@rasensio/aidlc 1.8.1 → 1.9.1

package/dist/operational/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/operational/redact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,oDAAoD;AACpD,MAAM,CAAC,MAAM,qBAAqB,GAAG,YAAY,CAAC;AAalD;;;GAGG;AACH,MAAM,cAAc,GAAiD;IACnE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,iCAAiC,EAAE;IAChE,EAAE,KAAK,EAAE,2BAA2B,EAAE,EAAE,EAAE,mCAAmC,EAAE;IAC/E,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,EAAE,gCAAgC,EAAE;IACpE,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,EAAE,mCAAmC,EAAE;IACjE,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,EAAE,4BAA4B,EAAE;IAC7D,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,2CAA2C,EAAE;IACxE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,0BAA0B,EAAE;IACvD,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,EAAE,gCAAgC,EAAE;IAChE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,2BAA2B,EAAE;IACvD,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,EAAE,oEAAoE,EAAE;IACrG,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,EAAE,yFAAyF,EAAE;CAC9H,CAAC;AAEF;;;;GAIG;AACH,MAAM,aAAa,GACjB,0JAA0J,CAAC;AAE7J;;;GAGG;AACH,MAAM,YAAY,GAChB,uHAAuH,CAAC;AAE1H,6CAA6C;AAC7C,SAAS,OAAO,CAAC,CAAS;IACxB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,KAAK,MAAM,EAAE,IAAI,CAAC;QAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;QACvB,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,sEAAsE;IACtE,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/D,0EAA0E;IAC1E,MAAM,OAAO,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IAClF,IAAI,OAAO,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9B,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC;AAC/B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,GAAG,GAAG,IAAI,CAAC;IAEf,kCAAkC;IAClC,KAAK,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,cAAc,EAAE,CAAC;QAC3C,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE;YACzB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpD,OAAO,qBAAqB,CAAC;QAC/B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,8DAA8D;IAC9D,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,GAAW,EAAE,KAAa,EAAE,KAAa,EAAE,EAAE;QACpF,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC,CAAC,iCAAiC;QAC7E,IAAI,KAAK,KAAK,qBAAqB;YAAE,OAAO,KAAK,CAAC,CAAC,wBAAwB;QAC3E,MAAM,KAAK,GAAG,qBAAqB,GAAG,EAAE,CAAC;QACzC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpD,OAAO,GAAG,GAAG,IAAI,KAAK,GAAG,qBAAqB,GAAG,KAAK,EAAE,CAAC,OAAO,CAC9D,GAAG,EACH,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CACzD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,yCAAyC;IACzC,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,wBAAwB,EAAE,CAAC,KAAK,EAAE,EAAE;QACpD,IAAI,KAAK,KAAK,qBAAqB;YAAE,OAAO,KAAK,CAAC;QAClD,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC1C,MAAM,KAAK,GAAG,qBAAqB,CAAC;QACpC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpD,OAAO,qBAAqB,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;AACjC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;AACjD,CAAC"}

package/dist/operational/schema.d.ts

@@ -0,0 +1,80 @@
+/**
+ * Operational-skill schema: frontmatter shape, parsing, serialization, and name
+ * validation.
+ *
+ * Deliberately NOT `SkillMeta`. `SkillMeta` requires `phase: PhaseName`
+ * (`core/types.ts`) and `parseSkillFile` throws without it
+ * (`compile/loaders.ts:84`) — an operational skill has no lifecycle phase, which
+ * is the constraint behind decision D-1's separate emit path (AC-33, AC-39).
+ *
+ * Requirements: AC-19, AC-20, AC-33, AC-39, AC-42
+ *
+ * @module
+ */
+/** Maximum length of an operational skill name (matches the platform cap). */
+export declare const MAX_OPERATIONAL_NAME_LENGTH = 64;
+/** The literal `kind` value that marks a skill as app-owned (AC-20). */
+export declare const OPERATIONAL_KIND = "operational";
+/** Frontmatter of an operational skill (AC-39). */
+export interface OperationalSkillMeta {
+    /** Skill name; validated by `validateOperationalSkillName`. */
+    name: string;
+    /** One-line summary of the operation the skill performs. */
+    description: string;
+    /** Always `'operational'` — the positive ownership marker (AC-20). */
+    kind: typeof OPERATIONAL_KIND;
+    /** Tool that generated the skill, e.g. `aidlc-add-skill`. */
+    generated_by: string;
+    /** `@rasensio/aidlc-content` version whose verify steps are inlined. */
+    content_version: string;
+    /** Optional natural-language trigger description. */
+    trigger?: string;
+    /**
+     * Repo-relative paths the skill operates on. The ONLY source of paths for the
+     * AC-38 existence check — prose and fenced code blocks are never scanned, which
+     * is how the false-failure exclusion is satisfied structurally.
