mewkit 1.10.1 → 1.10.3

package/dist/memory/schemas.js

@@ -0,0 +1,94 @@
+import { z } from "zod";
+// Zod schemas for the curated-memory stores. Source of truth = the live v2.0.0
+// JSON shape (EMPTY_SKELETON in commands/memory.ts) + immediate-capture-handler.
+// Design rules:
+//  - `.passthrough()` everywhere → unknown/future fields are kept, never rejected
+//    (additive forward-compat: current data must validate clean).
+//  - Only the structurally load-bearing fields are required (id, version, scope,
+//    consumer) so legacy entries captured before richer fields existed still pass.
+//  - Validators WARN on soft issues; they never hard-fail valid v2.0.0 data.
+const Metadata = z
+    .object({
+    created: z.string().optional(),
+    last_updated: z.string().optional(),
+})
+    .passthrough();
+// Per-pattern entry for fixes / review-patterns / architecture-decisions.
+export const PatternSchema = z
+    .object({
+    id: z.string().min(1),
+    type: z.string().optional(),
+    category: z.string().optional(),
+    severity: z.string().optional(),
+    domain: z.array(z.string()).optional(),
+    applicable_when: z.string().optional(),
+    context: z.string().optional(),
+    pattern: z.string().optional(),
+    frequency: z.number().optional(),
+    lastSeen: z.string().optional(),
+    timestamp: z.string().optional(),
+})
+    .passthrough();
+// Curated pattern store (fixes, review-patterns, architecture-decisions).
+function patternStore(scope) {
+    return z
+        .object({
+        version: z.string(),
+        scope: z.literal(scope),
+        consumer: z.string(),
+        patterns: z.array(PatternSchema),
+        metadata: Metadata.optional(),
+    })
+        .passthrough();
+}
+export const FixesSchema = patternStore("fixes");
+export const ReviewPatternsSchema = patternStore("review-patterns");
+export const ArchitectureDecisionsSchema = patternStore("architecture-decisions");
+// Security findings store — narrative shape, not the pattern shape.
+export const SecurityFindingSchema = z
+    .object({
+    id: z.string().min(1),
+    finding: z.string(),
+    severity: z.string().optional(),
+    evidence: z.string().optional(),
+    status: z.string().optional(),
+    lastSeen: z.string().optional(),
+})
+    .passthrough();
+export const SecurityFindingsSchema = z
+    .object({
+    version: z.string(),
+    scope: z.literal("security-findings"),
+    consumer: z.string(),
+    findings: z.array(SecurityFindingSchema),
+    metadata: Metadata.optional(),
+})
+    .passthrough();
+// The four curated stores. `trace-event` is intentionally excluded — its writer
+// is bash (append-trace.sh) and readers are bash/python, so a TS schema would be
+// inert and would drift from the real writer.
+export const CURATED_STORES = [
+    { file: "fixes.json", scope: "fixes", schema: FixesSchema, itemsKey: "patterns", textFields: ["pattern", "context"] },
+    {
+        file: "review-patterns.json",
+        scope: "review-patterns",
+        schema: ReviewPatternsSchema,
+        itemsKey: "patterns",
+        textFields: ["pattern", "context"],
+    },
+    {
+        file: "architecture-decisions.json",
+        scope: "architecture-decisions",
+        schema: ArchitectureDecisionsSchema,
+        itemsKey: "patterns",
+        textFields: ["pattern", "context"],
+    },
+    {
+        file: "security-findings.json",
+        scope: "security-findings",
+        schema: SecurityFindingsSchema,
+        itemsKey: "findings",
+        textFields: ["finding", "evidence"],
+    },
+];
+//# sourceMappingURL=schemas.js.map

