quiver-cli 0.1.0

package/template/.agents/skills/design/impeccable/scripts/context-signals.mjs

@@ -0,0 +1,225 @@
+#!/usr/bin/env node
+/**
+ * Context-signals gatherer for the bare `{{command_prefix}}impeccable`
+ * (no-argument) path. Collects cheap, deterministic signals about the current
+ * project and emits them as JSON.
+ *
+ * It does NOT score or rank. The agent reasons over the raw signals using its
+ * knowledge of the command catalog (see SKILL.md routing rule 1). Deliberately
+ * light: no LLM calls, no detector run (`npx impeccable detect` is heavier and
+ * opt-in), no file writes. Every probe is best-effort and never throws; the
+ * output is always valid JSON.
+ *
+ * Signals:
+ *   - setup:     PRODUCT.md / DESIGN.md presence, register, whether code exists
+ *   - critique:  the latest cached critique score (.impeccable/critique)
+ *   - git:       branch + files changed vs the default branch (a scope hint)
+ *   - devServer: whether a local dev server answers on a common port (gates live)
+ */
+import fs from 'node:fs';
+import net from 'node:net';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { execFileSync } from 'node:child_process';
+import { loadContext, extractRegister } from './context.mjs';
+import { getCritiqueDir } from './impeccable-paths.mjs';
+
+/** Is there code here at all, or just context files / an empty repo? */
+function hasCode(cwd) {
+  if (fs.existsSync(path.join(cwd, 'package.json'))) return true;
+  for (const d of ['src', 'app', 'pages', 'site', 'public', 'components', 'lib']) {
+    if (fs.existsSync(path.join(cwd, d))) return true;
+  }
+  return false;
+}
+
+/**
+ * The most recent critique snapshot across all targets. Filenames are
+ * timestamp-prefixed (`<iso>__<slug>.md`), so a lexical sort is chronological.
+ * Parses the small frontmatter for score + P0/P1 counts.
+ */
+function latestCritique(cwd) {
+  try {
+    const dir = getCritiqueDir(cwd);
+    if (!fs.existsSync(dir)) return null;
+    const files = fs.readdirSync(dir).filter((f) => f.endsWith('.md')).sort();
+    if (!files.length) return null;
+    const newest = files[files.length - 1];
+    const text = fs.readFileSync(path.join(dir, newest), 'utf-8');
+    const front = text.split('---')[1] || '';
+    const get = (k) => {
+      const m = front.match(new RegExp(`^${k}:\\s*(.+)$`, 'm'));
+      return m ? m[1].trim() : null;
+    };
+    const num = (v) => {
+      const n = Number(v);
+      return Number.isFinite(n) ? n : null;
+    };
+    return {
+      slug: get('slug'),
+      score: num(get('score')),
+      p0: num(get('p0')),
+      p1: num(get('p1')),
+      timestamp: get('timestamp'),
+      file: path.relative(cwd, path.join(dir, newest)),
+    };
+  } catch {
+    return null;
+  }
+}
+
+/** Branch + a scope hint: files changed vs the default branch, else working tree. */
+function gitSignals(cwd) {
+  const run = (args, { trim = true } = {}) => {
+    try {
+      const out = execFileSync('git', args, {
+        cwd,
+        encoding: 'utf-8',
+        stdio: ['ignore', 'pipe', 'ignore'],
+      });
+      return trim ? out.trim() : out;
+    } catch {
+      return null;
+    }
+  };
+  if (run(['rev-parse', '--is-inside-work-tree']) !== 'true') {
+    return { isRepo: false, branch: null, base: null, changedFiles: [], changedCount: 0 };
+  }
+  const branch = run(['rev-parse', '--abbrev-ref', 'HEAD']);
+  let base = null;
+  for (const b of ['main', 'master']) {
+    if (run(['rev-parse', '--verify', '--quiet', b]) !== null) {
+      base = b;
+      break;
+    }
+  }
+  const diffBase = base && branch && branch !== base ? base : null;
+  const fromDiff = diffBase ? run(['diff', '--name-only', `${diffBase}...HEAD`]) : null;
+  // porcelain lines are `XY PATH`: a 2-char status + a space, then the path.
