@metaobjectsdev/sdk 0.21.6 → 0.22.0-rc.1

package/agent-context/README.md

@@ -9,7 +9,7 @@ the slim always-on Markdown (`.metaobjects/AGENTS.md` + `CLAUDE.md`) and the six
 - `servers/<lang>.meta.json` — per-server install + codegen command (drives the always-on).
 - `templates/always-on.md.mustache` — the slim always-on body (`{{stackLine}}`, `{{codegenCommand}}`).
 - `skills/<skill>/SKILL.md` — universal skill body.
-- `skills/<skill>/references/<token>.md` — language fragment; installed iff `<token>` is in the stack.
+- `skills/<skill>/references/<token>.md` — language/framework or concern fragment; installed iff `<token>` is in the stack (`Stack.tokens`; concern tokens are OBSERVED from project state, e.g. `requirements` for a project declaring `requirement.*` nodes — see `SDK`'s `CONCERN_TOKENS`).
 
 The **scaffolded** set is exactly the six skills in the SDK's `SKILL_NAMES`
 (`src/agent-context/types.ts`) — the assembler emits only those. `skills/`

package/agent-context/skills/metaobjects-audit/references/requirements.md

@@ -0,0 +1,60 @@
+# Requirements — the audit dimension
+
+This project declares `requirement.*` nodes, so the ledger is an auditable surface. Audit it
+for **truthfulness**, not volume. A large ledger that lies is worse than a small one that
+does not, because every later reader trusts it.
+
+Run `meta verify` first. It settles referential integrity mechanically — do not spend audit
+effort re-deriving what a green run already proves.
+
+## What verify has already proven (do not re-check by hand)
+
+Links sit at or below the L4 floor, nesting agrees with levels, `@status` values are legal,
+references resolve (with dangling allowed on `abandoned`/`superseded`), and named
+`@verifiedBy` tests exist and are not skipped.
+
+## What only a human or an agent reading the code can catch
+
+**1. Statuses that are false.** The highest-value finding in the whole dimension. A
+requirement marked `live` whose implementation was gutted; one marked `partial` that is now
+complete; one marked `abandoned` whose code is demonstrably still running. Sample the claims
+and read the nodes. `status` is the only payload with controlled evidence behind it — the
+resurrection protection rides entirely on it being true.
+
+**2. Non-violable statements.** Every requirement must state what breaking it looks like.
+*"Every entity has a uuid primary key"* is violable — point at one with a composite key.
+*"Things are persisted"* is not; it is a description wearing a requirement's shape. Flag
+these: they inflate the ledger while proving nothing.
+
+**3. Claim-padding.** An entity appended to an existing unrelated requirement's
+`implementedBy` purely to silence the coverage warning. The claim resolves, so verify is
+happy, but it carries no information about what the entity is *for*. Look for entities whose
+only claim is a high-fan-out architectural rule when they plainly have product meaning.
+
+**4. Misfiled kind.** `functional` is checked by EXISTENCE, `architectural` by UNIVERSALITY —
+opposite polarity, and nothing mechanical catches a misfile. The discriminator: did this
+exist because someone asked for something (functional), or because every entity here looks
+like this (architectural)? An architectural entry with one claimant is usually a misfiled
+functional one.
+
+**5. Levels used as decoration.** L1–L3 are organisational and must never reference the
+model. If the tree is flat, or every entry is L3, the levels are carrying no information and
+should be simplified rather than defended.
+
+## Scope — do NOT flag these as defects
+
+- **Unclaimed `object.value` / `object.projection`.** Exempt by design: a value is a shape, a
+  projection derives from a claimable entity.
+- **Fields, views, validators and identities without their own requirement.** Member-grain
+  coverage is explicitly rejected — plumbing members are covered by architectural
+  requirements with high fan-out. L5 exists so a member claim *can* be made where it means
+  something, never so every member must carry one.
+- **Dangling links on `abandoned` / `superseded`.** Correct, and load-bearing.
+- **A project with no requirements at all.** The feature is opt-in by declaration; absence is
+  not a finding.
+
+## Reporting
+
+Report findings as claims to verify, not as a score. "These 4 requirements are marked `live`
+and I could not find their implementation" is actionable; "ledger maturity: 62%" is not, and
+invites optimising the number.

package/agent-context/skills/metaobjects-authoring/SKILL.md

@@ -974,6 +974,10 @@ mapping).
       - field.int: { name: quantity, required: true }
 ```
 
+## Requirements — capability ledger (opt-in)
+
+If this project declares `requirement.functional` / `requirement.architectural` nodes, read `references/requirements.md` for the full authoring rules.
+
 ---
 
 For non-trivial schema design, use `/superpowers:brainstorming` if installed;

package/agent-context/skills/metaobjects-authoring/references/requirements.md

@@ -0,0 +1,69 @@
+# Requirements — `requirement.functional` / `requirement.architectural`
+
+Capabilities are **metadata**, declared in `metaobjects/` beside the entities they
+describe. Read the existing requirement nodes before designing anything. Two rules matter
+more than the rest.
+
+**1. When you retire something, record it — at that moment.** Set the requirement's
+`status` to `abandoned` (built, then deliberately dropped) or `superseded` (something else
+does it now — name it in `supersededBy`), in the same change that removes the code.
