lockstep-cli 0.0.5 → 0.1.1

package/dist/capture/diff.js

@@ -16,4 +16,19 @@ export function changedFiles(cwd) {
         return [];
     }
 }
+/** Every tracked file in the repo (+ untracked, minus gitignored), read-only. The full-repo walk `lockstep scan` runs over. */
+export function trackedFiles(cwd) {
+    try {
+        const tracked = execFileSync("git", ["-C", cwd, "ls-files"], { encoding: "utf8" }).split("\n").filter(Boolean);
+        const untracked = execFileSync("git", ["-C", cwd, "ls-files", "--others", "--exclude-standard"], {
+            encoding: "utf8",
+        })
+            .split("\n")
+            .filter(Boolean);
+        return [...new Set([...tracked, ...untracked])];
+    }
+    catch {
+        return [];
+    }
+}
 //# sourceMappingURL=diff.js.map

package/dist/capture/diff.js.map

@@ -1 +1 @@
-{"version":3,"file":"diff.js","sourceRoot":"","sources":["../../src/capture/diff.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,+FAA+F;AAC/F,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;aAClG,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,OAAO,CAAC,CAAC;QACnB,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,UAAU,EAAE,oBAAoB,CAAC,EAAE;YAC/F,QAAQ,EAAE,MAAM;SACjB,CAAC;aACC,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,OAAO,CAAC,CAAC;QACnB,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}
+{"version":3,"file":"diff.js","sourceRoot":"","sources":["../../src/capture/diff.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,+FAA+F;AAC/F,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;aAClG,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,OAAO,CAAC,CAAC;QACnB,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,UAAU,EAAE,oBAAoB,CAAC,EAAE;YAC/F,QAAQ,EAAE,MAAM;SACjB,CAAC;aACC,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,OAAO,CAAC,CAAC;QACnB,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,+HAA+H;AAC/H,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/G,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,UAAU,EAAE,oBAAoB,CAAC,EAAE;YAC/F,QAAQ,EAAE,MAAM;SACjB,CAAC;aACC,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,OAAO,CAAC,CAAC;QACnB,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/capture/extract.d.ts

@@ -0,0 +1,5 @@
+import { type OutboundRef } from "./outbound.js";
+/** Every canonical surface ID a file defines (produces), across all supported languages. */
+export declare function extractAllSurfaces(path: string, content?: string): string[];
+/** Every outbound-call candidate a file makes (consumes), across all supported languages. */
+export declare function extractAllOutbound(path: string, content?: string): OutboundRef[];

package/dist/capture/extract.js

@@ -0,0 +1,17 @@
+/**
+ * Language-composed extraction — the single entry point scan/capture use. Each language module
+ * stays pure and self-gated by extension; this file just unions their results. `surface.ts` is
+ * deliberately untouched (it is vendored to the GitHub Action's `surface.mjs`).
+ */
+import { extractSurfaces } from "./surface.js";
+import { extractOutbound } from "./outbound.js";
+import { extractPythonOutbound, extractPythonSurfaces } from "./python.js";
+/** Every canonical surface ID a file defines (produces), across all supported languages. */
+export function extractAllSurfaces(path, content) {
+    return [...new Set([...extractSurfaces(path, content), ...extractPythonSurfaces(path, content)])];
+}
+/** Every outbound-call candidate a file makes (consumes), across all supported languages. */
+export function extractAllOutbound(path, content) {
+    return [...extractOutbound(path, content), ...extractPythonOutbound(path, content)];
+}
+//# sourceMappingURL=extract.js.map

package/dist/capture/extract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extract.js","sourceRoot":"","sources":["../../src/capture/extract.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAoB,MAAM,eAAe,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAE3E,4FAA4F;AAC5F,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,OAAgB;IAC/D,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,GAAG,qBAAqB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AACpG,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,OAAgB;IAC/D,OAAO,CAAC,GAAG,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,GAAG,qBAAqB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;AACtF,CAAC"}

package/dist/capture/feature-context.d.ts

@@ -0,0 +1,3 @@
+export declare function writeFeatureContext(remote: string, ref: string): void;
+export declare function readFeatureContext(remote: string): string | null;
+export declare function clearFeatureContext(remote: string): void;

package/dist/capture/feature-context.js

@@ -0,0 +1,43 @@
+import { readFileSync, writeFileSync, unlinkSync } from "node:fs";
+import { join } from "node:path";
+import { tmpdir } from "node:os";
+import { createHash } from "node:crypto";
+/**
+ * Session feature-context cache — mirrors statusline.ts's tmpdir cache, but keyed by git remote.
+ * `set_feature_context` writes here so the (separate-process) capture hook can attach the
+ * capabilityRef to change events. Accepted limitation (B-DB2): concurrent sessions on one
+ * checkout share one context, same as the statusline cache.
+ */
+const TTL_MS = 8 * 3600_000; // 8 hours
+function pathFor(remote) {
+    const key = createHash("sha1").update(remote).digest("hex").slice(0, 12);
+    return join(tmpdir(), `lockstep-feature-${key}.json`);
+}
+export function writeFeatureContext(remote, ref) {
+    try {
+        writeFileSync(pathFor(remote), JSON.stringify({ ref, ts: Date.now() }));
+    }
+    catch {
+        /* ignore */
+    }
+}
+export function readFeatureContext(remote) {
+    try {
+        const c = JSON.parse(readFileSync(pathFor(remote), "utf8"));
+        if (Date.now() - c.ts < TTL_MS)
+            return c.ref;
+    }
+    catch {
+        /* no context */
+    }
+    return null;
+}
+export function clearFeatureContext(remote) {
+    try {
+        unlinkSync(pathFor(remote));
+    }
+    catch {
+        /* ignore */
+    }
+}
+//# sourceMappingURL=feature-context.js.map

