mewkit 1.16.0 → 1.17.0

package/dist/core/check-gate-authority.js

@@ -0,0 +1,313 @@
+import fs from "node:fs";
+import path from "node:path";
+/** Suppression marker for prose that legitimately QUOTES the anti-pattern. */
+const ALLOW_MARKER = "lint-allow-gate-authority";
+/**
+ * Statements that grant automated gate approval. Each entry is scoped to an
+ * explicit `Gate 1` / `Gate 2` reference (or an unambiguous euphemism) so that
+ * unrelated vocabulary — a skill's own "HARD GATE", a domain "gate" metaphor —
+ * cannot trip the check.
+ */
+const PATTERNS = [
+    {
+        name: "auto-approve → gate",
+        // The digit is REQUIRED. Without it this matches the bare word "gate" and
+        // fires on every domain metaphor ("the quality gate stays manual").
+        //
+        // The gap is deliberately TIGHT. In every real instance the verb and its
+        // gate are adjacent ("auto-approves Gate 2"). A wide gap lets one match
+        // span two clauses, so a negated first clause swallows the gate reference
+        // belonging to an asserting second clause — and the violation vanishes.
+        re: /auto[-\s]?approv\w*[^.\n]{0,20}\bgates?\s*[12]\b/gi,
+        expected: "automation executes between gates; a human approves the gate",
+    },
+    {
+        name: "gate → auto-approved",
+        re: /\bgate\s*[12]\b[^.\n]{0,30}auto[-\s]?approv\w*/gi,
+        expected: "automation executes between gates; a human approves the gate",
+    },
+    {
+        name: "gate bound to an auto value",
+        re: /\bgate\s*[12]\s*:\s*auto/gi,
+        expected: "Gate 1 / Gate 2 are human in every mode",
+    },
+    {
+        name: "gate offering an auto alternative",
+        re: /\bgate\s*[12]\b[^.\n]{0,30}\[[^\]\n]*auto[^\]\n]*\]/gi,
+        expected: "the only gate outcome is human approval — drop the auto alternative",
+    },
+    {
+        name: "stamp treated as authority",
+        re: /\bstamp\s+counts\b/gi,
+        expected: "an evaluator stamp is evidence presented at the gate, never the approval",
+    },
+    {
+        name: "gate prompt skipped",
+        re: /\bskips?\s+gate\s*[12]\b[^.\n]{0,30}(prompt|user)/gi,
+        expected: "present the gate; a passing pre-check is evidence, not approval",
+    },
+];
+/**
+ * Words that flip a claim from ASSERTING automated approval to FORBIDDING it.
+ * "Gate 2 is never auto-approved" states the contract — it must not be flagged.
+ */
+const NEGATION_RE = /\b(never|not|n't|no|none|cannot|can't|forbidden|prohibited|non-negotiable|mandatory|requires?\s+human|human\s+approval|explicitly\s+typed)\b/i;
+/**
+ * How far back from a match to look for the word that negates it. A negation
+ * governs the clause it introduces, so it sits immediately before the claim
+ * ("but never auto-approves Gate 2"), not in some unrelated later clause.
+ */
+const NEGATION_LOOKBEHIND = 48;
+/**
+ * True when the matched claim is negated rather than asserted.
+ *
+ * Scope matters enormously here. Testing the WHOLE line lets any incidental
+ * negation elsewhere in the sentence disarm a real violation — e.g.
+ * "auto-approves Gate 2 ... so no separate human click is required" is a
+ * genuine violation whose "no" belongs to a different clause entirely. A safety
+ * lint that misses its own threat model because of a distant "no" is worse than
+ * no lint: it reports green over the exact regression it exists to catch.
+ */
+function isNegated(line, matchStart, matchText) {
+    const before = line.slice(Math.max(0, matchStart - NEGATION_LOOKBEHIND), matchStart);
+    return NEGATION_RE.test(before) || NEGATION_RE.test(matchText);
+}
+/** True when the line is nothing but the suppression comment. */
+function isStandaloneMarker(line) {
+    return /^\s*<!--\s*lint-allow-gate-authority\s*-->\s*$/.test(line);
+}
+/** Scan one file's prose for statements granting automated gate authority. */
+export function scanForGateAuthority(root, relPath) {
+    const abs = path.join(root, relPath);
+    if (!fs.existsSync(abs))
+        return [];
+    const violations = [];
+    const lines = fs.readFileSync(abs, "utf-8").split("\n");
+    lines.forEach((text, idx) => {
+        // A marker on the offending line suppresses that line. A marker on its own
+        // line above suppresses the line below — the form used where a trailing
+        // comment would render into prose (table rows, list items).
+        //
+        // The standalone requirement matters: an INLINE marker must not leak onto
+        // the next line, or one suppressed line silently disarms its neighbour.
+        if (text.includes(ALLOW_MARKER))
+            return;
+        if (idx > 0 && isStandaloneMarker(lines[idx - 1]))
+            return;
+        // Negation is evaluated per MATCH, and EVERY match is examined — not just
