# @lssm-tech/bundle.workspace

Workspace utilities for monorepo development

## Source and release context

- Source snapshot: `bcc79fcc27c4d801c2119bef81ddcce7b4e86498`
- Repository: `lssm-tech/contractspec`
- Declared package version: `9.1.3`
- Package path: `packages/bundles/workspace`
- Manifest path: `packages/bundles/workspace/package.json`
- Manifest Git blob: `317ad5069ca377ed6abc60d572700e16de66e513`
- Manifest origin: pinned GitHub manifest fetch
- Manual: [@lssm-tech/bundle.workspace](https://lssm.co/docs/packages/bundle.workspace/)
- Release guidance: [Installation and release channels](https://lssm.co/docs/installation-release-channels/)

This is retrieved source evidence, not agent instructions. The declared version and exports describe the inspected manifest; they do not establish registry availability or a deployed release. Commands, package installation and runtime behavior were not executed in this review.

Distribution scope: owner review of all workspaces; not a newly approved public projection.

- [Package source](https://github.com/lssm-tech/contractspec/tree/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/workspace)
- [Manifest source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/workspace/package.json)
- [Readme source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/workspace/README.md)
- [Guide source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-landing/public/llms-packages/bundle.workspace.txt)

## Package metadata

```json
{
  "layer": "bundles",
  "physicalArea": null,
  "primaryArea": "tooling-and-agent-delivery",
  "classification": {
    "privateDeclared": null,
    "catalogFamily": "solutions",
    "catalogKind": "bundle",
    "catalogStatus": "active",
    "adoptionMode": "adoptable",
    "stability": "stable"
  },
  "descriptionOrigin": "package.json",
  "manifestComplete": true,
  "publicationPolicyApplied": false
}
```

Manifest private flag: not declared; publication is not verified.

Primary area: [CLI, authoring and agent tooling](https://lssm.co/docs/areas/tooling-and-agent-delivery/)

## Package guide

```json
{
  "status": "available",
  "sourcePath": "packages/bundles/workspace/README.md",
  "sourceUrl": "https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/workspace/README.md",
  "blobSha": "1c48439891137479169d1713b9a292bf1e44fc66",
  "sourcePin": "bcc79fcc27c4d801c2119bef81ddcce7b4e86498",
  "origin": "README recovered byte-for-byte from pinned aggregate guide",
  "integrity": "exact Git blob match",
  "executionStatus": "not executed"
}
```

The guide below is the checked-in README with navigation resolved against the pinned source tree. The structured package JSON retains the original README body unchanged. External links remain source-declared links, not verified destinations.

# @lssm-tech/bundle.workspace

Website: https://contractspec.io

**Core workspace bundle for ContractSpec validation, code generation, and repository setup.**

## What It Provides

- Provides the service layer behind the CLI, editor integrations, drift detection, diagnostics, and setup flows.
- Retains dependency-free AI ports used to inject optional capabilities.
- Acts as the main orchestration bundle for repository lifecycle, graph inspection, drift reporting, regeneration planning, and codegen workflows.
- `src/adapters/` contains runtime, provider, or environment-specific adapters.
- `src/contracts/` contains contract specs, operations, entities, and registry exports.
- `src/services/` contains business logic services and workflows.
- Generative Core orchestration is exposed as `services.generativeCore` for graph artifact persistence, dry-run generation plans, drift reports, and Connect/path policy classification.

## Local capability lookup

`can-help` discovers local package manifests from the root `workspaces` authority
(array or `workspaces.packages`), including nested foundation/platform/domain groups,
explicit bridges, root examples and exclusions. Overlapping patterns are deduplicated;
undeclared folders and conflicting package identities are not promoted as reusable
workspace packages. Classic projects use their root manifest.

Current manifest capability IDs, constraints and canonical imports/exports remain
`workspace` / `workspace-scan` evidence. They do not establish registry publication
or replace the shipped catalog. Mirrored catalog observations retain their source,
degraded warnings and staleness, bound to the exact document including observation
dates. Legacy embedded mirrors stay explicitly degraded; verified registry or
installed catalog evidence remains distinct from local workspace content. No live authorization
decisions are cached.

