@intentset/cli 0.1.0

package/dist/session.d.ts

@@ -0,0 +1,61 @@
+import { type ArchitectureResult, type Mode } from "@intentset/architecture";
+import { type Diagnostic, type Graph, type Level, type ValidationResult } from "@intentset/core";
+import { type EvidenceCheck, type EvidenceSnapshot, type RunScope } from "@intentset/verification";
+import { type Io, type Snapshot } from "./output.ts";
+import { type CarrierName, type Repository } from "./repository.ts";
+import { type Tree } from "./tree.ts";
+/** Where run records are read from when no --evidence is given. Local output: not to be committed. */
+export declare const EVIDENCE_DIR = ".intentset/evidence";
+export interface SessionOptions {
+    root?: string;
+    carrier: CarrierName;
+    level: Level;
+    /** L2 and above: architecture mode and baseline. */
+    mode?: Mode;
+    baseline?: string;
+    /** L3 and above: evidence files as given (relative to cwd); undefined reads EVIDENCE_DIR. */
+    evidence?: string[];
+    /** L3 and above: the exact product and release evidence is assessed for; null considers every scope. */
+    scope?: RunScope | null;
+    /** The day exceptions expire against; default today, UTC. */
+    today?: string;
+}
+export interface EvidenceRun {
+    /** The files read, as repository-relative paths where they lie inside the root. */
+    files: string[];
+    records: number;
+    check: EvidenceCheck;
+    snapshot: EvidenceSnapshot;
+}
+export interface Session {
+    repo: Repository;
+    level: Level;
+    /** Core's result with every level's diagnostics folded in, so `ok` and the export carry them all. */
+    result: ValidationResult;
+    diagnostics: Diagnostic[];
+    errors: number;
+    warnings: number;
+    snapshot: Snapshot;
+    tree?: Tree;
+    architecture?: ArchitectureResult;
+    evidence?: EvidenceRun;
+    /** L4: the active knowledge artifacts checked for publication readiness, by ID. */
+    publication?: {
+        checked: string[];
+    };
+}
+/** Load and check at the level, or return the exit code (2) after reporting why the repository could not be read. */
+export declare function openSession(command: string, options: SessionOptions, io: Io): Session | number;
+/** The evidence files to read: those given, else every `*.json` in EVIDENCE_DIR, sorted. Absolute paths. */
+export declare function evidenceFiles(root: string, cwd: string, given: string[] | undefined): string[];
+/**
+ * Core §9 and §11 at L4: every knowledge artifact that is neither draft nor
+ * retired is current against the sources it was reviewed against, and says
+ * where it applies. Anything else is CORE008, because it could not be
+ * published as current.
+ */
+export declare function publicationReadiness(graph: Graph): {
+    checked: string[];
+    diagnostics: Diagnostic[];
+};
+//# sourceMappingURL=session.d.ts.map

package/dist/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAgBA,OAAO,EACL,KAAK,kBAAkB,EAGvB,KAAK,IAAI,EAEV,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAGL,KAAK,UAAU,EACf,KAAK,KAAK,EAIV,KAAK,KAAK,EAEV,KAAK,gBAAgB,EAEtB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,gBAAgB,EAErB,KAAK,QAAQ,EAEd,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAoB,KAAK,EAAE,EAAE,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,KAAK,WAAW,EAAyC,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC3G,OAAO,EAAY,KAAK,IAAI,EAAE,MAAM,WAAW,CAAC;AAEhD,sGAAsG;AACtG,eAAO,MAAM,YAAY,wBAAwB,CAAC;AAElD,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,WAAW,CAAC;IACrB,KAAK,EAAE,KAAK,CAAC;IACb,oDAAoD;IACpD,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6FAA6F;IAC7F,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,wGAAwG;IACxG,KAAK,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC;IACxB,6DAA6D;IAC7D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,mFAAmF;IACnF,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,aAAa,CAAC;IACrB,QAAQ,EAAE,gBAAgB,CAAC;CAC5B;AAED,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,UAAU,CAAC;IACjB,KAAK,EAAE,KAAK,CAAC;IACb,qGAAqG;IACrG,MAAM,EAAE,gBAAgB,CAAC;IACzB,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,QAAQ,CAAC;IACnB,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,EAAE,WAAW,CAAC;IACvB,mFAAmF;IACnF,WAAW,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CACrC;AAID,qHAAqH;AACrH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,EAAE,EAAE,GAAG,OAAO,GAAG,MAAM,CAsG9F;AAiBD,4GAA4G;AAC5G,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,GAAG,MAAM,EAAE,CAQ9F;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,KAAK,GAAG;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,WAAW,EAAE,UAAU,EAAE,CAAA;CAAE,CA4CnG"}

