@prd-improve/cli 1.0.0

package/dist/schema/prd.js

@@ -0,0 +1,65 @@
+import { z } from "zod";
+import { metaSchema, backgroundAndGoalsSchema, userRoleSchema, inScopeItemSchema, outOfScopeItemSchema, entitySchema, mainFlowStepSchema, statePermissionSchema, businessRuleSchema, scenarioSchema, edgeCaseSchema, uiPageSchema, dataAndApiSchema, acceptanceCriterionSchema, openQuestionSchema, slugPattern, } from "./modules.js";
+/**
+ * 当前 schema 版本(v1.1 起 yaml meta 必带 team / project / feature 三 slug)。
+ * 仍接受 v0.1 以支持 `prd migrate-yaml` 升级前的存量 yaml(spec §3.2 backward compat)。
+ */
+export const SCHEMA_VERSION_CURRENT = "v0.2";
+export const SCHEMA_VERSION_LEGACY = "v0.1";
+export const PrdSchema = z
+    .object({
+    schema_version: z.enum([SCHEMA_VERSION_LEGACY, SCHEMA_VERSION_CURRENT]),
+    meta: metaSchema,
+    background_and_goals: backgroundAndGoalsSchema,
+    users_and_roles: z.array(userRoleSchema),
+    in_scope: z.array(inScopeItemSchema),
+    out_of_scope: z.array(outOfScopeItemSchema),
+    entities: z.array(entitySchema),
+    main_flow: z.array(mainFlowStepSchema),
+    state_permissions: z.array(statePermissionSchema),
+    business_rules: z.array(businessRuleSchema),
+    scenarios: z.array(scenarioSchema),
+    edge_cases: z.array(edgeCaseSchema),
+    ui_interaction: z.array(uiPageSchema),
+    data_and_api: dataAndApiSchema,
+    acceptance_criteria: z.array(acceptanceCriterionSchema),
+    open_questions: z.array(openQuestionSchema),
+})
+    .strict()
+    .superRefine((doc, ctx) => {
+    // v0.1 keeps the legacy free-form meta(向后兼容);v0.2 起强制 slug.
+    if (doc.schema_version !== SCHEMA_VERSION_CURRENT)
+        return;
+    const meta = doc.meta;
+    // team 必填 + 必须是 slug
+    if (meta.team === undefined || meta.team === null || meta.team === "") {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["meta", "team"],
+            message: "v0.2 yaml 必须包含 meta.team(kebab-case slug)",
+        });
+    }
+    else if (!slugPattern.test(meta.team)) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["meta", "team"],
+            message: "meta.team 必须 kebab-case slug:首字母 a-z,只含 a-z 0-9 -,长度 2-64",
+        });
+    }
+    // project / feature v0.1 已必填(zod 类型),v0.2 加 slug 校验
+    if (!slugPattern.test(meta.project)) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["meta", "project"],
+            message: "meta.project 必须 kebab-case slug:首字母 a-z,只含 a-z 0-9 -,长度 2-64",
+        });
+    }
+    if (!slugPattern.test(meta.feature)) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["meta", "feature"],
+            message: "meta.feature 必须 kebab-case slug:首字母 a-z,只含 a-z 0-9 -,长度 2-64",
+        });
+    }
+});
+//# sourceMappingURL=prd.js.map

package/dist/schema/prd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prd.js","sourceRoot":"","sources":["../../src/schema/prd.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,UAAU,EACV,wBAAwB,EACxB,cAAc,EACd,iBAAiB,EACjB,oBAAoB,EACpB,YAAY,EACZ,kBAAkB,EAClB,qBAAqB,EACrB,kBAAkB,EAClB,cAAc,EACd,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,yBAAyB,EACzB,kBAAkB,EAClB,WAAW,GACZ,MAAM,cAAc,CAAC;AAEtB;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAe,CAAC;AACtD,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAe,CAAC;AAErD,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC;KACvB,MAAM,CAAC;IACN,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,qBAAqB,EAAE,sBAAsB,CAAC,CAAC;IACvE,IAAI,EAAE,UAAU;IAChB,oBAAoB,EAAE,wBAAwB;IAC9C,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;IACxC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;IACpC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC;IAC3C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC;IAC/B,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;IACtC,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC;IACjD,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;IAC3C,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;IAClC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;IACnC,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC;IACrC,YAAY,EAAE,gBAAgB;IAC9B,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC;IACvD,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;CAC5C,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IACxB,4DAA4D;IAC5D,IAAI,GAAG,CAAC,cAAc,KAAK,sBAAsB;QAAE,OAAO;IAE1D,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IAEtB,qBAAqB;IACrB,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;QACtE,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;YACtB,OAAO,EAAE,2CAA2C;SACrD,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;YACtB,OAAO,EACL,2DAA2D;SAC9D,CAAC,CAAC;IACL,CAAC;IAED,oDAAoD;IACpD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;YACzB,OAAO,EACL,8DAA8D;SACjE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;YACzB,OAAO,EACL,8DAA8D;SACjE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/sync/cliRcHelpers.d.ts