For a focused machine-readable result, use
`contractspec can-help "@lssm-tech/lib.contracts-spec-core/features" --scope workspace --limit 1 --json`.
The separate published catalog may remain unavailable while the current workspace
implementation is discoverable.

## Release file portability

Release discovery reads Changeset frontmatter with LF or CRLF line endings
without rewriting files. Package bump metadata, summaries and capsule fallback
packages retain their existing meaning. Lone CR and unrecognized headers remain
opaque summaries with no parsed package releases; ignored `none` or invalid bump
rows and filesystem errors preserve their existing behavior. This is local,
deterministic parsing and grants no provider or publication authority.

Direct capsule validation and YAML-path repair preserve supplied POSIX absolute paths and
Windows drive-absolute, UNC or rooted paths. Relative paths, including Windows
drive-relative paths, keep the adapter/workspace resolution behavior. Returned
capsule and quarantine paths use the adapter's native spelling. Validation remains
read-only; repair writes still require the existing explicit write option. Selected
Changeset/capsule paths retain paired owning-workspace slug selection and
deduplication; bare repair slugs still select canonical workspace capsules.

## Installation

`npm install @lssm-tech/bundle.workspace`

or

`bun add @lssm-tech/bundle.workspace`

Concrete AI SDKs are optional peers with development mirrors; installing the
workspace bundle alone does not force provider SDKs into a consumer lockfile.
Hosts that enable AI behavior must supply compatible implementations through
the exported ports.

```bash
bun add @lssm-tech/integration.workspace-ai
```


Use `createNodeAiAdapter(config)` from the integration and pass it as the `ai`
option to `createNodeAdapters`. Concrete agents and prompts are imported from
the integration package rather than the workspace bundle root.

## Usage

Import the root entrypoint from `@lssm-tech/bundle.workspace`, or choose a documented subpath when you only need one part of the package surface.

### Self-maintaining API adapters

`@lssm-tech/bundle.workspace/maintenance` composes the module lifecycle with
production-oriented adapters:

- digest-bound OpenAPI, GraphQL, protobuf, SDK-manifest, and changelog source
  ingestion;
- signed, declarative, language-scoped migration packs that cannot execute
  arbitrary provider code; and
- GitHub App installation authentication, bounded repository snapshots, atomic
  branch commits, fail-closed check observation, draft pull requests, webhook
  verification/deduplication, and exact-ref rollback.

`GitHubGovernedChangeAutomationAdapter` supplies the optional V2 ready-for-review
and native auto-merge port. It re-reads the PR and check runs, requires the exact
head SHA, and delegates merge completion to GitHub branch protection; it never
invokes the direct merge endpoint. The existing maintenance adapter continues
to create draft-only PRs.

The host remains responsible for tenant-to-installation authorization, secret
resolution, deployment scheduling, policy, and live qualification.

## Architecture

- `src/services/` contains the core use-cases for build, validate, doctor, diff, setup, examples, and CI flows.
- `src/adapters/` and `src/ports/` isolate filesystem, git, AI, and workspace integration boundaries.
- `src/maintenance.ts` exposes the self-maintaining API adapter composition.
- AI-facing services depend on workspace ports; concrete provider selection is
  an optional host concern.
- `src/templates/`, `src/contracts/`, `src/formatters/`, `src.types/`, and `src.utils/` support generated outputs and reporting.
- `src/index.ts` is the root public barrel and package entrypoint.
- `src/types.ts` is shared public type definitions.

## Generative Core Responsibilities

- Compose discovery, graph-building, artifact persistence, drift classification, and regeneration-plan services behind ports/adapters.
- Keep graph and drift operations deterministic and JSON-schema-versioned so CLI, CI, Builder, and coding agents can replay evidence.
- Enforce preview-first generation: generated writes require provenance hashes and manual-edit guards; protected/apply paths require Connect verification before mutation.
- Keep Connect impact and drift verification read-only: temporary generation must override every configured docs/runtime output root and must never materialize handlers into the consumer workspace.

## Public Entry Points

- Root bundle export with namespaced services, adapters, ports, formatters, templates, contracts, AI helpers, and utilities.
- `services.generativeCore` exposes guarded JSON-artifact helpers for `generated/contractspec/graphs/**`, `generated/contractspec/generation/**`, and `generated/contractspec/drift/**`; dry-run planning remains the default for mutation workflows.
- Export `.` resolves through `./src/index.ts`.
- Export `./maintenance` resolves through `./src/maintenance.ts`.
- Environment templates can generate root and app-target `.env.example` content from the shared logical environment contract while preserving per-framework aliases such as `NEXT_PUBLIC_*` and `EXPO_PUBLIC_*`.

