@sdd-method/sdd-cli 1.46.0 → 2.1.0

package/dist/lib/vocabulary/renames.js

@@ -0,0 +1,40 @@
+/**
+ * The method's vocabulary renames (M-ADR 0222 §4.1), loaded from the vendored copy of
+ * sdd-method's docs/method/foundations/vocabulary-renames.yaml (one-way, sdd-method ->
+ * vendored; scripts/sync-vendored-script.sh, drift-tested in tests/parity).
+ *
+ * For one major release every reader accepts a former value and reads it as the new one;
+ * from `removed_in` the former value is an error. Readers ask this module rather than
+ * keeping their own copy, so a rename has one definition here as it has one in the bundles.
+ */
+import { readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { parse } from "yaml";
+const __dirname = dirname(fileURLToPath(import.meta.url));
+export const VENDORED_RENAMES_PATH = join(__dirname, "vocabulary-renames.yaml");
+let cached;
+export function vocabularyRenames() {
+    if (cached === undefined) {
+        const doc = parse(readFileSync(VENDORED_RENAMES_PATH, "utf8"));
+        cached = { introduced_in: String(doc.introduced_in), removed_in: String(doc.removed_in), renames: doc.renames };
+    }
+    return cached;
+}
+/** The rename with this id; throws on an id the file does not hold, so a reader cannot silently lose its alias. */
+export function rename(id) {
+    const r = vocabularyRenames().renames.find((x) => x.id === id);
+    if (r === undefined)
+        throw new Error(`vocabulary-renames.yaml has no rename "${id}"`);
+    return r;
+}
+/** The value as a reader should treat it: the new name for the former one, anything else unchanged. */
+export function canonicalValue(id, value) {
+    const r = rename(id);
+    return value === r.old ? r.new : value;
+}
+/** Whether a value is the former name under this rename (for the reader's finding). */
+export function isFormerValue(id, value) {
+    return value === rename(id).old;
+}
+//# sourceMappingURL=renames.js.map

package/dist/lib/vocabulary/renames.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"renames.js","sourceRoot":"","sources":["../../../src/lib/vocabulary/renames.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AAc7B,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;AAEhF,IAAI,MAA+B,CAAC;AAEpC,MAAM,UAAU,iBAAiB;IAC/B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,KAAK,CAAC,YAAY,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAgB,CAAC;QAC9E,MAAM,GAAG,EAAE,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;IAClH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,mHAAmH;AACnH,MAAM,UAAU,MAAM,CAAC,EAAU;IAC/B,MAAM,CAAC,GAAG,iBAAiB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/D,IAAI,CAAC,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,EAAE,GAAG,CAAC,CAAC;IACtF,OAAO,CAAC,CAAC;AACX,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,cAAc,CAAC,EAAU,EAAE,KAAa;IACtD,MAAM,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;IACrB,OAAO,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;AACzC,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,aAAa,CAAC,EAAU,EAAE,KAAa;IACrD,OAAO,KAAK,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC;AAClC,CAAC"}

