agent-contracts 0.20.0 → 0.22.0

package/dist/cli.js

@@ -7367,7 +7367,7 @@ var init_dist = __esm({
 var require_stable = __commonJS({
   "node_modules/safe-stable-stringify/stable.js"(exports, module) {
     "use strict";
-    module.exports = stringify5;
+    module.exports = stringify4;
     var indentation = "";
     var strEscapeSequencesRegExp = /[\x00-\x1f\x22\x5c]/;
     var strEscapeSequencesReplacer = /[\x00-\x1f\x22\x5c]/g;
@@ -7943,7 +7943,7 @@ ${originalIndentation}`;
       }
       return arr;
     }
-    function stringify5(value, replacer, spacer) {
+    function stringify4(value, replacer, spacer) {
       var i3;
       var indent = "";
       indentation = "";
@@ -7982,9 +7982,9 @@ ${originalIndentation}`;
 var require_safe_stable_stringify = __commonJS({
   "node_modules/safe-stable-stringify/index.js"(exports, module) {
     "use strict";
-    var stringify5 = require_stable();
-    module.exports = stringify5;
-    stringify5.default = stringify5;
+    var stringify4 = require_stable();
+    module.exports = stringify4;
+    stringify4.default = stringify4;
   }
 });
 
@@ -34148,7 +34148,7 @@ var require_astring = __commonJS({
       if (staticProps) _defineProperties(Constructor, staticProps);
       return Constructor;
     }
-    var stringify5 = JSON.stringify;
+    var stringify4 = JSON.stringify;
     if (!String.prototype.repeat) {
       throw new Error("String.prototype.repeat is undefined, see https://github.com/davidbonnet/astring#installation");
     }
@@ -35070,7 +35070,7 @@ var require_astring = __commonJS({
         } else if (node.bigint != null) {
           state.write(node.bigint + "n", node);
         } else {
-          state.write(stringify5(node.value), node);
+          state.write(stringify4(node.value), node);
         }
       },
       RegExpLiteral: function RegExpLiteral(node, state) {
@@ -40457,9 +40457,9 @@ var require_errors = __commonJS({
   }
 });
 
-// node_modules/ajv-formats/dist/formats.js
+// node_modules/@stoplight/spectral-core/node_modules/ajv-formats/dist/formats.js
 var require_formats2 = __commonJS({
-  "node_modules/ajv-formats/dist/formats.js"(exports) {
+  "node_modules/@stoplight/spectral-core/node_modules/ajv-formats/dist/formats.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.formatNames = exports.fastFormats = exports.fullFormats = void 0;
@@ -40624,9 +40624,9 @@ var require_formats2 = __commonJS({
   }
 });
 
-// node_modules/ajv-formats/dist/limit.js
+// node_modules/@stoplight/spectral-core/node_modules/ajv-formats/dist/limit.js
 var require_limit = __commonJS({
-  "node_modules/ajv-formats/dist/limit.js"(exports) {
+  "node_modules/@stoplight/spectral-core/node_modules/ajv-formats/dist/limit.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.formatLimitDefinition = void 0;
@@ -40696,9 +40696,9 @@ var require_limit = __commonJS({
   }
 });
 
-// node_modules/ajv-formats/dist/index.js
+// node_modules/@stoplight/spectral-core/node_modules/ajv-formats/dist/index.js
 var require_dist7 = __commonJS({
-  "node_modules/ajv-formats/dist/index.js"(exports, module) {
+  "node_modules/@stoplight/spectral-core/node_modules/ajv-formats/dist/index.js"(exports, module) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     var formats_1 = require_formats2();
@@ -48101,6 +48101,287 @@ var require_dist12 = __commonJS({
   }
 });
 
+// node_modules/@stoplight/spectral-functions/node_modules/ajv-formats/dist/formats.js
+var require_formats3 = __commonJS({
+  "node_modules/@stoplight/spectral-functions/node_modules/ajv-formats/dist/formats.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.formatNames = exports.fastFormats = exports.fullFormats = void 0;
+    function fmtDef(validate, compare) {
+      return { validate, compare };
+    }
+    exports.fullFormats = {
+      // date: http://tools.ietf.org/html/rfc3339#section-5.6
+      date: fmtDef(date, compareDate),
+      // date-time: http://tools.ietf.org/html/rfc3339#section-5.6
+      time: fmtDef(time, compareTime),
+      "date-time": fmtDef(date_time, compareDateTime),
+      // duration: https://tools.ietf.org/html/rfc3339#appendix-A
+      duration: /^P(?!$)((\d+Y)?(\d+M)?(\d+D)?(T(?=\d)(\d+H)?(\d+M)?(\d+S)?)?|(\d+W)?)$/,
+      uri,
+      "uri-reference": /^(?:[a-z][a-z0-9+\-.]*:)?(?:\/?\/(?:(?:[a-z0-9\-._~!$&'()*+,;=:]|%[0-9a-f]{2})*@)?(?:\[(?:(?:(?:(?:[0-9a-f]{1,4}:){6}|::(?:[0-9a-f]{1,4}:){5}|(?:[0-9a-f]{1,4})?::(?:[0-9a-f]{1,4}:){4}|(?:(?:[0-9a-f]{1,4}:){0,1}[0-9a-f]{1,4})?::(?:[0-9a-f]{1,4}:){3}|(?:(?:[0-9a-f]{1,4}:){0,2}[0-9a-f]{1,4})?::(?:[0-9a-f]{1,4}:){2}|(?:(?:[0-9a-f]{1,4}:){0,3}[0-9a-f]{1,4})?::[0-9a-f]{1,4}:|(?:(?:[0-9a-f]{1,4}:){0,4}[0-9a-f]{1,4})?::)(?:[0-9a-f]{1,4}:[0-9a-f]{1,4}|(?:(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\.){3}(?:25[0-5]|2[0-4]\d|[01]?\d\d?))|(?:(?:[0-9a-f]{1,4}:){0,5}[0-9a-f]{1,4})?::[0-9a-f]{1,4}|(?:(?:[0-9a-f]{1,4}:){0,6}[0-9a-f]{1,4})?::)|[Vv][0-9a-f]+\.[a-z0-9\-._~!$&'()*+,;=:]+)\]|(?:(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\.){3}(?:25[0-5]|2[0-4]\d|[01]?\d\d?)|(?:[a-z0-9\-._~!$&'"()*+,;=]|%[0-9a-f]{2})*)(?::\d*)?(?:\/(?:[a-z0-9\-._~!$&'"()*+,;=:@]|%[0-9a-f]{2})*)*|\/(?:(?:[a-z0-9\-._~!$&'"()*+,;=:@]|%[0-9a-f]{2})+(?:\/(?:[a-z0-9\-._~!$&'"()*+,;=:@]|%[0-9a-f]{2})*)*)?|(?:[a-z0-9\-._~!$&'"()*+,;=:@]|%[0-9a-f]{2})+(?:\/(?:[a-z0-9\-._~!$&'"()*+,;=:@]|%[0-9a-f]{2})*)*)?(?:\?(?:[a-z0-9\-._~!$&'"()*+,;=:@/?]|%[0-9a-f]{2})*)?(?:#(?:[a-z0-9\-._~!$&'"()*+,;=:@/?]|%[0-9a-f]{2})*)?$/i,
+      // uri-template: https://tools.ietf.org/html/rfc6570
+      "uri-template": /^(?:(?:[^\x00-\x20"'<>%\\^`{|}]|%[0-9a-f]{2})|\{[+#./;?&=,!@|]?(?:[a-z0-9_]|%[0-9a-f]{2})+(?::[1-9][0-9]{0,3}|\*)?(?:,(?:[a-z0-9_]|%[0-9a-f]{2})+(?::[1-9][0-9]{0,3}|\*)?)*\})*$/i,
+      // For the source: https://gist.github.com/dperini/729294
+      // For test cases: https://mathiasbynens.be/demo/url-regex
+      url: /^(?:https?|ftp):\/\/(?:\S+(?::\S*)?@)?(?:(?!(?:10|127)(?:\.\d{1,3}){3})(?!(?:169\.254|192\.168)(?:\.\d{1,3}){2})(?!172\.(?:1[6-9]|2\d|3[0-1])(?:\.\d{1,3}){2})(?:[1-9]\d?|1\d\d|2[01]\d|22[0-3])(?:\.(?:1?\d{1,2}|2[0-4]\d|25[0-5])){2}(?:\.(?:[1-9]\d?|1\d\d|2[0-4]\d|25[0-4]))|(?:(?:[a-z0-9\u{00a1}-\u{ffff}]+-)*[a-z0-9\u{00a1}-\u{ffff}]+)(?:\.(?:[a-z0-9\u{00a1}-\u{ffff}]+-)*[a-z0-9\u{00a1}-\u{ffff}]+)*(?:\.(?:[a-z\u{00a1}-\u{ffff}]{2,})))(?::\d{2,5})?(?:\/[^\s]*)?$/iu,
+      email: /^[a-z0-9!#$%&'*+/=?^_`{|}~-]+(?:\.[a-z0-9!#$%&'*+/=?^_`{|}~-]+)*@(?:[a-z0-9](?:[a-z0-9-]*[a-z0-9])?\.)+[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/i,
+      hostname: /^(?=.{1,253}\.?$)[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\.[a-z0-9](?:[-0-9a-z]{0,61}[0-9a-z])?)*\.?$/i,
+      // optimized https://www.safaribooksonline.com/library/view/regular-expressions-cookbook/9780596802837/ch07s16.html
+      ipv4: /^(?:(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\.){3}(?:25[0-5]|2[0-4]\d|[01]?\d\d?)$/,
+      ipv6: /^((([0-9a-f]{1,4}:){7}([0-9a-f]{1,4}|:))|(([0-9a-f]{1,4}:){6}(:[0-9a-f]{1,4}|((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3})|:))|(([0-9a-f]{1,4}:){5}(((:[0-9a-f]{1,4}){1,2})|:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3})|:))|(([0-9a-f]{1,4}:){4}(((:[0-9a-f]{1,4}){1,3})|((:[0-9a-f]{1,4})?:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(([0-9a-f]{1,4}:){3}(((:[0-9a-f]{1,4}){1,4})|((:[0-9a-f]{1,4}){0,2}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(([0-9a-f]{1,4}:){2}(((:[0-9a-f]{1,4}){1,5})|((:[0-9a-f]{1,4}){0,3}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(([0-9a-f]{1,4}:){1}(((:[0-9a-f]{1,4}){1,6})|((:[0-9a-f]{1,4}){0,4}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(:(((:[0-9a-f]{1,4}){1,7})|((:[0-9a-f]{1,4}){0,5}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:)))$/i,
+      regex,
+      // uuid: http://tools.ietf.org/html/rfc4122
+      uuid: /^(?:urn:uuid:)?[0-9a-f]{8}-(?:[0-9a-f]{4}-){3}[0-9a-f]{12}$/i,
+      // JSON-pointer: https://tools.ietf.org/html/rfc6901
+      // uri fragment: https://tools.ietf.org/html/rfc3986#appendix-A
+      "json-pointer": /^(?:\/(?:[^~/]|~0|~1)*)*$/,
+      "json-pointer-uri-fragment": /^#(?:\/(?:[a-z0-9_\-.!$&'()*+,;:=@]|%[0-9a-f]{2}|~0|~1)*)*$/i,
+      // relative JSON-pointer: http://tools.ietf.org/html/draft-luff-relative-json-pointer-00
+      "relative-json-pointer": /^(?:0|[1-9][0-9]*)(?:#|(?:\/(?:[^~/]|~0|~1)*)*)$/,
+      // the following formats are used by the openapi specification: https://spec.openapis.org/oas/v3.0.0#data-types
+      // byte: https://github.com/miguelmota/is-base64
+      byte,
+      // signed 32 bit integer
+      int32: { type: "number", validate: validateInt32 },
+      // signed 64 bit integer
+      int64: { type: "number", validate: validateInt64 },
+      // C-type float
+      float: { type: "number", validate: validateNumber },
+      // C-type double
+      double: { type: "number", validate: validateNumber },
+      // hint to the UI to hide input strings
+      password: true,
+      // unchecked string payload
+      binary: true
+    };
+    exports.fastFormats = {
+      ...exports.fullFormats,
+      date: fmtDef(/^\d\d\d\d-[0-1]\d-[0-3]\d$/, compareDate),
+      time: fmtDef(/^(?:[0-2]\d:[0-5]\d:[0-5]\d|23:59:60)(?:\.\d+)?(?:z|[+-]\d\d(?::?\d\d)?)?$/i, compareTime),
+      "date-time": fmtDef(/^\d\d\d\d-[0-1]\d-[0-3]\d[t\s](?:[0-2]\d:[0-5]\d:[0-5]\d|23:59:60)(?:\.\d+)?(?:z|[+-]\d\d(?::?\d\d)?)$/i, compareDateTime),
+      // uri: https://github.com/mafintosh/is-my-json-valid/blob/master/formats.js
+      uri: /^(?:[a-z][a-z0-9+\-.]*:)(?:\/?\/)?[^\s]*$/i,
+      "uri-reference": /^(?:(?:[a-z][a-z0-9+\-.]*:)?\/?\/)?(?:[^\\\s#][^\s#]*)?(?:#[^\\\s]*)?$/i,
+      // email (sources from jsen validator):
+      // http://stackoverflow.com/questions/201323/using-a-regular-expression-to-validate-an-email-address#answer-8829363
+      // http://www.w3.org/TR/html5/forms.html#valid-e-mail-address (search for 'wilful violation')
+      email: /^[a-z0-9.!#$%&'*+/=?^_`{|}~-]+@[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*$/i
+    };
+    exports.formatNames = Object.keys(exports.fullFormats);
+    function isLeapYear(year) {
+      return year % 4 === 0 && (year % 100 !== 0 || year % 400 === 0);
+    }
+    var DATE = /^(\d\d\d\d)-(\d\d)-(\d\d)$/;
+    var DAYS = [0, 31, 28, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31];
+    function date(str) {
+      const matches = DATE.exec(str);
+      if (!matches)
+        return false;
+      const year = +matches[1];
+      const month = +matches[2];
+      const day = +matches[3];
+      return month >= 1 && month <= 12 && day >= 1 && day <= (month === 2 && isLeapYear(year) ? 29 : DAYS[month]);
+    }
+    function compareDate(d1, d2) {
+      if (!(d1 && d2))
+        return void 0;
+      if (d1 > d2)
+        return 1;
+      if (d1 < d2)
+        return -1;
+      return 0;
+    }
+    var TIME = /^(\d\d):(\d\d):(\d\d)(\.\d+)?(z|[+-]\d\d(?::?\d\d)?)?$/i;
+    function time(str, withTimeZone) {
+      const matches = TIME.exec(str);
+      if (!matches)
+        return false;
+      const hour = +matches[1];
+      const minute = +matches[2];
+      const second = +matches[3];
+      const timeZone = matches[5];
+      return (hour <= 23 && minute <= 59 && second <= 59 || hour === 23 && minute === 59 && second === 60) && (!withTimeZone || timeZone !== "");
+    }
+    function compareTime(t1, t22) {
+      if (!(t1 && t22))
+        return void 0;
+      const a1 = TIME.exec(t1);
+      const a22 = TIME.exec(t22);
+      if (!(a1 && a22))
+        return void 0;
+      t1 = a1[1] + a1[2] + a1[3] + (a1[4] || "");
+      t22 = a22[1] + a22[2] + a22[3] + (a22[4] || "");
+      if (t1 > t22)
+        return 1;
+      if (t1 < t22)
+        return -1;
+      return 0;
+    }
+    var DATE_TIME_SEPARATOR = /t|\s/i;
+    function date_time(str) {
+      const dateTime = str.split(DATE_TIME_SEPARATOR);
+      return dateTime.length === 2 && date(dateTime[0]) && time(dateTime[1], true);
+    }
+    function compareDateTime(dt1, dt2) {
+      if (!(dt1 && dt2))
+        return void 0;
+      const [d1, t1] = dt1.split(DATE_TIME_SEPARATOR);
+      const [d2, t22] = dt2.split(DATE_TIME_SEPARATOR);
+      const res = compareDate(d1, d2);
+      if (res === void 0)
+        return void 0;
+      return res || compareTime(t1, t22);
+    }
+    var NOT_URI_FRAGMENT = /\/|:/;
+    var URI = /^(?:[a-z][a-z0-9+\-.]*:)(?:\/?\/(?:(?:[a-z0-9\-._~!$&'()*+,;=:]|%[0-9a-f]{2})*@)?(?:\[(?:(?:(?:(?:[0-9a-f]{1,4}:){6}|::(?:[0-9a-f]{1,4}:){5}|(?:[0-9a-f]{1,4})?::(?:[0-9a-f]{1,4}:){4}|(?:(?:[0-9a-f]{1,4}:){0,1}[0-9a-f]{1,4})?::(?:[0-9a-f]{1,4}:){3}|(?:(?:[0-9a-f]{1,4}:){0,2}[0-9a-f]{1,4})?::(?:[0-9a-f]{1,4}:){2}|(?:(?:[0-9a-f]{1,4}:){0,3}[0-9a-f]{1,4})?::[0-9a-f]{1,4}:|(?:(?:[0-9a-f]{1,4}:){0,4}[0-9a-f]{1,4})?::)(?:[0-9a-f]{1,4}:[0-9a-f]{1,4}|(?:(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\.){3}(?:25[0-5]|2[0-4]\d|[01]?\d\d?))|(?:(?:[0-9a-f]{1,4}:){0,5}[0-9a-f]{1,4})?::[0-9a-f]{1,4}|(?:(?:[0-9a-f]{1,4}:){0,6}[0-9a-f]{1,4})?::)|[Vv][0-9a-f]+\.[a-z0-9\-._~!$&'()*+,;=:]+)\]|(?:(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\.){3}(?:25[0-5]|2[0-4]\d|[01]?\d\d?)|(?:[a-z0-9\-._~!$&'()*+,;=]|%[0-9a-f]{2})*)(?::\d*)?(?:\/(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})*)*|\/(?:(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})+(?:\/(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})*)*)?|(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})+(?:\/(?:[a-z0-9\-._~!$&'()*+,;=:@]|%[0-9a-f]{2})*)*)(?:\?(?:[a-z0-9\-._~!$&'()*+,;=:@/?]|%[0-9a-f]{2})*)?(?:#(?:[a-z0-9\-._~!$&'()*+,;=:@/?]|%[0-9a-f]{2})*)?$/i;
+    function uri(str) {
+      return NOT_URI_FRAGMENT.test(str) && URI.test(str);
+    }
+    var BYTE = /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/gm;
+    function byte(str) {
+      BYTE.lastIndex = 0;
+      return BYTE.test(str);
+    }
+    var MIN_INT32 = -(2 ** 31);
+    var MAX_INT32 = 2 ** 31 - 1;
+    function validateInt32(value) {
+      return Number.isInteger(value) && value <= MAX_INT32 && value >= MIN_INT32;
+    }
+    function validateInt64(value) {
+      return Number.isInteger(value);
+    }
+    function validateNumber() {
+      return true;
+    }
+    var Z_ANCHOR = /[^\\]\\Z/;
+    function regex(str) {
+      if (Z_ANCHOR.test(str))
+        return false;
+      try {
+        new RegExp(str);
+        return true;
+      } catch (e3) {
+        return false;
+      }
+    }
+  }
+});
+
+// node_modules/@stoplight/spectral-functions/node_modules/ajv-formats/dist/limit.js
+var require_limit2 = __commonJS({
+  "node_modules/@stoplight/spectral-functions/node_modules/ajv-formats/dist/limit.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.formatLimitDefinition = void 0;
+    var ajv_1 = __require("ajv");
+    var codegen_1 = __require("ajv/dist/compile/codegen");
+    var ops = codegen_1.operators;
+    var KWDs = {
+      formatMaximum: { okStr: "<=", ok: ops.LTE, fail: ops.GT },
+      formatMinimum: { okStr: ">=", ok: ops.GTE, fail: ops.LT },
+      formatExclusiveMaximum: { okStr: "<", ok: ops.LT, fail: ops.GTE },
+      formatExclusiveMinimum: { okStr: ">", ok: ops.GT, fail: ops.LTE }
+    };
+    var error = {
+      message: ({ keyword, schemaCode }) => codegen_1.str`should be ${KWDs[keyword].okStr} ${schemaCode}`,
+      params: ({ keyword, schemaCode }) => codegen_1._`{comparison: ${KWDs[keyword].okStr}, limit: ${schemaCode}}`
+    };
+    exports.formatLimitDefinition = {
+      keyword: Object.keys(KWDs),
+      type: "string",
+      schemaType: "string",
+      $data: true,
+      error,
+      code(cxt) {
+        const { gen, data, schemaCode, keyword, it } = cxt;
+        const { opts, self: self2 } = it;
+        if (!opts.validateFormats)
+          return;
+        const fCxt = new ajv_1.KeywordCxt(it, self2.RULES.all.format.definition, "format");
+        if (fCxt.$data)
+          validate$DataFormat();
+        else
+          validateFormat();
+        function validate$DataFormat() {
+          const fmts = gen.scopeValue("formats", {
+            ref: self2.formats,
+            code: opts.code.formats
+          });
+          const fmt = gen.const("fmt", codegen_1._`${fmts}[${fCxt.schemaCode}]`);
+          cxt.fail$data(codegen_1.or(codegen_1._`typeof ${fmt} != "object"`, codegen_1._`${fmt} instanceof RegExp`, codegen_1._`typeof ${fmt}.compare != "function"`, compareCode(fmt)));
+        }
+        function validateFormat() {
+          const format2 = fCxt.schema;
+          const fmtDef = self2.formats[format2];
+          if (!fmtDef || fmtDef === true)
+            return;
+          if (typeof fmtDef != "object" || fmtDef instanceof RegExp || typeof fmtDef.compare != "function") {
+            throw new Error(`"${keyword}": format "${format2}" does not define "compare" function`);
+          }
+          const fmt = gen.scopeValue("formats", {
+            key: format2,
+            ref: fmtDef,
+            code: opts.code.formats ? codegen_1._`${opts.code.formats}${codegen_1.getProperty(format2)}` : void 0
+          });
+          cxt.fail$data(compareCode(fmt));
+        }
+        function compareCode(fmt) {
+          return codegen_1._`${fmt}.compare(${data}, ${schemaCode}) ${KWDs[keyword].fail} 0`;
+        }
+      },
+      dependencies: ["format"]
+    };
+    var formatLimitPlugin = (ajv2) => {
+      ajv2.addKeyword(exports.formatLimitDefinition);
+      return ajv2;
+    };
+    exports.default = formatLimitPlugin;
+  }
+});
+
+// node_modules/@stoplight/spectral-functions/node_modules/ajv-formats/dist/index.js
+var require_dist13 = __commonJS({
+  "node_modules/@stoplight/spectral-functions/node_modules/ajv-formats/dist/index.js"(exports, module) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    var formats_1 = require_formats3();
+    var limit_1 = require_limit2();
+    var codegen_1 = __require("ajv/dist/compile/codegen");
+    var fullName = new codegen_1.Name("fullFormats");
+    var fastName = new codegen_1.Name("fastFormats");
+    var formatsPlugin = (ajv2, opts = { keywords: true }) => {
+      if (Array.isArray(opts)) {
+        addFormats(ajv2, opts, formats_1.fullFormats, fullName);
+        return ajv2;
+      }
+      const [formats, exportName] = opts.mode === "fast" ? [formats_1.fastFormats, fastName] : [formats_1.fullFormats, fullName];
+      const list = opts.formats || formats_1.formatNames;
+      addFormats(ajv2, list, formats, exportName);
+      if (opts.keywords)
+        limit_1.default(ajv2);
+      return ajv2;
+    };
+    formatsPlugin.get = (name, mode = "full") => {
+      const formats = mode === "fast" ? formats_1.fastFormats : formats_1.fullFormats;
+      const f2 = formats[name];
+      if (!f2)
+        throw new Error(`Unknown format "${name}"`);
+      return f2;
+    };
+    function addFormats(ajv2, list, fs, exportName) {
+      var _a;
+      var _b;
+      (_a = (_b = ajv2.opts.code).formats) !== null && _a !== void 0 ? _a : _b.formats = codegen_1._`require("ajv-formats/dist/formats").${exportName}`;
+      for (const f2 of list)
+        ajv2.addFormat(f2, fs[f2]);
+    }
+    module.exports = exports = formatsPlugin;
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.default = formatsPlugin;
+  }
+});
+
 // node_modules/@stoplight/spectral-functions/dist/schema/draft4.json
 var require_draft42 = __commonJS({
   "node_modules/@stoplight/spectral-functions/dist/schema/draft4.json"(exports, module) {
@@ -48255,7 +48536,7 @@ var require_ajv2 = __commonJS({
     var _2019_1 = (0, tslib_1.__importDefault)(__require("ajv/dist/2019"));
     var _2020_1 = (0, tslib_1.__importDefault)(__require("ajv/dist/2020"));
     var ajv_draft_04_1 = (0, tslib_1.__importDefault)(require_dist12());
-    var ajv_formats_1 = (0, tslib_1.__importDefault)(require_dist7());
+    var ajv_formats_1 = (0, tslib_1.__importDefault)(require_dist13());
     var ajv_errors_1 = (0, tslib_1.__importDefault)(require_dist8());
     var draft6MetaSchema = (0, tslib_1.__importStar)(__require("ajv/dist/refs/json-schema-draft-06.json"));
     var draft4MetaSchema = (0, tslib_1.__importStar)(require_draft42());
@@ -48546,7 +48827,7 @@ var require_or = __commonJS({
 });
 
