cyber-sdd 0.6.0 → 0.7.0

package/skills/collision-ladder/scripts/collision-ladder.mjs

@@ -0,0 +1,12 @@
+// Launcher for the engine of the same name. Run it as `node <skill>/scripts/<engine>.mjs`.
+// A checkout runs the .mts source. An npm install keeps the skill under node_modules, where Node
+// will not strip types, so it runs the self-contained bundle built for the package.
+import { spawnSync } from 'node:child_process'
+import { fileURLToPath } from 'node:url'
+
+const self = fileURLToPath(import.meta.url)
+const installed = /[\\/]node_modules[\\/]/.test(self)
+const target = self.replace(/\.mjs$/, installed ? '.bundle.mjs' : '.mts')
+const run = spawnSync(process.execPath, [...process.execArgv, target, ...process.argv.slice(2)], { stdio: 'inherit' })
+if (run.error) throw run.error
+process.exitCode = run.status ?? 1

package/skills/collision-ladder/scripts/collision-ladder.mts

@@ -572,8 +572,10 @@ function readStdin(): string {
 	}
 }
 
-const HERE = dirname(fileURLToPath(import.meta.url))
-const DISCOVER_SPECS_PATH = join(HERE, '..', '..', 'discover-specs', 'scripts', 'discover-specs.mts')
+const HERE = fileURLToPath(import.meta.url)
+// A bundle (built for npm, where Node will not strip types) runs its sibling engines as bundles too.
+const ENGINE_EXT = HERE.endsWith('.mts') ? '.mts' : '.bundle.mjs'
+const DISCOVER_SPECS_PATH = join(dirname(HERE), '..', '..', 'discover-specs', 'scripts', `discover-specs${ENGINE_EXT}`)
 
 interface DiscoveredSpec {
 	path: string

package/skills/combat-log-governance/SKILL.md

@@ -92,7 +92,7 @@ field.
 ### `report` — per-subagent dispatch (combat log)
 
 ```jsonl
-{"seq": 3, "ts": "2026-06-28T18:30:11Z", "handle": "unional", "kind": "report", "role": "spec-producer", "agent": "sdd:automaton", "outcome": "pass", "summary": "wrote 14 scenarios covering the ledger expansion"}
+{"seq": 3, "ts": "2026-06-28T18:30:11Z", "handle": "unional", "kind": "report", "role": "spec-producer", "agent": "sdd:sdd-automaton", "outcome": "pass", "summary": "wrote 14 scenarios covering the ledger expansion"}
 ```
 
 `role` is the production role dispatched; `agent` is the plugin-qualified agent name; `outcome` is

package/skills/concept-index/README.md

@@ -5,8 +5,8 @@ every node's `concept:` frontmatter and renders the **by-concept view** into the
 re-unifying a cross-cutting concern the capability folder tree scatters.
 
 ```bash
-node scripts/concept-index.mts --spec-dir <spec> --write   # refresh the block
-node scripts/concept-index.mts --spec-dir <spec> --check   # no-drift guard
+node scripts/concept-index.mjs --spec-dir <spec> --write   # refresh the block
+node scripts/concept-index.mjs --spec-dir <spec> --check   # no-drift guard
 ```
 
 Pure derivation, frontmatter only; the write touches only the delimited generated block. See

package/skills/concept-index/SKILL.md

@@ -17,7 +17,7 @@ carries a self-contained `.mts` script (the repo's node-≥23.6 / no-deps conven
 ## Run it
 
 ```bash
-node "<skill>/scripts/concept-index.mts" --spec-dir <spec> [--write | --check]
+node "<skill>/scripts/concept-index.mjs" --spec-dir <spec> [--write | --check]
 ```
 
 - default (no mode) — print the rendered "By concept" section to stdout (dry run).

