@driftless-sh/cli 0.1.0

package/dist/api-client.d.ts

@@ -0,0 +1,9 @@
+export declare const api: {
+    get: <T = unknown>(path: string) => Promise<T>;
+    post: <T = unknown>(path: string, body?: unknown) => Promise<T>;
+    put: <T = unknown>(path: string, body?: unknown) => Promise<T>;
+    delete: <T = unknown>(path: string) => Promise<T>;
+};
+export declare function getApiUrl(): string;
+export declare function getApiKey(): string | null;
+//# sourceMappingURL=api-client.d.ts.map

package/dist/api-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-client.d.ts","sourceRoot":"","sources":["../src/api-client.ts"],"names":[],"mappings":"AAqFA,eAAO,MAAM,GAAG;UACR,CAAC,kBAAkB,MAAM,KAA6B,OAAO,CAAC,CAAC,CAAC;WAC/D,CAAC,kBAAkB,MAAM,SAAS,OAAO,KACf,OAAO,CAAC,CAAC,CAAC;UACrC,CAAC,kBAAkB,MAAM,SAAS,OAAO,KACf,OAAO,CAAC,CAAC,CAAC;aACjC,CAAC,kBAAkB,MAAM,KAAgC,OAAO,CAAC,CAAC,CAAC;CAC7E,CAAA;AAED,wBAAgB,SAAS,IAAI,MAAM,CAElC;AAED,wBAAgB,SAAS,IAAI,MAAM,GAAG,IAAI,CAEzC"}

package/dist/api-client.js

@@ -0,0 +1,92 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.api = void 0;
+exports.getApiUrl = getApiUrl;
+exports.getApiKey = getApiKey;
+const node_http_1 = require("node:http");
+const node_https_1 = require("node:https");
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const node_os_1 = require("node:os");
+const CONFIG_PATH = (0, node_path_1.resolve)((0, node_os_1.homedir)(), '.driftless', 'config.json');
+function loadApiKey() {
+    // 1. Env var
+    const envKey = process.env['DRIFTLESS_API_KEY'];
+    if (envKey)
+        return envKey;
+    // 2. Config file
+    try {
+        if ((0, node_fs_1.existsSync)(CONFIG_PATH)) {
+            const config = JSON.parse((0, node_fs_1.readFileSync)(CONFIG_PATH, 'utf8'));
+            return config.api_key || null;
+        }
+    }
+    catch {
+        // ignore
+    }
+    return null;
+}
+const DEFAULT_URL = 'http://localhost:3000/api/v1';
+function getBaseUrl() {
+    const envUrl = process.env['DRIFTLESS_API_URL'];
+    if (envUrl) {
+        return envUrl.endsWith('/api/v1') ? envUrl : `${envUrl}/api/v1`;
+    }
+    // Try config file
+    try {
+        if ((0, node_fs_1.existsSync)(CONFIG_PATH)) {
+            const config = JSON.parse((0, node_fs_1.readFileSync)(CONFIG_PATH, 'utf8'));
+            return config.api_url || DEFAULT_URL;
+        }
+    }
+    catch {
+        // ignore
+    }
+    return DEFAULT_URL;
+}
+function request(method, path, body) {
+    return new Promise((resolve, reject) => {
+        const baseUrl = getBaseUrl();
+        const fullUrl = `${baseUrl}${path}`;
+        const url = new URL(fullUrl);
+        const isHttps = url.protocol === 'https:';
+        const fn = isHttps ? node_https_1.request : node_http_1.request;
+        const headers = {
+            'Content-Type': 'application/json',
+            Accept: 'application/json',
+        };
+        const apiKey = loadApiKey();
+        if (apiKey) {
+            headers['X-API-Key'] = apiKey;
+        }
+        const req = fn(fullUrl, { method, headers }, (res) => {
+            let data = '';
+            res.on('data', (chunk) => (data += chunk.toString()));
+            res.on('end', () => {
+                try {
+                    resolve(JSON.parse(data));
+                }
+                catch {
+                    resolve(data);
+                }
+            });
+        });
+        req.on('error', reject);
+        if (body)
+            req.write(JSON.stringify(body));
+        req.end();
+    });
+}
+exports.api = {
+    get: (path) => request('GET', path),
+    post: (path, body) => request('POST', path, body),
+    put: (path, body) => request('PUT', path, body),
+    delete: (path) => request('DELETE', path),
+};
+function getApiUrl() {
+    return getBaseUrl();
+}
+function getApiKey() {
+    return loadApiKey();
+}
+//# sourceMappingURL=api-client.js.map

