@pareto4/pp-core 1.18.0 → 1.20.0

package/pp-core/bin/lib/discovery-stories.cjs

@@ -0,0 +1,273 @@
+"use strict";
+/**
+ * Discovery user-stories check (Discovery Sprint improvement plan, Batch 4).
+ *
+ * `.planning/discovery/_stories.md` is the register of user stories Session 3
+ * Step 5E mints from the step matrices: `US-nn`, the EPIC it belongs to, the
+ * requirements it realises, the story itself, its acceptance criteria and the
+ * step it was derived from. Before Batch 4 the stories lived only in Session
+ * 3's Notes Template, where no build agent read them (review F-4); the
+ * verifier now takes its UAT from this register through `for-phase`. This
+ * module checks the structure:
+ *
+ *   - the `## Stories` table exists with the template's columns;
+ *   - `US-` IDs are well-formed, unique, contiguous;
+ *   - `EPIC` is one `E-nn`;
+ *   - every story cites at least one requirement, each existing in
+ *     `_requirements.md` when it is on file and parseable;
+ *   - `Story` and `Acceptance criteria` are non-empty;
+ *   - `Acceptance criteria` is a criterion, not a pointer (`As in F-01`);
+ *   - `Source step` is `—` or a comma list of `MP-nn #<cell>`, the main process
+ *     and the step row existing in `_processes.md` when it is on file;
+ *   - every MVP-disposition requirement that a persona-actor step cites has at
+ *     least one story (the `N-`/`T-` prefixes never need one; a requirement
+ *     only `System` steps realise, or no step at all, has no user to tell it).
+ *
+ * Posture (D-43/D-53): reports at Sessions 8 and 13; hard-blocks at
+ * `/pp-discovery-to-build`. Absent artifact → exit 0.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const io = require("./io.cjs");
+const { output, error, ERROR_REASON } = io;
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const table = require("./discovery-table.cjs");
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const rollup = require("./discovery-rollup.cjs");
+// ─── Constants ────────────────────────────────────────────────────────────────
+const DISCOVERY_DIR = '.planning/discovery';
+const STORIES_FILE = `${DISCOVERY_DIR}/_stories.md`;
+const REQUIREMENTS_FILE = `${DISCOVERY_DIR}/_requirements.md`;
+const PROCESSES_FILE = `${DISCOVERY_DIR}/_processes.md`;
+const STORIES_SECTION = 'Stories';
+const STORIES_HEADER = Object.freeze(['ID', 'EPIC', 'Requirements', 'Story', 'Acceptance criteria', 'Source step']);
+const US_RE = /^US-(\d{2})$/;
+const EPIC_RE = /^E-\d{2}$/;
+const REQUIREMENT_ID_RE = /^[A-Z][A-Z0-9]*-\d+$/;
+/** `MP-nn #<cell>` — the main process and the step matrix's `#` cell, copied verbatim (`01.3`, `5`). */
+const SOURCE_STEP_RE = /^(MP-\d{2}) #(\S+)$/;
+const MP_HEADING_RE = /^(MP-\d{2})\s+—\s+\S/;
+const SYSTEM_ACTOR = 'System';
+/** An acceptance-criteria cell that only points elsewhere is no criterion the verifier can run. */
+const POINTER_AC_RE = /^(as in|see|zie|idem)\b/i;
+const PENDING = '—';
+/** Requirement prefixes that need no user story: non-functional and technical rows have no actor. */
+const STORYLESS_PREFIXES = Object.freeze(['N-', 'T-']);
+const USAGE = 'Usage: pp-tools discovery stories-check';
+function readIfPresent(abs) {
+    if (!node_fs_1.default.existsSync(abs))
+        return { kind: 'absent' };
+    try {
+        return { kind: 'ok', content: node_fs_1.default.readFileSync(abs, 'utf-8') };
+    }
+    catch {
+        return { kind: 'unreadable' };
+    }
+}
+function sameHeader(actual, expected) {
+    return actual.length === expected.length && actual.every((c, i) => c.trim().toLowerCase() === expected[i].toLowerCase());
+}
+function splitList(cell) {
+    return cell.split(',').map((t) => t.trim()).filter(Boolean);
+}
+/** First-column IDs of the first table under a `## <heading>` of another artifact. */
+function firstColumnOf(content, heading) {
+    const section = table.splitSections(content.split(/\r?\n/), 2).find((s) => s.heading === heading);
+    if (!section)
+        return new Set();
+    const tables = table.parseTables(section.body);
+    if (tables.length === 0)
+        return new Set();
+    return new Set(tables[0].rows.map((r) => (r.cells[0] ?? '').trim()).filter(Boolean));
+}
+/**
+ * Every step row of `_processes.md` § Steps: its key (`MP-nn #<cell>`), its
+ * actors and the requirements it cites. `null` when the section is absent —
+ * the step rule then cannot run and only the prefix exemption applies.
