@hegemonart/get-design-done 1.31.0 → 1.32.0

package/scripts/validate-schemas.ts

@@ -1,401 +0,0 @@
-#!/usr/bin/env node
-/**
- * validate-schemas.ts
- *
- * Runs all Draft-07 JSON schemas under reference/schemas/ against their
- * corresponding subject files. Used by `npm run validate:schemas` and by the
- * CI validate job.
- *
- * Primary path: spawn `npx --yes ajv-cli@5 validate -s <schema> -d <data>`.
- *
- * Fallback path: if `npx --yes` cannot fetch ajv-cli (offline/sandboxed
- * environment), fall back to a structural parse check: confirm each schema is
- * valid Draft-07 JSON (has $schema, type) and each data file is parseable JSON.
- * The fallback exits 0 on structural validity; CI will run the real ajv pass.
- *
- * Usage:
- *   node --experimental-strip-types scripts/validate-schemas.ts
- *   node --experimental-strip-types scripts/validate-schemas.ts --no-npx
- *
- * Exit codes:
- *   0 — all present (schema, data) pairs pass
- *   1 — one or more pairs failed validation or a present schema is invalid
- *
- * Converted from scripts/validate-schemas.cjs in Plan 20-00. Behavior is
- * verbatim; only typing + generated-type-import were added.
- */
-
-import { spawnSync } from 'node:child_process';
-import { readFileSync, existsSync } from 'node:fs';
-import { resolve, join, dirname } from 'node:path';
-
-// Generated types from reference/schemas/generated.d.ts — importing any one
-// of them satisfies Plan 20-00's requirement that every Tier-1 TS file
-// consumes the codegen graph. We re-export so downstream callers can also
-// pin to these types for static validation.
-import type {
-  ConfigSchema,
-  PluginSchema,
-  MarketplaceSchema,
-  HooksSchema,
-  IntelSchema,
-  AuthoritySnapshotSchema,
-  EventsSchema,
-  McpGddStateToolsSchema,
-  BudgetSchema,
-  RateLimitsSchema,
-  IterationBudgetSchema,
-} from '../reference/schemas/generated.js';
-
-export type {
-  ConfigSchema,
-  PluginSchema,
-  MarketplaceSchema,
-  HooksSchema,
-  IntelSchema,
-  AuthoritySnapshotSchema,
-  EventsSchema,
-  McpGddStateToolsSchema,
-  BudgetSchema,
-  RateLimitsSchema,
-  IterationBudgetSchema,
-};
-
-/**
- * Discover the repo root by walking up from cwd to find our package.json.
- * Kept identical to the approach in tests/helpers.ts so both modules behave
- * the same when invoked from worktrees, subdirectories, or CI.
- */
-function findRepoRoot(): string {
-  let dir: string = process.cwd();
-  for (let i = 0; i < 10; i++) {
-    try {
-      const pkgPath: string = join(dir, 'package.json');
-      const pkg: { name?: string } = JSON.parse(readFileSync(pkgPath, 'utf8')) as { name?: string };
-      if (pkg.name === '@hegemonart/get-design-done') return dir;
-    } catch {
-      // not this level
-    }
-    const parent: string = dirname(dir);
-    if (parent === dir) break;
-    dir = parent;
-  }
-  return resolve(process.cwd());
-}
-
-const REPO_ROOT: string = findRepoRoot();
-
-/**
- * (schema, data) pairs. `data` is relative to repo root. `required=true`
- * means the data file MUST exist in the repo; `required=false` means the
- * data file is generated at runtime (gitignored) and only the schema itself
- * is compiled.
