feat(onboarding): context-seed pipeline (Stage 3)

[jeonghun-jj-lee]

Summary

Implements #436 — the context-seed pipeline that scans allowlisted AI-tool configs, redacts secrets, extracts profile facts and memory cards, and writes them through the existing onboarding event pipeline.

What's included

• src/context_seed.ts — pure Node module (no VS Code deps):
  • SCAN_ALLOWLIST: data-driven config of scan roots + filenames
  • resolveAllowlist(): returns only existing files from the allowlist
  • readAndRedact(): size-capped read with secret redaction at read time
  • redactSecrets(): expanded SECRET_PATTERNS (sk- keys, AWS, Bearer, PEM, generic key=value)
  • extractFacts(): conservative fact extraction from markdown/JSON configs → profile + memory cards
  • writeSeeds(): group-selectable materialization via appendOnboardingEvent()

Acceptance Criteria coverage

AC	Status
1. Opt-in model	Tested (nothing-found path)
2. Allowlist-only scan	Tested (resolveAllowlist)
3. Size cap	Tested (truncation + flag)
4. Secret redaction	Tested (6 pattern types)
5. Fact extraction + provenance	Tested
6. Group deselection	Tested
7. Event pipeline writing	Tested (via mock appendFn)
9. Idempotency	Handled by merge semantics
10. No broad dir walk	Enforced by allowlist
11. Nothing-found message	Tested (empty result)

Status: WIP (draft)

The core logic layer is complete and tested (27 tests). Remaining for full closure:

• Score-stage wiring (adding Stage 3 to the overture SCORE.md)
• Integration test with real appendOnboardingEvent + distiller trigger

Closes #436

Summary by CodeRabbit

• New Features

  • Added an optional onboarding step to scan approved AI-tool configuration files.
  • Users can review grouped profile and project information with source details before selectively importing it.
  • Imported information is sanitized to remove credential-like secrets and avoid duplicate entries.
  • Declining the scan performs no file reads, while missing files are reported accurately.

• Bug Fixes

  • Onboarding completion is now recorded after the context-seeding choice is completed.

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 7ce0cc79-6a37-4a9e-8d5c-6815ad718821

📥 Commits

Reviewing files that changed from the base of the PR and between e5fc625 and d1eb0e9.

📒 Files selected for processing (4)

• packages/extension/scores/overture/SCORE.md
• packages/extension/src/context_seed.ts
• packages/extension/test/context_seed.test.ts
• packages/extension/test/scores/golden/compile-chained.md

---

📝 Walkthrough

Walkthrough

The change adds an opt-in context_seed onboarding stage. It scans allowlisted AI-tool files, redacts secrets, extracts grouped facts with provenance, supports selective idempotent imports, and records completion after acceptance or decline.

Changes

Context-seed onboarding

Layer / File(s)	Summary
Scan, extract, and write context seeds packages/extension/src/context_seed.ts, packages/extension/test/context_seed.test.ts	The pipeline scans allowlisted files with a 50 KB cap, redacts credentials at read time, extracts profile and memory facts, and writes selected seeds through onboarding events. Tests cover scanning, redaction, extraction, deselection, counts, and end-to-end behavior.
Opt-in Overture stage packages/extension/scores/overture/SCORE.md, packages/extension/test/scores/golden/compile-chained.md	The onboarding flow asks for consent after intent selection, skips reads on decline, presents provenance-grouped previews on acceptance, handles empty scans, and records completion after the stage.

Estimated code review effort: 3 (Moderate) | ~25 minutes

Possibly related issues

• harmoniqs/amicode issue 438 — This pipeline can provide the seeded entities that the issue expects later onboarding stages to use.

Possibly related PRs

• harmoniqs/amicode#441 — This change extends the Overture onboarding flow introduced there.

Suggested reviewers: aarontrowbridge

Sequence Diagram(s)

sequenceDiagram
  participant User
  participant Overture
  participant ContextSeed
  participant OnboardingEvents
  User->>Overture: accept or decline context scanning
  alt accepted
    Overture->>ContextSeed: scan allowlisted files
    ContextSeed-->>Overture: redacted grouped preview
    User->>Overture: select seed groups
    Overture->>ContextSeed: write selected seeds
    ContextSeed->>OnboardingEvents: append onboarding events
  else declined
    Overture->>Overture: skip file reads
  end
  Overture->>OnboardingEvents: record onboarding completion

Loading

✨ Finishing Touches 💡 1

🛠️ Fix failing CI checks 💡

• Create stacked PR
• Commit on current branch

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch jeonghun-jj-lee/436-context-seed-pipeline

---

_{Comment @coderabbitai help to get the list of available commands.}