@sdd-method/maintain-cli 0.1.0 → 0.3.0

package/dist/maintain-program.js

@@ -10,7 +10,7 @@
 // (`context pull`). Plus the whole verify surface, because the personas nest.
 //
 // ⚠ As with sdd-verify, the boundary is ABSENCE, not a menu: the package ships only the import
-// closure of maintain-bin.js, so authoring verbs (init, scaffold, plan, mcp, conformance,
+// closure of maintain-bin.js, so authoring verbs (init, scaffold, plan, conformance,
 // contracts, api-surface, snapshot, metamodel, migration-map) are not present to be reached.
 // That is why every registration below imports a per-subcommand registrar, never a barrel.
 // Unclassified verbs default to AUTHOR (M-ADR 0218 §4.2) and stay out until classified.
@@ -18,18 +18,20 @@ import { Command, CommanderError } from "commander";
 import { getPackageVersion } from "./lib/package-version.js";
 import { registerVerifySurface, rejectOutsideSurface, VERIFY_SURFACE } from "./verify-program.js";
 import { registerCatalogueAggregate, registerCatalogueBuild, registerCatalogueDiff, registerCatalogueGraph } from "./verbs/catalogue-maintain.js";
+import { registerCatalogueCheck } from "./verbs/catalogue-check.js";
 import { registerContext } from "./verbs/context.js";
 import { registerGenerateBriefing } from "./verbs/generate-briefing.js";
 import { registerPackBuild } from "./verbs/pack-build.js";
 import { registerRender } from "./verbs/render.js";
 import { registerSync } from "./verbs/sync.js";
-const SPEC_URL = "https://github.com/tomfosteruk/sdd-method/blob/main/docs/method/cli/sdd-cli-specification.md";
+const SPEC_URL = "docs/method/cli/sdd-cli-specification.md (in the method distribution)";
 /** The verbs maintain adds to verify, as `<verb>` or `<verb> <subcommand>`. Asserted by test. */
 export const MAINTAIN_ONLY_SURFACE = [
     "sync",
     "generate-briefing",
     "context pull",
     "catalogue build",
+    "catalogue check",
     "catalogue aggregate",
     "catalogue graph",
     "catalogue diff",
@@ -65,7 +67,7 @@ export function buildMaintainProgram() {
         .name("sdd-maintain")
         .description("Bring an SDD repository current and rebuild its derived model — sync, briefing, catalogue build and aggregate, pack build, context pull — plus every read-only verify verb. Cannot author specification content.")
         .version(getPackageVersion(), "-v, --version")
-        .addHelpText("after", `\nSpec: ${SPEC_URL}\nAuthoring verbs (init, scaffold, plan, mcp, conformance, …) are in @sdd-method/sdd-cli.`)
+        .addHelpText("after", `\nSpec: ${SPEC_URL}\nAuthoring verbs (scaffold, plan, conformance, …) are in @sdd-method/author-cli; init is in @sdd-method/sdd-cli.`)
         .exitOverride()
         .configureOutput({
         writeOut: (str) => process.stdout.write(str),
@@ -80,6 +82,7 @@ export function buildMaintainProgram() {
     const catalogue = program.commands.find((c) => c.name() === "catalogue");
     catalogue.description("Build, aggregate, validate and query per-SDD catalogues (ADR 0134) — the derived model");
     registerCatalogueBuild(catalogue);
+    registerCatalogueCheck(catalogue);
     registerCatalogueAggregate(catalogue);
     registerCatalogueGraph(catalogue);
     registerCatalogueDiff(catalogue);

package/dist/maintain-version.json

@@ -1,4 +1,4 @@
 {
-  "version": "0.1.0",
-  "built_against_sdd_cli": "1.42.0"
+  "version": "0.3.0",
+  "built_against_sdd_cli": "1.44.0"
 }

