@warnyin/sdlc 0.1.0 → 0.2.0

package/payload/hooks/inject-context.mjs

@@ -1,55 +1,55 @@
-#!/usr/bin/env node
-// SessionStart hook — THE static-context loader. Emits (hard cap 60 lines):
-//   constitution + every `inclusion: always` steering file + a one-line
-//   pointer to the active change. Everything else stays dynamic.
-// Journals what was injected so /sdlc:observe can price residency honestly.
-
-import fs from 'node:fs';
-import path from 'node:path';
-import process from 'node:process';
-import { resolveRoots, readStdinJson, activeChange, appendJournal } from './_shared.mjs';
-import { parseFrontmatter } from './lib/frontmatter.mjs';
-import { CAPS } from './lib/caps.mjs';
-
-const { sdlcRoot } = resolveRoots(import.meta.url);
-
-async function main() {
-  await readStdinJson(); // drain; content not needed
-  if (!fs.existsSync(sdlcRoot)) return;
-
-  const injected = [];
-  const out = [];
-
-  const constitutionPath = path.join(sdlcRoot, 'context', 'constitution.md');
-  if (fs.existsSync(constitutionPath)) {
-    out.push(fs.readFileSync(constitutionPath, 'utf8').trim());
-    injected.push('context/constitution.md');
-  }
-
-  const steeringDir = path.join(sdlcRoot, 'context', 'steering');
-  if (fs.existsSync(steeringDir)) {
-    for (const f of fs.readdirSync(steeringDir).filter((n) => n.endsWith('.md')).sort()) {
-      const raw = fs.readFileSync(path.join(steeringDir, f), 'utf8');
-      const { data, body } = parseFrontmatter(raw);
-      if (data.inclusion !== 'always') continue;
-      out.push(body.trim());
-      injected.push(`context/steering/${f}`);
-    }
-  }
-
-  const active = activeChange(sdlcRoot);
-  if (active) out.push(`Active change: sdlc/changes/${active}/change.md — run /sdlc:next for status.`);
-
-  if (!out.length) return;
-
-  let lines = out.join('\n\n').split('\n');
-  if (lines.length > CAPS.alwaysBudget) {
-    lines = lines.slice(0, CAPS.alwaysBudget);
-    lines.push(`[sdlc] static context truncated at ${CAPS.alwaysBudget} lines — run /sdlc:steer to distill (validate also flags this).`);
-  }
-  console.log(lines.join('\n'));
-
-  appendJournal(sdlcRoot, active, { event: 'inject', files: injected, lines: lines.length });
-}
-
-main().catch(() => process.exit(0)); // fail open
+#!/usr/bin/env node
+// SessionStart hook — THE static-context loader. Emits (hard cap 60 lines):
+//   constitution + every `inclusion: always` steering file + a one-line
+//   pointer to the active change. Everything else stays dynamic.
+// Journals what was injected so /sdlc:observe can price residency honestly.