+ */
+function stepsOf(content) {
+    const steps = table.splitSections(content.split(/\r?\n/), 2).find((s) => s.heading === 'Steps');
+    if (!steps)
+        return null;
+    const out = [];
+    for (const sec of table.splitSections(steps.body.map((l) => l.text), 3)) {
+        const m = MP_HEADING_RE.exec(sec.heading);
+        const tbl = table.parseTables(sec.body)[0];
+        if (!m || !tbl)
+            continue;
+        for (const r of tbl.rows) {
+            out.push({ key: `${m[1]} #${(r.cells[0] ?? '').trim()}`, actors: splitList(r.cells[2] ?? ''), requirements: splitList(r.cells[7] ?? '') });
+        }
+    }
+    return out;
+}
+/**
+ * Does this MVP requirement need a user story? Step 5E derives stories from the
+ * step rows where the actor is a persona, so the check mirrors that: a
+ * requirement needs one when at least one step citing it has an actor other
+ * than `System`. Without a step matrix the prefix exemption is all there is.
+ */
+function needsStory(r, steps) {
+    if (STORYLESS_PREFIXES.includes(r.prefix))
+        return false;
+    if (steps === null)
+        return true;
+    return steps.some((s) => s.requirements.includes(r.id) && s.actors.some((a) => a !== SYSTEM_ACTOR));
+}
+// ─── Check ────────────────────────────────────────────────────────────────────
+function checkStories(content, sources) {
+    const violations = [];
+    const sections = table.splitSections(content.split(/\r?\n/), 2);
+    const section = sections.find((s) => s.heading === STORIES_SECTION);
+    if (!section) {
+        return { ok: false, stories: 0, violations: [{ artifact: STORIES_FILE, reason: 'missing_section', id: STORIES_SECTION }] };
+    }
+    const tables = table.parseTables(section.body);
+    if (tables.length === 0) {
+        return { ok: false, stories: 0, violations: [{ artifact: STORIES_FILE, reason: 'missing_section', line: section.line, id: STORIES_SECTION }] };
+    }
+    if (!sameHeader(tables[0].header, STORIES_HEADER)) {
+        return { ok: false, stories: 0, violations: [{ artifact: STORIES_FILE, reason: 'bad_table_shape', line: tables[0].line, id: STORIES_SECTION }] };
+    }
+    const knownIds = sources.requirements instanceof Array ? new Set(sources.requirements.map((r) => r.id)) : null;
+    const ids = new Set();
+    const seqs = [];
+    const storied = new Set();
+    for (const row of tables[0].rows) {
+        const [id, epic, requirements, story, acceptance, sourceStep] = row.cells.map((c) => c.trim());
+        const m = US_RE.exec(id ?? '');
+        if (!m) {
+            violations.push({ artifact: STORIES_FILE, reason: 'bad_id', line: row.line });
+        }
+        else if (ids.has(id)) {
+            violations.push({ artifact: STORIES_FILE, reason: 'duplicate_id', line: row.line, id });
+        }
+        else {
+            ids.add(id);
+            seqs.push(Number(m[1]));
+        }
+        if (!EPIC_RE.test(epic ?? ''))
+            violations.push({ artifact: STORIES_FILE, reason: 'bad_epic', line: row.line });
+        if ((story ?? '') === '')
+            violations.push({ artifact: STORIES_FILE, reason: 'empty_cell', line: row.line, id: 'Story' });
+        if ((acceptance ?? '') === '')
+            violations.push({ artifact: STORIES_FILE, reason: 'empty_cell', line: row.line, id: 'Acceptance criteria' });
+        else if (POINTER_AC_RE.test(acceptance))
+            violations.push({ artifact: STORIES_FILE, reason: 'acceptance_is_pointer', line: row.line, id });
+        const reqs = splitList(requirements ?? '');
+        if (reqs.length === 0)
+            violations.push({ artifact: STORIES_FILE, reason: 'no_requirement', line: row.line });
+        for (const r of reqs) {
+            if (!REQUIREMENT_ID_RE.test(r))
+                violations.push({ artifact: STORIES_FILE, reason: 'unknown_requirement_id', line: row.line, id: r.slice(0, 40) });
