@open-mercato/cli 0.6.7-develop.6863.1.61001cf9a8 → 0.6.7

package/dist/agentic/shared/ai/skills/om-system-extension/references/mechanism-selector.md

@@ -1,27 +0,0 @@
-# Extension Mechanism Selector
-
-Load this reference before choosing files.
-
-| Requirement | Smallest mechanism |
-|---|---|
-| Add computed/list/detail fields | Response enricher; add a widget only when UI is also needed. |
-| Enrich query-engine reads | Enricher with `queryEngine.enabled`; preserve `*.querying`/`*.queried` lifecycle contracts. |
-| Validate/rewrite host request or add response data | API interceptor. |
-| Add behavior before/after command execute or undo | `commands/interceptors.ts` command interceptor with stable `id`/`targetCommand`. |
-| Block/rewrite host mutation with post-success work | Mutation guard contract. |
-| Add form/table/menu/page content | Headless/rendered widget injection. |
-| Filter a client widget reaction | Widget `eventHandlers.filter.operations`. |
-| Persist app-owned data against host record | Extension entity with scalar host ID. |
-| React synchronously or asynchronously | Typed subscriber; use `metadata.sync`/`priority` only for in-pipeline lifecycle work. |
-| React to a browser event | Reactive notification handler, or `clientBroadcast` plus `useAppEvent`/`useOperationProgress`. |
-| Add provider setup/status/detail UI | Typed integration definition plus integration wizard/status/detail widget injection. |
-| Add vector, embedded AI, or provider/domain behavior | `vector.ts`, `<AiChat>`, or the typed payment/shipping/currency/workflow registry; add the owning specialist skill. |
-| Adjust component behavior | Props transform, wrapper, then replacement. |
-| Hide/replace supported route/page/agent/tool/etc. | `src/modules.ts` unified override. |
-| Change unsupported internals | Eject only after explicit approval. |
-
-Resolve exact targets from the named module sheet's `UMES hosts` and `UMES contributions` first. Use `.ai/guides/framework-extension-points.md` for framework-owned menus, dashboard, notification, integration, and shell targets. Follow `fact-ref` and `specialistRoute` provenance instead of inventing a generic target; use exact installed context only for one named fact gap. `optional-external` degrades when its package is absent, while an `unresolved` first-party target blocks implementation.
-
-If multiple mechanisms are required (for example editable field = widget + enricher + interceptor), follow the shared `roundTripId`, name one owner for each read/write/UI leg, and test them as one round trip. Select only facts marked bound: DataTable's rendered header/footer/toolbar/search-trailing, headless columns/row-actions/bulk-actions/filters, and component handle; CrudForm's base/header/fields, component handle, and declared lifecycle/operation-filter pipeline. Base prefixes and helper-only/unbound IDs are not mountable. Reactive notifications, messages/inbox, query/vector, integrations, and AI/workflow work also select their owning task route; UMES does not replace that specialist context.
-
-Prefer additive composition before replacement (`additive-before-replacement`). Ejection is the last resort after supported seams are proven insufficient and explicit approval is granted (`eject-last`).

package/dist/agentic/shared/ai/skills/om-system-extension/references/read-write-roundtrip.md

@@ -1,13 +0,0 @@
-# Editable Extension Round Trip
-
-Load this reference for app fields/actions added to installed UI/data.
-
-1. Define app-owned storage or an existing host-supported custom field; keep full scope and locking.
-2. Add an enricher/detail read that returns a stable typed value, including explicit null.
-3. Inject a typed field/control into the exact CrudForm/DataTable host.
-4. Intercept/guard/dispatch the write through a command; validate scope/features/version and support clear-to-null.
-5. Invalidate the owning data/cache/search projections after commit.
-6. Map response data into initial values without truthy defaults.
-7. Test create or first save, reload, edit, clear, stale version, denied/wildcard ACL, and host absence.
-
-Do not stop after rendering the field. A visible input without read and durable write paths is incomplete.

package/dist/agentic/shared/ai/skills/om-system-extension/references/unified-overrides.md

