@hybridlabor-api/aos 4.6.5 → 4.7.0

package/skills/global_config/aos-project-init/SKILL.md

@@ -67,8 +67,21 @@ Watching is not free. Every watched project with changes costs an LLM call per
 cycle, and a free-tier key hits quota on a handful. Recommend watching repos
 under active work and leaving archives out.
 
-**memB.** Bind the slug; offer a one-time ingest of the folder. Ingest reads a
-lot — offer it, never assume it.
+**memB.** Bind the slug, then draft a project card instead of offering a file
+dump. Read the project yourself — `README.md`, `AGENTS.md`/`CLAUDE.md`,
+`package.json`/`pyproject.toml`, and the `.aos/project.json` this interview
+settles — and distill a **project card: 3–8 facts**, each ≤ 300 chars, each
+prefixed with its date `(YYYY-MM-DD)`, covering what the project is, where it
+lives, stack, status, and settled decisions. Show the numbered list and save
+only on the user's confirmation:
+
+```
+add_memory({ text: "(2026-09-24) …", category: "project_card", project_id: "<stable-slug>", infer: false })
+```
+
+The slug settled above is the `project_id`, so the hook's candidate matching
+finds the card. Facts stay small and dated because cards are shown to every
+future prompt in this project.
 
 **Synapse.** A spatial map earns its keep on a codebase too large to hold in
 your head. Ask; do not default it on.
@@ -126,13 +139,18 @@ When the user chose to watch it, add the absolute path to `projects` in
 `~/.openwiki/projects.json` — that file is the daemon's watch list. Merge into
 it; never rewrite it.
 
-For memB, write decisions through the MCP with the slug as `project_id` and the
-domain as `category`:
+For memB, write the project card through the MCP with the slug as `project_id`
+and `project_card` as `category` — domain-category rows are dead weight, since
+the hook whitelist only injects `project_card`/`godmode`:
 
 ```
-add_memory({ text: "…", category: "<domain>", project_id: "<slug>" })
+add_memory({ text: "(2026-09-24) …", category: "project_card", project_id: "<stable-slug>", infer: false })
 ```
 
+Raw file ingest is opt-in only — if the user explicitly asks for a dump, run
+`python3 ~/.gemini/config/mcps/memb-mcp/memb_ingest.py <path>`; the default
+answer is no.
+
 Never write credentials or high-entropy strings into memory.
 
 ---
@@ -161,3 +179,5 @@ version policy before reaching for `feat:`.
 - Asking about CI or GitHub triage in a repo with no remote.
 - Offering `release-please` without writing the Conventional Commits rule into
   `AGENTS.md` — it is a trap otherwise.
+- Writing project memories under the domain as category — the hook never
+  injects them.

package/skills/global_config/aos-project-init/scripts/aos-project-doctor.mjs

@@ -55,6 +55,17 @@ function checkGit() {
 
 // ---------------------------------------------------------------- aos config
 function checkAosConfig() {
+  const machineConfig = (() => {
+    try { return JSON.parse(readFileSync(path.join(HOME, '.agents', 'aos-config.json'), 'utf8')); }
+    catch { return null; }
+  })();
+  const machineOk = !!(machineConfig?.workspaceRoot && machineConfig?.domains?.length && machineConfig?.userId);
+  add('aos', 'machine vocabulary', machineOk,
+    machineOk
+      ? `workspaceRoot "${machineConfig.workspaceRoot}" · ${machineConfig.domains.length} domains · userId "${machineConfig.userId}"`
+      : 'missing or incomplete in ~/.agents/aos-config.json — /aos-project-init requires machine vocabulary',
+    'Run /aos-setup (or `aos-config propose` / `aos-config set`) to configure machine vocabulary.');
+
   add('aos', '.aos/project.json', !!aosConfig,
     aosConfig
       ? `slug "${aosConfig.slug}"${aosConfig.domain ? ` · domain ${aosConfig.domain}` : ''}${aosConfig.watch ? ' · überwacht' : ''}`

package/skills/global_config/aos-setup/SKILL.md

@@ -57,7 +57,7 @@ node ~/.claude/skills/aos-setup/scripts/aos-doctor.mjs            # from an inst
 Flags: `--json` for machine-readable output, `--net` to also compare the
 installed AOS version against npm.
 