package/dist/verbs/catalogue-check.js

@@ -0,0 +1,28 @@
+import { resolve } from "node:path";
+import { checkCataloguesFresh } from "../lib/catalogue/freshness.js";
+/**
+ * `catalogue check` (M-ADR 0220 §4.2, ruling 3): whether the committed catalogues are what the
+ * committed specifications build to. It builds into temporary space and writes nothing to the
+ * repository: `catalogue build --check` under its own name, so the author's surface holds no verb
+ * that writes the model. Its own registrar, so an artefact can carry it without the build,
+ * aggregate and graph registrations in catalogue-maintain.ts.
+ */
+export function registerCatalogueCheck(catalogue) {
+    catalogue
+        .command("check")
+        .description("Report whether the committed catalogues/ are what the committed specifications build to; builds in a temporary directory and writes nothing (exit 1 lists every stale file)")
+        .option("--sdd-path <path>", "Path to the SDD repo root (defaults to cwd)")
+        .option("--strict", "Treat build findings as failures")
+        .option("--snapshot-store <dir>", "Snapshot store root the binding's snapshot_area is relative to (default: $SDD_SNAPSHOT_STORE; M-ADR 0214)")
+        .action(async (opts) => {
+        const snapshotStore = opts.snapshotStore ?? process.env.SDD_SNAPSHOT_STORE;
+        const r = await checkCataloguesFresh(resolve(opts.sddPath ?? process.cwd()), {
+            label: "catalogue check",
+            ...(opts.strict !== undefined ? { strict: opts.strict } : {}),
+            ...(snapshotStore !== undefined ? { snapshotStore } : {}),
+        }, (s) => process.stdout.write(s));
+        if (r.exitCode !== 0)
+            process.exit(r.exitCode);
+    });
+}
+//# sourceMappingURL=catalogue-check.js.map

package/dist/verbs/context.js

@@ -8,7 +8,7 @@ export function registerContext(program) {
         .description("Briefing for a code repository an SDD specifies (M-ADR 0128 §1, M-ADR 0150 §4.4)");
     context
         .command("pull")
-        .description("Write agent-instructions.md, the harness wrapper's method-managed block and MCP_SETUP.md into this code repository, rendered from the templates its upstream SDD carries. The SDD is found by looking this repository up in the catalogues/repositories.csv of the SDDs beside it. Writes nothing else.")
+        .description("Write agent-instructions.md and the harness wrapper's method-managed block into this code repository, rendered from the templates its upstream SDD carries. The SDD is found by looking this repository up in the catalogues/repositories.csv of the SDDs beside it. Writes nothing else.")
         .option("--target-repo <dir>", "the code repository to write into", resolvePathOption, process.cwd())
         .option("--sdd <dir>", "the upstream SDD, skipping discovery", resolvePathOption)
         .option("--repo <id>", "this repository's id in the SDD's catalogue (default: its git top-level directory name)")