package/dist/memory/schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../src/memory/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,+EAA+E;AAC/E,iFAAiF;AACjF,gBAAgB;AAChB,kFAAkF;AAClF,kEAAkE;AAClE,iFAAiF;AACjF,mFAAmF;AACnF,6EAA6E;AAE7E,MAAM,QAAQ,GAAG,CAAC;KAChB,MAAM,CAAC;IACP,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC;KACD,WAAW,EAAE,CAAC;AAEhB,0EAA0E;AAC1E,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC5B,MAAM,CAAC;IACP,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC;KACD,WAAW,EAAE,CAAC;AAIhB,0EAA0E;AAC1E,SAAS,YAAY,CAAC,KAAa;IAClC,OAAO,CAAC;SACN,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;QACvB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC;QAChC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE;KAC7B,CAAC;SACD,WAAW,EAAE,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;AACjD,MAAM,CAAC,MAAM,oBAAoB,GAAG,YAAY,CAAC,iBAAiB,CAAC,CAAC;AACpE,MAAM,CAAC,MAAM,2BAA2B,GAAG,YAAY,CAAC,wBAAwB,CAAC,CAAC;AAElF,oEAAoE;AACpE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACpC,MAAM,CAAC;IACP,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC;KACD,WAAW,EAAE,CAAC;AAIhB,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACrC,MAAM,CAAC;IACP,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;IACrC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC;IACxC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE;CAC7B,CAAC;KACD,WAAW,EAAE,CAAC;AAYhB,gFAAgF;AAChF,iFAAiF;AACjF,8CAA8C;AAC9C,MAAM,CAAC,MAAM,cAAc,GAAgB;IAC1C,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE;IACrH;QACC,IAAI,EAAE,sBAAsB;QAC5B,KAAK,EAAE,iBAAiB;QACxB,MAAM,EAAE,oBAAoB;QAC5B,QAAQ,EAAE,UAAU;QACpB,UAAU,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;KAClC;IACD;QACC,IAAI,EAAE,6BAA6B;QACnC,KAAK,EAAE,wBAAwB;QAC/B,MAAM,EAAE,2BAA2B;QACnC,QAAQ,EAAE,UAAU;QACpB,UAAU,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;KAClC;IACD;QACC,IAAI,EAAE,wBAAwB;QAC9B,KAAK,EAAE,mBAAmB;QAC1B,MAAM,EAAE,sBAAsB;QAC9B,QAAQ,EAAE,UAAU;QACpB,UAAU,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC;KACnC;CACD,CAAC"}

package/dist/memory/seed-from-md.d.ts

@@ -0,0 +1,7 @@
+export interface SeedResult {
+    file: string;
+    added: number;
+    total: number;
+}
+export declare function seedFromMd(memoryDir: string): SeedResult[];
+//# sourceMappingURL=seed-from-md.d.ts.map

package/dist/memory/seed-from-md.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-from-md.d.ts","sourceRoot":"","sources":["../../src/memory/seed-from-md.ts"],"names":[],"mappings":"AAmHA,MAAM,WAAW,UAAU;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACd;AAED,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,EAAE,CAwE1D"}

