sdd-agent-platform 0.4.1 → 0.5.0

package/node_modules/@sdd-agent-platform/core/src/registries/skill-capabilities.ts

@@ -1,37 +1,37 @@
-import { AGENT_SKILL_TEAM_RUNTIME_CONTRACT_VERSION } from '../contracts.js';
-
-type LifecycleAutonomyCeiling = 'direct_execution_allowed' | 'compact_boundary_only' | 'full_sdd_with_checkpoint' | 'research_before_implementation';
-type CapabilityReuseDecision = 'reuse_direct' | 'adapt_via_host_adapter' | 'borrow_mechanism' | 'avoid';
-type SkillCapabilityKind = 'skill' | 'mcp' | 'cli_tool' | 'host_tool' | 'project_agent' | 'external_pattern';
-type SkillCapabilitySource = 'project' | 'user_global' | 'claude_code' | 'mcp' | 'open_source' | 'host';
-type SkillCapabilityEvidenceType = 'none' | 'command_output' | 'test_result' | 'browser_snapshot' | 'artifact' | 'external_source' | 'execution_record';
-
-interface BuiltInSkillCapabilityContract {
-  version: typeof AGENT_SKILL_TEAM_RUNTIME_CONTRACT_VERSION;
-  id: string;
-  name: string;
-  kind: SkillCapabilityKind;
-  source: SkillCapabilitySource;
-  sourceRef: string;
-  capabilityDomain: string[];
-  allowedStages: string[];
-  requiredRiskCeiling: LifecycleAutonomyCeiling;
-  evidenceType: SkillCapabilityEvidenceType;
-  reuseDecision: CapabilityReuseDecision;
-  buildExceptionReason: string | null;
-}
-
-export const BUILT_IN_SKILL_CAPABILITIES: BuiltInSkillCapabilityContract[] = [
-  { version: AGENT_SKILL_TEAM_RUNTIME_CONTRACT_VERSION, id: 'claude.subagent.researcher', name: 'Claude Code researcher subagent', kind: 'host_tool', source: 'claude_code', sourceRef: 'Claude Code Agent tool', capabilityDomain: ['research', 'search'], allowedStages: ['spec', 'plan', 'tasks', 'review'], requiredRiskCeiling: 'research_before_implementation', evidenceType: 'execution_record', reuseDecision: 'reuse_direct', buildExceptionReason: null },
-  { version: AGENT_SKILL_TEAM_RUNTIME_CONTRACT_VERSION, id: 'claude.subagent.implementer', name: 'Claude Code implementer subagent', kind: 'host_tool', source: 'claude_code', sourceRef: 'Claude Code Agent tool', capabilityDomain: ['edit', 'test'], allowedStages: ['do'], requiredRiskCeiling: 'compact_boundary_only', evidenceType: 'execution_record', reuseDecision: 'reuse_direct', buildExceptionReason: null },
-  { version: AGENT_SKILL_TEAM_RUNTIME_CONTRACT_VERSION, id: 'claude.skill.sdd', name: 'SDD workflow skill', kind: 'skill', source: 'project', sourceRef: '.claude/skills/sdd/SKILL.md', capabilityDomain: ['planning', 'validation'], allowedStages: ['spec', 'plan', 'tasks', 'do', 'verify'], requiredRiskCeiling: 'full_sdd_with_checkpoint', evidenceType: 'artifact', reuseDecision: 'reuse_direct', buildExceptionReason: null },
-  { version: AGENT_SKILL_TEAM_RUNTIME_CONTRACT_VERSION, id: 'context7.docs', name: 'Context7 documentation lookup', kind: 'mcp', source: 'mcp', sourceRef: 'Context7 MCP', capabilityDomain: ['docs', 'api'], allowedStages: ['spec', 'plan', 'review'], requiredRiskCeiling: 'research_before_implementation', evidenceType: 'external_source', reuseDecision: 'reuse_direct', buildExceptionReason: null },
-  { version: AGENT_SKILL_TEAM_RUNTIME_CONTRACT_VERSION, id: 'playwright.browser_validation', name: 'Playwright browser validation', kind: 'mcp', source: 'mcp', sourceRef: 'Playwright MCP/CLI', capabilityDomain: ['browser', 'validation'], allowedStages: ['verify'], requiredRiskCeiling: 'compact_boundary_only', evidenceType: 'browser_snapshot', reuseDecision: 'reuse_direct', buildExceptionReason: null },
-  { version: AGENT_SKILL_TEAM_RUNTIME_CONTRACT_VERSION, id: 'host.search.grep_glob', name: 'Host file and content search', kind: 'host_tool', source: 'host', sourceRef: 'Grep/Glob/Read tools', capabilityDomain: ['search'], allowedStages: ['spec', 'plan', 'tasks', 'do', 'review'], requiredRiskCeiling: 'direct_execution_allowed', evidenceType: 'command_output', reuseDecision: 'reuse_direct', buildExceptionReason: null },
-  { version: AGENT_SKILL_TEAM_RUNTIME_CONTRACT_VERSION, id: 'host.edit.hashline', name: 'Hashline UTF-8 edit capability', kind: 'host_tool', source: 'host', sourceRef: 'hashline-edit MCP', capabilityDomain: ['edit'], allowedStages: ['do'], requiredRiskCeiling: 'compact_boundary_only', evidenceType: 'artifact', reuseDecision: 'reuse_direct', buildExceptionReason: null },
-  { version: AGENT_SKILL_TEAM_RUNTIME_CONTRACT_VERSION, id: 'host.cli.shell', name: 'Host shell command execution', kind: 'cli_tool', source: 'host', sourceRef: 'PowerShell/Bash', capabilityDomain: ['test', 'build', 'git'], allowedStages: ['do', 'verify'], requiredRiskCeiling: 'compact_boundary_only', evidenceType: 'command_output', reuseDecision: 'adapt_via_host_adapter', buildExceptionReason: null },
