lockstep-cli 0.0.5 → 0.1.1

package/README.md

@@ -0,0 +1,29 @@
+# lockstep-cli
+
+The CLI for [Lockstep](https://www.getlockstep.dev) — one source of truth for every engineering decision, read by every human and every AI agent before work starts.
+
+Lockstep captures decisions automatically from Slack, Notion, Jira, and pull requests, gets each one confirmed by its owner, briefs any MCP-compatible coding agent (Claude Code, Cursor, and others) at session start, and flags work that contradicts a Locked decision before it ships.
+
+## Install
+
+```bash
+npm install -g lockstep-cli
+```
+
+## Quick start
+
+```bash
+lockstep login     # authenticate
+lockstep onboard   # one step: wire up hooks + MCP for your agent, link this repo
+lockstep status    # check auth + config health
+```
+
+Full setup, MCP configuration, and self-hosting (Apache-2.0, one `docker compose up`):
+
+- **Website:** https://www.getlockstep.dev
+- **How it works:** https://www.getlockstep.dev/how-it-works
+- **Source:** https://github.com/lockstep-team-agent/lockstep
+
+## License
+
+Apache-2.0

package/dist/adapters/claude.js

@@ -2,22 +2,31 @@ import { homedir } from "node:os";
 import { join } from "node:path";
 import { access } from "node:fs/promises";
 import { applyFile, readIfExists } from "./fsutil.js";
-import { mergeHooks, mergeMcp, upsertManagedBlock } from "./merge.js";
-import { captureHooks, mcpSpec, SKILL_MD, CLAUDE_BLOCK } from "./templates.js";
+import { mergeHooks, mergeMcp, mergeStatusLine, removeManagedHooks, removeManagedStatusLine, upsertManagedBlock, } from "./merge.js";
+import { captureHooks, mcpSpec, SKILL_MD, SETUP_SKILL_MD, CLAUDE_BLOCK } from "./templates.js";
 function paths(cwd, scope) {
     if (scope === "user") {
         const h = homedir();
+        const hooks = join(h, ".claude", "settings.json");
         return {
             mcp: join(h, ".mcp.json"),
-            hooks: join(h, ".claude", "settings.json"),
+            hooks,
+            // ~/.claude is already personal — hooks live in the same file (no shared/local split).
+            hooksLocal: hooks,
             skill: join(h, ".claude", "skills", "lockstep", "SKILL.md"),
+            setupSkill: join(h, ".claude", "skills", "lockstep-setup", "SKILL.md"),
             instructions: join(h, ".claude", "CLAUDE.md"),
         };
     }
     return {
         mcp: join(cwd, ".mcp.json"),
         hooks: join(cwd, ".claude", "settings.json"),
+        // Hooks + statusline invoke the locally-installed `lockstep` bin — personal/machine state, so
+        // they go in settings.local.json (Claude Code's personal scope, auto-gitignored), never in the
+        // committed settings.json where they'd leak to teammates on git pull (IMPROVEMENTS #2).
+        hooksLocal: join(cwd, ".claude", "settings.local.json"),
         skill: join(cwd, ".claude", "skills", "lockstep", "SKILL.md"),
+        setupSkill: join(cwd, ".claude", "skills", "lockstep-setup", "SKILL.md"),
         instructions: join(cwd, "CLAUDE.md"),
     };
 }
@@ -34,22 +43,32 @@ export const claudeAdapter = {
     },
     async install(cwd, scope, dryRun) {
         const p = paths(cwd, scope);
-        return [
+        const results = [
             await applyFile(p.mcp, (cur) => mergeMcp(cur, "lockstep", mcpSpec("claude")), dryRun),
-            await applyFile(p.hooks, (cur) => mergeHooks(cur, captureHooks, "lockstep"), dryRun),
+            await applyFile(p.hooksLocal, (cur) => {
+                const withHooks = mergeHooks(cur, captureHooks, "lockstep");
+                return mergeStatusLine(withHooks, "lockstep", ["statusline"]);
+            }, dryRun),
             await applyFile(p.skill, () => SKILL_MD, dryRun),
+            await applyFile(p.setupSkill, () => SETUP_SKILL_MD, dryRun),
             await applyFile(p.instructions, (cur) => upsertManagedBlock(cur, CLAUDE_BLOCK), dryRun),
         ];
+        // Self-heal pre-existing installs: strip our hooks/statusline from the SHARED settings.json
+        // (foreign entries preserved; the file is never created if absent).
+        if (p.hooksLocal !== p.hooks && (await readIfExists(p.hooks)) !== null) {
+            results.push(await applyFile(p.hooks, (cur) => removeManagedStatusLine(removeManagedHooks(cur ?? "{}")), dryRun));
+        }
+        return results;
     },
     async verify(cwd, scope) {
         const p = paths(cwd, scope);
         const mcp = await readIfExists(p.mcp);
-        const hooks = await readIfExists(p.hooks);
+        const hooks = await readIfExists(p.hooksLocal);
         const mcpOk = !!mcp && mcp.includes('"lockstep"');
         const hooksOk = !!hooks && hooks.includes("lockstep");
         return {
             ok: mcpOk && hooksOk,
-            details: [`${mcpOk ? "✓" : "✗"} mcp server  (${p.mcp})`, `${hooksOk ? "✓" : "✗"} hooks       (${p.hooks})`],
+            details: [`${mcpOk ? "✓" : "✗"} mcp server  (${p.mcp})`, `${hooksOk ? "✓" : "✗"} hooks       (${p.hooksLocal})`],
         };
     },
 };

package/dist/adapters/claude.js.map

@@ -1 +1 @@
-{"version":3,"file":"claude.js","sourceRoot":"","sources":["../../src/adapters/claude.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAG/E,SAAS,KAAK,CAAC,GAAW,EAAE,KAAY;IACtC,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;QACpB,OAAO;YACL,GAAG,EAAE,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC;YACzB,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE,SAAS,EAAE,eAAe,CAAC;YAC1C,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC;YAC3D,YAAY,EAAE,IAAI,CAAC,CAAC,EAAE,SAAS,EAAE,WAAW,CAAC;SAC9C,CAAC;IACJ,CAAC;IACD,OAAO;QACL,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC;QAC3B,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,eAAe,CAAC;QAC5C,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC;QAC7D,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC;KACrC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAkB;IAC1C,EAAE,EAAE,QAAQ;IAEZ,KAAK,CAAC,MAAM;QACV,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;YACzC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM;QAC9B,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC5B,OAAO;YACL,MAAM,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;YACrF,MAAM,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,YAAY,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC;YACpF,MAAM,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;YAChD,MAAM,SAAS,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC;SACxF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK;QACrB,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC5B,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACtD,OAAO;YACL,EAAE,EAAE,KAAK,IAAI,OAAO;YACpB,OAAO,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC,CAAC,KAAK,GAAG,CAAC;SAC5G,CAAC;IACJ,CAAC;CACF,CAAC"}
+{"version":3,"file":"claude.js","sourceRoot":"","sources":["../../src/adapters/claude.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EACL,UAAU,EACV,QAAQ,EACR,eAAe,EACf,kBAAkB,EAClB,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAG/F,SAAS,KAAK,CAAC,GAAW,EAAE,KAAY;IACtC,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;QAClD,OAAO;YACL,GAAG,EAAE,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC;YACzB,KAAK;YACL,uFAAuF;YACvF,UAAU,EAAE,KAAK;YACjB,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC;YAC3D,UAAU,EAAE,IAAI,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,gBAAgB,EAAE,UAAU,CAAC;YACtE,YAAY,EAAE,IAAI,CAAC,CAAC,EAAE,SAAS,EAAE,WAAW,CAAC;SAC9C,CAAC;IACJ,CAAC;IACD,OAAO;QACL,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC;QAC3B,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,eAAe,CAAC;QAC5C,8FAA8F;QAC9F,+FAA+F;QAC/F,wFAAwF;QACxF,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,qBAAqB,CAAC;QACvD,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC;QAC7D,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,gBAAgB,EAAE,UAAU,CAAC;QACxE,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC;KACrC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAkB;IAC1C,EAAE,EAAE,QAAQ;IAEZ,KAAK,CAAC,MAAM;QACV,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;YACzC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM;QAC9B,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC5B,MAAM,OAAO,GAAG;YACd,MAAM,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;YACrF,MAAM,SAAS,CACb,CAAC,CAAC,UAAU,EACZ,CAAC,GAAG,EAAE,EAAE;gBACN,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;gBAC5D,OAAO,eAAe,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;YAChE,CAAC,EACD,MAAM,CACP;YACD,MAAM,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;YAChD,MAAM,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,cAAc,EAAE,MAAM,CAAC;YAC3D,MAAM,SAAS,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC;SACxF,CAAC;QACF,4FAA4F;QAC5F,oEAAoE;QACpE,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,MAAM,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACvE,OAAO,CAAC,IAAI,CACV,MAAM,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,uBAAuB,CAAC,kBAAkB,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CACpG,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK;QACrB,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC5B,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACtD,OAAO;YACL,EAAE,EAAE,KAAK,IAAI,OAAO;YACpB,OAAO,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC,CAAC,UAAU,GAAG,CAAC;SACjH,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/adapters/install.test.js