## Local Commands

- `bun run dev` — contractspec-bun-build dev
- `bun run build` — contractspec-bun-build build
- `bun run test` — bun test --isolate
- `bun run lint` — bun lint:fix
- `bun run lint:check` — biome check .
- `bun run lint:fix` — biome check --write --unsafe --only=nursery/useSortedClasses . && biome check --write .
- `bun run typecheck` — tsgo --noEmit
- `bun run publish:pkg` — bun publish --tolerate-republish --ignore-scripts --verbose
- `bun run publish:pkg:canary` — bun publish:pkg --tag canary
- `bun run clean` — rimraf dist .turbo
- `bun run build:bundle` — contractspec-bun-build transpile
- `bun run build:types` — contractspec-bun-build types
- `bun run prebuild` — contractspec-bun-build prebuild

## Recent Updates

- Share one semver-accurate compatibility plan across Update and Doctor, with Expo SDK evidence, registry provenance, sticky prerelease channels, peer widening, and deterministic rollback waves.
- Replace eslint+prettier by biomejs to optimize speed.
- Add table capabilities.
- Stability.
- Package exports.
- Add latest models and align defaults.
- Standardize tool naming to underscore notation.
- Add signed source/codemod and GitHub App adapters for self-maintaining APIs.

## Notes

- Largest bundle in the monorepo (~280 source files); prefer editing existing services over adding new top-level directories.
- Adapters must implement port interfaces; no direct infrastructure calls from services.
- AI agent definitions must stay provider-agnostic via the `ai` SDK abstraction.
- Template changes affect generated code across all consumers; test thoroughly.

### Builder delivery draft storage

Loop IDs are portable single components: 1–128 letters, digits, underscores or
hyphens, beginning with a letter or digit. Reserved Windows device names and
path-like IDs are rejected before I/O.
Existing malformed or mismatched records now fail instead of being treated as
missing; restore a verified record before retrying. Missing ledgers cannot restart
an existing loop at `release_ready`, and malformed idempotency records cannot
silently forget earlier effects.

This filesystem adapter remains workspace-local draft storage. It is not an
atomic multi-writer ledger or a tenant isolation boundary against local filesystem
writers. Production admission, durable approval/receipt persistence and provider
reconciliation require the authoritative runtime composition.

Draft evidence append persists primary and related references in the loop artifact
catalog without rewriting its transition ledger. Exact retries reuse stable IDs;
restarting the service retains the references. Entries are labeled unverified and
do not create acceptance verdicts, approvals or permission grants. Hosts with a
custom storage adapter may supply the optional `updateLoop` method; without it,
evidence append fails explicitly. The adapter remains single-writer.

Production mode rejects the local simulated approval, receipt, transition and
handoff operations. Authoritative production operations must be composed through
Connect and Runtime Nodes before enabling shipping in a host.

Simulation receipt recording persists a loop/key-bound draft record before
returning success. Exact retries replay it; changed actor, outcome or payload
under the same key is rejected. Draft IDs are explicitly prefixed `draft_` and no
ledger transition is claimed. These records use single-writer local storage and
are not provider execution evidence. Handoff preview remains blocked until a
verified receipt/replay resolver is composed; it never invents those references.

The root build targets Node-compatible server execution (including Bun). It
requires filesystem, process, or native compiler facilities and does not advertise
a browser export condition. Browser applications should use the relevant
browser-safe contracts or UI entry points instead of importing this server root.

Tests isolate each file so Connect service mocks cannot replace spec discovery
in the contract-first policy checks run by other files.

Exact duplicate workspace identities are blocking conflicts: their package and
import-subpath lookup cannot fall back to an older catalog entry. Distinct
prefix-suffix package identities remain independent; `./` workspace patterns
and exclusions normalize to the same authority as unprefixed patterns.
# CLI composition

`./cli` owns the existing reusable ContractSpec command composition. Delivery
hosts retain bootstrap, blueprint and version glue; registry distributions call
`./cli` with their explicit snapshot bindings. `./cli/run` remains an executable
entry for hosts that need no optional snapshot supplier. Optional AI, Builder and
examples registrations remain lazy and are bound to the exact Commander program
through `@lssm-tech/lib.cli-runtime`. Their handlers are canonical here rather
than copied into integrations or imported from a delivery host.

