@squadrules/mcp 5.10.1 → 5.12.0

package/dist/utils/directory-access.d.ts

@@ -0,0 +1,26 @@
+/** Maximum directory depth for batch operations. */
+export declare const MAX_DIRECTORY_DEPTH = 8;
+/** Maximum adapter count per batch directory operation. */
+export declare const MAX_BATCH_ADAPTERS = 256;
+/**
+ * Resolve and validate a directory path for MCP batch operations.
+ *
+ * Security checks (in order):
+ * 1. SIMPLE/stdio-only gate — rejects when transport is HTTP or auth is enabled.
+ * 2. Absolute path required.
+ * 3. No `..` segments after splitting.
+ * 4. Symlink resolution via `fs.realpathSync`.
+ * 5. Allowlist prefix check (env-configured or default fallback).
+ * 6. Must be an existing directory.
+ * 7. Depth cap.
+ *
+ * @throws Error with a clear message when any check fails.
+ * @returns The resolved absolute real path.
+ */
+export declare function resolveAndValidateDirectory(directory: string, operation: 'export' | 'train'): string;
+/**
+ * Scan a directory for `.md` files, optionally recursively.
+ * Returns absolute paths sorted alphabetically.
+ */
+export declare function scanMarkdownFiles(directory: string, recursive: boolean): string[];
+//# sourceMappingURL=directory-access.d.ts.map

package/dist/utils/directory-access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"directory-access.d.ts","sourceRoot":"","sources":["../../src/utils/directory-access.ts"],"names":[],"mappings":"AAWA,oDAAoD;AACpD,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAErC,2DAA2D;AAC3D,eAAO,MAAM,kBAAkB,MAAM,CAAC;AAEtC;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,2BAA2B,CACzC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,QAAQ,GAAG,OAAO,GAC5B,MAAM,CA2FR;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,OAAO,GACjB,MAAM,EAAE,CAsBV"}

