yam-flow 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (52) hide show
  1. package/AGENTS.md +18 -0
  2. package/COMMANDS.md +152 -0
  3. package/DECISIONS.md +70 -0
  4. package/LICENSE +21 -0
  5. package/README.md +174 -0
  6. package/ROADMAP.md +313 -0
  7. package/dist/bin/yam.d.ts +2 -0
  8. package/dist/bin/yam.js +2005 -0
  9. package/dist/lib/trust-kernel.d.ts +99 -0
  10. package/dist/lib/trust-kernel.js +300 -0
  11. package/package.json +101 -0
  12. package/references/context-reuse.md +59 -0
  13. package/references/current-docs.md +45 -0
  14. package/references/db-supabase-safety-lite.md +40 -0
  15. package/references/doctor-scan.md +56 -0
  16. package/references/eye.md +30 -0
  17. package/references/final-report.md +61 -0
  18. package/references/honest-completion.md +61 -0
  19. package/references/hook-lite.md +55 -0
  20. package/references/markdown-management.md +56 -0
  21. package/references/memory.md +59 -0
  22. package/references/mission.md +86 -0
  23. package/references/question.md +25 -0
  24. package/references/quick.md +70 -0
  25. package/references/risk-escalation.md +27 -0
  26. package/references/runtime-orchestration.md +57 -0
  27. package/references/scout.md +38 -0
  28. package/references/token-budget-reporter.md +44 -0
  29. package/references/token-economy.md +61 -0
  30. package/references/tool-trust-layer.md +115 -0
  31. package/references/trust-kernel.md +55 -0
  32. package/references/truth-matrix.md +47 -0
  33. package/references/ueye-proof.md +109 -0
  34. package/references/ueye.md +174 -0
  35. package/references/ui-quality.md +23 -0
  36. package/references/verification-levels.md +53 -0
  37. package/skills/deep/SKILL.md +77 -0
  38. package/skills/mission/SKILL.md +105 -0
  39. package/skills/question/SKILL.md +45 -0
  40. package/skills/quick/SKILL.md +81 -0
  41. package/skills/scout/SKILL.md +71 -0
  42. package/skills/ueye/SKILL.md +132 -0
  43. package/src/bin/yam.ts +1988 -0
  44. package/src/lib/trust-kernel.ts +398 -0
  45. package/templates/mission-plan.md +46 -0
  46. package/templates/runtime-proof.md +54 -0
  47. package/templates/tuning-log.md +39 -0
  48. package/templates/ueye-comparison.md +78 -0
  49. package/templates/ueye-review.md +110 -0
  50. package/templates/yam.project.md +73 -0
  51. package/tsconfig.json +27 -0
  52. package/yam.manifest.json +48 -0
package/ROADMAP.md ADDED
@@ -0,0 +1,313 @@
1
+ # yam Roadmap
2
+
3
+ ## Current State
4
+
5
+ Implemented:
6
+
7
+ - Skills-first harness.
8
+ - Six routes: quick, ueye, question, scout, deep, mission.
9
+ - Shared references.
10
+ - Local CLI: list, status, verify, doctor, examples, path, install, uninstall.
11
+ - CLI helpers: detect, budget, template, tune-log, version.
12
+ - Optional advisory `yam-lite` hook with status/enable/disable. Done.
13
+ - Opt-in project memory: init, add, list, summary, resolve.
14
+ - Honest completion guard: no verified/cleanup/visual claims without evidence.
15
+ - No hooks, automations, or global config.
16
+ - Token economy policy.
17
+
18
+ ## Next Stages
19
+
20
+ ### 1. Real-Use Tuning
21
+
22
+ Goal: improve route wording from actual use.
23
+
24
+ Tasks:
25
+
26
+ - Try `$quick` on tiny code/UI edits and quick build/type error scans.
27
+ - Try `$ueye` on one real design-heavy UI improvement.
28
+ - Try `$ueye` on screenshot review.
