kiokuko-dsh 0.2.6 → 0.2.8

package/docs/verification.md

@@ -0,0 +1,112 @@
+# Repository verification
+
+Goal: CI executes the same repository-owned verification contract as local development.
+`npm run verify` runs the full applicable scope. `npm run verify -- --profile main`
+and other profiles are explicitly partial. `npm test` remains a fast/focused entry.
+
+Inspect `npm run verify:plan` before running. Each check declares its runner,
+dependencies, required capability and required result in `scripts/verification.json`.
+CI prepares environments, selects profiles and retains output. Missing required
+capabilities are `prerequisite-missing`; unexpected skips, empty Node suites and
+failed assertions are non-success. Platform exclusions are declared before execution
+and recorded with a reason. Exclusions never imply a result on that platform.
+
+Output defaults to a fresh OS temporary directory. Supply an empty directory
+outside the repository with `--output`. `plan.json`, per-command logs, official
+Node lifecycle reports, `progress.json`, `result.json` and the candidate archive
+are retained. Reports identify source content, runtime, profile, contract and archive.
+
+All package consumers run after a final clean build and pack, against the same
+archive and hash. Installed smoke/host assertions remain the existing assertions.
+The DSH core pack and Skill consumers use normal minimal installs, with no links
+to the development node_modules. Changes during verification are `stale`; saved
+results must be rechecked using `npm run verify -- --status <result.json>`.
+A profile passing alone never sets `completionReady`. A stale or failed full run
+must not be reported as full verification, and local results do not prove remote CI.
+
+## Common suites and retained assertions
+
+The inventory below is generated from the repository contract. A script check
+requires a fresh check-bound completion receipt after its existing assertions;
+arbitrary stdout or a successful no-op process is insufficient.
+
+| Common check | Profiles | Runner | Required result |
+| --- | --- | --- | --- |
+| verification-contract | main, semantic, lisp, browser, runtime | `node --test scripts/verification-contract.test.mjs` | complete official lifecycle; at least one passing leaf; no failures, cancellation, todo or undeclared skips |
+| typecheck | main | `npm run typecheck` | exit 0 |
+| build | main, semantic, lisp, browser, runtime, code-provider, p0, packages-live | `npm run build` | exit 0 |
+| native-unit | main | `node scripts/run-ci-native.mjs unit` | complete official lifecycle; at least one passing leaf; no failures, cancellation, todo or undeclared skips |
+| native-integration | main | `node scripts/run-ci-native.mjs integration` | complete official lifecycle; at least one passing leaf; no failures, cancellation, todo or undeclared skips |
+| native-e2e | main | `node scripts/run-ci-native.mjs e2e` | complete official lifecycle; at least one passing leaf; no failures, cancellation, todo or undeclared skips |
+| skill-efficiency | main | `npm run test:skill-efficiency` | explicit completion receipt |
+| coding-offline | main | `node --test tests/fixtures/skill-coding/offline.test.mjs` | complete official lifecycle; at least one passing leaf; no failures, cancellation, todo or undeclared skips |
+| harness | main | `npm run test:harness` | explicit completion receipt |
+| retrieval | main | `npm run test:evaluation` | explicit completion receipt |
+| decision-evaluation | main | `npm run test:evaluation:decisions` | explicit completion receipt |
+| intent-evaluation | main | `npm run test:evaluation:request-intent` | explicit completion receipt |
+| answer-evaluation | main | `npm run test:evaluation:answer-review` | explicit completion receipt |
+| memory-reuse-evaluation | main | `npm run test:evaluation:memory-reuse -- --mode=all` | explicit completion receipt |
+| sampledb | main | `npm run test:sampledb` | explicit completion receipt |
+| publint | main | `npm run publint` | exit 0 |
+| prepare-reproducibility | main | `npm run verify:prepare` | explicit completion receipt |
+| native-search | lisp, runtime | `node scripts/run-tests.mjs tests/dsh/integration/native-search.test.ts` | complete official lifecycle; at least one passing leaf; no failures, cancellation, todo or undeclared skips |
+| laya-worker | lisp | `npm run test:laya-worker` | exit 0 |
+| lisp-vendor | lisp | `npm run verify:lisp:vendor` | explicit completion receipt |
+| lisp-native | lisp | `npm run test:ci:lisp` | complete official lifecycle; at least one passing leaf; no failures, cancellation, todo or undeclared skips |
+| owned-native | lisp | `node scripts/run-tests.mjs tests/dsh/integration/owned-execution.test.ts tests/dsh/integration/owned-native-lifecycle.test.ts` | complete official lifecycle; at least one passing leaf; no failures, cancellation, todo or undeclared skips |
