@kaddo/mcp 3.127.0 → 3.129.0

package/dist/index.js

@@ -169,6 +169,8 @@ var DERIVED_WRITE_FILES = /* @__PURE__ */ new Set([
   ".kaddo/graph.mmd",
   ".kaddo/graph-hints.md",
   ".kaddo/graph-hints.json",
+  ".kaddo/consolidation-plan.md",
+  ".kaddo/consolidation-plan.json",
   ".kaddo/modules.yml"
 ]);
 var DERIVED_EXPORTS_RE = /^\.kaddo\/exports\/[^/]+\.capsule\.(md|json)$/;
@@ -507,6 +509,21 @@ ${issues}`);
   }
   return parsed.data;
 }
+function requireConfig(dir) {
+  let config;
+  try {
+    config = loadConfig(dir);
+  } catch (err) {
+    const message = err instanceof ConfigError ? err.message : String(err);
+    console.error(message);
+    process.exit(1);
+  }
+  if (!config) {
+    console.error("No .kaddo/config.yml found. Run `kaddo init` first.");
+    process.exit(1);
+  }
+  return config;
+}
 function projectRole(config) {
   return config.project.role ?? config.multirepo?.role;
 }
@@ -2619,6 +2636,29 @@ var RESOURCE_TYPES = [
   "other"
 ];
 var INTERFACE_TYPES = ["cli", "mcp", "api", "sql", "sdk", "iac", "console", "other"];
+var REDACTED_COORDINATE = "\u2022\u2022\u2022\u2022 (hidden \u2014 store as an authentication reference)";
+var SECRET_KEY_RE = /(pass(word|phrase)?|secret|token|api[_-]?key|\bkey\b|credential|private|auth[_-]?token|access[_-]?key)/i;
+var SECRET_VALUE_PATTERNS = [
+  /\b(AKIA|ASIA)[A-Z0-9]{8,}/,
+  // AWS access key id
+  /\b(ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{20,}/,
+  // GitHub tokens
+  /\bxox[baprs]-[A-Za-z0-9-]{10,}/,
+  // Slack tokens
+  /\bsk-[A-Za-z0-9]{16,}/,
+  // OpenAI-style secret keys
+  /\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\./,
+  // JWT
+  /\w+=[^;\s]{6,}/,
+  // key=value credential fragments
+  /^[A-Za-z0-9+/]{40,}={0,2}$/
+  // long opaque base64 blob
+];
+function looksLikeSecretCoordinate(key, value) {
+  if (SECRET_KEY_RE.test(key)) return true;
+  const v = value.trim();
+  return SECRET_VALUE_PATTERNS.some((re) => re.test(v));
+}
 function str(v) {
   return typeof v === "string" && v.trim() ? v.trim() : null;
 }
@@ -2647,6 +2687,29 @@ function parseInterfaces(v) {
   }
   return out;
 }
+function parseConnectionProfiles(v) {
+  if (!Array.isArray(v)) return [];
+  const out = [];
+  for (const raw of v) {
+    if (!raw || typeof raw !== "object" || Array.isArray(raw)) continue;
+    const o2 = raw;
+    const coords = [];
+    const rawCoords = o2.coordinates;
+    if (rawCoords && typeof rawCoords === "object" && !Array.isArray(rawCoords)) {
+      for (const [key, val] of Object.entries(rawCoords)) {
+        const k2 = key.trim();
+        const value = val == null ? "" : String(val).trim();
+        if (!k2 || !value) continue;
+        coords.push({ key: k2, value: looksLikeSecretCoordinate(k2, value) ? REDACTED_COORDINATE : value });
+      }
+    }
+    const environment = str(o2.environment);
+    const iface = str(o2.interface);
+    if (!environment && !iface && coords.length === 0) continue;
+    out.push({ environment, interface: iface, coordinates: coords });
+  }
+  return out;
+}
 function parseBoundaries(v) {
   if (!v || typeof v !== "object" || Array.isArray(v)) return {};
   const out = {};
@@ -2695,6 +2758,7 @@ function toDetail(filePath, relPath, raw) {
       const a2 = parseAuth(fm.authentication);
       return { authRefs: a2.refs, authMode: a2.mode };
     })(),
+    connectionProfiles: parseConnectionProfiles(fm.connection_profiles),
     markdownBody: body
   };
 }
@@ -4500,7 +4564,8 @@ var AGENT_GROUPS = {
     "work-item-agent.md",
     "implementation-agent.md",
     "ownership-agent.md",
-    "git-strategy-agent.md"
+    "git-strategy-agent.md",
+    "knowledge-consolidation-agent.md"
   ],
   utilities: ["legacy-agent.md"]
 };
@@ -5179,7 +5244,7 @@ var KNOWLEDGE_FILES = [
 function buildReadinessReport(dir, now = /* @__PURE__ */ new Date()) {
   const config = loadConfig(dir);
   const rec = resolveNextStep(dir, now);
-  const stub = (overall2, label, command) => ({
+  const stub = (overall2, label2, command) => ({
     project_name: config?.project.name ?? "unknown",
     project_type: config?.project.state ?? "unknown",
     overall: overall2,
@@ -5202,7 +5267,7 @@ function buildReadinessReport(dir, now = /* @__PURE__ */ new Date()) {
       resolved_questions: 0,
       deferred_questions: 0
     },
-    recommended_next_step: { label, ...command ? { command } : {} },
+    recommended_next_step: { label: label2, ...command ? { command } : {} },
     nextStepRecommendation: rec
   });
   if (!config) return stub("not-initialized", rec.label, rec.command);
@@ -6077,6 +6142,69 @@ After a POC has a canonical conclusion and Core has prepared its deterministic r
 15. Traceability and Sources
 `
 );
+var KNOWLEDGE_CONSOLIDATION = skill(
+  "knowledge-consolidation",
+  "Knowledge Consolidation Skill",
+  "delivery",
+  ["knowledge-consolidation-agent", "work-item-agent", "architecture-agent"],
+  `
+# Knowledge Consolidation Skill
+
+## Purpose
+
+Standardize the SEMANTIC review of a deterministic Consolidation Plan so canonical knowledge becomes
+more precise, connected, consistent and retrievable \u2014 without losing history, decisions or evidence.
+
+## When to use
+
+After \`kaddo knowledge consolidate\` (or the \`kaddo_generate_consolidation_plan\` tool) has produced
+\`.kaddo/consolidation-plan.{md,json}\`, and a human or agent wants to review the opportunities and
+prepare refinements. Never as an autonomous rewrite of \`knowledge/\`.
+
+## Inputs
+
+The Consolidation Plan (\`.kaddo/consolidation-plan.json\`), the referenced source artifacts, and the
+context pack. Each opportunity carries: category, classification, confidence, source/target, evidence,
+rationale, suggested action, and \`requires_semantic_review\`.
+
+## Output
+
+For each opportunity the agent chooses to act on: a reviewable proposal that states what would change,
+what content is added/moved/summarized, what must be preserved, and which claims still need
+confirmation \u2014 with a diff or equivalent. No canonical file is edited by this skill; application goes
+through the existing controlled-edit flows after human approval.
+
+## Rules
+
+- Distinguish \`observed\` (verifiable fact) from \`suggested\` (a candidate needing judgement). Never
+  present a \`suggested\` candidate as a verified conclusion.
+- Classify every claim as Observed / Derived / Suggested / Unknown.
+- Do not merge Business/Product/Tech just because they share a topic \u2014 preserve layer responsibilities.
+- Do not move every historical learning into current knowledge; incorporate only live rules, WITH a
+  reference back to the originating Work Item. Never summarize or delete the Work Item.
+- Do not invent relationships, decisions or business rules; a missing optional relationship is an
+  opportunity, not an error.
+- For a potential inconsistency, present BOTH sources and say whether the conflict is verified or
+  potential. Never pick a winner arbitrarily.
+- Preserve critical constraints, decisions and reasons, exceptions, known risks, technical contracts,
+  implementation evidence, provenance and necessary history.
+- Never reveal secret values or resolve secret references; never connect to a Project Resource.
+- Do not commit, push or release automatically.
+
+## Quality checklist
+
+- Every proposal cites its source artifact(s) and evidence.
+- Facts are separated from interpretations.
+- Preserved information is named explicitly.
+- Claims needing confirmation are flagged.
+- No canonical artifact was modified by the analysis or the review.
+
+## Example output
+
+A short set of proposals, each with evidence, a before/after (or diff) and an explicit list of what
+must be preserved, ready for human approval.
+`
+);
 var SKILLS = [
   ADR_WRITING,
   WORK_ITEM_REFINEMENT,
@@ -6088,10 +6216,11 @@ var SKILLS = [
   MODULE_CONTEXT_REFINEMENT,
   EVIDENCE_VERIFICATION,
   LEGACY_RISK_ASSESSMENT,
-  POC_REPORT_WRITING
+  POC_REPORT_WRITING,
+  KNOWLEDGE_CONSOLIDATION
 ];
 var SKILL_GROUPS = {
-  delivery: ["work-item-refinement", "implementation-planning", "learning-capture", "evidence-verification", "legacy-risk-assessment", "poc-report-writing"],
+  delivery: ["work-item-refinement", "implementation-planning", "learning-capture", "evidence-verification", "legacy-risk-assessment", "poc-report-writing", "knowledge-consolidation"],
   tech: ["adr-writing", "ownership-suggestion", "graph-metadata-review", "module-context-refinement"],
   integration: ["capsule-writing"]
 };
@@ -6287,6 +6416,24 @@ var RESPONSIBILITY_MATRIX = {
     ],
     next: ["kaddo graph export"]
   },
+  "knowledge-consolidation-agent": {
+    agent: "knowledge-consolidation-agent",
+    responsibleFor: [
+      "Semantic review of the deterministic Consolidation Plan",
+      "Preparing reviewable knowledge refinements"
+    ],
+    produces: ["proposed refinements (before/after) for human approval"],
+    canSuggest: ["kaddo knowledge consolidate"],
+    cannotSuggest: [
+      "code",
+      "git",
+      "commits",
+      "modifying canonical knowledge without confirmation",
+      "inventing facts or relationships",
+      "deleting history"
+    ],
+    next: ["kaddo knowledge consolidate"]
+  },
   "ownership-agent": {
     agent: "ownership-agent",
     responsibleFor: ["Precise code: ownership for Work Items and artifacts"],
@@ -8447,6 +8594,78 @@ ADRs) and re-runs \`kaddo graph export\`.