package/dist/memory/seed-from-md.js

@@ -0,0 +1,167 @@
+import fs from "node:fs";
+import path from "node:path";
+const SEED_SOURCES = [
+    { file: "fixes.json", scope: "fixes", consumer: "mk:fix", itemsKey: "patterns", mdSources: ["fixes.md"], category: "bug-class" },
+    {
+        file: "review-patterns.json",
+        scope: "review-patterns",
+        consumer: "mk:review,mk:plan-creator",
+        itemsKey: "patterns",
+        mdSources: ["review-patterns.md"],
+        category: "pattern",
+    },
+    {
+        file: "architecture-decisions.json",
+        scope: "architecture-decisions",
+        consumer: "mk:plan-creator,mk:cook",
+        itemsKey: "patterns",
+        mdSources: ["architecture-decisions.md"],
+        category: "decision",
+    },
+    {
+        file: "security-findings.json",
+        scope: "security-findings",
+        consumer: "mk:cso,mk:review",
+        itemsKey: "findings",
+        mdSources: ["security-log.md", "security-notes.md"],
+    },
+];
+// Split a topic MD into `## ` sections (the `# ` title and `> ` intro are skipped).
+function parseSections(content) {
+    const lines = content.split("\n");
+    const sections = [];
+    let current = null;
+    for (const line of lines) {
+        if (line.startsWith("## ")) {
+            if (current)
+                sections.push(current);
+            current = { heading: line.slice(3).trim(), body: "" };
+        }
+        else if (current) {
+            current.body += line + "\n";
+        }
+    }
+    if (current)
+        sections.push(current);
+    return sections;
+}
+function slugify(heading) {
+    return heading
+        .replace(/\([^)]*\)/g, "") // drop (date, ...) parentheticals
+        .replace(/[—–-]\s*\d{4}-\d{2}-\d{2}.*$/, "") // drop "— 2026-05-01" date suffixes
+        .replace(/^(plan|decision|note):\s*/i, "")
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, "-")
+        .replace(/^-+|-+$/g, "")
+        .slice(0, 60)
+        .replace(/-+$/g, "");
+}
+function deriveId(section) {
+    const migrated = section.body.match(/<!--\s*migrated-id:\s*([^\s>]+)\s*-->/);
+    if (migrated)
+        return migrated[1];
+    const slug = slugify(section.heading);
+    return slug || `entry-${section.heading.length}`;
+}
+function deriveDate(heading) {
+    const iso = heading.match(/(\d{4}-\d{2}-\d{2})/);
+    if (iso)
+        return iso[1];
+    return undefined;
+}
+function loadStore(filePath, source) {
+    if (fs.existsSync(filePath)) {
+        try {
+            return JSON.parse(fs.readFileSync(filePath, "utf-8"));
+        }
+        catch {
+            // fall through to skeleton
+        }
+    }
+    const today = new Date().toISOString().split("T")[0];
+    return {
+        version: "2.0.0",
+        scope: source.scope,
+        consumer: source.consumer,
+        [source.itemsKey]: [],
+        metadata: { created: today, last_updated: today },
+    };
+}
+function atomicWrite(filePath, data) {
+    const tmp = `${filePath}.tmp-${process.pid}`;
+    fs.writeFileSync(tmp, JSON.stringify(data, null, 2) + "\n", "utf-8");
+    fs.renameSync(tmp, filePath);
+}
+export function seedFromMd(memoryDir) {
+    const results = [];
+    for (const source of SEED_SOURCES) {
+        const filePath = path.join(memoryDir, source.file);
+        const store = loadStore(filePath, source);
+        const items = store[source.itemsKey] ?? [];
+        const existingIds = new Set(items.map((it) => String(it.id)));
+        let added = 0;
+        for (const mdName of source.mdSources) {
+            const mdPath = path.join(memoryDir, mdName);
+            if (!fs.existsSync(mdPath))
+                continue;
+            const content = fs.readFileSync(mdPath, "utf-8");
+            if (source.itemsKey === "findings") {
+                // Findings are written as bracketed log lines by injection-audit.py
+                // ([DATE] [LEVEL] ...). `## ` headers AND fenced format-doc templates
+                // in these files are NOT findings, so both are intentionally skipped.
+                let inFence = false;
+                let lineIndex = 0; // stable across runs (counts every matched finding line, not just added) — keeps ids idempotent
+                for (const line of content.split("\n")) {
+                    if (line.trim().startsWith("```")) {
+                        inFence = !inFence;
+                        continue;
+                    }
+                    if (inFence)
+                        continue;
+                    const m = line.match(/^\[([^\]]+)\]\s*\[([^\]]+)\]\s*(.+)$/);
+                    if (!m)
+                        continue;
+                    const id = `sec-${slugify(m[3]).slice(0, 40)}-${lineIndex}`;
+                    lineIndex++;
+                    if (existingIds.has(id))
+                        continue;
+                    items.push({ id, finding: m[3].trim(), severity: m[2].trim(), status: "migrated", source: "seed-from-md" });
+                    existingIds.add(id);
+                    added++;
+                }
+                continue;
+            }
+            for (const section of parseSections(content)) {
+                const id = deriveId(section);
+                if (existingIds.has(id))
+                    continue;
+                const date = deriveDate(section.heading);
+                items.push({
+                    id,
+                    category: source.category,
+                    context: section.body.trim(),
+                    pattern: section.heading,
+                    source: "seed-from-md",
+                    ...(date ? { lastSeen: date } : {}),
+                });
+                existingIds.add(id);
+                added++;
+            }
+        }
+        if (added > 0) {
+            store[source.itemsKey] = items;
+            const meta = store.metadata ?? {};
+            meta.last_updated = new Date().toISOString().split("T")[0];
+            store.metadata = meta;
+            atomicWrite(filePath, store);
+        }
+        else if (!fs.existsSync(filePath)) {
+            // Ensure a valid skeleton exists even when there was nothing to seed
+            // (e.g. security stores with no real findings yet).
+            atomicWrite(filePath, store);
+        }
+        results.push({ file: source.file, added, total: items.length });
+    }
+    return results;
+}
+//# sourceMappingURL=seed-from-md.js.map

