musubix3 0.1.13 → 0.1.15

package/.github/plugin/marketplace.json

@@ -3,13 +3,13 @@
   "owner": { "name": "nahisaho" },
   "metadata": {
     "description": "GitHub Copilot CLI specification-driven development skills",
-    "version": "0.1.13"
+    "version": "0.1.15"
   },
   "plugins": [
     {
       "name": "musubix3",
       "source": ".",
-      "version": "0.1.13",
+      "version": "0.1.15",
       "description": "Evidence-driven SDD without duplicating native Copilot capabilities."
     }
   ]

package/.github/skills/sdd-change/SKILL.md

@@ -9,6 +9,7 @@ description: "Use as the MANDATORY first Skill for requests to develop, build, c
  */
 Mandatory entrypoint: every new natural-language development request is a new change, even in an existing Copilot session; never reuse prior requirements, approvals, TDD, or change evidence unless the user explicitly names the existing change ID and asks to continue it. never start implementation before validating requirements/design; skip only for verified approved artifacts of that explicitly continued change.
 Never infer approval; show `approval prepare <stage>` and record only its reviewed hash with `approval record <stage> --approver <name> --artifact-sha256 <hash> --confirm`.
+Whenever an AI deliverable is documentation (requirements, design, ADRs, the CHANGE document, or release/quality evidence), run Copilot's native `rubber-duck` review agent on it before that phase's human approval, fixing every issue and re-reviewing until none remain.
 Follow the user's input language. Use native Copilot planning, editing, research, review, security review and subagents.
 Record exactly one final invocation outcome with `npx musubix3 workflow-record sdd-change complete --status <status>`; `change-record` separately proves phases.
 Run `workflow-sanitize <copilot.jsonl> <safe.jsonl>` before review, then
@@ -38,11 +39,10 @@ Persisted monotonic order, not wall-clock time, proves these phase boundaries.
 2. For a bug where implementation violates an existing requirement, keep that
    requirement and record that no specification change is needed. Never rewrite
    a requirement merely to make incorrect behavior appear compliant.
-3. Update design responsibilities/interfaces/constraints/links and ADRs for real decisions.
-4. Run requirements, constitution and design validation. Stop on invalid
-   artifacts instead of continuing with unapproved assumptions.
-5. Stop before design for explicit current `requirements` approval; stop before
-   Red/implementation for explicit current `design` approval. Changes re-open approval.
+3. Run requirements and constitution validation; stop on invalid artifacts
+   instead of continuing with unapproved assumptions.
+4. Run a `rubber-duck` review (Copilot's native review agent) of `requirements.md`, fixing every issue and re-reviewing until none remain, then stop for explicit current `requirements` approval before design. An edit to `requirements.md` re-opens approval and requires re-review.
+5. Update design responsibilities/interfaces/constraints/links and ADRs, run design validation, then run the same rubber-duck review/fix loop on `design.md`/ADRs before stopping for explicit current `design` approval before Red/implementation. An edit re-opens approval and requires re-review.
 ## 3. Implement and prove coverage / 実装と網羅性
 1. For observable behavior changes and defect fixes, write the smallest meaningful
    test first. Include its `TEST-*` ID in the test name/output and link it to the
@@ -70,8 +70,6 @@ Documentation/prototypes may omit TDD only when policy allows; record the reason
    A required `formal` check enforces modeled fraction and configured solver.
 3. Run `gate --changed --json` and `status --json`. Repair failures, dangling
    links and stale evidence; never weaken requirements or policy to obtain green.
-4. Treat the first otherwise-passing gate as the release candidate. Before any
-   release operation, prepare/show its exact hash, ask one human approve/reject
-   question and wait; record only that hash, then rerun gate/status.
+4. Treat the first otherwise-passing gate as the release candidate. Run a `rubber-duck` review of the release/quality evidence summary and the CHANGE document; fix every reported issue and re-review until zero issues remain. Before any release operation, prepare/show its exact hash, ask one human approve/reject question and wait; record only that hash, then rerun gate/status.
 5. Complete only when required checks pass and `status.gate.ready` is true;
    otherwise report blockers. One-phase work must state downstream work.

package/.github/skills/sdd-design/SKILL.md

@@ -25,8 +25,12 @@ completed` exactly once.
 5. Run `npx musubix3 trace build` then `npx musubix3 trace check`.
    Do not hand-edit `trace.json`. Ask native review to inspect coupling and
    coverage; use `sdd-formal-codegraph` for compiler-based impact checks.
-6. Before implementation or Red, run `approval prepare design`, show its exact
+6. Before requesting human approval, run Copilot's native `rubber-duck`
+   review agent on `design.md` and any related ADRs. Fix every reported
+   issue, then re-run the review. Repeat fix-then-review until the review
+   reports zero remaining issues; only then proceed to step 7.
+7. Before implementation or Red, run `approval prepare design`, show its exact
    artifacts/hash, ask one explicit approve/reject question, then wait. On approval
    only, record that hash with `approval record design --approver <name>
    --artifact-sha256 <hash> --confirm`; rejection or changes require renewed review.
-7. Hand off responsibilities, interfaces, constraints and IDs to implementation.
+8. Hand off responsibilities, interfaces, constraints and IDs to implementation.

