@oddessentials/repo-standards 6.0.0 → 7.0.0

package/README.md

@@ -1,6 +1,17 @@
 [![npm version](https://img.shields.io/npm/v/@oddessentials/repo-standards.svg)](https://www.npmjs.com/package/@oddessentials/repo-standards)
+[![npm downloads](https://img.shields.io/npm/dm/@oddessentials/repo-standards.svg)](https://www.npmjs.com/package/@oddessentials/repo-standards)
 [![CI](https://github.com/oddessentials/repo-standards/actions/workflows/ci.yml/badge.svg)](https://github.com/oddessentials/repo-standards/actions/workflows/ci.yml)
+[![Release](https://github.com/oddessentials/repo-standards/actions/workflows/release.yml/badge.svg)](https://github.com/oddessentials/repo-standards/actions/workflows/release.yml)
+[![Renovate](https://img.shields.io/badge/renovate-enabled-brightgreen.svg)](https://renovatebot.com)
+[![semantic-release](https://img.shields.io/badge/semantic--release-%E2%9C%93-brightgreen?logo=semantic-release)](https://github.com/semantic-release/semantic-release)
+[![Conventional Commits](https://img.shields.io/badge/Conventional%20Commits-1.0.0-yellow.svg)](https://conventionalcommits.org)
 [![license](https://img.shields.io/npm/l/@oddessentials/repo-standards.svg)](LICENSE)
+[![node](https://img.shields.io/node/v/@oddessentials/repo-standards.svg)](https://nodejs.org)
+[![TypeScript](https://img.shields.io/badge/TypeScript-5.9-blue.svg)](https://www.typescriptlang.org/)
+[![ESLint](https://img.shields.io/badge/ESLint-v9-4B32C3?logo=eslint)](https://eslint.org/)
+[![code style: prettier](https://img.shields.io/badge/code_style-prettier-ff69b4.svg)](https://prettier.io/)
+[![PRs Welcome](https://img.shields.io/badge/PRs-welcome-brightgreen.svg)](CONTRIBUTING.md)
+[![Maintenance](https://img.shields.io/badge/Maintained-yes-green.svg)](https://github.com/oddessentials/repo-standards/graphs/commit-activity)
 
 # 🐝 Repository Standards & CI Checklist
 
@@ -18,7 +29,7 @@ It is designed to be:
 
 ---
 
-## What’s Included
+## 📦 What’s Included
 
 - **Master spec (source of truth)**
   `config/standards.json`
@@ -31,7 +42,7 @@ It is designed to be:
 
 ---
 
-## Meta Rules (Global Policy)
+## 🔧 Meta Rules (Global Policy)
 
 The master spec includes a `meta` block that defines system-wide expectations:
 
@@ -66,9 +77,9 @@ The master spec includes a `meta` block that defines system-wide expectations:
 
 ---
 
-## Structure of `config/standards.json`
+## 📋 Structure of `config/standards.json`
 
-- `version` — schema version (currently `5`)
+- `version` — schema version (matches package.json major version)
 - `meta` — global rules and migration policy
 - `ciSystems` — supported CI platforms
   _(currently `github-actions`, `azure-devops`)_
@@ -105,17 +116,16 @@ The `version` field indicates schema compatibility:
 - `3` — Expands release, build determinism, and provenance/CI automation requirements; adds unified release workflow and template automation guidance.
 - `4` — Stable API contract with `getStandards()`, `getSchema()`, `STANDARDS_VERSION` exports; Node 22 LTS alignment.
 - `5` — Adds automated version-guard guidance for repositories using semantic-release; schema aligned to package major version 5.
+- `6` — Schema version aligned to package major version 6; introduces automated pre-test version sync.
 
-To keep `config/standards.json` in sync with semantic-release major bumps, use
-`scripts/sync-standards-version.cjs` during the semantic-release prepare step
-and commit the updated files. This updates the schema version and README
-references in one place.
+To keep `config/standards.json` in sync with semantic-release major bumps, the
+`sync:version` script runs automatically before tests.
 
 Consumers should ignore unknown fields for forward compatibility.
 
 ---
 
-## Dependency Governance (Recommended Items)
+## 🔗 Dependency Governance (Recommended Items)
 
 Two recommended checklist items support supply-chain governance:
 
@@ -152,7 +162,7 @@ Required secrets:
 
 ---
 
-## Bazel Integration
+## 🛠️ Bazel Integration
 
 This framework supports Bazel as an **optional build executor** for quality checks.
 
@@ -230,7 +240,7 @@ To disable Bazel hints for a repo that contains Bazel files but uses npm for qua
 
 ---
 
-## Generating Stack-Specific JSON
+## 🚀 Generating Stack-Specific JSON
 
 The generator reads the master spec and produces filtered, deterministic outputs.
 
@@ -275,7 +285,7 @@ config/standards.typescript-js.github-actions.json
 
 ---
 
-## Consuming This Package (npm)
+## 📥 Consuming This Package (npm)
 
 Install:
 
@@ -295,7 +305,7 @@ This package is intentionally **read-only** and **side-effect free**.
 
 ---
 
-## How to Apply to a Repository
+## 📖 How to Apply to a Repository
 
 1. Identify the stack (`typescript-js`, `csharp-dotnet`, `python`)
 2. Generate the filtered checklist
@@ -308,7 +318,7 @@ For existing repositories, follow `meta.migrationGuide` to adopt standards incre
 
 ---
 
-## Instruction Generation
+## 📝 Instruction Generation
 
 Human-readable “agent instructions” can also be generated:
 
@@ -325,7 +335,38 @@ npm run generate:instructions -- standards.csharp-dotnet.azure-devops.json
 
 ---
 
-## Philosophy
+## ✅ Dogfooding Compliance
+
+This repository follows its own standards. See [docs/COMPLIANCE.md](docs/COMPLIANCE.md) for the full audit.
+
+| Category                  | Status | Notes                               |
+| ------------------------- | ------ | ----------------------------------- |
+| ⚙️ Core (29 items)        | 28/29  | Secret scanning N/A for public repo |
+| 📋 Recommended (12 items) | 6/12   | AI/E2E items N/A for library        |
+| 🎯 Optional (3 items)     | 0/3    | Not targeted                        |
+
+<details>
+<summary>📊 Core Requirements</summary>
+
+| Status | Standard                                    |
+| ------ | ------------------------------------------- |
+| ✅     | Line Endings, CRLF Detection, Ignore Files  |
+| ✅     | Linting (ESLint v9), Formatter (Prettier)   |
+| ✅     | Unit Tests (Vitest), CI Quality Gates       |
+| ✅     | Semantic Versioning, Version Guard          |
+| ✅     | Unified Release, Hook Bypass, Commit Lint   |
+| ✅     | Type Checking (strict), Dependency Security |
+| ✅     | Deterministic Builds, Provenance            |
+| ✅     | Hooks (Husky), Hook/CI Parity               |
+| ✅     | Runtime Version, Documentation, Governance  |
+| ⚠️     | Coverage (low thresholds - intentional)     |
+| ⬜     | Secret Scanning (N/A for public repo)       |
+
+</details>
+
+---
+
+## 💡 Philosophy
 
 🐝 **Small rules. Shared language. Predictable outcomes.**
 

package/dist/cli.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/cli.ts","../node_modules/tsup/assets/cjs_shims.js","../src/index.ts"],"sourcesContent":["#!/usr/bin/env node\n/**\n * repo-standards CLI\n *\n * Usage:\n *   repo-standards --version\n *   repo-standards --help\n *   repo-standards <stack> [ci-system]\n */\n\nimport { createRequire } from \"node:module\";\nimport {\n  loadBaseline,\n  listSupportedStacks,\n  listSupportedCiSystems,\n} from \"./index.js\";\nimport type { StackId, CiSystem } from \"./types.js\";\n\n// Dynamic version reading from package.json for determinism invariant compliance\nconst require = createRequire(import.meta.url);\nconst pkg = require(\"../package.json\") as { version: string };\n\n/** Package version - dynamically read from package.json for determinism */\nexport const VERSION: string = pkg.version;\n\nfunction printHelp(): void {\n  console.log(`repo-standards v${VERSION}\n\nUsage:\n  repo-standards --version       Print version and exit\n  repo-standards --help          Print this help message\n  repo-standards <stack> [ci]    Get standards for a stack (optional CI system)\n\nSupported stacks: ${listSupportedStacks().join(\", \")}\nSupported CI systems: ${listSupportedCiSystems().join(\", \")}\n\nExamples:\n  repo-standards typescript-js\n  repo-standards python github-actions\n`);\n}\n\nfunction main(): void {\n  const args = process.argv.slice(2);\n\n  // Handle --version\n  if (args.includes(\"--version\") || args.includes(\"-V\")) {\n    console.log(VERSION);\n    process.exit(0);\n  }\n\n  // Handle --help or no args\n  if (args.includes(\"--help\") || args.includes(\"-h\") || args.length === 0) {\n    printHelp();\n    process.exit(args.length === 0 ? 1 : 0);\n  }\n\n  const [stackArg, ciArg] = args;\n  const validStacks = listSupportedStacks();\n  const validCiSystems = listSupportedCiSystems();\n\n  // Validate stack\n  if (!validStacks.includes(stackArg as StackId)) {\n    console.error(`Error: Unknown stack \"${stackArg}\"`);\n    console.error(`Valid stacks: ${validStacks.join(\", \")}`);\n    process.exit(1);\n  }\n\n  // Validate CI system if provided\n  if (ciArg && !validCiSystems.includes(ciArg as CiSystem)) {\n    console.error(`Error: Unknown CI system \"${ciArg}\"`);\n    console.error(`Valid CI systems: ${validCiSystems.join(\", \")}`);\n    process.exit(1);\n  }\n\n  // Load and output standards\n  const standards = loadBaseline(\n    stackArg as StackId,\n    ciArg as CiSystem | undefined,\n  );\n  console.log(JSON.stringify(standards, null, 2));\n}\n\nmain();\n","// Shim globals in cjs bundle\n// There's a weird bug that esbuild will always inject importMetaUrl\n// if we export it as `const importMetaUrl = ... __filename ...`\n// But using a function will not cause this issue\n\nconst getImportMetaUrl = () => \n  typeof document === \"undefined\" \n    ? new URL(`file:${__filename}`).href \n    : (document.currentScript && document.currentScript.tagName.toUpperCase() === 'SCRIPT') \n      ? document.currentScript.src \n      : new URL(\"main.js\", document.baseURI).href;\n\nexport const importMetaUrl = /* @__PURE__ */ getImportMetaUrl()\n","import { fileURLToPath } from \"node:url\";\nimport { readFileSync } from \"node:fs\";\nimport { join, dirname } from \"node:path\";\nimport type {\n  MasterJson,\n  StackChecklistJson,\n  StackId,\n  CiSystem,\n} from \"./types.js\";\nimport { STANDARDS_VERSION, STANDARDS_SCHEMA_VERSION } from \"./version.js\";\n\n// Re-export types for consumers\nexport type { MasterJson, StackChecklistJson, StackId, CiSystem };\n\n// Re-export version info (stable API contract)\nexport { STANDARDS_VERSION, STANDARDS_SCHEMA_VERSION };\n\n// ESM equivalent of __dirname\nconst __filename = fileURLToPath(import.meta.url);\nconst __dirname = dirname(__filename);\n\n// Path to config directory:\n// - When running from src/ (dev/test): use repo root config/\n// - When running from dist/ (installed): use dist/config/\nconst isDevMode = __dirname.includes(\"src\");\nconst configDir = isDevMode\n  ? join(__dirname, \"..\", \"config\")\n  : join(__dirname, \"config\");\n\n/** Load the master spec JSON from the packaged dist directory */\nexport function loadMasterSpec(): MasterJson {\n  const filePath = join(configDir, \"standards.json\");\n  return JSON.parse(readFileSync(filePath, \"utf8\"));\n}\n\n/** Load a stack-specific checklist (optionally filtered by CI system) */\nexport function loadBaseline(\n  stack: StackId,\n  ci?: CiSystem,\n): StackChecklistJson {\n  const suffix = ci ? `.${ci}` : \"\";\n  const file = `standards.${stack}${suffix}.json`;\n  const filePath = join(configDir, file);\n  return JSON.parse(readFileSync(filePath, \"utf8\"));\n}\n\n/** List all supported stacks (derived from the master spec) */\nexport function listSupportedStacks(): readonly StackId[] {\n  const spec = loadMasterSpec();\n  return Object.keys(spec.stacks) as StackId[];\n}\n\n/** List all supported CI systems (derived from the master spec) */\nexport function listSupportedCiSystems(): readonly CiSystem[] {\n  const spec = loadMasterSpec();\n  return spec.ciSystems as CiSystem[];\n}\n\n/**\n * PUBLIC API CONTRACT (semver-governed)\n * Alias for loadBaseline - loads stack-specific standards checklist.\n * Breaking changes to this function signature require a major version bump.\n */\nexport function getStandards(\n  stack: StackId,\n  ci?: CiSystem,\n): StackChecklistJson {\n  return loadBaseline(stack, ci);\n}\n\n/**\n * PUBLIC API CONTRACT (semver-governed)\n * Alias for loadMasterSpec - loads the master standards schema.\n * Breaking changes to this function signature require a major version bump.\n */\nexport function getSchema(): MasterJson {\n  return loadMasterSpec();\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACKA,IAAM,mBAAmB,MACvB,OAAO,aAAa,cAChB,IAAI,IAAI,QAAQ,UAAU,EAAE,EAAE,OAC7B,SAAS,iBAAiB,SAAS,cAAc,QAAQ,YAAY,MAAM,WAC1E,SAAS,cAAc,MACvB,IAAI,IAAI,WAAW,SAAS,OAAO,EAAE;AAEtC,IAAM,gBAAgC,iCAAiB;;;ADF9D,yBAA8B;;;AEV9B,sBAA8B;AAC9B,qBAA6B;AAC7B,uBAA8B;AAgB9B,IAAMA,kBAAa,+BAAc,aAAe;AAChD,IAAM,gBAAY,0BAAQA,WAAU;AAKpC,IAAM,YAAY,UAAU,SAAS,KAAK;AAC1C,IAAM,YAAY,gBACd,uBAAK,WAAW,MAAM,QAAQ,QAC9B,uBAAK,WAAW,QAAQ;AAGrB,SAAS,iBAA6B;AAC3C,QAAM,eAAW,uBAAK,WAAW,gBAAgB;AACjD,SAAO,KAAK,UAAM,6BAAa,UAAU,MAAM,CAAC;AAClD;AAGO,SAAS,aACd,OACA,IACoB;AACpB,QAAM,SAAS,KAAK,IAAI,EAAE,KAAK;AAC/B,QAAM,OAAO,aAAa,KAAK,GAAG,MAAM;AACxC,QAAM,eAAW,uBAAK,WAAW,IAAI;AACrC,SAAO,KAAK,UAAM,6BAAa,UAAU,MAAM,CAAC;AAClD;AAGO,SAAS,sBAA0C;AACxD,QAAM,OAAO,eAAe;AAC5B,SAAO,OAAO,KAAK,KAAK,MAAM;AAChC;AAGO,SAAS,yBAA8C;AAC5D,QAAM,OAAO,eAAe;AAC5B,SAAO,KAAK;AACd;;;AFrCA,IAAMC,eAAU,kCAAc,aAAe;AAC7C,IAAM,MAAMA,SAAQ,iBAAiB;AAG9B,IAAM,UAAkB,IAAI;AAEnC,SAAS,YAAkB;AACzB,UAAQ,IAAI,mBAAmB,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,oBAOpB,oBAAoB,EAAE,KAAK,IAAI,CAAC;AAAA,wBAC5B,uBAAuB,EAAE,KAAK,IAAI,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,CAK1D;AACD;AAEA,SAAS,OAAa;AACpB,QAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;AAGjC,MAAI,KAAK,SAAS,WAAW,KAAK,KAAK,SAAS,IAAI,GAAG;AACrD,YAAQ,IAAI,OAAO;AACnB,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,MAAI,KAAK,SAAS,QAAQ,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,WAAW,GAAG;AACvE,cAAU;AACV,YAAQ,KAAK,KAAK,WAAW,IAAI,IAAI,CAAC;AAAA,EACxC;AAEA,QAAM,CAAC,UAAU,KAAK,IAAI;AAC1B,QAAM,cAAc,oBAAoB;AACxC,QAAM,iBAAiB,uBAAuB;AAG9C,MAAI,CAAC,YAAY,SAAS,QAAmB,GAAG;AAC9C,YAAQ,MAAM,yBAAyB,QAAQ,GAAG;AAClD,YAAQ,MAAM,iBAAiB,YAAY,KAAK,IAAI,CAAC,EAAE;AACvD,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,MAAI,SAAS,CAAC,eAAe,SAAS,KAAiB,GAAG;AACxD,YAAQ,MAAM,6BAA6B,KAAK,GAAG;AACnD,YAAQ,MAAM,qBAAqB,eAAe,KAAK,IAAI,CAAC,EAAE;AAC9D,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,QAAM,YAAY;AAAA,IAChB;AAAA,IACA;AAAA,EACF;AACA,UAAQ,IAAI,KAAK,UAAU,WAAW,MAAM,CAAC,CAAC;AAChD;AAEA,KAAK;","names":["__filename","require"]}
+{"version":3,"sources":["../src/cli.ts","../node_modules/tsup/assets/cjs_shims.js","../src/index.ts"],"sourcesContent":["#!/usr/bin/env node\n/**\n * repo-standards CLI\n *\n * Usage:\n *   repo-standards --version\n *   repo-standards --help\n *   repo-standards <stack> [ci-system]\n */\n\nimport { createRequire } from \"node:module\";\nimport {\n  loadBaseline,\n  listSupportedStacks,\n  listSupportedCiSystems,\n} from \"./index.js\";\nimport type { StackId, CiSystem } from \"./types.js\";\n\n// Dynamic version reading from package.json for determinism invariant compliance\nconst require = createRequire(import.meta.url);\nconst pkg = require(\"../package.json\") as { version: string };\n\n/** Package version - dynamically read from package.json for determinism */\nexport const VERSION: string = pkg.version;\n\nfunction printHelp(): void {\n  console.log(`repo-standards v${VERSION}\n\nUsage:\n  repo-standards --version       Print version and exit\n  repo-standards --help          Print this help message\n  repo-standards <stack> [ci]    Get standards for a stack (optional CI system)\n\nSupported stacks: ${listSupportedStacks().join(\", \")}\nSupported CI systems: ${listSupportedCiSystems().join(\", \")}\n\nExamples:\n  repo-standards typescript-js\n  repo-standards python github-actions\n`);\n}\n\nfunction main(): void {\n  const args = process.argv.slice(2);\n\n  // Handle --version\n  if (args.includes(\"--version\") || args.includes(\"-V\")) {\n    console.log(VERSION);\n    process.exit(0);\n  }\n\n  // Handle --help or no args\n  if (args.includes(\"--help\") || args.includes(\"-h\") || args.length === 0) {\n    printHelp();\n    process.exit(args.length === 0 ? 1 : 0);\n  }\n\n  const [stackArg, ciArg] = args;\n  const validStacks = listSupportedStacks();\n  const validCiSystems = listSupportedCiSystems();\n\n  // Validate stack\n  if (!validStacks.includes(stackArg as StackId)) {\n    console.error(`Error: Unknown stack \"${stackArg}\"`);\n    console.error(`Valid stacks: ${validStacks.join(\", \")}`);\n    process.exit(1);\n  }\n\n  // Validate CI system if provided\n  if (ciArg && !validCiSystems.includes(ciArg as CiSystem)) {\n    console.error(`Error: Unknown CI system \"${ciArg}\"`);\n    console.error(`Valid CI systems: ${validCiSystems.join(\", \")}`);\n    process.exit(1);\n  }\n\n  // Load and output standards\n  const standards = loadBaseline(\n    stackArg as StackId,\n    ciArg as CiSystem | undefined,\n  );\n  console.log(JSON.stringify(standards, null, 2));\n}\n\nmain();\n","// Shim globals in cjs bundle\n// There's a weird bug that esbuild will always inject importMetaUrl\n// if we export it as `const importMetaUrl = ... __filename ...`\n// But using a function will not cause this issue\n\nconst getImportMetaUrl = () => \n  typeof document === \"undefined\" \n    ? new URL(`file:${__filename}`).href \n    : (document.currentScript && document.currentScript.tagName.toUpperCase() === 'SCRIPT') \n      ? document.currentScript.src \n      : new URL(\"main.js\", document.baseURI).href;\n\nexport const importMetaUrl = /* @__PURE__ */ getImportMetaUrl()\n","import { fileURLToPath } from \"node:url\";\nimport { readFileSync } from \"node:fs\";\nimport { join, dirname } from \"node:path\";\nimport type {\n  MasterJson,\n  StackChecklistJson,\n  StackId,\n  CiSystem,\n} from \"./types.js\";\nimport { STANDARDS_VERSION, STANDARDS_SCHEMA_VERSION } from \"./version.js\";\n\n// Re-export types for consumers\nexport type { MasterJson, StackChecklistJson, StackId, CiSystem };\n\n// Re-export version info (stable API contract)\nexport { STANDARDS_VERSION, STANDARDS_SCHEMA_VERSION };\n\n// ESM equivalent of __dirname\nconst __filename = fileURLToPath(import.meta.url);\nconst __dirname = dirname(__filename);\n\n// Path to config directory:\n// - When running from src/ (dev/test): use repo root config/\n// - When running from dist/ (installed): use dist/config/\nconst isDevMode = __dirname.includes(\"src\");\nconst configDir = isDevMode\n  ? join(__dirname, \"..\", \"config\")\n  : join(__dirname, \"config\");\n\n/** Load the master spec JSON from the packaged dist directory */\nexport function loadMasterSpec(): MasterJson {\n  const filePath = join(configDir, \"standards.json\");\n  return JSON.parse(readFileSync(filePath, \"utf8\")) as MasterJson;\n}\n\n/** Load a stack-specific checklist (optionally filtered by CI system) */\nexport function loadBaseline(\n  stack: StackId,\n  ci?: CiSystem,\n): StackChecklistJson {\n  const suffix = ci ? `.${ci}` : \"\";\n  const file = `standards.${stack}${suffix}.json`;\n  const filePath = join(configDir, file);\n  return JSON.parse(readFileSync(filePath, \"utf8\")) as StackChecklistJson;\n}\n\n/** List all supported stacks (derived from the master spec) */\nexport function listSupportedStacks(): readonly StackId[] {\n  const spec = loadMasterSpec();\n  return Object.keys(spec.stacks) as StackId[];\n}\n\n/** List all supported CI systems (derived from the master spec) */\nexport function listSupportedCiSystems(): readonly CiSystem[] {\n  const spec = loadMasterSpec();\n  return spec.ciSystems as CiSystem[];\n}\n\n/**\n * PUBLIC API CONTRACT (semver-governed)\n * Alias for loadBaseline - loads stack-specific standards checklist.\n * Breaking changes to this function signature require a major version bump.\n */\nexport function getStandards(\n  stack: StackId,\n  ci?: CiSystem,\n): StackChecklistJson {\n  return loadBaseline(stack, ci);\n}\n\n/**\n * PUBLIC API CONTRACT (semver-governed)\n * Alias for loadMasterSpec - loads the master standards schema.\n * Breaking changes to this function signature require a major version bump.\n */\nexport function getSchema(): MasterJson {\n  return loadMasterSpec();\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACKA,IAAM,mBAAmB,MACvB,OAAO,aAAa,cAChB,IAAI,IAAI,QAAQ,UAAU,EAAE,EAAE,OAC7B,SAAS,iBAAiB,SAAS,cAAc,QAAQ,YAAY,MAAM,WAC1E,SAAS,cAAc,MACvB,IAAI,IAAI,WAAW,SAAS,OAAO,EAAE;AAEtC,IAAM,gBAAgC,iCAAiB;;;ADF9D,yBAA8B;;;AEV9B,sBAA8B;AAC9B,qBAA6B;AAC7B,uBAA8B;AAgB9B,IAAMA,kBAAa,+BAAc,aAAe;AAChD,IAAM,gBAAY,0BAAQA,WAAU;AAKpC,IAAM,YAAY,UAAU,SAAS,KAAK;AAC1C,IAAM,YAAY,gBACd,uBAAK,WAAW,MAAM,QAAQ,QAC9B,uBAAK,WAAW,QAAQ;AAGrB,SAAS,iBAA6B;AAC3C,QAAM,eAAW,uBAAK,WAAW,gBAAgB;AACjD,SAAO,KAAK,UAAM,6BAAa,UAAU,MAAM,CAAC;AAClD;AAGO,SAAS,aACd,OACA,IACoB;AACpB,QAAM,SAAS,KAAK,IAAI,EAAE,KAAK;AAC/B,QAAM,OAAO,aAAa,KAAK,GAAG,MAAM;AACxC,QAAM,eAAW,uBAAK,WAAW,IAAI;AACrC,SAAO,KAAK,UAAM,6BAAa,UAAU,MAAM,CAAC;AAClD;AAGO,SAAS,sBAA0C;AACxD,QAAM,OAAO,eAAe;AAC5B,SAAO,OAAO,KAAK,KAAK,MAAM;AAChC;AAGO,SAAS,yBAA8C;AAC5D,QAAM,OAAO,eAAe;AAC5B,SAAO,KAAK;AACd;;;AFrCA,IAAMC,eAAU,kCAAc,aAAe;AAC7C,IAAM,MAAMA,SAAQ,iBAAiB;AAG9B,IAAM,UAAkB,IAAI;AAEnC,SAAS,YAAkB;AACzB,UAAQ,IAAI,mBAAmB,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,oBAOpB,oBAAoB,EAAE,KAAK,IAAI,CAAC;AAAA,wBAC5B,uBAAuB,EAAE,KAAK,IAAI,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,CAK1D;AACD;AAEA,SAAS,OAAa;AACpB,QAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;AAGjC,MAAI,KAAK,SAAS,WAAW,KAAK,KAAK,SAAS,IAAI,GAAG;AACrD,YAAQ,IAAI,OAAO;AACnB,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,MAAI,KAAK,SAAS,QAAQ,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,WAAW,GAAG;AACvE,cAAU;AACV,YAAQ,KAAK,KAAK,WAAW,IAAI,IAAI,CAAC;AAAA,EACxC;AAEA,QAAM,CAAC,UAAU,KAAK,IAAI;AAC1B,QAAM,cAAc,oBAAoB;AACxC,QAAM,iBAAiB,uBAAuB;AAG9C,MAAI,CAAC,YAAY,SAAS,QAAmB,GAAG;AAC9C,YAAQ,MAAM,yBAAyB,QAAQ,GAAG;AAClD,YAAQ,MAAM,iBAAiB,YAAY,KAAK,IAAI,CAAC,EAAE;AACvD,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,MAAI,SAAS,CAAC,eAAe,SAAS,KAAiB,GAAG;AACxD,YAAQ,MAAM,6BAA6B,KAAK,GAAG;AACnD,YAAQ,MAAM,qBAAqB,eAAe,KAAK,IAAI,CAAC,EAAE;AAC9D,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,QAAM,YAAY;AAAA,IAChB;AAAA,IACA;AAAA,EACF;AACA,UAAQ,IAAI,KAAK,UAAU,WAAW,MAAM,CAAC,CAAC;AAChD;AAEA,KAAK;","names":["__filename","require"]}

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/cli.ts","../src/index.ts"],"sourcesContent":["#!/usr/bin/env node\n/**\n * repo-standards CLI\n *\n * Usage:\n *   repo-standards --version\n *   repo-standards --help\n *   repo-standards <stack> [ci-system]\n */\n\nimport { createRequire } from \"node:module\";\nimport {\n  loadBaseline,\n  listSupportedStacks,\n  listSupportedCiSystems,\n} from \"./index.js\";\nimport type { StackId, CiSystem } from \"./types.js\";\n\n// Dynamic version reading from package.json for determinism invariant compliance\nconst require = createRequire(import.meta.url);\nconst pkg = require(\"../package.json\") as { version: string };\n\n/** Package version - dynamically read from package.json for determinism */\nexport const VERSION: string = pkg.version;\n\nfunction printHelp(): void {\n  console.log(`repo-standards v${VERSION}\n\nUsage:\n  repo-standards --version       Print version and exit\n  repo-standards --help          Print this help message\n  repo-standards <stack> [ci]    Get standards for a stack (optional CI system)\n\nSupported stacks: ${listSupportedStacks().join(\", \")}\nSupported CI systems: ${listSupportedCiSystems().join(\", \")}\n\nExamples:\n  repo-standards typescript-js\n  repo-standards python github-actions\n`);\n}\n\nfunction main(): void {\n  const args = process.argv.slice(2);\n\n  // Handle --version\n  if (args.includes(\"--version\") || args.includes(\"-V\")) {\n    console.log(VERSION);\n    process.exit(0);\n  }\n\n  // Handle --help or no args\n  if (args.includes(\"--help\") || args.includes(\"-h\") || args.length === 0) {\n    printHelp();\n    process.exit(args.length === 0 ? 1 : 0);\n  }\n\n  const [stackArg, ciArg] = args;\n  const validStacks = listSupportedStacks();\n  const validCiSystems = listSupportedCiSystems();\n\n  // Validate stack\n  if (!validStacks.includes(stackArg as StackId)) {\n    console.error(`Error: Unknown stack \"${stackArg}\"`);\n    console.error(`Valid stacks: ${validStacks.join(\", \")}`);\n    process.exit(1);\n  }\n\n  // Validate CI system if provided\n  if (ciArg && !validCiSystems.includes(ciArg as CiSystem)) {\n    console.error(`Error: Unknown CI system \"${ciArg}\"`);\n    console.error(`Valid CI systems: ${validCiSystems.join(\", \")}`);\n    process.exit(1);\n  }\n\n  // Load and output standards\n  const standards = loadBaseline(\n    stackArg as StackId,\n    ciArg as CiSystem | undefined,\n  );\n  console.log(JSON.stringify(standards, null, 2));\n}\n\nmain();\n","import { fileURLToPath } from \"node:url\";\nimport { readFileSync } from \"node:fs\";\nimport { join, dirname } from \"node:path\";\nimport type {\n  MasterJson,\n  StackChecklistJson,\n  StackId,\n  CiSystem,\n} from \"./types.js\";\nimport { STANDARDS_VERSION, STANDARDS_SCHEMA_VERSION } from \"./version.js\";\n\n// Re-export types for consumers\nexport type { MasterJson, StackChecklistJson, StackId, CiSystem };\n\n// Re-export version info (stable API contract)\nexport { STANDARDS_VERSION, STANDARDS_SCHEMA_VERSION };\n\n// ESM equivalent of __dirname\nconst __filename = fileURLToPath(import.meta.url);\nconst __dirname = dirname(__filename);\n\n// Path to config directory:\n// - When running from src/ (dev/test): use repo root config/\n// - When running from dist/ (installed): use dist/config/\nconst isDevMode = __dirname.includes(\"src\");\nconst configDir = isDevMode\n  ? join(__dirname, \"..\", \"config\")\n  : join(__dirname, \"config\");\n\n/** Load the master spec JSON from the packaged dist directory */\nexport function loadMasterSpec(): MasterJson {\n  const filePath = join(configDir, \"standards.json\");\n  return JSON.parse(readFileSync(filePath, \"utf8\"));\n}\n\n/** Load a stack-specific checklist (optionally filtered by CI system) */\nexport function loadBaseline(\n  stack: StackId,\n  ci?: CiSystem,\n): StackChecklistJson {\n  const suffix = ci ? `.${ci}` : \"\";\n  const file = `standards.${stack}${suffix}.json`;\n  const filePath = join(configDir, file);\n  return JSON.parse(readFileSync(filePath, \"utf8\"));\n}\n\n/** List all supported stacks (derived from the master spec) */\nexport function listSupportedStacks(): readonly StackId[] {\n  const spec = loadMasterSpec();\n  return Object.keys(spec.stacks) as StackId[];\n}\n\n/** List all supported CI systems (derived from the master spec) */\nexport function listSupportedCiSystems(): readonly CiSystem[] {\n  const spec = loadMasterSpec();\n  return spec.ciSystems as CiSystem[];\n}\n\n/**\n * PUBLIC API CONTRACT (semver-governed)\n * Alias for loadBaseline - loads stack-specific standards checklist.\n * Breaking changes to this function signature require a major version bump.\n */\nexport function getStandards(\n  stack: StackId,\n  ci?: CiSystem,\n): StackChecklistJson {\n  return loadBaseline(stack, ci);\n}\n\n/**\n * PUBLIC API CONTRACT (semver-governed)\n * Alias for loadMasterSpec - loads the master standards schema.\n * Breaking changes to this function signature require a major version bump.\n */\nexport function getSchema(): MasterJson {\n  return loadMasterSpec();\n}\n"],"mappings":";;;AAUA,SAAS,qBAAqB;;;ACV9B,SAAS,qBAAqB;AAC9B,SAAS,oBAAoB;AAC7B,SAAS,MAAM,eAAe;AAgB9B,IAAMA,cAAa,cAAc,YAAY,GAAG;AAChD,IAAMC,aAAY,QAAQD,WAAU;AAKpC,IAAM,YAAYC,WAAU,SAAS,KAAK;AAC1C,IAAM,YAAY,YACd,KAAKA,YAAW,MAAM,QAAQ,IAC9B,KAAKA,YAAW,QAAQ;AAGrB,SAAS,iBAA6B;AAC3C,QAAM,WAAW,KAAK,WAAW,gBAAgB;AACjD,SAAO,KAAK,MAAM,aAAa,UAAU,MAAM,CAAC;AAClD;AAGO,SAAS,aACd,OACA,IACoB;AACpB,QAAM,SAAS,KAAK,IAAI,EAAE,KAAK;AAC/B,QAAM,OAAO,aAAa,KAAK,GAAG,MAAM;AACxC,QAAM,WAAW,KAAK,WAAW,IAAI;AACrC,SAAO,KAAK,MAAM,aAAa,UAAU,MAAM,CAAC;AAClD;AAGO,SAAS,sBAA0C;AACxD,QAAM,OAAO,eAAe;AAC5B,SAAO,OAAO,KAAK,KAAK,MAAM;AAChC;AAGO,SAAS,yBAA8C;AAC5D,QAAM,OAAO,eAAe;AAC5B,SAAO,KAAK;AACd;;;ADrCA,IAAMC,WAAU,cAAc,YAAY,GAAG;AAC7C,IAAM,MAAMA,SAAQ,iBAAiB;AAG9B,IAAM,UAAkB,IAAI;AAEnC,SAAS,YAAkB;AACzB,UAAQ,IAAI,mBAAmB,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,oBAOpB,oBAAoB,EAAE,KAAK,IAAI,CAAC;AAAA,wBAC5B,uBAAuB,EAAE,KAAK,IAAI,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,CAK1D;AACD;AAEA,SAAS,OAAa;AACpB,QAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;AAGjC,MAAI,KAAK,SAAS,WAAW,KAAK,KAAK,SAAS,IAAI,GAAG;AACrD,YAAQ,IAAI,OAAO;AACnB,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,MAAI,KAAK,SAAS,QAAQ,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,WAAW,GAAG;AACvE,cAAU;AACV,YAAQ,KAAK,KAAK,WAAW,IAAI,IAAI,CAAC;AAAA,EACxC;AAEA,QAAM,CAAC,UAAU,KAAK,IAAI;AAC1B,QAAM,cAAc,oBAAoB;AACxC,QAAM,iBAAiB,uBAAuB;AAG9C,MAAI,CAAC,YAAY,SAAS,QAAmB,GAAG;AAC9C,YAAQ,MAAM,yBAAyB,QAAQ,GAAG;AAClD,YAAQ,MAAM,iBAAiB,YAAY,KAAK,IAAI,CAAC,EAAE;AACvD,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,MAAI,SAAS,CAAC,eAAe,SAAS,KAAiB,GAAG;AACxD,YAAQ,MAAM,6BAA6B,KAAK,GAAG;AACnD,YAAQ,MAAM,qBAAqB,eAAe,KAAK,IAAI,CAAC,EAAE;AAC9D,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,QAAM,YAAY;AAAA,IAChB;AAAA,IACA;AAAA,EACF;AACA,UAAQ,IAAI,KAAK,UAAU,WAAW,MAAM,CAAC,CAAC;AAChD;AAEA,KAAK;","names":["__filename","__dirname","require"]}
+{"version":3,"sources":["../src/cli.ts","../src/index.ts"],"sourcesContent":["#!/usr/bin/env node\n/**\n * repo-standards CLI\n *\n * Usage:\n *   repo-standards --version\n *   repo-standards --help\n *   repo-standards <stack> [ci-system]\n */\n\nimport { createRequire } from \"node:module\";\nimport {\n  loadBaseline,\n  listSupportedStacks,\n  listSupportedCiSystems,\n} from \"./index.js\";\nimport type { StackId, CiSystem } from \"./types.js\";\n\n// Dynamic version reading from package.json for determinism invariant compliance\nconst require = createRequire(import.meta.url);\nconst pkg = require(\"../package.json\") as { version: string };\n\n/** Package version - dynamically read from package.json for determinism */\nexport const VERSION: string = pkg.version;\n\nfunction printHelp(): void {\n  console.log(`repo-standards v${VERSION}\n\nUsage:\n  repo-standards --version       Print version and exit\n  repo-standards --help          Print this help message\n  repo-standards <stack> [ci]    Get standards for a stack (optional CI system)\n\nSupported stacks: ${listSupportedStacks().join(\", \")}\nSupported CI systems: ${listSupportedCiSystems().join(\", \")}\n\nExamples:\n  repo-standards typescript-js\n  repo-standards python github-actions\n`);\n}\n\nfunction main(): void {\n  const args = process.argv.slice(2);\n\n  // Handle --version\n  if (args.includes(\"--version\") || args.includes(\"-V\")) {\n    console.log(VERSION);\n    process.exit(0);\n  }\n\n  // Handle --help or no args\n  if (args.includes(\"--help\") || args.includes(\"-h\") || args.length === 0) {\n    printHelp();\n    process.exit(args.length === 0 ? 1 : 0);\n  }\n\n  const [stackArg, ciArg] = args;\n  const validStacks = listSupportedStacks();\n  const validCiSystems = listSupportedCiSystems();\n\n  // Validate stack\n  if (!validStacks.includes(stackArg as StackId)) {\n    console.error(`Error: Unknown stack \"${stackArg}\"`);\n    console.error(`Valid stacks: ${validStacks.join(\", \")}`);\n    process.exit(1);\n  }\n\n  // Validate CI system if provided\n  if (ciArg && !validCiSystems.includes(ciArg as CiSystem)) {\n    console.error(`Error: Unknown CI system \"${ciArg}\"`);\n    console.error(`Valid CI systems: ${validCiSystems.join(\", \")}`);\n    process.exit(1);\n  }\n\n  // Load and output standards\n  const standards = loadBaseline(\n    stackArg as StackId,\n    ciArg as CiSystem | undefined,\n  );\n  console.log(JSON.stringify(standards, null, 2));\n}\n\nmain();\n","import { fileURLToPath } from \"node:url\";\nimport { readFileSync } from \"node:fs\";\nimport { join, dirname } from \"node:path\";\nimport type {\n  MasterJson,\n  StackChecklistJson,\n  StackId,\n  CiSystem,\n} from \"./types.js\";\nimport { STANDARDS_VERSION, STANDARDS_SCHEMA_VERSION } from \"./version.js\";\n\n// Re-export types for consumers\nexport type { MasterJson, StackChecklistJson, StackId, CiSystem };\n\n// Re-export version info (stable API contract)\nexport { STANDARDS_VERSION, STANDARDS_SCHEMA_VERSION };\n\n// ESM equivalent of __dirname\nconst __filename = fileURLToPath(import.meta.url);\nconst __dirname = dirname(__filename);\n\n// Path to config directory:\n// - When running from src/ (dev/test): use repo root config/\n// - When running from dist/ (installed): use dist/config/\nconst isDevMode = __dirname.includes(\"src\");\nconst configDir = isDevMode\n  ? join(__dirname, \"..\", \"config\")\n  : join(__dirname, \"config\");\n\n/** Load the master spec JSON from the packaged dist directory */\nexport function loadMasterSpec(): MasterJson {\n  const filePath = join(configDir, \"standards.json\");\n  return JSON.parse(readFileSync(filePath, \"utf8\")) as MasterJson;\n}\n\n/** Load a stack-specific checklist (optionally filtered by CI system) */\nexport function loadBaseline(\n  stack: StackId,\n  ci?: CiSystem,\n): StackChecklistJson {\n  const suffix = ci ? `.${ci}` : \"\";\n  const file = `standards.${stack}${suffix}.json`;\n  const filePath = join(configDir, file);\n  return JSON.parse(readFileSync(filePath, \"utf8\")) as StackChecklistJson;\n}\n\n/** List all supported stacks (derived from the master spec) */\nexport function listSupportedStacks(): readonly StackId[] {\n  const spec = loadMasterSpec();\n  return Object.keys(spec.stacks) as StackId[];\n}\n\n/** List all supported CI systems (derived from the master spec) */\nexport function listSupportedCiSystems(): readonly CiSystem[] {\n  const spec = loadMasterSpec();\n  return spec.ciSystems as CiSystem[];\n}\n\n/**\n * PUBLIC API CONTRACT (semver-governed)\n * Alias for loadBaseline - loads stack-specific standards checklist.\n * Breaking changes to this function signature require a major version bump.\n */\nexport function getStandards(\n  stack: StackId,\n  ci?: CiSystem,\n): StackChecklistJson {\n  return loadBaseline(stack, ci);\n}\n\n/**\n * PUBLIC API CONTRACT (semver-governed)\n * Alias for loadMasterSpec - loads the master standards schema.\n * Breaking changes to this function signature require a major version bump.\n */\nexport function getSchema(): MasterJson {\n  return loadMasterSpec();\n}\n"],"mappings":";;;AAUA,SAAS,qBAAqB;;;ACV9B,SAAS,qBAAqB;AAC9B,SAAS,oBAAoB;AAC7B,SAAS,MAAM,eAAe;AAgB9B,IAAMA,cAAa,cAAc,YAAY,GAAG;AAChD,IAAMC,aAAY,QAAQD,WAAU;AAKpC,IAAM,YAAYC,WAAU,SAAS,KAAK;AAC1C,IAAM,YAAY,YACd,KAAKA,YAAW,MAAM,QAAQ,IAC9B,KAAKA,YAAW,QAAQ;AAGrB,SAAS,iBAA6B;AAC3C,QAAM,WAAW,KAAK,WAAW,gBAAgB;AACjD,SAAO,KAAK,MAAM,aAAa,UAAU,MAAM,CAAC;AAClD;AAGO,SAAS,aACd,OACA,IACoB;AACpB,QAAM,SAAS,KAAK,IAAI,EAAE,KAAK;AAC/B,QAAM,OAAO,aAAa,KAAK,GAAG,MAAM;AACxC,QAAM,WAAW,KAAK,WAAW,IAAI;AACrC,SAAO,KAAK,MAAM,aAAa,UAAU,MAAM,CAAC;AAClD;AAGO,SAAS,sBAA0C;AACxD,QAAM,OAAO,eAAe;AAC5B,SAAO,OAAO,KAAK,KAAK,MAAM;AAChC;AAGO,SAAS,yBAA8C;AAC5D,QAAM,OAAO,eAAe;AAC5B,SAAO,KAAK;AACd;;;ADrCA,IAAMC,WAAU,cAAc,YAAY,GAAG;AAC7C,IAAM,MAAMA,SAAQ,iBAAiB;AAG9B,IAAM,UAAkB,IAAI;AAEnC,SAAS,YAAkB;AACzB,UAAQ,IAAI,mBAAmB,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,oBAOpB,oBAAoB,EAAE,KAAK,IAAI,CAAC;AAAA,wBAC5B,uBAAuB,EAAE,KAAK,IAAI,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,CAK1D;AACD;AAEA,SAAS,OAAa;AACpB,QAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;AAGjC,MAAI,KAAK,SAAS,WAAW,KAAK,KAAK,SAAS,IAAI,GAAG;AACrD,YAAQ,IAAI,OAAO;AACnB,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,MAAI,KAAK,SAAS,QAAQ,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,WAAW,GAAG;AACvE,cAAU;AACV,YAAQ,KAAK,KAAK,WAAW,IAAI,IAAI,CAAC;AAAA,EACxC;AAEA,QAAM,CAAC,UAAU,KAAK,IAAI;AAC1B,QAAM,cAAc,oBAAoB;AACxC,QAAM,iBAAiB,uBAAuB;AAG9C,MAAI,CAAC,YAAY,SAAS,QAAmB,GAAG;AAC9C,YAAQ,MAAM,yBAAyB,QAAQ,GAAG;AAClD,YAAQ,MAAM,iBAAiB,YAAY,KAAK,IAAI,CAAC,EAAE;AACvD,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,MAAI,SAAS,CAAC,eAAe,SAAS,KAAiB,GAAG;AACxD,YAAQ,MAAM,6BAA6B,KAAK,GAAG;AACnD,YAAQ,MAAM,qBAAqB,eAAe,KAAK,IAAI,CAAC,EAAE;AAC9D,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,QAAM,YAAY;AAAA,IAChB;AAAA,IACA;AAAA,EACF;AACA,UAAQ,IAAI,KAAK,UAAU,WAAW,MAAM,CAAC,CAAC;AAChD;AAEA,KAAK;","names":["__filename","__dirname","require"]}

package/dist/config/standards.csharp-dotnet.azure-devops.json

@@ -1250,5 +1250,5 @@
   },
   "stack": "csharp-dotnet",
   "stackLabel": "C# / .NET",
-  "version": 5
+  "version": 6
 }

package/dist/config/standards.csharp-dotnet.github-actions.json

@@ -1250,5 +1250,5 @@
   },
   "stack": "csharp-dotnet",
   "stackLabel": "C# / .NET",
-  "version": 5
+  "version": 6
 }

package/dist/config/standards.csharp-dotnet.json

@@ -1402,5 +1402,5 @@
   },
   "stack": "csharp-dotnet",
   "stackLabel": "C# / .NET",
-  "version": 5
+  "version": 6
 }

package/dist/config/standards.go.azure-devops.json

@@ -1233,5 +1233,5 @@
   },
   "stack": "go",
   "stackLabel": "Go",
-  "version": 5
+  "version": 6
 }

package/dist/config/standards.go.github-actions.json

@@ -1233,5 +1233,5 @@
   },
   "stack": "go",
   "stackLabel": "Go",
-  "version": 5
+  "version": 6
 }

package/dist/config/standards.go.json

@@ -1385,5 +1385,5 @@
   },
   "stack": "go",
   "stackLabel": "Go",
-  "version": 5
+  "version": 6
 }

package/dist/config/standards.json

@@ -4706,5 +4706,5 @@
       "languageFamily": "js"
     }
   },
-  "version": 5
+  "version": 6
 }

package/dist/config/standards.python.azure-devops.json

@@ -1287,5 +1287,5 @@
   },
   "stack": "python",
   "stackLabel": "Python",
-  "version": 5
+  "version": 6
 }

package/dist/config/standards.python.github-actions.json

@@ -1287,5 +1287,5 @@
   },
   "stack": "python",
   "stackLabel": "Python",
-  "version": 5
+  "version": 6
 }

package/dist/config/standards.python.json

@@ -1439,5 +1439,5 @@
   },
   "stack": "python",
   "stackLabel": "Python",
-  "version": 5
+  "version": 6
 }

package/dist/config/standards.rust.azure-devops.json

@@ -1246,5 +1246,5 @@
   },
   "stack": "rust",
   "stackLabel": "Rust",
-  "version": 5
+  "version": 6
 }

package/dist/config/standards.rust.github-actions.json

@@ -1246,5 +1246,5 @@
   },
   "stack": "rust",
   "stackLabel": "Rust",
-  "version": 5
+  "version": 6
 }

package/dist/config/standards.rust.json

@@ -1398,5 +1398,5 @@
   },
   "stack": "rust",
   "stackLabel": "Rust",
-  "version": 5
+  "version": 6
 }

package/dist/config/standards.typescript-js.azure-devops.json

@@ -1306,5 +1306,5 @@
   },
   "stack": "typescript-js",
   "stackLabel": "TypeScript / JavaScript",
-  "version": 5
+  "version": 6
 }

package/dist/config/standards.typescript-js.github-actions.json

@@ -1306,5 +1306,5 @@
   },
   "stack": "typescript-js",
   "stackLabel": "TypeScript / JavaScript",
-  "version": 5
+  "version": 6
 }

package/dist/config/standards.typescript-js.json

@@ -1458,5 +1458,5 @@
   },
   "stack": "typescript-js",
   "stackLabel": "TypeScript / JavaScript",
-  "version": 5
+  "version": 6
 }

package/dist/index.cjs

@@ -41,8 +41,8 @@ var import_node_fs = require("fs");
 var import_node_path = require("path");
 
 // src/version.ts
-var STANDARDS_VERSION = "5.3.0";
-var STANDARDS_SCHEMA_VERSION = 5;
+var STANDARDS_VERSION = "6.0.1";
+var STANDARDS_SCHEMA_VERSION = 6;
 
 // src/index.ts
 var __filename2 = (0, import_node_url.fileURLToPath)(importMetaUrl);

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../node_modules/tsup/assets/cjs_shims.js","../src/version.ts"],"sourcesContent":["import { fileURLToPath } from \"node:url\";\nimport { readFileSync } from \"node:fs\";\nimport { join, dirname } from \"node:path\";\nimport type {\n  MasterJson,\n  StackChecklistJson,\n  StackId,\n  CiSystem,\n} from \"./types.js\";\nimport { STANDARDS_VERSION, STANDARDS_SCHEMA_VERSION } from \"./version.js\";\n\n// Re-export types for consumers\nexport type { MasterJson, StackChecklistJson, StackId, CiSystem };\n\n// Re-export version info (stable API contract)\nexport { STANDARDS_VERSION, STANDARDS_SCHEMA_VERSION };\n\n// ESM equivalent of __dirname\nconst __filename = fileURLToPath(import.meta.url);\nconst __dirname = dirname(__filename);\n\n// Path to config directory:\n// - When running from src/ (dev/test): use repo root config/\n// - When running from dist/ (installed): use dist/config/\nconst isDevMode = __dirname.includes(\"src\");\nconst configDir = isDevMode\n  ? join(__dirname, \"..\", \"config\")\n  : join(__dirname, \"config\");\n\n/** Load the master spec JSON from the packaged dist directory */\nexport function loadMasterSpec(): MasterJson {\n  const filePath = join(configDir, \"standards.json\");\n  return JSON.parse(readFileSync(filePath, \"utf8\"));\n}\n\n/** Load a stack-specific checklist (optionally filtered by CI system) */\nexport function loadBaseline(\n  stack: StackId,\n  ci?: CiSystem,\n): StackChecklistJson {\n  const suffix = ci ? `.${ci}` : \"\";\n  const file = `standards.${stack}${suffix}.json`;\n  const filePath = join(configDir, file);\n  return JSON.parse(readFileSync(filePath, \"utf8\"));\n}\n\n/** List all supported stacks (derived from the master spec) */\nexport function listSupportedStacks(): readonly StackId[] {\n  const spec = loadMasterSpec();\n  return Object.keys(spec.stacks) as StackId[];\n}\n\n/** List all supported CI systems (derived from the master spec) */\nexport function listSupportedCiSystems(): readonly CiSystem[] {\n  const spec = loadMasterSpec();\n  return spec.ciSystems as CiSystem[];\n}\n\n/**\n * PUBLIC API CONTRACT (semver-governed)\n * Alias for loadBaseline - loads stack-specific standards checklist.\n * Breaking changes to this function signature require a major version bump.\n */\nexport function getStandards(\n  stack: StackId,\n  ci?: CiSystem,\n): StackChecklistJson {\n  return loadBaseline(stack, ci);\n}\n\n/**\n * PUBLIC API CONTRACT (semver-governed)\n * Alias for loadMasterSpec - loads the master standards schema.\n * Breaking changes to this function signature require a major version bump.\n */\nexport function getSchema(): MasterJson {\n  return loadMasterSpec();\n}\n","// Shim globals in cjs bundle\n// There's a weird bug that esbuild will always inject importMetaUrl\n// if we export it as `const importMetaUrl = ... __filename ...`\n// But using a function will not cause this issue\n\nconst getImportMetaUrl = () => \n  typeof document === \"undefined\" \n    ? new URL(`file:${__filename}`).href \n    : (document.currentScript && document.currentScript.tagName.toUpperCase() === 'SCRIPT') \n      ? document.currentScript.src \n      : new URL(\"main.js\", document.baseURI).href;\n\nexport const importMetaUrl = /* @__PURE__ */ getImportMetaUrl()\n","/**\n * AUTO-GENERATED at build time by scripts/build.ts\n * DO NOT EDIT MANUALLY\n *\n * This module provides version information for the repo-standards package.\n * Consumers should import from here instead of package.json to avoid\n * ESM/CJS interop issues.\n */\n\nexport const STANDARDS_VERSION = '5.3.0';\nexport const STANDARDS_SCHEMA_VERSION = 5;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACKA,IAAM,mBAAmB,MACvB,OAAO,aAAa,cAChB,IAAI,IAAI,QAAQ,UAAU,EAAE,EAAE,OAC7B,SAAS,iBAAiB,SAAS,cAAc,QAAQ,YAAY,MAAM,WAC1E,SAAS,cAAc,MACvB,IAAI,IAAI,WAAW,SAAS,OAAO,EAAE;AAEtC,IAAM,gBAAgC,iCAAiB;;;ADZ9D,sBAA8B;AAC9B,qBAA6B;AAC7B,uBAA8B;;;AEOvB,IAAM,oBAAoB;AAC1B,IAAM,2BAA2B;;;AFQxC,IAAMA,kBAAa,+BAAc,aAAe;AAChD,IAAM,gBAAY,0BAAQA,WAAU;AAKpC,IAAM,YAAY,UAAU,SAAS,KAAK;AAC1C,IAAM,YAAY,gBACd,uBAAK,WAAW,MAAM,QAAQ,QAC9B,uBAAK,WAAW,QAAQ;AAGrB,SAAS,iBAA6B;AAC3C,QAAM,eAAW,uBAAK,WAAW,gBAAgB;AACjD,SAAO,KAAK,UAAM,6BAAa,UAAU,MAAM,CAAC;AAClD;AAGO,SAAS,aACd,OACA,IACoB;AACpB,QAAM,SAAS,KAAK,IAAI,EAAE,KAAK;AAC/B,QAAM,OAAO,aAAa,KAAK,GAAG,MAAM;AACxC,QAAM,eAAW,uBAAK,WAAW,IAAI;AACrC,SAAO,KAAK,UAAM,6BAAa,UAAU,MAAM,CAAC;AAClD;AAGO,SAAS,sBAA0C;AACxD,QAAM,OAAO,eAAe;AAC5B,SAAO,OAAO,KAAK,KAAK,MAAM;AAChC;AAGO,SAAS,yBAA8C;AAC5D,QAAM,OAAO,eAAe;AAC5B,SAAO,KAAK;AACd;AAOO,SAAS,aACd,OACA,IACoB;AACpB,SAAO,aAAa,OAAO,EAAE;AAC/B;AAOO,SAAS,YAAwB;AACtC,SAAO,eAAe;AACxB;","names":["__filename"]}
+{"version":3,"sources":["../src/index.ts","../node_modules/tsup/assets/cjs_shims.js","../src/version.ts"],"sourcesContent":["import { fileURLToPath } from \"node:url\";\nimport { readFileSync } from \"node:fs\";\nimport { join, dirname } from \"node:path\";\nimport type {\n  MasterJson,\n  StackChecklistJson,\n  StackId,\n  CiSystem,\n} from \"./types.js\";\nimport { STANDARDS_VERSION, STANDARDS_SCHEMA_VERSION } from \"./version.js\";\n\n// Re-export types for consumers\nexport type { MasterJson, StackChecklistJson, StackId, CiSystem };\n\n// Re-export version info (stable API contract)\nexport { STANDARDS_VERSION, STANDARDS_SCHEMA_VERSION };\n\n// ESM equivalent of __dirname\nconst __filename = fileURLToPath(import.meta.url);\nconst __dirname = dirname(__filename);\n\n// Path to config directory:\n// - When running from src/ (dev/test): use repo root config/\n// - When running from dist/ (installed): use dist/config/\nconst isDevMode = __dirname.includes(\"src\");\nconst configDir = isDevMode\n  ? join(__dirname, \"..\", \"config\")\n  : join(__dirname, \"config\");\n\n/** Load the master spec JSON from the packaged dist directory */\nexport function loadMasterSpec(): MasterJson {\n  const filePath = join(configDir, \"standards.json\");\n  return JSON.parse(readFileSync(filePath, \"utf8\")) as MasterJson;\n}\n\n/** Load a stack-specific checklist (optionally filtered by CI system) */\nexport function loadBaseline(\n  stack: StackId,\n  ci?: CiSystem,\n): StackChecklistJson {\n  const suffix = ci ? `.${ci}` : \"\";\n  const file = `standards.${stack}${suffix}.json`;\n  const filePath = join(configDir, file);\n  return JSON.parse(readFileSync(filePath, \"utf8\")) as StackChecklistJson;\n}\n\n/** List all supported stacks (derived from the master spec) */\nexport function listSupportedStacks(): readonly StackId[] {\n  const spec = loadMasterSpec();\n  return Object.keys(spec.stacks) as StackId[];\n}\n\n/** List all supported CI systems (derived from the master spec) */\nexport function listSupportedCiSystems(): readonly CiSystem[] {\n  const spec = loadMasterSpec();\n  return spec.ciSystems as CiSystem[];\n}\n\n/**\n * PUBLIC API CONTRACT (semver-governed)\n * Alias for loadBaseline - loads stack-specific standards checklist.\n * Breaking changes to this function signature require a major version bump.\n */\nexport function getStandards(\n  stack: StackId,\n  ci?: CiSystem,\n): StackChecklistJson {\n  return loadBaseline(stack, ci);\n}\n\n/**\n * PUBLIC API CONTRACT (semver-governed)\n * Alias for loadMasterSpec - loads the master standards schema.\n * Breaking changes to this function signature require a major version bump.\n */\nexport function getSchema(): MasterJson {\n  return loadMasterSpec();\n}\n","// Shim globals in cjs bundle\n// There's a weird bug that esbuild will always inject importMetaUrl\n// if we export it as `const importMetaUrl = ... __filename ...`\n// But using a function will not cause this issue\n\nconst getImportMetaUrl = () => \n  typeof document === \"undefined\" \n    ? new URL(`file:${__filename}`).href \n    : (document.currentScript && document.currentScript.tagName.toUpperCase() === 'SCRIPT') \n      ? document.currentScript.src \n      : new URL(\"main.js\", document.baseURI).href;\n\nexport const importMetaUrl = /* @__PURE__ */ getImportMetaUrl()\n","/**\n * AUTO-GENERATED at build time by scripts/build.ts\n * DO NOT EDIT MANUALLY\n *\n * This module provides version information for the repo-standards package.\n * Consumers should import from here instead of package.json to avoid\n * ESM/CJS interop issues.\n */\n\nexport const STANDARDS_VERSION = \"6.0.1\";\nexport const STANDARDS_SCHEMA_VERSION = 6;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACKA,IAAM,mBAAmB,MACvB,OAAO,aAAa,cAChB,IAAI,IAAI,QAAQ,UAAU,EAAE,EAAE,OAC7B,SAAS,iBAAiB,SAAS,cAAc,QAAQ,YAAY,MAAM,WAC1E,SAAS,cAAc,MACvB,IAAI,IAAI,WAAW,SAAS,OAAO,EAAE;AAEtC,IAAM,gBAAgC,iCAAiB;;;ADZ9D,sBAA8B;AAC9B,qBAA6B;AAC7B,uBAA8B;;;AEOvB,IAAM,oBAAoB;AAC1B,IAAM,2BAA2B;;;AFQxC,IAAMA,kBAAa,+BAAc,aAAe;AAChD,IAAM,gBAAY,0BAAQA,WAAU;AAKpC,IAAM,YAAY,UAAU,SAAS,KAAK;AAC1C,IAAM,YAAY,gBACd,uBAAK,WAAW,MAAM,QAAQ,QAC9B,uBAAK,WAAW,QAAQ;AAGrB,SAAS,iBAA6B;AAC3C,QAAM,eAAW,uBAAK,WAAW,gBAAgB;AACjD,SAAO,KAAK,UAAM,6BAAa,UAAU,MAAM,CAAC;AAClD;AAGO,SAAS,aACd,OACA,IACoB;AACpB,QAAM,SAAS,KAAK,IAAI,EAAE,KAAK;AAC/B,QAAM,OAAO,aAAa,KAAK,GAAG,MAAM;AACxC,QAAM,eAAW,uBAAK,WAAW,IAAI;AACrC,SAAO,KAAK,UAAM,6BAAa,UAAU,MAAM,CAAC;AAClD;AAGO,SAAS,sBAA0C;AACxD,QAAM,OAAO,eAAe;AAC5B,SAAO,OAAO,KAAK,KAAK,MAAM;AAChC;AAGO,SAAS,yBAA8C;AAC5D,QAAM,OAAO,eAAe;AAC5B,SAAO,KAAK;AACd;AAOO,SAAS,aACd,OACA,IACoB;AACpB,SAAO,aAAa,OAAO,EAAE;AAC/B;AAOO,SAAS,YAAwB;AACtC,SAAO,eAAe;AACxB;","names":["__filename"]}

package/dist/index.d.cts

@@ -156,8 +156,8 @@ interface StackChecklistJson {
  * Consumers should import from here instead of package.json to avoid
  * ESM/CJS interop issues.
  */
-declare const STANDARDS_VERSION = "5.3.0";
-declare const STANDARDS_SCHEMA_VERSION = 5;
+declare const STANDARDS_VERSION = "6.0.1";
+declare const STANDARDS_SCHEMA_VERSION = 6;
 
 /** Load the master spec JSON from the packaged dist directory */
 declare function loadMasterSpec(): MasterJson;

package/dist/index.d.ts

@@ -156,8 +156,8 @@ interface StackChecklistJson {
  * Consumers should import from here instead of package.json to avoid
  * ESM/CJS interop issues.
  */
-declare const STANDARDS_VERSION = "5.3.0";
-declare const STANDARDS_SCHEMA_VERSION = 5;
+declare const STANDARDS_VERSION = "6.0.1";
+declare const STANDARDS_SCHEMA_VERSION = 6;
 
 /** Load the master spec JSON from the packaged dist directory */
 declare function loadMasterSpec(): MasterJson;

package/dist/index.js

@@ -4,8 +4,8 @@ import { readFileSync } from "fs";
 import { join, dirname } from "path";
 
 // src/version.ts
-var STANDARDS_VERSION = "5.3.0";
-var STANDARDS_SCHEMA_VERSION = 5;
+var STANDARDS_VERSION = "6.0.1";
+var STANDARDS_SCHEMA_VERSION = 6;
 
 // src/index.ts
 var __filename2 = fileURLToPath(import.meta.url);

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../src/version.ts"],"sourcesContent":["import { fileURLToPath } from \"node:url\";\nimport { readFileSync } from \"node:fs\";\nimport { join, dirname } from \"node:path\";\nimport type {\n  MasterJson,\n  StackChecklistJson,\n  StackId,\n  CiSystem,\n} from \"./types.js\";\nimport { STANDARDS_VERSION, STANDARDS_SCHEMA_VERSION } from \"./version.js\";\n\n// Re-export types for consumers\nexport type { MasterJson, StackChecklistJson, StackId, CiSystem };\n\n// Re-export version info (stable API contract)\nexport { STANDARDS_VERSION, STANDARDS_SCHEMA_VERSION };\n\n// ESM equivalent of __dirname\nconst __filename = fileURLToPath(import.meta.url);\nconst __dirname = dirname(__filename);\n\n// Path to config directory:\n// - When running from src/ (dev/test): use repo root config/\n// - When running from dist/ (installed): use dist/config/\nconst isDevMode = __dirname.includes(\"src\");\nconst configDir = isDevMode\n  ? join(__dirname, \"..\", \"config\")\n  : join(__dirname, \"config\");\n\n/** Load the master spec JSON from the packaged dist directory */\nexport function loadMasterSpec(): MasterJson {\n  const filePath = join(configDir, \"standards.json\");\n  return JSON.parse(readFileSync(filePath, \"utf8\"));\n}\n\n/** Load a stack-specific checklist (optionally filtered by CI system) */\nexport function loadBaseline(\n  stack: StackId,\n  ci?: CiSystem,\n): StackChecklistJson {\n  const suffix = ci ? `.${ci}` : \"\";\n  const file = `standards.${stack}${suffix}.json`;\n  const filePath = join(configDir, file);\n  return JSON.parse(readFileSync(filePath, \"utf8\"));\n}\n\n/** List all supported stacks (derived from the master spec) */\nexport function listSupportedStacks(): readonly StackId[] {\n  const spec = loadMasterSpec();\n  return Object.keys(spec.stacks) as StackId[];\n}\n\n/** List all supported CI systems (derived from the master spec) */\nexport function listSupportedCiSystems(): readonly CiSystem[] {\n  const spec = loadMasterSpec();\n  return spec.ciSystems as CiSystem[];\n}\n\n/**\n * PUBLIC API CONTRACT (semver-governed)\n * Alias for loadBaseline - loads stack-specific standards checklist.\n * Breaking changes to this function signature require a major version bump.\n */\nexport function getStandards(\n  stack: StackId,\n  ci?: CiSystem,\n): StackChecklistJson {\n  return loadBaseline(stack, ci);\n}\n\n/**\n * PUBLIC API CONTRACT (semver-governed)\n * Alias for loadMasterSpec - loads the master standards schema.\n * Breaking changes to this function signature require a major version bump.\n */\nexport function getSchema(): MasterJson {\n  return loadMasterSpec();\n}\n","/**\n * AUTO-GENERATED at build time by scripts/build.ts\n * DO NOT EDIT MANUALLY\n *\n * This module provides version information for the repo-standards package.\n * Consumers should import from here instead of package.json to avoid\n * ESM/CJS interop issues.\n */\n\nexport const STANDARDS_VERSION = '5.3.0';\nexport const STANDARDS_SCHEMA_VERSION = 5;\n"],"mappings":";AAAA,SAAS,qBAAqB;AAC9B,SAAS,oBAAoB;AAC7B,SAAS,MAAM,eAAe;;;ACOvB,IAAM,oBAAoB;AAC1B,IAAM,2BAA2B;;;ADQxC,IAAMA,cAAa,cAAc,YAAY,GAAG;AAChD,IAAMC,aAAY,QAAQD,WAAU;AAKpC,IAAM,YAAYC,WAAU,SAAS,KAAK;AAC1C,IAAM,YAAY,YACd,KAAKA,YAAW,MAAM,QAAQ,IAC9B,KAAKA,YAAW,QAAQ;AAGrB,SAAS,iBAA6B;AAC3C,QAAM,WAAW,KAAK,WAAW,gBAAgB;AACjD,SAAO,KAAK,MAAM,aAAa,UAAU,MAAM,CAAC;AAClD;AAGO,SAAS,aACd,OACA,IACoB;AACpB,QAAM,SAAS,KAAK,IAAI,EAAE,KAAK;AAC/B,QAAM,OAAO,aAAa,KAAK,GAAG,MAAM;AACxC,QAAM,WAAW,KAAK,WAAW,IAAI;AACrC,SAAO,KAAK,MAAM,aAAa,UAAU,MAAM,CAAC;AAClD;AAGO,SAAS,sBAA0C;AACxD,QAAM,OAAO,eAAe;AAC5B,SAAO,OAAO,KAAK,KAAK,MAAM;AAChC;AAGO,SAAS,yBAA8C;AAC5D,QAAM,OAAO,eAAe;AAC5B,SAAO,KAAK;AACd;AAOO,SAAS,aACd,OACA,IACoB;AACpB,SAAO,aAAa,OAAO,EAAE;AAC/B;AAOO,SAAS,YAAwB;AACtC,SAAO,eAAe;AACxB;","names":["__filename","__dirname"]}
+{"version":3,"sources":["../src/index.ts","../src/version.ts"],"sourcesContent":["import { fileURLToPath } from \"node:url\";\nimport { readFileSync } from \"node:fs\";\nimport { join, dirname } from \"node:path\";\nimport type {\n  MasterJson,\n  StackChecklistJson,\n  StackId,\n  CiSystem,\n} from \"./types.js\";\nimport { STANDARDS_VERSION, STANDARDS_SCHEMA_VERSION } from \"./version.js\";\n\n// Re-export types for consumers\nexport type { MasterJson, StackChecklistJson, StackId, CiSystem };\n\n// Re-export version info (stable API contract)\nexport { STANDARDS_VERSION, STANDARDS_SCHEMA_VERSION };\n\n// ESM equivalent of __dirname\nconst __filename = fileURLToPath(import.meta.url);\nconst __dirname = dirname(__filename);\n\n// Path to config directory:\n// - When running from src/ (dev/test): use repo root config/\n// - When running from dist/ (installed): use dist/config/\nconst isDevMode = __dirname.includes(\"src\");\nconst configDir = isDevMode\n  ? join(__dirname, \"..\", \"config\")\n  : join(__dirname, \"config\");\n\n/** Load the master spec JSON from the packaged dist directory */\nexport function loadMasterSpec(): MasterJson {\n  const filePath = join(configDir, \"standards.json\");\n  return JSON.parse(readFileSync(filePath, \"utf8\")) as MasterJson;\n}\n\n/** Load a stack-specific checklist (optionally filtered by CI system) */\nexport function loadBaseline(\n  stack: StackId,\n  ci?: CiSystem,\n): StackChecklistJson {\n  const suffix = ci ? `.${ci}` : \"\";\n  const file = `standards.${stack}${suffix}.json`;\n  const filePath = join(configDir, file);\n  return JSON.parse(readFileSync(filePath, \"utf8\")) as StackChecklistJson;\n}\n\n/** List all supported stacks (derived from the master spec) */\nexport function listSupportedStacks(): readonly StackId[] {\n  const spec = loadMasterSpec();\n  return Object.keys(spec.stacks) as StackId[];\n}\n\n/** List all supported CI systems (derived from the master spec) */\nexport function listSupportedCiSystems(): readonly CiSystem[] {\n  const spec = loadMasterSpec();\n  return spec.ciSystems as CiSystem[];\n}\n\n/**\n * PUBLIC API CONTRACT (semver-governed)\n * Alias for loadBaseline - loads stack-specific standards checklist.\n * Breaking changes to this function signature require a major version bump.\n */\nexport function getStandards(\n  stack: StackId,\n  ci?: CiSystem,\n): StackChecklistJson {\n  return loadBaseline(stack, ci);\n}\n\n/**\n * PUBLIC API CONTRACT (semver-governed)\n * Alias for loadMasterSpec - loads the master standards schema.\n * Breaking changes to this function signature require a major version bump.\n */\nexport function getSchema(): MasterJson {\n  return loadMasterSpec();\n}\n","/**\n * AUTO-GENERATED at build time by scripts/build.ts\n * DO NOT EDIT MANUALLY\n *\n * This module provides version information for the repo-standards package.\n * Consumers should import from here instead of package.json to avoid\n * ESM/CJS interop issues.\n */\n\nexport const STANDARDS_VERSION = \"6.0.1\";\nexport const STANDARDS_SCHEMA_VERSION = 6;\n"],"mappings":";AAAA,SAAS,qBAAqB;AAC9B,SAAS,oBAAoB;AAC7B,SAAS,MAAM,eAAe;;;ACOvB,IAAM,oBAAoB;AAC1B,IAAM,2BAA2B;;;ADQxC,IAAMA,cAAa,cAAc,YAAY,GAAG;AAChD,IAAMC,aAAY,QAAQD,WAAU;AAKpC,IAAM,YAAYC,WAAU,SAAS,KAAK;AAC1C,IAAM,YAAY,YACd,KAAKA,YAAW,MAAM,QAAQ,IAC9B,KAAKA,YAAW,QAAQ;AAGrB,SAAS,iBAA6B;AAC3C,QAAM,WAAW,KAAK,WAAW,gBAAgB;AACjD,SAAO,KAAK,MAAM,aAAa,UAAU,MAAM,CAAC;AAClD;AAGO,SAAS,aACd,OACA,IACoB;AACpB,QAAM,SAAS,KAAK,IAAI,EAAE,KAAK;AAC/B,QAAM,OAAO,aAAa,KAAK,GAAG,MAAM;AACxC,QAAM,WAAW,KAAK,WAAW,IAAI;AACrC,SAAO,KAAK,MAAM,aAAa,UAAU,MAAM,CAAC;AAClD;AAGO,SAAS,sBAA0C;AACxD,QAAM,OAAO,eAAe;AAC5B,SAAO,OAAO,KAAK,KAAK,MAAM;AAChC;AAGO,SAAS,yBAA8C;AAC5D,QAAM,OAAO,eAAe;AAC5B,SAAO,KAAK;AACd;AAOO,SAAS,aACd,OACA,IACoB;AACpB,SAAO,aAAa,OAAO,EAAE;AAC/B;AAOO,SAAS,YAAwB;AACtC,SAAO,eAAe;AACxB;","names":["__filename","__dirname"]}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@oddessentials/repo-standards",
   "private": false,
-  "version": "6.0.0",
+  "version": "7.0.0",
   "description": "Standards and CI filtering utilities for multi-stack repository governance.",
   "type": "module",
   "bin": {
@@ -14,14 +14,19 @@
     "lint": "eslint .",
     "format": "prettier . --write",
     "format:check": "prettier . --check",
+    "check": "npm run lint && npm run format:check && npm run typecheck",
     "test": "vitest run",
     "typecheck": "tsc --noEmit",
+    "security": "npm audit --audit-level=high --omit=dev",
+    "policy": "npm run deps:check && tsx scripts/env-guard.ts",
+    "deps:check": "depcruise src --config .dependency-cruiser.cjs",
+    "sync:version": "node scripts/sync-schema-version-pretest.cjs",
     "prepare": "husky",
     "postinstall": "git config core.hooksPath .husky || true",
-    "ci": "npm run lint && npm run format:check && npm run typecheck && npm run test && npm run build",
+    "ci": "npm run check && npm run sync:version && npm run test && npm run build",
     "generate:standards": "tsx scripts/generate-standards.ts",
     "validate:schema": "tsx scripts/validate-schema.ts",
-    "verify": "npm run ci"
+    "verify": "npm run check && npm run test && npm run security && npm run policy && npm run build"
   },
   "devDependencies": {
     "@commitlint/cli": "^20.2.0",
@@ -33,10 +38,13 @@
     "@types/node": "^24.10.1",
     "@typescript-eslint/eslint-plugin": "^8.48.1",
     "@typescript-eslint/parser": "^8.48.1",
+    "@vitest/coverage-v8": "^4.0.18",
     "ajv": "^8.17.1",
     "ajv-formats": "^3.0.1",
     "coverage-v8": "^0.0.1-security",
+    "dependency-cruiser": "^17.3.7",
     "eslint": "^9.39.1",
+    "eslint-plugin-security": "^3.0.1",
     "fast-json-stable-stringify": "^2.1.0",
     "globals": "^16.5.0",
     "happy-dom": "^20.0.11",
@@ -51,10 +59,11 @@
     "vitest": "^4.0.15"
   },
   "engines": {
-    "node": ">=22"
+    "node": ">=22.0.0",
+    "npm": ">=10.0.0"
   },
   "lint-staged": {
-    "*.{js,cjs,ts,mjs,json,md}": [
+    "*.{js,cjs,ts,mjs,json,md,yml,yaml}": [
       "prettier --write"
     ],
     "*.{js,cjs,ts,mjs}": [

package/scripts/build.ts

@@ -18,6 +18,7 @@ import {
 } from "node:fs";
 import { resolve, join } from "node:path";
 import { fileURLToPath } from "node:url";
+import type { PackageJson, MasterJson } from "./types.internal.js";
 
 const __filename = fileURLToPath(import.meta.url);
 
@@ -44,11 +45,13 @@ function syncSchemaVersion(rootDir: string): void {
   const pkgPath = join(rootDir, "package.json");
   const standardsPath = join(rootDir, "config", "standards.json");
 
-  const pkg = JSON.parse(readFileSync(pkgPath, "utf8"));
-  const standards = JSON.parse(readFileSync(standardsPath, "utf8"));
+  const pkg = JSON.parse(readFileSync(pkgPath, "utf8")) as PackageJson;
+  const standards = JSON.parse(
+    readFileSync(standardsPath, "utf8"),
+  ) as MasterJson;
 
   // Extract major version from package.json (e.g., "2.1.0" -> 2)
-  const pkgMajor = parseInt(pkg.version.split(".")[0], 10);
+  const pkgMajor = parseInt(pkg.version.split(".")[0] ?? "0", 10);
 
   if (pkgMajor > standards.version) {
     // Auto-upgrade schema version when semantic-release bumps package.json
@@ -83,15 +86,16 @@ function generateStack(stack: string, ci?: string) {
 /**
  * Generate src/version.ts with current package version
  * This runs before TypeScript compilation so the values are baked in
+ * Only writes if content has changed to avoid dirty working tree
  */
 function generateVersionFile(rootDir: string): void {
   const pkgPath = join(rootDir, "package.json");
   const versionPath = join(rootDir, "src", "version.ts");
 
-  const pkg = JSON.parse(readFileSync(pkgPath, "utf8"));
+  const pkg = JSON.parse(readFileSync(pkgPath, "utf8")) as PackageJson;
   const standards = JSON.parse(
     readFileSync(join(rootDir, "config", "standards.json"), "utf8"),
-  );
+  ) as MasterJson;
 
   const content = `/**
  * AUTO-GENERATED at build time by scripts/build.ts
@@ -102,12 +106,24 @@ function generateVersionFile(rootDir: string): void {
  * ESM/CJS interop issues.
  */
 
-export const STANDARDS_VERSION = '${pkg.version}';
+export const STANDARDS_VERSION = "${pkg.version}";
 export const STANDARDS_SCHEMA_VERSION = ${standards.version};
 `;
 
-  writeFileSync(versionPath, content);
-  console.log(`Generated src/version.ts with version ${pkg.version}`);
+  // Only write if content has changed (prevents dirty working tree)
+  let existingContent = "";
+  try {
+    existingContent = readFileSync(versionPath, "utf8");
+  } catch {
+    // File doesn't exist, will be created
+  }
+
+  if (existingContent === content) {
+    console.log(`src/version.ts already at version ${pkg.version} (no change)`);
+  } else {
+    writeFileSync(versionPath, content);
+    console.log(`Generated src/version.ts with version ${pkg.version}`);
+  }
 }
 
 function main() {
@@ -156,7 +172,7 @@ function main() {
     const destPath = join(configDest, file);
 
     // Read, sort for determinism, and write
-    const data = JSON.parse(readFileSync(srcPath, "utf8"));
+    const data: unknown = JSON.parse(readFileSync(srcPath, "utf8"));
     const sorted = sortObject(data);
     writeFileSync(destPath, JSON.stringify(sorted, null, 2) + "\n");
   }

package/scripts/env-guard.ts

@@ -0,0 +1,84 @@
+/**
+ * env-guard.ts
+ *
+ * Policy script to prevent .env* files from being committed.
+ * This script is part of the v7 security policy enforcement.
+ *
+ * AI agents MUST NEVER read, write, or modify .env* files.
+ * This guard ensures compliance with the AI Agent Safety Invariant.
+ */
+
+import { execSync } from "node:child_process";
+
+function checkStagedEnvFiles(): void {
+  try {
+    // Get list of staged files
+    const staged = execSync("git diff --cached --name-only", {
+      encoding: "utf8",
+    }).trim();
+
+    if (!staged) {
+      console.log("✓ No staged files to check");
+      return;
+    }
+
+    const stagedFiles = staged.split("\n");
+    const envFiles = stagedFiles.filter((file) => {
+      const basename = file.split("/").pop() ?? "";
+      return basename.startsWith(".env");
+    });
+
+    if (envFiles.length > 0) {
+      console.error("\n❌ ERROR: .env* files are staged for commit!\n");
+      console.error("The following .env files must NOT be committed:");
+      envFiles.forEach((file) => console.error(`  - ${file}`));
+      console.error("\nThis violates the AI Agent Safety Invariant.");
+      console.error(
+        "Remove these files from staging with: git reset HEAD <file>",
+      );
+      console.error("");
+      process.exit(1);
+    }
+
+    console.log("✓ No .env* files staged for commit");
+  } catch (error) {
+    // If git command fails (e.g., not in a git repo), skip the check
+    if (
+      error instanceof Error &&
+      error.message.includes("not a git repository")
+    ) {
+      console.log("⚠ Not in a git repository, skipping env-guard check");
+      return;
+    }
+    throw error;
+  }
+}
+
+function checkEnvFilesInWorkingTree(): void {
+  try {
+    // Check if any .env files exist in the working tree (that are tracked or untracked)
+    const result = execSync(
+      "git ls-files --others --cached -- '.env*' '*/.env*'",
+      {
+        encoding: "utf8",
+      },
+    ).trim();
+
+    if (result) {
+      const envFiles = result.split("\n").filter(Boolean);
+      if (envFiles.length > 0) {
+        console.warn("\n⚠ WARNING: .env* files detected in repository:");
+        envFiles.forEach((file) => console.warn(`  - ${file}`));
+        console.warn("\nEnsure these are in .gitignore and not committed.\n");
+      }
+    }
+  } catch {
+    // Silently ignore errors for this check
+  }
+}
+
+// Main execution
+console.log("Running env-guard policy check...");
+checkStagedEnvFiles();
+checkEnvFilesInWorkingTree();
+console.log("✓ env-guard policy check passed\n");

package/scripts/generate-instructions.ts

@@ -139,7 +139,7 @@ function main() {
   }
 
   const raw = fs.readFileSync(inputPath, "utf8");
-  const data: StackChecklistJson = JSON.parse(raw);
+  const data = JSON.parse(raw) as StackChecklistJson;
 
   const lines: string[] = [];
 

package/scripts/generate-readme-counts.ts

@@ -24,7 +24,7 @@ function main() {
   }
 
   const raw = fs.readFileSync(masterPath, "utf8");
-  const master: MasterJson = JSON.parse(raw);
+  const master = JSON.parse(raw) as MasterJson;
 
   const coreCount = master.checklist.core.length;
   const recommendedCount = master.checklist.recommended.length;

package/scripts/generate-standards.ts

@@ -3,6 +3,21 @@
 import fs from "node:fs";
 import path from "node:path";
 
+// Helper to sort object keys recursively for deterministic output
+function sortObject(obj: unknown): unknown {
+  if (Array.isArray(obj)) return obj.map(sortObject);
+  if (obj && typeof obj === "object") {
+    const sorted: Record<string, unknown> = {};
+    Object.keys(obj as Record<string, unknown>)
+      .sort()
+      .forEach((key) => {
+        sorted[key] = sortObject((obj as Record<string, unknown>)[key]);
+      });
+    return sorted;
+  }
+  return obj;
+}
+
 type StackId = "typescript-js" | "csharp-dotnet" | "python" | "rust" | "go";
 type CiSystem = "azure-devops" | "github-actions";
 
@@ -202,7 +217,7 @@ const rootDir = path.join(process.cwd());
 const masterPath = path.join(rootDir, "config", "standards.json");
 
 const raw = fs.readFileSync(masterPath, "utf8");
-const master: MasterJson = JSON.parse(raw);
+const master = JSON.parse(raw) as MasterJson;
 
 // args: stack [ciSystem]
 // args: stack [ciSystem]
@@ -242,6 +257,9 @@ fs.mkdirSync(outDir, { recursive: true });
 const ciSuffix = targetCiSystem ? `.${targetCiSystem}` : "";
 const outPath = path.join(outDir, `standards.${targetStack}${ciSuffix}.json`);
 
-fs.writeFileSync(outPath, JSON.stringify(stackJson, null, 2) + "\n");
+fs.writeFileSync(
+  outPath,
+  JSON.stringify(sortObject(stackJson), null, 2) + "\n",
+);
 
 console.log(`Wrote ${outPath}`);

package/scripts/sync-schema-version-pretest.cjs

@@ -0,0 +1,43 @@
+/**
+ * Pre-test schema version sync.
+ * Ensures config/standards.json version matches package.json major version
+ * before tests run. This prevents CI failures when semantic-release has
+ * bumped package.json but tests run before build.
+ *
+ * Usage: node scripts/sync-schema-version-pretest.cjs
+ */
+const fs = require("fs");
+const path = require("path");
+
+const rootDir = process.cwd();
+const pkgPath = path.join(rootDir, "package.json");
+const standardsPath = path.join(rootDir, "config", "standards.json");
+
+const pkg = JSON.parse(fs.readFileSync(pkgPath, "utf8"));
+const standards = JSON.parse(fs.readFileSync(standardsPath, "utf8"));
+
+const pkgMajor = parseInt(pkg.version.split(".")[0], 10);
+
+if (Number.isNaN(pkgMajor)) {
+  console.error(
+    `[sync-schema-version] Unable to parse major version from ${pkg.version}`,
+  );
+  process.exit(1);
+}
+
+if (pkgMajor > standards.version) {
+  console.log(
+    `[sync-schema-version] Upgrading schema version: ${standards.version} -> ${pkgMajor}`,
+  );
+  standards.version = pkgMajor;
+  fs.writeFileSync(standardsPath, JSON.stringify(standards, null, 2) + "\n");
+} else if (standards.version > pkgMajor) {
+  console.error(
+    `[sync-schema-version] ERROR: Schema version ${standards.version} is ahead of package.json major ${pkgMajor}`,
+  );
+  process.exit(1);
+} else {
+  console.log(
+    `[sync-schema-version] Schema version ${standards.version} already matches package.json major`,
+  );
+}

package/scripts/types.internal.ts

@@ -0,0 +1,18 @@
+// scripts/types.internal.ts
+// Internal types for build scripts - not exported to consumers
+
+/**
+ * Minimal package.json shape for version extraction.
+ * Only includes fields used by build scripts.
+ */
+export interface PackageJson {
+  version: string;
+  scripts?: Record<string, string>;
+  bin?: Record<string, string>;
+}
+
+/**
+ * Re-export MasterJson from src/types for use in scripts
+ * without circular dependency concerns.
+ */
+export type { MasterJson } from "../src/types.js";

package/scripts/validate-schema.ts

@@ -10,7 +10,6 @@ import path from "node:path";
 const rootDir = process.cwd();
 const configPath = path.join(rootDir, "config", "standards.json");
 const schemaPath = path.join(rootDir, "config", "standards.schema.json");
-const readmePath = path.join(rootDir, "README.md");
 
 interface ValidationResult {
   valid: boolean;
@@ -54,42 +53,6 @@ interface Config {
   };
 }
 
-/**
- * Validate README schema version references match standards.json version
- */
-function validateReadmeSchemaVersion(
-  config: Config,
-  readmeRaw?: string,
-): ValidationResult {
-  if (!readmeRaw) {
-    return {
-      valid: false,
-      errors: ["README.md not provided for version consistency check"],
-    };
-  }
-
-  const errors: string[] = [];
-  const actualVersion = config.version;
-
-  const currentMatch = readmeRaw.match(/version.*\(currently `(\d+)`\)/i);
-  if (!currentMatch) {
-    errors.push("README.md missing current schema version reference");
-  } else if (Number(currentMatch[1]) !== actualVersion) {
-    errors.push(
-      `README.md current schema version (${currentMatch[1]}) does not match standards.json (${actualVersion})`,
-    );
-  }
-
-  const listPattern = new RegExp(`-\\s*\`${actualVersion}\`\\s*—`);
-  if (!listPattern.test(readmeRaw)) {
-    errors.push(
-      `README.md schema version list does not include current version ${actualVersion}`,
-    );
-  }
-
-  return { valid: errors.length === 0, errors };
-}
-
 /**
  * Validate config against JSON Schema using Ajv
  */
@@ -291,13 +254,12 @@ export function normalizeConfig(config: unknown): string {
 export function validateStandardsConfig(
   configRaw: string,
   schemaRaw: string,
-  readmeRaw?: string,
 ): ValidationResult {
   let config: Config;
   let schema: unknown;
 
   try {
-    config = JSON.parse(configRaw);
+    config = JSON.parse(configRaw) as Config;
   } catch {
     return { valid: false, errors: ["Failed to parse standards.json as JSON"] };
   }
@@ -319,7 +281,6 @@ export function validateStandardsConfig(
     validateCiHintKeys(config),
     validateCoverageThreshold(config),
     validateExecutionStageCoverage(config),
-    validateReadmeSchemaVersion(config, readmeRaw),
   ];
 
   const allErrors = results.flatMap((r) => r.errors);
@@ -343,16 +304,10 @@ export function validateStandardsSchema(): void {
     process.exit(1);
   }
 
-  if (!fs.existsSync(readmePath)) {
-    console.error(`README file not found: ${readmePath}`);
-    process.exit(1);
-  }
-
   const configRaw = fs.readFileSync(configPath, "utf8");
   const schemaRaw = fs.readFileSync(schemaPath, "utf8");
-  const readmeRaw = fs.readFileSync(readmePath, "utf8");
 
-  const result = validateStandardsConfig(configRaw, schemaRaw, readmeRaw);
+  const result = validateStandardsConfig(configRaw, schemaRaw);
 
   if (!result.valid) {
     console.error("Schema validation failed:");
@@ -369,7 +324,6 @@ export function validateStandardsSchema(): void {
   console.log("✓ All ciHints keys are valid ciSystems");
   console.log("✓ Coverage threshold semantics are valid");
   console.log("✓ All items have valid executionStage");
-  console.log("✓ README schema version references are aligned");
 }
 
 // CLI entry point