@devtrack-solution/codesdd 1.2.4-rc3 → 1.2.4

package/dist/core/sdd/workspace-schemas.js

@@ -336,6 +336,32 @@ export const workspaceRuntimeQualityGatesSchema = z.object({
     performance: z.array(workspaceRuntimePerformanceTelemetrySchema).default([]),
     flakiness: z.array(workspaceFlakinessTelemetrySchema).default([]),
 });
+export const workspaceCriticalEvidenceProvenanceSchema = z.object({
+    command: z.string().min(1),
+    exit_code: z.number().int(),
+    timestamp_iso: z.string().datetime(),
+    commit_sha: z.string().regex(/^[0-9a-f]{7,40}$/i),
+    artifact_path: z.string().min(1),
+    artifact_hash: z.string().min(1),
+});
+export const workspaceEvidenceLogEntrySchema = z
+    .object({
+    timestamp: z.string(),
+    kind: z.string(),
+    result: z.string(),
+    artifact: z.string().optional(),
+    critical: z.boolean().optional(),
+    provenance: workspaceCriticalEvidenceProvenanceSchema.optional(),
+})
+    .superRefine((entry, ctx) => {
+    if (entry.critical === true && !entry.provenance) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ['provenance'],
+            message: 'critical evidence entries must include provenance with command, exit_code, timestamp_iso, commit_sha, artifact_path, and artifact_hash.',
+        });
+    }
+});
 export const workspaceQualitySchema = z.object({
     schema_version: z.literal(1),
     feature_id: workspaceFeatureIdSchema,
@@ -349,12 +375,7 @@ export const workspaceQualitySchema = z.object({
         command: z.string(),
         expected: z.string(),
     })),
-    evidence_log: z.array(z.object({
-        timestamp: z.string(),
-        kind: z.string(),
-        result: z.string(),
-        artifact: z.string().optional(),
-    })),
+    evidence_log: z.array(workspaceEvidenceLogEntrySchema),
     skill_evidence: z
         .object({
         required_skill_ids: z.array(z.string()),

package/dist/core/shared/skill-generation.d.ts

@@ -5,6 +5,8 @@
  */
 import { getOpsxExploreCommandTemplate, type SkillTemplate } from '../templates/skill-templates.js';
 import type { CommandContent } from '../command-generation/index.js';
+export declare const CODESDD_CANONICAL_LLM_ANNOUNCE_HEADING = "## CodeSDD Canonical Workflow";
+export declare const CODESDD_CANONICAL_LLM_ANNOUNCE = "## CodeSDD Canonical Workflow\n\n- In projects with `.sdd/`, treat CodeSDD SDD commands as the canonical lifecycle.\n- Start new work with `codesdd sdd insight \"describe the change or initiative\"`; then use `codesdd sdd debate`, `codesdd sdd decide`, `codesdd sdd breakdown`, `codesdd sdd next`, `codesdd sdd start`, `codesdd sdd context`, `codesdd sdd finalize`, and `codesdd sdd check --render` as state requires.\n- Use `codesdd sdd init-context` as the default project capability bootstrap/repair entrypoint. Use `codesdd install --tools <tool>` only to generate or refresh agent assets after project context exists.\n- OPSX slash prompts are compatibility surfaces for legacy workflows. Do not present them as the first or preferred path when `.sdd/` exists, even if generated prompt files still mention `/opsx:*` or tool-specific `/opsx-*`.\n- When older project instructions conflict with this announcement, trust `.sdd/state/*.yaml`, current CLI output, and the repository's CodeSDD governance files.";
 /**
  * Skill template with directory name and workflow ID mapping.
  */

