codymaster 4.5.1 → 4.5.3

package/dist/index.js

@@ -71,6 +71,30 @@ const hamster_1 = require("./ui/hamster");
 const hooks_1 = require("./ui/hooks");
 const onboarding_1 = require("./ui/onboarding");
 const VERSION = require('../package.json').version;
+let ALL_SKILLS = [];
+try {
+    const distSkillsDir = path_1.default.join(__dirname, '..', 'skills');
+    if (fs_1.default.existsSync(distSkillsDir)) {
+        ALL_SKILLS = fs_1.default.readdirSync(distSkillsDir).filter(f => {
+            const fullPath = path_1.default.join(distSkillsDir, f);
+            return fs_1.default.statSync(fullPath).isDirectory() && fs_1.default.existsSync(path_1.default.join(fullPath, 'SKILL.md'));
+        });
+    }
+}
+catch (e) {
+    // Silent fallback
+}
+if (ALL_SKILLS.length === 0) {
+    ALL_SKILLS = [
+        'cm-tdd', 'cm-debugging', 'cm-quality-gate', 'cm-test-gate', 'cm-code-review',
+        'cm-safe-deploy', 'cm-identity-guard', 'cm-git-worktrees', 'cm-terminal', 'cm-secret-shield', 'cm-security-gate', 'cm-safe-i18n',
+        'cm-planning', 'cm-ux-master', 'cm-ui-preview', 'cm-brainstorm-idea', 'cm-jtbd', 'cm-dockit', 'cm-project-bootstrap', 'cm-readit',
+        'cm-content-factory', 'cm-ads-tracker', 'cro-methodology', 'cm-deep-search',
+        'cm-execution', 'cm-continuity', 'cm-skill-index', 'cm-skill-mastery', 'cm-skill-chain',
+        'cm-start', 'cm-dashboard', 'cm-status', 'cm-how-it-work', 'cm-example',
+    ];
+}
+const SKILL_COUNT = ALL_SKILLS.length;
 // ─── Update Check ───────────────────────────────────────────────────────────
 let _updateMessage = '';
 function checkForUpdates() {
@@ -134,7 +158,7 @@ function printUpdateNotice() {
 function showBanner() {
     const cPath = process.cwd().replace(os_1.default.homedir(), '~');
     const profile = (0, hooks_1.loadProfile)();
-    console.log((0, hamster_1.renderHamsterBanner)(profile.userName || undefined, VERSION, cPath));
+    console.log((0, hamster_1.renderHamsterBanner)(profile.userName || undefined, VERSION, cPath, SKILL_COUNT));
     printUpdateNotice();
 }
 // ─── Utility ────────────────────────────────────────────────────────────────
@@ -177,7 +201,7 @@ function postInstallOnboarding(platform) {
                 message: 'What would you like to do?',
                 options: [
                     { label: `${theme_1.ICONS.dashboard}  Launch Dashboard`, value: 'dashboard', hint: `localhost:${data_1.DEFAULT_PORT}` },
-                    { label: `${theme_1.ICONS.skill}  Browse all 65 skills`, value: 'skills' },
+                    { label: `${theme_1.ICONS.skill}  Browse all ${SKILL_COUNT} skills`, value: 'skills' },
                     { label: `${theme_1.ICONS.deploy}  Start with your AI`, value: 'invoke', hint: profile.platform || 'any agent' },
                     { label: `${(0, theme_1.success)('✓')}  Done`, value: 'done' },
                 ],
@@ -258,7 +282,7 @@ function showInteractiveMenu() {
                 { label: `${theme_1.ICONS.dashboard}  Dashboard`, value: 'dashboard', hint: isDashboardRunning() ? 'Open' : 'Start & open' },
                 { label: `${theme_1.ICONS.task}  My Tasks`, value: 'tasks', hint: `${taskCounts.totalTasks} total` },
                 { label: `📈 Status`, value: 'status', hint: 'Health snapshot' },
-                { label: `${theme_1.ICONS.skill}  Browse Skills`, value: 'skills', hint: '65 skills' },
+                { label: `${theme_1.ICONS.skill}  Browse Skills`, value: 'skills', hint: `${SKILL_COUNT} skills` },
                 { label: `➕ Add a Task`, value: 'addtask', hint: 'Quick add' },
                 { label: `⚡ Install Skills`, value: 'install', hint: 'Update all' },
                 { label: `${theme_1.ICONS.hamster}  My Profile`, value: 'profile', hint: `${profile.level}` },
@@ -318,7 +342,7 @@ function showInteractiveMenu() {
                     `${(0, theme_1.brand)('cm task list')}          ${(0, theme_1.dim)('View tasks')}`,
                     `${(0, theme_1.brand)('cm status')}             ${(0, theme_1.dim)('Project health')}`,
                     `${(0, theme_1.brand)('cm dashboard')}          ${(0, theme_1.dim)('Mission Control')}`,
-                    `${(0, theme_1.brand)('cm list')}               ${(0, theme_1.dim)('Browse 65 skills')}`,
+                    `${(0, theme_1.brand)('cm list')}               ${(0, theme_1.dim)(`Browse ${SKILL_COUNT} skills`)}`,
                     `${(0, theme_1.brand)('cm deploy')} ${(0, theme_1.dim)('<env>')}       ${(0, theme_1.dim)('Record deploy')}`,
                     `${(0, theme_1.brand)('cm profile')}            ${(0, theme_1.dim)('Your stats')}`,
                 ];
@@ -332,7 +356,7 @@ function showInteractiveMenu() {
 const program = new commander_1.Command();
 program
     .name('cm')
-    .description('Cody — 65 Skills. Ship 10x faster.')
+    .description(`Cody — ${SKILL_COUNT} Skills. Ship 10x faster.`)
     .version(VERSION, '-v, --version', 'Show version')
     .argument('[cmd]', 'Command to run', '')
     .action((cmd) => __awaiter(void 0, void 0, void 0, function* () {
@@ -1093,20 +1117,6 @@ program
     console.log((0, box_1.renderResult)('success', `Skill '${skill}' installed for ${opts.platform}!`));
 }));
 // ─── Add Command (npx codymaster add --skill cm-debugging) ───────────────────
