create-yss-spec 2.1.5 → 2.1.6

package/template/.qoder/skills/drawio/references/workflows/visual-review.md

@@ -1,108 +0,0 @@
-# Workflow: Exported Visual Review and YAML-First Rework
-
-Use this workflow after create, edit, import, or replicate when an exported artifact must be inspected by a person or a vision-capable model. The exported preview is evidence; canonical YAML remains the editable source.
-
-## Produce a Vision Preview
-
-Write previews and review records to the work directory, not the final delivery directory:
-
-```bash
-node <base-skill-dir>/scripts/cli.js input.yaml .drawio-tmp/figure/figure.preview.png --validate --visual-preview
-```
-
-`--visual-preview` requests a non-embedded PNG, waits for the Desktop output to stabilize, validates PNG structure, repairs only the recognized terminal IEND truncation, and re-exports by height when needed. The accepted PNG has `max(width, height) <= 2000`.
-
-If draw.io Desktop is unavailable, the CLI reports that no PNG vision-preview was produced and writes a standalone SVG fallback. Inspect that SVG when the current viewer supports it; otherwise record visual execution as `missing evidence`. Do not describe the SVG fallback as a PNG or model-executed review.
-
-## Review Record
-
-Persist review evidence as `.drawio-tmp/<name>/visual-review.json` when the work needs an auditable loop:
-
-```json
-{
-  "artifact": ".drawio-tmp/figure/figure.preview.png",
-  "round": 1,
-  "issues": [
-    {
-      "pageId": "Page-1",
-      "objectId": "edge:api->db",
-      "region": null,
-      "problem": "edge-label-overlap",
-      "severity": "blocker",
-      "evidence": "The edge label overlaps the database outline near its upper border.",
-      "suggestedAction": "Move labelOffset 16px into the adjacent whitespace.",
-      "source": "visual"
-    }
-  ]
-}
-```
-
-Required issue fields are `pageId`, `objectId`, `problem`, `severity`, `evidence`, `suggestedAction`, and `source`.
-
-- `source` is `deterministic` for CLI/validator evidence or `visual` for observed exported-artifact evidence.
-- `severity` is `blocker`, `warning`, or `info`.
-- `objectId` may be `null` only when the reviewer cannot resolve a stable ID. In that case, `region` and `evidence` must identify a concrete page area; never invent an ID.
-- Evidence states what is visible or measured. It does not infer hidden intent.
-
-## Problem Taxonomy
-
-| Problem | Observable condition |
-| --- | --- |
-| `overlap` | Two nodes, modules, labels, or annotations occupy the same visual area. |
-| `clipped-label` | Text is cut off or escapes its intended bounds. |
-| `missing-connection` | A required connector is absent or visibly detached from its endpoint. |
-| `off-canvas` | Content falls outside the exported page. |
-| `edge-through-object` | A connector crosses an unrelated node, label, or module interior. |
-| `stacked-edge` | Multiple connectors are visually indistinguishable on the same route. |
-| `edge-label-overlap` | An edge label collides with a line, object, or another label. |
-| `missing-content` | A source-required node, label, legend, formula, or module is absent. |
-| `source-mismatch` | The exported structure or meaning differs from the confirmed request or reference. |
-
-Use the narrowest matching problem. Put additional context in `evidence` instead of inventing new near-duplicate problem names.
-
-## Merge Deterministic and Visual Evidence
-
-Deduplicate by `pageId + objectId + problem`. When `objectId` is `null`, use `pageId + region + problem`. Keep the higher severity and preserve both observations: retain the first issue's `source` and evidence, then append a `corroboration` entry containing the other `source` and evidence. Do not discard a deterministic warning merely because the visual reviewer did not mention it, and do not upgrade a visual guess into deterministic evidence.
-
-## Map Accepted Issues to Canonical Changes
-
-No review record mutates files directly. Convert an accepted issue into the smallest canonical YAML patch, validate, then rerender.
