chill-agent 1.4.0 → 1.6.0

package/scripts/check-rule-copies.js

@@ -0,0 +1,74 @@
+#!/usr/bin/env node
+const fs = require('fs');
+const path = require('path');
+
+const root = path.join(__dirname, '..');
+
+function read(relPath) {
+  return fs.readFileSync(path.join(root, relPath), 'utf8').replace(/\r\n/g, '\n').trim();
+}
+
+function stripFrontmatter(text) {
+  return text.replace(/^---\n[\s\S]*?\n---\n*/, '').trim();
+}
+
+const agents = read('AGENTS.md');
+const canonical = agents.replace(/\n\n\(Yes, this file also applies[\s\S]*?\)$/, '').trim();
+
+// Compact copies: same body as AGENTS.md, host-specific frontmatter stripped.
+const copies = [
+  ['.cursor/rules/ponytail.mdc', stripFrontmatter],
+  ['.windsurf/rules/ponytail.md', text => text.trim()],
+  ['.clinerules/ponytail.md', text => text.trim()],
+  ['.agents/rules/ponytail.md', text => text.trim()],
+  ['.qoder/rules/ponytail.md', text => text.trim()],
+  ['.github/copilot-instructions.md', text => text.trim()],
+  ['.kiro/steering/ponytail.md', stripFrontmatter],
+];
+
+let failed = false;
+
+for (const [relPath, normalize] of copies) {
+  const actual = normalize(read(relPath));
+  if (actual !== canonical) {
+    console.error(`${relPath} drifted from AGENTS.md`);
+    failed = true;
+  }
+}
+
+// SKILL.md is the runtime source of truth and is longer than the compact body,
+// so it cannot be byte-compared. ponytail: canary, not full equality. Assert the
+// load-bearing rules survive verbatim in both the source and AGENTS.md. Changing
+// a rule's wording trips this, which is the reminder to propagate it everywhere.
+// Upgrade path: generate the copies from SKILL.md if this ever misses a real drift.
+const INVARIANTS = [
+  'in this codebase',                      // ladder rung: reuse what already exists (#217)
+  'grep every caller',                     // root-cause bug fix (#245)
+  'never about the change itself',         // scope: callers, tests and fixtures the change breaks
+  'shortcut: <the limit>, <when to upgrade>',   // shortcut marker comment
+  'correct on edge cases',                 // robust-variant rule
+  'Lazy code without its check is unfinished', // test reflex
+  // the "never cut" carve-outs: pin each so a reword in either file can't silently drop one.
+  'validation at trust boundaries',
+  'prevents data loss',
+  'security',
+  'accessibility',
+];
+
+const skill = read('skills/ponytail/SKILL.md');
+const sources = [['skills/ponytail/SKILL.md', skill], ['AGENTS.md', agents]];
+for (const phrase of INVARIANTS) {
+  for (const [label, text] of sources) {
+    if (!text.includes(phrase)) {
+      console.error(`${label} is missing rule invariant: "${phrase}"`);
+      failed = true;
+    }
+  }
+}
+
+if (failed) {
+  console.error('Update the copied rule text, AGENTS.md, or SKILL.md so the shared rules match.');
+  process.exit(1);
+}
+
+console.log(`Rule copies match AGENTS.md; ${INVARIANTS.length} rule invariants present in SKILL.md and AGENTS.md.`);

package/scripts/check-versions.js

@@ -0,0 +1,77 @@
+#!/usr/bin/env node
+// Version-consistency guard. Ponytail declares its version in seven files across
+// five host ecosystems, and every release bumps all of them by hand.
+//
+// tests/gemini-extension.test.js already checks the four plugin manifests agree
+// with each other, but that can't catch the failure mode that shipped in v4.8.0:
+// every manifest stayed stale at 4.7.0 *together* while the release moved on, so
+// they "agreed" and the test passed (#260, #262). It also ignores the two
+// package.json files. This check closes both gaps:
+//   1. every version-bearing file must share one pinned X.Y.Z version, and
+//   2. on a release-tag CI run, that shared version must equal the tag.