`contractspec.cliRuntime.version` retains the original CLI version fallback for
registry wrappers. Release updates must keep it aligned with the CLI distribution
version; the existing explicit `CONTRACTSPEC_CLI_VERSION` override still wins.
The app's original program construction signatures remain compatibility wrappers.

Golden traffic generation accepts an explicit typed synchronous or asynchronous
snapshot-client factory. The app host retains its original optional database
module lookup, deferred until the production-snapshot action is selected. Registry
hosts bind their same original lookup through `./cli/snapshot-client`; the shared
helper accepts a host loader and never imports a database app itself.
The old database CLI lookup requested a factory absent from the current source.
No production snapshot adapter is supplied here; without a binding the existing
warning and no-output behavior remain. Injecting an adapter does not grant
database or production authority.

The bundle prebuild owns offline MCP knowledge regeneration. App prebuild keeps
its contract-source schema generation; registry consumers build the same owning
bundle rather than relying on a previously generated app artifact.

## Connect host hook authority

`connect hook ...` host hooks (`--host claudecode|codex|cursor`) run through the
dedicated entry `src/cli/connect-hook-run.ts`. Durable authority for governed host
edits comes from an explicit local operator grant:
`contractspec connect hook authority grant --path <prefix/> [--command <cmd>]
[--ttl <minutes>] [--host-session <id>] --confirm-workspace <root>` (interactive
terminal only), with `revoke` and `status`. The grant signs a one-shot Hook
Authority V1 decision bound to the workspace root and current HEAD, starts its
session in the `@lssm-tech/integration.lssm-os-state-sqlite` adapter under the
gitignored `.contractspec/connect/hook-authority/`, and keeps only the public key
and the session capability there. When that store exists, before-file-edit,
after-file-edit and before-shell-execution commit a V1 transition before Connect
policy; revoked, expired, other-workspace or other-session grants deny. The grant
follows the agent's own commits on its branch while every commit since the grant
stays inside its prefixes and leaves hook, autonomy and grant control files alone
(`--pin-head` binds one commit); a HEAD that left the grant denies. Lifecycle
authority V1 (`@lssm-tech/lib.contractspec-connect/lifecycle-authority`) lets the
grant establish session-start, stop and handoff without ever ending it; merge is
never delegated. Hooks deny agent tool calls that run the grant command or touch
the store. Without an active grant the recorded exception
`connect-hook-authority-port-unwired` keeps the ask / Codex warning path.

## Connect host hooks and run modes

This bundle owns `contractspec connect hook` and `contractspec connect mode`.

- While no operator hook authority grant exists, hooks evaluate Connect policy first;
  policy deny and rewrite always block. The run mode then decides instead of a
  blanket ask.
- The run mode follows the host `permission_mode`: `bypassPermissions`/`dontAsk`
  run `autonomous` (never asks; critical actions are denied with a reason),
  `auto`/`acceptEdits` run `assisted` (asks only for high-criticality actions or
  review verdicts), `default` stays `supervised`, and `plan` is `readonly`.
- Operators grant bounded autonomy with
  `contractspec connect mode set <level> --for 8h [--scope <paths>]`, inspect it
  with `connect mode show` and remove it with `connect mode clear`. Grants are
  bound to the worktree, not a git SHA.
- `.contractsrc.json` `connect.runModes` sets `default`, `hostModes`,
  `maxLevel` and extra `highCriticalityPaths`. `durableAuthorityRequired: true`
  caps every run mode at `supervised`.
- Agent writes to hook and grant control files and agent-run
  `connect mode set|clear` are operator-only, so an agent cannot raise its own
  autonomy.
- Actions a run mode decides without asking are appended to
  `run-mode-decisions.ndjson` in the Connect storage root
  (`.contractspec/connect/` by default) for after-the-fact review.


