asdlc-cli 0.1.0 → 0.2.0

package/dist/commands/audit.js

@@ -6,16 +6,37 @@ import { runAllGates } from '../runner.js';
 import { renderMarkdownReport, renderResults } from '../report.js';
 import { writeProposedBaseline } from '../baseline.js';
 import { ASDLC_DIR, readState, writeState } from '../state.js';
+import { loadWaivers } from '../waivers.js';
+import { countGovernedConcepts } from '../gates/registry.js';
+import { computeDriftScore, badgeJson } from '../score.js';
 // "asdlc audit" — read-only diagnosis (S3 Stage 1 / Stage 4).
-// Writes only reports and a PROPOSED baseline under .asdlc/; applying anything
-// is a separate GOVERN operation with human approval (`asdlc baseline accept`).
-export async function auditCommand(root) {
+// Writes only reports, a PROPOSED baseline, and the drift-score badge under
+// .asdlc/; applying anything is a separate GOVERN operation with human
+// approval (`asdlc baseline accept`).
+export async function auditCommand(root, opts = {}) {
     const config = loadConfig(root);
     const date = new Date().toISOString().slice(0, 10);
     const results = await runAllGates(root, config);
+    const drift = computeDriftScore(results, loadWaivers(root), countGovernedConcepts(root, config));
+    if (opts.score) {
+        // Script-friendly: exactly one line on stdout.
+        console.log(`${drift.band} ${drift.score}`);
+        return;
+    }
     const dir = join(root, ASDLC_DIR, 'reports', date);
     mkdirSync(dir, { recursive: true });
-    writeFileSync(join(dir, 'audit.md'), renderMarkdownReport(results, date));
+    const scoreLine = [
+        '',
+        `## Drift score: ${drift.band} (${drift.score}/100)`,
+        '',
+        `open ${drift.components.open} · baseline ${drift.components.baseline} · waived ${drift.components.waived}` +
+            ` · expired waivers ${drift.components.expired_waivers} · governed concepts ${drift.components.governed}` +
+            ` · gate coverage ${drift.components.coverage}/${results.length}`,
+        '',
+        '_The score measures governance activity, not correctness — see docs/DRIFT_SCORE.md._',
+    ].join('\n');
+    writeFileSync(join(dir, 'audit.md'), renderMarkdownReport(results, date) + scoreLine);
+    writeFileSync(join(root, ASDLC_DIR, 'badge.json'), badgeJson(drift));
     const allFindings = results.flatMap((r) => r.findings);
     const proposedPath = join(dir, 'proposed-baseline.json');
     writeProposedBaseline(root, allFindings, proposedPath);
@@ -24,7 +45,11 @@ export async function auditCommand(root) {
         writeState(root, { ...state, last_audit: date });
     console.log(renderResults(results, false));
     console.log('');
-    console.log(pc.bold(`Audit written: ${join('.asdlc/reports', date, 'audit.md')}`));
+    const bandColor = drift.band === 'A' || drift.band === 'B' ? pc.green : drift.band === 'C' ? pc.yellow : pc.red;
+    console.log(pc.bold(`Drift score: ${bandColor(`${drift.band} (${drift.score}/100)`)}`) +
+        pc.dim(` — open ${drift.components.open}, baseline ${drift.components.baseline}, coverage ${drift.components.coverage}/${results.length}, governed ${drift.components.governed}`));
+    console.log(pc.bold(`Audit written: ${join('.asdlc/reports', date, 'audit.md')}`) +
+        pc.dim(` · badge: .asdlc/badge.json (shields.io endpoint format)`));
     console.log(`Proposed baseline (${allFindings.length} findings, PROPOSED_NOT_ACCEPTED): ${join('.asdlc/reports', date, 'proposed-baseline.json')}`);
     console.log(pc.dim('Accepting it is a GOVERN operation: asdlc baseline accept --from <file> --approved-by <human> --approval-ref <pointer>'));
 }

package/dist/gates/registry.js

@@ -8,6 +8,15 @@ import { loadWaivers } from '../waivers.js';
 //  - registry file exists and has at least one concept section
 //  - every `backtick/path` reference under a concept resolves in the repo
 //  - waivers are well-formed; expired waivers surface as findings (suppression ended)
+// Concepts with a real definition: `## <name>` sections, excluding templates.
+export function countGovernedConcepts(root, config) {
+    const regPath = join(root, config.registry_path);
+    if (!existsSync(regPath))
+        return 0;
+    const text = readFileSync(regPath, 'utf8');
+    return (text.match(/^##\s+.+$/gm) ?? [])
+        .filter((h) => !/example/i.test(h)).length;
+}
 export function runRegistryGate(root, config) {
     const findings = [];
     const regPath = join(root, config.registry_path);

package/dist/index.js

@@ -22,8 +22,9 @@ program.command('check')
     .option('-v, --verbose', 'show all new findings')
     .action((opts) => checkCommand(process.cwd(), opts));
 program.command('audit')
-    .description('Read-only diagnosis: full gate sweep, markdown report, PROPOSED baseline.')
-    .action(() => auditCommand(process.cwd()));
+    .description('Read-only diagnosis: full gate sweep, markdown report, drift score + badge, PROPOSED baseline.')
+    .option('--score', 'print only the drift score (e.g. "B 78") and exit')
+    .action((opts) => auditCommand(process.cwd(), opts));
 const baseline = program.command('baseline').description('Baseline governance (GOVERN operations).');
 baseline.command('accept')
     .description('Accept a proposed baseline. Requires a human approval pointer.')

package/dist/score.js

@@ -0,0 +1,26 @@
+export function computeDriftScore(results, waivers, governedConcepts) {
+    const open = results.reduce((n, r) => n + r.newFindings.length, 0);
+    const baseline = results.reduce((n, r) => n + r.baselined, 0);
+    const waived = waivers.valid.length;
+    const expired = waivers.expired.length;
+    const coverage = results.filter((r) => r.status !== 'SKIPPED' && r.status !== 'ERROR').length;
+    const score = Math.max(0, Math.round(100
+        - 25 * Math.min(1, open / 10)
+        - 15 * Math.min(1, baseline / 200)
+        - 5 * Math.min(1, expired)
+        - 25 * (1 - coverage / results.length)
+        - 30 * (governedConcepts === 0 ? 1 : 0)));
+    const band = score >= 90 ? 'A' : score >= 75 ? 'B' : score >= 60 ? 'C' : score >= 40 ? 'D' : 'F';
+    return {
+        score, band,
+        components: { open, baseline, waived, expired_waivers: expired, governed: governedConcepts, coverage },
+    };
+}
+// Shields.io endpoint-badge JSON — serve this file raw and point
+// https://img.shields.io/endpoint?url=<raw-url> at it.
+export function badgeJson(s) {
+    const color = { A: 'brightgreen', B: 'green', C: 'yellow', D: 'orange', F: 'red' }[s.band];
+    return JSON.stringify({
+        schemaVersion: 1, label: 'drift', message: `${s.band} ${s.score}`, color,
+    }, null, 2);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "asdlc-cli",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "ASDLC — the anti-drift governance layer for AI-built codebases. Implements the Anti-Drift Playbook v3.1.1 protocol: plan, init, check, audit.",
   "license": "Apache-2.0",
   "type": "module",