cli-jaw 0.1.10 → 0.1.12

package/scripts/check-copilot-gap.ts

@@ -0,0 +1,75 @@
+#!/usr/bin/env node
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+interface CheckItem {
+    name: string;
+    file: string;
+    needle: string;
+}
+
+const __filename: string = fileURLToPath(import.meta.url);
+const __dirname: string = path.dirname(__filename);
+const ROOT = path.resolve(__dirname, '..');
+
+const checks: CheckItem[] = [
+    {
+        name: 'CLI registry has copilot',
+        file: 'src/cli/registry.ts',
+        needle: 'copilot:',
+    },
+    {
+        name: 'Server exposes /api/cli-registry',
+        file: 'server.ts',
+        needle: "app.get('/api/cli-registry'",
+    },
+    {
+        name: 'Settings page includes copilot model select',
+        file: 'public/index.html',
+        needle: 'id="modelCopilot"',
+    },
+    {
+        name: 'Frontend loads registry from API',
+        file: 'public/js/constants.ts',
+        needle: "'/api/cli-registry')",
+    },
+    {
+        name: 'Employees UI uses dynamic CLI keys',
+        file: 'public/js/features/employees',
+        needle: 'getCliKeys()',
+    },
+];
+
+const rows = checks.map((item: CheckItem) => {
+    // Support both .js and .ts (frontend migration may change extensions)
+    const candidates = item.file.includes('.')
+        ? [item.file]
+        : [`${item.file}.ts`, `${item.file}.js`];
+    let content = '';
+    let resolvedFile = item.file;
+    for (const f of candidates) {
+        const fullPath = path.join(ROOT, f);
+        if (fs.existsSync(fullPath)) {
+            content = fs.readFileSync(fullPath, 'utf8');
+            resolvedFile = f;
+            break;
+        }
+    }
+    const ok: boolean = content.includes(item.needle);
+    return { ...item, file: resolvedFile, ok };
+});
+
+console.log('\nCopilot gap check\n');
+for (const row of rows) {
+    const icon = row.ok ? 'OK' : 'MISSING';
+    console.log(`- ${icon}: ${row.name} (${row.file})`);
+}
+
+const failed = rows.filter(r => !r.ok);
+if (failed.length) {
+    console.error(`\nMissing ${failed.length} required item(s).`);
+    process.exit(1);
+}
+
+console.log('\nAll checks passed.');

package/scripts/check-deps-offline.ts

@@ -0,0 +1,98 @@
+#!/usr/bin/env node
+// ─── Offline Dependency Check ────────────────────────
+// Phase 9.7 — package-lock.json 기반 오프라인 취약 버전 검증
+// 네트워크 없이도 알려진 advisory 범위와 비교 가능
+
+import fs from 'node:fs';
+import path from 'node:path';
+
+type SemVer = [number, number, number];
+
+interface PackageLock {
+    packages?: Record<string, { version?: string }>;
+}
+
+interface Rule {
+    pkg: string;
+    test: (v: string) => boolean;
+    adv: string;
+    why: string;
+}
+
+const lockPath = path.resolve('package-lock.json');
+if (!fs.existsSync(lockPath)) {
+    console.error('[deps] package-lock.json not found');
+    process.exit(2);
+}
+
+const lock: PackageLock = JSON.parse(fs.readFileSync(lockPath, 'utf8'));
+const pkgs = lock.packages ?? {};
+
+function ver(p: string): string | null { return pkgs[p]?.version ?? null; }
+
+function semver(v: string | null): SemVer | null {
+    const m = String(v ?? '').match(/^(\d+)\.(\d+)\.(\d+)/);
+    return m ? [+m[1]!, +m[2]!, +m[3]!] as SemVer : null;
+}
+
+function lt(a: SemVer, b: SemVer): boolean {
+    for (let i = 0; i < 3; i++) { if (a[i]! !== b[i]!) return a[i]! < b[i]!; }
+    return false;
+}
+
+function gte(a: SemVer, b: SemVer): boolean { return !lt(a, b); }
+