29
+ - Record where the skill over-reads, under-checks, or reports too much.
30
+ - Add tuning log helper. Done.
31
+ - Tighten instructions.
32
+
33
+ ### 2. Direction Pack
34
+
35
+ Goal: make project direction checks faster.
36
+
37
+ Tasks:
38
+
39
+ - Add optional `yam.project.md` template. Done.
40
+ - Capture product direction, design tone, tech stack, test commands, and no-go rules.
41
+ - Let routes read this one small file before broader project context.
42
+ - Strengthen `yam pack`: stale pack, command drift, active hooks/instruction surfaces, and legacy pack detection. Done.
43
+
44
+ ### 3. Verification Detector
45
+
46
+ Goal: suggest the smallest useful verification command.
47
+
48
+ Tasks:
49
+
50
+ - Read `package.json` scripts.
51
+ - Detect common commands: typecheck, lint, test, build. Done.
52
+ - Map changed files to likely checks. Partial: route-level suggestions added.
53
+ - Keep this advisory, not mandatory.
54
+
55
+ ### 4. Token Budget Reporter
56
+
57
+ Goal: keep the harness honest about context usage.
58
+
59
+ Tasks:
60
+
61
+ - Add `yam budget` command. Done.
62
+ - Print recommended read budgets per route. Done.
63
+ - Add warning for broad context in quick/Ueye routes. Partial: route budgets define expand triggers.
64
+
65
+ ### 5. Ueye Workflow
66
+
67
+ Goal: make screenshot/UI review and reference-led design implementation more repeatable.
68
+
69
+ Tasks:
70
+
71
+ - Merge `ui`, `eye`, and `review` into `ueye`. Done.
72
+ - Add Ueye checklist refinements. Done.
73
+ - Add Visual Evidence Inventory, Reference Read Proof, Reference vs Implementation Matrix, and Design Quality Review. Done.
74
+ - Add optional browser/screenshot capture notes.
75
+ - Keep image generation optional, never a gate.
76
+
77
+ ### 6. Deep Runtime Workflow
78
+
79
+ Goal: make long-running verification reliable without keeping runtime as a separate route.
80
+
81
+ Tasks:
82
+
83
+ - Add runtime proof template. Done.
84
+ - Add process lifecycle checklist. Done.
85
+ - Fold tmux/dev server/browser QA/cleanup proof into `$deep`. Done.
86
+ - Retire standalone `$runtime`. Done.
87
+
88
+ ### 7. Packaging
89
+
90
+ Goal: make install/update simpler.
91
+
92
+ Tasks:
93
+
94
+ - Add symlink-friendly local install.
95
+ - Add version command. Done.
96
+ - Consider npm packaging only after route behavior stabilizes.
97
+
98
+ ### 8. Scout / Research Workflow
99
+
100
+ Goal: give yam a research lane that is evidence-bound, lightweight, and decision-oriented.
101
+
102
+ Research reference points:
103
+
104
+ - Evidence boundaries.
105
+ - Source freshness.
106
+ - Fact/inference/recommendation separation.
107
+ - Decision-oriented summaries.
108
+
109
+ Tasks:
110
+
111
+ - Strengthen `$scout` into the main research/investigation route. Done.
112
+ - Add an explicit third-party judgment format. Done:
113
+ - objective judgment: evidence, constraints, market/technical reality
114
+ - subjective judgment: taste, product instinct, likely user perception
115
+ - macro view: broad direction and category movement
116
+ - realistic view: near-term feasibility and cost
117
+ - future view: second-order effects and durable bets
118
+ - Keep source count bounded by default; heavy research remains opt-in. Done.
119
+ - Avoid making research a default gate for implementation. Done.
120
+
121
+ ### 9. Question Workflow
122
+
123
+ Goal: add a very-light question-answer route for simple explanations.
124
+
125
+ Tasks:
126
+
127
+ - Add `$question` as a tiny Q&A skill. Done.
