specweave 2.1.0 → 2.2.1

package/.claude-plugin/marketplace.json

@@ -1,6 +1,6 @@
 {
   "name": "specweave",
-  "version": "2.1.0",
+  "version": "2.2.1",
   "description": "Portable intent, specifications, task evidence, and handoffs across AI coding tools.",
   "owner": {
     "name": "Anton Abyzov",
@@ -12,7 +12,7 @@
       "description": "SpecWeave unified plugin — increment lifecycle (plan, work the ledger, verify, review, complete), cross-tool handoff, GitHub/Jira/ADO sync",
       "source": "./plugins/specweave",
       "category": "development",
-      "version": "2.1.0",
+      "version": "2.2.1",
       "author": {
         "name": "Anton Abyzov",
         "email": "anton.abyzov@gmail.com"

package/README.md

@@ -7,7 +7,7 @@
 
 <p align="center">
   <a href="https://www.npmjs.com/package/specweave"><img src="https://img.shields.io/npm/v/specweave?color=brightgreen" alt="npm" /></a>
-  <img src="https://img.shields.io/badge/skills-10-8B5CF6" alt="10 skills" />
+  <img src="https://img.shields.io/badge/skills-11-8B5CF6" alt="11 skills" />
   <a href="https://opensource.org/licenses/MIT"><img src="https://img.shields.io/badge/License-MIT-yellow.svg" alt="MIT" /></a>
   <a href="https://discord.gg/UYg4BGJ65V"><img src="https://img.shields.io/badge/Discord-Join-5865F2?logo=discord&logoColor=white" alt="Discord" /></a>
 </p>
@@ -45,9 +45,9 @@ Start with a short intent, see what is in progress, and open the linked specific
 
 Everything lives in `.specweave/increments/NNNN-slug/`: `spec.md`, `tasks.md` (+ the rendered `SW:BOARD`), `ledger.jsonl`, `handoff.md`, `reports/`.
 
-## The ten skills
+## The eleven skills
 
-The CLI is the product and it runs in any AI tool or in CI. These ten focused skills expose the workflow to compatible coding tools. Install domain expertise separately when it helps.
+The CLI is the product and it runs in any AI tool or in CI. These eleven focused skills expose the workflow to compatible coding tools. Install domain expertise separately when it helps.
 
 | Skill | Use it for |
 |-------|------------|
@@ -61,6 +61,7 @@ The CLI is the product and it runs in any AI tool or in CI. These ten focused sk
 | `sw:done` | Verify, review check, `specweave complete`. |
 | `sw:sync` | GitHub, Jira and Azure DevOps: push, pull, status, setup. |
 | `sw:handoff` | A one-page, secret-scrubbed continuation doc. |
+| `sw:jev` | Closed-set decisions in ~250 ms via Jev (TypeSafe System One). |
 
 Five longer procedures (tdd-cycle, e2e, debug, diagrams, release-expert) live in `skills-optional/` and install on demand with [vskill](https://www.npmjs.com/package/vskill).
 
@@ -78,7 +79,7 @@ specweave update
 There is no alias routing: a 1.x slug simply has no skill behind it. The old-to-new map —
 every removed skill, the skill or CLI command that replaced it, and the ones that moved to
 `skills-optional/` — is `removedIn2_0` in
-[`plugins/specweave/marketplace.json`](plugins/specweave/marketplace.json).
+[`plugins/specweave/marketplace.json`](https://github.com/anton-abyzov/specweave/blob/develop/plugins/specweave/marketplace.json).
 
 <br/>
 
@@ -140,7 +141,7 @@ Cursor tells AI "use Tailwind." SpecWeave tells AI "build a checkout flow agains
 
 **LSP Code Intelligence** — 198x faster than grep, 0 false positives. Semantic references, definitions, and types.
 
-**10 skills, not 51** — see [The ten skills](#the-ten-skills) above. Plus five standalone skills for non-Claude tools.
+**11 skills, not 51** — see [The eleven skills](#the-eleven-skills) above. Plus six standalone skills for non-Claude tools.
 
