@vextlabs/theron-cli 0.2.1 → 0.4.0

package/dist/verifiers/promoted_kernels.js

@@ -0,0 +1,190 @@
+// Promoted kernels — the remaining verifier slugs that used to be inert aliases
+// of style_lint, now given real, domain-specific logic. All are WARN-level
+// (quality nudges surfaced after the turn, never hard blocks) and deliberately
+// conservative: each fires only on a clear, high-signal violation so it never
+// punishes already-good output. They read ctx.profile to scope themselves.
+const has = (re, s) => re.test(s);
+const SUBSTANTIVE = 240;
+// ── claim_grounding ─────────────────────────────────────────────────────────
+// Absolute claims ("always", "proven", "guarantees") should be qualified or
+// cited. Fires when an absolute claim appears with neither a citation nor a
+// hedge anywhere in its sentence.
+const CLAIM_PROFILES = new Set(["research", "academic", "policy", "medical", "science", "business", "legal", "strategy"]);
+const ABSOLUTE = /\b(always|never|guarantees?|guaranteed|proven|proves|certainly|undeniably|definitely|undoubtedly|everyone|no one|nobody|impossible|all\s+\w+\s+are|every\s+\w+\s+(is|are))\b/i;
+const GROUNDING = /(https?:\/\/|\bdoi\b|\[\d+\]|§|\baccording to\b|\bper\b\s|\bcites?\b|\(\d{4}\)|\bevidence\b|\bstud(y|ies)\b|\bdata\b)/i;
+const HEDGE = /\b(likely|probabl|may|might|could|tends? to|generally|often|usually|in most|appears?|suggests?|typically|can\b)\b/i;
+export const claimGroundingKernel = {
+    slug: "claim_grounding",
+    describe: "Flag absolute claims that carry neither a citation nor a qualifier",
+    async run(ctx) {
+        if (!CLAIM_PROFILES.has(ctx.profile))
+            return [];
+        const text = ctx.assistantText ?? "";
+        if (text.trim().length < SUBSTANTIVE)
+            return [];
+        for (const sentence of text.split(/(?<=[.!?])\s+/)) {
+            if (ABSOLUTE.test(sentence) && !GROUNDING.test(sentence) && !HEDGE.test(sentence)) {
+                return [{
+                        severity: "warn",
+                        kernel: "claim_grounding",
+                        message: `Absolute claim without grounding: "${sentence.trim().slice(0, 90)}…". Cite a source or qualify it (scope/conditions/likelihood).`,
+                    }];
+            }
+        }
+        return [];
+    },
+};
+// ── assumption_marked ───────────────────────────────────────────────────────
+// Quantitative conclusions (projections, valuations, computed results) must
+// state their assumptions. Fires when a computed conclusion appears with no
+// assumptions block anywhere.
+const ASSUMP_PROFILES = new Set(["finance", "data", "realtor", "engineer", "strategy", "investor", "trader", "business"]);
+const COMPUTED = /\b(projection|forecast|estimat|valuation|NPV|IRR|ROI|LTV|CAC|cap rate|cash[- ]on[- ]cash|DSCR|TAM|SAM|SOM|breakeven|payback|runway|burn|multiple)\b/i;
+// Prefix matches (assum→assuming, hypothes→hypotheses) — leading \b only, NO
+// trailing \b (a trailing boundary would break "Assuming"/"hypotheses").
+const ASSUMPTIONS = /\b(assum|given|inputs?|hypothes|all else equal|ceteris paribus|baseline|scenario|holding|we take|at\s+\d+\s*%|with\s+[\$]?\d)/i;
+// An explicit worked derivation (an equation with numbers, or several figures)
+// already exposes its inputs — don't double-flag a shown calculation.
+const DERIVATION = /=\s*[-$€£]?\d/;
+const numberCount = (s) => (s.match(/\d/g) ?? []).length;
+export const assumptionMarkedKernel = {
+    slug: "assumption_marked",
+    describe: "Flag quantitative conclusions stated without inputs/assumptions or a shown derivation",
+    async run(ctx) {
+        if (!ASSUMP_PROFILES.has(ctx.profile))
+            return [];
+        const text = ctx.assistantText ?? "";
+        if (text.trim().length < SUBSTANTIVE)
+            return [];
+        const shownWork = has(DERIVATION, text) || numberCount(text) >= 4;
+        if (has(COMPUTED, text) && !has(ASSUMPTIONS, text) && !shownWork) {
+            return [{
+                    severity: "warn",
+                    kernel: "assumption_marked",
+                    message: "A quantitative conclusion is given without stating its inputs/assumptions or showing the derivation. List the inputs (growth, rate, vacancy, churn, etc.) so the number is auditable.",
+                }];
+        }
+        return [];
+    },
+};
+// ── unit_consistency ────────────────────────────────────────────────────────
+// In quantitative/physical domains a measurement noun followed by a bare number
+// (no unit, %, or currency) is usually a missing unit. High-signal: requires the
+// measurement noun adjacent to the bare number.
+const UNIT_PROFILES = new Set(["engineer", "data", "realtor", "math", "science", "trader", "finance"]);
+const MEASURE_BARE = /\b(temperature|distance|length|width|height|depth|weight|mass|force|pressure|voltage|current|power|speed|velocity|area|volume|frequency|energy|torque|density|wavelength|load)\b[^.\n]{0,18}?\b(\d+(?:\.\d+)?)\b(?!\s*(?:%|°|[a-zA-Zµ°Ω$€£/]))/i;
+export const unitConsistencyKernel = {
+    slug: "unit_consistency",
+    describe: "Flag a physical quantity stated as a bare number with no unit",
+    async run(ctx) {
+        if (!UNIT_PROFILES.has(ctx.profile))
+            return [];
+        const text = ctx.assistantText ?? "";
+        if (text.trim().length < SUBSTANTIVE)
+            return [];
+        const m = text.match(MEASURE_BARE);
+        if (m) {
+            return [{
+                    severity: "warn",
+                    kernel: "unit_consistency",
+                    message: `A measured quantity appears without a unit near "${m[0].trim().slice(0, 50)}". Attach units (and keep them consistent) for every physical/financial quantity.`,
+                }];
+        }
+        return [];
+    },
+};
+// ── sentence_variance ───────────────────────────────────────────────────────
+// Uniform sentence length reads as monotone, machine-generated prose. Fires when
+// many sentences have a very low length coefficient-of-variation.
+const PROSE_PROFILES = new Set(["writing", "creative", "marketing", "influencer", "sales"]);
+export const sentenceVarianceKernel = {
+    slug: "sentence_variance",
+    describe: "Flag monotone, uniform-length sentences (a machine-text tell)",
+    async run(ctx) {
+        if (!PROSE_PROFILES.has(ctx.profile))
+            return [];
+        const text = ctx.assistantText ?? "";
+        const lens = text
+            .split(/(?<=[.!?])\s+/)
+            .map((s) => s.trim().split(/\s+/).filter(Boolean).length)
+            .filter((n) => n >= 3);
+        if (lens.length < 6)
+            return [];
+        const mean = lens.reduce((a, b) => a + b, 0) / lens.length;
+        if (mean < 5)
+            return [];
+        const sd = Math.sqrt(lens.reduce((a, b) => a + (b - mean) ** 2, 0) / lens.length);
+        const cv = sd / mean;
+        if (cv < 0.28) {
+            return [{
+                    severity: "warn",
+                    kernel: "sentence_variance",
+                    message: `Sentences are uniform in length (low rhythm variance). Mix short and long sentences — vary the cadence so it doesn't read as machine-generated.`,
+                }];
+        }
+        return [];
+    },
+};
+// ── component_states_complete ───────────────────────────────────────────────
+// A UI component spec that lists some interaction states but omits the
+// accessibility-critical focus/disabled states is incomplete.
+const DESIGN_PROFILES = new Set(["design"]);
+const COMPONENT = /\b(component|button|input|field|modal|dropdown|toggle|checkbox|radio|menu|card|form|tab|slider|switch)\b/i;
+export const componentStatesCompleteKernel = {
+    slug: "component_states_complete",
+    describe: "Flag a component spec missing focus/disabled (or other) states",
+    async run(ctx) {
+        if (!DESIGN_PROFILES.has(ctx.profile))
+            return [];
+        const text = ctx.assistantText ?? "";
+        if (text.trim().length < SUBSTANTIVE || !COMPONENT.test(text))
+            return [];
+        const states = ["default", "hover", "focus", "active", "disabled", "loading", "error", "selected", "pressed"];
+        const present = states.filter((s) => new RegExp(`\\b${s}\\b`, "i").test(text));
+        if (present.length === 0)
+            return []; // not a state-level spec at all
+        const missing = ["focus", "disabled"].filter((s) => !present.includes(s));
+        if (missing.length) {
+            return [{
+                    severity: "warn",
+                    kernel: "component_states_complete",
+                    message: `Component spec lists states (${present.join(", ")}) but is missing: ${missing.join(", ")}. Enumerate every interaction state — focus + disabled are accessibility-critical.`,
+                }];
+        }
+        return [];
+    },
+};
+// ── token_lint ──────────────────────────────────────────────────────────────
+// Design output should reference design tokens, not hardcoded colors/sizes.
+const HARDCODED_HEX = /#[0-9a-fA-F]{3,8}\b/g;
+export const tokenLintKernel = {
+    slug: "token_lint",
+    describe: "Flag hardcoded colors/sizes in design output (use tokens)",
+    async run(ctx) {
+        if (!DESIGN_PROFILES.has(ctx.profile))
+            return [];
+        const text = ctx.assistantText ?? "";
+        if (text.trim().length < SUBSTANTIVE)
+            return [];
+        const hexes = text.match(HARDCODED_HEX) ?? [];
+        // Allow a stray reference; flag when there are several raw hex values AND
+        // no token usage at all.
+        if (hexes.length >= 2 && !/var\(--|tokens?\.|\$[a-z-]+\b/i.test(text)) {
+            return [{
+                    severity: "warn",
+                    kernel: "token_lint",
+                    message: `Found ${hexes.length} hardcoded colors (${[...new Set(hexes)].slice(0, 3).join(", ")}…) and no design-token usage. Reference tokens (e.g. var(--color-...)) instead of literals.`,
+                }];
+        }
+        return [];
+    },
+};
+export const PROMOTED_KERNELS = [
+    claimGroundingKernel,
+    assumptionMarkedKernel,
+    unitConsistencyKernel,
+    sentenceVarianceKernel,
+    componentStatesCompleteKernel,
+    tokenLintKernel,
+];
+//# sourceMappingURL=promoted_kernels.js.map

