azcodr 2.5.1 → 2.7.0

package/.agents/hooks.json

@@ -1,13 +1,13 @@
 {
   "safety-guard": {
-    "enabled": false,
+    "enabled": true,
     "PreToolUse": [
       {
         "matcher": "run_command",
         "hooks": [
           {
             "type": "command",
-            "command": "./.agents/scripts/safety_guard.sh",
+            "command": "node .agents/scripts/safety_guard.js",
             "timeout": 15
           }
         ]
@@ -15,14 +15,14 @@
     ]
   },
   "architectural-guard": {
-    "enabled": false,
+    "enabled": true,
     "PreToolUse": [
       {
         "matcher": "run_command",
         "hooks": [
           {
             "type": "command",
-            "command": "./.agents/scripts/agent_guard.js",
+            "command": "node .agents/scripts/agent_guard.js",
             "timeout": 15
           }
         ]
@@ -30,7 +30,7 @@
     ]
   },
   "post-tool-lint": {
-    "enabled": false,
+    "enabled": true,
     "PostToolUse": [
       {
         "matcher": "run_command",
@@ -45,11 +45,11 @@
     ]
   },
   "stop-verifier": {
-    "enabled": false,
+    "enabled": true,
     "Stop": [
       {
         "type": "command",
-        "command": "./.agents/scripts/verify_completion.sh",
+        "command": "node .agents/scripts/verify_completion.js",
         "timeout": 120
       }
     ]

package/.agents/hooks.json.example

@@ -1,13 +1,13 @@
 {
   "safety-guard": {
-    "enabled": false,
+    "enabled": true,
     "PreToolUse": [
       {
         "matcher": "run_command",
         "hooks": [
           {
             "type": "command",
-            "command": "./.agents/scripts/safety_guard.sh",
+            "command": "node .agents/scripts/safety_guard.js",
             "timeout": 15
           }
         ]
@@ -15,14 +15,14 @@
     ]
   },
   "architectural-guard": {
-    "enabled": false,
+    "enabled": true,
     "PreToolUse": [
       {
         "matcher": "run_command",
         "hooks": [
           {
             "type": "command",
-            "command": "./.agents/scripts/agent_guard.js",
+            "command": "node .agents/scripts/agent_guard.js",
             "timeout": 15
           }
         ]
@@ -30,7 +30,7 @@
     ]
   },
   "post-tool-lint": {
-    "enabled": false,
+    "enabled": true,
     "PostToolUse": [
       {
         "matcher": "run_command",
@@ -45,12 +45,12 @@
     ]
   },
   "stop-verifier": {
-    "enabled": false,
+    "enabled": true,
     "Stop": [
       {
         "type": "command",
-        "command": "./.agents/scripts/verify_completion.sh",
-        "timeout": 15
+        "command": "node .agents/scripts/verify_completion.js",
+        "timeout": 120
       }
     ]
   }

package/.agents/lib/boundaries.js

@@ -0,0 +1,158 @@
+import fs from 'node:fs';
+import path from 'node:path';
+export const DEFAULT_BOUNDARY_RULES = [
+    {
+        fromLayer: 'domain',
+        disallowImportsFrom: ['infrastructure', 'infra', 'adapters', 'cli', 'transport', 'controllers']
+    },
+    {
+        fromLayer: 'core',
+        disallowImportsFrom: ['infrastructure', 'infra', 'adapters', 'presentation', 'ui']
+    }
+];
+function isSkippedDir(name) {
+    return name.startsWith('.') || name === 'node_modules' || name === 'lib';
+}
+function isEligibleSource(name) {
+    const isScript = name.endsWith('.ts') || name.endsWith('.js');
+    if (!isScript || name.endsWith('.d.ts'))
+        return false;
+    return !name.includes('.test.') && !name.includes('.spec.');
+}
+export function findSourceFiles(dir) {
+    if (!fs.existsSync(dir))
+        return [];
+    const results = [];
+    const entries = fs.readdirSync(dir, { withFileTypes: true });
+    for (const entry of entries) {
+        if (isSkippedDir(entry.name))
+            continue;
+        const full = path.join(dir, entry.name);
+        if (entry.isDirectory()) {
+            results.push(...findSourceFiles(full));
+        }
+        else if (isEligibleSource(entry.name)) {
+            results.push(path.resolve(full));
+        }
+    }
+    return results.sort();
+}
+function resolveImportTarget(sourceFile, specifier) {
+    const dir = path.dirname(sourceFile);
+    const candidate = path.resolve(dir, specifier);
+    if (fs.existsSync(candidate))
+        return candidate;
+    if (specifier.endsWith('.js')) {
+        const tsCandidate = path.resolve(dir, specifier.slice(0, -3) + '.ts');
+        if (fs.existsSync(tsCandidate))
+            return tsCandidate;
+    }
+    return null;
+}
+export function extractLocalImports(filePath) {
+    if (!fs.existsSync(filePath))
+        return [];
+    const content = fs.readFileSync(filePath, 'utf-8');
+    const imports = [];
+    const regex = /(?:import|export)\s+(?:(?:[\s\S]*?from\s+)|)['"](\.[^'"]+)['"]|import\s*\(\s*['"](\.[^'"]+)['"]\s*\)/g;
+    for (const match of content.matchAll(regex)) {
+        const spec = match[1] ?? match[2];
+        if (spec) {
+            const resolved = resolveImportTarget(filePath, spec);
+            if (resolved && !imports.includes(resolved)) {
+                imports.push(resolved);
+            }
+        }
+    }
+    return imports.sort();
+}
+export function buildDependencyGraph(files) {
+    const graph = new Map();
+    for (const file of files) {
+        graph.set(file, extractLocalImports(file));
+    }
+    return graph;
+}
+export function detectDependencyCycles(graph) {
+    const cycles = [];
+    const visited = new Set();
+    const inStack = new Set();
+    const pathStack = [];
+    function dfs(node) {
+        visited.add(node);
+        inStack.add(node);
+        pathStack.push(node);
+        for (const neighbor of graph.get(node) ?? []) {
+            if (!visited.has(neighbor)) {
+                dfs(neighbor);
+            }
+            else if (inStack.has(neighbor)) {
+                const startIdx = pathStack.indexOf(neighbor);
+                if (startIdx !== -1) {
+                    cycles.push([...pathStack.slice(startIdx), neighbor]);
+                }
+            }
+        }
+        inStack.delete(node);
+        pathStack.pop();
+    }
+    for (const node of graph.keys()) {
+        if (!visited.has(node))
+            dfs(node);
+    }
+    return cycles;
+}
+function hasLayerSegment(pathStr, segment) {
+    return new RegExp(`(^|[/\\\\])${segment}([/\\\\]|$)`, 'i').test(pathStr);
+}
+export function detectBoundaryViolations(graph, rules = DEFAULT_BOUNDARY_RULES) {
+    const violations = [];
+    for (const [file, imports] of graph.entries()) {
+        for (const rule of rules) {
+            if (hasLayerSegment(file, rule.fromLayer)) {
+                for (const imported of imports) {
+                    for (const disallowed of rule.disallowImportsFrom) {
+                        if (hasLayerSegment(imported, disallowed)) {
+                            violations.push({
+                                file,
+                                importedFile: imported,
+                                fromLayer: rule.fromLayer,
+                                toLayer: disallowed
+                            });
+                        }
+                    }
+                }
+            }
+        }
+    }
+    return violations;
+}
+/**
+ * Inspects a source tree for architectural boundary violations and circular dependency cycles.
+ *
+ * @param sourceDir - Directory containing source code (e.g. src/).
+ * @param rules - Architectural boundary rules.
+ * @returns Report summarizing cycle and boundary findings.
+ */
+export function inspectBoundaries(sourceDir, rules = DEFAULT_BOUNDARY_RULES) {
+    const files = findSourceFiles(sourceDir);
+    const graph = buildDependencyGraph(files);
+    const cycles = detectDependencyCycles(graph);
+    const violations = detectBoundaryViolations(graph, rules);
+    return {
+        moduleCount: files.length,
+        cycles,
+        violations,
+        ok: cycles.length === 0 && violations.length === 0
+    };
+}
+export default {
+    DEFAULT_BOUNDARY_RULES,
+    findSourceFiles,
+    extractLocalImports,
+    buildDependencyGraph,
+    detectDependencyCycles,
+    detectBoundaryViolations,
+    inspectBoundaries
+};
+//# sourceMappingURL=boundaries.js.map