@@ -12,6 +12,7 @@ test("init writes config, is idempotent on disk, and preserves foreign config",
     await writeFile(join(dir, "CLAUDE.md"), "# Project\n\nhand-written notes\n");
     const read = async () => ({
         settings: await readFile(join(dir, ".claude", "settings.json"), "utf8"),
+        local: await readFile(join(dir, ".claude", "settings.local.json"), "utf8"),
         mcp: await readFile(join(dir, ".mcp.json"), "utf8"),
         claude: await readFile(join(dir, "CLAUDE.md"), "utf8"),
         skill: await readFile(join(dir, ".claude", "skills", "lockstep", "SKILL.md"), "utf8"),
@@ -21,12 +22,62 @@ test("init writes config, is idempotent on disk, and preserves foreign config",
     await claudeAdapter.install(dir, "project", false);
     const after2 = await read();
     assert.deepEqual(after1, after2, "second init is byte-identical (idempotent)");
-    assert.ok(after1.settings.includes("my-linter"), "foreign hook preserved");
+    assert.ok(after1.settings.includes("my-linter"), "foreign hook preserved in the shared file");
+    assert.ok(!after1.settings.includes("capture"), "our hooks stay OUT of the committed settings.json");
+    assert.ok(after1.local.includes("capture"), "our hooks land in personal settings.local.json");
+    assert.ok(after1.local.includes("statusLine"), "statusline lands in personal settings.local.json");
     assert.ok(after1.mcp.includes('"other"'), "foreign mcp server preserved");
     assert.ok(after1.claude.includes("hand-written notes"), "user CLAUDE.md content preserved");
-    assert.ok(after1.settings.includes("capture"), "our hooks installed");
     assert.ok(after1.mcp.includes('"lockstep"'), "our mcp server installed");
     const v = await claudeAdapter.verify(dir, "project");
     assert.ok(v.ok, "verify passes after install");
 });
+test("init heals a pre-existing shared settings.json: lockstep hooks/statusline move to local, foreign stays", async () => {
+    const dir = await mkdtemp(join(tmpdir(), "lockstep-init-heal-"));
+    await mkdir(join(dir, ".claude"), { recursive: true });
+    // A repo initialized BEFORE the personal-scope split: our hooks + statusline sit in the committed file.
+    await writeFile(join(dir, ".claude", "settings.json"), JSON.stringify({
+        hooks: {
+            PostToolUse: [
+                { matcher: "Bash", hooks: [{ type: "command", command: "my-linter" }] },
+                { matcher: "Edit|Write", hooks: [{ type: "command", command: "lockstep", args: ["capture"] }] },
+            ],
+            Stop: [{ hooks: [{ type: "command", command: "lockstep", args: ["capture", "--event", "Stop"] }] }],
+        },
+        statusLine: { type: "command", command: "lockstep", args: ["statusline"] },
+    }, null, 2));
+    await claudeAdapter.install(dir, "project", false);
+    const shared = await readFile(join(dir, ".claude", "settings.json"), "utf8");
+    const local = await readFile(join(dir, ".claude", "settings.local.json"), "utf8");
+    assert.ok(shared.includes("my-linter"), "foreign hook survives the heal");
+    assert.ok(!shared.includes("lockstep"), "every lockstep-managed entry is stripped from the shared file");
+    const sharedObj = JSON.parse(shared);
+    assert.equal(sharedObj.hooks?.Stop, undefined, "an event left empty by the heal is dropped");
+    assert.equal(sharedObj.statusLine, undefined, "lockstep statusline removed from the shared file");
+    assert.ok(local.includes("capture") && local.includes("statusLine"), "personal file carries hooks + statusline");
+    // A FOREIGN statusline is never touched (mergeStatusLine never overwrote it; the heal must not strip it).
+    const dir2 = await mkdtemp(join(tmpdir(), "lockstep-init-heal2-"));
+    await mkdir(join(dir2, ".claude"), { recursive: true });
+    await writeFile(join(dir2, ".claude", "settings.json"), JSON.stringify({ statusLine: { type: "command", command: "my-status" } }, null, 2));
+    await claudeAdapter.install(dir2, "project", false);
+    const shared2 = await readFile(join(dir2, ".claude", "settings.json"), "utf8");
+    assert.ok(shared2.includes("my-status"), "foreign statusline untouched");
+});
+test("init never creates a shared settings.json just to heal it", async () => {
+    const dir = await mkdtemp(join(tmpdir(), "lockstep-init-noshared-"));
+    await claudeAdapter.install(dir, "project", false);
+    await assert.rejects(readFile(join(dir, ".claude", "settings.json"), "utf8"), "shared file not minted");
+    await readFile(join(dir, ".claude", "settings.local.json"), "utf8"); // personal file exists
+});
+test("init installs the lockstep-setup onboarding skill", async () => {
+    const dir = await mkdtemp(join(tmpdir(), "lockstep-setup-init-"));
+    await mkdir(join(dir, ".claude"), { recursive: true });
+    const results = await claudeAdapter.install(dir, "project", false);
+    const setup = await readFile(join(dir, ".claude", "skills", "lockstep-setup", "SKILL.md"), "utf8");
+    assert.ok(setup.includes("name: lockstep-setup"), "setup skill frontmatter written");
+    assert.ok(setup.includes("lockstep scan"), "setup skill drives the scan command");
+    assert.ok(results.some((r) => r.includes("lockstep-setup")), "install reports the setup-skill artifact");
+    const dry = await claudeAdapter.install(dir, "project", true);
+    assert.ok(dry.some((r) => r.startsWith("unchanged") && r.includes("lockstep-setup")), "dry-run reports the setup skill unchanged after install");
+});
 //# sourceMappingURL=install.test.js.map