+
+const fs = require('fs');
+const path = require('path');
+
+const root = path.join(__dirname, '..');
+const PINNED_SEMVER = /^\d+\.\d+\.\d+$/;
+
+// Every file that declares the project version, and who reads it. Add new host
+// manifests here so a future ecosystem can't drift unnoticed.
+const VERSION_FILES = [
+  '.claude-plugin/plugin.json',  // Claude Code plugin — what users install
+  '.codex-plugin/plugin.json',   // Codex plugin
+  '.devin-plugin/plugin.json',   // Devin CLI plugin
+  '.github/plugin/plugin.json',  // Copilot plugin
+  '.qoder-plugin/plugin.json',   // Qoder plugin
+  'gemini-extension.json',       // Gemini CLI extension
+  'package.json',                // pi-package / repo root
+];
+
+function readVersion(relPath) {
+  try {
+    // Strip a UTF-8 BOM some Windows editors prepend (breaks JSON.parse).
+    const raw = fs.readFileSync(path.join(root, relPath), 'utf8').replace(/^\uFEFF/, '');
+    return JSON.parse(raw).version;
+  } catch (e) {
+    throw new Error(`${relPath}: ${e.message}`);
+  }
+}
+
+let failed = false;
+const versions = VERSION_FILES.map((relPath) => {
+  const version = readVersion(relPath);
+  if (typeof version !== 'string' || !PINNED_SEMVER.test(version)) {
+    console.error(`${relPath}: version must be a pinned X.Y.Z semver, got ${JSON.stringify(version)}`);
+    failed = true;
+  }
+  return [relPath, version];
+});
+
+// Every file must declare the same version.
+const distinct = [...new Set(versions.map(([, v]) => v))];
+if (distinct.length > 1) {
+  console.error('Version mismatch — every manifest must share one version:');
+  for (const [relPath, version] of versions) console.error(`  ${version}\t${relPath}`);
+  failed = true;
+}
+const shared = distinct.length === 1 ? distinct[0] : null;
+
+// On a release-tag push CI sets GITHUB_REF_TYPE=tag and GITHUB_REF_NAME=vX.Y.Z.
+// The shared version must equal the tag — this catches tagging a release whose
+// version files were never bumped, which mutual agreement alone cannot.
+if (shared && process.env.GITHUB_REF_TYPE === 'tag') {
+  const tag = process.env.GITHUB_REF_NAME || '';
+  const tagVersion = tag.replace(/^v/, '');
+  if (PINNED_SEMVER.test(tagVersion) && tagVersion !== shared) {
+    console.error(`release tag ${tag} does not match version ${shared}; bump the version files before tagging`);
+    failed = true;
+  }
+}
+
+if (failed) {
+  console.error('Align the version fields (see issue #260) so every manifest shares one version.');
+  process.exit(1);
+}
+
+console.log(`All ${VERSION_FILES.length} version files pinned at ${shared}.`);

package/scripts/cursor-hooks.js

@@ -0,0 +1,145 @@
+#!/usr/bin/env node
+// ponytail — install or remove the Cursor hooks (hooks/cursor-hooks.json) in
+// ~/.cursor/hooks.json (default) or <cwd>/.cursor/hooks.json (--project),
+// merging with whatever hooks are already there. Only entries that run one of
+// ponytail's own hooks/ponytail-*.js scripts are added or removed; every other
+// hook stays as it was.