 **External Sync** — `specweave sync push|pull|status|setup`. GitHub is first-class; Jira and Azure DevOps are opt-in.
 
@@ -172,7 +173,7 @@ npx vskill eval run my-skill                  # Run eval suite
 
 ## Contributing
 
-Inside this repo dependency install scripts are disabled (`.npmrc`): run `npm ci`, then `npm run setup` (rebuilds the allowlisted native deps), and `npm run security:scan` before pushing — see [SECURITY.md](SECURITY.md).
+Inside this repo dependency install scripts are disabled (`.npmrc`): run `npm ci`, then `npm run setup` (rebuilds the allowlisted native deps), and `npm run security:scan` before pushing — see [SECURITY.md](https://github.com/anton-abyzov/specweave/blob/develop/SECURITY.md).
 
 ## Community
 

package/bin/specweave.js

@@ -448,6 +448,34 @@ program
     });
   });
 
+// Jev command - TypeSafe System One: fast, cheap, calibrated closed-set decisions
+program
+  .command('jev <action> [args...]')
+  .description('Jev (System One): doctor | setup | ask | route | task | guard | screen | failure | browse | usage')
+  .option('--json', 'Machine-readable JSON output')
+  .option('--provider <name>', 'setup: openrouter | typesafe')
+  .option('--model <model>', 'setup: model id (defaults to the provider default)')
+  .option('--guard-bash', 'setup: enable the opt-in PreToolUse Bash guard')
+  .option('--no-guard-bash', 'setup: disable the Bash guard')
+  .option('--disable', 'setup: turn Jev off for this project')
+  .option('--state <value>', 'ask: state as JSON, plain text, @file or - for stdin')
+  .option('--questions <value>', 'ask: questions as JSON or @file')
+  .option('--choice <instructions>', 'ask: shorthand for one choice question')
+  .option('--option <key=description>', 'ask: one --choice option (repeatable)', (val, acc) => { (acc || []).push(val); return acc || [val]; }, [])
+  .option('--noul <instructions>', 'ask: shorthand for one noul (true/false probability) question')
+  .option('--increment <id>', 'task: increment id (defaults to the active one)')
+  .option('--goal <goal>', 'browse: what to accomplish')
+  .option('--url <url>', 'browse: starting URL')
+  .option('--allow-domain <domain>', 'browse: allowed origin (repeatable)', (val, acc) => { (acc || []).push(val); return acc || [val]; }, [])
+  .option('--input <Label=value>', 'browse: text the loop may type (repeatable)', (val, acc) => { (acc || []).push(val); return acc || [val]; }, [])
+  .option('--max-steps <n>', 'browse: step limit')
+  .option('--screenshot-dir <path>', 'browse: where to write screenshots')
+  .option('--allow-sensitive', 'browse: allow clicking sensitive controls')
+  .action(async (action, args, options) => {
+    const { jevCommand } = await import('../dist/src/cli/commands/jev.js');
+    process.exitCode = await jevCommand(action, args, options);
+  });
+
 // Next ID command - Return the next available increment number
 program
   .command('next-id')