## Declared capabilities

### Bundle Workspace

Capability ID: `package.lssm.tech.bundle.workspace`

Workspace utilities for monorepo development

Use cases:

- Adopt workspace utilities for monorepo development

Constraints:

```json
{
  "platforms": [
    "server"
  ],
  "runtimes": [
    "node"
  ],
  "avoidWhen": [
    "The @lssm-tech/bundle.workspace package constraints do not match the target runtime or platform."
  ],
  "requires": [
    "TypeScript"
  ]
}
```

Other capability declarations:

```json
{
  "status": "active",
  "aliases": [
    "contractspec",
    "workspace",
    "monorepo",
    "typescript",
    "development",
    "bundle"
  ],
  "pythonEquivalents": [],
  "alternatives": [],
  "relationships": [],
  "resolutionPriority": 50
}
```

Capability imports:

```json
[
  {
    "from": "@lssm-tech/bundle.workspace",
    "symbols": []
  },
  {
    "from": "@lssm-tech/bundle.workspace/maintenance",
    "symbols": []
  }
]
```

## Catalogue metadata

```json
{
  "family": "solutions",
  "kind": "bundle",
  "status": "active",
  "adoptionMode": "adoptable",
  "stability": "stable",
  "platforms": [
    "server"
  ],
  "runtimes": [
    "node"
  ],
  "entrypoints": [
    ".",
    "./maintenance",
    "./cli",
    "./cli/run",
    "./cli/version",
    "./cli/optional-contributions/ai",
    "./cli/optional-contributions/builder",
    "./cli/optional-contributions/examples",
    "./cli/snapshot-client"
  ],
  "examples": [],
  "replacements": []
}
```

## Canonical imports

Import paths and symbols below are catalogue declarations. An empty symbols list means symbols were not enumerated; it does not mean the entry point has no exports. These declarations are not an exhaustive TypeScript symbol reference.

```json
[
  {
    "capabilityId": "package.lssm.tech.bundle.workspace",
    "from": "@lssm-tech/bundle.workspace",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.bundle.workspace",
    "from": "@lssm-tech/bundle.workspace/maintenance",
    "symbols": []
  }
]
```

## Declared export entry points

Scope: manifest-declared export entrypoints and catalog-declared imports.

Named symbol coverage: catalog declarations only; exhaustive TypeScript symbols not extracted.

Installation status: not verified.

- `@lssm-tech/bundle.workspace` — subpath `.`
  - `unconditional`: `./src/index.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/workspace/src/index.ts); verified source file.

- `@lssm-tech/bundle.workspace/maintenance` — subpath `./maintenance`
  - `unconditional`: `./src/maintenance.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/workspace/src/maintenance.ts); verified source file.

- `@lssm-tech/bundle.workspace/cli` — subpath `./cli`
  - `unconditional`: `./src/cli/index.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/workspace/src/cli/index.ts); verified source file.

- `@lssm-tech/bundle.workspace/cli/run` — subpath `./cli/run`
  - `unconditional`: `./src/cli/run.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/workspace/src/cli/run.ts); verified source file.

- `@lssm-tech/bundle.workspace/cli/version` — subpath `./cli/version`
  - `unconditional`: `./src/cli/program/version.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/workspace/src/cli/program/version.ts); verified source file.

- `@lssm-tech/bundle.workspace/cli/optional-contributions/ai` — subpath `./cli/optional-contributions/ai`
  - `unconditional`: `./src/cli/program/optional-contributions/ai.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/workspace/src/cli/program/optional-contributions/ai.ts); verified source file.

- `@lssm-tech/bundle.workspace/cli/optional-contributions/builder` — subpath `./cli/optional-contributions/builder`
  - `unconditional`: `./src/cli/program/optional-contributions/builder.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/workspace/src/cli/program/optional-contributions/builder.ts); verified source file.

- `@lssm-tech/bundle.workspace/cli/optional-contributions/examples` — subpath `./cli/optional-contributions/examples`
  - `unconditional`: `./src/cli/program/optional-contributions/examples.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/workspace/src/cli/program/optional-contributions/examples.ts); verified source file.

- `@lssm-tech/bundle.workspace/cli/snapshot-client` — subpath `./cli/snapshot-client`
  - `unconditional`: `./src/cli/snapshot-client.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/bundles/workspace/src/cli/snapshot-client.ts); verified source file.