-const ALL_SKILLS = [
-    // Engineering
-    'cm-tdd', 'cm-debugging', 'cm-quality-gate', 'cm-test-gate', 'cm-code-review',
-    // Operations
-    'cm-safe-deploy', 'cm-identity-guard', 'cm-git-worktrees', 'cm-terminal', 'cm-secret-shield', 'cm-security-gate', 'cm-safe-i18n',
-    // Product
-    'cm-planning', 'cm-ux-master', 'cm-ui-preview', 'cm-brainstorm-idea', 'cm-jtbd', 'cm-dockit', 'cm-project-bootstrap', 'cm-readit',
-    // Growth
-    'cm-content-factory', 'cm-ads-tracker', 'cro-methodology', 'cm-deep-search',
-    // Orchestration
-    'cm-execution', 'cm-continuity', 'cm-skill-index', 'cm-skill-mastery', 'cm-skill-chain',
-    // Workflow
-    'cm-start', 'cm-dashboard', 'cm-status', 'cm-how-it-work', 'cm-example',
-];
 const PLATFORM_TARGETS = {
     gemini: { dir: '.gemini/skills', invoke: '@[/<skill>]', note: 'or ~/.gemini/antigravity/skills/ for global' },
     cursor: { dir: '.cursor/rules', invoke: '@<skill>', note: 'Cursor rules directory' },
@@ -1169,7 +1179,7 @@ function doAddSkills(skills, platform) {
         const { execFileSync } = require('child_process');
         if (platform === 'claude') {
             console.log((0, theme_1.brand)('🟣 Claude Code — Installing via plugin system'));
-            console.log((0, theme_1.dim)('   (Claude installs all 65 skills as one bundle)\n'));
+            console.log((0, theme_1.dim)('   (Claude installs all ${SKILL_COUNT} skills as one bundle)\n'));
             // Step 1: Register marketplace
             console.log((0, theme_1.dim)('   $ claude plugin marketplace add tody-agent/codymaster'));
             try {
@@ -1193,7 +1203,7 @@ function doAddSkills(skills, platform) {
             console.log((0, theme_1.dim)('   $ claude plugin install codymaster@codymaster'));
             try {
                 execFileSync('claude', ['plugin', 'install', 'codymaster@codymaster'], { stdio: 'inherit' });
-                console.log((0, box_1.renderResult)('success', 'All 65 skills installed!'));
+                console.log((0, box_1.renderResult)('success', `All ${SKILL_COUNT} skills installed!`));
                 yield postInstallOnboarding('claude');
             }
             catch (_b) {
@@ -1225,7 +1235,7 @@ function doAddSkills(skills, platform) {
         }
         const icons = { cursor: '🔵', windsurf: '🟠', cline: '⚫', opencode: '📦', kiro: '🔶' };
         const icon = icons[platform] || '📦';
-        const label = skills.length === ALL_SKILLS.length ? 'all 65 skills' : skills.join(', ');
+        const label = skills.length === ALL_SKILLS.length ? `all ${SKILL_COUNT} skills` : skills.join(', ');
         console.log(`${icon} ${(0, theme_1.brand)(`${platform} — Installing ${label}`)}`);
         console.log((0, theme_1.dim)(`   Target: ./${target.dir}/\n`));
         let ok = 0, fail = 0;
@@ -1282,7 +1292,7 @@ program
     .command('add')
     .description('Add skills to your AI agent  (npx codymaster add --skill cm-debugging)')
     .option('--skill <name>', 'Specific skill to add (e.g. cm-debugging)')
-    .option('--all', 'Add all 65 skills')
+    .option('--all', `Add all ${SKILL_COUNT} skills`)
     .option('--platform <platform>', 'Target: claude|gemini|cursor|windsurf|cline|opencode|kiro|copilot')
     .option('--list', 'Show available skills and exit')
     .action((opts) => __awaiter(void 0, void 0, void 0, function* () {
@@ -1339,7 +1349,7 @@ program
             const mode = yield p.select({
                 message: 'What to install?',
                 options: [
-                    { label: 'All 65 skills (full kit)', value: 'all' },
+                    { label: `All ${SKILL_COUNT} skills (full kit)`, value: 'all' },
                     { label: 'Search & pick one skill', value: 'pick' },
                 ],
             });
@@ -1365,7 +1375,7 @@ program
 program
     .command('list')
     .alias('ls')
-    .description('List all 65 available skills')
+    .description(`List all ${SKILL_COUNT} available skills`)
     .option('-d, --domain <domain>', 'Filter by domain')
     .action((opts) => {
     skillList(opts.domain);
@@ -1978,7 +1988,7 @@ const SKILL_CATALOG = {
             { name: 'cm-start', desc: 'Onboarding & session kick-off wizard' },
             { name: 'cm-dashboard', desc: 'Project status & task Kanban board' },
             { name: 'cm-status', desc: 'Quick project health snapshot' },
-            { name: 'cm-how-it-work', desc: 'Interactive explainer for all 65 skills' },
+            { name: 'cm-how-it-work', desc: `Interactive explainer for all ${SKILL_COUNT} skills` },
             { name: 'cm-example', desc: 'Minimal template for new skills' },
         ],
     },
@@ -2024,7 +2034,7 @@ function skillList(filterDomain) {
         console.log((0, box_1.renderResult)('error', `Domain not found: ${filterDomain}`, [(0, theme_1.dim)('Domains: engineering, operations, product, growth, orchestration, workflow')]));
         return;
     }
-    console.log((0, box_1.renderCommandHeader)('Cody Master — 65 Skills', '🧩'));
+    console.log((0, box_1.renderCommandHeader)(`Cody Master — ${SKILL_COUNT} Skills`, '🧩'));
     let total = 0;
     for (const [domain, data] of entries) {
         console.log((0, theme_1.brand)(`  ${data.icon} ${domain.charAt(0).toUpperCase() + domain.slice(1)}`));