-
-| Feedback | Canonical YAML action |
-| --- | --- |
-| color or style | Change semantic type, theme, palette, or a scoped style override. |
-| add or remove node | Update the node and every affected edge by stable ID. |
-| move or resize | Update `bounds` for an explicitly positioned diagram. |
-| add or change connector | Update the edge by stable ID or stable `from`/`to` pair. |
-| label change | Update the node or edge label without changing its ID. |
-| layout direction | Change `meta.layout`, then rerun layout and validation. |
-| clipped label | Shorten the label first; then apply the documented bounds/font ladder. |
-| edge-label overlap | Change `labelOffset`; keep the label on its edge. |
-
-If a `.spec.yaml` sidecar exists, edit it. If only a `.drawio` exists, import it to canonical YAML before iterative work. Direct XML editing is limited to the documented direct-XML exception or an imported diagram that cannot produce a usable sidecar; run XML validation after every such patch.
-
-## Rework Loop
-
-For each accepted round:
-
-1. Patch the smallest canonical YAML object or the documented XML exception.
-2. Run spec validation and render a fresh `.drawio`.
-3. Overwrite the same work-dir preview path with `--visual-preview`.
-4. Inspect PNG structure and dimensions, then perform visual review.
-5. Persist the new review record and compare it with the previous blockers.
-
-An autonomous round is complete only when validation ran, the preview is structurally valid and dimension-bounded, and every previous blocker is absent, downgraded with new evidence, or explicitly retained for user judgment. Run at most **2 autonomous repair rounds**. After that, return unresolved blockers to the user. After **5 user feedback rounds**, report remaining issues and recommend Desktop fine-tuning instead of claiming automatic completion.
-
-Final 300dpi embedded PNG/PDF/JPG/SVG exports remain separate deliverables. Produce them only after the preview/rework decision is complete; never overwrite a final artifact with a vision preview.
-
-## Evidence Labels
-
-Label each case honestly:
-
-- `recorded fixture`: stored input/output used for reproducibility;
-- `command-executed`: deterministic CLI assertions were run;
-- `Desktop-executed`: draw.io Desktop produced the inspected artifact;
-- `model-executed`: provider and model metadata identify a real visual-model run;
-- `missing evidence`: the required provider or viewer was unavailable.
-
-A recorded fixture or deterministic command is not model-executed evidence.

package/template/.qoder/skills/drawio/reports/output_quality_scorecard.md

@@ -1,106 +0,0 @@
-# Output Quality Scorecard: Upstream Integration
-
-Date: 2026-07-18
-Decision: **warn**
-
-This release-level scorecard aggregates the promoted offline capability families without changing the evidence classification of any archived child. Deterministic command results prove local contracts only; unavailable external executors remain `missing evidence`.
-
-## Release-Wide Capability Summary
-
-| Capability case | File-backed input | Deterministic status | External evidence gap |
-| --- | --- | --- | --- |
-| Vision preview | `cloud-reference-architecture.yaml` and four additional C0 fixtures | command-executed pass; five Desktop previews recorded | provider-backed model metadata missing evidence |
-| Offline AI icon catalog | `ai-icons-core-aliases.yaml` and four additional catalog fixtures | command-executed pass; Desktop catalog evidence recorded | model-executed review missing evidence |
-| Declared/live drift | `drift-declared-compose.yaml` plus sanitized report/spec evidence | command-executed pass | provider, daemon, cluster, Desktop, and model missing evidence |
-| Raster canonical adapter | `raster-extraction.json` | command-executed pass | OCR and model extraction fidelity missing evidence |
-| Multi-page and postprocess | `postprocess/fixtures/bundle.yaml` | command-executed pass | Desktop and browser execution missing evidence |
-| Draw.io import round-trip | `import-simple-compressed.drawio` | command-executed pass | Desktop multi-page editing missing evidence |
-| SysML/BPMN catalog | `shape-index.json.gz` | command-executed pass | nested semantic constructs remain deferred |
-
-The machine-readable registry is [`../evals/upstream-integration-cases.json`](../evals/upstream-integration-cases.json). The 37-item disposition and per-capability evidence state live in [`../references/docs/upstream-capability-compatibility.md`](../references/docs/upstream-capability-compatibility.md).