-It reports up to 26 checks across six areas, each with the exact fix command.
+It reports up to 29 checks across seven areas, each with the exact fix command.
 The exact number varies by machine: the LaunchAgent rows are macOS-only, the
 OpenWiki integrations row needs the CLI on `PATH`, the npm-version row needs
 `--net`, and the optional-module rows appear only for modules the manifest
@@ -71,6 +71,7 @@ claims are installed.
 | `memB` | module, venv, `~/.MemBDB/memb.db`, WebUI on `:8088`, autostart, `memb-mcp` venv, MCP registration |
 | `openwiki` | CLI, `~/.openwiki/.env` credentials, harness integrations, 2-hourly refresh daemon |
 | `synapse` | binary on `PATH`, daemon on `:7781` |
+| `memory` | identity layer (≥ 10 godmode facts), share of raw file chunks, stale paths |
 
 Exit code is `0` only when every check passes. **Report the failing rows to the
 user before changing anything**, then work the sections below in order — each
@@ -104,6 +105,36 @@ aos-config set userId <the user's memB id>
 The result lands in `~/.agents/aos-config.json`. `/aos-project-init` reads it
 to offer a domain per project and refuses to guess when it is missing.
 
+### The identity layer (godmode facts)
+
+With `workspaceRoot` and `userId` set, section 2 has one more job: the identity
+interview, which fills memB's godmode layer — the standing facts about the
+person this machine belongs to, injected into every prompt. The doctor's
+`memory` rows report whether this layer exists.
+
+Run it as a conversation, one question at a time: who the user is and their
+role, company and brands, how the workspace is structured, and their ground
+rules. Propose sources instead of asking blind — glob `WORKSPACE.md`,
+`AGENTS.md` and `agents.md` directly under the configured workspace root (e.g.
+`~/dev/WORKSPACE.md`) and offer each as source material before using it. Never
+read the whole tree.
+
+From the answers, draft **20–40 facts**, one sentence each, each ≤ 300 chars.
+Show the full numbered list to the user and save only after explicit
+confirmation — writes happen only on a literal GO.
+
+Save each fact via the memb-mcp `add_memory` tool, exactly this shape:
+
+```js
+add_memory({ text: <fact>, category: "godmode", infer: false })
+```
+
+The shape is load-bearing. No `project_id`: omitting it stores the fact
+globally, which is what makes it identity rather than project context.
+`infer: false`: the text is stored verbatim, never LLM-rewritten. `user_id`
+defaults to `bdb_developer`, which the ambient hook accepts as its baseline
+user. Never write credentials or high-entropy strings into a fact.
+
 ---
 
 ## 3. Install or update AOS itself
@@ -317,3 +348,5 @@ Then hand off: **the machine is ready; per-project setup runs through
   something is ingested.
 - Copying the reference machine's persona file verbatim onto someone else's
   computer. Ask what their standing facts are.
+- Saving godmode facts the user never saw — the interview shows the list
+  first, always.

package/skills/global_config/aos-setup/scripts/aos-doctor.mjs

@@ -57,6 +57,11 @@ const which = (bin) => {
 };
 const dirCount = (p) => { try { return readdirSync(p, { withFileTypes: true }).filter(d => d.isDirectory()).length; } catch { return 0; } };
 
+// npm's Windows shim is deja.cmd, and Node refuses to spawn .cmd/.bat without
+// a shell (CVE-2024-27980), so every deja probe goes through one on Windows.
+// All args used here are JSON flags and single-token prefixes — no metacharacters.
+const runDeja = (args) => execFileSync('deja', args, { encoding: 'utf8', timeout: 20000, stdio: ['ignore', 'pipe', 'ignore'], shell: IS_WIN });
+
 function portOpen(port, timeout = 1200) {
   return new Promise((resolve) => {
     const s = connect({ host: '127.0.0.1', port });
@@ -163,7 +168,7 @@ function checkHooks() {
   // the row would go green over a hook carrying a bug this version fixed.
   // Hooks that carry an `aos-hook-version:` line are checked against what this
   // release expects; the ones that do not are existence-only.
-  const EXPECTED_VERSION = { 'memb-inject.mjs': 3 };
+  const EXPECTED_VERSION = { 'memb-inject.mjs': 5 };
   const versionOf = (text) => {
     const m = /^\/\/\s*aos-hook-version:\s*(\d+)/m.exec(text);
     return m ? Number(m[1]) : null;
@@ -272,6 +277,113 @@ async function checkMemb() {
     'Re-run the installer; it writes the MCP block for every harness you pick.');
 }
 