package/dist/verbs/pack-build.js

@@ -13,7 +13,21 @@ export function registerPackBuild(pack) {
         .option("--forward-base-managed-paths <path>", "path to forward-base MANAGED_PATHS.txt for the leakage check (defaults to extracting from method-baseline.lock)")
         .option("--publish-transform", "apply the point-in-time / producer-agnostic publish transform (ADR 0183/0184): drop non-Accepted ADRs, strip lineage + stripped-class fields, flatten cross-repo refs, fail closed on leaks. For producer-published bundles.")
         .option("--origin-prefix", "with the publish transform, apply the range-aware origin prefix (ADR 0140 §4.1): 0NNN→M-ADR, 9NNN→RA-ADR, adopter 1NNN stays ADR; ADR files renamed to match. Implies --publish-transform. The RA-ADR bundle cutover switch.")
+        .option("--source-commit <sha>", "provenance from a release record: the commit the manifest records (with --source-branch, --source-repo and --generated-at)")
+        .option("--source-branch <name>", "provenance from a release record: the branch the manifest records")
+        .option("--source-repo <name>", "provenance from a release record: the repository name the manifest records, whatever the checkout is called")
+        .option("--generated-at <utc>", "provenance from a release record: the manifest's generated_at_utc (YYYY-MM-DDTHH:MM:SSZ), also every archive member's file time")
         .action(async (opts) => {
+        const rec = [opts.sourceCommit, opts.sourceBranch, opts.sourceRepo, opts.generatedAt];
+        const given = rec.filter((v) => v !== undefined).length;
+        if (given !== 0 && given !== 4) {
+            process.stderr.write(`--source-commit, --source-branch, --source-repo and --generated-at go together (got ${given} of 4)\n`);
+            process.exit(2);
+        }
+        if (opts.generatedAt !== undefined && !/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}Z$/.test(opts.generatedAt)) {
+            process.stderr.write(`--generated-at must be UTC, YYYY-MM-DDTHH:MM:SSZ (got '${opts.generatedAt}')\n`);
+            process.exit(2);
+        }
         const { exitCode } = await runPackBuild({
             seedPath: opts.seed,
             producerRepo: opts.producerRepo ?? process.cwd(),
@@ -23,6 +37,14 @@ export function registerPackBuild(pack) {
             }),
             ...(opts.publishTransform && { publishTransform: true }),
             ...(opts.originPrefix && { originPrefix: true }),
+            ...(given === 4 && {
+                provenance: {
+                    commit: opts.sourceCommit,
+                    branch: opts.sourceBranch,
+                    repo: opts.sourceRepo,
+                    generatedAt: opts.generatedAt,
+                },
+            }),
         });
         if (exitCode !== 0)
             process.exit(exitCode);

package/dist/verbs/sync.js

@@ -3,6 +3,7 @@ import { loadSyncConfig } from "../lib/sync/config.js";
 import { materialiseBundle } from "../lib/sync/bundle-source.js";
 import { runSync } from "../lib/sync/index.js";
 import { CI_BINDINGS, CI_RUNNER_DEFAULT, isCiBinding, parseCiRunner } from "../lib/ci-binding/index.js";
+import { CLI_SOURCES, DEFAULT_VERIFY_CLI_PACKAGE, NPM_PACKAGE_NAME } from "../lib/hooks-seed/index.js";
 import { resolvePathOption } from "./path-option.js";
 export function registerSync(program) {
     program
@@ -19,6 +20,8 @@ export function registerSync(program) {
         .option("--agent-harness <name>", `target agent harness for hooks + briefing. Default: claude-code. Supported: ${AGENT_HARNESSES.join(", ")}`)
         .option("--ci-binding <host>", `CI host whose wrapper calls the Method Validation module (M-ADR 0219): ${CI_BINDINGS.join(", ")}. Default: the binding the lock records, else github; a new choice is recorded in the lock`)
         .option("--ci-runner <labels>", `runner label(s) the CI wrapper targets, comma-separated (GitHub runs-on, GitLab tags, Jenkins agent label), e.g. a self-hosted runner. '${CI_RUNNER_DEFAULT}' returns to the host's default runner. Default: what the lock records; a new choice is recorded`)
+        .option("--cli-source <source>", `where the session-start hook finds the verify CLI: ${CLI_SOURCES.join(" (npx at the pinned version) or ")} (sdd-verify from PATH, for an org that installs the release's CLI tarballs; the hook names the version to install when it differs). Default: what the lock records, else registry; a new choice is recorded`)
+        .option("--cli-package <name>", `the verify CLI's npm package under the registry source, for a registry that rescopes it. 'default' returns to ${DEFAULT_VERIFY_CLI_PACKAGE}. Default: what the lock records; a new choice is recorded`)
         .action(async (opts) => {
         if (opts.ciBinding !== undefined && !isCiBinding(opts.ciBinding)) {
             process.stderr.write(`[FAIL] --ci-binding must be one of ${CI_BINDINGS.join(", ")}; got '${opts.ciBinding}'\n`);
@@ -34,6 +37,16 @@ export function registerSync(program) {
             }
             ciRunner = parsed;
         }
+        if (opts.cliSource !== undefined && !CLI_SOURCES.includes(opts.cliSource)) {
+            process.stderr.write(`[FAIL] --cli-source must be one of ${CLI_SOURCES.join(", ")}; got '${opts.cliSource}'\n`);
+            process.exit(1);
+        }
+        const cliSource = opts.cliSource;
+        if (opts.cliPackage !== undefined && opts.cliPackage !== "default" && !NPM_PACKAGE_NAME.test(opts.cliPackage)) {
+            process.stderr.write(`[FAIL] --cli-package takes an npm package name, or 'default'; got '${opts.cliPackage}'\n`);
+            process.exit(1);
+        }
+        const cliPackage = opts.cliPackage === undefined ? undefined : opts.cliPackage === "default" ? null : opts.cliPackage;
         let agentHarness;
         try {
             agentHarness = resolveAgentHarness(opts.agentHarness);
@@ -61,6 +74,8 @@ export function registerSync(program) {
                 agentHarness,
                 ...(ciBinding ? { ciBinding } : {}),
                 ...(ciRunner ? { ciRunner } : {}),
+                ...(cliSource ? { cliSource } : {}),
+                ...(cliPackage !== undefined ? { cliPackage } : {}),
                 ...(opts.replaceBundle ? { replaceBundle: opts.replaceBundle } : {}),
                 ...(opts.yes === true ? { yes: true } : {}),
             });
@@ -90,6 +105,8 @@ export function registerSync(program) {
                         agentHarness,
                         ...(ciBinding ? { ciBinding } : {}),
                         ...(ciRunner ? { ciRunner } : {}),
+                        ...(cliSource ? { cliSource } : {}),
+                        ...(cliPackage !== undefined ? { cliPackage } : {}),
                     });
                     if (exitCode !== 0) {
                         await resolved.cleanup();