+
+This is the one thing a requirement does that the rest of the model cannot. Given a brief
+matching a retired feature, agents reading only the model proposed **reviving** it 24 times
+out of 24, each believing it was reusing. A retired feature is *more* attractive than a
+live one: purpose-built for exactly the request, never complicated by production.
+
+Leaving a dangling `implementedBy` on an `abandoned` or `superseded` requirement is
+**correct** — those nodes are supposed to be gone, and `verify` allows it deliberately. On
+`live` or `partial` the same dangling reference is an error: the model moved and the
+requirement went stale.
+
+**2. When you add an entity, claim it.** Every `object.entity` should appear in some
+requirement's `implementedBy`, or `verify` says so.
+
+**Every requirement states its violation.** One sentence: what breaking it looks like.
+*"Every entity has a uuid primary key"* is violable — point at one with a composite string
+key. *"Things are persisted"* is not, and is a description rather than a requirement. Same
+rule kills *"the system is reliable"*. If you cannot say what breaking it looks like,
+delete it.
+
+**Hierarchy is nesting, and links live at the bottom.** L1 solution, L2 segment (an
+application or library), L3 service — these never reference the model. **L4** binds an
+object, **L5** binds a field, view or identity. `implementedBy` above L4 is an error.
+Regrouping *moves* a node; it does not edit a parent string.
+
+**Architectural requirements are the other kind.** `requirement.architectural` carries no
+level — a uuid-PK rule, change attribution, tenant scoping. Its check is *universality*
+rather than existence, so one that is `live` and claimed by nothing fails: a policy
+declared and applied to nothing.
+
+`@status` is a closed enum enforced by the loader, so a typo fails the load rather than
+silently disabling the entry.
+
+```yaml
+- requirement.functional:
+    name: Pacing
+    level: 3
+    status: live
+    statement: "Scene pacing follows story beats"
+    violation: "A scene that advances on a clock rather than on the story"
+    children:
+      - requirement.functional:
+          name: TurnTimer
+          level: 4
+          status: abandoned          # retired deliberately -- do NOT revive
+          statement: "Pacing was driven by a per-turn wall-clock timer"
+          violation: "Pacing driven by elapsed time instead of beat completion"
+          supersededBy: BeatProgression
+          implementedBy: ["game::turn::TurnTimer"]   # gone, and that is the point
+
+- requirement.architectural:
+    name: UuidPrimaryKeys
+    status: live
+    statement: "Every entity has a uuid primary key"
+    violation: "An entity keyed by a composite string"
+    implementedBy: ["game::turn::Turn", "game::world::Location"]
+```
+
+There is **no `satisfies:` on a field or entity** — links live on the requirement node, not
+on the nodes it claims. Full reference: the repo's `spec/capability-ledger.md`.

package/agent-context/skills/metaobjects-fit-assessment/SKILL.md

@@ -13,6 +13,35 @@ truth. Its sibling is `metaobjects-audit` (POST-adoption; scaffolded). Design +
 retro-test validation: `docs/superpowers/specs/2026-07-12-metaobjects-fit-assessment-design.md`.
 How to run it: point a high-end LLM at a target repo + this file (e.g. paste it, or
 fetch it from GitHub / metaobjects.dev) and let it produce the report below.
+
+DEFERRED, ON PURPOSE — capability requirements (`requirement.functional` /
+`requirement.architectural`). This skill deliberately says NOTHING about them, and that is a
+decision, not an omission.
+
+Why not now: (1) the grounding rule above requires every capability claim be verifiable
+against the CURRENT RELEASE, and `requirement.*` is not in one yet. (2) The signal->feature
+mapping is unvalidated against this skill's own kill criterion: the controlled evidence
+(0/24 model-only revivals) measures POST-adoption model-reading, and the feature's premise --
+that the disproof lives nowhere in the model -- cuts against pre-adoption detectability. If
+the reasoning was never written down, there is nothing for an evidence-cited assessment to
+cite. (3) Whether anyone fills the ledger in is itself untested; advertising it pre-adoption
+is the brochure failure this skill exists to avoid.
+
+TRIGGER to revisit — the release carrying `requirement.*` has shipped, AND either:
+  Arm A  a dogfooded project's `abandoned`/`superseded` entries are shown, retrospectively,
+         to have been discoverable PRE-adoption from repo evidence at file:line standard
+         (removal commit, dead flag, do-not-reintroduce comment);
+  Arm B  a team that adopted via this assessment hits a resurrection the ledger would have
+         caught, or asks why the assessment never mentioned it.
+
+ANTI-TRIGGER (defer -> never): if dogfooded entries trace only to tribal knowledge with no
+repo artifact, this assessment structurally cannot speak to the feature as a finding.
+
+SHAPE, pre-committed so it is not re-litigated as new machinery: ONE P7 hunt line in the
+existing grammar (observable signal -> vocabulary + metadata_sketch), gated like every other
+P7 line by "if a hunt line has hits, it must appear" -- so a repo with no retirement scar
+tissue produces zero requirements content. NOT a fifth pillar, NOT a P4 rubric row, NOT an
+R0 verdict line: no verdict may turn on it.
 -->
 
 # MetaObjects Fit & Migration Assessment

package/agent-context/skills/metaobjects-verify/SKILL.md

@@ -66,6 +66,13 @@ paired with the advisory anti-pattern pass above, never all three subverbs. Trea
 bare run as a smoke test: the real done-check is running the subverbs your project
 uses explicitly — `verify --codegen`, and, where a DB exists, `verify --db <url>`.
