skillrepo 1.10.0 → 2.0.0

package/src/hooks/skillrepo-prompt-match.mjs

@@ -1,405 +0,0 @@
-#!/usr/bin/env node
-/**
- * SkillRepo UserPromptSubmit hook — matches prompts against the local skill
- * index and reports telemetry. No content injection.
- *
- * Standalone script: no npm dependencies, Node.js built-ins only.
- * Installed by `npx skillrepo init` to `.claude/hooks/skillrepo-prompt-match.mjs`.
- *
- * Part of #532 (Re-architect skill delivery, Phase B).
- */
-
-import { readFileSync, writeFileSync } from "node:fs";
-import { join } from "node:path";
-import { fileURLToPath } from "node:url";
-import { homedir, tmpdir } from "node:os";
-import { createHash } from "node:crypto";
-
-// ---------------------------------------------------------------------------
-// Constants
-// ---------------------------------------------------------------------------
-
-const DEFAULT_SERVER_URL = "https://skillrepo.dev";
-const MAX_EVENTS_PER_BATCH = 50;
-
-// ---------------------------------------------------------------------------
-// Config resolution (lightweight — only needs API key and server URL)
-// ---------------------------------------------------------------------------
-
-/**
- * Read config from ~/.claude/skillrepo/config.json with fallbacks.
- * Returns { apiKey, serverUrl, userId } or null.
- */
-export function readConfig() {
-  const configPath = join(homedir(), ".claude", "skillrepo", "config.json");
-  try {
-    const cfg = JSON.parse(readFileSync(configPath, "utf-8"));
-    if (cfg.apiKey) {
-      return {
-        apiKey: cfg.apiKey,
-        serverUrl: cfg.serverUrl || DEFAULT_SERVER_URL,
-        userId: cfg.userId || null,
-      };
-    }
-  } catch { /* not found */ }
-
-  const envKey = process.env.SKILLREPO_ACCESS_KEY;
-  if (envKey) {
-    return { apiKey: envKey, serverUrl: process.env.SKILLREPO_SERVER_URL || DEFAULT_SERVER_URL, userId: null };
-  }
-
-  // .env.local fallback
-  for (const file of [".env.local", ".env"]) {
-    try {
-      const lines = readFileSync(join(process.cwd(), file), "utf-8").split("\n");
-      for (const line of lines) {
-        const trimmed = line.trim();
-        if (trimmed.startsWith("#") || !trimmed.includes("=")) continue;
-        const eqIdx = trimmed.indexOf("=");
-        if (trimmed.slice(0, eqIdx).trim() === "SKILLREPO_ACCESS_KEY") {
-          let val = trimmed.slice(eqIdx + 1).trim();
-          if ((val.startsWith('"') && val.endsWith('"')) || (val.startsWith("'") && val.endsWith("'"))) {
-            val = val.slice(1, -1);
-          }
-          val = val.replace(/\s+#.*$/, "");
-          if (val) return { apiKey: val, serverUrl: DEFAULT_SERVER_URL, userId: null };
-        }
-      }
-    } catch { /* file doesn't exist */ }
-  }
-
-  return null;
-}
-
-// ---------------------------------------------------------------------------
-// Skill matching
-// ---------------------------------------------------------------------------
-
-const STOP_WORDS = new Set([
-  "a", "an", "the", "and", "or", "but", "in", "on", "at", "to", "for",
-  "of", "with", "by", "is", "are", "was", "were", "be", "been",
-  "this", "that", "it", "its", "as", "if", "not", "no", "do", "does",
-  "can", "will", "use", "when", "how", "what", "which", "who", "any",
-  "all", "your", "you", "their", "they", "has", "have", "had",
-  "i", "me", "my", "we", "our",
-]);
-
-/**
- * Match a prompt against all skills in the index.
- * Returns scored matches sorted by relevance (highest first).
- */
-export function matchSkills(prompt, skills) {
-  if (!prompt || !skills?.length) return [];
-
-  const lower = prompt.toLowerCase();
-  const tokens = new Set(
-    lower.replace(/[^a-z0-9\s-]/g, " ").split(/\s+/).filter(w => w.length > 2 && !STOP_WORDS.has(w))
-  );
-
-  const matches = [];
-
-  for (const skill of skills) {
-    let score = 0;
-
-    // High-weight: contextSignals.tasks phrase matching (+3 per match)
-    const tasks = skill.contextSignals?.tasks ?? [];
-    for (const task of tasks) {
-      if (lower.includes(task.toLowerCase())) score += 3;
-    }
-
-    // Standard-weight: keyword token matching
-    for (const kw of (skill.keywords ?? [])) {
-      const kwLower = kw.toLowerCase();
-      if (tokens.has(kwLower)) {
-        score += 1;
-      } else if (kwLower.length > 3 && lower.includes(kwLower)) {
-        score += 0.5;
-      }
-    }
-
-    // Name-based matching: skill name parts
-    for (const part of skill.name.split("-")) {
-      if (part.length > 2 && tokens.has(part.toLowerCase())) score += 0.5;
-    }
-
-    // Description-based matching: key description words
-    if (skill.description) {
-      const descWords = skill.description.toLowerCase().replace(/[^a-z0-9\s-]/g, " ").split(/\s+/)
-        .filter(w => w.length > 3 && !STOP_WORDS.has(w));
-      for (const word of descWords) {
-        if (tokens.has(word)) score += 0.3;
-      }
-    }
-
-    if (score > 0) matches.push({ skill, score });
-  }
-
-  return matches.sort((a, b) => b.score - a.score);
-}
-
-// ---------------------------------------------------------------------------
-// Session dedup
-// ---------------------------------------------------------------------------
-
-/**
- * Read session state for deduplication.