package/dist/session.js

@@ -0,0 +1,202 @@
+/**
+ * The shared front half of every reading command: find the root, load the
+ * repository, and run every check the requested level asks for, each level
+ * including the ones below it (Core §11):
+ *
+ *   L1  core: parse, identity, fields, typed links, hierarchy, lifecycle, narrative
+ *   L2  + ownership (core) and the architecture check over the repository tree
+ *   L3  + run records classified against this snapshot, and current-pass coverage
+ *   L4  + publication readiness: active knowledge is review-current and carries availability
+ *   L5  is a claim about continuous CI, which one run cannot check; main refuses it
+ *
+ * Returns an exit code instead when the command cannot proceed, having said
+ * why. Nothing here writes.
+ */
+import { existsSync, readdirSync, readFileSync } from "node:fs";
+import { join, resolve } from "node:path";
+import { checkArchitecture, parseBaseline, } from "@intentset/architecture";
+import { compareStrings, graphHash, hasErrors, LEVELS, sortDiagnostics, validate, } from "@intentset/core";
+import { reviewStatus } from "@intentset/publisher";
+import { checkEvidence, readRunRecords, } from "@intentset/verification";
+import { insideRoot } from "./outputs.js";
+import { formatDiagnostic } from "./output.js";
+import { CONFIG_PATH, findRoot, loadRepository } from "./repository.js";
+import { readTree } from "./tree.js";
+/** Where run records are read from when no --evidence is given. Local output: not to be committed. */
+export const EVIDENCE_DIR = ".intentset/evidence";
+const at = (level, floor) => LEVELS.indexOf(level) >= LEVELS.indexOf(floor);
+/** Load and check at the level, or return the exit code (2) after reporting why the repository could not be read. */
+export function openSession(command, options, io) {
+    const root = findRoot(io.cwd, options.root);
+    if (root === null) {
+        const where = options.root === undefined ? "this directory or any above it" : options.root;
+        io.stderr(`intentset ${command}: no ${CONFIG_PATH} in ${where}.\n` +
+            "Run `intentset init` at the repository root to create one, or pass --root <dir>.\n");
+        return 2;
+    }
+    const repo = loadRepository(root, options.carrier);
+    if (!repo.configOk) {
+        io.stderr(`intentset ${command}: the configuration has errors, so the scope is unknown.\n`);
+        for (const d of sortDiagnostics(repo.diagnostics))
+            io.stderr(formatDiagnostic(d));
+        return 2;
+    }
+    const level = options.level;
+    const validated = validate(repo.inputs, repo.registries, { level });
+    const graph = validated.graph;
+    const snapshot = { commit: repo.commit, graphHash: graphHash(graph) };
+    if (repo.commitUnavailable !== undefined)
+        snapshot.commitUnavailable = repo.commitUnavailable;
+    if (repo.uncommitted === true)
+        snapshot.uncommitted = true;
+    const all = [...validated.diagnostics, ...repo.diagnostics];
+    const session = { repo, level, snapshot };
+    if (at(level, "L2")) {
+        let baseline = [];
+        if (options.baseline !== undefined) {
+            const read = readBaseline(resolve(io.cwd, options.baseline));
+            if (typeof read === "string") {
+                io.stderr(`intentset ${command}: --baseline ${options.baseline}: ${read}\n`);
+                return 2;
+            }
+            baseline = read;
+        }
+        const tree = readTree(root, repo.config);
+        const architecture = checkArchitecture(graph, repo.registries, { files: tree.files }, {
+            level,
+            mode: options.mode ?? "migration",
+            baseline,
+            today: options.today ?? new Date().toISOString().slice(0, 10),
+            ...(repo.config.registries === null ? {} : { registriesPath: repo.config.registries }),
+        });
+        session.tree = tree;
+        session.architecture = architecture;
+        all.push(...architecture.diagnostics);
+    }
+    if (at(level, "L3")) {
+        const files = evidenceFiles(root, io.cwd, options.evidence);
+        const records = [];
+        const seen = new Set();
+        const shown = [];
+        for (const file of files) {
+            const path = insideRoot(root, file) ?? file;
+            let json;
+            try {
+                json = JSON.parse(readFileSync(file, "utf8"));
+            }
+            catch (error) {
+                io.stderr(`intentset ${command}: evidence ${path} is not readable JSON: ${error.message}\n`);
+                return 2;
+            }
+            const read = readRunRecords(json, path);
+            all.push(...read.diagnostics);
