@aperant/framework 0.6.6 → 0.7.0

package/dist/cli/release-notes/ship-autodraft.d.mts

@@ -0,0 +1,37 @@
+/**
+ * Compute the autodraft decision.
+ *
+ * @param {AutodraftInput} input
+ * @returns {AutodraftResult}
+ */
+export function decideAutodraft(input: AutodraftInput): AutodraftResult;
+export type FeatureDiffEntry = {
+    feature_id: string;
+    area?: string | undefined;
+    personas?: string[] | undefined;
+};
+export type AutodraftInput = {
+    featureDiff: FeatureDiffEntry[];
+    personasEnvelope: {
+        personas?: Array<{
+            ui_json?: unknown;
+        }>;
+    } | null;
+    personaFilter: "primary" | "primary+secondary" | "all";
+    requirePrField: boolean;
+};
+export type AutodraftResult = {
+    status: "draft";
+    line: string;
+    persona: string;
+    matchedFeatures: string[];
+} | {
+    status: "block";
+    reason: "no-feature-match" | "no-persona-signal";
+    message: string;
+} | {
+    status: "warn";
+    reason: "no-feature-match" | "no-persona-signal";
+    message: string;
+};
+//# sourceMappingURL=ship-autodraft.d.mts.map

package/dist/cli/release-notes/ship-autodraft.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ship-autodraft.d.mts","sourceRoot":"","sources":["../../../src/cli/release-notes/ship-autodraft.mjs"],"names":[],"mappings":"AAkDA;;;;;GAKG;AACH,uCAHW,cAAc,GACZ,eAAe,CA+B3B;;gBApEa,MAAM;;;;;iBAON,gBAAgB,EAAE;sBAClB;QAAE,QAAQ,CAAC,EAAE,KAAK,CAAC;YAAE,OAAO,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC,CAAA;KAAE,GAAG,IAAI;mBAClD,SAAS,GAAG,mBAAmB,GAAG,KAAK;oBACvC,OAAO;;8BAIR;IACR,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B,GAAG;IACF,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,kBAAkB,GAAG,mBAAmB,CAAC;IACjD,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG;IACF,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,kBAAkB,GAAG,mBAAmB,CAAC;IACjD,OAAO,EAAE,MAAM,CAAC;CACjB"}

package/dist/cli/release-notes/ship-autodraft.mjs

@@ -0,0 +1,97 @@
+/**
+ * release-notes/ship-autodraft.mjs — apt-ship Section 2.6 helper.
+ *
+ * Deterministic, unit-testable shape: given a feature-registry diff +
+ * personas envelope + persona_filter mode, decide whether the PR body
+ * should grow a `Release note: …` line OR ship should block.
+ *
+ * This module is intentionally pure — the apt-ship SKILL.md body shells
+ * `apt-tools features-audit . --diff-since <base> --json` and feeds the
+ * envelope here. Keeping the decision pure makes TD-4 trivial: fixture in,
+ * decision out, no I/O.
+ */
+import { buildPersonaTierMap, classifyFragment } from './persona-filter.mjs';
+/**
+ * @typedef {Object} FeatureDiffEntry
+ * @property {string} feature_id
+ * @property {string} [area]
+ * @property {string[]} [personas]
+ */
+/**
+ * @typedef {Object} AutodraftInput
+ * @property {FeatureDiffEntry[]} featureDiff
+ * @property {{ personas?: Array<{ ui_json?: unknown }> } | null} personasEnvelope
+ * @property {'primary' | 'primary+secondary' | 'all'} personaFilter
+ * @property {boolean} requirePrField
+ */
+/**
+ * @typedef {{
+ *   status: 'draft',
+ *   line: string,
+ *   persona: string,
+ *   matchedFeatures: string[],
+ * } | {
+ *   status: 'block',
+ *   reason: 'no-feature-match' | 'no-persona-signal',
+ *   message: string,
+ * } | {
+ *   status: 'warn',
+ *   reason: 'no-feature-match' | 'no-persona-signal',
+ *   message: string,
+ * }} AutodraftResult
+ */
+const BLOCK_MESSAGE = '[APT] No release-note signal found — author manual note in PR body or label PR no-notes';
+/**
+ * Compute the autodraft decision.
+ *
+ * @param {AutodraftInput} input
+ * @returns {AutodraftResult}
+ */
+export function decideAutodraft(input) {
+    const tierMap = buildPersonaTierMap(input.personasEnvelope);
+    if (!Array.isArray(input.featureDiff) || input.featureDiff.length === 0) {
+        return failClassify(input, 'no-feature-match');
+    }
+    // Walk the diff; the first feature whose persona resolves into the
+    // filter mode wins. (Multi-persona dispatch is intentionally out of
+    // scope here — host LLM-side narrative can refine per persona; the
+    // CLI just picks a clean signal so ship is decisive.)
+    for (const feature of input.featureDiff) {
+        if (!Array.isArray(feature.personas) || feature.personas.length === 0)
+            continue;
+        for (const personaTag of feature.personas) {
+            const decision = classifyFragment(personaTag, tierMap, input.personaFilter);
+            if (decision.bucket === 'body' && decision.resolvedTier) {
+                return {
+                    status: 'draft',
+                    line: `Release note: ${feature.feature_id} — ships for ${personaTag}.`,
+                    persona: personaTag,
+                    matchedFeatures: [feature.feature_id],
+                };
+            }
+        }
+    }
+    // No persona signal anywhere — features exist but none carry a tag
+    // that the roster + filter accept.
+    return failClassify(input, 'no-persona-signal');
+}
+/**
+ * Translate a failure reason into the right envelope shape based on
+ * `require_pr_field`. require=true → block; require=false → warn (skill
+ * proceeds without the line).
+ *
+ * @param {AutodraftInput} input
+ * @param {'no-feature-match' | 'no-persona-signal'} reason
+ * @returns {AutodraftResult}
+ */
+function failClassify(input, reason) {
+    if (input.requirePrField) {
+        return { status: 'block', reason, message: BLOCK_MESSAGE };
+    }
+    return {
+        status: 'warn',
+        reason,
+        message: `[APT] auto-draft skipped (${reason}) — release_notes.require_pr_field is false; proceeding without a Release note line.`,
+    };
+}
+//# sourceMappingURL=ship-autodraft.mjs.map

