@sdd-method/author-cli 0.4.0 → 0.6.0

package/dist/author-program.js

@@ -22,6 +22,7 @@ import { registerConformance } from "./verbs/conformance.js";
 import { registerContext } from "./verbs/context.js";
 import { registerContracts } from "./verbs/contracts.js";
 import { registerGenerateBriefing } from "./verbs/generate-briefing.js";
+import { registerMigrate } from "./verbs/migrate.js";
 import { registerPlan } from "./verbs/plan.js";
 import { registerRender } from "./verbs/render.js";
 import { registerScaffold } from "./verbs/scaffold.js";
@@ -44,6 +45,7 @@ export const AUTHOR_ONLY_SURFACE = [
     "generate-briefing",
     "context pull",
     "catalogue check",
+    "migrate vocabulary",
 ];
 /** The full surface: verify's, plus the author's own. */
 export const AUTHOR_SURFACE = [...VERIFY_SURFACE, ...AUTHOR_ONLY_SURFACE];
@@ -83,6 +85,7 @@ export function buildAuthorProgram() {
     // The verify surface first, from verify's own registration: verify ⊂ author is structural.
     registerVerifySurface(program);
     registerScaffold(program);
+    registerMigrate(program);
     registerPlan(program);
     registerContracts(program);
     registerConformance(program);

