@cat-factory/prompt-fragments 1.0.92 → 1.1.0

package/README.md

@@ -9,7 +9,12 @@ tenant-scoped [prompt-fragment library](https://github.com/kibertoad/cat-factory
 ## What's here
 
 - `src/collections/*.ts`: fragments authored per topic. Today: `node`, `react`,
-  `acceptance`, `design`, `style`, `migration`. Each exports an array of `PromptFragment`.
+  `acceptance`, `design`, `style`, `migration`, `deployment`. Each exports an array of
+  `PromptFragment`. Shipping a collection does NOT put it in front of an agent: a fragment reaches a
+  run only by being SELECTED (a task's `fragmentIds`, a service frame's `serviceFragmentIds`, or a
+  task-type default), so `appliesTo` narrows the management surface rather than gating a dispatch.
+  `deployment` is opt-in for exactly that reason, and exports `DEPLOYMENT_FRAGMENT_IDS` so a
+  deployment can name the set in one line.
 - `src/index.ts`: merges the collections into a single `FRAGMENTS` registry plus
   `FRAGMENTS_BY_ID` and `getFragment(id)` for O(1) lookup during composition.
 

package/dist/collections/deployment.d.ts

@@ -0,0 +1,27 @@
+import type { PromptFragment } from '@cat-factory/contracts';
+export declare const deploymentFragments: PromptFragment[];
+/**
+ * The ids of the deployment fragments, in catalog order, derived from {@link deploymentFragments}
+ * so it can never drift from the definitions.
+ *
+ * NOTHING SHIPS SELECTING THESE, deliberately, and that is the whole of their delivery story. A
+ * fragment reaches a run only by being SELECTED — a task's own `fragmentIds`, a service frame's
+ * `serviceFragmentIds`, or a task-type default — because the automatic per-run relevance selector
+ * is retired from the run path, so `appliesTo` narrows the management surface and gates nothing at
+ * dispatch. There is no deploy-shaped built-in task type to hang these on, and unioning them onto
+ * `feature` would fold three deployment standards into every feature run on every deployment,
+ * which is the same "long guidance riding every turn of a run that has no use for it" this catalog
+ * exists to avoid.
+ *
+ * So they are OPT-IN, by one of three acts a deployment or a workspace performs:
+ *   - a workspace picks them on a task or on a service frame, in the fragment picker;
+ *   - a deployment makes them the default for a task type of its own,
+ *     `promptFragmentRegistry.registerTaskTypeDefaults('<type>', [...DEPLOYMENT_FRAGMENT_IDS])`;
+ *   - a preset names them in its `defaultFragmentIds`, the way `preset_tech_migration` names
+ *     `MIGRATION_FRAGMENT_IDS`.
+ *
+ * This export is what makes the second and third one line rather than three hand-copied ids that
+ * go stale the first time a fourth fragment joins the collection.
+ */
+export declare const DEPLOYMENT_FRAGMENT_IDS: readonly string[];
+//# sourceMappingURL=deployment.d.ts.map

package/dist/collections/deployment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment.d.ts","sourceRoot":"","sources":["../../src/collections/deployment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAsB5D,eAAO,MAAM,mBAAmB,EAAE,cAAc,EAqE/C,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,uBAAuB,EAAE,SAAS,MAAM,EAAyC,CAAA"}

