@sdd-method/sdd-cli 1.43.0 → 1.44.0

package/dist/lib/ci-binding/index.js

@@ -14,7 +14,7 @@ import { createHash } from "node:crypto";
 import { dirname, join } from "node:path";
 import { BLOCK_BEGIN, BLOCK_END, WORKFLOW_REL_PATH, renderMethodManagedWorkflowBlock, renderMethodValidationWorkflow, } from "../init/ci-workflow.js";
 import { detectBlockDrift, writeMarkedBlockFile } from "../sync/yaml-block-merge.js";
-import { DAGGER_VERSION, MODULE_CALL, MODULE_DIR, moduleSha256, renderModuleFiles } from "./module.js";
+import { DAGGER_VERSION, MODULE_CALL, MODULE_DIR, REBUILD_FLAG, REBUILD_SCRIPT, moduleSha256, renderModuleFiles } from "./module.js";
 export const CI_BINDINGS = ["github", "gitlab", "jenkins"];
 /** M-ADR 0219 §8.2 (ruled 2026-10-16): what every SDD has before it chooses. */
 export const DEFAULT_CI_BINDING = "github";
@@ -34,6 +34,18 @@ export function isCiBinding(s) {
 const HASH = { begin: BLOCK_BEGIN, end: BLOCK_END };
 // Groovy has no '#' comments.
 const SLASH = { begin: "// method-managed: begin", end: "// method-managed: end" };
+// How each host's adopter switches the catalogue rebuild on (M-ADR 0220 §4.4): the variable the method names.
+const REBUILD_SETUP = {
+    "#": [
+        "set the masked (not protected) CI variable",
+        "SDD_CATALOGUE_PUSH_TOKEN to a project or group access token with write_repository.",
+    ],
+    "//": [
+        "set the job's environment variable",
+        "SDD_CATALOGUE_PUSH_CREDENTIAL to the ID of a username-and-password credential (a token",
+        "with write) for the repository's https remote.",
+    ],
+};
 function header(comment, profile) {
     return [
         `${comment} Method Validation per M-ADR 0129, run by the method's Dagger module (M-ADR 0219).`,
@@ -47,6 +59,11 @@ function header(comment, profile) {
         comment,
         `${comment} Run it locally:`,
         `${comment}   ${MODULE_CALL}`,
+        comment,
+        `${comment} Catalogue rebuild (M-ADR 0220 §4.4), off until you configure it:`,
+        ...REBUILD_SETUP[comment].map((l) => `${comment} ${l}`),
+        `${comment} The job then rebuilds the catalogues and pushes them to the branch it is`,
+        `${comment} building (never a fork's), and the freshness step gates.`,
     ];
 }
 // GitLab: a Docker-in-Docker service, the shape GitLab documents for Dagger. The runner must allow
@@ -71,10 +88,16 @@ function gitlabBlock(profile, runner) {
         '    - if: $CI_PIPELINE_SOURCE == "merge_request_event"',
         "    - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH",
         "  before_script:",
-        "    - apk add --no-cache curl",
+        "    - apk add --no-cache curl git",
         `    - curl -fsSL https://dl.dagger.io/dagger/install.sh | BIN_DIR=/usr/local/bin DAGGER_VERSION=${DAGGER_VERSION} sh`,
         "  script:",
-        `    - ${MODULE_CALL}`,
+        "    - |",
+        '      if [ -n "${SDD_CATALOGUE_PUSH_TOKEN:-}" ] && [ "${CI_MERGE_REQUEST_SOURCE_PROJECT_ID:-$CI_PROJECT_ID}" = "$CI_PROJECT_ID" ]; then',
+        '        SDD_REBUILD_BRANCH="${CI_MERGE_REQUEST_SOURCE_BRANCH_NAME:-$CI_COMMIT_BRANCH}" \\',
+        '        SDD_REBUILD_PUSH_URL="${CI_SERVER_PROTOCOL}://oauth2:${SDD_CATALOGUE_PUSH_TOKEN}@${CI_SERVER_URL#*://}/${CI_PROJECT_PATH}.git" \\',
+        `        sh ${REBUILD_SCRIPT}`,
+        "      fi",
+        `    - ${MODULE_CALL} ${REBUILD_FLAG}`,
         HASH.end,
     ].join("\n");
 }
@@ -92,7 +115,18 @@ function jenkinsBlock(profile, runner) {
         "    stage('Method Validation') {",
         "      steps {",
         `        sh 'curl -fsSL https://dl.dagger.io/dagger/install.sh | BIN_DIR="$WORKSPACE@tmp/dagger" DAGGER_VERSION=${DAGGER_VERSION} sh'`,
-        `        sh 'PATH="$WORKSPACE@tmp/dagger:$PATH" ${MODULE_CALL}'`,
+        "        script {",
+        "          if (env.SDD_CATALOGUE_PUSH_CREDENTIAL && !env.CHANGE_FORK) {",
+        "            withCredentials([usernamePassword(credentialsId: env.SDD_CATALOGUE_PUSH_CREDENTIAL, usernameVariable: 'SDD_PUSH_USER', passwordVariable: 'SDD_PUSH_TOKEN')]) {",
+        "              sh '''",
+        '                export SDD_REBUILD_BRANCH="${CHANGE_BRANCH:-${BRANCH_NAME:-${GIT_BRANCH#origin/}}}"',
+        '                export SDD_REBUILD_PUSH_URL="$(git config --get remote.origin.url | sed "s#^https://#https://${SDD_PUSH_USER}:${SDD_PUSH_TOKEN}@#")"',
+        `                PATH="$WORKSPACE@tmp/dagger:$PATH" sh ${REBUILD_SCRIPT}`,
+        "              '''",
+        "            }",
+        "          }",
+        "        }",
+        `        sh 'PATH="$WORKSPACE@tmp/dagger:$PATH" ${MODULE_CALL} ${REBUILD_FLAG}'`,
         "      }",
         "    }",
         "  }",
@@ -160,7 +194,12 @@ export async function syncCiBinding(o) {
         onDisk.push([rel, await tryRead(join(o.targetRepo, MODULE_DIR, rel))]);
     const present = onDisk.some(([, c]) => c !== null);
     const matches = rendered.every(([rel, c], i) => onDisk[i][0] === rel && onDisk[i][1] === c);
-    const modulePristine = o.prevLock?.ciModuleSha256 !== undefined && moduleSha256(onDisk) === o.prevLock.ciModuleSha256;
+    // Pristine when the files on disk hash to the lock's digest. The render may list a file the last sync
+    // never wrote (the generator gained one): it is absent, not edited, so the digest over the files present
+    // decides. A file the adopter deleted still changes that digest, so it is still drift.
+    const lockSha = o.prevLock?.ciModuleSha256;
+    const modulePristine = lockSha !== undefined &&
+        (moduleSha256(onDisk) === lockSha || moduleSha256(onDisk.filter(([, c]) => c !== null)) === lockSha);
     if (present && !matches && modulePristine) {
         log.push(`${MODULE_DIR}/: unmodified since the last sync (digest matches the lock); re-rendering it for this sdd-cli.`);
     }

