@kontourai/flow-agents 0.1.1 → 0.2.0

package/skills/idea-to-backlog/SKILL.md

@@ -102,7 +102,7 @@ Gate: the opportunity is worth shaping, or it is parked/rejected.
 
 ### 4. Explore Options
 
-Use `knowledge-search`, `search-first`, `explore`, or `crowdsource` when context is missing.
+Use `search-first` or `explore` when context is missing.
 
 Decide the path:
 

package/src/cli/init.ts

@@ -9,7 +9,7 @@ import { activateCodexLocal } from "../runtime-adapters.js";
 import { main as buildBundles } from "../tools/build-universal-bundles.js";
 import { root } from "../tools/common.js";
 
-type Runtime = "base" | "codex" | "claude-code" | "kiro";
+type Runtime = "base" | "codex" | "claude-code" | "kiro" | "opencode" | "pi";
 type TelemetrySink = "local-files" | "local-kontour-console" | "kontour-hosted-console" | "user-hosted-console" | "kontour-cloud" | "hosted-kontour-console";
 
 type InitOptions = {
@@ -30,13 +30,69 @@ const runtimeBundles: Record<Runtime, string> = {
   codex: "codex",
   "claude-code": "claude-code",
   kiro: "kiro",
+  opencode: "opencode",
+  pi: "pi",
 };
 
+// Stable marker present in every Flow Agents claude-code hook command.
+// Used by scope-collision detection to identify an existing flow-agents install.
+// Marker must be distinctive to Flow Agents generated settings. Sibling
+// products from the same lineage ship identically named hook scripts such
+// as claude-hook-adapter.js, so script filenames are NOT a safe marker.
+export const COLLISION_MARKER = "Recording Flow Agents telemetry";
+
+/**
+ * Check whether a user-level Claude Code settings file already contains
+ * Flow Agents hook commands. If it does, print a WARNING explaining that
+ * Claude Code merges user-level and project-level settings and runs ALL
+ * matching hooks, so having flow-agents in both places causes duplicate
+ * hook execution (double telemetry, double policy enforcement).
+ *
+ * The check does NOT block the install; it is advisory only.
+ *
+ * @param userSettingsFile Path to inspect (defaults to $HOME/.claude/settings.json;
+ *   overridable via FLOW_AGENTS_USER_CLAUDE_SETTINGS env var for testability).
+ * @returns true if a collision was detected, false otherwise.
+ */
+export function checkScopeCollision(userSettingsFile?: string): boolean {
+  const filePath = userSettingsFile
+    ?? process.env["FLOW_AGENTS_USER_CLAUDE_SETTINGS"]
+    ?? path.join(os.homedir(), ".claude", "settings.json");
+  if (!fs.existsSync(filePath)) return false;
+  let text: string;
+  try {
+    text = fs.readFileSync(filePath, "utf8");
+  } catch {
+    return false;
+  }
+  if (!text.includes(COLLISION_MARKER)) return false;
+  console.warn(
+    `\nWARNING: Flow Agents scope collision detected.\n` +
+    `  ${filePath}\n` +
+    `already contains Flow Agents hook commands (marker: ${COLLISION_MARKER}).\n` +
+    `\n` +
+    `Claude Code merges user-level (~/.claude/settings.json) and project-level\n` +
+    `(.claude/settings.json) settings, then runs ALL matching hooks from both files.\n` +
+    `Installing Flow Agents at the project level while it is also present at the\n` +
+    `user level will cause duplicate hook execution: telemetry events are recorded\n` +
+    `twice and policy hooks (workflow-steering, config-protection, quality-gate,\n` +
+    `stop-goal-fit) run twice per event.\n` +
+    `\n` +
+    `To resolve:\n` +
+    `  - Remove the hooks section from ${filePath} and rely solely on the\n` +
+    `    project-level .claude/settings.json installed by flow-agents init, OR\n` +
+    `  - Remove the project-level install and keep only the user-level one.\n` +
+    `\n` +
+    `The install will continue; resolve the collision before running Claude Code.\n`
+  );
+  return true;
+}
+
 function usage(): void {
   console.error(`usage: flow-agents init [options]
 