+     */
+    paths?: string[];
+}
+/** A parsed operational skill: frontmatter plus markdown body. */
+export interface OperationalSkill {
+    meta: OperationalSkillMeta;
+    body: string;
+}
+/** Thrown when a name or frontmatter violates the schema. */
+export declare class OperationalSchemaError extends Error {
+    constructor(reason: string);
+}
+/**
+ * Validate an operational skill name before it is used in any filesystem path.
+ *
+ * This runs before path construction, not after, because the name reaches
+ * `.aidlc/operational-skills/<name>.md` and four platform directories. The
+ * charset alone excludes every traversal character; the explicit separator and
+ * dot-segment checks are defence in depth so that relaxing the charset later
+ * cannot silently reopen traversal.
+ *
+ * @param name - Candidate skill name.
+ * @throws {OperationalSchemaError} When the name is unusable or reserved.
+ */
+export declare function validateOperationalSkillName(name: string): void;
+/**
+ * Serialize an operational skill to frontmatter + body.
+ *
+ * Keys are emitted in `KEY_ORDER` and optional keys are omitted when absent, so
+ * the same input always produces the same bytes — the ordering half of AC-17.
+ *
+ * @param skill - The skill to serialize.
+ * @returns Full file content, frontmatter first.
+ */
+export declare function serializeOperationalSkill(skill: OperationalSkill): string;
+/**
+ * Parse an operational skill file into frontmatter and body.
+ *
+ * @param raw - Full file content.
+ * @returns The parsed skill.
+ * @throws {OperationalSchemaError} On missing/unclosed frontmatter, a missing or
+ *   wrongly-typed required field, or an invalid name.
+ */
+export declare function parseOperationalSkill(raw: string): OperationalSkill;
+//# sourceMappingURL=schema.d.ts.map

package/dist/operational/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/operational/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAQH,8EAA8E;AAC9E,eAAO,MAAM,2BAA2B,KAAK,CAAC;AAyB9C,wEAAwE;AACxE,eAAO,MAAM,gBAAgB,gBAAgB,CAAC;AAM9C,mDAAmD;AACnD,MAAM,WAAW,oBAAoB;IACnC,+DAA+D;IAC/D,IAAI,EAAE,MAAM,CAAC;IACb,4DAA4D;IAC5D,WAAW,EAAE,MAAM,CAAC;IACpB,sEAAsE;IACtE,IAAI,EAAE,OAAO,gBAAgB,CAAC;IAC9B,6DAA6D;IAC7D,YAAY,EAAE,MAAM,CAAC;IACrB,wEAAwE;IACxE,eAAe,EAAE,MAAM,CAAC;IACxB,qDAAqD;IACrD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,kEAAkE;AAClE,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,oBAAoB,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;CACd;AAED,6DAA6D;AAC7D,qBAAa,sBAAuB,SAAQ,KAAK;gBACnC,MAAM,EAAE,MAAM;CAI3B;AAMD;;;;;;;;;;;GAWG;AACH,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CA+C/D;AAmBD;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,gBAAgB,GAAG,MAAM,CA0BzE;AAMD;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,CAmEnE"}

package/dist/operational/schema.js

@@ -0,0 +1,205 @@
+/**
+ * Operational-skill schema: frontmatter shape, parsing, serialization, and name
+ * validation.
+ *
+ * Deliberately NOT `SkillMeta`. `SkillMeta` requires `phase: PhaseName`
+ * (`core/types.ts`) and `parseSkillFile` throws without it
+ * (`compile/loaders.ts:84`) — an operational skill has no lifecycle phase, which
+ * is the constraint behind decision D-1's separate emit path (AC-33, AC-39).
+ *
+ * Requirements: AC-19, AC-20, AC-33, AC-39, AC-42
+ *
+ * @module
+ */
+import { parse as parseYaml } from 'yaml';
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+/** Maximum length of an operational skill name (matches the platform cap). */
+export const MAX_OPERATIONAL_NAME_LENGTH = 64;
+/** Allowed name charset: lowercase alphanumeric plus interior hyphens. */
+const NAME_RE = /^[a-z][a-z0-9-]*$/;
+/** The namespace reserved for framework-owned skills (AC-19). */
+const RESERVED_PREFIX = 'aidlc-';
+/** The bare framework entry-point name, also reserved. */
+const RESERVED_BARE = 'aidlc';
+/**
+ * Frontmatter key order for serialization. Fixed, because a stable key order is
+ * half of AC-17's byte-identical determinism guarantee.
