kushi-agents 5.2.0 → 5.3.0

package/plugin/skills/promote/evals/evals.json

@@ -0,0 +1,35 @@
+{
+  "skill": "promote",
+  "cases": [
+    {
+      "id": "promote-refuses-on-customer-name",
+      "name": "kushi promote refuses without --force when a customer name is detected",
+      "input": "kushi promote acme answers/2026-05-27_confidence-ladder.md",
+      "expected_assertions": [
+        { "type": "contains", "value": "refused" },
+        { "type": "contains", "value": "identifier" }
+      ],
+      "grader_type": "script"
+    },
+    {
+      "id": "promote-force-writes-redacted",
+      "name": "kushi promote --force writes the redacted target + back-link + dual logs",
+      "input": "kushi promote acme answers/2026-05-27_confidence-ladder.md --force",
+      "expected_assertions": [
+        { "type": "contains", "value": "Promoted" },
+        { "type": "contains", "value": "redacts" }
+      ],
+      "grader_type": "script"
+    },
+    {
+      "id": "promote-clean-page-no-redactions",
+      "name": "kushi promote on a customer-free page writes immediately with zero redactions",
+      "input": "kushi promote acme answers/2026-05-27_generic-pattern.md",
+      "expected_assertions": [
+        { "type": "contains", "value": "Promoted" },
+        { "type": "contains", "value": "redacts: 0" }
+      ],
+      "grader_type": "script"
+    }
+  ]
+}

package/plugin/skills/self-check/SKILL.md

@@ -76,6 +76,7 @@ Checks split into **core** (always run) and **deep** (opt-in).
 | D37.hooks | Hooks system (v5.2.0+) | `hooks.instructions.md` exists, `Invoke-Hooks.ps1` helper exists, hook-templates/ has ≥2 templates, any `hooks-log.md` uses canonical heading format. Sub-checks: `D37.hooks-doctrine-exists`, `D37.hooks-helper-exists`, `D37.hooks-templates-exist`, `D37.hooks-log-format`. |
 | D38.parallel | Parallel execution (v5.2.0+) | `parallel-execution.instructions.md` exists, `refresh-project/SKILL.md` references parallel dispatch, doctrine documents deterministic output ordering. Sub-checks: `D38.parallel-doctrine-exists`, `D38.refresh-supports-parallel`, `D38.deterministic-order`. |
 | D39.otel | OpenTelemetry export (v5.2.0+) | `otel.instructions.md` exists, `Emit-OtelSpan.ps1` helper exists, helper short-circuits when `KUSHI_OTEL_ENDPOINT` is unset. Sub-checks: `D39.otel-doctrine-exists`, `D39.otel-helper-exists`, `D39.otel-noop-when-unset`. |
+| D40.global-wiki | Global wiki + multi-wiki routing (v5.3.0+) | `global-wiki.instructions.md` + `multi-wiki-routing.instructions.md` both exist; `src/global-wiki.mjs` exports the init/promote surface; resolved `$KUSHI_GLOBAL_ROOT`'s `State/` (when initialized) carries `scope: global` frontmatter on all root pages; no `> [!warning] potential-customer-leak` callouts are unresolved. Sub-checks: `D40.global-wiki-doctrine-exists`, `D40.routing-doctrine-exists`, `D40.global-wiki-module-exists`, `D40.promote-module-exists`, `D40.global-wiki-shape`, `D40.no-customer-leak`. |
 | **CSC weekly-layout checks (kushi v4.9.0)** | | gated on `Resolve-EngagementRoots` — no-ops on the kushi repo itself. |
 | D11.csc | CSC entity coverage + depth | every `Evidence/<alias>/<source>/weekly/*-csc.md` has ≥ 1 entity heading; per-source minimum bullet count + populated-section count (meetings 25/6, email 8/4, teams 6/3, onenote 10/4, sharepoint 8/3, crm 12/5, ado 8/4). Coverage-Notes-only blocks (low-signal escape) are exempt. |
 | D12.csc | CSC section order | every entity block's `###` section headings appear in the canonical order: Participants → Topics → Q&A → Who Said What → Decisions → Dates & Numbers → Action Items → Next Steps → Open Questions → Risks → Customer Asks → Artifacts → Coverage Notes. |
@@ -159,4 +160,6 @@ This skill is not invoked by `@Kushi <verb>` — it's a meta-skill. Triggers:
 - `instructions/hooks.instructions.md` (D37 validates hooks system)
 - `instructions/parallel-execution.instructions.md` (D38 validates parallel dispatch)
 - `instructions/otel.instructions.md` (D39 validates OTel export)
-- `instructions/schema-evolve.instructions.md` (D39 validates schema evolution)
+- `instructions/schema-evolve.instructions.md` (D39 validates schema evolution)
+- `instructions/global-wiki.instructions.md` (D40 validates global wiki shape + privacy)
+- `instructions/multi-wiki-routing.instructions.md` (D40 validates routing doctrine presence)

package/plugin/skills/self-check/run.ps1

@@ -2000,6 +2000,69 @@ process.stdout.write(JSON.stringify(out));
         }
     }
 
