@sdd-method/sdd-cli 0.122.2 → 1.0.0

package/dist/lib/catalogue/canonical-schema.yaml

@@ -62,9 +62,72 @@
 # Builder contract: see docs/method/methods/catalogue-builder-specification.md.
 # Category taxonomy: see docs/method/methods/product-category-taxonomy.md.
 
-schema_version: "2.51.0"
+schema_version: "3.0.0"
 schema_owner: "sdd-method"
 schema_status: "canonical"
+# Bump rationale (3.0.0 — BREAKING major, 2026-07-29, per M-ADR 0203): the 2.x line's
+# five deferred breaks land as one audited cut, each a complete change-set in the
+# M-ADR 0200 §4.1 sense. This entry records each break as its change-set lands:
+#   1. `products.status` REMOVED (0203 §4.3): deprecated at 2.48.0 as a duplication of
+#      the strictly-more-expressive synthesis_quality/synthesis_band/last_assessed
+#      triplet; emitted the constant 'active' — outside its own documented vocabulary —
+#      on 208 of 208 measured rows across two estates. Zero consumers, verified at
+#      deprecation time and RE-VERIFIED at removal across builders, aggregator, and
+#      orchestration scripts (the same-named status columns on other tables are
+#      different columns and are untouched). Committed catalogues self-heal: the column
+#      disappears from products.csv on the first 3.0.0 rebuild; no migration map needed.
+#   2. `c4_container_type` BOUND, legacy values removed (0203 §4.1, completing 0155):
+#      the enum binds into `c4_containers.column_enums` and a schema-driven bound-enum
+#      validator gives every binding hard-fail teeth (error-severity findings, same
+#      exit contract as a dangling internal FK, in build AND validate). The 2.x
+#      advisory WARN module is deleted per its own header. Exit gated on the pre-cut
+#      audit of every adopter's legacy c4_containers rows — per-row dispositions
+#      recorded per 0155's migration rule, not defaulted.
+#   3. `c4_external_systems` row identity moves to the declared diagram entry id
+#      (0203 §4.2, completing 0189 §4.2): id = ext-{slug(entry id)}; the display-name
+#      slug era ends. The old→new map is DERIVED (name + declared_id are both in every
+#      2.30.0+ catalogue): `sdd-cli catalogue migration-map` emits it, and the
+#      exemption loader consults it in the cut window — an authored
+#      external_system_exemption keyed by a mapped old id re-keys as regenerable, NOT
+#      drift (the F30 rule at schema scale); un-mapped old-form ids fail loudly with
+#      the map named. The migration's own fallout has a detector (measured pre-ship:
+#      5 old ids deriving 2-3 conflicting new ids across one estate, because SDDs
+#      declared different entry ids for one external system — the 2.x name-slugs
+#      merged them silently): at aggregation, one display name held by several kept
+#      declared identities is a convention finding — converge the entry ids, or
+#      rename the labels apart; never a silent split. And its mirror (measured: 17
+#      integration SDDs declaring 17 different providers under ONE shared generic
+#      entry id): a same-id merge whose display names do not corroborate is a
+#      divergence finding naming every hidden referent — never a silent 17-into-1
+#      collapse. Both remedies are diagram edits (M-ADR 0189 §4.2's sanctioned
+#      opt-out), never catalogue edits.
+#   4. Contract ids gain their KIND component (0203 §4.4 — the cut's acid test):
+#      id = {domain}-{stem}-{kind}, ending the kindless collision class with its
+#      measured permanent cost. Enumerated consumers all take ids by value and
+#      migrate with the FK — capability_contract, service_contract, repo_contract,
+#      feature_contract, including the two composite PKs embedding contract_id.
+#      Feeders re-keyed: the discoverer, the declared-external (D13) builder, and the
+#      M-ADR 0147 alias-resolved consumes builder (alias targets are authored copies
+#      of tool-minted ids — mapped targets re-key as regenerable, not drift; a 2.x
+#      cross-family collision maps to several ids and the author qualifies, loudly).
+#      The event-twin basename join is deliberately unaffected (it joins on
+#      schema-file basename); traceability + availability manifests reference by
+#      path, verified; the coverage predicate joins re-key by construction. Map:
+#      new id = old id + '-' + kind, emitted by `sdd-cli catalogue migration-map`.
+#      CROSS-SDD references get their own cut-window re-key AT AGGREGATION (the
+#      first rehearsal probe measured 170 dangling FKs: per-SDD maps are empty in
+#      SDDs owning no contracts, so their edge rows kept old kindless ids):
+#      schema-driven over every contracts.id FK, dangling values re-key with the
+#      composite-id component (regenerable, not drift), same-fact duplicates dedup,
+#      cross-family-ambiguous ids stay dangling loudly.
+#   5. The documentation restatement rides the cut (0203 §4.5): the M-ADR 0157 parity
+#      table's 31 rows restated as well-formed claims with profile + tier columns
+#      (M-ADR 0196 §4.2/§4.3/§5.3 — authoring direction deliberately NOT ratified as a
+#      third axis on one instance); and the F2 claim correction — capability_contract's
+#      documented reverse derivation (here and at two metamodel locations) measured
+#      nonexistent (0 derived rows / 105 units) and corrected as a CLAIM: the edge is
+#      forward-one-directional, the derivation is not built.
+# Breaking; SCHEMA_COMPAT "^3.0.0"; ships as CLI 1.0.0 (a schema major is a CLI major).
 # Bump rationale (2.50.0 — additive minor, 2026-07-27): adds `service_capability_exemption`,
 # the services-tier annotation catalogue M-ADR 0133 §4.2b named as future work when
 # `repo_capability_exemption` shipped. One FK to `services.id`, declared never derived, closed
@@ -477,18 +540,15 @@ enums:
       that must be running for the system to work — an application or a
       data store.
 