package/dist/api-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-client.js","sourceRoot":"","sources":["../src/api-client.ts"],"names":[],"mappings":";;;AA8FA,8BAEC;AAED,8BAEC;AApGD,yCAAkD;AAClD,2CAAoD;AACpD,qCAAkD;AAClD,yCAA4C;AAC5C,qCAAiC;AAEjC,MAAM,WAAW,GAAG,IAAA,mBAAO,EAAC,IAAA,iBAAO,GAAE,EAAE,YAAY,EAAE,aAAa,CAAC,CAAA;AAEnE,SAAS,UAAU;IACjB,aAAa;IACb,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAA;IAC/C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IAEzB,iBAAiB;IACjB,IAAI,CAAC;QACH,IAAI,IAAA,oBAAU,EAAC,WAAW,CAAC,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAA;YAC5D,OAAO,MAAM,CAAC,OAAO,IAAI,IAAI,CAAA;QAC/B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,WAAW,GAAG,8BAA8B,CAAA;AAElD,SAAS,UAAU;IACjB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAA;IAC/C,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,SAAS,CAAA;IACjE,CAAC;IACD,kBAAkB;IAClB,IAAI,CAAC;QACH,IAAI,IAAA,oBAAU,EAAC,WAAW,CAAC,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAA;YAC5D,OAAO,MAAM,CAAC,OAAO,IAAI,WAAW,CAAA;QACtC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;IACD,OAAO,WAAW,CAAA;AACpB,CAAC;AAED,SAAS,OAAO,CAAC,MAAc,EAAE,IAAY,EAAE,IAAc;IAC3D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAA;QAC5B,MAAM,OAAO,GAAG,GAAG,OAAO,GAAG,IAAI,EAAE,CAAA;QACnC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAA;QAC5B,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAA;QACzC,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,oBAAY,CAAC,CAAC,CAAC,mBAAW,CAAA;QAE/C,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,kBAAkB;YAClC,MAAM,EAAE,kBAAkB;SAC3B,CAAA;QAED,MAAM,MAAM,GAAG,UAAU,EAAE,CAAA;QAC3B,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,WAAW,CAAC,GAAG,MAAM,CAAA;QAC/B,CAAC;QAED,MAAM,GAAG,GAAG,EAAE,CACZ,OAAO,EACP,EAAE,MAAM,EAAE,OAAO,EAAE,EACnB,CAAC,GAAG,EAAE,EAAE;YACN,IAAI,IAAI,GAAG,EAAE,CAAA;YACb,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;YAC7D,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,IAAI,CAAC;oBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;gBAC3B,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,CAAC,IAAI,CAAC,CAAA;gBACf,CAAC;YACH,CAAC,CAAC,CAAA;QACJ,CAAC,CACF,CAAA;QAED,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QACvB,IAAI,IAAI;YAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA;QACzC,GAAG,CAAC,GAAG,EAAE,CAAA;IACX,CAAC,CAAC,CAAA;AACJ,CAAC;AAEY,QAAA,GAAG,GAAG;IACjB,GAAG,EAAE,CAAc,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAe;IACtE,IAAI,EAAE,CAAc,IAAY,EAAE,IAAc,EAAE,EAAE,CAClD,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAe;IAC3C,GAAG,EAAE,CAAc,IAAY,EAAE,IAAc,EAAE,EAAE,CACjD,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAe;IAC1C,MAAM,EAAE,CAAc,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAe;CAC7E,CAAA;AAED,SAAgB,SAAS;IACvB,OAAO,UAAU,EAAE,CAAA;AACrB,CAAC;AAED,SAAgB,SAAS;IACvB,OAAO,UAAU,EAAE,CAAA;AACrB,CAAC"}

package/dist/commands/context.d.ts

@@ -0,0 +1,2 @@
+export declare function contextCommand(args: string[]): Promise<void>;
+//# sourceMappingURL=context.d.ts.map

package/dist/commands/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/commands/context.ts"],"names":[],"mappings":"AAGA,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAmFlE"}

package/dist/commands/context.js

@@ -0,0 +1,84 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.contextCommand = contextCommand;
+const api_client_1 = require("../api-client");
+const git_1 = require("../git");
+async function contextCommand(args) {
+    if (!(0, git_1.isGitRepo)()) {
+        console.error('Error: not a git repository.');
+        process.exit(1);
+    }
+    const remote = (0, git_1.getGitRemote)();
+    if (!remote) {
+        console.error('Error: no git remote found.');
+        process.exit(1);
+    }
+    // Get workspace
+    let workspace;
+    try {
+        workspace = await api_client_1.api.get(`/workspaces/${remote.org}`);
+    }
+    catch {
+        console.error(`Workspace '${remote.org}' not found. Run 'driftless init' first.`);
+        process.exit(1);
+    }
+    const subCommand = args[0];
+    if (subCommand === 'list') {
+        try {
+            const watchers = (await api_client_1.api.get(`/workspaces/${remote.org}/watchers`));
+            if (watchers.length === 0) {
+                console.log('No watchers defined yet.');
+                console.log('Create one with: driftless context add "name" --what "..." --how "..." --where "..."');
+            }
+            else {
+                for (const w of watchers) {
+                    console.log(`  • ${w.slug} — ${w.name}`);
+                }
+            }
+        }
+        catch {
+            console.log('Watchers API not available yet (coming in M5).');
+        }
+        return;
+    }
+    if (subCommand === 'get') {
+        const slug = args[1];
+        if (!slug) {
+            console.error('Usage: driftless context get <name>');
+            process.exit(1);
+        }
+        try {
+            const watcher = await api_client_1.api.get(`/workspaces/${remote.org}/watchers/${slug}`);
+            console.log(`Name:     ${watcher.name}`);
+            console.log(`What:     ${watcher.what || 'N/A'}`);
+            console.log(`How:      ${watcher.how || 'N/A'}`);
+            console.log(`Where:    ${watcher.where_files?.join(', ') || 'N/A'}`);
+            console.log(`Used by:  ${watcher.where_used_by?.join(', ') || 'N/A'}`);
+            console.log(`Updated:  ${watcher.last_updated || 'never'}`);
+        }
+        catch {
+            console.log(`Watcher '${slug}' not found or API not available.`);
+        }
+        return;
+    }
+    if (subCommand === 'add') {
+        const name = args[1];
+        if (!name) {
+            console.error('Usage: driftless context add "name" --what "..." --how "..." --where "..."');
+            process.exit(1);
+        }
+        try {
+            await api_client_1.api.post(`/workspaces/${remote.org}/watchers`, {
+                name,
+                slug: name.toLowerCase().replace(/\s+/g, '-'),
+            });
+            console.log(`Watcher '${name}' created.`);
+        }
+        catch {
+            console.log('Watchers API not available yet (coming in M5).');
+        }
+        return;
+    }
+    console.log('Usage: driftless context <list|get|add> [args]');
+}
+//# sourceMappingURL=context.js.map