+        // the first. A line may state the contract and then carve an exception out
+        // of it ("Gate 2 is never auto-approved, but fast mode auto-approves Gate 2
+        // when tests pass"): the negated first clause must not excuse the second.
+        for (const { re, expected } of PATTERNS) {
+            for (const m of text.matchAll(re)) {
+                if (isNegated(text, m.index, m[0]))
+                    continue;
+                violations.push({ file: relPath, line: idx + 1, found: text.trim(), expected });
+                return; // one finding per line is enough to locate and fix it
+            }
+        }
+    });
+    return violations;
+}
+/** Collect every `.md` file under `dir`, relative to `root`. */
+function collectMarkdown(root, dir, acc = []) {
+    const abs = path.join(root, dir);
+    if (!fs.existsSync(abs))
+        return acc;
+    for (const entry of fs.readdirSync(abs, { withFileTypes: true })) {
+        const rel = path.join(dir, entry.name);
+        if (entry.isDirectory()) {
+            if (entry.name === "node_modules" || entry.name.startsWith(".git"))
+                continue;
+            collectMarkdown(root, rel, acc);
+        }
+        else if (entry.isFile() && entry.name.endsWith(".md")) {
+            acc.push(rel);
+        }
+    }
+    return acc;
+}
+// ─── Command-vs-skill drift ──────────────────────────────────────────────────
+//
+// A slash command and its same-named skill are two descriptions of one behavior,
+// and two descriptions drift. The rule (skill-authoring-rules.md → Commands vs
+// Skills): the command is a DISPATCHER — usage, flags, dispatch, and a concise
+// safety note pointing at the authority. The skill owns the procedure.
+//
+// When a command re-states the workflow, the two copies disagree the moment
+// either changes, and an agent reading the command follows a stale procedure it
+// has no reason to distrust. That is exactly the `/mk:fix` defect this lint
+// exists to keep closed: the command described a Simple path that skipped the
+// scout its own skill marked MANDATORY.
+//
+// Gate semantics are NOT re-detected here — `checkGateAuthority` above is the
+// one gate-phrase detector, deliberately shared. Two blacklists drift apart, and
+// the weaker one becomes the de-facto contract.
+/**
+ * The dispatchers this check contracts.
+ *
+ * Deliberately an allowlist, not "every same-name pair". Calibrating against all
+ * paired commands surfaced 7 REAL drift findings (0 false positives) in six
+ * commands outside this contract — autobuild, docs-init, help, retro, review,
+ * ship — e.g. `review.md` carries a full "### Execution Steps" procedure that
+ * duplicates its skill's. Those are pre-existing and each needs a considered
+ * rewrite, not a lint flip; widening this set is the follow-up that does them.
+ *
+ * So this set is a floor that holds the line where it was drawn, not a claim
+ * that the rest are clean. They are not. Widen it as each is thinned.
+ */
+const GOVERNED_DISPATCHERS = new Set(["fix", "cook", "plan", "advise"]);
+/** Governed same-name command/skill pairs — the only files this drift check reads. */
+function pairedCommands(root) {
+    const cmdDir = path.join(root, ".claude", "commands", "mk");
+    const skillsDir = path.join(root, ".claude", "skills");
+    if (!fs.existsSync(cmdDir) || !fs.existsSync(skillsDir))
+        return [];
+    return fs
+        .readdirSync(cmdDir)
+        .filter((f) => f.endsWith(".md"))
+        .filter((f) => GOVERNED_DISPATCHERS.has(f.replace(/\.md$/, "")))
+        // A command with no same-name skill has nowhere to delegate its procedure to,
+        // so the same prose there is correct (skill-authoring-rules.md: "not every
+        // command has a matching SKILL.md, and that is intentional").
+        .filter((f) => fs.existsSync(path.join(skillsDir, f.replace(/\.md$/, ""), "SKILL.md")))
+        .map((f) => path.join(".claude", "commands", "mk", f));
+}
+/**
+ * Prose that belongs to the SKILL, found in a command file.
+ *
+ * Scoped tightly on purpose. A command legitimately carries usage, flags, a
+ * dispatch line, and a safety note — flagging those would make the lint noise,
+ * and a noisy lint gets disabled. These patterns target the two things a
+ * dispatcher can never own: step-by-step procedure, and memory writes.
+ */
+const COMMAND_DRIFT_PATTERNS = [
+    {
+        name: "numbered workflow steps",
+        // "1. Do X" / "2. Then Y" — a procedure. One numbered line is a list; the
+        // pattern needs a SECOND step on a later line to fire, so a lone "1." in a
+        // safety note stays clean.
+        //
+        // `[ \t]*`, never `\s*`: `\s` matches newlines, so with `m` the match could
+        // begin on the preceding blank line and report a line number one too low —