+ */
+const KEY_ORDER = [
+    'name',
+    'description',
+    'kind',
+    'generated_by',
+    'content_version',
+    'trigger',
+    'paths',
+];
+/** The literal `kind` value that marks a skill as app-owned (AC-20). */
+export const OPERATIONAL_KIND = 'operational';
+/** Thrown when a name or frontmatter violates the schema. */
+export class OperationalSchemaError extends Error {
+    constructor(reason) {
+        super(reason);
+        this.name = 'OperationalSchemaError';
+    }
+}
+// ---------------------------------------------------------------------------
+// Name validation (AC-19, AC-42) — a security boundary
+// ---------------------------------------------------------------------------
+/**
+ * Validate an operational skill name before it is used in any filesystem path.
+ *
+ * This runs before path construction, not after, because the name reaches
+ * `.aidlc/operational-skills/<name>.md` and four platform directories. The
+ * charset alone excludes every traversal character; the explicit separator and
+ * dot-segment checks are defence in depth so that relaxing the charset later
+ * cannot silently reopen traversal.
+ *
+ * @param name - Candidate skill name.
+ * @throws {OperationalSchemaError} When the name is unusable or reserved.
+ */
+export function validateOperationalSkillName(name) {
+    if (typeof name !== 'string' || name.length === 0) {
+        throw new OperationalSchemaError('skill name is required');
+    }
+    // Traversal and separator rejection — checked before the charset test so the
+    // error message names the real problem rather than a generic charset failure.
+    if (name.includes('/') || name.includes('\\')) {
+        throw new OperationalSchemaError(`skill name '${name}' must not contain path separators`);
+    }
+    if (name.includes('..')) {
+        throw new OperationalSchemaError(`skill name '${name}' must not contain '..'`);
+    }
+    if (name.startsWith('.')) {
+        throw new OperationalSchemaError(`skill name '${name}' must not start with '.'`);
+    }
+    if (name.length > MAX_OPERATIONAL_NAME_LENGTH) {
+        throw new OperationalSchemaError(`skill name '${name}' exceeds ${MAX_OPERATIONAL_NAME_LENGTH} characters`);
+    }
+    if (!NAME_RE.test(name)) {
+        throw new OperationalSchemaError(`skill name '${name}' must be lowercase letters, digits, and hyphens, starting with a letter`);
+    }
+    if (name.endsWith('-') || name.includes('--')) {
+        throw new OperationalSchemaError(`skill name '${name}' must not contain consecutive or trailing hyphens`);
+    }
+    // AC-19 enforced, not merely observed: the aidlc- namespace is framework-owned.
+    if (name === RESERVED_BARE || name.startsWith(RESERVED_PREFIX)) {
+        throw new OperationalSchemaError(`skill name '${name}' is reserved: the '${RESERVED_PREFIX}' namespace belongs to framework skills`);
+    }
+}
+// ---------------------------------------------------------------------------
+// Serialization
+// ---------------------------------------------------------------------------
+/** Quote a scalar for YAML only when necessary, so output stays readable. */
+function scalar(value) {
+    const needsQuoting = value === '' ||
+        /^[\s]|[\s]$/.test(value) ||
+        /^[-?:,[\]{}#&*!|>'"%@`]/.test(value) ||
+        /:\s/.test(value) ||
+        / #/.test(value) ||
+        /[\n"]/.test(value);
+    if (!needsQuoting)
+        return value;
+    return `"${value.replace(/\\/g, '\\\\').replace(/"/g, '\\"')}"`;
+}
+/**
+ * Serialize an operational skill to frontmatter + body.
+ *
+ * Keys are emitted in `KEY_ORDER` and optional keys are omitted when absent, so
+ * the same input always produces the same bytes — the ordering half of AC-17.
+ *
+ * @param skill - The skill to serialize.
+ * @returns Full file content, frontmatter first.
+ */
+export function serializeOperationalSkill(skill) {
+    const meta = skill.meta;
+    const lines = ['---'];
+    for (const key of KEY_ORDER) {
+        const value = meta[key];
+        if (value === undefined || value === null)
+            continue;
+        if (Array.isArray(value)) {
+            if (value.length === 0)
+                continue;
+            lines.push(`${key}:`);
+            for (const item of value) {
+                lines.push(`  - ${scalar(String(item))}`);
+            }
+            continue;
+        }
+        lines.push(`${key}: ${scalar(String(value))}`);
+    }
+    lines.push('---');
+    // Exactly one blank line between frontmatter and body, and the body's own
+    // leading whitespace is not preserved — both matter for determinism.
+    const body = skill.body.replace(/^\n+/, '');
+    return `${lines.join('\n')}\n\n${body}`;
+}
+// ---------------------------------------------------------------------------
+// Parsing
+// ---------------------------------------------------------------------------
+/**
+ * Parse an operational skill file into frontmatter and body.
+ *
+ * @param raw - Full file content.
+ * @returns The parsed skill.
+ * @throws {OperationalSchemaError} On missing/unclosed frontmatter, a missing or
+ *   wrongly-typed required field, or an invalid name.