package/dist/ui/hamster.js

@@ -193,7 +193,7 @@ function getErrorGuidance() {
 /**
  * Render the full hamster banner with greeting
  */
-function renderHamsterBanner(userName, version, cwd) {
+function renderHamsterBanner(userName, version, cwd, skillCount = 34) {
     const art = getHamsterArt(getTimeOfDay() === 'night' ? 'sleeping' : 'greeting');
     const greeting = getGreeting(userName);
     const lines = [
@@ -202,7 +202,7 @@ function renderHamsterBanner(userName, version, cwd) {
         '',
         `    ${(0, theme_1.brandBold)(greeting)}`,
         '',
-        `    ${(0, theme_1.dim)('CodyMaster')} ${(0, theme_1.brand)(`v${version || '?'}`)} ${(0, theme_1.dim)('•')} ${(0, theme_1.dim)('34 Skills')} ${(0, theme_1.dim)('•')} ${(0, theme_1.dim)(cwd || '~')}`,
+        `    ${(0, theme_1.dim)('CodyMaster')} ${(0, theme_1.brand)(`v${version || '?'}`)} ${(0, theme_1.dim)('•')} ${(0, theme_1.dim)(`${skillCount} Skills`)} ${(0, theme_1.dim)('•')} ${(0, theme_1.dim)(cwd || '~')}`,
         (0, theme_1.dim)('  ' + '─'.repeat(50)),
     ];
     return lines.join('\n');