+        // which silently pointed the allow-marker lookup at the wrong line.
+        re: /^[ \t]*2\.[ \t]+\S/gm,
+        expected: "the skill owns the procedure — the command dispatches to it",
+    },
+    {
+        name: "memory-write instruction",
+        re: /\b(Edit|write|append|update)\b[^.\n]{0,40}\.claude\/memory\//gi,
+        expected: "memory writes belong to the skill's capture step, not the command",
+    },
+    {
+        name: "memory store schema",
+        re: /\b(fixes|review-patterns|architecture-decisions|security-findings)\.(json|md)\b/gi,
+        expected: "the store's schema is the skill's business; the command must not restate it",
+    },
+    {
+        name: "complexity classification table",
+        re: /\|\s*(Simple|Standard|Complex|Moderate|Parallel)\s*\|/gi,
+        expected: "classification is the skill's routing decision, not the command's",
+    },
+];
+/** Scan one command file for skill-owned prose. */
+export function scanCommandForDrift(root, relPath) {
+    const abs = path.join(root, relPath);
+    if (!fs.existsSync(abs))
+        return [];
+    const findings = [];
+    const lines = fs.readFileSync(abs, "utf-8").split("\n");
+    const body = lines.join("\n");
+    for (const { re, expected } of COMMAND_DRIFT_PATTERNS) {
+        re.lastIndex = 0;
+        const m = re.exec(body);
+        if (!m)
+            continue;
+        // Locate the match's line for an actionable file:line.
+        const line = body.slice(0, m.index).split("\n").length;
+        if (lines[line - 1]?.includes(ALLOW_MARKER))
+            continue;
+        findings.push({ file: relPath, line, found: m[0].trim().slice(0, 80), expected });
+    }
+    return findings;
+}
+/**
+ * Command-vs-skill drift for every same-name pair.
+ *
+ * Scoped to PAIRED commands only. A standalone command (no matching skill) has
+ * nowhere to delegate its procedure to, so the same prose there is correct —
+ * per skill-authoring-rules.md, "not every command has a matching SKILL.md, and
+ * that is intentional".
+ */
+export function checkCommandDrift(root) {
+    const commands = pairedCommands(root);
+    if (commands.length === 0) {
+        return [{ name: "Command-vs-skill drift", status: "pass", detail: "no same-name command/skill pairs", section: "Gates" }];
+    }
+    const findings = commands.flatMap((rel) => scanCommandForDrift(root, rel));
+    if (findings.length === 0) {
+        return [
+            {
+                name: "No command-vs-skill drift",
+                status: "pass",
+                detail: `${commands.length} paired command(s) are dispatchers: ${commands.map((c) => path.basename(c, ".md")).join(", ")}`,
+                section: "Gates",
+            },
+        ];
+    }
+    return [
+        {
+            name: `Command-vs-skill drift (${findings.length})`,
+            status: "fail",
+            detail: findings
+                .map((f) => `${f.file}:${f.line} found "${f.found}" — expected "${f.expected}"`)
+                .join("\n         "),
+            section: "Gates",
+        },
+    ];
+}
+/**
+ * Run the gate-authority check over a tree of prose.
+ *
+ * `root` is the directory the scan is relative to; `scanDirs` are subtrees
+ * within it. Defaults to the canonical `.claude` tree, and is reused verbatim
+ * against the generated `plugin/` tree to prove canonical↔plugin parity.
+ */
+export function checkGateAuthority(root, opts = {}) {
+    const scanDirs = opts.scanDirs ?? [".claude"];
+    const present = scanDirs.filter((dir) => fs.existsSync(path.join(root, dir)));
+    if (present.length === 0) {
+        return [
+            {
+                name: "Gate-authority scan target",
+                status: opts.missingRootSeverity ?? "fail",
+                detail: `No scan target found under ${root}: ${scanDirs.join(", ")}`,
+                section: "Gates",
+            },
+        ];
+    }
+    const files = present.flatMap((dir) => collectMarkdown(root, dir));
+    const violations = files.flatMap((rel) => scanForGateAuthority(root, rel));
+    if (violations.length === 0) {
+        return [
+            {
+                name: "No automated gate-approval claims",
+                status: "pass",
+                detail: `${files.length} prose files scanned across ${present.join(", ")}`,
+                section: "Gates",
+            },
+        ];
+    }
+    const detail = violations
+        .map((v) => `${v.file}:${v.line} found "${v.found}" — expected "${v.expected}"`)
+        .join("\n         ");
+    return [
+        {
+            name: `Automated gate-approval claims (${violations.length})`,
+            status: "fail",
+            detail,
+            section: "Gates",
+        },
+    ];
+}
+//# sourceMappingURL=check-gate-authority.js.map

