taste-lint 0.0.11 → 0.2.0

package/dist/cli.js

@@ -1,6 +1,5 @@
 #!/usr/bin/env node
-import { builtinModules } from "node:module";
-import { Command, CommanderError } from "commander";
+import { Command, CommanderError, Option } from "commander";
 import fs from "node:fs";
 import path from "node:path";
 import { execFileSync, spawn, spawnSync } from "node:child_process";
@@ -10,13 +9,12 @@ import { fromMarkdown } from "mdast-util-from-markdown";
 import { gfmFromMarkdown } from "mdast-util-gfm";
 import { gfm } from "micromark-extension-gfm";
 import { parseSync } from "oxc-parser";
-import { parse as parse$1 } from "parse5";
+import os from "node:os";
 import { mdxFromMarkdown } from "mdast-util-mdx";
 import { mdxjs } from "micromark-extension-mdxjs";
 import { styleText } from "node:util";
-import os from "node:os";
-//#region package.json
-var version = "0.0.11";
+//#region packages/cli/package.json
+var version = "0.2.0";
 //#endregion
 //#region src/lib/stats.ts
 const makePRNG = (seed) => {
@@ -116,21 +114,6 @@ const calibrationTable = (pairs, buckets = 10) => Array.from({ length: buckets }
 //#endregion
 //#region src/rules/taxonomy.ts
 const CATEGORIES = [
-	{
-		domain: "seo",
-		id: "search-discovery",
-		label: "Search discovery"
-	},
-	{
-		domain: "architecture",
-		id: "repository-contracts",
-		label: "Repository contracts"
-	},
-	{
-		domain: "dx",
-		id: "package-contracts",
-		label: "Package contracts"
-	},
 	{
 		domain: "authoring",
 		id: "instruction-quality",
@@ -340,9 +323,6 @@ const DOC_TYPES = [
 	"readme",
 	"skill",
 	"plan",
-	"personal",
-	"pr",
-	"slides",
 	"unknown"
 ];
 const ROLES = [
@@ -365,10 +345,7 @@ const CONTEXT_KEYS = [
 	"docType",
 	"element",
 	"role",
-	"neighbours",
-	"writingFacts",
-	"writingProfile",
-	"writingInstructions"
+	"neighbours"
 ];
 //#endregion
 //#region src/eval/corpus.ts
@@ -1070,7 +1047,7 @@ const detectSmartQuotesAtBuild = (root) => SMARTYPANTS_FILES.some((file) => {
 		return false;
 	}
 });
-const invalid$1 = (key, expected) => {
+const invalid = (key, expected) => {
 	throw new InputError("INVALID_CONFIG", `taste-lint.config.json: ${key} must be ${expected}.`, {
 		expected,
 		field: key
@@ -1078,14 +1055,14 @@ const invalid$1 = (key, expected) => {
 };
 function validateConfig(raw) {
 	const object = (value, key) => {
-		if (!value || typeof value !== "object" || Array.isArray(value)) return invalid$1(key, "an object");
+		if (!value || typeof value !== "object" || Array.isArray(value)) return invalid(key, "an object");
 		return value;
 	};
 	const keys = (value, allowed, prefix) => {
-		for (const key of Object.keys(value)) if (!allowed.includes(key)) invalid$1(`${prefix}${key}`, `one of ${allowed.join(", ")}`);
+		for (const key of Object.keys(value)) if (!allowed.includes(key)) invalid(`${prefix}${key}`, `one of ${allowed.join(", ")}`);
 	};
 	const strings = (value, key) => {
-		if (!Array.isArray(value) || value.some((v) => typeof v !== "string")) invalid$1(key, "an array of strings");
+		if (!Array.isArray(value) || value.some((v) => typeof v !== "string")) invalid(key, "an array of strings");
 	};
 	const value = object(raw, "config");
 	keys(value, [
@@ -1094,48 +1071,18 @@ function validateConfig(raw) {
 		"smartQuotesAtBuild",
 		"docTypes",
 		"components",
-		"tailwind",
-		"architecture"
+		"tailwind"
 	], "");
-	if (value.architecture !== void 0) {
-		const policy = object(value.architecture, "architecture");
-		keys(policy, [
-			"boundaries",
-			"deprecatedImports",
-			"generated"
-		], "architecture.");
-		if (policy.generated !== void 0) strings(policy.generated, "architecture.generated");
-		if (policy.deprecatedImports !== void 0) {
-			const deprecated = object(policy.deprecatedImports, "architecture.deprecatedImports");
-			for (const [key, replacement] of Object.entries(deprecated)) if (typeof replacement !== "string" || !replacement.trim()) invalid$1(`architecture.deprecatedImports.${key}`, "a nonempty replacement");
-		}
