dejavu-integrate

name	dejavu-integrate
description	Integrate Deja Vu into an existing repository using a goal-driven, TDD pipeline. Detects the repo's language automatically and asks the user to pick between Deja Vu Platform (managed) and Deja Vu Open Source (self-hosted). Writes failing tests before any implementation. Produces a local feature branch plus `.dejavu-integration/` artifacts consumed by the paired verification skill. TRIGGER when: user says "integrate dejavu", "add dejavu to this repo", "wire dejavu into <repo>", or asks how to add memory to an existing project. DO NOT TRIGGER when: the user wants general SDK usage (use skill:dejavu), CLI usage (use skill:dejavu-cli), or Vercel AI SDK (use skill:dejavu-vercel-ai-sdk). After success, invoke skill:dejavu-test-integration to verify in the same workspace (loose coupling).
license	Apache-2.0
metadata	{"author":"dejavu-memory","version":"0.1.0","category":"ai-memory","tags":"memory, integration, tdd, platform, oss","dejavu_tested_versions":"dejavu-memory (PyPI) >=2.0.0,<3.0.0; dejavu-memory (npm) >=3.0.0,<4.0.0"}

dejavu-integrate

Wire Deja Vu into an existing repo with a goal-driven, test-first pipeline. Pairs with dejavu-test-integration for verification.

Canonical sources (fetch before deciding anything)

The skill MUST WebFetch these URLs before step 3 and cite them in plan.md. They are the ground truth — do not rely on ambient knowledge of the Deja Vu API.

Agent-ready docs

• Scope-tagged docs index: https://docs.dejavu.ai/llms.txt
• Full docs (single file, deep dives): https://docs.dejavu.ai/llms-full.txt
• OpenAPI spec (Platform REST, machine-readable): https://docs.dejavu.ai/openapi.json
• Hosted MCP server: https://mcp.dejavu.ai (requires Platform API key)
• Integrations index: https://docs.dejavu.ai/integrations

Published Deja Vu skills — delegate; do not reimplement

Prefer these over writing your own call-site patterns. Each is a standalone SKILL.md with triggers, examples, and version-pinned code.

• SDK (Python + TS, Platform + OSS): https://raw.githubusercontent.com/dejavu-memory/dejavu/main/skills/dejavu/SKILL.md
• CLI: https://raw.githubusercontent.com/dejavu-memory/dejavu/main/skills/dejavu-cli/SKILL.md
• Vercel AI SDK: https://raw.githubusercontent.com/dejavu-memory/dejavu/main/skills/dejavu-vercel-ai-sdk/SKILL.md
• Editor/MCP plugin glue (9 MCP tools): https://github.com/dejavu-memory/dejavu/tree/main/dejavu-plugin

SDK source (read when docs are ambiguous)

Public repo. Cross-check against the dejavu_tested_versions range in this skill's frontmatter if the main branch has moved past a major.

• Repo root: https://github.com/dejavu-memory/dejavu
• Python SDK: https://github.com/dejavu-memory/dejavu/tree/main/dejavu
• TypeScript SDK: https://github.com/dejavu-memory/dejavu/tree/main/dejavu-ts

Quickstarts (for bootstrapping unfamiliar stacks)

• Platform: https://docs.dejavu.ai/platform/quickstart
• OSS Python: https://docs.dejavu.ai/open-source/python-quickstart
• OSS Node: https://docs.dejavu.ai/open-source/node-quickstart
• Platform vs OSS comparison: https://docs.dejavu.ai/platform/platform-vs-oss

Integration principles (non-negotiable)

The true goal of this skill is to produce a PR the maintainers can accept without argument. That rules out anything invasive.

1. Additive, not replacing. If the target repo already has a memory system, a session store, a user-context layer, or anything named Memory / memory_*, Deja Vu sits alongside it, not in place of it. The existing system keeps working unchanged.
2. Opt-in by default. Gate all new Deja Vu code behind a feature flag (env var like DEJAVU_ENABLED=1, a config key, or a strategy selector). With the flag unset, behavior is the repo's original behavior, byte-for-byte.
3. No breakage. No removed exports, no renamed public functions, no changed method signatures, no modified existing tests, no changed behavior of existing tests. All pre-existing tests must pass unchanged both with the flag set and unset.
4. Minimal dependency surface. Add dejavu-memory (plus any deps the delegated skill requires) and nothing else. No new vector stores, no graph databases, no provider SDKs the repo does not already use.
5. Separable commits. Code, tests, and config/docs land in separate commits so reviewers can cherry-pick.
6. The null hypothesis wins. If no additive, gated fit exists after step 6 (plan), exit with code 1 and a rationale. A bad PR is worse than no PR.
7. Backend only. Deja Vu integration lives in server-side code. API keys, memory scope, and user-identity resolution are not safe client-side. If the repo has both backend and frontend, the call sites live in backend files. Frontend-only repos are rejected at preconditions.