+//
+//   node scripts/cursor-hooks.js install [--project]
+//   node scripts/cursor-hooks.js uninstall [--project]
+
+const fs = require('fs');
+const os = require('os');
+const path = require('path');
+const { isShellSafe } = require('../hooks/ponytail-config');
+
+const ROOT = path.join(__dirname, '..');
+const TEMPLATE = path.join(ROOT, 'hooks', 'cursor-hooks.json');
+const PONYTAIL_HOOK = /[\\/]hooks[\\/]ponytail-[\w-]+\.js(?=["'\s]|$)/;
+
+function isPonytailHook(entry) {
+  return Boolean(entry && typeof entry.command === 'string' && PONYTAIL_HOOK.test(entry.command));
+}
+
+function hooksPath(scope) {
+  return scope === 'project'
+    ? path.join(process.cwd(), '.cursor', 'hooks.json')
+    : path.join(os.homedir(), '.cursor', 'hooks.json');
+}
+
+// Missing file → empty config. Malformed JSON throws a SyntaxError so the
+// caller can refuse to touch the file rather than overwrite it.
+function readConfig(file) {
+  let config = {};
+  try {
+    config = JSON.parse(fs.readFileSync(file, 'utf8').replace(/^\uFEFF/, ''));
+  } catch (e) {
+    if (e.code !== 'ENOENT') throw e;
+  }
+  if (!config || typeof config !== 'object' || Array.isArray(config)) {
+    throw new Error(file + ' must contain a JSON object; nothing was changed');
+  }
+  if (config.hooks === undefined) config.hooks = {};
+  if (!config.hooks || typeof config.hooks !== 'object' || Array.isArray(config.hooks)) {
+    throw new Error(file + ': hooks must be an object; nothing was changed');
+  }
+  for (const [event, entries] of Object.entries(config.hooks)) {
+    if (!Array.isArray(entries)) {
+      throw new Error(file + ': hooks.' + event + ' must be an array; nothing was changed');
+    }
+  }
+  return config;
+}
+
+function writeConfig(file, config) {
+  fs.mkdirSync(path.dirname(file), { recursive: true });
+  fs.writeFileSync(file, JSON.stringify(config, null, 2) + '\n', 'utf8');
+}
+
+// The template's PONYTAIL_DIR placeholder becomes this checkout's absolute
+// path. Forward slashes run unchanged under cmd, PowerShell and bash, and the
+// same allowlist that guards the statusline snippet keeps shell metacharacters
+// out of the command string.
+function ponytailEntries() {
+  const root = ROOT.replace(/\\/g, '/');
+  if (!isShellSafe(root)) {
+    throw new Error('ponytail is checked out at a path with shell metacharacters (' + ROOT +
+      '); move it, or copy hooks/cursor-hooks.json by hand and quote the path for your shell');
+  }
+  const template = JSON.parse(fs.readFileSync(TEMPLATE, 'utf8'));
+  const hooks = {};
+  for (const [event, entries] of Object.entries(template.hooks)) {
+    hooks[event] = entries.map((entry) => ({ ...entry, command: entry.command.replace(/PONYTAIL_DIR/g, root) }));
+  }
+  return hooks;
+}
+
+function stripPonytail(config) {
+  for (const [event, entries] of Object.entries(config.hooks)) {
+    if (!Array.isArray(entries)) continue;
+    const kept = entries.filter((entry) => !isPonytailHook(entry));
+    if (kept.length) config.hooks[event] = kept;
+    else delete config.hooks[event];
+  }
+}
+
+function install(scope) {
+  const file = hooksPath(scope);
+  const config = readConfig(file);
+  if (config.version === undefined) config.version = 1;
+  // Re-running replaces stale ponytail entries instead of duplicating them.
+  stripPonytail(config);
+  for (const [event, entries] of Object.entries(ponytailEntries())) {
+    config.hooks[event] = [...(config.hooks[event] || []), ...entries];
+  }
+  writeConfig(file, config);
+  return file;
+}
+
+// Returns the file it changed, or null when there was nothing of ponytail's in it.
