cue-ai 0.5.0 → 0.7.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cue-ai",
-  "version": "0.5.0",
+  "version": "0.7.0",
   "description": "cue — Agent Profile Manager for Claude Code & Codex. Pick a profile, launch with the right skills, MCPs, and plugins.",
   "type": "module",
   "bin": {
@@ -14,7 +14,7 @@
     "cue": "bun src/index.ts",
     "test": "bun test",
     "build": "bun build src/index.ts --no-bundle",
-    "postinstall": "echo '' && echo '  ✅ cue installed. Run: cue init' && echo '  Docs: https://github.com/recodeee/cue' && echo ''"
+    "postinstall": "echo '' && echo '  ✅ cue installed. Run: cue init' && echo '  Docs: https://github.com/opencue/cue' && echo ''"
   },
   "keywords": [
     "claude-code",
@@ -31,11 +31,11 @@
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "https://github.com/recodeee/cue.git"
+    "url": "https://github.com/opencue/cue.git"
   },
-  "homepage": "https://github.com/recodeee/cue",
+  "homepage": "https://github.com/opencue/cue",
   "bugs": {
-    "url": "https://github.com/recodeee/cue/issues"
+    "url": "https://github.com/opencue/cue/issues"
   },
   "files": [
     "bin/",

package/profiles/README.md

@@ -1,6 +1,6 @@
 # profiles/
 
-Where soul profiles live. Each profile is one directory under `profiles/<name>/`
+Where cue profiles live. Each profile is one directory under `profiles/<name>/`
 containing a `profile.yaml`. The schema for that file is documented in
 [`SCHEMA.md`](./SCHEMA.md).
 
@@ -11,7 +11,7 @@ profiles/
 ├── SCHEMA.md          # field-by-field reference + example
 ├── schema.json        # JSON Schema (draft-07) for tooling
 ├── _types.ts          # TypeScript types consumed by bin/cli/
-├── _cache/            # npx-skill fetch cache, populated by `soul use`; gitignored
+├── _cache/            # npx-skill fetch cache, populated by `cue use`; gitignored
 ├── _active/           # symlink to the currently-active global profile; gitignored
 ├── _examples/         # tiny test-fixture profiles, NOT installed
 └── <name>/            # one directory per real profile
@@ -24,8 +24,8 @@ profiles/
 A profile bundles three kinds of capability that a Claude Code or Codex session
 should see together:
 
-- **skills** — local (from `soul/skills/`), npx-fetched, or plugin-namespaced
-- **mcps** — server IDs from `soul/mcps/configs/`, materialized as `.mcp.json`
+- **skills** — local (from `cue/skills/`), npx-fetched, or plugin-namespaced
+- **mcps** — server IDs from `cue/mcps/configs/`, materialized as `.mcp.json`
 - **env** — optional environment variables the agents need
 
 Profiles can `inherits` from one other profile to share a common baseline.
@@ -35,25 +35,25 @@ Inheritance depth is capped at 3; cycles are an error.
 
 | Path                     | Owner       | Notes                                            |
 |--------------------------|-------------|--------------------------------------------------|
-| `profiles/<name>/profile.yaml` | profile author | Hand-written or generated by `soul new`    |
-| `profiles/_cache/*`      | `soul use`  | Auto-populated; never edit by hand               |
-| `profiles/_active/current` | `soul use --global` | Symlink to active profile; gitignored  |
+| `profiles/<name>/profile.yaml` | profile author | Hand-written or generated by `cue new`    |
+| `profiles/_cache/*`      | `cue use`  | Auto-populated; never edit by hand               |
+| `profiles/_active/current` | `cue use --global` | Symlink to active profile; gitignored  |
 | `profiles/_examples/*`   | repo        | Fixtures used by tests; safe to extend           |
 
 ## Reading further
 
 - [`SCHEMA.md`](./SCHEMA.md) — full field reference
 - [`../docs/profiles/quickstart.md`](../docs/profiles/quickstart.md) — 3-command happy path
-- [`../docs/profiles/auto-generation.md`](../docs/profiles/auto-generation.md) — `soul scan` and `soul new`
+- [`../docs/profiles/auto-generation.md`](../docs/profiles/auto-generation.md) — `cue scan` and `cue new`
 - [`../docs/profiles/anatomy.md`](../docs/profiles/anatomy.md) — deep dive on a real profile
-- [`../docs/profiles/troubleshooting.md`](../docs/profiles/troubleshooting.md) — `soul doctor` and common errors
+- [`../docs/profiles/troubleshooting.md`](../docs/profiles/troubleshooting.md) — `cue doctor` and common errors
 