@@ -0,0 +1,25 @@
+import type { PrdRc, ResolvedBackend } from "../config/schema.js";
+export interface LoadedRc {
+    rc: PrdRc | null;
+    path: string | null;
+    /** True if file exists but had a problem (parse/schema/permissions). The
+     *  command may still want to allow `prd config show` to print the (empty)
+     *  rc skeleton — but for backend-using commands we treat this as fatal. */
+    hadError: boolean;
+}
+/**
+ * Loads rc and emits warnings to stderr for non-fatal issues (e.g. loose
+ * permissions). Returns a normalized result; callers that *require* rc
+ * should also use {@link requireBackend}.
+ *
+ * `pathOverride` exists so tests can pass an isolated rc fixture without
+ * polluting $HOME.
+ */
+export declare function loadRcWithWarn(pathOverride?: string): LoadedRc;
+/**
+ * Resolve a backend or render an i18n-friendly error to stderr. Returns null
+ * if not resolvable — caller should `return 1` immediately.
+ */
+export declare function requireBackend(rc: PrdRc | null, opts?: {
+    backend?: string;
+}, env?: NodeJS.ProcessEnv): ResolvedBackend | null;

package/dist/sync/cliRcHelpers.js

@@ -0,0 +1,62 @@
+/**
+ * Helpers shared by sync commands — single place to (1) load rc with the
+ * permission-warning UX, (2) resolve backend with the env-precedence rules,
+ * and (3) render a friendly stderr message + return null when no backend.
+ *
+ * Centralizes the "no backend" / "no token" / "url-without-token" UX so the
+ * 7 sync commands aren't each re-implementing the same 30-line preamble.
+ */
+import { loadRc, resolveBackend } from "../config/rc.js";
+import { getMessages, readLocale } from "../i18n/index.js";
+import * as c from "../formatter/colors.js";
+/**
+ * Loads rc and emits warnings to stderr for non-fatal issues (e.g. loose
+ * permissions). Returns a normalized result; callers that *require* rc
+ * should also use {@link requireBackend}.
+ *
+ * `pathOverride` exists so tests can pass an isolated rc fixture without
+ * polluting $HOME.
+ */
+export function loadRcWithWarn(pathOverride) {
+    const m = getMessages(readLocale());
+    const r = loadRc(pathOverride);
+    if (r.ok)
+        return { rc: r.rc, path: r.path, hadError: false };
+    if (r.reason === "missing")
+        return { rc: null, path: null, hadError: false };
+    if (r.reason === "permissions") {
+        process.stderr.write(c.warn(m.rc_chmod_warn({ mode: r.mode })) + "\n");
+        return { rc: null, path: null, hadError: true };
+    }
+    if (r.reason === "schema" || r.reason === "parse") {
+        process.stderr.write(c.fail("✗ ") + m.rc_invalid({ message: r.message }) + "\n");
+        return { rc: null, path: null, hadError: true };
+    }
+    return { rc: null, path: null, hadError: true };
+}
+/**
+ * Resolve a backend or render an i18n-friendly error to stderr. Returns null
+ * if not resolvable — caller should `return 1` immediately.
+ */
+export function requireBackend(rc, opts = {}, env = process.env) {
+    const m = getMessages(readLocale());
+    const r = resolveBackend(rc, opts, env);
+    if (r.ok)
+        return r.backend;
+    if (r.reason === "no_backend") {
+        process.stderr.write(c.fail("✗ ") + m.backend_not_configured + "\n");
+    }
+    else if (r.reason === "unknown_name") {
+        process.stderr.write(c.fail("✗ ") + m.backend_unknown({ name: r.name }) + "\n");
+    }
+    else if (r.reason === "no_token") {
+        process.stderr.write(c.fail("✗ ") +
+            m.backend_unknown({ name: r.name }) +
+            " (no token — run `prd login`)\n");
+    }
+    else if (r.reason === "env_url_without_token") {
+        process.stderr.write(c.fail("✗ ") + m.rc_env_url_without_token + "\n");
+    }
+    return null;
+}
+//# sourceMappingURL=cliRcHelpers.js.map

