winter-super-cli 2026.5.15

package/resources/local/codex/skills/.system/skill-installer/scripts/install-skill-from-github.py

@@ -0,0 +1,308 @@
+#!/usr/bin/env python3
+"""Install a skill from a GitHub repo path into $CODEX_HOME/skills."""
+
+from __future__ import annotations
+
+import argparse
+from dataclasses import dataclass
+import os
+import shutil
+import subprocess
+import sys
+import tempfile
+import urllib.error
+import urllib.parse
+import zipfile
+
+from github_utils import github_request
+DEFAULT_REF = "main"
+
+
+@dataclass
+class Args:
+    url: str | None = None
+    repo: str | None = None
+    path: list[str] | None = None
+    ref: str = DEFAULT_REF
+    dest: str | None = None
+    name: str | None = None
+    method: str = "auto"
+
+
+@dataclass
+class Source:
+    owner: str
+    repo: str
+    ref: str
+    paths: list[str]
+    repo_url: str | None = None
+
+
+class InstallError(Exception):
+    pass
+
+
+def _codex_home() -> str:
+    return os.environ.get("CODEX_HOME", os.path.expanduser("~/.codex"))
+
+
+def _tmp_root() -> str:
+    base = os.path.join(tempfile.gettempdir(), "codex")
+    os.makedirs(base, exist_ok=True)
+    return base
+
+
+def _request(url: str) -> bytes:
+    return github_request(url, "codex-skill-install")
+
+
+def _parse_github_url(url: str, default_ref: str) -> tuple[str, str, str, str | None]:
+    parsed = urllib.parse.urlparse(url)
+    if parsed.netloc != "github.com":
+        raise InstallError("Only GitHub URLs are supported for download mode.")
+    parts = [p for p in parsed.path.split("/") if p]
+    if len(parts) < 2:
+        raise InstallError("Invalid GitHub URL.")
+    owner, repo = parts[0], parts[1]
+    ref = default_ref
+    subpath = ""
+    if len(parts) > 2:
+        if parts[2] in ("tree", "blob"):
+            if len(parts) < 4:
+                raise InstallError("GitHub URL missing ref or path.")
+            ref = parts[3]
+            subpath = "/".join(parts[4:])
+        else:
+            subpath = "/".join(parts[2:])
+    return owner, repo, ref, subpath or None
+
+
+def _download_repo_zip(owner: str, repo: str, ref: str, dest_dir: str) -> str:
+    zip_url = f"https://codeload.github.com/{owner}/{repo}/zip/{ref}"
+    zip_path = os.path.join(dest_dir, "repo.zip")
+    try:
+        payload = _request(zip_url)
+    except urllib.error.HTTPError as exc:
+        raise InstallError(f"Download failed: HTTP {exc.code}") from exc
+    with open(zip_path, "wb") as file_handle:
+        file_handle.write(payload)
+    with zipfile.ZipFile(zip_path, "r") as zip_file:
+        _safe_extract_zip(zip_file, dest_dir)
+        top_levels = {name.split("/")[0] for name in zip_file.namelist() if name}
+    if not top_levels:
+        raise InstallError("Downloaded archive was empty.")
+    if len(top_levels) != 1:
+        raise InstallError("Unexpected archive layout.")
+    return os.path.join(dest_dir, next(iter(top_levels)))
+
+
+def _run_git(args: list[str]) -> None:
+    result = subprocess.run(args, stdout=subprocess.PIPE, stderr=subprocess.PIPE, text=True)
+    if result.returncode != 0:
+        raise InstallError(result.stderr.strip() or "Git command failed.")
+
+
+def _safe_extract_zip(zip_file: zipfile.ZipFile, dest_dir: str) -> None:
+    dest_root = os.path.realpath(dest_dir)
+    for info in zip_file.infolist():
+        extracted_path = os.path.realpath(os.path.join(dest_dir, info.filename))
+        if extracted_path == dest_root or extracted_path.startswith(dest_root + os.sep):
+            continue
+        raise InstallError("Archive contains files outside the destination.")
+    zip_file.extractall(dest_dir)
+
+
+def _validate_relative_path(path: str) -> None:
+    if os.path.isabs(path) or os.path.normpath(path).startswith(".."):
+        raise InstallError("Skill path must be a relative path inside the repo.")
+
+
+def _validate_skill_name(name: str) -> None:
+    altsep = os.path.altsep
+    if not name or os.path.sep in name or (altsep and altsep in name):
+        raise InstallError("Skill name must be a single path segment.")
+    if name in (".", ".."):
+        raise InstallError("Invalid skill name.")