-
-The C0 preview pipeline passed every deterministic export contract on the current machine. All five PNGs are structurally valid and readable, and no visual issue remains after YAML-first fixture hardening. Provider/model metadata was not captured, so visual inspection is not counted as `model-executed` evidence.
-
-## Governance Boundary
-
-- owner: drawio-skill maintainers
-- review cadence: per-release
-- input_files: [`../evals/vision-preview-cases.json`](../evals/vision-preview-cases.json) lists five `file-backed fixture` inputs.
-- output contract: non-embedded PNG, `profile=vision-preview`, `max(width, height) <= 2000`, valid terminal IEND, work-directory output, and no change to final export defaults.
-- rollback boundary: remove the preview profile, evidence manifest, and work-directory review records without changing the existing final 300dpi embedded PNG path.
-
-## Evidence Classification
-
-| Evidence kind | Count | Status | Interpretation |
-| --- | ---: | --- | --- |
-| recorded fixture | 5 inputs | pass | Five committed YAML inputs are recorded; generated PNGs remain ignored work artifacts. |
-| command-executed | 5 cases | pass | The real CLI ran `--validate --visual-preview` for every case. |
-| Desktop-executed | 5 cases | pass | draw.io Desktop `30.3.11` produced every inspected PNG. |
-| model-executed | 0 cases | missing evidence | The visual inspection did not capture provider/model metadata and is not promoted to model evidence. |
-| trust report | 0 | missing evidence | C0 did not regenerate a package-level trust report; governed promotion remains a later release gate. |
-
-## Case Results
-
-| Category | Source | Preview | Dimensions | PNG result | Current visual result |
-| --- | --- | --- | ---: | --- | --- |
-| small | `cloud-reference-architecture.yaml` | `small.preview.png` | 2000 x 298 | IEND complete; unchanged | pass |
-| wide | `arch-dark-microservices.yaml` | `wide.preview.png` | 2000 x 935 | IEND complete; unchanged | pass |
-| tall | `vision-tall-workflow.yaml` | `tall.preview.png` | 316 x 2000 | height re-exported; IEND complete; unchanged | pass |
-| CJK | `industrial-architecture-cn-paper.yaml` | `cjk.preview.png` | 2000 x 1800 | IEND complete; unchanged | pass after 2 rounds |
-| dense academic | `yolo-model-architecture-paper.yaml` | `dense-academic.preview.png` | 2000 x 1153 | IEND complete; unchanged | pass after 2 rounds |
-
-All paths are rooted at `.drawio-tmp/vision-preview/`. The evidence manifest validates source existence, YAML parsing, draw.io XML generation, output paths, review issue fields, and canonical edge targets without requiring Desktop in CI.
-
-## Rework Outcome
-
-- CJK round 1 found `edge:train_api->apscheduler` crossing the scheduler title. Stable waypoints plus `labelOffset` moved the connector and label into clear space. Round 2 has no remaining issue.
-- Dense academic round 1 found an empty route artifact on `edge:p3->fuse`; a stable short route removed it.
-- The same dense case exposed `edge:spp->p3` crossing Backbone nodes. Stable waypoints routed it through the module gap. Offset candidates either collided in Desktop or represented a different connector despite deterministic acceptance, so the redundant edge label was removed while `meta.legend` retained the dashed-link multi-scale meaning.
-- Work-directory records live under `.drawio-tmp/vision-preview/reviews/`. The tracked manifest preserves the initial issues, canonical patch targets, round count, and current status.