+            // The same record imported into two files is one run, not two.
+            for (const record of read.records) {
+                const key = JSON.stringify(record);
+                if (seen.has(key))
+                    continue;
+                seen.add(key);
+                records.push(record);
+            }
+            shown.push(path);
+        }
+        const evidenceSnapshot = {
+            commit: snapshot.commit,
+            graphHash: snapshot.graphHash,
+            scope: options.scope ?? null,
+        };
+        const check = checkEvidence(graph, records, evidenceSnapshot, {
+            level,
+            files: session.tree?.paths,
+            evidencePath: shown.length === 1 ? shown[0] : null,
+        });
+        session.evidence = { files: shown, records: records.length, check, snapshot: evidenceSnapshot };
+        all.push(...check.diagnostics);
+    }
+    if (at(level, "L4")) {
+        const readiness = publicationReadiness(graph);
+        session.publication = { checked: readiness.checked };
+        all.push(...readiness.diagnostics);
+    }
+    const diagnostics = sortDiagnostics(all);
+    const errors = diagnostics.filter((d) => d.severity === "error").length;
+    const result = { graph, diagnostics, ok: !hasErrors(diagnostics) };
+    return { ...session, result, diagnostics, errors, warnings: diagnostics.length - errors };
+}
+/** A baseline file's entries, or why it could not be read. */
+function readBaseline(file) {
+    let text;
+    try {
+        text = readFileSync(file, "utf8");
+    }
+    catch (error) {
+        return `could not be read: ${error.message}`;
+    }
+    try {
+        return parseBaseline(text);
+    }
+    catch (error) {
+        return error.message;
+    }
+}
+/** The evidence files to read: those given, else every `*.json` in EVIDENCE_DIR, sorted. Absolute paths. */
+export function evidenceFiles(root, cwd, given) {
+    if (given !== undefined && given.length > 0)
+        return given.map((file) => resolve(cwd, file));
+    const dir = join(root, EVIDENCE_DIR);
+    if (!existsSync(dir))
+        return [];
+    return readdirSync(dir)
+        .filter((name) => name.endsWith(".json"))
+        .sort(compareStrings)
+        .map((name) => join(dir, name));
+}
+/**
+ * Core §9 and §11 at L4: every knowledge artifact that is neither draft nor
+ * retired is current against the sources it was reviewed against, and says
+ * where it applies. Anything else is CORE008, because it could not be
+ * published as current.
+ */
+export function publicationReadiness(graph) {
+    const checked = [];
+    const diagnostics = [];
+    for (const id of [...graph.artifacts.keys()].sort(compareStrings)) {
+        const artifact = graph.artifacts.get(id);
+        const { meta } = artifact;
+        if (meta.type !== "knowledge" || meta.status === "draft" || meta.status === "retired")
+            continue;
+        checked.push(id);
+        const report = (field, message, remediation) => diagnostics.push({
+            code: "CORE008",
+            severity: "error",
+            origin: "publication",
+            artifact: id,
+            path: artifact.path,
+            field,
+            message,
+            remediation,
+        });
+        if (meta.availability === undefined) {
+            report("/intentset/availability", `${meta.status} knowledge ${id} has no availability, so no release could publish it (Core §7: missing access information fails closed).`, "Add availability with the products, releases, roles, editions and flags the guidance applies to.");
+        }
+        const review = reviewStatus(graph, artifact);
+        if (review.status === "current")
+            continue;
+        const reasons = [];
+        if (review.changed.length > 0)
+            reasons.push(`${review.changed.join(", ")} changed since review`);
+        if (review.missing.length > 0)
+            reasons.push(`no review pin for ${review.missing.join(", ")}`);
+        if (review.reviewer === null)
+            reasons.push("it names no reviewer");
+        if (review.reviewedAt === null)
+            reasons.push("it gives no review date");
+        report(review.reviewer === null
+            ? "/intentset/reviewedBy"
+            : review.reviewedAt === null
+                ? "/intentset/reviewedAt"
+                : "/intentset/extensions/intentset.org~1review", `${meta.status} knowledge ${id} needs review: ${reasons.join("; ")} (Core §9).`, "Review the knowledge against its current sources, then update reviewedBy, reviewedAt and the intentset.org/review pins (Core §9).");
+    }
+    return { checked, diagnostics };
+}
+//# sourceMappingURL=session.js.map

