@juangcarmona/lighthouse 0.10.0 → 0.11.0

package/README.md

@@ -16,6 +16,8 @@ Use `lighthouse reconcile` to preview missing Lighthouse-managed paths in an exi
 
 Use `lighthouse upgrade` to preview a versioned foundation update. The command is dry-run by default, accepts `--scope harness`, `--scope sdlc` or `--scope all`, preserves customized projections and stops when ownership evidence is missing. Add `--apply` only after reviewing the plan, then run `lighthouse verify`.
 
+Agent workflows are opt-in through the SDLC package installer. Initialization does not create an entire worker catalog. Upgrading an older adoption releases workflow ownership while preserving the existing files for explicit review and cleanup.
+
 The harness package owns the baseline command and verification contract. The SDLC package owns lifecycle skills, commands, metacommands, routes and gates, and `lighthouse init` records its selected version in `.lighthouse/sdlc.json`. The UI package owns visual tokens, native recipes, `DESIGN.md` and its agent skill. Selecting `visual-theme` projects the guide and skill into the adopter and enables its deterministic guardrail. Stack profiles own their source templates, guidance and checks; the .NET creator is the packaged entry point for the selected backend profile.
 
 ProductShape, ArcShape and OpenSpec keep their own files and commands. Add them through their supported integration routes when the project needs them, and keep their versions and managed paths visible in the project configuration. In an existing repository, run `lighthouse authorities --adopt-existing` to validate the current ProductShape and ArcShape surfaces without running either initializer; review the dry-run plan and add `--apply` only to record both exact versions in Lighthouse-owned configuration.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@juangcarmona/lighthouse",
-  "version": "0.10.0",
+  "version": "0.11.0",
   "type": "module",
   "description": "Lighthouse adoption and verification CLI",
   "repository": {
@@ -23,7 +23,7 @@
     "@arcshape/cli": "0.1.6",
     "@juangcarmona/lighthouse-ui": "0.2.0",
     "@prodshape/cli": "0.23.0",
-    "@juangcarmona/lighthouse-sdlc": "0.11.0"
+    "@juangcarmona/lighthouse-sdlc": "0.12.0"
   },
   "files": [
     "src/lighthouse.mjs",

