@hongmaple0820/scale-engine 0.21.2 → 0.24.0

package/dist/api/cli.js

@@ -9,9 +9,13 @@ import { registerAllFSMs, INITIAL_STATES } from '../artifact/fsmDefinitions.js';
 import { Gateway } from '../guardrails/Gateway.js';
 import { BruteRetryDetector, PrematureDoneDetector, BlameShiftDetector } from '../guardrails/detectors.js';
 import { DangerousCommandDetector, SecretLeakDetector, RoleGateDetector, ScopeCreepDetector, BUILT_IN_ROLES } from '../guardrails/advancedDetectors.js';
+import { auditDependencies } from '../guardrails/DependencyAuditor.js';
 import { SQLiteKnowledgeBase } from '../knowledge/SQLiteKnowledgeBase.js';
 import { ContextBuilder } from '../context/ContextBuilder.js';
+import { ProjectAnatomy } from '../context/ProjectAnatomy.js';
 import { buildContextPack, doctorContextBudget, scanContextBudget, writeContextBudgetReport, } from '../context/ContextBudget.js';
+import { resolvePromptCachePolicy } from '../routing/PromptCachePolicy.js';
+import { CerebrumManager } from '../knowledge/CerebrumManager.js';
 import { buildCodeGraphContext, createCodeGraphRoiReport, impactCodeGraph, inspectCodeIntelligence, queryCodeGraph, writeCodeIntelligenceConfig, } from '../codegraph/CodeIntelligence.js';
 import { WorkflowEvalStore, compareWorkflowEvalRuns, renderWorkflowEvalReport, runWorkflowEvalSuite, } from '../eval/WorkflowEval.js';
 import { FSMAgentBridge } from '../fsm/FSMAgentBridge.js';
@@ -36,6 +40,7 @@ import { ReviewStore } from '../workflow/ReviewStore.js';
 import { WorkflowEngine } from '../workflow/WorkflowEngine.js';
 import { resolveVerificationTargets, } from '../workflow/VerificationProfile.js';
 import { writeGovernanceTemplates } from '../workflow/GovernanceTemplates.js';
+import { getProfile as getConfigProfile, generateConfigForProfile, listProfiles as listConfigProfiles } from '../config/profiles.js';
 import { computeGovernanceDrift } from '../workflow/GovernanceLock.js';
 import { applyUpgradePlan, createThirdPartyUpdateReport, createUpgradeCheckReport, createUpgradePlanReport, rollbackLatestUpgrade, writeUpgradePlanHtml, } from '../workflow/UpgradeManager.js';
 import { createGovernanceRoiReport } from '../governance/GovernanceRoi.js';
@@ -44,6 +49,7 @@ import { baselineEngineeringStandards, doctorEngineeringStandards, scanEngineeri
 import { doctorResourceAssets, scanResourceAssets, settleResourceAssets } from '../workflow/ResourceGovernance.js';
 import { analyzeContextGovernance, renderContextGrillPrompt, writeContextGovernanceTemplates, } from '../workflow/ContextGovernance.js';
 import { createDiagnosticLoop, renderDiagnosticLoopMarkdown, validateDiagnosticLoop, } from '../workflow/DiagnosticLoop.js';
+import { BackgroundHunter, HuntFindingStore } from '../workflow/autonomous/BackgroundHunter.js';
 import { createTddSlice, evaluateTddSlice, renderTddSliceMarkdown, } from '../workflow/TddLoop.js';
 import { nextWorkflowOpenTask, removeWorkflowOpenTask, toolEvidenceRunCompletesOpenTask } from '../workflow/WorkflowOpenTasks.js';
 import { TaskMetricsStore } from '../workflow/TaskMetricsStore.js';
@@ -79,6 +85,19 @@ function governanceModeFromScenario(scenario) {
         return 'minimal';
     return 'standard';
 }
+function profileFromScenario(scenario) {
+    if (scenario === 'sandbox')
+        return 'minimal';
+    if (scenario === 'critical')
+        return 'advanced';
+    return 'standard';
+}
+function writeConfigYaml(projectDir, profileId, projectName, agents) {
+    const configPath = join(projectDir, '.scale', 'config.yaml');
+    const content = generateConfigForProfile(profileId, { name: projectName, agents });
+    writeFileSync(configPath, content, 'utf-8');
+    return configPath;
+}
 function ensureDir(dir) {
     if (!existsSync(dir))
         mkdirSync(dir, { recursive: true });
@@ -346,6 +365,60 @@ const gate = defineCommand({
     subCommands: { 'pre-tool': gatePreTool, 'post-tool': gatePostTool, 'before-stop': gateBeforeStop },
 });
 // ============================================================================
+// meta-governance — 元治理门禁 (G9-G15)
+// ============================================================================
+const metaGovernance = defineCommand({
+    meta: { name: 'meta-governance', description: 'Run meta-governance gates (G9-G15) — check if governance capabilities are actually used' },
+    args: {
+        'scale-dir': { type: 'string', default: '.scale' },
