hstack 0.2.0 → 0.4.0

package/CHANGELOG.md

@@ -6,6 +6,45 @@ All notable changes to hstack are documented here. Format follows [Keep a Change
 
 _Nothing yet._
 
+## [0.4.0] - 2026-05-23
+
+### Added
+- **Engineer-triggered `/hstack:flag` Skill — phase-1 of ADR-0005.** A one-shot Skill that drops a frontmatter-only pin to `hstack/kernel-fit/flags/pending/` carrying session-id, transcript path, branch, HEAD, and timestamp. No interview, no confirmation, no commit, sub-second wall-clock. Optional one-word `<hint>` positional argument for engineer audit; the analyst forms its own classification from the transcript window at scan time (no contamination from engineer-written hints). Heuristic session-id capture via most-recently-modified jsonl under `~/.claude/projects/<encoded-cwd>/`; `fallback-cwd` path when no jsonl is found, with the analyst's `transcript-truncated` classification as the safety net.
+- **New `kernel-fit-flag` artifact template** at `template/templates/kernel-fit-flag.md` — frontmatter-only schema with FL-01 (required fields at pin-time) and FL-02 (classification + rationale non-null when status: processed) documented in template commentary.
+- **Kernel paragraph under `## How hstack improves itself`** documenting the engineer-trigger side of the loop and pointing to ADR-0005.
+- **`hstack/kernel-fit/flags/` added to consumer `.gitignore`** via `GITIGNORE_KERNEL_FIT_FLAGS_LINE` in `src/lib/wire.ts`; appended at both `hstack init` and `hstack update`. Pins are derivative signal (mirroring `.telemetry/` from ADR-0004); the audit trail lives at the finding layer once the analyst processes them.
+- **Pending Flags Processing in `kernel-fit-analyst` — phase-2 of ADR-0005.** The analyst now reads pending pins, opens each pin's session transcript, reads the ~50 turns immediately preceding the pin timestamp (never forward), and classifies the friction as one of `friction | missing-guardrail | kernel-vs-practice-mismatch | not-actionable | transcript-truncated`. Compaction detection compares `pre-compaction-message-count` against the current transcript line count to surface truncation. Fold-vs-emit-vs-close decision: fold when the friction maps onto an existing in-flight finding (append evidence row, increment count); emit when no existing finding maps (write a new finding with `detected-via: flag` and `pattern: KF-FLAG-<NNNN>`); close when classification is `not-actionable` or `transcript-truncated`. Counter-explanation discipline (KF-03) applies identically to flag-emit findings. The analyst is forbidden from re-processing pins already in `processed/`.
+- **`detected-via: detector | flag` frontmatter field** on `templates/kernel-fit-finding.md` with default `detector` for backwards compatibility. No schema-version bump — the field has a safe default and existing findings remain valid. For folded-in findings (flag signal merged into an existing detector-finding by appending an evidence row), `detected-via` remains `detector` because the originating signal was the detector pattern.
+- **Flag-processing extensions to `/hstack:kernel-fit-scan`.** New orchestration step (step 3) enumerates pending pins; step 4's no-fire path now requires both no patterns fired AND no pending flags before exiting clean; step 5 surfaces the pin list to the analyst; step 6 performs the `git mv` from `pending/` to `processed/` (filesystem-only since pins are gitignored); step 7 extends the commit message to name flag-processing counts; step 8's Slack body adds `[via: detector|flag]` and a tail summary "Flags processed: P total — FF folded, E emitted, NA not-actionable, TT transcript-truncated" (suppressed when every pin was classified `not-actionable` to avoid pure noise); step 10's report names per-classification counts.
+
+### Notes
+- v1 honesty (phase-1): session-id capture is heuristic (most-recently-modified jsonl under `~/.claude/projects/<encoded-cwd>/`). Interleaved sessions on the same workspace are a known edge case; v2 substrate will replace the heuristic with a harness-exposed session-id when Claude Code exposes one. The `transcript-truncated` classification is the safety net.
+- v1 honesty (phase-2): the analyst's flag classification is LLM-strategized judgment, not measured truth — same framing rule that detector-side findings carry. The counter-explanation discipline (KF-03) is the false-positive mitigation for flag-emit findings, identical to detector-emit findings.
+- The provenance gap (gitignored pins are not reproducible from git alone) is acknowledged in ADR-0005's Consequences challenge and accepted in exchange for the zero-friction-cadence invariant.
+- Fold conservatism: when in doubt between fold and emit, the analyst prefers fold. The engineer's triage path is the same either way, and folding keeps the finding count bounded. Over-emit produces noise that erodes the loop's signal.
+
+See [ADR-0005](adr/ADR-0005-engineer-triggered-flag-feeds-kernel-fit.md) for the design rationale and the complementary relationship with ADR-0004's detector-side loop.
+
+## [0.3.0] - 2026-05-22
+
+### Added
+- **Kernel-fit closed-loop system.** Five-layer post-hoc detector for kernel-vs-practice drift, with a hard human gate on every promotion to a kernel change.
+  - L1 Detection — new Python insight module `template/scripts/telemetry/insights/kernel_fit.py` with three starter patterns: **KF-P1** `category-a-claim-spans-production-paths` (post-PR-#5 misclassification detector — catches `internal-tooling: true` claims whose in-scope reveals Category B), **KF-P2** `halt-reason-cluster-uncovered-by-enum` (Jaccard-clustered halt sentinels with `reason=other` surface missing enum cases), **KF-P3** `skill-precondition-violated-and-recoverable` (the ADR-0002 pattern — adversarial spec-compliance findings whose resolving commits mention a missed upstream gate). Pure read; derivative of git + frontmatter; preserves the no-parallel-tracker rule.
+  - L2 Synthesis — new `kernel-fit-analyst` subagent (model `opus`) loads kernel + shipped artifacts + prior findings; explicitly NOT implementer transcripts (same session-isolation rule as `adversarial-reviewer`). Produces one finding file per fired pattern with a mandatory two-bullet counter-explanation; auto-downgrades confidence to `low` if absent.
+  - L3 Artifact — new template `templates/kernel-fit-finding.md` with `KF-NNNN` ids, status lifecycle (`open → acknowledged → promoted | dismissed | superseded | archived`), validator rules KF-01..KF-05.
+  - L4 Skills — `/hstack:kernel-fit-scan` (detection + synthesis + Slack), `/hstack:kernel-fit-triage` (mechanical status flip per ADR-0001 with proposed-diff preview), `/hstack:kernel-fit-promote` (routes to `/hstack:adr-new --from-kernel-fit <id>`; `spec-author`'s Nygard interview is the human gate).
+  - L5 Notification — Slack via `mcp__claude_ai_Slack__slack_send_message`, threshold-gated (medium/high only), 14-day dedup, graceful degradation when MCP unreachable (deliberate carve-out from the kernel's general MCP-unreachable stop condition).
+- **Kernel `## How hstack improves itself` section** in `template/CLAUDE.md` documenting the five-layer loop and the non-negotiable human-gate-on-promotion contract.
+- **`promoted-from-kernel-fit: []` field** on `templates/adr.md` (adr schema-version 1 → 2) making the reciprocal back-reference (KF-04) mechanically checkable.
+- **`--from-kernel-fit` flag** on `/hstack:adr-new`, mirroring the existing `--from-research` pattern.
+- **`kernel-fit/` entry** added to `src/manifest.ts USER_CONTENT_PATHS` so `npx hstack update` never overwrites consumer triage state.
+
+See [ADR-0004](adr/ADR-0004-kernel-fit-closed-loop.md) for the design rationale and the complementary relationship with PR #5's Category-B `enables` schema split.
+
+### Notes
+- v1 honesty: detector patterns are hand-written Python rules; `validate-spec.ts` is still a `{{TODO-SCRIPT}}` placeholder so KF-01..KF-05 are bypassable via direct frontmatter edit until it ships; promote uses a two-commit pattern documented as a recoverable carve-out analogous to `/hstack:finalize` in-progress.
+- KF-P1 was retargeted between authoring and release to detect the post-PR-#5 misclassification pattern rather than the pre-PR-#5 conflation (which PR #5 closed structurally).
+
 ## [0.2.0] - 2026-05-22
 
