kodelyth-ecc 2.19.0 → 2.20.0

package/.cursor/skills/skill-comply/scripts/runner.py

@@ -1,161 +0,0 @@
-"""Run scenarios via claude -p and parse tool calls from stream-json output."""
-
-from __future__ import annotations
-
-import json
-import re
-import shlex
-import shutil
-import subprocess
-from dataclasses import dataclass
-from pathlib import Path
-
-from scripts.parser import ObservationEvent
-from scripts.scenario_generator import Scenario
-
-SANDBOX_BASE = Path("/tmp/skill-comply-sandbox")
-ALLOWED_MODELS = frozenset({"haiku", "sonnet", "opus"})
-
-
-@dataclass(frozen=True)
-class ScenarioRun:
-    scenario: Scenario
-    observations: tuple[ObservationEvent, ...]
-    sandbox_dir: Path
-
-
-def run_scenario(
-    scenario: Scenario,
-    model: str = "sonnet",
-    max_turns: int = 30,
-    timeout: int = 300,
-) -> ScenarioRun:
-    """Execute a scenario and extract tool calls from stream-json output."""
-    if model not in ALLOWED_MODELS:
-        raise ValueError(f"Unknown model: {model!r}. Allowed: {ALLOWED_MODELS}")
-
-    sandbox_dir = _safe_sandbox_dir(scenario.id)
-    _setup_sandbox(sandbox_dir, scenario)
-
-    result = subprocess.run(
-        [
-            "claude", "-p", scenario.prompt,
-            "--model", model,
-            "--max-turns", str(max_turns),
-            "--add-dir", str(sandbox_dir),
-            "--allowedTools", "Read,Write,Edit,Bash,Glob,Grep",
-            "--output-format", "stream-json",
-            "--verbose",
-        ],
-        capture_output=True,
-        text=True,
-        timeout=timeout,
-        cwd=sandbox_dir,
-    )
-
-    if result.returncode != 0:
-        raise RuntimeError(
-            f"claude -p failed (rc={result.returncode}): {result.stderr[:500]}"
-        )
-
-    observations = _parse_stream_json(result.stdout)
-
-    return ScenarioRun(
-        scenario=scenario,
-        observations=tuple(observations),
-        sandbox_dir=sandbox_dir,
-    )
-
-
-def _safe_sandbox_dir(scenario_id: str) -> Path:
-    """Sanitize scenario ID and ensure path stays within sandbox base."""
-    safe_id = re.sub(r"[^a-zA-Z0-9\-_]", "_", scenario_id)
-    path = SANDBOX_BASE / safe_id
-    # Validate path stays within sandbox base (raises ValueError on traversal)
-    path.resolve().relative_to(SANDBOX_BASE.resolve())
-    return path
-
-
-def _setup_sandbox(sandbox_dir: Path, scenario: Scenario) -> None:
-    """Create sandbox directory and run setup commands."""
-    if sandbox_dir.exists():
-        shutil.rmtree(sandbox_dir)
-    sandbox_dir.mkdir(parents=True)
-
-    subprocess.run(["git", "init"], cwd=sandbox_dir, capture_output=True)
-
-    for cmd in scenario.setup_commands:
-        parts = shlex.split(cmd)
-        subprocess.run(parts, cwd=sandbox_dir, capture_output=True)
-
-
-def _parse_stream_json(stdout: str) -> list[ObservationEvent]:
-    """Parse claude -p stream-json output into ObservationEvents.
-
-    Stream-json format:
-    - type=assistant with content[].type=tool_use → tool call (name, input)
-    - type=user with content[].type=tool_result → tool result (output)
-    """
-    events: list[ObservationEvent] = []
-    pending: dict[str, dict] = {}
-    event_counter = 0
-
-    for line in stdout.strip().splitlines():
-        try:
-            msg = json.loads(line)
-        except json.JSONDecodeError:
-            continue
-
-        msg_type = msg.get("type")
-
-        if msg_type == "assistant":
-            content = msg.get("message", {}).get("content", [])
-            for block in content:
-                if block.get("type") == "tool_use":
-                    tool_use_id = block.get("id", "")
-                    tool_input = block.get("input", {})
-                    input_str = (
-                        json.dumps(tool_input)[:5000]
-                        if isinstance(tool_input, dict)
-                        else str(tool_input)[:5000]
-                    )
-                    pending[tool_use_id] = {
-                        "tool": block.get("name", "unknown"),
-                        "input": input_str,
-                        "order": event_counter,
-                    }
-                    event_counter += 1
-
-        elif msg_type == "user":
-            content = msg.get("message", {}).get("content", [])
-            if isinstance(content, list):
-                for block in content:
-                    tool_use_id = block.get("tool_use_id", "")
-                    if tool_use_id in pending:
-                        info = pending.pop(tool_use_id)
-                        output_content = block.get("content", "")
-                        if isinstance(output_content, list):
-                            output_str = json.dumps(output_content)[:5000]
-                        else:
-                            output_str = str(output_content)[:5000]
-
-                        events.append(ObservationEvent(
-                            timestamp=f"T{info['order']:04d}",
-                            event="tool_complete",
-                            tool=info["tool"],
-                            session=msg.get("session_id", "unknown"),
-                            input=info["input"],
-                            output=output_str,
-                        ))
-
-    for _tool_use_id, info in pending.items():
-        events.append(ObservationEvent(
-            timestamp=f"T{info['order']:04d}",
-            event="tool_complete",
-            tool=info["tool"],
-            session="unknown",
-            input=info["input"],
-            output="",
-        ))
-
-    return sorted(events, key=lambda e: e.timestamp)