package/.github/skills/sdd-quality/SKILL.md

@@ -71,8 +71,5 @@ completed` exactly once.
    check all configured claims; offline strict verification fails closed.
    Ensure the baseline protects CI-required mode, strict OIDC and key binding.
    Never store a private key or overstate OIDC as proof of arbitrary runner work.
-7. After required non-approval checks pass, run `approval prepare release`, show
-   its exact hash and residual risks, ask one approve/reject question, then wait.
-   On approval only record that hash with `approval record release --approver
-   <name> --artifact-sha256 <hash> --confirm`; rejection stops. Rerun gate/status;
-   stale approval blocks commit/push/publish/deploy; no resident watcher or REPL.
+7. Before requesting human approval, run Copilot's native `rubber-duck` review agent on the release evidence summary and the CHANGE document; fix every reported issue, then re-run the review, repeating until it reports zero remaining issues.
+8. After required non-approval checks pass, run `approval prepare release`, show its exact hash and residual risks, ask one approve/reject question, then wait. On approval only record that hash with `approval record release --approver <name> --artifact-sha256 <hash> --confirm`; rejection stops. Rerun gate/status; stale approval blocks commit/push/publish/deploy; no resident watcher or REPL.

package/.github/skills/sdd-requirements/SKILL.md

@@ -50,10 +50,15 @@ After the work, run `npx musubix3 workflow-record sdd-requirements complete
 5. Validate with `npx musubix3 requirements validate <file> --json` and
    `npx musubix3 constitution validate --json`. Rules use `PRINC-001`, `RULE-001`,
    a supported `Metric:` and numeric `Limit:`. Validation is not execution evidence.
-6. Validation is not human approval. Before design, run `approval prepare
+6. Before requesting human approval, run Copilot's native `rubber-duck`
+   review agent on `requirements.md`. Fix every reported issue, then re-run
+   the review. Repeat fix-then-review until the review reports zero
+   remaining issues; only then proceed to step 7. Do not request human
+   approval while rubber-duck findings remain open.
+7. Validation is not human approval. Before design, run `approval prepare
    requirements`, show its exact artifacts/hash, ask one explicit approve/reject
    question, then wait. On approval only, record that hash with `approval record
    requirements --approver <name> --artifact-sha256 <hash> --confirm`; rejection
    or any intervening artifact change stops and requires renewed review.
-7. Hand off confirmed IDs and unresolved assumptions to `sdd-design`; use native
+8. Hand off confirmed IDs and unresolved assumptions to `sdd-design`; use native
    review for semantic completeness, not merely syntactic conformance.

package/CHANGELOG.md

@@ -1,6 +1,51 @@
 # Changelog
 
-## Unreleased
+## 0.1.15 - 2026-09-11
+
+Documentation/workflow update: AI-generated documentation deliverables now go
+through a mandatory rubber-duck review/fix loop before human approval.
+
+- `sdd-requirements`, `sdd-design`, `sdd-quality`, and `sdd-change` now
+  require a `rubber-duck` review of any AI-generated documentation artifact
+  (requirements.md, design.md/ADRs, the CHANGE document, and release/quality
+  evidence summaries) before the corresponding human approval step
+  (`requirements`, `design`, or `release`). Every reported issue must be
+  fixed and the artifact re-reviewed; only once the review reports zero
+  remaining issues may human review/approval be requested.
+- Documented the same review/fix loop in the Workflow section of
+  README.md/README-ja.md.
+- No CLI, schema, or validation behavior changed. Apart from the package
+  version metadata bump (`package.json`/`package-lock.json`), this release
+  only updates the bundled `.github/skills/sdd-*` guidance and documentation.
+
+## 0.1.14 - 2026-09-11
+
+Fix for one issue (#17) found while running musubix3@0.1.13 against a large
+real-world project (500k+ files), plus a new `upgrade` command.
+
+- `EMFILE: too many open files` crash on large projects during `init` and
+  `knowledge build` (#17): `files.ts#snapshot()`, all per-language loaders in
+  `graph.ts`, and `knowledge.ts#buildKnowledge()`'s Markdown scan now read
+  files through a bounded-concurrency helper (limit 256) instead of issuing
+  one `Promise.all(paths.map(readFile))` per project. Verified with a
+  synthetic 1500-file project under `ulimit -n 300`: the old code crashed
+  with the exact reported error; the fixed code succeeds.
+- Added a new `musubix3 upgrade [--dry-run]` command that refreshes only
+  the bundled `.github/skills/sdd-*` files to match the installed package
+  version. Unlike `init --force`, it never touches `.musubix/config.json`,
+  `policy-baseline.json`, `constitution.md`, ADRs, feature artifacts,
+  evidence, or `.gitignore`. Documented as the recommended upgrade path in
+  README.md/README-ja.md, alongside the existing `copilot plugin update`/
+  `copilot plugin marketplace update` routes for the native plugin and
+  marketplace install methods.
+
+Known open debt shipped with this release (unchanged since v0.1.9, see
+closed Issue #1):
+- `TDD_TEST_STALE` on `TEST-CLI-WORKFLOW-UX-001..005` (cosmetic fingerprint
+  drift; underlying tests still pass and are not stale in behavior).
+- `CHANGE-0005`/`CHANGE-0006` change-record chronology gap.
+- Stale `release` approval stage (expected until the next explicit release
+  approval is recorded).
 