package/dist/commands/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/commands/context.ts"],"names":[],"mappings":";;AAGA,wCAmFC;AAtFD,8CAAmC;AACnC,gCAAgD;AAEzC,KAAK,UAAU,cAAc,CAAC,IAAc;IACjD,IAAI,CAAC,IAAA,eAAS,GAAE,EAAE,CAAC;QACjB,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAA;QAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,kBAAY,GAAE,CAAA;IAC7B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAA;QAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,gBAAgB;IAChB,IAAI,SAAc,CAAA;IAClB,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,gBAAG,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,GAAG,EAAE,CAAC,CAAA;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,cAAc,MAAM,CAAC,GAAG,0CAA0C,CAAC,CAAA;QACjF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;IAE1B,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAU,CAAC,MAAM,gBAAG,CAAC,GAAG,CACpC,eAAe,MAAM,CAAC,GAAG,WAAW,CACrC,CAAU,CAAA;YACX,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1B,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAA;gBACvC,OAAO,CAAC,GAAG,CAAC,sFAAsF,CAAC,CAAA;YACrG,CAAC;iBAAM,CAAC;gBACN,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;oBACzB,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;gBAC1C,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAA;QAC/D,CAAC;QACD,OAAM;IACR,CAAC;IAED,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QACpB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAA;YACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,GAAQ,MAAM,gBAAG,CAAC,GAAG,CAChC,eAAe,MAAM,CAAC,GAAG,aAAa,IAAI,EAAE,CAC7C,CAAA;YACD,OAAO,CAAC,GAAG,CAAC,aAAa,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;YACxC,OAAO,CAAC,GAAG,CAAC,aAAa,OAAO,CAAC,IAAI,IAAI,KAAK,EAAE,CAAC,CAAA;YACjD,OAAO,CAAC,GAAG,CAAC,aAAa,OAAO,CAAC,GAAG,IAAI,KAAK,EAAE,CAAC,CAAA;YAChD,OAAO,CAAC,GAAG,CAAC,aAAa,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC,CAAA;YACpE,OAAO,CAAC,GAAG,CAAC,aAAa,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC,CAAA;YACtE,OAAO,CAAC,GAAG,CAAC,aAAa,OAAO,CAAC,YAAY,IAAI,OAAO,EAAE,CAAC,CAAA;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,mCAAmC,CAAC,CAAA;QAClE,CAAC;QACD,OAAM;IACR,CAAC;IAED,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QACpB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,KAAK,CAAC,4EAA4E,CAAC,CAAA;YAC3F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC;QACD,IAAI,CAAC;YACH,MAAM,gBAAG,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,GAAG,WAAW,EAAE;gBACnD,IAAI;gBACJ,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;aAC9C,CAAC,CAAA;YACF,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,YAAY,CAAC,CAAA;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAA;QAC/D,CAAC;QACD,OAAM;IACR,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAA;AAC/D,CAAC"}

package/dist/commands/init.d.ts

@@ -0,0 +1,2 @@
+export declare function initCommand(): Promise<void>;
+//# sourceMappingURL=init.d.ts.map

package/dist/commands/init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAGA,wBAAsB,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CA8FjD"}

package/dist/commands/init.js

@@ -0,0 +1,89 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.initCommand = initCommand;
+const api_client_1 = require("../api-client");
+const git_1 = require("../git");
+async function initCommand() {
+    console.log('Driftless — context integrity for engineering teams\n');
+    if (!(0, git_1.isGitRepo)()) {
+        console.error('Error: not a git repository. Run this command from the root of your repo.');
+        process.exit(1);
+    }
+    const remote = (0, git_1.getGitRemote)();
+    if (!remote) {
+        console.error('Error: no git remote found. Add a remote first with: git remote add origin <url>');
+        process.exit(1);
+    }
+    console.log(`Repository: ${remote.org}/${remote.repo}`);
+    // 1. Create workspace (or find existing)
+    let workspace;
+    try {
+        workspace = await api_client_1.api.get(`/workspaces/${remote.org}`);
+        console.log(`Workspace: ${remote.org} (existing)`);
+    }
+    catch {
+        workspace = await api_client_1.api.post('/workspaces', {
+            name: remote.org,
+            slug: remote.org,
+        });
+        console.log(`Workspace: ${remote.org} (created)`);
+    }
+    // 2. Connect repo (or find existing)
+    let repo;
+    try {
+        const repos = (await api_client_1.api.get(`/workspaces/${remote.org}/repos`));
+        repo = repos.find((r) => r.github_org === remote.org && r.github_repo === remote.repo);
+        if (repo) {
+            console.log(`Repo: ${remote.repo} (existing)`);
+        }
+    }
+    catch {
+        // ignore
+    }
+    if (!repo) {
+        repo = await api_client_1.api.post(`/workspaces/${remote.org}/repos`, {
+            github_org: remote.org,
+            github_repo: remote.repo,
+        });
+        console.log(`Repo: ${remote.repo} (connected)`);
+    }
+    // 3. Scan repo
+    console.log('\nScanning codebase...');
+    const scanResult = await api_client_1.api.post(`/workspaces/${remote.org}/repos/${repo.id}/scan`);
+    if (scanResult.status === 'error') {
+        console.error(`Scan failed: ${scanResult.error}`);
+        process.exit(1);
+    }
+    const { summary } = scanResult;
+    console.log(`\nResults:`);
+    console.log(`  Framework:    ${summary.framework}`);
+    console.log(`  Type:         ${summary.system_type}`);
+    console.log(`  Auth:         ${summary.auth_patterns?.join(', ') || 'none'}`);
+    console.log(`  Endpoints:    ${summary.endpoints}`);
+    console.log(`  Guards:       ${summary.guards}`);
+    console.log(`  Services:     ${summary.services}`);
+    console.log(`  Modules:      ${summary.modules}`);
+    // 4. Suggest rules
+    console.log('\nSuggested rules:');
+    const suggestions = [
+        ...(summary.auth_patterns?.includes('apikey')
+            ? ['Every B2B endpoint must use BusinessAccessGuard']
+            : []),
+        ...(summary.guards > 3 ? ['Services must not import controllers directly'] : []),
+        ...(summary.endpoints > 50
+            ? [`app.controller.ts should be split — over 50 endpoints detected`]
+            : []),
+    ];
+    if (suggestions.length === 0) {
+        console.log('  No automatic suggestions for this repo.');
+    }
+    else {
+        for (const s of suggestions) {
+            console.log(`  • ${s}`);
+        }
+        console.log('\nAccept these suggestions? Run:');
+        console.log(`  driftless rule accept --all`);
+    }
+    console.log(`\nDone! Run 'driftless scan --diff' before pushing to check for violations.`);
+}
+//# sourceMappingURL=init.js.map