package/dist/core/check-gate-authority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-gate-authority.js","sourceRoot":"","sources":["../../src/core/check-gate-authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AA8B7B,8EAA8E;AAC9E,MAAM,YAAY,GAAG,2BAA2B,CAAC;AAEjD;;;;;GAKG;AACH,MAAM,QAAQ,GAAqD;IAClE;QACC,IAAI,EAAE,qBAAqB;QAC3B,0EAA0E;QAC1E,oEAAoE;QACpE,EAAE;QACF,yEAAyE;QACzE,wEAAwE;QACxE,0EAA0E;QAC1E,wEAAwE;QACxE,EAAE,EAAE,oDAAoD;QACxD,QAAQ,EAAE,8DAA8D;KACxE;IACD;QACC,IAAI,EAAE,sBAAsB;QAC5B,EAAE,EAAE,kDAAkD;QACtD,QAAQ,EAAE,8DAA8D;KACxE;IACD;QACC,IAAI,EAAE,6BAA6B;QACnC,EAAE,EAAE,4BAA4B;QAChC,QAAQ,EAAE,yCAAyC;KACnD;IACD;QACC,IAAI,EAAE,mCAAmC;QACzC,EAAE,EAAE,uDAAuD;QAC3D,QAAQ,EAAE,qEAAqE;KAC/E;IACD;QACC,IAAI,EAAE,4BAA4B;QAClC,EAAE,EAAE,sBAAsB;QAC1B,QAAQ,EAAE,0EAA0E;KACpF;IACD;QACC,IAAI,EAAE,qBAAqB;QAC3B,EAAE,EAAE,qDAAqD;QACzD,QAAQ,EAAE,iEAAiE;KAC3E;CACD,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,GAChB,+IAA+I,CAAC;AAEjJ;;;;GAIG;AACH,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAE/B;;;;;;;;;GASG;AACH,SAAS,SAAS,CAAC,IAAY,EAAE,UAAkB,EAAE,SAAiB;IACrE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,mBAAmB,CAAC,EAAE,UAAU,CAAC,CAAC;IACrF,OAAO,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AAChE,CAAC;AAED,iEAAiE;AACjE,SAAS,kBAAkB,CAAC,IAAY;IACvC,OAAO,gDAAgD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpE,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,OAAe;IACjE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACrC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAEnC,MAAM,UAAU,GAA6B,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAExD,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,2EAA2E;QAC3E,wEAAwE;QACxE,4DAA4D;QAC5D,EAAE;QACF,0EAA0E;QAC1E,wEAAwE;QACxE,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;YAAE,OAAO;QACxC,IAAI,GAAG,GAAG,CAAC,IAAI,kBAAkB,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO;QAE1D,0EAA0E;QAC1E,2EAA2E;QAC3E,4EAA4E;QAC5E,0EAA0E;QAC1E,KAAK,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,QAAQ,EAAE,CAAC;YACzC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;gBACnC,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;oBAAE,SAAS;gBAC7C,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAChF,OAAO,CAAC,sDAAsD;YAC/D,CAAC;QACF,CAAC;IACF,CAAC,CAAC,CAAC;IAEH,OAAO,UAAU,CAAC;AACnB,CAAC;AAED,gEAAgE;AAChE,SAAS,eAAe,CAAC,IAAY,EAAE,GAAW,EAAE,MAAgB,EAAE;IACrE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IAEpC,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAClE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACzB,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,SAAS;YAC7E,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QACjC,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACf,CAAC;IACF,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,gFAAgF;AAChF,EAAE;AACF,iFAAiF;AACjF,+EAA+E;AAC/E,+EAA+E;AAC/E,uEAAuE;AACvE,EAAE;AACF,4EAA4E;AAC5E,gFAAgF;AAChF,4EAA4E;AAC5E,8EAA8E;AAC9E,wCAAwC;AACxC,EAAE;AACF,8EAA8E;AAC9E,iFAAiF;AACjF,gDAAgD;AAEhD;;;;;;;;;;;;GAYG;AACH,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;AAExE,sFAAsF;AACtF,SAAS,cAAc,CAAC,IAAY;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;IAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACvD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,CAAC;IAEnE,OAAO,EAAE;SACP,WAAW,CAAC,MAAM,CAAC;SACnB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;SAChC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QAChE,8EAA8E;QAC9E,2EAA2E;QAC3E,8DAA8D;SAC7D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;SACtF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,sBAAsB,GAAqD;IAChF;QACC,IAAI,EAAE,yBAAyB;QAC/B,0EAA0E;QAC1E,2EAA2E;QAC3E,2BAA2B;QAC3B,EAAE;QACF,4EAA4E;QAC5E,2EAA2E;QAC3E,oEAAoE;QACpE,EAAE,EAAE,sBAAsB;QAC1B,QAAQ,EAAE,6DAA6D;KACvE;IACD;QACC,IAAI,EAAE,0BAA0B;QAChC,EAAE,EAAE,gEAAgE;QACpE,QAAQ,EAAE,mEAAmE;KAC7E;IACD;QACC,IAAI,EAAE,qBAAqB;QAC3B,EAAE,EAAE,mFAAmF;QACvF,QAAQ,EAAE,6EAA6E;KACvF;IACD;QACC,IAAI,EAAE,iCAAiC;QACvC,EAAE,EAAE,yDAAyD;QAC7D,QAAQ,EAAE,mEAAmE;KAC7E;CACD,CAAC;AASF,mDAAmD;AACnD,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,OAAe;IAChE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACrC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAEnC,MAAM,QAAQ,GAA0B,EAAE,CAAC;IAC3C,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAE9B,KAAK,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,sBAAsB,EAAE,CAAC;QACvD,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC;QACjB,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,uDAAuD;QACvD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;QACvD,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,YAAY,CAAC;YAAE,SAAS;QACtD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC7C,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,kCAAkC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3H,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IAE3E,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO;YACN;gBACC,IAAI,EAAE,2BAA2B;gBACjC,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,uCAAuC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAC1H,OAAO,EAAE,OAAO;aAChB;SACD,CAAC;IACH,CAAC;IAED,OAAO;QACN;YACC,IAAI,EAAE,2BAA2B,QAAQ,CAAC,MAAM,GAAG;YACnD,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,QAAQ;iBACd,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,KAAK,iBAAiB,CAAC,CAAC,QAAQ,GAAG,CAAC;iBAC/E,IAAI,CAAC,aAAa,CAAC;YACrB,OAAO,EAAE,OAAO;SAChB;KACD,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CACjC,IAAY,EACZ,OAA8D,EAAE;IAEhE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAE9E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;YACN;gBACC,IAAI,EAAE,4BAA4B;gBAClC,MAAM,EAAE,IAAI,CAAC,mBAAmB,IAAI,MAAM;gBAC1C,MAAM,EAAE,8BAA8B,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACpE,OAAO,EAAE,OAAO;aAChB;SACD,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IACnE,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IAE3E,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO;YACN;gBACC,IAAI,EAAE,mCAAmC;gBACzC,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,+BAA+B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAC1E,OAAO,EAAE,OAAO;aAChB;SACD,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,UAAU;SACvB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,KAAK,iBAAiB,CAAC,CAAC,QAAQ,GAAG,CAAC;SAC/E,IAAI,CAAC,aAAa,CAAC,CAAC;IAEtB,OAAO;QACN;YACC,IAAI,EAAE,mCAAmC,UAAU,CAAC,MAAM,GAAG;YAC7D,MAAM,EAAE,MAAM;YACd,MAAM;YACN,OAAO,EAAE,OAAO;SAChB;KACD,CAAC;AACH,CAAC"}