Enforced at four gates: preconditions (reject frontend-only repos and repos where additive fit is impossible), step 2 comprehension (confirm a backend exists and name candidate surfaces), step 6 plan review (reject plans that mutate existing exports or name client-side call sites), and step 10 self-healing loop (refuse to "fix" principle violations — surface them instead).

Skill delegation rules

Before writing any code, check whether a published skill already covers the target stack. If yes, delegate — copy its call-site pattern into plan.md and into the tests; do not paraphrase.

Detected in target repo	Delegate to	Why
@ai-sdk/* + ai in package.json	skills/dejavu-vercel-ai-sdk	Integration is via createDeja Vu provider wrapper, not raw MemoryClient.
CLI-only repo (Typer, Commander, Click, Cobra) with no LLM call sites	skills/dejavu-cli	Call sites are command handlers, not model wrappers. Consider whether dejavu actually fits first.
Target is an MCP client / editor config (Claude Code, Cursor, Codex settings)	dejavu-plugin	Wire via MCP server URL + hooks; no SDK code usually needed.
Any other Python or TS repo with an LLM call site	skills/dejavu	Default SDK integration path.

Record the delegated skill's raw URL in plan.md under a "Delegated skill:" field. The test writer in step 7 and the implementation subagent in step 8 both read this field.

Preconditions

Refuse to start unless ALL of the following are true:

• Current working directory is inside a git repository with a clean index (no uncommitted changes). Protects the user's work — every edit lands on a feature branch, not on top of in-progress changes.
• Repo has a detectable language (package.json / pyproject.toml / requirements.txt). No language → exit cleanly with a written rationale.
• Repo has a backend. Detected by: a backend/ or server/ or api/ directory; a Python package with FastAPI/Flask/Django/Starlette; a Node package with Express/Fastify/Koa/NestJS/Next-API-routes; an agent-loop framework (LangGraph, LangChain, LlamaIndex, Agno). Frontend-only repos (pure React/Vue/Svelte SPAs, static sites, mobile-only) → exit with code 1 and a rationale. Deja Vu is not installed client-side.
• The user has already decided Deja Vu fits this repo. This skill does NOT survey the codebase to justify fit — bring a concrete goal. (Step 2 does read the repo to understand what it does and locate backend integration surfaces; that is mechanics, not fit-justification.)

Exit with a written rationale if any precondition fails. Do not try to "make it work anyway."

Pipeline

1. Language detection

Signal	Track
package.json + TypeScript config	Node / TypeScript
package.json (no TS config)	Node / JavaScript
pyproject.toml or requirements.txt	Python

Monorepo with both → ask which subdirectory to operate in, then recurse.

2. Repo comprehension — what does this repo do, and where is the backend?

Before any decision (product, goal, plan), understand the repo enough to locate where in the backend the integration belongs. This is not fit-surveying — the user already decided Deja Vu fits. This is mechanics: you cannot write a plan without knowing what files matter.

Read, in order, with a token budget — do not scan the whole tree:

1. README.md (root) + first-page of any README_*.md variants.
2. CONTRIBUTING.md / AGENTS.md / CLAUDE.md at root if present — these often spell out architecture and entry points.
3. package.json / pyproject.toml scripts + entry points.
4. The layout of the top two directory levels (not recursive).
5. Key config files: docker-compose.yml, Dockerfile, Makefile, langgraph.json, next.config.*, nuxt.config.*.

Produce .dejavu-integration/repo-summary.md:

# Repo comprehension

**What this repo does:** <one paragraph in plain English. Who is
the end user? What does the app do for them? What LLM / agent
behavior is central? Do not list dependencies — describe behavior.>

**Architecture at a glance:**
  - Backend: <path(s), framework, primary entry point>
  - Frontend: <path(s) if any, framework — for context only; no
    integration here>
  - Agent loop / orchestration: <LangGraph? custom? none?>
  - Existing memory/session/state systems: <name them — these are
    what step 6 Coexistence must preserve>

**Candidate backend integration surfaces** (ranked, best first):
  1. `<backend-file>:<line_range>` — <function> — <one-sentence
     reason this is where write/read could slot in without
     replacing anything existing>
  2. ...
  3. ...