+ */
+export function parseOperationalSkill(raw) {
+    const lines = raw.split('\n');
+    if (lines[0]?.trim() !== '---') {
+        throw new OperationalSchemaError('missing YAML frontmatter delimiter');
+    }
+    let endIndex = -1;
+    for (let i = 1; i < lines.length; i++) {
+        if (lines[i]?.trim() === '---') {
+            endIndex = i;
+            break;
+        }
+    }
+    if (endIndex === -1) {
+        throw new OperationalSchemaError('unclosed YAML frontmatter');
+    }
+    let parsed;
+    try {
+        parsed = parseYaml(lines.slice(1, endIndex).join('\n'));
+    }
+    catch (err) {
+        throw new OperationalSchemaError(`invalid YAML frontmatter: ${err.message}`);
+    }
+    if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
+        throw new OperationalSchemaError('frontmatter must be a YAML mapping');
+    }
+    const m = parsed;
+    for (const field of ['name', 'description', 'generated_by', 'content_version']) {
+        if (typeof m[field] !== 'string' || m[field].length === 0) {
+            throw new OperationalSchemaError(`frontmatter missing required field '${field}'`);
+        }
+    }
+    if (m.kind !== OPERATIONAL_KIND) {
+        throw new OperationalSchemaError(`frontmatter field 'kind' must be '${OPERATIONAL_KIND}' (found ${JSON.stringify(m.kind)})`);
+    }
+    if (m.trigger !== undefined && typeof m.trigger !== 'string') {
+        throw new OperationalSchemaError("frontmatter field 'trigger' must be a string");
+    }
+    if (m.paths !== undefined) {
+        if (!Array.isArray(m.paths) || m.paths.some((p) => typeof p !== 'string')) {
+            throw new OperationalSchemaError("frontmatter field 'paths' must be a list of strings");
+        }
+    }
+    validateOperationalSkillName(m.name);
+    const meta = {
+        name: m.name,
+        description: m.description,
+        kind: OPERATIONAL_KIND,
+        generated_by: m.generated_by,
+        content_version: m.content_version,
+        ...(m.trigger !== undefined ? { trigger: m.trigger } : {}),
+        ...(m.paths !== undefined ? { paths: m.paths } : {}),
+    };
+    return { meta, body: lines.slice(endIndex + 1).join('\n').replace(/^\n+/, '') };
+}
+//# sourceMappingURL=schema.js.map

package/dist/operational/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/operational/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAE1C,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,8EAA8E;AAC9E,MAAM,CAAC,MAAM,2BAA2B,GAAG,EAAE,CAAC;AAE9C,0EAA0E;AAC1E,MAAM,OAAO,GAAG,mBAAmB,CAAC;AAEpC,iEAAiE;AACjE,MAAM,eAAe,GAAG,QAAQ,CAAC;AAEjC,0DAA0D;AAC1D,MAAM,aAAa,GAAG,OAAO,CAAC;AAE9B;;;GAGG;AACH,MAAM,SAAS,GAAG;IAChB,MAAM;IACN,aAAa;IACb,MAAM;IACN,cAAc;IACd,iBAAiB;IACjB,SAAS;IACT,OAAO;CACC,CAAC;AAEX,wEAAwE;AACxE,MAAM,CAAC,MAAM,gBAAgB,GAAG,aAAa,CAAC;AAkC9C,6DAA6D;AAC7D,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAC/C,YAAY,MAAc;QACxB,KAAK,CAAC,MAAM,CAAC,CAAC;QACd,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED,8EAA8E;AAC9E,uDAAuD;AACvD,8EAA8E;AAE9E;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,4BAA4B,CAAC,IAAY;IACvD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,sBAAsB,CAAC,wBAAwB,CAAC,CAAC;IAC7D,CAAC;IAED,6EAA6E;IAC7E,8EAA8E;IAC9E,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,sBAAsB,CAC9B,eAAe,IAAI,oCAAoC,CACxD,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,sBAAsB,CAC9B,eAAe,IAAI,yBAAyB,CAC7C,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,sBAAsB,CAC9B,eAAe,IAAI,2BAA2B,CAC/C,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,GAAG,2BAA2B,EAAE,CAAC;QAC9C,MAAM,IAAI,sBAAsB,CAC9B,eAAe,IAAI,aAAa,2BAA2B,aAAa,CACzE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,sBAAsB,CAC9B,eAAe,IAAI,0EAA0E,CAC9F,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,sBAAsB,CAC9B,eAAe,IAAI,oDAAoD,CACxE,CAAC;IACJ,CAAC;IAED,gFAAgF;IAChF,IAAI,IAAI,KAAK,aAAa,IAAI,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,sBAAsB,CAC9B,eAAe,IAAI,uBAAuB,eAAe,yCAAyC,CACnG,CAAC;IACJ,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E,6EAA6E;AAC7E,SAAS,MAAM,CAAC,KAAa;IAC3B,MAAM,YAAY,GAChB,KAAK,KAAK,EAAE;QACZ,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;QACzB,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;QACjB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtB,IAAI,CAAC,YAAY;QAAE,OAAO,KAAK,CAAC;IAChC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC;AAClE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAAuB;IAC/D,MAAM,IAAI,GAAG,KAAK,CAAC,IAA0C,CAAC;IAC9D,MAAM,KAAK,GAAa,CAAC,KAAK,CAAC,