+function inRange(v: string, lo: string, hi: string): boolean {
+    const sv = semver(v);
+    const loSv = semver(lo);
+    const hiSv = semver(hi);
+    return sv !== null && loSv !== null && hiSv !== null && gte(sv, loSv) && lt(sv, hiSv);
+}
+
+// ─── Advisory Rules ──────────────────────────────────
+const rules: Rule[] = [
+    {
+        pkg: 'node_modules/ws',
+        test: (v: string) => inRange(v, '8.0.0', '8.17.1'),
+        adv: 'GHSA-3h5v-q93c-6h6q',
+        why: 'DoS via infinite loop',
+    },
+    {
+        pkg: 'node_modules/node-fetch',
+        test: (v: string) => {
+            const sv = semver(v);
+            const target = semver('2.6.7');
+            return inRange(v, '3.0.0', '3.1.1') || (sv !== null && target !== null && lt(sv, target));
+        },
+        adv: 'GHSA-r683-j2x4-v87g',
+        why: 'header forwarding to third-party',
+    },
+    {
+        pkg: 'node_modules/grammy/node_modules/node-fetch',
+        test: (v: string) => {
+            const sv = semver(v);
+            const target = semver('2.6.7');
+            return sv !== null && target !== null && lt(sv, target);
+        },
+        adv: 'GHSA-r683-j2x4-v87g',
+        why: 'transitive dependency',
+    },
+];
+
+// ─── Check ───────────────────────────────────────────
+let fail = 0;
+for (const r of rules) {
+    const v = ver(r.pkg);
+    if (!v) {
+        console.log(`SKIP ${r.pkg} (not installed)`);
+        continue;
+    }
+    if (r.test(v)) {
+        fail++;
+        console.error(`FAIL ${r.pkg}@${v} → ${r.adv} (${r.why})`);
+    } else {
+        console.log(`PASS ${r.pkg}@${v}`);
+    }
+}
+
+process.exit(fail > 0 ? 1 : 0);

package/scripts/fresh-install-smoke.ts

@@ -0,0 +1,130 @@
+#!/usr/bin/env node
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { execFileSync, spawn, type ChildProcess, type ExecFileSyncOptions } from 'node:child_process';
+
+const root: string = process.cwd();
+
+function run(cmd: string, args: string[], opts: ExecFileSyncOptions = {}): string {
+    return execFileSync(cmd, args, {
+        cwd: root,
+        encoding: 'utf8',
+        stdio: ['ignore', 'pipe', 'pipe'],
+        ...opts,
+    }) as string;
+}
+
+function sleep(ms: number): Promise<void> {
+    return new Promise(resolve => setTimeout(resolve, ms));
+}
+
+async function waitFor(url: string, timeoutMs: number = 15000): Promise<boolean> {
+    const started = Date.now();
+    while (Date.now() - started < timeoutMs) {
+        try {
+            const res = await fetch(url);
+            if (res.ok) return true;
+        } catch {
+            // retry
+        }
+        await sleep(300);
+    }
+    return false;
+}
+
+function resolveInstalledPackage(prefix: string): string {
+    const candidates = [
+        path.join(prefix, 'lib', 'node_modules', 'cli-jaw'),
+        path.join(prefix, 'node_modules', 'cli-jaw'),
+    ];
+    for (const c of candidates) {
+        if (fs.existsSync(c)) return c;
+    }
+    throw new Error(`installed package path not found under prefix: ${prefix}`);
+}
+
+interface NpmPackResult {
+    filename?: string;
+}
+
+async function main(): Promise<void> {
+    let tarballPath: string | null = null;
+    let tmp: string | null = null;
+    let server: ChildProcess | null = null;
+
+    try {
+        const packOut = run('npm', ['pack', '--json']);
+        const pack: NpmPackResult[] = JSON.parse(packOut);
+        const tarballName = pack[0]?.filename;