package/dist/src/cli/commands/jev-helpers.d.ts

@@ -0,0 +1,148 @@
+/**
+ * `specweave jev` — the local-environment half of the command.
+ *
+ * Argument parsing, the shipped-skill roster, `.specweave/config.json` writes, the
+ * shared exit codes and printers, and the two environment subcommands (`doctor`,
+ * `setup`). `jev.ts` keeps the dispatcher and the decision subcommands.
+ *
+ * Nothing here ever reads, prints or stores an API key VALUE — only env var NAMES.
+ *
+ * @module cli/commands/jev-helpers
+ */
+import { JevClient, runBrowse, type Json, type Question } from '../../core/jev/index.js';
+/** Exit codes shared by every `specweave jev` subcommand (documented in the skill). */
+export declare const EXIT: {
+    readonly ok: 0;
+    readonly error: 1;
+    readonly warn: 2;
+    readonly deny: 3;
+    /** Jev is disabled or has no key — agents treat this as "continue without Jev". */
+    readonly unavailable: 4;
+};
+/** Where the opt-in PreToolUse Bash guard marker lives. */
+export declare function guardMarkerPath(projectRoot: string): string;
+/** Create or remove the Bash guard marker. Returns true when the marker exists after the call. */
+export declare function setGuardMarker(projectRoot: string, on: boolean): boolean;
+/**
+ * Merge a patch into the `jev` section of `.specweave/config.json`, keeping every
+ * other key (and every other jev key) untouched. Returns the config path written.
+ */
+export declare function mergeJevConfig(projectRoot: string, patch: Record<string, unknown>): string;
+/** The installed specweave package root (walks up from this module). */
+export declare function packageRoot(): string;
+export interface ProjectHookState {
+    /** Absolute path of `<projectRoot>/.claude/settings.json` (whether or not it exists). */
+    path: string;
+    present: boolean;
+    /** Set when the settings file could not be read or written; it was left untouched. */
+    error?: string;
+}
+/** `<projectRoot>/.claude/settings.json`. */
+export declare function projectSettingsPath(projectRoot: string): string;
+/**
+ * The exact command the hook entry runs.
+ *
+ * Absolute, because `CLAUDE_PLUGIN_ROOT` is NOT set for hooks declared in
+ * settings.json — `${CLAUDE_PLUGIN_ROOT}` would expand to nothing. `run.mjs`
+ * resolves its own plugin root from `import.meta.url`, so an absolute path is
+ * all it needs.
+ */
+export declare function jevHookCommand(root?: string): string;
+/** Is the Jev PreToolUse hook registered for this project right now? */
+export declare function readProjectHook(projectRoot: string): ProjectHookState;
+/**
+ * Register or remove the Jev Bash guard in `<projectRoot>/.claude/settings.json`.
+ *
+ * Idempotent: an entry already pointing at a `hooks/run.mjs pre-tool-use` is
+ * rewritten in place (so a moved or reinstalled package updates rather than
+ * duplicates) and never reordered. Removal takes out exactly our entries — other
+ * PreToolUse groups survive — and then deletes the empty array and keys it left
+ * behind. Every other key in the file is preserved byte-for-byte through the
+ * JSON round trip.
+ *
+ * A settings.json that is missing or malformed is never overwritten blind: a
+ * malformed file comes back as `{ error }` and is left exactly as it was.
+ */
+export declare function setProjectHook(projectRoot: string, on: boolean, packageDir?: string): ProjectHookState;
+export interface SkillEntry {
+    name: string;
+    description: string;
+}
+/**
+ * Roster used when the shipped `plugins/specweave/skills/` tree cannot be read
+ * (global install layouts differ). Keeps `jev route` useful everywhere.
+ */
+export declare const FALLBACK_SKILLS: readonly SkillEntry[];
+/**
+ * Shipped skill names + their frontmatter descriptions, for the SKILL_ROUTE question.
+ * Falls back to {@link FALLBACK_SKILLS} when the plugin tree is unreadable.
+ */
+export declare function skillRoster(root?: string): SkillEntry[];
+export interface ReadSources {
+    cwd: string;
+    /** Injected stdin (tests); when absent stdin is read from fd 0. */
+    stdin?: string;
+}
+/** Read stdin synchronously. Returns '' when there is nothing to read. */
+export declare function readStdin(src: ReadSources): string;
+/**
+ * Resolve a `--state` / `--questions` style argument:
+ * `-` → stdin, `@path` → file contents, anything else → the literal value.
+ */
+export declare function readArgValue(value: string | undefined, src: ReadSources): string | undefined;
+/** Resolve a `[file|-]` positional: missing or `-` → stdin, otherwise the file. */
+export declare function readFileOrStdin(value: string | undefined, src: ReadSources): string;
+/** JSON when the text parses as JSON, the plain string otherwise. */
+export declare function parseJsonOrText(text: string): Json;
+/** Parse a `--questions` payload into the client's question map. */
+export declare function parseQuestions(text: string): Record<string, Question>;
+/** Split repeatable `key=value` flags (`--option`, `--input`) into a record. */
+export declare function parseKeyValues(list: string[] | undefined, flag: string): Record<string, string>;
+/**
+ * Build questions from the `--choice` / `--option` / `--noul` shorthands.
+ * Returns an empty map when no shorthand was used.
+ */
+export declare function shorthandQuestions(opts: {
+    choice?: string;
+    option?: string[];
+    noul?: string;
+}): Record<string, Question>;
+/** Body of a `## <heading>` section of a markdown doc, up to the next `## `. */
+export declare function extractSection(markdown: string, heading: string): string;
+/** `0.0000155` → `$0.0000155`; small enough that toFixed(2) would read as $0.00. */
+export declare function formatCost(cost: number): string;
+/** `{a: 0.91, b: 0.09}` → `a 0.91 · b 0.09`, highest first, top 5. */
+export declare function formatProbabilities(probabilities: Record<string, number>): string;
+export interface JevCommandOptions {
+    json?: boolean;
+    provider?: string;
+    model?: string;
+    guardBash?: boolean;
+    disable?: boolean;
+    state?: string;
+    questions?: string;
+    choice?: string;
+    option?: string[];
+    noul?: string;
+    increment?: string;
+    goal?: string;
+    url?: string;
+    allowDomain?: string[];
+    input?: string[];
+    maxSteps?: string | number;
+    screenshotDir?: string;
+    allowSensitive?: boolean;
+    cwd?: string;
+    env?: NodeJS.ProcessEnv;
+    fetch?: typeof fetch;
+    client?: JevClient;
+    stdin?: string;
+    browse?: typeof runBrowse;
+}
+export declare const out: (s: string) => void;
+export declare const err: (s: string) => void;
+export declare const json: (value: unknown) => void;
+export declare function messageOf(error: unknown): string;
+export declare function jevDoctor(root: string, env: NodeJS.ProcessEnv, opts: JevCommandOptions): Promise<number>;
+export declare function jevSetup(root: string, env: NodeJS.ProcessEnv, opts: JevCommandOptions): Promise<number>;
+//# sourceMappingURL=jev-helpers.d.ts.map

