@stackbilt/cli 0.9.2 → 0.11.0

package/dist/__tests__/login.test.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const login_1 = require("../commands/login");
+const credentials_1 = require("../credentials");
+const options = {
+    format: 'text',
+    configPath: '.charter',
+    ciMode: false,
+    yes: false,
+};
+(0, vitest_1.describe)('charter login — deprecation notice', () => {
+    const originalEnv = process.env[credentials_1.API_KEY_ENV_VAR];
+    (0, vitest_1.beforeEach)(() => {
+        delete process.env[credentials_1.API_KEY_ENV_VAR];
+    });
+    (0, vitest_1.afterEach)(() => {
+        if (originalEnv === undefined) {
+            delete process.env[credentials_1.API_KEY_ENV_VAR];
+        }
+        else {
+            process.env[credentials_1.API_KEY_ENV_VAR] = originalEnv;
+        }
+        vitest_1.vi.restoreAllMocks();
+    });
+    (0, vitest_1.it)('writes a deprecation notice to stderr when invoked without args', async () => {
+        const stderr = vitest_1.vi.spyOn(process.stderr, 'write').mockImplementation(() => true);
+        vitest_1.vi.spyOn(console, 'log').mockImplementation(() => { });
+        await (0, login_1.loginCommand)(options, []);
+        const stderrOutput = stderr.mock.calls.map((c) => String(c[0])).join('');
+        (0, vitest_1.expect)(stderrOutput).toMatch(/deprecated/i);
+        (0, vitest_1.expect)(stderrOutput).toContain(credentials_1.API_KEY_ENV_VAR);
+    });
+    (0, vitest_1.it)('reports env-var usage when STACKBILT_API_KEY is set and no --key flag', async () => {
+        process.env[credentials_1.API_KEY_ENV_VAR] = 'ea_login_test_key';
+        vitest_1.vi.spyOn(process.stderr, 'write').mockImplementation(() => true);
+        const log = vitest_1.vi.spyOn(console, 'log').mockImplementation(() => { });
+        await (0, login_1.loginCommand)(options, []);
+        const stdoutOutput = log.mock.calls.map((c) => String(c[0])).join('\n');
+        (0, vitest_1.expect)(stdoutOutput).toMatch(new RegExp(`Using ${credentials_1.API_KEY_ENV_VAR} from environment`));
+    });
+});
+//# sourceMappingURL=login.test.js.map

package/dist/__tests__/login.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.test.js","sourceRoot":"","sources":["../../src/__tests__/login.test.ts"],"names":[],"mappings":";;AAAA,mCAAyE;AACzE,6CAAiD;AAEjD,gDAAiD;AAEjD,MAAM,OAAO,GAAe;IAC1B,MAAM,EAAE,MAAM;IACd,UAAU,EAAE,UAAU;IACtB,MAAM,EAAE,KAAK;IACb,GAAG,EAAE,KAAK;CACX,CAAC;AAEF,IAAA,iBAAQ,EAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,6BAAe,CAAC,CAAC;IAEjD,IAAA,mBAAU,EAAC,GAAG,EAAE;QACd,OAAO,OAAO,CAAC,GAAG,CAAC,6BAAe,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,IAAA,kBAAS,EAAC,GAAG,EAAE;QACb,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,OAAO,CAAC,GAAG,CAAC,6BAAe,CAAC,CAAC;QACtC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,6BAAe,CAAC,GAAG,WAAW,CAAC;QAC7C,CAAC;QACD,WAAE,CAAC,eAAe,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,MAAM,GAAG,WAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAChF,WAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAEtD,MAAM,IAAA,oBAAY,EAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAEhC,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzE,IAAA,eAAM,EAAC,YAAY,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAC5C,IAAA,eAAM,EAAC,YAAY,CAAC,CAAC,SAAS,CAAC,6BAAe,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,OAAO,CAAC,GAAG,CAAC,6BAAe,CAAC,GAAG,mBAAmB,CAAC;QACnD,WAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACjE,MAAM,GAAG,GAAG,WAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAElE,MAAM,IAAA,oBAAY,EAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAEhC,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxE,IAAA,eAAM,EAAC,YAAY,CAAC,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,SAAS,6BAAe,mBAAmB,CAAC,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/named-scaffolds.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=named-scaffolds.test.d.ts.map

package/dist/__tests__/named-scaffolds.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"named-scaffolds.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/named-scaffolds.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/named-scaffolds.test.js