+| modules | lisp | `npm run test:modules` | explicit completion receipt |
+| models-web | browser | `node scripts/verify-models-web.mjs` | explicit completion receipt |
+| coding-web | browser | `node scripts/verify-coding-workflow-web.mjs` | explicit completion receipt |
+| shortcuts-web | browser | `node scripts/verify-shortcuts-web.mjs` | explicit completion receipt |
+| lisp-approval-web | browser | `node scripts/verify-lisp-approval-web.mjs` | explicit completion receipt |
+| lisp-plan-web | browser | `node scripts/verify-lisp-plan-web.mjs` | explicit completion receipt |
+| pack-check | main, lisp | `node scripts/pack-check.mjs` | explicit completion receipt |
+| skill-delivery | main, lisp | `node scripts/run-skill-delivery.mjs` | explicit completion receipt |
+| consumer-npm | main, runtime | `node scripts/verify-agenticreplay-consumer.mjs` | explicit completion receipt |
+| consumer-pnpm | main, runtime | `node scripts/verify-agenticreplay-consumer.mjs --pnpm` | explicit completion receipt |
+| dsh-lifecycle | main, runtime | `node scripts/run-enno-dsh-e2e.mjs` | explicit completion receipt |
+| sqlite-vec | main, semantic | `npm run test:sqlite-vec` | explicit completion receipt |
+| code-provider | code-provider | `node scripts/run-ci-native.mjs code-provider` | Explicit selected native fixture; nonempty official lifecycle without skipped required cases. |
+| p0 | p0 | `node scripts/run-ci-native.mjs p0` | Explicit selected native fixture; nonempty official lifecycle without skipped required cases. |
+| packages-live | packages-live | `node scripts/run-ci-native.mjs packages-live` | Explicit selected native fixture; nonempty official lifecycle without skipped required cases. |
+
+## Consolidated duplicate invocations
+
+- `skill-prompts` is covered by `native-unit`: `tests/dsh/unit/skill-compiler.test.ts`, `tests/dsh/unit/skill-snapshot.test.ts`.
+- `index-reasoning` is covered by `native-integration`: `tests/dsh/integration/index-reasoning.test.ts`, `tests/dsh/integration/index-reasoning-native.test.ts`, `tests/dsh/integration/index-reasoning-evaluation.test.ts`.
+- `index-evaluation` is covered by `native-integration`: `tests/dsh/integration/index-reasoning-evaluation.test.ts`.
+
+Import-only convenience entrypoints remain usable explicitly. Recursive discovery
+excludes these aliases and executes each declared leaf exactly once:
+
+- `tests/dsh/integration/capability.test.ts`: `tests/dsh/integration/akinator-gate.test.ts`, `tests/dsh/integration/pre-step/gate.test.ts`, `tests/dsh/unit/capability-catalog.test.ts`.
+- `tests/dsh/integration/close-resume.test.ts`: `tests/dsh/integration/run-close.test.ts`, `tests/dsh/integration/run-resume.test.ts`, `tests/dsh/integration/run-resume/exact-route.test.ts`.
+- `tests/dsh/integration/enno-turn-stopping.test.ts`: `tests/dsh/integration/turn-stopping-gate.test.ts`, `tests/dsh/integration/enno-role-loop.test.ts`.
+- `tests/dsh/integration/provider.test.ts`: `tests/dsh/integration/skill-provider.test.ts`.
+
+## Explicit optional lanes
+
+These files are excluded before ordinary discovery and recorded as scope-excluded
+in the full plan. Selecting the named profile makes its fixture and assertions required.
+
+- `code-provider`: `tests/dsh/integration/lisp/code-intelligence-native.test.ts`. This optional V1 provider requires an explicit built provider fixture.
+- `p0`: `tests/dsh/integration/lisp/p0-seatbelt.test.ts`. This experimental macOS P0 candidate is an explicit probe, not production protection evidence.
+- `packages-live`: `tests/dsh/integration/lisp/packages-live.test.ts`. Live public package registries are an explicitly selected integration lane.
+
+## Removed no-op checks
+
+- `embedding`: The old --offline invocation read no model manifest; DSH ships no preset manifest. Explicit --model-dir checksum/inference remains available.
+
+The five browser consumers receive the same final tarball as CLI, npm and pnpm
+consumers. Their standalone npm commands remain available; formal verification
+executes the existing assertion scripts directly after its own clean build.
+
+The old CI YAML substring test is retired: the common runner probes required
+runtime capabilities and rejects missing prerequisites in the real execution path.
+The fixture-version, suite-discovery and alias/optional-lane contracts remain tested.
+
+`pre-step.test.ts` is also an import-only alias for `pre-step/gate.test.ts`.
+Native Lisp integration requires `protected-python3`: a real sandbox subprocess
+probe. An Apple launcher that only reports its version outside the sandbox does
+not satisfy this capability. Local/CI environment preparation must select a real
+installed Python interpreter; the repository never changes the global PATH.

