cursor' ? '.cursor' : '.opencode', 'skills', 'antislop', 'SKILL.md')), true)
+}
+
+// Cline keeps a folder of its own and reads .claude/skills beside it, so both fill up.
+const clineProject = resolveTargets('project', ['cline'])
+check('D8 cline project target', clineProject[0].path, path.join(process.cwd(), '.cline', 'skills'))
+check('D8 cline global target', resolveTargets('global', ['cline'])[0].path, path.join(os.homedir(), '.cline', 'skills'))
+check('D8 cline written', installSkills({ skills, targets: clineProject, overwrite: false }).length, 2)
+check('D8 cline pointer', updatePointers({ targets: clineProject, skills }).map((p) => path.basename(p)), ['AGENTS.md'])
+check('D8 cline folder exists', fs.existsSync(path.join(process.cwd(), '.cline', 'skills', 'antislop', 'SKILL.md')), true)
+
+// Amp shares the project's .agents/skills, which the Antigravity block already filled,
+// but its global folder is a different path.
+const ampProject = resolveTargets('project', ['amp'])
+check('D9 amp shares the agents folder', ampProject[0].path, path.join(process.cwd(), '.agents', 'skills'))
+check('D9 amp global target', resolveTargets('global', ['amp'])[0].path, path.join(os.homedir(), '.config', 'agents', 'skills'))
+check('D9 amp writes nothing twice', installSkills({ skills, targets: ampProject, overwrite: false }).length, 0)
+check('D9 amp pointer', updatePointers({ targets: ampProject, skills }).map((p) => path.basename(p)), ['AGENTS.md'])
+
+// Pi keeps a folder of its own at both scopes, and walks the shared .agents/skills
+// beside it, which the Antigravity block already filled.
+const piProject = resolveTargets('project', ['pi'])
+check('D10 pi project target', piProject[0].path, path.join(process.cwd(), '.pi', 'skills'))
+check('D10 pi global target', resolveTargets('global', ['pi'])[0].path, path.join(os.homedir(), '.pi', 'agent', 'skills'))
+check('D10 pi written', installSkills({ skills, targets: piProject, overwrite: false }).length, 2)
+check('D10 pi pointer', updatePointers({ targets: piProject, skills }).map((p) => path.basename(p)), ['AGENTS.md'])
+check('D10 pi folder exists', fs.existsSync(path.join(process.cwd(), '.pi', 'skills', 'antislop', 'SKILL.md')), true)
+// Pi loads the shared folder too, so Pi plus Antigravity holds the same names twice.
+check('D10 pi duplicate read named', detectDuplicateReads({ targets: resolveTargets('project', ['antigravity', 'pi']), location: 'project' }).map((d) => [d.agent.id, d.paths.length]), [['pi', 2]])
+
+// Hermes reads a project's .hermes/skills, and ~/.hermes/skills for a global install.
+const hermesProject = resolveTargets('project', ['hermes'])
+const hermesGlobal = resolveTargets('global', ['hermes'])
+check('D3 hermes project target', hermesProject[0].path, path.join(process.cwd(), '.hermes', 'skills'))
+check('D3 hermes global target', hermesGlobal[0].path, path.join(os.homedir(), '.hermes', 'skills'))
+const hermesWritten = installSkills({ skills, targets: hermesProject, overwrite: false })
+check('D3 hermes written into the project', hermesWritten.length, 2)
+check('D3 hermes detected in project', detectAgents('project').includes('hermes'), true)
+
+// OpenCode splits its scopes: project folder for a project install, ~/.config for global.
+const ocProject = resolveTargets('project', ['opencode'])
+const ocGlobal = resolveTargets('global', ['opencode'])
+check('D4 opencode project target', ocProject[0].path, path.join(process.cwd(), '.opencode', 'skills'))
+check('D4 opencode global target', ocGlobal[0].path, path.join(os.homedir(), '.config', 'opencode', 'skills'))
+
+// Antigravity reads a project's .agents/skills but not the one under the home dir.
