agent-contracts 0.21.0 → 0.22.0

package/dist/cli.js

@@ -7367,7 +7367,7 @@ var init_dist = __esm({
 var require_stable = __commonJS({
   "node_modules/safe-stable-stringify/stable.js"(exports, module) {
     "use strict";
-    module.exports = stringify5;
+    module.exports = stringify4;
     var indentation = "";
     var strEscapeSequencesRegExp = /[\x00-\x1f\x22\x5c]/;
     var strEscapeSequencesReplacer = /[\x00-\x1f\x22\x5c]/g;
@@ -7943,7 +7943,7 @@ ${originalIndentation}`;
       }
       return arr;
     }
-    function stringify5(value, replacer, spacer) {
+    function stringify4(value, replacer, spacer) {
       var i3;
       var indent = "";
       indentation = "";
@@ -7982,9 +7982,9 @@ ${originalIndentation}`;
 var require_safe_stable_stringify = __commonJS({
   "node_modules/safe-stable-stringify/index.js"(exports, module) {
     "use strict";
-    var stringify5 = require_stable();
-    module.exports = stringify5;
-    stringify5.default = stringify5;
+    var stringify4 = require_stable();
+    module.exports = stringify4;
+    stringify4.default = stringify4;
   }
 });
 
@@ -34148,7 +34148,7 @@ var require_astring = __commonJS({
       if (staticProps) _defineProperties(Constructor, staticProps);
       return Constructor;
     }
-    var stringify5 = JSON.stringify;
+    var stringify4 = JSON.stringify;
     if (!String.prototype.repeat) {
       throw new Error("String.prototype.repeat is undefined, see https://github.com/davidbonnet/astring#installation");
     }
@@ -35070,7 +35070,7 @@ var require_astring = __commonJS({
         } else if (node.bigint != null) {
           state.write(node.bigint + "n", node);
         } else {
-          state.write(stringify5(node.value), node);
+          state.write(stringify4(node.value), node);
         }
       },
       RegExpLiteral: function RegExpLiteral(node, state) {
@@ -48892,11 +48892,579 @@ var require_dist14 = __commonJS({
 import { readFileSync as readFileSync2 } from "fs";
 import { fileURLToPath } from "url";
 import { resolve as resolve8, dirname as dirname8 } from "path";
-import { Command as Command9 } from "commander";
 
-// src/cli/commands/resolve.ts
+// src/generated/cli-contract/program.ts
 import { Command } from "commander";
 
+// src/generated/cli-contract/policy.ts
+import { derivePolicy, isOptionActive } from "cli-contracts/policy";
+var commandDefinitions = {
+  "resolve": {
+    "options": [
+      {
+        "name": "config",
+        "schema": {
+          "type": "string"
+        },
+        "file": {
+          "mode": "read",
+          "exists": false,
+          "mediaType": "application/yaml",
+          "encoding": "utf-8"
+        }
+      },
+      {
+        "name": "team",
+        "schema": {
+          "type": "string"
+        }
+      },
+      {
+        "name": "format",
+        "schema": {
+          "type": "string",
+          "enum": [
+            "text",
+            "json"
+          ],
+          "default": "text"
+        }
+      },
+      {
+        "name": "expand-defaults",
+        "schema": {
+          "type": "boolean",
+          "default": false
+        }
+      }
+    ]
+  },
+  "validate": {
+    "options": [
+      {
+        "name": "config",
+        "schema": {
+          "type": "string"
+        },
+        "file": {
+          "mode": "read",
+          "exists": false,
+          "mediaType": "application/yaml",
+          "encoding": "utf-8"
+        }
+      },
+      {
+        "name": "team",
+        "schema": {
+          "type": "string"
+        }
+      },
+      {
+        "name": "format",
+        "schema": {
+          "type": "string",
+          "enum": [
+            "text",
+            "json"
+          ],
+          "default": "text"
+        }
+      },
+      {
+        "name": "quiet",
+        "schema": {
+          "type": "boolean",
+          "default": false
+        }
+      },
+      {
+        "name": "strict",
+        "schema": {
+          "type": "boolean",
+          "default": false
+        }
+      }
+    ]
+  },
+  "lint": {
+    "options": [
+      {
+        "name": "config",
+        "schema": {
+          "type": "string"
+        },
+        "file": {
+          "mode": "read",
+          "exists": false,
+          "mediaType": "application/yaml",
+          "encoding": "utf-8"
+        }
+      },
+      {
+        "name": "team",
+        "schema": {
+          "type": "string"
+        }
+      },
+      {
+        "name": "format",
+        "schema": {
+          "type": "string",
+          "enum": [
+            "text",
+            "json"
+          ],
+          "default": "text"
+        }
+      },
+      {
+        "name": "quiet",
+        "schema": {
+          "type": "boolean",
+          "default": false
+        }
+      },
+      {
+        "name": "strict",
+        "schema": {
+          "type": "boolean",
+          "default": false
+        }
+      }
+    ]
+  },
+  "render": {
+    "effects": {
+      "riskLevel": "medium",
+      "writes": [
+        {
+          "target": "configured render output paths",
+          "description": "rendered template files from DSL input",
+          "overwrite": true,
+          "idempotent": true,
+          "idempotentNote": "Output is deterministic from DSL input and templates. Repeated runs produce identical files."
+        }
+      ]
+    },
+    "options": [
+      {
+        "name": "config",
+        "schema": {
+          "type": "string"
+        },
+        "file": {
+          "mode": "read",
+          "exists": false,
+          "mediaType": "application/yaml",
+          "encoding": "utf-8"
+        }
+      },
+      {
+        "name": "team",
+        "schema": {
+          "type": "string"
+        }
+      },
+      {
+        "name": "check",
+        "schema": {
+          "type": "boolean",
+          "default": false
+        }
+      },
+      {
+        "name": "quiet",
+        "schema": {
+          "type": "boolean",
+          "default": false
+        }
+      }
+    ]
+  },
+  "check": {
+    "options": [
+      {
+        "name": "config",
+        "schema": {
+          "type": "string"
+        },
+        "file": {
+          "mode": "read",
+          "exists": false,
+          "mediaType": "application/yaml",
+          "encoding": "utf-8"
+        }
+      },
+      {
+        "name": "team",
+        "schema": {
+          "type": "string"
+        }
+      },
+      {
+        "name": "format",
+        "schema": {
+          "type": "string",
+          "enum": [
+            "text",
+            "json"
+          ],
+          "default": "text"
+        }
+      },
+      {
+        "name": "quiet",
+        "schema": {
+          "type": "boolean",
+          "default": false
+        }
+      },
+      {
+        "name": "strict",
+        "schema": {
+          "type": "boolean",
+          "default": false
+        }
+      }
+    ]
+  },
+  "score": {
+    "options": [
+      {
+        "name": "config",
+        "schema": {
+          "type": "string"
+        },
+        "file": {
+          "mode": "read",
+          "exists": false,
+          "mediaType": "application/yaml",
+          "encoding": "utf-8"
+        }
+      },
+      {
+        "name": "team",
+        "schema": {
+          "type": "string"
+        }
+      },
+      {
+        "name": "format",
+        "schema": {
+          "type": "string",
+          "enum": [
+            "text",
+            "json"
+          ],
+          "default": "text"
+        }
+      },
+      {
+        "name": "threshold",
+        "schema": {
+          "type": "integer"
+        }
+      }
+    ]
+  },
+  "audit": {
+    "effects": {
+      "riskLevel": "medium",
+      "network": {
+        "description": "LLM API calls to configured adapter (e.g. OpenAI, Gemini, Cursor). Incurs token cost and sends DSL content to the LLM provider.",
+        "idempotent": false,
+        "idempotentNote": "LLM inference is non-deterministic \u2014 identical inputs may produce different findings across runs."
+      }
+    },
+    "options": [
+      {
+        "name": "config",
+        "schema": {
+          "type": "string"
+        },
+        "file": {
+          "mode": "read",
+          "exists": false,
+          "mediaType": "application/yaml",
+          "encoding": "utf-8"
+        }
+      },
+      {
+        "name": "team",
+        "schema": {
+          "type": "string"
+        }
+      },
+      {
+        "name": "format",
+        "schema": {
+          "type": "string",
+          "enum": [
+            "text",
+            "json",
+            "markdown"
+          ],
+          "default": "text"
+        }
+      },
+      {
+        "name": "scope",
+        "schema": {
+          "type": "string"
+        }
+      },
+      {
+        "name": "dry-run",
+        "schema": {
+          "type": "boolean",
+          "default": false
+        }
+      },
+      {
+        "name": "adapter",
+        "schema": {
+          "type": "string"
+        }
+      },
+      {
+        "name": "model",
+        "schema": {
+          "type": "string"
+        }
+      },
+      {
+        "name": "fail-on",
+        "schema": {
+          "type": "string",
+          "enum": [
+            "info",
+            "warning",
+            "error",
+            "critical"
+          ],
+          "default": "critical"
+        }
+      },
+      {
+        "name": "output",
+        "schema": {
+          "type": "string"
+        },
+        "file": {
+          "mode": "write",
+          "encoding": "utf-8"
+        }
+      },
+      {
+        "name": "report-format",
+        "schema": {
+          "type": "string",
+          "enum": [
+            "text",
+            "json",
+            "markdown"
+          ],
+          "default": "text"
+        }
+      }
+    ]
+  },
+  "generate": {
+    "effects": {
+      "riskLevel": "low",
+      "writes": [
+        {
+          "target": "configured render, guardrail, and interface output paths",
+          "description": "template files, guardrail binding files, and/or team interface files generated from DSL input",
+          "overwrite": true,
+          "idempotent": true,
+          "idempotentNote": "Output is deterministic from DSL input, templates, policies, and bindings. Repeated runs produce identical files."
+        }
+      ]
+    },
+    "options": [
+      {
+        "name": "config",
+        "schema": {
+          "type": "string"
+        },
+        "file": {
+          "mode": "read",
+          "exists": false,
+          "mediaType": "application/yaml",
+          "encoding": "utf-8"
+        }
+      },
+      {
+        "name": "team",
+        "schema": {
+          "type": "string"
+        }
+      },
+      {
+        "name": "check",
+        "schema": {
+          "type": "boolean",
+          "default": false
+        }
+      },
+      {
+        "name": "binding",
+        "schema": {
+          "type": "string"
+        },
+        "repeatable": true
+      },
+      {
+        "name": "output",
+        "schema": {
+          "type": "string"
+        },
+        "file": {
+          "mode": "write",
+          "mediaType": "application/yaml",
+          "encoding": "utf-8"
+        }
+      },
+      {
+        "name": "format",
+        "schema": {
+          "type": "string",
+          "enum": [
+            "yaml",
+            "json"
+          ],
+          "default": "yaml"
+        }
+      },
+      {
+        "name": "dry-run",
+        "schema": {
+          "type": "boolean",
+          "default": false
+        }
+      },
+      {
+        "name": "quiet",
+        "schema": {
+          "type": "boolean",
+          "default": false
+        }
+      }
+    ]
+  }
+};
+function deriveCommandPolicy(commandId, optionValues) {
+  const def = commandDefinitions[commandId];
+  if (!def) throw new Error(`Unknown command: ${commandId}`);
+  const cmdDef = def;
+  const options = {};
+  const activeOptions = [];
+  for (const optDef of cmdDef.options ?? []) {
+    const value = optionValues[optDef.name];
+    const specified = optDef.name in optionValues && value !== void 0;
+    options[optDef.name] = { value, specified, definition: optDef };
+    if (isOptionActive(optDef, value, specified)) {
+      activeOptions.push(optDef.name);
+    }
+  }
+  const policy = derivePolicy({
+    commandId,
+    commandEffects: cmdDef.effects,
+    options,
+    env: cmdDef.env
+  });
+  return { command: commandId, activeOptions, policy };
+}
+
+// src/generated/cli-contract/program.ts
+function createProgram(handlers2, version) {
+  const program2 = new Command();
+  program2.name("agent-contracts").version(version, "-V, --version").description("Agent contracts tooling \u2014 validate, lint, render DSL files.");
+  program2.option("--introspect", "Output derived policy as JSON without executing the command");
+  program2.command("resolve").description("Resolve DSL (load + merge extends) and output YAML.").argument("[dir]", "Path to agent-contracts.yaml.").option("-c, --config <path>", "Path to agent-contracts.config.yaml.").option("--team <id>", "Limit to one team (multi-team config only).").option("--format <format>", "Output format.", "text").option("--expand-defaults", "Expand all Zod default values in output. Fields like required_validations, tags, and can_read_artifacts are written explicitly instead of relying on schema defaults.", false).action(async (dir, opts, cmd) => {
+    const globalOpts = cmd.optsWithGlobals();
+    if (globalOpts.introspect) {
+      const policy = deriveCommandPolicy("resolve", opts);
+      console.log(JSON.stringify(policy, null, 2));
+      return;
+    }
+    await handlers2.resolve(dir, opts, globalOpts);
+  });
+  program2.command("validate").description("Validate DSL against schema and check references.").argument("[dir]", "Path to agent-contracts.yaml.").option("-c, --config <path>", "Path to agent-contracts.config.yaml.").option("--team <id>", "Limit to one team (multi-team config only).").option("--format <format>", "Diagnostic output format.", "text").option("--quiet", "Suppress output on success.", false).option("--strict", "Treat warnings as errors.", false).action(async (dir, opts, cmd) => {
+    const globalOpts = cmd.optsWithGlobals();
+    if (globalOpts.introspect) {
+      const policy = deriveCommandPolicy("validate", opts);
+      console.log(JSON.stringify(policy, null, 2));
+      return;
+    }
+    await handlers2.validate(dir, opts, globalOpts);
+  });
+  program2.command("lint").description("Run semantic lint rules on resolved DSL.").argument("[dir]", "Path to agent-contracts.yaml.").option("-c, --config <path>", "Path to agent-contracts.config.yaml.").option("--team <id>", "Limit to one team (multi-team config only).").option("--format <format>", "Output format.", "text").option("--quiet", "Suppress output on success.", false).option("--strict", "Treat warnings as errors.", false).action(async (dir, opts, cmd) => {
+    const globalOpts = cmd.optsWithGlobals();
+    if (globalOpts.introspect) {
+      const policy = deriveCommandPolicy("lint", opts);
+      console.log(JSON.stringify(policy, null, 2));
+      return;
+    }
