@juangcarmona/lighthouse 0.10.0 → 0.11.2

package/README.md

@@ -16,6 +16,8 @@ Use `lighthouse reconcile` to preview missing Lighthouse-managed paths in an exi
 
 Use `lighthouse upgrade` to preview a versioned foundation update. The command is dry-run by default, accepts `--scope harness`, `--scope sdlc` or `--scope all`, preserves customized projections and stops when ownership evidence is missing. Add `--apply` only after reviewing the plan, then run `lighthouse verify`.
 
+Agent workflows are opt-in through the SDLC package installer. Initialization does not create an entire worker catalog. Upgrading an older adoption releases workflow ownership while preserving the existing files for explicit review and cleanup.
+
 The harness package owns the baseline command and verification contract. The SDLC package owns lifecycle skills, commands, metacommands, routes and gates, and `lighthouse init` records its selected version in `.lighthouse/sdlc.json`. The UI package owns visual tokens, native recipes, `DESIGN.md` and its agent skill. Selecting `visual-theme` projects the guide and skill into the adopter and enables its deterministic guardrail. Stack profiles own their source templates, guidance and checks; the .NET creator is the packaged entry point for the selected backend profile.
 
 ProductShape, ArcShape and OpenSpec keep their own files and commands. Add them through their supported integration routes when the project needs them, and keep their versions and managed paths visible in the project configuration. In an existing repository, run `lighthouse authorities --adopt-existing` to validate the current ProductShape and ArcShape surfaces without running either initializer; review the dry-run plan and add `--apply` only to record both exact versions in Lighthouse-owned configuration.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@juangcarmona/lighthouse",
-  "version": "0.10.0",
+  "version": "0.11.2",
   "type": "module",
   "description": "Lighthouse adoption and verification CLI",
   "repository": {
@@ -23,7 +23,7 @@
     "@arcshape/cli": "0.1.6",
     "@juangcarmona/lighthouse-ui": "0.2.0",
     "@prodshape/cli": "0.23.0",
-    "@juangcarmona/lighthouse-sdlc": "0.11.0"
+    "@juangcarmona/lighthouse-sdlc": "0.13.0"
   },
   "files": [
     "src/lighthouse.mjs",