**Not a fit here:** <list anything the skill considered but ruled
out — e.g., "frontend chat component: client-side, excluded by
backend-only rule"; "existing memory subsystem X: would require
replacement, excluded by additive principle">

**Sources read:** <list the files actually opened, with line counts,
so reviewers can verify coverage.>

Show the user the rendered summary and ask: "Is this understanding correct? Which of the candidate surfaces (1, 2, 3 ...) should step 3 forward target?"

Gate rules:

• If no backend surface is found → exit code 1. The preconditions should already have caught frontend-only repos; reaching this point means a more subtle miss (e.g., the "backend" is actually just a static build). Do not force a fit.
• If every candidate surface would require replacing an existing memory/session system → exit code 1 with the "additive principle" rationale. The user can manually point at a non-conflicting location and re-run.
• User corrections update repo-summary.md and re-confirm. Max 3 rounds; beyond that, exit code 1.

The user's chosen surface index is baked into product.json as preferred_site and referenced by steps 5 and 6.

3. Product selection — Platform vs OSS (ask with a recommendation)

Read the ## Identify the User's Setup block in https://docs.dejavu.ai/llms.txt for the Platform-first routing rules, then apply the heuristics below. Ask, but never blank:

• Other managed-service SDKs present (@clerk/*, stripe, @supabase/*, openai, @upstash/*, posthog-*) — 3+ → recommend Platform.
• Local-infra signals (docker-compose.yml with postgres / redis / qdrant / neo4j, ollama configs, self-hosted auth) — 2+ → recommend OSS.
• No strong signal → default recommendation: Platform (lower integration cost; migration later is supported).

Example:

I see stripe, @clerk/nextjs, and @supabase/supabase-js — managed services throughout. I recommend Deja Vu Platform (4-line integration). Override and use open source?

Bake the choice into the goal doc in step 5. Do not re-decide later.

4. API key check (env-first, then ask)

Track	Key	Where to find
Platform	VENICE_API_KEY	https://app.dejavu.ai
OSS (default LLM)	OPENAI_API_KEY	https://platform.openai.com/api-keys

If present in env → continue. If VENICE_API_KEY is missing AND the track is Platform → default to Agent Mode: run dejavu init --agent --agent-caller <your-name> --json (after pip install dejavu-cli or npm install -g @dejavu/cli), substituting your agent identity (e.g. claude-code, cursor, codex). If you forgot to pass --agent-caller, run dejavu identify <your-name> after init. Cache the key to .env (with user consent) and continue. Tell the user to claim later with dejavu init --email <their-email> — same key, no agent disruption. If missing AND CI mode (DEJAVU_INTEGRATE_CI=1) → exit with code 2 and the name of the missing key.

Never echo key values into trace.jsonl. Persist to .env only with explicit user consent, and append .env to .gitignore if not already there.

If the user is on OSS and wants a non-OpenAI LLM, route them to the components/llms/* docs and re-run this step with the chosen provider's key.

5. Goal doc — the hard gate

Write .dejavu-integration/goal.md and require user approval before step 6.

Template:

# Deja Vu Integration Goal

**What gets stored:** <one sentence — user utterances? extracted
preferences? a specific domain fact like "dietary restrictions"?>

**When it gets retrieved:** <one sentence — on each user turn? before a
specific tool call? at session start?>

**Why:** <one sentence — the user-visible behavior change. "Assistant
remembers previous orders across sessions," not "we added memory.">

**Product:** Platform | OSS  (locked from step 3, do not change)

**Delegated skill:** <raw URL of the published skill being used
from "Skill delegation rules" above, or "none — custom integration
against `skills/dejavu`">.

**Out of scope:** <anything explicitly excluded: "no graph memory,"
"no multimodal," "no migration from existing store">

Rules:

• User must approve explicitly. If they edit the doc, reload and re-confirm.
• goal.md is the contract the test suite is written against. Never rewrite it after step 6 starts.
• Max 3 rejection rounds. On the 4th, exit with code 3 and the rejection notes — the integration is not well-specified enough to proceed.

6. Integration plan — how and where (hard gate)

Given goal.md is "what and why," this step produces "where and how" and gets explicit user sign-off before any code is written.