+    await handlers2.lint(dir, opts, globalOpts);
+  });
+  program2.command("render").description("(deprecated) Alias for 'generate templates'.").option("-c, --config <path>", "Path to agent-contracts.config.yaml.").option("--team <id>", "Limit to one team (multi-team config only).").option("--check", "Check for template drift without writing files.", false).option("--quiet", "Suppress output on success.", false).action(async (opts, cmd) => {
+    const globalOpts = cmd.optsWithGlobals();
+    if (globalOpts.introspect) {
+      const policy = deriveCommandPolicy("render", opts);
+      console.log(JSON.stringify(policy, null, 2));
+      return;
+    }
+    await handlers2.render(opts, globalOpts);
+  });
+  program2.command("check").description("Run full pipeline \u2014 resolve, validate, lint, render --check.").option("-c, --config <path>", "Path to agent-contracts.config.yaml.").option("--team <id>", "Limit to one team (multi-team config only).").option("--format <format>", "Diagnostic output format.", "text").option("--quiet", "Suppress output on success.", false).option("--strict", "Treat warnings as errors.", false).action(async (opts, cmd) => {
+    const globalOpts = cmd.optsWithGlobals();
+    if (globalOpts.introspect) {
+      const policy = deriveCommandPolicy("check", opts);
+      console.log(JSON.stringify(policy, null, 2));
+      return;
+    }
+    await handlers2.check(opts, globalOpts);
+  });
+  program2.command("score").description("Calculate DSL completeness score.").argument("[dir]", "Path to agent-contracts.yaml.").option("-c, --config <path>", "Path to agent-contracts.config.yaml.").option("--team <id>", "Limit to one team (multi-team config only).").option("--format <format>", "Output format.", "text").option("--threshold <number>", "Minimum score; exit 1 if below (for CI gates).").action(async (dir, opts, cmd) => {
+    const globalOpts = cmd.optsWithGlobals();
+    if (globalOpts.introspect) {
+      const policy = deriveCommandPolicy("score", opts);
+      console.log(JSON.stringify(policy, null, 2));
+      return;
+    }
+    await handlers2.score(dir, opts, globalOpts);
+  });
+  program2.command("audit").description("Run LLM-based semantic audit on DSL definitions and generated outputs.").argument("[type]", "Audit type to run: render (semantic diff of generated outputs vs DSL), dsl (design coherence review), prompt (generated prompt fidelity check), or all (run all three).").option("-c, --config <path>", "Path to agent-contracts.config.yaml.").option("--team <id>", "Limit to one team (multi-team config only).").option("--format <format>", "Output format.", "text").option("--scope <entities>", "Limit audit scope to specified entities (e.g. agents:architect,implementer).").option("--dry-run", "Output the audit prompt without calling LLM.", false).option("--adapter <name>", "SDK adapter to use for LLM calls (overrides config audit.adapter).").option("--model <name>", "LLM model override (overrides config audit.model).").option("--fail-on <level>", "Minimum finding severity that causes exit 10 (info|warning|error|critical).", "critical").option("-o, --output <file>", "Write result to a file instead of stdout.").option("--report-format <fmt>", "Alias for --format. When both are specified, --report-format takes precedence.", "text").action(async (type, opts, cmd) => {
+    const globalOpts = cmd.optsWithGlobals();
+    if (globalOpts.introspect) {
+      const policy = deriveCommandPolicy("audit", opts);
+      console.log(JSON.stringify(policy, null, 2));
+      return;
+    }
+    await handlers2.audit(type, opts, globalOpts);
+  });
+  program2.command("generate").description("Generate artifacts from DSL \u2014 templates, guardrails, and/or interface.").argument("[type]", "Type of artifacts to generate. Omit to run all targets.").option("-c, --config <path>", "Path to agent-contracts.config.yaml.").option("--team <id>", "Limit to one team (multi-team config only).").option("--check", "Check for template drift without writing files. Only applies to the templates target.", false).option("--binding <name...>", "Filter to specific software binding(s). Guardrails type only.").option("-o, --output <path>", "Output path for generated team interface. Interface type only.").option("--format <format>", "Output format for team interface (yaml or json). Interface type only.", "yaml").option("--dry-run", "Print what would be generated without writing files.", false).option("--quiet", "Suppress output on success.", false).action(async (type, opts, cmd) => {
+    const globalOpts = cmd.optsWithGlobals();
+    if (globalOpts.introspect) {
+      const policy = deriveCommandPolicy("generate", opts);
+      console.log(JSON.stringify(policy, null, 2));
+      return;
+    }
+    await handlers2.generate(type, opts, globalOpts);
+  });
+  return program2;
+}
+
+// src/cli/handlers.ts
+import { writeFileSync as writeFileSync2 } from "fs";
+import { existsSync, readFileSync } from "fs";
+import { join as join3, dirname as dirname7 } from "path";
+import { resolve as pathResolve } from "path";
+import { access as access2 } from "fs/promises";
+import { stringify as stringify3, parse as parseYaml4 } from "yaml";
+
 // src/config/binding-loader.ts
 import { readFile as readFile3 } from "fs/promises";
 import { dirname as dirname4, resolve as resolve5 } from "path";
@@ -50472,85 +51040,6 @@ ${issues}`,
   return results;
 }
 
-// src/cli/commands/resolve.ts
-import { stringify } from "yaml";
-
-// src/cli/multi-team.ts
-function isMultiTeamConfig(config) {
-  return config.teams !== void 0 && Object.keys(config.teams).length > 0;
-}
-function getTeamEntries(config, teamFilter) {
-  if (!config.teams) return [];
-  const entries = Object.entries(config.teams);
-  if (teamFilter) {
-    const found = entries.filter(([k2]) => k2 === teamFilter);
-    if (found.length === 0) {
-      throw new Error(
-        `Team "${teamFilter}" not found. Available teams: ${entries.map(([k2]) => k2).join(", ")}`
-      );
-    }
-    return found;
-  }
-  return entries;
-}
-
-// src/cli/commands/resolve.ts
-var DIR_DEFAULT = "agent-contracts.yaml";
-var resolveCommand = new Command("resolve").description("Resolve DSL (load + merge extends) and output YAML").argument("[dir]", "Path to agent-contracts.yaml", DIR_DEFAULT).option("-c, --config <path>", "Path to agent-contracts.config.yaml").option("--team <id>", "Limit to one team (multi-team config only)").option("--format <format>", "Output format (text|json)", "text").option("--expand-defaults", "Expand all Zod default values in output", false).action(
-  async (dir, opts) => {
-    try {
-      const config = await loadConfig(opts.config);
-      if (config !== null && isMultiTeamConfig(config)) {
-        const teamEntries = getTeamEntries(config, opts.team);
-        if (opts.format === "json") {
-          const out = {};
-          for (const [teamId, teamConfig] of teamEntries) {
-            const result2 = await resolve4(teamConfig.dsl);
-            let data2 = teamConfig.vars ? substituteVars(result2.data, teamConfig.vars) : result2.data;
-            if (opts.expandDefaults) {
-              data2 = expandDefaults(data2);
-            }
-            out[teamId] = data2;
-          }
-          process.stdout.write(JSON.stringify(out, null, 2) + "\n");
-        } else {
-          for (const [teamId, teamConfig] of teamEntries) {
-            process.stdout.write(`
---- Team: ${teamId} ---
-`);
-            const result2 = await resolve4(teamConfig.dsl);
-            let data2 = teamConfig.vars ? substituteVars(result2.data, teamConfig.vars) : result2.data;
-            if (opts.expandDefaults) {
-              data2 = expandDefaults(data2);
-            }
-            process.stdout.write(stringify(data2));
-          }
-        }
-        return;
-      }
-      const dslPath = resolveDslPath(dir, DIR_DEFAULT, config);
-      const result = await resolve4(dslPath);
-      let data = config?.vars ? substituteVars(result.data, config.vars) : result.data;
-      if (opts.expandDefaults) {
-        data = expandDefaults(data);
-      }
-      if (opts.format === "json") {
-        process.stdout.write(JSON.stringify(data, null, 2) + "\n");
-      } else {
-        process.stdout.write(stringify(data));
-      }
-    } catch (err) {
-      const msg = err instanceof Error ? err.message : String(err);
-      process.stderr.write(`Error: ${msg}
-`);
-      process.exit(1);
-    }
-  }
-);
-
-// src/cli/commands/validate.ts
-import { Command as Command2 } from "commander";
-
 // src/validator/schema-validator.ts
 import Ajv from "ajv";
 import { z as z18 } from "zod";
@@ -51672,107 +52161,6 @@ function validateHandoffSchemas(dsl) {
   return diagnostics;
 }
 
-// src/cli/format.ts
-function formatDiagnostics(diagnostics, options) {
-  if (options.quiet && diagnostics.length === 0) return "";
-  if (options.format === "json") {
-    return JSON.stringify(diagnostics, null, 2);
-  }
-  return diagnostics.map((d2) => {
-    const severity = d2.severity ?? d2.code ?? "error";
-    const rule = d2.ruleId ?? d2.code ?? "";
-    return `${d2.path}: ${severity} [${rule}] ${d2.message}`;
-  }).join("\n");
-}
-
-// src/cli/commands/validate.ts
-var DIR_DEFAULT2 = "agent-contracts.yaml";
-var validateCommand = new Command2("validate").description("Validate DSL against schema and check references").argument("[dir]", "Path to agent-contracts.yaml", DIR_DEFAULT2).option("-c, --config <path>", "Path to agent-contracts.config.yaml").option("--team <id>", "Limit to one team (multi-team config only)").option("--format <format>", "Output format (text|json)", "text").option("--quiet", "Suppress output on success", false).option("--strict", "Treat warnings as errors", false).action(
-  async (dir, opts) => {
-    try {
-      const config = await loadConfig(opts.config);
-      if (config !== null && isMultiTeamConfig(config)) {
-        const teamEntries = getTeamEntries(config, opts.team);
-        let hasErrors = false;
-        let allTeamsFullyClean = true;
-        for (const [teamId, teamConfig] of teamEntries) {
-          if (!opts.quiet) process.stdout.write(`
---- Team: ${teamId} ---
-`);
-          const resolved2 = await resolve4(teamConfig.dsl);
-          const data2 = teamConfig.vars ? substituteVars(resolved2.data, teamConfig.vars) : resolved2.data;
-          const schemaResult2 = validateSchema(data2);
-          const schemaWarnings2 = schemaResult2.diagnostics.filter(
-            (d2) => d2.severity === "warning"
-          );
-          if (!schemaResult2.success) {
-            const output = formatDiagnostics(schemaResult2.diagnostics, opts);
-            if (output) process.stderr.write(output + "\n");
-            hasErrors = true;
-            allTeamsFullyClean = false;
-            continue;
-          }
-          const refDiags2 = checkReferences(schemaResult2.data);
-          const handoffDiags2 = validateHandoffSchemas(schemaResult2.data);
-          const allDiags2 = [...refDiags2, ...handoffDiags2, ...schemaWarnings2];
-          const hasWarnings2 = allDiags2.some(
-            (d2) => "severity" in d2 && d2.severity === "warning"
-          );
-          if (allDiags2.length > 0) {
-            allTeamsFullyClean = false;
-            const output = formatDiagnostics(allDiags2, opts);
-            if (output) process.stderr.write(output + "\n");
-            if (refDiags2.length > 0 || handoffDiags2.length > 0 || opts.strict && hasWarnings2) {
-              hasErrors = true;
-            }
-          }
-        }
-        if (hasErrors) process.exit(1);
-        if (!opts.quiet && allTeamsFullyClean) {
-          process.stdout.write("Validation passed.\n");
-        }
-        return;
-      }
-      const dslPath = resolveDslPath(dir, DIR_DEFAULT2, config);
-      const resolved = await resolve4(dslPath);
-      const data = config?.vars ? substituteVars(resolved.data, config.vars) : resolved.data;
-      const schemaResult = validateSchema(data);
-      const schemaWarnings = schemaResult.diagnostics.filter(
-        (d2) => d2.severity === "warning"
-      );
-      if (!schemaResult.success) {
-        const output = formatDiagnostics(schemaResult.diagnostics, opts);
-        if (output) process.stderr.write(output + "\n");
-        process.exit(1);
-      }
-      const refDiags = checkReferences(schemaResult.data);
-      const handoffDiags = validateHandoffSchemas(schemaResult.data);
-      const allDiags = [...refDiags, ...handoffDiags, ...schemaWarnings];
-      const hasWarnings = allDiags.some(
-        (d2) => "severity" in d2 && d2.severity === "warning"
-      );
-      if (allDiags.length > 0) {
-        const output = formatDiagnostics(allDiags, opts);
-        if (output) process.stderr.write(output + "\n");
-        if (refDiags.length > 0 || handoffDiags.length > 0 || opts.strict && hasWarnings) {
-          process.exit(1);
-        }
-      }
-      if (!opts.quiet && allDiags.length === 0) {
-        process.stdout.write("Validation passed.\n");
-      }
-    } catch (err) {
-      const msg = err instanceof Error ? err.message : String(err);
-      process.stderr.write(`Error: ${msg}
-`);
-      process.exit(1);
-    }
-  }
-);
-
-// src/cli/commands/lint.ts
-import { Command as Command3 } from "commander";
-
 // src/linter/rules/validation-coverage.ts
 var validationCoverageRule = {
   id: "validation-coverage",
@@ -53164,173 +53552,6 @@ async function spectralLint(dslObject) {
   }));
 }
 
-// src/cli/commands/lint.ts
-var DIR_DEFAULT3 = "agent-contracts.yaml";
-var lintCommand = new Command3("lint").description("Run semantic lint rules on resolved DSL").argument("[dir]", "Path to agent-contracts.yaml", DIR_DEFAULT3).option("-c, --config <path>", "Path to agent-contracts.config.yaml").option("--team <id>", "Limit to one team (multi-team config only)").option("--format <format>", "Output format (text|json)", "text").option("--quiet", "Suppress output on success", false).option("--strict", "Treat warnings as errors", false).action(
-  async (dir, opts) => {
-    try {
-      const config = await loadConfig(opts.config);
-      if (config !== null && isMultiTeamConfig(config)) {
-        const teamEntries = getTeamEntries(config, opts.team);
-        let hasErrors = false;
-        let allClean = true;
-        for (const [teamId, teamConfig] of teamEntries) {
-          if (!opts.quiet) process.stdout.write(`
---- Team: ${teamId} ---
-`);
-          const resolved2 = await resolve4(teamConfig.dsl);
-          const data2 = teamConfig.vars ? substituteVars(resolved2.data, teamConfig.vars) : resolved2.data;
-          const schemaResult2 = validateSchema(data2);
-          const schemaWarnings2 = schemaResult2.diagnostics.filter(
-            (d2) => d2.severity === "warning"
-          );
-          if (!schemaResult2.success) {
-            const output = formatDiagnostics(schemaResult2.diagnostics, {
-              format: opts.format,
-              quiet: opts.quiet
-            });
-            if (output) process.stderr.write(output + "\n");
-            hasErrors = true;
-            allClean = false;
-            continue;
-          }
-          const tsDiagnostics2 = lint(schemaResult2.data);
-          const spectralDiagnostics2 = await spectralLint(