package/migrations/038_coding_admission.sql

@@ -0,0 +1,19 @@
+-- Admission intent is run-bound. Existing runs remain on the explicit legacy
+-- path; every run created after this migration must write its own admission.
+CREATE TABLE dsh_coding_admissions (
+  run_id TEXT PRIMARY KEY REFERENCES ledger_runs(run_id) ON DELETE CASCADE,
+  request_id TEXT,
+  request_digest TEXT,
+  admission_version TEXT NOT NULL,
+  intent_policy_version TEXT NOT NULL,
+  change_scope TEXT NOT NULL CHECK(change_scope IN ('implementation','document','unknown')),
+  confirmation_required INTEGER NOT NULL CHECK(confirmation_required IN (0,1)),
+  legacy INTEGER NOT NULL CHECK(legacy IN (0,1)),
+  created_at TEXT NOT NULL,
+  CHECK((legacy=1 AND admission_version='legacy' AND confirmation_required=0)
+    OR (legacy=0 AND request_id IS NOT NULL AND request_digest IS NOT NULL
+      AND admission_version='lisp-choice-admission-v1'))
+);
+INSERT INTO dsh_coding_admissions
+  (run_id,request_id,request_digest,admission_version,intent_policy_version,change_scope,confirmation_required,legacy,created_at)
+SELECT run_id,NULL,NULL,'legacy','legacy','unknown',0,1,created_at FROM ledger_runs;