package/dist/lib/behaviour-store/archive.js

@@ -0,0 +1,180 @@
+// What the catalogue and the behaviour-store checks both read from a store's archive: the order its changes
+// were archived in, and the requirements each delta names. Pure reads, no catalogue or validator types, so the
+// verify-only CLI can carry it.
+//
+// Archive order is the archive date, then the order in which the SDD's history first added each archive
+// directory, then the name. The date prefix alone ties for changes archived the same day, and their names say
+// nothing about which came first; an untracked archive is newer than every tracked one. Same-day archives the
+// history cannot order are returned as ties, for the caller to report.
+import { execFile as execFileCb } from "node:child_process";
+import { promisify } from "node:util";
+const execFile = promisify(execFileCb);
+/** Requirement names and scenario counts under each `## <OP> Requirements` section (or the whole file for a living spec). */
+export function parseRequirements(text) {
+    const out = [];
+    let op = null;
+    let current = null;
+    for (const line of text.split("\n")) {
+        const section = /^##\s+(ADDED|MODIFIED|REMOVED|RENAMED)\s+Requirements\b/.exec(line);
+        if (section) {
+            op = section[1];
+            current = null;
+            continue;
+        }
+        if (/^##\s/.test(line) && !/^###/.test(line)) {
+            current = null;
+            continue;
+        }
+        // RENAMED: "- FROM: `### Requirement: Old name`" then "- TO: `### Requirement: New name`"
+        const renamedFrom = /^\s*-\s*FROM:\s*`?###\s+Requirement:\s*(.+?)`?\s*$/.exec(line);
+        if (op === "RENAMED" && renamedFrom) {
+            current = null;
+            continue;
+        }
+        const renamedTo = /^\s*-\s*TO:\s*`?###\s+Requirement:\s*(.+?)`?\s*$/.exec(line);
+        if (op === "RENAMED" && renamedTo) {
+            current = { name: renamedTo[1].trim(), operation: op, scenarios: 0 };
+            out.push(current);
+            continue;
+        }
+        const req = /^###\s+Requirement:\s*(.+?)\s*$/.exec(line);
+        if (req) {
+            current = { name: req[1], operation: op, scenarios: 0 };
+            out.push(current);
+            continue;
+        }
+        if (current && /^####\s+Scenario:/.test(line))
+            current.scenarios++;
+    }
+    return out;
+}
+/** The names a RENAMED section renames FROM (the requirement a rename removes). */
+export function renamedFrom(text) {
+    const out = [];
+    let op = null;
+    for (const line of text.split("\n")) {
+        const section = /^##\s+(ADDED|MODIFIED|REMOVED|RENAMED)\s+Requirements\b/.exec(line);
+        if (section) {
+            op = section[1];
+            continue;
+        }
+        const m = /^\s*-\s*FROM:\s*`?###\s+Requirement:\s*(.+?)`?\s*$/.exec(line);
+        if (op === "RENAMED" && m)
+            out.push(m[1].trim());
+    }
+    return out;
+}
+/** Each archive directory's position in the SDD's history: the index of the first commit that added a file under it. */
+async function archiveHistory(sddPath, archiveRel) {
+    let stdout;
+    try {
+        ({ stdout } = await execFile("git", ["-C", sddPath, "log", "--relative", "--reverse", "--diff-filter=A", "--format=@%H", "--name-only", "--", archiveRel], { maxBuffer: 64 * 1024 * 1024 }));
+    }
+    catch {
+        return null;
+    }
+    const order = new Map();
+    let commit = -1;
+    for (const line of stdout.split("\n")) {
+        if (line.startsWith("@")) {
+            commit++;
+            continue;
+        }
+        if (!line.startsWith(`${archiveRel}/`))
+            continue;
+        const dir = line.slice(archiveRel.length + 1).split("/")[0];
+        if (!order.has(dir))
+            order.set(dir, commit);
+    }
+    return order;
+}
+/** Archive directories in archive order, and the adjacent same-day pairs the history could not order. */
+export async function orderArchives(sddPath, archiveRel, names) {
+    const history = await archiveHistory(sddPath, archiveRel);
+    const date = (d) => /^(\d{4}-\d{2}-\d{2})-/.exec(d)?.[1] ?? "";
+    const position = (d) => history?.get(d) ?? Number.POSITIVE_INFINITY;
+    const order = [...names].sort((a, b) => date(a).localeCompare(date(b)) || position(a) - position(b) || a.localeCompare(b));
+    const ties = [];
+    for (let i = 1; i < order.length; i++) {
+        const [a, b] = [order[i - 1], order[i]];
+        if (date(a) === date(b) && position(a) === position(b))
+            ties.push([a, b]);
+    }
+    return { order, ties };
+}
+/** The repositories a baseline was observed in: its evidence file's `**Observed in:** repo[@sha], repo[@sha]` line. */
+export function observedIn(evidence) {
+    const m = /^\s*\*\*Observed in:\*\*\s*(.+)$/m.exec(evidence);
+    if (!m)
+        return [];
+    return m[1]
+        .split(",")
+        .map((s) => s.trim().split(/\s*@\s*/)[0].replace(/`/g, "").trim())
+        .filter((s) => s !== "");
+}
+/**
+ * A baseline's `**Surfaces:**` list (M-ADR 0222 §4.3, §4.4; agreement-record-schema.yaml, Baselines): one entry per
+ * contract the observed repositories serve, either
+ *   - <contract>: covered at transport[; <note>]
+ *   - <contract>: excluded, <reason>[; <note>]
+ * A note carries detail inside the contract, such as an operation left out and why. The last standalone
+ * `**Surfaces:**` line is read, so an earlier prose section under the same label does not shadow the list.
+ * Covered needs evidence that exercises the surface as the service exposes it; evidence below the transport is
+ * not coverage, so `covered at handler` is a problem, not an entry. A wildcard may only exclude.
+ */
+export function parseSurfaces(evidence) {
+    const lines = evidence.split("\n");
+    // The LAST standalone line: an evidence file may carry an earlier prose section under the same label, and
+    // the list is what the file ends up asserting.
+    let at = -1;
+    lines.forEach((l, i) => {
+        if (/^\s*\*\*Surfaces:\*\*\s*$/.test(l))
+            at = i;
+    });
+    if (at < 0)
+        return { present: false, entries: [], problems: [] };
+    const entries = [];
+    const problems = [];
+    for (const line of lines.slice(at + 1)) {
+        if (line.trim() === "" && entries.length + problems.length === 0)
+            continue;
+        const item = /^\s*-\s+(.+?)\s*$/.exec(line);
+        if (!item)
+            break;
+        const m = /^`?([^`]+?)`?\s*:\s*(.+)$/.exec(item[1]);
+        if (!m) {
+            problems.push(`"${item[1]}" is not "<contract>: covered at transport" or "<contract>: excluded, <reason>"`);
+            continue;
+        }
+        const contract = m[1].trim();
+        const status = m[2].split(";")[0].trim();
+        const excluded = /^excluded\s*,\s*(.+)$/i.exec(status);
+        if (/^covered at transport$/i.test(status)) {
+            if (contract.includes("*"))
+                problems.push(`"${contract}": a wildcard may only exclude; list each covered contract`);
+            else
+                entries.push({ contract, covered: true, reason: "" });
+        }
+        else if (excluded) {
+            entries.push({ contract, covered: false, reason: excluded[1].trim() });
+        }
+        else if (/^covered\b/i.test(status)) {
+            problems.push(`"${contract}: ${status}": covered needs evidence at the transport; evidence below it (a handler called directly, a hand-built request) is an exclusion: "excluded, handler-only evidence"`);
+        }
+        else {
+            problems.push(`"${contract}: ${status}" is neither "covered at transport" nor "excluded, <reason>"`);
+        }
+    }
+    if (entries.length + problems.length === 0)
+        problems.push("the **Surfaces:** line lists no contract");
+    return { present: true, entries, problems };
+}
+/** Whether a Surfaces entry names a catalogue contract: its id, or a path suffix of its spec_path on a segment boundary. */
+export function surfaceMatches(entry, contractId, specPath) {
+    const e = entry.replace(/^\.\//, "");
+    if (e === contractId)
+        return true;
+    const re = new RegExp(`(^|/)${e.split("*").map((p) => p.replace(/[.+?^${}()|[\]\\]/g, "\\$&")).join("[^/]*")}$`);
+    return re.test(specPath.split("\\").join("/"));
+}
+//# sourceMappingURL=archive.js.map