package/dist/lib/vocabulary/vocabulary-renames.yaml

@@ -0,0 +1,76 @@
+# Vocabulary renames (M-ADR 0222 §4.1)
+#
+# The tool-read values the method renamed when "lock" left its vocabulary, as data:
+# every reader that accepts a former value, and the migrate verb, follows this file.
+# For one major release a reader accepts the former value, treats it as the new one
+# and reports it; from removed_in the former value is an error.
+#
+# Each reader that aliases a former value marks the place with a comment line
+#   vocabulary-alias: <old> -> <new>
+# and the correspondence registry holds the readers and this file to each other in
+# both directions (orchestration/correspondence-registry.yaml, vocabulary-renames).
+#
+# Consumed by:
+#   - validate-spec-lifecycle.sh, validate-traceability.sh, validate-app-dependencies.sh,
+#     dispatch-release.sh (the bundled readers)
+#   - sdd-cli's catalogue build and repo-config reader
+#   - `sdd-cli migrate vocabulary` (rewrites an SDD's own files)
+#
+# Distribution: ships in every method baseline via the seed-file lists.
+
+schema_version: "1.0.0"
+introduced_in: "2.0.0"   # the sdd-cli major that reads both names
+removed_in: "3.0.0"      # the sdd-cli major that rejects the former names
+
+renames:
+  - id: authoring-status-detailed
+    old: detailed-pre-lock
+    new: detailed
+    positions:
+      - "spec `**Status:**` header (M-ADR 0201's authoring ladder)"
+      - "work-order status"
+      - "capability manifest `capability.status` (a spec-authoring stage on the wrong axis; reported, never translated)"
+
+  - id: stability-stable
+    old: locked
+    new: stable
+    positions:
+      - "`required_stability` (app and integration platform dependencies)"
+      - "`traceability.contracts.status` (the contract-set maturity ladder)"
+      - "repository config `stability` (a stability class)"
+      - "runtime-artefact `stability` and `template-stability`"
+    note: "Only where `locked` is a stability CLASS. A pinned version is a different thing (M-ADR 0222 §4.1)."
+
+  - id: agreement-tag
+    old: release-vMAJOR.MINOR-locked
+    new: release-vMAJOR.MINOR-agreed
+    positions:
+      - "the agreement tag on a release branch (M-ADRs 0072-0074)"
+
+  - id: agreement-tag-key
+    old: lock_in_tag
+    new: agreement_tag
+    positions:
+      - "a platform BASELINE.md record key (M-ADR 0073)"
+
+  - id: gate-registry-next-gate
+    old: lock-in
+    new: agreement
+    positions:
+      - "gate registry `next_gate` value (domain-architecture rubric)"
+
+  - id: gate-registry-remediation-key
+    old: remediation_before_lock_in
+    new: remediation_before_agreement
+    positions:
+      - "gate registry key (domain-architecture rubric)"
+
+  - id: journey-status-accepted
+    old: accepted-pre-lock
+    new: accepted
+    positions:
+      - "user-journey status (templates only; no reader)"
+
+# An extension an adopter names itself (an `x-<adopter>-stability` contract extension,
+# say) is the adopter's to rename; its values follow the method's (M-ADR 0222 §4.1). The migrate verb
+# reports such extensions and never rewrites them.

package/dist/maintain-version.json

@@ -1,4 +1,4 @@
 {
-  "version": "0.5.0",
-  "built_against_sdd_cli": "1.46.0"
+  "version": "0.7.0",
+  "built_against_sdd_cli": "2.1.0"
 }

package/dist/verbs/migrate.d.ts

@@ -0,0 +1,9 @@
+import type { Command } from "commander";
+/**
+ * `migrate vocabulary` (M-ADR 0222 §4.1): rewrite the SDD's own files from the former tool-read values to the
+ * new ones, in known positions only, and report what it must not rewrite. Authored content, so the verb is the
+ * author's and the full CLI's (M-ADR 0218). Exit 0 when nothing is left to migrate, 1 when it rewrote values
+ * (or, with --dry-run, found values it would rewrite), so a wave can gate on "migrated".
+ */
+export declare function registerMigrate(program: Command): void;
+//# sourceMappingURL=migrate.d.ts.map

package/dist/verbs/migrate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../src/verbs/migrate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AASzC;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAuBtD"}

package/dist/verbs/migrate.js

@@ -0,0 +1,32 @@
+import { resolve } from "node:path";
+import { migrateVocabulary } from "../lib/vocabulary/migrate.js";
+/**
+ * `migrate vocabulary` (M-ADR 0222 §4.1): rewrite the SDD's own files from the former tool-read values to the
+ * new ones, in known positions only, and report what it must not rewrite. Authored content, so the verb is the
+ * author's and the full CLI's (M-ADR 0218). Exit 0 when nothing is left to migrate, 1 when it rewrote values
+ * (or, with --dry-run, found values it would rewrite), so a wave can gate on "migrated".
+ */
+export function registerMigrate(program) {
+    const migrate = program.command("migrate").description("Migrate an SDD's own files to the method's current vocabulary");
+    migrate
+        .command("vocabulary")
+        .description("Rewrite the SDD's own files from the former tool-read values (detailed-pre-lock, stability locked, release-vX.X-locked, lock_in_tag, next_gate lock-in, remediation_before_lock_in) to the new ones, in known positions only; method- and pack-managed files, .sdd/ and catalogues/ are untouched (exit 1 when anything was or would be rewritten)")
+        .option("--sdd-path <path>", "Path to the SDD repo root (defaults to cwd)")
+        .option("--dry-run", "List what would be rewritten; write nothing")
+        .action(async (opts) => {
+        const root = resolve(opts.sddPath ?? process.cwd());
+        const r = await migrateVocabulary(root, { dryRun: opts.dryRun === true });
+        const w = (s) => process.stdout.write(s);
+        for (const x of r.rewrites)
+            w(`  ${opts.dryRun ? "would rewrite" : "rewrote"}  ${x.file}:${x.line}  ${x.from} -> ${x.to}  (${x.rule})\n`);
+        for (const x of r.reported)
+            w(`  reported  ${x.file}:${x.line}  ${x.text}  — ${x.reason}\n`);
+        const verb = opts.dryRun ? "would rewrite" : "rewrote";
+        w(r.rewrites.length === 0
+            ? `[PASS] migrate vocabulary: nothing to migrate in ${r.filesScanned} file(s) the SDD owns${r.reported.length ? `; ${r.reported.length} reported for the adopter` : ""}\n`
+            : `[INFO] migrate vocabulary: ${verb} ${r.rewrites.length} value(s) in ${r.filesChanged} file(s) of ${r.filesScanned}${r.reported.length ? `; ${r.reported.length} reported for the adopter` : ""}\n`);
+        if (r.rewrites.length > 0)
+            process.exit(1);
+    });
+}
+//# sourceMappingURL=migrate.js.map

