@nimiplatform/nimi-coding 0.3.1 → 0.4.0

package/cli/commands/clear.mjs

@@ -4,6 +4,7 @@ import process from "node:process";
 import {
   previewBootstrapRemoval,
   previewEntrypointRemoval,
+  preflightManagedProjectPaths,
   removeManagedBootstrapFiles,
   removeManagedEntrypoints,
 } from "../lib/shared.mjs";
@@ -70,8 +71,19 @@ export async function runClear(args) {
   }
 
   const projectRoot = process.cwd();
-  const entrypointPreview = await previewEntrypointRemoval(projectRoot);
-  const bootstrapPreview = await previewBootstrapRemoval(projectRoot);
+  let entrypointPreview;
+  let bootstrapPreview;
+  try {
+    await preflightManagedProjectPaths(projectRoot);
+    entrypointPreview = await previewEntrypointRemoval(projectRoot);
+    bootstrapPreview = await previewBootstrapRemoval(projectRoot);
+  } catch (error) {
+    process.stderr.write(localize(
+      `nimicoding clear refused: ${error.message}.\n`,
+      `nimicoding clear 已拒绝：${error.message}。\n`,
+    ));
+    return 2;
+  }
 
   if (canPromptInteractively() && !parsed.options.yes) {
     process.stdout.write(`${styleHeading(localize(`nimicoding clear: ${projectRoot}`, `nimicoding clear：${projectRoot}`))}
@@ -88,7 +100,6 @@ ${formatList(
 ${styleLabel(localize("What I will keep:", "我会保留的内容："))}
   - .nimi/spec/**
   - .nimi/local/**
-  - .nimi/cache/**
 ${bootstrapPreview.preservedModifiedFiles.length > 0
     ? `\n${styleMuted(localize("I also found package-owned bootstrap files that were changed locally, so I will leave them in place:", "我还发现了一些包拥有的 bootstrap 文件已被本地修改，因此我会保留它们："))}\n${bootstrapPreview.preservedModifiedFiles.map((filePath) => `  - ${filePath}`).join("\n")}`
     : ""}
@@ -106,7 +117,6 @@ ${localize("  - nothing needed clearing", "  - 没有需要清理的内容")}
 ${styleLabel(localize("What I kept:", "我保留的内容："))}
   - .nimi/spec/**
   - .nimi/local/**
-  - .nimi/cache/**
 
 ${styleMuted(localize("No nimicoding-managed bootstrap files or managed AI blocks were found.", "没有检测到 nimicoding 托管的 bootstrap 文件或托管 AI 区块。"))}
 `);
@@ -127,8 +137,19 @@ ${styleMuted(localize("No files were changed.", "没有修改任何文件。"))}
     }
   }
 
-  const removedEntrypoints = await removeManagedEntrypoints(projectRoot);
-  const removedBootstrap = await removeManagedBootstrapFiles(projectRoot);
+  let removedEntrypoints;
+  let removedBootstrap;
+  try {
+    await preflightManagedProjectPaths(projectRoot);
+    removedEntrypoints = await removeManagedEntrypoints(projectRoot);
+    removedBootstrap = await removeManagedBootstrapFiles(projectRoot);
+  } catch (error) {
+    process.stderr.write(localize(
+      `nimicoding clear refused: ${error.message}.\n`,
+      `nimicoding clear 已拒绝：${error.message}。\n`,
+    ));
+    return 2;
+  }
 
   process.stdout.write(`${styleHeading(localize(`nimicoding clear: ${projectRoot}`, `nimicoding clear：${projectRoot}`))}
 
@@ -146,7 +167,6 @@ ${formatList(
 ${styleLabel(localize("What I kept:", "我保留的内容："))}
   - .nimi/spec/**
   - .nimi/local/**
-  - .nimi/cache/**
 ${removedBootstrap.preservedModifiedFiles.length > 0
     ? `\n${removedBootstrap.preservedModifiedFiles.map((filePath) => `  - ${localize("kept because it was modified", "已保留，因为它已被修改")}: ${filePath}`).join("\n")}`
     : ""}