package/dist/cli/release-notes/ship-autodraft.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ship-autodraft.mjs","sourceRoot":"","sources":["../../../src/cli/release-notes/ship-autodraft.mjs"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAE5E;;;;;GAKG;AAEH;;;;;;GAMG;AAEH;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,aAAa,GAClB,yFAAyF,CAAA;AAE1F;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,KAAK;IACpC,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAA;IAE3D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzE,OAAO,YAAY,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAA;IAC/C,CAAC;IAED,mEAAmE;IACnE,oEAAoE;IACpE,mEAAmE;IACnE,sDAAsD;IACtD,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QACzC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,SAAQ;QAC/E,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC3C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,aAAa,CAAC,CAAA;YAC3E,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;gBACzD,OAAO;oBACN,MAAM,EAAE,OAAO;oBACf,IAAI,EAAE,iBAAiB,OAAO,CAAC,UAAU,gBAAgB,UAAU,GAAG;oBACtE,OAAO,EAAE,UAAU;oBACnB,eAAe,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC;iBACrC,CAAA;YACF,CAAC;QACF,CAAC;IACF,CAAC;IAED,mEAAmE;IACnE,mCAAmC;IACnC,OAAO,YAAY,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAA;AAChD,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,YAAY,CAAC,KAAK,EAAE,MAAM;IAClC,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QAC1B,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,CAAA;IAC3D,CAAC;IACD,OAAO;QACN,MAAM,EAAE,MAAM;QACd,MAAM;QACN,OAAO,EAAE,6BAA6B,MAAM,sFAAsF;KAClI,CAAA;AACF,CAAC"}

package/dist/cli/route/drift-detect.d.mts

@@ -0,0 +1,20 @@
+/**
+ * Detect whether the workspace source for `@aperant/framework` is ahead
+ * of the installed kernel.
+ *
+ * @param {string} targetDir  Absolute path the route was invoked against.
+ * @param {string|null} installedVersion  The installed kernel's version (semver string), or null when unknown.
+ * @returns {null | {
+ *   source_path: string,
+ *   source_version: string,
+ *   installed_version: string,
+ *   drift: true,
+ * }}
+ */
+export function detectSourceWorkspaceDrift(targetDir: string, installedVersion: string | null): null | {
+    source_path: string;
+    source_version: string;
+    installed_version: string;
+    drift: true;
+};
+//# sourceMappingURL=drift-detect.d.mts.map

package/dist/cli/route/drift-detect.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"drift-detect.d.mts","sourceRoot":"","sources":["../../../src/cli/route/drift-detect.mjs"],"names":[],"mappings":"AAwDA;;;;;;;;;;;;GAYG;AACH,sDATW,MAAM,oBACN,MAAM,GAAC,IAAI,GACT,IAAI,GAAG;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,IAAI,CAAC;CACb,CAuCH"}