package/dist/adapters/install.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"install.test.js","sourceRoot":"","sources":["../../src/adapters/install.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,IAAI,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;IACzF,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC5D,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,MAAM,SAAS,CACb,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,eAAe,CAAC,EACrC,IAAI,CAAC,SAAS,CACZ,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EACrG,IAAI,EACJ,CAAC,CACF,CACF,CAAC;IACF,MAAM,SAAS,CACb,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EACtB,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAC/E,CAAC;IACF,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,mCAAmC,CAAC,CAAC;IAE7E,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC;QACxB,QAAQ,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC;QACvE,GAAG,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QACnD,MAAM,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QACtD,KAAK,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC;KACtF,CAAC,CAAC;IAEH,MAAM,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC;IAC5B,MAAM,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC;IAE5B,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,4CAA4C,CAAC,CAAC;IAC/E,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,wBAAwB,CAAC,CAAC;IAC3E,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,8BAA8B,CAAC,CAAC;IAC1E,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,kCAAkC,CAAC,CAAC;IAC5F,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,qBAAqB,CAAC,CAAC;IACtE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,0BAA0B,CAAC,CAAC;IAEzE,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACrD,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,6BAA6B,CAAC,CAAC;AACjD,CAAC,CAAC,CAAC"}
+{"version":3,"file":"install.test.js","sourceRoot":"","sources":["../../src/adapters/install.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,IAAI,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;IACzF,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC5D,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,MAAM,SAAS,CACb,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,eAAe,CAAC,EACrC,IAAI,CAAC,SAAS,CACZ,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EACrG,IAAI,EACJ,CAAC,CACF,CACF,CAAC;IACF,MAAM,SAAS,CACb,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EACtB,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAC/E,CAAC;IACF,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,mCAAmC,CAAC,CAAC;IAE7E,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC;QACxB,QAAQ,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC;QACvE,KAAK,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAC1E,GAAG,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QACnD,MAAM,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QACtD,KAAK,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC;KACtF,CAAC,CAAC;IAEH,MAAM,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC;IAC5B,MAAM,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC;IAE5B,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,4CAA4C,CAAC,CAAC;IAC/E,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,2CAA2C,CAAC,CAAC;IAC9F,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,mDAAmD,CAAC,CAAC;IACrG,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,gDAAgD,CAAC,CAAC;IAC9F,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,kDAAkD,CAAC,CAAC;IACnG,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,8BAA8B,CAAC,CAAC;IAC1E,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,kCAAkC,CAAC,CAAC;IAC5F,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,0BAA0B,CAAC,CAAC;IAEzE,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACrD,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,6BAA6B,CAAC,CAAC;AACjD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wGAAwG,EAAE,KAAK,IAAI,EAAE;IACxH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;IACjE,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,wGAAwG;IACxG,MAAM,SAAS,CACb,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,eAAe,CAAC,EACrC,IAAI,CAAC,SAAS,CACZ;QACE,KAAK,EAAE;YACL,WAAW,EAAE;gBACX,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE;gBACvE,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE;aAChG;YACD,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;SACpG;QACD,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,YAAY,CAAC,EAAE;KAC3E,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;IAEF,MAAM,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAAC;IAC7E,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,qBAAqB,CAAC,EAAE,MAAM,CAAC,CAAC;IAElF,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,gCAAgC,CAAC,CAAC;IAC1E,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,+DAA+D,CAAC,CAAC;IACzG,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAgE,CAAC;IACpG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,4CAA4C,CAAC,CAAC;IAC7F,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,EAAE,kDAAkD,CAAC,CAAC;IAClG,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,0CAA0C,CAAC,CAAC;IAEjH,0GAA0G;IAC1G,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;IACnE,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,SAAS,CACb,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,eAAe,CAAC,EACtC,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CACnF,CAAC;IACF,MAAM,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAAC;IAC/E,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,8BAA8B,CAAC,CAAC;AAC3E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;IAC3E,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAC;IACrE,MAAM,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IACnD,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,EAAE,wBAAwB,CAAC,CAAC;IACxG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,qBAAqB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,uBAAuB;AAC9F,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;IACnE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;IAClE,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEvD,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,gBAAgB,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;IACnG,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,iCAAiC,CAAC,CAAC;IACrF,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,qCAAqC,CAAC,CAAC;IAClF,MAAM,CAAC,EAAE,CACP,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,EACjD,0CAA0C,CAC3C,CAAC;IAEF,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IAC9D,MAAM,CAAC,EAAE,CACP,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,EAC1E,yDAAyD,CAC1D,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/adapters/merge.d.ts

@@ -23,5 +23,16 @@ export interface McpServerSpec {
 export declare function mergeHooks(existing: string | null, managed: ManagedHook[], command?: string): string;
 /** Upsert our MCP server under its stable key; leave sibling servers untouched. */
 export declare function mergeMcp(existing: string | null, name: string, spec: McpServerSpec): string;
+/** Merge statusLine config into settings JSON. Only sets it if not already configured. */
+export declare function mergeStatusLine(existing: string | null, command: string, args: string[]): string;
+/**
+ * Strip lockstep-managed hook entries from a settings JSON, preserving foreign hooks byte-for-byte.
+ * The healing half of the personal-scope move (IMPROVEMENTS #2): hooks/statusline used to land in
+ * the committed `.claude/settings.json`; re-running init removes them there (this) and re-writes
+ * them to `settings.local.json` (mergeHooks).
+ */
+export declare function removeManagedHooks(existing: string): string;
+/** Strip a lockstep-managed statusLine (a user's custom one is never ours — mergeStatusLine never overwrote it). */
+export declare function removeManagedStatusLine(existing: string): string;
 /** Replace only the delimited managed block in a markdown file; append if absent. */
 export declare function upsertManagedBlock(existing: string | null, block: string): string;

package/dist/adapters/merge.js

@@ -34,6 +34,47 @@ export function mergeMcp(existing, name, spec) {
     obj.mcpServers = servers;
     return JSON.stringify(obj, null, 2) + "\n";
 }
+/** Merge statusLine config into settings JSON. Only sets it if not already configured. */
+export function mergeStatusLine(existing, command, args) {
+    const obj = existing ? JSON.parse(existing) : {};
+    // Only install if no statusLine is configured yet (don't overwrite user's custom one)
+    if (!obj.statusLine) {
+        obj.statusLine = { type: "command", command, args };
+    }
+    return JSON.stringify(obj, null, 2) + "\n";
+}
+/**
+ * Strip lockstep-managed hook entries from a settings JSON, preserving foreign hooks byte-for-byte.
+ * The healing half of the personal-scope move (IMPROVEMENTS #2): hooks/statusline used to land in
+ * the committed `.claude/settings.json`; re-running init removes them there (this) and re-writes
+ * them to `settings.local.json` (mergeHooks).
+ */
+export function removeManagedHooks(existing) {
+    const obj = JSON.parse(existing);
+    const hooks = obj.hooks;
+    if (hooks) {
+        for (const [event, arr] of Object.entries(hooks)) {
+            if (!Array.isArray(arr))
+                continue;
+            const foreign = arr.filter((e) => !isOurs(e));
+            if (foreign.length > 0)
+                hooks[event] = foreign;
+            else
+                delete hooks[event];
+        }
+        if (Object.keys(hooks).length === 0)
+            delete obj.hooks;
+    }
+    return JSON.stringify(obj, null, 2) + "\n";
+}
+/** Strip a lockstep-managed statusLine (a user's custom one is never ours — mergeStatusLine never overwrote it). */
+export function removeManagedStatusLine(existing) {
+    const obj = JSON.parse(existing);
+    const sl = obj.statusLine;
+    if (sl && `${sl.command ?? ""} ${(sl.args ?? []).join(" ")}`.includes(MARKER))
+        delete obj.statusLine;
+    return JSON.stringify(obj, null, 2) + "\n";
+}
 const START = "<!-- lockstep:start -->";
 const END = "<!-- lockstep:end -->";
 /** Replace only the delimited managed block in a markdown file; append if absent. */

