domain-knowledge-kit 0.2.15 → 0.2.19

package/dist/features/agent/mcp-register.js

@@ -0,0 +1,116 @@
+/**
+ * Register the DKK MCP server with Claude Code, with a fallback for
+ * environments where the `claude` CLI is unavailable.
+ *
+ * Order of attempts:
+ *
+ * 1. If a `dkk` MCP server is already present in the project's `.mcp.json`,
+ *    skip — we don't want to overwrite a user's customised entry.
+ * 2. If `which claude` succeeds, run `claude mcp add dkk -- dkk mcp`.
+ *    This writes into the user's Claude config (`~/.claude.json` or
+ *    equivalent), which is the canonical place for project-agnostic
+ *    Claude Code config.
+ * 3. Fallback: merge `{ "mcpServers": { "dkk": { "command": "dkk", "args": ["mcp"] } } }`
+ *    into the project's `.mcp.json`, preserving any other servers
+ *    already registered there.
+ *
+ * Failures are reported but never throw — `dkk update` continues even if
+ * MCP registration can't be completed automatically.
+ */
+import { execFileSync, spawnSync } from "node:child_process";
+import { existsSync, readFileSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+const SERVER_NAME = "dkk";
+/**
+ * Detect existing registration → register via `claude mcp add` → fall back
+ * to writing `.mcp.json`. Returns a structured outcome rather than logging
+ * so callers can format the result as part of a larger summary.
+ */
+export function ensureMcpRegistered(root) {
+    if (isRegisteredInProject(root)) {
+        return { status: "already-registered", via: "project" };
+    }
+    if (isRegisteredInClaudeCli()) {
+        return { status: "already-registered", via: "claude-cli" };
+    }
+    if (hasClaudeCli()) {
+        const result = spawnSync("claude", ["mcp", "add", SERVER_NAME, "--", "dkk", "mcp"], {
+            stdio: ["ignore", "pipe", "pipe"],
+            encoding: "utf-8",
+            timeout: 20_000,
+        });
+        if (result.status === 0) {
+            return { status: "registered", via: "claude-cli" };
+        }
+        // Fall through to .mcp.json if `claude mcp add` failed for some reason;
+        // we'd rather have a working entry than fail loudly here.
+    }
+    try {
+        writeToMcpJson(root);
+        return { status: "registered", via: "mcp-json" };
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        return { status: "failed", reason: msg };
+    }
+}
+function isRegisteredInProject(root) {
+    const path = join(root, ".mcp.json");
+    if (!existsSync(path))
+        return false;
+    try {
+        const config = JSON.parse(readFileSync(path, "utf-8"));
+        return Boolean(config.mcpServers && SERVER_NAME in config.mcpServers);
+    }
+    catch {
+        return false;
+    }
+}
+function hasClaudeCli() {
+    try {
+        execFileSync("which", ["claude"], {
+            stdio: ["ignore", "pipe", "ignore"],
+            timeout: 5_000,
+        });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function isRegisteredInClaudeCli() {
+    if (!hasClaudeCli())
+        return false;
+    try {
+        const out = execFileSync("claude", ["mcp", "list"], {
+            stdio: ["ignore", "pipe", "ignore"],
+            encoding: "utf-8",
+            timeout: 10_000,
+        });
+        // `claude mcp list` prints one server per line; match a token-bounded
+        // `dkk` rather than a substring so we don't false-positive on
+        // names like `dkk-extended`.
+        return new RegExp(`(^|\\s|:)${SERVER_NAME}(\\s|:|$)`, "m").test(out);
+    }
+    catch {
+        return false;
+    }
+}
+function writeToMcpJson(root) {
+    const path = join(root, ".mcp.json");
+    let config = {};
+    if (existsSync(path)) {
+        try {
+            config = JSON.parse(readFileSync(path, "utf-8"));
+        }
+        catch {
+            // Corrupt .mcp.json — refuse to clobber it.
+            throw new Error(`.mcp.json exists but is not valid JSON; cannot merge dkk entry`);
+        }
+    }
+    if (!config.mcpServers)
+        config.mcpServers = {};
+    config.mcpServers[SERVER_NAME] = { command: "dkk", args: ["mcp"] };
+    writeFileSync(path, JSON.stringify(config, null, 2) + "\n", "utf-8");
+}
+//# sourceMappingURL=mcp-register.js.map