+const agGlobal = resolveTargets('global', ['antigravity'])
+check('D5 antigravity project target', resolveTargets('project', ['antigravity'])[0].path, path.join(process.cwd(), '.agents', 'skills'))
+check('D5 antigravity global target', agGlobal[0].path, path.join(os.homedir(), '.gemini', 'config', 'skills'))
+
+// Kimi Code has no folder of its own here: both scopes are the shared .agents/skills.
+check('D7 kimi project target', resolveTargets('project', ['kimi'])[0].path, path.join(process.cwd(), '.agents', 'skills'))
+
+// updatePointers has no other source for the entry file, so no row may omit it.
+check('D6 every agent names an entry file', AGENTS.filter((a) => !a.entry).map((a) => a.id), [])
+
+// Hermes reads a project's AGENTS.md, so a project install of it must write the pointer.
+check('D6 hermes writes a project pointer', updatePointers({ targets: hermesProject, skills }).map((p) => path.basename(p)), ['AGENTS.md'])
+
+// Detection now sees the agents that were installed.
+const after = detectAgents('project')
+check('E detected after installs', [...after].sort(), ['amp', 'antigravity', 'claude', 'cline', 'copilot', 'cursor', 'gemini', 'hermes', 'kimi', 'opencode', 'pi'])
+
+// OpenCode reads .claude/skills and .agents/skills too, so a project that installs into
+// two of them holds the same names twice and OpenCode picks between them unpredictably.
+const dupReads = detectDuplicateReads({ targets: resolveTargets('project', ['claude', 'opencode']), location: 'project' })
+check('E duplicate read named', dupReads.map((d) => [d.agent.id, d.paths.length]), [['opencode', 2]])
+check('E one folder alone is not a duplicate', detectDuplicateReads({ targets: resolveTargets('project', ['opencode']), location: 'project' }), [])
+// Cline reads .claude/skills beside its own folder, so Claude Code plus Cline collides.
+check('E cline duplicate read named', detectDuplicateReads({ targets: resolveTargets('project', ['claude', 'cline']), location: 'project' }).map((d) => [d.agent.id, d.paths.length]), [['cline', 2]])
+// Amp loads .claude/skills beside the shared folder, so Claude Code plus Amp collides too.
+check('E amp duplicate read named', detectDuplicateReads({ targets: resolveTargets('project', ['claude', 'amp']), location: 'project' }).map((d) => [d.agent.id, d.paths.length]), [['amp', 2]])
+// Copilot reads .claude/skills beside the shared folder, so Claude Code plus Copilot collides.
+check('E copilot duplicate read named', detectDuplicateReads({ targets: resolveTargets('project', ['claude', 'copilot']), location: 'project' }).map((d) => [d.agent.id, d.paths.length]), [['copilot', 2]])
+check('E global scope is not checked', detectDuplicateReads({ targets: resolveTargets('global', ['claude', 'opencode']), location: 'global' }), [])
+
+// Codex's global scope is the shared folder, not ~/.codex/skills, which Codex calls deprecated.
+// Kimi Code lands there too, so the grouping has to hold at global scope as well.
+const globalTargets = resolveTargets('global', ['claude', 'codex', 'kimi'])
+check('F global targets', globalTargets.map((t) => `${t.agents.map((a) => a.id).join('+')}@${t.path}`), [
+  `claude@${path.join(os.homedir(), '.claude', 'skills')}`,
+  `codex+kimi@${path.join(os.homedir(), '.agents', 'skills')}`,
+])
+
+// Copies are identical and the pointer block dedupes.
+// A shared entry file must point to an installed copy, even with several agents.