package/dist/memory/seed-from-md.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-from-md.js","sourceRoot":"","sources":["../../src/memory/seed-from-md.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAgB7B,MAAM,YAAY,GAAiB;IAClC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE;IAChI;QACC,IAAI,EAAE,sBAAsB;QAC5B,KAAK,EAAE,iBAAiB;QACxB,QAAQ,EAAE,2BAA2B;QACrC,QAAQ,EAAE,UAAU;QACpB,SAAS,EAAE,CAAC,oBAAoB,CAAC;QACjC,QAAQ,EAAE,SAAS;KACnB;IACD;QACC,IAAI,EAAE,6BAA6B;QACnC,KAAK,EAAE,wBAAwB;QAC/B,QAAQ,EAAE,yBAAyB;QACnC,QAAQ,EAAE,UAAU;QACpB,SAAS,EAAE,CAAC,2BAA2B,CAAC;QACxC,QAAQ,EAAE,UAAU;KACpB;IACD;QACC,IAAI,EAAE,wBAAwB;QAC9B,KAAK,EAAE,mBAAmB;QAC1B,QAAQ,EAAE,kBAAkB;QAC5B,QAAQ,EAAE,UAAU;QACpB,SAAS,EAAE,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;KACnD;CACD,CAAC;AAOF,oFAAoF;AACpF,SAAS,aAAa,CAAC,OAAe;IACrC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAgB,EAAE,CAAC;IACjC,IAAI,OAAO,GAAqB,IAAI,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,IAAI,OAAO;gBAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpC,OAAO,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACvD,CAAC;aAAM,IAAI,OAAO,EAAE,CAAC;YACpB,OAAO,CAAC,IAAI,IAAI,IAAI,GAAG,IAAI,CAAC;QAC7B,CAAC;IACF,CAAC;IACD,IAAI,OAAO;QAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpC,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,SAAS,OAAO,CAAC,OAAe;IAC/B,OAAO,OAAO;SACZ,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,kCAAkC;SAC5D,OAAO,CAAC,8BAA8B,EAAE,EAAE,CAAC,CAAC,oCAAoC;SAChF,OAAO,CAAC,4BAA4B,EAAE,EAAE,CAAC;SACzC,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;SACZ,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,QAAQ,CAAC,OAAkB;IACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC7E,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACtC,OAAO,IAAI,IAAI,SAAS,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,UAAU,CAAC,OAAe;IAClC,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACjD,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;IACvB,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,SAAS,CAAC,QAAgB,EAAE,MAAkB;IACtD,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC;YACJ,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAA4B,CAAC;QAClF,CAAC;QAAC,MAAM,CAAC;YACR,2BAA2B;QAC5B,CAAC;IACF,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,OAAO;QACN,OAAO,EAAE,OAAO;QAChB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE;QACrB,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE;KACjD,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB,EAAE,IAAa;IACnD,MAAM,GAAG,GAAG,GAAG,QAAQ,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;IAC7C,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IACrE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AAC9B,CAAC;AAQD,MAAM,UAAU,UAAU,CAAC,SAAiB;IAC3C,MAAM,OAAO,GAAiB,EAAE,CAAC;IAEjC,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAoC,IAAI,EAAE,CAAC;QAC/E,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9D,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAC5C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,SAAS;YACrC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAEjD,IAAI,MAAM,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;gBACpC,oEAAoE;gBACpE,sEAAsE;gBACtE,sEAAsE;gBACtE,IAAI,OAAO,GAAG,KAAK,CAAC;gBACpB,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,gGAAgG;gBACnH,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;wBACnC,OAAO,GAAG,CAAC,OAAO,CAAC;wBACnB,SAAS;oBACV,CAAC;oBACD,IAAI,OAAO;wBAAE,SAAS;oBACtB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;oBAC7D,IAAI,CAAC,CAAC;wBAAE,SAAS;oBACjB,MAAM,EAAE,GAAG,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,SAAS,EAAE,CAAC;oBAC5D,SAAS,EAAE,CAAC;oBACZ,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;wBAAE,SAAS;oBAClC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;oBAC5G,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBACpB,KAAK,EAAE,CAAC;gBACT,CAAC;gBACD,SAAS;YACV,CAAC;YAED,KAAK,MAAM,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9C,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAC7B,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;oBAAE,SAAS;gBAClC,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBACzC,KAAK,CAAC,IAAI,CAAC;oBACV,EAAE;oBACF,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE;oBAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,MAAM,EAAE,cAAc;oBACtB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACnC,CAAC,CAAC;gBACH,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACpB,KAAK,EAAE,CAAC;YACT,CAAC;QACF,CAAC;QAED,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACf,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC;YAC/B,MAAM,IAAI,GAAI,KAAK,CAAC,QAAoC,IAAI,EAAE,CAAC;YAC/D,IAAI,CAAC,YAAY,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3D,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC;YACtB,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC9B,CAAC;aAAM,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,qEAAqE;YACrE,oDAAoD;YACpD,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC9B,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,OAAO,OAAO,CAAC;AAChB,CAAC"}

package/dist/memory/validate.d.ts

@@ -0,0 +1,26 @@
+export type IssueLevel = "error" | "warn";
+export interface Issue {
+    level: IssueLevel;
+    message: string;
+}
+export interface StoreResult {
+    file: string;
+    exists: boolean;
+    entryCount: number;
+    issues: Issue[];
+}
+export interface ValidationReport {
+    stores: StoreResult[];
+    errorCount: number;
+    warnCount: number;
+}
+export interface ContentValidator {
+    (text: string): {
+        valid: boolean;
+        pattern?: string;
+        match?: string;
+    };
+}
+export declare function loadContentValidator(memoryDir: string): ContentValidator | null;
+export declare function validateMemory(memoryDir: string): ValidationReport;
+//# sourceMappingURL=validate.d.ts.map

package/dist/memory/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/memory/validate.ts"],"names":[],"mappings":"AAOA,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,MAAM,CAAC;AAE1C,MAAM,WAAW,KAAK;IACrB,KAAK,EAAE,UAAU,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,KAAK,EAAE,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAChC,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAChC,CAAC,IAAI,EAAE,MAAM,GAAG;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACrE;AAID,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI,CAU/E;AA0ED,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,gBAAgB,CAYlE"}