package/dist/lib/ci-binding/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/ci-binding/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAG1C,OAAO,EACL,WAAW,EACX,SAAS,EACT,iBAAiB,EACjB,gCAAgC,EAChC,8BAA8B,GAC/B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAqB,MAAM,6BAA6B,CAAC;AACxG,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEvG,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAU,CAAC;AAEpE,gFAAgF;AAChF,MAAM,CAAC,MAAM,kBAAkB,GAAc,QAAQ,CAAC;AAEtD;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,SAAS,CAAC;AAC3C,MAAM,YAAY,GAAG,8BAA8B,CAAC;AACpD,MAAM,UAAU,aAAa,CAAC,CAAS;IACrC,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACjD,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,CAAS;IACnC,OAAQ,WAAiC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC;AAYD,MAAM,IAAI,GAAiB,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;AAClE,8BAA8B;AAC9B,MAAM,KAAK,GAAiB,EAAE,KAAK,EAAE,0BAA0B,EAAE,GAAG,EAAE,wBAAwB,EAAE,CAAC;AAEjG,SAAS,MAAM,CAAC,OAAe,EAAE,OAAgB;IAC/C,OAAO;QACL,GAAG,OAAO,oFAAoF;QAC9F,GAAG,OAAO,mEAAmE;QAC7E,GAAG,OAAO,4EAA4E;QACtF,GAAG,OAAO,aAAa,OAAO,EAAE;QAChC,OAAO;QACP,GAAG,OAAO,gCAAgC,UAAU,iCAAiC;QACrF,GAAG,OAAO,qEAAqE;QAC/E,GAAG,OAAO,iEAAiE;QAC3E,OAAO;QACP,GAAG,OAAO,kBAAkB;QAC5B,GAAG,OAAO,MAAM,WAAW,EAAE;KAC9B,CAAC;AACJ,CAAC;AAED,mGAAmG;AACnG,iGAAiG;AACjG,4FAA4F;AAC5F,SAAS,WAAW,CAAC,OAAgB,EAAE,MAA0B;IAC/D,OAAO;QACL,IAAI,CAAC,KAAK;QACV,GAAG,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC;QACvB,EAAE;QACF,oBAAoB;QACpB,wBAAwB;QACxB,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,aAAa;QACb,0BAA0B;QAC1B,cAAc;QACd,oCAAoC;QACpC,kCAAkC;QAClC,4BAA4B;QAC5B,uCAAuC;QACvC,UAAU;QACV,wDAAwD;QACxD,mDAAmD;QACnD,kBAAkB;QAClB,+BAA+B;QAC/B,mGAAmG,cAAc,KAAK;QACtH,WAAW;QACX,SAAS,WAAW,EAAE;QACtB,IAAI,CAAC,GAAG;KACT,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,0FAA0F;AAC1F,mGAAmG;AACnG,gFAAgF;AAChF,SAAS,YAAY,CAAC,OAAgB,EAAE,MAA0B;IAChE,OAAO;QACL,KAAK,CAAC,KAAK;QACX,GAAG,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC;QACxB,EAAE;QACF,YAAY;QACZ,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,oBAAoB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa;QACxG,YAAY;QACZ,kCAAkC;QAClC,eAAe;QACf,kHAAkH,cAAc,MAAM;QACtI,kDAAkD,WAAW,GAAG;QAChE,SAAS;QACT,OAAO;QACP,KAAK;QACL,GAAG;QACH,KAAK,CAAC,GAAG;KACV,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAmC;IAC3D,MAAM,EAAE;QACN,OAAO,EAAE,iBAAiB;QAC1B,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,gCAAgC;QACvC,IAAI,EAAE,8BAA8B;KACrC;IACD,MAAM,EAAE;QACN,OAAO,EAAE,gBAAgB;QACzB,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,WAAW;QAClB,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,6EAA6E;KAClH;IACD,OAAO,EAAE;QACP,OAAO,EAAE,wCAAwC;QACjD,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,YAAY;QACnB,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI;KAC1C;CACF,CAAC;AAEF,2GAA2G;AAC3G,MAAM,UAAU,WAAW,CAAC,IAAmB,EAAE,OAAqB;IACpE,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACvD,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1F,CAAC;AAyBD,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,CAAuB;IACzD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,WAAW,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,IAAI,kBAAkB,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;IAEhF,uBAAuB;IACvB,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,QAAQ,KAAK,IAAI,IAAI,gBAAgB,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACrF,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,MAAM,QAAQ,GAAG,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,SAAS,IAAI,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;IACjH,MAAM,UAAU,GACd,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1H,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;QACxB,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,oHAAoH,CAAC,CAAC;IAChJ,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;QAC1C,QAAQ,CAAC,IAAI,CACX,GAAG,IAAI,CAAC,OAAO,8RAA8R,CAC9S,CAAC;IACJ,CAAC;SAAM,IAAI,UAAU,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC;QAC3C,QAAQ,CAAC,IAAI,CACX,GAAG,IAAI,CAAC,OAAO,oIAAoI,CACpJ,CAAC;IACJ,CAAC;IAED,6DAA6D;IAC7D,MAAM,QAAQ,GAAG,iBAAiB,EAAE,CAAC;IACrC,MAAM,MAAM,GAAmC,EAAE,CAAC;IAClD,KAAK,MAAM,CAAC,GAAG,CAAC,IAAI,QAAQ;QAAE,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACrG,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9F,MAAM,cAAc,GAAG,CAAC,CAAC,QAAQ,EAAE,cAAc,KAAK,SAAS,IAAI,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;IACtH,IAAI,OAAO,IAAI,CAAC,OAAO,IAAI,cAAc,EAAE,CAAC;QAC1C,GAAG,CAAC,IAAI,CAAC,GAAG,UAAU,gGAAgG,CAAC,CAAC;IAC1H,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,OAAO,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;QAC5D,QAAQ,CAAC,IAAI,CACX,GAAG,UAAU,gOAAgO,CAC9O,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,CAAC,SAAS,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;IAC9E,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,UAAU,EAAE,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC;IACnJ,IAAI,OAAO,CAAC,OAAO;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;IAC/F,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,QAAQ,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;YAChD,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/C,MAAM,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACxC,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,IAAI,UAAU,+CAA+C,CAAC,CAAC;IAC5G,CAAC;IAED,iGAAiG;IACjG,mGAAmG;IACnG,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC;QAClC,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,KAAK,SAAS,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;QACjG,IAAI,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACnE,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,4DAA4D,IAAI,CAAC,OAAO,QAAQ,CAAC,CAAC;QAChJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,QAAQ;QACR,GAAG;QACH,UAAU,EAAE,WAAW,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC;QAChE,SAAS,EAAE,YAAY,CAAC,QAAQ,CAAC;KAClC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,IAAY;IACjC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,UAAkB;IAClE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,iBAAiB,EAAE,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;QAC9C,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,MAAM,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC,GAAG,UAAU,IAAI,GAAG,EAAE,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/ci-binding/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAG1C,OAAO,EACL,WAAW,EACX,SAAS,EACT,iBAAiB,EACjB,gCAAgC,EAChC,8BAA8B,GAC/B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAqB,MAAM,6BAA6B,CAAC;AACxG,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAErI,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAU,CAAC;AAEpE,gFAAgF;AAChF,MAAM,CAAC,MAAM,kBAAkB,GAAc,QAAQ,CAAC;AAEtD;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,SAAS,CAAC;AAC3C,MAAM,YAAY,GAAG,8BAA8B,CAAC;AACpD,MAAM,UAAU,aAAa,CAAC,CAAS;IACrC,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACjD,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,CAAS;IACnC,OAAQ,WAAiC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC;AAYD,MAAM,IAAI,GAAiB,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;AAClE,8BAA8B;AAC9B,MAAM,KAAK,GAAiB,EAAE,KAAK,EAAE,0BAA0B,EAAE,GAAG,EAAE,wBAAwB,EAAE,CAAC;AAEjG,8GAA8G;AAC9G,MAAM,aAAa,GAAiC;IAClD,GAAG,EAAE;QACH,4CAA4C;QAC5C,oFAAoF;KACrF;IACD,IAAI,EAAE;QACJ,oCAAoC;QACpC,wFAAwF;QACxF,gDAAgD;KACjD;CACF,CAAC;AAEF,SAAS,MAAM,CAAC,OAAe,EAAE,OAAgB;IAC/C,OAAO;QACL,GAAG,OAAO,oFAAoF;QAC9F,GAAG,OAAO,mEAAmE;QAC7E,GAAG,OAAO,4EAA4E;QACtF,GAAG,OAAO,aAAa,OAAO,EAAE;QAChC,OAAO;QACP,GAAG,OAAO,gCAAgC,UAAU,iCAAiC;QACrF,GAAG,OAAO,qEAAqE;QAC/E,GAAG,OAAO,iEAAiE;QAC3E,OAAO;QACP,GAAG,OAAO,kBAAkB;QAC5B,GAAG,OAAO,MAAM,WAAW,EAAE;QAC7B,OAAO;QACP,GAAG,OAAO,mEAAmE;QAC7E,GAAG,aAAa,CAAC,OAAqB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,OAAO,IAAI,CAAC,EAAE,CAAC;QACrE,GAAG,OAAO,2EAA2E;QACrF,GAAG,OAAO,2DAA2D;KACtE,CAAC;AACJ,CAAC;AAED,mGAAmG;AACnG,iGAAiG;AACjG,4FAA4F;AAC5F,SAAS,WAAW,CAAC,OAAgB,EAAE,MAA0B;IAC/D,OAAO;QACL,IAAI,CAAC,KAAK;QACV,GAAG,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC;QACvB,EAAE;QACF,oBAAoB;QACpB,wBAAwB;QACxB,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,aAAa;QACb,0BAA0B;QAC1B,cAAc;QACd,oCAAoC;QACpC,kCAAkC;QAClC,4BAA4B;QAC5B,uCAAuC;QACvC,UAAU;QACV,wDAAwD;QACxD,mDAAmD;QACnD,kBAAkB;QAClB,mCAAmC;QACnC,mGAAmG,cAAc,KAAK;QACtH,WAAW;QACX,SAAS;QACT,yIAAyI;QACzI,2FAA2F;QAC3F,2IAA2I;QAC3I,cAAc,cAAc,EAAE;QAC9B,UAAU;QACV,SAAS,WAAW,IAAI,YAAY,EAAE;QACtC,IAAI,CAAC,GAAG;KACT,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,0FAA0F;AAC1F,mGAAmG;AACnG,gFAAgF;AAChF,SAAS,YAAY,CAAC,OAAgB,EAAE,MAA0B;IAChE,OAAO;QACL,KAAK,CAAC,KAAK;QACX,GAAG,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC;QACxB,EAAE;QACF,YAAY;QACZ,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,oBAAoB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa;QACxG,YAAY;QACZ,kCAAkC;QAClC,eAAe;QACf,kHAAkH,cAAc,MAAM;QACtI,kBAAkB;QAClB,wEAAwE;QACxE,4KAA4K;QAC5K,sBAAsB;QACtB,qGAAqG;QACrG,sJAAsJ;QACtJ,yDAAyD,cAAc,EAAE;QACzE,mBAAmB;QACnB,eAAe;QACf,aAAa;QACb,WAAW;QACX,kDAAkD,WAAW,IAAI,YAAY,GAAG;QAChF,SAAS;QACT,OAAO;QACP,KAAK;QACL,GAAG;QACH,KAAK,CAAC,GAAG;KACV,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAmC;IAC3D,MAAM,EAAE;QACN,OAAO,EAAE,iBAAiB;QAC1B,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,gCAAgC;QACvC,IAAI,EAAE,8BAA8B;KACrC;IACD,MAAM,EAAE;QACN,OAAO,EAAE,gBAAgB;QACzB,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,WAAW;QAClB,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,6EAA6E;KAClH;IACD,OAAO,EAAE;QACP,OAAO,EAAE,wCAAwC;QACjD,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,YAAY;QACnB,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI;KAC1C;CACF,CAAC;AAEF,2GAA2G;AAC3G,MAAM,UAAU,WAAW,CAAC,IAAmB,EAAE,OAAqB;IACpE,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACvD,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1F,CAAC;AAyBD,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,CAAuB;IACzD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,WAAW,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,IAAI,kBAAkB,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;IAEhF,uBAAuB;IACvB,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,QAAQ,KAAK,IAAI,IAAI,gBAAgB,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACrF,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,MAAM,QAAQ,GAAG,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,SAAS,IAAI,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;IACjH,MAAM,UAAU,GACd,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1H,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;QACxB,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,oHAAoH,CAAC,CAAC;IAChJ,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;QAC1C,QAAQ,CAAC,IAAI,CACX,GAAG,IAAI,CAAC,OAAO,8RAA8R,CAC9S,CAAC;IACJ,CAAC;SAAM,IAAI,UAAU,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC;QAC3C,QAAQ,CAAC,IAAI,CACX,GAAG,IAAI,CAAC,OAAO,oIAAoI,CACpJ,CAAC;IACJ,CAAC;IAED,6DAA6D;IAC7D,MAAM,QAAQ,GAAG,iBAAiB,EAAE,CAAC;IACrC,MAAM,MAAM,GAAmC,EAAE,CAAC;IAClD,KAAK,MAAM,CAAC,GAAG,CAAC,IAAI,QAAQ;QAAE,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACrG,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9F,sGAAsG;IACtG,yGAAyG;IACzG,uFAAuF;IACvF,MAAM,OAAO,GAAG,CAAC,CAAC,QAAQ,EAAE,cAAc,CAAC;IAC3C,MAAM,cAAc,GAClB,OAAO,KAAK,SAAS;QACrB,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,OAAO,IAAI,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC;IACvG,IAAI,OAAO,IAAI,CAAC,OAAO,IAAI,cAAc,EAAE,CAAC;QAC1C,GAAG,CAAC,IAAI,CAAC,GAAG,UAAU,gGAAgG,CAAC,CAAC;IAC1H,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,OAAO,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;QAC5D,QAAQ,CAAC,IAAI,CACX,GAAG,UAAU,gOAAgO,CAC9O,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,CAAC,SAAS,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;IAC9E,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,UAAU,EAAE,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC;IACnJ,IAAI,OAAO,CAAC,OAAO;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;IAC/F,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,QAAQ,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;YAChD,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/C,MAAM,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACxC,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,IAAI,UAAU,+CAA+C,CAAC,CAAC;IAC5G,CAAC;IAED,iGAAiG;IACjG,mGAAmG;IACnG,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC;QAClC,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,KAAK,SAAS,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;QACjG,IAAI,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACnE,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,4DAA4D,IAAI,CAAC,OAAO,QAAQ,CAAC,CAAC;QAChJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,QAAQ;QACR,GAAG;QACH,UAAU,EAAE,WAAW,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC;QAChE,SAAS,EAAE,YAAY,CAAC,QAAQ,CAAC;KAClC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,IAAY;IACjC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,UAAkB;IAClE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,iBAAiB,EAAE,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;QAC9C,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,MAAM,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC,GAAG,UAAU,IAAI,GAAG,EAAE,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/lib/ci-binding/module.d.ts

