winter-super-cli 2026.6.22 → 2026.6.23

package/rule.md

@@ -0,0 +1,47 @@
+# Project Operating Rules
+
+File này là contract vận hành cho Winter trong project này.
+
+## Non-Negotiable Behavior
+- Không nói đã sửa/chạy/kiểm tra nếu chưa có tool result trong lượt đó.
+- Trước khi sửa code: đọc file liên quan, hiểu entrypoint/runtime path, rồi mới patch.
+- Giữ thay đổi hẹp, không revert code user không yêu cầu.
+- Sau khi sửa: chạy syntax check hoặc test gần nhất có thể.
+- Với model nhỏ: bắt buộc chia việc thành inspect -> implement -> verify -> report.
+
+## Project Instruction Files
+- [winter.md](./winter.md)
+- [CLAUDE.md](./CLAUDE.md)
+- [design.md](./design.md)
+- [skill.md](./skill.md)
+
+## Mandatory Local Resources
+- Karpathy tools: `resources\local\karpathy-tools\CLAUDE.md`
+- Agents guide: `resources\local\agents.md\AGENTS.md`
+- Design corpus: `resources\local\awesome-design-md\design-md`
+- Page Agent (GUI Agent): `resources\local\page-agent`
+  Apply: for browser automation, form filling, SaaS AI copilot, accessibility, and multi-page agent tasks. In-page JavaScript, no browser extension needed.
+
+## Resource Inventory
+- **agents.md**: 90 files, 2.4 MB
+- **awesome-design-md**: 142 files, 1.8 MB
+- **claude**: 971 files, 16.8 MB
+- **codex**: 259 files, 3.3 MB
+- **karpathy-tools**: 2 files, 5.9 KB
+- **page-agent**: 238 files, 1.3 MB
+- **ecc**: 320 files, 11.9 MB
+- **manifest.json**: 1 files, 2.9 KB
+
+## Extra Rule Files
+- Bundled Codex rules: default.rules
+- User Codex rules: default.rules
+
+## Acceptance Checklist
+- Đúng provider/model user chọn, không tự route sai.
+- Tool call phải dùng đúng schema; lỗi thì retry/recover trước khi báo user.
+- Memory/session phải giữ đúng project.
+- UI docs/design phải dùng local resources khi task liên quan.
+- Final answer ngắn, nêu file đã sửa và verification thật.
+
+---
+*File này được tự động tạo bởi Winter CLI.*