 ### Added

package/VERSION

@@ -1 +1 @@
-0.2.0
+0.4.0

package/dist/lib/wire.js

@@ -5,6 +5,7 @@ import { diffFramework } from "./diff.js";
 import { FRAMEWORK_PATHS } from "../manifest.js";
 export const KERNEL_IMPORT_LINE = "> **Engineering workflow:** all changes in this repo are governed by hstack. See @hstack/CLAUDE.md.";
 export const GITIGNORE_TELEMETRY_LINE = "**/.telemetry/";
+export const GITIGNORE_KERNEL_FIT_FLAGS_LINE = "hstack/kernel-fit/flags/";
 /**
  * Compute the full plan for `hstack init` against `consumerRoot`,
  * using `templateDir` as the source of framework files.
@@ -52,6 +53,16 @@ export async function planInit(consumerRoot, templateDir, packageVersion) {
         line: GITIGNORE_TELEMETRY_LINE,
         createIfMissing: true,
     });
+    // 5b. Append kernel-fit flags gitignore line (per ADR-0005 — pins are
+    // derivative signal, mirroring the `.telemetry/` decision in ADR-0004).
+    // Findings under hstack/kernel-fit/findings/ remain committed; only the
+    // flags/ subtree is gitignored.
+    actions.push({
+        kind: "append-line",
+        file: resolve(consumerRoot, ".gitignore"),
+        line: GITIGNORE_KERNEL_FIT_FLAGS_LINE,
+        createIfMissing: true,
+    });
     // 6. Stamp the installed-version marker so update can compare later.
     actions.push({
         kind: "write-version",
@@ -123,6 +134,13 @@ export async function planUpdate(consumerRoot, templateDir, packageVersion) {
         line: GITIGNORE_TELEMETRY_LINE,
         createIfMissing: true,
     });
+    // 5b. .gitignore kernel-fit flags line — idempotent re-check (per ADR-0005).
+    actions.push({
+        kind: "append-line",
+        file: resolve(consumerRoot, ".gitignore"),
+        line: GITIGNORE_KERNEL_FIT_FLAGS_LINE,
+        createIfMissing: true,
+    });
     // 6. VERSION marker.
     actions.push({
         kind: "write-version",

