@aitne/daemon 0.1.0

package/dist/core/skill-curation/workdir.js

@@ -0,0 +1,242 @@
+// P22 §3 — optimizer workdir provisioner.
+//
+// Creates an ephemeral, isolated workdir for the routine.skill_curation
+// session under PA_DATA_DIR/optimizer-workdir/<run-id>/. The dir contains:
+//
+//   CLAUDE.md / AGENTS.md / GEMINI.md  — backend-specific preamble
+//   .claude/skills/  (or .codex/, .gemini/)
+//     skill-curation/SKILL.md
+//     knowledge-map/SKILL.md
+//     drift-analysis/SKILL.md
+//   data/
+//     knowledge-map.json
+//     signals/<skill_slug>.json
+//     current-payloads/<skill_slug>/<section_id>.json
+//
+// The agent has allowedTools = `Bash(curl http://localhost:8321/api/skill-curation/*)`
+// + `Read`. Edit / Write / general Bash are absent.
+//
+// The optimizer-only skills live under `agent-assets/optimizer-skills/` —
+// PHYSICALLY separate from `agent-assets/skills/` (defence-in-depth: a
+// regular session cannot stumble into them via SkillsCompiler).
+import { cpSync, mkdirSync, rmSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { buildKnowledgeMap } from "./knowledge-map.js";
+import { loadAllCurationDeclarations, } from "./declarations.js";
+import { OverlayStore } from "./overlay-store.js";
+import { selectSkillsForRun, unconsumedSignalsForSkill } from "./signals.js";
+import { RunTokenManager } from "./run-token.js";
+import { autoRevertSweep, tickFrozenCycles } from "./auto-revert.js";
+import { DEFAULT_SKILL_CURATION_CONFIG, SkillCurationConfig } from "@aitne/shared";
+import { createLogger } from "../../logging.js";
+const logger = createLogger("skill-curation-workdir");
+const DEFAULT_INLINE_BUDGET = 256 * 1024; // 256 KB total inlined data — well below
+// the typical context-window for a single-turn
+// brief.
+export async function materializeOptimizerWorkdir(params) {
+    const runId = `skcur-${Date.now()}-${Math.random().toString(36).slice(2, 10)}`;
+    const workdirPath = join(params.dataDir, "optimizer-workdir", runId);
+    const optimizerSkillsRoot = join(params.workspaceDir, "agent-assets", "optimizer-skills");
+    const skillsRoot = join(params.workspaceDir, "agent-assets", "skills");
+    const dataPath = join(workdirPath, "data");
+    mkdirSync(dataPath, { recursive: true });
+    mkdirSync(join(workdirPath, ".claude", "skills"), { recursive: true });
+    // Mint a run-token, persist the run row.
+    const tokenManager = new RunTokenManager(params.secretStore);
+    const token = await tokenManager.mint(runId);
+    // §5.3 — auto-revert + 2-cycle freeze. Decrement existing freeze
+    // counters first (a section frozen 2 cycles ago becomes eligible again
+    // on the third), then sweep recently-applied proposals for regression
+    // and revert + freeze any that accumulated more drift signals after
+    // apply than the threshold tolerates. Both calls are idempotent and
+    // bounded; failures are logged but do not block the run.
+    const overlayForRevert = new OverlayStore(params.dataDir, skillsRoot);
+    try {
+        const ticked = tickFrozenCycles(params.db);
+        if (ticked.unfrozen.length > 0) {
+            logger.info({ unfrozen: ticked.unfrozen }, "Frozen sections aged out");
+        }
+        const swept = autoRevertSweep(params.db, overlayForRevert);
+        if (swept.reverted > 0) {
+            logger.info({ reverted: swept.reverted, newly_frozen: swept.newly_frozen }, "Auto-revert sweep completed");
+        }
+    }
+    catch (err) {
+        logger.warn({ err }, "Auto-revert sweep failed; continuing run");
+    }
+    const decls = loadAllCurationDeclarations(skillsRoot).filter((d) => d.declaration !== null);
+    // Honour the operator's per-skill exclusions from /settings/self-learning.
+    // Cooldown filter follows: it's a transient state (post-apply 7d / post-revert
+    // 14d) while exclusion is the long-term opt-out.
+    const excluded = readExcludedSkills(params.db);
+    const manual = params.manual === true;
+    const selections = selectSkillsForRun(params.db, {
+        excludedSlugs: excluded,
+        // P22 §6.4 — manual runs bypass the weight threshold AND the per-section
+        // cooldown. The owner asked explicitly; respect it.
+        ...(manual ? { minWeight: 0, ignoreCooldowns: true } : {}),
+    });
+    let targetSkillsAll = manual
+        ? selections.map((s) => s.skill_slug)
+        : selections.filter((s) => !s.cooldown_blocked).map((s) => s.skill_slug);
+    if (manual && params.targetSkillsOverride && params.targetSkillsOverride.length > 0) {
+        const allow = new Set(params.targetSkillsOverride);
+        targetSkillsAll = targetSkillsAll.filter((slug) => allow.has(slug));
+    }
+    const targetSkills = targetSkillsAll.length > 0
+        ? targetSkillsAll
+        : decls.map((d) => d.slug); // fall back to all declared so the agent has something to read
+    params.db
+        .prepare(`INSERT INTO skill_curation_runs (id, started_at, cadence, backend, model, target_skills_json, status, is_manual)
+       VALUES (?, ?, ?, ?, ?, ?, 'running', ?)`)
+        .run(runId, Date.now(), params.cadence, "claude", "claude-sonnet-4-6", JSON.stringify(targetSkills), manual ? 1 : 0);
+    // Knowledge-map snapshot.