+            else if (knownIds !== null && !knownIds.has(r))
+                violations.push({ artifact: STORIES_FILE, reason: 'unknown_requirement_id', line: row.line, id: r });
+            else
+                storied.add(r);
+        }
+        const src = sourceStep ?? '';
+        if (src !== PENDING) {
+            const refs = splitList(src);
+            if (refs.length === 0)
+                violations.push({ artifact: STORIES_FILE, reason: 'bad_source_step', line: row.line });
+            for (const ref of refs) {
+                const sm = SOURCE_STEP_RE.exec(ref);
+                if (!sm)
+                    violations.push({ artifact: STORIES_FILE, reason: 'bad_source_step', line: row.line });
+                else if (sources.processes !== null && !sources.processes.has(sm[1]))
+                    violations.push({ artifact: STORIES_FILE, reason: 'unknown_process_id', line: row.line, id: sm[1] });
+                else if (sources.steps !== null && !sources.steps.some((st) => st.key === ref))
+                    violations.push({ artifact: STORIES_FILE, reason: 'unknown_process_step', line: row.line, id: ref.slice(0, 40) });
+            }
+        }
+    }
+    const max = table.boundedSequenceMax(seqs);
+    if (max !== null) {
+        const have = new Set(seqs);
+        for (let n = 1; n <= max; n += 1) {
+            if (!have.has(n))
+                violations.push({ artifact: STORIES_FILE, reason: 'sequence_gap', id: `US-${String(n).padStart(2, '0')}` });
+        }
+    }
+    if (sources.requirements instanceof Array) {
+        for (const r of sources.requirements) {
+            if (r.disposition !== rollup.DISPOSITIONS.MVP)
+                continue;
+            if (!needsStory(r, sources.steps))
+                continue;
+            if (!storied.has(r.id))
+                violations.push({ artifact: REQUIREMENTS_FILE, reason: 'mvp_requirement_without_story', id: r.id });
+        }
+    }
+    else if (sources.requirements === 'unparseable') {
+        violations.push({ artifact: REQUIREMENTS_FILE, reason: 'requirements_unparseable' });
+    }
+    return { ok: violations.length === 0, stories: ids.size, violations };
+}
+function checkProjectStories(cwd) {
+    const read = readIfPresent(node_path_1.default.join(cwd, STORIES_FILE));
+    if (read.kind === 'absent')
+        return null;
+    if (read.kind === 'unreadable')
+        return { ok: false, file: STORIES_FILE, stories: 0, violations: [{ artifact: STORIES_FILE, reason: 'artifact_unreadable' }] };
+    const extra = [];
+    const sources = { requirements: null, processes: null, steps: null };
+    const req = readIfPresent(node_path_1.default.join(cwd, REQUIREMENTS_FILE));
+    if (req.kind === 'unreadable')
+        extra.push({ artifact: REQUIREMENTS_FILE, reason: 'artifact_unreadable' });
+    if (req.kind === 'ok') {
+        const parsed = rollup.parseRequirementsArtifact(req.content);
+        sources.requirements = parsed.ok ? parsed.rows.map((r) => ({ id: r.id, prefix: r.prefix, disposition: r.disposition })) : 'unparseable';
+    }
+    const proc = readIfPresent(node_path_1.default.join(cwd, PROCESSES_FILE));
+    if (proc.kind === 'unreadable')
+        extra.push({ artifact: PROCESSES_FILE, reason: 'artifact_unreadable' });
+    if (proc.kind === 'ok') {
+        sources.processes = firstColumnOf(proc.content, 'To-be');
+        sources.steps = stepsOf(proc.content);
+    }
+    const result = checkStories(read.content, sources);
+    result.violations.push(...extra);
+    result.ok = result.violations.length === 0;
+    return { file: STORIES_FILE, ...result };
+}
+function formatViolation(v) {
+    const where = v.line !== undefined ? `:${v.line}` : '';
+    const what = v.id !== undefined ? ` (${v.id})` : '';
+    return `  - ${v.artifact}${where}: ${v.reason}${what}`;