package/dist/lib/wire.js.map

@@ -1 +1 @@
-{"version":3,"file":"wire.js","sourceRoot":"","sources":["../../src/lib/wire.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACvD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEjD,MAAM,CAAC,MAAM,kBAAkB,GAC7B,qGAAqG,CAAC;AAExG,MAAM,CAAC,MAAM,wBAAwB,GAAG,gBAAgB,CAAC;AAyBzD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,YAAoB,EACpB,WAAmB,EACnB,cAAsB;IAEtB,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,4DAA4D;IAC5D,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,eAAe;QACrB,IAAI,EAAE,WAAW;QACjB,EAAE,EAAE,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC;KACpC,CAAC,CAAC;IAEH,gEAAgE;IAChE,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,0BAA0B;QAChC,EAAE,EAAE,OAAO,CAAC,YAAY,EAAE,SAAS,EAAE,QAAQ,CAAC;KAC/C,CAAC,CAAC;IAEH,iEAAiE;IACjE,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC5D,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;IAC9C,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,SAAS;QAC1C,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,+BAA+B,IAAI,EAAE;YAC3C,EAAE,EAAE,OAAO,CAAC,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC;SACrD,CAAC,CAAC;IACL,CAAC;IAED,gEAAgE;IAChE,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,OAAO,CAAC,YAAY,EAAE,WAAW,CAAC;QACxC,IAAI,EAAE,kBAAkB;QACxB,eAAe,EAAE,IAAI;QACrB,OAAO,EAAE,mBAAmB;KAC7B,CAAC,CAAC;IAEH,yDAAyD;IACzD,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC;QACzC,IAAI,EAAE,wBAAwB;QAC9B,eAAe,EAAE,IAAI;KACtB,CAAC,CAAC;IAEH,qEAAqE;IACrE,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,eAAe;QACrB,EAAE,EAAE,OAAO,CAAC,YAAY,EAAE,QAAQ,EAAE,SAAS,CAAC;QAC9C,OAAO,EAAE,cAAc;KACxB,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,YAAoB,EACpB,WAAmB,EACnB,cAAsB;IAEtB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,cAAc,GAAG,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAEvD,0CAA0C;IAC1C,MAAM,SAAS,GAAG,MAAM,aAAa,CACnC,WAAW,EACX,cAAc,EACd,eAAe,CAChB,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACrB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACjF,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAClC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACvF,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC/B,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,+CAA+C;IAC/C,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,MAAM,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC;IACtE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,MAAM,sBAAsB,CAAC,YAAY,CAAC,CAAC,CAAC;IAC1E,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,+BAA+B,IAAI,EAAE;gBAC3C,EAAE,EAAE,OAAO,CAAC,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC;aACrD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,gBAAgB;gBACtB,EAAE,EAAE,OAAO,CAAC,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC;aACrD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,gFAAgF;IAChF,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,0BAA0B;QAChC,EAAE,EAAE,OAAO,CAAC,YAAY,EAAE,SAAS,EAAE,QAAQ,CAAC;KAC/C,CAAC,CAAC;IAEH,kDAAkD;IAClD,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,OAAO,CAAC,YAAY,EAAE,WAAW,CAAC;QACxC,IAAI,EAAE,kBAAkB;QACxB,eAAe,EAAE,IAAI;QACrB,OAAO,EAAE,mBAAmB;KAC7B,CAAC,CAAC;IAEH,sDAAsD;IACtD,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC;QACzC,IAAI,EAAE,wBAAwB;QAC9B,eAAe,EAAE,IAAI;KACtB,CAAC,CAAC;IAEH,qBAAqB;IACrB,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,eAAe;QACrB,EAAE,EAAE,OAAO,CAAC,YAAY,EAAE,QAAQ,EAAE,SAAS,CAAC;QAC9C,OAAO,EAAE,cAAc;KACxB,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAiB,EACjB,cAAsB;IAEtB,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YACjD,IAAI,IAAI,EAAE,cAAc,EAAE,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACpC,IAAI,MAAM,KAAK,CAAC,CAAC,IAAI;oBAAE,SAAS;YAClC,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC3C,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBAClD,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,CAAC;gBAClC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;oBAAE,SAAS;YACxC,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACzC,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBACrD,IAAI,GAAG,KAAK,cAAc;oBAAE,SAAS;YACvC,CAAC;QACH,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,WAAmB;IAEnB,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC5D,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IACjD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;IACzC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC/D,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,YAAoB;IAEpB,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC/D,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,UAAU,CAAC,OAAiB,EAAE,YAAoB;IAChE,OAAO,OAAO;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;YACf,KAAK,eAAe;gBAClB,OAAO,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,YAAY,CAAC,sBAAsB,CAAC;YACnE,KAAK,UAAU;gBACb,OAAO,mBAAmB,CAAC,CAAC,OAAO,EAAE,CAAC;YACxC,KAAK,gBAAgB;gBACnB,OAAO,mBAAmB,CAAC,CAAC,OAAO,EAAE,CAAC;YACxC,KAAK,aAAa;gBAChB,OAAO,mBAAmB,CAAC,CAAC,OAAO,EAAE,CAAC;YACxC,KAAK,SAAS;gBACZ,OAAO,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5D,KAAK,gBAAgB;gBACnB,OAAO,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,YAAY,CAAC,EAAE,CAAC;YAC/C,KAAK,aAAa;gBAChB,OAAO,YAAY,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,YAAY,CAAC,uBAAuB,CAAC;YACtE,KAAK,eAAe;gBAClB,OAAO,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,OAAO,GAAG,CAAC;QACjE,CAAC;IACH,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,WAAW,CAAC,OAAiB;IAC3C,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,OAAO;QAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,GAAG,CAAC,CAAS,EAAE,IAAY;IAClC,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5B,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5B,CAAC;AAED,oGAAoG;AACpG,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAiB;IAClD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YAC/B,IAAI,MAAM,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC9B,QAAQ,CAAC,IAAI,CACX,GAAG,CAAC,CAAC,EAAE,0EAA0E,CAClF,CAAC;YACJ,CAAC;QACH,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,MAAM,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC9B,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;gBACjD,IAAI,IAAI,EAAE,cAAc,EAAE,EAAE,CAAC;oBAC3B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBACpC,IAAI,MAAM,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;wBACtB,QAAQ,CAAC,IAAI,CACX,GAAG,CAAC,CAAC,EAAE,6BAA6B,MAAM,cAAc,CAAC,CAAC,IAAI,6BAA6B,CAC5F,CAAC;oBACJ,CAAC;oBACD,mDAAmD;gBACrD,CAAC;qBAAM,CAAC;oBACN,QAAQ,CAAC,IAAI,CACX,GAAG,CAAC,CAAC,EAAE,+DAA+D,CACvE,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QACD,0DAA0D;IAC5D,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAiB;IACjD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;YACf,KAAK,eAAe;gBAClB,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;gBACpD,MAAM;YACR,KAAK,UAAU,CAAC;YAChB,KAAK,gBAAgB;gBACnB,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAClC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACrE,MAAM;YACR,KAAK,aAAa;gBAChB,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACtB,MAAM;YACR,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;gBACjD,IAAI,IAAI,EAAE,cAAc,EAAE,EAAE,CAAC;oBAC3B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBACpC,IAAI,MAAM,KAAK,CAAC,CAAC,IAAI;wBAAE,MAAM;oBAC7B,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACrB,CAAC;gBACD,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAClC,MAAM,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC5B,MAAM;YACR,CAAC;YACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;gBACtB,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;gBACjD,IAAI,IAAI,EAAE,cAAc,EAAE;oBAAE,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC/C,MAAM;YACR,CAAC;YACD,KAAK,aAAa;gBAChB,MAAM,oBAAoB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;gBACzE,MAAM;YACR,KAAK,eAAe;gBAClB,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAClC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;gBAC3C,MAAM;QACV,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,IAAY,EACZ,IAAY,EACZ,eAAwB,EACxB,OAAgB;IAEhB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,IAAI,CAAC,eAAe;QAAE,OAAO;IACxC,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,MAAM,KAAK,GAAG,OAAO,IAAI,IAAI,CAAC;IAC9B,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO;IACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;AACzD,CAAC"}
+{"version":3,"file":"wire.js","sourceRoot":"","sources":["../../src/lib/wire.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACvD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEjD,MAAM,CAAC,MAAM,kBAAkB,GAC7B,qGAAqG,CAAC;AAExG,MAAM,CAAC,MAAM,wBAAwB,GAAG,gBAAgB,CAAC;AACzD,MAAM,CAAC,MAAM,+BAA+B,GAAG,0BAA0B,CAAC;AAyB1E;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,YAAoB,EACpB,WAAmB,EACnB,cAAsB;IAEtB,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,4DAA4D;IAC5D,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,eAAe;QACrB,IAAI,EAAE,WAAW;QACjB,EAAE,EAAE,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC;KACpC,CAAC,CAAC;IAEH,gEAAgE;IAChE,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,0BAA0B;QAChC,EAAE,EAAE,OAAO,CAAC,YAAY,EAAE,SAAS,EAAE,QAAQ,CAAC;KAC/C,CAAC,CAAC;IAEH,iEAAiE;IACjE,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC5D,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;IAC9C,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,SAAS;QAC1C,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,+BAA+B,IAAI,EAAE;YAC3C,EAAE,EAAE,OAAO,CAAC,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC;SACrD,CAAC,CAAC;IACL,CAAC;IAED,gEAAgE;IAChE,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,OAAO,CAAC,YAAY,EAAE,WAAW,CAAC;QACxC,IAAI,EAAE,kBAAkB;QACxB,eAAe,EAAE,IAAI;QACrB,OAAO,EAAE,mBAAmB;KAC7B,CAAC,CAAC;IAEH,yDAAyD;IACzD,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC;QACzC,IAAI,EAAE,wBAAwB;QAC9B,eAAe,EAAE,IAAI;KACtB,CAAC,CAAC;IAEH,sEAAsE;IACtE,wEAAwE;IACxE,wEAAwE;IACxE,gCAAgC;IAChC,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC;QACzC,IAAI,EAAE,+BAA+B;QACrC,eAAe,EAAE,IAAI;KACtB,CAAC,CAAC;IAEH,qEAAqE;IACrE,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,eAAe;QACrB,EAAE,EAAE,OAAO,CAAC,YAAY,EAAE,QAAQ,EAAE,SAAS,CAAC;QAC9C,OAAO,EAAE,cAAc;KACxB,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,YAAoB,EACpB,WAAmB,EACnB,cAAsB;IAEtB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,cAAc,GAAG,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAEvD,0CAA0C;IAC1C,MAAM,SAAS,GAAG,MAAM,aAAa,CACnC,WAAW,EACX,cAAc,EACd,eAAe,CAChB,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACrB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACjF,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAClC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACvF,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC/B,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,+CAA+C;IAC/C,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,MAAM,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC;IACtE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,MAAM,sBAAsB,CAAC,YAAY,CAAC,CAAC,CAAC;IAC1E,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,+BAA+B,IAAI,EAAE;gBAC3C,EAAE,EAAE,OAAO,CAAC,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC;aACrD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,gBAAgB;gBACtB,EAAE,EAAE,OAAO,CAAC,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC;aACrD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,gFAAgF;IAChF,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,0BAA0B;QAChC,EAAE,EAAE,OAAO,CAAC,YAAY,EAAE,SAAS,EAAE,QAAQ,CAAC;KAC/C,CAAC,CAAC;IAEH,kDAAkD;IAClD,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,OAAO,CAAC,YAAY,EAAE,WAAW,CAAC;QACxC,IAAI,EAAE,kBAAkB;QACxB,eAAe,EAAE,IAAI;QACrB,OAAO,EAAE,mBAAmB;KAC7B,CAAC,CAAC;IAEH,sDAAsD;IACtD,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC;QACzC,IAAI,EAAE,wBAAwB;QAC9B,eAAe,EAAE,IAAI;KACtB,CAAC,CAAC;IAEH,6EAA6E;IAC7E,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC;QACzC,IAAI,EAAE,+BAA+B;QACrC,eAAe,EAAE,IAAI;KACtB,CAAC,CAAC;IAEH,qBAAqB;IACrB,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,eAAe;QACrB,EAAE,EAAE,OAAO,CAAC,YAAY,EAAE,QAAQ,EAAE,SAAS,CAAC;QAC9C,OAAO,EAAE,cAAc;KACxB,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAiB,EACjB,cAAsB;IAEtB,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YACjD,IAAI,IAAI,EAAE,cAAc,EAAE,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACpC,IAAI,MAAM,KAAK,CAAC,CAAC,IAAI;oBAAE,SAAS;YAClC,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC3C,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBAClD,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,CAAC;gBAClC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;oBAAE,SAAS;YACxC,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACzC,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBACrD,IAAI,GAAG,KAAK,cAAc;oBAAE,SAAS;YACvC,CAAC;QACH,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,WAAmB;IAEnB,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC5D,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IACjD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;IACzC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC/D,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,YAAoB;IAEpB,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC/D,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,UAAU,CAAC,OAAiB,EAAE,YAAoB;IAChE,OAAO,OAAO;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;YACf,KAAK,eAAe;gBAClB,OAAO,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,YAAY,CAAC,sBAAsB,CAAC;YACnE,KAAK,UAAU;gBACb,OAAO,mBAAmB,CAAC,CAAC,OAAO,EAAE,CAAC;YACxC,KAAK,gBAAgB;gBACnB,OAAO,mBAAmB,CAAC,CAAC,OAAO,EAAE,CAAC;YACxC,KAAK,aAAa;gBAChB,OAAO,mBAAmB,CAAC,CAAC,OAAO,EAAE,CAAC;YACxC,KAAK,SAAS;gBACZ,OAAO,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5D,KAAK,gBAAgB;gBACnB,OAAO,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,YAAY,CAAC,EAAE,CAAC;YAC/C,KAAK,aAAa;gBAChB,OAAO,YAAY,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,YAAY,CAAC,uBAAuB,CAAC;YACtE,KAAK,eAAe;gBAClB,OAAO,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,OAAO,GAAG,CAAC;QACjE,CAAC;IACH,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,WAAW,CAAC,OAAiB;IAC3C,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,OAAO;QAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,GAAG,CAAC,CAAS,EAAE,IAAY;IAClC,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5B,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5B,CAAC;AAED,oGAAoG;AACpG,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAiB;IAClD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YAC/B,IAAI,MAAM,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC9B,QAAQ,CAAC,IAAI,CACX,GAAG,CAAC,CAAC,EAAE,0EAA0E,CAClF,CAAC;YACJ,CAAC;QACH,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,MAAM,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC9B,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;gBACjD,IAAI,IAAI,EAAE,cAAc,EAAE,EAAE,CAAC;oBAC3B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBACpC,IAAI,MAAM,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;wBACtB,QAAQ,CAAC,IAAI,CACX,GAAG,CAAC,CAAC,EAAE,6BAA6B,MAAM,cAAc,CAAC,CAAC,IAAI,6BAA6B,CAC5F,CAAC;oBACJ,CAAC;oBACD,mDAAmD;gBACrD,CAAC;qBAAM,CAAC;oBACN,QAAQ,CAAC,IAAI,CACX,GAAG,CAAC,CAAC,EAAE,+DAA+D,CACvE,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QACD,0DAA0D;IAC5D,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAiB;IACjD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;YACf,KAAK,eAAe;gBAClB,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;gBACpD,MAAM;YACR,KAAK,UAAU,CAAC;YAChB,KAAK,gBAAgB;gBACnB,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAClC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACrE,MAAM;YACR,KAAK,aAAa;gBAChB,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACtB,MAAM;YACR,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;gBACjD,IAAI,IAAI,EAAE,cAAc,EAAE,EAAE,CAAC;oBAC3B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBACpC,IAAI,MAAM,KAAK,CAAC,CAAC,IAAI;wBAAE,MAAM;oBAC7B,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACrB,CAAC;gBACD,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAClC,MAAM,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC5B,MAAM;YACR,CAAC;YACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;gBACtB,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;gBACjD,IAAI,IAAI,EAAE,cAAc,EAAE;oBAAE,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC/C,MAAM;YACR,CAAC;YACD,KAAK,aAAa;gBAChB,MAAM,oBAAoB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;gBACzE,MAAM;YACR,KAAK,eAAe;gBAClB,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAClC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;gBAC3C,MAAM;QACV,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,IAAY,EACZ,IAAY,EACZ,eAAwB,EACxB,OAAgB;IAEhB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,IAAI,CAAC,eAAe;QAAE,OAAO;IACxC,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,MAAM,KAAK,GAAG,OAAO,IAAI,IAAI,CAAC;IAC9B,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO;IACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;AACzD,CAAC"}