package/dist/utils/directory-access.js

@@ -0,0 +1,153 @@
+/**
+ * Security-hardened directory access for MCP `directory` parameter.
+ *
+ * Only accepted in SIMPLE/stdio mode. Rejects symlink escapes, path traversal,
+ * and paths outside the configured allowlist. Every access is audit-logged.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import { TRANSPORT_TYPE, AUTH_ENABLED } from '../config/runtime-mode.js';
+import { structuredLogger } from './structured-logger.js';
+/** Maximum directory depth for batch operations. */
+export const MAX_DIRECTORY_DEPTH = 8;
+/** Maximum adapter count per batch directory operation. */
+export const MAX_BATCH_ADAPTERS = 256;
+/**
+ * Resolve and validate a directory path for MCP batch operations.
+ *
+ * Security checks (in order):
+ * 1. SIMPLE/stdio-only gate — rejects when transport is HTTP or auth is enabled.
+ * 2. Absolute path required.
+ * 3. No `..` segments after splitting.
+ * 4. Symlink resolution via `fs.realpathSync`.
+ * 5. Allowlist prefix check (env-configured or default fallback).
+ * 6. Must be an existing directory.
+ * 7. Depth cap.
+ *
+ * @throws Error with a clear message when any check fails.
+ * @returns The resolved absolute real path.
+ */
+export function resolveAndValidateDirectory(directory, operation) {
+    // 1. SIMPLE/stdio-only gate
+    if (TRANSPORT_TYPE !== 'stdio' || AUTH_ENABLED) {
+        throw new Error(`The "directory" parameter is only available in SIMPLE/stdio mode. ` +
+            `Current transport: ${TRANSPORT_TYPE}, auth: ${AUTH_ENABLED ? 'enabled' : 'disabled'}. ` +
+            `Remove the "directory" parameter and use inline content/URI arguments instead.`);
+    }
+    const trimmed = directory.trim();
+    if (!trimmed) {
+        throw new Error('"directory" must be a non-empty absolute path.');
+    }
+    // 2. Absolute path required
+    if (!path.isAbsolute(trimmed)) {
+        throw new Error(`"directory" must be an absolute path (got: "${trimmed}").`);
+    }
+    // 3. No .. segments
+    const segments = trimmed.split(path.sep).filter(Boolean);
+    if (segments.includes('..')) {
+        throw new Error(`"directory" must not contain ".." path segments.`);
+    }
+    // 4. Symlink resolution (only if path exists)
+    let resolved;
+    try {
+        resolved = fs.realpathSync(trimmed);
+    }
+    catch {
+        // Path doesn't exist yet — for export, the directory may need to be created.
+        // Resolve the parent to check for symlink escapes on the existing portion.
+        const parent = path.dirname(trimmed);
+        try {
+            const realParent = fs.realpathSync(parent);
+            resolved = path.join(realParent, path.basename(trimmed));
+        }
+        catch {
+            throw new Error(`"directory" parent path does not exist: "${parent}".`);
+        }
+    }
+    // 5. Allowlist prefix check
+    const allowlistEnvKey = operation === 'export'
+        ? 'SQUADRULES_ALLOWED_EXPORT_DIRS'
+        : 'SQUADRULES_ALLOWED_TRAIN_DIRS';
+    const allowlistRaw = process.env[allowlistEnvKey];
+    const allowedPrefixes = allowlistRaw
+        ? allowlistRaw.split(',').map((p) => p.trim()).filter(Boolean)
+        : getDefaultAllowedPrefixes();
+    const permitted = allowedPrefixes.some((prefix) => {
+        const realPrefix = safeRealpath(prefix);
+        const checkPrefix = realPrefix ?? prefix;
+        return resolved === checkPrefix || resolved.startsWith(checkPrefix + path.sep);
+    });
+    if (!permitted) {
+        throw new Error(`"directory" path "${resolved}" is not within the allowed directories. ` +
+            `Set ${allowlistEnvKey} to a comma-separated list of allowed absolute prefixes, ` +
+            `or use a path under the default locations.`);
+    }
+    // 6. Must be a directory (if it exists)
+    try {
+        const stat = fs.statSync(resolved);
+        if (!stat.isDirectory()) {
+            throw new Error(`"directory" path is not a directory: "${resolved}".`);
+        }
+    }
+    catch (error) {
+        if (error instanceof Error && error.message.startsWith('"directory" path is not')) {
+            throw error;
+        }
+        // Stat failed but realpath succeeded — directory may not exist yet (export case)
+    }
+    // 7. Depth cap
+    const depth = resolved.split(path.sep).filter(Boolean).length;
+    if (depth > MAX_DIRECTORY_DEPTH) {
+        throw new Error(`"directory" depth ${depth} exceeds maximum ${MAX_DIRECTORY_DEPTH}.`);
+    }
+    // Audit log
+    structuredLogger.getPinoLogger().info({ event: 'directory_access', operation, resolved_path: resolved, allowlist: allowedPrefixes }, `directory access: ${operation} → ${resolved}`);
+    return resolved;
+}
+/**
+ * Scan a directory for `.md` files, optionally recursively.
+ * Returns absolute paths sorted alphabetically.
+ */
+export function scanMarkdownFiles(directory, recursive) {
+    const results = [];
+    function walk(dir, currentDepth) {
+        if (currentDepth > MAX_DIRECTORY_DEPTH)
+            return;
+        const entries = fs.readdirSync(dir, { withFileTypes: true });
+        for (const entry of entries) {
+            if (entry.name.startsWith('.'))
+                continue;
+            const fullPath = path.join(dir, entry.name);
+            if (entry.isFile() && entry.name.endsWith('.md')) {
+                results.push(fullPath);
+                if (results.length > MAX_BATCH_ADAPTERS) {
+                    throw new Error(`Directory contains more than ${MAX_BATCH_ADAPTERS} .md files.`);
+                }
+            }
+            else if (entry.isDirectory() && recursive) {
+                walk(fullPath, currentDepth + 1);
+            }
+        }
+    }
+    walk(directory, 0);
+    return results.sort();
+}
+function getDefaultAllowedPrefixes() {
+    const prefixes = [];
+    const xdgConfig = process.env['XDG_CONFIG_HOME'] || path.join(process.env['HOME'] || '', '.config');
+    if (xdgConfig) {
+        prefixes.push(path.join(xdgConfig, 'squadrules'));
+    }
+    // Allow CWD project tree
+    prefixes.push(process.cwd());
+    return prefixes;
+}
+function safeRealpath(p) {
+    try {
+        return fs.realpathSync(p);
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=directory-access.js.map