+  // Don't trim the combined output — an unstaged-modified line starts with a
+  // leading space (` M path`), and a global trim would eat the first line's
+  // status column and shift the slice. Renames render as `old -> new`.
+  const fromStatus = run(['-c', 'core.quotepath=false', 'status', '--porcelain'], { trim: false });
+  let changed = [];
+  if (fromDiff) {
+    changed = fromDiff.split('\n').filter(Boolean);
+  } else if (fromStatus) {
+    changed = fromStatus.split(/\r?\n/).filter(Boolean).map((l) => {
+      const p = l.slice(3);
+      const arrow = p.indexOf(' -> ');
+      return arrow === -1 ? p : p.slice(arrow + 4);
+    });
+  }
+  return {
+    isRepo: true,
+    branch,
+    base: diffBase,
+    changedFiles: changed.slice(0, 50),
+    changedCount: changed.length,
+  };
+}
+
+const COMMON_DEV_PORTS = [4321, 3000, 5173, 5174, 8080, 8000, 4200];
+
+function probePort(port, timeout = 250) {
+  return new Promise((resolve) => {
+    const sock = new net.Socket();
+    let settled = false;
+    const finish = (ok) => {
+      if (settled) return;
+      settled = true;
+      try { sock.destroy(); } catch { /* ignore */ }
+      resolve(ok);
+    };
+    sock.setTimeout(timeout);
+    sock.once('connect', () => finish(true));
+    sock.once('timeout', () => finish(false));
+    sock.once('error', () => finish(false));
+    sock.connect(port, '127.0.0.1');
+  });
+}
+
+async function devServerSignals() {
+  const open = [];
+  await Promise.all(
+    COMMON_DEV_PORTS.map(async (p) => {
+      if (await probePort(p)) open.push(p);
+    }),
+  );
+  open.sort((a, b) => a - b);
+  return { running: open.length > 0, ports: open };
+}
+
+// Extensions the detector scans (mirrors the engine's walkDir set + HTML).
+const SCANNABLE_EXT = new Set([
+  '.html', '.htm', '.css', '.scss',
+  '.jsx', '.tsx', '.js', '.ts', '.vue', '.svelte', '.astro',
+]);
+// Where UI source typically lives. The detector walks these and skips
+// node_modules / dist / build / .next / .nuxt automatically.
+const SOURCE_DIRS = ['src', 'app', 'components', 'pages', 'public'];
+
+/**
+ * Local paths the agent should point the bundled detector at — never a URL.
+ * A URL means a costly Puppeteer browser render, and a probed dev-server port
+ * may not even belong to this project. An HTML *file* or a source tree is
+ * scanned by the cheap, jsdom-free static engine. This script does NOT run the
+ * detector; it just surfaces the target(s) so the agent can run
+ * `node <scripts>/detect.mjs --json <targets>` and fold the hits in.
+ */
+function scanTargets(cwd, git) {
+  // 1. Dirty tree wins: scan exactly the markup/style files in flight. It's
+  //    what the user is working on, it's a small set, and it's local.
+  if (git.isRepo && git.changedFiles.length) {
+    const changed = git.changedFiles
+      .filter((f) => SCANNABLE_EXT.has(path.extname(f).toLowerCase()))
+      .filter((f) => fs.existsSync(path.join(cwd, f)));
+    if (changed.length) return { targets: changed.slice(0, 50), via: 'git-changes' };
+  }
+  // 2. Otherwise scan the local source dirs that exist.
+  const dirs = SOURCE_DIRS.filter((d) => fs.existsSync(path.join(cwd, d)));
+  if (dirs.length) return { targets: dirs, via: 'source-dir' };
+  // 3. A root HTML entry, or the project root as a last resort when there's
+  //    code but no conventional source dir (walkDir still skips heavy dirs).