+}
+// ─── CLI adapter ──────────────────────────────────────────────────────────────
+/** `pp-tools discovery stories-check` (dotted `query discovery.stories-check`). Absent artifact → exit 0, `present: false`. */
+function cmdDiscoveryStoriesCheck(cwd, args, raw) {
+    if (args.length > 2) {
+        error(USAGE, ERROR_REASON.USAGE);
+        return; // unreachable
+    }
+    const result = checkProjectStories(cwd);
+    if (result === null) {
+        output({ ok: true, present: false, file: STORIES_FILE }, raw);
+        return;
+    }
+    const payload = { ok: result.ok, present: true, file: result.file, stories: result.stories };
+    if (!result.ok) {
+        output({ ...payload, violations: result.violations.length }, raw);
+        error(`discovery stories-check: ${result.violations.length} violation(s):\n` + result.violations.map(formatViolation).join('\n'), ERROR_REASON.DISCOVERY_STORIES_CHECK_FAILED);
+        return; // unreachable
+    }
+    output(payload, raw);
+}
+module.exports = {
+    STORIES_FILE,
+    STORIES_HEADER,
+    STORYLESS_PREFIXES,
+    SYSTEM_ACTOR,
+    needsStory,
+    STORIES_CHECK_FAILED: ERROR_REASON.DISCOVERY_STORIES_CHECK_FAILED,
+    checkStories,
+    checkProjectStories,
+    cmdDiscoveryStoriesCheck,
+};

package/pp-core/bin/lib/discovery-sweep.cjs

@@ -40,7 +40,7 @@ const VOID_TAGS = new Set([
 const RAW_TEXT_TAGS = new Set(['script', 'style', 'noscript']);
 const ID_RE = /^[A-Za-z][A-Za-z0-9_:.-]{0,79}$/;
 const REQ_ID_RE = /^[A-Z][A-Z0-9]*-\d+$/;
-const DECISION_RE = /^D-\d{2}-\d+$/;
+const DECISION_RE = /^D-(?:\d{2}|P\d{2})-\d+$/;
 const ELEMENT_RE = /^(\*|[A-Za-z0-9_.-]+\.html?)#([A-Za-z][A-Za-z0-9_:.-]{0,79})$/;
 const ROUND_RE = /^## Sweep (\d{1,2}) — \d{4}-\d{2}-\d{2} — .+$/;
 const TABLE_HEADER = ['Element', 'Outcome', 'Reference'];
@@ -63,12 +63,21 @@ function parseAttrs(src) {
     }
     return attrs;
 }
-function isFunctional(tag, attrs) {
+/**
+ * A multi-word PascalCase name (`UiButton`, `UiSelect`): the component spelling
+ * of a kebab-case custom element (`ui-button`), which a string template keeps
+ * and lowercasing would hide (issue #12, item 8). A single word (`Div`) or an
+ * all-caps tag (`BUTTON`) is plain HTML.
+ */
+function isPascalComponent(rawTag) {
+    return /^[A-Z][a-z0-9]+[A-Z]/.test(rawTag);
+}
+function isFunctional(tag, attrs, rawTag = tag) {
     if (attrs.has('data-req'))
         return true;
     if (tag === 'input' && (attrs.get('type') || '').toLowerCase() === 'hidden')
         return false;
-    if (FUNCTIONAL_TAGS.has(tag) || tag.includes('-'))
+    if (FUNCTIONAL_TAGS.has(tag) || tag.includes('-') || isPascalComponent(rawTag))
         return true;
     const role = (attrs.get('role') || '').toLowerCase();
     return FUNCTIONAL_ROLES.has(role);
@@ -107,7 +116,7 @@ function scanPage(page, html, violations) {
         const parentScreen = stack.length ? stack[stack.length - 1].screen : null;
         const screen = screenFrom(tag, attrs) ?? parentScreen;
         const line = lineAt(text, m.index);
-        if (isFunctional(tag, attrs)) {
+        if (isFunctional(tag, attrs, m[2])) {
             const id = attrs.get('id') ?? null;
             let reqs = [];
             if (attrs.has('data-req')) {

package/pp-core/bin/lib/discovery-table.cjs

@@ -90,9 +90,64 @@ function boundedSequenceMax(seqs) {
     const max = seqs.reduce((a, b) => (b > a ? b : a), 0);
     return max > MAX_SEQUENCE_SPAN ? null : max;
 }
+/**
+ * Every pipe table in a run of numbered lines (Discovery Sprint improvement
+ * plan, Batch 2). The header is the row before the first separator; data rows
+ * follow until the first line that is not a pipe row; a second separator
+ * starts the next table. Cells go through `splitTableCells`, so an escaped pipe
+ * inside a free-text cell never shifts a column.
