novahiz 0.2.5 → 0.3.1

package/NOTICE.md

@@ -30,17 +30,28 @@ Providers are referenced by install command, never vendored. Each lists its upst
 | `security` | `security-mcp` | https://github.com/AbrahamOO/security-mcp | MIT |
 | `narsil` | `narsil-mcp` | https://github.com/postrv/narsil-mcp | MIT OR Apache-2.0 |
 | `context7` | `@upstash/context7-mcp` | https://github.com/upstash/context7 | MIT |
-| `cron` | `mcp-cron` | https://github.com/jolks/mcp-cron | AGPL-3.0-only |
+| `cron` | `scheduler-mcp` (local venv clone) | https://github.com/PhialsBasement/scheduler-mcp | MIT |
 | `novahiz` | local Novahiz MCP | https://github.com/novahiz/novahiz | Apache-2.0 |
+| `dart` | Dart SDK (`dart mcp-server`) | https://github.com/dart-lang/ai (pkgs/dart_mcp_server) | BSD-3-Clause |
 
-## opencode plugins (third-party)
+## Skill packs (upstream, not vendored)
 
-The installer may register these OpenCode plugins from `opencode.jsonc` `plugin[]`. They are installed from npm, never vendored in this repository.
+Installed on demand with `npx skills add` (or an upstream tarball when git transport fails); this repository does not copy their files.
 
-| Package | Repository | License |
+| Id | Repository | License |
 | --- | --- | --- |
-| `@mohak34/opencode-notifier` | https://github.com/mohak34/opencode-notifier | MIT |
-| `@tarquinen/opencode-dcp` | https://github.com/Opencode-DCP/opencode-dynamic-context-pruning | AGPL-3.0-or-later |
+| `flutter-skills` | https://github.com/flutter/agent-plugins | BSD-3-Clause |
+| `dart-skills` | https://github.com/dart-lang/skills | BSD-3-Clause |
+| `expo-skills` | https://github.com/expo/skills | MIT |
+
+## opencode plugins (third-party)
+
+`opencode.jsonc` `plugin[]` holds only the Novahiz adapter. The former npm plugins were removed on 2026-09-26 (see `docs/HARNESSES.md`):
+
+| Package | Repository | License | Status |
+| --- | --- | --- | --- |
+| `@mohak34/opencode-notifier` | https://github.com/mohak34/opencode-notifier | MIT | removed 2026-09-26 |
+| `@tarquinen/opencode-dcp` | https://github.com/Opencode-DCP/opencode-dynamic-context-pruning | AGPL-3.0-or-later | removed 2026-09-26 |
 
 The Novahiz adapter (`adapters/opencode/novahiz.ts`) is first-party under Apache-2.0.
 

package/README.md

@@ -2,7 +2,7 @@
 
 > **Zero-dependency enforcement layer for AI coding agents** — classifies prompts, assigns execution roadmaps, blocks unsafe edits, and injects session-level skills, all deterministically without model calls.
 
-15 categories, 41 skills, 10 gate rules, 6 MCP providers — all deterministic, all local, all JSON.
+17 categories, 95 skills, 11 gate rules, 7 MCP providers — all deterministic, all local, all JSON.
 
 ```
 ┌─────────────────────────────────────────────────────────────────────┐
@@ -52,7 +52,7 @@
 └──────────────────────────────────────────────────────────────────────────┘
 ```
 
-**15 categories**, **41 skills**, **10 gate rules**, **6 MCP providers** — all deterministic, all local, all JSON.
+**17 categories**, **95 skills**, **11 gate rules**, **7 MCP providers** — all deterministic, all local, all JSON.
 