package/dist/features/agent/mcp-register.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-register.js","sourceRoot":"","sources":["../../../src/features/agent/mcp-register.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAajC,MAAM,WAAW,GAAG,KAAK,CAAC;AAE1B;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,IAAI,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;IAC1D,CAAC;IAED,IAAI,uBAAuB,EAAE,EAAE,CAAC;QAC9B,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC;IAC7D,CAAC;IAED,IAAI,YAAY,EAAE,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE;YAClF,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,MAAM;SAChB,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC;QACrD,CAAC;QACD,wEAAwE;QACxE,0DAA0D;IAC5D,CAAC;IAED,IAAI,CAAC;QACH,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC;IACnD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAiB,CAAC;QACvE,OAAO,OAAO,CAAC,MAAM,CAAC,UAAU,IAAI,WAAW,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,YAAY;IACnB,IAAI,CAAC;QACH,YAAY,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE;YAChC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;YACnC,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB;IAC9B,IAAI,CAAC,YAAY,EAAE;QAAE,OAAO,KAAK,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE;YAClD,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;YACnC,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,MAAM;SAChB,CAAC,CAAC;QACH,sEAAsE;QACtE,8DAA8D;QAC9D,6BAA6B;QAC7B,OAAO,IAAI,MAAM,CAAC,YAAY,WAAW,WAAW,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACrC,IAAI,MAAM,GAAiB,EAAE,CAAC;IAC9B,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAiB,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,4CAA4C;YAC5C,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,UAAU;QAAE,MAAM,CAAC,UAAU,GAAG,EAAE,CAAC;IAC/C,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;IACnE,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;AACvE,CAAC"}

package/dist/features/agent/settings-prune.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Prune DKK-owned entries from a Claude `settings.json` payload.
+ *
+ * Used by `dkk update` to clear stale entries (e.g. hooks for scripts that
+ * have been renamed or removed) before re-applying the additive merge with
+ * the new template. User-authored entries are preserved untouched.
+ *
+ * Decision boundaries (see [[dkk-artifacts]] for the predicate source of
+ * truth):
+ *
+ * - A `permissions.allow` entry is DKK-owned iff it appears verbatim in
+ *   the bundled template's allow list. Exact string equality is the right
+ *   bar because the template's allow patterns are stable identifiers.
+ * - A `hooks.<event>` sub-entry is DKK-owned iff **every** `hooks[].command`
+ *   inside it resolves via {@link extractHookBasename} to a DKK basename.
+ *   Mixed entries (some DKK, some user-authored) are left intact and
+ *   reported as warnings — pruning them partially would mutate
+ *   user-authored data.
+ */
+import { type ClaudeSettings } from "./commands/init.js";
+export interface PruneResult {
+    pruned: ClaudeSettings;
+    /** Human-readable summary of what was removed. */
+    removed: string[];
+    /** Hook entries that contained a mix of DKK + user-owned commands; left intact. */
+    mixedHookWarnings: string[];
+}
+export declare function pruneDkkEntries(settings: ClaudeSettings, dkkAllow: ReadonlySet<string>, dkkHookBasenames: ReadonlySet<string>): PruneResult;
+//# sourceMappingURL=settings-prune.d.ts.map

package/dist/features/agent/settings-prune.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-prune.d.ts","sourceRoot":"","sources":["../../../src/features/agent/settings-prune.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAuB,KAAK,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAE9E,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,cAAc,CAAC;IACvB,kDAAkD;IAClD,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,mFAAmF;IACnF,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,cAAc,EACxB,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,EAC7B,gBAAgB,EAAE,WAAW,CAAC,MAAM,CAAC,GACpC,WAAW,CAmDb"}

package/dist/features/agent/settings-prune.js

@@ -0,0 +1,70 @@
+/**
+ * Prune DKK-owned entries from a Claude `settings.json` payload.
+ *
+ * Used by `dkk update` to clear stale entries (e.g. hooks for scripts that
+ * have been renamed or removed) before re-applying the additive merge with
+ * the new template. User-authored entries are preserved untouched.
+ *
+ * Decision boundaries (see [[dkk-artifacts]] for the predicate source of
+ * truth):
+ *
+ * - A `permissions.allow` entry is DKK-owned iff it appears verbatim in
+ *   the bundled template's allow list. Exact string equality is the right
+ *   bar because the template's allow patterns are stable identifiers.
+ * - A `hooks.<event>` sub-entry is DKK-owned iff **every** `hooks[].command`
+ *   inside it resolves via {@link extractHookBasename} to a DKK basename.
+ *   Mixed entries (some DKK, some user-authored) are left intact and
+ *   reported as warnings — pruning them partially would mutate
+ *   user-authored data.
+ */
+import { extractHookBasename } from "./commands/init.js";
+export function pruneDkkEntries(settings, dkkAllow, dkkHookBasenames) {
+    // Deep-clone so callers can compare before/after without surprise.
+    const pruned = JSON.parse(JSON.stringify(settings));
+    const removed = [];
+    const mixedHookWarnings = [];
+    // permissions.allow — drop exact-string matches.
+    if (Array.isArray(pruned.permissions?.allow)) {
+        const before = pruned.permissions.allow;
+        const kept = [];
+        for (const entry of before) {
+            if (dkkAllow.has(entry)) {
+                removed.push(`permissions.allow: ${entry}`);
+            }
+            else {
+                kept.push(entry);
+            }
+        }
+        pruned.permissions.allow = kept;
+    }
+    // hooks.* — drop entries whose every command resolves to a DKK basename.
+    if (pruned.hooks && typeof pruned.hooks === "object") {
+        for (const [event, entries] of Object.entries(pruned.hooks)) {
+            if (!Array.isArray(entries))
+                continue;
+            const kept = [];
+            for (const entry of entries) {
+                const commands = entry.hooks ?? [];
+                if (commands.length === 0) {
+                    kept.push(entry);
+                    continue;
+                }
+                const basenames = commands.map((h) => extractHookBasename(h.command));
+                const dkkOwned = basenames.filter((b) => b !== null && dkkHookBasenames.has(b));
+                const allDkk = basenames.every((b) => b !== null && dkkHookBasenames.has(b));
+                const someDkk = dkkOwned.length > 0;
+                if (allDkk) {
+                    removed.push(`hooks.${event}: ${basenames.filter(Boolean).join(", ")}`);
+                    continue;
+                }
+                if (someDkk) {
+                    mixedHookWarnings.push(`hooks.${event}: mixed DKK/user commands left intact (DKK: ${dkkOwned.join(", ")})`);
+                }
+                kept.push(entry);
+            }
+            pruned.hooks[event] = kept;
+        }
+    }
+    return { pruned, removed, mixedHookWarnings };
+}
+//# sourceMappingURL=settings-prune.js.map