- * State is stored in tmpdir keyed by session hash.
- */
-export function readSessionState(sessionId) {
-  const hash = createHash("sha256").update(sessionId || "default").digest("hex").slice(0, 16);
-  const statePath = join(tmpdir(), `skillrepo-match-${hash}.json`);
-
-  try {
-    return { path: statePath, state: JSON.parse(readFileSync(statePath, "utf-8")) };
-  } catch {
-    return { path: statePath, state: { reported: {} } };
-  }
-}
-
-/**
- * Filter matches to exclude skills already reported in this session.
- */
-export function deduplicateMatches(matches, sessionState) {
-  return matches.filter(m => {
-    const key = `${m.skill.owner}/${m.skill.name}`;
-    return !sessionState.reported[key];
-  });
-}
-
-/**
- * Mark skills as reported in session state.
- */
-export function updateSessionState(statePath, state, reportedMatches) {
-  for (const m of reportedMatches) {
-    const key = `${m.skill.owner}/${m.skill.name}`;
-    state.reported[key] = new Date().toISOString();
-  }
-  try { writeFileSync(statePath, JSON.stringify(state), "utf-8"); }
-  catch { /* non-critical */ }
-}
-
-// ---------------------------------------------------------------------------
-// Telemetry payload
-// ---------------------------------------------------------------------------
-
-/**
- * Build telemetry payload for matched skills.
- */
-export function buildTelemetryPayload(matches, sessionInfo) {
-  const events = matches.slice(0, MAX_EVENTS_PER_BATCH).map(m => ({
-    skillOwner: m.skill.owner,
-    skillName: m.skill.name,
-    skillVersion: m.skill.version ?? "",
-    matchedAt: new Date().toISOString(),
-    ide: sessionInfo.ide || "claude-code",
-    sessionHash: sessionInfo.sessionHash,
-    userId: sessionInfo.userId || undefined,
-    wasRulesDelivered: m.skill.isRulesDelivered ?? false,
-  }));
-
-  return { events };
-}
-
-/**
- * Fire-and-forget POST to telemetry endpoint.
- *
- * NOT awaited — the spec requires "do NOT block the agent" and Claude Code
- * waits for hook process exit. The OS TCP stack flushes small payloads after
- * process exit, so delivery reliability is ~99%+ for responsive servers.
- * Occasional loss on slow/unreachable servers is acceptable for non-critical
- * telemetry.
- */
-export function sendTelemetry(config, payload) {
-  const url = `${config.serverUrl}/api/v1/telemetry/match`;
-
-  fetch(url, {
-    method: "POST",
-    headers: {
-      Authorization: `Bearer ${config.apiKey}`,
-      "Content-Type": "application/json",
-    },
-    body: JSON.stringify(payload),
-  }).catch(() => { /* telemetry errors are non-critical */ });
-}
-
-// ---------------------------------------------------------------------------
-// Activation telemetry for rules-delivered matched skills
-// ---------------------------------------------------------------------------
-
-/**
- * Read the shared activation dedup state (same file as pretool-activation hook).
- * This prevents double-counting: if rules_match fires first, pretool_hook
- * won't re-report the same skill in the same session, and vice versa.
- */
-export function readActivationState(sessionId) {
-  const hash = createHash("sha256").update(sessionId || "default").digest("hex").slice(0, 16);
-  const statePath = join(tmpdir(), `skillrepo-activation-${hash}.json`);
-
-  try {
-    return { path: statePath, state: JSON.parse(readFileSync(statePath, "utf-8")) };
-  } catch {
-    return { path: statePath, state: { reported: {} } };
-  }
-}
-
-/**
- * Filter matches to exclude skills already reported as activated in this session.
- */
-export function deduplicateActivations(matches, sessionState) {
-  return matches.filter(m => {
-    const key = `${m.skill.owner}/${m.skill.name}`;
-    return !sessionState.reported[key];
-  });
-}
-
-/**
- * Mark skills as reported in activation state.