package/dist/lib/catalogue/build.js

@@ -34,6 +34,7 @@ import { readCatalogueCsv } from "./csv-reader.js";
 import { buildDataItems, buildFeatureDemand, buildIntegrationSupply } from "./builders/data-items.js";
 import { buildEvidenceTargetRepos } from "./builders/evidence-target-repo.js";
 import { buildRepoDependencies } from "./builders/repo-dependency.js";
+import { buildRequirements } from "./builders/requirements.js";
 import { buildDomains, buildProducts, buildApplicationDataPlaneBindings, buildApplicationDataPlaneDeviations, buildApplicationConformanceCoverage, buildImplementations, buildRepositories, buildServices, buildCapabilities, buildCapabilityService, buildCapabilityAdr, buildCapabilityFeature, buildCapabilityContract, buildAdrs, buildAdrSupersedes, buildFeatures, buildFeatureGroups, buildFeatureGrounding, buildCapabilitySpec, buildContracts, buildDeclaredExternalContracts, buildRepoEdges, deriveFeatureRepoFromServices, buildRepoCapabilityExemption, buildServiceCapabilityExemption, buildEvents, buildServiceEvent, buildCapabilityEvent, buildFeatureEvent, buildServiceContract, buildServiceContractConsumes, buildFeatureContract, buildDomainModels, buildCapabilityDomainModel, buildFeatureDomainModel, buildFeatureSubscriptionChannels, buildProductPlatformDependencies, buildGlossaryItems, backfillGlossaryRelations, buildGlossaryXref, buildC4Systems, buildC4Containers, buildC4Components, buildC4ExternalSystems, buildExternalSystemExemption, buildContainerDependency, reportEntryIdReferentCollisions, buildSystemExternalDependency, buildPersonaC4System, buildPersonaContainer, buildPersonas, buildQualityScores, buildScaffolds, buildScreens, buildUserJourneys, buildPersonaJourney, buildPersonaFeature, buildJourneyFeature, buildProductEdges, buildIntegrations, entitySlug, buildEntitiesFromManifest, buildEntitiesFromMermaid, buildServiceEntityFromTables, enrichEntityPersistenceKind, buildC4ContainerEntity, buildC4SystemEntity, } from "./builders/index.js";
 import { buildIntegrationComponents } from "./builders/integration-components.js";
 import { loadReverseProductQuality } from "./reverse-product-quality.js";
@@ -825,7 +826,11 @@ async function collectRows(schema, manifest, findings, sddPath, snapshotStore) {
     // name/domain/publisher/transport; avsc augments schema_path/version.
     // service_event edges populate from both repo-config events.produces/consumes
     // (forward) and event-catalog.yaml publisher + consumers[] (reverse).
-    const avroContracts = contractsResult.rows.filter((c) => c["kind"] === "event");
+    // Discovered AND declared-external event contracts: an event schema in a sibling contracts repository
+    // (M-ADR 0110) is as much an event as one in the SDD. Filtering the discovered rows alone left every
+    // declared-external schema without an event row, so produces/consumes edges that resolved to one were
+    // dropped as unknown events.
+    const avroContracts = [...contractsResult.rows, ...declaredExternal.rows].filter((c) => c["kind"] === "event");
     const eventsResult = await buildEvents({
         sddPath,
         findings,
@@ -1151,6 +1156,18 @@ async function collectRows(schema, manifest, findings, sddPath, snapshotStore) {
     // M-ADR 0217: build-time and generation-time dependencies between repositories,
     // declared (repo-config depends_on) and derived (per-component sharedLibraries).
     out.set("repo_dependency", await buildRepoDependencies({ sddPath, configs: reposResult.configs, knownRepoIds: knownRepoIdsFinal, findings }));
+    // M-ADR 0221 §4.5-4.7: the behaviour store projected into requirements, their lineage and their status.
+    {
+        const r = await buildRequirements({
+            sddPath,
+            findings,
+            knownFeatureIds: new Set((out.get("features") ?? []).map((row) => String(row["id"]))),
+            knownRepoIds: knownRepoIdsFinal,
+        });
+        out.set("requirements", r.requirements);
+        out.set("requirement_lineage", r.lineage);
+        out.set("requirement_status", r.status);
+    }
     // 15. C4 systems + containers + components (L1 + L2 + L3). The L3 walker
     // is the forward-method authoring path reading
     // `c4-l3-*.mermaid.md` files alongside the L2 layout. The earlier Path-B