package/dist/memory/validate.js

@@ -0,0 +1,102 @@
+import fs from "node:fs";
+import path from "node:path";
+import { createRequire } from "node:module";
+import { CURATED_STORES } from "./schemas.js";
+const require = createRequire(import.meta.url);
+// Load the real validate-content.cjs (DRY — never reimplement the injection
+// patterns) from the project that owns this memory dir. Absent → recheck skipped.
+export function loadContentValidator(memoryDir) {
+    const projectRoot = path.resolve(memoryDir, "..", "..");
+    const libPath = path.join(projectRoot, ".claude", "hooks", "lib", "validate-content.cjs");
+    if (!fs.existsSync(libPath))
+        return null;
+    try {
+        const mod = require(libPath);
+        return typeof mod.validateContent === "function" ? mod.validateContent : null;
+    }
+    catch {
+        return null;
+    }
+}
+// Count `## ` section headings in a topic MD file — proxy for entry count, used
+// only for the advisory MD↔JSON divergence warning.
+function countMdSections(mdPath) {
+    if (!fs.existsSync(mdPath))
+        return 0;
+    const content = fs.readFileSync(mdPath, "utf-8");
+    const headings = content.match(/^## /gm);
+    return headings ? headings.length : 0;
+}
+function validateStore(memoryDir, spec, contentValidator) {
+    const filePath = path.join(memoryDir, spec.file);
+    const result = { file: spec.file, exists: fs.existsSync(filePath), entryCount: 0, issues: [] };
+    if (!result.exists) {
+        // Missing curated store is a soft state: warn, never fail.
+        result.issues.push({ level: "warn", message: `${spec.file} not found` });
+        return result;
+    }
+    let raw;
+    try {
+        raw = JSON.parse(fs.readFileSync(filePath, "utf-8"));
+    }
+    catch (err) {
+        result.issues.push({ level: "error", message: `invalid JSON: ${err.message}` });
+        return result;
+    }
+    const parsed = spec.schema.safeParse(raw);
+    if (!parsed.success) {
+        for (const issue of parsed.error.issues) {
+            result.issues.push({ level: "error", message: `${issue.path.join(".") || "<root>"}: ${issue.message}` });
+        }
+        return result;
+    }
+    const data = parsed.data;
+    const items = data[spec.itemsKey] ?? [];
+    result.entryCount = items.length;
+    // Per-field injection recheck — catches entries captured before the
+    // write-path guard existed (defense-in-depth).
+    if (contentValidator) {
+        for (const item of items) {
+            const id = String(item.id ?? "<unknown>");
+            for (const field of spec.textFields) {
+                const text = item[field];
+                if (typeof text !== "string")
+                    continue;
+                const check = contentValidator(text);
+                if (!check.valid) {
+                    result.issues.push({
+                        level: "warn",
+                        message: `entry ${id}.${field} matched injection pattern (${check.match ?? check.pattern})`,
+                    });
+                }
+            }
+        }
+    }
+    // Advisory MD↔JSON divergence: empty JSON store while its topic MD has entries
+    // signals a missing seed (knowledge would be invisible to JSON-first readers).
+    const mdName = spec.file.replace(/\.json$/, ".md");
+    const mdSections = countMdSections(path.join(memoryDir, mdName));
+    if (result.entryCount === 0 && mdSections > 0) {
+        result.issues.push({
+            level: "warn",
+            message: `${spec.file} is empty but ${mdName} has ${mdSections} section(s) — run 'mewkit memory seed-from-md'`,
+        });
+    }
+    return result;
+}
+export function validateMemory(memoryDir) {
+    const contentValidator = loadContentValidator(memoryDir);
+    const stores = CURATED_STORES.map((spec) => validateStore(memoryDir, spec, contentValidator));
+    let errorCount = 0;
+    let warnCount = 0;
+    for (const s of stores) {
+        for (const issue of s.issues) {
+            if (issue.level === "error")
+                errorCount++;
+            else
+                warnCount++;
+        }
+    }
+    return { stores, errorCount, warnCount };
+}
+//# sourceMappingURL=validate.js.map