package/dist/cli/route/drift-detect.mjs

@@ -0,0 +1,107 @@
+/**
+ * route/drift-detect.mjs — FRAMEWORK-BUG-017 (rung 1 of 3).
+ *
+ * In-band detection of the "installed kernel drifts behind source
+ * workspace" failure mode. When an Aperant contributor self-hosts the
+ * framework out of a monorepo checkout, the kernel at
+ * `.aperant/deps/node_modules/@aperant/framework/` lags behind the
+ * source at `packages/framework/` after every same-PR framework fix.
+ * The SessionStart worker only knows about npm — it cannot tell that
+ * the workspace is ahead of the install.
+ *
+ * This module walks up from `targetDir`, looking for a sibling
+ * `packages/framework/package.json`. When found AND its `version`
+ * differs from the installed kernel's `version`, it returns a synthetic
+ * `update_check`-shaped object so `route.mjs` can surface the chip
+ * immediately — without waiting for the SessionStart hook to fire.
+ *
+ * Safe for the route hot path: synchronous, file-existence checks
+ * only, bounded walk (6 segments max), no network, no spawn.
+ *
+ * Security (Codex review edit 2): the workspace `package.json:version`
+ * is validated against the same semver-shape regex `update-chips.mjs`
+ * uses on the cache. A poisoned workspace `package.json` cannot
+ * propagate a non-semver `latest_version` into the synthesized
+ * `update_check` block.
+ */
+import { existsSync, readFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { compareVersions, SEMVER_RE } from '../util/semver.mjs';
+/** Max directory frames to walk before giving up. */
+const MAX_WALK_DEPTH = 6;
+/**
+ * Walk up from `start`, returning every directory frame including
+ * `start` itself. Stops at the filesystem root or at a depth of
+ * `MAX_WALK_DEPTH` (whichever comes first). The hard cap keeps this
+ * cheap on the route hot path and contains accidental scans on deeply
+ * nested input paths.
+ *
+ * @param {string} start
+ * @returns {string[]}
+ */
+function walkUp(start) {
+    const frames = [];
+    let cur = start;
+    for (let i = 0; i < MAX_WALK_DEPTH; i++) {
+        frames.push(cur);
+        const parent = dirname(cur);
+        if (parent === cur)
+            break;
+        cur = parent;
+    }
+    return frames;
+}
+/**
+ * Detect whether the workspace source for `@aperant/framework` is ahead
+ * of the installed kernel.
+ *
+ * @param {string} targetDir  Absolute path the route was invoked against.
+ * @param {string|null} installedVersion  The installed kernel's version (semver string), or null when unknown.
+ * @returns {null | {
+ *   source_path: string,
+ *   source_version: string,
+ *   installed_version: string,
+ *   drift: true,
+ * }}
+ */
+export function detectSourceWorkspaceDrift(targetDir, installedVersion) {
+    if (!targetDir || typeof targetDir !== 'string')
+        return null;
+    if (!installedVersion || typeof installedVersion !== 'string')
+        return null;
+    if (!SEMVER_RE.test(installedVersion))
+        return null;
+    for (const dir of walkUp(targetDir)) {
+        const candidate = join(dir, 'packages', 'framework', 'package.json');
+        if (!existsSync(candidate))
+            continue;
+        let pkg;
+        try {
+            pkg = JSON.parse(readFileSync(candidate, 'utf-8'));
+        }
+        catch {
+            return null;
+        }
+        // Validate the workspace package is actually @aperant/framework —
+        // guard against false matches on unrelated monorepos that happen
+        // to have a `packages/framework/` directory.
+        if (pkg?.name !== '@aperant/framework')
+            continue;
+        const sourceVersion = pkg?.version;
+        if (typeof sourceVersion !== 'string' || !SEMVER_RE.test(sourceVersion))
+            return null;
+        // Only report drift when workspace source is strictly ahead of the installed
+        // kernel. Equal (already up-to-date) and behind (installed is newer) both
+        // return null — only source-ahead is a drift worth surfacing.
+        if (compareVersions(sourceVersion, installedVersion) <= 0)
+            return null;
+        return {
+            source_path: candidate,
+            source_version: sourceVersion,
+            installed_version: installedVersion,
+            drift: true,
+        };
+    }
+    return null;
+}
+//# sourceMappingURL=drift-detect.mjs.map

package/dist/cli/route/drift-detect.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"drift-detect.mjs","sourceRoot":"","sources":["../../../src/cli/route/drift-detect.mjs"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAClD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAE/D,qDAAqD;AACrD,MAAM,cAAc,GAAG,CAAC,CAAA;AAExB;;;;;;;;;GASG;AACH,SAAS,MAAM,CAAC,KAAK;IACpB,MAAM,MAAM,GAAG,EAAE,CAAA;IACjB,IAAI,GAAG,GAAG,KAAK,CAAA;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,cAAc,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAChB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;QAC3B,IAAI,MAAM,KAAK,GAAG;YAAE,MAAK;QACzB,GAAG,GAAG,MAAM,CAAA;IACb,CAAC;IACD,OAAO,MAAM,CAAA;AACd,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,0BAA0B,CAAC,SAAS,EAAE,gBAAgB;IACrE,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IAC5D,IAAI,CAAC,gBAAgB,IAAI,OAAO,gBAAgB,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IAC1E,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,gBAAgB,CAAC;QAAE,OAAO,IAAI,CAAA;IAElD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,CAAC,CAAA;QACpE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,SAAQ;QAEpC,IAAI,GAAG,CAAA;QACP,IAAI,CAAC;YACJ,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAA;QACnD,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,IAAI,CAAA;QACZ,CAAC;QAED,kEAAkE;QAClE,iEAAiE;QACjE,6CAA6C;QAC7C,IAAI,GAAG,EAAE,IAAI,KAAK,oBAAoB;YAAE,SAAQ;QAEhD,MAAM,aAAa,GAAG,GAAG,EAAE,OAAO,CAAA;QAClC,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC;YAAE,OAAO,IAAI,CAAA;QACpF,6EAA6E;QAC7E,0EAA0E;QAC1E,8DAA8D;QAC9D,IAAI,eAAe,CAAC,aAAa,EAAE,gBAAgB,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;QAEtE,OAAO;YACN,WAAW,EAAE,SAAS;YACtB,cAAc,EAAE,aAAa;YAC7B,iBAAiB,EAAE,gBAAgB;YACnC,KAAK,EAAE,IAAI;SACX,CAAA;IACF,CAAC;IAED,OAAO,IAAI,CAAA;AACZ,CAAC"}

