jules-orchestrator-kit 0.1.0 → 0.1.2

package/.agent/history/2026-07-27-dispatch-nightly-accessibility-aria-audit.md

@@ -0,0 +1,12 @@
+---
+type: jules_dispatch
+title: "Nightly Accessibility & ARIA Audit"
+timestamp: "2026-07-27T03:42:08.297Z"
+---
+# Jules Task Dispatch: Nightly Accessibility & ARIA Audit
+
+## Prompt
+Audit UI components for WCAG 2.2 AA accessibility standards. Verify that form inputs have labels, interactive elements support keyboard focus, and all images have descriptive alt text.
+
+## Session
+- ID: `sessions/2975900389302221090`

package/.agent/history/2026-07-27-dispatch-nightly-dead-code-unused-exports-audit.md

@@ -0,0 +1,12 @@
+---
+type: jules_dispatch
+title: "Nightly Dead Code & Unused Exports Audit"
+timestamp: "2026-07-27T03:42:12.539Z"
+---
+# Jules Task Dispatch: Nightly Dead Code & Unused Exports Audit
+
+## Prompt
+Audit the codebase for unused exports, dead files, and obsolete types. Prune unused local utility functions and unreferenced internal types. SAFETY INVARIANTS: 1. DO NOT remove package dependencies from package.json, Cargo.toml, or requirements.txt (hygiene sweeps may ADD dependencies, never REMOVE). 2. DO NOT delete or commit untracked WIP files created by developers. 3. Verify that test and build suites pass 100% cleanly before submitting PR.
+
+## Session
+- ID: `sessions/5929124864335143740`

package/.agent/history/2026-07-27-dispatch-nightly-security-secret-leaks-audit.md

@@ -0,0 +1,12 @@
+---
+type: jules_dispatch
+title: "Nightly Security & Secret Leaks Audit"
+timestamp: "2026-07-27T03:42:04.690Z"
+---
+# Jules Task Dispatch: Nightly Security & Secret Leaks Audit
+
+## Prompt
+Perform a security review of the repository. Scan for hardcoded API keys, exposed secrets, unmasked PII in logs, and unvalidated input parameters in public endpoints. Safety rule: Never commit untracked files or secrets to git.
+
+## Session
+- ID: `sessions/2599982382207455757`

package/.agent/history/2026-07-27-dispatch-nightly-unused-environment-variable-audit.md

@@ -0,0 +1,12 @@
+---
+type: jules_dispatch
+title: "Nightly Unused Environment Variable Audit"
+timestamp: "2026-07-27T03:42:16.583Z"
+---
+# Jules Task Dispatch: Nightly Unused Environment Variable Audit
+
+## Prompt
+Scan configuration files and environment variable declarations against codebase usage. Identify unused or zombie environment variables that are declared but never referenced in source code. Document findings and remove obsolete declarations.
+
+## Session
+- ID: `sessions/4603416712706872745`

package/.agent/history/2026-07-27-nightly-audit.md

@@ -0,0 +1,13 @@
+---
+type: nightly_jules_audit
+timestamp: "2026-07-27T03:42:20.285Z"
+status: "[DISPATCHED]"
+---
+# Nightly Jules Maintenance Suite Audit - 2026-07-27
+
+Summary of automated audit dispatches:
+
+- **Nightly Security & Secret Leaks Audit** (`sec-review`): Dispatched successfully
+- **Nightly Accessibility & ARIA Audit** (`a11y-audit`): Dispatched successfully
+- **Nightly Dead Code & Unused Exports Audit** (`dead-code-prune`): Dispatched successfully
+- **Nightly Unused Environment Variable Audit** (`zombie-env-audit`): Dispatched successfully

package/.agent/jules-queue/README.md

@@ -0,0 +1,23 @@
+# Jules Task Queue Directory
+
+Drop markdown task specification files here (e.g. `TASK-001-feature-name.md`) to queue tasks for background execution by Google Jules.
+
+### File Format Example
+
+```markdown
+# TASK-001: Implement User Rate Limiting
+
+## Objective
+Implement sliding window rate limiting for public API routes.
+
+## Execution Rules
+- Use Redis / memory store for tracking hit counts.
+- Must return HTTP 429 Too Many Requests when limit is exceeded.
+- Must pass `npm test` before submitting PR.
+```
+
+Dispatch queued tasks using `scripts/jules-dispatch.mjs`:
+
+```bash
+node scripts/jules-dispatch.mjs "TASK-001 Rate Limiting" .agent/jules-queue/TASK-001-rate-limiting.md
+```