package/migrations/039_memory_lifecycle.sql

@@ -0,0 +1,336 @@
+CREATE TABLE dsh_memory_observations (
+  workspace TEXT NOT NULL,
+  producer TEXT NOT NULL,
+  event_id TEXT NOT NULL,
+  session_id TEXT NOT NULL,
+  source_key TEXT NOT NULL,
+  source_revision INTEGER NOT NULL CHECK(source_revision >= 0),
+  tombstone INTEGER NOT NULL CHECK(tombstone IN (0,1)),
+  host_verified INTEGER NOT NULL CHECK(host_verified IN (0,1)),
+  observation_json TEXT NOT NULL,
+  content_hash TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  PRIMARY KEY(workspace,producer,event_id,source_revision),
+  UNIQUE(workspace,producer,source_key,source_revision)
+);
+CREATE INDEX dsh_memory_observation_sources ON dsh_memory_observations(workspace,producer,source_key,source_revision DESC);
+CREATE INDEX dsh_memory_observation_sessions ON dsh_memory_observations(workspace,session_id,created_at DESC);
+CREATE TABLE dsh_memory_routine_revisions (
+  workspace TEXT NOT NULL,
+  candidate_id TEXT NOT NULL,
+  revision INTEGER NOT NULL CHECK(revision > 0),
+  candidate_json TEXT NOT NULL,
+  content_hash TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  PRIMARY KEY(workspace,candidate_id,revision)
+);
+
+CREATE INDEX dsh_memory_observation_recent ON dsh_memory_observations(workspace,created_at DESC,event_id DESC);
+CREATE INDEX dsh_memory_routine_recent ON dsh_memory_routine_revisions(workspace,created_at DESC);
+CREATE TABLE dsh_memory_principle_sources (
+  workspace TEXT NOT NULL,
+  candidate_id TEXT NOT NULL,
+  entry_id TEXT NOT NULL UNIQUE REFERENCES entries(id),
+  candidate_hash TEXT NOT NULL,
+  sources_json TEXT NOT NULL,
+  active INTEGER NOT NULL CHECK(active IN (0,1)),
+  PRIMARY KEY(workspace,candidate_id)
+);
+
+-- Domain revisions exclude ledger/recorder/audit traffic on the same database.
+CREATE TABLE dsh_memory_processing_state (
+  workspace TEXT PRIMARY KEY,
+  source_revision INTEGER NOT NULL DEFAULT 0,
+  context_revision INTEGER NOT NULL DEFAULT 0,
+  processed_revision INTEGER NOT NULL DEFAULT -1,
+  processed_limit INTEGER NOT NULL DEFAULT 0
+);
+-- Terminal source eligibility may change on a real resume; sequence/audit
+-- updates alone must leave cached context untouched.
+CREATE TRIGGER lifecycle_reference_run_status AFTER UPDATE OF status,workspace ON ledger_runs
+WHEN OLD.status IS NOT NEW.status OR OLD.workspace IS NOT NEW.workspace BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_version_dsh_memory_observations_insert AFTER INSERT ON dsh_memory_observations BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,source_revision,context_revision) VALUES(NEW.workspace,1,1)
+    ON CONFLICT(workspace) DO UPDATE SET source_revision=source_revision+1,context_revision=context_revision+1;
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) SELECT 'global',1 WHERE NEW.workspace<>'global'
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_version_dsh_memory_observations_update AFTER UPDATE ON dsh_memory_observations BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,source_revision,context_revision) VALUES(NEW.workspace,1,1)
+    ON CONFLICT(workspace) DO UPDATE SET source_revision=source_revision+1,context_revision=context_revision+1;
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) SELECT 'global',1 WHERE NEW.workspace<>'global'
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_version_dsh_memory_observations_delete AFTER DELETE ON dsh_memory_observations BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,source_revision,context_revision) VALUES(OLD.workspace,1,1)
+    ON CONFLICT(workspace) DO UPDATE SET source_revision=source_revision+1,context_revision=context_revision+1;
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) SELECT 'global',1 WHERE OLD.workspace<>'global'
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_version_memory_capture_exclusions_insert AFTER INSERT ON memory_capture_exclusions BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,source_revision,context_revision) VALUES(NEW.workspace,1,1)
+    ON CONFLICT(workspace) DO UPDATE SET source_revision=source_revision+1,context_revision=context_revision+1;
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) SELECT 'global',1 WHERE NEW.workspace<>'global'
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_version_memory_capture_exclusions_update AFTER UPDATE ON memory_capture_exclusions BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,source_revision,context_revision) VALUES(NEW.workspace,1,1)
+    ON CONFLICT(workspace) DO UPDATE SET source_revision=source_revision+1,context_revision=context_revision+1;
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) SELECT 'global',1 WHERE NEW.workspace<>'global'
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_version_memory_capture_exclusions_delete AFTER DELETE ON memory_capture_exclusions BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,source_revision,context_revision) VALUES(OLD.workspace,1,1)
