@warnyin/sdlc 0.5.1 → 0.5.2

package/payload/playbook/routing.md

@@ -1,19 +1,19 @@
-# Model routing
-
-Generic tiers only — the harness adapter maps them to real models
-(Claude Code agents: cheap→haiku, balanced→sonnet, deepest→opus).
-
-| Task kind | Tier | Why |
-|---|---|---|
-| requirements shaping, architecture, deep design | deepest | judgment-heavy, small volume |
-| standard implementation (sdlc-builder) | balanced | quality/cost sweet spot |
-| test generation (sdlc-contractor) | cheap | mechanical from the contract table |
-| eval judging (sdlc-evaluator) | cheap | rubric scoring, high volume |
-| review panel passes | cheap–balanced | parallel, bounded scope |
-| learning distillation (sdlc-learner) | cheap | summarization over journals |
-
-Rules:
-- Task lines in change.md may carry `[tier:cheap|balanced|deepest]`; default = balanced.
-- Never send a mechanical task to deepest "to be safe" — that is the waste the
-  routing table exists to prevent.
-- Escalate one tier only after a concrete failure at the current tier (journal it).
+# Model routing
+
+Generic tiers only — the harness adapter maps them to real models
+(Claude Code agents: cheap→haiku, balanced→sonnet, deepest→opus).
+
+| Task kind | Tier | Why |
+|---|---|---|
+| requirements shaping, architecture, deep design | deepest | judgment-heavy, small volume |
+| standard implementation (sdlc-builder) | balanced | quality/cost sweet spot |
+| test generation (sdlc-contractor) | cheap | mechanical from the contract table |
+| eval judging (sdlc-evaluator) | cheap | rubric scoring, high volume |
+| review panel passes | cheap–balanced | parallel, bounded scope |
+| learning distillation (sdlc-learner) | cheap | summarization over journals |
+
+Rules:
+- Task lines in change.md may carry `[tier:cheap|balanced|deepest]`; default = balanced.
+- Never send a mechanical task to deepest "to be safe" — that is the waste the
+  routing table exists to prevent.
+- Escalate one tier only after a concrete failure at the current tier (journal it).

package/payload/playbook/rules-card.md

@@ -1,16 +1,16 @@
-# sdlc rules card
-<!-- ≤40 lines · embedded verbatim in non-Claude tool adapters; Claude gets the same rules enforced by hooks. -->
-
-- Work flows through `sdlc/changes/<id>/change.md`: new → [design] → contract → build → verify → [review] → ship.
-- NEVER edit `sdlc/specs/**` or `sdlc/changes/archive/**` by hand. Living specs change only
-  via a change's `## Delta:` section, merged by `npx @warnyin/sdlc archive <id>` at ship.
-- NEVER hand-edit `journal.ndjson` or `sdlc/.state/**` — they are machine-owned.
-- Write tests + evals (`contract/`) BEFORE code. No implementation while status is `new`.
-- Ambiguity: make the safest assumption and record it under `## Assumptions`; use
-  `[NEEDS CLARIFICATION: q]` only for facts you cannot obtain — resolve all before contract.
-- Respect line caps written in each template comment; run `npx @warnyin/sdlc validate <id>`
-  before claiming any gate passed — a red validator means the gate did NOT pass.
-- Constitution edits go through /sdlc:steer only; always-loaded context ≤ 60 lines total.
-- Verify = real test run + eval rubric. Max 3 fix rounds, then escalate to the human.
-- Hard-floor (security, payments, data-loss, irreversible): tier = deep, human approves ship.
-- Before editing an area, read any steering file whose `pathMatch` covers it.
+# sdlc rules card
+<!-- ≤40 lines · embedded verbatim in non-Claude tool adapters; Claude gets the same rules enforced by hooks. -->
+
+- Work flows through `sdlc/changes/<id>/change.md`: new → [design] → contract → build → verify → [review] → ship.
+- NEVER edit `sdlc/specs/**` or `sdlc/changes/archive/**` by hand. Living specs change only
+  via a change's `## Delta:` section, merged by `npx @warnyin/sdlc archive <id>` at ship.
+- NEVER hand-edit `journal.ndjson` or `sdlc/.state/**` — they are machine-owned.
+- Write tests + evals (`contract/`) BEFORE code. No implementation while status is `new`.
+- Ambiguity: make the safest assumption and record it under `## Assumptions`; use
+  `[NEEDS CLARIFICATION: q]` only for facts you cannot obtain — resolve all before contract.
+- Respect line caps written in each template comment; run `npx @warnyin/sdlc validate <id>`
+  before claiming any gate passed — a red validator means the gate did NOT pass.
+- Constitution edits go through /sdlc:steer only; always-loaded context ≤ 60 lines total.
+- Verify = real test run + eval rubric. Max 3 fix rounds, then escalate to the human.
+- Hard-floor (security, payments, data-loss, irreversible): tier = deep, human approves ship.
+- Before editing an area, read any steering file whose `pathMatch` covers it.