package/src/create-dotnet.mjs

@@ -1,6 +1,5 @@
 #!/usr/bin/env node
 import { lstat, mkdir, mkdtemp, readFile, readdir, rename, rm, rmdir, writeFile } from 'node:fs/promises';
-import { createHash } from 'node:crypto';
 import { dirname, join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { createRequire } from 'node:module';
@@ -10,23 +9,6 @@ const templateRoot = resolve(packageRoot, 'assets/dotnet-template');
 const cliPackage = JSON.parse(await readFile(resolve(packageRoot, 'package.json'), 'utf8'));
 const require = createRequire(import.meta.url);
 const sdlcContract = JSON.parse(await readFile(require.resolve('@juangcarmona/lighthouse-sdlc/contract.json'), 'utf8'));
-const sdlcPackageRoot = dirname(require.resolve('@juangcarmona/lighthouse-sdlc/contract.json'));
-const sdlcWorkflowPaths = [
-  '.github/workflows/lighthouse-sdlc-router.yml',
-  '.github/workflows/lighthouse-sdlc-triage.md',
-  '.github/workflows/lighthouse-sdlc-triage.lock.yml',
-  '.github/workflows/lighthouse-sdlc-refine.md',
-  '.github/workflows/lighthouse-sdlc-refine.lock.yml',
-  '.github/workflows/lighthouse-sdlc-propose.md',
-  '.github/workflows/lighthouse-sdlc-propose.lock.yml',
-  '.github/workflows/lighthouse-sdlc-implement.md',
-  '.github/workflows/lighthouse-sdlc-implement.lock.yml',
-  '.github/workflows/lighthouse-sdlc-integrate.md',
-  '.github/workflows/lighthouse-sdlc-integrate.lock.yml',
-  '.github/workflows/lighthouse-sdlc-review.md',
-  '.github/workflows/lighthouse-sdlc-review.lock.yml',
-  '.github/workflows/shared/lighthouse-sdlc-stage.md',
-];
 const args = process.argv.slice(2);
 const target = args[0] ? resolve(args[0]) : null;
 const name = args.includes('--name') ? args[args.indexOf('--name') + 1] : null;
@@ -109,7 +91,7 @@ try {
     product: name, application: { shape: 'backend', stacks: ['dotnet'] }, profiles: ['dotnet-backend'],
     integrations: { productShape: null, arcShape: null },
     packages: { sdlc: { name: '@juangcarmona/lighthouse-sdlc', version: sdlcContract.version } },
-    managed: ['LIGHTHOUSE.md', 'scripts/lighthouse-guard.mjs', '.husky/commit-msg', '.husky/pre-push', '.github/workflows/lighthouse.yml', '.lighthouse/sdlc.json', ...sdlcWorkflowPaths, '.agents/skills/lighthouse-init/SKILL.md', '.lighthouse/upgrade.json', '.lighthouse/commands.json', 'docs/profiles/dotnet/README.md', 'docs/profiles/dotnet/adoption.md', 'docs/profiles/dotnet/architecture.md', 'docs/profiles/dotnet/guardrails.md', 'docs/profiles/dotnet/practices.md', 'docs/profiles/dotnet/testing-and-development.md', 'docs/profiles/dotnet/use-cases.md', '.agents/skills/lighthouse-dotnet/SKILL.md'],
+    managed: ['LIGHTHOUSE.md', 'scripts/lighthouse-guard.mjs', '.husky/commit-msg', '.husky/pre-push', '.github/workflows/lighthouse.yml', '.lighthouse/sdlc.json', '.agents/skills/lighthouse-init/SKILL.md', '.lighthouse/upgrade.json', '.lighthouse/commands.json', 'docs/profiles/dotnet/README.md', 'docs/profiles/dotnet/adoption.md', 'docs/profiles/dotnet/architecture.md', 'docs/profiles/dotnet/guardrails.md', 'docs/profiles/dotnet/practices.md', 'docs/profiles/dotnet/testing-and-development.md', 'docs/profiles/dotnet/use-cases.md', '.agents/skills/lighthouse-dotnet/SKILL.md'],
     repository: {
       layout: ['src', 'docs', 'infra', 'scripts'], publicSite: { enabled: true },
       conventions: { commits: 'conventional', branchPattern: '^(feat|fix|docs|refactor|test|chore|build|ci|perf|revert)/[1-9]\\d*-[a-z0-9]+(?:-[a-z0-9]+)*$' },
@@ -126,14 +108,6 @@ try {
 
   const initialized = (await import('node:child_process')).spawnSync(process.execPath, [resolve(stage, 'scripts/lighthouse.mjs'), 'init'], { cwd: stage, encoding: 'utf8' });
   if (initialized.status !== 0) throw new Error(initialized.stderr || 'Projection generation failed.');
-  await copy(resolve(sdlcPackageRoot, 'workflows'), resolve(stage, '.github/workflows'));
-  const upgradePath = resolve(stage, '.lighthouse/upgrade.json');
-  const upgrade = JSON.parse(await readFile(upgradePath, 'utf8'));
-  for (const path of sdlcWorkflowPaths) {
-    const content = await readFile(resolve(stage, path), 'utf8');
-    upgrade.files[path] = { hash: createHash('sha256').update(content).digest('hex'), scope: 'sdlc' };
-  }
-  await writeFile(upgradePath, `${JSON.stringify(upgrade, null, 2)}\n`);
   if (existing) await rmdir(target);
   await rename(stage, target);
   process.stdout.write(`Created ${name} in ${target}. Run dotnet restore ${name}.slnx, then npm run verify.\n`);