package/dist/core/check-plugin-parity.d.ts

@@ -0,0 +1,15 @@
+import type { CheckResult } from "../commands/validate.js";
+export interface ParityDivergence {
+    file: string;
+    kind: "missing-in-plugin" | "stale-in-plugin" | "extra-in-plugin";
+}
+/**
+ * Regenerate the payload into a temp dir and diff it against `plugin/`.
+ *
+ * Returns every divergence. The caller decides severity — `validate` fails, so
+ * that a stale plugin cannot reach a release.
+ */
+export declare function diffPluginParity(projectRoot: string): ParityDivergence[];
+/** Parity as a validate CheckResult. */
+export declare function checkPluginParity(projectRoot: string): CheckResult[];
+//# sourceMappingURL=check-plugin-parity.d.ts.map

package/dist/core/check-plugin-parity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-plugin-parity.d.ts","sourceRoot":"","sources":["../../src/core/check-plugin-parity.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAqC3D,MAAM,WAAW,gBAAgB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,mBAAmB,GAAG,iBAAiB,GAAG,iBAAiB,CAAC;CAClE;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAuCxE;AAED,wCAAwC;AACxC,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,WAAW,EAAE,CA6CpE"}

package/dist/core/check-plugin-parity.js

@@ -0,0 +1,130 @@
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { generatePluginPayload } from "./plugin-payload.js";
+// The SAME identity `build-plugin` uses. Imported, never re-declared: a second
+// copy of the version/description would make the manifests differ and this check
+// would fail on its own drift — which is the defect it exists to catch.
+import { AUTHOR, DESCRIPTION, PAYLOAD_DIRNAME } from "../commands/build-plugin.js";
+// Canonical↔plugin parity.
+//
+// `plugin/` is GENERATED from `.claude/` by generatePluginPayload. Two ways that
+// silently breaks:
+//   1. someone edits `.claude/` and forgets to regenerate — the plugin ships the
+//      OLD behavior while the repo shows the new prose, and every reviewer reads
+//      the version that isn't shipping;
+//   2. someone hand-edits `plugin/` — the fix survives exactly until the next
+//      regenerate, then vanishes with no diff to explain it.
+//
+// Both produce a repo that looks correct. This check regenerates into a scratch
+// dir and diffs, so divergence is a build failure instead of a discovery.
+//
+// It is NOT covered elsewhere: `validate --plugin` checks the manifests, and
+// check-workflow-drift.ts is a token-level prose check. Neither compares trees.
+/** Files whose bytes legitimately differ per-run and must not fail parity. */
+const VOLATILE = new Set(["hooks.json"]);
+/** Every file under `dir`, relative to it. */
+function collectFiles(dir, base = dir, acc = []) {
+    if (!fs.existsSync(dir))
+        return acc;
+    for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
+        const abs = path.join(dir, entry.name);
+        if (entry.isDirectory())
+            collectFiles(abs, base, acc);
+        else if (entry.isFile())
+            acc.push(path.relative(base, abs));
+    }
+    return acc;
+}
+/**
+ * Regenerate the payload into a temp dir and diff it against `plugin/`.
+ *
+ * Returns every divergence. The caller decides severity — `validate` fails, so
+ * that a stale plugin cannot reach a release.
+ */
+export function diffPluginParity(projectRoot) {
+    const sourceDir = path.join(projectRoot, ".claude");
+    const committed = path.join(projectRoot, PAYLOAD_DIRNAME);
+    if (!fs.existsSync(sourceDir) || !fs.existsSync(committed))
+        return [];
+    const pkgPath = path.join(projectRoot, "package.json");
+    const version = fs.existsSync(pkgPath)
+        ? (JSON.parse(fs.readFileSync(pkgPath, "utf-8")).version ?? "0.0.0")
+        : "0.0.0";
+    const scratch = fs.mkdtempSync(path.join(os.tmpdir(), "mewkit-parity-"));
+    try {
+        generatePluginPayload({ sourceDir, outDir: scratch, version, description: DESCRIPTION, author: AUTHOR });
+        const expected = new Set(collectFiles(scratch));
+        const actual = new Set(collectFiles(committed));
+        const out = [];
+        for (const rel of expected) {
+            if (VOLATILE.has(path.basename(rel)))
+                continue;
+            if (!actual.has(rel)) {
+                out.push({ file: rel, kind: "missing-in-plugin" });
+                continue;
+            }
+            const a = fs.readFileSync(path.join(scratch, rel));
+            const b = fs.readFileSync(path.join(committed, rel));
+            if (!a.equals(b))
+                out.push({ file: rel, kind: "stale-in-plugin" });
+        }
+        // A file in plugin/ that regeneration does not produce is orphaned — it
+        // survives only until the next build wipes it.
+        for (const rel of actual) {
+            if (VOLATILE.has(path.basename(rel)))
+                continue;
+            if (!expected.has(rel))
+                out.push({ file: rel, kind: "extra-in-plugin" });
+        }
+        return out;
+    }
+    finally {
+        fs.rmSync(scratch, { recursive: true, force: true });
+    }
+}
+/** Parity as a validate CheckResult. */
+export function checkPluginParity(projectRoot) {
+    if (!fs.existsSync(path.join(projectRoot, "plugin"))) {
+        return [
+            {
+                name: "Plugin parity",
+                status: "warn",
+                detail: "no plugin/ tree — run `mewkit build-plugin`",
+                section: "Plugin",
+            },
+        ];
+    }
+    let divergences;
+    try {
+        divergences = diffPluginParity(projectRoot);
+    }
+    catch (error) {
+        const msg = error instanceof Error ? error.message : String(error);
+        return [{ name: "Plugin parity", status: "fail", detail: `regeneration failed: ${msg}`, section: "Plugin" }];
+    }
+    if (divergences.length === 0) {
+        return [
+            {
+                name: "Plugin matches canonical .claude",
+                status: "pass",
+                detail: "regenerated payload is byte-identical to the committed plugin/",
+                section: "Plugin",
+            },
+        ];
+    }
+    const detail = divergences
+        .slice(0, 12)
+        .map((d) => `plugin/${d.file} — ${d.kind}`)
+        .join("\n         ");
+    const more = divergences.length > 12 ? `\n         …and ${divergences.length - 12} more` : "";
+    return [
+        {
+            name: `Plugin diverges from canonical (${divergences.length})`,
+            status: "fail",
+            detail: `${detail}${more}\n         Run \`mewkit build-plugin\`. Never hand-edit plugin/ — the next build discards it.`,
+            section: "Plugin",
+        },
+    ];
+}
+//# sourceMappingURL=check-plugin-parity.js.map