@@ -0,0 +1,58 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const adf_named_scaffolds_1 = require("../commands/adf-named-scaffolds");
+(0, vitest_1.describe)('NAMED_MODULE_SCAFFOLDS registry', () => {
+    (0, vitest_1.it)('contains typed-data-access scaffold entry', () => {
+        (0, vitest_1.expect)(adf_named_scaffolds_1.NAMED_MODULE_SCAFFOLDS['typed-data-access']).toBeDefined();
+        (0, vitest_1.expect)(adf_named_scaffolds_1.NAMED_MODULE_SCAFFOLDS['typed-data-access']).toBe(adf_named_scaffolds_1.TYPED_DATA_ACCESS_SCAFFOLD);
+    });
+    (0, vitest_1.it)('typed-data-access scaffold is valid ADF 0.1', () => {
+        const scaffold = adf_named_scaffolds_1.NAMED_MODULE_SCAFFOLDS['typed-data-access'];
+        (0, vitest_1.expect)(scaffold).toMatch(/^ADF: 0\.1/);
+    });
+    (0, vitest_1.it)('typed-data-access scaffold declares the six sensitivity tiers', () => {
+        const scaffold = adf_named_scaffolds_1.NAMED_MODULE_SCAFFOLDS['typed-data-access'];
+        (0, vitest_1.expect)(scaffold).toContain('public');
+        (0, vitest_1.expect)(scaffold).toContain('service_internal');
+        (0, vitest_1.expect)(scaffold).toContain('cross_service_rpc');
+        (0, vitest_1.expect)(scaffold).toContain('pii_scoped');
+        (0, vitest_1.expect)(scaffold).toContain('billing_critical');
+        (0, vitest_1.expect)(scaffold).toContain('secrets');
+    });
+    (0, vitest_1.it)('typed-data-access scaffold references the canonical registry path', () => {
+        const scaffold = adf_named_scaffolds_1.NAMED_MODULE_SCAFFOLDS['typed-data-access'];
+        (0, vitest_1.expect)(scaffold).toContain('stackbilt_llc/policies/data-registry.yaml');
+    });
+    (0, vitest_1.it)('typed-data-access scaffold includes load-bearing disambiguation constraint', () => {
+        const scaffold = adf_named_scaffolds_1.NAMED_MODULE_SCAFFOLDS['typed-data-access'];
+        (0, vitest_1.expect)(scaffold).toMatch(/CONSTRAINTS \[load-bearing\]/);
+        (0, vitest_1.expect)(scaffold).toContain('HALT and ask');
+    });
+});
+(0, vitest_1.describe)('NAMED_MODULE_DEFAULT_TRIGGERS registry', () => {
+    (0, vitest_1.it)('contains typed-data-access trigger keywords', () => {
+        (0, vitest_1.expect)(adf_named_scaffolds_1.NAMED_MODULE_DEFAULT_TRIGGERS['typed-data-access']).toBeDefined();
+        (0, vitest_1.expect)(Array.isArray(adf_named_scaffolds_1.NAMED_MODULE_DEFAULT_TRIGGERS['typed-data-access'])).toBe(true);
+    });
+    (0, vitest_1.it)('typed-data-access triggers include canonical business concept names', () => {
+        const triggers = adf_named_scaffolds_1.NAMED_MODULE_DEFAULT_TRIGGERS['typed-data-access'];
+        (0, vitest_1.expect)(triggers).toContain('tenant');
+        (0, vitest_1.expect)(triggers).toContain('user');
+        (0, vitest_1.expect)(triggers).toContain('subscription');
+        (0, vitest_1.expect)(triggers).toContain('quota');
+    });
+    (0, vitest_1.it)('typed-data-access triggers include sensitivity and policy keywords', () => {
+        const triggers = adf_named_scaffolds_1.NAMED_MODULE_DEFAULT_TRIGGERS['typed-data-access'];
+        (0, vitest_1.expect)(triggers).toContain('sensitivity');
+        (0, vitest_1.expect)(triggers).toContain('DATA_AUTHORITY');
+        (0, vitest_1.expect)(triggers).toContain('disambiguation');
+    });
+    (0, vitest_1.it)('every named scaffold has default triggers registered', () => {
+        for (const name of Object.keys(adf_named_scaffolds_1.NAMED_MODULE_SCAFFOLDS)) {
+            (0, vitest_1.expect)(adf_named_scaffolds_1.NAMED_MODULE_DEFAULT_TRIGGERS[name]).toBeDefined();
+            (0, vitest_1.expect)(adf_named_scaffolds_1.NAMED_MODULE_DEFAULT_TRIGGERS[name].length).toBeGreaterThan(0);
+        }
+    });
+});
+//# sourceMappingURL=named-scaffolds.test.js.map

package/dist/__tests__/named-scaffolds.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"named-scaffolds.test.js","sourceRoot":"","sources":["../../src/__tests__/named-scaffolds.test.ts"],"names":[],"mappings":";;AAAA,mCAA8C;AAC9C,yEAIyC;AAEzC,IAAA,iBAAQ,EAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,IAAA,WAAE,EAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,IAAA,eAAM,EAAC,4CAAsB,CAAC,mBAAmB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAClE,IAAA,eAAM,EAAC,4CAAsB,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,gDAA0B,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,QAAQ,GAAG,4CAAsB,CAAC,mBAAmB,CAAC,CAAC;QAC7D,IAAA,eAAM,EAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,QAAQ,GAAG,4CAAsB,CAAC,mBAAmB,CAAC,CAAC;QAC7D,IAAA,eAAM,EAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAA,eAAM,EAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAC/C,IAAA,eAAM,EAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAChD,IAAA,eAAM,EAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACzC,IAAA,eAAM,EAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAC/C,IAAA,eAAM,EAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,QAAQ,GAAG,4CAAsB,CAAC,mBAAmB,CAAC,CAAC;QAC7D,IAAA,eAAM,EAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,2CAA2C,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,4EAA4E,EAAE,GAAG,EAAE;QACpF,MAAM,QAAQ,GAAG,4CAAsB,CAAC,mBAAmB,CAAC,CAAC;QAC7D,IAAA,eAAM,EAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC;QACzD,IAAA,eAAM,EAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,IAAA,WAAE,EAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,IAAA,eAAM,EAAC,mDAA6B,CAAC,mBAAmB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACzE,IAAA,eAAM,EAAC,KAAK,CAAC,OAAO,CAAC,mDAA6B,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,QAAQ,GAAG,mDAA6B,CAAC,mBAAmB,CAAC,CAAC;QACpE,IAAA,eAAM,EAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAA,eAAM,EAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACnC,IAAA,eAAM,EAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QAC3C,IAAA,eAAM,EAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,QAAQ,GAAG,mDAA6B,CAAC,mBAAmB,CAAC,CAAC;QACpE,IAAA,eAAM,EAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAC1C,IAAA,eAAM,EAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QAC7C,IAAA,eAAM,EAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,4CAAsB,CAAC,EAAE,CAAC;YACvD,IAAA,eAAM,EAAC,mDAA6B,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YAC1D,IAAA,eAAM,EAAC,mDAA6B,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACxE,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/score.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=score.test.d.ts.map

