@sdd-method/sdd-cli 1.41.0 → 1.42.0

package/dist/lib/ci-binding/module.js

@@ -0,0 +1,204 @@
+/**
+ * The Method Validation Dagger module (M-ADR 0219 §4.1–§4.3): the ONLY definition of the
+ * method-managed validation job. `sync` writes these files into every SDD at MODULE_DIR, with the
+ * exact verify-cli and maintain-cli versions released alongside this sdd-cli substituted in, and
+ * every CI host's wrapper (./index.ts) just calls the module.
+ *
+ * The module's source lives here, as text, rather than as files beside the package: sync runs from
+ * three packages (sdd-cli, maintain-cli, and the persona builds' import closure), and a string
+ * travels with whichever one imports it, where an asset directory would have to be copied into each.
+ * `scripts/dagger-parity.sh` renders it from the built package, so the parity harness runs exactly
+ * what sync writes.
+ */
+import { createHash } from "node:crypto";
+import { getMaintainCliVersion, getVerifyCliVersion } from "../package-version.js";
+/** Where the module lives in an SDD (M-ADR 0219 §4.3, ruled 2026-10-16). */
+export const MODULE_DIR = ".dagger/method-validation";
+/**
+ * The Dagger engine the module declares and every wrapper installs, pinned to one value so the CLI a
+ * wrapper installs and the engine the module asks for can never disagree (M-ADR 0219 §6). An engine
+ * upgrade is a release concern: change it here, run scripts/dagger-parity.sh, release.
+ */
+export const DAGGER_VERSION = "0.21.10";
+/** The command every host wrapper runs. */
+export const MODULE_CALL = `dagger call -m ${MODULE_DIR} method-validation --source .`;
+const VERIFY_PIN = "@@VERIFY_CLI_VERSION@@";
+// The module's SDK import, substituted at render: written literally, the persona builds' import-closure
+// scan would read this text as an import of the CLI's own and refuse a dependency it does not declare.
+const DAGGER_SDK = "@@DAGGER_SDK@@";
+const MAINTAIN_PIN = "@@MAINTAIN_CLI_VERSION@@";
+// The module's own source. String.raw keeps it byte-for-byte, so it holds no backtick; its only
+// substitutions are the three markers above, which renderModuleFiles replaces.
+const INDEX_TS = String.raw `/**
+ * Method Validation (M-ADR 0219): the method-managed validation job, as one Dagger module. Every CI
+ * host calls it, and none keeps a step list of its own. Written by sdd-cli sync and method-managed:
+ * sync refuses to overwrite an edited copy without --allow-overwrite.
+ *
+ * Run it anywhere a container engine runs:
+ *   dagger call -m .dagger/method-validation method-validation --source .
+ *
+ * The steps are the method's job plan, read at run time from "sdd-verify validate --list". Every
+ * step runs even after an earlier one fails, so one red step never hides the verdicts after it. The
+ * job fails only when a non-advisory step fails; the catalogue freshness step is advisory.
+ */
+import { dag, Container, Directory, File, object, func, ReturnType } from ${DAGGER_SDK}
+
+// Pinned, so a run is reproducible and every tool the validators shell out to is named here.
+const NODE_IMAGE = "node:20-bookworm"
+const YQ_VERSION = "v4.44.3"
+
+interface PlanStep {
+  id: string
+  title: string
+  tool: "sdd-verify" | "sdd-maintain" | "bash"
+  args: string[]
+  advisory: boolean
+}
+
+@object()
+export class MethodValidation {
+  /**
+   * The toolchain: Node, git, bash, python3, ripgrep, a pinned yq, and the exact-pinned verify and
+   * maintain CLIs. A tarball, when given, replaces the published package (a release candidate).
+   */
+  @func()
+  toolchain(
+    verifyVersion: string = "${VERIFY_PIN}",
+    maintainVersion: string = "${MAINTAIN_PIN}",
+    verifyTarball?: File,
+    maintainTarball?: File,
+  ): Container {
+    let c = dag
+      .container()
+      .from(NODE_IMAGE)
+      .withExec(["sh", "-c", "apt-get update -qq && apt-get install -y -qq ripgrep python3 >/dev/null"])
+      .withExec([
+        "sh",
+        "-c",
+        "curl -fsSL -o /usr/local/bin/yq https://github.com/mikefarah/yq/releases/download/" +
+          YQ_VERSION +
+          "/yq_linux_$(dpkg --print-architecture) && chmod +x /usr/local/bin/yq",
+      ])
+    const pkgs: string[] = []
+    if (verifyTarball) {
+      c = c.withFile("/pkgs/verify-cli.tgz", verifyTarball)
+      pkgs.push("/pkgs/verify-cli.tgz")
+    } else pkgs.push("@sdd-method/verify-cli@" + verifyVersion)
+    if (maintainTarball) {
+      c = c.withFile("/pkgs/maintain-cli.tgz", maintainTarball)
+      pkgs.push("/pkgs/maintain-cli.tgz")
+    } else pkgs.push("@sdd-method/maintain-cli@" + maintainVersion)
+    return c.withExec(["npm", "install", "-g", "--silent", ...pkgs])
+  }
+
+  /**
+   * Run Method Validation on an SDD repository. Returns a step-by-step report, and throws (so the
+   * CI host's job fails) when any non-advisory step failed.
+   */
+  @func()
+  async methodValidation(
+    source: Directory,
+    verifyVersion: string = "${VERIFY_PIN}",
+    maintainVersion: string = "${MAINTAIN_PIN}",
+    verifyTarball?: File,
+    maintainTarball?: File,
+  ): Promise<string> {
+    const base = this.toolchain(verifyVersion, maintainVersion, verifyTarball, maintainTarball)
+      .withMountedDirectory("/src", source)
+      .withWorkdir("/src")
+    const versions = (await base.withExec(["sh", "-c", "sdd-verify --version; sdd-maintain --version"]).stdout()).split("\n")
+    const plan = JSON.parse(await base.withExec(["sdd-verify", "validate", "--list"]).stdout()) as {
+      profile: string
+      steps: PlanStep[]
+    }
+
+    const lines = ["Method Validation: profile " + plan.profile + "; sdd-verify " + versions[0] + ", sdd-maintain " + versions[1]]
+    let failed = 0
+    for (const step of plan.steps) {
+      const ran = base.withExec([step.tool, ...step.args], { expect: ReturnType.Any })
+      const code = await ran.exitCode()
+      const verdict = code === 0 ? "PASS" : step.advisory ? "ADVISORY" : "FAIL"
+      if (code !== 0 && !step.advisory) failed++
+      lines.push(verdict.padEnd(8) + " exit " + code + "  " + step.id + "  (" + step.title + ")")
+      if (code !== 0) {
+        const out = (await ran.stdout()) + (await ran.stderr())
+        lines.push(...out.trim().split("\n").slice(-6).map((l) => "           " + l))
+      }
+    }
+    lines.push(failed === 0 ? "RESULT: PASS" : "RESULT: FAIL (" + failed + " failing step(s))")
+    const report = lines.join("\n")
+    if (failed > 0) throw new Error(report)
+    return report
+  }
+}
+`;
+const DAGGER_JSON = `{
+  "name": "method-validation",
+  "engineVersion": "v${DAGGER_VERSION}",
+  "sdk": {
+    "source": "typescript"
+  }
+}
+`;
+const PACKAGE_JSON = `{
+  "type": "module",
+  "dependencies": {
+    "typescript": "5.9.3"
+  }
+}
+`;
+const TSCONFIG_JSON = `{
+  "compilerOptions": {
+    "target": "ES2022",
+    "moduleResolution": "Node",
+    "experimentalDecorators": true,
+    "strict": true,
+    "skipLibCheck": true,
+    "paths": {
+      "@dagger.io/dagger": ["./sdk/index.ts"],
+      "@dagger.io/dagger/telemetry": ["./sdk/telemetry.ts"]
+    }
+  }
+}
+`;
+const YARN_LOCK = `# THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
+# yarn lockfile v1
+
+
+typescript@5.9.3:
+  version "5.9.3"
+  resolved "https://registry.yarnpkg.com/typescript/-/typescript-5.9.3.tgz#5b4f59e15310ab17a216f5d6cf53ee476ede670f"
+  integrity sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==
+`;
+// The SDK Dagger generates at run time stays out of the SDD's history.
+const GITIGNORE = `/sdk
+/**/node_modules/**
+/**/.pnpm-store/**
+/.env
+`;
+/**
+ * The module's files, relative to MODULE_DIR, in a fixed order. Pins default to the versions released
+ * with this sdd-cli (M-ADR 0218 §4.6); the parity harness passes candidate versions.
+ */
+export function renderModuleFiles(pins = { verify: getVerifyCliVersion(), maintain: getMaintainCliVersion() }) {
+    return [
+        [".gitignore", GITIGNORE],
+        ["dagger.json", DAGGER_JSON],
+        ["package.json", PACKAGE_JSON],
+        ["src/index.ts", INDEX_TS.split(VERIFY_PIN).join(pins.verify).split(MAINTAIN_PIN).join(pins.maintain).split(DAGGER_SDK).join('"@dagger.io' + '/dagger"')],
+        ["tsconfig.json", TSCONFIG_JSON],
+        ["yarn.lock", YARN_LOCK],
+    ];
+}
+/**
+ * sha256 over the module's files as they stand (null content = absent), in the render's order, so
+ * sync can tell a module nobody touched from an edited one (M-ADR 0218 §4.7, as for the wrapper).
+ */
+export function moduleSha256(files) {
+    const h = createHash("sha256");
+    for (const [rel, content] of files) {
+        h.update(rel).update("\0").update(content === null ? "\u0001absent" : content).update("\0");
+    }
+    return h.digest("hex");
+}
+//# sourceMappingURL=module.js.map

