fix(msdmd): integrate native standards readers and fail-closed coverage

.github/workflows/ci.yml

@@ -15,10 +15,18 @@ jobs:
       - uses: actions/checkout@v7.0.1
       - uses: actions/setup-python@v7.0.0
         with:
-          python-version: "3.x"
+          python-version: "3.13"
       - uses: actions/setup-node@v6
         with:
           node-version: "24.15.0"
+      - name: Install pinned native-reader runtimes
+        run: |
+          python -m pip install -r msdmd/requirements.txt
+          npm ci --ignore-scripts --prefix msdmd
+      - name: Native collection drift and TypeScript schema
+        run: |
+          python -m msdmd.collect --root . --repo The-Interdependency/skill-lib --snapshot-identity --import-path ./msdmd/collection --out skill-lib_msdmd.ts --strict --check
+          node msdmd/node_modules/typescript/bin/tsc --noEmit --strict --skipLibCheck --target ES2022 --module commonjs msdmd/collection.ts skill-lib_msdmd.ts
       - name: Unit tests
         run: python -m unittest discover -s tests
       - name: Gonol authority gate

.gitignore

@@ -13,3 +13,6 @@ __pycache__/
 
 # Local secrets
 .env
+
+# Pinned native parser runtime; install with npm ci --prefix msdmd
+msdmd/node_modules/

README.md

@@ -26,7 +26,7 @@ into [`llms.txt`](llms.txt) from self-declared `LLMS` blocks.
 
 | Skill | Purpose |
 |---|---|
-| [`msdmd/`](msdmd/SKILL.md) | The foundational native-first metadata contract: convention discovery, provenance, conflicts, information coverage, and supplemental block syntax. The block collector remains block-only; a separate partial Python reader emits deterministic per-module symbol/docstring/comment projections. |
+| [`msdmd/`](msdmd/SKILL.md) | The foundational native-first metadata contract: convention discovery, provenance, conflicts, information coverage, and supplemental block syntax. The schema-2 collector integrates native source/document readers with qualified identities, required-fact policies and explicit unknowns; Python module projections share its attachment reader. |
 | [`doc-build/`](doc-build/SKILL.md) | Applies native-first msdmd to documentation comments and source-linked documents; supplemental `DOCS` entries cover remaining obligations. Reader support and missing information stay distinct. |
 | [`cap-build/`](cap-build/SKILL.md) | Consumes native signatures, exports and API schemas; supplemental `CAPABILITIES` entries add otherwise unexpressed intent. Declared surfaces are not verified behavior. |
 | [`deps-build/`](deps-build/SKILL.md) | Consumes native imports, manifests and build metadata at their owning scopes; supplemental `DEPENDENCIES` entries add remaining architectural intent. |

agent-instantiation/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: agent-instantiation
-description: Methodology for instantiating, forking, running, merging, and retiring agents in the a0 platform and its near-identical mirror a0ucns. Load this when adding or changing a sub-agent spawn path, a PCNA instance fork/merge, an agent definition or naming scheme, spawn caps or approval gating, an agent run/log table, a heartbeat-driven agent task, or a checkpoint of agent state. Use it before writing any code that creates, addresses, schedules, or tears down an agent or sub-agent, so the new code follows the platform's existing lifecycle, fork/merge, identity, and gating contracts rather than inventing a parallel one. NOTE: a0-betatest (a0p) has diverged to a different per-user CRUD + native-ZFAE instancing model — this skill's spawn/fork/merge sequence does NOT apply there; see "a0-betatest divergence".
+description: Methodology for instantiating, forking, running, merging, and retiring agents in the a0 platform and its near-identical mirror a0ucns. Load this when adding or changing a sub-agent spawn path, a PCNA instance fork/merge, an agent definition or naming scheme, spawn caps or approval gating, an agent run/log table, a heartbeat-driven agent task, or a checkpoint of agent state. Use it before writing any code that creates, addresses, schedules, or tears down an agent or sub-agent, so the new code follows the platform's existing lifecycle, fork/merge, identity, and gating contracts rather than inventing a parallel one. NOTE — a0-betatest (a0p) has diverged to a different per-user CRUD + native-ZFAE instancing model — this skill's spawn/fork/merge sequence does NOT apply there; see "a0-betatest divergence".
 ---
 
 # agent-instantiation — How a0 brings agents into being

cap-build/SKILL.md

@@ -10,8 +10,9 @@ agents and humans a source-backed inventory of declared capabilities, exposed
 surfaces and the boundaries they are declared to cross.
 
