ghostrail 0.1.0 → 0.2.0

package/dist/vendor/skilltend/plan.d.ts

@@ -0,0 +1,46 @@
+import type { SkillTarget } from "./paths.js";
+import type { SkillIdentity } from "./registry.js";
+export type SkillAction = "create" | "update" | "unchanged" | "conflict";
+export interface TargetPlan {
+    target: SkillTarget;
+    action: SkillAction;
+    oldVersion: string | null;
+    newVersion: string | null;
+    isSymlink: boolean;
+    /** Why a `conflict` was raised — surfaced to the user. */
+    conflictReason?: string;
+}
+export interface FilePlanInput {
+    /** Whose skill this is — decides which on-disk files we consider ours. */
+    skill: SkillIdentity;
+    target: SkillTarget;
+    /** Freshly downloaded SKILL.md body. */
+    fetched: string;
+    /** Current on-disk content, or null when the file is absent. */
+    current: string | null;
+    /** True when the file or its skill directory is a symlink. */
+    isSymlink: boolean;
+    /** `--force`: overwrite user-modified files and write through symlinks. */
+    force: boolean;
+}
+/**
+ * Plan a `copy`/`canonical` target (a real SKILL.md file). Idempotent:
+ * byte-identical content is a no-op. We own files whose frontmatter `name` matches
+ * the supplied identity; a differing foreign file (or a symlink we'd write through) is a
+ * conflict the user resolves with `--force`.
+ */
+export declare function planFile(input: FilePlanInput): TargetPlan;
+export interface LinkPlanInput {
+    target: SkillTarget;
+    /** Version of the freshly downloaded skill (for reporting). */
+    fetchedVersion: string | null;
+    /** Current state of the symlink path. */
+    existing: {
+        kind: "absent" | "symlink" | "other";
+        linkTarget?: string | null;
+    };
+    force: boolean;
+}
+/** Plan a `link` target (a symlink at an agent's skill dir to the canonical dir). */
+export declare function planLink(input: LinkPlanInput): TargetPlan;
+//# sourceMappingURL=plan.d.ts.map

package/dist/vendor/skilltend/plan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan.d.ts","sourceRoot":"","sources":["../../../src/vendor/skilltend/plan.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEnD,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,QAAQ,GAAG,WAAW,GAAG,UAAU,CAAC;AAEzE,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,WAAW,CAAC;IACpB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,OAAO,CAAC;IACnB,0DAA0D;IAC1D,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,0EAA0E;IAC1E,KAAK,EAAE,aAAa,CAAC;IACrB,MAAM,EAAE,WAAW,CAAC;IACpB,wCAAwC;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,8DAA8D;IAC9D,SAAS,EAAE,OAAO,CAAC;IACnB,2EAA2E;IAC3E,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,UAAU,CAyBzD;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,WAAW,CAAC;IACpB,+DAA+D;IAC/D,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,yCAAyC;IACzC,QAAQ,EAAE;QAAE,IAAI,EAAE,QAAQ,GAAG,SAAS,GAAG,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAC/E,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,qFAAqF;AACrF,wBAAgB,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,UAAU,CAiCzD"}