package/dist/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAGL,iBAAiB,EAEjB,aAAa,GACd,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAEL,cAAc,EAGd,SAAS,EACT,SAAS,EACT,MAAM,EAEN,eAAe,EAEf,QAAQ,GACT,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EACL,aAAa,EAKb,cAAc,GACf,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAA0B,MAAM,aAAa,CAAC;AACvE,OAAO,EAAoB,WAAW,EAAE,QAAQ,EAAE,cAAc,EAAmB,MAAM,iBAAiB,CAAC;AAC3G,OAAO,EAAE,QAAQ,EAAa,MAAM,WAAW,CAAC;AAEhD,sGAAsG;AACtG,MAAM,CAAC,MAAM,YAAY,GAAG,qBAAqB,CAAC;AAyClD,MAAM,EAAE,GAAG,CAAC,KAAY,EAAE,KAAY,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAE1F,qHAAqH;AACrH,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,OAAuB,EAAE,EAAM;IAC1E,MAAM,IAAI,GAAG,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QAC3F,EAAE,CAAC,MAAM,CACP,aAAa,OAAO,QAAQ,WAAW,OAAO,KAAK,KAAK;YACtD,oFAAoF,CACvF,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACnD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACnB,EAAE,CAAC,MAAM,CAAC,aAAa,OAAO,4DAA4D,CAAC,CAAC;QAC5F,KAAK,MAAM,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC;YAAE,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;QAClF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACpE,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC;IAC9B,MAAM,QAAQ,GAAa,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;IAChF,IAAI,IAAI,CAAC,iBAAiB,KAAK,SAAS;QAAE,QAAQ,CAAC,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,CAAC;IAC9F,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI;QAAE,QAAQ,CAAC,WAAW,GAAG,IAAI,CAAC;IAC3D,MAAM,GAAG,GAAiB,CAAC,GAAG,SAAS,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAoE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAE3G,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;QACpB,IAAI,QAAQ,GAAoB,EAAE,CAAC;QACnC,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC7D,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,EAAE,CAAC,MAAM,CAAC,aAAa,OAAO,gBAAgB,OAAO,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,CAAC;gBAC7E,OAAO,CAAC,CAAC;YACX,CAAC;YACD,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,YAAY,GAAG,iBAAiB,CACpC,KAAK,EACL,IAAI,CAAC,UAAU,EACf,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EACrB;YACE,KAAK;YACL,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,WAAW;YACjC,QAAQ;YACR,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YAC7D,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;SACvF,CACF,CAAC;QACF,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;QACpB,OAAO,CAAC,YAAY,GAAG,YAAY,CAAC;QACpC,GAAG,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IACxC,CAAC;IAED,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAgB,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC;YAC5C,IAAI,IAAa,CAAC;YAClB,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,EAAE,CAAC,MAAM,CAAC,aAAa,OAAO,cAAc,IAAI,0BAA2B,KAAe,CAAC,OAAO,IAAI,CAAC,CAAC;gBACxG,OAAO,CAAC,CAAC;YACX,CAAC;YACD,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACxC,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC;YAC9B,+DAA+D;YAC/D,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;gBACnC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACd,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvB,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;QACD,MAAM,gBAAgB,GAAqB;YACzC,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI;SAC7B,CAAC;QACF,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE;YAC5D,KAAK;YACL,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK;YAC1B,YAAY,EAAE,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;SACnD,CAAC,CAAC;QACH,OAAO,CAAC,QAAQ,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;QAChG,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC;IACjC,CAAC;IAED,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;QACpB,MAAM,SAAS,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC9C,OAAO,CAAC,WAAW,GAAG,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC;QACrD,GAAG,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,WAAW,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;IACxE,MAAM,MAAM,GAAqB,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;IACrF,OAAO,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;AAC5F,CAAC;AAED,8DAA8D;AAC9D,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,sBAAuB,KAAe,CAAC,OAAO,EAAE,CAAC;IAC1D,CAAC;IACD,IAAI,CAAC;QACH,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAQ,KAAe,CAAC,OAAO,CAAC;IAClC,CAAC;AACH,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,GAAW,EAAE,KAA2B;IAClF,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IAC5F,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACrC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,OAAO,WAAW,CAAC,GAAG,CAAC;SACpB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;SACxC,IAAI,CAAC,cAAc,CAAC;SACpB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;AACpC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAY;IAC/C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,WAAW,GAAiB,EAAE,CAAC;IACrC,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;QAClE,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAa,CAAC;QACrD,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC;QAC1B,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,SAAS;QAChG,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,OAAe,EAAE,WAAmB,EAAE,EAAE,CACrE,WAAW,CAAC,IAAI,CAAC;YACf,IAAI,EAAE,SAAS;YACf,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,aAAa;YACrB,QAAQ,EAAE,EAAE;YACZ,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,KAAK;YACL,OAAO;YACP,WAAW;SACZ,CAAC,CAAC;QACL,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,CACJ,yBAAyB,EACzB,GAAG,IAAI,CAAC,MAAM,cAAc,EAAE,0GAA0G,EACxI,kGAAkG,CACnG,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC7C,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;YAAE,SAAS;QAC1C,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACjG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,qBAAqB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9F,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACnE,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACxE,MAAM,CACJ,MAAM,CAAC,QAAQ,KAAK,IAAI;YACtB,CAAC,CAAC,uBAAuB;YACzB,CAAC,CAAC,MAAM,CAAC,UAAU,KAAK,IAAI;gBAC1B,CAAC,CAAC,uBAAuB;gBACzB,CAAC,CAAC,6CAA6C,EACnD,GAAG,IAAI,CAAC,MAAM,cAAc,EAAE,kBAAkB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAC/E,mIAAmI,CACpI,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AAClC,CAAC"}