package/dist/src/cli/commands/jev-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jev-helpers.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/jev-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,EAIL,SAAS,EAKT,SAAS,EAGT,KAAK,IAAI,EACT,KAAK,QAAQ,EACd,MAAM,yBAAyB,CAAC;AAEjC,uFAAuF;AACvF,eAAO,MAAM,IAAI;;;;;IAKf,mFAAmF;;CAE3E,CAAC;AAEX,2DAA2D;AAC3D,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED,kGAAkG;AAClG,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,GAAG,OAAO,CAaxE;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAoC1F;AAED,wEAAwE;AACxE,wBAAgB,WAAW,IAAI,MAAM,CAcpC;AAsBD,MAAM,WAAW,gBAAgB;IAC/B,yFAAyF;IACzF,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,sFAAsF;IACtF,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,6CAA6C;AAC7C,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,IAAI,GAAE,MAAsB,GAAG,MAAM,CAEnE;AAsCD,wEAAwE;AACxE,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,gBAAgB,CAQrE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAC5B,WAAW,EAAE,MAAM,EACnB,EAAE,EAAE,OAAO,EACX,UAAU,GAAE,MAAsB,GACjC,gBAAgB,CA2DlB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAE,SAAS,UAAU,EAYhD,CAAC;AAqBF;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,GAAE,MAAsB,GAAG,UAAU,EAAE,CAmBtE;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,mEAAmE;IACnE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,0EAA0E;AAC1E,wBAAgB,SAAS,CAAC,GAAG,EAAE,WAAW,GAAG,MAAM,CAOlD;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,EAAE,WAAW,GAAG,MAAM,GAAG,SAAS,CAO5F;AAED,mFAAmF;AACnF,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,EAAE,WAAW,GAAG,MAAM,CAInF;AAED,qEAAqE;AACrE,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAQlD;AAED,oEAAoE;AACpE,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAWrE;AAED,gFAAgF;AAChF,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAQ/F;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,GAAG,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAa3B;AAED,gFAAgF;AAChF,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAOxE;AAED,oFAAoF;AACpF,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAG/C;AAED,sEAAsE;AACtE,wBAAgB,mBAAmB,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAMjF;AAID,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,OAAO,CAAC;IAEf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,OAAO,CAAC;IAEzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,SAAS,CAAC;CAC3B;AAED,eAAO,MAAM,GAAG,GAAI,GAAG,MAAM,KAAG,IAA2C,CAAC;AAC5E,eAAO,MAAM,GAAG,GAAI,GAAG,MAAM,KAAG,IAA2C,CAAC;AAC5E,eAAO,MAAM,IAAI,GAAI,OAAO,OAAO,KAAG,IAAgD,CAAC;AAEvF,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEhD;AAKD,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAkE9G;AAID,wBAAsB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CA0F7G"}