package/src/create-dotnet.mjs

@@ -1,6 +1,5 @@
 #!/usr/bin/env node
 import { lstat, mkdir, mkdtemp, readFile, readdir, rename, rm, rmdir, writeFile } from 'node:fs/promises';
-import { createHash } from 'node:crypto';
 import { dirname, join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { createRequire } from 'node:module';
@@ -10,23 +9,6 @@ const templateRoot = resolve(packageRoot, 'assets/dotnet-template');
 const cliPackage = JSON.parse(await readFile(resolve(packageRoot, 'package.json'), 'utf8'));
 const require = createRequire(import.meta.url);
 const sdlcContract = JSON.parse(await readFile(require.resolve('@juangcarmona/lighthouse-sdlc/contract.json'), 'utf8'));
-const sdlcPackageRoot = dirname(require.resolve('@juangcarmona/lighthouse-sdlc/contract.json'));
-const sdlcWorkflowPaths = [
-  '.github/workflows/lighthouse-sdlc-router.yml',
-  '.github/workflows/lighthouse-sdlc-triage.md',
-  '.github/workflows/lighthouse-sdlc-triage.lock.yml',
-  '.github/workflows/lighthouse-sdlc-refine.md',
-  '.github/workflows/lighthouse-sdlc-refine.lock.yml',
-  '.github/workflows/lighthouse-sdlc-propose.md',
-  '.github/workflows/lighthouse-sdlc-propose.lock.yml',
-  '.github/workflows/lighthouse-sdlc-implement.md',
-  '.github/workflows/lighthouse-sdlc-implement.lock.yml',
-  '.github/workflows/lighthouse-sdlc-integrate.md',
-  '.github/workflows/lighthouse-sdlc-integrate.lock.yml',
-  '.github/workflows/lighthouse-sdlc-review.md',
-  '.github/workflows/lighthouse-sdlc-review.lock.yml',
-  '.github/workflows/shared/lighthouse-sdlc-stage.md',
-];
 const args = process.argv.slice(2);
 const target = args[0] ? resolve(args[0]) : null;
 const name = args.includes('--name') ? args[args.indexOf('--name') + 1] : null;
@@ -109,7 +91,7 @@ try {
     product: name, application: { shape: 'backend', stacks: ['dotnet'] }, profiles: ['dotnet-backend'],
     integrations: { productShape: null, arcShape: null },
     packages: { sdlc: { name: '@juangcarmona/lighthouse-sdlc', version: sdlcContract.version } },
-    managed: ['LIGHTHOUSE.md', 'scripts/lighthouse-guard.mjs', '.husky/commit-msg', '.husky/pre-push', '.github/workflows/lighthouse.yml', '.lighthouse/sdlc.json', ...sdlcWorkflowPaths, '.agents/skills/lighthouse-init/SKILL.md', '.lighthouse/upgrade.json', '.lighthouse/commands.json', 'docs/profiles/dotnet/README.md', 'docs/profiles/dotnet/adoption.md', 'docs/profiles/dotnet/architecture.md', 'docs/profiles/dotnet/guardrails.md', 'docs/profiles/dotnet/practices.md', 'docs/profiles/dotnet/testing-and-development.md', 'docs/profiles/dotnet/use-cases.md', '.agents/skills/lighthouse-dotnet/SKILL.md'],
+    managed: ['LIGHTHOUSE.md', 'scripts/lighthouse-guard.mjs', '.husky/commit-msg', '.husky/pre-push', '.github/workflows/lighthouse.yml', '.lighthouse/sdlc.json', '.agents/skills/lighthouse-init/SKILL.md', '.lighthouse/upgrade.json', '.lighthouse/commands.json', 'docs/profiles/dotnet/README.md', 'docs/profiles/dotnet/adoption.md', 'docs/profiles/dotnet/architecture.md', 'docs/profiles/dotnet/guardrails.md', 'docs/profiles/dotnet/practices.md', 'docs/profiles/dotnet/testing-and-development.md', 'docs/profiles/dotnet/use-cases.md', '.agents/skills/lighthouse-dotnet/SKILL.md'],
     repository: {
       layout: ['src', 'docs', 'infra', 'scripts'], publicSite: { enabled: true },
       conventions: { commits: 'conventional', branchPattern: '^(feat|fix|docs|refactor|test|chore|build|ci|perf|revert)/[1-9]\\d*-[a-z0-9]+(?:-[a-z0-9]+)*$' },
@@ -126,14 +108,6 @@ try {
 
   const initialized = (await import('node:child_process')).spawnSync(process.execPath, [resolve(stage, 'scripts/lighthouse.mjs'), 'init'], { cwd: stage, encoding: 'utf8' });
   if (initialized.status !== 0) throw new Error(initialized.stderr || 'Projection generation failed.');
-  await copy(resolve(sdlcPackageRoot, 'workflows'), resolve(stage, '.github/workflows'));
-  const upgradePath = resolve(stage, '.lighthouse/upgrade.json');
-  const upgrade = JSON.parse(await readFile(upgradePath, 'utf8'));
-  for (const path of sdlcWorkflowPaths) {
-    const content = await readFile(resolve(stage, path), 'utf8');
-    upgrade.files[path] = { hash: createHash('sha256').update(content).digest('hex'), scope: 'sdlc' };
-  }
-  await writeFile(upgradePath, `${JSON.stringify(upgrade, null, 2)}\n`);
   if (existing) await rmdir(target);
   await rename(stage, target);
   process.stdout.write(`Created ${name} in ${target}. Run dotnet restore ${name}.slnx, then npm run verify.\n`);