package/dist/sync/cliRcHelpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cliRcHelpers.js","sourceRoot":"","sources":["../../src/sync/cliRcHelpers.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEzD,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,KAAK,CAAC,MAAM,wBAAwB,CAAC;AAW5C;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,YAAqB;IAClD,MAAM,CAAC,GAAG,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC;IACpC,MAAM,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IAC/B,IAAI,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7D,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7E,IAAI,CAAC,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACvE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAClD,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAClD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QACjF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAClD,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AAClD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,EAAgB,EAChB,OAA6B,EAAE,EAC/B,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,CAAC,GAAG,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC;IACpC,MAAM,CAAC,GAAG,cAAc,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACxC,IAAI,CAAC,CAAC,EAAE;QAAE,OAAO,CAAC,CAAC,OAAO,CAAC;IAC3B,IAAI,CAAC,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAAC;IACvE,CAAC;SAAM,IAAI,CAAC,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IAClF,CAAC;SAAM,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACV,CAAC,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACnC,iCAAiC,CACpC,CAAC;IACJ,CAAC;SAAM,IAAI,CAAC,CAAC,MAAM,KAAK,uBAAuB,EAAE,CAAC;QAChD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,wBAAwB,GAAG,IAAI,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/sync/conflicts.d.ts

@@ -0,0 +1,7 @@
+export interface ConflictPayload {
+    localYaml: string;
+    remoteYaml: string;
+    baseVersionId?: string;
+    remoteVersionId?: string;
+}
+export declare function stashConflict(cwd: string, slug: string, payload: ConflictPayload): string;

package/dist/sync/conflicts.js

@@ -0,0 +1,72 @@
+/**
+ * Conflict stash on push 409 (design §6.12).
+ *
+ *   .prd/.conflicts/<slug>-<ISO_TS>/
+ *     ├── local.yaml     — pre-overwrite snapshot of working/prd.yaml
+ *     ├── remote.yaml    — backend yaml at conflict time
+ *     └── README.md      — user-facing merge instructions
+ *
+ * Side effect (design intent — "working/ ends in a clean state == remote"):
+ *  - working/prd.yaml is overwritten with remoteYaml. After stash, working/
+ *    is byte-identical to remote, so the caller's follow-up sync.json
+ *    rewrite (base_version_id = remote etag, last_synced_hash = sha256(
+ *    remote)) puts the workspace in a state where `prd push` will not loop
+ *    on the same 409. The user's local edits are preserved in
+ *    `<dir>/local.yaml` and they re-apply by hand before pushing again.
+ *
+ * Returns the absolute conflict dir path so callers can include it in the
+ * 409 error message + render the "see README" hint.
+ */
+import { existsSync, mkdirSync, writeFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+/**
+ * Sanitize ISO timestamp into a filesystem-safe directory name. Colon is
+ * unsafe on Windows/macOS HFS, and `:`/`.` in `2026-05-14T10:30:45.123Z`
+ * confuses tab-completion in some shells. Replace with `-`.
+ */
+function tsForDir() {
+    return new Date().toISOString().replace(/[:.]/g, "-");
+}
+export function stashConflict(cwd, slug, payload) {
+    const ts = tsForDir();
+    const dir = join(cwd, ".prd", ".conflicts", `${slug}-${ts}`);
+    mkdirSync(dir, { recursive: true });
+    writeFileSync(join(dir, "local.yaml"), payload.localYaml, "utf8");
+    writeFileSync(join(dir, "remote.yaml"), payload.remoteYaml, "utf8");
+    writeFileSync(join(dir, "README.md"), renderReadme(slug, ts, payload), "utf8");
+    // Design §6.12 step 2: overwrite working/ with remote so the workspace is
+    // in a clean state == remote. User's edits are preserved in <dir>/local.yaml.
+    // Sibling responsibility (push.ts): rewrite sync.json so base_version_id
+    // matches the new remote — otherwise the next push will still 409 on the
+    // stale base.
+    const workingPath = join(cwd, ".prd", "features", slug, "working", "prd.yaml");
+    const parent = dirname(workingPath);
+    if (!existsSync(parent))
+        mkdirSync(parent, { recursive: true });
+    writeFileSync(workingPath, payload.remoteYaml, "utf8");
+    return dir;
+}
+function renderReadme(slug, ts, payload) {
+    return `# Conflict snapshot for ${slug} at ${ts}
+
+Local push failed because remote already moved to a new version${payload.remoteVersionId ? ` (remote=${payload.remoteVersionId})` : ""}${payload.baseVersionId ? `; local base was ${payload.baseVersionId}` : ""}.
+
+What just happened:
+- \`local.yaml\` is a backup of your working/prd.yaml as it was before this push.
+- \`remote.yaml\` is the backend's current yaml at conflict time.
+- Your working/prd.yaml has been overwritten with \`remote.yaml\` so the
+  workspace is in a clean state that matches the backend. Your edits are
+  NOT lost — they live in \`local.yaml\` until you re-apply them.
+
+To resolve:
+1. Diff your edits vs remote: \`diff -u remote.yaml local.yaml\`
+   (or \`diff -u ../../features/${slug}/working/prd.yaml local.yaml\` —
+   working/ is now identical to remote.yaml).
+2. Re-apply the changes you still want into
+   \`../../features/${slug}/working/prd.yaml\`.
+3. Run \`prd validate --feature ${slug}\`, then \`prd push ${slug}\`.
+
+This snapshot will not be deleted automatically. Remove when done.
+`;
+}
+//# sourceMappingURL=conflicts.js.map