package/dist/collections/deployment.js

@@ -0,0 +1,108 @@
+// Best-practice fragments for shipping a CONTAINERIZED SERVICE: building and publishing the
+// image, the workload manifest that runs it, and the cross-file contract that wires the workload
+// to traffic. Authored from a recurring class of review finding rather than from a topic list:
+// five of seven findings on one design review came from this class, and every one of them is a
+// rule that is invisible until the cluster refuses the pod (a `runAsNonRoot` container with a
+// username instead of a numeric UID does not start; a `readOnlyRootFilesystem` container with no
+// writable mount dies the first time something touches `/tmp`).
+//
+// Three concerns, one fragment each:
+//   - `deployment.container-image`:   what goes into the image and what gates the push.
+//   - `deployment.workload-runtime`:  the pod-level settings the cluster enforces at admission.
+//   - `deployment.manifest-contract`: the names, labels and ports three files must agree on.
+//
+// Scoped by `appliesTo.agentKinds` rather than by block type: what makes these apply is that the
+// step is DESIGNING or WRITING deployment artifacts, and a service, an API and a frontend all
+// ship the same way. The design-time kinds get them because a round-2 finding here is usually a
+// round-1 omission, which is the whole reason they are standards rather than review comments.
+// `spec-writer` is deliberately absent from all three: it captures BUSINESS requirements only, and
+// a numeric UID is not one.
+export const deploymentFragments = [
+    {
+        id: 'deployment.container-image',
+        version: '1.0.0',
+        title: 'Container image build & publish',
+        category: 'Deployment',
+        summary: 'Immutable digest-pinned tags, a push gated on lint/typecheck/test, non-root by construction, pull-side auth.',
+        body: [
+            'Container image standards:',
+            '- Build for a NUMERIC non-root user: create the user in the image and set `USER <uid>` as a number, not a name. A workload with `runAsNonRoot` set cannot start from an image whose user is a name the kubelet cannot resolve to a uid.',
+            '- Publish IMMUTABLE tags: a content digest, or a tag derived from the commit sha. Never re-push `latest` or a moving tag and never rely on one to roll out; the deployed revision must be identifiable from the manifest alone.',
+            '- Gate the push on the checks: lint, typecheck and the test suite run BEFORE the image is published, not after. A published image is a thing someone can deploy, so an unverified one is a loaded gun in the registry.',
+            '- Order the pipeline push-then-apply: the image must exist in the registry before any manifest referencing it is applied, or the rollout fails on `ImagePullBackOff` for a reason that has nothing to do with the manifest.',
+            '- State the PULL-side auth: a registry is private by default (GHCR included), so the target namespace needs an image-pull credential and the workload must reference it. "The push worked" says nothing about whether the cluster can pull.',
+            '- Keep the runtime image minimal: no build toolchain, no test fixtures, no secrets baked in as layers or build args. Secrets arrive at run time from the platform, never from the image.',
+        ].join('\n'),
+        brief: 'Container image: `USER <numeric uid>` in the image (a username breaks `runAsNonRoot`); publish immutable digest/sha tags, never a moving `latest`; gate the push on lint+typecheck+test; push before applying any manifest that references the image; the target namespace needs a pull credential (private registry is the default, GHCR included); keep the runtime image minimal with no secrets baked in.',
+        appliesTo: {
+            agentKinds: ['architect', 'coder', 'deploy-fixer'],
+        },
+    },
+    {
+        id: 'deployment.workload-runtime',
+        version: '1.0.0',
+        title: 'Workload runtime hardening',
+        category: 'Deployment',
+        summary: 'securityContext that actually starts, a writable mount for a read-only root, probes, resources, pull policy.',
+        body: [
+            'Workload runtime standards:',
+            '- `runAsNonRoot: true` requires a NUMERIC `runAsUser` (and normally `runAsGroup` + `fsGroup`) on the pod or container securityContext. Without one the pod fails admission or the container fails to create; the image having a non-root user is not enough on its own.',
+            '- `readOnlyRootFilesystem: true` requires an explicit writable mount for every path the process writes: at minimum an `emptyDir` at `/tmp`, plus caches, sockets and any scratch directory the runtime uses. Declare them; do not discover them from a crash loop.',
+            '- Drop what is not needed: `allowPrivilegeEscalation: false`, `capabilities.drop: [ALL]`, and no host namespaces, host paths or privileged mode unless the workload genuinely cannot work without them, stated as such.',
+            '- Set `imagePullPolicy` to match the tag: `IfNotPresent` is correct for an immutable digest-pinned tag and is a silent staleness bug for a mutable one. If the tag can move, the manifest is wrong, not the policy.',
+            '- Declare BOTH resource requests and limits, and state the reasoning for the numbers rather than copying a template. Requests are what the scheduler places on; limits are what the kernel enforces. A missing request lands the pod anywhere; a missing memory limit leaves the node to absorb whatever it takes.',