+    const snapshot = buildKnowledgeMap(params.contextDir);
+    writeFileSync(join(dataPath, "knowledge-map.json"), JSON.stringify(snapshot, null, 2), "utf-8");
+    // Per-skill signals + current payloads.
+    mkdirSync(join(dataPath, "signals"), { recursive: true });
+    mkdirSync(join(dataPath, "current-payloads"), { recursive: true });
+    const overlay = new OverlayStore(params.dataDir, skillsRoot);
+    let inlinedBytes = 0;
+    const budget = params.maxInlineBytes ?? DEFAULT_INLINE_BUDGET;
+    for (const slug of targetSkills) {
+        const decl = decls.find((d) => d.slug === slug);
+        if (!decl?.declaration)
+            continue;
+        const sigs = unconsumedSignalsForSkill(params.db, slug);
+        const sigJson = JSON.stringify(sigs.map((s) => ({
+            id: s.id,
+            section_id: s.section_id,
+            signal_type: s.signal_type,
+            observed_at: s.observed_at,
+            payload: tryParse(s.payload_json),
+        })), null, 2);
+        inlinedBytes += Buffer.byteLength(sigJson, "utf-8");
+        if (inlinedBytes > budget)
+            break;
+        writeFileSync(join(dataPath, "signals", `${slug}.json`), sigJson, "utf-8");
+        mkdirSync(join(dataPath, "current-payloads", slug), { recursive: true });
+        for (const section of decl.declaration.sections) {
+            const payload = overlay.readPayload(slug, section.id, section.kind);
+            const text = JSON.stringify({
+                skill_slug: slug,
+                section_id: section.id,
+                kind: section.kind,
+                payload,
+            }, null, 2);
+            inlinedBytes += Buffer.byteLength(text, "utf-8");
+            if (inlinedBytes > budget)
+                break;
+            writeFileSync(join(dataPath, "current-payloads", slug, `${section.id}.json`), text, "utf-8");
+        }
+    }
+    // Inline the 3 optimizer-only skills under .claude/skills/<slug>/SKILL.md.
+    for (const slug of ["skill-curation", "knowledge-map", "drift-analysis"]) {
+        const src = join(optimizerSkillsRoot, slug);
+        const dest = join(workdirPath, ".claude", "skills", slug);
+        cpSync(src, dest, { recursive: true });
+    }
+    // Write the preamble. Backend-specific filename (CLAUDE.md). For codex /
+    // gemini sessions the daemon dispatcher would write AGENTS.md / GEMINI.md
+    // instead — same body. We default to CLAUDE.md here since the design
+    // §6 setting picks Claude as the curation default.
+    const preamble = renderPreamble({
+        runId,
+        runToken: token.raw,
+        cadence: params.cadence,
+        targetSkills,
+        workdirSummary: summarizeWorkdir(targetSkills, decls, snapshot.files.length),
+    });
+    writeFileSync(join(workdirPath, "CLAUDE.md"), preamble, "utf-8");
+    return { runId, runToken: token.raw, workdirPath, skillsRoot, targetSkills };
+}
+export function teardownOptimizerWorkdir(workdirPath) {
+    rmSync(workdirPath, { recursive: true, force: true });
+}
+function tryParse(s) {
+    try {
+        return JSON.parse(s);
+    }
+    catch {
+        return null;
+    }
+}
+function readExcludedSkills(db) {
+    try {
+        const row = db
+            .prepare(`SELECT value_json FROM runtime_state WHERE key = 'skill_curation.config'`)
+            .get();
+        if (!row)
+            return new Set(DEFAULT_SKILL_CURATION_CONFIG.excluded_skills);
+        return new Set(SkillCurationConfig.parse(JSON.parse(row.value_json)).excluded_skills);
+    }
+    catch {
+        return new Set();
+    }
+}
+function renderPreamble(p) {
+    return [
+        "# Aitne — Skill Curation Optimizer Run",
+        "",
+        "You are running inside an isolated optimizer workdir. The ONLY mutation",
+        "surface available to you is the curation API at",
+        "`http://localhost:8321/api/skill-curation/*`. Edit, Write, MultiEdit,",
+        "and general Bash are not in your allowed-tools list.",
+        "",
+        "## Run context",
+        "",
+        "- **runId**: `" + p.runId + "`",
+        "- **runToken** (use as `X-Optimizer-Token` header on every API call):",
+        "  ```",
+        "  " + p.runToken,
+        "  ```",
+        "- **cadence**: " + p.cadence,
+        "- **target skills** (selected by signal weight, cooldown-aware):",
+        p.targetSkills.length > 0 ? p.targetSkills.map((s) => "  - `" + s + "`").join("\n") : "  - (none — finalize with notes)",
+        "",
+        "## Workdir layout",
+        "",
+        p.workdirSummary,
+        "",
+        "## What to do",
+        "",
+        "1. Read `data/knowledge-map.json` to understand the live knowledge tree.",
+        "2. For each target skill, read `data/signals/<slug>.json` and",
+        "   `data/current-payloads/<slug>/<section_id>.json`.",
+        "3. Decide whether a curation proposal is warranted using the",
+        "   `drift-analysis` skill's corroboration rules.",
+        "4. For each section worth changing, dry-run a proposal first via",
+        "   `POST /api/skill-curation/proposals/dryrun`, then submit the real",
+        "   proposal via `POST /api/skill-curation/proposals` once it passes.",
+        "5. Finalize the run via",
+        "   `POST /api/skill-curation/runs/" + p.runId + "/finalize` with",
+        "   any notes on what you skipped and why.",
+        "",
+        "## Safety reminders",