 ---
 
@@ -89,7 +89,7 @@ npx Novahiz doctor
 
 ## The Classifier
 
-Every user prompt passes through the classifier. It scores keywords against 15 categories and picks the top matches.
+Every user prompt passes through the classifier. It scores keywords against 17 categories and picks the top matches.
 
 ```mermaid
 flowchart LR
@@ -167,8 +167,9 @@ flowchart TD
 | R11-accessibility | A design-ui or audit prompt | novahiz-wcag-audit |
 | R12-web-extract | A research prompt | novahiz-web-extract |
 | R13-design-craft | A design-ui prompt or a style file (css/scss/less/html) | novahiz-humanizer, ui-slop-remover, ui-craft-rules |
+| R14-impeccable | A design-ui prompt or a style file (css/scss/less/html) | impeccable |
 
-`novahiz-humanizer` and `ui-slop-remover` are required only on frontend design tasks (R13).
+`novahiz-humanizer` and `ui-slop-remover` are required only on frontend design tasks (R13); `impeccable` loads the same way (R14) so critique, audit and polish playbooks stay reachable.
 
 ---
 
@@ -241,7 +242,7 @@ flowchart TD
 
 ## Installed skills
 
-Novahiz ships with 41 skills across all categories:
+Novahiz ships with 95 skills across all categories:
 
 | Category | Skills | Purpose |
 |----------|--------|---------|
@@ -253,6 +254,7 @@ Novahiz ships with 41 skills across all categories:
 | `docs-writing` | ... | Prose, marketing copy, AI de-tell |
 | `browser` | novahiz-browser, browser-session, novahiz-web-extract, ... | Web automation, screenshots, extraction |
 | `audit` | novahiz-security, package-risk-audit, llm-threat-review, ... | Security, compliance, vulnerability |
+| `expo` | expo-overview, expo-router, expo-module, expo-dev-client, ... | Expo / React Native: routes, native modules, builds |
 
 Run `npx Novahiz skills --all` to see the full list.
 
@@ -264,12 +266,15 @@ Novahiz auto-registers external MCP servers based on the prompt category:
 
 | Provider | Package | License | Categories |
 |----------|---------|---------|------------|
-| context7 | `@upstash/context7-mcp` | MIT | code, research |
+| context7 | `@upstash/context7-mcp` | MIT | code |
 | narsil | `narsil-mcp` | MIT OR Apache-2.0 | code, review |
 | novahiz | local (`mcp/novahiz-tools`) | Apache-2.0 | code, planning |
 | playwright | `@playwright/mcp` | Apache-2.0 | browser, design-ui |
 | security | `security-mcp` | MIT | audit |
-| cron | `mcp-cron` | AGPL-3.0-only | devops |
+| cron | `scheduler-mcp` (local venv clone) | MIT | devops |
+| dart | `dart mcp-server` (Dart SDK) | BSD-3-Clause | code, debug, design-ui, flutter |
+
+Skill packs (installed from official repos, never vendored): `flutter/agent-plugins` (25 skills), `dart-lang/skills` (15 skills), `expo/skills` (17 skills, the `expo-*` group only; `eas-*` paid services excluded). See [docs/PROVIDERS.md](docs/PROVIDERS.md).
 
 Upstream repositories and full provenance for MCP providers and opencode plugins: [docs/PROVIDERS.md](docs/PROVIDERS.md), [docs/HARNESSES.md](docs/HARNESSES.md), [NOTICE.md](NOTICE.md).
 

package/adapters/README.md

@@ -4,7 +4,7 @@ Novahiz keeps every decision in the CLI. An adapter only translates a harness ev
 
 ## opencode
 
-`adapters/opencode/novahiz.ts` is a plugin. It classifies each user message, injects the roadmap checklist and expected skills, tracks loaded skills per session, and calls `Novahiz gate` on `edit`, `write`, `patch`, `apply_patch`, `bash`, and `shell`. The gate requires `novahiz-humanizer`, `ui-slop-remover` and `ui-craft-rules` only on frontend design tasks (R13). It registers the MCP server through the plugin `config` hook, and persists every skill launch with `Novahiz session-load`.
+`adapters/opencode/novahiz.ts` is a plugin. It classifies each user message, injects the roadmap checklist and expected skills, tracks loaded skills per session, and calls `Novahiz gate` on `edit`, `write`, `patch`, `apply_patch`, `bash`, and `shell`. The gate requires `novahiz-humanizer`, `ui-slop-remover` and `ui-craft-rules` only on frontend design tasks (R13), and `impeccable` on the same selectors (R14). It registers the MCP server through the plugin `config` hook, and persists every skill launch with `Novahiz session-load`.
 