package/.cursor/skills/skill-comply/scripts/scenario_generator.py

@@ -1,70 +0,0 @@
-"""Generate pressure scenarios from skill + spec using LLM."""
-
-from __future__ import annotations
-
-import subprocess
-from dataclasses import dataclass
-from pathlib import Path
-
-import yaml
-
-from scripts.utils import extract_yaml
-
-PROMPTS_DIR = Path(__file__).parent.parent / "prompts"
-
-
-@dataclass(frozen=True)
-class Scenario:
-    id: str
-    level: int
-    level_name: str
-    description: str
-    prompt: str
-    setup_commands: tuple[str, ...]
-
-
-def generate_scenarios(
-    skill_path: Path,
-    spec_yaml: str,
-    model: str = "haiku",
-) -> list[Scenario]:
-    """Generate 3 scenarios with decreasing prompt strictness.
-
-    Calls claude -p with the scenario_generator prompt, parses YAML output.
-    """
-    skill_content = skill_path.read_text()
-    prompt_template = (PROMPTS_DIR / "scenario_generator.md").read_text()
-    prompt = (
-        prompt_template
-        .replace("{skill_content}", skill_content)
-        .replace("{spec_yaml}", spec_yaml)
-    )
-
-    result = subprocess.run(
-        ["claude", "-p", prompt, "--model", model, "--output-format", "text"],
-        capture_output=True,
-        text=True,
-        timeout=120,
-    )
-
-    if result.returncode != 0:
-        raise RuntimeError(f"claude -p failed: {result.stderr}")
-
-    if not result.stdout.strip():
-        raise RuntimeError("claude -p returned empty output")
-
-    raw_yaml = extract_yaml(result.stdout)
-    parsed = yaml.safe_load(raw_yaml)
-
-    scenarios: list[Scenario] = []
-    for s in parsed["scenarios"]:
-        scenarios.append(Scenario(
-            id=s["id"],
-            level=s["level"],
-            level_name=s["level_name"],
-            description=s["description"],
-            prompt=s["prompt"].strip(),
-            setup_commands=tuple(s.get("setup_commands", [])),
-        ))
-
-    return sorted(scenarios, key=lambda s: s.level)