+
+import fs from 'node:fs';
+import path from 'node:path';
+import process from 'node:process';
+import { resolveRoots, readStdinJson, activeChange, appendJournal } from './_shared.mjs';
+import { parseFrontmatter } from './lib/frontmatter.mjs';
+import { CAPS } from './lib/caps.mjs';
+
+const { sdlcRoot } = resolveRoots(import.meta.url);
+
+async function main() {
+  await readStdinJson(); // drain; content not needed
+  if (!fs.existsSync(sdlcRoot)) return;
+
+  const injected = [];
+  const out = [];
+
+  const constitutionPath = path.join(sdlcRoot, 'context', 'constitution.md');
+  if (fs.existsSync(constitutionPath)) {
+    out.push(fs.readFileSync(constitutionPath, 'utf8').trim());
+    injected.push('context/constitution.md');
+  }
+
+  const steeringDir = path.join(sdlcRoot, 'context', 'steering');
+  if (fs.existsSync(steeringDir)) {
+    for (const f of fs.readdirSync(steeringDir).filter((n) => n.endsWith('.md')).sort()) {
+      const raw = fs.readFileSync(path.join(steeringDir, f), 'utf8');
+      const { data, body } = parseFrontmatter(raw);
+      if (data.inclusion !== 'always') continue;
+      out.push(body.trim());
+      injected.push(`context/steering/${f}`);
+    }
+  }
+
+  const active = activeChange(sdlcRoot);
+  if (active) out.push(`Active change: sdlc/changes/${active}/change.md — run /sdlc:next for status.`);
+
+  if (!out.length) return;
+
+  let lines = out.join('\n\n').split('\n');
+  if (lines.length > CAPS.alwaysBudget) {
+    lines = lines.slice(0, CAPS.alwaysBudget);
+    lines.push(`[sdlc] static context truncated at ${CAPS.alwaysBudget} lines — run /sdlc:steer to distill (validate also flags this).`);
+  }
+  console.log(lines.join('\n'));
+
+  appendJournal(sdlcRoot, active, { event: 'inject', files: injected, lines: lines.length });
+}
+
+main().catch(() => process.exit(0)); // fail open

package/payload/hooks/journal.mjs

@@ -1,58 +1,58 @@
-#!/usr/bin/env node
-// Gate + journal utility. Called by playbooks (sanctioned phase transitions)
-// and wired as the PreCompact hook (`journal.mjs note compact`).
-//
-//   node sdlc/.hooks/journal.mjs open-ship <change-id>   unlock specs/archive writes (TTL 30m)
-//   node sdlc/.hooks/journal.mjs open-steer              unlock constitution edits (TTL 30m)
-//   node sdlc/.hooks/journal.mjs close                   close any open gate
-//   node sdlc/.hooks/journal.mjs set-active <change-id>  attribute sessions/events to a change
-//   node sdlc/.hooks/journal.mjs note <name> [k=v ...]   append a journal event
-
-import fs from 'node:fs';
-import path from 'node:path';
-import process from 'node:process';
-import {
-  resolveRoots, readStdinJson, writePhase, clearPhase, activeChange, appendJournal,
-} from './_shared.mjs';
-
-const { sdlcRoot } = resolveRoots(import.meta.url);
-
-async function main() {
-  const [cmd, ...rest] = process.argv.slice(2);
-
-  if (cmd === 'open-ship') {
-    const change = rest[0];
-    if (!change) { console.error('usage: journal.mjs open-ship <change-id>'); process.exit(2); }
-    const phase = writePhase(sdlcRoot, { phase: 'ship', change });
-    appendJournal(sdlcRoot, change, { event: 'gate', gate: 'ship', action: 'open', expires: phase.expires });
-    console.log(`ship gate open for "${change}" until ${phase.expires}`);
-  } else if (cmd === 'open-steer') {
-    const phase = writePhase(sdlcRoot, { phase: 'steer' });
-    appendJournal(sdlcRoot, null, { event: 'gate', gate: 'steer', action: 'open', expires: phase.expires });
-    console.log(`steer gate open until ${phase.expires}`);
-  } else if (cmd === 'close') {
-    clearPhase(sdlcRoot);
-    console.log('gate closed');
-  } else if (cmd === 'set-active') {
-    const change = rest[0];
-    if (!change) { console.error('usage: journal.mjs set-active <change-id>'); process.exit(2); }
-    fs.mkdirSync(path.join(sdlcRoot, '.state'), { recursive: true });
-    fs.writeFileSync(path.join(sdlcRoot, '.state', 'active.json'), JSON.stringify({ change }));
-    console.log(`active change: ${change}`);
-  } else if (cmd === 'note') {
-    // When used as a hook, drain stdin so the harness never blocks on us.
-    if (!process.stdin.isTTY) await readStdinJson();
-    const name = rest[0] ?? 'note';
-    const extra = {};
-    for (const kv of rest.slice(1)) {
-      const [k, ...v] = kv.split('=');
-      if (k && v.length) extra[k] = v.join('=');
-    }
-    appendJournal(sdlcRoot, activeChange(sdlcRoot), { event: name, ...extra });
-  } else {
-    console.error('usage: journal.mjs open-ship|open-steer|close|set-active|note ...');
-    process.exit(2);
-  }
-}
-
-main().catch(() => process.exit(0)); // fail open
+#!/usr/bin/env node
+// Gate + journal utility. Called by playbooks (sanctioned phase transitions)
+// and wired as the PreCompact hook (`journal.mjs note compact`).