+            '- Declare readiness and liveness probes as the DIFFERENT questions they are: readiness gates traffic, liveness restarts the container. A liveness probe that checks a dependency turns an upstream outage into a restart loop.',
+            '- Give the workload a real shutdown path: handle SIGTERM, stop accepting new work, drain in flight, and set `terminationGracePeriodSeconds` above the real drain time.',
+        ].join('\n'),
+        brief: 'Workload runtime: `runAsNonRoot` needs a NUMERIC `runAsUser`/`runAsGroup` (the image alone is not enough); `readOnlyRootFilesystem` needs an explicit writable mount per written path (at minimum an `emptyDir` at `/tmp`); drop privileges (`allowPrivilegeEscalation: false`, `capabilities.drop: [ALL]`, no host namespaces); `imagePullPolicy` must match tag mutability; declare resource requests AND limits with stated reasoning; readiness gates traffic and liveness restarts, so never probe a dependency in liveness; handle SIGTERM and size `terminationGracePeriodSeconds` to the real drain.',
+        appliesTo: {
+            agentKinds: ['architect', 'coder', 'deploy-fixer', 'environment-analyst'],
+        },
+    },
+    {
+        id: 'deployment.manifest-contract',
+        version: '1.0.0',
+        title: 'Manifest cross-file contract',
+        category: 'Deployment',
+        summary: 'Selectors, labels, port names and namespaces that three files must agree on, from one source of truth.',
+        body: [
+            'Manifest cross-file contract:',
+            'A workload, the Service in front of it and the Ingress routing to that Service are three files carrying ONE contract. Nothing validates it: every mismatch below applies cleanly and fails as a silent 404, a Service with no endpoints, or traffic reaching nothing.',
+            '- The Service `selector` must match the pod TEMPLATE labels, not the labels on the workload object itself. These are different label sets and matching the wrong one is the single most common way to get a Service with zero endpoints.',
+            '- The Ingress `backend.service.name` must be the Service `metadata.name`, and its `port` must name a port the Service actually exposes, by the same NAME the Service gave it where the Service names its ports.',
+            '- Container `containerPort`, Service `targetPort` and the port the process actually listens on must be the same number. Prefer named ports so the agreement is readable rather than three literals to keep in step by hand.',
+            '- Every object must land in the same namespace, stated explicitly. An object defaulting to `default` while its siblings are namespaced is a resource nothing can reach.',
+            '- Derive the shared names and labels from ONE place (a chart value, a kustomize `commonLabels`, a single template variable). Three hand-written copies is not a contract, it is three chances to mistype one.',
+            '- When you change any of these, change every file that names it in the SAME change, and say in your report which files the rename touched.',
+        ].join('\n'),
+        brief: 'Manifest contract: the Service `selector` matches the POD TEMPLATE labels, not the labels on the workload object itself; the Ingress backend names the Service `metadata.name` and a port the Service exposes, by the NAME the Service gave it; `containerPort` / `targetPort` / the listening port are one number, preferably a named port; every object states the same namespace explicitly; derive shared names and labels from ONE source (chart value / `commonLabels`); rename across every file in one change and report which files it touched.',
+        appliesTo: {
+            agentKinds: ['architect', 'coder', 'deploy-fixer', 'environment-analyst'],
+        },
+    },
+];
+/**
+ * The ids of the deployment fragments, in catalog order, derived from {@link deploymentFragments}
+ * so it can never drift from the definitions.
+ *
+ * NOTHING SHIPS SELECTING THESE, deliberately, and that is the whole of their delivery story. A
+ * fragment reaches a run only by being SELECTED — a task's own `fragmentIds`, a service frame's
+ * `serviceFragmentIds`, or a task-type default — because the automatic per-run relevance selector
+ * is retired from the run path, so `appliesTo` narrows the management surface and gates nothing at
+ * dispatch. There is no deploy-shaped built-in task type to hang these on, and unioning them onto
+ * `feature` would fold three deployment standards into every feature run on every deployment,
+ * which is the same "long guidance riding every turn of a run that has no use for it" this catalog
+ * exists to avoid.
+ *
+ * So they are OPT-IN, by one of three acts a deployment or a workspace performs:
+ *   - a workspace picks them on a task or on a service frame, in the fragment picker;
+ *   - a deployment makes them the default for a task type of its own,
+ *     `promptFragmentRegistry.registerTaskTypeDefaults('<type>', [...DEPLOYMENT_FRAGMENT_IDS])`;
+ *   - a preset names them in its `defaultFragmentIds`, the way `preset_tech_migration` names
+ *     `MIGRATION_FRAGMENT_IDS`.
+ *
+ * This export is what makes the second and third one line rather than three hand-copied ids that
+ * go stale the first time a fourth fragment joins the collection.
+ */
+export const DEPLOYMENT_FRAGMENT_IDS = deploymentFragments.map((f) => f.id);
+//# sourceMappingURL=deployment.js.map