package/.cursor/skills/skill-comply/scripts/spec_generator.py

@@ -1,72 +0,0 @@
-"""Generate compliance specs from skill files using LLM."""
-
-from __future__ import annotations
-
-import subprocess
-import tempfile
-from pathlib import Path
-
-import yaml
-
-from scripts.parser import ComplianceSpec, parse_spec
-from scripts.utils import extract_yaml
-
-PROMPTS_DIR = Path(__file__).parent.parent / "prompts"
-
-
-def generate_spec(
-    skill_path: Path,
-    model: str = "haiku",
-    max_retries: int = 2,
-) -> ComplianceSpec:
-    """Generate a compliance spec from a skill/rule file.
-
-    Calls claude -p with the spec_generator prompt, parses YAML output.
-    Retries on YAML parse errors with error feedback.
-    """
-    skill_content = skill_path.read_text()
-    prompt_template = (PROMPTS_DIR / "spec_generator.md").read_text()
-    base_prompt = prompt_template.replace("{skill_content}", skill_content)
-
-    last_error: Exception | None = None
-
-    for attempt in range(max_retries + 1):
-        prompt = base_prompt
-        if attempt > 0 and last_error is not None:
-            prompt += (
-                f"\n\nPREVIOUS ATTEMPT FAILED with YAML parse error:\n"
-                f"{last_error}\n\n"
-                f"Please fix the YAML. Remember to quote all string values "
-                f"that contain colons, e.g.: description: \"Use type: description format\""
-            )
-
-        result = subprocess.run(
-            ["claude", "-p", prompt, "--model", model, "--output-format", "text"],
-            capture_output=True,
-            text=True,
-            timeout=120,
-        )
-
-        if result.returncode != 0:
-            raise RuntimeError(f"claude -p failed: {result.stderr}")
-
-        raw_yaml = extract_yaml(result.stdout)
-
-        tmp_path = None
-        with tempfile.NamedTemporaryFile(
-            mode="w", suffix=".yaml", delete=False,
-        ) as f:
-            f.write(raw_yaml)
-            tmp_path = Path(f.name)
-
-        try:
-            return parse_spec(tmp_path)
-        except (yaml.YAMLError, KeyError, TypeError) as e:
-            last_error = e
-            if attempt == max_retries:
-                raise
-        finally:
-            if tmp_path is not None:
-                tmp_path.unlink(missing_ok=True)
-
-    raise RuntimeError("unreachable")

package/.cursor/skills/skill-comply/scripts/utils.py

@@ -1,13 +0,0 @@
-"""Shared utilities for skill-comply scripts."""
-
-from __future__ import annotations
-
-
-def extract_yaml(text: str) -> str:
-    """Extract YAML from LLM output, stripping markdown fences if present."""
-    lines = text.strip().splitlines()
-    if lines and lines[0].startswith("```"):
-        lines = lines[1:]
-    if lines and lines[-1].startswith("```"):
-        lines = lines[:-1]
-    return "\n".join(lines)