+const sharedTargets = resolveTargets('project', ['codex', 'opencode'])
+installSkills({ skills, targets: sharedTargets, overwrite: false })
+updatePointers({ targets: sharedTargets, skills })
+const sharedPointer = fs.readFileSync('AGENTS.md', 'utf8')
+for (const skill of skills) {
+  const installedPath = `.codex/skills/${skill}/SKILL.md`
+  assert.ok(sharedPointer.includes(`\`${installedPath}\``))
+  assert.equal(fs.readFileSync(installedPath, 'utf8'), fs.readFileSync(path.join(skillSourceDir(), skill, 'SKILL.md'), 'utf8'))
+}
+
+const src = fs.readFileSync(path.join(skillSourceDir(), 'antislop-ui', 'SKILL.md'), 'utf8')
+const dst = fs.readFileSync(path.join(process.cwd(), '.claude', 'skills', 'antislop-ui', 'SKILL.md'), 'utf8')
+check('G antislop-ui SKILL.md identical', src === dst, true)
+
+// The conflict prompt reports the release on disk from this file alone.
+check('G installed version is stamped', installedVersion(targets[0].path), VERSION)
+check('G no install means no version', installedVersion(path.join(process.cwd(), 'nowhere')), null)
+
+updatePointers({ targets, skills })
+const entry = fs.readFileSync(path.join(process.cwd(), 'CLAUDE.md'), 'utf8')
+check('H blocks after a second run', (entry.match(/antislop:start/g) || []).length, 1)
+
+// The entry file belongs to the author. Each fixture below used to be damaged.
+const entryPath = path.join(process.cwd(), 'CLAUDE.md')
+const write = (text) => fs.writeFileSync(entryPath, text)
+const read = () => fs.readFileSync(entryPath, 'utf8')
+
+write('# Mine\r\n\r\nNotes.\r\n')
+updatePointers({ targets, skills })
+check('I CRLF kept', read().includes('\r\n<!-- antislop:start -->'), true)
+check('I bare LF count', (read().match(/(?<!\r)\n/g) || []).length, 0)
+
+write('# Mine\n\n```md\n<!-- antislop:start -->\n<!-- antislop:end -->\n```\n')
+updatePointers({ targets, skills })
+check('I fenced example untouched', read().includes('```md\n<!-- antislop:start -->\n<!-- antislop:end -->\n```'), true)
+check('I real block added beside it', (read().match(/antislop:start/g) || []).length, 2)
+
+write('# Mine\n<!-- antislop:end -->\n')
+updatePointers({ targets, skills })
+const stable = read()
+updatePointers({ targets, skills })
+check('I orphan marker does not grow', read() === stable, true)
+check('I orphan marker is gone', (read().match(/antislop:end/g) || []).length, 1)
+
+// A fence left open at EOF is a typo, not a boundary: the block lands inside it and has
+// to be found again, or every run appends another copy.
+write('# Mine\n\nNotes:\n\n```bash\nnpm i\n')
+updatePointers({ targets, skills })
+const fenced = read()
+updatePointers({ targets, skills })
+updatePointers({ targets, skills })
+check('J unclosed fence stable', read() === fenced, true)
+check('J unclosed fence keeps code', read().includes('npm i'), true)
+check('J unclosed fence one block', (read().match(/antislop:start/g) || []).length, 1)
+
+// A mistyped end marker is the author's text, so the block is appended, not swapped in.
+write('# Mine\n\n<!-- antislop:start -->\nold\n<!-- antislop:End -->\n\n## Notes\nKeep this line.\n')
+updatePointers({ targets, skills })
+check('J mistyped end keeps the tail', read().includes('Keep this line.'), true)
+check('J mistyped end one block', (read().match(/antislop:start/g) || []).length, 1)
+
+// A longer fence run is not closed by a shorter one inside the example.
+write('# Mine\n\n````md\n```md\n<!-- antislop:start -->\n<!-- antislop:end -->\n```\n````\n')
+updatePointers({ targets, skills })
+check('J four-backtick example untouched', read().includes('````md\n```md\n<!-- antislop:start -->'), true)
+
+// A fence-like line with trailing text is code, not a closing fence.