package/dist/ui/onboarding.js

@@ -56,13 +56,26 @@ const theme_2 = require("./theme");
 const box_1 = require("./box");
 const hamster_1 = require("./hamster");
 const hooks_1 = require("./hooks");
+let SKILL_COUNT = 33;
+try {
+    const fs = require('fs');
+    const path = require('path');
+    const distSkillsDir = path.join(__dirname, '..', '..', 'skills');
+    if (fs.existsSync(distSkillsDir)) {
+        SKILL_COUNT = fs.readdirSync(distSkillsDir).filter((f) => {
+            const fullPath = path.join(distSkillsDir, f);
+            return fs.statSync(fullPath).isDirectory() && fs.existsSync(path.join(fullPath, 'SKILL.md'));
+        }).length;
+    }
+}
+catch (e) { }
 // ─── Onboarding Steps ──────────────────────────────────────────────────────
 const TOTAL_STEPS = 5;
 const STEP_INFO = {
     1: { title: 'Meet your assistant', desc: 'What should I call you?' },
     2: { title: 'Pick your platform', desc: 'Where do you code?' },
     3: { title: 'Your first task', desc: 'Add something to build' },
-    4: { title: 'See the magic', desc: 'Discover your 65 skills' },
+    4: { title: 'See the magic', desc: `Discover your ${SKILL_COUNT} skills` },
     5: { title: 'You\'re ready!', desc: 'Welcome to the team' },
 };
 /**
@@ -219,7 +232,7 @@ function runOnboarding(version) {
         if (startStep < 4) {
             console.log((0, box_1.renderStepProgress)(4, TOTAL_STEPS));
             console.log('');
-            console.log(`    ${(0, theme_1.brandBold)('You have 65 superpowers!')} ${theme_2.ICONS.skill}`);
+            console.log(`    ${(0, theme_1.brandBold)(`You have ${SKILL_COUNT} superpowers!`)} ${theme_2.ICONS.skill}`);
             console.log(`    ${(0, theme_1.dim)('Grouped by what they help you do:')}`);
             console.log('');
             const SKILL_DOMAINS = [
@@ -267,10 +280,10 @@ function runOnboarding(version) {
                 }
                 console.log('');
             }
-            console.log(`    ${(0, theme_1.dim)(`Total: 65 skills across 6 domains`)}`);
+            console.log(`    ${(0, theme_1.dim)(`Total: ${SKILL_COUNT} skills across 6 domains`)}`);
             console.log('');
             const viewAll = yield p.confirm({
-                message: 'Want to browse all 65 skills in detail?',
+                message: `Want to browse all ${SKILL_COUNT} skills in detail?`,
                 initialValue: false,
             });
             profile.onboardingStep = 4;
@@ -317,5 +330,5 @@ function runOnboarding(version) {
  * Displays hamster + trigger + quick action
  */
 function showReturningWelcome(profile, version, cwd) {
-    console.log((0, hamster_1.renderHamsterBanner)(profile.userName, version, cwd));
+    console.log((0, hamster_1.renderHamsterBanner)(profile.userName, version, cwd, SKILL_COUNT));
 }

package/install.sh

@@ -27,6 +27,15 @@ RAW_URL="https://raw.githubusercontent.com/tody-agent/codymaster/main"
 VERSION="4.4.0"
 SCOPE="user"   # default scope for Claude Code
 