-      Staged enforcement: this enum is ADVISORY during the 2.x schema line.
-      It is intentionally NOT bound via `c4_containers.column_enums` yet, so
-      a non-canonical value does not fail the build. The legacy values
-      `Infrastructure` and `External System` are recognised-but-deprecated:
-      builders accept them and emit a `convention` finding (WARN) prompting
-      migration. `External System` boxes belong in `c4_external_systems`
-      (they are C4 L1 peer systems, not L2 containers); running
+      BOUND via `c4_containers.column_enums` since 3.0.0 (M-ADR 0203 §4.1,
+      completing 0155's staged enforcement): a non-member value hard-fails
+      build and validate. The 2.x-era legacy values are removed; their
+      migration rule (0155's own): `External System` boxes belong in
+      `c4_external_systems` (C4 L1 peer systems, not L2 containers); running
       infrastructure (broker, gateway, cache) retypes to Application or
       Data Store; pure deployment infrastructure (load balancer, DNS) leaves
       the container catalogue (it belongs in a C4 deployment diagram, which
-      is not catalogued). The breaking removal of the legacy values and the
-      column-enum binding land at the 3.0.0 major bump.
+      is not catalogued).
     values:
       - { value: Application, description: "A separately deployable/runnable application — a service, BFF, UI, consumer, worker, etc." }
       - { value: "Data Store", description: "A database or persistence layer (also covers running stores like a message broker when modelled as a container)." }
@@ -609,7 +669,6 @@ catalogues:
       - { name: profile, type: string, nullable: false, description: "platform-profile | application-product | integration-product | support-repo." }
       - { name: category, type: string, nullable: true, description: "Architectural classification per docs/method/methods/product-category-taxonomy.md. Values: platform-root | platform-subsystem | application-product | integration-provider | integration-umbrella | support-repo. Determines whether the Product gets a c4_systems row." }
       - { name: doc_path, type: string, nullable: false, description: "Path to _product/ directory, relative to docs/." }
-      - { name: status, type: string, nullable: true, description: "⚠ DEPRECATED, inert, and scheduled for removal at 3.0.0 — do not consume it. Documented vocabulary is scaffolded | populated | reviewed; builders emit the constant 'active', which is not in that set, on 100% of rows (measured: 208 of 208 across two estates). Triaged in 2.47.0 and resolved as a DUPLICATION rather than a wiring gap: `status` and the synthesis_quality/synthesis_band/last_assessed triplet both express documentation maturity, and the triplet is strictly more expressive (0-10 score + band + assessment date) and is the one real data exists for. Wiring both would be two sources for one fact. So the triplet is wired (2.47.0) and this column is deprecated rather than repaired. Nothing consumes it — verified across the builders and the aggregator, where the same-named services.status is a different column. Removal is a breaking change and belongs with the 3.0.0 follow-on M-ADR 0155 already defers." }
       - { name: lifecycle, type: string, nullable: true, description: "planned | active | deprecated (default active when empty). Owner-declared product lifecycle from the SDD manifest's lifecycle: field (sdd-manifest-schema 1.1.0; `planned` added 1.9.0 / catalogue 2.47.0). `planned` = the product is real and intended but does not exist yet, which is the normal opening state of a forward-authored product — so a forward estate that has generated nothing should read `planned`, not the `active` the empty default implies. Distinct from status (documentation maturity): lifecycle is a fact about the PRODUCT, status about the DOCUMENT, and both can hold at once — a product can be reviewed AND deprecated, or planned AND thinly documented. Added in 2.22.0." }
       - { name: deprecated_date, type: date, nullable: true, description: "Date the deprecation decision took effect. Only meaningful when lifecycle=deprecated. From the manifest's deprecated_date:. Added in 2.22.0." }
       - { name: successor_sdd_id, type: string, nullable: true, description: "For deprecated products: sdd_id of the superseding SDD. Same vocabulary as sdd_id/source_sdd_id (NOT products.id). Soft reference — the aggregator orphan-checks it against contributing sdd_ids ([finding] orphan when unresolved), never a hard FK: the successor may live outside the aggregation scope. Added in 2.22.0." }
@@ -881,7 +940,7 @@ catalogues:
       - { column: service_id, references: services.id, nullable: true }
       - { column: source_repo_id, references: repositories.id, nullable: true }
     columns:
-      - { name: id, type: string, nullable: false }
+      - { name: id, type: string, nullable: false, description: "{domain}-{stem}-{kind} — the kind component joined the id at schema 3.0.0 (M-ADR 0203 §4.4), ending the kindless collision class where one service published as two contract families (openapi + proto) minted one id (measured cost: 1 row + 2 edges permanently unrepresentable, plus legitimate shared-contract citation flagged as divergence). Mechanical migration: new id = old id + '-' + kind; `sdd-cli catalogue migration-map` emits the pairs, and authored alias targets (M-ADR 0147) re-key automatically during the cut window." }
       - { name: name, type: string, nullable: false, description: "Display name from info.title or artifact_id." }
       - { name: service_id, type: string, nullable: true, description: "Exposing service; resolved via primary_repo_id ↔ OpenAPI x-source-repo." }
       - { name: source_repo_id, type: string, nullable: true, description: "Repo owning the contract source. Distinct from exposing service's repo per M-ADR 0110 (sibling-repo pattern)." }
@@ -946,10 +1005,12 @@ catalogues:
       - { name: system_id, type: string, nullable: false, description: "Owning C4 system (every container is in exactly one system)." }
       - { name: domain_id, type: string, nullable: true, description: "Optional organisational domain tag (denormalised; not C4-structural)." }
       - { name: service_id, type: string, nullable: true, description: "Matched by container name ↔ service name/repo where possible." }
-      - { name: type, type: string, nullable: true, description: "Canonical C4 container kind — see enums.c4_container_type (Application | Data Store). Legacy values Infrastructure | External System are recognised-but-deprecated during 2.x (WARN); External System boxes belong in c4_external_systems. Per M-ADR 0155. Enum binding is advisory until 3.0.0." }
+      - { name: type, type: string, nullable: true, description: "Canonical C4 container kind — bound to enums.c4_container_type (Application | Data Store) since 3.0.0, hard-fail (M-ADR 0203 §4.1 completing M-ADR 0155). The 2.x legacy values are removed: External System boxes belong in c4_external_systems; running infrastructure retypes; deployment infrastructure leaves the catalogue." }
       - { name: technology, type: string, nullable: true }
       - { name: description, type: string, nullable: true }
       - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per M-ADR 0134." }
+    column_enums:
+      type: enums.c4_container_type
 