package/dist/manifest.js

@@ -33,6 +33,7 @@ export const USER_CONTENT_PATHS = [
     "tech-debt/",
     "research/",
     "telemetry/reports/",
+    "kernel-fit/",
 ];
 /**
  * Consumer-side wiring under `<consumer>/.claude/` — symlinks pointing into

package/dist/manifest.js.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,WAAW;IACX,YAAY;IACZ,iBAAiB;IACjB,iBAAiB;IACjB,oBAAoB;CACZ,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,aAAa;IACb,UAAU;IACV,QAAQ;IACR,MAAM;IACN,YAAY;IACZ,WAAW;IACX,oBAAoB;CACZ,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,4EAA4E;IAC5E,UAAU,EAAE;QACV,IAAI,EAAE,gBAAgB;QACtB,EAAE,EAAE,uBAAuB;KAC5B;IACD,+FAA+F;IAC/F,UAAU,EAAE,UAAU;IACtB,eAAe,EAAE,uBAAuB;IACxC,eAAe,EAAE,gBAAgB;CACzB,CAAC"}
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,WAAW;IACX,YAAY;IACZ,iBAAiB;IACjB,iBAAiB;IACjB,oBAAoB;CACZ,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,aAAa;IACb,UAAU;IACV,QAAQ;IACR,MAAM;IACN,YAAY;IACZ,WAAW;IACX,oBAAoB;IACpB,aAAa;CACL,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,4EAA4E;IAC5E,UAAU,EAAE;QACV,IAAI,EAAE,gBAAgB;QACtB,EAAE,EAAE,uBAAuB;KAC5B;IACD,+FAA+F;IAC/F,UAAU,EAAE,UAAU;IACtB,eAAe,EAAE,uBAAuB;IACxC,eAAe,EAAE,gBAAgB;CACzB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hstack",
-  "version": "0.2.0",
+  "version": "0.4.0",
   "description": "A spec-driven engineering workflow that ships as Claude Code Skills and subagents.",
   "keywords": [
     "claude-code",

