@winspan/claude-forge 8.54.4 → 9.2.0

package/dist/skills/distill/project-anchor-guard.js

@@ -0,0 +1,334 @@
+/**
+ * project-anchor-guard.ts
+ *
+ * Blacklist filter for distilled skill content. Distilled skills must be
+ * **project-agnostic** (Portability axis, D4 v2): no claude-forge-specific
+ * anchors, no Cursor IDE path vars, no Python-only tooling, no Office app
+ * shoutouts. When distilling skills from heterogeneous upstreams the LLM may
+ * leak anchors that prevent cross-project reuse.
+ *
+ * Spec ref:
+ *   - 1846-skills-distilled-from-upstreams-spec.md "Project anchor blacklist"
+ *   - 0930-skills-portability-d4-reverse-spec.md (v4 amendment, rubric_version 2)
+ *
+ * Returns the list of violations; callers decide whether to reject the file
+ * outright or to ask the LLM to rewrite. Empty list = clean.
+ */
+/**
+ * Rubric/blacklist version. Bumped from 1 → 2 in the D4 polarity flip (spec
+ * 0930). Downstream consumers (web dashboard, catalog scorers, cross-project
+ * reusers) can detect the new semantics via this constant and via the
+ * `rubric_version: 2` frontmatter field written by `distiller.ts`.
+ */
+export const RUBRIC_VERSION = 2;
+/**
+ * Blacklist patterns and labels.
+ *
+ * Add new patterns by appending here. Keep regexes case-insensitive where
+ * project anchors might be capitalized, but be careful — e.g. matching the
+ * single word "Python" would flag many legitimate cross-stack discussions.
+ * Default heuristic: only flag patterns that are *imperative* ("pip install …"
+ * as a command) rather than mere references.
+ */
+const PATTERNS = [
+    // ── Pre-existing patterns (rubric v1 carry-overs) ────────────────────────
+    // Cursor IDE plugin path variable — leaks from cursor-rules upstreams.
+    { label: 'cursor-plugin-root', regex: /\$\{CLAUDE_PLUGIN_ROOT\}/g },
+    { label: 'cursor-reference', regex: /\bcursor[-\s]?only\b/gi },
+    { label: 'cursor-prefix', regex: /(^|\s)cursor:\s*[A-Za-z]/g },
+    // Generic API versioning is upstream contamination (not a claude-forge convention).
+    { label: 'api-v1-prefix', regex: /\/api\/v1\//g },
+    // Python-specific tooling (we target language-agnostic skills).
+    { label: 'pip-install-cmd', regex: /(^|\s)pip\s+install\s+/g },
+    { label: 'venv-activate', regex: /\bsource\s+venv\/bin\/activate\b/g },
+    { label: 'python-virtualenv-dir', regex: /(^|\s)venv\/(\s|$)/g },
+    // The bare token `requirements.txt` is fine as a *concept* discussion; flag
+    // only when it appears in a code-block-style command.
+    { label: 'pip-requirements-cmd', regex: /pip\s+install\s+-r\s+requirements\.txt/g },
+    // Office document operations — anthropic/skills has 4 of these. They're
+    // explicitly out of scope per spec section "排除标准".
+    { label: 'office-docx', regex: /python-docx|openpyxl|python-pptx/g },
+    { label: 'office-app-paths', regex: /\b(?:Microsoft\s+Word|Microsoft\s+Excel|PowerPoint)\b/g },
+    // ── claude-forge anchors (rubric v2 / Portability) ───────────────────────
+    //
+    // Behavioral flavor (B-C): we flag command-like and structural anchors, not
+    // every casual mention. Frontmatter (e.g. `distilled_from:` URLs) is
+    // stripped by `scanBlacklist` before matching, so legitimate attribution is
+    // not penalized.
+    // Literal project name — broadest pattern; FP risk mitigated by stripping
+    // frontmatter (where `distilled_from` URLs live).
+    { label: 'claude-forge-literal', regex: /\bclaude[-_]forge\b/gi },
+    // `cf <subcmd>` CLI invocations. Anchored to start-of-line / whitespace /
+    // backtick to skip mid-word matches like "scuff" or "naïveté".
+    { label: 'cf-cli-command', regex: /(?:^|[\s`])cf\s+(?:insights|knowledge|skills|claudemd|daemon|review|tasks|rules|violations)\b/g },
+    // `forge <subcmd>` ADR / skill / task variant.
+    { label: 'forge-cli-command', regex: /(?:^|[\s`])forge\s+(?:adr|skill|task)\b/g },
+    // Local config directory path.
+    { label: 'claude-forge-config-dir', regex: /~\/\.claude-forge\b/g },
+    // Default daemon port (3721) — leaks daemon implementation detail.
+    { label: 'claude-forge-port', regex: /\b127\.0\.0\.1:3721\b|\blocalhost:3721\b/g },
+    // Internal handler/service symbol names. Flag command-like mentions so a
+    // reader trying to reuse the skill in another codebase doesn't have to
+    // mentally substitute names that don't exist in their project.