package/dist/verbs/migrate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate.js","sourceRoot":"","sources":["../../src/verbs/migrate.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAOjE;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,OAAgB;IAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,+DAA+D,CAAC,CAAC;IACxH,OAAO;SACJ,OAAO,CAAC,YAAY,CAAC;SACrB,WAAW,CACV,oVAAoV,CACrV;SACA,MAAM,CAAC,mBAAmB,EAAE,6CAA6C,CAAC;SAC1E,MAAM,CAAC,WAAW,EAAE,6CAA6C,CAAC;SAClE,MAAM,CAAC,KAAK,EAAE,IAAoB,EAAE,EAAE;QACrC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACpD,MAAM,CAAC,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;QAC1E,MAAM,CAAC,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACjD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ;YAAE,CAAC,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC;QAC1I,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ;YAAE,CAAC,CAAC,eAAe,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;QAC7F,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;QACvD,CAAC,CACC,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YACrB,CAAC,CAAC,oDAAoD,CAAC,CAAC,YAAY,wBAAwB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,2BAA2B,CAAC,CAAC,CAAC,EAAE,IAAI;YAC1K,CAAC,CAAC,8BAA8B,IAAI,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,gBAAgB,CAAC,CAAC,YAAY,eAAe,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,2BAA2B,CAAC,CAAC,CAAC,EAAE,IAAI,CACxM,CAAC;QACF,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/verify-version.json

@@ -1,4 +1,4 @@
 {
-  "version": "1.5.0",
-  "built_against_sdd_cli": "1.46.0"
+  "version": "2.1.0",
+  "built_against_sdd_cli": "2.1.0"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sdd-method/sdd-cli",
-  "version": "1.46.0",
+  "version": "2.1.0",
   "description": "The full SDD method CLI (sdd-cli): init, sync, validate, catalogue build and aggregate, scaffold, plan, pack build and every other method verb for spec-driven-development repositories. The verify-only, author and maintain personas ship as @sdd-method/verify-cli, @sdd-method/author-cli and @sdd-method/maintain-cli.",
   "keywords": [
     "sdd-method",

package/scripts/author-acceptance.mjs

@@ -139,6 +139,8 @@ for (const repo of REPOS) {
   check(`contracts attest @${name}`, repo, () => ["contracts", "attest", "--target-repo", ".", "--refresh"]);
   check(`conformance @${name}`, repo, (_c, ws) => ["conformance", "--target-repo", ".", "--emit-finding", join(ws, "findings")]);
   check(`api-surface @${name}`, repo, (_c, ws) => ["api-surface", "--source", ".", "--out", join(ws, "surface.yaml")]);
+  // Rewrites the SDD's own files to the current vocabulary: must never touch a maintain-only path (the lock, managed payload).
+  check(`migrate vocabulary @${name}`, repo, () => ["migrate", "vocabulary", "--sdd-path", "."]);
   const screens = join(repo, "screens");
   if (existsSync(screens)) {
     const spec = readdirSync(screens).find((f) => f.endsWith(".md"));
@@ -161,7 +163,7 @@ for (const repo of REPOS) {
   void kind;
 }
 