package/dist/__tests__/score.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"score.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/score.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/score.test.js

@@ -0,0 +1,234 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs = __importStar(require("node:fs"));
+const os = __importStar(require("node:os"));
+const path = __importStar(require("node:path"));
+const vitest_1 = require("vitest");
+const index_1 = require("../index");
+const score_1 = require("../commands/score");
+const baseOptions = {
+    configPath: '.charter',
+    format: 'json',
+    ciMode: false,
+    yes: false,
+};
+const originalCwd = process.cwd();
+const tempDirs = [];
+(0, vitest_1.afterEach)(() => {
+    process.chdir(originalCwd);
+    while (tempDirs.length > 0) {
+        const dir = tempDirs.pop();
+        if (dir) {
+            fs.rmSync(dir, { recursive: true, force: true });
+        }
+    }
+    vitest_1.vi.restoreAllMocks();
+});
+(0, vitest_1.describe)('scoreCommand', () => {
+    (0, vitest_1.it)('gives a strong score to a well-grounded Charter-style repo', async () => {
+        const tmp = createTempRepo();
+        process.chdir(tmp);
+        fs.mkdirSync(path.join(tmp, '.ai'), { recursive: true });
+        fs.mkdirSync(path.join(tmp, '.github', 'workflows'), { recursive: true });
+        fs.mkdirSync(path.join(tmp, '.githooks'), { recursive: true });
+        fs.mkdirSync(path.join(tmp, '.codex', 'skills', 'review'), { recursive: true });
+        fs.mkdirSync(path.join(tmp, '.claude'), { recursive: true });
+        fs.mkdirSync(path.join(tmp, 'src'), { recursive: true });
+        fs.writeFileSync(path.join(tmp, 'package.json'), JSON.stringify({
+            name: 'ready-repo',
+            version: '1.0.0',
+            scripts: {
+                test: 'vitest run',
+                'test:unit': 'vitest run src/index.ts',
+            },
+        }, null, 2));
+        fs.writeFileSync(path.join(tmp, 'README.md'), `# Ready Repo
+
+See \`src/index.ts\` and \`.ai/manifest.adf\`.
+
+\`\`\`sh
+npm test
+npm run test:unit
+\`\`\`
+`);
+        fs.writeFileSync(path.join(tmp, 'CLAUDE.md'), `# Working Rules
+
+Use \`src/index.ts\` as the main entrypoint.
+Review \`.ai/manifest.adf\` before changing architecture.
+
+\`\`\`sh
+charter adf evidence --auto-measure
+\`\`\`
+`);
+        fs.writeFileSync(path.join(tmp, '.cursorrules'), `Keep edits small.
+Check \`.ai/core.adf\` and \`.ai/state.adf\` before large changes.
+`);
+        fs.writeFileSync(path.join(tmp, 'AGENTS.md'), `# Agents
+
+Coordinate ownership before parallel changes.
+Use \`npm test\` before handing work back.
+`);
+        fs.writeFileSync(path.join(tmp, '.ai', 'manifest.adf'), `ADF: 0.1
+ROLE: Repo context router
+
+DEFAULT_LOAD:
+  - core.adf
+  - state.adf
+
+ON_DEMAND:
+  - backend.adf (Triggers on: API, Node, DB)
+`);
+        fs.writeFileSync(path.join(tmp, '.ai', 'core.adf'), `ADF: 0.1
+
+CONTEXT:
+  - Service entrypoint: src/index.ts
+
+CONSTRAINTS [load-bearing]:
+  - Run npm test before merge
+  - Keep API handlers pure at the edge
+
+METRICS:
+  entry_loc: 12 / 200 [lines]
+`);
+        fs.writeFileSync(path.join(tmp, '.ai', 'state.adf'), `ADF: 0.1
+STATE:
+  CURRENT: scoring implementation is active
+  NEXT: keep docs synchronized
+`);
+        fs.writeFileSync(path.join(tmp, '.ai', 'backend.adf'), `ADF: 0.1
+CONTEXT:
+  - API routes live in src/index.ts
+`);
+        fs.writeFileSync(path.join(tmp, 'src', 'index.ts'), 'export const ready = true;\n');
+        fs.writeFileSync(path.join(tmp, '.github', 'workflows', 'ci.yml'), 'name: CI\non: [push]\n');
+        fs.writeFileSync(path.join(tmp, '.githooks', 'pre-commit'), '#!/usr/bin/env sh\nnpm test\n');
+        fs.writeFileSync(path.join(tmp, '.codex', 'skills', 'review', 'SKILL.md'), '# Review Skill\n');
+        fs.writeFileSync(path.join(tmp, '.claude', 'settings.json'), JSON.stringify({
+            permissions: {
+                allow: ['Bash(npm test)'],
+            },
+        }, null, 2));
+        const { exitCode, report } = await captureJson(() => (0, score_1.scoreCommand)(baseOptions, []));
+        (0, vitest_1.expect)(exitCode).toBe(0);
+        (0, vitest_1.expect)(report.score.grade).toBe('A');