@@ -20,6 +20,16 @@ export declare const MODULE_DIR = ".dagger/method-validation";
 export declare const DAGGER_VERSION = "0.21.10";
 /** The command every host wrapper runs. */
 export declare const MODULE_CALL = "dagger call -m .dagger/method-validation method-validation --source .";
+/** The pipeline catalogue rebuild (M-ADR 0220 §4.4): a method-managed script in the module, run by every host wrapper. */
+export declare const REBUILD_SCRIPT = ".dagger/method-validation/catalogue-rebuild.sh";
+/**
+ * Left in the git directory by REBUILD_SCRIPT when the rebuild ran, whether or not it pushed. Every
+ * wrapper turns it into the module's --catalogue-rebuild, so the freshness step gates exactly where
+ * the rebuild ran (sdm-jts.9's ruling) and the wrapper holds no condition of its own.
+ */
+export declare const REBUILD_RAN_MARKER = "sdd-catalogue-rebuild-ran";
+/** What every wrapper appends to MODULE_CALL: --catalogue-rebuild when, and only when, the rebuild ran. */
+export declare const REBUILD_FLAG = "$(test -f \"$(git rev-parse --git-dir)/sdd-catalogue-rebuild-ran\" && echo --catalogue-rebuild)";
 /**
  * The module's files, relative to MODULE_DIR, in a fixed order. Pins default to the versions released
  * with this sdd-cli (M-ADR 0218 §4.6); the parity harness passes candidate versions.

package/dist/lib/ci-binding/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../src/lib/ci-binding/module.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,4EAA4E;AAC5E,eAAO,MAAM,UAAU,8BAA8B,CAAC;AAEtD;;;;GAIG;AACH,eAAO,MAAM,cAAc,YAAY,CAAC;AAExC,2CAA2C;AAC3C,eAAO,MAAM,WAAW,0EAA8D,CAAC;AAmKvF;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,GAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAyE,GAChH,KAAK,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CASzB;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC,GAAG,MAAM,CAM1E"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../src/lib/ci-binding/module.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,4EAA4E;AAC5E,eAAO,MAAM,UAAU,8BAA8B,CAAC;AAEtD;;;;GAIG;AACH,eAAO,MAAM,cAAc,YAAY,CAAC;AAExC,2CAA2C;AAC3C,eAAO,MAAM,WAAW,0EAA8D,CAAC;AAEvF,0HAA0H;AAC1H,eAAO,MAAM,cAAc,mDAAuC,CAAC;AAEnE;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,8BAA8B,CAAC;AAE9D,2GAA2G;AAC3G,eAAO,MAAM,YAAY,oGAA8F,CAAC;AAiOxH;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,GAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAyE,GAChH,KAAK,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAUzB;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC,GAAG,MAAM,CAM1E"}

package/dist/lib/ci-binding/module.js

@@ -22,6 +22,16 @@ export const MODULE_DIR = ".dagger/method-validation";
 export const DAGGER_VERSION = "0.21.10";
 /** The command every host wrapper runs. */
 export const MODULE_CALL = `dagger call -m ${MODULE_DIR} method-validation --source .`;
+/** The pipeline catalogue rebuild (M-ADR 0220 §4.4): a method-managed script in the module, run by every host wrapper. */
+export const REBUILD_SCRIPT = `${MODULE_DIR}/catalogue-rebuild.sh`;
+/**
+ * Left in the git directory by REBUILD_SCRIPT when the rebuild ran, whether or not it pushed. Every
+ * wrapper turns it into the module's --catalogue-rebuild, so the freshness step gates exactly where
+ * the rebuild ran (sdm-jts.9's ruling) and the wrapper holds no condition of its own.
+ */
+export const REBUILD_RAN_MARKER = "sdd-catalogue-rebuild-ran";
+/** What every wrapper appends to MODULE_CALL: --catalogue-rebuild when, and only when, the rebuild ran. */
+export const REBUILD_FLAG = `$(test -f "$(git rev-parse --git-dir)/${REBUILD_RAN_MARKER}" && echo --catalogue-rebuild)`;
 const VERIFY_PIN = "@@VERIFY_CLI_VERSION@@";
 // The module's SDK import, substituted at render: written literally, the persona builds' import-closure
 // scan would read this text as an import of the CLI's own and refuse a dependency it does not declare.
@@ -39,7 +49,8 @@ const INDEX_TS = String.raw `/**
  *
  * The steps are the method's job plan, read at run time from "sdd-verify validate --list". Every
  * step runs even after an earlier one fails, so one red step never hides the verdicts after it. The
- * job fails only when a non-advisory step fails; the catalogue freshness step is advisory.
+ * job fails only when a non-advisory step fails; the catalogue freshness step is advisory unless the
+ * pipeline rebuilt the catalogues on this run (catalogue-rebuild.sh, M-ADR 0220 §4.4).
  */
 import { dag, Container, Directory, File, object, func, ReturnType } from ${DAGGER_SDK}
 