+    { label: 'internal-symbol-handlers', regex: /\b(?:UserPromptHandler|SpecGate|KbInjector|TaskSegmenter|InvocationGuard|InterceptRollbackGuard|OutcomeClassifier)\b/g },
+    // Internal source path references (`src/daemon/...`, `src/web/...`, etc).
+    // Skills should describe behavior, not file paths.
+    { label: 'internal-src-path', regex: /\bsrc\/(?:daemon|web|skills|knowledge|cli|core|claudemd)\/[a-z][a-z0-9-]*/g },
+    // `CLAUDE.md L42` / `CLAUDE.md:42` style line references.
+    { label: 'claudemd-line-ref', regex: /\bCLAUDE\.md[:：]?\s*L?\d+/g },
+    // BMAD jargon (project-internal workflow vocabulary). Anchor to `Phase \d`
+    // / `Two-Phase` / `工作流升级判定` to keep FP risk low — the bare token
+    // `BMAD` shows up too often in general LLM-engineering discourse.
+    { label: 'bmad-workflow-term', regex: /\bBMAD\s+(?:Phase\s*\d+|Two-Phase|工作流升级判定)\b/g },
+    // The "## 与 claude-forge 的连接" section header itself — the section we are
+    // explicitly retiring in the distill prompt. Catches stragglers in re-runs.
+    { label: 'project-section-header', regex: /^##\s*与\s+claude[-_]?forge\s+的连接\s*$/gm },
+    // `daemon restart/stop/start` operations — claude-forge-specific imperative.
+    { label: 'daemon-ops-command', regex: /(?:^|[\s`])daemon\s+(?:restart|stop|start)\b/g },
+];
+/**
+ * Whitelist of frontmatter fields that MUST be scanned for project anchors.
+ *
+ * Frontmatter `it_universal_rationale`, `description`, `when_to_use`, and
+ * `rationale` are user-facing prose that downstream tooling renders as the
+ * skill's summary. Project anchors leaking into these fields defeat the
+ * Portability rubric just as much as anchors in the body. The original
+ * `stripFrontmatter()` removes the entire frontmatter block, so these fields
+ * silently bypass `scanBlacklist`. `scanFrontmatterRationale()` plugs that
+ * hole by re-scanning ONLY these whitelisted fields.
+ *
+ * Spec ref: 1735-skill-builtin-and-agent-distill-spec.md §2 "修正 ①" +
+ * "project-anchor-guard.ts 改造".
+ */
+export const FRONTMATTER_SCAN_FIELDS = [
+    'it_universal_rationale',
+    'description',
+    'when_to_use',
+    'rationale',
+];
+/**
+ * Attribution fields are metadata about WHERE the skill came from. They are
+ * allowed to mention "claude-forge" because the upstream URL legitimately
+ * contains that token (e.g. `upstream: https://github.com/winspan/claude-forge.git`).
+ * `scanFrontmatterRationale()` skips these fields outright.
+ */
+export const FRONTMATTER_ATTRIBUTION_FIELDS = [
+    'upstream',
+    'source_url',
+    'distilled_by',
+    'distilled_at',
+    'license',
+];
+/**
+ * Extract and scan whitelisted frontmatter fields for project anchor patterns.
+ *
+ * Behavior:
+ *   - If `content` has no frontmatter, returns [].
+ *   - Walks each line inside the frontmatter block (between the opening and
+ *     closing `---` fences).
+ *   - For top-level YAML fields whose name is in `FRONTMATTER_SCAN_FIELDS`,
+ *     extracts the inline value and runs it through `PATTERNS`.
+ *   - Fields in `FRONTMATTER_ATTRIBUTION_FIELDS` are skipped (attribution
+ *     URLs may legitimately mention claude-forge).
+ *   - Block scalars (e.g. `description: |\n  multiline...`) are supported
+ *     for whitelisted fields: the indented continuation lines are concatenated.
+ *
+ * This is intentionally a lightweight line-based parser; full YAML parsing
+ * would pull in extra cost for a check that only needs to inspect ~5 fields.
+ */
+export function scanFrontmatterRationale(content) {
+    const hits = [];
+    if (!content.startsWith('---\n') && !content.startsWith('---\r\n')) {
+        return hits;
+    }
+    const lines = content.split('\n');
+    // Find closing `---` fence (must be on its own line, after line 0).
+    let closeIdx = -1;
+    for (let i = 1; i < lines.length; i++) {
+        if (/^---\s*$/.test(lines[i])) {
+            closeIdx = i;
+            break;
+        }
+    }
+    if (closeIdx < 0)
+        return hits;
+    const scanSet = new Set(FRONTMATTER_SCAN_FIELDS);
+    const attribSet = new Set(FRONTMATTER_ATTRIBUTION_FIELDS);
+    // Walk frontmatter body (between fences). Detect top-level fields:
+    //   `<field>: <inline value>`        — inline scalar (quoted or bare)
+    //   `<field>: |`  or `<field>: >`    — block scalar; consume indented lines
+    // Indented lines under attribution fields are skipped.