+function uninstall(scope) {
+  const file = hooksPath(scope);
+  if (!fs.existsSync(file)) return null;
+  const config = readConfig(file);
+  const before = JSON.stringify(config);
+  stripPonytail(config);
+  if (JSON.stringify(config) === before) return null;
+  const otherKeys = Object.keys(config).filter((k) => k !== 'version' && k !== 'hooks');
+  if (Object.keys(config.hooks).length === 0 && otherKeys.length === 0) {
+    // Only ponytail lived here: drop the file rather than leave an empty husk.
+    fs.unlinkSync(file);
+  } else {
+    writeConfig(file, config);
+  }
+  return file;
+}
+
+if (require.main === module) {
+  const args = process.argv.slice(2);
+  const action = args[0];
+  const scope = args.includes('--project') ? 'project' : 'user';
+  try {
+    if (action === 'install') {
+      const file = install(scope);
+      console.log('Installed ponytail hooks in ' + file);
+      console.log('Cursor reloads hooks.json on save; start a new chat to activate.');
+    } else if (action === 'uninstall') {
+      const file = uninstall(scope);
+      console.log(file
+        ? 'Removed ponytail hooks from ' + file
+        : 'No ponytail hooks in ' + hooksPath(scope));
+    } else {
+      console.error('usage: node scripts/cursor-hooks.js install|uninstall [--project]');
+      process.exit(1);
+    }
+  } catch (e) {
+    if (e instanceof SyntaxError) {
+      console.error(hooksPath(scope) + ' is not valid JSON; nothing was changed, fix it by hand (' + e.message + ')');
+    } else {
+      console.error(e.message);
+    }
+    process.exit(1);
+  }
+}
+
+module.exports = { hooksPath, install, isPonytailHook, uninstall };

package/scripts/generate-chillslop.mjs

@@ -0,0 +1,42 @@
+// scripts/generate-chillslop.mjs
+import fs from 'node:fs';
+
+let text = fs.readFileSync('antislop.raw.md', 'utf8');
+
+text = text.replace(
+  /# antislop\n\n> Anti Slop: Rules for AI Coding Agents/g,
+  '# ChillSlop 2.0: Anti-Slop & Pragmatic Senior Dev Standard\n\n> Dual Core: Anti-Slop (miqdadbadjuber) + Ponytail (dietrichgebert) + ChillRewind Time-Travel'
+);
+
+text = text.replace(/antislop/g, 'chill-agent');
+text = text.replace(/Anti Slop/g, 'ChillAgent Anti-Slop & Ponytail Core');
+
+const ponytailHeader = `
+## The Pragmatic Senior Dev Creed (Ponytail Synthesis)
+
+> **"The best code is the code you never wrote. The best design is the interface that gets out of the user's way."**
+
+Active for the whole session until the user says "stop chill" or "normal mode".
+Switch intensity mode: \`/chill [lite|full|ultra]\`.
+
+### The 6-Step Minimalist Execution Ladder
+Take the first option that completely solves the problem:
+1. **Does it need to exist?** Skip features, options, and flexibility nobody asked for.
+2. **Already in this codebase?** Use existing helpers, components, and services.
+3. **Standard library or native platform?** Reach for \`node:*\`, native \`fetch\`, CSS Grid, native \`<dialog>\`.
+4. **Already-installed dependency?** Use what exists in \`package.json\`. Never add an npm package for 10 lines.
+5. **Can it be a single readable line?** Write the single line.
+6. **Otherwise:** The minimum code that works reliably.
+
+Be lazy about the solution, never about the change itself: finish every caller, test, fixture, and edge case your change touches. Deletion beats addition.