-
-## Score Reading
-
-| Measure | Result |
-| --- | --- |
-| Baseline pass rate | missing evidence; no pre-C0 matched execution set was recorded |
-| With-skill deterministic pass rate | 5/5 (100%) |
-| Longest-edge and IEND pass rate | 5/5 (100%) |
-| Readable with no blocker after rework | 5/5 (100%) |
-| Clean with no visual warning | 5/5 (100%) |
-| Absolute baseline delta | missing evidence |
-| Provider-backed visual-model pass rate | missing evidence |
-
-The deterministic score proves the export and rework contracts, not visual-model quality uplift. A future provider-backed run must record `execution_kind=model`, provider, and model before this report can claim model-executed evidence. A blind A/B comparison against a pre-C0 export set is also `missing evidence`.
-
-## Reproduction
-
-For each source/output pair in the manifest:
-
-```powershell
-node skills/drawio/scripts/cli.js <source.yaml> <output.preview.png> --validate --visual-preview
-```
-
-Focused evidence check:
-
-```powershell
-node --test tests/vision-preview-evidence.test.js
-```
-
-## C1 Saved-Snapshot Drift Addendum
-
-The file-backed Compose case records a sanitized drift report, editable
-canonical YAML, stable renderer IDs, status text, legend, changed keys, and a
-dashed removed edge. Focused tests execute the snapshot parsers, comparator,
-shared projector, vendored JavaScript ELK, renderer, and XML validation.
-
-| Evidence kind | Count | Status | Interpretation |
-| --- | ---: | --- | --- |
-| recorded fixture | 1 case | pass | Saved declared/live inputs plus sanitized report/spec/evidence manifest are committed. |
-| command-executed | 1 case | pass | Deterministic snapshot, diff, JS ELK, renderer, XML, and sentinel checks ran. |
-| provider CLI / live environment | 0 cases | missing evidence | No `terraform`, `docker`, or `kubectl` capture and no daemon/cluster/cloud access occurred. |
-| Desktop-executed | 0 cases | missing evidence | No PNG preview was requested or generated for this child. |
-| model-executed | 0 cases | missing evidence | No provider/model metadata or visual-model run exists. |
-
-This addendum proves deterministic projection drift only. It does not upgrade
-provider, Desktop, or visual-model evidence and does not alter the C0 five-case
-preview result above.

package/template/.qoder/skills/drawio/reports/upstream-port-release-evidence.md

@@ -1,43 +0,0 @@
-# Upstream Port Release Evidence
-
-Release line: `2.7.0`
-
-Local promotion gate: **pass**
-
-This report describes the release boundary for the functional-equivalence port. It does not claim upstream CLI compatibility, remote publication, or external-provider execution.
-
-## Shipped Ownership
-
-- Base owns canonical spec and page bundle, stable identity, adapters, JavaScript ELK, rendering, catalogs, postprocess, references, evals, and reports.
-- Academic owns publication policy and eval prompts only; it consumes the sibling base and contains no JS, TS, or Python runtime.
-- One vendored `shape-index.json.gz`, one `ai-icons.json.gz`, and one `specToDrawioXml` implementation remain authoritative.
-
-## Runtime And Dependency Boundary
-
-- Node 20+ is the standard offline runtime.
-- Python parsers are isolated and optional for explicitly selected adapter routes.
-- Graphviz, network, Desktop, browser, MCP, model, provider CLI, daemon, cluster, and PR automation are not required by ordinary offline authoring.
-- No production or runtime dependency was added by integration/promotion.
-
-## Package Gate
-
-The release archives are built by `just zip` from `git ls-files`. The final gate must run after an explicit staged allowlist so new tracked entries are included. It verifies:
-
-1. each archive contains its own `SKILL.md` and tracked interface/eval/reference/report files;
-2. zip names equal the corresponding staged Git manifest;
-3. no `.drawio-tmp`, preview, log, cache, `.DS_Store`, `.last_update`, or unrelated archive file is present;
-4. generated zip files are removed after SHA-256 and manifest evidence is recorded in the Trellis task.
-
-## Local Package Result
-
-- `drawio.zip`: 299 staged entries; required promotion reference, eval, scorecard, release report, SKILL, and interface files present; 0 forbidden entries.