-		if (policy.boundaries !== void 0) {
-			if (!Array.isArray(policy.boundaries)) invalid$1("architecture.boundaries", "an array");
-			for (const [i, rawBoundary] of policy.boundaries.entries()) {
-				const boundary = object(rawBoundary, `architecture.boundaries[${i}]`);
-				keys(boundary, [
-					"from",
-					"disallow",
-					"reason"
-				], `architecture.boundaries[${i}].`);
-				for (const key of [
-					"from",
-					"disallow",
-					"reason"
-				]) if (typeof boundary[key] !== "string" || !boundary[key].trim()) invalid$1(`architecture.boundaries[${i}].${key}`, "a nonempty string");
-			}
-		}
-	}
-	if (value.$schema !== void 0 && typeof value.$schema !== "string") invalid$1("$schema", "a string");
+	if (value.$schema !== void 0 && typeof value.$schema !== "string") invalid("$schema", "a string");
 	if (value.exclude !== void 0) strings(value.exclude, "exclude");
-	if (value.smartQuotesAtBuild !== void 0 && typeof value.smartQuotesAtBuild !== "boolean") invalid$1("smartQuotesAtBuild", "a boolean");
+	if (value.smartQuotesAtBuild !== void 0 && typeof value.smartQuotesAtBuild !== "boolean") invalid("smartQuotesAtBuild", "a boolean");
 	if (value.docTypes !== void 0) {
-		if (!Array.isArray(value.docTypes)) invalid$1("docTypes", "an array");
+		if (!Array.isArray(value.docTypes)) invalid("docTypes", "an array");
 		for (const [i, entry] of value.docTypes.entries()) {
 			const row = object(entry, `docTypes[${i}]`);
 			keys(row, ["glob", "type"], `docTypes[${i}].`);
-			if (typeof row.glob !== "string") invalid$1(`docTypes[${i}].glob`, "a string");
-			if (!DOC_TYPES.includes(row.type)) invalid$1(`docTypes[${i}].type`, DOC_TYPES.join(", "));
+			if (typeof row.glob !== "string") invalid(`docTypes[${i}].glob`, "a string");
+			if (!DOC_TYPES.includes(row.type)) invalid(`docTypes[${i}].type`, DOC_TYPES.join(", "));
 		}
 	}
 	if (value.components !== void 0) {
@@ -1148,7 +1095,7 @@ function validateConfig(raw) {
 		keys(t, ["theme"], "tailwind.");
 		if (t.theme !== void 0) {
 			const theme = object(t.theme, "tailwind.theme");
-			for (const [key, val] of Object.entries(theme)) if (typeof val !== "string") invalid$1(`tailwind.theme.${key}`, "a string");
+			for (const [key, val] of Object.entries(theme)) if (typeof val !== "string") invalid(`tailwind.theme.${key}`, "a string");
 		}
 	}
 }
@@ -1175,7 +1122,6 @@ const loadConfig = (root, defaults = []) => {
 		}
 	}
 	return {
-		architecture: user.architecture,
 		components: {
 			skip: [...DEFAULT_SKIP, ...user.components?.skip ?? []],
 			unwrap: [...DEFAULT_UNWRAP, ...user.components?.unwrap ?? []]
@@ -1519,11 +1465,6 @@ const buildState = (unit, rules) => {
 	if (keys.has("element") && unit.context.element) lines.push(`ELEMENT: ${unit.context.element}${unit.context.attr ? ` (${unit.context.attr})` : ""}`);
 	if (keys.has("role")) lines.push(`ROLE: ${unit.context.role}`);
 	if (keys.has("section") && unit.context.section) lines.push(`SECTION: ${clip("SECTION: ", unit.context.section)}`);
-	for (const [key, label] of [
-		["writingFacts", "SUPPLIED FACTS"],
-		["writingProfile", "VOICE PROFILE"],
-		["writingInstructions", "DRAFTING INSTRUCTIONS"]
-	]) if (keys.has(key) && unit.context[key]) lines.push(`${label}: ${clip(`${label}: `, unit.context[key])}`);
 	return {
 		state: lines.join("\n"),
 		truncated
@@ -2251,26 +2192,6 @@ const planRequests = (units, rules, config) => {
 			const applied = eligible.get(unit.id) ?? /* @__PURE__ */ new Set();
 			applied.add(rule.id);
 			eligible.set(unit.id, applied);
-			const writingKeys = [
-				"writingFacts",
-				"writingProfile",
-				"writingInstructions"
-			];
-			const requiredWriting = writingKeys.filter((key) => rule.question?.context?.includes(key));
-			if (requiredWriting.length) {
-				const missing = requiredWriting.filter((key) => !unit.context[key]);
-				const total = [unit.text, ...writingKeys.map((key) => unit.context[key] ?? "")].join("\n");
-				if (missing.length || estimateTokens(total, charsPerTokenFor(unit.kind)) > 1300) {