package/dist/adapters/merge.js.map

@@ -1 +1 @@
-{"version":3,"file":"merge.js","sourceRoot":"","sources":["../../src/adapters/merge.ts"],"names":[],"mappings":"AASA,wFAAwF;AACxF,uFAAuF;AACvF,MAAM,MAAM,GAAG,UAAU,CAAC;AAwB1B,SAAS,MAAM,CAAC,KAAgB;IAC9B,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AACtG,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,UAAU,CAAC,QAAuB,EAAE,OAAsB,EAAE,OAAO,GAAG,KAAK;IACzF,MAAM,GAAG,GAAS,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,MAAM,KAAK,GAAI,GAAG,CAAC,KAAqC,IAAI,EAAE,CAAC;IAE/D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;IACjD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,OAAO,EAAE,CAAC;QAClC,MAAM,GAAG,GAAgB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAgB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACvC,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;SACxE,CAAC,CAAC,CAAC;QACJ,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IACvC,CAAC;IACD,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC;IAClB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;AAC7C,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,QAAQ,CAAC,QAAuB,EAAE,IAAY,EAAE,IAAmB;IACjF,MAAM,GAAG,GAAS,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,MAAM,OAAO,GAAI,GAAG,CAAC,UAA4C,IAAI,EAAE,CAAC;IACxE,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACrB,GAAG,CAAC,UAAU,GAAG,OAAO,CAAC;IACzB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;AAC7C,CAAC;AAED,MAAM,KAAK,GAAG,yBAAyB,CAAC;AACxC,MAAM,GAAG,GAAG,uBAAuB,CAAC;AAEpC,qFAAqF;AACrF,MAAM,UAAU,kBAAkB,CAAC,QAAuB,EAAE,KAAa;IACvE,MAAM,OAAO,GAAG,GAAG,KAAK,KAAK,KAAK,KAAK,GAAG,EAAE,CAAC;IAC7C,IAAI,CAAC,QAAQ;QAAE,OAAO,OAAO,GAAG,IAAI,CAAC;IACrC,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,aAAa,GAAG,EAAE,CAAC,CAAC;IAClD,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAC5D,OAAO,QAAQ,CAAC,OAAO,EAAE,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;AACtD,CAAC"}
+{"version":3,"file":"merge.js","sourceRoot":"","sources":["../../src/adapters/merge.ts"],"names":[],"mappings":"AASA,wFAAwF;AACxF,uFAAuF;AACvF,MAAM,MAAM,GAAG,UAAU,CAAC;AAwB1B,SAAS,MAAM,CAAC,KAAgB;IAC9B,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AACtG,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,UAAU,CAAC,QAAuB,EAAE,OAAsB,EAAE,OAAO,GAAG,KAAK;IACzF,MAAM,GAAG,GAAS,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,MAAM,KAAK,GAAI,GAAG,CAAC,KAAqC,IAAI,EAAE,CAAC;IAE/D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;IACjD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,OAAO,EAAE,CAAC;QAClC,MAAM,GAAG,GAAgB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAgB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACvC,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;SACxE,CAAC,CAAC,CAAC;QACJ,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IACvC,CAAC;IACD,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC;IAClB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;AAC7C,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,QAAQ,CAAC,QAAuB,EAAE,IAAY,EAAE,IAAmB;IACjF,MAAM,GAAG,GAAS,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,MAAM,OAAO,GAAI,GAAG,CAAC,UAA4C,IAAI,EAAE,CAAC;IACxE,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACrB,GAAG,CAAC,UAAU,GAAG,OAAO,CAAC;IACzB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;AAC7C,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,eAAe,CAAC,QAAuB,EAAE,OAAe,EAAE,IAAc;IACtF,MAAM,GAAG,GAAS,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,sFAAsF;IACtF,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;QACpB,GAAG,CAAC,UAAU,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACtD,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;AAC7C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAgB;IACjD,MAAM,GAAG,GAAS,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAS,CAAC;IAC/C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAgD,CAAC;IACnE,IAAI,KAAK,EAAE,CAAC;QACV,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;gBAAE,SAAS;YAClC,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;gBAAE,KAAK,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC;;gBAC1C,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,GAAG,CAAC,KAAK,CAAC;IACxD,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;AAC7C,CAAC;AAED,oHAAoH;AACpH,MAAM,UAAU,uBAAuB,CAAC,QAAgB;IACtD,MAAM,GAAG,GAAS,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAS,CAAC;IAC/C,MAAM,EAAE,GAAG,GAAG,CAAC,UAA+D,CAAC;IAC/E,IAAI,EAAE,IAAI,GAAG,EAAE,CAAC,OAAO,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,GAAG,CAAC,UAAU,CAAC;IACrG,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;AAC7C,CAAC;AAED,MAAM,KAAK,GAAG,yBAAyB,CAAC;AACxC,MAAM,GAAG,GAAG,uBAAuB,CAAC;AAEpC,qFAAqF;AACrF,MAAM,UAAU,kBAAkB,CAAC,QAAuB,EAAE,KAAa;IACvE,MAAM,OAAO,GAAG,GAAG,KAAK,KAAK,KAAK,KAAK,GAAG,EAAE,CAAC;IAC7C,IAAI,CAAC,QAAQ;QAAE,OAAO,OAAO,GAAG,IAAI,CAAC;IACrC,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,aAAa,GAAG,EAAE,CAAC,CAAC;IAClD,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAC5D,OAAO,QAAQ,CAAC,OAAO,EAAE,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;AACtD,CAAC"}