+
+
+def _git_sparse_checkout(repo_url: str, ref: str, paths: list[str], dest_dir: str) -> str:
+    repo_dir = os.path.join(dest_dir, "repo")
+    clone_cmd = [
+        "git",
+        "clone",
+        "--filter=blob:none",
+        "--depth",
+        "1",
+        "--sparse",
+        "--single-branch",
+        "--branch",
+        ref,
+        repo_url,
+        repo_dir,
+    ]
+    try:
+        _run_git(clone_cmd)
+    except InstallError:
+        _run_git(
+            [
+                "git",
+                "clone",
+                "--filter=blob:none",
+                "--depth",
+                "1",
+                "--sparse",
+                "--single-branch",
+                repo_url,
+                repo_dir,
+            ]
+        )
+    _run_git(["git", "-C", repo_dir, "sparse-checkout", "set", *paths])
+    _run_git(["git", "-C", repo_dir, "checkout", ref])
+    return repo_dir
+
+
+def _validate_skill(path: str) -> None:
+    if not os.path.isdir(path):
+        raise InstallError(f"Skill path not found: {path}")
+    skill_md = os.path.join(path, "SKILL.md")
+    if not os.path.isfile(skill_md):
+        raise InstallError("SKILL.md not found in selected skill directory.")
+
+
+def _copy_skill(src: str, dest_dir: str) -> None:
+    os.makedirs(os.path.dirname(dest_dir), exist_ok=True)
+    if os.path.exists(dest_dir):
+        raise InstallError(f"Destination already exists: {dest_dir}")
+    shutil.copytree(src, dest_dir)
+
+
+def _build_repo_url(owner: str, repo: str) -> str:
+    return f"https://github.com/{owner}/{repo}.git"
+
+
+def _build_repo_ssh(owner: str, repo: str) -> str:
+    return f"git@github.com:{owner}/{repo}.git"
+
+
+def _prepare_repo(source: Source, method: str, tmp_dir: str) -> str:
+    if method in ("download", "auto"):
+        try:
+            return _download_repo_zip(source.owner, source.repo, source.ref, tmp_dir)
+        except InstallError as exc:
+            if method == "download":
+                raise
+            err_msg = str(exc)
+            if "HTTP 401" in err_msg or "HTTP 403" in err_msg or "HTTP 404" in err_msg:
+                pass
+            else:
+                raise
+    if method in ("git", "auto"):
+        repo_url = source.repo_url or _build_repo_url(source.owner, source.repo)
+        try:
+            return _git_sparse_checkout(repo_url, source.ref, source.paths, tmp_dir)
+        except InstallError:
+            repo_url = _build_repo_ssh(source.owner, source.repo)
+            return _git_sparse_checkout(repo_url, source.ref, source.paths, tmp_dir)
+    raise InstallError("Unsupported method.")
+
+
+def _resolve_source(args: Args) -> Source:
+    if args.url:
+        owner, repo, ref, url_path = _parse_github_url(args.url, args.ref)
+        if args.path is not None:
+            paths = list(args.path)
+        elif url_path:
+            paths = [url_path]
+        else:
+            paths = []
+        if not paths:
+            raise InstallError("Missing --path for GitHub URL.")
+        return Source(owner=owner, repo=repo, ref=ref, paths=paths)
+
+    if not args.repo:
+        raise InstallError("Provide --repo or --url.")
+    if "://" in args.repo:
+        return _resolve_source(
+            Args(url=args.repo, repo=None, path=args.path, ref=args.ref)
+        )
+
+    repo_parts = [p for p in args.repo.split("/") if p]
+    if len(repo_parts) != 2:
+        raise InstallError("--repo must be in owner/repo format.")
+    if not args.path:
+        raise InstallError("Missing --path for --repo.")
+    paths = list(args.path)
+    return Source(
+        owner=repo_parts[0],
+        repo=repo_parts[1],
+        ref=args.ref,
+        paths=paths,
+    )
+
+
+def _default_dest() -> str:
+    return os.path.join(_codex_home(), "skills")
+
+
+def _parse_args(argv: list[str]) -> Args:
+    parser = argparse.ArgumentParser(description="Install a skill from GitHub.")
+    parser.add_argument("--repo", help="owner/repo")
+    parser.add_argument("--url", help="https://github.com/owner/repo[/tree/ref/path]")
+    parser.add_argument(
+        "--path",
+        nargs="+",
+        help="Path(s) to skill(s) inside repo",
+    )
+    parser.add_argument("--ref", default=DEFAULT_REF)
+    parser.add_argument("--dest", help="Destination skills directory")
+    parser.add_argument(
+        "--name", help="Destination skill name (defaults to basename of path)"
+    )
+    parser.add_argument(
+        "--method",
+        choices=["auto", "download", "git"],
+        default="auto",
+    )
+    return parser.parse_args(argv, namespace=Args())
+
+
+def main(argv: list[str]) -> int:
+    args = _parse_args(argv)
+    try:
+        source = _resolve_source(args)
+        source.ref = source.ref or args.ref
+        if not source.paths:
+            raise InstallError("No skill paths provided.")