 ## 0.1.13 - 2026-09-11
 

package/README-ja.md

@@ -1,6 +1,6 @@
 # musubix3
 
-**最新リリース v0.1.13 · GitHub Copilot CLI 専用 · Node.js ≥20 · TypeScript · MIT**
+**最新リリース v0.1.14 · GitHub Copilot CLI 専用 · Node.js ≥20 · TypeScript · MIT**
 
 [English](README.md)
 
@@ -51,6 +51,26 @@ repositoryへ残します。
 
 ## クイックスタート
 
+Skills をプロジェクトへ読み込む方法は2種類あり、プロジェクトごとに
+どちらか1つだけを選んでください（両方は行わないでください）。
+
+- **`npm install`（本節の内容、推奨）**: `musubix3` をプロジェクトの dev
+  dependency として追加し、`npx musubix3 init` で Skills を
+  `.github/skills/` へコピーし、雛形の `.musubix/` 成果物を作成します。
+  バージョンと更新はプロジェクトの `package.json`/lockfile で管理します
+  （`npm install ...@latest` + `npx musubix3 upgrade`。
+  [アップグレード](#アップグレード)参照）。Skills と雛形SDDファイルが
+  リポジトリ自体にコミットされるため、各コントリビューターやCIが個別に
+  プラグインをインストールしなくても同一の再現可能な環境になる点で推奨です。
+- **`copilot plugin install`**（ネイティブプラグイン/マーケットプレイス
+  経由）: Copilot CLI 自体のプラグイン管理機能へ musubix3 を直接登録します。
+  プロジェクトへ npm dependency は追加されず、`.github/skills/` への
+  ファイルコピーも行われません。更新は `copilot plugin update musubix3`
+  （またはマーケットプレイス版）で行います。具体的なコマンドは
+  [配布・インストール](#配布インストール)を参照してください。
+
+以降はnpmインストール経由の手順です。
+
 再現可能なproject-local環境として、exact versionを導入します。
 
 ```sh
@@ -94,26 +114,86 @@ Copilot の内部設定、MCP、LSP、hooks、既存のプロジェクト指示
 **雛形はリリース可能な状態ではありません。** 実際の要求に置き換え、実装とテストを
 行い、検証コマンドを設定してから品質ゲートを実行してください。
 
+## アップグレード
+
+`upgrade` は 0.1.14 以降で利用可能です（0.1.13 以前には
+存在しません。`npm view musubix3 versions` で確認してください）。
+
+npm でインストールした場合（`init`／リポジトリローカル Skills）:
+
+```sh
+npm install --save-dev --save-exact musubix3@latest
+npx --no-install musubix3 upgrade --dry-run
+npx --no-install musubix3 upgrade
+```
+
+`upgrade` は、インストール済みパッケージの内容と異なる同梱の
+`.github/skills/sdd-*` ファイルだけを更新します。`.musubix/config.json`、
+`.musubix/policy-baseline.json`、`.musubix/constitution.md`、ADR、各機能の
+成果物、エビデンス、`.gitignore` は作成・置換・削除しません。これらは
+自分でカスタマイズしたまま維持されます。冪等なコマンドで、インストール済み
+パッケージのSkillファイルと比較するため、新しい `musubix3` を導入していない
+状態で再実行するとすべてのSkillファイルが `unchanged` と報告されます。
+`init` と同様、まず `--dry-run` で確認してください。
+
+より広範囲に同梱・管理対象パスを置換したい場合は引き続き `init --force`
+も利用できますが（`.musubix/config.json`、`constitution.md`、雛形機能の
+`requirements.md`/`design.md` を含む）、これらのファイルをカスタマイズ済みの
+場合はその内容を上書きしてしまうため、通常のバージョンアップでは
+`upgrade` の使用を推奨します。
+
+ネイティブプラグイン経由の場合:
+
+```sh
+copilot plugin update musubix3
+```
+
+ネイティブマーケットプレイス経由の場合:
+
+```sh
+copilot plugin marketplace update musubix3-marketplace
+copilot plugin update musubix3
+```
+
+これらは Copilot 自体のプラグイン管理機能に委譲され、`plugin.json` や
+マーケットプレイスカタログを再取得します。`.musubix/` には一切触れません
+（`.musubix/` の成果物を管理するのは npm インストール経由の `upgrade` のみです）。
+npm インストール経由の場合は `upgrade` の使用を推奨します。
+
