specky-sdd 3.7.2 → 3.7.3

package/CHANGELOG.md

@@ -7,6 +7,53 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Added
+
+- APM governance commands: `specky apm validate`, `specky apm lock`, `specky apm verify-lock`, `specky apm policy`, `specky apm audit`, and `specky apm sbom`.
+- `apm-policy.yml` and `apm.lock.yaml` package governance files. The lock pins SHA256 hashes for packaged primitives and the policy enforces MCP allowlists, allowed hook events, and per-harness tool-name isolation.
+- Harness compiler registry (`src/cli/lib/harness`) and APM governance modules (`src/cli/lib/apm`) with regression coverage.
+
+### Changed
+
+- `npm run build` now checks `apm.yml` name/version parity with `package.json` before compiling.
+- `npm pack --dry-run` now includes `apm.yml`, `apm.lock.yaml`, `apm-policy.yml`, and the compiled `specky apm` command/modules.
+
+## [3.7.2] - 2026-07-06
+
+Platform-native primitive generation for GitHub Copilot and Claude Code.
+
+### Changed
+
+- `.apm` primitive source is now GitHub Copilot-native: agents use VS Code tool ids such as `search`, `agent`, and namespaced Specky MCP tools like `specky/sdd_get_status`; prompts use `agent: agent` frontmatter.
+- `specky install --ide=claude` now transforms the shared source into Claude-native primitives at install time: agents use `Read`, `Glob`, `Grep`, `Task`, and `mcp__specky__sdd_*`; slash commands omit Copilot-only `agent:` metadata; Claude rules use `paths` instead of `applyTo`.
+- `specky install --ide=copilot` keeps Copilot-native syntax in `.github/agents` and `.github/prompts` instead of copying Claude-style tool names.
+
+### Added
+
+- Primitive audit coverage for Copilot-native tool names, namespaced Specky MCP tool ids, and prompt `agent:` frontmatter.
+- Regression tests proving Copilot and Claude installs generate different platform-correct agent, prompt, and instruction frontmatter.
+
+### Fixed
+
+- GitHub Copilot agents no longer receive Claude-only tool names such as `Read`, `Glob`, `Grep`, or `Task`.
+- Claude Code agents no longer receive Copilot-only tool names such as `search`, `agent`, or `specky/sdd_*`.
+
+## [3.7.1] - 2026-07-04
+
+GitHub Copilot primitive metadata and hook cleanup.
+
+### Changed
+
+- Normalized Specky Agent Skill names to lowercase kebab-case matching their folder names.
+- Added agent-mode prompt metadata and corrected reset-phase guidance to use checkpoint restore tools.
+- Reduced native mutating tools in agents where Specky MCP tools perform the artifact writes.
+
+### Fixed
+
+- Copilot instruction file now has `applyTo: '**'` frontmatter.
+- Fixed branch-validator/session hooks to read `current_phase` and string phase names.
+- Prevented Copilot hook manifests from falling back to unresolved Claude plugin paths.
+
 ## [3.7.0] - 2026-07-03
 
 Update awareness: users of old versions now find out — without the server ever

package/README.md

@@ -115,6 +115,10 @@ npx specky install --ide=copilot
 
 The CLI installs 13 agents, 22 prompts, 8 skills, 16 hooks, the MCP server registration (`.mcp.json` + `.vscode/mcp.json`, pinned to the installed version), and pre-authorizes a **least-privilege** set of tools — the Specky MCP tools plus scoped `git`/`npm`/`npx` and file editing. It does **not** pre-authorize arbitrary shell, `rm`, or network access; those still prompt. Run `specky doctor` anytime to validate integrity and config.
 
+Starting in v3.7.2, generated assets are platform-native. `specky install --ide=copilot` writes GitHub Copilot agents/prompts with VS Code tool names such as `search`, `agent`, and `specky/sdd_get_status`, plus prompt `agent: agent` frontmatter. `specky install --ide=claude` writes Claude Code agents/commands with `Read`, `Glob`, `Grep`, `Task`, and `mcp__specky__sdd_get_status`, with Copilot-only prompt metadata removed.
+
+Specky also has an APM governance layer for enterprise package control. `apm.yml` declares the package primitives, targets, and MCP runtime; `apm.lock.yaml` pins primitive hashes; `apm-policy.yml` enforces MCP and tool-name policy. Maintainers and CI can run `specky apm validate`, `specky apm policy`, `specky apm verify-lock`, and `specky apm sbom` before publishing or installing.
+
 Full walkthroughs per OS, offline install, and CLI reference: [docs/INSTALL.md](docs/INSTALL.md) · [docs/CLI.md](docs/CLI.md).
 
 

package/apm-policy.yml

@@ -0,0 +1,41 @@
+# apm-policy.yml — enterprise governance policy for Specky primitive packaging.
+#
+# Enforced by `specky apm policy check` (and in CI via .github/workflows).
+# The goal is least-privilege, reproducible, harness-isolated primitives.
+
+schemaVersion: 1
+
+# Package sources that may be installed/trusted.
+allowedSources:
+  - github.com/paulasilvatech/specky
+  - registry.npmjs.org/specky-sdd
+
+# MCP governance. Only these servers may be declared in apm.yml, and
+# transitive MCP servers are not auto-trusted.
+mcp:
+  allowTransitive: false
+  allowedServers:
+    - specky
+
+# Hook governance. Hook manifests may only register these event types.
+hooks:
+  allowedEvents:
+    - SessionStart
+    - UserPromptSubmit
+    - PreToolUse
+    - PostToolUse
+    - Stop
+
+# Per-target tool-name isolation. Compiled output for one harness must never
+# contain another harness's native tool tokens.
+targets:
+  github-copilot:
+    forbidToolTokens:
+      - Read
+      - Glob
+      - Grep
+      - Task
+      - mcp__specky__
+  claude-code:
+    forbidToolTokens:
+      - "specky/"