package/dist/vendor/skilltend/plan.js

@@ -0,0 +1,79 @@
+// Vendored from timothyjordan/a14y @ 07ef2bbb8593
+// (packages/apps/cli/src/skills/plan.ts), Apache-2.0.
+//
+// This directory is the future `skilltend` package: a white-label engine for
+// installing and maintaining ONE agent skill across coding agents. It contains
+// no skills of its own and no product name — the caller supplies the skill's
+// identity. Keep changes here minimal and mechanical so the eventual extraction
+// to a standalone package stays a directory move (see TJ-1464).
+import path from "node:path";
+import { parseSkillName, parseSkillVersion } from "./frontmatter.js";
+/**
+ * Plan a `copy`/`canonical` target (a real SKILL.md file). Idempotent:
+ * byte-identical content is a no-op. We own files whose frontmatter `name` matches
+ * the supplied identity; a differing foreign file (or a symlink we'd write through) is a
+ * conflict the user resolves with `--force`.
+ */
+export function planFile(input) {
+    const { skill, target, fetched, current, isSymlink, force } = input;
+    const newVersion = parseSkillVersion(fetched);
+    const oldVersion = current !== null ? parseSkillVersion(current) : null;
+    let action;
+    let conflictReason;
+    if (current === null) {
+        action = "create";
+    }
+    else if (current === fetched) {
+        action = "unchanged";
+    }
+    else if (isSymlink && !force) {
+        action = "conflict";
+        conflictReason = "symlink — managed elsewhere; pass --force to write through it";
+    }
+    else if (parseSkillName(current) === skill.name && !isSymlink) {
+        action = "update";
+    }
+    else if (force) {
+        action = "update";
+    }
+    else {
+        action = "conflict";
+        conflictReason = "existing file looks user-modified; pass --force to overwrite";
+    }
+    return { target, action, oldVersion, newVersion, isSymlink, conflictReason };
+}
+/** Plan a `link` target (a symlink at an agent's skill dir to the canonical dir). */
+export function planLink(input) {
+    const { target, existing, force } = input;
+    const base = {
+        target,
+        oldVersion: null,
+        newVersion: input.fetchedVersion,
+        isSymlink: existing.kind === "symlink",
+    };
+    if (existing.kind === "absent") {
+        return { ...base, action: "create" };
+    }
+    if (existing.kind === "symlink") {
+        const points = existing.linkTarget ?? "";
+        if (target.linkTo && path.resolve(points) === path.resolve(target.linkTo)) {
+            return { ...base, action: "unchanged" };
+        }
+        return force
+            ? { ...base, action: "update" }
+            : {
+                ...base,
+                action: "conflict",
+                conflictReason: "symlink points elsewhere; pass --force to relink",
+            };
+    }
+    // A real directory or file already lives here.
+    return force
+        ? { ...base, action: "update" }
+        : {
+            ...base,
+            action: "conflict",
+            conflictReason: "a real directory exists here; pass --force to replace it with a symlink",
+        };
+}
+//# sourceMappingURL=plan.js.map

package/dist/vendor/skilltend/plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan.js","sourceRoot":"","sources":["../../../src/vendor/skilltend/plan.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD,sDAAsD;AACtD,EAAE;AACF,6EAA6E;AAC7E,+EAA+E;AAC/E,6EAA6E;AAC7E,gFAAgF;AAChF,gEAAgE;AAChE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AA8BrE;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAoB;IAC3C,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACpE,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAExE,IAAI,MAAmB,CAAC;IACxB,IAAI,cAAkC,CAAC;IAEvC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,GAAG,QAAQ,CAAC;IACpB,CAAC;SAAM,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QAC/B,MAAM,GAAG,WAAW,CAAC;IACvB,CAAC;SAAM,IAAI,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,GAAG,UAAU,CAAC;QACpB,cAAc,GAAG,+DAA+D,CAAC;IACnF,CAAC;SAAM,IAAI,cAAc,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QAChE,MAAM,GAAG,QAAQ,CAAC;IACpB,CAAC;SAAM,IAAI,KAAK,EAAE,CAAC;QACjB,MAAM,GAAG,QAAQ,CAAC;IACpB,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,UAAU,CAAC;QACpB,cAAc,GAAG,8DAA8D,CAAC;IAClF,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;AAC/E,CAAC;AAWD,qFAAqF;AACrF,MAAM,UAAU,QAAQ,CAAC,KAAoB;IAC3C,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC1C,MAAM,IAAI,GAAG;QACX,MAAM;QACN,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE,KAAK,CAAC,cAAc;QAChC,SAAS,EAAE,QAAQ,CAAC,IAAI,KAAK,SAAS;KACvC,CAAC;IAEF,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACvC,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,IAAI,EAAE,CAAC;QACzC,IAAI,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1E,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QAC1C,CAAC;QACD,OAAO,KAAK;YACV,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE;YAC/B,CAAC,CAAC;gBACE,GAAG,IAAI;gBACP,MAAM,EAAE,UAAU;gBAClB,cAAc,EAAE,kDAAkD;aACnE,CAAC;IACR,CAAC;IACD,+CAA+C;IAC/C,OAAO,KAAK;QACV,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE;QAC/B,CAAC,CAAC;YACE,GAAG,IAAI;YACP,MAAM,EAAE,UAAU;YAClB,cAAc,EAAE,yEAAyE;SAC1F,CAAC;AACR,CAAC"}