package/.agents/scripts/boundary_guard.js

@@ -0,0 +1,93 @@
+#!/usr/bin/env node
+
+/**
+ * Cross-platform architectural boundary & cycle guard.
+ *
+ * Ships inside scaffolded projects so structural drift (circular imports and
+ * Clean/Hexagonal layer breaches) is machine-checked with zero third-party
+ * dependencies. The engine is vendored under `.agents/lib/` and byte-locked to
+ * `lib/boundaries.js`; this wrapper only resolves it and reports the verdict.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import process from 'node:process';
+import { fileURLToPath, pathToFileURL } from 'node:url';
+
+const selfDir = path.dirname(fileURLToPath(import.meta.url));
+
+// Resolution order (first existing file wins):
+//   1. AZCODR_BOUNDARY_ENGINE override (tests, embedders).
+//   2. ../lib/boundaries.js — vendored engine inside `.agents/`
+//      (present in scaffolded projects; `.agents` is copied recursively).
+//   3. ../../lib/boundaries.js — azcodr repo dev layout (fallback only).
+const engineCandidates = [
+  process.env.AZCODR_BOUNDARY_ENGINE,
+  path.resolve(selfDir, '../lib/boundaries.js'),
+  path.resolve(selfDir, '../../lib/boundaries.js')
+].filter(Boolean);
+
+async function getEngine() {
+  const tried = [];
+  for (const candidate of engineCandidates) {
+    if (!fs.existsSync(candidate)) {
+      tried.push(candidate);
+      continue;
+    }
+    try {
+      return await import(pathToFileURL(candidate).href);
+    } catch (err) {
+      tried.push(`${candidate} (unreadable: ${err.message})`);
+    }
+  }
+  // Fail CLOSED: a guard with no engine is a broken install, never a silent pass.
+  console.error(
+    '🚨 Boundary Guard misconfigured: engine module not found, refusing to fail open. Tried:\n' +
+    tried.map((t) => `  - ${t}`).join('\n')
+  );
+  process.exit(2);
+}
+
+function resolveTarget(positional) {
+  const explicit = positional[0];
+  if (explicit) return path.resolve(explicit);
+  const srcDir = path.resolve(process.cwd(), 'src');
+  return fs.existsSync(srcDir) ? srcDir : process.cwd();
+}
+
+function rel(p) {
+  return path.relative(process.cwd(), p) || '.';
+}
+
+function printReport(report) {
+  console.log('🔍 Inspecting Architectural Boundaries in: ' + rel(report.targetDir));
+  console.log('--------------------------------------------------------------');
+  if (report.ok) {
+    console.log(`✅ No cycles or boundary violations across ${report.moduleCount} module(s).`);
+    return;
+  }
+  for (const cycle of report.cycles) {
+    console.error('   - Circular Dependency: ' + cycle.map(rel).join(' -> '));
+  }
+  for (const v of report.violations) {
+    console.error(`   - Layer Boundary Breach: ${rel(v.file)} imports ${rel(v.importedFile)} (${v.fromLayer} -> ${v.toLayer})`);
+  }
+}
+
+function emit(report, silent) {
+  if (!silent) printReport(report);
+}
+
+async function main() {
+  const args = process.argv.slice(2).filter((a) => a !== '--silent');
+  const silent = process.argv.includes('--silent');
+  const { inspectBoundaries } = await getEngine();
+  const target = resolveTarget(args);
+  const report = inspectBoundaries(target);
+  emit({ ...report, targetDir: target }, silent);
+  process.exit(report.ok ? 0 : 1);
+}
+
+main().catch((err) => {
+  console.error(`🚨 Boundary Guard crashed: ${err?.message || err}`);
+  process.exit(2);
+});

package/.agents/scripts/desktop_doctor.js

@@ -0,0 +1,108 @@
+#!/usr/bin/env node
+
+/**
+ * Pre-flight Desktop Distribution Doctor (Milestone 4).
+ * Prevents hybrid desktop build defects: missing custom-protocol, hollow CSS, dev-url embedding.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import process from 'node:process';
+
+function findCargoToml(targetDir) {
+  const candidates = [
+    path.join(targetDir, 'Cargo.toml'),
+    path.join(targetDir, 'src-tauri', 'Cargo.toml')
+  ];
+  for (const c of candidates) {
+    if (fs.existsSync(c)) return c;
+  }
+  return null;
+}
+
+function verifyCargoTauri(cargoPath) {
+  const content = fs.readFileSync(cargoPath, 'utf-8');
+  if (!content.includes('tauri')) return { ok: true, skipped: true };
+
+  const hasProtocol = content.includes('custom-protocol');
+  if (!hasProtocol) {
+    return {
+      ok: false,
+      reason: "Missing 'custom-protocol' feature in Cargo.toml dependencies. Tauri release binaries cannot embed frontend dist assets without it."
+    };
+  }
+  return { ok: true, message: 'Custom protocol enabled in Cargo.toml.' };
+}
+
+function collectCssFiles(dir) {
+  const files = [];
+  if (!fs.existsSync(dir)) return files;
+  const entries = fs.readdirSync(dir, { withFileTypes: true });
+  for (const entry of entries) {
+    const full = path.join(dir, entry.name);
+    if (entry.isDirectory()) files.push(...collectCssFiles(full));
+    else if (entry.name.endsWith('.css')) files.push(full);
+  }
+  return files;
+}
+
+function verifyCssDensity(targetDir, minBytes = 5000) {
+  const searchDirs = [
+    path.join(targetDir, 'dist'),
+    path.join(targetDir, 'client', 'dist'),
+    path.join(targetDir, 'build')
+  ];
+  let foundAny = false;
+  let totalBytes = 0;
+
+  for (const dir of searchDirs) {
+    const cssList = collectCssFiles(dir);
+    if (cssList.length > 0) {
+      foundAny = true;
+      for (const f of cssList) totalBytes += fs.statSync(f).size;
+    }
+  }
+
+  if (!foundAny) return { ok: true, skipped: true };
+  if (totalBytes < minBytes) {
+    return {
+      ok: false,
+      reason: `Hollow CSS bundle detected (${totalBytes} bytes < ${minBytes} bytes). Check that postcss.config.js is configured for Tailwind.`
+    };
+  }
+  return { ok: true, message: `CSS bundle density verified (${totalBytes} bytes).` };
+}
+
+function main() {
+  const targetDir = path.resolve(process.argv[2] || process.cwd());
+  const cargoPath = findCargoToml(targetDir);
+  const cssResult = verifyCssDensity(targetDir);
+
+  if (!cargoPath && cssResult.skipped) {
+    console.log('ℹ️  No desktop artifacts found in: ' + targetDir);
+    process.exit(0);
+  }
+
+  let failed = false;
+  console.log('🩺 Desktop Distribution Doctor inspecting: ' + targetDir);
+
+  if (cargoPath) {
+    const cargoRes = verifyCargoTauri(cargoPath);
+    if (!cargoRes.ok) {
+      console.error(`🚨 ${cargoRes.reason}`);
+      failed = true;
+    } else if (cargoRes.message) {
+      console.log(`✅ ${cargoRes.message}`);
+    }
+  }
+
+  if (!cssResult.ok) {
+    console.error(`🚨 ${cssResult.reason}`);
+    failed = true;
+  } else if (cssResult.message) {
+    console.log(`✅ ${cssResult.message}`);
+  }
+
+  process.exit(failed ? 1 : 0);
+}
+
+main();

