lockstep-cli 0.0.1

package/dist/adapters/claude.d.ts

@@ -0,0 +1,2 @@
+import type { VendorAdapter } from "./types.js";
+export declare const claudeAdapter: VendorAdapter;

package/dist/adapters/claude.js

@@ -0,0 +1,56 @@
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { access } from "node:fs/promises";
+import { applyFile, readIfExists } from "./fsutil.js";
+import { mergeHooks, mergeMcp, upsertManagedBlock } from "./merge.js";
+import { captureHooks, mcpSpec, SKILL_MD, CLAUDE_BLOCK } from "./templates.js";
+function paths(cwd, scope) {
+    if (scope === "user") {
+        const h = homedir();
+        return {
+            mcp: join(h, ".mcp.json"),
+            hooks: join(h, ".claude", "settings.json"),
+            skill: join(h, ".claude", "skills", "lockstep", "SKILL.md"),
+            instructions: join(h, ".claude", "CLAUDE.md"),
+        };
+    }
+    return {
+        mcp: join(cwd, ".mcp.json"),
+        hooks: join(cwd, ".claude", "settings.json"),
+        skill: join(cwd, ".claude", "skills", "lockstep", "SKILL.md"),
+        instructions: join(cwd, "CLAUDE.md"),
+    };
+}
+export const claudeAdapter = {
+    id: "claude",
+    async detect() {
+        try {
+            await access(join(homedir(), ".claude"));
+            return true;
+        }
+        catch {
+            return false;
+        }
+    },
+    async install(cwd, scope, dryRun) {
+        const p = paths(cwd, scope);
+        return [
+            await applyFile(p.mcp, (cur) => mergeMcp(cur, "lockstep", mcpSpec("claude")), dryRun),
+            await applyFile(p.hooks, (cur) => mergeHooks(cur, captureHooks, "lockstep"), dryRun),
+            await applyFile(p.skill, () => SKILL_MD, dryRun),
+            await applyFile(p.instructions, (cur) => upsertManagedBlock(cur, CLAUDE_BLOCK), dryRun),
+        ];
+    },
+    async verify(cwd, scope) {
+        const p = paths(cwd, scope);
+        const mcp = await readIfExists(p.mcp);
+        const hooks = await readIfExists(p.hooks);
+        const mcpOk = !!mcp && mcp.includes('"lockstep"');
+        const hooksOk = !!hooks && hooks.includes("lockstep");
+        return {
+            ok: mcpOk && hooksOk,
+            details: [`${mcpOk ? "✓" : "✗"} mcp server  (${p.mcp})`, `${hooksOk ? "✓" : "✗"} hooks       (${p.hooks})`],
+        };
+    },
+};
+//# sourceMappingURL=claude.js.map

package/dist/adapters/claude.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude.js","sourceRoot":"","sources":["../../src/adapters/claude.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAG/E,SAAS,KAAK,CAAC,GAAW,EAAE,KAAY;IACtC,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;QACpB,OAAO;YACL,GAAG,EAAE,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC;YACzB,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE,SAAS,EAAE,eAAe,CAAC;YAC1C,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC;YAC3D,YAAY,EAAE,IAAI,CAAC,CAAC,EAAE,SAAS,EAAE,WAAW,CAAC;SAC9C,CAAC;IACJ,CAAC;IACD,OAAO;QACL,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC;QAC3B,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,eAAe,CAAC;QAC5C,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC;QAC7D,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC;KACrC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAkB;IAC1C,EAAE,EAAE,QAAQ;IAEZ,KAAK,CAAC,MAAM;QACV,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;YACzC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM;QAC9B,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC5B,OAAO;YACL,MAAM,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;YACrF,MAAM,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,YAAY,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC;YACpF,MAAM,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;YAChD,MAAM,SAAS,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC;SACxF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK;QACrB,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC5B,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACtD,OAAO;YACL,EAAE,EAAE,KAAK,IAAI,OAAO;YACpB,OAAO,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC,CAAC,KAAK,GAAG,CAAC;SAC5G,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/adapters/fsutil.d.ts