+for (const fence of ['```', '~~~']) {
+  const example = `${fence}md\n${fence}js\n<!-- antislop:start -->\nKeep this example.\n<!-- antislop:end -->\n${fence}`
+  write(`# Mine\n\n${example}\n`)
+  updatePointers({ targets, skills })
+  check(`J ${fence} with info string keeps the example`, read().includes(example), true)
+  check(`J ${fence} real block added outside the example`, (read().match(/antislop:start/g) || []).length, 2)
+  const first = read()
+  updatePointers({ targets, skills })
+  check(`J ${fence} example stays intact on reinstall`, read() === first, true)
+}
+
+// A stray end marker below the block is ours too, and must not survive.
+write('# Mine\n<!-- antislop:start -->\nold\n<!-- antislop:end -->\nTail text\n<!-- antislop:end -->\n')
+updatePointers({ targets, skills })
+check('J stray end below cleared', (read().match(/antislop:end/g) || []).length, 1)
+check('J text below the block kept', read().includes('Tail text'), true)
+
+// Dominant line ending wins, so two CRLF lines do not flip a mostly-LF file.
+write('# Mine\n' + 'line\n'.repeat(10) + 'a\r\nb\r\n')
+updatePointers({ targets, skills })
+check('J mostly-LF stays LF', (read().match(/\r\n/g) || []).length, 0)
+
+// A second marker pair leaves a stray start behind unless every marker line is cleared.
+write('# Mine\n<!-- antislop:start -->\nX\n<!-- antislop:end -->\nKeep this too.\n<!-- antislop:start -->\nY\n<!-- antislop:end -->\n')
+updatePointers({ targets, skills })
+check('J duplicate pair settles to one', (read().match(/antislop:start/g) || []).length, 1)
+check('J duplicate pair keeps text', read().includes('Keep this too.'), true)
+
+// --update replaces what is already on disk, keeps each folder's skill selection, and
+// names the release it replaced. The scope list keeps a test out of the home directory.
+const present = resolveTargets('project').filter((t) => fs.existsSync(path.join(t.path, CORE)))
+check('K update finds the installed folders', present.length > 0, true)
+const upd = updateAll({ locations: ['project'] })
+check('K update reports every folder it found', upd.results.length, present.length)
+check('K update lands on this release', upd.results.every((r) => r.to === VERSION), true)
+check('K update keeps the skill selection', upd.results.every((r) => r.skills.includes(CORE)), true)
+check('K update writes a pointer', upd.pointers.length > 0, true)
+check('K pointer carries the update line', fs.readFileSync(path.join(process.cwd(), 'AGENTS.md'), 'utf8').includes('antislop-ai --update'), true)
+const again = updateAll({ locations: ['project'] })
+check('K update is repeatable', again.results.map((r) => r.from), upd.results.map((r) => r.to))
+
+// A clean directory has nothing to replace, and saying so is the whole answer.
+const clean = fs.mkdtempSync(path.join(os.tmpdir(), 'antislop-clean-'))
+const here = process.cwd()
+process.chdir(clean)
+check('K update says nothing when nothing is installed', updateAll({ locations: ['project'] }).results.length, 0)
+check('K update writes no pointer when nothing is installed', updateAll({ locations: ['project'] }).pointers.length, 0)
+process.chdir(here)
+fs.rmSync(clean, { recursive: true, force: true })
+
+// --update can combine folders with different extras. Every pointer must resolve,
+// and a separate entry file must not list another agent's unavailable extras.
