@askdkc/kiokuko 0.1.16 → 0.1.19

package/dist/web/ui.js.map

@@ -1 +1 @@
-{"version":3,"file":"ui.js","sourceRoot":"","sources":["../../src/web/ui.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAE7F,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC;IACrC,aAAa,EAAE,kBAAkB;IACjC,YAAY,EAAE,iBAAiB;IAC/B,OAAO,EAAE,WAAW;IACpB,QAAQ,EAAE,YAAY;CACvB,CAAC;KACC,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC;KAC1B,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC;KAC1B,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC;KAC1B,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC;KAC/B,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;AAEnC,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mBAyLf,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAqa1B,CAAC"}
+{"version":3,"file":"ui.js","sourceRoot":"","sources":["../../src/web/ui.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAE7F,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC;IACrC,aAAa,EAAE,kBAAkB;IACjC,YAAY,EAAE,iBAAiB;IAC/B,OAAO,EAAE,WAAW;IACpB,QAAQ,EAAE,YAAY;CACvB,CAAC;KACC,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC;KAC1B,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC;KAC1B,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC;KAC1B,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC;KAC/B,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;AAEnC,gFAAgF;AAChF,MAAM,UAAU,4BAA4B,CAAC,KAAc;IACzD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,KAAK,GAAG,KAAgC,CAAC;IAC/C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC;QACrB,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY;QAClF,gBAAgB,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,iBAAiB,EAAE,cAAc;QACrF,cAAc,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY;QACpF,eAAe,EAAE,YAAY;KAC9B,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,CAAC,IAAa,EAAE,OAAe,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ;WACpF,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,OAAO,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChH,MAAM,SAAS,GAAG,CAAC,IAAa,EAAkB,EAAE;QAClD,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC;IAC5E,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChC,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;IAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;IACxC,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;IACxC,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IACpC,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC;IAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1B,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IACtC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;WAClG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;WACpG,KAAK,CAAC,UAAU,KAAK,QAAQ;WAC7B,OAAO,aAAa,KAAK,QAAQ,IAAI,CAAC,2CAA2C,CAAC,IAAI,CAAC,aAAa,CAAC;WACrG,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC;WACpE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC;WAC5E,KAAK,CAAC,OAAO,KAAK,UAAU,aAAa,IAAI,IAAI,EAAE;WACnD,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC;WACtB,KAAK,CAAC,UAAU,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,sBAAsB,aAAa,EAAE;WACvF,OAAO,cAAc,KAAK,QAAQ;WAClC,CAAC,CAAC,SAAS,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;WACvG,OAAO,KAAK,CAAC,SAAS,KAAK,SAAS;WACpC,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC;WACjG,OAAO,KAAK,KAAK,QAAQ;WACzB,CAAC,CAAC,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;WAC3E,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,GAAG,CAAC;WACjC,YAAY,KAAK,IAAI,IAAI,CAAC,OAAO,YAAY,KAAK,QAAQ,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;WACrH,YAAY,KAAK,IAAI,IAAI,CAAC,OAAO,YAAY,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;WACpG,CAAC,YAAY,KAAK,IAAI,CAAC,KAAK,CAAC,YAAY,KAAK,IAAI,CAAC;WACnD,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;WAC5E,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC;WACrH,OAAQ,QAAoC,CAAC,SAAS,KAAK,QAAQ;WACnE,CAAC,MAAM,CAAC,aAAa,CAAE,QAAoC,CAAC,SAAS,CAAC;WACpE,QAAoC,CAAC,SAAoB,GAAG,CAAC;WAC7D,QAAoC,CAAC,SAAoB,GAAG,EAAE;WAC/D,QAAoC,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,IAAI,CAAE,QAAoC,CAAC,UAAU,EAAE,GAAG,CAAC;WACzH,OAAO,WAAW,KAAK,QAAQ;WAC/B,CAAC,CAAC,cAAc,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;WAC1E,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,UAAU,GAAG,CAAC;WACvG,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC;WAChG,UAAU,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;WAC5C,KAAK,CAAC,WAAsB,GAAI,KAAK,CAAC,UAAqB;WAC3D,KAAK,CAAC,WAAsB,GAAI,KAAK,CAAC,aAAwB;WAC/D,UAAU,KAAK,IAAI,IAAI,UAAU,GAAI,KAAK,CAAC,WAAsB;WACjE,YAAY,KAAK,IAAI,IAAI,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,UAAU,KAAK,IAAI,CAAC;WAC1F,YAAY,KAAK,IAAI,IAAI,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;WACtF,KAAK,KAAK,UAAU,IAAI,UAAU,KAAK,IAAI;WAC3C,KAAK,KAAK,UAAU,IAAI,UAAU,KAAK,IAAI;WAC3C,YAAY,KAAK,IAAI,IAAI,CAAE,QAAoC,CAAC,SAAS,KAAK,CAAC,IAAK,QAAoC,CAAC,UAAU,KAAK,IAAI,CAAC;WAC7I,YAAY,KAAK,IAAI,IAAI,CAAE,QAAoC,CAAC,SAAS,KAAK,CAAC,IAAI,CAAC,IAAI,CAAE,QAAoC,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACpK,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,gCAAgC,CAAC,KAAc;IAC7D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,KAAK,GAAG,KAAgC,CAAC;IAC/C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;IACjG,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI;WAC3C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;WACtD,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,IAAI,GAAG,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE;WACvI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC;WACjG,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,IAAI,KAAK;WACxG,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;WAClF,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC;WACzF,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,UAAU,IAAI,CAAC;WACvG,OAAO,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC;AAC/E,CAAC;AAED,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mBA8Pf,eAAe;0CACQ,4BAA4B,CAAC,QAAQ,EAAE;8CACnC,gCAAgC,CAAC,QAAQ,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAm4BjF,CAAC"}

package/migrations/008_federated_memory.sql

@@ -0,0 +1,46 @@
+-- Federated retrieval metadata. Existing structured scopes remain valid and
+-- legacy project entries stay project-only unless explicit applicability is
+-- present; no entry rows are rewritten by this migration.
+CREATE TABLE repository_fingerprints (
+    repository_id TEXT PRIMARY KEY
+        REFERENCES repositories(repository_id)
+        ON DELETE CASCADE,
+    fingerprint_json TEXT NOT NULL,
+    manifest_digest TEXT NOT NULL,
+    updated_at TEXT NOT NULL
+);
+
+CREATE INDEX IF NOT EXISTS idx_entry_search_signals_type_value_entry
+    ON entry_search_signals(signal_type, normalized_value, entry_id);
+
+CREATE INDEX IF NOT EXISTS idx_entries_workspace_status
+    ON entries(workspace, status);
+
+-- Version 2 only allowed project/global delivery origins. Rebuild the small
+-- projection table so context deliveries can retain ecosystem provenance.
+CREATE TABLE context_delivery_entries_federated (
+    delivery_id TEXT NOT NULL REFERENCES context_deliveries(delivery_id) ON DELETE CASCADE,
+    entry_id TEXT NOT NULL,
+    entry_revision INTEGER NOT NULL CHECK (entry_revision > 0),
+    rank INTEGER NOT NULL CHECK (rank > 0),
+    score_components_json TEXT NOT NULL,
+    selection_reason_json TEXT NOT NULL,
+    origin_scope TEXT NOT NULL DEFAULT 'project' CHECK (origin_scope IN ('project', 'ecosystem', 'global')),
+    PRIMARY KEY (delivery_id, entry_id),
+    FOREIGN KEY (entry_id, entry_revision)
+        REFERENCES entry_revisions(entry_id, revision)
+);
+
+INSERT INTO context_delivery_entries_federated (
+    delivery_id, entry_id, entry_revision, rank,
+    score_components_json, selection_reason_json, origin_scope
