@litfamily/litopencode 1.0.25 → 1.0.27

package/skills/lit-humanizer/rules.json

@@ -884,14 +884,15 @@
       "id": "ko-negative-pledge",
       "lang": "ko",
       "severity": "block",
-      "pattern": "(?<![가-힣])(?:이|본|해당|위|아래)\\s+(?:자료|문서|보고서|슬라이드|덱|표|그림|그래프|차트|수치|결과|비교|분석|내용|예시)(?:은|는)\\s[^.!?\\n]{0,40}?(?:(?:해석하|의미하|주장하|대표하)(?:지\\s*(?:[*_]{1,2}\\s*)?(?:않(?:음|는다|습니다)|말\\s*것|마세요|마십시오)|(?:으)?면\\s*(?:[*_]{1,2}\\s*)?안\\s*(?:됨|된다|됩니다))|(?:(?:비교|결론|벤치마크|순위|대표값|일반화)(?:이|가)|목적이|위한\\s*것이)\\s*(?:[*_]{1,2}\\s*)?(?:아님|아니다|아닙니다)(?![가-힣]))|(?:비교|결론|벤치마크|순위|대표값|일반화)(?:으로|로)\\s*(?:[*_]{1,2}\\s*)?(?:쓰|사용하|해석하|읽|간주하|인용하)(?:지\\s*(?:[*_]{1,2}\\s*)?(?:않(?:음|는다|습니다)|말\\s*것|마세요|마십시오)|(?:으)?면\\s*(?:[*_]{1,2}\\s*)?안\\s*(?:됨|된다|됩니다))|(?:공개|배포|대외|외부|홍보|발표|보고|비교|인용|공식)용\\s*(?:자료|문서|수치|표|그래프)(?:이|가)\\s*(?:[*_]{1,2}\\s*)?(?:아님|아니다|아닙니다)(?![가-힣])",
+      "pattern": "(?<![가-힣])(?:이|본|해당|위|아래)\\s+(?:자료|문서|보고서|슬라이드|덱|표|그림|그래프|차트|수치|결과|비교|분석|내용|예시)(?:은|는)\\s[^.!?\\n]{0,40}?(?:(?:해석하|의미하|주장하|대표하)(?:지\\s*(?:[*_]{1,2}\\s*)?(?:않(?:음|는다|습니다)|말\\s*것|마세요|마십시오|말아\\s*주(?:세요|십시오))|(?:으)?면\\s*(?:[*_]{1,2}\\s*)?안\\s*(?:됨|된다|됩니다)(?![가-힣]))|(?:(?:비교|결론|벤치마크|순위|대표값|일반화)(?:이|가)|목적이|(?:위한|려는)\\s*것이)\\s*(?:[*_]{1,2}\\s*)?(?:아님|아니다|아닙니다)(?![가-힣])|순위표(?:이|가)\\s*(?:[*_]{1,2}\\s*)?(?:아님|아니다|아닙니다|아니고)(?![가-힣]))|(?:비교|결론|벤치마크|순위|대표값|일반화)(?:처럼|으로|로)\\s*(?:[*_]{1,2}\\s*)?(?:쓰|사용하|해석하|읽|간주하|인용하)(?:지\\s*(?:[*_]{1,2}\\s*)?(?:않(?:음|는다|습니다)|말\\s*것|마세요|마십시오|말아\\s*주(?:세요|십시오))|(?:으)?면\\s*(?:[*_]{1,2}\\s*)?안\\s*(?:됨|된다|됩니다)(?![가-힣]))|(?:공개|배포|대외|외부|홍보|발표|보고|비교|인용|공식)용\\s*(?:자료|문서|수치|표|그래프)(?:이|가)\\s*(?:[*_]{1,2}\\s*)?(?:아님|아니다|아닙니다)(?![가-힣])|(?<![가-힣])(?:숫자|수치)(?:들)?(?:은|는|이|가|을|를|끼리|도)(?![가-힣])(?:(?!면\\s)[^.!?\\n]){0,40}?(?<![와과]\\s)(?<![와과])비교할\\s*수\\s*(?:는\\s*)?없(?:다|습니다|음|나)(?![가-힣])|(?<![가-힣])(?:숫자|수치)(?:들)?끼리\\s*(?:서로\\s*|직접\\s*)?비교(?:해서|하여|해)\\s[^.!?\\n]{0,30}?[\"”’']\\s*(?:는|라는)\\s*결론[^.!?\\n]{0,8}?(?:수\\s*없(?:다|습니다)(?![가-힣])|(?:으)?면\\s*(?:[*_]{1,2}\\s*)?안\\s*(?:됨|된다|됩니다)(?![가-힣]))|(?:(?<![가-힣])(?:숫자|수치)(?:들)?|(?<![가-힣])(?:이|위|아래|본)\\s+(?:표|값|자료|그래프|차트))[^.!?\\n]{0,40}?(?:빠르|느리)다고\\s*판단하(?:지\\s*(?:[*_]{1,2}\\s*)?(?:말\\s*것|마세요|마십시오|말아\\s*주(?:세요|십시오))|(?:으)?면\\s*(?:[*_]{1,2}\\s*)?안\\s*(?:됨|된다|됩니다)(?![가-힣]))|(?:빠르|느리)다[\"”’']?\\s*(?:는|라는)\\s*식으로\\s*읽(?:지\\s*(?:[*_]{1,2}\\s*)?(?:말\\s*것|마세요|마십시오|말아\\s*주(?:세요|십시오))|(?:으)?면\\s*(?:[*_]{1,2}\\s*)?안\\s*(?:됨|된다|됩니다)(?![가-힣]))|만으로\\s[^.!?\\n]{0,40}?(?<![가-힣])순위를\\s*정하[^.!?\\n]{0,25}?(?:수\\s*없(?:다|습니다|음)(?![가-힣])|(?:해|하)서는\\s*안\\s*(?:됨|된다|됩니다)(?![가-힣]))|(?<![가-힣])순위[^.!?\\n]{0,20}?근거로\\s*(?:[*_]{1,2}\\s*)?사용할\\s*수\\s*(?:는\\s*)?없(?:다|습니다|음)(?![가-힣])|할\\s*수\\s*없는\\s*것\\s{0,3}:\\s{0,3}(?:[*_]{1,2}\\s{0,3})?[^.!?\\n]{0,30}?(?<![가-힣])순위를?\\s*매기거나|(?<![가-힣])표의\\s+(?:나열\\s+)?순서(?:는|가)\\s[^.!?\\n]{0,20}?(?<![가-힣])순위(?:(?:를|을)\\s*뜻하지\\s*(?:[*_]{1,2}\\s*)?않(?:음|는다|습니다)|(?:가|이)\\s*(?:[*_]{1,2}\\s*)?(?:아님|아니다|아닙니다)(?![가-힣]))",
       "flags": "m",
       "scope": "line",
       "context": [
         "fenced_code",
-        "quoted_user_text"
+        "quoted_user_text",
+        "blockquote_callout"
       ],
-      "rationale": "A sentence that tells the reader what the document, table or number is not for belongs in the reply or becomes a data fact. Three shapes: a self-reference topic (이/본/해당/위/아래 + document noun + 은/는) with a negated claim verb or a claim noun + 아님 within one bullet; a comparison or ranking noun + (으)로 + a negated use verb; a purpose-용 data noun (공개용 수치) + 아님. Use verbs after a self-reference, 근거/평가/증거/추천, and legal or financial notices (대체하, 보장하, 권유) stay outside the pattern because operating rules, method lines and standard notices use them.",
+      "rationale": "A sentence that tells the reader what the document, table or number is not for belongs in the reply or becomes a data fact. Shapes: a self-reference topic (이/본/해당/위/아래 + document noun + 은/는) with a negated claim verb, a claim noun + 아님 (순위표 also + 아니고) or 위한/-려는 것이 아님, within one bullet; a comparison or ranking noun + (으)로/처럼 + a negated use or reading verb (순위처럼 읽지 말아 주세요); a purpose-용 data noun (공개용 수치) + 아님; 숫자/수치 + particle said to be incomparable (서로 비교할 수 없다) or compared among themselves toward a quoted verdict (숫자끼리 비교해 \"…빠르다\"는 결론을 내리면 안 됩니다); a speed judgment forbidden for these numbers or a quoted verdict forbidden