+const mixed = fs.mkdtempSync(path.join(os.tmpdir(), 'antislop-mixed-'))
+try {
+  process.chdir(mixed)
+  installSkills({ skills: [CORE], targets: resolveTargets('project', ['codex']), overwrite: false })
+  installSkills({ skills: [CORE, 'antislop-ui'], targets: resolveTargets('project', ['opencode']), overwrite: false })
+  installSkills({ skills: [CORE, 'antislop-copywriting'], targets: resolveTargets('project', ['claude']), overwrite: false })
+  updateAll({ locations: ['project'] })
+  const shared = fs.readFileSync('AGENTS.md', 'utf8')
+  const separate = fs.readFileSync('CLAUDE.md', 'utf8')
+  assert.ok(shared.includes('`.codex/skills/antislop/SKILL.md`'))
+  assert.ok(shared.includes('`.opencode/skills/antislop-ui/SKILL.md`'))
+  assert.equal(shared.includes('antislop-copywriting'), false)
+  assert.ok(separate.includes('`.claude/skills/antislop-copywriting/SKILL.md`'))
+  assert.equal(separate.includes('antislop-ui'), false)
+  for (const pointer of [shared, separate]) {
+    for (const match of pointer.matchAll(/`([^`]+\/SKILL\.md)`/g)) assert.ok(fs.existsSync(match[1]))
+  }
+  console.log('ok   K mixed selections retain valid per-skill paths and separate entry files')
+} finally {
+  process.chdir(here)
+  fs.rmSync(mixed, { recursive: true, force: true })
+}
+
+// A door dropped from the list stops being named after an install, and nothing else notices.
+check(
+  'K all seven plugin doors are probed',
+  PLUGIN_DOORS.map((d) => d.id).sort(),
+  ['antigravity', 'claude', 'cline', 'codex', 'cursor', 'kimi', 'omp']
+)
+
+// A door row without a command would print a blank line where the answer belongs.
+check('K every plugin door names itself and its command', PLUGIN_DOORS.filter((d) => !d.id || !d.label || !d.update).map((d) => d.id), [])
+
+// A store holding an old copy beside the new one used to report whichever folder listed
+// first. The old copy is named to list first, so only a version sort reports 3.2.22.
+// The home is the throwaway one smoke-test.mjs launched this worker with. Writing here
+// outside that run would touch a real install, so refuse instead.
+const fakeHome = os.homedir()
+const inTmp = path.relative(fs.realpathSync(os.tmpdir()), fs.realpathSync(fakeHome))
+if (inTmp.startsWith('..') || path.isAbsolute(inTmp)) {
+  console.error(`refusing to write into ${fakeHome}: run this worker through smoke-test.mjs`)
+  process.exit(1)
+}
+try {
+  const copy = (dir, version) => {
+    fs.mkdirSync(path.join(fakeHome, dir, 'skills', CORE), { recursive: true })
+    fs.writeFileSync(path.join(fakeHome, dir, 'skills', CORE, 'VERSION'), version + '\n')
+  }
+  for (const [name, version] of [['aa-old', '3.2.9'], ['zz-new', '3.2.22']]) {
+    copy(path.join('.kimi-code', 'plugins', 'managed', name), version)
+    copy(path.join('.cline', 'plugins', '_installed', name, 'hash'), version)
+    copy(path.join('.omp', 'plugins', name), version)
+    fs.mkdirSync(path.join(fakeHome, '.codex', 'plugins', 'cache', 'anti-slop', CORE, version), { recursive: true })
+  }
+  check(
+    'L plugin doors report the newest copy in a store',
+    detectPluginDoors().map((d) => `${d.door.id} ${d.version}`).sort(),
+    ['cline 3.2.22', 'codex 3.2.22', 'kimi 3.2.22', 'omp 3.2.22']
+  )
+
+  // Run from home, --update must treat it as the global scope only.
+  installSkills({ skills: [CORE], targets: resolveTargets('global', ['claude']), overwrite: false })
+  process.chdir(fakeHome)
+  check('L update from home touches each folder once', updateAll().results.map((r) => r.location), ['global'])
+  check('L update from home writes no pointer', fs.existsSync(path.join(fakeHome, 'CLAUDE.md')), false)
+  check('L install from home writes no pointer', updatePointers({ targets: resolveTargets('project', ['claude']), skills: [CORE] }), [])
+} finally {
+  process.chdir(here)
+}
+
+if (failures.length > 0) {
+  console.error(`\n${failures.length} check(s) failed: ${failures.join(', ')}`)
+  process.exit(1)
+}
+console.log('\nall checks passed')

package/cli/scripts/sync-skills.mjs

@@ -0,0 +1,81 @@
+import fs from 'node:fs'
+import path from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url))
+const repoRoot = path.join(__dirname, '..', '..')