-- `drawio-academic-skills.zip`: 25 staged entries; required SKILL, interface, and eval files present; 0 forbidden entries.
-- `archive/.gitignore` remained byte-identical. Generated zips are removed after final hash capture and are not release-source inputs.
-
-## Evidence Status
-
-- Deterministic compatibility, eval, docs, tests, and staged package-manifest checks: pass.
-- Previously recorded C0 Desktop previews and AI icon Desktop evidence retain their original executor metadata.
-- Provider/daemon/cluster, Graphviz parity, raster OCR/model fidelity, Desktop multi-page/postprocess, browser/MCP, visual-model metadata, PR automation, remote install, and remote release: **missing evidence**.
-
-Remote release is `missing evidence`; this task performs no push, tag, upload, or external publication.

package/template/.qoder/skills/drawio/scripts/adapters/ci.js

@@ -1,139 +0,0 @@
-import { ERROR_CODES, createCiIdentity, createGroupIdentity } from './identity.js'
-import {
-  adapterError,
-  diagnostic,
-  finalizeConfigProjection,
-  isRecord,
-  parseStructuredDocuments,
-  pushUniqueEdge,
-  requireRecord
-} from './config-common.js'
-
-const ADAPTER = 'ci-config'
-const GITLAB_RESERVED = new Set([
-  'default',
-  'include',
-  'image',
-  'services',
-  'stages',
-  'types',
-  'variables',
-  'workflow',
-  'cache',
-  'before_script',
-  'after_script'
-])
-
-export const CI_ATTRIBUTE_ALLOWLIST = Object.freeze({
-  node: ['job', 'matrix', 'provider', 'reusable', 'runner', 'stage', 'trigger', 'workflow'],
-  edge: [],
-  module: ['provider', 'stage', 'workflow']
-})
-
-function normalizeNeeds(value) {
-  if (typeof value === 'string') return [value]
-  if (!Array.isArray(value)) return []
-  return value
-    .map((entry) => (typeof entry === 'string' ? entry : isRecord(entry) && typeof entry.job === 'string' ? entry.job : null))
-    .filter(Boolean)
-}
-
-function githubRecords(document) {
-  const jobs = requireRecord(document.jobs, 'GitHub Actions jobs', ADAPTER)
-  return Object.entries(jobs).map(([key, value]) => {
-    const job = requireRecord(value, `GitHub Actions job ${key}`, ADAPTER)
-    return {
-      key,
-      label: typeof job.name === 'string' ? job.name : key,
-      stage: null,
-      needs: normalizeNeeds(job.needs),
-      attributes: {
-        ...(typeof job['runs-on'] === 'string' || Array.isArray(job['runs-on']) ? { runner: job['runs-on'] } : {}),
-        ...(typeof job.uses === 'string' ? { reusable: job.uses } : {}),
-        ...(isRecord(job.strategy?.matrix) ? { matrix: true } : {})
-      }
-    }
-  })
-}
-
-function gitlabRecords(document) {
-  return Object.entries(document)
-    .filter(([key, value]) => !GITLAB_RESERVED.has(key) && !key.startsWith('.') && isRecord(value))
-    .map(([key, job]) => ({
-      key,
-      label: key,
-      stage: typeof job.stage === 'string' ? job.stage : 'test',
-      needs: normalizeNeeds(job.needs),
-      attributes: { ...(job.trigger != null ? { trigger: true } : {}) }
-    }))
-}
-
-export function parseCiWorkflow(source, { provider, workflow } = {}) {
-  if (!['github-actions', 'gitlab-ci'].includes(provider)) {
-    adapterError(ERROR_CODES.ADAPTER_UNSUPPORTED, 'CI provider must be github-actions or gitlab-ci', { adapter: ADAPTER })
-  }
-  if (typeof workflow !== 'string' || workflow.trim() === '') {
-    adapterError(ERROR_CODES.ADAPTER_PARSE, 'CI workflow requires a repo-relative workflow path', { adapter: ADAPTER })