+        (0, vitest_1.expect)(report.score.total).toBeGreaterThanOrEqual(95);
+        (0, vitest_1.expect)(findCategory(report, 'agent-config')?.score).toBe(25);
+        (0, vitest_1.expect)(findCategory(report, 'architecture')?.score).toBe(20);
+        (0, vitest_1.expect)(findCategory(report, 'governance')?.score).toBe(10);
+        (0, vitest_1.expect)(report.recommendations).not.toContainEqual(vitest_1.expect.stringContaining('charter bootstrap --yes'));
+    });
+    (0, vitest_1.it)('is registered in the top-level CLI and scores non-Charter repos without crashing', async () => {
+        const tmp = createTempRepo();
+        process.chdir(tmp);
+        fs.mkdirSync(path.join(tmp, 'src'), { recursive: true });
+        fs.mkdirSync(path.join(tmp, '.github', 'workflows'), { recursive: true });
+        fs.writeFileSync(path.join(tmp, 'package.json'), JSON.stringify({
+            name: 'plain-repo',
+            version: '1.0.0',
+            scripts: {
+                test: 'node --test',
+            },
+        }, null, 2));
+        fs.writeFileSync(path.join(tmp, 'README.md'), `# Plain Repo
+
+Main module: \`src/app.ts\`
+
+\`\`\`sh
+npm test
+\`\`\`
+`);
+        fs.writeFileSync(path.join(tmp, 'src', 'app.ts'), 'export const app = 1;\n');
+        fs.writeFileSync(path.join(tmp, '.github', 'workflows', 'ci.yml'), 'name: CI\non: [push]\n');
+        const { exitCode, report } = await captureJson(() => (0, index_1.run)(['score', '--format', 'json']));
+        (0, vitest_1.expect)(exitCode).toBe(0);
+        (0, vitest_1.expect)(report.score.total).toBeGreaterThan(0);
+        (0, vitest_1.expect)(report.recommendations.some((item) => item.includes('charter bootstrap --yes'))).toBe(true);
+        (0, vitest_1.expect)(report.recommendations.some((item) => item.includes('CLAUDE.md'))).toBe(true);
+    });
+    (0, vitest_1.it)('falls back to mtime freshness and flags stale config relative to code', async () => {
+        const tmp = createTempRepo();
+        process.chdir(tmp);
+        fs.mkdirSync(path.join(tmp, 'src'), { recursive: true });
+        fs.writeFileSync(path.join(tmp, 'package.json'), JSON.stringify({
+            name: 'stale-repo',
+            version: '1.0.0',
+            scripts: {
+                test: 'node --test',
+            },
+        }, null, 2));
+        fs.writeFileSync(path.join(tmp, 'README.md'), `# Stale Repo
+
+\`\`\`sh
+npm test
+\`\`\`
+`);
+        fs.writeFileSync(path.join(tmp, 'CLAUDE.md'), '# Repo Rules\n\nRun `npm test` before merge.\n');
+        fs.writeFileSync(path.join(tmp, '.cursorrules'), 'Keep changes localized.\n');
+        fs.writeFileSync(path.join(tmp, 'AGENTS.md'), '# Agents\n\nCoordinate work.\n');
+        fs.writeFileSync(path.join(tmp, 'src', 'app.ts'), 'export const stale = true;\n');
+        const oldDate = new Date(Date.now() - (160 * 24 * 60 * 60 * 1000));
+        const newDate = new Date(Date.now() - (2 * 24 * 60 * 60 * 1000));
+        for (const file of ['CLAUDE.md', '.cursorrules', 'AGENTS.md']) {
+            fs.utimesSync(path.join(tmp, file), oldDate, oldDate);
+        }
+        fs.utimesSync(path.join(tmp, 'src', 'app.ts'), newDate, newDate);
+        const { report } = await captureJson(() => (0, score_1.scoreCommand)(baseOptions, []));
+        (0, vitest_1.expect)(report.signals.freshness.strategy).toBe('mtime');
+        (0, vitest_1.expect)((report.signals.freshness.deltaDays || 0)).toBeGreaterThan(100);
+        (0, vitest_1.expect)(findCategory(report, 'freshness')?.score).toBeLessThanOrEqual(2);
+        (0, vitest_1.expect)(report.recommendations.some((item) => item.includes('Refresh agent config after recent code changes'))).toBe(true);
+    });
+});
+function createTempRepo() {
+    const tmp = fs.mkdtempSync(path.join(os.tmpdir(), 'charter-score-test-'));
+    tempDirs.push(tmp);
+    return tmp;
+}
+async function captureJson(runCommand) {
+    const logs = [];
+    vitest_1.vi.spyOn(console, 'log').mockImplementation((message) => {
+        logs.push(String(message ?? ''));
+    });
+    const exitCode = await runCommand();
+    return {
+        exitCode,
+        report: JSON.parse(logs[0]),
+    };
+}
+function findCategory(report, id) {
+    return report.categories.find((category) => category.id === id);
+}
+//# sourceMappingURL=score.test.js.map