+    # === D40.global-wiki — Global wiki + multi-wiki routing integrity (v5.3.0+) ===
+
+    # D40.global-wiki-doctrine-exists
+    $globalWikiDoctrine = Join-Path $instructionsDir 'global-wiki.instructions.md'
+    if (-not (Test-Path $globalWikiDoctrine)) {
+        Add-Finding 'D40.global-wiki-doctrine-exists' 'GlobalWiki' 'warning' "global-wiki.instructions.md is missing" "Create plugin/instructions/global-wiki.instructions.md per v5.3.0 spec." $globalWikiDoctrine 0
+    }
+
+    # D40.routing-doctrine-exists
+    $routingDoctrine = Join-Path $instructionsDir 'multi-wiki-routing.instructions.md'
+    if (-not (Test-Path $routingDoctrine)) {
+        Add-Finding 'D40.routing-doctrine-exists' 'GlobalWiki' 'warning' "multi-wiki-routing.instructions.md is missing" "Create plugin/instructions/multi-wiki-routing.instructions.md per v5.3.0 spec." $routingDoctrine 0
+    }
+
+    # D40.global-init-script-exists — implementation module + CLI dispatcher
+    $globalModule = Join-Path $Root 'src\global-wiki.mjs'
+    if (-not (Test-Path $globalModule)) {
+        Add-Finding 'D40.global-init-script-exists' 'GlobalWiki' 'warning' "src/global-wiki.mjs is missing" "Create the global-wiki implementation module (resolveGlobalRoot/globalInit/globalStatus/globalAsk/globalLint)." $globalModule 0
+    }
+
+    # D40.promote-script-exists — promote operation lives in the same module + CLI dispatcher
+    $globalCli = Join-Path $Root 'src\global-wiki-cli.mjs'
+    if (-not (Test-Path $globalCli)) {
+        Add-Finding 'D40.promote-script-exists' 'GlobalWiki' 'warning' "src/global-wiki-cli.mjs (CLI dispatch for global + promote) is missing" "Create the CLI dispatcher that wires bin/cli.mjs to global-wiki.mjs (runGlobalInit/runPromote/etc)." $globalCli 0
+    } elseif (Test-Path $globalModule) {
+        $modContent = Get-Content -Raw $globalModule
+        if ($modContent -notmatch 'export\s+function\s+promote\b') {
+            Add-Finding 'D40.promote-script-exists' 'GlobalWiki' 'warning' "src/global-wiki.mjs does not export a promote() function" "Add the promote() export per multi-wiki-routing.instructions.md § Promote operation." $globalModule 0
+        }
+    }
+
+    # D40.global-wiki-shape — if a global root exists (env or default), verify scaffold
+    $globalRoot = $env:KUSHI_GLOBAL_ROOT
+    if (-not $globalRoot) {
+        $userHome = if ($env:USERPROFILE) { $env:USERPROFILE } elseif ($env:HOME) { $env:HOME } else { $null }
+        if ($userHome) { $globalRoot = Join-Path $userHome '.kushi-global' }
+    }
+    if ($globalRoot -and (Test-Path $globalRoot)) {
+        $globalState = Join-Path $globalRoot 'State'
+        if (-not (Test-Path $globalState)) {
+            Add-Finding 'D40.global-wiki-shape' 'GlobalWiki' 'warning' "global wiki root exists but State/ is missing" "Run 'kushi global init' to scaffold the State/ tree." $globalState 0
+        } else {
+            foreach ($req in @('index.md', 'log.md')) {
+                $f = Join-Path $globalState $req
+                if (-not (Test-Path $f)) {
+                    Add-Finding 'D40.global-wiki-shape' 'GlobalWiki' 'warning' "global wiki State/ missing required file: $req" "Run 'kushi global init' to repair the scaffold." $f 0
+                }
+            }
+        }
+    }
+
+    # D40.no-customer-leak — scan State/*.md under the configured global root for potential-customer-leak callouts
+    if ($globalRoot -and (Test-Path (Join-Path $globalRoot 'State'))) {
+        $globalState = Join-Path $globalRoot 'State'
+        $leakFiles = Get-ChildItem -Path $globalState -Recurse -Filter '*.md' -ErrorAction SilentlyContinue
+        foreach ($lf in $leakFiles) {
+            $leakLines = Select-String -Path $lf.FullName -Pattern '^\s*>\s*\[!warning\]\s+potential-customer-leak' -ErrorAction SilentlyContinue
+            foreach ($ll in $leakLines) {
+                Add-Finding 'D40.no-customer-leak' 'GlobalWiki' 'warning' "Open potential-customer-leak callout in global wiki" "Resolve the redaction in $($lf.Name) and remove the callout once the surrounding context is rewritten." $lf.FullName $ll.LineNumber
+            }
+        }
+    }
+
 # === Output ===
 if ($Targeted) {
     # Filter findings to those whose code, surface, file path, or message contain the substring.