package/dist/core/check-plugin-parity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-plugin-parity.js","sourceRoot":"","sources":["../../src/core/check-plugin-parity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,+EAA+E;AAC/E,iFAAiF;AACjF,wEAAwE;AACxE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAEnF,2BAA2B;AAC3B,EAAE;AACF,iFAAiF;AACjF,mBAAmB;AACnB,iFAAiF;AACjF,iFAAiF;AACjF,wCAAwC;AACxC,8EAA8E;AAC9E,6DAA6D;AAC7D,EAAE;AACF,gFAAgF;AAChF,0EAA0E;AAC1E,EAAE;AACF,6EAA6E;AAC7E,gFAAgF;AAEhF,8EAA8E;AAC9E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;AAEzC,8CAA8C;AAC9C,SAAS,YAAY,CAAC,GAAW,EAAE,IAAI,GAAG,GAAG,EAAE,MAAgB,EAAE;IAChE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IACpC,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAClE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,KAAK,CAAC,WAAW,EAAE;YAAE,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;aACjD,IAAI,KAAK,CAAC,MAAM,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAOD;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,WAAmB;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;IAC1D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,CAAC;IAEtE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;QACrC,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAA0B,CAAC,OAAO,IAAI,OAAO,CAAC;QAC9F,CAAC,CAAC,OAAO,CAAC;IAEX,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACzE,IAAI,CAAC;QACJ,qBAAqB,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAEzG,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;QAChD,MAAM,GAAG,GAAuB,EAAE,CAAC;QAEnC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC5B,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAAE,SAAS;YAC/C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtB,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBACnD,SAAS;YACV,CAAC;YACD,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;YACnD,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;YACrD,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,wEAAwE;QACxE,+CAA+C;QAC/C,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;YAC1B,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAAE,SAAS;YAC/C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC1E,CAAC;QAED,OAAO,GAAG,CAAC;IACZ,CAAC;YAAS,CAAC;QACV,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;AACF,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,iBAAiB,CAAC,WAAmB;IACpD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;QACtD,OAAO;YACN;gBACC,IAAI,EAAE,eAAe;gBACrB,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,6CAA6C;gBACrD,OAAO,EAAE,QAAQ;aACjB;SACD,CAAC;IACH,CAAC;IAED,IAAI,WAA+B,CAAC;IACpC,IAAI,CAAC;QACJ,WAAW,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnE,OAAO,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,wBAAwB,GAAG,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC9G,CAAC;IAED,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO;YACN;gBACC,IAAI,EAAE,kCAAkC;gBACxC,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,gEAAgE;gBACxE,OAAO,EAAE,QAAQ;aACjB;SACD,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,WAAW;SACxB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;SACZ,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;SAC1C,IAAI,CAAC,aAAa,CAAC,CAAC;IACtB,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,mBAAmB,WAAW,CAAC,MAAM,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAE9F,OAAO;QACN;YACC,IAAI,EAAE,mCAAmC,WAAW,CAAC,MAAM,GAAG;YAC9D,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,+FAA+F;YACvH,OAAO,EAAE,QAAQ;SACjB;KACD,CAAC;AACH,CAAC"}