package/dist/tree.d.ts

@@ -0,0 +1,15 @@
+import type { Config } from "@intentset/core";
+/** Extensions read as text: code the import graph needs, and the JSON, Markdown and YAML it and the claims name. */
+export declare const TEXT_EXTENSIONS: string[];
+/** The largest file read into the tree; Core §3 bounds what a tool reads, and a record has the same limit. */
+export declare const TREE_MAX_BYTES: number;
+export interface Tree {
+    /** Every path in the tree, with its text for code and configuration and "" for anything else. */
+    files: Map<string, string>;
+    /** Every path in the tree, for checks that only ask whether a file exists. */
+    paths: Set<string>;
+    /** Files with a text extension that were over the limit and not read, sorted. */
+    skipped: string[];
+}
+export declare function readTree(root: string, config: Pick<Config, "ignore">): Tree;
+//# sourceMappingURL=tree.d.ts.map

package/dist/tree.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tree.d.ts","sourceRoot":"","sources":["../src/tree.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAG9C,oHAAoH;AACpH,eAAO,MAAM,eAAe,UAa3B,CAAC;AAEF,8GAA8G;AAC9G,eAAO,MAAM,cAAc,QAAc,CAAC;AAE1C,MAAM,WAAW,IAAI;IACnB,iGAAiG;IACjG,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3B,8EAA8E;IAC9E,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACnB,iFAAiF;IACjF,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,IAAI,CAoB3E"}