package/dist/capture/feature-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feature-context.js","sourceRoot":"","sources":["../../src/capture/feature-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC;;;;;GAKG;AACH,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,UAAU;AAOvC,SAAS,OAAO,CAAC,MAAc;IAC7B,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACzE,OAAO,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,GAAG,OAAO,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAc,EAAE,GAAW;IAC7D,IAAI,CAAC;QACH,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAgB,CAAC,CAAC,CAAC;IACxF,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAQ,CAAC;QACnE,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,EAAE,GAAG,MAAM;YAAE,OAAO,CAAC,CAAC,GAAG,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,gBAAgB;IAClB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,IAAI,CAAC;QACH,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;IACd,CAAC;AACH,CAAC"}

package/dist/capture/feature-context.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/capture/feature-context.test.js

@@ -0,0 +1,45 @@
+import { test } from "node:test";
+import assert from "node:assert/strict";
+import { readFileSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { tmpdir } from "node:os";
+import { createHash } from "node:crypto";
+import { writeFeatureContext, readFeatureContext, clearFeatureContext } from "./feature-context.js";
+// Unique remote per run so parallel/repeat runs don't collide on the tmpdir file.
+const remote = `github.com/lockstep-test/feature-ctx-${process.pid}-${Date.now()}`;
+const pathFor = (r) => join(tmpdir(), `lockstep-feature-${createHash("sha1").update(r).digest("hex").slice(0, 12)}.json`);
+test("write → read round-trips the capabilityRef", () => {
+    clearFeatureContext(remote);
+    writeFeatureContext(remote, "feature:guest-checkout");
+    assert.equal(readFeatureContext(remote), "feature:guest-checkout");
+    clearFeatureContext(remote);
+});
+test("missing context → null", () => {
+    clearFeatureContext(remote);
+    assert.equal(readFeatureContext(remote), null);
+});
+test("stale ts (older than TTL) → null", () => {
+    // Hand-write a context with a timestamp well beyond the 8h TTL.
+    const stale = { ref: "feature:old", ts: Date.now() - 9 * 3600_000 };
+    writeFileSync(pathFor(remote), JSON.stringify(stale));
+    assert.equal(readFeatureContext(remote), null);
+    clearFeatureContext(remote);
+});
+test("distinct remotes get distinct files", () => {
+    const a = `${remote}-a`;
+    const b = `${remote}-b`;
+    writeFeatureContext(a, "feature:a");
+    writeFeatureContext(b, "feature:b");
+    assert.equal(readFeatureContext(a), "feature:a");
+    assert.equal(readFeatureContext(b), "feature:b");
+    clearFeatureContext(a);
+    clearFeatureContext(b);
+});
+test("clear removes the file (read → null after)", () => {
+    writeFeatureContext(remote, "feature:x");
+    const p = pathFor(remote);
+    assert.equal(JSON.parse(readFileSync(p, "utf8")).ref, "feature:x");
+    clearFeatureContext(remote);
+    assert.equal(readFeatureContext(remote), null);
+});
+//# sourceMappingURL=feature-context.test.js.map

package/dist/capture/feature-context.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feature-context.test.js","sourceRoot":"","sources":["../../src/capture/feature-context.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAEpG,kFAAkF;AAClF,MAAM,MAAM,GAAG,wCAAwC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;AACnF,MAAM,OAAO,GAAG,CAAC,CAAS,EAAE,EAAE,CAC5B,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC;AAErG,IAAI,CAAC,4CAA4C,EAAE,GAAG,EAAE;IACtD,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC5B,mBAAmB,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;IACtD,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,wBAAwB,CAAC,CAAC;IACnE,mBAAmB,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wBAAwB,EAAE,GAAG,EAAE;IAClC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;AACjD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kCAAkC,EAAE,GAAG,EAAE;IAC5C,gEAAgE;IAChE,MAAM,KAAK,GAAG,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,QAAQ,EAAE,CAAC;IACpE,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACtD,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;IAC/C,mBAAmB,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qCAAqC,EAAE,GAAG,EAAE;IAC/C,MAAM,CAAC,GAAG,GAAG,MAAM,IAAI,CAAC;IACxB,MAAM,CAAC,GAAG,GAAG,MAAM,IAAI,CAAC;IACxB,mBAAmB,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IACpC,mBAAmB,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IACpC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IACjD,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IACjD,mBAAmB,CAAC,CAAC,CAAC,CAAC;IACvB,mBAAmB,CAAC,CAAC,CAAC,CAAC;AACzB,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4CAA4C,EAAE,GAAG,EAAE;IACtD,mBAAmB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACzC,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1B,MAAM,CAAC,KAAK,CAAE,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAqB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACxF,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;AACjD,CAAC,CAAC,CAAC"}