+// ---------------------------------------------------------------- memory
+async function checkMemory() {
+  const dbPath = h('.MemBDB', 'memb.db');
+  if (!existsSync(dbPath)) {
+    add('memory', 'identity layer', false, 'no ~/.MemBDB/memb.db yet',
+      'Run /aos-setup — the identity interview creates it.');
+    return;
+  }
+
+  let rows = [];
+  try {
+    const { DatabaseSync } = await import('node:sqlite');
+    const db = new DatabaseSync(dbPath, { readOnly: true });
+    db.exec('PRAGMA busy_timeout = 5000;');
+    rows = db.prepare(`
+      SELECT substr(json_extract(payload, '$.data'), 1, 500) AS head,
+             json_extract(payload, '$.category') AS c,
+             json_extract(payload, '$.metadata.category') AS mc,
+             json_extract(payload, '$.project_id') AS p,
+             json_extract(payload, '$.metadata.project_id') AS mp
+      FROM memb_vectors
+      WHERE collection = 'bdb_agent_memory'
+    `).all();
+    db.close();
+  } catch (e) {
+    add('memory', 'identity layer', false, `memb.db unreadable: ${String(e.message || e).split('\n')[0]}`,
+      'Check ~/.MemBDB/memb.db — the doctor opens it read-only.');
+    return;
+  }
+
+  const total = rows.length;
+
+  const godmode = rows.filter((r) =>
+    (r.c === 'godmode' || r.mc === 'godmode') && r.p == null && r.mp == null).length;
+  add('memory', 'identity layer', godmode >= 10, `${godmode} godmode facts (need ≥ 10)`,
+    "Run /aos-setup, section 'The identity layer' — 20-40 facts via memb-mcp add_memory (category godmode).");
+
+  const raw = rows.filter((r) => /^\[[^\]|]+\|[^\]|]+\|/.test(r.head || '')).length;
+  const share = total ? raw / total : 0;
+  add('memory', 'raw file chunks', share <= 0.5,
+    `${raw} of ${total} rows (${Math.round(share * 100)}%) are raw ingest chunks — search-only, never injected`,
+    'Run /aos-project-init per project — project cards replace the dumps.');
+
+  const STALE = [
+    ['old bdb-dev root', /(?<!dev\/)bdb-dev\//],
+    ['docs/_stale', /docs\/_stale/],
+    ['.worktrees', /\.worktrees/],
+  ];
+  const staleOk = !rows.some((r) => STALE.some(([, re]) => re.test(r.head || '')));
+  const staleDetail = STALE.map(([label, re]) =>
+    `${label}: ${rows.filter((r) => re.test(r.head || '')).length}`).join(' · ');
+  add('memory', 'stale paths', staleOk, staleDetail,
+    'Re-ingest with the fixed IGNORE_DIRS (memB repo) and remove stale rows.');
+}
+
+// ---------------------------------------------------------------- deja
+async function checkDeja() {
+  const bin = which('deja');
+  add('deja', 'deja on PATH', !!bin, bin || 'not on PATH', 'npm install -g @vshulcz/deja-vu@0.21.1');
+  if (!bin) return;
+
+  let doc = null;
+  try {
+    doc = JSON.parse(runDeja(['doctor', '--json', '--offline'])); // --offline keeps the version check off the network
+  } catch (e) {
+    add('deja', 'deja CLI not runnable', false, String(e.message || e).split('\n')[0],
+      'Reinstall: npm install -g @vshulcz/deja-vu@0.21.1');
+    return;
+  }
+  const idx = doc?.index || {};
+  const readAt = idx.sources_read_at;
+  const ok = idx.state === 'ok' && (idx.stale_stores ?? 0) === 0;
+  add('deja', 'index status', ok,
+    `${idx.state ?? 'unknown'}${idx.stale_stores ? `, ${idx.stale_stores} stale store(s)` : ''}${readAt != null ? `, sources read at ${typeof readAt === 'string' ? readAt : JSON.stringify(readAt)}` : ''}`,
+    ok ? '' : 'deja index');
+
+  // Redaction self-check (techlead condition): a hit is a confirmed unredacted
+  // secret only when returned hit text carries a full key shape; a bare prefix
+  // hit ("task-", "xoxo") is noise and must never fail the doctor. When deja
+  // returns no hit text at all, warn instead of failing.
+  const STRICT = [/AIza[0-9A-Za-z_-]{35}/, /ghp_[A-Za-z0-9]{36}/, /sk-[A-Za-z0-9_-]{20,}/, /xox[abprs]-[A-Za-z0-9-]{10,}/];
+  const TIERS = new Set(['exact', 'close', 'stemmed', 'semantic', 'error']); // 'relevance' = nothing matched
+  const TEXT_KEYS = ['text', 'snippet', 'excerpt', 'content', 'body', 'chunk', 'message', 'preview', 'match', 'line'];
+  const confirmed = [];
+  const unverified = [];
+  for (const prefix of ['AIza', 'ghp_', 'sk-', 'xox']) {
+    let env = null;
+    try { env = JSON.parse(runDeja(['search', '--json', prefix])); } catch { continue; }
+    if (!TIERS.has(env?.tier)) continue;
+    for (const hit of env.hits || []) {
+      const label = `${hit?.session?.id || '?'} (${hit?.session?.harness || '?'})`;
+      const text = TEXT_KEYS.map((k) => hit?.[k]).find((v) => typeof v === 'string' && v) || null;
+      if (!text) { unverified.push(label); continue; }
+      if (STRICT.some((re) => re.test(text))) confirmed.push(label);
+    }
+  }
+  if (confirmed.length) {
+    add('deja', 'redaction self-check', false, `unredacted secret in: ${confirmed.join(', ')}`,
+      'deja forget --session <id> — once per listed session, then re-run this doctor.');
+  } else if (unverified.length) {
+    add('deja', 'redaction self-check', true,
+      `possible secret, verify with deja show <id> — no hit text returned to test for: ${unverified.join(', ')}`, '');
+  } else {
+    add('deja', 'redaction self-check', true, 'no unredacted keys in returned hit text', '');
+  }
+}
+
 // ---------------------------------------------------------------- OpenWiki
 function checkOpenWiki() {
   const bin = which('openwiki');
@@ -342,6 +454,8 @@ checkPrereqs();
 checkAos();
 checkHooks();
 await checkMemb();
+await checkMemory();
+await checkDeja();
 checkOpenWiki();
 await checkSynapse();
 report();