package/dist/lib/ci-binding/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../src/lib/ci-binding/module.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAEnF,4EAA4E;AAC5E,MAAM,CAAC,MAAM,UAAU,GAAG,2BAA2B,CAAC;AAEtD;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,SAAS,CAAC;AAExC,2CAA2C;AAC3C,MAAM,CAAC,MAAM,WAAW,GAAG,kBAAkB,UAAU,+BAA+B,CAAC;AAEvF,MAAM,UAAU,GAAG,wBAAwB,CAAC;AAC5C,wGAAwG;AACxG,uGAAuG;AACvG,MAAM,UAAU,GAAG,gBAAgB,CAAC;AACpC,MAAM,YAAY,GAAG,0BAA0B,CAAC;AAEhD,gGAAgG;AAChG,+EAA+E;AAC/E,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;4EAYiD,UAAU;;;;;;;;;;;;;;;;;;;;;;+BAsBvD,UAAU;iCACR,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;+BAkCd,UAAU;iCACR,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgC5C,CAAC;AAEF,MAAM,WAAW,GAAG;;uBAEG,cAAc;;;;;CAKpC,CAAC;AAEF,MAAM,YAAY,GAAG;;;;;;CAMpB,CAAC;AAEF,MAAM,aAAa,GAAG;;;;;;;;;;;;;CAarB,CAAC;AAEF,MAAM,SAAS,GAAG;;;;;;;;CAQjB,CAAC;AAEF,uEAAuE;AACvE,MAAM,SAAS,GAAG;;;;CAIjB,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAA6C,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,QAAQ,EAAE,qBAAqB,EAAE,EAAE;IAEjH,OAAO;QACL,CAAC,YAAY,EAAE,SAAS,CAAC;QACzB,CAAC,aAAa,EAAE,WAAW,CAAC;QAC5B,CAAC,cAAc,EAAE,YAAY,CAAC;QAC9B,CAAC,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,CAAC;QACzJ,CAAC,eAAe,EAAE,aAAa,CAAC;QAChC,CAAC,WAAW,EAAE,SAAS,CAAC;KACzB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,KAAqC;IAChE,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC/B,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC;QACnC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC"}