CAAC;IAEhC,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;YAAE,SAAS;QAEpD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACjC,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;YACtB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,KAAK,CAAC,IAAI,CAAC,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;YAC5C,CAAC;YACD,SAAS;QACX,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAElB,0EAA0E;IAC1E,qEAAqE;IACrE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC5C,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;AAC1C,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAE9B,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,KAAK,EAAE,CAAC;QAC/B,MAAM,IAAI,sBAAsB,CAAC,oCAAoC,CAAC,CAAC;IACzE,CAAC;IAED,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC;IAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,KAAK,EAAE,CAAC;YAC/B,QAAQ,GAAG,CAAC,CAAC;YACb,MAAM;QACR,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,sBAAsB,CAAC,2BAA2B,CAAC,CAAC;IAChE,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,sBAAsB,CAC9B,6BAA8B,GAAa,CAAC,OAAO,EAAE,CACtD,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,sBAAsB,CAAC,oCAAoC,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,CAAC,GAAG,MAAiC,CAAC;IAE5C,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,iBAAiB,CAAU,EAAE,CAAC;QACxF,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAK,CAAC,CAAC,KAAK,CAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,sBAAsB,CAAC,uCAAuC,KAAK,GAAG,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAED,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QAChC,MAAM,IAAI,sBAAsB,CAC9B,qCAAqC,gBAAgB,YAAY,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAC3F,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC7D,MAAM,IAAI,sBAAsB,CAAC,8CAA8C,CAAC,CAAC;IACnF,CAAC;IAED,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;YAC1E,MAAM,IAAI,sBAAsB,CAAC,qDAAqD,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;IAED,4BAA4B,CAAC,CAAC,CAAC,IAAc,CAAC,CAAC;IAE/C,MAAM,IAAI,GAAyB;QACjC,IAAI,EAAE,CAAC,CAAC,IAAc;QACtB,WAAW,EAAE,CAAC,CAAC,WAAqB;QACpC,IAAI,EAAE,gBAAgB;QACtB,YAAY,EAAE,CAAC,CAAC,YAAsB;QACtC,eAAe,EAAE,CAAC,CAAC,eAAyB;QAC5C,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjE,CAAC;IAEF,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;AAClF,CAAC"}

package/dist/operational/verify.d.ts

@@ -0,0 +1,100 @@
+/**
+ * Verification-step inlining and the generated-skill smoke check.
+ *
+ * Two responsibilities, both consequences of decision D-5:
+ *
+ * - `extractVerifySteps` reads the delimited region of
+ *   `packages/content/guidance/content-operations.md` **from the installed content
+ *   package**, so generation never depends on a project-level `.aidlc/guidance/`
+ *   directory (AC-36). That matters because the guidance-layer machinery does not
+ *   work: `{{guidance:}}` placeholders have no production resolver and bundled
+ *   layers are never installed into a project.
+ * - `checkOperationalSkill` is the AC-38 smoke check. It is a plain function, not
+ *   a test-framework test, because a generated skill lives in the user's repo,
+ *   which may have no JS toolchain at all.
+ *
+ * Requirements: AC-35, AC-36, AC-37, AC-38
+ *
+ * @module
+ */
+/** Filename of the verification-steps source inside the content package. */
+export declare const VERIFY_SOURCE_FILE = "content-operations.md";
+/** Opening delimiter of the machine-managed region. */
+export declare const VERIFY_BEGIN = "<!-- aidlc:verify-steps:begin -->";
+/** Closing delimiter of the machine-managed region. */
+export declare const VERIFY_END = "<!-- aidlc:verify-steps:end -->";
+/** Thrown when the verification source is missing or malformed. */
+export declare class VerifySourceError extends Error {
+    constructor(reason: string);
+}
+/**
+ * Absolute path to the verification-steps source.
+ *
+ * @param contentRoot - Content package root (see `compile/content-root.ts`).
+ */
+export declare function verifySourcePath(contentRoot: string): string;
+/**
+ * Read the verification steps from the content package.
+ *
+ * Returns the bytes strictly between the delimiters, trimmed of surrounding blank
+ * lines. Byte-exactness matters: AC-37 asserts that the text in a generated skill
+ * is identical to this region.
+ *
+ * @param contentRoot - Content package root.
+ * @returns The verification-steps text.
+ * @throws {VerifySourceError} When the file is absent, the delimiters are missing
+ *   or inverted, the region is empty, or it contains a `{{` sequence.