package/apm.lock.yaml

@@ -0,0 +1,71 @@
+# Generated by `specky apm lock`. Do not edit by hand.
+schemaVersion: 1
+package:
+  name: specky-sdd
+  version: 3.7.3
+primitives:
+  .apm/agents/design-architect.agent.md: sha256:b96b16fe04f68afb3b6c656a492603f143527ebe82089a9d4c0d2111f4446836
+  .apm/agents/implementer.agent.md: sha256:f78ffbbb4c4a69abb8b0c0158aea914ababd0036c51d7ed77138c21cd3d40979
+  .apm/agents/quality-reviewer.agent.md: sha256:deab4a84577f3256f87b7de7a48ff66093996e47570e134cf6cfa3a3d15db902
+  .apm/agents/release-engineer.agent.md: sha256:2e895fcfc3f5b42f7c58e3162e3f2b6dfcbeaa1be3b4f0d1f2bf3205bb447c70
+  .apm/agents/requirements-engineer.agent.md: sha256:d36a6e95a5612e4a38a1d77f03d3d654ad5c429edfdd01dc1847763cae2d69e3
+  .apm/agents/research-analyst.agent.md: sha256:2d9aee79aa46afd5c68f1bf154df3d4b84f313d8249a05b2ad41afa1a7c4822c
+  .apm/agents/sdd-clarify.agent.md: sha256:01b2322ba93d76aaf7e2268a90d08c8e0df220a679ec9817164ca71c47ade7fd
+  .apm/agents/sdd-init.agent.md: sha256:d674022d21c1c4f60f4cdc6fee7136ecb6f931b523377ed5b1263be284b9c434
+  .apm/agents/spec-engineer.agent.md: sha256:a51bfd89b823ba1f107e2c1b4cc56d016ab2f30cdba5881f3374d65556b5d273
+  .apm/agents/specky-onboarding.agent.md: sha256:061c2338b2ccafdbb8a41f33d8a6fbc191d5c0e17798057d28c1d4aa5e0a1ed8
+  .apm/agents/specky-orchestrator.agent.md: sha256:685753cfd1b70fc4ca26295242606e1f4c20689edae439d246071e447f72b71b
+  .apm/agents/task-planner.agent.md: sha256:b6db870691b87efd29ce3836fefe54f0a2f8324f6fc13edf6e7523dab8fd66c8
+  .apm/agents/test-verifier.agent.md: sha256:206eb184709ed53f5a35cfa6ab7c1943856a3da2e9310c10a4906ba267f318f3
+  .apm/hooks/scripts/artifact-validator.sh: sha256:0575406bbaa8e17a30407c6c1cdde20ffcaf13d2f7af784f7552d0c9766ce7b9
+  .apm/hooks/scripts/auto-checkpoint.sh: sha256:503e13b517dfe32ca2e96bcf3a8c36186bd0cde5c8f2e8a9bdda72117449f1dc
+  .apm/hooks/scripts/branch-validator.sh: sha256:06cf44594387a5b9088db7c92c2bcb7f4fddd8f96a87cb6815614c593108a5f6
+  .apm/hooks/scripts/cognitive-debt-alert.sh: sha256:4808b0d4686605861e209011115d000b2f1137d321f81fc49f17ed47db2f4dbe
+  .apm/hooks/scripts/drift-monitor.sh: sha256:5229c55640c521740391e5b4aeae87b332ab66f8d74fc697fc3d0f3972681da1
+  .apm/hooks/scripts/ears-validator.sh: sha256:58afda3b30ddc883d89122dc39a740bcde4d8ec43b96826aa03c0d9bf242a9d0
+  .apm/hooks/scripts/lgtm-gate.sh: sha256:7bfde5bb0d7ae29164b280634c5829d9c43580c7e4edeab13868aeba42f5571f
+  .apm/hooks/scripts/metrics-dashboard.sh: sha256:05dc1bf7a97eeaf1165851428dc2dadaabc7f368359e6cfe53cfa5362d5e4835
+  .apm/hooks/scripts/phase-gate.sh: sha256:5c7ddbba01f6444feb649e6f954689d9885835dfe25dabfa58efb6b604434cfc
+  .apm/hooks/scripts/pipeline-guard.sh: sha256:2137418c06fa94c99cc4182caad35736c559e90df26d78d56a4b449c183d78b7
+  .apm/hooks/scripts/release-gate.sh: sha256:8d1a3ab57bf73618e7c03eef9e3d6ab148e48e350b9ec374c07ef4ac6bc23bcf
+  .apm/hooks/scripts/security-scan.sh: sha256:dc8f58757064b6b1d469a2d14fed4e2dd7395f92c421ba88c36fced6f9babf38
+  .apm/hooks/scripts/session-banner.sh: sha256:618dece6577abb20591be9f2b9c5a910c4ff382e07fcdc43a40499e0d5474b5d
+  .apm/hooks/scripts/spec-quality.sh: sha256:c9f4b0a4356077e55ca39301af0d6c4ec2a96c47b29e31735f614176a4bfbc47
+  .apm/hooks/scripts/spec-sync.sh: sha256:5a72c59829ef2c484bc26b6cf413fb233ef54962ea736deed77d7db7afc62e7b
+  .apm/hooks/scripts/task-tracer.sh: sha256:2c9eab6dcb0fd24c5326ff799f69b71e64f9fc1b8622040a0687dde895494552
+  .apm/hooks/sdd-hooks.json: sha256:363939df17a54b8361ca6c0eb4e2fdd4637e79a36ad04ed948ebed5e59c1868f
+  .apm/instructions/copilot-instructions.instructions.md: sha256:57378a57344403f16e37221981414b0febe1b7719a874115be6caf746c840a0a
+  .apm/prompts/specky-api.prompt.md: sha256:8fe67a5c3eb5a9e5e3e886d1f146b337a76276ff91ad7cb57e304268d9bd4065
