@crossdelta/platform-sdk 0.25.7 → 0.26.1

package/bin/docs/generators/README.md

@@ -10,47 +10,19 @@ generators/
 ├── service.md          # Main service generator instructions
 ├── code-style.md       # Code style, formatting, naming conventions
 ├── testing.md          # Testing rules and patterns
+├── natural-language.md # Natural-language prompt pipeline
 ├── hono-bun.md         # Hono with Bun runtime specifics
 ├── hono-node.md        # Hono with Node.js runtime specifics
 └── nest.md             # NestJS framework specifics
 ```
 
-## How Instructions Are Loaded
-
-Instructions are configured in `package.json` under `generatorConfig.docs`:
-
-```json
-{
-  "generatorConfig": {
-    "docs": {
-      "base": ["service.md", "code-style.md", "testing.md"],
-      "frameworks": {
-        "hono": { "bun": "hono-bun.md", "node": "hono-node.md" },
-        "nest": "nest.md"
-      }
-    }
-  }
-}
-```
+## How Instructions Are Served
 
-**Load Order:**
-1. **Base docs** - Always loaded (service.md, code-style.md, testing.md)
-2. **Framework-specific** - Based on `serviceType` and `packageManager`
-3. **Workspace instructions** - every one of `CLAUDE.md`, `AGENTS.md`, `.github/copilot-instructions.md`, `docs/ai-guidelines.md` that the workspace carries. Missing files are skipped; the token budget is split across the ones found.
+The pf MCP server lists the `.md` files in this directory as the resource `docs://generators` and serves each one as `docs://generators/<name>` (`packages/pf-mcp/src/resources/generator-docs.ts`; the directory is read by `listGeneratorDocs` in `cli/src/core/facade/index.ts`). The build copies the directory to `bin/docs/generators` (`build:copy` in `package.json`). An agent reads the file it needs; nothing is merged or loaded in a fixed order.
 
 ## Adding New Generators
 
 To add instructions for a new framework:
 
 1. Create `<framework>.md` in this directory
-2. Add to `generatorConfig.docs.frameworks` in `package.json`
-3. Follow the existing format from `hono-bun.md` or `nest.md`
-
-## Template Variables
-
-The following variables are replaced at runtime:
-
-| Variable | Description |
-|----------|-------------|
-| `{{scope}}` | Package scope (e.g., `@orderboss`) |
-| `{{AVAILABLE_CONTRACTS}}` | Auto-generated list of existing contracts |
+2. Follow the existing format from `hono-bun.md` or `nest.md`

package/bin/templates/workspace/.claude/rules/cloudevents.md

@@ -53,7 +53,7 @@ Rules for working with the CloudEvents package and event handlers.
 
 ## NATS Migrations
 
-See [Infrastructure](infrastructure.md) for migration conventions (`infra/migrations/`).
+Stream migrations live in `infra/migrations/`.
 
 ## Publishing Checklist
 
@@ -61,7 +61,6 @@ See [Infrastructure](infrastructure.md) for migration conventions (`infra/migrat
 2. Update `CHANGELOG.md`
 3. **Push to remote before publishing** — npm publish reads from the repo
 4. Trigger workflow: `gh workflow run publish-packages.yml -f package=cloudevents`
-5. After publishing: the `sync-templates` pre-commit hook auto-updates downstream `package.json` references
 
 ## Distributed Tracing
 

package/bin/templates/workspace/.github/workflows/build-and-deploy.yml.hbs

@@ -295,6 +295,20 @@ jobs:
           pattern: changed-*
           path: .artifacts
 
+      # download-artifact puts each matching artifact into its own `changed-<scope>/` directory only
+      # when it matches several. A single match is extracted straight into `.artifacts/`, where no
+      # later step looks for it: the scope's image tag then came from GHCR instead of its marker, and
+      # the Studio smoke check and client broadcast were skipped (stage run 38151120673, 11.10.2026).
+      - name: Normalize change marker layout
+        run: |
+          if [ -f .artifacts/metadata.json ]; then
+            SHORT=$(jq -er '.shortName' .artifacts/metadata.json)
+            mkdir -p ".artifacts/changed-${SHORT}"
+            for marker_file in metadata.json scope.txt; do
+              if [ -f ".artifacts/${marker_file}" ]; then mv ".artifacts/${marker_file}" ".artifacts/changed-${SHORT}/"; fi
+            done
+          fi
+
       - name: Resolve scope image tags
         id: resolve_scope_tags
         shell: bash
@@ -371,6 +385,7 @@ jobs:
       # mid-update: DigitalOcean finishes the resize server-side anyway, while Pulumi never writes
       # the result back and leaves a stack lock and a pending operation behind.
       - name: Pulumi up
+        id: pulumi-up
         uses: pulumi/actions@v7
         timeout-minutes: 15
         with:
@@ -417,3 +432,8 @@ jobs:
           done
           curl "${curl_opts[@]}" "${STUDIO_URL}/health" || exit 1
 
+      # The topic carries no `realtime:` prefix: the REST endpoint adds it, and a client subscribed to
+      # `system:deploy` listens on `realtime:system:deploy`. With the prefix spelled out the message
+      # went to `realtime:realtime:system:deploy`, a channel nobody listened on (listener log, stage,