+`;
+
+text = text.replace('## Core Principle', ponytailHeader + '\n## Core Principle');
+
+fs.writeFileSync('chillslop.md', text, 'utf8');
+fs.writeFileSync('antislop.md', text, 'utf8');
+fs.writeFileSync('rules/chillslop.md', text, 'utf8');
+fs.writeFileSync('rules/antislop.md', text, 'utf8');
+fs.writeFileSync('rules/chillslop.mdc', text, 'utf8');
+
+console.log('Successfully generated full-length master rules (chars: ' + text.length + ')');

package/scripts/generate-examples.mjs

@@ -0,0 +1,149 @@
+// scripts/generate-examples.mjs
+import fs from 'node:fs';
+
+const examples = [
+  {
+    file: 'examples/README.md',
+    content: `# ChillAgent Examples & Empirical Diff Comparisons
+
+This folder documents verbatim model outputs across benchmark runs comparing generic AI generation (bloat, slop, unnecessary dependencies) with **ChillAgent (Anti-Slop 2.0 + Ponytail)**.
+
+## Categories
+- **Logic & Minimalism:** CSV parsing, debounce, deep cloning, group by, URL parsing, rate limiting.
+- **UI & Accessibility:** Modal dialogs, countdown timers, infinite scroll, typography contrast.
+- **Visual & Copywriting:** Eliminating generic purple gradients and robotic marketing buzzwords.
+`
+  },
+  {
+    file: 'examples/csv-sum.md',
+    content: `# CSV Sum
+
+**Task:** "Write Python code that reads sales.csv and sums the 'amount' column."
+
+## Without ChillAgent (20 lines, 1 heavy dependency)
+\`\`\`python
+import pandas as pd
+
+# Read the CSV file into a DataFrame
+df = pd.read_csv('sales.csv')
+
+# Sum the amount column
+total_amount = df['amount'].sum()
+
+# Print the result
+print(f"Total sales amount: {total_amount}")
+\`\`\`
+*Bloat:* Forces 35MB \`pandas\` dependency for a simple column sum.
+
+## With ChillAgent (4 lines, 0 dependencies)
+\`\`\`python
+import csv
+
+with open('sales.csv') as f:
+    print(sum(float(row['amount']) for row in csv.DictReader(f)))
+\`\`\`
+*Result:* 0 dependencies, instant execution, standard library only.
+`
+  },
+  {
+    file: 'examples/debounce.md',
+    content: `# Debounce Utility
+
+**Task:** "Write a debounce function in TypeScript."
+
+## Without ChillAgent (25 lines + lodash dependency)
+\`\`\`typescript
+import debounce from 'lodash/debounce';
+export const debouncedSearch = debounce((query: string) => {
+  api.search(query);
+}, 300);
+\`\`\`
+
+## With ChillAgent (6 lines, standard native timer)
+\`\`\`typescript
+export function debounce<T extends (...args: any[]) => void>(fn: T, ms = 300) {
+  let timer: ReturnType<typeof setTimeout>;
+  return (...args: Parameters<T>) => {
+    clearTimeout(timer);
+    timer = setTimeout(() => fn(...args), ms);
+  };
+}
+\`\`\`
+`
+  },
+  {
+    file: 'examples/deep-clone.md',
+    content: `# Deep Clone
+
+**Task:** "Deep clone a JavaScript object in Node 18+."
+
+## Without ChillAgent
+\`\`\`javascript
+import cloneDeep from 'lodash/cloneDeep';
+const copy = cloneDeep(source);
+\`\`\`
+
+## With ChillAgent (1 line native standard library)
+\`\`\`javascript
+const copy = structuredClone(source);
+\`\`\`
+`
+  },
+  {
+    file: 'examples/modal-dialog.md',
+    content: `# Modal Dialog Component
+
+**Task:** "Create an accessible modal dialog in vanilla HTML/CSS/JS."
+
+## Without ChillAgent (120 lines, custom backdrop, custom focus trap, custom scroll locks)
+Manual z-index soup, forgotten Escape key handlers, broken keyboard traps.