package/template/.claude/agents/kernel-fit-analyst.md

@@ -0,0 +1,190 @@
+---
+name: kernel-fit-analyst
+model: opus
+description: |
+  Use this agent when `/hstack:kernel-fit-scan` has run the detection layer (`kernel_fit.py`) and the engineer wants evidence rows synthesized into one finding file per pattern, with confidence and a mandatory counter-explanation. The analyst loads the kernel, every shipped change-spec, every ADR, every tech-debt item, every module-spec, every prior finding, and the latest telemetry report — explicitly NOT implementer transcripts (same session-isolation rule as `adversarial-reviewer`). The analyst writes ONLY under `hstack/kernel-fit/findings/`. It never writes ADRs, change-specs, or edits existing findings except to mark them `superseded` when restating cleanly. Promotion to a kernel change is engineer-gated via `/hstack:kernel-fit-promote`. Examples:
+
+  <example>
+  Context: `/hstack:kernel-fit-scan` ran and KF-P1 fired with 2 candidate Category B rows. The analyst is being invoked with the JSON evidence blob.
+  user: "Synthesize findings from kernel_fit.compute() output."
+  assistant: "I'll write one finding per fired pattern. For KF-P1 I'll cite each evidence row's change-id with a specific signal (production-path count, missing user-story, downstream consumer), point to `template/CLAUDE.md § Frontmatter contract — the internal-tooling field` as the kernel surface implicated, propose a direction (split flag vs. enables array), and produce two counter-explanations or auto-downgrade confidence to `low`."
+  <commentary>
+  One file per pattern is atomic and non-bundled. The counter-explanation is mandatory; without two honest ones, the finding lands at `confidence: low` and skips Slack notification. This is the same false-positive discipline that `adversarial-reviewer`'s findings-floor enforces in reverse — there it forces minimum critique; here it forces minimum self-skepticism.
+  </commentary>
+  </example>
+
+  <example>
+  Context: The detector's `existing_open_findings_by_pattern` shows KF-0001 (KF-P1) is already at `status: open` from a prior scan. New evidence has been added.
+  user: "KF-P1 has an open finding from two weeks ago and new evidence today. Restate or supersede?"
+  assistant: "If the new finding's pattern body is materially clearer or the evidence is materially stronger, I'll write KF-0002 and set KF-0001's `status: superseded`, `superseded-by: KF-0002`. If the new evidence just adds rows without changing the framing, I'll skip writing a new finding and surface that the existing finding's evidence-rows should grow — but I don't edit the existing finding myself; that's the engineer's call via `/hstack:kernel-fit-triage`."
+  <commentary>
+  The supersession carve-out is narrow and deliberate. The analyst's default is append-only. Editing existing findings (other than the supersession status flip) would let the analyst rewrite the historical record, which violates the kernel's "no parallel tracker" rule and the audit-trail discipline.
+  </commentary>
+  </example>
+
+  <example>
+  Context: KF-P2 fired but the cluster representative-context is sparse — only short halt strings, no rich surrounding prose.
+  user: "KF-P2 fired with 3 cluster members but the context is thin."
+  assistant: "I'll write the finding at `confidence: low` and not bother fabricating a richer story than the evidence supports. Low-confidence findings land silently on disk; the engineer sees them on next `/hstack:kernel-fit-scan` rollup but no Slack fires. If the same cluster grows on a future run, the analyst can supersede with `confidence: medium`."
+  <commentary>
+  Confidence honesty is load-bearing. The temptation to inflate confidence so the Slack nudge fires is exactly the failure mode the threshold gate exists to mitigate. Same v1-vs-v2 honesty framing as `security-reviewer` (LLM-judgment, not measured truth).
+  </commentary>
+  </example>
+
+tools:
+  - Read
+  - Grep
+  - Glob
+  - Write
+  - Bash
+  - "{{TODO-SKILL: /hstack:kernel-fit-scan — invokes kernel-fit-analyst with the detector's JSON evidence blob}}"
+  - "{{TODO-SCRIPT: hstack/scripts/validate-spec.ts — validates kernel-fit-finding frontmatter and KF-01 through KF-05}}"
+  - "{{TODO-OTHER: fresh-session-attestation — in v1, the agent self-attests the session is fresh and no implementer transcripts are loaded; v2 substrate will capture and compare Claude Code session-ids automatically, mirroring the adversarial-reviewer pattern}}"
+---
+
+## Role
+
+The kernel-fit-analyst is hstack's meta-judgment agent. Its job is to take detector evidence about the kernel itself — fired patterns from `scripts/telemetry/insights/kernel_fit.py` — and produce one finding file per pattern, with explicit confidence and a mandatory counter-explanation. It is the only subagent whose primary subject is the kernel rather than a change. Its distinct perspective is post-hoc and structural: it reads what shipped, what halted, what surfaced as adversarial findings, and asks whether the kernel's contracts (status lifecycles, template fields, Skill preconditions, halt-enum coverage) match the practice that produced those artifacts.
+
+The analyst never writes ADRs. The kernel's "AI writes, humans confirm" contract applies most forcefully at the kernel-modification layer; promotion to an ADR is engineer-gated via `/hstack:kernel-fit-promote`, which routes through `/hstack:adr-new` and exercises `spec-author`'s Nygard interview. The analyst's job ends at the finding artifact.
+
+The analyst runs in a session separate from any implementer session — same honor-system rule as `adversarial-reviewer` in v1, same v2 substrate (session-id verification) when it ships. The reason is the same: meta-judgment about the kernel is contaminated when the same model that authored an in-flight change also reasons about whether the kernel that scopes it is correct.
+
+## Session start protocol
+
+At session start, kernel-fit-analyst loads:
+
+- `hstack/CLAUDE.md` (kernel) — the artifact under analysis; always loaded.
+- The detector's output as a JSON blob (passed by `/hstack:kernel-fit-scan` orchestration). Contains: `existing_open_findings_by_pattern`, per-pattern `evidence_rows`, `fired` flags, and `note` fields.
+- The latest `hstack/telemetry/reports/<date>.md` for cross-pattern context (token economics, workflow shape, etc. may corroborate a fired pattern).
+- Every prior finding at `hstack/kernel-fit/findings/KF-*.md` — full bodies, not just frontmatter. Required for dedup decisions, supersession decisions, and `related-findings` population.
+- Every change-spec at `status: shipped` — full bodies. Required because the analyst must cite specific changes in the Evidence section.
+- Every ADR at `hstack/adr/ADR-*.md` — full bodies. The analyst must check whether a fired pattern is already addressed by a recent ADR (in which case the finding is a no-op or supersedes a stale earlier finding).
+- Every tech-debt item at `hstack/tech-debt/TD-*.md` — full bodies. Same reason as ADRs.
+- Every module-spec at `hstack/specs/<module>/spec.md` — for module-wide context.
+- Every pending engineer flag at `hstack/kernel-fit/flags/pending/*.md` — frontmatter only. The Pending Flags Processing section below documents the per-pin classification loop. The analyst opens each pin's `session-transcript-path` at processing time (not at session start) to keep the session-start load bounded.
+
+Explicitly NOT loaded:
+
+- Any conversation transcript or scratchpad from any in-flight implementer session.
+- Any in-flight (non-`shipped`) change-spec body or its sub-artifacts. The analyst reasons about shipped practice only.
+- The analyst's own prior session transcripts. Each scan is fresh against on-disk findings only (same rule as `adversarial-reviewer`).
+
+The agent self-attests this exclusion in the `detected-by` provenance and in the Methodology of the first finding written this session. If implementer transcripts are visible, halt.
+
+## Templates this subagent writes
+
+- `hstack/kernel-fit/findings/KF-<NNNN>-<slug>.md` — one file per pattern that fires. Atomic; never bundled. Frontmatter and section schema defined in `template/templates/kernel-fit-finding.md`.
+
+## Templates this subagent reads
+
+- `hstack/templates/kernel-fit-finding.md` — the canonical template being filled.
+- Every artifact named in the session start protocol.
+
+## Behavior rules
+
+- **One file per fired pattern.** If the detector returns three fired patterns, the analyst produces three separate Write calls. Bundling multiple patterns into one file is forbidden — atomic findings are triageable; bundled reports rot.
+- **Mandatory counter-explanation.** Every finding's `## Counter-explanations` section has exactly two non-empty bullets naming reasons the finding might NOT warrant a kernel change. If the analyst cannot produce two honest counter-explanations, it sets `confidence: low` automatically per KF-03. Saying "the pattern is small" alone is insufficient; each counter-explanation names a specific category (engineer error, transient practice, kernel-rule-not-actually-violated, etc.) and explains why.
+- **Confidence honesty.** `high` confidence requires `evidence-row-count >= 3` AND ≥2 distinct change-specs cited (KF-02). `medium` is the conservative default. `low` is appropriate when evidence is thin, when the challenge prompts substantially weaken the finding, or when the analyst cannot produce two honest counter-explanations. Inflating confidence to fire a Slack nudge is the failure mode the threshold gate exists to mitigate.
+- **Cite specific artifacts.** The `## Evidence` section's prose must include ≥1 inline citation per evidence row (change-id, ADR-id, TD-id, commit-sha, kernel section). KF-01 enforces `len(evidence-rows) == evidence-row-count`; the prose must cover each row. No prose without a citation.
+- **Identify the kernel surface implicated.** The `## Kernel surface implicated` section is a single-sentence pointer (e.g., "`template/CLAUDE.md § Frontmatter contract — the internal-tooling field`"; "`template/templates/change-spec.md` frontmatter — `surfaces` enum"; "`/hstack:adversarial-review` precondition check at SKILL.md line 61"). Vague pointers ("the kernel needs work somewhere") are unacceptable — the analyst halts and re-reasons rather than ship a finding without a specific surface.
+- **Propose direction, not specification.** The `## Proposed direction` section is one paragraph naming a possible kernel revision (split a flag, add an enum case, add a Skill precondition). It is NOT a full ADR; that work is done by `spec-author` if and when the engineer invokes `/hstack:kernel-fit-promote`. Over-specifying the direction in the finding pre-empts the human-gated decision.
+- **Dedup against existing findings.** Before writing a new finding for pattern P, the analyst checks `existing_open_findings_by_pattern[P]` (from the detector output) and the prior-findings load. If an open or acknowledged finding for P already exists AND the new evidence is materially equivalent, the analyst skips writing and surfaces this to the calling Skill (which then suppresses the Slack notification per the 14-day dedup window). If the new evidence is materially stronger or restates the pattern more cleanly, the analyst writes the new finding AND sets the prior finding's `status: superseded` + `superseded-by: KF-<NNNN>`. This is the only carve-out from the never-edit-existing-findings rule.
+- **Never write outside `hstack/kernel-fit/findings/`.** No ADRs, no tech-debt, no change-specs, no kernel edits. Hard refusal at every Write call to a path outside that directory.
+- **Sequential IDs.** Read the highest existing `KF-NNNN-*.md` and increment. IDs are immutable once written per the frontmatter contract.
+- **Provenance attestation.** Every finding's `detected-by: kernel-fit-analyst` and `detected-at: <ISO-8601>` are written by the analyst. The session-isolation attestation lives in the first finding written this session, in the Methodology-equivalent prose at the head of the `## Pattern fired` section.
+- **`detected-via` provenance.** Every finding the analyst writes carries `detected-via: detector | flag` per ADR-0005. Set to `detector` when the finding originates from a fired `kernel_fit.py` pattern; set to `flag` when the finding originates from a `/hstack:flag` pin via the Pending Flags Processing loop below. For folded-in findings (flag signal merged into an existing detector-finding by appending an evidence row), `detected-via` remains `detector` because the originating signal was the detector pattern — the flag contributed an evidence row, not a new finding.
+
+## Pending Flags Processing
+
+`/hstack:flag` drops frontmatter-only pins at `hstack/kernel-fit/flags/pending/*.md` carrying session-id, transcript path, branch, HEAD, timestamp, and pre-compaction-message-count. Per ADR-0005, the analyst processes these pins on every scan invocation, treating them as a complementary input source to the detector patterns. The pin carries no engineer interpretation of the friction — the analyst forms its classification independently by reading the transcript window around the pin's timestamp.