package/dist/collections/deployment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment.js","sourceRoot":"","sources":["../../src/collections/deployment.ts"],"names":[],"mappings":"AAEA,4FAA4F;AAC5F,iGAAiG;AACjG,+FAA+F;AAC/F,+FAA+F;AAC/F,8FAA8F;AAC9F,iGAAiG;AACjG,gEAAgE;AAChE,EAAE;AACF,qCAAqC;AACrC,wFAAwF;AACxF,gGAAgG;AAChG,6FAA6F;AAC7F,EAAE;AACF,iGAAiG;AACjG,8FAA8F;AAC9F,gGAAgG;AAChG,8FAA8F;AAC9F,mGAAmG;AACnG,4BAA4B;AAE5B,MAAM,CAAC,MAAM,mBAAmB,GAAqB;IACnD;QACE,EAAE,EAAE,4BAA4B;QAChC,OAAO,EAAE,OAAO;QAChB,KAAK,EAAE,iCAAiC;QACxC,QAAQ,EAAE,YAAY;QACtB,OAAO,EACL,8GAA8G;QAChH,IAAI,EAAE;YACJ,4BAA4B;YAC5B,yOAAyO;YACzO,iOAAiO;YACjO,wNAAwN;YACxN,6NAA6N;YAC7N,6OAA6O;YAC7O,0LAA0L;SAC3L,CAAC,IAAI,CAAC,IAAI,CAAC;QACZ,KAAK,EACH,+YAA+Y;QACjZ,SAAS,EAAE;YACT,UAAU,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,cAAc,CAAC;SACnD;KACF;IACD;QACE,EAAE,EAAE,6BAA6B;QACjC,OAAO,EAAE,OAAO;QAChB,KAAK,EAAE,4BAA4B;QACnC,QAAQ,EAAE,YAAY;QACtB,OAAO,EACL,8GAA8G;QAChH,IAAI,EAAE;YACJ,6BAA6B;YAC7B,yQAAyQ;YACzQ,oQAAoQ;YACpQ,yNAAyN;YACzN,qNAAqN;YACrN,oTAAoT;YACpT,gOAAgO;YAChO,wKAAwK;SACzK,CAAC,IAAI,CAAC,IAAI,CAAC;QACZ,KAAK,EACH,8kBAA8kB;QAChlB,SAAS,EAAE;YACT,UAAU,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,qBAAqB,CAAC;SAC1E;KACF;IACD;QACE,EAAE,EAAE,8BAA8B;QAClC,OAAO,EAAE,OAAO;QAChB,KAAK,EAAE,8BAA8B;QACrC,QAAQ,EAAE,YAAY;QACtB,OAAO,EACL,wGAAwG;QAC1G,IAAI,EAAE;YACJ,+BAA+B;YAC/B,uQAAuQ;YACvQ,0OAA0O;YAC1O,iNAAiN;YACjN,6NAA6N;YAC7N,yKAAyK;YACzK,+MAA+M;YAC/M,4IAA4I;SAC7I,CAAC,IAAI,CAAC,IAAI,CAAC;QACZ,KAAK,EACH,0hBAA0hB;QAC5hB,SAAS,EAAE;YACT,UAAU,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,qBAAqB,CAAC;SAC1E;KACF;CACF,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAsB,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA"}