package/dist/verifiers/promoted_kernels.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"promoted_kernels.js","sourceRoot":"","sources":["../../src/verifiers/promoted_kernels.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,2EAA2E;AAC3E,+EAA+E;AAC/E,8EAA8E;AAC9E,2EAA2E;AAI3E,MAAM,GAAG,GAAG,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClD,MAAM,WAAW,GAAG,GAAG,CAAC;AAExB,+EAA+E;AAC/E,4EAA4E;AAC5E,4EAA4E;AAC5E,kCAAkC;AAClC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;AAC1H,MAAM,QAAQ,GAAG,+KAA+K,CAAC;AACjM,MAAM,SAAS,GAAG,wHAAwH,CAAC;AAC3I,MAAM,KAAK,GAAG,oHAAoH,CAAC;AACnI,MAAM,CAAC,MAAM,oBAAoB,GAAa;IAC5C,IAAI,EAAE,iBAAiB;IACvB,QAAQ,EAAE,oEAAoE;IAC9E,KAAK,CAAC,GAAG,CAAC,GAAoB;QAC5B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,WAAW;YAAE,OAAO,EAAE,CAAC;QAChD,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;YACnD,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAClF,OAAO,CAAC;wBACN,QAAQ,EAAE,MAAM;wBAChB,MAAM,EAAE,iBAAiB;wBACzB,OAAO,EAAE,sCAAsC,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,gEAAgE;qBAC5I,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;CACF,CAAC;AAEF,+EAA+E;AAC/E,4EAA4E;AAC5E,4EAA4E;AAC5E,8BAA8B;AAC9B,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;AAC1H,MAAM,QAAQ,GAAG,sJAAsJ,CAAC;AACxK,6EAA6E;AAC7E,yEAAyE;AACzE,MAAM,WAAW,GAAG,gIAAgI,CAAC;AACrJ,+EAA+E;AAC/E,sEAAsE;AACtE,MAAM,UAAU,GAAG,eAAe,CAAC;AACnC,MAAM,WAAW,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;AACjE,MAAM,CAAC,MAAM,sBAAsB,GAAa;IAC9C,IAAI,EAAE,mBAAmB;IACzB,QAAQ,EAAE,uFAAuF;IACjG,KAAK,CAAC,GAAG,CAAC,GAAoB;QAC5B,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,WAAW;YAAE,OAAO,EAAE,CAAC;QAChD,MAAM,SAAS,GAAG,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClE,IAAI,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACjE,OAAO,CAAC;oBACN,QAAQ,EAAE,MAAM;oBAChB,MAAM,EAAE,mBAAmB;oBAC3B,OAAO,EAAE,uLAAuL;iBACjM,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;CACF,CAAC;AAEF,+EAA+E;AAC/E,gFAAgF;AAChF,iFAAiF;AACjF,gDAAgD;AAChD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AACvG,MAAM,YAAY,GAAG,iPAAiP,CAAC;AACvQ,MAAM,CAAC,MAAM,qBAAqB,GAAa;IAC7C,IAAI,EAAE,kBAAkB;IACxB,QAAQ,EAAE,+DAA+D;IACzE,KAAK,CAAC,GAAG,CAAC,GAAoB;QAC5B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,CAAC;QAC/C,MAAM,IAAI,GAAG,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,WAAW;YAAE,OAAO,EAAE,CAAC;QAChD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACnC,IAAI,CAAC,EAAE,CAAC;YACN,OAAO,CAAC;oBACN,QAAQ,EAAE,MAAM;oBAChB,MAAM,EAAE,kBAAkB;oBAC1B,OAAO,EAAE,oDAAoD,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,mFAAmF;iBACzK,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;CACF,CAAC;AAEF,+EAA+E;AAC/E,iFAAiF;AACjF,kEAAkE;AAClE,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;AAC5F,MAAM,CAAC,MAAM,sBAAsB,GAAa;IAC9C,IAAI,EAAE,mBAAmB;IACzB,QAAQ,EAAE,+DAA+D;IACzE,KAAK,CAAC,GAAG,CAAC,GAAoB;QAC5B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI;aACd,KAAK,CAAC,eAAe,CAAC;aACtB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;aACxD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACzB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3D,IAAI,IAAI,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;QACxB,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAClF,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QACrB,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;YACd,OAAO,CAAC;oBACN,QAAQ,EAAE,MAAM;oBAChB,MAAM,EAAE,mBAAmB;oBAC3B,OAAO,EAAE,iJAAiJ;iBAC3J,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;CACF,CAAC;AAEF,+EAA+E;AAC/E,uEAAuE;AACvE,8DAA8D;AAC9D,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC5C,MAAM,SAAS,GAAG,2GAA2G,CAAC;AAC9H,MAAM,CAAC,MAAM,6BAA6B,GAAa;IACrD,IAAI,EAAE,2BAA2B;IACjC,QAAQ,EAAE,gEAAgE;IAC1E,KAAK,CAAC,GAAG,CAAC,GAAoB;QAC5B,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,WAAW,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,CAAC;QACzE,MAAM,MAAM,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;QAC9G,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC,CAAC,gCAAgC;QACrE,MAAM,OAAO,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1E,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO,CAAC;oBACN,QAAQ,EAAE,MAAM;oBAChB,MAAM,EAAE,2BAA2B;oBACnC,OAAO,EAAE,gCAAgC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,oFAAoF;iBACvL,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;CACF,CAAC;AAEF,+EAA+E;AAC/E,4EAA4E;AAC5E,MAAM,aAAa,GAAG,sBAAsB,CAAC;AAC7C,MAAM,CAAC,MAAM,eAAe,GAAa;IACvC,IAAI,EAAE,YAAY;IAClB,QAAQ,EAAE,2DAA2D;IACrE,KAAK,CAAC,GAAG,CAAC,GAAoB;QAC5B,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,WAAW;YAAE,OAAO,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;QAC9C,0EAA0E;QAC1E,yBAAyB;QACzB,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACtE,OAAO,CAAC;oBACN,QAAQ,EAAE,MAAM;oBAChB,MAAM,EAAE,YAAY;oBACpB,OAAO,EAAE,SAAS,KAAK,CAAC,MAAM,sBAAsB,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,6FAA6F;iBAC5L,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAe;IAC1C,oBAAoB;IACpB,sBAAsB;IACtB,qBAAqB;IACrB,sBAAsB;IACtB,6BAA6B;IAC7B,eAAe;CAChB,CAAC"}