 
+## Requirements are checked on every run
+
+If this project declares `requirement.functional` / `requirement.architectural` nodes, read
+`references/requirements.md`: requirements are metadata, so they are checked on **every**
+`meta verify` — there is no subverb — and the severity of a broken link depends on the
+requirement's `@status`, which is the part that surprises people reading a failure.
+
 ## The `verify` subverbs
 
 `verify` has three drift checks. Run them in CI.

package/agent-context/skills/metaobjects-verify/references/requirements.md

@@ -0,0 +1,54 @@
+# Requirements — what `meta verify` checks
+
+This project declares `requirement.*` nodes, so `verify` checks them. **There is no
+subverb**: requirements are metadata, so they are checked on *every* `meta verify` run.
+
+## The split, and why it matters when you read a failure
+
+| | owns |
+|---|---|
+| **loader** | `@status` enum, required attrs, child rules, levels — unconditional |
+| **`verify`** | `@implementedBy` / `@verifiedBy` resolution — **severity depends on `@status`** |
+
+A typo'd `@status` fails the **load** ("failed to load metadata"), before verify runs. If you
+see that, no other diagnostic in the run is trustworthy — fix it first and re-run.
+
+## The status asymmetry — the one that surprises people
+
+The **same** unresolved `@implementedBy` reference is:
+
+- an **error** on `live` / `partial` — the model moved and the requirement is stale;
+- **allowed** on `abandoned` / `superseded` — those nodes are *supposed* to be gone. That is
+  the entry doing its job, not drift.
+
+So do not "fix" a dangling reference on an abandoned requirement by deleting it. Deleting it
+destroys the record that something was deliberately retired, which is the single thing this
+mechanism exists to preserve.
+
+## Exit codes
+
+| situation | exit |
+|---|---|
+| clean tree, or no `requirement.*` nodes at all | 0 |
+| dangling `@implementedBy` on `live`/`partial` | 1 |
+| the same reference on `abandoned`/`superseded` | 0 |
+| `@implementedBy` above the L4 link floor | 1 |
+| live `requirement.architectural` claimed by nothing | 1 |
+| `@verifiedBy` naming a test that exists nowhere | 1 |
+| `@verifiedBy` naming a test that is **skipped** | 0 (warning) |
+| an entity no requirement claims | 0 (warning) |
+
+## What a green run does NOT prove
+
+It proves **referential integrity**: statuses parse, levels are in range, links sit at or
+below the floor, references resolve, named tests exist and are not skipped.
+
+It cannot prove a status is **true**, or that a node genuinely implements the requirement
+claiming it. No test can. That judgement is yours.
+
+Coverage is also narrower than the name suggests: it is checked at **entity grain only** —
+`object.value` and `object.projection` are exempt, and fields, views, validators and
+identities are never required to be claimed. Green means "every entity is claimed by
+something", not "every node is described".
+
+Full reference: the repo's `spec/capability-ledger.md`.

package/dist/agent-context/assemble.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"assemble.d.ts","sourceRoot":"","sources":["../../src/agent-context/assemble.ts"],"names":[],"mappings":"AAEA,OAAO,EAAgD,KAAK,aAAa,EAAE,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAqC1G,qFAAqF;AACrF,wBAAgB,QAAQ,CAAC,IAAI,EAAE;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,GAAG,aAAa,EAAE,CAyCrF"}
+{"version":3,"file":"assemble.d.ts","sourceRoot":"","sources":["../../src/agent-context/assemble.ts"],"names":[],"mappings":"AAEA,OAAO,EACyD,KAAK,aAAa,EAAE,KAAK,KAAK,EAC7F,MAAM,YAAY,CAAC;AAuCpB,qFAAqF;AACrF,wBAAgB,QAAQ,CAAC,IAAI,EAAE;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,GAAG,aAAa,EAAE,CA0CrF"}

package/dist/agent-context/assemble.js

@@ -1,9 +1,11 @@
 import { readFileSync, readdirSync, existsSync, statSync } from "node:fs";
 import { join } from "node:path";
-import { SKILL_NAMES, SERVER_LANGS, CLIENT_FRAMEWORKS } from "./types.js";
-// Language/framework reference fragments are stack-scoped; any other fragment
-// (e.g. capability-checklist) is universal and always installs.
-const LANGUAGE_FRAGMENT_TOKENS = new Set([...SERVER_LANGS, ...CLIENT_FRAMEWORKS]);
+import { SKILL_NAMES, SERVER_LANGS, CLIENT_FRAMEWORKS, CONCERN_TOKENS, } from "./types.js";
+// Language/framework/concern reference fragments are stack-scoped; any other
+// fragment (e.g. capability-checklist) is universal and always installs. Adding a
+// future concern token to CONCERN_TOKENS (types.ts) is all that's needed to gate
+// its matching references/<token>.md fragment here.