package/plugin/skills/teach/SKILL.md

@@ -35,6 +35,8 @@ Pure pedagogical skill. Explains kushi concepts, architecture decisions, and ope
 | graph, entities, links | `entity-graph.instructions.md` | `link-entities/SKILL.md` |
 | workiq, m365 | `workiq-only.instructions.md` | `workiq-input-sanitization.instructions.md` |
 | schema, conventions, remember | `schema-evolve.instructions.md` | `karpathy-state-layout.instructions.md` |
+| global, global-wiki, cross-engagement | `global-wiki.instructions.md` | `multi-wiki-routing.instructions.md` |
+| routing, --global, --project-only, promote | `multi-wiki-routing.instructions.md` | `global-wiki.instructions.md` |
 | install, setup, hosts | `multi-host-install.instructions.md` | `host-portability.instructions.md` |
 | evals, testing | `skill-evals.instructions.md` | `skill-authoring.instructions.md` |
 

package/plugin/skills/teach/evals/evals.json

@@ -32,6 +32,28 @@
         { "type": "contains", "value": "available" }
       ],
       "grader_type": "script"
+    },
+    {
+      "id": "teach-global-wiki",
+      "name": "Explain global wiki",
+      "input": "kushi explain global-wiki",
+      "expected_assertions": [
+        { "type": "contains", "value": "global" },
+        { "type": "contains", "value": "scope" },
+        { "type": "contains", "value": "promote" }
+      ],
+      "grader_type": "script"
+    },
+    {
+      "id": "teach-multi-wiki-routing",
+      "name": "Explain multi-wiki routing flags",
+      "input": "kushi explain routing",
+      "expected_assertions": [
+        { "type": "contains", "value": "--global" },
+        { "type": "contains", "value": "--project-only" },
+        { "type": "contains", "value": "project-first" }
+      ],
+      "grader_type": "script"
     }
   ]
 }