+ */
+function parseTables(body) {
+    const tables = [];
+    for (let i = 1; i < body.length; i += 1) {
+        if (!SEPARATOR_ROW_RE.test(body[i].text) || !body[i - 1].text.trim().startsWith('|'))
+            continue;
+        const table = { line: body[i - 1].n, header: splitTableCells(body[i - 1].text), rows: [] };
+        let j = i + 1;
+        for (; j < body.length; j += 1) {
+            const text = body[j].text.trim();
+            if (!text.startsWith('|') || SEPARATOR_ROW_RE.test(text))
+                break;
+            table.rows.push({ line: body[j].n, cells: splitTableCells(text) });
+        }
+        tables.push(table);
+        i = j - 1;
+    }
+    return tables;
+}
+/**
+ * Split a file into the sections opened by headings of exactly `level` hashes
+ * (`## ` for 2). A section's body runs to the next heading of the same or a
+ * higher level; lower-level headings stay inside the body, so a caller can
+ * split a body again at the next level. Lines before the first heading belong
+ * to no section.
+ */
+function splitSections(lines, level) {
+    const open = new RegExp(`^#{${level}}\\s+(.*)$`);
+    const close = new RegExp(`^#{1,${level}}\\s`);
+    const out = [];
+    let current = null;
+    for (let i = 0; i < lines.length; i += 1) {
+        const m = open.exec(lines[i]);
+        if (m) {
+            current = { heading: m[1].trim(), line: i + 1, body: [] };
+            out.push(current);
+            continue;
+        }
+        if (close.test(lines[i])) {
+            current = null;
+            continue;
+        }
+        if (current)
+            current.body.push({ n: i + 1, text: lines[i] });
+    }
+    return out;
+}
 module.exports = {
     splitTableCells,
     SEPARATOR_ROW_RE,
     MAX_SEQUENCE_SPAN,
     boundedSequenceMax,
+    parseTables,
+    splitSections,
 };

package/pp-core/bin/lib/discovery-vault-check.cjs

@@ -12,7 +12,11 @@
  *   - every entry is one well-formed line (`- `<path>` — <why>`, or
  *     `- (none) — <why>` when nothing was selected);
  *   - every selected document was USED: cited `[vault: <path>]` somewhere in
- *     the session notes, or marked `— not used: <reason>` on its own line.
+ *     the session notes, or marked `— not used: <reason>` on its own line;
+ *   - when the selection used `INDEX.md`, every entry the vault marks
+ *     `[cross-cutting]` has a record line (issue #12, items 16-17): those rules
+ *     bind every session, so leaving one out is how an approval route went
+ *     unseen until Session 12.
  *
  * The selection itself is the facilitator's judgement and is not re-derived
  * here; what is checked is that the record exists, is complete, and that what
@@ -109,7 +113,7 @@ function parseEntry(n, text) {
  * A citation counts only OUTSIDE the section: the record naming a path is not
  * evidence that the path was used.
  */
-function checkVaultContext(content) {
+function checkVaultContext(content, crossCutting = []) {
     const violations = [];
     const section = extractSection(content);
     if (section === null) {
@@ -163,8 +167,38 @@ function checkVaultContext(content) {
             violations.push({ reason: 'document_unused', line: doc.line, path: doc.path });
         }
     }
+    // The cross-cutting entries are owed a line only when the selection read the
+    // vault's own index: SUMMARY.md carries no mark, and `none` read nothing.