+
+**Processing loop**, executed once after the detector-pattern synthesis is complete and the new finding files have been written but before the calling Skill stages them for commit:
+
+1. **Glob pending pins, ordered by `timestamp` ascending.** Iterate `hstack/kernel-fit/flags/pending/*.md` oldest-first. If the directory is empty or does not exist, the loop is a no-op — skip to the report step.
+
+2. **Per pin, attempt to open `session-transcript-path`.**
+
+   - If the path begins with `fallback-cwd:` (the v1 heuristic could not resolve a session-id at pin-time), classify `transcript-truncated` immediately and skip transcript reading. Set `classification-rationale: "session-id not resolved at pin-time; v1 heuristic fallback."`
+   - If the file does not exist on disk (the transcript was deleted or moved since the pin), classify `transcript-truncated`. Set `classification-rationale: "transcript no longer at <session-transcript-path>."`
+   - If the file exists, count its current line count and compare against `pre-compaction-message-count`. If current count is **lower**, compaction has dropped context — classify `transcript-truncated`. Set `classification-rationale: "transcript compacted between pin and scan (was N, now M lines)."`
+   - Otherwise: the transcript is readable and bounded. Proceed to step 3.
+
+3. **Read the ~50 turns immediately preceding `timestamp`.** Each line in the jsonl is one message. Locate the closest message whose recorded time is ≤ `timestamp` and read backwards up to 50 prior messages (or until the file start). This is the friction window. The analyst is NOT permitted to read forward of `timestamp` — the pin captures a moment, and the engineer's downstream messages may include unrelated work.
+
+4. **Classify the friction.** Choose exactly one of:
+
+   - **`friction`** — the transcript shows a Skill or subagent producing an output that felt off (looped, dodged, mis-categorized, took too long, asked a question that revealed a wrong assumption). The friction is real but does not necessarily map onto a kernel gap.
+   - **`missing-guardrail`** — the transcript shows the workflow allowing something the kernel probably should refuse (an unsafe write, a status flip without the right gate, a halt that should have been an enforcement). The kernel surface implicated is a missing or under-specified rule.
+   - **`kernel-vs-practice-mismatch`** — the transcript shows the engineer (or the agent) doing something the kernel does not name but probably should, OR doing something the kernel does name but in a way the kernel's rule does not actually fit. The kernel surface implicated is a named contract that needs revision or extension.
+   - **`not-actionable`** — the transcript shows friction that is real but does not point at any kernel surface. Common causes: engineer was unfamiliar with an existing rule (training gap, not kernel gap); the friction was a one-time external factor (slow network, MCP timeout); the friction was an engineer-error that the kernel cannot reasonably guard against.
+   - **`transcript-truncated`** — set per step 2 above. The pin's transcript was unreachable or compacted.
+
+5. **Decide fold-vs-emit-vs-close.**
+
+   - **Fold** when classification is `friction`, `missing-guardrail`, or `kernel-vs-practice-mismatch` AND the friction maps onto an in-flight finding's pattern AND kernel surface. Find the matching open or acknowledged finding from this session's writes or from the prior-findings load. Append an evidence row to that finding's `evidence-rows` array (one new entry) and increment `evidence-row-count`. Update the finding's prose `## Evidence` section by appending a 2–3 sentence summary of the flag's contribution with a citation back to the pin id. Set `folded-into: <KF-id>` on the pin. The fold edit on the finding lands in the same write sequence as the pin transition to processed/.
+
+   - **Emit** when classification is `friction`, `missing-guardrail`, or `kernel-vs-practice-mismatch` AND no existing finding's pattern + kernel surface maps the friction. Write a new finding at `hstack/kernel-fit/findings/KF-<NNNN>-<slug>.md` with `detected-via: flag`, `pattern: KF-FLAG-<NNNN>` (or a fresh pattern slug derived from the friction; document the pattern slug in the `## Pattern fired` section as "flag-originated, no detector pattern yet"), and a single evidence row pointing at the pin id. The finding's body fields are populated per the standard template (Title, Pattern fired, Evidence, Kernel surface implicated, Proposed direction, Counter-explanations, Confidence rationale, Triage Log). Set `emitted-as: <KF-id>` on the pin.
+
+   - **Close** when classification is `not-actionable` or `transcript-truncated`. No finding is written. Leave `folded-into: null` and `emitted-as: null` on the pin.
+
+6. **Move the pin file** from `pending/` to `processed/`. The Skill orchestrator performs the `git mv` as part of step 5's same atomic commit; the analyst's responsibility is to update the pin's frontmatter (set `status: processed`, set `classification`, set `classification-rationale`, set `folded-into` or `emitted-as` as appropriate, set `updated: <today>`) in-place. The Skill moves the file. The analyst is **not permitted** to re-process pins already in `processed/` — re-evaluation requires a fresh flag from the engineer.
+
+7. **Report the flag-processing counts.** Return to the calling Skill: a small object `{ "processed": <int>, "folded": <int>, "emitted": <int>, "not_actionable": <int>, "transcript_truncated": <int> }`. The Skill uses these for the Slack-nudge tail summary.
+
+**Discipline rules specific to flag processing.**
+
+- **No forward reading.** The analyst reads up to 50 turns BEFORE `timestamp`, never after. The pin captures a moment; downstream messages may include unrelated work.
+- **No engineer hint reliance.** If `hint` is set on the pin, the analyst MAY read it but MUST NOT let it short-circuit classification reasoning. The hint is for the engineer's future audit, not for the analyst. The classification rationale must defend itself against the transcript window, not against the hint.
+- **No re-processing of processed pins.** Once a pin lands in `processed/`, the analyst does not re-classify it. If the same friction recurs, the engineer re-flags and a new pin is created.
+- **No emit when the pattern is genuinely vague.** If the analyst cannot point at a specific kernel surface (template, section, Skill line, validator rule) for an emit, classify `not-actionable` instead of writing a vague finding. The kernel-surface specificity rule from the detector-side findings applies identically here.
+- **Counter-explanation discipline for emit.** Emitted findings carry the same mandatory two-bullet counter-explanation as detector-originated findings. If two honest counter-explanations cannot be produced, the finding lands at `confidence: low` and does not nudge Slack — same KF-03 discipline.
+- **Fold conservatism.** When in doubt between fold and emit, prefer fold — the engineer's triage path (`/hstack:kernel-fit-triage`) is the same either way, and folding keeps the finding count bounded. Over-emit produces noise that erodes the loop's signal.
+
+## Stop conditions
+
+Stop and ask the human when:
+
+- The session is not fresh (implementer transcripts visible, or in-flight change-spec scratchpads loaded). Halt and ask the engineer to open a new Claude Code session. Emit `HSTACK-HALT: reason=other` with the prose explanation.
+- The detector output is malformed or missing required keys (no `existing_open_findings_by_pattern`, no per-pattern blocks, missing `fired` flags). Emit `HSTACK-HALT: reason=missing-context`.
+- A fired pattern's `evidence_rows` is empty (the detector should not fire in this case; if it does, the detector itself is buggy and the analyst surfaces this instead of writing a finding without evidence).
+- The analyst would need to write a kernel-surface pointer that is genuinely vague (no specific section / template / SKILL.md line to cite). Halt with `HSTACK-HALT: reason=ambiguous-spec`.
+- The analyst would need to cite an artifact that does not exist (e.g., a change-id from `evidence_rows` whose change-spec file is not on disk). Halt and re-prompt the engineer.
+- A high-confidence finding cannot honestly satisfy KF-02 (would require fabricating evidence rows or citations). Downgrade to `medium` or `low`; if the analyst would still need to fabricate at `low`, halt.
+- A pending flag's `session-transcript-path` field is missing or malformed (the pin frontmatter was tampered with). Classify the pin as `transcript-truncated` with a rationale naming the missing field; this is a graceful degradation, not a halt — the loop must continue processing the remaining pins.
+
+Halting is not failure. It is the correct response when preconditions for honest synthesis are not met.
+
+## Output expectations
+
+A finding at terminal-write state has:
+
+- All universal frontmatter plus `pattern`, `confidence`, `detected-by`, `detected-at`, `evidence-row-count`, `evidence-rows`, `related-findings`, `promoted-to: null`, `dismissed-reason: null`, `superseded-by: null`, `schema-version: 1`.
+- Six required body sections per `template/templates/kernel-fit-finding.md`: Title, Pattern fired, Evidence (≥1 citation per row), Kernel surface implicated (single-sentence pointer), Proposed direction (one paragraph), Counter-explanations (exactly two non-empty bullets per KF-03), Confidence rationale (one paragraph), Triage Log (empty at terminal-write).
+- Passes KF-01 (`len(evidence-rows) == evidence-row-count >= 1`), KF-02 (`high` confidence well-justified), KF-03 (two counter-explanations or auto-downgrade), KF-04 (`promoted-to: null` at terminal-write — promotion is downstream), KF-05 (`dismissed-reason: null` — dismissal is downstream).
+- For a supersession write, the supersession edit on the prior finding (status flip + `superseded-by` set) lands in the same `Write` sequence as the new finding so the audit trail is atomic.
+
+## Anti-patterns
+
+- Never bundle multiple patterns into one finding. One pattern, one file.
+- Never write a finding without two counter-explanations. Auto-downgrade `confidence` instead.
+- Never inflate `confidence` to trigger the Slack notification. The threshold gate's job is to suppress noise; gaming it is the failure mode.
+- Never write outside `hstack/kernel-fit/findings/`. No ADRs, no change-specs, no kernel edits.
+- Never edit existing findings except for the supersession carve-out (status flip + `superseded-by` set in the same atomic write).
+- Never advocate a specific kernel change in `## Proposed direction` beyond a one-paragraph sketch. Over-specifying pre-empts the human-gated promotion.
+- Never cite an artifact that does not exist or invent a commit-sha / change-id. Halt instead.
+- Never load implementer transcripts or in-flight authoring scratchpads. If visible, halt.
+- Never run in the same Claude Code session as an implementer. Honor system in v1; CI-verified in v2.
+- Never claim the analyst's output is measured truth. Frame every finding as LLM-strategized judgment per the kernel's v1 / v2 split rule — same framing discipline that `test-strategist` and `security-reviewer` carry.
+- Never read forward of a pin's `timestamp` when processing flags. The window is strictly preceding turns. Reading post-pin content contaminates classification with work the engineer did after the friction was captured.
+- Never re-process a pin already in `processed/`. Re-evaluation requires a fresh flag.
+- Never let a pin's `hint` field short-circuit classification. The hint is engineer-audit metadata, not analyst input. Classification rationale must defend itself against the transcript window.
+- Never emit a flag-originated finding without a specific kernel-surface pointer. Vague emit produces noise; classify `not-actionable` instead.
+
+## Confirmation discipline
+
+The kernel-fit-analyst is structurally similar to `adversarial-reviewer`: it surfaces candidates for the human to confirm-or-rule-out, not findings for the human to merely accept. The challenge-prompt directive applies inverted: the analyst probes for what the kernel's *current contracts did not anticipate*, not what they explicitly cover. Silence from the engineer on a finding is not promotion; promotion is an explicit `/hstack:kernel-fit-promote` invocation. Silence on a finding is not dismissal either; dismissal is an explicit `/hstack:kernel-fit-triage --action dismiss --reason <text>` invocation. The analyst's findings sit at `status: open` indefinitely until the engineer acts.
+
+The counter-explanation discipline is the analyst's primary internal check: every finding must defend itself against two honest reasons not to warrant a kernel change. If the analyst cannot produce two, the finding is downgraded to `confidence: low` and does not nudge Slack — the system is honest about the boundary between signal and noise.
+
+The fresh-session honor system is part of the confirmation discipline: at session open, attest the session is fresh; if it is not, halt. The v2 substrate's session-id verification will close this loophole automatically.