-            schemaResult2.data
-          );
-          const diagnostics2 = [
-            ...tsDiagnostics2,
-            ...spectralDiagnostics2,
-            ...schemaWarnings2
-          ];
-          if (diagnostics2.length > 0) {
-            allClean = false;
-            const output = formatDiagnostics(diagnostics2, {
-              format: opts.format,
-              quiet: opts.quiet
-            });
-            if (output) process.stderr.write(output + "\n");
-            const teamHasErrors = diagnostics2.some((d2) => d2.severity === "error");
-            const teamHasWarnings = diagnostics2.some((d2) => d2.severity === "warning");
-            if (teamHasErrors || opts.strict && teamHasWarnings) {
-              hasErrors = true;
-            }
-          }
-        }
-        if (hasErrors) process.exit(1);
-        if (!opts.quiet && allClean) {
-          process.stdout.write("Lint passed.\n");
-        }
-        return;
-      }
-      const dslPath = resolveDslPath(dir, DIR_DEFAULT3, config);
-      const resolved = await resolve4(dslPath);
-      const data = config?.vars ? substituteVars(resolved.data, config.vars) : resolved.data;
-      const schemaResult = validateSchema(data);
-      const schemaWarnings = schemaResult.diagnostics.filter(
-        (d2) => d2.severity === "warning"
-      );
-      if (!schemaResult.success) {
-        const output = formatDiagnostics(schemaResult.diagnostics, {
-          format: opts.format,
-          quiet: opts.quiet
-        });
-        if (output) process.stderr.write(output + "\n");
-        process.exit(1);
-      }
-      const tsDiagnostics = lint(schemaResult.data);
-      const spectralDiagnostics = await spectralLint(schemaResult.data);
-      const diagnostics = [...tsDiagnostics, ...spectralDiagnostics, ...schemaWarnings];
-      if (diagnostics.length > 0) {
-        const output = formatDiagnostics(diagnostics, {
-          format: opts.format,
-          quiet: opts.quiet
-        });
-        if (output) process.stderr.write(output + "\n");
-        const hasErrors = diagnostics.some((d2) => d2.severity === "error");
-        const hasWarnings = diagnostics.some((d2) => d2.severity === "warning");
-        if (hasErrors || opts.strict && hasWarnings) {
-          process.exit(1);
-        }
-      }
-      if (!opts.quiet && diagnostics.length === 0) {
-        process.stdout.write("Lint passed.\n");
-      }
-    } catch (err) {
-      const msg = err instanceof Error ? err.message : String(err);
-      process.stderr.write(`Error: ${msg}
-`);
-      process.exit(1);
-    }
-  }
-);
-
-// src/cli/commands/render.ts
-import { Command as Command5 } from "commander";
-
-// src/cli/commands/generate.ts
-import { Command as Command4 } from "commander";
-
-// src/guardrail-generator/generator.ts
-import { readFile as readFile5, writeFile as writeFile2, mkdir as mkdir2, chmod, unlink as unlink2, copyFile } from "fs/promises";
-import { resolve as resolve6, dirname as dirname6 } from "path";
-import Handlebars2 from "handlebars";
-import YAML from "yaml";
-
-// src/guardrail-generator/resolve-checks.ts
-function resolveChecks(dsl, binding, policy) {
-  const resolved = [];
-  const diagnostics = [];
-  const guardrailImpl = binding.guardrail_impl ?? {};
-  for (const [guardrailId, impl] of Object.entries(guardrailImpl)) {
-    const guardrail = dsl.guardrails[guardrailId];
-    if (!guardrail) {
-      diagnostics.push({
-        path: `binding.${binding.software}.guardrail_impl.${guardrailId}`,
-        message: `Binding "${binding.software}" implements guardrail "${guardrailId}" which is not defined in the DSL`,
-        severity: "error"
-      });
-      continue;
-    }
-    const policyRule = policy.rules.find((r3) => r3.guardrail === guardrailId);
-    if (!policyRule) {
-      diagnostics.push({
-        path: `binding.${binding.software}.guardrail_impl.${guardrailId}`,
-        message: `Guardrail "${guardrailId}" has no policy rule in the active policy \u2014 skipping`,
-        severity: "info"
-      });
-      continue;
-    }
-    for (const check of impl.checks) {
-      resolved.push({
-        guardrail_id: guardrailId,
-        guardrail,
-        policy_rule: policyRule,
-        check
-      });
-    }
-  }
-  return { resolved, diagnostics };
-}
-
-// src/guardrail-generator/resolve-paths.ts
-function resolveBindingTargetPath(target, paths, bindingSoftware) {
-  const diagnostics = [];
-  const resolved = target.replace(/\{(\w+)\}/g, (match, varName) => {
-    const value = paths[varName];
-    if (value === void 0) {
-      diagnostics.push({
-        path: `binding.${bindingSoftware}.outputs`,
-        message: `Path variable "${varName}" used in target "${target}" but not defined in config.paths`,
-        severity: "error"
-      });
-      return match;
-    }
-    return value;
-  });
-  return { resolved, diagnostics };
-}
-
 // src/renderer/renderer.ts
 import { readFile as readFile4, writeFile, mkdir, unlink } from "fs/promises";
 import { dirname as dirname5 } from "path";
@@ -54724,6 +54945,378 @@ async function checkDriftFromConfig(dsl, renderTargets, options) {
   return { hasDrift: diffs.length > 0, diffs };
 }
 
+// src/scorer/scorer.ts
+function pct(n3, d2) {
+  return d2 === 0 ? 100 : Math.round(n3 / d2 * 100);
+}
+function artifactValidationCoverage(dsl) {
+  const entries = Object.entries(dsl.artifacts);
+  const total = entries.length;
+  const covered = entries.filter(
+    ([, a3]) => a3.required_validations.length > 0
+  ).length;
+  const missing = entries.filter(([, a3]) => a3.required_validations.length === 0).map(([id]) => id);
+  return {
+    id: "artifact-validation-coverage",
+    label: "Artifact validation coverage",
+    score: covered,
+    total,
+    percent: pct(covered, total),
+    weight: 3,
+    recommendations: missing.length > 0 ? [`${missing.length} artifacts missing required_validations: ${missing.join(", ")}`] : []
+  };
+}
+function taskValidationCoverage(dsl) {
+  const entries = Object.entries(dsl.tasks);
+  const total = entries.length;
+  const covered = entries.filter(([, t3]) => t3.validations.length > 0).length;
+  const missing = entries.filter(([, t3]) => t3.validations.length === 0).map(([id]) => id);
+  return {
+    id: "task-validation-coverage",
+    label: "Task validation coverage",
+    score: covered,
+    total,
+    percent: pct(covered, total),
+    weight: 3,
+    recommendations: missing.length > 0 ? [`${missing.length} tasks missing validations: ${missing.join(", ")}`] : []
+  };
+}
+function guardrailPolicyCoverage(dsl) {
+  const guardrailIds = Object.keys(dsl.guardrails);
+  const total = guardrailIds.length;
+  const referenced = /* @__PURE__ */ new Set();
+  for (const policy of Object.values(dsl.guardrail_policies)) {
+    for (const rule of policy.rules) {
+      referenced.add(rule.guardrail);
+    }
+  }
+  const covered = guardrailIds.filter((id) => referenced.has(id)).length;
+  const missing = guardrailIds.filter((id) => !referenced.has(id));
+  return {
+    id: "guardrail-policy-coverage",
+    label: "Guardrail policy coverage",
+    score: covered,
+    total,
+    percent: pct(covered, total),
+    weight: 2,
+    recommendations: missing.length > 0 ? [`${missing.length} guardrails not in any policy: ${missing.join(", ")}`] : []
+  };
+}
+function workflowValidationIntegration(dsl) {
+  const blockingValidations = Object.entries(dsl.validations).filter(
+    ([, v2]) => v2.blocking
+  );
+  const total = blockingValidations.length;
+  const referenced = /* @__PURE__ */ new Set();
+  for (const wf of Object.values(dsl.workflow)) {
+    for (const step of wf.steps) {
+      if (step.type === "validation") {
+        referenced.add(step.validation);
+      }
+    }
+  }
+  for (const task of Object.values(dsl.tasks)) {
+    for (const valId of task.validations) {
+      referenced.add(valId);
+    }
+  }
+  const covered = blockingValidations.filter(
+    ([id]) => referenced.has(id)
+  ).length;
+  const missing = blockingValidations.filter(([id]) => !referenced.has(id)).map(([id]) => id);
+  return {
+    id: "workflow-validation-integration",
+    label: "Workflow validation integration",
+    score: covered,
+    total,
+    percent: pct(covered, total),
+    weight: 3,
+    recommendations: missing.length > 0 ? [`${missing.length} blocking validations not wired: ${missing.join(", ")}`] : []
+  };
+}
+var OPTIONAL_ENTITY_FIELDS = {
+  agents: {
+    section: "agents",
+    fields: ["responsibilities", "constraints", "rules"]
+  },
+  tasks: {
+    section: "tasks",
+    fields: ["description", "responsibilities", "execution_steps", "completion_criteria"]
+  },
+  artifacts: {
+    section: "artifacts",
+    fields: ["description", "visibility"]
+  },
+  tools: {
+    section: "tools",
+    fields: ["description", "commands"]
+  },
+  workflow: {
+    section: "workflow",
+    fields: ["description", "trigger", "entry_conditions"]
+  },
+  guardrails: {
+    section: "guardrails",
+    fields: ["rationale", "tags"]
+  }
+};
+function hasNonEmpty(obj, field) {
+  const val = obj[field];
+  if (val === void 0 || val === null) return false;
+  if (typeof val === "string") return val.length > 0;
+  if (Array.isArray(val)) return val.length > 0;
+  return true;
+}
+function schemaCompleteness(dsl) {
+  let totalSlots = 0;
+  let filledSlots = 0;
+  const lowSections = [];
+  for (const [sectionKey, meta] of Object.entries(OPTIONAL_ENTITY_FIELDS)) {
+    const entities = dsl[meta.section];
+    if (!entities) continue;
+    let sectionTotal = 0;
+    let sectionFilled = 0;
+    for (const entity of Object.values(entities)) {
+      for (const field of meta.fields) {
+        sectionTotal++;
+        totalSlots++;
+        if (hasNonEmpty(entity, field)) {
+          sectionFilled++;
+          filledSlots++;
+        }
+      }
+    }
+    if (sectionTotal > 0 && pct(sectionFilled, sectionTotal) < 50) {
+      lowSections.push(sectionKey);
+    }
+  }
+  return {
+    id: "schema-completeness",
+    label: "Schema completeness",
+    score: filledSlots,
+    total: totalSlots,
+    percent: pct(filledSlots, totalSlots),
+    weight: 1,
+    recommendations: lowSections.length > 0 ? [`Low optional field coverage in: ${lowSections.join(", ")}`] : []
+  };
+}
+function crossReferenceBidirectionality(dsl) {
+  let totalChecks = 0;
+  let passedChecks = 0;
+  const issues = [];
+  for (const [agentId, agent] of Object.entries(dsl.agents)) {
+    for (const toolId of agent.can_execute_tools) {
+      totalChecks++;
+      const tool = dsl.tools[toolId];
+      if (tool && tool.invokable_by.includes(agentId)) {
+        passedChecks++;
+      } else {
+        issues.push(`agent ${agentId} \u2192 tool ${toolId}`);
+      }
+    }
+    for (const artId of agent.can_write_artifacts) {
+      totalChecks++;
+      const art = dsl.artifacts[artId];
+      if (art && (art.producers.includes(agentId) || art.editors.includes(agentId))) {
+        passedChecks++;
+      } else {
+        issues.push(`agent ${agentId} \u2192 artifact ${artId} (write)`);
+      }
+    }
+    for (const artId of agent.can_read_artifacts) {
+      totalChecks++;
+      const art = dsl.artifacts[artId];
+      if (art && (art.consumers.includes(agentId) || art.producers.includes(agentId) || art.editors.includes(agentId))) {
+        passedChecks++;
+      } else {
+        issues.push(`agent ${agentId} \u2192 artifact ${artId} (read)`);
+      }
+    }
+  }
+  for (const [toolId, tool] of Object.entries(dsl.tools)) {
+    for (const agentId of tool.invokable_by) {
+      totalChecks++;
+      const agent = dsl.agents[agentId];
+      if (agent && agent.can_execute_tools.includes(toolId)) {
+        passedChecks++;
+      } else {
+        issues.push(`tool ${toolId} \u2192 agent ${agentId}`);
+      }
+    }
+  }
+  return {
+    id: "cross-reference-bidirectionality",
+    label: "Cross-reference bidirectionality",
+    score: passedChecks,
+    total: totalChecks,
+    percent: pct(passedChecks, totalChecks),
+    weight: 2,
+    recommendations: issues.length > 0 ? [`${issues.length} unreciprocated cross-references: ${issues.slice(0, 5).join(", ")}${issues.length > 5 ? `, ... (${issues.length - 5} more)` : ""}`] : []
+  };
+}
+function entityGuardrailCoverage(dsl) {
+  const entitySections = [
+    { name: "agents", entities: dsl.agents },
+    { name: "tasks", entities: dsl.tasks },
+    { name: "tools", entities: dsl.tools },
+    { name: "artifacts", entities: dsl.artifacts }
+  ];
+  const scopeBindings = {
+    agents: /* @__PURE__ */ new Set(),
+    tasks: /* @__PURE__ */ new Set(),
+    tools: /* @__PURE__ */ new Set(),
+    artifacts: /* @__PURE__ */ new Set()
+  };
+  for (const guardrail of Object.values(dsl.guardrails)) {
+    for (const key of Object.keys(scopeBindings)) {
+      const ids = guardrail.scope[key];
+      if (ids) {
+        for (const id of ids) scopeBindings[key].add(id);
+      }
+    }
+  }
+  let total = 0;
+  let covered = 0;
+  const missing = [];
+  for (const { name, entities } of entitySections) {
+    for (const [entityId, entity] of Object.entries(entities)) {
+      total++;
+      const hasEntitySide = (entity.guardrails ?? []).length > 0;
+      const hasScopeSide = scopeBindings[name].has(entityId);
+      if (hasEntitySide || hasScopeSide) {
+        covered++;
+      } else {
+        missing.push(`${name}.${entityId}`);
+      }
+    }
+  }
+  return {
+    id: "entity-guardrail-coverage",
+    label: "Entity guardrail coverage",
+    score: covered,
+    total,
+    percent: pct(covered, total),
+    weight: 1,
+    recommendations: missing.length > 0 ? [`${missing.length} entities without guardrails: ${missing.slice(0, 5).join(", ")}${missing.length > 5 ? `, ... (${missing.length - 5} more)` : ""}`] : []
+  };
+}
+function guardrailScopeResolution(dsl) {
+  let totalRefs = 0;
+  let resolvedRefs = 0;
+  const unresolved = [];
+  const sectionMap = {
+    agents: dsl.agents,
+    tasks: dsl.tasks,
+    tools: dsl.tools,
+    artifacts: dsl.artifacts,
+    workflows: dsl.workflow
+  };
+  for (const [guardrailId, guardrail] of Object.entries(dsl.guardrails)) {
+    const scope = guardrail.scope;
+    for (const [scopeKey, entityIds] of Object.entries(scope)) {
+      if (!Array.isArray(entityIds)) continue;
+      const section = sectionMap[scopeKey];
+      if (!section) continue;
+      for (const entityId of entityIds) {
+        totalRefs++;
+        if (section[entityId]) {
+          resolvedRefs++;
+        } else {
+          unresolved.push(`${guardrailId}.scope.${scopeKey}: ${entityId}`);
+        }
+      }
+    }
+  }
+  return {
+    id: "guardrail-scope-resolution",
+    label: "Guardrail scope resolution",
+    score: resolvedRefs,
+    total: totalRefs,
+    percent: pct(resolvedRefs, totalRefs),
+    weight: 2,
+    recommendations: unresolved.length > 0 ? [`${unresolved.length} unresolved scope refs: ${unresolved.join(", ")}`] : []
+  };
+}
+function score(dsl) {
+  const dimensions = [
+    artifactValidationCoverage(dsl),
+    taskValidationCoverage(dsl),
+    guardrailPolicyCoverage(dsl),
+    workflowValidationIntegration(dsl),
+    schemaCompleteness(dsl),
+    crossReferenceBidirectionality(dsl),
+    guardrailScopeResolution(dsl),