package/dist/verifiers/source_gate.d.ts

@@ -0,0 +1,2 @@
+import type { Verifier } from "./types.js";
+export declare const sourceGateKernel: Verifier;

package/dist/verifiers/source_gate.js

@@ -0,0 +1,125 @@
+// Source-gate verifier — the soft teeth behind the "don't recite from
+// memory" move that runs across every Claude-quality domain.
+//
+// The throughline: when you assert a CANONICAL fact about a specific system,
+// spec, standard, API, config, or codebase — the kind of fact that has an
+// authoritative source you could open and read — you should have READ that
+// source this turn, not recited it from training memory (which drifts,
+// version-skews, and hallucinates exact signatures/flags/section numbers).
+// This is the cheapest, highest-leverage discipline in the whole set: read
+// the source before asserting.
+//
+// Unlike citation_gate (hard BLOCK on regulated facts) and calc_gate (hard
+// BLOCK on bare computed numbers), this one only WARNS. Canonical recall is
+// often fine — the model frequently does know the exact flag — and a hard
+// block here would be too noisy. The warn nudges the model (and the user)
+// toward "let me Read the actual file/spec to confirm" without halting the
+// loop.
+//
+// How it works:
+//   1. Scan the output for CANONICAL-RECALL language: a confident assertion
+//      about a specific named system/spec/standard's exact behavior — "the
+//      RFC says", "per the spec", "the default value is", "the flag is named",
+//      "section 4.2 of the standard", "the function signature is", "the env
+//      var is", "the config key is".
+//   2. Check whether the turn shows evidence the SOURCE was actually consulted:
+//      a Read/Grep tool ran on a relevant file (touchedFiles or a read marker
+//      in the text), a fenced quote FROM the source, a URL/cite, or explicit
+//      "I read/checked the source" language.
+//   3. A canonical-recall assertion with NO sign the source was read is a WARN
+//      — surfaced so the model self-corrects toward reading it, never blocking.
+//
+// Conservative by design: it only fires on assertions about a SPECIFIC named
+// source's exact contents, and the source-consulted evidence is generous
+// (reading ANY file this turn, quoting, or linking all count). General
+// explanations, opinions, and the model's own reasoning never trip it.
+// Broad set — the "read the source first" discipline is universal, but it's
+// most load-bearing where exact canonical detail matters: code/spec/standards
+// work and the research/regulated lanes. Writing/creative/therapy don't have a
+// "canonical source" to recite, so they're excluded to keep noise down.
+const APPLIES_TO_PROFILES = new Set([
+    "code",
+    "security",
+    "pentest",
+    "ops",
+    "engineer",
+    "architect",
+    "data",
+    "legal",
+    "research",
+    "academic",
+    "science",
+    "policy",
+    "medical",
+    // education profile (slug `tutor`): read the source before teaching it.
+    "tutor",
+    // strategy/design domains: a recommendation or design choice that recites a
+    // market "fact" / canonical pattern from memory should reference its source.
+    "design",
+    "business",
+    "product",
+]);
+const MIN_LENGTH_TO_GATE = 160;
+// CANONICAL-RECALL language: a confident assertion about a specific named
+// system/spec/standard's exact contents — the kind of thing you'd want to
+// open the source to confirm rather than recite.
+const CLAIM_PATTERNS = [
+    // "the RFC/spec/standard says/states/requires/defines ..."
+    /\b(?:the\s+)?(?:RFC\s*\d*|spec(?:ification)?|standard|protocol|the\s+docs?|documentation|the\s+manual|man\s+page|the\s+API\s+docs?)\b[^.\n]{0,40}\b(?:says?|states?|requires?|defines?|specifies?|mandates?|describes?|documents?)\b/i,
+    // "section/§ 4.2 of the standard ..." — a precise section reference asserted from memory
+    /\b(?:section|§|clause|article|chapter)\s*\d[\d.]*\b[^.\n]{0,30}\b(?:of\s+the|requires?|states?|says?|covers?|defines?)\b/i,
+    // "the default (value|setting|port|timeout) is X" — an exact canonical default
+    /\bthe\s+default\s+(?:value|setting|port|timeout|behavior|config(?:uration)?|option)\b[^.\n]{0,20}\bis\b/i,
+    // "the flag/env var/config key/parameter is named X" — exact identifier recall
+    /\b(?:the\s+)?(?:flag|env(?:ironment)?\s+var(?:iable)?|config(?:uration)?\s+(?:key|option|value)|parameter|argument|option|field|header|method|endpoint)\b[^.\n]{0,20}\b(?:is\s+(?:named|called)|is\s+`|defaults?\s+to|must\s+be|should\s+be|takes?)\b/i,
+    // "the function/signature/return type is ..." — exact API shape from memory
+    /\b(?:the\s+)?(?:function\s+signature|method\s+signature|return\s+type|the\s+signature|the\s+interface|the\s+schema|the\s+type)\b[^.\n]{0,20}\bis\b/i,
+    // "per the OWASP/ISO/IEEE/NIST/POSIX ... " naming a standards body's exact requirement
+    /\b(?:per|according\s+to|under)\s+(?:the\s+)?(?:OWASP|ISO|IEC|IEEE|NIST|POSIX|W3C|ECMA|ANSI|the\s+RFC)\b[^.\n]{0,40}\b(?:requires?|says?|states?|defines?|mandates?|category)\b/i,
+];
+// Source-consulted evidence — any sign the model actually opened the source
+// this turn rather than reciting it.
+const SOURCE_CONSULTED = [
+    /```[\s\S]*?```/, // a fenced quote FROM the source
+    /\bhttps?:\/\/\S+/, // a link to the source
+    /\[[^\]]+\]\(\S+\)/, // a markdown link
+    /\b(?:I\s+(?:read|checked|opened|grepped|searched|verified|confirmed)|reading|let\s+me\s+(?:read|check|grep|open))\b[^.\n]{0,40}\b(?:the\s+)?(?:file|source|spec|docs?|RFC|standard|code|config|man\s+page|repo)\b/i,
+    /\b(?:from|in|per)\s+(?:the\s+)?(?:file|source|repo|line\s+\d+|`[^`]+`)\b/i, // "from the file …" / "in `x.ts` line 12"
+    /\b[\w./-]+\.(?:ts|tsx|js|jsx|py|go|rs|java|c|cpp|h|json|ya?ml|toml|md|txt|conf|cfg|ini|sh)\b/i, // a concrete filename referenced
+    /\b(?:line|L)\s*\d+\b/i, // a line-number reference (read evidence)
+];
+function anyMatch(patterns, text) {
+    return patterns.some((re) => re.test(text));
+}
+export const sourceGateKernel = {
+    slug: "source_gate",
+    describe: "Canonical recall: an assertion about a specific system/spec/standard's exact contents should reference reading the source — warns when it recites from memory",
+    async run(ctx) {
+        if (!APPLIES_TO_PROFILES.has(ctx.profile))
+            return [];
+        const text = ctx.assistantText;
+        if (text.length < MIN_LENGTH_TO_GATE)
+            return [];
+        // Is there a canonical-recall assertion at all?
+        const claimMatch = CLAIM_PATTERNS.map((re) => re.exec(text)).find(Boolean);
+        if (!claimMatch)
+            return [];
+        // If the model READ a file this turn, the source was consulted by definition — don't warn.
+        if ((ctx.readFiles && ctx.readFiles.length > 0) || (ctx.touchedFiles && ctx.touchedFiles.length > 0))
+            return [];
+        // Did the text itself show the source was consulted (quote / link /
+        // filename / "I read the file")?
+        if (anyMatch(SOURCE_CONSULTED, text))
+            return [];
+        return [
+            {
+                severity: "warn",
+                kernel: "source_gate",
+                message: `Canonical claim ("${claimMatch[0].slice(0, 60).trim()}…") was asserted with no sign the source was read. ` +
+                    `Don't recite specs/standards/signatures/defaults from memory — they drift and version-skew. ` +
+                    `Read the actual file/spec/docs and quote or cite it, or flag the claim as from-memory and unverified.`,
+            },
+        ];
+    },
+};
+//# sourceMappingURL=source_gate.js.map

package/dist/verifiers/source_gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source_gate.js","sourceRoot":"","sources":["../../src/verifiers/source_gate.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,6DAA6D;AAC7D,EAAE;AACF,6EAA6E;AAC7E,0EAA0E;AAC1E,2EAA2E;AAC3E,uEAAuE;AACvE,2EAA2E;AAC3E,2EAA2E;AAC3E,+BAA+B;AAC/B,EAAE;AACF,2EAA2E;AAC3E,4EAA4E;AAC5E,0EAA0E;AAC1E,0EAA0E;AAC1E,2EAA2E;AAC3E,QAAQ;AACR,EAAE;AACF,gBAAgB;AAChB,4EAA4E;AAC5E,2EAA2E;AAC3E,+EAA+E;AAC/E,4EAA4E;AAC5E,qCAAqC;AACrC,gFAAgF;AAChF,8EAA8E;AAC9E,6EAA6E;AAC7E,6CAA6C;AAC7C,+EAA+E;AAC/E,gFAAgF;AAChF,EAAE;AACF,6EAA6E;AAC7E,yEAAyE;AACzE,uEAAuE;AACvE,uEAAuE;AAIvE,4EAA4E;AAC5E,8EAA8E;AAC9E,+EAA+E;AAC/E,wEAAwE;AACxE,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,MAAM;IACN,UAAU;IACV,SAAS;IACT,KAAK;IACL,UAAU;IACV,WAAW;IACX,MAAM;IACN,OAAO;IACP,UAAU;IACV,UAAU;IACV,SAAS;IACT,QAAQ;IACR,SAAS;IACT,wEAAwE;IACxE,OAAO;IACP,4EAA4E;IAC5E,6EAA6E;IAC7E,QAAQ;IACR,UAAU;IACV,SAAS;CACV,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAE/B,0EAA0E;AAC1E,0EAA0E;AAC1E,iDAAiD;AACjD,MAAM,cAAc,GAAa;IAC/B,2DAA2D;IAC3D,uOAAuO;IACvO,yFAAyF;IACzF,2HAA2H;IAC3H,+EAA+E;IAC/E,0GAA0G;IAC1G,+EAA+E;IAC/E,wPAAwP;IACxP,4EAA4E;IAC5E,qJAAqJ;IACrJ,uFAAuF;IACvF,iLAAiL;CAClL,CAAC;AAEF,4EAA4E;AAC5E,qCAAqC;AACrC,MAAM,gBAAgB,GAAa;IACjC,gBAAgB,EAA+C,iCAAiC;IAChG,kBAAkB,EAA6C,uBAAuB;IACtF,mBAAmB,EAA4C,kBAAkB;IACjF,oNAAoN;IACpN,2EAA2E,EAAE,0CAA0C;IACvH,+FAA+F,EAAE,iCAAiC;IAClI,uBAAuB,EAAwC,0CAA0C;CAC1G,CAAC;AAEF,SAAS,QAAQ,CAAC,QAAkB,EAAE,IAAY;IAChD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAa;IACxC,IAAI,EAAE,aAAa;IACnB,QAAQ,EACN,+JAA+J;IACjK,KAAK,CAAC,GAAG,CAAC,GAAoB;QAC5B,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,GAAG,CAAC,aAAa,CAAC;QAC/B,IAAI,IAAI,CAAC,MAAM,GAAG,kBAAkB;YAAE,OAAO,EAAE,CAAC;QAEhD,gDAAgD;QAChD,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3E,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,CAAC;QAE3B,2FAA2F;QAC3F,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC;QAEhH,oEAAoE;QACpE,iCAAiC;QACjC,IAAI,QAAQ,CAAC,gBAAgB,EAAE,IAAI,CAAC;YAAE,OAAO,EAAE,CAAC;QAEhD,OAAO;YACL;gBACE,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,aAAa;gBACrB,OAAO,EACL,qBAAqB,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,qDAAqD;oBAC3G,8FAA8F;oBAC9F,uGAAuG;aAC1G;SACF,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/verifiers/test_smoke.js

@@ -71,6 +71,36 @@ export const testSmokeKernel = {
                 }
             }
             catch { /* fall through */ }
+            // Vitest or Jest detection: find the touched test files and run against them.
+            const vitestConfig = findUpward(ctx.cwd, ["vitest.config.ts", "vitest.config.js", "vitest.config.mjs"]);
+            const jestConfig = findUpward(ctx.cwd, ["jest.config.ts", "jest.config.js", "jest.config.cjs", "jest.config.mjs"]);
+            const testFiles = ctx.touchedFiles.filter((p) => /\.(test|spec)\.(ts|tsx|js|jsx|mjs)$/.test(p));
+            if (vitestConfig && testFiles.length > 0) {
+                const rootDir = path.dirname(vitestConfig);
+                const res = await runCmd("npx", ["vitest", "run", "--bail=1", ...testFiles], rootDir, 5000);
+                if (res.code !== 0 && res.code !== -1) {
+                    return [{
+                            severity: "block",
+                            kernel: "test_smoke",
+                            message: `vitest failed (exit ${res.code}): ${res.out.slice(0, 300)}`,
+                            location: path.relative(ctx.cwd, vitestConfig),
+                        }];
+                }
+                return [];
+            }
+            if (jestConfig && testFiles.length > 0) {
+                const rootDir = path.dirname(jestConfig);
+                const res = await runCmd("npx", ["jest", "--bail", "--passWithNoTests", ...testFiles], rootDir, 5000);
+                if (res.code !== 0 && res.code !== -1) {
+                    return [{
+                            severity: "block",
+                            kernel: "test_smoke",
+                            message: `jest failed (exit ${res.code}): ${res.out.slice(0, 300)}`,
+                            location: path.relative(ctx.cwd, jestConfig),
+                        }];
+                }
+                return [];
+            }
         }
         // Python: look for pytest + tests/ dir + touched .py files.
         const pyTouched = ctx.touchedFiles.filter((p) => p.endsWith(".py"));

package/dist/verifiers/test_smoke.js.map

@@ -1 +1 @@
-{"version":3,"file":"test_smoke.js","sourceRoot":"","sources":["../../src/verifiers/test_smoke.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,mEAAmE;AACnE,kEAAkE;AAClE,6CAA6C;AAC7C,EAAE;AACF,mBAAmB;AACnB,sEAAsE;AACtE,0EAA0E;AAC1E,gEAAgE;AAChE,wFAAwF;AACxF,EAAE;AACF,oEAAoE;AACpE,2CAA2C;AAE3C,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,SAAS,UAAU,CAAC,QAAgB,EAAE,KAAe;IACnD,IAAI,GAAG,GAAG,QAAQ,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAClC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;QACvC,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM;QAC1B,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,GAAW,EAAE,IAAc,EAAE,GAAW,EAAE,SAAiB;IAC/E,OAAO,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QACnC,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACjG,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACrG,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,GAAG,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,GAAG,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1F,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAa;IACvC,IAAI,EAAE,YAAY;IAClB,QAAQ,EAAE,mEAAmE;IAC7E,KAAK,CAAC,GAAG,CAAC,GAAoB;QAC5B,IAAI,GAAG,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAE7C,MAAM,WAAW,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;QAC1D,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;gBAC7D,MAAM,OAAO,GAA2B,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;gBAC1D,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY;oBACrD,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW;wBACpC,CAAC,CAAC,IAAI,CAAC;gBACT,IAAI,UAAU,EAAE,CAAC;oBACf,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,CAAC;oBAClG,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;wBACnB,OAAO,CAAC;gCACN,QAAQ,EAAE,OAAO;gCACjB,MAAM,EAAE,YAAY;gCACpB,OAAO,EAAE,aAAa,UAAU,mBAAmB,GAAG,CAAC,IAAI,GAAG;gCAC9D,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC;6BAC9C,CAAC,CAAC;oBACL,CAAC;oBACD,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;QAChC,CAAC;QAED,4DAA4D;QAC5D,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QACpE,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;YAChD,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,aAAa,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBACnF,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC;oBACtC,OAAO,CAAC;4BACN,QAAQ,EAAE,OAAO;4BACjB,MAAM,EAAE,YAAY;4BACpB,OAAO,EAAE,uBAAuB,GAAG,CAAC,IAAI,GAAG;4BAC3C,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC;yBAC3C,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;CACF,CAAC"}
+{"version":3,"file":"test_smoke.js","sourceRoot":"","sources":["../../src/verifiers/test_smoke.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,mEAAmE;AACnE,kEAAkE;AAClE,6CAA6C;AAC7C,EAAE;AACF,mBAAmB;AACnB,sEAAsE;AACtE,0EAA0E;AAC1E,gEAAgE;AAChE,wFAAwF;AACxF,EAAE;AACF,oEAAoE;AACpE,2CAA2C;AAE3C,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,SAAS,UAAU,CAAC,QAAgB,EAAE,KAAe;IACnD,IAAI,GAAG,GAAG,QAAQ,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAClC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;QACvC,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM;QAC1B,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,GAAW,EAAE,IAAc,EAAE,GAAW,EAAE,SAAiB;IAC/E,OAAO,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QACnC,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACjG,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACrG,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,GAAG,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,GAAG,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1F,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAa;IACvC,IAAI,EAAE,YAAY;IAClB,QAAQ,EAAE,mEAAmE;IAC7E,KAAK,CAAC,GAAG,CAAC,GAAoB;QAC5B,IAAI,GAAG,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAE7C,MAAM,WAAW,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;QAC1D,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;gBAC7D,MAAM,OAAO,GAA2B,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;gBAC1D,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY;oBACrD,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW;wBACpC,CAAC,CAAC,IAAI,CAAC;gBACT,IAAI,UAAU,EAAE,CAAC;oBACf,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,CAAC;oBAClG,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;wBACnB,OAAO,CAAC;gCACN,QAAQ,EAAE,OAAO;gCACjB,MAAM,EAAE,YAAY;gCACpB,OAAO,EAAE,aAAa,UAAU,mBAAmB,GAAG,CAAC,IAAI,GAAG;gCAC9D,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC;6BAC9C,CAAC,CAAC;oBACL,CAAC;oBACD,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;YAE9B,8EAA8E;YAC9E,MAAM,YAAY,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,mBAAmB,CAAC,CAAC,CAAC;YACxG,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,CAAC,CAAC;YACnH,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qCAAqC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAEhG,IAAI,YAAY,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;gBAC3C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;gBAC5F,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC;oBACtC,OAAO,CAAC;4BACN,QAAQ,EAAE,OAAO;4BACjB,MAAM,EAAE,YAAY;4BACpB,OAAO,EAAE,uBAAuB,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;4BACrE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC;yBAC/C,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,IAAI,UAAU,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBACzC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,mBAAmB,EAAE,GAAG,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;gBACtG,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC;oBACtC,OAAO,CAAC;4BACN,QAAQ,EAAE,OAAO;4BACjB,MAAM,EAAE,YAAY;4BACpB,OAAO,EAAE,qBAAqB,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;4BACnE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC;yBAC7C,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QAED,4DAA4D;QAC5D,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QACpE,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;YAChD,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,aAAa,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBACnF,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC;oBACtC,OAAO,CAAC;4BACN,QAAQ,EAAE,OAAO;4BACjB,MAAM,EAAE,YAAY;4BACpB,OAAO,EAAE,uBAAuB,GAAG,CAAC,IAAI,GAAG;4BAC3C,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC;yBAC3C,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;CACF,CAAC"}

package/dist/verifiers/types.d.ts

@@ -17,6 +17,9 @@ export interface VerifierContext {
      *  Write or Edit). Verifiers focus their work on these to keep
      *  latency low. */
     touchedFiles: string[];
+    /** Files the assistant READ this turn (paths passed to Read). Used by
+     *  source_gate to confirm a source was consulted rather than recited. */
+    readFiles?: string[];
     /** Profile slug active during this turn. */
     profile: string;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vextlabs/theron-cli",
-  "version": "0.2.1",
+  "version": "0.4.0",
   "description": "Theron CLI — an agentic coding assistant that verifies its own output. Runs an agentic tool loop in your terminal, then runs post-turn checks (types, tests, lint, arithmetic, citations) over the files it touched; blocking failures feed the next turn so it self-corrects. Across a 33-profile domain council. From Vext Labs.",
   "author": "Vext Labs Inc.",
   "license": "Apache-2.0",
@@ -16,6 +16,7 @@
   "files": [
     "bin",
     "dist",
+    "skills",
     "README.md",
     "LICENSE.txt"
   ],
@@ -29,7 +30,7 @@
     "build": "tsc -p .",
     "dev": "tsc -p . --watch",
     "start": "node ./bin/theron.js",
-    "test": "npm run build && node test/sweep.mjs",
+    "test": "npm run build && node test/sweep.mjs && node test/pentest.unit.test.mjs && node test/verifiers.unit.test.mjs && node test/input.unit.test.mjs && node test/integrity.unit.test.mjs",
     "test:integration": "npm run build && THERON_RUN_INTEGRATION=1 node test/integration.mjs",
     "prepublishOnly": "npm run build",
     "release": "npm version patch && npm publish",
@@ -38,6 +39,7 @@
   },
   "dependencies": {
     "@types/node": "^20.0.0",
+    "@vextlabs/theron-agent-sdk": "^0.3.1",
     "chalk": "^5.3.0",
     "fast-glob": "^3.3.2",
     "marked": "^12.0.0",

package/skills/README.md

@@ -0,0 +1,123 @@
+# Theron skill library
+
+A curated library of **73** reusable **SKILL.md** playbooks — dense, senior-practitioner workflows the agent loads on demand. Invoke any skill with `/<name>` in the `theron` CLI or the JUWEL.ai VS Code panel; each is also auto-invoked when its `description` matches your task. Run `/skills` to browse them grouped by entrance.
+
+**Extend or override:** drop a `<name>.md` in `~/.theron/skills/` (all your projects) or `<project>/.theron/skills/` (this project). A same-named file overrides the bundled one. Format:
+
+```markdown
+---
+name: my-skill
+description: one line used to decide when to auto-invoke
+allowed-tools: Read, Grep, Bash
+---
+<the playbook body>
+```
+
+---
+
+## Research & Science  _(13)_
+
+- **`/ab-test`** — Design and analyze a controlled A/B test end-to-end — covering metric + MDE definition, power/sample-size/duration, randomization unit, pre-registration, SRM + novelty checks, effect estimation with confidence intervals, multiple-comparison correction, and a go/no-go decision; invoke when a user wants to run or evaluate any controlled experiment on product, model, UI, pricing, ranking, or policy changes. _(tools: Read, Bash, Write)_
+- **`/causal-inference`** — Identify causal effects, not correlations — define the estimand, draw the DAG, pick an identification strategy (RCT/IV/RDD/DiD/matching), and run falsification tests. _(tools: Read, Bash, Write, Grep)_
+- **`/clinical-guideline`** — Summarize clinical practice guidelines for a disease/condition/intervention — extracting evidence grades (GRADE/strength), target populations, contraindications, and cross-body conflicts — with primary source citations and a mandatory educational-use disclaimer; invoke when the user asks what guidelines say about a clinical topic, drug, screening threshold, treatment protocol, or diagnostic criterion. _(tools: Read, WebSearch, WebFetch, Write)_
+- **`/data-analysis`** — End-to-end data analysis — profile before modeling, EDA, method fit to the question, honest validation (leakage, baselines, CIs), and limitations. _(tools: Read, Bash, Write, Glob, Grep)_
+- **`/differential-diagnosis`** — Build and rank a structured clinical differential diagnosis from a symptom/sign/lab constellation — covering likelihood, danger, discriminating features, red flags, confirmatory/exclusionary tests, and guideline citations — for EDUCATIONAL use only; always appends the not-a-substitute-for-a-physician disclaimer. _(tools: Read, WebSearch, WebFetch, Write)_
+- **`/experiment-design`** — Design a rigorous, falsifiable experiment — hypothesis + null, controls for confounds, power analysis, pre-registered analysis plan, and validity threat mitigation. _(tools: Read, Write, WebSearch, Grep)_
+- **`/fact-check`** — Adversarially verify claims — decompose into atomic claims, find primary sources, try to refute each, and rate with cited evidence. Never assert without a source. _(tools: WebSearch, WebFetch, Read, Grep)_
+- **`/hypothesis-generation`** — Generate and rank falsifiable hypotheses — diverse candidates each with a concrete prediction and discriminating test, ranked by novelty × plausibility × testability. _(tools: Read, WebSearch, WebFetch, Write)_
+- **`/literature-review`** — Systematic literature review — search strategy, screening, quality appraisal, thematic synthesis, and an honest gap analysis with primary-source citations. _(tools: WebSearch, WebFetch, Read, Write, Grep, TodoWrite)_
+- **`/meta-analysis`** — Pool studies rigorously — common effect-size metric, fixed/random-effects choice, heterogeneity (I²/τ²), publication-bias checks, sensitivity, and GRADE certainty. _(tools: Read, Bash, WebSearch, WebFetch, Write)_
+- **`/peer-review`** — Review a paper/manuscript like a journal referee — summarize the contribution, assess soundness/novelty/reproducibility, separate major from minor, end with a justified recommendation. _(tools: Read, WebSearch, WebFetch, Write)_
+- **`/proof`** — Construct a rigorous proof — restate precisely, choose the strategy, justify every step by name, hunt the failure modes (circularity, edge cases, quantifier slips), then verify it. _(tools: Read, Write)_
+- **`/reproduce`** — Reproduce a bug, paper result, or benchmark — pin the exact claim and environment, get a minimal case, reproduce baseline first, bisect to the trigger, report repro status honestly. _(tools: Read, Bash, WebFetch, Grep, Glob, Write)_
+
+## Coding & Engineering  _(12)_
+
+- **`/api-design`** — Design clean, evolvable APIs — start from consumer use cases, make illegal states unrepresentable, explicit errors, versioning and backward-compatibility. _(tools: Read, Write, Edit, Grep, Glob)_
+- **`/architecture-design`** — Design a system from the non-functional requirements + load numbers — components and boundaries, storage/consistency tradeoffs, failure modes, ADRs, and design-for-change. _(tools: Read, Write, Grep, Glob)_
+- **`/code-review`** — Review a diff like a senior engineer — correctness first, then security, tests, API/compat, perf, readability; every comment file:line + concrete fix + severity tag. _(tools: Read, Grep, Glob, Bash)_
+- **`/debug`** — Root-cause debugging — reproduce first, read the error, hypothesize and test (not shotgun), bisect/instrument, fix the cause not the symptom, add a regression test. _(tools: Read, Bash, Grep, Glob, Edit)_
+- **`/engineering-calc`** — Perform a rigorous engineering calculation (structural load/stress/buckling, member sizing, thermal analysis, pressure vessel, circuit power/impedance, fluid flow) — states givens with SI/imperial units, cites governing equation + its derivation assumptions and validity limits, solves step-by-step with dimensional tracking, applies code-required safety factor, bounds-checks against first-principles intuition, and flags where a licensed PE stamp is legally required before use. _(tools: Read, Bash, Write)_
+- **`/migrate`** — Migrate a codebase safely — inventory all call sites first, use expand-migrate-contract, change in small reversible batches keeping the build green, verify semantics preserved. _(tools: Read, Edit, MultiEdit, Bash, Grep, Glob)_
+- **`/optimize`** — Performance optimization — measure and profile first, fix the real bottleneck (algorithmic before micro), re-measure after each change, keep results correct. _(tools: Read, Edit, Bash, Grep, Glob)_
+- **`/refactor`** — Behavior-preserving refactoring — pin behavior with tests first, one small transformation at a time, run tests after each, never mix refactor with behavior change. _(tools: Read, Edit, MultiEdit, Bash, Grep, Glob)_
+- **`/sql-query`** — Write, review, or optimize a SQL query against a real schema — confirm table grain + column names first, produce a correct readable query, verify row-count expectations, then measure and apply structural optimizations (indexes, predicate pushdown, window functions, N+1 elimination). _(tools: Read, Bash, Grep, Write)_
+- **`/tdd`** — Test-driven development — red/green/refactor with the real test framework; write the failing test first, see it fail, minimal code to green, refactor, full-suite before done. _(tools: Read, Edit, MultiEdit, Write, Bash, Grep, Glob)_
+- **`/tolerance-analysis`** — Full tolerance stack-up and GD&T analysis workflow — identify the critical dimension chain, run worst-case and RSS/statistical analysis, allocate tolerances to part cost tiers, design the datum scheme, and flag the binding contributor; invoke whenever a mechanical assembly has a gap, interference, clearance, or fit requirement that must be verified before release or when geometric controls (flatness, position, runout, profile) are being defined or reviewed. _(tools: Read, Bash, Write)_
+- **`/write-tests`** — Author comprehensive tests — cover happy path, boundaries, error paths, and invariants; test behavior not implementation; deterministic and isolated; verify the test can actually fail. _(tools: Read, Write, Edit, Bash, Grep, Glob)_
+
+## Security  _(4)_
+
+- **`/pentest-plan`** — Plan and execute an authorized penetration test: scope lock, attack-surface enumeration mapped to OWASP Top 10 + API/cloud-native vectors, likelihood×impact prioritization, evidence capture standards, and non-destructive guardrails — invoke when asked to pentest, assess, or audit a system for security vulnerabilities. _(tools: Read, Write, Grep, Bash)_
+- **`/red-team`** — Adversarially review your own (or given) work — hunt for correctness bugs, edge cases, security holes, and false assumptions; severity-rate each with evidence and a fix. _(tools: Read, Grep, Glob, Bash)_
+- **`/security-audit`** — Static security audit of a codebase — map the attack surface, review against OWASP/CWE, scan deps + secrets; every finding gets severity, file:line, exploit scenario, and fix. _(tools: Read, Grep, Glob, Bash)_
+- **`/threat-model`** — Threat-model a system — assets + trust boundaries, STRIDE enumeration, attack trees, risk-rated threats mapped to mitigations, and explicit residual risk. _(tools: Read, Write, Grep, Glob)_
+
+## Finance & Investing  _(8)_
+
+- **`/financial-model`** — Build a driver-based 3-statement (P&L / balance sheet / cash flow) projection model with explicit assumptions, linked drivers, upside/base/downside scenarios, DCF/terminal-value valuation, and sanity-checks against stage-appropriate industry benchmarks — invoke whenever the task is financial forecasting, unit-economics analysis, fundraising model, DCF valuation, or scenario planning. _(tools: Read, Bash, Write)_
+- **`/lease-review`** — Review a commercial lease end-to-end: extract and stress-test every economic term (base rent, escalations, CAM, TI, free rent, options), flag off-market risk provisions (assignment, default cure periods, exclusivity, co-tenancy, holdover), and deliver a redline priority list with effective-rent computation. _(tools: Read, Write)_
+- **`/options-strategy`** — Educational options-strategy explainer: given a named strategy or market outlook, produce structure, payoff diagram (ASCII), breakevens, max gain/loss, Greeks, ideal market scenario, risk-first sizing guidance, and a mandatory not-investment-advice disclaimer. _(tools: Read, Bash, Write)_
+- **`/pitch-review`** — Review a startup pitch deck with senior VC rigor — separates what is missing from what is wrong, benchmarks each dimension to stage norms, surfaces the 3 hardest investor objections, and identifies the single most important fix before the next meeting. _(tools: Read, Write)_
+- **`/property-underwrite`** — Full-cycle real estate underwriting playbook — collect deal inputs, state all assumptions explicitly, compute NOI/cap rate/cash-on-cash/DSCR/IRR step by step, run a two-variable sensitivity table, and deliver a conservative go/no-go verdict with annotated kill conditions; invoke whenever a user provides a property address, asking price, rent roll, or deal memo and wants investment analysis. _(tools: Read, Bash, Write)_
+- **`/term-sheet`** — Analyze a venture-capital or angel term sheet — decompose economics vs. control provisions, step-by-step dilution math (option-pool shuffle, SAFE conversion, liquidation waterfall, anti-dilution), flag founder-unfriendly deviations from NVCA/YC market standard, and surface negotiation priorities; outputs a structured red/yellow/green memo with a NOT LEGAL ADVICE footer. _(tools: Read, Bash, Write)_
+- **`/unit-economics`** — Compute and stress-test SaaS/subscription unit economics — contribution margin, CAC, LTV (with churn and discount rate), LTV/CAC ratio, payback period, and cohort-level retention curves — from first principles; flags when assumptions break the model. _(tools: Read, Bash, Write)_
+- **`/valuation`** — Value a private or public company via DCF (WACC build-up, explicit FCF, terminal value) and trading/transaction comparable multiples, then reconcile the two into a single defensible range with a sensitivity table on the two highest-impact drivers; invoked when the task is to price a business, assess a deal, build a pitch-book range, or stress-test an offer price. _(tools: Read, Bash, Write)_
+
+## Business, Product & Strategy  _(10)_
+
+- **`/business-case`** — Build a rigorous business case for a decision or investment: size the problem and opportunity, model costs/benefits/risks across options including do-nothing, surface assumptions explicitly, and deliver a single prioritized recommendation with leading indicators and the strongest counterargument pre-empted. _(tools: Read, WebSearch, Write)_
+- **`/competitive-teardown`** — Tear down a named AI/SaaS competitor end-to-end — positioning, ICP, pricing/packaging, product strengths and gaps, GTM motion, moat, and the specific wedges where we win or lose — grounded in public evidence; outputs a ranked battlecard and a single recommended attack vector. _(tools: Read, WebSearch, WebFetch, Write)_
+- **`/estimate`** — Principled Fermi estimation — decompose into estimable factors with ranges, propagate uncertainty, sanity-check against anchors, tighten the dominant factor, report a range not false precision. _(tools: Read, Write)_
+- **`/launch-plan`** — Build a full GTM launch plan for a software product or feature: segment audience, structure alpha/beta/GA tiers, craft the core message + proof points, assign channel owners + metrics, produce an asset checklist, set a timeline, and generate a launch-day runbook — invoke when asked to plan a launch, go-to-market, release strategy, or channel plan. _(tools: Read, Write)_
+- **`/market-entry`** — Analyze a new market entry decision end-to-end: market attractiveness, right-to-win, entry mode and sequencing, irreversible vs reversible commitments, strongest reasons NOT to enter, and a staged de-risking plan with explicit kill criteria. _(tools: Read, WebSearch, Bash, Write)_
+- **`/market-sizing`** — Size a market TAM/SAM/SOM via dual top-down and bottom-up triangulation, reconcile the gap, stress-test on the dominant driver, and produce a realistic obtainable-share view — invoke whenever a user asks to size a market, estimate addressable revenue, or validate a market opportunity for a product, segment, or geography. _(tools: Read, Bash, Write)_
+- **`/positioning`** — Position an offering against named competitive alternatives — extract unique attributes, translate them to customer-valued outcomes, identify the best-fit buyer segment, name the market frame, and produce a positioning statement plus the messaging hierarchy it implies; invoke when launching, repositioning, entering a new segment, or diagnosing why sales are slow. _(tools: Read, Write)_
+- **`/prd`** — Write a complete Product Requirements Document — extract the real problem, define Theron users + evidence, set measurable goals tied to agentic/receipt/specialist value, scope must/should/could requirements, map key flows and edge cases through the STOA/CIP surface, and lock an explicit out-of-scope. _(tools: Read, Write)_
+- **`/prioritize`** — Score and sequence a backlog of features, bugs, research, or capability-injection work using RICE/WSJF — show every formula step, expose hard dependencies, name deferrals and why, and output a waterlined cycle plan. _(tools: Read, Write)_
+- **`/seo-brief`** — Research and structure an SEO content brief — map search intent, SERP features, entity clusters, E-E-A-T signals, secondary queries, title/meta/H1, recommended layout, and draft the featured-snippet opening to maximize organic reach for a target keyword. _(tools: WebSearch, WebFetch, Read, Write)_
+
+## Go-to-market & Support  _(4)_
+
+- **`/cold-outreach`** — Execute multi-touch, research-driven cold outreach sequences for AI infrastructure / agentic platforms; one clear CTA per touch, no spray-and-pray. _(tools: Read, Write)_
+- **`/discovery-call`** — Design and run an enterprise B2B discovery call end-to-end — intent-setting open, current-state diagnosis with quantified impact, MEDDPICC qualification, trap and tell-me-more follow-ups, and a mutual next step — diagnosing before pitching and never prescribing before the pain is owned by the buyer. _(tools: Read, Write)_
+- **`/kb-article`** — Write task-focused knowledge base articles — shape the title around one problem, structure in numbered steps with concrete callouts/screenshots, branch for failures, and close with related links. Skip corporate filler; ship text a practitioner skims in 3 minutes and trusts. _(tools: Read, Write)_
+- **`/ticket-triage`** — Reproduce, severity-assess, and resolve theron-cli support tickets end-to-end; escalate only when root cause requires dev/founder intervention or the customer is Enterprise. _(tools: Read, Write, Bash)_
+
+## Legal, Policy & Nonprofit  _(5)_
+
+- **`/contract-review`** — Clause-by-clause contract redline — flags red-flag, missing, and one-sided terms by risk severity, cites governing market norms, and proposes specific replacement language; never invents statutes or cases. _(tools: Read, WebSearch, WebFetch, Write)_
+- **`/grant-proposal`** — Draft, review, or strengthen a complete funder-mirrored grant proposal (need+data, logic model, measurable outcomes, M&E plan, organizational capacity, line-item budget, sustainability) for nonprofit, government, or philanthropic RFPs — invoke whenever a user needs to write, audit, or rebuild a grant application. _(tools: Read, WebSearch, WebFetch, Write)_
+- **`/policy-brief`** — Draft a rigorous 2-page policy brief on a named policy question — problem framing with quantified status-quo baseline, do-nothing and active options scored on effectiveness/cost/equity/feasibility, WINNERS and LOSERS named explicitly, evidence tier labeled for every quantitative claim, statutory citations verified for every legal reference, and a single prioritized recommendation with a named rebuttal — use when asked to brief a policymaker, analyze a bill, evaluate a regulation, or compare policy options on any public-sector question. _(tools: Read, WebSearch, WebFetch, Write)_
+- **`/regulatory-compliance`** — Map a product or process to a named regulation (GDPR/CPRA, HIPAA, SOC 2, FTC Act §5, PCI-DSS v4.0, EU AI Act, CCPA, etc.), enumerate every applicable obligation with exact cited section, distinguish control gaps from evidence gaps, rank remediation items by legal exposure and breach probability, surface cross-jurisdiction conflicts, and flag all items requiring licensed counsel — use when the user asks about compliance gaps, regulatory mapping, audit readiness, or legal risk for a specific product or workflow. _(tools: Read, WebSearch, WebFetch, Write)_
+- **`/theory-of-change`** — Build a rigorous theory of change for a program, product, or initiative: map the long-term impact goal backward through causal preconditions to activities, make every causal arrow's assumptions explicit and testable, assign indicators per outcome, and cite the evidence base that validates each assumption — invoked when asked to develop, stress-test, or document a theory of change, logic model, impact pathway, or results framework. _(tools: Read, Write)_
+
+## Ops & People  _(6)_
+
+- **`/incident-response`** — Run a live production incident end-to-end — declare severity, assign IC/comms/ops roles, mitigate-before-diagnose to restore SLO, drive cadenced stakeholder comms, maintain a live timeline, bound every mitigation's blast radius, and hand off a postmortem-ready artifact. _(tools: Read, Write, Bash)_
+- **`/interview-loop`** — Design and run a structured interview loop: map each stage to a competency, write legally-safe STAR behavioral questions + real work samples per stage, build a scored rubric, and run a calibrated debrief — same questions every candidate, bias minimized. _(tools: Read, Write)_
+- **`/job-scorecard`** — Build a role scorecard (mission, 4-6 measurable 12-month outcomes, ranked competencies with behavioral anchors, must-have vs nice-to-have) before drafting any job description — triggered whenever a user asks to define, hire for, or evaluate a role. _(tools: Read, Write)_
+- **`/plan`** — Decompose a complex task into a grounded, verifiable plan — investigate current state first, small steps with acceptance checks, riskiest unknowns first, surface before irreversible work. _(tools: Read, Grep, Glob, TodoWrite, WebSearch)_
+- **`/postmortem`** — Write blameless, timeline-driven postmortem for production incidents; root cause via 5-whys + systemic analysis; action items with owners + dates _(tools: Read, Write)_
+- **`/runbook`** — On-call incident runbook — triage severity/scope in <2 min, detect patterns (cascade vs. isolated), isolate blast radius, execute fixed-sequence recovery, document timeline, and verify the fix held. _(tools: Read, Write, Grep, Bash)_
+
+## Education & Wellbeing  _(3)_
+
+- **`/lesson-plan`** — Build a rigorous, topic-specific lesson from scratch — diagnose entry state, write Bloom-leveled objectives, sequence concrete-to-abstract, scaffold worked examples into faded practice, and preempt the misconceptions that derail learners of this exact topic. _(tools: Read, Write)_
+- **`/reflection-session`** — Run a structured, CBT/ACT-informed EDUCATIONAL reflective session with a user who wants to process an emotion, thought pattern, stressor, or difficult experience — asking reflective questions, validating feelings, gently surfacing cognitive distortions, and closing with one concrete micro-action; escalates immediately to crisis resources on any risk signal. _(tools: Read, Write)_
+- **`/training-program`** — Design a periodized, goal-specific resistance/conditioning training program: screen for contraindications, set phase structure, prescribe sets×reps×intensity (RPE/%1RM)+rest+tempo, supply technique cues+regressions, enforce deload weeks, and close with a mandatory physician disclaimer — invoke when a user requests a workout plan, training block, strength/hypertrophy/conditioning program, or progressive-overload schedule. _(tools: Read, Write)_
+
+## Creative, Design & Lifestyle  _(8)_
+
+- **`/component-spec`** — Produce a complete, build-ready UI component specification covering anatomy, prop/variant matrix, every interaction and data state, design tokens (color/space/type/motion/dark-mode), full accessibility contract (ARIA roles, keyboard, focus), responsive rules, automation hooks, breaking-change policy, and do/don't usage — output is the single source of truth a designer and engineer both build from without a meeting. _(tools: Read, Write)_
+- **`/content-calendar`** — Engineer a multi-month content calendar for a digital product or research AI platform — define content pillars, a repeatable series arc, native platform format per channel, engagement metrics to track (saves/shares over vanity), realistic cadence, and sponsorship disclosure; invoke when launching a brand, scaling social presence, or productizing thought leadership at a tech company. _(tools: Read, Write)_
+- **`/design-audit`** — Audit a UI component or user flow for interaction-state completeness (default/hover/focus/active/disabled/loading/error/empty), WCAG accessibility (contrast, focus order, labels, target size, keyboard), responsive behavior, design-token vs hardcoded-value discipline, and cross-component consistency with the design system; delivers a severity-graded findings table and a SHIP/CONDITIONAL/CLEAR verdict. _(tools: Read, Grep, Write)_
+- **`/edit-pass`** — Run a senior seven-phase editorial pass on prose or docs — macro structure first, then clarity, concision, grammar, rhythm, and a signed change log — killing AI-isms/hedging/em-dash abuse while preserving the author's voice and never altering meaning. _(tools: Read, Edit, Write)_
+- **`/harmony-analysis`** — Analyze the harmonic language of a piece or passage — key, Roman-numeral function, cadences, voice-leading, secondary dominants, modal interchange, enharmonic modulation, formal structure, and tension/release mechanics — producing a rigorous, notation-standard analytical report within the common-practice tonal tradition. _(tools: Read, Write)_
+- **`/recipe-develop`** — Develop, stress-test, and document a recipe end-to-end — ratio-first formulation, dual-unit (grams + volume) ingredient list, yield/serving breakdown, phase-by-phase technique with temperature/time/sensory doneness cues, food-science rationale, substitution tradeoffs, food-safety critical points, and non-linear scaling rules — invoke whenever the user asks to create, fix, scale, or deeply explain a recipe. _(tools: Read, Write)_
+- **`/story-craft`** — Craft short literary fiction — character desire + obstacle, scene-level cause-effect, sensory show-not-tell, escalating conflict to a turn, distinctive voice, no clichés — when user asks to write, revise, or critique a short story or flash fiction piece. _(tools: Read, Write)_
+- **`/translate`** — Translate text/documents between human languages preserving meaning, register, tone, markup, and placeholders — localizing idioms/units/dates, flagging untranslatables with alternatives, and marking low-confidence renderings for review; never silently drop or invent content. _(tools: Read, Write)_
+
+---
+
+_73 skills across 10 entrances. The same library ships in the `@vextlabs/theron-cli` package and the JUWEL.ai VS Code extension._