+const SCOPED_FRAGMENT_TOKENS = new Set([...SERVER_LANGS, ...CLIENT_FRAMEWORKS, ...CONCERN_TOKENS]);
 function readServerMeta(contentRoot, server) {
     const p = join(contentRoot, "servers", `${server}.meta.json`);
     if (!existsSync(p))
@@ -49,17 +51,18 @@ export function assemble(opts) {
         out.push({ path: `.claude/skills/${skill}/SKILL.md`, contents: body });
         const refDir = join(skillDir, "references");
         if (existsSync(refDir) && statSync(refDir).isDirectory()) {
-            // Stack-scoped: a language/framework fragment installs only when its token
-            // is in the resolved stack (Stack.tokens = servers ∪ clients ∪ {migration}).
-            // Non-language fragments (e.g. capability-checklist) are universal and always
-            // install. Keeps each skill's references/ to what the project actually uses,
-            // so the SKILL.md "read every references/*.md" footer stays accurate.
+            // Stack-scoped: a language/framework/concern fragment installs only when its
+            // token is in the resolved stack (Stack.tokens = servers ∪ clients ∪ concerns
+            // ∪ {migration}). Non-scoped fragments (e.g. capability-checklist) are
+            // universal and always install. Keeps each skill's references/ to what the
+            // project actually uses, so the SKILL.md "read every references/*.md" footer
+            // stays accurate.
             const refs = readdirSync(refDir)
                 .filter((f) => f.endsWith(".md"))
                 .map((f) => f.replace(/\.md$/, ""))
                 .sort();
             for (const token of refs) {
-                if (LANGUAGE_FRAGMENT_TOKENS.has(token) && !stack.tokens.has(token))
+                if (SCOPED_FRAGMENT_TOKENS.has(token) && !stack.tokens.has(token))
                     continue;
                 out.push({
                     path: `.claude/skills/${skill}/references/${token}.md`,

package/dist/agent-context/assemble.js.map

@@ -1 +1 @@
-{"version":3,"file":"assemble.js","sourceRoot":"","sources":["../../src/agent-context/assemble.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,iBAAiB,EAAkC,MAAM,YAAY,CAAC;AAE1G,8EAA8E;AAC9E,gEAAgE;AAChE,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,YAAY,EAAE,GAAG,iBAAiB,CAAC,CAAC,CAAC;AAI1F,SAAS,cAAc,CAAC,WAAmB,EAAE,MAAc;IACzD,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,GAAG,MAAM,YAAY,CAAC,CAAC;IAC9D,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACrC,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAe,CAAC;AAC3D,CAAC;AAED,SAAS,SAAS,CAAC,WAAmB,EAAE,KAAY;IAClD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxE,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;IAC7F,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;IAC7F,OAAO;QACL,4EAA4E;QAC5E,yEAAyE;QACzE,6EAA6E;QAC7E,6EAA6E;QAC7E,2DAA2D;QAC3D,IAAI,EAAE,UAAU,UAAU,KAAK,UAAU,GAAG;QAC5C,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU;KACxD,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,GAAW,EAAE,IAA4B;IAC9D,OAAO,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,EAAE,EAAE,CAAS,EAAE,EAAE;QACrD,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,IAAI,CAAC,CAAC;QACvF,OAAO,IAAI,CAAC,CAAC,CAAE,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,QAAQ,CAAC,IAA2C;IAClE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IACpC,MAAM,GAAG,GAAoB,EAAE,CAAC;IAEhC,4DAA4D;IAC5D,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,uBAAuB,CAAC,EAAE,MAAM,CAAC,CAAC;IAC1F,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;IACzE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IACjE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IAEjE,qEAAqE;IACrE,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;QAC9D,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAkB,KAAK,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAEvE,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAC5C,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACzD,2EAA2E;YAC3E,6EAA6E;YAC7E,8EAA8E;YAC9E,6EAA6E;YAC7E,sEAAsE;YACtE,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC;iBAC7B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;iBAChC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;iBAClC,IAAI,EAAE,CAAC;YACV,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;gBACzB,IAAI,wBAAwB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;oBAAE,SAAS;gBAC9E,GAAG,CAAC,IAAI,CAAC;oBACP,IAAI,EAAE,kBAAkB,KAAK,eAAe,KAAK,KAAK;oBACtD,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,KAAK,CAAC,EAAE,MAAM,CAAC;iBAC5D,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"assemble.js","sourceRoot":"","sources":["../../src/agent-context/assemble.