+)
+SELECT delivery_id, entry_id, entry_revision, rank,
+       score_components_json, selection_reason_json, origin_scope
+  FROM context_delivery_entries;
+
+DROP TABLE context_delivery_entries;
+ALTER TABLE context_delivery_entries_federated RENAME TO context_delivery_entries;
+
+CREATE INDEX idx_context_delivery_entries_entry
+    ON context_delivery_entries(entry_id, entry_revision);

package/migrations/009_external_skill_discovery.sql

@@ -0,0 +1,126 @@
+CREATE TABLE external_skill_generation_clock (
+    singleton INTEGER PRIMARY KEY CHECK (singleton = 1),
+    value INTEGER NOT NULL CHECK (typeof(value) = 'integer' AND value BETWEEN 0 AND 9007199254740991)
+);
+
+INSERT INTO external_skill_generation_clock (singleton, value) VALUES (1, 0);
+
+CREATE TABLE external_skill_generation_tokens (
+    generation INTEGER PRIMARY KEY AUTOINCREMENT
+        CHECK (typeof(generation) = 'integer' AND generation BETWEEN 1 AND 9007199254740991)
+);
+
+CREATE TABLE external_skills (
+    skill_id TEXT PRIMARY KEY,
+    generation INTEGER NOT NULL REFERENCES external_skill_generation_tokens(generation)
+        CHECK (typeof(generation) = 'integer' AND generation BETWEEN 1 AND 9007199254740991),
+    provider TEXT NOT NULL,
+    source_type TEXT NOT NULL CHECK (source_type = 'github'),
+    source_locator TEXT NOT NULL,
+    slug TEXT NOT NULL,
+    name TEXT NOT NULL,
+    install_url TEXT,
+    official_status TEXT NOT NULL CHECK (official_status IN ('curated', 'catalog-verified', 'owner-verified', 'registry-only', 'unknown')),
+    duplicate INTEGER NOT NULL DEFAULT 0 CHECK (duplicate IN (0, 1)),
+    installs INTEGER NOT NULL DEFAULT 0 CHECK (installs >= 0),
+    state TEXT NOT NULL CHECK (state IN ('discovered', 'imported', 'blocked', 'stale', 'disabled')),
+    source_workspace TEXT NOT NULL,
+    source_commit TEXT,
+    snapshot_hash TEXT,
+    metadata_json TEXT NOT NULL DEFAULT '{}',
+    first_seen_at TEXT NOT NULL,
+    last_seen_at TEXT NOT NULL,
+    last_checked_at TEXT NOT NULL,
+    disabled_at TEXT,
+    UNIQUE(generation),
+    UNIQUE(source_type, source_locator, slug)
+);
+
+CREATE INDEX idx_external_skills_state_checked ON external_skills(state, last_checked_at DESC);
+CREATE INDEX idx_external_skills_source ON external_skills(source_locator, slug);
+
+CREATE TABLE external_skill_entries (
+    skill_id TEXT NOT NULL REFERENCES external_skills(skill_id) ON DELETE CASCADE,
+    source_path TEXT NOT NULL,
+    chunk_index INTEGER NOT NULL CHECK (chunk_index >= 0),
+    entry_id TEXT NOT NULL REFERENCES entries(id),
+    entry_revision INTEGER NOT NULL CHECK (entry_revision > 0),
+    content_hash TEXT NOT NULL,
+    primary_document INTEGER NOT NULL DEFAULT 0 CHECK (primary_document IN (0, 1)),
+    active INTEGER NOT NULL DEFAULT 1 CHECK (active IN (0, 1)),
+    imported_at TEXT NOT NULL,
+    PRIMARY KEY(skill_id, source_path, chunk_index),
+    FOREIGN KEY(entry_id, entry_revision) REFERENCES entry_revisions(entry_id, revision)
+);
+
+CREATE INDEX idx_external_skill_entries_entry ON external_skill_entries(entry_id, entry_revision);
+
+CREATE TABLE skill_discovery_cache (
+    cache_key TEXT PRIMARY KEY,
+    provider TEXT NOT NULL,
+    query_text TEXT NOT NULL,
+    owner TEXT,
+    mode TEXT NOT NULL CHECK (mode IN ('official', 'community')),
+    outcome TEXT NOT NULL CHECK (outcome IN ('success', 'empty', 'rate_limited', 'unavailable')),
+    response_json TEXT NOT NULL,
+    fetched_at TEXT NOT NULL,
+    expires_at TEXT NOT NULL
+);
+
+CREATE INDEX idx_skill_discovery_cache_expiry ON skill_discovery_cache(expires_at);
+
+CREATE TABLE skill_source_failure_cache (
+    cache_key TEXT PRIMARY KEY,
+    source_type TEXT NOT NULL CHECK (source_type = 'github'),
+    source_locator TEXT NOT NULL,
+    slug TEXT NOT NULL,
+    outcome TEXT NOT NULL CHECK (outcome IN ('source_rate_limited', 'source_unavailable')),