package/.agents/scripts/safety_guard.js

@@ -0,0 +1,82 @@
+#!/usr/bin/env node
+
+/**
+ * Cross-platform PreToolUse safety guard in pure Node.js.
+ * Blocks high-severity destructive shell commands (rm -rf, force push, drop db).
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import process from 'node:process';
+import { fileURLToPath, pathToFileURL } from 'node:url';
+
+const selfDir = path.dirname(fileURLToPath(import.meta.url));
+
+const candidates = [
+  process.env.AZCODR_GUARD_ENGINE,
+  path.resolve(selfDir, '../lib/agent-guard-command.js'),
+  path.resolve(selfDir, '../../lib/agent-guard-command.js')
+].filter(Boolean);
+
+async function getCommandModule() {
+  const tried = [];
+  for (const candidate of candidates) {
+    if (!fs.existsSync(candidate)) {
+      tried.push(candidate);
+      continue;
+    }
+    try {
+      return await import(pathToFileURL(candidate).href);
+    } catch (err) {
+      tried.push(`${candidate} (${err.message})`);
+    }
+  }
+  console.error(
+    '🚨 Safety Guard misconfigured: command engine not found. Tried:\n' +
+    tried.map((t) => `  - ${t}`).join('\n')
+  );
+  process.exit(2);
+}
+
+async function readStdin(timeoutMs = 1500) {
+  if (process.stdin.isTTY) return '';
+  return new Promise((resolve) => {
+    let acc = '';
+    const timer = setTimeout(() => resolve(acc), timeoutMs);
+    process.stdin.setEncoding('utf-8');
+    process.stdin.on('data', (chunk) => { acc += chunk; });
+    process.stdin.on('end', () => {
+      clearTimeout(timer);
+      resolve(acc);
+    });
+    process.stdin.on('error', () => {
+      clearTimeout(timer);
+      resolve(acc);
+    });
+  });
+}
+
+async function main() {
+  const argvInput = process.argv.slice(2).join(' ').trim();
+  const stdinInput = (await readStdin()).trim();
+  const rawInput = argvInput || stdinInput;
+
+  if (!rawInput) {
+    process.exit(0);
+  }
+
+  const { inspectCommand } = await getCommandModule();
+  const decision = inspectCommand(rawInput);
+
+  if (decision.blocked) {
+    console.error(`🚨 Safety Guard: ${decision.reason}`);
+    console.error(`   command: ${decision.command || rawInput.slice(0, 300)}`);
+    process.exit(1);
+  }
+
+  process.exit(0);
+}
+
+main().catch((err) => {
+  console.error(`🚨 Safety Guard crashed: ${err?.message || err}`);
+  process.exit(2);
+});

package/.agents/scripts/smoke_test.js

@@ -0,0 +1,78 @@
+#!/usr/bin/env node
+
+/**
+ * Cross-platform Boundary & Environment Smoke Test (Milestone 3).
+ * Verifies boundaries and diagnoses port occupancy before dev launch.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import net from 'node:net';
+import process from 'node:process';
+import { spawnSync } from 'node:child_process';
+
+function parseMonitoredPorts(argv) {
+  const customIndex = argv.indexOf('--ports');
+  if (customIndex !== -1 && argv[customIndex + 1]) {
+    return argv[customIndex + 1].split(',').map((p) => parseInt(p.trim(), 10)).filter(Boolean);
+  }
+  return [5173, 3000, 4000, 8080];
+}
+
+function checkPort(port, host = '127.0.0.1') {
+  return new Promise((resolve) => {
+    const server = net.createServer();
+    server.once('error', (err) => {
+      resolve({ port, available: false, error: err.code });
+    });
+    server.once('listening', () => {
+      server.close(() => resolve({ port, available: true }));
+    });
+    server.listen(port, host);
+  });
+}
+
+async function runPortDoctor(ports) {
+  console.log('🩺 Port doctor inspecting local dev ports...');
+  const results = await Promise.all(ports.map((p) => checkPort(p)));
+  for (const r of results) {
+    if (!r.available) {
+      console.log(`⚠️  Port ${r.port} is occupied (${r.error}). Check for background services to prevent collisions.`);
+    } else {
+      console.log(`✅ Port ${r.port} is free.`);
+    }
+  }
+}
+
+function runBoundaryGuard(targetDir) {
+  const guardPath = path.resolve(process.cwd(), '.agents', 'scripts', 'boundary_guard.js');
+  if (!fs.existsSync(guardPath)) {
+    console.log('ℹ️  Boundary guard script not found, skipping static graph check.');
+    return true;
+  }
+  console.log('🔍 Boundary smoke verification running on: ' + targetDir);
+  const res = spawnSync('node', [guardPath, targetDir], { stdio: 'inherit', shell: true });
+  return res.status === 0;
+}
+
+async function main() {
+  const positional = process.argv.slice(2).filter((a) => !a.startsWith('--'));
+  const targetDir = path.resolve(positional[0] || process.cwd());
+  const ports = parseMonitoredPorts(process.argv);
+
+  console.log('🚀 Running Full-Stack Smoke Verification...');
+  const boundaryPassed = runBoundaryGuard(targetDir);
+  await runPortDoctor(ports);
+
+  if (!boundaryPassed) {
+    console.error('🚨 Boundary verification failed!');
+    process.exit(1);
+  }
+
+  console.log('✅ Smoke verification passed cleanly!');
+  process.exit(0);
+}
+
+main().catch((err) => {
+  console.error(`🚨 Smoke verification crashed: ${err?.message || err}`);
+  process.exit(2);
+});

package/.agents/scripts/verify_completion.js

@@ -0,0 +1,76 @@
+#!/usr/bin/env node
+
+/**
+ * Cross-platform Stop hook in pure Node.js.
+ * Blocks premature agent exit when verification gates (validate, coverage, test, lint) fail.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import process from 'node:process';
+import { spawnSync } from 'node:child_process';
+
+function loadPackageJson() {
+  const pkgPath = path.resolve(process.cwd(), 'package.json');
+  if (!fs.existsSync(pkgPath)) return null;
+  try {
+    return JSON.parse(fs.readFileSync(pkgPath, 'utf-8'));
+  } catch {
+    return null;
+  }
+}
+
+function runNpmScript(name, label) {
+  console.error(label);
+  const result = spawnSync('npm', ['run', name, '--silent'], {
+    stdio: 'inherit',
+    shell: true
+  });
+  return result.status === 0;
+}
+
+function verifyCoverageGate() {
+  const [major, minor] = process.versions.node.split('.').map(Number);
+  const eligible = (major > 22 || (major === 22 && minor >= 8));
+  if (!eligible) {
+    console.error(`⚠️  Skipping coverage gate: needs Node >= 22.8 (current: ${process.version})`);
+    return true;
+  }
+  return runNpmScript('test:coverage', '📈 Running coverage gate...');
+}
+
+function main() {
+  const pkg = loadPackageJson();
+  if (!pkg || !pkg.scripts) {
+    console.error('⚠️  Stop Verifier: no verifiable package.json found -- nothing checked.');
+    process.exit(0);
+  }
+
+  const scripts = pkg.scripts;
+  let ranAny = false;
+  let failed = false;
+
+  if (typeof scripts.validate === 'string') {
+    ranAny = true;
+    if (!runNpmScript('validate', '🔍 Running architecture validation...')) failed = true;
+  }
+  if (typeof scripts['test:coverage'] === 'string') {
+    ranAny = true;
+    if (!verifyCoverageGate()) failed = true;
+  }
+  if (typeof scripts.test === 'string') {
+    ranAny = true;
+    if (!runNpmScript('test', '🧪 Running test suite...')) failed = true;
+  }
+  if (typeof scripts.lint === 'string') {
+    ranAny = true;
+    if (!runNpmScript('lint', '🔎 Running lint...')) failed = true;
+  }
+
+  if (!ranAny) {
+    console.error('⚠️  Stop Verifier: no verifiable scripts found in package.json.');
+  }
+
+  process.exit(failed ? 1 : 0);
+}
+
+main();

package/.agents/skills/lets-build/scripts/bootstrap_workspace.sh

@@ -567,7 +567,14 @@ if [[ ! -f "${SMOKE_TEST}" ]]; then
 # ==============================================================================
 set -euo pipefail
 
+ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+
 echo "Running boundary smoke verification..."
+if [[ -f "${ROOT}/.agents/scripts/boundary_guard.js" ]] && command -v node >/dev/null 2>&1; then
+  node "${ROOT}/.agents/scripts/boundary_guard.js" "${ROOT}/src"
+else
+  echo "⚠️  Boundary guard skipped (node or guard script unavailable)."
+fi
 # Extend with project-specific runtime health checks (e.g. ping health endpoint, CLI --help)
 echo "✅ Boundary smoke verification passed!"
 EOF
@@ -576,3 +583,9 @@ fi
 
 echo "--------------------------------------------------------------"
 echo "✅ Topology '${TOPOLOGY}' scaffolded with strict YAGNI (0 speculative folders)!"
+echo ""
+echo "🛑 MANDATORY HANDOVER GATE (ADR-008):"
+echo "   Bootstrapping is COMPLETE. Zero application domain entities have been created."
+echo "   DO NOT fabricate domain models, entities, or features during lets-build."
+echo "   Next: invoke 'product-analyst' & 'relentless-questioner' to conduct formal"
+echo "   stakeholder domain analysis, INVEST story decomposition, and Gherkin criteria."

package/.gitignore

@@ -35,6 +35,7 @@ Thumbs.db
 .tmp/
 .tmp-scratch/
 opencode.json
+.agents/.agents/
 