-  { version: AGENT_SKILL_TEAM_RUNTIME_CONTRACT_VERSION, id: 'pattern.opencode.plugin_registry', name: 'OpenCode plugin registry mechanism', kind: 'external_pattern', source: 'open_source', sourceRef: 'OpenCode plugin/agent mechanism', capabilityDomain: ['host_adapter'], allowedStages: ['plan'], requiredRiskCeiling: 'research_before_implementation', evidenceType: 'none', reuseDecision: 'borrow_mechanism', buildExceptionReason: null },
-  { version: AGENT_SKILL_TEAM_RUNTIME_CONTRACT_VERSION, id: 'pattern.ohmy.agent_routing', name: 'Oh My OpenAgent routing pattern', kind: 'external_pattern', source: 'open_source', sourceRef: 'Oh My OpenAgent/OpenCode', capabilityDomain: ['routing', 'model_policy'], allowedStages: ['plan', 'tasks'], requiredRiskCeiling: 'research_before_implementation', evidenceType: 'none', reuseDecision: 'borrow_mechanism', buildExceptionReason: null },
-  { version: AGENT_SKILL_TEAM_RUNTIME_CONTRACT_VERSION, id: 'pattern.ohmy.security_research', name: 'Oh My security-research team pattern', kind: 'external_pattern', source: 'open_source', sourceRef: 'Oh My OpenCode team-mode/security-research', capabilityDomain: ['security', 'review'], allowedStages: ['plan', 'review', 'verify'], requiredRiskCeiling: 'research_before_implementation', evidenceType: 'artifact', reuseDecision: 'borrow_mechanism', buildExceptionReason: null },
-  { version: AGENT_SKILL_TEAM_RUNTIME_CONTRACT_VERSION, id: 'external.agency_agents.material', name: 'Agency agents domain material', kind: 'external_pattern', source: 'open_source', sourceRef: 'msitarzewski/agency-agents', capabilityDomain: ['domain_expert', 'source_material'], allowedStages: ['spec', 'plan', 'review'], requiredRiskCeiling: 'research_before_implementation', evidenceType: 'external_source', reuseDecision: 'adapt_via_host_adapter', buildExceptionReason: null }
-];
+import { AGENT_SKILL_TEAM_RUNTIME_CONTRACT_VERSION } from '../contracts.js';
+
+type LifecycleAutonomyCeiling = 'direct_execution_allowed' | 'compact_boundary_only' | 'full_sdd_with_checkpoint' | 'research_before_implementation';
+type CapabilityReuseDecision = 'reuse_direct' | 'adapt_via_host_adapter' | 'borrow_mechanism' | 'avoid';
+type SkillCapabilityKind = 'skill' | 'mcp' | 'cli_tool' | 'host_tool' | 'project_agent' | 'external_pattern';
+type SkillCapabilitySource = 'project' | 'user_global' | 'claude_code' | 'mcp' | 'open_source' | 'host';
+type SkillCapabilityEvidenceType = 'none' | 'command_output' | 'test_result' | 'browser_snapshot' | 'artifact' | 'external_source' | 'execution_record';
+
+interface BuiltInSkillCapabilityContract {
+  version: typeof AGENT_SKILL_TEAM_RUNTIME_CONTRACT_VERSION;
+  id: string;
+  name: string;
+  kind: SkillCapabilityKind;
+  source: SkillCapabilitySource;
+  sourceRef: string;
+  capabilityDomain: string[];
+  allowedStages: string[];
+  requiredRiskCeiling: LifecycleAutonomyCeiling;
+  evidenceType: SkillCapabilityEvidenceType;
+  reuseDecision: CapabilityReuseDecision;
+  buildExceptionReason: string | null;
+}
+
+export const BUILT_IN_SKILL_CAPABILITIES: BuiltInSkillCapabilityContract[] = [
+  { version: AGENT_SKILL_TEAM_RUNTIME_CONTRACT_VERSION, id: 'claude.subagent.researcher', name: 'Claude Code researcher subagent', kind: 'host_tool', source: 'claude_code', sourceRef: 'Claude Code Agent tool', capabilityDomain: ['research', 'search'], allowedStages: ['spec', 'plan', 'tasks', 'review'], requiredRiskCeiling: 'research_before_implementation', evidenceType: 'execution_record', reuseDecision: 'reuse_direct', buildExceptionReason: null },
+  { version: AGENT_SKILL_TEAM_RUNTIME_CONTRACT_VERSION, id: 'claude.subagent.implementer', name: 'Claude Code implementer subagent', kind: 'host_tool', source: 'claude_code', sourceRef: 'Claude Code Agent tool', capabilityDomain: ['edit', 'test'], allowedStages: ['execute'], requiredRiskCeiling: 'compact_boundary_only', evidenceType: 'execution_record', reuseDecision: 'reuse_direct', buildExceptionReason: null },
+  { version: AGENT_SKILL_TEAM_RUNTIME_CONTRACT_VERSION, id: 'claude.skill.sdd', name: 'SDD workflow skill', kind: 'skill', source: 'project', sourceRef: '.claude/skills/sdd/SKILL.md', capabilityDomain: ['planning', 'validation'], allowedStages: ['spec', 'plan', 'tasks', 'execute'], requiredRiskCeiling: 'full_sdd_with_checkpoint', evidenceType: 'artifact', reuseDecision: 'reuse_direct', buildExceptionReason: null },