package/dist/tree.js

@@ -0,0 +1,56 @@
+/**
+ * The repository as the architecture and evidence checks see it: every file
+ * `listFiles` returns that neither `.intentset/config.yaml` nor
+ * `.intentset/architecture.yaml` ignores. Code and configuration carry their
+ * text; every other file (a stylesheet, an image, a font) is present with an
+ * empty text, so an import of it resolves to a file rather than to nothing.
+ * A text file over 1 MiB is present but not read, and the report lists it,
+ * rather than a check quietly seeing less than the tree holds.
+ */
+import { readFileSync, statSync } from "node:fs";
+import { join } from "node:path";
+import { ARCHITECTURE_CONFIG_PATH, readArchitectureConfig, resolveConfig } from "@intentset/architecture";
+import { listFiles } from "./repository.js";
+/** Extensions read as text: code the import graph needs, and the JSON, Markdown and YAML it and the claims name. */
+export const TEXT_EXTENSIONS = [
+    ".ts",
+    ".tsx",
+    ".mts",
+    ".cts",
+    ".js",
+    ".jsx",
+    ".mjs",
+    ".cjs",
+    ".json",
+    ".md",
+    ".yaml",
+    ".yml",
+];
+/** The largest file read into the tree; Core §3 bounds what a tool reads, and a record has the same limit. */
+export const TREE_MAX_BYTES = 1024 * 1024;
+export function readTree(root, config) {
+    let ignore = resolveConfig().ignore;
+    try {
+        const text = readFileSync(join(root, ARCHITECTURE_CONFIG_PATH), "utf8");
+        ignore = resolveConfig(readArchitectureConfig(text).config).ignore;
+    }
+    catch {
+        // No architecture configuration: its default ignore list stands.
+    }
+    const files = new Map();
+    const skipped = [];
+    const paths = listFiles(root, [...config.ignore, ...ignore]);
+    for (const path of paths) {
+        const file = join(root, path);
+        if (!TEXT_EXTENSIONS.some((extension) => path.endsWith(extension)))
+            files.set(path, "");
+        else if (statSync(file).size > TREE_MAX_BYTES) {
+            skipped.push(path);
+            files.set(path, "");
+        }
+        else
+            files.set(path, readFileSync(file, "utf8"));
+    }
+    return { files, paths: new Set(paths), skipped };
+}
+//# sourceMappingURL=tree.js.map

package/dist/tree.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tree.js","sourceRoot":"","sources":["../src/tree.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAE1G,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,oHAAoH;AACpH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,OAAO;IACP,KAAK;IACL,OAAO;IACP,MAAM;CACP,CAAC;AAEF,8GAA8G;AAC9G,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,GAAG,IAAI,CAAC;AAW1C,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,MAA8B;IACnE,IAAI,MAAM,GAAG,aAAa,EAAE,CAAC,MAAM,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,wBAAwB,CAAC,EAAE,MAAM,CAAC,CAAC;QACxE,MAAM,GAAG,aAAa,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,iEAAiE;IACnE,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC;IAC7D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;aACnF,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,cAAc,EAAE,CAAC;YAC9C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACtB,CAAC;;YAAM,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;AACnD,CAAC"}

package/package.json

@@ -0,0 +1,46 @@
+{
+  "name": "@intentset/cli",
+  "version": "0.1.0",
+  "description": "The intentset command: validate, graph, architecture check, evidence, impact, review, publish, serve, context, mcp.",
+  "license": "MIT",
+  "type": "module",
+  "engines": {
+    "node": ">=22.18"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/intentset/intentset.git",
+    "directory": "packages/cli"
+  },
+  "homepage": "https://intentset.org/",
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "dist",
+    "src"
+  ],
+  "exports": {
+    ".": {
+      "intentset-source": "./src/index.ts",
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "bin": {
+    "intentset": "./dist/intentset.js"
+  },
+  "dependencies": {
+    "@intentset/core": "^0.1.0",
+    "@intentset/markset-adapter": "^0.1.0",
+    "@intentset/architecture": "^0.1.0",
+    "@intentset/verification": "^0.1.0",
+    "@intentset/publisher": "^0.1.0",
+    "@intentset/atlas": "^0.1.0",
+    "@intentset/mcp": "^0.1.0",
+    "@intentset/conformance-suite": "^0.1.0"
+  },
+  "devDependencies": {
+    "@modelcontextprotocol/sdk": "^1.32.0"
+  }
+}

package/src/commands/architecture.ts

@@ -0,0 +1,77 @@
+/**
+ * `intentset architecture check` (VSA §2, the profile's boundaries): claims,
+ * ownership, the import graph, layers, regions, resources, exceptions and,
+ * in migration mode, the baseline, over every file the configuration does
+ * not ignore. Diagnostics like validate's, then the summary with what was not
+ * checked and what is left to review. `--write-baseline` writes the one file
+ * it names. Nothing else is written.
+ */
+import { writeFileSync } from "node:fs";
+import { resolve } from "node:path";
+import { writeBaseline } from "@intentset/architecture";
+import { count, formatDiagnostic, type Io, json, TOOL } from "../output.ts";
+import { outputProblem } from "../outputs.ts";
+import { architectureLines } from "../reports.ts";
+import type { Session } from "../session.ts";
+
+export function architectureCommand(
+  session: Session,
+  options: { writeBaseline?: string },
+  asJson: boolean,
+  io: Io,
+): number {
+  const architecture = session.architecture;
+  if (architecture === undefined) throw new Error("architecture check opened a session below L2");
+  const diagnostics = architecture.diagnostics;
+  const errors = diagnostics.filter((d) => d.severity === "error").length;
+  const warnings = diagnostics.length - errors;
+  const outside = session.errors - errors;
+
+  if (options.writeBaseline !== undefined) {
+    const target = resolve(io.cwd, options.writeBaseline);
+    const problem = outputProblem(session.repo, target);
+    if (problem !== null) {
+      io.stderr(`intentset architecture check: --write-baseline ${options.writeBaseline} ${problem}; not written.\n`);
+      return 2;
+    }
+    const entries = writeBaseline(diagnostics);
+    try {
+      writeFileSync(target, `${JSON.stringify(entries, null, 2)}\n`);
+    } catch (error) {
+      io.stderr(
+        `intentset architecture check: could not write ${options.writeBaseline}: ${(error as Error).message}\n`,
+      );
+      return 2;
+    }
+    io.stderr(
+      `intentset architecture check: wrote ${count(entries.length, "baseline entry", "baseline entries")} to ${options.writeBaseline}\n`,
+    );
+  }
+
+  if (asJson) {
+    io.stdout(
+      json({
+        tool: TOOL,
+        level: session.level,
+        snapshot: session.snapshot,
+        summary: architecture.summary,
+        skipped: session.tree?.skipped ?? [],
+        errors,
+        warnings,
+        diagnostics,
+        validation: { errorsOutsideArchitecture: outside },
+      }),
+    );
+  } else {
+    for (const d of diagnostics) io.stdout(formatDiagnostic(d));
+    const lines = [`${count(errors, "error")}, ${count(warnings, "warning")} from the architecture check`];
+    if (outside > 0) {
+      lines.push(
+        `Validation has ${count(outside, "other error")}, so the graph this checked may be incomplete; run \`intentset validate --level ${session.level}\`.`,
+      );
+    }
+    lines.push(...architectureLines(architecture, session.tree?.skipped ?? []));
+    io.stdout(`${lines.join("\n")}\n`);
+  }
+  return session.errors > 0 ? 1 : 0;
+}

