create-egregore 0.20.2 → 0.21.0-runtime-mvp.2

package/runtime/claude/.claude/skills/telemetry/SKILL.md

@@ -0,0 +1,117 @@
+---
+name: telemetry
+description: "Manage local-first telemetry — status, inspect, export, opt in/out, clear, or explicitly share a disclosed dataset. Use for /telemetry, 'turn off telemetry', or 'what data do you collect'."
+---
+
+Manage telemetry settings. Shows status by default.
+
+## When to invoke
+
+User says: "/telemetry", "telemetry status", "turn off telemetry", "disable telemetry", "what data do you collect", "inspect/export/share my telemetry events", "clear telemetry buffer"
+Not this: viewing telemetry across all registered orgs (internal, admin only) → `/telemetry-admin`
+
+## Arguments
+
+- `status` (default) — show whether telemetry is enabled, buffer size, opt-out method
+- `off` or `disable` — disable telemetry (sets `telemetry: false` in state file)
+- `on` or `enable` — re-enable telemetry
+- `inspect [N]` or legacy `show [N]` — show last N buffered events (default 10)
+- `export <path>` — validate and copy the local JSONL dataset; never uploads
+- `share` — disclose the exact local dataset and prepare a short-lived confirmation token
+- `share --confirm <token>` — send only the unchanged, previously disclosed dataset to the same target
+- `clear` — delete local telemetry buffer
+
+## What to do
+
+Parse the argument (default to `status` if none given).
+
+### status (default)
+
+```bash
+bash bin/telemetry.sh status
+```
+
+Show the output to the user.
+
+### off / disable
+
+```bash
+bash bin/telemetry.sh disable
+```
+
+Confirm: **"Telemetry disabled. No events will be collected until you run `/telemetry on`."**
+
+### on / enable
+
+```bash
+bash bin/telemetry.sh enable
+```
+
+Confirm: **"Telemetry re-enabled."**
+
+### inspect [N]
+
+```bash
+bash bin/telemetry.sh inspect ${N:-10}
+```
+
+Show the output. If empty, say **"No buffered events."**
+
+### export <path>
+
+```bash
+bash bin/telemetry.sh export "<path>"
+```
+
+Report the resulting local path. Export validates the same content-free event
+envelope used by sharing. It does not grant permission to upload the file.
+
+### share
+
+First prepare the proposal. This performs no network I/O:
+
+```bash
+bash bin/telemetry.sh share
+```
+
+Show the complete output: target, event count, bytes, dataset hash, field list,
+exclusions, expiry, and exact confirmation command. Then stop. Do not infer
+confirmation from the request to share, a prior share, notification consent, or
+any unattended workflow.
+
+Only after the user freshly confirms this exact proposal, run the printed
+command containing its one-time token. A changed target, changed buffer,
+expired token, or bad token requires a new proposal. Local events remain after
+a successful share.
+
+Local instances have no default outbound sink. They may export, name an
+explicit endpoint, or explicitly opt into the legacy public relay with
+`--legacy-public-relay`; never select that relay automatically.
+
+### clear
+
+```bash
+bash bin/telemetry.sh clear
+```
+
+Confirm: **"Local telemetry buffer cleared."**
+
+## What is collected
+
+Structured identifiers and metrics: event/task/actor/org/session identifiers,
+timestamps, retrieval type, privacy-safe lexical/vector fingerprints when
+configured, returned/opened artifact identifiers, ranks/order, tool-call count,
+latency, token counts, writeback outcome, success/failure, and index-spec
+version. Metric strings are bounded identifiers/enums, not prose.
+
+## What is NEVER collected
+
+Raw prompts/queries, passages, file paths, file contents, code, env var values,
+secrets, conversation content, prose error messages, or command arguments that
+might contain user content.
+
+## Opt-out methods
+
+1. `/telemetry off` — persistent opt-out via state file
+2. `EGREGORE_NO_TELEMETRY=1` in `.env` — env var opt-out
+3. `DO_NOT_TRACK=1` — standard env var opt-out

package/runtime/claude/.claude/skills/test/SKILL.md

@@ -0,0 +1,87 @@
+---
+name: test
+description: "Run Egregore's fast static, Runtime-contract, and targeted automated test gate before save. Graph validation is explicit and never part of the Local default."
+---
+
+Run the fast automated gate for the current change.
+
+## When to invoke
+
+Use for `$test`, “test my changes”, or a quick pre-save validation. Use `qa`
+for broader behavioral proof and adversarial fixtures.
+
+Arguments: `$ARGUMENTS` — optional paths, `--all`, or explicit `--graph`.
+
+## Default gate
+
+1. Resolve the configured integration branch. Scope to supplied paths,
+   `--all`, or changed files against that branch.
+2. Run static analysis once:
+
+```bash
+bash bin/test-changes.sh <scope>
+```
+
+`--all` scans source skills plus Runtime-neutral shell adapters. Do not treat a
+missing historical `.claude/commands` directory as test coverage.
+
+3. Run the architectural ratchet once (source instances only — installed
+   instances do not ship the distribution engine and skip this step):
+
+```bash
+if [ -f bin/capability-distribution.mjs ] && [ -f capability-distribution.json ]; then
+  bash bin/node-run.sh bin/capability-distribution.mjs runtime-skill-audit \
+    --root . --strict-contract
+fi
+```
+
+This checks the complete skill denominator, QMD/graph/control-plane/write
+coupling ceilings, and migrated-skill contracts.
+
+4. Select the smallest relevant existing test suites from the changed paths
+and `skill-references.json`. Run independent suites in parallel where the
+harness supports it. Do not rerun the same suite through multiple rituals.
+5. For changes to cross-harness Runtime sources or skills, run Codex/Pi/Prime
+bundle parity checks.
+
+## Optional graph validation
+
+Only when the user explicitly passed `--graph` or changed the graph projection
+adapter itself:
+
+- require Connected graph capability;
+- extract bounded read-only Cypher fixtures from the named graph files only;
+- reject `CREATE`, `MERGE`, `SET`, `DELETE`, `REMOVE`, or `DROP`;
+- validate through the optional graph projection adapter;
+- report graph unavailable as an optional-check gap, not a Local test failure.
+
+Never scan every skill for Cypher and execute it against a live database.
+
+## Result
+
+Render one compact pass/fail report with:
+
+- static checks;
+- Runtime architecture audit;
+- targeted suites and counts;
+- bundle parity when applicable;
+- optional graph check only when requested;
+- exact failures and the safe next action.
+
+Warnings do not block unless they represent a privacy, authorization,
+canonical-order, or destructive-action risk.
+
+## Rules
+
+- No default Neo4j, API, or network dependency.
+- Tests must not modify production/live QMD, graph, control-plane, or canonical
+  memory state.
+- Use isolated fixtures for writes and destructive/failure behavior.
+- Never call graph functionality the correct default Runtime boundary.
+- Do not claim “safe to save” when required suites were skipped.
+
+Emit content-free telemetry after the gate:
+
+```bash
+bash bin/telemetry.sh emit "command" '{"command":"test"}' 2>/dev/null &
+```