+//
+//   node sdlc/.hooks/journal.mjs open-ship <change-id>   unlock specs/archive writes (TTL 30m)
+//   node sdlc/.hooks/journal.mjs open-steer              unlock constitution edits (TTL 30m)
+//   node sdlc/.hooks/journal.mjs close                   close any open gate
+//   node sdlc/.hooks/journal.mjs set-active <change-id>  attribute sessions/events to a change
+//   node sdlc/.hooks/journal.mjs note <name> [k=v ...]   append a journal event
+
+import fs from 'node:fs';
+import path from 'node:path';
+import process from 'node:process';
+import {
+  resolveRoots, readStdinJson, writePhase, clearPhase, activeChange, appendJournal,
+} from './_shared.mjs';
+
+const { sdlcRoot } = resolveRoots(import.meta.url);
+
+async function main() {
+  const [cmd, ...rest] = process.argv.slice(2);
+
+  if (cmd === 'open-ship') {
+    const change = rest[0];
+    if (!change) { console.error('usage: journal.mjs open-ship <change-id>'); process.exit(2); }
+    const phase = writePhase(sdlcRoot, { phase: 'ship', change });
+    appendJournal(sdlcRoot, change, { event: 'gate', gate: 'ship', action: 'open', expires: phase.expires });
+    console.log(`ship gate open for "${change}" until ${phase.expires}`);
+  } else if (cmd === 'open-steer') {
+    const phase = writePhase(sdlcRoot, { phase: 'steer' });
+    appendJournal(sdlcRoot, null, { event: 'gate', gate: 'steer', action: 'open', expires: phase.expires });
+    console.log(`steer gate open until ${phase.expires}`);
+  } else if (cmd === 'close') {
+    clearPhase(sdlcRoot);
+    console.log('gate closed');
+  } else if (cmd === 'set-active') {
+    const change = rest[0];
+    if (!change) { console.error('usage: journal.mjs set-active <change-id>'); process.exit(2); }
+    fs.mkdirSync(path.join(sdlcRoot, '.state'), { recursive: true });
+    fs.writeFileSync(path.join(sdlcRoot, '.state', 'active.json'), JSON.stringify({ change }));
+    console.log(`active change: ${change}`);
+  } else if (cmd === 'note') {
+    // When used as a hook, drain stdin so the harness never blocks on us.
+    if (!process.stdin.isTTY) await readStdinJson();
+    const name = rest[0] ?? 'note';
+    const extra = {};
+    for (const kv of rest.slice(1)) {
+      const [k, ...v] = kv.split('=');
+      if (k && v.length) extra[k] = v.join('=');
+    }
+    appendJournal(sdlcRoot, activeChange(sdlcRoot), { event: name, ...extra });
+  } else {
+    console.error('usage: journal.mjs open-ship|open-steer|close|set-active|note ...');
+    process.exit(2);
+  }
+}
+
+main().catch(() => process.exit(0)); // fail open

package/payload/hooks/session-summary.mjs

@@ -1,50 +1,50 @@
-#!/usr/bin/env node
-// Stop hook — the observability tap. Parses the session transcript's real
-// usage numbers, attributes them to the active change, appends a `session`
-// journal event, and prints a one-line summary. Cost is computed only when
-// sdlc/config.yaml provides a price table — otherwise reported as n/a.