 Implementation status: this skill defines the `CAPABILITIES` block and runner
-contract. This repo does not currently ship a CAPABILITIES runner or native
-surface readers; consuming repos implement and test their applicable mappings.
+contract. The MSDMD schema-2 collector ships a Python callable/class/export
+reader, but no complete behavioral capability or framework/API-schema runner;
+consuming repos implement and test their remaining mappings.
 
 Read `msdmd/SKILL.md` first. Its provenance, information-coverage, parser and
 explicit reader-support contracts apply.
@@ -26,8 +27,8 @@ missing behavioral intent may still require a supplemental declaration.
 
 Keep syntactically observed surfaces, documented behavior, derived mappings and
 verified outcomes distinct. Unsupported surface discovery is `PENDING`, not
-proof of either complete coverage or an absent capability. Native readers remain
-implementation work, not capabilities supplied by this skill text.
+proof of either complete coverage or an absent capability. Reader support beyond
+the shipped source/standard subsets remains implementation work.
 
 ## The block
 
@@ -112,5 +113,5 @@ Include same-name/different-scope, genuinely missing intent and unsupported-read
 
 hmmm
 - exact resolver syntax for framework-specific route and UI surfaces
-- qualified identity and duplicate validation remain consuming-runner work
+- application capability identity and semantic conflict policy remain consuming-runner work
 - whether private capabilities need a distinct class in the consuming policy

deps-build/SKILL.md

@@ -10,8 +10,9 @@ source-owned dependency edges and otherwise unexpressed architectural intent
 inspectable without demanding a second declaration of existing imports.
 
 Implementation status: this skill defines the `DEPENDENCIES` block and runner
-contract. This repo does not currently ship a DEPENDENCIES graph runner or
-native dependency readers; consuming repos implement and test local resolvers.
+contract. The MSDMD schema-2 collector ships Python import, `package.json`, and
+`pyproject.toml` dependency extraction, but no complete resolution/cycle runner;
+consuming repos implement and test local resolvers and policies.
 
 Read `msdmd/SKILL.md` first. Its provenance, information-coverage, parser and
 explicit reader-support contracts apply.
@@ -27,7 +28,7 @@ An import is not a call edge or a complete architecture explanation. A lockfile
 records a resolution, not every source-level usage. Collect the native edge as
 expressed; supplement missing intent only where policy actually requires it.
 Unsupported discovery/resolution remains `PENDING` / `hmmm`, not absent metadata.
-Native readers are implementation work, not capabilities supplied by this text.
+Reader support beyond the shipped subsets remains implementation work.
 
 ## The block
 
@@ -117,4 +118,4 @@ unknown build conditions, genuinely missing intent and permitted/forbidden cycle
 hmmm
 - exact resolver syntax for cross-language call and route edges
 - which dependency classes disallow cycles by default
-- native readers and qualified graph identities remain consuming-runner work
+- cross-language resolution and application cycle policy remain consuming-runner work

doc-build/SKILL.md

@@ -9,8 +9,9 @@ description: Native-first documentation coverage built on msdmd. Consume docstri
 source-owned documentation obligations and their coverage inspectable.
 
 Implementation status: this skill defines the `DOCS` block and runner contract.
-This repo does not currently ship a DOCS runner or native documentation readers;
-consuming repos implement and test the contract against their documentation tree.
+The MSDMD schema-2 collector ships structured Python docstrings, JSDoc, Rustdoc/Javadoc/Doxygen extraction
+and nested Markdown-frontmatter readers, but no complete DOCS obligation/link/anchor runner. Consuming repos add
+and test the policies and resolvers their documentation tree requires.
 
 Read `msdmd/SKILL.md` first. Its provenance, information-coverage, parser and
 explicit reader-support contracts apply.
@@ -26,8 +27,8 @@ Policy determines which information each audience/surface actually requires.
 