package/dist/index.d.ts

@@ -6,6 +6,7 @@ export { styleFragments, DEFAULT_DOCUMENT_STYLE_FRAGMENT_IDS } from './collectio
 export { BUILTIN_TASK_TYPE_DEFAULTS } from './task-type-defaults.js';
 export { MIGRATION_FRAGMENT_IDS, migrationFragmentIdsFor } from './collections/migration.js';
 export { DESIGN_CONTEXT_FRAGMENT_ID, withDesignContextFragment } from './collections/design.js';
+export { DEPLOYMENT_FRAGMENT_IDS } from './collections/deployment.js';
 /** Fragments keyed by id for O(1) lookup during prompt composition. */
 export declare const FRAGMENTS_BY_ID: ReadonlyMap<string, PromptFragment>;
 /**

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAY,MAAM,wBAAwB,CAAA;AACtE,OAAO,EAAE,sBAAsB,EAAiC,MAAM,qBAAqB,CAAA;AAkB3F,YAAY,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAE5D,eAAO,MAAM,SAAS,EAAE,cAAc,EAOrC,CAAA;AAKD,OAAO,EAAE,cAAc,EAAE,mCAAmC,EAAE,MAAM,wBAAwB,CAAA;AAG5F,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAA;AAKpE,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAA;AAI5F,OAAO,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AAE/F,uEAAuE;AACvE,eAAO,MAAM,eAAe,EAAE,WAAW,CAAC,MAAM,EAAE,cAAc,CAE/D,CAAA;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,kCAAkC,IAAI,sBAAsB,CAO3E;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAElE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAY,MAAM,wBAAwB,CAAA;AACtE,OAAO,EAAE,sBAAsB,EAAiC,MAAM,qBAAqB,CAAA;AAmB3F,YAAY,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAE5D,eAAO,MAAM,SAAS,EAAE,cAAc,EAQrC,CAAA;AAKD,OAAO,EAAE,cAAc,EAAE,mCAAmC,EAAE,MAAM,wBAAwB,CAAA;AAG5F,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAA;AAKpE,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAA;AAI5F,OAAO,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AAG/F,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAA;AAErE,uEAAuE;AACvE,eAAO,MAAM,eAAe,EAAE,WAAW,CAAC,MAAM,EAAE,cAAc,CAE/D,CAAA;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,kCAAkC,IAAI,sBAAsB,CAO3E;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAElE"}

package/dist/index.js

@@ -1,6 +1,7 @@
 import { PromptFragmentRegistry, defaultPromptFragmentRegistry } from '@cat-factory/kernel';
 import { BUILTIN_TASK_TYPE_DEFAULTS } from './task-type-defaults.js';
 import { acceptanceFragments } from './collections/acceptance.js';
+import { deploymentFragments } from './collections/deployment.js';
 import { designFragments } from './collections/design.js';
 import { migrationFragments } from './collections/migration.js';
 import { nodeFragments } from './collections/node.js';
@@ -13,6 +14,7 @@ export const FRAGMENTS = [
     ...designFragments,
     ...styleFragments,
     ...migrationFragments,
+    ...deploymentFragments,
 ];
 // Re-export the writing-style collection + the document-task style defaults so a consumer (the
 // board service seeding a new document task's fragments, the docs-refresh preset building its
@@ -30,6 +32,9 @@ export { MIGRATION_FRAGMENT_IDS, migrationFragmentIdsFor } from './collections/m
 // context carries a design-origin document reads the guidance automatically, rather than depending on
 // a human having ticked it in a picker basic mode does not show.
 export { DESIGN_CONTEXT_FRAGMENT_ID, withDesignContextFragment } from './collections/design.js';
+// The containerized-service deployment ids, so a deployment can make the shipped set the default
+// for its own task type or preset without restating the ids the collection already owns.
+export { DEPLOYMENT_FRAGMENT_IDS } from './collections/deployment.js';
 /** Fragments keyed by id for O(1) lookup during prompt composition. */
 export const FRAGMENTS_BY_ID = new Map(FRAGMENTS.map((fragment) => [fragment.id, fragment]));
 /**