@@ -0,0 +1,7 @@
+export declare function readIfExists(p: string): Promise<string | null>;
+/**
+ * Read → transform → atomic write (temp + rename), backing up the original once.
+ * Returns a human-readable status line. No-op (and reports "unchanged") if the
+ * transform produces identical content — this is what makes init idempotent.
+ */
+export declare function applyFile(p: string, transform: (cur: string | null) => string, dryRun: boolean): Promise<string>;

package/dist/adapters/fsutil.js

@@ -0,0 +1,41 @@
+import { mkdir, readFile, writeFile, rename, access } from "node:fs/promises";
+import { dirname } from "node:path";
+export async function readIfExists(p) {
+    try {
+        return await readFile(p, "utf8");
+    }
+    catch {
+        return null;
+    }
+}
+async function exists(p) {
+    try {
+        await access(p);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Read → transform → atomic write (temp + rename), backing up the original once.
+ * Returns a human-readable status line. No-op (and reports "unchanged") if the
+ * transform produces identical content — this is what makes init idempotent.
+ */
+export async function applyFile(p, transform, dryRun) {
+    const cur = await readIfExists(p);
+    const next = transform(cur);
+    if (cur === next)
+        return `unchanged  ${p}`;
+    if (dryRun)
+        return `would write ${p}`;
+    await mkdir(dirname(p), { recursive: true });
+    if (cur !== null && !(await exists(`${p}.lockstep.bak`))) {
+        await writeFile(`${p}.lockstep.bak`, cur);
+    }
+    const tmp = `${p}.tmp-${process.pid}`;
+    await writeFile(tmp, next);
+    await rename(tmp, p);
+    return `wrote      ${p}`;
+}
+//# sourceMappingURL=fsutil.js.map

package/dist/adapters/fsutil.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fsutil.js","sourceRoot":"","sources":["../../src/adapters/fsutil.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,CAAS;IAC1C,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,CAAS;IAC7B,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,CAAS,EACT,SAAyC,EACzC,MAAe;IAEf,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,cAAc,CAAC,EAAE,CAAC;IAC3C,IAAI,MAAM;QAAE,OAAO,eAAe,CAAC,EAAE,CAAC;IACtC,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;QACzD,MAAM,SAAS,CAAC,GAAG,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC3B,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACrB,OAAO,cAAc,CAAC,EAAE,CAAC;AAC3B,CAAC"}

package/dist/adapters/install.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/adapters/install.test.js

@@ -0,0 +1,32 @@
+import { test } from "node:test";
+import assert from "node:assert/strict";
+import { mkdtemp, mkdir, readFile, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { claudeAdapter } from "./claude.js";
+test("init writes config, is idempotent on disk, and preserves foreign config", async () => {
+    const dir = await mkdtemp(join(tmpdir(), "lockstep-init-"));
+    await mkdir(join(dir, ".claude"), { recursive: true });
+    await writeFile(join(dir, ".claude", "settings.json"), JSON.stringify({ hooks: { PostToolUse: [{ matcher: "Bash", hooks: [{ type: "command", command: "my-linter" }] }] } }, null, 2));
+    await writeFile(join(dir, ".mcp.json"), JSON.stringify({ mcpServers: { other: { command: "x", args: [] } } }, null, 2));
+    await writeFile(join(dir, "CLAUDE.md"), "# Project\n\nhand-written notes\n");
+    const read = async () => ({
+        settings: await readFile(join(dir, ".claude", "settings.json"), "utf8"),
+        mcp: await readFile(join(dir, ".mcp.json"), "utf8"),
+        claude: await readFile(join(dir, "CLAUDE.md"), "utf8"),
+        skill: await readFile(join(dir, ".claude", "skills", "lockstep", "SKILL.md"), "utf8"),
+    });
+    await claudeAdapter.install(dir, "project", false);
+    const after1 = await read();
+    await claudeAdapter.install(dir, "project", false);
+    const after2 = await read();
+    assert.deepEqual(after1, after2, "second init is byte-identical (idempotent)");
+    assert.ok(after1.settings.includes("my-linter"), "foreign hook preserved");
+    assert.ok(after1.mcp.includes('"other"'), "foreign mcp server preserved");
+    assert.ok(after1.claude.includes("hand-written notes"), "user CLAUDE.md content preserved");
+    assert.ok(after1.settings.includes("capture"), "our hooks installed");
+    assert.ok(after1.mcp.includes('"lockstep"'), "our mcp server installed");
+    const v = await claudeAdapter.verify(dir, "project");
+    assert.ok(v.ok, "verify passes after install");
+});
+//# sourceMappingURL=install.test.js.map

package/dist/adapters/install.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.test.js","sourceRoot":"","sources":["../../src/adapters/install.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,IAAI,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;IACzF,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC5D,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,MAAM,SAAS,CACb,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,eAAe,CAAC,EACrC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAC/H,CAAC;IACF,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACxH,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,mCAAmC,CAAC,CAAC;IAE7E,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC;QACxB,QAAQ,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC;QACvE,GAAG,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QACnD,MAAM,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QACtD,KAAK,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC;KACtF,CAAC,CAAC;IAEH,MAAM,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC;IAC5B,MAAM,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC;IAE5B,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,4CAA4C,CAAC,CAAC;IAC/E,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,wBAAwB,CAAC,CAAC;IAC3E,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,8BAA8B,CAAC,CAAC;IAC1E,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,kCAAkC,CAAC,CAAC;IAC5F,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,qBAAqB,CAAC,CAAC;IACtE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,0BAA0B,CAAC,CAAC;IAEzE,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACrD,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,6BAA6B,CAAC,CAAC;AACjD,CAAC,CAAC,CAAC"}