package/dist/memory/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../src/memory/validate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAkB,MAAM,cAAc,CAAC;AAE9D,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AA0B/C,4EAA4E;AAC5E,kFAAkF;AAClF,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IACrD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,sBAAsB,CAAC,CAAC;IAC1F,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAA2C,CAAC;QACvE,OAAO,OAAO,GAAG,CAAC,eAAe,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/E,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED,gFAAgF;AAChF,oDAAoD;AACpD,SAAS,eAAe,CAAC,MAAc;IACtC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACzC,OAAO,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,aAAa,CAAC,SAAiB,EAAE,IAAe,EAAE,gBAAyC;IACnG,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,MAAM,GAAgB,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAE5G,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACpB,2DAA2D;QAC3D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,YAAY,EAAE,CAAC,CAAC;QACzE,OAAO,MAAM,CAAC;IACf,CAAC;IAED,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACJ,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,iBAAkB,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC3F,OAAO,MAAM,CAAC;IACf,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACzC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC1G,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAA+B,CAAC;IACpD,MAAM,KAAK,GAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAoC,IAAI,EAAE,CAAC;IAC5E,MAAM,CAAC,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC;IAEjC,oEAAoE;IACpE,+CAA+C;IAC/C,IAAI,gBAAgB,EAAE,CAAC;QACtB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAC1B,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,WAAW,CAAC,CAAC;YAC1C,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACrC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;gBACzB,IAAI,OAAO,IAAI,KAAK,QAAQ;oBAAE,SAAS;gBACvC,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;gBACrC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;oBAClB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;wBAClB,KAAK,EAAE,MAAM;wBACb,OAAO,EAAE,SAAS,EAAE,IAAI,KAAK,+BAA+B,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,GAAG;qBAC3F,CAAC,CAAC;gBACJ,CAAC;YACF,CAAC;QACF,CAAC;IACF,CAAC;IAED,+EAA+E;IAC/E,+EAA+E;IAC/E,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACjE,IAAI,MAAM,CAAC,UAAU,KAAK,CAAC,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;YAClB,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,iBAAiB,MAAM,QAAQ,UAAU,gDAAgD;SAC9G,CAAC,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AACf,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC/C,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC9F,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACxB,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YAC9B,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO;gBAAE,UAAU,EAAE,CAAC;;gBACrC,SAAS,EAAE,CAAC;QAClB,CAAC;IACF,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;AAC1C,CAAC"}

package/dist/memory/verdict-schema.d.ts

@@ -0,0 +1,86 @@
+import { z } from "zod";
+export declare const DimensionSchema: z.ZodObject<{
+    name: z.ZodString;
+    verdict: z.ZodEnum<["PASS", "WARN", "FAIL"]>;
+    note: z.ZodOptional<z.ZodString>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    name: z.ZodString;
+    verdict: z.ZodEnum<["PASS", "WARN", "FAIL"]>;
+    note: z.ZodOptional<z.ZodString>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    name: z.ZodString;
+    verdict: z.ZodEnum<["PASS", "WARN", "FAIL"]>;
+    note: z.ZodOptional<z.ZodString>;
+}, z.ZodTypeAny, "passthrough">>;
+export declare const VerdictSchema: z.ZodObject<{
+    schema_version: z.ZodString;
+    slug: z.ZodString;
+    gate: z.ZodEnum<["review", "contract"]>;
+    decision: z.ZodEnum<["PASS", "PASS_WITH_RISK", "BLOCKED"]>;
+    dimensions: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        verdict: z.ZodEnum<["PASS", "WARN", "FAIL"]>;
+        note: z.ZodOptional<z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        name: z.ZodString;
+        verdict: z.ZodEnum<["PASS", "WARN", "FAIL"]>;
+        note: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        name: z.ZodString;
+        verdict: z.ZodEnum<["PASS", "WARN", "FAIL"]>;
+        note: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>, "many">;
+    evidence_refs: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    created_at: z.ZodString;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    schema_version: z.ZodString;
+    slug: z.ZodString;
+    gate: z.ZodEnum<["review", "contract"]>;
+    decision: z.ZodEnum<["PASS", "PASS_WITH_RISK", "BLOCKED"]>;
+    dimensions: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        verdict: z.ZodEnum<["PASS", "WARN", "FAIL"]>;
+        note: z.ZodOptional<z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        name: z.ZodString;
+        verdict: z.ZodEnum<["PASS", "WARN", "FAIL"]>;
+        note: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        name: z.ZodString;
+        verdict: z.ZodEnum<["PASS", "WARN", "FAIL"]>;
+        note: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>, "many">;
+    evidence_refs: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    created_at: z.ZodString;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    schema_version: z.ZodString;
+    slug: z.ZodString;
+    gate: z.ZodEnum<["review", "contract"]>;
+    decision: z.ZodEnum<["PASS", "PASS_WITH_RISK", "BLOCKED"]>;
+    dimensions: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        verdict: z.ZodEnum<["PASS", "WARN", "FAIL"]>;
+        note: z.ZodOptional<z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        name: z.ZodString;
+        verdict: z.ZodEnum<["PASS", "WARN", "FAIL"]>;
+        note: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        name: z.ZodString;
+        verdict: z.ZodEnum<["PASS", "WARN", "FAIL"]>;
+        note: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>, "many">;
+    evidence_refs: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    created_at: z.ZodString;
+}, z.ZodTypeAny, "passthrough">>;
+export type Verdict = z.infer<typeof VerdictSchema>;
+export type VerdictGateStatus = "pass" | "blocked" | "invalid" | "missing" | "legacy-md";
+export interface VerdictGateResult {
+    ok: boolean;
+    status: VerdictGateStatus;
+    decision?: string;
+    errors: string[];
+}
+export declare function resolveVerdictPath(slugOrPath: string): string;
+export declare function evaluateVerdictGate(slugOrPath: string): VerdictGateResult;
+//# sourceMappingURL=verdict-schema.d.ts.map