+        if (!tarballName) throw new Error('npm pack did not return filename');
+
+        tarballPath = path.join(root, tarballName);
+        if (!fs.existsSync(tarballPath)) throw new Error(`tarball not found: ${tarballPath}`);
+
+        tmp = fs.mkdtempSync(path.join(os.tmpdir(), 'jaw-fresh-'));
+        const prefix = path.join(tmp, 'prefix');
+        const jawHome = path.join(tmp, 'jaw-home');
+        fs.mkdirSync(prefix, { recursive: true });
+
+        const installEnv: NodeJS.ProcessEnv = { ...process.env, JAW_SAFE: '1', npm_config_loglevel: 'error' };
+        run('npm', ['i', '-g', tarballPath, '--prefix', prefix], { env: installEnv });
+
+        const pkgDir = resolveInstalledPackage(prefix);
+        const jawEntry = path.join(pkgDir, 'dist', 'bin', 'cli-jaw.js');
+        if (!fs.existsSync(jawEntry)) throw new Error(`cli entry not found: ${jawEntry}`);
+
+        const jawEnv: NodeJS.ProcessEnv = { ...process.env, CLI_JAW_HOME: jawHome };
+
+        const version = run(process.execPath, [jawEntry, '--version'], { env: jawEnv }).trim();
+        if (!version.toLowerCase().includes('cli-jaw')) throw new Error(`unexpected version output: ${version}`);
+
+        const doctorRaw = run(process.execPath, [jawEntry, '--home', jawHome, 'doctor', '--json'], { env: jawEnv });
+        const doctor = JSON.parse(doctorRaw) as { checks?: unknown[] };
+        if (!Array.isArray(doctor?.checks) || doctor.checks.length === 0) {
+            throw new Error('doctor --json returned empty checks');
+        }
+
+        const port = 30000 + Math.floor(Math.random() * 20000);
+        server = spawn(process.execPath, [jawEntry, '--home', jawHome, 'serve', '--port', String(port)], {
+            cwd: root,
+            env: jawEnv,
+            stdio: 'pipe',
+        });
+
+        const ready = await waitFor(`http://127.0.0.1:${port}/api/session`, 20000);
+        if (!ready) throw new Error('server did not become ready in time');
+
+        const cliRes = await fetch(`http://127.0.0.1:${port}/api/cli-status`);
+        if (!cliRes.ok) throw new Error(`/api/cli-status HTTP ${cliRes.status}`);
+        const cliJson = (await cliRes.json()) as Record<string, unknown> | null;
+        const keys = Object.keys(cliJson ?? {});
+        const required: string[] = ['claude', 'codex', 'gemini', 'copilot', 'opencode'];
+        for (const k of required) {
+            if (!keys.includes(k)) throw new Error(`missing cli key in status: ${k}`);
+        }
+
+        console.log('[fresh-install-smoke] PASS');
+        console.log(`[fresh-install-smoke] version=${version}`);
+        console.log(`[fresh-install-smoke] checks=${doctor.checks.length}`);
+        console.log(`[fresh-install-smoke] cli-status keys=${keys.join(',')}`);
+    } finally {
+        if (server && !server.killed) {
+            server.kill('SIGTERM');
+            await sleep(500);
+            if (!server.killed) server.kill('SIGKILL');
+        }
+        if (tarballPath && fs.existsSync(tarballPath)) {
+            fs.unlinkSync(tarballPath);
+        }
+        if (tmp && fs.existsSync(tmp)) {
+            fs.rmSync(tmp, { recursive: true, force: true });
+        }
+    }
+}
+
+main().catch((err: unknown) => {
+    console.error('[fresh-install-smoke] FAIL');
+    console.error((err as Error)?.stack || String(err));
+    process.exit(1);
+});

package/scripts/i18n-registry.ts

@@ -0,0 +1,230 @@
+#!/usr/bin/env node
+/**
+ * Add dual-key i18n fields to skills registry.