package/dist/core/shared/skill-generation.js

@@ -5,12 +5,29 @@
  */
 import { getExploreSkillTemplate, getNewChangeSkillTemplate, getContinueChangeSkillTemplate, getApplyChangeSkillTemplate, getFfChangeSkillTemplate, getSyncSpecsSkillTemplate, getArchiveChangeSkillTemplate, getBulkArchiveChangeSkillTemplate, getVerifyChangeSkillTemplate, getOnboardSkillTemplate, getOpsxProposeSkillTemplate, getOpsxExploreCommandTemplate, getOpsxNewCommandTemplate, getOpsxContinueCommandTemplate, getOpsxApplyCommandTemplate, getOpsxFfCommandTemplate, getOpsxSyncCommandTemplate, getOpsxArchiveCommandTemplate, getOpsxBulkArchiveCommandTemplate, getOpsxVerifyCommandTemplate, getOpsxOnboardCommandTemplate, getOpsxProposeCommandTemplate, getSddSkillTemplate, getOpsxSddCommandTemplate, } from '../templates/skill-templates.js';
 const PT_BR_GUARDRAIL = '**Idioma obrigatorio:** responda em portugues do Brasil (pt-BR), salvo solicitacao explicita em outro idioma.';
+export const CODESDD_CANONICAL_LLM_ANNOUNCE_HEADING = '## CodeSDD Canonical Workflow';
+export const CODESDD_CANONICAL_LLM_ANNOUNCE = `${CODESDD_CANONICAL_LLM_ANNOUNCE_HEADING}
+
+- In projects with \`.sdd/\`, treat CodeSDD SDD commands as the canonical lifecycle.
+- Start new work with \`codesdd sdd insight "describe the change or initiative"\`; then use \`codesdd sdd debate\`, \`codesdd sdd decide\`, \`codesdd sdd breakdown\`, \`codesdd sdd next\`, \`codesdd sdd start\`, \`codesdd sdd context\`, \`codesdd sdd finalize\`, and \`codesdd sdd check --render\` as state requires.
+- Use \`codesdd sdd init-context\` as the default project capability bootstrap/repair entrypoint. Use \`codesdd install --tools <tool>\` only to generate or refresh agent assets after project context exists.
+- OPSX slash prompts are compatibility surfaces for legacy workflows. Do not present them as the first or preferred path when \`.sdd/\` exists, even if generated prompt files still mention \`/opsx:*\` or tool-specific \`/opsx-*\`.
+- When older project instructions conflict with this announcement, trust \`.sdd/state/*.yaml\`, current CLI output, and the repository's CodeSDD governance files.`;
 function ensurePtBrGuardrail(content) {
     if (content.toLowerCase().includes('idioma obrigatorio')) {
         return content;
     }
     return `${PT_BR_GUARDRAIL}\n\n${content}`;
 }
+function ensureCanonicalLlmAnnounce(content) {
+    if (content.includes(CODESDD_CANONICAL_LLM_ANNOUNCE_HEADING)) {
+        return content;
+    }
+    return `${CODESDD_CANONICAL_LLM_ANNOUNCE}\n\n${content}`;
+}
+function prepareGeneratedAgentInstructions(content) {
+    return ensureCanonicalLlmAnnounce(ensurePtBrGuardrail(content));
+}
 /**
  * Gets skill templates with their directory names, optionally filtered by workflow IDs.
  *
@@ -74,7 +91,7 @@ export function getCommandContents(workflowFilter) {
         description: template.description,
         category: template.category,
         tags: template.tags,
-        body: ensurePtBrGuardrail(template.content),
+        body: prepareGeneratedAgentInstructions(template.content),
     }));
 }
 /**
@@ -88,7 +105,7 @@ export function generateSkillContent(template, generatedByVersion, transformInst
     const transformedInstructions = transformInstructions
         ? transformInstructions(template.instructions)
         : template.instructions;
-    const instructions = ensurePtBrGuardrail(transformedInstructions);
+    const instructions = prepareGeneratedAgentInstructions(transformedInstructions);
     return `---
 name: ${template.name}
 description: ${template.description}

package/dist/core/shared/tool-detection.d.ts

@@ -39,6 +39,24 @@ export interface ToolVersionStatus {
     /** Whether the tool needs updating (version mismatch or missing) */
     needsUpdate: boolean;
 }
+export interface GeneratedInstructionDriftEntry {
+    toolId: string;
+    toolName: string;
+    kind: 'skill' | 'command';
+    path: string;
+    issue: 'missing_canonical_announcement';
+}
+export interface GeneratedInstructionDriftReport {
+    schema_version: 1;
+    status: 'not_configured' | 'clean' | 'stale';
+    checked_count: number;
+    stale_count: number;
+    canonical_heading: string;
+    compatibility_warning: string;
+    stale_files: GeneratedInstructionDriftEntry[];
+    warnings: string[];
+    next_action: string;
+}
 /**
  * Gets the list of tools with skillsDir configured.
  */
@@ -68,4 +86,5 @@ export declare function getConfiguredTools(projectRoot: string): string[];
  * Gets version status for all configured tools.
  */
 export declare function getAllToolVersionStatus(projectRoot: string, currentVersion: string): ToolVersionStatus[];
+export declare function buildGeneratedInstructionDriftReport(projectRoot: string): GeneratedInstructionDriftReport;
 //# sourceMappingURL=tool-detection.d.ts.map