+    if (index === 'INDEX.md') {
+        const recorded = new Set(docs.map((d) => d.path));
+        for (const p of crossCutting) {
+            if (!recorded.has(p))
+                violations.push({ reason: 'cross_cutting_missing', path: p });
+        }
+    }
     return { ok: violations.length === 0, index, documents: docs.length, cited, not_used: notUsed, violations };
 }
+/**
+ * The paths the cached `INDEX.md` marks `[cross-cutting]`, read through the
+ * vault's one index-state function so the bounded read, the withheld filter
+ * and the path rule are the engine's own. Withheld entries never reach it;
+ * unsafe ones are dropped, since no record line could name them. A vault that
+ * is off, uncached or unreadable owes nothing here — `vault status` reports
+ * that state.
+ */
+function crossCuttingPaths(cwd) {
+    try {
+        // eslint-disable-next-line @typescript-eslint/no-require-imports
+        const vault = require('./vault.cjs');
+        const state = vault.computeVaultIndexState(cwd);
+        if (state === null)
+            return [];
+        return state.entries.filter((e) => e.crossCutting === true && e.resolution !== 'unsafe').map((e) => e.path);
+    }
+    catch {
+        return [];
+    }
+}
 /** Parse the session argument: a bare integer 1–13, leading zeros allowed (`03` is session 3). */
 function parseSessionArg(raw) {
     if (typeof raw !== 'string' || !/^\d{1,3}$/.test(raw))
@@ -189,7 +223,7 @@ function checkSessionVaultContext(cwd, n) {
             violations: [{ reason: 'session_file_missing' }],
         };
     }
-    return { session: n, file: rel, ...checkVaultContext(content) };
+    return { session: n, file: rel, ...checkVaultContext(content, crossCuttingPaths(cwd)) };
 }
 function formatViolation(v) {
     const where = v.line !== undefined ? `line ${v.line}: ` : '';

package/pp-core/bin/lib/init-contract.cjs

@@ -225,7 +225,7 @@ function isVaultEnabledInConfig(parsed) {
 // ─── buildInitQuestions ────────────────────────────────────────────────────
 /** The canonical /pp-init question set, as data; the session may answer some itself (see "Automatic answers").
  * No org-profile question in this fork (PBI 74316); provider options come from `PROVIDERS`, preselected via `resolveProvider`. */
-function buildInitQuestions(cwd) {
+function buildInitQuestions(cwd, opts = {}) {
     let preselected = git_provider_cjs_1.DEFAULT_PROVIDER;
     try {
         preselected = (0, git_provider_cjs_1.resolveProvider)(cwd).provider;
@@ -247,6 +247,7 @@ function buildInitQuestions(cwd) {
             prompt: 'Client slug (kebab-case, e.g. "acme") — type "internal" if none',
             optionalAnswer: false,
         },
+        ...clientVaultQuestion(cwd, opts),
         { id: 'description', prompt: 'One-line description (what this project does)', optionalAnswer: false },
         {
             id: 'provider',
@@ -259,6 +260,23 @@ function buildInitQuestions(cwd) {
         { id: 'visibility', prompt: 'Visibility (private / public / internal)', optionalAnswer: false },
     ];
 }
+/** The client-vault question, asked while no vault is bound and a binding can be composed (`clientVaultChoice`).
+ * Blank or "none" keeps the org profile's seeded vault, if any; an answer replaces it in the binding.