package/rules/default.md

@@ -0,0 +1,108 @@
+# ❄️ WINTER RULES
+# Coding and development guidelines
+
+## Security Rules
+
+### Command Allowlisting
+- Allowed commands: `git`, `npm`, `node`, `python`, `code`, `pnpm`, `yarn`, `bun`
+- Blocked: Dangerous commands like `rm -rf`, `format`, `del /f /s`
+- Always check command safety before execution
+
+### Path Restrictions
+- Blocked paths: Secrets directories, system directories
+- Allowed: Project directories, temp directories
+
+## Coding Principles
+
+### Think Before Coding
+- State assumptions explicitly
+- Ask clarifying questions when unclear
+- Present tradeoffs if multiple approaches exist
+
+### Simplicity First
+- Minimum code that solves the problem
+- No speculative features
+- If 200 lines could be 50, rewrite it
+
+### Surgical Changes
+- Touch only what you must
+- Match existing code style
+- Clean up only your own mess
+
+## Resource Usage
+
+### Local Resources
+AI có quyền truy cập và tự động sử dụng các tài nguyên cục bộ khi cần thiết để giải quyết tác vụ:
+- **Claude Resources**: `resources/local/claude`
+- **Codex Resources**: `resources/local/codex`
+
+Khi người dùng yêu cầu các tính năng nâng cao, phân tích hệ thống hoặc cần tham khảo các kỹ năng (skills) mẫu, AI nên chủ động tìm kiếm và đọc nội dung trong các thư mục này.
+
+## Goal-Driven Execution
+- Define success criteria
+- Write tests to verify
+- Loop until verified
+
+## Session Management
+
+### Session Commands
+- `/session new` - Create new session
+- `/session save` - Save current session
+- `/session list` - List sessions
+- `/remember <text>` - Add to memory
+
+### Memory Types
+- Working Memory - Current task context
+- Project Memory - Project-specific knowledge
+- Long-term Memory - Cross-project learnings
+
+## Project Detection
+
+### Auto-detect Project
+Check for these files in order:
+1. `CLAUDE.md` - Main project guidelines
+2. `WINTER.md` - Winter-specific guidelines
+3. `.claude/CLAUDE.md` - Claude Code guidelines
+4. `AGENTS.md` - Agent guidelines
+5. `package.json` - Node.js project
+6. `pyproject.toml` - Python project
+7. `Cargo.toml` - Rust project
+
+## Tool Usage
+
+### When to Call Tools
+- **Read**: When asked about code, need to understand structure
+- **Write**: When creating new files
+- **Edit**: When modifying existing files (surgical)
+- **Bash**: When running commands, scripts, git operations
+- **Glob**: When finding files by pattern
+- **Grep**: When searching code content
+
+### Tool Guidelines
+- Call tools proactively - don't just describe, DO
+- CHỦ ĐỘNG TÌM KIẾM: Khi người dùng yêu cầu sửa đổi hoặc thêm tính năng mà không chỉ định file cụ thể, AI PHẢI TỰ DÙNG các công cụ như `list_dir` hoặc `grep_search` để tìm kiếm file liên quan trong dự án. TUYỆT ĐỐI KHÔNG ĐƯỢC hỏi xin code hoặc xin đường dẫn file từ người dùng nếu có thể tự tìm thấy!
+- Prefer Read over describing code
+- Use Edit for small changes, Write for new files
+- Verify changes after execution
+
+## Design Integration
+
+### Design Systems
+- Integrate with awesome-design-md
+- `winter design search <brand>` - Search brands
+- `winter design add <brand>` - Add design file
+- `winter design preview <brand>` - Preview design
+
+## Performance
+
+### Optimization
+- Use small/fast model for simple tasks
+- Cache responses when appropriate
+- Batch similar operations
+
+## Error Handling
+
+### Error Recovery
+- Log errors clearly
+- Suggest fixes
+- Retry with different approach if needed

package/scripts/audit-pack.js

@@ -19,6 +19,16 @@ const blockedPrefixes = [
   'vscode-main/',
   '.winter/',
   '.git/',
+  '.github/',
+  '.claude/',
+  '.codegraph/',
+  'extensions/vscode/node_modules/',
+  'extensions/vscode/out/',
+  'resources/local/codex/config.toml',
+  'resources/local/codex/memories/',
+  'resources/local/claude/settings.json',
+  'resources/local/claude/tasks/',
+  'resources/local/claude/todos/',
   'resources/local/ecc/node_modules/',
 ];
 const blockedPatterns = [
@@ -37,11 +47,25 @@ const violations = files
 const requiredPrefixes = [
   'resources/local/agents.md/',
   'resources/local/awesome-design-md/',
+  'resources/local/codex/AGENTS.md',
+  'resources/local/codex/models_cache.json',
+  'resources/local/codex/plugins/',
+  'resources/local/codex/rules/',
+  'resources/local/codex/skills/',
+  'resources/local/claude/plugins/',
+  'resources/local/claude/skills/',
   'resources/local/karpathy-tools/',
   'resources/local/page-agent/',
   'resources/local/ecc/',
+  'docs/',
+  'rules/',
+  'extensions/vscode/',
   'skills/',
   'memories/',
+  'CLAUDE.md',
+  'design.md',
+  'skill.md',
+  'rule.md',
 ];
 