package/skills/global_config/archify/LICENSE

@@ -0,0 +1,22 @@
+MIT License
+
+Copyright (c) 2026 tt-a1i (Archify)
+Copyright (c) 2025 Cocoon AI
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/skills/global_config/archify/SKILL.md

@@ -0,0 +1,140 @@
+---
+name: archify
+description: Create polished, validated architecture, workflow, sequence, data-flow, and lifecycle/state diagrams as explorable standalone HTML with inline SVG, dark/light themes, optional trace motion, and PNG/JPEG/WebP/SVG/WebM export. Accept plain-language requirements or pasted Mermaid flowchart, sequenceDiagram, and stateDiagram input; inspect repository evidence when the diagram must reflect real code. Use when the user asks to visualize system architecture, infrastructure, cloud/security/network topology, technical workflows, API call sequences, request lifecycles, data pipelines, ETL/ELT, data lineage, state machines, or to convert/beautify Mermaid.
+category: engineering-method
+license: MIT
+metadata:
+  version: "2.17"
+  author: tt-a1i
+  origin: tt-a1i/archify@9e35d2b
+  based_on: Cocoon-AI/architecture-diagram-generator (MIT, v1.0)
+---
+
+<!-- Source: tt-a1i/archify archify/ — MIT, see THIRD_PARTY_NOTICES.md -->
+
+# Archify
+
+Create a self-contained, interactive HTML diagram from a small typed JSON specification. Static output is the default; enable motion only when the user asks for a demo or presentation.
+
+## Fast authoring path
+
+Use this bounded path for ordinary generation. Do not read the optional Viewer Runtime reference unless the user asks about those features.
+
+1. Choose `architecture`, `workflow`, `sequence`, `dataflow`, or `lifecycle` from the question.
+2. Read one matching schema in `schemas/`, `schemas/common.schema.json`, and one matching JSON example in `examples/`. Read only those files. Fresh authorship means new stable IDs, domain wording, and layout; use the example for field shape, not facts. New workflow sources use `schema_version: 2` and its readable layout contract; keep `schema_version: 1` only when preserving an existing workflow's fixed geometry. When real product identity matters, query `node bin/archify.mjs brands "<name>" --json`; read `references/brand-marks.md` only for an unknown brand with a user-provided URL.
+3. Artifact first: the next tool action must write the candidate. Write the candidate before inspecting renderer internals. Do not plan exact coordinates in prose. Start with one clear main path, short side branches, sparse labels, and at most 12 primary nodes. Set `meta.quality_profile` to `"showcase"` unless the user explicitly requests a dense `standard` map. Start with automatic routes and labels. Do not add `via`, `channelX`, `channelY`, or `labelAt` before a diagnostic calls for one; apply at most one diagnosed geometry control per repair.
+4. Validate after every candidate edit and immediately before handoff:
+
+   ```bash
+   node bin/archify.mjs validate <type> <candidate.json> --quality showcase --json
+   ```
+
+   A receipt with only 4 artifact checks is basic validation, never showcase acceptance. A showcase pass must report all 9 artifact checks with 0 composition errors and 0 warnings. If the candidate omits or misspells the exact `meta.quality_profile` field, fix it before geometry. For a workflow v2 geometry diagnosis, run `node bin/archify.mjs validate workflow <candidate.json> --layout-json` and use the stable compiler receipt; solver internals are not authoring controls. A passing final validation freezes the candidate: never edit it afterward.
+5. For a delivered HTML, `deliver` is the final acceptance command:
+
+   ```bash
+   node bin/archify.mjs deliver <type> <candidate.json> <output.html> --quality showcase --json
+   ```
+
+   A non-zero exit can never be described as success. A failed delivery preserves any previous output, so do not run `visual-check` on that path: it would inspect the stale last-good artifact, not the failed candidate. If validation fails, change only the diagnosed `subject`, verify `evidence`, choose from `supportedFixes`, and rerun. Continue focused correction while the objective error count reaches a new minimum. If two consecutive rounds do not improve that best count, stop and report the unresolved diagnostics truthfully.
+
+## In AOS
+
+This copy ships with AOS, which pins its version; the upstream update check
+was removed. `node bin/archify.mjs` below also runs as `aos-archify` from any
+directory. In an AOS pipeline the Architect renders the plan's architecture to
+`production_artifacts/00_architecture.html`, which is reviewed in plan-canvas
+and linked from the live map via the component's `url:` line.
+
+Do not read `renderers/shared/geometry.mjs`, renderer source, validator source, tests, or benchmarks before the first candidate. Inspect implementation only for an unsupported internal diagnostic or after two focused repairs fail.
+
+Workflow note: use schema v2 for new workflows; preserve schema v1 when an
+existing source needs fixed legacy geometry. Keep semantic edge labels and act
+on the compiler diagnostic. The canonical layout, pin, migration, and receipt
+contract is in [`renderers/workflow/README.md`](renderers/workflow/README.md#layout-contracts).
+
+Lifecycle note: phase columns `0..4` occupy the main rail; event/terminal column `N` in `0..2` aligns exactly beneath main column `N + 2`. A recoverable state uses `type: "failure"` plus a real transition back to the active state.