+    for (let i = 1; i < closeIdx; i++) {
+        const line = lines[i];
+        // Match top-level "field:" pattern (no leading indent).
+        const m = /^([A-Za-z_][A-Za-z0-9_]*)\s*:\s*(.*)$/.exec(line);
+        if (!m)
+            continue;
+        const field = m[1];
+        if (attribSet.has(field))
+            continue;
+        if (!scanSet.has(field))
+            continue;
+        let valueParts = [];
+        const inline = m[2].trim();
+        const blockStart = /^[|>][+-]?\s*$/.test(inline);
+        if (blockStart) {
+            // Block scalar: consume subsequent indented lines until dedent or fence.
+            for (let j = i + 1; j < closeIdx; j++) {
+                const next = lines[j];
+                if (/^\S/.test(next))
+                    break; // dedent → block ended
+                if (next.trim().length === 0) {
+                    valueParts.push({ text: '', lineNo: j + 1 });
+                    continue;
+                }
+                valueParts.push({ text: next.replace(/^\s+/, ''), lineNo: j + 1 });
+            }
+        }
+        else if (inline.length > 0) {
+            // Inline scalar: strip surrounding quotes if present.
+            const unquoted = inline.replace(/^['"]/, '').replace(/['"]$/, '');
+            valueParts.push({ text: unquoted, lineNo: i + 1 });
+        }
+        else {
+            // `field:` with empty inline and no block marker — may be followed by
+            // indented continuation (rare). Consume indented lines like block.
+            for (let j = i + 1; j < closeIdx; j++) {
+                const next = lines[j];
+                if (/^\S/.test(next))
+                    break;
+                if (next.trim().length === 0)
+                    continue;
+                valueParts.push({ text: next.replace(/^\s+/, ''), lineNo: j + 1 });
+            }
+        }
+        // Scan each accumulated line of this field's value against PATTERNS.
+        for (const { text, lineNo } of valueParts) {
+            if (!text)
+                continue;
+            for (const { label, regex } of PATTERNS) {
+                regex.lastIndex = 0;
+                const hit = regex.exec(text);
+                if (hit) {
+                    hits.push({
+                        field,
+                        line: lineNo,
+                        match: hit[0],
+                        pattern: label,
+                    });
+                }
+            }
+        }
+    }
+    return hits;
+}
+/**
+ * Strip a leading YAML frontmatter block (between `---` lines at the start of
+ * the document). Returns the body. If no frontmatter is present, returns the
+ * input unchanged. Lightweight; we don't parse the YAML.
+ *
+ * Why strip: `distilled_from:` URLs legitimately contain "claude-forge" and
+ * upstream commit refs, but the rubric-v2 blacklist must not penalize them.
+ * Body-only scanning was the design intent (per spec 1846 risk register R15
+ * + 0930 mitigation note); we now enforce it defensively at the scan entry.
+ *
+ * NOTE: stripping discards whitelisted fields like `it_universal_rationale`.
+ * Use `scanFrontmatterRationale()` (or `detectAnchors()`) to also cover them.
+ */
+function stripFrontmatter(content) {
+    if (!content.startsWith('---\n') && !content.startsWith('---\r\n')) {
+        return content;
+    }
+    // Find the closing `---` (must be on its own line, after the first one).
+    // Search from the start of line 2 onward.
+    const firstNewline = content.indexOf('\n');
+    if (firstNewline < 0)
+        return content;
+    const rest = content.slice(firstNewline + 1);
+    const closeMatch = rest.match(/^---\r?\n/m);
+    if (!closeMatch || closeMatch.index === undefined)
+        return content;
+    // Body starts right after the closing fence.
+    return rest.slice(closeMatch.index + closeMatch[0].length);
+}
+/**
+ * Scan content; return list of detected violations (may be empty).
+ *
+ * YAML frontmatter (if any) is stripped before matching, so legitimate
+ * attribution metadata (`distilled_from: https://...claude-forge.git`) does
+ * not flag.
+ *
+ * @param content - markdown content with or without YAML frontmatter
+ */
+export function scanBlacklist(content) {
+    const violations = [];
+    const body = stripFrontmatter(content);
+    const lines = body.split('\n');
+    for (const { label, regex } of PATTERNS) {
+        // We want to scan globally and capture line offsets. Iterate lines.
+        for (let i = 0; i < lines.length; i++) {
+            const line = lines[i];
+            // Reset regex state since we declared it /g.
