superskills 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024-2026 Play New
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,363 @@
+```
+   ____                       ____  __   _ ____
+  / ___| _   _ _ __   ___ _ _/ ___|| | _(_) | |___
+  \___ \| | | | '_ \ / _ \ '__\___ \| |/ / | | / __|
+   ___) | |_| | |_) |  __/ |  ___) |   <| | | \__ \
+  |____/ \__,_| .__/ \___|_| |____/|_|\_\_|_|_|___/
+              |_|
+```
+
+Five autonomous skills for AI-native product development.
+
+Two ways to use SuperSkills:
+
+1. **Existing project.** Copy one or more skills into any codebase. They work immediately as Claude Code slash commands. No scaffold, no dependencies, no lock-in.
+2. **New project.** Describe a business problem. SuperSkills generates a full Next.js + Supabase project with the five skills already configured.
+
+## What AI-native means
+
+Every component in a value chain evolves from custom-built to commodity. Databases took two decades. Data processing is getting there now. Building an AI-native product means understanding this movement and acting on three consequences:
+
+1. **What to automate.** Components that reached commodity (data storage, text extraction, basic analysis) get automated. No competitive advantage in doing them manually.
+2. **Where to differentiate.** The edge moves to what sits above commodity in the chain: connecting data sources nobody was combining, interpreting patterns in context, delivering findings to the person who can act on them before the window closes.
+3. **What to create.** Commodity processing opens opportunities that didn't exist before. A B2B distributor can now predict supplier delays from lead time trends and reroute orders automatically. That product wasn't viable when the analysis alone cost three analyst-weeks.
+
+Every skill checks code against four layers:
+
+| Layer | What it does |
+|-------|-------------|
+| **E**nrichment | Connect and normalize data from scattered sources (email, ERP, APIs, portals) |
+| **I**nference | Detect patterns, predict outcomes, flag anomalies |
+| **I**nterpretation | Decide what matters and how to frame it for the human |
+| **D**elivery | Push insights where people are, triggered by the right conditions |
+
+This is **EIID**. Discovery maps your business problem to these four layers. Every skill checks your code against this mapping.
+
+```
+  describe problem ──> discovery ──> tools ──> scaffold ──> working project
+       you              EIID        auto       auto         Next.js + Supabase
+                       analysis    selected   generated     + 5 autonomous skills
+```
+
+## Prerequisites
+
+**For standalone skills:** just Claude Code. Nothing else to install.
+
+**For the CLI (new project generation):**
+- Node.js 20 or later. Check with `node --version`.
+- An Anthropic API key: [console.anthropic.com/settings/keys](https://console.anthropic.com/settings/keys). Free tier available. Not needed from Claude Code.
+
+## Install
+
+```bash
+git clone https://github.com/Play-New/SuperSkills.git
+cd SuperSkills && npm install && npm run build && npm link
+```
+
+After `npm link`, the `superskills` command works globally.
+
+If you only need the standalone skills (no CLI), skip the install. Just clone and copy the skill folders into your project (see below).
+
+## Add skills to an existing project
+
+Each skill works standalone on any codebase. No CLI install, no scaffold, no API key.
+
+```bash
+# Clone once
+git clone https://github.com/Play-New/SuperSkills.git
+
+# Copy the skills you need into your project
+cp -r SuperSkills/skills/trust/.claude/ your-project/.claude/
+cp -r SuperSkills/skills/design/.claude/ your-project/.claude/
+```
+
+The `.claude/` folders merge. Open the project in Claude Code and run:
+
+```
+/trust-audit      OWASP Top 10 + GDPR scan on your existing code
+/design-review    Audit shadcn usage, a11y, tokens, responsive
+```
+
+That's it. The skills read your code, check it against their rules, and append findings to CLAUDE.md.
+
+### Add autonomous hooks (optional)
+
+Without hooks, you run skills manually via slash commands. With hooks, trust checks every file write automatically and tests run before every stop.
+
+```bash
+cp SuperSkills/skills/settings.json your-project/.claude/settings.json
+```
+
+If you already have a `.claude/settings.json`, merge the hooks manually instead of overwriting.
+
+This adds: security gate on every Write/Edit, security gate on Bash commands, test verification + full audit (trust, strategy, design) before stopping.