@@ -102,12 +113,14 @@ export class MethodValidation {
     maintainVersion: string = "${MAINTAIN_PIN}",
     verifyTarball?: File,
     maintainTarball?: File,
+    catalogueRebuild: boolean = false,
   ): Promise<string> {
     const base = this.toolchain(verifyVersion, maintainVersion, verifyTarball, maintainTarball)
       .withMountedDirectory("/src", source)
       .withWorkdir("/src")
     const versions = (await base.withExec(["sh", "-c", "sdd-verify --version; sdd-maintain --version"]).stdout()).split("\n")
-    const plan = JSON.parse(await base.withExec(["sdd-verify", "validate", "--list"]).stdout()) as {
+    const listArgs = ["sdd-verify", "validate", "--list"]
+    const plan = JSON.parse(await base.withExec(catalogueRebuild ? [...listArgs, "--catalogue-rebuild"] : listArgs).stdout()) as {
       profile: string
       steps: PlanStep[]
     }
@@ -130,8 +143,66 @@ export class MethodValidation {
     if (failed > 0) throw new Error(report)
     return report
   }
+
+  /**
+   * Rebuild the committed catalogues from the specifications (M-ADR 0220 §4.4) and return the whole
+   * new catalogues directory: every file sdd-maintain catalogue build produces, plus every file
+   * already there except a .csv the build no longer produces, the freshness check's own rule. The
+   * host wrapper's catalogue-rebuild.sh exports it over catalogues/ and pushes only if it changed.
+   */
+  @func()
+  catalogueRebuild(source: Directory, maintainVersion: string = "${MAINTAIN_PIN}", maintainTarball?: File): Directory {
+    return this.toolchain(undefined, maintainVersion, undefined, maintainTarball)
+      .withMountedDirectory("/src", source)
+      .withWorkdir("/src")
+      .withExec(["sdd-maintain", "catalogue", "build", "--sdd-path", ".", "--out", "/rebuilt"])
+      .withExec([
+        "sh",
+        "-c",
+        "mkdir -p /next && if [ -d catalogues ]; then cp -a catalogues/. /next/; fi && " +
+          "for f in /next/*.csv; do [ -e \"$f\" ] || continue; [ -e \"/rebuilt/$(basename \"$f\")\" ] || rm \"$f\"; done && " +
+          "cp -a /rebuilt/. /next/",
+      ])
+      .directory("/next")
+  }
 }
 `;
+// Run by every host wrapper, and only where the adopter has provided the push credential. Plain
+// strings, not a template: the shell's own \${...} must reach the file as written.
+const REBUILD_SH = [
+    "#!/bin/sh",
+    "# Pipeline catalogue rebuild (M-ADR 0220 §4.4). Written by sdd-cli sync and method-managed, like the",
+    "# rest of this module. The host wrapper runs it only where the adopter has provided the push",
+    "# credential, and sets:",
+    "#   SDD_REBUILD_BRANCH    the branch this pipeline builds, which the rebuild is pushed to",
+    "#   SDD_REBUILD_PUSH_URL  the repository's URL, carrying the credential",
+    "#",
+    "# A rebuild that changes nothing pushes nothing, so the push cannot loop: the pipeline it starts",
+    "# rebuilds the same catalogues, finds no change, and runs Method Validation.",
+    "set -eu",
+    ': "${SDD_REBUILD_BRANCH:?the host wrapper sets it}" "${SDD_REBUILD_PUSH_URL:?the host wrapper sets it}"',
+    "",
+    "# A merge the pipeline made (a merged-results or merge-with-target build) is not the branch's head,",
+    "# and pushing it would put that merge on the branch. The branch's own pipeline rebuilds instead.",
+    'if [ "$(git rev-list --parents -n 1 HEAD | wc -w)" -gt 2 ]; then',
+    '  echo "Catalogue rebuild: skipped, HEAD is a merge commit this pipeline made; the branch pipeline rebuilds."',
+    "  exit 0",
+    "fi",
+    "",
+    "dagger call -m " + MODULE_DIR + " catalogue-rebuild --source . export --path catalogues --wipe >/dev/null",
+    'touch "$(git rev-parse --git-dir)/' + REBUILD_RAN_MARKER + '"',
+    "git add -A catalogues",
+    "if git diff --cached --quiet; then",
+    '  echo "Catalogue rebuild: the committed catalogues already match the specifications; nothing to push."',
+    "  exit 0",
+    "fi",
+    "git diff --cached --stat",
+    'git -c user.name="sdd-method catalogue rebuild" -c user.email="catalogue-rebuild@sdd-method.invalid" \\',
+    '  commit -q -m "Rebuild catalogues from the specifications (Method Validation, M-ADR 0220 §4.4)"',
+    'git push -q "$SDD_REBUILD_PUSH_URL" "HEAD:refs/heads/$SDD_REBUILD_BRANCH"',
+    'echo "Catalogue rebuild: pushed $(git rev-parse --short HEAD) to $SDD_REBUILD_BRANCH; Method Validation runs on it there too."',
+    "",
+].join("\n");
 const DAGGER_JSON = `{
   "name": "method-validation",
   "engineVersion": "v${DAGGER_VERSION}",
@@ -183,6 +254,7 @@ const GITIGNORE = `/sdk
 export function renderModuleFiles(pins = { verify: getVerifyCliVersion(), maintain: getMaintainCliVersion() }) {
     return [
         [".gitignore", GITIGNORE],
+        ["catalogue-rebuild.sh", REBUILD_SH],
         ["dagger.json", DAGGER_JSON],
         ["package.json", PACKAGE_JSON],
         ["src/index.ts", INDEX_TS.split(VERIFY_PIN).join(pins.verify).split(MAINTAIN_PIN).join(pins.maintain).split(DAGGER_SDK).join('"@dagger.io' + '/dagger"')],