The skill does a scoped read of the repo (no wide survey):

• Grep for the LLM call sites that match the goal (e.g., openai.chat., anthropic.messages., model.generateContent, ChatOpenAI, createLLM).
• Grep for the user-identity source (req.user, session.user, auth(), ctx.userId, cookies).
• Check package.json / pyproject.toml / requirements.txt for conflicts (e.g., existing dejavu-memory at a different version).

Then write .dejavu-integration/plan.md:

# Deja Vu Integration Plan

**Write pattern:** <one sentence — e.g., "After each assistant reply,
call client.add([user_msg, assistant_msg], user_id=<source>).">

**Read pattern:** <one sentence — e.g., "Before building the LLM prompt,
call client.search(query=latest_user_msg, user_id=<source>, limit=5)
and inject results as a system message.">

**User identifier source:** <code path — e.g., `req.auth.userId`,
`session.user.email`, `ctx.params.user_id`. If none, ask the user.>

**Session scoping:**
  - user_id: <source>
  - agent_id: <static slug | null>
  - run_id:   <source | null>

**Write call site:** `<file:line_range>` — inside `<function>`
**Read call site:**  `<file:line_range>` — inside `<function>`

**Dependencies to add:**
  - `<package>@<version pinned in frontmatter>`

**Preserved behavior:** <list the existing repo behaviors that must
keep working after this edit — e.g., "existing OpenAI streaming still
works," "existing Redis session store still used," "existing tests
still pass unchanged.">

**Coexistence:** <one bullet per existing system the integration sits
alongside. Name the files/classes. Example: "The existing
`agents/memory/storage.py` MemoryStorage class remains untouched and
keeps its LangGraph SummarizationEvent flow. Deja Vu is added as a
parallel long-term-facts store, in a new file, invoked only when
DEJAVU_ENABLED=1 is set.">

**Feature flag:** <the exact mechanism and the default. Required.
Example: `env DEJAVU_ENABLED=1`, default unset / off; `config.dejavu.enabled`,
default false. With the flag in its default state, the repo must
behave exactly like `main`.>

**Sources consulted:** <minimum 2 URLs from "Canonical sources" above
that informed this plan. At least one `docs.dejavu.ai` URL and one
delegated-skill URL. Cite the specific section or heading.>

**E2E recipe:** <how the verification skill should drive the app
end-to-end. Omit only if the repo is a pure library with no runnable
entry point — in which case the E2E step will skip with a warning.>

    start:               <shell command to launch the app locally,
                          using $PORT for any network port>
    ready_probe:         <one of: url=<URL> status=<code>  /
                          log="<substring to wait for>"  /
                          sleep=<seconds, last resort>>
    compose_services:    <optional: whitespace-separated service
                          names in docker-compose.yml to start first;
                          use label dejavu-e2e: "true" to mark them>
    write_call:          <command that triggers the Deja Vu write path
                          exactly once; ≤ 60s runtime>
    write_async_wait_ms: <milliseconds to wait after write_call for
                          async memory flush; default 0>
    read_call:           <command that triggers the Deja Vu read path,
                          typically a fresh session / new request>
    read_assert:         <substring, regex, or jsonpath=<expr>=<value>
                          that MUST appear in read_call's output for
                          the E2E to pass. Derived from goal.md's
                          "What gets stored.">

**Rejected alternatives:** <briefly, 1–2 bullets — patterns the skill
considered but did not pick, and why. Helps the user decide.>

Rules:

• Show the user the proposed call sites with 10 lines of context around each before asking for approval.
• If the skill can't find a plausible call site for either write or read, it exits with code 5 and asks the user to name the file(s) manually (this is the "no fit here" signal — don't guess).
• Max 3 rejection rounds on the plan. On the 4th, exit code 5 with the last plan and the user's notes.
• If the user edits plan.md by hand, reload and re-confirm.

plan.md (not goal.md) is the contract the subagent implements against in step 8.

7. Tests first (TDD)

Main agent writes failing tests against goal.md in the repo's native test framework:

Track	Default framework
Python	pytest
TypeScript	vitest if detected, else jest
JavaScript	same

Test assertion shapes must match the canonical signatures:

• Platform method signatures: https://docs.dejavu.ai/openapi.json (request body schemas for /v1/memories/ and /v1/memories/search/).
• OSS method signatures: the delegated skill named in plan.md (fetched from its raw URL) or skills/dejavu/SKILL.md as the default.
• Do not hand-roll request shapes. If the delegated skill has an example block, lift it verbatim.