-const SURFACE = ["catalogue check", "generate-briefing", "scaffold domain", "plan", "contracts attest", "conformance", "api-surface", "render screen", "context pull",
+const SURFACE = ["catalogue check", "generate-briefing", "scaffold domain", "plan", "contracts attest", "conformance", "api-surface", "render screen", "context pull", "migrate vocabulary",
   "snapshot fold", "snapshot land", "snapshot verify", "snapshot diff", "snapshot targets", "snapshot advance"];
 const missing = SURFACE.filter((v) => !exercised.has(v));
 process.stdout.write(`COVERAGE exercised: ${[...exercised].join(", ")}\n`);

package/scripts/author-version.json

@@ -1,4 +1,4 @@
 {
-  "version": "0.4.0",
-  "built_against_sdd_cli": "1.46.0"
+  "version": "0.6.0",
+  "built_against_sdd_cli": "2.1.0"
 }

package/scripts/maintain-version.json

@@ -1,4 +1,4 @@
 {
-  "version": "0.5.0",
-  "built_against_sdd_cli": "1.46.0"
+  "version": "0.7.0",
+  "built_against_sdd_cli": "2.1.0"
 }

package/scripts/sync-vendored-script.sh

@@ -44,6 +44,9 @@ VENDORED=(
   "validate-app-docs.sh:scripts"
   "validate-app-dependencies.sh:scripts"
   "validate-integration-docs.sh:scripts"
+  # A path with a slash is relative to the sdd-method root rather than its scripts directory.
+  # The vocabulary renames are data the TypeScript readers load (M-ADR 0222 §4.1).
+  "docs/method/foundations/vocabulary-renames.yaml:src/lib/vocabulary"
 )
 
 if [[ ! -d "$SRC_DIR" ]]; then
@@ -56,7 +59,7 @@ changed=0
 for entry in "${VENDORED[@]}"; do
   name="${entry%%:*}"
   dest_dir="${entry#*:}"
-  src="$SRC_DIR/$name"
+  if [[ "$name" == */* ]]; then src="$SDD_METHOD_PATH/$name"; name="$(basename "$name")"; else src="$SRC_DIR/$name"; fi
   dest="$HERE/../$dest_dir/$name"
 
   if [[ ! -f "$src" ]]; then

package/scripts/validate-app-dependencies.sh

@@ -11,23 +11,23 @@
 #
 # Checks (for each entry in app-platform-dependencies.yaml), split by whether they
 # need a platform surface at all — LOCAL checks run wherever the app repo is:
-#   1.  (local)    required_stability is a valid value (provisional | locked | unknown)
+#   1.  (local)    required_stability is a valid value (provisional | stable | unknown)
 #   2a. (local)    service_id is declared and non-empty
 #   2b. (platform) service_id resolves against the platform source of truth:
 #                  catalogues/services.csv (exact id match) when the catalogue exists,
 #                  else docs/platform/service-architecture.md (word-anchored match)
-#   3a. (local)    a `locked` dependency declares a contract_path at all
+#   3a. (local)    a `stable` dependency declares a contract_path at all
 #   3b. (platform) that contract_path resolves to a file under the platform root
 #
 # Outputs a dependency status table.
-# Used as the Stage 6 agreement gate in the App Exploration Workflow.
+# Used as the Stage 9 agreement gate in the App Exploration Workflow.
 #
 # THE STABILITY VOCABULARY, AND WHY IT IS WHAT IT IS
 #   `required_stability` states the CONSUMING app's expectation of contract
 #   stability. Three values express that:
 #
 #     provisional  the contract may still change; the app tolerates it
-#     locked       the contract is fixed; a contract_path must exist (check 3)
+#     stable       the contract is fixed; a contract_path must exist (check 3)
 #     unknown      the expectation is not determined
 #
 #   `unknown` is accepted because the canonical schema's
@@ -158,7 +158,7 @@ APP_DEPS_FILE="$APP_ROOT/app-platform-dependencies.yaml"
 #   This gate read only the forward file, so an entire equal-status source went
 #   ungated. Measured in one reverse estate: 15 evidence files declaring 65
 #   further dependencies, 38 of them `locked` — precisely the population
-#   a Stage 6 agreement gate exists to check — none of which this gate could see.
+#   a Stage 9 agreement gate exists to check — none of which this gate could see.
 #
 #   A source that the catalogue reads and the gate does not is a coverage gap by
 #   construction, so the gate now reads both.
@@ -180,7 +180,7 @@ PLATFORM_SERVICES_CSV="$PLATFORM_ROOT/catalogues/services.csv"
 # offer (instances app-dependency-stability-vocabulary-forward and -reverse).
 VALID_STABILITY_VALUES=(
     "provisional"  # contract may still change; the app tolerates it
-    "locked"       # contract is fixed; check 3 requires a resolvable contract_path
+    "stable"       # contract is fixed; check 3 requires a resolvable contract_path
     "unknown"      # expectation not determined; no contract_path required
 )
 