 const missingRequired = requiredPrefixes

package/skill.md

@@ -0,0 +1,43 @@
+# Skill Guidance
+
+File này định nghĩa cách Winter chọn và áp dụng skill. Không chỉ liệt kê tên skill.
+
+## Default Rule
+- Luôn đọc yêu cầu, repo context, và file liên quan trước khi quyết định skill.
+- Skill là operational context: áp dụng vào hành động thật, không chỉ nhắc lại trong câu trả lời.
+- Model nhỏ vẫn phải theo cùng tiêu chuẩn: inspect, edit bằng tool, verify, rồi mới kết luận.
+
+## Core Skills
+- **coding**: Inspect source first, make focused code changes, and verify syntax/tests.
+- **debug**: Trace the concrete failing path, explain the first hard blocker, then patch it.
+- **design**: Use awesome-design-md before inventing UI style, spacing, or brand language.
+- **refactor**: Keep behavior stable while reducing complexity in small, reviewable steps.
+- **test**: Add regression coverage near the changed behavior and run the narrow test first.
+- **security**: Protect secrets, validate inputs, avoid unsafe shell/file operations.
+- **performance**: Measure or reason from the hot path before optimizing.
+
+## Available Local Skills (13)
+- codex-primary-runtime
+- coding
+- debug
+- design
+- learned
+- performance
+- refactor
+- security
+- skill-creator
+- test
+- vercel-react-best-practices
+- vibefigma
+- web-design-guidelines
+
+## When To Apply
+- Code change: coding + test, thêm debug nếu có lỗi cụ thể.
+- UI/page/component: design + coding + test.
+- Bug/runtime log: debug trước, coding sau.
+- Refactor lớn: refactor + test, giữ behavior stable.
+- Security/config/secret: security bắt buộc.
+- Performance/flicker/slow tool call: performance + debug.
+
+---
+*File này được tự động tạo bởi Winter CLI.*

package/src/cli/context-loader.js

@@ -59,6 +59,11 @@ export class ContextLoader {
   getResourcePaths() {
     const localRoot = this.getResourceRoot();
     return {
+      winter: {
+        root: PACKAGE_ROOT,
+        skills: path.join(PACKAGE_ROOT, 'skills'),
+        memories: path.join(PACKAGE_ROOT, 'memories'),
+      },
       codex: {
         root: path.join(localRoot, 'codex'),
         skills: path.join(localRoot, 'codex', 'skills'),
@@ -140,7 +145,9 @@ export class ContextLoader {
       const manifest = JSON.parse(raw.replace(/^\uFEFF/, ''));
       const paths = this.getResourcePaths();
       const userPaths = this.getUserResourcePaths();
-      const [claudeSkills, codexSkills, claudePlugins, codexMemories] = await Promise.all([
+      const [winterSkills, winterMemories, claudeSkills, codexSkills, claudePlugins, codexMemories] = await Promise.all([
+        this.listPathEntries(paths.winter.skills, 20),
+        this.listPathEntries(paths.winter.memories, 20),
         this.listPathEntries(paths.claude.skills, 20),
         this.listPathEntries(paths.codex.skills, 20),
         this.listPathEntries(paths.claude.plugins, 20),
@@ -168,9 +175,15 @@ export class ContextLoader {
       }
 
       lines.push('- Use Read/Grep/Glob to inspect any local resource when it matters for the task.');
-      lines.push('- Local resource families: agents.md, awesome-design-md, claude, codex, karpathy-tools, page-agent, ecc.');
+      lines.push('- Local resource families: winter skills, winter memories, agents.md, awesome-design-md, claude, codex, karpathy-tools, page-agent, ecc.');
       lines.push(`- User resource roots: ${userPaths.codexRoot}, ${userPaths.claudeRoot}`);
 
+      if (winterSkills.length > 0) {
+        lines.push(`- Winter packaged skills: ${winterSkills.slice(0, 10).map(item => item.name).join(', ')}${winterSkills.length > 10 ? ', ...' : ''}`);
+      }
+      if (winterMemories.length > 0) {
+        lines.push(`- Winter packaged memories: ${winterMemories.slice(0, 10).map(item => item.name).join(', ')}${winterMemories.length > 10 ? ', ...' : ''}`);
+      }
       if (claudeSkills.length > 0) {
         lines.push(`- Claude skills: ${claudeSkills.slice(0, 10).map(item => item.name).join(', ')}${claudeSkills.length > 10 ? ', ...' : ''}`);
       }
@@ -216,17 +229,47 @@ export class ContextLoader {
     const pageAgentReadmePath = path.join(paths.pageAgent, 'README.md');
     const pageAgentAgentsPath = path.join(paths.pageAgent, 'AGENTS.md');
     const pageAgentWinterPath = path.join(paths.pageAgent, 'WINTER.md');
-
-    const [karpathy, agents, designReadme, designBrands, pageAgentWinter, pageAgentAgents] = await Promise.all([
+    const winterCodingSkillPath = path.join(paths.winter.skills, 'coding.md');
+    const winterDebugSkillPath = path.join(paths.winter.skills, 'debug.md');
+    const winterTestSkillPath = path.join(paths.winter.skills, 'test.md');
+    const winterMemoryReadmePath = path.join(paths.winter.memories, 'readme.md');
+
+    const [
+      karpathy,
+      agents,
+      designReadme,
+      designBrands,
+      pageAgentWinter,
+      pageAgentAgents,
+      winterCodingSkill,
+      winterDebugSkill,
+      winterTestSkill,
+      winterMemoryReadme,
+    ] = await Promise.all([
       this.readTextIfExists(karpathyPath, 2200),
       this.readTextIfExists(agentsPath, 1800),
       this.readTextIfExists(designReadmePath, 1600),
       this.listPathEntries(paths.designs, 40),
       this.readTextIfExists(pageAgentWinterPath, 1600),
       this.readTextIfExists(pageAgentAgentsPath, 2200),
+      this.readTextIfExists(winterCodingSkillPath, 1200),
+      this.readTextIfExists(winterDebugSkillPath, 1000),
+      this.readTextIfExists(winterTestSkillPath, 1000),
+      this.readTextIfExists(winterMemoryReadmePath, 1000),
     ]);
 