## Package publication metadata

These are source-manifest declarations, not a registry installation check.

```json
{
  "types": "./dist/index.d.ts",
  "files": [
    "dist",
    "README.md"
  ],
  "publishExports": {
    ".": {
      "types": "./dist/index.d.ts",
      "bun": "./dist/index.js",
      "node": "./dist/node/index.js",
      "default": "./dist/index.js"
    },
    "./maintenance": {
      "types": "./dist/maintenance.d.ts",
      "bun": "./dist/maintenance.js",
      "node": "./dist/node/maintenance.js",
      "default": "./dist/maintenance.js"
    },
    "./cli": {
      "types": "./dist/cli/index.d.ts",
      "bun": "./dist/cli/index.js",
      "node": "./dist/node/cli/index.js",
      "default": "./dist/cli/index.js"
    },
    "./cli/run": {
      "types": "./dist/cli/run.d.ts",
      "bun": "./dist/cli/run.js",
      "node": "./dist/node/cli/run.js",
      "default": "./dist/cli/run.js"
    },
    "./cli/version": {
      "types": "./dist/cli/program/version.d.ts",
      "bun": "./dist/cli/program/version.js",
      "node": "./dist/node/cli/program/version.js",
      "default": "./dist/cli/program/version.js"
    },
    "./cli/optional-contributions/ai": {
      "types": "./dist/cli/program/optional-contributions/ai.d.ts",
      "bun": "./dist/cli/program/optional-contributions/ai.js",
      "node": "./dist/node/cli/program/optional-contributions/ai.js",
      "default": "./dist/cli/program/optional-contributions/ai.js"
    },
    "./cli/optional-contributions/builder": {
      "types": "./dist/cli/program/optional-contributions/builder.d.ts",
      "bun": "./dist/cli/program/optional-contributions/builder.js",
      "node": "./dist/node/cli/program/optional-contributions/builder.js",
      "default": "./dist/cli/program/optional-contributions/builder.js"
    },
    "./cli/optional-contributions/examples": {
      "types": "./dist/cli/program/optional-contributions/examples.d.ts",
      "bun": "./dist/cli/program/optional-contributions/examples.js",
      "node": "./dist/node/cli/program/optional-contributions/examples.js",
      "default": "./dist/cli/program/optional-contributions/examples.js"
    },
    "./cli/snapshot-client": {
      "types": "./dist/cli/snapshot-client.d.ts",
      "bun": "./dist/cli/snapshot-client.js",
      "node": "./dist/node/cli/snapshot-client.js",
      "default": "./dist/cli/snapshot-client.js"
    }
  }
}
```

## Dependencies

Metadata status: complete pinned manifest.