package/dist/adapters/templates.d.ts

@@ -1,5 +1,6 @@
 import type { ManagedHook, McpServerSpec } from "./merge.js";
 export declare const mcpSpec: (vendor: string) => McpServerSpec;
 export declare const captureHooks: ManagedHook[];
-export declare const SKILL_MD = "---\nname: lockstep\ndescription: Keep this repo's coding agents in lockstep \u2014 read the shared ledger before coding, publish changes after.\n---\n\n# Lockstep\n\nThis project uses Lockstep to coordinate multiple developers' coding agents on the same codebase.\n\n## On session start\n- Call `inbox` to see what changed, what's newly binding, and what's delegated to you.\n- Call `decisions` to load the binding rules for the areas you'll touch.\n- If you see open questions or tasks in the inbox, tell the user about them.\n\n## Before coding a shared/contract surface\n- Call `query` to check the ledger for existing decisions/contracts (answer instantly if known).\n- Respect any `binding` decision in scope.\n\n## After making a change\n- Summarize the change and call `notify` (include a contract delta for interface changes).\n- For any surface you call, record the dependency with `register_dependency`.\n\n## Coordinating\n- Use `ask` for code/repo questions (set `urgent` if you're blocked).\n- Use `delegate` / `complete` for handoffs. Propose binding rules with `propose_decision`.\n\n## Incoming messages\n- When you see a \"[Lockstep]\" notification, inform the user about the pending message(s).\n- The user decides whether to respond \u2014 don't auto-answer on their behalf.\n";
-export declare const CLAUDE_BLOCK = "## Lockstep (team coordination)\nIMPORTANT: On session start, BEFORE doing anything else, call `inbox` and `decisions`. If there are any open questions, tasks, or changes, you MUST tell the user immediately \u2014 do not skip this. Example: \"You have 1 new question from a teammate: [question text]\". Then proceed with the user's request.\nBefore coding a shared/contract surface, `query` the ledger and obey binding decisions. After a change, summarize it, `register_dependency` for surfaces you call, and `notify`. Ask code/repo questions with `ask` (urgent if blocking). When you see a \"[Lockstep]\" notification, inform the user about pending messages. See the `lockstep` skill for detail.";
+export declare const SKILL_MD = "---\nname: lockstep\ndescription: Keep this repo's coding agents in lockstep \u2014 read the shared ledger before coding, publish changes after.\n---\n\n# Lockstep\n\nThis project uses Lockstep to coordinate multiple developers' coding agents on the same codebase.\n\n## On session start\n- Call `inbox` to see what changed, what's newly binding, and what's delegated to you.\n- Call `decisions` to load the binding rules for the areas you'll touch. A rule may cite an external source (e.g. a Slack thread) \u2014 it was distilled from a human decision and confirmed by a teammate; treat it exactly like any other binding decision.\n- The briefing leads with **project principles** (`decisionType: principle`) \u2014 the team's standing\n  decision criteria (\"server-side business logic \u2192 X\"). Apply them when making or judging decisions;\n  a choice that a principle already settles needs no fresh deliberation, just cite the principle.\n- If you see open questions or tasks in the inbox, tell the user about them.\n\n## Before coding a shared/contract surface\n- Call `query` to check the ledger for existing decisions/contracts (answer instantly if known).\n- Before changing or removing an endpoint/RPC, call `consumers` with its canonical surface ID\n  (e.g. `http:POST /auth/session`) to see who depends on it \u2014 answer \"does anyone use this?\" from\n  the graph instead of pinging a human. A high consumer count means high blast radius: log a decision.\n- Respect any `binding` decision in scope.\n\n## Decisions vs changes \u2014 the most important distinction\n- A **change** is a routine event (you edited some files). It is captured automatically \u2014 you do NOT\n  log it. Never call `propose_decision` just because you edited code.\n- A **decision** is a durable **rule** or **architectural choice** that shapes future work\n  (e.g. \"auth tokens are JWT, 15-min expiry\"; \"we standardize on Postgres\"; \"rename POST /login to\n  POST /session across the org\"). These are the hero of Lockstep.\n- **Whenever you (or the user) make a real decision like that, you MUST log it** with\n  `propose_decision` \u2014 set `decisionType` to `rule` or `architecture`. If you're unsure whether\n  something is a decision, ask: \"will this constrain how others build later?\" If yes, log it.\n- A decision is more than its verdict \u2014 record the deliberation too (this is what makes the ledger\n  readable a year later):\n  - `rationale`: WHY, in one or two sentences (the constraint or trade-off that drove it).\n  - `alternatives`: the options considered and rejected, when any were discussed.\n  - `reviewAt` (ISO date): only when the decision is explicitly temporary (\"revisit after the\n    migration\", \"review in 30 days\"). If the revisit point is an event with no date, ask the user\n    for a date or omit it \u2014 never invent one.\n\n## After making a change\n- Summarize the change and call `notify` (include a contract delta for interface changes).\n- For any surface you call, record the dependency with `register_dependency`.\n\n## Coordinating\n- Use `ask` for code/repo questions (set `urgent` if you're blocked).\n- Use `delegate` / `complete` for handoffs.\n\n## Incoming messages\n- When you see a \"[Lockstep]\" notification, inform the user about the pending message(s).\n- The user decides whether to respond \u2014 don't auto-answer on their behalf.\n\n## First-run onboarding & keeping the manifest current\n- If this repo has no `lockstep.yaml` (or you've added/removed routes or outbound service calls), run the\n  `/lockstep-setup` skill. It scans the repo, auto-fills `produces`, and resolves `consumes` against the\n  team's dependency graph \u2014 always human-approved. Do NOT hand-edit `lockstep.yaml` yourself; `/lockstep-setup` is the only writer.\n";
+export declare const SETUP_SKILL_MD = "---\nname: lockstep-setup\ndescription: Bootstrap and maintain this repo's lockstep.yaml \u2014 auto-fill produces, graph-resolve consumes, human-approved.\ntrigger: /lockstep-setup\n---\n\n# /lockstep-setup\n\nRun-once onboarding (and re-run maintenance) that generates this repo's `lockstep.yaml` \u2014 the manifest\nthat declares what surfaces this repo **produces** (its served routes/RPCs) and **consumes** (the surfaces\nit calls on other repos). This is the concrete first-run step `lockstep init` does NOT do.\n\n## Why this is the only place the manifest is written\nThe raw capture hook is read-only and must stay that way. This skill is the **single sanctioned writer**\nof `lockstep.yaml`, and every write is proposed to the human first. You (the agent) never hand-edit the\nfile \u2014 you run `lockstep scan`, present its proposal, get approval, then let `--apply` write it.\n\n## How consumes are resolved (don't guess URLs)\nLockstep is a graph. `lockstep scan` detects this repo's outbound calls (`fetch`/`axios`/gRPC clients) and\n**matches them against the produced-surface catalog of the other repos in the project.** A call that\nmatches a sibling's produce is a real dependency (the producer is named); one that matches nothing is\nexternal. The deterministic catalog does the resolving \u2014 your job is judgment on the fuzzy leftovers and\ndriving the human approval.\n\n## What You Must Do When Invoked\n\nFollow these steps in order.\n\n### 1. Preconditions\nMake sure the repo is connected: if `lockstep status` shows it isn't, tell the user to run\n`lockstep connect` first (without a connection, `produces` still works but `consumes` can't be resolved\nagainst the graph).\n\n### 2. Scan\nRun `lockstep scan --json` and read the proposal. It has:\n- `produces` (+ `newProduces`) \u2014 served surfaces, deterministic. Safe to accept as-is.\n- `consumes` (+ `newConsumes`) \u2014 outbound calls **matched to a sibling repo** (`producer` named). High confidence.\n- `review` \u2014 client/import hints that could map to a sibling's surfaces. Ask the user which (if any) apply.\n- `unmatched` \u2014 outbound calls with no producer in the graph (external, e.g. Stripe, or a service not yet onboarded). Don't add these unless the user says so.\n\n### 3. Present for approval\nShow the user a concise diff: the new produces, the matched consumes (with producer repos), and any\n`review`/`unmatched` items that need a human call. Ask explicitly before writing \u2014 especially for\nanything from `review`/`unmatched`.\n\n### 4. Apply\nOn approval, run `lockstep scan --apply`. This merge-preserves any existing manual entries, writes\n`lockstep.yaml` (+ a `.lockstep.bak`), and syncs the produces/consumes to the graph. For anything the\nuser chose from `review`/`unmatched`, add those surface IDs to `consumes` in `lockstep.yaml` and re-run\n`lockstep scan --apply` (it re-syncs).\n\n### 5. Offer next steps\nSuggest committing `lockstep.yaml` so teammates get the same graph, and (if not connected yet)\n`lockstep connect`. Shared config to commit: `.mcp.json`, `CLAUDE.md`, `.claude/skills`.\n`.claude/settings.local.json` (hooks + statusline) is personal and auto-gitignored \u2014 each teammate\nruns `lockstep onboard` to get their own.\n\n## Maintenance (re-run anytime)\nRe-running `lockstep scan` diffs current code surfaces against `lockstep.yaml` and shows only the delta\n(e.g. \"new outbound call to `http:GET /inventory/:sku` \u2014 add to consumes?\"). Approve the delta the same way.\n";
+export declare const CLAUDE_BLOCK = "## Lockstep (team coordination)\nIMPORTANT: On session start, BEFORE doing anything else, call `inbox` and `decisions`. If there are any open questions, tasks, or changes, you MUST tell the user immediately \u2014 do not skip this. Example: \"You have 1 new question from a teammate: [question text]\". Then proceed with the user's request.\nBefore coding a shared/contract surface, `query` the ledger and obey binding decisions. After a change, summarize it, `register_dependency` for surfaces you call, and `notify`. IMPORTANT: a routine code change is captured automatically \u2014 do NOT log it as a decision. But whenever you or the user make a durable **rule or architectural choice** that will constrain future work, you MUST record it with `propose_decision` (`decisionType: rule | architecture | principle`) \u2014 include `rationale` (why) and `alternatives` (what was rejected) when known, and `reviewAt` (ISO date) when the decision is explicitly temporary. Project principles (`decisionType: principle`) are the team's standing decision criteria \u2014 apply them when judging new decisions. Ask code/repo questions with `ask` (urgent if blocking). When you see a \"[Lockstep]\" notification, inform the user about pending messages. If this repo has no `lockstep.yaml` (or you changed its routes/outbound calls), run the `/lockstep-setup` skill to (re)generate it \u2014 never hand-edit `lockstep.yaml`. See the `lockstep` skill for detail.";

package/dist/adapters/templates.js

@@ -26,26 +26,115 @@ This project uses Lockstep to coordinate multiple developers' coding agents on t
 
 ## On session start
 - Call \`inbox\` to see what changed, what's newly binding, and what's delegated to you.
-- Call \`decisions\` to load the binding rules for the areas you'll touch.
+- Call \`decisions\` to load the binding rules for the areas you'll touch. A rule may cite an external source (e.g. a Slack thread) — it was distilled from a human decision and confirmed by a teammate; treat it exactly like any other binding decision.
+- The briefing leads with **project principles** (\`decisionType: principle\`) — the team's standing
+  decision criteria ("server-side business logic → X"). Apply them when making or judging decisions;
+  a choice that a principle already settles needs no fresh deliberation, just cite the principle.
 - If you see open questions or tasks in the inbox, tell the user about them.
 