package/dist/vendor/skilltend/registry.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Who the skill is. Supplied by the consuming product rather than baked in, so
+ * this engine stays white-label: it installs whatever skill it is handed, under
+ * whatever name, and never mentions a product of its own.
+ */
+export interface SkillIdentity {
+    /** Directory name under each agent's `skills/`, and the skill's frontmatter `name`. */
+    name: string;
+    /** Skill filename. Effectively always `SKILL.md` per the agent-skills convention. */
+    filename: string;
+}
+/** The agent-skills convention: `<skillsDir>/<name>/SKILL.md`. */
+export declare const DEFAULT_SKILL_FILENAME = "SKILL.md";
+/** Build an identity for `name`, defaulting the filename to the convention. */
+export declare function skillIdentity(name: string, filename?: string): SkillIdentity;
+export interface PathCtx {
+    /** Home directory (injected `os.homedir()`). */
+    home: string;
+    /** Current working directory (injected `process.cwd()`). */
+    cwd: string;
+    /** Environment (injected `process.env`) for XDG / agent-specific overrides. */
+    env: Record<string, string | undefined>;
+}
+export interface AgentEntry {
+    /** Stable key used by `--agent`. */
+    name: string;
+    /** Human label for output, e.g. "Claude Code". */
+    label: string;
+    /** Dirs whose existence marks the agent as configured (any match detects it). */
+    detectDirs(ctx: PathCtx): string[];
+    /** Absolute skills directory for a global (home) install. */
+    globalSkillsDir(ctx: PathCtx): string;
+    /**
+     * Relative skills dir for a project-local install, and the label shown in the
+     * harness picker.
+     *
+     * Note the asymmetry with `globalSkillsDir`: in a *project*, many agents read
+     * the shared cross-agent `.agents/skills` convention, while in the *home*
+     * directory each keeps its own. Verified against vercel-labs/skills, whose
+     * agent list is maintained by PRs from the agent authors themselves.
+     */
+    localDir: string;
+}
+export declare const AGENT_REGISTRY: AgentEntry[];
+/** Absolute project-local skills dir for an agent. */
+export declare function localSkillsDir(a: AgentEntry, ctx: PathCtx): string;
+/** Fallback agent when nothing is auto-detected in a fresh environment. */
+export declare const DEFAULT_AGENT = "claude";
+export declare function agentByName(name: string): AgentEntry | undefined;
+/**
+ * The shared cross-agent skills directory (the `.agents/skills` standard). Used
+ * as the canonical home for the symlink install mode: the skill lives here once
+ * and each agent links to it.
+ */
+export declare function sharedSkillsDir(ctx: PathCtx, scope: "global" | "local"): string;
+//# sourceMappingURL=registry.d.ts.map

package/dist/vendor/skilltend/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/vendor/skilltend/registry.ts"],"names":[],"mappings":"AAeA;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,uFAAuF;IACvF,IAAI,EAAE,MAAM,CAAC;IACb,qFAAqF;IACrF,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,kEAAkE;AAClE,eAAO,MAAM,sBAAsB,aAAa,CAAC;AAEjD,+EAA+E;AAC/E,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,SAAyB,GAAG,aAAa,CAE5F;AAED,MAAM,WAAW,OAAO;IACtB,gDAAgD;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,4DAA4D;IAC5D,GAAG,EAAE,MAAM,CAAC;IACZ,+EAA+E;IAC/E,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CACzC;AAED,MAAM,WAAW,UAAU;IACzB,oCAAoC;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,kDAAkD;IAClD,KAAK,EAAE,MAAM,CAAC;IACd,iFAAiF;IACjF,UAAU,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,EAAE,CAAC;IACnC,6DAA6D;IAC7D,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAAC;IACtC;;;;;;;;OAQG;IACH,QAAQ,EAAE,MAAM,CAAC;CAClB;AAkBD,eAAO,MAAM,cAAc,EAAE,UAAU,EA8EtC,CAAC;AAEF,sDAAsD;AACtD,wBAAgB,cAAc,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,GAAG,MAAM,CAElE;AAED,2EAA2E;AAC3E,eAAO,MAAM,aAAa,WAAW,CAAC;AAEtC,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAEhE;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,GAAG,OAAO,GAAG,MAAM,CAI/E"}