-
-import fs from 'node:fs';
-import path from 'node:path';
-import process from 'node:process';
-import { resolveRoots, readStdinJson, activeChange, appendJournal } from './_shared.mjs';
-import { parseTranscriptUsage, costUsd } from './lib/usage.mjs';
-import { parseConfig } from './lib/config.mjs';
-
-const { sdlcRoot } = resolveRoots(import.meta.url);
-
-const fmt = (n) => (n >= 1_000_000 ? `${(n / 1_000_000).toFixed(1)}M`
-  : n >= 1_000 ? `${(n / 1_000).toFixed(1)}k` : String(n));
-
-async function main() {
-  const input = await readStdinJson();
-  const transcriptPath = input?.transcript_path;
-  if (!transcriptPath || !fs.existsSync(transcriptPath) || !fs.existsSync(sdlcRoot)) return;
-
-  const usage = parseTranscriptUsage(fs.readFileSync(transcriptPath, 'utf8'));
-  if (!usage.totals.input && !usage.totals.output) return;
-
-  let prices = null;
-  try {
-    prices = parseConfig(fs.readFileSync(path.join(sdlcRoot, 'config.yaml'), 'utf8')).prices;
-  } catch { /* no config, no cost */ }
-  const usd = costUsd(usage, prices);
-
-  const change = activeChange(sdlcRoot);
-  appendJournal(sdlcRoot, change, {
-    event: 'session',
-    session: input?.session_id ?? null,
-    totals: usage.totals,
-    models: usage.models,
-    costUsd: usd,
-  });
-
-  const t = usage.totals;
-  console.log(
-    `[sdlc] session: ${fmt(t.input)} in / ${fmt(t.output)} out / ${fmt(t.cacheRead)} cache-read`
-    + ` · cost ${usd == null ? 'n/a' : `$${usd}`}`
-    + (change ? ` · change ${change}` : ''),
-  );
-}
-
-main().catch(() => process.exit(0)); // fail open
+#!/usr/bin/env node
+// Stop hook — the observability tap. Parses the session transcript's real
+// usage numbers, attributes them to the active change, appends a `session`
+// journal event, and prints a one-line summary. Cost is computed only when
+// sdlc/config.yaml provides a price table — otherwise reported as n/a.
+
+import fs from 'node:fs';
+import path from 'node:path';
+import process from 'node:process';
+import { resolveRoots, readStdinJson, activeChange, appendJournal } from './_shared.mjs';
+import { parseTranscriptUsage, costUsd } from './lib/usage.mjs';
+import { parseConfig } from './lib/config.mjs';
+
+const { sdlcRoot } = resolveRoots(import.meta.url);
+
+const fmt = (n) => (n >= 1_000_000 ? `${(n / 1_000_000).toFixed(1)}M`
+  : n >= 1_000 ? `${(n / 1_000).toFixed(1)}k` : String(n));
+
+async function main() {
+  const input = await readStdinJson();
+  const transcriptPath = input?.transcript_path;
+  if (!transcriptPath || !fs.existsSync(transcriptPath) || !fs.existsSync(sdlcRoot)) return;
+
+  const usage = parseTranscriptUsage(fs.readFileSync(transcriptPath, 'utf8'));
+  if (!usage.totals.input && !usage.totals.output) return;
+
+  let prices = null;
+  try {
+    prices = parseConfig(fs.readFileSync(path.join(sdlcRoot, 'config.yaml'), 'utf8')).prices;
+  } catch { /* no config, no cost */ }
+  const usd = costUsd(usage, prices);
+
+  const change = activeChange(sdlcRoot);
+  appendJournal(sdlcRoot, change, {
+    event: 'session',
+    session: input?.session_id ?? null,
+    totals: usage.totals,
+    models: usage.models,
+    costUsd: usd,
+  });
+
+  const t = usage.totals;
+  console.log(
+    `[sdlc] session: ${fmt(t.input)} in / ${fmt(t.output)} out / ${fmt(t.cacheRead)} cache-read`
+    + ` · cost ${usd == null ? 'n/a' : `$${usd}`}`
+    + (change ? ` · change ${change}` : ''),
+  );
+}
+
+main().catch(() => process.exit(0)); // fail open

package/payload/hooks/validate-artifact.mjs

@@ -1,80 +1,80 @@
-#!/usr/bin/env node
-// PostToolUse hook — two token-lean feedback loops:
-//  (a) a write under sdlc/  → targeted structural validation, warnings back
-//      to the model as additionalContext (fix drift the moment it happens);
-//  (b) a source-file write matching a steering pathMatch → emit a POINTER to
-//      that steering file, once per session (a pointer, never the content —
-//      dynamic context loading at near-zero cost). Hits are journaled so the
-//      learner can expire steering that never fires.