 Options:
-  --runtime base|codex|claude-code|kiro
+  --runtime base|codex|claude-code|kiro|opencode|pi
   --dest PATH
   --telemetry-sink local-files|local-kontour-console|kontour-hosted-console|user-hosted-console
   --console-url URL
@@ -52,8 +108,8 @@ Options:
 function normalizeRuntime(value: string | undefined): Runtime | undefined {
   if (!value) return undefined;
   if (value === "claude") return "claude-code";
-  if (value === "base" || value === "codex" || value === "claude-code" || value === "kiro") return value;
-  throw new Error(`unknown runtime '${value}'; expected base, codex, claude-code, or kiro`);
+  if (value === "base" || value === "codex" || value === "claude-code" || value === "kiro" || value === "opencode" || value === "pi") return value;
+  throw new Error(`unknown runtime '${value}'; expected base, codex, claude-code, kiro, opencode, or pi`);
 }
 
 function normalizeTelemetrySink(value: string): TelemetrySink {
@@ -86,7 +142,7 @@ async function questionHidden(prompt: string): Promise<string> {
     let value = "";
     const onData = (buffer: Buffer) => {
       const text = buffer.toString("utf8");
-      if (text === "\u0003") {
+      if (text === "") {
         stdout.write("\n");
         process.exit(130);
       }
@@ -97,7 +153,7 @@ async function questionHidden(prompt: string): Promise<string> {
         resolve(value);
         return;
       }
-      if (text === "\u007f") {
+      if (text === "") {
         value = value.slice(0, -1);
         return;
       }
@@ -235,6 +291,18 @@ export async function main(argv = process.argv.slice(2)): Promise<number> {
   const headless = argv.includes("--yes") || argv.includes("--headless") || !process.stdin.isTTY;
   try {
     const options = headless ? headlessOptions(argv) : await interactiveOptions(argv);
+    // Scope-collision check for claude-code: Claude Code merges user-level
+    // (~/.claude/settings.json) and project-level (.claude/settings.json) settings
+    // and runs ALL matching hooks from both files. If a user-level settings file
+    // already contains flow-agents hooks, installing at the project level will
+    // cause duplicate hook execution. We warn but do not block.
+    //
+    // Codex note: Codex hooks live in .codex/hooks.json (project-level only).
+    // There is no well-known user-level codex hooks file in our install paths,
+    // so no collision check is needed for codex.
+    if (options.runtime === "claude-code") {
+      checkScopeCollision();
+    }
     const bundle = ensureBundle(options.runtime);
     const installed = installBundle(bundle, options);
     if (installed !== 0) return installed;
@@ -245,4 +313,149 @@ export async function main(argv = process.argv.slice(2)): Promise<number> {
   }
 }
 