+  .apm/prompts/specky-brownfield.prompt.md: sha256:b5979f957ff630ca64f35d8e8d82f8685ee24047f53eecfba9e8d59e1c514da0
+  .apm/prompts/specky-check-drift.prompt.md: sha256:f3a04b00ef10167cbd1cdcf63f8b8595d3bc8196d107b48963f8b123f711f3af
+  .apm/prompts/specky-clarify.prompt.md: sha256:caaf14ffc4cd738323ecf76355286eb1537a3b1005f05f5829a8c37e3ce7c0cf
+  .apm/prompts/specky-debug-hook.prompt.md: sha256:f3b8bb30b841a764a497b51ab75dedea26b74ba022b67aae911f79504b7aac2a
+  .apm/prompts/specky-deploy.prompt.md: sha256:acbb188902f203815cddb15f36c1c47a9f2e2ffd9de836ba50a85a75b12cfbb6
+  .apm/prompts/specky-design.prompt.md: sha256:745dd294d7a1eeb47f3f6e46d682614d26fcc99fa147501f31a0f29e1b9f07d6
+  .apm/prompts/specky-from-figma.prompt.md: sha256:0ba1d4d4a9ced39ea89bae8fa98ae3449c2d973510e9a6cf80e3cfe9f29b1fce
+  .apm/prompts/specky-from-meeting.prompt.md: sha256:6c3c237f86e3bc786b490cb71e2e29964e073fbc95b15b77cc48436cd6e4b215
+  .apm/prompts/specky-greenfield.prompt.md: sha256:c981a25c67b06ee7a031298ca1e49184f324e0cfe636b66aa7f6c07d1b11cf37
+  .apm/prompts/specky-implement.prompt.md: sha256:7c9392a4bb24a1f88778a5c603cf5f851dfefb10d9577338cb8f2e72a3795b33
+  .apm/prompts/specky-migration.prompt.md: sha256:462aef852d5d59f65a09d576b387797f5671a08ef85f4154f4f55d506de142af
+  .apm/prompts/specky-onboarding.prompt.md: sha256:41e623d0730f7e9bfe5c30569149a4f7ecc925a256645b2b30eee058ffa1c5fc
+  .apm/prompts/specky-orchestrate.prompt.md: sha256:8b40cc61bed8f85103c0bf6ea5ff4fa4741b0b8af6a18ec71dc8a049434cf62e
+  .apm/prompts/specky-pipeline-status.prompt.md: sha256:aa0f65c88a190b02532125acef55174559d997ad0deb3336577fb61b7e7f6fed
+  .apm/prompts/specky-release.prompt.md: sha256:db9c58674fe8288b839f7768b3b786746c1c6c1c81650cfe6e157883db7c7954
+  .apm/prompts/specky-research.prompt.md: sha256:5d45a1aa5e343b382dcb0879f42f0b1a29a25f8fb2ce2877e0afc7d9f808378e
+  .apm/prompts/specky-reset-phase.prompt.md: sha256:81218d63f7d8fdd8b7b9de8e8115f180ced3086dc4bc0853c46268ce335361de
+  .apm/prompts/specky-resolve-conflict.prompt.md: sha256:785a60f9515f13a601e421049aeac1b519f65db6c83fdce061df9e19f1f5947f
+  .apm/prompts/specky-specify.prompt.md: sha256:0c5e0cb14e360efda2272e7cbd9ff314b1960e75fecc0e9e30137fa8b30fc3c5
+  .apm/prompts/specky-tasks.prompt.md: sha256:f1a5848d162feb11e1c09da373fc3c6941720ba38a8d6a531b3bb03999bf29c3
+  .apm/prompts/specky-verify.prompt.md: sha256:2d2ebd12276078445a50a16d2775f207eca20ca9a4118d56391a95df86b7e0ee
+  .apm/skills/implementer/SKILL.md: sha256:7afc5a235cd25c9757aa91653157291cc755bd9938e83a2d58068cbdb684ecbd
+  .apm/skills/release-engineer/SKILL.md: sha256:b52f5081d546e63de1becf53c67dbbf11b4848b94e31144951cb347a9e1c0157
+  .apm/skills/research-analyst/SKILL.md: sha256:b3346101b1784f173fda50731d81fb5831f6c9d28f8af58a7527fc167af739d0
+  .apm/skills/sdd-markdown-standard/SKILL.md: sha256:0d5f59773d1c965c5daf7e91638fe0019e593261eda2ab29c9dec82c00ee8d5b
+  .apm/skills/sdd-pipeline/references/ears-notation.md: sha256:580dc051802750904ef409b9f89873ad250326bc17c992bd53366b3b1a04f1c5
+  .apm/skills/sdd-pipeline/references/model-routing.md: sha256:6ca9bd5cde2a8d227c795d37c4d43b712dd183c10d5d87b987514b494f7c28f3
+  .apm/skills/sdd-pipeline/SKILL.md: sha256:7a8173d9882cafa303f35881fc88cc5482b97a287618dcb851959b704895340a
+  .apm/skills/specky-onboarding/SKILL.md: sha256:cdfb2dfaeb74d6ee33eee4773a80f00c0fc263c288853d3b6a966ce00b0fa442
+  .apm/skills/specky-orchestrator/SKILL.md: sha256:66af8f8fb882f70e2484d74bff974942f346874e957bbee520994804a2edd734
+  .apm/skills/test-verifier/SKILL.md: sha256:b0d3f66271508ab8015b6145dbc85906143662d2841685b55c177adbea7c2a78
+  apm-policy.yml: sha256:c7af3a9a0f73dc7addd88f92df93d93f1726aceb1671b298d0e397919ac5bf19
+  apm.yml: sha256:270e785f7a586c9c3f5c9839cf8b5b40c120a9558acec2f880dfd21ef7962503