+
+## Type router
+
+| Type | Use for |
+|---|---|
+| `architecture` | Components, services, cloud/security boundaries, infrastructure |
+| `workflow` | Processes, approval gates, tool calls, runbooks, CI/CD |
+| `sequence` | API call chains, request lifecycles, async traces, returns |
+| `dataflow` | Pipelines, ETL/ELT, lineage, governance, consumers |
+| `lifecycle` | State/status transitions, retries, waiting and terminal states |
+
+When ambiguous, run `node bin/archify.mjs guide "<scenario>" --json`. Scenario proof examples are structural references, not facts to copy.
+
+## Mermaid input
+
+Read Mermaid for topology and meaning, then author fresh Archify JSON; do not mechanically render Mermaid styling.
+
+- `flowchart` / `graph` → `workflow`, or `architecture` for a component map.
+- `sequenceDiagram` → `sequence`; participants become semantic participants and arrows become messages.
+- `stateDiagram` → `lifecycle`; states and transitions retain meaning, not Mermaid style.
+
+## Authoring invariants
+
+- One obvious main path; side branches leave the nearest main-path node. Remove low-value edges before adding routing controls.
+- Omit `meta.visual_preset` by default so every diagram opens in `classic`, regardless of whether its resolved color mode is light or dark. Color mode and visual preset are independent: switching Light / Dark must preserve the current preset. Set `signal-flow`, `blueprint`, or `editorial` only when the user explicitly requests that visual style.
+- Omit `meta.subtitle` by default. Never invent a subtitle that restates the title, nodes, or cards; include one short supporting line only when the user explicitly asks for it.
+- Treat the standalone desktop viewer as a first-screen artifact by default, not a shallow strip. Generate one responsive artifact for laptops and external displays—never device-specific HTML or alternate topology. The viewer may adapt only the outer reading width from the live viewport height; it must preserve the authored SVG/viewBox, proportions, semantic geometry, and normal document flow. On a wide or tall desktop, use enough authored vertical rhythm that the diagram panel and its necessary conclusion cards occupy the screen as a balanced whole; runtime scaling cannot repair an over-compressed Y layout or an undersized explicit `meta.viewBox`. Before handoff, open the real HTML at 1440×900, 1600×1000, and 1920×1080; additionally check 2048×1320 whenever the composition is intended for a large desktop display. Require `document.documentElement.scrollWidth <= window.innerWidth` and `scrollHeight <= window.innerHeight` at every checked size, while visually checking that the diagram remains comfortably readable and vertically balanced at the largest checked viewport. Repair overflow by removing only genuinely redundant content or compacting spacing before shrinking nodes, labels, or the main panel. If the largest viewport still has a conspicuous empty lower band at the viewer's width cap, redistribute authored Y positions and increase the viewBox height proportionally; do not add filler copy or decorative cards. Never counterfeit a pass with `overflow: hidden`, clipped content, an internal diagram scroller, stretched SVG height, or smaller typography. Narrow/mobile layouts may scroll vertically when containment requires it.
+- Omit `meta.legend` for the truthful `auto` default. When needed, use only `mode: auto|all|hidden` and renderer-supported `entries.<kind>.label|visible`; labels never change semantics.
+- Choose one primary authored language from an explicit user choice; otherwise follow the request or conversation's dominant language. `meta.locale` controls only renderer-owned Viewer UI: use `"en"` or `"zh-CN"` for the corresponding supported primary language. For every other language, omit `meta.locale` and explicitly disclose that the fixed Viewer UI and `<html lang>` fall back to English. The renderer never translates authored content. See `references/authoring-contract.md` for details.
+- Preserve exact product names, code identifiers, commands, protocols, API paths, and environment names. They may remain English inside localized copy, but never justify leaving the surrounding explanatory prose in another language.
+- Brand identity is optional and explicit. Put a canonical built-in ID in `brand` when the node names that real product. If no preset matches and the user supplied the official HTTP(S) URL, first run `node bin/archify.mjs brands capture "<url>" --json`, then author the returned digest-pinned `brand` object. Render and validate never perform an unpinned capture. Otherwise omit `brand`. Never infer a brand from a vague role such as "database", and never let a badge replace the semantic `type`, label, or relationship facts.
+- For sequence diagrams, omit `meta.column_fit` for the stable `fixed` layout. Set it to `"spread"` when a wide viewBox would otherwise leave unused horizontal space or when meaningful participant labels do not fit the fixed boxes; do not shorten semantic labels before trying `spread`.
+- Component types are `frontend`, `backend`, `database`, `cloud`, `security`, `messagebus`, and `external`; variants are `default`, `emphasis`, `security`, and `dashed`.
