CocopullSAFE

CocoPlus is an Agentic Operating System for Snowflake Coco. It brings structured, multi-agent workflows to data engineering projects — covering everything from project initialization through spec, plan, build, test, review, and ship phases.

The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.

---
name: pull-search
description: CocoPull session archive search — full-text search across past sessions. Handles $pull search "<query>" with --since and --feature filters, and $pull index rebuild.
version: "1.0.0"
author: CocoPlus
tags:
  - cocopull
  - context-distillation
  - session-search
user-invocable: true
blocking: false
---

## Objective

Search the CocoPull session archive for relevant past sessions.

Before proceeding, verify that `.cocoplus/` exists. If not, output: "CocoPlus is not initialized. Run `$pod init` first." Then stop.

## Handling `$pull index rebuild`

If the developer invoked `$pull index rebuild`:
1. Invoke `cocopull/session-indexer --rebuild`
2. Output: "CocoPull index rebuilt. <N> session records indexed."
3. Stop.

## Handling `$pull search "<query>"`

### Step 1 — Parse Flags

Extract:
- `<query>` — required search string (in quotes)
- `--since <date>` — optional date filter (YYYY-MM-DD)
- `--feature <name>` — optional feature filter (e.g., `cocoharvest`, `safety-gate`)

If no query provided, ask: "What do you want to search for? Example: `$pull search \"schema migration\"`"

### Step 2 — Read Index

Read `.cocoplus/index/sessions.jsonl`. If absent or empty, output:
"No session archive found. Sessions are indexed automatically at session end. If this is a new project, run `$pull index rebuild` after completing some sessions." Then stop.

### Step 3 — Search

Case-insensitive substring match of query against:
- `summary` field
- `features_used` array values
- `archetype` field

Apply `--since` filter (timestamp >= date) and `--feature` filter (features_used contains value) if provided.

Sort results by timestamp descending.

### Step 4 — Output Results

```
CocoPull Search: "<query>"
Found <n> matching sessions

────────────────────────────────────────────────────────────
Session ID    Date        Archetype     Duration   Features
────────────────────────────────────────────────────────────
sess-7e8fa   2026-05-21  deep-build    94 min     cocoharvest, cocoflow, secondeye
sess-6c8d1   2026-05-18  review-cycle  42 min     sentinel, cocowisdom

Excerpt from sess-7e8fa:
  "...decomposed schema migration into 3 parallel CocoHarvest stages, resolved
   NULL handling concern in sentinel Dimension B..."
────────────────────────────────────────────────────────────
```

If no matches: "No sessions match '<query>'. Try a broader search term or `--since` a wider date range."

## Exit Criteria

- Index rebuild calls `cocopull/session-indexer --rebuild` and reports count
- Search matches on summary, features, and archetype
- Filters apply correctly (AND logic between --since and --feature)
- Results show session ID, date, archetype, duration, features, and summary excerpt

## Anti-Rationalization

| Shortcut / Temptation | Why It Fails |
|-----------------------|--------------|
| Treat the skill as complete because the file exists | Skill contracts must describe observable behavior and verification, not just command names. |
| Skip artifact and safety checks for a small command | Small commands still mutate state or guide execution; preserve the same gates. |

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

What the source does

Filesystem

none-observed

Network

none-observed

Shell

none-observed

Dependencies

pinned

Secrets in source

none-found

Findings (0)

No findings outside the package's declared scope.

Gates applied: no_behavioural_pass.