+        for path in source.paths:
+            _validate_relative_path(path)
+        dest_root = args.dest or _default_dest()
+        tmp_dir = tempfile.mkdtemp(prefix="skill-install-", dir=_tmp_root())
+        try:
+            repo_root = _prepare_repo(source, args.method, tmp_dir)
+            installed = []
+            for path in source.paths:
+                skill_name = args.name if len(source.paths) == 1 else None
+                skill_name = skill_name or os.path.basename(path.rstrip("/"))
+                _validate_skill_name(skill_name)
+                if not skill_name:
+                    raise InstallError("Unable to derive skill name.")
+                dest_dir = os.path.join(dest_root, skill_name)
+                if os.path.exists(dest_dir):
+                    raise InstallError(f"Destination already exists: {dest_dir}")
+                skill_src = os.path.join(repo_root, path)
+                _validate_skill(skill_src)
+                _copy_skill(skill_src, dest_dir)
+                installed.append((skill_name, dest_dir))
+        finally:
+            if os.path.isdir(tmp_dir):
+                shutil.rmtree(tmp_dir, ignore_errors=True)
+        for skill_name, dest_dir in installed:
+            print(f"Installed {skill_name} to {dest_dir}")
+        return 0
+    except InstallError as exc:
+        print(f"Error: {exc}", file=sys.stderr)
+        return 1
+
+
+if __name__ == "__main__":
+    raise SystemExit(main(sys.argv[1:]))

package/resources/local/codex/skills/.system/skill-installer/scripts/list-skills.py

@@ -0,0 +1,107 @@
+#!/usr/bin/env python3
+"""List skills from a GitHub repo path."""
+
+from __future__ import annotations
+
+import argparse
+import json
+import os
+import sys
+import urllib.error
+
+from github_utils import github_api_contents_url, github_request
+
+DEFAULT_REPO = "openai/skills"
+DEFAULT_PATH = "skills/.curated"
+DEFAULT_REF = "main"
+
+
+class ListError(Exception):
+    pass
+
+
+class Args(argparse.Namespace):
+    repo: str
+    path: str
+    ref: str
+    format: str
+
+
+def _request(url: str) -> bytes:
+    return github_request(url, "codex-skill-list")
+
+
+def _codex_home() -> str:
+    return os.environ.get("CODEX_HOME", os.path.expanduser("~/.codex"))
+
+
+def _installed_skills() -> set[str]:
+    root = os.path.join(_codex_home(), "skills")
+    if not os.path.isdir(root):
+        return set()
+    entries = set()
+    for name in os.listdir(root):
+        path = os.path.join(root, name)
+        if os.path.isdir(path):
+            entries.add(name)
+    return entries
+
+
+def _list_skills(repo: str, path: str, ref: str) -> list[str]:
+    api_url = github_api_contents_url(repo, path, ref)
+    try:
+        payload = _request(api_url)
+    except urllib.error.HTTPError as exc:
+        if exc.code == 404:
+            raise ListError(
+                "Skills path not found: "
+                f"https://github.com/{repo}/tree/{ref}/{path}"
+            ) from exc
+        raise ListError(f"Failed to fetch skills: HTTP {exc.code}") from exc
+    data = json.loads(payload.decode("utf-8"))
+    if not isinstance(data, list):
+        raise ListError("Unexpected skills listing response.")
+    skills = [item["name"] for item in data if item.get("type") == "dir"]
+    return sorted(skills)
+
+
+def _parse_args(argv: list[str]) -> Args:
+    parser = argparse.ArgumentParser(description="List skills.")