+ * An internal project is answered "none" automatically (see `autoAnswerFor`). */
+function clientVaultQuestion(cwd, opts) {
+    const choice = (0, compose_bindings_cjs_1.clientVaultChoice)(cwd, opts);
+    if (!choice.offered)
+        return [];
+    return [
+        {
+            id: 'client_vault',
+            prompt: choice.defaultRepo === null
+                ? 'Client vault repo ("owner/name" or a full clone URL) — type "none" to bind no client vault'
+                : `Client vault repo ("owner/name" or a full clone URL) — type "none" to use the default vault (${choice.defaultRepo})`,
+            optionalAnswer: true,
+        },
+    ];
+}
 // ─── Automatic answers (PBI 74299): an org profile init section fixes answers and can derive slugs ───
 /** The visibility answers the question accepts. */
 const VISIBILITY_OPTIONS = Object.freeze(['private', 'public', 'internal']);
@@ -320,6 +338,9 @@ function autoAnswerFor(id, answers, init) {
         const value = init.fixed[id];
         return value === undefined ? null : { value, source: 'org-profile' };
     }
+    if (id === 'client_vault' && answers.client_slug === 'internal') {
+        return { value: 'none', source: 'derived' };
+    }
     if (init.deriveSlugs && (id === 'project_slug' || id === 'client_slug')) {
         const name = answers[id === 'project_slug' ? 'project_name' : 'client_name'];
         const slug = typeof name === 'string' ? deriveSlug(name) : null;
@@ -328,10 +349,10 @@ function autoAnswerFor(id, answers, init) {
     return null;
 }
 /** The session's automatic answers, in question order. */
-function listAutoAnswers(cwd, session) {
+function listAutoAnswers(cwd, session, opts) {
     const sources = session.autoAnswers ?? {};
     const out = [];
-    for (const q of buildInitQuestions(cwd)) {
+    for (const q of buildInitQuestions(cwd, { _globalRoot: opts._globalRoot })) {
         const source = sources[q.id];
         const value = session.answers[q.id];
         if (source !== undefined && typeof value === 'string')
@@ -758,10 +779,15 @@ function normalizeYesNo(value) {
 }
 /** Decide the current step, performing its idempotent side effects once: automatic answers, the identity write,
  * the compose decision and `doneAt`. Recomputes the question set on every call. */
+/** The client vault the operator named, or `undefined` to keep the seeded one. */
+function answeredClientVault(session) {
+    const checked = (0, compose_bindings_cjs_1.validateClientVaultAnswer)(session.answers.client_vault);
+    return checked.ok && checked.value !== null ? checked.value : undefined;
+}
 function computeCurrentStep(cwd, session, opts) {
     // Any failure degrades to a `write_failed` step instead of throwing.
     try {
-        const questions = buildInitQuestions(cwd);
+        const questions = buildInitQuestions(cwd, { _globalRoot: opts._globalRoot });
         // PBI 74299: read once per call; only consulted for an unanswered question.
         let profileInit = null;
         for (const q of questions) {
@@ -784,7 +810,11 @@ function computeCurrentStep(cwd, session, opts) {
             persistSession(cwd, session);
         }
         if (session.composeDecision === null) {
-            const dryRun = (0, compose_bindings_cjs_1.composeBindings)(cwd, { offline: opts.offline === true, _globalRoot: opts._globalRoot });
+            const dryRun = (0, compose_bindings_cjs_1.composeBindings)(cwd, {
+                offline: opts.offline === true,
+                _globalRoot: opts._globalRoot,
+                clientVaultRepo: answeredClientVault(session),
+            });
             // Offer compose_confirm only when approving would change something; 'unchanged' and 'skipped' are distinct end states.
             if (dryRun.composable === true && dryRun.action !== 'unchanged') {
                 // VAULT-EGRESS-1: `info` is display-only (the CLI and the TTY renderer print it); approval
@@ -889,7 +919,7 @@ function initSessionNext(cwd, opts = {}) {
     }
     const session = loaded.session;
     const state = currentStepToState(computeCurrentStep(cwd, session, opts));
-    const autoAnswered = listAutoAnswers(cwd, session);
+    const autoAnswered = listAutoAnswers(cwd, session, opts);
     return autoAnswered.length > 0 ? { ...state, autoAnswered } : state;
 }
 /** Record one answer for the current step only; out-of-order, blank required, unparseable or post-done answers are rejected. */
@@ -929,6 +959,12 @@ function initSessionAnswer(cwd, stepId, value, opts = {}) {
                 return { ok: false, reason: 'answer_required', message: `Question "${stepId}" requires a non-blank answer.` };
             }
             const answerValue = typeof value === 'string' ? value : '';
+            if (stepId === 'client_vault') {
+                const checked = (0, compose_bindings_cjs_1.validateClientVaultAnswer)(answerValue);
+                if (!checked.ok) {
+                    return { ok: false, reason: 'invalid_answer', message: `Question "client_vault": ${checked.reason}` };
+                }
+            }
             session.answers[stepId] = answerValue;
             persistSession(cwd, session);
             return { ok: true };
@@ -951,7 +987,12 @@ function initSessionAnswer(cwd, stepId, value, opts = {}) {
             }
             if (normalized === true) {
                 // Check the write result before recording "approved": the file can change between the dry run and this write.