package/dist/lib/context-pull/index.d.ts

@@ -0,0 +1,39 @@
+/**
+ * `sdd-cli context pull` — write the code-repo briefing and MCP_SETUP.md into a
+ * code repository from its upstream SDD (M-ADR 0128 §1; M-ADR 0150 §4.3–4.4).
+ *
+ * The successor to the code-repo half of `generate-claude-md.sh`, scoped by
+ * M-ADR 0150 Phase D: no dynamic content is baked in; that is the SDD's MCP
+ * server's job. A sibling verb to `generate-briefing`, not an extension of it:
+ * `generate-briefing` needs the target to be an SDD (marker, lock, synced
+ * templates), and a code repository is none of those. They share the
+ * placeholder substitution and the wrapper's marker-block merge.
+ *
+ * What it writes, and nothing else (M-ADR 0218 §4.3 item 9, a MAINTAIN verb):
+ *   agent-instructions.md   whole file, method-managed
+ *   CLAUDE.md / AGENTS.md   the method-managed block only; adopter content survives
+ *   MCP_SETUP.md            whole file, method-managed
+ * Templates are read from the SDD, which carries them via its baseline bundle.
+ */
+import type { AgentHarness } from "../agent-harness.js";
+export declare const CODE_REPO_BRIEFING_ROOT = "orchestration/templates/briefing/code-repo";
+export declare const MCP_SETUP_TEMPLATE = "orchestration/templates/mcp/code-repo/MCP_SETUP.md.hbs";
+export declare const MCP_SETUP_REL_PATH = "MCP_SETUP.md";
+export interface ContextPullOptions {
+    /** The code repository to write into. */
+    readonly codeRepo: string;
+    readonly agentHarness: AgentHarness;
+    readonly allowOverwrite: boolean;
+    readonly sddPath?: string | undefined;
+    readonly repoName?: string | undefined;
+    readonly searchRoots?: readonly string[] | undefined;
+    /** ISO date recorded as pull_date. Default: today (UTC). Pinned in tests for determinism. */
+    readonly pullDate?: string | undefined;
+}
+export interface ContextPullResult {
+    readonly exitCode: number;
+}
+export declare function runContextPull(opts: ContextPullOptions, out?: (line: string) => void): Promise<ContextPullResult>;
+/** `{{name}}` substitution over an open variable set (the briefing renderer's is closed to four). */
+export declare function substituteAll(template: string, vars: Readonly<Record<string, string>>): string;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/context-pull/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/context-pull/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAexD,eAAO,MAAM,uBAAuB,+CAA+C,CAAC;AACpF,eAAO,MAAM,kBAAkB,2DAA2D,CAAC;AAC3F,eAAO,MAAM,kBAAkB,iBAAiB,CAAC;AAOjD,MAAM,WAAW,kBAAkB;IACjC,yCAAyC;IACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACrD,6FAA6F;IAC7F,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAsB,cAAc,CAClC,IAAI,EAAE,kBAAkB,EACxB,GAAG,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAA2C,GACjE,OAAO,CAAC,iBAAiB,CAAC,CAiH5B;AAED,qGAAqG;AACrG,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,MAAM,CAE9F"}