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,WAAW,EAAE,YAAY,EAAE,iBAAiB,EAAE,cAAc,GAC7D,MAAM,YAAY,CAAC;AAEpB,6EAA6E;AAC7E,kFAAkF;AAClF,iFAAiF;AACjF,oDAAoD;AACpD,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,YAAY,EAAE,GAAG,iBAAiB,EAAE,GAAG,cAAc,CAAC,CAAC,CAAC;AAI3G,SAAS,cAAc,CAAC,WAAmB,EAAE,MAAc;IACzD,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,GAAG,MAAM,YAAY,CAAC,CAAC;IAC9D,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACrC,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAe,CAAC;AAC3D,CAAC;AAED,SAAS,SAAS,CAAC,WAAmB,EAAE,KAAY;IAClD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxE,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;IAC7F,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;IAC7F,OAAO;QACL,4EAA4E;QAC5E,yEAAyE;QACzE,6EAA6E;QAC7E,6EAA6E;QAC7E,2DAA2D;QAC3D,IAAI,EAAE,UAAU,UAAU,KAAK,UAAU,GAAG;QAC5C,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU;KACxD,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,GAAW,EAAE,IAA4B;IAC9D,OAAO,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,EAAE,EAAE,CAAS,EAAE,EAAE;QACrD,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,IAAI,CAAC,CAAC;QACvF,OAAO,IAAI,CAAC,CAAC,CAAE,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,QAAQ,CAAC,IAA2C;IAClE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IACpC,MAAM,GAAG,GAAoB,EAAE,CAAC;IAEhC,4DAA4D;IAC5D,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,uBAAuB,CAAC,EAAE,MAAM,CAAC,CAAC;IAC1F,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;IACzE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IACjE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IAEjE,qEAAqE;IACrE,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;QAC9D,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAkB,KAAK,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAEvE,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAC5C,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACzD,6EAA6E;YAC7E,8EAA8E;YAC9E,uEAAuE;YACvE,2EAA2E;YAC3E,6EAA6E;YAC7E,kBAAkB;YAClB,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC;iBAC7B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;iBAChC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;iBAClC,IAAI,EAAE,CAAC;YACV,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;gBACzB,IAAI,sBAAsB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;oBAAE,SAAS;gBAC5E,GAAG,CAAC,IAAI,CAAC;oBACP,IAAI,EAAE,kBAAkB,KAAK,eAAe,KAAK,KAAK;oBACtD,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,KAAK,CAAC,EAAE,MAAM,CAAC;iBAC5D,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/agent-context/resolve.d.ts

@@ -1,13 +1,19 @@
-import { type ServerLang, type ClientFramework, type Stack } from "./types.js";
+import { type ServerLang, type ClientFramework, type ConcernToken, type Stack } from "./types.js";
 export interface ProjectProbe {
     hasDep(name: string): boolean;
     hasFileMatching(pattern: RegExp): boolean;
+    /** True if the project's declared metadata contains at least one `requirement.*` node. */
+    hasRequirementNodes(): boolean;
 }
-export declare function makeStack(servers: ServerLang[], clients: ClientFramework[]): Stack;
+export declare function makeStack(servers: ServerLang[], clients: ClientFramework[], concerns?: ConcernToken[]): Stack;
 /** Best-effort detection from a project probe. Always overridable; a wrong guess
  * writes an extra fragment, never a wrong one (callers confirm before scaffolding). */
 export declare function detectStack(probe: ProjectProbe): {
     servers: ServerLang[];
     clients: ClientFramework[];
 };
+/** Best-effort concern detection — OBSERVED project state, never a config flag.
+ * Independent of servers/clients: a project's use of a capability doesn't depend
+ * on which server language or client framework it runs. */
+export declare function detectConcerns(probe: ProjectProbe): ConcernToken[];
 //# sourceMappingURL=resolve.d.ts.map

package/dist/agent-context/resolve.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../src/agent-context/resolve.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,UAAU,EAAE,KAAK,eAAe,EAAE,KAAK,KAAK,EAClD,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAC9B,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;CAC3C;AAED,wBAAgB,SAAS,CAAC,OAAO,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,KAAK,CAIlF;AAED;uFACuF;AACvF,wBAAgB,WAAW,CAAC,KAAK,EAAE,YAAY,GAAG;IAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IAAC,OAAO,EAAE,eAAe,EAAE,CAAA;CAAE,CActG"}
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../src/agent-context/resolve.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,UAAU,EAAE,KAAK,eAAe,EAAE,KAAK,YAAY,EAAE,KAAK,KAAK,EACrE,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAC9B,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1C,0FAA0F;IAC1F,mBAAmB,IAAI,OAAO,CAAC;CAChC;AAED,wBAAgB,SAAS,CACvB,OAAO,EAAE,UAAU,EAAE,EACrB,OAAO,EAAE,eAAe,EAAE,EAC1B,QAAQ,GAAE,YAAY,EAAO,GAC5B,KAAK,CAKP;AAED;uFACuF;AACvF,wBAAgB,WAAW,CAAC,KAAK,EAAE,YAAY,GAAG;IAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IAAC,OAAO,EAAE,eAAe,EAAE,CAAA;CAAE,CActG;AAED;;2DAE2D;AAC3D,wBAAgB,cAAc,CAAC,KAAK,EAAE,YAAY,GAAG,YAAY,EAAE,CAIlE"}

package/dist/agent-context/resolve.js

@@ -1,8 +1,9 @@
-import { SERVER_LANGS, CLIENT_FRAMEWORKS, MIGRATION_TOKEN, } from "./types.js";
-export function makeStack(servers, clients) {
+import { SERVER_LANGS, CLIENT_FRAMEWORKS, CONCERN_TOKENS, MIGRATION_TOKEN, } from "./types.js";
+export function makeStack(servers, clients, concerns = []) {
     const s = SERVER_LANGS.filter((x) => servers.includes(x));
     const c = CLIENT_FRAMEWORKS.filter((x) => clients.includes(x));
-    return { servers: s, clients: c, tokens: new Set([...s, ...c, MIGRATION_TOKEN]) };
+    const k = CONCERN_TOKENS.filter((x) => concerns.includes(x));
+    return { servers: s, clients: c, concerns: k, tokens: new Set([...s, ...c, ...k, MIGRATION_TOKEN]) };
 }
 /** Best-effort detection from a project probe. Always overridable; a wrong guess
  * writes an extra fragment, never a wrong one (callers confirm before scaffolding). */
@@ -27,4 +28,13 @@ export function detectStack(probe) {
         clients.push("angular");
     return { servers, clients };
 }
+/** Best-effort concern detection — OBSERVED project state, never a config flag.