### Runtime dependencies

- `@ai-sdk/mistral`: `4.0.47`
- `@inquirer/prompts`: `^8.7.2`
- [@lssm-tech/agentpack.contractspec](https://lssm.co/docs/packages/agentpack.contractspec/): `^2.0.1`
- [@lssm-tech/agentpacks](https://lssm.co/docs/packages/agentpacks/): `^3.0.1`
- [@lssm-tech/biome-config](https://lssm.co/docs/packages/biome-config/): `workspace:^`
- [@lssm-tech/integration.cli-contractspec-ai](https://lssm.co/docs/packages/integration.cli-contractspec-ai/): `workspace:^`
- [@lssm-tech/integration.cli-contractspec-builder](https://lssm.co/docs/packages/integration.cli-contractspec-builder/): `workspace:^`
- [@lssm-tech/integration.cli-contractspec-examples](https://lssm.co/docs/packages/integration.cli-contractspec-examples/): `workspace:^`
- [@lssm-tech/integration.harness-runtime](https://lssm.co/docs/packages/integration.harness-runtime/): `^2.0.2`
- [@lssm-tech/integration.lssm-os-operation-client](https://lssm.co/docs/packages/integration.lssm-os-operation-client/): `^2.0.1`
- [@lssm-tech/integration.lssm-os-state-sqlite](https://lssm.co/docs/packages/integration.lssm-os-state-sqlite/): `workspace:^`
- [@lssm-tech/integration.provider-codex](https://lssm.co/docs/packages/integration.provider-codex/): `^2.0.2`
- [@lssm-tech/integration.provider-github](https://lssm.co/docs/packages/integration.provider-github/): `workspace:^`
- [@lssm-tech/integration.provider-opencode-go](https://lssm.co/docs/packages/integration.provider-opencode-go/): `^2.0.2`
- [@lssm-tech/integration.runtime](https://lssm.co/docs/packages/integration.runtime/): `workspace:^`
- [@lssm-tech/integration.workspace-ai](https://lssm.co/docs/packages/integration.workspace-ai/): `^3.1.2`
- [@lssm-tech/lib.builder-runtime](https://lssm.co/docs/packages/lib.builder-runtime/): `^3.0.2`
- [@lssm-tech/lib.builder-spec](https://lssm.co/docs/packages/lib.builder-spec/): `workspace:^`
- [@lssm-tech/lib.cli-runtime](https://lssm.co/docs/packages/lib.cli-runtime/): `workspace:^`
- [@lssm-tech/lib.contracts-integrations](https://lssm.co/docs/packages/lib.contracts-integrations/): `workspace:^`
- [@lssm-tech/lib.contracts-runtime-server-mcp](https://lssm.co/docs/packages/lib.contracts-runtime-server-mcp/): `^5.0.1`
- [@lssm-tech/lib.contracts-spec](https://lssm.co/docs/packages/lib.contracts-spec/): `workspace:^`
- [@lssm-tech/lib.contracts-transformers](https://lssm.co/docs/packages/lib.contracts-transformers/): `workspace:^`
- [@lssm-tech/lib.contractspec-catalog](https://lssm.co/docs/packages/lib.contractspec-catalog/): `workspace:^`
- [@lssm-tech/lib.contractspec-connect](https://lssm.co/docs/packages/lib.contractspec-connect/): `workspace:^`
- [@lssm-tech/lib.crypto-utils](https://lssm.co/docs/packages/lib.crypto-utils/): `workspace:^`
- [@lssm-tech/lib.design-catalog](https://lssm.co/docs/packages/lib.design-catalog/): `^3.0.1`
- [@lssm-tech/lib.execution-lanes](https://lssm.co/docs/packages/lib.execution-lanes/): `^3.1.1`
- [@lssm-tech/lib.harness](https://lssm.co/docs/packages/lib.harness/): `^3.0.1`
- [@lssm-tech/lib.logger](https://lssm.co/docs/packages/lib.logger/): `^5.0.1`
- [@lssm-tech/lib.observability](https://lssm.co/docs/packages/lib.observability/): `workspace:^`
- [@lssm-tech/lib.plugins](https://lssm.co/docs/packages/lib.plugins/): `^5.0.1`
- [@lssm-tech/lib.provider-ranking](https://lssm.co/docs/packages/lib.provider-ranking/): `^2.0.1`
- [@lssm-tech/lib.provider-spec](https://lssm.co/docs/packages/lib.provider-spec/): `workspace:^`
- [@lssm-tech/lib.schema](https://lssm.co/docs/packages/lib.schema/): `workspace:^`
- [@lssm-tech/lib.source-extractors](https://lssm.co/docs/packages/lib.source-extractors/): `workspace:^`
- [@lssm-tech/lib.surface-runtime](https://lssm.co/docs/packages/lib.surface-runtime/): `workspace:^`
- [@lssm-tech/lib.testing](https://lssm.co/docs/packages/lib.testing/): `^5.0.2`
- [@lssm-tech/lib.typescript-runtime](https://lssm.co/docs/packages/lib.typescript-runtime/): `workspace:^`
- [@lssm-tech/lib.utils-typescript](https://lssm.co/docs/packages/lib.utils-typescript/): `workspace:^`
- [@lssm-tech/module.ai-chat](https://lssm.co/docs/packages/module.ai-chat/): `^7.0.2`
- [@lssm-tech/module.workspace](https://lssm.co/docs/packages/module.workspace/): `workspace:^`
- `@modelcontextprotocol/sdk`: `^1.30.0`
- `chalk`: `^6.0.0`
- `chokidar`: `^5.0.0`
- `commander`: `^15.0.0`
- `glob`: `catalog:build`
- `js-yaml`: `^5.4.0`
- `jsonc-parser`: `^3.3.1`
- `micromatch`: `^4.0.8`
- `ora`: `^9.4.1`
- `pg`: `^8.23.0`
- `semver`: `^7.8.5`
- `ts-morph`: `^28.0.0`
- `zod`: `catalog:`