+        "",
+        "- **Zero proposals is a valid run.** When in doubt, skip.",
+        "- Cite at least one `signal_id` per proposal (a proposal with empty",
+        "  `signal_ids[]` is auto-rejected).",
+        "- Free-text fields describe conventions; they do not prescribe actions",
+        "  (no \"when X then Y\", no \"must\"/\"always\"/\"never\").",
+        "- Per-run rate limit: max 20 proposals.",
+        "",
+        "See `.claude/skills/skill-curation/SKILL.md`,",
+        "`.claude/skills/knowledge-map/SKILL.md`, and",
+        "`.claude/skills/drift-analysis/SKILL.md` for the API contract,",
+        "snapshot semantics, and triage rules.",
+        "",
+    ].join("\n");
+}
+function summarizeWorkdir(targetSkills, decls, fileCount) {
+    const sectionTotal = decls
+        .filter((d) => targetSkills.includes(d.slug))
+        .reduce((acc, d) => acc + d.declaration.sections.length, 0);
+    return [
+        "- `data/knowledge-map.json` — " + fileCount + " files in the knowledge tree at run start",
+        "- `data/signals/` — unconsumed drift signals per skill",
+        "- `data/current-payloads/` — current overlay/seed JSON per section (" + sectionTotal + " sections across " + targetSkills.length + " skills)",
+        "- `.claude/skills/` — your three working skills (read-only references)",
+    ].join("\n");
+}
+//# sourceMappingURL=workdir.js.map

package/dist/core/skill-curation/workdir.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workdir.js","sourceRoot":"","sources":["../../../src/core/skill-curation/workdir.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAC1C,EAAE;AACF,wEAAwE;AACxE,2EAA2E;AAC3E,EAAE;AACF,mEAAmE;AACnE,4CAA4C;AAC5C,8BAA8B;AAC9B,6BAA6B;AAC7B,8BAA8B;AAC9B,UAAU;AACV,yBAAyB;AACzB,gCAAgC;AAChC,sDAAsD;AACtD,EAAE;AACF,uFAAuF;AACvF,oDAAoD;AACpD,EAAE;AACF,0EAA0E;AAC1E,uEAAuE;AACvE,gEAAgE;AAEhE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EACL,2BAA2B,GAE5B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAErE,OAAO,EAAE,6BAA6B,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACnF,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEhD,MAAM,MAAM,GAAG,YAAY,CAAC,wBAAwB,CAAC,CAAC;AAuCtD,MAAM,qBAAqB,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,yCAAyC;AACzC,+CAA+C;AAC/C,SAAS;AAEnD,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,MAAyC;IAEzC,MAAM,KAAK,GAAG,SAAS,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IAC/E,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,mBAAmB,EAAE,KAAK,CAAC,CAAC;IACrE,MAAM,mBAAmB,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,cAAc,EAAE,kBAAkB,CAAC,CAAC;IAC1F,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAE3C,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEvE,yCAAyC;IACzC,MAAM,YAAY,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAE7C,iEAAiE;IACjE,uEAAuE;IACvE,sEAAsE;IACtE,oEAAoE;IACpE,oEAAoE;IACpE,yDAAyD;IACzD,MAAM,gBAAgB,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACtE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC3C,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,0BAA0B,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,EAAE,EAAE,gBAAgB,CAAC,CAAC;QAC3D,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,CACT,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,EAC9D,6BAA6B,CAC9B,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,0CAA0C,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,KAAK,GAAG,2BAA2B,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC;IAC5F,2EAA2E;IAC3E,+EAA+E;IAC/E,iDAAiD;IACjD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC;IACtC,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE;QAC/C,aAAa,EAAE,QAAQ;QACvB,yEAAyE;QACzE,oDAAoD;QACpD,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3D,CAAC,CAAC;IACH,IAAI,eAAe,GAAG,MAAM;QAC1B,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;QACrC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAC3E,IAAI,MAAM,IAAI,MAAM,CAAC,oBAAoB,IAAI,MAAM,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACnD,eAAe,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,YAAY,GAAG,eAAe,CAAC,MAAM,GAAG,CAAC;QAC7C,CAAC,CAAC,eAAe;QACjB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,+DAA+D;IAE7F,MAAM,CAAC,EAAE;SACN,OAAO,CACN;+CACyC,CAC1C;SACA,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEvH,0BAA0B;IAC1B,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACtD,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,oBAAoB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAEhG,wCAAwC;IACxC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,kBAAkB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC7D,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,IAAI,qBAAqB,CAAC;IAC9D,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,EAAE,WAAW;YAAE,SAAS;QACjC,MAAM,IAAI,GAAG,yBAAyB,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9C,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC;SAClC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACd,YAAY,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACpD,IAAI,YAAY,GAAG,MAAM;YAAE,MAAM;QACjC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,OAAO,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAE3E,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,kBAAkB,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzE,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;YAChD,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACpE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;gBAC1B,UAAU,EAAE,IAAI;gBAChB,UAAU,EAAE,OAAO,CAAC,EAAE;gBACtB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO;aACR,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACZ,YAAY,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACjD,IAAI,YAAY,GAAG,MAAM;gBAAE,MAAM;YACjC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,kBAAkB,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,KAAK,MAAM,IAAI,IAAI,CAAC,gBAAgB,EAAE,eAAe,EAAE,gBAAgB,CAAC,EAAE,CAAC;QACzE,MAAM,GAAG,GAAG,IAAI,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC1D,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,yEAAyE;IACzE,0EAA0E;IAC1E,qEAAqE;IACrE,mDAAmD;IACnD,MAAM,QAAQ,GAAG,cAAc,CAAC;QAC9B,KAAK;QACL,QAAQ,EAAE,KAAK,CAAC,GAAG;QACnB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,YAAY;QACZ,cAAc,EAAE,gBAAgB,CAAC,YAAY,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;KAC7E,CAAC,CAAC;IACH,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAEjE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,WAAmB;IAC1D,MAAM,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS;IACzB,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AACtD,CAAC;AAED,SAAS,kBAAkB,CAAC,EAAqB;IAC/C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE;aACX,OAAO,CAAC,0EAA0E,CAAC;aACnF,GAAG,EAAwC,CAAC;QAC/C,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,GAAG,CAAC,6BAA6B,CAAC,eAAe,CAAC,CAAC;QACxE,OAAO,IAAI,GAAG,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;IACxF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,GAAG,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,CAMvB;IACC,OAAO;QACL,wCAAwC;QACxC,EAAE;QACF,yEAAyE;QACzE,iDAAiD;QACjD,uEAAuE;QACvE,sDAAsD;QACtD,EAAE;QACF,gBAAgB;QAChB,EAAE;QACF,gBAAgB,GAAG,CAAC,CAAC,KAAK,GAAG,GAAG;QAChC,uEAAuE;QACvE,OAAO;QACP,IAAI,GAAG,CAAC,CAAC,QAAQ;QACjB,OAAO;QACP,iBAAiB,GAAG,CAAC,CAAC,OAAO;QAC7B,kEAAkE;QAClE,CAAC,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,kCAAkC;QACxH,EAAE;QACF,mBAAmB;QACnB,EAAE;QACF,CAAC,CAAC,cAAc;QAChB,EAAE;QACF,eAAe;QACf,EAAE;QACF,0EAA0E;QAC1E,+DAA+D;QAC/D,sDAAsD;QACtD,8DAA8D;QAC9D,kDAAkD;QAClD,kEAAkE;QAClE,sEAAsE;QACtE,sEAAsE;QACtE,yBAAyB;QACzB,oCAAoC,GAAG,CAAC,CAAC,KAAK,GAAG,iBAAiB;QAClE,2CAA2C;QAC3C,EAAE;QACF,qBAAqB;QACrB,EAAE;QACF,2DAA2D;QAC3D,qEAAqE;QACrE,qCAAqC;QACrC,wEAAwE;QACxE,6DAA6D;QAC7D,yCAAyC;QACzC,EAAE;QACF,+CAA+C;QAC/C,8CAA8C;QAC9C,gEAAgE;QAChE,uCAAuC;QACvC,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,YAAsB,EAAE,KAAkC,EAAE,SAAiB;IACrG,MAAM,YAAY,GAAG,KAAK;SACvB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;SAC5C,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,WAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC/D,OAAO;QACL,gCAAgC,GAAG,SAAS,GAAG,2CAA2C;QAC1F,wDAAwD;QACxD,sEAAsE,GAAG,YAAY,GAAG,mBAAmB,GAAG,YAAY,CAAC,MAAM,GAAG,UAAU;QAC9I,wEAAwE;KACzE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/core/skills-compiler.d.ts

@@ -0,0 +1,391 @@
+import { type BackendId, type IntegrationKey, type IntegrationState, type ProcessKey } from "@aitne/shared";
+import type { MailAccount } from "../services/mail/provider.js";
+export declare const logger: import("pino").Logger<never, boolean>;
+interface SkillCompilerFile {
+    path: string;
+    content: string;
+    updatedAt: string | null;
+}
+export declare function missingDelegatedVariants(workspaceDir: string, integrationKey: IntegrationKey, delegatedBackend: BackendId): {
+    skills: string[];
+    taskFlows: string[];
+};
+interface SessionPromptBundleParams {
+    backendId: BackendId;
+    sessionDir: string;
+    eventType: string;
+    processKey?: ProcessKey;
+    /**
+     * Per-turn overrides used by custom messaging bang commands
+     * (`!commandname`). When provided, both fields apply atomically:
+     *  - `skillSlugs` replaces the manifest-resolved skill set. An empty
+     *    array means "no skills"; the materializer still emits the safety
+     *    preamble + character block + an empty Skills section.
+     *  - `profileBody` replaces the rendered `agent-profiles/<profile>.md`
+     *    body. Safety + character + behavioral rules + daemon-API + skills
+     *    sections still render around it.
+     *
+     * `null` skills or `null` body each fall back to the manifest defaults
+     * for that field independently.
+     */
+    override?: {
+        skillSlugs: readonly string[] | null;
+        profileBody: string | null;
+    };
+}
+/**
+ * Materializes backend-specific instruction files for session workdirs
+ * by reading directly from the source tree (agent-assets/agent-profiles/ and
+ * agent-assets/skills/). User-authored skills are managed separately via workdir.ts.
+ *
+ * Previous versions maintained a "deploy" layer at {dataDir}/prompts/{backendId}/
+ * that was an exact copy of source. That layer was removed in favour of reading
+ * source directly — every session now always gets the latest files.
+ */
+export declare class SkillsCompiler {
+    private readonly workspaceDir;
+    /** Set of configured service names (e.g. 'calendar', 'obsidian', 'notion', 'github'). */
+    private readonly configuredServices;
+    /**
+     * Snapshot of active mail accounts (§Phase 5). When non-empty and the
+     * `mail` skill is part of the session, an `accounts.md` file is written
+     * into the session's mail skill dir so the agent can resolve labels →
+     * accountId without a round-trip to the daemon.
