@sdd-method/author-cli 0.6.0 → 0.7.0

package/dist/lib/catalogue/builders/contracts.js

@@ -46,13 +46,18 @@ const KIND_SPECS = [
     // and it stayed invisible for the same reason: an unreachable value is emitted
     // for nothing and so never complains.
     //
-    // NOT zero-delta, unlike spicedb: the reverse estate already holds 7 `.graphql`
-    // files under the conventional `docs/domains/<domain>/contracts/graphql/` layout
-    // (vehicle 5, applications 2), invisible to the catalogue until now. An author
+    // NOT zero-delta, unlike spicedb: an estate already held `.graphql` files under
+    // the conventional `docs/domains/<domain>/contracts/graphql/` layout, invisible
+    // to the catalogue until then. An author
     // whose GraphQL surface could not be keyed documented the wall in their own
     // manifest — naming the schema lines that blocked them — and wrote the only
     // token left in `contracts.status`.
     { subdir: "graphql", extensions: [".graphql", ".graphqls"], kind: "graphql" },
+    // `cli` — a command-line interface's command manifest (schema 4.1.0). A command-line tool often serves no
+    // REST, RPC, event or authorization contract, so without this kind its behaviour baselines had nothing to
+    // name as their surface (M-ADR 0222 §4.4). Reachable from every path at once, unlike graphql above: discovered here, mapped from a
+    // traceability manifest's `cli:` block (DECLARED_KINDS), loaded (CONTRACT_LIST_KEYS) and keyed by repo-config.
+    { subdir: "cli", extensions: [".yaml", ".yml"], kind: "cli" },
 ];
 export async function buildContracts(inputs) {
     const rows = [];
@@ -319,6 +324,7 @@ const DECLARED_KINDS = {
     avro: "event",
     spicedb: "authz",
     graphql: "graphql",
+    cli: "cli",
 };
 export function buildDeclaredExternalContracts(inputs) {
     const rows = [];

package/dist/lib/catalogue/builders/repositories.js

@@ -33,16 +33,17 @@ const LOC_REPORT_REL = join("docs", "platform", "reference", "loc-report.csv");
 const REPOS_DIR_REL = "repos";
 const REVERSE_METADATA_BASENAME = "reverse-metadata.yaml";
 // The contract kinds a repo-config `contracts:` block keys, under `contracts/<kind>/`. The sdd-index reader
-// accepts the same four; `spicedb` (an `authz` contract) was once missing here, and zod strips an unknown key,
-// so a declared `.zed` schema vanished without a finding. GraphQL is not keyed in repo-config: that is its own
-// question, on this schema.
-export const REPO_CONFIG_CONTRACT_KINDS = ["openapi", "proto", "avro", "spicedb"];
+// accepts the same five; `spicedb` (an `authz` contract) was once missing here, and zod strips an unknown key,
+// so a declared `.zed` schema vanished without a finding. `cli` (schema 4.1.0) declares the command manifest a
+// command-line repository serves. GraphQL is not keyed in repo-config: that is its own question, on this schema.
+export const REPO_CONFIG_CONTRACT_KINDS = ["openapi", "proto", "avro", "spicedb", "cli"];
 const ContractsBlockSchema = z
     .object({
     openapi: z.array(z.string()).optional(),
     proto: z.array(z.string()).optional(),
     avro: z.array(z.string()).optional(),
     spicedb: z.array(z.string()).optional(),
+    cli: z.array(z.string()).optional(),
 })
     .optional();
 const EventEntrySchema = z.object({

package/dist/lib/catalogue/canonical-schema.yaml

@@ -7,7 +7,7 @@
 # Emitted by sdd-cli's YAML emitter with no line folding; the three header scalars are quoted for the
 # textual readers downstream. The one deliberate difference from the authored form is schema_status:
 # the authored form says canonical; a projection never does.
-schema_version: "4.0.0"
+schema_version: "4.1.0"
 schema_owner: "sdd-method"
 schema_status: "generated"
 enums:
@@ -361,6 +361,7 @@ enums:
     - value: graphql
     - value: rpc
     - value: authz
+    - value: cli
     description: Contract kind. Bound at 3.13.0 from the column descriptions; measured against both reference estates before binding (M-ADR 0205 §4.4).
   contract_status:
     values:
@@ -1552,7 +1553,7 @@ catalogues:
     - name: kind
       type: string
       nullable: false
-      description: rest | graphql | rpc | event | authz. rpc covers Proto/gRPC; event covers Avro schemas; authz covers authorization/policy schemas (SpiceDB .zed and equivalents), added because an adopter contract agreement gate certified .zed schemas as contracts while no kind could represent them.
+      description: rest | graphql | rpc | event | authz | cli. rpc covers Proto/gRPC; event covers Avro schemas; authz covers authorization/policy schemas (SpiceDB .zed and equivalents), added because an adopter contract agreement gate certified .zed schemas as contracts while no kind could represent them; cli covers a command-line interface's command manifest (its commands, options and exit codes), added at 4.1.0 because a command-line tool often serves no REST, RPC, event or authorization contract, so its behaviour baselines had nothing to name as their surface.
     - name: version
       type: string
       nullable: true