 - No files were modified; no Git was run.
 - The human is asked to confirm and re-export the graph.
 `;
+var KNOWLEDGE_CONSOLIDATION_AGENT = `# Knowledge Consolidation Agent
+
+## Role
+
+You are the Kaddo Knowledge Consolidation Agent. Your job is to perform the **semantic review** of
+the deterministic **Consolidation Plan** produced by \`kaddo knowledge consolidate\`, and to prepare
+**reviewable refinements** that make canonical knowledge more precise, connected, consistent and
+retrievable \u2014 without losing history, decisions or evidence.
+
+You do not write code, you do not modify canonical files, and you never run Git. You propose; a human
+confirms, and application goes through Kaddo's existing controlled-edit flows.
+
+## When to Use
+
+Use this agent after \`kaddo knowledge consolidate\` (or the \`kaddo_generate_consolidation_plan\`
+tool) has produced \`.kaddo/consolidation-plan.md\` and \`.kaddo/consolidation-plan.json\`, and the
+plan contains opportunities flagged \`requires_semantic_review\`.
+
+## Input Required
+
+Provide \`.kaddo/context-pack.md\` and \`.kaddo/consolidation-plan.json\` as the primary inputs, plus
+the source artifacts each opportunity references under \`knowledge/\` (and completed Work Items under
+\`knowledge/delivery/work-items/completed/\` for learning opportunities).
+
+## Expected Output
+
+For each opportunity you choose to act on, a proposal that states what would change, what content is
+added / moved / summarized, what must be preserved, and which claims still need confirmation \u2014 with a
+diff or equivalent before/after.
+
+## Instructions
+
+1. Read the plan and work one opportunity at a time, highest-signal first.
+2. Separate what you **observe** in the files from what you **suggest** \u2014 never present a suggested
+   candidate as a verified conclusion.
+3. For possible redundancy, compare the actual sections; propose a single reference location only if
+   one genuinely restates the other. Preserve layer separation (Business / Product / Tech / Delivery).
+4. For an unincorporated learning, decide whether it is a live rule; if so, propose incorporating it
+   into the right Tech artifact **with a reference back to the originating Work Item**. Never summarize
+   or delete the Work Item.
+5. For a relationship opportunity, propose the relationship only when existing knowledge justifies it;
+   a missing optional relationship is an opportunity, not an error.
+6. For a potential inconsistency, present **both** sources and say whether the conflict is verified or
+   potential. Do not pick a winner arbitrarily.
+7. Classify every claim as Observed / Derived / Suggested / Unknown, and mark what needs confirmation.
+
+## Constraints
+
+- Do **not** modify canonical files \u2014 propose changes for a human to apply.
+- Do **not** invent facts, relationships, decisions or business rules.
+- Do **not** delete historical information, change Work Item states, or alter verification results.
+- Do **not** reveal secret values or resolve secret references; do **not** connect to a Project Resource.
+- Do **not** run Git, commit, push or release.
+
+## Output Format
+
+Per opportunity: the opportunity id, classification and confidence, the proposed before/after (or
+diff), the explicit list of what must be preserved, and the open questions that need confirmation.
+
+## Where to Save the Result
+
+Nothing is saved automatically. The human reviews the proposals and applies the approved ones through
+Kaddo's existing controlled-edit flows. Re-run \`kaddo knowledge consolidate\` afterwards to confirm.
+
+## Quality Checklist
+
+- Every proposal cites its source artifact(s) and evidence from the plan.
+- Facts are separated from interpretations; suggested candidates are never asserted as fact.
+- Preserved information (constraints, decisions, exceptions, risks, contracts, provenance) is named.
+- No canonical artifact was modified; no Git was run.
+- The human is asked to confirm before anything is applied.
+`;
 var AGENT_PROMPTS = [
   { fileName: "capability-agent.md", content: CAPABILITY_AGENT },
   { fileName: "architecture-agent.md", content: ARCHITECTURE_AGENT },
@@ -8473,7 +8692,9 @@ var AGENT_PROMPTS = [
   // Knowledge Capsule refinement (external context — VS-054)
   { fileName: "capsule-agent.md", content: CAPSULE_AGENT },
   // Graph relationship quality (metadata hints → precise front matter — VS-056)
-  { fileName: "graph-agent.md", content: GRAPH_AGENT }
+  { fileName: "graph-agent.md", content: GRAPH_AGENT },
+  // Knowledge Consolidation semantic review (deterministic plan → reviewable refinements — WI-070)
+  { fileName: "knowledge-consolidation-agent.md", content: KNOWLEDGE_CONSOLIDATION_AGENT }
   // Every official prompt ends with its responsibility boundaries + Agent Trace footer.
 ].map((p) => ({ fileName: p.fileName, content: withResponsibilityTrace(p.fileName, p.content) }));
 
@@ -8680,9 +8901,9 @@ function installedAssetsSummary(dir) {
 // ../cli/src/core/roadmap-quality.ts
 var ROADMAP_PATH = "knowledge/delivery/roadmap.md";
 var INITIATIVE_RE2 = /^#{2,4}\s+(RM-[\w.-]+)\s*[:\-–]?\s*(.*)$/;
-function fieldPresent(lines, label) {
+function fieldPresent(lines, label2) {
   for (let i = 0; i < lines.length; i++) {
-    const m2 = lines[i].match(new RegExp(`^\\s*[-*]?\\s*(?:\\*\\*)?\\s*(${label.source})\\s*(?:\\*\\*)?\\s*:\\s*(.*)$`, "i"));
+    const m2 = lines[i].match(new RegExp(`^\\s*[-*]?\\s*(?:\\*\\*)?\\s*(${label2.source})\\s*(?:\\*\\*)?\\s*:\\s*(.*)$`, "i"));
     if (!m2) continue;
     const inline = m2[2].trim();
     if (inline) return true;
@@ -8784,13 +9005,13 @@ function renderSignalsCompact(signals) {
     ["external_integrations", "External integrations"],
     ["environment", "Environment"]
   ];
-  for (const [key, label] of CATEGORIES) {
+  for (const [key, label2] of CATEGORIES) {
     const arr = signals[key];
     if (arr.length === 0) continue;
     if (arr.length === 1) {
-      lines.push(`- ${label}: ${arr[0].label}`);
+      lines.push(`- ${label2}: ${arr[0].label}`);
     } else {
-      lines.push(`- ${label}: ${arr.length}`);
+      lines.push(`- ${label2}: ${arr.length}`);
     }
   }
   return lines.length > 0 ? lines.join("\n") + "\n" : "No signals detected.\n";
@@ -10988,9 +11209,9 @@ function renderImpactMarkdown(r2, opts = {}) {
     ["validation section", gp.missing_validation]
   ];
   L.push("## Historical Documentation Completeness", "");
-  for (const [label, items] of historical) {
+  for (const [label2, items] of historical) {
     const completed = items.filter((item) => item.status === "completed");
-    if (completed.length > 0) L.push(`- Completed Work Items without detected ${label}: ${completed.length}`);
+    if (completed.length > 0) L.push(`- Completed Work Items without detected ${label2}: ${completed.length}`);
   }
   if (!historical.some(([, items]) => items.some((item) => item.status === "completed"))) {
     L.push("No historical documentation completeness gaps were detected.");
@@ -11765,6 +11986,27 @@ var RESOURCES = [
       return parts;
     }
   },
+  {
+    uri: "kaddo://consolidation-plan",
+    name: "Kaddo consolidation plan",
+    description: "Knowledge Consolidation Plan (.kaddo/consolidation-plan.md + .json) \u2014 reviewable opportunities to optimize, connect and refine canonical knowledge. Read-only.",
+    mimeType: "text/markdown",
+    read: (root) => {
+      const md = readText(root, ".kaddo/consolidation-plan.md");
+      const json = readText(root, ".kaddo/consolidation-plan.json");
+      if (!md && !json) {
+        return text2(
+          "kaddo://consolidation-plan",
+          "Consolidation Plan not found. Run `kaddo knowledge consolidate` (or the kaddo_generate_consolidation_plan tool) first.",
+          "text/plain"
+        );
+      }
+      const parts = [];
+      if (md) parts.push({ uri: "kaddo://consolidation-plan", text: md, mimeType: "text/markdown" });
+      if (json) parts.push({ uri: "kaddo://consolidation-plan.json", text: json, mimeType: "application/json" });
+      return parts;
+    }
+  },
   {
     uri: "kaddo://build-contract",
     name: "Kaddo build contract",
@@ -12121,7 +12363,7 @@ function getPrompt(root, name) {
 }
 
 // src/tools.ts
-import matter24 from "gray-matter";
+import matter25 from "gray-matter";
 
 // ../cli/dist/core.js
 import fs3 from "fs";
@@ -12151,22 +12393,23 @@ import matter102 from "gray-matter";
 import { parse as parseYaml82 } from "yaml";
 import matter112 from "gray-matter";
 import matter122 from "gray-matter";
+import matter132 from "gray-matter";
 import { parse as parseYaml92, stringify as stringifyYaml52 } from "yaml";
 import fs4 from "fs";
 import path4 from "path";
 import crypto2 from "crypto";
-import matter132 from "gray-matter";
+import matter142 from "gray-matter";
 import crypto3 from "crypto";
 import fs5 from "fs";
-import matter142 from "gray-matter";
 import matter15 from "gray-matter";
+import matter16 from "gray-matter";
 import { parse as parseYaml102, stringify as stringifyYaml6 } from "yaml";
 import { parse as parseYaml11, stringify as stringifyYaml7 } from "yaml";
-import matter16 from "gray-matter";
 import matter17 from "gray-matter";
