haac-aikit 0.14.1 → 0.15.0

package/catalog/skills/tier1/decide/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: decide
-description: Use when the user types "/decide <topic>", "use the decide skill", or "make me a decision page on X" — a non-trivial choice with 2-4 viable options that needs tradeoffs visualized as one rich HTML page. Generates a self-contained file at `docs/decisions/YYYY-MM-DD-<slug>.html`. Opt-in: do not invoke proactively.
+description: "Use when the user types \"/decide <topic>\", \"use the decide skill\", or \"make me a decision page on X\" — a non-trivial choice with 2-4 viable options that needs tradeoffs visualized as one rich HTML page. Generates a self-contained file at `docs/decisions/YYYY-MM-DD-<slug>.html`. Opt-in: do not invoke proactively."
 version: "1.0.0"
 source: haac-aikit
 license: MIT

package/catalog/skills/tier1/directions/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: directions
-description: Use when the user types "/directions <surface>", "show me design directions for X", or "explore visual options for the empty state / hero / dashboard card" — 2-4 rendered visual takes side-by-side on one self-contained HTML page with a light/dark toggle. Output: `docs/directions/YYYY-MM-DD-<slug>.html`. Opt-in only.
+description: "Use when the user types \"/directions <surface>\", \"show me design directions for X\", or \"explore visual options for the empty state / hero / dashboard card\" — 2-4 rendered visual takes side-by-side on one self-contained HTML page with a light/dark toggle. Output: `docs/directions/YYYY-MM-DD-<slug>.html`. Opt-in only."
 version: "1.0.0"
 source: haac-aikit
 license: MIT

package/catalog/skills/tier1/roadmap/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: roadmap
-description: Use when the user types "/roadmap <feature>", "draw up a roadmap for X", or "give me a one-page implementation doc" — the approach is already settled and they want milestones + data-flow diagram + mockups + key code + risks + open questions on one committed HTML page. Output: `docs/roadmaps/YYYY-MM-DD-<slug>.html`. Opt-in only.
+description: "Use when the user types \"/roadmap <feature>\", \"draw up a roadmap for X\", or \"give me a one-page implementation doc\" — the approach is already settled and they want milestones + data-flow diagram + mockups + key code + risks + open questions on one committed HTML page. Output: `docs/roadmaps/YYYY-MM-DD-<slug>.html`. Opt-in only."
 version: "1.0.0"
 source: haac-aikit
 license: MIT

package/catalog/skills/tier1/test-driven-development/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: test-driven-development
-description: Use when implementing new behaviour, fixing a confirmed bug, or when the user says "TDD", "test-first", "write a test for X", or "add tests". Enforces red-green-refactor: every behaviour gets a failing test first, then the minimal code to pass, then refactor — so untested code never enters the codebase.
+description: "Use when implementing new behaviour, fixing a confirmed bug, or when the user says \"TDD\", \"test-first\", \"write a test for X\", or \"add tests\". Enforces red-green-refactor: every behaviour gets a failing test first, then the minimal code to pass, then refactor — so untested code never enters the codebase."
 version: "1.0.0"
 source: obra/superpowers
 license: MIT

package/dist/cli.mjs

@@ -1422,12 +1422,33 @@ function parseFrontmatter(content) {
       inToolsList = true;
       continue;
     }
-    frontmatter[key] = val;
+    frontmatter[key] = unquoteYamlScalar(val);
   }
   const doc = { frontmatter, body: body.trimStart() };
   if (toolsList) doc.toolsList = toolsList;
   return doc;
 }
+function unquoteYamlScalar(value) {
+  if (value.length >= 2 && value.startsWith('"') && value.endsWith('"')) {
+    const inner = value.slice(1, -1);
+    return inner.replace(/\\(.)/g, (_2, ch) => {
+      switch (ch) {
+        case "n":
+          return "\n";
+        case "t":
+          return "	";
+        case "r":
+          return "\r";
+        default:
+          return ch;
+      }
+    });
+  }
+  if (value.length >= 2 && value.startsWith("'") && value.endsWith("'")) {
+    return value.slice(1, -1).replace(/''/g, "'");
+  }
+  return value;
+}
 function skillToCursorMdc(skill) {
   const description = skill.frontmatter["description"] ?? "";
   const escaped = description.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
@@ -1442,9 +1463,10 @@ ${skill.body}
 function skillToWindsurfRule(skill) {
   const description = skill.frontmatter["description"] ?? "";
   const name = skill.frontmatter["name"] ?? "(unnamed)";
+  const escapedDesc = description.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
   const header = `---
 trigger: model_decision
-description: ${description}
+description: "${escapedDesc}"
 ---
 
 `;
@@ -1464,9 +1486,10 @@ _Truncated to fit Windsurf's 12k-char rule limit. Full skill: \`.claude/skills/$
 }
 function skillToCopilotInstruction(skill) {
   const description = skill.frontmatter["description"] ?? "";
+  const escapedDesc = description.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
   return `---
 applyTo: '**'
-description: ${description}
+description: "${escapedDesc}"
 ---
 
 ${skill.body}
@@ -1492,8 +1515,9 @@ ${escaped}
 function agentToCopilotAgent(agent) {
   const name = agent.frontmatter["name"] ?? "";
   const description = agent.frontmatter["description"] ?? "";
+  const escapedDesc = description.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
   const model = agent.frontmatter["model"] ?? "";
-  const fm = [`name: ${name}`, `description: ${description}`];
+  const fm = [`name: ${name}`, `description: "${escapedDesc}"`];
   if (model) fm.push(`model: ${model}`);
   if (agent.toolsList && agent.toolsList.length > 0) {
     fm.push(`tools:`);
@@ -1503,6 +1527,19 @@ function agentToCopilotAgent(agent) {
 ${fm.join("\n")}
 ---
 