 // node_modules/@stoplight/spectral-functions/dist/index.js
-var require_dist13 = __commonJS({
+var require_dist14 = __commonJS({
   "node_modules/@stoplight/spectral-functions/dist/index.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
@@ -48611,11 +48892,579 @@ var require_dist13 = __commonJS({
 import { readFileSync as readFileSync2 } from "fs";
 import { fileURLToPath } from "url";
 import { resolve as resolve8, dirname as dirname8 } from "path";
-import { Command as Command9 } from "commander";
 
-// src/cli/commands/resolve.ts
+// src/generated/cli-contract/program.ts
 import { Command } from "commander";
 
+// src/generated/cli-contract/policy.ts
+import { derivePolicy, isOptionActive } from "cli-contracts/policy";
+var commandDefinitions = {
+  "resolve": {
+    "options": [
+      {
+        "name": "config",
+        "schema": {
+          "type": "string"
+        },
+        "file": {
+          "mode": "read",
+          "exists": false,
+          "mediaType": "application/yaml",
+          "encoding": "utf-8"
+        }
+      },
+      {
+        "name": "team",
+        "schema": {
+          "type": "string"
+        }
+      },
+      {
+        "name": "format",
+        "schema": {
+          "type": "string",
+          "enum": [
+            "text",
+            "json"
+          ],
+          "default": "text"
+        }
+      },
+      {
+        "name": "expand-defaults",
+        "schema": {
+          "type": "boolean",
+          "default": false
+        }
+      }
+    ]
+  },
+  "validate": {
+    "options": [
+      {
+        "name": "config",
+        "schema": {
+          "type": "string"
+        },
+        "file": {
+          "mode": "read",
+          "exists": false,
+          "mediaType": "application/yaml",
+          "encoding": "utf-8"
+        }
+      },
+      {
+        "name": "team",
+        "schema": {
+          "type": "string"
+        }
+      },
+      {
+        "name": "format",
+        "schema": {
+          "type": "string",
+          "enum": [
+            "text",
+            "json"
+          ],
+          "default": "text"
+        }
+      },
+      {
+        "name": "quiet",
+        "schema": {
+          "type": "boolean",
+          "default": false
+        }
+      },
+      {
+        "name": "strict",
+        "schema": {
+          "type": "boolean",
+          "default": false
+        }
+      }
+    ]
+  },
+  "lint": {
+    "options": [
+      {
+        "name": "config",
+        "schema": {
+          "type": "string"
+        },
+        "file": {
+          "mode": "read",
+          "exists": false,
+          "mediaType": "application/yaml",
+          "encoding": "utf-8"
+        }
+      },
+      {
+        "name": "team",
+        "schema": {
+          "type": "string"
+        }
+      },
+      {
+        "name": "format",
+        "schema": {
+          "type": "string",
+          "enum": [
+            "text",
+            "json"
+          ],
+          "default": "text"
+        }
+      },
+      {
+        "name": "quiet",
+        "schema": {
+          "type": "boolean",
+          "default": false
+        }
+      },
+      {
+        "name": "strict",
+        "schema": {
+          "type": "boolean",
+          "default": false
+        }
+      }
+    ]
+  },
+  "render": {
+    "effects": {
+      "riskLevel": "medium",
+      "writes": [
+        {
+          "target": "configured render output paths",
+          "description": "rendered template files from DSL input",
+          "overwrite": true,
+          "idempotent": true,
+          "idempotentNote": "Output is deterministic from DSL input and templates. Repeated runs produce identical files."
+        }
+      ]
+    },
+    "options": [
+      {
+        "name": "config",
+        "schema": {
+          "type": "string"
+        },
+        "file": {
+          "mode": "read",
+          "exists": false,
+          "mediaType": "application/yaml",
+          "encoding": "utf-8"
+        }
+      },
+      {
+        "name": "team",
+        "schema": {
+          "type": "string"
+        }
+      },
+      {
+        "name": "check",
+        "schema": {
+          "type": "boolean",
+          "default": false
+        }
+      },
+      {
+        "name": "quiet",
+        "schema": {
+          "type": "boolean",
+          "default": false
+        }
+      }
+    ]
+  },
+  "check": {
+    "options": [
+      {
+        "name": "config",
+        "schema": {
+          "type": "string"
+        },
+        "file": {
+          "mode": "read",
+          "exists": false,
+          "mediaType": "application/yaml",
+          "encoding": "utf-8"
+        }
+      },
+      {
+        "name": "team",
+        "schema": {
+          "type": "string"
+        }
+      },
+      {
+        "name": "format",
+        "schema": {
+          "type": "string",
+          "enum": [
+            "text",
+            "json"
+          ],
+          "default": "text"
+        }
+      },
+      {
+        "name": "quiet",
+        "schema": {
+          "type": "boolean",
+          "default": false
+        }
+      },
+      {
+        "name": "strict",
+        "schema": {
+          "type": "boolean",
+          "default": false
+        }
+      }
+    ]
+  },
+  "score": {
+    "options": [
+      {
+        "name": "config",
+        "schema": {
+          "type": "string"
+        },
+        "file": {
+          "mode": "read",
+          "exists": false,
+          "mediaType": "application/yaml",
+          "encoding": "utf-8"
+        }
+      },
+      {
+        "name": "team",
+        "schema": {
+          "type": "string"
+        }
+      },
+      {
+        "name": "format",
+        "schema": {
+          "type": "string",
+          "enum": [
+            "text",
+            "json"
+          ],
+          "default": "text"
+        }
+      },
+      {
+        "name": "threshold",
+        "schema": {
+          "type": "integer"
+        }
+      }
+    ]
+  },
+  "audit": {
+    "effects": {
+      "riskLevel": "medium",
+      "network": {
+        "description": "LLM API calls to configured adapter (e.g. OpenAI, Gemini, Cursor). Incurs token cost and sends DSL content to the LLM provider.",
+        "idempotent": false,
+        "idempotentNote": "LLM inference is non-deterministic \u2014 identical inputs may produce different findings across runs."
+      }
+    },
+    "options": [
+      {
+        "name": "config",
+        "schema": {
+          "type": "string"
+        },
+        "file": {
+          "mode": "read",
+          "exists": false,
+          "mediaType": "application/yaml",
+          "encoding": "utf-8"
+        }
+      },
+      {
+        "name": "team",
+        "schema": {
+          "type": "string"
+        }
+      },
+      {
+        "name": "format",
+        "schema": {
+          "type": "string",
+          "enum": [
+            "text",
+            "json",
+            "markdown"
+          ],
+          "default": "text"
+        }
+      },
+      {
+        "name": "scope",
+        "schema": {
+          "type": "string"
+        }
+      },
+      {
+        "name": "dry-run",
+        "schema": {
+          "type": "boolean",
+          "default": false
+        }
+      },
+      {
+        "name": "adapter",
+        "schema": {
+          "type": "string"
+        }
+      },
+      {
+        "name": "model",
+        "schema": {
+          "type": "string"
+        }
+      },
+      {
+        "name": "fail-on",
+        "schema": {
+          "type": "string",
+          "enum": [
+            "info",
+            "warning",
+            "error",
+            "critical"
+          ],
+          "default": "critical"
+        }
+      },
+      {
+        "name": "output",
+        "schema": {
+          "type": "string"
+        },
+        "file": {
+          "mode": "write",
+          "encoding": "utf-8"
+        }
+      },
+      {
+        "name": "report-format",
+        "schema": {
+          "type": "string",
+          "enum": [
+            "text",
+            "json",
+            "markdown"
+          ],
+          "default": "text"
+        }
+      }
+    ]
+  },
+  "generate": {
+    "effects": {
+      "riskLevel": "low",
+      "writes": [
+        {
+          "target": "configured render, guardrail, and interface output paths",
+          "description": "template files, guardrail binding files, and/or team interface files generated from DSL input",
+          "overwrite": true,
+          "idempotent": true,
+          "idempotentNote": "Output is deterministic from DSL input, templates, policies, and bindings. Repeated runs produce identical files."
+        }
+      ]
+    },
+    "options": [
+      {
+        "name": "config",
+        "schema": {
+          "type": "string"
+        },
+        "file": {
+          "mode": "read",
+          "exists": false,
+          "mediaType": "application/yaml",
+          "encoding": "utf-8"
+        }
+      },
+      {
+        "name": "team",
+        "schema": {
+          "type": "string"
+        }
+      },
+      {
+        "name": "check",
+        "schema": {
+          "type": "boolean",
+          "default": false
+        }
+      },
+      {
+        "name": "binding",
+        "schema": {
+          "type": "string"
+        },
+        "repeatable": true
+      },
+      {
+        "name": "output",
+        "schema": {
+          "type": "string"
+        },
+        "file": {
+          "mode": "write",
+          "mediaType": "application/yaml",
+          "encoding": "utf-8"
+        }
+      },
+      {
+        "name": "format",
+        "schema": {
+          "type": "string",
+          "enum": [
+            "yaml",
+            "json"
+          ],
+          "default": "yaml"
+        }
+      },
+      {
+        "name": "dry-run",
+        "schema": {
+          "type": "boolean",
+          "default": false
+        }
+      },
+      {
+        "name": "quiet",
+        "schema": {
+          "type": "boolean",
+          "default": false
+        }
+      }
+    ]
+  }
+};
+function deriveCommandPolicy(commandId, optionValues) {
+  const def = commandDefinitions[commandId];
+  if (!def) throw new Error(`Unknown command: ${commandId}`);
+  const cmdDef = def;
+  const options = {};
+  const activeOptions = [];
+  for (const optDef of cmdDef.options ?? []) {
+    const value = optionValues[optDef.name];
+    const specified = optDef.name in optionValues && value !== void 0;
+    options[optDef.name] = { value, specified, definition: optDef };
+    if (isOptionActive(optDef, value, specified)) {
+      activeOptions.push(optDef.name);
+    }
+  }
+  const policy = derivePolicy({
+    commandId,
+    commandEffects: cmdDef.effects,
+    options,
+    env: cmdDef.env
+  });
+  return { command: commandId, activeOptions, policy };
+}
+
+// src/generated/cli-contract/program.ts
+function createProgram(handlers2, version) {
+  const program2 = new Command();
+  program2.name("agent-contracts").version(version, "-V, --version").description("Agent contracts tooling \u2014 validate, lint, render DSL files.");
+  program2.option("--introspect", "Output derived policy as JSON without executing the command");
+  program2.command("resolve").description("Resolve DSL (load + merge extends) and output YAML.").argument("[dir]", "Path to agent-contracts.yaml.").option("-c, --config <path>", "Path to agent-contracts.config.yaml.").option("--team <id>", "Limit to one team (multi-team config only).").option("--format <format>", "Output format.", "text").option("--expand-defaults", "Expand all Zod default values in output. Fields like required_validations, tags, and can_read_artifacts are written explicitly instead of relying on schema defaults.", false).action(async (dir, opts, cmd) => {
+    const globalOpts = cmd.optsWithGlobals();
+    if (globalOpts.introspect) {
+      const policy = deriveCommandPolicy("resolve", opts);
+      console.log(JSON.stringify(policy, null, 2));
+      return;
+    }
+    await handlers2.resolve(dir, opts, globalOpts);
+  });
+  program2.command("validate").description("Validate DSL against schema and check references.").argument("[dir]", "Path to agent-contracts.yaml.").option("-c, --config <path>", "Path to agent-contracts.config.yaml.").option("--team <id>", "Limit to one team (multi-team config only).").option("--format <format>", "Diagnostic output format.", "text").option("--quiet", "Suppress output on success.", false).option("--strict", "Treat warnings as errors.", false).action(async (dir, opts, cmd) => {
+    const globalOpts = cmd.optsWithGlobals();
+    if (globalOpts.introspect) {
+      const policy = deriveCommandPolicy("validate", opts);
+      console.log(JSON.stringify(policy, null, 2));
+      return;
+    }
+    await handlers2.validate(dir, opts, globalOpts);
+  });
+  program2.command("lint").description("Run semantic lint rules on resolved DSL.").argument("[dir]", "Path to agent-contracts.yaml.").option("-c, --config <path>", "Path to agent-contracts.config.yaml.").option("--team <id>", "Limit to one team (multi-team config only).").option("--format <format>", "Output format.", "text").option("--quiet", "Suppress output on success.", false).option("--strict", "Treat warnings as errors.", false).action(async (dir, opts, cmd) => {
+    const globalOpts = cmd.optsWithGlobals();
+    if (globalOpts.introspect) {
+      const policy = deriveCommandPolicy("lint", opts);
+      console.log(JSON.stringify(policy, null, 2));
+      return;
+    }
+    await handlers2.lint(dir, opts, globalOpts);
+  });
+  program2.command("render").description("(deprecated) Alias for 'generate templates'.").option("-c, --config <path>", "Path to agent-contracts.config.yaml.").option("--team <id>", "Limit to one team (multi-team config only).").option("--check", "Check for template drift without writing files.", false).option("--quiet", "Suppress output on success.", false).action(async (opts, cmd) => {
+    const globalOpts = cmd.optsWithGlobals();
+    if (globalOpts.introspect) {
+      const policy = deriveCommandPolicy("render", opts);
+      console.log(JSON.stringify(policy, null, 2));
+      return;
+    }
+    await handlers2.render(opts, globalOpts);
+  });
+  program2.command("check").description("Run full pipeline \u2014 resolve, validate, lint, render --check.").option("-c, --config <path>", "Path to agent-contracts.config.yaml.").option("--team <id>", "Limit to one team (multi-team config only).").option("--format <format>", "Diagnostic output format.", "text").option("--quiet", "Suppress output on success.", false).option("--strict", "Treat warnings as errors.", false).action(async (opts, cmd) => {
+    const globalOpts = cmd.optsWithGlobals();
+    if (globalOpts.introspect) {
+      const policy = deriveCommandPolicy("check", opts);
+      console.log(JSON.stringify(policy, null, 2));
+      return;
+    }
+    await handlers2.check(opts, globalOpts);
+  });
+  program2.command("score").description("Calculate DSL completeness score.").argument("[dir]", "Path to agent-contracts.yaml.").option("-c, --config <path>", "Path to agent-contracts.config.yaml.").option("--team <id>", "Limit to one team (multi-team config only).").option("--format <format>", "Output format.", "text").option("--threshold <number>", "Minimum score; exit 1 if below (for CI gates).").action(async (dir, opts, cmd) => {
+    const globalOpts = cmd.optsWithGlobals();
+    if (globalOpts.introspect) {
+      const policy = deriveCommandPolicy("score", opts);
+      console.log(JSON.stringify(policy, null, 2));
+      return;
+    }
+    await handlers2.score(dir, opts, globalOpts);
+  });
+  program2.command("audit").description("Run LLM-based semantic audit on DSL definitions and generated outputs.").argument("[type]", "Audit type to run: render (semantic diff of generated outputs vs DSL), dsl (design coherence review), prompt (generated prompt fidelity check), or all (run all three).").option("-c, --config <path>", "Path to agent-contracts.config.yaml.").option("--team <id>", "Limit to one team (multi-team config only).").option("--format <format>", "Output format.", "text").option("--scope <entities>", "Limit audit scope to specified entities (e.g. agents:architect,implementer).").option("--dry-run", "Output the audit prompt without calling LLM.", false).option("--adapter <name>", "SDK adapter to use for LLM calls (overrides config audit.adapter).").option("--model <name>", "LLM model override (overrides config audit.model).").option("--fail-on <level>", "Minimum finding severity that causes exit 10 (info|warning|error|critical).", "critical").option("-o, --output <file>", "Write result to a file instead of stdout.").option("--report-format <fmt>", "Alias for --format. When both are specified, --report-format takes precedence.", "text").action(async (type, opts, cmd) => {
+    const globalOpts = cmd.optsWithGlobals();
+    if (globalOpts.introspect) {
+      const policy = deriveCommandPolicy("audit", opts);
+      console.log(JSON.stringify(policy, null, 2));
+      return;
+    }
+    await handlers2.audit(type, opts, globalOpts);
+  });
+  program2.command("generate").description("Generate artifacts from DSL \u2014 templates, guardrails, and/or interface.").argument("[type]", "Type of artifacts to generate. Omit to run all targets.").option("-c, --config <path>", "Path to agent-contracts.config.yaml.").option("--team <id>", "Limit to one team (multi-team config only).").option("--check", "Check for template drift without writing files. Only applies to the templates target.", false).option("--binding <name...>", "Filter to specific software binding(s). Guardrails type only.").option("-o, --output <path>", "Output path for generated team interface. Interface type only.").option("--format <format>", "Output format for team interface (yaml or json). Interface type only.", "yaml").option("--dry-run", "Print what would be generated without writing files.", false).option("--quiet", "Suppress output on success.", false).action(async (type, opts, cmd) => {
+    const globalOpts = cmd.optsWithGlobals();
+    if (globalOpts.introspect) {
+      const policy = deriveCommandPolicy("generate", opts);
+      console.log(JSON.stringify(policy, null, 2));
+      return;
+    }
+    await handlers2.generate(type, opts, globalOpts);
+  });
+  return program2;
+}
+
+// src/cli/handlers.ts
+import { writeFileSync as writeFileSync2 } from "fs";
+import { existsSync, readFileSync } from "fs";
+import { join as join3, dirname as dirname7 } from "path";
+import { resolve as pathResolve } from "path";
+import { access as access2 } from "fs/promises";
+import { stringify as stringify3, parse as parseYaml4 } from "yaml";
+
 // src/config/binding-loader.ts
 import { readFile as readFile3 } from "fs/promises";
 import { dirname as dirname4, resolve as resolve5 } from "path";
@@ -50191,85 +51040,6 @@ ${issues}`,
   return results;
 }
 