package/dist/features/agent/settings-prune.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-prune.js","sourceRoot":"","sources":["../../../src/features/agent/settings-prune.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,mBAAmB,EAAuB,MAAM,oBAAoB,CAAC;AAU9E,MAAM,UAAU,eAAe,CAC7B,QAAwB,EACxB,QAA6B,EAC7B,gBAAqC;IAErC,mEAAmE;IACnE,MAAM,MAAM,GAAmB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,iBAAiB,GAAa,EAAE,CAAC;IAEvC,iDAAiD;IACjD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,MAAM,CAAC,WAAY,CAAC,KAAK,CAAC;QACzC,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxB,OAAO,CAAC,IAAI,CAAC,sBAAsB,KAAK,EAAE,CAAC,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QACD,MAAM,CAAC,WAAY,CAAC,KAAK,GAAG,IAAI,CAAC;IACnC,CAAC;IAED,yEAAyE;IACzE,IAAI,MAAM,CAAC,KAAK,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrD,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;gBAAE,SAAS;YACtC,MAAM,IAAI,GAAG,EAAE,CAAC;YAChB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;gBACnC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC1B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACjB,SAAS;gBACX,CAAC;gBACD,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;gBACtE,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7F,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7E,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;gBACpC,IAAI,MAAM,EAAE,CAAC;oBACX,OAAO,CAAC,IAAI,CAAC,SAAS,KAAK,KAAK,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBACxE,SAAS;gBACX,CAAC;gBACD,IAAI,OAAO,EAAE,CAAC;oBACZ,iBAAiB,CAAC,IAAI,CACpB,SAAS,KAAK,+CAA+C,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACpF,CAAC;gBACJ,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;AAChD,CAAC"}

package/dist/features/agent/tests/settings-prune.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=settings-prune.test.d.ts.map

package/dist/features/agent/tests/settings-prune.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-prune.test.d.ts","sourceRoot":"","sources":["../../../../src/features/agent/tests/settings-prune.test.ts"],"names":[],"mappings":""}