package/dist/lib/catalogue/builders/capabilities.js

@@ -13,6 +13,7 @@
 import { readFile, stat } from "node:fs/promises";
 import { join, relative, sep } from "node:path";
 import { readdir } from "node:fs/promises";
+import { rename } from "../../vocabulary/renames.js";
 const DOMAINS_DIR_REL = join("docs", "domains");
 /**
  * The vocabulary `catalogue-schema.yaml` documents for `capabilities.status`.
@@ -48,7 +49,9 @@ const DOCUMENTED_CAPABILITY_STATUS = new Set([
 const SPEC_AUTHORING_STAGES = new Set([
     "placeholder",
     "first-draft",
-    "detailed-pre-lock",
+    rename("authoring-status-detailed").new,
+    // The stage's former name (M-ADR 0222 §4.1) is the same stage on the same wrong axis.
+    rename("authoring-status-detailed").old,
     "reverse-derived",
 ]);
 /**

package/dist/lib/catalogue/builders/events.js

@@ -137,12 +137,19 @@ export async function buildEvents(inputs) {
 function normaliseSchemaPath(p) {
     return p.trim().replace(/\\/g, "/").replace(/^\.\//, "");
 }
-function inferDomainFromAvroPath(relPath) {
-    // Layout: contracts/avro/<domain>/<file>.avsc
-    const parts = relPath.split(sep);
-    if (parts.length < 4)
+export function inferDomainFromAvroPath(relPath) {
+    // Layouts: contracts/avro/<domain>/…/<file>.avsc (in the SDD); <x>-avro/<domain>/…/<file>.avsc (a sibling
+    // contracts repository, M-ADR 0110, as declared-external rows give it); docs/domains/<domain>/…
+    // The domain is the segment after the avro root, never a fixed position: the sibling layout is one level
+    // shallower, and a fixed index read its `events/` folder as the domain.
+    const parts = relPath.split("\\").join("/").split("/");
+    const d = parts.indexOf("domains");
+    if (d >= 0 && parts[d - 1] === "docs" && parts.length > d + 2)
+        return parts[d + 1] ?? "";
+    const root = parts.findIndex((p) => p === "avro" || p.endsWith("-avro"));
+    if (root < 0 || parts.length < root + 3)
         return "";
-    return parts[2] ?? "";
+    return parts[root + 1] ?? "";
 }
 function resolveContractByPath(schema, kind, index) {
     const cleaned = schema.replace(/^\/+/, "");

package/dist/lib/catalogue/builders/product-edges.js

@@ -15,6 +15,7 @@ import { readFile } from "node:fs/promises";
 import { join } from "node:path";
 import { parse as parseYaml } from "yaml";
 import { z } from "zod";
+import { canonicalValue } from "../../vocabulary/renames.js";
 const REL_PATH = "app-platform-dependencies.yaml";
 const DependencyEntrySchema = z.object({
     capability_id: z.string().optional(),
@@ -70,7 +71,8 @@ export async function buildProductEdges(inputs) {
             continue;
         const capabilityId = (dep.capability_id ?? "").trim();
         const serviceId = (dep.service_id ?? "").trim();
-        const requiredStability = (dep.required_stability ?? "").trim();
+        // Normalised silently here: product-platform-dependencies reads the same file and reports the former name.
+        const requiredStability = canonicalValue("stability-stable", (dep.required_stability ?? "").trim());
         const notes = (dep.notes ?? "").trim();
         if (capabilityId !== "") {
             const id = `${inputs.productId}__${capabilityId}`;