 # Case-insensitive filesystem parity (agents.md is generated/symlinked on Linux, native on macOS/Windows)
 agents.md

package/CONTRIBUTING.md

@@ -60,9 +60,9 @@ Before submitting any code changes, all 5 quality gates must pass with zero erro
    npm run validate
    ```
    Validates root harness parity, progressive disclosure rules, skill formats, markdown links, ADR ledger consistency, and toolchain gate presence.
-6. **Vendored Guard Sync:** after any change under `src/agent-guard*.ts` and `npm run build`, re-copy the four compiled engine files into `.agents/lib/` (byte-equality is enforced by `tests/agent-guard.test.ts`):
+6. **Vendored Engine Sync:** after any change under `src/agent-guard*.ts` or `src/boundaries.ts` and `npm run build`, re-copy the compiled engine files into `.agents/lib/` (byte-equality is enforced by `tests/agent-guard.test.ts` and `tests/boundary-guard.test.ts`):
    ```bash
-   node -e "const fs=require('fs');for(const f of['agent-guard.js','agent-guard-command.js','agent-guard-file.js','agent-guard-tdd.js'])fs.copyFileSync('lib/'+f,'.agents/lib/'+f)"
+   node -e "const fs=require('fs');for(const f of['agent-guard.js','agent-guard-command.js','agent-guard-file.js','agent-guard-tdd.js','boundaries.js'])fs.copyFileSync('lib/'+f,'.agents/lib/'+f)"
    ```
 
 ---

package/README.md

@@ -9,8 +9,6 @@
 [![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](./LICENSE)
 
 > CI-enforced 100% gate (lines / branches / functions / statements) + 100% mutant kill on guards; the public report is the `coverage-report` artifact on every CI run.
-[![Dependencies](https://img.shields.io/badge/dependencies-0-success.svg)](https://www.npmjs.com/package/azcodr)
-[![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](./LICENSE)
 
 > **Production-oriented architecture governance and topology-scoped scaffolding for AI-assisted development (early release).**  
 > *AI agents move fast. Architecture drifts. Azcodr turns architectural intent into executable constraints your agent cannot skip.*
@@ -38,7 +36,7 @@
 
 ## ⚡ 60-Second Demo: See Drift Prevention in Action
 
-Azcodr turns architectural philosophy into machine-checked constraints your agent cannot skip.
+Azcodr turns architectural philosophy into machine-checked constraints. In a fresh scaffold the runtime hooks ship **enabled by default**, and the boundary engine runs in CI, so drift is caught both while the agent edits and after it commits.
 
 ### 1. Standalone Architectural Check
 Run the validator on any repository without scaffolding:
@@ -67,7 +65,7 @@ When an AI coding agent attempts to dump new logic into a file already exceeding
 ```
 
 ### 3. Zero-Dependency Boundary & Cycle Enforcement
-Inspect dependency cycles and layer boundaries on demand without third-party linters:
+Inspect dependency cycles and layer boundaries on demand without third-party linters. The same engine is vendored into every scaffolded project (`.agents/scripts/boundary_guard.js`) and runs in the generated CI:
 ```bash
 npx azcodr boundaries [directory]
 ```
@@ -80,17 +78,17 @@ npx azcodr boundaries [directory]
    Action Required: Invert dependencies via Ports or extract shared modules.
 ```
 
-### 4. Empirical Benchmark Proof (3 Arms, 10 Sequential Tickets)
-In an automated empirical trial across 10 sequential tickets with 3 architectural traps ([`benchmark/RESULTS.md`](https://github.com/prosubodh/azcodr/blob/main/benchmark/RESULTS.md)):
+### 4. Detector Validation on Synthetic Fixtures (Not a Live-Agent Trial)
+The evaluator's ability to detect the 3 trap classes is exercised against **hand-written fixtures**, not live agent output ([`benchmark/RESULTS.md`](https://github.com/prosubodh/azcodr/blob/main/benchmark/RESULTS.md)):
 
 | Metric | Arm A (Control) | Arm B (Hooks Only) | Arm C (Full Azcodr) |
 |---|:---:|:---:|:---:|
 | **Files >300 Lines** | 1 (365 lines in `auth.ts`) | **0** (Modularized) | **0** (Modularized) |
 | **Circular Dependency Cycles** | 1 (`billing <-> tenant`) | 1 (`billing <-> tenant`) | **0** (Decoupled Port) |
 | **Layer Boundary Breaches** | 1 (`domain -> infra`) | 1 (`domain -> infra`) | **0** (Hexagonal Port) |
-| **Overall Drift Reduction** | ❌ FAILED | ❌ FAILED | ✅ **100% DRIFT-FREE** |
+| **Detected drift-free** | ❌ FAILED | ❌ FAILED | ✅ **0 detector violations** |
 
-Run the empirical benchmark yourself:
+These fixtures are committed by hand to prove the detector fires; they are **not evidence** that an AI agent drifts. Real-agent results (tokens, completion, review minutes) are planned and not yet measured. Run the detector yourself:
 ```bash
 node benchmark/run-benchmark.js
 ```

package/docs/generated-enforcement-analysis.md

@@ -128,6 +128,27 @@ names the test that locks it:
    `npm run lint` fails until the pinned tool lands instead of echoing
    success.
 