package/dist/lib/context-pull/index.js

@@ -0,0 +1,151 @@
+/**
+ * `sdd-cli context pull` — write the code-repo briefing and MCP_SETUP.md into a
+ * code repository from its upstream SDD (M-ADR 0128 §1; M-ADR 0150 §4.3–4.4).
+ *
+ * The successor to the code-repo half of `generate-claude-md.sh`, scoped by
+ * M-ADR 0150 Phase D: no dynamic content is baked in; that is the SDD's MCP
+ * server's job. A sibling verb to `generate-briefing`, not an extension of it:
+ * `generate-briefing` needs the target to be an SDD (marker, lock, synced
+ * templates), and a code repository is none of those. They share the
+ * placeholder substitution and the wrapper's marker-block merge.
+ *
+ * What it writes, and nothing else (M-ADR 0218 §4.3 item 9, a MAINTAIN verb):
+ *   agent-instructions.md   whole file, method-managed
+ *   CLAUDE.md / AGENTS.md   the method-managed block only; adopter content survives
+ *   MCP_SETUP.md            whole file, method-managed
+ * Templates are read from the SDD, which carries them via its baseline bundle.
+ */
+import { access, mkdir, readFile, writeFile } from "node:fs/promises";
+import { basename, dirname, join, resolve } from "node:path";
+import { AGENT_INSTRUCTIONS_REL_PATH, WRAPPER_BLOCK_BEGIN, WRAPPER_BLOCK_END, findUnresolvedPlaceholders, harnessWrapperOutputPath, resolveBriefingVariables, splitWrapperTemplate, } from "../briefing/index.js";
+import { readLockFile } from "../lock-file.js";
+import { readRepoKind } from "../repo-kind.js";
+import { writeMarkedBlockFile } from "../sync/yaml-block-merge.js";
+import { defaultSearchRoots, resolveCodeRepoName, resolveSdd } from "./resolve.js";
+export const CODE_REPO_BRIEFING_ROOT = "orchestration/templates/briefing/code-repo";
+export const MCP_SETUP_TEMPLATE = "orchestration/templates/mcp/code-repo/MCP_SETUP.md.hbs";
+export const MCP_SETUP_REL_PATH = "MCP_SETUP.md";
+const WRAPPER_TEMPLATE = {
+    "claude-code": "claude-code/CLAUDE.md.hbs",
+    "github-copilot-cli": "github-copilot-cli/AGENTS.md.hbs",
+};
+export async function runContextPull(opts, out = (line) => process.stdout.write(line)) {
+    const codeRepo = resolve(opts.codeRepo);
+    if ((await readRepoKind(codeRepo)) !== null) {
+        out(fail(`${codeRepo} is an SDD repository (it has .sdd-repo-kind). context pull writes into a code repository; for an SDD use sdd-cli generate-briefing.`));
+        return { exitCode: 1 };
+    }
+    const repoName = resolveCodeRepoName(codeRepo, opts.repoName);
+    const outcome = await resolveSdd({
+        repoName,
+        sddPath: opts.sddPath,
+        searchRoots: opts.searchRoots ?? defaultSearchRoots(codeRepo),
+        codeRepo,
+    });
+    if (outcome.kind === "not-an-sdd") {
+        out(fail(`--sdd ${outcome.path} is not an SDD repository (no .sdd-repo-kind).`));
+        return { exitCode: 1 };
+    }
+    if (outcome.kind === "not-found") {
+        out(fail(`No SDD lists repository "${repoName}" in its catalogues/repositories.csv (searched ${outcome.searched.length} SDD(s) under ${(opts.searchRoots ?? defaultSearchRoots(codeRepo)).join(", ")}). Pass --sdd <path>, or --repo <id> if this repository is catalogued under another id.`));
+        return { exitCode: 1 };
+    }
+    if (outcome.kind === "ambiguous") {
+        out(fail(`Repository "${repoName}" is listed by ${outcome.candidates.length} SDDs: ${outcome.candidates.join(", ")}. Pass --sdd <path> to choose.`));
+        return { exitCode: 1 };
+    }
+    const sddRoot = outcome.sddRoot;
+    if (!outcome.catalogued) {
+        out(warn(`${basename(sddRoot)}'s catalogues/repositories.csv does not list "${repoName}"; continuing because --sdd was given.`));
+    }
+    // The SDD's own identity, profile and baseline, exactly as its own briefing renders them.
+    const lock = await readLockFile(sddRoot);
+    const forwardBase = lock?.bundles.find((b) => b.isForwardBase);
+    if (!forwardBase) {
+        out(fail(`${sddRoot} has no forward-base bundle in method-baseline.lock; sync it first.`));
+        return { exitCode: 1 };
+    }
+    const sdd = await resolveBriefingVariables({ targetRepo: sddRoot, baselineVersionOverride: forwardBase.bundleVersion });
+    const vars = {
+        repo_name: repoName,
+        sdd_name: sdd.sdd_name,
+        sdd_root: sddRoot,
+        repo_kind: sdd.repo_kind,
+        baseline_version: sdd.baseline_version,
+        pull_date: opts.pullDate ?? new Date().toISOString().slice(0, 10),
+        // MCP_SETUP.md's own names, kept so the template the bash generator rendered still renders.
+        upstream_sdd_name: basename(sddRoot),
+        sdd_method_baseline_version: sdd.baseline_version,
+    };
+    const aiTemplate = join(sddRoot, CODE_REPO_BRIEFING_ROOT, "agent-instructions.md.hbs");
+    const wrapperTemplate = join(sddRoot, CODE_REPO_BRIEFING_ROOT, WRAPPER_TEMPLATE[opts.agentHarness]);
+    const mcpTemplate = join(sddRoot, MCP_SETUP_TEMPLATE);
+    for (const t of [aiTemplate, wrapperTemplate, mcpTemplate]) {
+        if (!(await exists(t))) {
+            out(fail(`${sddRoot} does not carry ${t.slice(sddRoot.length + 1)}: its method baseline predates context pull. Sync the SDD to a baseline that ships the code-repo templates.`));
+            return { exitCode: 1 };
+        }
+    }
+    const rendered = {};
+    for (const [rel, path] of [[AGENT_INSTRUCTIONS_REL_PATH, aiTemplate], [harnessWrapperOutputPath(opts.agentHarness), wrapperTemplate], [MCP_SETUP_REL_PATH, mcpTemplate]]) {
+        const content = substituteAll(await readFile(path, "utf8"), vars);
+        const unresolved = findUnresolvedPlaceholders(content);
+        if (unresolved.length > 0) {
+            out(fail(`${rel}: the SDD's template has placeholders this CLI does not know: ${unresolved.join(", ")}. Upgrade sdd-cli.`));
+            return { exitCode: 1 };
+        }
+        rendered[rel] = content;
+    }
+    // The wrapper first: it is the only write that can be refused, and a refusal must leave nothing written.
+    const wrapperRel = harnessWrapperOutputPath(opts.agentHarness);
+    const wrapperPath = join(codeRepo, wrapperRel);
+    const existing = (await exists(wrapperPath)) ? await readFile(wrapperPath, "utf8") : null;
+    const parts = splitWrapperTemplate(rendered[wrapperRel]);
+    const hasMarkers = existing !== null && existing.includes(WRAPPER_BLOCK_BEGIN) && existing.includes(WRAPPER_BLOCK_END);
+    let wrapperChanged;
+    if (existing !== null && !hasMarkers) {
+        // No markers: a pre-briefing-layer file (the bash generator wrote these whole) or adopter-authored.
+        if (!opts.allowOverwrite) {
+            out(fail(`${wrapperRel} exists without method-managed markers, so it is treated as adopter-authored. Nothing was written. Re-run with --allow-overwrite to replace it with the rendered wrapper (move anything worth keeping below its markers afterwards).`));
+            return { exitCode: 1 };
+        }
+        await writeFile(wrapperPath, rendered[wrapperRel], "utf8");
+        wrapperChanged = existing !== rendered[wrapperRel];
+    }
+    else {
+        const merge = await writeMarkedBlockFile(wrapperPath, existing === null ? rendered[wrapperRel] : parts.block, { begin: WRAPPER_BLOCK_BEGIN, end: WRAPPER_BLOCK_END }, opts.allowOverwrite, existing === null ? undefined : { pre: parts.pre, post: parts.post });
+        wrapperChanged = merge.changed;
+    }
+    const changed = [];
+    if (wrapperChanged)
+        changed.push(wrapperRel);
+    for (const rel of [AGENT_INSTRUCTIONS_REL_PATH, MCP_SETUP_REL_PATH]) {
+        const path = join(codeRepo, rel);
+        const before = (await exists(path)) ? await readFile(path, "utf8") : null;
+        if (before !== rendered[rel]) {
+            await mkdir(dirname(path), { recursive: true });
+            await writeFile(path, rendered[rel], "utf8");
+            changed.push(rel);
+        }
+    }
+    out(info(`Code repo "${repoName}" is specified by ${sdd.sdd_name} (${sdd.repo_kind}, ${sdd.baseline_version}) at ${sddRoot}.`));
+    out(info(changed.length > 0 ? `Wrote ${changed.join(", ")}.` : `Already current: ${AGENT_INSTRUCTIONS_REL_PATH}, ${wrapperRel}, ${MCP_SETUP_REL_PATH}.`));
+    return { exitCode: 0 };
+}
+/** `{{name}}` substitution over an open variable set (the briefing renderer's is closed to four). */
+export function substituteAll(template, vars) {
+    return template.replace(/\{\{\s*([a-z_][a-z0-9_]*)\s*\}\}/g, (full, key) => (key in vars ? vars[key] : full));
+}
+async function exists(path) {
+    try {
+        await access(path);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+const info = (m) => `[INFO] ${m}\n`;
+const warn = (m) => `[WARN] ${m}\n`;
+const fail = (m) => `[FAIL] ${m}\n`;
+//# sourceMappingURL=index.js.map