package/.agent/jules.yml

@@ -0,0 +1,13 @@
+# Google Jules Repository Configuration (Version 2)
+version: 2
+test_cmd: "npm test"
+build_cmd: ""
+forbidden_paths:
+  - ".github/**"
+  - "**/secrets/**"
+  - "**/*.pem"
+  - "**/lock-manager/**"
+  - "scripts/jules-*"
+  - ".agent/jules.yml"
+allow_paths: []
+

package/.agent/rules/dynamic-guardrails.json

@@ -0,0 +1,24 @@
+{
+  "rules": [
+    {
+      "trigger": "\\.astro",
+      "guardrail": "## 🟢 ASTRO GUARDRAILS\n- DO NOT run `biome check --write --unsafe` on `.astro` files (destroys frontmatter).\n- DO NOT import 'sharp' into runtime bundles."
+    },
+    {
+      "trigger": "\\b(db|database|drizzle|sql\\w*|postgres\\w*|sqlite\\w*|mysql\\w*)\\b",
+      "guardrail": "## 🗄️ DATABASE GUARDRAILS\n- Always batch multiple database statements.\n- DO NOT write destructive migrations (`DROP TABLE`) without explicit user consent."
+    },
+    {
+      "trigger": "\\b(css|theme|tailwind)\\b",
+      "guardrail": "## 🎨 CSS & DESIGN GUARDRAILS\n- Use semantic design tokens from the theme rather than hardcoding hex values."
+    },
+    {
+      "trigger": "\\b(regex|redact|secret|token|auth)\\b",
+      "guardrail": "## 🔒 SECRET REDACTION GUARDRAILS\n- Never weaken token regular expressions.\n- Always test regexes against full strings without accidental literal characters inside character classes."
+    },
+    {
+      "trigger": "\\b(glob|path|win32|windows|slash)\\b",
+      "guardrail": "## 🌐 CROSS-PLATFORM PATH GUARDRAILS\n- Always replace backslashes `\\\\` with `/` before performing glob pattern matching or string splits."
+    }
+  ]
+}

package/.agent/workflows/jules-review.md

@@ -0,0 +1,69 @@
+---
+description: "Framework-agnostic workflow for auditing, rebasing, and merging PRs submitted by Google Jules."
+---
+
+[ROLE: Code Reviewer & CI/CD Gatekeeper]
+CONTEXT:
+
+- Primary autonomous worker: Google Jules (`jules`)
+- Core Directives: `AGENTS.md` / `JULES.md`
+- Verification Commands: Project build & test suite (`npm run check:all`, `npm test`, `cargo test`, `pytest`)
+
+TASK: Rigorously audit, rebase, and verify PRs created by Google Jules before merging.
+
+---
+
+PHASE 0: PR DISCOVERY & ISOLATION
+
+1. **Identify Target PR**:
+   - List open PRs from Jules:
+     ```bash
+     gh pr list --author "app/jules"
+     ```
+   - Fetch the PR diff against merge-base:
+     ```bash
+     gh pr diff <PR_NUMBER>
+     ```
+
+2. **Verify Change Boundaries**:
+   - Confirm PR does NOT touch restricted files:
+     - ❌ `.github/` workflows or secret configurations
+     - ❌ Lock manager infrastructure
+     - ❌ Unapproved database schema drops
+
+---
+
+PHASE 1: AUTOMATED AUDIT & REBASE
+
+1. **Execute Self-Audit Script**:
+   - Run the self-audit script:
+     ```bash
+     node scripts/jules-self-audit.mjs
+     ```
+
+2. **Rebase Branch**:
+   - Ensure the PR branch is rebased on latest `main`:
+     ```bash
+     git fetch origin main
+     git rebase origin/main
+     ```
+
+---
+
+PHASE 2: VERIFICATION & COMPLIANCE
+
+1. **Type & Test Suite Check**:
+   - Run full verification suite:
+     ```bash
+     npm test && npm run build
+     ```
+
+---
+
+PHASE 3: MERGE & HANDOVER
+
+1. **Merge PR**:
+   - Merge approved PR via GitHub CLI:
+     ```bash
+     gh pr merge <PR_NUMBER> --squash --delete-branch
+     ```

package/JULES_RULES_TEMPLATE.md

@@ -33,7 +33,7 @@ Dispatch tasks to Jules when ALL of the following apply:
 ## 3. Dynamic Command Resolution
 
 Jules automatically infers test and build verification commands based on project manifest files:
-- `package.json` -> `npm run check:all && npm test && npm run build`
+- `package.json` -> `npm test && npm run build`
 - `Cargo.toml` -> `cargo test --workspace && cargo build`
 - `go.mod` -> `go test ./... && go build ./...`
 - `pyproject.toml` -> `pytest`

package/README.md

@@ -1,8 +1,11 @@
 # Google Jules Orchestration Kit
 
+[![npm version](https://img.shields.io/npm/v/jules-orchestrator-kit.svg)](https://www.npmjs.com/package/jules-orchestrator-kit)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+
 A lightweight, framework-agnostic toolkit for turning **Google Jules** into a deterministic, autonomous background code builder for any repository (Next.js, Vite, Node, Bun, Deno, Python, Go, Rust, Elixir, Ruby, Swift, Java, C/C++, Monorepos, etc.).
 