package/dist/sync/conflicts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conflicts.js","sourceRoot":"","sources":["../../src/sync/conflicts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAS1C;;;;GAIG;AACH,SAAS,QAAQ;IACf,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,GAAW,EACX,IAAY,EACZ,OAAwB;IAExB,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC;IACtB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;IAC7D,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAClE,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACpE,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,YAAY,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;IAE/E,0EAA0E;IAC1E,8EAA8E;IAC9E,yEAAyE;IACzE,yEAAyE;IACzE,cAAc;IACd,MAAM,WAAW,GAAG,IAAI,CACtB,GAAG,EACH,MAAM,EACN,UAAU,EACV,IAAI,EACJ,SAAS,EACT,UAAU,CACX,CAAC;IACF,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACpC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAEvD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CACnB,IAAY,EACZ,EAAU,EACV,OAAwB;IAExB,OAAO,2BAA2B,IAAI,OAAO,EAAE;;iEAG7C,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,YAAY,OAAO,CAAC,eAAe,GAAG,CAAC,CAAC,CAAC,EACrE,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,oBAAoB,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE;;;;;;;;;;;kCAW3C,IAAI;;;sBAGhB,IAAI;kCACQ,IAAI,uBAAuB,IAAI;;;CAGhE,CAAC;AACF,CAAC"}

package/dist/sync/headProbe.d.ts

@@ -0,0 +1 @@
+export declare function asyncHeadProbe(slug: string | undefined, cwd: string, fetchFn?: typeof fetch): Promise<void>;