   c4_components:
     primary_key: id
@@ -984,11 +1045,11 @@ catalogues:
       duplicate-PK rule); conflicting attributes on the same id surface as a
       `convention` finding.
     columns:
-      - { name: id, type: string, nullable: false, description: "Bare slug, e.g. ext-google-maps." }
+      - { name: id, type: string, nullable: false, description: "ext-{slug(diagram entry id)} — derived from the DECLARED identity (the first argument of System_Ext/Container_Ext), not from the display name, since 3.0.0 (M-ADR 0203 §4.2 completing M-ADR 0189 §4.2). The 2.x name-slug ids map to these mechanically; `sdd-cli catalogue migration-map` emits the old→new map, and authored exemption files keyed by a mapped old id re-key automatically during the cut window (regenerable, not drift)." }
       - { name: name, type: string, nullable: false, description: "Display name from the System_Ext label." }
       - { name: technology, type: string, nullable: true, description: "Optional stack/protocol hint." }
       - { name: description, type: string, nullable: true, description: "What the external system provides." }
-      - { name: declared_id, type: string, nullable: true, description: "The diagram entry id of the first-seen declaration (M-ADR 0189 §4.2) — the declared identity the aggregator resolves against estate identifiers at adjudication. Added 2.30.0." }
+      - { name: declared_id, type: string, nullable: true, description: "The diagram entry id of the first-seen declaration (M-ADR 0189 §4.2) — the declared identity the aggregator resolves against estate identifiers at adjudication, and the source of the row id since 3.0.0. Added 2.30.0." }
       - { name: source_scope, type: string, nullable: true, description: "Scope of the first-seen declaration: l1 (context diagram) or l2 (container diagram — scope-relative per M-ADR 0189 §4.1). Added 2.30.0." }
       - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per M-ADR 0134." }
 
@@ -1281,7 +1342,7 @@ catalogues:
 
   capability_contract:
     primary_key: id
-    description: "Edge: capability exposes or depends on contract. Forward: declared in traceability.contracts. Reverse: derived via service_contract ⋈ capability_service."
+    description: "Edge: capability exposes or depends on contract. Forward-declared only (traceability.contracts). The reverse derivation this description long claimed (service_contract ⋈ capability_service) was measured nonexistent — 0 `source: derived` rows across 105 units, builder references neither catalogue — and the CLAIM was corrected at 3.0.0 (M-ADR 0203 §4.5 / F2, gap class absent-derivation per M-ADR 0196 §4.1). The edge is forward-one-directional until a decision builds a reverse source."
     foreign_keys:
       - { column: capability_id, references: capabilities.id, nullable: false }
       - { column: contract_id, references: contracts.id, nullable: false }
@@ -1289,7 +1350,7 @@ catalogues:
       - { name: id, type: string, nullable: false }
       - { name: capability_id, type: string, nullable: false }
       - { name: contract_id, type: string, nullable: false }
-      - { name: source, type: string, nullable: false, description: "declared (forward) | derived (reverse)." }
+      - { name: source, type: string, nullable: false, description: "declared — the only emitted value. `derived` is reserved vocabulary: the reverse derivation it anticipated was never built (0 rows across 105 measured units) and the claim was corrected at 3.0.0 (M-ADR 0203 §4.5 / F2); the value re-enters if a decision builds a reverse source." }
 
   journey_feature:
     primary_key: id

package/dist/lib/catalogue/contract-id.d.ts

@@ -0,0 +1,11 @@
+import type { CatalogueRow } from "./csv-writer.js";
+/** The 3.0.0 contract id: the kindless slug with its kind appended. */
+export declare function contractIdWithKind(kindlessSlug: string, kind: string): string;
+/**
+ * legacy (2.x, kindless) id → the 3.0.0 kind-suffixed ids it maps to, from
+ * built rows. More than one target means the id was a measured collision
+ * under 2.x (two families sharing one kindless slug) — the consumer decides
+ * which family is meant, loudly, never by guess.
+ */
+export declare function buildLegacyContractIdMap(rows: readonly CatalogueRow[]): Map<string, string[]>;
+//# sourceMappingURL=contract-id.d.ts.map

package/dist/lib/catalogue/contract-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-id.d.ts","sourceRoot":"","sources":["../../../src/lib/catalogue/contract-id.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAEpD,uEAAuE;AACvE,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAE7E;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,SAAS,YAAY,EAAE,GAC5B,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAiBvB"}