package/dist/commands/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":";;AAGA,kCA8FC;AAjGD,8CAAmC;AACnC,gCAAgD;AAEzC,KAAK,UAAU,WAAW;IAC/B,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAA;IAEpE,IAAI,CAAC,IAAA,eAAS,GAAE,EAAE,CAAC;QACjB,OAAO,CAAC,KAAK,CAAC,2EAA2E,CAAC,CAAA;QAC1F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,kBAAY,GAAE,CAAA;IAC7B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CAAC,kFAAkF,CAAC,CAAA;QACjG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;IAEvD,yCAAyC;IACzC,IAAI,SAAc,CAAA;IAClB,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,gBAAG,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,GAAG,EAAE,CAAC,CAAA;QACtD,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,GAAG,aAAa,CAAC,CAAA;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,SAAS,GAAG,MAAM,gBAAG,CAAC,IAAI,CAAC,aAAa,EAAE;YACxC,IAAI,EAAE,MAAM,CAAC,GAAG;YAChB,IAAI,EAAE,MAAM,CAAC,GAAG;SACjB,CAAC,CAAA;QACF,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,GAAG,YAAY,CAAC,CAAA;IACnD,CAAC;IAED,qCAAqC;IACrC,IAAI,IAAS,CAAA;IACb,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,CAAC,MAAM,gBAAG,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAU,CAAA;QACzE,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,WAAW,KAAK,MAAM,CAAC,IAAI,CAAC,CAAA;QAC3F,IAAI,IAAI,EAAE,CAAC;YACT,OAAO,CAAC,GAAG,CAAC,SAAS,MAAM,CAAC,IAAI,aAAa,CAAC,CAAA;QAChD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;IAED,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,GAAG,MAAM,gBAAG,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,GAAG,QAAQ,EAAE;YACvD,UAAU,EAAE,MAAM,CAAC,GAAG;YACtB,WAAW,EAAE,MAAM,CAAC,IAAI;SACzB,CAAC,CAAA;QACF,OAAO,CAAC,GAAG,CAAC,SAAS,MAAM,CAAC,IAAI,cAAc,CAAC,CAAA;IACjD,CAAC;IAED,eAAe;IACf,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAA;IACrC,MAAM,UAAU,GAAQ,MAAM,gBAAG,CAAC,IAAI,CACpC,eAAe,MAAM,CAAC,GAAG,UAAU,IAAI,CAAC,EAAE,OAAO,CAClD,CAAA;IAED,IAAI,UAAU,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,gBAAgB,UAAU,CAAC,KAAK,EAAE,CAAC,CAAA;QACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,GAAG,UAAU,CAAA;IAC9B,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;IACzB,OAAO,CAAC,GAAG,CAAC,mBAAmB,OAAO,CAAC,SAAS,EAAE,CAAC,CAAA;IACnD,OAAO,CAAC,GAAG,CAAC,mBAAmB,OAAO,CAAC,WAAW,EAAE,CAAC,CAAA;IACrD,OAAO,CAAC,GAAG,CAAC,mBAAmB,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC,CAAA;IAC7E,OAAO,CAAC,GAAG,CAAC,mBAAmB,OAAO,CAAC,SAAS,EAAE,CAAC,CAAA;IACnD,OAAO,CAAC,GAAG,CAAC,mBAAmB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAChD,OAAO,CAAC,GAAG,CAAC,mBAAmB,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAA;IAClD,OAAO,CAAC,GAAG,CAAC,mBAAmB,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;IAEjD,mBAAmB;IACnB,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAA;IACjC,MAAM,WAAW,GAAG;QAClB,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,QAAQ,CAAC,QAAQ,CAAC;YAC3C,CAAC,CAAC,CAAC,iDAAiD,CAAC;YACrD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,+CAA+C,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,OAAO,CAAC,SAAS,GAAG,EAAE;YACxB,CAAC,CAAC,CAAC,gEAAgE,CAAC;YACpE,CAAC,CAAC,EAAE,CAAC;KACR,CAAA;IAED,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAA;IAC1D,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACzB,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAA;QAC/C,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAA;IAC9C,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,6EAA6E,CAAC,CAAA;AAC5F,CAAC"}

package/dist/commands/install-skill.d.ts

@@ -0,0 +1,2 @@
+export declare function installSkillCommand(): void;
+//# sourceMappingURL=install-skill.d.ts.map

package/dist/commands/install-skill.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-skill.d.ts","sourceRoot":"","sources":["../../src/commands/install-skill.ts"],"names":[],"mappings":"AAGA,wBAAgB,mBAAmB,IAAI,IAAI,CA4C1C"}