+ *
+ * For each skill:
+ *   - name_ko = current name
+ *   - name_en = English name
+ *   - desc_ko = current description
+ *   - desc_en = English description
+ *   - Preserves original name/description for backward compat
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+// ─── Types ───────────────────────────────────────────
+interface Skill {
+    name?: string;
+    description?: string;
+    name_ko?: string;
+    name_en?: string;
+    desc_ko?: string;
+    desc_en?: string;
+    [key: string]: unknown;
+}
+
+interface Registry {
+    skills: Record<string, Skill>;
+    [key: string]: unknown;
+}
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const REGISTRY = path.resolve(__dirname, '..', 'skills_ref', 'registry.json');
+
+// Manual name translations (19 skills with Korean names)
+const NAME_EN: Record<string, string> = {
+    himalaya: 'Email (Himalaya)',
+    github: 'GitHub',
+    'skill-creator': 'Skill Creator',
+    weather: 'Weather',
+    'video-frames': 'Video Frames',
+    summarize: 'URL Summarizer',
+    goplaces: 'Places Search',
+    'nano-banana-pro': 'Image Gen (Gemini)',
+    browser: 'Browser Control',
+    'develop-web-game': 'Web Game Dev',
+    'figma-implement-design': 'Figma → Code',
+    'notion-knowledge-capture': 'Notion Knowledge Capture',
+    'notion-meeting-intelligence': 'Notion Meeting Intelligence',
+    'notion-research-documentation': 'Notion Research Documentation',
+    'notion-spec-to-implementation': 'Notion Spec → Tasks',
+    sora: 'Sora Video',
+    transcribe: 'Speech → Text',
+    imagegen: 'Image Gen (OpenAI)',
+    pdf: 'PDF Reader/Writer',
+};
+
+// Full description translations for all 107+ skills
+const DESC_EN: Record<string, string> = {
+    notion: 'Notion page/DB CRUD via curl API calls. Complements Codex notion-* skills.',
+    trello: 'Trello board/list/card management via curl REST API.',
+    obsidian: 'Obsidian vault note creation, search, and tag management.',
+    'things-mac': 'Things 3 todo add/complete/search. AppleScript + URL scheme.',
+    'apple-notes': 'Apple Notes create/search. AppleScript-based.',
+    'apple-reminders': 'Apple Reminders add/complete/list management. AppleScript-based.',
+    'apple-messages': 'Send iMessage/SMS via AppleScript.',
+    linear: 'Linear issue/project/cycle management via GraphQL API.',
+    bear: 'Bear note markdown editing/archiving. x-callback-url scheme.',
+    'google-calendar': 'gcalcli-based Google Calendar event CRUD.',
+    himalaya: 'Terminal email read/write/reply/search. Gmail/Outlook supported.',
+    gog: 'Gmail, Calendar, Drive, Sheets, Docs integrated management.',
+    xurl: 'Tweet post/search/reply/DM/media upload.',
+    'telegram-send': 'Send voice/photo/document directly via Telegram local API.',
+    github: 'GitHub gh CLI integration: issues, PRs, CI, code review, API + PR comments, CI debugging, auto-fix.',
+    tmux: 'tmux session remote control. Send keystrokes + read output.',
+    'skill-creator': 'Auto-generate new SKILL.md. Template + guidelines provided.',
+    weather: 'wttr.in weather/forecast lookup. No API key needed.',
+    'video-frames': 'Extract video frames/segments with ffmpeg.',
+    summarize: 'Summarize URLs, YouTube videos, and files to text.',
+    goplaces: 'Google Places API for location, reviews, and business hours search.',