+## Addendum (2026-10-09): boundaries shipped, starter CI generated, hooks on
+
+6. **Boundary engine now ships in the scaffold.** `lib/boundaries.js` is
+   vendored into `.agents/lib/boundaries.js` (byte-locked by
+   `tests/boundary-guard.test.ts`, re-copied after every build per
+   `CONTRIBUTING.md`) and a vendored-first runner `.agents/scripts/boundary_guard.js`
+   exits 0/1 on a repo's cycle & layer verdict (exit 2 on a missing engine).
+   The starter `package.json` gains a `boundaries` script pointing at it.
+7. **Generated CI is now green out of the box.** azcodr's own dev workflows
+   (`ci.yml`, `publish.yml`) call scripts a fresh project does not have, so
+   shipping them verbatim made a scaffolded repo's CI fail on every push. The
+   scaffolder now replaces them with a starter `.github/workflows/ci.yml` that
+   only needs Node, the vendored boundary guard, and `scripts/validate-cli.js`.
+   Locked by `tests/scaffold-ci.test.ts`.
+8. **Hooks ship enabled.** `.agents/hooks.json` (+`.example`) now ships all four
+   hooks `enabled: true` (safety, architectural, post-tool-lint, stop-verifier),
+   amending ADR-020 which deliberately shipped them disabled. The trade-off is
+   recorded in the 2026-10-09 ADR: default-on means a harness that loads the
+   file blocks immediately, at the cost that lint/stop hooks can interrupt
+   worthless-but-harmless sessions in a bare scaffold.
+
 ## Reproduce
 
 ```bash

package/lib/scaffold.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scaffold.d.ts","sourceRoot":"","sources":["../src/scaffold.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,KAAK,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACzE,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC9E,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAC9F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEhD,OAAO,EAAE,cAAc,EAAE,CAAC;AAE1B;;GAEG;AACH,eAAO,MAAM,cAAc,EAAE,SAAS,MAAM,EAW3C,CAAC;AAEF;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,OAAO,CAAC;IACxB,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAmCD;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,GAAE,qBAA0B,GAAG,IAAI,CAW3F;AA4FD;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAC1B,SAAS,EAAE,MAAM,EACjB,WAAW,GAAE,MAAyB,EACtC,OAAO,GAAE,mBAAwB,GAChC,MAAM,EAAE,CAcV;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,OAAO,GAAE,eAAoB,GAAG,cAAc,CActE;AAED,OAAO,EACL,aAAa,EAAE,sBAAsB,EAAE,yBAAyB,EAChE,qBAAqB,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,EAC3D,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,iBAAiB,EAC5D,CAAC;AAEF,YAAY,EAAE,oBAAoB,EAAE,cAAc,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;AAE5F,wBAKE"}
+{"version":3,"file":"scaffold.d.ts","sourceRoot":"","sources":["../src/scaffold.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,KAAK,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACzE,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC9E,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAC9F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAGhD,OAAO,EAAE,cAAc,EAAE,CAAC;AAE1B;;GAEG;AACH,eAAO,MAAM,cAAc,EAAE,SAAS,MAAM,EAW3C,CAAC;AAEF;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,OAAO,CAAC;IACxB,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAmCD;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,GAAE,qBAA0B,GAAG,IAAI,CAW3F;AA8FD;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAC1B,SAAS,EAAE,MAAM,EACjB,WAAW,GAAE,MAAyB,EACtC,OAAO,GAAE,mBAAwB,GAChC,MAAM,EAAE,CAeV;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,OAAO,GAAE,eAAoB,GAAG,cAAc,CActE;AAED,OAAO,EACL,aAAa,EAAE,sBAAsB,EAAE,yBAAyB,EAChE,qBAAqB,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,EAC3D,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,iBAAiB,EAC5D,CAAC;AAEF,YAAY,EAAE,oBAAoB,EAAE,cAAc,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;AAE5F,wBAKE"}

package/lib/scaffold.js

@@ -7,6 +7,7 @@ import { assertInside, isProtectedTarget, getTemplateDir } from './guards.js';
 import { ensureSymlink, ensureSymlinkOrPointer, isSameCaseInsensitiveFile } from './links.js';
 import { makeScriptsExecutable } from './permissions.js';
 import { isInsideGitWorkTree, initGit } from './repo.js';
+import { writeStarterCi } from './starter-ci.js';
 export { getTemplateDir };
 /**
  * Canonical list of template files and directories copied into a new workspace.
@@ -131,6 +132,8 @@ function starterPackageJson(resolvedTarget) {
             test: 'node --test',
             'test:coverage': 'jest --coverage',
             lint: 'echo "No linter configured yet. Run /lets-build to configure toolchain."',
+            boundaries: 'node .agents/scripts/boundary_guard.js',
+            smoke: 'node .agents/scripts/smoke_test.js',
             validate: 'node scripts/validate-cli.js'
         }
     };
@@ -173,6 +176,7 @@ export function copyTemplate(targetDir, templateDir = getTemplateDir(), options
     actions.push(...ensureHarnessParity(resolvedTarget, dryRun));
     actions.push(...ensureCopilotParity(resolvedTarget, dryRun));
     actions.push(...ensureStarterPackageJson(resolvedTarget, dryRun));
+    actions.push(...writeStarterCi(resolvedTarget, dryRun));
     const inspectDir = dryRun ? resolvedTemplate : resolvedTarget;
     actions.push(...chmodTemplateScripts(inspectDir, dryRun));
     return actions;

package/lib/scaffold.js.map

@@ -1 +1 @@
-{"version":3,"file":"scaffold.js","sourceRoot":"","sources":["../src/scaffold.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,OAAO,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAEzD,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC9E,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAE9F,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGzD,OAAO,EAAE,cAAc,EAAE,CAAC;AAE1B;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAsB;IAC/C,WAAW;IACX,WAAW;IACX,WAAW;IACX,MAAM;IACN,SAAS;IACT,SAAS;IACT,SAAS;IACT,YAAY;IACZ,eAAe;IACf,SAAS;CACV,CAAC;AA2CF,SAAS,kBAAkB,CAAC,cAAsB,EAAE,gBAAwB;IAC1E,IAAI,cAAc,KAAK,gBAAgB;QAAE,OAAO;IAChD,MAAM,IAAI,aAAa,CACrB,sBAAsB,EACtB,GAAG,WAAW,CAAC,oBAAoB,KAAK,cAAc,EAAE,CACzD,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,cAAsB,EACtB,WAAmB,EACnB,cAAuB;IAEvB,IAAI,cAAc;QAAE,OAAO;IAC3B,IAAI,CAAC,iBAAiB,CAAC,cAAc,EAAE,EAAE,WAAW,EAAE,CAAC;QAAE,OAAO;IAChE,MAAM,IAAI,aAAa,CACrB,uBAAuB,EACvB,GAAG,WAAW,CAAC,qBAAqB,KAAK,cAAc,IAAI;QAC3D,oGAAoG,CACrG,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,cAAsB,EAAE,KAAc;IAClE,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;IAC/C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK;QAAE,OAAO;IAC1C,MAAM,IAAI,aAAa,CACrB,oBAAoB,EACpB,GAAG,WAAW,CAAC,kBAAkB,KAAK,OAAO,CAAC,MAAM,iBAAiB,cAAc,KAAK;QACxF,0CAA0C,CAC3C,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB,EAAE,UAAiC,EAAE;IACnF,MAAM,EAAE,WAAW,GAAG,cAAc,EAAE,EAAE,KAAK,GAAG,KAAK,EAAE,MAAM,GAAG,KAAK,EAAE,cAAc,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;IAC1G,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACnD,kBAAkB,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;IACrD,qBAAqB,CAAC,cAAc,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;IACnE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM;YAAE,EAAE,CAAC,SAAS,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,OAAO;IACT,CAAC;IACD,oBAAoB,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,mBAAmB,CAAC,gBAAwB,EAAE,IAAY;IACjE,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC;QACtE,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC;IAC3C,CAAC;IACD,IAAI,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;IAChD,IAAI,IAAI,KAAK,YAAY,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACrD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAC;QAChE,IAAI,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC;YAAE,OAAO,GAAG,aAAa,CAAC;IAC5D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,iBAAiB,CAAC,cAAsB,EAAE,gBAAwB,EAAE,MAAe;IAC1F,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,mBAAmB,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;QAC5D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,SAAS;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QACjD,YAAY,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;QACxC,YAAY,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI,OAAO,QAAQ,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM;YAAE,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,mBAAmB,CAAC,cAAsB,EAAE,MAAe;IAClE,MAAM,KAAK,GAAgC;QACzC,CAAC,WAAW,EAAE,WAAW,CAAC;QAC1B,CAAC,WAAW,EAAE,WAAW,CAAC;QAC1B,CAAC,WAAW,EAAE,WAAW,CAAC;QAC1B,CAAC,cAAc,EAAE,WAAW,CAAC;QAC7B,CAAC,gBAAgB,EAAE,WAAW,CAAC;KAChC,CAAC;IACF,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,QAAQ,EAAE,cAAc,CAAC,IAAI,KAAK,EAAE,CAAC;QAC/C,OAAO,CAAC,IAAI,CAAC,YAAY,QAAQ,OAAO,cAAc,EAAE,CAAC,CAAC;QAC1D,aAAa,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,mBAAmB,CAAC,cAAsB,EAAE,MAAe;IAClE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvF,sBAAsB,CAAC;QACrB,SAAS,EAAE,SAAS;QACpB,QAAQ,EAAE,yBAAyB;QACnC,cAAc,EAAE,cAAc;QAC9B,MAAM;KACP,CAAC,CAAC;IACH,OAAO,CAAC,0DAA0D,