-					unknowns.push({
-						file: unit.file,
-						line: unit.line,
-						reason: missing.length ? `Missing explicit writing context: ${missing.join(", ")}` : "Writing comparison exceeds the context budget",
-						ruleId: rule.id,
-						unitId: unit.id
-					});
-					continue;
-				}
-			}
 			if (rule.tier === "jev") {
 				const reason = missingEvidence(unit, rule);
 				if (reason) {
@@ -2492,6 +2413,13 @@ const jevFindings = (jobs, answers) => {
 	};
 };
 //#endregion
+//#region src/extract/arbitrary.ts
+const literalArbitraryValues = (classes) => classes.filter((className) => {
+	const value = baseClass(className).match(/^-?[\w-]+-\[(.+?)\](?:\/[^\s]+)?!?$/u)?.[1]?.replace(/^(?:length|color):/u, "");
+	if (!value || /var\(|env\(|theme\(|^--|^(?:calc|min|max|clamp|minmax|repeat|url)\(/u.test(value)) return false;
+	return /^-?(?:\d+(?:\.\d+)?|\.\d+)(?:px|rem|em|ms|s|deg)?$/u.test(value) || /^#[\da-f]{3,8}$/iu.test(value) || /^(?:rgb|rgba|hsl|hsla|oklab|oklch|color)\(/u.test(value);
+});
+//#endregion
 //#region src/rules/validate.ts
 const KEBAB = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
 const DEFAULT_THRESHOLDS = {
@@ -2620,71 +2548,6 @@ const codeRule = (spec, module) => {
 	};
 };
 //#endregion
-//#region src/rules/code/architecture.ts
-const make$4 = (name, title, check, hint) => codeRule({
-	categoryId: "repository-contracts",
-	check,
-	hint,
-	id: `architecture-${name}`,
-	scope: { include: ["**/*.{ts,tsx,js,jsx,mjs,cjs,mts,cts}"] },
-	source: {
-		line: 1,
-		path: "skills/codebase-architecture/references/guardrail-tooling.md",
-		repo: "mblode/agent-skills"
-	},
-	status: "review-only",
-	title,
-	unit: ["source"]
-}, "src/rules/code/architecture.ts");
-const ARCHITECTURE_RULES = [
-	make$4("declared-import-boundary", "Import violates a declared module boundary", (u) => {
-		const boundaries = u.facts?.repository.policy?.boundaries?.filter((b) => matchesAny(u.file, [b.from]));
-		if (!boundaries?.length) return none;
-		if (!u.facts?.imports) throw new UnresolvedError(u.facts?.parseError ?? "Import facts unavailable");
-		for (const item of u.facts.imports) {
-			const resolved = item.name.startsWith(".") ? u.facts.repository.resolve(u.file, item.name) : void 0;
-			const boundary = boundaries.find((b) => matchesAny(item.name, [b.disallow]) || resolved !== void 0 && matchesAny(resolved, [b.disallow]));
-			if (boundary) return {
-				evidence: `${item.name}: ${boundary.reason}`,
-				fired: true,
-				offset: item.offset
-			};
-		}
-		return none;
-	}, "Use the declared public interface or change the explicit architecture policy with its owner. Patterns match import specifiers and repository-relative paths for relative imports."),
-	make$4("deprecated-import", "Import uses a declared deprecated API", (u) => {
-		const deprecated = u.facts?.repository.policy?.deprecatedImports;
-		if (!deprecated || Object.keys(deprecated).length === 0) return none;
-		if (!u.facts?.imports) throw new UnresolvedError(u.facts?.parseError ?? "Import facts unavailable");
-		for (const item of u.facts.imports) {
-			const replacement = deprecated[item.name];
-			if (replacement) return {
-				evidence: `${item.name}: use ${replacement}`,
-				fired: true,
-				offset: item.offset
-			};
-		}
-		return none;
-	}, "Use the replacement named in the repository's deprecation contract."),
-	make$4("generated-regeneration-hint", "Declared generated file has no regeneration guidance", (u) => {
-		const generated = u.facts?.repository.policy?.generated;
-		if (!generated?.length || !matchesAny(u.file, generated)) return none;
-		const banner = u.text.split("\n").slice(0, 12).join("\n");
-		return /generat/i.test(banner) && /(?:regenerat|npm run|pnpm |yarn |bun |codegen|protoc)/i.test(banner) ? none : {
-			evidence: "Declared generated output lacks a regeneration hint in its header",
-			fired: true,
-			offset: 0
-		};
-	}, "Have the generator emit a banner naming the regeneration command or canonical instructions.")