package/dist/lib/catalogue/contract-id.js

@@ -0,0 +1,49 @@
+// Contract row identity (schema 3.0.0) and the legacy-id migration map —
+// M-ADR 0203 §4.4, the cut's acid test.
+//
+// From 3.0.0 a contract id carries its KIND component: `{domain}-{stem}-{kind}`
+// (kind ∈ rest | graphql | rpc | event | authz). The kindless 2.x form made one
+// measured collision class unrepresentable: a service published as two contract
+// families (`calendar-service.yaml` + `calendar_service.proto`) minted one id,
+// costing a live estate one row and two edges permanently, and mislabelling
+// legitimate shared-contract citation as divergence.
+//
+// The map is mechanical in both directions: new id = `${old id}-${kind}`, from
+// two columns every committed catalogue carries (`id`, `kind`). It ships via
+// `sdd-cli catalogue migration-map`; the alias-file re-key (M-ADR 0147 targets
+// are authored copies of tool-minted ids — regenerable, not drift, the same
+// rule as external_system_exemption) consults the in-build form of it.
+/** The 3.0.0 contract id: the kindless slug with its kind appended. */
+export function contractIdWithKind(kindlessSlug, kind) {
+    return kindlessSlug === "" ? "" : `${kindlessSlug}-${kind}`;
+}
+/**
+ * legacy (2.x, kindless) id → the 3.0.0 kind-suffixed ids it maps to, from
+ * built rows. More than one target means the id was a measured collision
+ * under 2.x (two families sharing one kindless slug) — the consumer decides
+ * which family is meant, loudly, never by guess.
+ */
+export function buildLegacyContractIdMap(rows) {
+    const map = new Map();
+    for (const row of rows) {
+        const id = String(row["id"] ?? "");
+        const kind = String(row["kind"] ?? "");
+        if (id === "" || kind === "" || !id.endsWith(`-${kind}`))
+            continue;
+        const legacy = id.slice(0, -(kind.length + 1));
+        if (legacy === "")
+            continue;
+        const ids = map.get(legacy);
+        if (ids) {
+            if (!ids.includes(id))
+                ids.push(id);
+        }
+        else {
+            map.set(legacy, [id]);
+        }
+    }
+    for (const ids of map.values())
+        ids.sort((a, b) => a.localeCompare(b));
+    return map;
+}
+//# sourceMappingURL=contract-id.js.map

package/dist/lib/catalogue/contract-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-id.js","sourceRoot":"","sources":["../../../src/lib/catalogue/contract-id.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,wCAAwC;AACxC,EAAE;AACF,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAChF,+EAA+E;AAC/E,4EAA4E;AAC5E,qDAAqD;AACrD,EAAE;AACF,+EAA+E;AAC/E,6EAA6E;AAC7E,+EAA+E;AAC/E,4EAA4E;AAC5E,uEAAuE;AAIvE,uEAAuE;AACvE,MAAM,UAAU,kBAAkB,CAAC,YAAoB,EAAE,IAAY;IACnE,OAAO,YAAY,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,YAAY,IAAI,IAAI,EAAE,CAAC;AAC9D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,IAA6B;IAE7B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAoB,CAAC;IACxC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACvC,IAAI,EAAE,KAAK,EAAE,IAAI,IAAI,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC;YAAE,SAAS;QACnE,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/C,IAAI,MAAM,KAAK,EAAE;YAAE,SAAS;QAC5B,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,GAAG,EAAE,CAAC;YACR,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtC,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE;QAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/lib/catalogue/enum-validator.d.ts

@@ -0,0 +1,16 @@
+import type { CatalogueRow } from "./csv-writer.js";
+import type { FindingsLog } from "./findings.js";
+import type { CanonicalSchema } from "./schema-loader.js";
+export interface EnumViolation {
+    readonly catalogue: string;
+    readonly column: string;
+    readonly rowPk: string;
+    readonly value: string;
+    readonly allowed: string;
+}
+export interface EnumValidationResult {
+    readonly pass: boolean;
+    readonly violations: readonly EnumViolation[];
+}
+export declare function validateColumnEnums(schema: CanonicalSchema, rowsByCatalogue: ReadonlyMap<string, readonly CatalogueRow[]>, findings: FindingsLog): EnumValidationResult;
+//# sourceMappingURL=enum-validator.d.ts.map

package/dist/lib/catalogue/enum-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enum-validator.d.ts","sourceRoot":"","sources":["../../../src/lib/catalogue/enum-validator.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAE1D,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,SAAS,aAAa,EAAE,CAAC;CAC/C;AAED,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,eAAe,EACvB,eAAe,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAC,EAC7D,QAAQ,EAAE,WAAW,GACpB,oBAAoB,CAmCtB"}

package/dist/lib/catalogue/enum-validator.js

@@ -0,0 +1,46 @@
+// Schema-driven enum validation — the `column_enums` FAIL path (M-ADR 0203
+// §4.1, completing M-ADR 0155 §4.3's staged enforcement).
+//
+// Every catalogue column bound via `column_enums` must hold either an empty
+// cell or a value in the bound enum's declared set. A violation is an
+// error-severity finding: it fails build/validate by default, exactly like
+// a dangling internal FK. This is the enforcement the 2.x advisory module
+// (`advisory-container-type.ts`, deleted at 3.0.0 per its own header) was
+// standing in for — and unlike that module it is schema-driven, so binding
+// a further enum is a schema edit, not new validator code.
+//
+// Emptiness is deliberately NOT this validator's concern: nullability is a
+// column property with its own semantics, and every current builder derives
+// bound columns structurally. Validating non-empty values keeps the check
+// exactly as wide as the enum binding itself.
+//
+// reads: the in-memory rows of every schema catalogue carrying a
+// `column_enums` block (no filesystem access of its own).
+export function validateColumnEnums(schema, rowsByCatalogue, findings) {
+    const violations = [];
+    for (const cat of schema.catalogues) {
+        for (const [column, enumRef] of Object.entries(cat.columnEnums)) {
+            const enumName = enumRef.replace(/^enums\./, "");
+            const enumDef = schema.enums[enumName];
+            if (!enumDef) {
+                // A binding that names no enum is a schema defect, not a data
+                // defect — but it must not validate as vacuously true (a false
+                // coverage claim is worse than none, M-ADR 0200 §4.3).
+                findings.add("convention", `${cat.name}.${column}: column_enums references unknown enum "${enumRef}" — nothing to validate against`, "error");
+                continue;
+            }
+            const allowedSet = new Set(enumDef.values.map((v) => v.value));
+            const allowed = enumDef.values.map((v) => v.value).join(" | ");
+            for (const row of rowsByCatalogue.get(cat.name) ?? []) {
+                const value = String(row[column] ?? "").trim();
+                if (value === "" || allowedSet.has(value))
+                    continue;
+                const rowPk = String(row[cat.primaryKey] ?? "<no-pk>");
+                violations.push({ catalogue: cat.name, column, rowPk, value, allowed });
+                findings.add("divergence", `${cat.name}.${column}: row ${rowPk} value "${value}" is outside the bound enum ${enumName} (${allowed})`, "error");
+            }
+        }
+    }
+    return { pass: violations.length === 0, violations };
+}
+//# sourceMappingURL=enum-validator.js.map