+    parser.add_argument("--repo", default=DEFAULT_REPO)
+    parser.add_argument(
+        "--path",
+        default=DEFAULT_PATH,
+        help="Repo path to list (default: skills/.curated)",
+    )
+    parser.add_argument("--ref", default=DEFAULT_REF)
+    parser.add_argument(
+        "--format",
+        choices=["text", "json"],
+        default="text",
+        help="Output format",
+    )
+    return parser.parse_args(argv, namespace=Args())
+
+
+def main(argv: list[str]) -> int:
+    args = _parse_args(argv)
+    try:
+        skills = _list_skills(args.repo, args.path, args.ref)
+        installed = _installed_skills()
+        if args.format == "json":
+            payload = [
+                {"name": name, "installed": name in installed} for name in skills
+            ]
+            print(json.dumps(payload))
+        else:
+            for idx, name in enumerate(skills, start=1):
+                suffix = " (already installed)" if name in installed else ""
+                print(f"{idx}. {name}{suffix}")
+        return 0
+    except ListError as exc:
+        print(f"Error: {exc}", file=sys.stderr)
+        return 1
+
+
+if __name__ == "__main__":
+    raise SystemExit(main(sys.argv[1:]))

package/resources/local/codex/skills/vibefigma/SKILL.md

@@ -0,0 +1,87 @@
+---
+name: vibefigma
+description: Convert Figma designs to production-ready React components with Tailwind CSS. Use when user provides a Figma URL, asks to convert Figma designs to React/code, wants to extract components from Figma, or mentions "vibefigma". Requires a Figma access token (via --token flag, FIGMA_TOKEN env var, or .env file).
+---
+
+# VibeFigma - Figma to React Converter
+
+Convert Figma designs into React components with Tailwind CSS using the `vibefigma` CLI.
+
+## Usage
+
+### Interactive Mode (Recommended for first-time users)
+
+```bash
+npx vibefigma --interactive
+```
+
+Prompts for Figma URL, access token, and output paths.
+
+### Direct Command
+
+```bash
+npx vibefigma "https://www.figma.com/design/FILE_ID?node-id=X-Y" --token FIGMA_TOKEN
+```
+
+### With Environment Variable
+
+```bash
+export FIGMA_TOKEN=your_token
+npx vibefigma "https://www.figma.com/design/FILE_ID?node-id=X-Y"
+```
+
+### Using .env File
+
+The user can add their Figma access token to a `.env` file in their project root:
+
+```env
+FIGMA_TOKEN=your_token_here
+```
+
+Then run:
+
+```bash
+npx vibefigma "https://www.figma.com/design/FILE_ID?node-id=X-Y"
+```
+
+Note: If the token is not configured, vibefigma will throw an error. Only then inform the user about the token requirement.
+
+## Common Options
+
+| Option | Description |
+|--------|-------------|
+| `-t, --token <token>` | Figma access token |
+| `-c, --component <path>` | Output path (default: `./src/components/[Name].tsx`) |
+| `-a, --assets <dir>` | Assets directory (default: `./public`) |
+| `-f, --force` | Overwrite existing files without confirmation |
+| `--no-tailwind` | Generate regular CSS instead |
+
+## Getting a Figma Access Token
+
+1. Go to [Figma Account Settings](https://www.figma.com/settings)
+2. Scroll to **Personal Access Tokens**
+3. Click **Generate new token** → name it → copy immediately
+4. Store it securely in a `.env` file or pass via `--token` flag
+
+## Workflow
+
+1. Get Figma URL with specific node selected (frame/component to convert)
+2. **Check if output file already exists** at the target path (default: `./src/components/[Name].tsx` or user-specified path)
+3. If file exists, ask the user for confirmation before overwriting, then use the `--force` flag
+4. Run: `npx vibefigma "<URL>" -c <output-path>` (add `--force` if overwriting confirmed)
+   - User configures token in .env or via --token flag
+5. If vibefigma throws a token error, inform the user about the token requirement
+6. Review generated component
+7. If code needs cleanup, see `references/responsive-cleanup.md` for making code responsive and production-ready
+
+## Output
+
+VibeFigma generates:
+- React component (`.tsx`) with Tailwind CSS classes
+- Assets (images/icons) in the assets directory
+
+## Notes
+
+- Always select a specific node/frame in Figma URL for best results
+- Generated code may need manual cleanup for production use
+- See `references/responsive-cleanup.md` for responsive design patterns

package/resources/local/codex/skills/vibefigma/references/responsive-cleanup.md

@@ -0,0 +1,180 @@
+# Making VibeFigma Output Responsive & Production-Ready
+
+Guide for cleaning up auto-generated React code while preserving visual fidelity.
+
+## Core Principle
+
+**ZERO VISUAL CHANGES** - The final output must render identically to the original design. Clean the code, not the design.