 ## Before coding a shared/contract surface
 - Call \`query\` to check the ledger for existing decisions/contracts (answer instantly if known).
+- Before changing or removing an endpoint/RPC, call \`consumers\` with its canonical surface ID
+  (e.g. \`http:POST /auth/session\`) to see who depends on it — answer "does anyone use this?" from
+  the graph instead of pinging a human. A high consumer count means high blast radius: log a decision.
 - Respect any \`binding\` decision in scope.
 
+## Decisions vs changes — the most important distinction
+- A **change** is a routine event (you edited some files). It is captured automatically — you do NOT
+  log it. Never call \`propose_decision\` just because you edited code.
+- A **decision** is a durable **rule** or **architectural choice** that shapes future work
+  (e.g. "auth tokens are JWT, 15-min expiry"; "we standardize on Postgres"; "rename POST /login to
+  POST /session across the org"). These are the hero of Lockstep.
+- **Whenever you (or the user) make a real decision like that, you MUST log it** with
+  \`propose_decision\` — set \`decisionType\` to \`rule\` or \`architecture\`. If you're unsure whether
+  something is a decision, ask: "will this constrain how others build later?" If yes, log it.
+- A decision is more than its verdict — record the deliberation too (this is what makes the ledger
+  readable a year later):
+  - \`rationale\`: WHY, in one or two sentences (the constraint or trade-off that drove it).
+  - \`alternatives\`: the options considered and rejected, when any were discussed.
+  - \`reviewAt\` (ISO date): only when the decision is explicitly temporary ("revisit after the
+    migration", "review in 30 days"). If the revisit point is an event with no date, ask the user
+    for a date or omit it — never invent one.
+
 ## After making a change
 - Summarize the change and call \`notify\` (include a contract delta for interface changes).
 - For any surface you call, record the dependency with \`register_dependency\`.
 
 ## Coordinating
 - Use \`ask\` for code/repo questions (set \`urgent\` if you're blocked).
-- Use \`delegate\` / \`complete\` for handoffs. Propose binding rules with \`propose_decision\`.
+- Use \`delegate\` / \`complete\` for handoffs.
 
 ## Incoming messages
 - When you see a "[Lockstep]" notification, inform the user about the pending message(s).
 - The user decides whether to respond — don't auto-answer on their behalf.
+
+## First-run onboarding & keeping the manifest current
+- If this repo has no \`lockstep.yaml\` (or you've added/removed routes or outbound service calls), run the
+  \`/lockstep-setup\` skill. It scans the repo, auto-fills \`produces\`, and resolves \`consumes\` against the
+  team's dependency graph — always human-approved. Do NOT hand-edit \`lockstep.yaml\` yourself; \`/lockstep-setup\` is the only writer.
+`;
+export const SETUP_SKILL_MD = `---
+name: lockstep-setup
+description: Bootstrap and maintain this repo's lockstep.yaml — auto-fill produces, graph-resolve consumes, human-approved.
+trigger: /lockstep-setup
+---
+
+# /lockstep-setup
+
+Run-once onboarding (and re-run maintenance) that generates this repo's \`lockstep.yaml\` — the manifest
+that declares what surfaces this repo **produces** (its served routes/RPCs) and **consumes** (the surfaces
+it calls on other repos). This is the concrete first-run step \`lockstep init\` does NOT do.
+
+## Why this is the only place the manifest is written
+The raw capture hook is read-only and must stay that way. This skill is the **single sanctioned writer**
+of \`lockstep.yaml\`, and every write is proposed to the human first. You (the agent) never hand-edit the
+file — you run \`lockstep scan\`, present its proposal, get approval, then let \`--apply\` write it.
+
+## How consumes are resolved (don't guess URLs)
+Lockstep is a graph. \`lockstep scan\` detects this repo's outbound calls (\`fetch\`/\`axios\`/gRPC clients) and
+**matches them against the produced-surface catalog of the other repos in the project.** A call that
+matches a sibling's produce is a real dependency (the producer is named); one that matches nothing is
+external. The deterministic catalog does the resolving — your job is judgment on the fuzzy leftovers and
+driving the human approval.
+
+## What You Must Do When Invoked
+
+Follow these steps in order.
+
+### 1. Preconditions
+Make sure the repo is connected: if \`lockstep status\` shows it isn't, tell the user to run
+\`lockstep connect\` first (without a connection, \`produces\` still works but \`consumes\` can't be resolved
+against the graph).
+
+### 2. Scan
+Run \`lockstep scan --json\` and read the proposal. It has:
+- \`produces\` (+ \`newProduces\`) — served surfaces, deterministic. Safe to accept as-is.
+- \`consumes\` (+ \`newConsumes\`) — outbound calls **matched to a sibling repo** (\`producer\` named). High confidence.
+- \`review\` — client/import hints that could map to a sibling's surfaces. Ask the user which (if any) apply.
+- \`unmatched\` — outbound calls with no producer in the graph (external, e.g. Stripe, or a service not yet onboarded). Don't add these unless the user says so.
+
+### 3. Present for approval
+Show the user a concise diff: the new produces, the matched consumes (with producer repos), and any
+\`review\`/\`unmatched\` items that need a human call. Ask explicitly before writing — especially for
+anything from \`review\`/\`unmatched\`.
+
+### 4. Apply
+On approval, run \`lockstep scan --apply\`. This merge-preserves any existing manual entries, writes
+\`lockstep.yaml\` (+ a \`.lockstep.bak\`), and syncs the produces/consumes to the graph. For anything the
+user chose from \`review\`/\`unmatched\`, add those surface IDs to \`consumes\` in \`lockstep.yaml\` and re-run
+\`lockstep scan --apply\` (it re-syncs).
+
+### 5. Offer next steps
+Suggest committing \`lockstep.yaml\` so teammates get the same graph, and (if not connected yet)
+\`lockstep connect\`. Shared config to commit: \`.mcp.json\`, \`CLAUDE.md\`, \`.claude/skills\`.
+\`.claude/settings.local.json\` (hooks + statusline) is personal and auto-gitignored — each teammate
+runs \`lockstep onboard\` to get their own.
+
+## Maintenance (re-run anytime)
+Re-running \`lockstep scan\` diffs current code surfaces against \`lockstep.yaml\` and shows only the delta
+(e.g. "new outbound call to \`http:GET /inventory/:sku\` — add to consumes?"). Approve the delta the same way.
 `;
 export const CLAUDE_BLOCK = `## Lockstep (team coordination)
 IMPORTANT: On session start, BEFORE doing anything else, call \`inbox\` and \`decisions\`. If there are any open questions, tasks, or changes, you MUST tell the user immediately — do not skip this. Example: "You have 1 new question from a teammate: [question text]". Then proceed with the user's request.
-Before coding a shared/contract surface, \`query\` the ledger and obey binding decisions. After a change, summarize it, \`register_dependency\` for surfaces you call, and \`notify\`. Ask code/repo questions with \`ask\` (urgent if blocking). When you see a "[Lockstep]" notification, inform the user about pending messages. See the \`lockstep\` skill for detail.`;
+Before coding a shared/contract surface, \`query\` the ledger and obey binding decisions. After a change, summarize it, \`register_dependency\` for surfaces you call, and \`notify\`. IMPORTANT: a routine code change is captured automatically — do NOT log it as a decision. But whenever you or the user make a durable **rule or architectural choice** that will constrain future work, you MUST record it with \`propose_decision\` (\`decisionType: rule | architecture | principle\`) — include \`rationale\` (why) and \`alternatives\` (what was rejected) when known, and \`reviewAt\` (ISO date) when the decision is explicitly temporary. Project principles (\`decisionType: principle\`) are the team's standing decision criteria — apply them when judging new decisions. Ask code/repo questions with \`ask\` (urgent if blocking). When you see a "[Lockstep]" notification, inform the user about pending messages. If this repo has no \`lockstep.yaml\` (or you changed its routes/outbound calls), run the \`/lockstep-setup\` skill to (re)generate it — never hand-edit \`lockstep.yaml\`. See the \`lockstep\` skill for detail.`;
 //# sourceMappingURL=templates.js.map