package/src/lighthouse.mjs

@@ -41,22 +41,6 @@ const upgradeStatePath = resolve(root, upgradeStateRelative);
 const layout = ['src', 'docs', 'infra', 'scripts'];
 const sdlcPackage = { name: '@juangcarmona/lighthouse-sdlc', version: installedPackageVersion('@juangcarmona/lighthouse-sdlc', 'contract.json') ?? '0.1.0' };
 const uiPackage = { name: '@juangcarmona/lighthouse-ui', version: installedPackageVersion('@juangcarmona/lighthouse-ui', 'DESIGN.md') ?? '0.1.0' };
-const sdlcWorkflowPaths = Object.freeze([
-  '.github/workflows/lighthouse-sdlc-router.yml',
-  '.github/workflows/lighthouse-sdlc-triage.md',
-  '.github/workflows/lighthouse-sdlc-triage.lock.yml',
-  '.github/workflows/lighthouse-sdlc-refine.md',
-  '.github/workflows/lighthouse-sdlc-refine.lock.yml',
-  '.github/workflows/lighthouse-sdlc-propose.md',
-  '.github/workflows/lighthouse-sdlc-propose.lock.yml',
-  '.github/workflows/lighthouse-sdlc-implement.md',
-  '.github/workflows/lighthouse-sdlc-implement.lock.yml',
-  '.github/workflows/lighthouse-sdlc-integrate.md',
-  '.github/workflows/lighthouse-sdlc-integrate.lock.yml',
-  '.github/workflows/lighthouse-sdlc-review.md',
-  '.github/workflows/lighthouse-sdlc-review.lock.yml',
-  '.github/workflows/shared/lighthouse-sdlc-stage.md',
-]);
 const managedPaths = [
   projection,
   'scripts/lighthouse-guard.mjs',
@@ -64,7 +48,6 @@ const managedPaths = [
   '.husky/pre-push',
   '.github/workflows/lighthouse.yml',
   '.lighthouse/sdlc.json',
-  ...sdlcWorkflowPaths,
   '.agents/skills/lighthouse-init/SKILL.md',
   upgradeStateRelative,
   '.lighthouse/commands.json',
@@ -102,7 +85,7 @@ function managedPathsFor(manifest) {
 function upgradeScopesFor(manifest) {
   return {
     harness: [projection, 'scripts/lighthouse-guard.mjs', '.husky/commit-msg', '.husky/pre-push', '.github/workflows/lighthouse.yml', '.agents/skills/lighthouse-init/SKILL.md', ...((manifest?.profiles ?? []).flatMap((profile) => profileManagedPaths[profile] ?? []))],
-    sdlc: ['.lighthouse/sdlc.json', '.lighthouse/commands.json', ...sdlcWorkflowPaths],
+    sdlc: ['.lighthouse/sdlc.json', '.lighthouse/commands.json'],
   };
 }
 
@@ -111,18 +94,6 @@ function packageAsset(packageName, entry) {
   return readFileSync(path, 'utf8');
 }
 