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,kBAAkB,CAAC,cAAsB;IAChD,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,YAAY,CAAC;IAClE,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,4DAA4D;QACzE,OAAO,EAAE;YACP,IAAI,EAAE,aAAa;YACnB,eAAe,EAAE,iBAAiB;YAClC,IAAI,EAAE,0EAA0E;YAChF,QAAQ,EAAE,8BAA8B;SACzC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,cAAsB,EAAE,MAAe;IACvE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;IAC9D,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1C,IAAI,MAAM;QAAE,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,kBAAkB,CAAC,cAAc,CAAC,CAAC;IACtD,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IACnF,OAAO,CAAC,sBAAsB,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,oBAAoB,CAAC,UAAkB,EAAE,MAAe;IAC/D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,qBAAqB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC1D,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAC1B,SAAiB,EACjB,cAAsB,cAAc,EAAE,EACtC,UAA+B,EAAE;IAEjC,MAAM,EAAE,MAAM,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;IACnC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAC9C,EAAE,CAAC,SAAS,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,OAAO,GAAG,iBAAiB,CAAC,cAAc,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC;IAC5E,OAAO,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7D,OAAO,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7D,OAAO,CAAC,IAAI,CAAC,GAAG,wBAAwB,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;IAClE,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,cAAc,CAAC;IAC9D,OAAO,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1D,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAC,UAA2B,EAAE;IACpD,MAAM,EACJ,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,EACzB,KAAK,GAAG,KAAK,EACb,KAAK,GAAG,KAAK,EACb,WAAW,GAAG,cAAc,EAAE,EAC9B,MAAM,GAAG,KAAK,EACf,GAAG,OAAO,CAAC;IACZ,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC/C,cAAc,CAAC,cAAc,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,YAAY,CAAC,cAAc,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACtE,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAClE,IAAI,cAAc;QAAE,OAAO,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC/D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACvF,CAAC;AAED,OAAO,EACL,aAAa,EAAE,sBAAsB,EAAE,yBAAyB,EAChE,qBAAqB,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,EAC3D,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,iBAAiB,EAC5D,CAAC;AAIF,eAAe;IACb,QAAQ,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa;IACrD,sBAAsB,EAAE,yBAAyB,EAAE,qBAAqB;IACxE,mBAAmB,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM;IACpD,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,WAAW,EAAE,iBAAiB;CAC5E,CAAC"}
+{"version":3,"file":"scaffold.js","sourceRoot":"","sources":["../src/scaffold.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,OAAO,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAEzD,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC9E,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAE9F,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,EAAE,cAAc,EAAE,CAAC;AAE1B;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAsB;IAC/C,WAAW;IACX,WAAW;IACX,WAAW;IACX,MAAM;IACN,SAAS;IACT,SAAS;IACT,SAAS;IACT,YAAY;IACZ,eAAe;IACf,SAAS;CACV,CAAC;AA2CF,SAAS,kBAAkB,CAAC,cAAsB,EAAE,gBAAwB;IAC1E,IAAI,cAAc,KAAK,gBAAgB;QAAE,OAAO;IAChD,MAAM,IAAI,aAAa,CACrB,sBAAsB,EACtB,GAAG,WAAW,CAAC,oBAAoB,KAAK,cAAc,EAAE,CACzD,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,cAAsB,EACtB,WAAmB,EACnB,cAAuB;IAEvB,IAAI,cAAc;QAAE,OAAO;IAC3B,IAAI,CAAC,iBAAiB,CAAC,cAAc,EAAE,EAAE,WAAW,EAAE,CAAC;QAAE,OAAO;IAChE,MAAM,IAAI,aAAa,CACrB,uBAAuB,EACvB,GAAG,WAAW,CAAC,qBAAqB,KAAK,cAAc,IAAI;QAC3D,oGAAoG,CACrG,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,cAAsB,EAAE,KAAc;IAClE,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;IAC/C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK;QAAE,OAAO;IAC1C,MAAM,IAAI,aAAa,CACrB,oBAAoB,EACpB,GAAG,WAAW,CAAC,kBAAkB,KAAK,OAAO,CAAC,MAAM,iBAAiB,cAAc,KAAK;QACxF,0CAA0C,CAC3C,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB,EAAE,UAAiC,EAAE;IACnF,MAAM,EAAE,WAAW,GAAG,cAAc,EAAE,EAAE,KAAK,GAAG,KAAK,EAAE,MAAM,GAAG,KAAK,EAAE,cAAc,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;IAC1G,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACnD,kBAAkB,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;IACrD,qBAAqB,CAAC,cAAc,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;IACnE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM;YAAE,EAAE,CAAC,SAAS,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,OAAO;IACT,CAAC;IACD,oBAAoB,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,mBAAmB,CAAC,gBAAwB,EAAE,IAAY;IACjE,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC;QACtE,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC;IAC3C,CAAC;IACD,IAAI,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;IAChD,IAAI,IAAI,KAAK,YAAY,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACrD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAC;QAChE,IAAI,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC;YAAE,OAAO,GAAG,aAAa,CAAC;IAC5D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,iBAAiB,CAAC,cAAsB,EAAE,gBAAwB,EAAE,MAAe;IAC1F,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,mBAAmB,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;QAC5D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,SAAS;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QACjD,YAAY,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;QACxC,YAAY,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI,OAAO,QAAQ,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM;YAAE,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,mBAAmB,CAAC,cAAsB,EAAE,MAAe;IAClE,MAAM,KAAK,GAAgC;QACzC,CAAC,WAAW,EAAE,WAAW,CAAC;QAC1B,CAAC,WAAW,EAAE,WAAW,CAAC;QAC1B,CAAC,WAAW,EAAE,WAAW,CAAC;QAC1B,CAAC,cAAc,EAAE,WAAW,CAAC;QAC7B,CAAC,gBAAgB,EAAE,WAAW,CAAC;KAChC,CAAC;IACF,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,QAAQ,EAAE,cAAc,CAAC,IAAI,KAAK,EAAE,CAAC;QAC/C,OAAO,CAAC,IAAI,CAAC,YAAY,QAAQ,OAAO,cAAc,EAAE,CAAC,CAAC;QAC1D,aAAa,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,mBAAmB,CAAC,cAAsB,EAAE,MAAe;IAClE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvF,sBAAsB,CAAC;QACrB,SAAS,EAAE,SAAS;QACpB,QAAQ,EAAE,yBAAyB;QACnC,cAAc,EAAE,cAAc;QAC9B,MAAM;KACP,CAAC,CAAC;IACH,OAAO,CAAC,0DAA0D,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,kBAAkB,CAAC,cAAsB;IAChD,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,YAAY,CAAC;IAClE,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,4DAA4D;QACzE,OAAO,EAAE;YACP,IAAI,EAAE,aAAa;YACnB,eAAe,EAAE,iBAAiB;YAClC,IAAI,EAAE,0EAA0E;YAChF,UAAU,EAAE,wCAAwC;YACpD,KAAK,EAAE,oCAAoC;YAC3C,QAAQ,EAAE,8BAA8B;SACzC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,cAAsB,EAAE,MAAe;IACvE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;IAC9D,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1C,IAAI,MAAM;QAAE,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,kBAAkB,CAAC,cAAc,CAAC,CAAC;IACtD,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IACnF,OAAO,CAAC,sBAAsB,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,oBAAoB,CAAC,UAAkB,EAAE,MAAe;IAC/D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,qBAAqB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC1D,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAC1B,SAAiB,EACjB,cAAsB,cAAc,EAAE,EACtC,UAA+B,EAAE;IAEjC,MAAM,EAAE,MAAM,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;IACnC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAC9C,EAAE,CAAC,SAAS,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,OAAO,GAAG,iBAAiB,CAAC,cAAc,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC;IAC5E,OAAO,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7D,OAAO,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7D,OAAO,CAAC,IAAI,CAAC,GAAG,wBAAwB,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;IAClE,OAAO,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,cAAc,CAAC;IAC9D,OAAO,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1D,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAC,UAA2B,EAAE;IACpD,MAAM,EACJ,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,EACzB,KAAK,GAAG,KAAK,EACb,KAAK,GAAG,KAAK,EACb,WAAW,GAAG,cAAc,EAAE,EAC9B,MAAM,GAAG,KAAK,EACf,GAAG,OAAO,CAAC;IACZ,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC/C,cAAc,CAAC,cAAc,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,YAAY,CAAC,cAAc,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACtE,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAClE,IAAI,cAAc;QAAE,OAAO,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC/D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACvF,CAAC;AAED,OAAO,EACL,aAAa,EAAE,sBAAsB,EAAE,yBAAyB,EAChE,qBAAqB,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,EAC3D,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,iBAAiB,EAC5D,CAAC;AAIF,eAAe;IACb,QAAQ,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa;IACrD,sBAAsB,EAAE,yBAAyB,EAAE,qBAAqB;IACxE,mBAAmB,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM;IACpD,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,WAAW,EAAE,iBAAiB;CAC5E,CAAC"}