package/dist/lib/catalogue/builders/product-platform-dependencies.js

@@ -21,7 +21,7 @@
 //       service_id: <target-service-slug>            # platform-side service
 //       domain: <domain-hint>                        # optional (reverse shape)
 //       contract_type: rest | graphql | openapi | grpc | event | other
-//       required_stability: locked | provisional | unknown
+//       required_stability: stable | provisional | unknown
 //       contract_path: <relative-path-in-platform-sdd>  # optional (reverse)
 //       consumed_by:                                     # optional (reverse)
 //         - <service-name-within-this-product>
@@ -57,6 +57,7 @@
 import { readFile, readdir, stat } from "node:fs/promises";
 import { join, relative, sep } from "node:path";
 import { parse as parseYaml } from "yaml";
+import { canonicalValue, isFormerValue } from "../../vocabulary/renames.js";
 const FORWARD_REL_PATH = "app-platform-dependencies.yaml";
 /**
  * Contract types that denote an ASYNC shared-stream dependency (M-ADR 0192).
@@ -260,6 +261,20 @@ export async function buildProductPlatformDependencies(inputs) {
             });
         }
     }
+    // The stability class `locked` is `stable` from catalogue schema 4.0.0 (M-ADR 0222 §4.1). A source
+    // still carrying the former name is read as the new one for one major release, so no cell carries
+    // the former word, and reported once per SDD so the adopter can run the migration.
+    let former = 0;
+    for (let i = 0; i < rows.length; i++) {
+        const v = String(rows[i]["required_stability"] ?? "");
+        if (isFormerValue("stability-stable", v)) {
+            rows[i] = { ...rows[i], required_stability: canonicalValue("stability-stable", v) };
+            former++;
+        }
+    }
+    if (former > 0) {
+        inputs.findings.add("convention", `product_platform_dependencies: ${former} dependenc${former === 1 ? "y declares" : "ies declare"} the former required_stability 'locked', read as 'stable' (M-ADR 0222 §4.1); run 'sdd-cli migrate vocabulary'`);
+    }
     return rows;
 }
 /**

package/dist/lib/catalogue/builders/repo-edges.js

@@ -23,6 +23,7 @@
 //     openapi: [<path-relative-to-contracts/openapi/>]
 //     proto:   [<path-relative-to-contracts/proto/>]
 //     avro:    [<path-relative-to-contracts/avro/>]
+//     spicedb: [<path-relative-to-contracts/spicedb/>]
 //
 // Reverse-method derived sources (universal — work for any SDD with the
 // underlying catalogue rows populated):
@@ -49,7 +50,7 @@
 // feature-set` path is documented in the metamodel but unused by any
 // observed adopter — left empty here pending first-adopter authoring.
 import { basename, sep } from "node:path";
-import { normaliseAdditionalContextEntry, } from "./repositories.js";
+import { normaliseAdditionalContextEntry, REPO_CONFIG_CONTRACT_KINDS, } from "./repositories.js";
 /**
  * feature_repo derivation — `feature_service ⋈ services.primary_repo_id`.
  *
@@ -263,7 +264,7 @@ function collectRepoContract(inputs) {
         seen.add(id);
         rows.push({ id, repo_id: repoId, contract_id: contractId });
     };
-    // Forward path — declared in repo-config contracts.{openapi,proto,avro}[].
+    // Forward path — declared in repo-config contracts.{openapi,proto,avro,spicedb}[].
     // Pre-compute suffix and basename indexes for fuzzy matching.
     const suffixIndex = new Map();
     const basenameIndex = new Map();
@@ -278,7 +279,7 @@ function collectRepoContract(inputs) {
         const block = cfg.data.contracts;
         if (!block)
             continue;
-        for (const kind of ["openapi", "proto", "avro"]) {
+        for (const kind of REPO_CONFIG_CONTRACT_KINDS) {
             const list = block[kind] ?? [];
             for (const rawEntry of list) {
                 const entry = rawEntry.replace(/^\/+/, "");