+    '1password': '1Password CLI for password/document/OTP lookup.',
+    'nano-banana-pro': 'Generate/edit images with Gemini 3 Pro. Different model from Codex imagegen.',
+    'spotify-player': 'Spotify play/pause/search/playlist management.',
+    openhue: 'Hue light/scene control. "Dim living room to 50%"',
+    browser: 'Chrome browser automation. Identify elements via ref snapshots → click/type.',
+    'vision-click': 'Vision-based coordinate clicking. Codex CLI only. Screenshot → AI coordinate → pixel click.',
+    tts: 'macOS say command text-to-speech. Multi-language, file output.',
+    'screen-capture': 'macOS screenshot/webcam/recording. Full/region/window/multi-monitor. Default fallback when tool-specific capture unavailable.',
+    atlas: 'Control ChatGPT Atlas app. macOS only.',
+    'cloudflare-deploy': 'Deploy to Cloudflare Workers/Pages. wrangler CLI.',
+    'develop-web-game': 'Web game development + Playwright test loop.',
+    'figma-implement-design': 'Convert Figma designs to 1:1 code. Requires Figma MCP.',
+    'jupyter-notebook': '.ipynb create/edit. Bundled Python script.',
+    'netlify-deploy': 'Deploy Netlify sites. netlify CLI.',
+    'notion-knowledge-capture': 'Conversation → Notion wiki/FAQ/HOW-TO capture. Notion MCP.',
+    'notion-meeting-intelligence': 'Meeting prep (per-attendee context, agenda). Notion MCP.',
+    'notion-research-documentation': 'Notion multi-source → report/comparison synthesis. Notion MCP.',
+    'notion-spec-to-implementation': 'PRD/spec → implementation plan + auto task creation. Notion MCP.',
+    'render-deploy': 'Deploy Render services. Blueprint YAML.',
+    sentry: 'Sentry issue/event lookup. Bundled Python script.',
+    sora: 'Sora video generation/management. OpenAI API.',
+    speech: 'OpenAI TTS voice synthesis. Bundled Python script.',
+    transcribe: 'OpenAI Whisper speech-to-text + speaker diarization.',
+    'vercel-deploy': 'Vercel project deployment.',
+    memory: 'Long-term memory across sessions. Stored in markdown files, grep search.',
+    imagegen: 'Generate/edit images via OpenAI Images API.',
+    'openai-docs': 'OpenAI product/API official documentation reference. Build guides.',
+    pdf: 'PDF read/create/edit/review. reportlab/pdfplumber/pypdf + nano-pdf natural language editing.',
+    'frontend-design': 'Unique, production-grade frontend UI/page design and implementation.',
+    docx: '.docx document create/edit/read. Visual verification (soffice→PDF→PNG), tracked changes, python-docx.',
+    xlsx: '.xlsx/.xlsm/.csv/.tsv file create/edit/analyze/format. Includes pandas data analysis.',
+    'webapp-testing': 'Playwright-based web app interaction/verification/debugging test skill.',
+    'mcp-builder': 'Design/implement MCP servers for external API integration.',
+    pptx: 'Presentation (.pptx) create/edit/analyze skill.',
+    'doc-coauthoring': 'Structured planning/spec/document co-authoring workflow skill.',
+    'web-artifacts-builder': 'React/Tailwind complex web artifact creation skill.',
+    'theme-factory': 'Apply reusable themes to document/slide/HTML outputs.',
+    'web-routing': 'Guide skill for routing browser requests to browser/webapp-testing.',
+    'algorithmic-art': 'p5.js generative art. Algorithm-based visual artwork creation.',
+    'canvas-design': 'Create PNG/PDF visual designs via Canvas API.',