package/payload/playbook/ship.md

@@ -10,6 +10,8 @@ Precondition: `status: verified` (+ review passed when it ran).
    `npx @warnyin/sdlc archive <id>`
    (validates --strict, merges every Delta into `sdlc/specs/`, promotes evals,
    stamps `status: shipped`, moves the folder to `changes/archive/<date>-<id>/`).
+   Any `⚠ MODIFIED Requirement …` line means the new body carried away a scenario
+   the spec still promised: confirm it was intended and name it in the digest.
 3. **Learn** — delegate to `sdlc-learner` (cheap) with the archived change.md +
    its journal.ndjson. It proposes ≤3 items: add-rule (with evidence pointer) /
    expire-or-demote (rule or steering that never fired) / harness tweak.

package/payload/playbook/steer.md

@@ -1,21 +1,21 @@
-# /sdlc:steer — manage the static/dynamic boundary
-
-The ONLY sanctioned way to edit always-loaded context.
-
-1. `node sdlc/.hooks/journal.mjs open-steer`
-2. Apply the requested edits:
-   - New knowledge → a steering file with the LEAST resident inclusion mode that
-     works: `agent` > `manual` > `paths` > `always` (always needs justification).
-   - Constitution edits: SHALL/SHALL NOT lines only. If the always-budget
-     (60 lines) would overflow, something must be demoted or deleted first —
-     name the displaced line explicitly.
-3. Hygiene pass (do it every time, it is 30 seconds):
-   - `/sdlc:observe` data — steering never pointer-hit across the last N changes
-     → propose demote (`paths`→`manual`) or delete.
-   - Rules with no guard/journal evidence of ever mattering → propose expiry.
-   - Apply what the user agrees to (reductions may be applied without asking).
-4. `npx @warnyin/sdlc validate` — the always-budget check must be green.
-5. `node sdlc/.hooks/journal.mjs close`
-
-Learning direction is one-way by design: content flows from always → paths →
-manual → deleted as evidence accumulates. Getting leaner is the success metric.
+# /sdlc:steer — manage the static/dynamic boundary
+
+The ONLY sanctioned way to edit always-loaded context.
+
+1. `node sdlc/.hooks/journal.mjs open-steer`
+2. Apply the requested edits:
+   - New knowledge → a steering file with the LEAST resident inclusion mode that
+     works: `agent` > `manual` > `paths` > `always` (always needs justification).
+   - Constitution edits: SHALL/SHALL NOT lines only. If the always-budget
+     (60 lines) would overflow, something must be demoted or deleted first —
+     name the displaced line explicitly.
+3. Hygiene pass (do it every time, it is 30 seconds):
+   - `/sdlc:observe` data — steering never pointer-hit across the last N changes
+     → propose demote (`paths`→`manual`) or delete.
+   - Rules with no guard/journal evidence of ever mattering → propose expiry.
+   - Apply what the user agrees to (reductions may be applied without asking).
+4. `npx @warnyin/sdlc validate` — the always-budget check must be green.
+5. `node sdlc/.hooks/journal.mjs close`
+
+Learning direction is one-way by design: content flows from always → paths →
+manual → deleted as evidence accumulates. Getting leaner is the success metric.