package/dist/lib/ci-binding/module.js.map

@@ -1 +1 @@
-{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../src/lib/ci-binding/module.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAEnF,4EAA4E;AAC5E,MAAM,CAAC,MAAM,UAAU,GAAG,2BAA2B,CAAC;AAEtD;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,SAAS,CAAC;AAExC,2CAA2C;AAC3C,MAAM,CAAC,MAAM,WAAW,GAAG,kBAAkB,UAAU,+BAA+B,CAAC;AAEvF,MAAM,UAAU,GAAG,wBAAwB,CAAC;AAC5C,wGAAwG;AACxG,uGAAuG;AACvG,MAAM,UAAU,GAAG,gBAAgB,CAAC;AACpC,MAAM,YAAY,GAAG,0BAA0B,CAAC;AAEhD,gGAAgG;AAChG,+EAA+E;AAC/E,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;4EAYiD,UAAU;;;;;;;;;;;;;;;;;;;;;;+BAsBvD,UAAU;iCACR,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;+BAkCd,UAAU;iCACR,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgC5C,CAAC;AAEF,MAAM,WAAW,GAAG;;uBAEG,cAAc;;;;;CAKpC,CAAC;AAEF,MAAM,YAAY,GAAG;;;;;;CAMpB,CAAC;AAEF,MAAM,aAAa,GAAG;;;;;;;;;;;;;CAarB,CAAC;AAEF,MAAM,SAAS,GAAG;;;;;;;;CAQjB,CAAC;AAEF,uEAAuE;AACvE,MAAM,SAAS,GAAG;;;;CAIjB,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAA6C,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,QAAQ,EAAE,qBAAqB,EAAE,EAAE;IAEjH,OAAO;QACL,CAAC,YAAY,EAAE,SAAS,CAAC;QACzB,CAAC,aAAa,EAAE,WAAW,CAAC;QAC5B,CAAC,cAAc,EAAE,YAAY,CAAC;QAC9B,CAAC,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,CAAC;QACzJ,CAAC,eAAe,EAAE,aAAa,CAAC;QAChC,CAAC,WAAW,EAAE,SAAS,CAAC;KACzB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,KAAqC;IAChE,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC/B,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC;QACnC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC"}
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../src/lib/ci-binding/module.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAEnF,4EAA4E;AAC5E,MAAM,CAAC,MAAM,UAAU,GAAG,2BAA2B,CAAC;AAEtD;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,SAAS,CAAC;AAExC,2CAA2C;AAC3C,MAAM,CAAC,MAAM,WAAW,GAAG,kBAAkB,UAAU,+BAA+B,CAAC;AAEvF,0HAA0H;AAC1H,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,UAAU,uBAAuB,CAAC;AAEnE;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,2BAA2B,CAAC;AAE9D,2GAA2G;AAC3G,MAAM,CAAC,MAAM,YAAY,GAAG,yCAAyC,kBAAkB,gCAAgC,CAAC;AAExH,MAAM,UAAU,GAAG,wBAAwB,CAAC;AAC5C,wGAAwG;AACxG,uGAAuG;AACvG,MAAM,UAAU,GAAG,gBAAgB,CAAC;AACpC,MAAM,YAAY,GAAG,0BAA0B,CAAC;AAEhD,gGAAgG;AAChG,+EAA+E;AAC/E,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;4EAaiD,UAAU;;;;;;;;;;;;;;;;;;;;;;+BAsBvD,UAAU;iCACR,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;+BAkCd,UAAU;iCACR,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mEAyCsB,YAAY;;;;;;;;;;;;;;;CAe9E,CAAC;AAEF,gGAAgG;AAChG,mFAAmF;AACnF,MAAM,UAAU,GAAG;IACjB,WAAW;IACX,sGAAsG;IACtG,8FAA8F;IAC9F,yBAAyB;IACzB,2FAA2F;IAC3F,yEAAyE;IACzE,GAAG;IACH,kGAAkG;IAClG,8EAA8E;IAC9E,SAAS;IACT,yGAAyG;IACzG,EAAE;IACF,qGAAqG;IACrG,kGAAkG;IAClG,kEAAkE;IAClE,+GAA+G;IAC/G,UAAU;IACV,IAAI;IACJ,EAAE;IACF,iBAAiB,GAAG,UAAU,GAAG,0EAA0E;IAC3G,oCAAoC,GAAG,kBAAkB,GAAG,GAAG;IAC/D,uBAAuB;IACvB,oCAAoC;IACpC,yGAAyG;IACzG,UAAU;IACV,IAAI;IACJ,0BAA0B;IAC1B,yGAAyG;IACzG,kGAAkG;IAClG,2EAA2E;IAC3E,gIAAgI;IAChI,EAAE;CACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,MAAM,WAAW,GAAG;;uBAEG,cAAc;;;;;CAKpC,CAAC;AAEF,MAAM,YAAY,GAAG;;;;;;CAMpB,CAAC;AAEF,MAAM,aAAa,GAAG;;;;;;;;;;;;;CAarB,CAAC;AAEF,MAAM,SAAS,GAAG;;;;;;;;CAQjB,CAAC;AAEF,uEAAuE;AACvE,MAAM,SAAS,GAAG;;;;CAIjB,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAA6C,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,QAAQ,EAAE,qBAAqB,EAAE,EAAE;IAEjH,OAAO;QACL,CAAC,YAAY,EAAE,SAAS,CAAC;QACzB,CAAC,sBAAsB,EAAE,UAAU,CAAC;QACpC,CAAC,aAAa,EAAE,WAAW,CAAC;QAC5B,CAAC,cAAc,EAAE,YAAY,CAAC;QAC9B,CAAC,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,CAAC;QACzJ,CAAC,eAAe,EAAE,aAAa,CAAC;QAChC,CAAC,WAAW,EAAE,SAAS,CAAC;KACzB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,KAAqC;IAChE,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC/B,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC;QACnC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC"}

package/dist/lib/hooks-seed/entries.d.ts

@@ -7,25 +7,49 @@
  */
 import type { HookMatcher, HooksBlock } from "./types.js";
 export declare function buildMethodGuardPreToolUse(): HookMatcher;
+/** The verify persona's npm package, unless the lock names a rescoped one (sync --cli-package). */
+export declare const DEFAULT_VERIFY_CLI_PACKAGE = "@sdd-method/verify-cli";
+/** One npm package name, scoped or not, the shape `npm pack` and `npx` accept. */
+export declare const NPM_PACKAGE_NAME: RegExp;
+/**
+ * Where the session-start check finds the verify CLI, recorded in the lock as `cli_source`
+ * (sync --cli-source):
+ *
+ *   registry   `npx --yes <package>@<version>`: npm fetches the exact version, nothing is installed
+ *              globally. The default. `package` overrides the name for a registry that rescopes it.
+ *   installed  `sdd-verify` from PATH, for an org with no npm registry that installs the verify CLI
+ *              from the release's tarballs. The hook first compares `sdd-verify --version` with the
+ *              pinned version and, when it differs or the CLI is missing, prints one line naming
+ *              the version to install; it runs the check only when a CLI is there to run it.
+ */
+export type CliSource = {
+    readonly source: "registry";
+    readonly package?: string;
+} | {
+    readonly source: "installed";
+};
+export declare const CLI_SOURCES: readonly ["registry", "installed"];
+export declare const DEFAULT_CLI_SOURCE: CliSource;
 /**
  * The session-start check runs the VERIFY persona's CLI (M-ADR 0218, 0220), not sdd-cli, which is
- * the administrator's: validating is routine author work. It runs through npx at the exact
- * verify-cli version this sdd-cli releases with, the version the managed CI workflow installs, so a
- * local pass comes from the same verifier CI uses and nothing needs installing globally.
+ * the administrator's: validating is routine author work. It runs at the exact verify-cli version
+ * this sdd-cli releases with, the version the managed CI workflow installs, so a local pass comes
+ * from the same verifier CI uses.
  */
-export declare function sessionStartValidateCommand(verifyVersion?: string): string;
+export declare function sessionStartValidateCommand(verifyVersion?: string, cli?: CliSource): string;
 /**
- * Whether a session-start command is one this tool rendered, at any version: the sdd-cli form it
- * wrote until the hook moved to verify-cli, or the npx form at any exact version. Sync replaces its
- * own earlier render without counting it as drift; otherwise every release that moves the pinned
- * version would refuse the settings sync until --allow-overwrite, the flag that also rewrites keys
- * the adopter owns. Anything else under the sentinel (an edited command) is still drift.
+ * Whether a session-start command is one this tool rendered, at any exact version and from either
+ * source: the sdd-cli form it wrote until the hook moved to verify-cli, the npx form under any
+ * package name, or the installed form. Sync replaces its own earlier render without counting it as
+ * drift, so a release that moves the pin, or a switch of source, needs no --allow-overwrite (the
+ * flag that also rewrites keys the adopter owns). The candidate is re-rendered from the version it
+ * names and must match exactly, so anything edited under the sentinel is still drift.
  */
 export declare function isOwnSessionStartRender(command: string): boolean;
-export declare function buildSessionStartValidate(): HookMatcher;
+export declare function buildSessionStartValidate(cli?: CliSource): HookMatcher;
 /**
  * Full method-managed hooks block. When extending, add a new event
  * name to the returned object and a corresponding builder above.
  */
-export declare function buildMethodManagedHooks(): HooksBlock;
+export declare function buildMethodManagedHooks(cli?: CliSource): HooksBlock;
 //# sourceMappingURL=entries.d.ts.map

package/dist/lib/hooks-seed/entries.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entries.d.ts","sourceRoot":"","sources":["../../../src/lib/hooks-seed/entries.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAiB,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAQzE,wBAAgB,0BAA0B,IAAI,WAAW,CAYxD;AAMD;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,aAAa,GAAE,MAA8B,GAAG,MAAM,CAEjG;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAOhE;AAED,wBAAgB,yBAAyB,IAAI,WAAW,CAUvD;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,IAAI,UAAU,CAMpD"}
+{"version":3,"file":"entries.d.ts","sourceRoot":"","sources":["../../../src/lib/hooks-seed/entries.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAiB,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAQzE,wBAAgB,0BAA0B,IAAI,WAAW,CAYxD;AAKD,mGAAmG;AACnG,eAAO,MAAM,0BAA0B,2BAA2B,CAAC;AAEnE,kFAAkF;AAClF,eAAO,MAAM,gBAAgB,QAAuD,CAAC;AAErF;;;;;;;;;;GAUG;AACH,MAAM,MAAM,SAAS,GAAG;IAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;CAAE,CAAC;AACtH,eAAO,MAAM,WAAW,oCAAqC,CAAC;AAC9D,eAAO,MAAM,kBAAkB,EAAE,SAAkC,CAAC;AAepE;;;;;GAKG;AACH,wBAAgB,2BAA2B,CACzC,aAAa,GAAE,MAA8B,EAC7C,GAAG,GAAE,SAA8B,GAClC,MAAM,CAMR;AAKD;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAQhE;AAED,wBAAgB,yBAAyB,CAAC,GAAG,GAAE,SAA8B,GAAG,WAAW,CAU1F;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,GAAE,SAA8B,GAAG,UAAU,CAMvF"}