package/dist/verbs/validate.js

@@ -14,7 +14,12 @@ export function registerValidate(program) {
         .option("--strict", "treat warnings as failures")
         .option("--list", "print the method-managed validation job for this repo's profile as JSON (the plan every CI executor runs, the Dagger module included) and run nothing")
         .option("--profile <profile>", "with --list: the profile to list, instead of reading .sdd-repo-kind (platform | application | integration)")
+        .option("--catalogue-rebuild", "with --list: the pipeline rebuilt the catalogues on this run (M-ADR 0220 §4.4), so the catalogue freshness step gates instead of advising")
         .action(async (opts) => {
+        if (opts.catalogueRebuild === true && opts.list !== true) {
+            process.stderr.write("--catalogue-rebuild only applies with --list\n");
+            process.exit(2);
+        }
         if (opts.list === true) {
             let profile;
             if (opts.profile !== undefined) {
@@ -32,7 +37,7 @@ export function registerValidate(program) {
                 }
                 profile = profileFromRepoKind(kind);
             }
-            process.stdout.write(JSON.stringify({ profile, steps: methodValidationPlan(profile) }, null, 2) + "\n");
+            process.stdout.write(JSON.stringify({ profile, steps: methodValidationPlan(profile, { catalogueRebuild: opts.catalogueRebuild === true }) }, null, 2) + "\n");
             return;
         }
         const { exitCode } = await runValidate({

package/dist/verify-program.js

@@ -29,7 +29,7 @@ import { registerCatalogueBaselineCheck, registerCatalogueImpact, registerCatalo
 import { registerList } from "./verbs/list.js";
 import { registerPackValidate } from "./verbs/pack-validate.js";
 import { registerValidate } from "./verbs/validate.js";
-const SPEC_URL = "https://github.com/tomfosteruk/sdd-method/blob/main/docs/method/cli/sdd-cli-specification.md";
+const SPEC_URL = "docs/method/cli/sdd-cli-specification.md (in the method distribution)";
 /** The full surface, as `<verb>` or `<verb> <subcommand>`. Asserted by test. */
 export const VERIFY_SURFACE = [
     "validate",
@@ -91,7 +91,7 @@ export function buildVerifyProgram() {
         .name("sdd-verify")
         .description("Verify an SDD repository without changing it — validate, list, and read-only catalogue and pack checks. Cannot write to the repository it is pointed at.")
         .version(getPackageVersion(), "-v, --version")
-        .addHelpText("after", `\nSpec: ${SPEC_URL}\nAuthoring and maintenance verbs (sync, catalogue build, init, scaffold, mcp, …) are in @sdd-method/sdd-cli.`)
+        .addHelpText("after", `\nSpec: ${SPEC_URL}\nAuthoring and maintenance verbs (sync, catalogue build, init, scaffold, …) are in @sdd-method/sdd-cli.`)
         .exitOverride()
         .configureOutput({
         writeOut: (str) => process.stdout.write(str),