package/dist/lib/catalogue/enum-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enum-validator.js","sourceRoot":"","sources":["../../../src/lib/catalogue/enum-validator.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,0DAA0D;AAC1D,EAAE;AACF,4EAA4E;AAC5E,sEAAsE;AACtE,2EAA2E;AAC3E,0EAA0E;AAC1E,0EAA0E;AAC1E,2EAA2E;AAC3E,2DAA2D;AAC3D,EAAE;AACF,2EAA2E;AAC3E,4EAA4E;AAC5E,0EAA0E;AAC1E,8CAA8C;AAC9C,EAAE;AACF,iEAAiE;AACjE,0DAA0D;AAmB1D,MAAM,UAAU,mBAAmB,CACjC,MAAuB,EACvB,eAA6D,EAC7D,QAAqB;IAErB,MAAM,UAAU,GAAoB,EAAE,CAAC;IAEvC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACpC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAChE,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YACjD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACvC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,8DAA8D;gBAC9D,+DAA+D;gBAC/D,uDAAuD;gBACvD,QAAQ,CAAC,GAAG,CACV,YAAY,EACZ,GAAG,GAAG,CAAC,IAAI,IAAI,MAAM,2CAA2C,OAAO,iCAAiC,EACxG,OAAO,CACR,CAAC;gBACF,SAAS;YACX,CAAC;YACD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YAC/D,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/D,KAAK,MAAM,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;gBACtD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC/C,IAAI,KAAK,KAAK,EAAE,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC;oBAAE,SAAS;gBACpD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC,CAAC;gBACvD,UAAU,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;gBACxE,QAAQ,CAAC,GAAG,CACV,YAAY,EACZ,GAAG,GAAG,CAAC,IAAI,IAAI,MAAM,SAAS,KAAK,WAAW,KAAK,+BAA+B,QAAQ,KAAK,OAAO,GAAG,EACzG,OAAO,CACR,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC;AACvD,CAAC"}

package/dist/lib/catalogue/ext-id.d.ts

@@ -0,0 +1,25 @@
+import type { CatalogueRow } from "./csv-writer.js";
+/**
+ * Normalise a declared diagram entry id to slug form. Camel humps split
+ * BEFORE lowercasing (the F11a rule, matching the aggregator's resolver):
+ * most SDD ids are hyphenated, and `bvfmGatewayFramework` must derive the
+ * same identity the adjudicator resolves for it (`bvfm-gateway-framework`).
+ */
+export declare function normaliseEntryId(entryId: string): string;
+/** The 3.0.0 row id for a declared diagram entry id, or "" when the entry id normalises to nothing. */
+export declare function extIdFromEntryId(entryId: string): string;
+/**
+ * The 2.x row id for a display name — the pre-3.0.0 derivation, kept
+ * VERBATIM (including the parenthetical strip) so the migration map
+ * reproduces exactly the ids the old builder minted.
+ */
+export declare function legacyExtIdFromName(name: string): string;
+/**
+ * legacy (2.x, name-derived) id → the 3.0.0 ids it maps to, from built
+ * rows. Usually one; MORE than one means two distinct declared identities
+ * shared a display-name slug and were wrongly merged as one row under 2.x
+ * — the map surfaces the split rather than guessing (the consumer decides,
+ * loudly).
+ */
+export declare function buildLegacyExtIdMap(rows: readonly CatalogueRow[]): Map<string, string[]>;
+//# sourceMappingURL=ext-id.d.ts.map

package/dist/lib/catalogue/ext-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ext-id.d.ts","sourceRoot":"","sources":["../../../src/lib/catalogue/ext-id.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAEpD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAMxD;AAED,uGAAuG;AACvG,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAGxD;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAOxD;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,SAAS,YAAY,EAAE,GAC5B,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAgBvB"}