package/.cursor/skills/skill-stocktake/SKILL.md

@@ -1,193 +0,0 @@
----
-description: "Use when auditing Claude skills and commands for quality. Supports Quick Scan (changed skills only) and Full Stocktake modes with sequential subagent batch evaluation."
-origin: ECC
----
-
-# skill-stocktake
-
-Slash command (`/skill-stocktake`) that audits all Claude skills and commands using a quality checklist + AI holistic judgment. Supports two modes: Quick Scan for recently changed skills, and Full Stocktake for a complete review.
-
-## Scope
-
-The command targets the following paths **relative to the directory where it is invoked**:
-
-| Path | Description |
-|------|-------------|
-| `~/.claude/skills/` | Global skills (all projects) |
-| `{cwd}/.claude/skills/` | Project-level skills (if the directory exists) |
-
-**At the start of Phase 1, the command explicitly lists which paths were found and scanned.**
-
-### Targeting a specific project
-
-To include project-level skills, run from that project's root directory:
-
-```bash
-cd ~/path/to/my-project
-/skill-stocktake
-```
-
-If the project has no `.claude/skills/` directory, only global skills and commands are evaluated.
-
-## Modes
-
-| Mode | Trigger | Duration |
-|------|---------|---------|
-| Quick Scan | `results.json` exists (default) | 5–10 min |
-| Full Stocktake | `results.json` absent, or `/skill-stocktake full` | 20–30 min |
-
-**Results cache:** `~/.claude/skills/skill-stocktake/results.json`
-
-## Quick Scan Flow
-
-Re-evaluate only skills that have changed since the last run (5–10 min).
-
-1. Read `~/.claude/skills/skill-stocktake/results.json`
-2. Run: `bash ~/.claude/skills/skill-stocktake/scripts/quick-diff.sh \
-         ~/.claude/skills/skill-stocktake/results.json`
-   (Project dir is auto-detected from `$PWD/.claude/skills`; pass it explicitly only if needed)
-3. If output is `[]`: report "No changes since last run." and stop
-4. Re-evaluate only those changed files using the same Phase 2 criteria
-5. Carry forward unchanged skills from previous results
-6. Output only the diff
-7. Run: `bash ~/.claude/skills/skill-stocktake/scripts/save-results.sh \
-         ~/.claude/skills/skill-stocktake/results.json <<< "$EVAL_RESULTS"`
-
-## Full Stocktake Flow
-
-### Phase 1 — Inventory
-
-Run: `bash ~/.claude/skills/skill-stocktake/scripts/scan.sh`
-
-The script enumerates skill files, extracts frontmatter, and collects UTC mtimes.
-Project dir is auto-detected from `$PWD/.claude/skills`; pass it explicitly only if needed.
-Present the scan summary and inventory table from the script output:
-
-```
-Scanning:
-  ✓ ~/.claude/skills/         (17 files)
-  ✗ {cwd}/.claude/skills/    (not found — global skills only)
-```
-
-| Skill | 7d use | 30d use | Description |
-|-------|--------|---------|-------------|
-
-### Phase 2 — Quality Evaluation
-
-Launch an Agent tool subagent (**general-purpose agent**) with the full inventory and checklist:
-
-```text
-Agent(
-  subagent_type="general-purpose",
-  prompt="
-Evaluate the following skill inventory against the checklist.
-
-[INVENTORY]
-
-[CHECKLIST]
-
-Return JSON for each skill:
-{ \"verdict\": \"Keep\"|\"Improve\"|\"Update\"|\"Retire\"|\"Merge into [X]\", \"reason\": \"...\" }
-"
-)
-```
-
-The subagent reads each skill, applies the checklist, and returns per-skill JSON:
-
-`{ "verdict": "Keep"|"Improve"|"Update"|"Retire"|"Merge into [X]", "reason": "..." }`
-
-**Chunk guidance:** Process ~20 skills per subagent invocation to keep context manageable. Save intermediate results to `results.json` (`status: "in_progress"`) after each chunk.
-
-After all skills are evaluated: set `status: "completed"`, proceed to Phase 3.
-
-**Resume detection:** If `status: "in_progress"` is found on startup, resume from the first unevaluated skill.
-
-Each skill is evaluated against this checklist:
-
-```
-- [ ] Content overlap with other skills checked
-- [ ] Overlap with MEMORY.md / CLAUDE.md checked
-- [ ] Freshness of technical references verified (use WebSearch if tool names / CLI flags / APIs are present)
-- [ ] Usage frequency considered
-```
-
-Verdict criteria:
-
-| Verdict | Meaning |
-|---------|---------|
-| Keep | Useful and current |
-| Improve | Worth keeping, but specific improvements needed |
-| Update | Referenced technology is outdated (verify with WebSearch) |
-| Retire | Low quality, stale, or cost-asymmetric |
-| Merge into [X] | Substantial overlap with another skill; name the merge target |
-
-Evaluation is **holistic AI judgment** — not a numeric rubric. Guiding dimensions:
-- **Actionability**: code examples, commands, or steps that let you act immediately
-- **Scope fit**: name, trigger, and content are aligned; not too broad or narrow
-- **Uniqueness**: value not replaceable by MEMORY.md / CLAUDE.md / another skill
-- **Currency**: technical references work in the current environment
-
-**Reason quality requirements** — the `reason` field must be self-contained and decision-enabling:
-- Do NOT write "unchanged" alone — always restate the core evidence
-- For **Retire**: state (1) what specific defect was found, (2) what covers the same need instead
-  - Bad: `"Superseded"`
-  - Good: `"disable-model-invocation: true already set; superseded by continuous-learning-v2 which covers all the same patterns plus confidence scoring. No unique content remains."`
-- For **Merge**: name the target and describe what content to integrate
-  - Bad: `"Overlaps with X"`
-  - Good: `"42-line thin content; Step 4 of chatlog-to-article already covers the same workflow. Integrate the 'article angle' tip as a note in that skill."`
-- For **Improve**: describe the specific change needed (what section, what action, target size if relevant)
-  - Bad: `"Too long"`
-  - Good: `"276 lines; Section 'Framework Comparison' (L80–140) duplicates ai-era-architecture-principles; delete it to reach ~150 lines."`
-- For **Keep** (mtime-only change in Quick Scan): restate the original verdict rationale, do not write "unchanged"
-  - Bad: `"Unchanged"`
-  - Good: `"mtime updated but content unchanged. Unique Python reference explicitly imported by rules/python/; no overlap found."`
-
-### Phase 3 — Summary Table
-
-| Skill | 7d use | Verdict | Reason |
-|-------|--------|---------|--------|
-
-### Phase 4 — Consolidation
-
-1. **Retire / Merge**: present detailed justification per file before confirming with user:
-   - What specific problem was found (overlap, staleness, broken references, etc.)
-   - What alternative covers the same functionality (for Retire: which existing skill/rule; for Merge: the target file and what content to integrate)
-   - Impact of removal (any dependent skills, MEMORY.md references, or workflows affected)
-2. **Improve**: present specific improvement suggestions with rationale:
-   - What to change and why (e.g., "trim 430→200 lines because sections X/Y duplicate python-patterns")
-   - User decides whether to act
-3. **Update**: present updated content with sources checked
-4. Check MEMORY.md line count; propose compression if >100 lines
-
-## Results File Schema
-
-`~/.claude/skills/skill-stocktake/results.json`:
-
-**`evaluated_at`**: Must be set to the actual UTC time of evaluation completion.
-Obtain via Bash: `date -u +%Y-%m-%dT%H:%M:%SZ`. Never use a date-only approximation like `T00:00:00Z`.
-
-```json
-{
-  "evaluated_at": "2026-02-21T10:00:00Z",
-  "mode": "full",
-  "batch_progress": {
-    "total": 80,
-    "evaluated": 80,
-    "status": "completed"
-  },
-  "skills": {
-    "skill-name": {
-      "path": "~/.claude/skills/skill-name/SKILL.md",
-      "verdict": "Keep",
-      "reason": "Concrete, actionable, unique value for X workflow",
-      "mtime": "2026-01-15T08:30:00Z"
-    }
-  }
-}
-```
-
-## Notes
-
-- Evaluation is blind: the same checklist applies to all skills regardless of origin (ECC, self-authored, auto-extracted)
-- Archive / delete operations always require explicit user confirmation
-- No verdict branching by skill origin