package/dist/vendor/skilltend/registry.js

@@ -0,0 +1,129 @@
+// Vendored from timothyjordan/a14y @ 07ef2bbb8593
+// (packages/apps/cli/src/skills/registry.ts), Apache-2.0.
+//
+// This directory is the future `skilltend` package: a white-label engine for
+// installing and maintaining ONE agent skill across coding agents. It contains
+// no skills of its own and no product name — the caller supplies the skill's
+// identity. Keep changes here minimal and mechanical so the eventual extraction
+// to a standalone package stays a directory move (see TJ-1464).
+import path from "node:path";
+/** The agent-skills convention: `<skillsDir>/<name>/SKILL.md`. */
+export const DEFAULT_SKILL_FILENAME = "SKILL.md";
+/** Build an identity for `name`, defaulting the filename to the convention. */
+export function skillIdentity(name, filename = DEFAULT_SKILL_FILENAME) {
+    return { name, filename };
+}
+function inHome(ctx, ...segs) {
+    return path.join(ctx.home, ...segs);
+}
+function xdgConfigHome(ctx) {
+    const x = ctx.env.XDG_CONFIG_HOME?.trim();
+    return x ? x : path.join(ctx.home, ".config");
+}
+function claudeConfigDir(ctx) {
+    const c = ctx.env.CLAUDE_CONFIG_DIR?.trim();
+    return c ? c : inHome(ctx, ".claude");
+}
+function codexHome(ctx) {
+    const c = ctx.env.CODEX_HOME?.trim();
+    return c ? c : inHome(ctx, ".codex");
+}
+export const AGENT_REGISTRY = [
+    {
+        name: "claude",
+        label: "Claude Code",
+        detectDirs: (c) => [claudeConfigDir(c)],
+        globalSkillsDir: (c) => path.join(claudeConfigDir(c), "skills"),
+        localDir: ".claude/skills",
+    },
+    {
+        name: "cursor",
+        label: "Cursor",
+        detectDirs: (c) => [inHome(c, ".cursor")],
+        globalSkillsDir: (c) => inHome(c, ".cursor", "skills"),
+        localDir: ".agents/skills",
+    },
+    {
+        name: "copilot",
+        label: "GitHub Copilot",
+        detectDirs: (c) => [inHome(c, ".copilot")],
+        globalSkillsDir: (c) => inHome(c, ".copilot", "skills"),
+        localDir: ".agents/skills",
+    },
+    {
+        name: "gemini",
+        label: "Gemini CLI",
+        detectDirs: (c) => [inHome(c, ".gemini")],
+        globalSkillsDir: (c) => inHome(c, ".gemini", "skills"),
+        localDir: ".agents/skills",
+    },
+    {
+        name: "codex",
+        label: "Codex",
+        detectDirs: (c) => [codexHome(c)],
+        globalSkillsDir: (c) => path.join(codexHome(c), "skills"),
+        localDir: ".agents/skills",
+    },
+    {
+        name: "windsurf",
+        label: "Windsurf",
+        detectDirs: (c) => [inHome(c, ".codeium", "windsurf")],
+        globalSkillsDir: (c) => inHome(c, ".codeium", "windsurf", "skills"),
+        localDir: ".windsurf/skills",
+    },
+    {
+        name: "antigravity",
+        label: "Antigravity",
+        detectDirs: (c) => [inHome(c, ".gemini", "antigravity")],
+        globalSkillsDir: (c) => inHome(c, ".gemini", "antigravity", "skills"),
+        localDir: ".agents/skills",
+    },
+    {
+        name: "cline",
+        label: "Cline",
+        detectDirs: (c) => [inHome(c, ".cline")],
+        globalSkillsDir: (c) => inHome(c, ".agents", "skills"),
+        localDir: ".agents/skills",
+    },
+    {
+        name: "opencode",
+        label: "OpenCode",
+        detectDirs: (c) => [path.join(xdgConfigHome(c), "opencode")],
+        globalSkillsDir: (c) => path.join(xdgConfigHome(c), "opencode", "skills"),
+        localDir: ".agents/skills",
+    },
+    {
+        name: "roo",
+        label: "Roo Code",
+        detectDirs: (c) => [inHome(c, ".roo")],
+        globalSkillsDir: (c) => inHome(c, ".roo", "skills"),
+        localDir: ".roo/skills",
+    },
+    {
+        name: "zed",
+        label: "Zed",
+        detectDirs: (c) => [path.join(xdgConfigHome(c), "zed")],
+        globalSkillsDir: (c) => inHome(c, ".agents", "skills"),
+        localDir: ".agents/skills",
+    },
+];
+/** Absolute project-local skills dir for an agent. */
+export function localSkillsDir(a, ctx) {
+    return path.join(ctx.cwd, ...a.localDir.split("/"));
+}
+/** Fallback agent when nothing is auto-detected in a fresh environment. */
+export const DEFAULT_AGENT = "claude";
+export function agentByName(name) {
+    return AGENT_REGISTRY.find((a) => a.name === name);
+}
+/**
+ * The shared cross-agent skills directory (the `.agents/skills` standard). Used
+ * as the canonical home for the symlink install mode: the skill lives here once
+ * and each agent links to it.
+ */
+export function sharedSkillsDir(ctx, scope) {
+    return scope === "global"
+        ? inHome(ctx, ".agents", "skills")
+        : path.join(ctx.cwd, ".agents", "skills");
+}
+//# sourceMappingURL=registry.js.map