+  if (fs.existsSync(path.join(cwd, 'index.html'))) return { targets: ['index.html'], via: 'html' };
+  if (hasCode(cwd)) return { targets: ['.'], via: 'root' };
+  return { targets: [], via: null };
+}
+
+export async function gatherSignals(cwd = process.cwd()) {
+  const ctx = loadContext(cwd);
+  const git = gitSignals(cwd);
+  return {
+    setup: {
+      hasProduct: ctx.hasProduct,
+      productPath: ctx.productPath,
+      hasDesign: ctx.hasDesign,
+      designPath: ctx.designPath,
+      hasCode: hasCode(cwd),
+      register: extractRegister(ctx.product),
+    },
+    critique: { latest: latestCritique(cwd) },
+    git,
+    devServer: await devServerSignals(),
+    scan: scanTargets(cwd, git),
+  };
+}
+
+async function cli() {
+  const signals = await gatherSignals(process.cwd());
+  process.stdout.write(`${JSON.stringify(signals, null, 2)}\n`);
+}
+
+function invokedAsScript() {
+  const arg = process.argv[1];
+  if (!arg) return false;
+  try {
+    return fs.realpathSync(arg) === fs.realpathSync(fileURLToPath(import.meta.url));
+  } catch {
+    return false;
+  }
+}
+
+if (invokedAsScript()) {
+  cli();
+}

package/template/.agents/skills/design/impeccable/scripts/context.mjs

@@ -0,0 +1,270 @@
+/**
+ * Context loader: prints PRODUCT.md (and DESIGN.md if present) as one
+ * markdown block on stdout, or exits with empty stdout when no PRODUCT.md
+ * is found anywhere. The skill keys off "empty stdout" to branch into the
+ * init flow.
+ *
+ * Path resolution (first match wins):
+ *   1. cwd, if PRODUCT.md or DESIGN.md is there
+ *   2. .agents/context/ then docs/
+ *   3. $IMPECCABLE_CONTEXT_DIR (absolute or cwd-relative) — power-user
+ *      escape hatch, only consulted when defaults are empty
+ *   4. cwd as a "nothing found" default
+ *
+ * `resolveContextDir()` and `loadContext()` are also exported for the
+ * server-side scripts (live.mjs, live-server.mjs) that need the structured
+ * shape rather than the markdown block.
+ */
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const PRODUCT_NAMES = ['PRODUCT.md', 'Product.md', 'product.md'];
+const DESIGN_NAMES = ['DESIGN.md', 'Design.md', 'design.md'];
+const FALLBACK_DIRS = ['.agents/context', 'docs'];
+
+// ─── Update check ──────────────────────────────────────────────────────────
+// Piggyback a lightweight skill-version check on the once-per-session boot.
+// When a newer skill ships, append an UPDATE_AVAILABLE directive so the agent
+// can offer `npx impeccable skills update`. Everything here is best-effort and
+// silent on failure: a network problem, sandbox, or missing cache must never
+// block context output or print an error.
+
+const UPDATE_HOST = (process.env.IMPECCABLE_UPDATE_HOST || 'https://impeccable.style').replace(/\/$/, '');
+const UPDATE_CACHE_PATH =
+  process.env.IMPECCABLE_UPDATE_CACHE || path.join(os.homedir(), '.impeccable', 'update-check.json');
+const CHECK_INTERVAL_MS = 24 * 60 * 60 * 1000; // throttle the network poll to once a day
+const RENOTIFY_INTERVAL_MS = 7 * 24 * 60 * 60 * 1000; // don't re-surface the same version for a week
+const FETCH_TIMEOUT_MS = 1200;
+
+export function resolveContextDir(cwd = process.cwd()) {
+  if (firstExisting(cwd, [...PRODUCT_NAMES, ...DESIGN_NAMES])) {
+    return cwd;
+  }
+  for (const rel of FALLBACK_DIRS) {
+    const candidate = path.resolve(cwd, rel);
+    if (firstExisting(candidate, [...PRODUCT_NAMES, ...DESIGN_NAMES])) {
+      return candidate;
+    }
+  }
+  const envDir = process.env.IMPECCABLE_CONTEXT_DIR;
+  if (envDir && envDir.trim()) {
+    const trimmed = envDir.trim();
+    return path.isAbsolute(trimmed) ? trimmed : path.resolve(cwd, trimmed);
+  }
+  return cwd;
+}
+
+export function loadContext(cwd = process.cwd()) {
+  const contextDir = resolveContextDir(cwd);
+  const productPath = firstExisting(contextDir, PRODUCT_NAMES);
+  const designPath = firstExisting(contextDir, DESIGN_NAMES);
+  const product = productPath ? safeRead(productPath) : null;
+  const design = designPath ? safeRead(designPath) : null;
+  return {
+    hasProduct: !!product,
+    product,
+    productPath: productPath ? path.relative(cwd, productPath) : null,
+    hasDesign: !!design,
+    design,
+    designPath: designPath ? path.relative(cwd, designPath) : null,
+    contextDir,
+  };
+}
+
+function firstExisting(dir, names) {
+  for (const name of names) {
+    const abs = path.join(dir, name);
+    if (fs.existsSync(abs)) return abs;
+  }
+  return null;
+}
+
+function safeRead(p) {
+  try {
+    return fs.readFileSync(p, 'utf-8');
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * Pull the register (`brand` or `product`) out of PRODUCT.md by looking
+ * for a `## Register` section and reading the first non-empty line that
+ * follows it. Returns null when the file is legacy / register-less.
+ */
+export function extractRegister(product) {
+  if (!product) return null;
+  const lines = product.split('\n');
+  for (let i = 0; i < lines.length; i++) {
+    if (/^##\s+Register\b/i.test(lines[i].trim())) {
+      for (let j = i + 1; j < lines.length; j++) {
+        const next = lines[j].trim();
+        if (!next) continue;
+        const word = next.toLowerCase();
+        if (word === 'brand' || word === 'product') return word;
+        return null;
+      }
+    }
+  }
+  return null;
+}
+
+/**
+ * Read the installed skill's own version from the sibling SKILL.md frontmatter
+ * (this file lives at `<skill>/scripts/context.mjs`). Returns null when the
+ * frontmatter is missing or unreadable.
+ */
+function readLocalSkillVersion() {
+  try {
+    const here = path.dirname(fileURLToPath(import.meta.url));
+    const skillMd = path.join(here, '..', 'SKILL.md');
+    const content = fs.readFileSync(skillMd, 'utf-8');
+    const match = content.match(/^version:\s*(.+)$/m);
+    return match ? match[1].trim().replace(/^["']|["']$/g, '') : null;
+  } catch {
+    return null;
+  }
+}
+
+function readUpdateCache() {
+  try {
+    return JSON.parse(fs.readFileSync(UPDATE_CACHE_PATH, 'utf-8'));
+  } catch {
+    return {};
+  }
+}
+
+function writeUpdateCache(cache) {
+  try {
+    fs.mkdirSync(path.dirname(UPDATE_CACHE_PATH), { recursive: true });
+    fs.writeFileSync(UPDATE_CACHE_PATH, JSON.stringify(cache));
+  } catch {
+    // Best-effort: a read-only home dir just means we re-poll next session.
+  }
+}
+
+/** Compare dotted numeric versions. Returns >0 when a is newer than b. */
+function compareSemver(a, b) {
+  const pa = String(a).split('.').map(n => parseInt(n, 10) || 0);
+  const pb = String(b).split('.').map(n => parseInt(n, 10) || 0);
+  for (let i = 0; i < Math.max(pa.length, pb.length); i++) {
+    const diff = (pa[i] || 0) - (pb[i] || 0);
+    if (diff !== 0) return diff;
+  }
+  return 0;
+}
+
+async function fetchLatestSkillVersion() {
+  try {
+    const res = await fetch(`${UPDATE_HOST}/api/version`, { signal: AbortSignal.timeout(FETCH_TIMEOUT_MS) });
+    if (!res.ok) return null;
+    const data = await res.json();
+    return typeof data?.skills === 'string' ? data.skills : null;
+  } catch {
+    return null; // offline, sandboxed, timed out, or bad JSON: all non-fatal
+  }
+}
+
+function buildUpdateDirective(localVersion, latestVersion) {
+  return (
+    `UPDATE_AVAILABLE: A newer Impeccable skill is available ` +
+    `(installed v${localVersion}, latest v${latestVersion}). ` +
+    `Before continuing, ask the user once: "A newer Impeccable (v${latestVersion}) is available. ` +
+    `Update now? It runs \`npx impeccable skills update\`." ` +
+    `If they agree, run \`npx impeccable skills update\` (the update applies to the next session, not this one). ` +
+    `Either way, continue the current task without waiting, and do not raise this again.`
+  );
+}
+
+/**
+ * Best-effort update directive for the boot output. Returns a string to append
+ * or null. Polls the version endpoint at most once per day (cached globally in
+ * the user's home dir) and re-surfaces a given version at most once per week so
+ * the agent never nags. Opt out entirely with IMPECCABLE_NO_UPDATE_CHECK=1.
+ */
+async function computeUpdateDirective(now = Date.now()) {
+  try {
+    // Distributed via nb-agents: updates flow through `npx nb-agents update`,
+    // not `npx impeccable skills update`. Suppress the official update check so
+    // the two delivery mechanisms don't fight over the same skill directory.
+    return null;
+    if (process.env.IMPECCABLE_NO_UPDATE_CHECK) return null;
+    const localVersion = readLocalSkillVersion();
+    if (!localVersion) return null;
+
+    const cache = readUpdateCache();
+
+    // Poll the network only when the throttle window has elapsed. Stamp
+    // lastCheck even on failure so an offline machine doesn't poll every boot.
+    if (!cache.lastCheck || now - cache.lastCheck > CHECK_INTERVAL_MS) {
+      const latest = await fetchLatestSkillVersion();
+      cache.lastCheck = now;
+      if (latest) cache.latestVersion = latest;
+      writeUpdateCache(cache);
+    }
+
+    const latest = cache.latestVersion;
+    if (!latest || compareSemver(latest, localVersion) <= 0) return null;
+
+    // Anti-nag: surface a given version at most once per RENOTIFY window.
+    if (cache.notifiedVersion === latest && cache.notifiedAt && now - cache.notifiedAt < RENOTIFY_INTERVAL_MS) {
+      return null;
+    }
+    cache.notifiedVersion = latest;
+    cache.notifiedAt = now;
+    writeUpdateCache(cache);
+
+    return buildUpdateDirective(localVersion, latest);
+  } catch {
+    return null;
+  }
+}
+
+async function cli() {
+  const ctx = loadContext(process.cwd());
+  const updateDirective = await computeUpdateDirective();
+
+  if (!ctx.hasProduct) {
+    // Direct stdout message instead of relying on empty output as a signal
+    // — cheap models miss the empty case more often than the explicit one.
+    const parts = [
+      'NO_PRODUCT_MD: This project has no PRODUCT.md yet. ' +
+      'Stop the current task, load reference/init.md, and follow its ' +
+      'instructions to write PRODUCT.md before resuming.',
+    ];
+    if (updateDirective) parts.push(updateDirective);
+    process.stdout.write(parts.join('\n\n---\n\n') + '\n');
+    process.exit(0);
+  }
+  const parts = [`# PRODUCT.md\n\n${ctx.product.trim()}`];
+  if (ctx.hasDesign) {
+    parts.push(`# DESIGN.md\n\n${ctx.design.trim()}`);
+  }
+  const register = extractRegister(ctx.product);
+  const next = register
+    ? `NEXT STEP: This project's register is \`${register}\`. You MUST now read \`reference/${register}.md\` before producing any design output.`
+    : `NEXT STEP: You MUST now read the matching register reference (\`reference/brand.md\` or \`reference/product.md\`) before producing any design output. Pick based on PRODUCT.md above.`;
+  parts.push(next);
+  if (updateDirective) parts.push(updateDirective);
+  process.stdout.write(parts.join('\n\n---\n\n') + '\n');
+}
+
+// Run cli() only when this module is the entry point. Compare realpaths
+// rather than endsWith(): a loose suffix match also fires for unrelated
+// scripts like `load-context.mjs`, and realpath tolerates symlinked
+// invocation (the test harness symlinks the skill dir).
+function invokedAsScript() {
+  const arg = process.argv[1];
+  if (!arg) return false;
+  try {
+    return fs.realpathSync(arg) === fs.realpathSync(fileURLToPath(import.meta.url));
+  } catch {
+    return false;
+  }
+}
+
+if (invokedAsScript()) {
+  cli();
+}