package/.cursor/skills/skill-stocktake/scripts/quick-diff.sh

@@ -1,87 +0,0 @@
-#!/usr/bin/env bash
-# quick-diff.sh — compare skill file mtimes against results.json evaluated_at
-# Usage: quick-diff.sh RESULTS_JSON [CWD_SKILLS_DIR]
-# Output: JSON array of changed/new files to stdout (empty [] if no changes)
-#
-# When CWD_SKILLS_DIR is omitted, defaults to $PWD/.claude/skills so the
-# script always picks up project-level skills without relying on the caller.
-#
-# Environment:
-#   SKILL_STOCKTAKE_GLOBAL_DIR   Override ~/.claude/skills (for testing only;
-#                                do not set in production — intended for bats tests)
-#   SKILL_STOCKTAKE_PROJECT_DIR  Override project dir detection (for testing only)
-
-set -euo pipefail
-
-RESULTS_JSON="${1:-}"
-CWD_SKILLS_DIR="${SKILL_STOCKTAKE_PROJECT_DIR:-${2:-$PWD/.claude/skills}}"
-GLOBAL_DIR="${SKILL_STOCKTAKE_GLOBAL_DIR:-$HOME/.claude/skills}"
-
-if [[ -z "$RESULTS_JSON" || ! -f "$RESULTS_JSON" ]]; then
-  echo "Error: RESULTS_JSON not found: ${RESULTS_JSON:-<empty>}" >&2
-  exit 1
-fi
-
-# Validate CWD_SKILLS_DIR looks like a .claude/skills path (defense-in-depth).
-# Only warn when the path exists — a nonexistent path poses no traversal risk.
-if [[ -n "$CWD_SKILLS_DIR" && -d "$CWD_SKILLS_DIR" && "$CWD_SKILLS_DIR" != */.claude/skills* ]]; then
-  echo "Warning: CWD_SKILLS_DIR does not look like a .claude/skills path: $CWD_SKILLS_DIR" >&2
-fi
-
-evaluated_at=$(jq -r '.evaluated_at' "$RESULTS_JSON")
-
-# Fail fast on a missing or malformed evaluated_at rather than producing
-# unpredictable results from ISO 8601 string comparison against "null".
-if [[ ! "$evaluated_at" =~ ^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}Z$ ]]; then
-  echo "Error: invalid or missing evaluated_at in $RESULTS_JSON: $evaluated_at" >&2
-  exit 1
-fi
-
-# Pre-extract known paths from results.json once (O(1) lookup per file instead of O(n*m))
-known_paths=$(jq -r '.skills[].path' "$RESULTS_JSON" 2>/dev/null)
-
-tmpdir=$(mktemp -d)
-# Use a function to avoid embedding $tmpdir in a quoted string (prevents injection
-# if TMPDIR were crafted to contain shell metacharacters).
-_cleanup() { rm -rf "$tmpdir"; }
-trap _cleanup EXIT
-
-# Shared counter across process_dir calls — intentionally NOT local
-i=0
-
-process_dir() {
-  local dir="$1"
-  while IFS= read -r file; do
-    local mtime dp is_new
-    mtime=$(date -u -r "$file" +%Y-%m-%dT%H:%M:%SZ)
-    dp="${file/#$HOME/~}"
-
-    # Check if this file is known to results.json (exact whole-line match to
-    # avoid substring false-positives, e.g. "python-patterns" matching "python-patterns-v2").
-    if echo "$known_paths" | grep -qxF "$dp"; then
-      is_new="false"
-      # Known file: only emit if mtime changed (ISO 8601 string comparison is safe)
-      [[ "$mtime" > "$evaluated_at" ]] || continue
-    else
-      is_new="true"
-      # New file: always emit regardless of mtime
-    fi
-
-    jq -n \
-      --arg path "$dp" \
-      --arg mtime "$mtime" \
-      --argjson is_new "$is_new" \
-      '{path:$path,mtime:$mtime,is_new:$is_new}' \
-      > "$tmpdir/$i.json"
-    i=$((i+1))
-  done < <(find "$dir" -name "*.md" -type f 2>/dev/null | sort)
-}
-
-[[ -d "$GLOBAL_DIR" ]] && process_dir "$GLOBAL_DIR"
-[[ -n "$CWD_SKILLS_DIR" && -d "$CWD_SKILLS_DIR" ]] && process_dir "$CWD_SKILLS_DIR"
-
-if [[ $i -eq 0 ]]; then
-  echo "[]"
-else
-  jq -s '.' "$tmpdir"/*.json
-fi