 import matter18 from "gray-matter";
 import matter19 from "gray-matter";
 import matter20 from "gray-matter";
+import matter21 from "gray-matter";
 function exists2(p) {
   return fs3.existsSync(p);
 }
@@ -13897,6 +14140,29 @@ function suggestInitiativesForExternalItem(dir, integration, externalId) {
   );
 }
 var RESOURCE_ARTIFACT_TYPE2 = "project-resource";
+var REDACTED_COORDINATE2 = "\u2022\u2022\u2022\u2022 (hidden \u2014 store as an authentication reference)";
+var SECRET_KEY_RE2 = /(pass(word|phrase)?|secret|token|api[_-]?key|\bkey\b|credential|private|auth[_-]?token|access[_-]?key)/i;
+var SECRET_VALUE_PATTERNS2 = [
+  /\b(AKIA|ASIA)[A-Z0-9]{8,}/,
+  // AWS access key id
+  /\b(ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{20,}/,
+  // GitHub tokens
+  /\bxox[baprs]-[A-Za-z0-9-]{10,}/,
+  // Slack tokens
+  /\bsk-[A-Za-z0-9]{16,}/,
+  // OpenAI-style secret keys
+  /\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\./,
+  // JWT
+  /\w+=[^;\s]{6,}/,
+  // key=value credential fragments
+  /^[A-Za-z0-9+/]{40,}={0,2}$/
+  // long opaque base64 blob
+];
+function looksLikeSecretCoordinate2(key, value) {
+  if (SECRET_KEY_RE2.test(key)) return true;
+  const v = value.trim();
+  return SECRET_VALUE_PATTERNS2.some((re) => re.test(v));
+}
 function str3(v) {
   return typeof v === "string" && v.trim() ? v.trim() : null;
 }
@@ -13925,6 +14191,29 @@ function parseInterfaces2(v) {
   }
   return out;
 }
+function parseConnectionProfiles2(v) {
+  if (!Array.isArray(v)) return [];
+  const out = [];
+  for (const raw of v) {
+    if (!raw || typeof raw !== "object" || Array.isArray(raw)) continue;
+    const o2 = raw;
+    const coords = [];
+    const rawCoords = o2.coordinates;
+    if (rawCoords && typeof rawCoords === "object" && !Array.isArray(rawCoords)) {
+      for (const [key, val] of Object.entries(rawCoords)) {
+        const k2 = key.trim();
+        const value = val == null ? "" : String(val).trim();
+        if (!k2 || !value) continue;
+        coords.push({ key: k2, value: looksLikeSecretCoordinate2(k2, value) ? REDACTED_COORDINATE2 : value });
+      }
+    }
+    const environment = str3(o2.environment);
+    const iface = str3(o2.interface);
+    if (!environment && !iface && coords.length === 0) continue;
+    out.push({ environment, interface: iface, coordinates: coords });
+  }
+  return out;
+}
 function parseBoundaries2(v) {
   if (!v || typeof v !== "object" || Array.isArray(v)) return {};
   const out = {};
@@ -13973,6 +14262,7 @@ function toDetail2(filePath, relPath, raw) {
       const a2 = parseAuth2(fm.authentication);
       return { authRefs: a2.refs, authMode: a2.mode };
     })(),
+    connectionProfiles: parseConnectionProfiles2(fm.connection_profiles),
     markdownBody: body
   };
 }
@@ -14594,7 +14884,8 @@ var AGENT_GROUPS2 = {
     "work-item-agent.md",
     "implementation-agent.md",
     "ownership-agent.md",
-    "git-strategy-agent.md"
+    "git-strategy-agent.md",
+    "knowledge-consolidation-agent.md"
   ],
   utilities: ["legacy-agent.md"]
 };
@@ -15624,6 +15915,69 @@ After a POC has a canonical conclusion and Core has prepared its deterministic r
 15. Traceability and Sources
 `
 );
+var KNOWLEDGE_CONSOLIDATION2 = skill2(
+  "knowledge-consolidation",
+  "Knowledge Consolidation Skill",
+  "delivery",
+  ["knowledge-consolidation-agent", "work-item-agent", "architecture-agent"],
+  `
+# Knowledge Consolidation Skill
+
+## Purpose
+
+Standardize the SEMANTIC review of a deterministic Consolidation Plan so canonical knowledge becomes
+more precise, connected, consistent and retrievable \u2014 without losing history, decisions or evidence.
+
+## When to use
+
+After \`kaddo knowledge consolidate\` (or the \`kaddo_generate_consolidation_plan\` tool) has produced
+\`.kaddo/consolidation-plan.{md,json}\`, and a human or agent wants to review the opportunities and
+prepare refinements. Never as an autonomous rewrite of \`knowledge/\`.
+
+## Inputs
+
+The Consolidation Plan (\`.kaddo/consolidation-plan.json\`), the referenced source artifacts, and the
+context pack. Each opportunity carries: category, classification, confidence, source/target, evidence,
+rationale, suggested action, and \`requires_semantic_review\`.
+
+## Output
+
+For each opportunity the agent chooses to act on: a reviewable proposal that states what would change,
+what content is added/moved/summarized, what must be preserved, and which claims still need
+confirmation \u2014 with a diff or equivalent. No canonical file is edited by this skill; application goes
+through the existing controlled-edit flows after human approval.
+
+## Rules
+
+- Distinguish \`observed\` (verifiable fact) from \`suggested\` (a candidate needing judgement). Never
+  present a \`suggested\` candidate as a verified conclusion.
+- Classify every claim as Observed / Derived / Suggested / Unknown.
+- Do not merge Business/Product/Tech just because they share a topic \u2014 preserve layer responsibilities.
+- Do not move every historical learning into current knowledge; incorporate only live rules, WITH a
+  reference back to the originating Work Item. Never summarize or delete the Work Item.
+- Do not invent relationships, decisions or business rules; a missing optional relationship is an
+  opportunity, not an error.
+- For a potential inconsistency, present BOTH sources and say whether the conflict is verified or
+  potential. Never pick a winner arbitrarily.
+- Preserve critical constraints, decisions and reasons, exceptions, known risks, technical contracts,
+  implementation evidence, provenance and necessary history.
+- Never reveal secret values or resolve secret references; never connect to a Project Resource.
+- Do not commit, push or release automatically.
+
+## Quality checklist
+
+- Every proposal cites its source artifact(s) and evidence.
+- Facts are separated from interpretations.
+- Preserved information is named explicitly.
+- Claims needing confirmation are flagged.
+- No canonical artifact was modified by the analysis or the review.
+
+## Example output
+
+A short set of proposals, each with evidence, a before/after (or diff) and an explicit list of what
+must be preserved, ready for human approval.
+`
+);
 var SKILLS2 = [
   ADR_WRITING2,
   WORK_ITEM_REFINEMENT2,
@@ -15635,10 +15989,11 @@ var SKILLS2 = [
   MODULE_CONTEXT_REFINEMENT2,
   EVIDENCE_VERIFICATION2,
   LEGACY_RISK_ASSESSMENT2,
-  POC_REPORT_WRITING2
+  POC_REPORT_WRITING2,
+  KNOWLEDGE_CONSOLIDATION2
 ];
 var SKILL_GROUPS2 = {
-  delivery: ["work-item-refinement", "implementation-planning", "learning-capture", "evidence-verification", "legacy-risk-assessment", "poc-report-writing"],
+  delivery: ["work-item-refinement", "implementation-planning", "learning-capture", "evidence-verification", "legacy-risk-assessment", "poc-report-writing", "knowledge-consolidation"],
   tech: ["adr-writing", "ownership-suggestion", "graph-metadata-review", "module-context-refinement"],
   integration: ["capsule-writing"]
 };
@@ -15829,6 +16184,24 @@ var RESPONSIBILITY_MATRIX2 = {
     ],
     next: ["kaddo graph export"]
   },
+  "knowledge-consolidation-agent": {
+    agent: "knowledge-consolidation-agent",
+    responsibleFor: [
+      "Semantic review of the deterministic Consolidation Plan",
+      "Preparing reviewable knowledge refinements"
+    ],
+    produces: ["proposed refinements (before/after) for human approval"],
+    canSuggest: ["kaddo knowledge consolidate"],
+    cannotSuggest: [
+      "code",
+      "git",
+      "commits",
+      "modifying canonical knowledge without confirmation",
+      "inventing facts or relationships",
+      "deleting history"
+    ],
+    next: ["kaddo knowledge consolidate"]
+  },
   "ownership-agent": {
     agent: "ownership-agent",
     responsibleFor: ["Precise code: ownership for Work Items and artifacts"],
@@ -17987,6 +18360,78 @@ ADRs) and re-runs \`kaddo graph export\`.
 - No files were modified; no Git was run.
 - The human is asked to confirm and re-export the graph.
 `;
+var KNOWLEDGE_CONSOLIDATION_AGENT2 = `# Knowledge Consolidation Agent
+
+## Role
+
+You are the Kaddo Knowledge Consolidation Agent. Your job is to perform the **semantic review** of
+the deterministic **Consolidation Plan** produced by \`kaddo knowledge consolidate\`, and to prepare
+**reviewable refinements** that make canonical knowledge more precise, connected, consistent and
+retrievable \u2014 without losing history, decisions or evidence.
+
+You do not write code, you do not modify canonical files, and you never run Git. You propose; a human
+confirms, and application goes through Kaddo's existing controlled-edit flows.
+
+## When to Use
+
+Use this agent after \`kaddo knowledge consolidate\` (or the \`kaddo_generate_consolidation_plan\`
+tool) has produced \`.kaddo/consolidation-plan.md\` and \`.kaddo/consolidation-plan.json\`, and the
+plan contains opportunities flagged \`requires_semantic_review\`.
+
+## Input Required
+
+Provide \`.kaddo/context-pack.md\` and \`.kaddo/consolidation-plan.json\` as the primary inputs, plus
+the source artifacts each opportunity references under \`knowledge/\` (and completed Work Items under
+\`knowledge/delivery/work-items/completed/\` for learning opportunities).