package/dist/sync/headProbe.js

@@ -0,0 +1,95 @@
+/**
+ * Async HEAD probe (T6, design §6.10).
+ *
+ * Fire-and-forget. The contract is strict:
+ *   - Never throws (catch-all swallow).
+ *   - Never blocks: 3s timeout via Promise.race.
+ *   - Never affects exit code of the parent command.
+ *   - Only side effect: optional `console.warn` to stderr if remote ETag
+ *     differs from local sync.json.base_version_id.
+ *
+ * The wiring lives in validate/freeze/context/diff drivers — `prd refresh`
+ * is explicitly excluded (design §15.1 O1).
+ */
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { loadRc, resolveBackend } from "../config/rc.js";
+import { readSyncJson } from "./syncJson.js";
+import { parseMetaScope, projectUrl } from "../api/client.js";
+import { getMessages, readLocale } from "../i18n/index.js";
+import * as c from "../formatter/colors.js";
+const PROBE_TIMEOUT_MS = 3000;
+export async function asyncHeadProbe(slug, cwd, 
+// Test seam: allow tests to inject a fake fetch and assert the warning was
+// (or was not) emitted. Default `globalThis.fetch` keeps prod behavior.
+fetchFn = globalThis.fetch) {
+    if (!slug)
+        return;
+    try {
+        const rcResult = loadRc();
+        const rc = rcResult.ok ? rcResult.rc : null;
+        const resolved = resolveBackend(rc, {});
+        if (!resolved.ok)
+            return; // no backend → no noise
+        const sync = readSyncJson(cwd, slug);
+        if (!sync)
+            return; // never pulled/pushed → no base to compare against
+        // v1.1 scope resolution: prefer working/prd.yaml meta, fall back to
+        // sync.json.team/project. Without either we cannot form the scoped URL —
+        // silently skip (probe is best-effort by design).
+        let scopeTeam;
+        let scopeProject;
+        const yamlPath = join(cwd, ".prd", "features", slug, "working", "prd.yaml");
+        if (existsSync(yamlPath)) {
+            try {
+                const s = parseMetaScope(readFileSync(yamlPath, "utf8"));
+                scopeTeam = s.team;
+                scopeProject = s.project;
+            }
+            catch {
+                // v0.1 yaml — fall through to sync.json hint.
+            }
+        }
+        if (!scopeTeam || !scopeProject) {
+            scopeTeam = sync.team;
+            scopeProject = sync.project;
+        }
+        if (!scopeTeam || !scopeProject)
+            return;
+        const url = resolved.backend.url +
+            projectUrl(scopeTeam, scopeProject, "features", slug);
+        const ctrl = new AbortController();
+        const timer = setTimeout(() => ctrl.abort(), PROBE_TIMEOUT_MS);
+        let res;
+        try {
+            res = await fetchFn(url, {
+                method: "HEAD",
+                headers: { Authorization: `Bearer ${resolved.backend.token}` },
+                signal: ctrl.signal,
+            });
+        }
+        finally {
+            clearTimeout(timer);
+        }
+        if (!res.ok)
+            return; // 404 / 401 / 5xx → silently skip
+        const remoteId = res.headers.get("ETag") ?? res.headers.get("etag");
+        if (!remoteId)
+            return;
+        // Server may quote the ETag per RFC 7232 — strip optional quotes.
+        const normalized = remoteId.replace(/^"|"$/g, "");
+        if (normalized !== sync.base_version_id) {
+            const m = getMessages(readLocale());
+            process.stderr.write(c.warn(m.head_probe_drift_warn({
+                slug,
+                remote: normalized,
+                base: sync.base_version_id,
+            })) + "\n");
+        }
+    }
+    catch {
+        // Any error (DNS, abort, network, schema crash) — swallow. Local command
+        // must continue unaffected.
+    }
+}
+//# sourceMappingURL=headProbe.js.map

package/dist/sync/headProbe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"headProbe.js","sourceRoot":"","sources":["../../src/sync/headProbe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,KAAK,CAAC,MAAM,wBAAwB,CAAC;AAE5C,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAE9B,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAwB,EACxB,GAAW;AACX,2EAA2E;AAC3E,wEAAwE;AACxE,UAAwB,UAAU,CAAC,KAAK;IAExC,IAAI,CAAC,IAAI;QAAE,OAAO;IAClB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC;QAC1B,MAAM,EAAE,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5C,MAAM,QAAQ,GAAG,cAAc,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,CAAC,wBAAwB;QAClD,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,mDAAmD;QAEtE,oEAAoE;QACpE,yEAAyE;QACzE,kDAAkD;QAClD,IAAI,SAA6B,CAAC;QAClC,IAAI,YAAgC,CAAC;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QAC5E,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,cAAc,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;gBACzD,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,YAAY,GAAG,CAAC,CAAC,OAAO,CAAC;YAC3B,CAAC;YAAC,MAAM,CAAC;gBACP,8CAA8C;YAChD,CAAC;QACH,CAAC;QACD,IAAI,CAAC,SAAS,IAAI,CAAC,YAAY,EAAE,CAAC;YAChC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC;YACtB,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,SAAS,IAAI,CAAC,YAAY;YAAE,OAAO;QACxC,MAAM,GAAG,GACP,QAAQ,CAAC,OAAO,CAAC,GAAG;YACpB,UAAU,CAAC,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;QAExD,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,gBAAgB,CAAC,CAAC;QAC/D,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;gBACvB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE;gBAC9D,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,CAAC,kCAAkC;QACvD,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpE,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,kEAAkE;QAClE,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAClD,IAAI,UAAU,KAAK,IAAI,CAAC,eAAe,EAAE,CAAC;YACxC,MAAM,CAAC,GAAG,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC;YACpC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,CAAC,CAAC,IAAI,CACJ,CAAC,CAAC,qBAAqB,CAAC;gBACtB,IAAI;gBACJ,MAAM,EAAE,UAAU;gBAClB,IAAI,EAAE,IAAI,CAAC,eAAe;aAC3B,CAAC,CACH,GAAG,IAAI,CACT,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,4BAA4B;IAC9B,CAAC;AACH,CAAC"}