package/payload/templates/change-deep.md

@@ -1,29 +1,29 @@
----
-id: <kebab-id>
-tier: deep
-status: new
----
-# Change: <title>
-<!-- cap:150 · deep tier: hard-floor surface (security/payments/data-loss/irreversible) or new/multi-capability delta. Human gates apply per Autonomy policy. -->
-
-## Why (≤5 lines)
-<problem + outcome. No solutioning.>
-
-## Assumptions
-- <assumption made instead of asking, with the reason it is safe>
-
-## Delta: <capability>
-
-### ADDED Requirement: <name>
-The system SHALL <behavior>.
-
-#### Scenario: <name>
-- WHEN <condition>
-- THEN <observable outcome>
-
-## Design
-<!-- decisions & trade-offs only — never restate the delta. Escalate irreversible decisions per Autonomy policy. -->
-- decision: <what> · alternatives: <a/b> · because: <why>
-
-## Tasks
-- [ ] T1 <task> [P] [tier:balanced]
+---
+id: <kebab-id>
+tier: deep
+status: new
+---
+# Change: <title>
+<!-- cap:150 · deep tier: hard-floor surface (security/payments/data-loss/irreversible) or new/multi-capability delta. Human gates apply per Autonomy policy. -->
+
+## Why (≤5 lines)
+<problem + outcome. No solutioning.>
+
+## Assumptions
+- <assumption made instead of asking, with the reason it is safe>
+
+## Delta: <capability>
+
+### ADDED Requirement: <name>
+The system SHALL <behavior>.
+
+#### Scenario: <name>
+- WHEN <condition>
+- THEN <observable outcome>
+
+## Design
+<!-- decisions & trade-offs only — never restate the delta. Escalate irreversible decisions per Autonomy policy. -->
+- decision: <what> · alternatives: <a/b> · because: <why>
+
+## Tasks
+- [ ] T1 <task> [P] [tier:balanced]

package/payload/templates/change-standard.md

@@ -1,28 +1,28 @@
----
-id: <kebab-id>
-tier: standard
-status: new
----
-# Change: <title>
-<!-- cap:100 · standard tier. Delta sections ARE the spec change — merged mechanically at ship, never re-narrated. -->
-
-## Why (≤5 lines)
-<problem + outcome. No solutioning.>
-
-## Assumptions
-- <assumption made instead of asking, with the reason it is safe — delete section if none>
-<!-- unresolved ambiguity the agent cannot assume → [NEEDS CLARIFICATION: question] inline where it bites -->
-
-## Delta: <capability>
-
-### ADDED Requirement: <name>
-The system SHALL <behavior>.
-
-#### Scenario: <name>
-- WHEN <condition>
-- THEN <observable outcome>
-
-## Tasks
-<!-- [P] = parallelizable wave · [tier:cheap|balanced|deepest] per the routing table in harness.md -->
-- [ ] T1 <task> [P] [tier:balanced]
-- [ ] T2 <task> [tier:cheap]
+---
+id: <kebab-id>
+tier: standard
+status: new
+---
+# Change: <title>
+<!-- cap:100 · standard tier. Delta sections ARE the spec change — merged mechanically at ship, never re-narrated. -->
+
+## Why (≤5 lines)
+<problem + outcome. No solutioning.>
+
+## Assumptions
+- <assumption made instead of asking, with the reason it is safe — delete section if none>
+<!-- unresolved ambiguity the agent cannot assume → [NEEDS CLARIFICATION: question] inline where it bites -->
+
+## Delta: <capability>
+
+### ADDED Requirement: <name>
+The system SHALL <behavior>.
+
+#### Scenario: <name>
+- WHEN <condition>
+- THEN <observable outcome>
+
+## Tasks
+<!-- [P] = parallelizable wave · [tier:cheap|balanced|deepest] per the routing table in harness.md -->
+- [ ] T1 <task> [P] [tier:balanced]
+- [ ] T2 <task> [tier:cheap]

package/payload/templates/change-vibe.md

@@ -1,19 +1,19 @@
----
-id: <kebab-id>
-tier: vibe
-status: new
----
-# Change: <title>
-<!-- cap:40 · vibe tier = one file, no contract. Reversible, no behavior-contract change, ≤2 files. -->
-
-## Why (≤3 lines)
-<problem + outcome>
-
-## Assumptions
-- <assumption the agent made instead of asking — delete section if none>
-
-## Tasks
-- [ ] T1 <task>
-
-## Receipt (filled at ship)
-- files touched: · test result: · cost:
+---
+id: <kebab-id>
+tier: vibe
+status: new
+---
+# Change: <title>
+<!-- cap:40 · vibe tier = one file, no contract. Reversible, no behavior-contract change, ≤2 files. -->
+
+## Why (≤3 lines)
+<problem + outcome>
+
+## Assumptions
+- <assumption the agent made instead of asking — delete section if none>
+
+## Tasks
+- [ ] T1 <task>
+
+## Receipt (filled at ship)
+- files touched: · test result: · cost:

package/payload/templates/config.yaml

@@ -1,8 +1,8 @@
-# @warnyin/sdlc project config — machine-read; keep minimal.
-language: en
-tools: []            # filled by `warnyin-sdlc init`
-# Optional price table for cost reporting (USD per 1M tokens).
-# prices:
-#   claude-sonnet-5: { input: 3, output: 15, cacheRead: 0.3 }
-# Optional per-artifact cap overrides (see lib/caps.mjs for defaults).
-# caps: {}
+# @warnyin/sdlc project config — machine-read; keep minimal.
+language: en
+tools: []            # filled by `warnyin-sdlc init`
+# Optional price table for cost reporting (USD per 1M tokens).
+# prices:
+#   claude-sonnet-5: { input: 3, output: 15, cacheRead: 0.3 }
+# Optional per-artifact cap overrides (see lib/caps.mjs for defaults).
+# caps: {}

package/payload/templates/constitution.md

@@ -1,14 +1,14 @@
-# Constitution — <project>
-<!-- cap:30 · ALWAYS LOADED: every line here costs tokens in EVERY turn. Prove residency or move it to steering. -->
-
-## Stack (facts only, max 3 lines)
-- <runtime / framework / db — one line each>
-
-## Hard rules (SHALL / SHALL NOT only — no advice)
-- The agent SHALL NOT edit `sdlc/specs/**` or `sdlc/changes/archive/**` outside `/sdlc:ship`.
-- The agent SHALL record every assumption in the change's `## Assumptions` before acting on it.
-- <add a rule each time the agent misbehaves; each new rule must displace an old one once the always-budget (60 lines) is full>
-
-## Workflow
-- Changes flow: new → [design] → contract → build → verify → [review] → ship.
-- Tier by stakes: vibe | standard | deep — triage table lives in `sdlc/harness.md`.
+# Constitution — <project>
+<!-- cap:30 · ALWAYS LOADED: every line here costs tokens in EVERY turn. Prove residency or move it to steering. -->
+
+## Stack (facts only, max 3 lines)
+- <runtime / framework / db — one line each>
+
+## Hard rules (SHALL / SHALL NOT only — no advice)
+- The agent SHALL NOT edit `sdlc/specs/**` or `sdlc/changes/archive/**` outside `/sdlc:ship`.
+- The agent SHALL record every assumption in the change's `## Assumptions` before acting on it.
+- <add a rule each time the agent misbehaves; each new rule must displace an old one once the always-budget (60 lines) is full>
+
+## Workflow
+- Changes flow: new → [design] → contract → build → verify → [review] → ship.
+- Tier by stakes: vibe | standard | deep — triage table lives in `sdlc/harness.md`.

package/payload/templates/contract-evals.md

@@ -1,9 +1,9 @@
-# Eval contract — <change-id>
-<!-- cap:40 · verifies the non-deterministic half: trajectory + quality. Scored by sdlc-evaluator (cheap tier). -->
-
-## Rubric (score 1–5 each)
-- Trajectory: did the agent read the contract before writing code? run tests before claiming done?
-- Quality: <change-specific bars>
-
-## Pass bar
-- all scores ≥ 4 · failures route back to `/sdlc:build` with a cluster note
+# Eval contract — <change-id>
+<!-- cap:40 · verifies the non-deterministic half: trajectory + quality. Scored by sdlc-evaluator (cheap tier). -->
+
+## Rubric (score 1–5 each)
+- Trajectory: did the agent read the contract before writing code? run tests before claiming done?
+- Quality: <change-specific bars>
+
+## Pass bar
+- all scores ≥ 4 · failures route back to `/sdlc:build` with a cluster note

package/payload/templates/contract-tests.md

@@ -1,9 +1,9 @@
-# Test contract — <change-id>
-<!-- cap:60 · written BEFORE code. This is the deterministic half of the contract with the AI; failing tests are generated from this table. -->
-
-| # | Given / When / Then | Kind (unit/int/e2e) | Maps to requirement |
-|---|---|---|---|
-| 1 | <g/w/t> | unit | <requirement name> |
-
-## Out of scope (explicitly untested + why)
-- <item — reason>
+# Test contract — <change-id>
+<!-- cap:60 · written BEFORE code. This is the deterministic half of the contract with the AI; failing tests are generated from this table. -->
+
+| # | Given / When / Then | Kind (unit/int/e2e) | Maps to requirement |
+|---|---|---|---|
+| 1 | <g/w/t> | unit | <requirement name> |
+
+## Out of scope (explicitly untested + why)
+- <item — reason>