package/dist/adapters/merge.d.ts

@@ -0,0 +1,27 @@
+export interface HookCommand {
+    type: "command";
+    command: string;
+    args?: string[];
+    timeout?: number;
+}
+export interface HookEntry {
+    matcher?: string;
+    hooks: HookCommand[];
+}
+export interface ManagedHook {
+    event: string;
+    matcher: string;
+    args: string[];
+    timeout: number;
+}
+export interface McpServerSpec {
+    command: string;
+    args: string[];
+    env?: Record<string, string>;
+}
+/** Merge our capture hooks into an existing settings JSON, preserving foreign hooks. */
+export declare function mergeHooks(existing: string | null, managed: ManagedHook[], command?: string): string;
+/** Upsert our MCP server under its stable key; leave sibling servers untouched. */
+export declare function mergeMcp(existing: string | null, name: string, spec: McpServerSpec): string;
+/** Replace only the delimited managed block in a markdown file; append if absent. */
+export declare function upsertManagedBlock(existing: string | null, block: string): string;

package/dist/adapters/merge.js

@@ -0,0 +1,49 @@
+// Identifies lockstep-owned hook entries (matches both the global-bin form `lockstep …`
+// and the legacy `npx @lockstep/cli …` form, so re-running init migrates old configs).
+const MARKER = "lockstep";
+function isOurs(entry) {
+    return (entry.hooks ?? []).some((h) => `${h.command} ${(h.args ?? []).join(" ")}`.includes(MARKER));
+}
+/** Merge our capture hooks into an existing settings JSON, preserving foreign hooks. */
+export function mergeHooks(existing, managed, command = "npx") {
+    const obj = existing ? JSON.parse(existing) : {};
+    const hooks = obj.hooks ?? {};
+    const byEvent = new Map();
+    for (const m of managed) {
+        const list = byEvent.get(m.event) ?? [];
+        list.push(m);
+        byEvent.set(m.event, list);
+    }
+    for (const [event, ms] of byEvent) {
+        const arr = Array.isArray(hooks[event]) ? hooks[event] : [];
+        const foreign = arr.filter((e) => !isOurs(e));
+        const ours = ms.map((m) => ({
+            matcher: m.matcher,
+            hooks: [{ type: "command", command, args: m.args, timeout: m.timeout }],
+        }));
+        hooks[event] = [...foreign, ...ours];
+    }
+    obj.hooks = hooks;
+    return JSON.stringify(obj, null, 2) + "\n";
+}
+/** Upsert our MCP server under its stable key; leave sibling servers untouched. */
+export function mergeMcp(existing, name, spec) {
+    const obj = existing ? JSON.parse(existing) : {};
+    const servers = obj.mcpServers ?? {};
+    servers[name] = spec;
+    obj.mcpServers = servers;
+    return JSON.stringify(obj, null, 2) + "\n";
+}
+const START = "<!-- lockstep:start -->";
+const END = "<!-- lockstep:end -->";
+/** Replace only the delimited managed block in a markdown file; append if absent. */
+export function upsertManagedBlock(existing, block) {
+    const wrapped = `${START}\n${block}\n${END}`;
+    if (!existing)
+        return wrapped + "\n";
+    const re = new RegExp(`${START}[\\s\\S]*?${END}`);
+    if (re.test(existing))
+        return existing.replace(re, wrapped);
+    return existing.trimEnd() + "\n\n" + wrapped + "\n";
+}
+//# sourceMappingURL=merge.js.map