package/dist/cli/util/aperant-section.d.mts

@@ -0,0 +1,34 @@
+/**
+ * Build the full "## Aperant Framework" section, wrapped in the
+ * `<!-- APT:framework-* -->` markers.
+ *
+ * @param {Object} opts
+ * @param {string} opts.canonicalRoot   Absolute path to the framework root
+ *                                       (the directory that contains
+ *                                       `templates/aperant-claude-md-appendix.md`).
+ * @param {string} opts.targetDir       Project root (passed to discoverSkills).
+ * @param {string} [opts.cli]           Host CLI label (forwarded to
+ *                                       getTrustedSkillSources so the install
+ *                                       root for the runtime is included).
+ * @returns {string}                     The full section, including markers
+ *                                       and trailing newline before the
+ *                                       end-marker. No leading newline.
+ */
+export function buildAptSection({ canonicalRoot, targetDir, cli }: {
+    canonicalRoot: string;
+    targetDir: string;
+    cli?: string | undefined;
+}): string;
+/**
+ * Extract the `/apt:<slug>` (or bare `/apt`) row IDs from the
+ * `<!-- APT:framework-* -->` section of an existing instruction file.
+ * Returns `[]` when the file has no APT section.
+ *
+ * Used by `injectInstructionFile` to detect foreign rows that would be
+ * silently clobbered by a regeneration — see `--force-overwrite-catalog`.
+ *
+ * @param {string} text   Full instruction-file contents.
+ * @returns {string[]}    Row IDs in file order, e.g. `['/apt', '/apt:quick', …]`.
+ */
+export function extractAptSectionRowIds(text: string): string[];
+//# sourceMappingURL=aperant-section.d.mts.map

package/dist/cli/util/aperant-section.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aperant-section.d.mts","sourceRoot":"","sources":["../../../src/cli/util/aperant-section.mjs"],"names":[],"mappings":"AAuDA;;;;;;;;;;;;;;;GAeG;AACH,mEAXG;IAAqB,aAAa,EAA1B,MAAM;IAGO,SAAS,EAAtB,MAAM;IACQ,GAAG;CAGzB,GAAU,MAAM,CAqClB;AAED;;;;;;;;;;GAUG;AACH,8CAHW,MAAM,GACJ,MAAM,EAAE,CAoBpB"}