package/dist/sync/normalize.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Mirror of server `yaml/normalize.ts` (T5). CLI must hash yaml identically
+ * before comparing with sync.json.last_synced_hash, otherwise a CRLF-only
+ * delta from `git checkout` on Windows would flag working/ as "dirty" even
+ * when the bytes are semantically identical.
+ *
+ * Duplicated rather than imported from server to keep CLI runnable
+ * standalone (no server runtime dep at runtime).
+ */
+export declare function normalizeLineEndings(s: string): string;

package/dist/sync/normalize.js

@@ -0,0 +1,13 @@
+/**
+ * Mirror of server `yaml/normalize.ts` (T5). CLI must hash yaml identically
+ * before comparing with sync.json.last_synced_hash, otherwise a CRLF-only
+ * delta from `git checkout` on Windows would flag working/ as "dirty" even
+ * when the bytes are semantically identical.
+ *
+ * Duplicated rather than imported from server to keep CLI runnable
+ * standalone (no server runtime dep at runtime).
+ */
+export function normalizeLineEndings(s) {
+    return s.replace(/\r\n/g, "\n").replace(/\r/g, "\n");
+}
+//# sourceMappingURL=normalize.js.map

package/dist/sync/normalize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize.js","sourceRoot":"","sources":["../../src/sync/normalize.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,CAAS;IAC5C,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AACvD,CAAC"}

package/dist/sync/syncJson.d.ts

@@ -0,0 +1,18 @@
+export interface SyncJson {
+    base_version_id: string;
+    last_synced_hash: string;
+    last_pushed_at?: string;
+    last_pulled_at?: string;
+    backend_url: string;
+    /**
+     * v1.1 (spec §4.2): record the team/project the feature was last synced
+     * against, so fresh `prd pull` and `prd status` for a slug with no local
+     * yaml can still route the request without --team/--project flags.
+     * Optional for forward-compat with v1.0 sync.json files.
+     */
+    team?: string;
+    project?: string;
+}
+export declare function syncJsonPath(cwd: string, slug: string): string;
+export declare function readSyncJson(cwd: string, slug: string): SyncJson | null;
+export declare function writeSyncJson(cwd: string, slug: string, sync: SyncJson): void;

package/dist/sync/syncJson.js

@@ -0,0 +1,42 @@
+/**
+ * sync.json read/write — one per feature slug, lives under
+ * `<workspace>/.prd/features/<slug>/working/sync.json`. Local state only,
+ * gitignored. Shape locked by design §6.11.
+ */
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { writeFileAtomic } from "../fs/atomicWrite.js";
+export function syncJsonPath(cwd, slug) {
+    return join(cwd, ".prd", "features", slug, "working", "sync.json");
+}
+export function readSyncJson(cwd, slug) {
+    const path = syncJsonPath(cwd, slug);
+    if (!existsSync(path))
+        return null;
+    try {
+        const data = JSON.parse(readFileSync(path, "utf8"));
+        // Minimal duck-typing — caller is responsible for treating malformed as
+        // "no sync state" rather than crashing. We don't want a corrupted
+        // sync.json to brick `prd push`.
+        if (typeof data !== "object" || data === null)
+            return null;
+        if (typeof data.base_version_id !== "string")
+            return null;
+        if (typeof data.last_synced_hash !== "string")
+            return null;
+        if (typeof data.backend_url !== "string")
+            return null;
+        return data;
+    }
+    catch {
+        return null;
+    }
+}
+export function writeSyncJson(cwd, slug, sync) {
+    const path = syncJsonPath(cwd, slug);
+    // T6-MN1 (v1.7) — atomic tempfile + rename so a crash mid-write leaves the
+    // previous sync state intact rather than producing a truncated sync.json
+    // that bricks `prd push/pull`.
+    writeFileAtomic(path, JSON.stringify(sync, null, 2) + "\n");
+}
+//# sourceMappingURL=syncJson.js.map