+- Relationship labels are semantic data. When one collides, move the label, adjust the route or spacing, then shorten the wording while preserving meaning. Omit only wording that is already fully implied by both endpoints and contains no protocol, action, direction, synchronous/asynchronous behavior, or cross-boundary mechanism. Preserve every meaningful label; deleting it is not a geometry repair. If a relationship starts unlabeled because its endpoints fully imply it, explain why the wording is redundant; this is a semantic authoring choice, not a geometry repair.
+- Omit `meta.engineering_profile` by default. Region, cluster, and security boundary wording do not by themselves enable it. Enable `deployment-ownership` only when the user explicitly asks for a production deployment topology, ownership handoff, or fail-closed deployment review and the source facts are known. Once enabled, must not remove the engineering profile merely to pass validation; repair the facts or report the diagnostics truthfully.
+- Spacing means clear gap, not center distance. For a relationship label, clear gap must exceed its measured mask width; follow the label-preserving repair order.
+- Automatic routes own their endpoint sides. A side is a direction contract: the first and final segment must leave/enter perpendicular to that side.
+- Automatic Port Spread is a default renderer behavior for architecture, workflow, data-flow, and lifecycle. It skips single relationships and explicit `via`, `channelX`, `channelY`, `labelAt`, or non-`auto` routes. Near parallel ports use an outside bridge so automatic routing cannot create a sub-8px segment or sub-16px interior turn. Architecture separately keeps unobstructed facing automatic ports (`left`/`right` or `top`/`bottom`) on one shared axis when their offset is under 16px and both ports retain corner clearance. If exactly one endpoint was spread, only the unshared endpoint may move onto that axis; if both endpoints were spread, keep the outside bridge so competing ports remain distinct.
+- Never accept an edge crossing an unrelated opaque node, an ambiguous shared corridor, or a relationship label masking another route.
+
+Read `references/authoring-contract.md` only when you need field enums, spacing math, geometry repair rules, repository evidence, or mode-specific placement.
+
+## Delivery
+
+Use `validate` during repair and `deliver` once for final acceptance. Delivery freezes the exact specification bytes into a private same-directory snapshot, renders and checks that snapshot, atomically commits the HTML, and reports SHA-256 plus byte counts for both specification and artifact. This is deterministic artifact evidence; it does not exercise the Viewer in a browser.
+
+After delivery, collect bounded desktop evidence without modifying or rerendering the trusted HTML:
+
+```bash
+node bin/archify.mjs visual-check <output.html> --json
+```
+
+`visual-check` collects automated browser evidence from the exact delivered HTML without modifying or rerendering it. Its machine-readable measurements and screenshots do not approve perceptual polish. Follow `references/delivery-contract.md` for the canonical receipt fields, coverage, sidecars, exit behavior, and supplementary manual-record requirements.
+
+Keep the three claims separate: `deliver` proves deterministic artifact checks, `visual-check` proves bounded behavior in a real browser, and perceptual visual review requires an actual human or image-capable reviewer. Report browser evidence and perceptual review independently. An unconstrained glance can support only perceptual review; use the canonical delivery contract when recording supplementary manual browser work or handling an environmental failure.
+
+Add `--open` only when the user wants an immediate local preview. For an active desktop authoring loop, the optional command is:
+
+```bash
+node bin/archify.mjs preview <type> <input>.json <output>.html --quality showcase
+```
+
+Never start preview by default. Read `references/delivery-contract.md` when using preview, repository evidence, export receipts, visual review, or post-commit opening.
+
+## Optional viewer capabilities
+
+Generated HTML already contains theme switching, pan/zoom, search, focus, relationship tracing, semantic views, presentation, and truthful exports. These are reader capabilities, not extra authoring work. `meta.animation: "trace"` is opt-in; `meta.views` is optional and should contain at most five curated chapters.
+
+Read `references/viewer-runtime.md` only when the user explicitly asks for Share Cards, Route/Reach cards, motion, guided stories, deep links, presentation, search/focus, or another Viewer Runtime feature.
+
+## Setup and fallback
+
+No install is required inside the skill package. Verify with:
+
+```bash
+node bin/archify.mjs doctor
+node bin/archify.mjs demo <output-directory>
+```
+
+When shell access is unavailable, hand-place architecture SVG into `assets/template.html`, use CSS semantic classes rather than inline colors, and follow the visual review contract in `references/delivery-contract.md`.
+
+## Output
+
+Return the checked HTML path, diagram type, validation summary, specification/artifact receipt, browser-evidence status, and truthful visual-review status. Do not claim success for a non-zero command or claim visual inspection you did not perform.