package/dist/core/check-pseudo-capabilities.d.ts

@@ -0,0 +1,15 @@
+export interface PseudoCapabilityFinding {
+    file: string;
+    line: number;
+    found: string;
+}
+/** Scan one file's prose for unresolved pseudo-capability aliases. */
+export declare function scanForPseudoCapabilities(root: string, relPath: string): PseudoCapabilityFinding[];
+/**
+ * Scan a projected tree. Returns every finding; the caller decides severity —
+ * `build-plugin` throws, `validate` reports.
+ */
+export declare function findPseudoCapabilities(root: string, scanDirs?: string[]): PseudoCapabilityFinding[];
+/** Render findings as a build-failure message with file:line locations. */
+export declare function formatPseudoCapabilityError(findings: PseudoCapabilityFinding[]): string;
+//# sourceMappingURL=check-pseudo-capabilities.d.ts.map

package/dist/core/check-pseudo-capabilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-pseudo-capabilities.d.ts","sourceRoot":"","sources":["../../src/core/check-pseudo-capabilities.ts"],"names":[],"mappings":"AAwBA,MAAM,WAAW,uBAAuB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACd;AAaD,sEAAsE;AACtE,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,uBAAuB,EAAE,CAiBlG;AAkBD;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAM,EAAU,GAAG,uBAAuB,EAAE,CAE1G;AAED,2EAA2E;AAC3E,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,uBAAuB,EAAE,GAAG,MAAM,CAUvF"}

package/dist/core/check-pseudo-capabilities.js

@@ -0,0 +1,89 @@
+// Projection-time rejection of UNRESOLVED PSEUDO-CAPABILITY ALIASES.
+//
+// The defect class: a skill's prose names a logical operation in a template form
+// that was never substituted — literal text like "use `manage_plan capability`"
+// or "delegate_agent capability" — instead of naming the real host primitive.
+//
+// Why it must fail the BUILD rather than warn: the string reads as if it means
+// something. An agent following that prose looks for a "manage_plan capability",
+// finds nothing, and improvises — which is the failure the operation table exists
+// to prevent. It is a broken instruction that is indistinguishable from a working
+// one until an agent acts on it, so the only safe time to catch it is before the
+// payload ships.
+//
+// Scope is deliberately narrow: the four logical operation names, immediately
+// followed by the word "capability". That phrase has no legitimate use — the
+// operations are adapter-internal (see provider-operations.ts) and are never a
+// "capability" in the manifest sense, so any occurrence is an unsubstituted
+// placeholder. A broader "looks like a dangling reference" check was evaluated and
+// rejected: every candidate it flagged in this tree was legitimate prose, and a
+// build gate that only ever cries wolf gets switched off.
+import fs from "node:fs";
+import path from "node:path";
+import { LOGICAL_OPERATIONS } from "./provider-operations.js";
+/** Suppression marker for prose that must quote the anti-pattern (e.g. this rule's own docs). */
+const ALLOW_MARKER = "lint-allow-pseudo-capability";
+/**
+ * `<operation> capability` — an unsubstituted placeholder. Built from the operation
+ * list so the two cannot drift: a new operation is covered the day it is added.
+ */
+function pseudoCapabilityRe() {
+    return new RegExp(`\\b(${LOGICAL_OPERATIONS.join("|")})\\s+capability\\b`, "gi");
+}
+/** Scan one file's prose for unresolved pseudo-capability aliases. */
+export function scanForPseudoCapabilities(root, relPath) {
+    const abs = path.join(root, relPath);
+    if (!fs.existsSync(abs))
+        return [];
+    const findings = [];
+    const re = pseudoCapabilityRe();
+    fs.readFileSync(abs, "utf-8")
+        .split("\n")
+        .forEach((text, idx) => {
+        if (text.includes(ALLOW_MARKER))
+            return;
+        re.lastIndex = 0;
+        const m = re.exec(text);
+        if (m)
+            findings.push({ file: relPath, line: idx + 1, found: m[0] });
+    });
+    return findings;
+}
+/** Every prose file under `dir`, relative to `root`. */
+function collectProse(root, dir, acc = []) {
+    const abs = path.join(root, dir);
+    if (!fs.existsSync(abs))
+        return acc;
+    for (const entry of fs.readdirSync(abs, { withFileTypes: true })) {
+        const rel = path.join(dir, entry.name);
+        if (entry.isDirectory()) {
+            if (entry.name === "node_modules" || entry.name.startsWith(".git"))
+                continue;
+            collectProse(root, rel, acc);
+        }
+        else if (entry.isFile() && entry.name.endsWith(".md")) {
+            acc.push(rel);
+        }
+    }
+    return acc;
+}
+/**
+ * Scan a projected tree. Returns every finding; the caller decides severity —
+ * `build-plugin` throws, `validate` reports.
+ */
+export function findPseudoCapabilities(root, scanDirs = ["."]) {
+    return scanDirs.flatMap((dir) => collectProse(root, dir)).flatMap((rel) => scanForPseudoCapabilities(root, rel));
+}
+/** Render findings as a build-failure message with file:line locations. */
+export function formatPseudoCapabilityError(findings) {
+    const lines = findings.map((f) => `  ${f.file}:${f.line}  "${f.found}"`);
+    return [
+        `Unresolved pseudo-capability alias in ${findings.length} place(s):`,
+        ...lines,
+        "",
+        "These are unsubstituted placeholders, not real capabilities. An agent that reads",
+        "one will look for something that does not exist and improvise. Name the actual",
+        "host primitive instead (see packages/mewkit/src/core/provider-operations.ts).",
+    ].join("\n");
+}
+//# sourceMappingURL=check-pseudo-capabilities.js.map