+
+### Available skills
+
+| Skill | What It Checks | Commands |
+|-------|---------------|----------|
+| **strategy** | EIID alignment, scope creep, opportunity suggestions | `/strategy-start`, `-init`, `-review` |
+| **design** | shadcnblocks/shadcn usage, WCAG 2.1 AA, design tokens | `/design-init`, `-review` |
+| **trust** | OWASP Top 10, GDPR, hardcoded secrets, injection, auth | `/trust-init`, `-audit` |
+| **testing** | vitest + Playwright, test pass/fail, coverage gaps | `/testing-init`, `-verify` |
+| **efficiency** | Bundle size, Core Web Vitals, N+1 queries, API costs | `/efficiency-init`, `-review` |
+
+All skills include best practices for Supabase, Vercel, Inngest, and Next.js. Each skill folder has a README with details.
+
+### As plugins (Claude Code or Cowork)
+
+Skills are also available as Claude Code plugins with namespaced commands (`/strategy:start` instead of `/strategy-start`).
+
+```bash
+# Load locally
+claude --plugin-dir SuperSkills/plugins/strategy
+
+# Or zip for Cowork
+cd plugins && zip -r strategy.zip strategy/
+# Drag into Cowork's Plugins tab
+```
+
+## Generate a new project
+
+For new projects, the CLI runs the full pipeline: describe the problem, analyze it through EIID, pick tools, generate everything.
+
+```bash
+superskills
+```
+
+It asks about your business problem step by step. If you don't have an API key set, it asks for one.
+
+Optional one-time setup (saves your API key so you don't paste it every time):
+
+```bash
+superskills init
+```
+
+### From Claude Code
+
+No Anthropic API key needed. Claude Code does the EIID analysis itself. SuperSkills only handles scaffolding.
+
+```bash
+superskills init    # one-time: saves API key + writes instructions to ~/.claude/CLAUDE.md
+```
+
+Then open Claude Code and describe the business problem. Claude Code will create a `discovery.json` and call `superskills scaffold --json --discovery discovery.json --output ./`.
+
+### After scaffold
+
+Scaffold prints exact next steps:
+
+```bash
+cd your-project
+npm install
+cp .env.example .env.local
+# Fill in the keys (scaffold tells you where to get each one)
+npx supabase start     # needs Docker
+npm run dev
+```
+
+Then open in Claude Code and run the init skills:
+
+```
+/strategy-start     Defines the project, maps EIID, writes CLAUDE.md
+/strategy-init      Validates the EIID mapping, sets priorities
+/design-init        Asks for brand, configures shadcnblocks + shadcn + tokens
+/trust-init         Sets up auth, RLS policies, CORS
+/efficiency-init    Sets performance budgets
+/testing-init       Configures vitest + Playwright, writes first smoke test
+```
+
+These run once. After that, hooks handle ongoing checks automatically.
+
+## EIID in practice
+
+Same distributor, layer by layer.
+
+**Enrichment.** Orders arrive as PDF, Excel, and plain text. The ERP uses SKU codes that don't match the supplier portal. Enrichment normalizes everything into one schema and links the IDs.
+
+**Inference.** One supplier's lead time went from 5 days to 8 over six weeks. DACH orders dropped 12% month-over-month. A pricing anomaly shows the same SKU costing 15% more through one channel. None of these are visible in a single source.
+
+**Interpretation.** The lead time increase matters: that supplier handles 30% of high-margin orders. The DACH drop matches last year's seasonal pattern. The pricing anomaly affects $40K/month. Supplier risk first, pricing second, DACH deprioritized.
+
+**Delivery.** Procurement manager gets a Slack message Tuesday morning with the supplier risk and a suggested reallocation. CFO gets a weekly email on the pricing anomaly. Regional manager gets nothing about DACH because it's seasonal noise.