+      # 11.10.2026). `-f` makes a refused broadcast fail the command, so the warning below can fire.
+

package/bin/templates/workspace/.github/workflows/lint-and-tests.yml.hbs

@@ -26,6 +26,14 @@ jobs:
       - name: Run Linter
         run: bun run --if-present lint
 
+      - name: Component manifest
+        run: |
+          git fetch --depth=1 origin main
+          bun run --if-present manifest:check
+
+      - name: Pattern manifest
+        run: bun run --if-present patterns:check
+
   test:
     runs-on: ubuntu-latest
     env:

package/bin/templates/workspace/.github/workflows/publish-packages.yml

@@ -16,9 +16,9 @@ on:
         default: all
         required: true
 
+# id-token: write only where it is used: the publish job sets it itself.
 permissions:
   contents: read
-  id-token: write
 
 jobs:
   determine-packages:
@@ -211,6 +211,25 @@ jobs:
           fi
           echo "✅ Workspace template complete"
 
+      # The kit is published for other people's repositories: nothing of this one may ride along. The check packs
+      # the package as npm receives it and scans every text file against the kit's built-in patterns.
+      - name: Setup Bun for the leak check
+        if: matrix.package.name == 'jackherd' || matrix.package.name == '@crossdelta/agent-kit'
+        # Pinned to a commit: this job holds id-token: write, which npm Trusted Publishing accepts.
+        uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0
+        with:
+          bun-version-file: package.json
+
+      - name: Leak check on the jackherd tarball
+        if: matrix.package.name == 'jackherd'
+        working-directory: ${{ matrix.package.dir }}
+        run: bun scripts/check-package-leaks.ts
+
+      - name: Leak check on the agent-kit shell tarball
+        if: matrix.package.name == '@crossdelta/agent-kit'
+        working-directory: ${{ matrix.package.dir }}
+        run: bun ../jackherd/scripts/check-package-leaks.ts .
+
       - name: Publish to npm
         working-directory: ${{ matrix.package.dir }}
         run: |

package/bin/templates/workspace/CLAUDE.md

@@ -25,7 +25,7 @@ You are assisting in TypeScript-first monorepos using modern TypeScript tooling
 
 - **Test consumers**: When changing a shared package (`packages/*`), run tests in **all consuming services**, not just the package itself. Changes to shared code have blast radius.
 - **Push before publish**: Always push commits to remote before triggering npm publish workflows. The CI reads from the repo, not your local machine.
-- **Pre-commit hooks exist**: The repo has a `sync-templates` hook that auto-updates downstream `package.json` refs after version bumps. Never bypass with `--no-verify`.
+- **Pre-commit hooks**: Never bypass them with `--no-verify`.
 - **Capture lessons**: When a convention or pitfall emerges, propose updating a scoped `.claude/rules/` file. Ask before creating new files. Keep `CLAUDE.md` project-agnostic; domain-specific rules go in scoped files with `paths:`.
 
 ## Monorepo Awareness
@@ -52,6 +52,10 @@ regardless of which file is open, because that cost is paid on every turn.
 Code style and testing conventions are not rules here: the `pf` generators carry their own, and they
 load whenever the generator writes code.
 
+## jackherd
+
+Skills, agents and general rules under `.claude/` come from `jackherd` and are listed in `.jackherd/lock.json`. Project values (languages, plan directory, models, checks) live in `.jackherd/config.json`. Update with `pf agents sync`; a conflicting local edit lands as `<file>.kit-new`. Put project knowledge into `.claude/project/<skill>.md` or a rule beside `.claude/rules/kit/`, so the kit files stay updatable. `pf plans` shows the plan progress of the current sprint.
+
 ## Key Packages
 
 Installed from npm, not vendored into this repo. Read their APIs in `node_modules/`, not from memory.

package/bin/templates/workspace/infra/package.json.hbs

@@ -8,7 +8,7 @@
   },
   "dependencies": {
     "@crossdelta/cloudevents": "^0.10.0",
-    "@crossdelta/infrastructure": "^0.16.0",
+    "@crossdelta/infrastructure": "^0.18.1",
     "{{scope}}/contracts": "workspace:*",
     "@pulumi/digitalocean": "^4.55.0",
     "@pulumi/kubernetes": "^4.21.0",

package/bin/templates/workspace/package.json.hbs

@@ -17,6 +17,14 @@
     "commands": {
       "pulumi": {
         "cwd": "infra"
+      },
+      "agents": {
+        "command": "bunx jackherd",
+        "description": "jackherd: init, sync, check, plans"
+      },
+      "plans": {
+        "command": "bunx jackherd plans",
+        "description": "Live view of the sprint's lanes and their plan progress"
       }
     },
     "paths": {
@@ -45,6 +53,7 @@
     "@biomejs/biome": "2.3.7",
     "@crossdelta/platform-sdk": "latest",
     "dotenv-cli": "^8.0.0",
+    "jackherd": "latest",
     "turbo": "^2.5.6"
   },
   "packageManager": "{{packageManagerVersion}}",

package/bin/templates/workspace/packages/contracts/README.md.hbs

@@ -89,7 +89,7 @@ Contracts are **auto-generated** when you create event handlers:
 