-> **TL;DR**: Don't use Google Jules like a chat assistant. Use it as an autonomous background worker. Run `npx github:FullThrottle83/jules-orchestrator-kit` inside any repository to automatically detect your tech stack, generate prompt guardrails, set up test/build verification gates, and install Jules orchestration scripts.
+> **TL;DR**: Don't use Google Jules like a chat assistant. Use it as an autonomous background worker. Run `npx jules-orchestrator-kit` inside any repository to automatically detect your tech stack, generate prompt guardrails, set up test/build verification gates, and install Jules orchestration scripts.
 
 ---
 
@@ -11,7 +14,9 @@ A lightweight, framework-agnostic toolkit for turning **Google Jules** into a de
 Run this command inside the root of **any target repository**:
 
 ```bash
-npx github:FullThrottle83/jules-orchestrator-kit
+npx jules-orchestrator-kit
+# or
+npx jules-init
 ```
 
 This single command will:
@@ -51,12 +56,18 @@ node scripts/jules-dispatch.mjs "Refactor rate limiter" "Implement sliding windo
 npm run jules:queue
 ```
 
-### Run Rate-Limited Swarm Dispatch
-
 ```bash
 JULES_SWARM_CONCURRENCY=5 node scripts/jules-swarm.mjs tasks.json
 ```
 
+Where `tasks.json` is formatted as:
+```json
+[
+  { "id": "t1", "title": "Refactor Auth", "prompt": "Refactor auth middleware to ESM" },
+  { "id": "t2", "title": "Fix Memory Leak", "prompt": "Fix listener memory leak in websocket event loop" }
+]
+```
+
 ### Run Nightly Maintenance Suite
 
 ```bash

package/bin/init.js

@@ -10,8 +10,24 @@ const __dirname = path.dirname(__filename);
 const kitRoot = path.resolve(__dirname, "..");
 const targetDir = process.cwd();
 
+const isHelp = process.argv.includes("--help") || process.argv.includes("-h");
 const isForce = process.argv.includes("--force") || process.argv.includes("-f");
 
+if (isHelp) {
+  console.log(`
+Google Jules Orchestration Kit - Init Scaffolding CLI
+
+Usage:
+  npx jules-orchestrator-kit [options]
+  npx jules-init [options]
+
+Options:
+  -f, --force    Overwrite existing AGENTS.md, .agent/jules.yml, and orchestration scripts.
+  -h, --help     Show this help message.
+`);
+  process.exit(0);
+}
+
 console.log("\n🚀 Initializing Google Jules Orchestration Kit...\n");
 console.log(`📁 Target Directory: ${targetDir}`);
 if (isForce) console.log("⚠️ Force mode enabled (existing files will be overwritten).");
@@ -34,7 +50,16 @@ if (!fs.existsSync(agentsFile) || isForce) {
     console.log("✅ Created: AGENTS.md");
   }
 } else {
-  console.log("ℹ️ AGENTS.md already exists (skipped overwrite).");
+  const existingContent = fs.readFileSync(agentsFile, "utf-8");
+  if (!existingContent.includes("<MCP_DIRECTIVE>")) {
+    if (fs.existsSync(julesRulesSource)) {
+      const templateContent = fs.readFileSync(julesRulesSource, "utf-8");
+      fs.appendFileSync(agentsFile, `\n\n---\n\n${templateContent}`, "utf-8");
+      console.log("✅ Appended Google Jules directives to existing AGENTS.md");
+    }
+  } else {
+    console.log("ℹ️ AGENTS.md already contains Jules directives (skipped overwrite).");
+  }
 }
 
 // 3. Scaffold .agent/ structure

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jules-orchestrator-kit",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Framework-agnostic toolkit for orchestrating Google Jules background AI coding workers.",
   "type": "module",
   "bin": {
@@ -10,6 +10,7 @@
   "files": [
     "bin/",
     "scripts/",
+    ".agent/",
     "JULES_RULES_TEMPLATE.md",
     "README.md",
     "LICENSE"