package/dist/__tests__/score.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"score.test.js","sourceRoot":"","sources":["../../src/__tests__/score.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,4CAA8B;AAC9B,4CAA8B;AAC9B,gDAAkC;AAClC,mCAA6D;AAE7D,oCAA+B;AAC/B,6CAAiD;AAEjD,MAAM,WAAW,GAAe;IAC9B,UAAU,EAAE,UAAU;IACtB,MAAM,EAAE,MAAM;IACd,MAAM,EAAE,KAAK;IACb,GAAG,EAAE,KAAK;CACX,CAAC;AAEF,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;AAClC,MAAM,QAAQ,GAAa,EAAE,CAAC;AAE9B,IAAA,kBAAS,EAAC,GAAG,EAAE;IACb,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC3B,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC;QAC3B,IAAI,GAAG,EAAE,CAAC;YACR,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IACD,WAAE,CAAC,eAAe,EAAE,CAAC;AACvB,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,IAAA,WAAE,EAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,GAAG,GAAG,cAAc,EAAE,CAAC;QAC7B,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAEnB,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1E,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChF,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEzD,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC;YAC9D,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE;gBACP,IAAI,EAAE,YAAY;gBAClB,WAAW,EAAE,yBAAyB;aACvC;SACF,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAEb,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE;;;;;;;;CAQjD,CAAC,CAAC;QAEC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE;;;;;;;;CAQjD,CAAC,CAAC;QAEC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE;;CAEpD,CAAC,CAAC;QAEC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE;;;;CAIjD,CAAC,CAAC;QAEC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,cAAc,CAAC,EAAE;;;;;;;;;CAS3D,CAAC,CAAC;QAEC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,EAAE;;;;;;;;;;;CAWvD,CAAC,CAAC;QAEC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,CAAC,EAAE;;;;CAIxD,CAAC,CAAC;QAEC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,aAAa,CAAC,EAAE;;;CAG1D,CAAC,CAAC;QAEC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,EAAE,8BAA8B,CAAC,CAAC;QACpF,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAC,EAAE,wBAAwB,CAAC,CAAC;QAC7F,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,YAAY,CAAC,EAAE,+BAA+B,CAAC,CAAC;QAC7F,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAC/F,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,eAAe,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC;YAC1E,WAAW,EAAE;gBACX,KAAK,EAAE,CAAC,gBAAgB,CAAC;aAC1B;SACF,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAEb,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,CAAC,IAAA,oBAAY,EAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;QAEpF,IAAA,eAAM,EAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzB,IAAA,eAAM,EAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrC,IAAA,eAAM,EAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;QACtD,IAAA,eAAM,EAAC,YAAY,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7D,IAAA,eAAM,EAAC,YAAY,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7D,IAAA,eAAM,EAAC,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3D,IAAA,eAAM,EAAC,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,eAAM,CAAC,gBAAgB,CAAC,yBAAyB,CAAC,CAAC,CAAC;IACxG,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAChG,MAAM,GAAG,GAAG,cAAc,EAAE,CAAC;QAC7B,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAEnB,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE1E,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC;YAC9D,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE;gBACP,IAAI,EAAE,aAAa;aACpB;SACF,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAEb,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE;;;;;;;CAOjD,CAAC,CAAC;QAEC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,yBAAyB,CAAC,CAAC;QAC7E,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAC,EAAE,wBAAwB,CAAC,CAAC;QAE7F,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,CAAC,IAAA,WAAG,EAAC,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAEzF,IAAA,eAAM,EAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzB,IAAA,eAAM,EAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAC9C,IAAA,eAAM,EAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3G,IAAA,eAAM,EAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,GAAG,GAAG,cAAc,EAAE,CAAC;QAC7B,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAEnB,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEzD,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC;YAC9D,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE;gBACP,IAAI,EAAE,aAAa;aACpB;SACF,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAEb,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE;;;;;CAKjD,CAAC,CAAC;QACC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,gDAAgD,CAAC,CAAC;QAChG,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,2BAA2B,CAAC,CAAC;QAC9E,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,gCAAgC,CAAC,CAAC;QAChF,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,8BAA8B,CAAC,CAAC;QAElF,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QACnE,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QAEjE,KAAK,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,cAAc,EAAE,WAAW,CAAC,EAAE,CAAC;YAC9D,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC;QACD,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAEjE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,CAAC,IAAA,oBAAY,EAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;QAE1E,IAAA,eAAM,EAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxD,IAAA,eAAM,EAAC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QACvE,IAAA,eAAM,EAAC,YAAY,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,KAAK,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;QACxE,IAAA,eAAM,EAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,gDAAgD,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpI,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,SAAS,cAAc;IACrB,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAC1E,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,UAAiC;IAC1D,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,WAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,CAAC,OAAiB,EAAE,EAAE;QAChE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,UAAU,EAAE,CAAC;IACpC,OAAO;QACL,QAAQ;QACR,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KAC5B,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,MAA4D,EAAE,EAAU;IAC5F,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AAClE,CAAC"}

