@fulmenhq/tsfulmen 0.1.13 → 0.2.0

package/dist/index.js

@@ -1,4 +1,3 @@
-import 'crypto';
 import { spawn } from 'child_process';
 import { readFile, writeFile, access, mkdir } from 'fs/promises';
 import { parse, stringify, parseDocument } from 'yaml';
@@ -10,6 +9,7 @@ import addFormats from 'ajv-formats';
 import { pipeline, Readable } from 'stream';
 import picomatch from 'picomatch';
 import { suggest as suggest$1, substringSimilarity, score as score$1, normalize as normalize$1, jaro_winkler, damerau_levenshtein, osa_distance, levenshtein } from '@3leaps/string-metrics-wasm';
+import 'crypto';
 import { Command } from 'commander';
 import { existsSync, mkdirSync, statSync, createReadStream, createWriteStream, readdirSync, lstatSync } from 'fs';
 import { createGunzip, createGzip } from 'zlib';
@@ -42,68 +42,6 @@ var init_constants = __esm({
     MAX_ANCESTOR_SEARCH_DEPTH = 20;
   }
 });
-var init_correlation = __esm({
-  "src/errors/correlation.ts"() {
-  }
-});
-
-// src/errors/severity.ts
-function getDefaultSeverity() {
-  return {
-    name: Severity.MEDIUM,
-    level: 2
-  };
-}
-var Severity, SEVERITY_LEVELS;
-var init_severity = __esm({
-  "src/errors/severity.ts"() {
-    Severity = {
-      INFO: "info",
-      LOW: "low",
-      MEDIUM: "medium",
-      HIGH: "high",
-      CRITICAL: "critical"
-    };
-    SEVERITY_LEVELS = {
-      info: 0,
-      low: 1,
-      medium: 2,
-      high: 3,
-      critical: 4
-    };
-  }
-});
-
-// src/errors/serialization.ts
-function extractErrorMessage(error) {
-  if (error instanceof Error) {
-    return error.message;
-  }
-  if (isErrorLike(error)) {
-    return error.message;
-  }
-  if (typeof error === "string") {
-    return error;
-  }
-  return String(error);
-}
-function extractStackTrace(error) {
-  if (error instanceof Error) {
-    return error.stack;
-  }
-  if (isErrorLike(error) && typeof error.stack === "string") {
-    return error.stack;
-  }
-  return void 0;
-}
-function isErrorLike(value) {
-  return typeof value === "object" && value !== null && "message" in value && typeof value.message === "string";
-}
-var init_serialization = __esm({
-  "src/errors/serialization.ts"() {
-    init_severity();
-  }
-});
 
 // src/schema/errors.ts
 var errors_exports = {};
@@ -1594,7 +1532,10 @@ async function loadReferencedSchema(uri) {
   const repoRoot = join(__dirname4, "..", "..");
   let resolvedPath;
   if (uri.startsWith("https://schemas.fulmenhq.dev/")) {
-    const relativePath = uri.replace("https://schemas.fulmenhq.dev/", "");
+    let relativePath = uri.replace("https://schemas.fulmenhq.dev/", "");
+    if (relativePath.startsWith("crucible/")) {
+      relativePath = relativePath.slice("crucible/".length);
+    }
     if (relativePath.startsWith("config/taxonomy/")) {
       resolvedPath = join(
         repoRoot,
@@ -1811,7 +1752,9 @@ async function compileSchemaById(schemaId, registryOptions) {
     const aliases = [];
     const normalizedRelativePath = metadata.relativePath.replace(/\\/g, "/");
     if (normalizedRelativePath) {
-      aliases.push(new URL(normalizedRelativePath, "https://schemas.fulmenhq.dev/").toString());
+      aliases.push(
+        new URL(`crucible/${normalizedRelativePath}`, "https://schemas.fulmenhq.dev/").toString()
+      );
     }
     return compileSchema(content, { aliases });
   } catch (error) {
@@ -2329,6 +2272,12 @@ var init_exitCodes = __esm({
       EXIT_TEST_USAGE_ERROR: 94,
       EXIT_TEST_NO_TESTS_COLLECTED: 95,
       EXIT_COVERAGE_THRESHOLD_NOT_MET: 96,
+      // Shell & Process Control (124-127)
+      // Exit codes from shell conventions and process control utilities (timeout, exec)
+      EXIT_TIMEOUT: 124,
+      EXIT_TIMEOUT_INTERNAL: 125,
+      EXIT_CANNOT_EXECUTE: 126,
+      EXIT_NOT_FOUND: 127,
       // Signal-Induced Exits (128-165)
       // Process terminated by Unix signals (128+N pattern per POSIX). Signal codes follow Linux numbering; macOS/FreeBSD differ for SIGUSR1/SIGUSR2. For full signal semantics, see config/library/foundry/signals.yaml. For signal handling patterns, see docs/standards/library/modules/signal-handling.md.
       EXIT_SIGNAL_HUP: 129,
@@ -2666,6 +2615,36 @@ var init_exitCodes = __esm({
         context: "Code coverage validation, quality gate failure",
         category: "testing"
       },
+      124: {
+        code: 124,
+        name: "EXIT_TIMEOUT",
+        description: "Command timed out before completion",
+        context: "GNU timeout or similar utility terminated command after deadline",
+        category: "shell"
+      },
+      125: {
+        code: 125,
+        name: "EXIT_TIMEOUT_INTERNAL",
+        description: "Timeout utility itself failed",
+        context: "Error in timeout tool before or during command execution (not command failure)",
+        category: "shell"
+      },
+      126: {
+        code: 126,
+        name: "EXIT_CANNOT_EXECUTE",
+        description: "Command found but could not be executed",
+        context: "Permission denied, not executable, exec format error",
+        category: "shell",
+        bsdEquivalent: "EX_NOPERM (partial)"
+      },
+      127: {
+        code: 127,
+        name: "EXIT_NOT_FOUND",
+        description: "Command not found",
+        context: "Executable not found in PATH or specified path does not exist",
+        category: "shell",
+        bsdEquivalent: "EX_UNAVAILABLE (partial)"
+      },
       129: {
         code: 129,
         name: "EXIT_SIGNAL_HUP",
@@ -4874,554 +4853,179 @@ var init_cache = __esm({
     cachedIdentity = null;
   }
 });
-async function discoverIdentityPath(options) {
-  if (options?.path) {
-    const exists = await fileExists(options.path);
-    if (!exists) {
-      throw AppIdentityError.notFound([options.path]);
-    }
-    return { path: options.path, source: "explicit" };
-  }
-  const envPath = process.env[APP_IDENTITY_ENV_VAR];
-  if (envPath) {
-    const exists = await fileExists(envPath);
-    if (!exists) {
-      throw AppIdentityError.envOverrideMissing(envPath);
-    }
-    return { path: envPath, source: "env" };
-  }
-  const startDir = options?.startDir || process.cwd();
-  const result = await searchAncestors(startDir);
-  if (result) {
-    return { path: result, source: "ancestor" };
-  }
-  return null;
-}
-async function searchAncestors(startDir) {
-  let currentDir = startDir;
-  const searchedPaths = [];
-  for (let i = 0; i < MAX_ANCESTOR_SEARCH_DEPTH; i++) {
-    const candidatePath = join(currentDir, APP_IDENTITY_DIR, APP_IDENTITY_FILENAME);
-    searchedPaths.push(candidatePath);
-    if (await fileExists(candidatePath)) {
-      return candidatePath;
-    }
-    const parentDir = dirname(currentDir);
-    if (parentDir === currentDir) {
-      throw AppIdentityError.notFound(searchedPaths);
-    }
-    currentDir = parentDir;
-  }
-  throw AppIdentityError.notFound(searchedPaths);
-}
-async function fileExists(path) {
-  try {
-    await access(path);
-    return true;
-  } catch {
-    return false;
-  }
-}
-var init_discovery = __esm({