+    entityGuardrailCoverage(dsl)
+  ];
+  const totalWeight = dimensions.reduce((s2, d2) => s2 + d2.weight, 0);
+  const weightedSum = dimensions.reduce(
+    (s2, d2) => s2 + d2.percent * d2.weight,
+    0
+  );
+  const overall = totalWeight === 0 ? 100 : Math.round(weightedSum / totalWeight);
+  return { overall, dimensions };
+}
+
+// src/guardrail-generator/generator.ts
+import { readFile as readFile5, writeFile as writeFile2, mkdir as mkdir2, chmod, unlink as unlink2, copyFile } from "fs/promises";
+import { resolve as resolve6, dirname as dirname6 } from "path";
+import Handlebars2 from "handlebars";
+import YAML from "yaml";
+
+// src/guardrail-generator/resolve-checks.ts
+function resolveChecks(dsl, binding, policy) {
+  const resolved = [];
+  const diagnostics = [];
+  const guardrailImpl = binding.guardrail_impl ?? {};
+  for (const [guardrailId, impl] of Object.entries(guardrailImpl)) {
+    const guardrail = dsl.guardrails[guardrailId];
+    if (!guardrail) {
+      diagnostics.push({
+        path: `binding.${binding.software}.guardrail_impl.${guardrailId}`,
+        message: `Binding "${binding.software}" implements guardrail "${guardrailId}" which is not defined in the DSL`,
+        severity: "error"
+      });
+      continue;
+    }
+    const policyRule = policy.rules.find((r3) => r3.guardrail === guardrailId);
+    if (!policyRule) {
+      diagnostics.push({
+        path: `binding.${binding.software}.guardrail_impl.${guardrailId}`,
+        message: `Guardrail "${guardrailId}" has no policy rule in the active policy \u2014 skipping`,
+        severity: "info"
+      });
+      continue;
+    }
+    for (const check of impl.checks) {
+      resolved.push({
+        guardrail_id: guardrailId,
+        guardrail,
+        policy_rule: policyRule,
+        check
+      });
+    }
+  }
+  return { resolved, diagnostics };
+}
+
+// src/guardrail-generator/resolve-paths.ts
+function resolveBindingTargetPath(target, paths, bindingSoftware) {
+  const diagnostics = [];
+  const resolved = target.replace(/\{(\w+)\}/g, (match, varName) => {
+    const value = paths[varName];
+    if (value === void 0) {
+      diagnostics.push({
+        path: `binding.${bindingSoftware}.outputs`,
+        message: `Path variable "${varName}" used in target "${target}" but not defined in config.paths`,
+        severity: "error"
+      });
+      return match;
+    }
+    return value;
+  });
+  return { resolved, diagnostics };
+}
+
 // src/guardrail-generator/generator.ts
 Handlebars2.registerHelper("json", (value) => {
   return new Handlebars2.SafeString(JSON.stringify(value, null, 2));
@@ -55101,12 +55694,8 @@ function resolveBindingRenderOutputPath(output, paths) {
   });
 }
 
-// src/cli/commands/generate-interface.ts
-import { writeFileSync } from "fs";
-import { resolve as resolve7 } from "path";
-
 // src/interface-generator/generator.ts
-import { stringify as stringify2 } from "yaml";
+import { stringify } from "yaml";
 function buildInterfaceDocument(dsl, generatedAt) {
   const ti = dsl.team_interface;
   const doc = {
@@ -55123,1081 +55712,63 @@ function buildInterfaceDocument(dsl, generatedAt) {
   }
   const handoffKeys = /* @__PURE__ */ new Set();
   if (ti.accepts?.workflows) {
-    for (const spec of Object.values(ti.accepts.workflows)) {
-      handoffKeys.add(spec.input_handoff);
-      handoffKeys.add(spec.output_handoff);
-    }
-  }
-  const handoff_types = {};
-  for (const k2 of [...handoffKeys].sort()) {
-    const ht = dsl.handoff_types[k2];
-    if (ht) {
-      const entry = {
-        version: ht.version,
-        schema: ht.schema
-      };
-      if (ht.description !== void 0) {
-        entry.description = ht.description;
-      }
-      handoff_types[k2] = entry;
-    }
-  }
-  if (Object.keys(handoff_types).length > 0) {
-    doc.handoff_types = handoff_types;
-  }
-  const artifactsOut = {};
-  if (ti.exposes?.artifacts) {
-    for (const key of [...ti.exposes.artifacts].sort()) {
-      const art = dsl.artifacts[key];
-      if (art) {
-        const entry = {
-          type: art.type,
-          states: art.states
-        };
-        if (art.description !== void 0) {
-          entry.description = art.description;
-        }
-        artifactsOut[key] = entry;
-      }
-    }
-  }
-  if (Object.keys(artifactsOut).length > 0) {
-    doc.exposes = { artifacts: artifactsOut };
-  }
-  if (ti.constraints !== void 0 && ti.constraints.length > 0) {
-    doc.constraints = ti.constraints;
-  }
-  return doc;
-}
-function generateInterface(options) {
-  if (!options.dsl.team_interface) {
-    throw new Error("DSL has no team_interface section");
-  }
-  const doc = buildInterfaceDocument(options.dsl, (/* @__PURE__ */ new Date()).toISOString());
-  const content = options.format === "json" ? `${JSON.stringify(doc, null, 2)}
-` : `${stringify2(doc, { sortMapEntries: true })}
-`;
-  const outputPath = options.output ?? "team-interface.yaml";
-  return { outputPath, content };
-}
-
-// src/cli/commands/generate-interface.ts
-function runGenerateInterfaceCli(opts) {
-  if (!opts.dsl.team_interface) {
-    process.stderr.write("Error: DSL has no team_interface section.\n");
-    process.exit(1);
-  }
-  const outputPath = resolve7(process.cwd(), opts.output ?? "team-interface.yaml");
-  const result = generateInterface({
-    dsl: opts.dsl,
-    output: outputPath,
-    dryRun: opts.dryRun,
-    format: opts.format
-  });
-  if (opts.dryRun) {
-    process.stdout.write(result.content);
-    return;
-  }
-  writeFileSync(result.outputPath, result.content, "utf8");
-  if (!opts.quiet) {
-    process.stdout.write(`Wrote ${result.outputPath}
-`);
-  }
-}
-
-// src/cli/commands/generate.ts
-var VALID_TYPES = ["templates", "guardrails", "interface"];
-function resolvedConfigForTeam(workspace, teamConfig) {
-  return {
-    dsl: "",
-    vars: teamConfig.vars,
-    renders: workspace.renders,
-    configDir: workspace.configDir,
-    bindings: teamConfig.bindings,
-    activeGuardrailPolicy: teamConfig.activeGuardrailPolicy,
-    paths: teamConfig.paths
-  };
-}
-async function runGenerate(type, opts) {
-  if (type !== void 0 && !VALID_TYPES.includes(type)) {
-    process.stderr.write(`Unknown generate type: ${type}
-`);
-    process.exit(1);
-  }
-  if (opts.format !== "yaml" && opts.format !== "json") {
-    process.stderr.write(
-      `Invalid --format: expected yaml or json, got ${opts.format}
-`
-    );
-    process.exit(1);
-  }
-  const normalizedType = type;
-  const targets = {
-    templates: normalizedType === void 0 || normalizedType === "templates",
-    guardrails: normalizedType === void 0 || normalizedType === "guardrails",
-    interface: normalizedType === void 0 || normalizedType === "interface"
-  };
-  try {
-    const config = await loadConfig(opts.config);
-    if (!config) {
-      process.stderr.write(
-        "Error: agent-contracts.config.yaml not found. Use --config to specify path.\n"
-      );
-      process.exit(1);
-    }
-    if (isMultiTeamConfig(config)) {
-      await runMultiTeam(config, targets, normalizedType, opts);
-      return;
-    }
-    await runSingleTeam(config, targets, normalizedType, opts);
-  } catch (err) {
-    if (err instanceof ConfigLoadError) {
-      process.stderr.write(`Config error: ${err.message}
-`);
-      process.exit(1);
-    }
-    const msg = err instanceof Error ? err.message : String(err);
-    process.stderr.write(`Error: ${msg}
-`);
-    process.exit(1);
-  }
-}
-async function runMultiTeam(config, targets, normalizedType, opts) {
-  const teamEntries = getTeamEntries(config, opts.team);
-  let exitWithError = false;
-  for (const [teamId, teamConfig] of teamEntries) {
-    if (!opts.quiet) process.stdout.write(`
---- Team: ${teamId} ---
-`);
-    const resolved = await resolve4(teamConfig.dsl);
-    const data = teamConfig.vars ? substituteVars(resolved.data, teamConfig.vars) : resolved.data;
-    const schemaResult = validateSchema(data);
-    if (!schemaResult.success) {
-      process.stderr.write(
-        `Schema validation failed for team ${teamId}. Run 'agent-contracts validate' for details.
-`
-      );
-      exitWithError = true;
-      continue;
-    }
-    if (targets.templates) {
-      let renderOptions;
-      if (teamConfig.bindings.length > 0) {
-        const loadedBindings = await loadBindings(teamConfig.bindings);
-        renderOptions = {
-          loadedBindings,
-          activeGuardrailPolicy: teamConfig.activeGuardrailPolicy
-        };
-      }
-      if (opts.check) {
-        const drift = await checkDriftFromConfig(
-          schemaResult.data,
-          config.renders,
-          renderOptions
-        );
-        if (drift.hasDrift) {
-          process.stderr.write(
-            `Drift detected for team ${teamId} in the following files:
-`
-          );
-          for (const f2 of drift.diffs) {
-            process.stderr.write(`  ${f2}
-`);
-          }
-          exitWithError = true;
-        } else if (!opts.quiet) {
-          process.stdout.write("No drift detected.\n");
-        }
-      } else {
-        const files = await renderFromConfig(
-          schemaResult.data,
-          config.renders,
-          renderOptions
-        );
-        if (!opts.quiet) {
-          process.stdout.write(`Rendered ${files.length} file(s):
-`);
-          for (const f2 of files) {
-            process.stdout.write(`  ${f2}
-`);
-          }
-        }
-      }
-    }
-    if (targets.interface) {
-      if (schemaResult.data.team_interface) {
-        runGenerateInterfaceCli({
-          dsl: schemaResult.data,
-          output: teamConfig.interfaceOutput ?? opts.output,
-          dryRun: opts.dryRun,
-          format: opts.format,
-          quiet: opts.quiet
-        });
-      } else if (normalizedType === "interface") {
-        process.stderr.write("Error: DSL has no team_interface section.\n");
-        exitWithError = true;
-      }
-    }
-    if (targets.guardrails) {
-      const loadedBindings = await loadBindings(teamConfig.bindings);
-      const result = await generateGuardrails({
-        dsl: schemaResult.data,
-        config: resolvedConfigForTeam(config, teamConfig),
-        loadedBindings,
-        filterBindings: opts.binding,
-        dryRun: opts.dryRun
-      });
-      const errors = result.diagnostics.filter((d2) => d2.severity === "error");
-      const warnings = result.diagnostics.filter((d2) => d2.severity === "warning");
-      const infos = result.diagnostics.filter((d2) => d2.severity === "info");
-      if (errors.length > 0) {
-        process.stderr.write(`Errors (team ${teamId}):
-`);
-        for (const d2 of errors) {
-          process.stderr.write(`  error [${d2.path}] ${d2.message}
-`);
-        }
-        exitWithError = true;
-      }
-      if (warnings.length > 0 && !opts.quiet) {
-        process.stderr.write(`Warnings (team ${teamId}):
-`);
-        for (const d2 of warnings) {
-          process.stderr.write(`  warning [${d2.path}] ${d2.message}
-`);
-        }
-      }
-      if (infos.length > 0 && !opts.quiet) {
-        for (const d2 of infos) {
-          process.stderr.write(`  info [${d2.path}] ${d2.message}
-`);
-        }
-      }
-      if (!opts.quiet) {
-        const action = opts.dryRun ? "Would generate" : "Generated";
-        process.stdout.write(
-          `${action} ${result.outputFiles.length} file(s):
-`
-        );
-        for (const f2 of result.outputFiles) {
-          process.stdout.write(`  ${f2}
-`);
-        }
-      }
-    }
-  }
-  if (exitWithError) process.exit(1);
-}
-async function runSingleTeam(config, targets, normalizedType, opts) {
-  const resolved = await resolve4(config.dsl);
-  const data = config.vars ? substituteVars(resolved.data, config.vars) : resolved.data;
-  const schemaResult = validateSchema(data);
-  if (!schemaResult.success) {
-    process.stderr.write(
-      "Schema validation failed. Run 'agent-contracts validate' for details.\n"
-    );
-    process.exit(1);
-  }
-  let exitWithError = false;
-  if (targets.templates) {
-    let renderOptions;
-    if (config.bindings.length > 0) {
-      const loadedBindings = await loadBindings(config.bindings);
-      renderOptions = {
-        loadedBindings,
-        activeGuardrailPolicy: config.activeGuardrailPolicy
-      };
-    }
-    if (opts.check) {
-      const drift = await checkDriftFromConfig(
-        schemaResult.data,
-        config.renders,
-        renderOptions
-      );
-      if (drift.hasDrift) {
-        process.stderr.write("Drift detected in the following files:\n");
-        for (const f2 of drift.diffs) {
-          process.stderr.write(`  ${f2}
-`);
-        }
-        exitWithError = true;
-      } else if (!opts.quiet) {
-        process.stdout.write("No drift detected.\n");
-      }
-    } else {
-      const files = await renderFromConfig(
-        schemaResult.data,
-        config.renders,
-        renderOptions
-      );
-      if (!opts.quiet) {
-        process.stdout.write(`Rendered ${files.length} file(s):
-`);
-        for (const f2 of files) {
-          process.stdout.write(`  ${f2}
-`);
-        }
-      }
-    }
-  }
-  if (targets.interface) {
-    if (schemaResult.data.team_interface) {
-      runGenerateInterfaceCli({
-        dsl: schemaResult.data,
-        output: opts.output,
-        dryRun: opts.dryRun,
-        format: opts.format,
-        quiet: opts.quiet
-      });
-    } else if (normalizedType === "interface") {
-      process.stderr.write("Error: DSL has no team_interface section.\n");
-      process.exit(1);
-    }
-  }
-  if (targets.guardrails) {
-    const loadedBindings = await loadBindings(config.bindings);
-    const result = await generateGuardrails({
-      dsl: schemaResult.data,
-      config,
-      loadedBindings,
-      filterBindings: opts.binding,
-      dryRun: opts.dryRun
-    });
-    const errors = result.diagnostics.filter((d2) => d2.severity === "error");
-    const warnings = result.diagnostics.filter((d2) => d2.severity === "warning");
-    const infos = result.diagnostics.filter((d2) => d2.severity === "info");
-    if (errors.length > 0) {
-      process.stderr.write("Errors:\n");
-      for (const d2 of errors) {
-        process.stderr.write(`  error [${d2.path}] ${d2.message}
-`);
-      }
-      exitWithError = true;
-    }
-    if (warnings.length > 0 && !opts.quiet) {
-      process.stderr.write("Warnings:\n");
-      for (const d2 of warnings) {
-        process.stderr.write(`  warning [${d2.path}] ${d2.message}
-`);
-      }
-    }
-    if (infos.length > 0 && !opts.quiet) {
-      for (const d2 of infos) {
-        process.stderr.write(`  info [${d2.path}] ${d2.message}
-`);
-      }
-    }
-    if (!opts.quiet) {
-      const action = opts.dryRun ? "Would generate" : "Generated";
-      process.stdout.write(
-        `${action} ${result.outputFiles.length} file(s):
-`
-      );
-      for (const f2 of result.outputFiles) {
-        process.stdout.write(`  ${f2}
-`);
-      }
-    }
-  }
-  if (exitWithError) process.exit(1);
-}
-var generateCommand = new Command4("generate").description("Generate artifacts from DSL \u2014 templates, guardrails, and/or interface").argument(
-  "[type]",
-  "Type of artifacts to generate (templates|guardrails|interface). Omit to run all."