package/dist/capture/index.d.ts

@@ -1,6 +1,65 @@
+interface InboxResp {
+    unread?: number;
+    changes?: Array<{
+        summary: string;
+        surface: string | null;
+        impact?: number;
+    }>;
+    questions?: Array<{
+        id: string;
+        body: string;
+        scopeRef: string | null;
+        urgent: boolean;
+        status: string;
+    }>;
+    tasks?: Array<{
+        id: string;
+        title: string;
+        runState: string;
+        status: string;
+    }>;
+    decisions?: Array<{
+        id: string;
+        scopeRef: string;
+        ruleText: string;
+        status: string;
+        impact?: number;
+    }>;
+    conflicts?: Array<{
+        id: string;
+        surface: string;
+        constraintRuleText: string;
+        engRuleText: string;
+    }>;
+}
+interface DecisionsResp {
+    decisions?: Array<{
+        scopeRef: string;
+        status: string;
+        ruleText: string;
+        impact?: number;
+    }>;
+}
+/** Product-layer briefing: ranked, budget-capped constraints (origin=document, binding) in scope. */
+export interface BriefingResp {
+    constraints: Array<{
+        line: string;
+        impact: number;
+        conflictOpen: boolean;
+    }>;
+    overflow: number;
+    /** Phase P: binding decisionType=principle decisions — the team's standing decision criteria. */
+    principles?: Array<{
+        line: string;
+        impact: number;
+    }>;
+    principlesOverflow?: number;
+}
+export declare function formatReplay(inbox: InboxResp | null, decisions: DecisionsResp | null, briefing?: BriefingResp | null): string;
 /**
  * Hook entrypoint. Resilient by design — never break the agent: on any error it exits 0.
  *  SessionStart → replay inbox + binding decisions as additionalContext.
  *  PostToolUse/Stop → diff → classify surface → risk-tiered publish via notify.
  */
 export declare function runCapture(event: string): Promise<void>;
+export {};