128
+ - Use it for direct questions where no code changes, no broad research, and no heavy verification are needed. Done.
129
+ - Treat it as the very-light version of `$scout`. Done.
130
+ - Keep answers concise, with explicit uncertainty when relevant. Done.
131
+
132
+ ### 10. GitHub Publishing
133
+
134
+ Goal: prepare yam for a personal GitHub repo under `0kim0bos`.
135
+
136
+ Tasks:
137
+
138
+ - Choose repository description.
139
+ - Add a short public README intro.
140
+ - Add install/update instructions for local Codex skills.
141
+ - Add a clear note that yam installs no hooks and no automations by default.
142
+ - Re-run source/install verification before publishing.
143
+
144
+ ### 11. Memory Workflow
145
+
146
+ Goal: preserve durable lessons without turning yam into a heavy automatic memory system.
147
+
148
+ Kept:
149
+
150
+ - Sparse one-record-per-file storage.
151
+ - Wrongness-style records for repeated mistakes and wrong decisions.
152
+ - Deliberate forgetting via resolve instead of permanent prompt injection.
153
+
154
+ Kept:
155
+
156
+ - Evidence before recommendation.
157
+ - Clear separation between observation and next action.
158
+
159
+ Kept out by design:
160
+
161
+ - Automatic context injection.
162
+ - Proof gates.
163
+ - Image voxel ledgers.
164
+ - Multi-worker publishing/index rebuilds.
165
+
166
+ Tasks:
167
+
168
+ - Add `.yam/memory/records/*.json` storage. Done.
169
+ - Add `yam memory init/add/list/summary/resolve`. Done.
170
+ - Add lightweight secret-pattern blocking. Done.
171
+ - Teach context reuse to prefer `summary.md`, not full record reads. Done.
172
+ - Keep memory opt-in only. Done.
173
+
174
+ ### 12. Runtime Truth Workflow
175
+
176
+ Goal: prevent false runtime completion while keeping ordinary work fast.
177
+
178
+ Kept:
179
+
180
+ - Runtime truth vocabulary.
181
+ - Cleanup must be backed by exit/closure evidence.
182
+ - tmux physical proof idea, reduced to route-level evidence notes.
183
+
184
+ Kept:
185
+
186
+ - Evidence boundaries before recommendation.
187
+ - Explicit partial/blocked/assumed language.
188
+
189
+ Kept out by design:
190
+
191
+ - Automatic tmux for ordinary work.
192
+ - Forced release gates.
193
+ - Mandatory physical pane proof for every task.
194
+ - Real dynamic agent smoke by default.
195
+
196
+ Tasks:
197
+
198
+ - Add honest completion reference. Done.
199
+ - Expand truth matrix with runtime-specific statuses. Done.
200
+ - Treat tmux as first-class but opt-in inside `$deep` runtime verification. Done.
201
+ - Update runtime proof template with pane/process cleanup evidence. Done.
202
+
203
+ ### 13. Mission Workflow
204
+
205
+ Goal: provide one explicit heavy execution route without increasing total skill count.
206
+
207
+ Kept:
208
+
209
+ - Real Team/subagent route boundary.
210
+ - Cross-verification before completion.
211
+ - Runtime/tmux/browser proof when mission evidence needs it.
212
+
213
+ Kept:
214
+
215
+ - Role-specific work boundaries.
216
+ - Evidence-first reporting.
217
+ - Doctor/scanner perspective.
218
+
219
+ Kept out by design:
220
+
221
+ - Auto-escalating small tasks into mission.
222
+ - Mission role-play without real subagents; single-agent heavy work belongs in `$deep`.
223
+ - Runtime as a separate skill.
224
+
225
+ Tasks:
226
+
227
+ - Add `$mission` route. Done.
228
+ - Retire `$runtime` route and clean installed skill on install. Done.
229
+ - Keep route count small. Done: six active routes.