+
+## With ChillAgent (12 lines using native HTML <dialog>)
+\`\`\`html
+<dialog id="confirmModal" style="border: 1px solid #26262E; border-radius: 8px; background: #111114; color: #F4F4F6; padding: 20px;">
+  <form method="dialog">
+    <p>Confirm irreversible session fork?</p>
+    <button value="cancel">Cancel</button>
+    <button value="confirm" style="background: #818CF8; color: #09090B;">Fork</button>
+  </form>
+</dialog>
+<button onclick="document.getElementById('confirmModal').showModal()">Open</button>
+\`\`\`
+*Features:* Built-in backdrop, native Escape key closing, native focus trapping, zero external libraries.
+`
+  },
+  {
+    file: 'examples/anti-slop-ui.md',
+    content: `# Anti-Slop UI Transformation
+
+## The Generic AI Default (Rejected as Slop)
+- Background: \`bg-gradient-to-br from-indigo-500 via-purple-500 to-pink-500\`
+- Card: \`rounded-3xl shadow-2xl backdrop-blur-xl p-8 bg-white/10\`
+- Button: Pill-shaped glowing cyan bubble with rocket emoji \`🚀\`
+- Heading: *"Unleash the Power of Next-Gen AI"*
+
+## The ChillAgent Standard (Accepted High-Craft)
+- Background: Deep obsidian carbon \`#09090B\`
+- Card: Monochromatic surface \`#111114\` with 1px hairline border \`#26262E\` and 8px radius
+- Numbers: Tabular monospace font \`JetBrains Mono\`
+- Accent: Single semantic indicator (Emerald \`#10B981\` for active status)
+- Heading: Direct domain statement: *"Deterministic time-travel debugger for AI agents."*
+`
+  },
+  {
+    file: 'examples/anti-slop-copy.md',
+    content: `# Anti-Slop Copywriting Transformation
+
+## AI Slop Copy (Banned)
+> *"Unleash the revolutionary power of our cutting-edge AI debugger! Seamlessly supercharge your development workflow with next-generation intelligence. Trusted by 10,000+ happy developers across the globe! ✨"*
+
+## ChillAgent Clean Copy (Approved)
+> *"ChillRewind is a zero-dependency local proxy running on \`node:sqlite\` in WAL mode. It prunes stale tool outputs over 1.5KB and halts agent runs when the same tool signature repeats 3 consecutive times."*
+`
+  }
+];
+
+for (const ex of examples) {
+  fs.writeFileSync(ex.file, ex.content.trim() + '\n', 'utf8');
+  console.log('Saved', ex.file);
+}

package/scripts/generate-plugin-doors.mjs

@@ -0,0 +1,108 @@
+// scripts/generate-plugin-doors.mjs
+import fs from 'node:fs';
+
+const manifest = {
+  name: "chill-agent",
+  displayName: "ChillAgent (Anti-Slop 2.0 + Ponytail Senior Dev)",
+  version: "1.2.0",
+  description: "Master Negative Filter, Anti-Slop, and Pragmatic Senior Dev Standard. Combines ruthless YAGNI minimalism with Linear-grade visual engineering.",
+  author: {
+    name: "sann"
+  },
+  homepage: "https://github.com/sann/chill-agent",
+  repository: "https://github.com/sann/chill-agent",
+  license: "MIT",
+  keywords: [
+    "anti-slop",
+    "ponytail",
+    "design-rules",
+    "minimalism",
+    "agent-skills",
+    "yagni",
+    "ui",
+    "accessibility"
+  ],
+  skills: [
+    "./skills/chill-slop/",
+    "./skills/chill-slop-ui/",
+    "./skills/chill-slop-code/",
+    "./skills/chill-slop-copywriting/",
+    "./skills/chill-slop-human/",
+    "./skills/chill-slop-mobile/",
+    "./skills/chill-audit/",
+    "./skills/chill-review/",
+    "./skills/chill-debt/",