+const repoSkills = path.join(repoRoot, 'skills')
+const cliSkills = path.join(__dirname, '..', 'skills')
+
+const CORE_FRONTMATTER = [
+  '---',
+  'name: antislop',
+  'description: "Anti Slop: Rules for AI Coding Agents. The core filter. Load always to stop generic AI slop."',
+  'allowed-tools: Read Write Edit Glob Grep',
+  '---',
+  '',
+].join('\n')
+
+const version = JSON.parse(fs.readFileSync(path.join(__dirname, '..', 'package.json'), 'utf8')).version
+
+const coreBody = fs.readFileSync(path.join(repoRoot, 'antislop.md'), 'utf8')
+  .replace(/\r\n/g, '\n')
+  .trim()
+
+// Snyk W012: a shipped skill must not tell the agent to download its own instructions.
+if (/https?:\/\/raw\.githubusercontent\.com/.test(coreBody)) {
+  throw new Error('antislop.md carries a runtime download URL; remove it before syncing (Snyk W012)')
+}
+
+// The wizard installs the single-file route. Every route that ships this SKILL.md has already
+// placed the folders, so the wizard would only cost context there; the update steps stay.
+const WIZARD = /^## First-Run Install Wizard\n[\s\S]*?^### (Already installed, and the user asks how to update)$/m
+if (!WIZARD.test(coreBody)) throw new Error('antislop.md: install wizard headings not found')
+const skillBody = coreBody.replace(WIZARD, '## $1')
+fs.writeFileSync(path.join(repoSkills, 'antislop', 'SKILL.md'), CORE_FRONTMATTER + skillBody + '\n')
+
+// An installed copy is a snapshot with nothing in it that names the release it came from,
+// so an update could not say what was on disk. Every install route copies this folder.
+fs.writeFileSync(path.join(repoSkills, 'antislop', 'VERSION'), version + '\n')
+
+// Python leaves a __pycache__ beside the contrast checker; it must not reach the tarball.
+fs.rmSync(cliSkills, { recursive: true, force: true })
+fs.cpSync(repoSkills, cliSkills, {
+  recursive: true,
+  filter: (src) => path.basename(src) !== '__pycache__',
+})
+
+// npm only ships a README and LICENSE found in cli/, so the package page and Socket saw none.
+// Relative links point at files that are not in the tarball, so aim them at the repo.
+const REPO = 'https://github.com/miqdadbadjuber/anti-slop'
+const readme = fs.readFileSync(path.join(repoRoot, 'README.md'), 'utf8')
+  .replace(/src="(?:\.\/)?(?!https?:|#)([^"]+)"/g, `src="${REPO}/raw/main/$1"`)
+  .replace(/href="(?:\.\/)?(?!https?:|#|mailto:)([^"]+)"/g, `href="${REPO}/blob/main/$1"`)
+  .replace(/\]\((?:\.\/)?(?!https?:|#|mailto:)([^)]+)\)/g, `](${REPO}/blob/main/$1)`)
+fs.writeFileSync(path.join(__dirname, '..', 'README.md'), readme)
+fs.copyFileSync(path.join(repoRoot, 'LICENSE'), path.join(__dirname, '..', 'LICENSE'))
+
+// A Windows checkout hands back CRLF, and a shipped skill would then carry "name: x\r"
+// into any registry that splits on \n alone. Ship LF whatever the checkout did.