-];
-//#endregion
-//#region src/extract/arbitrary.ts
-const literalArbitraryValues = (classes) => classes.filter((className) => {
-	const value = baseClass(className).match(/^-?[\w-]+-\[(.+?)\](?:\/[^\s]+)?!?$/u)?.[1]?.replace(/^(?:length|color):/u, "");
-	if (!value || /var\(|env\(|theme\(|^--|^(?:calc|min|max|clamp|minmax|repeat|url)\(/u.test(value)) return false;
-	return /^-?(?:\d+(?:\.\d+)?|\.\d+)(?:px|rem|em|ms|s|deg)?$/u.test(value) || /^#[\da-f]{3,8}$/iu.test(value) || /^(?:rgb|rgba|hsl|hsla|oklab|oklch|color)\(/u.test(value);
-});
-//#endregion
 //#region src/rules/code/classes.ts
 const MODULE$1 = "src/rules/code/classes.ts";
 const ANIMATION = "skills/ui-animation/references";
@@ -2883,40 +2746,13 @@ const CLASS_RULES = [
 	})
 ];
 //#endregion
-//#region src/analysis/html.ts
-const text = (node) => "value" in node ? node.value : "childNodes" in node ? node.childNodes.map(text).join("") : "";
-const htmlElements = (source) => {
-	const output = [];
-	const visit = (node, inHead = false) => {
-		const head = inHead || "tagName" in node && node.tagName === "head";
-		if ("tagName" in node && node.namespaceURI === "http://www.w3.org/1999/xhtml" && node.sourceCodeLocation && [
-			"title",
-			"meta",
-			"link",
-			"script",
-			"img"
-		].includes(node.tagName)) output.push({
-			attrs: Object.fromEntries(node.attrs.map((a) => [a.name, a.value])),
-			inHead: head,
-			offset: node.sourceCodeLocation.startOffset,
-			tag: node.tagName,
-			text: text(node)
-		});
-		if ("childNodes" in node) for (const child of node.childNodes) visit(child, head);
-	};
-	visit(parse$1(source, { sourceCodeLocationInfo: true }));
-	return output;
-};
-//#endregion
 //#region src/analysis/repository.ts
 const descendants = (node) => [node, ...(node.children ?? []).flatMap(descendants)];
 const nodeText = (node) => node.value ?? (node.children ?? []).map(nodeText).join("");
 var Repository = class {
 	root;
 	contents = /* @__PURE__ */ new Map();
-	policy;
-	constructor(root, policy) {
-		this.policy = policy;
+	constructor(root) {
 		this.root = fs.realpathSync(root);
 	}
 	resolve(file, target) {
@@ -2991,15 +2827,7 @@ const importsFrom = (value, output) => {
 };
 const sourceFacts = (file, text, repository) => {
 	const facts = { repository };
-	if (/\.html?$/.test(file)) {
-		facts.html = htmlElements(text);
-		facts.images = facts.html.filter((element) => element.tag === "img").map((element) => ({
-			attributes: Object.keys(element.attrs),
-			offset: element.offset,
-			spread: false
-		}));
-	}
-	if (/\.mdx?$/.test(file) || /(?:^|\/)llms(?:-full)?\.txt$/.test(file)) facts.document = fromMarkdown(text.replace(/^---\r?\n[\s\S]*?\r?\n---(?=\r?\n|$)/, (m) => m.replaceAll(/[^\r\n]/g, " ")), {
+	if (/\.mdx?$/.test(file)) facts.document = fromMarkdown(text.replace(/^---\r?\n[\s\S]*?\r?\n---(?=\r?\n|$)/, (m) => m.replaceAll(/[^\r\n]/g, " ")), {
 		extensions: [gfm()],
 		mdastExtensions: [gfmFromMarkdown()]
 	});
@@ -3032,96 +2860,8 @@ const sourceFacts = (file, text, repository) => {
 	return facts;
 };
 //#endregion
-//#region src/rules/code/discovery.ts
-const at$2 = (evidence, offset = 0) => ({
-	evidence,
-	fired: true,
-	offset
-});
-const html = (u) => {
