skillrepo 1.6.2 → 1.7.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skillrepo",
-  "version": "1.6.2",
+  "version": "1.7.0",
   "description": "Set up SkillRepo in any IDE — one command",
   "type": "module",
   "bin": {

package/src/commands/init.mjs

@@ -4,14 +4,16 @@
  * Flow:
  * 1. Detect IDEs
  * 2. Prompt for access key
- * 3. Validate key + fetch skill mappings
- * 4. Write all configs
- * 5. Print summary
+ * 3. Validate key + fetch skill count
+ * 4. Write configs (global config, hooks, MCP, .gitignore)
+ * 5. Run first sync (writes rules files + local cache)
+ * 6. Print summary
  */
 
 import { detectIdes, formatDetectedIdes, getDetectedIdeKeys } from "../lib/detect-ides.mjs";
 import { fetchSetupPayload, AuthError, SuspendedError, NetworkError } from "../lib/http.mjs";
 import { writeAllConfigs } from "../lib/write-configs.mjs";
+import { runFirstSync } from "../lib/first-sync.mjs";
 import {
   printHeader,
   printStep,
@@ -66,7 +68,7 @@ export async function runInit(argv) {
   printHeader("SkillRepo Setup");
 
   // ── Step 1: Detect IDEs ───────────────────────────────────────────────
-  printStep(1, 4, "Detecting IDEs...");
+  printStep(1, 5, "Detecting IDEs...");
 
   const detected = detectIdes();
   const ideList = formatDetectedIdes(detected);
@@ -95,7 +97,7 @@ export async function runInit(argv) {
   printBlank();
 
   // ── Step 2: Access Key ────────────────────────────────────────────────
-  printStep(2, 4, "Access Key");
+  printStep(2, 5, "Access Key");
 
   let apiKey = flags.key;
   if (!apiKey) {
@@ -111,7 +113,7 @@ export async function runInit(argv) {
   printBlank();
 
   // ── Step 3: Validate + Fetch ──────────────────────────────────────────
-  printStep(3, 4, "Validating key...");
+  printStep(3, 5, "Validating key...");
 
   let payload;
   try {
@@ -135,13 +137,13 @@ export async function runInit(argv) {
   printSuccess(`Valid. ${payload.skillCount} skills in your library.`);
 
   if (payload.skillCount === 0) {
-    printWarning("No skills in your library yet. MCP config will be written — skills will activate when you add them.");
+    printWarning("No skills in your library yet. Config will be written — skills will activate when you add them.");
   }
 
   printBlank();
 
   // ── Step 4: Write configs ─────────────────────────────────────────────
-  printStep(4, 4, "Writing configuration...");
+  printStep(4, 5, "Writing configuration...");
   printBlank();
 
   const mcpUrl = `${flags.url}/api/mcp`;
@@ -152,7 +154,7 @@ export async function runInit(argv) {
       ides: detectedKeys,
       mcpUrl,
       apiKey,
-      payload,
+      serverUrl: flags.url,
     });
   } catch (err) {
     printError(err.message);
@@ -163,6 +165,19 @@ export async function runInit(argv) {
     printResult(r.path, r.action);
   }
 
+  printBlank();
+
+  // ── Step 5: First sync ────────────────────────────────────────────────
+  printStep(5, 5, "Running first sync...");
+
+  try {
+    await runFirstSync();
+    printSuccess("Skills synced and rules files written.");
+  } catch (err) {
+    printWarning(`First sync failed: ${err.message}`);
+    printWarning("Skills will sync automatically on your next session start.");
+  }
+
   // ── Summary ───────────────────────────────────────────────────────────
   printBlank();
   printSuccess("SkillRepo is ready.");
@@ -172,14 +187,15 @@ export async function runInit(argv) {
   console.log("  • Each team member runs: npx skillrepo init");
   console.log("  • SKILLREPO_ACCESS_KEY is in .env.local (gitignored)");
 
-  if (detectedKeys.includes("vscode")) {
+  if (detectedKeys.includes("claudeCode")) {
     printBlank();
-    console.log("  Note: VS Code will prompt for your access key on first use.");
+    console.log("  Claude Code: Skills are delivered via .claude/rules/ files.");
+    console.log("  They refresh automatically on each session start.");
   }
 