package/dist/features/agent/tests/settings-prune.test.js

@@ -0,0 +1,118 @@
+/**
+ * Tests for the settings.json prune logic used by `dkk update`.
+ *
+ * Covers the three scenarios the update flow cares about:
+ *   1. DKK-only `permissions.allow` entries are removed; user entries stay.
+ *   2. Hook entries whose every command is DKK-owned are removed; mixed
+ *      entries (DKK + user) are kept with a warning.
+ *   3. Empty settings are handled without throwing.
+ */
+import { pruneDkkEntries } from "../settings-prune.js";
+let passed = 0;
+let failed = 0;
+function assert(label, condition, detail) {
+    if (condition) {
+        console.log(`  OK: ${label}`);
+        passed++;
+    }
+    else {
+        console.error(`FAIL: ${label}${detail ? ` — ${detail}` : ""}`);
+        failed++;
+    }
+}
+// Canonical DKK identifiers (subset — enough to exercise the prune logic).
+const DKK_ALLOW = new Set([
+    "Bash(dkk list:*)",
+    "Bash(dkk show:*)",
+    "Bash(dkk validate:*)",
+]);
+const DKK_HOOKS = new Set([
+    "session-start-prime.mjs",
+    "post-edit-validate.mjs",
+]);
+console.log("\n=== prune: removes only DKK-owned permissions.allow entries ===");
+{
+    const input = {
+        permissions: {
+            allow: [
+                "Bash(dkk list:*)", // DKK-owned
+                "Bash(dkk show:*)", // DKK-owned
+                "Bash(myproject build:*)", // user-authored
+                "Bash(custom thing:*)", // user-authored
+            ],
+        },
+    };
+    const { pruned, removed } = pruneDkkEntries(input, DKK_ALLOW, DKK_HOOKS);
+    assert("user entries preserved", pruned.permissions?.allow?.includes("Bash(myproject build:*)") === true &&
+        pruned.permissions?.allow?.includes("Bash(custom thing:*)") === true);
+    assert("DKK entries removed from permissions.allow", pruned.permissions?.allow?.includes("Bash(dkk list:*)") === false &&
+        pruned.permissions?.allow?.includes("Bash(dkk show:*)") === false);
+    assert("removed list reports DKK entries", removed.length === 2);
+}
+console.log("\n=== prune: removes hook entries whose every command is DKK ===");
+{
+    const input = {
+        hooks: {
+            SessionStart: [
+                {
+                    // DKK-only entry — should be dropped.
+                    hooks: [
+                        { type: "command", command: 'node "$CLAUDE_PROJECT_DIR/.claude/hooks/session-start-prime.mjs"' },
+                    ],
+                },
+                {
+                    // User-only entry — should be preserved.
+                    hooks: [{ type: "command", command: "echo user-hook" }],
+                },
+            ],
+        },
+    };
+    const { pruned } = pruneDkkEntries(input, DKK_ALLOW, DKK_HOOKS);
+    const remaining = pruned.hooks?.SessionStart ?? [];
+    assert("DKK-only hook entry removed", remaining.length === 1);
+    assert("user hook entry preserved", remaining[0]?.hooks?.[0]?.command === "echo user-hook");
+}
+console.log("\n=== prune: leaves mixed hook entries alone with a warning ===");
+{
+    const input = {
+        hooks: {
+            SessionStart: [
+                {
+                    hooks: [
+                        { type: "command", command: 'node "$CLAUDE_PROJECT_DIR/.claude/hooks/session-start-prime.mjs"' },
+                        { type: "command", command: "echo also-user-hook" },
+                    ],
+                },
+            ],
+        },
+    };
+    const { pruned, mixedHookWarnings } = pruneDkkEntries(input, DKK_ALLOW, DKK_HOOKS);
+    assert("mixed entry preserved verbatim", pruned.hooks?.SessionStart?.length === 1);
+    assert("mixed warning emitted", mixedHookWarnings.length === 1);
+    assert("mixed warning names the DKK hook", mixedHookWarnings[0].includes("session-start-prime.mjs"));
+}
+console.log("\n=== prune: tolerates empty / missing fields ===");
+{
+    const empty = {};
+    const { pruned, removed, mixedHookWarnings } = pruneDkkEntries(empty, DKK_ALLOW, DKK_HOOKS);
+    assert("empty settings → no removed entries", removed.length === 0);
+    assert("empty settings → no mixed warnings", mixedHookWarnings.length === 0);
+    // Deep clone returns an object that's structurally equivalent (also empty).
+    assert("empty settings round-trip", JSON.stringify(pruned) === "{}");
+}
+console.log("\n=== prune: drops empty allow list entries cleanly ===");
+{
+    const input = {
+        permissions: {
+            allow: ["Bash(dkk list:*)", "Bash(dkk show:*)", "Bash(dkk validate:*)"],
+        },
+    };
+    const { pruned, removed } = pruneDkkEntries(input, DKK_ALLOW, DKK_HOOKS);
+    assert("all DKK entries removed", pruned.permissions?.allow?.length === 0);
+    assert("removed list has 3 entries", removed.length === 3);
+}
+// ── Summary ───────────────────────────────────────────────────────────
+console.log(`\n${passed} passed, ${failed} failed`);
+if (failed > 0)
+    process.exit(1);
+//# sourceMappingURL=settings-prune.test.js.map