package/dist/lib/hooks-seed/entries.js

@@ -24,40 +24,62 @@ export function buildMethodGuardPreToolUse() {
     };
 }
 const SESSION_START_VALIDATE_ARGS = ' validate --target-repo "${CLAUDE_PROJECT_DIR:-$(pwd)}" --validator adr-structure 2>&1 | head -20';
-const VERIFY_CLI_NPX = /^npx --yes @sdd-method\/verify-cli@(\S+)$/;
+/** The verify persona's npm package, unless the lock names a rescoped one (sync --cli-package). */
+export const DEFAULT_VERIFY_CLI_PACKAGE = "@sdd-method/verify-cli";
+/** One npm package name, scoped or not, the shape `npm pack` and `npx` accept. */
+export const NPM_PACKAGE_NAME = /^(@[a-z0-9][a-z0-9._~-]*\/)?[a-z0-9][a-z0-9._~-]*$/;
+export const CLI_SOURCES = ["registry", "installed"];
+export const DEFAULT_CLI_SOURCE = { source: "registry" };
+function registryLauncher(version, pkg) {
+    return `npx --yes ${pkg}@${version}${SESSION_START_VALIDATE_ARGS}`;
+}
+function installedLauncher(version) {
+    return (`v=$(sdd-verify --version 2>/dev/null); [ "$v" = "${version}" ] || ` +
+        `echo "[method] sdd-verify \${v:-is not installed}; this SDD pins verify-cli ${version}: ` +
+        `pull your CLI release repository and run ./install.sh ${version}"; ` +
+        `if [ -n "$v" ]; then sdd-verify${SESSION_START_VALIDATE_ARGS}; fi`);
+}
 /**
  * The session-start check runs the VERIFY persona's CLI (M-ADR 0218, 0220), not sdd-cli, which is
- * the administrator's: validating is routine author work. It runs through npx at the exact
- * verify-cli version this sdd-cli releases with, the version the managed CI workflow installs, so a
- * local pass comes from the same verifier CI uses and nothing needs installing globally.
+ * the administrator's: validating is routine author work. It runs at the exact verify-cli version
+ * this sdd-cli releases with, the version the managed CI workflow installs, so a local pass comes
+ * from the same verifier CI uses.
  */
-export function sessionStartValidateCommand(verifyVersion = getVerifyCliVersion()) {
-    return withSentinel(`npx --yes @sdd-method/verify-cli@${verifyVersion}${SESSION_START_VALIDATE_ARGS}`);
+export function sessionStartValidateCommand(verifyVersion = getVerifyCliVersion(), cli = DEFAULT_CLI_SOURCE) {
+    const body = cli.source === "installed"
+        ? installedLauncher(verifyVersion)
+        : registryLauncher(verifyVersion, cli.package ?? DEFAULT_VERIFY_CLI_PACKAGE);
+    return withSentinel(body);
 }
+const REGISTRY_FORM = /^npx --yes ((?:@[a-z0-9][a-z0-9._~-]*\/)?[a-z0-9][a-z0-9._~-]*)@(\S+) validate /;
+const INSTALLED_FORM = /^v=\$\(sdd-verify --version 2>\/dev\/null\); \[ "\$v" = "([^"]+)" \]/;
 /**
- * Whether a session-start command is one this tool rendered, at any version: the sdd-cli form it
- * wrote until the hook moved to verify-cli, or the npx form at any exact version. Sync replaces its
- * own earlier render without counting it as drift; otherwise every release that moves the pinned
- * version would refuse the settings sync until --allow-overwrite, the flag that also rewrites keys
- * the adopter owns. Anything else under the sentinel (an edited command) is still drift.
+ * Whether a session-start command is one this tool rendered, at any exact version and from either
+ * source: the sdd-cli form it wrote until the hook moved to verify-cli, the npx form under any
+ * package name, or the installed form. Sync replaces its own earlier render without counting it as
+ * drift, so a release that moves the pin, or a switch of source, needs no --allow-overwrite (the
+ * flag that also rewrites keys the adopter owns). The candidate is re-rendered from the version it
+ * names and must match exactly, so anything edited under the sentinel is still drift.
  */
 export function isOwnSessionStartRender(command) {
     const body = command.replace(METHOD_MANAGED_SENTINEL, "").trimEnd();
-    if (!body.endsWith(SESSION_START_VALIDATE_ARGS))
-        return false;
-    const launcher = body.slice(0, body.length - SESSION_START_VALIDATE_ARGS.length);
-    if (launcher === "sdd-cli")
+    if (body === `sdd-cli${SESSION_START_VALIDATE_ARGS}`)
         return true;
-    const npx = VERIFY_CLI_NPX.exec(launcher);
-    return npx !== null && EXACT_VERSION.test(npx[1]);
+    const npx = REGISTRY_FORM.exec(body);
+    if (npx && EXACT_VERSION.test(npx[2]))
+        return body === registryLauncher(npx[2], npx[1]);
+    const installed = INSTALLED_FORM.exec(body);
+    if (installed && EXACT_VERSION.test(installed[1]))
+        return body === installedLauncher(installed[1]);
+    return false;
 }
-export function buildSessionStartValidate() {
+export function buildSessionStartValidate(cli = DEFAULT_CLI_SOURCE) {
     return {
         matcher: "startup",
         hooks: [
             {
                 type: "command",
-                command: sessionStartValidateCommand(),
+                command: sessionStartValidateCommand(getVerifyCliVersion(), cli),
             },
         ],
     };
@@ -66,10 +88,10 @@ export function buildSessionStartValidate() {
  * Full method-managed hooks block. When extending, add a new event
  * name to the returned object and a corresponding builder above.
  */
-export function buildMethodManagedHooks() {
+export function buildMethodManagedHooks(cli = DEFAULT_CLI_SOURCE) {
     const hooks = {
         PreToolUse: [buildMethodGuardPreToolUse()],
-        SessionStart: [buildSessionStartValidate()],
+        SessionStart: [buildSessionStartValidate(cli)],
     };
     return hooks;
 }

package/dist/lib/hooks-seed/entries.js.map

@@ -1 +1 @@
-{"version":3,"file":"entries.js","sourceRoot":"","sources":["../../../src/lib/hooks-seed/entries.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE3E,OAAO,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAErD,SAAS,YAAY,CAAC,OAAe;IACnC,IAAI,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAC;QAAE,OAAO,OAAO,CAAC;IAC9D,OAAO,GAAG,OAAO,IAAI,uBAAuB,EAAE,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,0BAA0B;IACxC,OAAO;QACL,OAAO,EAAE,yBAAyB;QAClC,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,YAAY,CACnB,mFAAmF,CACpF;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,2BAA2B,GAC/B,mGAAmG,CAAC;AACtG,MAAM,cAAc,GAAG,2CAA2C,CAAC;AAEnE;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CAAC,gBAAwB,mBAAmB,EAAE;IACvF,OAAO,YAAY,CAAC,oCAAoC,aAAa,GAAG,2BAA2B,EAAE,CAAC,CAAC;AACzG,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACrD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IACpE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,2BAA2B,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,2BAA2B,CAAC,MAAM,CAAC,CAAC;IACjF,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1C,OAAO,GAAG,KAAK,IAAI,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,yBAAyB;IACvC,OAAO;QACL,OAAO,EAAE,SAAS;QAClB,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,2BAA2B,EAAE;aACvC;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB;IACrC,MAAM,KAAK,GAAkD;QAC3D,UAAU,EAAE,CAAC,0BAA0B,EAAE,CAAC;QAC1C,YAAY,EAAE,CAAC,yBAAyB,EAAE,CAAC;KAC5C,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"entries.js","sourceRoot":"","sources":["../../../src/lib/hooks-seed/entries.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE3E,OAAO,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAErD,SAAS,YAAY,CAAC,OAAe;IACnC,IAAI,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAC;QAAE,OAAO,OAAO,CAAC;IAC9D,OAAO,GAAG,OAAO,IAAI,uBAAuB,EAAE,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,0BAA0B;IACxC,OAAO;QACL,OAAO,EAAE,yBAAyB;QAClC,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,YAAY,CACnB,mFAAmF,CACpF;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,2BAA2B,GAC/B,mGAAmG,CAAC;AAEtG,mGAAmG;AACnG,MAAM,CAAC,MAAM,0BAA0B,GAAG,wBAAwB,CAAC;AAEnE,kFAAkF;AAClF,MAAM,CAAC,MAAM,gBAAgB,GAAG,oDAAoD,CAAC;AAcrF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,UAAU,EAAE,WAAW,CAAU,CAAC;AAC9D,MAAM,CAAC,MAAM,kBAAkB,GAAc,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AAEpE,SAAS,gBAAgB,CAAC,OAAe,EAAE,GAAW;IACpD,OAAO,aAAa,GAAG,IAAI,OAAO,GAAG,2BAA2B,EAAE,CAAC;AACrE,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe;IACxC,OAAO,CACL,oDAAoD,OAAO,SAAS;QACpE,+EAA+E,OAAO,IAAI;QAC1F,yDAAyD,OAAO,KAAK;QACrE,kCAAkC,2BAA2B,MAAM,CACpE,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CACzC,gBAAwB,mBAAmB,EAAE,EAC7C,MAAiB,kBAAkB;IAEnC,MAAM,IAAI,GACR,GAAG,CAAC,MAAM,KAAK,WAAW;QACxB,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC;QAClC,CAAC,CAAC,gBAAgB,CAAC,aAAa,EAAE,GAAG,CAAC,OAAO,IAAI,0BAA0B,CAAC,CAAC;IACjF,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,aAAa,GAAG,iFAAiF,CAAC;AACxG,MAAM,cAAc,GAAG,sEAAsE,CAAC;AAE9F;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACrD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IACpE,IAAI,IAAI,KAAK,UAAU,2BAA2B,EAAE;QAAE,OAAO,IAAI,CAAC;IAClE,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC;QAAE,OAAO,IAAI,KAAK,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAE,EAAE,GAAG,CAAC,CAAC,CAAE,CAAC,CAAC;IAC3F,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,SAAS,IAAI,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC;QAAE,OAAO,IAAI,KAAK,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,CAAC;IACrG,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,MAAiB,kBAAkB;IAC3E,OAAO;QACL,OAAO,EAAE,SAAS;QAClB,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,2BAA2B,CAAC,mBAAmB,EAAE,EAAE,GAAG,CAAC;aACjE;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAiB,kBAAkB;IACzE,MAAM,KAAK,GAAkD;QAC3D,UAAU,EAAE,CAAC,0BAA0B,EAAE,CAAC;QAC1C,YAAY,EAAE,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC;KAC/C,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/lib/hooks-seed/index.d.ts