 ## Adding a profile
 
 See [`../CONTRIBUTING.md`](../CONTRIBUTING.md) § "Adding a profile". The short version:
 
 ```bash
-soul new my-profile --from-scan --auto      # bucket discovered skills automatically
-soul validate my-profile                    # check
-soul use my-profile --here                  # activate in CWD
+cue new my-profile --from-scan --auto      # bucket discovered skills automatically
+cue validate my-profile                    # check
+cue use my-profile --here                  # activate in CWD
 ```

package/profiles/SCHEMA.md

@@ -30,15 +30,43 @@ env:
 | Field         | Type                                                          | Required | Default | Notes                                                                                              |
 |---------------|---------------------------------------------------------------|----------|---------|----------------------------------------------------------------------------------------------------|
 | `name`        | string (kebab-case, `[a-z][a-z0-9-]{1,63}`)                   | yes      | —       | Must equal the dirname `profiles/<name>/`.                                                         |
-| `description` | string (one-line, < 200 chars)                                | yes      | —       | Shown by `soul list` and embedded in the materialized `CLAUDE.md` stamp.                           |
+| `description` | string (one-line, < 200 chars)                                | yes      | —       | Shown by `cue list` and embedded in the materialized `CLAUDE.md` stamp.                           |
 | `agents`      | array of `"claude-code" \| "codex"`                           | no       | `[claude-code, codex]` | Restricts which agent runtimes this profile materializes for.                          |
 | `inherits`    | string (name of another profile)                              | no       | —       | Single parent. Depth ≤ 3. Cycles are an error.                                                     |
 | `skills`      | object (see below)                                            | no       | `{}`    | At least one of `local`, `npx`, `plugins` should appear in a useful profile.                       |
-| `skills.local`| array of strings (paths relative to `soul/skills/`)           | no       | `[]`    | E.g. `medusa/building-with-medusa` → resolves to `soul/skills/skills/medusa/building-with-medusa/`. |
+| `skills.local`| array of strings (paths relative to `cue/skills/`)           | no       | `[]`    | E.g. `medusa/building-with-medusa` → resolves to `cue/skills/skills/medusa/building-with-medusa/`. |
 | `skills.npx`  | array of `NpxSkillRef`                                        | no       | `[]`    | See "NpxSkillRef" below.                                                                           |
 | `skills.plugins` | array of strings (Claude Code plugin names)                | no       | `[]`    | Resolved from `~/.claude/plugins/<name>/skills/`. Targets are namespaced as `<plugin>:<skill>`.    |
-| `mcps`        | array of strings (MCP server IDs)                             | no       | `[]`    | Must match a key in `soul/mcps/configs/claude.sanitized.json` (or the codex counterpart).          |
+| `mcps`        | array of strings (MCP server IDs)                             | no       | `[]`    | Must match a key in `cue/mcps/configs/claude.sanitized.json` (or the codex counterpart).          |
 | `env`         | map<string, string>                                           | no       | `{}`    | Plain string values. Placeholders like `"${HOSTINGER_API_TOKEN}"` are substituted at materialize-time. |
+| `rules`       | array of strings                                              | no       | `[]`    | Markdown rule files under `resources/rules/` (or absolute paths). Symlinked into `<runtime>/rules/` and indexed in CLAUDE.md — Claude reads on demand, no full-body inline. |
+| `commands`    | array of strings                                              | no       | `[]`    | Slash-command markdown files under `resources/commands/`. Symlinked into `<runtime>/commands/` so the user can invoke `/<name>`. Listed in CLAUDE.md's "Available Commands" section. |
+| `hooks`       | array of strings                                              | no       | `[]`    | Hook bundle JSON files under `resources/hooks/`. Each declares `{ "hooks": { "PreToolUse": [...], "Stop": [...], ... } }` — merged into `settings.json` so hooks run per Claude Code's lifecycle. Sibling `.sh`/`.py` scripts are symlinked into `<runtime>/hooks/` and invoked via `${CLAUDE_CONFIG_DIR}/hooks/...`. |
+
+### rules / commands / hooks example
+
+```yaml
+# profiles/my-backend/profile.yaml
+name: my-backend
+inherits: core
+rules:
+  - common/security        # → resources/rules/common/security.md
+  - typescript/patterns    # → resources/rules/typescript/patterns.md
+commands:
+  - code-review            # → resources/commands/code-review.md, invoked as /code-review
+  - checkpoint
+hooks:
+  - secrets-guard.json     # → resources/hooks/secrets-guard.json (+ secrets-guard.sh)
+```
+
+Path resolution: refs starting with `/` are taken as absolute; otherwise resolved
+relative to `resources/{rules,commands,hooks}/`. `.md` is auto-appended for
+rules/commands if the ref doesn't already end in `.md`. Hooks are taken
+verbatim (need the explicit `.json`). Missing refs are skipped at materialize
+time and reported as `E3` by `cue validate`.
+
+Inheritance merges all three with `concat + dedupe`; a child can't remove a
+parent's entry — fork the parent if you need a smaller set.
 