 ## 配布・インストール
 
 同名 Skill の重複を避け、以下の読み込み方法から1つ選んでください。
 
 ### ネイティブプラグイン
 
+どちらか一方だけを実行してください（両方は不要です）:
+
+```sh
+copilot plugin install ./musubix3            # ローカルクローンから（その親ディレクトリで実行）
+```
+
 ```sh
-copilot plugin install ./musubix3
-copilot plugin install nahisaho/musubix3
+copilot plugin install nahisaho/musubix3     # 公開GitHubリポジトリから（ローカルクローン不要）
 ```
 
 リポジトリ直下の `plugin.json` が唯一のプラグイン定義元であり、
 `.github/skills/` を参照します。Git からのプラグイン導入だけでは npm エンジンの
 依存解決・ビルドは行われません。CLI は別途ビルド、または npm で導入してください。
 
-`npx musubix3 plugin-install` は `copilot plugin install <package-root>` を実行する
-だけで、Copilot 内部を編集しません。永続的なローカルパスには
-`npm install --save-dev --save-exact musubix3@latest` と
-`npx --no-install musubix3 plugin-install` を推奨します。
-一時的な npx キャッシュのパスに依存しないでください。
+同じ `copilot plugin install` を実行する第三の方法として、一時的な npx
+キャッシュではなく永続的なローカルパスを使いたい場合は、上記2つのコマンドの
+**代わりに**（両方ではなく）次を実行します:
+
+```sh
+npm install --save-dev --save-exact musubix3@latest
+npx --no-install musubix3 plugin-install
+```
+
+`plugin-install` は `copilot plugin install <package-root>` を実行するだけで
+Copilot 内部を編集せず、[クイックスタート](#クイックスタート)のnpmインストール経由の
+Skillコピールートとは無関係です（`init` は実行されず、`.github/skills/` へ
+ファイルはコピーされません）。同一プロジェクトで `npx musubix3 init` と
+一緒に実行しないでください。
 
 ### ネイティブマーケットプレイス
 
@@ -168,17 +248,25 @@ Copilot の提案を記号的検査で制約する構成であり、独自の「
 要求を確定しません。
 
 1. ネイティブ計画・調査で意図と測定可能な受入条件を明確化。
-2. `change-record CHANGE-ID impact` を記録して要求を編集・検証し、
-   `requirements` checkpoint後、設計前にartifact-boundな人間の
-   `requirements`承認を明示的に記録。
-3. コンポーネントとADRを更新して `design` checkpointを記録し、
-   実装前にartifact-boundな人間の`design`承認を明示的に記録。
+2. `change-record CHANGE-ID impact` を記録して要求を編集・検証し、要求文書の
+   `rubber-duck`レビューを実施して指摘事項をすべて修正（指摘がゼロになるまで
+   レビュー・修正を繰り返す）、`requirements` checkpoint後、設計前に
+   artifact-boundな人間の`requirements`承認を明示的に記録。
+3. コンポーネントとADRを更新し、設計文書・ADRの`rubber-duck`レビューを実施して
+   指摘事項をすべて修正（指摘がゼロになるまで繰り返す）、`design` checkpoint
+   を記録し、実装前にartifact-boundな人間の`design`承認を明示的に記録。
 4. 注釈付きテストを作成し、構造化結果を伴う `tdd red` と変更の `red` を記録。
 5. 最小実装後に `implementation`、成功する `tdd green`、変更の `green` を記録。
 6. 注釈とグラフを更新して変更影響・網羅性を確認。
-7. 実コマンドで候補品質ゲートを実行。承認以外の必須checkがすべて合格した後、
-   人間が`release`承認を記録してgate/statusを再実行し、その後だけ
-   commit・push・publish・deployへ進む。検証結果や自然言語から承認を推測しない。
+7. 実コマンドで候補品質ゲートを実行。リリース・品質エビデンス要約の
+   `rubber-duck`レビューを実施して指摘事項をすべて修正(指摘がゼロになるまで
+   繰り返す)。承認以外の必須checkがすべて合格した後、人間が`release`承認を
+   記録してgate/statusを再実行し、その後だけcommit・push・publish・deployへ
+   進む。検証結果や自然言語から承認を推測しない。
+
+AIが生成した文書成果物(要求、設計、ADR、CHANGE文書、リリース・品質エビデンス
+要約)は、対応する人間承認を依頼する**前**に、指摘事項がゼロになるまでこの
+`rubber-duck`レビュー・修正ループを実施する。
 