+    'react-best-practices': 'React code patterns, performance optimization, component design best practices.',
+    'web-perf': 'Core Web Vitals audit. Lighthouse/CrUX-based performance analysis.',
+    'agents-sdk': 'Cloudflare Workers AI Agents SDK usage guide.',
+    'durable-objects': 'Cloudflare Durable Objects (RPC+SQLite+WebSocket) stateful workers.',
+    'static-analysis': 'CodeQL+Semgrep+SARIF static security analysis.',
+    'insecure-defaults': 'Detect hardcoded secrets, weak crypto, and insecure defaults.',
+    'modern-python': 'uv+ruff+ty+pytest Python best practices.',
+    'differential-review': 'Security-focused diff review. Analyze security impact of code changes.',
+    'property-based-testing': 'Multi-language property-based testing (Hypothesis/fast-check etc.).',
+    'security-best-practices': 'Language-specific security vulnerability pattern review.',
+    'security-ownership-map': 'Codebase owner/bus-factor mapping.',
+    'security-threat-model': 'Per-repo threat model generation (STRIDE/DREAD).',
+    'hugging-face-cli': 'HF Hub CLI for model/dataset/space management.',
+    'hugging-face-model-trainer': 'TRL: SFT/DPO/GRPO model training.',
+    'hugging-face-evaluation': 'vLLM/lighteval model evaluation and benchmarks.',
+    'fal-image-edit': 'fal.ai AI image editing (style transfer, object removal).',
+    brainstorming: 'Pre-coding idea refinement → design document creation (obra/superpowers).',
+    'writing-plans': '2-5 minute task decomposition. File paths/code/verification included.',
+    tdd: 'RED-GREEN-REFACTOR TDD cycle enforcement.',
+    'requesting-code-review': 'Internal agent code review. Severity-based blocking.',
+    'receiving-code-review': 'Code review feedback reception and response patterns.',
+    'dispatching-parallel-agents': 'Parallel sub-agent dispatch patterns.',
+    'debugging-helpers': 'Systematic debugging helpers.',
+    'git-worktrees': 'git worktree-based isolated branch workflow.',
+    'codebase-orientation': 'Project entrypoint/module/build mapping. Onboarding guide.',
+    'debugging-checklist': 'Reproduce → isolate → log → hypothesis verification debugging checklist.',
+    'error-message-explainer': 'Compiler/runtime error → cause + fix suggestions.',
+    'config-file-explainer': 'Config file structure/keys/defaults explanation.',
+    'data-structure-chooser': 'Data structure time/space tradeoff recommendations.',
+    'log-summarizer': 'Log grouping + first failure identification + action suggestions.',
+    'linter-fix-guide': 'Lint rule explanation + pattern examples + minimal fix suggestions.',
+    'dependency-install-helper': 'Platform-specific dependency installation steps + verification commands.',
+    'changelog-generator': 'git commit → changelog/release notes generation.',
+    'video-downloader': 'yt-dlp wrapper. YouTube/media download.',
+    'email-draft-polish': 'Email draft tone adjustment/formatting.',
+    postgres: 'PostgreSQL read-only queries. Schema exploration.',
+    'deep-research': 'Multi-step research agent. Search → analyze → summarize.',
+    'context-compression': 'Context compression strategies. Long session optimization.',
+    'ios-simulator': 'iOS Simulator control. App build/run/test.',
+    'apple-hig-skills': 'Apple HIG 14 guides (foundations/platforms/components/patterns).',
+    whatsapp: 'WhatsApp message automation (automate-whatsapp).',