package/dist/capture/index.js

@@ -3,15 +3,29 @@ import { join } from "node:path";
 import { createHash } from "node:crypto";
 import { registerSession } from "../mcp/session.js";
 import { call } from "../mcp/api.js";
+import { gitRemote } from "../mcp/git.js";
+import { readFeatureContext } from "./feature-context.js";
 import { changedFiles } from "./diff.js";
 import { isContractSurface, riskTierFor } from "./classify.js";
-function formatReplay(inbox, decisions) {
+import { extractAllSurfaces } from "./extract.js";
+import { readManifest } from "./manifest.js";
+/** Sync this repo's declared dependencies (lockstep.yaml `consumes:`) into the usage graph. Idempotent. */
+async function syncManifestDeps(cwd, sessionId) {
+    const { consumes } = readManifest(cwd);
+    for (const producedSurface of consumes) {
+        await call("POST", "/dependencies", sessionId, { producedSurface, source: "manifest" }).catch(() => { });
+    }
+}
+/** Highest-blast-radius first, so the session-start briefing leads with what matters most. */
+const byImpact = (a, b) => (b.impact ?? 0) - (a.impact ?? 0);
+const tag = (impact) => ((impact ?? 0) > 0 ? `[impact ${impact}] ` : "");
+export function formatReplay(inbox, decisions, briefing) {
     const lines = [];
-    const changes = inbox?.changes ?? [];
+    const changes = [...(inbox?.changes ?? [])].sort(byImpact);
     if (changes.length) {
         lines.push(`📥 ${changes.length} change(s) since you were last here:`);
         for (const c of changes.slice(0, 8))
-            lines.push(`  • ${c.summary}${c.surface ? ` (${c.surface})` : ""}`);
+            lines.push(`  • ${tag(c.impact)}${c.summary}${c.surface ? ` (${c.surface})` : ""}`);
     }
     const qs = (inbox?.questions ?? []).filter((q) => q.status === "open");
     if (qs.length) {
@@ -25,12 +39,44 @@ function formatReplay(inbox, decisions) {
         for (const t of ts.slice(0, 8))
             lines.push(`  • ${t.title}`);
     }
-    const binding = (decisions?.decisions ?? []).filter((d) => d.status === "binding");
-    if (binding.length) {
-        lines.push(`📌 ${binding.length} binding decision(s) in effect:`);
-        for (const d of binding.slice(0, 8))
+    const pendingDecisions = (inbox?.decisions ?? []).filter((d) => d.status === "open");
+    if (pendingDecisions.length) {
+        lines.push(`⚖️ ${pendingDecisions.length} decision(s) pending your acknowledgment:`);
+        for (const d of pendingDecisions.slice(0, 8))
             lines.push(`  • [${d.scopeRef}] ${d.ruleText}`);
     }
+    const conflicts = inbox?.conflicts ?? [];
+    if (conflicts.length) {
+        lines.push(`⚔️ ${conflicts.length} drift conflict(s) — your work may conflict with a ratified product constraint:`);
+        for (const c of conflicts.slice(0, 8))
+            lines.push(`  • [${c.surface}] your "${c.engRuleText}" vs constraint "${c.constraintRuleText}" — review both`);
+    }
+    // Principles lead — they're the criteria the agent should judge everything else by (TOMASP "M").
+    const principles = briefing?.principles ?? [];
+    if (principles.length) {
+        lines.push(`◆ ${principles.length} project principle(s) — the team's standing decision criteria:`);
+        for (const p of principles)
+            lines.push(`  • ${p.line}`);
+        if ((briefing?.principlesOverflow ?? 0) > 0)
+            lines.push(`  • (+${briefing?.principlesOverflow} more — query the ledger)`);
+    }
+    const binding = (decisions?.decisions ?? []).filter((d) => d.status === "binding").sort(byImpact);
+    const constraints = briefing?.constraints ?? [];
+    if (binding.length || constraints.length) {
+        const rows = [
+            ...binding.map((d) => ({
+                impact: d.impact ?? 0,
+                isConstraint: false,
+                line: `  • ${tag(d.impact)}[${d.scopeRef}] ${d.ruleText}`,
+            })),
+            ...constraints.map((c) => ({ impact: c.impact, isConstraint: true, line: `  • ${c.line}` })),
+        ].sort((a, b) => b.impact - a.impact || Number(b.isConstraint) - Number(a.isConstraint));
+        lines.push(`📌 ${rows.length} binding decision(s) in effect:`);
+        for (const r of rows.slice(0, 8))
+            lines.push(r.line);
+        if ((briefing?.overflow ?? 0) > 0)
+            lines.push(`  • (+${briefing?.overflow} product constraints in scope — get_product_context)`);
+    }
     return lines.length ? `Lockstep:\n${lines.join("\n")}` : "Lockstep: nothing new.";
 }
 /** Format a short badge from inbox peek counts. Returns null if nothing new. */
@@ -42,6 +88,8 @@ function formatPeek(peek) {
         parts.push(`${peek.questions} question${peek.questions > 1 ? "s" : ""}`);
     if (peek.tasks)
         parts.push(`${peek.tasks} task${peek.tasks > 1 ? "s" : ""}`);
+    if (peek.decisions)
+        parts.push(`${peek.decisions} decision${peek.decisions > 1 ? "s" : ""} to review`);
     if (peek.changes)
         parts.push(`${peek.changes} change${peek.changes > 1 ? "s" : ""}`);
     if (parts.length === 0)