-                const writeResult = (0, compose_bindings_cjs_1.composeBindings)(cwd, { write: true, offline: opts.offline === true, _globalRoot: opts._globalRoot });
+                const writeResult = (0, compose_bindings_cjs_1.composeBindings)(cwd, {
+                    write: true,
+                    offline: opts.offline === true,
+                    _globalRoot: opts._globalRoot,
+                    clientVaultRepo: answeredClientVault(session),
+                });
                 if (writeResult.composable !== true || writeResult.wrote !== true) {
                     // Leave the decision unset so the next call re-evaluates and can re-offer compose_confirm.
                     return {

package/pp-core/bin/lib/io.cjs

@@ -203,6 +203,28 @@ const ERROR_REASON = Object.freeze({
     DISCOVERY_REBASELINE_CHECK_FAILED: 'discovery_rebaseline_check_failed',
     // discovery vault context record (PBI 75336)
     DISCOVERY_VAULT_CHECK_FAILED: 'discovery_vault_check_failed',
+    // discovery project charter (Discovery Sprint improvement plan, Batch 1)
+    DISCOVERY_CHARTER_CHECK_FAILED: 'discovery_charter_check_failed',
+    DISCOVERY_CHARTER_UNSIGNED: 'discovery_charter_unsigned',
+    // discovery data model, processes, business rules (improvement plan, Batch 2)
+    DISCOVERY_ENTITY_CHECK_FAILED: 'discovery_entity_check_failed',
+    DISCOVERY_ENTITY_CHECK_INCOMPLETE: 'discovery_entity_check_incomplete',
+    DISCOVERY_PROCESS_CHECK_FAILED: 'discovery_process_check_failed',
+    DISCOVERY_PROCESS_STEPS_UNCITED: 'discovery_process_steps_uncited',
+    DISCOVERY_RULES_CHECK_FAILED: 'discovery_rules_check_failed',
+    DISCOVERY_STORIES_CHECK_FAILED: 'discovery_stories_check_failed',
+    DISCOVERY_PHASES_CHECK_FAILED: 'discovery_phases_check_failed',
+    DISCOVERY_FOR_PHASE_FAILED: 'discovery_for_phase_failed',
+    // discovery roles, integrations, migration, deviations (improvement plan, Batch 3)
+    DISCOVERY_ROLES_CHECK_FAILED: 'discovery_roles_check_failed',
+    DISCOVERY_INTEGRATIONS_CHECK_FAILED: 'discovery_integrations_check_failed',
+    DISCOVERY_INTEGRATIONS_UNCITED: 'discovery_integrations_uncited',
+    DISCOVERY_MIGRATION_CHECK_FAILED: 'discovery_migration_check_failed',
+    DISCOVERY_MIGRATION_UNCITED: 'discovery_migration_uncited',
+    // discovery session output gate (improvement plan, Batch 5)
+    DISCOVERY_SESSION_CHECK_FAILED: 'discovery_session_check_failed',
+    DISCOVERY_DEVIATIONS_CHECK_FAILED: 'discovery_deviations_check_failed',
+    DISCOVERY_DEVIATIONS_UNAPPROVED: 'discovery_deviations_unapproved',
     // generic
     USAGE: 'usage',
     UNKNOWN: 'unknown',

package/pp-core/bin/lib/vault-coordinates.cjs

@@ -73,7 +73,7 @@ exports.DEFAULT_HOST_FOR_PROVIDER = Object.freeze({
     github: 'github.com',
 });
 /** The values moving out of `src/vault.cts`'s `DEFAULT_FALLBACK_REPO`/`DEFAULT_FALLBACK_REF`. */
-exports.DEFAULT_SHARED_REPO = 'pareto000/Pareto-Vault';
+exports.DEFAULT_SHARED_REPO = 'pareto-ooo/pareto-vault-releases';
 exports.DEFAULT_SHARED_REF = 'main';
 /** Dotted `.planning/config.json` keys, named so no consumer hand-writes a key string. */
 exports.SHARED_REPO_CONFIG_KEY = 'vault.fallback_repo';