+ */
+export declare function extractVerifySteps(contentRoot: string): string;
+/**
+ * Wrap verification steps in the delimiters that mark them machine-managed.
+ *
+ * Re-emit replaces only the bytes between these markers, which is what lets a
+ * content-package update reach existing skills while leaving user-authored
+ * content untouched (AC-50 as scoped by the design).
+ *
+ * @param steps - Verification-steps text.
+ * @returns The delimited block.
+ */
+export declare function wrapVerifySection(steps: string): string;
+/**
+ * Extract the managed region from a generated skill body.
+ *
+ * @param body - Generated skill body.
+ * @returns The verification text, or null when no managed region is present.
+ */
+export declare function readVerifySection(body: string): string | null;
+/**
+ * Replace the managed region of a body, leaving every other byte alone.
+ *
+ * @param body - Existing skill body.
+ * @param steps - Replacement verification steps.
+ * @returns The updated body, or null when the body has no managed region.
+ */
+export declare function replaceVerifySection(body: string, steps: string): string | null;
+/** Result of the generated-skill smoke check. */
+export interface SkillCheckResult {
+    ok: boolean;
+    /** Human-readable failures; empty when `ok`. */
+    failures: string[];
+}
+/**
+ * Smoke-check a generated operational skill.
+ *
+ * Assertions, in order:
+ * 1. The file parses against the operational-skill schema.
+ * 2. A verification section is present, and the managed region contains no `{{`.
+ * 3. Every path declared in `meta.paths` exists.
+ *
+ * Path checking reads **only** `meta.paths` — never prose, never fenced code
+ * blocks. That is how AC-38's false-failure exclusion is satisfied structurally
+ * rather than by heuristic. Likewise the `{{` check is scoped to the managed
+ * region, so a skill that legitimately documents Handlebars or `${{ }}` syntax in
+ * its own instructions does not fail its own smoke check.
+ *
+ * @param raw - Full content of the generated skill file.
+ * @param projectRoot - Root the declared paths are relative to.
+ * @returns Pass/fail plus every failure found (not just the first).
+ */
+export declare function checkOperationalSkill(raw: string, projectRoot: string): SkillCheckResult;
+//# sourceMappingURL=verify.d.ts.map

package/dist/operational/verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../src/operational/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAWH,4EAA4E;AAC5E,eAAO,MAAM,kBAAkB,0BAA0B,CAAC;AAE1D,uDAAuD;AACvD,eAAO,MAAM,YAAY,sCAAsC,CAAC;AAEhE,uDAAuD;AACvD,eAAO,MAAM,UAAU,oCAAoC,CAAC;AAM5D,mEAAmE;AACnE,qBAAa,iBAAkB,SAAQ,KAAK;gBAC9B,MAAM,EAAE,MAAM;CAI3B;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAqC9D;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAK7D;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAK/E;AAMD,iDAAiD;AACjD,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,OAAO,CAAC;IACZ,gDAAgD;IAChD,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,gBAAgB,CAoCxF"}

package/dist/operational/verify.js

@@ -0,0 +1,175 @@
+/**
+ * Verification-step inlining and the generated-skill smoke check.
+ *
+ * Two responsibilities, both consequences of decision D-5:
+ *
+ * - `extractVerifySteps` reads the delimited region of
+ *   `packages/content/guidance/content-operations.md` **from the installed content
+ *   package**, so generation never depends on a project-level `.aidlc/guidance/`
+ *   directory (AC-36). That matters because the guidance-layer machinery does not
+ *   work: `{{guidance:}}` placeholders have no production resolver and bundled
+ *   layers are never installed into a project.
+ * - `checkOperationalSkill` is the AC-38 smoke check. It is a plain function, not
+ *   a test-framework test, because a generated skill lives in the user's repo,
+ *   which may have no JS toolchain at all.
+ *
+ * Requirements: AC-35, AC-36, AC-37, AC-38
+ *
+ * @module
+ */
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { OperationalSchemaError, parseOperationalSkill } from './schema.js';
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+/** Filename of the verification-steps source inside the content package. */
+export const VERIFY_SOURCE_FILE = 'content-operations.md';
+/** Opening delimiter of the machine-managed region. */
+export const VERIFY_BEGIN = '<!-- aidlc:verify-steps:begin -->';
+/** Closing delimiter of the machine-managed region. */
+export const VERIFY_END = '<!-- aidlc:verify-steps:end -->';
+// ---------------------------------------------------------------------------
+// Extraction
+// ---------------------------------------------------------------------------
+/** Thrown when the verification source is missing or malformed. */
+export class VerifySourceError extends Error {
+    constructor(reason) {
+        super(reason);
+        this.name = 'VerifySourceError';
+    }
+}
+/**
+ * Absolute path to the verification-steps source.