@@ -63,11 +111,15 @@ export async function runCapture(event) {
     catch {
         process.exit(0); // not a connected repo / not logged in → silent no-op
     }
+    const remote = gitRemote(cwd);
+    const capabilityRef = remote ? readFeatureContext(remote) : null;
     try {
         if (event === "SessionStart") {
+            await syncManifestDeps(cwd, session.sessionId); // keep the usage graph current from lockstep.yaml
             const inbox = await call("GET", "/inbox", session.sessionId).catch(() => null);
             const decisions = await call("GET", "/decisions", session.sessionId).catch(() => null);
-            const replay = formatReplay(inbox, decisions);
+            const briefing = await call("GET", "/briefing", session.sessionId).catch(() => null);
+            const replay = formatReplay(inbox, decisions, briefing);
             process.stdout.write(JSON.stringify({
                 hookSpecificOutput: { hookEventName: "SessionStart", additionalContext: replay },
             }));
@@ -81,7 +133,9 @@ export async function runCapture(event) {
         const files = changedFiles(cwd);
         if (files.length === 0)
             return;
-        const surfaces = [];
+        // Extract CANONICAL surface IDs (e.g. "http:POST /auth/session") — the shared vocabulary that
+        // lets a consumer's declared dependency match a producer's change. File paths never matched.
+        const surfaceIds = new Set();
         let anyContractSurface = false;
         for (const f of files) {
             let content = "";
@@ -91,24 +145,50 @@ export async function runCapture(event) {
             catch {
                 /* deleted/binary — skip content */
             }
-            if (isContractSurface(f, content)) {
+            const ids = extractAllSurfaces(f, content);
+            if (ids.length > 0) {
                 anyContractSurface = true;
-                surfaces.push(f);
+                ids.forEach((s) => surfaceIds.add(s));
+            }
+            else if (isContractSurface(f, content)) {
+                anyContractSurface = true; // contract-ish file we couldn't parse into an exact surface
             }
         }
         // v1: contract surface ⇒ shared (the safety-critical bias). Ownership-based refinement later.
         const riskTier = riskTierFor({ anyContractSurface, allOwnedByMe: true });
         const summary = `${event}: changed ${files.length} file(s): ${files.slice(0, 5).join(", ")}${files.length > 5 ? "…" : ""}`;
-        const diffHash = createHash("sha256").update(files.sort().join("|")).digest("hex").slice(0, 16);
-        await call("POST", "/changes", session.sessionId, {
-            summary,
-            surface: surfaces[0],
-            riskTier,
-            verified: true, // mechanical delta is derived from real local code
-            verifiedAgainst: "git-diff",
-            diffHash,
-        }).catch(() => { });
-        process.stderr.write(`[lockstep] published change (${riskTier})\n`);
+        const baseHash = createHash("sha256").update(files.sort().join("|")).digest("hex").slice(0, 16);
+        const ids = [...surfaceIds].slice(0, 10);
+        if (ids.length === 0) {
+            // No contract surface touched — record a single owned activity entry (routes to no one).
+            await call("POST", "/changes", session.sessionId, {
+                summary,
+                riskTier,
+                verified: true,
+                verifiedAgainst: "git-diff",
+                diffHash: baseHash,
+                capabilityRef: capabilityRef ?? undefined,
+            }).catch(() => { });
+        }
+        else {
+            // One change per changed surface, so each routes to that surface's consumers.
+            for (const surface of ids) {
+                await call("POST", "/changes", session.sessionId, {
+                    summary,
+                    surface,
+                    riskTier,
+                    verified: true, // mechanical delta is derived from real local code (displayed as "extracted", not "verified")
+                    verifiedAgainst: "git-diff",
+                    diffHash: `${baseHash}:${surface}`,
+                    capabilityRef: capabilityRef ?? undefined,
+                }).catch(() => { });
+            }
+        }
+        process.stderr.write(`[lockstep] published change (${riskTier}, ${ids.length} surface(s))\n`);
+        // NOTE: capture publishes a CHANGE event only. A change is NOT a decision — decisions are
+        // durable rules/architectural choices, logged deliberately by the agent via propose_decision
+        // (see the lockstep skill). Auto-minting a decision per save was a category error that flooded
+        // the ledger; routing/impact for changes is handled by recordChange on the server.
         // Peek at inbox (without marking as read) — notify the agent if there are unread items
         const peek = await call("GET", "/inbox/peek", session.sessionId).catch(() => null);
         const badge = formatPeek(peek);