package/dist/lib/catalogue/contract-id.js

@@ -2,7 +2,7 @@
 // M-ADR 0203 §4.4, the cut's acid test.
 //
 // From 3.0.0 a contract id carries its KIND component: `{domain}-{stem}-{kind}`
-// (kind ∈ rest | graphql | rpc | event | authz). The kindless 2.x form made one
+// (kind ∈ rest | graphql | rpc | event | authz | cli). The kindless 2.x form made one
 // measured collision class unrepresentable: a service published as two contract
 // families (`calendar-service.yaml` + `calendar_service.proto`) minted one id,
 // costing a live estate one row and two edges permanently, and mislabelling

package/dist/lib/catalogue/traceability-loader.js

@@ -47,6 +47,7 @@ export const CONTRACT_LIST_KEYS = [
     "avro",
     "spicedb",
     "graphql",
+    "cli",
 ];
 /**
  * Every contract path a contracts block declares, across all kinds and both
@@ -279,6 +280,7 @@ function extractContracts(raw) {
     const avro = arr("avro");
     const spicedb = arr("spicedb");
     const graphql = arr("graphql");
+    const cli = arr("cli");
     // `provenance` (3.5.0) MUST be extracted here or the builder that reads it
     // sees nothing — this function reconstructs the block key-by-key rather than
     // passing the parsed object through, which is precisely the shape the
@@ -295,6 +297,7 @@ function extractContracts(raw) {
         ...(avro ? { avro } : {}),
         ...(spicedb ? { spicedb } : {}),
         ...(graphql ? { graphql } : {}),
+        ...(cli ? { cli } : {}),
         ...(provenance ? { provenance } : {}),
     };
 }

package/dist/lib/contracts-availability/index.js

@@ -116,7 +116,7 @@ async function collectReferences(repo) {
         const block = m.traceability.contracts;
         if (!block)
             continue;
-        for (const list of [block.openapi, block.proto, block.avro, block.spicedb]) {
+        for (const list of [block.openapi, block.proto, block.avro, block.spicedb, block.graphql, block.cli]) {
             if (!Array.isArray(list))
                 continue;
             for (const entry of list) {
@@ -186,15 +186,21 @@ async function sourceCoordinate(abs) {
         return "unversioned";
     }
 }
-function inferKind(ref) {
+export function inferKind(ref) {
     if (ref.endsWith(".avsc"))
         return "event";
     if (ref.endsWith(".proto"))
         return "rpc";
     if (ref.endsWith(".zed"))
         return "authz";
+    if (/\.graphqls?$/.test(ref))
+        return "graphql";
     if (/openapi/.test(ref) && /\.(ya?ml|json)$/.test(ref))
         return "rest";
+    // A command manifest lives under a `cli/` contracts folder. Tested after rest, so an OpenAPI file in a
+    // repository whose own name ends in -cli stays rest.
+    if (/(^|\/)cli\/.*\.ya?ml$/.test(ref))
+        return "cli";
     return undefined;
 }
 async function readManifest(abs) {

package/dist/lib/plan/read-sdd.js

@@ -44,7 +44,7 @@ async function readRepoConfigFor(sddRoot, manifestAbsPath) {
         path: manifestAbsPath,
         aggregates: [],
         internalDependencies: [],
-        contracts: { openapi: [], proto: [], avro: [], spicedb: [], graphql: [] },
+        contracts: { openapi: [], proto: [], avro: [], spicedb: [], graphql: [], cli: [] },
     };
     if (!(await fileExists(manifestAbsPath)))
         return empty;
@@ -62,6 +62,7 @@ function legacyShape(node, sourcePath) {
         proto: [],
         avro: [],
         spicedb: [],
+        cli: [],
     };
     for (const ref of node.contracts)
         byKind[ref.kind].push(ref.path);

package/dist/lib/sdd-index/repo-config.js

@@ -16,6 +16,7 @@ const CONTRACT_KINDS = [
     "proto",
     "avro",
     "spicedb",
+    "cli",
 ];
 export function readAllRepoConfigs(reader) {
     const services = [];

package/dist/maintain-version.json

@@ -1,4 +1,4 @@
 {
-  "version": "0.7.0",
-  "built_against_sdd_cli": "2.1.0"
+  "version": "0.8.0",
+  "built_against_sdd_cli": "2.2.0"
 }

package/dist/verify-version.json

@@ -1,4 +1,4 @@
 {
-  "version": "2.1.0",
-  "built_against_sdd_cli": "2.1.0"
+  "version": "2.2.0",
+  "built_against_sdd_cli": "2.2.0"
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@sdd-method/author-cli",
-  "version": "0.6.0",
-  "sddCliVersion": "2.1.0",
+  "version": "0.7.0",
+  "sddCliVersion": "2.2.0",
   "description": "Re-author one SDD's content — scaffold, plan, contracts, conformance, api-surface, snapshots, briefings, catalogue check — plus every read-only verify verb. Ships only the code those verbs reach; it cannot sync the baseline or rebuild the catalogues. Maintenance is in @sdd-method/maintain-cli, administration in @sdd-method/sdd-cli.",
   "license": "UNLICENSED",
   "type": "module",