as a reading (이 숫자로 … 느리다고 판단하면 안 됩니다); ranking refused for this data (…만으로 순위를 정할 수 없다, 순위의 근거로 사용할 수 없다, 할 수 없는 것: 순위를 매기거나); and a table's row order said not to be a ranking (표의 순서는 순위가 아니다). Use verbs after a self-reference, 근거/평가/증거/추천, inference limits (결론 내릴 수 없다, 근거가 되지 않는다), operating rules (…근거로 사용하지 마십시오), conditional method facts (…면 비교할 수 없다, 합계와 비교하면 안 됩니다), type-system rules (숫자 문자열을 그대로 비교하지 마십시오), reported speech and explainers (…면 안 된다는 반론, …면 안 되는 이유), order notices without a table anchor, and legal or financial notices (대체하, 보장하, 권유) stay outside the pattern because operating rules, method lines, manuals, discussions and standard notices use them.",
       "fixture_ids": [
         "ko-negative-pledge:positive",
         "ko-negative-pledge:negative"
@@ -906,7 +907,8 @@
       "scope": "document",
       "context": [
         "fenced_code",
-        "quoted_user_text"
+        "quoted_user_text",
+        "blockquote_callout"
       ],
       "rationale": "Two or more sentences that end in 해석하지/주장하지/대표하지 않음 or a claim noun + 이/가 + 아님 turn a document into a list of disclaimers. 의미하, 간주하, 인용하 and the use verbs are left out because repeated definitions, data-processing rules, method lines and operating rules end that way; a single such sentence stays with the warn-only ko-status-negation.",
       "fixture_ids": [
@@ -918,14 +920,15 @@
       "id": "en-negative-pledge",
       "lang": "en",
       "severity": "block",
-      "pattern": "\\b(?:this|these)\\s+(?:deck|report|document|analysis|table|chart|figure|figures|numbers|results|slide|comparison)\\s+(?:(?:is|are)\\s+not\\s+(?:intended|meant|to\\s+be\\s+(?:read|used|taken|interpreted))(?:\\s+to\\s+be\\s+(?:read|used|taken|interpreted))?\\s+as\\b(?!\\s*(?:a\\s+substitute|a\\s+replacement|(?:legal|investment|medical|professional)\\s+advice))\\s+(?:an?\\s+|the\\s+)?(?:[A-Za-z0-9-]+\\s+){0,4}?(?:comparison|benchmark|ranking)s?\\b(?!-)(?!\\s+(?:arm|arms|group|groups|standard|standards|class|baseline)\\b)|(?:should|must)\\s+not\\s+be\\s+(?:read|used|taken|interpreted)\\s+as\\s+(?:an?\\s+|the\\s+)?(?:[A-Za-z0-9-]+\\s+){0,4}?(?:comparison|benchmark|ranking)s?\\b(?!-)(?!\\s+(?:arm|arms|group|groups|standard|standards|class|baseline)\\b)|makes?\\s+no\\s+claims?\\s+(?:about|that|regarding|as\\s+to)\\b)|\\b(?:this|these)\\s+(?:is|are)\\s+not\\s+(?:intended|meant)\\s+as\\b(?!\\s*(?:a\\s+substitute|a\\s+replacement|(?:legal|investment|medical|professional)\\s+advice))\\s+(?:an?\\s+|the\\s+)?(?:[A-Za-z0-9-]+\\s+){0,4}?(?:comparison|benchmark|ranking)s?\\b(?!-)(?!\\s+(?:arm|arms|group|groups|standard|standards|class|baseline)\\b)|\\bthe\\s+(?:deck|report|document|analysis)\\s+makes?\\s+no\\s+claims?\\s+(?:about|that|regarding|as\\s+to)\\b|(?:^|\\s[-*]\\s)\\s*(?:[-*]\\s+|\\d+\\.\\s+)?(?:[*_]{1,2})?not\\s+(?:intended|meant|to\\s+be\\s+read|to\\s+be\\s+used)\\s+as\\b(?!\\s*(?:a\\s+substitute|a\\s+replacement|(?:legal|investment|medical|professional)\\s+advice))\\s+(?:an?\\s+|the\\s+)?(?:[A-Za-z0-9-]+\\s+){0,4}?(?:comparison|benchmark|ranking)s?\\b(?!-)(?!\\s+(?:arm|arms|group|groups|standard|standards|class|baseline)\\b)|\\b(?:this|these)\\s+(?:table|chart|figure|figures|numbers|results|comparison|analysis)\\s+(?:does|do)\\s+not\\s+constitute\\s+(?:an?\\s+)?[^.!?]{0,60}?\\b(?:comparison|benchmark|ranking)s?\\b(?!-)(?!\\s+(?:arm|arms|group|groups|standard|standards|class|baseline)\\b)",
+      "pattern": "\\b(?:this|these)\\s+(?:deck|report|document|analysis|table|chart|figure|figures|numbers|results|slide|comparison)\\s+(?:(?:is|are)\\s+not\\s+(?:intended|meant|to\\s+be\\s+(?:read|used|taken|interpreted))(?:\\s+to\\s+be\\s+(?:read|used|taken|interpreted))?\\s+as\\b(?!\\s*(?:a\\s+substitute|a\\s+replacement|(?:legal|investment|medical|professional)\\s+advice))\\s+(?:an?\\s+|the\\s+)?(?:[A-Za-z0-9-]+\\s+){0,4}?(?:comparison|benchmark|ranking)s?\\b(?!-)(?!\\s+(?:arm|arms|group|groups|standard|standards|class|baseline)\\b)|(?:should|must)\\s+not\\s+be\\s+(?:read|used|taken|interpreted)\\s+as\\s+(?:an?\\s+|the\\s+)?(?:[A-Za-z0-9-]+\\s+){0,4}?(?:comparison|benchmark|ranking)s?\\b(?!-)(?!\\s+(?:arm|arms|group|groups|standard|standards|class|baseline)\\b)|makes?\\s+no\\s+claims?