package/dist/features/agent/tests/settings-prune.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-prune.test.js","sourceRoot":"","sources":["../../../../src/features/agent/tests/settings-prune.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAGvD,IAAI,MAAM,GAAG,CAAC,CAAC;AACf,IAAI,MAAM,GAAG,CAAC,CAAC;AAEf,SAAS,MAAM,CAAC,KAAa,EAAE,SAAkB,EAAE,MAAe;IAChE,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC;QAC9B,MAAM,EAAE,CAAC;IACX,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,SAAS,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/D,MAAM,EAAE,CAAC;IACX,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACxB,kBAAkB;IAClB,kBAAkB;IAClB,sBAAsB;CACvB,CAAC,CAAC;AACH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACxB,yBAAyB;IACzB,wBAAwB;CACzB,CAAC,CAAC;AAEH,OAAO,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC;AACjF,CAAC;IACC,MAAM,KAAK,GAAmB;QAC5B,WAAW,EAAE;YACX,KAAK,EAAE;gBACL,kBAAkB,EAAW,YAAY;gBACzC,kBAAkB,EAAW,YAAY;gBACzC,yBAAyB,EAAI,gBAAgB;gBAC7C,sBAAsB,EAAO,gBAAgB;aAC9C;SACF;KACF,CAAC;IACF,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,eAAe,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACzE,MAAM,CACJ,wBAAwB,EACxB,MAAM,CAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,yBAAyB,CAAC,KAAK,IAAI;QACvE,MAAM,CAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,sBAAsB,CAAC,KAAK,IAAI,CACrE,CAAC;IACF,MAAM,CACJ,4CAA4C,EAC5C,MAAM,CAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,kBAAkB,CAAC,KAAK,KAAK;QACjE,MAAM,CAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,kBAAkB,CAAC,KAAK,KAAK,CAClE,CAAC;IACF,MAAM,CAAC,kCAAkC,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;AAChF,CAAC;IACC,MAAM,KAAK,GAAmB;QAC5B,KAAK,EAAE;YACL,YAAY,EAAE;gBACZ;oBACE,sCAAsC;oBACtC,KAAK,EAAE;wBACL,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,kEAAkE,EAAE;qBACjG;iBACF;gBACD;oBACE,yCAAyC;oBACzC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;iBACxD;aACF;SACF;KACF,CAAC;IACF,MAAM,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,EAAE,YAAY,IAAI,EAAE,CAAC;IACnD,MAAM,CAAC,6BAA6B,EAAE,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;IAC9D,MAAM,CACJ,2BAA2B,EAC3B,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,KAAK,gBAAgB,CACvD,CAAC;AACJ,CAAC;AAED,OAAO,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC;AAC/E,CAAC;IACC,MAAM,KAAK,GAAmB;QAC5B,KAAK,EAAE;YACL,YAAY,EAAE;gBACZ;oBACE,KAAK,EAAE;wBACL,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,kEAAkE,EAAE;wBAChG,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,qBAAqB,EAAE;qBACpD;iBACF;aACF;SACF;KACF,CAAC;IACF,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,GAAG,eAAe,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACnF,MAAM,CAAC,gCAAgC,EAAE,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,MAAM,KAAK,CAAC,CAAC,CAAC;IACnF,MAAM,CAAC,uBAAuB,EAAE,iBAAiB,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;IAChE,MAAM,CACJ,kCAAkC,EAClC,iBAAiB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CACzD,CAAC;AACJ,CAAC;AAED,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;AACjE,CAAC;IACC,MAAM,KAAK,GAAmB,EAAE,CAAC;IACjC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,eAAe,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAC5F,MAAM,CAAC,qCAAqC,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;IACpE,MAAM,CAAC,oCAAoC,EAAE,iBAAiB,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;IAC7E,4EAA4E;IAC5E,MAAM,CAAC,2BAA2B,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;AACvE,CAAC;AAED,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;AACvE,CAAC;IACC,MAAM,KAAK,GAAmB;QAC5B,WAAW,EAAE;YACX,KAAK,EAAE,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,sBAAsB,CAAC;SACxE;KACF,CAAC;IACF,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,eAAe,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACzE,MAAM,CAAC,yBAAyB,EAAE,MAAM,CAAC,WAAW,EAAE,KAAK,EAAE,MAAM,KAAK,CAAC,CAAC,CAAC;IAC3E,MAAM,CAAC,4BAA4B,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,yEAAyE;AACzE,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,YAAY,MAAM,SAAS,CAAC,CAAC;AACpD,IAAI,MAAM,GAAG,CAAC;IAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC"}

package/dist/features/federation/commands/consumers.d.ts

@@ -0,0 +1,40 @@
+/**
+ * `dkk consumers <id>` — reverse lookup across federated peers.
+ *
+ * Given a local item id (e.g. `ordering.OrderPlaced`), walk every
+ * loaded peer model and report references back to that item. This is
+ * the producer-side answer to "who breaks if I rename this?".
+ *
+ * The walk inspects the ref-bearing fields that the validator already
+ * understands: events.raised_by, commands.handled_by / actor,
+ * aggregates.handles / emits, policies.when / then, read_models.subscribes_to
+ * / used_by, ADR domain_refs / superseded_by, and flow step refs.
+ *
+ * Both fully-qualified peer refs (`<localService>:<ctx>.<Name>`) and
+ * the same-service bare form (when a peer happens to have a local
+ * service named the same as ours — rare) are matched.
+ */
+import type { Command as Cmd } from "commander";
+import type { DomainModel } from "../../../shared/types/domain.js";
+import "../loader.js";
+interface ConsumerHit {
+    /** Peer service that references the queried item. */
+    service: string;
+    /** Reference path describing where in the peer model the match was found. */
+    source: string;
+    /** The relation kind (e.g. "when.events", "subscribes_to", "domain_refs"). */
+    relation: string;
+    /** The raw ref string as written in the peer's YAML. */
+    ref: string;
+}
+export declare function registerConsumers(program: Cmd): void;
+/**
+ * Walk every loaded peer model and collect references back to the
+ * queried item. Matches both the fully-qualified peer form
+ * (`<localService>:<ctx>.<Name>`) and bare names — the latter handles
+ * the case where a peer references the same item via shorthand
+ * inside its own walk (uncommon, but possible).
+ */
+export declare function findConsumers(model: DomainModel, rawId: string, localService: string | undefined): ConsumerHit[];
+export {};
+//# sourceMappingURL=consumers.d.ts.map