- */
-interface Pair {
-  name: string;
-  schema: string;
-  data: string | null;
-  required: boolean;
-}
-
-export const PAIRS: readonly Pair[] = [
-  {
-    name: 'plugin',
-    schema: 'reference/schemas/plugin.schema.json',
-    data: '.claude-plugin/plugin.json',
-    required: true,
-  },
-  {
-    name: 'marketplace',
-    schema: 'reference/schemas/marketplace.schema.json',
-    data: '.claude-plugin/marketplace.json',
-    required: true,
-  },
-  {
-    name: 'hooks',
-    schema: 'reference/schemas/hooks.schema.json',
-    data: 'hooks/hooks.json',
-    required: true,
-  },
-  {
-    name: 'config',
-    schema: 'reference/schemas/config.schema.json',
-    data: '.design/config.json',
-    required: false,
-  },
-  {
-    name: 'intel',
-    schema: 'reference/schemas/intel.schema.json',
-    // intel files are runtime-only (gitignored). Only schema-compile it.
-    data: null,
-    required: false,
-  },
-  {
-    name: 'authority-snapshot',
-    schema: 'reference/schemas/authority-snapshot.schema.json',
-    // .design/authority-snapshot.json is runtime-only (gitignored via .design/).
-    // Only schema-compile it.
-    data: null,
-    required: false,
-  },
-  {
-    name: 'events',
-    schema: 'reference/schemas/events.schema.json',
-    // .design/telemetry/events.jsonl is runtime-only (gitignored). It is
-    // JSONL (one JSON object per line) rather than a single JSON document,
-    // so we cannot point ajv-cli at it as a `data` subject — each *line*
-    // is the schema subject, not the file. Schema-compile only here;
-    // per-line structural discipline is enforced by the EventWriter at
-    // runtime (Plan 20-06). See scripts/lib/event-stream/writer.ts.
-    data: null,
-    required: false,
-  },
-  {
-    name: 'mcp-gdd-state-tools',
-    schema: 'reference/schemas/mcp-gdd-state-tools.schema.json',
-    // The combined tool manifest is a codegen artifact — individual per-tool
-    // schemas live under scripts/mcp-servers/gdd-state/schemas/ and are
-    // consumed directly by the server. Schema-compile only here so the
-    // Draft-07 declaration stays valid as tools evolve. See Plan 20-05.
-    data: null,
-    required: false,
-  },
-  {
-    name: 'budget',
-    schema: 'reference/schemas/budget.schema.json',
-    // .design/budget.json is runtime-only (created by scripts/bootstrap.sh
-    // on first session if absent, per D-12). It's gitignored under .design/
-    // so the data file isn't tracked — schema-compile only here. The
-    // budget-enforcer.ts hook consumes BudgetSchema from generated.d.ts at
-    // type-check time regardless of file presence. See Plan 20-13.
-    data: null,
-    required: false,
-  },
-  {
-    name: 'rate-limits',
-    schema: 'reference/schemas/rate-limits.schema.json',
-    // .design/rate-limits/<provider>.json is runtime-only, written by
-    // scripts/lib/rate-guard.cjs as a side-effect of every
-    // ingestHeaders() call. One file per provider — they're all the same
-    // shape — so no single subject data path exists. Schema-compile
-    // only here; per-file structural discipline is enforced at write
-    // time by rate-guard. See Plan 20-14.
-    data: null,
-    required: false,
-  },
-  {
-    name: 'iteration-budget',
-    schema: 'reference/schemas/iteration-budget.schema.json',
-    // .design/iteration-budget.json is runtime-only, written by
-    // scripts/lib/iteration-budget.cjs. Schema-compile only here.
-    // See Plan 20-14.
-    data: null,
-    required: false,
-  },
-];
-
-const USE_NPX: boolean = !process.argv.includes('--no-npx');
-
-/** Shape of an ajv-cli invocation result. */
-interface AjvResult {
-  ok: boolean;
-  stdout: string;
-  stderr: string;
-  status: number | null;
-  fetchFailed: boolean;
-}
-
-/**
- * Try running ajv-cli via npx. Returns { ok, stdout, stderr, status, fetchFailed }.
- * fetchFailed=true if npx couldn't fetch the package (offline); caller should fall back.
- *
- * We pass `-c ajv-formats` so schemas declaring `format: "date-time"` (etc.) are
- * validated against the standard JSON Schema formats plugin rather than being
- * rejected as unknown formats under ajv's strict mode.