\\s+(?:about|that|regarding|as\\s+to)\\b)|\\b(?:this|these)\\s+(?:is|are)\\s+not\\s+(?:intended|meant)\\s+as\\b(?!\\s*(?:a\\s+substitute|a\\s+replacement|(?:legal|investment|medical|professional)\\s+advice))\\s+(?:an?\\s+|the\\s+)?(?:[A-Za-z0-9-]+\\s+){0,4}?(?:comparison|benchmark|ranking)s?\\b(?!-)(?!\\s+(?:arm|arms|group|groups|standard|standards|class|baseline)\\b)|\\bthe\\s+(?:deck|report|document|analysis)\\s+makes?\\s+no\\s+claims?\\s+(?:about|that|regarding|as\\s+to)\\b|(?:^|\\s[-*]\\s)\\s*(?:[-*]\\s+|\\d+\\.\\s+)?(?:[*_]{1,2})?not\\s+(?:intended|meant|to\\s+be\\s+read|to\\s+be\\s+used)\\s+as\\b(?!\\s*(?:a\\s+substitute|a\\s+replacement|(?:legal|investment|medical|professional)\\s+advice))\\s+(?:an?\\s+|the\\s+)?(?:[A-Za-z0-9-]+\\s+){0,4}?(?:comparison|benchmark|ranking)s?\\b(?!-)(?!\\s+(?:arm|arms|group|groups|standard|standards|class|baseline)\\b)|\\b(?:this|these)\\s+(?:table|chart|figure|figures|numbers|results|comparison|analysis)\\s+(?:does|do)\\s+not\\s+constitute\\s+(?:an?\\s+)?[^.!?]{0,60}?\\b(?:comparison|benchmark|ranking)s?\\b(?!-)(?!\\s+(?:arm|arms|group|groups|standard|standards|class|baseline)\\b)|\\bthey\\s+are\\s+not\\s+(?:an?\\s+)?(?:comparison|benchmark|ranking)s?\\b(?!-)(?!\\s+(?:arm|arms|group|groups|standard|standards|class|baseline)\\b)(?=\\s*(?:[.!?*_]|$))|\\b(?:do\\s+not|don[’']t)\\s+compare\\s+(?:these|those)\\s+(?:numbers|figures|results|values|scores|latencies)(?:\\s+(?:with|to)\\s+(?:each\\s+other|one\\s+another)\\b|(?=\\s*(?:[.!?*_]|$)))|\\b(?:these|those|the)\\s+(?:numbers|figures)\\s+are\\s+not\\s+comparable(?:\\s+(?:with|to)\\s+(?:each\\s+other|one\\s+another)\\b|(?=\\s*(?:[.!?*_]|$)))|\\b(?:this|the|these|our)\\s+(?:table|chart|figure|graph|list|report|document|deck|slide|page|summary|overview|analysis)s?\\s+(?:is|are)\\s+not\\s+(?:(?:meant|intended)\\s+)?(?:(?:to\\s+be\\s+)?(?:an?\\s+)?(?:ranking|benchmark|comparison|leaderboard|endorsement)s?\\b(?!-)(?!\\s+(?:arm|arms|group|groups|standard|standards|class|baseline)\\b)(?=\\s*(?:[.!?*_]|$))|to\\s+(?:rank|compare|benchmark)\\b)|\\b(?:do\\s+not|don[’']t)\\s+read\\s+(?:this|the|these|our)\\s+(?:table|chart|figure|graph|list|report|document|deck|slide|page|summary|overview|analysis)s?\\s+as\\s+(?:an?\\s+)?(?:comparison|benchmark|ranking)s?\\b(?!-)(?!\\s+(?:arm|arms|group|groups|standard|standards|class|baseline)\\b)",
       "flags": "i",
       "scope": "sentence",
       "context": [
         "fenced_code",
-        "quoted_user_text"
+        "quoted_user_text",
+        "blockquote_callout"
       ],
-      "rationale": "A sentence that says the deck, report or numbers are not intended, meant or to be read as a comparison, benchmark or ranking, or make no claim about something belongs in the reply, and so does a table, chart or set of numbers that does not constitute one. Requiring one of those nouns keeps safety labels and advice, offer or diagnosis notices clean; \"does not constitute\" for a report or document stays a notice form, and \"the\" is not a subject except with \"makes no claim\".",
+      "rationale": "A sentence that says the deck, report or numbers are not intended, meant or to be read as a comparison, benchmark or ranking, or make no claim about something belongs in the reply, and so does a table, chart or set of numbers that does not constitute one; \"they are not a ranking.\", \"do not compare these numbers (with each other).\" and \"the numbers are not comparable.\" are the same refusal when they close the sentence. Requiring one of those nouns keeps safety labels and advice, offer or diagnosis notices clean; a refusal that continues (a ranking of schools, comparable with the previous release, compare these values directly; …, this is not a benchmark, it is …) describes or instructs and stays clean; a deliverable subject (this table, the report, our deck) that is not a ranking, benchmark, comparison, leaderboard or endorsement, is not meant to rank or compare, or is not to be read as a ranking is the same refusal, while a bare \"this\" is not a subject; \"does not constitute\" for a report or document stays a notice form, and \"the\" is not a subject except with \"makes no claim\" or \"numbers are not comparable\".",
       "fixture_ids": [
         "en-negative-pledge:positive",
         "en-negative-pledge:negative"