package/dist/lib/context-pull/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/context-pull/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE7D,OAAO,EACL,2BAA2B,EAC3B,mBAAmB,EACnB,iBAAiB,EACjB,0BAA0B,EAC1B,wBAAwB,EACxB,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAEnF,MAAM,CAAC,MAAM,uBAAuB,GAAG,4CAA4C,CAAC;AACpF,MAAM,CAAC,MAAM,kBAAkB,GAAG,wDAAwD,CAAC;AAC3F,MAAM,CAAC,MAAM,kBAAkB,GAAG,cAAc,CAAC;AAEjD,MAAM,gBAAgB,GAA2C;IAC/D,aAAa,EAAE,2BAA2B;IAC1C,oBAAoB,EAAE,kCAAkC;CACzD,CAAC;AAkBF,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAwB,EACxB,MAA8B,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;IAElE,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5C,GAAG,CAAC,IAAI,CAAC,GAAG,QAAQ,sIAAsI,CAAC,CAAC,CAAC;QAC7J,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzB,CAAC;IAED,MAAM,QAAQ,GAAG,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC;QAC/B,QAAQ;QACR,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,kBAAkB,CAAC,QAAQ,CAAC;QAC7D,QAAQ;KACT,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAClC,GAAG,CAAC,IAAI,CAAC,SAAS,OAAO,CAAC,IAAI,gDAAgD,CAAC,CAAC,CAAC;QACjF,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzB,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACjC,GAAG,CAAC,IAAI,CAAC,4BAA4B,QAAQ,kDAAkD,OAAO,CAAC,QAAQ,CAAC,MAAM,iBAAiB,CAAC,IAAI,CAAC,WAAW,IAAI,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,yFAAyF,CAAC,CAAC,CAAC;QAChS,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzB,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACjC,GAAG,CAAC,IAAI,CAAC,eAAe,QAAQ,kBAAkB,OAAO,CAAC,UAAU,CAAC,MAAM,UAAU,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC,CAAC;QACrJ,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzB,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QACxB,GAAG,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,iDAAiD,QAAQ,wCAAwC,CAAC,CAAC,CAAC;IACnI,CAAC;IAED,0FAA0F;IAC1F,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,WAAW,GAAG,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;IAC/D,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,GAAG,CAAC,IAAI,CAAC,GAAG,OAAO,qEAAqE,CAAC,CAAC,CAAC;QAC3F,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzB,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,wBAAwB,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,uBAAuB,EAAE,WAAW,CAAC,aAAa,EAAE,CAAC,CAAC;IACxH,MAAM,IAAI,GAAqC;QAC7C,SAAS,EAAE,QAAQ;QACnB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,QAAQ,EAAE,OAAO;QACjB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;QACtC,SAAS,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QACjE,4FAA4F;QAC5F,iBAAiB,EAAE,QAAQ,CAAC,OAAO,CAAC;QACpC,2BAA2B,EAAE,GAAG,CAAC,gBAAgB;KAClD,CAAC;IAEF,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,uBAAuB,EAAE,2BAA2B,CAAC,CAAC;IACvF,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IACpG,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IACtD,KAAK,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,eAAe,EAAE,WAAW,CAAC,EAAE,CAAC;QAC3D,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACvB,GAAG,CAAC,IAAI,CAAC,GAAG,OAAO,mBAAmB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,6GAA6G,CAAC,CAAC,CAAC;YACjL,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACzB,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,2BAA2B,EAAE,UAAU,CAAC,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,eAAe,CAAC,EAAE,CAAC,kBAAkB,EAAE,WAAW,CAAC,CAAU,EAAE,CAAC;QAClL,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;QAClE,MAAM,UAAU,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,iEAAiE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC;YAC5H,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACzB,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC;IAC1B,CAAC;IAED,yGAAyG;IACzG,MAAM,UAAU,GAAG,wBAAwB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC/D,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,CAAC,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1F,MAAM,KAAK,GAAG,oBAAoB,CAAC,QAAQ,CAAC,UAAU,CAAE,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IACvH,IAAI,cAAuB,CAAC;IAC5B,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACrC,oGAAoG;QACpG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACzB,GAAG,CAAC,IAAI,CAAC,GAAG,UAAU,sOAAsO,CAAC,CAAC,CAAC;YAC/P,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACzB,CAAC;QACD,MAAM,SAAS,CAAC,WAAW,EAAE,QAAQ,CAAC,UAAU,CAAE,EAAE,MAAM,CAAC,CAAC;QAC5D,cAAc,GAAG,QAAQ,KAAK,QAAQ,CAAC,UAAU,CAAC,CAAC;IACrD,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG,MAAM,oBAAoB,CACtC,WAAW,EACX,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EACvD,EAAE,KAAK,EAAE,mBAAmB,EAAE,GAAG,EAAE,iBAAiB,EAAE,EACtD,IAAI,CAAC,cAAc,EACnB,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CACrE,CAAC;QACF,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC;IACjC,CAAC;IAED,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,cAAc;QAAE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC7C,KAAK,MAAM,GAAG,IAAI,CAAC,2BAA2B,EAAE,kBAAkB,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1E,IAAI,MAAM,KAAK,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,MAAM,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAE,EAAE,MAAM,CAAC,CAAC;YAC9C,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,cAAc,QAAQ,qBAAqB,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,SAAS,KAAK,GAAG,CAAC,gBAAgB,QAAQ,OAAO,GAAG,CAAC,CAAC,CAAC;IAChI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,oBAAoB,2BAA2B,KAAK,UAAU,KAAK,kBAAkB,GAAG,CAAC,CAAC,CAAC;IAC1J,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AACzB,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,IAAsC;IACpF,OAAO,QAAQ,CAAC,OAAO,CAAC,mCAAmC,EAAE,CAAC,IAAI,EAAE,GAAW,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AACzH,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;AAC5C,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;AAC5C,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC"}

package/dist/lib/context-pull/resolve.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Code-repo SDD-source resolution for `sdd-cli context pull` (M-ADR 0128 §1,
+ * M-ADR 0150 §4.4 Phase D).
+ *
+ * A code repository has no `.sdd-repo-kind`, no lock and no bundle, so nothing
+ * in it names the SDD that specifies it. The SDD names the code repository
+ * instead: every repository it owns is a row in its own
+ * `catalogues/repositories.csv`, keyed by id. Resolution is therefore a lookup
+ * in that direction: find the SDD whose catalogue lists this repository.
+ *
+ * Only the SDD's OWN catalogue counts, never `catalogues-aggregated/`: a
+ * platform root's aggregate lists every member's repositories too, so reading
+ * it would make every code repo resolve to two SDDs.
+ */
+export declare const REPOSITORIES_CATALOGUE = "catalogues/repositories.csv";
+/** The code repository's id: `--repo` when given, else its git top-level's directory name. */
+export declare function resolveCodeRepoName(codeRepo: string, override?: string): string;
+export type ResolveOutcome = {
+    readonly kind: "resolved";
+    readonly sddRoot: string;
+    readonly catalogued: boolean;
+} | {
+    readonly kind: "not-found";
+    readonly searched: readonly string[];
+} | {
+    readonly kind: "ambiguous";
+    readonly candidates: readonly string[];
+} | {
+    readonly kind: "not-an-sdd";
+    readonly path: string;
+};
+export interface ResolveSddOptions {
+    readonly repoName: string;
+    /** `--sdd`: an explicit SDD root. Skips discovery. */
+    readonly sddPath?: string | undefined;
+    /** Directories to discover SDDs under. Default: the code repository's parent. */
+    readonly searchRoots: readonly string[];
+    /** The code repository itself, excluded from candidates. */
+    readonly codeRepo: string;
+}
+/** Does this SDD's own repositories catalogue list `repoName`? */
+export declare function catalogueListsRepo(sddRoot: string, repoName: string): Promise<boolean>;
+export declare function resolveSdd(opts: ResolveSddOptions): Promise<ResolveOutcome>;
+/** Default discovery root: the directory holding the code repository. */
+export declare function defaultSearchRoots(codeRepo: string): string[];
+//# sourceMappingURL=resolve.d.ts.map