 ## NpxSkillRef
 

package/profiles/_cache/README.md

@@ -1,6 +1,6 @@
 # profiles/_cache/
 
-Canonical cache for `npx skills add …` fetches. Populated by `soul use` when a
+Canonical cache for `npx skills add …` fetches. Populated by `cue use` when a
 profile lists `skills.npx` entries.
 
 **Never edit by hand.** Layout:

package/profiles/_types.ts

@@ -1,5 +1,5 @@
 /**
- * Types for the soul profile system. Mirror of profiles/schema.json.
+ * Types for the cue profile system. Mirror of profiles/schema.json.
  *
  * Consumed by bin/cli/* via:
  *   import type { Profile, NpxSkillRef, MCPRef, SkillRef } from "../../profiles/_types";
@@ -43,6 +43,24 @@ export interface Profile {
   mcps?: MCPRef[];
   plugins?: PluginRef[];
   env?: Record<string, string>;
+  rules?: string[];
+  commands?: string[];
+  hooks?: string[];
+  // Phase 1: Persona — multi-line role-priming text injected at the top of
+  // CLAUDE.md. Defines who the agent IS, not just what tools it has.
+  persona?: string;
+  // Phase 2: Playbooks — markdown files under resources/playbooks/ with
+  // proven step-by-step protocols for common tasks ("ship-feature",
+  // "triage-bug"). Symlinked into runtime, indexed in CLAUDE.md.
+  playbooks?: string[];
+  // Phase 3: Quality gates — script refs under resources/quality-gates/
+  // that run as Stop hooks. Veto "done" claims if the work doesn't meet
+  // the profile's bar (tests pass, lint clean, etc.).
+  qualityGates?: string[];
+  // Phase 4: Evals — scenario refs under resources/evals/ that declare
+  // "for task X this profile should be able to handle it". `cue eval-behavior`
+  // checks structural fit.
+  evals?: string[];
 }
 
 // In the resolved (post-inherit) form every ref is normalized to its object shape.
@@ -59,6 +77,13 @@ export interface ResolvedProfile extends Omit<Profile, "skills" | "mcps" | "plug
   mcps: ResolvedMCP[];
   plugins: ResolvedPlugin[];
   env: Record<string, string>;
+  rules: string[];
+  commands: string[];
+  hooks: string[];
+  persona: string;        // empty string when not declared
+  playbooks: string[];
+  qualityGates: string[];
+  evals: string[];
   inheritanceChain: string[];
 }
 

package/profiles/backend/profile.yaml

@@ -8,6 +8,7 @@ skills:
     - review/code-review
     - review/security-best-practices
     - review/security-review
+    - security/agentshield
     - stripe/stripe-best-practices
     - stripe/stripe-webhooks
     - deployment/supabase

package/profiles/career/profile.yaml

@@ -0,0 +1,13 @@
+name: career
+icon: "💼"
+description: Job hunting, resume optimization, interview prep, salary negotiation, and career development
+inherits: core
+skills:
+  local:
+    - career/jdfit
+    - career/resume-tailor
+    - career/tech-resume-optimizer
+    - career/resume-section-builder
+    - career/resume-version-manager
+    - career/salary-negotiation-prep
+mcps: []