+// ---------------------------------------------------------------------------
+// Dogfood subcommand
+//
+// `flow-agents dogfood --runtime claude-code [--dest PATH]`
+//
+// Writes only the hook-wiring artifacts for the specified runtime into the
+// target directory (default: cwd). Unlike a full install, dogfood:
+//   - Does NOT rsync the full bundle (no agents/skills duplication).
+//   - Reads the generated settings/config from dist/<runtime>/ so the output
+//     cannot drift from what the bundle generates (DRY guarantee).
+//   - For claude-code: OMITS permissions.defaultMode and
+//     skipDangerousModePermissionPrompt (permissive defaults are for installed
+//     workspaces, not source repos).
+//   - Runs the same scope-collision warning as init.
+// ---------------------------------------------------------------------------
+
+function dogfoodUsage(): void {
+  console.error(`usage: flow-agents dogfood [options]
+
+Options:
+  --runtime claude-code|codex|opencode|pi   (required)
+  --dest PATH                               (default: cwd)
+  --yes, --headless
+`);
+}
+
+type DogfoodRuntime = "claude-code" | "codex" | "opencode" | "pi";
+
+function normalizeDogfoodRuntime(value: string | undefined): DogfoodRuntime | undefined {
+  if (!value) return undefined;
+  if (value === "claude" || value === "claude-code") return "claude-code";
+  if (value === "codex" || value === "opencode" || value === "pi") return value;
+  throw new Error(`dogfood: unsupported runtime '${value}'; expected claude-code, codex, opencode, or pi`);
+}
+
+/**
+ * Write the claude-code hook-wiring artifacts into dest.
+ * Reads dist/claude-code/.claude/settings.json (generated by build-bundles),
+ * strips the permissive-mode permission keys (defaultMode, skipDangerousModePermissionPrompt),
+ * and writes .claude/settings.json to dest.
+ */
+function dogfoodClaudeCode(bundleRoot: string, dest: string): void {
+  const sourcePath = path.join(bundleRoot, ".claude", "settings.json");
+  if (!fs.existsSync(sourcePath)) throw new Error(`dogfood: bundle settings missing: ${sourcePath}`);
+  const settings = JSON.parse(fs.readFileSync(sourcePath, "utf8")) as Record<string, unknown>;
+  // Remove permissive defaults that are only appropriate for installed workspaces.
+  // These keys must not be present in the source repo's .claude/settings.json.
+  delete settings["permissions"];
+  delete settings["skipDangerousModePermissionPrompt"];
+  const outDir = path.join(dest, ".claude");
+  fs.mkdirSync(outDir, { recursive: true });
+  fs.writeFileSync(path.join(outDir, "settings.json"), `${JSON.stringify(settings, null, 2)}\n`, "utf8");
+}
+
+/**
+ * Write the codex hook-wiring artifacts into dest.
+ * Reads dist/codex/.codex/hooks.json and writes .codex/hooks.json to dest.
+ * The monolithic .codex/config.toml is not written here because it contains
+ * workspace settings (approvals_reviewer, features) that would override the
+ * developer's existing codex configuration. Only the hooks file is written.
+ */
+function dogfoodCodex(bundleRoot: string, dest: string): void {
+  const sourcePath = path.join(bundleRoot, ".codex", "hooks.json");
+  if (!fs.existsSync(sourcePath)) throw new Error(`dogfood: bundle hooks.json missing: ${sourcePath}`);
+  const hooks = fs.readFileSync(sourcePath, "utf8");
+  const outDir = path.join(dest, ".codex");
+  fs.mkdirSync(outDir, { recursive: true });
+  fs.writeFileSync(path.join(outDir, "hooks.json"), hooks, "utf8");
+}
+
+/**
+ * Write the opencode hook-wiring artifacts into dest.
+ * Reads dist/opencode/.opencode/plugins/flow-agents.js and opencode.json,
+ * and writes them into dest. These are the minimal hook-wiring files; the
+ * full skill/agent tree is not copied.
+ */
+function dogfoodOpencode(bundleRoot: string, dest: string): void {
+  const pluginSource = path.join(bundleRoot, ".opencode", "plugins", "flow-agents.js");
+  const configSource = path.join(bundleRoot, "opencode.json");
+  if (!fs.existsSync(pluginSource)) throw new Error(`dogfood: bundle plugin missing: ${pluginSource}`);
+  const pluginDir = path.join(dest, ".opencode", "plugins");
+  fs.mkdirSync(pluginDir, { recursive: true });
+  fs.copyFileSync(pluginSource, path.join(pluginDir, "flow-agents.js"));
+  // Write opencode.json only if it does not already exist to avoid clobbering
+  // any workspace-specific opencode configuration.
+  const destConfig = path.join(dest, "opencode.json");
+  if (!fs.existsSync(destConfig) && fs.existsSync(configSource)) {
+    fs.copyFileSync(configSource, destConfig);
+  }
+}
+
+/**
+ * Write the pi hook-wiring artifacts into dest.
+ * Reads dist/pi/.pi/extensions/flow-agents.ts and writes it to dest.
+ * The extension is the only hook-wiring file needed for pi.
+ */
+function dogfoodPi(bundleRoot: string, dest: string): void {
+  const extSource = path.join(bundleRoot, ".pi", "extensions", "flow-agents.ts");
+  if (!fs.existsSync(extSource)) throw new Error(`dogfood: bundle extension missing: ${extSource}`);
+  const extDir = path.join(dest, ".pi", "extensions");
+  fs.mkdirSync(extDir, { recursive: true });
+  fs.copyFileSync(extSource, path.join(extDir, "flow-agents.ts"));
+}
+
+export async function mainDogfood(argv = process.argv.slice(2)): Promise<number> {
+  if (argv.includes("--help") || argv.includes("-h")) {
+    dogfoodUsage();
+    return 0;
+  }
+  const args = parseArgs(argv);
+  try {
+    const runtimeRaw = flagString(args.flags, "runtime");
+    const runtime = normalizeDogfoodRuntime(runtimeRaw);
+    if (!runtime) {
+      console.error("dogfood: --runtime is required (claude-code, codex, opencode, or pi)");
+      dogfoodUsage();
+      return 2;
+    }
+    const dest = path.resolve(flagString(args.flags, "dest") ?? process.cwd());
+
+    // Ensure the bundle for the requested runtime is built.
+    const bundleRuntime: Runtime = runtime as Runtime;
+    const bundleRoot = ensureBundle(bundleRuntime);
+
+    // Scope-collision check: warn if user-level claude settings already has flow-agents.
+    // Codex: no user-level hooks file in our install paths — skip with note above.
+    if (runtime === "claude-code") {
+      checkScopeCollision();
+    }
+
+    // Write only the hook-wiring artifacts, not the full bundle.
+    fs.mkdirSync(dest, { recursive: true });
+    if (runtime === "claude-code") dogfoodClaudeCode(bundleRoot, dest);
+    else if (runtime === "codex") dogfoodCodex(bundleRoot, dest);
+    else if (runtime === "opencode") dogfoodOpencode(bundleRoot, dest);
+    else if (runtime === "pi") dogfoodPi(bundleRoot, dest);
+
+    console.log(`Flow Agents dogfood hooks wired for ${runtime} in ${dest}`);
+    return 0;
+  } catch (error) {
+    console.error(`flow-agents dogfood: ${(error as Error).message}`);
+    return 2;
+  }
+}
+
 if (import.meta.url === `file://${process.argv[1]}`) process.exit(await main());