package/skills/global_config/archify/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,69 @@
+# Third-party notices
+
+Archify includes optional vector data for third-party brand marks. These marks
+are provided only to identify technologies and services in user-authored
+diagrams. Their inclusion does not imply sponsorship, endorsement, partnership,
+or affiliation with Archify.
+
+The Archify MIT license applies to Archify's own code and content. It does not
+replace the copyright licenses, trademark policies, or brand guidelines that
+apply to third-party marks. Users are responsible for confirming that their
+particular use is permitted.
+
+## Simple Icons
+
+Most of the built-in vector paths and their metadata were generated from
+[Simple Icons 16.28.0](https://github.com/simple-icons/simple-icons/tree/16.28.0).
+Simple Icons makes its collection work available under
+[CC0 1.0 Universal](https://github.com/simple-icons/simple-icons/blob/16.28.0/LICENSE.md).
+
+As Simple Icons explains in its
+[disclaimer](https://github.com/simple-icons/simple-icons/blob/16.28.0/DISCLAIMER.md),
+CC0 for the collection does not mean that every underlying icon is CC0. License
+and brand-guideline metadata may be incomplete or change over time. The absence
+of an individual license entry is not a grant of permission.
+
+Archify embeds the selected icons as vector-path data and may render them in a
+user-selected color. The following individual licenses were recorded in the
+pinned Simple Icons 16.28.0 metadata:
+
+| Mark | Recorded source | Recorded license | Archify treatment |
+|---|---|---|---|
+| Angular | [Angular press kit](https://angular.dev/press-kit) | [`CC-BY-4.0`](https://creativecommons.org/licenses/by/4.0/) | Embedded as vector-path data; color may be changed by the authored diagram. |
+| Apache Airflow | [Apache logos](https://apache.org/logos) | [`Apache-2.0`](https://www.apache.org/licenses/LICENSE-2.0) | Embedded as vector-path data; Apache trademarks remain subject to the [ASF trademark policy](https://www.apache.org/foundation/marks/). |
+| Apache Kafka | [Apache logos](https://apache.org/logos) | [`Apache-2.0`](https://www.apache.org/licenses/LICENSE-2.0) | Embedded as vector-path data; Apache trademarks remain subject to the [ASF trademark policy](https://www.apache.org/foundation/marks/). |
+| .NET | [.NET brand repository](https://github.com/dotnet/brand/blob/c7d0f51b8ec59531332d05fb27a5b758a7a3d689/logo/dotnet-logo.svg) | [`CC0-1.0`](https://creativecommons.org/publicdomain/zero/1.0/) | Embedded as vector-path data; color may be changed by the authored diagram. |
+| JavaScript | [JS community logo](https://github.com/voodootikigod/logo.js/blob/1544bdeed6d618a6cfe4f0650d04ab8d9cfa76d9/js.svg) | [`MIT`](https://github.com/voodootikigod/logo.js/blob/1544bdeed6d618a6cfe4f0650d04ab8d9cfa76d9/LICENSE) | Embedded as vector-path data; color may be changed by the authored diagram. |
+| Jenkins | [Jenkins artwork source](https://get.jenkins.io/art/) | [`CC-BY-SA-3.0`](https://creativecommons.org/licenses/by-sa/3.0/) | Embedded as vector-path data; color may be changed by the authored diagram. Jenkins retains its trademark rights. |
+| Rust | [Rust project](https://www.rust-lang.org) | [`CC-BY-SA-4.0`](https://creativecommons.org/licenses/by-sa/4.0/) | Embedded as vector-path data; color may be changed by the authored diagram. See the [Rust media guide](https://www.rust-lang.org/policies/media-guide). |
+| Vue.js | [Vue logo source](https://github.com/vuejs/art/blob/a1c78b74569b70a25300925b4eacfefcc143b8f6/logo.svg) | [`CC-BY-NC-SA-4.0`](https://creativecommons.org/licenses/by-nc-sa/4.0/) | Embedded as vector-path data; color may be changed by the authored diagram. The non-commercial and share-alike conditions remain applicable; see the [Vue artwork terms](https://github.com/vuejs/art/blob/a1c78b74569b70a25300925b4eacfefcc143b8f6/README.md). |
+
+The source, guideline, and known license fields for every packaged mark are
+preserved in `renderers/shared/generated-brand-marks.mjs`.
+
+## OpenAI mark
+
+The OpenAI vector path is recorded from the
+[OpenAI brand guidelines](https://openai.com/brand/), not from Simple Icons.
+Use remains subject to those current guidelines and any applicable trademark
+rights. Its inclusion does not state or imply endorsement by OpenAI.
+
+## JetBrains Mono
+
+Delivered Archify viewer artifacts embed the JetBrains Mono variable font
+subsets served by Google Fonts. For characters covered by these subsets, font
+selection does not depend on a network request or a locally installed copy.
+Uncovered characters (including CJK) still use the system fallback stack;
+browser and operating-system rasterization can differ.
+JetBrains Mono is maintained at
+[github.com/JetBrains/JetBrainsMono](https://github.com/JetBrains/JetBrainsMono)
+and is distributed under the SIL Open Font License 1.1. The complete license
+text is preserved in `assets/JetBrainsMono-OFL.txt` in the packaged Skill and
+in the font CSS carried by standalone HTML and SVG exports.
+
+## No additional rights granted
+
+Brand names, logos, and trademarks remain the property of their respective
+owners. This notice records provenance and known terms; it does not grant rights
+that Archify does not hold, and it does not state that every packaged mark has
+been cleared for every commercial, promotional, or redistributive use.