+const TEXT = new Set(['.md', '.py', '.json', '.txt', '.mjs'])
+let normalised = 0
+const normalise = (dir) => {
+  for (const e of fs.readdirSync(dir, { withFileTypes: true })) {
+    const file = path.join(dir, e.name)
+    if (e.isDirectory()) {
+      normalise(file)
+      continue
+    }
+    if (!TEXT.has(path.extname(e.name))) continue
+    const buf = fs.readFileSync(file)
+    if (!buf.includes(0x0d)) continue
+    fs.writeFileSync(file, buf.toString('utf8').replace(/\r\n/g, '\n'), 'utf8')
+    normalised++
+  }
+}
+normalise(cliSkills)
+
+console.log(
+  `Regenerated skills/antislop/SKILL.md and VERSION (${version}) and synced to cli/skills/` +
+    (normalised ? ` (${normalised} file(s) normalised to LF)` : '')
+)

package/commands/ponytail-audit.toml

@@ -0,0 +1,2 @@
+description = "Quality audit of the whole repo: bugs, security, load, tests, speed, bloat"
+prompt = "Audit the whole repository (or the folder the user names) like the senior developer who just inherited it. Map first: README, deploy and build config, dependencies, entry points, tests; find the expected load (one person or many users and processes); trace the main flows and read fully the paths with user input, money, auth, data writes, background jobs and shared state. Look for, in this order: bugs, risk (security holes, data loss), scale (races, the same work done by every process, memory that only grows, a query per item, O(n^2)), risky logic without a test, slow code (big = problem, small = suggestion), lean (dead code, duplicate helpers, stdlib or native instead of custom code or a dependency, abstractions with one implementation, near-copies to merge, a function doing several unrelated jobs to split, never split by line count). Before calling code unused, grep the whole tree including tests, fixtures, config and string references. Every finding needs a concrete case. A shortcut marked with a shortcut: (or older ponytail:) comment that names its limit is a decision, not a finding. Propose the smallest fix, prefer deleting code, never add layers. Very simple English. Start with 'What this repo does:' and the load you assumed. Then at most 20 numbered findings grouped Must fix / Should fix / Nice to have, most important first; each: a bold title with file:lines, then four bullets: What this is, Problem, Fix, If we skip it. End with 'Verdict:', 'Lean: -N lines, -M dependencies possible.' and 'Not checked:' for the parts you did not read. Change no code."

package/commands/ponytail-debt.toml

@@ -0,0 +1,2 @@
+description = "Harvest shortcut: comments into a tracked debt ledger"
+prompt = "Harvest every `shortcut:` comment (and older `ponytail:` ones) in this repository into a debt ledger so deferrals do not rot into 'later means never'. Grep the whole tree for comment markers (git grep --no-index --exclude-standard -nE '(#|//|/[*]) ?(shortcut|ponytail):', skipping .git and everything .gitignore ignores; if the user names their own marker word, grep for that instead; skip hits that are not a deferral, like a keyboard-shortcut note). One row per marker, grouped by file: <file>:<line> — <what was simplified>. ceiling: <the limit named in the comment>. upgrade: <the trigger to revisit>. Tag any marker that names no upgrade path or trigger as no-trigger, those rot silently. End with the count of markers and how many lack a trigger. If none: 'No shortcut debt. Clean ledger.' Report only, change nothing."

package/commands/ponytail-gain.toml

@@ -0,0 +1,2 @@
+description = "Show ponytail's measured impact scoreboard (less code, cost, time)"
+prompt = "Show the ponytail gain scoreboard. One shot, change nothing: do not switch mode, write flag files, or persist anything. Render the published agentic benchmark of Ponytail 5 (39 tasks on a real FastAPI + React repo plus bug fixes, security and privacy cases and small apps, Opus 5.5, 5 runs each, against the same agent without the skill; geometric mean of per-task medians; source benchmarks/results/2026-10-07-agentic.md and the README) as plain ASCII bars, ponytail as a share of the no-skill baseline (100%): Lines of code 47% (down 53%); Output tokens 55% (down 45%); Cost 74% (down 26%); Time 59% (down 41%); Hidden checks passed 97% (no-skill 96%; 18 of the tasks have hidden checks for correctness and safety); Tests where the logic needs one 98% (no-skill 68%). The bar length shows the share, the label carries the exact figure. These are benchmark averages, not this repo. NEVER print a per-repo savings number: the unbuilt version was never written, so there is no real baseline to subtract from in a live repo. For real per-repo figures, point to /ponytail-debt (the counted shortcut ledger) and /ponytail-audit (what is still cuttable). Report only."