@@ -353,6 +353,13 @@ validate_dependency() {
     service_id="$(yq e ".platform_dependencies[$index].service_id // \"\"" "$source_file")"
     contract_type="$(yq e ".platform_dependencies[$index].contract_type // \"\"" "$source_file")"
     required_stability="$(yq e ".platform_dependencies[$index].required_stability // \"\"" "$source_file")"
+    # vocabulary-alias: locked -> stable
+    # The fixed-contract stability class was `locked` (M-ADR 0222 §4.1; docs/method/foundations/vocabulary-renames.yaml).
+    # Read as `stable` for one major release and reported; from sdd-cli 3.0.0 it is invalid.
+    if [[ "$required_stability" == "locked" ]]; then
+        log_warn "$source_file: platform_dependencies[$index] uses the former required_stability 'locked', read as 'stable' (M-ADR 0222 §4.1). Run 'sdd-cli migrate vocabulary'; from sdd-cli 3.0.0 the former value is invalid."
+        required_stability="stable"
+    fi
     contract_path="$(yq e ".platform_dependencies[$index].contract_path // \"\"" "$source_file")"
 
     local dep_label="${service_id:-dep[$index]}"
@@ -403,7 +410,7 @@ validate_dependency() {
         done
 
         if [[ "$stability_deprecated" -eq 1 ]]; then
-            log_fail "$dep_label: required_stability '$required_stability' is not a stability value (M-ADR 0204 §4.4). Declare target_locus: '$required_stability' on the entry and give required_stability a real value (${VALID_STABILITY_VALUES[*]}) — a third-party contract can be locked."
+            log_fail "$dep_label: required_stability '$required_stability' is not a stability value (M-ADR 0204 §4.4). Declare target_locus: '$required_stability' on the entry and give required_stability a real value (${VALID_STABILITY_VALUES[*]}) — a third-party contract can be stable."
             ((dep_errors++))
         else
             log_fail "$dep_label: invalid required_stability '$required_stability' (allowed: ${VALID_STABILITY_VALUES[*]})"
@@ -490,26 +497,26 @@ validate_dependency() {
         ((WARNINGS++))
     fi
 
-    # Check 3: a locked dependency declares a contract_path (3a, local) and that path
-    # resolves to a file (3b, needs the platform). Same split, same reason: "locked
+    # Check 3: a stable dependency declares a contract_path (3a, local) and that path
+    # resolves to a file (3b, needs the platform). Same split, same reason: "stable
     # with no path at all" is an app-repo defect that needs nothing external to catch.
-    if [[ "$required_stability" == "locked" ]]; then
+    if [[ "$required_stability" == "stable" ]]; then
         if [[ -z "$contract_path" || "$contract_path" == "null" ]]; then
-            log_fail "$dep_label: required_stability is 'locked' but contract_path is empty"
+            log_fail "$dep_label: required_stability is 'stable' but contract_path is empty"
             ((dep_errors++))
         elif [[ "$PLATFORM_AVAILABLE" -eq 0 ]]; then
             ((UNRESOLVED_CONTRACT_PATHS++))
         else
             local full_contract_path="$PLATFORM_ROOT/$contract_path"
             if [[ ! -f "$full_contract_path" ]]; then
-                log_fail "$dep_label: locked contract_path '$contract_path' does not exist in platform repo"
+                log_fail "$dep_label: stable contract_path '$contract_path' does not exist in platform repo"
                 ((dep_errors++))
             fi
         fi
     elif [[ "$required_stability" == "provisional" || "$required_stability" == "unknown" ]]; then
         # Neither requires a contract_path. If one is declared it is still worth
         # reporting when it does not resolve — silently accepting a path that
-        # points at nothing is how a locked dependency later inherits a dead path.
+        # points at nothing is how a stable dependency later inherits a dead path.
         if [[ -n "$contract_path" && "$contract_path" != "null" && "$PLATFORM_AVAILABLE" -eq 1 ]]; then
             local full_contract_path="$PLATFORM_ROOT/$contract_path"
             if [[ ! -f "$full_contract_path" ]]; then
@@ -552,21 +559,22 @@ print_status_table() {
         local service_id required_stability contract_type contract_path dep_status
         service_id="$(yq e ".platform_dependencies[$i].service_id // \"(missing)\"" "$source_file")"
         required_stability="$(yq e ".platform_dependencies[$i].required_stability // \"(missing)\"" "$source_file")"
+        if [[ "$required_stability" == "locked" ]]; then required_stability="stable"; fi   # the former name, reported above
         contract_type="$(yq e ".platform_dependencies[$i].contract_type // \"(missing)\"" "$source_file")"
         contract_path="$(yq e ".platform_dependencies[$i].contract_path // \"\"" "$source_file")"
 