package/dist/adapters/merge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"merge.js","sourceRoot":"","sources":["../../src/adapters/merge.ts"],"names":[],"mappings":"AASA,wFAAwF;AACxF,uFAAuF;AACvF,MAAM,MAAM,GAAG,UAAU,CAAC;AAwB1B,SAAS,MAAM,CAAC,KAAgB;IAC9B,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AACtG,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,UAAU,CAAC,QAAuB,EAAE,OAAsB,EAAE,OAAO,GAAG,KAAK;IACzF,MAAM,GAAG,GAAS,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,MAAM,KAAK,GAAI,GAAG,CAAC,KAAqC,IAAI,EAAE,CAAC;IAE/D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;IACjD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,OAAO,EAAE,CAAC;QAClC,MAAM,GAAG,GAAgB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAgB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACvC,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;SACxE,CAAC,CAAC,CAAC;QACJ,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IACvC,CAAC;IACD,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC;IAClB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;AAC7C,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,QAAQ,CAAC,QAAuB,EAAE,IAAY,EAAE,IAAmB;IACjF,MAAM,GAAG,GAAS,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,MAAM,OAAO,GAAI,GAAG,CAAC,UAA4C,IAAI,EAAE,CAAC;IACxE,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACrB,GAAG,CAAC,UAAU,GAAG,OAAO,CAAC;IACzB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;AAC7C,CAAC;AAED,MAAM,KAAK,GAAG,yBAAyB,CAAC;AACxC,MAAM,GAAG,GAAG,uBAAuB,CAAC;AAEpC,qFAAqF;AACrF,MAAM,UAAU,kBAAkB,CAAC,QAAuB,EAAE,KAAa;IACvE,MAAM,OAAO,GAAG,GAAG,KAAK,KAAK,KAAK,KAAK,GAAG,EAAE,CAAC;IAC7C,IAAI,CAAC,QAAQ;QAAE,OAAO,OAAO,GAAG,IAAI,CAAC;IACrC,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,aAAa,GAAG,EAAE,CAAC,CAAC;IAClD,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAC5D,OAAO,QAAQ,CAAC,OAAO,EAAE,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;AACtD,CAAC"}

package/dist/adapters/merge.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/adapters/merge.test.js

@@ -0,0 +1,41 @@
+import { test } from "node:test";
+import assert from "node:assert/strict";
+import { mergeHooks, mergeMcp, upsertManagedBlock } from "./merge.js";
+const HOOKS = [
+    { event: "SessionStart", matcher: "*", args: ["-y", "@lockstep/cli", "capture", "--event", "SessionStart"], timeout: 20 },
+    { event: "PostToolUse", matcher: "Edit|Write", args: ["-y", "@lockstep/cli", "capture", "--event", "PostToolUse"], timeout: 30 },
+];
+test("mergeHooks is idempotent (run twice = byte-identical)", () => {
+    const once = mergeHooks(null, HOOKS);
+    const twice = mergeHooks(once, HOOKS);
+    assert.equal(once, twice);
+});
+test("mergeHooks preserves foreign hooks and stays idempotent", () => {
+    const existing = JSON.stringify({
+        hooks: { PostToolUse: [{ matcher: "Bash", hooks: [{ type: "command", command: "my-linter" }] }] },
+    });
+    const merged = mergeHooks(existing, HOOKS);
+    const obj = JSON.parse(merged);
+    const cmds = obj.hooks.PostToolUse.map((e) => e.hooks[0].command);
+    assert.ok(cmds.includes("my-linter"), "foreign hook preserved");
+    assert.ok(obj.hooks.PostToolUse.some((e) => (e.hooks[0].args ?? []).join(" ").includes("@lockstep/cli")), "our hook added");
+    assert.equal(mergeHooks(merged, HOOKS), merged, "idempotent with foreign present");
+});
+test("mergeMcp upserts our key, preserves siblings, idempotent", () => {
+    const existing = JSON.stringify({ mcpServers: { other: { command: "x", args: [] } } });
+    const spec = { command: "npx", args: ["-y", "@lockstep/cli", "mcp"] };
+    const m1 = mergeMcp(existing, "lockstep", spec);
+    const obj = JSON.parse(m1);
+    assert.ok(obj.mcpServers.other, "sibling preserved");
+    assert.ok(obj.mcpServers.lockstep, "our server added");
+    assert.equal(mergeMcp(m1, "lockstep", spec), m1, "idempotent");
+});
+test("upsertManagedBlock replaces only the managed region, idempotent", () => {
+    const md = "# My project\n\nsome notes\n";
+    const b1 = upsertManagedBlock(md, "LOCKSTEP RULES v1");
+    assert.ok(b1.includes("My project") && b1.includes("LOCKSTEP RULES v1"));
+    const b2 = upsertManagedBlock(b1, "LOCKSTEP RULES v2");
+    assert.ok(b2.includes("v2") && !b2.includes("v1"), "managed block replaced, user content kept");
+    assert.equal(upsertManagedBlock(b2, "LOCKSTEP RULES v2"), b2, "idempotent");
+});
+//# sourceMappingURL=merge.test.js.map