+
+## Expected Output
+
+For each opportunity you choose to act on, a proposal that states what would change, what content is
+added / moved / summarized, what must be preserved, and which claims still need confirmation \u2014 with a
+diff or equivalent before/after.
+
+## Instructions
+
+1. Read the plan and work one opportunity at a time, highest-signal first.
+2. Separate what you **observe** in the files from what you **suggest** \u2014 never present a suggested
+   candidate as a verified conclusion.
+3. For possible redundancy, compare the actual sections; propose a single reference location only if
+   one genuinely restates the other. Preserve layer separation (Business / Product / Tech / Delivery).
+4. For an unincorporated learning, decide whether it is a live rule; if so, propose incorporating it
+   into the right Tech artifact **with a reference back to the originating Work Item**. Never summarize
+   or delete the Work Item.
+5. For a relationship opportunity, propose the relationship only when existing knowledge justifies it;
+   a missing optional relationship is an opportunity, not an error.
+6. For a potential inconsistency, present **both** sources and say whether the conflict is verified or
+   potential. Do not pick a winner arbitrarily.
+7. Classify every claim as Observed / Derived / Suggested / Unknown, and mark what needs confirmation.
+
+## Constraints
+
+- Do **not** modify canonical files \u2014 propose changes for a human to apply.
+- Do **not** invent facts, relationships, decisions or business rules.
+- Do **not** delete historical information, change Work Item states, or alter verification results.
+- Do **not** reveal secret values or resolve secret references; do **not** connect to a Project Resource.
+- Do **not** run Git, commit, push or release.
+
+## Output Format
+
+Per opportunity: the opportunity id, classification and confidence, the proposed before/after (or
+diff), the explicit list of what must be preserved, and the open questions that need confirmation.
+
+## Where to Save the Result
+
+Nothing is saved automatically. The human reviews the proposals and applies the approved ones through
+Kaddo's existing controlled-edit flows. Re-run \`kaddo knowledge consolidate\` afterwards to confirm.
+
+## Quality Checklist
+
+- Every proposal cites its source artifact(s) and evidence from the plan.
+- Facts are separated from interpretations; suggested candidates are never asserted as fact.
+- Preserved information (constraints, decisions, exceptions, risks, contracts, provenance) is named.
+- No canonical artifact was modified; no Git was run.
+- The human is asked to confirm before anything is applied.
+`;
 var AGENT_PROMPTS2 = [
   { fileName: "capability-agent.md", content: CAPABILITY_AGENT2 },
   { fileName: "architecture-agent.md", content: ARCHITECTURE_AGENT2 },
@@ -18013,7 +18458,9 @@ var AGENT_PROMPTS2 = [
   // Knowledge Capsule refinement (external context — VS-054)
   { fileName: "capsule-agent.md", content: CAPSULE_AGENT2 },
   // Graph relationship quality (metadata hints → precise front matter — VS-056)
-  { fileName: "graph-agent.md", content: GRAPH_AGENT2 }
+  { fileName: "graph-agent.md", content: GRAPH_AGENT2 },
+  // Knowledge Consolidation semantic review (deterministic plan → reviewable refinements — WI-070)
+  { fileName: "knowledge-consolidation-agent.md", content: KNOWLEDGE_CONSOLIDATION_AGENT2 }
   // Every official prompt ends with its responsibility boundaries + Agent Trace footer.
 ].map((p) => ({ fileName: p.fileName, content: withResponsibilityTrace2(p.fileName, p.content) }));
 function withAgentFrontMatter2(fileName, content) {
@@ -18891,7 +19338,7 @@ function parseOriginalSnapshot(fm) {
 function readBody(filePath) {
   try {
     const raw = readFile2(filePath);
-    return matter122(raw).content;
+    return matter132(raw).content;
   } catch {
     return "";
   }
@@ -19176,7 +19623,7 @@ function ensureH1(body, title) {
 ${trimmed}`;
 }
 function serialize2(data, body) {
-  return matter132.stringify(`
+  return matter142.stringify(`
 ${body.trim()}
 `, data);
 }
@@ -20090,7 +20537,7 @@ function detectFormat(raw) {
   if (!trimmed) throw new ImportError("EMPTY_INPUT", "Import content is empty.");
   if (trimmed.startsWith("---")) {
     try {
-      const { data } = matter142(trimmed);
+      const { data } = matter15(trimmed);
       if (data && typeof data === "object" && Object.keys(data).length > 0) {
         const d3 = data;
         if (d3.type === "work-item" || d3.id && typeof d3.id === "string" && /^WI-\d+/.test(d3.id)) {
@@ -20112,7 +20559,7 @@ function parseContent(raw) {
   let bodyText = trimmed;
   if (format === "kaddo-frontmatter" || format === "markdown-frontmatter") {
     try {
-      const parsed = matter142(trimmed);
+      const parsed = matter15(trimmed);
       frontmatterFields = parsed.data ?? {};
       bodyText = parsed.content.trim();
     } catch {
@@ -20209,7 +20656,7 @@ function findDuplicateByHash(dir, hash) {
     const raw = readFile2(item.filePath);
     if (!raw) continue;
     try {
-      const { data } = matter142(raw);
+      const { data } = matter15(raw);
       const source22 = data?.source;
       if (source22 && typeof source22 === "object" && !Array.isArray(source22)) {
         const s = source22;
@@ -21104,7 +21551,7 @@ function buildInitiativeContent(id, input) {
   if (input.priority) data.priority = input.priority;
   if (input.source) data.source = input.source;
   if (input.sourceId) data.source_id = input.sourceId;
-  return matter16.stringify("\n" + (input.body ?? defaultBody(input.title.trim())), data);
+  return matter17.stringify("\n" + (input.body ?? defaultBody(input.title.trim())), data);
 }
 function createInitiative(dir, input) {
   if (!input.title?.trim()) throw new InitiativeWriteError("Initiative title is required.");
@@ -21128,10 +21575,10 @@ function transitionInitiative(dir, id, to) {
     throw new InitiativeWriteError(`Invalid transition ${ini.status} \u2192 ${to}.`);
   }
   const raw = readFile2(ini.filePath);
-  const { data, content } = matter16(raw, {});
+  const { data, content } = matter17(raw, {});
   data.status = to;
   if (to === "completed") data.completed_at = today2();
-  const newContent = matter16.stringify(content, data);
+  const newContent = matter17.stringify(content, data);
   writeFile2(ini.filePath, newContent);
   const updated = parseInitiative2(dir, ini.filePath, newContent);
   if (!updated) throw new InitiativeWriteError("Failed to parse the Initiative after transition.");
@@ -21141,7 +21588,7 @@ function addCandidate(dir, id, candidate) {
   const ini = getInitiative(dir, id);
   if (!ini) throw new InitiativeWriteError(`Initiative ${id} not found.`);
   const raw = readFile2(ini.filePath);
-  const { data, content } = matter16(raw, {});
+  const { data, content } = matter17(raw, {});
   const existing = Array.isArray(data.candidates) ? data.candidates : [];
   const fallbackId = `WI-CANDIDATE-${String(existing.length + 1).padStart(3, "0")}`;
   const normalized = normalizeCandidate(candidate, fallbackId);
@@ -21149,7 +21596,7 @@ function addCandidate(dir, id, candidate) {
     throw new InitiativeWriteError(`Candidate ${normalized.id} already exists in ${id}.`);
   }
   data.candidates = [...existing, candidateToData(normalized)];
-  const newContent = matter16.stringify(content, data);
+  const newContent = matter17.stringify(content, data);
   writeFile2(ini.filePath, newContent);
   const updated = parseInitiative2(dir, ini.filePath, newContent);
   if (!updated) throw new InitiativeWriteError("Failed to parse the Initiative after adding a candidate.");
@@ -21159,7 +21606,7 @@ function updateInitiative(dir, id, patch) {
   const ini = getInitiative(dir, id);
   if (!ini) throw new InitiativeWriteError(`Initiative ${id} not found.`);
   const raw = readFile2(ini.filePath);
-  const { data, content } = matter16(raw, {});
+  const { data, content } = matter17(raw, {});
   if (patch.title !== void 0) {
     if (!patch.title.trim()) throw new InitiativeWriteError("Initiative title cannot be empty.");
     data.title = patch.title.trim();
@@ -21169,7 +21616,7 @@ function updateInitiative(dir, id, patch) {
   if (patch.knowledgeLevel !== void 0) data.knowledge_level = patch.knowledgeLevel;
   if (patch.domains !== void 0) data.domains = patch.domains;
   if (patch.relatedCapabilities !== void 0) data.related_capabilities = patch.relatedCapabilities;
-  const newContent = matter16.stringify(content, data);
+  const newContent = matter17.stringify(content, data);
   writeFile2(ini.filePath, newContent);
   const updated = parseInitiative2(dir, ini.filePath, newContent);
   if (!updated) throw new InitiativeWriteError("Failed to parse the Initiative after update.");
@@ -21187,10 +21634,10 @@ function addExternalLink(dir, id, link) {
     throw new InitiativeWriteError(`External link ${link.integration}:${link.externalId} already exists on ${id}.`);
   }
   const raw = readFile2(ini.filePath);
-  const { data, content } = matter16(raw, {});
+  const { data, content } = matter17(raw, {});
   const existing = Array.isArray(data.external_links) ? data.external_links : [];
   data.external_links = [...existing, externalLinkToData(link)];