-  if (detectedKeys.includes("claudeCode")) {
+  if (detectedKeys.includes("vscode")) {
     printBlank();
-    console.log("  Claude Code: Skills refresh automatically on each session start.");
+    console.log("  Note: VS Code will prompt for your access key on first use.");
   }
 
   printBlank();

package/src/hooks/skillrepo-prompt-match.mjs

@@ -0,0 +1,344 @@
+#!/usr/bin/env node
+/**
+ * SkillRepo UserPromptSubmit hook — matches prompts against the local skill
+ * index and reports telemetry. No content injection.
+ *
+ * Standalone script: no npm dependencies, Node.js built-ins only.
+ * Installed by `npx skillrepo init` to `.claude/hooks/skillrepo-prompt-match.mjs`.
+ *
+ * Part of #532 (Re-architect skill delivery, Phase B).
+ */
+
+import { readFileSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { homedir, tmpdir } from "node:os";
+import { createHash } from "node:crypto";
+import { execSync } from "node:child_process";
+
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+
+const DEFAULT_SERVER_URL = "https://skillrepo.dev";
+const MAX_EVENTS_PER_BATCH = 50;
+
+// ---------------------------------------------------------------------------
+// Config resolution (lightweight — only needs API key and server URL)
+// ---------------------------------------------------------------------------
+
+/**
+ * Read config from ~/.claude/skillrepo/config.json with fallbacks.
+ * Returns { apiKey, serverUrl } or null.
+ */
+export function readConfig() {
+  const configPath = join(homedir(), ".claude", "skillrepo", "config.json");
+  try {
+    const cfg = JSON.parse(readFileSync(configPath, "utf-8"));
+    if (cfg.apiKey) {
+      return { apiKey: cfg.apiKey, serverUrl: cfg.serverUrl || DEFAULT_SERVER_URL };
+    }
+  } catch { /* not found */ }
+
+  const envKey = process.env.SKILLREPO_ACCESS_KEY;
+  if (envKey) {
+    return { apiKey: envKey, serverUrl: process.env.SKILLREPO_SERVER_URL || DEFAULT_SERVER_URL };
+  }
+
+  // .env.local fallback
+  for (const file of [".env.local", ".env"]) {
+    try {
+      const lines = readFileSync(join(process.cwd(), file), "utf-8").split("\n");
+      for (const line of lines) {
+        const trimmed = line.trim();
+        if (trimmed.startsWith("#") || !trimmed.includes("=")) continue;
+        const eqIdx = trimmed.indexOf("=");
+        if (trimmed.slice(0, eqIdx).trim() === "SKILLREPO_ACCESS_KEY") {
+          let val = trimmed.slice(eqIdx + 1).trim();
+          if ((val.startsWith('"') && val.endsWith('"')) || (val.startsWith("'") && val.endsWith("'"))) {
+            val = val.slice(1, -1);
+          }
+          val = val.replace(/\s+#.*$/, "");
+          if (val) return { apiKey: val, serverUrl: DEFAULT_SERVER_URL };
+        }
+      }
+    } catch { /* file doesn't exist */ }
+  }
+
+  return null;
+}
+
+// ---------------------------------------------------------------------------
+// Skill matching
+// ---------------------------------------------------------------------------
+
+const STOP_WORDS = new Set([
+  "a", "an", "the", "and", "or", "but", "in", "on", "at", "to", "for",
+  "of", "with", "by", "is", "are", "was", "were", "be", "been",
+  "this", "that", "it", "its", "as", "if", "not", "no", "do", "does",
+  "can", "will", "use", "when", "how", "what", "which", "who", "any",
+  "all", "your", "you", "their", "they", "has", "have", "had",
+  "i", "me", "my", "we", "our",
+]);
+
+/**
+ * Match a prompt against all skills in the index.
+ * Returns scored matches sorted by relevance (highest first).
+ */
+export function matchSkills(prompt, skills) {
+  if (!prompt || !skills?.length) return [];
+
+  const lower = prompt.toLowerCase();
+  const tokens = new Set(
+    lower.replace(/[^a-z0-9\s-]/g, " ").split(/\s+/).filter(w => w.length > 2 && !STOP_WORDS.has(w))
+  );
+
+  const matches = [];
+
+  for (const skill of skills) {
+    let score = 0;