-
-import fs from 'node:fs';
-import path from 'node:path';
-import process from 'node:process';
-import { resolveRoots, readStdinJson, activeChange, appendJournal, toPosixRel } from './_shared.mjs';
-import { parseFrontmatter } from './lib/frontmatter.mjs';
-import { matchGlob } from './lib/glob.mjs';
-import { validateChange, validateContext, formatIssues } from './lib/validate.mjs';
-
-const { sdlcRoot, projectRoot } = resolveRoots(import.meta.url);
-
-function respond(context) {
-  console.log(JSON.stringify({
-    hookSpecificOutput: { hookEventName: 'PostToolUse', additionalContext: context },
-  }));
-}
-
-function validateSdlcWrite(rel) {
-  let issues = [];
-  const changeMatch = rel.match(/^sdlc\/changes\/([^/]+)\//);
-  if (changeMatch && changeMatch[1] !== 'archive') {
-    issues = validateChange(path.join(sdlcRoot, 'changes', changeMatch[1]), {
-      specsDir: path.join(sdlcRoot, 'specs'),
-    });
-  } else if (rel.startsWith('sdlc/context/') || rel === 'sdlc/harness.md') {
-    issues = validateContext(sdlcRoot);
-  }
-  if (issues.length) {
-    respond(`[sdlc validate]\n${formatIssues(issues)}\nFix errors before moving to the next stage.`);
-  }
-}
-
-function steeringPointer(rel, sessionId) {
-  const steeringDir = path.join(sdlcRoot, 'context', 'steering');
-  if (!fs.existsSync(steeringDir)) return;
-
-  const safeSession = String(sessionId ?? '').replace(/[^A-Za-z0-9_-]/g, '') || 'nosession';
-  const seenPath = path.join(sdlcRoot, '.state', `pointers-${safeSession}.json`);
-  let seen = [];
-  try { seen = JSON.parse(fs.readFileSync(seenPath, 'utf8')); } catch { /* first hit */ }
-
-  const hits = [];
-  for (const f of fs.readdirSync(steeringDir).filter((n) => n.endsWith('.md')).sort()) {
-    const { data } = parseFrontmatter(fs.readFileSync(path.join(steeringDir, f), 'utf8'));
-    if (data.inclusion !== 'paths' || !Array.isArray(data.pathMatch)) continue;
-    if (!matchGlob(rel, data.pathMatch)) continue;
-    appendJournal(sdlcRoot, activeChange(sdlcRoot), { event: 'pointer', steering: f, file: rel });
-    if (!seen.includes(f)) hits.push(f);
-  }
-  if (!hits.length) return;
-
-  fs.mkdirSync(path.dirname(seenPath), { recursive: true });
-  fs.writeFileSync(seenPath, JSON.stringify([...seen, ...hits]));
-  respond(
-    'Steering applies to this area — read before editing further: '
-    + hits.map((f) => `sdlc/context/steering/${f}`).join(', '),
-  );
-}
-
-async function main() {
-  const input = await readStdinJson();
-  const filePath = input?.tool_input?.file_path;
-  if (!filePath || !fs.existsSync(sdlcRoot)) return;
-
-  const rel = toPosixRel(projectRoot, path.resolve(projectRoot, filePath));
-  if (!rel) return;
-
-  if (rel.startsWith('sdlc/')) validateSdlcWrite(rel);
-  else steeringPointer(rel, input?.session_id);
-}
-
-main().catch(() => process.exit(0)); // fail open
+#!/usr/bin/env node
+// PostToolUse hook — two token-lean feedback loops:
+//  (a) a write under sdlc/  → targeted structural validation, warnings back
+//      to the model as additionalContext (fix drift the moment it happens);
+//  (b) a source-file write matching a steering pathMatch → emit a POINTER to
+//      that steering file, once per session (a pointer, never the content —
+//      dynamic context loading at near-zero cost). Hits are journaled so the
+//      learner can expire steering that never fires.