- */
-function runAjv(args: readonly string[]): AjvResult {
-  const injected: string[] = [...args, '-c', 'ajv-formats'];
-  // Windows ships `npx.cmd` (batch shim); Node's spawnSync cannot invoke .cmd
-  // files without `shell: true`. On POSIX `shell: true` is a no-op here since
-  // the argv is a fixed whitelist (no user-controlled substitution). This
-  // fixes the pre-existing Windows-local failure while preserving CI
-  // behavior on Linux runners.
-  const result = spawnSync(
-    'npx',
-    ['--yes', '-p', 'ajv-cli@5', '-p', 'ajv-formats@3', 'ajv', ...injected],
-    { encoding: 'utf8', cwd: REPO_ROOT, shell: process.platform === 'win32' },
-  );
-  const stdout: string = result.stdout ?? '';
-  const stderr: string = result.stderr ?? '';
-  const combined: string = stdout + stderr;
-  // fetchFailed heuristic now also catches the "npx binary not on PATH /
-  // spawn ENOENT" case so offline or missing-npx sandboxes fall back cleanly.
-  const spawnFailed: boolean =
-    result.error !== undefined &&
-    ((result.error as NodeJS.ErrnoException).code === 'ENOENT' ||
-      (result.error as NodeJS.ErrnoException).code === 'ENOTDIR');
-  const fetchFailed: boolean =
-    spawnFailed ||
-    (result.status !== 0 &&
-      /(ENOTFOUND|ECONNREFUSED|ETIMEDOUT|getaddrinfo|network|unable to resolve|unable to fetch|offline|E404|registry\.npmjs\.org)/i.test(
-        combined,
-      ));
-  return {
-    ok: result.status === 0,
-    stdout,
-    stderr,
-    status: result.status,
-    fetchFailed,
-  };
-}
-
-/** Outcome of a structural (fallback) schema/data parse check. */
-interface StructuralResult {
-  ok: boolean;
-  reason?: string;
-}
-
-/**
- * Fallback: confirm schema file is a valid Draft-07 JSON Schema (has $schema
- * pointing at draft-07). Confirm data file (if present) parses as JSON.
- */
-function structuralCheck(schemaAbs: string, dataAbs: string | null): StructuralResult {
-  let schema: { $schema?: string };
-  try {
-    schema = JSON.parse(readFileSync(schemaAbs, 'utf8')) as { $schema?: string };
-  } catch (e) {
-    const msg = e instanceof Error ? e.message : String(e);
-    return { ok: false, reason: `schema not parseable JSON: ${msg}` };
-  }
-  if (!schema.$schema || !/draft-07/.test(schema.$schema)) {
-    return { ok: false, reason: `schema missing Draft-07 $schema declaration` };
-  }
-  if (dataAbs) {
-    try {
-      JSON.parse(readFileSync(dataAbs, 'utf8'));
-    } catch (e) {
-      const msg = e instanceof Error ? e.message : String(e);
-      return { ok: false, reason: `data file not parseable JSON: ${msg}` };
-    }
-  }
-  return { ok: true };
-}
-
-/** Per-pair validation result. */
-interface PairResult {
-  name: string;
-  ok: boolean;
-  via: string;
-  note?: string;
-  reason?: string;
-}
-
-function main(): void {
-  const results: PairResult[] = [];
-  let fallbackReason: string | null = null;
-
-  for (const pair of PAIRS) {
-    const schemaAbs: string = join(REPO_ROOT, pair.schema);
-    const dataAbs: string | null = pair.data ? join(REPO_ROOT, pair.data) : null;
-
-    if (!existsSync(schemaAbs)) {
-      results.push({
-        name: pair.name,
-        ok: false,
-        via: 'missing-schema',
-        reason: `schema not found at ${pair.schema}`,
-      });
-      continue;
-    }
-
-    const dataPresent: boolean = Boolean(dataAbs) && existsSync(dataAbs as string);
-
-    if (!dataPresent && pair.required) {
-      results.push({
-        name: pair.name,
-        ok: false,
-        via: 'missing-data',
-        reason: `required data file missing at ${pair.data}`,
-      });
-      continue;
-    }
-
-    if (!dataPresent) {
-      // Schema-only: compile to confirm the schema is structurally valid.