package/apm.yml

@@ -1,9 +1,36 @@
 name: specky-sdd
-version: 3.7.0
+version: 3.7.3
 description: "Agentic Spec-Driven Development — 10-phase pipeline with 58 MCP tools, 13 agents, 22 prompts, 8 skills, 16 hooks, EARS notation, model routing, and enterprise security"
 author: Paula Silva
 license: MIT
-target: all
+
+# Harness targets this package compiles to. Each target is rendered from the
+# single canonical primitive source below via a Specky harness compiler
+# (src/cli/lib/harness). `specky install --ide=<target>` and
+# `specky compile --target=<target>` produce that harness's native layout.
+targets:
+  - github-copilot
+  - claude-code
+
+# Canonical, harness-agnostic primitive source. Authored once and compiled per
+# target — never hand-edited per harness.
+primitives:
+  agents: .apm/agents
+  prompts: .apm/prompts
+  skills: .apm/skills
+  instructions: .apm/instructions
+  hooks: .apm/hooks
+
+# MCP runtime that backs the `specky/sdd_*` (Copilot) and `mcp__specky__sdd_*`
+# (Claude) tool ids referenced by the primitives above.
+mcp:
+  servers:
+    - name: specky
+      registry: false
+      transport: stdio
+      command: npx
+      args: ["-y", "specky-sdd@latest", "serve"]
+      tools: ["sdd_*"]
 
 dependencies:
   mcp:

package/dist/cli/commands/apm.d.ts

@@ -0,0 +1,2 @@
+export declare function apmCommand(argv: string[]): number;
+//# sourceMappingURL=apm.d.ts.map

package/dist/cli/commands/apm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apm.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/apm.ts"],"names":[],"mappings":"AAgHA,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,CAwCjD"}

package/dist/cli/commands/apm.js

@@ -0,0 +1,139 @@
+/**
+ * commands/apm.ts — `specky apm <subcommand>` governance surface.
+ *
+ * Subcommands:
+ *   validate     Validate apm.yml against on-disk primitives + package.json.
+ *   lock         Write apm.lock.yaml with a sha256 for every primitive.
+ *   verify-lock  Recompute hashes and diff against apm.lock.yaml.
+ *   policy       Enforce apm-policy.yml (MCP allowlist, hooks, tool isolation).
+ *   audit        Run the primitive frontmatter audit.
+ *   sbom         Emit a CycloneDX SBOM of the packaged primitives.
+ */
+import { writeFileSync } from "node:fs";
+import { spawnSync } from "node:child_process";
+import { resolve } from "node:path";
+import { packageRoot } from "../lib/paths.js";
+import { validateManifest, loadManifest } from "../lib/apm/manifest.js";
+import { generateLock, serializeLock, lockPath, verifyLock, } from "../lib/apm/lock.js";
+import { checkPolicy } from "../lib/apm/policy.js";
+function print(result) {
+    for (const w of result.warnings)
+        console.warn(`  ⚠️  ${w}`);
+    for (const e of result.errors)
+        console.error(`  ❌ ${e}`);
+}
+function runValidate(pkgRoot) {
+    const result = validateManifest(pkgRoot);
+    print(result);
+    if (result.ok) {
+        const m = loadManifest(pkgRoot);
+        console.log(`✅ apm.yml valid — ${m.name}@${m.version}, targets: ${m.targets.join(", ")}`);
+        return 0;
+    }
+    return 2;
+}
+function runLock(pkgRoot, dryRun) {
+    const lock = generateLock(pkgRoot);
+    const count = Object.keys(lock.primitives).length;
+    if (dryRun) {
+        console.log(`ℹ️  apm lock (dry-run): ${count} primitives would be hashed`);
+        return 0;
+    }
+    writeFileSync(lockPath(pkgRoot), serializeLock(lock), "utf8");
+    console.log(`✅ Wrote apm.lock.yaml — ${count} primitives (${lock.package.name}@${lock.package.version})`);
+    return 0;
+}
+function runVerifyLock(pkgRoot) {
+    const result = verifyLock(pkgRoot);
+    if (result.error) {
+        console.error(`  ❌ ${result.error}`);
+        return 2;
+    }
+    if (result.ok) {
+        console.log("✅ apm.lock.yaml matches the primitive source");
+        return 0;
+    }
+    for (const f of result.changed)
+        console.error(`  ✏️  changed: ${f}`);
+    for (const f of result.missing)
+        console.error(`  ➖ missing: ${f}`);
+    for (const f of result.extra)
+        console.error(`  ➕ untracked: ${f}`);
+    console.error("❌ Lock verification failed — run `specky apm lock` to update");
+    return 2;
+}
+function runPolicy(pkgRoot) {
+    const result = checkPolicy(pkgRoot);
+    print(result);
+    if (result.ok) {
+        console.log("✅ apm-policy.yml checks passed");
+        return 0;
+    }
+    return 2;
+}
+function runAudit(pkgRoot) {
+    const res = spawnSync(process.execPath, [resolve(pkgRoot, "scripts/audit-agent-frontmatter.mjs")], { stdio: "inherit", cwd: pkgRoot });
+    return res.status ?? 1;
+}
+function runSbom(pkgRoot) {
+    const lock = generateLock(pkgRoot);
+    const sbom = {
+        bomFormat: "CycloneDX",
+        specVersion: "1.5",
+        version: 1,
+        metadata: {
+            timestamp: new Date().toISOString(),
+            component: {
+                type: "application",
+                name: lock.package.name,
+                version: lock.package.version,
+            },
+        },
+        components: Object.entries(lock.primitives).map(([path, hash]) => ({
+            type: "file",
+            name: path,
+            hashes: [{ alg: "SHA-256", content: hash.replace(/^sha256:/, "") }],
+        })),
+    };
+    console.log(JSON.stringify(sbom, null, 2));
+    return 0;
+}
+export function apmCommand(argv) {
+    const pkgRoot = packageRoot();
+    const sub = argv[0];
+    const rest = argv.slice(1);
+    const dryRun = rest.includes("--dry-run");
+    switch (sub) {
+        case "validate":
+            return runValidate(pkgRoot);
+        case "lock":
+            return runLock(pkgRoot, dryRun);
+        case "verify-lock":
+            return runVerifyLock(pkgRoot);
+        case "policy":
+            // `specky apm policy` or `specky apm policy check`
+            return runPolicy(pkgRoot);
+        case "audit":
+            return runAudit(pkgRoot);
+        case "sbom":
+            return runSbom(pkgRoot);
+        case "help":
+        case undefined:
+            console.log([
+                "specky apm <subcommand>",
+                "",
+                "  validate      Validate apm.yml against primitives + package.json",
+                "  lock          Write apm.lock.yaml (sha256 per primitive)",
+                "  verify-lock   Diff the primitive source against apm.lock.yaml",
+                "  policy        Enforce apm-policy.yml (MCP, hooks, tool isolation)",
+                "  audit         Run the primitive frontmatter audit",
+                "  sbom          Emit a CycloneDX SBOM of packaged primitives",
+            ].join("\n"));
+            return 0;
+        default:
+            console.error(`Unknown apm subcommand: ${sub}`);
+            console.error("Run `specky apm help` for usage.");
+            return 1;
+    }
+}
+//# sourceMappingURL=apm.js.map