package/dist/utils/directory-access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"directory-access.js","sourceRoot":"","sources":["../../src/utils/directory-access.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,oDAAoD;AACpD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAErC,2DAA2D;AAC3D,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAEtC;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,2BAA2B,CACzC,SAAiB,EACjB,SAA6B;IAE7B,4BAA4B;IAC5B,IAAI,cAAc,KAAK,OAAO,IAAI,YAAY,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CACb,oEAAoE;YACpE,sBAAsB,cAAc,WAAW,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,IAAI;YACxF,gFAAgF,CACjF,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IAED,4BAA4B;IAC5B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,+CAA+C,OAAO,KAAK,CAAC,CAAC;IAC/E,CAAC;IAED,oBAAoB;IACpB,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzD,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IAED,8CAA8C;IAC9C,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,6EAA6E;QAC7E,2EAA2E;QAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAC3C,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,4CAA4C,MAAM,IAAI,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,4BAA4B;IAC5B,MAAM,eAAe,GAAG,SAAS,KAAK,QAAQ;QAC5C,CAAC,CAAC,gCAAgC;QAClC,CAAC,CAAC,+BAA+B,CAAC;IACpC,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAClD,MAAM,eAAe,GAAG,YAAY;QAClC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QAC9D,CAAC,CAAC,yBAAyB,EAAE,CAAC;IAEhC,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;QAChD,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,WAAW,GAAG,UAAU,IAAI,MAAM,CAAC;QACzC,OAAO,QAAQ,KAAK,WAAW,IAAI,QAAQ,CAAC,UAAU,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,qBAAqB,QAAQ,2CAA2C;YACxE,OAAO,eAAe,2DAA2D;YACjF,4CAA4C,CAC7C,CAAC;IACJ,CAAC;IAED,wCAAwC;IACxC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,yCAAyC,QAAQ,IAAI,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,yBAAyB,CAAC,EAAE,CAAC;YAClF,MAAM,KAAK,CAAC;QACd,CAAC;QACD,iFAAiF;IACnF,CAAC;IAED,eAAe;IACf,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IAC9D,IAAI,KAAK,GAAG,mBAAmB,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,qBAAqB,KAAK,oBAAoB,mBAAmB,GAAG,CAAC,CAAC;IACxF,CAAC;IAED,YAAY;IACZ,gBAAgB,CAAC,aAAa,EAAE,CAAC,IAAI,CACnC,EAAE,KAAK,EAAE,kBAAkB,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,eAAe,EAAE,EAC7F,qBAAqB,SAAS,MAAM,QAAQ,EAAE,CAC/C,CAAC;IAEF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,SAAiB,EACjB,SAAkB;IAElB,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,SAAS,IAAI,CAAC,GAAW,EAAE,YAAoB;QAC7C,IAAI,YAAY,GAAG,mBAAmB;YAAE,OAAO;QAC/C,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjD,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACvB,IAAI,OAAO,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;oBACxC,MAAM,IAAI,KAAK,CAAC,gCAAgC,kBAAkB,aAAa,CAAC,CAAC;gBACnF,CAAC;YACH,CAAC;iBAAM,IAAI,KAAK,CAAC,WAAW,EAAE,IAAI,SAAS,EAAE,CAAC;gBAC5C,IAAI,CAAC,QAAQ,EAAE,YAAY,GAAG,CAAC,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACnB,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;AACxB,CAAC;AAED,SAAS,yBAAyB;IAChC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,CAAC,CAAC;IACpG,IAAI,SAAS,EAAE,CAAC;QACd,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,yBAAyB;IACzB,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7B,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@squadrules/mcp",
-  "version": "5.10.1",
+  "version": "5.12.0",
   "description": "SquadRules MCP server for agent automation: persistent memory and deterministic workflow execution for AI agents and chats",
   "type": "module",
   "main": "dist/index.js",
@@ -50,9 +50,7 @@
     "test:audit-fix-workflow": "bash tests/scripts/npm-audit-fix.test.sh",
     "test:automation": "node --test tests/scripts/*.test.mjs",
     "lint:workflows": "node scripts/lint-workflows.mjs",
-    "lint:renovate": "node scripts/ci-renovate.mjs validate",
     "ci:controller": "node scripts/ci-automation.mjs",
-    "ci:renovate": "node scripts/ci-renovate.mjs",
     "ci:audit": "node scripts/ci-audit.mjs",
     "ci:health": "node scripts/ci-health.mjs",
     "test:spec-parity": "NODE_OPTIONS=--experimental-vm-modules jest --runInBand --testPathPatterns tests/unit/spec-parity.test.ts",