package/dist/lib/context-pull/resolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../../src/lib/context-pull/resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AASH,eAAO,MAAM,sBAAsB,gCAAgC,CAAC;AAEpE,8FAA8F;AAC9F,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAK/E;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAA;CAAE,GACrF;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GACpE;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GACtE;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3D,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,sDAAsD;IACtD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,iFAAiF;IACjF,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,4DAA4D;IAC5D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,kEAAkE;AAClE,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAS5F;AAED,wBAAsB,UAAU,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,cAAc,CAAC,CAkBjF;AAED,yEAAyE;AACzE,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAE7D"}

package/dist/lib/context-pull/resolve.js

@@ -0,0 +1,70 @@
+/**
+ * Code-repo SDD-source resolution for `sdd-cli context pull` (M-ADR 0128 §1,
+ * M-ADR 0150 §4.4 Phase D).
+ *
+ * A code repository has no `.sdd-repo-kind`, no lock and no bundle, so nothing
+ * in it names the SDD that specifies it. The SDD names the code repository
+ * instead: every repository it owns is a row in its own
+ * `catalogues/repositories.csv`, keyed by id. Resolution is therefore a lookup
+ * in that direction: find the SDD whose catalogue lists this repository.
+ *
+ * Only the SDD's OWN catalogue counts, never `catalogues-aggregated/`: a
+ * platform root's aggregate lists every member's repositories too, so reading
+ * it would make every code repo resolve to two SDDs.
+ */
+import { access } from "node:fs/promises";
+import { spawnSync } from "node:child_process";
+import { basename, dirname, join, resolve } from "node:path";
+import { readCatalogueCsv } from "../catalogue/csv-reader.js";
+import { discoverSddRepos } from "../list/discover.js";
+import { readRepoKind } from "../repo-kind.js";
+export const REPOSITORIES_CATALOGUE = "catalogues/repositories.csv";
+/** The code repository's id: `--repo` when given, else its git top-level's directory name. */
+export function resolveCodeRepoName(codeRepo, override) {
+    if (override !== undefined && override.trim() !== "")
+        return override.trim();
+    const top = spawnSync("git", ["-C", codeRepo, "rev-parse", "--show-toplevel"], { encoding: "utf8" });
+    if (top.status === 0 && top.stdout.trim() !== "")
+        return basename(top.stdout.trim());
+    return basename(resolve(codeRepo));
+}
+/** Does this SDD's own repositories catalogue list `repoName`? */
+export async function catalogueListsRepo(sddRoot, repoName) {
+    const path = join(sddRoot, REPOSITORIES_CATALOGUE);
+    try {
+        await access(path);
+    }
+    catch {
+        return false;
+    }
+    const { rows } = await readCatalogueCsv(path);
+    return rows.some((r) => r["id"] === repoName);
+}
+export async function resolveSdd(opts) {
+    if (opts.sddPath !== undefined) {
+        const root = resolve(opts.sddPath);
+        if ((await readRepoKind(root)) === null)
+            return { kind: "not-an-sdd", path: root };
+        // An explicit --sdd is the caller's assertion, so an uncatalogued repository is reported
+        // (the caller may be wiring a repository the SDD has not catalogued yet), not refused.
+        return { kind: "resolved", sddRoot: root, catalogued: await catalogueListsRepo(root, opts.repoName) };
+    }
+    const self = resolve(opts.codeRepo);
+    const found = await discoverSddRepos(opts.searchRoots);
+    const searched = found.map((r) => r.path).filter((p) => resolve(p) !== self);
+    const matches = [];
+    for (const p of searched) {
+        if (await catalogueListsRepo(p, opts.repoName))
+            matches.push(p);
+    }
+    if (matches.length === 1)
+        return { kind: "resolved", sddRoot: matches[0], catalogued: true };
+    if (matches.length === 0)
+        return { kind: "not-found", searched };
+    return { kind: "ambiguous", candidates: matches };
+}
+/** Default discovery root: the directory holding the code repository. */
+export function defaultSearchRoots(codeRepo) {
+    return [dirname(resolve(codeRepo))];
+}
+//# sourceMappingURL=resolve.js.map

package/dist/lib/context-pull/resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../../src/lib/context-pull/resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,CAAC,MAAM,sBAAsB,GAAG,6BAA6B,CAAC;AAEpE,8FAA8F;AAC9F,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,QAAiB;IACrE,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC7E,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iBAAiB,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACrG,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACrF,OAAO,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;AACrC,CAAC;AAkBD,kEAAkE;AAClE,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAe,EAAE,QAAgB;IACxE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;IACnD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC9C,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAuB;IACtD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACnF,yFAAyF;QACzF,uFAAuF;QACvF,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;IACxG,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,MAAM,kBAAkB,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC9F,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;IACjE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AACpD,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,kBAAkB,CAAC,QAAgB;IACjD,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACtC,CAAC"}

package/dist/lib/init/app.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../../src/lib/init/app.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACnD,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,MAAM,CAkBT;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE;IAClD,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;CACf,GAAG,MAAM,CA8ET;AAED,wBAAgB,uBAAuB,IAAI,MAAM,CAGhD;AAED,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC;IAAE,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAoCrC"}
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../../src/lib/init/app.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACnD,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,MAAM,CAkBT;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE;IAClD,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;CACf,GAAG,MAAM,CA8ET;AAED,wBAAgB,uBAAuB,IAAI,MAAM,CAGhD;AAED,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC;IAAE,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAsCrC"}