package/dist/cli/util/aperant-section.mjs

@@ -0,0 +1,127 @@
+/**
+ * util/aperant-section.mjs — generator for the CLAUDE.md / AGENTS.md
+ * "## Aperant Framework" section (FRAMEWORK-BUG-023).
+ *
+ * Replaces the previously-hardcoded `APT_SECTION` constant in copy.mjs.
+ * The skill TABLE is rebuilt from `discoverSkills` (filesystem source of
+ * truth — same helper the router uses at runtime) so install and runtime
+ * can never disagree about the catalog.
+ *
+ * Curated-doc risk: the appendix template
+ * (`templates/aperant-claude-md-appendix.md`) still contains hand-written
+ * sub-sections — "Fast Path Guarantee", "Discoverability —
+ * `apt-tools modes list`", "Feature Registry", "Config". These are small
+ * (~30 lines), rarely change, and rot would be visible (sections about
+ * non-existent features). Acceptable tradeoff per plan §Approach (c).
+ */
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { getTrustedSkillSources } from '../config/load.mjs';
+import { discoverSkills } from '../route/skill-discover.mjs';
+const SECTION_START = '<!-- APT:framework-start -->';
+const SECTION_END = '<!-- APT:framework-end -->';
+const SECTION_HEADING = '## Aperant Framework';
+const APPENDIX_REL_PATH = ['templates', 'aperant-claude-md-appendix.md'];
+/**
+ * Escape a SKILL `description` for safe inclusion as a markdown table cell.
+ * The only character we have to defend against is the pipe (`|`) — it
+ * terminates the table column. `apt:triage` ships with a literal `|` in
+ * its description, so this is a live case, not a theoretical one.
+ *
+ * @param {string} text
+ * @returns {string}
+ */
+function escapePipes(text) {
+    return text.replace(/\|/g, '\\|');
+}
+/**
+ * Deterministic sort: the bare `apt` router skill first, then ASCII-sorted
+ * by `name`. The router goes first so the generated table mirrors the user's
+ * mental model — the entry point, then everything reachable from it.
+ *
+ * @param {{ name: string }} a
+ * @param {{ name: string }} b
+ * @returns {number}
+ */
+function sortSkills(a, b) {
+    if (a.name === 'apt' && b.name !== 'apt')
+        return -1;
+    if (b.name === 'apt' && a.name !== 'apt')
+        return 1;
+    return a.name.localeCompare(b.name);
+}
+/**
+ * Build the full "## Aperant Framework" section, wrapped in the
+ * `<!-- APT:framework-* -->` markers.
+ *
+ * @param {Object} opts
+ * @param {string} opts.canonicalRoot   Absolute path to the framework root
+ *                                       (the directory that contains
+ *                                       `templates/aperant-claude-md-appendix.md`).
+ * @param {string} opts.targetDir       Project root (passed to discoverSkills).
+ * @param {string} [opts.cli]           Host CLI label (forwarded to
+ *                                       getTrustedSkillSources so the install
+ *                                       root for the runtime is included).
+ * @returns {string}                     The full section, including markers
+ *                                       and trailing newline before the
+ *                                       end-marker. No leading newline.
+ */
+export function buildAptSection({ canonicalRoot, targetDir, cli }) {
+    const trustedSkillSources = getTrustedSkillSources(targetDir, cli);
+    const discovered = discoverSkills({ targetDir, trustedSkillSources });
+    const skills = discovered.skills
+        .filter((s) => s.user_invocable === true && s.internal === false)
+        .slice()
+        .sort(sortSkills);
+    const rows = skills.map((s) => `| \`/${s.name}\` | ${escapePipes(s.description)} |`);
+    const tableBlock = [
+        '### Available Skills',
+        '| Skill | Description |',
+        '|-------|-------------|',
+        ...rows,
+    ].join('\n');
+    const appendixPath = join(canonicalRoot, ...APPENDIX_REL_PATH);
+    let appendix;
+    try {
+        appendix = readFileSync(appendixPath, 'utf-8').replace(/\n+$/, '');
+    }
+    catch (cause) {
+        const err = new Error(`aperant-section: template not found at ${appendixPath} — re-install the framework package`, { cause });
+        err.code = 'aperant-section.template-missing';
+        throw err;
+    }
+    const body = [SECTION_HEADING, '', appendix, '', tableBlock].join('\n');
+    return `${SECTION_START}\n${body}\n${SECTION_END}`;
+}
+/**
+ * Extract the `/apt:<slug>` (or bare `/apt`) row IDs from the
+ * `<!-- APT:framework-* -->` section of an existing instruction file.
+ * Returns `[]` when the file has no APT section.
+ *
+ * Used by `injectInstructionFile` to detect foreign rows that would be
+ * silently clobbered by a regeneration — see `--force-overwrite-catalog`.
+ *
+ * @param {string} text   Full instruction-file contents.
+ * @returns {string[]}    Row IDs in file order, e.g. `['/apt', '/apt:quick', …]`.
+ */
+export function extractAptSectionRowIds(text) {
+    const match = text.match(/<!-- APT:framework-start -->([\s\S]*?)<!-- APT:framework-end -->/);
+    if (!match)
+        return [];
+    // Strip HTML comments (including multiline) before scanning for row IDs so
+    // that commented-out example rows don't trigger false-positive foreign-row exits.
+    const section = match[1].replace(/<!--[\s\S]*?-->/g, '');
+    const ids = [];
+    // Match table rows whose first cell is `/apt` or `/apt:<slug>` wrapped in
+    // backticks. The leading `|` plus optional whitespace anchors us to a
+    // markdown table cell; the trailing backtick + ` |` anchors the column
+    // boundary so we don't match prose mentions like "the `/apt` router".
+    const rowRe = /^\|\s*`(\/apt(?::[a-z0-9-]+)?)`\s*\|/gm;
+    let m = rowRe.exec(section);
+    while (m !== null) {
+        ids.push(m[1]);
+        m = rowRe.exec(section);
+    }
+    return ids;
+}
+//# sourceMappingURL=aperant-section.mjs.map