+            regex.lastIndex = 0;
+            const match = regex.exec(line);
+            if (match) {
+                const start = Math.max(0, match.index - 20);
+                const end = Math.min(line.length, match.index + match[0].length + 20);
+                const snippet = line.slice(start, end).trim();
+                violations.push({
+                    pattern: label,
+                    snippet,
+                    line: i + 1,
+                    rubric_version: RUBRIC_VERSION,
+                });
+            }
+        }
+    }
+    return violations;
+}
+/**
+ * Combined anchor scan: body (via `scanBlacklist`) + whitelisted frontmatter
+ * fields (via `scanFrontmatterRationale`). Returns a flat array of hits
+ * shaped like `BlacklistViolation` so callers can treat both sources
+ * uniformly. Frontmatter hits include the field name in `snippet` for log
+ * clarity.
+ *
+ * Use this in the distill pipeline's hard-reject check; use `scanBlacklist`
+ * alone when you only care about the rendered body (backward compatibility
+ * with rubric v2 scorer code).
+ */
+export function detectAnchors(content) {
+    const bodyHits = scanBlacklist(content);
+    const fmHits = scanFrontmatterRationale(content);
+    const merged = [...bodyHits];
+    for (const h of fmHits) {
+        merged.push({
+            pattern: h.pattern,
+            snippet: `frontmatter[${h.field}]: ${h.match}`,
+            line: h.line,
+            rubric_version: RUBRIC_VERSION,
+        });
+    }
+    return merged;
+}
+/**
+ * Compute a "blacklist penalty" score in [0, 1] where 0 = clean, 1 = heavily
+ * contaminated. Used by the scorer to nudge D4 (claude-forge contextual fit)
+ * downward — but never below 0.
+ *
+ * Each violation contributes 0.2 up to a cap of 1.0 (i.e. 5 hits saturates).
+ */
+export function blacklistPenalty(violations) {
+    return Math.min(1, violations.length * 0.2);
+}
+/** Convenience: throw if there's any violation. Useful in tests. */
+export function assertNoViolations(content, contextLabel) {
+    const v = scanBlacklist(content);
+    if (v.length > 0) {
+        const ctx = contextLabel ? `[${contextLabel}] ` : '';
+        const first = v[0];
+        throw new Error(`${ctx}project-anchor-guard: ${v.length} violation(s) — ` +
+            `first: ${first.pattern} @ line ${first.line}: "${first.snippet}"`);
+    }
+}
+//# sourceMappingURL=project-anchor-guard.js.map

package/dist/skills/distill/project-anchor-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-anchor-guard.js","sourceRoot":"","sources":["../../../src/skills/distill/project-anchor-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC;AAahC;;;;;;;;GAQG;AACH,MAAM,QAAQ,GAAoD;IAChE,4EAA4E;IAE5E,uEAAuE;IACvE,EAAE,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,2BAA2B,EAAE;IACnE,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,wBAAwB,EAAE;IAC9D,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,2BAA2B,EAAE;IAE9D,oFAAoF;IACpF,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE;IAEjD,gEAAgE;IAChE,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,yBAAyB,EAAE;IAC9D,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,mCAAmC,EAAE;IACtE,EAAE,KAAK,EAAE,uBAAuB,EAAE,KAAK,EAAE,qBAAqB,EAAE;IAChE,4EAA4E;IAC5E,sDAAsD;IACtD,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,yCAAyC,EAAE;IAEnF,wEAAwE;IACxE,mDAAmD;IACnD,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,mCAAmC,EAAE;IACpE,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,wDAAwD,EAAE;IAE9F,4EAA4E;IAC5E,EAAE;IACF,4EAA4E;IAC5E,qEAAqE;IACrE,4EAA4E;IAC5E,iBAAiB;IAEjB,0EAA0E;IAC1E,kDAAkD;IAClD,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,uBAAuB,EAAE;IAEjE,0EAA0E;IAC1E,+DAA+D;IAC/D,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,gGAAgG,EAAE;IAEpI,+CAA+C;IAC/C,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,0CAA0C,EAAE;IAEjF,+BAA+B;IAC/B,EAAE,KAAK,EAAE,yBAAyB,EAAE,KAAK,EAAE,sBAAsB,EAAE;IAEnE,mEAAmE;IACnE,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,2CAA2C,EAAE;IAElF,yEAAyE;IACzE,uEAAuE;IACvE,+DAA+D;IAC/D,EAAE,KAAK,EAAE,0BAA0B,EAAE,KAAK,EAAE,uHAAuH,EAAE;IAErK,0EAA0E;IAC1E,mDAAmD;IACnD,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,4EAA4E,EAAE;IAEnH,0DAA0D;IAC1D,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,4BAA4B,EAAE;IAEnE,2EAA2E;IAC3E,iEAAiE;IACjE,kEAAkE;IAClE,EAAE,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,+CAA+C,EAAE;IAEvF,yEAAyE;IACzE,4EAA4E;IAC5E,EAAE,KAAK,EAAE,wBAAwB,EAAE,KAAK,EAAE,wCAAwC,EAAE;IAEpF,6EAA6E;IAC7E,EAAE,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,+CAA+C,EAAE;CACxF,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,wBAAwB;IACxB,aAAa;IACb,aAAa;IACb,WAAW;CACH,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,UAAU;IACV,YAAY;IACZ,cAAc;IACd,cAAc;IACd,SAAS;CACD,CAAC;AAaX;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAe;IACtD,MAAM,IAAI,GAAyB,EAAE,CAAC;IAEtC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACnE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,oEAAoE;IACpE,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC;IAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9B,QAAQ,GAAG,CAAC,CAAC;YACb,MAAM;