-  }
-  const documents = parseStructuredDocuments(source, { adapter: ADAPTER })
-  if (documents.length !== 1) adapterError(ERROR_CODES.ADAPTER_PARSE, 'CI workflow must contain one document', { adapter: ADAPTER })
-  const document = requireRecord(documents[0], 'CI workflow', ADAPTER)
-  const records = provider === 'github-actions' ? githubRecords(document) : gitlabRecords(document)
-
-  const modules = []
-  const stageIdentities = new Map()
-  if (provider === 'gitlab-ci') {
-    const declaredStages = Array.isArray(document.stages) ? document.stages.filter((stage) => typeof stage === 'string') : []
-    const stages = [...new Set([...declaredStages, ...records.map((record) => record.stage)])]
-    for (const stage of stages) {
-      const identity = createGroupIdentity({ domain: 'ci-stage', key: `${provider}/${workflow}/${stage}` })
-      stageIdentities.set(stage, identity)
-      modules.push({ identity, label: stage, attributes: { provider, workflow, stage } })
-    }
-  }
-
-  const identities = new Map()
-  const nodes = records.map((record) => {
-    const identity = createCiIdentity({ provider, workflow, job: record.key })
-    identities.set(record.key, identity)
-    return {
-      identity,
-      label: record.label,
-      semanticType: 'process',
-      ...(record.stage ? { moduleIdentity: stageIdentities.get(record.stage) } : {}),
-      attributes: {
-        provider,
-        workflow,
-        job: record.key,
-        ...(record.stage ? { stage: record.stage } : {}),
-        ...record.attributes
-      }
-    }
-  })
-
-  const edges = []
-  const edgeKeys = new Set()
-  const diagnostics = []
-  for (const record of records) {
-    const to = identities.get(record.key)
-    for (const dependency of record.needs) {
-      const from = identities.get(dependency)
-      if (!from) {
-        diagnostics.push(diagnostic('CI_EXTERNAL_NEED', `CI job "${record.key}" needs missing job "${dependency}".`, to))
-        continue
-      }
-      pushUniqueEdge(edges, edgeKeys, {
-        from,
-        to,
-        relation: 'needs',
-        discriminator: `needs:${dependency}->${record.key}`,
-        attributes: {}
-      })
-    }
-  }
-
-  return finalizeConfigProjection(
-    { adapter: ADAPTER, domain: 'ci', locator: workflow, nodes, edges, modules, diagnostics },
-    CI_ATTRIBUTE_ALLOWLIST
-  )
-}

package/template/.qoder/skills/drawio/scripts/adapters/ci.test.js

@@ -1,41 +0,0 @@
-import test from 'node:test'
-import assert from 'node:assert/strict'
-
-import { parseCiWorkflow } from './ci.js'
-
-test('parseCiWorkflow uses GitHub workflow path and job keys for identity', () => {
-  const source = `
-name: Display name
-on: [push]
-jobs:
-  build: { runs-on: ubuntu-latest, steps: [] }
-  test: { name: Mutable label, needs: build, runs-on: ubuntu-latest, steps: [] }
-`
-  const first = parseCiWorkflow(source, {
-    provider: 'github-actions',
-    workflow: '.github/workflows/ci.yml'
-  })
-  const second = parseCiWorkflow(source.replace('Mutable label', 'Renamed'), {
-    provider: 'github-actions',
-    workflow: '.github/workflows/ci.yml'
-  })
-
-  assert.deepEqual(first.nodes.map((node) => node.identity), second.nodes.map((node) => node.identity))
-  assert.equal(first.edges[0].relation, 'needs')
-})
-
-test('parseCiWorkflow supports GitLab jobs and stage modules', () => {
-  const source = `
