# Behavioral State-Change Selling (BSCS)

Deterministic TypeScript methodology SDK and MCP server — **no LLM**. Compiled from the canonical HTML source into an immutable manifest; six operations only.

Requires **Node 22+**.

## Packages

| Package | Role |
| --- | --- |
| `@entrepreneurialimpactcollective/bscs-compiler` | HTML → immutable methodology manifest |
| `@entrepreneurialimpactcollective/bscs-sdk` | Importable library (six operations) |
| `@entrepreneurialimpactcollective/bscs-mcp` | MCP stdio / HTTP adapters (`bscs-mcp` CLI) |
| `@entrepreneurialimpactcollective/bscs-worker` | Cloudflare Worker + OAuth |
| `@entrepreneurialimpactcollective/bscs-conformance` | Optional conformance / release harness |

## Install (published packages)

```bash
npm install @entrepreneurialimpactcollective/bscs-sdk
npm install @entrepreneurialimpactcollective/bscs-mcp
```

## Quick start (monorepo)

```bash
pnpm install
pnpm compile:manifest
pnpm test
```

## Stdio MCP

Local modern-protocol stdio server:

```bash
pnpm --filter @entrepreneurialimpactcollective/bscs-mcp start
# or, after install: npx bscs-mcp
```

Uses `serveStdio` with `legacy: "reject"` (protocol `2026-07-28` only).

## Hosted MCP (Cloudflare Workers)

| Environment | Origin | MCP resource |
| --- | --- | --- |
| Staging | https://bscs-mcp-staging.director-78b.workers.dev | https://bscs-mcp-staging.director-78b.workers.dev/mcp |
| Production | https://bscs-mcp.director-78b.workers.dev | https://bscs-mcp.director-78b.workers.dev/mcp |

OAuth / Access protects authorize flows. Full deployment and secrets procedure: **[docs/operations-runbook.md](docs/operations-runbook.md)**.

## Acceptance / release gate

See **[docs/acceptance-checklist.md](docs/acceptance-checklist.md)**.

```bash
pnpm check:manifest       # live compiler SHA + inventory
pnpm check:generated-diff
pnpm pack-smoke
pnpm smoke:stdio
pnpm smoke:worker         # wrangler dry-run only — never deploys
pnpm conformance          # starts test-only registrar; active + all 19 draft
pnpm conformance:auth     # needs BSCS_AUTH_ISSUER_URL (real issuer; no fake Access)
pnpm check:no-fixtures
pnpm gate
```

Conformance details: [`packages/conformance/README.md`](packages/conformance/README.md).

## Source

Canonical methodology: [`behavioral_state_change_selling.html`](behavioral_state_change_selling.html).

The compiler embeds original bytes (unpadded base64url) and lowercase SHA-256 in the generated manifest under `packages/sdk/src/generated/` (mirrored to `packages/manifest/`).