package/payload/templates/harness.md

@@ -1,33 +1,33 @@
-# Harness — <project>
-<!-- cap:60 · CONFIGURE-phase output; reviewed like code. Registry + tables only — doctrine lives in sdlc/.playbook/. -->
-
-## Tools & MCP (what the agent may call)
-| Tool/MCP | Scope | Notes |
-|---|---|---|
-| <tool> | <what it may touch> | <when to use> |
-
-## Sandbox & execution
-- test command: `<cmd>`
-- sandbox notes: <where code runs, what it cannot reach>
-
-## Guardrails (mirror of installed hooks — deterministic, the agent cannot skip them)
-- `sdlc/specs/**` and archive are write-locked outside ship.
-- Artifact line caps validated on every write.
-- Session token/cost journaled per change.
-
-## Model routing (generic tiers — the harness adapter maps them to real models)
-| Task kind | Tier |
-|---|---|
-| requirements, architecture, deep design | deepest |
-| standard implementation | balanced |
-| test generation, review passes, mechanical/scaffold, eval judging, learning | cheap |
-
-## Tier triage (stakes → tier)
-- vibe: reversible, no behavior-contract change, ≤2 files.
-- deep: security / payments / data-loss / irreversible surface, new capability, or multi-capability delta.
-- otherwise: standard.
-
-## Autonomy policy
-- auto-ship: vibe, standard.
-- escalate to human: hard-floor (security, payments, data-loss, irreversible), verify failed > 3 rounds,
-  token budget exceeded, information the agent cannot obtain or safely assume.
+# Harness — <project>
+<!-- cap:60 · CONFIGURE-phase output; reviewed like code. Registry + tables only — doctrine lives in sdlc/.playbook/. -->
+
+## Tools & MCP (what the agent may call)
+| Tool/MCP | Scope | Notes |
+|---|---|---|
+| <tool> | <what it may touch> | <when to use> |
+
+## Sandbox & execution
+- test command: `<cmd>`
+- sandbox notes: <where code runs, what it cannot reach>
+
+## Guardrails (mirror of installed hooks — deterministic, the agent cannot skip them)
+- `sdlc/specs/**` and archive are write-locked outside ship.
+- Artifact line caps validated on every write.
+- Session token/cost journaled per change.
+
+## Model routing (generic tiers — the harness adapter maps them to real models)
+| Task kind | Tier |
+|---|---|
+| requirements, architecture, deep design | deepest |
+| standard implementation | balanced |
+| test generation, review passes, mechanical/scaffold, eval judging, learning | cheap |
+
+## Tier triage (stakes → tier)
+- vibe: reversible, no behavior-contract change, ≤2 files.
+- deep: security / payments / data-loss / irreversible surface, new capability, or multi-capability delta.
+- otherwise: standard.
+
+## Autonomy policy
+- auto-ship: vibe, standard.
+- escalate to human: hard-floor (security, payments, data-loss, irreversible), verify failed > 3 rounds,
+  token budget exceeded, information the agent cannot obtain or safely assume.

package/payload/templates/spec.md

@@ -1,14 +1,14 @@
-# Spec: <capability>
-<!-- cap:150 (soft) · living spec — observable behavior only, no implementation detail. Split the capability beyond the cap. -->
-
-## Purpose
-<!-- one or two lines; commands grep this header first (progressive disclosure) -->
-
-## Requirements
-
-### Requirement: <name>
-The system SHALL <behavior>.
-
-#### Scenario: <name>
-- WHEN <condition>
-- THEN <observable outcome>
+# Spec: <capability>
+<!-- cap:150 (soft) · living spec — observable behavior only, no implementation detail. Split the capability beyond the cap. -->
+
+## Purpose
+<!-- one or two lines; commands grep this header first (progressive disclosure) -->
+
+## Requirements
+
+### Requirement: <name>
+The system SHALL <behavior>.
+
+#### Scenario: <name>
+- WHEN <condition>
+- THEN <observable outcome>

package/payload/templates/steering.md

@@ -1,9 +1,9 @@
----
-name: <topic>
-inclusion: paths            # always | paths | manual | agent
-pathMatch: ["src/<area>/**"]
----
-# Steering: <topic>
-<!-- cap:40 · loaded only when pathMatch hits or explicitly requested. Dense, scoped conventions — no generalities. -->
-
-<conventions, gotchas, and reference patterns for this scope>
+---
+name: <topic>
+inclusion: paths            # always | paths | manual | agent
+pathMatch: ["src/<area>/**"]
+---
+# Steering: <topic>
+<!-- cap:40 · loaded only when pathMatch hits or explicitly requested. Dense, scoped conventions — no generalities. -->
+
+<conventions, gotchas, and reference patterns for this scope>