package/dist/cli/commands/apm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apm.js","sourceRoot":"","sources":["../../../src/cli/commands/apm.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACxE,OAAO,EACH,YAAY,EACZ,aAAa,EACb,QAAQ,EACR,UAAU,GACb,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEnD,SAAS,KAAK,CAAC,MAAgD;IAC3D,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ;QAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAC5D,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM;QAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,WAAW,CAAC,OAAe;IAChC,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACzC,KAAK,CAAC,MAAM,CAAC,CAAC;IACd,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,cAAc,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1F,OAAO,CAAC,CAAC;IACb,CAAC;IACD,OAAO,CAAC,CAAC;AACb,CAAC;AAED,SAAS,OAAO,CAAC,OAAe,EAAE,MAAe;IAC7C,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC;IAClD,IAAI,MAAM,EAAE,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,2BAA2B,KAAK,6BAA6B,CAAC,CAAC;QAC3E,OAAO,CAAC,CAAC;IACb,CAAC;IACD,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,CAAC,2BAA2B,KAAK,gBAAgB,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC;IAC1G,OAAO,CAAC,CAAC;AACb,CAAC;AAED,SAAS,aAAa,CAAC,OAAe;IAClC,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACrC,OAAO,CAAC,CAAC;IACb,CAAC;IACD,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;QAC5D,OAAO,CAAC,CAAC;IACb,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;IACrE,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACnE,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK;QAAE,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;IACnE,OAAO,CAAC,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAC9E,OAAO,CAAC,CAAC;AACb,CAAC;AAED,SAAS,SAAS,CAAC,OAAe;IAC9B,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACpC,KAAK,CAAC,MAAM,CAAC,CAAC;IACd,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;QAC9C,OAAO,CAAC,CAAC;IACb,CAAC;IACD,OAAO,CAAC,CAAC;AACb,CAAC;AAED,SAAS,QAAQ,CAAC,OAAe;IAC7B,MAAM,GAAG,GAAG,SAAS,CACjB,OAAO,CAAC,QAAQ,EAChB,CAAC,OAAO,CAAC,OAAO,EAAE,qCAAqC,CAAC,CAAC,EACzD,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,CACrC,CAAC;IACF,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,OAAO,CAAC,OAAe;IAC5B,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG;QACT,SAAS,EAAE,WAAW;QACtB,WAAW,EAAE,KAAK;QAClB,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE;YACN,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,SAAS,EAAE;gBACP,IAAI,EAAE,aAAa;gBACnB,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;gBACvB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;aAChC;SACJ;QACD,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/D,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC;SACtE,CAAC,CAAC;KACN,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3C,OAAO,CAAC,CAAC;AACb,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAc;IACrC,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAE1C,QAAQ,GAAG,EAAE,CAAC;QACV,KAAK,UAAU;YACX,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC;QAChC,KAAK,MAAM;YACP,OAAO,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACpC,KAAK,aAAa;YACd,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC;QAClC,KAAK,QAAQ;YACT,mDAAmD;YACnD,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC;QAC9B,KAAK,OAAO;YACR,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC7B,KAAK,MAAM;YACP,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5B,KAAK,MAAM,CAAC;QACZ,KAAK,SAAS;YACV,OAAO,CAAC,GAAG,CACP;gBACI,yBAAyB;gBACzB,EAAE;gBACF,oEAAoE;gBACpE,4DAA4D;gBAC5D,iEAAiE;gBACjE,qEAAqE;gBACrE,qDAAqD;gBACrD,8DAA8D;aACjE,CAAC,IAAI,CAAC,IAAI,CAAC,CACf,CAAC;YACF,OAAO,CAAC,CAAC;QACb;YACI,OAAO,CAAC,KAAK,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAC;YAChD,OAAO,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;YAClD,OAAO,CAAC,CAAC;IACjB,CAAC;AACL,CAAC"}

package/dist/cli/index.js

@@ -8,6 +8,7 @@
  *   specky status
  *   specky upgrade
  *   specky hooks  <list|test|run NAME>
+ *   specky apm    <validate|lock|verify-lock|policy|audit|sbom>
  *   specky serve  [--http] [--port=N] [--profile=enterprise]
  *   specky --version | -v
  *   specky --help  | -h
@@ -65,6 +66,10 @@ Commands:
   hooks <list|test|run NAME>
                          Manage installed hooks
 
