cto-ai-cli 3.0.0 → 3.0.2

package/README.md

@@ -8,7 +8,7 @@
 ## Try it now (zero install)
 
 ```bash
-npx cto-score
+npx cto-ai-cli
 ```
 
 That's it. Run it on any project. You'll see something like this:
@@ -33,7 +33,7 @@ That's it. Run it on any project. You'll see something like this:
   Scanned in 11.7s · 177 files · 340K tokens
 ```
 
-Run `npx cto-score --benchmark` to see how CTO compares to naive (alphabetical) and random file selection.
+Run `npx cto-ai-cli --benchmark` to see how CTO compares to naive (alphabetical) and random file selection.
 
 No data leaves your machine. No API keys. MIT licensed.
 
@@ -77,10 +77,10 @@ Without type definitions, the AI invents interfaces — wrong property names, wr
 ### Option 1: Quick score (no install)
 
 ```bash
-npx cto-score                 # Score your project
-npx cto-score ./my-project    # Score a specific project
-npx cto-score --benchmark     # Compare CTO vs naive vs random
-npx cto-score --json          # Machine-readable output (for CI)
+npx cto-ai-cli                 # Score your project
+npx cto-ai-cli ./my-project    # Score a specific project
+npx cto-ai-cli --benchmark     # Compare CTO vs naive vs random
+npx cto-ai-cli --json          # Machine-readable output (for CI)
 ```
 
 ### Option 2: Full install
@@ -132,7 +132,7 @@ CTO doesn't use AI for selection. It uses dependency analysis, risk modeling, an
 
 ## Real numbers
 
-We ran CTO on three open-source projects. No cherry-picking — you can reproduce these with `npx cto-score --benchmark`.
+We ran CTO on three open-source projects. No cherry-picking — you can reproduce these with `npx cto-ai-cli --benchmark`.
 
 | Project | Files | Score | What CTO does |
 |---------|-------|-------|---------------|
@@ -201,14 +201,14 @@ Without these files, the AI has to guess the shape of `AnalyzedFile`, `ContextSe
 
 | Use case | How |
 |----------|-----|
-| **Score your project** | `npx cto-score` |
-| **Compare strategies** | `npx cto-score --benchmark` |
+| **Score your project** | `npx cto-ai-cli` |
+| **Compare strategies** | `npx cto-ai-cli --benchmark` |
 | **Get optimized context for a task** | `cto2 interact "your task"` |
 | **PR-focused context** | `cto2 interact --pr "review this PR"` |
 | **Use in your AI editor** | Add MCP server (see setup above) |
 | **Use in CI/CD** | GitHub Action posts score on every PR |
 | **Use as an API** | `cto2-api` starts an HTTP server |
-| **JSON output (scripting)** | `npx cto-score --json` |
+| **JSON output (scripting)** | `npx cto-ai-cli --json` |
 
 ---
 

package/package.json

@@ -1,9 +1,10 @@
 {
   "name": "cto-ai-cli",
-  "version": "3.0.0",
+  "version": "3.0.2",
   "description": "Your AI is reading too much code. CTO analyzes your project and selects the optimal files for AI context — saving tokens, improving output quality, and ensuring type definitions are included.",
   "type": "module",
   "bin": {
+    "cto-ai-cli": "dist/cli/score.js",
     "cto": "dist/cli/index.js",
     "cto2": "dist/cli/v2/index.js",
     "cto-mcp": "dist/mcp/index.js",

package/dist/govern/index.d.ts

@@ -1,261 +0,0 @@
-interface AuditEntry {
-    id: string;
-    timestamp: Date;
-    action: AuditAction;
-    user: string;
-    projectPath: string;
-    contextHash?: string;
-    filesIncluded?: number;
-    filesExcluded?: number;
-    tokensUsed?: number;
-    coverageScore?: number;
-    riskScore?: number;
-    model?: string;
-    estimatedCost?: number;
-    integrityHash: string;
-    details: Record<string, unknown>;
-}
-type AuditAction = 'init' | 'analyze' | 'interact' | 'snapshot-create' | 'snapshot-verify' | 'policy-change' | 'secret-detected' | 'integrity-check';
-interface PolicySet {
-    version: string;
-    name: string;
-    rules: PolicyRule[];
-}
-interface PolicyRule {
-    id: string;