package/lib/starter-ci.d.ts

@@ -0,0 +1,29 @@
+/**
+ * azcodr's own release/CI workflows. They target this repository's scripts
+ * (build, mutation, benchmark) and must never run inside a scaffolded project;
+ * `writeStarterCi` removes them from the target and installs a starter CI.
+ */
+export declare const AZCODR_DEV_WORKFLOWS: readonly string[];
+/**
+ * Starter governance CI written into every scaffolded project. It depends only
+ * on Node + the vendored guard engine, so it is green out of the box (unlike
+ * azcodr's own dev workflows, which call scripts a fresh project does not have).
+ */
+export declare const STARTER_CI = "name: ci\n\non:\n  push:\n    branches: [main]\n  pull_request:\n\npermissions:\n  contents: read\n\njobs:\n  governance:\n    runs-on: ubuntu-latest\n    steps:\n      - uses: actions/checkout@v4\n      - uses: actions/setup-node@v4\n        with:\n          node-version: 22.x\n      - name: Architectural boundary & cycle check\n        run: node .agents/scripts/boundary_guard.js\n      - name: Governance validation\n        run: node scripts/validate-cli.js\n";
+/**
+ * Writes the starter governance CI into a scaffold target and removes azcodr's
+ * own dev workflows from it, so a generated project's CI is green out of the
+ * box instead of calling scripts a fresh project does not have.
+ *
+ * @param resolvedTarget - Absolute path to the scaffold target directory.
+ * @param dryRun - Record the action without touching the filesystem.
+ * @returns Recorded scaffolding action descriptions.
+ */
+export declare function writeStarterCi(resolvedTarget: string, dryRun: boolean): string[];
+declare const _default: {
+    STARTER_CI: string;
+    AZCODR_DEV_WORKFLOWS: readonly string[];
+    writeStarterCi: typeof writeStarterCi;
+};
+export default _default;
+//# sourceMappingURL=starter-ci.d.ts.map

package/lib/starter-ci.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"starter-ci.d.ts","sourceRoot":"","sources":["../src/starter-ci.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,MAAM,EAA8B,CAAC;AAEjF;;;;GAIG;AACH,eAAO,MAAM,UAAU,sdAsBtB,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,EAAE,CAUhF;;;;;;AAED,wBAAoE"}

package/lib/starter-ci.js

@@ -0,0 +1,59 @@
+import fs from 'node:fs';
+import path from 'node:path';
+/**
+ * azcodr's own release/CI workflows. They target this repository's scripts
+ * (build, mutation, benchmark) and must never run inside a scaffolded project;
+ * `writeStarterCi` removes them from the target and installs a starter CI.
+ */
+export const AZCODR_DEV_WORKFLOWS = ['ci.yml', 'publish.yml'];
+/**
+ * Starter governance CI written into every scaffolded project. It depends only
+ * on Node + the vendored guard engine, so it is green out of the box (unlike
+ * azcodr's own dev workflows, which call scripts a fresh project does not have).
+ */
+export const STARTER_CI = `name: ci
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  governance:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22.x
+      - name: Architectural boundary & cycle check
+        run: node .agents/scripts/boundary_guard.js
+      - name: Governance validation
+        run: node scripts/validate-cli.js
+`;
+/**
+ * Writes the starter governance CI into a scaffold target and removes azcodr's
+ * own dev workflows from it, so a generated project's CI is green out of the
+ * box instead of calling scripts a fresh project does not have.
+ *
+ * @param resolvedTarget - Absolute path to the scaffold target directory.
+ * @param dryRun - Record the action without touching the filesystem.
+ * @returns Recorded scaffolding action descriptions.
+ */
+export function writeStarterCi(resolvedTarget, dryRun) {
+    const actions = ['generate: .github/workflows/ci.yml (starter governance CI)'];
+    if (dryRun)
+        return actions;
+    const workflowsDir = path.join(resolvedTarget, '.github', 'workflows');
+    fs.mkdirSync(workflowsDir, { recursive: true });
+    for (const name of AZCODR_DEV_WORKFLOWS) {
+        fs.rmSync(path.join(workflowsDir, name), { force: true });
+    }
+    fs.writeFileSync(path.join(workflowsDir, 'ci.yml'), STARTER_CI, 'utf-8');
+    return actions;
+}
+export default { STARTER_CI, AZCODR_DEV_WORKFLOWS, writeStarterCi };
+//# sourceMappingURL=starter-ci.js.map

package/lib/starter-ci.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"starter-ci.js","sourceRoot":"","sources":["../src/starter-ci.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAsB,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;AAEjF;;;;GAIG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;;;;;;;CAsBzB,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,cAAsB,EAAE,MAAe;IACpE,MAAM,OAAO,GAAG,CAAC,4DAA4D,CAAC,CAAC;IAC/E,IAAI,MAAM;QAAE,OAAO,OAAO,CAAC;IAC3B,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IACvE,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,KAAK,MAAM,IAAI,IAAI,oBAAoB,EAAE,CAAC;QACxC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IACzE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,eAAe,EAAE,UAAU,EAAE,oBAAoB,EAAE,cAAc,EAAE,CAAC"}

package/memory.md

@@ -37,6 +37,8 @@
 | [ADR-018](./memory.md#adr-018-first-class-architectural-boundary-and-cycle-inspection-cli-subcommand) | First-Class Architectural Boundary and Cycle Inspection CLI Subcommand | 2026-10-08 | ACCEPTED | [`clean_code.md`](./docs/rules/clean_code.md) |
 | [ADR-019](./memory.md#adr-019-honest-claims-100-percent-all-metrics-gate-and-benchmark-limits-on-the-record) | Honest claims, 100% all-metrics gate, and benchmark limits on the record | 2026-10-08 | ACCEPTED | [`test_driven_development.md`](./docs/rules/test_driven_development.md) |
 | [ADR-020](./memory.md#adr-020-generated-projects-get-deterministic-enforcement) | Generated projects get deterministic enforcement | 2026-10-08 | ACCEPTED | [`clean_code.md`](./docs/rules/clean_code.md) |
+| [ADR-021](./memory.md#adr-021-default-on-guards-boundaries-and-starter-ci-ship-in-the-scaffold) | Default-on guards; boundaries & starter CI ship in the scaffold | 2026-10-09 | ACCEPTED | [`clean_code.md`](./docs/rules/clean_code.md) |
+| [ADR-022](./memory.md#adr-022-cross-platform-hook-resolution-scaffolding-handover-gate-desktop-doctor--smoke-standard) | Cross-platform hook resolution, scaffolding handover gate, desktop doctor & smoke standard | 2026-10-10 | ACCEPTED | [`agentic_configuration.md`](./docs/rules/agentic_configuration.md) |
 
 ---
 
@@ -133,6 +135,20 @@
 - **Consequences:** ✅ The catastrophic `--force` paths are closed, locked by `tests/protected-target.test.js` (14 tests, including symlink-alias and fault-injection cases for the two defensive catches). ✅ Only the exact protected directories are blocked: `~/my-project` and any normal subdirectory still scaffold. ✅ New stable error code follows the existing contract (branch on `code`, never message). ⚠️ A user who genuinely wants a project AT `~` must pick a subdirectory; that friction is the point.
 - **Enforced In:** `lib/scaffold.js` (`isProtectedTarget`, `validateTarget`), `bin/azcodr.js` (fail-fast), `lib/index.d.ts`, `tests/protected-target.test.js`, `tests/error-codes.test.js`, `README.md` (security notes)
 
+#### ADR-022: Cross-Platform Hook Resolution, Scaffolding Handover Gate, Desktop Doctor & Smoke Standard
+- **Date:** 2026-10-10 | **Status:** ACCEPTED
+- **Context:** Retrospectives across `thebrowser` and `sthanori` revealed recurring operational and architectural friction: (1) Running on Windows hosts under Antigravity/cmd.exe, hook commands specified as POSIX paths (`./.agents/...`) failed with `'.' is not recognized as an internal or external command`, and Antigravity sets CWD to `.agents/`, breaking relative paths. (2) During scaffolding, eager agents fabricated domain entities without user discovery, violating the bootstrapping boundary (ISSUE-005). (3) Hybrid desktop builds suffered silent defects (missing `custom-protocol`, hollow <5KB CSS bundles due to missing PostCSS, and background WebView2 process lock crashes `0x800700AA`). (4) In-memory unit test suites gave false confidence while live reverse proxies, TCP sockets, and Content-Types failed (ISSUE-004), alongside local dev port collisions (port 5173 RPMS collision in `thebrowser`).
+- **Decision:** (1) Standardize all lifecycle hook commands in `.agents/hooks.json` (+`.example`) on cross-platform `node` runtime invocations (`node .agents/scripts/...`), supported by forwarders resolving seamlessly whether CWD is workspace root or `.agents/`. (2) Ship pure Node.js implementations for `safety_guard.js` and `verify_completion.js`, eliminating bash dependencies on Windows. (3) Enforce the mandatory Phase 5 Handover Gate in `bootstrap_workspace.sh` and `/lets-build`, halting code generation after technical plumbing and `/healthz`. (4) Author `.agents/scripts/desktop_doctor.js` (verifying `Cargo.toml` Tauri `custom-protocol` and CSS bundle density ≥ 5KB) and `.agents/scripts/smoke_test.js` (boundary graph check and port collision doctoring). Wire `smoke` into starter `package.json`.
+- **Consequences:** ✅ Zero Windows cmd shell syntax errors during PreToolUse/PostToolUse/Stop hook execution. ✅ Full cross-platform test and verification parity across Windows, macOS, and Linux. ✅ Deterministic prevention of premature domain scaffolding, hybrid desktop build defects, and silent port collisions. ✅ 100.00% test coverage and Clean Code fitness functions preserved across all 49 test suites and 560 tests.
+- **Enforced In:** `.agents/hooks.json`, `.agents/hooks.json.example`, `.agents/scripts/safety_guard.js`, `.agents/scripts/verify_completion.js`, `.agents/scripts/desktop_doctor.js`, `.agents/scripts/smoke_test.js`, `.agents/skills/lets-build/scripts/bootstrap_workspace.sh`, `src/scaffold.ts`, `tests/hooks-default.test.ts`, `tests/desktop-doctor.test.ts`, `tests/smoke-test.test.ts`, `tests/bootstrap-toolchain.test.ts`
+
+#### ADR-021: Default-On Guards; Boundaries & Starter CI Ship in the Scaffold
+- **Date:** 2026-10-09 | **Status:** ACCEPTED
+- **Context:** The 2026-10-08 consolidated external review left three open severity items: (1) the benchmark read as a live-agent trial while its fixtures were synthetic ("100% drift elimination" over fixtures no agent produced); (2) "your agent cannot skip" was false because every shipped hook in `.agents/hooks.json` was `enabled: false`; (3) the boundary engine — the component that stopped the cycle and the layer breach in the results — was not wired into generated projects or their CI. A further finding from the review's follow-up audit: scaffolded projects inherited azcodr's own `ci.yml`/`publish.yml`, which call scripts (build, mutation, benchmark) a fresh project does not have, so generated CI failed on every push out of the box.
+- **Decision:** (1) Retitle the benchmark as detector validation on synthetic fixtures, pre-register the real-agent trial in `benchmark/REAL-AGENT-RUNBOOK.md` with a result template, and stop narrating "the agent" in `benchmark/RESULTS.md`. (2) Ship all four hooks with `enabled: true` in `.agents/hooks.json` (+`.example`), amending ADR-020 — default-off contradicts the tagline; the cost that lint/stop hooks can interrupt a bare scaffold is accepted and recorded. (3) Vendor `lib/boundaries.js` into `.agents/lib/boundaries.js` (byte-locked by test), add a vendored-first runner `.agents/scripts/boundary_guard.js` (exit 0/1 verdict, exit 2 on missing engine), point the starter `package.json` `boundaries` script at it, and make `bootstrap_workspace.sh`'s smoke test execute it. (4) The scaffolder writes a starter `.github/workflows/ci.yml` (boundary guard + `validate-cli.js`; Node only) and removes azcodr's dev-only workflows from the target, so a scaffolded repo's CI is green out of the box. (5) Remove the personal author email from `package.json` (role-scoped `+security`/`+conduct` addresses stay: they are functional routing, not identity).
+- **Consequences:** ✅ Enforcement is on by default where the harness loads the file; boundary checks run in generated CI. ✅ Generated CI no longer fails because of azcodr's own scripts. ✅ The benchmark headline no longer overclaims. ⚠️ Default-on hooks can interrupt a harnessed session in a bare scaffold; ⚠️ live-agent drift-reduction evidence is still unmeasured; ⚠️ azcodr's dev workflows no longer propagate into user projects.
+- **Enforced In:** `.agents/hooks.json`, `.agents/hooks.json.example`, `.agents/scripts/boundary_guard.js`, `.agents/lib/boundaries.js`, `src/scaffold.ts`, `src/starter-ci.ts`, `.agents/skills/lets-build/scripts/bootstrap_workspace.sh`, `benchmark/RESULTS.md`, `benchmark/REAL-AGENT-RUNBOOK.md`, `package.json`, `tests/boundary-guard.test.ts`, `tests/scaffold-ci.test.ts`, `tests/hooks-default.test.ts`
+
 #### ADR-009: memory.md Is Append-Only; the Scaffolder Never Rewrites the Ledger
 - **Date:** 2026-10-07 | **Status:** ACCEPTED
 - **Context:** `.agents/skills/lets-build/scripts/bootstrap_workspace.sh` overwrote `memory.md` with a heredoc whenever the file contained any ADR heading that was not the untouched "No decisions recorded yet" placeholder. Reproduced directly: a project whose ADR read "we will never drop SQLite support" was silently replaced with an empty template after one `/lets-build` run — no error, no backup. It also fired on *high* numbering, so a mature project's ledger was equally destroyed. The intent was to strip template ADRs leaked from this repo; the trigger was the presence of real ones. ADRs are immutable history by rule (`docs/rules/agentic_configuration.md`), so a scaffolder rewriting them was a category error. Two further determinism defects in the same script: Topologies D (Canvas Game) and F (Systems Library) were documented in `SKILL.md` but had no `case` arm, so they fell through to a generic tree and **exited 0** — a wrong-but-successful scaffold the agent would report as done; and the `$LANGUAGE` argument was echoed and never used, so every language produced an identical tree while the skill claimed determinism.

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "azcodr",
-  "version": "2.5.1",
-  "description": "Architecture governance toolkit with topology-scoped scaffolding for AI-assisted development (early release)",
+  "version": "2.7.0",
+  "description": "Architecture governance toolkit, with an optional starter (early release)",
   "type": "module",
   "bin": {
     "azcodr": "bin/azcodr.js"
@@ -44,7 +44,7 @@
     "agents",
     "npx"
   ],
-  "author": "Subodh Khanal <prosubodh+git@gmail.com>",
+  "author": "Subodh Khanal",
   "license": "MIT",
   "repository": {
     "type": "git",

package/src/scaffold.ts

@@ -10,6 +10,7 @@ import type { EnsureSymlinkOptions } from './links.js';
 import { makeScriptsExecutable } from './permissions.js';
 import { isInsideGitWorkTree, initGit } from './repo.js';
 import type { InitGitOptions } from './repo.js';
+import { writeStarterCi } from './starter-ci.js';
 
 export { getTemplateDir };
 
@@ -189,6 +190,8 @@ function starterPackageJson(resolvedTarget: string): Record<string, unknown> {
       test: 'node --test',
       'test:coverage': 'jest --coverage',
       lint: 'echo "No linter configured yet. Run /lets-build to configure toolchain."',
+      boundaries: 'node .agents/scripts/boundary_guard.js',
+      smoke: 'node .agents/scripts/smoke_test.js',
       validate: 'node scripts/validate-cli.js'
     }
   };
@@ -236,6 +239,7 @@ export function copyTemplate(
   actions.push(...ensureHarnessParity(resolvedTarget, dryRun));
   actions.push(...ensureCopilotParity(resolvedTarget, dryRun));
   actions.push(...ensureStarterPackageJson(resolvedTarget, dryRun));
+  actions.push(...writeStarterCi(resolvedTarget, dryRun));
   const inspectDir = dryRun ? resolvedTemplate : resolvedTarget;
   actions.push(...chmodTemplateScripts(inspectDir, dryRun));
   return actions;

package/src/starter-ci.ts

@@ -0,0 +1,61 @@
+import fs from 'node:fs';
+import path from 'node:path';
+
+/**
+ * azcodr's own release/CI workflows. They target this repository's scripts
+ * (build, mutation, benchmark) and must never run inside a scaffolded project;
+ * `writeStarterCi` removes them from the target and installs a starter CI.
+ */
+export const AZCODR_DEV_WORKFLOWS: readonly string[] = ['ci.yml', 'publish.yml'];
+
+/**
+ * Starter governance CI written into every scaffolded project. It depends only
+ * on Node + the vendored guard engine, so it is green out of the box (unlike
+ * azcodr's own dev workflows, which call scripts a fresh project does not have).
+ */
+export const STARTER_CI = `name: ci
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  governance:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22.x
+      - name: Architectural boundary & cycle check
+        run: node .agents/scripts/boundary_guard.js
+      - name: Governance validation
+        run: node scripts/validate-cli.js
+`;
+
+/**
+ * Writes the starter governance CI into a scaffold target and removes azcodr's
+ * own dev workflows from it, so a generated project's CI is green out of the
+ * box instead of calling scripts a fresh project does not have.
+ *
+ * @param resolvedTarget - Absolute path to the scaffold target directory.
+ * @param dryRun - Record the action without touching the filesystem.
+ * @returns Recorded scaffolding action descriptions.
+ */
+export function writeStarterCi(resolvedTarget: string, dryRun: boolean): string[] {
+  const actions = ['generate: .github/workflows/ci.yml (starter governance CI)'];
+  if (dryRun) return actions;
+  const workflowsDir = path.join(resolvedTarget, '.github', 'workflows');
+  fs.mkdirSync(workflowsDir, { recursive: true });
+  for (const name of AZCODR_DEV_WORKFLOWS) {
+    fs.rmSync(path.join(workflowsDir, name), { force: true });
+  }
+  fs.writeFileSync(path.join(workflowsDir, 'ci.yml'), STARTER_CI, 'utf-8');
+  return actions;
+}
+
+export default { STARTER_CI, AZCODR_DEV_WORKFLOWS, writeStarterCi };