+ *
+ * @param contentRoot - Content package root (see `compile/content-root.ts`).
+ */
+export function verifySourcePath(contentRoot) {
+    return join(contentRoot, 'guidance', VERIFY_SOURCE_FILE);
+}
+/**
+ * Read the verification steps from the content package.
+ *
+ * Returns the bytes strictly between the delimiters, trimmed of surrounding blank
+ * lines. Byte-exactness matters: AC-37 asserts that the text in a generated skill
+ * is identical to this region.
+ *
+ * @param contentRoot - Content package root.
+ * @returns The verification-steps text.
+ * @throws {VerifySourceError} When the file is absent, the delimiters are missing
+ *   or inverted, the region is empty, or it contains a `{{` sequence.
+ */
+export function extractVerifySteps(contentRoot) {
+    const path = verifySourcePath(contentRoot);
+    if (!existsSync(path)) {
+        throw new VerifySourceError(`verification source not found at ${path}; the installed @rasensio/aidlc-content package may be too old`);
+    }
+    const raw = readFileSync(path, 'utf8');
+    const beginIdx = raw.indexOf(VERIFY_BEGIN);
+    const endIdx = raw.indexOf(VERIFY_END);
+    if (beginIdx === -1 || endIdx === -1) {
+        throw new VerifySourceError(`${VERIFY_SOURCE_FILE} is missing the ${VERIFY_BEGIN} / ${VERIFY_END} delimiters`);
+    }
+    if (endIdx < beginIdx) {
+        throw new VerifySourceError(`${VERIFY_SOURCE_FILE} has inverted verify-steps delimiters`);
+    }
+    const region = raw.slice(beginIdx + VERIFY_BEGIN.length, endIdx).replace(/^\n+|\n+$/g, '');
+    if (region.length === 0) {
+        throw new VerifySourceError(`${VERIFY_SOURCE_FILE} has an empty verify-steps region`);
+    }
+    // AC-35: no generated file may contain an unresolved placeholder. Enforced at
+    // the source rather than trusted, since the region is copied verbatim.
+    if (region.includes('{{')) {
+        throw new VerifySourceError(`${VERIFY_SOURCE_FILE} verify-steps region contains a '{{' placeholder sequence; it is inlined literally and must not use placeholder syntax`);
+    }
+    return region;
+}
+/**
+ * Wrap verification steps in the delimiters that mark them machine-managed.
+ *
+ * Re-emit replaces only the bytes between these markers, which is what lets a
+ * content-package update reach existing skills while leaving user-authored
+ * content untouched (AC-50 as scoped by the design).
+ *
+ * @param steps - Verification-steps text.
+ * @returns The delimited block.
+ */
+export function wrapVerifySection(steps) {
+    return `${VERIFY_BEGIN}\n${steps}\n${VERIFY_END}`;
+}
+/**
+ * Extract the managed region from a generated skill body.
+ *
+ * @param body - Generated skill body.
+ * @returns The verification text, or null when no managed region is present.
+ */
+export function readVerifySection(body) {
+    const beginIdx = body.indexOf(VERIFY_BEGIN);
+    const endIdx = body.indexOf(VERIFY_END);
+    if (beginIdx === -1 || endIdx === -1 || endIdx < beginIdx)
+        return null;
+    return body.slice(beginIdx + VERIFY_BEGIN.length, endIdx).replace(/^\n+|\n+$/g, '');
+}
+/**
+ * Replace the managed region of a body, leaving every other byte alone.
+ *
+ * @param body - Existing skill body.
+ * @param steps - Replacement verification steps.
+ * @returns The updated body, or null when the body has no managed region.
+ */
+export function replaceVerifySection(body, steps) {
+    const beginIdx = body.indexOf(VERIFY_BEGIN);
+    const endIdx = body.indexOf(VERIFY_END);
+    if (beginIdx === -1 || endIdx === -1 || endIdx < beginIdx)
+        return null;
+    return body.slice(0, beginIdx) + wrapVerifySection(steps) + body.slice(endIdx + VERIFY_END.length);
+}
+/**
+ * Smoke-check a generated operational skill.
+ *
+ * Assertions, in order:
+ * 1. The file parses against the operational-skill schema.
+ * 2. A verification section is present, and the managed region contains no `{{`.
+ * 3. Every path declared in `meta.paths` exists.
+ *
+ * Path checking reads **only** `meta.paths` — never prose, never fenced code
+ * blocks. That is how AC-38's false-failure exclusion is satisfied structurally
+ * rather than by heuristic. Likewise the `{{` check is scoped to the managed
+ * region, so a skill that legitimately documents Handlebars or `${{ }}` syntax in
+ * its own instructions does not fail its own smoke check.
+ *
+ * @param raw - Full content of the generated skill file.
+ * @param projectRoot - Root the declared paths are relative to.