package/dist/embed-docs/mem/create-new-protocol.md

@@ -1,44 +0,0 @@
----
-version: "5.10.1"
-slug: create-new-protocol
-title: Create New Protocol (Redirect to Author Adapter)
----
-
-# Create New Protocol (Redirect to Author Adapter)
-
-`create-new-protocol` was renamed to **`author-adapter`** in 5.6.0. This adapter
-is a redirect tombstone: it exists only so a stored adapter that still chains to
-`squadrules://adapter/create-new-protocol` resolves and is sent to the replacement
-instead of dangling. It carries no authoring logic. Do not author new adapters
-against this slug — use `squadrules://adapter/author-adapter`.
-
-## Activation Patterns
-
-**Typically invoked by:** a stored adapter that still forwards to the retired
-`create-new-protocol` slug.
-
-**Can be invoked directly when agent needs:**
-- "create new protocol" — the retired name for the author adapter
-
-**Must Never:**
-- Perform any authoring itself; this tombstone only redirects.
-- Be used as the target of a new adapter chain.
-
-**Must Always:**
-- Send the caller to `squadrules://adapter/author-adapter`, forwarding the same
-  context it received.
-
-## Redirect
-
-Forward to the replacement and continue the run there. `author-adapter` is the
-create / review / update lifecycle that replaced `create-new-protocol`; its
-integration rules live in the adapter itself. See ADR 0016 (the rename).
-
-```json
-{"contract":{"type":"mcp","mcp":{"tool_name":"forward","arguments":{"uri":"squadrules://adapter/author-adapter"}},"required":true}}
-```
-
-## Reward Signal
-
-The caller reached `squadrules://adapter/author-adapter`, so the retired slug
-resolved and redirected instead of dangling.

package/dist/embed-docs/mem/phase-critic-guide.md

@@ -1,42 +0,0 @@
----
-version: "5.10.1"
-slug: phase-critic-guide
-title: Phase Critic Guide (Redirect to Critic Loop Guide)
----
-
-# Phase Critic Guide (Redirect to Critic Loop Guide)
-
-`phase-critic-guide` was renamed to **`critic-loop-guide`** in 5.4.0. This is a
-redirect tombstone kept so the retired slug still resolves. It carries no rules
-of its own — read **`squadrules://adapter/critic-loop-guide`** for the current
-critic-loop integration, the solution-check-vs-critic decision table, and the
-proof-splitting rules. Do not author against this slug.
-
-## Activation Patterns
-
-**Typically invoked by:** an agent or adapter that still references the retired
-`phase-critic-guide` slug.
-
-**Can be invoked directly when agent needs:**
-- "phase critic guide" — the retired name for the critic-loop guide
-
-**Must Never:**
-- Restate the integration rules here; they live in `critic-loop-guide`.
-
-**Must Always:**
-- Point the reader to `squadrules://adapter/critic-loop-guide`.
-
-## Redirect
-
-`critic-loop-guide` is the single home for critic-loop integration and mutation
-gate placement. Activate `squadrules://adapter/critic-loop-guide` and read it
-there. See ADR 0010 (the rename) and ADR 0012 (why the tombstone is kept).
-
-```json
-{"contract":{"type":"comment","comment":{"min_length":40},"required":true}}
-```
-
-## Reward Signal
-
-The reader was directed to `squadrules://adapter/critic-loop-guide`, so the
-retired slug resolved instead of dangling.