+
+## What Gets Generated
+
+Given a business problem, scaffold produces a Next.js project with:
+
+- **CLAUDE.md** containing the strategic brief and EIID mapping
+- **Five subagents** in `.claude/agents/` that run specialized checks
+- **Eleven slash commands** in `.claude/skills/` (one entry point, five for initial setup, five for ongoing review)
+- **Claude Code hooks** in `.claude/settings.json` that trigger security and test checks automatically
+- **A first-run script** that detects when the project is opened for the first time and suggests what to do
+- **Next.js + Supabase + Inngest** application structure with delivery integrations
+- **Playwright and vitest** configured for E2E and unit testing
+
+## How Skills Run
+
+Skills are checklists with teeth. They check code, report findings to CLAUDE.md, and two of them block: **trust** blocks on security violations (credentials in code, injection, XSS, auth bypass, PII exposure), **testing** blocks when tests fail.
+
+**Automatically via hooks** (configured in `.claude/settings.json`):
+
+Fast gates during work, full audit at the end. Zero overhead while building. One comprehensive report before stopping.
+
+| When | What Happens |
+|------|-------------|
+| Session starts | Detects first run (missing node_modules, .env.local). Suggests init skills. |
+| Before a shell command runs | Fast gate on dangerous commands (credentials, rm -rf, injection). |
+| After a file is written or edited | Fast gate on obvious security issues (hardcoded secrets, injection). |
+| Before stopping | Two agents run. First: test verification (blocks if tests fail). Second: trust deep scan, strategy alignment, design rules. Both write findings to CLAUDE.md. |
+
+**On demand via slash commands:**
+
+```
+/strategy-start     Define project, map EIID, write CLAUDE.md (entry point)
+/strategy-review    EIID alignment + proactive opportunity scan
+/design-review      Audit shadcnblocks/shadcn usage, hard rules, a11y, tokens
+/trust-audit        OWASP Top 10 + GDPR checklist
+/efficiency-review  Bundle size, CWV, N+1 queries, cost report
+/testing-verify     Run full test suite, report failures
+```
+
+## Tool Stack
+
+SuperSkills picks tools based on the delivery channels and data sources in your EIID mapping. All tools are GDPR-verified.
+
+### Core (always included)
+
+| Tool | What It Does |
+|------|-------------|
+| **Supabase** | Database, auth, storage, pgvector for embeddings |
+| **Vercel** | Hosting, edge functions |
+| **Inngest** | Durable workflows, cron jobs, retry logic |
+| **Claude** | LLM for analysis and inference |
+| **OpenAI** | Embeddings |
+
+### Delivery (based on channels)
+
+| Tool | When Selected |
+|------|--------------|
+| **Brevo** | Email, SMS, or WhatsApp delivery |
+| **Telegram** | Telegram delivery |
+| **Slack** | Slack delivery |
+| **Discord** | Discord delivery |
+| **Baileys** | WhatsApp in development (unofficial, ban risk) |
+
+### Enrichment (based on data sources)
+
+| Tool | When Selected |
+|------|--------------|
+| **Apify** | Web scraping at scale (proxy management, rate limiting) |
+| **Supermemory** | Knowledge base connectors (Google Drive, Notion, OneDrive) |
+| **Playwright** | Browser-based scraping for dev and sites you control |
+
+### Testing (always included)
+
+| Tool | What It Does |
+|------|-------------|
+| **Playwright** | E2E browser tests, accessibility audits, visual regression |
+
+Playwright has two roles: testing (primary) and browser-based scraping (secondary). For production scraping at scale, Apify handles proxy rotation and cloud execution.
+
+If you want to review or change the auto-selected tools before scaffolding:
+
+```bash
+superskills tools
+```
+
+Print the full catalog:
+
+```bash
+superskills tools --catalog
+```
+
+## Pipeline Mode
+
+For automation and CI, pass JSON files instead of answering prompts:
+
+```bash
+superskills discovery --json --input brief.json --output discovery.json
+superskills scaffold --json --discovery discovery.json --output ./my-project
+```
+
+If you need to override tools in pipeline mode:
+
+```bash
+superskills tools --json --input discovery.json --output tools.json
+superskills scaffold --json --discovery discovery.json --tools tools.json --output ./my-project
+```
+
+### Input Format
+
+The discovery command accepts a JSON brief:
+
+```json
+{
+  "projectName": "order-automation",
+  "context": {
+    "forWhom": "client",
+    "companyName": "Acme Corp",
+    "businessDescription": "B2B hardware distribution, 200 employees",
+    "industry": "manufacturing"
+  },
+  "problem": "4 hours per day spent on manual order processing from email to ERP",
+  "desiredOutcome": "Automated order intake with anomaly detection",
+  "currentProcess": ["Check email for orders", "Copy data to Excel", "Enter into ERP"],
+  "availableData": ["Gmail", "ERP API", "Supplier portal"]
+}
+```
+
+Print the full JSON Schema with `superskills discovery --schema`.