package/dist/memory/verdict-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verdict-schema.d.ts","sourceRoot":"","sources":["../../src/memory/verdict-schema.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,eAAO,MAAM,eAAe;;;;;;;;;;;;gCAMb,CAAC;AAEhB,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAUX,CAAC;AAEhB,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAEpD,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,CAAC;AAEzF,MAAM,WAAW,iBAAiB;IACjC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,iBAAiB,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;CACjB;AAGD,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAI7D;AAKD,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,iBAAiB,CAoCzE"}

package/dist/memory/verdict-schema.js

@@ -0,0 +1,71 @@
+import fs from "node:fs";
+import path from "node:path";
+import { z } from "zod";
+// MeowKit-native, Zod-validated review verdict proof-bundle (the machine-readable
+// companion to the human `tasks/reviews/<slug>-verdict.md`). Adopts the deterministic
+// proof-bundle PATTERN only — no ClaudeKit script port. Stays under tasks/ and is
+// never injected into model context.
+export const DimensionSchema = z
+    .object({
+    name: z.string().min(1),
+    verdict: z.enum(["PASS", "WARN", "FAIL"]),
+    note: z.string().optional(),
+})
+    .passthrough();
+export const VerdictSchema = z
+    .object({
+    schema_version: z.string(),
+    slug: z.string().min(1),
+    gate: z.enum(["review", "contract"]),
+    decision: z.enum(["PASS", "PASS_WITH_RISK", "BLOCKED"]),
+    dimensions: z.array(DimensionSchema),
+    evidence_refs: z.array(z.string()).optional(),
+    created_at: z.string(),
+})
+    .passthrough();
+// Resolve a slug or explicit path to the verdict JSON path.
+export function resolveVerdictPath(slugOrPath) {
+    if (slugOrPath.endsWith(".json"))
+        return slugOrPath;
+    if (slugOrPath.endsWith(".md"))
+        return slugOrPath.replace(/\.md$/, ".json");
+    return path.join("tasks", "reviews", `${slugOrPath}-verdict.json`);
+}
+// The gate. Pass on a valid PASS / PASS_WITH_RISK verdict. Block on BLOCKED,
+// invalid JSON/schema, or total absence. Tolerate a legacy markdown-only verdict
+// during the transition window (warn, but pass) so existing reviews keep shipping.
+export function evaluateVerdictGate(slugOrPath) {
+    const jsonPath = resolveVerdictPath(slugOrPath);
+    const mdPath = jsonPath.replace(/\.json$/, ".md");
+    if (!fs.existsSync(jsonPath)) {
+        if (fs.existsSync(mdPath)) {
+            return {
+                ok: true,
+                status: "legacy-md",
+                errors: [`No verdict JSON at ${jsonPath}; markdown-only verdict tolerated during transition.`],
+            };
+        }
+        return { ok: false, status: "missing", errors: [`No verdict found at ${jsonPath} (or sibling .md).`] };
+    }
+    let raw;
+    try {
+        raw = JSON.parse(fs.readFileSync(jsonPath, "utf-8"));
+    }
+    catch (err) {
+        return { ok: false, status: "invalid", errors: [`invalid JSON: ${err.message}`] };
+    }
+    const parsed = VerdictSchema.safeParse(raw);
+    if (!parsed.success) {
+        return {
+            ok: false,
+            status: "invalid",
+            errors: parsed.error.issues.map((i) => `${i.path.join(".") || "<root>"}: ${i.message}`),
+        };
+    }
+    const { decision } = parsed.data;
+    if (decision === "BLOCKED") {
+        return { ok: false, status: "blocked", decision, errors: ["verdict decision is BLOCKED — Gate 2 blocks ship."] };
+    }
+    return { ok: true, status: "pass", decision, errors: [] };
+}
+//# sourceMappingURL=verdict-schema.js.map