package/dist/lib/catalogue/ext-id.js

@@ -0,0 +1,76 @@
+// External-system row identity (schema 3.0.0) and the legacy-id migration
+// map — M-ADR 0203 §4.2, completing M-ADR 0189 §4.2.
+//
+// From 3.0.0 a `c4_external_systems` row id derives from the DECLARED
+// diagram entry id (`System_Ext(<entry-id>, …)`), not from a slug of the
+// display name. The declared id is the identity the aggregator resolves
+// (M-ADR 0189 §4.2); keying the row on anything else meant the row's own
+// PK was label-keyed evidence — the exact identity class 0189 measured
+// false-positiving at 14 of 15.
+//
+// The 2.x name-slug ids remain derivable from data every 2.30.0+ catalogue
+// carries (`name`), so the old→new map is a build artefact, not an authored
+// migration: `sdd-cli catalogue migration-map` emits it, and the exemption
+// loader consults it during the cut window (an authored exemption keyed by
+// a mapped old id is regenerable, NOT drift — the F30 rule at schema scale).
+/**
+ * Normalise a declared diagram entry id to slug form. Camel humps split
+ * BEFORE lowercasing (the F11a rule, matching the aggregator's resolver):
+ * most SDD ids are hyphenated, and `bvfmGatewayFramework` must derive the
+ * same identity the adjudicator resolves for it (`bvfm-gateway-framework`).
+ */
+export function normaliseEntryId(entryId) {
+    return entryId
+        .replace(/([a-z0-9])([A-Z])/g, "$1-$2")
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, "-")
+        .replace(/^-+|-+$/g, "");
+}
+/** The 3.0.0 row id for a declared diagram entry id, or "" when the entry id normalises to nothing. */
+export function extIdFromEntryId(entryId) {
+    const slug = normaliseEntryId(entryId);
+    return slug === "" ? "" : `ext-${slug}`;
+}
+/**
+ * The 2.x row id for a display name — the pre-3.0.0 derivation, kept
+ * VERBATIM (including the parenthetical strip) so the migration map
+ * reproduces exactly the ids the old builder minted.
+ */
+export function legacyExtIdFromName(name) {
+    const slug = name
+        .toLowerCase()
+        .replace(/\s*\([^)]+\)/g, "")
+        .replace(/[^a-z0-9]+/g, "-")
+        .replace(/^-+|-+$/g, "");
+    return slug === "" ? "" : `ext-${slug}`;
+}
+/**
+ * legacy (2.x, name-derived) id → the 3.0.0 ids it maps to, from built
+ * rows. Usually one; MORE than one means two distinct declared identities
+ * shared a display-name slug and were wrongly merged as one row under 2.x
+ * — the map surfaces the split rather than guessing (the consumer decides,
+ * loudly).
+ */
+export function buildLegacyExtIdMap(rows) {
+    const map = new Map();
+    for (const row of rows) {
+        const legacy = legacyExtIdFromName(String(row["name"] ?? ""));
+        if (legacy === "")
+            continue;
+        const current = String(row["id"] ?? "");
+        if (current === "" || legacy === current)
+            continue;
+        const ids = map.get(legacy);
+        if (ids) {
+            if (!ids.includes(current))
+                ids.push(current);
+        }
+        else {
+            map.set(legacy, [current]);
+        }
+    }
+    for (const ids of map.values())
+        ids.sort((a, b) => a.localeCompare(b));
+    return map;
+}
+//# sourceMappingURL=ext-id.js.map

package/dist/lib/catalogue/ext-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ext-id.js","sourceRoot":"","sources":["../../../src/lib/catalogue/ext-id.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,qDAAqD;AACrD,EAAE;AACF,sEAAsE;AACtE,yEAAyE;AACzE,wEAAwE;AACxE,yEAAyE;AACzE,uEAAuE;AACvE,gCAAgC;AAChC,EAAE;AACF,2EAA2E;AAC3E,4EAA4E;AAC5E,2EAA2E;AAC3E,2EAA2E;AAC3E,6EAA6E;AAI7E;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,OAAO,OAAO;SACX,OAAO,CAAC,oBAAoB,EAAE,OAAO,CAAC;SACtC,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACvC,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC;AAC1C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,MAAM,IAAI,GAAG,IAAI;SACd,WAAW,EAAE;SACb,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;SAC5B,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3B,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC;AAC1C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,IAA6B;IAE7B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAoB,CAAC;IACxC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9D,IAAI,MAAM,KAAK,EAAE;YAAE,SAAS;QAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACxC,IAAI,OAAO,KAAK,EAAE,IAAI,MAAM,KAAK,OAAO;YAAE,SAAS;QACnD,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,GAAG,EAAE,CAAC;YACR,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChD,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE;QAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/lib/catalogue/index.d.ts

@@ -9,6 +9,7 @@ export { runCatalogueBuild } from "./build.js";
 export type { BuildInputs, BuildResult } from "./build.js";
 export { runCatalogueAggregate } from "./aggregate.js";
 export type { AggregateInputs, AggregateResult } from "./aggregate.js";
+export { runCatalogueMigrationMap } from "./migration-map.js";
 export { runCatalogueValidate } from "./validate.js";
 export type { ValidateInputs, ValidateResult } from "./validate.js";
 export { runCatalogueVersion } from "./version.js";

package/dist/lib/catalogue/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/catalogue/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACrD,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AAChF,YAAY,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,aAAa,EACb,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,eAAe,EACf,YAAY,EACZ,SAAS,EACT,aAAa,EACb,OAAO,EACP,YAAY,GACb,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,eAAe,EACf,SAAS,EACT,iBAAiB,EACjB,QAAQ,EACR,UAAU,GACX,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACrE,YAAY,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,YAAY,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,YAAY,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/catalogue/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAE9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACrD,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AAChF,YAAY,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,aAAa,EACb,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,eAAe,EACf,YAAY,EACZ,SAAS,EACT,aAAa,EACb,OAAO,EACP,YAAY,GACb,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,eAAe,EACf,SAAS,EACT,iBAAiB,EACjB,QAAQ,EACR,UAAU,GACX,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACrE,YAAY,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,YAAY,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,YAAY,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC"}

package/dist/lib/catalogue/index.js

@@ -7,6 +7,7 @@
  */
 export { runCatalogueBuild } from "./build.js";
 export { runCatalogueAggregate } from "./aggregate.js";
+export { runCatalogueMigrationMap } from "./migration-map.js";
 export { runCatalogueValidate } from "./validate.js";
 export { runCatalogueVersion } from "./version.js";
 export { SCHEMA_COMPAT, formatSchemaVersionMismatch } from "./schema-compat.js";