package/dist/lib/init/app.js

@@ -2,6 +2,7 @@ import { mkdir, writeFile } from "node:fs/promises";
 import { dirname, join } from "node:path";
 import { buildMethodManagedServers, upsertMethodManagedServers, } from "../mcp-seed/index.js";
 import { renderMethodValidationWorkflow, WORKFLOW_REL_PATH } from "./ci-workflow.js";
+import { writeMethodValidationModule } from "../ci-binding/index.js";
 export function renderAppPlatformDependencies(input) {
     return ([
         "# app-platform-dependencies.yaml",
@@ -116,6 +117,8 @@ export async function scaffoldAppProfile(input) {
     filesWritten.push(".claude/settings.json");
     await writeFileAt(join(input.targetRepo, WORKFLOW_REL_PATH), renderMethodValidationWorkflow("application"));
     filesWritten.push(WORKFLOW_REL_PATH);
+    // The module the workflow calls (M-ADR 0219).
+    filesWritten.push(...(await writeMethodValidationModule(input.targetRepo)));
     return { filesWritten };
 }
 async function writeFileAt(path, content) {

package/dist/lib/init/app.js.map

@@ -1 +1 @@
-{"version":3,"file":"app.js","sourceRoot":"","sources":["../../../src/lib/init/app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EACL,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,8BAA8B,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAUrF,MAAM,UAAU,6BAA6B,CAAC,KAG7C;IACC,OAAO,CACL;QACE,kCAAkC;QAClC,GAAG;QACH,mFAAmF;QACnF,sDAAsD;QACtD,gEAAgE;QAChE,2EAA2E;QAC3E,EAAE;QACF,YAAY,KAAK,CAAC,KAAK,GAAG;QAC1B,iBAAiB,KAAK,CAAC,UAAU,GAAG;QACpC,EAAE;QACF,wBAAwB;QACxB,qDAAqD;QACrD,MAAM;KACP,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CACpB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAI5C;IACC,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzC,OAAO,CACL;QACE,2BAA2B,UAAU,EAAE;QACvC,EAAE;QACF,eAAe,KAAK,CAAC,KAAK,EAAE;QAC5B,gBAAgB;QAChB,qBAAqB,KAAK,CAAC,KAAK,EAAE;QAClC,+FAA+F;QAC/F,EAAE;QACF,KAAK;QACL,EAAE;QACF,gBAAgB;QAChB,EAAE;QACF,KAAK,CAAC,WAAW;QACjB,EAAE;QACF,KAAK;QACL,EAAE;QACF,kCAAkC;QAClC,EAAE;QACF,uFAAuF;QACvF,2DAA2D;QAC3D,EAAE;QACF,2EAA2E;QAC3E,mBAAmB;QACnB,mCAAmC;QACnC,EAAE;QACF,4BAA4B;QAC5B,mGAAmG;QACnG,qFAAqF;QACrF,EAAE;QACF,KAAK;QACL,EAAE;QACF,0BAA0B;QAC1B,EAAE;QACF,+CAA+C;QAC/C,EAAE;QACF,KAAK;QACL,EAAE;QACF,4BAA4B;QAC5B,EAAE;QACF,sFAAsF;QACtF,EAAE;QACF,KAAK;QACL,EAAE;QACF,iCAAiC;QACjC,EAAE;QACF,kDAAkD;QAClD,eAAe;QACf,qBAAqB;QACrB,EAAE;QACF,KAAK;QACL,EAAE;QACF,2BAA2B;QAC3B,EAAE;QACF,8BAA8B;QAC9B,iCAAiC;QACjC,mCAAmC;QACnC,wBAAwB;QACxB,EAAE;QACF,KAAK;QACL,EAAE;QACF,mBAAmB;QACnB,EAAE;QACF,kHAAkH;QAClH,EAAE;QACF,KAAK;QACL,EAAE;QACF,kBAAkB;QAClB,EAAE;QACF,+EAA+E;QAC/E,+EAA+E;QAC/E,gFAAgF;QAChF,uGAAuG;QACvG,wGAAwG;KACzG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CACpB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB;IACrC,MAAM,MAAM,GAAG,0BAA0B,CAAC,EAAE,EAAE,yBAAyB,EAAE,CAAC,CAAC;IAC3E,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;AACzD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAA4B;IAE5B,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,SAAS,KAAK,CAAC,KAAK,EAAE,CAAC;IAC9D,MAAM,WAAW,GACf,KAAK,CAAC,WAAW;QACjB,8EAA8E,CAAC;IACjF,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEnE,MAAM,YAAY,GAAa,EAAE,CAAC;IAElC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,gCAAgC,CAAC,CAAC;IAC1E,MAAM,WAAW,CACf,QAAQ,EACR,6BAA6B,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAClE,CAAC;IACF,YAAY,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IAEpD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,8BAA8B,CAAC,CAAC;IACtE,MAAM,WAAW,CACf,MAAM,EACN,4BAA4B,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CACzE,CAAC;IACF,YAAY,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAElD,MAAM,WAAW,CACf,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,uBAAuB,CAAC,EAC/C,uBAAuB,EAAE,CAC1B,CAAC;IACF,YAAY,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAE3C,MAAM,WAAW,CACf,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,iBAAiB,CAAC,EACzC,8BAA8B,CAAC,aAAa,CAAC,CAC9C,CAAC;IACF,YAAY,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAErC,OAAO,EAAE,YAAY,EAAE,CAAC;AAC1B,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,OAAe;IACtD,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC7B,OAAO,KAAK;SACT,KAAK,CAAC,GAAG,CAAC;SACV,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;SACjC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SACrD,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC"}
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../../../src/lib/init/app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EACL,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,8BAA8B,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrF,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AAUrE,MAAM,UAAU,6BAA6B,CAAC,KAG7C;IACC,OAAO,CACL;QACE,kCAAkC;QAClC,GAAG;QACH,mFAAmF;QACnF,sDAAsD;QACtD,gEAAgE;QAChE,2EAA2E;QAC3E,EAAE;QACF,YAAY,KAAK,CAAC,KAAK,GAAG;QAC1B,iBAAiB,KAAK,CAAC,UAAU,GAAG;QACpC,EAAE;QACF,wBAAwB;QACxB,qDAAqD;QACrD,MAAM;KACP,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CACpB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAI5C;IACC,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzC,OAAO,CACL;QACE,2BAA2B,UAAU,EAAE;QACvC,EAAE;QACF,eAAe,KAAK,CAAC,KAAK,EAAE;QAC5B,gBAAgB;QAChB,qBAAqB,KAAK,CAAC,KAAK,EAAE;QAClC,+FAA+F;QAC/F,EAAE;QACF,KAAK;QACL,EAAE;QACF,gBAAgB;QAChB,EAAE;QACF,KAAK,CAAC,WAAW;QACjB,EAAE;QACF,KAAK;QACL,EAAE;QACF,kCAAkC;QAClC,EAAE;QACF,uFAAuF;QACvF,2DAA2D;QAC3D,EAAE;QACF,2EAA2E;QAC3E,mBAAmB;QACnB,mCAAmC;QACnC,EAAE;QACF,4BAA4B;QAC5B,mGAAmG;QACnG,qFAAqF;QACrF,EAAE;QACF,KAAK;QACL,EAAE;QACF,0BAA0B;QAC1B,EAAE;QACF,+CAA+C;QAC/C,EAAE;QACF,KAAK;QACL,EAAE;QACF,4BAA4B;QAC5B,EAAE;QACF,sFAAsF;QACtF,EAAE;QACF,KAAK;QACL,EAAE;QACF,iCAAiC;QACjC,EAAE;QACF,kDAAkD;QAClD,eAAe;QACf,qBAAqB;QACrB,EAAE;QACF,KAAK;QACL,EAAE;QACF,2BAA2B;QAC3B,EAAE;QACF,8BAA8B;QAC9B,iCAAiC;QACjC,mCAAmC;QACnC,wBAAwB;QACxB,EAAE;QACF,KAAK;QACL,EAAE;QACF,mBAAmB;QACnB,EAAE;QACF,kHAAkH;QAClH,EAAE;QACF,KAAK;QACL,EAAE;QACF,kBAAkB;QAClB,EAAE;QACF,+EAA+E;QAC/E,+EAA+E;QAC/E,gFAAgF;QAChF,uGAAuG;QACvG,wGAAwG;KACzG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CACpB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB;IACrC,MAAM,MAAM,GAAG,0BAA0B,CAAC,EAAE,EAAE,yBAAyB,EAAE,CAAC,CAAC;IAC3E,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;AACzD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAA4B;IAE5B,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,SAAS,KAAK,CAAC,KAAK,EAAE,CAAC;IAC9D,MAAM,WAAW,GACf,KAAK,CAAC,WAAW;QACjB,8EAA8E,CAAC;IACjF,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEnE,MAAM,YAAY,GAAa,EAAE,CAAC;IAElC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,gCAAgC,CAAC,CAAC;IAC1E,MAAM,WAAW,CACf,QAAQ,EACR,6BAA6B,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAClE,CAAC;IACF,YAAY,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IAEpD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,8BAA8B,CAAC,CAAC;IACtE,MAAM,WAAW,CACf,MAAM,EACN,4BAA4B,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CACzE,CAAC;IACF,YAAY,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAElD,MAAM,WAAW,CACf,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,uBAAuB,CAAC,EAC/C,uBAAuB,EAAE,CAC1B,CAAC;IACF,YAAY,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAE3C,MAAM,WAAW,CACf,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,iBAAiB,CAAC,EACzC,8BAA8B,CAAC,aAAa,CAAC,CAC9C,CAAC;IACF,YAAY,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACrC,8CAA8C;IAC9C,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,2BAA2B,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAE5E,OAAO,EAAE,YAAY,EAAE,CAAC;AAC1B,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,OAAe;IACtD,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC7B,OAAO,KAAK;SACT,KAAK,CAAC,GAAG,CAAC;SACV,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;SACjC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SACrD,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC"}