+     *
+     * Intentionally generated at session-materialization time (not into the
+     * checked-in `agent-assets/skills/mail/` source tree) so the repo stays
+     * git-clean. Deviation from the design-doc phrasing — see
+     * `docs/design/appendices/multi-mail-provider.md` §7.
+     */
+    private readonly mailAccounts;
+    /**
+     * Current integration states (Phase 3). Used by `selectSkillVariantFile`
+     * to choose the right SKILL.*.md variant at session-materialization time.
+     * Defaults to empty (all integrations treated as non-delegated → SKILL.md).
+     */
+    private readonly integrations;
+    /**
+     * User-defined communication style / persona (design §15.4). When
+     * non-empty, a `## Character (user-defined)` block is rendered into
+     * every backend's instruction file (CLAUDE.md / AGENTS.md / GEMINI.md)
+     * between the safety preamble and the profile body. Defaults to the
+     * empty string, which omits the block.
+     */
+    private readonly character;
+    constructor(workspaceDir: string, 
+    /** Set of configured service names (e.g. 'calendar', 'obsidian', 'notion', 'github'). */
+    configuredServices?: ReadonlySet<string>, 
+    /**
+     * Snapshot of active mail accounts (§Phase 5). When non-empty and the
+     * `mail` skill is part of the session, an `accounts.md` file is written
+     * into the session's mail skill dir so the agent can resolve labels →
+     * accountId without a round-trip to the daemon.
+     *
+     * Intentionally generated at session-materialization time (not into the
+     * checked-in `agent-assets/skills/mail/` source tree) so the repo stays
+     * git-clean. Deviation from the design-doc phrasing — see
+     * `docs/design/appendices/multi-mail-provider.md` §7.
+     */
+    mailAccounts?: readonly MailAccount[], 
+    /**
+     * Current integration states (Phase 3). Used by `selectSkillVariantFile`
+     * to choose the right SKILL.*.md variant at session-materialization time.
+     * Defaults to empty (all integrations treated as non-delegated → SKILL.md).
+     */
+    integrations?: Partial<Record<IntegrationKey, IntegrationState>>, 
+    /**
+     * User-defined communication style / persona (design §15.4). When
+     * non-empty, a `## Character (user-defined)` block is rendered into
+     * every backend's instruction file (CLAUDE.md / AGENTS.md / GEMINI.md)
+     * between the safety preamble and the profile body. Defaults to the
+     * empty string, which omits the block.
+     */
+    character?: string);
+    /**
+     * P22 — skill-curation overlay context. When set, the materializer runs an
+     * extra pass that resolves `<!-- CURATION:<kind> id="<id>" -->` anchors in
+     * each skill's SKILL.md against `<dataDir>/skills/overlays/<slug>/<id>.json`
+     * (overlay) or `agent-assets/skills/<slug>/seeds/<id>.seed.json` (seed).
+     *
+     * Optional and default-OFF — daemon code is expected to call
+     * `setSkillCurationContext({ dataDir })` at startup. Test workspaces and
+     * lint passes that don't need overlays leave it unset, which short-circuits
+     * the pass and is safe (anchors already render to nothing if there's no
+     * overlay AND no seed; a missing context_dir simply skips the pass).
+     */
+    private skillCurationDataDir;
+    private skillCurationCacheInvalidated;
+    setSkillCurationContext(opts: {
+        dataDir: string;
+    }): void;
+    /** Called by the apply / revert flow so future session materializations
+     *  re-render the affected skill's anchors. The cache itself is per-session
+     *  (we always read overlays from disk fresh inside the materializer) — this
+     *  flag exists so an in-process consumer can react to writes. */
+    invalidateSkillCurationCache(skillSlug: string): void;
+    /**
+     * Validate that all skill AND task-flow variants required by
+     * currently-delegated integrations exist on disk. Called at daemon
+     * startup after integration state is loaded; returns missing variant
+     * paths grouped by kind (empty arrays = everything present).
+     *
+     * §4.7 "Missing-variant policy": if any paths come back, the caller
+     * should refuse to enter delegated mode or at least log a loud warning.
+     * The per-integration variant for the hypothetical PATCH path lives in
+     * the standalone `missingDelegatedVariants` helper below; this method
+     * aggregates across every currently-delegated integration using its
+     * declared `delegatedBackend` (not the session backend — see the helper
+     * docstring for the rationale).
+     */
+    validateDelegatedVariants(): {
+        skills: string[];
+        taskFlows: string[];
+    };
+    /**
+     * Resolve the effective SKILL.md filename for a skill + session backend pair.
+     *
+     *   - `"SKILL.md"`                     — direct/default body
+     *   - `"SKILL.delegated.<backend>.md"` — cross-backend variant (only if it
+     *                                         exists on disk; falls back to
+     *                                         `"SKILL.md"` when missing)
+     *   - `null`                           — same-backend native MCP; do NOT
+     *                                         materialize the skill at all
+     *                                         (DELEGATED-MODE-V2-DESIGN.md §4.1.2).
+     */
+    private resolveSkillVariantFile;
+    getSourceSkillsRoot(): string;
+    getSourceProfilesRoot(): string;
+    getSourceTaskFlowsRoot(): string;
+    /** Read all source skill and profile files (for dashboard inspection). */
+    readSourceFiles(): SkillCompilerFile[];
+    materializeSessionBundle(params: SessionPromptBundleParams): {
+        profile: string;
+        skills: string[];
+    };
+    /** Read raw profile .md without safety injection. */
+    private readProfile;
+    /**
+     * Read the shared safety preamble (_safety.md) and append the
+     * `<!-- safety:end -->` sentinel so downstream helpers (notably
+     * `insertCharacterBlock` in `character-block.ts`) can place the
+     * Character block directly below safety rather than above whichever
+     * `## ` heading the preamble opens with. See design §15.4.2 / §15.5.