+if [ -d "skills" ]; then
+  TOTAL_SKILLS=$(ls -1d skills/*/SKILL.md 2>/dev/null | wc -l | tr -d ' ')
+elif [ -d "$HOME/.cody-master/skills" ]; then
+  TOTAL_SKILLS=$(ls -1d "$HOME/.cody-master/skills"/*/SKILL.md 2>/dev/null | wc -l | tr -d ' ')
+else
+  TOTAL_SKILLS="60+"
+fi
+
+
 # ── i18n ────────────────────────────────────────────────────────
 detect_lang() {
   local lang="${LANG:-en}"
@@ -115,7 +124,7 @@ print_header() {
   echo ""
   echo -e "    ${O}${BOLD}$(msg welcome)${NC} 🐹"
   echo ""
-  echo -e "    ${DIM}CodyMaster${NC} ${O}v${VERSION}${NC} ${DIM}• 65 Skills • ~${NC}"
+  echo -e "    ${DIM}CodyMaster${NC} ${O}v${VERSION}${NC} ${DIM}• ${TOTAL_SKILLS} Skills • ~${NC}"
   echo -e "${DIM}  ──────────────────────────────────────────────────${NC}"
   echo ""
 }
@@ -206,7 +215,7 @@ hamster_sentiment() {
     "start")
       case $idx in
         0) echo -e "    ${C}🐹: Whiskers twitching... CodyMaster incoming!${NC}" ;;
-        1) echo -e "    ${C}🐹: Let's fill these cheeks with 65 skills! ✨${NC}" ;;
+        1) echo -e "    ${C}🐹: Let's fill these cheeks with ${TOTAL_SKILLS} skills! ✨${NC}" ;;
         2) echo -e "    ${C}🐹: Waking up from a power nap! Let's build! 🐭${NC}" ;;
       esac
       ;;
@@ -220,7 +229,7 @@ hamster_sentiment() {
     "finish")
       case $idx in
         0) echo -e "    ${C}🐹: Mission accomplished! Can I have a walnut now? 🥜${NC}" ;;
-        1) echo -e "    ${C}🐹: My cheeks are stuffed with 65 skills for you! ✨${NC}" ;;
+        1) echo -e "    ${C}🐹: My cheeks are stuffed with ${TOTAL_SKILLS} skills for you! ✨${NC}" ;;
         2) echo -e "    ${C}🐹: Terminal is Hamster-approved! Better than a wheel! 🎡${NC}" ;;
       esac
       ;;
@@ -403,7 +412,7 @@ print_onboarding() {
     print_header
     
     if [ "$LANG_CODE" = "vi" ]; then
-      echo -e "    ${W}${BOLD}🎉 Thành công! Bạn đã mở khóa 65 kỹ năng AI toàn năng:${NC}"
+      echo -e "    ${W}${BOLD}🎉 Thành công! Bạn đã mở khóa ${TOTAL_SKILLS} kỹ năng AI toàn năng:${NC}"
       echo ""
       hamster_sentiment "finish"
       echo ""
@@ -429,7 +438,7 @@ print_onboarding() {
       echo -e "  11. ${Y}Xem Demo tự động            ${NC} → /cm:demo"
       echo -e "  12. ${Y}Trợ giúp & Cú pháp lệnh      ${NC} → cm help"
     else
-      echo -e "    ${W}${BOLD}🎉 Success! You just unlocked 65 omnipotent AI skills:${NC}"
+      echo -e "    ${W}${BOLD}🎉 Success! You just unlocked ${TOTAL_SKILLS} omnipotent AI skills:${NC}"
       echo ""
       hamster_sentiment "finish"
       echo ""
@@ -611,6 +620,7 @@ install_skills_to() {
   echo ""
   mkdir -p "$target"
   local count=0
+  local installed=()
   for skill_dir in "${CLONE_DIR}"/skills/*/; do
     skill_name=$(basename "$skill_dir")
     if [ -f "${skill_dir}SKILL.md" ]; then
@@ -621,19 +631,32 @@ install_skills_to() {
         echo "globs: *" >> "${target}/${skill_name}.mdc"
         echo "---" >> "${target}/${skill_name}.mdc"
         cat "${skill_dir}SKILL.md" >> "${target}/${skill_name}.mdc"
-        echo -e "  ${G}✅${NC} ${skill_name}.mdc"
+        installed+=("${skill_name}.mdc")
       elif [[ "$format" == "md" ]]; then
         cp "${skill_dir}SKILL.md" "${target}/${skill_name}.md"
-        echo -e "  ${G}✅${NC} ${skill_name}.md"
+        installed+=("${skill_name}.md")
       else
         cp -r "$skill_dir" "${target}/${skill_name}"
-        echo -e "  ${G}✅${NC} $skill_name"
+        installed+=("$skill_name")
       fi
       count=$((count + 1))
     fi
   done
+  
+  local line="  ${DIM}"
+  for s in "${installed[@]}"; do
+    if [ ${#line} -gt 70 ]; then
+      echo -e "${line}${NC}"
+      line="  ${DIM}"
+    fi
+    line="${line}${s}, "
+  done
+  if [ "${line}" != "  ${DIM}" ]; then
+    echo -e "${line%, }${NC}"
+  fi
+
   echo ""
-  echo -e "${G}${count} skills installed to ${target}${NC}"
+  echo -e "${G}✅ ${count} skills installed to ${target}${NC}"
 }
 