 ```sh
 npx musubix3 requirements validate .musubix/features/example/requirements.md --json
@@ -245,6 +333,7 @@ npx musubix3 tdd green TEST-EXAMPLE-002 --requirement REQ-EXAMPLE-002 --command
 | コマンド | 動作 |
 |---|---|
 | `init [--dry-run] [--force] [--feature slug]` | 既存ファイル保持の配置。`install` は別名 |
+| `upgrade [--dry-run]` | 同梱Skillファイルのみ更新。config・constitution・機能成果物には触れない |
 | `plugin-install` | ネイティブ Copilot インストーラーを呼び出す |
 | `requirements validate <file>` | ID・優先度・EARS 形式検査 |
 | `constitution validate [file]` | 版・原則・測定可能な規則の定義検査 |

package/README.md

@@ -1,6 +1,6 @@
 # musubix3
 
-**Latest release v0.1.13 · GitHub Copilot CLI only · Node.js ≥20 · TypeScript · MIT**
+**Latest release v0.1.14 · GitHub Copilot CLI only · Node.js ≥20 · TypeScript · MIT**
 
 [日本語](README-ja.md)
 
@@ -52,6 +52,27 @@ does this repository's configured policy consider the change ready?”
 
 ## Quick start
 
+There are two ways to load musubix3's skills into a project — pick exactly
+one per project, never both:
+
+- **`npm install` (this section, recommended)**: add `musubix3` as a project
+  dev dependency, then run `npx musubix3 init` to copy the skills into
+  `.github/skills/` and scaffold starter `.musubix/` artifacts. Version and
+  upgrades are tracked in your project's `package.json`/lockfile
+  (`npm install ...@latest` + `npx musubix3 upgrade`); see
+  [Upgrade](#upgrade). Recommended because the skills and starter SDD
+  artifacts are committed to the repository itself, so every contributor and
+  CI job gets the same reproducible setup without each of them running a
+  separate plugin install.
+- **`copilot plugin install`** (native plugin/marketplace route): register
+  musubix3 directly with Copilot CLI's own plugin manager — no npm
+  dependency is added to the project, and no files are copied into
+  `.github/skills/`. Upgraded with `copilot plugin update musubix3` (or the
+  marketplace equivalent). See
+  [Distribution options](#distribution-options) for the exact commands.
+
+The rest of this section documents the npm install route.
+
 For a reproducible project-local installation:
 
 ```sh
@@ -97,15 +118,65 @@ targets and paths escaping the project are refused.
 The starter is deliberately **not release-ready**: replace its example, implement
 and test it, and configure real check commands before expecting the gate to pass.
 
+## Upgrade
+
+`upgrade` is available starting with 0.1.14 (not in 0.1.13 or earlier — check
+with `npm view musubix3 versions`).
+
+For the npm-installed route (`init`/repository-local skills):
+
+```sh
+npm install --save-dev --save-exact musubix3@latest
+npx --no-install musubix3 upgrade --dry-run
+npx --no-install musubix3 upgrade
+```
+
+`upgrade` refreshes only the bundled `.github/skills/sdd-*` files that differ
+from the installed package version. It never creates, replaces, or deletes
+`.musubix/config.json`, `.musubix/policy-baseline.json`,
+`.musubix/constitution.md`, ADRs, feature artifacts, evidence, or
+`.gitignore` — those are yours to keep customizing. It is idempotent: it
+compares against the currently installed package's skill files, so running it
+again without first installing a newer `musubix3` version reports every skill
+file as `unchanged`. Review `--dry-run` first, same as `init`.
+
+`init --force` remains available for replacing bundled/managed paths more
+broadly (including `.musubix/config.json`, `constitution.md`, and the
+starter feature's `requirements.md`/`design.md`), but it overwrites
+customized content in those files, so prefer `upgrade` for routine version
+bumps.
+
+For the native plugin route:
+
+```sh
+copilot plugin update musubix3
+```
+
+For the native marketplace route:
+
+```sh
+copilot plugin marketplace update musubix3-marketplace
+copilot plugin update musubix3
+```
+
+These delegate to Copilot's own plugin manager, which re-fetches
+`plugin.json`/the marketplace catalog; they do not touch `.musubix/` at all
+(only the npm-installed route manages `.musubix/` artifacts).
+
 ## Distribution options
 
 Choose one skill-loading route to avoid duplicate skill names.
 
 ### Native plugin (direct)
 
+Pick exactly one of the following (not both):
+
+```sh
+copilot plugin install ./musubix3            # local clone, from its parent directory
+```
+
 ```sh
-copilot plugin install ./musubix3            # built/local clone, from its parent
-copilot plugin install nahisaho/musubix3     # published GitHub repository
+copilot plugin install nahisaho/musubix3     # published GitHub repository, no local clone needed
 ```
 
 `plugin.json` at the repository root is the source of truth and references
@@ -113,11 +184,20 @@ copilot plugin install nahisaho/musubix3     # published GitHub repository
 services. Git installs do not compile/install the npm engine: build the clone or
 install the npm package separately when running `npx musubix3` commands.
 
-From an installed npm package, `npx musubix3 plugin-install` delegates directly to