-  const newContent = matter16.stringify(content, data);
+  const newContent = matter17.stringify(content, data);
   writeFile2(ini.filePath, newContent);
   const updated = parseInitiative2(dir, ini.filePath, newContent);
   if (!updated) throw new InitiativeWriteError("Failed to parse the Initiative after adding an external link.");
@@ -21259,7 +21706,7 @@ function buildWorkItemContent(wiId, iniId, candidate) {
     "_What did we learn? Update after completion._",
     ""
   ].join("\n");
-  return matter16.stringify("\n" + body, data);
+  return matter17.stringify("\n" + body, data);
 }
 function materializeCandidate(dir, id, candidateId) {
   const ini = getInitiative(dir, id);
@@ -21276,13 +21723,13 @@ function materializeCandidate(dir, id, candidateId) {
   ensureDir2(join3(dir, DRAFT_DIR));
   writeFile2(join3(dir, DRAFT_DIR, fileName), buildWorkItemContent(wiId, ini.id, candidate));
   const raw = readFile2(ini.filePath);
-  const { data, content } = matter16(raw, {});
+  const { data, content } = matter17(raw, {});
   const cands = Array.isArray(data.candidates) ? data.candidates : [];
   for (const c of cands) {
     if (c && typeof c === "object" && String(c.id) === candidateId) c.materialized_as = wiId;
   }
   data.candidates = cands;
-  const newContent = matter16.stringify(content, data);
+  const newContent = matter17.stringify(content, data);
   writeFile2(ini.filePath, newContent);
   const updated = parseInitiative2(dir, ini.filePath, newContent);
   if (!updated) throw new InitiativeWriteError("Failed to parse the Initiative after materialization.");
@@ -21396,7 +21843,7 @@ function evaluateInitiativeCompletion(dir, ini) {
 // ../cli/src/core/resource-write.ts
 import fs6 from "fs";
 import path5 from "path";
-import matter21 from "gray-matter";
+import matter23 from "gray-matter";
 var RESOURCES_DIR = "knowledge/tech/resources";
 var ResourceWriteError = class extends Error {
   constructor(code, message) {
@@ -21442,6 +21889,20 @@ function validateResource(dir, input) {
       findings.push({ level: "warning", message: `Unknown access interface type "${i.type}".` });
     }
   }
+  for (const p of input.connectionProfiles ?? []) {
+    const where = p.environment ? ` in environment "${p.environment}"` : "";
+    for (const c of p.coordinates ?? []) {
+      const key = (c?.key ?? "").trim();
+      const value = (c?.value ?? "").trim();
+      if (!key || !value) continue;
+      if (looksLikeSecretCoordinate(key, value)) {
+        findings.push({
+          level: "error",
+          message: `Connection coordinate "${key}"${where} looks like a secret value. Store credentials as authentication references, not connection coordinates.`
+        });
+      }
+    }
+  }
   const mapped = loadMappedModules(dir).map((m2) => m2.id);
   if (mapped.length > 0) {
     const refs = /* @__PURE__ */ new Set();
@@ -21468,6 +21929,22 @@ function buildFrontmatter(id, input, base = {}) {
   if (input.modules != null) data.modules = input.modules;
   if (input.accessInterfaces != null) data.access_interfaces = input.accessInterfaces;
   if (input.accessBoundaries != null) data.access_boundaries = input.accessBoundaries;
+  if (input.connectionProfiles != null) {
+    data.connection_profiles = input.connectionProfiles.map((p) => {
+      const coordinates = {};
+      for (const c of p.coordinates ?? []) {
+        const key = (c?.key ?? "").trim();
+        const value = (c?.value ?? "").trim();
+        if (!key || !value || looksLikeSecretCoordinate(key, value)) continue;
+        coordinates[key] = value;
+      }
+      const entry = {};
+      if (p.environment?.trim()) entry.environment = p.environment.trim();
+      if (p.interface?.trim()) entry.interface = p.interface.trim();
+      if (Object.keys(coordinates).length) entry.coordinates = coordinates;
+      return entry;
+    }).filter((e) => Object.keys(e).length > 0);
+  }
   if (input.authentication != null) {
     const mode = input.authentication.mode;
     const refs = sanitizeRefs(input.authentication.refs);
@@ -21476,7 +21953,7 @@ function buildFrontmatter(id, input, base = {}) {
   return data;
 }
 function serialize(data, body) {
-  return matter21.stringify(`
+  return matter23.stringify(`
 ${body.trim()}
 `, data);
 }
@@ -21516,7 +21993,7 @@ function updateResource(dir, id, input) {
     throw new ResourceWriteError("VALIDATION_FAILED", findings.filter((f3) => f3.level === "error").map((f3) => f3.message).join("; "));
   }
   const raw = readFile(match.filePath);
-  const parsed = matter21(raw);
+  const parsed = matter23(raw);
   const base = parsed.data ?? {};
   const data = buildFrontmatter(match.id || id, input, base);
   let body = parsed.content.trim();
@@ -21749,7 +22226,7 @@ var CANDIDATE_DISCOVERY_GUIDANCE2 = [
 // ../cli/src/core/deprecation-write.ts
 import fs7 from "fs";
 import path6 from "path";
-import matter23 from "gray-matter";
+import matter24 from "gray-matter";
 var DeprecationWriteError = class extends Error {
   constructor(code, message) {
     super(message);
@@ -21767,7 +22244,7 @@ function atomicWrite2(filePath, content) {
   fs7.renameSync(tmp, filePath);
 }
 function serialize3(data, body) {
-  return matter23.stringify(`
+  return matter24.stringify(`
 ${body.trim()}
 `, data);
 }
@@ -21833,7 +22310,7 @@ function validateTargetInput(dir, raw) {
 function loadPlanRaw(dir, planId) {
   const match = allPlanArtifacts(dir).find((a2) => a2.id === planId || a2.title === planId);
   if (!match) throw new DeprecationWriteError("NOT_FOUND", `Deprecation Plan "${planId}" not found.`);
-  const parsed = matter23(readFile(match.filePath));
+  const parsed = matter24(readFile(match.filePath));
   const data = { ...parsed.data ?? {} };
   return { filePath: match.filePath, data, body: parsed.content.trim() };
 }
@@ -22021,12 +22498,12 @@ function markWorkItemReady(root, id, confirm2) {
   }
   const raw = readText(root, item.path);
   if (!raw) return fail(`Could not read Work Item file: ${item.path}`);
-  const parsed = matter24(raw);
+  const parsed = matter25(raw);
   const data = { ...parsed.data };
   const today3 = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
   data.status = "ready";
   data.ready_at = today3;
-  const newContent = matter24.stringify(parsed.content, data);
+  const newContent = matter25.stringify(parsed.content, data);
   const posixPath = item.path.replace(/\\/g, "/");
   let newRelPath = item.path;
   if (posixPath.includes("/work-items/draft/")) {
@@ -22321,7 +22798,7 @@ function removeDeprecationTargetTool(root, planId, targetId, confirm2) {
 // src/multirepo.ts
 import fs8 from "fs";
 import path7 from "path";
-import matter25 from "gray-matter";
+import matter26 from "gray-matter";
 import { parse as parseYaml12, stringify as stringifyYaml8 } from "yaml";
 var ok2 = (data) => ({ ok: true, data });
 var fail2 = (message) => ({ ok: false, message });
@@ -22473,7 +22950,7 @@ function validateWorkItemModulesTool(root, args) {
   if (!wi) return fail2(`Work Item "${args.workItemId}" not found.`);
   const raw = readText(root, wi.path);
   if (!raw) return fail2(`Could not read Work Item file.`);
-  const parsed = matter25(raw);
+  const parsed = matter26(raw);
   const data = parsed.data;
   const affectedModules = Array.isArray(data.affected_modules) ? data.affected_modules.map(String) : [];
   const codeEntries = Array.isArray(data.code) ? data.code.filter((c) => typeof c === "object" && c !== null).map((c) => ({ repo: typeof c.repo === "string" ? c.repo : void 0, paths: Array.isArray(c.paths) ? c.paths.map(String) : [] })) : [];
@@ -22526,7 +23003,7 @@ function getWorkItemContextTool(root, args) {
   if (!wi) return fail2(`Work Item "${args.workItemId}" not found.`);
   const raw = readText(root, wi.path);
   if (!raw) return fail2(`Could not read Work Item file.`);
-  const parsed = matter25(raw);
+  const parsed = matter26(raw);
   const data = parsed.data;
   const affectedModules = Array.isArray(data.affected_modules) ? data.affected_modules.map(String) : [];
   const codeEntries = Array.isArray(data.code) ? data.code.filter((c) => typeof c === "object" && c !== null).map((c) => ({ repo: typeof c.repo === "string" ? c.repo : void 0, paths: Array.isArray(c.paths) ? c.paths.map(String) : [] })) : [];
@@ -22612,7 +23089,7 @@ function suggestBranchStrategyTool(root, args) {
   if (!wi) return fail2(`Work Item "${args.workItemId}" not found.`);
   const raw = readText(root, wi.path);
   if (!raw) return fail2(`Could not read Work Item file.`);
-  const parsed = matter25(raw);
+  const parsed = matter26(raw);
   const data = parsed.data;
   const affectedModules = Array.isArray(data.affected_modules) ? data.affected_modules.map(String) : [];
   const codeEntries = Array.isArray(data.code) ? data.code.filter((c) => typeof c === "object" && c !== null).map((c) => ({ repo: typeof c.repo === "string" ? c.repo : void 0, paths: Array.isArray(c.paths) ? c.paths.map(String) : [] })) : [];
@@ -23372,14 +23849,14 @@ function systemImpactCandidatesTool(root, args) {
 }
 
 // ../cli/src/services/integrations.ts
-import matter27 from "gray-matter";
+import matter28 from "gray-matter";
 import { parse as parseYaml14, stringify as stringifyYaml10 } from "yaml";
 
 // ../cli/src/core/work-item-write.ts
 import fs10 from "fs";