package/dist/adapters/merge.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"merge.test.js","sourceRoot":"","sources":["../../src/adapters/merge.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,kBAAkB,EAAoB,MAAM,YAAY,CAAC;AAExF,MAAM,KAAK,GAAkB;IAC3B,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;IACzH,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;CACjI,CAAC;AAEF,IAAI,CAAC,uDAAuD,EAAE,GAAG,EAAE;IACjE,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACtC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC5B,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yDAAyD,EAAE,GAAG,EAAE;IACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC;QAC9B,KAAK,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,EAAE;KAClG,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAoF,CAAC;IAClH,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,CAAC;IACnE,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,wBAAwB,CAAC,CAAC;IAChE,MAAM,CAAC,EAAE,CACP,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,EAC/F,gBAAgB,CACjB,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,iCAAiC,CAAC,CAAC;AACrF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0DAA0D,EAAE,GAAG,EAAE;IACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACvF,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,eAAe,EAAE,KAAK,CAAC,EAAE,CAAC;IACtE,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAA4C,CAAC;IACtE,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;IACrD,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IACvD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,YAAY,CAAC,CAAC;AACjE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iEAAiE,EAAE,GAAG,EAAE;IAC3E,MAAM,EAAE,GAAG,8BAA8B,CAAC;IAC1C,MAAM,EAAE,GAAG,kBAAkB,CAAC,EAAE,EAAE,mBAAmB,CAAC,CAAC;IACvD,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC;IACzE,MAAM,EAAE,GAAG,kBAAkB,CAAC,EAAE,EAAE,mBAAmB,CAAC,CAAC;IACvD,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,2CAA2C,CAAC,CAAC;IAChG,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,EAAE,mBAAmB,CAAC,EAAE,EAAE,EAAE,YAAY,CAAC,CAAC;AAC9E,CAAC,CAAC,CAAC"}

package/dist/adapters/registry.d.ts

@@ -0,0 +1,2 @@
+import type { VendorAdapter } from "./types.js";
+export declare function getAdapters(vendor?: string): Promise<VendorAdapter[]>;

package/dist/adapters/registry.js

@@ -0,0 +1,17 @@
+import { claudeAdapter } from "./claude.js";
+// Codex + Gemini adapters slot in here later — same interface, zero core change.
+const ALL = [claudeAdapter];
+export async function getAdapters(vendor) {
+    if (vendor && vendor !== "all") {
+        return ALL.filter((a) => a.id === vendor);
+    }
+    const detected = [];
+    for (const a of ALL) {
+        if (await a.detect())
+            detected.push(a);
+    }
+    // Project-committed config is harmless even if the CLI isn't detected locally,
+    // so fall back to all known adapters when nothing is detected.
+    return detected.length > 0 ? detected : ALL;
+}
+//# sourceMappingURL=registry.js.map

package/dist/adapters/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/adapters/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAG5C,iFAAiF;AACjF,MAAM,GAAG,GAAoB,CAAC,aAAa,CAAC,CAAC;AAE7C,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAe;IAC/C,IAAI,MAAM,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QAC/B,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;QACpB,IAAI,MAAM,CAAC,CAAC,MAAM,EAAE;YAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC;IACD,+EAA+E;IAC/E,+DAA+D;IAC/D,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC;AAC9C,CAAC"}

package/dist/adapters/templates.d.ts

@@ -0,0 +1,5 @@
+import type { ManagedHook, McpServerSpec } from "./merge.js";
+export declare const mcpSpec: (vendor: string) => McpServerSpec;
+export declare const captureHooks: ManagedHook[];
+export declare const SKILL_MD = "---\nname: lockstep\ndescription: Keep this repo's coding agents in lockstep \u2014 read the shared ledger before coding, publish changes after.\n---\n\n# Lockstep\n\nThis project uses Lockstep to coordinate multiple developers' coding agents on the same codebase.\n\n## On session start\n- Call `inbox` to see what changed, what's newly binding, and what's delegated to you.\n- Call `decisions` to load the binding rules for the areas you'll touch.\n\n## Before coding a shared/contract surface\n- Call `query` to check the ledger for existing decisions/contracts (answer instantly if known).\n- Respect any `binding` decision in scope.\n\n## After making a change\n- Summarize the change and call `notify` (include a contract delta for interface changes).\n- For any surface you call, record the dependency with `register_dependency`.\n\n## Coordinating\n- Use `ask` for code/repo questions (set `urgent` if you're blocked).\n- Use `delegate` / `complete` for handoffs. Propose binding rules with `propose_decision`.\n";
+export declare const CLAUDE_BLOCK = "## Lockstep (team coordination)\nOn session start, read your `inbox` and current `decisions`. Before coding a shared/contract surface, `query` the ledger and obey binding decisions. After a change, summarize it, `register_dependency` for surfaces you call, and `notify`. Ask code/repo questions with `ask` (urgent if blocking). See the `lockstep` skill for detail.";