QACR,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAE9B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS,uBAAuB,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,8BAA8B,CAAC,CAAC;IAElE,mEAAmE;IACnE,sEAAsE;IACtE,4EAA4E;IAC5E,uDAAuD;IACvD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,wDAAwD;QACxD,MAAM,CAAC,GAAG,uCAAuC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7D,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QACnC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QAElC,IAAI,UAAU,GAAuC,EAAE,CAAC;QACxD,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3B,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEjD,IAAI,UAAU,EAAE,CAAC;YACf,yEAAyE;YACzE,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;gBACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACtB,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;oBAAE,MAAM,CAAC,uBAAuB;gBACpD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC7B,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAC7C,SAAS;gBACX,CAAC;gBACD,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;aAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,sDAAsD;YACtD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAClE,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrD,CAAC;aAAM,CAAC;YACN,sEAAsE;YACtE,mEAAmE;YACnE,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;gBACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACtB,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;oBAAE,MAAM;gBAC5B,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;oBAAE,SAAS;gBACvC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;QAED,qEAAqE;QACrE,KAAK,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;YAC1C,IAAI,CAAC,IAAI;gBAAE,SAAS;YACpB,KAAK,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,QAAQ,EAAE,CAAC;gBACxC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;gBACpB,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC7B,IAAI,GAAG,EAAE,CAAC;oBACR,IAAI,CAAC,IAAI,CAAC;wBACR,KAAK;wBACL,IAAI,EAAE,MAAM;wBACZ,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;wBACb,OAAO,EAAE,KAAK;qBACf,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,gBAAgB,CAAC,OAAe;IACvC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACnE,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,yEAAyE;IACzE,0CAA0C;IAC1C,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,YAAY,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IACrC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC5C,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IAClE,6CAA6C;IAC7C,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,MAAM,UAAU,GAAyB,EAAE,CAAC;IAC5C,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAE/B,KAAK,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,QAAQ,EAAE,CAAC;QACxC,oEAAoE;QACpE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,6CAA6C;YAC7C,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;YACpB,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;gBAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;gBACtE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC9C,UAAU,CAAC,IAAI,CAAC;oBACd,OAAO,EAAE,KAAK;oBACd,OAAO;oBACP,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,cAAc,EAAE,cAAc;iBAC/B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,MAAM,GAAyB,CAAC,GAAG,QAAQ,CAAC,CAAC;IACnD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,OAAO,EAAE,eAAe,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,KAAK,EAAE;YAC9C,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,cAAc,EAAE,cAAc;SAC/B,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAgC;IAC/D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;AAC9C,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,YAAqB;IACvE,MAAM,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,YAAY,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACnB,MAAM,IAAI,KAAK,CACb,GAAG,GAAG,yBAAyB,CAAC,CAAC,MAAM,kBAAkB;YACvD,UAAU,KAAK,CAAC,OAAO,WAAW,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,OAAO,GAAG,CACrE,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/skills/distill/topic-deduper.d.ts

@@ -0,0 +1,77 @@
+/**
+ * topic-deduper.ts
+ *
+ * Cross-upstream topic deduplication. Per Q11, when multiple upstreams cover
+ * the same topic (e.g. systematic-debugging in both obra/superpowers and
+ * ECC), we want ONE unified distilled skill with multi-upstream attribution.
+ *
+ * MVP per spec: simple skill-name overlap heuristic. No LLM clustering yet —
+ * that's a later evolution if false-merges become a problem.
+ */
+/**
+ * Per-dimension breakdown of the IT-universal rubric. Each dim ∈ {0, 0.5, 1}.
+ * Inlined here after R-A (spec 1851) removed it-universal-scorer.ts; the
+ * skill-distiller agent (R-B) will produce these values directly via its
+ * `Step 1 — IT-universal Score` envelope.
+ */
+export interface RubricDims {
+    d1: number;
+    d2: number;
+    d3: number;
+    d4: number;
+    d5: number;
+}
+/**
+ * A candidate upstream skill paired with its rubric score. Pre-R-A this lived
+ * in `it-universal-scorer.ts`; after R-A the heuristic/Haiku scorer is gone
+ * and only the type survives — see spec 1851 §2.1.1 + User Decisions Q3.