-      if (USE_NPX && !fallbackReason) {
-        const r = runAjv(['compile', '-s', schemaAbs]);
-        if (r.ok) {
-          results.push({
-            name: pair.name,
-            ok: true,
-            via: 'ajv-compile',
-            note: 'data not present in repo tree — schema compiled only',
-          });
-          continue;
-        }
-        if (r.fetchFailed) {
-          fallbackReason = `npx fetch failed: ${r.stderr.split('\n')[0] || 'unknown'}`;
-        } else {
-          results.push({
-            name: pair.name,
-            ok: false,
-            via: 'ajv-compile',
-            reason: r.stderr || r.stdout || `exit ${r.status ?? 'null'}`,
-          });
-          continue;
-        }
-      }
-      const s = structuralCheck(schemaAbs, null);
-      const reason: string = s.ok
-        ? 'schema is valid Draft-07 (data not in repo tree)'
-        : s.reason ?? 'unknown failure';
-      results.push({ name: pair.name, ok: s.ok, via: 'structural-compile', reason });
-      continue;
-    }
-
-    // Both schema and data present — full validation.
-    if (USE_NPX && !fallbackReason) {
-      const r = runAjv(['validate', '-s', schemaAbs, '-d', dataAbs as string]);
-      if (r.ok) {
-        results.push({ name: pair.name, ok: true, via: 'ajv-validate' });
-        continue;
-      }
-      if (r.fetchFailed) {
-        fallbackReason = `npx fetch failed: ${r.stderr.split('\n')[0] || 'unknown'}`;
-      } else {
-        results.push({
-          name: pair.name,
-          ok: false,
-          via: 'ajv-validate',
-          reason: r.stderr || r.stdout || `exit ${r.status ?? 'null'}`,
-        });
-        continue;
-      }
-    }
-    const s = structuralCheck(schemaAbs, dataAbs);
-    const reason: string = s.ok
-      ? 'schema is valid Draft-07 and data parses as JSON'
-      : s.reason ?? 'unknown failure';
-    results.push({ name: pair.name, ok: s.ok, via: 'structural-validate', reason });
-  }
-
-  // Report.
-  console.log('validate-schemas: results');
-  for (const r of results) {
-    const status: string = r.ok ? 'OK' : 'FAIL';
-    const note: string = r.note ? ` (${r.note})` : '';
-    const reason: string = r.reason ? ` — ${r.reason}` : '';
-    console.log(`  [${status}] ${r.name} via ${r.via}${note}${reason}`);
-  }
-  if (fallbackReason) {
-    console.log(
-      `\nnote: ajv-cli via npx unavailable (${fallbackReason}); fell back to structural checks. CI will run the authoritative ajv pass.`,
-    );
-  }
-  const failed: PairResult[] = results.filter((r) => !r.ok);
-  console.log(`summary: ${results.length} pair(s) checked, ${failed.length} failure(s)`);
-
-  process.exit(failed.length === 0 ? 0 : 1);
-}
-
-main();

package/scripts/validate-skill-length.cjs

@@ -1,283 +0,0 @@
-#!/usr/bin/env node
-'use strict';
-/**
- * scripts/validate-skill-length.cjs — Phase 28.5 skill-authoring-contract validator.
- *
- * Walks skills/, validates per D-01/D-02/D-09/D-11:
- *   - Frontmatter required: name, description
- *   - description length: 20 <= len <= 1024 chars (always strict)
- *   - description format (--strict-description / STRICT_DESCRIPTION=1):
- *     regex `\. Use when .+\.$` (advisory by default per D-02)
- *   - SKILL.md lines: >=250 block, >=100 warn (D-01)
- *   - disable-model-invocation: only on D-09 whitelist
- *
- * Exit codes:
- *   0  clean (no warnings, no blockers)
- *   1  warnings only (>=100 lines but <250 on at least one skill, no other failures)
- *   2  blockers present (>=250 lines, frontmatter missing/invalid, description out of range, etc.)