-// src/cli/commands/resolve.ts
-import { stringify } from "yaml";
-
-// src/cli/multi-team.ts
-function isMultiTeamConfig(config) {
-  return config.teams !== void 0 && Object.keys(config.teams).length > 0;
-}
-function getTeamEntries(config, teamFilter) {
-  if (!config.teams) return [];
-  const entries = Object.entries(config.teams);
-  if (teamFilter) {
-    const found = entries.filter(([k2]) => k2 === teamFilter);
-    if (found.length === 0) {
-      throw new Error(
-        `Team "${teamFilter}" not found. Available teams: ${entries.map(([k2]) => k2).join(", ")}`
-      );
-    }
-    return found;
-  }
-  return entries;
-}
-
-// src/cli/commands/resolve.ts
-var DIR_DEFAULT = "agent-contracts.yaml";
-var resolveCommand = new Command("resolve").description("Resolve DSL (load + merge extends) and output YAML").argument("[dir]", "Path to agent-contracts.yaml", DIR_DEFAULT).option("-c, --config <path>", "Path to agent-contracts.config.yaml").option("--team <id>", "Limit to one team (multi-team config only)").option("--format <format>", "Output format (text|json)", "text").option("--expand-defaults", "Expand all Zod default values in output", false).action(
-  async (dir, opts) => {
-    try {
-      const config = await loadConfig(opts.config);
-      if (config !== null && isMultiTeamConfig(config)) {
-        const teamEntries = getTeamEntries(config, opts.team);
-        if (opts.format === "json") {
-          const out = {};
-          for (const [teamId, teamConfig] of teamEntries) {
-            const result2 = await resolve4(teamConfig.dsl);
-            let data2 = teamConfig.vars ? substituteVars(result2.data, teamConfig.vars) : result2.data;
-            if (opts.expandDefaults) {
-              data2 = expandDefaults(data2);
-            }
-            out[teamId] = data2;
-          }
-          process.stdout.write(JSON.stringify(out, null, 2) + "\n");
-        } else {
-          for (const [teamId, teamConfig] of teamEntries) {
-            process.stdout.write(`
---- Team: ${teamId} ---
-`);
-            const result2 = await resolve4(teamConfig.dsl);
-            let data2 = teamConfig.vars ? substituteVars(result2.data, teamConfig.vars) : result2.data;
-            if (opts.expandDefaults) {
-              data2 = expandDefaults(data2);
-            }
-            process.stdout.write(stringify(data2));
-          }
-        }
-        return;
-      }
-      const dslPath = resolveDslPath(dir, DIR_DEFAULT, config);
-      const result = await resolve4(dslPath);
-      let data = config?.vars ? substituteVars(result.data, config.vars) : result.data;
-      if (opts.expandDefaults) {
-        data = expandDefaults(data);
-      }
-      if (opts.format === "json") {
-        process.stdout.write(JSON.stringify(data, null, 2) + "\n");
-      } else {
-        process.stdout.write(stringify(data));
-      }
-    } catch (err) {
-      const msg = err instanceof Error ? err.message : String(err);
-      process.stderr.write(`Error: ${msg}
-`);
-      process.exit(1);
-    }
-  }
-);
-
-// src/cli/commands/validate.ts
-import { Command as Command2 } from "commander";
-
 // src/validator/schema-validator.ts
 import Ajv from "ajv";
 import { z as z18 } from "zod";
@@ -51391,107 +52161,6 @@ function validateHandoffSchemas(dsl) {
   return diagnostics;
 }
 
-// src/cli/format.ts
-function formatDiagnostics(diagnostics, options) {
-  if (options.quiet && diagnostics.length === 0) return "";
-  if (options.format === "json") {
-    return JSON.stringify(diagnostics, null, 2);
-  }
-  return diagnostics.map((d2) => {
-    const severity = d2.severity ?? d2.code ?? "error";
-    const rule = d2.ruleId ?? d2.code ?? "";
-    return `${d2.path}: ${severity} [${rule}] ${d2.message}`;
-  }).join("\n");
-}
-
-// src/cli/commands/validate.ts
-var DIR_DEFAULT2 = "agent-contracts.yaml";
-var validateCommand = new Command2("validate").description("Validate DSL against schema and check references").argument("[dir]", "Path to agent-contracts.yaml", DIR_DEFAULT2).option("-c, --config <path>", "Path to agent-contracts.config.yaml").option("--team <id>", "Limit to one team (multi-team config only)").option("--format <format>", "Output format (text|json)", "text").option("--quiet", "Suppress output on success", false).option("--strict", "Treat warnings as errors", false).action(
-  async (dir, opts) => {
-    try {
-      const config = await loadConfig(opts.config);
-      if (config !== null && isMultiTeamConfig(config)) {
-        const teamEntries = getTeamEntries(config, opts.team);
-        let hasErrors = false;
-        let allTeamsFullyClean = true;
-        for (const [teamId, teamConfig] of teamEntries) {
-          if (!opts.quiet) process.stdout.write(`
---- Team: ${teamId} ---
-`);
-          const resolved2 = await resolve4(teamConfig.dsl);
-          const data2 = teamConfig.vars ? substituteVars(resolved2.data, teamConfig.vars) : resolved2.data;
-          const schemaResult2 = validateSchema(data2);
-          const schemaWarnings2 = schemaResult2.diagnostics.filter(
-            (d2) => d2.severity === "warning"
-          );
-          if (!schemaResult2.success) {
-            const output = formatDiagnostics(schemaResult2.diagnostics, opts);
-            if (output) process.stderr.write(output + "\n");
-            hasErrors = true;
-            allTeamsFullyClean = false;
-            continue;
-          }
-          const refDiags2 = checkReferences(schemaResult2.data);
-          const handoffDiags2 = validateHandoffSchemas(schemaResult2.data);
-          const allDiags2 = [...refDiags2, ...handoffDiags2, ...schemaWarnings2];
-          const hasWarnings2 = allDiags2.some(
-            (d2) => "severity" in d2 && d2.severity === "warning"
-          );
-          if (allDiags2.length > 0) {
-            allTeamsFullyClean = false;
-            const output = formatDiagnostics(allDiags2, opts);
-            if (output) process.stderr.write(output + "\n");
-            if (refDiags2.length > 0 || handoffDiags2.length > 0 || opts.strict && hasWarnings2) {
-              hasErrors = true;
-            }
-          }
-        }
-        if (hasErrors) process.exit(1);
-        if (!opts.quiet && allTeamsFullyClean) {
-          process.stdout.write("Validation passed.\n");
-        }
-        return;
-      }
-      const dslPath = resolveDslPath(dir, DIR_DEFAULT2, config);
-      const resolved = await resolve4(dslPath);
-      const data = config?.vars ? substituteVars(resolved.data, config.vars) : resolved.data;
-      const schemaResult = validateSchema(data);
-      const schemaWarnings = schemaResult.diagnostics.filter(
-        (d2) => d2.severity === "warning"
-      );
-      if (!schemaResult.success) {
-        const output = formatDiagnostics(schemaResult.diagnostics, opts);
-        if (output) process.stderr.write(output + "\n");
-        process.exit(1);
-      }
-      const refDiags = checkReferences(schemaResult.data);
-      const handoffDiags = validateHandoffSchemas(schemaResult.data);
-      const allDiags = [...refDiags, ...handoffDiags, ...schemaWarnings];
-      const hasWarnings = allDiags.some(
-        (d2) => "severity" in d2 && d2.severity === "warning"
-      );
-      if (allDiags.length > 0) {
-        const output = formatDiagnostics(allDiags, opts);
-        if (output) process.stderr.write(output + "\n");
-        if (refDiags.length > 0 || handoffDiags.length > 0 || opts.strict && hasWarnings) {
-          process.exit(1);
-        }
-      }
-      if (!opts.quiet && allDiags.length === 0) {
-        process.stdout.write("Validation passed.\n");
-      }
-    } catch (err) {
-      const msg = err instanceof Error ? err.message : String(err);
-      process.stderr.write(`Error: ${msg}
-`);
-      process.exit(1);
-    }
-  }
-);
-
-// src/cli/commands/lint.ts
-import { Command as Command3 } from "commander";
-
 // src/linter/rules/validation-coverage.ts
 var validationCoverageRule = {
   id: "validation-coverage",
@@ -52251,7 +52920,7 @@ function lint(dsl, rules = builtinRules) {
 var import_spectral_core7 = __toESM(require_dist9(), 1);
 
 // src/linter/spectral/ruleset.ts
-var import_spectral_functions = __toESM(require_dist13(), 1);
+var import_spectral_functions = __toESM(require_dist14(), 1);
 
 // src/linter/spectral/functions/ref-exists.ts
 var import_spectral_core = __toESM(require_dist9(), 1);
@@ -52883,110 +53552,6 @@ async function spectralLint(dslObject) {
   }));
 }
 
-// src/cli/commands/lint.ts
-var DIR_DEFAULT3 = "agent-contracts.yaml";
-var lintCommand = new Command3("lint").description("Run semantic lint rules on resolved DSL").argument("[dir]", "Path to agent-contracts.yaml", DIR_DEFAULT3).option("-c, --config <path>", "Path to agent-contracts.config.yaml").option("--team <id>", "Limit to one team (multi-team config only)").option("--format <format>", "Output format (text|json)", "text").option("--quiet", "Suppress output on success", false).option("--strict", "Treat warnings as errors", false).action(
-  async (dir, opts) => {
-    try {
-      const config = await loadConfig(opts.config);
-      if (config !== null && isMultiTeamConfig(config)) {
-        const teamEntries = getTeamEntries(config, opts.team);
-        let hasErrors = false;
-        let allClean = true;
-        for (const [teamId, teamConfig] of teamEntries) {
-          if (!opts.quiet) process.stdout.write(`
---- Team: ${teamId} ---
-`);
-          const resolved2 = await resolve4(teamConfig.dsl);
-          const data2 = teamConfig.vars ? substituteVars(resolved2.data, teamConfig.vars) : resolved2.data;
-          const schemaResult2 = validateSchema(data2);
-          const schemaWarnings2 = schemaResult2.diagnostics.filter(
-            (d2) => d2.severity === "warning"
-          );
-          if (!schemaResult2.success) {
-            const output = formatDiagnostics(schemaResult2.diagnostics, {
-              format: opts.format,
-              quiet: opts.quiet
-            });
-            if (output) process.stderr.write(output + "\n");
-            hasErrors = true;
-            allClean = false;
-            continue;
-          }
-          const tsDiagnostics2 = lint(schemaResult2.data);
-          const spectralDiagnostics2 = await spectralLint(
-            schemaResult2.data
-          );
-          const diagnostics2 = [
-            ...tsDiagnostics2,
-            ...spectralDiagnostics2,
-            ...schemaWarnings2
-          ];
-          if (diagnostics2.length > 0) {
-            allClean = false;
-            const output = formatDiagnostics(diagnostics2, {
-              format: opts.format,
-              quiet: opts.quiet
-            });
-            if (output) process.stderr.write(output + "\n");
-            const teamHasErrors = diagnostics2.some((d2) => d2.severity === "error");
-            const teamHasWarnings = diagnostics2.some((d2) => d2.severity === "warning");
-            if (teamHasErrors || opts.strict && teamHasWarnings) {
-              hasErrors = true;
-            }
-          }
-        }
-        if (hasErrors) process.exit(1);
-        if (!opts.quiet && allClean) {
-          process.stdout.write("Lint passed.\n");
-        }
-        return;
-      }
-      const dslPath = resolveDslPath(dir, DIR_DEFAULT3, config);
-      const resolved = await resolve4(dslPath);
-      const data = config?.vars ? substituteVars(resolved.data, config.vars) : resolved.data;
-      const schemaResult = validateSchema(data);
-      const schemaWarnings = schemaResult.diagnostics.filter(
-        (d2) => d2.severity === "warning"
-      );
-      if (!schemaResult.success) {
-        const output = formatDiagnostics(schemaResult.diagnostics, {
-          format: opts.format,
-          quiet: opts.quiet
-        });
-        if (output) process.stderr.write(output + "\n");
-        process.exit(1);
-      }
-      const tsDiagnostics = lint(schemaResult.data);
-      const spectralDiagnostics = await spectralLint(schemaResult.data);
-      const diagnostics = [...tsDiagnostics, ...spectralDiagnostics, ...schemaWarnings];
-      if (diagnostics.length > 0) {
-        const output = formatDiagnostics(diagnostics, {
-          format: opts.format,
-          quiet: opts.quiet
-        });
-        if (output) process.stderr.write(output + "\n");
-        const hasErrors = diagnostics.some((d2) => d2.severity === "error");
-        const hasWarnings = diagnostics.some((d2) => d2.severity === "warning");
-        if (hasErrors || opts.strict && hasWarnings) {
-          process.exit(1);
-        }
-      }
-      if (!opts.quiet && diagnostics.length === 0) {
-        process.stdout.write("Lint passed.\n");
-      }
-    } catch (err) {
-      const msg = err instanceof Error ? err.message : String(err);
-      process.stderr.write(`Error: ${msg}
-`);
-      process.exit(1);
-    }
-  }
-);
-
-// src/cli/commands/render.ts
-import { Command as Command4 } from "commander";
-
 // src/renderer/renderer.ts
 import { readFile as readFile4, writeFile, mkdir, unlink } from "fs/promises";
 import { dirname as dirname5 } from "path";
@@ -54380,458 +54945,321 @@ async function checkDriftFromConfig(dsl, renderTargets, options) {
   return { hasDrift: diffs.length > 0, diffs };
 }
 