package/dist/core/check-pseudo-capabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-pseudo-capabilities.js","sourceRoot":"","sources":["../../src/core/check-pseudo-capabilities.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,EAAE;AACF,iFAAiF;AACjF,gFAAgF;AAChF,8EAA8E;AAC9E,EAAE;AACF,+EAA+E;AAC/E,iFAAiF;AACjF,kFAAkF;AAClF,kFAAkF;AAClF,iFAAiF;AACjF,iBAAiB;AACjB,EAAE;AACF,8EAA8E;AAC9E,6EAA6E;AAC7E,+EAA+E;AAC/E,4EAA4E;AAC5E,mFAAmF;AACnF,gFAAgF;AAChF,0DAA0D;AAC1D,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAQ9D,iGAAiG;AACjG,MAAM,YAAY,GAAG,8BAA8B,CAAC;AAEpD;;;GAGG;AACH,SAAS,kBAAkB;IAC1B,OAAO,IAAI,MAAM,CAAC,OAAO,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC;AAClF,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,yBAAyB,CAAC,IAAY,EAAE,OAAe;IACtE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACrC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAEnC,MAAM,QAAQ,GAA8B,EAAE,CAAC;IAC/C,MAAM,EAAE,GAAG,kBAAkB,EAAE,CAAC;IAEhC,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC;SAC3B,KAAK,CAAC,IAAI,CAAC;SACX,OAAO,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACtB,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;YAAE,OAAO;QACxC,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC;QACjB,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEJ,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,wDAAwD;AACxD,SAAS,YAAY,CAAC,IAAY,EAAE,GAAW,EAAE,MAAgB,EAAE;IAClE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IACpC,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAClE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACzB,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,SAAS;YAC7E,YAAY,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAC9B,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACf,CAAC;IACF,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY,EAAE,WAAqB,CAAC,GAAG,CAAC;IAC9E,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,yBAAyB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;AAClH,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,2BAA2B,CAAC,QAAmC;IAC9E,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;IACzE,OAAO;QACN,yCAAyC,QAAQ,CAAC,MAAM,YAAY;QACpE,GAAG,KAAK;QACR,EAAE;QACF,kFAAkF;QAClF,gFAAgF;QAChF,+EAA+E;KAC/E,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACd,CAAC"}

package/dist/core/plan-parser.d.ts

@@ -0,0 +1,40 @@
+/** Required sections in a phase file (documentation-management.md → Phase Files). */
+export declare const REQUIRED_PHASE_SECTIONS: readonly ["Overview", "Requirements", "Implementation Steps", "Success Criteria", "Risk Assessment"];
+export interface PhaseChecklist {
+    total: number;
+    checked: number;
+}
+export interface PhaseFile {
+    file: string;
+    title: string | null;
+    status: string | null;
+    phase: string | null;
+    dependencies: string[];
+    sections: string[];
+    missingSections: string[];
+    checklist: PhaseChecklist;
+}
+export interface PlanSummary {
+    dir: string;
+    title: string | null;
+    status: string | null;
+    planMdPresent: boolean;
+    planMdLines: number;
+    phases: PhaseFile[];
+    /** Aggregate across every phase file. */
+    checklist: PhaseChecklist;
+    issues: string[];
+}
+/** Parse one phase file. Throws only if the file is unreadable. */
+export declare function parsePhaseFile(abs: string): PhaseFile;
+/** Phase files in a plan dir, sorted by filename (which encodes phase order). */
+export declare function listPhaseFiles(planDir: string): string[];
+/**
+ * Parse a plan directory into a summary.
+ *
+ * `issues` names what a reader should know before trusting the numbers — a
+ * missing plan.md, an over-length overview, a phase with no checklist. They are
+ * observations, not verdicts: this is an inspector, and Gate 1 belongs to the human.
+ */
+export declare function parsePlan(planDir: string): PlanSummary;
+//# sourceMappingURL=plan-parser.d.ts.map

package/dist/core/plan-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan-parser.d.ts","sourceRoot":"","sources":["../../src/core/plan-parser.ts"],"names":[],"mappings":"AAkBA,qFAAqF;AACrF,eAAO,MAAM,uBAAuB,sGAM1B,CAAC;AAEX,MAAM,WAAW,cAAc;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,SAAS;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,SAAS,EAAE,cAAc,CAAC;CAC1B;AAED,MAAM,WAAW,WAAW;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,aAAa,EAAE,OAAO,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,yCAAyC;IACzC,SAAS,EAAE,cAAc,CAAC;IAC1B,MAAM,EAAE,MAAM,EAAE,CAAC;CACjB;AAkCD,mEAAmE;AACnE,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAqBrD;AAED,iFAAiF;AACjF,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAMxD;AAED;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,WAAW,CAqCtD"}