package/dist/verify-version.json

@@ -1,4 +1,4 @@
 {
-  "version": "1.1.0",
-  "built_against_sdd_cli": "1.42.0"
+  "version": "1.3.0",
+  "built_against_sdd_cli": "1.44.0"
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@sdd-method/maintain-cli",
-  "version": "0.1.0",
-  "sddCliVersion": "1.42.0",
+  "version": "0.3.0",
+  "sddCliVersion": "1.44.0",
   "description": "Bring an SDD repository current and rebuild its derived model — sync, briefing, catalogue build and aggregate, pack build, context pull — plus every read-only verify verb. Ships only the code those verbs reach; it cannot author specification content. Authoring is in @sdd-method/sdd-cli.",
   "license": "Apache-2.0",
   "type": "module",
@@ -17,10 +17,6 @@
     "zod": "^4.3.6",
     "@duckdb/node-api": "^1.5.5-r.3"
   },
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/tomfosteruk/sdd-cli.git"
-  },
   "publishConfig": {
     "access": "public"
   },

package/dist/lib/hooks-seed/copilot.js

@@ -1,167 +0,0 @@
-/**
- * Builders + drift detection for the method-managed GitHub Copilot CLI
- * hooks, per `docs/method/methods/hook-contracts.md` (Hook 1, Hook 2)
- * and the portable contracts in `hook-portable-contract-schema.yaml`.
- *
- * The Copilot CLI surface differs from Claude Code in three ways
- * (per ADR 0141 §4.3 + hook-contracts.md):
- *
- *   1. Hook configs live in per-event JSON files (`.github/hooks/<event>.json`),
- *      not a single settings.json.
- *   2. No per-tool matcher — every `preToolUse` hook fires for every
- *      tool, with in-script filtering instead.
- *   3. Approval semantic is declarative (`approval: deny-on-nonzero`)
- *      rather than exit-code based.
- *
- * Ownership is sentinel-based, same as Claude Code: the `bash` and
- * `powershell` command strings carry `# sdd-method-managed:true`.
- * Adopter-added events in the same `events[]` array lack the sentinel
- * and survive sync.
- */
-import { METHOD_MANAGED_SENTINEL } from "./types.js";
-import { nativeEventName } from "./lifecycle-mapping.js";
-const HARNESS = "github-copilot-cli";
-/** Filename per portable lifecycle class. */
-const HOOK_FILE_BY_PORTABLE = {
-    pre_tool_use: "pre-tool-use.json",
-    session_start: "session-start.json",
-};
-export function copilotHookFilePath(portable) {
-    const name = HOOK_FILE_BY_PORTABLE[portable];
-    if (!name) {
-        throw new Error(`No Copilot CLI hook file mapped for portable class "${portable}"`);
-    }
-    return `.github/hooks/${name}`;
-}
-function withSentinel(command) {
-    if (command.includes(METHOD_MANAGED_SENTINEL))
-        return command;
-    return `${command} ${METHOD_MANAGED_SENTINEL}`;
-}
-/**
- * Hook 1 — `block-edits-to-method-managed-paths` (pre_tool_use).
- * Copilot CLI has no per-tool matcher, so the script
- * (orchestration/scripts/copilot-method-guard.{sh,ps1}) does the
- * filtering on tool name in addition to the path check. Method-side
- * authors the scripts; we just emit the wiring.
- */
-export function buildCopilotPreToolUseEvent() {
-    return {
-        type: nativeEventName(HARNESS, "pre_tool_use"),
-        command: {
-            bash: withSentinel("./orchestration/scripts/copilot-method-guard.sh"),
-            powershell: withSentinel("./orchestration/scripts/copilot-method-guard.ps1"),
-        },
-        timeout_ms: 5000,
-        approval: "deny-on-nonzero",
-    };
-}
-/**
- * Hook 2 — `validate-adr-structure-on-session-start` (session_start).
- * Output is surfaced as session-baseline context; non-blocking
- * (`approval: always-allow`) to match the portable contract's `warn`
- * exit-code semantic.
- */
-export function buildCopilotSessionStartEvent() {
-    return {
-        type: nativeEventName(HARNESS, "session_start"),