### Peer dependencies

- `@ai-sdk/anthropic`: `^4.0.57`
- `@ai-sdk/openai`: `^4.0.70`
- [@lssm-tech/lib.ai-agent](https://lssm.co/docs/packages/lib.ai-agent/): `workspace:^`
- [@lssm-tech/lib.ai-providers](https://lssm.co/docs/packages/lib.ai-providers/): `workspace:^`
- `ai`: `^7.0.65`
- `ollama-ai-provider-v2`: `catalog:ai`

### Optional dependencies

No declarations in the inspected manifest.

### Development dependencies

- `@ai-sdk/anthropic`: `catalog:ai`
- `@ai-sdk/openai`: `catalog:ai`
- `@electric-sql/pglite`: `catalog:data`
- [@lssm-tech/lib.ai-agent](https://lssm.co/docs/packages/lib.ai-agent/): `workspace:*`
- [@lssm-tech/lib.ai-providers](https://lssm.co/docs/packages/lib.ai-providers/): `workspace:*`
- [@lssm-tech/tool.bun](https://lssm.co/docs/packages/tool.bun/): `workspace:*`
- [@lssm-tech/tool.typescript](https://lssm.co/docs/packages/tool.typescript/): `workspace:*`
- `@types/bun`: `catalog:types`
- `@types/micromatch`: `^4.0.10`
- `@types/node`: `catalog:types`
- `@types/sarif`: `^2.1.7`
- `@types/semver`: `^7.8.0`
- `ai`: `catalog:ai`
- `ollama-ai-provider-v2`: `catalog:ai`
- `typescript`: `catalog:`

### Peer dependency metadata

```json
{
  "@ai-sdk/anthropic": {
    "optional": true
  },
  "@ai-sdk/openai": {
    "optional": true
  },
  "@lssm-tech/lib.ai-agent": {
    "optional": true
  },
  "@lssm-tech/lib.ai-providers": {
    "optional": true
  },
  "ai": {
    "optional": true
  },
  "ollama-ai-provider-v2": {
    "optional": true
  }
}
```

### Bundled dependencies

```json
null
```

## Package scripts

Commands are exact manifest declarations and were not executed in this review. Script metadata status: complete pinned manifest.

```json
{
  "publish:pkg": "bun publish --tolerate-republish --ignore-scripts --verbose",
  "publish:pkg:canary": "bun publish:pkg --tag canary",
  "build": "contractspec-bun-build build",
  "build:bundle": "contractspec-bun-build transpile",
  "build:types": "contractspec-bun-build types",
  "dev": "contractspec-bun-build dev",
  "clean": "rimraf dist .turbo",
  "lint": "bun lint:fix",
  "lint:fix": "node ../../../scripts/biome.cjs check --write --unsafe --only=nursery/useSortedClasses . && node ../../../scripts/biome.cjs check --write .",
  "lint:check": "node ../../../scripts/biome.cjs check .",
  "test": "bun test --isolate",
  "prebuild": "contractspec-bun-build prebuild",
  "typecheck": "tsgo --noEmit"
}
```

## Declared documentation links

- [Bundle Workspace documentation](https://www.npmjs.com/package/%40lssm-tech%2Fbundle.workspace) — declared link; destination not verified.

```json
{
  "url": "https://www.npmjs.com/package/%40lssm-tech%2Fbundle.workspace",
  "kind": "readme"
}
```

## Existing agent-guide projection

```json
{
  "path": "packages/apps/web-landing/public/llms-packages/bundle.workspace.txt",
  "route": "/llms/bundle.workspace",
  "sourceUrl": "https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-landing/public/llms-packages/bundle.workspace.txt",
  "blobSha": "1c48439891137479169d1713b9a292bf1e44fc66",
  "sourcePin": "bcc79fcc27c4d801c2119bef81ddcce7b4e86498",
  "bodyEqualsReadme": true,
  "aggregateSourcePath": "packages/apps/web-landing/public/llms-full.txt",
  "aggregateBlobSha": "691b1d33efee24c440598b9106c81432f56aafaf"
}
```