+     */
+    private readSafetyPreamble;
+    /**
+     * Read a profile .md and prepend the shared safety preamble (_safety.md).
+     * Used for Claude SDK sessions where skills are separate files.
+     * Returns null if the profile file doesn't exist.
+     *
+     * The safety preamble is emitted with a trailing `<!-- safety:end -->`
+     * sentinel so the Character-block rewriter can insert below safety even
+     * when the preamble itself starts with `## Safety Invariants` (design
+     * §15.4.2 / §15.5).
+     */
+    private readProfileWithSafety;
+    /**
+     * Compose a synthesized profile document from a user-supplied body — used
+     * by custom bang commands whose `instruction_md` replaces the
+     * conversational profile. Wraps the body in a top-level heading so the
+     * downstream `applyCharacterBlockRewrite` insertion logic finds the
+     * `# ` anchor it expects, then prepends the safety preamble using the
+     * same shape as `readProfileWithSafety` so safety always lands above
+     * Character + body. Empty body inputs are caller-responsibility — the
+     * storage layer normalises whitespace-only strings to null.
+     */
+    private composeClaudeProfileFromBody;
+    private materializeClaudeSession;
+    /**
+     * P22 §1.5 — splice CURATION anchors in a single skill's materialized
+     * SKILL.md against overlay/seed JSON. Pure file I/O — overlay store
+     * dictates payload precedence (overlay > seed > strip-line). No-op when
+     * no curation context is configured or when the skill has no anchors.
+     */
+    private spliceCurationAnchorsInSkill;
+    private materializeCliSession;
+}
+export declare const EMPTY_MAIL_ACCOUNTS_MD: string;
+export declare function renderMailAccountsMd(accounts: readonly MailAccount[]): string;
+/**
+ * Return the backend-specific skills directory name for a given backend.
+ * Returns null for Claude (which uses `.claude/skills/` managed separately).
+ */
+export declare function cliSkillsDirName(backendId: BackendId): string | null;
+/**
+ * Rewrite the `## Character (user-defined)` block inside every backend
+ * instruction file that currently lives in `workdir`. Used by the
+ * `PATCH /api/config` live-overwrite path (§15.6.1) so an owner editing
+ * character on the dashboard doesn't have to wait for the next session
+ * spawn for the change to land.
+ *
+ * Multi-backend aware: a workdir that has seen a Claude→Codex fallback
+ * contains both CLAUDE.md and AGENTS.md, and both must end up byte-
+ * identical in their character block. Each write is atomic (tmp +
+ * rename, both on the same filesystem so rename stays cheap) and
+ * per-file errors are logged without failing the whole call.
+ *
+ * Returns a summary of how many files were rewritten. Useful for
+ * instrumentation and for the dashboard PATCH handler to log.
+ *
+ * The helper is an FS wrapper: its pure parse/compose half lives in
+ * `character-block.ts` and is covered 100% there. This side is excluded
+ * from coverage along with the rest of `skills-compiler.ts`.
+ */
+export declare function rewriteCharacterBlock(workdir: string, character: string): {
+    rewritten: number;
+    skipped: number;
+    failed: number;
+};
+/**
+ * Strip service sections from external-services/SKILL.md that correspond to
+ * unconfigured integrations. Sections are delimited by HTML comments:
+ *   <!-- service:calendar --> ... <!-- /service:calendar -->
+ * When `configuredServices` is empty the content is returned unchanged — the
+ * "no services configured yet" case keeps every section so the agent can see
+ * the full menu. Only strips once the user has configured at least one
+ * service (and therefore expressed an intent to narrow the surface).
+ */
+export declare function stripUnconfiguredServices(content: string, configuredServices: ReadonlySet<string>): string;
+/**
+ * Adapt a SKILL.md for CLI backends (Codex / Gemini): retain only `name`,
+ * `description`, and `when_to_use` frontmatter fields, stripping
+ * Claude-specific fields like `allowed-tools`. The body content is
+ * preserved unchanged.
+ *
+ * `when_to_use` is the secondary trigger-shape clarification documented
+ * in `SKILLS-PHASE-2-PLAN.md` §3.2 / §5; the Claude Agent SDK reads it
+ * verbatim from `q.when_to_use` (verified against
+ * `claude-agent-sdk@0.2.98/cli.js`). Preserving it on the CLI side keeps
+ * the per-backend skill frontmatter aligned even though Codex / Gemini
+ * do not currently consume the field — drift would surface as a missing
+ * activation hint when they eventually do.
+ *
+ * Assumes `name`, `description`, and `when_to_use` are each single-line
+ * YAML scalars (no `|` / `>` block forms). A multi-line `when_to_use:`
+ * is matched only by its first line — the `.+` regex stops at the
+ * newline — but since YAML block scalars start with the line that
+ * contains only `|` or `>`, the captured value would be the empty
+ * indicator and the inlined value would be useless. Phase 2 v1 keeps
+ * this conservative: callers must use single-line scalars (NG5).
+ */
+export declare function adaptSkillForCli(content: string): string;
+/**
+ * Resolve `{{> base }}` include directives in a skill/task-flow variant file.
+ * Reads `SKILL.base.md` (or `<key>.base.md` for task flows) from `basePath`
+ * and replaces every occurrence of `{{> base }}` with the base file's content
+ * (frontmatter stripped). A missing or empty base file is silently ignored.