-`copilot plugin install <absolute-package-root>`. It does not edit Copilot
-internals. For a durable local plugin path, prefer
-`npm install --save-dev --save-exact musubix3@latest`
-and `npx --no-install musubix3 plugin-install` over an ephemeral npx cache.
+There is a third way to run the same `copilot plugin install`, useful only if
+you want a durable local path instead of an ephemeral npx cache — do this
+**instead of**, not in addition to, the two commands above:
+
+```sh
+npm install --save-dev --save-exact musubix3@latest
+npx --no-install musubix3 plugin-install
+```
+
+`plugin-install` only calls `copilot plugin install <absolute-package-root>`
+for you; it does not edit Copilot internals, and it is unrelated to the
+npm-installed skill-copy route in [Quick start](#quick-start) — it never runs
+`init` and never copies files into `.github/skills/`. Do not run both this and
+`npx musubix3 init` in the same project.
 
 ### Native marketplace
 
@@ -172,11 +252,15 @@ question at a time and waits for the answer; it does not batch questions or
 finalize requirements while blockers remain.
 
 1. Use native planning/research to establish intent and measurable acceptance.
-2. Record `change-record CHANGE-ID impact`, edit/validate requirements, record
-   the `requirements` checkpoint, then obtain explicit artifact-bound human
-   `requirements` approval before design.
-3. Design explicit components, record trade-offs in ADRs, record `design`, then
-   obtain explicit artifact-bound human `design` approval before implementation.
+2. Record `change-record CHANGE-ID impact`, edit/validate requirements, run a
+   `rubber-duck` review of the requirements document and fix every finding
+   (repeat review/fix until zero issues remain), record the `requirements`
+   checkpoint, then obtain explicit artifact-bound human `requirements`
+   approval before design.
+3. Design explicit components, record trade-offs in ADRs, run a `rubber-duck`
+   review of the design document/ADRs and fix every finding (repeat until zero
+   issues remain), record `design`, then obtain explicit artifact-bound human
+   `design` approval before implementation.
 4. Write an annotated behavior test, record a structured failing `tdd red`, then
    record the change `red` checkpoint.
 5. Implement the minimum change, record `implementation`, run passing `tdd green`,
@@ -186,10 +270,17 @@ finalize requirements while blockers remain.
    Red-Implementation-Green loop before moving to the next, instead of
    completing every requirement's Red before any Implementation.
 6. Add trace annotations, build graphs, inspect impact and fix missing coverage.
-7. Configure real checks and run the candidate `gate --changed`. After every
-   required non-approval check passes, obtain explicit human `release` approval,
+7. Configure real checks and run the candidate `gate --changed`. Run a
+   `rubber-duck` review of the release/quality evidence summary and fix every
+   finding (repeat until zero issues remain). After every required
+   non-approval check passes, obtain explicit human `release` approval,
    rerun the gate/status, and only then commit, push, publish, or deploy.
 
+Any AI-generated documentation deliverable (requirements, design, ADRs, the
+CHANGE document, or release/quality evidence summaries) goes through this
+`rubber-duck` review/fix loop until zero issues remain **before** the
+corresponding human approval step is requested.
+
 ```sh
 npx musubix3 requirements validate .musubix/features/example/requirements.md --json
 npx musubix3 constitution validate --json
@@ -290,6 +381,7 @@ validation/gate or requested solver failure, **2** usage, I/O or malformed confi
 | Command | Behavior |
 |---|---|
 | `init [--dry-run] [--force] [--feature slug]` | Preserve-first skills/artifacts installation; `install` alias |
+| `upgrade [--dry-run]` | Refresh bundled skill files only; never touches config, constitution, or feature artifacts |
 | `plugin-install` | Invoke native Copilot installer (no internal config edits) |
 | `requirements validate <file>` | IDs, priorities, declared/detected EARS pattern |
 | `constitution validate [file]` | Versioned principles and measurable rule definitions |

package/dist/packages/analysis/src/files.d.ts

@@ -17,4 +17,10 @@ export declare function isTraceSource(path: string): boolean;
 export declare function isSkillSource(path: string): boolean;
 export declare function isArtifact(path: string): boolean;
 export declare function evidenceInputPaths(paths: string[]): string[];
+export declare const FILE_READ_CONCURRENCY = 256;
+/** @id CODE-BOUNDED-FILE-READ-CONCURRENCY-001
+ * @implements REQ-BOUNDED-FILE-READ-CONCURRENCY-001 REQ-BOUNDED-FILE-READ-CONCURRENCY-002
+ * @design DES-BOUNDED-FILE-READ-CONCURRENCY-001
+ */
+export declare function mapWithConcurrency<T, R>(items: T[], limit: number, worker: (item: T, index: number) => Promise<R>): Promise<R[]>;
 export declare function snapshot(root: string, paths: string[]): Promise<Record<string, string>>;