+  apm <validate|lock|verify-lock|policy|audit|sbom>
+                         Validate APM manifest, lock primitives, enforce
+                         governance policy, and export primitive SBOM
+
   serve                  Start the MCP server (stdio by default)
     --http                              HTTP streaming transport
     --port=<N>                          HTTP port (default 3200)
@@ -113,6 +118,10 @@ async function dispatch(command, rest) {
             const action = (positional[0] ?? "list");
             return runHooks({ action, name: positional[1] });
         }
+        case "apm": {
+            const { apmCommand } = await import("./commands/apm.js");
+            return apmCommand(positional);
+        }
         case "serve": {
             const { runServe } = await import("./commands/serve.js");
             const portFlag = flags["port"];
@@ -176,7 +185,7 @@ async function main() {
     const isLegacyBin = binName === "specky-sdd" || binName.endsWith("specky-sdd");
     // Legacy back-compat: `specky-sdd` with no subcommand OR with --http maps to serve
     const knownCommands = new Set([
-        "install", "init", "doctor", "status", "upgrade", "hooks", "serve",
+        "install", "init", "doctor", "status", "upgrade", "hooks", "apm", "serve",
         "help", "--help", "-h", "--version", "-v",
     ]);
     const firstArg = args[0];

package/dist/cli/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAI1C,SAAS,UAAU,CAAC,IAAc;IAChC,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,KAAK,GAAW,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;gBACX,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YAC1C,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;YAC3B,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7C,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;QAC3B,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,CAAC,GAAG,CAAC,WAAW,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmC/B,CAAC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,OAAe,EAAE,IAAc;IACrD,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAE/C,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,SAAS,CAAC;QACf,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;YACvD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YAC5B,MAAM,GAAG,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAiD,CAAC,CAAC,CAAC,MAAM,CAAC;YACrG,OAAO,OAAO,CAAC;gBACb,GAAG;gBACH,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI;gBAC9B,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,KAAK,IAAI;aAClC,CAAC,CAAC;QACL,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;YAC3D,OAAO,SAAS,CAAC;gBACf,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI;gBAC1B,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,KAAK,IAAI;aACnC,CAAC,CAAC;QACL,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;YAC3D,OAAO,SAAS,CAAC,EAAE,CAAC,CAAC;QACvB,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;YAC7D,OAAO,UAAU,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,YAAY,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;YACzD,MAAM,MAAM,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,MAAM,CAA4B,CAAC;YACpE,OAAO,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;YACzD,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;YAC/B,OAAO,QAAQ,CAAC;gBACd,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI;gBAC5B,IAAI,EAAE,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;aAClE,CAAC,CAAC;QACL,CAAC;QACD,KAAK,MAAM,CAAC;QACZ,KAAK,QAAQ,CAAC;QACd,KAAK,IAAI,CAAC,CAAC,CAAC;YACV,SAAS,EAAE,CAAC;YACZ,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,WAAW,CAAC;QACjB,KAAK,IAAI,CAAC,CAAC,CAAC;YACV,OAAO,CAAC,GAAG,CAAC,WAAW,OAAO,EAAE,CAAC,CAAC;YAClC,OAAO,CAAC,CAAC;QACX,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,OAAO,CAAC,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;YAC7C,OAAO,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;YAClD,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IACrC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI;CACpE,CAAC,CAAC;AAEH;;;;GAIG;AACH,KAAK,UAAU,sBAAsB,CAAC,OAAe;IACnD,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO;IACjD,IAAI,CAAC;QACH,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;QACpD,iFAAiF;QACjF,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,YAAY;YAAE,OAAO;QACpD,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CACX,iCAAiC,OAAO,OAAO,MAAM,yDAAyD,CAC/G,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,yDAAyD;IAC3D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,WAAW,GAAG,OAAO,KAAK,YAAY,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAE/E,mFAAmF;IACnF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;QAC5B,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO;QAClE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI;KAC1C,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACzB,MAAM,eAAe,GAAG,QAAQ,KAAK,SAAS,IAAI,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAE9E,IAAI,OAAe,CAAC;IACpB,IAAI,IAAc,CAAC;IACnB,IAAI,eAAe,EAAE,CAAC;QACpB,OAAO,GAAG,QAAS,CAAC;QACpB,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC;SAAM,IAAI,WAAW,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAChD,kCAAkC;QAClC,OAAO,GAAG,OAAO,CAAC;QAClB,IAAI,GAAG,IAAI,CAAC;IACd,CAAC;SAAM,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,GAAG,MAAM,CAAC;QACjB,IAAI,GAAG,EAAE,CAAC;IACZ,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,QAAQ,CAAC;QACnB,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC3C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;YACpD,MAAM,sBAAsB,CAAC,OAAO,CAAC,CAAC;YACtC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;QAC/D,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;YAAE,OAAO,CAAC,KAAK,CAAE,GAAa,CAAC,KAAK,CAAC,CAAC;QACrE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAI1C,SAAS,UAAU,CAAC,IAAc;IAChC,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,KAAK,GAAW,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;gBACX,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YAC1C,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;YAC3B,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7C,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;QAC3B,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,CAAC,GAAG,CAAC,WAAW,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuC/B,CAAC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,OAAe,EAAE,IAAc;IACrD,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAE/C,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,SAAS,CAAC;QACf,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;YACvD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YAC5B,MAAM,GAAG,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAiD,CAAC,CAAC,CAAC,MAAM,CAAC;YACrG,OAAO,OAAO,CAAC;gBACb,GAAG;gBACH,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI;gBAC9B,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,KAAK,IAAI;aAClC,CAAC,CAAC;QACL,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;YAC3D,OAAO,SAAS,CAAC;gBACf,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI;gBAC1B,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,KAAK,IAAI;aACnC,CAAC,CAAC;QACL,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;YAC3D,OAAO,SAAS,CAAC,EAAE,CAAC,CAAC;QACvB,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;YAC7D,OAAO,UAAU,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,YAAY,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;YACzD,MAAM,MAAM,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,MAAM,CAA4B,CAAC;YACpE,OAAO,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;YACzD,OAAO,UAAU,CAAC,UAAU,CAAC,CAAC;QAChC,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;YACzD,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;YAC/B,OAAO,QAAQ,CAAC;gBACd,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI;gBAC5B,IAAI,EAAE,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;aAClE,CAAC,CAAC;QACL,CAAC;QACD,KAAK,MAAM,CAAC;QACZ,KAAK,QAAQ,CAAC;QACd,KAAK,IAAI,CAAC,CAAC,CAAC;YACV,SAAS,EAAE,CAAC;YACZ,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,WAAW,CAAC;QACjB,KAAK,IAAI,CAAC,CAAC,CAAC;YACV,OAAO,CAAC,GAAG,CAAC,WAAW,OAAO,EAAE,CAAC,CAAC;YAClC,OAAO,CAAC,CAAC;QACX,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,OAAO,CAAC,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;YAC7C,OAAO,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;YAClD,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IACrC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI;CACpE,CAAC,CAAC;AAEH;;;;GAIG;AACH,KAAK,UAAU,sBAAsB,CAAC,OAAe;IACnD,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO;IACjD,IAAI,CAAC;QACH,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;QACpD,iFAAiF;QACjF,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,YAAY;YAAE,OAAO;QACpD,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CACX,iCAAiC,OAAO,OAAO,MAAM,yDAAyD,CAC/G,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,yDAAyD;IAC3D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,WAAW,GAAG,OAAO,KAAK,YAAY,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAE/E,mFAAmF;IACnF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;QAC5B,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO;QACzE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI;KAC1C,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACzB,MAAM,eAAe,GAAG,QAAQ,KAAK,SAAS,IAAI,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAE9E,IAAI,OAAe,CAAC;IACpB,IAAI,IAAc,CAAC;IACnB,IAAI,eAAe,EAAE,CAAC;QACpB,OAAO,GAAG,QAAS,CAAC;QACpB,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC;SAAM,IAAI,WAAW,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAChD,kCAAkC;QAClC,OAAO,GAAG,OAAO,CAAC;QAClB,IAAI,GAAG,IAAI,CAAC;IACd,CAAC;SAAM,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,GAAG,MAAM,CAAC;QACjB,IAAI,GAAG,EAAE,CAAC;IACZ,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,QAAQ,CAAC;QACnB,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC3C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;YACpD,MAAM,sBAAsB,CAAC,OAAO,CAAC,CAAC;YACtC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;QAC/D,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;YAAE,OAAO,CAAC,KAAK,CAAE,GAAa,CAAC,KAAK,CAAC,CAAC;QACrE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC"}