package/dist/adapters/templates.js.map

@@ -1 +1 @@
-{"version":3,"file":"templates.js","sourceRoot":"","sources":["../../src/adapters/templates.ts"],"names":[],"mappings":"AAEA,qFAAqF;AACrF,yFAAyF;AACzF,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,MAAc,EAAiB,EAAE,CAAC,CAAC;IACzD,OAAO,EAAE,UAAU;IACnB,IAAI,EAAE,CAAC,KAAK,CAAC;IACb,GAAG,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE;CACjC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,YAAY,GAAkB;IACzC,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,cAAc,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;IAClG;QACE,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,mCAAmC;QAC5C,IAAI,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,aAAa,CAAC;QAC3C,OAAO,EAAE,EAAE;KACZ;IACD,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;CACnF,CAAC;AAEF,MAAM,CAAC,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6BvB,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG;;2WAE+U,CAAC"}
+{"version":3,"file":"templates.js","sourceRoot":"","sources":["../../src/adapters/templates.ts"],"names":[],"mappings":"AAEA,qFAAqF;AACrF,yFAAyF;AACzF,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,MAAc,EAAiB,EAAE,CAAC,CAAC;IACzD,OAAO,EAAE,UAAU;IACnB,IAAI,EAAE,CAAC,KAAK,CAAC;IACb,GAAG,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE;CACjC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,YAAY,GAAkB;IACzC,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,cAAc,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;IAClG;QACE,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,mCAAmC;QAC5C,IAAI,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,aAAa,CAAC;QAC3C,OAAO,EAAE,EAAE;KACZ;IACD,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;CACnF,CAAC;AAEF,MAAM,CAAC,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyDvB,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4D7B,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG;;8lCAEkkC,CAAC"}

package/dist/capture/classify-edge.test.js

@@ -17,15 +17,17 @@ test("does not flag test files without contract markers", () => {
     assert.ok(!isContractSurface("src/utils/test-helper.ts", "function internal() {}"));
     assert.ok(!isContractSurface("src/utils/math.ts", "const x = 1;"));
 });
-test("exported interface in TS is a contract surface", () => {
-    assert.ok(isContractSurface("src/types.ts", "export interface OrderPayload { id: string; }"));
-    assert.ok(isContractSurface("src/types.ts", "export type OrderId = string;"));
+test("a bare exported interface/type in a non-route file is NOT a contract surface (noise fix)", () => {
+    assert.ok(!isContractSurface("src/types.ts", "export interface OrderPayload { id: string; }"));
+    assert.ok(!isContractSurface("src/types.ts", "export type OrderId = string;"));
 });
-test("exported class is a contract surface", () => {
-    assert.ok(isContractSurface("src/service.ts", "export class OrderService {}"));
+test("a bare exported class/function in a non-route file is NOT a contract surface (noise fix)", () => {
+    assert.ok(!isContractSurface("src/service.ts", "export class OrderService {}"));
+    assert.ok(!isContractSurface("src/orders.ts", "export async function fetchOrders() {}"));
 });
-test("exported async function is a contract surface", () => {
-    assert.ok(isContractSurface("src/api.ts", "export async function fetchOrders() {}"));
+test("contract path still counts even without extractable content", () => {
+    assert.ok(isContractSurface("contracts/order-api.ts"));
+    assert.ok(isContractSurface("src/handlers/order-handler.ts"));
 });
 test("non-TS files without path markers are not contract surfaces", () => {
     assert.ok(!isContractSurface("README.md", "# Readme"));

package/dist/capture/classify-edge.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"classify-edge.test.js","sourceRoot":"","sources":["../../src/capture/classify-edge.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE/D,IAAI,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACnD,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAChD,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC,CAAC;IAC7C,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,mBAAmB,CAAC,CAAC,CAAC;AACpD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACjC,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,+BAA+B,CAAC,CAAC,CAAC;IAC9D,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,CAAC,CAAC;AAC5D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wBAAwB,EAAE,GAAG,EAAE;IAClC,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,wBAAwB,CAAC,CAAC,CAAC;AACzD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mDAAmD,EAAE,GAAG,EAAE;IAC7D,MAAM,CAAC,EAAE,CAAC,CAAC,iBAAiB,CAAC,0BAA0B,EAAE,wBAAwB,CAAC,CAAC,CAAC;IACpF,MAAM,CAAC,EAAE,CAAC,CAAC,iBAAiB,CAAC,mBAAmB,EAAE,cAAc,CAAC,CAAC,CAAC;AACrE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gDAAgD,EAAE,GAAG,EAAE;IAC1D,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,cAAc,EAAE,+CAA+C,CAAC,CAAC,CAAC;IAC9F,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,cAAc,EAAE,+BAA+B,CAAC,CAAC,CAAC;AAChF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sCAAsC,EAAE,GAAG,EAAE;IAChD,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,8BAA8B,CAAC,CAAC,CAAC;AACjF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+CAA+C,EAAE,GAAG,EAAE;IACzD,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,YAAY,EAAE,wCAAwC,CAAC,CAAC,CAAC;AACvF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6DAA6D,EAAE,GAAG,EAAE;IACvE,MAAM,CAAC,EAAE,CAAC,CAAC,iBAAiB,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;IACvD,MAAM,CAAC,EAAE,CAAC,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC,CAAC;IAC9C,MAAM,CAAC,EAAE,CAAC,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC,CAAC;AAC9C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC1C,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;IACvF,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;IACtF,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;IACxF,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;AACxF,CAAC,CAAC,CAAC"}
+{"version":3,"file":"classify-edge.test.js","sourceRoot":"","sources":["../../src/capture/classify-edge.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE/D,IAAI,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACnD,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAChD,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC,CAAC;IAC7C,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,mBAAmB,CAAC,CAAC,CAAC;AACpD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACjC,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,+BAA+B,CAAC,CAAC,CAAC;IAC9D,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,CAAC,CAAC;AAC5D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wBAAwB,EAAE,GAAG,EAAE;IAClC,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,wBAAwB,CAAC,CAAC,CAAC;AACzD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mDAAmD,EAAE,GAAG,EAAE;IAC7D,MAAM,CAAC,EAAE,CAAC,CAAC,iBAAiB,CAAC,0BAA0B,EAAE,wBAAwB,CAAC,CAAC,CAAC;IACpF,MAAM,CAAC,EAAE,CAAC,CAAC,iBAAiB,CAAC,mBAAmB,EAAE,cAAc,CAAC,CAAC,CAAC;AACrE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0FAA0F,EAAE,GAAG,EAAE;IACpG,MAAM,CAAC,EAAE,CAAC,CAAC,iBAAiB,CAAC,cAAc,EAAE,+CAA+C,CAAC,CAAC,CAAC;IAC/F,MAAM,CAAC,EAAE,CAAC,CAAC,iBAAiB,CAAC,cAAc,EAAE,+BAA+B,CAAC,CAAC,CAAC;AACjF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0FAA0F,EAAE,GAAG,EAAE;IACpG,MAAM,CAAC,EAAE,CAAC,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,8BAA8B,CAAC,CAAC,CAAC;IAChF,MAAM,CAAC,EAAE,CAAC,CAAC,iBAAiB,CAAC,eAAe,EAAE,wCAAwC,CAAC,CAAC,CAAC;AAC3F,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6DAA6D,EAAE,GAAG,EAAE;IACvE,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,wBAAwB,CAAC,CAAC,CAAC;IACvD,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,+BAA+B,CAAC,CAAC,CAAC;AAChE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6DAA6D,EAAE,GAAG,EAAE;IACvE,MAAM,CAAC,EAAE,CAAC,CAAC,iBAAiB,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;IACvD,MAAM,CAAC,EAAE,CAAC,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC,CAAC;IAC9C,MAAM,CAAC,EAAE,CAAC,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC,CAAC;AAC9C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC1C,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;IACvF,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;IACtF,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;IACxF,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;AACxF,CAAC,CAAC,CAAC"}