-).option("-c, --config <path>", "Path to agent-contracts.config.yaml").option("--team <id>", "Limit to one team (multi-team config only)").option(
-  "--check",
-  "Check for template drift without writing files (templates only)",
-  false
-).option("--binding <name...>", "Filter to specific software binding(s) (guardrails only)").option(
-  "-o, --output <path>",
-  "Output path for generated team interface (interface only)"
-).option(
-  "--format <format>",
-  "Output format for team interface: yaml or json",
-  "yaml"
-).option("--dry-run", "Print what would be generated without writing files", false).option("--quiet", "Suppress output on success", false).action(runGenerate);
-
-// src/cli/commands/render.ts
-var renderCommand = new Command5("render").description("(deprecated) Alias for 'generate templates'. Use 'generate templates' instead.").option("-c, --config <path>", "Path to agent-contracts.config.yaml").option("--team <id>", "Limit to one team (multi-team config only)").option("--check", "Check for template drift without writing files", false).option("--quiet", "Suppress output on success", false).action(
-  async (opts) => {
-    process.stderr.write(
-      "Warning: 'render' is deprecated. Use 'agent-contracts generate templates' instead.\n"
-    );
-    await runGenerate("templates", {
-      ...opts,
-      binding: void 0,
-      output: void 0,
-      format: "yaml",
-      dryRun: false
-    });
-  }
-);
-
-// src/cli/commands/check.ts
-import { existsSync, readFileSync } from "fs";
-import { join as join3 } from "path";
-import { Command as Command6 } from "commander";
-import { parse as parseYaml4, stringify as stringify3 } from "yaml";
-import { access as access2 } from "fs/promises";
-import { resolve as pathResolve, dirname as dirname7 } from "path";
-var checkCommand = new Command6("check").description("Run full pipeline: resolve \u2192 validate \u2192 lint \u2192 render --check").option("-c, --config <path>", "Path to agent-contracts.config.yaml").option("--team <id>", "Limit to one team (multi-team config only)").option("--format <format>", "Output format (text|json)", "text").option("--quiet", "Suppress output on success", false).option("--strict", "Treat warnings as errors", false).action(
-  async (opts) => {
-    let hasErrors = false;
-    try {
-      const config = await loadConfig(opts.config);
-      if (!config) {
-        process.stderr.write(
-          "Error: agent-contracts.config.yaml not found. Use --config to specify path.\n"
-        );
-        process.exit(1);
-      }
-      if (isMultiTeamConfig(config)) {
-        const teamEntries = getTeamEntries(config, opts.team);
-        for (const [teamId, teamConfig] of teamEntries) {
-          if (!opts.quiet) process.stderr.write(`
---- Team: ${teamId} ---
-`);
-          const resolved2 = await resolve4(teamConfig.dsl);
-          const data2 = teamConfig.vars ? substituteVars(resolved2.data, teamConfig.vars) : resolved2.data;
-          const schemaResult2 = validateSchema(data2);
-          const schemaWarnings2 = schemaResult2.diagnostics.filter(
-            (d2) => d2.severity === "warning"
-          );
-          if (!schemaResult2.success) {
-            const output = formatDiagnostics(schemaResult2.diagnostics, {
-              format: opts.format,
-              quiet: opts.quiet
-            });
-            if (output) process.stderr.write(output + "\n");
-            hasErrors = true;
-            continue;
-          }
-          const refDiags2 = checkReferences(schemaResult2.data);
-          const handoffDiags2 = validateHandoffSchemas(schemaResult2.data);
-          const allRefDiags2 = [...refDiags2, ...handoffDiags2, ...schemaWarnings2];
-          if (allRefDiags2.length > 0) {
-            const output = formatDiagnostics(allRefDiags2, {
-              format: opts.format,
-              quiet: opts.quiet
-            });
-            if (output) process.stderr.write(output + "\n");
-            hasErrors = true;
-          }
-          const tsLintDiags2 = lint(schemaResult2.data);
-          const spectralDiags2 = await spectralLint(
-            schemaResult2.data
-          );
-          const lintDiags2 = [...tsLintDiags2, ...spectralDiags2];
-          if (lintDiags2.length > 0) {
-            const output = formatDiagnostics(lintDiags2, {
-              format: opts.format,
-              quiet: opts.quiet
-            });
-            if (output) process.stderr.write(output + "\n");
-            if (lintDiags2.some((d2) => d2.severity === "error")) {
-              hasErrors = true;
-            }
-            if (opts.strict && lintDiags2.some((d2) => d2.severity === "warning")) {
-              hasErrors = true;
-            }
-          }
-          let renderOptions2;
-          if (teamConfig.bindings.length > 0) {
-            const loadedBindings = await loadBindings(teamConfig.bindings);
-            renderOptions2 = {
-              loadedBindings,
-              activeGuardrailPolicy: teamConfig.activeGuardrailPolicy
-            };
-          }
-          const drift2 = await checkDriftFromConfig(
-            schemaResult2.data,
-            config.renders,
-            renderOptions2
-          );
-          if (drift2.hasDrift) {
-            process.stderr.write(`Drift detected for team ${teamId} in:
-`);
-            for (const f2 of drift2.diffs) {
-              process.stderr.write(`  ${f2}
-`);
-            }
-            hasErrors = true;
-          }
-        }
-        if (!hasErrors) {
-          for (const [teamId, teamConfig] of teamEntries) {
-            const resolved2 = await resolve4(teamConfig.dsl);
-            const data2 = teamConfig.vars ? substituteVars(resolved2.data, teamConfig.vars) : resolved2.data;
-            const schemaResult2 = validateSchema(data2);
-            if (!schemaResult2.success || !schemaResult2.data) continue;
-            const dsl = schemaResult2.data;
-            const imports = dsl.imports;
-            if (!imports) continue;
-            for (const [importName, importDef] of Object.entries(imports)) {
-              const interfacePathRel = importDef?.interface;
-              if (typeof interfacePathRel !== "string") continue;
-              const interfacePath = pathResolve(
-                dirname7(teamConfig.dsl),
-                interfacePathRel
-              );
-              try {
-                await access2(interfacePath);
-              } catch {
-                process.stderr.write(
-                  `Cross-team error: Team "${teamId}" imports "${importName}" but interface file not found: ${interfacePath}
-`
-                );
-                hasErrors = true;
-              }
-            }
-          }
-        }
-        if (hasErrors) process.exit(1);
-        if (!opts.quiet) process.stdout.write("All checks passed.\n");
-        return;
-      }
-      const resolved = await resolve4(config.dsl);
-      const data = config.vars ? substituteVars(resolved.data, config.vars) : resolved.data;
-      const schemaResult = validateSchema(data);
-      const schemaWarnings = schemaResult.diagnostics.filter(
-        (d2) => d2.severity === "warning"
-      );
-      if (!schemaResult.success) {
-        const output = formatDiagnostics(schemaResult.diagnostics, {
-          format: opts.format,
-          quiet: opts.quiet
-        });
-        if (output) process.stderr.write(output + "\n");
-        process.exit(1);
-      }
-      const refDiags = checkReferences(schemaResult.data);
-      const handoffDiags = validateHandoffSchemas(schemaResult.data);
-      const allRefDiags = [...refDiags, ...handoffDiags, ...schemaWarnings];
-      if (allRefDiags.length > 0) {
-        const output = formatDiagnostics(allRefDiags, {
-          format: opts.format,
-          quiet: opts.quiet
-        });
-        if (output) process.stderr.write(output + "\n");
-        hasErrors = true;
-      }
-      const tsLintDiags = lint(schemaResult.data);
-      const spectralDiags = await spectralLint(schemaResult.data);
-      const lintDiags = [...tsLintDiags, ...spectralDiags];
-      if (lintDiags.length > 0) {
-        const output = formatDiagnostics(lintDiags, {
-          format: opts.format,
-          quiet: opts.quiet
-        });
-        if (output) process.stderr.write(output + "\n");
-        if (lintDiags.some((d2) => d2.severity === "error")) {
-          hasErrors = true;
-        }
-        if (opts.strict && lintDiags.some((d2) => d2.severity === "warning")) {
-          hasErrors = true;
-        }
-      }
-      let renderOptions;
-      if (config.bindings.length > 0) {
-        const loadedBindings = await loadBindings(config.bindings);
-        renderOptions = {
-          loadedBindings,
-          activeGuardrailPolicy: config.activeGuardrailPolicy
-        };
-      }
-      const drift = await checkDriftFromConfig(
-        schemaResult.data,
-        config.renders,
-        renderOptions
-      );
-      if (drift.hasDrift) {
-        process.stderr.write("Drift detected in:\n");
-        for (const f2 of drift.diffs) {
-          process.stderr.write(`  ${f2}
-`);
-        }
-        hasErrors = true;
-      }
-      if (schemaResult.data.team_interface) {
-        const interfacePath = join3(config.configDir, "team-interface.yaml");
-        if (existsSync(interfacePath)) {
-          const result = generateInterface({
-            dsl: schemaResult.data,
-            dryRun: true,
-            format: "yaml"
-          });
-          const existing = readFileSync(interfacePath, "utf8");
-          const normalize = (raw) => {
-            try {
-              const parsed = parseYaml4(raw);
-              if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
-                const { generated_at: _t, ...rest } = parsed;
-                return `${stringify3(rest, { sortMapEntries: true })}
-`;
-              }
-            } catch {
-            }
-            return raw.trim();
-          };
-          if (normalize(existing) !== normalize(result.content)) {
-            process.stderr.write("Drift detected in team-interface.yaml\n");
-            hasErrors = true;
-          }
-        }
-      }
-      if (hasErrors) {
-        process.exit(1);
-      }
-      if (!opts.quiet) {
-        process.stdout.write("All checks passed.\n");
-      }
-    } catch (err) {
-      if (err instanceof ConfigLoadError) {
-        process.stderr.write(`Config error: ${err.message}
-`);
-        process.exit(1);
-      }
-      const msg = err instanceof Error ? err.message : String(err);
-      process.stderr.write(`Error: ${msg}
-`);
-      process.exit(1);
-    }
-  }
-);
-
-// src/cli/commands/score.ts
-import { Command as Command7 } from "commander";
-
-// src/scorer/scorer.ts
-function pct(n3, d2) {
-  return d2 === 0 ? 100 : Math.round(n3 / d2 * 100);
-}
-function artifactValidationCoverage(dsl) {
-  const entries = Object.entries(dsl.artifacts);
-  const total = entries.length;
-  const covered = entries.filter(
-    ([, a3]) => a3.required_validations.length > 0
-  ).length;
-  const missing = entries.filter(([, a3]) => a3.required_validations.length === 0).map(([id]) => id);
-  return {
-    id: "artifact-validation-coverage",
-    label: "Artifact validation coverage",
-    score: covered,
-    total,
-    percent: pct(covered, total),
-    weight: 3,
-    recommendations: missing.length > 0 ? [`${missing.length} artifacts missing required_validations: ${missing.join(", ")}`] : []
-  };
-}
-function taskValidationCoverage(dsl) {
-  const entries = Object.entries(dsl.tasks);
-  const total = entries.length;
-  const covered = entries.filter(([, t3]) => t3.validations.length > 0).length;
-  const missing = entries.filter(([, t3]) => t3.validations.length === 0).map(([id]) => id);
-  return {
-    id: "task-validation-coverage",
-    label: "Task validation coverage",
-    score: covered,
-    total,
-    percent: pct(covered, total),
-    weight: 3,
-    recommendations: missing.length > 0 ? [`${missing.length} tasks missing validations: ${missing.join(", ")}`] : []
-  };
-}
-function guardrailPolicyCoverage(dsl) {
-  const guardrailIds = Object.keys(dsl.guardrails);
-  const total = guardrailIds.length;
-  const referenced = /* @__PURE__ */ new Set();
-  for (const policy of Object.values(dsl.guardrail_policies)) {
-    for (const rule of policy.rules) {
-      referenced.add(rule.guardrail);
-    }
-  }
-  const covered = guardrailIds.filter((id) => referenced.has(id)).length;
-  const missing = guardrailIds.filter((id) => !referenced.has(id));
-  return {
-    id: "guardrail-policy-coverage",
-    label: "Guardrail policy coverage",
-    score: covered,
-    total,
-    percent: pct(covered, total),
-    weight: 2,
-    recommendations: missing.length > 0 ? [`${missing.length} guardrails not in any policy: ${missing.join(", ")}`] : []
-  };
-}
-function workflowValidationIntegration(dsl) {
-  const blockingValidations = Object.entries(dsl.validations).filter(
-    ([, v2]) => v2.blocking
-  );
-  const total = blockingValidations.length;
-  const referenced = /* @__PURE__ */ new Set();
-  for (const wf of Object.values(dsl.workflow)) {
-    for (const step of wf.steps) {
-      if (step.type === "validation") {
-        referenced.add(step.validation);
-      }
-    }
-  }
-  for (const task of Object.values(dsl.tasks)) {
-    for (const valId of task.validations) {
-      referenced.add(valId);
-    }
-  }
-  const covered = blockingValidations.filter(
-    ([id]) => referenced.has(id)
-  ).length;
-  const missing = blockingValidations.filter(([id]) => !referenced.has(id)).map(([id]) => id);
-  return {
-    id: "workflow-validation-integration",
-    label: "Workflow validation integration",
-    score: covered,
-    total,
-    percent: pct(covered, total),
-    weight: 3,
-    recommendations: missing.length > 0 ? [`${missing.length} blocking validations not wired: ${missing.join(", ")}`] : []
-  };
-}
-var OPTIONAL_ENTITY_FIELDS = {
-  agents: {
-    section: "agents",
-    fields: ["responsibilities", "constraints", "rules"]
-  },
-  tasks: {
-    section: "tasks",
-    fields: ["description", "responsibilities", "execution_steps", "completion_criteria"]
-  },
-  artifacts: {
-    section: "artifacts",
-    fields: ["description", "visibility"]
-  },
-  tools: {
-    section: "tools",
-    fields: ["description", "commands"]
-  },
-  workflow: {
-    section: "workflow",
-    fields: ["description", "trigger", "entry_conditions"]
-  },
-  guardrails: {
-    section: "guardrails",
-    fields: ["rationale", "tags"]
-  }
-};
-function hasNonEmpty(obj, field) {
-  const val = obj[field];
-  if (val === void 0 || val === null) return false;
-  if (typeof val === "string") return val.length > 0;
-  if (Array.isArray(val)) return val.length > 0;
-  return true;
-}
-function schemaCompleteness(dsl) {
-  let totalSlots = 0;
-  let filledSlots = 0;
-  const lowSections = [];
-  for (const [sectionKey, meta] of Object.entries(OPTIONAL_ENTITY_FIELDS)) {
-    const entities = dsl[meta.section];
-    if (!entities) continue;
-    let sectionTotal = 0;
-    let sectionFilled = 0;
-    for (const entity of Object.values(entities)) {
-      for (const field of meta.fields) {
-        sectionTotal++;
-        totalSlots++;
-        if (hasNonEmpty(entity, field)) {
-          sectionFilled++;
-          filledSlots++;
-        }
-      }
-    }
-    if (sectionTotal > 0 && pct(sectionFilled, sectionTotal) < 50) {
-      lowSections.push(sectionKey);
-    }
-  }
-  return {
-    id: "schema-completeness",
-    label: "Schema completeness",
-    score: filledSlots,
-    total: totalSlots,
-    percent: pct(filledSlots, totalSlots),
-    weight: 1,
-    recommendations: lowSections.length > 0 ? [`Low optional field coverage in: ${lowSections.join(", ")}`] : []
-  };
-}
-function crossReferenceBidirectionality(dsl) {
-  let totalChecks = 0;
-  let passedChecks = 0;
-  const issues = [];
-  for (const [agentId, agent] of Object.entries(dsl.agents)) {
-    for (const toolId of agent.can_execute_tools) {
-      totalChecks++;
-      const tool = dsl.tools[toolId];
-      if (tool && tool.invokable_by.includes(agentId)) {
-        passedChecks++;