package/dist/lib/catalogue/builders/repositories.js

@@ -32,11 +32,17 @@ const LOC_REPORT_REL = join("docs", "platform", "reference", "loc-report.csv");
 // mirrored source, where the manifest profile remains the honest answer.
 const REPOS_DIR_REL = "repos";
 const REVERSE_METADATA_BASENAME = "reverse-metadata.yaml";
+// The contract kinds a repo-config `contracts:` block keys, under `contracts/<kind>/`. The sdd-index reader
+// accepts the same four; `spicedb` (an `authz` contract) was once missing here, and zod strips an unknown key,
+// so a declared `.zed` schema vanished without a finding. GraphQL is not keyed in repo-config: that is its own
+// question, on this schema.
+export const REPO_CONFIG_CONTRACT_KINDS = ["openapi", "proto", "avro", "spicedb"];
 const ContractsBlockSchema = z
     .object({
     openapi: z.array(z.string()).optional(),
     proto: z.array(z.string()).optional(),
     avro: z.array(z.string()).optional(),
+    spicedb: z.array(z.string()).optional(),
 })
     .optional();
 const EventEntrySchema = z.object({

package/dist/lib/catalogue/builders/requirements.js

@@ -0,0 +1,208 @@
+// Behaviour store -> requirements, requirement_lineage, requirement_status (M-ADR 0221 §4.5-4.7, M-ADR 0223 §4.7).
+//
+// The store is an OpenSpec project inside the SDD (`openspec/`). Everything here is a projection: the living specs
+// and changes are the record, and the catalogue reads them at the SDD's own commit. A sibling-repository store is
+// read in that repository, not here.
+//
+//   requirements        one row per `### Requirement:` in a living spec (stage living), keyed by the spec's
+//                       directory name, which is the catalogue feature id; plus one per requirement an open,
+//                       agreed change ADDS (stage agreed).
+//   requirement_lineage each archived change, in archive order, whose delta ADDED, MODIFIED or RENAMED a
+//                       requirement that is current now. A change carrying baseline-evidence.md is a baseline.
+//   requirement_status  per (requirement, repository): observed from a baseline's `**Observed in:**` line;
+//                       declared-shipped from an archived change whose agreement record's verdict is PASS, through
+//                       its work orders' `implements` lists; agreed from an open change whose record is agreed.
+//                       The latest event wins, archived changes in archive order, then open changes.
+//
+// Archive order is ../../behaviour-store/archive.ts's; same-day archives the history cannot order are a finding.
+//
+// A feature or repository the catalogue does not hold is a finding and produces no row, so no foreign key dangles.
+import { readdir, readFile, stat } from "node:fs/promises";
+import { join } from "node:path";
+import { parse as parseYaml } from "yaml";
+import { observedIn, orderArchives, parseRequirements } from "../../behaviour-store/archive.js";
+export { observedIn, parseRequirements };
+const STORE = "openspec";
+const AGREEMENTS = join("docs", "agreements");
+async function isDir(p) {
+    try {
+        return (await stat(p)).isDirectory();
+    }
+    catch {
+        return false;
+    }
+}
+async function dirs(p) {
+    try {
+        return (await readdir(p, { withFileTypes: true })).filter((d) => d.isDirectory()).map((d) => d.name).sort();
+    }
+    catch {
+        return [];
+    }
+}
+async function readText(p) {
+    try {
+        return await readFile(p, "utf8");
+    }
+    catch {
+        return null;
+    }
+}
+async function deltaOf(changeDir) {
+    const out = [];
+    for (const feature of await dirs(join(changeDir, "specs"))) {
+        const file = join(changeDir, "specs", feature, "spec.md");
+        const text = await readText(file);
+        if (text === null)
+            continue;
+        for (const r of parseRequirements(text)) {
+            if (r.operation)
+                out.push({ feature, name: r.name, operation: r.operation, file, scenarios: r.scenarios });
+        }
+    }
+    return out;
+}
+async function agreementRecord(sddPath, change) {
+    const text = await readText(join(sddPath, AGREEMENTS, `${change}.yaml`));
+    if (text === null)
+        return null;
+    try {
+        const doc = parseYaml(text);
+        return doc?.agreement_record ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+/** Archive directories in archive order; same-day archives the history cannot order are reported. */
+export async function archiveOrder(sddPath, names, findings) {
+    const { order, ties } = await orderArchives(sddPath, `${STORE}/changes/archive`, names);
+    for (const [a, b] of ties) {
+        findings.add("convention", `${STORE}/changes/archive: ${a} and ${b} were archived the same day and the SDD's history does not say which came first; ordered by name, so a status that depends on their order may be wrong`);
+    }
+    return order;
+}
+const rel = (sddPath, p) => p.slice(sddPath.length + 1).split("\\").join("/");
+export async function buildRequirements(inputs) {
+    const { sddPath, findings } = inputs;
+    const empty = { requirements: [], lineage: [], status: [] };
+    const store = join(sddPath, STORE);
+    if (!(await isDir(store)))
+        return empty;
+    const requirements = new Map();
+    const unknownFeatures = new Set();
+    const known = (feature) => {
+        if (inputs.knownFeatureIds.has(feature))
+            return true;
+        unknownFeatures.add(feature);
+        return false;
+    };
+    // 1. Living specs.
+    for (const feature of await dirs(join(store, "specs"))) {
+        const file = join(store, "specs", feature, "spec.md");