+  { version: AGENT_SKILL_TEAM_RUNTIME_CONTRACT_VERSION, id: 'context7.docs', name: 'Context7 documentation lookup', kind: 'mcp', source: 'mcp', sourceRef: 'Context7 MCP', capabilityDomain: ['docs', 'api'], allowedStages: ['spec', 'plan', 'review'], requiredRiskCeiling: 'research_before_implementation', evidenceType: 'external_source', reuseDecision: 'reuse_direct', buildExceptionReason: null },
+  { version: AGENT_SKILL_TEAM_RUNTIME_CONTRACT_VERSION, id: 'playwright.browser_validation', name: 'Playwright browser validation', kind: 'mcp', source: 'mcp', sourceRef: 'Playwright MCP/CLI', capabilityDomain: ['browser', 'validation'], allowedStages: ['execute'], requiredRiskCeiling: 'compact_boundary_only', evidenceType: 'browser_snapshot', reuseDecision: 'reuse_direct', buildExceptionReason: null },
+  { version: AGENT_SKILL_TEAM_RUNTIME_CONTRACT_VERSION, id: 'host.search.grep_glob', name: 'Host file and content search', kind: 'host_tool', source: 'host', sourceRef: 'Grep/Glob/Read tools', capabilityDomain: ['search'], allowedStages: ['spec', 'plan', 'tasks', 'execute', 'review'], requiredRiskCeiling: 'direct_execution_allowed', evidenceType: 'command_output', reuseDecision: 'reuse_direct', buildExceptionReason: null },
+  { version: AGENT_SKILL_TEAM_RUNTIME_CONTRACT_VERSION, id: 'host.edit.hashline', name: 'Hashline UTF-8 edit capability', kind: 'host_tool', source: 'host', sourceRef: 'hashline-edit MCP', capabilityDomain: ['edit'], allowedStages: ['execute'], requiredRiskCeiling: 'compact_boundary_only', evidenceType: 'artifact', reuseDecision: 'reuse_direct', buildExceptionReason: null },
+  { version: AGENT_SKILL_TEAM_RUNTIME_CONTRACT_VERSION, id: 'host.cli.shell', name: 'Host shell command execution', kind: 'cli_tool', source: 'host', sourceRef: 'PowerShell/Bash', capabilityDomain: ['test', 'build', 'git'], allowedStages: ['execute'], requiredRiskCeiling: 'compact_boundary_only', evidenceType: 'command_output', reuseDecision: 'adapt_via_host_adapter', buildExceptionReason: null },
+  { version: AGENT_SKILL_TEAM_RUNTIME_CONTRACT_VERSION, id: 'pattern.opencode.plugin_registry', name: 'OpenCode plugin registry mechanism', kind: 'external_pattern', source: 'open_source', sourceRef: 'OpenCode plugin/agent mechanism', capabilityDomain: ['host_adapter'], allowedStages: ['plan'], requiredRiskCeiling: 'research_before_implementation', evidenceType: 'none', reuseDecision: 'borrow_mechanism', buildExceptionReason: null },
+  { version: AGENT_SKILL_TEAM_RUNTIME_CONTRACT_VERSION, id: 'pattern.ohmy.agent_routing', name: 'Oh My OpenAgent routing pattern', kind: 'external_pattern', source: 'open_source', sourceRef: 'Oh My OpenAgent/OpenCode', capabilityDomain: ['routing', 'model_policy'], allowedStages: ['plan', 'tasks'], requiredRiskCeiling: 'research_before_implementation', evidenceType: 'none', reuseDecision: 'borrow_mechanism', buildExceptionReason: null },
+  { version: AGENT_SKILL_TEAM_RUNTIME_CONTRACT_VERSION, id: 'pattern.ohmy.security_research', name: 'Oh My security-research team pattern', kind: 'external_pattern', source: 'open_source', sourceRef: 'Oh My OpenCode team-mode/security-research', capabilityDomain: ['security', 'review'], allowedStages: ['plan', 'review', 'execute'], requiredRiskCeiling: 'research_before_implementation', evidenceType: 'artifact', reuseDecision: 'borrow_mechanism', buildExceptionReason: null },
+  { version: AGENT_SKILL_TEAM_RUNTIME_CONTRACT_VERSION, id: 'external.agency_agents.material', name: 'Agency agents domain material', kind: 'external_pattern', source: 'open_source', sourceRef: 'msitarzewski/agency-agents', capabilityDomain: ['domain_expert', 'source_material'], allowedStages: ['spec', 'plan', 'review'], requiredRiskCeiling: 'research_before_implementation', evidenceType: 'external_source', reuseDecision: 'adapt_via_host_adapter', buildExceptionReason: null }
+];

package/node_modules/@sdd-agent-platform/core/src/registries/tool-capabilities.ts

@@ -1,135 +1,135 @@
-import { readFile } from 'node:fs/promises';
-import { getProjectConfigPath } from '../runtime-paths.js';
-import { parseProjectConfig } from '../config/project-config.js';
-
-export type ToolCapabilityCategory = 'runtime' | 'editing' | 'git' | 'validation' | 'browser' | 'artifact' | 'governance';
-export type ToolCapabilitySideEffect = 'read_only' | 'local_write' | 'command_execution' | 'external_interaction';
-