package/dist/commands/adf-named-scaffolds.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Named-module scaffold registry.
+ *
+ * Rich scaffolds for canonical policy modules that consumer repos can adopt
+ * with `charter adf create <name>`. The generic empty placeholder in
+ * buildModuleScaffold is the fallback; entries in NAMED_MODULE_SCAFFOLDS
+ * take precedence.
+ *
+ * Each named module also registers default manifest trigger keywords in
+ * NAMED_MODULE_DEFAULT_TRIGGERS. When `charter adf create <name>` is called
+ * without an explicit --triggers flag, these auto-populate the ON_DEMAND
+ * entry so the wiring is a one-command operation.
+ *
+ * Adding a new named module:
+ *   1. Add the scaffold content as an exported const
+ *   2. Register it in NAMED_MODULE_SCAFFOLDS
+ *   3. Register default triggers in NAMED_MODULE_DEFAULT_TRIGGERS
+ *   4. Add tests in __tests__/named-scaffolds.test.ts
+ */
+/**
+ * Typed data access and ontology enforcement policy (Stackbilt-dev/charter#69).
+ *
+ * Codifies the cross-repo policy for how services reference business concepts
+ * (tenant, user, subscription, quota, etc.) — derived from the canonical data
+ * registry at Stackbilt-dev/stackbilt_llc/policies/data-registry.yaml.
+ *
+ * Declares six sensitivity tiers, the disambiguation protocol, and RPC
+ * boundary rules. Consumed by charter validate / codebeast DATA_AUTHORITY /
+ * AEGIS disambiguation firewall as the single source of truth for data
+ * access policy across the ecosystem.
+ */
+export declare const TYPED_DATA_ACCESS_SCAFFOLD = "ADF: 0.1\n\n\uD83C\uDFAF TASK: Typed data access and ontology enforcement policy\n\n\uD83D\uDCCB CONTEXT:\n  - Business concepts (tenant, user, subscription, quota, credit, mrr, etc.) are defined in a canonical data registry \u2014 the single source of truth for ownership, sensitivity, and access shape across the ecosystem\n  - Reference registry location: Stackbilt-dev/stackbilt_llc/policies/data-registry.yaml (22+ concepts, 6 sensitivity tiers)\n  - Each concept declares: owner service, D1 table, sensitivity tier, definition, aliases, rpc_method, mcp_tool\n  - Consumer services derive their KNOWN_CONCEPTS and alias maps from the registry at build time (compiled-const snapshot)\n  - Disambiguation protocol halts on undefined concepts rather than guessing\n  - CodeBeast DATA_AUTHORITY sensitivity class escalates raw D1 access to owned tables\n\n\uD83D\uDD10 SENSITIVITY TIERS [load-bearing]:\n  - public            \u2014 readable from any service, no auth required (e.g., blog_post)\n  - service_internal  \u2014 readable/writable only by the owning service, raw D1 access is fine within the owner\n  - cross_service_rpc \u2014 accessible via declared rpc_method or Service Binding, never raw D1 from a non-owning service\n  - pii_scoped        \u2014 accessible only via owning service + audit_log entry required at the call site\n  - billing_critical  \u2014 writable only by the owning service plus the Stripe webhook handler; never leaves the owning service boundary even via RPC\n  - secrets           \u2014 never leaves the owning service boundary under any circumstance\n\n\u26A0\uFE0F CONSTRAINTS [load-bearing]:\n  - New code referencing a business concept MUST check the canonical registry first; terms not in the registry or its aliases MUST be added before the code lands\n  - Non-owning services reading or writing cross_service_rpc concepts MUST use the declared rpc_method or mcp_tool \u2014 raw D1 access to another service's table is a DATA_AUTHORITY violation\n  - pii_scoped access requires an audit_log entry at the call site \u2014 no silent reads\n  - billing_critical and secrets tiers NEVER cross the owning service boundary, even via RPC\n  - When encountering an undefined data concept in requirements, tasks, or user prompts, HALT and ask for clarification rather than guessing shape, ownership, or sensitivity\n  - Registry updates MUST come before consumer code updates \u2014 the source of truth leads, consumers follow\n  - When promoting a concept to a higher sensitivity tier, all existing consumers of raw D1 access must migrate to RPC in the same change set\n\n\uD83D\uDCD6 ADVISORY:\n  - Check the registry before reaching for a new type definition \u2014 the concept may already exist with a canonical shape\n  - Use charter surface --format json to discover what D1 tables a service currently exposes; cross-reference against registry ownership\n  - Aliases (e.g., \"credits\" for \"quota\") are semantically equivalent; prefer the canonical form in new code, accept aliases in user-facing copy\n  - The disambiguation protocol is load-bearing for autonomous agents \u2014 these systems cannot safely guess business term semantics\n\n\uD83D\uDCCA METRICS:\n  REGISTRY_PATH: stackbilt_llc/policies/data-registry.yaml\n  REGISTRY_REPO: Stackbilt-dev/stackbilt_llc\n  SENSITIVITY_TIERS: 6\n  DOCUMENTED_CONCEPTS: 22\n\n\uD83D\uDD17 REFERENCES:\n  - Stackbilt-dev/charter#69 \u2014 typed data access policy umbrella issue\n  - codebeast#9 \u2014 DATA_AUTHORITY sensitivity class (enforcement side)\n  - Stackbilt-dev/aegis#344 \u2014 disambiguation firewall (runtime halt mechanism)\n";
+/**
+ * Registry of rich named-module scaffolds. When `charter adf create <name>`
+ * matches a name in this map, the corresponding scaffold is written instead
+ * of the generic empty placeholder from buildModuleScaffold's fallback.
+ */
+export declare const NAMED_MODULE_SCAFFOLDS: Record<string, string>;
+/**
+ * Default manifest trigger keywords for named modules. Used when
+ * `charter adf create <name>` matches a known module and no explicit
+ * --triggers flag is provided.
+ */
+export declare const NAMED_MODULE_DEFAULT_TRIGGERS: Record<string, string[]>;
+//# sourceMappingURL=adf-named-scaffolds.d.ts.map