package/dist/sync/syncJson.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"syncJson.js","sourceRoot":"","sources":["../../src/sync/syncJson.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAkBvD,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,IAAY;IACpD,OAAO,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,IAAY;IACpD,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACpD,wEAAwE;QACxE,kEAAkE;QAClE,iCAAiC;QACjC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC3D,IAAI,OAAO,IAAI,CAAC,eAAe,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC1D,IAAI,OAAO,IAAI,CAAC,gBAAgB,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC3D,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACtD,OAAO,IAAgB,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,GAAW,EACX,IAAY,EACZ,IAAc;IAEd,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACrC,2EAA2E;IAC3E,yEAAyE;IACzE,+BAA+B;IAC/B,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AAC9D,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,70 @@
+export type ValidationSeverity = "error" | "warning" | "info";
+/**
+ * 单条校验问题。code 与 i18n key 一一对应;details 提供 i18n 模板变量。
+ */
+export interface ValidationIssue {
+    severity: ValidationSeverity;
+    code: string;
+    feature: string;
+    path?: string;
+    details: Record<string, string | number>;
+}
+/**
+ * 单个 feature 的校验结果。
+ */
+export interface FeatureResult {
+    feature: string;
+    filePath: string;
+    status: "pass" | "fail" | "skip";
+    /** 已完整的必填业务模块数(out of 15)。skip 时为 0。 */
+    modulesComplete: number;
+    /** 业务模块总数,固定 15(本期 schema v0.2,见 SCHEMA_VERSION_CURRENT)。 */
+    modulesTotal: number;
+    /** schema_version 实际值(便于报告里展示)。skip / parse_error 时为 ""。 */
+    schemaVersion: string;
+    issues: ValidationIssue[];
+}
+/**
+ * 所有 feature 的汇总结果。
+ */
+export interface ValidationResult {
+    results: FeatureResult[];
+    summary: {
+        passed: number;
+        failed: number;
+        skipped: number;
+    };
+    exitCode: 0 | 1 | 2;
+}
+/**
+ * discover 阶段的输入分发结果。
+ */
+export type DiscoverInput = {
+    kind: "scan_all";
+} | {
+    kind: "single_feature";
+    slug: string;
+} | {
+    kind: "single_path";
+    path: string;
+};
+/**
+ * discover 阶段的输出 —— 决定要校验哪些目标。
+ */
+export interface DiscoverOutput {
+    targets: Array<{
+        feature: string;
+        filePath: string;
+        exists: boolean;
+    }>;
+    /** 致命错误(如 .prd 目录缺失、用户路径不存在)。非空时 main 流程直接退 2。 */
+    fatal?: {
+        code: string;
+        details: Record<string, string>;
+    };
+}
+/**
+ * 业务模块的固定列表(顺序 = 输出顺序)。15 个。
+ */
+export declare const BUSINESS_MODULES: readonly ["meta", "background_and_goals", "users_and_roles", "in_scope", "out_of_scope", "entities", "main_flow", "state_permissions", "business_rules", "scenarios", "edge_cases", "ui_interaction", "data_and_api", "acceptance_criteria", "open_questions"];
+export type BusinessModule = (typeof BUSINESS_MODULES)[number];

package/dist/types.js

@@ -0,0 +1,21 @@
+/**
+ * 业务模块的固定列表(顺序 = 输出顺序)。15 个。
+ */
+export const BUSINESS_MODULES = [
+    "meta",
+    "background_and_goals",
+    "users_and_roles",
+    "in_scope",
+    "out_of_scope",
+    "entities",
+    "main_flow",
+    "state_permissions",
+    "business_rules",
+    "scenarios",
+    "edge_cases",
+    "ui_interaction",
+    "data_and_api",
+    "acceptance_criteria",
+    "open_questions",
+];
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AA+DA;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,MAAM;IACN,sBAAsB;IACtB,iBAAiB;IACjB,UAAU;IACV,cAAc;IACd,UAAU;IACV,WAAW;IACX,mBAAmB;IACnB,gBAAgB;IAChB,WAAW;IACX,YAAY;IACZ,gBAAgB;IAChB,cAAc;IACd,qBAAqB;IACrB,gBAAgB;CACR,CAAC"}