package/skills/lit-humanizer/scripts/core.mjs

@@ -82,7 +82,12 @@ function sourceRows(text) {
     if (/^\s{0,3}>\s?/.test(line)) {
       captionPending = 0;
       figureActive = false;
-      return { line, number: index + 1, candidate: '', skipped: true, caption: false, captionAttribution: false };
+      // A quote that opens with a bold label (> **주의:** ...) is the author's own callout, not quoted user
+      // text. Only rules that list blockquote_callout read it, with the quote marker blanked to spaces.
+      const callout = /^\s{0,3}>\s?(?:\*\*|__)[^*_\n]{1,24}(?:\*\*|__)/.test(line)
+        ? inlineCodeAsSpaces(line.replace(/^\s{0,3}>\s?/, (prefix) => ' '.repeat(prefix.length)))
+        : '';
+      return { line, number: index + 1, candidate: '', callout, skipped: true, caption: false, captionAttribution: false };
     }
     const candidate = inlineCodeAsSpaces(line);
     const caption = isCaption(line);
@@ -149,7 +154,8 @@ function splitSentences(span) {
 }
 
 function ruleSegments(rows, rule, cache) {
-  const cacheKey = `${rule.scope}/${rule.context.includes('table_figure_caption')}`;
+  const readCallouts = rule.context.includes('blockquote_callout');
+  const cacheKey = `${rule.scope}/${rule.context.includes('table_figure_caption')}/${readCallouts}`;
   if (cache.has(cacheKey)) return cache.get(cacheKey);
   const skipCaptions = rule.context.includes('table_figure_caption');
   const segments = [];
@@ -163,6 +169,11 @@ function ruleSegments(rows, rule, cache) {
 
   for (const row of rows) {
     const captionExempt = skipCaptions && (row.caption || row.captionAttribution);
+    if (readCallouts && row.callout) {
+      flush();
+      segments.push({ text: row.callout, line: row.number });
+      continue;
+    }
     if (row.skipped || captionExempt || (rule.scope === 'sentence' && !row.candidate.trim())) {
       flush();
       continue;

package/skills/lit-pptx/SKILL.md

@@ -29,7 +29,7 @@ Read the brief, supplied sources, audience, delivery (presented in a room or sen
 
 Under bare `lit`, if the request gives no source facts, choose a realistic concrete example and deliver a complete deck without asking. Label each invented name and figure as a sample or assumption: the frontmatter `notice:` line puts a sample-data tag on every slide, and the reply repeats it. Never leave bracketed placeholders or silently present examples as verified results. For an explicit non-lit request, a clarification question about the content is allowed; a question about the look is not needed, because the direction step answers it.
 