package/dist/lib/init/ci-workflow.d.ts

@@ -1,10 +1,8 @@
 /**
- * Renders .github/workflows/method-validation.yml per ADR 0129.
- *
- * The template in this file is the source of truth for what
- * `sdd-cli init` / `sdd-cli sync` writes. It mirrors the
- * human-readable `orchestration/templates/ci/method-validation.yml.hbs`
- * in sdd-method; the two must stay in lockstep.
+ * Renders .github/workflows/method-validation.yml: the GitHub Actions host wrapper (M-ADR 0219
+ * §4.4), which installs the pinned Dagger CLI and calls the Method Validation module. The job
+ * itself is defined once, in ../ci-binding/module.ts; the other hosts' wrappers are in
+ * ../ci-binding/index.ts.
  *
  * Output wraps a `# method-managed: begin` / `# method-managed: end`
  * block-marker pair so the sync path can preserve adopter-authored
@@ -18,12 +16,12 @@ export declare const BLOCK_END = "# method-managed: end";
  * Full file content (block + adopter-extension footer). Used by
  * `sdd-cli init` to write a fresh workflow.
  */
-export declare function renderMethodValidationWorkflow(profile: Profile): string;
+export declare function renderMethodValidationWorkflow(profile: Profile, runner?: readonly string[]): string;
 /**
  * Method-managed slice only (begin marker through end marker). Used
  * by `sdd-cli sync` as the `incomingBlock` argument to
  * `writeMarkedBlockFile` so adopter content outside the markers is
  * preserved verbatim.
  */
-export declare function renderMethodManagedWorkflowBlock(profile: Profile): string;
+export declare function renderMethodManagedWorkflowBlock(profile: Profile, runner?: readonly string[]): string;
 //# sourceMappingURL=ci-workflow.d.ts.map

package/dist/lib/init/ci-workflow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ci-workflow.d.ts","sourceRoot":"","sources":["../../../src/lib/init/ci-workflow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAsB/C,eAAO,MAAM,iBAAiB,4CAA4C,CAAC;AAC3E,eAAO,MAAM,WAAW,4BAA4B,CAAC;AACrD,eAAO,MAAM,SAAS,0BAA0B,CAAC;AAEjD;;;GAGG;AACH,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAGvE;AAED;;;;;GAKG;AACH,wBAAgB,gCAAgC,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAEzE"}
+{"version":3,"file":"ci-workflow.d.ts","sourceRoot":"","sources":["../../../src/lib/init/ci-workflow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAI/C,eAAO,MAAM,iBAAiB,4CAA4C,CAAC;AAC3E,eAAO,MAAM,WAAW,4BAA4B,CAAC;AACrD,eAAO,MAAM,SAAS,0BAA0B,CAAC;AAEjD;;;GAGG;AACH,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAGnG;AAED;;;;;GAKG;AACH,wBAAgB,gCAAgC,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAErG"}