+ * Independent of servers/clients: a project's use of a capability doesn't depend
+ * on which server language or client framework it runs. */
+export function detectConcerns(probe) {
+    const concerns = [];
+    if (probe.hasRequirementNodes())
+        concerns.push("requirements");
+    return concerns;
+}
 //# sourceMappingURL=resolve.js.map

package/dist/agent-context/resolve.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../src/agent-context/resolve.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EAAE,iBAAiB,EAAE,eAAe,GAEjD,MAAM,YAAY,CAAC;AAOpB,MAAM,UAAU,SAAS,CAAC,OAAqB,EAAE,OAA0B;IACzE,MAAM,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,MAAM,CAAC,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,GAAG,CAAS,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,EAAE,eAAe,CAAC,CAAC,EAAE,CAAC;AAC5F,CAAC;AAED;uFACuF;AACvF,MAAM,UAAU,WAAW,CAAC,KAAmB;IAC7C,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,IAAI,KAAK,CAAC,MAAM,CAAC,qBAAqB,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,4BAA4B,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAClH,IAAI,KAAK,CAAC,eAAe,CAAC,8BAA8B,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClF,IAAI,KAAK,CAAC,eAAe,CAAC,iBAAiB,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnE,IAAI,KAAK,CAAC,eAAe,CAAC,WAAW,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/D,IAAI,KAAK,CAAC,eAAe,CAAC,oCAAoC,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAExF,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,IAAI,KAAK,CAAC,MAAM,CAAC,uBAAuB,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjE,IAAI,KAAK,CAAC,MAAM,CAAC,0BAA0B,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvE,IAAI,KAAK,CAAC,MAAM,CAAC,yBAAyB,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAErE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC"}
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../src/agent-context/resolve.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,eAAe,GAEjE,MAAM,YAAY,CAAC;AASpB,MAAM,UAAU,SAAS,CACvB,OAAqB,EACrB,OAA0B,EAC1B,WAA2B,EAAE;IAE7B,MAAM,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,MAAM,CAAC,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,MAAM,CAAC,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,GAAG,CAAS,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,EAAE,eAAe,CAAC,CAAC,EAAE,CAAC;AAC/G,CAAC;AAED;uFACuF;AACvF,MAAM,UAAU,WAAW,CAAC,KAAmB;IAC7C,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,IAAI,KAAK,CAAC,MAAM,CAAC,qBAAqB,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,4BAA4B,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAClH,IAAI,KAAK,CAAC,eAAe,CAAC,8BAA8B,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClF,IAAI,KAAK,CAAC,eAAe,CAAC,iBAAiB,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnE,IAAI,KAAK,CAAC,eAAe,CAAC,WAAW,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/D,IAAI,KAAK,CAAC,eAAe,CAAC,oCAAoC,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAExF,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,IAAI,KAAK,CAAC,MAAM,CAAC,uBAAuB,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjE,IAAI,KAAK,CAAC,MAAM,CAAC,0BAA0B,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvE,IAAI,KAAK,CAAC,MAAM,CAAC,yBAAyB,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAErE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC;AAED;;2DAE2D;AAC3D,MAAM,UAAU,cAAc,CAAC,KAAmB;IAChD,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,IAAI,KAAK,CAAC,mBAAmB,EAAE;QAAE,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC/D,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/agent-context/types.d.ts

@@ -2,6 +2,14 @@ export declare const SERVER_LANGS: readonly ["typescript", "java", "kotlin", "cs
 export type ServerLang = (typeof SERVER_LANGS)[number];
 export declare const CLIENT_FRAMEWORKS: readonly ["react", "tanstack", "angular"];
 export type ClientFramework = (typeof CLIENT_FRAMEWORKS)[number];
+/**
+ * Opt-in capability concerns, detected from OBSERVED project state (never a config
+ * flag — a flag goes stale, observed metadata cannot). Each token gates a
+ * `references/<token>.md` fragment the same way a language/framework token does.
+ * Add a new concern here; nothing else in the assembler needs to change.