package/skills/concept-index/scripts/concept-index.bundle.mjs

@@ -0,0 +1,181 @@
+#!/usr/bin/env node
+import { existsSync, readFileSync, readdirSync, realpathSync, writeFileSync } from "node:fs";
+import { join, relative } from "node:path";
+import { pathToFileURL } from "node:url";
+//#region skills/concept-index/scripts/concept-index.mts
+const BEGIN_MARKER = "<!-- BEGIN generated: by-concept (project-spec/concept-index) -->";
+const END_MARKER = "<!-- END generated: by-concept -->";
+const ANCHOR_HEADING = "## Invariants";
+const SKIP_DIRS = /* @__PURE__ */ new Set([
+	"node_modules",
+	".git",
+	"dist",
+	".turbo",
+	".next",
+	"coverage"
+]);
+function parseFrontmatter(text) {
+	const m = /^---\r?\n([\s\S]*?)\r?\n---\s*(?:\r?\n|$)/.exec(text);
+	if (!m) return null;
+	const fm = {
+		concepts: [],
+		model: false
+	};
+	const lines = m[1].split("\n").map((l) => l.replace(/\r$/, ""));
+	for (let i = 0; i < lines.length; i++) {
+		const line = lines[i];
+		if (line.trim() === "" || line.trim().startsWith("#")) continue;
+		if (line.length - line.trimStart().length !== 0) continue;
+		const [key, ...rest] = line.trim().split(":");
+		const value = rest.join(":").trim();
+		if (key === "spec-type") fm.specType = unquote(value);
+		else if (key === "model") fm.model = unquote(value) === "true";
+		else if (key === "concept") {
+			if (value === "" || value === "|" || value === ">") for (let j = i + 1; j < lines.length; j++) {
+				const item = lines[j];
+				if (item.trim() === "") continue;
+				if (item.length - item.trimStart().length === 0) break;
+				const dash = /^\s*-\s+(.*)$/.exec(item);
+				if (dash) fm.concepts.push(unquote(dash[1].trim()));
+			}
+			else fm.concepts.push(...parseScalarOrFlow(value));
+		}
+	}
+	return fm;
+}
+function parseScalarOrFlow(value) {
+	const v = value.trim();
+	if (v.startsWith("[") && v.endsWith("]")) return v.slice(1, -1).split(",").map((s) => unquote(s.trim())).filter((s) => s.length > 0);
+	const single = unquote(v);
+	return single.length > 0 ? [single] : [];
+}
+function unquote(v) {
+	return v.replace(/^["']|["']$/g, "");
+}
+function facetKind(relPath, specType) {
+	const p = relPath.replace(/\\/g, "/");
+	if (p.startsWith("design/")) return "rule";
+	if (p.startsWith("workflows/")) return "workflow";
+	if (specType === "reference") return "reference";
+	if (specType === "behavioral") return "behavior";
+	return "index";
+}
+function displayPath(relPath) {
+	const p = relPath.replace(/\\/g, "/");
+	return p.endsWith("/README.md") ? p.slice(0, -9) : p;
+}
+function scanProjectSpec(specDir) {
+	const records = [];
+	walk(specDir, specDir, records);
+	return records;
+}
+function walk(dir, specDir, out) {
+	for (const entry of readdirSync(dir, { withFileTypes: true })) {
+		if (entry.name.startsWith(".") || SKIP_DIRS.has(entry.name)) continue;
+		const full = join(dir, entry.name);
+		if (entry.isDirectory()) walk(full, specDir, out);
+		else if (entry.name.endsWith(".md")) {
+			const fm = parseFrontmatter(readFileSync(full, "utf8"));
+			if (!fm || fm.concepts.length === 0) continue;
+			const relPath = relative(specDir, full).replace(/\\/g, "/");
+			out.push({
+				relPath,
+				display: displayPath(relPath),
+				concepts: fm.concepts,
+				facet: facetKind(relPath, fm.specType)
+			});
+		}