+
+## Development
+
+### Setup
+
+```bash
+git clone https://github.com/Play-New/SuperSkills.git
+cd SuperSkills
+npm install
+```
+
+### Commands
+
+```bash
+npm test              # 98 tests across 5 files
+npm run type-check    # TypeScript strict mode
+npm run dev           # Run CLI in development mode
+npm run build         # Compile to dist/
+npm run lint          # ESLint
+```
+
+### Environment
+
+| Variable | Required | Default |
+|----------|----------|---------|
+| `ANTHROPIC_API_KEY` | Yes (for discovery) | Asked interactively if missing |
+| `SUPERSKILLS_MODEL` | No | `claude-opus-4-6` |
+
+### Tests
+
+98 tests across five files:
+
+| File | Count | What It Tests |
+|------|-------|--------------|
+| `analyze.test.ts` | 18 | Claude API mocking, JSON validation, markdown stripping |
+| `catalog.test.ts` | 24 | Channel mapping, tool selection, category handling |
+| `discovery-core.test.ts` | 10 | Validation pipeline, error transformation |
+| `scaffold.test.ts` | 26 | File generation, hooks, agents, skills, design tokens, Playwright, E2E |
+| `schema.test.ts` | 20 | Zod validation edge cases, defaults, JSON Schema output |
+
+## Conceptual References
+
+Three ideas shaped the design.
+
+**Value mapping** (Simon Wardley). Wardley Maps position each component on an evolution axis from genesis to commodity. Discovery uses this to assess which parts of a business process are ready for automation and which still need human judgment. A component at commodity stage (e.g., data storage) gets automated. One at genesis (e.g., a novel scoring model) gets flagged for human oversight.
+
+**Value movement in the AI era** (Sangeet Paul Choudary, *Reshuffle*). Choudary documents how AI commoditizes processing and pushes value toward orchestration and delivery. When any company can run the same model on the same data, the differentiator becomes what happens after the analysis: which findings reach which person, through which channel, triggered by which conditions. EIID ends with Delivery as a distinct layer because that is where the value concentrates.
+
+**Intelligence where the user is** (Peter Steinberger). Steinberger's work on OpenClaw and CLI-first development shows that tools integrated into existing workflows get adopted, while tools that require context-switching get ignored. SuperSkills generates Claude Code hooks and slash commands that run inside the editor. The developer never leaves the terminal.
+
+## License
+
+MIT

package/bin/superskills

@@ -0,0 +1,6 @@
+#!/usr/bin/env node
+
+import('../dist/index.js').catch((error) => {
+  console.error('Failed to load SuperSkills:', error.message);
+  process.exit(1);
+});

package/dist/catalog/index.d.ts

@@ -0,0 +1,11 @@
+import type { DiscoveryResult } from '../discovery/types.js';
+import type { Tool, ToolsCatalog, SelectionResult } from './types.js';
+export type { Tool, ToolsCatalog, ToolSuggestion, SelectionResult } from './types.js';
+export declare function loadCatalog(): Promise<ToolsCatalog>;
+export declare function getTool(catalog: ToolsCatalog, id: string): Tool | undefined;
+export declare function getToolsByCategory(catalog: ToolsCatalog, category: Tool['category']): Tool[];
+export declare function selectTools(discoveryResult: DiscoveryResult): Promise<SelectionResult>;
+export declare function formatToolsForDisplay(result: SelectionResult): string;
+export declare function getEnvVars(result: SelectionResult): string[];
+export declare function getSdkPackages(result: SelectionResult): string[];
+//# sourceMappingURL=index.d.ts.map

package/dist/catalog/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/catalog/index.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,IAAI,EAAE,YAAY,EAAkB,eAAe,EAAE,MAAM,YAAY,CAAC;AAEtF,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAOtF,wBAAsB,WAAW,IAAI,OAAO,CAAC,YAAY,CAAC,CAIzD;AAED,wBAAgB,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAE3E;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,CAE5F;AAED,wBAAsB,WAAW,CAAC,eAAe,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAgD5F;AAgHD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CA+BrE;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,EAAE,CAQ5D;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,EAAE,CAQhE"}

package/dist/catalog/index.js

@@ -0,0 +1,203 @@
+import fs from 'fs-extra';
+import path from 'path';
+import { fileURLToPath } from 'url';