package/dist/cli/lib/apm/lock.d.ts

@@ -0,0 +1,23 @@
+export declare const LOCK_SCHEMA_VERSION = 1;
+export interface ApmLock {
+    schemaVersion: number;
+    package: {
+        name: string;
+        version: string;
+    };
+    primitives: Record<string, string>;
+}
+/** Compute the sorted `.apm` + governance manifest hash map for a package root. */
+export declare function hashPrimitives(pkgRoot: string): Record<string, string>;
+export declare function generateLock(pkgRoot: string): ApmLock;
+export declare function serializeLock(lock: ApmLock): string;
+export declare function lockPath(pkgRoot: string): string;
+export interface VerifyResult {
+    ok: boolean;
+    missing: string[];
+    changed: string[];
+    extra: string[];
+    error?: string;
+}
+export declare function verifyLock(pkgRoot: string): VerifyResult;
+//# sourceMappingURL=lock.d.ts.map

package/dist/cli/lib/apm/lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/apm/lock.ts"],"names":[],"mappings":"AAeA,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAErC,MAAM,WAAW,OAAO;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3C,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAiBD,mFAAmF;AACnF,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAWtE;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CASrD;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAEnD;AAED,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,MAAM,WAAW,YAAY;IACzB,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,CA8BxD"}