+ */
+export declare const CONCERN_TOKENS: readonly ["requirements"];
+export type ConcernToken = (typeof CONCERN_TOKENS)[number];
 /** Always-present token: schema migrations are TS-owned for every port (ADR-0015). */
 export declare const MIGRATION_TOKEN = "migration";
 export declare const SKILL_NAMES: readonly ["metaobjects-authoring", "metaobjects-codegen", "metaobjects-runtime-ui", "metaobjects-prompts", "metaobjects-verify", "metaobjects-audit"];
@@ -10,7 +18,8 @@ export type SkillName = (typeof SKILL_NAMES)[number];
 export interface Stack {
     servers: ServerLang[];
     clients: ClientFramework[];
-    /** servers ∪ clients ∪ {"migration"} — the install-selection set for reference fragments. */
+    concerns: ConcernToken[];
+    /** servers ∪ clients ∪ concerns ∪ {"migration"} — the install-selection set for reference fragments. */
     tokens: ReadonlySet<string>;
 }
 /** A file the assembler emits, path relative to the consumer project root. */

package/dist/agent-context/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/agent-context/types.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,YAAY,+DAAgE,CAAC;AAC1F,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,eAAO,MAAM,iBAAiB,2CAA4C,CAAC;AAC3E,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjE,sFAAsF;AACtF,eAAO,MAAM,eAAe,cAAc,CAAC;AAE3C,eAAO,MAAM,WAAW,uJAOd,CAAC;AACX,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;AAErD,qDAAqD;AACrD,MAAM,WAAW,KAAK;IACpB,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,6FAA6F;IAC7F,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAC7B;AAED,8EAA8E;AAC9E,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/agent-context/types.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,YAAY,+DAAgE,CAAC;AAC1F,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,eAAO,MAAM,iBAAiB,2CAA4C,CAAC;AAC3E,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjE;;;;;GAKG;AACH,eAAO,MAAM,cAAc,2BAA4B,CAAC;AACxD,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3D,sFAAsF;AACtF,eAAO,MAAM,eAAe,cAAc,CAAC;AAE3C,eAAO,MAAM,WAAW,uJAOd,CAAC;AACX,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;AAErD,qDAAqD;AACrD,MAAM,WAAW,KAAK;IACpB,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,wGAAwG;IACxG,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAC7B;AAED,8EAA8E;AAC9E,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB"}

package/dist/agent-context/types.js

@@ -1,5 +1,12 @@
 export const SERVER_LANGS = ["typescript", "java", "kotlin", "csharp", "python"];
 export const CLIENT_FRAMEWORKS = ["react", "tanstack", "angular"];
+/**
+ * Opt-in capability concerns, detected from OBSERVED project state (never a config
+ * flag — a flag goes stale, observed metadata cannot). Each token gates a
+ * `references/<token>.md` fragment the same way a language/framework token does.
+ * Add a new concern here; nothing else in the assembler needs to change.
+ */
+export const CONCERN_TOKENS = ["requirements"];
 /** Always-present token: schema migrations are TS-owned for every port (ADR-0015). */
 export const MIGRATION_TOKEN = "migration";
 export const SKILL_NAMES = [

package/dist/agent-context/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/agent-context/types.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAG1F,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,CAAU,CAAC;AAG3E,sFAAsF;AACtF,MAAM,CAAC,MAAM,eAAe,GAAG,WAAW,CAAC;AAE3C,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,uBAAuB;IACvB,qBAAqB;IACrB,wBAAwB;IACxB,qBAAqB;IACrB,oBAAoB;IACpB,mBAAmB;CACX,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/agent-context/types.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAG1F,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,CAAU,CAAC;AAG3E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,cAAc,CAAU,CAAC;AAGxD,sFAAsF;AACtF,MAAM,CAAC,MAAM,eAAe,GAAG,WAAW,CAAC;AAE3C,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,uBAAuB;IACvB,qBAAqB;IACrB,wBAAwB;IACxB,qBAAqB;IACrB,oBAAoB;IACpB,mBAAmB;CACX,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@metaobjectsdev/sdk",
-  "version": "0.21.6",
+  "version": "0.22.0-rc.1",
   "description": "Workspace helpers and agent-docs utilities for MetaObjects projects.",
   "type": "module",
   "main": "./dist/index.js",
@@ -56,7 +56,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@metaobjectsdev/metadata": "0.21.6",
+    "@metaobjectsdev/metadata": "0.22.0-rc.1",
     "zod": "^3.23.0"
   },
   "devDependencies": {

package/scripts/regen-agent-context-conformance.ts

@@ -17,8 +17,9 @@ for (const name of readdirSync(CORPUS)) {
   const spec = JSON.parse(readFileSync(join(dir, "stack.json"), "utf8")) as {
     servers: string[];
     clients: string[];
+    concerns?: string[];
   };
-  const stack = makeStack(spec.servers as never, spec.clients as never);
+  const stack = makeStack(spec.servers as never, spec.clients as never, (spec.concerns ?? []) as never);
   const files = assemble({ contentRoot: CONTENT_ROOT, stack });
   const expDir = join(dir, "expected");
   rmSync(expDir, { recursive: true, force: true });

package/src/agent-context/assemble.ts

@@ -1,10 +1,14 @@
 import { readFileSync, readdirSync, existsSync, statSync } from "node:fs";
 import { join } from "node:path";
-import { SKILL_NAMES, SERVER_LANGS, CLIENT_FRAMEWORKS, type AssembledFile, type Stack } from "./types.js";
+import {
+  SKILL_NAMES, SERVER_LANGS, CLIENT_FRAMEWORKS, CONCERN_TOKENS, type AssembledFile, type Stack,
+} from "./types.js";
 
-// Language/framework reference fragments are stack-scoped; any other fragment
-// (e.g. capability-checklist) is universal and always installs.
-const LANGUAGE_FRAGMENT_TOKENS = new Set<string>([...SERVER_LANGS, ...CLIENT_FRAMEWORKS]);
+// Language/framework/concern reference fragments are stack-scoped; any other
+// fragment (e.g. capability-checklist) is universal and always installs. Adding a
+// future concern token to CONCERN_TOKENS (types.ts) is all that's needed to gate
+// its matching references/<token>.md fragment here.