+
+## Remove Machine-Generated Junk Classes
+
+Strip these useless artifacts:
+- `origin-[...]` - transform origin classes
+- `bg-repeat`, `bg-scroll` - default background classes
+- `opacity-100`, `visible`, `static` - default value classes
+- `box-border`, `text-clip` - rarely needed
+- Excessive `z-index` stacking
+
+## Fix Fixed Pixel Values
+
+### Widths → Responsive Alternatives
+
+```jsx
+// Before
+<div className="w-[1440px]">
+
+// After - use max-width + auto margins
+<div className="w-full max-w-7xl mx-auto">
+```
+
+Common conversions:
+| Fixed Width | Responsive Alternative |
+|-------------|----------------------|
+| `w-[1440px]` | `max-w-7xl mx-auto` or `max-w-[1440px] mx-auto` |
+| `w-[1200px]` | `max-w-6xl mx-auto` |
+| `w-[800px]` | `max-w-3xl mx-auto` |
+| `w-[400px]` | `max-w-md` |
+
+### Heights → Flexible Alternatives
+
+```jsx
+// Before - rigid height
+<div className="h-[600px]">
+
+// After - minimum height (content can grow)
+<div className="min-h-[600px]">
+```
+
+Keep fixed heights on: hero sections, image containers, design-critical elements.
+
+## Replace Absolute Positioning with Flexbox/Grid
+
+```jsx
+// Before - positioning hack
+<div className="absolute left-[16px] top-[24px]">
+
+// After - proper layout
+<div className="flex items-center gap-4 p-6">
+```
+
+Common patterns:
+- Horizontal centering: `flex justify-center` or `mx-auto`
+- Vertical centering: `flex items-center`
+- Space between: `flex justify-between`
+- Grid layouts: `grid grid-cols-3 gap-4`
+
+## Make Images Responsive
+
+```jsx
+// Before
+<img className="w-[500px] h-[300px]" />
+
+// After - maintains aspect ratio, scales down
+<img className="w-full max-w-[500px] h-auto object-cover" />
+```
+
+## Consolidate Utility Classes
+
+```jsx
+// Before
+<div className="mt-4 mr-4 mb-4 ml-4">
+
+// After
+<div className="m-4">
+```
+
+## Add Responsive Breakpoints (When Needed)
+
+```jsx
+// Stack on mobile, row on desktop
+<div className="flex flex-col md:flex-row gap-4">
+
+// Full width on mobile, constrained on desktop
+<div className="w-full md:max-w-md">
+
+// Different padding by screen size
+<div className="p-4 md:p-8 lg:p-12">
+```
+
+## Preserve Colors Exactly
+
+Only use Tailwind presets if they're **exact matches**:
+- `#000000` → `text-black` ✓
+- `#ffffff` → `bg-white` ✓
+- `#f5f5f5` → Keep as `bg-[#f5f5f5]` (NOT `bg-gray-100`)
+
+When in doubt, keep the arbitrary value.
+
+## Add Interaction States (Without Changing Base Design)
+
+```jsx
+// Buttons
+<button className="bg-blue-500 hover:bg-blue-600 active:scale-95 transition-all">
+
+// Links
+<a className="text-blue-500 hover:text-blue-600 hover:underline">
+
+// Cards
+<div className="bg-white hover:shadow-lg transition-shadow cursor-pointer">
+```
+
+## Component Structure Cleanup
+
+### Use Semantic HTML
+
+```jsx
+// Before
+<div><div><div>...</div></div></div>
+
+// After
+<main>
+  <header>...</header>
+  <section>...</section>
+  <footer>...</footer>
+</main>
+```
+
+### Remove Empty Wrappers
+
+```jsx
+// Before
+<div>
+  <div>
+    <div className="text-lg">Hello</div>
+  </div>
+</div>
+
+// After
+<p className="text-lg">Hello</p>
+```
+
+## Example Transformation
+
+```jsx
+// Before - machine-generated mess
+<div className="w-[1440px] h-[800px] bg-[#ffffff] opacity-100 static absolute left-[0px] top-[0px]">
+  <div className="w-[1200px] mx-auto box-border">
+    <div className="origin-top-left">
+      <div className="text-[16px] text-[#000000] bg-repeat">Hello</div>
+    </div>
+  </div>
+</div>
+
+// After - clean and responsive
+<div className="w-full min-h-screen bg-white">
+  <div className="max-w-6xl mx-auto px-4">
+    <p className="text-base text-black">Hello</p>
+  </div>
+</div>
+```
+
+## Checklist Before Shipping
+
+- [ ] No fixed pixel widths on containers (use max-width)
+- [ ] No absolute positioning for layout (use flex/grid)
+- [ ] Images are responsive (max-w-full h-auto)
+- [ ] Removed all junk classes (opacity-100, static, etc.)
+- [ ] Added hover/focus states to interactive elements
+- [ ] Used semantic HTML elements
+- [ ] Removed unnecessary wrapper divs
+- [ ] Visual appearance matches original exactly