@@ -1,41 +0,0 @@
-# Unified Override Domains
-
-Load this reference when `src/modules.ts` must disable or replace an installed contribution. `entry.overrides` is the only canonical app-level override umbrella. Resolve the exact key from the named module sheet's generated `overrideTargets` facts first: each target carries the exact top-level `domain`, the complete `path` segments, the terminal `key` for keyed-record domains, the supported `modes`, a `factRef` to the module-owned fact being overridden, and a portable `source`. Follow `factRef` provenance to the underlying route/page/event/worker/widget/agent/tool/setup/ACL/DI/encryption fact. When the module sheet reports an `overrideTargetDiagnostics` entry (`missing-owned-fact`, `missing-source`, `unsupported-dynamic-key`, `unknown-framework-domain`) for the domain you need, treat it as a blocker and escalate to the named source for one missing detail — never guess a key. Framework-only settings such as `nav.groupOrder` live in `framework-extension-points.md`, not in a module's `overrideTargets`. For keyed override maps, `null` disables a supported contribution and a typed value replaces it; AI extensions and setup hooks have the special shapes below.
-
-| Domain | Shape/key |
-|---|---|
-| AI agents/tools | `overrides.ai.agents`, `overrides.ai.tools` — agent ID/tool name |
-| Additive AI extensions | `overrides.ai.extensions` — ordered `AiAgentExtension[]`; additive array, not a key-to-`null` replacement map |
-| API routes | `overrides.routes.api` — `METHOD /api/path` |
-| Backend/frontend pages | `overrides.routes.pages` — `/backend/...` or `/frontend/...` |
-| Event subscribers | `overrides.events.subscribers` — subscriber ID |
-| Workers | `overrides.workers` — resolved `ModuleWorker.id`; explicit `metadata.id` wins, otherwise generated fallback `<module>:workers:<path>` |
-| Injection widgets | `overrides.widgets.injection` — generated registry `entry.key` |
-| Component overrides | `overrides.widgets.components` — component handle |
-| Dashboard widgets | `overrides.widgets.dashboard` — generated registry `entry.key` |
-| Notification types/handlers | `overrides.notifications.types`, `.handlers` — stable ID |
-| API interceptors | `overrides.interceptors` — interceptor ID |
-| Command interceptors | `overrides.commandInterceptors` — interceptor ID |
-| Response enrichers | `overrides.enrichers` — enricher ID |
-| Page guards/middleware | `overrides.guards` — middleware ID |
-| CLI commands | `overrides.cli` — command string |
-| Setup hooks | `overrides.setup` — entry-scoped `defaultRoleFeatures`, `defaultCustomerRoleFeatures`, `seedDefaults`, `seedExamples`, `onTenantCreated`; hook booleans use `false` to disable |
-| ACL features | `overrides.acl.features` — feature ID |
-| DI bindings | `overrides.di` — container key |
-| Encryption maps | `overrides.encryption.maps` — entity ID |
-
-## Rules
-
-- A global override map may be declared on an app override entry; it need not impersonate the module that originally contributed the keyed contract. Setup is entry-scoped. Do not add a competing route/widget/worker and hope load order wins.
-- API route methods are case-insensitive and paths normalize a leading/trailing slash; use the canonical displayed key. Disabling all methods removes the route entry.
-- Page keys name generated frontend/backend URL paths, not filesystem paths. After hiding a landing page, provide a safe accessible redirect.
-- Injection/dashboard keys are generated entry keys and may differ from widget metadata IDs. Worker keys are resolved descriptor IDs; inspect generated facts/source instead of constructing them from memory.
-- Require the generated `overrideTargets` entry's exact `domain`, `path`/`key`, and `modes` (`disable-replace`, `replace`, or `additive`). A stale or `unresolved` first-party correlation, or an `overrideTargetDiagnostics` row for that domain, is a blocker; it is not a fallback to a guessed key. Copy the `path` verbatim — do not flatten nested widget/AI segments.
-- `overrides.guards` targets backend/frontend page route middleware only (the `page-middleware` owned fact). A `data/guards.ts` mutation guard is a different contract with no override domain; it surfaces as an extension activation, never under `overrides.guards`. The target's `page-middleware-not-mutation-guard` note flags this.
-- Before adding a contribution, check the target module sheet's `incoming` index for an already-installed contributor of the same kind/target, and require a `bound` `activation` (not a broad capability host) before assuming a route/entity extension actually runs. A `capability-only` host is available but unproven; do not claim runtime invocation from it.
-- Keep AI extensions additive and ordered. Use agent/tool maps only for replacement or disable; do not encode an extension as a `null`-capable map entry.
-- Preserve replacement type/signature, auth/features, scope, stable ID, and observable side effects. A replacement may strengthen safety but never silently narrow a public contract.
-- Treat unknown/stale override diagnostics as failures. Run `yarn generate`, clear structural nav/module caches with the app's documented command, and verify the old contribution is absent in every bootstrap.
-- Verify host present/absent, wildcard ACL, direct URL/API access, registry uniqueness, cache/navigation cleanup, and rollback to the base contribution.
-
-For additive behavior use an enricher, interceptor, guard, widget/menu, extension entity, event subscriber, or component wrapper instead of replacing the whole contribution.