+    fetched_at TEXT NOT NULL,
+    expires_at TEXT NOT NULL
+);
+
+CREATE INDEX idx_skill_source_failure_cache_expiry ON skill_source_failure_cache(expires_at);
+
+CREATE TABLE skill_audit_failure_cache (
+    cache_key TEXT PRIMARY KEY,
+    provider TEXT NOT NULL,
+    source_type TEXT NOT NULL CHECK (source_type = 'github'),
+    source_locator TEXT NOT NULL,
+    slug TEXT NOT NULL,
+    outcome TEXT NOT NULL CHECK (outcome IN ('registry_rate_limited', 'registry_unavailable')),
+    fetched_at TEXT NOT NULL,
+    expires_at TEXT NOT NULL
+);
+
+CREATE INDEX idx_skill_audit_failure_cache_expiry ON skill_audit_failure_cache(expires_at);
+
+CREATE TABLE agent_task_skill_discovery_attempts (
+    run_id TEXT PRIMARY KEY REFERENCES ledger_runs(run_id) ON DELETE CASCADE,
+    request_digest TEXT NOT NULL CHECK (
+        typeof(request_digest) = 'text'
+        AND length(request_digest) = 64
+        AND request_digest NOT GLOB '*[^0-9a-f]*'
+    ),
+    state TEXT NOT NULL CHECK (state IN ('started', 'completed', 'failed')),
+    summary_json TEXT,
+    failure_json TEXT,
+    started_at TEXT NOT NULL CHECK (typeof(started_at) = 'text' AND length(started_at) > 0),
+    finished_at TEXT,
+    CHECK (
+        finished_at IS NULL
+        OR (typeof(finished_at) = 'text' AND length(finished_at) > 0 AND finished_at >= started_at)
+    ),
+    CHECK (
+        (state = 'started' AND summary_json IS NULL AND failure_json IS NULL AND finished_at IS NULL)
+        OR (state = 'completed' AND typeof(summary_json) = 'text' AND failure_json IS NULL AND finished_at IS NOT NULL)
+        OR (state = 'failed' AND summary_json IS NULL AND typeof(failure_json) = 'text' AND finished_at IS NOT NULL)
+    )
+);
+
+-- The application migration operation rewrites every revision preimage and
+-- hash to the single locale-independent canonical representation before it
+-- inserts this singleton. Leaving the row absent is never a supported state.
+CREATE TABLE entry_revision_hash_format (
+    singleton INTEGER PRIMARY KEY CHECK (singleton = 1),
+    algorithm TEXT NOT NULL CHECK (algorithm = 'canonical-json-utf16-tags-v1')
+);

package/package.json

@@ -1,13 +1,13 @@
 {
   "name": "@askdkc/kiokuko",
-  "version": "0.1.16",
+  "version": "0.1.19",
   "description": "Model-agnostic external memory for AI coding agents",
   "type": "module",
   "bin": {
     "kiokuko": "dist/bin/kiokuko.js"
   },
   "engines": {
-    "node": ">=24.0.0"
+    "node": ">=24.16.0"
   },
   "publishConfig": {
     "access": "public"
@@ -24,7 +24,8 @@
     "LICENSE"
   ],
   "scripts": {
-    "build": "tsc -p tsconfig.build.json",
+    "clean:dist": "node --input-type=module --eval \"import { rmSync } from 'node:fs'; rmSync('dist', { recursive: true, force: true });\"",
+    "build": "npm run clean:dist && tsc -p tsconfig.build.json",
     "typecheck": "tsc -p tsconfig.json --noEmit",
     "test": "node --import tsx --test tests/**/*.test.ts",
     "test:unit": "node --import tsx --test tests/unit/**/*.test.ts",
@@ -36,11 +37,13 @@
     "@modelcontextprotocol/sdk": "^1.30.0",
     "commander": "^14.0.1",
     "jsonc-parser": "^3.3.1",
+    "semver": "^7.8.5",
     "yaml": "^2.9.0",
     "zod": "^4.4.3"
   },
   "devDependencies": {
     "@types/node": "^24.0.0",
+    "@types/semver": "^7.8.0",
     "tsx": "^4.20.3",
     "typescript": "^5.9.2"
   }

package/skills/kiokuko-single-purpose-functions/SKILL.md

@@ -0,0 +1,288 @@
+---
+name: kiokuko-single-purpose-functions
+description: Use whenever writing, modifying, reviewing, debugging, or refactoring code in any language or repository. Enforce one cohesive contract per function, validation at hostile boundaries, caller-owned input immutability, narrow types, deterministic domain logic, explicit safe failures, separation of persistence and external effects, and focused runnable tests. Do not create meaningless micro-functions or rewrite unrelated code.