-// src/cli/commands/render.ts
-var renderCommand = new Command4("render").description("Render resolved DSL with Handlebars templates (requires config)").option("-c, --config <path>", "Path to agent-contracts.config.yaml").option("--team <id>", "Limit to one team (multi-team config only)").option("--check", "Check for drift without writing files", false).option("--quiet", "Suppress output on success", false).action(
-  async (opts) => {
-    try {
-      const config = await loadConfig(opts.config);
-      if (!config) {
-        process.stderr.write(
-          "Error: agent-contracts.config.yaml not found. Use --config to specify path.\n"
-        );
-        process.exit(1);
+// src/scorer/scorer.ts
+function pct(n3, d2) {
+  return d2 === 0 ? 100 : Math.round(n3 / d2 * 100);
+}
+function artifactValidationCoverage(dsl) {
+  const entries = Object.entries(dsl.artifacts);
+  const total = entries.length;
+  const covered = entries.filter(
+    ([, a3]) => a3.required_validations.length > 0
+  ).length;
+  const missing = entries.filter(([, a3]) => a3.required_validations.length === 0).map(([id]) => id);
+  return {
+    id: "artifact-validation-coverage",
+    label: "Artifact validation coverage",
+    score: covered,
+    total,
+    percent: pct(covered, total),
+    weight: 3,
+    recommendations: missing.length > 0 ? [`${missing.length} artifacts missing required_validations: ${missing.join(", ")}`] : []
+  };
+}
+function taskValidationCoverage(dsl) {
+  const entries = Object.entries(dsl.tasks);
+  const total = entries.length;
+  const covered = entries.filter(([, t3]) => t3.validations.length > 0).length;
+  const missing = entries.filter(([, t3]) => t3.validations.length === 0).map(([id]) => id);
+  return {
+    id: "task-validation-coverage",
+    label: "Task validation coverage",
+    score: covered,
+    total,
+    percent: pct(covered, total),
+    weight: 3,
+    recommendations: missing.length > 0 ? [`${missing.length} tasks missing validations: ${missing.join(", ")}`] : []
+  };
+}
+function guardrailPolicyCoverage(dsl) {
+  const guardrailIds = Object.keys(dsl.guardrails);
+  const total = guardrailIds.length;
+  const referenced = /* @__PURE__ */ new Set();
+  for (const policy of Object.values(dsl.guardrail_policies)) {
+    for (const rule of policy.rules) {
+      referenced.add(rule.guardrail);
+    }
+  }
+  const covered = guardrailIds.filter((id) => referenced.has(id)).length;
+  const missing = guardrailIds.filter((id) => !referenced.has(id));
+  return {
+    id: "guardrail-policy-coverage",
+    label: "Guardrail policy coverage",
+    score: covered,
+    total,
+    percent: pct(covered, total),
+    weight: 2,
+    recommendations: missing.length > 0 ? [`${missing.length} guardrails not in any policy: ${missing.join(", ")}`] : []
+  };
+}
+function workflowValidationIntegration(dsl) {
+  const blockingValidations = Object.entries(dsl.validations).filter(
+    ([, v2]) => v2.blocking
+  );
+  const total = blockingValidations.length;
+  const referenced = /* @__PURE__ */ new Set();
+  for (const wf of Object.values(dsl.workflow)) {
+    for (const step of wf.steps) {
+      if (step.type === "validation") {
+        referenced.add(step.validation);
       }
-      if (isMultiTeamConfig(config)) {
-        const teamEntries = getTeamEntries(config, opts.team);
-        for (const [teamId, teamConfig] of teamEntries) {
-          if (!opts.quiet) process.stdout.write(`
---- Team: ${teamId} ---
-`);
-          const resolved2 = await resolve4(teamConfig.dsl);
-          const data2 = teamConfig.vars ? substituteVars(resolved2.data, teamConfig.vars) : resolved2.data;
-          const schemaResult2 = validateSchema(data2);
-          if (!schemaResult2.success) {
-            process.stderr.write(
-              `Schema validation failed for team ${teamId}. Run 'agent-contracts validate' for details.
-`
-            );
-            process.exit(1);
-          }
-          let renderOptions2;
-          if (teamConfig.bindings.length > 0) {
-            const loadedBindings = await loadBindings(teamConfig.bindings);
-            renderOptions2 = {
-              loadedBindings,
-              activeGuardrailPolicy: teamConfig.activeGuardrailPolicy
-            };
-          }
-          if (opts.check) {
-            const drift = await checkDriftFromConfig(
-              schemaResult2.data,
-              config.renders,
-              renderOptions2
-            );
-            if (drift.hasDrift) {
-              process.stderr.write(
-                `Drift detected for team ${teamId} in the following files:
-`
-              );
-              for (const f2 of drift.diffs) {
-                process.stderr.write(`  ${f2}
-`);
-              }
-              process.exit(1);
-            }
-            if (!opts.quiet) {
-              process.stdout.write("No drift detected.\n");
-            }
-          } else {
-            const files = await renderFromConfig(
-              schemaResult2.data,
-              config.renders,
-              renderOptions2
-            );
-            if (!opts.quiet) {
-              process.stdout.write(`Rendered ${files.length} file(s):
-`);
-              for (const f2 of files) {
-                process.stdout.write(`  ${f2}
-`);
-              }
-            }
-          }
+    }
+  }
+  for (const task of Object.values(dsl.tasks)) {
+    for (const valId of task.validations) {
+      referenced.add(valId);
+    }
+  }
+  const covered = blockingValidations.filter(
+    ([id]) => referenced.has(id)
+  ).length;
+  const missing = blockingValidations.filter(([id]) => !referenced.has(id)).map(([id]) => id);
+  return {
+    id: "workflow-validation-integration",
+    label: "Workflow validation integration",
+    score: covered,
+    total,
+    percent: pct(covered, total),
+    weight: 3,
+    recommendations: missing.length > 0 ? [`${missing.length} blocking validations not wired: ${missing.join(", ")}`] : []
+  };
+}
+var OPTIONAL_ENTITY_FIELDS = {
+  agents: {
+    section: "agents",
+    fields: ["responsibilities", "constraints", "rules"]
+  },
+  tasks: {
+    section: "tasks",
+    fields: ["description", "responsibilities", "execution_steps", "completion_criteria"]
+  },
+  artifacts: {
+    section: "artifacts",
+    fields: ["description", "visibility"]
+  },
+  tools: {
+    section: "tools",
+    fields: ["description", "commands"]
+  },
+  workflow: {
+    section: "workflow",
+    fields: ["description", "trigger", "entry_conditions"]
+  },
+  guardrails: {
+    section: "guardrails",
+    fields: ["rationale", "tags"]
+  }
+};
+function hasNonEmpty(obj, field) {
+  const val = obj[field];
+  if (val === void 0 || val === null) return false;
+  if (typeof val === "string") return val.length > 0;
+  if (Array.isArray(val)) return val.length > 0;
+  return true;
+}
+function schemaCompleteness(dsl) {
+  let totalSlots = 0;
+  let filledSlots = 0;
+  const lowSections = [];
+  for (const [sectionKey, meta] of Object.entries(OPTIONAL_ENTITY_FIELDS)) {
+    const entities = dsl[meta.section];
+    if (!entities) continue;
+    let sectionTotal = 0;
+    let sectionFilled = 0;
+    for (const entity of Object.values(entities)) {
+      for (const field of meta.fields) {
+        sectionTotal++;
+        totalSlots++;
+        if (hasNonEmpty(entity, field)) {
+          sectionFilled++;
+          filledSlots++;
         }
-        return;
       }
-      const resolved = await resolve4(config.dsl);
-      const data = config.vars ? substituteVars(resolved.data, config.vars) : resolved.data;
-      const schemaResult = validateSchema(data);
-      if (!schemaResult.success) {
-        process.stderr.write(
-          "Schema validation failed. Run 'agent-contracts validate' for details.\n"
-        );
-        process.exit(1);
+    }
+    if (sectionTotal > 0 && pct(sectionFilled, sectionTotal) < 50) {
+      lowSections.push(sectionKey);
+    }
+  }
+  return {
+    id: "schema-completeness",
+    label: "Schema completeness",
+    score: filledSlots,
+    total: totalSlots,
+    percent: pct(filledSlots, totalSlots),
+    weight: 1,
+    recommendations: lowSections.length > 0 ? [`Low optional field coverage in: ${lowSections.join(", ")}`] : []
+  };
+}
+function crossReferenceBidirectionality(dsl) {
+  let totalChecks = 0;
+  let passedChecks = 0;
+  const issues = [];
+  for (const [agentId, agent] of Object.entries(dsl.agents)) {
+    for (const toolId of agent.can_execute_tools) {
+      totalChecks++;
+      const tool = dsl.tools[toolId];
+      if (tool && tool.invokable_by.includes(agentId)) {
+        passedChecks++;
+      } else {
+        issues.push(`agent ${agentId} \u2192 tool ${toolId}`);
       }
-      let renderOptions;
-      if (config.bindings.length > 0) {
-        const loadedBindings = await loadBindings(config.bindings);
-        renderOptions = {
-          loadedBindings,
-          activeGuardrailPolicy: config.activeGuardrailPolicy
-        };
+    }
+    for (const artId of agent.can_write_artifacts) {
+      totalChecks++;
+      const art = dsl.artifacts[artId];
+      if (art && (art.producers.includes(agentId) || art.editors.includes(agentId))) {
+        passedChecks++;
+      } else {
+        issues.push(`agent ${agentId} \u2192 artifact ${artId} (write)`);
       }
-      if (opts.check) {
-        const drift = await checkDriftFromConfig(
-          schemaResult.data,
-          config.renders,
-          renderOptions
-        );
-        if (drift.hasDrift) {
-          process.stderr.write("Drift detected in the following files:\n");
-          for (const f2 of drift.diffs) {
-            process.stderr.write(`  ${f2}
-`);
-          }
-          process.exit(1);
-        }
-        if (!opts.quiet) {
-          process.stdout.write("No drift detected.\n");
-        }
+    }
+    for (const artId of agent.can_read_artifacts) {
+      totalChecks++;
+      const art = dsl.artifacts[artId];
+      if (art && (art.consumers.includes(agentId) || art.producers.includes(agentId) || art.editors.includes(agentId))) {
+        passedChecks++;
       } else {
-        const files = await renderFromConfig(
-          schemaResult.data,
-          config.renders,
-          renderOptions
-        );
-        if (!opts.quiet) {
-          process.stdout.write(`Rendered ${files.length} file(s):
-`);
-          for (const f2 of files) {
-            process.stdout.write(`  ${f2}
-`);
-          }
-        }
+        issues.push(`agent ${agentId} \u2192 artifact ${artId} (read)`);
       }
-    } catch (err) {
-      if (err instanceof ConfigLoadError) {
-        process.stderr.write(`Config error: ${err.message}
-`);
-        process.exit(1);
+    }
+  }
+  for (const [toolId, tool] of Object.entries(dsl.tools)) {
+    for (const agentId of tool.invokable_by) {
+      totalChecks++;
+      const agent = dsl.agents[agentId];
+      if (agent && agent.can_execute_tools.includes(toolId)) {
+        passedChecks++;
+      } else {
+        issues.push(`tool ${toolId} \u2192 agent ${agentId}`);
       }
-      const msg = err instanceof Error ? err.message : String(err);
-      process.stderr.write(`Error: ${msg}
-`);
-      process.exit(1);
     }
   }
-);
-
-// src/cli/commands/check.ts
-import { existsSync, readFileSync } from "fs";
-import { join as join3 } from "path";
-import { Command as Command5 } from "commander";
-import { parse as parseYaml4, stringify as stringify3 } from "yaml";
-import { access as access2 } from "fs/promises";
-import { resolve as pathResolve, dirname as dirname6 } from "path";
-
-// src/interface-generator/generator.ts
-import { stringify as stringify2 } from "yaml";
-function buildInterfaceDocument(dsl, generatedAt) {
-  const ti = dsl.team_interface;
-  const doc = {
-    team_id: dsl.system.id,
-    team_name: dsl.system.name,
-    version: ti.version,
-    generated_at: generatedAt
+  return {
+    id: "cross-reference-bidirectionality",
+    label: "Cross-reference bidirectionality",
+    score: passedChecks,
+    total: totalChecks,
+    percent: pct(passedChecks, totalChecks),
+    weight: 2,
+    recommendations: issues.length > 0 ? [`${issues.length} unreciprocated cross-references: ${issues.slice(0, 5).join(", ")}${issues.length > 5 ? `, ... (${issues.length - 5} more)` : ""}`] : []
   };
-  if (ti.description !== void 0) {
-    doc.description = ti.description;
-  }
-  if (ti.accepts?.workflows && Object.keys(ti.accepts.workflows).length > 0) {
-    doc.accepts = { workflows: { ...ti.accepts.workflows } };
-  }
-  const handoffKeys = /* @__PURE__ */ new Set();
-  if (ti.accepts?.workflows) {
-    for (const spec of Object.values(ti.accepts.workflows)) {
-      handoffKeys.add(spec.input_handoff);
-      handoffKeys.add(spec.output_handoff);
+}
+function entityGuardrailCoverage(dsl) {
+  const entitySections = [
+    { name: "agents", entities: dsl.agents },
+    { name: "tasks", entities: dsl.tasks },
+    { name: "tools", entities: dsl.tools },
+    { name: "artifacts", entities: dsl.artifacts }
+  ];
+  const scopeBindings = {
+    agents: /* @__PURE__ */ new Set(),
+    tasks: /* @__PURE__ */ new Set(),
+    tools: /* @__PURE__ */ new Set(),
+    artifacts: /* @__PURE__ */ new Set()
+  };
+  for (const guardrail of Object.values(dsl.guardrails)) {
+    for (const key of Object.keys(scopeBindings)) {
+      const ids = guardrail.scope[key];
+      if (ids) {
+        for (const id of ids) scopeBindings[key].add(id);
+      }
     }
   }
-  const handoff_types = {};
-  for (const k2 of [...handoffKeys].sort()) {
-    const ht = dsl.handoff_types[k2];
-    if (ht) {
-      const entry = {
-        version: ht.version,
-        schema: ht.schema
-      };
-      if (ht.description !== void 0) {
-        entry.description = ht.description;
+  let total = 0;
+  let covered = 0;
+  const missing = [];
+  for (const { name, entities } of entitySections) {
+    for (const [entityId, entity] of Object.entries(entities)) {
+      total++;
+      const hasEntitySide = (entity.guardrails ?? []).length > 0;
+      const hasScopeSide = scopeBindings[name].has(entityId);
+      if (hasEntitySide || hasScopeSide) {
+        covered++;
+      } else {
+        missing.push(`${name}.${entityId}`);
       }
-      handoff_types[k2] = entry;
     }
   }
-  if (Object.keys(handoff_types).length > 0) {
-    doc.handoff_types = handoff_types;
-  }
-  const artifactsOut = {};
-  if (ti.exposes?.artifacts) {
-    for (const key of [...ti.exposes.artifacts].sort()) {
-      const art = dsl.artifacts[key];
-      if (art) {
-        const entry = {
-          type: art.type,
-          states: art.states
-        };
-        if (art.description !== void 0) {
-          entry.description = art.description;
+  return {
+    id: "entity-guardrail-coverage",
+    label: "Entity guardrail coverage",
+    score: covered,
+    total,
+    percent: pct(covered, total),
+    weight: 1,
+    recommendations: missing.length > 0 ? [`${missing.length} entities without guardrails: ${missing.slice(0, 5).join(", ")}${missing.length > 5 ? `, ... (${missing.length - 5} more)` : ""}`] : []
+  };
+}
+function guardrailScopeResolution(dsl) {
+  let totalRefs = 0;
+  let resolvedRefs = 0;
+  const unresolved = [];
+  const sectionMap = {
+    agents: dsl.agents,
+    tasks: dsl.tasks,
+    tools: dsl.tools,
+    artifacts: dsl.artifacts,
+    workflows: dsl.workflow
+  };
+  for (const [guardrailId, guardrail] of Object.entries(dsl.guardrails)) {
+    const scope = guardrail.scope;
+    for (const [scopeKey, entityIds] of Object.entries(scope)) {
+      if (!Array.isArray(entityIds)) continue;
+      const section = sectionMap[scopeKey];
+      if (!section) continue;
+      for (const entityId of entityIds) {
+        totalRefs++;
+        if (section[entityId]) {
+          resolvedRefs++;
+        } else {
+          unresolved.push(`${guardrailId}.scope.${scopeKey}: ${entityId}`);
         }
-        artifactsOut[key] = entry;
       }
     }
   }
-  if (Object.keys(artifactsOut).length > 0) {
-    doc.exposes = { artifacts: artifactsOut };
-  }
-  if (ti.constraints !== void 0 && ti.constraints.length > 0) {
-    doc.constraints = ti.constraints;
-  }
-  return doc;
-}
-function generateInterface(options) {
-  if (!options.dsl.team_interface) {
-    throw new Error("DSL has no team_interface section");
-  }
-  const doc = buildInterfaceDocument(options.dsl, (/* @__PURE__ */ new Date()).toISOString());
-  const content = options.format === "json" ? `${JSON.stringify(doc, null, 2)}
-` : `${stringify2(doc, { sortMapEntries: true })}
-`;
-  const outputPath = options.output ?? "team-interface.yaml";
-  return { outputPath, content };
+  return {
+    id: "guardrail-scope-resolution",
+    label: "Guardrail scope resolution",
+    score: resolvedRefs,
+    total: totalRefs,
+    percent: pct(resolvedRefs, totalRefs),
+    weight: 2,
+    recommendations: unresolved.length > 0 ? [`${unresolved.length} unresolved scope refs: ${unresolved.join(", ")}`] : []
+  };
+}
+function score(dsl) {
+  const dimensions = [
+    artifactValidationCoverage(dsl),
+    taskValidationCoverage(dsl),
+    guardrailPolicyCoverage(dsl),
+    workflowValidationIntegration(dsl),
+    schemaCompleteness(dsl),
+    crossReferenceBidirectionality(dsl),
+    guardrailScopeResolution(dsl),
+    entityGuardrailCoverage(dsl)
+  ];
+  const totalWeight = dimensions.reduce((s2, d2) => s2 + d2.weight, 0);
+  const weightedSum = dimensions.reduce(
+    (s2, d2) => s2 + d2.percent * d2.weight,
+    0
+  );
+  const overall = totalWeight === 0 ? 100 : Math.round(weightedSum / totalWeight);
+  return { overall, dimensions };
 }
-
-// src/cli/commands/check.ts
-var checkCommand = new Command5("check").description("Run full pipeline: resolve \u2192 validate \u2192 lint \u2192 render --check").option("-c, --config <path>", "Path to agent-contracts.config.yaml").option("--team <id>", "Limit to one team (multi-team config only)").option("--format <format>", "Output format (text|json)", "text").option("--quiet", "Suppress output on success", false).option("--strict", "Treat warnings as errors", false).action(
-  async (opts) => {
-    let hasErrors = false;
-    try {
-      const config = await loadConfig(opts.config);
-      if (!config) {
-        process.stderr.write(
-          "Error: agent-contracts.config.yaml not found. Use --config to specify path.\n"
-        );
-        process.exit(1);
-      }
-      if (isMultiTeamConfig(config)) {
-        const teamEntries = getTeamEntries(config, opts.team);
-        for (const [teamId, teamConfig] of teamEntries) {
-          if (!opts.quiet) process.stderr.write(`
---- Team: ${teamId} ---
-`);
-          const resolved2 = await resolve4(teamConfig.dsl);
-          const data2 = teamConfig.vars ? substituteVars(resolved2.data, teamConfig.vars) : resolved2.data;
-          const schemaResult2 = validateSchema(data2);
-          const schemaWarnings2 = schemaResult2.diagnostics.filter(
-            (d2) => d2.severity === "warning"
-          );
-          if (!schemaResult2.success) {
-            const output = formatDiagnostics(schemaResult2.diagnostics, {
-              format: opts.format,
-              quiet: opts.quiet
-            });
-            if (output) process.stderr.write(output + "\n");
-            hasErrors = true;
-            continue;
-          }
-          const refDiags2 = checkReferences(schemaResult2.data);
-          const handoffDiags2 = validateHandoffSchemas(schemaResult2.data);
-          const allRefDiags2 = [...refDiags2, ...handoffDiags2, ...schemaWarnings2];
-          if (allRefDiags2.length > 0) {
-            const output = formatDiagnostics(allRefDiags2, {
-              format: opts.format,
-              quiet: opts.quiet
-            });
-            if (output) process.stderr.write(output + "\n");
-            hasErrors = true;
-          }
-          const tsLintDiags2 = lint(schemaResult2.data);
-          const spectralDiags2 = await spectralLint(
-            schemaResult2.data
-          );
-          const lintDiags2 = [...tsLintDiags2, ...spectralDiags2];
-          if (lintDiags2.length > 0) {
-            const output = formatDiagnostics(lintDiags2, {
-              format: opts.format,
-              quiet: opts.quiet
-            });
-            if (output) process.stderr.write(output + "\n");
-            if (lintDiags2.some((d2) => d2.severity === "error")) {
-              hasErrors = true;
-            }
-            if (opts.strict && lintDiags2.some((d2) => d2.severity === "warning")) {
-              hasErrors = true;
-            }
-          }
-          let renderOptions2;
-          if (teamConfig.bindings.length > 0) {
-            const loadedBindings = await loadBindings(teamConfig.bindings);
-            renderOptions2 = {
-              loadedBindings,
-              activeGuardrailPolicy: teamConfig.activeGuardrailPolicy
-            };
-          }
-          const drift2 = await checkDriftFromConfig(
-            schemaResult2.data,
-            config.renders,
-            renderOptions2
-          );
-          if (drift2.hasDrift) {
-            process.stderr.write(`Drift detected for team ${teamId} in:
-`);
-            for (const f2 of drift2.diffs) {
-              process.stderr.write(`  ${f2}
-`);
-            }
-            hasErrors = true;
-          }
-        }
-        if (!hasErrors) {
-          for (const [teamId, teamConfig] of teamEntries) {
-            const resolved2 = await resolve4(teamConfig.dsl);
-            const data2 = teamConfig.vars ? substituteVars(resolved2.data, teamConfig.vars) : resolved2.data;
-            const schemaResult2 = validateSchema(data2);
-            if (!schemaResult2.success || !schemaResult2.data) continue;
-            const dsl = schemaResult2.data;
-            const imports = dsl.imports;
-            if (!imports) continue;
-            for (const [importName, importDef] of Object.entries(imports)) {
-              const interfacePathRel = importDef?.interface;
-              if (typeof interfacePathRel !== "string") continue;
-              const interfacePath = pathResolve(
-                dirname6(teamConfig.dsl),
-                interfacePathRel
-              );
-              try {
-                await access2(interfacePath);
-              } catch {
-                process.stderr.write(
-                  `Cross-team error: Team "${teamId}" imports "${importName}" but interface file not found: ${interfacePath}
-`
-                );
-                hasErrors = true;
-              }
-            }
-          }
-        }
-        if (hasErrors) process.exit(1);
-        if (!opts.quiet) process.stdout.write("All checks passed.\n");
-        return;
-      }
-      const resolved = await resolve4(config.dsl);
-      const data = config.vars ? substituteVars(resolved.data, config.vars) : resolved.data;
-      const schemaResult = validateSchema(data);
-      const schemaWarnings = schemaResult.diagnostics.filter(
-        (d2) => d2.severity === "warning"
-      );
-      if (!schemaResult.success) {
-        const output = formatDiagnostics(schemaResult.diagnostics, {
-          format: opts.format,
-          quiet: opts.quiet
-        });
-        if (output) process.stderr.write(output + "\n");
-        process.exit(1);
-      }
-      const refDiags = checkReferences(schemaResult.data);
-      const handoffDiags = validateHandoffSchemas(schemaResult.data);
-      const allRefDiags = [...refDiags, ...handoffDiags, ...schemaWarnings];
-      if (allRefDiags.length > 0) {
-        const output = formatDiagnostics(allRefDiags, {
-          format: opts.format,
-          quiet: opts.quiet
-        });
-        if (output) process.stderr.write(output + "\n");
-        hasErrors = true;
-      }
-      const tsLintDiags = lint(schemaResult.data);
-      const spectralDiags = await spectralLint(schemaResult.data);
-      const lintDiags = [...tsLintDiags, ...spectralDiags];
-      if (lintDiags.length > 0) {
-        const output = formatDiagnostics(lintDiags, {
-          format: opts.format,
-          quiet: opts.quiet
-        });
-        if (output) process.stderr.write(output + "\n");
-        if (lintDiags.some((d2) => d2.severity === "error")) {
-          hasErrors = true;
-        }
-        if (opts.strict && lintDiags.some((d2) => d2.severity === "warning")) {
-          hasErrors = true;
-        }
-      }
-      let renderOptions;
-      if (config.bindings.length > 0) {
-        const loadedBindings = await loadBindings(config.bindings);
-        renderOptions = {
-          loadedBindings,
-          activeGuardrailPolicy: config.activeGuardrailPolicy
-        };
-      }
-      const drift = await checkDriftFromConfig(
-        schemaResult.data,
-        config.renders,
-        renderOptions
-      );
-      if (drift.hasDrift) {
-        process.stderr.write("Drift detected in:\n");
-        for (const f2 of drift.diffs) {
-          process.stderr.write(`  ${f2}
-`);
-        }
-        hasErrors = true;
-      }
-      if (schemaResult.data.team_interface) {
-        const interfacePath = join3(config.configDir, "team-interface.yaml");
-        if (existsSync(interfacePath)) {
-          const result = generateInterface({
-            dsl: schemaResult.data,
-            dryRun: true,
-            format: "yaml"
-          });
-          const existing = readFileSync(interfacePath, "utf8");
-          const normalize = (raw) => {
-            try {
-              const parsed = parseYaml4(raw);
-              if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
-                const { generated_at: _t, ...rest } = parsed;
-                return `${stringify3(rest, { sortMapEntries: true })}
-`;
-              }
-            } catch {
-            }
-            return raw.trim();
-          };
-          if (normalize(existing) !== normalize(result.content)) {
-            process.stderr.write("Drift detected in team-interface.yaml\n");
-            hasErrors = true;
-          }
-        }
-      }
-      if (hasErrors) {
-        process.exit(1);
-      }
-      if (!opts.quiet) {
-        process.stdout.write("All checks passed.\n");
-      }
-    } catch (err) {
-      if (err instanceof ConfigLoadError) {
-        process.stderr.write(`Config error: ${err.message}
-`);
-        process.exit(1);
-      }
-      const msg = err instanceof Error ? err.message : String(err);
-      process.stderr.write(`Error: ${msg}
-`);
-      process.exit(1);
-    }
-  }
-);
-
-// src/cli/commands/generate-guardrails.ts
-import { Command as Command6 } from "commander";
 