+    ON CONFLICT(workspace) DO UPDATE SET source_revision=source_revision+1,context_revision=context_revision+1;
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) SELECT 'global',1 WHERE OLD.workspace<>'global'
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_version_dsh_memory_routine_revisions_insert AFTER INSERT ON dsh_memory_routine_revisions BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,source_revision,context_revision) VALUES(NEW.workspace,0,1)
+    ON CONFLICT(workspace) DO UPDATE SET source_revision=source_revision+0,context_revision=context_revision+1;
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) SELECT 'global',1 WHERE NEW.workspace<>'global'
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_version_dsh_memory_routine_revisions_update AFTER UPDATE ON dsh_memory_routine_revisions BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,source_revision,context_revision) VALUES(NEW.workspace,0,1)
+    ON CONFLICT(workspace) DO UPDATE SET source_revision=source_revision+0,context_revision=context_revision+1;
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) SELECT 'global',1 WHERE NEW.workspace<>'global'
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_version_dsh_memory_routine_revisions_delete AFTER DELETE ON dsh_memory_routine_revisions BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,source_revision,context_revision) VALUES(OLD.workspace,0,1)
+    ON CONFLICT(workspace) DO UPDATE SET source_revision=source_revision+0,context_revision=context_revision+1;
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) SELECT 'global',1 WHERE OLD.workspace<>'global'
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_dsh_memory_principle_sources_insert AFTER INSERT ON dsh_memory_principle_sources BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_dsh_memory_principle_sources_update AFTER UPDATE ON dsh_memory_principle_sources BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_dsh_memory_principle_sources_delete AFTER DELETE ON dsh_memory_principle_sources BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_entries_insert AFTER INSERT ON entries BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_entries_update AFTER UPDATE ON entries BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_entries_delete AFTER DELETE ON entries BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_entry_revisions_insert AFTER INSERT ON entry_revisions BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_entry_revisions_update AFTER UPDATE ON entry_revisions BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_entry_revisions_delete AFTER DELETE ON entry_revisions BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_entry_revision_tags_insert AFTER INSERT ON entry_revision_tags BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_entry_revision_tags_update AFTER UPDATE ON entry_revision_tags BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_entry_revision_tags_delete AFTER DELETE ON entry_revision_tags BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_context_feedback_insert AFTER INSERT ON context_feedback BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_context_feedback_update AFTER UPDATE ON context_feedback BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_context_feedback_delete AFTER DELETE ON context_feedback BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_auto_global_projections_insert AFTER INSERT ON auto_global_projections BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_auto_global_projections_update AFTER UPDATE ON auto_global_projections BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_auto_global_projections_delete AFTER DELETE ON auto_global_projections BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_auto_global_application_receipts_insert AFTER INSERT ON auto_global_application_receipts BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_auto_global_application_receipts_update AFTER UPDATE ON auto_global_application_receipts BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_auto_global_application_receipts_delete AFTER DELETE ON auto_global_application_receipts BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_memory_forget_tombstones_insert AFTER INSERT ON memory_forget_tombstones BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_memory_forget_tombstones_update AFTER UPDATE ON memory_forget_tombstones BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_memory_forget_tombstones_delete AFTER DELETE ON memory_forget_tombstones BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_memory_derivations_insert AFTER INSERT ON memory_derivations BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_memory_derivations_update AFTER UPDATE ON memory_derivations BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_memory_derivations_delete AFTER DELETE ON memory_derivations BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_memory_evolution_settings_insert AFTER INSERT ON memory_evolution_settings BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_memory_evolution_settings_update AFTER UPDATE ON memory_evolution_settings BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_memory_evolution_settings_delete AFTER DELETE ON memory_evolution_settings BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_memory_index_facts_insert AFTER INSERT ON memory_index_facts BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_memory_index_facts_update AFTER UPDATE ON memory_index_facts BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_memory_index_facts_delete AFTER DELETE ON memory_index_facts BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_memory_index_settings_insert AFTER INSERT ON memory_index_settings BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_memory_index_settings_update AFTER UPDATE ON memory_index_settings BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_memory_index_settings_delete AFTER DELETE ON memory_index_settings BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_memory_index_sources_insert AFTER INSERT ON memory_index_sources BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_memory_index_sources_update AFTER UPDATE ON memory_index_sources BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_memory_index_sources_delete AFTER DELETE ON memory_index_sources BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_external_skill_entries_insert AFTER INSERT ON external_skill_entries BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_external_skill_entries_update AFTER UPDATE ON external_skill_entries BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_external_skill_entries_delete AFTER DELETE ON external_skill_entries BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_external_skills_insert AFTER INSERT ON external_skills BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_external_skills_update AFTER UPDATE ON external_skills BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_external_skills_delete AFTER DELETE ON external_skills BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_entry_links_insert AFTER INSERT ON entry_links BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_entry_links_update AFTER UPDATE ON entry_links BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_entry_links_delete AFTER DELETE ON entry_links BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_knowledge_sources_insert AFTER INSERT ON knowledge_sources BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_knowledge_sources_update AFTER UPDATE ON knowledge_sources BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_knowledge_sources_delete AFTER DELETE ON knowledge_sources BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_memory_episodes_insert AFTER INSERT ON memory_episodes BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_memory_episodes_update AFTER UPDATE ON memory_episodes BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_memory_episodes_delete AFTER DELETE ON memory_episodes BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_memory_episode_entries_insert AFTER INSERT ON memory_episode_entries BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_memory_episode_entries_update AFTER UPDATE ON memory_episode_entries BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;
+CREATE TRIGGER lifecycle_reference_memory_episode_entries_delete AFTER DELETE ON memory_episode_entries BEGIN
+  INSERT INTO dsh_memory_processing_state(workspace,context_revision) VALUES('global',1)
+    ON CONFLICT(workspace) DO UPDATE SET context_revision=context_revision+1;
+END;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kiokuko-dsh",
-  "version": "0.2.6",
+  "version": "0.2.8",
   "description": "Kiokuko plugin for DeepSeek Harness",
   "type": "module",
   "license": "MIT",
@@ -44,7 +44,8 @@
     "scripts/smoke-laya-coreml.mjs",
     "scripts/evaluate-answer-review.mjs",
     "scripts/answer-review-evaluation.mjs",
-    "scripts/answer-review-evaluation.d.mts"
+    "scripts/answer-review-evaluation.d.mts",
+    "scripts/verification-completion.mjs"
   ],
   "exports": {
     ".": {
@@ -245,7 +246,10 @@
     "test:models:web": "npm run build && node scripts/verify-models-web.mjs",
     "test:code-intelligence": "node scripts/run-code-intelligence.mjs",
     "test:code-intelligence:packed": "node scripts/run-code-intelligence.mjs --packed",
-    "test:code-intelligence:benchmark": "node scripts/benchmark-code-intelligence.mjs"
+    "test:code-intelligence:benchmark": "node scripts/benchmark-code-intelligence.mjs",
+    "verify": "node scripts/verify.mjs",
+    "verify:plan": "node scripts/verify.mjs --plan",
+    "test:verification": "node --test scripts/verification-contract.test.mjs"
   },
   "dependencies": {
     "@deepseek-ai/cosmokit": "1.8.5",