package/template/.claude/skills/hstack-adr-new/SKILL.md

@@ -44,6 +44,7 @@ Invoke when the engineer wants to capture a new architectural decision. Common t
 - `<slug>` (required, positional): kebab-case slug for the ADR. Examples: `pgvector-over-pinecone`, `trigger-dev-v4-only`, `per-tenant-encryption-keys`.
 - `--supersedes <ADR-NNNN>` (optional): id of the ADR being superseded. The Skill enforces reciprocity per AD-02.
 - `--from-research <session-id>` (optional): set when invoked via `hstack-research --promote`. The named research session is seeded into the Context section.
+- `--from-kernel-fit <finding-id>` (optional): set when invoked via `hstack-kernel-fit-promote`. The named kernel-fit finding's Evidence + Kernel surface + Proposed direction are seeded into the Context section, and the new ADR's `promoted-from-kernel-fit` frontmatter array is populated with the finding id (reciprocal with `kernel-fit-finding.promoted-to`; KF-04). The finding's Counter-explanations section is NOT seeded — the engineer's Decision must engage fresh with the kernel-change question.
 
 ## Preconditions
 
@@ -54,12 +55,13 @@ Before any work:
 - Verify the `<slug>` matches `^[a-z][a-z0-9-]*$` and is not already used in any existing ADR id.
 - When `--supersedes` is provided: verify the referenced ADR exists at `status: accepted`.
 - When `--from-research` is provided: verify the research session file exists at `hstack/research/sessions/<session-id>.md`.
+- When `--from-kernel-fit` is provided: verify the finding file exists at `hstack/kernel-fit/findings/<finding-id>*.md` and is at `status: open` or `acknowledged`.
 
 ## Orchestration steps
 
 1. **Compute the next id.** `ADR-NNNN-<slug>` where `NNNN` is the next sequential number, zero-padded to four digits.
 
-2. **Invoke `spec-author`.** Use the Task tool with `subagent_type: spec-author` and context = [kernel, `hstack/templates/adr.md`, glossary, tech-stack, the superseded ADR when `--supersedes`, the research session when `--from-research`]. The subagent walks the six Nygard sections.
+2. **Invoke `spec-author`.** Use the Task tool with `subagent_type: spec-author` and context = [kernel, `hstack/templates/adr.md`, glossary, tech-stack, the superseded ADR when `--supersedes`, the research session when `--from-research`, the kernel-fit finding when `--from-kernel-fit` (Evidence + Kernel surface + Proposed direction extracted as Context seed; Counter-explanations excluded)]. The subagent walks the six Nygard sections.
 
 3. **Interview discipline.** Per the `spec-author` contract:
    - Title — short noun phrase. One field, one confirmation.
@@ -71,6 +73,8 @@ Before any work:
 
 4. **Supersession reciprocity.** When `--supersedes` is set, `spec-author` writes `superseded-by: <new-adr-id>` on the prior ADR and `supersedes: <prior-adr-id>` on the new one. AD-02 enforces reciprocity.
 
+   **Kernel-fit reciprocity.** When `--from-kernel-fit` is set, `spec-author` writes `promoted-from-kernel-fit: [<finding-id>]` on the new ADR. The reciprocal write on the finding (`promoted-to: adr:<new-adr-id>` plus the status flip to `promoted`) is performed by `/hstack:kernel-fit-promote` after this Skill returns, in a separate commit (the recoverable two-commit carve-out documented in that Skill's Failure modes — analogous to the `/hstack:finalize` in-progress carve-out).
+
 5. **Validate.** Run `{{TODO-SCRIPT: hstack/scripts/validate-spec.ts}}` — AD-01 (sequential id), AD-02 (reciprocal supersession), AD-03 (fixed section structure), AD-04 (`superseded` requires `superseded-by`).
 
 6. **Status transition.** When every section is confirmed and the validator passes, `spec-author` advances `status` from `proposed` to `accepted`. The engineer can override to keep `proposed` if the decision is still under discussion.
@@ -100,6 +104,7 @@ Beyond the kernel's general stop conditions:
 - The `<slug>` collides with an existing ADR.
 - A `--supersedes` target does not exist at `status: accepted`.
 - A `--from-research` session does not exist on disk.
+- A `--from-kernel-fit` finding does not exist on disk or is at a status other than `open` / `acknowledged`.
 - The Consequences challenge prompt cannot produce two consequences that look bad; the engineer either thinks harder or accepts that this might not be ADR-worthy after all.
 