+        const text = await readText(file);
+        if (text === null || !known(feature))
+            continue;
+        for (const r of parseRequirements(text)) {
+            const id = `${feature}::${r.name}`;
+            if (requirements.has(id)) {
+                findings.add("convention", `${rel(sddPath, file)}: requirement "${r.name}" is named twice; names must be unique within a spec (M-ADR 0221 §4.7)`);
+                continue;
+            }
+            requirements.set(id, { id, feature_id: feature, name: r.name, stage: "living", spec_path: rel(sddPath, file), scenario_count: r.scenarios, source_sdd_id: "", platform_sdd_id: "" });
+        }
+    }
+    const events = [];
+    const lineage = [];
+    const unknownRepos = new Set();
+    const pushEvent = (e) => {
+        if (!inputs.knownRepoIds.has(e.repo)) {
+            unknownRepos.add(e.repo);
+            return;
+        }
+        if (requirements.has(e.requirementId))
+            events.push(e);
+    };
+    // 2. Archived changes, in archive order.
+    for (const dir of await archiveOrder(sddPath, await dirs(join(store, "changes", "archive")), findings)) {
+        const changeDir = join(store, "changes", "archive", dir);
+        const change = dir.replace(/^\d{4}-\d{2}-\d{2}-/, "");
+        const archivedOn = /^(\d{4}-\d{2}-\d{2})-/.exec(dir)?.[1] ?? "";
+        const evidence = await readText(join(changeDir, "baseline-evidence.md"));
+        const kind = evidence !== null ? "baseline" : "change";
+        const delta = await deltaOf(changeDir);
+        for (const d of delta) {
+            if (d.operation === "REMOVED")
+                continue;
+            const requirementId = `${d.feature}::${d.name}`;
+            if (!requirements.has(requirementId))
+                continue;
+            lineage.push({ id: `${requirementId}__${dir}`, requirement_id: requirementId, change_id: dir, change_kind: kind, operation: d.operation, archived_on: archivedOn, source_sdd_id: "", platform_sdd_id: "" });
+        }
+        if (evidence !== null) {
+            const repos = observedIn(evidence);
+            if (repos.length === 0) {
+                findings.add("convention", `${rel(sddPath, join(changeDir, "baseline-evidence.md"))}: no "**Observed in:**" line, so its requirements carry no observed status`);
+            }
+            for (const repo of repos)
+                for (const d of delta)
+                    if (d.operation !== "REMOVED")
+                        pushEvent({ requirementId: `${d.feature}::${d.name}`, repo, status: "observed", basis: dir });
+            continue;
+        }
+        const record = await agreementRecord(sddPath, change);
+        if (record?.verdict?.result !== "PASS")
+            continue; // the behaviour-store validator reports an archived change without a PASS verdict
+        for (const wo of record.work_orders ?? []) {
+            if (!wo.repo)
+                continue;
+            for (const name of wo.implements ?? []) {
+                const match = delta.filter((d) => d.name === name && d.operation !== "REMOVED");
+                if (match.length === 0) {
+                    findings.add("convention", `${AGREEMENTS}/${change}.yaml: work order for ${wo.repo} implements "${name}", which the change's delta does not name`);
+                }
+                for (const d of match)
+                    pushEvent({ requirementId: `${d.feature}::${d.name}`, repo: wo.repo, status: "declared-shipped", basis: dir });
+            }
+        }
+    }
+    // 3. Open changes whose agreement record is agreed.
+    for (const dir of (await dirs(join(store, "changes"))).filter((d) => d !== "archive")) {
+        const record = await agreementRecord(sddPath, dir);
+        if (record?.status !== "agreed")
+            continue;
+        const delta = await deltaOf(join(store, "changes", dir));
+        for (const d of delta) {
+            const id = `${d.feature}::${d.name}`;
+            if (d.operation === "ADDED" && !requirements.has(id) && known(d.feature)) {
+                requirements.set(id, { id, feature_id: d.feature, name: d.name, stage: "agreed", spec_path: rel(sddPath, d.file), scenario_count: d.scenarios, source_sdd_id: "", platform_sdd_id: "" });
+            }
+        }
+        for (const wo of record.work_orders ?? []) {
+            if (!wo.repo)
+                continue;
+            for (const name of wo.implements ?? []) {
+                for (const d of delta.filter((x) => x.name === name && x.operation !== "REMOVED")) {
+                    pushEvent({ requirementId: `${d.feature}::${d.name}`, repo: wo.repo, status: "agreed", basis: dir });
+                }
+            }
+        }
+    }
+    for (const f of unknownFeatures)
+        findings.add("convention", `${STORE}/: a spec keyed "${f}" names no catalogue feature, so its requirements are not catalogued (M-ADR 0221 §4.7)`);
+    for (const r of unknownRepos)
+        findings.add("convention", `${STORE}/: a status names repository "${r}", which the catalogue does not hold; no status row`);
+    // Latest event per (requirement, repository) wins.
+    const status = new Map();
+    for (const e of events) {
+        const id = `${e.requirementId}__${e.repo}`;
+        status.set(id, { id, requirement_id: e.requirementId, repo_id: e.repo, status: e.status, basis: e.basis, source_sdd_id: "", platform_sdd_id: "" });
+    }
+    const byId = (a, b) => String(a["id"]).localeCompare(String(b["id"]));
+    return {
+        requirements: [...requirements.values()].sort(byId),
+        lineage,
+        status: [...status.values()].sort(byId),
+    };
+}
+//# sourceMappingURL=requirements.js.map