+---
+
+<!-- KIOKUKO MANAGED STANDARD SKILL: kiokuko-single-purpose-functions -->
+
+# Single-purpose function contracts
+
+## Objective
+
+Build and change software by composing functions that each fulfill one explicit, testable contract.
+
+Apply this guidance across languages, frameworks, and repositories. Typed examples are intentional: adapt their contracts to the project’s type system, validation tools, error model, persistence layer, and test framework instead of treating TypeScript syntax as a requirement.
+
+Use it for the smallest coherent surface touched by the task. Do not turn an ordinary change into a repository-wide rewrite.
+
+## What “one thing” means
+
+A function does one thing when it has:
+
+- one cohesive externally observable responsibility;
+- one primary reason to change;
+- one defined success result;
+- one explicit set of expected failures;
+- one declared effect profile.
+
+“One thing” does not mean one statement, one branch, or the shortest possible function.
+
+Good examples include:
+
+- parse one untrusted request;
+- normalize one validated configuration value;
+- calculate one price or ranking;
+- load one record through a persistence interface;
+- render one output representation;
+- coordinate one atomic use case.
+
+An orchestration function may call several functions. Its single responsibility is coordinating one use case. Keep detailed policy in domain functions and external mechanics in adapters or stores.
+
+## Project contracts outrank generic advice
+
+Before changing code, inspect the relevant source, tests, documentation, types, error conventions, and adjacent helpers.
+
+Preserve the repository’s established contracts unless the task explicitly changes them:
+
+- public APIs and serialized formats;
+- error types, codes, and messages;
+- transaction and concurrency rules;
+- ownership and mutation conventions;
+- framework and dependency boundaries;
+- security and privacy requirements;
+- test and build commands.
+
+Reuse a project helper when it already implements the required behavior. Do not introduce a parallel result type, validation library, database wrapper, dependency container, or architecture merely because it is familiar from another project.
+
+## Function layers
+
+Classify every new or materially changed function before implementing it.
+
+### Boundary parser or validator
+
+A boundary function receives data that is not yet trusted, including network requests, command-line input, environment variables, configuration files, database rows, files, messages, provider responses, and deserialized state.
+
+It should:
+
+1. bound work before expensive processing;
+2. reject malformed shape, type, range, encoding, size, depth, count, or unknown fields when required;
+3. avoid invoking caller-controlled getters, proxies, hooks, or serialization behavior;
+4. create an owned normalized value;
+5. return that value or produce one narrow, safe expected failure.
+
+After validation, delegate to typed or otherwise constrained internal code. Do not make every internal helper revalidate the same value.
+
+### Pure domain function
+
+A pure domain function performs one decision, state transition, normalization, ranking, projection, or calculation over validated values.
+
+It must not hide reads of time, randomness, environment, locale-sensitive state, mutable globals, filesystem, database, or network. Pass variable dependencies explicitly. The same explicit inputs should produce the same output.
+
+### Persistence function
+
+A persistence function performs one storage capability.
+
+It should:
+
+- use the project’s established database or storage abstraction;
+- parameterize queries where applicable;
+- avoid transport and presentation concerns;
+- avoid network and unrelated filesystem work;
+- remain transaction-agnostic unless it explicitly owns the transaction;
+- validate stored data before treating it as domain state;
+- preserve revision, idempotency, ordering, and identity invariants.
+
+### Effect adapter
+
+An adapter wraps one external capability, such as reading a file, calling a provider, obtaining time, generating an identifier, writing a response, or opening a database.