+	}
+}
+function groupByConcept(records) {
+	const grouped = /* @__PURE__ */ new Map();
+	for (const rec of records) for (const concept of rec.concepts) {
+		const list = grouped.get(concept) ?? [];
+		list.push(rec);
+		grouped.set(concept, list);
+	}
+	return new Map([...grouped.entries()].sort(([a], [b]) => a.localeCompare(b)).map(([k, v]) => [k, [...v].sort((x, y) => x.display.localeCompare(y.display))]));
+}
+function renderTable(grouped) {
+	return [
+		"| Concept | Facets |",
+		"|---|---|",
+		...[...grouped.entries()].map(([concept, nodes]) => {
+			return `| \`${concept}\` | ${nodes.map((n) => `\`${n.display}\` (${n.facet})`).join(" · ")} |`;
+		})
+	].join("\n");
+}
+function renderSection(grouped) {
+	return [
+		BEGIN_MARKER,
+		"",
+		"## By concept",
+		"",
+		"> Generated from `concept:` frontmatter by `project-spec/concept-index` — do not edit by hand.",
+		"",
+		renderTable(grouped),
+		"",
+		END_MARKER
+	].join("\n");
+}
+function applySection(specText, section) {
+	const begin = specText.indexOf(BEGIN_MARKER);
+	const end = specText.indexOf(END_MARKER);
+	if (begin !== -1 && end !== -1 && end > begin) {
+		const before = specText.slice(0, begin);
+		const after = specText.slice(end + 34);
+		return before + section + after;
+	}
+	const anchor = specText.indexOf(ANCHOR_HEADING);
+	if (anchor !== -1) return specText.slice(0, anchor) + section + "\n\n" + specText.slice(anchor);
+	return `${specText.replace(/\s*$/, "")}\n\n${section}\n`;
+}
+function extractSection(specText) {
+	const begin = specText.indexOf(BEGIN_MARKER);
+	const end = specText.indexOf(END_MARKER);
+	if (begin === -1 || end === -1 || end < begin) return null;
+	return specText.slice(begin, end + 34);
+}
+function parseArgs(argv) {
+	let specDir = ".";
+	let mode = "print";
+	for (let i = 0; i < argv.length; i++) {
+		const a = argv[i];
+		if (a === "--spec-dir") specDir = argv[++i] ?? ".";
+		else if (a === "--write") mode = "write";
+		else if (a === "--check") mode = "check";
+	}
+	return {
+		specDir,
+		mode
+	};
+}
+function main(argv) {
+	const { specDir, mode } = parseArgs(argv);
+	const section = renderSection(groupByConcept(scanProjectSpec(specDir)));
+	const specPath = join(specDir, "spec.md");
+	if (mode === "print") {
+		process.stdout.write(`${section}\n`);
+		return 0;
+	}
+	if (!existsSync(specPath)) {
+		process.stderr.write(`concept-index: no spec.md at ${specPath}\n`);
+		return 2;
+	}
+	const specText = readFileSync(specPath, "utf8");
+	if (mode === "check") {
+		if (extractSection(specText) === section) {
+			process.stdout.write("concept-index: no drift\n");
+			return 0;
+		}
+		process.stderr.write("concept-index: drift — spec.md by-concept block is stale; run --write\n");
+		return 1;
+	}
+	const next = applySection(specText, section);
+	if (next !== specText) writeFileSync(specPath, next);
+	process.stdout.write(`concept-index: ${next === specText ? "unchanged" : "updated"} ${specPath}\n`);
+	return 0;
+}
+if (process.argv[1] && import.meta.url === pathToFileURL(realpathSync(process.argv[1])).href) process.exit(main(process.argv.slice(2)));
+//#endregion
+export { BEGIN_MARKER, END_MARKER, applySection, extractSection, facetKind, groupByConcept, main, parseFrontmatter, parseScalarOrFlow, renderSection, renderTable, scanProjectSpec };