package/dist/lib/catalogue/builders/service-contract.js

@@ -1,10 +1,11 @@
 // service_contract edge — emits one row per (service, contract, exposes)
-// triple from `contracts.{openapi,proto,avro}` blocks in repo-config.
+// triple from `contracts.{openapi,proto,avro,spicedb}` blocks in repo-config.
 //
 // Forward method convention: a service's repo-config declares the
 // contracts it exposes. The "consumes" role isn't declared in current
 // adopters; this builder emits role=exposes only.
 import { basename, sep } from "node:path";
+import { REPO_CONFIG_CONTRACT_KINDS } from "./repositories.js";
 export function buildServiceContract(inputs) {
     const rows = [];
     const seen = new Set();
@@ -30,13 +31,9 @@ export function buildServiceContract(inputs) {
             // stays silent, as it always has.
             // NOTE: `block` here is repo-config's `contracts` (cfg.data.contracts), a
             // DIFFERENT schema from the traceability manifest's contracts block — so its
-            // three kinds are not a stale copy of the manifest's five and must not be
-            // "fixed" by the shared traceability helper. Whether repo-config should also
-            // key graphql is its own question, on its own schema.
-            const hasContracts = block !== undefined &&
-                ((block.openapi?.length ?? 0) > 0 ||
-                    (block.proto?.length ?? 0) > 0 ||
-                    (block.avro?.length ?? 0) > 0);
+            // kinds (REPO_CONFIG_CONTRACT_KINDS) are not a stale copy of the manifest's five
+            // and must not be "fixed" by the shared traceability helper.
+            const hasContracts = block !== undefined && REPO_CONFIG_CONTRACT_KINDS.some((k) => (block[k]?.length ?? 0) > 0);
             if (hasContracts) {
                 inputs.findings.add("orphan", `${cfg.relPath}: contracts block declares exposes-edges for service "${cfg.repoId}", which does not resolve in services.csv — dropped. Check a services: block entry exists at this id (M-ADR 0197); this can also mean the repo's own default service id was never a runtime type.`);
             }
@@ -44,7 +41,7 @@ export function buildServiceContract(inputs) {
         }
         if (!block)
             continue;
-        for (const kind of ["openapi", "proto", "avro"]) {
+        for (const kind of REPO_CONFIG_CONTRACT_KINDS) {
             const list = block[kind] ?? [];
             for (const rawEntry of list) {
                 const entry = rawEntry.replace(/^\/+/, "");