+
+Expose the smallest capability required. Prefer a narrow function or interface over a broad service container.
+
+### Use-case orchestrator
+
+An orchestrator coordinates one application operation. It may combine validation, pure decisions, persistence, and adapters, but it should not absorb their detailed policies.
+
+## Required contract
+
+Before implementing a new function or materially changing an existing one, determine:
+
+```text
+Function:
+Layer: boundary | domain | persistence | adapter | orchestrator
+Responsibility:
+Inputs and trust level:
+Input ownership:
+Success output:
+Expected failures:
+Other propagated failures:
+External effects:
+Transaction or resource ownership:
+Idempotency or replay behavior:
+Security and privacy constraints:
+Preconditions:
+Postconditions:
+```
+
+The contract may remain internal for a small change, but the implementation and tests must reflect it.
+
+## Non-negotiable rules
+
+### 1. Do not mutate caller-owned input
+
+Treat parameters as immutable unless the contract explicitly transfers ownership.
+
+- Do not modify caller-provided objects, arrays, maps, sets, buffers, collections, or records.
+- Return a new value for transformations.
+- Local mutation of newly allocated, unobservable data is allowed when it improves clarity or measured performance.
+- Do not use shared mutable state for domain behavior.
+
+Add an input-snapshot test when accidental mutation is plausible.
+
+### 2. Validate values at the real trust boundary
+
+Static types, annotations, interfaces, and schemas known only to the compiler do not validate runtime data.
+
+Use the repository’s established validation approach. Validate external JSON, database rows, configuration, files, provider responses, and messages before converting them into domain values. Reject or explicitly handle unknown fields when the contract is closed.
+
+Use an unconstrained type such as `unknown`, a raw byte buffer, or a generic map only at a real boundary. Internal helpers should receive constrained values.
+
+### 3. Bound work before trust
+
+Every externally influenced collection, string, nested object, retry loop, result set, or payload needs a justified bound.
+
+Check limits before full traversal, expansion, hashing, serialization, proportional allocation, persistence, retrying, or returning data. Truncate only when the contract explicitly defines a preview or diagnostic field; otherwise reject oversized authoritative input.
+
+### 4. Produce an owned snapshot
+
+Do not retain references to hostile or caller-controlled data after validation. Copy accepted values into owned structures before canonicalization, hashing, persistence, or asynchronous use.
+
+Where the runtime permits hostile object behavior, account for accessors, proxies, cycles, malformed text, unsupported prototypes, and non-finite numbers.
+
+### 5. Use narrow types and exact states
+
+- Prefer the strongest practical static analysis and type-checking mode supported by the project.
+- Avoid escape hatches such as `any`, unchecked casts, suppressed diagnostics, or untyped dictionaries when a narrower representation is possible.
+- Use enums, literal unions, sealed variants, value objects, or equivalent exact state models.
+- Distinguish missing, null, unknown, empty, unavailable, and invalid when the protocol distinguishes them.
+- Omit absent optional values rather than inventing ambiguous placeholders.
+- Keep assertions adjacent to the runtime check that proves them.
+
+### 6. Make expected failures explicit and safe
+
+Use the project’s established error taxonomy or result convention. Choose the narrowest existing failure category.
+
+Do not use `false`, `null`, an empty string, or a swallowed exception to represent several unrelated failures. Do not catch an error merely to hide it or continue from uncertain state.
+
+At public boundaries:
+
+- map internal failures to stable public behavior;
+- keep details bounded and allowlisted;
+- never echo credentials, tokens, private data, raw request bodies, or unsafe provider responses;
+- preserve both operation and cleanup failures when both occur.
+
+### 7. Keep domain decisions deterministic
+
+Inject time, randomness, environment, current directory, locale, filesystem, database, network, and provider access. Use stable ordering and serialization when output participates in hashes, identities, manifests, caches, snapshots, or replay.
+
+### 8. Preserve transaction and resource discipline
+
+- Let one use case own the transaction or resource lifecycle.
+- Keep low-level storage functions composable inside that owner.
+- Do not perform network calls, user prompts, or unrelated slow work while holding a write transaction or scarce lock.
+- Do not add nested transaction ownership where an outer transaction already exists.