+    'aws-skills': 'AWS infrastructure automation (CDK/CloudFormation/Lambda).',
+    terraform: 'HashiCorp Terraform HCL/modules/providers IaC.',
+    kreuzberg: '62+ format text extraction (PDF/DOCX/PPTX/images etc.).',
+    dev: 'Common development guide. Modular dev, self-reference patterns, skills_ref exploration, changelog.',
+    'dev-frontend': 'Frontend role guide. Unique UI/UX implementation, component design, aesthetic standards.',
+    'dev-backend': 'Backend role guide. Express.js patterns, SQLite, error handling, security basics.',
+    'dev-data': 'Data role guide. ETL pipelines, CSV/JSON processing, SQL queries, analysis.',
+    'dev-testing': 'Debugging phase only. Playwright web app testing, recon-action pattern.',
+};
+
+function main(): void {
+    const raw = fs.readFileSync(REGISTRY, 'utf8');
+    const data: Registry = JSON.parse(raw);
+
+    const skills = data.skills;
+    let updated = 0;
+
+    for (const [skillId, skill] of Object.entries(skills)) {
+        const name = skill.name ?? skillId;
+        const desc = skill.description ?? '';
+
+        // Set ko fields
+        skill.name_ko = name;
+        skill.desc_ko = desc;
+
+        // Set en fields
+        const hasKoName = /[\uac00-\ud7af]/.test(name);
+        skill.name_en = hasKoName ? (NAME_EN[skillId] ?? name) : name;
+
+        skill.desc_en = DESC_EN[skillId] ?? desc;
+        updated++;
+    }
+
+    // Reorder keys: keep original order, insert i18n fields after description
+    const newSkills: Record<string, Skill> = {};
+    for (const [skillId, skill] of Object.entries(skills)) {
+        const ordered: Record<string, unknown> = {};
+        for (const [k, v] of Object.entries(skill)) {
+            ordered[k] = v;
+            if (k === 'name') {
+                ordered.name_ko = skill.name_ko;
+                ordered.name_en = skill.name_en;
+            } else if (k === 'description') {
+                ordered.desc_ko = skill.desc_ko;
+                ordered.desc_en = skill.desc_en;
+            }
+        }
+        newSkills[skillId] = ordered as Skill;
+    }
+
+    data.skills = newSkills;
+
+    fs.writeFileSync(REGISTRY, JSON.stringify(data, null, 4) + '\n', 'utf8');
+
+    console.log(`Updated ${updated} skills with i18n fields`);
+
+    // Verify
+    const missingEn = Object.entries(newSkills)
+        .filter(([, v]) => !v.desc_en)
+        .map(([k]) => k);
+
+    if (missingEn.length) {
+        console.log(`WARNING: ${missingEn.length} skills missing desc_en: ${missingEn}`);
+    } else {
+        console.log('All skills have desc_en ✓');
+    }
+}
+
+main();

package/scripts/postinstall-guard.cjs

@@ -2,6 +2,11 @@
 /**
  * postinstall-guard.cjs — Cross-platform guard for postinstall.
  *
+ * ⚠️ INTENTIONALLY CommonJS (.cjs) — DO NOT convert to TypeScript.
+ * Reason: Runs during `npm postinstall` BEFORE any build step.
+ * At this point, tsx/tsc may not be available (fresh install).
+ * Must work with bare Node.js on all platforms (macOS/Linux/Windows).
+ *
  * 1. Node version check (fail-fast before any build attempt)
  * 2. dist/bin/postinstall.js exists? → exit 0
  * 3. Dev clone fallback: local tsc → build → exit 0

package/dist/bin/cli-claw.js

@@ -1,96 +0,0 @@
-#!/usr/bin/env node
-/**
- * cli-claw — Phase 9.1
- * CLI entrypoint with subcommand routing.
- * No external dependencies — Node built-in only.