package/dist/lib/catalogue/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/catalogue/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAErD,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AAEhF,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,aAAa,EACb,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAS5B,OAAO,EACL,eAAe,EACf,SAAS,EACT,iBAAiB,EACjB,QAAQ,EACR,UAAU,GACX,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAErE,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAExD,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/catalogue/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAE9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAErD,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AAEhF,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,aAAa,EACb,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAS5B,OAAO,EACL,eAAe,EACf,SAAS,EACT,iBAAiB,EACjB,QAAQ,EACR,UAAU,GACX,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAErE,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAExD,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC"}

package/dist/lib/catalogue/migration-map.d.ts

@@ -0,0 +1,27 @@
+export interface MigrationMapInputs {
+    /** SDD repo root (defaults to cwd). */
+    readonly sddPath?: string;
+}
+export interface ExtIdMapEntry {
+    readonly oldId: string;
+    readonly newId: string;
+    readonly name: string;
+}
+export interface ContractIdMapEntry {
+    readonly oldId: string;
+    readonly newId: string;
+    readonly kind: string;
+    readonly specPath: string;
+}
+export interface MigrationMapResult {
+    readonly exitCode: number;
+    readonly extIdEntries: readonly ExtIdMapEntry[];
+    /** Rows whose new id could not be derived (no declared_id in a pre-2.30.0 catalogue). */
+    readonly underivable: readonly string[];
+    readonly contractEntries: readonly ContractIdMapEntry[];
+    /** Contract ids ALREADY ending in their -kind suffix — either an already-migrated 3.0.0 catalogue or a stem genuinely ending in the kind token; the reader decides from spec_path. */
+    readonly contractAmbiguous: readonly ContractIdMapEntry[];
+}
+export type Writer = (s: string) => void;
+export declare function runCatalogueMigrationMap(inputs: MigrationMapInputs, write: Writer): Promise<MigrationMapResult>;
+//# sourceMappingURL=migration-map.d.ts.map

package/dist/lib/catalogue/migration-map.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration-map.d.ts","sourceRoot":"","sources":["../../../src/lib/catalogue/migration-map.ts"],"names":[],"mappings":"AAqBA,MAAM,WAAW,kBAAkB;IACjC,uCAAuC;IACvC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,SAAS,aAAa,EAAE,CAAC;IAChD,yFAAyF;IACzF,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,eAAe,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACxD,sLAAsL;IACtL,QAAQ,CAAC,iBAAiB,EAAE,SAAS,kBAAkB,EAAE,CAAC;CAC3D;AAED,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;AAEzC,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,kBAAkB,EAC1B,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,kBAAkB,CAAC,CA8F7B"}

package/dist/lib/catalogue/migration-map.js

@@ -0,0 +1,114 @@
+// `sdd-cli catalogue migration-map` — emit the 2.x → 3.0.0 id migration
+// map from an existing catalogues/ directory (M-ADR 0203 §4.2, §4.4).
+//
+// The two 3.0.0 id migrations (external-system ids, contract ids) are
+// mechanical functions of data every 2.30.0+ catalogue already carries, so
+// the map is DERIVED, never authored: run this against a committed 2.x
+// catalogue (before migrating) and the pairs come out. Downstream
+// consumers: authored exemption + alias files (re-keyed automatically
+// during the cut window), findings baselines (regenerate), external
+// tooling (this output ships with the release notes), and the D3
+// rehearsal's pre-stated figures, which derive from exactly this output.
+//
+// Count and list, always (M-ADR 0200 §4.3).
+//
+// reads: catalogues/c4_external_systems.csv, catalogues/contracts.csv
+import { join, resolve } from "node:path";
+import { readCatalogueCsv } from "./csv-reader.js";
+import { contractIdWithKind } from "./contract-id.js";
+import { extIdFromEntryId, legacyExtIdFromName } from "./ext-id.js";
+export async function runCatalogueMigrationMap(inputs, write) {
+    const sddPath = resolve(inputs.sddPath ?? process.cwd());
+    const filePath = join(sddPath, "catalogues", "c4_external_systems.csv");
+    let parsed;
+    try {
+        parsed = await readCatalogueCsv(filePath);
+    }
+    catch (err) {
+        if (err.code === "ENOENT") {
+            throw new Error(`catalogues/c4_external_systems.csv not found under ${sddPath}\n` +
+                `  Run against an SDD repo with built catalogues (2.30.0+ carries declared_id).`);
+        }
+        throw err;
+    }
+    const entries = [];
+    const underivable = [];
+    for (const row of parsed.rows) {
+        const name = String(row["name"] ?? "");
+        const declaredId = String(row["declared_id"] ?? "").trim();
+        const oldId = legacyExtIdFromName(name);
+        if (declaredId === "") {
+            // Pre-2.30.0 row: the declared identity is not in the catalogue, only
+            // in the diagrams — a rebuild derives it. Reported, never guessed.
+            underivable.push(String(row["id"] ?? "<no-id>"));
+            continue;
+        }
+        const newId = extIdFromEntryId(declaredId);
+        if (oldId === "" || newId === "" || oldId === newId)
+            continue;
+        entries.push({ oldId, newId, name });
+    }
+    entries.sort((a, b) => a.oldId.localeCompare(b.oldId) || a.newId.localeCompare(b.newId));
+    write(`ext-id migration map (2.x name-slug → 3.0.0 declared-identity): ${entries.length} pair(s)\n`);
+    if (entries.length > 0) {
+        write(`old_id,new_id,name\n`);
+        for (const e of entries)
+            write(`${e.oldId},${e.newId},${csvCell(e.name)}\n`);
+    }
+    if (underivable.length > 0) {
+        write(`\nunderivable (${underivable.length}) — rows carry no declared_id (pre-2.30.0 catalogue); rebuild to derive identity from the diagrams:\n`);
+        for (const id of underivable)
+            write(`  ${id}\n`);
+    }
+    // ── contract ids (M-ADR 0203 §4.4): new id = `${old id}-${kind}` ──
+    const contractsPath = join(sddPath, "catalogues", "contracts.csv");
+    const contractEntries = [];
+    const contractAmbiguous = [];
+    let contracts;
+    try {
+        contracts = await readCatalogueCsv(contractsPath);
+    }
+    catch (err) {
+        if (err.code !== "ENOENT")
+            throw err;
+        contracts = null;
+    }
+    if (contracts !== null) {
+        for (const row of contracts.rows) {
+            const id = String(row["id"] ?? "");
+            const kind = String(row["kind"] ?? "");
+            const specPath = String(row["spec_path"] ?? "");
+            if (id === "" || kind === "")
+                continue;
+            if (id.endsWith(`-${kind}`)) {
+                // Already kind-suffixed: an already-migrated 3.0.0 row, or a 2.x
+                // stem that genuinely ends in the kind token. Not decidable from
+                // the catalogue alone — listed, never guessed.
+                contractAmbiguous.push({ oldId: id, newId: contractIdWithKind(id, kind), kind, specPath });
+                continue;
+            }
+            contractEntries.push({ oldId: id, newId: contractIdWithKind(id, kind), kind, specPath });
+        }
+        contractEntries.sort((a, b) => a.oldId.localeCompare(b.oldId));
+        contractAmbiguous.sort((a, b) => a.oldId.localeCompare(b.oldId));
+        write(`\ncontract-id migration map (2.x kindless → 3.0.0 kind-suffixed): ${contractEntries.length} pair(s)\n`);
+        if (contractEntries.length > 0) {
+            write(`old_id,new_id,kind\n`);
+            for (const e of contractEntries)
+                write(`${e.oldId},${e.newId},${e.kind}\n`);
+        }
+        if (contractAmbiguous.length > 0) {
+            write(`\nalready kind-suffixed (${contractAmbiguous.length}) — either an already-migrated catalogue or a stem ending in the kind token; decide from spec_path:\n`);
+            for (const e of contractAmbiguous)
+                write(`  ${e.oldId} (${e.kind}; ${e.specPath})\n`);
+        }
+    }
+    else {
+        write(`\ncatalogues/contracts.csv not found — contract-id map skipped\n`);
+    }
+    return { exitCode: 0, extIdEntries: entries, underivable, contractEntries, contractAmbiguous };
+}
+function csvCell(s) {
+    return /[",\n]/.test(s) ? `"${s.replace(/"/g, '""')}"` : s;
+}
+//# sourceMappingURL=migration-map.js.map