+
+import fs from 'node:fs';
+import path from 'node:path';
+import process from 'node:process';
+import { resolveRoots, readStdinJson, activeChange, appendJournal, toPosixRel } from './_shared.mjs';
+import { parseFrontmatter } from './lib/frontmatter.mjs';
+import { matchGlob } from './lib/glob.mjs';
+import { validateChange, validateContext, formatIssues } from './lib/validate.mjs';
+
+const { sdlcRoot, projectRoot } = resolveRoots(import.meta.url);
+
+function respond(context) {
+  console.log(JSON.stringify({
+    hookSpecificOutput: { hookEventName: 'PostToolUse', additionalContext: context },
+  }));
+}
+
+function validateSdlcWrite(rel) {
+  let issues = [];
+  const changeMatch = rel.match(/^sdlc\/changes\/([^/]+)\//);
+  if (changeMatch && changeMatch[1] !== 'archive') {
+    issues = validateChange(path.join(sdlcRoot, 'changes', changeMatch[1]), {
+      specsDir: path.join(sdlcRoot, 'specs'),
+    });
+  } else if (rel.startsWith('sdlc/context/') || rel === 'sdlc/harness.md') {
+    issues = validateContext(sdlcRoot);
+  }
+  if (issues.length) {
+    respond(`[sdlc validate]\n${formatIssues(issues)}\nFix errors before moving to the next stage.`);
+  }
+}
+
+function steeringPointer(rel, sessionId) {
+  const steeringDir = path.join(sdlcRoot, 'context', 'steering');
+  if (!fs.existsSync(steeringDir)) return;
+
+  const safeSession = String(sessionId ?? '').replace(/[^A-Za-z0-9_-]/g, '') || 'nosession';
+  const seenPath = path.join(sdlcRoot, '.state', `pointers-${safeSession}.json`);
+  let seen = [];
+  try { seen = JSON.parse(fs.readFileSync(seenPath, 'utf8')); } catch { /* first hit */ }
+
+  const hits = [];
+  for (const f of fs.readdirSync(steeringDir).filter((n) => n.endsWith('.md')).sort()) {
+    const { data } = parseFrontmatter(fs.readFileSync(path.join(steeringDir, f), 'utf8'));
+    if (data.inclusion !== 'paths' || !Array.isArray(data.pathMatch)) continue;
+    if (!matchGlob(rel, data.pathMatch)) continue;
+    appendJournal(sdlcRoot, activeChange(sdlcRoot), { event: 'pointer', steering: f, file: rel });
+    if (!seen.includes(f)) hits.push(f);
+  }
+  if (!hits.length) return;
+
+  fs.mkdirSync(path.dirname(seenPath), { recursive: true });
+  fs.writeFileSync(seenPath, JSON.stringify([...seen, ...hits]));
+  respond(
+    'Steering applies to this area — read before editing further: '
+    + hits.map((f) => `sdlc/context/steering/${f}`).join(', '),
+  );
+}
+
+async function main() {
+  const input = await readStdinJson();
+  const filePath = input?.tool_input?.file_path;
+  if (!filePath || !fs.existsSync(sdlcRoot)) return;
+
+  const rel = toPosixRel(projectRoot, path.resolve(projectRoot, filePath));
+  if (!rel) return;
+
+  if (rel.startsWith('sdlc/')) validateSdlcWrite(rel);
+  else steeringPointer(rel, input?.session_id);
+}
+
+main().catch(() => process.exit(0)); // fail open

package/payload/playbook/README.md

@@ -1,30 +1,30 @@
-# @warnyin/sdlc playbook
-
-One change = one folder in `sdlc/changes/<id>/` moving through:
-
-```
-new → [design] → contract → build → verify → [review] → ship
-```
-
-| Command | Day-1 phase | Reads | Writes | Gate (automatic unless noted) |
-|---|---|---|---|---|
-| /sdlc:init | Configure harness | interview | constitution, harness.md | human approves (once) |
-| /sdlc:auto | whole loop | — | everything below | escalation only |
-| /sdlc:new | Requirements | specs Purpose headers | change.md | validator: delta + assumptions |
-| /sdlc:design | Architecture | change + touched specs | change.md § Design | escalate irreversible only |
-| /sdlc:contract | Contract-first | change.md | contract/*, failing tests | adversarial panel + validator |
-| /sdlc:build | Run harness | change + contract + steering | code, task boxes | tasks done; specs locked by hook |
-| /sdlc:verify | Feedback loop | contract | journal events | tests green AND evals ≥ bar |
-| /sdlc:review | Review | diff + change | findings in change.md | blockers = 0 |
-| /sdlc:ship | Ship | change | specs merge, archive, digest | validate --strict; policy may require human |
-| /sdlc:observe | Observe | journals | report (chat) | — |
-| /sdlc:converge | Maintenance | specs + code | proposed change | — |
-| /sdlc:steer | Configure | context/ | steering, constitution | always-budget ≤ 60 |
-| /sdlc:next | — | status | chat only | — |
-
-Statuses: `new → contracted → building → verified → shipped`. Tiers: `vibe | standard | deep`
-(triage table + Autonomy policy live in `sdlc/harness.md`).