Minimum two test files (paths taken from plan.md call sites):

• test_dejavu_write.<ext> — asserts add() is called at the Write call site with the right payload shape (Platform messages-array vs OSS string) and the right user_id source.
• test_dejavu_read.<ext> — asserts search() runs before the Read call site and the result is wired into the LLM prompt / response path.

Tests MUST be importable with VENICE_API_KEY unset. This is the design pressure that forces step 8's lazy MemoryClient() / Memory() construction — eager module-level init hits the API on import and breaks pre-existing test collection when the key is missing.

Run the tests. They must fail. If they pass before any implementation, the tests are wrong — rewrite them.

8. Implementation (subagent, fresh context)

Spawn a subagent with:

• Inputs: the repo, goal.md, plan.md, the two test files, and direct URLs to: the delegated skill (from plan.md), the SDK source (pinned per dejavu_tested_versions), https://docs.dejavu.ai/llms.txt, and https://docs.dejavu.ai/openapi.json.

• No access to main agent's reasoning trace or scratchpad.

• System prompt (verbatim):

  You are implementing a Deja Vu integration for an existing repo.
  
  Read these first:
  - plan.md           (the mechanical contract)
  - goal.md           (the intent — do not change it)
  - the test files    (do not change them either)
  - <delegated skill raw URL from plan.md>
  - https://docs.dejavu.ai/llms.txt
  - https://docs.dejavu.ai/openapi.json  (Platform only)
  
  Constraints — all required, all enforced at review:
  
  1. Touch only the files named in plan.md's call sites, or add
     strictly new files.
  2. Do not remove or rename any existing symbol. Do not change
     any public signature.
  3. Do not modify any existing test.
  4. Gate every line of new Deja Vu code behind the feature flag from
     plan.md. With the flag in its default state, the repo must
     behave exactly like `main` — byte-for-byte, including stdout
     and return values.
  5. Use only the <Platform | OSS> SDK surface. No new dependencies
     beyond those listed under plan.md's "Dependencies to add."
  6. Preserve everything listed under plan.md's "Preserved behavior"
     and "Coexistence."
  7. Lazy client construction. `MemoryClient()` validates the API
     key in `__init__` (it makes a network call). Never instantiate
     it at module-import time — construct on first use inside the
     request / handler path. The same rule applies to OSS `Memory()`,
     which can eagerly initialize embedding and LLM providers. Use
     a function-local singleton (`functools.lru_cache`, a module-level
     `_client = None` + getter, or DI scope) — never a top-level
     global. Eager init breaks the pre-existing test suite at
     collection time whenever the key is missing or invalid, which
     is a non-invasiveness violation.
  
  Implement the plan to make the new tests pass while all
  pre-existing tests continue to pass unchanged.
  

Subagent returns a diff. Main agent reviews against plan.md (the mechanical contract) and goal.md (the intent):

• Approved → apply the diff, commit.
• Rejected → return with specific, actionable feedback (not "try again").
• Max 3 review loops. Beyond that → exit code 4 with the last diff and reviewer feedback.

9. Commit + handoff

Create branch dejavu-integrate/<short-goal-slug> and commit in separate commits so reviewers can cherry-pick:

1. dejavu: add gated dependency — just the pyproject.toml / package.json change.
2. dejavu: add integration module — the new file(s).
3. dejavu: wire into <call site> — the call-site edit(s), still gated.
4. dejavu: add tests — the new test files.

If --no-heal is set → print Run /dejavu-test-integration to verify. and exit. Otherwise proceed to step 10.

10. Self-healing loop (default ON; disable with --no-heal)

Run /dejavu-test-integration --ci in a subprocess. If scorecard.json reports overall: pass → done, exit 0.

Otherwise loop:

1. Categorize the failing check from scorecard.json. Route per category:

   • install / static_checks → dependency or import fix.
   • unit_tests → wiring or assertion fix.
   • smoke_test → API key or SDK call-shape fix.
   • e2e_test → recipe, flag-wiring, or integration-point fix.
   • Pre-existing test failure (test skill exit code 7, non_invasive: false in scorecard) → STOP. This is a non-invasiveness violation. Do NOT attempt to "fix" it (that breaks principle 3). Exit code 6 with rationale.

2. Spawn a remediation subagent, fresh context. Inputs: plan.md, goal.md, scorecard.md, scorecard.json, the last committed diff, and the relevant log file for the failing category (test-stdout.log / smoke-stdout.log / e2e-app.log / e2e-calls.log).