package/profiles/core/profile.yaml

@@ -1,18 +1,85 @@
 name: core
 icon: "🐢"
 description: Baseline shared by every cue profile — essentials only
+persona: |
+  You're a careful, experienced collaborator. You operate by these defaults
+  every time, regardless of which specialized profile inherits from you:
+
+  - **State assumptions before acting.** If a request is ambiguous, name the
+    ambiguity and pick the reasonable interpretation rather than guessing
+    silently.
+  - **Minimum-viable change.** Touch only what the task requires. Don't refactor
+    adjacent code, don't add features that weren't asked for, don't introduce
+    abstractions for hypothetical futures.
+  - **Verify before claiming done.** Run the tests / lint / build / actual
+    behavior check that proves the change works. "Compiles" ≠ "done."
+  - **Tight loops over big patches.** Make a small change → verify → commit
+    incrementally. Don't accumulate a 400-line patch you can't bisect.
+  - **Voice: terse and specific.** Drop filler. Lead sentences with the verb
+    or the answer. Don't summarize what's visible in the diff.
 skills:
   local:
-    - nvidia/aiq-research
-    # ── Built-in (shared across ALL profiles) ──
-    - nvidia/skill-evolution
-    - meta/analyze
-    - meta/cue-usage
-    - meta/builtin-manager
-    - meta/kiro-powers
-    - caveman/caveman
-    - caveman/caveman-commit
+    # ── Built-in: shared by every cue profile via inheritance ──
+    # Universal, triggered by common words or explicit slash commands.
+    # Anything special-purpose belongs in a domain profile, not here.
+    - meta/analyze              # investigation: "analyze", "why does", "what's causing"
+    - meta/cue-usage            # cue CLI guidance
+    - meta/builtin-manager      # manage built-in promotion
+    - meta/profile-fit-monitor  # notice profile mismatch + suggest switch
+    - nvidia/skill-evolution    # propose skill updates after solving problems
+    - caveman/caveman           # /caveman — terse output mode
+    - caveman/caveman-commit    # /commit — Conventional Commits writer
+    - meta/acpx                 # delegate to other coding agents over ACP (codex, claude, pi, ...)
+    - tools/ctx-upgrade               # context-mode: context window optimization for AI agents
+    - tools/context-mode-ops          # context-mode: sandbox tool output, 98% reduction
+    - tools/fallow                    # codebase intelligence: unused code, duplication, complexity, cleanup
+    # Removed (followup #22 audit, 2026-05-24): nvidia/aiq-research (needs
+    # NVIDIA AI-Q server infra), meta/kiro-powers (niche Kiro Powers interop).
+    # Add back to a dedicated profile if needed — they don't belong in baseline.
+    #
+    # Also removed 2026-05-24: Deliberation-Loop (no SKILL.md anywhere),
+    # the-council (exists in ~/.claude/skills/ but cue's local resolver only
+    # reads from resources/skills/skills/ — wire via skills.npx or symlink
+    # into resources/skills/skills/<category>/ to re-enable), and a stray
+    # `wedding-invitation-skill` token left inside a comment.
 mcps:
   - cue-tty-watch    # Claude's eyes inside X displays / tmux panes (screenshot, capture-pane, send-keys)
 plugins:
   - claude-mem@thedotmack
+# Universal commands: useful in every profile, not domain-specific.
+# Bodies are lazy-loaded (only when the user types /name), so per-message cost
+# is just the entry in CLAUDE.md's "Available Commands" list (~25 tokens).
+commands:
+  - code-review
+  - checkpoint
+  - cost-report
+  - cue
+playbooks:
+  # Phase 2: proven step-by-step protocols. Read on demand when the user's
+  # request matches. Profiles that inherit core get these for free.
+  - ship-feature
+  - triage-bug
+evals:
+  # Phase 4: structural eval scenarios. `cue eval-behavior core` checks
+  # whether core has the skills/commands/playbooks needed to handle these.
+  - feature-shipping
+  - bug-triage
+hooks:
+  # Universal safety: block obviously destructive shell commands (rm -rf /, fork bombs, dd to /dev/sd*, etc.).
+  # Every profile inherits core, so every cue user gets this for free.
+  - bash-quality-preflight.json
+  # Universal analytics: append one line per session-end to ~/.config/cue/session-log.jsonl
+  # so `cue eval` sees real usage data for every profile, not just ecc.
+  - session-summary.json
+  # Refuse writes to .env, id_rsa, credentials.json, .pem/.key, ~/.ssh, ~/.aws, etc.
+  - secrets-guard.json
+  # Reject low-effort `git commit -m "wip"` / "fix" / "update" messages.
+  - commit-message-guard.json
+  # Stop hook: scan the full transcript and emit one skill_hit event per
+  # unique skill referenced. Replaces the 50KB regex scrape with a full scan.
+  # Feeds `cue profile evolve` with accurate per-skill firing data.
+  - skill-fire-tracker.json
+  # UserPromptSubmit hook: on the FIRST prompt of a session, save it to
+  # ~/.config/cue/first-prompts/<cwd-hash>.json so the next `cue launch`
+  # in the same cwd with CUE_SMART_SUBSET=1 can auto-trigger smart-subset.
+  - first-prompt-capture.json

package/profiles/creative-media/README.md

@@ -12,7 +12,7 @@ Creative Media covers generated images, Higgsfield product shots, marketplace ca
 - `higgsfield/higgsfield-generate`
 - `higgsfield/higgsfield-product-photoshoot`
 - `higgsfield/higgsfield-marketplace-cards`
-- `higgsfield/higgsfield-soul-id`
+- `higgsfield/higgsfield-cue-id`
 - `design/brandkit`
 - `design/kitty-visualize`
 - `design/remotion-best-practices`