+const SCOPED_FRAGMENT_TOKENS = new Set<string>([...SERVER_LANGS, ...CLIENT_FRAMEWORKS, ...CONCERN_TOKENS]);
 
 interface ServerMeta { displayName: string; install: string; codegenCommand: string; }
 
@@ -57,17 +61,18 @@ export function assemble(opts: { contentRoot: string; stack: Stack }): Assembled
 
     const refDir = join(skillDir, "references");
     if (existsSync(refDir) && statSync(refDir).isDirectory()) {
-      // Stack-scoped: a language/framework fragment installs only when its token
-      // is in the resolved stack (Stack.tokens = servers ∪ clients ∪ {migration}).
-      // Non-language fragments (e.g. capability-checklist) are universal and always
-      // install. Keeps each skill's references/ to what the project actually uses,
-      // so the SKILL.md "read every references/*.md" footer stays accurate.
+      // Stack-scoped: a language/framework/concern fragment installs only when its
+      // token is in the resolved stack (Stack.tokens = servers ∪ clients ∪ concerns
+      // ∪ {migration}). Non-scoped fragments (e.g. capability-checklist) are
+      // universal and always install. Keeps each skill's references/ to what the
+      // project actually uses, so the SKILL.md "read every references/*.md" footer
+      // stays accurate.
       const refs = readdirSync(refDir)
         .filter((f) => f.endsWith(".md"))
         .map((f) => f.replace(/\.md$/, ""))
         .sort();
       for (const token of refs) {
-        if (LANGUAGE_FRAGMENT_TOKENS.has(token) && !stack.tokens.has(token)) continue;
+        if (SCOPED_FRAGMENT_TOKENS.has(token) && !stack.tokens.has(token)) continue;
         out.push({
           path: `.claude/skills/${skill}/references/${token}.md`,
           contents: readFileSync(join(refDir, `${token}.md`), "utf8"),

package/src/agent-context/resolve.ts

@@ -1,17 +1,24 @@
 import {
-  SERVER_LANGS, CLIENT_FRAMEWORKS, MIGRATION_TOKEN,
-  type ServerLang, type ClientFramework, type Stack,
+  SERVER_LANGS, CLIENT_FRAMEWORKS, CONCERN_TOKENS, MIGRATION_TOKEN,
+  type ServerLang, type ClientFramework, type ConcernToken, type Stack,
 } from "./types.js";
 
 export interface ProjectProbe {
   hasDep(name: string): boolean;
   hasFileMatching(pattern: RegExp): boolean;
+  /** True if the project's declared metadata contains at least one `requirement.*` node. */
+  hasRequirementNodes(): boolean;
 }
 
-export function makeStack(servers: ServerLang[], clients: ClientFramework[]): Stack {
+export function makeStack(
+  servers: ServerLang[],
+  clients: ClientFramework[],
+  concerns: ConcernToken[] = [],
+): Stack {
   const s = SERVER_LANGS.filter((x) => servers.includes(x));
   const c = CLIENT_FRAMEWORKS.filter((x) => clients.includes(x));
-  return { servers: s, clients: c, tokens: new Set<string>([...s, ...c, MIGRATION_TOKEN]) };
+  const k = CONCERN_TOKENS.filter((x) => concerns.includes(x));
+  return { servers: s, clients: c, concerns: k, tokens: new Set<string>([...s, ...c, ...k, MIGRATION_TOKEN]) };
 }
 
 /** Best-effort detection from a project probe. Always overridable; a wrong guess
@@ -31,3 +38,12 @@ export function detectStack(probe: ProjectProbe): { servers: ServerLang[]; clien
 
   return { servers, clients };
 }
+
+/** Best-effort concern detection — OBSERVED project state, never a config flag.
+ * Independent of servers/clients: a project's use of a capability doesn't depend
+ * on which server language or client framework it runs. */
+export function detectConcerns(probe: ProjectProbe): ConcernToken[] {
+  const concerns: ConcernToken[] = [];
+  if (probe.hasRequirementNodes()) concerns.push("requirements");
+  return concerns;
+}

package/src/agent-context/types.ts

@@ -4,6 +4,15 @@ export type ServerLang = (typeof SERVER_LANGS)[number];
 export const CLIENT_FRAMEWORKS = ["react", "tanstack", "angular"] as const;
 export type ClientFramework = (typeof CLIENT_FRAMEWORKS)[number];
 
+/**
+ * Opt-in capability concerns, detected from OBSERVED project state (never a config
+ * flag — a flag goes stale, observed metadata cannot). Each token gates a
+ * `references/<token>.md` fragment the same way a language/framework token does.
+ * Add a new concern here; nothing else in the assembler needs to change.
+ */
+export const CONCERN_TOKENS = ["requirements"] as const;
+export type ConcernToken = (typeof CONCERN_TOKENS)[number];
+
 /** Always-present token: schema migrations are TS-owned for every port (ADR-0015). */
 export const MIGRATION_TOKEN = "migration";
 
@@ -21,7 +30,8 @@ export type SkillName = (typeof SKILL_NAMES)[number];
 export interface Stack {
   servers: ServerLang[]; // deduped, in SERVER_LANGS order
   clients: ClientFramework[]; // deduped, in CLIENT_FRAMEWORKS order
-  /** servers ∪ clients ∪ {"migration"} — the install-selection set for reference fragments. */
+  concerns: ConcernToken[]; // deduped, in CONCERN_TOKENS order — observed capability usage
+  /** servers ∪ clients ∪ concerns ∪ {"migration"} — the install-selection set for reference fragments. */
   tokens: ReadonlySet<string>;
 }