package/dist/capture/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/capture/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAY/D,SAAS,YAAY,CAAC,KAAuB,EAAE,SAA+B;IAC5E,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,KAAK,EAAE,OAAO,IAAI,EAAE,CAAC;IACrC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,MAAM,sCAAsC,CAAC,CAAC;QACvE,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3G,CAAC;IACD,MAAM,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IACvE,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,4BAA4B,CAAC,CAAC;QACvD,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IACnE,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,2BAA2B,CAAC,CAAC;QACvD,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,SAAS,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IACnF,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,MAAM,iCAAiC,CAAC,CAAC;QAClE,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,wBAAwB,CAAC;AACpF,CAAC;AASD,gFAAgF;AAChF,SAAS,UAAU,CAAC,IAAqB;IACvC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,IAAI,CAAC,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,YAAY,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7F,IAAI,IAAI,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7E,IAAI,IAAI,CAAC,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,UAAU,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACrF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,cAAc,IAAI,CAAC,MAAM,eAAe,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC;AACvH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAa;IAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,SAAS,CAAC;IACxD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAE1B,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,sDAAsD;IACzE,CAAC;IAED,IAAI,CAAC;QACH,IAAI,KAAK,KAAK,cAAc,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAY,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAC1F,MAAM,SAAS,GAAG,MAAM,IAAI,CAAgB,KAAK,EAAE,YAAY,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YACtG,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAC9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC;gBACb,kBAAkB,EAAE,EAAE,aAAa,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,EAAE;aACjF,CAAC,CACH,CAAC;YACF,uDAAuD;YACvD,IAAI,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,MAAM,CAAC,CAAC;YAC1C,CAAC;YACD,OAAO;QACT,CAAC;QAED,0CAA0C;QAC1C,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAE/B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,kBAAkB,GAAG,KAAK,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,OAAO,GAAG,EAAE,CAAC;YACjB,IAAI,CAAC;gBACH,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAC/C,CAAC;YAAC,MAAM,CAAC;gBACP,mCAAmC;YACrC,CAAC;YACD,IAAI,iBAAiB,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC;gBAClC,kBAAkB,GAAG,IAAI,CAAC;gBAC1B,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QAED,8FAA8F;QAC9F,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,kBAAkB,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QACzE,MAAM,OAAO,GAAG,GAAG,KAAK,aAAa,KAAK,CAAC,MAAM,aAAa,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC3H,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAEhG,MAAM,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,SAAS,EAAE;YAChD,OAAO;YACP,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;YACpB,QAAQ;YACR,QAAQ,EAAE,IAAI,EAAE,mDAAmD;YACnE,eAAe,EAAE,UAAU;YAC3B,QAAQ;SACT,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,QAAQ,KAAK,CAAC,CAAC;QAEpE,uFAAuF;QACvF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAW,KAAK,EAAE,aAAa,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC7F,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC;gBACb,kBAAkB,EAAE,EAAE,aAAa,EAAE,aAAa,EAAE,iBAAiB,EAAE,KAAK,EAAE;aAC/E,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/capture/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,2GAA2G;AAC3G,KAAK,UAAU,gBAAgB,CAAC,GAAW,EAAE,SAAiB;IAC5D,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACvC,KAAK,MAAM,eAAe,IAAI,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC1G,CAAC;AACH,CAAC;AAsBD,8FAA8F;AAC9F,MAAM,QAAQ,GAAG,CAAgC,CAAI,EAAE,CAAI,EAAU,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;AAC1G,MAAM,GAAG,GAAG,CAAC,MAAe,EAAU,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAE1F,MAAM,UAAU,YAAY,CAC1B,KAAuB,EACvB,SAA+B,EAC/B,QAA8B;IAE9B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3D,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,MAAM,sCAAsC,CAAC,CAAC;QACvE,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IACvE,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,4BAA4B,CAAC,CAAC;QACvD,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IACnE,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,2BAA2B,CAAC,CAAC;QACvD,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,gBAAgB,GAAG,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IACrF,IAAI,gBAAgB,CAAC,MAAM,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,MAAM,gBAAgB,CAAC,MAAM,2CAA2C,CAAC,CAAC;QACrF,KAAK,MAAM,CAAC,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IAChG,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,EAAE,SAAS,IAAI,EAAE,CAAC;IACzC,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,MAAM,SAAS,CAAC,MAAM,iFAAiF,CAAC,CAAC;QACpH,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,WAAW,CAAC,CAAC,WAAW,oBAAoB,CAAC,CAAC,kBAAkB,iBAAiB,CAAC,CAAC;IACnH,CAAC;IACD,iGAAiG;IACjG,MAAM,UAAU,GAAG,QAAQ,EAAE,UAAU,IAAI,EAAE,CAAC;IAC9C,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,KAAK,UAAU,CAAC,MAAM,gEAAgE,CAAC,CAAC;QACnG,KAAK,MAAM,CAAC,IAAI,UAAU;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,QAAQ,EAAE,kBAAkB,IAAI,CAAC,CAAC,GAAG,CAAC;YACzC,KAAK,CAAC,IAAI,CAAC,SAAS,QAAQ,EAAE,kBAAkB,2BAA2B,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,SAAS,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClG,MAAM,WAAW,GAAG,QAAQ,EAAE,WAAW,IAAI,EAAE,CAAC;IAChD,IAAI,OAAO,CAAC,MAAM,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;QAIzC,MAAM,IAAI,GAAU;YAClB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACrB,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC;gBACrB,YAAY,EAAE,KAAK;gBACnB,IAAI,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,EAAE;aAC1D,CAAC,CAAC;YACH,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;SAC7F,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;QAEzF,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,iCAAiC,CAAC,CAAC;QAC/D,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,QAAQ,EAAE,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,SAAS,QAAQ,EAAE,QAAQ,sDAAsD,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,wBAAwB,CAAC;AACpF,CAAC;AAUD,gFAAgF;AAChF,SAAS,UAAU,CAAC,IAAqB;IACvC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,IAAI,CAAC,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,YAAY,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7F,IAAI,IAAI,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7E,IAAI,IAAI,CAAC,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,YAAY,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;IACvG,IAAI,IAAI,CAAC,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,UAAU,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACrF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,cAAc,IAAI,CAAC,MAAM,eAAe,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC;AACvH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAa;IAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,SAAS,CAAC;IACxD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAE1B,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,sDAAsD;IACzE,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,aAAa,GAAG,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEjE,IAAI,CAAC;QACH,IAAI,KAAK,KAAK,cAAc,EAAE,CAAC;YAC7B,MAAM,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,kDAAkD;YAClG,MAAM,KAAK,GAAG,MAAM,IAAI,CAAY,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAC1F,MAAM,SAAS,GAAG,MAAM,IAAI,CAAgB,KAAK,EAAE,YAAY,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YACtG,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAe,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YACnG,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;YACxD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC;gBACb,kBAAkB,EAAE,EAAE,aAAa,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,EAAE;aACjF,CAAC,CACH,CAAC;YACF,uDAAuD;YACvD,IAAI,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,MAAM,CAAC,CAAC;YAC1C,CAAC;YACD,OAAO;QACT,CAAC;QAED,0CAA0C;QAC1C,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAE/B,8FAA8F;QAC9F,6FAA6F;QAC7F,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;QACrC,IAAI,kBAAkB,GAAG,KAAK,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,OAAO,GAAG,EAAE,CAAC;YACjB,IAAI,CAAC;gBACH,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAC/C,CAAC;YAAC,MAAM,CAAC;gBACP,mCAAmC;YACrC,CAAC;YACD,MAAM,GAAG,GAAG,kBAAkB,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAC3C,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnB,kBAAkB,GAAG,IAAI,CAAC;gBAC1B,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACxC,CAAC;iBAAM,IAAI,iBAAiB,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC;gBACzC,kBAAkB,GAAG,IAAI,CAAC,CAAC,4DAA4D;YACzF,CAAC;QACH,CAAC;QAED,8FAA8F;QAC9F,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,kBAAkB,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QACzE,MAAM,OAAO,GAAG,GAAG,KAAK,aAAa,KAAK,CAAC,MAAM,aAAa,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC3H,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAEhG,MAAM,GAAG,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,yFAAyF;YACzF,MAAM,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,SAAS,EAAE;gBAChD,OAAO;gBACP,QAAQ;gBACR,QAAQ,EAAE,IAAI;gBACd,eAAe,EAAE,UAAU;gBAC3B,QAAQ,EAAE,QAAQ;gBAClB,aAAa,EAAE,aAAa,IAAI,SAAS;aAC1C,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACrB,CAAC;aAAM,CAAC;YACN,8EAA8E;YAC9E,KAAK,MAAM,OAAO,IAAI,GAAG,EAAE,CAAC;gBAC1B,MAAM,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,SAAS,EAAE;oBAChD,OAAO;oBACP,OAAO;oBACP,QAAQ;oBACR,QAAQ,EAAE,IAAI,EAAE,8FAA8F;oBAC9G,eAAe,EAAE,UAAU;oBAC3B,QAAQ,EAAE,GAAG,QAAQ,IAAI,OAAO,EAAE;oBAClC,aAAa,EAAE,aAAa,IAAI,SAAS;iBAC1C,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,QAAQ,KAAK,GAAG,CAAC,MAAM,gBAAgB,CAAC,CAAC;QAE9F,0FAA0F;QAC1F,6FAA6F;QAC7F,+FAA+F;QAC/F,mFAAmF;QAEnF,uFAAuF;QACvF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAW,KAAK,EAAE,aAAa,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC7F,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC;gBACb,kBAAkB,EAAE,EAAE,aAAa,EAAE,aAAa,EAAE,iBAAiB,EAAE,KAAK,EAAE;aAC/E,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/capture/manifest.d.ts