-function sdlcWorkflowFiles() {
-  const files = {};
-  for (const target of sdlcWorkflowPaths) {
-    try {
-      files[target] = packageAsset('@juangcarmona/lighthouse-sdlc', `workflows/${target.slice('.github/workflows/'.length)}`);
-    } catch {
-      return {};
-    }
-  }
-  return files;
-}
-
 function profileAssets(manifest) {
   const assets = {};
   if ((manifest?.profiles ?? []).includes('visual-theme')) {
@@ -306,11 +277,20 @@ function sdlcControlPlane(manifest) {
 function render(manifest) {
   const repository = normalizeRepository(manifest.repository);
   const publicSite = repository.publicSite.enabled ? 'enabled' : 'disabled';
+  const authorities = [
+    manifest.integrations.productShape ? 'ProductShape is the adopted authority for product intent and Product Changes.' : 'ProductShape is not adopted; follow the repository-owned product intent and decision records.',
+    manifest.integrations.arcShape ? 'ArcShape is the adopted authority for architecture documentation and decisions.' : 'ArcShape is not adopted; follow the repository-owned architecture guidance.',
+  ].join(' ');
+  const publicSiteContract = !repository.publicSite.enabled
+    ? 'The Lighthouse documentation site is disabled.'
+    : Object.values(manifest.integrations).some(version => version === null)
+      ? 'The Lighthouse documentation site is enabled but unavailable until both authorities are adopted and validate successfully.'
+      : 'The Lighthouse documentation site is enabled; publication requires successful ProductShape and ArcShape validation.';
   const selectedSdlc = normalizeSdlcPackage(manifest);
   const sdlcLine = selectedSdlc ? `- SDLC package: \`${selectedSdlc.name}@${selectedSdlc.version}\`\n` : '';
   const selectedUi = manifest.packages?.ui;
   const uiLine = selectedUi ? `- UI package: \`${selectedUi.name}@${selectedUi.version}\`\n` : '';
-  return `<!-- Generated by Lighthouse. Edit lighthouse.json and regenerate this file. -->\n\n# ${manifest.product} repository baseline\n\n- Baseline: \`${manifest.baseline}\`\n- Product: \`${manifest.product}\`\n- Profiles: ${manifest.profiles.length ? manifest.profiles.map((x) => `\`${x}\``).join(', ') : 'none'}\n${sdlcLine}${uiLine}- ProductShape: ${manifest.integrations.productShape ?? 'not adopted'}\n- ArcShape: ${manifest.integrations.arcShape ?? 'not adopted'}\n- Public site: \`${publicSite}\`\n- Repository roots: ${repository.layout.map((x) => `\`${x}/\``).join(', ')}\n- Commit convention: \`${repository.conventions.commits}\`\n\n## Delivery contract\n\nProductShape remains the source of product intent and Product Changes. ArcShape remains the source of architecture documentation and decisions. Lighthouse installs the repository baseline and verifies the selected integrations without replacing either authority.\n\nThe repository keeps source code in \`src/\`, documentation in \`docs/\`, infrastructure in \`infra/\` and repository automation in \`scripts/\`. A project may record a narrow, owned exception, but an initializer never overwrites an existing project file.\n\nThe selected SDLC package owns lifecycle skills, commands, meta-commands, routes and gates. The \`.lighthouse/\` control plane records the selected package, command aliases and host adapters without storing agent runtime data. Use \`lighthouse aliases --format json\` or \`.lighthouse/commands.json\` to discover canonical and short agent commands.\n\nWhen the public site is enabled, its publication is allowed only after ProductShape and ArcShape validate successfully. A missing or invalid authority stops the build before deployment and reports the command that can repair the missing input.\n\nThis file is managed. Put repository-specific policy in its own documentation and keep this projection generated from \`lighthouse.json\`.\n`;
+  return `<!-- Generated by Lighthouse. Edit lighthouse.json and regenerate this file. -->\n\n# ${manifest.product} repository baseline\n\n- Baseline: \`${manifest.baseline}\`\n- Product: \`${manifest.product}\`\n- Profiles: ${manifest.profiles.length ? manifest.profiles.map((x) => `\`${x}\``).join(', ') : 'none'}\n${sdlcLine}${uiLine}- ProductShape: ${manifest.integrations.productShape ?? 'not adopted'}\n- ArcShape: ${manifest.integrations.arcShape ?? 'not adopted'}\n- Public site: \`${publicSite}\`\n- Repository roots: ${repository.layout.map((x) => `\`${x}/\``).join(', ')}\n- Commit convention: \`${repository.conventions.commits}\`\n\n## Delivery contract\n\n${authorities} Lighthouse installs the repository baseline and verifies the selected integrations.\n\nThe repository keeps source code in \`src/\`, documentation in \`docs/\`, infrastructure in \`infra/\` and repository automation in \`scripts/\`. A project may record a narrow, owned exception, but an initializer never overwrites an existing project file.\n\nThe selected SDLC package owns lifecycle skills, commands, meta-commands, routes and gates. The \`.lighthouse/\` control plane records the selected package, command aliases and host adapters without storing agent runtime data. Use \`lighthouse aliases --format json\` or \`.lighthouse/commands.json\` to discover canonical and short agent commands.\n\n${publicSiteContract} This route publishes product and architecture documentation. Application deployment follows the repository's own delivery policy.\n\nThis file is managed. Put repository-specific policy in its own documentation and keep this projection generated from \`lighthouse.json\`.\n`;
 }
 