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,6BAA6B,EAAE,MAAM,qBAAqB,CAAA;AAC3F,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAA;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAA;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAA;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAavD,MAAM,CAAC,MAAM,SAAS,GAAqB;IACzC,GAAG,aAAa;IAChB,GAAG,cAAc;IACjB,GAAG,mBAAmB;IACtB,GAAG,eAAe;IAClB,GAAG,cAAc;IACjB,GAAG,kBAAkB;CACtB,CAAA;AAED,+FAA+F;AAC/F,8FAA8F;AAC9F,8FAA8F;AAC9F,OAAO,EAAE,cAAc,EAAE,mCAAmC,EAAE,MAAM,wBAAwB,CAAA;AAC5F,wEAAwE;AACxE,8CAA8C;AAC9C,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAA;AACpE,+FAA+F;AAC/F,iGAAiG;AACjG,gGAAgG;AAChG,qFAAqF;AACrF,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAA;AAC5F,qGAAqG;AACrG,sGAAsG;AACtG,iEAAiE;AACjE,OAAO,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AAE/F,uEAAuE;AACvE,MAAM,CAAC,MAAM,eAAe,GAAwC,IAAI,GAAG,CACzE,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CACrD,CAAA;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,kCAAkC;IAChD,MAAM,QAAQ,GAAG,6BAA6B,EAAE,CAAA;IAChD,QAAQ,CAAC,WAAW,CAAC,SAAS,CAAC,CAAA;IAC/B,KAAK,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,EAAE,CAAC;QACzE,IAAI,GAAG;YAAE,QAAQ,CAAC,wBAAwB,CAAC,QAAoB,EAAE,GAAG,CAAC,CAAA;IACvE,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,EAAU;IACpC,OAAO,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;AAChC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,6BAA6B,EAAE,MAAM,qBAAqB,CAAA;AAC3F,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAA;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAA;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAA;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAA;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAavD,MAAM,CAAC,MAAM,SAAS,GAAqB;IACzC,GAAG,aAAa;IAChB,GAAG,cAAc;IACjB,GAAG,mBAAmB;IACtB,GAAG,eAAe;IAClB,GAAG,cAAc;IACjB,GAAG,kBAAkB;IACrB,GAAG,mBAAmB;CACvB,CAAA;AAED,+FAA+F;AAC/F,8FAA8F;AAC9F,8FAA8F;AAC9F,OAAO,EAAE,cAAc,EAAE,mCAAmC,EAAE,MAAM,wBAAwB,CAAA;AAC5F,wEAAwE;AACxE,8CAA8C;AAC9C,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAA;AACpE,+FAA+F;AAC/F,iGAAiG;AACjG,gGAAgG;AAChG,qFAAqF;AACrF,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAA;AAC5F,qGAAqG;AACrG,sGAAsG;AACtG,iEAAiE;AACjE,OAAO,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AAC/F,iGAAiG;AACjG,yFAAyF;AACzF,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAA;AAErE,uEAAuE;AACvE,MAAM,CAAC,MAAM,eAAe,GAAwC,IAAI,GAAG,CACzE,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CACrD,CAAA;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,kCAAkC;IAChD,MAAM,QAAQ,GAAG,6BAA6B,EAAE,CAAA;IAChD,QAAQ,CAAC,WAAW,CAAC,SAAS,CAAC,CAAA;IAC/B,KAAK,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,EAAE,CAAC;QACzE,IAAI,GAAG;YAAE,QAAQ,CAAC,wBAAwB,CAAC,QAAoB,EAAE,GAAG,CAAC,CAAA;IACvE,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,EAAU;IACpC,OAAO,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;AAChC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cat-factory/prompt-fragments",
-  "version": "1.0.92",
+  "version": "1.1.0",
   "description": "Curated, versioned best-practice prompt fragments injected into agent system prompts.",
   "repository": {
     "type": "git",
@@ -25,7 +25,7 @@
   },
   "dependencies": {
     "@cat-factory/contracts": "0.324.0",
-    "@cat-factory/kernel": "0.315.0"
+    "@cat-factory/kernel": "0.316.0"
   },
   "devDependencies": {
     "typescript": "7.0.2",