@@ -0,0 +1,26 @@
+export interface Manifest {
+    produces: string[];
+    consumes: string[];
+}
+/**
+ * Read `lockstep.yaml` from the repo root. This is the deterministic source of truth for the usage
+ * graph: `consumes:` declares the canonical surface IDs this repo depends on (so it gets warned when
+ * they change), `produces:` optionally declares/overrides what it exposes. We parse a minimal YAML
+ * subset (two top-level keys, each a `- item` list) to stay dependency-free and predictable.
+ *
+ * Example:
+ *   produces:
+ *     - http:POST /auth/session
+ *   consumes:
+ *     - http:GET /orders/:id
+ */
+export declare function readManifest(cwd: string): Manifest;
+/**
+ * Write `lockstep.yaml`, MERGE-preserving what's already there — existing human entries are unioned
+ * with the proposed ones (never dropped), and the file's leading comment block is kept. Atomic write
+ * with a one-time `.lockstep.bak` and idempotent no-op, via the shared `applyFile`. This is the single
+ * sanctioned writer of the manifest — the capture hook never touches it (see IMPROVEMENTS #11).
+ */
+export declare function writeManifest(cwd: string, manifest: Manifest, opts?: {
+    dryRun?: boolean;
+}): Promise<string>;

package/dist/capture/manifest.js

@@ -0,0 +1,98 @@
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+import { applyFile } from "../adapters/fsutil.js";
+/**
+ * Read `lockstep.yaml` from the repo root. This is the deterministic source of truth for the usage
+ * graph: `consumes:` declares the canonical surface IDs this repo depends on (so it gets warned when
+ * they change), `produces:` optionally declares/overrides what it exposes. We parse a minimal YAML
+ * subset (two top-level keys, each a `- item` list) to stay dependency-free and predictable.
+ *
+ * Example:
+ *   produces:
+ *     - http:POST /auth/session
+ *   consumes:
+ *     - http:GET /orders/:id
+ */
+export function readManifest(cwd) {
+    let raw;
+    try {
+        raw = readFileSync(join(cwd, "lockstep.yaml"), "utf8");
+    }
+    catch {
+        return { produces: [], consumes: [] };
+    }
+    const out = { produces: [], consumes: [] };
+    let key = null;
+    for (const line of raw.split(/\r?\n/)) {
+        if (/^\s*#/.test(line) || line.trim() === "")
+            continue;
+        const top = line.match(/^(produces|consumes)\s*:\s*$/);
+        if (top) {
+            key = top[1];
+            continue;
+        }
+        const item = line.match(/^\s*-\s*(.+?)\s*$/);
+        if (item && key) {
+            out[key].push(item[1].replace(/^["']|["']$/g, ""));
+        }
+        else if (/^\S/.test(line)) {
+            key = null; // a new unindented non-list key ends the current list
+        }
+    }
+    return out;
+}
+const DEFAULT_HEADER = `# Lockstep manifest — the deterministic source of truth for the usage graph.
+# Managed by the \`/lockstep-setup\` skill (the only sanctioned writer; the capture hook is read-only).
+# Surface IDs are canonical: http:METHOD /path · proto:pkg.Service/Rpc · gql:Root.field
+`;
+/** Preserve the file's existing top-of-file comment block (so human notes survive a rewrite). */
+function leadingComment(raw) {
+    if (!raw)
+        return null;
+    const head = [];
+    for (const line of raw.split(/\r?\n/)) {
+        if (/^\s*#/.test(line) || line.trim() === "")
+            head.push(line);
+        else
+            break;
+    }
+    const block = head.join("\n").trimEnd();
+    return block ? block + "\n" : null;
+}
+const union = (a, b) => {
+    const out = [];
+    const seen = new Set();
+    for (const x of [...a, ...b])
+        if (x && !seen.has(x))
+            (seen.add(x), out.push(x));
+    return out;
+};
+function serialize(m, header) {
+    const list = (items) => items.map((i) => `  - ${i}`).join("\n");
+    const block = (key, items) => (items.length ? `${key}:\n${list(items)}\n` : `${key}:\n`);
+    return `${header}\n${block("produces", m.produces)}\n${block("consumes", m.consumes)}`;
+}
+/**
+ * Write `lockstep.yaml`, MERGE-preserving what's already there — existing human entries are unioned
+ * with the proposed ones (never dropped), and the file's leading comment block is kept. Atomic write
+ * with a one-time `.lockstep.bak` and idempotent no-op, via the shared `applyFile`. This is the single
+ * sanctioned writer of the manifest — the capture hook never touches it (see IMPROVEMENTS #11).
+ */
+export async function writeManifest(cwd, manifest, opts = {}) {
+    const path = join(cwd, "lockstep.yaml");
+    let raw;
+    try {
+        raw = readFileSync(path, "utf8");
+    }
+    catch {
+        raw = null;
+    }
+    const existing = readManifest(cwd);
+    const merged = {
+        produces: union(existing.produces, manifest.produces),
+        consumes: union(existing.consumes, manifest.consumes),
+    };
+    const header = leadingComment(raw) ?? DEFAULT_HEADER;
+    return applyFile(path, () => serialize(merged, header), opts.dryRun ?? false);
+}
+//# sourceMappingURL=manifest.js.map