- *
- * CLI flags:
- *   --quiet               Suppress per-skill output, print summary only.
- *   --strict-description  Enforce `<what>. Use when <triggers>.` regex on description.
- *   --json                Emit machine-readable JSON instead of human-readable text.
- *   --help, -h            Print this usage message.
- *
- * Env:
- *   STRICT_DESCRIPTION=1  Equivalent to --strict-description.
- *   SKILLS_DIR=<path>     Override skills directory (default: ./skills relative to cwd).
- *
- * See reference/skill-authoring-contract.md for the full contract.
- *
- * Line counting: counts every line in the file via split on /\r?\n/ and drops a single
- * trailing empty entry — matches `wc -l` semantics. We count ALL lines (including blanks
- * and comments) because that is what consumes agent context. This mirrors the same
- * counting convention used by tests/agent-size-budget.test.cjs.
- *
- * Validator does NOT enforce skill renames (D-05/D-07) — frontmatter.name is checked for
- * presence only, never compared against a canonical-name list. Whitelist key for
- * disable-model-invocation uses the skill folder name (skills/<dir>/SKILL.md), not the
- * frontmatter.name field.
- */
-
-const fs = require('fs');
-const path = require('path');
-
-const WARN_LINES = 100;
-const BLOCK_LINES = 250;
-const DESC_MIN = 20;
-const DESC_MAX = 1024;
-// Strict-mode regex: trailing ". Use when <something>." sentence.
-// Multiline + non-greedy to tolerate descriptions split across YAML lines.
-const STRICT_RE = /\. Use when .+\.\s*$/m;
-
-// D-09 whitelist — skills permitted to set disable-model-invocation: true.
-// Keyed on skill folder name (skills/<folder>/SKILL.md), not frontmatter.name.
-const DISABLE_INVOCATION_WHITELIST = new Set([
-  'help', 'stats', 'note', 'add-backlog', 'todo', 'health', 'settings',
-  'next', 'pause', 'resume', 'fast', 'quick', 'pr-branch', 'ship',
-  'reapply-patches', 'list-assumptions', 'plant-seed', 'review-backlog',
-  'cache-manager', 'warm-cache', 'synthesize', 'timeline', 'start',
-  'recall', 'continue', 'update', 'undo', 'zoom-out',
-]);
-
-function parseArgs(argv) {
-  const flags = { quiet: false, strict: false, json: false };
-  for (const a of argv.slice(2)) {
-    if (a === '--quiet') flags.quiet = true;
-    else if (a === '--strict-description') flags.strict = true;
-    else if (a === '--json') flags.json = true;
-    else if (a === '--help' || a === '-h') { printHelp(); process.exit(0); }
-    else { process.stderr.write(`unknown flag: ${a}\n`); process.exit(2); }
-  }
-  if (process.env.STRICT_DESCRIPTION === '1') flags.strict = true;
-  return flags;
-}
-
-function printHelp() {
-  process.stdout.write([
-    'validate-skill-length.cjs — Phase 28.5 skill-authoring-contract validator',
-    '',
-    'Usage: node scripts/validate-skill-length.cjs [--quiet] [--strict-description] [--json]',
-    '',
-    'Flags:',
-    '  --quiet               Suppress per-skill output, print summary only.',
-    '  --strict-description  Enforce `<what>. Use when <triggers>.` regex on description.',
-    '  --json                Emit machine-readable JSON.',
-    '  --help, -h            Show this message.',
-    '',
-    'Env:',
-    '  STRICT_DESCRIPTION=1  Equivalent to --strict-description.',
-    '  SKILLS_DIR=<path>     Override skills directory (default: ./skills).',
-    '',
-    'Exit codes: 0=clean, 1=warnings only, 2=blockers present.',
-    '',
-    'See reference/skill-authoring-contract.md for the full contract.',
-    '',
-  ].join('\n'));
-}
-
-function parseFrontmatter(content) {
-  if (!content.startsWith('---\n') && !content.startsWith('---\r\n')) {
-    return { ok: false, error: 'missing-frontmatter' };
-  }
-  // Find the closing `\n---` after the opening one.