 import path9 from "path";
 import crypto4 from "crypto";
-import matter26 from "gray-matter";
+import matter27 from "gray-matter";
 var SECTION_ORDER2 = [
   "Actor",
   "Outcome",
@@ -24427,7 +24904,7 @@ async function integrationsWorkItemTool(root, args) {
 }
 
 // ../cli/src/core/context-pack.ts
-import matter28 from "gray-matter";
+import matter29 from "gray-matter";
 var CONTEXT_PACK_VERSION = "1";
 var ARCH_DIR4 = "knowledge";
 function readScanJson(dir) {
@@ -24440,7 +24917,7 @@ function readScanJson(dir) {
   }
 }
 function firstParagraph4(markdown) {
-  const body = matter28(markdown).content.trim();
+  const body = matter29(markdown).content.trim();
   const para = body.split("\n\n").map((p) => p.trim()).find((p) => p && !p.startsWith("#"));
   return para ?? "";
 }
@@ -24941,11 +25418,11 @@ function renderContextPack(pack) {
   if (mixEntries.length > 0) {
     parts.push("## Delivery Mix\n");
     parts.push("Active Work Items by type:\n");
-    const label = (t) => {
+    const label2 = (t) => {
       const c = t.charAt(0).toUpperCase() + t.slice(1);
       return c.endsWith("s") ? c : `${c}s`;
     };
-    parts.push(mixEntries.map(([t, n]) => `- ${label(t)}: ${n}`).join("\n") + "\n");
+    parts.push(mixEntries.map(([t, n]) => `- ${label2(t)}: ${n}`).join("\n") + "\n");
   }
   parts.push("## Artifacts and Ownership\n");
   if (knowledge.artifacts.length > 0) {
@@ -25421,8 +25898,502 @@ function renderUnderstand(plan) {
   return parts.join("\n");
 }
 
+// ../cli/src/core/knowledge-consolidation.ts
+import { createHash as createHash3 } from "crypto";
+import matter30 from "gray-matter";
+var KNOWLEDGE7 = "knowledge";
+var CONSOLIDATION_CATEGORIES = [
+  "knowledge_redundancy",
+  "unincorporated_learning",
+  "knowledge_fragmentation",
+  "relationship_opportunity",
+  "potentially_outdated",
+  "knowledge_organization"
+];
+function toPosix8(p) {
+  return p.replace(/\\/g, "/");
+}
+function relFromDir(dir, filePath) {
+  const d3 = toPosix8(dir).replace(/\/+$/, "");
+  const f3 = toPosix8(filePath);
+  return f3.startsWith(d3 + "/") ? f3.slice(d3.length + 1) : f3;
+}
+function sha256(content) {
+  return createHash3("sha256").update(content, "utf-8").digest("hex");
+}
+var GENERIC_HEADINGS = /* @__PURE__ */ new Set([
+  "purpose",
+  "proposito",
+  "prop\xF3sito",
+  "intent",
+  "goal",
+  "objetivo",
+  "summary",
+  "resumen",
+  "overview",
+  "context",
+  "contexto",
+  "scope",
+  "alcance",
+  "out of scope",
+  "fuera de alcance",
+  "acceptance criteria",
+  "criterios de aceptacion",
+  "criterios de aceptaci\xF3n",
+  "validation",
+  "validation scenarios",
+  "validacion",
+  "validaci\xF3n",
+  "escenarios de validacion",
+  "escenarios de validaci\xF3n",
+  "notes",
+  "notas",
+  "references",
+  "referencias",
+  "examples",
+  "ejemplos",
+  "learning",
+  "learnings",
+  "aprendizaje",
+  "aprendizajes",
+  // Work Item template sections
+  "problem",
+  "problema",
+  "expected result",
+  "resultado esperado",
+  "refinement",
+  "refinamiento",
+  "implementation guidance",
+  "guia de implementacion",
+  "gu\xEDa de implementaci\xF3n",
+  "definition of done",
+  "definicion de hecho",
+  "definici\xF3n de hecho",
+  "commit gate",
+  "future evolution",
+  "evolucion futura",
+  "evoluci\xF3n futura",
+  "guiding principle",
+  "principio rector",
+  "open questions",
+  "preguntas abiertas",
+  "dependencies",
+  "dependencias",
+  "conceptual model",
+  "goal"
+]);
+var RULE_KEYWORDS = [
+  "siempre",
+  "nunca",
+  "debe",
+  "deben",
+  "requiere",
+  "requieren",
+  "invariante",
+  "restriccion",
+  "restricci\xF3n",
+  "regla",
+  "obligatorio",
+  "must",
+  "always",
+  "never",
+  "require",
+  "requires",
+  "constraint",
+  "invariant",
+  "rule"
+];
+function normalizeHeading(h2) {
+  return h2.trim().toLowerCase().replace(/\s+/g, " ");
+}
+function distinctiveHeadings(body) {
+  const out = [];
+  for (const line of body.split(/\r?\n/)) {
+    const m2 = line.match(/^#{2,3}\s+(.+?)\s*$/);
+    if (!m2) continue;
+    const norm = normalizeHeading(m2[1]);
+    if (!norm || GENERIC_HEADINGS.has(norm)) continue;
+    out.push(norm);
+  }
+  return [...new Set(out)];
+}
+function sectionBody(body, titles) {
+  const lines = body.split(/\r?\n/);
+  const re = new RegExp(`^#{1,3}\\s+(${titles.join("|")})\\s*$`, "i");
+  const start = lines.findIndex((l2) => re.test(l2));
+  if (start < 0) return null;
+  const collected = [];
+  for (let i = start + 1; i < lines.length; i++) {
+    if (/^#{1,3}\s+/.test(lines[i])) break;
+    collected.push(lines[i]);
+  }
+  const text3 = collected.join("\n").trim();
+  return text3.length > 0 ? text3 : null;
+}
+function stableOpportunityId(category, sources) {
+  const key = [category, ...[...sources].sort()].join("|");
+  return `${category}:${sha256(key).slice(0, 12)}`;
+}
+function layerOf(a2) {
+  const byType = layerForType(a2.type);
+  if (byType) return byType;
+  const p = toPosix8(a2.filePath);
+  if (p.includes(`/${KNOWLEDGE7}/business/`)) return "Business";
+  if (p.includes(`/${KNOWLEDGE7}/product/`)) return "Product";
+  if (p.includes(`/${KNOWLEDGE7}/tech/`)) return "Tech";
+  if (p.includes(`/${KNOWLEDGE7}/delivery/`)) return "Delivery";
+  return null;
+}
+function inScope(la, scope) {
+  if (scope.kind === "all") return true;
+  if (scope.kind === "layer") return la.layer === scope.layer;
+  return la.artifact.affectedModules.includes(scope.module);
+}
+function label(la) {
+  return la.artifact.id || la.rel;
+}
+function buildConsolidationPlan(dir, opts = {}) {
+  requireConfig(dir);
+  const scope = opts.scope ?? { kind: "all" };
+  const now = opts.now ?? /* @__PURE__ */ new Date();
+  const archDir = join(dir, KNOWLEDGE7);
+  const rawArtifacts = exists(archDir) ? readArtifacts(archDir) : [];
+  const loaded = rawArtifacts.map((a2) => {
+    let body = "";
+    try {
+      body = matter30(readFile(a2.filePath)).content;
+    } catch {
+      body = "";
+    }
+    return { artifact: a2, rel: relFromDir(dir, a2.filePath), body, layer: layerOf(a2) };
+  });
+  const scoped = loaded.filter((la) => inScope(la, scope));
+  const scopedRels = new Set(scoped.map((la) => la.rel));
+  const knownIds = new Set(loaded.map((la) => la.artifact.id).filter(Boolean));
+  const opportunities = [];
+  try {
+    const config = requireConfig(dir);
+    const graph = buildGraph(dir, config, { scope: "all" }, now);
+    const hints = buildGraphHints(dir, graph, now);
+    for (const hint of hints.hints) {
+      if (!hintInScope(hint, scoped)) continue;
+      opportunities.push(relationshipOpportunityFromHint(hint));
+    }
+  } catch {
+  }
+  for (const la of scoped) {
+    const dangling = la.artifact.decisions.filter((d3) => d3 && !knownIds.has(d3) && !decisionFileExists(dir, d3));
+    if (dangling.length === 0) continue;
+    opportunities.push({
+      id: stableOpportunityId("potentially_outdated", [label(la), ...dangling]),
+      category: "potentially_outdated",
+      classification: "observed",
+      confidence: "requires-review",
+      title: `${label(la)} references decision(s) that no longer exist`,
+      source_artifacts: [label(la)],
+      target_artifacts: [label(la)],
+      evidence: dangling.map((d3) => `Declared decision \`${d3}\` has no matching artifact in the project.`),
+      rationale: "A reference to a missing decision is a verifiable inconsistency: either the decision artifact was removed/renamed or the reference is stale.",
+      possible_impact: "Broken traceability between a Work Item/artifact and its decisions.",
+      suggested_action: "Review and update or remove the dangling decision reference.",
+      requires_semantic_review: false
+    });
+  }
+  const canonical = scoped.filter(
+    (la) => la.layer !== null && !isWorkItem(la) && la.artifact.type !== "roadmap"
+  );
+  const byHeading = /* @__PURE__ */ new Map();
+  for (const la of canonical) {
+    for (const h2 of distinctiveHeadings(la.body)) {
+      const arr = byHeading.get(h2) ?? [];
+      arr.push(la);
+      byHeading.set(h2, arr);
+    }
+  }
+  const pairHeadings = /* @__PURE__ */ new Map();
+  for (const [heading, arts] of byHeading) {
+    if (arts.length < 2) continue;
+    for (let i = 0; i < arts.length; i++) {
+      for (let j2 = i + 1; j2 < arts.length; j2++) {
+        if (arts[i].rel === arts[j2].rel) continue;
+        const key = [arts[i].rel, arts[j2].rel].sort().join("||");
+        const entry = pairHeadings.get(key) ?? { a: arts[i], b: arts[j2], shared: /* @__PURE__ */ new Set() };
+        entry.shared.add(heading);
+        pairHeadings.set(key, entry);
+      }
+    }
+  }
+  for (const { a: a2, b: b2, shared } of pairHeadings.values()) {
+    if (shared.size < 2) continue;
+    opportunities.push({
+      id: stableOpportunityId("knowledge_redundancy", [label(a2), label(b2)]),
+      category: "knowledge_redundancy",
+      classification: "suggested",
+      confidence: "requires-review",
+      title: `Possible overlapping content between ${label(a2)} and ${label(b2)}`,
+      source_artifacts: [label(a2), label(b2)],
+      target_artifacts: [label(a2), label(b2)],
+      evidence: [`Both artifacts declare the sections: ${[...shared].sort().join(", ")}.`],