package/scripts/evaluate-answer-review.mjs

@@ -1,3 +1,4 @@
+import { completeVerification } from './verification-completion.mjs';
 import { parseArgs } from 'node:util'
 import { readFile, writeFile } from 'node:fs/promises'
 import { createHash } from 'node:crypto'
@@ -126,3 +127,5 @@ const json=JSON.stringify(report,null,2)+'\n'
 if(values.output)await writeFile(values.output,json)
 process.stdout.write(json)
 if(report.cases.some(row=>row.status!=='completed') || warmupCases.some(row => row.status !== 'completed'))process.exitCode=1
+
+completeVerification({});

package/scripts/verification-completion.mjs

@@ -0,0 +1,12 @@
+import { writeFileSync } from 'node:fs';
+export function completeVerification(evidence = {}) {
+  if (!process.env.KIOKUKO_VERIFY_COMPLETION_FILE || process.exitCode && process.exitCode !== 0) return;
+  const {KIOKUKO_VERIFY_CHECK_ID:id,KIOKUKO_VERIFY_NONCE:nonce}=process.env;
+  if (!id || !nonce) throw new Error('Missing verification completion identity');
+  writeFileSync(process.env.KIOKUKO_VERIFY_COMPLETION_FILE,JSON.stringify({schema:'verification-completion-v1',id,nonce,status:'passed',evidence}),{flag:'wx'});
+}
+export function validCompletion(value, id, nonce, required = {}) {
+  return !!(value?.schema === 'verification-completion-v1' && value.id === id && value.nonce === nonce && value.status === 'passed'
+    && value.evidence && typeof value.evidence === 'object' && !Array.isArray(value.evidence)
+    && Object.entries(required).every(([key,expected])=>value.evidence[key]===expected));
+}

package/scripts/verify-lisp-vendor.mjs

@@ -1,3 +1,4 @@
+import { completeVerification } from './verification-completion.mjs';
 import { readFile, readdir, writeFile } from 'node:fs/promises'
 import { createHash } from 'node:crypto'
 import { join, relative, resolve } from 'node:path'
@@ -28,3 +29,5 @@ else {
   if (changed.length) throw new Error(`Lisp vendor content differs from the reviewed manifest: ${JSON.stringify(changed)}`)
 }
 console.log(`Lisp vendor: ${Object.keys(files).length} files verified`)
+
+completeVerification({});

package/skills/coding-ideal-routine-skill/SKILL.md

@@ -63,3 +63,15 @@ DSH の実装タスクでは、初回の変更前に `coding_workflow status`
 - ユーザーには、変更内容、確認できた通常利用、実行した検証と結果、残る制約を簡潔に報告する。再現・実装・ローカル検証・公開／本番反映は別々の事実として扱う。許可のない公開やデプロイを完了条件に追加しない。
 
 この Skill は実行時の判断を支援する手順であり、ホストによる毎回の呼び出しや不具合の完全防止を保証する仕組みではない。
+
+## Repository verification entry
+
+When the target repository defines `npm run verify`, read `npm run verify:plan`
+(or `npm run verify -- --plan --profile <profile>`) and use that declared scope.
+Run the same profile locally and in CI; do not reconstruct independent checks
+from CI YAML. `npm test` and focused commands are partial evidence. The JSON
+result records each required check, prerequisite failure, platform exclusion,
+and source/artifact identity. Only a current full-scope `completionReady: true`
+result supports full verification. Recheck saved results with
+`npm run verify -- --status <result.json>` after related edits or artifact changes.
+Never derive skip permissions or expected failures from observed test output.

package/skills/one-shot-software-completion/SKILL.md

@@ -100,4 +100,17 @@ the recovery reference before changing strategy. Do not retry an unchanged
 failed operation or hide failures by weakening checks. Stop on completion or a
 specific blocker requiring unavailable access, evidence or user action.
 
+
+## Repository verification entry
+
+When the target repository defines `npm run verify`, read `npm run verify:plan`
+(or `npm run verify -- --plan --profile <profile>`) and use that declared scope.
+Run the same profile locally and in CI; do not reconstruct independent checks
+from CI YAML. `npm test` and focused commands are partial evidence. The JSON
+result records each required check, prerequisite failure, platform exclusion,
+and source/artifact identity. Only a current full-scope `completionReady: true`
+result supports full verification. Recheck saved results with
+`npm run verify -- --status <result.json>` after related edits or artifact changes.
+Never derive skip permissions or expected failures from observed test output.
+
 <!-- /kiokuko:runtime -->