package/skills/concept-index/scripts/concept-index.mjs

@@ -0,0 +1,12 @@
+// Launcher for the engine of the same name. Run it as `node <skill>/scripts/<engine>.mjs`.
+// A checkout runs the .mts source. An npm install keeps the skill under node_modules, where Node
+// will not strip types, so it runs the self-contained bundle built for the package.
+import { spawnSync } from 'node:child_process'
+import { fileURLToPath } from 'node:url'
+
+const self = fileURLToPath(import.meta.url)
+const installed = /[\\/]node_modules[\\/]/.test(self)
+const target = self.replace(/\.mjs$/, installed ? '.bundle.mjs' : '.mts')
+const run = spawnSync(process.execPath, [...process.execArgv, target, ...process.argv.slice(2)], { stdio: 'inherit' })
+if (run.error) throw run.error
+process.exitCode = run.status ?? 1

package/skills/discover-plans/README.md

@@ -11,6 +11,6 @@ an unretired/resumable mission, tallies its todos, reads its top-level `status`
 - **Tests:** [`scripts/discover-plans.test.mts`](./scripts/discover-plans.test.mts) (`node:test`)
 
 ```bash
-node scripts/discover-plans.mts --root . --format toon
-node scripts/discover-plans.mts --root . --status approved   # the dispatch queue: approved briefs only
+node scripts/discover-plans.mjs --root . --format toon
+node scripts/discover-plans.mjs --root . --status approved   # the dispatch queue: approved briefs only
 ```

package/skills/discover-plans/SKILL.md

@@ -42,7 +42,7 @@ the flag; it never interprets or writes it.
 ## Run the scan
 
 ```bash
-node "<skill>/scripts/discover-plans.mts" [--root .] [--format toon|json] [--status <value>]
+node "<skill>/scripts/discover-plans.mjs" [--root .] [--format toon|json] [--status <value>]
 ```
 
 - Default `--root` is the current directory; default `--format` is **TOON** (the token-efficient

package/skills/discover-plans/scripts/discover-plans.bundle.mjs

@@ -0,0 +1,135 @@
+#!/usr/bin/env node
+import { existsSync, readFileSync, readdirSync, realpathSync } from "node:fs";
+import { join } from "node:path";
+import { pathToFileURL } from "node:url";
+//#region skills/discover-plans/scripts/discover-plans.mts
+const TODO_STATUSES = /* @__PURE__ */ new Set([
+	"pending",
+	"in_progress",
+	"completed"
+]);
+/** The default mission dispatch status — the meaning of an absent top-level `status`. */
+const DEFAULT_PLAN_STATUS = "active";
+function parsePlanFrontmatter(text) {
+	const m = /^---\r?\n([\s\S]*?)\r?\n---\s*(?:\r?\n|$)/.exec(text);
+	if (!m) return null;
+	const fm = {
+		name: "",
+		status: DEFAULT_PLAN_STATUS,
+		total: 0,
+		completed: 0,
+		inProgress: 0,
+		pending: 0
+	};
+	let inTodos = false;
+	for (const raw of m[1].split("\n")) {
+		const line = raw.replace(/\r$/, "");
+		if (line.trim() === "" || line.trim().startsWith("#")) continue;
+		const indent = line.length - line.trimStart().length;
+		const trimmed = line.trim();
+		if (indent === 0) {
+			inTodos = false;
+			const [key, ...rest] = trimmed.split(":");
+			const value = rest.join(":").trim();
+			if (key === "name") fm.name = unquote(value);
+			else if (key === "status") {
+				const v = unquote(value);
+				if (v !== "") fm.status = v;
+			} else if (key === "todos") inTodos = true;
+			continue;
+		}
+		if (inTodos) {
+			const sm = /^(?:-\s+)?status:\s*(.+)$/.exec(trimmed);
+			if (sm) {
+				const status = unquote(sm[1].trim());
+				fm.total++;
+				if (status === "completed") fm.completed++;
+				else if (status === "in_progress") fm.inProgress++;
+				else if (status === "pending") fm.pending++;
+			}
+		}
+	}
+	return fm;
+}
+function unquote(v) {
+	return v.replace(/^["']|["']$/g, "");
+}
+function nextLead(text) {
+	const lines = text.split("\n");
+	let i = lines.findIndex((l) => /^##\s+NEXT\b/i.test(l.trim()));
+	if (i === -1) return "";
+	for (i += 1; i < lines.length; i++) {
+		const l = lines[i].replace(/\r$/, "").trim();
+		if (l === "") continue;
+		if (l.startsWith("#")) return "";
+		const cleaned = l.replace(/^[-*]\s+/, "").replace(/\*\*/g, "").trim();
+		return cleaned.length > 200 ? `${cleaned.slice(0, 197)}...` : cleaned;
+	}
+	return "";
+}
+function discoverPlanFiles(root) {
+	const dir = join(root, ".agents", "plans");
+	if (!existsSync(dir)) return [];
+	let entries;
+	try {
+		entries = readdirSync(dir, { withFileTypes: true });
+	} catch {
+		return [];
+	}
+	return entries.filter((e) => e.isFile() && e.name.endsWith(".plan.md")).map((e) => e.name).sort();
+}
+function collectPlans(root) {
+	const out = [];
+	for (const name of discoverPlanFiles(root)) {
+		let text;
+		try {
+			text = readFileSync(join(root, ".agents", "plans", name), "utf8");
+		} catch {
+			continue;
+		}
+		const fm = parsePlanFrontmatter(text);
+		if (!fm) continue;
+		out.push({
+			cr: name.replace(/\.plan\.md$/, ""),
+			name: fm.name,
+			total: fm.total,
+			completed: fm.completed,
+			inProgress: fm.inProgress,
+			status: fm.status,
+			next: nextLead(text)
+		});
+	}
+	return out.sort((a, b) => a.cr < b.cr ? -1 : a.cr > b.cr ? 1 : 0);
+}
+function filterByStatus(plans, status) {
+	return plans.filter((p) => p.status === status);
+}
+const COLUMNS = [
+	"cr",
+	"name",
+	"total",
+	"completed",
+	"inProgress",
+	"status",
+	"next"
+];
+function toonField(v) {
+	if (v === "" || /[",]/.test(v) || v !== v.trim()) return `"${v.replace(/"/g, "\"\"")}"`;
+	return v;
+}
+function toToon(plans) {
+	return [`plans[${plans.length}]{${COLUMNS.join(",")}}:`, ...plans.map((p) => `  ${COLUMNS.map((c) => toonField(String(p[c]))).join(",")}`)].join("\n");
+}
+function main(argv) {
+	const root = argv.includes("--root") ? argv[argv.indexOf("--root") + 1] ?? "." : ".";
+	const format = argv.includes("--format") ? argv[argv.indexOf("--format") + 1] : "toon";
+	const statusFilter = argv.includes("--status") ? argv[argv.indexOf("--status") + 1] : void 0;
+	let plans = collectPlans(root);
+	if (statusFilter !== void 0) plans = filterByStatus(plans, statusFilter);
+	const out = format === "json" ? JSON.stringify(plans, null, 2) : toToon(plans);
+	process.stdout.write(`${out}\n`);
+	return 0;
+}
+if (process.argv[1] && import.meta.url === pathToFileURL(realpathSync(process.argv[1])).href) process.exit(main(process.argv.slice(2)));
+//#endregion
+export { DEFAULT_PLAN_STATUS, TODO_STATUSES, collectPlans, filterByStatus, main, nextLead, parsePlanFrontmatter, toToon };