-export interface ToolCapability {
-  id: string;
-  title: string;
-  category: ToolCapabilityCategory;
-  summary: string;
-  sideEffect: ToolCapabilitySideEffect;
-  defaultAvailable: boolean;
-  allowedStages: string[];
-  requiredEvidence: string[];
-  forbiddenUses: string[];
-}
-
-export interface ToolCapabilityRegistry {
-  version: string;
-  capabilities: ToolCapability[];
-}
-
-export const TOOL_CAPABILITY_REGISTRY_VERSION = 'phase-3.1-tool-capability-registry-v1';
-
-const BUILT_IN_TOOL_CAPABILITIES: ToolCapability[] = [
-  {
-    id: 'artifact-run-hygiene',
-    title: 'Artifact and run hygiene',
-    category: 'artifact',
-    summary: 'Generate and validate sdd-result artifacts, archive exploratory runs, and scope doctor run evidence checks.',
-    sideEffect: 'local_write',
-    defaultAvailable: true,
-    allowedStages: ['do', 'verify', 'doctor'],
-    requiredEvidence: ['sdd-result artifact', 'run event log', 'doctor report'],
-    forbiddenUses: ['delete run evidence', 'auto apply sync-back', 'mark acceptance without validator evidence']
-  },
-  {
-    id: 'browser-ui-check',
-    title: 'Browser UI check',
-    category: 'browser',
-    summary: 'Use a browser to inspect frontend behavior when UI changes need manual verification.',
-    sideEffect: 'external_interaction',
-    defaultAvailable: true,
-    allowedStages: ['validation', 'review'],
-    requiredEvidence: ['manual UI observation', 'console/network findings when relevant'],
-    forbiddenUses: ['bypass authentication policy', 'perform destructive production actions', 'publish sensitive data to third-party tools']
-  },
-  {
-    id: 'git-local',
-    title: 'Local Git inspection',
-    category: 'git',
-    summary: 'Inspect local repository status, diffs, and history for coordination and safety checks.',
-    sideEffect: 'read_only',
-    defaultAvailable: true,
-    allowedStages: ['status', 'review', 'doctor'],
-    requiredEvidence: ['git status or diff summary when used for decisions'],
-    forbiddenUses: ['force push', 'destructive reset', 'delete branches without explicit approval']
-  },
-  {
-    id: 'hashline-edit',
-    title: 'Hashline UTF-8 text editing',
-    category: 'editing',
-    summary: 'Edit UTF-8 text files through stable line anchors for safer targeted modifications.',
-    sideEffect: 'local_write',
-    defaultAvailable: true,
-    allowedStages: ['implementation', 'docs'],
-    requiredEvidence: ['read anchors before edit', 'diff or readback after important edits'],
-    forbiddenUses: ['edit binary files', 'retry stale anchors without rereading', 'overwrite unrelated user changes']
-  },
-  {
-    id: 'native-file-edit',
-    title: 'Native file read/edit/write fallback',
-    category: 'editing',
-    summary: 'Use native file tools for reads and targeted edits when hashline editing is unsuitable.',
-    sideEffect: 'local_write',
-    defaultAvailable: true,
-    allowedStages: ['implementation', 'docs'],
-    requiredEvidence: ['read before write', 'diff or readback after important edits'],
-    forbiddenUses: ['create unsolicited docs', 'overwrite existing files without reading', 'write secrets']
-  },
-  {
-    id: 'sdd-cli',
-    title: 'SDD local CLI/runtime',
-    category: 'runtime',
-    summary: 'Read and update local SDD runtime state, semantic docs, artifacts, and generated entries through explicit commands.',
-    sideEffect: 'command_execution',
-    defaultAvailable: true,
-    allowedStages: ['status', 'do', 'verify', 'sync-back', 'doctor'],
-    requiredEvidence: ['command output', 'state/event/artifact path when runtime changes'],
-    forbiddenUses: ['unapproved complex sync-back apply', 'automatic commit or push', 'background write orchestration']
-  },
-  {
-    id: 'validation-command',
-    title: 'Project validation commands',
-    category: 'validation',
-    summary: 'Run project-specific checks such as typecheck, tests, build, lint, or smoke commands.',
-    sideEffect: 'command_execution',
-    defaultAvailable: true,
-    allowedStages: ['validation', 'verify', 'doctor'],
-    requiredEvidence: ['command name', 'pass/fail status', 'relevant output excerpt'],
-    forbiddenUses: ['skip failing checks without explanation', 'run destructive commands as validation', 'hide hook failures']
-  },
-  {
-    id: 'governance-policy',
-    title: 'Governance policy gate',
-    category: 'governance',
-    summary: 'Evaluate concurrency, confirmation, retry, cleanup, and risky-operation gates before runtime execution.',