 ```bash
 # 1. Create service with event handler
-pf new hono-micro notifications --ai -d "Sends emails on order.created events"
+pf new hono-micro notifications
 
 # 2. Add event (creates contract, mock, handler)
 pf cloudevents add order.created --service services/notifications

package/bin/templates/workspace/packages/contracts/package.json.hbs

@@ -20,7 +20,7 @@
   },
   "dependencies": {
     "@crossdelta/cloudevents": "^0.10.0",
-    "@crossdelta/infrastructure": "^0.16.0",
+    "@crossdelta/infrastructure": "^0.18.1",
     "zod": "^4.0.0"
   },
   "devDependencies": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crossdelta/platform-sdk",
-  "version": "0.25.7",
+  "version": "0.26.1",
   "description": "Platform toolkit for event-driven microservices — keeping code and infrastructure in lockstep.",
   "keywords": [
     "cli",
@@ -65,42 +65,6 @@
     "name": "Marcelle Hövelmanns",
     "email": "mail@hoevelmanns.io"
   },
-  "generatorConfig": {
-    "docs": {
-      "base": [
-        "service.md",
-        "code-style.md",
-        "testing.md"
-      ],
-      "frameworks": {
-        "hono": {
-          "bun": "hono-bun.md",
-          "node": "hono-node.md"
-        },
-        "nest": "nest.md"
-      }
-    },
-    "serviceTypes": {
-      "hono": {
-        "commandType": "hono-micro",
-        "entryPoint": "src/index.ts",
-        "skipFiles": [
-          "package.json",
-          "tsconfig.json",
-          "Dockerfile"
-        ]
-      },
-      "nest": {
-        "commandType": "nest-micro",
-        "entryPoint": "src/main.ts",
-        "skipFiles": [
-          "package.json",
-          "tsconfig.json",
-          "Dockerfile"
-        ]
-      }
-    }
-  },
   "scripts": {
     "dev": "tsup --watch",
     "build:copy": "cp cli/integration.collection.json bin/integration.collection.json && rm -rf bin/templates && mkdir -p bin/templates && cp -r cli/src/commands/create/workspace/templates bin/templates/workspace && cp -r cli/src/commands/create/hono-microservice/templates bin/templates/hono-microservice && cp -r cli/src/commands/create/nest-microservice/templates bin/templates/nest-microservice && mkdir -p bin/docs/generators && cp -r docs/generators/* bin/docs/generators/",
@@ -115,20 +79,15 @@
   },
   "schematics": "./dist/schematics/collection.json",
   "dependencies": {
-    "@ai-sdk/anthropic": "^2.0.53",
-    "@ai-sdk/openai": "^2.0.79",
     "@angular-devkit/core": "^21.0.0",
     "@crossdelta/cloudevents": "^0.10.0",
     "@crossdelta/flowcore": "^0.1.2",
     "@faker-js/faker": "^9.8.0",
-    "@inquirer/prompts": "^7.5.0",
     "@listr2/prompt-adapter-enquirer": "^2.0.15",
-    "ai": "^5.0.108",
     "chalk": "^5.4.1",
     "chokidar": "^5.0.0",
     "cli-table3": "^0.6.5",
     "commander": "^13.1.0",
-    "dotenv": "^17.2.3",
     "enquirer": "^2.4.1",
     "execa": "^9.5.2",
     "fs-extra": "^11.3.0",
@@ -136,13 +95,11 @@
     "handlebars": "^4.7.8",
     "jiti": "^2.6.1",
     "listr2": "^8.3.2",
-    "ora": "^8.2.0",
     "package-up": "^5.0.0",
     "rimraf": "^6.1.2",
     "terminal-link": "^4.0.0",
-    "ts-morph": "^27.0.0",
     "zod": "^4.0.0",
-    "@crossdelta/infrastructure": "^0.16.0"
+    "@crossdelta/infrastructure": "^0.18.1"
   },
   "peerDependencies": {
     "@nestjs/schematics": "^11.0.5",

package/schemas/service-types.schema.json

@@ -1,33 +0,0 @@
-{
-  "$schema": "http://json-schema.org/draft-07/schema#",
-  "title": "Service Types Configuration",
-  "description": "Configuration for different microservice types in the Platform SDK",
-  "type": "object",
-  "properties": {
-    "serviceTypes": {
-      "type": "object",
-      "additionalProperties": {
-        "type": "object",
-        "required": ["commandType", "entryPoint", "skipFiles"],
-        "properties": {
-          "commandType": {
-            "type": "string",
-            "description": "CLI command type for scaffolding (e.g., 'hono-micro', 'nest-micro')"
-          },
-          "entryPoint": {
-            "type": "string",
-            "description": "Relative path to the service entry point file"
-          },
-          "skipFiles": {
-            "type": "array",
-            "description": "Files that should not be overwritten by AI generation",
-            "items": {
-              "type": "string"
-            }
-          }
-        }
-      }
-    }
-  },
-  "required": ["serviceTypes"]
-}