package/src/cli/utterance-check.ts

@@ -0,0 +1,324 @@
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { flagBool, flagString, parseArgs } from "../lib/args.js";
+
+// ---------------------------------------------------------------------------
+// Output types
+// ---------------------------------------------------------------------------
+
+interface StatementResult {
+  excerpt: string;
+  badge: string;
+  target: { subjectType: string; subjectId: string; fieldOrBehavior: string };
+  span?: { start: number; end: number };
+}
+
+interface UtteranceReport {
+  status: "ok" | "not_configured" | "error";
+  agent_id: string;
+  utterance_excerpt: string;
+  statements: StatementResult[];
+  summary: string;
+}
+
+// ---------------------------------------------------------------------------
+// Survey module interface (mirrors @kontourai/survey exported shapes)
+// ---------------------------------------------------------------------------
+
+interface SurveyExtractedItem {
+  target: { subjectType: string; subjectId: string; fieldOrBehavior: string };
+  value?: unknown;
+  excerpt: string;
+  span?: { start: number; end: number };
+  confidence: number;
+}
+
+interface SurveyExtractor {
+  name: string;
+  extract(utterance: string): SurveyExtractedItem[] | Promise<SurveyExtractedItem[]>;
+}
+
+interface SurveyStatementItem {
+  excerpt: string;
+  badge: string;
+  target: { subjectType: string; subjectId: string; fieldOrBehavior: string };
+  span?: { start: number; end: number };
+  inquiryRecord: Record<string, unknown>;
+}
+
+interface SurveyTrustReport {
+  source: Record<string, unknown>;
+  statements: SurveyStatementItem[];
+}
+
+interface SurveyMod {
+  surveyAgentUtterance: (
+    utterance: string,
+    extractor: SurveyExtractor,
+    context: { bundle: Record<string, unknown>; agentId: string; now?: Date }
+  ) => Promise<SurveyTrustReport>;
+  referenceUtteranceExtractor: SurveyExtractor;
+}
+
+interface AnthropicSurveyMod {
+  createAnthropicUtteranceExtractor: (options?: { model?: string; apiKey?: string }) => SurveyExtractor;
+}
+
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+
+function usage(): void {
+  console.error(
+    [
+      "usage: flow-agents utterance-check check [options]",
+      "",
+      "Check an agent utterance for evidence coverage using @kontourai/survey.",
+      "Requires @kontourai/survey to be installed in the target workspace.",
+      "",
+      "Options:",
+      "  --utterance TEXT      Utterance text to check (required unless --not-configured).",
+      "  --bundle-path FILE    Trust bundle JSON file. Omit for an empty bundle (all unsupported).",
+      "  --agent-id ID         Agent identifier for provenance (default: flow-agents-utterance-check).",
+      "  --extractor NAME      Extractor to use: 'reference' (default, pattern-based) or 'anthropic'",
+      "                        (model-backed, requires ANTHROPIC_API_KEY and @kontourai/survey/anthropic).",
+      "  --model MODEL         Model for the anthropic extractor (e.g. claude-haiku-4-5).",
+      "  --not-configured      Skip survey call; output not_configured without error.",
+      "  --strict              Exit non-zero when any badge is disputed, rejected, or unsupported.",
+      "  --help                Show this help.",
+    ].join("\n")
+  );
+}
+
+function excerptText(text: string, maxLen = 200): string {
+  const trimmed = text.trim().replace(/\s+/g, " ");
+  return trimmed.length > maxLen ? `${trimmed.slice(0, maxLen - 3)}...` : trimmed;
+}
+
+function badgeSummary(statements: StatementResult[]): string {
+  if (statements.length === 0) return "no factual statements extracted";
+  const counts: Record<string, number> = {};
+  for (const s of statements) {
+    counts[s.badge] = (counts[s.badge] ?? 0) + 1;
+  }
+  return Object.entries(counts)
+    .sort((a, b) => b[1] - a[1])
+    .map(([badge, n]) => `${badge}:${n}`)
+    .join(", ");
+}
+
+function hasConcerningBadge(badge: string): boolean {
+  return badge === "disputed" || badge === "rejected" || badge === "unsupported";
+}
+
+async function loadSurvey(): Promise<SurveyMod | undefined> {
+  try {
+    const pkg = "@kontourai/survey";
+    // Dynamic import avoids a static dependency on @kontourai/survey —
+    // the same pattern survey/src/anthropic.ts uses for @anthropic-ai/sdk.
+    const mod = await (Function("m", "return import(m)")(pkg) as Promise<unknown>);
+    return mod as SurveyMod;
+  } catch {
+    return undefined;
+  }
+}
+
+/**
+ * Dynamically import @kontourai/survey/anthropic and create the Anthropic extractor.
+ * Fails open with a clear not_configured message when the key or peer dep is missing.
+ */
+async function loadAnthropicExtractor(model?: string): Promise<SurveyExtractor | { notConfigured: true; reason: string }> {
+  const apiKey = process.env.ANTHROPIC_API_KEY;
+  if (!apiKey) {
+    return {
+      notConfigured: true,
+      reason:
+        "anthropic extractor requires ANTHROPIC_API_KEY to be set. " +
+        "Set the environment variable or switch extractor to 'reference'.",
+    };
+  }
+  try {
+    const pkg = "@kontourai/survey/anthropic";
+    const mod = await (Function("m", "return import(m)")(pkg) as Promise<unknown>) as AnthropicSurveyMod;
+    if (typeof mod.createAnthropicUtteranceExtractor !== "function") {
+      return {
+        notConfigured: true,
+        reason:
+          "@kontourai/survey/anthropic does not export createAnthropicUtteranceExtractor. " +
+          "Update @kontourai/survey to a version that supports the anthropic extractor.",
+      };
+    }
+    const opts: { model?: string; apiKey?: string } = { apiKey };
+    if (model) opts.model = model;
+    return mod.createAnthropicUtteranceExtractor(opts);
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    return {
+      notConfigured: true,
+      reason:
+        `@kontourai/survey/anthropic is not available: ${msg}. ` +
+        "Install @kontourai/survey with the anthropic subpath export, or switch extractor to 'reference'.",
+    };
+  }
+}
+
+// ---------------------------------------------------------------------------
+// Core check logic
+// ---------------------------------------------------------------------------
+
+async function runCheck(argv: string[]): Promise<number> {
+  const { flags } = parseArgs(argv);
+
+  if (flagBool(flags, "help")) {
+    usage();
+    return 0;
+  }
+
+  const agentId = flagString(flags, "agent-id") ?? "flow-agents-utterance-check";
+  const notConfigured = flagBool(flags, "not-configured");
+  const strict = flagBool(flags, "strict");
+  const extractorName = flagString(flags, "extractor") ?? "reference";
+  const model = flagString(flags, "model");
+
+  if (notConfigured) {
+    const report: UtteranceReport = {
+      status: "not_configured",
+      agent_id: agentId,
+      utterance_excerpt: "",
+      statements: [],
+      summary: "@kontourai/survey is not configured for this workspace.",
+    };
+    process.stdout.write(`${JSON.stringify(report, null, 2)}\n`);
+    return 0;
+  }
+
+  const utterance = flagString(flags, "utterance");
+  if (!utterance) {
+    usage();
+    return 3;
+  }
+
+  const bundlePath = flagString(flags, "bundle-path");
+  let bundle: Record<string, unknown> = { claims: [] };
+  if (bundlePath) {
+    const resolved = path.resolve(bundlePath);
+    try {
+      const raw = fs.readFileSync(resolved, "utf8");
+      bundle = JSON.parse(raw) as Record<string, unknown>;