-    sideEffect: 'read_only',
-    defaultAvailable: true,
-    allowedStages: ['status', 'do', 'verify', 'doctor'],
-    requiredEvidence: ['policy decision', 'blocked or confirmed operation reason', 'runtime event when execution is gated'],
-    forbiddenUses: ['auto approve destructive operations', 'bypass permission prompts', 'delete run history']
-  }
-];
-
-export async function listToolCapabilities(projectRoot: string): Promise<ToolCapabilityRegistry> {
-  await assertProjectConfigReadable(projectRoot);
-  return {
-    version: TOOL_CAPABILITY_REGISTRY_VERSION,
-    capabilities: [...BUILT_IN_TOOL_CAPABILITIES].sort((left, right) => left.id.localeCompare(right.id))
-  };
-}
-
-export async function inspectToolCapability(projectRoot: string, capabilityId: string): Promise<ToolCapability | null> {
-  const registry = await listToolCapabilities(projectRoot);
-  return registry.capabilities.find((capability) => capability.id === capabilityId) ?? null;
-}
-
-async function assertProjectConfigReadable(projectRoot: string): Promise<void> {
-  const configPath = getProjectConfigPath(projectRoot);
-  const raw = await readFile(configPath, 'utf8');
-  parseProjectConfig(raw, configPath);
-}
+import { readFile } from 'node:fs/promises';
+import { getProjectConfigPath } from '../runtime-paths.js';
+import { parseProjectConfig } from '../config/project-config.js';
+
+export type ToolCapabilityCategory = 'runtime' | 'editing' | 'git' | 'validation' | 'browser' | 'artifact' | 'governance';
+export type ToolCapabilitySideEffect = 'read_only' | 'local_write' | 'command_execution' | 'external_interaction';
+
+export interface ToolCapability {
+  id: string;
+  title: string;
+  category: ToolCapabilityCategory;
+  summary: string;
+  sideEffect: ToolCapabilitySideEffect;
+  defaultAvailable: boolean;
+  allowedStages: string[];
+  requiredEvidence: string[];
+  forbiddenUses: string[];
+}
+
+export interface ToolCapabilityRegistry {
+  version: string;
+  capabilities: ToolCapability[];
+}
+
+export const TOOL_CAPABILITY_REGISTRY_VERSION = 'phase-3.1-tool-capability-registry-v1';
+
+const BUILT_IN_TOOL_CAPABILITIES: ToolCapability[] = [
+  {
+    id: 'artifact-run-hygiene',
+    title: 'Artifact and run hygiene',
+    category: 'artifact',
+    summary: 'Generate and validate sdd-result artifacts, archive exploratory runs, and scope doctor run evidence checks.',
+    sideEffect: 'local_write',
+    defaultAvailable: true,
+    allowedStages: ['execute', 'doctor'],
+    requiredEvidence: ['sdd-result artifact', 'run event log', 'doctor report'],
+    forbiddenUses: ['delete run evidence', 'claim truth-alignment approval', 'mark acceptance without validator evidence']
+  },
+  {
+    id: 'browser-ui-check',
+    title: 'Browser UI check',
+    category: 'browser',
+    summary: 'Use a browser to inspect frontend behavior when UI changes need manual verification.',
+    sideEffect: 'external_interaction',
+    defaultAvailable: true,
+    allowedStages: ['validation', 'review'],
+    requiredEvidence: ['manual UI observation', 'console/network findings when relevant'],
+    forbiddenUses: ['bypass authentication policy', 'perform destructive production actions', 'publish sensitive data to third-party tools']
+  },
+  {
+    id: 'git-local',
+    title: 'Local Git inspection',
+    category: 'git',
+    summary: 'Inspect local repository status, diffs, and history for coordination and safety checks.',
+    sideEffect: 'read_only',
+    defaultAvailable: true,
+    allowedStages: ['status', 'review', 'doctor'],
+    requiredEvidence: ['git status or diff summary when used for decisions'],
+    forbiddenUses: ['force push', 'destructive reset', 'delete branches without explicit approval']
+  },
+  {
+    id: 'hashline-edit',
+    title: 'Hashline UTF-8 text editing',
+    category: 'editing',
+    summary: 'Edit UTF-8 text files through stable line anchors for safer targeted modifications.',
+    sideEffect: 'local_write',
+    defaultAvailable: true,
+    allowedStages: ['implementation', 'docs'],
+    requiredEvidence: ['read anchors before edit', 'diff or readback after important edits'],
+    forbiddenUses: ['edit binary files', 'retry stale anchors without rereading', 'overwrite unrelated user changes']
+  },
+  {
+    id: 'native-file-edit',
+    title: 'Native file read/edit/write fallback',
+    category: 'editing',
+    summary: 'Use native file tools for reads and targeted edits when hashline editing is unsuitable.',