package/dist/commands/install-skill.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.installSkillCommand = installSkillCommand;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+function installSkillCommand() {
+    const cwd = process.cwd();
+    const agentsPath = (0, node_path_1.resolve)(cwd, 'AGENTS.md');
+    const template = `# Driftless — Team Codebase Memory
+
+Driftless Cloud is the source of truth for this repo's architecture context.
+
+Before touching backend architecture, auth, routes, guards, services, modules, or package boundaries, load relevant context:
+
+\\\`\\\`\\\`bash
+driftless context get <feature>
+\\\`\\\`\\\`
+
+Before completing work, verify the current diff:
+
+\\\`\\\`\\\`bash
+driftless scan --diff
+\\\`\\\`\\\`
+
+If Driftless reports violations, fix them before finishing.
+
+If you discover durable context about the codebase, add it to the team memory:
+
+\\\`\\\`\\\`bash
+driftless context add "<name>" --what "..." --how "..." --where "..."
+\\\`\\\`\\\`
+
+Driftless is not local session memory. It is shared team context stored in Cloud and kept updated through scans, agent activity, and repo changes.
+`;
+    if ((0, node_fs_1.existsSync)(agentsPath)) {
+        console.log('AGENTS.md already exists. Appending Driftless section...');
+        const existing = require('node:fs').readFileSync(agentsPath, 'utf8');
+        if (existing.includes('Driftless — Context & Integrity')) {
+            console.log('Driftless section already present.');
+            return;
+        }
+        (0, node_fs_1.writeFileSync)(agentsPath, existing + '\n---\n\n' + template);
+    }
+    else {
+        (0, node_fs_1.writeFileSync)(agentsPath, template);
+    }
+    console.log(`Driftless skill installed at ${agentsPath}`);
+}
+//# sourceMappingURL=install-skill.js.map

package/dist/commands/install-skill.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-skill.js","sourceRoot":"","sources":["../../src/commands/install-skill.ts"],"names":[],"mappings":";;AAGA,kDA4CC;AA/CD,qCAAmD;AACnD,yCAAmC;AAEnC,SAAgB,mBAAmB;IACjC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAA;IACzB,MAAM,UAAU,GAAG,IAAA,mBAAO,EAAC,GAAG,EAAE,WAAW,CAAC,CAAA;IAE5C,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;CAyBlB,CAAA;IAEC,IAAI,IAAA,oBAAU,EAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAA;QACvE,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;QACpE,IAAI,QAAQ,CAAC,QAAQ,CAAC,iCAAiC,CAAC,EAAE,CAAC;YACzD,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAA;YACjD,OAAM;QACR,CAAC;QACD,IAAA,uBAAa,EAAC,UAAU,EAAE,QAAQ,GAAG,WAAW,GAAG,QAAQ,CAAC,CAAA;IAC9D,CAAC;SAAM,CAAC;QACN,IAAA,uBAAa,EAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;IACrC,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,gCAAgC,UAAU,EAAE,CAAC,CAAA;AAC3D,CAAC"}

package/dist/commands/login.d.ts

@@ -0,0 +1,2 @@
+export declare function loginCommand(args: string[]): Promise<void>;
+//# sourceMappingURL=login.d.ts.map

package/dist/commands/login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAeA,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA+ChE"}

package/dist/commands/login.js

@@ -0,0 +1,74 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loginCommand = loginCommand;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const node_readline_1 = require("node:readline");
+const node_child_process_1 = require("node:child_process");
+const node_os_1 = require("node:os");
+const CONFIG_DIR = (0, node_path_1.resolve)((0, node_os_1.homedir)(), '.driftless');
+const CONFIG_PATH = (0, node_path_1.resolve)(CONFIG_DIR, 'config.json');
+function openBrowser(url) {
+    const cmd = process.platform === 'darwin' ? 'open' :
+        process.platform === 'win32' ? 'start' : 'xdg-open';
+    (0, node_child_process_1.exec)(`${cmd} ${url}`);
+}
+async function loginCommand(args) {
+    // --key flag for quick setup (CI, scripts)
+    const keyIndex = args.indexOf('--key');
+    if (keyIndex !== -1 && args[keyIndex + 1]) {
+        const apiKey = args[keyIndex + 1];
+        saveConfig(apiKey);
+        return;
+    }
+    const apiUrl = process.env['DRIFTLESS_API_URL'] || 'https://api.driftless.icu/api/v1';
+    const dashboardUrl = 'https://driftless.icu';
+    console.log('Opening Driftless Dashboard to get your API key...');
+    console.log();
+    // Open browser to dashboard API keys section
+    openBrowser(dashboardUrl);
+    console.log('If the browser doesn\'t open, visit:');
+    console.log(`  ${dashboardUrl}`);
+    console.log();
+    console.log('1. Sign in with your account');
+    console.log('2. Go to Settings → API Keys');
+    console.log('3. Create a new API key');
+    console.log('4. Copy the key (starts with drift_)');
+    console.log();
+    // Interactive prompt
+    const rl = (0, node_readline_1.createInterface)({
+        input: process.stdin,
+        output: process.stdout,
+    });
+    const apiKey = await new Promise((resolve) => {
+        rl.question('Paste your API key: ', (answer) => {
+            rl.close();
+            resolve(answer.trim());
+        });
+    });
+    if (!apiKey.startsWith('drift_')) {
+        console.error('Error: API key must start with "drift_".');
+        console.error('Get a valid key from your Driftless Dashboard → Settings → API Keys.');
+        process.exit(1);
+    }
+    saveConfig(apiKey, apiUrl);
+}
+function saveConfig(apiKey, apiUrl) {
+    const url = apiUrl || 'https://api.driftless.icu/api/v1';
+    try {
+        if (!(0, node_fs_1.existsSync)(CONFIG_DIR)) {
+            (0, node_fs_1.mkdirSync)(CONFIG_DIR, { recursive: true });
+        }
+        (0, node_fs_1.writeFileSync)(CONFIG_PATH, JSON.stringify({ api_key: apiKey, api_url: url }, null, 2) + '\n');
+        console.log();
+        console.log('Logged in successfully.');
+        console.log(`  Config: ${CONFIG_PATH}`);
+        console.log();
+        console.log('Try: driftless scan --diff');
+    }
+    catch (err) {
+        console.error('Failed to save config:', err);
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=login.js.map