-Under `lit`, create a `.pptx` by default. Do not ask a theme, colour or font question merely to begin: choose the tonality yourself (procedure step 2), build the whole deck, and name the choice and two alternatives in the reply. An explicit user choice of tonality, legacy template or learned template overrides the choice. Plain Markdown or HTML alone is appropriate only if the user asks for those formats. A request for a website interface belongs to `frontend-ui-ux`; a scientific data figure belongs to `lit-scientific-visualization`.
+Under `lit`, create a `.pptx` by default. Do not ask a theme, colour or font question merely to begin: choose the tonality yourself (procedure step 2), build the whole deck, and name the choice and two alternatives in the reply. An explicit user choice of tonality, legacy template or learned template overrides the choice. Plain Markdown or HTML alone is appropriate only if the user asks for those formats. A requested Markdown or plain-text deliverable (`slides.md`, "slide text in Markdown") is read as it stands, so it is not the compiler source: give each slide a heading, its bullets and its speaker notes as ordinary Markdown, with no frontmatter, no `:::` directive blocks and no `layout:`, `title:` or `tonality:` keys, and do not compile a `.pptx` unless one was asked for. The spec dialect belongs only to a source this skill compiles, or to a source the user explicitly asked for. A request for a website interface belongs to `frontend-ui-ux`; a scientific data figure belongs to `lit-scientific-visualization`.
 
 ## #contract.mode_matrix
 

package/skills/managed-skill-manifest.json

@@ -293,15 +293,15 @@
         },
         {
           "path": "references/taxonomy.md",
-          "sha256": "12762da55de333e180cdb55e1e1964d43cad2d2f355ea789e7f82fda0a06a2d9"
+          "sha256": "6836096bef306685749d8d0639026ff63e42f2e452a14b762f4d6241421080c8"
         },
         {
           "path": "rules.json",
-          "sha256": "6153ca0835b04fc9512c903b4c5080c3a45cd1fd68c1a9dbad8972b5a150fb6c"
+          "sha256": "d79e5619f673912e032bcd54fd24ea299b1b2e22643fb128cbe522ad020cc6eb"
         },
         {
           "path": "scripts/core.mjs",
-          "sha256": "8e628854ba1026227463ecf3ac277d1250b1b2250082e0f80b29ff880024322b"
+          "sha256": "abaff0390680e9c2602cde701f7224acd3586ebed0dcb2a807570359baac62fc"
         },
         {
           "path": "scripts/detect.mjs",

package/tools/check-pack-payload.mjs

@@ -5,7 +5,7 @@ import process from "node:process";
 import { readStableRegularFile } from "../skills/frontend-ui-ux/scripts/stable-file-read.mjs";
 
 // Shown by the GitHub pages only; the npm cards never reference them, so they stay out of the package.
-const GITHUB_ONLY_README_MEDIA = /^docs\/assets\/readme\/(?:jev-[^/]+\.webp|(?:install-output|doctor-output|ignition-toast|planner-permissions)-(?:dark|light)\.webp|status-card-(?:idle|working|recent)\.webp|auto-handoff-(?:settings|compact|doctor)-(?:dark|light)\.webp|promo(?:-[^/]+)?\.[^/]+|promo-source(?:\/.*)?)$/u;
+const GITHUB_ONLY_README_MEDIA = /^docs\/assets\/readme\/(?:(?:install-output|doctor-output|ignition-toast|planner-permissions)-(?:dark|light)\.webp|status-card-(?:idle|working|recent)\.webp|auto-handoff-(?:settings|compact|doctor)-(?:dark|light)\.webp|promo(?:-[^/]+)?\.[^/]+|promo-source(?:\/.*)?)$/u;
 // The landing README links these GitHub pages for what moved off it (guide, skills gallery, screens,
 // artwork). They load images by paths relative to docs/, and they stay out of the package with the social preview.
 const GITHUB_DOC_PAGES = ["docs/guide.md", "docs/guide-Ko-KR.md", "docs/skills.md", "docs/skills-Ko-KR.md", "docs/screens.md", "docs/screens-Ko-KR.md", "docs/brand.md", "docs/brand-Ko-KR.md"];
@@ -18,7 +18,7 @@ const FORBIDDEN_PATH_RULES = [
   { label: "local asset generator", pattern: /^generate_cover\.py$/u },
   { label: "repository cover PNG", pattern: /^cover\.png$/u },
   { label: "repository cover vector", pattern: /^docs\/assets\/cover\.svg$/u },
-  { label: "GitHub-only README media (Jev snapshots, on-screen pictures, status card, automatic handoff, promo film)", pattern: GITHUB_ONLY_README_MEDIA },
+  { label: "GitHub-only README media (on-screen pictures, status card, automatic handoff, promo film)", pattern: GITHUB_ONLY_README_MEDIA },
   { label: "unapproved README presentation asset", pattern: /^docs\/assets\/readme\/(?!(?:ascii-readme|badge-version|badge-license|lucide-book-open|lucide-play|lucide-shield-check)\.svg$|litopencode-wordmark\.svg$|litopencode-clay-icon\.png$|(?:litfamily-machines|poster)\.png$|ignition-film\.mp4$|ignition-readme\.gif$|(?:Lucide-LICENSE|JetBrainsMono-OFL)\.txt$)/u },
   { label: "maintainer release checklist", pattern: /^docs\/release-checklist\.md$/u },
   { label: "GitHub-only docs page, social preview or demo film", pattern: GITHUB_ONLY_DOCS },