+
+    // High-weight: contextSignals.tasks phrase matching (+3 per match)
+    const tasks = skill.contextSignals?.tasks ?? [];
+    for (const task of tasks) {
+      if (lower.includes(task.toLowerCase())) score += 3;
+    }
+
+    // Standard-weight: keyword token matching
+    for (const kw of (skill.keywords ?? [])) {
+      const kwLower = kw.toLowerCase();
+      if (tokens.has(kwLower)) {
+        score += 1;
+      } else if (kwLower.length > 3 && lower.includes(kwLower)) {
+        score += 0.5;
+      }
+    }
+
+    // Name-based matching: skill name parts
+    for (const part of skill.name.split("-")) {
+      if (part.length > 2 && tokens.has(part.toLowerCase())) score += 0.5;
+    }
+
+    // Description-based matching: key description words
+    if (skill.description) {
+      const descWords = skill.description.toLowerCase().replace(/[^a-z0-9\s-]/g, " ").split(/\s+/)
+        .filter(w => w.length > 3 && !STOP_WORDS.has(w));
+      for (const word of descWords) {
+        if (tokens.has(word)) score += 0.3;
+      }
+    }
+
+    if (score > 0) matches.push({ skill, score });
+  }
+
+  return matches.sort((a, b) => b.score - a.score);
+}
+
+// ---------------------------------------------------------------------------
+// Session dedup
+// ---------------------------------------------------------------------------
+
+/**
+ * Read session state for deduplication.
+ * State is stored in tmpdir keyed by session hash.
+ */
+export function readSessionState(sessionId) {
+  const hash = createHash("sha256").update(sessionId || "default").digest("hex").slice(0, 16);
+  const statePath = join(tmpdir(), `skillrepo-match-${hash}.json`);
+
+  try {
+    return { path: statePath, state: JSON.parse(readFileSync(statePath, "utf-8")) };
+  } catch {
+    return { path: statePath, state: { reported: {} } };
+  }
+}
+
+/**
+ * Filter matches to exclude skills already reported in this session.
+ */
+export function deduplicateMatches(matches, sessionState) {
+  return matches.filter(m => {
+    const key = `${m.skill.owner}/${m.skill.name}`;
+    return !sessionState.reported[key];
+  });
+}
+
+/**
+ * Mark skills as reported in session state.
+ */
+export function updateSessionState(statePath, state, reportedMatches) {
+  for (const m of reportedMatches) {
+    const key = `${m.skill.owner}/${m.skill.name}`;
+    state.reported[key] = new Date().toISOString();
+  }
+  try { writeFileSync(statePath, JSON.stringify(state), "utf-8"); }
+  catch { /* non-critical */ }
+}
+
+// ---------------------------------------------------------------------------
+// GitHub username resolution
+// ---------------------------------------------------------------------------
+
+const GITHUB_USERNAME_CACHE_PATH = join(tmpdir(), "skillrepo-gh-user.json");
+
+/**
+ * Resolve GitHub username via `gh api user`. Cached per session.
+ */
+export function resolveGithubUsername() {
+  // Check cache first
+  try {
+    const cached = JSON.parse(readFileSync(GITHUB_USERNAME_CACHE_PATH, "utf-8"));
+    if (cached.username && cached.expiresAt > Date.now()) return cached.username;
+  } catch { /* no cache */ }
+
+  // Resolve via gh CLI
+  try {
+    const result = execSync("gh api user --jq .login", {
+      encoding: "utf-8",
+      timeout: 3_000,
+      stdio: ["pipe", "pipe", "pipe"],
+    }).trim();
+
+    if (result) {
+      // Cache for 1 hour
+      try {
+        writeFileSync(GITHUB_USERNAME_CACHE_PATH, JSON.stringify({
+          username: result,
+          expiresAt: Date.now() + 3_600_000,
+        }), "utf-8");
+      } catch { /* non-critical */ }
+      return result;
+    }
+  } catch { /* gh not installed or not authed */ }
+
+  return null;
+}
+
+// ---------------------------------------------------------------------------
+// Telemetry payload
+// ---------------------------------------------------------------------------