+    sideEffect: 'local_write',
+    defaultAvailable: true,
+    allowedStages: ['implementation', 'docs'],
+    requiredEvidence: ['read before write', 'diff or readback after important edits'],
+    forbiddenUses: ['create unsolicited docs', 'overwrite existing files without reading', 'write secrets']
+  },
+  {
+    id: 'sdd-cli',
+    title: 'SDD local CLI/runtime',
+    category: 'runtime',
+    summary: 'Read and update local SDD runtime state, semantic docs, artifacts, and generated entries through explicit commands.',
+    sideEffect: 'command_execution',
+    defaultAvailable: true,
+    allowedStages: ['status', 'spec', 'plan', 'tasks', 'execute', 'ship', 'doctor'],
+    requiredEvidence: ['command output', 'state/event/artifact path when runtime changes'],
+    forbiddenUses: ['unapproved truth-alignment approval', 'automatic commit or push', 'background write orchestration']
+  },
+  {
+    id: 'validation-command',
+    title: 'Project validation commands',
+    category: 'validation',
+    summary: 'Run project-specific checks such as typecheck, tests, build, lint, or smoke commands.',
+    sideEffect: 'command_execution',
+    defaultAvailable: true,
+    allowedStages: ['execute', 'doctor'],
+    requiredEvidence: ['command name', 'pass/fail status', 'relevant output excerpt'],
+    forbiddenUses: ['skip failing checks without explanation', 'run destructive commands as validation', 'hide hook failures']
+  },
+  {
+    id: 'governance-policy',
+    title: 'Governance policy gate',
+    category: 'governance',
+    summary: 'Evaluate concurrency, confirmation, retry, cleanup, and risky-operation gates before runtime execution.',
+    sideEffect: 'read_only',
+    defaultAvailable: true,
+    allowedStages: ['status', 'execute', 'doctor'],
+    requiredEvidence: ['policy decision', 'blocked or confirmed operation reason', 'runtime event when execution is gated'],
+    forbiddenUses: ['auto approve destructive operations', 'bypass permission prompts', 'delete run history']
+  }
+];
+
+export async function listToolCapabilities(projectRoot: string): Promise<ToolCapabilityRegistry> {
+  await assertProjectConfigReadable(projectRoot);
+  return {
+    version: TOOL_CAPABILITY_REGISTRY_VERSION,
+    capabilities: [...BUILT_IN_TOOL_CAPABILITIES].sort((left, right) => left.id.localeCompare(right.id))
+  };
+}
+
+export async function inspectToolCapability(projectRoot: string, capabilityId: string): Promise<ToolCapability | null> {
+  const registry = await listToolCapabilities(projectRoot);
+  return registry.capabilities.find((capability) => capability.id === capabilityId) ?? null;
+}
+
+async function assertProjectConfigReadable(projectRoot: string): Promise<void> {
+  const configPath = getProjectConfigPath(projectRoot);
+  const raw = await readFile(configPath, 'utf8');
+  parseProjectConfig(raw, configPath);
+}

package/node_modules/@sdd-agent-platform/core/src/registries/tool-plugins.ts

@@ -1,132 +1,132 @@
-import { readFile } from 'node:fs/promises';
-import { parseProjectConfig } from '../config/project-config.js';
-import { getProjectConfigPath } from '../runtime-paths.js';
-
-export type ToolPluginEntryKind = 'cli' | 'adapter' | 'command' | 'manual';
-export type ToolPluginLoadMode = 'static_manifest' | 'readonly_asset';
-
-export interface ToolPluginContract {
-  id: string;
-  title: string;
-  version: string;
-  capabilityId: string;
-  entryKind: ToolPluginEntryKind;
-  assetPath: string;
-  loadMode: ToolPluginLoadMode;
-  checksum: string | null;
-  requiredEvidence: string[];
-  forbiddenUses: string[];
-}
-
-export interface ToolPluginContractRegistry {
-  version: string;
-  contracts: ToolPluginContract[];
-}
-
-export const TOOL_PLUGIN_CONTRACT_REGISTRY_VERSION = 'phase-3.2-tool-plugin-loading-contract-v1';
-
-const BUILT_IN_TOOL_PLUGIN_CONTRACTS: ToolPluginContract[] = [
-  {
-    id: 'artifact-run-hygiene-tools',
-    title: 'Artifact/run hygiene tools contract',
-    version: '1.0.0',
-    capabilityId: 'artifact-run-hygiene',
-    entryKind: 'command',
-    assetPath: 'packages/core/src/index.ts#artifact-run-hygiene',
-    loadMode: 'static_manifest',
-    checksum: null,
-    requiredEvidence: ['sdd-result artifact', 'run event log', 'doctor report'],
-    forbiddenUses: ['dynamic plugin execution', 'delete run evidence', 'auto apply sync-back', 'background write orchestration']
-  },
-  {
-    id: 'browser-ui-check-adapter',