package/dist/commands/adf-named-scaffolds.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adf-named-scaffolds.d.ts","sourceRoot":"","sources":["../../src/commands/adf-named-scaffolds.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,0BAA0B,qjHA6CtC,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAEzD,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAmBlE,CAAC"}

package/dist/commands/adf-named-scaffolds.js

@@ -0,0 +1,114 @@
+"use strict";
+/**
+ * Named-module scaffold registry.
+ *
+ * Rich scaffolds for canonical policy modules that consumer repos can adopt
+ * with `charter adf create <name>`. The generic empty placeholder in
+ * buildModuleScaffold is the fallback; entries in NAMED_MODULE_SCAFFOLDS
+ * take precedence.
+ *
+ * Each named module also registers default manifest trigger keywords in
+ * NAMED_MODULE_DEFAULT_TRIGGERS. When `charter adf create <name>` is called
+ * without an explicit --triggers flag, these auto-populate the ON_DEMAND
+ * entry so the wiring is a one-command operation.
+ *
+ * Adding a new named module:
+ *   1. Add the scaffold content as an exported const
+ *   2. Register it in NAMED_MODULE_SCAFFOLDS
+ *   3. Register default triggers in NAMED_MODULE_DEFAULT_TRIGGERS
+ *   4. Add tests in __tests__/named-scaffolds.test.ts
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NAMED_MODULE_DEFAULT_TRIGGERS = exports.NAMED_MODULE_SCAFFOLDS = exports.TYPED_DATA_ACCESS_SCAFFOLD = void 0;
+/**
+ * Typed data access and ontology enforcement policy (Stackbilt-dev/charter#69).
+ *
+ * Codifies the cross-repo policy for how services reference business concepts
+ * (tenant, user, subscription, quota, etc.) — derived from the canonical data
+ * registry at Stackbilt-dev/stackbilt_llc/policies/data-registry.yaml.
+ *
+ * Declares six sensitivity tiers, the disambiguation protocol, and RPC
+ * boundary rules. Consumed by charter validate / codebeast DATA_AUTHORITY /
+ * AEGIS disambiguation firewall as the single source of truth for data
+ * access policy across the ecosystem.
+ */
+exports.TYPED_DATA_ACCESS_SCAFFOLD = `ADF: 0.1
+
+\u{1F3AF} TASK: Typed data access and ontology enforcement policy
+
+\u{1F4CB} CONTEXT:
+  - Business concepts (tenant, user, subscription, quota, credit, mrr, etc.) are defined in a canonical data registry — the single source of truth for ownership, sensitivity, and access shape across the ecosystem
+  - Reference registry location: Stackbilt-dev/stackbilt_llc/policies/data-registry.yaml (22+ concepts, 6 sensitivity tiers)
+  - Each concept declares: owner service, D1 table, sensitivity tier, definition, aliases, rpc_method, mcp_tool
+  - Consumer services derive their KNOWN_CONCEPTS and alias maps from the registry at build time (compiled-const snapshot)
+  - Disambiguation protocol halts on undefined concepts rather than guessing
+  - CodeBeast DATA_AUTHORITY sensitivity class escalates raw D1 access to owned tables
+
+\u{1F510} SENSITIVITY TIERS [load-bearing]:
+  - public            \u2014 readable from any service, no auth required (e.g., blog_post)
+  - service_internal  \u2014 readable/writable only by the owning service, raw D1 access is fine within the owner
+  - cross_service_rpc \u2014 accessible via declared rpc_method or Service Binding, never raw D1 from a non-owning service
+  - pii_scoped        \u2014 accessible only via owning service + audit_log entry required at the call site
+  - billing_critical  \u2014 writable only by the owning service plus the Stripe webhook handler; never leaves the owning service boundary even via RPC
+  - secrets           \u2014 never leaves the owning service boundary under any circumstance
+
+\u26A0\uFE0F CONSTRAINTS [load-bearing]:
+  - New code referencing a business concept MUST check the canonical registry first; terms not in the registry or its aliases MUST be added before the code lands
+  - Non-owning services reading or writing cross_service_rpc concepts MUST use the declared rpc_method or mcp_tool \u2014 raw D1 access to another service's table is a DATA_AUTHORITY violation
+  - pii_scoped access requires an audit_log entry at the call site \u2014 no silent reads
+  - billing_critical and secrets tiers NEVER cross the owning service boundary, even via RPC
+  - When encountering an undefined data concept in requirements, tasks, or user prompts, HALT and ask for clarification rather than guessing shape, ownership, or sensitivity
+  - Registry updates MUST come before consumer code updates \u2014 the source of truth leads, consumers follow
+  - When promoting a concept to a higher sensitivity tier, all existing consumers of raw D1 access must migrate to RPC in the same change set
+
+\u{1F4D6} ADVISORY:
+  - Check the registry before reaching for a new type definition \u2014 the concept may already exist with a canonical shape
+  - Use charter surface --format json to discover what D1 tables a service currently exposes; cross-reference against registry ownership
+  - Aliases (e.g., "credits" for "quota") are semantically equivalent; prefer the canonical form in new code, accept aliases in user-facing copy
+  - The disambiguation protocol is load-bearing for autonomous agents \u2014 these systems cannot safely guess business term semantics
+
+\u{1F4CA} METRICS:
+  REGISTRY_PATH: stackbilt_llc/policies/data-registry.yaml
+  REGISTRY_REPO: Stackbilt-dev/stackbilt_llc
+  SENSITIVITY_TIERS: 6
+  DOCUMENTED_CONCEPTS: 22
+
+\u{1F517} REFERENCES:
+  - Stackbilt-dev/charter#69 \u2014 typed data access policy umbrella issue
+  - codebeast#9 \u2014 DATA_AUTHORITY sensitivity class (enforcement side)
+  - Stackbilt-dev/aegis#344 \u2014 disambiguation firewall (runtime halt mechanism)
+`;
+/**
+ * Registry of rich named-module scaffolds. When `charter adf create <name>`
+ * matches a name in this map, the corresponding scaffold is written instead
+ * of the generic empty placeholder from buildModuleScaffold's fallback.
+ */
+exports.NAMED_MODULE_SCAFFOLDS = {
+    'typed-data-access': exports.TYPED_DATA_ACCESS_SCAFFOLD,
+};
+/**
+ * Default manifest trigger keywords for named modules. Used when
+ * `charter adf create <name>` matches a known module and no explicit
+ * --triggers flag is provided.
+ */
+exports.NAMED_MODULE_DEFAULT_TRIGGERS = {
+    'typed-data-access': [
+        'tenant',
+        'user',
+        'subscription',
+        'quota',
+        'credit',
+        'mrr',
+        'pii',
+        'sensitivity',
+        'data registry',
+        'ontology',
+        'disambiguation',
+        'DATA_AUTHORITY',
+        'raw D1',
+        'service boundary',
+        'auth_scoped',
+        'billing_critical',
+    ],
+};
+//# sourceMappingURL=adf-named-scaffolds.js.map

package/dist/commands/adf-named-scaffolds.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adf-named-scaffolds.js","sourceRoot":"","sources":["../../src/commands/adf-named-scaffolds.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;;;AAEH;;;;;;;;;;;GAWG;AACU,QAAA,0BAA0B,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6CzC,CAAC;AAEF;;;;GAIG;AACU,QAAA,sBAAsB,GAA2B;IAC5D,mBAAmB,EAAE,kCAA0B;CAChD,CAAC;AAEF;;;;GAIG;AACU,QAAA,6BAA6B,GAA6B;IACrE,mBAAmB,EAAE;QACnB,QAAQ;QACR,MAAM;QACN,cAAc;QACd,OAAO;QACP,QAAQ;QACR,KAAK;QACL,KAAK;QACL,aAAa;QACb,eAAe;QACf,UAAU;QACV,gBAAgB;QAChB,gBAAgB;QAChB,QAAQ;QACR,kBAAkB;QAClB,aAAa;QACb,kBAAkB;KACnB;CACF,CAAC"}

package/dist/commands/adf-tidy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"adf-tidy.d.ts","sourceRoot":"","sources":["../../src/commands/adf-tidy.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAcH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAwE3C,wBAAsB,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAwHzF"}
+{"version":3,"file":"adf-tidy.d.ts","sourceRoot":"","sources":["../../src/commands/adf-tidy.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAeH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAwE3C,wBAAsB,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAwHzF"}

package/dist/commands/adf-tidy.js

@@ -220,7 +220,9 @@ function extractBeyondPointer(content, fileName) {
     const template = getPointerTemplates()[baseName];
     if (!template)
         return '';
-    const lines = content.split('\n');
+    // Strip charter-managed sentinel blocks before scanning for bloat.
+    // Without this, tidy treats the module index table as user-authored content.
+    const lines = (0, adf_1.stripCharterSentinels)(content).split('\n');
     const bloatLines = [];
     let inEnvironmentSection = false;
     let inPointerHeader = true; // Start true — skip the pointer preamble
@@ -254,13 +256,14 @@ function extractBeyondPointer(content, fileName) {
         }
         // Section detection
         if (trimmed.startsWith('## ')) {
-            if (trimmed === '## Environment') {
+            // Environment and Module Index are charter-managed retained sections — not bloat (#71)
+            if (trimmed === '## Environment' || trimmed === '## Module Index') {
                 inEnvironmentSection = true;
                 continue;
             }
             else {
                 inEnvironmentSection = false;
-                // Non-Environment H2 section = bloat
+                // Non-retained H2 section = bloat
                 bloatLines.push(line);
                 continue;
             }