package/dist/commands/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":";;AAeA,oCA+CC;AA9DD,qCAA4E;AAC5E,yCAAmC;AACnC,iDAA+C;AAC/C,2DAAyC;AACzC,qCAAiC;AAEjC,MAAM,UAAU,GAAG,IAAA,mBAAO,EAAC,IAAA,iBAAO,GAAE,EAAE,YAAY,CAAC,CAAA;AACnD,MAAM,WAAW,GAAG,IAAA,mBAAO,EAAC,UAAU,EAAE,aAAa,CAAC,CAAA;AAEtD,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAClD,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAA;IACrD,IAAA,yBAAI,EAAC,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC,CAAA;AACvB,CAAC;AAEM,KAAK,UAAU,YAAY,CAAC,IAAc;IAC/C,2CAA2C;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IACtC,IAAI,QAAQ,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAA;QACjC,UAAU,CAAC,MAAM,CAAC,CAAA;QAClB,OAAM;IACR,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,kCAAkC,CAAA;IACrF,MAAM,YAAY,GAAG,uBAAuB,CAAA;IAE5C,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAA;IACjE,OAAO,CAAC,GAAG,EAAE,CAAA;IAEb,6CAA6C;IAC7C,WAAW,CAAC,YAAY,CAAC,CAAA;IAEzB,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAA;IACnD,OAAO,CAAC,GAAG,CAAC,KAAK,YAAY,EAAE,CAAC,CAAA;IAChC,OAAO,CAAC,GAAG,EAAE,CAAA;IACb,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAA;IAC3C,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAA;IAC3C,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAA;IACtC,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAA;IACnD,OAAO,CAAC,GAAG,EAAE,CAAA;IAEb,qBAAqB;IACrB,MAAM,EAAE,GAAG,IAAA,+BAAe,EAAC;QACzB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAA;IAEF,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;QACnD,EAAE,CAAC,QAAQ,CAAC,sBAAsB,EAAE,CAAC,MAAM,EAAE,EAAE;YAC7C,EAAE,CAAC,KAAK,EAAE,CAAA;YACV,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;QACxB,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAA;QACzD,OAAO,CAAC,KAAK,CAAC,sEAAsE,CAAC,CAAA;QACrF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;AAC5B,CAAC;AAED,SAAS,UAAU,CAAC,MAAc,EAAE,MAAe;IACjD,MAAM,GAAG,GAAG,MAAM,IAAI,kCAAkC,CAAA;IAExD,IAAI,CAAC;QACH,IAAI,CAAC,IAAA,oBAAU,EAAC,UAAU,CAAC,EAAE,CAAC;YAC5B,IAAA,mBAAS,EAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC5C,CAAC;QACD,IAAA,uBAAa,EACX,WAAW,EACX,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAClE,CAAA;QACD,OAAO,CAAC,GAAG,EAAE,CAAA;QACb,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAA;QACtC,OAAO,CAAC,GAAG,CAAC,aAAa,WAAW,EAAE,CAAC,CAAA;QACvC,OAAO,CAAC,GAAG,EAAE,CAAA;QACb,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAA;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAA;QAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;AACH,CAAC"}

package/dist/commands/scan.d.ts

@@ -0,0 +1,2 @@
+export declare function scanCommand(args: string[]): Promise<void>;
+//# sourceMappingURL=scan.d.ts.map

package/dist/commands/scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.d.ts","sourceRoot":"","sources":["../../src/commands/scan.ts"],"names":[],"mappings":"AAGA,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAoF/D"}

package/dist/commands/scan.js

@@ -0,0 +1,80 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.scanCommand = scanCommand;
+const api_client_1 = require("../api-client");
+const git_1 = require("../git");
+async function scanCommand(args) {
+    if (!(0, git_1.isGitRepo)()) {
+        console.error('Error: not a git repository.');
+        process.exit(1);
+    }
+    const remote = (0, git_1.getGitRemote)();
+    if (!remote) {
+        console.error('Error: no git remote found.');
+        process.exit(1);
+    }
+    // Get workspace + repo
+    let workspace;
+    try {
+        workspace = await api_client_1.api.get(`/workspaces/${remote.org}`);
+    }
+    catch {
+        console.error(`Workspace '${remote.org}' not found. Run 'driftless init' first.`);
+        process.exit(1);
+    }
+    const repos = (await api_client_1.api.get(`/workspaces/${remote.org}/repos`));
+    const repo = repos.find((r) => r.github_org === remote.org && r.github_repo === remote.repo);
+    if (!repo) {
+        console.error(`Repo '${remote.repo}' not found. Run 'driftless init' first.`);
+        process.exit(1);
+    }
+    // Get diff
+    const onlyDiff = args.includes('--diff');
+    let diff = '';
+    let source = '';
+    if (onlyDiff) {
+        diff = (0, git_1.getUncommittedDiff)();
+        source = 'uncommitted changes';
+        if (!diff) {
+            console.log('No uncommitted changes. Clean.');
+            process.exit(0);
+        }
+    }
+    else {
+        const staged = (0, git_1.getStagedDiff)();
+        const unstaged = (0, git_1.getUncommittedDiff)();
+        diff = [staged, unstaged].filter(Boolean).join('\n');
+        source = staged && unstaged ? 'staged + unstaged' : staged ? 'staged' : 'unstaged';
+        if (!diff) {
+            console.log('No changes to scan. Clean.');
+            process.exit(0);
+        }
+    }
+    const commitHash = (0, git_1.getLastCommitHash)();
+    const author = (0, git_1.getAuthorName)();
+    console.log(`Scanning ${source}...`);
+    // Evaluate
+    const result = await api_client_1.api.post('/scan', {
+        workspace_id: workspace.id,
+        repo_id: repo.id,
+        diff,
+        commit_hash: commitHash,
+        author,
+    });
+    if (result.status === 'clean') {
+        console.log('Clean — no violations detected.');
+        process.exit(0);
+    }
+    console.log(`\n${result.violations.length} violation(s) found:\n`);
+    for (const v of result.violations) {
+        const severityColor = v.severity === 'critical' || v.severity === 'high' ? '\x1b[31m' : '\x1b[33m';
+        console.log(`  ${severityColor}[${v.severity.toUpperCase()}]\x1b[0m ${v.rule_name}`);
+        console.log(`    ${v.explanation}`);
+        console.log(`    File: ${v.file_path}:${v.line_number}`);
+        console.log(`    Code: ${v.diff_snippet}`);
+        console.log();
+    }
+    console.log('Fix these violations before pushing.');
+    process.exit(1);
+}
+//# sourceMappingURL=scan.js.map