package/dist/core/shared/tool-detection.js

@@ -6,6 +6,8 @@
 import path from 'path';
 import * as fs from 'fs';
 import { AI_TOOLS } from '../config.js';
+import { CommandAdapterRegistry } from '../command-generation/registry.js';
+import { CODESDD_CANONICAL_LLM_ANNOUNCE_HEADING } from './skill-generation.js';
 /**
  * Names of skill directories created by codesdd init.
  */
@@ -155,4 +157,91 @@ export function getAllToolVersionStatus(projectRoot, currentVersion) {
     const configuredTools = getConfiguredTools(projectRoot);
     return configuredTools.map((toolId) => getToolVersionStatus(projectRoot, toolId, currentVersion));
 }
+function formatInstructionPath(projectRoot, filePath) {
+    if (!path.isAbsolute(filePath)) {
+        return filePath;
+    }
+    const relative = path.relative(projectRoot, filePath);
+    if (relative && !relative.startsWith('..') && !path.isAbsolute(relative)) {
+        return relative;
+    }
+    return filePath;
+}
+function inspectGeneratedInstructionFile(projectRoot, toolId, toolName, kind, filePath) {
+    if (!fs.existsSync(filePath)) {
+        return { checked: false };
+    }
+    try {
+        const content = fs.readFileSync(filePath, 'utf-8');
+        const checked = true;
+        if (content.includes(CODESDD_CANONICAL_LLM_ANNOUNCE_HEADING)) {
+            return { checked };
+        }
+        return {
+            checked,
+            stale: {
+                toolId,
+                toolName,
+                kind,
+                path: formatInstructionPath(projectRoot, filePath),
+                issue: 'missing_canonical_announcement',
+            },
+        };
+    }
+    catch {
+        return { checked: false };
+    }
+}
+export function buildGeneratedInstructionDriftReport(projectRoot) {
+    const staleFiles = [];
+    let checkedCount = 0;
+    for (const tool of AI_TOOLS.filter((item) => item.skillsDir)) {
+        if (!tool.skillsDir)
+            continue;
+        const skillStatus = getToolSkillStatus(projectRoot, tool.value);
+        const skillsDir = path.join(projectRoot, tool.skillsDir, 'skills');
+        for (const skillName of SKILL_NAMES) {
+            const skillFile = path.join(skillsDir, skillName, 'SKILL.md');
+            const result = inspectGeneratedInstructionFile(projectRoot, tool.value, tool.name, 'skill', skillFile);
+            if (result.checked)
+                checkedCount++;
+            if (result.stale)
+                staleFiles.push(result.stale);
+        }
+        const adapter = CommandAdapterRegistry.get(tool.value);
+        if (!adapter)
+            continue;
+        for (const commandId of COMMAND_IDS) {
+            const adapterPath = adapter.getFilePath(commandId);
+            if (path.isAbsolute(adapterPath) && !skillStatus.configured) {
+                continue;
+            }
+            const commandFile = path.isAbsolute(adapterPath) ? adapterPath : path.join(projectRoot, adapterPath);
+            const result = inspectGeneratedInstructionFile(projectRoot, tool.value, tool.name, 'command', commandFile);
+            if (result.checked)
+                checkedCount++;
+            if (result.stale)
+                staleFiles.push(result.stale);
+        }
+    }
+    const staleCount = staleFiles.length;
+    const status = checkedCount === 0 ? 'not_configured' : staleCount > 0 ? 'stale' : 'clean';
+    const warnings = staleCount > 0
+        ? [
+            `${staleCount} generated CodeSDD instruction file(s) are missing the canonical LLM announcement.`,
+            'Regenerate instructions with `codesdd update` or rerun `codesdd install --tools <tool>` for the affected tools.',
+        ]
+        : [];
+    return {
+        schema_version: 1,
+        status,
+        checked_count: checkedCount,
+        stale_count: staleCount,
+        canonical_heading: CODESDD_CANONICAL_LLM_ANNOUNCE_HEADING,