package/dist/embed-docs/mem/phase-critic.md

@@ -1,46 +0,0 @@
----
-version: "5.10.1"
-slug: phase-critic
-title: Phase Critic (Redirect to Critic Loop)
----
-
-# Phase Critic (Redirect to Critic Loop)
-
-`phase-critic` was renamed to **`critic-loop`** in 5.4.0. This adapter is a
-redirect tombstone: it exists only so a stored adapter that still chains to
-`squadrules://adapter/phase-critic` resolves and is sent to the replacement
-instead of dangling. It carries no review logic. Do not author new adapters
-against this slug — use `squadrules://adapter/critic-loop`.
-
-## Activation Patterns
-
-**Typically invoked by:** a stored adapter that still forwards to the retired
-`phase-critic` slug.
-
-**Can be invoked directly when agent needs:**
-- "phase critic" — the retired name for the critic loop
-
-**Must Never:**
-- Perform a review itself; this tombstone only redirects.
-- Be used as the target of a new adapter chain.
-
-**Must Always:**
-- Send the caller to `squadrules://adapter/critic-loop`, forwarding the same
-  `work` submission (or the older-spelling `input_file`), `requirements`, and
-  `context` it received.
-
-## Redirect
-
-Forward to the replacement and continue the run there. `critic-loop` is the
-bounded, requirement-aware review that replaced `phase-critic`; its integration
-rules live in `critic-loop-guide`. See ADR 0010 (the rename) and ADR 0012 (why
-the tombstone is kept).
-
-```json
-{"contract":{"type":"mcp","mcp":{"tool_name":"forward","arguments":{"uri":"squadrules://adapter/critic-loop"}},"required":true}}
-```
-
-## Reward Signal
-
-The caller reached `squadrules://adapter/critic-loop`, so the retired slug
-resolved and redirected instead of dangling.