package/dist/packages/analysis/src/files.js

@@ -153,8 +153,29 @@ export function evidenceInputPaths(paths) {
         && !/^\.github\/skills\//.test(path)
         && !/(?:^|\/)(?:logs?|session-logs)\//.test(path));
 }
+// Fixed pool size chosen to stay comfortably under common OS file-descriptor
+// limits (commonly 1024 on Linux/WSL) even on projects with large,
+// unexcluded vendored source trees (ADR-0018).
+export const FILE_READ_CONCURRENCY = 256;
+/** @id CODE-BOUNDED-FILE-READ-CONCURRENCY-001
+ * @implements REQ-BOUNDED-FILE-READ-CONCURRENCY-001 REQ-BOUNDED-FILE-READ-CONCURRENCY-002
+ * @design DES-BOUNDED-FILE-READ-CONCURRENCY-001
+ */
+export async function mapWithConcurrency(items, limit, worker) {
+    const results = new Array(items.length);
+    let cursor = 0;
+    async function run() {
+        while (cursor < items.length) {
+            const index = cursor;
+            cursor += 1;
+            results[index] = await worker(items[index], index);
+        }
+    }
+    await Promise.all(Array.from({ length: Math.min(limit, items.length) }, run));
+    return results;
+}
 export async function snapshot(root, paths) {
-    const entries = await Promise.all(paths.map(async (path) => [path, digest(await readFile(await safePath(root, path)))]));
+    const entries = await mapWithConcurrency(paths, FILE_READ_CONCURRENCY, async (path) => [path, digest(await readFile(await safePath(root, path)))]);
     return Object.fromEntries(entries);
 }
 //# sourceMappingURL=files.js.map