package/src/commands/context.ts

@@ -0,0 +1,142 @@
+/**
+ * `intentset context <ID>` (Core §10): the bounded context an engineer or an
+ * agent loads before changing implementation, from core's `contextFor`: for
+ * a behavior, its owning slice, rules, scenarios, verifications, the slice's
+ * contracts, the decisions, the knowledge explaining it and its navigation
+ * parents; for a rule, capability or slice the bundles of the behaviors it
+ * reaches; for anything else its direct neighbours. Each artifact comes with
+ * its source path and body, and the whole names its snapshot.
+ *
+ * `restricted` artifacts are withheld unless asked for, and the report says
+ * how many, so a short context never reads as a complete one. Never writes.
+ */
+import {
+  type Artifact,
+  type ContextArtifact,
+  type ContextRole,
+  compareStrings,
+  contextFor,
+  type Graph,
+  type LinkKind,
+} from "@intentset/core";
+import { count, formatDiagnostic, type Io, json, snapshotLine, TOOL } from "../output.ts";
+import type { Session } from "../session.ts";
+import { unresolved, validationLine, validationSummary } from "./shared.ts";
+
+const HEADINGS: Record<ContextRole, string> = {
+  start: "Start",
+  owner: "Owning slice",
+  behavior: "Behaviors",
+  rule: "Rules",
+  scenario: "Scenarios",
+  verification: "Verification definitions",
+  contract: "Contracts",
+  decision: "Decisions",
+  knowledge: "Knowledge",
+  ancestor: "Navigation ancestors",
+  neighbour: "Neighbours",
+};
+
+export function contextCommand(
+  session: Session,
+  id: string,
+  includeRestricted: boolean,
+  asJson: boolean,
+  io: Io,
+): number {
+  const { graph } = session.result;
+  const bundle = contextFor(graph, id, { includeRestricted });
+  if (bundle === null) {
+    const diagnostic = unresolved(id, session);
+    if (asJson) {
+      io.stdout(
+        json({
+          tool: TOOL,
+          snapshot: session.snapshot,
+          validation: validationSummary(session, session.level),
+          start: null,
+          diagnostics: [diagnostic],
+        }),
+      );
+    } else {
+      io.stderr(formatDiagnostic(diagnostic));
+    }
+    return 1;
+  }
+  const visible = new Set(bundle.artifacts.map((a) => a.id));
+  const full = (a: ContextArtifact) => graph.artifacts.get(a.id) as Artifact;
+
+  if (asJson) {
+    io.stdout(
+      json({
+        tool: TOOL,
+        snapshot: session.snapshot,
+        validation: validationSummary(session, session.level),
+        start: id,
+        included: bundle.artifacts.length,
+        withheld: bundle.withheld,
+        restrictedIncluded: includeRestricted,
+        artifacts: bundle.artifacts.map((a) => ({
+          ...a,
+          sourceHash: full(a).sourceHash,
+          links: links(graph, full(a), visible),
+          body: full(a).body,
+        })),
+        diagnostics: [],
+      }),
+    );
+    return session.result.ok ? 0 : 1;
+  }
+
+  const start = graph.artifacts.get(id) as Artifact;
+  const out: string[] = [
+    `# Context for ${id}`,
+    "",
+    `Bounded engineering context (Core §10) for ${start.meta.type} ${id}, "${start.meta.title}".`,
+    "",
+    `- ${snapshotLine(session.snapshot)}`,
+    `- ${validationLine(session, session.level)}`,
+    `- Included: ${count(bundle.artifacts.length, "artifact")}. ` +
+      (includeRestricted
+        ? "Restricted artifacts are included, as asked."
+        : `Withheld: ${bundle.withheld} restricted${bundle.withheld === 0 ? "" : "; pass --include-restricted to include them"}.`),
+    "- Paths are relative to the repository root. The files are authoritative; this is a derived view of them.",
+    "",
+  ];
+  let role: ContextRole | null = null;
+  for (const a of bundle.artifacts) {
+    if (a.role !== role) {
+      role = a.role;
+      out.push(`## ${HEADINGS[role]}`, "");
+    }
+    out.push(`### ${a.id}: ${a.title}`, "");
+    out.push(`- ID: ${a.id}`, `- Type: ${a.type}`, `- Status: ${a.status}`, `- Path: ${a.path}`);
+    const linked = links(graph, full(a), visible);
+    const kinds = (Object.keys(linked) as LinkKind[]).sort(compareStrings);
+    if (kinds.length > 0) out.push(`- Links: ${kinds.map((k) => `${k} ${linked[k]?.join(", ")}`).join("; ")}`);
+    out.push("", ...fenced(full(a).body), "");
+  }
+  io.stdout(`${out.join("\n").trimEnd()}\n`);
+  return session.result.ok ? 0 : 1;
+}
+
+/** Authored links from `artifact` to artifacts in the context, so nothing withheld is named. */
+function links(graph: Graph, artifact: Artifact, visible: Set<string>): Partial<Record<LinkKind, string[]>> {
+  const out: Partial<Record<LinkKind, string[]>> = {};
+  for (const edge of graph.out.get(artifact.meta.id) ?? []) {
+    if (!visible.has(edge.to)) continue;
+    const list = out[edge.kind];
+    if (list === undefined) out[edge.kind] = [edge.to];
+    else if (!list.includes(edge.to)) list.push(edge.to);
+  }
+  for (const list of Object.values(out)) list?.sort(compareStrings);
+  return out;
+}
+
+/** The body verbatim, in a tilde fence longer than any tilde run inside it, so nothing in it can close the fence. */
+function fenced(body: string): string[] {
+  const text = body.replace(/^\s*\n/, "").trimEnd();
+  const longest = Math.max(0, ...[...text.matchAll(/~+/g)].map((m) => m[0].length));
+  const fence = "~".repeat(Math.max(4, longest + 1));
+  return [`${fence}markdown`, text, fence];
+}