package/dist/capture/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/capture/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAOlD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACxC,CAAC;IACD,MAAM,GAAG,GAAa,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACrD,IAAI,GAAG,GAA0B,IAAI,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,SAAS;QACvD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACvD,IAAI,GAAG,EAAE,CAAC;YACR,GAAG,GAAG,GAAG,CAAC,CAAC,CAAmB,CAAC;YAC/B,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC7C,IAAI,IAAI,IAAI,GAAG,EAAE,CAAC;YAChB,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC;QACtD,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,GAAG,GAAG,IAAI,CAAC,CAAC,sDAAsD;QACpE,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,cAAc,GAAG;;;CAGtB,CAAC;AAEF,iGAAiG;AACjG,SAAS,cAAc,CAAC,GAAkB;IACxC,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;YACzD,MAAM;IACb,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;IACxC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACrC,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,CAAW,EAAE,CAAW,EAAY,EAAE;IACnD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,OAAO,GAAG,CAAC;AACb,CAAC,CAAC;AAEF,SAAS,SAAS,CAAC,CAAW,EAAE,MAAc;IAC5C,MAAM,IAAI,GAAG,CAAC,KAAe,EAAU,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClF,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,KAAe,EAAU,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC;IACnH,OAAO,GAAG,MAAM,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;AACzF,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAW,EAAE,QAAkB,EAAE,OAA6B,EAAE;IAClG,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IACxC,IAAI,GAAkB,CAAC;IACvB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,GAAG,IAAI,CAAC;IACb,CAAC;IACD,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,MAAM,GAAa;QACvB,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC;QACrD,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC;KACtD,CAAC;IACF,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC;IACrD,OAAO,SAAS,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC;AAChF,CAAC"}

package/dist/capture/manifest.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/capture/manifest.test.js

@@ -0,0 +1,40 @@
+import { test } from "node:test";
+import assert from "node:assert/strict";
+import { mkdtemp, readFile, writeFile, access } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { readManifest, writeManifest } from "./manifest.js";
+const tmp = () => mkdtemp(join(tmpdir(), "lockstep-manifest-"));
+test("writeManifest round-trips through readManifest", async () => {
+    const dir = await tmp();
+    await writeManifest(dir, { produces: ["http:POST /a"], consumes: ["http:GET /b"] });
+    assert.deepEqual(readManifest(dir), { produces: ["http:POST /a"], consumes: ["http:GET /b"] });
+});
+test("merges with (never drops) existing human entries", async () => {
+    const dir = await tmp();
+    await writeFile(join(dir, "lockstep.yaml"), "# my notes\nproduces:\n  - http:POST /a\nconsumes:\n  - http:GET /manual\n");
+    await writeManifest(dir, { produces: ["http:POST /a", "http:GET /new"], consumes: ["http:GET /b"] });
+    const m = readManifest(dir);
+    assert.deepEqual(m.produces, ["http:POST /a", "http:GET /new"]);
+    assert.deepEqual(m.consumes, ["http:GET /manual", "http:GET /b"], "human entry kept, new one appended");
+    const raw = await readFile(join(dir, "lockstep.yaml"), "utf8");
+    assert.ok(raw.startsWith("# my notes"), "existing comment header preserved");
+});
+test("writes a one-time .lockstep.bak and is idempotent on no-op re-write", async () => {
+    const dir = await tmp();
+    await writeFile(join(dir, "lockstep.yaml"), "produces:\nconsumes:\n");
+    await writeManifest(dir, { produces: ["http:POST /a"], consumes: [] });
+    await access(join(dir, "lockstep.yaml.lockstep.bak")); // throws if missing
+    const first = await readFile(join(dir, "lockstep.yaml"), "utf8");
+    const status = await writeManifest(dir, { produces: ["http:POST /a"], consumes: [] });
+    const second = await readFile(join(dir, "lockstep.yaml"), "utf8");
+    assert.equal(first, second, "re-write with same content is a no-op");
+    assert.match(status, /^unchanged/);
+});
+test("dry-run does not write the file", async () => {
+    const dir = await tmp();
+    const status = await writeManifest(dir, { produces: ["http:POST /a"], consumes: [] }, { dryRun: true });
+    assert.match(status, /^would write/);
+    await assert.rejects(access(join(dir, "lockstep.yaml")));
+});
+//# sourceMappingURL=manifest.test.js.map