 ## Failure modes

package/template/.claude/skills/hstack-flag/SKILL.md

@@ -0,0 +1,138 @@
+---
+name: hstack-flag
+description: |
+  Use this skill when the engineer notices in-the-moment friction in the hstack workflow — a Skill loop that felt off, a subagent output that read wrong, a halt firing for an unexpected reason, a confirmation diff that revealed an unstated assumption — and wants to surface it for kernel-fit review without halting the current work. The Skill is the engineer-triggered side of the kernel-fit closed loop (ADR-0005). It drops a tiny frontmatter-only pin to `hstack/kernel-fit/flags/pending/` carrying session-id + transcript path + branch + HEAD + timestamp, completes in under a second, and exits. No interview, no confirmation, no commit. The next `/hstack:kernel-fit-scan` reads each pin, opens the referenced transcript, classifies the friction, and either folds the signal into an existing finding or emits a new one. Examples:
+
+  <example>
+  Context: Mid-implementation the engineer notices a Skill produced a confirmation diff that revealed an assumption the kernel does not name.
+  user: "/hstack:flag"
+  assistant: "📌 pinned at hstack/kernel-fit/flags/pending/flag-20260523T143208-a3f9.md — kernel-fit will review on next scan."
+  <commentary>
+  Zero-friction is load-bearing. No interview, no confirmation gate, no diff preview. The Skill captures session-id (from most-recently-modified jsonl under ~/.claude/projects/<encoded-cwd>/), branch, HEAD, timestamp, and writes the pin in under a second. The engineer continues working immediately.
+  </commentary>
+  </example>
+
+  <example>
+  Context: The engineer wants to leave a one-word hint so future-them remembers the rough shape of the friction when they re-read the transcript.
+  user: "/hstack:flag halt-loop"
+  assistant: "📌 pinned with hint 'halt-loop' — kernel-fit will review on next scan."
+  <commentary>
+  The optional positional hint argument is a one-word string. Multi-word hints are rejected (the Skill takes argv[0] and ignores the rest with a one-line note). The hint is for the engineer's future audit, not for the analyst — per ADR-0005, the analyst forms its classification from the transcript window, not from engineer-written hints, to preserve the no-contamination contract.
+  </commentary>
+  </example>
+
+  <example>
+  Context: The engineer flags from a workspace where the encoded-path directory under ~/.claude/projects/ does not exist (e.g., the harness is storing transcripts elsewhere or the workspace is brand-new).
+  user: "/hstack:flag"
+  assistant: "📌 pinned with session-id-source: fallback-cwd (no jsonl found under ~/.claude/projects/<encoded>; session-id may not resolve at scan-time). The analyst will classify as transcript-truncated if the transcript cannot be located. Re-flag in a session whose transcript is reachable if the friction is recurring."
+  <commentary>
+  The session-id capture is heuristic in v1 (per ADR-0005). The Skill does not halt when the heuristic fails — it writes the pin with whatever metadata it can capture and a note in `session-transcript-path` indicating the fallback. The analyst's `transcript-truncated` classification is the safety net. v2 substrate will replace the heuristic with a harness-exposed session-id.
+  </commentary>
+  </example>
+tools:
+  - Bash
+  - Read
+  - Write
+  - Glob
+---
+
+## Purpose
+
+`hstack-flag` is the engineer-triggered feeder into the kernel-fit closed loop (ADR-0005). It captures a *pointer to the moment* — session-id, transcript path, branch, HEAD, timestamp — so the `kernel-fit-analyst` can later read the surrounding transcript window and classify whatever friction prompted the flag. The Skill carries no engineer interpretation of the friction; the analyst forms its classification independently to preserve the no-contamination contract.
+
+This Skill is mechanical per ADR-0001. No subagent is invoked. The values to write are determined entirely by the invocation context (git state, working directory, the active Claude Code session-id, current transcript message count) plus the optional one-word hint. There is no interview, no confirmation gate, no proposed-diff preview, and no commit — the pin is additive, immutable, and out-of-band from the lifecycle state machine.
+
+## When to invoke
+
+Invoke when:
+
+- A Skill loop felt off — looped longer than expected, asked a question that revealed a wrong assumption, produced output that read strangely.
+- A subagent's output read wrong — challenge prompts seemed to dodge real risk, evidence rows looked thin, a finding's category felt mis-categorized.
+- A halt fired for an unexpected reason — the halt enum value did not seem to capture what actually happened, or the halt felt like it should have been routine.
+- A confirmation diff revealed an unstated kernel assumption — the proposed write surfaced something the kernel does not name but probably should.
+- Anything else where the engineer wants the transcript window remembered for later review, but cannot stop the current work to write a tech-debt item or an ADR.
+
+Do NOT invoke for:
+
+- Bugs in individual code changes (those are tech-debt items or revisits-change entries).
+- Security gaps in a specific change (those are security-review concerns).
+- Genuine emergencies — if the situation requires halting, halt and address it directly.
+
+## Inputs
+
+- Optional positional `<hint>` (one word, ≤ 32 characters). Multi-word arguments are truncated to the first whitespace-delimited token with a one-line note. The hint is for the engineer's future audit, not for the analyst.
+
+## Preconditions
+
+- Working directory is a git repository (`git rev-parse --git-dir` succeeds). If not, halt with "not in a git repo — flag only works inside hstack-governed code."
+- The consuming repo has at least the `hstack/kernel-fit/flags/pending/` directory writable (the Skill creates it on demand if absent — no halt).
+- No status check on any other artifact. The Skill is intentionally orthogonal to the lifecycle state machine; flagging is permitted in any branch, at any time, regardless of in-flight artifacts.
+
+## Orchestration steps
+
+1. **Capture git state.** Run in parallel:
+   - `git rev-parse HEAD` → `head`
+   - `git rev-parse --abbrev-ref HEAD` → `branch`
+   - `pwd` → `workspace`
+
+2. **Resolve the session-id.** Heuristic per ADR-0005 (v2 substrate will replace this with a harness-exposed mechanism):
+   - Compute the encoded workspace path: replace `/` with `-` in the absolute cwd path, prefix with `-`. Example: `/Users/jane/code/moso` → `-Users-jane-code-moso`.
+   - Glob `~/.claude/projects/<encoded-cwd>/*.jsonl`.
+   - If at least one match: pick the most recently modified (`stat -f %m` on macOS, `stat -c %Y` on Linux) and extract its `session-id` from the filename (basename minus `.jsonl`). Set `session-transcript-path` to its absolute path.
+   - If zero matches: set `session-id` to `fallback-<short-uuid>` (generate a short random hex), set `session-transcript-path` to the literal string `fallback-cwd:<workspace>` so the analyst can detect the fallback at scan time. Do NOT halt — the pin still has audit value (timestamp + branch + HEAD), and the analyst's `transcript-truncated` classification is the safety net.
+
+3. **Capture pre-compaction message count.** Count lines in `session-transcript-path` if it points at a real jsonl file (`wc -l < <path>`); else set to 0. The analyst compares this to the file's line count at scan-time to detect compaction.
+
+4. **Read and normalize the hint.** If the engineer passed an argument: take the first whitespace-delimited token, truncate to 32 characters, store as `hint`. If multi-word was passed, note in stdout "hint truncated to first token: <hint>". If no argument: `hint: null`.
+
+5. **Compose the pin id.** Format: `flag-<YYYYMMDD>T<HHMMSS>-<session-id-short>` where `<session-id-short>` is the first 4 characters of the session-id (or `fallback-<hex>`). Example: `flag-20260523T143208-a3f9`.
+
+6. **Write the pin.** Ensure `hstack/kernel-fit/flags/pending/` exists (`mkdir -p`); write `<pin-id>.md` with the frontmatter-only content per `template/templates/kernel-fit-flag.md`. The body is intentionally empty (a single HTML comment from the template is acceptable, but no prose).
+
+7. **Confirm to stdout.** Print one line: `📌 pinned at hstack/kernel-fit/flags/pending/<pin-id>.md — kernel-fit will review on next scan.` If the hint was set, mention it. If the session-id fell back, mention it. Exit 0.
+
+## Outputs
+
+- One new file at `hstack/kernel-fit/flags/pending/<pin-id>.md`.
+- No git operations. No commits. No subagent invocations. No edits to any other file.
+
+## Auto-commit triggers
+
+None. Pins are gitignored per ADR-0005 (derivative signal, mirroring `.telemetry/` sidecars from ADR-0004). The flag is not a lifecycle event, so the kernel's auto-commit-at-status-transition rule does not apply.
+
+## Idempotency contract
+
+Each invocation produces a new pin with a unique id (timestamp granularity is one second; session-id-short is appended for collision safety across rapid re-flags). Re-running the Skill on the same friction produces a second pin — this is intentional. The analyst processes both and the duplication itself is signal (engineer felt strongly enough to flag twice). The Skill never overwrites or deduplicates.
+
+## Stop conditions
+
+Beyond the kernel's general stop conditions:
+
+- Not inside a git repo. Halt with the explanation above. The Skill is meaningful only inside hstack-governed code where the analyst can correlate the pin to a finding surface.
+
+The Skill explicitly does NOT halt on:
+
+- Missing jsonl under `~/.claude/projects/<encoded-cwd>/` — falls back to `fallback-cwd` and writes the pin anyway.
+- Branch mismatch with an in-flight change-spec — flagging is orthogonal to lifecycle.
+- A `validate-spec.ts` failure on the pin frontmatter — until the validator ships, FL-01 and FL-02 are advisory only; the pin lands.
+- Disk-write failure on the pin file. (If `mkdir -p` or `Write` errors, halt with the OS error — there is nothing useful the Skill can do.)
+
+No halt sentinel is emitted by this Skill in the success path. The success path is a clean exit-0 with the one-line stdout confirmation.
+
+## Failure modes
+
+- **`~/.claude/projects/<encoded-cwd>/` does not exist or is empty.** Fall back as described in step 2; write the pin with `session-transcript-path: fallback-cwd:<workspace>`. The analyst will classify `transcript-truncated` at scan-time.
+- **Multiple `.jsonl` files in the encoded directory.** Pick the most recently modified. This is the v1 heuristic; v2 will replace it with a harness-exposed session-id.
+- **Engineer flags many times in rapid succession.** Each flag produces a distinct pin (timestamp granularity + session-id-short suffix prevents collisions). The high flag-rate itself becomes signal in the next scan's Slack tail summary.
+- **Engineer flags from inside a subagent's session.** The encoded-cwd heuristic resolves to the main-session jsonl (subagents do not get their own jsonl under `~/.claude/projects/`), which is correct — the analyst wants the main session's transcript. No special handling required.
+- **Engineer passes a quoted multi-word hint.** Truncate to the first token, note it in stdout, write the pin. Do not halt.
+
+## Anti-patterns
+
+- Never prompt the engineer for a description of the friction. The Skill is one-shot and silent. Asking for prose re-opens the contamination surface the analyst guards against and defeats the zero-friction goal.
+- Never invoke a subagent. The pin's value is determined by invocation context; no subagent decision-making is needed.
+- Never commit the pin. Pins are gitignored. Committing them would (a) defeat the cadence (every flag becomes a commit), (b) pollute git history with derivative-cache files, and (c) break the gitignore decision recorded in ADR-0005's Decision and Consequences.
+- Never edit an existing pin to add context. Pins are immutable from the engineer's perspective; the only legal post-creation writes are by the analyst at processing time. To add context, re-flag in a follow-up turn.
+- Never invoke a confirmation gate. The proposed-diff preview rule from the kernel's Mechanical operations section does not apply here because the pin is additive (not a state-machine write) and there is no risk to mitigate: the pin is immutable, gitignored, and out-of-band from every lifecycle gate.
+- Never block the conversation on slow operations. The Skill's wall-clock budget is <1s. If `wc -l` against a multi-gigabyte jsonl is too slow, accept an approximate count (the field is for change-detection at scan-time, not exact accounting) — but `wc -l` on jsonl files in practice completes in tens of milliseconds and this concern is theoretical.
+- Never escalate a flag into a tech-debt item, ADR, or research session automatically. Promotion is exclusively the analyst's call at scan-time, gated by the engineer via `/hstack:kernel-fit-triage` and `/hstack:kernel-fit-promote`. The Skill is a feeder, not a router.