         # Determine display status
-        if [[ "$required_stability" == "locked" ]]; then
+        if [[ "$required_stability" == "stable" ]]; then
             if [[ -z "$contract_path" || "$contract_path" == "null" ]]; then
-                dep_status="${RED}LOCKED UNMET${NC}"
+                dep_status="${RED}STABLE UNMET${NC}"
             elif [[ "$PLATFORM_AVAILABLE" -eq 0 ]]; then
                 # A declared path that was never resolved is not "OK" and not "UNMET".
                 # Reporting either would be a claim the run cannot support.
-                dep_status="${YELLOW}LOCKED UNRESOLVED${NC}"
+                dep_status="${YELLOW}STABLE UNRESOLVED${NC}"
             elif [[ -f "$PLATFORM_ROOT/$contract_path" ]]; then
-                dep_status="${GREEN}LOCKED OK${NC}"
+                dep_status="${GREEN}STABLE OK${NC}"
             else
-                dep_status="${RED}LOCKED UNMET${NC}"
+                dep_status="${RED}STABLE UNMET${NC}"
             fi
         elif [[ "$required_stability" == "provisional" ]]; then
             dep_status="${YELLOW}PROVISIONAL${NC}"
@@ -637,7 +645,7 @@ main() {
     fi
 
     if [[ "$FAILURES" -gt 0 ]]; then
-        log_fail "$FAILURES dependency check(s) failed. Stage 6 agreement gate NOT met."
+        log_fail "$FAILURES dependency check(s) failed. Stage 9 agreement gate NOT met."
         exit 1
     fi
 
@@ -648,7 +656,7 @@ main() {
     # while never executing (M-ADR 0200 §4.3).
     if [[ "$PLATFORM_AVAILABLE" -eq 0 ]]; then
         log_warn "Ran check 1 (stability vocabulary) and the local halves of checks 2-3 over $TOTAL_DEPS dependency(ies): $FAILURES failure(s), $WARNINGS warning(s)."
-        log_warn "NOT RUN, for want of --platform-root: $UNRESOLVED_SERVICE_IDS service_id resolution(s) and $UNRESOLVED_CONTRACT_PATHS locked contract_path resolution(s)."
+        log_warn "NOT RUN, for want of --platform-root: $UNRESOLVED_SERVICE_IDS service_id resolution(s) and $UNRESOLVED_CONTRACT_PATHS stable contract_path resolution(s)."
         log_info "This is a partial run, not a met gate — pass --platform-root to complete it."
         exit 0
     fi
@@ -656,7 +664,7 @@ main() {
     if [[ "$WARNINGS" -gt 0 ]]; then
         log_warn "All required checks passed with $WARNINGS warning(s)."
     else
-        log_pass "All dependency checks passed. Stage 6 agreement gate met."
+        log_pass "All dependency checks passed. Stage 9 agreement gate met."
     fi
     exit 0
 }

package/scripts/verify-version.json

@@ -1,4 +1,4 @@
 {
-  "version": "1.5.0",
-  "built_against_sdd_cli": "1.46.0"
+  "version": "2.1.0",
+  "built_against_sdd_cli": "2.1.0"
 }