package/dist/adapters/templates.js

@@ -0,0 +1,40 @@
+// Uses the globally-installed `lockstep` bin. (When the package is published to npm,
+// an installer flag can switch these to `npx @lockstep/cli` for zero-install teammates.)
+export const mcpSpec = (vendor) => ({
+    command: "lockstep",
+    args: ["mcp"],
+    env: { LOCKSTEP_VENDOR: vendor },
+});
+export const captureHooks = [
+    { event: "SessionStart", matcher: "*", args: ["capture", "--event", "SessionStart"], timeout: 20 },
+    { event: "PostToolUse", matcher: "Edit|Write|MultiEdit|NotebookEdit", args: ["capture", "--event", "PostToolUse"], timeout: 30 },
+    { event: "Stop", matcher: "*", args: ["capture", "--event", "Stop"], timeout: 45 },
+];
+export const SKILL_MD = `---
+name: lockstep
+description: Keep this repo's coding agents in lockstep — read the shared ledger before coding, publish changes after.
+---
+
+# Lockstep
+
+This project uses Lockstep to coordinate multiple developers' coding agents on the same codebase.
+
+## On session start
+- Call \`inbox\` to see what changed, what's newly binding, and what's delegated to you.
+- Call \`decisions\` to load the binding rules for the areas you'll touch.
+
+## Before coding a shared/contract surface
+- Call \`query\` to check the ledger for existing decisions/contracts (answer instantly if known).
+- Respect any \`binding\` decision in scope.
+
+## After making a change
+- Summarize the change and call \`notify\` (include a contract delta for interface changes).
+- For any surface you call, record the dependency with \`register_dependency\`.
+
+## Coordinating
+- Use \`ask\` for code/repo questions (set \`urgent\` if you're blocked).
+- Use \`delegate\` / \`complete\` for handoffs. Propose binding rules with \`propose_decision\`.
+`;
+export const CLAUDE_BLOCK = `## Lockstep (team coordination)
+On session start, read your \`inbox\` and current \`decisions\`. Before coding a shared/contract surface, \`query\` the ledger and obey binding decisions. After a change, summarize it, \`register_dependency\` for surfaces you call, and \`notify\`. Ask code/repo questions with \`ask\` (urgent if blocking). See the \`lockstep\` skill for detail.`;
+//# sourceMappingURL=templates.js.map

package/dist/adapters/templates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.js","sourceRoot":"","sources":["../../src/adapters/templates.ts"],"names":[],"mappings":"AAEA,qFAAqF;AACrF,yFAAyF;AACzF,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,MAAc,EAAiB,EAAE,CAAC,CAAC;IACzD,OAAO,EAAE,UAAU;IACnB,IAAI,EAAE,CAAC,KAAK,CAAC;IACb,GAAG,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE;CACjC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,YAAY,GAAkB;IACzC,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,cAAc,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;IAClG,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,mCAAmC,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,aAAa,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;IAChI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;CACnF,CAAC;AAEF,MAAM,CAAC,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;;;;;;;;;CAwBvB,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG;0VAC8T,CAAC"}

package/dist/adapters/types.d.ts

@@ -0,0 +1,14 @@
+export type Scope = "project" | "user";
+/**
+ * The vendor seam. Core/MCP tools are identical across vendors; only config writing
+ * and event-name mapping differ. Adding Codex/Gemini = a new implementation, zero core change.
+ */
+export interface VendorAdapter {
+    id: string;
+    detect(): Promise<boolean>;
+    install(cwd: string, scope: Scope, dryRun: boolean): Promise<string[]>;
+    verify(cwd: string, scope: Scope): Promise<{
+        ok: boolean;
+        details: string[];
+    }>;
+}

package/dist/adapters/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/adapters/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/adapters/types.ts"],"names":[],"mappings":""}

package/dist/auth/token-store.d.ts

@@ -0,0 +1,3 @@
+export declare function setToken(token: string): Promise<void>;
+export declare function getToken(): Promise<string | null>;
+export declare function clearToken(): Promise<void>;