package/dist/commands/scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.js","sourceRoot":"","sources":["../../src/commands/scan.ts"],"names":[],"mappings":";;AAGA,kCAoFC;AAvFD,8CAAmC;AACnC,gCAAqH;AAE9G,KAAK,UAAU,WAAW,CAAC,IAAc;IAC9C,IAAI,CAAC,IAAA,eAAS,GAAE,EAAE,CAAC;QACjB,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAA;QAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,kBAAY,GAAE,CAAA;IAC7B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAA;QAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,uBAAuB;IACvB,IAAI,SAAc,CAAA;IAClB,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,gBAAG,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,GAAG,EAAE,CAAC,CAAA;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,cAAc,MAAM,CAAC,GAAG,0CAA0C,CAAC,CAAA;QACjF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,MAAM,KAAK,GAAU,CAAC,MAAM,gBAAG,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAU,CAAA;IAChF,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,WAAW,KAAK,MAAM,CAAC,IAAI,CAAC,CAAA;IACjG,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CAAC,SAAS,MAAM,CAAC,IAAI,0CAA0C,CAAC,CAAA;QAC7E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,WAAW;IACX,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;IACxC,IAAI,IAAI,GAAG,EAAE,CAAA;IACb,IAAI,MAAM,GAAG,EAAE,CAAA;IAEf,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,GAAG,IAAA,wBAAkB,GAAE,CAAA;QAC3B,MAAM,GAAG,qBAAqB,CAAA;QAC9B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAA;YAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,IAAA,mBAAa,GAAE,CAAA;QAC9B,MAAM,QAAQ,GAAG,IAAA,wBAAkB,GAAE,CAAA;QACrC,IAAI,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACpD,MAAM,GAAG,MAAM,IAAI,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAA;QAClF,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAA;YACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,IAAA,uBAAiB,GAAE,CAAA;IACtC,MAAM,MAAM,GAAG,IAAA,mBAAa,GAAE,CAAA;IAE9B,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,KAAK,CAAC,CAAA;IAEpC,WAAW;IACX,MAAM,MAAM,GAAQ,MAAM,gBAAG,CAAC,IAAI,CAAC,OAAO,EAAE;QAC1C,YAAY,EAAE,SAAS,CAAC,EAAE;QAC1B,OAAO,EAAE,IAAI,CAAC,EAAE;QAChB,IAAI;QACJ,WAAW,EAAE,UAAU;QACvB,MAAM;KACP,CAAC,CAAA;IAEF,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAA;QAC9C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,UAAU,CAAC,MAAM,wBAAwB,CAAC,CAAA;IAElE,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,UAAmB,EAAE,CAAC;QAC3C,MAAM,aAAa,GACjB,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAA;QAC9E,OAAO,CAAC,GAAG,CAAC,KAAK,aAAa,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC,CAAA;QACpF,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,CAAA;QACnC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAA;QACxD,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,YAAY,EAAE,CAAC,CAAA;QAC1C,OAAO,CAAC,GAAG,EAAE,CAAA;IACf,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAA;IACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC"}

package/dist/git.d.ts

@@ -0,0 +1,10 @@
+export declare function getGitRemote(): {
+    org: string;
+    repo: string;
+} | null;
+export declare function isGitRepo(): boolean;
+export declare function getUncommittedDiff(): string;
+export declare function getStagedDiff(): string;
+export declare function getLastCommitHash(): string;
+export declare function getAuthorName(): string;
+//# sourceMappingURL=git.d.ts.map

package/dist/git.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../src/git.ts"],"names":[],"mappings":"AAIA,wBAAgB,YAAY,IAAI;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAgBnE;AAED,wBAAgB,SAAS,IAAI,OAAO,CAEnC;AAED,wBAAgB,kBAAkB,IAAI,MAAM,CAM3C;AAED,wBAAgB,aAAa,IAAI,MAAM,CAMtC;AAED,wBAAgB,iBAAiB,IAAI,MAAM,CAM1C;AAED,wBAAgB,aAAa,IAAI,MAAM,CAMtC"}

package/dist/git.js

@@ -0,0 +1,64 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getGitRemote = getGitRemote;
+exports.isGitRepo = isGitRepo;
+exports.getUncommittedDiff = getUncommittedDiff;
+exports.getStagedDiff = getStagedDiff;
+exports.getLastCommitHash = getLastCommitHash;
+exports.getAuthorName = getAuthorName;
+const node_child_process_1 = require("node:child_process");
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+function getGitRemote() {
+    try {
+        const url = (0, node_child_process_1.execSync)('git config --get remote.origin.url', {
+            encoding: 'utf8',
+            cwd: process.cwd(),
+        }).trim();
+        // git@github.com:org/repo.git or https://github.com/org/repo.git
+        const match = url.match(/[:/]([^/]+)\/([^/]+?)(?:\.git)?$/);
+        if (match) {
+            return { org: match[1], repo: match[2] };
+        }
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+function isGitRepo() {
+    return (0, node_fs_1.existsSync)((0, node_path_1.resolve)(process.cwd(), '.git'));
+}
+function getUncommittedDiff() {
+    try {
+        return (0, node_child_process_1.execSync)('git diff', { encoding: 'utf8', cwd: process.cwd() }).trim();
+    }
+    catch {
+        return '';
+    }
+}
+function getStagedDiff() {
+    try {
+        return (0, node_child_process_1.execSync)('git diff --staged', { encoding: 'utf8', cwd: process.cwd() }).trim();
+    }
+    catch {
+        return '';
+    }
+}
+function getLastCommitHash() {
+    try {
+        return (0, node_child_process_1.execSync)('git rev-parse HEAD', { encoding: 'utf8', cwd: process.cwd() }).trim();
+    }
+    catch {
+        return 'unknown';
+    }
+}
+function getAuthorName() {
+    try {
+        return (0, node_child_process_1.execSync)('git config user.name', { encoding: 'utf8', cwd: process.cwd() }).trim();
+    }
+    catch {
+        return 'unknown';
+    }
+}
+//# sourceMappingURL=git.js.map