package/dist/agentic/shared/ai/skills/om-system-extension/references/verification.md

@@ -1,11 +0,0 @@
-# Extension Verification
-
-Load this reference after implementing the selected mechanism.
-
-- Confirm no installed/generated file changed and app module ownership is clear.
-- Confirm resolved host tokens match the installed version and generated facts.
-- Test host present and absent, authorized/denied/wildcard users, two scopes, and direct API access without UI.
-- Test list/detail/create/update/delete/action legs that the extension touches.
-- Test timeout/failure fallback, retry/idempotency, cache hit/miss, and search/index behavior where relevant.
-- Run `yarn generate`, focused tests, typecheck, and affected integration flow.
-- Disable/replace branches must remove stale navigation/cache/registry behavior and retain a safe backend landing route.

package/dist/agentic/shared/ai/skills/om-trim-unused-modules/references/dependency-and-redirect.md

@@ -1,15 +0,0 @@
-# Module Dependency and Redirect Audit
-
-Load before disabling modules.
-
-For each enabled module, inspect:
-
-- declared/soft dependencies and `src/modules.ts` overrides;
-- app imports, pages, widgets, events/subscribers, DI resolves, setup, CLI, workers, AI/workflows;
-- provider/integration hosts and generated module facts;
-- backend navigation and landing destination;
-- auth, configs, entities, query index, and other bootstrap infrastructure.
-
-Classify uncertainty as keep until resolved. When dashboards is disabled, replace its backend landing render/import with a role/ACL-aware redirect to the first enabled main destination; use `/backend/profile` only when no accessible business page exists.
-
-After changes run generation, login/setup, backend root/sidebar/settings/profile, CLI/worker bootstrap, typecheck/build, and affected tests. Confirm no generated import still targets a disabled package/module.

package/dist/agentic/shared/ai/skills/om-troubleshooter/references/diagnosis-map.md

@@ -1,16 +0,0 @@
-# Diagnosis Map
-
-Load the matching row only.
-
-| Failure | First trace |
-|---|---|
-| Scope/auth/401 loop | Auth-derived tenant/org, all-org mode, wildcard features, alternate route metadata. |
-| Lost/partial write | Validator/command, transaction/atomic flush, optimistic lock, post-commit side effects. |
-| Field round trip | Form ID/initial value, payload validator, command mapping, entity nullability, response transform. |
-| Generated/import failure | Discovery filename/exports, `src/modules.ts`, generation warnings, package exports/installed dist. |
-| Browser/CLI/worker mismatch | Each bootstrap's registry/DI init, generated imports, chunk-global identity. |
-| Cache/search stale | Command aliases, tags/invalidation, undo/sub-resource path, convergence/reindex. |
-| Hydration/navigation UI | Locale/timezone/env first render, page metadata, stable IDs, auth versus visibility. |
-| Provider sync | Idempotency, signature, retry class, cursor commit, mapping, webhook/poll race, reconciliation. |
-
-Trace from the public call site to the first broken invariant. Avoid broad refactors until the oracle proves the location.