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const CATALOG_PATH = path.resolve(__dirname, 'tools-catalog.json');
+let catalogCache = null;
+export async function loadCatalog() {
+    if (catalogCache)
+        return catalogCache;
+    catalogCache = await fs.readJSON(CATALOG_PATH);
+    return catalogCache;
+}
+export function getTool(catalog, id) {
+    return catalog.tools.find(t => t.id === id);
+}
+export function getToolsByCategory(catalog, category) {
+    return catalog.tools.filter(t => t.category === category);
+}
+export async function selectTools(discoveryResult) {
+    const catalog = await loadCatalog();
+    const suggestions = [];
+    // Core tools are always included
+    const coreTools = getToolsByCategory(catalog, 'core');
+    for (const tool of coreTools) {
+        suggestions.push({
+            tool,
+            reason: 'Core infrastructure for AI-native apps',
+            required: true
+        });
+    }
+    // Analyze delivery channels from EIID mapping
+    const deliveryChannels = discoveryResult.eiidMapping.delivery.channels
+        .map(c => c.toLowerCase());
+    const deliverySuggestions = selectDeliveryTools(catalog, deliveryChannels);
+    suggestions.push(...deliverySuggestions);
+    // Analyze data sources for enrichment
+    const dataSources = [
+        ...discoveryResult.availableData,
+        ...discoveryResult.eiidMapping.enrichment.sources
+    ].map(s => s.toLowerCase());
+    const enrichmentSuggestions = selectEnrichmentTools(catalog, dataSources);
+    suggestions.push(...enrichmentSuggestions);
+    // Always include Playwright for testing (also usable for enrichment scraping)
+    const playwright = getTool(catalog, 'playwright');
+    if (playwright) {
+        suggestions.push({
+            tool: playwright,
+            reason: 'E2E testing, accessibility auditing, and browser-based scraping',
+            required: true
+        });
+    }
+    // Group by category
+    return {
+        core: suggestions.filter(s => s.tool.category === 'core'),
+        delivery: suggestions.filter(s => s.tool.category === 'delivery' || s.tool.category === 'community'),
+        enrichment: suggestions.filter(s => s.tool.category === 'enrichment'),
+        testing: suggestions.filter(s => s.tool.category === 'testing'),
+        all: suggestions
+    };
+}
+function selectDeliveryTools(catalog, channels) {
+    const suggestions = [];
+    const addedIds = new Set();
+    const channelMapping = {
+        email: [{ toolId: 'brevo', reason: 'Email delivery via Brevo' }],
+        sms: [{ toolId: 'brevo', reason: 'SMS delivery via Brevo' }],
+        whatsapp: [
+            { toolId: 'brevo', reason: 'WhatsApp Business API via Brevo (official)' },
+            { toolId: 'baileys', reason: 'WhatsApp personal via Baileys (dev/testing only)' }
+        ],
+        telegram: [{ toolId: 'telegram', reason: 'Telegram bot notifications' }],
+        slack: [{ toolId: 'slack', reason: 'Slack channel notifications' }],
+        discord: [{ toolId: 'discord', reason: 'Discord bot notifications' }]
+    };
+    for (const channel of channels) {
+        // Normalize channel name
+        const normalizedChannel = normalizeChannel(channel);
+        const mappings = channelMapping[normalizedChannel];
+        if (mappings) {
+            for (const mapping of mappings) {
+                if (!addedIds.has(mapping.toolId)) {
+                    const tool = getTool(catalog, mapping.toolId);
+                    if (tool) {
+                        suggestions.push({
+                            tool,
+                            reason: mapping.reason,
+                            required: !tool.optional && !tool.risk
+                        });
+                        addedIds.add(mapping.toolId);
+                    }
+                }
+            }
+        }
+    }
+    // If no delivery tools selected but channels mentioned, add Brevo as default
+    if (suggestions.length === 0 && channels.length > 0) {
+        const brevo = getTool(catalog, 'brevo');
+        if (brevo) {
+            suggestions.push({
+                tool: brevo,
+                reason: 'Default delivery tool for email notifications',
+                required: true
+            });
+        }
+    }
+    return suggestions;
+}
+function selectEnrichmentTools(catalog, dataSources) {
+    const suggestions = [];
+    const addedIds = new Set();
