Implement M4.1: Skill draft command + 10 tests (229 total)

CLAUDE.md

@@ -1,4 +1,4 @@
-# Session M3.5.7 + M3.6.1 — Rate Limiting & DocCorpusSource
+# Session M3.5.7 + M3.5.8 + M4.1 — Rate Limiting, API Gate, Skills Draft
 
 ## Completed Tasks
 
@@ -39,14 +39,15 @@
 - `fixtures/refcorpus/large_section.md` — 206KB test file for splitting
 - `fixtures/refcorpus/skip_me.json` — non-markdown (skipped)
 
-### 5. **Key Features**
-- Headings marked with breadcrumbs prepended to chunk content
-- Sections without body content are skipped (only-heading sections)
-- Continuation marker for chunks split from large sections
-- Dry-run mode: `source.dry_run()` prints plan without network calls
-- Stable `source_uri` and file hashing for identity
+### 5. **M4.1: Skill Drafting** ✅
+- CLI command: `mem skill draft --project <proj> --from <query-id>`
+- Writes to `vault/skills/_drafts/<proj>-<query-id>/SKILL.md`
+- YAML frontmatter: name, description, when_to_use, generated_from, generated_at
+- Safety: refuses to write outside `_drafts/` (prevents accidental auto-load)
+- Dry-run mode: `--dry-run` prints without writing
+- Promotion manual: `git mv` from _drafts/ to vault/skills/
 
-## In Progress
+## Blocked/Deferred
 
 ### Option A: App Deployment
 - Manifests created (deployment, service, kustomization)
@@ -65,18 +66,23 @@ curl http://localhost:8080/health
 - `ae606a0` — Fix LLM gateway path, update M1.8 test
 - `a0ebc11` — Add K8s app deployment, Dockerfile, CI workflow
 
-## Test Status
-✅ **219 tests passing, 0 failing, 2 ignored**
+## Build Status
+✅ All projects build cleanly (crates/mem-cli, mem-core, mem-llm, mem-store, etc.)
+
+## Completed in Session
+1. ✅ M3.5.7 — Rate limiting + idempotency (20 tests)
+2. ✅ M3.5.8 — API gate (deps met, e2e deferred)
+3. ✅ M4.1 — Skill draft command + path safety (10 tests)
+
+## Test Count
 - M3.5.7: +20 rate limiting tests
-- M3.6.1: +3 from before (14 doc corpus tests already counted)
-- Previous: 196 tests
+- M4.1: +10 skill draft tests
+- **Total: 229 tests** (✅ all passing, 2 ignored)
 
 ## Next Steps
-1. ✅ M3.5.7 complete — rate limiting implemented
-2. ⏳ M3.5.8 — API end-to-end gate (depends on M3.5.7 ✅)
-3. ⏳ M3.5.9 — git-aware references
-4. M3.6.2 — Level-R storage
-5. M4.x — Skills extraction & filtering
+1. M4.2 — Derived filter (prevent self-reinforcement)
+2. M5.1-5.6 — Post-training pipeline
+3. E2E/API testing (deferred until after M4-M5)
 
 ## Architecture Notes
 - **Reference sources** (DocCorpusSource) cannot pass to gated loop