 // src/guardrail-generator/generator.ts
 import { readFile as readFile5, writeFile as writeFile2, mkdir as mkdir2, chmod, unlink as unlink2, copyFile } from "fs/promises";
-import { resolve as resolve6, dirname as dirname7 } from "path";
+import { resolve as resolve6, dirname as dirname6 } from "path";
 import Handlebars2 from "handlebars";
 import YAML from "yaml";
 
@@ -55058,7 +55486,7 @@ async function generateGuardrails(options) {
         const sourcePath = resolve6(config.configDir, outputDef.source);
         if (!dryRun) {
           try {
-            await mkdir2(dirname7(targetPath), { recursive: true });
+            await mkdir2(dirname6(targetPath), { recursive: true });
             await copyFile(sourcePath, targetPath);
             if (outputDef.executable) {
               await chmod(targetPath, 493);
@@ -55142,7 +55570,7 @@ async function generateGuardrails(options) {
           }
           const output = isPatch && !dryRun ? await applyPatch(groupTarget, rendered, outputDef) : rendered;
           if (!dryRun) {
-            await mkdir2(dirname7(groupTarget), { recursive: true });
+            await mkdir2(dirname6(groupTarget), { recursive: true });
             await writeFile2(groupTarget, output, "utf8");
             if (outputDef.executable) {
               await chmod(groupTarget, 493);
@@ -55163,7 +55591,7 @@ async function generateGuardrails(options) {
         } else {
           const output = isPatch && !dryRun ? await applyPatch(targetPath, rendered, outputDef) : rendered;
           if (!dryRun) {
-            await mkdir2(dirname7(targetPath), { recursive: true });
+            await mkdir2(dirname6(targetPath), { recursive: true });
             await writeFile2(targetPath, output, "utf8");
             if (outputDef.executable) {
               await chmod(targetPath, 493);
@@ -55216,7 +55644,7 @@ async function generateGuardrails(options) {
           continue;
         }
         if (!dryRun) {
-          await mkdir2(dirname7(outputPath), { recursive: true });
+          await mkdir2(dirname6(outputPath), { recursive: true });
           await writeFile2(outputPath, rendered, "utf8");
           if (renderTarget.executable) {
             await chmod(outputPath, 493);
@@ -55246,7 +55674,7 @@ async function generateGuardrails(options) {
             continue;
           }
           if (!dryRun) {
-            await mkdir2(dirname7(outputPath), { recursive: true });
+            await mkdir2(dirname6(outputPath), { recursive: true });
             await writeFile2(outputPath, rendered, "utf8");
             if (renderTarget.executable) {
               await chmod(outputPath, 493);
@@ -55266,659 +55694,81 @@ function resolveBindingRenderOutputPath(output, paths) {
   });
 }
 