package/.cursor/skills/skill-stocktake/scripts/save-results.sh

@@ -1,56 +0,0 @@
-#!/usr/bin/env bash
-# save-results.sh — merge evaluated skills into results.json with correct UTC timestamp
-# Usage: save-results.sh RESULTS_JSON <<< "$EVAL_JSON"
-#
-# stdin format:
-#   { "skills": {...}, "mode"?: "full"|"quick", "batch_progress"?: {...} }
-#
-# Always sets evaluated_at to current UTC time via `date -u`.
-# Merges stdin .skills into existing results.json (new entries override old).
-# Optionally updates .mode and .batch_progress if present in stdin.
-
-set -euo pipefail
-
-RESULTS_JSON="${1:-}"
-
-if [[ -z "$RESULTS_JSON" ]]; then
-  echo "Error: RESULTS_JSON argument required" >&2
-  echo "Usage: save-results.sh RESULTS_JSON <<< \"\$EVAL_JSON\"" >&2
-  exit 1
-fi
-
-EVALUATED_AT=$(date -u +%Y-%m-%dT%H:%M:%SZ)
-
-# Read eval results from stdin and validate JSON before touching the results file
-input_json=$(cat)
-if ! echo "$input_json" | jq empty 2>/dev/null; then
-  echo "Error: stdin is not valid JSON" >&2
-  exit 1
-fi
-
-if [[ ! -f "$RESULTS_JSON" ]]; then
-  # Bootstrap: create new results.json from stdin JSON + current UTC timestamp
-  echo "$input_json" | jq --arg ea "$EVALUATED_AT" \
-    '. + { evaluated_at: $ea }' > "$RESULTS_JSON"
-  exit 0
-fi
-
-# Merge: new .skills override existing ones; old skills not in input_json are kept.
-# Optionally update .mode and .batch_progress if provided.
-#
-# Use mktemp for a collision-safe temp file (concurrent runs on the same RESULTS_JSON
-# would race on a predictable ".tmp" suffix; random suffix prevents silent overwrites).
-tmp=$(mktemp "${RESULTS_JSON}.XXXXXX")
-trap 'rm -f "$tmp"' EXIT
-
-jq -s \
-  --arg ea "$EVALUATED_AT" \
-  '.[0] as $existing | .[1] as $new |
-   $existing |
-   .evaluated_at = $ea |
-   .skills = ($existing.skills + ($new.skills // {})) |
-   if ($new | has("mode")) then .mode = $new.mode else . end |
-   if ($new | has("batch_progress")) then .batch_progress = $new.batch_progress else . end' \
-  "$RESULTS_JSON" <(echo "$input_json") > "$tmp"
-
-mv "$tmp" "$RESULTS_JSON"