-  const end = content.indexOf('\n---', 4);
-  if (end < 0) return { ok: false, error: 'unterminated-frontmatter' };
-  const block = content.slice(4, end);
-  const fields = {};
-  const lines = block.split(/\r?\n/);
-  for (let i = 0; i < lines.length; i++) {
-    const line = lines[i];
-    const m = line.match(/^([a-zA-Z][a-zA-Z0-9_-]*):\s*(.*)$/);
-    if (m) {
-      let value = m[2];
-      // Strip wrapping quotes (single or double).
-      if (value.length >= 2 &&
-          ((value.startsWith('"') && value.endsWith('"')) ||
-           (value.startsWith("'") && value.endsWith("'")))) {
-        value = value.slice(1, -1);
-      }
-      // Multi-line description folding: when description: is followed by empty value,
-      // gather continuation lines until the next `key:` line.
-      if (m[1] === 'description' && value === '') {
-        const parts = [];
-        for (let j = i + 1; j < lines.length; j++) {
-          if (/^[a-zA-Z][a-zA-Z0-9_-]*:/.test(lines[j])) break;
-          parts.push(lines[j].trim());
-        }
-        value = parts.join(' ').trim();
-      }
-      fields[m[1]] = value;
-    }
-  }
-  return { ok: true, fields, bodyStart: end + 4 };
-}
-
-function countLines(content) {
-  if (!content) return 0;
-  const lines = content.split(/\r?\n/);
-  // wc -l semantics: drop a single trailing empty entry (the newline-terminated final line).
-  if (lines[lines.length - 1] === '') lines.pop();
-  return lines.length;
-}
-
-function validateSkill(skillName, skillPath, flags) {
-  const result = {
-    name: skillName,
-    path: skillPath,
-    lines: 0,
-    descriptionLength: 0,
-    hasRequiredFields: false,
-    level: 'clean',
-    errors: [],
-    warnings: [],
-    reasons: [],
-  };
-  let content;
-  try {
-    content = fs.readFileSync(skillPath, 'utf8');
-  } catch (e) {
-    result.errors.push({ code: 'read-failed', message: e.message });
-    result.level = 'block';
-    result.reasons.push(`read-failed: ${e.message}`);
-    return result;
-  }
-  result.lines = countLines(content);
-
-  const fm = parseFrontmatter(content);
-  if (!fm.ok) {
-    result.errors.push({ code: 'frontmatter', message: fm.error });
-    result.reasons.push(`frontmatter: ${fm.error}`);
-    result.level = 'block';
-    return result;
-  }
-  const hasName = Boolean(fm.fields.name);
-  const hasDesc = Boolean(fm.fields.description);
-  result.hasRequiredFields = hasName && hasDesc;
-  if (!hasName) {
-    result.errors.push({ code: 'missing-name', message: 'frontmatter.name required' });
-    result.reasons.push('missing-name');
-  }
-  if (!hasDesc) {
-    result.errors.push({ code: 'missing-description', message: 'frontmatter.description required' });
-    result.reasons.push('missing-description');
-  } else {
-    const d = fm.fields.description;
-    result.descriptionLength = d.length;
-    if (d.length < DESC_MIN) {
-      result.errors.push({ code: 'description-too-short', message: `${d.length} chars; require >=${DESC_MIN}` });
-      result.reasons.push(`description-too-short: ${d.length}`);
-    }
-    if (d.length > DESC_MAX) {
-      result.errors.push({ code: 'description-too-long', message: `${d.length} chars; require <=${DESC_MAX}` });
-      result.reasons.push(`description-too-long: ${d.length}`);
-    }
-    if (flags.strict && !STRICT_RE.test(d)) {
-      result.errors.push({ code: 'description-format', message: 'strict mode: missing ". Use when <triggers>." suffix' });
-      result.reasons.push('description-format');
-    }
-  }
-  const dmi = fm.fields['disable-model-invocation'];
-  if (dmi !== undefined) {
-    if (dmi !== 'true' && dmi !== 'false') {
-      // Tolerate quoted "true"/"false" — parseFrontmatter strips quotes.