-    const hasRequired = Boolean(karpathy || agents || designReadme || designBrands.length > 0 || pageAgentWinter || pageAgentAgents);
+    const hasRequired = Boolean(
+      karpathy ||
+      agents ||
+      designReadme ||
+      designBrands.length > 0 ||
+      pageAgentWinter ||
+      pageAgentAgents ||
+      winterCodingSkill ||
+      winterDebugSkill ||
+      winterTestSkill ||
+      winterMemoryReadme
+    );
     if (!hasRequired) return '';
 
     const lines = [];
@@ -241,6 +284,10 @@ export class ContextLoader {
     lines.push(`  Internal architecture at: ${path.relative(this.projectPath, pageAgentAgentsPath)}`);
     lines.push(`- Design system corpus: ${path.relative(this.projectPath, designReadmePath)} and ${path.relative(this.projectPath, paths.designs)}`);
     lines.push('  Apply: for UI/brand/design tasks, search the design-md corpus first and follow the closest existing brand/design guidance instead of inventing style from scratch.');
+    lines.push(`- Winter packaged skills: ${path.relative(this.projectPath, paths.winter.skills)}`);
+    lines.push('  Apply: coding/debug/test skills are bundled with the npm package, so a global install on another machine can still load Winter baseline behavior without project-local skill files.');
+    lines.push(`- Winter packaged memories: ${path.relative(this.projectPath, paths.winter.memories)}`);
+    lines.push('  Apply: packaged memories document how Winter memory is structured; user/session memories still live under the user profile.');
     lines.push('- Use Read/Grep/Glob to inspect the full resource files whenever task details require more than this startup summary.');
 
     const brandNames = designBrands
@@ -267,6 +314,18 @@ export class ContextLoader {
     if (/Monorepo|PageAgentCore|PageController|DOM Pipeline|FlatDomTree/i.test(pageAgentAgents)) {
       evidence.push('page-agent AGENTS.md confirms monorepo structure, DOM pipeline, and tool architecture.');
     }
+    if (/Read code to understand|Read relevant project files|Verify|automatic tool usage/i.test(winterCodingSkill)) {
+      evidence.push('packaged coding skill confirms inspect-before-edit and verify-after-change behavior.');
+    }
+    if (/Reproduce|root cause|surgical/i.test(winterDebugSkill)) {
+      evidence.push('packaged debug skill confirms reproduce, trace root cause, fix surgically, and verify.');
+    }
+    if (/Unit Tests|Integration Tests|Run Tests/i.test(winterTestSkill)) {
+      evidence.push('packaged test skill confirms test planning and execution behavior.');
+    }
+    if (/Long-term Memory|Project Memory|\/remember/i.test(winterMemoryReadme)) {
+      evidence.push('packaged memory guide confirms long-term and project memory concepts.');
+    }
     if (evidence.length > 0) {
       lines.push(`- Startup evidence: ${evidence.join(' ')}`);
     }
@@ -317,7 +376,7 @@ export class ContextLoader {
     const catalog = new Set(['coding', 'design', 'debug', 'refactor', 'test', 'security', 'performance']);
     const resourcePaths = this.getResourcePaths();
     const userPaths = this.getUserResourcePaths();
-    const folders = [resourcePaths.claude.skills, resourcePaths.codex.skills, userPaths.claudeSkills, userPaths.codexSkills];
+    const folders = [resourcePaths.winter.skills, resourcePaths.claude.skills, resourcePaths.codex.skills, userPaths.claudeSkills, userPaths.codexSkills];
 
     for (const folder of folders) {
       const entries = await this.listPathEntries(folder, 200);

package/src/skills/manager.js

@@ -6,12 +6,16 @@
 import { promises as fs } from 'fs';
 import path from 'path';
 import { homedir } from 'os';
+import { fileURLToPath } from 'url';
 import { colors, statusIcons } from '../cli/snowflake-logo.js';
 