+        json: { type: 'boolean', default: false, description: 'Output as JSON' },
+    },
+    async run({ args }) {
+        const { eventBus } = getEngine();
+        const { GateSystem } = await import('../workflow/gates/GateSystem.js');
+        const gateSystem = new GateSystem(eventBus);
+        const results = await gateSystem.executeMetaGovernance(args['scale-dir']);
+        if (args.json) {
+            console.log(JSON.stringify(results, null, 2));
+            return;
+        }
+        const stageNames = {
+            G9: 'Knowledge Utilization',
+            G10: 'Evolution Effectiveness',
+            G11: 'Guardrail Effectiveness',
+            G12: 'Workflow Thoroughness',
+            G13: 'Multi-Agent Coordination',
+            G14: 'Skill Utilization',
+            G15: 'Self-Improvement',
+        };
+        let allPassed = true;
+        for (const result of results) {
+            const icon = result.passed ? '✅' : '❌';
+            const name = stageNames[result.gate] ?? result.gate;
+            console.log(`${icon} ${result.gate} ${name}`);
+            if (result.evidence) {
+                for (const line of result.evidence.split('\n')) {
+                    console.log(`   ${line}`);
+                }
+            }
+            if (!result.passed) {
+                allPassed = false;
+                for (const blocker of result.blockers) {
+                    console.log(`   ⛔ ${blocker}`);
+                }
+            }
+            console.log();
+        }
+        if (!allPassed) {
+            console.log('❌ Meta-governance check FAILED — some capabilities are not being effectively used');
+            process.exit(1);
+        }
+        else {
+            console.log('✅ All meta-governance gates passed');
+        }
+    },
+});
+// ============================================================================
 // artifact CRUD
 // ============================================================================
 const create = defineCommand({
@@ -942,6 +1015,7 @@ const contextBudget = defineCommand({
         dir: { type: 'string', default: PROJECT_DIR, description: 'Project directory' },
         'max-always': { type: 'string', description: 'Maximum Always-loaded estimated tokens' },
         'max-task': { type: 'string', description: 'Maximum task context estimated tokens' },
+        provider: { type: 'string', default: 'generic', description: 'Model provider for prompt cache policy: anthropic, openai, or generic' },
         write: { type: 'boolean', default: false, description: 'Write .scale/context-budget.json' },
         json: { type: 'boolean', default: false },
     },
@@ -954,9 +1028,13 @@ const contextBudget = defineCommand({
             maxAlwaysTokens: parsePositiveIntArg(args['max-always'], '--max-always'),
             maxTaskTokens: parsePositiveIntArg(args['max-task'], '--max-task'),
         });
+        const promptCache = resolvePromptCachePolicy({
+            provider: String(args.provider ?? 'generic'),
+            entries: report.entries,
+        });
         const path = isTruthyFlag(args.write) ? writeContextBudgetReport(report) : undefined;
         if (args.json) {
-            console.log(JSON.stringify({ ...report, path }, null, 2));
+            console.log(JSON.stringify({ ...report, promptCache, path }, null, 2));
             return;
         }
         console.log('SCALE Context Budget');
@@ -966,6 +1044,9 @@ const contextBudget = defineCommand({
         for (const [category, summary] of Object.entries(report.summary.byCategory)) {
             console.log(`  ${category}: ${summary.tokens} tokens in ${summary.files} files`);
         }
+        console.log(`  Prompt cache provider: ${promptCache.provider}`);
+        console.log(`  Prompt cache strategy: ${promptCache.strategy}${promptCache.supported ? '' : ' (usage ledger only)'}`);
+        console.log(`  Cache eligible: ${promptCache.cacheEligibleTokens} tokens across ${promptCache.cacheEligiblePaths.length} paths`);
         for (const recommendation of report.recommendations)
             console.log(`  recommendation: ${recommendation}`);
         if (path)
@@ -1013,6 +1094,9 @@ const contextDoctor = defineCommand({
         dir: { type: 'string', default: PROJECT_DIR, description: 'Project directory' },
         'max-always': { type: 'string', description: 'Maximum Always-loaded estimated tokens' },