package/dist/validators/blocking.d.ts

@@ -0,0 +1,2 @@
+import type { ValidationIssue } from "../types.js";
+export declare function validateBlocking(obj: unknown, feature: string): ValidationIssue[];

package/dist/validators/blocking.js

@@ -0,0 +1,25 @@
+export function validateBlocking(obj, feature) {
+    if (!obj || typeof obj !== "object")
+        return [];
+    const data = obj;
+    const arr = data.open_questions;
+    if (!Array.isArray(arr))
+        return [];
+    const issues = [];
+    arr.forEach((q, i) => {
+        if (q?.severity === "blocking") {
+            issues.push({
+                severity: "error",
+                code: "blocking_question",
+                feature,
+                path: `open_questions[${i}]`,
+                details: {
+                    id: typeof q.id === "string" ? q.id : "",
+                    question: typeof q.question === "string" ? q.question : "",
+                },
+            });
+        }
+    });
+    return issues;
+}
+//# sourceMappingURL=blocking.js.map

package/dist/validators/blocking.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blocking.js","sourceRoot":"","sources":["../../src/validators/blocking.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,gBAAgB,CAC9B,GAAY,EACZ,OAAe;IAEf,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAC/C,MAAM,IAAI,GAAG,GAA8B,CAAC;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC;IAChC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAEnC,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAM,EAAE,CAAS,EAAE,EAAE;QAChC,IAAI,CAAC,EAAE,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,mBAAmB;gBACzB,OAAO;gBACP,IAAI,EAAE,kBAAkB,CAAC,GAAG;gBAC5B,OAAO,EAAE;oBACP,EAAE,EAAE,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;oBACxC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;iBAC3D;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/validators/duplicate-ids.d.ts

@@ -0,0 +1,2 @@
+import type { ValidationIssue } from "../types.js";
+export declare function validateDuplicateIds(obj: unknown, feature: string): ValidationIssue[];

package/dist/validators/duplicate-ids.js

@@ -0,0 +1,58 @@
+const ID_BUCKETS = [
+    ["entities", "entities"],
+    ["in_scope", "in_scope"],
+    ["business_rules", "business_rules"],
+    ["scenarios", "scenarios"],
+    ["edge_cases", "edge_cases"],
+    ["ui_interaction", "ui_interaction"],
+    ["acceptance_criteria", "acceptance_criteria"],
+    ["open_questions", "open_questions"],
+];
+export function validateDuplicateIds(obj, feature) {
+    if (!obj || typeof obj !== "object")
+        return [];
+    const data = obj;
+    const seen = new Map(); // id → first_seen_path
+    const issues = [];
+    function check(item, path) {
+        if (!item || typeof item.id !== "string")
+            return;
+        const id = item.id;
+        if (seen.has(id)) {
+            issues.push({
+                severity: "error",
+                code: "duplicate_id",
+                feature,
+                path,
+                details: { id, first_seen_path: seen.get(id) },
+            });
+        }
+        else {
+            seen.set(id, path);
+        }
+    }
+    for (const [key, label] of ID_BUCKETS) {
+        const arr = data[key];
+        if (!Array.isArray(arr))
+            continue;
+        arr.forEach((item, i) => check(item, `${label}[${i}].id`));
+    }
+    // data_and_api 子数组
+    const dao = data.data_and_api;
+    if (dao) {
+        const subs = [
+            ["data_constraints", "data_and_api.data_constraints"],
+            ["api_constraints", "data_and_api.api_constraints"],
+            ["performance_constraints", "data_and_api.performance_constraints"],
+            ["security_constraints", "data_and_api.security_constraints"],
+        ];
+        for (const [k, label] of subs) {
+            const arr = dao[k];
+            if (!Array.isArray(arr))
+                continue;
+            arr.forEach((item, i) => check(item, `${label}[${i}].id`));
+        }
+    }
+    return issues;
+}
+//# sourceMappingURL=duplicate-ids.js.map