-    type: PolicyRuleType;
-    pattern?: string;
-    threshold?: number;
-    category?: string;
-    reason: string;
-    enabled: boolean;
-}
-type PolicyRuleType = 'include-always' | 'exclude-always' | 'budget-limit' | 'coverage-minimum' | 'risk-maximum' | 'secret-block';
-interface PolicyValidation {
-    passed: boolean;
-    violations: PolicyViolation[];
-    warnings: PolicyWarning[];
-}
-interface PolicyViolation {
-    rule: PolicyRule;
-    message: string;
-    severity: 'error' | 'warning';
-}
-interface PolicyWarning {
-    rule: PolicyRule;
-    message: string;
-    currentValue: number;
-    threshold: number;
-}
-interface ContextSnapshot {
-    id: string;
-    name: string;
-    createdAt: Date;
-    hash: string;
-    projectHash: string;
-    analysisHash: string;
-    selectionHash: string;
-    files: SnapshotFile[];
-    totalTokens: number;
-    coverageScore: number;
-    riskScore: number;
-    metadata: Record<string, unknown>;
-}
-interface SnapshotFile {
-    relativePath: string;
-    hash: string;
-    tokens: number;
-    pruneLevel: string;
-}
-interface SnapshotVerification {
-    valid: boolean;
-    snapshotId: string;
-    filesChecked: number;
-    filesMatched: number;
-    filesMissing: string[];
-    filesChanged: string[];
-    integrityOk: boolean;
-}
-interface SecretFinding {
-    type: SecretType;
-    file: string;
-    line: number;
-    match: string;
-    redacted: string;
-    severity: 'critical' | 'high' | 'medium' | 'low';
-}
-type SecretType = 'api-key' | 'aws-key' | 'private-key' | 'password' | 'token' | 'connection-string' | 'env-variable' | 'custom';
-interface IntegrityManifest {
-    version: string;
-    createdAt: Date;
-    entries: IntegrityEntry[];
-}
-interface IntegrityEntry {
-    filePath: string;
-    hash: string;
-    size: number;
-    createdAt: Date;
-    type: 'snapshot' | 'audit' | 'config' | 'policy';
-}
-
-declare function logAudit(action: AuditAction, projectPath: string, details?: Record<string, unknown>): Promise<AuditEntry>;
-declare function getAuditEntries(options?: {
-    projectPath?: string;
-    action?: AuditAction;
-    since?: Date;
-    limit?: number;
-}): Promise<AuditEntry[]>;
-declare function verifyAuditEntry(entry: AuditEntry): boolean;
-declare function verifyAuditIntegrity(): Promise<{
-    totalEntries: number;
-    validEntries: number;
-    invalidEntries: AuditEntry[];
-}>;
-declare function purgeOldAuditEntries(retentionDays: number): Promise<number>;
-
-declare function scanContentForSecrets(content: string, filePath: string, customPatterns?: string[]): SecretFinding[];
-declare function scanFileForSecrets(filePath: string, projectPath: string, customPatterns?: string[]): Promise<SecretFinding[]>;
-declare function scanProjectForSecrets(projectPath: string, filePaths: string[], customPatterns?: string[]): Promise<SecretFinding[]>;
-declare function sanitizeContent(content: string, customPatterns?: string[]): string;
-
-interface AnalyzedFile {
-    path: string;
-    relativePath: string;
-    extension: string;
-    size: number;
-    tokens: number;
-    lines: number;
-    lastModified: Date;
-    kind: FileKind;
-    imports: string[];
-    importedBy: string[];
-    isHub: boolean;
-    complexity: number;
-    riskScore: number;
-    riskFactors: RiskFactor[];
-    exclusionImpact: ExclusionImpact;
-}
-type FileKind = 'source' | 'type' | 'test' | 'config' | 'entry' | 'asset';
-type ExclusionImpact = 'critical' | 'high' | 'medium' | 'low' | 'none';
-interface ProjectAnalysis {
-    projectPath: string;
-    projectName: string;
-    analyzedAt: Date;
-    hash: string;
-    files: AnalyzedFile[];
-    totalFiles: number;
-    totalTokens: number;
-    graph: ProjectGraph;
-    riskProfile: RiskProfile;
-    stack: string[];