package/dist/packages/analysis/src/files.js.map

@@ -1 +1 @@
-{"version":3,"file":"files.js","sourceRoot":"","sources":["../../../../packages/analysis/src/files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9F,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAExE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC;AAChI,MAAM,6BAA6B,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AAEjE,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,IAAY,EAAE,IAAY;IAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC9C,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,EAAE,CAAC,CAAC;IACzH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAY;IACvC,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACrE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAY;IACvC,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACrE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,IAAY;IACvD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpC,IAAI,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACvE,KAAK,MAAM,IAAI,IAAI,CAAC,EAAE,EAAE,GAAG,QAAQ,CAAC,EAAE,CAAC;QACrC,IAAI,IAAI;YAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,MAAM,EAAE,CAAC,CAAC;QACnG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QACtE,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAY;IAC5C,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACrE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,IAAY;IACtC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,UAAU,IAAI,CAAC,SAAiB;QACnC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,MAAM,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACrD,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC;QAC/E,MAAM,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC/C,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,qBAAqB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACzH,MAAM,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC;QACjG,MAAM,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC;QACnG,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC5C,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC;QACpF,MAAM,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC9C,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7F,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACzE,IAAI,KAAK,CAAC,cAAc,EAAE;gBAAE,SAAS;YACrC,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAChD,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;YAChD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,MAAM,0BAA0B,GAAG,6BAA6B,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;uBAC3E,MAAM,aAAa,CAAC,OAAO,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC;gBAC1D,yEAAyE;gBACzE,iFAAiF;gBACjF,MAAM,qBAAqB,GAAG,IAAI,KAAK,EAAE,IAAI,MAAM,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;gBAC9F,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;uBACxB,CAAC,qBAAqB;uBACtB,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,uBAAuB,CAAC;uBACrD,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,iBAAiB,CAAC;uBAChD,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,eAAe,CAAC;uBACjD,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,gBAAgB,CAAC;uBAC9C,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,cAAc,CAAC;uBAC9E,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,gBAAgB,CAAC;uBAC/C,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,gBAAgB,CAAC;uBACrE,CAAC,0BAA0B;uBAC3B,IAAI,KAAK,iBAAiB;uBAC1B,IAAI,KAAK,gBAAgB;uBACzB,IAAI,KAAK,mBAAmB;oBAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC1D,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC1B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,IAAY;IACvD,OAAO,QAAQ,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,IAAY,EAAE,IAAY;IACtE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1C,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,gFAAgF;IAChF,MAAM,OAAO,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC;IAC1E,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,MAAM,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAChC,CAAC;YAAS,CAAC;QACT,IAAI,MAAM,MAAM,CAAC,OAAO,CAAC;YAAE,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;IACnD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,IAAY,EAAE,KAAc;IACxE,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,OAA4B;IACjD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,OAAO,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,oIAAoI,CAAC,IAAI,CAAC,IAAI,CAAC;WACjJ,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,sCAAsC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,2DAA2D,CAAC,IAAI,CAAC,IAAI,CAAC;QAC3E,qCAAqC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAe;IAChD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAC3B,CAAC,2CAA2C,CAAC,IAAI,CAAC,IAAI,CAAC;WACpD,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;WACtB,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;WACjC,CAAC,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,KAAe;IAC1D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,QAAQ,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAU,CAAC,CAAC,CAAC;IAClI,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC"}
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../../../../packages/analysis/src/files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9F,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAExE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC;AAChI,MAAM,6BAA6B,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AAEjE,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,IAAY,EAAE,IAAY;IAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC9C,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,EAAE,CAAC,CAAC;IACzH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAY;IACvC,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACrE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAY;IACvC,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACrE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,IAAY;IACvD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpC,IAAI,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACvE,KAAK,MAAM,IAAI,IAAI,CAAC,EAAE,EAAE,GAAG,QAAQ,CAAC,EAAE,CAAC;QACrC,IAAI,IAAI;YAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,MAAM,EAAE,CAAC,CAAC;QACnG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QACtE,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAY;IAC5C,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACrE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,IAAY;IACtC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,UAAU,IAAI,CAAC,SAAiB;QACnC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,MAAM,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACrD,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC;QAC/E,MAAM,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC/C,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,qBAAqB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACzH,MAAM,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC;QACjG,MAAM,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC;QACnG,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC5C,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC;QACpF,MAAM,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC9C,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7F,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACzE,IAAI,KAAK,CAAC,cAAc,EAAE;gBAAE,SAAS;YACrC,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAChD,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;YAChD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,MAAM,0BAA0B,GAAG,6BAA6B,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;uBAC3E,MAAM,aAAa,CAAC,OAAO,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC;gBAC1D,yEAAyE;gBACzE,iFAAiF;gBACjF,MAAM,qBAAqB,GAAG,IAAI,KAAK,EAAE,IAAI,MAAM,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;gBAC9F,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;uBACxB,CAAC,qBAAqB;uBACtB,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,uBAAuB,CAAC;uBACrD,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,iBAAiB,CAAC;uBAChD,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,eAAe,CAAC;uBACjD,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,gBAAgB,CAAC;uBAC9C,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,cAAc,CAAC;uBAC9E,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,gBAAgB,CAAC;uBAC/C,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,gBAAgB,CAAC;uBACrE,CAAC,0BAA0B;uBAC3B,IAAI,KAAK,iBAAiB;uBAC1B,IAAI,KAAK,gBAAgB;uBACzB,IAAI,KAAK,mBAAmB;oBAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC1D,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC1B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,IAAY;IACvD,OAAO,QAAQ,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,IAAY,EAAE,IAAY;IACtE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1C,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,gFAAgF;IAChF,MAAM,OAAO,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC;IAC1E,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,MAAM,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAChC,CAAC;YAAS,CAAC;QACT,IAAI,MAAM,MAAM,CAAC,OAAO,CAAC;YAAE,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;IACnD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,IAAY,EAAE,KAAc;IACxE,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,OAA4B;IACjD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,OAAO,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,oIAAoI,CAAC,IAAI,CAAC,IAAI,CAAC;WACjJ,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,sCAAsC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,2DAA2D,CAAC,IAAI,CAAC,IAAI,CAAC;QAC3E,qCAAqC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAe;IAChD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAC3B,CAAC,2CAA2C,CAAC,IAAI,CAAC,IAAI,CAAC;WACpD,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;WACtB,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;WACjC,CAAC,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,6EAA6E;AAC7E,mEAAmE;AACnE,+CAA+C;AAC/C,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAEzC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAO,KAAU,EAAE,KAAa,EAAE,MAA8C;IACtH,MAAM,OAAO,GAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,UAAU,GAAG;QAChB,OAAO,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,MAAM,CAAC;YACrB,MAAM,IAAI,CAAC,CAAC;YACZ,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAE,EAAE,KAAK,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IACD,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;IAC9E,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,KAAe;IAC1D,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,qBAAqB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,QAAQ,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAU,CAAC,CAAC;IAC5J,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC"}

package/dist/packages/analysis/src/graph.d.ts

@@ -38,6 +38,10 @@ export interface CodeGraph {
     fingerprints: Record<string, string>;
 }
 export declare function graphInputs(root: string): Promise<string[]>;
+/** @id CODE-BOUNDED-FILE-READ-CONCURRENCY-002
+ * @implements REQ-BOUNDED-FILE-READ-CONCURRENCY-002
+ * @design DES-BOUNDED-FILE-READ-CONCURRENCY-002
+ */
 export declare function indexGraph(root: string, persist?: boolean): Promise<CodeGraph>;
 export declare function loadGraph(root: string): Promise<CodeGraph>;
 export declare function graphImpact(graph: CodeGraph, query: string): {