- */
-export function updateActivationState(statePath, state, reportedMatches) {
-  for (const m of reportedMatches) {
-    const key = `${m.skill.owner}/${m.skill.name}`;
-    state.reported[key] = new Date().toISOString();
-  }
-  try { writeFileSync(statePath, JSON.stringify(state), "utf-8"); }
-  catch { /* non-critical */ }
-}
-
-/**
- * Build activation telemetry payload for rules-delivered matched skills.
- */
-export function buildActivationPayload(matches, sessionInfo) {
-  const events = matches.slice(0, MAX_EVENTS_PER_BATCH).map(m => ({
-    skillOwner: m.skill.owner,
-    skillName: m.skill.name,
-    skillVersion: m.skill.version ?? "",
-    activatedAt: new Date().toISOString(),
-    ide: sessionInfo.ide || "claude-code",
-    sessionHash: sessionInfo.sessionHash,
-    userId: sessionInfo.userId || undefined,
-    source: "rules_match",
-    toolPattern: null,
-  }));
-
-  return { events };
-}
-
-/**
- * Fire-and-forget POST to activation telemetry endpoint.
- */
-export function sendActivationTelemetry(config, payload) {
-  const url = `${config.serverUrl}/api/v1/telemetry/activation`;
-
-  fetch(url, {
-    method: "POST",
-    headers: {
-      Authorization: `Bearer ${config.apiKey}`,
-      "Content-Type": "application/json",
-    },
-    body: JSON.stringify(payload),
-  }).catch(() => { /* telemetry errors are non-critical */ });
-}
-
-// ---------------------------------------------------------------------------
-// Main entry point
-// ---------------------------------------------------------------------------
-
-export async function main(input) {
-  const indexPath = join(homedir(), ".claude", "skillrepo", "index.json");
-
-  // ── Read index ──────────────────────────────────────────────
-  let index;
-  try {
-    index = JSON.parse(readFileSync(indexPath, "utf-8"));
-  } catch {
-    // No index → nothing to match. Exit cleanly.
-    process.stdout.write("{}");
-    return;
-  }
-
-  if (!index.skills?.length) {
-    process.stdout.write("{}");
-    return;
-  }
-
-  // ── Read config (needed for telemetry POST) ─────────────────
-  const config = readConfig();
-  if (!config) {
-    process.stdout.write("{}");
-    return;
-  }
-
-  // ── Match prompt against skills ─────────────────────────────
-  const prompt = input.prompt ?? "";
-  const matches = matchSkills(prompt, index.skills);
-
-  if (matches.length === 0) {
-    process.stdout.write("{}");
-    return;
-  }
-
-  // ── Session dedup ───────────────────────────────────────────
-  const sessionId = input.session_id ?? "default";
-  const { path: statePath, state } = readSessionState(sessionId);
-  const newMatches = deduplicateMatches(matches, state);
-
-  if (newMatches.length === 0) {
-    process.stdout.write("{}");
-    return;
-  }
-
-  // ── Build and send telemetry ────────────────────────────────
-  const sessionHash = createHash("sha256").update(sessionId).digest("hex").slice(0, 16);
-
-  const payload = buildTelemetryPayload(newMatches, {
-    ide: "claude-code",
-    sessionHash,
-    userId: config.userId,
-  });
-
-  sendTelemetry(config, payload); // fire-and-forget — do NOT await
-
-  // ── Send activation telemetry for rules-delivered matches ───
-  // For skills delivered via .claude/rules/, the match IS the activation
-  // signal — the skill was in context and the prompt was relevant.
-  // Uses the shared activation dedup state so pretool_hook won't
-  // double-report the same skill in this session.
-  const rulesMatches = newMatches.filter(m => m.skill.isRulesDelivered);
-  if (rulesMatches.length > 0) {
-    const { path: actStatePath, state: actState } = readActivationState(sessionId);
-    const newActivations = deduplicateActivations(rulesMatches, actState);
-
-    if (newActivations.length > 0) {
-      const actPayload = buildActivationPayload(newActivations, {
-        ide: "claude-code",
-        sessionHash,
-        userId: config.userId,
-      });
-      sendActivationTelemetry(config, actPayload); // fire-and-forget
-      updateActivationState(actStatePath, actState, newActivations);
-    }
-  }
-
-  // ── Update session state ────────────────────────────────────
-  updateSessionState(statePath, state, newMatches);
-
-  // ── Output: NO additionalContext ────────────────────────────
-  process.stdout.write("{}");
-}
-
-// ── Run ───────────────────────────────────────────────────────
-const __filename = fileURLToPath(import.meta.url);
-const isMainModule = process.argv[1] === __filename;
-
-if (isMainModule) {
-  let inputBuf = "";
-  for await (const chunk of process.stdin) inputBuf += chunk;
-
-  let input;
-  try { input = JSON.parse(inputBuf); }
-  catch { process.stdout.write("{}"); process.exit(0); }
-
-  main(input).catch(() => {
-    process.stdout.write("{}");
-    process.exit(0);
-  });
-}