-stages: [build, test]
-build-job: { stage: build, script: echo build }
-test-job: { stage: test, needs: [build-job], script: echo test }
-`
-  const projection = parseCiWorkflow(source, {
-    provider: 'gitlab-ci',
-    workflow: '.gitlab-ci.yml'
-  })
-
-  assert.equal(projection.nodes.length, 2)
-  assert.equal(projection.modules.length, 2)
-  assert.equal(projection.edges[0].relation, 'needs')
-})

package/template/.qoder/skills/drawio/scripts/adapters/code-common.js

@@ -1,171 +0,0 @@
-import { lstatSync, readFileSync, readdirSync } from 'node:fs'
-import { extname, resolve, sep } from 'node:path'
-
-import { finalizeGraphProjection } from './graph-projection.js'
-import { AdapterContractError, ERROR_CODES, createCodeIdentity } from './identity.js'
-
-export const MAX_CODE_FILE_BYTES = 1024 * 1024
-export const MAX_CODE_PROJECT_BYTES = 4 * 1024 * 1024
-const MAX_CODE_FILES = 500
-const DEFAULT_IGNORED_DIRECTORIES = new Set([
-  '.git',
-  '.venv',
-  '__pycache__',
-  'build',
-  'coverage',
-  'dist',
-  'node_modules',
-  'target',
-  'testdata',
-  'vendor',
-  'venv'
-])
-
-export function codeAdapterError(code, message, context = {}, cause) {
-  throw new AdapterContractError(code, message, context, { cause })
-}
-
-function readUtf8File(path, relativePath, state) {
-  let metadata
-  try {
-    metadata = lstatSync(path)
-  } catch (error) {
-    codeAdapterError(ERROR_CODES.ADAPTER_PARSE, 'Code source metadata could not be read', { path: relativePath }, error)
-  }
-  if (metadata.isSymbolicLink()) {
-    state.skippedSymlinks++
-    return null
-  }
-  if (!metadata.isFile()) return null
-  if (metadata.size > MAX_CODE_FILE_BYTES) {
-    codeAdapterError(ERROR_CODES.ADAPTER_PARSE, `Code source exceeds the ${MAX_CODE_FILE_BYTES} byte file limit`, {
-      path: relativePath
-    })
-  }
-  state.totalBytes += metadata.size
-  if (state.totalBytes > MAX_CODE_PROJECT_BYTES) {
-    codeAdapterError(ERROR_CODES.ADAPTER_PARSE, `Code project exceeds the ${MAX_CODE_PROJECT_BYTES} byte source limit`)
-  }
-  try {
-    return new TextDecoder('utf-8', { fatal: true }).decode(readFileSync(path))
-  } catch (error) {
-    codeAdapterError(ERROR_CODES.ADAPTER_PARSE, 'Code source must be readable UTF-8', { path: relativePath }, error)
-  }
-}
-
-export function scanCodeProject(projectRoot, { extensions, ignoredDirectories = [] } = {}) {
-  if (typeof projectRoot !== 'string' || projectRoot.trim() === '') {
-    codeAdapterError(ERROR_CODES.ADAPTER_PARSE, 'Code project root must be a non-empty directory path')
-  }
-  const root = resolve(projectRoot)
-  let rootMetadata
-  try {
-    rootMetadata = lstatSync(root)
-  } catch (error) {
-    codeAdapterError(ERROR_CODES.ADAPTER_PARSE, 'Code project root could not be read', {}, error)
-  }
-  if (rootMetadata.isSymbolicLink() || !rootMetadata.isDirectory()) {
-    codeAdapterError(ERROR_CODES.ADAPTER_PARSE, 'Code project root must be a real directory')
-  }
-  if (!Array.isArray(extensions) || extensions.length === 0) {
-    codeAdapterError(ERROR_CODES.ADAPTER_PARSE, 'Code project scanner requires source extensions')
-  }
-
-  const allowedExtensions = new Set(extensions.map((value) => value.toLowerCase()))
-  const ignored = new Set([...DEFAULT_IGNORED_DIRECTORIES, ...ignoredDirectories])
-  const files = []
-  const state = { totalBytes: 0, skippedSymlinks: 0 }
-
-  const walk = (directory, relativeDirectory = '') => {