+ */
+export interface CandidateScore {
+    /** Source file path on disk (upstream cache) */
+    filePath: string;
+    /** Upstream id (e.g. 'obra-superpowers') */
+    upstreamId: string;
+    /** Inferred skill id (file basename or directory name) */
+    skillId: string;
+    /** Per-dim breakdown */
+    dims: RubricDims;
+    /** total = d1+d2+d3+d4+d5 ∈ [0, 5] */
+    total: number;
+    /** ≤200 char rationale */
+    rationale: string;
+    /** True iff total >= threshold */
+    recommend: boolean;
+    /** Set when the scorer hit the blacklist and reduced d4 */
+    blacklistHits: number;
+    /** Set when AI scorer failed and we fell back to heuristic */
+    heuristic: boolean;
+}
+export interface TopicGroup {
+    /** Canonical topic id (the highest-score candidate's normalized skillId) */
+    topicId: string;
+    /** Members sorted by descending score; index 0 is the primary */
+    members: CandidateScore[];
+}
+/**
+ * Normalize a skill id for grouping. Lowercases, strips common stop-tokens,
+ * and trims trailing s/ing for crude lemmatization.
+ *
+ * Examples:
+ *   "systematic-debugging" -> "debug"
+ *   "TDD-workflow"         -> "tdd"
+ *   "writing-plans"        -> "plan"
+ *   "Verification-Before-Completion" -> "verification"
+ */
+export declare function canonicalize(skillId: string): string;
+/**
+ * Group candidates by canonical topic. Within each group, sort by descending
+ * total score so the primary is index 0.
+ */
+export declare function groupByTopic(candidates: CandidateScore[]): TopicGroup[];
+/**
+ * Pick the primary candidate per group (highest score). Returns one
+ * CandidateScore array, one per group. Convenience over `groupByTopic`
+ * when caller doesn't care about sibling members.
+ */
+export declare function pickPrimaries(candidates: CandidateScore[]): CandidateScore[];
+//# sourceMappingURL=topic-deduper.d.ts.map

package/dist/skills/distill/topic-deduper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"topic-deduper.d.ts","sourceRoot":"","sources":["../../../src/skills/distill/topic-deduper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;CACZ;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,gDAAgD;IAChD,QAAQ,EAAE,MAAM,CAAC;IACjB,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,OAAO,EAAE,MAAM,CAAC;IAChB,wBAAwB;IACxB,IAAI,EAAE,UAAU,CAAC;IACjB,sCAAsC;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,0BAA0B;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,kCAAkC;IAClC,SAAS,EAAE,OAAO,CAAC;IACnB,2DAA2D;IAC3D,aAAa,EAAE,MAAM,CAAC;IACtB,8DAA8D;IAC9D,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,4EAA4E;IAC5E,OAAO,EAAE,MAAM,CAAC;IAChB,iEAAiE;IACjE,OAAO,EAAE,cAAc,EAAE,CAAC;CAC3B;AAED;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAoEpD;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,UAAU,EAAE,cAAc,EAAE,GAAG,UAAU,EAAE,CAevE;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,cAAc,EAAE,GAAG,cAAc,EAAE,CAE5E"}

package/dist/skills/distill/topic-deduper.js

@@ -0,0 +1,119 @@
+/**
+ * topic-deduper.ts
+ *
+ * Cross-upstream topic deduplication. Per Q11, when multiple upstreams cover
+ * the same topic (e.g. systematic-debugging in both obra/superpowers and
+ * ECC), we want ONE unified distilled skill with multi-upstream attribution.
+ *
+ * MVP per spec: simple skill-name overlap heuristic. No LLM clustering yet —
+ * that's a later evolution if false-merges become a problem.
+ */
+/**
+ * Normalize a skill id for grouping. Lowercases, strips common stop-tokens,
+ * and trims trailing s/ing for crude lemmatization.
+ *
+ * Examples:
+ *   "systematic-debugging" -> "debug"
+ *   "TDD-workflow"         -> "tdd"
+ *   "writing-plans"        -> "plan"
+ *   "Verification-Before-Completion" -> "verification"
+ */
+export function canonicalize(skillId) {
+    // Drop common prefixes/suffixes.
+    let s = skillId.toLowerCase().replace(/[_]/g, '-').trim();
+    // Strip stop-tokens.
+    const stop = ['systematic', 'workflow', 'safely', 'safe', 'a', 'with', 'before', 'after', 'first'];
+    const rawParts = s.split('-').filter(p => p && !stop.includes(p));
+    // Synonym map — keep tight, only well-known IT-process synonyms.
+    // Includes both base forms and inflected forms (debugging/debug) so we can
+    // look up BEFORE lemmatization (avoids "debugging" → "debugg" miss).