+    // Check for scraping needs
+    const scrapingKeywords = ['web', 'scrape', 'crawl', 'website', 'portal', 'external'];
+    const needsScraping = dataSources.some(source => scrapingKeywords.some(kw => source.includes(kw)));
+    if (needsScraping) {
+        const apify = getTool(catalog, 'apify');
+        if (apify && !addedIds.has('apify')) {
+            suggestions.push({
+                tool: apify,
+                reason: 'Web scraping for external data sources',
+                required: false
+            });
+            addedIds.add('apify');
+        }
+    }
+    // Check for memory/RAG needs
+    const memoryKeywords = ['drive', 'notion', 'onedrive', 'documents', 'files'];
+    const needsMemory = dataSources.some(source => memoryKeywords.some(kw => source.includes(kw)));
+    if (needsMemory) {
+        const supermemory = getTool(catalog, 'supermemory');
+        if (supermemory && !addedIds.has('supermemory')) {
+            suggestions.push({
+                tool: supermemory,
+                reason: 'Memory API with connectors for Google Drive, Notion, OneDrive',
+                required: false
+            });
+            addedIds.add('supermemory');
+        }
+    }
+    return suggestions;
+}
+function normalizeChannel(channel) {
+    const normalized = channel.toLowerCase().trim();
+    // Handle common variations
+    if (normalized.includes('email') || normalized.includes('mail'))
+        return 'email';
+    if (normalized.includes('whatsapp') || normalized.includes('wa'))
+        return 'whatsapp';
+    if (normalized.includes('telegram') || normalized.includes('tg'))
+        return 'telegram';
+    if (normalized.includes('slack'))
+        return 'slack';
+    if (normalized.includes('discord'))
+        return 'discord';
+    if (normalized.includes('sms') || normalized.includes('text'))
+        return 'sms';
+    return normalized;
+}
+export function formatToolsForDisplay(result) {
+    const lines = [];
+    lines.push('CORE (always included):');
+    for (const s of result.core) {
+        lines.push(`  - ${s.tool.name}: ${s.tool.description}`);
+    }
+    if (result.delivery.length > 0) {
+        lines.push('\nDELIVERY:');
+        for (const s of result.delivery) {
+            const note = s.tool.risk ? ` [${s.tool.risk}]` : '';
+            lines.push(`  - ${s.tool.name}: ${s.reason}${note}`);
+        }
+    }
+    if (result.enrichment.length > 0) {
+        lines.push('\nENRICHMENT:');
+        for (const s of result.enrichment) {
+            lines.push(`  - ${s.tool.name}: ${s.reason}`);
+        }
+    }
+    if (result.testing.length > 0) {
+        lines.push('\nTESTING:');
+        for (const s of result.testing) {
+            lines.push(`  - ${s.tool.name}: ${s.reason}`);
+        }
+    }
+    return lines.join('\n');
+}
+export function getEnvVars(result) {
+    const envVars = new Set();
+    for (const s of result.all) {
+        for (const envVar of s.tool.envVars) {
+            envVars.add(envVar);
+        }
+    }
+    return Array.from(envVars).sort();
+}
+export function getSdkPackages(result) {
+    const packages = [];
+    for (const s of result.all) {
+        if (s.tool.sdk) {
+            packages.push(s.tool.sdk);
+        }
+    }
+    return packages;
+}
+//# sourceMappingURL=index.js.map

package/dist/catalog/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/catalog/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAMpC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/D,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;AAEnE,IAAI,YAAY,GAAwB,IAAI,CAAC;AAE7C,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,IAAI,YAAY;QAAE,OAAO,YAAY,CAAC;IACtC,YAAY,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC/C,OAAO,YAAa,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,OAAqB,EAAE,EAAU;IACvD,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAqB,EAAE,QAA0B;IAClF,OAAO,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,eAAgC;IAChE,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;IACpC,MAAM,WAAW,GAAqB,EAAE,CAAC;IAEzC,iCAAiC;IACjC,MAAM,SAAS,GAAG,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACtD,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,WAAW,CAAC,IAAI,CAAC;YACf,IAAI;YACJ,MAAM,EAAE,wCAAwC;YAChD,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;IACL,CAAC;IAED,8CAA8C;IAC9C,MAAM,gBAAgB,GAAG,eAAe,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ;SACnE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAE7B,MAAM,mBAAmB,GAAG,mBAAmB,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IAC3E,WAAW,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,CAAC;IAEzC,sCAAsC;IACtC,MAAM,WAAW,GAAG;QAClB,GAAG,eAAe,CAAC,aAAa;QAChC,GAAG,eAAe,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO;KAClD,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAE5B,MAAM,qBAAqB,GAAG,qBAAqB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC1E,WAAW,CAAC,IAAI,CAAC,GAAG,qBAAqB,CAAC,CAAC;IAE3C,8EAA8E;IAC9E,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAClD,IAAI,UAAU,EAAE,CAAC;QACf,WAAW,CAAC,IAAI,CAAC;YACf,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,iEAAiE;YACzE,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;IACL,CAAC;IAED,oBAAoB;IACpB,OAAO;QACL,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,MAAM,CAAC;QACzD,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,WAAW,CAAC;QACpG,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,YAAY,CAAC;QACrE,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC;QAC/D,GAAG,EAAE,WAAW;KACjB,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAqB,EAAE,QAAkB;IACpE,MAAM,WAAW,GAAqB,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAEnC,MAAM,cAAc,GAAyD;QAC3E,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;QAChE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;QAC5D,QAAQ,EAAE;YACR,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,4CAA4C,EAAE;YACzE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,kDAAkD,EAAE;SAClF;QACD,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;QACxE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;QACnE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;KACtE,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,yBAAyB;QACzB,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,cAAc,CAAC,iBAAiB,CAAC,CAAC;QAEnD,IAAI,QAAQ,EAAE,CAAC;YACb,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;oBAClC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;oBAC9C,IAAI,IAAI,EAAE,CAAC;wBACT,WAAW,CAAC,IAAI,CAAC;4BACf,IAAI;4BACJ,MAAM,EAAE,OAAO,CAAC,MAAM;4BACtB,QAAQ,EAAE,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI;yBACvC,CAAC,CAAC;wBACH,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;oBAC/B,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxC,IAAI,KAAK,EAAE,CAAC;YACV,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,KAAK;gBACX,MAAM,EAAE,+CAA+C;gBACvD,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAqB,EAAE,WAAqB;IACzE,MAAM,WAAW,GAAqB,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAEnC,2BAA2B;IAC3B,MAAM,gBAAgB,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IACrF,MAAM,aAAa,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAC9C,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CACjD,CAAC;IAEF,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxC,IAAI,KAAK,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,KAAK;gBACX,MAAM,EAAE,wCAAwC;gBAChD,QAAQ,EAAE,KAAK;aAChB,CAAC,CAAC;YACH,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED,6BAA6B;IAC7B,MAAM,cAAc,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAC7E,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAC5C,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAC/C,CAAC;IAEF,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACpD,IAAI,WAAW,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;YAChD,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,WAAW;gBACjB,MAAM,EAAE,+DAA+D;gBACvE,QAAQ,EAAE,KAAK;aAChB,CAAC,CAAC;YACH,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe;IACvC,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IAEhD,2BAA2B;IAC3B,IAAI,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,OAAO,CAAC;IAChF,IAAI,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,UAAU,CAAC;IACpF,IAAI,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,UAAU,CAAC;IACpF,IAAI,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACjD,IAAI,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IACrD,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAE5E,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAuB;IAC3D,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC5B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAuB;IAChD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;QAC3B,KAAK,MAAM,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAuB;IACpD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}