package/dist/auth/token-store.js

@@ -0,0 +1,74 @@
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { mkdir, readFile, writeFile, rm, chmod } from "node:fs/promises";
+/**
+ * Stores the Lockstep session token. Prefers the OS keychain (keytar) but falls back to a
+ * 0600 file under ~/.lockstep whenever keytar is missing OR throws (e.g. headless/no keychain).
+ * Never stores the GitHub token.
+ */
+const SERVICE = "lockstep";
+const ACCOUNT = "session-token";
+const fileDir = join(homedir(), ".lockstep");
+const filePath = join(fileDir, "credentials.json");
+async function keychain() {
+    try {
+        const mod = await import("keytar");
+        return (mod.default ?? mod);
+    }
+    catch {
+        return null;
+    }
+}
+async function fileSet(token) {
+    await mkdir(fileDir, { recursive: true });
+    await writeFile(filePath, JSON.stringify({ token }), { mode: 0o600 });
+    await chmod(filePath, 0o600);
+}
+async function fileGet() {
+    try {
+        return JSON.parse(await readFile(filePath, "utf8")).token ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+export async function setToken(token) {
+    const kc = await keychain();
+    if (kc) {
+        try {
+            await kc.setPassword(SERVICE, ACCOUNT, token);
+            return;
+        }
+        catch {
+            /* keychain unavailable → file fallback */
+        }
+    }
+    await fileSet(token);
+}
+export async function getToken() {
+    const kc = await keychain();
+    if (kc) {
+        try {
+            const v = await kc.getPassword(SERVICE, ACCOUNT);
+            if (v)
+                return v;
+        }
+        catch {
+            /* fall through to file */
+        }
+    }
+    return fileGet();
+}
+export async function clearToken() {
+    const kc = await keychain();
+    if (kc) {
+        try {
+            await kc.deletePassword(SERVICE, ACCOUNT);
+        }
+        catch {
+            /* ignore */
+        }
+    }
+    await rm(filePath, { force: true });
+}
+//# sourceMappingURL=token-store.js.map

package/dist/auth/token-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-store.js","sourceRoot":"","sources":["../../src/auth/token-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAEzE;;;;GAIG;AACH,MAAM,OAAO,GAAG,UAAU,CAAC;AAC3B,MAAM,OAAO,GAAG,eAAe,CAAC;AAChC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;AAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;AAQnD,KAAK,UAAU,QAAQ;IACrB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,CAAwB,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,KAAa;IAClC,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,MAAM,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtE,MAAM,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC/B,CAAC;AACD,KAAK,UAAU,OAAO;IACpB,IAAI,CAAC;QACH,OAAQ,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAwB,CAAC,KAAK,IAAI,IAAI,CAAC;IAC5F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,KAAa;IAC1C,MAAM,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;IAC5B,IAAI,EAAE,EAAE,CAAC;QACP,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QAAC,MAAM,CAAC;YACP,0CAA0C;QAC5C,CAAC;IACH,CAAC;IACD,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ;IAC5B,MAAM,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;IAC5B,IAAI,EAAE,EAAE,CAAC;QACP,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACjD,IAAI,CAAC;gBAAE,OAAO,CAAC,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,0BAA0B;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,OAAO,EAAE,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,MAAM,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;IAC5B,IAAI,EAAE,EAAE,CAAC;QACP,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;IACH,CAAC;IACD,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACtC,CAAC"}

package/dist/capture/classify.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Contract-surface detection (PRD open-Q1, a safety gate). Pragmatic heuristic:
+ * does a changed file expose a public interface others code against? Bias to "shared"
+ * when in doubt — a false-negative in the cross-org wedge is a confidentiality leak.
+ * Pure + testable.
+ */
+export declare function isContractSurface(path: string, content?: string): boolean;
+/** owned (only you own all changed paths, none are contract surfaces) vs shared. */
+export declare function riskTierFor(opts: {
+    anyContractSurface: boolean;
+    allOwnedByMe: boolean;
+}): "owned" | "shared";

package/dist/capture/classify.js

@@ -0,0 +1,26 @@
+/**
+ * Contract-surface detection (PRD open-Q1, a safety gate). Pragmatic heuristic:
+ * does a changed file expose a public interface others code against? Bias to "shared"
+ * when in doubt — a false-negative in the cross-org wedge is a confidentiality leak.
+ * Pure + testable.
+ */
+export function isContractSurface(path, content) {
+    if (/(openapi|swagger)/i.test(path) && /\.(ya?ml|json)$/i.test(path))
+        return true;
+    if (/\.(proto|graphql|gql)$/i.test(path))
+        return true;
+    if (/(^|\/)(routes?|controllers?|api|handlers?|endpoints?|contracts?)(\/|\.)/i.test(path))
+        return true;
+    if (content && /\.(ts|tsx|js|mjs)$/i.test(path)) {
+        if (/\bexport\s+(async\s+)?(function|const|class|interface|type)\b/.test(content))
+            return true;
+    }
+    return false;
+}
+/** owned (only you own all changed paths, none are contract surfaces) vs shared. */
+export function riskTierFor(opts) {
+    if (opts.anyContractSurface)
+        return "shared";
+    return opts.allOwnedByMe ? "owned" : "shared";
+}
+//# sourceMappingURL=classify.js.map

package/dist/capture/classify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify.js","sourceRoot":"","sources":["../../src/capture/classify.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,OAAgB;IAC9D,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAClF,IAAI,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtD,IAAI,0EAA0E,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACvG,IAAI,OAAO,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,+DAA+D,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;IACjG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,WAAW,CAAC,IAA4D;IACtF,IAAI,IAAI,CAAC,kBAAkB;QAAE,OAAO,QAAQ,CAAC;IAC7C,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;AAChD,CAAC"}

package/dist/capture/classify.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/capture/classify.test.js