package/skills/global_config/archify/assets/JetBrainsMono-OFL.txt

@@ -0,0 +1,93 @@
+Copyright 2020 The JetBrains Mono Project Authors (https://github.com/JetBrains/JetBrainsMono)
+
+This Font Software is licensed under the SIL Open Font License, Version 1.1.
+This license is copied below, and is also available with a FAQ at:
+https://openfontlicense.org
+
+
+-----------------------------------------------------------
+SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007
+-----------------------------------------------------------
+
+PREAMBLE
+The goals of the Open Font License (OFL) are to stimulate worldwide
+development of collaborative font projects, to support the font creation
+efforts of academic and linguistic communities, and to provide a free and
+open framework in which fonts may be shared and improved in partnership
+with others.
+
+The OFL allows the licensed fonts to be used, studied, modified and
+redistributed freely as long as they are not sold by themselves. The
+fonts, including any derivative works, can be bundled, embedded,
+redistributed and/or sold with any software provided that any reserved
+names are not used by derivative works. The fonts and derivatives,
+however, cannot be released under any other type of license. The
+requirement for fonts to remain under this license does not apply
+to any document created using the fonts or their derivatives.
+
+DEFINITIONS
+"Font Software" refers to the set of files released by the Copyright
+Holder(s) under this license and clearly marked as such. This may
+include source files, build scripts and documentation.
+
+"Reserved Font Name" refers to any names specified as such after the
+copyright statement(s).
+
+"Original Version" refers to the collection of Font Software components as
+distributed by the Copyright Holder(s).
+
+"Modified Version" refers to any derivative made by adding to, deleting,
+or substituting -- in part or in whole -- any of the components of the
+Original Version, by changing formats or by porting the Font Software to a
+new environment.
+
+"Author" refers to any designer, engineer, programmer, technical
+writer or other person who contributed to the Font Software.
+
+PERMISSION & CONDITIONS
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of the Font Software, to use, study, copy, merge, embed, modify,
+redistribute, and sell modified and unmodified copies of the Font
+Software, subject to the following conditions:
+
+1) Neither the Font Software nor any of its individual components,
+in Original or Modified Versions, may be sold by itself.
+
+2) Original or Modified Versions of the Font Software may be bundled,
+redistributed and/or sold with any software, provided that each copy
+contains the above copyright notice and this license. These can be
+included either as stand-alone text files, human-readable headers or
+in the appropriate machine-readable metadata fields within text or
+binary files as long as those fields can be easily viewed by the user.
+
+3) No Modified Version of the Font Software may use the Reserved Font
+Name(s) unless explicit written permission is granted by the corresponding
+Copyright Holder. This restriction only applies to the primary font name as
+presented to the users.
+
+4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
+Software shall not be used to promote, endorse or advertise any
+Modified Version, except to acknowledge the contribution(s) of the
+Copyright Holder(s) and the Author(s) or with their explicit written
+permission.
+
+5) The Font Software, modified or unmodified, in part or in whole,
+must be distributed entirely under this license, and must not be
+distributed under any other license. The requirement for fonts to
+remain under this license does not apply to any document created
+using the Font Software.
+
+TERMINATION
+This license becomes null and void if any of the above conditions are
+not met.
+
+DISCLAIMER
+THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
+OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
+DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
+OTHER DEALINGS IN THE FONT SOFTWARE.