-  "src/appidentity/discovery.ts"() {
-    init_constants();
-    init_errors5();
+var init_correlation = __esm({
+  "src/errors/correlation.ts"() {
   }
 });
 
-// src/appidentity/loader.ts
-var loader_exports = {};
-__export(loader_exports, {
-  clearIdentityCache: () => clearIdentityCache,
-  getCachedIdentity: () => getCachedIdentity,
-  loadIdentity: () => loadIdentity
-});
-function deepFreeze5(obj) {
-  Object.freeze(obj);
-  Object.getOwnPropertyNames(obj).forEach((prop) => {
-    const value = obj[prop];
-    if (value !== null && (typeof value === "object" || typeof value === "function") && !Object.isFrozen(value)) {
-      deepFreeze5(value);
-    }
-  });
-  return obj;
+// src/errors/severity.ts
+function getDefaultSeverity() {
+  return {
+    name: Severity.MEDIUM,
+    level: 2
+  };
 }
-async function loadIdentity(options) {
-  if (options?.identity) {
-    return deepFreeze5(structuredClone(options.identity));
+var Severity, SEVERITY_LEVELS;
+var init_severity = __esm({
+  "src/errors/severity.ts"() {
+    Severity = {
+      INFO: "info",
+      LOW: "low",
+      MEDIUM: "medium",
+      HIGH: "high",
+      CRITICAL: "critical"
+    };
+    SEVERITY_LEVELS = {
+      info: 0,
+      low: 1,
+      medium: 2,
+      high: 3,
+      critical: 4
+    };
   }
-  if (!options?.skipCache) {
-    const cached = getCachedIdentity();
-    if (cached) {
-      return cached;
-    }
+});
+
+// src/errors/serialization.ts
+function extractErrorMessage(error) {
+  if (error instanceof Error) {
+    return error.message;
   }
-  const discovery = await discoverIdentityPath({
-    path: options?.path,
-    startDir: options?.startDir
-  });
-  if (!discovery) {
-    throw AppIdentityError.notFound([]);
+  if (isErrorLike(error)) {
+    return error.message;
   }
-  let content;
-  try {
-    content = await readFile(discovery.path, "utf-8");
-  } catch (error) {
-    throw AppIdentityError.readFailed(
-      discovery.path,
-      error instanceof Error ? error : new Error(String(error))
-    );
+  if (typeof error === "string") {
+    return error;
   }
-  let parsed;
-  try {
-    parsed = parse(content);
-  } catch (error) {
-    throw AppIdentityError.parseFailed(
-      discovery.path,
-      error instanceof Error ? error : new Error(String(error))
-    );
+  return String(error);
+}
+function extractStackTrace(error) {
+  if (error instanceof Error) {
+    return error.stack;
   }
-  if (!options?.skipValidation) {
-    const result = await validateDataBySchemaId(parsed, APP_IDENTITY_SCHEMA_ID);
-    if (!result.valid) {
-      throw AppIdentityError.validationFailed(discovery.path, result.diagnostics);
-    }
+  if (isErrorLike(error) && typeof error.stack === "string") {
+    return error.stack;
   }
-  const identity = deepFreeze5(structuredClone(parsed));
-  setCachedIdentity(identity);
-  return identity;
+  return void 0;
 }
-var init_loader2 = __esm({
-  "src/appidentity/loader.ts"() {
-    init_schema();
-    init_cache();
-    init_constants();
-    init_discovery();
-    init_errors5();
+function isErrorLike(value) {
+  return typeof value === "object" && value !== null && "message" in value && typeof value.message === "string";
+}
+var init_serialization = __esm({
+  "src/errors/serialization.ts"() {
+    init_severity();
   }
 });
-function createCLI(options = {}) {
-  const program = new Command();
-  program.name("tsfulmen-schema").description("Schema validation and discovery CLI for Fulmen (developer tool)").version("0.1.0");
-  program.command("list").description("List available schemas from registry").argument("[prefix]", "Filter schemas by prefix").option("--base-dir <path>", "Override schema base directory").action(async (prefix, cmdOptions) => {
-    try {
-      const schemas = await listSchemas(prefix, {
-        baseDir: cmdOptions?.baseDir || options.baseDir
-      });
-      if (schemas.length === 0) {
-        console.log("No schemas found");
-        return;
+
+// src/errors/validators.ts
+async function validateErrorData(data) {
+  return ErrorValidator.getInstance().validate(data);
+}
+var ErrorValidator;
+var init_validators2 = __esm({
+  "src/errors/validators.ts"() {
+    init_schema();
+    ErrorValidator = class _ErrorValidator {
+      static instance;
+      validateFn = null;
+      initPromise = null;
+      initError = null;
+      constructor() {
       }
-      console.log(`Found ${schemas.length} schema(s):
-`);
-      for (const schema of schemas) {
-        console.log(`  ${schema.id}`);
-        console.log(`    Format: ${schema.format}`);
-        console.log(`    Path: ${schema.relativePath}`);
-        if (schema.description) {
-          console.log(`    Description: ${schema.description}`);
+      /**
+       * Get singleton instance
+       */
+      static getInstance() {
+        if (!_ErrorValidator.instance) {
+          _ErrorValidator.instance = new _ErrorValidator();
         }
-        console.log();
-      }
-    } catch (error) {
-      console.error("Error listing schemas:", error.message);
-      process.exit(1);
-    }
-  });
-  program.command("show").description("Show schema details").requiredOption("--schema-id <id>", "Schema ID to show").option("--base-dir <path>", "Override schema base directory").action(async (cmdOptions) => {
-    try {
-      const registry = getSchemaRegistry({
-        baseDir: cmdOptions.baseDir || options.baseDir
-      });
-      const schema = await registry.getSchema(cmdOptions.schemaId);
-      console.log("Schema Details:\n");
-      console.log(`  ID: ${schema.id}`);
-      console.log(`  Format: ${schema.format}`);
-      console.log(`  Path: ${schema.path}`);
-      console.log(`  Relative Path: ${schema.relativePath}`);
-      if (schema.version) {
-        console.log(`  Version: ${schema.version}`);
-      }
-      if (schema.description) {
-        console.log(`  Description: ${schema.description}`);
-      }
-      if (schema.schemaDraft) {
-        console.log(`  Schema Draft: ${schema.schemaDraft}`);
+        return _ErrorValidator.instance;
       }
-      const content = await readFile(schema.path, "utf-8");
-      console.log("\nSchema Content:");
-      console.log(content);
-    } catch (error) {
-      console.error("Error showing schema:", error.message);
-      process.exit(1);
-    }
-  });
-  program.command("validate").description("Validate data file against schema").requiredOption("--schema-id <id>", "Schema ID to validate against").argument("<file>", "Data file to validate").option("--use-goneat", "Use goneat for validation (requires goneat binary)").option("--goneat-path <path>", "Path to goneat binary").option("--base-dir <path>", "Override schema base directory").action(
-    async (file, cmdOptions) => {
-      try {
-        let result;
-        if (cmdOptions.useGoneat) {
-          const available = await isGoneatAvailable(cmdOptions.goneatPath);
-          if (!available) {
-            console.error("\u274C goneat not available. Install goneat or remove --use-goneat flag.");