@@ -10,7 +10,8 @@
  */
 export type { HookCommand, HookEventName, HookMatcher, HooksBlock, SettingsWithHooks, } from "./types.js";
 export { METHOD_MANAGED_SENTINEL, isMethodManagedMatcher } from "./types.js";
-export { buildMethodManagedHooks, isOwnSessionStartRender, sessionStartValidateCommand, } from "./entries.js";
+export { buildMethodManagedHooks, CLI_SOURCES, DEFAULT_CLI_SOURCE, DEFAULT_VERIFY_CLI_PACKAGE, isOwnSessionStartRender, NPM_PACKAGE_NAME, sessionStartValidateCommand, } from "./entries.js";
+export type { CliSource } from "./entries.js";
 export { detectHooksDrift, normaliseOwnHookRenders, upsertMethodManagedHooks, } from "./merge.js";
 export type { HooksUpsertResult } from "./merge.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/lib/hooks-seed/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/hooks-seed/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,YAAY,EACV,WAAW,EACX,aAAa,EACb,WAAW,EACX,UAAU,EACV,iBAAiB,GAClB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAC7E,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,2BAA2B,GAC5B,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/hooks-seed/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,YAAY,EACV,WAAW,EACX,aAAa,EACb,WAAW,EACX,UAAU,EACV,iBAAiB,GAClB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAC7E,OAAO,EACL,uBAAuB,EACvB,WAAW,EACX,kBAAkB,EAClB,0BAA0B,EAC1B,uBAAuB,EACvB,gBAAgB,EAChB,2BAA2B,GAC5B,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC"}

package/dist/lib/hooks-seed/index.js

@@ -9,6 +9,6 @@
  * when the repo runs the claude-code harness (the default).
  */
 export { METHOD_MANAGED_SENTINEL, isMethodManagedMatcher } from "./types.js";
-export { buildMethodManagedHooks, isOwnSessionStartRender, sessionStartValidateCommand, } from "./entries.js";
+export { buildMethodManagedHooks, CLI_SOURCES, DEFAULT_CLI_SOURCE, DEFAULT_VERIFY_CLI_PACKAGE, isOwnSessionStartRender, NPM_PACKAGE_NAME, sessionStartValidateCommand, } from "./entries.js";
 export { detectHooksDrift, normaliseOwnHookRenders, upsertMethodManagedHooks, } from "./merge.js";
 //# sourceMappingURL=index.js.map

package/dist/lib/hooks-seed/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/hooks-seed/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AASH,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAC7E,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,2BAA2B,GAC5B,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/hooks-seed/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AASH,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAC7E,OAAO,EACL,uBAAuB,EACvB,WAAW,EACX,kBAAkB,EAClB,0BAA0B,EAC1B,uBAAuB,EACvB,gBAAgB,EAChB,2BAA2B,GAC5B,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,YAAY,CAAC"}

package/dist/lib/init/ci-workflow.js

@@ -8,7 +8,7 @@
  * block-marker pair so the sync path can preserve adopter-authored
  * content outside the block.
  */
-import { DAGGER_VERSION, MODULE_CALL, MODULE_DIR } from "../ci-binding/module.js";
+import { DAGGER_VERSION, MODULE_CALL, MODULE_DIR, REBUILD_FLAG, REBUILD_SCRIPT } from "../ci-binding/module.js";
 export const WORKFLOW_REL_PATH = ".github/workflows/method-validation.yml";
 export const BLOCK_BEGIN = "# method-managed: begin";
 export const BLOCK_END = "# method-managed: end";
@@ -56,6 +56,13 @@ function buildMethodManagedBlock(profile, runner) {
         "# released with the sdd-cli that last synced this repository. The catalogue",
         "# freshness step (@sdd-method/maintain-cli, pinned the same way) is advisory.",
         "#",
+        "# Catalogue rebuild (M-ADR 0220 §4.4), off until you configure it: set the",
+        "# repository variable SDD_CATALOGUE_APP_ID and the secret",
+        "# SDD_CATALOGUE_APP_PRIVATE_KEY for a GitHub App that can write contents, and",
+        "# the job rebuilds the catalogues and pushes them to the branch it is building",
+        "# (a pull request's own branch, never a fork's); the freshness step then gates.",
+        "# An App token, because pushes made with the default token start no workflow.",
+        "#",
         "# Run it locally (needs a container engine):",
         `#   ${MODULE_CALL}`,
         "",
@@ -74,11 +81,28 @@ function buildMethodManagedBlock(profile, runner) {
         "    name: Method Validation",
         `    runs-on: ${runsOn(runner)}`,
         "    steps:",
+        "      - name: Catalogue rebuild token",
+        "        id: catalogue-token",
+        "        if: vars.SDD_CATALOGUE_APP_ID != '' && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository)",
+        "        uses: actions/create-github-app-token@v1",
+        "        with:",
+        "          app-id: ${{ vars.SDD_CATALOGUE_APP_ID }}",
+        "          private-key: ${{ secrets.SDD_CATALOGUE_APP_PRIVATE_KEY }}",
         "      - uses: actions/checkout@v4",
+        "        with:",
+        // The branch itself when rebuilding, so the rebuild lands on it; otherwise the event's own ref.
+        "          ref: ${{ steps.catalogue-token.outputs.token != '' && (github.head_ref || github.ref_name) || '' }}",
+        "          persist-credentials: false",
         "      - name: Install Dagger",
         `        run: curl -fsSL https://dl.dagger.io/dagger/install.sh | BIN_DIR="$RUNNER_TEMP/dagger" DAGGER_VERSION=${DAGGER_VERSION} sh && echo "$RUNNER_TEMP/dagger" >> "$GITHUB_PATH"`,
+        "      - name: Rebuild catalogues",
+        "        if: steps.catalogue-token.outputs.token != ''",
+        "        env:",
+        "          SDD_REBUILD_TOKEN: ${{ steps.catalogue-token.outputs.token }}",
+        "          SDD_REBUILD_BRANCH: ${{ github.head_ref || github.ref_name }}",
+        `        run: SDD_REBUILD_PUSH_URL="https://x-access-token:$SDD_REBUILD_TOKEN@\${GITHUB_SERVER_URL#https://}/$GITHUB_REPOSITORY.git" sh ${REBUILD_SCRIPT}`,
         "      - name: Method Validation",
-        `        run: ${MODULE_CALL}`,
+        `        run: ${MODULE_CALL} ${REBUILD_FLAG}`,
         BLOCK_END,
     ].join("\n");
 }