-    tokenMethod: 'chars4' | 'tiktoken';
-}
-interface ProjectGraph {
-    nodes: string[];
-    edges: GraphEdge[];
-    hubs: HubNode[];
-    leaves: string[];
-    orphans: string[];
-    clusters: FileCluster[];
-}
-interface GraphEdge {
-    from: string;
-    to: string;
-    type: 'import' | 'export' | 're-export';
-}
-interface HubNode {
-    relativePath: string;
-    dependents: number;
-    dependencies: number;
-    score: number;
-}
-interface FileCluster {
-    id: string;
-    name: string;
-    files: string[];
-    totalTokens: number;
-    internalEdges: number;
-    externalEdges: number;
-    cohesion: number;
-}
-interface RiskProfile {
-    distribution: {
-        critical: number;
-        high: number;
-        medium: number;
-        low: number;
-    };
-    topRiskFiles: AnalyzedFile[];
-    overallComplexity: number;
-}
-interface RiskFactor {
-    type: RiskFactorType;
-    score: number;
-    weight: number;
-    detail: string;
-}
-type RiskFactorType = 'hub' | 'type-provider' | 'complexity' | 'recency' | 'config' | 'churn';
-interface CoverageResult {
-    score: number;
-    relevantFiles: string[];
-    includedRelevant: string[];
-    missingRelevant: string[];
-    missingCritical: string[];
-    explanation: string;
-}
-interface ContextSelection {
-    files: SelectedFile[];
-    totalTokens: number;
-    budget: number;
-    usedPercent: number;
-    coverage: CoverageResult;
-    riskScore: number;
-    deterministic: boolean;
-    hash: string;
-    decisions: SelectionDecision[];
-}
-interface SelectedFile {
-    relativePath: string;
-    tokens: number;
-    originalTokens: number;
-    pruneLevel: PruneLevel;
-    riskScore: number;
-    reason: string;
-}
-type PruneLevel = 'full' | 'signatures' | 'skeleton' | 'excluded';
-interface SelectionDecision {
-    file: string;
-    action: 'include-full' | 'include-signatures' | 'include-skeleton' | 'exclude';
-    reason: string;
-    alternatives?: string;
-}
-
-declare const DEFAULT_POLICY: PolicySet;
-declare function validateSelection(selection: ContextSelection, policies: PolicySet, allFiles?: AnalyzedFile[]): PolicyValidation;
-declare function addRule(policies: PolicySet, rule: PolicyRule): PolicySet;
-declare function removeRule(policies: PolicySet, ruleId: string): PolicySet;
-declare function toggleRule(policies: PolicySet, ruleId: string, enabled: boolean): PolicySet;
-
-declare function createSnapshot(name: string, analysis: ProjectAnalysis, selection: ContextSelection, metadata?: Record<string, unknown>): ContextSnapshot;
-declare function verifySnapshot(snapshot: ContextSnapshot, currentAnalysis: ProjectAnalysis, currentSelection: ContextSelection): Promise<SnapshotVerification>;
-declare function compareSnapshots(older: ContextSnapshot, newer: ContextSnapshot): {
-    added: string[];
-    removed: string[];
-    changed: string[];
-    tokenDelta: number;
-    coverageDelta: number;
-    riskDelta: number;
-};
-
-declare function hashContent(content: Buffer | string): string;
-declare function hashFile(filePath: string): Promise<string | null>;
-declare function buildManifest(projectDir: string): Promise<IntegrityManifest>;
-declare function verifyManifest(manifest: IntegrityManifest): Promise<{
-    totalFiles: number;
-    validFiles: number;
-    invalidFiles: string[];
-    missingFiles: string[];
-}>;
-declare function securePermissions(dirPath: string): Promise<number>;
-
-export { DEFAULT_POLICY, addRule, buildManifest, compareSnapshots, createSnapshot, getAuditEntries, hashContent, hashFile, logAudit, purgeOldAuditEntries, removeRule, sanitizeContent, scanContentForSecrets, scanFileForSecrets, scanProjectForSecrets, securePermissions, toggleRule, validateSelection, verifyAuditEntry, verifyAuditIntegrity, verifyManifest, verifySnapshot };