package/dist/vendor/skilltend/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/vendor/skilltend/registry.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD,0DAA0D;AAC1D,EAAE;AACF,6EAA6E;AAC7E,+EAA+E;AAC/E,6EAA6E;AAC7E,gFAAgF;AAChF,gEAAgE;AAChE,OAAO,IAAI,MAAM,WAAW,CAAC;AAmB7B,kEAAkE;AAClE,MAAM,CAAC,MAAM,sBAAsB,GAAG,UAAU,CAAC;AAEjD,+EAA+E;AAC/E,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,QAAQ,GAAG,sBAAsB;IAC3E,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC5B,CAAC;AAgCD,SAAS,MAAM,CAAC,GAAY,EAAE,GAAG,IAAc;IAC7C,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;AACtC,CAAC;AACD,SAAS,aAAa,CAAC,GAAY;IACjC,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;IAC1C,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;AAChD,CAAC;AACD,SAAS,eAAe,CAAC,GAAY;IACnC,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC;IAC5C,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;AACxC,CAAC;AACD,SAAS,SAAS,CAAC,GAAY;IAC7B,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;IACrC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAiB;IAC1C;QACE,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,aAAa;QACpB,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACvC,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC;QAC/D,QAAQ,EAAE,gBAAgB;KAC3B;IACD;QACE,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,QAAQ;QACf,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACzC,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC;QACtD,QAAQ,EAAE,gBAAgB;KAC3B;IACD;QACE,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,gBAAgB;QACvB,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QAC1C,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC;QACvD,QAAQ,EAAE,gBAAgB;KAC3B;IACD;QACE,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,YAAY;QACnB,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACzC,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC;QACtD,QAAQ,EAAE,gBAAgB;KAC3B;IACD;QACE,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,OAAO;QACd,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACjC,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC;QACzD,QAAQ,EAAE,gBAAgB;KAC3B;IACD;QACE,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,UAAU;QACjB,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QACtD,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,CAAC;QACnE,QAAQ,EAAE,kBAAkB;KAC7B;IACD;QACE,IAAI,EAAE,aAAa;QACnB,KAAK,EAAE,aAAa;QACpB,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QACxD,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ,CAAC;QACrE,QAAQ,EAAE,gBAAgB;KAC3B;IACD;QACE,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,OAAO;QACd,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QACxC,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC;QACtD,QAAQ,EAAE,gBAAgB;KAC3B;IACD;QACE,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,UAAU;QACjB,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QAC5D,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC;QACzE,QAAQ,EAAE,gBAAgB;KAC3B;IACD;QACE,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,UAAU;QACjB,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACtC,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC;QACnD,QAAQ,EAAE,aAAa;KACxB;IACD;QACE,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,KAAK;QACZ,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACvD,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC;QACtD,QAAQ,EAAE,gBAAgB;KAC3B;CACF,CAAC;AAEF,sDAAsD;AACtD,MAAM,UAAU,cAAc,CAAC,CAAa,EAAE,GAAY;IACxD,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,MAAM,aAAa,GAAG,QAAQ,CAAC;AAEtC,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,GAAY,EAAE,KAAyB;IACrE,OAAO,KAAK,KAAK,QAAQ;QACvB,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC;QAClC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AAC9C,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ghostrail",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Open source software factory for coding agents. Config-driven loops, pluggable isolation backends, human merge gate.",
   "keywords": [
     "ai-agents",
@@ -24,7 +24,7 @@
   "bin": {
     "ghostrail": "dist/bin.js"
   },
-  "files": ["dist", "templates", "docker", "LICENSE", "NOTICE", "README.md"],
+  "files": ["dist", "templates", "skill", "docker", "LICENSE", "NOTICE", "README.md"],
   "engines": {
     "node": ">=22"
   },