package/src/global-wiki-cli.mjs

@@ -0,0 +1,158 @@
+// kushi v5.3.0 — CLI dispatch helpers for global wiki + promote.
+// These wrap the pure functions in global-wiki.mjs with console I/O,
+// project-root resolution, and exit-code handling.
+
+import fs from 'node:fs';
+import path from 'node:path';
+import { globalInit, globalStatus, globalAsk, globalLint, promote, resolveGlobalRoot } from './global-wiki.mjs';
+
+export async function runGlobalInit() {
+  const result = globalInit();
+  console.log('');
+  console.log(`  Global wiki root: ${result.root}`);
+  console.log(`  State dir       : ${result.state}`);
+  if (result.created.length) {
+    console.log(`  Created (${result.created.length}): ${result.created.join(', ')}`);
+  }
+  if (result.skipped.length) {
+    console.log(`  Skipped (${result.skipped.length} already present)`);
+  }
+  console.log('');
+  console.log("  Next: 'kushi global status' or 'kushi promote <project> <page>'");
+  console.log('');
+}
+
+export async function runGlobalStatus() {
+  const status = globalStatus();
+  console.log('');
+  console.log(`  Global wiki root: ${status.root}`);
+  if (!status.initialized) {
+    console.log('  Status: not initialized. Run `kushi global init`.');
+    console.log('');
+    return;
+  }
+  console.log(`  Pages       : ${status.counts.pages}`);
+  console.log(`  Answers     : ${status.counts.answers}`);
+  console.log(`  Reports     : ${status.counts.reports}`);
+  console.log(`  Open review : ${status.counts.review_items}`);
+  console.log(`  Newest mtime: ${status.newest_iso || '(none)'}`);
+  console.log('');
+}
+
+export async function runGlobalAsk(question) {
+  if (!question || !question.trim()) {
+    console.error('\n  Usage: kushi global ask <question>\n');
+    process.exitCode = 1;
+    return;
+  }
+  const result = globalAsk({ question });
+  console.log('');
+  console.log(`  Question: ${question}`);
+  console.log(`  Result  : ${result.message}`);
+  if (result.hits.length) {
+    console.log('');
+    console.log('  Hits:');
+    for (const h of result.hits) {
+      console.log(`    ${h.provenance} ${h.name}  (score=${h.score})`);
+      console.log(`      file: ${h.file}`);
+    }
+  }
+  console.log('');
+}
+
+export async function runGlobalLint() {
+  const result = globalLint();
+  console.log('');
+  console.log(`  Global wiki lint @ ${resolveGlobalRoot()}`);
+  if (!result.initialized) {
+    console.log('  Status: not initialized. Run `kushi global init`.');
+    console.log('');
+    return;
+  }
+  if (result.findings.length === 0) {
+    console.log('  ✅ No findings.');
+    console.log('');
+    return;
+  }
+  console.log(`  ⚠️  ${result.findings.length} finding(s):`);
+  for (const f of result.findings) {
+    console.log(`    [${f.class}] ${f.file}:${f.line} — ${f.snippet}`);
+    console.log(`      fix: ${f.fix}`);
+  }
+  console.log('');
+}
+
+export async function runPromote(project, pagePath, { force = false } = {}) {
+  const projectRoot = resolveProjectRoot(project);
+  if (!projectRoot) {
+    console.error(`\n  Could not resolve project '${project}' relative to ${process.cwd()}.\n`);
+    process.exitCode = 1;
+    return;
+  }
+  const fullSource = resolveSourcePage(projectRoot, pagePath);
+  if (!fullSource) {
+    console.error(`\n  Could not find page '${pagePath}' under ${projectRoot}.\n`);
+    process.exitCode = 1;
+    return;
+  }
+
+  const result = promote({
+    project,
+    sourcePath: fullSource,
+    projectRoot,
+    force,
+  });
+
+  if (result.refused) {
+    console.error('');
+    console.error(`  ❌ promote refused — ${result.detections.length} identifier hit(s):`);
+    for (const d of result.detections) {
+      console.error(`    [${d.kind}] "${d.pattern}" × ${d.count} (lines: ${d.line_numbers.join(', ')})`);
+    }
+    console.error('');
+    console.error('  Review the hits, then re-run with --force to redact and write.');
+    console.error('');
+    process.exitCode = 2;
+    return;
+  }
+
+  console.log('');
+  console.log('  ✅ Promoted:');
+  console.log(`    source : ${result.source}`);
+  console.log(`    target : ${result.target}`);
+  console.log(`    slug   : ${result.slug}`);
+  console.log(`    redacts: ${result.redactions.length} (${result.redactions.join(', ') || 'none'})`);
+  console.log(`    at     : ${result.promoted_at}`);
+  console.log('');
+}
+
+function resolveProjectRoot(project) {
+  const cwd = process.cwd();
+  const candidates = [
+    path.resolve(cwd, project),
+    path.resolve(cwd, '..', project),
+  ];
+  for (const c of candidates) {
+    if (fs.existsSync(c)) return c;
+  }
+  return null;
+}
+
+function resolveSourcePage(projectRoot, pagePath) {
+  // Allow either an absolute-from-project path or a State-relative path.
+  const direct = path.isAbsolute(pagePath) ? pagePath : path.join(projectRoot, pagePath);
+  if (fs.existsSync(direct)) return direct;
+
+  // Try to locate under Evidence/*/State/.
+  const evidence = path.join(projectRoot, 'Evidence');
+  if (fs.existsSync(evidence)) {
+    for (const alias of fs.readdirSync(evidence)) {
+      const cand = path.join(evidence, alias, 'State', pagePath);
+      if (fs.existsSync(cand)) return cand;
+    }
+  }
+  // Plain <project>/State/.
+  const plain = path.join(projectRoot, 'State', pagePath);
+  if (fs.existsSync(plain)) return plain;
+  return null;
+}