+
+/**
+ * Build telemetry payload for matched skills.
+ */
+export function buildTelemetryPayload(matches, sessionInfo) {
+  const events = matches.slice(0, MAX_EVENTS_PER_BATCH).map(m => ({
+    skillOwner: m.skill.owner,
+    skillName: m.skill.name,
+    skillVersion: m.skill.version ?? "",
+    matchedAt: new Date().toISOString(),
+    ide: sessionInfo.ide || "claude-code",
+    sessionHash: sessionInfo.sessionHash,
+    githubUsername: sessionInfo.githubUsername || "",
+    wasRulesDelivered: m.skill.isRulesDelivered ?? false,
+  }));
+
+  return { events };
+}
+
+/**
+ * Fire-and-forget POST to telemetry endpoint.
+ *
+ * NOT awaited — the spec requires "do NOT block the agent" and Claude Code
+ * waits for hook process exit. The OS TCP stack flushes small payloads after
+ * process exit, so delivery reliability is ~99%+ for responsive servers.
+ * Occasional loss on slow/unreachable servers is acceptable for non-critical
+ * telemetry.
+ */
+export function sendTelemetry(config, payload) {
+  const url = `${config.serverUrl}/api/v1/telemetry/match`;
+
+  fetch(url, {
+    method: "POST",
+    headers: {
+      Authorization: `Bearer ${config.apiKey}`,
+      "Content-Type": "application/json",
+    },
+    body: JSON.stringify(payload),
+  }).catch(() => { /* telemetry errors are non-critical */ });
+}
+
+// ---------------------------------------------------------------------------
+// Main entry point
+// ---------------------------------------------------------------------------
+
+export async function main(input) {
+  const indexPath = join(homedir(), ".claude", "skillrepo", "index.json");
+
+  // ── Read index ──────────────────────────────────────────────
+  let index;
+  try {
+    index = JSON.parse(readFileSync(indexPath, "utf-8"));
+  } catch {
+    // No index → nothing to match. Exit cleanly.
+    process.stdout.write("{}");
+    return;
+  }
+
+  if (!index.skills?.length) {
+    process.stdout.write("{}");
+    return;
+  }
+
+  // ── Read config (needed for telemetry POST) ─────────────────
+  const config = readConfig();
+  if (!config) {
+    process.stdout.write("{}");
+    return;
+  }
+
+  // ── Match prompt against skills ─────────────────────────────
+  const prompt = input.prompt ?? "";
+  const matches = matchSkills(prompt, index.skills);
+
+  if (matches.length === 0) {
+    process.stdout.write("{}");
+    return;
+  }
+
+  // ── Session dedup ───────────────────────────────────────────
+  const sessionId = input.session_id ?? "default";
+  const { path: statePath, state } = readSessionState(sessionId);
+  const newMatches = deduplicateMatches(matches, state);
+
+  if (newMatches.length === 0) {
+    process.stdout.write("{}");
+    return;
+  }
+
+  // ── Build and send telemetry ────────────────────────────────
+  const sessionHash = createHash("sha256").update(sessionId).digest("hex").slice(0, 16);
+  const githubUsername = resolveGithubUsername();
+
+  const payload = buildTelemetryPayload(newMatches, {
+    ide: "claude-code",
+    sessionHash,
+    githubUsername,
+  });
+
+  sendTelemetry(config, payload); // fire-and-forget — do NOT await
+
+  // ── Update session state ────────────────────────────────────
+  updateSessionState(statePath, state, newMatches);
+
+  // ── Output: NO additionalContext ────────────────────────────
+  process.stdout.write("{}");
+}
+
+// ── Run ───────────────────────────────────────────────────────
+const __filename = fileURLToPath(import.meta.url);
+const isMainModule = process.argv[1] === __filename;
+
+if (isMainModule) {
+  let inputBuf = "";
+  for await (const chunk of process.stdin) inputBuf += chunk;
+
+  let input;
+  try { input = JSON.parse(inputBuf); }
+  catch { process.stdout.write("{}"); process.exit(0); }
+
+  main(input).catch(() => {
+    process.stdout.write("{}");
+    process.exit(0);
+  });
+}