cyber-sdd 0.4.1 → 0.4.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cyber-sdd",
-  "version": "0.4.1",
+  "version": "0.4.2",
   "description": "Spec-Driven Development. Scaffold, validate, and maintain behavioral specs (spec.md + .feature files) for software features.",
   "repository": {
     "type": "git",
@@ -33,6 +33,7 @@
   },
   "scripts": {
     "build": "tsdown",
+    "build:vendor": "tsdown -c tsdown.vendor.config.ts",
     "check:spec": "node ./skills/check-project-specs/scripts/check-project-specs.mts",
     "test": "node --test \"skills/*/scripts/*.test.mts\"",
     "typecheck": "tsc -p tsconfig.json"

package/skills/spec-gate/README.md

@@ -24,3 +24,12 @@ References `sdd:lifecycle-governance`, `sdd:ownership-governance`, `sdd:gate-val
   reconcile); run via `pnpm verify:specs-new`. Tested by `check-spec-state.test.mts`.
 - `check-suite.mts` — deterministic `.feature`-form validator (Gherkin validity, boolean-`Then`
   form, scenario ordering); run via `pnpm verify:specs-new`. Tested by `check-suite.test.mts`.
+  It imports gherkin-cli from `../vendor/gherkin-cli.mjs`, a committed self-contained bundle, so it
+  runs from an installed plugin, which has no `node_modules`. `pnpm build:vendor` rebuilds the
+  bundle; `check-suite-installed.test.mts` runs the engine from a copy of the plugin's files and
+  fails while the bundle is stale.
+- `classify-edit-class.mts` — the structural edit-class classifier for touched frozen `.feature`
+  files. It imports the same `../vendor/gherkin-cli.mjs` bundle; `classify-edit-class-installed.test.mts`
+  runs it from a copy of the plugin's files.
+- `vendor/gherkin-cli.mjs` is shared: `touch-set-correction` and `verify-scenarios` import it from
+  here too, so the plugin ships one copy.

package/skills/spec-gate/scripts/check-suite.mts

@@ -6,7 +6,8 @@
 import { type Dirent, readdirSync, readFileSync, realpathSync } from 'node:fs'
 import { basename, dirname, join } from 'node:path'
 import { pathToFileURL } from 'node:url'
-import { validate } from 'gherkin-cli'
+// The bundled copy, not the package: an installed plugin has no node_modules to resolve it from.
+import { validate } from '../vendor/gherkin-cli.mjs'
 
 // ─── types ────────────────────────────────────────────────────────────────────
 

package/skills/spec-gate/scripts/classify-edit-class.mts

@@ -36,7 +36,7 @@ import { execFileSync } from 'node:child_process'
 import { readFileSync, realpathSync } from 'node:fs'
 import { dirname, join, relative, resolve, sep } from 'node:path'
 import { pathToFileURL } from 'node:url'
-import { GitError, diff as gherkinDiff, type ReadsGitDiff } from 'gherkin-cli'
+import { GitError, diff as gherkinDiff, type ReadsGitDiff } from '../vendor/gherkin-cli.mjs'
 
 // ─── types ────────────────────────────────────────────────────────────────────
 

package/skills/spec-gate/vendor/gherkin-cli.d.mts

@@ -0,0 +1,2 @@
+// Types for the bundled gherkin-cli beside this file: the same module, so the same types.
+export * from 'gherkin-cli'