+    "./skills/chill-gain/",
+    "./skills/chill-help/"
+  ]
+};
+
+// 1. Antigravity plugin.json
+fs.writeFileSync('plugin.json', JSON.stringify({ name: "chill-agent" }, null, 2), 'utf8');
+
+// 2. Universal plugin.yaml
+fs.writeFileSync('plugin.yaml', `name: chill-agent
+version: 1.2.0
+description: ChillAgent Anti-Slop 2.0 & Pragmatic Senior Dev Standard
+skills:
+  - ./skills/chill-slop/
+  - ./skills/chill-slop-ui/
+  - ./skills/chill-slop-code/
+  - ./skills/chill-slop-copywriting/
+  - ./skills/chill-slop-human/
+  - ./skills/chill-slop-mobile/
+  - ./skills/chill-audit/
+  - ./skills/chill-review/
+`, 'utf8');
+
+// 3. gemini-extension.json
+fs.writeFileSync('gemini-extension.json', JSON.stringify({
+  name: "chill-agent",
+  version: "1.2.0",
+  description: "ChillAgent Anti-Slop 2.0 & Pragmatic Senior Dev Mode. Forces smallest working diff, YAGNI, standard library first, zero AI slop.",
+  contextFileName: "AGENTS.md"
+}, null, 2), 'utf8');
+
+// 4. opencode.json
+fs.writeFileSync('opencode.json', JSON.stringify({
+  name: "chill-agent",
+  version: "1.2.0",
+  description: "ChillAgent Anti-Slop & Ponytail Engine for OpenCode",
+  skills: manifest.skills
+}, null, 2), 'utf8');
+
+// 5. .claude-plugin/plugin.json
+fs.writeFileSync('.claude-plugin/plugin.json', JSON.stringify(manifest, null, 2), 'utf8');
+
+// 6. .cursor-plugin/plugin.json
+fs.writeFileSync('.cursor-plugin/plugin.json', JSON.stringify(manifest, null, 2), 'utf8');
+
+// 7. .cursor/rules/chill-agent.mdc
+fs.writeFileSync('.cursor/rules/chill-agent.mdc', `---
+description: ChillAgent Anti-Slop 2.0 & Pragmatic Senior Dev Standard
+globs: *
+---
+` + fs.readFileSync('skills/chill-slop/SKILL.md', 'utf8'), 'utf8');
+
+// 8. .windsurf/rules/chill-agent.md
+fs.writeFileSync('.windsurf/rules/chill-agent.md', fs.readFileSync('skills/chill-slop/SKILL.md', 'utf8'), 'utf8');
+
+// 9. .cline-plugin/plugin.json & .clinerules
+fs.writeFileSync('.cline-plugin/plugin.json', JSON.stringify(manifest, null, 2), 'utf8');
+fs.writeFileSync('.clinerules/chill-agent', fs.readFileSync('skills/chill-slop/SKILL.md', 'utf8'), 'utf8');
+
+// 10. .codex-plugin/plugin.json & .agents/plugins/marketplace.json
+fs.writeFileSync('.codex-plugin/plugin.json', JSON.stringify(manifest, null, 2), 'utf8');
+fs.writeFileSync('.agents/plugins/marketplace.json', JSON.stringify({
+  plugins: [manifest]
+}, null, 2), 'utf8');
+
+// 11. .kimi-plugin, .omp-plugin, .devin-plugin, .grok-plugin, .qoder-plugin
+fs.writeFileSync('.kimi-plugin/plugin.json', JSON.stringify(manifest, null, 2), 'utf8');
+fs.writeFileSync('.omp-plugin/plugin.json', JSON.stringify(manifest, null, 2), 'utf8');
+fs.writeFileSync('.devin-plugin/plugin.json', JSON.stringify(manifest, null, 2), 'utf8');
+fs.writeFileSync('.grok-plugin/plugin.json', JSON.stringify(manifest, null, 2), 'utf8');
+fs.writeFileSync('.qoder-plugin/plugin.json', JSON.stringify(manifest, null, 2), 'utf8');
+fs.writeFileSync('.qoder/rules/chill-agent.md', fs.readFileSync('skills/chill-slop/SKILL.md', 'utf8'), 'utf8');
+
+console.log('Successfully generated all multi-agent plugin doors and manifests!');

package/scripts/publish-openclaw-skills.js

@@ -0,0 +1,75 @@
+#!/usr/bin/env node
+// Publish the generated OpenClaw skills (.openclaw/skills/) to ClawHub.