package/skill/ghostrail/SKILL.md

@@ -0,0 +1,145 @@
+---
+name: ghostrail
+description: Drive ghostrail (the software factory) from inside this repo. Use when the user types /ghostrail, or asks to set up, customize, check, or run a ghostrail factory — scaffolding ghostrail.toml and prompts, tailoring the scaffolded prompts and gate commands to this codebase, diagnosing a broken setup, or kicking off a run/respond/triage tick.
+user-invocable: true
+argument-hint: "[customize | init | doctor | status | run | respond | triage]"
+license: Apache-2.0
+metadata:
+  version: 0.1.0
+allowed-tools:
+  - Read
+  - Write
+  - Edit
+  - Grep
+  - Glob
+  - Bash(npx ghostrail *)
+  - Bash(ghostrail *)
+  - Bash(git *)
+  - Bash(ls *)
+  - Bash(cat *)
+  - Bash(docker images *)
+  - Bash(gh auth status *)
+---
+
+# /ghostrail — drive the factory from the repo
+
+Ghostrail turns this repo into a software factory: it finds eligible tracker
+work, isolates it, runs a sandboxed coding agent that only writes files, gates
+the result against a mirror of CI, and opens a pull request. It never merges.
+
+Dispatch on the argument. With no argument, run **doctor** and then say what the
+useful next step is.
+
+## Resolving the CLI (do this first, every time)
+
+Pick the first that works and reuse it for the whole session:
+
+1. `ghostrail --help` (a global install)
+2. `npx ghostrail --help` (published package)
+3. A local dev checkout, if this *is* the ghostrail repo: `node dist/bin.js --help`
+
+Refer to the chosen form as `<GR>` below. If none work, say so and stop; do not
+hand-roll the factory's behavior.
+
+---
+
+## customize
+
+The headline command. `ghostrail init` scaffolds deliberately generic prompts;
+this tailors them to *this* repo. Never guess: read before proposing.
+
+1. **Confirm the setup exists.** If there is no `ghostrail.toml`, say so and
+   offer to run **init** first.
+2. **Survey the repo.** Gather evidence, don't assume:
+   - Language and layout: manifest files, workspace/monorepo config, `src/` shape.
+   - **Real CI commands** — read the CI workflow (e.g. `.github/workflows/*.yml`)
+     and the package scripts. The gate must mirror CI, in CI's order, including
+     any env vars a build step needs.
+   - Test conventions: framework, where tests live, naming.
+   - House style: a `CONTRIBUTING.md`, `AGENTS.md`, `CLAUDE.md`, or lint config.
+3. **Propose edits, then apply on approval.** Show a concrete diff for:
+   - `prompts/resolve-issue.md` — the stack, the layout, where code and tests
+     live, the project's conventions, and the exact lint/typecheck/test commands
+     the agent should run. Keep the `.ghostrail/result.json` contract intact.
+   - `prompts/respond.md` — same context; keep it reading `.ghostrail/feedback.md`.
+   - `prompts/triage.md` — what a right-sized issue looks like in this codebase.
+   - `[gate].commands` — mirroring CI exactly.
+   - `[source]` — the team/project/label/assignee filters, if you can tell what
+     they should be. Ask rather than invent tracker identifiers.
+4. **Do not touch** `[output].auto_merge` (it must stay `false`) or invent
+   credentials.
+
+State plainly what you changed and what still needs a human (tracker IDs, tokens).