package/dist/lib/catalogue/migration-map.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration-map.js","sourceRoot":"","sources":["../../../src/lib/catalogue/migration-map.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,sEAAsE;AACtE,EAAE;AACF,sEAAsE;AACtE,2EAA2E;AAC3E,uEAAuE;AACvE,kEAAkE;AAClE,sEAAsE;AACtE,oEAAoE;AACpE,iEAAiE;AACjE,yEAAyE;AACzE,EAAE;AACF,4CAA4C;AAC5C,EAAE;AACF,sEAAsE;AAEtE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAgCpE,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,MAA0B,EAC1B,KAAa;IAEb,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,yBAAyB,CAAC,CAAC;IAExE,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CACb,sDAAsD,OAAO,IAAI;gBAC/D,gFAAgF,CACnF,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACvC,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;YACtB,sEAAsE;YACtE,mEAAmE;YACnE,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC;YACjD,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC3C,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,KAAK;YAAE,SAAS;QAC9D,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAEzF,KAAK,CAAC,mEAAmE,OAAO,CAAC,MAAM,YAAY,CAAC,CAAC;IACrG,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,OAAO;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,KAAK,CACH,kBAAkB,WAAW,CAAC,MAAM,uGAAuG,CAC5I,CAAC;QACF,KAAK,MAAM,EAAE,IAAI,WAAW;YAAE,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACnD,CAAC;IAED,qEAAqE;IACrE,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,eAAe,CAAC,CAAC;IACnE,MAAM,eAAe,GAAyB,EAAE,CAAC;IACjD,MAAM,iBAAiB,GAAyB,EAAE,CAAC;IACnD,IAAI,SAAS,CAAC;IACd,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,gBAAgB,CAAC,aAAa,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,GAAG,CAAC;QAChE,SAAS,GAAG,IAAI,CAAC;IACnB,CAAC;IACD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,GAAG,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC;YACjC,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACnC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACvC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;YAChD,IAAI,EAAE,KAAK,EAAE,IAAI,IAAI,KAAK,EAAE;gBAAE,SAAS;YACvC,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC5B,iEAAiE;gBACjE,iEAAiE;gBACjE,+CAA+C;gBAC/C,iBAAiB,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,kBAAkB,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAC3F,SAAS;YACX,CAAC;YACD,eAAe,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,kBAAkB,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC3F,CAAC;QACD,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/D,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAEjE,KAAK,CACH,qEAAqE,eAAe,CAAC,MAAM,YAAY,CACxG,CAAC;QACF,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAC9B,KAAK,MAAM,CAAC,IAAI,eAAe;gBAAE,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,KAAK,CACH,4BAA4B,iBAAiB,CAAC,MAAM,uGAAuG,CAC5J,CAAC;YACF,KAAK,MAAM,CAAC,IAAI,iBAAiB;gBAAE,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,kEAAkE,CAAC,CAAC;IAC5E,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,iBAAiB,EAAE,CAAC;AACjG,CAAC;AAED,SAAS,OAAO,CAAC,CAAS;IACxB,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC"}