-        command: {
-            bash: withSentinel("sdd-cli validate --validator adr-structure 2>&1 | head -20"),
-            powershell: withSentinel("sdd-cli validate --validator adr-structure 2>&1 | Select-Object -First 20"),
-        },
-        timeout_ms: 30000,
-        approval: "always-allow",
-    };
-}
-export function buildMethodManagedCopilotHooks() {
-    return {
-        pre_tool_use: {
-            filePath: copilotHookFilePath("pre_tool_use"),
-            events: [buildCopilotPreToolUseEvent()],
-        },
-        session_start: {
-            filePath: copilotHookFilePath("session_start"),
-            events: [buildCopilotSessionStartEvent()],
-        },
-    };
-}
-/**
- * An event entry is method-managed iff its `command.bash` (or
- * `command.powershell`) carries the sentinel.
- */
-export function isMethodManagedEvent(event) {
-    const bash = typeof event.command?.bash === "string" ? event.command.bash : "";
-    const ps = typeof event.command?.powershell === "string"
-        ? event.command.powershell
-        : "";
-    return (bash.includes(METHOD_MANAGED_SENTINEL) ||
-        ps.includes(METHOD_MANAGED_SENTINEL));
-}
-/**
- * Strip the sentinel and trailing whitespace from a command string so
- * two commands can be compared modulo ownership marker. Symmetric to
- * the Claude Code merge logic.
- */
-function normaliseCommandString(command) {
-    return command.replace(METHOD_MANAGED_SENTINEL, "").trimEnd();
-}
-function eventsEquivalentExcludingSentinel(a, b) {
-    if (a.type !== b.type)
-        return false;
-    if (a.approval !== b.approval)
-        return false;
-    if (a.timeout_ms !== b.timeout_ms)
-        return false;
-    const aBash = a.command?.bash ?? "";
-    const bBash = b.command?.bash ?? "";
-    const aPs = a.command?.powershell ?? "";
-    const bPs = b.command?.powershell ?? "";
-    return (normaliseCommandString(aBash) === normaliseCommandString(bBash) &&
-        normaliseCommandString(aPs) === normaliseCommandString(bPs));
-}
-/**
- * Upsert method-managed events into an existing hook file. Adopter-
- * added events (no sentinel) survive. An unmarked adopter event that
- * is equivalent (modulo sentinel) to a method-managed event we're
- * adding gets de-duped — same safety net as the Claude Code merge
- * post-v0.12.2.
- */
-export function upsertCopilotHookFile(existing, owned) {
-    const currentEvents = existing?.events ?? [];
-    let dedupedAny = false;
-    const adopterEvents = currentEvents.filter((evt) => {
-        if (isMethodManagedEvent(evt))
-            return false;
-        const equivalent = owned.some((o) => eventsEquivalentExcludingSentinel(evt, o));
-        if (equivalent) {
-            dedupedAny = true;
-            return false;
-        }
-        return true;
-    });
-    const before = currentEvents.filter((e) => isMethodManagedEvent(e));
-    const after = owned;
-    const methodChanged = JSON.stringify(before) !== JSON.stringify(after);
-    const nextFile = {
-        version: 1,
-        events: [...adopterEvents, ...owned],
-    };
-    return {
-        file: nextFile,
-        changed: methodChanged || dedupedAny,
-    };
-}
-/**
- * Detect adopter drift: an event still carrying the sentinel but whose
- * content no longer matches the canonical version we'd write. Returns
- * `true` iff drift is present.
- */
-export function detectCopilotHookDrift(existing, owned) {
-    if (!existing)
-        return false;
-    const existingMethod = existing.events.filter((e) => isMethodManagedEvent(e));
-    if (existingMethod.length === 0)
-        return false;
-    return JSON.stringify(existingMethod) !== JSON.stringify(owned);
-}
-//# sourceMappingURL=copilot.js.map