-    title: 'Browser UI check adapter contract',
-    version: '1.0.0',
-    capabilityId: 'browser-ui-check',
-    entryKind: 'manual',
-    assetPath: 'claude-code/browser-tools',
-    loadMode: 'readonly_asset',
-    checksum: null,
-    requiredEvidence: ['manual UI observation', 'console/network findings when relevant'],
-    forbiddenUses: ['dynamic browser automation plugin execution', 'destructive production actions', 'publish sensitive data to third-party tools']
-  },
-  {
-    id: 'git-local-inspection',
-    title: 'Local git inspection contract',
-    version: '1.0.0',
-    capabilityId: 'git-local',
-    entryKind: 'cli',
-    assetPath: 'git',
-    loadMode: 'readonly_asset',
-    checksum: null,
-    requiredEvidence: ['git status or diff summary when used for decisions'],
-    forbiddenUses: ['force push', 'destructive reset', 'delete branches without explicit approval', 'background write orchestration']
-  },
-  {
-    id: 'hashline-edit-adapter',
-    title: 'Hashline edit adapter contract',
-    version: '1.0.0',
-    capabilityId: 'hashline-edit',
-    entryKind: 'adapter',
-    assetPath: 'mcp:hashline-edit',
-    loadMode: 'readonly_asset',
-    checksum: null,
-    requiredEvidence: ['read anchors before edit', 'diff or readback after important edits'],
-    forbiddenUses: ['dynamic external plugin scan', 'retry stale anchors without rereading', 'overwrite unrelated user changes']
-  },
-  {
-    id: 'native-file-edit-adapter',
-    title: 'Native file edit adapter contract',
-    version: '1.0.0',
-    capabilityId: 'native-file-edit',
-    entryKind: 'adapter',
-    assetPath: 'claude-code:file-tools',
-    loadMode: 'readonly_asset',
-    checksum: null,
-    requiredEvidence: ['read before write', 'diff or readback after important edits'],
-    forbiddenUses: ['permission injection', 'overwrite existing files without reading', 'write secrets']
-  },
-  {
-    id: 'sdd-cli-runtime',
-    title: 'SDD CLI/runtime contract',
-    version: '1.0.0',
-    capabilityId: 'sdd-cli',
-    entryKind: 'cli',
-    assetPath: 'dist/packages/cli/src/main.js',
-    loadMode: 'static_manifest',
-    checksum: null,
-    requiredEvidence: ['command output', 'state/event/artifact path when runtime changes'],
-    forbiddenUses: ['dynamic plugin execution', 'unapproved complex sync-back apply', 'automatic commit or push', 'background write orchestration']
-  },
-  {
-    id: 'validation-command-runner',
-    title: 'Validation command runner contract',
-    version: '1.0.0',
-    capabilityId: 'validation-command',
-    entryKind: 'command',
-    assetPath: '.sdd/project.yml#validation.default',
-    loadMode: 'static_manifest',
-    checksum: null,
-    requiredEvidence: ['command name', 'pass/fail status', 'relevant output excerpt'],
-    forbiddenUses: ['dynamic plugin execution', 'run destructive commands as validation', 'hide hook failures']
-  }
-];
-
-export async function listToolPluginContracts(projectRoot: string): Promise<ToolPluginContractRegistry> {
-  await assertProjectConfigReadable(projectRoot);
-  return {
-    version: TOOL_PLUGIN_CONTRACT_REGISTRY_VERSION,
-    contracts: [...BUILT_IN_TOOL_PLUGIN_CONTRACTS].sort((left, right) => left.id.localeCompare(right.id))
-  };
-}
-
-export async function inspectToolPluginContract(projectRoot: string, pluginId: string): Promise<ToolPluginContract | null> {
-  const registry = await listToolPluginContracts(projectRoot);
-  return registry.contracts.find((contract) => contract.id === pluginId) ?? null;
-}
-
-async function assertProjectConfigReadable(projectRoot: string): Promise<void> {
-  const configPath = getProjectConfigPath(projectRoot);
-  const raw = await readFile(configPath, 'utf8');
-  parseProjectConfig(raw, configPath);
-}
+import { readFile } from 'node:fs/promises';
+import { parseProjectConfig } from '../config/project-config.js';
+import { getProjectConfigPath } from '../runtime-paths.js';
+
+export type ToolPluginEntryKind = 'cli' | 'adapter' | 'command' | 'manual';
+export type ToolPluginLoadMode = 'static_manifest' | 'readonly_asset';
+
+export interface ToolPluginContract {
+  id: string;
+  title: string;
+  version: string;
+  capabilityId: string;
+  entryKind: ToolPluginEntryKind;
+  assetPath: string;
+  loadMode: ToolPluginLoadMode;
+  checksum: string | null;
+  requiredEvidence: string[];
+  forbiddenUses: string[];
+}
+
+export interface ToolPluginContractRegistry {
+  version: string;
+  contracts: ToolPluginContract[];
+}
+