+ * @returns Pass/fail plus every failure found (not just the first).
+ */
+export function checkOperationalSkill(raw, projectRoot) {
+    const failures = [];
+    let parsed;
+    try {
+        parsed = parseOperationalSkill(raw);
+    }
+    catch (err) {
+        const reason = err instanceof OperationalSchemaError ? err.message : err.message;
+        // Nothing downstream is meaningful without a parse, so stop here.
+        return { ok: false, failures: [`does not parse: ${reason}`] };
+    }
+    const section = readVerifySection(parsed.body);
+    if (section === null) {
+        failures.push(`missing verification section (expected ${VERIFY_BEGIN} … ${VERIFY_END})`);
+    }
+    else {
+        if (section.length === 0) {
+            failures.push('verification section is empty');
+        }
+        if (section.includes('{{')) {
+            failures.push("verification section contains an unresolved '{{' placeholder — it must be literal text");
+        }
+    }
+    for (const declared of parsed.meta.paths ?? []) {
+        if (!existsSync(join(projectRoot, declared))) {
+            failures.push(`declared path does not exist: ${declared}`);
+        }
+    }
+    return { ok: failures.length === 0, failures };
+}
+//# sourceMappingURL=verify.js.map

package/dist/operational/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../src/operational/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAE5E,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,4EAA4E;AAC5E,MAAM,CAAC,MAAM,kBAAkB,GAAG,uBAAuB,CAAC;AAE1D,uDAAuD;AACvD,MAAM,CAAC,MAAM,YAAY,GAAG,mCAAmC,CAAC;AAEhE,uDAAuD;AACvD,MAAM,CAAC,MAAM,UAAU,GAAG,iCAAiC,CAAC;AAE5D,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E,mEAAmE;AACnE,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C,YAAY,MAAc;QACxB,KAAK,CAAC,MAAM,CAAC,CAAC;QACd,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,WAAmB;IAClD,OAAO,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,kBAAkB,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAAC,WAAmB;IACpD,MAAM,IAAI,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAE3C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,iBAAiB,CACzB,oCAAoC,IAAI,gEAAgE,CACzG,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAEvC,IAAI,QAAQ,KAAK,CAAC,CAAC,IAAI,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,iBAAiB,CACzB,GAAG,kBAAkB,mBAAmB,YAAY,MAAM,UAAU,aAAa,CAClF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,GAAG,QAAQ,EAAE,CAAC;QACtB,MAAM,IAAI,iBAAiB,CAAC,GAAG,kBAAkB,uCAAuC,CAAC,CAAC;IAC5F,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,GAAG,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAE3F,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,iBAAiB,CAAC,GAAG,kBAAkB,mCAAmC,CAAC,CAAC;IACxF,CAAC;IAED,8EAA8E;IAC9E,uEAAuE;IACvE,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,iBAAiB,CACzB,GAAG,kBAAkB,wHAAwH,CAC9I,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,OAAO,GAAG,YAAY,KAAK,KAAK,KAAK,UAAU,EAAE,CAAC;AACpD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACxC,IAAI,QAAQ,KAAK,CAAC,CAAC,IAAI,MAAM,KAAK,CAAC,CAAC,IAAI,MAAM,GAAG,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvE,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AACtF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,KAAa;IAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACxC,IAAI,QAAQ,KAAK,CAAC,CAAC,IAAI,MAAM,KAAK,CAAC,CAAC,IAAI,MAAM,GAAG,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,iBAAiB,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;AACrG,CAAC;AAaD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAW,EAAE,WAAmB;IACpE,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GACV,GAAG,YAAY,sBAAsB,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAE,GAAa,CAAC,OAAO,CAAC;QAC/E,kEAAkE;QAClE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,mBAAmB,MAAM,EAAE,CAAC,EAAE,CAAC;IAChE,CAAC;IAED,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,QAAQ,CAAC,IAAI,CACX,0CAA0C,YAAY,MAAM,UAAU,GAAG,CAC1E,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,QAAQ,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,QAAQ,CAAC,IAAI,CACX,wFAAwF,CACzF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;QAC/C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;YAC7C,QAAQ,CAAC,IAAI,CAAC,iCAAiC,QAAQ,EAAE,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC;AACjD,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rasensio/aidlc",
-  "version": "1.8.1",
+  "version": "1.9.1",
   "description": "AI Development Lifecycle Framework — structured lifecycle guidance for AI coding agents across platforms",
   "type": "module",
   "main": "dist/cli.js",
@@ -24,7 +24,7 @@
     "commander": "15.0.0",
     "picomatch": "4.0.5",
     "yaml": "2.9.0",
-    "@rasensio/aidlc-content": "1.8.1"
+    "@rasensio/aidlc-content": "1.9.1"
   },
   "devDependencies": {
     "@types/node": "22.15.32",