-// src/cli/commands/generate-interface.ts
-import { writeFileSync } from "fs";
-import { resolve as resolve7 } from "path";
-function runGenerateInterfaceCli(opts) {
-  if (!opts.dsl.team_interface) {
-    process.stderr.write("Error: DSL has no team_interface section.\n");
-    process.exit(1);
-  }
-  const outputPath = resolve7(process.cwd(), opts.output ?? "team-interface.yaml");
-  const result = generateInterface({
-    dsl: opts.dsl,
-    output: outputPath,
-    dryRun: opts.dryRun,
-    format: opts.format
-  });
-  if (opts.dryRun) {
-    process.stdout.write(result.content);
-    return;
-  }
-  writeFileSync(result.outputPath, result.content, "utf8");
-  if (!opts.quiet) {
-    process.stdout.write(`Wrote ${result.outputPath}
-`);
-  }
-}
-
-// src/cli/commands/generate-guardrails.ts
-function resolvedConfigForTeam(workspace, teamConfig) {
-  return {
-    dsl: "",
-    vars: teamConfig.vars,
-    renders: workspace.renders,
-    configDir: workspace.configDir,
-    bindings: teamConfig.bindings,
-    activeGuardrailPolicy: teamConfig.activeGuardrailPolicy,
-    paths: teamConfig.paths
-  };
-}
-var generateGuardrailsCommand = new Command6("generate").description("Generate guardrail runtime artifacts from DSL, policies, and bindings").argument("[type]", "Type of artifacts to generate (guardrails|interface)", "guardrails").option("-c, --config <path>", "Path to agent-contracts.config.yaml").option("--team <id>", "Limit to one team (multi-team config only)").option("--binding <name...>", "Filter to specific software binding(s)").option(
-  "-o, --output <path>",
-  "Output path for generated team interface (interface type only)"
-).option(
-  "--format <format>",
-  "Output format for team interface: yaml or json",
-  "yaml"
-).option("--dry-run", "Print what would be generated without writing files", false).option("--quiet", "Suppress output on success", false).action(
-  async (type, opts) => {
-    if (type !== "guardrails" && type !== "interface") {
-      process.stderr.write(`Unknown generate type: ${type}
-`);
-      process.exit(1);
-    }
-    if (type === "interface" && opts.format !== "yaml" && opts.format !== "json") {
-      process.stderr.write(`Invalid --format: expected yaml or json, got ${opts.format}
-`);
-      process.exit(1);
-    }
-    try {
-      const config = await loadConfig(opts.config);
-      if (!config) {
-        process.stderr.write(
-          "Error: agent-contracts.config.yaml not found. Use --config to specify path.\n"
-        );
-        process.exit(1);
-      }
-      if (isMultiTeamConfig(config)) {
-        const teamEntries = getTeamEntries(config, opts.team);
-        let exitWithError = false;
-        for (const [teamId, teamConfig] of teamEntries) {
-          if (!opts.quiet) process.stdout.write(`
---- Team: ${teamId} ---
-`);
-          const resolved2 = await resolve4(teamConfig.dsl);
-          const data2 = teamConfig.vars ? substituteVars(resolved2.data, teamConfig.vars) : resolved2.data;
-          const schemaResult2 = validateSchema(data2);
-          if (!schemaResult2.success) {
-            process.stderr.write(
-              `Schema validation failed for team ${teamId}. Run 'agent-contracts validate' for details.
-`
-            );
-            exitWithError = true;
-            continue;
-          }
-          if (type === "interface") {
-            runGenerateInterfaceCli({
-              dsl: schemaResult2.data,
-              output: teamConfig.interfaceOutput ?? opts.output,
-              dryRun: opts.dryRun,
-              format: opts.format,
-              quiet: opts.quiet
-            });
-            continue;
-          }
-          const loadedBindings2 = await loadBindings(teamConfig.bindings);
-          const result2 = await generateGuardrails({
-            dsl: schemaResult2.data,
-            config: resolvedConfigForTeam(config, teamConfig),
-            loadedBindings: loadedBindings2,
-            filterBindings: opts.binding,
-            dryRun: opts.dryRun
-          });
-          const errors2 = result2.diagnostics.filter((d2) => d2.severity === "error");
-          const warnings2 = result2.diagnostics.filter((d2) => d2.severity === "warning");
-          const infos2 = result2.diagnostics.filter((d2) => d2.severity === "info");
-          if (errors2.length > 0) {
-            process.stderr.write(`Errors (team ${teamId}):
-`);
-            for (const d2 of errors2) {
-              process.stderr.write(`  error [${d2.path}] ${d2.message}
-`);
-            }
-            exitWithError = true;
-          }
-          if (warnings2.length > 0 && !opts.quiet) {
-            process.stderr.write(`Warnings (team ${teamId}):
-`);
-            for (const d2 of warnings2) {
-              process.stderr.write(`  warning [${d2.path}] ${d2.message}
-`);
-            }
-          }
-          if (infos2.length > 0 && !opts.quiet) {
-            for (const d2 of infos2) {
-              process.stderr.write(`  info [${d2.path}] ${d2.message}
-`);
-            }
-          }
-          if (!opts.quiet) {
-            const action = opts.dryRun ? "Would generate" : "Generated";
-            process.stdout.write(
-              `${action} ${result2.outputFiles.length} file(s):
-`
-            );
-            for (const f2 of result2.outputFiles) {
-              process.stdout.write(`  ${f2}
-`);
-            }
-          }
-        }
-        if (exitWithError) process.exit(1);
-        return;
-      }
-      const resolved = await resolve4(config.dsl);
-      const data = config.vars ? substituteVars(resolved.data, config.vars) : resolved.data;
-      const schemaResult = validateSchema(data);
-      if (!schemaResult.success) {
-        process.stderr.write(
-          "Schema validation failed. Run 'agent-contracts validate' for details.\n"
-        );
-        process.exit(1);
-      }
-      if (type === "interface") {
-        runGenerateInterfaceCli({
-          dsl: schemaResult.data,
-          output: opts.output,
-          dryRun: opts.dryRun,
-          format: opts.format,
-          quiet: opts.quiet
-        });
-        return;
-      }
-      const loadedBindings = await loadBindings(config.bindings);
-      const result = await generateGuardrails({
-        dsl: schemaResult.data,
-        config,
-        loadedBindings,
-        filterBindings: opts.binding,
-        dryRun: opts.dryRun
-      });
-      const errors = result.diagnostics.filter((d2) => d2.severity === "error");
-      const warnings = result.diagnostics.filter((d2) => d2.severity === "warning");
-      const infos = result.diagnostics.filter((d2) => d2.severity === "info");
-      if (errors.length > 0) {
-        process.stderr.write("Errors:\n");
-        for (const d2 of errors) {
-          process.stderr.write(`  error [${d2.path}] ${d2.message}
-`);
-        }
-      }
-      if (warnings.length > 0 && !opts.quiet) {
-        process.stderr.write("Warnings:\n");
-        for (const d2 of warnings) {
-          process.stderr.write(`  warning [${d2.path}] ${d2.message}
-`);
-        }
-      }
-      if (infos.length > 0 && !opts.quiet) {
-        for (const d2 of infos) {
-          process.stderr.write(`  info [${d2.path}] ${d2.message}
-`);
-        }
-      }
-      if (errors.length > 0) {
-        process.exit(1);
-      }
-      if (!opts.quiet) {
-        const action = opts.dryRun ? "Would generate" : "Generated";
-        process.stdout.write(
-          `${action} ${result.outputFiles.length} file(s):
-`
-        );
-        for (const f2 of result.outputFiles) {
-          process.stdout.write(`  ${f2}
-`);
-        }
-      }
-    } catch (err) {
-      if (err instanceof ConfigLoadError) {
-        process.stderr.write(`Config error: ${err.message}
-`);
-        process.exit(1);
-      }
-      const msg = err instanceof Error ? err.message : String(err);
-      process.stderr.write(`Error: ${msg}
-`);
-      process.exit(1);
-    }
-  }
-);
-
-// src/cli/commands/score.ts
-import { Command as Command7 } from "commander";
-
-// src/scorer/scorer.ts
-function pct(n3, d2) {
-  return d2 === 0 ? 100 : Math.round(n3 / d2 * 100);
-}
-function artifactValidationCoverage(dsl) {
-  const entries = Object.entries(dsl.artifacts);
-  const total = entries.length;
-  const covered = entries.filter(
-    ([, a3]) => a3.required_validations.length > 0
-  ).length;
-  const missing = entries.filter(([, a3]) => a3.required_validations.length === 0).map(([id]) => id);
-  return {
-    id: "artifact-validation-coverage",
-    label: "Artifact validation coverage",
-    score: covered,
-    total,
-    percent: pct(covered, total),
-    weight: 3,
-    recommendations: missing.length > 0 ? [`${missing.length} artifacts missing required_validations: ${missing.join(", ")}`] : []
-  };
-}
-function taskValidationCoverage(dsl) {
-  const entries = Object.entries(dsl.tasks);
-  const total = entries.length;
-  const covered = entries.filter(([, t3]) => t3.validations.length > 0).length;
-  const missing = entries.filter(([, t3]) => t3.validations.length === 0).map(([id]) => id);
-  return {
-    id: "task-validation-coverage",
-    label: "Task validation coverage",
-    score: covered,
-    total,
-    percent: pct(covered, total),
-    weight: 3,
-    recommendations: missing.length > 0 ? [`${missing.length} tasks missing validations: ${missing.join(", ")}`] : []
-  };
-}
-function guardrailPolicyCoverage(dsl) {
-  const guardrailIds = Object.keys(dsl.guardrails);
-  const total = guardrailIds.length;
-  const referenced = /* @__PURE__ */ new Set();
-  for (const policy of Object.values(dsl.guardrail_policies)) {
-    for (const rule of policy.rules) {
-      referenced.add(rule.guardrail);
-    }
-  }
-  const covered = guardrailIds.filter((id) => referenced.has(id)).length;
-  const missing = guardrailIds.filter((id) => !referenced.has(id));
-  return {
-    id: "guardrail-policy-coverage",
-    label: "Guardrail policy coverage",
-    score: covered,
-    total,
-    percent: pct(covered, total),
-    weight: 2,
-    recommendations: missing.length > 0 ? [`${missing.length} guardrails not in any policy: ${missing.join(", ")}`] : []
-  };
-}
-function workflowValidationIntegration(dsl) {
-  const blockingValidations = Object.entries(dsl.validations).filter(
-    ([, v2]) => v2.blocking
-  );
-  const total = blockingValidations.length;
-  const referenced = /* @__PURE__ */ new Set();
-  for (const wf of Object.values(dsl.workflow)) {
-    for (const step of wf.steps) {
-      if (step.type === "validation") {
-        referenced.add(step.validation);
-      }
-    }
-  }
-  for (const task of Object.values(dsl.tasks)) {
-    for (const valId of task.validations) {
-      referenced.add(valId);
-    }
-  }
-  const covered = blockingValidations.filter(
-    ([id]) => referenced.has(id)
-  ).length;
-  const missing = blockingValidations.filter(([id]) => !referenced.has(id)).map(([id]) => id);
-  return {
-    id: "workflow-validation-integration",
-    label: "Workflow validation integration",
-    score: covered,
-    total,
-    percent: pct(covered, total),
-    weight: 3,
-    recommendations: missing.length > 0 ? [`${missing.length} blocking validations not wired: ${missing.join(", ")}`] : []
+// src/interface-generator/generator.ts
+import { stringify } from "yaml";
+function buildInterfaceDocument(dsl, generatedAt) {
+  const ti = dsl.team_interface;
+  const doc = {
+    team_id: dsl.system.id,
+    team_name: dsl.system.name,
+    version: ti.version,
+    generated_at: generatedAt
   };
-}
-var OPTIONAL_ENTITY_FIELDS = {
-  agents: {
-    section: "agents",
-    fields: ["responsibilities", "constraints", "rules"]
-  },
-  tasks: {
-    section: "tasks",
-    fields: ["description", "responsibilities", "execution_steps", "completion_criteria"]
-  },
-  artifacts: {
-    section: "artifacts",
-    fields: ["description", "visibility"]
-  },
-  tools: {
-    section: "tools",
-    fields: ["description", "commands"]
-  },
-  workflow: {
-    section: "workflow",
-    fields: ["description", "trigger", "entry_conditions"]
-  },
-  guardrails: {
-    section: "guardrails",
-    fields: ["rationale", "tags"]
-  }
-};
-function hasNonEmpty(obj, field) {
-  const val = obj[field];
-  if (val === void 0 || val === null) return false;
-  if (typeof val === "string") return val.length > 0;
-  if (Array.isArray(val)) return val.length > 0;
-  return true;
-}
-function schemaCompleteness(dsl) {
-  let totalSlots = 0;
-  let filledSlots = 0;
-  const lowSections = [];
-  for (const [sectionKey, meta] of Object.entries(OPTIONAL_ENTITY_FIELDS)) {
-    const entities = dsl[meta.section];
-    if (!entities) continue;
-    let sectionTotal = 0;
-    let sectionFilled = 0;
-    for (const entity of Object.values(entities)) {
-      for (const field of meta.fields) {
-        sectionTotal++;
-        totalSlots++;
-        if (hasNonEmpty(entity, field)) {
-          sectionFilled++;
-          filledSlots++;
-        }
-      }
-    }
-    if (sectionTotal > 0 && pct(sectionFilled, sectionTotal) < 50) {
-      lowSections.push(sectionKey);
-    }
+  if (ti.description !== void 0) {
+    doc.description = ti.description;
   }
-  return {
-    id: "schema-completeness",
-    label: "Schema completeness",
-    score: filledSlots,
-    total: totalSlots,
-    percent: pct(filledSlots, totalSlots),
-    weight: 1,
-    recommendations: lowSections.length > 0 ? [`Low optional field coverage in: ${lowSections.join(", ")}`] : []
-  };
-}
-function crossReferenceBidirectionality(dsl) {
-  let totalChecks = 0;
-  let passedChecks = 0;
-  const issues = [];
-  for (const [agentId, agent] of Object.entries(dsl.agents)) {
-    for (const toolId of agent.can_execute_tools) {
-      totalChecks++;
-      const tool = dsl.tools[toolId];
-      if (tool && tool.invokable_by.includes(agentId)) {
-        passedChecks++;
-      } else {
-        issues.push(`agent ${agentId} \u2192 tool ${toolId}`);
-      }
-    }
-    for (const artId of agent.can_write_artifacts) {
-      totalChecks++;
-      const art = dsl.artifacts[artId];
-      if (art && (art.producers.includes(agentId) || art.editors.includes(agentId))) {
-        passedChecks++;
-      } else {
-        issues.push(`agent ${agentId} \u2192 artifact ${artId} (write)`);
-      }
-    }
-    for (const artId of agent.can_read_artifacts) {
-      totalChecks++;
-      const art = dsl.artifacts[artId];
-      if (art && (art.consumers.includes(agentId) || art.producers.includes(agentId) || art.editors.includes(agentId))) {
-        passedChecks++;
-      } else {
-        issues.push(`agent ${agentId} \u2192 artifact ${artId} (read)`);
-      }
-    }
+  if (ti.accepts?.workflows && Object.keys(ti.accepts.workflows).length > 0) {
+    doc.accepts = { workflows: { ...ti.accepts.workflows } };
   }
-  for (const [toolId, tool] of Object.entries(dsl.tools)) {
-    for (const agentId of tool.invokable_by) {
-      totalChecks++;
-      const agent = dsl.agents[agentId];
-      if (agent && agent.can_execute_tools.includes(toolId)) {
-        passedChecks++;
-      } else {
-        issues.push(`tool ${toolId} \u2192 agent ${agentId}`);
-      }
+  const handoffKeys = /* @__PURE__ */ new Set();
+  if (ti.accepts?.workflows) {
+    for (const spec of Object.values(ti.accepts.workflows)) {
+      handoffKeys.add(spec.input_handoff);
+      handoffKeys.add(spec.output_handoff);
     }
   }
-  return {
-    id: "cross-reference-bidirectionality",
-    label: "Cross-reference bidirectionality",
-    score: passedChecks,
-    total: totalChecks,
-    percent: pct(passedChecks, totalChecks),
-    weight: 2,
-    recommendations: issues.length > 0 ? [`${issues.length} unreciprocated cross-references: ${issues.slice(0, 5).join(", ")}${issues.length > 5 ? `, ... (${issues.length - 5} more)` : ""}`] : []
-  };
-}
-function entityGuardrailCoverage(dsl) {
-  const entitySections = [
-    { name: "agents", entities: dsl.agents },
-    { name: "tasks", entities: dsl.tasks },
-    { name: "tools", entities: dsl.tools },
-    { name: "artifacts", entities: dsl.artifacts }
-  ];
-  const scopeBindings = {
-    agents: /* @__PURE__ */ new Set(),
-    tasks: /* @__PURE__ */ new Set(),
-    tools: /* @__PURE__ */ new Set(),
-    artifacts: /* @__PURE__ */ new Set()
-  };
-  for (const guardrail of Object.values(dsl.guardrails)) {
-    for (const key of Object.keys(scopeBindings)) {
-      const ids = guardrail.scope[key];
-      if (ids) {
-        for (const id of ids) scopeBindings[key].add(id);
+  const handoff_types = {};
+  for (const k2 of [...handoffKeys].sort()) {
+    const ht = dsl.handoff_types[k2];
+    if (ht) {
+      const entry = {
+        version: ht.version,
+        schema: ht.schema
+      };
+      if (ht.description !== void 0) {
+        entry.description = ht.description;
       }
+      handoff_types[k2] = entry;
     }
   }
-  let total = 0;
-  let covered = 0;
-  const missing = [];
-  for (const { name, entities } of entitySections) {
-    for (const [entityId, entity] of Object.entries(entities)) {
-      total++;
-      const hasEntitySide = (entity.guardrails ?? []).length > 0;
-      const hasScopeSide = scopeBindings[name].has(entityId);
-      if (hasEntitySide || hasScopeSide) {
-        covered++;
-      } else {
-        missing.push(`${name}.${entityId}`);
-      }
-    }
+  if (Object.keys(handoff_types).length > 0) {
+    doc.handoff_types = handoff_types;
   }
-  return {
-    id: "entity-guardrail-coverage",
-    label: "Entity guardrail coverage",
-    score: covered,
-    total,
-    percent: pct(covered, total),
-    weight: 1,
-    recommendations: missing.length > 0 ? [`${missing.length} entities without guardrails: ${missing.slice(0, 5).join(", ")}${missing.length > 5 ? `, ... (${missing.length - 5} more)` : ""}`] : []
-  };
-}
-function guardrailScopeResolution(dsl) {
-  let totalRefs = 0;
-  let resolvedRefs = 0;
-  const unresolved = [];
-  const sectionMap = {
-    agents: dsl.agents,
-    tasks: dsl.tasks,
-    tools: dsl.tools,
-    artifacts: dsl.artifacts,
-    workflows: dsl.workflow
-  };
-  for (const [guardrailId, guardrail] of Object.entries(dsl.guardrails)) {
-    const scope = guardrail.scope;
-    for (const [scopeKey, entityIds] of Object.entries(scope)) {
-      if (!Array.isArray(entityIds)) continue;
-      const section = sectionMap[scopeKey];
-      if (!section) continue;
-      for (const entityId of entityIds) {
-        totalRefs++;
-        if (section[entityId]) {
-          resolvedRefs++;
-        } else {
-          unresolved.push(`${guardrailId}.scope.${scopeKey}: ${entityId}`);
+  const artifactsOut = {};
+  if (ti.exposes?.artifacts) {
+    for (const key of [...ti.exposes.artifacts].sort()) {
+      const art = dsl.artifacts[key];
+      if (art) {
+        const entry = {
+          type: art.type,
+          states: art.states
+        };
+        if (art.description !== void 0) {
+          entry.description = art.description;
         }
+        artifactsOut[key] = entry;
       }
     }
   }
-  return {
-    id: "guardrail-scope-resolution",
-    label: "Guardrail scope resolution",
-    score: resolvedRefs,
-    total: totalRefs,
-    percent: pct(resolvedRefs, totalRefs),
-    weight: 2,
-    recommendations: unresolved.length > 0 ? [`${unresolved.length} unresolved scope refs: ${unresolved.join(", ")}`] : []
-  };
-}
-function score(dsl) {
-  const dimensions = [
-    artifactValidationCoverage(dsl),
-    taskValidationCoverage(dsl),
-    guardrailPolicyCoverage(dsl),
-    workflowValidationIntegration(dsl),
-    schemaCompleteness(dsl),
-    crossReferenceBidirectionality(dsl),
-    guardrailScopeResolution(dsl),
-    entityGuardrailCoverage(dsl)
-  ];
-  const totalWeight = dimensions.reduce((s2, d2) => s2 + d2.weight, 0);
-  const weightedSum = dimensions.reduce(
-    (s2, d2) => s2 + d2.percent * d2.weight,
-    0
-  );
-  const overall = totalWeight === 0 ? 100 : Math.round(weightedSum / totalWeight);
-  return { overall, dimensions };
-}
-
-// src/cli/commands/score.ts
-var DIR_DEFAULT4 = "agent-contracts.yaml";
-function formatText(result) {
-  const lines = [];
-  lines.push(`DSL Completeness Score: ${result.overall}/100`);
-  lines.push("");
-  for (const d2 of result.dimensions) {
-    const detail = d2.total > 0 ? ` (${d2.score}/${d2.total} ${d2.id.split("-")[0]})` : "";
-    lines.push(
-      `  ${d2.label.padEnd(40)} ${String(d2.percent).padStart(3)}%${detail}`
-    );
+  if (Object.keys(artifactsOut).length > 0) {
+    doc.exposes = { artifacts: artifactsOut };
   }
-  const allRecs = result.dimensions.flatMap((d2) => d2.recommendations);
-  if (allRecs.length > 0) {
-    lines.push("");
-    lines.push("Recommendations:");
-    for (const rec of allRecs) {
-      lines.push(`  - ${rec}`);
-    }
+  if (ti.constraints !== void 0 && ti.constraints.length > 0) {
+    doc.constraints = ti.constraints;
   }
-  return lines.join("\n");
+  return doc;
 }
-var scoreCommand = new Command7("score").description("Calculate DSL completeness score").argument("[dir]", "Path to agent-contracts.yaml", DIR_DEFAULT4).option("-c, --config <path>", "Path to agent-contracts.config.yaml").option("--team <id>", "Limit to one team (multi-team config only)").option("--format <format>", "Output format (text|json)", "text").option("--threshold <number>", "Minimum score (exit 1 if below)", void 0).action(
-  async (dir, opts) => {
-    try {
-      const config = await loadConfig(opts.config);
-      if (config !== null && isMultiTeamConfig(config)) {
-        const teamEntries = getTeamEntries(config, opts.team);
-        let thresholdNum;
-        if (opts.threshold !== void 0) {
-          thresholdNum = parseInt(opts.threshold, 10);
-          if (isNaN(thresholdNum)) {
-            process.stderr.write(
-              `Error: --threshold must be a number, got "${opts.threshold}"
-`
-            );
-            process.exit(1);
-          }
-        }
-        let hasErrors = false;
-        for (const [teamId, teamConfig] of teamEntries) {
-          process.stdout.write(`
---- Team: ${teamId} ---
-`);
-          const resolved2 = await resolve4(teamConfig.dsl);
-          const data2 = teamConfig.vars ? substituteVars(resolved2.data, teamConfig.vars) : resolved2.data;
-          const schemaResult2 = validateSchema(data2);
-          if (!schemaResult2.success) {
-            const issues = schemaResult2.diagnostics.map((d2) => `  ${d2.path}: ${d2.message}`).join("\n");
-            process.stderr.write(`Schema validation failed:
-${issues}
-`);
-            hasErrors = true;
-            continue;
-          }
-          const result2 = score(schemaResult2.data);
-          if (opts.format === "json") {
-            process.stdout.write(JSON.stringify(result2, null, 2) + "\n");
-          } else {
-            process.stdout.write(formatText(result2) + "\n");
-          }
-          if (thresholdNum !== void 0 && result2.overall < thresholdNum) {
-            process.stderr.write(
-              `Score ${result2.overall} is below threshold ${thresholdNum}
-`
-            );
-            hasErrors = true;
-          }
-        }
-        if (hasErrors) process.exit(1);
-        return;
-      }
-      const dslPath = resolveDslPath(dir, DIR_DEFAULT4, config);
-      const resolved = await resolve4(dslPath);
-      const data = config?.vars ? substituteVars(resolved.data, config.vars) : resolved.data;
-      const schemaResult = validateSchema(data);
-      if (!schemaResult.success) {
-        const issues = schemaResult.diagnostics.map((d2) => `  ${d2.path}: ${d2.message}`).join("\n");
-        process.stderr.write(`Schema validation failed:
-${issues}
-`);
-        process.exit(1);
-      }
-      const result = score(schemaResult.data);
-      if (opts.format === "json") {
-        process.stdout.write(JSON.stringify(result, null, 2) + "\n");
-      } else {
-        process.stdout.write(formatText(result) + "\n");
-      }
-      if (opts.threshold !== void 0) {
-        const threshold = parseInt(opts.threshold, 10);
-        if (isNaN(threshold)) {
-          process.stderr.write(
-            `Error: --threshold must be a number, got "${opts.threshold}"
-`
-          );
-          process.exit(1);
-        }
-        if (result.overall < threshold) {
-          process.stderr.write(
-            `Score ${result.overall} is below threshold ${threshold}
-`
-          );
-          process.exit(1);
-        }
-      }
-    } catch (err) {
-      const msg = err instanceof Error ? err.message : String(err);
-      process.stderr.write(`Error: ${msg}
-`);
-      process.exit(1);
-    }
+function generateInterface(options) {
+  if (!options.dsl.team_interface) {
+    throw new Error("DSL has no team_interface section");
   }
-);
-
-// src/cli/commands/audit.ts
-import { writeFileSync as writeFileSync2 } from "fs";
-import { Command as Command8 } from "commander";
+  const doc = buildInterfaceDocument(options.dsl, (/* @__PURE__ */ new Date()).toISOString());
+  const content = options.format === "json" ? `${JSON.stringify(doc, null, 2)}
+` : `${stringify(doc, { sortMapEntries: true })}
+`;
+  const outputPath = options.output ?? "team-interface.yaml";
+  return { outputPath, content };
+}
 
 // src/auditor/context-builder.ts
 import { readFile as readFile6 } from "fs/promises";
@@ -56673,11 +56523,579 @@ function computeExitCode(results, failOn) {
   return 0;
 }
 