+${agent.body}
+`;
+}
+function agentToCursorAgent(agent) {
+  const name = agent.frontmatter["name"] ?? "";
+  const description = agent.frontmatter["description"] ?? "";
+  const escapedDesc = description.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
+  return `---
+name: ${name}
+description: "${escapedDesc}"
+model: inherit
+---
+
 ${agent.body}
 `;
 }
@@ -1741,6 +1778,15 @@ async function runSync(argv) {
       if (!name) continue;
       results.push(safeWrite(`.cursor/rules/skill-${name}.mdc`, skillToCursorMdc(skill), { ...opts, useMarkers: false }));
     }
+    results.push(...syncSkills("tier1", opts, ".cursor/skills"));
+    results.push(...syncSkills("tier2", opts, ".cursor/skills"));
+    if (config.integrations.subagents) {
+      for (const agent of allAgents) {
+        const name = agent.frontmatter["name"];
+        if (!name) continue;
+        results.push(safeWrite(`.cursor/agents/${name}.md`, agentToCursorAgent(agent), { ...opts, useMarkers: false }));
+      }
+    }
     if (config.integrations.hooks) {
       const srcDir = join2(CATALOG_ROOT, "hooks");
       const destDir = ".cursor/hooks";
@@ -1758,6 +1804,8 @@ async function runSync(argv) {
   }
   if (config.tools.includes("windsurf")) {
     results.push(safeWrite(".windsurf/rules/project.md", catalog.windsurfRules(), { ...opts, useMarkers: false }));
+    results.push(...syncSkills("tier1", opts, ".windsurf/skills"));
+    results.push(...syncSkills("tier2", opts, ".windsurf/skills"));
     for (const skill of allSkills) {
       const name = skill.frontmatter["name"];
       if (!name) continue;
@@ -1771,6 +1819,8 @@ async function runSync(argv) {
       if (!name) continue;
       results.push(safeWrite(`.github/instructions/${name}.instructions.md`, skillToCopilotInstruction(skill), { ...opts, useMarkers: false }));
     }
+    results.push(...syncSkills("tier1", opts, ".github/skills"));
+    results.push(...syncSkills("tier2", opts, ".github/skills"));
     if (config.integrations.subagents) {
       for (const agent of allAgents) {
         const name = agent.frontmatter["name"];
@@ -1802,6 +1852,8 @@ async function runSync(argv) {
       const subdir = htmlSkillNames.has(name) ? "html/" : "";
       results.push(safeWrite(`.gemini/commands/${subdir}${name}.toml`, skillToGeminiCommand(skill), { ...opts, useMarkers: false }));
     }
+    results.push(...syncSkills("tier1", opts, ".gemini/skills"));
+    results.push(...syncSkills("tier2", opts, ".gemini/skills"));
     if (config.integrations.mcp) {
       results.push(safeWrite(".gemini/settings.json", catalog.mcpJson(), { ...opts, useMarkers: false }));
     }
@@ -1923,12 +1975,22 @@ function copyAction(srcPath, destPath, opts) {
   }
   return { path: destPath, action: existed ? "updated" : "created", src: srcPath };
 }
+function assertSafeName(name, source) {
+  if (!/^[a-z0-9][a-z0-9-]*$/.test(name)) {
+    throw new Error(
+      `aikit: refusing to sync '${source}' \u2014 name '${name}' contains characters outside [a-z0-9-]. This would either break the target tool's loader or (if it contains '/' or '..') escape the target directory. Rename the skill/agent so its frontmatter 'name:' matches /^[a-z0-9][a-z0-9-]*$/.`
+    );
+  }
+}
 function loadSkillsFromCatalog() {
   const out = [];
   for (const tier of ["tier1", "tier2"]) {
-    for (const name of listSkillFolders(tier)) {
-      const content = readFileSync5(join2(skillFolder(tier, name), "SKILL.md"), "utf8");
-      out.push(parseFrontmatter(content));
+    for (const folder of listSkillFolders(tier)) {
+      const content = readFileSync5(join2(skillFolder(tier, folder), "SKILL.md"), "utf8");
+      const parsed = parseFrontmatter(content);
+      const name = parsed.frontmatter["name"];
+      if (name) assertSafeName(name, `catalog/skills/${tier}/${folder}/SKILL.md`);
+      out.push(parsed);
     }
   }
   return out;
@@ -1944,7 +2006,10 @@ function loadAgentsFromCatalog(config) {
     const include = selection === "all" ? allNames : allNames.filter((a2) => selection.includes(a2));
     for (const name of include) {
       const content = readFileSync5(join2(dir, `${name}.md`), "utf8");
-      out.push(parseFrontmatter(content));
+      const parsed = parseFrontmatter(content);
+      const fmName = parsed.frontmatter["name"];
+      if (fmName) assertSafeName(fmName, `catalog/agents/${tier}/${name}.md`);
+      out.push(parsed);
     }
   }
   return out;
@@ -1954,8 +2019,7 @@ function listHookFiles() {
   if (!existsSync5(dir)) return [];
   return readdirSync2(dir).filter((f2) => f2.endsWith(".sh"));
 }
-function syncSkills(tier, opts) {
-  const destRoot = `.claude/skills`;
+function syncSkills(tier, opts, destRoot = ".claude/skills") {
   const results = [];
   for (const name of listSkillFolders(tier)) {
     const srcRoot = skillFolder(tier, name);
@@ -3516,7 +3580,7 @@ function isInteractive() {
 }
 
 // src/cli.ts
-var VERSION = "0.14.1";
+var VERSION = "0.15.0";
 var HELP = `
 haac-aikit \u2014 the batteries-included AI-coding kit