230
+ - Make `$deep` own runtime/tmux/process verification. Done.
231
+ - Add mission prompt template. Done.
232
+ - Add doctor scan checklist. Done.
233
+ - Require real subagent/team execution for full `$mission`; otherwise downgrade to `$deep` or report partial/blocked. Done.
234
+
235
+ ### 14. Quick / Ueye Consolidation
236
+
237
+ Goal: remove overlapping skill roles while preserving the best parts of the old routes.
238
+
239
+ Kept:
240
+
241
+ - Source screenshot inventory before visual claims.
242
+ - P0-P3 issue ledger.
243
+ - P0/P1-first fix loop.
244
+ - Partial truth cap for text-only or missing-screenshot review.
245
+
246
+ Kept:
247
+
248
+ - Smallest useful verification command.
249
+ - Group errors by file and root cause.
250
+ - Fix one error class at a time.
251
+ - Compact PASS/FAIL reporting.
252
+
253
+ Kept:
254
+
255
+ - Real preview/screenshot evidence.
256
+ - Compact design direction.
257
+ - P0 visual quality gates over placeholder output.
258
+ - Post-implementation design quality judgment across hierarchy, spacing, typography, color, component detail, interaction, responsiveness, accessibility, and brand fit.
259
+
260
+ Kept out by design:
261
+
262
+ - Mandatory generated annotated images.
263
+ - Always-on visual proof gates.
264
+ - Broad design-system archaeology for small polish.
265
+ - Separate review skill that overlaps implementation and visual QA.
266
+
267
+ Tasks:
268
+
269
+ - Add `$quick`. Done.
270
+ - Add `$ueye`. Done.
271
+ - Retire `$fast`, `$build`, `$ui`, `$eye`, and `$review`. Done.
272
+ - Update CLI budgets, templates, docs, manifest, install cleanup. Done.
273
+ - Re-run source and installed-skill verification. Pending after install.
274
+
275
+ ### 15. Lite Hook / Progressive Tool Trust Layer
276
+
277
+ Goal: keep beginner momentum while creating a path toward professional proof-first work.
278
+ The hook stays light, but the harness direction does not. `yam` should support a depth ladder: direction fit first, focused proof for ordinary work, strong proof for risky work, and real team proof for `$mission`.
279
+
280
+ Kept:
281
+
282
+ - Hook status and trust reporting.
283
+ - Tool readiness as evidence.
284
+ - DB/Supabase safety thinking.
285
+ - Runtime/tmux/process cleanup truth.
286
+
287
+ Kept:
288
+
289
+ - Selective install and low-context operation.
290
+ - Evidence boundaries instead of always-on gates.
291
+
292
+ Kept out by design:
293
+
294
+ - Always-on proof gates.
295
+ - Auto-running `$quick`.
296
+ - Auto-running verification, tmux, subagents, or dependency install.
297
+ - Provider config mutation without explicit approval.
298
+
299
+ Tasks:
300
+
301
+ - Add `yam hook status|enable|disable|run lite`. Done.
302
+ - Keep `yam-lite` advisory-only through `UserPromptSubmit`. Done.
303
+ - Add `references/tool-trust-layer.md`. Done.
304
+ - Add read-only `yam tools doctor`. Done.
305
+ - Add `yam proof` summary command. Done.
306
+ - Add DB/Supabase safety lite. Done.
307
+ - Add current-docs/Context7 selective rule. Done.
308
+ - Strengthen Ueye image evidence caps. Done.
309
+ - Add `yam tools doctor --json`. Done.
310
+ - Add shallow `.sql` destructive keyword scan. Done.
311
+ - Add `yam proof write`. Done.
312
+ - Prepare npm/npx package metadata and dry-run packaging. Done.
313
+ - Add small route-scoped trust kernel: truth caps, fake/real policy, runtime truth matrix, and completion proof object. Done.
@@ -0,0 +1,2 @@
1
+ #!/usr/bin/env node
2
+ export {};