- */
-import { dirname, join } from 'node:path';
-import { fileURLToPath } from 'node:url';
-import { readFileSync } from 'node:fs';
-const __dirname = dirname(fileURLToPath(import.meta.url));
-let pkg;
-try {
-    pkg = JSON.parse(readFileSync(join(__dirname, '..', 'package.json'), 'utf8'));
-}
-catch {
-    pkg = JSON.parse(readFileSync(join(__dirname, '..', '..', 'package.json'), 'utf8'));
-}
-const command = process.argv[2];
-function printHelp() {
-    console.log(`
-  🦞 cli-claw v${pkg.version}
-
-  Usage:  cli-claw <command> [options]
-
-  Commands:
-    serve      서버 시작 (포그라운드)
-    init       초기 설정 마법사
-    doctor     설치/설정 진단
-    chat       터미널 채팅 (REPL)
-    employee   직원 관리 (reset)
-    reset      전체 초기화 (MCP/스킬/직원/세션)
-    mcp        MCP 서버 관리 (install/sync/list)
-    skill      스킬 관리 (install/remove/info)
-    status     서버 상태 확인
-
-  Options:
-    --help     도움말 표시
-    --version  버전 표시
-
-  Examples:
-    cli-claw serve --port 3457
-    cli-claw init
-    cli-claw doctor --json
-    cli-claw chat --raw
-`);
-}
-switch (command) {
-    case 'serve':
-        await import('./commands/serve.js');
-        break;
-    case 'init':
-        await import('./commands/init.js');
-        break;
-    case 'doctor':
-        await import('./commands/doctor.js');
-        break;
-    case 'chat':
-        await import('./commands/chat.js');
-        break;
-    case 'employee':
-        await import('./commands/employee.js');
-        break;
-    case 'reset':
-        await import('./commands/reset.js');
-        break;
-    case 'mcp':
-        await import('./commands/mcp.js');
-        break;
-    case 'skill':
-        await import('./commands/skill.js');
-        break;
-    case 'status':
-        await import('./commands/status.js');
-        break;
-    case 'browser':
-        await import('./commands/browser.js');
-        break;
-    case 'memory':
-        await import('./commands/memory.js');
-        break;
-    case '--version':
-    case '-v':
-        console.log(`cli-claw v${pkg.version}`);
-        break;
-    case '--help':
-    case '-h':
-    case undefined:
-        printHelp();
-        break;
-    default:
-        console.error(`  ❌ Unknown command: ${command}\n`);
-        printHelp();
-        process.exitCode = 1;
-        break;
-}
-//# sourceMappingURL=cli-claw.js.map

package/dist/bin/cli-claw.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"cli-claw.js","sourceRoot":"","sources":["../../bin/cli-claw.ts"],"names":[],"mappings":";AACA;;;;GAIG;AACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,IAAI,GAAwC,CAAC;AAC7C,IAAI,CAAC;IACD,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AAClF,CAAC;AAAC,MAAM,CAAC;IACL,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAEhC,SAAS,SAAS;IACd,OAAO,CAAC,GAAG,CAAC;iBACC,GAAG,CAAC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;CAwB3B,CAAC,CAAC;AACH,CAAC;AAED,QAAQ,OAAO,EAAE,CAAC;IACd,KAAK,OAAO;QACR,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACpC,MAAM;IACV,KAAK,MAAM;QACP,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACnC,MAAM;IACV,KAAK,QAAQ;QACT,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;QACrC,MAAM;IACV,KAAK,MAAM;QACP,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACnC,MAAM;IACV,KAAK,UAAU;QACX,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QACvC,MAAM;IACV,KAAK,OAAO;QACR,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACpC,MAAM;IACV,KAAK,KAAK;QACN,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAClC,MAAM;IACV,KAAK,OAAO;QACR,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACpC,MAAM;IACV,KAAK,QAAQ;QACT,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;QACrC,MAAM;IACV,KAAK,SAAS;QACV,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;QACtC,MAAM;IACV,KAAK,QAAQ;QACT,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;QACrC,MAAM;IACV,KAAK,WAAW,CAAC;IACjB,KAAK,IAAI;QACL,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACxC,MAAM;IACV,KAAK,QAAQ,CAAC;IACd,KAAK,IAAI,CAAC;IACV,KAAK,SAAS;QACV,SAAS,EAAE,CAAC;QACZ,MAAM;IACV;QACI,OAAO,CAAC,KAAK,CAAC,wBAAwB,OAAO,IAAI,CAAC,CAAC;QACnD,SAAS,EAAE,CAAC;QACZ,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,MAAM;AACd,CAAC"}