 # ── Legacy alias ─────────────────────────────────────────────────

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codymaster",
-  "version": "4.5.1",
+  "version": "4.5.3",
   "description": "68+ Skills. Ship 10x faster. AI-powered coding skill kit for Claude, Cursor, Gemini & more.",
   "main": "dist/index.js",
   "repository": {
@@ -46,6 +46,7 @@
   "type": "commonjs",
   "files": [
     "dist/",
+    "scripts/",
     "skills/",
     "adapters/",
     "commands/",

package/scripts/gate-0-secrets.js

@@ -0,0 +1,63 @@
+#!/usr/bin/env node
+/**
+ * Gate 0: Secret Hygiene
+ * Fastest gate (< 0.5s). Checks for leaked secrets before anything else runs.
+ */
+const fs = require('fs');
+const { execSync } = require('child_process');
+
+let failed = false;
+
+// 1. Check wrangler config files for hardcoded secret values
+const wranglerFiles = ['wrangler.toml', 'wrangler.jsonc', 'wrangler.json'];
+const dangerous = [
+  'SERVICE_KEY', 'ANON_KEY', 'DB_PASSWORD', 'SECRET_KEY', 'PRIVATE_KEY', 'API_SECRET',
+  'GCP_SERVICE_ACCOUNT', 'AZURE_CONNECTION_STRING', 'HEROKU_API_KEY', 'POSTMAN_API_KEY'
+];
+
+for (const wf of wranglerFiles) {
+  if (!fs.existsSync(wf)) continue;
+  const src = fs.readFileSync(wf, 'utf-8');
+  for (const key of dangerous) {
+    const valuePattern = new RegExp(key + '\\s*[=:]\\s*["\'][a-zA-Z0-9/+=]{20,}', 'g');
+    if (valuePattern.test(src)) {
+      console.error('❌ DANGEROUS: ' + wf + ' contains a ' + key + ' VALUE');
+      console.error('   Fix: wrangler secret put ' + key + ' (then remove from ' + wf + ')');
+      failed = true;
+    }
+  }
+}
+
+// 2. Check .gitignore has required patterns
+if (fs.existsSync('.gitignore')) {
+  const gi = fs.readFileSync('.gitignore', 'utf-8');
+  const required = ['.env', '.dev.vars'];
+  const missing = required.filter(r => !gi.includes(r));
+  if (missing.length > 0) {
+    console.error('❌ .gitignore missing: ' + missing.join(', '));
+    failed = true;
+  }
+} else {
+  console.error('❌ No .gitignore found!');
+  failed = true;
+}
+
+// 3. Check .env / .dev.vars files aren't tracked by git
+try {
+  const tracked = execSync('git ls-files', { encoding: 'utf-8' });
+  const badFiles = ['.env', '.dev.vars', '.env.local', '.env.production'];
+  const trackedBad = badFiles.filter(f => tracked.split('\n').includes(f));
+  if (trackedBad.length > 0) {
+    console.error('❌ CRITICAL: Secret files tracked by git: ' + trackedBad.join(', '));
+    console.error('   Fix: git rm --cached ' + trackedBad.join(' '));
+    failed = true;
+  }
+} catch (e) {
+  // Not a git repo — skip
+}
+
+if (failed) {
+  console.error('\n🛡️  Gate 0 FAILED. Fix issues above before deploying.');
+  process.exit(1);
+}
+console.log('✅ Gate 0 passed: secret hygiene verified');