-
-Doctrine: `principles.md` (factory model, anti-garbage), `context.md` (static/dynamic),
-`routing.md` (model tiers). Non-Claude harnesses: `rules-card.md` is embedded in your
-tool's rules file; `npx @warnyin/sdlc validate` is the enforcement floor.
+# @warnyin/sdlc playbook
+
+One change = one folder in `sdlc/changes/<id>/` moving through:
+
+```
+new → [design] → contract → build → verify → [review] → ship
+```
+
+| Command | Day-1 phase | Reads | Writes | Gate (automatic unless noted) |
+|---|---|---|---|---|
+| /sdlc:init | Configure harness | interview | constitution, harness.md | human approves (once) |
+| /sdlc:auto | whole loop | — | everything below | escalation only |
+| /sdlc:new | Requirements | specs Purpose headers | change.md | validator: delta + assumptions |
+| /sdlc:design | Architecture | change + touched specs | change.md § Design | escalate irreversible only |
+| /sdlc:contract | Contract-first | change.md | contract/*, failing tests | adversarial panel + validator |
+| /sdlc:build | Run harness | change + contract + steering | code, task boxes | tasks done; specs locked by hook |
+| /sdlc:verify | Feedback loop | contract | journal events | tests green AND evals ≥ bar |
+| /sdlc:review | Review | diff + change | findings in change.md | blockers = 0 |
+| /sdlc:ship | Ship | change | specs merge, archive, digest | validate --strict; policy may require human |
+| /sdlc:observe | Observe | journals | report (chat) | — |
+| /sdlc:converge | Maintenance | specs + code | proposed change | — |
+| /sdlc:steer | Configure | context/ | steering, constitution | always-budget ≤ 60 |
+| /sdlc:next | — | status | chat only | — |
+
+Statuses: `new → contracted → building → verified → shipped`. Tiers: `vibe | standard | deep`
+(triage table + Autonomy policy live in `sdlc/harness.md`).
+
+Doctrine: `principles.md` (factory model, anti-garbage), `context.md` (static/dynamic),
+`routing.md` (model tiers). Non-Claude harnesses: `rules-card.md` is embedded in your
+tool's rules file; `npx @warnyin/sdlc validate` is the enforcement floor.

package/payload/playbook/auto.md

@@ -1,21 +1,21 @@
-# /sdlc:auto <title> — the whole pipeline, one command
-
-Runs new → [design] → contract → build → verify → [review] → ship, each stage by
-its own playbook, WITHOUT pausing for the human except on the Autonomy-policy
-escalation conditions:
-
-- hard-floor surface (security, payments, data-loss, irreversible),
-- a `[NEEDS CLARIFICATION]` the agent cannot resolve alone,
-- verify failed more than 3 rounds,
-- token budget exceeded (if the user set one),
-- ship policy requires human approval (deep tier).