package/dist/agentic/shared/ai/skills/om-troubleshooter/references/regression-oracles.md

@@ -1,14 +0,0 @@
-# Regression Oracles
-
-Load the relevant oracle family before implementing the fix.
-
-- **Scope:** two tenants/two orgs, permitted/denied/null/all-org/wildcard; invalid scope never widens.
-- **Atomic write:** inject failure between phases; no partial data or premature event/cache/index side effect.
-- **Locking:** current update succeeds; stale update/delete/action returns structured 409 and UI conflict.
-- **Field:** create, reload, edit, clear to null, reload; request/DB/response/UI agree.
-- **Bootstrap:** same registry/service behavior in browser/server, CLI, worker, and queue from packed install.
-- **Cache/search:** immediate write read uses defined consistency; convergence polling has deadline and no arbitrary sleep.
-- **Hydration:** server/client initial output matches across representative locale/timezone/environment.
-- **Provider:** duplicate/concurrent/retry/timeout/page failure; idempotency and cursor/mapping state remain correct; secrets absent.
-
-The oracle must fail on the pre-fix code for the intended reason and clean up its own fixtures.

package/dist/agentic/shared/scripts/agent-harness-tool-server.mjs

@@ -1,187 +0,0 @@
-#!/usr/bin/env node
-
-import fs from 'node:fs'
-import path from 'node:path'
-import process from 'node:process'
-
-const MAX_READ_BYTES = 256 * 1024
-const MAX_WRITE_BYTES = 256 * 1024
-const SAFE_TEXT_EXTENSIONS = new Set([
-  '.cjs', '.css', '.graphql', '.html', '.js', '.json', '.jsx', '.md', '.mdx',
-  '.mjs', '.prisma', '.sql', '.ts', '.tsx', '.txt', '.xml', '.yaml', '.yml',
-])
-const FORBIDDEN_SEGMENTS = new Set(['.git', '.docker', '.kube', '.aws', '.ssh', '.codex', '.claude', '.next', 'dist'])
-const FORBIDDEN_BASENAMES = new Set([
-  '.npmrc', '.netrc', '.pypirc', '.git-credentials', 'secrets.json', 'credentials.json',
-  'service-account-credentials.json',
-])
-const FORBIDDEN_SECRET_EXTENSIONS = new Set(['.key', '.pem', '.p12', '.pfx'])
-
-function fail(message) {
-  process.stderr.write(`agent-harness-tool-server: ${message}\n`)
-  process.exit(2)
-}
-
-function isInside(root, candidate) {
-  const relative = path.relative(root, candidate)
-  return relative === '' || (!relative.startsWith(`..${path.sep}`) && relative !== '..' && !path.isAbsolute(relative))
-}
-
-function isInstalledSourcePath(value, allowPatterns) {
-  const normalized = value.replaceAll('\\', '/')
-  const segments = normalized.split('/')
-  if (segments.length < 5 || segments[0] !== 'node_modules' || segments[1] !== '@open-mercato' || segments[3] !== 'src') return false
-  if (!segments[2] || segments.slice(4).some((entry) => !entry)) return false
-  return allowPatterns || !normalized.includes('*') && !normalized.includes('?')
-}
-
-function safeRelative(value, { allowInstalledSourcePatterns = false } = {}) {
-  if (typeof value !== 'string' || !value || value.includes('\0') || path.isAbsolute(value)) return false
-  const normalized = value.replaceAll('\\', '/')
-  if (normalized === '.' || normalized.startsWith('../') || normalized.includes('/../')) return false
-  const segments = normalized.split('/')
-  const basename = segments.at(-1) ?? ''
-  const installedSource = segments.includes('node_modules')
-  if (installedSource && !isInstalledSourcePath(normalized, allowInstalledSourcePatterns)) return false
-  if ((installedSource ? segments.slice(4) : segments).some((entry) => FORBIDDEN_SEGMENTS.has(entry))) return false
-  if (normalized === '.ai/harness' || normalized.startsWith('.ai/harness/')) return false