+- Treat ambiguous commit or cleanup state explicitly; do not compensate as though rollback were proven.
+
+### 9. Preserve idempotency and compare-and-swap semantics
+
+Bind every meaning-bearing input to request identities, expected revisions, generation tokens, content hashes, or cache keys.
+
+- Exact replay may reuse the recorded acknowledgement.
+- Reusing an identity with changed input is a conflict.
+- Compare the exact observed version before mutation.
+- Never silently overwrite newer or independently owned state.
+- Never present partial or ambiguous cleanup as full success.
+
+### 10. Preserve external contracts
+
+A refactor is not behavior-preserving if it accidentally changes a machine contract.
+
+Preserve applicable command output, exit status, API schema, HTTP status, protocol envelope, database migration history, file format, line ending, file mode, ownership marker, event order, and backward-compatibility behavior.
+
+### 11. Keep security checks in the success path
+
+Security validation is not optional logging. Apply required authorization, normalization, sanitization, size checks, secret detection, and path or URL restrictions before persistence or delivery.
+
+A detected secret or invalid value must not reappear in errors, logs, hashes exposed to callers, temporary diagnostics, or responses.
+
+### 12. Test the contract independently
+
+Use the repository’s existing test framework and style. Cover the applicable cases:
+
+- normal success;
+- empty, minimum, maximum, and exact boundary values;
+- wrong primitive type or malformed structure;
+- unknown fields for closed inputs;
+- each expected failure category;
+- no mutation of caller-owned input;
+- no secret or raw invalid-value echo;
+- deterministic ordering, hashing, or replay identity;
+- exact replay and changed-input conflict;
+- bounded retry and non-retryable failure;
+- operation-plus-cleanup failure;
+- integration with the real boundary when adapter behavior changes.
+
+Assert observable behavior, not private call order, unless ordering itself is a documented invariant.
+
+## Required workflow
+
+1. Read the governing repository contracts and adjacent implementation.
+2. Define the smallest coherent behavior change.
+3. Classify each changed function’s layer.
+4. Determine its input, output, failure, effect, ownership, and replay contract.
+5. Validate once at the hostile boundary and create owned data.
+6. Implement deterministic policy in the pure core.
+7. Add only the narrow external capability required.
+8. Compose the use case without mixing detailed policies into orchestration.
+9. Add a regression test for the counterexample that would disprove the contract.
+10. Run the narrowest affected tests, then the repository’s documented static, type, test, build, and package checks as applicable.
+11. Report what changed, what was verified, what was skipped, and any residual risk.
+
+Do not invent commands that are absent from the repository.
+
+## Decomposition tests
+
+Split or redesign a function when one or more are true:
+
+1. Its responsibility requires “and then” to join unrelated observable outcomes.
+2. It validates transport data, decides policy, performs persistence, and formats a response in one body.
+3. It directly uses more than one unrelated external subsystem.
+4. It returns a value while mutating external state not required by its contract.
+5. It owns a transaction while performing network or unrelated slow work.
+6. Its pure decision can be tested only by booting unrelated infrastructure.
+7. A boolean flag switches between unrelated modes.
+8. Error mapping or validation policy is duplicated across layers.
+9. Security, replay, or cleanup state is implicit instead of represented.
+
+Do not split when extraction would create a meaningless one-line wrapper, scatter one atomic state machine, or obscure resource ownership.
+
+## Prohibited shortcuts
+
+Do not:
+
+- claim static types prove external input is valid;
+- cast external data directly into a domain type;
+- weaken types merely to satisfy one inconvenient call site;
+- mutate input because copying is inconvenient;
+- swallow corruption, conflict, partial failure, or uncertain state;
+- echo invalid or secret-like values in public failures;
+- retry by matching error-message text when structured classification exists;
+- run external work inside a write transaction without a documented reason;
+- bypass revision, idempotency, identity, authorization, or ownership checks;
+- overwrite independently owned state;
+- create dozens of trivial wrappers to satisfy a function-count or line-count target;
+- change public contracts as incidental cleanup;
+- declare completion without naming the verification actually run.
+
+## Completion gate
+
+Before declaring completion, use `references/review-checklist.md`. Read `references/kiokuko-patterns.md` when examples would help; despite the historical filename, its guidance applies across languages and repositories.