-
-Rules:
-- Announce the plan in ≤3 lines after triage (id, tier, task count), then work.
-- Between stages run `npx @warnyin/sdlc validate <id>` — a red validator is a
-  hard stop for that stage, not a suggestion.
-- On escalation: stop at the exact step, state what is needed in ≤5 lines, wait.
-  When the human answers, resume from that step — never restart the pipeline.
-- On completion report one line: shipped + digest path + total cost if known.
-
-This is orchestrator mode: the human describes the outcome and walks away.
+# /sdlc:auto <title> — the whole pipeline, one command
+
+Runs new → [design] → contract → build → verify → [review] → ship, each stage by
+its own playbook, WITHOUT pausing for the human except on the Autonomy-policy
+escalation conditions:
+
+- hard-floor surface (security, payments, data-loss, irreversible),
+- a `[NEEDS CLARIFICATION]` the agent cannot resolve alone,
+- verify failed more than 3 rounds,
+- token budget exceeded (if the user set one),
+- ship policy requires human approval (deep tier).
+
+Rules:
+- Announce the plan in ≤3 lines after triage (id, tier, task count), then work.
+- Between stages run `npx @warnyin/sdlc validate <id>` — a red validator is a
+  hard stop for that stage, not a suggestion.
+- On escalation: stop at the exact step, state what is needed in ≤5 lines, wait.
+  When the human answers, resume from that step — never restart the pipeline.
+- On completion report one line: shipped + digest path + total cost if known.
+
+This is orchestrator mode: the human describes the outcome and walks away.

package/payload/playbook/build.md

@@ -1,23 +1,23 @@
-# /sdlc:build <id> — implement (Run the harness)
-
-Precondition: status ≥ contracted (vibe tier is exempt from contracts).
-Set `status: building`.
-
-Mode by size:
-- **Conductor** (≤2 tasks): implement in this session, task by task.
-- **Orchestrator** (>2 tasks): fan out one `sdlc-builder` subagent per task in a
-  `[P]` wave; serialize between dependent waves. Each builder receives ONLY:
-  its task line, `contract/tests.md`, the touched capability's spec, and steering
-  matching its file area — never the whole change history.
-
-Rules for whoever implements:
-- Follow steering pointers the moment the PostToolUse hook emits them.
-- Never edit `sdlc/specs/**`, archive, journals, or lint/test configs to go
-  green — hooks deny the first two; the rest is the config-protection rule.
-- Per-task self-check = that task's tests + lint only; the full test run belongs
-  to /sdlc:verify (moved, not removed).
-- Tick `- [x]` in `## Tasks` as each task lands; note surprises in one line max.
-- Honor `[tier:x]` markers when delegating (see routing.md).
-
-Done when all tasks are ticked and the code compiles/lints.
-`node sdlc/.hooks/journal.mjs note build tasks=<n>` then → /sdlc:verify.
+# /sdlc:build <id> — implement (Run the harness)
+
+Precondition: status ≥ contracted (vibe tier is exempt from contracts).
+Set `status: building`.
+
+Mode by size:
+- **Conductor** (≤2 tasks): implement in this session, task by task.
+- **Orchestrator** (>2 tasks): fan out one `sdlc-builder` subagent per task in a
+  `[P]` wave; serialize between dependent waves. Each builder receives ONLY:
+  its task line, `contract/tests.md`, the touched capability's spec, and steering
+  matching its file area — never the whole change history.
+
+Rules for whoever implements:
+- Follow steering pointers the moment the PostToolUse hook emits them.
+- Never edit `sdlc/specs/**`, archive, journals, or lint/test configs to go
+  green — hooks deny the first two; the rest is the config-protection rule.
+- Per-task self-check = that task's tests + lint only; the full test run belongs
+  to /sdlc:verify (moved, not removed).
+- Tick `- [x]` in `## Tasks` as each task lands; note surprises in one line max.
+- Honor `[tier:x]` markers when delegating (see routing.md).
+
+Done when all tasks are ticked and the code compiles/lints.
+`node sdlc/.hooks/journal.mjs note build tasks=<n>` then → /sdlc:verify.