package/dist/cli/lib/apm/lock.js

@@ -0,0 +1,90 @@
+/**
+ * apm/lock.ts — reproducible lockfile for the canonical primitive source.
+ *
+ * `apm lock` records a sha256 for every file under `.apm/`, plus apm.yml and
+ * apm-policy.yml, into apm.lock.yaml. `apm verify-lock` recomputes and diffs,
+ * so any drift between the committed primitives/governance files and the
+ * lockfile — a hand-edit, a partial upgrade, a corrupted install — is caught
+ * deterministically.
+ */
+import { createHash } from "node:crypto";
+import { readFileSync, readdirSync, statSync, existsSync } from "node:fs";
+import { relative, resolve } from "node:path";
+import { parse, stringify } from "yaml";
+import { sourcePaths } from "../paths.js";
+export const LOCK_SCHEMA_VERSION = 1;
+function walkFiles(dir) {
+    if (!existsSync(dir))
+        return [];
+    const out = [];
+    for (const name of readdirSync(dir)) {
+        const full = resolve(dir, name);
+        if (statSync(full).isDirectory())
+            out.push(...walkFiles(full));
+        else
+            out.push(full);
+    }
+    return out;
+}
+function sha256(file) {
+    return `sha256:${createHash("sha256").update(readFileSync(file)).digest("hex")}`;
+}
+/** Compute the sorted `.apm` + governance manifest hash map for a package root. */
+export function hashPrimitives(pkgRoot) {
+    const { apmDir, apmYml, apmPolicyYml } = sourcePaths(pkgRoot);
+    const files = [...walkFiles(apmDir)];
+    if (existsSync(apmYml))
+        files.push(apmYml);
+    if (existsSync(apmPolicyYml))
+        files.push(apmPolicyYml);
+    const map = {};
+    for (const file of files.sort((a, b) => a.localeCompare(b))) {
+        map[relative(pkgRoot, file)] = sha256(file);
+    }
+    return map;
+}
+export function generateLock(pkgRoot) {
+    const pkg = JSON.parse(readFileSync(resolve(pkgRoot, "package.json"), "utf8"));
+    return {
+        schemaVersion: LOCK_SCHEMA_VERSION,
+        package: { name: pkg.name, version: pkg.version },
+        primitives: hashPrimitives(pkgRoot),
+    };
+}
+export function serializeLock(lock) {
+    return `# Generated by \`specky apm lock\`. Do not edit by hand.\n${stringify(lock)}`;
+}
+export function lockPath(pkgRoot) {
+    return resolve(pkgRoot, "apm.lock.yaml");
+}
+export function verifyLock(pkgRoot) {
+    const path = lockPath(pkgRoot);
+    if (!existsSync(path)) {
+        return {
+            ok: false,
+            missing: [],
+            changed: [],
+            extra: [],
+            error: "apm.lock.yaml not found — run `specky apm lock`",
+        };
+    }
+    const locked = parse(readFileSync(path, "utf8"));
+    const current = hashPrimitives(pkgRoot);
+    const lockedPrimitives = locked.primitives ?? {};
+    const missing = [];
+    const changed = [];
+    for (const [file, hash] of Object.entries(lockedPrimitives)) {
+        if (!(file in current))
+            missing.push(file);
+        else if (current[file] !== hash)
+            changed.push(file);
+    }
+    const extra = Object.keys(current).filter((f) => !(f in lockedPrimitives));
+    return {
+        ok: missing.length === 0 && changed.length === 0 && extra.length === 0,
+        missing: missing.sort(),
+        changed: changed.sort(),
+        extra: extra.sort(),
+    };
+}
+//# sourceMappingURL=lock.js.map

package/dist/cli/lib/apm/lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock.js","sourceRoot":"","sources":["../../../../src/cli/lib/apm/lock.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAQrC,SAAS,SAAS,CAAC,GAAW;IAC1B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAChC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;;YAC1D,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AAED,SAAS,MAAM,CAAC,IAAY;IACxB,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACrF,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,cAAc,CAAC,OAAe;IAC1C,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACrC,IAAI,UAAU,CAAC,MAAM,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,UAAU,CAAC,YAAY,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAEvD,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAe;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAClB,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CACpB,CAAC;IACvC,OAAO;QACH,aAAa,EAAE,mBAAmB;QAClC,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE;QACjD,UAAU,EAAE,cAAc,CAAC,OAAO,CAAC;KACtC,CAAC;AACN,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAa;IACvC,OAAO,6DAA6D,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,OAAe;IACpC,OAAO,OAAO,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;AAC7C,CAAC;AAUD,MAAM,UAAU,UAAU,CAAC,OAAe;IACtC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACpB,OAAO;YACH,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,EAAE;YACX,OAAO,EAAE,EAAE;YACX,KAAK,EAAE,EAAE;YACT,KAAK,EAAE,iDAAiD;SAC3D,CAAC;IACN,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAY,CAAC;IAC5D,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,gBAAgB,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;IAEjD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aACtC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,gBAAgB,CAAC,CAAC,CAAC;IAE3E,OAAO;QACH,EAAE,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QACtE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;QACvB,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;QACvB,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE;KACtB,CAAC;AACN,CAAC"}

package/dist/cli/lib/apm/manifest.d.ts

@@ -0,0 +1,31 @@
+export interface ApmMcpServer {
+    name: string;
+    transport?: string;
+    command?: string;
+    args?: string[];
+    tools?: string[];
+    registry?: boolean;
+}
+export interface ApmManifest {
+    name: string;
+    version: string;
+    description?: string;
+    targets: string[];
+    primitives: Record<string, string>;
+    mcp?: {
+        servers?: ApmMcpServer[];
+    };
+}
+export declare function loadManifest(pkgRoot: string): ApmManifest;
+export interface ValidationResult {
+    ok: boolean;
+    errors: string[];
+    warnings: string[];
+}
+/**
+ * Validate the APM manifest: required fields, version parity with
+ * package.json, declared primitive paths exist, targets are non-empty, and at
+ * least one MCP server is declared.
+ */
+export declare function validateManifest(pkgRoot: string): ValidationResult;
+//# sourceMappingURL=manifest.d.ts.map

package/dist/cli/lib/apm/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/apm/manifest.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,YAAY;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,WAAW;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,GAAG,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,YAAY,EAAE,CAAA;KAAE,CAAC;CACtC;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,WAAW,CAMzD;AAED,MAAM,WAAW,gBAAgB;IAC7B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACtB;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,CAmDlE"}