package/dist/memory/verdict-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verdict-schema.js","sourceRoot":"","sources":["../../src/memory/verdict-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,kFAAkF;AAClF,sFAAsF;AACtF,kFAAkF;AAClF,qCAAqC;AAErC,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC9B,MAAM,CAAC;IACP,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC3B,CAAC;KACD,WAAW,EAAE,CAAC;AAEhB,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC5B,MAAM,CAAC;IACP,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACpC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,gBAAgB,EAAE,SAAS,CAAC,CAAC;IACvD,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;IACpC,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC7C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC;KACD,WAAW,EAAE,CAAC;AAahB,4DAA4D;AAC5D,MAAM,UAAU,kBAAkB,CAAC,UAAkB;IACpD,IAAI,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,UAAU,CAAC;IACpD,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5E,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,UAAU,eAAe,CAAC,CAAC;AACpE,CAAC;AAED,6EAA6E;AAC7E,iFAAiF;AACjF,mFAAmF;AACnF,MAAM,UAAU,mBAAmB,CAAC,UAAkB;IACrD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAElD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9B,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,OAAO;gBACN,EAAE,EAAE,IAAI;gBACR,MAAM,EAAE,WAAW;gBACnB,MAAM,EAAE,CAAC,sBAAsB,QAAQ,sDAAsD,CAAC;aAC9F,CAAC;QACH,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,uBAAuB,QAAQ,oBAAoB,CAAC,EAAE,CAAC;IACxG,CAAC;IAED,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACJ,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,iBAAkB,GAAa,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;IAC9F,CAAC;IAED,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO;YACN,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;SACvF,CAAC;IACH,CAAC;IAED,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;IACjC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,mDAAmD,CAAC,EAAE,CAAC;IAClH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AAC3D,CAAC"}

package/dist/migrate/migrate-orchestrator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"migrate-orchestrator.d.ts","sourceRoot":"","sources":["../../src/migrate/migrate-orchestrator.ts"],"names":[],"mappings":"AAUA,OAAO,EACN,kBAAkB,EAKlB,MAAM,4BAA4B,CAAC;AAkCpC,OAAO,KAAK,EAAE,cAAc,EAAuD,MAAM,YAAY,CAAC;AAEtG,MAAM,WAAW,iBAAiB;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,EAAE,CAAC;CACf;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CA2BjG;AA4RD,OAAO,EAAE,kBAAkB,EAAE,CAAC"}
+{"version":3,"file":"migrate-orchestrator.d.ts","sourceRoot":"","sources":["../../src/migrate/migrate-orchestrator.ts"],"names":[],"mappings":"AAUA,OAAO,EACN,kBAAkB,EAKlB,MAAM,4BAA4B,CAAC;AAmCpC,OAAO,KAAK,EAAE,cAAc,EAAuD,MAAM,YAAY,CAAC;AAEtG,MAAM,WAAW,iBAAiB;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,EAAE,CAAC;CACf;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CA2BjG;AAgSD,OAAO,EAAE,kBAAkB,EAAE,CAAC"}

package/dist/migrate/migrate-orchestrator.js

@@ -15,6 +15,7 @@ import { convertItem } from "./converters/index.js";
 import { codexBulkActionShim, providerKey, skillActionShim } from "./migrate-action-shims.js";
 import { executeDeleteAction, executeInstallAction } from "./portable-installer.js";
 import { installSkillDirectory } from "./skill-directory-installer.js";
+import { buildInstalledBackRef } from "../core/install-metadata-backref.js";
 import { installCodexAgents, mergeHooksSettings } from "./hooks/index.js";
 import { loadModelRoutingConfig } from "./model-routing-config.js";
 import { printActionDetails, printFinalSummary, printPreflight } from "./migrate-ui-summary.js";
@@ -131,7 +132,10 @@ async function runMigrateUnderLock(options, ctx, scope, targets, isGlobal, model
             portabilityFiltered.plan.summary.delete));
     if (!confirmed)
         return 130;
-    const results = await executePlan(portabilityFiltered.plan.actions, { allItems: itemsByT }, portableSkills.skillsByProvider, targets, isGlobal, scope.skills, join(discovered.source.root, "settings.json"));
+    // One-way bridge: link exported assets back to the installed metadata they
+    // came from. Absent installed metadata yields null and the bridge is omitted.
+    const installedBackRef = buildInstalledBackRef(discovered.source.root);
+    const results = await executePlan(portabilityFiltered.plan.actions, { allItems: itemsByT, installedBackRef }, portableSkills.skillsByProvider, targets, isGlobal, scope.skills, join(discovered.source.root, "settings.json"));
     printFinalSummary(results);
     const hasFailures = results.some((r) => !r.success);
     if (!hasFailures && manifest) {
@@ -239,7 +243,7 @@ async function executePlan(actions, ctx, skillsByProvider, targets, isGlobal, sk
                 continue;
             const skills = skillsByProvider.get(target) ?? [];
             for (const skill of skills) {
-                const r = await installSkillDirectory(skill, target, { global: isGlobal });
+                const r = await installSkillDirectory(skill, target, { global: isGlobal, installedBackRef: ctx.installedBackRef });
                 results.push({
                     action: skillActionShim(skill, target, isGlobal, r.path ?? ""),
                     success: r.success,