package/cli/commands/doctor.mjs

@@ -40,7 +40,16 @@ export async function runDoctor(args) {
     return 2;
   }
 
-  const result = await inspectDoctorState(process.cwd());
+  let result;
+  try {
+    result = await inspectDoctorState(process.cwd());
+  } catch (error) {
+    process.stderr.write(localize(
+      `nimicoding doctor refused: ${error.message}.`,
+      `nimicoding doctor 已拒绝：${error.message}。`,
+    ) + "\n");
+    return 2;
+  }
   if (parsed.options.json) {
     process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
   } else {

package/cli/commands/start.mjs

@@ -1,9 +1,9 @@
 import path from "node:path";
 
 import {
-  inspectBootstrapCompatibility,
   integrateEntrypoints,
   pathExists,
+  preflightManagedProjectPaths,
   previewBootstrapWrites,
   previewEntrypointIntegration,
   writeMissingBootstrapFiles,
@@ -34,43 +34,39 @@ export async function runStart(args) {
   }
 
   const projectRoot = process.cwd();
-  const nimiRoot = path.join(projectRoot, ".nimi");
-  const nimiInfo = await pathExists(nimiRoot);
-  if (nimiInfo && !nimiInfo.isDirectory()) {
-    process.stderr.write(localize(
-      `nimicoding start refused: ${nimiRoot} exists and is not a directory.\n`,
-      `nimicoding start 已拒绝：${nimiRoot} 已存在且不是目录。\n`,
-    ));
-    return 2;
-  }
+  let bootstrap;
+  let entrypoints;
+  try {
+    await preflightManagedProjectPaths(projectRoot);
+    const nimiRoot = path.join(projectRoot, ".nimi");
+    const nimiInfo = await pathExists(nimiRoot);
+    if (nimiInfo && !nimiInfo.isDirectory()) throw new Error(`${nimiRoot} exists and is not a directory`);
 
-  const compatibility = await inspectBootstrapCompatibility(projectRoot);
-  if (compatibility.status === "unsupported") {
+    const bootstrapPreview = await previewBootstrapWrites(projectRoot);
+    const entrypointPreview = await previewEntrypointIntegration(projectRoot);
+    bootstrap = bootstrapPreview.hasWork
+      ? await writeMissingBootstrapFiles(projectRoot)
+      : { createdFiles: [], updatedFiles: [], createdDirs: [], gitignoreUpdated: false, gitattributesUpdated: false };
+    entrypoints = entrypointPreview.length > 0
+      ? await integrateEntrypoints(projectRoot)
+      : [];
+  } catch (error) {
     process.stderr.write(localize(
-      "nimicoding start refused: bootstrap.yaml uses an unsupported contract. Run the hard-cut migration before retrying.\n",
-      "nimicoding start 已拒绝：bootstrap.yaml 使用了不受支持的 contract。请先完成硬切迁移。\n",
+      `nimicoding start refused: ${error.message}.\n`,
+      `nimicoding start 已拒绝：${error.message}。\n`,
     ));
-    return 1;
+    return 2;
   }
 
-  const bootstrapPreview = await previewBootstrapWrites(projectRoot);
-  const entrypointPreview = await previewEntrypointIntegration(projectRoot);
-  const bootstrap = bootstrapPreview.hasWork
-    ? await writeMissingBootstrapFiles(projectRoot)
-    : { createdFiles: [], createdDirs: [], gitignoreUpdated: false };
-  const entrypoints = entrypointPreview.length > 0
-    ? await integrateEntrypoints(projectRoot)
-    : [];
-
   const output = {
     ok: true,
     projectRoot,
     bootstrap,
     entrypoints,
     next: [
-      "Build or update canonical product authority under .nimi/spec.",
-      "Run nimicoding validate-spec-tree.",
-      "Run nimicoding validate-spec-audit when generation audit evidence exists.",
+      "Author project-owned canonical authority under .nimi/spec using only *.authority.yaml or *.authority.md.",
+      "Run nimicoding authority fmt on each changed authority file.",
+      "Run nimicoding authority check .nimi/spec on the complete canonical root.",
     ],
   };
 

package/cli/commands/sync.mjs

@@ -2,112 +2,30 @@ import { runSeedSync, SYNC_MODE, SYNC_RESULT_STATUS } from "../lib/sync.mjs";
 import { localize } from "../lib/ui.mjs";
 