+ *
+ * Only `{{> base }}` is supported — this is intentionally minimal (§4.7
+ * design note: "~40 lines of pure TS").
+ *
+ * @deprecated DELEGATED-PROXY-API-DESIGN.md §11 — after Phase D no in-tree
+ * skill uses `{{> base }}`: mail / external-services unified their bodies
+ * during Phase D, and the lone surviving `notion/SKILL.base.md` was
+ * removed in Phase 9 (its hourly-check read-only constraint moved to
+ * `routine.hourly_check.md` task-flow where the rule applies in every
+ * integration mode, including same-backend delegated where the skill
+ * body is dropped). The helper is retained for future composition needs;
+ * remove the call sites in `materializeClaudeSession` /
+ * `materializeCliSession` when no consumer reappears.
+ */
+export declare function renderPartialIncludes(content: string, basePath: string): string;
+/**
+ * Resolve `{{> ref:<name> }}` directives in a skill body by inlining
+ * `references/<name>.md` (frontmatter stripped) from the skill's source dir.
+ *
+ * Mirrors `renderPartialIncludes` but is intra-skill, not cross-skill: each
+ * skill carries its own `references/` dir. Used by progressive-disclosure
+ * skills (planned for `mail`, `roadmap`, `reading`, `user-interview` after
+ * Phase 2-B) so heavy reference tables can live next to the skill body
+ * without bloating the navigation overview.
+ *
+ * Behaviour:
+ *  - Missing `references/<name>.md` → directive replaced with empty string;
+ *    logged at WARN. (Mirrors the deprecated helper's missing-base behaviour.)
+ *  - The directive matches `{{> ref:<name> }}` with the strict-kebab name
+ *    pattern `[a-z][a-z0-9-]*`. Path-traversal (`../`, leading underscore,
+ *    uppercase) is rejected at the regex level — `existsSync` is never
+ *    consulted for invalid names.
+ *  - Multiple occurrences each inline the same file's content (re-read per
+ *    occurrence — pinned by the unit tests so a later caching refactor must
+ *    surface as a deliberate change).
+ *  - Frontmatter on the reference file (if present) is stripped before
+ *    inline, so reference files can carry `---\nkind: reference\n---`
+ *    headers for tooling without leaking YAML into skill bodies.
+ *  - The resolver is NOT fence-aware; a directive inside a triple-backtick
+ *    fence is still expanded. This matches `renderPartialIncludes` and is
+ *    deliberate for v1 — fence-aware resolution would be a separate refactor.
+ *
+ * Phase 2-A ships compiler-only; no in-tree skill carries a directive yet
+ * (`skills-manifest.test.ts` pins `0` as the lockstep count). Phase 2-B
+ * starts emitting them per the migration map in `SKILLS-PHASE-2-PLAN.md`.
+ */
+export declare function renderReferenceIncludes(content: string, skillSrcDir: string): string;
+/**
+ * §7.7 — apply the per-integration tool-deny policy to a delegated skill
+ * body. Two enforcement modes:
+ *
+ *  - **Claude (hard enforcement):** parse the YAML frontmatter and remove
+ *    every `allowed-tools` entry whose unsuffixed name (after the
+ *    descriptor's `toolNamespace`) is in `deniedTools`. The Claude Agent
+ *    SDK refuses to invoke any tool not present in `allowed-tools`, so
+ *    this is hard enforcement at the SDK boundary.
+ *
+ *  - **Codex / Gemini (soft enforcement):** append a "Denied tools (do
+ *    not invoke)" prose block at the end of the skill body listing the
+ *    full namespaced tool names. The CLI surfaces have no per-tool deny
+ *    mechanism comparable to Claude's `allowed-tools`; the prose is the
+ *    only guard. Documented soft-enforcement gap.
+ *
+ * Stale entries (a deniedTools name that doesn't match any tool in the
+ * active backend's `capabilityTools`) are silently ignored — the API
+ * already rejects them at PATCH time, but a delegatedBackend swap can
+ * leave Claude-namespaced names in a list now active for Codex.
+ *
+ * Run AFTER `renderPartialIncludes` and `stripUnconfiguredServices` so
+ * partial includes and service-section gating land first.
+ */
+export declare function applyDeniedTools(content: string, integrationKey: IntegrationKey, backendId: BackendId, deniedTools: readonly string[]): string;
+/**
+ * DELEGATED-MODE-V2-DESIGN.md §4.3.3-§4.3.4 — render a top-level prose
+ * deny block listing every same-backend integration tool the user has
+ * denied. Returns `null` when no integration is in same-backend mode for
+ * this backend or the deny lists are empty.
+ *
+ * Codex (γ outcome): this prose is the ONLY enforcement surface — the
+ * Codex CLI's connector apps have no admin-policy or per-tool deny config.
+ * The agent profile (`AGENTS.md`) inlines this block above the behavioral
+ * rules so it is impossible to miss.
+ *
+ * Gemini: duplicate intent — admin-policy already hard-denies these tools
+ * (§4.3.3 hard enforcement), but echoing the deny in prose saves tokens
+ * the model would otherwise spend drafting a doomed call.
+ */
+export declare function buildSameBackendDenyBlock(integrations: Partial<Record<IntegrationKey, IntegrationState>>, sessionBackend: BackendId): string | null;
+/**
+ * Apply the deny pass for every integration whose `skillsTouched` OR
+ * `deniedToolsAppliesToSkills` includes the given skill slug. A skill that
+ * touches no integration leaves content unchanged. Touching multiple
+ * integrations runs the pass once per integration so each contributes its
+ * own deny list.