-// src/cli/commands/audit.ts
+// src/cli/format.ts
+function formatDiagnostics(diagnostics, options) {
+  if (options.quiet && diagnostics.length === 0) return "";
+  if (options.format === "json") {
+    return JSON.stringify(diagnostics, null, 2);
+  }
+  return diagnostics.map((d2) => {
+    const severity = d2.severity ?? d2.code ?? "error";
+    const rule = d2.ruleId ?? d2.code ?? "";
+    return `${d2.path}: ${severity} [${rule}] ${d2.message}`;
+  }).join("\n");
+}
+
+// src/cli/multi-team.ts
+function isMultiTeamConfig(config) {
+  return config.teams !== void 0 && Object.keys(config.teams).length > 0;
+}
+function getTeamEntries(config, teamFilter) {
+  if (!config.teams) return [];
+  const entries = Object.entries(config.teams);
+  if (teamFilter) {
+    const found = entries.filter(([k2]) => k2 === teamFilter);
+    if (found.length === 0) {
+      throw new Error(
+        `Team "${teamFilter}" not found. Available teams: ${entries.map(([k2]) => k2).join(", ")}`
+      );
+    }
+    return found;
+  }
+  return entries;
+}
+
+// src/cli/commands/generate-interface.ts
+import { writeFileSync } from "fs";
+import { resolve as resolve7 } from "path";
+function runGenerateInterfaceCli(opts) {
+  if (!opts.dsl.team_interface) {
+    process.stderr.write("Error: DSL has no team_interface section.\n");
+    process.exit(1);
+  }
+  const outputPath = resolve7(process.cwd(), opts.output ?? "team-interface.yaml");
+  const result = generateInterface({
+    dsl: opts.dsl,
+    output: outputPath,
+    dryRun: opts.dryRun,
+    format: opts.format
+  });
+  if (opts.dryRun) {
+    process.stdout.write(result.content);
+    return;
+  }
+  writeFileSync(result.outputPath, result.content, "utf8");
+  if (!opts.quiet) {
+    process.stdout.write(`Wrote ${result.outputPath}
+`);
+  }
+}
+
+// src/cli/handlers.ts
+var DIR_DEFAULT = "agent-contracts.yaml";
+var handleResolve = async (dir, opts) => {
+  try {
+    const config = await loadConfig(opts.config);
+    if (config !== null && isMultiTeamConfig(config)) {
+      const teamEntries = getTeamEntries(config, opts.team);
+      if (opts.format === "json") {
+        const out = {};
+        for (const [teamId, teamConfig] of teamEntries) {
+          const result2 = await resolve4(teamConfig.dsl);
+          let data2 = teamConfig.vars ? substituteVars(result2.data, teamConfig.vars) : result2.data;
+          if (opts.expandDefaults) data2 = expandDefaults(data2);
+          out[teamId] = data2;
+        }
+        process.stdout.write(JSON.stringify(out, null, 2) + "\n");
+      } else {
+        for (const [teamId, teamConfig] of teamEntries) {
+          process.stdout.write(`
+--- Team: ${teamId} ---
+`);
+          const result2 = await resolve4(teamConfig.dsl);
+          let data2 = teamConfig.vars ? substituteVars(result2.data, teamConfig.vars) : result2.data;
+          if (opts.expandDefaults) data2 = expandDefaults(data2);
+          process.stdout.write(stringify3(data2));
+        }
+      }
+      return;
+    }
+    const dslPath = resolveDslPath(dir ?? DIR_DEFAULT, DIR_DEFAULT, config);
+    const result = await resolve4(dslPath);
+    let data = config?.vars ? substituteVars(result.data, config.vars) : result.data;
+    if (opts.expandDefaults) data = expandDefaults(data);
+    if (opts.format === "json") {
+      process.stdout.write(JSON.stringify(data, null, 2) + "\n");
+    } else {
+      process.stdout.write(stringify3(data));
+    }
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    process.stderr.write(`Error: ${msg}
+`);
+    process.exit(1);
+  }
+};
+var handleValidate = async (dir, opts) => {
+  try {
+    const config = await loadConfig(opts.config);
+    if (config !== null && isMultiTeamConfig(config)) {
+      const teamEntries = getTeamEntries(config, opts.team);
+      let hasErrors = false;
+      let allTeamsFullyClean = true;
+      for (const [teamId, teamConfig] of teamEntries) {
+        if (!opts.quiet) process.stdout.write(`
+--- Team: ${teamId} ---
+`);
+        const resolved2 = await resolve4(teamConfig.dsl);
+        const data2 = teamConfig.vars ? substituteVars(resolved2.data, teamConfig.vars) : resolved2.data;
+        const schemaResult2 = validateSchema(data2);
+        const schemaWarnings2 = schemaResult2.diagnostics.filter(
+          (d2) => d2.severity === "warning"
+        );
+        if (!schemaResult2.success) {
+          const output = formatDiagnostics(schemaResult2.diagnostics, {
+            format: opts.format ?? "text",
+            quiet: !!opts.quiet
+          });
+          if (output) process.stderr.write(output + "\n");
+          hasErrors = true;
+          allTeamsFullyClean = false;
+          continue;
+        }
+        const refDiags2 = checkReferences(schemaResult2.data);
+        const handoffDiags2 = validateHandoffSchemas(schemaResult2.data);
+        const allDiags2 = [...refDiags2, ...handoffDiags2, ...schemaWarnings2];
+        if (allDiags2.length > 0) {
+          allTeamsFullyClean = false;
+          const output = formatDiagnostics(allDiags2, {
+            format: opts.format ?? "text",
+            quiet: !!opts.quiet
+          });
+          if (output) process.stderr.write(output + "\n");
+          const hasWarnings2 = allDiags2.some(
+            (d2) => "severity" in d2 && d2.severity === "warning"
+          );
+          if (refDiags2.length > 0 || handoffDiags2.length > 0 || opts.strict && hasWarnings2) {
+            hasErrors = true;
+          }
+        }
+      }
+      if (hasErrors) process.exit(1);
+      if (!opts.quiet && allTeamsFullyClean) process.stdout.write("Validation passed.\n");
+      return;
+    }
+    const dslPath = resolveDslPath(dir ?? DIR_DEFAULT, DIR_DEFAULT, config);
+    const resolved = await resolve4(dslPath);
+    const data = config?.vars ? substituteVars(resolved.data, config.vars) : resolved.data;
+    const schemaResult = validateSchema(data);
+    const schemaWarnings = schemaResult.diagnostics.filter(
+      (d2) => d2.severity === "warning"
+    );
+    if (!schemaResult.success) {
+      const output = formatDiagnostics(schemaResult.diagnostics, {
+        format: opts.format ?? "text",
+        quiet: !!opts.quiet
+      });
+      if (output) process.stderr.write(output + "\n");
+      process.exit(1);
+    }
+    const refDiags = checkReferences(schemaResult.data);
+    const handoffDiags = validateHandoffSchemas(schemaResult.data);
+    const allDiags = [...refDiags, ...handoffDiags, ...schemaWarnings];
+    const hasWarnings = allDiags.some(
+      (d2) => "severity" in d2 && d2.severity === "warning"
+    );
+    if (allDiags.length > 0) {
+      const output = formatDiagnostics(allDiags, {
+        format: opts.format ?? "text",
+        quiet: !!opts.quiet
+      });
+      if (output) process.stderr.write(output + "\n");
+      if (refDiags.length > 0 || handoffDiags.length > 0 || opts.strict && hasWarnings) {
+        process.exit(1);
+      }
+    }
+    if (!opts.quiet && allDiags.length === 0) process.stdout.write("Validation passed.\n");
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    process.stderr.write(`Error: ${msg}
+`);
+    process.exit(1);
+  }
+};
+var handleLint = async (dir, opts) => {
+  try {
+    const config = await loadConfig(opts.config);
+    if (config !== null && isMultiTeamConfig(config)) {
+      const teamEntries = getTeamEntries(config, opts.team);
+      let hasErrors = false;
+      let allClean = true;
+      for (const [teamId, teamConfig] of teamEntries) {
+        if (!opts.quiet) process.stdout.write(`
+--- Team: ${teamId} ---
+`);
+        const resolved2 = await resolve4(teamConfig.dsl);
+        const data2 = teamConfig.vars ? substituteVars(resolved2.data, teamConfig.vars) : resolved2.data;
+        const schemaResult2 = validateSchema(data2);
+        const schemaWarnings2 = schemaResult2.diagnostics.filter(
+          (d2) => d2.severity === "warning"
+        );
+        if (!schemaResult2.success) {
+          const output = formatDiagnostics(schemaResult2.diagnostics, {
+            format: opts.format ?? "text",
+            quiet: !!opts.quiet
+          });
+          if (output) process.stderr.write(output + "\n");
+          hasErrors = true;
+          allClean = false;
+          continue;
+        }
+        const tsDiagnostics2 = lint(schemaResult2.data);
+        const spectralDiagnostics2 = await spectralLint(
+          schemaResult2.data
+        );
+        const diagnostics2 = [...tsDiagnostics2, ...spectralDiagnostics2, ...schemaWarnings2];
+        if (diagnostics2.length > 0) {
+          allClean = false;
+          const output = formatDiagnostics(diagnostics2, {
+            format: opts.format ?? "text",
+            quiet: !!opts.quiet
+          });
+          if (output) process.stderr.write(output + "\n");
+          if (diagnostics2.some((d2) => d2.severity === "error")) hasErrors = true;
+          if (opts.strict && diagnostics2.some((d2) => d2.severity === "warning")) hasErrors = true;
+        }
+      }
+      if (hasErrors) process.exit(1);
+      if (!opts.quiet && allClean) process.stdout.write("Lint passed.\n");
+      return;
+    }
+    const dslPath = resolveDslPath(dir ?? DIR_DEFAULT, DIR_DEFAULT, config);
+    const resolved = await resolve4(dslPath);
+    const data = config?.vars ? substituteVars(resolved.data, config.vars) : resolved.data;
+    const schemaResult = validateSchema(data);
+    const schemaWarnings = schemaResult.diagnostics.filter(
+      (d2) => d2.severity === "warning"
+    );
+    if (!schemaResult.success) {
+      const output = formatDiagnostics(schemaResult.diagnostics, {
+        format: opts.format ?? "text",
+        quiet: !!opts.quiet
+      });
+      if (output) process.stderr.write(output + "\n");
+      process.exit(1);
+    }
+    const tsDiagnostics = lint(schemaResult.data);
+    const spectralDiagnostics = await spectralLint(
+      schemaResult.data
+    );
+    const diagnostics = [...tsDiagnostics, ...spectralDiagnostics, ...schemaWarnings];
+    if (diagnostics.length > 0) {
+      const output = formatDiagnostics(diagnostics, {
+        format: opts.format ?? "text",
+        quiet: !!opts.quiet
+      });
+      if (output) process.stderr.write(output + "\n");
+      if (diagnostics.some((d2) => d2.severity === "error")) process.exit(1);
+      if (opts.strict && diagnostics.some((d2) => d2.severity === "warning")) process.exit(1);
+    }
+    if (!opts.quiet && diagnostics.length === 0) process.stdout.write("Lint passed.\n");
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    process.stderr.write(`Error: ${msg}
+`);
+    process.exit(1);
+  }
+};
+var handleRender = async (opts) => {
+  process.stderr.write(
+    "Warning: 'render' is deprecated. Use 'agent-contracts generate templates' instead.\n"
+  );
+  await handleGenerate("templates", {
+    config: opts.config,
+    team: opts.team,
+    check: opts.check,
+    format: "yaml",
+    dryRun: false,
+    quiet: opts.quiet
+  }, {});
+};
+var handleCheck = async (opts) => {
+  let hasErrors = false;
+  try {
+    const config = await loadConfig(opts.config);
+    if (!config) {
+      process.stderr.write(
+        "Error: agent-contracts.config.yaml not found. Use --config to specify path.\n"
+      );
+      process.exit(1);
+    }
+    if (isMultiTeamConfig(config)) {
+      const teamEntries = getTeamEntries(config, opts.team);
+      for (const [teamId, teamConfig] of teamEntries) {
+        if (!opts.quiet) process.stderr.write(`
+--- Team: ${teamId} ---
+`);
+        const resolved2 = await resolve4(teamConfig.dsl);
+        const data2 = teamConfig.vars ? substituteVars(resolved2.data, teamConfig.vars) : resolved2.data;
+        const schemaResult2 = validateSchema(data2);
+        const schemaWarnings2 = schemaResult2.diagnostics.filter((d2) => d2.severity === "warning");
+        if (!schemaResult2.success) {
+          const output = formatDiagnostics(schemaResult2.diagnostics, {
+            format: opts.format ?? "text",
+            quiet: !!opts.quiet
+          });
+          if (output) process.stderr.write(output + "\n");
+          hasErrors = true;
+          continue;
+        }
+        const refDiags2 = checkReferences(schemaResult2.data);
+        const handoffDiags2 = validateHandoffSchemas(schemaResult2.data);
+        const allRefDiags2 = [...refDiags2, ...handoffDiags2, ...schemaWarnings2];
+        if (allRefDiags2.length > 0) {
+          const output = formatDiagnostics(allRefDiags2, {
+            format: opts.format ?? "text",
+            quiet: !!opts.quiet
+          });
+          if (output) process.stderr.write(output + "\n");
+          hasErrors = true;
+        }
+        const tsLintDiags2 = lint(schemaResult2.data);
+        const spectralDiags2 = await spectralLint(
+          schemaResult2.data
+        );
+        const lintDiags2 = [...tsLintDiags2, ...spectralDiags2];
+        if (lintDiags2.length > 0) {
+          const output = formatDiagnostics(lintDiags2, {
+            format: opts.format ?? "text",
+            quiet: !!opts.quiet
+          });
+          if (output) process.stderr.write(output + "\n");
+          if (lintDiags2.some((d2) => d2.severity === "error")) hasErrors = true;
+          if (opts.strict && lintDiags2.some((d2) => d2.severity === "warning")) hasErrors = true;
+        }
+        let renderOptions2;
+        if (teamConfig.bindings.length > 0) {
+          const loadedBindings = await loadBindings(teamConfig.bindings);
+          renderOptions2 = { loadedBindings, activeGuardrailPolicy: teamConfig.activeGuardrailPolicy };
+        }
+        const drift2 = await checkDriftFromConfig(schemaResult2.data, config.renders, renderOptions2);
+        if (drift2.hasDrift) {
+          process.stderr.write(`Drift detected for team ${teamId} in:
+`);
+          for (const f2 of drift2.diffs) process.stderr.write(`  ${f2}
+`);
+          hasErrors = true;
+        }
+      }
+      if (!hasErrors) {
+        for (const [teamId, teamConfig] of teamEntries) {
+          const resolved2 = await resolve4(teamConfig.dsl);
+          const data2 = teamConfig.vars ? substituteVars(resolved2.data, teamConfig.vars) : resolved2.data;
+          const schemaResult2 = validateSchema(data2);
+          if (!schemaResult2.success || !schemaResult2.data) continue;
+          const dsl = schemaResult2.data;
+          const imports = dsl.imports;
+          if (!imports) continue;
+          for (const [importName, importDef] of Object.entries(imports)) {
+            const interfacePathRel = importDef?.interface;
+            if (typeof interfacePathRel !== "string") continue;
+            const interfacePath = pathResolve(dirname7(teamConfig.dsl), interfacePathRel);
+            try {
+              await access2(interfacePath);
+            } catch {
+              process.stderr.write(
+                `Cross-team error: Team "${teamId}" imports "${importName}" but interface file not found: ${interfacePath}
+`
+              );
+              hasErrors = true;
+            }
+          }
+        }
+      }
+      if (hasErrors) process.exit(1);
+      if (!opts.quiet) process.stdout.write("All checks passed.\n");
+      return;
+    }
+    const resolved = await resolve4(config.dsl);
+    const data = config.vars ? substituteVars(resolved.data, config.vars) : resolved.data;
+    const schemaResult = validateSchema(data);
+    const schemaWarnings = schemaResult.diagnostics.filter((d2) => d2.severity === "warning");
+    if (!schemaResult.success) {
+      const output = formatDiagnostics(schemaResult.diagnostics, {
+        format: opts.format ?? "text",
+        quiet: !!opts.quiet
+      });
+      if (output) process.stderr.write(output + "\n");
+      process.exit(1);
+    }
+    const refDiags = checkReferences(schemaResult.data);
+    const handoffDiags = validateHandoffSchemas(schemaResult.data);
+    const allRefDiags = [...refDiags, ...handoffDiags, ...schemaWarnings];
+    if (allRefDiags.length > 0) {
+      const output = formatDiagnostics(allRefDiags, {
+        format: opts.format ?? "text",
+        quiet: !!opts.quiet
+      });
+      if (output) process.stderr.write(output + "\n");
+      hasErrors = true;
+    }
+    const tsLintDiags = lint(schemaResult.data);
+    const spectralDiags = await spectralLint(
+      schemaResult.data
+    );
+    const lintDiags = [...tsLintDiags, ...spectralDiags];
+    if (lintDiags.length > 0) {
+      const output = formatDiagnostics(lintDiags, {
+        format: opts.format ?? "text",
+        quiet: !!opts.quiet
+      });
+      if (output) process.stderr.write(output + "\n");
+      if (lintDiags.some((d2) => d2.severity === "error")) hasErrors = true;
+      if (opts.strict && lintDiags.some((d2) => d2.severity === "warning")) hasErrors = true;
+    }
+    let renderOptions;
+    if (config.bindings.length > 0) {
+      const loadedBindings = await loadBindings(config.bindings);
+      renderOptions = { loadedBindings, activeGuardrailPolicy: config.activeGuardrailPolicy };
+    }
+    const drift = await checkDriftFromConfig(schemaResult.data, config.renders, renderOptions);
+    if (drift.hasDrift) {
+      process.stderr.write("Drift detected in:\n");
+      for (const f2 of drift.diffs) process.stderr.write(`  ${f2}
+`);
+      hasErrors = true;
+    }
+    if (schemaResult.data.team_interface) {
+      const interfacePath = join3(config.configDir, "team-interface.yaml");
+      if (existsSync(interfacePath)) {
+        const result = generateInterface({ dsl: schemaResult.data, dryRun: true, format: "yaml" });
+        const existing = readFileSync(interfacePath, "utf8");
+        const normalize = (raw) => {
+          try {
+            const parsed = parseYaml4(raw);
+            if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
+              const { generated_at: _t, ...rest } = parsed;
+              return `${stringify3(rest, { sortMapEntries: true })}
+`;
+            }
+          } catch {
+          }
+          return raw.trim();
+        };
+        if (normalize(existing) !== normalize(result.content)) {
+          process.stderr.write("Drift detected in team-interface.yaml\n");
+          hasErrors = true;
+        }
+      }
+    }
+    if (hasErrors) process.exit(1);
+    if (!opts.quiet) process.stdout.write("All checks passed.\n");
+  } catch (err) {
+    if (err instanceof ConfigLoadError) {
+      process.stderr.write(`Config error: ${err.message}
+`);
+      process.exit(1);
+    }
+    const msg = err instanceof Error ? err.message : String(err);
+    process.stderr.write(`Error: ${msg}
+`);