-            console.error("   AJV validation (default) works without external dependencies.");
-            process.exit(1);
+      /**
+       * Initialize validator (lazy load, async)
+       */
+      async init() {
+        if (this.validateFn !== null || this.initError !== null) {
+          return;
+        }
+        if (this.initPromise) {
+          return this.initPromise;
+        }
+        this.initPromise = (async () => {
+          try {
+            await compileSchemaById("pathfinder/v1.0.0/error-response");
+            await compileSchemaById("assessment/v1.0.0/severity-definitions");
+            this.validateFn = await compileSchemaById("error-handling/v1.0.0/error-response");
+          } catch (err) {
+            this.initError = err instanceof Error ? err : new Error(String(err));
+            throw new Error(`Failed to initialize error validator: ${this.initError.message}`);
           }
-          const registry = getSchemaRegistry({
-            baseDir: cmdOptions.baseDir || options.baseDir
-          });
-          const schema = await registry.getSchema(cmdOptions.schemaId);
-          console.log("Using goneat validation...");
-          result = await runGoneatValidation(schema.path, file, cmdOptions.goneatPath);
-        } else {
-          console.log("Using AJV validation...");
-          result = await validateFileBySchemaId(file, cmdOptions.schemaId, {
-            baseDir: cmdOptions.baseDir || options.baseDir
-          });
+        })();
+        return this.initPromise;
+      }
+      /**
+       * Validate error data against schema
+       *
+       * @param data - Data to validate
+       * @returns Promise resolving to true if valid, false otherwise
+       * @throws {Error} If validator failed to initialize
+       */
+      async validate(data) {
+        if (this.validateFn === null) {
+          await this.init();
         }
-        if (result.valid) {
-          console.log(`\u2705 Validation passed (${result.source})`);
-          process.exit(0);
-        } else {
-          console.log(`\u274C Validation failed (${result.source})`);
-          console.log("\nDiagnostics:");
-          console.log(formatDiagnostics(result.diagnostics));
-          process.exit(1);
+        if (this.initError) {
+          throw this.initError;
         }
-      } catch (error) {
-        console.error("Error validating file:", error.message);
-        process.exit(1);
+        if (!this.validateFn) {
+          throw new Error("Validator not initialized");
+        }
+        return this.validateFn(data);
       }
-    }
-  );
-  program.command("validate-schema").description("Validate a schema file itself").argument("<file>", "Schema file to validate").action(async (file) => {
-    try {
-      const content = await readFile(file, "utf-8");
-      const { validateSchema: validateSchema2 } = await Promise.resolve().then(() => (init_validator(), validator_exports));
-      const result = await validateSchema2(content);
-      if (result.valid) {
-        console.log("\u2705 Schema is valid");
-        process.exit(0);
-      } else {
-        console.log("\u274C Schema is invalid");
-        console.log("\nDiagnostics:");
-        console.log(formatDiagnostics(result.diagnostics));
-        process.exit(1);
+      /**
+       * Get validation errors from last validation
+       *
+       * @returns Validation errors or null
+       */
+      getErrors() {
+        if (!this.validateFn) {
+          return null;
+        }
+        return this.validateFn.errors;
       }
-    } catch (error) {
-      console.error("Error validating schema:", error.message);
-      process.exit(1);
-    }
-  });
-  program.command("normalize").description("Normalize schema to canonical JSON format").argument("<file>", "Schema file to normalize").option("--compact", "Output compact JSON (no formatting)").option("-o, --output <file>", "Write to output file instead of stdout").action(async (file, cmdOptions) => {
-    try {
-      const content = await readFile(file, "utf-8");
-      const normalized = normalizeSchema(content, {
-        compact: cmdOptions.compact
-      });
-      if (cmdOptions.output) {
-        await writeFile(cmdOptions.output, normalized, "utf-8");
-        console.log(`\u2705 Normalized schema written to ${cmdOptions.output}`);
-      } else {
-        console.log(normalized);
+      /**
+       * Reset validator state (for testing)
+       * @internal
+       */
+      static _reset() {
+        _ErrorValidator.instance = new _ErrorValidator();
       }
-    } catch (error) {
-      console.error("Error normalizing schema:", error.message);
-      process.exit(1);
-    }
-  });
-  program.command("compare").description("Compare two schemas for semantic equality").argument("<file1>", "First schema file").argument("<file2>", "Second schema file").option("--show-normalized", "Show normalized outputs").action(async (file1, file2, cmdOptions) => {
-    try {
-      const content1 = await readFile(file1, "utf-8");
-      const content2 = await readFile(file2, "utf-8");
-      const result = compareSchemas(content1, content2);
-      if (result.equal) {
-        console.log("\u2705 Schemas are semantically equal");
-      } else {
-        console.log("\u274C Schemas differ");
+    };
+  }
+});
+
+// src/errors/fulmen-error.ts
+function isFulmenErrorData(value) {
+  return typeof value === "object" && value !== null && "code" in value && typeof value.code === "string" && "message" in value && typeof value.message === "string";
+}
+var FulmenError;
+var init_fulmen_error = __esm({
+  "src/errors/fulmen-error.ts"() {
+    init_serialization();
+    init_severity();
+    init_validators2();
+    FulmenError = class _FulmenError extends Error {
+      data;
+      constructor(data) {
+        super(data.message);
+        this.name = "FulmenError";
+        this.data = Object.freeze({ ...data });
+        Error.captureStackTrace(this, _FulmenError);
       }
-      if (cmdOptions.showNormalized) {
-        console.log("\nNormalized Schema 1:");
-        console.log(result.normalizedA);
-        console.log("\nNormalized Schema 2:");
-        console.log(result.normalizedB);
-      }
-      process.exit(result.equal ? 0 : 1);
-    } catch (error) {
-      console.error("Error comparing schemas:", error.message);
-      process.exit(1);
-    }
-  });
-  program.command("export").description("Export schema from registry to file with provenance").requiredOption("--schema-id <id>", "Schema ID to export").requiredOption("--out <path>", "Output file path").option("--force", "Overwrite existing file", false).option("--no-provenance", "Exclude provenance metadata").option("--no-validate", "Skip schema validation before export").option("--format <format>", "Export format (json|yaml|auto)", "auto").option("--base-dir <path>", "Override schema base directory").action(
-    async (cmdOptions) => {
-      try {
-        const { exportSchema: exportSchema2 } = await Promise.resolve().then(() => (init_export(), export_exports));
-        const { exitCodes: exitCodes2 } = await Promise.resolve().then(() => (init_foundry(), foundry_exports));
-        const result = await exportSchema2({
-          schemaId: cmdOptions.schemaId,
-          outPath: cmdOptions.out,
-          includeProvenance: cmdOptions.provenance ?? true,
-          validate: cmdOptions.validate ?? true,
-          overwrite: cmdOptions.force ?? false,
-          format: cmdOptions.format ?? "auto",
-          baseDir: cmdOptions.baseDir || options.baseDir
-        });
-        console.log("\u2705 Schema exported successfully");
-        console.log(`   Schema ID: ${result.schemaId}`);
-        console.log(`   Output: ${result.outPath}`);
-        console.log(`   Format: ${result.format}`);
-        if (result.provenance) {
-          console.log("\nProvenance:");
-          console.log(`   Crucible: ${result.provenance.crucible_version}`);
-          console.log(`   Library: ${result.provenance.library_version}`);
-          if (result.provenance.revision) {
-            console.log(`   Revision: ${result.provenance.revision}`);
-          }
-          console.log(`   Exported: ${result.provenance.exported_at}`);
-        }
-        process.exit(exitCodes2.EXIT_SUCCESS);
-      } catch (error) {
-        const { exitCodes: exitCodes2 } = await Promise.resolve().then(() => (init_foundry(), foundry_exports));
-        const { SchemaExportError: SchemaExportError2, SchemaValidationError: SchemaValidationError2, ExportErrorReason: ExportErrorReason2 } = await Promise.resolve().then(() => (init_errors(), errors_exports));
-        console.error("\u274C Schema export failed:", error.message);
-        if (error instanceof SchemaExportError2) {
-          if (error.outPath) {
-            console.error(`   Output path: ${error.outPath}`);
-          }
-          switch (error.reason) {
-            case ExportErrorReason2.FILE_EXISTS:
-            case ExportErrorReason2.WRITE_FAILED:
-              process.exit(exitCodes2.EXIT_FILE_WRITE_ERROR);
-              break;
-            case ExportErrorReason2.INVALID_FORMAT:
-              process.exit(exitCodes2.EXIT_INVALID_ARGUMENT);
-              break;
-            default:
-              process.exit(exitCodes2.EXIT_FAILURE);
-          }
-        }
-        if (error instanceof SchemaValidationError2) {
-          const errorMsg = error.message.toLowerCase();
-          if (errorMsg.includes("not found")) {
-            process.exit(exitCodes2.EXIT_FILE_NOT_FOUND);
-          }
-          process.exit(exitCodes2.EXIT_DATA_INVALID);
-        }
-        process.exit(exitCodes2.EXIT_FAILURE);
-      }
-    }
-  );
-  program.command("identity-show").description("Show application identity from .fulmen/app.yaml").option("--path <path>", "Explicit path to app.yaml").option("--json", "Output as JSON").action(async (cmdOptions) => {
-    try {
-      const { loadIdentity: loadIdentity2 } = await Promise.resolve().then(() => (init_loader2(), loader_exports));
-      const { exitCodes: exitCodes2 } = await Promise.resolve().then(() => (init_foundry(), foundry_exports));
-      const identity = await loadIdentity2({ path: cmdOptions.path });
-      if (cmdOptions.json) {
-        console.log(JSON.stringify(identity, null, 2));
-      } else {
-        console.log("Application Identity:\n");
-        console.log(`  Binary Name: ${identity.app.binary_name}`);
-        console.log(`  Vendor: ${identity.app.vendor}`);
-        console.log(`  Env Prefix: ${identity.app.env_prefix}`);
-        console.log(`  Config Name: ${identity.app.config_name}`);
-        console.log(`  Description: ${identity.app.description}`);
-        if (identity.metadata) {
-          console.log("\nMetadata:");
-          if (identity.metadata.license) {
-            console.log(`  License: ${identity.metadata.license}`);
-          }
-          if (identity.metadata.repository_category) {
-            console.log(`  Category: ${identity.metadata.repository_category}`);
-          }
-          if (identity.metadata.telemetry_namespace) {
-            console.log(`  Telemetry: ${identity.metadata.telemetry_namespace}`);
-          }
-          if (identity.metadata.project_url) {
-            console.log(`  Project URL: ${identity.metadata.project_url}`);
-          }
-        }
-      }
-      process.exit(exitCodes2.EXIT_SUCCESS);
-    } catch (error) {
-      const { exitCodes: exitCodes2 } = await Promise.resolve().then(() => (init_foundry(), foundry_exports));
-      const { AppIdentityError: AppIdentityError2 } = await Promise.resolve().then(() => (init_errors5(), errors_exports2));
-      console.error("\u274C Failed to load identity:", error.message);
-      if (error instanceof AppIdentityError2) {
-        if (error.message.includes("not found")) {
-          process.exit(exitCodes2.EXIT_FILE_NOT_FOUND);
-        }
-        if (error.message.includes("Invalid") || error.message.includes("validation")) {
-          process.exit(exitCodes2.EXIT_DATA_INVALID);
-        }
-      }
-      process.exit(exitCodes2.EXIT_FAILURE);
-    }
-  });
-  program.command("identity-validate").description("Validate application identity against schema").argument("[file]", "Path to app.yaml (defaults to discovery)").action(async (file) => {
-    try {
-      const { loadIdentity: loadIdentity2 } = await Promise.resolve().then(() => (init_loader2(), loader_exports));
-      const { exitCodes: exitCodes2 } = await Promise.resolve().then(() => (init_foundry(), foundry_exports));
-      console.log("Validating application identity...");
-      const identity = await loadIdentity2({ path: file });
-      console.log("\u2705 Identity is valid");
-      console.log(`   Binary: ${identity.app.binary_name}`);
-      console.log(`   Vendor: ${identity.app.vendor}`);
-      process.exit(exitCodes2.EXIT_SUCCESS);
-    } catch (error) {
-      const { exitCodes: exitCodes2 } = await Promise.resolve().then(() => (init_foundry(), foundry_exports));
-      const { AppIdentityError: AppIdentityError2 } = await Promise.resolve().then(() => (init_errors5(), errors_exports2));
-      console.error("\u274C Identity validation failed:", error.message);
-      if (error instanceof AppIdentityError2) {
-        if (error.message.includes("not found")) {
-          process.exit(exitCodes2.EXIT_FILE_NOT_FOUND);
-        }
-        if (error.message.includes("Invalid") || error.message.includes("validation")) {
-          process.exit(exitCodes2.EXIT_DATA_INVALID);
-        }
-      }
-      process.exit(exitCodes2.EXIT_FAILURE);
-    }
-  });
-  return program;
-}
-var init_cli = __esm({
-  "src/schema/cli.ts"() {
-    init_goneat_bridge();
-    init_normalizer();
-    init_registry();
-    init_utils();
-    init_validator();
-    if (import.meta.url === `file://${process.argv[1]}`) {
-      const program = createCLI();
-      program.parse(process.argv);
-    }
-  }
-});
-
-// src/schema/index.ts
-var init_schema = __esm({
-  "src/schema/index.ts"() {
-    init_cli();
-    init_errors();
-    init_export();
-    init_goneat_bridge();
-    init_normalizer();
-    init_registry();
-    init_utils();
-    init_validator();
-  }
-});
-
-// src/errors/validators.ts
-async function validateErrorData(data) {
-  return ErrorValidator.getInstance().validate(data);
-}
-var ErrorValidator;
-var init_validators2 = __esm({
-  "src/errors/validators.ts"() {
-    init_schema();
-    ErrorValidator = class _ErrorValidator {
-      static instance;
-      validateFn = null;
-      initPromise = null;
-      initError = null;
-      constructor() {
-      }
-      /**
-       * Get singleton instance
-       */
-      static getInstance() {
-        if (!_ErrorValidator.instance) {
-          _ErrorValidator.instance = new _ErrorValidator();
-        }
-        return _ErrorValidator.instance;
-      }
-      /**
-       * Initialize validator (lazy load, async)
-       */
-      async init() {
-        if (this.validateFn !== null || this.initError !== null) {
-          return;
-        }
-        if (this.initPromise) {
-          return this.initPromise;
-        }
-        this.initPromise = (async () => {
-          try {
-            await compileSchemaById("pathfinder/v1.0.0/error-response");
-            await compileSchemaById("assessment/v1.0.0/severity-definitions");
-            this.validateFn = await compileSchemaById("error-handling/v1.0.0/error-response");
-          } catch (err) {
-            this.initError = err instanceof Error ? err : new Error(String(err));
-            throw new Error(`Failed to initialize error validator: ${this.initError.message}`);
-          }
-        })();
-        return this.initPromise;
-      }
-      /**
-       * Validate error data against schema
-       *
-       * @param data - Data to validate
-       * @returns Promise resolving to true if valid, false otherwise
-       * @throws {Error} If validator failed to initialize
-       */
-      async validate(data) {
-        if (this.validateFn === null) {
-          await this.init();
-        }
-        if (this.initError) {
-          throw this.initError;
-        }
-        if (!this.validateFn) {
-          throw new Error("Validator not initialized");
-        }
-        return this.validateFn(data);
-      }
-      /**
-       * Get validation errors from last validation
-       *
-       * @returns Validation errors or null
-       */
-      getErrors() {
-        if (!this.validateFn) {
-          return null;
-        }
-        return this.validateFn.errors;
-      }
-      /**
-       * Reset validator state (for testing)
-       * @internal
-       */
-      static _reset() {
-        _ErrorValidator.instance = new _ErrorValidator();
-      }
-    };
-  }
-});
-
-// src/errors/fulmen-error.ts
-function isFulmenErrorData(value) {
-  return typeof value === "object" && value !== null && "code" in value && typeof value.code === "string" && "message" in value && typeof value.message === "string";
-}
-var FulmenError;
-var init_fulmen_error = __esm({
-  "src/errors/fulmen-error.ts"() {
-    init_serialization();
-    init_severity();
-    init_validators2();
-    FulmenError = class _FulmenError extends Error {
-      data;
-      constructor(data) {
-        super(data.message);
-        this.name = "FulmenError";
-        this.data = Object.freeze({ ...data });
-        Error.captureStackTrace(this, _FulmenError);
-      }
-      /**
-       * Serialize to JSON (schema-compliant)
-       */
-      toJSON() {
-        return this.data;
+      /**
+       * Serialize to JSON (schema-compliant)
+       */
+      toJSON() {
+        return this.data;
       }
       /**
        * Check equality with another FulmenError
@@ -5675,12 +5279,568 @@ ${cause.message}`;
 ${cause.message}`;
         return new _AppIdentityError(message, path, cause);
       }
-    };
+      /**
+       * Create error for embedded identity already registered
+       *
+       * Uses first-wins semantics - once registered, cannot be replaced
+       */
+      static alreadyRegistered() {
+        const message = "Embedded identity already registered. Registration uses first-wins semantics and cannot be replaced.";
+        return new _AppIdentityError(message);
+      }
+      /**
+       * Create error for embedded identity YAML parsing failure
+       */
+      static embeddedParseFailed(cause) {
+        const message = `Failed to parse embedded identity YAML: ${cause.message}`;
+        return new _AppIdentityError(message, void 0, cause);
+      }
+      /**
+       * Create error for embedded identity schema validation failure
+       */
+      static embeddedValidationFailed(diagnostics) {
+        const errorCount = diagnostics.filter((d) => d.severity === "ERROR").length;
+        const warningCount = diagnostics.filter((d) => d.severity === "WARN").length;
+        let message = "Invalid embedded identity\n";
+        message += `Validation errors: ${errorCount} error(s), ${warningCount} warning(s)
+`;
+        const displayDiagnostics = diagnostics.slice(0, 3);
+        for (const diag of displayDiagnostics) {
+          message += `  - ${diag.message}`;
+          if (diag.pointer) {
+            message += ` at ${diag.pointer}`;
+          }
+          message += "\n";
+        }
+        if (diagnostics.length > 3) {
+          message += `  ... and ${diagnostics.length - 3} more
+`;
+        }
+        return new _AppIdentityError(message);
+      }
+    };
+  }
+});
+async function discoverIdentityPath(options) {
+  if (options?.path) {
+    const exists = await fileExists(options.path);
+    if (!exists) {
+      throw AppIdentityError.notFound([options.path]);
+    }
+    return { path: options.path, source: "explicit" };
+  }
+  const envPath = process.env[APP_IDENTITY_ENV_VAR];
+  if (envPath) {
+    const exists = await fileExists(envPath);
+    if (!exists) {
+      throw AppIdentityError.envOverrideMissing(envPath);
+    }
+    return { path: envPath, source: "env" };
+  }
+  const startDir = options?.startDir || process.cwd();
+  const result = await searchAncestors(startDir);
+  if (result) {
+    return { path: result, source: "ancestor" };
+  }
+  return null;
+}
+async function searchAncestors(startDir) {
+  let currentDir = startDir;
+  const searchedPaths = [];
+  for (let i = 0; i < MAX_ANCESTOR_SEARCH_DEPTH; i++) {
+    const candidatePath = join(currentDir, APP_IDENTITY_DIR, APP_IDENTITY_FILENAME);
+    searchedPaths.push(candidatePath);
+    if (await fileExists(candidatePath)) {
+      return candidatePath;
+    }
+    const parentDir = dirname(currentDir);
+    if (parentDir === currentDir) {
+      throw AppIdentityError.notFound(searchedPaths);
+    }
+    currentDir = parentDir;
+  }
+  throw AppIdentityError.notFound(searchedPaths);
+}
+async function fileExists(path) {
+  try {
+    await access(path);
+    return true;
+  } catch {
+    return false;
+  }
+}
+var init_discovery = __esm({
+  "src/appidentity/discovery.ts"() {
+    init_constants();
+    init_errors5();
+  }
+});
+
+// src/appidentity/loader.ts
+var loader_exports = {};
+__export(loader_exports, {
+  clearIdentityCache: () => clearIdentityCache,
+  getCachedIdentity: () => getCachedIdentity,
+  loadIdentity: () => loadIdentity
+});
+function deepFreeze5(obj) {
+  Object.freeze(obj);
+  Object.getOwnPropertyNames(obj).forEach((prop) => {
+    const value = obj[prop];
+    if (value !== null && (typeof value === "object" || typeof value === "function") && !Object.isFrozen(value)) {
+      deepFreeze5(value);
+    }
+  });
+  return obj;
+}
+async function loadIdentity(options) {
+  if (options?.identity) {
+    return deepFreeze5(structuredClone(options.identity));
+  }
+  if (!options?.skipCache) {
+    const cached = getCachedIdentity();
+    if (cached) {
+      return cached;
+    }
+  }
+  let discovery;
+  try {
+    discovery = await discoverIdentityPath({
+      path: options?.path,
+      startDir: options?.startDir
+    });
+  } catch (error) {
+    const hasExplicitPath = Boolean(options?.path);
+    const hasEnvOverride = Boolean(process.env[APP_IDENTITY_ENV_VAR]);
+    if (!hasExplicitPath && !hasEnvOverride && error instanceof AppIdentityError) {
+      const embedded = getEmbeddedIdentity();
+      if (embedded) {
+        setCachedIdentity(embedded);
+        return embedded;
+      }
+    }
+    throw error;
+  }
+  if (!discovery) {
+    const embedded = getEmbeddedIdentity();
+    if (embedded) {
+      setCachedIdentity(embedded);
+      return embedded;
+    }
+    throw AppIdentityError.notFound([]);
+  }
+  let content;
+  try {
+    content = await readFile(discovery.path, "utf-8");
+  } catch (error) {
+    throw AppIdentityError.readFailed(
+      discovery.path,
+      error instanceof Error ? error : new Error(String(error))
+    );
+  }
+  let parsed;
+  try {
+    parsed = parse(content);
+  } catch (error) {
+    throw AppIdentityError.parseFailed(
+      discovery.path,
+      error instanceof Error ? error : new Error(String(error))
+    );
+  }
+  if (!options?.skipValidation) {
+    const result = await validateDataBySchemaId(parsed, APP_IDENTITY_SCHEMA_ID);
+    if (!result.valid) {
+      throw AppIdentityError.validationFailed(discovery.path, result.diagnostics);
+    }
+  }
+  const identity = deepFreeze5(structuredClone(parsed));
+  setCachedIdentity(identity);
+  return identity;
+}
+var init_loader2 = __esm({
+  "src/appidentity/loader.ts"() {
+    init_schema();
+    init_cache();
+    init_constants();
+    init_discovery();
+    init_embedded();
+    init_errors5();
+  }
+});
+function createCLI(options = {}) {
+  const program = new Command();
+  program.name("tsfulmen-schema").description("Schema validation and discovery CLI for Fulmen (developer tool)").version("0.1.0");
+  program.command("list").description("List available schemas from registry").argument("[prefix]", "Filter schemas by prefix").option("--base-dir <path>", "Override schema base directory").action(async (prefix, cmdOptions) => {
+    try {
+      const schemas = await listSchemas(prefix, {
+        baseDir: cmdOptions?.baseDir || options.baseDir
+      });
+      if (schemas.length === 0) {
+        console.log("No schemas found");
+        return;
+      }
+      console.log(`Found ${schemas.length} schema(s):
+`);
+      for (const schema of schemas) {
+        console.log(`  ${schema.id}`);
+        console.log(`    Format: ${schema.format}`);
+        console.log(`    Path: ${schema.relativePath}`);
+        if (schema.description) {
+          console.log(`    Description: ${schema.description}`);
+        }
+        console.log();
+      }
+    } catch (error) {
+      console.error("Error listing schemas:", error.message);
+      process.exit(1);
+    }
+  });
+  program.command("show").description("Show schema details").requiredOption("--schema-id <id>", "Schema ID to show").option("--base-dir <path>", "Override schema base directory").action(async (cmdOptions) => {
+    try {
+      const registry = getSchemaRegistry({
+        baseDir: cmdOptions.baseDir || options.baseDir
+      });
+      const schema = await registry.getSchema(cmdOptions.schemaId);
+      console.log("Schema Details:\n");
+      console.log(`  ID: ${schema.id}`);
+      console.log(`  Format: ${schema.format}`);
+      console.log(`  Path: ${schema.path}`);
+      console.log(`  Relative Path: ${schema.relativePath}`);
+      if (schema.version) {
+        console.log(`  Version: ${schema.version}`);
+      }
+      if (schema.description) {
+        console.log(`  Description: ${schema.description}`);
+      }
+      if (schema.schemaDraft) {
+        console.log(`  Schema Draft: ${schema.schemaDraft}`);
+      }
+      const content = await readFile(schema.path, "utf-8");
+      console.log("\nSchema Content:");
+      console.log(content);
+    } catch (error) {
+      console.error("Error showing schema:", error.message);
+      process.exit(1);
+    }
+  });
+  program.command("validate").description("Validate data file against schema").requiredOption("--schema-id <id>", "Schema ID to validate against").argument("<file>", "Data file to validate").option("--use-goneat", "Use goneat for validation (requires goneat binary)").option("--goneat-path <path>", "Path to goneat binary").option("--base-dir <path>", "Override schema base directory").action(
+    async (file, cmdOptions) => {
+      try {
+        let result;
+        if (cmdOptions.useGoneat) {
+          const available = await isGoneatAvailable(cmdOptions.goneatPath);
+          if (!available) {
+            console.error("\u274C goneat not available. Install goneat or remove --use-goneat flag.");
+            console.error("   AJV validation (default) works without external dependencies.");
+            process.exit(1);
+          }
+          const registry = getSchemaRegistry({
+            baseDir: cmdOptions.baseDir || options.baseDir
+          });
+          const schema = await registry.getSchema(cmdOptions.schemaId);
+          console.log("Using goneat validation...");
+          result = await runGoneatValidation(schema.path, file, cmdOptions.goneatPath);
+        } else {
+          console.log("Using AJV validation...");
+          result = await validateFileBySchemaId(file, cmdOptions.schemaId, {
+            baseDir: cmdOptions.baseDir || options.baseDir
+          });
+        }
+        if (result.valid) {
+          console.log(`\u2705 Validation passed (${result.source})`);
+          process.exit(0);
+        } else {
+          console.log(`\u274C Validation failed (${result.source})`);
+          console.log("\nDiagnostics:");
+          console.log(formatDiagnostics(result.diagnostics));
+          process.exit(1);
+        }
+      } catch (error) {
+        console.error("Error validating file:", error.message);
+        process.exit(1);
+      }
+    }
+  );
+  program.command("validate-schema").description("Validate a schema file itself").argument("<file>", "Schema file to validate").action(async (file) => {
+    try {
+      const content = await readFile(file, "utf-8");
+      const { validateSchema: validateSchema2 } = await Promise.resolve().then(() => (init_validator(), validator_exports));
+      const result = await validateSchema2(content);
+      if (result.valid) {
+        console.log("\u2705 Schema is valid");
+        process.exit(0);
+      } else {
+        console.log("\u274C Schema is invalid");
+        console.log("\nDiagnostics:");
+        console.log(formatDiagnostics(result.diagnostics));
+        process.exit(1);
+      }
+    } catch (error) {
+      console.error("Error validating schema:", error.message);
+      process.exit(1);
+    }
+  });
+  program.command("normalize").description("Normalize schema to canonical JSON format").argument("<file>", "Schema file to normalize").option("--compact", "Output compact JSON (no formatting)").option("-o, --output <file>", "Write to output file instead of stdout").action(async (file, cmdOptions) => {
+    try {
+      const content = await readFile(file, "utf-8");
+      const normalized = normalizeSchema(content, {
+        compact: cmdOptions.compact
+      });
+      if (cmdOptions.output) {
+        await writeFile(cmdOptions.output, normalized, "utf-8");
+        console.log(`\u2705 Normalized schema written to ${cmdOptions.output}`);
+      } else {
+        console.log(normalized);
+      }
+    } catch (error) {
+      console.error("Error normalizing schema:", error.message);
+      process.exit(1);
+    }
+  });
+  program.command("compare").description("Compare two schemas for semantic equality").argument("<file1>", "First schema file").argument("<file2>", "Second schema file").option("--show-normalized", "Show normalized outputs").action(async (file1, file2, cmdOptions) => {
+    try {
+      const content1 = await readFile(file1, "utf-8");
+      const content2 = await readFile(file2, "utf-8");
+      const result = compareSchemas(content1, content2);
+      if (result.equal) {
+        console.log("\u2705 Schemas are semantically equal");
+      } else {
+        console.log("\u274C Schemas differ");
+      }
+      if (cmdOptions.showNormalized) {
+        console.log("\nNormalized Schema 1:");
+        console.log(result.normalizedA);
+        console.log("\nNormalized Schema 2:");
+        console.log(result.normalizedB);
+      }
+      process.exit(result.equal ? 0 : 1);
+    } catch (error) {
+      console.error("Error comparing schemas:", error.message);
+      process.exit(1);
+    }
+  });
+  program.command("export").description("Export schema from registry to file with provenance").requiredOption("--schema-id <id>", "Schema ID to export").requiredOption("--out <path>", "Output file path").option("--force", "Overwrite existing file", false).option("--no-provenance", "Exclude provenance metadata").option("--no-validate", "Skip schema validation before export").option("--format <format>", "Export format (json|yaml|auto)", "auto").option("--base-dir <path>", "Override schema base directory").action(
+    async (cmdOptions) => {
+      try {
+        const { exportSchema: exportSchema2 } = await Promise.resolve().then(() => (init_export(), export_exports));
+        const { exitCodes: exitCodes2 } = await Promise.resolve().then(() => (init_foundry(), foundry_exports));
+        const result = await exportSchema2({
+          schemaId: cmdOptions.schemaId,
+          outPath: cmdOptions.out,
+          includeProvenance: cmdOptions.provenance ?? true,
+          validate: cmdOptions.validate ?? true,
+          overwrite: cmdOptions.force ?? false,
+          format: cmdOptions.format ?? "auto",
+          baseDir: cmdOptions.baseDir || options.baseDir
+        });
+        console.log("\u2705 Schema exported successfully");
+        console.log(`   Schema ID: ${result.schemaId}`);
+        console.log(`   Output: ${result.outPath}`);
+        console.log(`   Format: ${result.format}`);
+        if (result.provenance) {
+          console.log("\nProvenance:");
+          console.log(`   Crucible: ${result.provenance.crucible_version}`);
+          console.log(`   Library: ${result.provenance.library_version}`);
+          if (result.provenance.revision) {
+            console.log(`   Revision: ${result.provenance.revision}`);
+          }
+          console.log(`   Exported: ${result.provenance.exported_at}`);
+        }
+        process.exit(exitCodes2.EXIT_SUCCESS);
+      } catch (error) {
+        const { exitCodes: exitCodes2 } = await Promise.resolve().then(() => (init_foundry(), foundry_exports));
+        const { SchemaExportError: SchemaExportError2, SchemaValidationError: SchemaValidationError2, ExportErrorReason: ExportErrorReason2 } = await Promise.resolve().then(() => (init_errors(), errors_exports));
+        console.error("\u274C Schema export failed:", error.message);
+        if (error instanceof SchemaExportError2) {
+          if (error.outPath) {
+            console.error(`   Output path: ${error.outPath}`);
+          }
+          switch (error.reason) {
+            case ExportErrorReason2.FILE_EXISTS:
+            case ExportErrorReason2.WRITE_FAILED:
+              process.exit(exitCodes2.EXIT_FILE_WRITE_ERROR);
+              break;
+            case ExportErrorReason2.INVALID_FORMAT:
+              process.exit(exitCodes2.EXIT_INVALID_ARGUMENT);
+              break;
+            default:
+              process.exit(exitCodes2.EXIT_FAILURE);
+          }
+        }
+        if (error instanceof SchemaValidationError2) {
+          const errorMsg = error.message.toLowerCase();
+          if (errorMsg.includes("not found")) {
+            process.exit(exitCodes2.EXIT_FILE_NOT_FOUND);
+          }
+          process.exit(exitCodes2.EXIT_DATA_INVALID);
+        }
+        process.exit(exitCodes2.EXIT_FAILURE);
+      }
+    }
+  );
+  program.command("identity-show").description("Show application identity from .fulmen/app.yaml").option("--path <path>", "Explicit path to app.yaml").option("--json", "Output as JSON").action(async (cmdOptions) => {
+    try {
+      const { loadIdentity: loadIdentity2 } = await Promise.resolve().then(() => (init_loader2(), loader_exports));
+      const { exitCodes: exitCodes2 } = await Promise.resolve().then(() => (init_foundry(), foundry_exports));
+      const identity = await loadIdentity2({ path: cmdOptions.path });
+      if (cmdOptions.json) {
+        console.log(JSON.stringify(identity, null, 2));
+      } else {
+        console.log("Application Identity:\n");
+        console.log(`  Binary Name: ${identity.app.binary_name}`);
+        console.log(`  Vendor: ${identity.app.vendor}`);
+        console.log(`  Env Prefix: ${identity.app.env_prefix}`);
+        console.log(`  Config Name: ${identity.app.config_name}`);
+        console.log(`  Description: ${identity.app.description}`);
+        if (identity.metadata) {
+          console.log("\nMetadata:");
+          if (identity.metadata.license) {
+            console.log(`  License: ${identity.metadata.license}`);
+          }
+          if (identity.metadata.repository_category) {
+            console.log(`  Category: ${identity.metadata.repository_category}`);
+          }
+          if (identity.metadata.telemetry_namespace) {
+            console.log(`  Telemetry: ${identity.metadata.telemetry_namespace}`);
+          }
+          if (identity.metadata.project_url) {
+            console.log(`  Project URL: ${identity.metadata.project_url}`);
+          }
+        }
+      }
+      process.exit(exitCodes2.EXIT_SUCCESS);
+    } catch (error) {
+      const { exitCodes: exitCodes2 } = await Promise.resolve().then(() => (init_foundry(), foundry_exports));
+      const { AppIdentityError: AppIdentityError2 } = await Promise.resolve().then(() => (init_errors5(), errors_exports2));
+      console.error("\u274C Failed to load identity:", error.message);
+      if (error instanceof AppIdentityError2) {
+        if (error.message.includes("not found")) {
+          process.exit(exitCodes2.EXIT_FILE_NOT_FOUND);
+        }
+        if (error.message.includes("Invalid") || error.message.includes("validation")) {
+          process.exit(exitCodes2.EXIT_DATA_INVALID);
+        }
+      }
+      process.exit(exitCodes2.EXIT_FAILURE);
+    }
+  });
+  program.command("identity-validate").description("Validate application identity against schema").argument("[file]", "Path to app.yaml (defaults to discovery)").action(async (file) => {
+    try {
+      const { loadIdentity: loadIdentity2 } = await Promise.resolve().then(() => (init_loader2(), loader_exports));
+      const { exitCodes: exitCodes2 } = await Promise.resolve().then(() => (init_foundry(), foundry_exports));
+      console.log("Validating application identity...");
+      const identity = await loadIdentity2({ path: file });
+      console.log("\u2705 Identity is valid");
+      console.log(`   Binary: ${identity.app.binary_name}`);
+      console.log(`   Vendor: ${identity.app.vendor}`);
+      process.exit(exitCodes2.EXIT_SUCCESS);
+    } catch (error) {
+      const { exitCodes: exitCodes2 } = await Promise.resolve().then(() => (init_foundry(), foundry_exports));
+      const { AppIdentityError: AppIdentityError2 } = await Promise.resolve().then(() => (init_errors5(), errors_exports2));
+      console.error("\u274C Identity validation failed:", error.message);
+      if (error instanceof AppIdentityError2) {
+        if (error.message.includes("not found")) {
+          process.exit(exitCodes2.EXIT_FILE_NOT_FOUND);
+        }
+        if (error.message.includes("Invalid") || error.message.includes("validation")) {
+          process.exit(exitCodes2.EXIT_DATA_INVALID);
+        }
+      }
+      process.exit(exitCodes2.EXIT_FAILURE);
+    }
+  });
+  return program;
+}
+var init_cli = __esm({
+  "src/schema/cli.ts"() {
+    init_goneat_bridge();
+    init_normalizer();
+    init_registry();
+    init_utils();
+    init_validator();
+    if (import.meta.url === `file://${process.argv[1]}`) {
+      const program = createCLI();
+      program.parse(process.argv);
+    }
+  }
+});
+
+// src/schema/index.ts
+var init_schema = __esm({
+  "src/schema/index.ts"() {
+    init_cli();
+    init_errors();
+    init_export();
+    init_goneat_bridge();
+    init_normalizer();
+    init_registry();
+    init_utils();
+    init_validator();
+  }
+});
+function deepFreeze6(obj) {
+  Object.freeze(obj);
+  Object.getOwnPropertyNames(obj).forEach((prop) => {
+    const value = obj[prop];
+    if (value !== null && (typeof value === "object" || typeof value === "function") && !Object.isFrozen(value)) {
+      deepFreeze6(value);
+    }
+  });
+  return obj;
+}
+async function registerEmbeddedIdentity(data) {
+  if (isRegistered) {
+    throw AppIdentityError.alreadyRegistered();
+  }
+  let identity;
+  if (typeof data === "string") {
+    let parsed;
+    try {
+      parsed = parse(data);
+    } catch (error) {
+      throw AppIdentityError.embeddedParseFailed(
+        error instanceof Error ? error : new Error(String(error))
+      );
+    }
+    const result = await validateDataBySchemaId(parsed, APP_IDENTITY_SCHEMA_ID);
+    if (!result.valid) {
+      throw AppIdentityError.embeddedValidationFailed(result.diagnostics);
+    }
+    identity = parsed;
+  } else {
+    const result = await validateDataBySchemaId(data, APP_IDENTITY_SCHEMA_ID);
+    if (!result.valid) {
+      throw AppIdentityError.embeddedValidationFailed(result.diagnostics);
+    }
+    identity = data;
+  }
+  embeddedIdentity = deepFreeze6(structuredClone(identity));
+  isRegistered = true;
+}
+function hasEmbeddedIdentity() {
+  return isRegistered;
+}
+function getEmbeddedIdentity() {
+  return embeddedIdentity;
+}
+function clearEmbeddedIdentity() {
+  embeddedIdentity = null;
+  isRegistered = false;
+}
+var embeddedIdentity, isRegistered;
+var init_embedded = __esm({
+  "src/appidentity/embedded.ts"() {
+    init_schema();
+    init_constants();
+    init_errors5();
+    embeddedIdentity = null;
+    isRegistered = false;
   }
 });
 
 // src/appidentity/index.ts
 init_constants();
+init_embedded();
 init_errors5();
 
 // src/appidentity/helpers.ts
@@ -7890,8 +8050,8 @@ async function scanZip(archive, options) {
 var FULPACK_VERSION = "1.0.0";
 
 // src/index.ts
-var VERSION2 = "0.1.13";
+var VERSION2 = "0.2.0";
 
-export { APP_IDENTITY_DIR, APP_IDENTITY_ENV_VAR, APP_IDENTITY_FILENAME, APP_IDENTITY_SCHEMA_ID, AppIdentityError, ArchiveFormat, DocScribeError, DocScribeParseError, DocScribeUnsupportedFormatError, ERROR_CODES, EntryType, FULPACK_VERSION, FulpackOperationError, MAX_ANCESTOR_SEARCH_DEPTH, Operation, VERSION2 as VERSION, __internal, buildEnvVar, checkDecompressionBomb, clearIdentityCache, create, createFulpackError, detectFormat2 as detectFormat, extract, extractHeaders, extractMetadata, getBinaryName, getCachedIdentity, getConfigIdentifiers, getConfigName, getEnvPrefix, getEnvVar, getTelemetryNamespace, getVendor, hasPathTraversal, info, inspectDocument, isAbsolutePath, loadIdentity, normalizeInput, parseFrontmatter, scan, splitDocuments, stripFrontmatter, validatePath, verify };
+export { APP_IDENTITY_DIR, APP_IDENTITY_ENV_VAR, APP_IDENTITY_FILENAME, APP_IDENTITY_SCHEMA_ID, AppIdentityError, ArchiveFormat, DocScribeError, DocScribeParseError, DocScribeUnsupportedFormatError, ERROR_CODES, EntryType, FULPACK_VERSION, FulpackOperationError, MAX_ANCESTOR_SEARCH_DEPTH, Operation, VERSION2 as VERSION, __internal, buildEnvVar, checkDecompressionBomb, clearEmbeddedIdentity, clearIdentityCache, create, createFulpackError, detectFormat2 as detectFormat, extract, extractHeaders, extractMetadata, getBinaryName, getCachedIdentity, getConfigIdentifiers, getConfigName, getEmbeddedIdentity, getEnvPrefix, getEnvVar, getTelemetryNamespace, getVendor, hasEmbeddedIdentity, hasPathTraversal, info, inspectDocument, isAbsolutePath, loadIdentity, normalizeInput, parseFrontmatter, registerEmbeddedIdentity, scan, splitDocuments, stripFrontmatter, validatePath, verify };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map