package/dist/jev-skill-hint.d.ts

@@ -1,50 +0,0 @@
-export declare const jevEndpoint = "https://api.typesafe.ai/v1/systemone";
-export declare const jevFlag = "LITOPENCODE_JEV";
-/** Shown once per session so a user who switched the hint on notices it; never carries the key. */
-export declare const jevSkillHintAwarenessText = "\u2726 Jev skill hint is ON";
-export type JevFetch = (url: string, init: RequestInit) => Promise<Response>;
-export type JevCatalogEntry = {
-    readonly id: string;
-    readonly description: string;
-};
-export type JevSkillHintStatus = "off" | "on" | "key-missing";
-export type JevSkillHintPart = {
-    readonly kind: "hint";
-    readonly text: string;
-    readonly skillId: string;
-    readonly latencyMs: number;
-} | {
-    readonly kind: "note";
-    readonly text: string;
-};
-export type JevSkillHintOptions = {
-    readonly env?: NodeJS.ProcessEnv;
-    readonly fetch?: JevFetch;
-    readonly catalog?: readonly JevCatalogEntry[];
-    readonly traceFile?: string;
-    /** Project root: every folder between it and the trace file must be a real folder, never a symlink. */
-    readonly traceRoot?: string;
-    readonly now?: () => number;
-};
-export declare function jevSkillHintStatus(env?: NodeJS.ProcessEnv): JevSkillHintStatus;
-export declare function jevSkillHintDoctorLine(env?: NodeJS.ProcessEnv): string;
-export declare function jevSkillHintText(skillId: string): string;
-/** The visible toast names only the validated skill id and the request latency. */
-export declare function jevSkillHintToastText(skillId: string, latencyMs: number): string;
-export declare function jevSkillHintUnavailableText(reason: string): string;
-/** Eligibility that depends on the prompt text alone; routing and command checks live in the hook. */
-export declare function isJevEligiblePrompt(text: string): boolean;
-/**
- * Redact a bounded window first, then truncate, so a secret that straddles the 2,000-character cut is
- * masked whole. When either cut happened, a token run left dangling at the end is masked as well.
- */
-export declare function redactJevPrompt(text: string): string;
-export declare function defaultJevCatalog(): readonly JevCatalogEntry[];
-export declare function buildJevRequestBody(state: string, catalog: readonly JevCatalogEntry[], model: string): string;
-export type JevSkillHint = {
-    hintFor(sessionID: string, promptText: string): Promise<JevSkillHintPart | undefined>;
-    /** True exactly once per session: on its first eligible turn while both switches are on. */
-    claimAwareness(sessionID: string, promptText: string): boolean;
-    forget(sessionID: string): void;
-};
-export declare function createJevSkillHint(options?: JevSkillHintOptions): JevSkillHint;

package/dist/jev-skill-hint.js

@@ -1,318 +0,0 @@
-import { createHash } from "node:crypto";
-import { constants as fsConstants } from "node:fs";
-import fs from "node:fs/promises";
-import path from "node:path";
-import { litOpenCodeRuntimeSkills } from "./skills.js";
-// Optional Jev skill hint for the chat.message hook. It is off unless LITOPENCODE_JEV=1 and
-// TYPESAFE_API_KEY are both set in the process environment. The key is read from the environment
-// only and goes nowhere except the Authorization header: not into errors, notes, traces or doctor.
-// The response is untrusted data; the only text that reaches the turn is this module's own fixed
-// sentence carrying a skill id that was checked against the catalog this module sent.
-export const jevEndpoint = "https://api.typesafe.ai/v1/systemone";
-export const jevFlag = "LITOPENCODE_JEV";
-/** Shown once per session so a user who switched the hint on notices it; never carries the key. */
-export const jevSkillHintAwarenessText = "✦ Jev skill hint is ON";
-const defaultModel = "jev-1.13.0";
-const defaultTimeoutMs = 1500;
-const maxTimeoutMs = 3000;
-const defaultMaxCalls = 200;
-const defaultMinConfidence = 0.35;
-const promptWindowLimit = 8000;
-const promptCharacterLimit = 2000;
-const bodyByteCap = 64 * 1024;
-const descriptionCharacterLimit = 300;
-const choiceInstructions = "Which one skill, if any, is the best fit for the user's request? Choose none when no catalog skill fits.";
-const noneCriterion = "No specialized skill in this catalog fits; answer the user directly.";
-export function jevSkillHintStatus(env = process.env) {
-    if (env[jevFlag] !== "1")
-        return "off";
-    return (env.TYPESAFE_API_KEY ?? "").trim() === "" ? "key-missing" : "on";
-}
-export function jevSkillHintDoctorLine(env = process.env) {
-    const status = jevSkillHintStatus(env);
-    return status === "key-missing"
-        ? "Jev skill hint: flag on but TYPESAFE_API_KEY missing"
-        : `Jev skill hint: ${status}`;
-}
-export function jevSkillHintText(skillId) {
-    return `LitOpenCode skill hint: the skill \`${skillId}\` likely fits this request. Load it only if it really fits; this is advice, not an instruction.`;
-}
-/** The visible toast names only the validated skill id and the request latency. */
-export function jevSkillHintToastText(skillId, latencyMs) {
-    return `Jev → ${skillId} (${(Math.max(0, latencyMs) / 1000).toFixed(2)}s)`;
-}
-export function jevSkillHintUnavailableText(reason) {
-    return `LitOpenCode skill hint unavailable (${reason}); continuing normally.`;
-}
-/** Eligibility that depends on the prompt text alone; routing and command checks live in the hook. */
-export function isJevEligiblePrompt(text) {
-    if (text.trimStart().startsWith("/"))
-        return false;
-    return text.replace(/\s+/gu, "").length >= 4;
-}
-const secretPatterns = [
-    /-----BEGIN [A-Z0-9 ]+-----[\s\S]*?(?:-----END [A-Z0-9 ]+-----|$)/gu,
-    /eyJ[A-Za-z0-9_-]+\.eyJ[A-Za-z0-9_-]+(?:\.[A-Za-z0-9_-]*)?/gu,
-    /sk-ant-[A-Za-z0-9_-]{8,}/gu,
-    /sk-[A-Za-z0-9_-]{16,}/gu,
-    /(?:ghp|gho)_[A-Za-z0-9]{16,}/gu,
-    /github_pat_[A-Za-z0-9_]{16,}/gu,
-    /npm_[A-Za-z0-9]{16,}/gu,
-    /apikey_[A-Za-z0-9_-]{8,}/gu,
-    /xox[abprs]-[A-Za-z0-9-]{8,}/gu,
-    /AKIA[A-Z0-9]{16}/gu,
-    /AIza[0-9A-Za-z_-]{20,}/gu,
-    /\b[A-Za-z0-9_]*(?:password|passwd|token|secret)\s*=\s*(?:"[^"]*"|'[^']*'|[^\s"']+)/giu,
-    /[A-Za-z0-9+/_-]{32,}={0,2}/gu
-];
-const tokenRunAtCut = /[A-Za-z0-9+/_-]{8,}={0,2}$/u;
-/**
- * Redact a bounded window first, then truncate, so a secret that straddles the 2,000-character cut is
- * masked whole. When either cut happened, a token run left dangling at the end is masked as well.
- */
-export function redactJevPrompt(text) {
-    const head = text.slice(0, promptWindowLimit * 2);
-    let redacted = Array.from(head).slice(0, promptWindowLimit).join("");
-    const windowCut = redacted.length < text.length;
-    redacted = redacted
-        .replace(/\/(?:Users|home)\/[^/\s]+/gu, "~")
-        .replace(/[A-Za-z]:\\Users\\[^\\/\s]+(\\)?/giu, (_match, separator) => (separator === undefined ? "~" : "~/"));
-    // The lookbehind starts a match only at the head of a run, which keeps the 8,000-character window linear.
-    redacted = redacted.replace(/(?<![A-Za-z0-9._%+-])[A-Za-z0-9._%+-]+@[A-Za-z0-9-]+(?:\.[A-Za-z0-9-]+)*\.[A-Za-z]{2,}/gu, "[email]");
-    for (const pattern of secretPatterns)
-        redacted = redacted.replace(pattern, "[secret]");
-    const characters = Array.from(redacted);
-    if (!windowCut && characters.length <= promptCharacterLimit)
-        return redacted;
-    return characters.slice(0, promptCharacterLimit).join("").replace(tokenRunAtCut, "[secret]");
-}
-export function defaultJevCatalog() {
-    return litOpenCodeRuntimeSkills.map((skill) => ({ id: skill.id, description: skill.summary }));
-}
-export function buildJevRequestBody(state, catalog, model) {
-    const criteria = {};
-    for (const entry of catalog)
-        criteria[entry.id] = Array.from(entry.description).slice(0, descriptionCharacterLimit).join("");
-    criteria.none = noneCriterion;
-    return JSON.stringify({
-        model,
-        state,
-        questions: { which: { type: "choice", instructions: choiceInstructions, criteria } }
-    });
-}
-function boundedInteger(raw, fallback, min, max) {
-    if (raw === undefined || !/^\d+$/u.test(raw.trim()))
-        return fallback;
-    return Math.min(max, Math.max(min, Number(raw.trim())));
-}
-function minConfidence(raw) {
-    if (raw === undefined || raw.trim() === "")
-        return defaultMinConfidence;
-    const value = Number(raw);
-    return Number.isFinite(value) && value >= 0 && value <= 1 ? value : defaultMinConfidence;
-}
-async function readCappedBody(response) {
-    const declared = Number(response.headers.get("content-length") ?? "");
-    if (Number.isFinite(declared) && declared > bodyByteCap) {
-        await response.body?.cancel().catch(() => undefined);
-        return undefined;
-    }
-    if (response.body === null)
-        return "";
-    const reader = response.body.getReader();
-    const chunks = [];
-    let total = 0;
-    for (;;) {
-        const { done, value } = await reader.read();
-        if (done)
-            break;
-        total += value.byteLength;
-        if (total > bodyByteCap) {
-            await reader.cancel().catch(() => undefined);
-            return undefined;
-        }
-        chunks.push(value);
-    }
-    return Buffer.concat(chunks).toString("utf8");
-}
-function validatedAnswer(raw, allowed, threshold) {
-    let parsed;
-    try {
-        parsed = JSON.parse(raw);
-    }
-    catch {
-        return { failure: "invalid response" };
-    }
-    const which = parsed?.answers?.which;
-    if (typeof which !== "object" || which === null)
-        return { failure: "invalid response" };
-    const { choice, confidence } = which;
-    if (typeof choice !== "string" || !allowed.has(choice))
-        return { failure: "invalid response" };
-    if (typeof confidence !== "number" || !Number.isFinite(confidence))
-        return { failure: "invalid response" };
-    if (choice === "none" || confidence < threshold)
-        return { confidence };
-    return { choice, confidence };
-}
-/**
- * Walks the trace folder below the project root one level at a time, creating a missing folder
- * without following links. Any symlink or non-folder on the way means no trace.
- */
-async function realTraceFolder(root, folder) {
-    const relative = path.relative(root, folder);
-    if (relative.startsWith("..") || path.isAbsolute(relative))
-        return false;
-    let current = root;
-    for (const segment of relative.split(path.sep).filter((part) => part !== "")) {
-        current = path.join(current, segment);
-        let stat = await fs.lstat(current).catch(() => undefined);
-        if (stat === undefined) {
-            await fs.mkdir(current).catch(() => undefined);
-            stat = await fs.lstat(current).catch(() => undefined);
-        }
-        if (stat === undefined || stat.isSymbolicLink() || !stat.isDirectory())
-            return false;
-    }
-    return true;
-}
-export function createJevSkillHint(options = {}) {
-    const env = options.env ?? process.env;
-    const fetchImpl = options.fetch ?? ((url, init) => fetch(url, init));
-    const now = options.now ?? Date.now;
-    const sessions = new Map();
-    async function trace(record) {
-        if (env[`${jevFlag}_TRACE`] !== "1" || options.traceFile === undefined)
-            return;
-        const folder = path.dirname(options.traceFile);
-        const root = options.traceRoot ?? path.dirname(folder);
-        try {
-            if (!(await realTraceFolder(root, folder)))
-                return;
-            // Refuse a symlink or other non-file at the trace path; O_NOFOLLOW closes the lstat race.
-            const existing = await fs.lstat(options.traceFile).catch(() => undefined);
-            if (existing !== undefined && !existing.isFile())
-                return;
-            const flags = fsConstants.O_WRONLY | fsConstants.O_APPEND | fsConstants.O_CREAT | (fsConstants.O_NOFOLLOW ?? 0);
-            const handle = await fs.open(options.traceFile, flags, 0o600);
-            try {
-                // A folder swapped for a symlink after the first check still gets no record.
-                if (!(await realTraceFolder(root, folder)))
-                    return;
-                await handle.appendFile(`${JSON.stringify(record)}\n`, "utf8");
-            }
-            finally {
-                await handle.close();
-            }
-        }
-        catch { // no-excuse-ok: catch -- the opt-in debug trace must never affect the turn.
-        }
-    }
-    async function ask(state, key) {
-        const catalog = options.catalog ?? defaultJevCatalog();
-        const model = (env[`${jevFlag}_MODEL`] ?? "").trim() || defaultModel;
-        const body = buildJevRequestBody(state, catalog, model);
-        if (Buffer.byteLength(body, "utf8") > bodyByteCap)
-            return { failure: "request too large" };
-        const timeoutMs = boundedInteger(env[`${jevFlag}_TIMEOUT_MS`], defaultTimeoutMs, 1, maxTimeoutMs);
-        const controller = new AbortController();
-        let timer;
-        const timedOut = new Promise((resolve) => {
-            timer = setTimeout(() => {
-                controller.abort();
-                resolve({ failure: "timeout" });
-            }, timeoutMs);
-        });
-        const request = (async () => {
-            let response;
-            try {
-                response = await fetchImpl(jevEndpoint, {
-                    method: "POST",
-                    headers: { authorization: `Bearer ${key}`, "content-type": "application/json" },
-                    body,
-                    redirect: "error",
-                    signal: controller.signal
-                });
-            }
-            catch {
-                return { failure: controller.signal.aborted ? "timeout" : "network" };
-            }
-            if (response.status !== 200) {
-                await response.body?.cancel().catch(() => undefined);
-                return { httpStatus: response.status, failure: `HTTP ${response.status}` };
-            }
-            let raw;
-            try {
-                raw = await readCappedBody(response);
-            }
-            catch {
-                return { httpStatus: 200, failure: controller.signal.aborted ? "timeout" : "network" };
-            }
-            if (raw === undefined)
-                return { httpStatus: 200, failure: "response too large" };
-            const allowed = new Set([...catalog.map((entry) => entry.id), "none"]);
-            return { httpStatus: 200, ...validatedAnswer(raw, allowed, minConfidence(env[`${jevFlag}_MIN_CONFIDENCE`])) };
-        })();
-        try {
-            return await Promise.race([request, timedOut]);
-        }
-        finally {
-            clearTimeout(timer);
-        }
-    }
-    return {
-        forget(sessionID) {
-            sessions.delete(sessionID);
-        },
-        claimAwareness(sessionID, promptText) {
-            if (jevSkillHintStatus(env) !== "on" || !isJevEligiblePrompt(promptText))
-                return false;
-            const session = sessions.get(sessionID) ?? { calls: 0, noted: false, announced: false };
-            sessions.set(sessionID, session);
-            if (session.announced)
-                return false;
-            session.announced = true;
-            return true;
-        },
-        async hintFor(sessionID, promptText) {
-            if (jevSkillHintStatus(env) !== "on" || !isJevEligiblePrompt(promptText))
-                return undefined;
-            const key = (env.TYPESAFE_API_KEY ?? "").trim();
-            const session = sessions.get(sessionID) ?? { calls: 0, noted: false, announced: false };
-            sessions.set(sessionID, session);
-            const started = now();
-            // A key pasted into the prompt is masked even when it is too short for a token shape.
-            const state = redactJevPrompt(promptText.split(key).join("[secret]"));
-            let outcome;
-            if (session.calls >= boundedInteger(env[`${jevFlag}_MAX_CALLS`], defaultMaxCalls, 0, Number.MAX_SAFE_INTEGER)) {
-                outcome = { failure: "call cap reached" };
-            }
-            else {
-                session.calls += 1;
-                try {
-                    outcome = await ask(state, key);
-                }
-                catch {
-                    outcome = { failure: "network" };
-                }
-            }
-            const latencyMs = now() - started;
-            await trace({
-                time: new Date(started).toISOString(),
-                promptSha256: createHash("sha256").update(state).digest("hex"),
-                choice: outcome.choice ?? null,
-                confidence: outcome.confidence ?? null,
-                latencyMs,
-                httpStatus: outcome.httpStatus ?? null,
-                fallback: outcome.failure ?? null
-            });
-            if (outcome.choice !== undefined) {
-                return { kind: "hint", text: jevSkillHintText(outcome.choice), skillId: outcome.choice, latencyMs };
-            }
-            if (outcome.failure === undefined || session.noted)
-                return undefined;
-            session.noted = true;
-            return { kind: "note", text: jevSkillHintUnavailableText(outcome.failure) };
-        }
-    };
-}