+      rationale: "Shared section titles are a hint of potential overlap, NOT proof of duplication. Two documents can legitimately address the same topic from different layers/responsibilities.",
+      possible_impact: "If genuinely duplicated, the same fact can drift out of sync across files.",
+      suggested_action: "Semantic review: compare the sections; if one restates the other, keep a single reference location and link the rest. Preserve layer separation.",
+      requires_semantic_review: true
+    });
+  }
+  for (const la of scoped) {
+    if (!isCompletedWorkItem(la)) continue;
+    const learning = sectionBody(la.body, ["Learning", "Aprendizaje", "Aprendizajes", "Learnings"]);
+    if (!learning) continue;
+    if (!looksLikeDurableRule(learning)) continue;
+    opportunities.push({
+      id: stableOpportunityId("unincorporated_learning", [label(la)]),
+      category: "unincorporated_learning",
+      classification: "suggested",
+      confidence: "requires-review",
+      title: `${label(la)} captured a learning that may belong in current knowledge`,
+      source_artifacts: [label(la)],
+      target_artifacts: ["knowledge/tech/codebase.md"],
+      evidence: [`Completed Work Item records a rule-like learning: "${firstSentence(learning)}"`],
+      rationale: "A learning phrased as a durable rule MAY represent live technical knowledge not yet reflected in Tech Knowledge. This is a candidate, not a confirmed gap.",
+      possible_impact: "A relevant constraint stays buried in delivery history instead of informing current work.",
+      suggested_action: "Semantic review: decide whether this learning is a live rule; if so, incorporate it into the right Tech artifact WITH a reference back to the Work Item. Do not delete or summarize the Work Item.",
+      requires_semantic_review: true
+    });
+  }
+  const weakByFolder = /* @__PURE__ */ new Map();
+  for (const la of scoped) {
+    const quality = safeQuality(dir, la.rel);
+    if (quality === "placeholder" || quality === "weak") {
+      opportunities.push({
+        id: stableOpportunityId("knowledge_organization", [la.rel]),
+        category: "knowledge_organization",
+        classification: "observed",
+        confidence: "requires-review",
+        title: `${label(la)} is ${quality} and may need consolidation or expansion`,
+        source_artifacts: [label(la)],
+        target_artifacts: [label(la)],
+        evidence: [`Artifact quality analysis classifies this artifact as "${quality}".`],
+        rationale: "Low-signal artifacts reduce retrieval quality. This is an observed quality signal, not a judgement that the content is wrong.",
+        possible_impact: "Readers must open more files to assemble a complete picture.",
+        suggested_action: "Review whether to expand, merge into a stronger artifact, or cross-reference it.",
+        requires_semantic_review: false
+      });
+      const folder = la.rel.split("/").slice(0, -1).join("/");
+      const arr = weakByFolder.get(folder) ?? [];
+      arr.push(la);
+      weakByFolder.set(folder, arr);
+    }
+  }
+  for (const [folder, arts] of weakByFolder) {
+    if (arts.length < 3) continue;
+    opportunities.push({
+      id: stableOpportunityId("knowledge_fragmentation", arts.map((a2) => a2.rel)),
+      category: "knowledge_fragmentation",
+      classification: "suggested",
+      confidence: "requires-review",
+      title: `${folder}/ holds ${arts.length} low-signal artifacts \u2014 possible fragmentation`,
+      source_artifacts: arts.map((a2) => label(a2)),
+      target_artifacts: [folder],
+      evidence: [`${arts.length} placeholder/weak artifacts in the same folder: ${arts.map((a2) => a2.rel.split("/").pop()).join(", ")}.`],
+      rationale: "Several thin artifacts in one folder MAY be easier to consume if consolidated or cross-linked. Consolidation must preserve each distinct responsibility.",
+      possible_impact: "Related knowledge is spread across too many files to follow.",
+      suggested_action: "Semantic review: evaluate whether cross-references or a consolidation would add clarity. Do not merge by file count alone.",
+      requires_semantic_review: true
+    });
+  }
+  opportunities.sort((x2, y) => {
+    const ci = CONSOLIDATION_CATEGORIES.indexOf(x2.category) - CONSOLIDATION_CATEGORIES.indexOf(y.category);
+    return ci !== 0 ? ci : x2.id.localeCompare(y.id);
+  });
+  const seen = /* @__PURE__ */ new Set();
+  const deduped = opportunities.filter((o2) => seen.has(o2.id) ? false : (seen.add(o2.id), true));
+  const layers = discoverLayers(dir);
+  const layersEvaluated = scope.kind === "layer" ? [scope.layer] : layers.map((l2) => l2.layer);
+  const workItemsEvaluated = scoped.filter(isWorkItem).length;
+  const sourceFiles = [...scopedRels].sort().map((rel) => ({ path: rel, hash: sha256(readFileSafe(join(dir, rel))) }));
+  const byCategory = Object.fromEntries(
+    CONSOLIDATION_CATEGORIES.map((c) => [c, deduped.filter((o2) => o2.category === c).length])
+  );
+  return {
+    generated_at: now.toISOString(),
+    scope: describeScope(scope),
+    project_context: reportingProjectContext(dir),
+    coverage: {
+      scope: describeScope(scope),
+      layers_evaluated: layersEvaluated,
+      artifacts_evaluated: scoped.length,
+      work_items_evaluated: workItemsEvaluated,
+      excluded_sources: scope.kind === "all" ? [] : [...loaded.map((l2) => l2.rel)].filter((r2) => !scopedRels.has(r2)).sort()
+    },
+    source_files: sourceFiles,
+    opportunities: deduped,
+    summary: {
+      total: deduped.length,
+      by_category: byCategory,
+      requires_semantic_review: deduped.filter((o2) => o2.requires_semantic_review).length
+    }
+  };
+}
+var CATEGORY_LABELS = {
+  knowledge_redundancy: "Possible redundancy",
+  unincorporated_learning: "Learning integration opportunity",
+  knowledge_fragmentation: "Possible fragmentation",
+  relationship_opportunity: "Relationship review hint",
+  potentially_outdated: "Potential inconsistency",
+  knowledge_organization: "Organization opportunity"
+};
+function renderConsolidationMarkdown(plan) {
+  const lines = [];
+  lines.push("# Knowledge Consolidation Plan");
+  lines.push("");
+  lines.push("> Derived, review-only projection. No canonical knowledge was modified by this analysis.");
+  lines.push("");
+  lines.push(`- Generated at: ${plan.generated_at}`);
+  lines.push(`- Scope: ${plan.scope}`);
+  lines.push(`- Project: state=${plan.project_context.state}, mode=${plan.project_context.mode}, structure=${plan.project_context.repository_structure}`);
+  lines.push("");
+  lines.push("## Coverage");
+  lines.push("");
+  lines.push(`- Layers evaluated: ${plan.coverage.layers_evaluated.join(", ") || "\u2014"}`);
+  lines.push(`- Artifacts evaluated: ${plan.coverage.artifacts_evaluated}`);
+  lines.push(`- Work Items evaluated: ${plan.coverage.work_items_evaluated}`);
+  if (plan.coverage.excluded_sources.length > 0) {
+    lines.push(`- Excluded from this scope: ${plan.coverage.excluded_sources.length} artifact(s)`);
+  }
+  lines.push("");
+  lines.push("## Findings");
+  lines.push("");
+  if (plan.summary.total === 0) {
+    lines.push("No consolidation opportunities were detected by the available deterministic analyses within this scope.");
+    lines.push("");
+    lines.push("This is not a claim that the knowledge is perfect \u2014 only that no opportunity was found with the current signals.");
+    lines.push("");
+    return lines.join("\n") + "\n";
+  }
+  for (const cat of CONSOLIDATION_CATEGORIES) {
+    const n = plan.summary.by_category[cat];
+    if (n > 0) lines.push(`- ${n} \xD7 ${CATEGORY_LABELS[cat]}`);
+  }
+  lines.push("");
+  lines.push(`${plan.summary.requires_semantic_review} finding(s) require semantic (agent/human) review before acting.`);
+  lines.push("");
+  lines.push("## Opportunities");
+  lines.push("");
+  for (const o2 of plan.opportunities) {
+    lines.push(`### ${o2.title}`);
+    lines.push("");
+    lines.push(`- Id: \`${o2.id}\``);
+    lines.push(`- Category: ${o2.category}`);
+    lines.push(`- Classification: **${o2.classification}**${o2.requires_semantic_review ? " (requires semantic review)" : ""}`);
+    lines.push(`- Confidence: ${o2.confidence}`);
+    lines.push(`- Source: ${o2.source_artifacts.join(", ") || "\u2014"}`);
+    lines.push(`- Suggested target: ${o2.target_artifacts.join(", ") || "\u2014"}`);
+    lines.push(`- Evidence:`);
+    for (const e of o2.evidence) lines.push(`  - ${e}`);
+    lines.push(`- Rationale: ${o2.rationale}`);
+    lines.push(`- Possible impact: ${o2.possible_impact}`);
+    lines.push(`- Suggested action: ${o2.suggested_action}`);
+    lines.push("");
+  }
+  return lines.join("\n") + "\n";
+}
+function serializeConsolidationJson(plan) {
+  return JSON.stringify(plan, null, 2) + "\n";
+}
+function describeScope(scope) {
+  if (scope.kind === "all") return "all";
+  if (scope.kind === "layer") return `layer:${scope.layer}`;
+  return `module:${scope.module}`;
+}
+function isWorkItem(la) {
+  return toPosix8(la.artifact.filePath).includes("/delivery/work-items/");
+}
+function isCompletedWorkItem(la) {
+  const p = toPosix8(la.artifact.filePath);
+  return p.includes("/delivery/work-items/completed/") || isWorkItem(la) && la.artifact.status === "completed";
+}