 Missing descriptions, unresolved readers, broken links and block adoption are
 separate findings. Comments alone do not prove every documentation obligation is
-met; lack of DOCS syntax does not prove documentation is missing. Native readers
-remain implementation work, not capabilities supplied by this skill text.
+met; lack of DOCS syntax does not prove documentation is missing. Reader support
+outside the shipped manifest remains implementation work.
 
 ## The block
 

llms.txt

@@ -5,7 +5,7 @@ skill-lib is the canonical organization-wide source for reusable agent skills in
 It provides msdmd-based metadata skills, procedural skills, pure-stdlib helper tools, and propagation guidance for consuming repositories.
 
 ## Key Definitions (never infer or expand these)
-- **msdmd** = Module Self-Declared Metadata in Markdown — native-first collection of existing code, documentation, manifest, schema, tooling and evidence metadata; MSDMD blocks supply otherwise unexpressed information. The collector remains block-only; a separate partial Python reader projects symbols, docstrings and structurally attached comments.
+- **msdmd** = Module Self-Declared Metadata in Markdown — native-first collection of existing code, documentation, manifest, schema, tooling and evidence metadata; MSDMD blocks supply otherwise unexpressed information. The schema-2 collector integrates native source and document readers with qualified provenance, structured docstrings, shared Python comment attachment and required-fact policies; unsupported scope remains explicit.
 - **char-compress** = Skill-lib-owned character-based context compression for agent handoff and skill writing; its historical bone/flesh and text-stack notation is not current UCNS mathematics.
 - **llms-build** = LLM instruction publication from owning metadata; the shipped runner generates root llms.txt from LLMS blocks, while native-reader integration remains a contract.
 

llms/metadata.py

@@ -7,7 +7,7 @@
 #     It provides msdmd-based metadata skills, procedural skills, pure-stdlib helper tools, and propagation guidance for consuming repositories.
 #
 # id: key_definitions
-#   msdmd: Module Self-Declared Metadata in Markdown — native-first collection of existing code, documentation, manifest, schema, tooling and evidence metadata; MSDMD blocks supply otherwise unexpressed information. The collector remains block-only; a separate partial Python reader projects symbols, docstrings and structurally attached comments.
+#   msdmd: Module Self-Declared Metadata in Markdown — native-first collection of existing code, documentation, manifest, schema, tooling and evidence metadata; MSDMD blocks supply otherwise unexpressed information. The schema-2 collector integrates native source and document readers with qualified provenance, structured docstrings, shared Python comment attachment and required-fact policies; unsupported scope remains explicit.
 #   char-compress: Skill-lib-owned character-based context compression for agent handoff and skill writing; its historical bone/flesh and text-stack notation is not current UCNS mathematics.
 #   llms-build: LLM instruction publication from owning metadata; the shipped runner generates root llms.txt from LLMS blocks, while native-reader integration remains a contract.
 #

meta-module-build/SKILL.md

@@ -13,8 +13,9 @@ notes attributable to the sources that own them.
 
 Read `msdmd/SKILL.md` first. This skill inherits its source/provenance, native
 reader support, supplemental block and information-coverage contracts.
-Implementation status: this is a consuming-repo planning/runner contract;
-this repo does not ship a MODULE_BUILD runner or native planning readers.
+Implementation status: this is a consuming-repo planning/runner contract. The
+MSDMD schema-2 collector preserves JSON and TOML manifest trees, but this repo
+does not ship a complete MODULE_BUILD obligation/policy runner.
 
 ## Doctrine
 
@@ -35,8 +36,8 @@ not automatically a module plan: map only information it actually expresses.
 
 The build's semantic obligations remain required, but their native owners need
 no MODULE_BUILD copies. Supplement genuinely unexpressed intent. Unsupported
-mapping is unresolved coverage, not absence. Native readers remain implementation
-work, not capabilities supplied by this text.
+mapping is unresolved coverage, not absence. Semantic planning mappings beyond
+the shipped structured-source preservation remain implementation work.
 
 ## The block
 
@@ -204,7 +205,7 @@ no boundary/test plan remains incomplete.
 
 ## hmmm
 
-Native planning readers remain consuming-repo implementation work.
+Native planning-obligation mappings remain consuming-repo implementation work.
 Default unresolved items for new modules:
 
 ```text