+export const TOOL_PLUGIN_CONTRACT_REGISTRY_VERSION = 'phase-3.2-tool-plugin-loading-contract-v1';
+
+const BUILT_IN_TOOL_PLUGIN_CONTRACTS: ToolPluginContract[] = [
+  {
+    id: 'artifact-run-hygiene-tools',
+    title: 'Artifact/run hygiene tools contract',
+    version: '1.0.0',
+    capabilityId: 'artifact-run-hygiene',
+    entryKind: 'command',
+    assetPath: 'packages/core/src/index.ts#artifact-run-hygiene',
+    loadMode: 'static_manifest',
+    checksum: null,
+    requiredEvidence: ['sdd-result artifact', 'run event log', 'doctor report'],
+    forbiddenUses: ['dynamic plugin execution', 'delete run evidence', 'auto apply sync-back', 'background write orchestration']
+  },
+  {
+    id: 'browser-ui-check-adapter',
+    title: 'Browser UI check adapter contract',
+    version: '1.0.0',
+    capabilityId: 'browser-ui-check',
+    entryKind: 'manual',
+    assetPath: 'claude-code/browser-tools',
+    loadMode: 'readonly_asset',
+    checksum: null,
+    requiredEvidence: ['manual UI observation', 'console/network findings when relevant'],
+    forbiddenUses: ['dynamic browser automation plugin execution', 'destructive production actions', 'publish sensitive data to third-party tools']
+  },
+  {
+    id: 'git-local-inspection',
+    title: 'Local git inspection contract',
+    version: '1.0.0',
+    capabilityId: 'git-local',
+    entryKind: 'cli',
+    assetPath: 'git',
+    loadMode: 'readonly_asset',
+    checksum: null,
+    requiredEvidence: ['git status or diff summary when used for decisions'],
+    forbiddenUses: ['force push', 'destructive reset', 'delete branches without explicit approval', 'background write orchestration']
+  },
+  {
+    id: 'hashline-edit-adapter',
+    title: 'Hashline edit adapter contract',
+    version: '1.0.0',
+    capabilityId: 'hashline-edit',
+    entryKind: 'adapter',
+    assetPath: 'mcp:hashline-edit',
+    loadMode: 'readonly_asset',
+    checksum: null,
+    requiredEvidence: ['read anchors before edit', 'diff or readback after important edits'],
+    forbiddenUses: ['dynamic external plugin scan', 'retry stale anchors without rereading', 'overwrite unrelated user changes']
+  },
+  {
+    id: 'native-file-edit-adapter',
+    title: 'Native file edit adapter contract',
+    version: '1.0.0',
+    capabilityId: 'native-file-edit',
+    entryKind: 'adapter',
+    assetPath: 'claude-code:file-tools',
+    loadMode: 'readonly_asset',
+    checksum: null,
+    requiredEvidence: ['read before write', 'diff or readback after important edits'],
+    forbiddenUses: ['permission injection', 'overwrite existing files without reading', 'write secrets']
+  },
+  {
+    id: 'sdd-cli-runtime',
+    title: 'SDD CLI/runtime contract',
+    version: '1.0.0',
+    capabilityId: 'sdd-cli',
+    entryKind: 'cli',
+    assetPath: 'dist/packages/cli/src/main.js',
+    loadMode: 'static_manifest',
+    checksum: null,
+    requiredEvidence: ['command output', 'state/event/artifact path when runtime changes'],
+    forbiddenUses: ['dynamic plugin execution', 'unapproved complex sync-back apply', 'automatic commit or push', 'background write orchestration']
+  },
+  {
+    id: 'validation-command-runner',
+    title: 'Validation command runner contract',
+    version: '1.0.0',
+    capabilityId: 'validation-command',
+    entryKind: 'command',
+    assetPath: '.sdd/project.yml#validation.default',
+    loadMode: 'static_manifest',
+    checksum: null,
+    requiredEvidence: ['command name', 'pass/fail status', 'relevant output excerpt'],
+    forbiddenUses: ['dynamic plugin execution', 'run destructive commands as validation', 'hide hook failures']
+  }
+];
+
+export async function listToolPluginContracts(projectRoot: string): Promise<ToolPluginContractRegistry> {
+  await assertProjectConfigReadable(projectRoot);
+  return {
+    version: TOOL_PLUGIN_CONTRACT_REGISTRY_VERSION,
+    contracts: [...BUILT_IN_TOOL_PLUGIN_CONTRACTS].sort((left, right) => left.id.localeCompare(right.id))
+  };
+}
+
+export async function inspectToolPluginContract(projectRoot: string, pluginId: string): Promise<ToolPluginContract | null> {
+  const registry = await listToolPluginContracts(projectRoot);
+  return registry.contracts.find((contract) => contract.id === pluginId) ?? null;
+}
+
+async function assertProjectConfigReadable(projectRoot: string): Promise<void> {
+  const configPath = getProjectConfigPath(projectRoot);
+  const raw = await readFile(configPath, 'utf8');
+  parseProjectConfig(raw, configPath);
+}