package/commands/ponytail-help.toml

@@ -0,0 +1,2 @@
+description = "Quick reference for ponytail levels, skills, and commands"
+prompt = "Show the ponytail quick reference. One shot, change nothing: do not switch mode, write flag files, or persist anything. Levels: /ponytail lite (build what's asked, name the lazier alternative in one line), /ponytail (full, the default ladder: YAGNI then stdlib then native then one line then minimum), /ponytail ultra (deletion before addition, challenges the requirement before building). Commands: /ponytail-review (over-engineering review of the current changes), /ponytail-audit (whole-repo over-engineering audit), /ponytail-debt (harvest shortcut: comments into a tracked ledger), /ponytail-gain (measured-impact scoreboard from the benchmark), /ponytail-help (this card). Deactivate with 'stop ponytail', 'normal mode', or /ponytail off; resume anytime with /ponytail. Default mode is full; change it with the PONYTAIL_DEFAULT_MODE environment variable (off|lite|full|ultra) or a config file at ~/.config/ponytail/config.json (Windows: %APPDATA%\\ponytail\\config.json) with {\"defaultMode\": \"lite\"}. Resolution order: env var, then config file, then full."

package/commands/ponytail-review.toml

@@ -0,0 +1,2 @@
+description = "Quality review of the current changes: bugs, security, load, tests, speed, bloat"
+prompt = "Review the current code changes like the senior developer who will be paged when they break. Review what the user names (uncommitted or staged changes, a branch, a PR link, files); nothing named: the uncommitted changes, or the last commit if there are none. First read the code the change touches: callers of every changed function, the functions it calls, the tests, the README (find the expected load: one person or many users and processes). A change can break code it does not touch. Look for, in this order: bugs (wrong result, crash, missed edge case, a caller broken by the change, a fix in one caller while the shared function stays broken), risk (security holes, data loss), scale (check-then-write races, the same work done by every process, memory that only grows, a query per item, O(n^2) on big input), risky logic without a test, slow code (big = problem, small = suggestion), lean (dead code, a helper the repo already has, stdlib or native instead of custom code or a new dependency, abstractions with one implementation, near-copies to merge, a function doing several unrelated jobs to split, never split by line count). Every finding needs a concrete case; re-read the lines to confirm it. A shortcut marked with a shortcut: (or older ponytail:) comment that names its limit is a decision, not a finding. Propose the smallest fix, prefer deleting code, never add layers. No style taste, no vague worries. Very simple English, explain technical terms. Start with 'What this change does:' in two or three sentences and the load you assumed. Then numbered findings grouped Must fix / Should fix / Nice to have; each finding: a bold title with file:lines, then four bullets: What this is, Problem, Fix, If we skip it (one or two short sentences each). End with 'Verdict:', 'Lean: -N lines possible.' when lean findings exist, and 'Not checked:' if something mattered and you could not check it. Nothing found: 'Looks good. Ship.' Change no code."

package/commands/ponytail.toml

@@ -0,0 +1,2 @@
+description = "Switch ponytail intensity level (lite/full/ultra/off)"
+prompt = "Switch to ponytail {{args}} mode. With no level, keep the current level, or switch on at the default level if ponytail was off. Lazy senior dev mode, before any code: does it need to exist at all (YAGNI)? Does the standard library do it? A native platform feature? Can it be one line? Build the minimum that works. No unrequested abstractions, no avoidable dependencies, no boilerplate. Mark deliberate simplifications that cut a real corner with a known ceiling using a shortcut: comment that names the ceiling and upgrade path."