   System prompt (verbatim):

   You are fixing a failing Deja Vu integration test.
   
   Non-negotiable constraints:
   - Do not modify test files.
   - Do not remove or rename any existing symbol or signature.
   - Do not change pre-existing behavior. The feature flag from
     plan.md must still default to OFF, and with the flag in its
     default state the repo must behave exactly like main.
   - Touch only the files named in plan.md's call sites, or add
     strictly new files.
   - Return the smallest possible diff that fixes the single
     failing check listed in scorecard.md. No drive-by cleanup.
   

3. Apply the diff; commit on the same branch with message dejavu-heal: <category> attempt <N>. Do NOT amend earlier commits (reviewers need the heal trail).

4. Re-run /dejavu-test-integration --ci. Outcomes:

   • overall: pass → done, exit 0.
   • Same check still failing → increment attempt counter; loop.
   • A different check now failing → regression. Revert the heal commit (git revert HEAD --no-edit), record the regression in .dejavu-integration/heal-trace.md, exit code 6.

5. Bounded iterations. Default 3 attempts per failing category. Override with --heal-max N (hard cap 10). On exhaustion, exit 6 with the full attempt trace: each diff, each scorecard, final log tail.

6. Post-loop summary written to .dejavu-integration/heal-trace.md: which category failed, how many attempts, each diff's intent, final status, and — on success — the delta from initial scorecard to final.

Artifacts (all under .dejavu-integration/)

File	Purpose	Retention
repo-summary.md	Repo comprehension + candidate backend surfaces (step 2).	Keep across runs.
goal.md	Approved intent. Never rewritten after step 6.	Keep across runs.
plan.md	Approved mechanics (where, how, call sites, preserved behavior).	Keep across runs.
trace.jsonl	Every tool call, decision, and subagent exchange this run.	Overwritten per run.
diff.patch	The committed integration as a reviewable patch.	Overwritten per run.
heal-trace.md	Per-attempt record of the self-healing loop (step 10).	Overwritten per run.
product.json	{"product": "platform"|"oss", "language": "...", "dejavu_version": "...", "write_site": "file:line", "read_site": "file:line", "feature_flag": "DEJAVU_ENABLED"} — consumed by the verification skill.	Overwritten per run.

.dejavu-integration/ is added to .gitignore on first run. Nothing is written outside this directory and the repo's source tree.

Modes

Mode	Trigger	Behavior
Interactive (default)	TTY present, DEJAVU_INTEGRATE_CI unset	Asks for keys, confirms goal doc, shows recommendations.
CI	DEJAVU_INTEGRATE_CI=1	Requires keys in env, requires --product, auto-approves goal doc from goal.md if present, fails fast otherwise.

Invocation

/dejavu-integrate                            # interactive, heal ON
/dejavu-integrate --no-heal                  # stop after commit; manual verify
/dejavu-integrate --heal-max 5               # cap heal attempts per category (default 3)
/dejavu-integrate --product platform         # skip the product ask
/dejavu-integrate --product oss
/dejavu-integrate --ci                       # non-interactive (for test harness)

Exit codes

Code	Meaning
0	Success. Feature branch committed; verification skill ready to run.
1	Precondition failed (dirty repo, no detectable language, etc.).
2	Missing env key in CI mode.
3	Goal doc rejected 3+ times — integration is not well-specified.
4	Subagent review loop did not converge in 3 rounds.
5	Integration plan rejected 3+ times, or no plausible additive call site found.
6	Self-healing loop did not converge, detected a non-invasiveness violation, or a pre-existing test failed.

Explicitly out of scope

• Surveying the repo for fit points. Humans decide where Deja Vu helps before invoking this skill.
• Replacing any existing memory / session / state system. Always additive and feature-flagged; see "Integration principles."
• Modifying pre-existing tests, even to "fix" them under self-heal. Tests that fail after integration with the flag unset are a non-invasiveness violation, not a bug to patch.
• Deciding Platform vs OSS silently. Always ask with a recommendation.
• Switching branches, pushing, or opening PRs. Commits locally and stops (or enters the heal loop, still local).
• Data migration between stores. Point user at migration/oss-to-platform docs if they ask.
• Provider selection beyond the default LLM for OSS. If they need a custom LLM / embedder / vector store, route to components/* docs and re-run step 4 with the new key.