+    const synonyms = {
+        debugging: 'debug',
+        debug: 'debug',
+        bug: 'debug',
+        testing: 'test',
+        test: 'test',
+        tdd: 'test',
+        review: 'review',
+        reviewing: 'review',
+        refactoring: 'refactor',
+        refactor: 'refactor',
+        spec: 'plan',
+        planning: 'plan',
+        plans: 'plan',
+        plan: 'plan',
+        verification: 'verify',
+        verifying: 'verify',
+        verify: 'verify',
+        completion: 'verify',
+        security: 'security',
+        performance: 'performance',
+        perf: 'performance',
+        api: 'api',
+        schema: 'schema',
+        database: 'schema',
+        migration: 'schema',
+        migrations: 'schema',
+        observability: 'observability',
+        monitor: 'observability',
+        monitoring: 'observability',
+        creator: 'meta-skill',
+        creating: 'meta-skill',
+        // Note: 'writing' deliberately omitted — "writing-plans" should map to
+        // 'plan', not 'meta-skill'. Skills meta-creation is captured by the
+        // 'creator' token in 'skill-creator'.
+        brainstorm: 'brainstorm',
+        brainstorming: 'brainstorm',
+        dispatching: 'dispatch',
+        dispatch: 'dispatch',
+    };
+    // First pass: try synonym lookup BEFORE lemmatization.
+    for (const p of rawParts) {
+        if (synonyms[p])
+            return synonyms[p];
+    }
+    // Lemmatize: trailing -ing / -s (only after synonym miss).
+    const lemmaParts = rawParts.map(p => {
+        if (p.endsWith('ing') && p.length > 5)
+            return p.slice(0, -3);
+        if (p.endsWith('s') && p.length > 4)
+            return p.slice(0, -1);
+        return p;
+    });
+    // Second pass on lemmatized.
+    for (const p of lemmaParts) {
+        if (synonyms[p])
+            return synonyms[p];
+    }
+    return lemmaParts.join('-') || skillId.toLowerCase();
+}
+/**
+ * Group candidates by canonical topic. Within each group, sort by descending
+ * total score so the primary is index 0.
+ */
+export function groupByTopic(candidates) {
+    const map = new Map();
+    for (const c of candidates) {
+        const t = canonicalize(c.skillId);
+        if (!map.has(t))
+            map.set(t, []);
+        map.get(t).push(c);
+    }
+    const groups = [];
+    for (const [topicId, members] of map.entries()) {
+        members.sort((a, b) => b.total - a.total);
+        groups.push({ topicId, members });
+    }
+    // Sort groups by primary score descending for predictable iteration.
+    groups.sort((a, b) => b.members[0].total - a.members[0].total);
+    return groups;
+}
+/**
+ * Pick the primary candidate per group (highest score). Returns one
+ * CandidateScore array, one per group. Convenience over `groupByTopic`
+ * when caller doesn't care about sibling members.
+ */
+export function pickPrimaries(candidates) {
+    return groupByTopic(candidates).map(g => g.members[0]);
+}
+//# sourceMappingURL=topic-deduper.js.map

package/dist/skills/distill/topic-deduper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"topic-deduper.js","sourceRoot":"","sources":["../../../src/skills/distill/topic-deduper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAiDH;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,iCAAiC;IACjC,IAAI,CAAC,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1D,qBAAqB;IACrB,MAAM,IAAI,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACnG,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAElE,iEAAiE;IACjE,2EAA2E;IAC3E,qEAAqE;IACrE,MAAM,QAAQ,GAA2B;QACvC,SAAS,EAAE,OAAO;QAClB,KAAK,EAAE,OAAO;QACd,GAAG,EAAE,OAAO;QACZ,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,MAAM;QACZ,GAAG,EAAE,MAAM;QACX,MAAM,EAAE,QAAQ;QAChB,SAAS,EAAE,QAAQ;QACnB,WAAW,EAAE,UAAU;QACvB,QAAQ,EAAE,UAAU;QACpB,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,MAAM;QACb,IAAI,EAAE,MAAM;QACZ,YAAY,EAAE,QAAQ;QACtB,SAAS,EAAE,QAAQ;QACnB,MAAM,EAAE,QAAQ;QAChB,UAAU,EAAE,QAAQ;QACpB,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,aAAa;QAC1B,IAAI,EAAE,aAAa;QACnB,GAAG,EAAE,KAAK;QACV,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,QAAQ;QACnB,UAAU,EAAE,QAAQ;QACpB,aAAa,EAAE,eAAe;QAC9B,OAAO,EAAE,eAAe;QACxB,UAAU,EAAE,eAAe;QAC3B,OAAO,EAAE,YAAY;QACrB,QAAQ,EAAE,YAAY;QACtB,uEAAuE;QACvE,oEAAoE;QACpE,sCAAsC;QACtC,UAAU,EAAE,YAAY;QACxB,aAAa,EAAE,YAAY;QAC3B,WAAW,EAAE,UAAU;QACvB,QAAQ,EAAE,UAAU;KACrB,CAAC;IAEF,uDAAuD;IACvD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,QAAQ,CAAC,CAAC,CAAC;YAAE,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC;IAED,2DAA2D;IAC3D,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QAClC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3D,OAAO,CAAC,CAAC;IACX,CAAC,CAAC,CAAC;IAEH,6BAA6B;IAC7B,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,QAAQ,CAAC,CAAC,CAAC;YAAE,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,UAA4B;IACvD,MAAM,GAAG,GAAG,IAAI,GAAG,EAA4B,CAAC;IAChD,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtB,CAAC;IACD,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IACpC,CAAC;IACD,qEAAqE;IACrE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC/D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,UAA4B;IACxD,OAAO,YAAY,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC"}

package/dist/skills/distill/upstream-fetcher.d.ts

@@ -0,0 +1,71 @@
+/**
+ * upstream-fetcher.ts
+ *
+ * Clones / refreshes the 4 upstream skill repos into
+ * `~/.claude-forge/skills-cache/<upstream>/`. Uses `git` via child_process
+ * with a hard timeout and depth=1 to keep size bounded.