+//
+// ClawHub does not sync from GitHub: each skill is pushed explicitly with the
+// clawhub CLI and carries its own version. This publishes every generated skill
+// in one pass, versioned from the repo's package.json so ClawHub tracks the repo
+// instead of drifting (the same drift that hit the plugin manifests in #260).
+//
+// Prereqs:
+//   - `clawhub login` once (registry auth persists)
+//   - skills must be current: run `node scripts/build-openclaw-skills.js` first
+//     if you changed a skill (CI fails if the committed copies are stale)
+//
+// Usage:
+//   node scripts/publish-openclaw-skills.js            # publish all as latest
+//   node scripts/publish-openclaw-skills.js --dry-run  # preview, upload nothing
+//   (any extra args are passed through to `clawhub skill publish`)
+
+const fs = require('fs');
+const path = require('path');
+const { spawnSync } = require('child_process');
+
+const root = path.join(__dirname, '..');
+const skillsDir = path.join(root, '.openclaw', 'skills');
+
+const version = JSON.parse(fs.readFileSync(path.join(root, 'package.json'), 'utf8')).version;
+
+// Every generated skill dir with a SKILL.md is publishable. Reading the dir
+// (instead of a hardcoded list) covers whatever build-openclaw-skills emits,
+// with nothing to keep in sync.
+const slugs = fs.readdirSync(skillsDir, { withFileTypes: true })
+  .filter((e) => e.isDirectory() && fs.existsSync(path.join(skillsDir, e.name, 'SKILL.md')))
+  .map((e) => e.name)
+  .sort();
+
+if (slugs.length === 0) {
+  console.error(`No skills under ${path.relative(root, skillsDir)}; run build-openclaw-skills.js first.`);
+  process.exit(1);
+}
+
+// "ponytail-review" -> "Ponytail Review"
+const displayName = (slug) =>
+  slug.split('-').map((w) => w.charAt(0).toUpperCase() + w.slice(1)).join(' ');
+
+// Minimal quoting that satisfies both POSIX sh and cmd.exe: only display names
+// (which contain a space) need wrapping; slugs, versions, paths, and flags don't.
+const quote = (a) => (/[^\w./-]/.test(a) ? `"${a}"` : a);
+
+const passthrough = process.argv.slice(2);
+const extra = passthrough.length ? ` (${passthrough.join(' ')})` : '';
+console.log(`Publishing ${slugs.length} skills to ClawHub at version ${version}${extra}:`);
+
+for (const slug of slugs) {
+  const args = [
+    'clawhub', 'skill', 'publish', `.openclaw/skills/${slug}`,
+    '--slug', slug,
+    '--name', displayName(slug),
+    '--version', version,
+    '--tags', 'latest',
+    ...passthrough,
+  ];
+  const cmdline = args.map(quote).join(' ');
+  console.log(`\n$ ${cmdline}`);
+  const res = spawnSync(cmdline, { stdio: 'inherit', cwd: root, shell: true });
+  if (res.status !== 0) {
+    console.error(
+      `\nPublish failed for "${slug}" (exit ${res.status}). ` +
+      `Check that the clawhub CLI is installed and you have run \`clawhub login\`, then re-run. ` +
+      `Skills already published in this run are unaffected.`,
+    );
+    process.exit(res.status || 1);
+  }
+}
+
+console.log(`\nDone. Published ${slugs.length} skills at ${version}.`);