package/scripts/validate.mjs

@@ -1,47 +1,47 @@
-#!/usr/bin/env node
-// Thin CLI wrapper — validator core lives in lib/validate.mjs so that
-// installed hooks (sdlc/.hooks/lib/) can share the exact same logic.
-// Exit codes: 0 = clean, 1 = errors, 2 = usage/setup error.
-
-import fs from 'node:fs';
-import path from 'node:path';
-import process from 'node:process';
-import { fileURLToPath } from 'node:url';
-import { validateAll, formatIssues } from '../lib/validate.mjs';
-
-export * from '../lib/validate.mjs';
-
-function main() {
-  const args = process.argv.slice(2);
-  const strict = args.includes('--strict');
-  const rootIdx = args.indexOf('--root');
-  const projectRoot = rootIdx !== -1 ? args[rootIdx + 1] : process.cwd();
-  const positional = args.filter((a, i) => !a.startsWith('--') && args[i - 1] !== '--root');
-  const changeId = positional[0] && positional[0] !== '--all' ? positional[0] : null;
-
-  const sdlcRoot = path.join(projectRoot, 'sdlc');
-  if (!fs.existsSync(sdlcRoot)) {
-    console.error(`No sdlc/ directory at ${projectRoot} — run \`npx @warnyin/sdlc init\` first.`);
-    process.exit(2);
-  }
-
-  const issues = validateAll(sdlcRoot, { strict, changeId });
-  if (issues.length) console.log(formatIssues(issues));
-  const errors = issues.filter((i) => i.level === 'error').length;
-  const warns = issues.length - errors;
-  console.log(`validate: ${errors} error(s), ${warns} warning(s)${strict ? ' [strict]' : ''}`);
-  process.exit(errors > 0 ? 1 : 0);
-}
-
-function isEntrypoint() {
-  if (!process.argv[1]) return false;
-  try {
-    return fs.realpathSync.native(path.resolve(process.argv[1])) === fileURLToPath(import.meta.url);
-  } catch {
-    return false;
-  }
-}
-
-if (isEntrypoint()) {
-  main();
-}
+#!/usr/bin/env node
+// Thin CLI wrapper — validator core lives in lib/validate.mjs so that
+// installed hooks (sdlc/.hooks/lib/) can share the exact same logic.
+// Exit codes: 0 = clean, 1 = errors, 2 = usage/setup error.
+
+import fs from 'node:fs';
+import path from 'node:path';
+import process from 'node:process';
+import { fileURLToPath } from 'node:url';
+import { validateAll, formatIssues } from '../lib/validate.mjs';
+
+export * from '../lib/validate.mjs';
+
+function main() {
+  const args = process.argv.slice(2);
+  const strict = args.includes('--strict');
+  const rootIdx = args.indexOf('--root');
+  const projectRoot = rootIdx !== -1 ? args[rootIdx + 1] : process.cwd();
+  const positional = args.filter((a, i) => !a.startsWith('--') && args[i - 1] !== '--root');
+  const changeId = positional[0] && positional[0] !== '--all' ? positional[0] : null;
+
+  const sdlcRoot = path.join(projectRoot, 'sdlc');
+  if (!fs.existsSync(sdlcRoot)) {
+    console.error(`No sdlc/ directory at ${projectRoot} — run \`npx @warnyin/sdlc init\` first.`);
+    process.exit(2);
+  }
+
+  const issues = validateAll(sdlcRoot, { strict, changeId });
+  if (issues.length) console.log(formatIssues(issues));
+  const errors = issues.filter((i) => i.level === 'error').length;
+  const warns = issues.length - errors;
+  console.log(`validate: ${errors} error(s), ${warns} warning(s)${strict ? ' [strict]' : ''}`);
+  process.exit(errors > 0 ? 1 : 0);
+}
+
+function isEntrypoint() {
+  if (!process.argv[1]) return false;
+  try {
+    return fs.realpathSync.native(path.resolve(process.argv[1])) === fileURLToPath(import.meta.url);
+  } catch {
+    return false;
+  }
+}
+
+if (isEntrypoint()) {
+  main();
+}