package/skills/discover-plans/scripts/discover-plans.mjs

@@ -0,0 +1,12 @@
+// Launcher for the engine of the same name. Run it as `node <skill>/scripts/<engine>.mjs`.
+// A checkout runs the .mts source. An npm install keeps the skill under node_modules, where Node
+// will not strip types, so it runs the self-contained bundle built for the package.
+import { spawnSync } from 'node:child_process'
+import { fileURLToPath } from 'node:url'
+
+const self = fileURLToPath(import.meta.url)
+const installed = /[\\/]node_modules[\\/]/.test(self)
+const target = self.replace(/\.mjs$/, installed ? '.bundle.mjs' : '.mts')
+const run = spawnSync(process.execPath, [...process.execArgv, target, ...process.argv.slice(2)], { stdio: 'inherit' })
+if (run.error) throw run.error
+process.exitCode = run.status ?? 1

package/skills/discover-specs/README.md

@@ -11,5 +11,5 @@ specs found.
 - **Tests:** [`scripts/discover-specs.test.mts`](./scripts/discover-specs.test.mts) (`node:test`)
 
 ```bash
-node scripts/discover-specs.mts --root . --format toon
+node scripts/discover-specs.mjs --root . --format toon
 ```

package/skills/discover-specs/SKILL.md

@@ -37,7 +37,7 @@ A `spec.md` is a spec only when **both** hold (ADR-0017, narrowed; extra anchors
 ## Run the scan
 
 ```bash
-node "<skill>/scripts/discover-specs.mts" [--root .] [--format toon|json] [--resolve <name>]
+node "<skill>/scripts/discover-specs.mjs" [--root .] [--format toon|json] [--resolve <name>]
 ```
 
 - Default `--root` is the current directory; default `--format` is **TOON** (the token-efficient