 function guardrailScript(manifest) {
@@ -457,7 +437,6 @@ function managedFiles(manifest) {
     '.agents/skills/lighthouse-init/SKILL.md': readFileSync(new URL('../assets/skills/init/SKILL.md', import.meta.url), 'utf8'),
   };
   Object.assign(files, profileAssets(manifest));
-  Object.assign(files, sdlcWorkflowFiles());
   const controlPlane = sdlcControlPlane(manifest);
   if (controlPlane) files['.lighthouse/sdlc.json'] = controlPlane;
   files['.lighthouse/commands.json'] = commandAliasProjectionText(commandAliasesProjection());
@@ -542,6 +521,10 @@ function classifyUpgradeFile(path, current, expected, recordedHash) {
   return { classification: 'conflicting', action: 'review', reason: 'ownership is not recorded for this path' };
 }
 
+function isOptionalWorkflow(path) {
+  return /^\.github\/workflows\/lighthouse-sdlc-(router\.yml|(?:triage|refine|propose|implement|integrate|review)\.(?:md|lock\.yml))$/.test(path) || path === '.github/workflows/shared/lighthouse-sdlc-stage.md';
+}
+
 async function planUpgrade(manifest, scopes) {
   const state = await readUpgradeState();
   const problems = stateProblems(state);
@@ -557,6 +540,9 @@ async function planUpgrade(manifest, scopes) {
     const result = classifyUpgradeFile(path, current, expected, recordedHash);
     changes.push({ path, scope: Object.entries(upgradeScopes).find(([, values]) => values.includes(path))?.[0], ...result });
   }
+  if (scopes.has('sdlc') && manifest.managed.some(isOptionalWorkflow)) {
+    changes.push({ path: 'lighthouse.json', scope: 'sdlc', classification: 'adoptable', action: 'update', reason: 'release optional workflow ownership; preserve all workflow files' });
+  }
   if (state?.baseline && state.baseline !== manifest.baseline) {
     changes.unshift({ path: 'baseline', scope: 'harness', classification: 'breaking', action: 'review', reason: `baseline ${state.baseline} is not compatible with ${manifest.baseline}` });
   }
@@ -688,7 +674,11 @@ function validate(manifest) {
   const preSemanticWithoutUpgrade = Array.isArray(manifest.managed)
     && manifest.managed.length === preSemanticWithoutUpgradePaths.length
     && manifest.managed.every((entry, index) => entry === preSemanticWithoutUpgradePaths[index]);
-  if (!legacyManaged && !profilelessManaged && !previousCompleteManaged && !completeManaged && !preSemanticManaged && !preSemanticWithoutUpgrade) {
+  // Earlier foundations installed every workflow. Accept that ownership inventory during upgrade;
+  // the foundation now leaves those files to explicit workflow adoption and never deletes them.
+  const withoutOldWorkflows = Array.isArray(manifest.managed) ? manifest.managed.filter(path => !isOptionalWorkflow(path)) : [];
+  const previousWorkflowManaged = withoutOldWorkflows.length === expectedManagedPaths.length && withoutOldWorkflows.every((path, index) => path === expectedManagedPaths[index]);
+  if (!previousWorkflowManaged && !legacyManaged && !profilelessManaged && !previousCompleteManaged && !completeManaged && !preSemanticManaged && !preSemanticWithoutUpgrade) {
     problems.push(`managed must be ${legacyManagedPaths.join(', ')}, the previous Lighthouse guardrail set or the selected profile set`);
   }
   if ('repository' in manifest) {
@@ -990,7 +980,10 @@ async function applyUpgrade(manifest, plan) {
     for (const change of updates) {
       const target = resolve(root, change.path);
       await mkdir(dirname(target), { recursive: true });
-      await writeTextAtomically(target, files[change.path]);
+      const content = change.path === 'lighthouse.json'
+        ? `${JSON.stringify({ ...manifest, managed: manifest.managed.filter(path => !isOptionalWorkflow(path)) }, null, 2)}\n`
+        : files[change.path];
+      await writeTextAtomically(target, content);
     }
     const next = upgradeState(manifest, files, { ...previous, lastAppliedMigration: `upgrade-${cliPackage.version}` });
     for (const path of Object.keys(next.files)) {