package/dist/git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../src/git.ts"],"names":[],"mappings":";;AAIA,oCAgBC;AAED,8BAEC;AAED,gDAMC;AAED,sCAMC;AAED,8CAMC;AAED,sCAMC;AAxDD,2DAA6C;AAC7C,qCAAoC;AACpC,yCAAmC;AAEnC,SAAgB,YAAY;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAA,6BAAQ,EAAC,oCAAoC,EAAE;YACzD,QAAQ,EAAE,MAAM;YAChB,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;SACnB,CAAC,CAAC,IAAI,EAAE,CAAA;QAET,iEAAiE;QACjE,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAA;QAC3D,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;QAC1C,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,SAAgB,SAAS;IACvB,OAAO,IAAA,oBAAU,EAAC,IAAA,mBAAO,EAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC,CAAA;AACnD,CAAC;AAED,SAAgB,kBAAkB;IAChC,IAAI,CAAC;QACH,OAAO,IAAA,6BAAQ,EAAC,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED,SAAgB,aAAa;IAC3B,IAAI,CAAC;QACH,OAAO,IAAA,6BAAQ,EAAC,mBAAmB,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IACvF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED,SAAgB,iBAAiB;IAC/B,IAAI,CAAC;QACH,OAAO,IAAA,6BAAQ,EAAC,oBAAoB,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IACxF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED,SAAgB,aAAa;IAC3B,IAAI,CAAC;QACH,OAAO,IAAA,6BAAQ,EAAC,sBAAsB,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IAC1F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js

@@ -0,0 +1,61 @@
+#!/usr/bin/env node
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const init_1 = require("./commands/init");
+const scan_1 = require("./commands/scan");
+const context_1 = require("./commands/context");
+const install_skill_1 = require("./commands/install-skill");
+const login_1 = require("./commands/login");
+async function main() {
+    const args = process.argv.slice(2);
+    const command = args[0];
+    switch (command) {
+        case 'init':
+            await (0, init_1.initCommand)();
+            break;
+        case 'scan':
+            await (0, scan_1.scanCommand)(args.slice(1));
+            break;
+        case 'context':
+            await (0, context_1.contextCommand)(args.slice(1));
+            break;
+        case 'install-skill':
+            (0, install_skill_1.installSkillCommand)();
+            break;
+        case 'login':
+            (0, login_1.loginCommand)(args.slice(1));
+            break;
+        case undefined:
+        case '--help':
+        case '-h':
+            console.log(`Driftless CLI v0.1.0
+
+Usage:
+  driftless login --key <key>  Authenticate with API key
+  driftless init              Connect repo, scan, suggest rules
+  driftless scan              Scan staged + uncommitted changes
+  driftless scan --diff       Scan uncommitted changes only
+  driftless context list      List all watchers
+  driftless context get <name>  Get watcher context
+  driftless context add <name>  Create new watcher
+  driftless install-skill     Install AGENTS.md skill
+
+Auth priority:
+  1. DRIFTLESS_API_KEY env var
+  2. ~/.driftless/config.json
+
+Environment:
+  DRIFTLESS_API_URL   API server URL (default: http://localhost:3000/api/v1)
+`);
+            break;
+        default:
+            console.error(`Unknown command: ${command}`);
+            console.error('Run driftless --help for usage.');
+            process.exit(1);
+    }
+}
+main().catch((err) => {
+    console.error('Error:', err.message);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAEA,0CAA6C;AAC7C,0CAA6C;AAC7C,gDAAmD;AACnD,4DAA8D;AAC9D,4CAA+C;AAE/C,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAClC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;IAEvB,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,MAAM;YACT,MAAM,IAAA,kBAAW,GAAE,CAAA;YACnB,MAAK;QACP,KAAK,MAAM;YACT,MAAM,IAAA,kBAAW,EAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;YAChC,MAAK;QACP,KAAK,SAAS;YACZ,MAAM,IAAA,wBAAc,EAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;YACnC,MAAK;QACP,KAAK,eAAe;YAClB,IAAA,mCAAmB,GAAE,CAAA;YACrB,MAAK;QACP,KAAK,OAAO;YACV,IAAA,oBAAY,EAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;YAC3B,MAAK;QACP,KAAK,SAAS,CAAC;QACf,KAAK,QAAQ,CAAC;QACd,KAAK,IAAI;YACP,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;CAkBjB,CAAC,CAAA;YACI,MAAK;QACP;YACE,OAAO,CAAC,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAA;YAC5C,OAAO,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAA;YAChD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACnB,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;IACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC,CAAC,CAAA"}

package/package.json

@@ -0,0 +1,27 @@
+{
+  "name": "@driftless-sh/cli",
+  "version": "0.1.0",
+  "description": "Driftless CLI — context integrity for AI engineering teams",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/driftless-sh/driftless-skill.git"
+  },
+  "bin": {
+    "driftless": "dist/index.js"
+  },
+  "files": [
+    "dist/"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc",
+    "clean": "rm -rf dist"
+  },
+  "devDependencies": {
+    "typescript": "^5.8.3",
+    "@types/node": "^22.15.3"
+  }
+}