-  if (basename === '.env' || basename.startsWith('.env.') || FORBIDDEN_BASENAMES.has(basename)) return false
-  return !FORBIDDEN_SECRET_EXTENSIONS.has(path.extname(basename).toLowerCase())
-}
-
-function globToRegExp(pattern) {
-  let source = '^'
-  for (let index = 0; index < pattern.length; index += 1) {
-    const char = pattern[index]
-    if (char === '*' && pattern[index + 1] === '*') { source += '.*'; index += 1 }
-    else if (char === '*') source += '[^/]*'
-    else if (char === '?') source += '[^/]'
-    else source += char.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')
-  }
-  return new RegExp(`${source}$`)
-}
-
-const rootArg = process.argv[2]
-const mode = process.argv[3]
-let allowedReads
-let allowedWrites
-try { allowedReads = JSON.parse(process.argv[4] ?? '[]') } catch { fail('allowed read set is invalid JSON') }
-try { allowedWrites = JSON.parse(process.argv[5] ?? '[]') } catch { fail('allowed write set is invalid JSON') }
-if (!path.isAbsolute(rootArg ?? '')) fail('root must be absolute')
-if (!['read-only', 'writable'].includes(mode)) fail('mode must be read-only or writable')
-if (!Array.isArray(allowedReads) || allowedReads.some((entry) => !safeRelative(entry, { allowInstalledSourcePatterns: true }) || ['*', '**'].includes(entry))) fail('allowed read set is invalid')
-if (!Array.isArray(allowedWrites) || allowedWrites.some((entry) => !safeRelative(entry))) fail('allowed write set is invalid')
-const root = fs.realpathSync(rootArg)
-const readMatchers = allowedReads.map(globToRegExp)
-const writeMatchers = allowedWrites.map(globToRegExp)
-
-function resolveRead(relative) {
-  if (!safeRelative(relative)) throw new Error('path is outside the allowed app context')
-  const normalized = relative.replaceAll('\\', '/')
-  if (!readMatchers.some((matcher) => matcher.test(normalized))) throw new Error('path is outside the case read allowlist')
-  const lexical = path.resolve(root, relative)
-  if (!isInside(root, lexical)) throw new Error('path escapes the app root')
-  const real = fs.realpathSync(lexical)
-  if (isInstalledSourcePath(normalized, false)) {
-    const dependencyRoot = fs.realpathSync(path.join(root, 'node_modules'))
-    if (!isInside(dependencyRoot, real)) throw new Error('installed source resolves outside the protected dependency root')
-  } else if (!isInside(root, real)) throw new Error('path resolves outside the app root')
-  const stat = fs.statSync(real)
-  if (!stat.isFile() || stat.size > MAX_READ_BYTES) throw new Error('path must be a bounded regular file')
-  if (!SAFE_TEXT_EXTENSIONS.has(path.extname(real).toLowerCase()) && path.basename(real) !== 'AGENTS.md') throw new Error('path is not an allowed text file')
-  return { real, stat }
-}
-
-function resolveWrite(relative) {
-  if (mode !== 'writable') throw new Error('writes are disabled for this evaluation')
-  if (!safeRelative(relative) || !writeMatchers.some((matcher) => matcher.test(relative.replaceAll('\\', '/')))) throw new Error('path is outside the case write allowlist')
-  const lexical = path.resolve(root, relative)
-  if (!isInside(root, lexical)) throw new Error('path escapes the app root')
-  let cursor = path.dirname(lexical)
-  const missing = []
-  while (cursor !== root && !fs.existsSync(cursor)) { missing.push(cursor); cursor = path.dirname(cursor) }
-  if (!isInside(root, cursor)) throw new Error('write ancestor escapes the app root')
-  for (let current = cursor; current !== root; current = path.dirname(current)) {
-    const stat = fs.lstatSync(current)
-    if (!stat.isDirectory() || stat.isSymbolicLink()) throw new Error('write ancestor must be a regular directory')
-  }
-  if (fs.existsSync(lexical)) {
-    const stat = fs.lstatSync(lexical)
-    if (!stat.isFile() || stat.isSymbolicLink() || !isInside(root, fs.realpathSync(lexical))) throw new Error('write target must be a contained regular file')
-  }
-  for (const directory of missing.reverse()) fs.mkdirSync(directory, { mode: 0o700 })
-  return lexical
-}
-
-const tools = [
-  {
-    name: 'read',
-    description: 'Read one exact app-relative instruction, fact, source, or allowed target file. Fact-linked @open-mercato package source reads are allowed; absolute paths, discovery, credentials, dependency writes, Git, and harness internals are rejected.',
-    inputSchema: { type: 'object', additionalProperties: false, required: ['path'], properties: { path: { type: 'string' } } },
-  },
-  ...(mode === 'writable' ? [{
-    name: 'write',
-    description: 'Replace one exact app-relative file declared in the current case write allowlist. The content must be the complete file.',
-    inputSchema: { type: 'object', additionalProperties: false, required: ['path', 'content'], properties: { path: { type: 'string' }, content: { type: 'string' } } },
-  }] : []),
-]
-
-function result(id, value) {
-  process.stdout.write(`${JSON.stringify({ jsonrpc: '2.0', id, result: value })}\n`)
-}
-
-function toolResult(id, text, isError = false) {
-  result(id, { content: [{ type: 'text', text }], ...(isError ? { isError: true } : {}) })
-}
-
-function handle(message) {
-  if (!message || message.jsonrpc !== '2.0') return
-  if (message.method === 'initialize') {
-    result(message.id, {
-      protocolVersion: message.params?.protocolVersion ?? '2025-06-18',
-      capabilities: { tools: { listChanged: false } },
-      serverInfo: { name: 'open-mercato-agent-harness', version: '1.0.0' },
-    })
-    return
-  }
-  if (message.method === 'ping') { result(message.id, {}); return }
-  if (message.method === 'tools/list') { result(message.id, { tools }); return }
-  if (message.method !== 'tools/call') return
-  try {
-    const name = message.params?.name
-    const input = message.params?.arguments ?? {}
-    if (name === 'read') {
-      const { real } = resolveRead(input.path)
-      toolResult(message.id, fs.readFileSync(real, 'utf8'))
-      return
-    }
-    if (name === 'write') {
-      if (typeof input.content !== 'string' || Buffer.byteLength(input.content) > MAX_WRITE_BYTES) throw new Error('content must be a bounded string')
-      const target = resolveWrite(input.path)
-      const temporary = `${target}.om-harness-${process.pid}.tmp`
-      fs.writeFileSync(temporary, input.content, { encoding: 'utf8', mode: 0o600, flag: 'wx' })
-      fs.renameSync(temporary, target)
-      toolResult(message.id, `wrote ${input.path}`)
-      return
-    }
-    throw new Error('unknown tool')
-  } catch (error) {
-    toolResult(message.id, error instanceof Error ? error.message : String(error), true)
-  }
-}
-
-let buffer = ''
-process.stdin.setEncoding('utf8')
-process.stdin.on('data', (chunk) => {
-  buffer += chunk
-  while (true) {
-    const newline = buffer.indexOf('\n')
-    if (newline < 0) break
-    const line = buffer.slice(0, newline).replace(/\r$/, '')
-    buffer = buffer.slice(newline + 1)
-    if (!line.trim()) continue
-    try { handle(JSON.parse(line)) } catch (error) {
-      process.stderr.write(`agent-harness-tool-server: invalid request: ${error instanceof Error ? error.message : String(error)}\n`)
-    }
-  }
-})

package/dist/agentic/shared/scripts/check-lessons.mjs

@@ -1,178 +0,0 @@
-#!/usr/bin/env node
-
-import fs from 'node:fs'
-import path from 'node:path'
-import { fileURLToPath, pathToFileURL } from 'node:url'
-
-export const LESSON_AREAS = new Set([
-  'architecture',
-  'module-data',
-  'umes',
-  'backend-ui',
-  'integration',
-  'ai-workflow',
-  'debugging',
-  'testing',
-  'framework-context',
-  'spec-pr',
-])
-
-const INDEX_MAX_BYTES = 30 * 1024
-const RECORD_NAME_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*\.md$/
-const MODULE_PATTERN = /^[a-z0-9]+(?:_[a-z0-9]+)*$/
-const TOPIC_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/
-const INDEX_ROW_PATTERN = /^- \[(.+)]\(lessons\/([a-z0-9-]+\.md)\) — area:([^;]+); module:([^;]+); topic:(.+)$/
-
-function parseFrontMatter(source, relativePath, errors) {
-  const match = source.match(/^---\n([\s\S]*?)\n---\n\n# (.+)\n/)
-  if (!match) {
-    errors.push(`${relativePath}: expected JSON-valued front matter followed by one H1`)
-    return null
-  }
-
-  const metadata = {}
-  for (const line of match[1].split('\n')) {
-    const separator = line.indexOf(':')
-    if (separator < 1) {
-      errors.push(`${relativePath}: malformed front matter line ${JSON.stringify(line)}`)
-      continue
-    }
-    const key = line.slice(0, separator)
-    try {
-      metadata[key] = JSON.parse(line.slice(separator + 1).trim())
-    } catch {
-      errors.push(`${relativePath}: ${key} must use valid JSON syntax`)
-    }
-  }
-
-  const expectedKeys = ['title', 'modules', 'areas', 'topics']
-  const actualKeys = Object.keys(metadata).sort()
-  if (JSON.stringify(actualKeys) !== JSON.stringify([...expectedKeys].sort())) {
-    errors.push(`${relativePath}: front matter keys must be exactly ${expectedKeys.join(', ')}`)
-  }
-  if (typeof metadata.title !== 'string' || metadata.title.length === 0) {
-    errors.push(`${relativePath}: title must be a non-empty string`)
-  } else if (metadata.title !== match[2]) {
-    errors.push(`${relativePath}: front matter title must match the H1`)
-  }
-
-  for (const key of ['modules', 'areas', 'topics']) {
-    if (!Array.isArray(metadata[key])) errors.push(`${relativePath}: ${key} must be an array`)
-  }
-  if (!Array.isArray(metadata.modules) || metadata.modules.length === 0) {
-    errors.push(`${relativePath}: modules must contain an owning module/package or platform`)
-  } else if (metadata.modules.some((value) => typeof value !== 'string' || !MODULE_PATTERN.test(value))) {
-    errors.push(`${relativePath}: modules must use lowercase snake_case tags`)
-  }
-  if (!Array.isArray(metadata.areas) || metadata.areas.length === 0) {
-    errors.push(`${relativePath}: areas must contain at least one standalone router area`)
-  } else if (metadata.areas.some((value) => !LESSON_AREAS.has(value))) {
-    errors.push(`${relativePath}: areas contain a value outside the standalone router taxonomy`)
-  }
-  if (!Array.isArray(metadata.topics) || metadata.topics.length < 2 || metadata.topics.length > 6) {
-    errors.push(`${relativePath}: topics must contain between two and six important concepts`)
-  } else if (metadata.topics.some((value) => typeof value !== 'string' || !TOPIC_PATTERN.test(value))) {
-    errors.push(`${relativePath}: topics must use lowercase kebab-case tags`)
-  }
-
-  for (const key of ['modules', 'areas', 'topics']) {
-    if (Array.isArray(metadata[key]) && new Set(metadata[key]).size !== metadata[key].length) {
-      errors.push(`${relativePath}: ${key} must not contain duplicates`)
-    }
-  }
-
-  return metadata
-}
-
-export function checkLessonsCatalog(rootDir) {
-  const errors = []
-  const indexPath = path.join(rootDir, '.ai', 'lessons.md')
-  const lessonsDir = path.join(rootDir, '.ai', 'lessons')
-  if (!fs.existsSync(indexPath)) return [`${indexPath}: lesson index is missing`]
-
-  const indexSource = fs.readFileSync(indexPath, 'utf8')
-  const indexBytes = Buffer.byteLength(indexSource)
-  if (indexBytes > INDEX_MAX_BYTES) {
-    errors.push(`.ai/lessons.md: ${indexBytes} bytes exceeds the ${INDEX_MAX_BYTES}-byte progressive-loading budget`)
-  }
-  if (/\*\*(?:Context|Problem|Rule|Applies to)\*\*:/.test(indexSource)) {
-    errors.push('.ai/lessons.md: full lesson prose belongs in .ai/lessons/, not the catalog')
-  }
-
-  const recordNames = fs.existsSync(lessonsDir)
-    ? fs.readdirSync(lessonsDir, { withFileTypes: true })
-      .filter((entry) => entry.isFile() && entry.name.endsWith('.md') && !entry.name.startsWith('_'))
-      .map((entry) => entry.name)
-      .sort()
-    : []
-  const records = new Map()
-  const titles = new Set()
-  for (const fileName of recordNames) {
-    const relativePath = `.ai/lessons/${fileName}`
-    if (!RECORD_NAME_PATTERN.test(fileName)) errors.push(`${relativePath}: filename must use kebab-case`)
-    const metadata = parseFrontMatter(fs.readFileSync(path.join(lessonsDir, fileName), 'utf8'), relativePath, errors)
-    if (!metadata) continue
-    if (titles.has(metadata.title)) errors.push(`${relativePath}: duplicate lesson title ${JSON.stringify(metadata.title)}`)
-    titles.add(metadata.title)
-    records.set(fileName, metadata)
-  }
-
-  const indexed = new Set()
-  for (const line of indexSource.split('\n')) {
-    if (!line.startsWith('- [')) continue
-    const match = line.match(INDEX_ROW_PATTERN)
-    if (!match) {
-      errors.push(`.ai/lessons.md: malformed catalog row ${JSON.stringify(line)}`)
-      continue
-    }
-    const [, title, fileName, areaText, moduleText, topicText] = match
-    if (indexed.has(fileName)) errors.push(`.ai/lessons.md: duplicate link to lessons/${fileName}`)
-    indexed.add(fileName)
-    const metadata = records.get(fileName)
-    if (!metadata) {
-      errors.push(`.ai/lessons.md: lessons/${fileName} does not exist`)
-      continue
-    }
-    const indexedMetadata = {
-      title,
-      areas: areaText.split(','),
-      modules: moduleText.split(','),
-      topics: topicText.split(','),
-    }
-    for (const key of ['title', 'areas', 'modules', 'topics']) {
-      if (JSON.stringify(indexedMetadata[key]) !== JSON.stringify(metadata[key])) {
-        errors.push(`.ai/lessons.md: ${key} drift for lessons/${fileName}`)
-      }
-    }
-  }
-
-  for (const fileName of records.keys()) {
-    if (!indexed.has(fileName)) errors.push(`.ai/lessons/${fileName}: record is missing from the catalog`)
-  }
-  const declaredCount = indexSource.match(/catalog indexes (\d+) focused lessons/)
-  if (!declaredCount || Number(declaredCount[1]) !== records.size) {
-    errors.push(`.ai/lessons.md: declared lesson count must equal ${records.size}`)
-  }
-
-  return errors
-}
-
-function parseRoot(args) {
-  if (args.length === 0) return process.cwd()
-  if (args.length === 2 && args[0] === '--root') return path.resolve(args[1])
-  throw new Error('Usage: check-lessons.mjs [--root <app-root>]')
-}
-
-export function main(args = process.argv.slice(2)) {
-  const rootDir = parseRoot(args)
-  const errors = checkLessonsCatalog(rootDir)
-  if (errors.length > 0) {
-    for (const error of errors) console.error(`- ${error}`)
-    process.exitCode = 1
-    return
-  }
-  console.log(`Lessons catalog is valid: ${rootDir}`)
-}
-
-const entryPath = process.argv[1] ? pathToFileURL(path.resolve(process.argv[1])).href : null
-if (entryPath === import.meta.url) main()