+    process.exit(1);
+  }
+};
+function formatScoreText(result) {
+  const lines = [];
+  lines.push(`DSL Completeness Score: ${result.overall}/100`);
+  lines.push("");
+  for (const d2 of result.dimensions) {
+    const detail = d2.total > 0 ? ` (${d2.score}/${d2.total} ${d2.id.split("-")[0]})` : "";
+    lines.push(`  ${d2.label.padEnd(40)} ${String(d2.percent).padStart(3)}%${detail}`);
+  }
+  const allRecs = result.dimensions.flatMap((d2) => d2.recommendations);
+  if (allRecs.length > 0) {
+    lines.push("");
+    lines.push("Recommendations:");
+    for (const rec of allRecs) lines.push(`  - ${rec}`);
+  }
+  return lines.join("\n");
+}
+var handleScore = async (dir, opts) => {
+  try {
+    const config = await loadConfig(opts.config);
+    if (config !== null && isMultiTeamConfig(config)) {
+      const teamEntries = getTeamEntries(config, opts.team);
+      let thresholdNum;
+      if (opts.threshold !== void 0) {
+        thresholdNum = parseInt(String(opts.threshold), 10);
+        if (isNaN(thresholdNum)) {
+          process.stderr.write(`Error: --threshold must be a number, got "${opts.threshold}"
+`);
+          process.exit(1);
+        }
+      }
+      let hasErrors = false;
+      for (const [teamId, teamConfig] of teamEntries) {
+        process.stdout.write(`
+--- Team: ${teamId} ---
+`);
+        const resolved2 = await resolve4(teamConfig.dsl);
+        const data2 = teamConfig.vars ? substituteVars(resolved2.data, teamConfig.vars) : resolved2.data;
+        const schemaResult2 = validateSchema(data2);
+        if (!schemaResult2.success) {
+          const issues = schemaResult2.diagnostics.map((d2) => `  ${d2.path}: ${d2.message}`).join("\n");
+          process.stderr.write(`Schema validation failed:
+${issues}
+`);
+          hasErrors = true;
+          continue;
+        }
+        const result2 = score(schemaResult2.data);
+        if (opts.format === "json") {
+          process.stdout.write(JSON.stringify(result2, null, 2) + "\n");
+        } else {
+          process.stdout.write(formatScoreText(result2) + "\n");
+        }
+        if (thresholdNum !== void 0 && result2.overall < thresholdNum) {
+          process.stderr.write(`Score ${result2.overall} is below threshold ${thresholdNum}
+`);
+          hasErrors = true;
+        }
+      }
+      if (hasErrors) process.exit(1);
+      return;
+    }
+    const dslPath = resolveDslPath(dir ?? DIR_DEFAULT, DIR_DEFAULT, config);
+    const resolved = await resolve4(dslPath);
+    const data = config?.vars ? substituteVars(resolved.data, config.vars) : resolved.data;
+    const schemaResult = validateSchema(data);
+    if (!schemaResult.success) {
+      const issues = schemaResult.diagnostics.map((d2) => `  ${d2.path}: ${d2.message}`).join("\n");
+      process.stderr.write(`Schema validation failed:
+${issues}
+`);
+      process.exit(1);
+    }
+    const result = score(schemaResult.data);
+    if (opts.format === "json") {
+      process.stdout.write(JSON.stringify(result, null, 2) + "\n");
+    } else {
+      process.stdout.write(formatScoreText(result) + "\n");
+    }
+    if (opts.threshold !== void 0) {
+      const threshold = parseInt(String(opts.threshold), 10);
+      if (isNaN(threshold)) {
+        process.stderr.write(`Error: --threshold must be a number, got "${opts.threshold}"
+`);
+        process.exit(1);
+      }
+      if (result.overall < threshold) {
+        process.stderr.write(`Score ${result.overall} is below threshold ${threshold}
+`);
+        process.exit(1);
+      }
+    }
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    process.stderr.write(`Error: ${msg}
+`);
+    process.exit(1);
+  }
+};
 var AUDIT_TYPES = ["render", "dsl", "prompt", "all"];
-function parseAuditConfig(config) {
-  if (!config) return {};
-  const audit = config;
+function parseAuditConfig(configObj) {
+  if (!configObj) return {};
+  const audit = configObj;
   return {
     adapter: audit.adapter,
     model: audit.model,
@@ -56685,7 +57103,7 @@ function parseAuditConfig(config) {
     cache_dir: audit.cache_dir
   };
 }
-async function runAuditForDsl(dslPath, vars, configObj, auditType, opts, failOn) {
+async function runAuditForDsl(dslPath, vars, configObj, auditType, auditOpts, failOn) {
   const resolved = await resolve4(dslPath);
   const data = vars ? substituteVars(resolved.data, vars) : resolved.data;
   const schemaResult = validateSchema(data);
@@ -56696,122 +57114,283 @@ async function runAuditForDsl(dslPath, vars, configObj, auditType, opts, failOn)
   const auditConfig = parseAuditConfig(
     configObj.audit
   );
-  if (opts.adapter) auditConfig.adapter = opts.adapter;
-  if (opts.model) auditConfig.model = opts.model;
+  if (auditOpts.adapter) auditConfig.adapter = auditOpts.adapter;
+  if (auditOpts.model) auditConfig.model = auditOpts.model;
   if (auditType === "all") {
     const results = await runAllAudits(schemaResult.data, configObj, auditConfig, {
-      format: opts.format,
-      scope: opts.scope,
-      dryRun: opts.dryRun
+      format: auditOpts.format,
+      scope: auditOpts.scope,
+      dryRun: auditOpts.dryRun
     });
     let output2;
-    if (opts.dryRun) {
-      output2 = results.map(
-        (r3) => `
+    if (auditOpts.dryRun) {
+      output2 = results.map((r3) => `
 --- Audit prompt: ${r3.auditType} ---
 ${r3.prompt}
-`
-      ).join("");
+`).join("");
     } else {
-      output2 = formatAuditResults(results, opts.format) + "\n";
+      output2 = formatAuditResults(results, auditOpts.format) + "\n";
     }
     return { exitCode: computeExitCode(results, failOn), output: output2 };
   }
   const result = await runAudit(schemaResult.data, configObj, auditConfig, {
     auditType,
-    format: opts.format,
-    scope: opts.scope,
-    dryRun: opts.dryRun
+    format: auditOpts.format,
+    scope: auditOpts.scope,
+    dryRun: auditOpts.dryRun
   });
   let output;
-  if (opts.dryRun) {
+  if (auditOpts.dryRun) {
     output = result.prompt + "\n";
   } else {
-    output = formatAuditResult(result, opts.format) + "\n";
+    output = formatAuditResult(result, auditOpts.format) + "\n";
   }
   return { exitCode: computeExitCode([result], failOn), output };
 }
-var auditCommand = new Command8("audit").description("Run LLM-based semantic audit on DSL definitions and generated outputs").argument("[type]", `Audit type: ${AUDIT_TYPES.join(", ")}`, "all").option("-c, --config <path>", "Path to agent-contracts.config.yaml").option("--team <id>", "Limit to one team (multi-team config only)").option("--format <format>", "Output format (text|json|markdown)", "text").option("--scope <entities>", "Limit audit scope (e.g. agents:architect,implementer)").option("--dry-run", "Output the audit prompt without calling LLM", false).option("--adapter <name>", "SDK adapter to use (default from config)").option("--model <name>", "LLM model override").option("--fail-on <level>", "Minimum severity that causes exit 10 (info|warning|error|critical)", "critical").option("-o, --output <file>", "Write result to a file instead of stdout").option("--report-format <fmt>", "Alias for --format (for cli-contracts standard conformance)").action(
-  async (type, opts) => {
-    if (!AUDIT_TYPES.includes(type)) {
-      process.stderr.write(
-        `Unknown audit type: "${type}". Use one of: ${AUDIT_TYPES.join(", ")}
+var handleAudit = async (type, opts) => {
+  const auditType = type ?? "all";
+  if (!AUDIT_TYPES.includes(auditType)) {
+    process.stderr.write(
+      `Unknown audit type: "${auditType}". Use one of: ${AUDIT_TYPES.join(", ")}
 `
+    );
+    process.exit(1);
+  }
+  const format2 = opts.reportFormat ?? opts.format ?? "text";
+  try {
+    const config = await loadConfig(opts.config);
+    if (!config) {
+      process.stderr.write(
+        "Error: agent-contracts.config.yaml not found. Use --config to specify path.\n"
       );
       process.exit(1);
     }
-    const format2 = opts.reportFormat ?? opts.format;
-    try {
-      const config = await loadConfig(opts.config);
-      if (!config) {
+    if (isMultiTeamConfig(config)) {
+      const teamEntries = getTeamEntries(config, opts.team);
+      let maxExit = 0;
+      const allOutput = [];
+      for (const [teamId, teamConfig] of teamEntries) {
+        process.stderr.write(`
+--- Team: ${teamId} ---
+`);
+        const result2 = await runAuditForDsl(
+          teamConfig.dsl,
+          teamConfig.vars,
+          config,
+          auditType,
+          { format: format2, scope: opts.scope, dryRun: !!opts.dryRun, adapter: opts.adapter, model: opts.model },
+          opts.failOn
+        );
+        process.stdout.write(result2.output);
+        allOutput.push(result2.output);
+        if (result2.exitCode > maxExit) maxExit = result2.exitCode;
+      }
+      if (opts.output) writeFileSync2(opts.output, allOutput.join(""), "utf8");
+      process.exit(maxExit);
+    }
+    const result = await runAuditForDsl(
+      config.dsl,
+      config.vars,
+      config,
+      auditType,
+      { format: format2, scope: opts.scope, dryRun: !!opts.dryRun, adapter: opts.adapter, model: opts.model },
+      opts.failOn
+    );
+    process.stdout.write(result.output);
+    if (opts.output) writeFileSync2(opts.output, result.output, "utf8");
+    process.exit(result.exitCode);
+  } catch (err) {
+    if (err instanceof ConfigLoadError) {
+      process.stderr.write(`Config error: ${err.message}
+`);
+      process.exit(1);
+    }
+    const msg = err instanceof Error ? err.message : String(err);
+    process.stderr.write(`Error: ${msg}
+`);
+    if (msg.includes("not installed")) process.exit(11);
+    if (msg.includes("adapter") || msg.includes("API")) process.exit(12);
+    process.exit(1);
+  }
+};
+var VALID_TYPES = ["templates", "guardrails", "interface"];
+function resolvedConfigForTeam(workspace, teamConfig) {
+  return {
+    dsl: "",
+    vars: teamConfig.vars,
+    renders: workspace.renders,
+    configDir: workspace.configDir,
+    bindings: teamConfig.bindings,
+    activeGuardrailPolicy: teamConfig.activeGuardrailPolicy,
+    paths: teamConfig.paths
+  };
+}
+var handleGenerate = async (type, opts) => {
+  if (type !== void 0 && !VALID_TYPES.includes(type)) {
+    process.stderr.write(`Unknown generate type: ${type}
+`);
+    process.exit(1);
+  }
+  const fmt = opts.format ?? "yaml";
+  if (fmt !== "yaml" && fmt !== "json") {
+    process.stderr.write(`Invalid --format: expected yaml or json, got ${fmt}
+`);
+    process.exit(1);
+  }
+  const normalizedType = type;
+  const targets = {
+    templates: normalizedType === void 0 || normalizedType === "templates",
+    guardrails: normalizedType === void 0 || normalizedType === "guardrails",
+    interface: normalizedType === void 0 || normalizedType === "interface"
+  };
+  try {
+    const config = await loadConfig(opts.config);
+    if (!config) {
+      process.stderr.write(
+        "Error: agent-contracts.config.yaml not found. Use --config to specify path.\n"
+      );
+      process.exit(1);
+    }
+    const processTeam = async (teamConfig, teamLabel) => {
+      let exitWithError = false;
+      const resolved = await resolve4(teamConfig.dsl);
+      const data = teamConfig.vars ? substituteVars(resolved.data, teamConfig.vars) : resolved.data;
+      const schemaResult = validateSchema(data);
+      if (!schemaResult.success) {
         process.stderr.write(
-          "Error: agent-contracts.config.yaml not found. Use --config to specify path.\n"
+          `Schema validation failed${teamLabel ? ` for team ${teamLabel}` : ""}. Run 'agent-contracts validate' for details.
+`
         );
-        process.exit(1);
+        return true;
       }
-      if (isMultiTeamConfig(config)) {
-        const teamEntries = getTeamEntries(config, opts.team);
-        let maxExit = 0;
-        const allOutput = [];
-        for (const [teamId, teamConfig] of teamEntries) {
-          process.stderr.write(`
---- Team: ${teamId} ---
+      if (targets.templates) {
+        let renderOptions;
+        if (teamConfig.bindings.length > 0) {
+          const loadedBindings = await loadBindings(teamConfig.bindings);
+          renderOptions = { loadedBindings, activeGuardrailPolicy: teamConfig.activeGuardrailPolicy };
+        }
+        if (opts.check) {
+          const drift = await checkDriftFromConfig(schemaResult.data, config.renders, renderOptions);
+          if (drift.hasDrift) {
+            process.stderr.write(`Drift detected${teamLabel ? ` for team ${teamLabel}` : ""} in the following files:
 `);
-          const result2 = await runAuditForDsl(
-            teamConfig.dsl,
-            teamConfig.vars,
-            config,
-            type,
-            { format: format2, scope: opts.scope, dryRun: opts.dryRun, adapter: opts.adapter, model: opts.model },
-            opts.failOn
-          );
-          process.stdout.write(result2.output);
-          allOutput.push(result2.output);
-          if (result2.exitCode > maxExit) maxExit = result2.exitCode;
-        }
-        if (opts.output) writeFileSync2(opts.output, allOutput.join(""), "utf8");
-        process.exit(maxExit);
-      }
-      const result = await runAuditForDsl(
-        config.dsl,
-        config.vars,
-        config,
-        type,
-        { format: format2, scope: opts.scope, dryRun: opts.dryRun, adapter: opts.adapter, model: opts.model },
-        opts.failOn
-      );
-      process.stdout.write(result.output);
-      if (opts.output) writeFileSync2(opts.output, result.output, "utf8");
-      process.exit(result.exitCode);
-    } catch (err) {
-      if (err instanceof ConfigLoadError) {
-        process.stderr.write(`Config error: ${err.message}
+            for (const f2 of drift.diffs) process.stderr.write(`  ${f2}
 `);
-        process.exit(1);
+            exitWithError = true;
+          } else if (!opts.quiet) {
+            process.stdout.write("No drift detected.\n");
+          }
+        } else {
+          const files = await renderFromConfig(schemaResult.data, config.renders, renderOptions);
+          if (!opts.quiet) {
+            process.stdout.write(`Rendered ${files.length} file(s):
+`);
+            for (const f2 of files) process.stdout.write(`  ${f2}
+`);
+          }
+        }
       }
-      const msg = err instanceof Error ? err.message : String(err);
-      process.stderr.write(`Error: ${msg}
+      if (targets.interface) {
+        if (schemaResult.data.team_interface) {
+          runGenerateInterfaceCli({
+            dsl: schemaResult.data,
+            output: teamConfig.interfaceOutput ?? opts.output,
+            dryRun: !!opts.dryRun,
+            format: fmt,
+            quiet: !!opts.quiet
+          });
+        } else if (normalizedType === "interface") {
+          process.stderr.write("Error: DSL has no team_interface section.\n");
+          exitWithError = true;
+        }
+      }
+      if (targets.guardrails) {
+        const loadedBindings = await loadBindings(teamConfig.bindings);
+        const cfgForTeam = teamLabel ? resolvedConfigForTeam(config, teamConfig) : config;
+        const result = await generateGuardrails({
+          dsl: schemaResult.data,
+          config: cfgForTeam,
+          loadedBindings,
+          filterBindings: opts.binding ? [opts.binding] : void 0,
+          dryRun: !!opts.dryRun
+        });
+        const errors = result.diagnostics.filter((d2) => d2.severity === "error");
+        const warnings = result.diagnostics.filter((d2) => d2.severity === "warning");
+        const infos = result.diagnostics.filter((d2) => d2.severity === "info");
+        if (errors.length > 0) {
+          process.stderr.write(`Errors${teamLabel ? ` (team ${teamLabel})` : ""}:
+`);
+          for (const d2 of errors) process.stderr.write(`  error [${d2.path}] ${d2.message}
+`);
+          exitWithError = true;
+        }
+        if (warnings.length > 0 && !opts.quiet) {
+          process.stderr.write(`Warnings${teamLabel ? ` (team ${teamLabel})` : ""}:
+`);
+          for (const d2 of warnings) process.stderr.write(`  warning [${d2.path}] ${d2.message}
+`);
+        }
+        if (infos.length > 0 && !opts.quiet) {
+          for (const d2 of infos) process.stderr.write(`  info [${d2.path}] ${d2.message}
+`);
+        }
+        if (!opts.quiet) {
+          const action = opts.dryRun ? "Would generate" : "Generated";
+          process.stdout.write(`${action} ${result.outputFiles.length} file(s):
+`);
+          for (const f2 of result.outputFiles) process.stdout.write(`  ${f2}
+`);
+        }
+      }
+      return exitWithError;
+    };
+    if (isMultiTeamConfig(config)) {
+      const teamEntries = getTeamEntries(config, opts.team);
+      let exitWithError = false;
+      for (const [teamId, teamConfig] of teamEntries) {
+        if (!opts.quiet) process.stdout.write(`
+--- Team: ${teamId} ---
+`);
+        if (await processTeam(teamConfig, teamId)) exitWithError = true;
+      }
+      if (exitWithError) process.exit(1);
+      return;
+    }
+    const singleTeamConfig = {
+      dsl: config.dsl,
+      vars: config.vars,
+      bindings: config.bindings,
+      activeGuardrailPolicy: config.activeGuardrailPolicy,
+      paths: config.paths
+    };
+    if (await processTeam(singleTeamConfig, void 0)) process.exit(1);
+  } catch (err) {
+    if (err instanceof ConfigLoadError) {
+      process.stderr.write(`Config error: ${err.message}
 `);
-      if (msg.includes("not installed")) process.exit(11);
-      if (msg.includes("adapter") || msg.includes("API")) process.exit(12);
       process.exit(1);
     }
+    const msg = err instanceof Error ? err.message : String(err);
+    process.stderr.write(`Error: ${msg}
+`);
+    process.exit(1);
   }
-);
+};
+var handlers = {
+  resolve: handleResolve,
+  validate: handleValidate,
+  lint: handleLint,
+  render: handleRender,
+  check: handleCheck,
+  score: handleScore,
+  audit: handleAudit,
+  generate: handleGenerate
+};
 
 // src/cli/cli.ts
 var __dirname = dirname8(fileURLToPath(import.meta.url));
 var pkg = JSON.parse(readFileSync2(resolve8(__dirname, "../package.json"), "utf8"));
-var program = new Command9();
-program.name("agent-contracts").description("Agent contracts tooling \u2014 validate, lint, render DSL files").version(pkg.version);
-program.addCommand(resolveCommand);
-program.addCommand(validateCommand);
-program.addCommand(lintCommand);
-program.addCommand(renderCommand);
-program.addCommand(checkCommand);
-program.addCommand(generateGuardrailsCommand);
-program.addCommand(scoreCommand);
-program.addCommand(auditCommand);
+var program = createProgram(handlers, pkg.version);
 program.parse();
 /*! Bundled license information: