@shrkcrft/cli 0.1.0-alpha.20 → 0.1.0-alpha.22

package/dist/commands/check.command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"check.command.d.ts","sourceRoot":"","sources":["../../src/commands/check.command.ts"],"names":[],"mappings":"AAmBA,OAAO,EAML,KAAK,eAAe,EAErB,MAAM,wBAAwB,CAAC;AAikBhC,eAAO,MAAM,YAAY,EAAE,eAmD1B,CAAC"}
+{"version":3,"file":"check.command.d.ts","sourceRoot":"","sources":["../../src/commands/check.command.ts"],"names":[],"mappings":"AAmBA,OAAO,EAML,KAAK,eAAe,EAErB,MAAM,wBAAwB,CAAC;AAuqBhC,eAAO,MAAM,YAAY,EAAE,eA2D1B,CAAC"}

package/dist/commands/check.command.js

@@ -6,7 +6,8 @@ import { asJson, header, kv } from "../output/format-output.js";
 import { maybeRunInWatchMode } from "../output/watch-loop.js";
 import { validateTemplateVariables } from '@shrkcrft/templates';
 import { FileChangeType, planGeneration } from '@shrkcrft/generator';
-import { evaluateBoundaries, loadTsconfigPaths, scanImports, summarizeImports, } from '@shrkcrft/boundaries';
+import { evaluateBoundaries, loadTsconfigPaths, runWiring, scanImports, summarizeImports, } from '@shrkcrft/boundaries';
+import { loadProjectConfig } from '@shrkcrft/config';
 function knowledgeGroup(inspection) {
     const dup = inspection.validationIssues.filter((i) => i.code === 'duplicate-id');
     const missing = inspection.validationIssues.filter((i) => i.code !== 'duplicate-id');
@@ -517,12 +518,100 @@ async function checkBoundariesOnce(args) {
     return failed ? 1 : 0;
 }
 // ────────────────────────────────────────────────────────────────────────
+// ────────────────────────────────────────────────────────────────────────
+// Subcommand: wiring — "declared but not wired" completeness checks
+// ────────────────────────────────────────────────────────────────────────
+async function checkWiring(args) {
+    const cwd = resolveCwd(args);
+    const wantJson = flagBool(args, 'json');
+    const changedOnly = flagBool(args, 'changed-only');
+    const since = flagString(args, 'since');
+    const only = flagString(args, 'only');
+    // Distinguish "config is invalid" from "config valid with no wiring rules":
+    // an invalid config (e.g. a malformed wiringRule) must NOT fail open with a
+    // misleading "no rules configured" + exit 0.
+    const loaded = await loadProjectConfig(cwd);
+    if (!loaded.ok) {
+        const msg = loaded.error.message;
+        if (wantJson) {
+            process.stdout.write(asJson({ schema: 'sharkcraft.wiring/v1', error: msg, rules: [], violations: [], diagnostics: [msg], verdict: 'errors' }) + '\n');
+            return 1;
+        }
+        process.stdout.write(header('Wiring check'));
+        process.stdout.write(`  ✗ Could not load config: ${msg}\n  Run \`shrk doctor\` for details.\n`);
+        return 1;
+    }
+    const rules = loaded.value.config.wiringRules ?? [];
+    if (rules.length === 0) {
+        if (wantJson) {
+            process.stdout.write(asJson({ schema: 'sharkcraft.wiring/v1', rules: [], violations: [], verdict: 'pass' }) + '\n');
+            return 0;
+        }
+        process.stdout.write(header('Wiring check'));
+        process.stdout.write('  No wiring rules configured. Declare `wiringRules[]` in sharkcraft.config.ts to enable\n' +
+            '  cross-file "declared but not wired" checks (see docs/wiring.md).\n');
+        return 0;
+    }
+    let changedFiles;
+    if (changedOnly || since) {
+        const changed = resolveChangedFiles({
+            projectRoot: cwd,
+            ...(since ? { since } : {}),
+            ...(changedOnly && !since ? { includeWorktree: true } : {}),
+        });
+        changedFiles = changed.files;
+    }
+    const report = runWiring(cwd, rules, {
+        ...(changedOnly || since ? { changedOnly: true, changedFiles: changedFiles ?? [] } : {}),
+        ...(only ? { only: only.split(',').map((s) => s.trim()).filter(Boolean) } : {}),
+    });
+    if (wantJson) {
+        process.stdout.write(asJson(report) + '\n');
+        return report.verdict === 'errors' ? 1 : 0;
+    }
+    process.stdout.write(header('Wiring check'));
+    process.stdout.write(kv('rules evaluated', String(report.rules.length)) + '\n');
+    const errors = report.violations.filter((v) => v.severity === 'error').length;
+    const warnings = report.violations.filter((v) => v.severity === 'warning').length;
+    process.stdout.write(kv('violations', `${errors} error(s), ${warnings} warning(s)`) + '\n');
+    // Misconfigured rules (uncompilable pattern / no capture group) — surface
+    // them loudly; a broken rule must never read as a silent green.
+    if (report.diagnostics.length > 0) {
+        process.stdout.write('\nMisconfigured rules:\n');
+        for (const d of report.diagnostics)
+            process.stdout.write(`  ! ${d}\n`);
+    }
+    if (report.violations.length === 0 && report.diagnostics.length === 0) {
+        process.stdout.write('\nNo wiring violations — every declared token is registered. ✓\n');
+        return 0;
+    }
+    if (report.violations.length === 0) {
+        return report.verdict === 'errors' ? 1 : 0;
+    }
+    // Group by rule for a readable report.
+    for (const r of report.rules) {
+        if (r.violations.length === 0)
+            continue;
+        process.stdout.write(`\n[${r.severity}] ${r.ruleId}${r.description ? ' — ' + r.description : ''}\n`);
+        process.stdout.write(`  declared ${r.declaredCount} / registered ${r.registeredCount} — ${r.violations.length} not wired:\n`);
+        for (const v of r.violations.slice(0, 50)) {
+            process.stdout.write(`    • ${v.token}  (${v.file}:${v.line})\n`);
+        }
+        if (r.violations.length > 50) {
+            process.stdout.write(`    … (${r.violations.length - 50} more)\n`);
+        }
+        const hint = r.violations.find((v) => v.hint)?.hint;
+        if (hint)
+            process.stdout.write(`    → ${hint}\n`);
+    }
+    return report.verdict === 'errors' ? 1 : 0;
+}
 // Main shrk check + subcommands
 // ────────────────────────────────────────────────────────────────────────
 export const checkCommand = {
     name: 'check',
     description: 'Run SharkCraft-level validation across knowledge / rules / templates / pipelines / packs / action hints / doctor. `check boundaries [--watch [--paths a,b] [--debounce N] [--once]]` re-runs the boundary scan on file changes.',
-    usage: 'shrk [--cwd <dir>] check [packs|pipelines|knowledge|generation|boundaries|imports] [--strict] [--min-score <0-100>] [--json] [--watch [--paths <list>] [--debounce N] [--once]]',
+    usage: 'shrk [--cwd <dir>] check [packs|pipelines|knowledge|generation|boundaries|imports|wiring] [--strict] [--min-score <0-100>] [--changed-only] [--since <ref>] [--only <ids>] [--json] [--watch [--paths <list>] [--debounce N] [--once]]',
     async run(args) {
         const sub = args.positional[0];
         if (sub === 'generation')
@@ -531,9 +620,18 @@ export const checkCommand = {
             return checkBoundaries(args);
         if (sub === 'imports' || sub === 'import-hygiene')
             return checkImports(args);
+        if (sub === 'wiring')
+            return checkWiring(args);
         if (sub === 'registry-lifecycle') {
             const cwd = resolveCwd(args);
             const { buildRegistryLifecycleReport, renderRegistryLifecycleReportText } = await import('@shrkcrft/inspector');
+            // The scan is a single synchronous pass with no streamed output; on a
+            // large repo it can run for tens of seconds. Without a heartbeat that
+            // silence reads as a hang, so announce the work first (human path only —
+            // JSON consumers want a clean stdout).
+            if (!flagBool(args, 'json')) {
+                process.stderr.write('⏳ Scanning source + registries for lifecycle coverage (can take a while on large repos)…\n');
+            }
             const report = buildRegistryLifecycleReport({ projectRoot: cwd });
             if (flagBool(args, 'json')) {
                 process.stdout.write(asJson(report) + '\n');

package/dist/commands/command-catalog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command-catalog.d.ts","sourceRoot":"","sources":["../../src/commands/command-catalog.ts"],"names":[],"mappings":"AAAA,oBAAY,WAAW;IACrB,QAAQ,cAAc;IACtB,iBAAiB,mBAAmB;IACpC,gBAAgB,kBAAkB;IAClC,YAAY,kBAAkB;IAC9B,SAAS,eAAe;IACxB,cAAc,oBAAoB;CACnC;AAED;;;;;;GAMG;AACH,oBAAY,cAAc;IACxB,OAAO,YAAY;IACnB,MAAM,WAAW;IACjB,QAAQ,aAAa;IACrB,OAAO,YAAY;IACnB,QAAQ,aAAa;IACrB,MAAM,WAAW;CAClB;AAED,8BAA8B;AAC9B,oBAAY,eAAe;IACzB,KAAK,UAAU;IACf,KAAK,UAAU;IACf,EAAE,OAAO;IACT,UAAU,gBAAgB;IAC1B,UAAU,eAAe;CAC1B;AAED;;;;;;GAMG;AACH,oBAAY,eAAe;IACzB,KAAK,UAAU;IACf,OAAO,YAAY;IACnB,MAAM,WAAW;IACjB,OAAO,YAAY;IACnB,QAAQ,aAAa;IACrB,MAAM,WAAW;IACjB,QAAQ,aAAa;IACrB,OAAO,YAAY;IACnB,QAAQ,aAAa;IACrB,OAAO,YAAY;IACnB,KAAK,UAAU;IACf,MAAM,WAAW;CAClB;AAED;;;;;;GAMG;AACH,oBAAY,gBAAgB;IAC1B,MAAM,WAAW;IACjB,SAAS,cAAc;IACvB,KAAK,UAAU;IACf,UAAU,eAAe;IACzB,OAAO,YAAY;CACpB;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,oBAAY,WAAW;IACrB,IAAI,SAAS;IACb,QAAQ,aAAa;IACrB,YAAY,iBAAiB;CAC9B;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,WAAW,CAAC;IACzB,WAAW,EAAE,OAAO,CAAC;IACrB,YAAY,EAAE,OAAO,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;IACnB,cAAc,EAAE,OAAO,CAAC;IACxB,YAAY,EAAE,OAAO,CAAC;IACtB,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B;;;;OAIG;IACH,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,8DAA8D;IAC9D,gBAAgB,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;IAC9C,kCAAkC;IAClC,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,6DAA6D;IAC7D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,0DAA0D;IAC1D,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;;;;;;;OAWG;IACH,IAAI,CAAC,EAAE,WAAW,CAAC;CACpB;AAED;;;;;GAKG;AACH,eAAO,MAAM,eAAe,EAAE,SAAS,oBAAoB,EAwiGzD,CAAC;AAEH,4DAA4D;AAC5D,wBAAgB,yBAAyB,IAAI,MAAM,EAAE,CAWpD;AA0DD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,YAAY,GAAG,SAAS,GAAG,QAAQ,CAAC;IACtD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,eAAO,MAAM,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAgGjE,CAAC;AAEH,iDAAiD;AACjD,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAExE;AAED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,oBAAoB,GAAG,cAAc,CAItE;AAED,+DAA+D;AAC/D,wBAAgB,eAAe,CAAC,CAAC,EAAE,oBAAoB,GAAG,SAAS,eAAe,EAAE,CAKnF;AAED,sDAAsD;AACtD,wBAAgB,eAAe,CAAC,CAAC,EAAE,oBAAoB,GAAG,eAAe,GAAG,SAAS,CAEpF;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,oBAAoB,GAAG,gBAAgB,CAQ1E;AAuFD;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAclE;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,oBAAoB,GAAG,MAAM,CAwC9D;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;IACpB,YAAY,EAAE,OAAO,CAAC;IACtB,aAAa,EAAE,OAAO,CAAC;IACvB,YAAY,EAAE,OAAO,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,OAAO,CAAC;IACtB,cAAc,EAAE,OAAO,CAAC;IACxB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,wBAAgB,wBAAwB,IAAI,SAAS,uBAAuB,EAAE,CAsB7E;AAED,wBAAgB,iCAAiC,CAC/C,IAAI,EAAE,SAAS,uBAAuB,EAAE,GACvC,MAAM,CAaR;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,IAAI,GAAG,CAAC,MAAM,CAAC,CAW/C"}
+{"version":3,"file":"command-catalog.d.ts","sourceRoot":"","sources":["../../src/commands/command-catalog.ts"],"names":[],"mappings":"AAAA,oBAAY,WAAW;IACrB,QAAQ,cAAc;IACtB,iBAAiB,mBAAmB;IACpC,gBAAgB,kBAAkB;IAClC,YAAY,kBAAkB;IAC9B,SAAS,eAAe;IACxB,cAAc,oBAAoB;CACnC;AAED;;;;;;GAMG;AACH,oBAAY,cAAc;IACxB,OAAO,YAAY;IACnB,MAAM,WAAW;IACjB,QAAQ,aAAa;IACrB,OAAO,YAAY;IACnB,QAAQ,aAAa;IACrB,MAAM,WAAW;CAClB;AAED,8BAA8B;AAC9B,oBAAY,eAAe;IACzB,KAAK,UAAU;IACf,KAAK,UAAU;IACf,EAAE,OAAO;IACT,UAAU,gBAAgB;IAC1B,UAAU,eAAe;CAC1B;AAED;;;;;;GAMG;AACH,oBAAY,eAAe;IACzB,KAAK,UAAU;IACf,OAAO,YAAY;IACnB,MAAM,WAAW;IACjB,OAAO,YAAY;IACnB,QAAQ,aAAa;IACrB,MAAM,WAAW;IACjB,QAAQ,aAAa;IACrB,OAAO,YAAY;IACnB,QAAQ,aAAa;IACrB,OAAO,YAAY;IACnB,KAAK,UAAU;IACf,MAAM,WAAW;CAClB;AAED;;;;;;GAMG;AACH,oBAAY,gBAAgB;IAC1B,MAAM,WAAW;IACjB,SAAS,cAAc;IACvB,KAAK,UAAU;IACf,UAAU,eAAe;IACzB,OAAO,YAAY;CACpB;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,oBAAY,WAAW;IACrB,IAAI,SAAS;IACb,QAAQ,aAAa;IACrB,YAAY,iBAAiB;CAC9B;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,WAAW,CAAC;IACzB,WAAW,EAAE,OAAO,CAAC;IACrB,YAAY,EAAE,OAAO,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;IACnB,cAAc,EAAE,OAAO,CAAC;IACxB,YAAY,EAAE,OAAO,CAAC;IACtB,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B;;;;OAIG;IACH,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,8DAA8D;IAC9D,gBAAgB,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;IAC9C,kCAAkC;IAClC,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,6DAA6D;IAC7D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,0DAA0D;IAC1D,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;;;;;;;OAWG;IACH,IAAI,CAAC,EAAE,WAAW,CAAC;CACpB;AAED;;;;;GAKG;AACH,eAAO,MAAM,eAAe,EAAE,SAAS,oBAAoB,EAulGzD,CAAC;AAEH,4DAA4D;AAC5D,wBAAgB,yBAAyB,IAAI,MAAM,EAAE,CAWpD;AA0DD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,YAAY,GAAG,SAAS,GAAG,QAAQ,CAAC;IACtD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,eAAO,MAAM,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAgGjE,CAAC;AAEH,iDAAiD;AACjD,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAExE;AAED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,oBAAoB,GAAG,cAAc,CAItE;AAED,+DAA+D;AAC/D,wBAAgB,eAAe,CAAC,CAAC,EAAE,oBAAoB,GAAG,SAAS,eAAe,EAAE,CAKnF;AAED,sDAAsD;AACtD,wBAAgB,eAAe,CAAC,CAAC,EAAE,oBAAoB,GAAG,eAAe,GAAG,SAAS,CAEpF;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,oBAAoB,GAAG,gBAAgB,CAQ1E;AAuFD;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAclE;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,oBAAoB,GAAG,MAAM,CAwC9D;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;IACpB,YAAY,EAAE,OAAO,CAAC;IACtB,aAAa,EAAE,OAAO,CAAC;IACvB,YAAY,EAAE,OAAO,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,OAAO,CAAC;IACtB,cAAc,EAAE,OAAO,CAAC;IACxB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,wBAAgB,wBAAwB,IAAI,SAAS,uBAAuB,EAAE,CAsB7E;AAED,wBAAgB,iCAAiC,CAC/C,IAAI,EAAE,SAAS,uBAAuB,EAAE,GACvC,MAAM,CAaR;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,IAAI,GAAG,CAAC,MAAM,CAAC,CAW/C"}

package/dist/commands/command-catalog.js

@@ -382,6 +382,30 @@ export const COMMAND_CATALOG = Object.freeze([
         surface: CommandSurface.Common,
         taskRole: CommandTaskRole.Validate,
     }),
+    entry({
+        command: 'check wiring',
+        description: 'Completeness checks: flags config-defined "declared but not wired" tokens (a declared value/identifier set that must be a subset of a registered set). Generic + deterministic; rules from sharkcraft.config.ts wiringRules[]. [--changed-only] [--only <ids>] [--json]',
+        category: 'core',
+        safetyLevel: SafetyLevel.ReadOnly,
+        surface: CommandSurface.Common,
+        taskRole: CommandTaskRole.Validate,
+    }),
+    entry({
+        command: 'policy-lint',
+        description: 'Lint template/markup, stylesheet, and AOT-invisible TS surfaces against config-defined policyRules[] — sees `.html` files AND inline `template:` strings that tsc/AOT cannot. Deterministic; no AI. [--surface template|style|ts] [--changed-only] [--only <ids>] [--json]',
+        category: 'core',
+        safetyLevel: SafetyLevel.ReadOnly,
+        surface: CommandSurface.Common,
+        taskRole: CommandTaskRole.Validate,
+    }),
+    entry({
+        command: 'reuse',
+        description: 'Intent → the canonical primitive to reuse: matches your intent against config reusePrimitives[] then resolves the symbol through the code graph (transitive star-barrels) to its import path, sibling exports, and real consumer files to copy. Read-only; no AI.',
+        category: 'core',
+        safetyLevel: SafetyLevel.ReadOnly,
+        surface: CommandSurface.Common,
+        taskRole: CommandTaskRole.Search,
+    }),
     entry({
         command: 'diff-check',
         description: 'Self-check current git diff against boundary + import-hygiene rules. Single-call composite for agents to validate edits before declaring done. Read-only.',
@@ -576,6 +600,26 @@ export const COMMAND_CATALOG = Object.freeze([
         safetyLevel: SafetyLevel.WritesSessionOnly,
         writesFiles: true,
     }),
+    entry({
+        command: 'dev status',
+        description: 'Show session phase, progress, and next action. Read-only.',
+        category: 'dev',
+        safetyLevel: SafetyLevel.ReadOnly,
+    }),
+    entry({
+        command: 'dev next',
+        description: 'Show (and persist) the next recommended action for a session.',
+        category: 'dev',
+        safetyLevel: SafetyLevel.WritesSessionOnly,
+        writesFiles: true,
+    }),
+    entry({
+        command: 'dev continue',
+        description: 'Alias of dev next — advance the session to its next action.',
+        category: 'dev',
+        safetyLevel: SafetyLevel.WritesSessionOnly,
+        writesFiles: true,
+    }),
     entry({
         command: 'dev mark-applied',
         description: 'Metadata-only: mark a session plan applied. No source writes.',

package/dist/commands/constructs.command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constructs.command.d.ts","sourceRoot":"","sources":["../../src/commands/constructs.command.ts"],"names":[],"mappings":"AA8BA,OAAO,EAKL,KAAK,eAAe,EAErB,MAAM,wBAAwB,CAAC;AAiGhC,eAAO,MAAM,qBAAqB,EAAE,eAqBnC,CAAC;AAEF,eAAO,MAAM,oBAAoB,EAAE,eAoDlC,CAAC;AAEF,eAAO,MAAM,sBAAsB,EAAE,eAwFpC,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,eAoErC,CAAC;AAEF,eAAO,MAAM,wBAAwB,EAAE,eAmCtC,CAAC;AAEF,eAAO,MAAM,sBAAsB,EAAE,eAwBpC,CAAC;AAEF,eAAO,MAAM,oBAAoB,EAAE,eAiClC,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,eAiBrC,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,eAiBrC,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,eA4BrC,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,eA8BrC,CAAC;AAEF,eAAO,MAAM,sBAAsB,EAAE,eA0DpC,CAAC;AAEF,eAAO,MAAM,sBAAsB,EAAE,eA0LpC,CAAC"}
+{"version":3,"file":"constructs.command.d.ts","sourceRoot":"","sources":["../../src/commands/constructs.command.ts"],"names":[],"mappings":"AA8BA,OAAO,EAKL,KAAK,eAAe,EAErB,MAAM,wBAAwB,CAAC;AAkHhC,eAAO,MAAM,qBAAqB,EAAE,eAqBnC,CAAC;AAEF,eAAO,MAAM,oBAAoB,EAAE,eAoDlC,CAAC;AAEF,eAAO,MAAM,sBAAsB,EAAE,eAiGpC,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,eA0ErC,CAAC;AAEF,eAAO,MAAM,wBAAwB,EAAE,eAmCtC,CAAC;AAEF,eAAO,MAAM,sBAAsB,EAAE,eA4BpC,CAAC;AAEF,eAAO,MAAM,oBAAoB,EAAE,eAkClC,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,eAiBrC,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,eAkBrC,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,eA4BrC,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,eA8BrC,CAAC;AAEF,eAAO,MAAM,sBAAsB,EAAE,eA0DpC,CAAC;AAEF,eAAO,MAAM,sBAAsB,EAAE,eA0LpC,CAAC"}

package/dist/commands/constructs.command.js

@@ -68,6 +68,20 @@ function enrichTraceWithGraph(declaredFiles, declaredNames, cwd) {
         undeclaredSymbols: [...undeclared].sort(),
     };
 }
+/**
+ * The AUTHORITATIVE file set for a construct: declared globs replaced by their
+ * graph-resolved matches, declared concrete files kept as-is. This is what the
+ * counts, the `files` subverb, and the impact risk heuristic should use — the
+ * declared list under-counts because a single `src/**` glob is one entry that
+ * really covers N files. Falls back to the raw declared list when the graph is
+ * missing, preserving offline/no-index determinism.
+ */
+function effectiveConstructFiles(declaredFiles, graph) {
+    if (graph.graphState !== 'fresh')
+        return [...declaredFiles];
+    const concrete = declaredFiles.filter((f) => !GLOB_MAGIC.test(f));
+    return [...new Set([...concrete, ...graph.resolvedFiles])].sort();
+}
 export const constructsListCommand = {
     name: 'list',
     description: 'List registered constructs.',
@@ -184,14 +198,21 @@ export const constructsTraceCommand = {
                 registryHints: c.tags?.filter((t) => /(registry|barrel)/i.test(t)) ?? [],
             }
             : undefined;
+        const effectiveFiles = effectiveConstructFiles(trace.files, graph);
         if (flagBool(args, 'json')) {
-            process.stdout.write(asJson({ ...trace, graph, ...(deepBlock ? { deep: deepBlock } : {}) }) + '\n');
+            process.stdout.write(asJson({ ...trace, effectiveFiles, graph, ...(deepBlock ? { deep: deepBlock } : {}) }) + '\n');
             return 0;
         }
         process.stdout.write(header(`Trace: ${id}`));
-        process.stdout.write(`Files (${trace.files.length}):\n`);
-        for (const f of trace.files)
+        // Show the graph-resolved file set (globs expanded) as the count, not the
+        // raw declared list — otherwise a single `src/**` glob reads as "1 file".
+        process.stdout.write(`Files (${effectiveFiles.length}):\n`);
+        for (const f of effectiveFiles)
             process.stdout.write(`  • ${f}\n`);
+        const declaredGlobs = trace.files.filter((f) => GLOB_MAGIC.test(f));
+        if (graph.graphState === 'fresh' && declaredGlobs.length > 0) {
+            process.stdout.write(`  (expanded from declared glob(s): ${declaredGlobs.join(', ')})\n`);
+        }
         if (trace.publicApi.length > 0) {
             process.stdout.write(`Public API:\n`);
             for (const a of trace.publicApi)
@@ -271,13 +292,19 @@ export const constructsImpactCommand = {
         const verCfg = inspection.config?.verificationCommands ?? [];
         for (const v of verCfg.slice(0, 3))
             verificationCommands.push(v.command);
-        const fileCount = trace.files.length;
+        // Risk must be computed from the graph-resolved file set: a glob-declared
+        // construct (`src/**`) is one declared entry but really touches N files, so
+        // the old `trace.files.length` under-counted it to risk='low'.
+        const declaredNames = new Set([...trace.publicApi, ...trace.tokens, ...trace.events]);
+        const graph = enrichTraceWithGraph(trace.files, declaredNames, resolveCwd(args));
+        const effectiveFiles = effectiveConstructFiles(trace.files, graph);
+        const fileCount = effectiveFiles.length;
         const risk = fileCount > 12 ? 'high' : fileCount > 4 ? 'medium' : 'low';
         const humanReview = risk !== 'low';
         const report = {
             schema: 'sharkcraft.construct-impact/v1',
             id,
-            files: trace.files,
+            files: effectiveFiles,
             publicApi: trace.publicApi,
             events: trace.events,
             tokens: trace.tokens,
@@ -366,18 +393,22 @@ export const constructsFilesCommand = {
             return 1;
         }
         const trace = traceConstruct(c);
+        // Emit the graph-resolved files (globs expanded), not the raw declared
+        // globs — consumers piping `constructs files` expect real paths.
+        const graph = enrichTraceWithGraph(trace.files, new Set(), resolveCwd(args));
+        const effectiveFiles = effectiveConstructFiles(trace.files, graph);
         if (flagBool(args, 'json')) {
-            process.stdout.write(asJson({ id, files: trace.files }) + '\n');
+            process.stdout.write(asJson({ id, files: effectiveFiles }) + '\n');
             return 0;
         }
-        for (const f of trace.files)
+        for (const f of effectiveFiles)
             process.stdout.write(`${f}\n`);
         return 0;
     },
 };
 export const constructsApiCommand = {
     name: 'api',
-    description: 'Show public-API entries for a construct. --public-only emits the raw list with no header.',
+    description: 'Show the DECLARED public-API entries for a construct (the hand-authored list, not an exhaustive scan — run `shrk constructs trace <id>` for graph-verified symbols defined in the files). --public-only emits the raw list with no header.',
     usage: 'shrk constructs api <id> [--public-only] [--json]',
     async run(args) {
         const id = args.positional[0];
@@ -432,7 +463,7 @@ export const constructsEventsCommand = {
 };
 export const constructsTokensCommand = {
     name: 'tokens',
-    description: 'List tokens contributed by constructs.',
+    description: 'List the DECLARED tokens contributed by constructs (the hand-authored list, not an exhaustive scan).',
     usage: 'shrk constructs tokens [<id>] [--json]',
     async run(args) {
         const id = args.positional[0];

package/dist/commands/dev.command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dev.command.d.ts","sourceRoot":"","sources":["../../src/commands/dev.command.ts"],"names":[],"mappings":"AA6CA,OAAO,EAML,KAAK,eAAe,EAErB,MAAM,wBAAwB,CAAC;AAi8ChC,eAAO,MAAM,UAAU,EAAE,eAkExB,CAAC"}
+{"version":3,"file":"dev.command.d.ts","sourceRoot":"","sources":["../../src/commands/dev.command.ts"],"names":[],"mappings":"AA6CA,OAAO,EAML,KAAK,eAAe,EAErB,MAAM,wBAAwB,CAAC;AAg8ChC,eAAO,MAAM,UAAU,EAAE,eAkExB,CAAC"}

package/dist/commands/dev.command.js

@@ -24,7 +24,6 @@ const SUBCOMMANDS = new Set([
     'plans',
     'reports',
     'commands',
-    'cycle',
 ]);
 function slugify(s) {
     return s

package/dist/commands/gate.command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gate.command.d.ts","sourceRoot":"","sources":["../../src/commands/gate.command.ts"],"names":[],"mappings":"AAOA,OAAO,EAIL,KAAK,eAAe,EAErB,MAAM,wBAAwB,CAAC;AAGhC;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,WAAW,EAAE,eA+FzB,CAAC"}
+{"version":3,"file":"gate.command.d.ts","sourceRoot":"","sources":["../../src/commands/gate.command.ts"],"names":[],"mappings":"AAQA,OAAO,EAIL,KAAK,eAAe,EAErB,MAAM,wBAAwB,CAAC;AAGhC;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,WAAW,EAAE,eA0GzB,CAAC"}

package/dist/commands/gate.command.js

@@ -1,4 +1,5 @@
 import { QualityGateReportStore, renderGateReportMarkdown, runQualityGates, } from '@shrkcrft/quality-gates';
+import { loadProjectConfig } from '@shrkcrft/config';
 import { chmodSync, existsSync, mkdirSync, writeFileSync } from 'node:fs';
 import * as nodePath from 'node:path';
 import { flagBool, flagString, resolveCwd, } from "../command-registry.js";
@@ -45,9 +46,20 @@ export const gateCommand = {
         // --arch-all: fail on TOTAL architecture errors (ignore the frozen baseline).
         // By default the arch gate is baseline-relative — it fails only on NEW errors.
         const archAll = flagBool(args, 'arch-all');
+        // Wiring rules come from the project config; the gate is skipped (never red)
+        // when none are declared, so this is inert for projects that don't opt in.
+        // An INVALID config is surfaced (warn) rather than silently disabling wiring.
+        const loadedConfig = await loadProjectConfig(cwd);
+        const wiringRules = loadedConfig.ok ? loadedConfig.value.config.wiringRules ?? [] : [];
+        const wiringConfigError = loadedConfig.ok ? undefined : loadedConfig.error.message;
         const report = runQualityGates({
             projectRoot: cwd,
             ...(archAll ? { arch: { baselineRelative: false } } : {}),
+            ...(wiringConfigError
+                ? { wiring: { configError: wiringConfigError } }
+                : wiringRules.length > 0
+                    ? { wiring: { rules: wiringRules } }
+                    : {}),
             impact: {
                 ...(sinceRef ? { sinceRef } : {}),
                 ...(failOn ? { failOn } : {}),

package/dist/commands/graph-code-subverbs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"graph-code-subverbs.d.ts","sourceRoot":"","sources":["../../src/commands/graph-code-subverbs.ts"],"names":[],"mappings":"AA0BA,OAAO,EAAoC,KAAK,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAiI3F,wBAAsB,aAAa,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAgBrE;AA4FD,wBAAsB,cAAc,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CA+DtE;AAiBD,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAwF1E;AAID,wBAAsB,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CA8EpE;AAID,wBAAsB,cAAc,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAmFtE;AAID,wBAAsB,cAAc,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAiDtE;AAID,wBAAsB,eAAe,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAgMvE;AAID,wBAAsB,cAAc,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CA8HtE;AAID;;;;;;GAMG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CA+CpE;AAID,wBAAsB,eAAe,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CA+EvE;AAyBD;;;;;;;;;;;;GAYG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAgHpE"}
+{"version":3,"file":"graph-code-subverbs.d.ts","sourceRoot":"","sources":["../../src/commands/graph-code-subverbs.ts"],"names":[],"mappings":"AA0BA,OAAO,EAAoC,KAAK,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAiI3F,wBAAsB,aAAa,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAgBrE;AA4FD,wBAAsB,cAAc,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CA+DtE;AAiBD,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAwF1E;AAID,wBAAsB,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CA8EpE;AAID,wBAAsB,cAAc,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAmFtE;AAID,wBAAsB,cAAc,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAiDtE;AAID,wBAAsB,eAAe,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAgMvE;AAID,wBAAsB,cAAc,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CA8HtE;AAID;;;;;;GAMG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CA+CpE;AAID,wBAAsB,eAAe,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAkGvE;AAyBD;;;;;;;;;;;;GAYG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAgHpE"}

package/dist/commands/graph-code-subverbs.js

@@ -989,7 +989,26 @@ export async function runGraphCallers(args) {
     // call/reference sites in one file to a single edge. Say so, otherwise `total`
     // reads as a raw invocation count and under-reports.
     const dedupNote = 'total counts distinct caller files — multiple sites within one file collapse to a single entry.';
-    const note = [ambiguityNote, langNote, dedupNote].filter(Boolean).join(' ');
+    // A class/type used only via `new`, a type annotation, or DI has ZERO call
+    // sites but real references. In the default `call` mode that surfaces as a
+    // bare `0`, which reads as "unused" — detect the case and point at
+    // `--mode reference` so the result is actionable instead of misleading.
+    let referenceHint;
+    if (mode === 'call' && liveSites.length === 0) {
+        // Filter by the same deleted-file set as liveSites so the hint can never
+        // contradict the call-mode result or the `--mode reference` total — without
+        // this, stale Calls/References edges in files deleted since indexing would
+        // fire a false "0 calls but N references" hint. referenceSitesOf dedups by
+        // file, so the count is distinct referencing files (matches --mode reference
+        // total), hence "file(s)" not "site(s)".
+        const refCount = api
+            .referenceSitesOf(sym.id)
+            .filter((s) => !s.node.path || !fresh.deletedSet.has(s.node.path)).length;
+        if (refCount > 0) {
+            referenceHint = `0 call sites, but ${refCount} file(s) reference it (new/type/DI usage) — run \`shrk graph callers ${sym.label} --mode reference\` to see them.`;
+        }
+    }
+    const note = [ambiguityNote, langNote, dedupNote, referenceHint].filter(Boolean).join(' ');
     const payload = {
         schema: 'sharkcraft.graph-callers/v1',
         symbol: nodeSummary(sym),

package/dist/commands/policy-lint.command.d.ts

@@ -0,0 +1,3 @@
+import { type ICommandHandler } from '../command-registry.js';
+export declare const policyLintCommand: ICommandHandler;
+//# sourceMappingURL=policy-lint.command.d.ts.map

package/dist/commands/policy-lint.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-lint.command.d.ts","sourceRoot":"","sources":["../../src/commands/policy-lint.command.ts"],"names":[],"mappings":"AAKA,OAAO,EAIL,KAAK,eAAe,EAErB,MAAM,wBAAwB,CAAC;AAKhC,eAAO,MAAM,iBAAiB,EAAE,eAiI/B,CAAC"}

package/dist/commands/policy-lint.command.js

@@ -0,0 +1,122 @@
+import * as nodePath from 'node:path';
+import { runPolicyLint } from '@shrkcrft/boundaries';
+import { loadProjectConfig } from '@shrkcrft/config';
+import { resolveChangedFiles } from '@shrkcrft/inspector';
+import { flagBool, flagString, resolveCwd, } from "../command-registry.js";
+import { asJson, header, kv } from "../output/format-output.js";
+const VALID_SURFACES = new Set(['template', 'style', 'ts']);
+export const policyLintCommand = {
+    name: 'policy-lint',
+    description: 'Lint template/markup, stylesheet, and AOT-invisible TS surfaces against data-defined policyRules[] (e.g. flag raw markup when a primitive exists). Sees `.html` files AND inline `template:` strings — surfaces tsc/AOT cannot. Deterministic; no AI.',
+    usage: 'shrk [--cwd <dir>] policy-lint [--surface template|style|ts] [--changed-only] [--since <ref>] [--only <ids>] [--json]',
+    async run(args) {
+        const cwd = resolveCwd(args);
+        const wantJson = flagBool(args, 'json');
+        const changedOnly = flagBool(args, 'changed-only');
+        const since = flagString(args, 'since');
+        const only = flagString(args, 'only');
+        const surfaceRaw = flagString(args, 'surface');
+        let surfaces;
+        if (surfaceRaw) {
+            const parts = surfaceRaw.split(',').map((s) => s.trim()).filter(Boolean);
+            const bad = parts.filter((s) => !VALID_SURFACES.has(s));
+            if (bad.length > 0) {
+                process.stderr.write(`Unknown --surface "${bad.join(', ')}". Use template | style | ts.\n`);
+                return 2;
+            }
+            surfaces = parts;
+        }
+        // Distinguish invalid config from valid-with-no-rules (no silent fail-open).
+        const loaded = await loadProjectConfig(cwd);
+        if (!loaded.ok) {
+            const msg = loaded.error.message;
+            if (wantJson) {
+                process.stdout.write(asJson({ schema: 'sharkcraft.policy-lint/v1', error: msg, rules: [], findings: [], diagnostics: [msg], verdict: 'errors' }) + '\n');
+                return 1;
+            }
+            process.stdout.write(header('Policy lint'));
+            process.stdout.write(`  ✗ Could not load config: ${msg}\n  Run \`shrk doctor\` for details.\n`);
+            return 1;
+        }
+        const rules = loaded.value.config.policyRules ?? [];
+        if (rules.length === 0) {
+            if (wantJson) {
+                process.stdout.write(asJson({ schema: 'sharkcraft.policy-lint/v1', rules: [], findings: [], diagnostics: [], verdict: 'pass' }) + '\n');
+                return 0;
+            }
+            process.stdout.write(header('Policy lint'));
+            process.stdout.write('  No policy rules configured. Declare `policyRules[]` in sharkcraft.config.ts to lint\n' +
+                '  templates / styles / AOT-invisible TS shapes (see docs/policy-lint.md).\n');
+            return 0;
+        }
+        // A typo'd --only id must not silently select nothing and report green.
+        if (only) {
+            const requested = only.split(',').map((s) => s.trim()).filter(Boolean);
+            const known = new Set(rules.map((r) => r.id));
+            const unknown = requested.filter((id) => !known.has(id));
+            if (unknown.length > 0) {
+                process.stderr.write(`Unknown --only rule id(s): ${unknown.join(', ')}. Configured: ${[...known].join(', ') || '(none)'}\n`);
+                return 2;
+            }
+        }
+        let changedFiles;
+        if (changedOnly || since) {
+            changedFiles = resolveChangedFiles({
+                projectRoot: cwd,
+                ...(since ? { since } : {}),
+                ...(changedOnly && !since ? { includeWorktree: true } : {}),
+            }).files;
+        }
+        // Don't lint SharkCraft's own asset/config dir by default (its .ts files
+        // hold the rule definitions themselves, which can self-match).
+        const sharkcraftRel = nodePath.relative(cwd, loaded.value.sharkcraftDir).split(nodePath.sep).join('/');
+        const excludeDirs = sharkcraftRel && !sharkcraftRel.startsWith('..') ? [sharkcraftRel] : [];
+        const report = runPolicyLint(cwd, rules, {
+            ...(surfaces ? { surfaces } : {}),
+            ...(changedOnly || since ? { changedOnly: true, changedFiles: changedFiles ?? [] } : {}),
+            ...(only ? { only: only.split(',').map((s) => s.trim()).filter(Boolean) } : {}),
+            ...(excludeDirs.length > 0 ? { excludeDirs } : {}),
+        });
+        if (wantJson) {
+            process.stdout.write(asJson(report) + '\n');
+            return report.verdict === 'errors' ? 1 : 0;
+        }
+        process.stdout.write(header('Policy lint'));
+        process.stdout.write(kv('rules evaluated', String(report.rules.length)) + '\n');
+        const errors = report.findings.filter((f) => f.severity === 'error').length;
+        const warnings = report.findings.filter((f) => f.severity === 'warning').length;
+        process.stdout.write(kv('findings', `${errors} error(s), ${warnings} warning(s)`) + '\n');
+        if (report.diagnostics.length > 0) {
+            process.stdout.write('\nMisconfigured rules:\n');
+            for (const d of report.diagnostics)
+                process.stdout.write(`  ! ${d}\n`);
+        }
+        if (report.findings.length === 0 && report.diagnostics.length === 0) {
+            process.stdout.write('\nNo policy violations on the scanned surfaces. ✓\n');
+            return 0;
+        }
+        // Group findings by rule.
+        const byRule = new Map();
+        for (const f of report.findings) {
+            const arr = byRule.get(f.ruleId) ?? [];
+            arr.push(f);
+            byRule.set(f.ruleId, arr);
+        }
+        for (const r of report.rules) {
+            const fs = byRule.get(r.ruleId);
+            if (!fs || fs.length === 0)
+                continue;
+            process.stdout.write(`\n[${r.severity}] ${r.ruleId} (${r.surface}) — ${fs[0].message}\n`);
+            for (const f of fs.slice(0, 50)) {
+                const tag = f.inlineTemplate ? ' [inline template]' : '';
+                process.stdout.write(`    • ${f.match}  (${f.file}:${f.line})${tag}\n`);
+            }
+            if (fs.length > 50)
+                process.stdout.write(`    … (${fs.length - 50} more)\n`);
+            const suggest = fs.find((f) => f.suggest)?.suggest;
+            if (suggest)
+                process.stdout.write(`    → ${suggest}\n`);
+        }
+        return report.verdict === 'errors' ? 1 : 0;
+    },
+};

package/dist/commands/reuse.command.d.ts

@@ -0,0 +1,3 @@
+import { type ICommandHandler } from '../command-registry.js';
+export declare const reuseCommand: ICommandHandler;
+//# sourceMappingURL=reuse.command.d.ts.map

package/dist/commands/reuse.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reuse.command.d.ts","sourceRoot":"","sources":["../../src/commands/reuse.command.ts"],"names":[],"mappings":"AAGA,OAAO,EAIL,KAAK,eAAe,EAErB,MAAM,wBAAwB,CAAC;AA4DhC,eAAO,MAAM,YAAY,EAAE,eA0J1B,CAAC"}

package/dist/commands/reuse.command.js

@@ -0,0 +1,190 @@
+import { GraphStore, GraphQueryApi } from '@shrkcrft/graph';
+import { loadProjectConfig } from '@shrkcrft/config';
+import { flagBool, flagNumber, resolveCwd, } from "../command-registry.js";
+import { asJson, header } from "../output/format-output.js";
+const STOP = new Set([
+    'the', 'a', 'an', 'to', 'for', 'of', 'and', 'or', 'with', 'in', 'on', 'into', 'my',
+    'add', 'use', 'using', 'create', 'make', 'new', 'build', 'want', 'need', 'how', 'do',
+]);
+function tokenize(s) {
+    // Min length 3: 2-char tokens (`ui`, `id`) substring-match unrelated text
+    // (`guidance`, `valid`) and produce false-positive primitive matches.
+    return [
+        ...new Set(s
+            .toLowerCase()
+            .replace(/[^a-z0-9]+/g, ' ')
+            .split(' ')
+            .filter((t) => t.length >= 3 && !STOP.has(t))),
+    ];
+}
+function scorePrimitive(p, tokens) {
+    // Substring match (so intent "debounce" matches symbol `useDebounce`); the
+    // 3-char minimum above keeps it from over-matching on tiny fragments.
+    const hay = [p.symbol, ...(p.roles ?? []), ...(p.keywords ?? []), p.description ?? '']
+        .join(' ')
+        .toLowerCase();
+    let s = 0;
+    for (const t of tokens)
+        if (hay.includes(t))
+            s += 1;
+    // A role the intent mentions is a strong signal; re-weight role hits.
+    for (const role of p.roles ?? []) {
+        const rl = role.toLowerCase();
+        if (rl.length >= 3 && tokens.some((t) => rl.includes(t)))
+            s += 0.5;
+    }
+    return s;
+}
+const INDEX_RE = /(^|\/)index\.[cm]?[jt]sx?$/;
+export const reuseCommand = {
+    name: 'reuse',
+    description: 'Intent → the canonical primitive to reuse. Matches your intent against configured reusePrimitives[], then resolves the symbol in the code graph to its declaration, public import path, sibling exports, and real consumer files to copy. Deterministic; no AI.',
+    usage: 'shrk reuse "<what I want to build>" [--limit N] [--json]',
+    async run(args) {
+        const cwd = resolveCwd(args);
+        const wantJson = flagBool(args, 'json');
+        const limit = flagNumber(args, 'limit') ?? 3;
+        const intent = args.positional.join(' ').trim();
+        if (!intent) {
+            process.stderr.write('Usage: shrk reuse "<what I want to build>" [--limit N] [--json]\n');
+            return 2;
+        }
+        const loaded = await loadProjectConfig(cwd);
+        if (!loaded.ok) {
+            const msg = loaded.error.message;
+            if (wantJson) {
+                process.stdout.write(asJson({ schema: 'sharkcraft.reuse/v1', intent, error: msg, results: [] }) + '\n');
+                return 1;
+            }
+            process.stdout.write(header(`Reuse: "${intent}"`));
+            process.stdout.write(`  ✗ Could not load config: ${msg}\n  Run \`shrk doctor\` for details.\n`);
+            return 1;
+        }
+        const primitives = loaded.value.config.reusePrimitives ?? [];
+        if (primitives.length === 0) {
+            if (wantJson) {
+                process.stdout.write(asJson({ schema: 'sharkcraft.reuse/v1', intent, results: [] }) + '\n');
+                return 0;
+            }
+            process.stdout.write(header(`Reuse: "${intent}"`));
+            process.stdout.write('  No reuse primitives configured. Declare `reusePrimitives[]` in sharkcraft.config.ts\n' +
+                '  to map roles/intents to canonical symbols (see docs/reuse.md).\n');
+            return 0;
+        }
+        const tokens = tokenize(intent);
+        const ranked = primitives
+            .map((p) => ({ p, score: scorePrimitive(p, tokens) }))
+            .filter((x) => x.score > 0)
+            .sort((a, b) => b.score - a.score || a.p.symbol.localeCompare(b.p.symbol))
+            .slice(0, Math.max(1, limit));
+        const store = new GraphStore(cwd);
+        const api = store.exists() ? GraphQueryApi.fromStore(cwd) : null;
+        if (ranked.length === 0) {
+            const roles = [...new Set(primitives.flatMap((p) => p.roles))].sort();
+            if (wantJson) {
+                process.stdout.write(asJson({ schema: 'sharkcraft.reuse/v1', intent, results: [], availableRoles: roles }) + '\n');
+                return 0;
+            }
+            process.stdout.write(header(`Reuse: "${intent}"`));
+            process.stdout.write('  No primitive matched. Available roles:\n');
+            for (const r of roles.slice(0, 40))
+                process.stdout.write(`    • ${r}\n`);
+            return 0;
+        }
+        const results = ranked.map(({ p, score }) => {
+            const r = { symbol: p.symbol, score, roles: p.roles, siblings: [], consumers: [] };
+            if (p.description)
+                r.description = p.description;
+            if (p.importPath)
+                r.importPath = p.importPath;
+            if (api) {
+                // Disambiguate same-named declarations deterministically: prefer
+                // exported symbols, then shallowest path; disclose the alternates.
+                const candidates = api
+                    .findSymbol(p.symbol, { exact: true })
+                    .slice()
+                    .sort((a, b) => (a.path ?? '').localeCompare(b.path ?? ''));
+                const exported = candidates.filter((c) => c.data?.['isExported'] === true);
+                const pool = exported.length > 0 ? exported : candidates;
+                const sym = pool[0];
+                if (sym) {
+                    if (sym.path)
+                        r.declaredIn = sym.path;
+                    if (sym.line)
+                        r.declaredLine = sym.line;
+                    if (sym.path) {
+                        const fileNode = api.findFile(sym.path);
+                        if (fileNode) {
+                            r.siblings = api
+                                .symbolsIn(fileNode.id)
+                                .filter((s) => s.data?.['isExported'] === true && s.label && s.label !== p.symbol)
+                                .map((s) => s.label)
+                                .slice(0, 8);
+                            // When no public importPath is configured, surface a re-exporting
+                            // barrel as a hint (we never fabricate a module specifier from a
+                            // deep file path — that would be a broken/unusable import).
+                            if (!r.importPath) {
+                                const barrel = api.importersOf(fileNode.id).find((n) => n.path && INDEX_RE.test(n.path));
+                                if (barrel?.path)
+                                    r.reExportedVia = barrel.path;
+                            }
+                        }
+                    }
+                    r.consumers = api
+                        .referenceSitesOf(sym.id)
+                        .slice(0, 5)
+                        .map((s) => ({ path: s.node.path ?? s.node.id, ...(s.line ? { line: s.line } : {}) }));
+                    const alts = pool.slice(1).map((c) => c.path).filter((x) => !!x);
+                    if (alts.length > 0)
+                        r.alternates = alts;
+                }
+                else {
+                    r.notFound = true;
+                }
+            }
+            // The import line is emitted ONLY from a configured importPath (a clean,
+            // copy-pasteable specifier). Without it we show declaration + barrel hint.
+            if (r.importPath)
+                r.importLine = `import { ${p.symbol} } from '${r.importPath}';`;
+            return r;
+        });
+        if (wantJson) {
+            process.stdout.write(asJson({ schema: 'sharkcraft.reuse/v1', intent, graphIndexed: !!api, results }) + '\n');
+            return 0;
+        }
+        process.stdout.write(header(`Reuse: "${intent}"`));
+        if (!api) {
+            process.stdout.write('  (code graph missing — import path/siblings/consumers limited; run `shrk graph index`)\n');
+        }
+        let i = 0;
+        for (const r of results) {
+            i += 1;
+            process.stdout.write(`\n${i}. ${r.symbol}\n`);
+            if (r.description)
+                process.stdout.write(`   ${r.description}\n`);
+            if (r.notFound) {
+                process.stdout.write('   ⚠ symbol not found in the code graph — verify reusePrimitives[].symbol (typo/rename?) or run `shrk graph index`\n');
+            }
+            if (r.importLine) {
+                process.stdout.write(`   import: ${r.importLine}\n`);
+            }
+            else if (r.reExportedVia) {
+                process.stdout.write(`   re-exported via: ${r.reExportedVia}  (set reusePrimitives[].importPath for a copy-paste import)\n`);
+            }
+            if (r.declaredIn) {
+                process.stdout.write(`   declared in: ${r.declaredIn}${r.declaredLine ? ':' + r.declaredLine : ''}\n`);
+            }
+            if (r.alternates && r.alternates.length > 0) {
+                process.stdout.write(`   ⚠ name also declared in: ${r.alternates.join(', ')}\n`);
+            }
+            if (r.siblings.length > 0)
+                process.stdout.write(`   sibling exports: ${r.siblings.join(', ')}\n`);
+            if (r.consumers.length > 0) {
+                process.stdout.write('   consumers to copy:\n');
+                for (const c of r.consumers)
+                    process.stdout.write(`     - ${c.path}${c.line ? ':' + c.line : ''}\n`);
+            }
+        }
+        return 0;
+    },
+};

package/dist/main.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":";AAEA,OAAO,EACL,eAAe,EAKhB,MAAM,uBAAuB,CAAC;AAwX/B,wBAAgB,aAAa,IAAI,eAAe,CA4X/C;AAED,wBAAsB,MAAM,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CA2BrE;AAsHD;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAoDxE"}
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":";AAEA,OAAO,EACL,eAAe,EAKhB,MAAM,uBAAuB,CAAC;AA0X/B,wBAAgB,aAAa,IAAI,eAAe,CA8X/C;AAED,wBAAsB,MAAM,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CA2BrE;AAsHD;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAoDxE"}

package/dist/main.js

@@ -32,6 +32,8 @@ import { archCommand } from "./commands/arch.command.js";
 import { frameworkCommand } from "./commands/framework.command.js";
 import { apiDiffCommand } from "./commands/api-diff.command.js";
 import { gateCommand } from "./commands/gate.command.js";
+import { policyLintCommand } from "./commands/policy-lint.command.js";
+import { reuseCommand } from "./commands/reuse.command.js";
 import { migrateCommand } from "./commands/migrate.command.js";
 import { coverageCommand } from "./commands/coverage.command.js";
 import { statsCommand } from "./commands/stats.command.js";
@@ -198,6 +200,8 @@ export function buildRegistry() {
     registry.register(frameworkCommand);
     registry.register(apiDiffCommand);
     registry.register(gateCommand);
+    registry.register(policyLintCommand);
+    registry.register(reuseCommand);
     registry.register(migrateCommand);
     registry.register(coverageCommand);
     registry.register(statsCommand);

package/dist/surface/profiles.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"profiles.d.ts","sourceRoot":"","sources":["../../src/surface/profiles.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,MAAM,WAAW,eAAe;IAC9B,kEAAkE;IAClE,EAAE,EAAE,MAAM,CAAC;IACX,6DAA6D;IAC7D,WAAW,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B;;;;OAIG;IACH,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,uEAAuE;IACvE,MAAM,EAAE,SAAS,GAAG,MAAM,GAAG,OAAO,CAAC;IACrC,yCAAyC;IACzC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAmLD,oCAAoC;AACpC,eAAO,MAAM,gBAAgB,EAAE,SAAS,eAAe,EAOrD,CAAC;AAEH,gEAAgE;AAChE,wBAAgB,aAAa,CAC3B,YAAY,GAAE,SAAS,eAAe,EAAO,GAC5C,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAQ9B;AAED,6DAA6D;AAC7D,wBAAgB,UAAU,CACxB,EAAE,EAAE,MAAM,EACV,YAAY,GAAE,SAAS,eAAe,EAAO,GAC5C,eAAe,GAAG,SAAS,CAE7B"}
+{"version":3,"file":"profiles.d.ts","sourceRoot":"","sources":["../../src/surface/profiles.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,MAAM,WAAW,eAAe;IAC9B,kEAAkE;IAClE,EAAE,EAAE,MAAM,CAAC;IACX,6DAA6D;IAC7D,WAAW,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B;;;;OAIG;IACH,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,uEAAuE;IACvE,MAAM,EAAE,SAAS,GAAG,MAAM,GAAG,OAAO,CAAC;IACrC,yCAAyC;IACzC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAkLD,oCAAoC;AACpC,eAAO,MAAM,gBAAgB,EAAE,SAAS,eAAe,EAOrD,CAAC;AAEH,gEAAgE;AAChE,wBAAgB,aAAa,CAC3B,YAAY,GAAE,SAAS,eAAe,EAAO,GAC5C,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAQ9B;AAED,6DAA6D;AAC7D,wBAAgB,UAAU,CACxB,EAAE,EAAE,MAAM,EACV,YAAY,GAAE,SAAS,eAAe,EAAO,GAC5C,eAAe,GAAG,SAAS,CAE7B"}

package/dist/surface/profiles.js

@@ -103,7 +103,6 @@ const CI_PROFILE = {
         'dev start',
         'dev status',
         'dev report',
-        'session',
         'ask',
         'orchestrate',
     ],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shrkcrft/cli",
-  "version": "0.1.0-alpha.20",
+  "version": "0.1.0-alpha.22",
   "description": "SharkCraft CLI (`shrk`): structured project intelligence for AI coding agents.",
   "license": "MIT",
   "author": "SharkCraft contributors",
@@ -47,38 +47,38 @@
     "typecheck": "tsc --noEmit -p tsconfig.json"
   },
   "dependencies": {
-    "@shrkcrft/core": "^0.1.0-alpha.20",
-    "@shrkcrft/compress": "^0.1.0-alpha.20",
-    "@shrkcrft/config": "^0.1.0-alpha.20",
-    "@shrkcrft/workspace": "^0.1.0-alpha.20",
-    "@shrkcrft/knowledge": "^0.1.0-alpha.20",
-    "@shrkcrft/context": "^0.1.0-alpha.20",
-    "@shrkcrft/rules": "^0.1.0-alpha.20",
-    "@shrkcrft/paths": "^0.1.0-alpha.20",
-    "@shrkcrft/templates": "^0.1.0-alpha.20",
-    "@shrkcrft/plugin-api": "^0.1.0-alpha.20",
-    "@shrkcrft/dashboard": "^0.1.0-alpha.20",
-    "@shrkcrft/dashboard-api": "^0.1.0-alpha.20",
-    "@shrkcrft/pipelines": "^0.1.0-alpha.20",
-    "@shrkcrft/presets": "^0.1.0-alpha.20",
-    "@shrkcrft/boundaries": "^0.1.0-alpha.20",
-    "@shrkcrft/graph": "^0.1.0-alpha.20",
-    "@shrkcrft/rule-graph": "^0.1.0-alpha.20",
-    "@shrkcrft/structural-search": "^0.1.0-alpha.20",
-    "@shrkcrft/impact-engine": "^0.1.0-alpha.20",
-    "@shrkcrft/context-planner": "^0.1.0-alpha.20",
-    "@shrkcrft/architecture-guard": "^0.1.0-alpha.20",
-    "@shrkcrft/framework-scanners": "^0.1.0-alpha.20",
-    "@shrkcrft/api-surface-diff": "^0.1.0-alpha.20",
-    "@shrkcrft/quality-gates": "^0.1.0-alpha.20",
-    "@shrkcrft/migrate": "^0.1.0-alpha.20",
-    "@shrkcrft/generator": "^0.1.0-alpha.20",
-    "@shrkcrft/importer": "^0.1.0-alpha.20",
-    "@shrkcrft/inspector": "^0.1.0-alpha.20",
-    "@shrkcrft/ai": "^0.1.0-alpha.20",
-    "@shrkcrft/embeddings": "^0.1.0-alpha.20",
-    "@shrkcrft/shared": "^0.1.0-alpha.20",
-    "@shrkcrft/mcp-server": "^0.1.0-alpha.20",
+    "@shrkcrft/core": "^0.1.0-alpha.22",
+    "@shrkcrft/compress": "^0.1.0-alpha.22",
+    "@shrkcrft/config": "^0.1.0-alpha.22",
+    "@shrkcrft/workspace": "^0.1.0-alpha.22",
+    "@shrkcrft/knowledge": "^0.1.0-alpha.22",
+    "@shrkcrft/context": "^0.1.0-alpha.22",
+    "@shrkcrft/rules": "^0.1.0-alpha.22",
+    "@shrkcrft/paths": "^0.1.0-alpha.22",
+    "@shrkcrft/templates": "^0.1.0-alpha.22",
+    "@shrkcrft/plugin-api": "^0.1.0-alpha.22",
+    "@shrkcrft/dashboard": "^0.1.0-alpha.22",
+    "@shrkcrft/dashboard-api": "^0.1.0-alpha.22",
+    "@shrkcrft/pipelines": "^0.1.0-alpha.22",
+    "@shrkcrft/presets": "^0.1.0-alpha.22",
+    "@shrkcrft/boundaries": "^0.1.0-alpha.22",
+    "@shrkcrft/graph": "^0.1.0-alpha.22",
+    "@shrkcrft/rule-graph": "^0.1.0-alpha.22",
+    "@shrkcrft/structural-search": "^0.1.0-alpha.22",
+    "@shrkcrft/impact-engine": "^0.1.0-alpha.22",
+    "@shrkcrft/context-planner": "^0.1.0-alpha.22",
+    "@shrkcrft/architecture-guard": "^0.1.0-alpha.22",
+    "@shrkcrft/framework-scanners": "^0.1.0-alpha.22",
+    "@shrkcrft/api-surface-diff": "^0.1.0-alpha.22",
+    "@shrkcrft/quality-gates": "^0.1.0-alpha.22",
+    "@shrkcrft/migrate": "^0.1.0-alpha.22",
+    "@shrkcrft/generator": "^0.1.0-alpha.22",
+    "@shrkcrft/importer": "^0.1.0-alpha.22",
+    "@shrkcrft/inspector": "^0.1.0-alpha.22",
+    "@shrkcrft/ai": "^0.1.0-alpha.22",
+    "@shrkcrft/embeddings": "^0.1.0-alpha.22",
+    "@shrkcrft/shared": "^0.1.0-alpha.22",
+    "@shrkcrft/mcp-server": "^0.1.0-alpha.22",
     "@huggingface/transformers": "^3.7.5"
   },
   "publishConfig": {