-      } else {
-        issues.push(`agent ${agentId} \u2192 tool ${toolId}`);
-      }
-    }
-    for (const artId of agent.can_write_artifacts) {
-      totalChecks++;
-      const art = dsl.artifacts[artId];
-      if (art && (art.producers.includes(agentId) || art.editors.includes(agentId))) {
-        passedChecks++;
-      } else {
-        issues.push(`agent ${agentId} \u2192 artifact ${artId} (write)`);
-      }
-    }
-    for (const artId of agent.can_read_artifacts) {
-      totalChecks++;
-      const art = dsl.artifacts[artId];
-      if (art && (art.consumers.includes(agentId) || art.producers.includes(agentId) || art.editors.includes(agentId))) {
-        passedChecks++;
-      } else {
-        issues.push(`agent ${agentId} \u2192 artifact ${artId} (read)`);
-      }
-    }
-  }
-  for (const [toolId, tool] of Object.entries(dsl.tools)) {
-    for (const agentId of tool.invokable_by) {
-      totalChecks++;
-      const agent = dsl.agents[agentId];
-      if (agent && agent.can_execute_tools.includes(toolId)) {
-        passedChecks++;
-      } else {
-        issues.push(`tool ${toolId} \u2192 agent ${agentId}`);
-      }
-    }
-  }
-  return {
-    id: "cross-reference-bidirectionality",
-    label: "Cross-reference bidirectionality",
-    score: passedChecks,
-    total: totalChecks,
-    percent: pct(passedChecks, totalChecks),
-    weight: 2,
-    recommendations: issues.length > 0 ? [`${issues.length} unreciprocated cross-references: ${issues.slice(0, 5).join(", ")}${issues.length > 5 ? `, ... (${issues.length - 5} more)` : ""}`] : []
-  };
-}
-function entityGuardrailCoverage(dsl) {
-  const entitySections = [
-    { name: "agents", entities: dsl.agents },
-    { name: "tasks", entities: dsl.tasks },
-    { name: "tools", entities: dsl.tools },
-    { name: "artifacts", entities: dsl.artifacts }
-  ];
-  const scopeBindings = {
-    agents: /* @__PURE__ */ new Set(),
-    tasks: /* @__PURE__ */ new Set(),
-    tools: /* @__PURE__ */ new Set(),
-    artifacts: /* @__PURE__ */ new Set()
-  };
-  for (const guardrail of Object.values(dsl.guardrails)) {
-    for (const key of Object.keys(scopeBindings)) {
-      const ids = guardrail.scope[key];
-      if (ids) {
-        for (const id of ids) scopeBindings[key].add(id);
-      }
-    }
-  }
-  let total = 0;
-  let covered = 0;
-  const missing = [];
-  for (const { name, entities } of entitySections) {
-    for (const [entityId, entity] of Object.entries(entities)) {
-      total++;
-      const hasEntitySide = (entity.guardrails ?? []).length > 0;
-      const hasScopeSide = scopeBindings[name].has(entityId);
-      if (hasEntitySide || hasScopeSide) {
-        covered++;
-      } else {
-        missing.push(`${name}.${entityId}`);
-      }
-    }
-  }
-  return {
-    id: "entity-guardrail-coverage",
-    label: "Entity guardrail coverage",
-    score: covered,
-    total,
-    percent: pct(covered, total),
-    weight: 1,
-    recommendations: missing.length > 0 ? [`${missing.length} entities without guardrails: ${missing.slice(0, 5).join(", ")}${missing.length > 5 ? `, ... (${missing.length - 5} more)` : ""}`] : []
-  };
-}
-function guardrailScopeResolution(dsl) {
-  let totalRefs = 0;
-  let resolvedRefs = 0;
-  const unresolved = [];
-  const sectionMap = {
-    agents: dsl.agents,
-    tasks: dsl.tasks,
-    tools: dsl.tools,
-    artifacts: dsl.artifacts,
-    workflows: dsl.workflow
-  };
-  for (const [guardrailId, guardrail] of Object.entries(dsl.guardrails)) {
-    const scope = guardrail.scope;
-    for (const [scopeKey, entityIds] of Object.entries(scope)) {
-      if (!Array.isArray(entityIds)) continue;
-      const section = sectionMap[scopeKey];
-      if (!section) continue;
-      for (const entityId of entityIds) {
-        totalRefs++;
-        if (section[entityId]) {
-          resolvedRefs++;
-        } else {
-          unresolved.push(`${guardrailId}.scope.${scopeKey}: ${entityId}`);
-        }
-      }
-    }
-  }
-  return {
-    id: "guardrail-scope-resolution",
-    label: "Guardrail scope resolution",
-    score: resolvedRefs,
-    total: totalRefs,
-    percent: pct(resolvedRefs, totalRefs),
-    weight: 2,
-    recommendations: unresolved.length > 0 ? [`${unresolved.length} unresolved scope refs: ${unresolved.join(", ")}`] : []
-  };
-}
-function score(dsl) {
-  const dimensions = [
-    artifactValidationCoverage(dsl),
-    taskValidationCoverage(dsl),
-    guardrailPolicyCoverage(dsl),
-    workflowValidationIntegration(dsl),
-    schemaCompleteness(dsl),
-    crossReferenceBidirectionality(dsl),
-    guardrailScopeResolution(dsl),
-    entityGuardrailCoverage(dsl)
-  ];
-  const totalWeight = dimensions.reduce((s2, d2) => s2 + d2.weight, 0);
-  const weightedSum = dimensions.reduce(
-    (s2, d2) => s2 + d2.percent * d2.weight,
-    0
-  );
-  const overall = totalWeight === 0 ? 100 : Math.round(weightedSum / totalWeight);
-  return { overall, dimensions };
-}
-
-// src/cli/commands/score.ts
-var DIR_DEFAULT4 = "agent-contracts.yaml";
-function formatText(result) {
-  const lines = [];
-  lines.push(`DSL Completeness Score: ${result.overall}/100`);
-  lines.push("");
-  for (const d2 of result.dimensions) {
-    const detail = d2.total > 0 ? ` (${d2.score}/${d2.total} ${d2.id.split("-")[0]})` : "";
-    lines.push(
-      `  ${d2.label.padEnd(40)} ${String(d2.percent).padStart(3)}%${detail}`
-    );
-  }
-  const allRecs = result.dimensions.flatMap((d2) => d2.recommendations);
-  if (allRecs.length > 0) {
-    lines.push("");
-    lines.push("Recommendations:");
-    for (const rec of allRecs) {
-      lines.push(`  - ${rec}`);
+    for (const spec of Object.values(ti.accepts.workflows)) {
+      handoffKeys.add(spec.input_handoff);
+      handoffKeys.add(spec.output_handoff);
     }
   }
-  return lines.join("\n");
-}
-var scoreCommand = new Command7("score").description("Calculate DSL completeness score").argument("[dir]", "Path to agent-contracts.yaml", DIR_DEFAULT4).option("-c, --config <path>", "Path to agent-contracts.config.yaml").option("--team <id>", "Limit to one team (multi-team config only)").option("--format <format>", "Output format (text|json)", "text").option("--threshold <number>", "Minimum score (exit 1 if below)", void 0).action(
-  async (dir, opts) => {
-    try {
-      const config = await loadConfig(opts.config);
-      if (config !== null && isMultiTeamConfig(config)) {
-        const teamEntries = getTeamEntries(config, opts.team);
-        let thresholdNum;
-        if (opts.threshold !== void 0) {
-          thresholdNum = parseInt(opts.threshold, 10);
-          if (isNaN(thresholdNum)) {
-            process.stderr.write(
-              `Error: --threshold must be a number, got "${opts.threshold}"
-`
-            );
-            process.exit(1);
-          }
-        }
-        let hasErrors = false;
-        for (const [teamId, teamConfig] of teamEntries) {
-          process.stdout.write(`
---- Team: ${teamId} ---
-`);
-          const resolved2 = await resolve4(teamConfig.dsl);
-          const data2 = teamConfig.vars ? substituteVars(resolved2.data, teamConfig.vars) : resolved2.data;
-          const schemaResult2 = validateSchema(data2);
-          if (!schemaResult2.success) {
-            const issues = schemaResult2.diagnostics.map((d2) => `  ${d2.path}: ${d2.message}`).join("\n");
-            process.stderr.write(`Schema validation failed:
-${issues}
-`);
-            hasErrors = true;
-            continue;
-          }
-          const result2 = score(schemaResult2.data);
-          if (opts.format === "json") {
-            process.stdout.write(JSON.stringify(result2, null, 2) + "\n");
-          } else {
-            process.stdout.write(formatText(result2) + "\n");
-          }
-          if (thresholdNum !== void 0 && result2.overall < thresholdNum) {
-            process.stderr.write(
-              `Score ${result2.overall} is below threshold ${thresholdNum}
-`
-            );
-            hasErrors = true;
-          }
-        }
-        if (hasErrors) process.exit(1);
-        return;
-      }
-      const dslPath = resolveDslPath(dir, DIR_DEFAULT4, config);
-      const resolved = await resolve4(dslPath);
-      const data = config?.vars ? substituteVars(resolved.data, config.vars) : resolved.data;
-      const schemaResult = validateSchema(data);
-      if (!schemaResult.success) {
-        const issues = schemaResult.diagnostics.map((d2) => `  ${d2.path}: ${d2.message}`).join("\n");
-        process.stderr.write(`Schema validation failed:
-${issues}
-`);
-        process.exit(1);
-      }
-      const result = score(schemaResult.data);
-      if (opts.format === "json") {
-        process.stdout.write(JSON.stringify(result, null, 2) + "\n");
-      } else {
-        process.stdout.write(formatText(result) + "\n");
+  const handoff_types = {};
+  for (const k2 of [...handoffKeys].sort()) {
+    const ht = dsl.handoff_types[k2];
+    if (ht) {
+      const entry = {
+        version: ht.version,
+        schema: ht.schema
+      };
+      if (ht.description !== void 0) {
+        entry.description = ht.description;
       }
-      if (opts.threshold !== void 0) {
-        const threshold = parseInt(opts.threshold, 10);
-        if (isNaN(threshold)) {
-          process.stderr.write(
-            `Error: --threshold must be a number, got "${opts.threshold}"
-`
-          );
-          process.exit(1);
-        }
-        if (result.overall < threshold) {
-          process.stderr.write(
-            `Score ${result.overall} is below threshold ${threshold}
-`
-          );
-          process.exit(1);
+      handoff_types[k2] = entry;
+    }
+  }
+  if (Object.keys(handoff_types).length > 0) {
+    doc.handoff_types = handoff_types;
+  }
+  const artifactsOut = {};
+  if (ti.exposes?.artifacts) {
+    for (const key of [...ti.exposes.artifacts].sort()) {
+      const art = dsl.artifacts[key];
+      if (art) {
+        const entry = {
+          type: art.type,
+          states: art.states
+        };
+        if (art.description !== void 0) {
+          entry.description = art.description;
         }
+        artifactsOut[key] = entry;
       }
-    } catch (err) {
-      const msg = err instanceof Error ? err.message : String(err);
-      process.stderr.write(`Error: ${msg}
-`);
-      process.exit(1);
     }
   }
-);
-
-// src/cli/commands/audit.ts
-import { writeFileSync as writeFileSync2 } from "fs";
-import { Command as Command8 } from "commander";
+  if (Object.keys(artifactsOut).length > 0) {
+    doc.exposes = { artifacts: artifactsOut };
+  }
+  if (ti.constraints !== void 0 && ti.constraints.length > 0) {
+    doc.constraints = ti.constraints;
+  }
+  return doc;
+}
+function generateInterface(options) {
+  if (!options.dsl.team_interface) {
+    throw new Error("DSL has no team_interface section");
+  }
+  const doc = buildInterfaceDocument(options.dsl, (/* @__PURE__ */ new Date()).toISOString());
+  const content = options.format === "json" ? `${JSON.stringify(doc, null, 2)}
+` : `${stringify(doc, { sortMapEntries: true })}
+`;
+  const outputPath = options.output ?? "team-interface.yaml";
+  return { outputPath, content };
+}
 
 // src/auditor/context-builder.ts
 import { readFile as readFile6 } from "fs/promises";
@@ -56952,11 +56523,579 @@ function computeExitCode(results, failOn) {
   return 0;
 }
 
-// src/cli/commands/audit.ts
+// src/cli/format.ts
+function formatDiagnostics(diagnostics, options) {
+  if (options.quiet && diagnostics.length === 0) return "";
+  if (options.format === "json") {
+    return JSON.stringify(diagnostics, null, 2);
+  }
+  return diagnostics.map((d2) => {
+    const severity = d2.severity ?? d2.code ?? "error";
+    const rule = d2.ruleId ?? d2.code ?? "";
+    return `${d2.path}: ${severity} [${rule}] ${d2.message}`;
+  }).join("\n");
+}
+
+// src/cli/multi-team.ts
+function isMultiTeamConfig(config) {
+  return config.teams !== void 0 && Object.keys(config.teams).length > 0;
+}
+function getTeamEntries(config, teamFilter) {
+  if (!config.teams) return [];
+  const entries = Object.entries(config.teams);
+  if (teamFilter) {
+    const found = entries.filter(([k2]) => k2 === teamFilter);
+    if (found.length === 0) {
+      throw new Error(
+        `Team "${teamFilter}" not found. Available teams: ${entries.map(([k2]) => k2).join(", ")}`
+      );
+    }
+    return found;
+  }
+  return entries;
+}
+
+// src/cli/commands/generate-interface.ts
+import { writeFileSync } from "fs";
+import { resolve as resolve7 } from "path";
+function runGenerateInterfaceCli(opts) {
+  if (!opts.dsl.team_interface) {
+    process.stderr.write("Error: DSL has no team_interface section.\n");
+    process.exit(1);
+  }
+  const outputPath = resolve7(process.cwd(), opts.output ?? "team-interface.yaml");
+  const result = generateInterface({
+    dsl: opts.dsl,
+    output: outputPath,
+    dryRun: opts.dryRun,
+    format: opts.format
+  });
+  if (opts.dryRun) {
+    process.stdout.write(result.content);
+    return;
+  }
+  writeFileSync(result.outputPath, result.content, "utf8");
+  if (!opts.quiet) {
+    process.stdout.write(`Wrote ${result.outputPath}
+`);
+  }
+}
+
+// src/cli/handlers.ts
+var DIR_DEFAULT = "agent-contracts.yaml";
+var handleResolve = async (dir, opts) => {
+  try {
+    const config = await loadConfig(opts.config);
+    if (config !== null && isMultiTeamConfig(config)) {
+      const teamEntries = getTeamEntries(config, opts.team);
+      if (opts.format === "json") {
+        const out = {};
+        for (const [teamId, teamConfig] of teamEntries) {
+          const result2 = await resolve4(teamConfig.dsl);
+          let data2 = teamConfig.vars ? substituteVars(result2.data, teamConfig.vars) : result2.data;
+          if (opts.expandDefaults) data2 = expandDefaults(data2);
+          out[teamId] = data2;
+        }
+        process.stdout.write(JSON.stringify(out, null, 2) + "\n");
+      } else {
+        for (const [teamId, teamConfig] of teamEntries) {
+          process.stdout.write(`
+--- Team: ${teamId} ---
+`);
+          const result2 = await resolve4(teamConfig.dsl);
+          let data2 = teamConfig.vars ? substituteVars(result2.data, teamConfig.vars) : result2.data;
+          if (opts.expandDefaults) data2 = expandDefaults(data2);
+          process.stdout.write(stringify3(data2));
+        }
+      }
+      return;
+    }
+    const dslPath = resolveDslPath(dir ?? DIR_DEFAULT, DIR_DEFAULT, config);
+    const result = await resolve4(dslPath);
+    let data = config?.vars ? substituteVars(result.data, config.vars) : result.data;
+    if (opts.expandDefaults) data = expandDefaults(data);
+    if (opts.format === "json") {
+      process.stdout.write(JSON.stringify(data, null, 2) + "\n");
+    } else {
+      process.stdout.write(stringify3(data));
+    }
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    process.stderr.write(`Error: ${msg}
+`);
+    process.exit(1);
+  }
+};
+var handleValidate = async (dir, opts) => {
+  try {
+    const config = await loadConfig(opts.config);
+    if (config !== null && isMultiTeamConfig(config)) {
+      const teamEntries = getTeamEntries(config, opts.team);
+      let hasErrors = false;
+      let allTeamsFullyClean = true;
+      for (const [teamId, teamConfig] of teamEntries) {
+        if (!opts.quiet) process.stdout.write(`
+--- Team: ${teamId} ---
+`);
+        const resolved2 = await resolve4(teamConfig.dsl);
+        const data2 = teamConfig.vars ? substituteVars(resolved2.data, teamConfig.vars) : resolved2.data;
+        const schemaResult2 = validateSchema(data2);
+        const schemaWarnings2 = schemaResult2.diagnostics.filter(
+          (d2) => d2.severity === "warning"
+        );
+        if (!schemaResult2.success) {
+          const output = formatDiagnostics(schemaResult2.diagnostics, {
+            format: opts.format ?? "text",
+            quiet: !!opts.quiet
+          });
+          if (output) process.stderr.write(output + "\n");
+          hasErrors = true;
+          allTeamsFullyClean = false;
+          continue;
+        }
+        const refDiags2 = checkReferences(schemaResult2.data);
+        const handoffDiags2 = validateHandoffSchemas(schemaResult2.data);