+ *
+ * Spec ref: 1846-skills-distilled-from-upstreams-spec.md Phase A.
+ *
+ * NOT exercised in unit tests (we mock the fetcher). Real runs hit network.
+ */
+/** Per-upstream metadata. Centralized list so other modules can reference. */
+export interface Upstream {
+    /** Stable short id (used as cache subdir name) */
+    id: string;
+    /** Origin URL (for git clone) */
+    url: string;
+    /** License — preserved in NOTICE and per-skill frontmatter */
+    license: string;
+    /** When true, fetcher will SKIP this upstream (e.g. karpathy already local) */
+    skip?: boolean;
+    /** Optional sparse-checkout path (relative dirs) */
+    sparsePaths?: string[];
+}
+/**
+ * Default upstream registry. Q1 + Q2 defaults applied:
+ *  - obra/superpowers, anthropics/skills, affaan-m/ECC active
+ *  - karpathy skipped (license unclear; local karpathy-guidelines exists)
+ */
+export declare const DEFAULT_UPSTREAMS: ReadonlyArray<Upstream>;
+/** Default cache root. Tests override via opts.cacheRoot. */
+export declare function defaultCacheRoot(): string;
+export interface FetchOptions {
+    cacheRoot?: string;
+    timeoutMs?: number;
+    /** When true, fetch even if cache exists. Default: re-use cached clone. */
+    force?: boolean;
+    /** Override default upstream list (used by tests). */
+    upstreams?: ReadonlyArray<Upstream>;
+}
+export interface FetchResult {
+    upstream: Upstream;
+    status: 'cloned' | 'updated' | 'cached' | 'skipped' | 'error';
+    /** Absolute path to cached clone */
+    path: string;
+    /** Resolved HEAD commit hash (for attribution) */
+    commit?: string;
+    error?: string;
+}
+/**
+ * Fetch one upstream into `cacheRoot/<id>/`. Idempotent — re-uses existing
+ * clone unless `force=true`.
+ */
+export declare function fetchUpstream(upstream: Upstream, opts: {
+    cacheRoot: string;
+    timeoutMs: number;
+    force: boolean;
+}): Promise<FetchResult>;
+/** Fetch all upstreams. Returns one FetchResult per upstream. */
+export declare function fetchAllUpstreams(opts?: FetchOptions): Promise<FetchResult[]>;
+/**
+ * Enumerate candidate skill files inside a cached upstream. Returns absolute
+ * file paths that look like skill markdown (SKILL.md, *.md inside `skills/`).
+ *
+ * Heuristic chosen because the 4 upstreams have inconsistent layouts:
+ *  - obra/superpowers: `skills/<name>/SKILL.md`
+ *  - anthropics/skills: `<name>/SKILL.md`
+ *  - affaan-m/ECC: flat `*.md`
+ */
+export declare function listUpstreamSkills(repoPath: string): Promise<string[]>;
+//# sourceMappingURL=upstream-fetcher.d.ts.map

package/dist/skills/distill/upstream-fetcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upstream-fetcher.d.ts","sourceRoot":"","sources":["../../../src/skills/distill/upstream-fetcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAWH,8EAA8E;AAC9E,MAAM,WAAW,QAAQ;IACvB,kDAAkD;IAClD,EAAE,EAAE,MAAM,CAAC;IACX,iCAAiC;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,8DAA8D;IAC9D,OAAO,EAAE,MAAM,CAAC;IAChB,+EAA+E;IAC/E,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,oDAAoD;IACpD,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,EAAE,aAAa,CAAC,QAAQ,CAwBrD,CAAC;AAEF,6DAA6D;AAC7D,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2EAA2E;IAC3E,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,sDAAsD;IACtD,SAAS,CAAC,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,QAAQ,CAAC;IACnB,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,OAAO,CAAC;IAC9D,oCAAoC;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,kDAAkD;IAClD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AA+BD;;;GAGG;AACH,wBAAsB,aAAa,CACjC,QAAQ,EAAE,QAAQ,EAClB,IAAI,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAC7D,OAAO,CAAC,WAAW,CAAC,CA0EtB;AAED,iEAAiE;AACjE,wBAAsB,iBAAiB,CAAC,IAAI,GAAE,YAAiB,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAevF;AAED;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAW5E"}