package/scripts/gate-1-syntax.js

@@ -0,0 +1,53 @@
+#!/usr/bin/env node
+/**
+ * Gate 1: Syntax Validation
+ * Fast-fail (< 2s). Catches syntax errors before the slower test suite.
+ * - Parses all JS files in public/js/ with acorn
+ * - Runs tsc --noEmit for TypeScript in src/
+ */
+const { parse } = require('acorn');
+const fs = require('fs');
+const path = require('path');
+const { execSync } = require('child_process');
+
+let failed = false;
+
+// 1. Parse all JS files in public/js/
+const jsDir = 'public/js';
+if (fs.existsSync(jsDir)) {
+  const jsFiles = fs.readdirSync(jsDir).filter(f => f.endsWith('.js'));
+  for (const file of jsFiles) {
+    const filePath = path.join(jsDir, file);
+    const code = fs.readFileSync(filePath, 'utf-8');
+    try {
+      parse(code, { ecmaVersion: 2022, sourceType: 'script' });
+    } catch (err) {
+      console.error(`❌ Syntax error in ${filePath}:`);
+      console.error(`   Line ${err.loc?.line}, Column ${err.loc?.column}: ${err.message}`);
+      failed = true;
+    }
+  }
+  if (!failed) {
+    console.log(`✅ ${jsFiles.length} JS files parsed successfully`);
+  }
+} else {
+  console.log('⚠  No public/js/ directory found, skipping JS syntax check');
+}
+
+// 2. TypeScript compilation check
+if (fs.existsSync('tsconfig.json')) {
+  try {
+    execSync('npx tsc --noEmit', { encoding: 'utf-8', stdio: 'pipe' });
+    console.log('✅ TypeScript compilation check passed');
+  } catch (err) {
+    console.error('❌ TypeScript compilation errors:');
+    console.error(err.stdout || err.stderr || err.message);
+    failed = true;
+  }
+}
+
+if (failed) {
+  console.error('\n🔴 Gate 1 FAILED. Fix syntax errors before proceeding.');
+  process.exit(1);
+}
+console.log('✅ Gate 1 passed: syntax validation complete');

package/scripts/gate-5-dist-verify.js

@@ -0,0 +1,55 @@
+#!/usr/bin/env node
+/**
+ * Gate 5: Dist Asset Verification
+ * Verifies critical files exist in public/ after build:html + docs:build.
+ * Build can "succeed" but produce an incomplete output directory.
+ */
+const fs = require('fs');
+const path = require('path');
+
+const publicDir = 'public';
+// Critical HTML pages
+const requiredHtml = [
+  'dashboard/index.html',
+];
+
+// Critical JS files
+const requiredJs = [
+  'dashboard/app.js',
+];
+
+// Critical CSS files
+const requiredCss = [
+  'dashboard/style.css',
+];
+
+// Build required file list
+const required = [];
+
+// HTML pages
+for (const html of requiredHtml) {
+  required.push(path.join(publicDir, html));
+}
+
+// JS files
+for (const js of requiredJs) {
+  required.push(path.join(publicDir, js));
+}
+
+// CSS files
+for (const css of requiredCss) {
+  required.push(path.join(publicDir, css));
+}
+
+
+// Check all required files
+const missing = required.filter(f => !fs.existsSync(f));
+
+if (missing.length > 0) {
+  console.error('❌ Missing critical files:');
+  missing.forEach(f => console.error('   ' + f));
+  console.error(`\n🔴 Gate 5 FAILED. ${missing.length} file(s) missing from build output.`);
+  process.exit(1);
+}
+
+console.log(`✅ Gate 5 passed: all ${required.length} critical files present`);

package/scripts/gate-6-smoke-test.js

@@ -0,0 +1,30 @@
+#!/usr/bin/env node
+/**
+ * Gate 6: Post-Deploy Smoke Test
+ * Verifies the deployed site returns HTTP 200.
+ * Usage: node scripts/gate-6-smoke-test.js [optional-url]
+ */
+
+const DEPLOY_URL = process.argv[2] || process.env.DEPLOY_URL || 'https://cody.todyle.com';
+
+async function smokeTest() {
+  console.log(`🔍 Smoke testing: ${DEPLOY_URL}`);
+
+  try {
+    const res = await fetch(DEPLOY_URL);
+    if (res.status === 200) {
+      console.log(`✅ Gate 6 passed: HTTP ${res.status} from ${DEPLOY_URL}`);
+    } else {
+      console.error(`❌ Gate 6 FAILED: HTTP ${res.status} from ${DEPLOY_URL}`);
+      console.error('   ⚠  Consider immediate rollback.');
+      process.exit(1);
+    }
+  } catch (err) {
+    console.error(`❌ Gate 6 FAILED: Could not reach ${DEPLOY_URL}`);
+    console.error(`   Error: ${err.message}`);
+    console.error('   ⚠  Consider immediate rollback.');
+    process.exit(1);
+  }
+}
+
+smokeTest();