+        const allDiags2 = [...refDiags2, ...handoffDiags2, ...schemaWarnings2];
+        if (allDiags2.length > 0) {
+          allTeamsFullyClean = false;
+          const output = formatDiagnostics(allDiags2, {
+            format: opts.format ?? "text",
+            quiet: !!opts.quiet
+          });
+          if (output) process.stderr.write(output + "\n");
+          const hasWarnings2 = allDiags2.some(
+            (d2) => "severity" in d2 && d2.severity === "warning"
+          );
+          if (refDiags2.length > 0 || handoffDiags2.length > 0 || opts.strict && hasWarnings2) {
+            hasErrors = true;
+          }
+        }
+      }
+      if (hasErrors) process.exit(1);
+      if (!opts.quiet && allTeamsFullyClean) process.stdout.write("Validation passed.\n");
+      return;
+    }
+    const dslPath = resolveDslPath(dir ?? DIR_DEFAULT, DIR_DEFAULT, config);
+    const resolved = await resolve4(dslPath);
+    const data = config?.vars ? substituteVars(resolved.data, config.vars) : resolved.data;
+    const schemaResult = validateSchema(data);
+    const schemaWarnings = schemaResult.diagnostics.filter(
+      (d2) => d2.severity === "warning"
+    );
+    if (!schemaResult.success) {
+      const output = formatDiagnostics(schemaResult.diagnostics, {
+        format: opts.format ?? "text",
+        quiet: !!opts.quiet
+      });
+      if (output) process.stderr.write(output + "\n");
+      process.exit(1);
+    }
+    const refDiags = checkReferences(schemaResult.data);
+    const handoffDiags = validateHandoffSchemas(schemaResult.data);
+    const allDiags = [...refDiags, ...handoffDiags, ...schemaWarnings];
+    const hasWarnings = allDiags.some(
+      (d2) => "severity" in d2 && d2.severity === "warning"
+    );
+    if (allDiags.length > 0) {
+      const output = formatDiagnostics(allDiags, {
+        format: opts.format ?? "text",
+        quiet: !!opts.quiet
+      });
+      if (output) process.stderr.write(output + "\n");
+      if (refDiags.length > 0 || handoffDiags.length > 0 || opts.strict && hasWarnings) {
+        process.exit(1);
+      }
+    }
+    if (!opts.quiet && allDiags.length === 0) process.stdout.write("Validation passed.\n");
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    process.stderr.write(`Error: ${msg}
+`);
+    process.exit(1);
+  }
+};
+var handleLint = async (dir, opts) => {
+  try {
+    const config = await loadConfig(opts.config);
+    if (config !== null && isMultiTeamConfig(config)) {
+      const teamEntries = getTeamEntries(config, opts.team);
+      let hasErrors = false;
+      let allClean = true;
+      for (const [teamId, teamConfig] of teamEntries) {
+        if (!opts.quiet) process.stdout.write(`
+--- Team: ${teamId} ---
+`);
+        const resolved2 = await resolve4(teamConfig.dsl);
+        const data2 = teamConfig.vars ? substituteVars(resolved2.data, teamConfig.vars) : resolved2.data;
+        const schemaResult2 = validateSchema(data2);
+        const schemaWarnings2 = schemaResult2.diagnostics.filter(
+          (d2) => d2.severity === "warning"
+        );
+        if (!schemaResult2.success) {
+          const output = formatDiagnostics(schemaResult2.diagnostics, {
+            format: opts.format ?? "text",
+            quiet: !!opts.quiet
+          });
+          if (output) process.stderr.write(output + "\n");
+          hasErrors = true;
+          allClean = false;
+          continue;
+        }
+        const tsDiagnostics2 = lint(schemaResult2.data);
+        const spectralDiagnostics2 = await spectralLint(
+          schemaResult2.data
+        );
+        const diagnostics2 = [...tsDiagnostics2, ...spectralDiagnostics2, ...schemaWarnings2];
+        if (diagnostics2.length > 0) {
+          allClean = false;
+          const output = formatDiagnostics(diagnostics2, {
+            format: opts.format ?? "text",
+            quiet: !!opts.quiet
+          });
+          if (output) process.stderr.write(output + "\n");
+          if (diagnostics2.some((d2) => d2.severity === "error")) hasErrors = true;
+          if (opts.strict && diagnostics2.some((d2) => d2.severity === "warning")) hasErrors = true;
+        }
+      }
+      if (hasErrors) process.exit(1);
+      if (!opts.quiet && allClean) process.stdout.write("Lint passed.\n");
+      return;
+    }
+    const dslPath = resolveDslPath(dir ?? DIR_DEFAULT, DIR_DEFAULT, config);
+    const resolved = await resolve4(dslPath);
+    const data = config?.vars ? substituteVars(resolved.data, config.vars) : resolved.data;
+    const schemaResult = validateSchema(data);
+    const schemaWarnings = schemaResult.diagnostics.filter(
+      (d2) => d2.severity === "warning"
+    );
+    if (!schemaResult.success) {
+      const output = formatDiagnostics(schemaResult.diagnostics, {
+        format: opts.format ?? "text",
+        quiet: !!opts.quiet
+      });
+      if (output) process.stderr.write(output + "\n");
+      process.exit(1);
+    }
+    const tsDiagnostics = lint(schemaResult.data);
+    const spectralDiagnostics = await spectralLint(
+      schemaResult.data
+    );
+    const diagnostics = [...tsDiagnostics, ...spectralDiagnostics, ...schemaWarnings];
+    if (diagnostics.length > 0) {
+      const output = formatDiagnostics(diagnostics, {
+        format: opts.format ?? "text",
+        quiet: !!opts.quiet
+      });
+      if (output) process.stderr.write(output + "\n");
+      if (diagnostics.some((d2) => d2.severity === "error")) process.exit(1);
+      if (opts.strict && diagnostics.some((d2) => d2.severity === "warning")) process.exit(1);
+    }
+    if (!opts.quiet && diagnostics.length === 0) process.stdout.write("Lint passed.\n");
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    process.stderr.write(`Error: ${msg}
+`);
+    process.exit(1);
+  }
+};
+var handleRender = async (opts) => {
+  process.stderr.write(
+    "Warning: 'render' is deprecated. Use 'agent-contracts generate templates' instead.\n"
+  );
+  await handleGenerate("templates", {
+    config: opts.config,
+    team: opts.team,
+    check: opts.check,
+    format: "yaml",
+    dryRun: false,
+    quiet: opts.quiet
+  }, {});
+};
+var handleCheck = async (opts) => {
+  let hasErrors = false;
+  try {
+    const config = await loadConfig(opts.config);
+    if (!config) {
+      process.stderr.write(
+        "Error: agent-contracts.config.yaml not found. Use --config to specify path.\n"
+      );
+      process.exit(1);
+    }
+    if (isMultiTeamConfig(config)) {
+      const teamEntries = getTeamEntries(config, opts.team);
+      for (const [teamId, teamConfig] of teamEntries) {
+        if (!opts.quiet) process.stderr.write(`
+--- Team: ${teamId} ---
+`);
+        const resolved2 = await resolve4(teamConfig.dsl);
+        const data2 = teamConfig.vars ? substituteVars(resolved2.data, teamConfig.vars) : resolved2.data;
+        const schemaResult2 = validateSchema(data2);
+        const schemaWarnings2 = schemaResult2.diagnostics.filter((d2) => d2.severity === "warning");
+        if (!schemaResult2.success) {
+          const output = formatDiagnostics(schemaResult2.diagnostics, {
+            format: opts.format ?? "text",
+            quiet: !!opts.quiet
+          });
+          if (output) process.stderr.write(output + "\n");
+          hasErrors = true;
+          continue;
+        }
+        const refDiags2 = checkReferences(schemaResult2.data);
+        const handoffDiags2 = validateHandoffSchemas(schemaResult2.data);
+        const allRefDiags2 = [...refDiags2, ...handoffDiags2, ...schemaWarnings2];
+        if (allRefDiags2.length > 0) {
+          const output = formatDiagnostics(allRefDiags2, {
+            format: opts.format ?? "text",
+            quiet: !!opts.quiet
+          });
+          if (output) process.stderr.write(output + "\n");
+          hasErrors = true;
+        }
+        const tsLintDiags2 = lint(schemaResult2.data);
+        const spectralDiags2 = await spectralLint(
+          schemaResult2.data
+        );
+        const lintDiags2 = [...tsLintDiags2, ...spectralDiags2];
+        if (lintDiags2.length > 0) {
+          const output = formatDiagnostics(lintDiags2, {
+            format: opts.format ?? "text",
+            quiet: !!opts.quiet
+          });
+          if (output) process.stderr.write(output + "\n");
+          if (lintDiags2.some((d2) => d2.severity === "error")) hasErrors = true;
+          if (opts.strict && lintDiags2.some((d2) => d2.severity === "warning")) hasErrors = true;
+        }
+        let renderOptions2;
+        if (teamConfig.bindings.length > 0) {
+          const loadedBindings = await loadBindings(teamConfig.bindings);
+          renderOptions2 = { loadedBindings, activeGuardrailPolicy: teamConfig.activeGuardrailPolicy };
+        }
+        const drift2 = await checkDriftFromConfig(schemaResult2.data, config.renders, renderOptions2);
+        if (drift2.hasDrift) {
+          process.stderr.write(`Drift detected for team ${teamId} in:
+`);
+          for (const f2 of drift2.diffs) process.stderr.write(`  ${f2}
+`);
+          hasErrors = true;
+        }
+      }
+      if (!hasErrors) {
+        for (const [teamId, teamConfig] of teamEntries) {
+          const resolved2 = await resolve4(teamConfig.dsl);
+          const data2 = teamConfig.vars ? substituteVars(resolved2.data, teamConfig.vars) : resolved2.data;
+          const schemaResult2 = validateSchema(data2);
+          if (!schemaResult2.success || !schemaResult2.data) continue;
+          const dsl = schemaResult2.data;
+          const imports = dsl.imports;
+          if (!imports) continue;
+          for (const [importName, importDef] of Object.entries(imports)) {
+            const interfacePathRel = importDef?.interface;
+            if (typeof interfacePathRel !== "string") continue;
+            const interfacePath = pathResolve(dirname7(teamConfig.dsl), interfacePathRel);
+            try {
+              await access2(interfacePath);
+            } catch {
+              process.stderr.write(
+                `Cross-team error: Team "${teamId}" imports "${importName}" but interface file not found: ${interfacePath}
+`
+              );
+              hasErrors = true;
+            }
+          }
+        }
+      }
+      if (hasErrors) process.exit(1);
+      if (!opts.quiet) process.stdout.write("All checks passed.\n");
+      return;
+    }
+    const resolved = await resolve4(config.dsl);
+    const data = config.vars ? substituteVars(resolved.data, config.vars) : resolved.data;
+    const schemaResult = validateSchema(data);
+    const schemaWarnings = schemaResult.diagnostics.filter((d2) => d2.severity === "warning");
+    if (!schemaResult.success) {
+      const output = formatDiagnostics(schemaResult.diagnostics, {
+        format: opts.format ?? "text",
+        quiet: !!opts.quiet
+      });
+      if (output) process.stderr.write(output + "\n");
+      process.exit(1);
+    }
+    const refDiags = checkReferences(schemaResult.data);
+    const handoffDiags = validateHandoffSchemas(schemaResult.data);
+    const allRefDiags = [...refDiags, ...handoffDiags, ...schemaWarnings];
+    if (allRefDiags.length > 0) {
+      const output = formatDiagnostics(allRefDiags, {
+        format: opts.format ?? "text",
+        quiet: !!opts.quiet
+      });
+      if (output) process.stderr.write(output + "\n");
+      hasErrors = true;
+    }
+    const tsLintDiags = lint(schemaResult.data);
+    const spectralDiags = await spectralLint(
+      schemaResult.data
+    );
+    const lintDiags = [...tsLintDiags, ...spectralDiags];
+    if (lintDiags.length > 0) {
+      const output = formatDiagnostics(lintDiags, {
+        format: opts.format ?? "text",
+        quiet: !!opts.quiet
+      });
+      if (output) process.stderr.write(output + "\n");
+      if (lintDiags.some((d2) => d2.severity === "error")) hasErrors = true;
+      if (opts.strict && lintDiags.some((d2) => d2.severity === "warning")) hasErrors = true;
+    }
+    let renderOptions;
+    if (config.bindings.length > 0) {
+      const loadedBindings = await loadBindings(config.bindings);
+      renderOptions = { loadedBindings, activeGuardrailPolicy: config.activeGuardrailPolicy };
+    }
+    const drift = await checkDriftFromConfig(schemaResult.data, config.renders, renderOptions);
+    if (drift.hasDrift) {
+      process.stderr.write("Drift detected in:\n");
+      for (const f2 of drift.diffs) process.stderr.write(`  ${f2}
+`);
+      hasErrors = true;
+    }
+    if (schemaResult.data.team_interface) {
+      const interfacePath = join3(config.configDir, "team-interface.yaml");
+      if (existsSync(interfacePath)) {
+        const result = generateInterface({ dsl: schemaResult.data, dryRun: true, format: "yaml" });
+        const existing = readFileSync(interfacePath, "utf8");
+        const normalize = (raw) => {
+          try {
+            const parsed = parseYaml4(raw);
+            if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
+              const { generated_at: _t, ...rest } = parsed;
+              return `${stringify3(rest, { sortMapEntries: true })}
+`;
+            }
+          } catch {
+          }
+          return raw.trim();
+        };
+        if (normalize(existing) !== normalize(result.content)) {
+          process.stderr.write("Drift detected in team-interface.yaml\n");
+          hasErrors = true;
+        }
+      }
+    }
+    if (hasErrors) process.exit(1);
+    if (!opts.quiet) process.stdout.write("All checks passed.\n");
+  } catch (err) {
+    if (err instanceof ConfigLoadError) {
+      process.stderr.write(`Config error: ${err.message}
+`);
+      process.exit(1);
+    }
+    const msg = err instanceof Error ? err.message : String(err);
+    process.stderr.write(`Error: ${msg}
+`);
+    process.exit(1);
+  }
+};
+function formatScoreText(result) {
+  const lines = [];
+  lines.push(`DSL Completeness Score: ${result.overall}/100`);
+  lines.push("");
+  for (const d2 of result.dimensions) {
+    const detail = d2.total > 0 ? ` (${d2.score}/${d2.total} ${d2.id.split("-")[0]})` : "";
+    lines.push(`  ${d2.label.padEnd(40)} ${String(d2.percent).padStart(3)}%${detail}`);
+  }
+  const allRecs = result.dimensions.flatMap((d2) => d2.recommendations);
+  if (allRecs.length > 0) {
+    lines.push("");
+    lines.push("Recommendations:");
+    for (const rec of allRecs) lines.push(`  - ${rec}`);
+  }
+  return lines.join("\n");
+}
+var handleScore = async (dir, opts) => {
+  try {
+    const config = await loadConfig(opts.config);
+    if (config !== null && isMultiTeamConfig(config)) {
+      const teamEntries = getTeamEntries(config, opts.team);
+      let thresholdNum;
+      if (opts.threshold !== void 0) {
+        thresholdNum = parseInt(String(opts.threshold), 10);
+        if (isNaN(thresholdNum)) {
+          process.stderr.write(`Error: --threshold must be a number, got "${opts.threshold}"
+`);
+          process.exit(1);
+        }
+      }
+      let hasErrors = false;
+      for (const [teamId, teamConfig] of teamEntries) {
+        process.stdout.write(`
+--- Team: ${teamId} ---
+`);
+        const resolved2 = await resolve4(teamConfig.dsl);
+        const data2 = teamConfig.vars ? substituteVars(resolved2.data, teamConfig.vars) : resolved2.data;
+        const schemaResult2 = validateSchema(data2);
+        if (!schemaResult2.success) {
+          const issues = schemaResult2.diagnostics.map((d2) => `  ${d2.path}: ${d2.message}`).join("\n");
+          process.stderr.write(`Schema validation failed:
+${issues}
+`);
+          hasErrors = true;
+          continue;
+        }
+        const result2 = score(schemaResult2.data);
+        if (opts.format === "json") {
+          process.stdout.write(JSON.stringify(result2, null, 2) + "\n");
+        } else {
+          process.stdout.write(formatScoreText(result2) + "\n");
+        }
+        if (thresholdNum !== void 0 && result2.overall < thresholdNum) {
+          process.stderr.write(`Score ${result2.overall} is below threshold ${thresholdNum}
+`);
+          hasErrors = true;
+        }
+      }
+      if (hasErrors) process.exit(1);
+      return;
+    }
+    const dslPath = resolveDslPath(dir ?? DIR_DEFAULT, DIR_DEFAULT, config);
+    const resolved = await resolve4(dslPath);
+    const data = config?.vars ? substituteVars(resolved.data, config.vars) : resolved.data;
+    const schemaResult = validateSchema(data);
+    if (!schemaResult.success) {
+      const issues = schemaResult.diagnostics.map((d2) => `  ${d2.path}: ${d2.message}`).join("\n");
+      process.stderr.write(`Schema validation failed:
+${issues}
+`);
+      process.exit(1);
+    }
+    const result = score(schemaResult.data);
+    if (opts.format === "json") {
+      process.stdout.write(JSON.stringify(result, null, 2) + "\n");
+    } else {
+      process.stdout.write(formatScoreText(result) + "\n");
+    }
+    if (opts.threshold !== void 0) {
+      const threshold = parseInt(String(opts.threshold), 10);
+      if (isNaN(threshold)) {
+        process.stderr.write(`Error: --threshold must be a number, got "${opts.threshold}"
+`);
+        process.exit(1);
+      }
+      if (result.overall < threshold) {
+        process.stderr.write(`Score ${result.overall} is below threshold ${threshold}
+`);
+        process.exit(1);
+      }
+    }
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    process.stderr.write(`Error: ${msg}
+`);
+    process.exit(1);
+  }
+};
 var AUDIT_TYPES = ["render", "dsl", "prompt", "all"];
-function parseAuditConfig(config) {
-  if (!config) return {};
-  const audit = config;
+function parseAuditConfig(configObj) {
+  if (!configObj) return {};
+  const audit = configObj;
   return {
     adapter: audit.adapter,
     model: audit.model,
@@ -56964,7 +57103,7 @@ function parseAuditConfig(config) {
     cache_dir: audit.cache_dir
   };
 }
-async function runAuditForDsl(dslPath, vars, configObj, auditType, opts, failOn) {
+async function runAuditForDsl(dslPath, vars, configObj, auditType, auditOpts, failOn) {
   const resolved = await resolve4(dslPath);
   const data = vars ? substituteVars(resolved.data, vars) : resolved.data;
   const schemaResult = validateSchema(data);
@@ -56975,122 +57114,283 @@ async function runAuditForDsl(dslPath, vars, configObj, auditType, opts, failOn)
   const auditConfig = parseAuditConfig(
     configObj.audit
   );
-  if (opts.adapter) auditConfig.adapter = opts.adapter;
-  if (opts.model) auditConfig.model = opts.model;
+  if (auditOpts.adapter) auditConfig.adapter = auditOpts.adapter;
+  if (auditOpts.model) auditConfig.model = auditOpts.model;
   if (auditType === "all") {
     const results = await runAllAudits(schemaResult.data, configObj, auditConfig, {
-      format: opts.format,
-      scope: opts.scope,
-      dryRun: opts.dryRun
+      format: auditOpts.format,
+      scope: auditOpts.scope,
+      dryRun: auditOpts.dryRun
     });
     let output2;
-    if (opts.dryRun) {
-      output2 = results.map(
-        (r3) => `
+    if (auditOpts.dryRun) {
+      output2 = results.map((r3) => `
 --- Audit prompt: ${r3.auditType} ---
 ${r3.prompt}
-`
-      ).join("");
+`).join("");
     } else {
-      output2 = formatAuditResults(results, opts.format) + "\n";
+      output2 = formatAuditResults(results, auditOpts.format) + "\n";
     }
     return { exitCode: computeExitCode(results, failOn), output: output2 };
   }
   const result = await runAudit(schemaResult.data, configObj, auditConfig, {
     auditType,
-    format: opts.format,
-    scope: opts.scope,
-    dryRun: opts.dryRun
+    format: auditOpts.format,
+    scope: auditOpts.scope,
+    dryRun: auditOpts.dryRun
   });
   let output;
-  if (opts.dryRun) {
+  if (auditOpts.dryRun) {
     output = result.prompt + "\n";
   } else {
-    output = formatAuditResult(result, opts.format) + "\n";
+    output = formatAuditResult(result, auditOpts.format) + "\n";
   }
   return { exitCode: computeExitCode([result], failOn), output };
 }
-var auditCommand = new Command8("audit").description("Run LLM-based semantic audit on DSL definitions and generated outputs").argument("[type]", `Audit type: ${AUDIT_TYPES.join(", ")}`, "all").option("-c, --config <path>", "Path to agent-contracts.config.yaml").option("--team <id>", "Limit to one team (multi-team config only)").option("--format <format>", "Output format (text|json|markdown)", "text").option("--scope <entities>", "Limit audit scope (e.g. agents:architect,implementer)").option("--dry-run", "Output the audit prompt without calling LLM", false).option("--adapter <name>", "SDK adapter to use (default from config)").option("--model <name>", "LLM model override").option("--fail-on <level>", "Minimum severity that causes exit 10 (info|warning|error|critical)", "critical").option("-o, --output <file>", "Write result to a file instead of stdout").option("--report-format <fmt>", "Alias for --format (for cli-contracts standard conformance)").action(
-  async (type, opts) => {
-    if (!AUDIT_TYPES.includes(type)) {
-      process.stderr.write(
-        `Unknown audit type: "${type}". Use one of: ${AUDIT_TYPES.join(", ")}
+var handleAudit = async (type, opts) => {
+  const auditType = type ?? "all";
+  if (!AUDIT_TYPES.includes(auditType)) {
+    process.stderr.write(
+      `Unknown audit type: "${auditType}". Use one of: ${AUDIT_TYPES.join(", ")}
 `
+    );
+    process.exit(1);
+  }
+  const format2 = opts.reportFormat ?? opts.format ?? "text";
+  try {
+    const config = await loadConfig(opts.config);
+    if (!config) {
+      process.stderr.write(
+        "Error: agent-contracts.config.yaml not found. Use --config to specify path.\n"
       );
       process.exit(1);
     }
-    const format2 = opts.reportFormat ?? opts.format;
-    try {
-      const config = await loadConfig(opts.config);
-      if (!config) {
-        process.stderr.write(
-          "Error: agent-contracts.config.yaml not found. Use --config to specify path.\n"
+    if (isMultiTeamConfig(config)) {
+      const teamEntries = getTeamEntries(config, opts.team);
+      let maxExit = 0;
+      const allOutput = [];
+      for (const [teamId, teamConfig] of teamEntries) {
+        process.stderr.write(`
+--- Team: ${teamId} ---
+`);
+        const result2 = await runAuditForDsl(
+          teamConfig.dsl,
+          teamConfig.vars,
+          config,
+          auditType,
+          { format: format2, scope: opts.scope, dryRun: !!opts.dryRun, adapter: opts.adapter, model: opts.model },
+          opts.failOn
         );
-        process.exit(1);
+        process.stdout.write(result2.output);
+        allOutput.push(result2.output);
+        if (result2.exitCode > maxExit) maxExit = result2.exitCode;
       }
-      if (isMultiTeamConfig(config)) {
-        const teamEntries = getTeamEntries(config, opts.team);
-        let maxExit = 0;
-        const allOutput = [];
-        for (const [teamId, teamConfig] of teamEntries) {
-          process.stderr.write(`
---- Team: ${teamId} ---
+      if (opts.output) writeFileSync2(opts.output, allOutput.join(""), "utf8");
+      process.exit(maxExit);
+    }
+    const result = await runAuditForDsl(
+      config.dsl,
+      config.vars,
+      config,
+      auditType,
+      { format: format2, scope: opts.scope, dryRun: !!opts.dryRun, adapter: opts.adapter, model: opts.model },
+      opts.failOn
+    );
+    process.stdout.write(result.output);
+    if (opts.output) writeFileSync2(opts.output, result.output, "utf8");
+    process.exit(result.exitCode);
+  } catch (err) {
+    if (err instanceof ConfigLoadError) {
+      process.stderr.write(`Config error: ${err.message}
 `);
-          const result2 = await runAuditForDsl(
-            teamConfig.dsl,
-            teamConfig.vars,
-            config,
-            type,
-            { format: format2, scope: opts.scope, dryRun: opts.dryRun, adapter: opts.adapter, model: opts.model },
-            opts.failOn
-          );
-          process.stdout.write(result2.output);
-          allOutput.push(result2.output);
-          if (result2.exitCode > maxExit) maxExit = result2.exitCode;
-        }
-        if (opts.output) writeFileSync2(opts.output, allOutput.join(""), "utf8");
-        process.exit(maxExit);
-      }
-      const result = await runAuditForDsl(
-        config.dsl,
-        config.vars,
-        config,
-        type,
-        { format: format2, scope: opts.scope, dryRun: opts.dryRun, adapter: opts.adapter, model: opts.model },
-        opts.failOn
+      process.exit(1);
+    }
+    const msg = err instanceof Error ? err.message : String(err);
+    process.stderr.write(`Error: ${msg}
+`);
+    if (msg.includes("not installed")) process.exit(11);
+    if (msg.includes("adapter") || msg.includes("API")) process.exit(12);
+    process.exit(1);
+  }
+};
+var VALID_TYPES = ["templates", "guardrails", "interface"];
+function resolvedConfigForTeam(workspace, teamConfig) {
+  return {
+    dsl: "",
+    vars: teamConfig.vars,
+    renders: workspace.renders,
+    configDir: workspace.configDir,
+    bindings: teamConfig.bindings,
+    activeGuardrailPolicy: teamConfig.activeGuardrailPolicy,
+    paths: teamConfig.paths
+  };
+}
+var handleGenerate = async (type, opts) => {
+  if (type !== void 0 && !VALID_TYPES.includes(type)) {
+    process.stderr.write(`Unknown generate type: ${type}
+`);
+    process.exit(1);
+  }
+  const fmt = opts.format ?? "yaml";
+  if (fmt !== "yaml" && fmt !== "json") {
+    process.stderr.write(`Invalid --format: expected yaml or json, got ${fmt}
+`);
+    process.exit(1);
+  }
+  const normalizedType = type;
+  const targets = {
+    templates: normalizedType === void 0 || normalizedType === "templates",
+    guardrails: normalizedType === void 0 || normalizedType === "guardrails",
+    interface: normalizedType === void 0 || normalizedType === "interface"
+  };
+  try {
+    const config = await loadConfig(opts.config);
+    if (!config) {
+      process.stderr.write(
+        "Error: agent-contracts.config.yaml not found. Use --config to specify path.\n"
       );
-      process.stdout.write(result.output);
-      if (opts.output) writeFileSync2(opts.output, result.output, "utf8");
-      process.exit(result.exitCode);
-    } catch (err) {
-      if (err instanceof ConfigLoadError) {
-        process.stderr.write(`Config error: ${err.message}
+      process.exit(1);
+    }
+    const processTeam = async (teamConfig, teamLabel) => {
+      let exitWithError = false;
+      const resolved = await resolve4(teamConfig.dsl);
+      const data = teamConfig.vars ? substituteVars(resolved.data, teamConfig.vars) : resolved.data;
+      const schemaResult = validateSchema(data);
+      if (!schemaResult.success) {
+        process.stderr.write(
+          `Schema validation failed${teamLabel ? ` for team ${teamLabel}` : ""}. Run 'agent-contracts validate' for details.
+`
+        );
+        return true;
+      }
+      if (targets.templates) {
+        let renderOptions;
+        if (teamConfig.bindings.length > 0) {
+          const loadedBindings = await loadBindings(teamConfig.bindings);
+          renderOptions = { loadedBindings, activeGuardrailPolicy: teamConfig.activeGuardrailPolicy };
+        }
+        if (opts.check) {
+          const drift = await checkDriftFromConfig(schemaResult.data, config.renders, renderOptions);
+          if (drift.hasDrift) {
+            process.stderr.write(`Drift detected${teamLabel ? ` for team ${teamLabel}` : ""} in the following files:
 `);
-        process.exit(1);
+            for (const f2 of drift.diffs) process.stderr.write(`  ${f2}
+`);
+            exitWithError = true;
+          } else if (!opts.quiet) {
+            process.stdout.write("No drift detected.\n");
+          }
+        } else {
+          const files = await renderFromConfig(schemaResult.data, config.renders, renderOptions);
+          if (!opts.quiet) {
+            process.stdout.write(`Rendered ${files.length} file(s):
+`);
+            for (const f2 of files) process.stdout.write(`  ${f2}
+`);
+          }
+        }
+      }
+      if (targets.interface) {
+        if (schemaResult.data.team_interface) {
+          runGenerateInterfaceCli({
+            dsl: schemaResult.data,
+            output: teamConfig.interfaceOutput ?? opts.output,
+            dryRun: !!opts.dryRun,
+            format: fmt,
+            quiet: !!opts.quiet
+          });
+        } else if (normalizedType === "interface") {
+          process.stderr.write("Error: DSL has no team_interface section.\n");
+          exitWithError = true;
+        }
+      }
+      if (targets.guardrails) {
+        const loadedBindings = await loadBindings(teamConfig.bindings);
+        const cfgForTeam = teamLabel ? resolvedConfigForTeam(config, teamConfig) : config;
+        const result = await generateGuardrails({
+          dsl: schemaResult.data,
+          config: cfgForTeam,
+          loadedBindings,
+          filterBindings: opts.binding ? [opts.binding] : void 0,
+          dryRun: !!opts.dryRun
+        });
+        const errors = result.diagnostics.filter((d2) => d2.severity === "error");
+        const warnings = result.diagnostics.filter((d2) => d2.severity === "warning");
+        const infos = result.diagnostics.filter((d2) => d2.severity === "info");
+        if (errors.length > 0) {
+          process.stderr.write(`Errors${teamLabel ? ` (team ${teamLabel})` : ""}:
+`);
+          for (const d2 of errors) process.stderr.write(`  error [${d2.path}] ${d2.message}
+`);
+          exitWithError = true;
+        }
+        if (warnings.length > 0 && !opts.quiet) {
+          process.stderr.write(`Warnings${teamLabel ? ` (team ${teamLabel})` : ""}:
+`);
+          for (const d2 of warnings) process.stderr.write(`  warning [${d2.path}] ${d2.message}
+`);
+        }
+        if (infos.length > 0 && !opts.quiet) {
+          for (const d2 of infos) process.stderr.write(`  info [${d2.path}] ${d2.message}
+`);
+        }
+        if (!opts.quiet) {
+          const action = opts.dryRun ? "Would generate" : "Generated";
+          process.stdout.write(`${action} ${result.outputFiles.length} file(s):
+`);
+          for (const f2 of result.outputFiles) process.stdout.write(`  ${f2}
+`);
+        }
+      }
+      return exitWithError;
+    };
+    if (isMultiTeamConfig(config)) {
+      const teamEntries = getTeamEntries(config, opts.team);
+      let exitWithError = false;
+      for (const [teamId, teamConfig] of teamEntries) {
+        if (!opts.quiet) process.stdout.write(`
+--- Team: ${teamId} ---
+`);
+        if (await processTeam(teamConfig, teamId)) exitWithError = true;
       }
-      const msg = err instanceof Error ? err.message : String(err);
-      process.stderr.write(`Error: ${msg}
+      if (exitWithError) process.exit(1);
+      return;
+    }
+    const singleTeamConfig = {
+      dsl: config.dsl,
+      vars: config.vars,
+      bindings: config.bindings,
+      activeGuardrailPolicy: config.activeGuardrailPolicy,
+      paths: config.paths
+    };
+    if (await processTeam(singleTeamConfig, void 0)) process.exit(1);
+  } catch (err) {
+    if (err instanceof ConfigLoadError) {
+      process.stderr.write(`Config error: ${err.message}
 `);
-      if (msg.includes("not installed")) process.exit(11);
-      if (msg.includes("adapter") || msg.includes("API")) process.exit(12);
       process.exit(1);
     }
+    const msg = err instanceof Error ? err.message : String(err);
+    process.stderr.write(`Error: ${msg}
+`);
+    process.exit(1);
   }
-);
+};
+var handlers = {
+  resolve: handleResolve,
+  validate: handleValidate,
+  lint: handleLint,
+  render: handleRender,
+  check: handleCheck,
+  score: handleScore,
+  audit: handleAudit,
+  generate: handleGenerate
+};
 
 // src/cli/cli.ts
 var __dirname = dirname8(fileURLToPath(import.meta.url));
 var pkg = JSON.parse(readFileSync2(resolve8(__dirname, "../package.json"), "utf8"));
-var program = new Command9();
-program.name("agent-contracts").description("Agent contracts tooling \u2014 validate, lint, render DSL files").version(pkg.version);
-program.addCommand(resolveCommand);
-program.addCommand(validateCommand);
-program.addCommand(lintCommand);
-program.addCommand(renderCommand);
-program.addCommand(checkCommand);
-program.addCommand(generateCommand);
-program.addCommand(scoreCommand);
-program.addCommand(auditCommand);
+var program = createProgram(handlers, pkg.version);
 program.parse();
 /*! Bundled license information: