shimwrappercheck 0.2.0

package/AGENTS.md

@@ -0,0 +1,21 @@
+# Agent instructions (shimwrappercheck)
+
+This file is used by AI agents (Cursor, Codex, etc.) when working with this repo.
+It can be edited via the dashboard (Config → AGENTS.md) so agents and humans share one source of truth.
+
+## Shim usage
+
+- Use `npx supabase ...` or `npm run supabase:checked -- ...` so checks run before deploy.
+- Use `npx git push` or `npm run git:checked -- push` so checks run before push.
+- Run `npx shimwrappercheck init` for setup; `npx shimwrappercheck install` for PATH shims.
+
+## Dashboard
+
+- The project includes a **dashboard** (Next.js app in `dashboard/`). Start with `cd dashboard && npm install && npm run dev`.
+- In the dashboard you can: view status, run checks, edit `.shimwrappercheckrc`, and **edit this AGENTS.md**.
+- Agents should respect AGENTS.md; editing it via the dashboard keeps agent instructions in sync.
+
+## Project rules
+
+- Keep checks fast; run lint/type/build in `scripts/run-checks.sh`.
+- When changing shim behavior, update README and docs/SHIM_WRAPPER_CONCEPT.md if needed.

package/README.md

@@ -0,0 +1,286 @@
+# shimwrappercheck
+
+CLI shim wrapper that enforces project checks before running a real CLI command.
+
+Out of the box, this package ships **Supabase**, **Git**, and a **generic shim** (`supabase`, `git`, `shim` bins), but the pattern is generic:
+you can reuse the scripts for other CLIs by copying/adapting them in your repo.
+
+This package provides a `supabase` bin that you can use via `npx supabase ...` or `npm run supabase:checked -- ...`.
+It is repo-agnostic: you plug in your own `scripts/run-checks.sh` and optional hooks.
+
+## Features
+
+- Wraps a CLI command and enforces checks before deploy/push (Supabase + Git wrappers included, generic shim for anything else)
+- Diff-aware checks (frontend/backend) based on staged/unstaged changes
+- Command filtering (only run checks/hooks for specific Supabase commands)
+- Network retry for flaky Supabase CLI calls
+- Post-deploy hooks: health ping + logs
+- Auto git push when ahead of upstream (optional)
+- AI review integration (Codex default, Cursor fallback)
+- Interactive setup wizard that scans your repo and configures everything
+- Global installer that drops PATH shims (`supabase`, `git`, `shim`)
+- Generic shim supports pre/post hooks
+- **Dashboard**: Web UI to view status, run checks, **Presets & check toggles** (Einstellungen), edit `.shimwrappercheckrc`, and **edit AGENTS.md**
+- **Presets**: default "Vibe Code" (GitHub + Supabase, all commands); custom presets with provider toggles; check toggles (frontend, backend, AI review)
+
+## Setup (one command)
+
+Run the full setup in one go (installs package if needed, then runs the wizard):
+
+```bash
+npx shimwrappercheck setup
+```
+
+This installs `shimwrappercheck` as a devDependency if missing, then runs the init wizard (Supabase/Git shims, which commands, AI review, hooks, run-checks.sh, etc.). At the end you get a link to start the dashboard to change settings later.
+
+## Dashboard (Web UI)
+
+A Next.js dashboard lets you manage presets, checks, config, and AGENTS.md:
+
+```bash
+cd node_modules/shimwrappercheck/dashboard && npm install && npm run dev
+```
+
+Then open http://localhost:3000. You can:
+
+- **Einstellungen**: Presets (Vibe Code default, custom presets), Supabase/Git command toggles (which commands run checks/hooks), check toggles (frontend, backend, AI review)
+- View status (config, presets file, AGENTS.md, run-checks script, hooks)
+- Run checks only (button)
+- Edit `.shimwrappercheckrc` (Config, raw)
+- Edit **AGENTS.md** (agent instructions for Cursor/Codex; changes apply immediately)
+
+**AGENTS.md** is used by AI agents; editing it in the dashboard keeps agent instructions in sync. Set `SHIM_PROJECT_ROOT` when deploying the dashboard (e.g. on Vercel) to the repo root path where `.shimwrappercheckrc` and `AGENTS.md` live.
+
+## Install
+
+```bash
+npm i -D shimwrappercheck
+```
+
+## Global install (PATH shims)
+
+This installs small shims into a bin directory (default: `~/.local/bin`) so you can run
+`supabase`, `git`, or `shim` directly without `npx`.
+
+```bash
+npx shimwrappercheck install
+# options
+# --bin-dir <path>   (default: ~/.local/bin)
+# --interactive      (default when no flags)
+# --no-interactive
+# --add-path         (auto-append PATH in shell config)
+# --overwrite
+# --dry-run
+# --no-supabase | --no-git | --no-shim
+# --only supabase,git,shim
+```
+
+If the bin dir is not in PATH, add (or use `--add-path` to append automatically):
+
+```bash
+export PATH="$HOME/.local/bin:$PATH"
+```
+
+When multiple shell configs exist (e.g. `.zshrc` + `.zprofile`), the installer asks which file to update.
+
+## Quick start
+
+1) Add a checks script in your repo (example template below).
+2) Use the shim instead of the raw CLI.
+
+```bash
+# Copy templates (customize to your repo)
+cp node_modules/shimwrappercheck/templates/run-checks.sh scripts/run-checks.sh
+cp node_modules/shimwrappercheck/templates/ai-code-review.sh scripts/ai-code-review.sh
+cp node_modules/shimwrappercheck/templates/husky-pre-push .husky/pre-push
+
+# Make scripts executable
+chmod +x scripts/run-checks.sh scripts/ai-code-review.sh .husky/pre-push
+```
+
+Add a package.json script (optional):
+
+```json
+{
+  "scripts": {
+    "supabase:checked": "supabase"
+  }
+}
+```
+
+Then run:
+
+```bash
+npm run supabase:checked -- functions deploy <function-name>
+# or
+npx supabase functions deploy <function-name>
+```
+
+## Setup wizard (init)
+
+Run the interactive init to scan your codebase and configure the shim (or use `npx shimwrappercheck setup` to install + init in one step):
+
+```bash
+npx shimwrappercheck init
+# or
+npm exec shimwrappercheck init
+```
+
+The wizard can (defaults are tuned based on repo type):
+
+- detect Supabase and Git usage
+- ask which commands should trigger checks/hooks
+- install pre-push hooks
+- enable AI review and guide you through login
+- create a `.shimwrappercheckrc` config
+
+## How it works
+
+- The shim determines which checks to run based on git changes (e.g. `src/` vs `supabase/functions/`).
+- The shim runs your checks script first (default: `scripts/run-checks.sh`).
+- If checks pass, it calls the real Supabase CLI.
+- Optional hooks run after deploy to ping health and fetch logs.
+- Optional git auto-push can be enabled (this is **not** a git wrapper; it runs after the CLI succeeds).
+- Git push checks are enforced via pre-push hooks (template provided).
+
+## Usage
+
+```bash
+npx supabase functions deploy <function-name>
+npm run supabase:checked -- db push
+
+# git wrapper
+npx git push
+npm run git:checked -- push
+
+# generic shim (any CLI)
+npm exec --package shimwrappercheck -- shim docker build .
+npm exec --package shimwrappercheck -- shim --cli terraform -- plan
+```
+
+Generic shim hooks:
+
+```bash
+export SHIM_CLI_PRE_HOOKS="scripts/cli-pre-hook.sh"
+export SHIM_CLI_POST_HOOKS="scripts/cli-post-hook.sh"
+shim docker build .
+```
+
+Tip: Use `--` to separate shim flags from CLI args when needed:
+
+```bash
+npm exec --package shimwrappercheck -- shim --cli docker -- build .
+```
+
+You can also run only checks:
+
+```bash
+npx supabase --checks-only functions deploy server
+```
+
+## Wrapper-only flags
+
+These flags are consumed by the shim and are not passed to the wrapped CLI:
+
+- `--no-checks`    Skip checks for this invocation.
+- `--checks-only`  Run checks and exit without running Supabase.
+- `--no-hooks`     Skip post-deploy hooks (health/logs).
+- `--no-push`      Skip auto git push.
+- `--no-ai-review` Passed through to the checks script (template supports it).
+- `--with-frontend` Force frontend checks even if no `src/` changes are detected.
+- `--ai-review`    Passed through to the checks script (template supports it).
+- `--auto-push`    Generic shim: enable git auto-push after command.
+
+## Command filtering
+
+You can control for which Supabase commands checks and hooks should run:
+
+- `SHIM_ENFORCE_COMMANDS="functions,db,migration"` to run checks only for those commands
+- `SHIM_HOOK_COMMANDS="functions,db,migration"` to run hooks only for those commands
+- Use `all` or `none` to enable/disable completely
+
+Commands are matched by token (e.g. `functions`, `db`, `migration`).
+
+Note: If you want checks for `supabase push`, add `push` to `SHIM_ENFORCE_COMMANDS`.
+
+For Git, use `SHIM_GIT_ENFORCE_COMMANDS` (default: `push`). You can include `commit,merge,rebase` etc.
+
+## Environment variables
+
+- `SHIM_PROJECT_ROOT`           Override project root detection.
+- `SHIM_CHECKS_SCRIPT`          Path to your checks script (relative to project root or absolute).
+- `SHIM_CHECKS_ARGS`            Extra args passed to checks script.
+- `SHIM_CONFIG_FILE`            Custom path to config file (default: `.shimwrappercheckrc`).
+- `SHIM_DISABLE_CHECKS=1`       Disable checks (same as `--no-checks`).
+- `SHIM_DISABLE_HOOKS=1`        Disable hooks (same as `--no-hooks`).
+- `SHIM_AUTO_PUSH=1|0`          Enable/disable auto git push after success (default: on).
+- `SHIM_DEFAULT_FUNCTION`       Default function name for health/log hooks (default: `server`).
+- `SHIM_ENFORCE_COMMANDS`       Comma list for which CLI commands checks should run (`all`, `none`, or e.g. `functions,db,migration`).
+- `SHIM_HOOK_COMMANDS`          Comma list for which CLI commands hooks should run (same format).
+- `SHIM_PING_SCRIPT`            Override path to health ping script.
+- `SHIM_LOG_SCRIPT`             Override path to logs script.
+- `SHIM_GIT_ENFORCE_COMMANDS`   Comma list for which git commands checks should run (`push`, `all`, `none`).
+- `SHIM_GIT_CHECKS_SCRIPT`      Override checks script for git wrapper.
+- `SHIM_GIT_CHECKS_ARGS`        Extra args passed to checks script (git wrapper only).
+- `SHIM_GIT_REAL_BIN`           Absolute path to the real git binary (avoids recursion).
+- `SHIM_CLI_ENFORCE_COMMANDS`   Generic shim: comma list for which subcommands checks should run.
+- `SHIM_CLI_CHECKS_SCRIPT`      Generic shim: override checks script.
+- `SHIM_CLI_CHECKS_ARGS`        Generic shim: extra args passed to checks script.
+- `SHIM_CLI_REAL_BIN`           Generic shim: absolute path to real CLI binary (avoids recursion).
+- `SHIM_CLI_AUTO_PUSH`          Generic shim: enable git auto-push after command (0/1).
+- `SHIM_CLI_PRE_HOOKS`          Generic shim: comma list of pre-hook scripts to run.
+- `SHIM_CLI_POST_HOOKS`         Generic shim: comma list of post-hook scripts to run.
+- `SHIM_CLI_HOOK_COMMANDS`      Generic shim: comma list for which subcommands hooks should run.
+
+Network retry (Supabase CLI):
+
+- `SUPABASE_RETRY_MAX`                 Number of retries on network errors (default: 1).
+- `SUPABASE_RETRY_BACKOFF_SECONDS`     Comma-separated backoff seconds (default: `5,15`).
+- `SUPABASE_RETRY_EXTRA_ARGS`          Extra args added only on retry attempts.
+
+Supabase CLI resolution:
+
+- `SUPABASE_REAL_BIN`           Absolute path to the real Supabase CLI.
+- `SHIM_SUPABASE_BIN`           Same as above (alias).
+- `~/.supabase-real-bin`        If present, read as real CLI path.
+
+Post-deploy hooks:
+
+- `SHIM_HEALTH_FUNCTIONS`       Comma-separated function names to ping (fallback if not detected).
+- `SHIM_LOG_FUNCTIONS`          Comma-separated function names to fetch logs for.
+- `SHIM_LOG_LIMIT`              Log lines to fetch (default: 30).
+- `SUPABASE_PROJECT_REF`        Project ref for health ping (or `supabase/project-ref`).
+- `SHIM_HEALTH_PATHS`           Comma-separated URL paths with `{fn}` placeholder.
+
+## Config file (optional)
+
+Create `.shimwrappercheckrc` in your project root to persist settings:
+
+```bash
+SHIM_ENFORCE_COMMANDS="functions,db,migration"
+SHIM_HOOK_COMMANDS="functions,db,migration"
+SHIM_DEFAULT_FUNCTION="server"
+SHIM_AUTO_PUSH=1
+SHIM_CHECKS_ARGS="--no-ai-review"
+```
+
+Note: `.shimwrappercheckrc` is sourced as a shell file.
+
+## Templates
+
+- `templates/run-checks.sh`     Minimal checks runner; customize for your repo.
+- `templates/ai-code-review.sh` Optional AI review step (Codex default, Cursor fallback).
+- `templates/husky-pre-push`    Husky pre-push hook that runs checks.
+- `templates/git-pre-push`      Plain git hook version of the same.
+
+## Notes
+
+- If the shim is installed locally, it avoids recursion by resolving the real Supabase CLI.
+- If no real CLI is found, it runs `npx --package supabase supabase ...`.
+- The git wrapper should be invoked via `npx git` or `npm run git:checked` to avoid shadowing your system git.
+- Hooks are resolved from your repo first (`scripts/ping-edge-health.sh`, `scripts/fetch-edge-logs.sh`) and fall back to the package scripts.
+- Generic shim hooks default to `scripts/cli-pre-hook.sh` and `scripts/cli-post-hook.sh` if present.
+
+## License
+
+UNLICENSED (update if you want a public license).

package/bin/git

@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+WRAPPER_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+exec "$WRAPPER_DIR/scripts/git-checked.sh" "$@"

package/bin/shim

@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+WRAPPER_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+exec "$WRAPPER_DIR/scripts/cli-checked.sh" "$@"

package/bin/shimwrappercheck

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+require('../scripts/cli');

package/bin/supabase

@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+WRAPPER_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+exec "$WRAPPER_DIR/scripts/supabase-checked.sh" "$@"

package/dashboard/.next/cache/config.json

@@ -0,0 +1,7 @@
+{
+	"telemetry": {
+		"notifiedAt": "1770383569823",
+		"anonymousId": "f4adabf96f5c7be2b364a46775c9ffb823e744d1934577fc662aaec287f9cf02",
+		"salt": "b9594162f5f71142c4e2987dcd739a3a"
+	}
+}

package/dashboard/.next/package.json

@@ -0,0 +1 @@
+{"type": "commonjs"}

package/dashboard/.next/routes-manifest.json

@@ -0,0 +1 @@
+{"version":3,"pages404":true,"caseSensitive":false,"basePath":"","redirects":[{"source":"/:path+/","destination":"/:path+","internal":true,"statusCode":308,"regex":"^(?:/((?:[^/]+?)(?:/(?:[^/]+?))*))/$"}],"headers":[],"dynamicRoutes":[],"staticRoutes":[{"page":"/","regex":"^/(?:/)?$","routeKeys":{},"namedRegex":"^/(?:/)?$"},{"page":"/_not-found","regex":"^/_not\\-found(?:/)?$","routeKeys":{},"namedRegex":"^/_not\\-found(?:/)?$"},{"page":"/agents","regex":"^/agents(?:/)?$","routeKeys":{},"namedRegex":"^/agents(?:/)?$"},{"page":"/config","regex":"^/config(?:/)?$","routeKeys":{},"namedRegex":"^/config(?:/)?$"}],"dataRoutes":[],"rsc":{"header":"RSC","varyHeader":"RSC, Next-Router-State-Tree, Next-Router-Prefetch","prefetchHeader":"Next-Router-Prefetch","didPostponeHeader":"x-nextjs-postponed","contentTypeHeader":"text/x-component","suffix":".rsc","prefetchSuffix":".prefetch.rsc"},"rewrites":[]}

package/dashboard/.next/trace

@@ -0,0 +1 @@
+[{"name":"generate-buildid","duration":121,"timestamp":6948914020,"id":4,"parentId":1,"tags":{},"startTime":1770383569821,"traceId":"eb1231321911f71f"},{"name":"load-custom-routes","duration":109,"timestamp":6948914218,"id":5,"parentId":1,"tags":{},"startTime":1770383569821,"traceId":"eb1231321911f71f"},{"name":"create-pages-mapping","duration":77,"timestamp":6948958791,"id":6,"parentId":1,"tags":{},"startTime":1770383569866,"traceId":"eb1231321911f71f"},{"name":"collect-app-paths","duration":1657,"timestamp":6948958882,"id":7,"parentId":1,"tags":{},"startTime":1770383569866,"traceId":"eb1231321911f71f"},{"name":"create-app-mapping","duration":349,"timestamp":6948960570,"id":8,"parentId":1,"tags":{},"startTime":1770383569868,"traceId":"eb1231321911f71f"},{"name":"public-dir-conflict-check","duration":288,"timestamp":6948961063,"id":9,"parentId":1,"tags":{},"startTime":1770383569868,"traceId":"eb1231321911f71f"},{"name":"generate-routes-manifest","duration":879,"timestamp":6948961425,"id":10,"parentId":1,"tags":{},"startTime":1770383569869,"traceId":"eb1231321911f71f"},{"name":"create-dist-dir","duration":77,"timestamp":6948962563,"id":11,"parentId":1,"tags":{},"startTime":1770383569870,"traceId":"eb1231321911f71f"},{"name":"write-routes-manifest","duration":234,"timestamp":6948963636,"id":12,"parentId":1,"tags":{},"startTime":1770383569871,"traceId":"eb1231321911f71f"},{"name":"generate-required-server-files","duration":223,"timestamp":6948963900,"id":13,"parentId":1,"tags":{},"startTime":1770383569871,"traceId":"eb1231321911f71f"},{"name":"next-build","duration":944042,"timestamp":6948865225,"id":1,"tags":{"buildMode":"default","isTurboBuild":"false","version":"14.2.18","isTurbopack":false,"has-custom-webpack-config":"false","use-build-worker":"true"},"startTime":1770383569772,"traceId":"eb1231321911f71f"}]

package/dashboard/README.md

@@ -0,0 +1,32 @@
+# shimwrappercheck Dashboard
+
+Next.js Web UI for shimwrappercheck: status, run checks, edit `.shimwrappercheckrc`, and edit **AGENTS.md**.
+
+## Run locally
+
+```bash
+npm install
+npm run dev
+```
+
+Open http://localhost:3000.
+
+## Deploy (e.g. Vercel)
+
+- Set **Root Directory** to `dashboard` (or deploy from repo root and build from `dashboard`).
+- Set env **SHIM_PROJECT_ROOT** to the absolute path of the repo where `.shimwrappercheckrc` and `AGENTS.md` live (required when dashboard runs in a different directory than the project).
+
+## Pages
+
+- **Dashboard**: Status (config, AGENTS.md, run-checks script, hooks), button "Nur Checks ausführen", links to Config and AGENTS.md.
+- **Config**: Edit `.shimwrappercheckrc` (raw text).
+- **AGENTS.md**: Edit agent instructions; used by Cursor/Codex. Editable by agents and humans via this UI.
+
+## API
+
+- `GET /api/status` – project status (paths, existence of config/AGENTS.md/scripts/hooks).
+- `GET/POST /api/config` – read/write `.shimwrappercheckrc`.
+- `GET/POST /api/agents-md` – read/write `AGENTS.md` (default content if missing).
+- `POST /api/run-checks` – run `scripts/run-checks.sh`, return stdout/stderr/code.
+
+All paths resolve from **project root** (parent of `dashboard/` when running locally, or `SHIM_PROJECT_ROOT` when set).

package/dashboard/app/agents/page.tsx

@@ -0,0 +1,88 @@
+/**
+ * AGENTS.md editor: edit agent instructions (used by Cursor/Codex agents).
+ * Location: app/agents/page.tsx
+ */
+"use client";
+
+import { useEffect, useState } from "react";
+
+export default function AgentsPage() {
+  const [raw, setRaw] = useState("");
+  const [loading, setLoading] = useState(true);
+  const [saving, setSaving] = useState(false);
+  const [message, setMessage] = useState<{ type: "success" | "error"; text: string } | null>(null);
+  const [exists, setExists] = useState(false);
+
+  useEffect(() => {
+    fetch("/api/agents-md")
+      .then((r) => r.json())
+      .then((data) => {
+        setRaw(data.raw ?? "");
+        setExists(data.exists ?? false);
+        setLoading(false);
+      })
+      .catch(() => setLoading(false));
+  }, []);
+
+  const save = () => {
+    setSaving(true);
+    setMessage(null);
+    fetch("/api/agents-md", {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ raw }),
+    })
+      .then((r) => r.json())
+      .then((data) => {
+        setSaving(false);
+        if (data.error) setMessage({ type: "error", text: data.error });
+        else {
+          setMessage({ type: "success", text: "AGENTS.md gespeichert." });
+          setExists(true);
+        }
+      })
+      .catch(() => {
+        setSaving(false);
+        setMessage({ type: "error", text: "Speichern fehlgeschlagen." });
+      });
+  };
+
+  if (loading) {
+    return (
+      <div className="flex justify-center py-12">
+        <span className="loading loading-spinner loading-lg" />
+      </div>
+    );
+  }
+
+  return (
+    <div className="space-y-6">
+      <h1 className="text-3xl font-bold">AGENTS.md</h1>
+      <p className="text-base-content/80">
+        Agent-Anweisungen für Cursor/Codex. Wird von Agents gelesen; hier bearbeitbar. Änderungen gelten sofort.
+      </p>
+      {!exists && (
+        <div className="alert alert-info">
+          <span>AGENTS.md existiert noch nicht. Beim Speichern wird sie im Projekt-Root angelegt.</span>
+        </div>
+      )}
+      <textarea
+        className="textarea textarea-bordered w-full font-mono text-sm min-h-[400px]"
+        value={raw}
+        onChange={(e) => setRaw(e.target.value)}
+        placeholder="# Agent instructions..."
+        spellCheck={false}
+      />
+      <div className="flex gap-4 items-center">
+        <button type="button" className="btn btn-primary" onClick={save} disabled={saving}>
+          {saving ? "Speichern…" : "Speichern"}
+        </button>
+        {message && (
+          <span className={message.type === "success" ? "text-success" : "text-error"}>
+            {message.text}
+          </span>
+        )}
+      </div>
+    </div>
+  );
+}

package/dashboard/app/api/agents-md/route.ts

@@ -0,0 +1,68 @@
+/**
+ * GET/POST /api/agents-md – read/write AGENTS.md (agent instructions, editable by GUI).
+ * Vercel-compatible; uses SHIM_PROJECT_ROOT when deployed.
+ */
+import { NextRequest, NextResponse } from "next/server";
+import path from "path";
+import fs from "fs";
+import { getProjectRoot } from "@/lib/projectRoot";
+
+const agentsFileName = "AGENTS.md";
+
+function getAgentsPath(): string {
+  return path.join(getProjectRoot(), agentsFileName);
+}
+
+const defaultAgentsContent = `# Agent instructions (shimwrappercheck)
+
+This file is used by AI agents (Cursor, Codex, etc.) when working with this repo.
+Edit it here or via the dashboard so agents know how to use the shim and this project.
+
+## Shim usage
+
+- Use \`npx supabase ...\` or \`npm run supabase:checked -- ...\` so checks run before deploy.
+- Use \`npx git push\` or \`npm run git:checked -- push\` so checks run before push.
+- Run \`npx shimwrappercheck init\` for setup; \`npx shimwrappercheck install\` for PATH shims.
+
+## Project rules
+
+- Keep checks fast; run lint/type/build in scripts/run-checks.sh.
+- AGENTS.md can be edited via the dashboard (Config → AGENTS.md).
+`;
+
+export async function GET() {
+  try {
+    const p = getAgentsPath();
+    if (!fs.existsSync(p)) {
+      return NextResponse.json({ raw: defaultAgentsContent, exists: false });
+    }
+    const raw = fs.readFileSync(p, "utf8");
+    return NextResponse.json({ raw, exists: true });
+  } catch (err) {
+    console.error("agents-md get error:", err);
+    return NextResponse.json(
+      { error: err instanceof Error ? err.message : "Unknown error" },
+      { status: 500 }
+    );
+  }
+}
+
+export async function POST(request: NextRequest) {
+  try {
+    const { raw } = (await request.json()) as { raw?: string };
+    if (typeof raw !== "string") {
+      return NextResponse.json({ error: "raw string required" }, { status: 400 });
+    }
+    const p = getAgentsPath();
+    const dir = path.dirname(p);
+    if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
+    fs.writeFileSync(p, raw.endsWith("\n") ? raw : raw + "\n", "utf8");
+    return NextResponse.json({ ok: true });
+  } catch (err) {
+    console.error("agents-md post error:", err);
+    return NextResponse.json(
+      { error: err instanceof Error ? err.message : "Unknown error" },
+      { status: 500 }
+    );
+  }
+}

package/dashboard/app/api/config/route.ts

@@ -0,0 +1,51 @@
+/**
+ * GET/POST /api/config – read/write .shimwrappercheckrc (key=value + comments).
+ * Vercel-compatible; uses SHIM_PROJECT_ROOT when deployed.
+ */
+import { NextRequest, NextResponse } from "next/server";
+import path from "path";
+import fs from "fs";
+import { getProjectRoot } from "@/lib/projectRoot";
+
+const rcFileName = ".shimwrappercheckrc";
+
+function getRcPath(): string {
+  return path.join(getProjectRoot(), rcFileName);
+}
+
+export async function GET() {
+  try {
+    const p = getRcPath();
+    if (!fs.existsSync(p)) {
+      return NextResponse.json({ raw: "", exists: false });
+    }
+    const raw = fs.readFileSync(p, "utf8");
+    return NextResponse.json({ raw, exists: true });
+  } catch (err) {
+    console.error("config get error:", err);
+    return NextResponse.json(
+      { error: err instanceof Error ? err.message : "Unknown error" },
+      { status: 500 }
+    );
+  }
+}
+
+export async function POST(request: NextRequest) {
+  try {
+    const { raw } = (await request.json()) as { raw?: string };
+    if (typeof raw !== "string") {
+      return NextResponse.json({ error: "raw string required" }, { status: 400 });
+    }
+    const p = getRcPath();
+    const dir = path.dirname(p);
+    if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
+    fs.writeFileSync(p, raw.endsWith("\n") ? raw : raw + "\n", "utf8");
+    return NextResponse.json({ ok: true });
+  } catch (err) {
+    console.error("config post error:", err);
+    return NextResponse.json(
+      { error: err instanceof Error ? err.message : "Unknown error" },
+      { status: 500 }
+    );
+  }
+}

package/dashboard/app/api/run-checks/route.ts

@@ -0,0 +1,54 @@
+/**
+ * POST /api/run-checks – run scripts/run-checks.sh and return stdout/stderr.
+ * Vercel-compatible; uses SHIM_PROJECT_ROOT. Runs in project root.
+ */
+import { NextResponse } from "next/server";
+import path from "path";
+import fs from "fs";
+import { exec } from "child_process";
+import { promisify } from "util";
+import { getProjectRoot } from "@/lib/projectRoot";
+
+const execAsync = promisify(exec);
+
+type ExecResult = { stdout: string; stderr: string; code?: number };
+
+export async function POST() {
+  try {
+    const root = getProjectRoot();
+    const scriptPath = path.join(root, "scripts", "run-checks.sh");
+    if (!fs.existsSync(scriptPath)) {
+      return NextResponse.json({
+        error: "scripts/run-checks.sh not found",
+        stdout: "",
+        stderr: "",
+        code: 1,
+      });
+    }
+    const opts = { cwd: root, maxBuffer: 2 * 1024 * 1024, shell: "/bin/bash" };
+    let stdout = "";
+    let stderr = "";
+    let code = 0;
+    try {
+      const out = await execAsync(`bash "${scriptPath}"`, opts);
+      stdout = out.stdout ?? "";
+      stderr = out.stderr ?? "";
+    } catch (e: unknown) {
+      const err = e as { stdout?: string; stderr?: string; code?: number };
+      stdout = err.stdout ?? "";
+      stderr = err.stderr ?? (err instanceof Error ? err.message : String(e));
+      code = err.code ?? 1;
+    }
+    return NextResponse.json({ stdout, stderr, code });
+  } catch (err) {
+    console.error("run-checks error:", err);
+    return NextResponse.json(
+      {
+        stdout: "",
+        stderr: err instanceof Error ? err.message : String(err),
+        code: 1,
+      },
+      { status: 200 }
+    );
+  }
+}