         'max-task': { type: 'string', description: 'Maximum task context estimated tokens' },
+        task: { type: 'string', description: 'Task text for a representative lazy context pack probe' },
+        level: { type: 'string', default: 'M', description: 'Task level for the context pack probe' },
+        files: { type: 'string', description: 'Comma-separated scoped files for the context pack probe' },
         json: { type: 'boolean', default: false },
     },
     run({ args }) {
@@ -1023,6 +1107,9 @@ const contextDoctor = defineCommand({
             scaleDir,
             maxAlwaysTokens: parsePositiveIntArg(args['max-always'], '--max-always'),
             maxTaskTokens: parsePositiveIntArg(args['max-task'], '--max-task'),
+            task: args.task ? String(args.task) : undefined,
+            level: String(args.level ?? 'M'),
+            files: parseCommaList(args.files),
         });
         if (args.json) {
             console.log(JSON.stringify(report, null, 2));
@@ -1038,9 +1125,55 @@ const contextDoctor = defineCommand({
             process.exitCode = 1;
     },
 });
+const contextAnatomy = defineCommand({
+    meta: { name: 'anatomy', description: 'Scan the project and generate .scale/anatomy.md for file-map context' },
+    args: {
+        dir: { type: 'string', default: PROJECT_DIR, description: 'Project directory' },
+        'max-files': { type: 'string', description: 'Maximum files to include; defaults to 500' },
+        exclude: { type: 'string', description: 'Comma-separated directory names to exclude' },
+        write: { type: 'boolean', default: false, description: 'Write .scale/anatomy.md' },
+        json: { type: 'boolean', default: false },
+    },
+    run({ args }) {
+        const projectDir = resolve(String(args.dir ?? PROJECT_DIR));
+        const scaleDir = resolveScaleDirForProject(projectDir);
+        const maxFiles = parsePositiveIntArg(args['max-files'], '--max-files');
+        const excludePatterns = parseCommaList(args.exclude);
+        const anatomy = new ProjectAnatomy();
+        const sections = anatomy.scan(projectDir, {
+            maxFiles,
+            excludePatterns: excludePatterns.length > 0 ? excludePatterns : undefined,
+        });
+        const content = anatomy.serialize(sections);
+        const summary = [...sections.values()].reduce((acc, entries) => {
+            acc.files += entries.length;
+            acc.tokens += entries.reduce((sum, entry) => sum + entry.tokens, 0);
+            return acc;
+        }, { files: 0, tokens: 0 });
+        const outputPath = join(scaleDir, 'anatomy.md');
+        if (isTruthyFlag(args.write)) {
+            ensureDir(scaleDir);
+            writeFileSync(outputPath, content, 'utf-8');
+        }
+        if (args.json) {
+            console.log(JSON.stringify({
+                ok: true,
+                projectDir,
+                outputPath: isTruthyFlag(args.write) ? outputPath : undefined,
+                summary,
+            }, null, 2));
+            return;
+        }
+        console.log('SCALE Project Anatomy');
+        console.log(`  Files: ${summary.files}`);
+        console.log(`  Estimated tokens: ${summary.tokens}`);
+        if (isTruthyFlag(args.write))
+            console.log(`  Wrote: ${outputPath}`);
+    },
+});
 const context = defineCommand({
     meta: { name: 'context', description: 'Context assembly' },
-    subCommands: { build: contextBuild, status: contextStatus, inject: contextInject, glossary: contextGlossary, init: contextInit, grill: contextGrill, budget: contextBudget, pack: contextPack, doctor: contextDoctor },
+    subCommands: { build: contextBuild, status: contextStatus, inject: contextInject, glossary: contextGlossary, init: contextInit, grill: contextGrill, budget: contextBudget, pack: contextPack, doctor: contextDoctor, anatomy: contextAnatomy },
 });
 // ============================================================================
 // codegraph command - Adapter-first code intelligence
@@ -1539,6 +1672,184 @@ const diagnose = defineCommand({
     subCommands: { plan: diagnosePlanCommand },
 });
 // ============================================================================
+// hunt command - readonly proactive governance scan
+// ============================================================================
+function createBackgroundHunter(args) {
+    return new BackgroundHunter({ projectDir: args.dir ? String(args.dir) : PROJECT_DIR });
+}
+const huntScanCommand = defineCommand({
+    meta: { name: 'scan', description: 'Run a readonly proactive governance scan' },
+    args: {
+        dir: { type: 'string', default: PROJECT_DIR, description: 'Project directory' },
+        changed: { type: 'boolean', default: false, description: 'Scan changed Git files only' },
+        'changed-files': { type: 'string', description: 'Comma or newline separated file list to scan' },
+        json: { type: 'boolean', default: false },
+    },
+    run({ args }) {
+        const report = createBackgroundHunter(args).scan({
+            changedFiles: resolveChangedFilesArg(args),
+        });
+        if (args.json) {
+            console.log(JSON.stringify(report, null, 2));
+            return;
+        }
+        printHuntReport(report);
+    },
+});
+const huntReportCommand = defineCommand({
+    meta: { name: 'report', description: 'Print open and ignored hunt findings' },
+    args: {
+        dir: { type: 'string', default: PROJECT_DIR, description: 'Project directory' },
+        changed: { type: 'boolean', default: false, description: 'Scan changed Git files only' },
+        'changed-files': { type: 'string', description: 'Comma or newline separated file list to scan' },
+        json: { type: 'boolean', default: false },
+    },
+    run({ args }) {
+        const report = createBackgroundHunter(args).scan({
+            changedFiles: resolveChangedFilesArg(args),
+        });
+        if (args.json) {
+            console.log(JSON.stringify(report, null, 2));
+            return;
+        }
+        printHuntReport(report);
+    },
+});
+const huntDiagnoseCommand = defineCommand({
+    meta: { name: 'diagnose', description: 'Create a diagnostic loop from a hunt finding' },
+    args: {
+        id: { type: 'positional', required: true, description: 'Hunt finding id' },
+        dir: { type: 'string', default: PROJECT_DIR, description: 'Project directory' },
+        changed: { type: 'boolean', default: false, description: 'Scan changed Git files only' },
+        'changed-files': { type: 'string', description: 'Comma or newline separated file list to scan' },
+        json: { type: 'boolean', default: false },
+    },
+    run({ args }) {
+        const report = createBackgroundHunter(args).scan({
+            changedFiles: resolveChangedFilesArg(args),
+        });
+        const finding = report.findings.find(item => item.id === String(args.id));
+        if (!finding) {
+            console.error(`Hunt finding not found: ${String(args.id)}`);
+            process.exitCode = 1;
+            return;
+        }
+        const loop = createDiagnosticLoop(finding.diagnosticInput);
+        const validation = validateDiagnosticLoop(loop);
+        if (args.json) {
+            console.log(JSON.stringify({ finding, loop, validation }, null, 2));
+            return;
+        }
+        console.log(renderDiagnosticLoopMarkdown(loop));
+        if (!validation.ready) {
+            console.log('\nBlockers:');
+            for (const blocker of validation.blockers)
+                console.log(`  - ${blocker}`);
+        }
+    },
+});
+const huntIgnoreCommand = defineCommand({
+    meta: { name: 'ignore', description: 'Ignore a stable hunt finding fingerprint' },
+    args: {
+        id: { type: 'positional', required: true, description: 'Hunt finding id' },
+        reason: { type: 'string', description: 'Why this finding is accepted or deferred' },
+        dir: { type: 'string', default: PROJECT_DIR, description: 'Project directory' },
+        changed: { type: 'boolean', default: false, description: 'Scan changed Git files only' },
+        'changed-files': { type: 'string', description: 'Comma or newline separated file list to scan' },
+        json: { type: 'boolean', default: false },
+    },
+    run({ args }) {
+        const projectDir = args.dir ? String(args.dir) : PROJECT_DIR;
+        const report = new BackgroundHunter({ projectDir }).scan({
+            changedFiles: resolveChangedFilesArg(args),
+        });
+        const finding = report.findings.find(item => item.id === String(args.id));
+        if (!finding) {
+            console.error(`Hunt finding not found: ${String(args.id)}`);
+            process.exitCode = 1;
+            return;
+        }
+        const ignored = new HuntFindingStore({ projectDir }).ignore({
+            id: finding.id,
+            fingerprint: finding.fingerprint,
+            reason: args.reason ? String(args.reason) : undefined,
+            ignoredAt: new Date().toISOString(),
+        });
+        if (args.json) {
+            console.log(JSON.stringify({ ignored }, null, 2));
+            return;
+        }
+        console.log(`Ignored hunt finding: ${ignored.id}`);
+        if (ignored.reason)
+            console.log(`  Reason: ${ignored.reason}`);
+    },
+});
+const hunt = defineCommand({
+    meta: { name: 'hunt', description: 'Readonly proactive governance scans' },
+    subCommands: {
+        scan: huntScanCommand,
+        report: huntReportCommand,
+        diagnose: huntDiagnoseCommand,
+        ignore: huntIgnoreCommand,
+    },
+});
+function printHuntReport(report) {
+    console.log('SCALE Hunt Report');
+    console.log(`  Project: ${report.projectDir}`);
+    console.log(`  Open findings: ${report.summary.open}`);
+    console.log(`  Ignored findings: ${report.summary.ignored}`);
+    console.log(`  Blocking findings: ${report.summary.blocking}`);
+    for (const finding of report.findings.slice(0, 20)) {
+        const line = finding.line ? `:${finding.line}` : '';
+        const status = finding.status === 'ignored' ? 'IGNORED' : finding.severity.toUpperCase();
+        console.log(`  [${status}] ${finding.id} ${finding.ruleId} ${finding.path ?? 'project'}${line}: ${finding.message}`);
+    }
+    if (report.findings.length > 20)
+        console.log(`  ... ${report.findings.length - 20} more finding(s)`);
+}
+// ============================================================================
+// dependency command - supply-chain security audit
+// ============================================================================
+const dependencyAuditCommand = defineCommand({
+    meta: { name: 'audit', description: 'Audit lockfile-scoped dependency supply-chain risk' },
+    args: {
+        dir: { type: 'string', default: PROJECT_DIR, description: 'Project directory' },
+        mode: { type: 'string', description: 'Audit mode: compatibility, strict, or offline' },
+        'changed-packages': { type: 'string', description: 'Comma-separated package names to audit instead of direct dependencies' },
+        json: { type: 'boolean', default: false },
+    },
+    run({ args }) {
+        const mode = args.mode === 'compatibility' || args.mode === 'strict' || args.mode === 'offline'
+            ? args.mode
+            : undefined;
+        const report = auditDependencies({
+            projectDir: args.dir ? String(args.dir) : PROJECT_DIR,
+            mode,
+            changedPackages: parseCommaList(args['changed-packages']),
+        });
+        if (args.json) {
+            console.log(JSON.stringify(report, null, 2));
+        }
+        else {
+            console.log(`SCALE Dependency Audit: ${report.ok ? 'OK' : 'FAILED'}`);
+            console.log(`  Packages audited: ${report.summary.packagesAudited}`);
+            console.log(`  Findings: ${report.summary.totalFindings}`);
+            console.log(`  Mode: ${report.mode}`);
+            for (const finding of report.findings.slice(0, 20)) {
+                console.log(`  [${finding.severity}] ${finding.ruleId} ${finding.packageName}${finding.version ? `@${finding.version}` : ''}: ${finding.message}`);
+            }
+            if (report.findings.length > 20)
+                console.log(`  ... ${report.findings.length - 20} more finding(s)`);
+        }
+        if (!report.ok)
+            process.exitCode = 1;
+    },
+});
+const dependency = defineCommand({
+    meta: { name: 'dependency', description: 'Supply-chain dependency governance' },
+    subCommands: { audit: dependencyAuditCommand },
+});
+// ============================================================================
 // tdd command - vertical slice RED/GREEN/REFACTOR loop
 // ============================================================================
 const tddSliceCommand = defineCommand({
@@ -2230,6 +2541,7 @@ const init = defineCommand({
         },
         quick: { type: 'boolean', default: false, description: 'Quick start with auto-detection' },
         interactive: { type: 'boolean', default: false, description: 'Interactive configuration mode with prompts' },
+        profile: { type: 'string', default: '', description: 'Configuration profile (minimal/standard/advanced). Auto-mapped from scenario if not specified' },
         'coverage-threshold': { type: 'string', default: '80', description: 'Coverage threshold (default 80%)' },
         'retry-threshold': { type: 'string', default: '3', description: 'Brute retry threshold (default 3)' },
         'block-severity': { type: 'string', default: 'CRITICAL', description: 'Block severity level (CRITICAL/HIGH/MEDIUM)' },
@@ -2292,7 +2604,11 @@ const init = defineCommand({
             });
             result.created.push(...governance.created);
             result.skipped.push(...governance.skipped);
-            console.log(`\n✅ SCALE Engine initialized for ${agentType} (interactive mode)`);
+            // Generate config.yaml from profile
+            const profileId = args.profile || profileFromScenario(scenarioMode);
+            const configPath = writeConfigYaml(args.dir, profileId, projectName, [agentType]);
+            result.created.push(configPath);
+            console.log(`\n✅ SCALE Engine initialized for ${agentType} (interactive mode, profile: ${profileId})`);
             console.log(`\n📁 Created:`);
             for (const f of result.created)
                 console.log(`   + ${f}`);
@@ -2305,8 +2621,10 @@ const init = defineCommand({
             console.log(`   Settings:      ${result.settingsPath}`);
             console.log(`   Knowledge:     ${result.knowledgeDocPath}`);
             console.log(`   Thresholds:    ${thresholdsPath}`);
+            console.log(`   Config:        ${configPath}`);
             console.log(`   Data dir:      ${result.scaleDir}`);
             console.log(`   Scenario:      ${scenarioMode}`);
+            console.log(`   Profile:       ${profileId}`);
             console.log(`\n📋 Next steps:`);
             for (const step of governanceNextSteps())
                 console.log(`   → ${step}`);
@@ -2315,6 +2633,14 @@ const init = defineCommand({
         // One-click quick start mode
         if (!args.agent) {
             const qsResult = await quickStart(args.dir, { governancePack: args['governance-pack'] });
+            // Generate config.yaml from profile
+            if (qsResult.success) {
+                const profileId = args.profile || profileFromScenario(args.scenario);
+                const projectName = args.dir.split(/[/\\]/).pop() || 'Project';
+                const detectedAgent = qsResult.platform ? [qsResult.platform] : [];
+                const configPath = writeConfigYaml(args.dir, profileId, projectName, detectedAgent);
+                qsResult.created.push(configPath);
+            }
             if (args.json) {
                 const detection = qsResult.success ? undefined : detectPlatform(args.dir);
                 console.log(JSON.stringify({
@@ -2369,15 +2695,21 @@ const init = defineCommand({
         });
         result.created.push(...governance.created);
         result.skipped.push(...governance.skipped);
+        // Generate config.yaml from profile
+        const profileId = args.profile || profileFromScenario(args.scenario);
+        const configPath = writeConfigYaml(args.dir, profileId, projectName, [args.agent]);
+        result.created.push(configPath);
         if (args.json) {
             console.log(JSON.stringify({
                 ok: true,
                 mode: args.quick ? 'quick-agent' : 'manual',
                 agent: args.agent,
                 scenario: args.scenario,
+                profile: profileId,
                 governancePack: args['governance-pack'],
                 settingsPath: result.settingsPath,
                 knowledgeDocPath: result.knowledgeDocPath,
+                configPath,
                 scaleDir: result.scaleDir,
                 created: result.created,
                 skipped: result.skipped,
@@ -2385,7 +2717,7 @@ const init = defineCommand({
             }, null, 2));
             return;
         }
-        console.log(`\n✅ SCALE Engine initialized for ${args.agent} (scenario: ${args.scenario})`);
+        console.log(`\n✅ SCALE Engine initialized for ${args.agent} (scenario: ${args.scenario}, profile: ${profileId})`);
         console.log(`\n📁 Created:`);
         for (const f of result.created)
             console.log(`   + ${f}`);
@@ -2396,6 +2728,7 @@ const init = defineCommand({
         }
         console.log(`\n🔧 Settings: ${result.settingsPath}`);
         console.log(`\n📖 Knowledge: ${result.knowledgeDocPath}`);
+        console.log(`\n📄 Config:    ${configPath}`);
         console.log(`\n📂 Data dir:  ${result.scaleDir}`);
         console.log(`\n📋 Next steps:`);
         for (const step of governanceNextSteps())
@@ -2403,8 +2736,70 @@ const init = defineCommand({
     },
 });
 // ============================================================================
-// governance command — Generated governance asset tooling
+// config command — Configuration profile management
 // ============================================================================
+const configProfile = defineCommand({
+    meta: { name: 'profile', description: 'View or switch configuration profile' },
+    args: {
+        set: { type: 'string', default: '', description: 'Switch to profile (minimal/standard/advanced)' },
+        list: { type: 'boolean', default: false, description: 'List all available profiles' },
+        json: { type: 'boolean', default: false, description: 'Output as JSON' },
+    },
+    async run({ args }) {
+        if (args.list) {
+            const profiles = listConfigProfiles();
+            if (args.json) {
+                console.log(JSON.stringify(profiles, null, 2));
+                return;
+            }
+            console.log('\nAvailable profiles:\n');
+            for (const p of profiles) {
+                console.log(`  ${p.id.padEnd(12)} ${p.name} — ${p.description}`);
+            }
+            console.log(`\nUse: scale config profile --set <id>`);
+            return;
+        }
+        if (args.set) {
+            const profile = getConfigProfile(args.set);
+            if (profile.id !== args.set) {
+                console.log(`\n⚠️  Profile "${args.set}" not found. Available: minimal, standard, advanced`);
+                return;
+            }
+            // Update config.yaml
+            const configPath = join('.scale', 'config.yaml');
+            const projectName = process.cwd().split(/[/\\]/).pop() || 'Project';
+            const content = generateConfigForProfile(args.set, { name: projectName });
+            ensureDir('.scale');
+            writeFileSync(configPath, content, 'utf-8');
+            console.log(`\n✅ Profile switched to: ${profile.name}`);
+            console.log(`   ${profile.description}`);
+            console.log(`\n📄 Config updated: ${configPath}`);
+            return;
+        }
+        // Show current profile
+        const configPath = join('.scale', 'config.yaml');
+        if (!existsSync(configPath)) {
+            console.log('\n⚠️  No config.yaml found. Run: scale init');
+            return;
+        }
+        const content = readFileSync(configPath, 'utf-8');
+        const match = content.match(/^profile:\s*(.+)$/m);
+        const currentProfile = match?.[1]?.trim() || 'standard';
+        const profile = getConfigProfile(currentProfile);
+        if (args.json) {
+            console.log(JSON.stringify({ profile: profile.id, name: profile.name, description: profile.description, sections: profile.sections }, null, 2));
+            return;
+        }
+        console.log(`\nCurrent profile: ${profile.name} (${profile.id})`);
+        console.log(`  ${profile.description}`);
+        console.log(`\nSections: ${profile.sections.join(', ')}`);
+        console.log(`\nUse: scale config profile --set <id> to switch`);
+    },
+});
+const config = defineCommand({
+    meta: { name: 'config', description: 'Configuration management' },
+    subCommands: { profile: configProfile },
+});
 const governanceDiff = defineCommand({
     meta: { name: 'diff', description: 'Check generated governance files for drift' },
     args: {
@@ -3612,6 +4007,75 @@ const memoryDoctor = defineCommand({
             process.exitCode = 1;
     },
 });
+const memoryCerebrum = defineCommand({
+    meta: { name: 'cerebrum', description: 'Maintain .scale/cerebrum.md do-not-repeat rules and preferences' },
+    args: {
+        type: { type: 'string', description: 'Optional entry type: preference or do-not-repeat' },
+        pattern: { type: 'string', description: 'Pattern for do-not-repeat entries' },
+        description: { type: 'string', description: 'Entry description or preference text' },
+        tags: { type: 'string', description: 'Comma-separated tags for preferences' },
+        write: { type: 'boolean', default: false, description: 'Write .scale/cerebrum.md' },
+        json: { type: 'boolean', default: false },
+    },
+    async run({ args }) {
+        const { kb } = getEngine();
+        const manager = new CerebrumManager(kb);
+        const type = args.type ? String(args.type).toLowerCase() : '';
+        let created;
+        if (type) {
+            if (type === 'do-not-repeat' || type === 'do_not_repeat' || type === 'dnr') {
+                const pattern = String(args.pattern ?? '').trim();
+                const description = String(args.description ?? '').trim();
+                if (!pattern || !description) {
+                    console.error('memory cerebrum --type do-not-repeat requires --pattern and --description.');
+                    process.exit(1);
+                    return;
+                }
+                created = await manager.addDoNotRepeat(pattern, description);
+            }
+            else if (type === 'preference' || type === 'pref') {
+                const description = String(args.description ?? args.pattern ?? '').trim();
+                if (!description) {
+                    console.error('memory cerebrum --type preference requires --description.');
+                    process.exit(1);
+                    return;
+                }
+                created = await manager.addPreference(description, parseCommaList(args.tags));
+            }
+            else {
+                console.error('memory cerebrum --type must be preference or do-not-repeat.');
+                process.exit(1);
+                return;
+            }
+        }
+        const entries = await manager.loadAll();
+        const outputPath = join(SCALE_DIR, 'cerebrum.md');
+        const shouldWrite = isTruthyFlag(args.write) || Boolean(created);
+        if (shouldWrite) {
+            ensureDir(SCALE_DIR);
+            writeFileSync(outputPath, manager.toMarkdown(), 'utf-8');
+        }
+        const summary = {
+            total: entries.length,
+            doNotRepeat: entries.filter(entry => entry.type === 'do_not_repeat').length,
+            preferences: entries.filter(entry => entry.type === 'preference').length,
+        };
+        if (args.json) {
+            console.log(JSON.stringify({
+                ok: true,
+                outputPath: shouldWrite ? outputPath : undefined,
+                created,
+                summary,
+            }, null, 2));
+            return;
+        }
+        console.log('SCALE Cerebrum');
+        console.log(`  Do-not-repeat: ${summary.doNotRepeat}`);
+        console.log(`  Preferences: ${summary.preferences}`);
+        if (shouldWrite)
+            console.log(`  Wrote: ${outputPath}`);
+    },
+});
 const memorySettle = defineCommand({
     meta: { name: 'settle', description: 'Settle runtime evidence into a reviewable memory learning candidate' },
     args: {
@@ -3876,6 +4340,7 @@ const memory = defineCommand({
     subCommands: {
         pack: memoryPack,
         doctor: memoryDoctor,
+        cerebrum: memoryCerebrum,
         settle: memorySettle,
         ingest: memoryIngest,
         query: memoryQuery,
@@ -4755,6 +5220,7 @@ const team = defineCommand({
 // Phase-Aligned Commands (v0.10.1) - agent-skills style
 // ============================================================================
 import * as phaseCommands from '../cli/phaseCommands.js';
+import { runCommand } from '../cli/runCommand.js';
 import * as liteCommands from '../cli/liteCommands.js';
 import * as vibeCommands from '../cli/vibeCommands.js';
 const main = defineCommand({
@@ -4773,11 +5239,13 @@ const main = defineCommand({
         verify: phaseCommands.phaseVerify,
         review: phaseCommands.phaseReview,
         ship: phaseCommands.phaseShip,
+        run: runCommand,
         // Original commands (preserved)
         init,
         doctor,
         session,
         gate,
+        'meta-governance': metaGovernance,
         create,
         list,
         show,
@@ -4805,6 +5273,8 @@ const main = defineCommand({
         runtime,
         memory,
         diagnose,
+        hunt,
+        dependency,
         tdd,
         tool,
         tools: tool,
@@ -4814,6 +5284,7 @@ const main = defineCommand({
         team,
         'create-prd': createPRD,
         'out-of-scope': outOfScope,
+        config,
     },
 });
 runMain(main);