package/dist/lib/hooks-seed/lifecycle-mapping.js

@@ -1,28 +0,0 @@
-/**
- * Portable lifecycle event class → harness-native event mapping per
- * ADR 0141 §4.3 and the table in `docs/method/foundations/lifecycle-event-classes.yaml`.
- *
- * Adding a new harness binding is mechanical: extend `AgentHarness`
- * in src/lib/agent-harness.ts and add a row here. Hook builders
- * consume this mapping rather than hand-coding native event names.
- */
-const MAPPINGS = {
-    "claude-code": {
-        pre_tool_use: "PreToolUse",
-        post_tool_use: "PostToolUse",
-        user_prompt_submit: "UserPromptSubmit",
-        session_start: "SessionStart",
-        session_stop: "Stop",
-    },
-    "github-copilot-cli": {
-        pre_tool_use: "preToolUse",
-        post_tool_use: "postToolUse",
-        user_prompt_submit: "userPromptSubmitted",
-        session_start: "sessionStart",
-        session_stop: "agentStop",
-    },
-};
-export function nativeEventName(harness, portable) {
-    return MAPPINGS[harness][portable];
-}
-//# sourceMappingURL=lifecycle-mapping.js.map

package/dist/lib/mcp-seed/entries.js

@@ -1,14 +0,0 @@
-/**
- * Entry builders — produce the McpServerEntry blocks this plan owns.
- */
-export function buildSddMcpEntry(opts = {}) {
-    const entry = {
-        command: "sdd-cli",
-        args: ["mcp", "serve"],
-        ...(opts.sddRepoPath !== undefined
-            ? { env: { SDD_REPO_PATH: opts.sddRepoPath } }
-            : {}),
-    };
-    return entry;
-}
-//# sourceMappingURL=entries.js.map

package/dist/lib/mcp-seed/index.js

@@ -1,28 +0,0 @@
-/**
- * Public facade for the MCP settings-seed library. Consumers:
- *
- *   - `sdd-cli init` scaffolds (platform/app/integration) call
- *     `buildMethodManagedServers()` + `upsertMethodManagedServers()`
- *     to produce a correctly-seeded `.claude/settings.json`.
- *   - `sdd-cli sync` routes the same file through the merge path to
- *     upsert method-owned entries without clobbering adopter content.
- *
- * Scope: this module owns `mcpServers.<method-id>`. Hooks and other
- * top-level keys belong to the enforcement-automation plan; we pass
- * them through untouched.
- */
-export { METHOD_MANAGED_SERVER_IDS } from "./types.js";
-export { buildSddMcpEntry } from "./entries.js";
-export { detectManagedDrift, upsertMethodManagedServers, } from "./merge.js";
-import { buildSddMcpEntry } from "./entries.js";
-/**
- * Produce the full owned-servers map. Adding a new method-managed
- * server id is a one-place change: add it here and to
- * METHOD_MANAGED_SERVER_IDS.
- */
-export function buildMethodManagedServers(opts = {}) {
-    return {
-        "sdd-mcp": buildSddMcpEntry(opts.sddRepoPath !== undefined ? { sddRepoPath: opts.sddRepoPath } : {}),
-    };
-}
-//# sourceMappingURL=index.js.map