package/dist/cli/util/aperant-section.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"aperant-section.mjs","sourceRoot":"","sources":["../../../src/cli/util/aperant-section.mjs"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AAE5D,MAAM,aAAa,GAAG,8BAA8B,CAAA;AACpD,MAAM,WAAW,GAAG,4BAA4B,CAAA;AAChD,MAAM,eAAe,GAAG,sBAAsB,CAAA;AAC9C,MAAM,iBAAiB,GAAG,CAAC,WAAW,EAAE,+BAA+B,CAAC,CAAA;AAExE;;;;;;;;GAQG;AACH,SAAS,WAAW,CAAC,IAAI;IACxB,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;AAClC,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,UAAU,CAAC,CAAC,EAAE,CAAC;IACvB,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,CAAC,CAAC,CAAA;IACnD,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,CAAC,CAAA;IAClD,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;AACpC,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,eAAe,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,EAAE;IAChE,MAAM,mBAAmB,GAAG,sBAAsB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;IAClE,MAAM,UAAU,GAAG,cAAc,CAAC,EAAE,SAAS,EAAE,mBAAmB,EAAE,CAAC,CAAA;IACrE,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM;SAC9B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC;SAChE,KAAK,EAAE;SACP,IAAI,CAAC,UAAU,CAAC,CAAA;IAElB,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,QAAQ,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;IAEpF,MAAM,UAAU,GAAG;QAClB,sBAAsB;QACtB,yBAAyB;QACzB,yBAAyB;QACzB,GAAG,IAAI;KACP,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAEZ,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,EAAE,GAAG,iBAAiB,CAAC,CAAA;IAC9D,IAAI,QAAQ,CAAA;IACZ,IAAI,CAAC;QACJ,QAAQ,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACnE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,GAAG,GAAG,IAAI,KAAK,CACpB,0CAA0C,YAAY,qCAAqC,EAC3F,EAAE,KAAK,EAAE,CACT,CAAA;QACD,GAAG,CAAC,IAAI,GAAG,kCAAkC,CAAA;QAC7C,MAAM,GAAG,CAAA;IACV,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,eAAe,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAEvE,OAAO,GAAG,aAAa,KAAK,IAAI,KAAK,WAAW,EAAE,CAAA;AACnD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAI;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,kEAAkE,CAAC,CAAA;IAC5F,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAA;IACrB,2EAA2E;IAC3E,kFAAkF;IAClF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAA;IACxD,MAAM,GAAG,GAAG,EAAE,CAAA;IACd,0EAA0E;IAC1E,sEAAsE;IACtE,uEAAuE;IACvE,sEAAsE;IACtE,MAAM,KAAK,GAAG,wCAAwC,CAAA;IACtD,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC3B,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;QACnB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACd,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACxB,CAAC;IACD,OAAO,GAAG,CAAA;AACX,CAAC"}

package/dist/cli/util/copy.d.mts

@@ -1,3 +1,30 @@
 export function copyDirRecursive(src: any, dest: any): void;
-export function injectInstructionFile(filePath: any): "updated" | "created";
+/**
+ * Write the (already-generated) APT section into `filePath`. Creates the
+ * file if missing; replaces the section in-place if the markers are
+ * present.
+ *
+ * FRAMEWORK-BUG-023 — before overwriting an existing section, extract the
+ * row IDs in the on-disk file and compare to the row IDs in the freshly
+ * generated section. If the file contains rows that are NOT in the
+ * generated set ("foreign rows"), the regen would silently clobber them.
+ * In that case we abort and let the caller surface a structured error.
+ * The `--force-overwrite-catalog` escape hatch flips `force: true`.
+ *
+ * @param {string} filePath
+ * @param {Object} opts
+ * @param {string} opts.aptSection   Output of buildAptSection() — wrapped
+ *                                    in `<!-- APT:framework-* -->` markers.
+ * @param {boolean} [opts.force=false]
+ *                                    Bypass the foreign-row check.
+ * @returns {{ status: 'created' | 'updated' | 'aborted-foreign-rows', written: boolean, foreignRowIds?: string[] }}
+ */
+export function injectInstructionFile(filePath: string, { aptSection, force }: {
+    aptSection: string;
+    force?: boolean | undefined;
+}): {
+    status: "created" | "updated" | "aborted-foreign-rows";
+    written: boolean;
+    foreignRowIds?: string[];
+};
 //# sourceMappingURL=copy.d.mts.map

package/dist/cli/util/copy.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"copy.d.mts","sourceRoot":"","sources":["../../../src/cli/util/copy.mjs"],"names":[],"mappings":"AAiBA,4DAWC;AAiDD,4EAiBC"}
+{"version":3,"file":"copy.d.mts","sourceRoot":"","sources":["../../../src/cli/util/copy.mjs"],"names":[],"mappings":"AAwBA,4DAWC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,gDARW,MAAM,yBAEd;IAAqB,UAAU,EAAvB,MAAM;IAES,KAAK;CAE5B,GAAU;IAAE,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,sBAAsB,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CA0BlH"}