package/src/lighthouse.mjs

@@ -41,22 +41,6 @@ const upgradeStatePath = resolve(root, upgradeStateRelative);
 const layout = ['src', 'docs', 'infra', 'scripts'];
 const sdlcPackage = { name: '@juangcarmona/lighthouse-sdlc', version: installedPackageVersion('@juangcarmona/lighthouse-sdlc', 'contract.json') ?? '0.1.0' };
 const uiPackage = { name: '@juangcarmona/lighthouse-ui', version: installedPackageVersion('@juangcarmona/lighthouse-ui', 'DESIGN.md') ?? '0.1.0' };
-const sdlcWorkflowPaths = Object.freeze([
-  '.github/workflows/lighthouse-sdlc-router.yml',
-  '.github/workflows/lighthouse-sdlc-triage.md',
-  '.github/workflows/lighthouse-sdlc-triage.lock.yml',
-  '.github/workflows/lighthouse-sdlc-refine.md',
-  '.github/workflows/lighthouse-sdlc-refine.lock.yml',
-  '.github/workflows/lighthouse-sdlc-propose.md',
-  '.github/workflows/lighthouse-sdlc-propose.lock.yml',
-  '.github/workflows/lighthouse-sdlc-implement.md',
-  '.github/workflows/lighthouse-sdlc-implement.lock.yml',
-  '.github/workflows/lighthouse-sdlc-integrate.md',
-  '.github/workflows/lighthouse-sdlc-integrate.lock.yml',
-  '.github/workflows/lighthouse-sdlc-review.md',
-  '.github/workflows/lighthouse-sdlc-review.lock.yml',
-  '.github/workflows/shared/lighthouse-sdlc-stage.md',
-]);
 const managedPaths = [
   projection,
   'scripts/lighthouse-guard.mjs',
@@ -64,7 +48,6 @@ const managedPaths = [
   '.husky/pre-push',
   '.github/workflows/lighthouse.yml',
   '.lighthouse/sdlc.json',
-  ...sdlcWorkflowPaths,
   '.agents/skills/lighthouse-init/SKILL.md',
   upgradeStateRelative,
   '.lighthouse/commands.json',
@@ -102,7 +85,7 @@ function managedPathsFor(manifest) {
 function upgradeScopesFor(manifest) {
   return {
     harness: [projection, 'scripts/lighthouse-guard.mjs', '.husky/commit-msg', '.husky/pre-push', '.github/workflows/lighthouse.yml', '.agents/skills/lighthouse-init/SKILL.md', ...((manifest?.profiles ?? []).flatMap((profile) => profileManagedPaths[profile] ?? []))],
-    sdlc: ['.lighthouse/sdlc.json', '.lighthouse/commands.json', ...sdlcWorkflowPaths],
+    sdlc: ['.lighthouse/sdlc.json', '.lighthouse/commands.json'],
   };
 }
 
@@ -111,18 +94,6 @@ function packageAsset(packageName, entry) {
   return readFileSync(path, 'utf8');
 }
 
-function sdlcWorkflowFiles() {
-  const files = {};
-  for (const target of sdlcWorkflowPaths) {
-    try {
-      files[target] = packageAsset('@juangcarmona/lighthouse-sdlc', `workflows/${target.slice('.github/workflows/'.length)}`);
-    } catch {
-      return {};
-    }
-  }
-  return files;
-}
-
 function profileAssets(manifest) {
   const assets = {};
   if ((manifest?.profiles ?? []).includes('visual-theme')) {
@@ -457,7 +428,6 @@ function managedFiles(manifest) {
     '.agents/skills/lighthouse-init/SKILL.md': readFileSync(new URL('../assets/skills/init/SKILL.md', import.meta.url), 'utf8'),
   };
   Object.assign(files, profileAssets(manifest));
-  Object.assign(files, sdlcWorkflowFiles());
   const controlPlane = sdlcControlPlane(manifest);
   if (controlPlane) files['.lighthouse/sdlc.json'] = controlPlane;
   files['.lighthouse/commands.json'] = commandAliasProjectionText(commandAliasesProjection());
@@ -542,6 +512,10 @@ function classifyUpgradeFile(path, current, expected, recordedHash) {
   return { classification: 'conflicting', action: 'review', reason: 'ownership is not recorded for this path' };
 }
 