package/dist/lib/mcp-seed/merge.js

@@ -1,99 +0,0 @@
-/**
- * Merge logic for the method-managed portion of `.claude/settings.json`.
- *
- * Ownership model: the method owns specific server ids (listed in
- * `METHOD_MANAGED_SERVER_IDS`). On upsert, those ids are rewritten
- * with the method-supplied entry; any other server ids the adopter
- * has added under `mcpServers` survive untouched, as do all other
- * top-level keys (hooks, permissions, env, …).
- *
- * The merge is conservative: if a method id exists with a value that
- * is byte-identical to the method's current seed, we return the
- * original object unmodified (stable output → no spurious writes).
- */
-export function upsertMethodManagedServers(existing, owned) {
-    const added = [];
-    const updated = [];
-    const unchanged = [];
-    const currentServers = isPlainObject(existing["mcpServers"])
-        ? existing["mcpServers"]
-        : {};
-    const nextServers = { ...currentServers };
-    for (const [id, entry] of Object.entries(owned)) {
-        const prior = currentServers[id];
-        if (prior === undefined) {
-            nextServers[id] = entry;
-            added.push(id);
-        }
-        else if (!entriesEqual(prior, entry)) {
-            nextServers[id] = entry;
-            updated.push(id);
-        }
-        else {
-            unchanged.push(id);
-        }
-    }
-    const changed = added.length > 0 || updated.length > 0;
-    if (!changed) {
-        return {
-            settings: existing,
-            added,
-            updated,
-            unchanged,
-            changed: false,
-        };
-    }
-    const nextSettings = {
-        ...existing,
-        mcpServers: nextServers,
-    };
-    return {
-        settings: nextSettings,
-        added,
-        updated,
-        unchanged,
-        changed: true,
-    };
-}
-/**
- * Detect adopter-edited method-managed entries. Returns the ids whose
- * current value differs from the method-supplied seed — these are the
- * ones that a refuse-or-overwrite sync should flag unless
- * `--allow-overwrite` is passed.
- */
-export function detectManagedDrift(existing, owned) {
-    const currentServers = isPlainObject(existing["mcpServers"])
-        ? existing["mcpServers"]
-        : {};
-    const drifted = [];
-    for (const [id, entry] of Object.entries(owned)) {
-        const prior = currentServers[id];
-        if (prior !== undefined && !entriesEqual(prior, entry)) {
-            drifted.push(id);
-        }
-    }
-    return drifted;
-}
-function entriesEqual(a, b) {
-    // Stable-order JSON comparison. The entry shape is small and flat
-    // enough that stringifying is cheaper than writing a structural
-    // walker.
-    return stableStringify(a) === stableStringify(b);
-}
-function stableStringify(value) {
-    if (value === null || typeof value !== "object")
-        return JSON.stringify(value);
-    if (Array.isArray(value)) {
-        return "[" + value.map((v) => stableStringify(v)).join(",") + "]";
-    }
-    const keys = Object.keys(value).sort();
-    return ("{" +
-        keys
-            .map((k) => JSON.stringify(k) + ":" + stableStringify(value[k]))
-            .join(",") +
-        "}");
-}
-function isPlainObject(v) {
-    return v !== null && typeof v === "object" && !Array.isArray(v);
-}
-//# sourceMappingURL=merge.js.map

package/dist/lib/mcp-seed/types.js

@@ -1,13 +0,0 @@
-/**
- * Types for the MCP settings-seed library. Mirrors the shape Claude
- * Code expects at `.claude/settings.json`, restricted to the fields
- * we read or write.
- */
-/**
- * Server ids owned by this method plan. Sync upserts these and leaves
- * everything else alone. When Phases 3+4 ship adopter servers, extend
- * the list — or better, let each plan contribute its own list and
- * combine at merge time.
- */
-export const METHOD_MANAGED_SERVER_IDS = ["sdd-mcp"];
-//# sourceMappingURL=types.js.map