package/dist/capture/classify.d.ts

@@ -1,8 +1,10 @@
 /**
- * Contract-surface detection (PRD open-Q1, a safety gate). Pragmatic heuristic:
- * does a changed file expose a public interface others code against? Bias to "shared"
- * when in doubt — a false-negative in the cross-org wedge is a confidentiality leak.
- * Pure + testable.
+ * Contract-surface detection (a safety gate). A file is a contract surface if it exposes a public
+ * interface others code against. We deliberately DROPPED the old "any file with an `export` is a
+ * contract surface" heuristic — it flagged essentially all application code as `shared`, which both
+ * destroyed the owned/shared signal and flooded the ledger. Now: real extractable surfaces (HTTP
+ * routes, proto/graphql RPCs) or unambiguous interface files (.proto/.graphql, OpenAPI specs,
+ * route/controller paths). Pure + testable.
  */
 export declare function isContractSurface(path: string, content?: string): boolean;
 /** owned (only you own all changed paths, none are contract surfaces) vs shared. */

package/dist/capture/classify.js

@@ -1,20 +1,21 @@
+import { extractAllSurfaces } from "./extract.js";
 /**
- * Contract-surface detection (PRD open-Q1, a safety gate). Pragmatic heuristic:
- * does a changed file expose a public interface others code against? Bias to "shared"
- * when in doubt — a false-negative in the cross-org wedge is a confidentiality leak.
- * Pure + testable.
+ * Contract-surface detection (a safety gate). A file is a contract surface if it exposes a public
+ * interface others code against. We deliberately DROPPED the old "any file with an `export` is a
+ * contract surface" heuristic — it flagged essentially all application code as `shared`, which both
+ * destroyed the owned/shared signal and flooded the ledger. Now: real extractable surfaces (HTTP
+ * routes, proto/graphql RPCs) or unambiguous interface files (.proto/.graphql, OpenAPI specs,
+ * route/controller paths). Pure + testable.
  */
 export function isContractSurface(path, content) {
+    if (extractAllSurfaces(path, content).length > 0)
+        return true;
     if (/(openapi|swagger)/i.test(path) && /\.(ya?ml|json)$/i.test(path))
         return true;
     if (/\.(proto|graphql|gql)$/i.test(path))
         return true;
     if (/(^|\/)(routes?|controllers?|api|handlers?|endpoints?|contracts?)(\/|\.)/i.test(path))
         return true;
-    if (content && /\.(ts|tsx|js|mjs)$/i.test(path)) {
-        if (/\bexport\s+(async\s+)?(function|const|class|interface|type)\b/.test(content))
-            return true;
-    }
     return false;
 }
 /** owned (only you own all changed paths, none are contract surfaces) vs shared. */

package/dist/capture/classify.js.map

@@ -1 +1 @@
-{"version":3,"file":"classify.js","sourceRoot":"","sources":["../../src/capture/classify.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,OAAgB;IAC9D,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAClF,IAAI,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtD,IAAI,0EAA0E,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACvG,IAAI,OAAO,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,+DAA+D,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;IACjG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,WAAW,CAAC,IAA4D;IACtF,IAAI,IAAI,CAAC,kBAAkB;QAAE,OAAO,QAAQ,CAAC;IAC7C,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;AAChD,CAAC"}
+{"version":3,"file":"classify.js","sourceRoot":"","sources":["../../src/capture/classify.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAElD;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,OAAgB;IAC9D,IAAI,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9D,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAClF,IAAI,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtD,IAAI,0EAA0E,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACvG,OAAO,KAAK,CAAC;AACf,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,WAAW,CAAC,IAA4D;IACtF,IAAI,IAAI,CAAC,kBAAkB;QAAE,OAAO,QAAQ,CAAC;IAC7C,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;AAChD,CAAC"}

package/dist/capture/classify.test.js

@@ -10,10 +10,15 @@ test("detects route/controller paths", () => {
     assert.ok(isContractSurface("src/routes/orders.ts"));
     assert.ok(isContractSurface("app/controllers/cart.rb"));
 });
-test("detects exported TS API by content", () => {
-    assert.ok(isContractSurface("src/orders.ts", "export function createOrder() {}"));
+test("a bare export is NOT a contract surface (noise fix)", () => {
+    // The old heuristic flagged any `export` as shared, flooding the ledger. A plain exported helper
+    // in a non-route file is no longer a contract surface.
+    assert.ok(!isContractSurface("src/orders.ts", "export function createOrder() {}"));
     assert.ok(!isContractSurface("src/util.ts", "function localHelper() {}"));
 });
+test("detects an actual HTTP route by content", () => {
+    assert.ok(isContractSurface("src/routes/orders.ts", "router.post('/orders', handler)"));
+});
 test("plain internal file is not a contract surface", () => {
     assert.ok(!isContractSurface("src/internal/helpers.go", "func helper() {}"));
 });

package/dist/capture/classify.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"classify.test.js","sourceRoot":"","sources":["../../src/capture/classify.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE/D,IAAI,CAAC,qDAAqD,EAAE,GAAG,EAAE;IAC/D,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACjD,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC/C,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,CAAC,CAAC;AACrD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC1C,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,sBAAsB,CAAC,CAAC,CAAC;IACrD,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,yBAAyB,CAAC,CAAC,CAAC;AAC1D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAC9C,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,eAAe,EAAE,kCAAkC,CAAC,CAAC,CAAC;IAClF,MAAM,CAAC,EAAE,CAAC,CAAC,iBAAiB,CAAC,aAAa,EAAE,2BAA2B,CAAC,CAAC,CAAC;AAC5E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+CAA+C,EAAE,GAAG,EAAE;IACzD,MAAM,CAAC,EAAE,CAAC,CAAC,iBAAiB,CAAC,yBAAyB,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAC/E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gDAAgD,EAAE,GAAG,EAAE;IAC1D,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;IACtF,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IACtF,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;AAC1F,CAAC,CAAC,CAAC"}
+{"version":3,"file":"classify.test.js","sourceRoot":"","sources":["../../src/capture/classify.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE/D,IAAI,CAAC,qDAAqD,EAAE,GAAG,EAAE;IAC/D,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACjD,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC/C,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,CAAC,CAAC;AACrD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC1C,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,sBAAsB,CAAC,CAAC,CAAC;IACrD,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,yBAAyB,CAAC,CAAC,CAAC;AAC1D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qDAAqD,EAAE,GAAG,EAAE;IAC/D,iGAAiG;IACjG,uDAAuD;IACvD,MAAM,CAAC,EAAE,CAAC,CAAC,iBAAiB,CAAC,eAAe,EAAE,kCAAkC,CAAC,CAAC,CAAC;IACnF,MAAM,CAAC,EAAE,CAAC,CAAC,iBAAiB,CAAC,aAAa,EAAE,2BAA2B,CAAC,CAAC,CAAC;AAC5E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACnD,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,iCAAiC,CAAC,CAAC,CAAC;AAC1F,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+CAA+C,EAAE,GAAG,EAAE;IACzD,MAAM,CAAC,EAAE,CAAC,CAAC,iBAAiB,CAAC,yBAAyB,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAC/E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gDAAgD,EAAE,GAAG,EAAE;IAC1D,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;IACtF,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IACtF,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;AAC1F,CAAC,CAAC,CAAC"}

package/dist/capture/diff.d.ts

@@ -1,2 +1,4 @@
 /** Changed files (tracked vs HEAD + untracked), read-only. Source never leaves the machine. */
 export declare function changedFiles(cwd: string): string[];
+/** Every tracked file in the repo (+ untracked, minus gitignored), read-only. The full-repo walk `lockstep scan` runs over. */
+export declare function trackedFiles(cwd: string): string[];