+const PACKAGE_ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..', '..');
+
 export class SkillManager {
   constructor(session) {
     this.session = session;
     this.skillsDir = path.join(homedir(), '.winter', 'skills');
+    this.packagedSkillsDir = path.join(PACKAGE_ROOT, 'skills');
     this.builtinSkills = this.getBuiltinSkills();
   }
 
@@ -92,27 +96,51 @@ export class SkillManager {
   }
 
   async listSkills() {
+    const packagedSkills = await this.getPackagedSkills();
     const customSkills = await this.getCustomSkills();
-    return [...this.builtinSkills, ...customSkills];
+    const byName = new Map();
+    for (const skill of [...this.builtinSkills, ...packagedSkills, ...customSkills]) {
+      if (!byName.has(skill.name)) byName.set(skill.name, skill);
+    }
+    return [...byName.values()];
+  }
+
+  async getPackagedSkills() {
+    return this.getMarkdownSkillsFromDirectory(this.packagedSkillsDir, {
+      icon: '*',
+      isPackaged: true,
+    });
   }
 
   async getCustomSkills() {
     try {
       await fs.mkdir(this.skillsDir, { recursive: true });
-      const files = await fs.readdir(this.skillsDir);
+      return this.getMarkdownSkillsFromDirectory(this.skillsDir, {
+        icon: '$',
+        isCustom: true,
+      });
+    } catch {
+      return [];
+    }
+  }
+
+  async getMarkdownSkillsFromDirectory(directory, defaults = {}) {
+    try {
+      const files = await fs.readdir(directory);
       const skills = [];
 
       for (const file of files) {
-        if (file.endsWith('.md')) {
-          const content = await fs.readFile(path.join(this.skillsDir, file), 'utf8');
-          const name = file.replace('.md', '');
-          skills.push({
-            name,
-            icon: '$',
-            description: this.extractDescription(content),
-            isCustom: true,
-          });
-        }
+        if (!file.endsWith('.md')) continue;
+        const content = await fs.readFile(path.join(directory, file), 'utf8');
+        const name = file.replace(/\.md$/i, '');
+        skills.push({
+          name,
+          icon: defaults.icon || '$',
+          description: this.extractDescription(content),
+          prompts: this.extractPrompts(content),
+          path: path.join(directory, file),
+          ...defaults,
+        });
       }
 
       return skills;
@@ -126,6 +154,23 @@ export class SkillManager {
     return match ? match[1] : 'Custom skill';
   }
 
+  extractPrompts(content) {
+    const lines = String(content || '').split(/\r?\n/);
+    const prompts = [];
+    let inPrompts = false;
+    for (const line of lines) {
+      if (/^##\s+prompts\b/i.test(line)) {
+        inPrompts = true;
+        continue;
+      }
+      if (inPrompts && /^##\s+/.test(line)) break;
+      if (!inPrompts) continue;
+      const match = line.match(/^\s*[-*]\s+(.+)/);
+      if (match) prompts.push(match[1].trim());
+    }
+    return prompts;
+  }
+
   async createSkill(name, options = {}) {
     const skillPath = path.join(this.skillsDir, `${name}.md`);
 
@@ -173,6 +218,7 @@ Describe how to use this skill here.
 
   async getSkillPrompts(name) {
     const skill = this.builtinSkills.find(s => s.name === name) ||
+                  (await this.getPackagedSkills()).find(s => s.name === name) ||
                   (await this.getCustomSkills()).find(s => s.name === name);
 
     return skill?.prompts || [];
@@ -181,4 +227,4 @@ Describe how to use this skill here.
   getSkillByName(name) {
     return this.builtinSkills.find(s => s.name === name);
   }
-}
+}