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      process.stderr.write(`[UtteranceCheck] could not read bundle from ${resolved}: ${msg}\n`);
+    }
+  }
+
+  const survey = await loadSurvey();
+  if (!survey) {
+    const report: UtteranceReport = {
+      status: "not_configured",
+      agent_id: agentId,
+      utterance_excerpt: excerptText(utterance),
+      statements: [],
+      summary: "@kontourai/survey is not installed. Install it or run with --not-configured.",
+    };
+    process.stdout.write(`${JSON.stringify(report, null, 2)}\n`);
+    process.stderr.write(
+      "[UtteranceCheck] not_configured: @kontourai/survey is not installed in this workspace.\n"
+    );
+    return 1;
+  }
+
+  const { surveyAgentUtterance, referenceUtteranceExtractor } = survey;
+
+  // Resolve which extractor to use.
+  let extractor: SurveyExtractor;
+  if (extractorName === "anthropic") {
+    const anthropicResult = await loadAnthropicExtractor(model);
+    if ("notConfigured" in anthropicResult) {
+      // Fail open: emit not_configured with a clear reason rather than erroring.
+      const report: UtteranceReport = {
+        status: "not_configured",
+        agent_id: agentId,
+        utterance_excerpt: excerptText(utterance),
+        statements: [],
+        summary: anthropicResult.reason,
+      };
+      process.stdout.write(`${JSON.stringify(report, null, 2)}\n`);
+      process.stderr.write(`[UtteranceCheck] not_configured: ${anthropicResult.reason}\n`);
+      return 0;
+    }
+    extractor = anthropicResult;
+  } else {
+    extractor = referenceUtteranceExtractor;
+  }
+
+  let trustReport: SurveyTrustReport;
+  try {
+    trustReport = await surveyAgentUtterance(utterance, extractor, {
+      bundle,
+      agentId,
+    });
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    const report: UtteranceReport = {
+      status: "error",
+      agent_id: agentId,
+      utterance_excerpt: excerptText(utterance),
+      statements: [],
+      summary: `Survey call failed: ${msg}`,
+    };
+    process.stdout.write(`${JSON.stringify(report, null, 2)}\n`);
+    process.stderr.write(`[UtteranceCheck] survey call failed: ${msg}\n`);
+    return 1;
+  }
+
+  const statements: StatementResult[] = trustReport.statements.map((s) => ({
+    excerpt: s.excerpt,
+    badge: s.badge,
+    target: s.target,
+    span: s.span,
+  }));
+
+  const summary = badgeSummary(statements);
+  const report: UtteranceReport = {
+    status: "ok",
+    agent_id: agentId,
+    utterance_excerpt: excerptText(utterance),
+    statements,
+    summary,
+  };
+
+  process.stdout.write(`${JSON.stringify(report, null, 2)}\n`);
+
+  const concerning = statements.filter((s) => hasConcerningBadge(s.badge));
+  if (concerning.length > 0) {
+    process.stderr.write(
+      `[UtteranceCheck] ${concerning.length} statement(s) lack evidence coverage: ${summary}\n`
+    );
+    for (const s of concerning.slice(0, 4)) {
+      process.stderr.write(`  - [${s.badge}] "${excerptText(s.excerpt, 100)}"\n`);
+    }
+  }
+
+  if (strict && concerning.length > 0) return 2;
+  return 0;
+}
+
+// ---------------------------------------------------------------------------
+// Entry point
+// ---------------------------------------------------------------------------
+
+export async function main(argv = process.argv.slice(2)): Promise<number> {
+  const [subcommand, ...rest] = argv;
+  if (!subcommand || subcommand === "--help" || subcommand === "-h") {
+    usage();
+    return 0;
+  }
+  if (subcommand !== "check") {
+    console.error(`Unknown utterance-check subcommand: ${subcommand}`);
+    usage();
+    return 3;
+  }
+  return runCheck(rest);
+}
+
+if (import.meta.url === `file://${process.argv[1]}`) process.exit(await main());

package/src/cli.ts

@@ -19,6 +19,7 @@ import { main as validateSource } from "./tools/validate-source-tree.js";
 import { main as validatePackage } from "./tools/validate-package.js";
 import { main as validateHookInfluence } from "./cli/validate-hook-influence.js";
 import { main as runtimeAdapter } from "./cli/runtime-adapter.js";
+import { main as utteranceCheck } from "./cli/utterance-check.js";
 
 const availableCommands = new Map<string, (argv: string[]) => number | Promise<number>>([
   ["build-bundles", () => buildBundles()],
@@ -33,6 +34,7 @@ const availableCommands = new Map<string, (argv: string[]) => number | Promise<n
   ["publish-change", publishChange],
   ["pull-work-provider", pullWorkProvider],
   ["runtime-adapter", runtimeAdapter],
+  ["utterance-check", utteranceCheck],
   ["telemetry-doctor", telemetryDoctor],
   ["usage-feedback", usageFeedback],
   ["veritas-governance", veritasGovernance],
@@ -58,6 +60,7 @@ const aliases = new Map<string, string>([
   ["flow-agents-usage-feedback", "usage-feedback"],
   ["flow-agents-veritas-governance", "veritas-governance"],
   ["flow-agents-validate-hook-influence", "validate-hook-influence"],
+  ["flow-agents-utterance-check", "utterance-check"],
   ["flow-agents-validate-source", "validate-source"],
   ["flow-agents-workflow-artifact-cleanup-audit", "workflow-artifact-cleanup-audit"],
 ]);