 `adapters/opencode/agent/novahiz.md` is the primary agent. It carries `permission: { question: allow, plan_enter: allow }`, because opencode denies `question` to every agent by default and only its built-in `build` and `plan` agents re-allow it.
 

package/adapters/opencode/agent/novahiz.md

@@ -25,8 +25,8 @@ Work in this order for every request:
 
 Rules:
 
-- novahiz-humanizer, ui-slop-remover and ui-craft-rules are required only for frontend design tasks (R13-design-craft); impeccable is not installed.
+- novahiz-humanizer, ui-slop-remover and ui-craft-rules are required only for frontend design tasks (R13-design-craft); impeccable is installed and required on the same design selectors (R14-impeccable). After creating or substantially changing UI, run its critique, an audit when warranted, and a polish pass before ship.
 - Load the Supabase skills for any Supabase work.
 - Be honest. Avoid false good ideas. Keep a critical stance. Zero simulation: never pretend to have run, tested, or verified something you did not.
 - Criticize the request when it is inconsistent, ambiguous, risky, or suboptimal, and propose an alternative.
-- If the gate blocks you, load the missing skills it names, then retry. Do not try to route around the gate with a shell write.
+- Gate auto-repair: when a call fails with "Novahiz gate blocked", do not stop and do not ask the user. Execute the AUTO-REPAIR block from the error verbatim: load every skill it names with `skill({ name: "..." })`, then retry the exact same call once and continue the user's task where it left off. If the identical skills are reported missing again, the loads did not register — run `novahiz doctor`, report honestly to the user, and stop. Never bypass the gate with a shell write, an alternate tool, or NOVAHIZ_GATE.

package/adapters/opencode/instructions.md

@@ -29,7 +29,8 @@ Playwright uses a **persistent profile** that preserves data across sessions (co
 ## Behavioral & Quality Rules
 
 1. **Mandatory design skills on frontend design tasks** — `novahiz-humanizer`, `ui-slop-remover` and `ui-craft-rules` are required only on frontend design work (design-ui prompts and style files). Load them with `skill({name})` before any design edit. Outside design, they are not required by the gate. Browser tasks (navigation, search, extraction) proceed as direct actions without a roadmap.
-2. **Supabase** — On any Supabase task (database, auth, RLS, Edge Functions, migrations, Storage, Realtime, CLI/MCP), load the `novahiz-supabase` and `novahiz-postgres` skills before acting.
+2. **Impeccable after UI work** — `impeccable` is installed and required on the same design selectors (gate rule R14). Whenever a page, component, section, or screen design is created or substantially changed, run its critique systematically afterwards, an audit when the change warrants it (a11y, performance, responsive), and a polish pass before shipping. The design-ui roadmap carries optional `impeccable-critique`, `impeccable-audit`, and `impeccable-polish` steps for exactly this.
+3. **Supabase** — On any Supabase task (database, auth, RLS, Edge Functions, migrations, Storage, Realtime, CLI/MCP), load the `novahiz-supabase` and `novahiz-postgres` skills before acting.
 5. **Honesty and critical thinking** — Always be honest. Avoid false good ideas. Maintain critical thinking. **Zero simulation objective:** never claim to have executed, tested, or verified what was not. Explicitly report uncertainties and assumptions.
 6. **Propose next steps** — After completing a task, always honestly propose the relevant next step. Do not invent unnecessary work or mask failures.
 7. **Challenge the request** — Take the initiative to question the user's request when it is inconsistent, ambiguous, risky, or suboptimal. Explain why and propose an alternative.