package/dist/embed-docs/mem/skill-format-guide.md

@@ -1,280 +0,0 @@
----
-version: "5.10.1"
-slug: skill-format-guide
-title: Skill Format and Local Authoring Guide
----
-
-
-
-# Skill Format and Local Authoring Guide
-
-Decision rules for authoring SKILL.md files, choosing between local (git) and
-server (SQUADRULES) storage, and quality gates for skill content. Fetches the
-current Agent Skills format spec (Context7 or agentskills.io) as the
-authoritative generic format, then layers SQUADRULES customizations on top. Loaded
-by protocol-authoring agents during drafting and review when the output format
-is `skill`.
-
-## Activation Patterns
-
-**Typically invoked by:** `author-adapter` and
-`critic-loop`.
-
-**Can be invoked directly when agent needs:**
-- "SKILL.md format reference" / "how to write a skill"
-- "latest SKILL.md spec" / "current agentskills format"
-- "skill vs adapter" / "local skill or SQUADRULES adapter"
-- "skill quality gates" / "SKILL.md structure"
-- "project-level skill" / "where to put a skill"
-
-**Trigger pattern:** **skill** + (format | structure | guide | quality | local | spec).
-
-**Must Never:**
-- Be used as an execution protocol.
-- Recommend storing a skill in both git AND SQUADRULES server simultaneously.
-- Confuse SKILL.md (agent instruction file) with protocol markdown (adapter).
-- Hardcode the generic SKILL.md format from memory when the current spec is
-  reachable via Context7 or agentskills.io.
-
-**Must Always:**
-- Be consulted before writing any SKILL.md file.
-- Fetch the current Agent Skills spec before authoring or reviewing generic
-  format, and apply SQUADRULES customizations after it.
-- Enforce single source of truth: each skill lives in exactly one place.
-- Match storage location to the skill's scope and discoverability needs.
-
-**Good trigger examples:**
-- drafting a new skill and need format rules → load this
-- reviewing a SKILL.md for quality → load this
-- deciding local vs server for a skill → load this
-
-**Bad trigger examples:**
-- "which challenge type for this step?" → use `challenge-type-guide`
-- "create a new protocol" → use `author-adapter`
-
-## Storage Decision
-
-Every skill has ONE home. Choose at authoring time. Never both.
-
-| Scope | Storage | Discovery | Source of Truth |
-|---|---|---|---|
-| Project-specific (deploy, test, release) | Git: `.agents/skills/{name}/` or `.cursor/skills/{name}/` | IDE host scans description field | Git repo |
-| Personal cross-project (universal) | SQUADRULES server via `train` | `activate` embedding search | SQUADRULES server |
-| Team/group shared | SQUADRULES server (group space) | `activate` | SQUADRULES server |
-
-### Decision Tree
-
-```
-Is this skill specific to ONE project's codebase?
- ├─ YES → Does it reference repo files, paths, or project-specific tools?
- │         ├─ YES → LOCAL (git)
- │         └─ NO  → Could it help in other projects?
- │                   ├─ YES → SERVER (SQUADRULES)
- │                   └─ NO  → LOCAL (git)
- └─ NO → SERVER (SQUADRULES)
-```
-
-### Local Storage Paths
-
-| Host | Path | Scope |
-|---|---|---|
-| Cursor IDE (project) | `.cursor/skills/{name}/SKILL.md` | Repo-scoped, git-controlled |
-| Cursor IDE (personal) | `~/.cursor/skills/{name}/SKILL.md` | User-wide, all projects |
-| Claude Code (project) | `.agents/skills/{name}/SKILL.md` | Repo-scoped, git-controlled |
-| Claude Code (personal) | `~/.agents/skills/{name}/SKILL.md` | User-wide, all projects |
-
-**Never** create skills in `~/.cursor/skills-cursor/` — reserved for system.
-
-### Promotion and Demotion
-
-**Local → Server (skill graduates to universal):**
-1. Read existing SKILL.md
-2. Optionally wrap in protocol structure (Activation Patterns, contracts)
-3. `train` to SQUADRULES server
-4. Delete local copy or mark deprecated
-5. Git commit the deletion
-
-**Server → Local (adapter becomes project-specific):**
-1. `export` with `format: skill_zip` or `format: markdown`
-2. Write to `.agents/skills/{slug}/SKILL.md`
-3. Optionally `delete` from server
-
-```json
-{"contract":{"type":"comment","comment":{"min_length":30},"required":true}}
-```
-
-## Fetch the Current Skill Format Spec
-
-Do NOT rely on a frozen copy of the SKILL.md format. The Agent Skills format
-evolves (new frontmatter fields, directory conventions, size guidance). Before
-authoring or reviewing a SKILL.md, fetch the **current** specification and treat
-it as authoritative for the generic format. The SQUADRULES customizations in the
-sections *after* this one layer on top of that generic spec.
-
-**Authoritative source (fetch fresh — do not guess):**
-
-1. **Context7 (preferred):** query the Agent Skills docs library for the
-   SKILL.md format. Use one of these library IDs directly (skip
-   `resolve-library-id`):
-   - `/llmstxt/agentskills_io_llms-full_txt` — full spec text (best coverage)
-   - `/websites/agentskills_io` — the agentskills.io site docs
-   Example query: "SKILL.md frontmatter fields, directory structure, size limits".
-2. **URL fallback:** if Context7 is unavailable or returns nothing usable,
-   fetch `https://agentskills.io/specification`. Use
-   `https://agentskills.io/llms.txt` as the documentation index to discover
-   related pages.
-
-**What to extract from the fetched spec (do not hardcode from memory):**
-- Required and optional YAML frontmatter fields and their constraints
-  (for example `name`, `description`, and any newer fields such as `license`,
-  `compatibility`, `metadata`, `allowed-tools`).
-- Directory structure and conventional subdirectory names
-  (for example `scripts/`, `references/`, `assets/`).
-- Body content recommendations and section guidance.
-- Size / progressive-disclosure guidance (line and token targets).
-- Any spec-provided validation tooling (for example `skills-ref validate`).
-
-**Rules:**
-- Apply the fetched spec's constraints exactly for the generic format.
-- If the fetch fails on BOTH Context7 and the URL, STOP and tell the user the
-  spec is unreachable — do not fabricate field lists or limits from memory.
-- Record which source and (if available) which version/date you fetched, so the
-  authoring decision is auditable.
-
-```json
-{"contract":{"type":"comment","comment":{"min_length":30},"required":true}}
-```
-
-## SQUADRULES Customizations (apply after the generic spec)
-
-Everything below is SQUADRULES-specific and layers on top of the fetched Agent
-Skills spec. When the generic spec and these rules disagree on generic format,
-follow the spec; these rules add SQUADRULES storage, integrity, and routing
-behavior the generic spec does not cover.
-
-### SQUADRULES additions to structure
-
-- **`SHA256SUMS`** — required for SQUADRULES-exported skill bundles (GNU
-  `sha256sum` format, paths relative to the skill dir). This is a SQUADRULES
-  integrity requirement, not part of the generic Agent Skills spec.
-- **`disable-model-invocation`** — when the host supports it, SQUADRULES-authored
-  skills default this to `true` (explicit load only) unless the skill is meant
-  to auto-trigger. Only add fields the fetched spec actually recognizes.
-- **Reference depth** — keep references one level deep (SKILL.md → reference
-  file, never deeper), consistent with the spec's progressive-disclosure model.
-
-```json
-{"contract":{"type":"comment","comment":{"min_length":30},"required":true}}
-```
-
-## Quality Gates
-
-### Description Quality
-
-The description is the primary discovery mechanism. It must:
-
-1. Be written in **third person** (not "I can help" or "you can use")
-2. State **WHAT** the skill does (specific capabilities)
-3. State **WHEN** to use it (trigger scenarios, file patterns, keywords)
-4. Include **trigger terms** that match real user language
-5. Avoid vague words: "helps with", "assists", "various"
-
-**Good:**
-```yaml
-description: >-
-  Validate and publish Confluence pages managed as local markdown via Mark CLI.
-  Use when the user asks to dry-run, validate, publish, or sync a Confluence
-  page, or when working with files under confluence/ that have Mark metadata.
-```
-
-**Bad:**
-```yaml
-description: Helps with Confluence stuff.
-```
-
-### Content Quality
-
-| Check | Rule |
-|---|---|
-| Consistent terminology | One term per concept throughout |
-| No time-sensitive info | No "before August 2025" conditions |
-| Concrete examples | Real inputs/outputs, not abstract |
-| Actionable instructions | Agent knows what to DO, not just what exists |
-| Default tool choice | One recommended tool, escape hatch for alternatives |
-| No Windows paths | Forward slashes only |
-
-### Degree of Freedom
-
-Match instruction specificity to the task's fragility:
-
-| Level | When | Example |
-|---|---|---|
-| High (text guidelines) | Multiple valid approaches | Code review guidelines |
-| Medium (templates/pseudocode) | Preferred pattern, acceptable variation | Report generation |
-| Low (exact scripts) | Fragile operations, consistency critical | DB migrations |
-
-```json
-{"contract":{"type":"comment","comment":{"min_length":30},"required":true}}
-```
-
-## Finalisation Paths
-
-### Path A: Local Write (project-level skill)
-
-When `{target}=local`:
-
-1. Determine output path from scope:
-   - Project Cursor: `.cursor/skills/{name}/SKILL.md`
-   - Project Claude: `.agents/skills/{name}/SKILL.md`
-   - Personal: `~/.cursor/skills/{name}/SKILL.md` or `~/.agents/skills/{name}/`
-2. Create directory if needed
-3. Write SKILL.md with frontmatter and body
-4. Generate `SHA256SUMS` (GNU sha256sum format, paths relative to skill dir)
-5. Write any reference files and scripts
-6. Verify: `test -f "{path}/SKILL.md" && wc -l "{path}/SKILL.md"`
-7. Report path and line count to user
-
-Do NOT call `train`. The skill lives only in git.
-
-### Path B: Server Train (SQUADRULES-routable adapter)
-
-When `{target}=server`:
-
-1. Wrap skill content in protocol markdown if needed:
-   - Add Activation Patterns (first H2)
-   - Add contract blocks per layer
-   - Add Reward Signal (last H2)
-2. Call `train` with full markdown
-3. Verify adapter URI returned
-4. Report URI and slug to user
-
-Do NOT write to local disk. The adapter lives only in SQUADRULES.
-
-### Path C: Hybrid Authoring (skill that is also an adapter)
-
-When `{target}=hybrid` (rare — use only when explicitly requested):
-
-1. Author as a SQUADRULES protocol (Activation Patterns, contracts, Reward Signal)
-2. `train` to server
-3. `export` with `format: skill_zip` to produce local SKILL.md bundle
-4. The exported SKILL.md is a **read-only derived artifact**, not a source of truth
-5. Document in the SKILL.md header that it was exported from SQUADRULES
-
-```json
-{"contract":{"type":"comment","comment":{"min_length":30},"required":true}}
-```
-
-## Reward Signal
-
-Only reachable after all prior steps are solved.
-
-The agent can now:
-1. Fetch the current Agent Skills spec (Context7 or agentskills.io) instead of
-   relying on a frozen copy, and apply it as the authoritative generic format
-2. Layer the SQUADRULES customizations (storage, `SHA256SUMS`, routing) on top of
-   that fetched spec
-3. Choose the correct storage location for a skill
-4. Author SKILL.md with valid frontmatter and structure per the current spec
-5. Apply quality gates to descriptions and content
-6. Finalize via local write OR server train (never both)
-7. Produce SHA256SUMS for integrity verification