package/dist/features/federation/commands/consumers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consumers.d.ts","sourceRoot":"","sources":["../../../../src/features/federation/commands/consumers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,OAAO,IAAI,GAAG,EAAE,MAAM,WAAW,CAAC;AAGhD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAGnE,OAAO,cAAc,CAAC;AAEtB,UAAU,WAAW;IACnB,qDAAqD;IACrD,OAAO,EAAE,MAAM,CAAC;IAChB,6EAA6E;IAC7E,MAAM,EAAE,MAAM,CAAC;IACf,8EAA8E;IAC9E,QAAQ,EAAE,MAAM,CAAC;IACjB,wDAAwD;IACxD,GAAG,EAAE,MAAM,CAAC;CACb;AAQD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,GAAG,GAAG,IAAI,CAkCpD;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAC3B,KAAK,EAAE,WAAW,EAClB,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,GAAG,SAAS,GAC/B,WAAW,EAAE,CAmCf"}

package/dist/features/federation/commands/consumers.js

@@ -0,0 +1,126 @@
+import { loadDomainModel } from "../../../shared/loader.js";
+import { parseRef } from "../../../shared/refs.js";
+// Side-effect import: registers the peer-hydration hook with the
+// shared loader so `loadDomainModel` populates `model.peers`.
+import "../loader.js";
+export function registerConsumers(program) {
+    program
+        .command("consumers <id>")
+        .description("List peers that reference this local item (reverse lookup across federation)")
+        .option("-r, --root <path>", "Override repository root")
+        .option("--json", "Output as JSON")
+        .option("--minify", "Minify JSON output")
+        .action((id, opts) => {
+        const model = loadDomainModel({ root: opts.root });
+        const localService = model.service?.name;
+        const hits = findConsumers(model, id, localService);
+        if (opts.json) {
+            console.log(JSON.stringify({ item: id, service: localService ?? null, consumers: hits }, null, opts.minify ? 0 : 2));
+            return;
+        }
+        if (hits.length === 0) {
+            console.log(`No peer consumers of "${id}" found in ${model.peers?.size ?? 0} federated peer(s).`);
+            return;
+        }
+        console.log(`${hits.length} reference(s) to "${id}":`);
+        for (const h of hits) {
+            console.log(`  ${h.service}  ${h.source}  [${h.relation}]  → ${h.ref}`);
+        }
+    });
+}
+/**
+ * Walk every loaded peer model and collect references back to the
+ * queried item. Matches both the fully-qualified peer form
+ * (`<localService>:<ctx>.<Name>`) and bare names — the latter handles
+ * the case where a peer references the same item via shorthand
+ * inside its own walk (uncommon, but possible).
+ */
+export function findConsumers(model, rawId, localService) {
+    const hits = [];
+    if (!model.peers || model.peers.size === 0)
+        return hits;
+    const parsed = parseRef(rawId);
+    if (!parsed)
+        return hits;
+    // The forms a peer might use to reference our local item:
+    //  - Full federated: `<localService>:<ctx>.<Name>` (or `:<ItemName>` shorthand)
+    //  - Bare: only valid when peer happens to share our service name (rare)
+    // We pre-compute the candidate strings to match.
+    const matches = new Set();
+    if (parsed.kind === "item") {
+        if (localService) {
+            matches.add(`${localService}:${parsed.context}.${parsed.name}`);
+            matches.add(`${localService}:${parsed.name}`);
+        }
+        matches.add(`${parsed.context}.${parsed.name}`);
+    }
+    else if (parsed.kind === "adr") {
+        if (localService)
+            matches.add(`${localService}:${parsed.id}`);
+        matches.add(parsed.id);
+    }
+    else if (parsed.kind === "actor") {
+        if (localService)
+            matches.add(`${localService}:actor.${parsed.name}`);
+        matches.add(`actor.${parsed.name}`);
+    }
+    for (const [peerName, peerModel] of model.peers) {
+        walkRefs(peerModel, peerName, (relation, source, ref) => {
+            if (matches.has(ref)) {
+                hits.push({ service: peerName, source, relation, ref });
+            }
+        });
+    }
+    return hits;
+}
+/**
+ * Visit every ref-bearing field in a model, invoking `visit` with
+ * (relation, source-path, raw-ref) per occurrence.
+ *
+ * Intentionally narrow — covers the validator's lookup sites so the
+ * reverse view stays consistent with the forward view.
+ */
+function walkRefs(model, modelName, visit) {
+    for (const [ctxName, ctx] of model.contexts) {
+        for (const e of ctx.events ?? []) {
+            if (e.raised_by)
+                visit("raised_by", `${modelName}:${ctxName}.${e.name}`, e.raised_by);
+        }
+        for (const c of ctx.commands ?? []) {
+            if (c.handled_by)
+                visit("handled_by", `${modelName}:${ctxName}.${c.name}`, c.handled_by);
+            if (c.actor)
+                visit("actor", `${modelName}:${ctxName}.${c.name}`, c.actor);
+        }
+        for (const a of ctx.aggregates ?? []) {
+            for (const h of a.handles?.commands ?? [])
+                visit("handles.commands", `${modelName}:${ctxName}.${a.name}`, h);
+            for (const ev of a.emits?.events ?? [])
+                visit("emits.events", `${modelName}:${ctxName}.${a.name}`, ev);
+        }
+        for (const p of ctx.policies ?? []) {
+            for (const t of p.when?.events ?? [])
+                visit("when.events", `${modelName}:${ctxName}.${p.name}`, t);
+            for (const t of p.then?.commands ?? [])
+                visit("then.commands", `${modelName}:${ctxName}.${p.name}`, t);
+        }
+        for (const r of ctx.read_models ?? []) {
+            for (const s of r.subscribes_to ?? [])
+                visit("subscribes_to", `${modelName}:${ctxName}.${r.name}`, s);
+            for (const u of r.used_by ?? [])
+                visit("used_by", `${modelName}:${ctxName}.${r.name}`, u);
+        }
+    }
+    for (const [adrId, adr] of model.adrs) {
+        for (const ref of adr.domain_refs ?? [])
+            visit("domain_refs", `${modelName}:${adrId}`, ref);
+        if (adr.superseded_by)
+            visit("superseded_by", `${modelName}:${adrId}`, adr.superseded_by);
+    }
+    for (const flow of model.index.flows ?? []) {
+        for (const step of flow.steps) {
+            visit("flow.steps.ref", `${modelName}:flow.${flow.name}`, step.ref);
+        }
+    }
+}
+//# sourceMappingURL=consumers.js.map