+ *
+ * Hard enforcement of the same deny list for cross-backend delegated
+ * calls lives at the `POST /api/integrations/:key/invoke` chokepoint
+ * (DELEGATED-MODE-V2-DESIGN.md §4.3.2). For same-backend native MCP it
+ * is enforced via SDK `disallowedTools` (Claude) / admin policy
+ * (Gemini); see `collectSessionDeniedTools` (§4.3.3).
+ */
+export declare function applyAllDeniedToolsForSkill(content: string, skillSlug: string, backendId: BackendId, integrations: Partial<Record<IntegrationKey, IntegrationState>>): string;
+/**
+ * Remove any built-in skill directory under `destRoot` whose slug is not
+ * in `keep`. Recognises a directory as a built-in by its presence under
+ * the source `agent-assets/skills/` tree — anything else (user-authored
+ * skill, accounts.md, etc.) is left alone, since `syncAllUserSkills` is
+ * the canonical writer for those.
+ *
+ * Idempotent and side-effect-free when there is nothing to prune.
+ * Exported for unit testing only.
+ */
+export declare function pruneStaleBuiltinSkillDirs(destRoot: string, sourceSkillsRoot: string, keep: readonly string[]): void;
+export {};
+//# sourceMappingURL=skills-compiler.d.ts.map

package/dist/core/skills-compiler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills-compiler.d.ts","sourceRoot":"","sources":["../../src/core/skills-compiler.ts"],"names":[],"mappings":"AAYA,OAAO,EAWL,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,UAAU,EAChB,MAAM,eAAe,CAAC;AAIvB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAahE,eAAO,MAAM,MAAM,uCAAkC,CAAC;AAEtD,UAAU,iBAAiB;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAqDD,wBAAgB,wBAAwB,CACtC,YAAY,EAAE,MAAM,EACpB,cAAc,EAAE,cAAc,EAC9B,gBAAgB,EAAE,SAAS,GAC1B;IAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,CAsD3C;AAED,UAAU,yBAAyB;IACjC,SAAS,EAAE,SAAS,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,EAAE;QACT,UAAU,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAC;QACrC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;KAC5B,CAAC;CACH;AA0BD;;;;;;;;GAQG;AACH,qBAAa,cAAc;IAEvB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,yFAAyF;IACzF,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC;;;;;;;;;;OAUG;IACH,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,SAAS;gBA5BT,YAAY,EAAE,MAAM;IACrC,yFAAyF;IACxE,kBAAkB,GAAE,WAAW,CAAC,MAAM,CAAa;IACpE;;;;;;;;;;OAUG;IACc,YAAY,GAAE,SAAS,WAAW,EAAO;IAC1D;;;;OAIG;IACc,YAAY,GAAE,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAM;IACrF;;;;;;OAMG;IACc,SAAS,GAAE,MAAW;IAGzC;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,oBAAoB,CAAuB;IACnD,OAAO,CAAC,6BAA6B,CAAqB;IAE1D,uBAAuB,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAIxD;;;qEAGiE;IACjE,4BAA4B,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAIrD;;;;;;;;;;;;;OAaG;IACH,yBAAyB,IAAI;QAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAAC,SAAS,EAAE,MAAM,EAAE,CAAA;KAAE;IAiBtE;;;;;;;;;;OAUG;IACH,OAAO,CAAC,uBAAuB;IAQ/B,mBAAmB,IAAI,MAAM;IAI7B,qBAAqB,IAAI,MAAM;IAI/B,sBAAsB,IAAI,MAAM;IAIhC,0EAA0E;IAC1E,eAAe,IAAI,iBAAiB,EAAE;IAiBtC,wBAAwB,CAAC,MAAM,EAAE,yBAAyB,GAAG;QAC3D,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,EAAE,CAAC;KAClB;IAgDD,qDAAqD;IACrD,OAAO,CAAC,WAAW;IAMnB;;;;;;OAMG;IACH,OAAO,CAAC,kBAAkB;IAQ1B;;;;;;;;;OASG;IACH,OAAO,CAAC,qBAAqB;IAyB7B;;;;;;;;;OASG;IACH,OAAO,CAAC,4BAA4B;IAUpC,OAAO,CAAC,wBAAwB;IA4JhC;;;;;OAKG;IACH,OAAO,CAAC,4BAA4B;IAiCpC,OAAO,CAAC,qBAAqB;CA6K9B;AAED,eAAO,MAAM,sBAAsB,QAQvB,CAAC;AAEb,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,SAAS,WAAW,EAAE,GAAG,MAAM,CAmB7E;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,SAAS,GAAG,MAAM,GAAG,IAAI,CAMpE;AAgBD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,GAChB;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAiCxD;AAiID;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,MAAM,EACf,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAAC,GACtC,MAAM,CAMR;AAUD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CA2BxD;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAM/E;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,GAClB,MAAM,CAeR;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,EACf,cAAc,EAAE,cAAc,EAC9B,SAAS,EAAE,SAAS,EACpB,WAAW,EAAE,SAAS,MAAM,EAAE,GAC7B,MAAM,CAmBR;AAmED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,yBAAyB,CACvC,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC,EAC/D,cAAc,EAAE,SAAS,GACxB,MAAM,GAAG,IAAI,CAgBf;AAwCD;;;;;;;;;;;;GAYG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,SAAS,EACpB,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC,GAC9D,MAAM,CAiBR;AAED;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,MAAM,EAChB,gBAAgB,EAAE,MAAM,EACxB,IAAI,EAAE,SAAS,MAAM,EAAE,GACtB,IAAI,CAcN"}