+function isOptionalWorkflow(path) {
+  return /^\.github\/workflows\/lighthouse-sdlc-(router\.yml|(?:triage|refine|propose|implement|integrate|review)\.(?:md|lock\.yml))$/.test(path) || path === '.github/workflows/shared/lighthouse-sdlc-stage.md';
+}
+
 async function planUpgrade(manifest, scopes) {
   const state = await readUpgradeState();
   const problems = stateProblems(state);
@@ -557,6 +531,9 @@ async function planUpgrade(manifest, scopes) {
     const result = classifyUpgradeFile(path, current, expected, recordedHash);
     changes.push({ path, scope: Object.entries(upgradeScopes).find(([, values]) => values.includes(path))?.[0], ...result });
   }
+  if (scopes.has('sdlc') && manifest.managed.some(isOptionalWorkflow)) {
+    changes.push({ path: 'lighthouse.json', scope: 'sdlc', classification: 'adoptable', action: 'update', reason: 'release optional workflow ownership; preserve all workflow files' });
+  }
   if (state?.baseline && state.baseline !== manifest.baseline) {
     changes.unshift({ path: 'baseline', scope: 'harness', classification: 'breaking', action: 'review', reason: `baseline ${state.baseline} is not compatible with ${manifest.baseline}` });
   }
@@ -688,7 +665,11 @@ function validate(manifest) {
   const preSemanticWithoutUpgrade = Array.isArray(manifest.managed)
     && manifest.managed.length === preSemanticWithoutUpgradePaths.length
     && manifest.managed.every((entry, index) => entry === preSemanticWithoutUpgradePaths[index]);
-  if (!legacyManaged && !profilelessManaged && !previousCompleteManaged && !completeManaged && !preSemanticManaged && !preSemanticWithoutUpgrade) {
+  // Earlier foundations installed every workflow. Accept that ownership inventory during upgrade;
+  // the foundation now leaves those files to explicit workflow adoption and never deletes them.
+  const withoutOldWorkflows = Array.isArray(manifest.managed) ? manifest.managed.filter(path => !isOptionalWorkflow(path)) : [];
+  const previousWorkflowManaged = withoutOldWorkflows.length === expectedManagedPaths.length && withoutOldWorkflows.every((path, index) => path === expectedManagedPaths[index]);
+  if (!previousWorkflowManaged && !legacyManaged && !profilelessManaged && !previousCompleteManaged && !completeManaged && !preSemanticManaged && !preSemanticWithoutUpgrade) {
     problems.push(`managed must be ${legacyManagedPaths.join(', ')}, the previous Lighthouse guardrail set or the selected profile set`);
   }
   if ('repository' in manifest) {
@@ -990,7 +971,10 @@ async function applyUpgrade(manifest, plan) {
     for (const change of updates) {
       const target = resolve(root, change.path);
       await mkdir(dirname(target), { recursive: true });
-      await writeTextAtomically(target, files[change.path]);
+      const content = change.path === 'lighthouse.json'
+        ? `${JSON.stringify({ ...manifest, managed: manifest.managed.filter(path => !isOptionalWorkflow(path)) }, null, 2)}\n`
+        : files[change.path];
+      await writeTextAtomically(target, content);
     }
     const next = upgradeState(manifest, files, { ...previous, lastAppliedMigration: `upgrade-${cliPackage.version}` });
     for (const path of Object.keys(next.files)) {