-    let entries
-    try {
-      entries = readdirSync(directory, { withFileTypes: true }).sort((left, right) => left.name.localeCompare(right.name))
-    } catch (error) {
-      codeAdapterError(ERROR_CODES.ADAPTER_PARSE, 'Code project directory could not be read', {
-        path: relativeDirectory || '_root'
-      }, error)
-    }
-    for (const entry of entries) {
-      const relativePath = relativeDirectory ? `${relativeDirectory}/${entry.name}` : entry.name
-      const absolutePath = resolve(directory, entry.name)
-      if (absolutePath !== root && !absolutePath.startsWith(`${root}${sep}`)) {
-        codeAdapterError(ERROR_CODES.ADAPTER_PARSE, 'Code project entry escapes the project root', { path: relativePath })
-      }
-      if (entry.isSymbolicLink()) {
-        state.skippedSymlinks++
-        continue
-      }
-      if (entry.isDirectory()) {
-        if (ignored.has(entry.name) || entry.name.startsWith('.')) continue
-        walk(absolutePath, relativePath)
-        continue
-      }
-      if (!entry.isFile() || !allowedExtensions.has(extname(entry.name).toLowerCase())) continue
-      const source = readUtf8File(absolutePath, relativePath, state)
-      if (source == null) continue
-      files.push({ path: relativePath, source })
-      if (files.length > MAX_CODE_FILES) {
-        codeAdapterError(ERROR_CODES.ADAPTER_PARSE, `Code project has more than ${MAX_CODE_FILES} source files`)
-      }
-    }
-  }
-  walk(root)
-
-  const foldedPaths = new Map()
-  for (const file of files) {
-    const folded = file.path.toLowerCase()
-    const existing = foldedPaths.get(folded)
-    if (existing && existing !== file.path) {
-      codeAdapterError(ERROR_CODES.ADAPTER_PARSE, 'Code project has case-folded duplicate paths', { path: file.path })
-    }
-    foldedPaths.set(folded, file.path)
-  }
-  return { root, files, totalBytes: state.totalBytes, skippedSymlinks: state.skippedSymlinks }
-}
-
-export function moduleNode(language, modulePath, { label = modulePath } = {}) {
-  return {
-    identity: createCodeIdentity({ language, modulePath }),
-    label,
-    semanticType: 'service',
-    attributes: {}
-  }
-}
-
-export function aggregateDiagnostic(code, count, message) {
-  return count > 0 ? [{ level: 'warning', code, message: `${message} Count: ${count}.` }] : []
-}
-
-export function emptyGraphDiagnostic(nodes, message) {
-  return nodes.length === 0 ? [{ level: 'info', code: 'CODE_EMPTY_GRAPH', message }] : []
-}
-
-export function scanDiagnostics(scan) {
-  return aggregateDiagnostic(
-    'CODE_SYMLINKS_SKIPPED',
-    scan.skippedSymlinks,
-    'Symbolic links were skipped without being followed.'
-  )
-}
-
-export function finalizeCodeProjection({ adapter, locator = 'project', nodes, edges, diagnostics = [] }) {
-  return finalizeGraphProjection({
-    version: 1,
-    source: { adapter, domain: 'code', mode: 'code', locator },
-    nodes,
-    edges,
-    modules: [],
-    diagnostics
-  })
-}
-
-export async function loadOptionalParser(specifier, label) {
-  try {
-    return await import(specifier)
-  } catch (error) {
-    if (['ERR_MODULE_NOT_FOUND', 'MODULE_NOT_FOUND', 'ERR_DLOPEN_FAILED'].includes(error?.code)) {
-      codeAdapterError(ERROR_CODES.OPTIONAL_DEPENDENCY_MISSING, `${label} is unavailable`, {}, error)
-    }
-    codeAdapterError(ERROR_CODES.ADAPTER_PARSE, `${label} could not be loaded`, {}, error)
-  }
-}