package/dist/cli/util/copy.mjs

@@ -1,11 +1,18 @@
 /**
  * copy.mjs — filesystem copy + instruction-file injection helpers (C29).
  *
- * `copyDirRecursive` is a pure leaf; `injectInstructionFile` owns the
- * CLAUDE.md / AGENTS.md "<!-- APT:framework-* -->" section template.
+ * `copyDirRecursive` is a pure leaf. `injectInstructionFile` owns the
+ * CLAUDE.md / AGENTS.md "<!-- APT:framework-* -->" section write path.
+ *
+ * The APT section TEXT is no longer assembled here — it is generated by
+ * `util/aperant-section.mjs#buildAptSection` and passed in (FRAMEWORK-BUG-023).
+ * Callers compute the section once (from the filesystem skill catalog) and
+ * hand it to this helper. The defensive foreign-row check stays in this
+ * file so the read/compare/write happens atomically against `filePath`.
  */
 import { copyFileSync, existsSync, mkdirSync, readdirSync, readFileSync, writeFileSync, } from 'node:fs';
 import { join } from 'node:path';
+import { extractAptSectionRowIds } from './aperant-section.mjs';
 export function copyDirRecursive(src, dest) {
     mkdirSync(dest, { recursive: true });
     for (const entry of readdirSync(src, { withFileTypes: true })) {
@@ -19,63 +26,44 @@ export function copyDirRecursive(src, dest) {
         }
     }
 }
-const APT_SECTION = `<!-- APT:framework-start -->
-## Aperant Framework
-
-This project uses the [Aperant Framework](https://github.com/Mikalsen-AI/aperant-cloud-desktop/tree/main/packages/framework) for AI-assisted development.
-
-### Available Skills
-| Skill | Description |
-|-------|-------------|
-| \`/apt\` | Smart router — auto-detects context, routes to the right skill |
-| \`/apt:quick\` | Fast task execution — skip planning, go straight to implementation |
-| \`/apt:discuss\` | Interactive decision-making — assumptions, gray areas, power mode |
-| \`/apt:debug\` | Systematic debugging with persistent state across context resets |
-| \`/apt:scan\` | Scan codebase to build/refresh the feature registry (recommended after setup) |
-| \`/apt:plan\` | Analyze a task, investigate codebase, produce spec + implementation plan |
-| \`/apt:execute\` | Implement subtasks from a plan with atomic commits |
-| \`/apt:verify\` | Score implementation on 4 dimensions (correctness, completeness, quality, coverage) |
-| \`/apt:verify-proof\` | Visual proof verification — screenshots, video, HTML report with feature checklists |
-| \`/apt:review\` | 6-pass inline code review (logic / security / quality / architecture / performance / docs-coherence) with auto-fix pipeline |
-| \`/apt:pr-review\` | Multi-agent PR review — 6 parallel specialists, validator, fixer, self-reviewer (owned / external authorship) |
-| \`/apt:run\` | Full pipeline: plan → execute → verify → review |
-| \`/apt:roundtable\` | 10-agent structured debate for complex decisions |
-| \`/apt:stress-test\` | Scenario simulation to catch gaps in plans |
-| \`/apt:ship\` | Create PR with QA scores and decision traceability |
-| \`/apt:pause\` | Human-initiated session handoff — save state when YOU need to stop (not for agent-initiated bailouts) |
-| \`/apt:resume\` | Restore context from a paused session and route to next action |
-| \`/apt:docs\` | Generate/update documentation verified against the actual codebase |
-| \`/apt:setup\` | Change framework preferences (verification style, multi-model, branching) |
-
-### Feature Registry
-The feature registry (\`.aperant/features/\`) is a living inventory of every interactive
-feature in the app. It's the source of truth for what to verify and review.
-
-- **Created by:** \`/apt:scan\` (initial scan or full refresh)
-- **Updated by:** \`/apt:execute\` post-step (\`apt-tools features-audit --apply-stubs\` auto-registers new UI/core/hook/IPC files per the docs-coherence policy)
-- **Consumed by:** \`/apt:verify-proof\` (generates test cases from registry)
-- **Checked by:** \`/apt:review\` Pass 6 (flags unregistered new components, applies stubs for auto-update policies)
-
-Run \`/apt:scan\` after setting up Aperant on a brownfield project, or after major changes.
-
-### Config
-- Settings: \`.aperant/config.json\` (run \`/apt:setup\` to change)
-- Features: \`.aperant/features/\` (feature registry -- run \`/apt:scan\` to create)
-- State: \`.aperant/state.json\` (execution state)
-- Evidence: \`.aperant/proof/\` (proof reports and screenshots)
-- Prompts: \`.aperant/prompts/\` (agent prompt templates)
-<!-- APT:framework-end -->`;
-export function injectInstructionFile(filePath) {
+/**
+ * Write the (already-generated) APT section into `filePath`. Creates the
+ * file if missing; replaces the section in-place if the markers are
+ * present.
+ *
+ * FRAMEWORK-BUG-023 — before overwriting an existing section, extract the
+ * row IDs in the on-disk file and compare to the row IDs in the freshly
+ * generated section. If the file contains rows that are NOT in the
+ * generated set ("foreign rows"), the regen would silently clobber them.
+ * In that case we abort and let the caller surface a structured error.
+ * The `--force-overwrite-catalog` escape hatch flips `force: true`.
+ *
+ * @param {string} filePath
+ * @param {Object} opts
+ * @param {string} opts.aptSection   Output of buildAptSection() — wrapped
+ *                                    in `<!-- APT:framework-* -->` markers.
+ * @param {boolean} [opts.force=false]
+ *                                    Bypass the foreign-row check.
+ * @returns {{ status: 'created' | 'updated' | 'aborted-foreign-rows', written: boolean, foreignRowIds?: string[] }}
+ */
+export function injectInstructionFile(filePath, { aptSection, force = false }) {
     const existing = existsSync(filePath) ? readFileSync(filePath, 'utf-8') : '';
     if (existing.includes('<!-- APT:framework-start -->')) {
-        // Update existing section in-place
-        const updated = existing.replace(/<!-- APT:framework-start -->[\s\S]*?<!-- APT:framework-end -->/, APT_SECTION);
+        if (!force) {
+            const existingIds = new Set(extractAptSectionRowIds(existing));
+            const generatedIds = new Set(extractAptSectionRowIds(aptSection));
+            const foreignRowIds = [...existingIds].filter((id) => !generatedIds.has(id));
+            if (foreignRowIds.length > 0) {
+                return { status: 'aborted-foreign-rows', written: false, foreignRowIds };
+            }
+        }
+        const updated = existing.replace(/<!-- APT:framework-start -->[\s\S]*?<!-- APT:framework-end -->/, aptSection);
         writeFileSync(filePath, updated, 'utf-8');
-        return 'updated';
+        return { status: 'updated', written: true };
     }
-    // Append
+    // Append (greenfield create — no foreign-row concern).
     const separator = existing.length > 0 ? '\n\n' : '';
-    writeFileSync(filePath, existing + separator + APT_SECTION + '\n', 'utf-8');
-    return 'created';
+    writeFileSync(filePath, existing + separator + aptSection + '\n', 'utf-8');
+    return { status: 'created', written: true };
 }
 //# sourceMappingURL=copy.mjs.map