package/dist/lib/init/ci-workflow.js.map

@@ -1 +1 @@
-{"version":3,"file":"ci-workflow.js","sourceRoot":"","sources":["../../../src/lib/init/ci-workflow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAGlF,MAAM,CAAC,MAAM,iBAAiB,GAAG,yCAAyC,CAAC;AAC3E,MAAM,CAAC,MAAM,WAAW,GAAG,yBAAyB,CAAC;AACrD,MAAM,CAAC,MAAM,SAAS,GAAG,uBAAuB,CAAC;AAEjD;;;GAGG;AACH,MAAM,UAAU,8BAA8B,CAAC,OAAgB,EAAE,MAA0B;IACzF,MAAM,WAAW,GAAG,uBAAuB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7D,OAAO,WAAW,GAAG,oKAAoK,CAAC;AAC5L,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gCAAgC,CAAC,OAAgB,EAAE,MAA0B;IAC3F,OAAO,uBAAuB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC;AAED;;;GAGG;AACH,SAAS,MAAM,CAAC,MAA0B;IACxC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,eAAe,CAAC;IACxE,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;AACrE,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAgB,EAAE,MAA0B;IAC3E,OAAO;QACL,WAAW;QACX,qFAAqF;QACrF,kEAAkE;QAClE,6EAA6E;QAC7E,cAAc,OAAO,EAAE;QACvB,GAAG;QACH,4FAA4F;QAC5F,uCAAuC;QACvC,iCAAiC,UAAU,iCAAiC;QAC5E,4EAA4E;QAC5E,0EAA0E;QAC1E,+EAA+E;QAC/E,8EAA8E;QAC9E,6EAA6E;QAC7E,+EAA+E;QAC/E,GAAG;QACH,8CAA8C;QAC9C,OAAO,WAAW,EAAE;QACpB,EAAE;QACF,yBAAyB;QACzB,EAAE;QACF,KAAK;QACL,iBAAiB;QACjB,SAAS;QACT,8BAA8B;QAC9B,GAAG,eAAe,CAAC,OAAO,CAAC;QAC3B,sBAAsB;QACtB,EAAE;QACF,OAAO;QACP,iGAAiG;QACjG,sBAAsB;QACtB,6BAA6B;QAC7B,gBAAgB,MAAM,CAAC,MAAM,CAAC,EAAE;QAChC,YAAY;QACZ,mCAAmC;QACnC,8BAA8B;QAC9B,iHAAiH,cAAc,qDAAqD;QACpL,iCAAiC;QACjC,gBAAgB,WAAW,EAAE;QAC7B,SAAS;KACV,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,eAAe,CAAC,OAAgB;IACvC,IAAI,OAAO,KAAK,aAAa;QAAE,OAAO,EAAE,CAAC;IACzC,OAAO,CAAC,mBAAmB,EAAE,yBAAyB,CAAC,CAAC;AAC1D,CAAC"}
+{"version":3,"file":"ci-workflow.js","sourceRoot":"","sources":["../../../src/lib/init/ci-workflow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAGhH,MAAM,CAAC,MAAM,iBAAiB,GAAG,yCAAyC,CAAC;AAC3E,MAAM,CAAC,MAAM,WAAW,GAAG,yBAAyB,CAAC;AACrD,MAAM,CAAC,MAAM,SAAS,GAAG,uBAAuB,CAAC;AAEjD;;;GAGG;AACH,MAAM,UAAU,8BAA8B,CAAC,OAAgB,EAAE,MAA0B;IACzF,MAAM,WAAW,GAAG,uBAAuB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7D,OAAO,WAAW,GAAG,oKAAoK,CAAC;AAC5L,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gCAAgC,CAAC,OAAgB,EAAE,MAA0B;IAC3F,OAAO,uBAAuB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC;AAED;;;GAGG;AACH,SAAS,MAAM,CAAC,MAA0B;IACxC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,eAAe,CAAC;IACxE,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;AACrE,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAgB,EAAE,MAA0B;IAC3E,OAAO;QACL,WAAW;QACX,qFAAqF;QACrF,kEAAkE;QAClE,6EAA6E;QAC7E,cAAc,OAAO,EAAE;QACvB,GAAG;QACH,4FAA4F;QAC5F,uCAAuC;QACvC,iCAAiC,UAAU,iCAAiC;QAC5E,4EAA4E;QAC5E,0EAA0E;QAC1E,+EAA+E;QAC/E,8EAA8E;QAC9E,6EAA6E;QAC7E,+EAA+E;QAC/E,GAAG;QACH,4EAA4E;QAC5E,2DAA2D;QAC3D,+EAA+E;QAC/E,gFAAgF;QAChF,iFAAiF;QACjF,+EAA+E;QAC/E,GAAG;QACH,8CAA8C;QAC9C,OAAO,WAAW,EAAE;QACpB,EAAE;QACF,yBAAyB;QACzB,EAAE;QACF,KAAK;QACL,iBAAiB;QACjB,SAAS;QACT,8BAA8B;QAC9B,GAAG,eAAe,CAAC,OAAO,CAAC;QAC3B,sBAAsB;QACtB,EAAE;QACF,OAAO;QACP,iGAAiG;QACjG,sBAAsB;QACtB,6BAA6B;QAC7B,gBAAgB,MAAM,CAAC,MAAM,CAAC,EAAE;QAChC,YAAY;QACZ,uCAAuC;QACvC,6BAA6B;QAC7B,4JAA4J;QAC5J,kDAAkD;QAClD,eAAe;QACf,oDAAoD;QACpD,qEAAqE;QACrE,mCAAmC;QACnC,eAAe;QACf,gGAAgG;QAChG,+GAA+G;QAC/G,sCAAsC;QACtC,8BAA8B;QAC9B,iHAAiH,cAAc,qDAAqD;QACpL,kCAAkC;QAClC,uDAAuD;QACvD,cAAc;QACd,yEAAyE;QACzE,yEAAyE;QACzE,0IAA0I,cAAc,EAAE;QAC1J,iCAAiC;QACjC,gBAAgB,WAAW,IAAI,YAAY,EAAE;QAC7C,SAAS;KACV,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,eAAe,CAAC,OAAgB;IACvC,IAAI,OAAO,KAAK,aAAa;QAAE,OAAO,EAAE,CAAC;IACzC,OAAO,CAAC,mBAAmB,EAAE,yBAAyB,CAAC,CAAC;AAC1D,CAAC"}

package/dist/lib/init/platform.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"platform.d.ts","sourceRoot":"","sources":["../../../src/lib/init/platform.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAMxD,MAAM,WAAW,0BAA0B;IACzC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kGAAkG;IAClG,YAAY,CAAC,EAAE,YAAY,CAAC;CAC7B;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;CACf,GAAG,MAAM,CAmDT;AAED,wBAAgB,uBAAuB,IAAI,MAAM,CA4BhD;AAED,wBAAgB,wBAAwB,IAAI,MAAM,CAkBjD;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IAAE,YAAY,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAqB1E;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAAE,YAAY,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAqB5E;AAED,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,0BAA0B,GAChC,OAAO,CAAC;IAAE,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAgErC;AAED,wBAAgB,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAM7D"}
+{"version":3,"file":"platform.d.ts","sourceRoot":"","sources":["../../../src/lib/init/platform.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAMxD,MAAM,WAAW,0BAA0B;IACzC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kGAAkG;IAClG,YAAY,CAAC,EAAE,YAAY,CAAC;CAC7B;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;CACf,GAAG,MAAM,CAoDT;AAED,wBAAgB,uBAAuB,IAAI,MAAM,CA4BhD;AAED,wBAAgB,wBAAwB,IAAI,MAAM,CAkBjD;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IAAE,YAAY,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAqB1E;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAAE,YAAY,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAqB5E;AAED,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,0BAA0B,GAChC,OAAO,CAAC;IAAE,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAgErC;AAED,wBAAgB,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAM7D"}

package/dist/lib/init/platform.js

@@ -41,6 +41,7 @@ export function renderPlatformReadme(input) {
         "",
         `- \`sdd-cli sync\` — refresh the method baseline for **${input.platformName}**.`,
         `- \`npx --yes @sdd-method/verify-cli@${getVerifyCliVersion()} validate\` — run the platform validation suite with the verifier CI installs (the version CI pinned at init; sync moves CI's pin, so match it).`,
+        "- Without an npm registry, install the verify CLI from the release's CLI tarballs and run `sdd-verify validate`; `sdd-cli sync --cli-source installed` points the session-start hook at it.",
         "- `sdd-cli scaffold domain <name>` — scaffold a domain's docs in this repo (M-ADR 0173 §4.4).",
         "- Your code CLI's `add` (e.g. `platform-cli add`) — scaffold the services within a domain, in code repositories outside this repo.",
         "",