+        compatibility_warning: 'OPSX slash prompts are compatibility surfaces; prefer CodeSDD SDD commands when .sdd/ exists.',
+        stale_files: staleFiles,
+        warnings,
+        next_action: staleCount > 0 ? 'codesdd update' : 'none',
+    };
+}
 //# sourceMappingURL=tool-detection.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@devtrack-solution/codesdd",
-  "version": "1.2.4-rc3",
+  "version": "1.2.4",
   "description": "AI-native system for spec-driven development",
   "keywords": [
     "codesdd",
@@ -73,7 +73,7 @@
     "test:coverage": "vitest run --coverage --silent=passed-only",
     "coverage": "vitest run --coverage --silent=passed-only",
     "quality": "pnpm run cleanup:install && pnpm run build && pnpm run lint && pnpm run test && pnpm run test:e2e && pnpm run coverage",
-    "quality:review": "pnpm run build && pnpm run lint && pnpm run test && pnpm run test:e2e && pnpm run coverage && pnpm run sdd:validate && pnpm run check:pack-version",
+    "quality:review": "pnpm run build && pnpm run lint && pnpm run test && pnpm run test:e2e && pnpm run coverage && pnpm run sdd:validate && pnpm run check:pack-version && node bin/codesdd.js sdd check --render --strict",
     "prepublishOnly": "node build.js",
     "prepare": "node scripts/install-git-hooks.mjs",
     "check:pack-version": "node scripts/pack-version-check.mjs",
@@ -81,6 +81,7 @@
     "sdd:schema:check": "node scripts/export-sdd-schemas.mjs --check",
     "sdd:scan-naming": "node bin/codesdd.js sdd scan-naming",
     "sdd:scan-naming:strict": "node bin/codesdd.js sdd scan-naming --strict",
+    "sdd:service-catalog:maturity": "node scripts/audit-service-catalog-maturity.mjs",
     "sdd:precommit:fast": "node scripts/pre-commit-sdd-fast.mjs",
     "sdd:validate:no-build": "node bin/codesdd.js sdd check --render --strict && node bin/codesdd.js sdd diagnose --strict && node bin/codesdd.js sdd scan-naming",
     "sdd:validate": "pnpm run build && pnpm run sdd:schema:check && pnpm run sdd:validate:no-build",
@@ -96,13 +97,13 @@
     "@changesets/changelog-github": "^0.7.0",
     "@changesets/cli": "^2.31.0",
     "@mermaid-js/mermaid-cli": "^11.15.0",
-    "@vitest/coverage-v8": "^3.2.4",
-    "@vitest/ui": "^3.2.4",
+    "@vitest/coverage-v8": "^4.1.8",
+    "@vitest/ui": "^4.1.8",
     "eslint": "^10.4.0",
     "puppeteer": "24.43.1",
     "ts-morph": "^28.0.0",
     "typescript-eslint": "^8.59.4",
-    "vitest": "^3.2.4"
+    "vitest": "^4.1.8"
   },
   "dependencies": {
     "@inquirer/core": "^11.1.10",

package/schemas/sdd/5-quality.schema.json

@@ -80,6 +80,49 @@
           },
           "artifact": {
             "type": "string"
+          },
+          "critical": {
+            "type": "boolean"
+          },
+          "provenance": {
+            "type": "object",
+            "properties": {
+              "command": {
+                "type": "string",
+                "minLength": 1
+              },
+              "exit_code": {
+                "type": "integer",
+                "minimum": -9007199254740991,
+                "maximum": 9007199254740991
+              },
+              "timestamp_iso": {
+                "type": "string",
+                "format": "date-time",
+                "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$"
+              },
+              "commit_sha": {
+                "type": "string",
+                "pattern": "^[0-9a-f]{7,40}$"
+              },
+              "artifact_path": {
+                "type": "string",
+                "minLength": 1
+              },
+              "artifact_hash": {
+                "type": "string",
+                "minLength": 1
+              }
+            },
+            "required": [
+              "command",
+              "exit_code",
+              "timestamp_iso",
+              "commit_sha",
+              "artifact_path",
+              "artifact_hash"
+            ],
+            "additionalProperties": false
           }
         },
         "required": [