-      // Any other shape (e.g. raw "True", "yes") is a block.
-      result.errors.push({ code: 'disable-model-invocation-shape', message: `disable-model-invocation must be the boolean true|false, got "${dmi}"` });
-      result.reasons.push(`disable-model-invocation-shape: ${dmi}`);
-    } else if (dmi === 'true' && !DISABLE_INVOCATION_WHITELIST.has(skillName)) {
-      result.errors.push({ code: 'disable-model-invocation', message: `${skillName} not on D-09 whitelist` });
-      result.reasons.push('disable-model-invocation-not-whitelisted');
-    }
-  }
-  if (result.lines >= BLOCK_LINES) {
-    result.errors.push({ code: 'block-lines', message: `${result.lines} lines; block threshold ${BLOCK_LINES}` });
-    result.reasons.push(`block-lines: ${result.lines}`);
-  } else if (result.lines >= WARN_LINES) {
-    result.warnings.push({ code: 'warn-lines', message: `${result.lines} lines; warn threshold ${WARN_LINES}` });
-    result.reasons.push(`warn-lines: ${result.lines}`);
-  }
-  if (result.errors.length > 0) result.level = 'block';
-  else if (result.warnings.length > 0) result.level = 'warn';
-  else result.level = 'clean';
-  return result;
-}
-
-function walkSkills(skillsDir) {
-  if (!fs.existsSync(skillsDir)) return [];
-  const out = [];
-  for (const entry of fs.readdirSync(skillsDir, { withFileTypes: true })) {
-    if (!entry.isDirectory()) continue;
-    const skillFile = path.join(skillsDir, entry.name, 'SKILL.md');
-    if (fs.existsSync(skillFile)) out.push({ name: entry.name, path: skillFile });
-  }
-  return out.sort((a, b) => a.name.localeCompare(b.name));
-}
-
-function main() {
-  const flags = parseArgs(process.argv);
-  const root = process.cwd();
-  const skillsDir = process.env.SKILLS_DIR || path.join(root, 'skills');
-  const skills = walkSkills(skillsDir);
-  const results = skills.map(s => validateSkill(s.name, s.path, flags));
-
-  const summary = {
-    total: results.length,
-    clean: results.filter(r => r.level === 'clean').length,
-    warnings: results.filter(r => r.level === 'warn').length,
-    blockers: results.filter(r => r.level === 'block').length,
-  };
-
-  if (flags.json) {
-    process.stdout.write(JSON.stringify({ summary, skills: results }, null, 2) + '\n');
-  } else {
-    if (!flags.quiet) {
-      for (const r of results) {
-        if (r.level === 'clean') continue;
-        process.stdout.write(`${r.name} (${r.lines} lines):\n`);
-        for (const e of r.errors) process.stdout.write(`  BLOCK ${e.code}: ${e.message}\n`);
-        for (const w of r.warnings) process.stdout.write(`  WARN  ${w.code}: ${w.message}\n`);
-      }
-    }
-    process.stdout.write(`\nSummary: ${summary.total} skills | ${summary.clean} clean | ${summary.warnings} warn | ${summary.blockers} block\n`);
-  }
-
-  if (summary.blockers > 0) process.exit(2);
-  if (summary.warnings > 0) process.exit(1);
-  process.exit(0);
-}
-
-if (require.main === module) main();
-
-module.exports = {
-  parseFrontmatter,
-  countLines,
-  validateSkill,
-  walkSkills,
-  parseArgs,
-  DISABLE_INVOCATION_WHITELIST,
-  WARN_LINES,
-  BLOCK_LINES,
-  DESC_MIN,
-  DESC_MAX,
-  STRICT_RE,
-};