package/dist/cli/util/copy.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"copy.mjs","sourceRoot":"","sources":["../../../src/cli/util/copy.mjs"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACN,YAAY,EACZ,UAAU,EACV,SAAS,EACT,WAAW,EACX,YAAY,EACZ,aAAa,GACb,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,MAAM,UAAU,gBAAgB,CAAC,GAAG,EAAE,IAAI;IACzC,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACpC,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QACvC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACzB,gBAAgB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;QACpC,CAAC;aAAM,CAAC;YACP,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;QAChC,CAAC;IACF,CAAC;AACF,CAAC;AAED,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BA6CO,CAAA;AAE3B,MAAM,UAAU,qBAAqB,CAAC,QAAQ;IAC7C,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAE5E,IAAI,QAAQ,CAAC,QAAQ,CAAC,8BAA8B,CAAC,EAAE,CAAC;QACvD,mCAAmC;QACnC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAC/B,gEAAgE,EAChE,WAAW,CACX,CAAA;QACD,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;QACzC,OAAO,SAAS,CAAA;IACjB,CAAC;IAED,SAAS;IACT,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;IACnD,aAAa,CAAC,QAAQ,EAAE,QAAQ,GAAG,SAAS,GAAG,WAAW,GAAG,IAAI,EAAE,OAAO,CAAC,CAAA;IAC3E,OAAO,SAAS,CAAA;AACjB,CAAC"}
+{"version":3,"file":"copy.mjs","sourceRoot":"","sources":["../../../src/cli/util/copy.mjs"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACN,YAAY,EACZ,UAAU,EACV,SAAS,EACT,WAAW,EACX,YAAY,EACZ,aAAa,GACb,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAA;AAE/D,MAAM,UAAU,gBAAgB,CAAC,GAAG,EAAE,IAAI;IACzC,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACpC,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QACvC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACzB,gBAAgB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;QACpC,CAAC;aAAM,CAAC;YACP,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;QAChC,CAAC;IACF,CAAC;AACF,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,KAAK,GAAG,KAAK,EAAE;IAC5E,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAE5E,IAAI,QAAQ,CAAC,QAAQ,CAAC,8BAA8B,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC,CAAA;YAC9D,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAC,CAAA;YACjE,MAAM,aAAa,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;YAC5E,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,CAAA;YACzE,CAAC;QACF,CAAC;QACD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAC/B,gEAAgE,EAChE,UAAU,CACV,CAAA;QACD,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;QACzC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC5C,CAAC;IAED,uDAAuD;IACvD,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;IACnD,aAAa,CAAC,QAAQ,EAAE,QAAQ,GAAG,SAAS,GAAG,UAAU,GAAG,IAAI,EAAE,OAAO,CAAC,CAAA;IAC1E,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;AAC5C,CAAC"}

package/dist/cli/util/semver.d.mts

@@ -0,0 +1,17 @@
+/**
+ * Compare two semver-shape strings. Returns -1 / 0 / 1. Ignores
+ * pre-release + build metadata (sufficient for "min version" checks
+ * where we only care about the MAJOR.MINOR.PATCH triple).
+ *
+ * @param {string} a
+ * @param {string} b
+ * @returns {-1 | 0 | 1}
+ */
+export function compareVersions(a: string, b: string): -1 | 0 | 1;
+/**
+ * util/semver.mjs — shared semver helpers used by route/drift-detect.mjs
+ * and util/version-preflight.mjs. Extracted to avoid duplication (QUA-002).
+ */
+/** Semver-shape pattern — mirrors install/update-chips.mjs:64. */
+export const SEMVER_RE: RegExp;
+//# sourceMappingURL=semver.d.mts.map