package/dist/features/federation/commands/consumers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consumers.js","sourceRoot":"","sources":["../../../../src/features/federation/commands/consumers.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAEnD,iEAAiE;AACjE,8DAA8D;AAC9D,OAAO,cAAc,CAAC;AAmBtB,MAAM,UAAU,iBAAiB,CAAC,OAAY;IAC5C,OAAO;SACJ,OAAO,CAAC,gBAAgB,CAAC;SACzB,WAAW,CAAC,8EAA8E,CAAC;SAC3F,MAAM,CAAC,mBAAmB,EAAE,0BAA0B,CAAC;SACvD,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,UAAU,EAAE,oBAAoB,CAAC;SACxC,MAAM,CAAC,CAAC,EAAU,EAAE,IAAmB,EAAE,EAAE;QAC1C,MAAM,KAAK,GAAG,eAAe,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACnD,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC;QAEzC,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,EAAE,EAAE,EAAE,YAAY,CAAC,CAAC;QAEpD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,YAAY,IAAI,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAC5D,IAAI,EACJ,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACpB,CACF,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,cAAc,KAAK,CAAC,KAAK,EAAE,IAAI,IAAI,CAAC,qBAAqB,CAAC,CAAC;YAClG,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,qBAAqB,EAAE,IAAI,CAAC,CAAC;QACvD,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,QAAQ,QAAQ,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAC3B,KAAkB,EAClB,KAAa,EACb,YAAgC;IAEhC,MAAM,IAAI,GAAkB,EAAE,CAAC;IAC/B,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAExD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,0DAA0D;IAC1D,gFAAgF;IAChF,yEAAyE;IACzE,iDAAiD;IACjD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,GAAG,YAAY,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAChE,OAAO,CAAC,GAAG,CAAC,GAAG,YAAY,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;SAAM,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QACjC,IAAI,YAAY;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,YAAY,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACzB,CAAC;SAAM,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACnC,IAAI,YAAY;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,YAAY,UAAU,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACtE,OAAO,CAAC,GAAG,CAAC,SAAS,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAChD,QAAQ,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;YACtD,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrB,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,SAAS,QAAQ,CACf,KAAkB,EAClB,SAAiB,EACjB,KAA8D;IAE9D,KAAK,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC5C,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;YACjC,IAAI,CAAC,CAAC,SAAS;gBAAE,KAAK,CAAC,WAAW,EAAE,GAAG,SAAS,IAAI,OAAO,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;QACxF,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YACnC,IAAI,CAAC,CAAC,UAAU;gBAAE,KAAK,CAAC,YAAY,EAAE,GAAG,SAAS,IAAI,OAAO,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;YACzF,IAAI,CAAC,CAAC,KAAK;gBAAE,KAAK,CAAC,OAAO,EAAE,GAAG,SAAS,IAAI,OAAO,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAC5E,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;YACrC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE;gBAAE,KAAK,CAAC,kBAAkB,EAAE,GAAG,SAAS,IAAI,OAAO,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;YAC7G,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,IAAI,EAAE;gBAAE,KAAK,CAAC,cAAc,EAAE,GAAG,SAAS,IAAI,OAAO,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACzG,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YACnC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE;gBAAE,KAAK,CAAC,aAAa,EAAE,GAAG,SAAS,IAAI,OAAO,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;YACnG,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,QAAQ,IAAI,EAAE;gBAAE,KAAK,CAAC,eAAe,EAAE,GAAG,SAAS,IAAI,OAAO,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;QACzG,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;YACtC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,aAAa,IAAI,EAAE;gBAAE,KAAK,CAAC,eAAe,EAAE,GAAG,SAAS,IAAI,OAAO,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;YACtG,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,EAAE;gBAAE,KAAK,CAAC,SAAS,EAAE,GAAG,SAAS,IAAI,OAAO,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QACtC,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,IAAI,EAAE;YAAE,KAAK,CAAC,aAAa,EAAE,GAAG,SAAS,IAAI,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;QAC5F,IAAI,GAAG,CAAC,aAAa;YAAE,KAAK,CAAC,eAAe,EAAE,GAAG,SAAS,IAAI,KAAK,EAAE,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC;IAC5F,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;QAC3C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,KAAK,CAAC,gBAAgB,EAAE,GAAG,SAAS,SAAS,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/features/federation/commands/peers-add.d.ts

@@ -0,0 +1,14 @@
+/**
+ * `dkk peers add <name>` — append a peer to .dkk/federation.yml.
+ *
+ * Two source forms (Phase 2 ships local; --git lands in Phase 3 but
+ * is parsed here so the CLI surface is forward-compatible):
+ *   dkk peers add <name> --local <path>
+ *   dkk peers add <name> --git <url> --branch <branch> [--git-path <subpath>]
+ *
+ * Idempotent: re-adding an existing peer with the same source is a
+ * no-op; replacing requires --force.
+ */
+import type { Command as Cmd } from "commander";
+export declare function registerPeersAdd(parent: Cmd): void;
+//# sourceMappingURL=peers-add.d.ts.map

package/dist/features/federation/commands/peers-add.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"peers-add.d.ts","sourceRoot":"","sources":["../../../../src/features/federation/commands/peers-add.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,OAAO,IAAI,GAAG,EAAE,MAAM,WAAW,CAAC;AA0BhD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,GAAG,GAAG,IAAI,CAgFlD"}

package/dist/features/federation/commands/peers-add.js

@@ -0,0 +1,79 @@
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { dirname } from "node:path";
+import { federationFile } from "../../../shared/paths.js";
+import { parseYaml, stringifyYaml } from "../../../shared/yaml.js";
+function isValidKebab(name) {
+    return /^[a-z][a-z0-9-]*$/.test(name);
+}
+export function registerPeersAdd(parent) {
+    parent
+        .command("add <name>")
+        .description("Register a peer service in .dkk/federation.yml")
+        .option("--local <path>", "Local filesystem path to the peer's repository root")
+        .option("--git <url>", "Git URL of the peer repository")
+        .option("--branch <branch>", "Branch to track for git sources", "main")
+        .option("--git-path <subpath>", "Sub-path inside the peer repo where .dkk/ lives")
+        .option("-r, --root <path>", "Override repository root")
+        .option("--force", "Replace an existing entry for this peer")
+        .option("--json", "Output as JSON")
+        .option("--minify", "Minify JSON output")
+        .action((name, opts) => {
+        if (!isValidKebab(name)) {
+            console.error(`Error: Peer name "${name}" must be kebab-case.`);
+            process.exit(1);
+        }
+        if (!opts.local && !opts.git) {
+            console.error("Error: must specify either --local <path> or --git <url>.");
+            process.exit(1);
+        }
+        if (opts.local && opts.git) {
+            console.error("Error: --local and --git are mutually exclusive.");
+            process.exit(1);
+        }
+        let source;
+        if (opts.local) {
+            source = { type: "local", path: opts.local };
+        }
+        else {
+            const branch = opts.branch ?? "main";
+            source = { type: "git", url: opts.git, branch };
+            if (opts.gitPath)
+                source.path = opts.gitPath;
+        }
+        const path = federationFile(opts.root);
+        let manifest;
+        if (existsSync(path)) {
+            manifest = parseYaml(readFileSync(path, "utf-8"));
+            if (!Array.isArray(manifest.peers))
+                manifest.peers = [];
+        }
+        else {
+            manifest = { peers: [] };
+            mkdirSync(dirname(path), { recursive: true });
+        }
+        const existingIdx = manifest.peers.findIndex((p) => p.name === name);
+        if (existingIdx >= 0 && !opts.force) {
+            console.error(`Error: peer "${name}" already exists. Use --force to replace.`);
+            process.exit(1);
+        }
+        const entry = { name, source };
+        if (existingIdx >= 0) {
+            manifest.peers[existingIdx] = entry;
+        }
+        else {
+            manifest.peers.push(entry);
+        }
+        const header = "# Federation manifest — peer services to load alongside this repo.\n";
+        writeFileSync(path, header + stringifyYaml(manifest), "utf-8");
+        if (opts.json) {
+            console.log(JSON.stringify({ path, peer: entry, replaced: existingIdx >= 0 }, null, opts.minify ? 0 : 2));
+            return;
+        }
+        const action = existingIdx >= 0 ? "Replaced" : "Added";
+        const summary = source.type === "local"
+            ? `local: ${source.path}`
+            : `git: ${source.url} @ ${source.branch}`;
+        console.log(`${action} peer "${name}" (${summary}) in ${path}`);
+    });
+}
+//# sourceMappingURL=peers-add.js.map