@@ -0,0 +1,25 @@
+import { test } from "node:test";
+import assert from "node:assert/strict";
+import { isContractSurface, riskTierFor } from "./classify.js";
+test("detects OpenAPI / schema files as contract surfaces", () => {
+    assert.ok(isContractSurface("api/openapi.yaml"));
+    assert.ok(isContractSurface("schema.graphql"));
+    assert.ok(isContractSurface("proto/orders.proto"));
+});
+test("detects route/controller paths", () => {
+    assert.ok(isContractSurface("src/routes/orders.ts"));
+    assert.ok(isContractSurface("app/controllers/cart.rb"));
+});
+test("detects exported TS API by content", () => {
+    assert.ok(isContractSurface("src/orders.ts", "export function createOrder() {}"));
+    assert.ok(!isContractSurface("src/util.ts", "function localHelper() {}"));
+});
+test("plain internal file is not a contract surface", () => {
+    assert.ok(!isContractSurface("src/internal/helpers.go", "func helper() {}"));
+});
+test("riskTier biases to shared on contract surfaces", () => {
+    assert.equal(riskTierFor({ anyContractSurface: true, allOwnedByMe: true }), "shared");
+    assert.equal(riskTierFor({ anyContractSurface: false, allOwnedByMe: true }), "owned");
+    assert.equal(riskTierFor({ anyContractSurface: false, allOwnedByMe: false }), "shared");
+});
+//# sourceMappingURL=classify.test.js.map

package/dist/capture/classify.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify.test.js","sourceRoot":"","sources":["../../src/capture/classify.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE/D,IAAI,CAAC,qDAAqD,EAAE,GAAG,EAAE;IAC/D,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACjD,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC/C,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,CAAC,CAAC;AACrD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC1C,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,sBAAsB,CAAC,CAAC,CAAC;IACrD,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,yBAAyB,CAAC,CAAC,CAAC;AAC1D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAC9C,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,eAAe,EAAE,kCAAkC,CAAC,CAAC,CAAC;IAClF,MAAM,CAAC,EAAE,CAAC,CAAC,iBAAiB,CAAC,aAAa,EAAE,2BAA2B,CAAC,CAAC,CAAC;AAC5E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+CAA+C,EAAE,GAAG,EAAE;IACzD,MAAM,CAAC,EAAE,CAAC,CAAC,iBAAiB,CAAC,yBAAyB,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAC/E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gDAAgD,EAAE,GAAG,EAAE;IAC1D,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;IACtF,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IACtF,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;AAC1F,CAAC,CAAC,CAAC"}

package/dist/capture/diff.d.ts

@@ -0,0 +1,2 @@
+/** Changed files (tracked vs HEAD + untracked), read-only. Source never leaves the machine. */
+export declare function changedFiles(cwd: string): string[];

package/dist/capture/diff.js

@@ -0,0 +1,19 @@
+import { execFileSync } from "node:child_process";
+/** Changed files (tracked vs HEAD + untracked), read-only. Source never leaves the machine. */
+export function changedFiles(cwd) {
+    try {
+        const tracked = execFileSync("git", ["-C", cwd, "diff", "--name-only", "HEAD"], { encoding: "utf8" })
+            .split("\n")
+            .filter(Boolean);
+        const untracked = execFileSync("git", ["-C", cwd, "ls-files", "--others", "--exclude-standard"], {
+            encoding: "utf8",
+        })
+            .split("\n")
+            .filter(Boolean);
+        return [...new Set([...tracked, ...untracked])];
+    }
+    catch {
+        return [];
+    }
+}
+//# sourceMappingURL=diff.js.map

package/dist/capture/diff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.js","sourceRoot":"","sources":["../../src/capture/diff.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,+FAA+F;AAC/F,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;aAClG,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,OAAO,CAAC,CAAC;QACnB,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,UAAU,EAAE,oBAAoB,CAAC,EAAE;YAC/F,QAAQ,EAAE,MAAM;SACjB,CAAC;aACC,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,OAAO,CAAC,CAAC;QACnB,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/capture/index.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Hook entrypoint. Resilient by design — never break the agent: on any error it exits 0.
+ *  SessionStart → replay inbox + binding decisions as additionalContext.
+ *  PostToolUse/Stop → diff → classify surface → risk-tiered publish via notify.
+ */
+export declare function runCapture(event: string): Promise<void>;