+function looksLikeDurableRule(text3) {
+  const lower = text3.toLowerCase();
+  return RULE_KEYWORDS.some((k2) => new RegExp(`(^|[^a-z\xE1\xE9\xED\xF3\xFA\xF1])${k2}([^a-z\xE1\xE9\xED\xF3\xFA\xF1]|$)`, "i").test(lower));
+}
+function firstSentence(text3) {
+  const flat = text3.replace(/\s+/g, " ").trim();
+  const m2 = flat.match(/^(.{0,200}?[.!?])(\s|$)/);
+  const s = (m2 ? m2[1] : flat).slice(0, 200);
+  return redactSecrets3(s.trim());
+}
+var SECRET_TOKEN_PATTERNS = [
+  /\bgh[pours]_[A-Za-z0-9]{16,}\b/g,
+  // GitHub tokens
+  /\b(?:AKIA|ASIA)[0-9A-Z]{16}\b/g,
+  // AWS access key ids
+  /\bxox[baprs]-[A-Za-z0-9-]{10,}\b/g,
+  // Slack tokens
+  /\bsk-[A-Za-z0-9]{16,}\b/g,
+  // OpenAI-style keys
+  /\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\b/g,
+  // JWTs
+  /\b[A-Za-z0-9+/]{40,}={0,2}\b/g
+  // long base64 / opaque blobs
+];
+function redactSecrets3(text3) {
+  let out = text3;
+  for (const re of SECRET_TOKEN_PATTERNS) out = out.replace(re, "[redacted]");
+  return out;
+}
+function safeQuality(dir, rel) {
+  try {
+    return analyzeKnowledgeArtifact(dir, rel);
+  } catch {
+    return "useful";
+  }
+}
+function readFileSafe(abs) {
+  try {
+    return readFile(abs);
+  } catch {
+    return "";
+  }
+}
+function decisionFileExists(dir, decisionId) {
+  const decisionsDir = join(dir, KNOWLEDGE7, "tech", "decisions");
+  if (!exists(decisionsDir)) return false;
+  try {
+    return readDir(decisionsDir).some((e) => {
+      const full = join(decisionsDir, e);
+      if (!isFile(full) || !e.endsWith(".md")) return false;
+      return e.toLowerCase().includes(decisionId.toLowerCase());
+    });
+  } catch {
+    return false;
+  }
+}
+function hintInScope(hint, scoped) {
+  if (scoped.length === 0) return false;
+  return scoped.some(
+    (la) => la.artifact.id === hint.artifact_id || hint.path && toPosix8(la.artifact.filePath).endsWith(toPosix8(hint.path))
+  );
+}
+function relationshipOpportunityFromHint(hint) {
+  const finding = graphHintFinding(hint);
+  return {
+    id: stableOpportunityId("relationship_opportunity", [hint.artifact_id, ...hint.missing]),
+    category: "relationship_opportunity",
+    classification: "observed",
+    confidence: "requires-review",
+    title: hint.message,
+    source_artifacts: [hint.artifact_id],
+    target_artifacts: [hint.artifact_id],
+    evidence: [finding.evidence],
+    rationale: "A missing OPTIONAL relationship is an opportunity to review, not an error or a verified inconsistency. Kaddo never invents the relationship.",
+    possible_impact: "Weaker traceability in the knowledge graph.",
+    suggested_action: finding.suggested_action,
+    requires_semantic_review: false
+  };
+}
+
 // src/generate.ts
-function requireConfig(root) {
+function requireConfig2(root) {
   const config = loadConfig(root);
   if (!config) throw new KaddoMcpError("Kaddo project not found. Run `kaddo init` first.");
   return config;
@@ -25436,7 +26407,7 @@ function slug6(s) {
   return s.trim().toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || "project";
 }
 function generateContext(root) {
-  const config = requireConfig(root);
+  const config = requireConfig2(root);
   requireKnowledge(root);
   const pack = buildContextPack(root, config);
   writeDerived(root, ".kaddo/context-pack.md", renderContextPack(pack));
@@ -25450,7 +26421,7 @@ function generateContext(root) {
   };
 }
 function generateExplain(root) {
-  requireConfig(root);
+  requireConfig2(root);
   requireKnowledge(root);
   const exp = buildProjectExplanation(root);
   writeDerived(root, ".kaddo/explain.md", renderExplanationHuman(exp));
@@ -25464,7 +26435,7 @@ function generateExplain(root) {
   };
 }
 function generateUnderstand(root) {
-  const config = requireConfig(root);
+  const config = requireConfig2(root);
   requireKnowledge(root);
   const plan = buildUnderstandPlan(root, config);
   writeDerived(root, ".kaddo/understand.md", renderUnderstand(plan));
@@ -25477,7 +26448,7 @@ function generateUnderstand(root) {
   };
 }
 function generateGraph(root, scope = "active") {
-  const config = requireConfig(root);
+  const config = requireConfig2(root);
   requireKnowledge(root);
   const graph = buildGraph(root, config, { scope });
   const hints = buildGraphHints(root, graph);
@@ -25499,8 +26470,39 @@ function generateGraph(root, scope = "active") {
     next_suggested_resources: ["kaddo://graph", "kaddo://graph-hints"]
   };
 }
+var LAYER_BY_FLAG = {
+  business: "Business",
+  product: "Product",
+  tech: "Tech",
+  delivery: "Delivery"
+};
+function generateConsolidationPlan(root, opts = {}) {
+  requireConfig2(root);
+  requireKnowledge(root);
+  let scope = { kind: "all" };
+  if (opts.module) {
+    scope = { kind: "module", module: opts.module };
+  } else if (opts.layer) {
+    const layer2 = LAYER_BY_FLAG[opts.layer.toLowerCase()];
+    if (!layer2) {
+      throw new KaddoMcpError(`Unknown layer "${opts.layer}". Use one of: business, product, tech, delivery.`);
+    }
+    scope = { kind: "layer", layer: layer2 };
+  }
+  const plan = buildConsolidationPlan(root, { scope });
+  writeDerived(root, ".kaddo/consolidation-plan.md", renderConsolidationMarkdown(plan));
+  writeDerived(root, ".kaddo/consolidation-plan.json", serializeConsolidationJson(plan));
+  const warnings = plan.summary.requires_semantic_review > 0 ? [`${plan.summary.requires_semantic_review} finding(s) require semantic review before acting \u2014 nothing was changed automatically.`] : [];
+  return {
+    status: "ok",
+    files_written: [".kaddo/consolidation-plan.md", ".kaddo/consolidation-plan.json"],
+    summary: `Consolidation Plan generated (scope: ${plan.scope}, ${plan.summary.total} opportunity/opportunities).`,
+    warnings,
+    next_suggested_resources: ["kaddo://consolidation-plan"]
+  };
+}
 function generateImpactReport(root, opts = {}) {
-  requireConfig(root);
+  requireConfig2(root);
   requireKnowledge(root);
   const format = opts.format ?? "markdown";
   const report = buildImpactReport(root, { scope: opts.scope ?? "all", scopeSource: opts.scope ? "explicit" : "default" });
@@ -25516,7 +26518,7 @@ function generateImpactReport(root, opts = {}) {
   };
 }
 function generateSavingsReport(root, opts = {}) {
-  requireConfig(root);
+  requireConfig2(root);
   requireKnowledge(root);
   const format = opts.format ?? "markdown";
   const report = buildSavingsReport(root, { scope: opts.scope ?? "all", scopeSource: opts.scope ? "explicit" : "default" });
@@ -25532,7 +26534,7 @@ function generateSavingsReport(root, opts = {}) {
   };
 }
 function generateDriftReport(root, opts = {}) {
-  requireConfig(root);
+  requireConfig2(root);
   const format = opts.format ?? "markdown";
   const report = buildDriftReport(root);
   const content = format === "json" ? serializeDriftJson(report) : renderDriftMarkdown(report);
@@ -25547,7 +26549,7 @@ function generateDriftReport(root, opts = {}) {
   };
 }
 function generateQuestionsReport(root, opts = {}) {
-  requireConfig(root);
+  requireConfig2(root);
   const format = opts.format ?? "markdown";
   const report = buildOpenQuestionsReport(root);
   const content = format === "json" ? serializeOpenQuestionsJson(report) : renderOpenQuestionsMarkdown(report);
@@ -25562,7 +26564,7 @@ function generateQuestionsReport(root, opts = {}) {
   };
 }
 function generateCapsuleDraft(root) {
-  const config = requireConfig(root);
+  const config = requireConfig2(root);
   requireKnowledge(root);
   const capsule = buildCapsule(root, config);
   const name = slug6(config.project.name);
@@ -25782,13 +26784,13 @@ async function guardedAsync(root, fn) {
     throw err;
   }
 }
-function generated(root, label, fn) {
+function generated(root, label2, fn) {
   try {
     assertKaddoProject(root);
     const result = fn();
     return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
   } catch (err) {
-    const message = err instanceof KaddoMcpError ? err.message : `Could not ${label}. ${String(err)}`;
+    const message = err instanceof KaddoMcpError ? err.message : `Could not ${label2}. ${String(err)}`;
     return { content: [{ type: "text", text: message }], isError: true };
   }
 }
@@ -26489,6 +27491,19 @@ function createServer(root) {
     },
     async (args) => generated(root, "generate knowledge graph", () => generateGraph(root, args.scope ?? "active"))
   );
+  server.registerTool(
+    "kaddo_generate_consolidation_plan",
+    {
+      title: "Generate knowledge consolidation plan",
+      description: `Analyze canonical knowledge and write .kaddo/consolidation-plan.md/.json \u2014 a reviewable projection of consolidation opportunities (redundancy, unincorporated learning, fragmentation, relationships, potential inconsistencies, organization). Deterministic: facts are "observed"; anything needing judgement is a "suggested" candidate flagged for semantic review. Optional layer (business|product|tech|delivery) or module scope. ${DERIVED_NOTE}`,
+      inputSchema: { layer: z4.string().optional(), module: z4.string().optional() }
+    },
+    async (args) => generated(
+      root,
+      "generate consolidation plan",
+      () => generateConsolidationPlan(root, { layer: args.layer, module: args.module })
+    )
+  );
   server.registerTool(
     "kaddo_generate_impact_report",
     {