 function parseSyncOptions(args) {
-  const options = {
-    mode: SYNC_MODE.DRY_RUN,
-    json: false,
-  };
+  const options = { mode: SYNC_MODE.DRY_RUN, json: false };
   let modeSet = false;
-
   for (const arg of args) {
-    if (arg === "--apply") {
-      if (modeSet) {
-        return {
-          ok: false,
-          error: localize(
-            "nimicoding sync refused: --apply, --check, and --dry-run are mutually exclusive.\n",
-            "nimicoding sync 拒绝执行：--apply、--check、--dry-run 互斥。\n",
-          ),
-        };
-      }
-      options.mode = SYNC_MODE.APPLY;
-      modeSet = true;
-      continue;
-    }
-    if (arg === "--check") {
-      if (modeSet) {
-        return {
-          ok: false,
-          error: localize(
-            "nimicoding sync refused: --apply, --check, and --dry-run are mutually exclusive.\n",
-            "nimicoding sync 拒绝执行：--apply、--check、--dry-run 互斥。\n",
-          ),
-        };
-      }
-      options.mode = SYNC_MODE.CHECK;
+    if (["--apply", "--check", "--dry-run"].includes(arg)) {
+      if (modeSet) return { ok: false, error: localize("nimicoding sync refused: --apply, --check, and --dry-run are mutually exclusive.\n", "nimicoding sync 拒绝执行：--apply、--check、--dry-run 互斥。\n") };
+      options.mode = arg === "--apply" ? SYNC_MODE.APPLY : arg === "--check" ? SYNC_MODE.CHECK : SYNC_MODE.DRY_RUN;
       modeSet = true;
-      continue;
-    }
-    if (arg === "--dry-run") {
-      if (modeSet) {
-        return {
-          ok: false,
-          error: localize(
-            "nimicoding sync refused: --apply, --check, and --dry-run are mutually exclusive.\n",
-            "nimicoding sync 拒绝执行：--apply、--check、--dry-run 互斥。\n",
-          ),
-        };
-      }
-      options.mode = SYNC_MODE.DRY_RUN;
-      modeSet = true;
-      continue;
-    }
-    if (arg === "--json") {
-      options.json = true;
-      continue;
-    }
-    return {
-      ok: false,
-      error: localize(
-        `nimicoding sync refused: unknown option ${arg}.\n`,
-        `nimicoding sync 拒绝执行：未知选项 ${arg}。\n`,
-      ),
-    };
+    } else if (arg === "--json") options.json = true;
+    else return { ok: false, error: localize(`nimicoding sync refused: unknown option ${arg}.\n`, `nimicoding sync 拒绝执行：未知选项 ${arg}。\n`) };
   }
-
   return { ok: true, options };
 }
 
 function formatHumanReport(result) {
-  const lines = [];
-  lines.push(localize(
-    `nimicoding sync (${result.mode})`,
-    `nimicoding sync (${result.mode})`,
-  ));
-  lines.push("");
-  lines.push(localize("Summary:", "概览："));
-  lines.push(`  total: ${result.summary.total}`);
-  lines.push(`  in_sync: ${result.summary.in_sync}`);
-  if (result.mode === SYNC_MODE.APPLY) {
-    lines.push(`  created: ${result.summary.created}`);
-    lines.push(`  updated: ${result.summary.updated}`);
-  } else {
-    lines.push(`  would_create: ${result.summary.would_create}`);
-    lines.push(`  would_update: ${result.summary.would_update}`);
-  }
-  lines.push(`  drifted_preserved (host-owned seed): ${result.summary.drifted_preserved}`);
-  if (result.mode === SYNC_MODE.CHECK) {
-    lines.push(`  missing_package_canonical: ${result.summary.missing_package_canonical}`);
-    lines.push(`  missing_host_state_seed: ${result.summary.missing_host_state_seed}`);
-    lines.push(`  drifted_package_canonical: ${result.summary.drifted_package_canonical}`);
-  }
-
+  const lines = [`nimicoding sync (${result.mode})`, "", localize("Summary:", "概览：")];
+  for (const [key, value] of Object.entries(result.summary)) lines.push(`  ${key}: ${value}`);
   const noteworthy = result.results.filter((entry) => entry.status !== SYNC_RESULT_STATUS.IN_SYNC);
   if (noteworthy.length > 0) {
-    lines.push("");
-    lines.push(localize("Per-file status:", "逐文件状态："));
-    for (const entry of noteworthy) {
-      lines.push(`  [${entry.status}] (${entry.ownership}) ${entry.outputRelativePath}`);
-    }
+    lines.push("", localize("Per-surface status:", "逐表面状态："));
+    for (const entry of noteworthy) lines.push(`  [${entry.status}] (${entry.ownership}) ${entry.outputRelativePath}`);
   }
-
   if (result.mode === SYNC_MODE.CHECK && !result.ok) {
-    lines.push("");
-    lines.push(localize(
-      "FAIL: package_canonical drift or missing seed detected; run `nimicoding sync --apply` to refresh.",
-      "FAIL：检测到 package_canonical drift 或缺失 seed；执行 `nimicoding sync --apply` 以刷新。",
-    ));
+    lines.push("", localize("FAIL: an exact package projection or managed block is missing or drifted, or an exact deprecated package projection path remains.", "FAIL：精确 package 投影或 managed block 缺失/漂移，或精确 deprecated package 投影路径仍然存在。"));
   }
-
   return `${lines.join("\n")}\n`;
 }
 
@@ -117,15 +35,17 @@ export async function runSync(args) {
     process.stderr.write(parsed.error);
     return 2;
   }
-
-  const result = await runSeedSync(process.cwd(), parsed.options.mode);
-
-  if (parsed.options.json) {
-    process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
-  } else {
-    process.stdout.write(formatHumanReport(result));
+  let result;
+  try {
+    result = await runSeedSync(process.cwd(), parsed.options.mode);
+  } catch (error) {
+    process.stderr.write(localize(
+      `nimicoding sync refused: ${error.message}.\n`,
+      `nimicoding sync 已拒绝：${error.message}。\n`,
+    ));
+    return 2;
   }
-
+  process.stdout.write(parsed.options.json ? `${JSON.stringify(result, null, 2)}\n` : formatHumanReport(result));
   return result.ok ? 0 : 1;
 }
 

package/cli/constants.mjs

@@ -1,37 +1,13 @@
-export const VERSION = "0.3.1";
+export const VERSION = "0.4.0";
 export const PACKAGE_NAME = "@nimiplatform/nimi-coding";
-export const BOOTSTRAP_CONTRACT_ID = "nimicoding.bootstrap";
-export const BOOTSTRAP_CONTRACT_VERSION = 2;
-
-export const LOCAL_GITIGNORE_ENTRIES = [".nimi/local/", ".nimi/cache/"];
-export const REQUIRED_LOCAL_DIRS = [".nimi/local", ".nimi/cache"];
+export const LOCAL_GITIGNORE_ENTRIES = [".nimi/local/"];
+export const AUTHORITY_GITATTRIBUTES_ENTRIES = [
+  "*.authority.yaml text eol=lf",
+  "*.authority.md text eol=lf",
+];
+export const REQUIRED_LOCAL_DIRS = [".nimi/local"];
 
 export const AGENTS_BEGIN = "<!-- nimicoding:managed:agents:start -->";
 export const AGENTS_END = "<!-- nimicoding:managed:agents:end -->";
 export const CLAUDE_BEGIN = "<!-- nimicoding:managed:claude:start -->";
 export const CLAUDE_END = "<!-- nimicoding:managed:claude:end -->";
-
-export const SPEC_GENERATION_AUDIT_REF = ".nimi/local/state/spec-generation/spec-generation-audit.yaml";
-export const SPEC_GENERATION_AUDIT_CONTRACT_REF = ".nimi/contracts/spec-generation-audit.schema.yaml";
-export const SPEC_GENERATION_INPUTS_REF = ".nimi/config/spec-generation-inputs.yaml";
-export const SPEC_GENERATION_INPUTS_CONTRACT_REF = ".nimi/contracts/spec-generation-inputs.schema.yaml";
-export const BLUEPRINT_REFERENCE_REF = ".nimi/local/state/spec-generation/blueprint-reference.yaml";
-
-export const SPEC_GENERATION_AUDIT_REQUIRED_TOP_LEVEL_FIELDS = [
-  "generation_mode",
-  "canonical_target_root",
-  "declared_profile",
-  "input_roots",
-  "files",
-];
-export const SPEC_GENERATION_AUDIT_SOURCE_BASIS_ENUM = [
-  "grounded",
-  "mixed_grounded_and_inferred",
-  "inferred",
-];
-
-export const SPEC_GENERATION_AUDIT_COVERAGE_STATUS_ENUM = [
-  "complete",
-  "partial",
-  "placeholder_not_allowed",
-];

package/cli/dev/check-authority-surface.mjs

@@ -0,0 +1,173 @@
+#!/usr/bin/env node
+// Compares the command surface the parser enforces against the product
+// contracts that admit it, in both directions.
+//
+// The comparison is over parsed structure -- command tokens, flag names,
+// report format strings -- not over prose. A gate that greps a contract for a
+// sentence proves only that the sentence is still there.
+
+import { readFileSync } from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+
+import YAML from "yaml";
+
+import { PNPM_BUILTIN_SUBCOMMANDS } from "../lib/authority/anchors.mjs";
+import { AUTHORING_SURFACE, AUTHORITY_SURFACE, REPOSITORY_BOUND_COMMANDS } from "../lib/authority/surface.mjs";
+
+const packageRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..", "..");
+
+const CONTRACT_FILES = {
+  anchors: "spec/authority-anchors.yaml",
+  consumers: "spec/authority-consumers.yaml",
+  terms: "spec/authority-terms.yaml",
+  "closed-sets": "spec/authority-closed-sets.yaml",
+};
+
+function sorted(values) {
+  return [...values].sort();
+}
+
+function sameSet(left, right) {
+  return JSON.stringify(sorted(left)) === JSON.stringify(sorted(right));
+}
+
+// Flags as the contract's own command line spells them, so the contract cannot
+// claim a surface its command string does not show.
+function flagsInCommand(command) {
+  return sorted(new Set([...command.matchAll(/--([a-z][a-z0-9-]*)/gu)].map((match) => match[1])));
+}
+
+export function checkAuthoritySurface(root = packageRoot) {
+  const failures = [];
+  const contractIds = new Map();
+
+  for (const command of REPOSITORY_BOUND_COMMANDS) {
+    const relative = CONTRACT_FILES[command];
+    if (relative === undefined) {
+      failures.push(`command ${command} is in the enforced surface but has no product contract file`);
+      continue;
+    }
+    let contract;
+    try {
+      contract = YAML.parse(readFileSync(path.join(root, relative), "utf8"));
+    } catch (error) {
+      failures.push(`${relative} is not readable structured YAML: ${error.message}`);
+      continue;
+    }
+    const declared = contract?.surface;
+    if (declared === undefined) {
+      failures.push(`${relative} declares no surface block`);
+      continue;
+    }
+    contractIds.set(contract?.spec?.id, command);
+
+    const enforced = AUTHORITY_SURFACE[command];
+    if (command === "anchors" && !sameSet(
+      contract?.lexical_grammar?.class_B?.builtin_subcommands_excluded ?? [],
+      PNPM_BUILTIN_SUBCOMMANDS,
+    )) {
+      failures.push(
+        `anchors builtin_subcommands_excluded: contract ${JSON.stringify(sorted(contract?.lexical_grammar?.class_B?.builtin_subcommands_excluded ?? []))} `
+        + `!= enforced ${JSON.stringify(sorted(PNPM_BUILTIN_SUBCOMMANDS))}`,
+      );
+    }
+    for (const [field, contractKey] of [
+      ["booleanFlags", "boolean_flags"],
+      ["valueFlags", "value_flags"],
+      ["integerFlags", "integer_flags"],
+      ["repeatableFlags", "repeatable_flags"],
+    ]) {
+      if (!Object.hasOwn(declared, contractKey)) {
+        failures.push(`${command} ${contractKey}: contract field is required even when its array is empty`);
+        continue;
+      }
+      if (!Array.isArray(declared[contractKey])) {
+        failures.push(`${command} ${contractKey}: contract field must be an array`);
+        continue;
+      }
+      if (!sameSet(enforced[field], declared[contractKey])) {
+        failures.push(
+          `${command} ${contractKey}: contract ${JSON.stringify(sorted(declared[contractKey]))} `
+          + `!= enforced ${JSON.stringify(sorted(enforced[field]))}`,
+        );
+      }
+    }
+    if (declared.report_format !== enforced.reportFormat) {
+      failures.push(`${command} report_format: contract ${declared.report_format} != enforced ${enforced.reportFormat}`);
+    }
+    if (contract?.spec?.id !== enforced.contract) {
+      failures.push(`${command} contract id: ${contract?.spec?.id} != enforced ${enforced.contract}`);
+    }
+
+    const commandFlags = flagsInCommand(String(contract.command ?? ""));
+    const surfaceFlags = sorted(new Set([
+      ...enforced.booleanFlags, ...enforced.valueFlags, ...enforced.integerFlags, ...enforced.repeatableFlags,
+    ]));
+    if (!sameSet(commandFlags, surfaceFlags)) {
+      failures.push(
+        `${command} command line flags ${JSON.stringify(commandFlags)} != declared surface ${JSON.stringify(surfaceFlags)}`,
+      );
+    }
+  }
+
+  // fmt and the source schema: the authoring contract has to describe the
+  // format the validator admits and the container fields it accepts, so a
+  // contract edit that widens either one fails here instead of passing
+  // silently because the constant lived in the validator.
+  let authoring;
+  let source;
+  try {
+    authoring = YAML.parse(readFileSync(path.join(root, "spec/authority-authoring.yaml"), "utf8"));
+    source = YAML.parse(readFileSync(path.join(root, "contracts/authority-source.schema.yaml"), "utf8"));
+  } catch (error) {
+    failures.push(`the authoring contract or source schema is not readable structured YAML: ${error.message}`);
+  }
+  if (authoring !== undefined && source !== undefined) {
+    const fmtFlags = sorted(new Set([...AUTHORING_SURFACE.fmt.booleanFlags]));
+    const declaredFmt = flagsInCommand(String(authoring.commands?.fmt?.syntax ?? ""));
+    if (!sameSet(declaredFmt, fmtFlags)) {
+      failures.push(`fmt flags: contract ${JSON.stringify(declaredFmt)} != enforced ${JSON.stringify(fmtFlags)}`);
+    }
+    if (authoring.spec?.id !== AUTHORING_SURFACE.fmt.contract) {
+      failures.push(`authoring contract id: ${authoring.spec?.id} != enforced ${AUTHORING_SURFACE.fmt.contract}`);
+    }
+    if (authoring.fields?.format !== source.format) {
+      failures.push(`authoring format ${authoring.fields?.format} != source schema format ${source.format}`);
+    }
+    const authoringMigration = authoring.fields?.migration_inputs?.format;
+    if (authoringMigration !== source.migration_inputs?.format) {
+      failures.push(`migration input format: authoring ${authoringMigration} != source schema ${source.migration_inputs?.format}`);
+    }
+    if (!sameSet(authoring.profiles?.yaml?.container_fields ?? [], source.yaml_document?.allowed_fields ?? [])) {
+      failures.push(
+        `container fields: authoring ${JSON.stringify(sorted(authoring.profiles?.yaml?.container_fields ?? []))} `
+        + `!= source schema ${JSON.stringify(sorted(source.yaml_document?.allowed_fields ?? []))}`,
+      );
+    }
+    if (!sameSet(source.fields?.yaml_document ?? [], source.yaml_document?.allowed_fields ?? [])) {
+      failures.push("the source schema states two different admitted container field sets");
+    }
+  }
+
+  // The other direction: a contract that no enforced command claims.
+  for (const [command, relative] of Object.entries(CONTRACT_FILES)) {
+    if (!REPOSITORY_BOUND_COMMANDS.includes(command)) {
+      failures.push(`${relative} declares command ${command}, which the enforced surface does not admit`);
+    }
+  }
+  for (const [id, command] of contractIds) {
+    if (id === undefined) failures.push(`the contract for ${command} declares no spec.id`);
+  }
+
+  return failures;
+}
+
+if (import.meta.url === `file://${process.argv[1]}` || process.argv[1]?.endsWith("check-authority-surface.mjs")) {
+  const failures = checkAuthoritySurface();
+  for (const failure of failures) process.stderr.write(`authority-surface: ${failure}\n`);
+  if (failures.length > 0) process.exit(1);
+  process.stdout.write(
+    `authority-surface: ${REPOSITORY_BOUND_COMMANDS.length} repository-bound commands match their product contracts\n`,
+  );
+}