+
+---
+
+## init
+
+Scaffold the factory into this repo, then hand off to **customize**.
+
+1. Choose the template from the repo's nature, and say why:
+   - `code-local` — a code repo (gated by CI, opens PRs).
+   - `content-loop` — a writing/content repo (no code gate, draft PRs).
+2. Run `<GR> init <template>`. It is non-clobbering: existing files are kept
+   unless `--force`. Report what was written vs kept.
+3. Tell the user the two things the scaffold can't know (repo-specific prompt
+   detail and the tracker filters), and offer to run **customize** now.
+
+---
+
+## doctor
+
+Diagnose a setup without changing anything. Check and report each, with the fix:
+
+- **CLI** — which form resolved, and its `<GR> version`.
+- **Config** — `ghostrail.toml` present, and it parses. Any ghostrail command
+  prints config errors with a dotted path; use that to point at the exact key.
+- **Prompts** — every path referenced by `[agent].prompt`, `[respond].prompt`,
+  and `[triage].prompt` exists.
+- **Gate** — `[gate].commands` is non-empty for a code factory, and the commands
+  actually exist in the project's scripts.
+- **Credentials** — report which of `LINEAR_API_KEY`, `GH_TOKEN`/`GITHUB_TOKEN`,
+  and `ANTHROPIC_API_KEY` **or** `CLAUDE_CODE_OAUTH_TOKEN` are set. Report only
+  set/unset, **never print a value**. Note that `ANTHROPIC_API_KEY` wins over the
+  OAuth token, so it must be unset to bill a Pro/Max subscription.
+- **GitHub** — `gh auth status` succeeds.
+- **Container backend**, if `[backend].kind = "container"` — the configured
+  `image` exists locally (`docker images`). If not, it must be built.
+
+Finish with a short ordered list of what to fix first.
+
+---
+
+## status
+
+Read-only picture of the factory: the configured queues (source/triage
+eligibility filters), and recent runs from the local store under `.factory/`
+(`events.ndjson`). Summarize the last few runs and their outcomes. For a live
+view, suggest `<GR> board`.
+
+---
+
+## run · respond · triage
+
+Passthroughs. Before executing, state what will happen and confirm, because these
+act on real tracker items and can open real pull requests.
+
+- `run` — one tick over the fix queue. **If `[output].open_pr` is true, this opens
+  a real PR.** Suggest a dry run first (`open_pr = false`) for a new setup.
+- `respond` — folds new PR and tracker comments into existing factory branches.
+- `triage` — decomposes large issues into sub-issues (creates real tracker items).
+
+Run `<GR> <command>` and summarize the resulting JSON: per item, the state
+(`done` / `blocked` / `failed` / `noop` / `skipped`), the gate steps if present,
+and any PR URL. On failure, quote the actual error rather than paraphrasing.
+
+---
+
+## Rules
+
+- **Never** set `auto_merge = true` or merge a factory PR. A human owns merges.
+- **Never** print or commit a secret. Report credentials as set/unset only.
+- Prefer editing the scaffolded prompts over rewriting them; they already encode
+  the `.ghostrail/result.json` and `.ghostrail/triage.json` contracts the factory
+  depends on, and breaking those breaks the loop.
+- When you don't know a tracker identifier (team key, project, labels), ask.