-	if (!u.facts?.html || !/<!doctype\s+html\b|<html(?:\s|>)/i.test(u.text)) throw new UnresolvedError("Needs a complete HTML document; framework metadata and fragments require rendered evidence");
-	return u.facts.html;
-};
-const make$3 = (id, title, include, source, check, hint) => codeRule({
-	categoryId: id.startsWith("seo-") ? "search-discovery" : "instruction-quality",
-	check,
-	hint,
-	id,
-	scope: {
-		exclude: [
-			"**/supabase/templates/**",
-			"**/emails/**",
-			"**/email/**"
-		],
-		include
-	},
-	source: {
-		line: 1,
-		path: `skills/${source}`,
-		repo: "mblode/agent-skills"
-	},
-	status: "review-only",
-	title,
-	unit: ["source"]
-}, "src/rules/code/discovery.ts");
-const HTML = ["**/*.html", "**/*.htm"];
-const SEO = "seo/references/audit.md";
-const LLM = "agent-ready/references/docs-afdocs.md";
-const canonical = (u) => html(u).filter((n) => n.inHead && n.tag === "link" && n.attrs.rel?.toLowerCase().split(/\s+/).includes("canonical"));
-const DISCOVERY_RULES = [
-	make$3("seo-document-title", "HTML document needs one nonempty title", HTML, SEO, (u) => {
-		const titles = html(u).filter((n) => n.inHead && n.tag === "title");
-		return titles.length !== 1 || !titles[0].text.trim() ? at$2(`Found ${titles.length} HTML head titles${titles.length === 1 ? "; title is empty" : ""}`, titles[0]?.offset) : none;
-	}, "Provide one meaningful title in the HTML head. SVG titles do not name the page."),
-	make$3("seo-empty-description", "Declared meta description is empty", HTML, SEO, (u) => {
-		const empty = html(u).find((n) => n.inHead && n.tag === "meta" && n.attrs.name?.toLowerCase() === "description" && !n.attrs.content?.trim());
-		return empty ? at$2("Empty meta description", empty.offset) : none;
-	}, "Write a page-specific description, or omit a deliberately unspecified description."),
-	make$3("seo-conflicting-canonicals", "HTML declares conflicting canonical destinations", HTML, SEO, (u) => {
-		const links = canonical(u);
-		return new Set(links.map((n) => n.attrs.href?.trim()).filter(Boolean)).size > 1 ? at$2("Multiple distinct canonical destinations", links[1].offset) : none;
-	}, "Declare a single intended canonical destination; verify the deployed URL and HTTP headers."),
-	make$3("seo-empty-canonical", "Canonical link has no destination", HTML, SEO, (u) => {
-		const empty = canonical(u).find((n) => !n.attrs.href?.trim());
-		return empty ? at$2("Canonical link has an empty or missing href", empty.offset) : none;
-	}, "Set the intended canonical URL or remove an unintended canonical declaration."),
-	make$3("seo-jsonld-syntax", "JSON-LD script is not valid JSON", HTML, SEO, (u) => {
-		for (const node of html(u).filter((n) => n.tag === "script" && n.attrs.type?.trim().toLowerCase() === "application/ld+json")) try {
-			JSON.parse(node.text);
-		} catch {
-			return at$2("JSON-LD cannot be parsed as JSON", node.offset);
-		}
-		return none;
-	}, "Fix the JSON syntax. Valid JSON alone does not establish schema validity or rich-result eligibility."),
-	make$3("seo-robots-sitemap-url", "Robots sitemap directive needs an absolute HTTP URL", ["**/robots.txt"], "seo/references/indexing-policy.md", (u) => {
-		for (const match of u.text.matchAll(/^\s*sitemap\s*:\s*([^\r\n]*)/gim)) {
-			const value = match[1].split("#")[0].trim();
-			try {
-				const url = new URL(value);
-				if (["http:", "https:"].includes(url.protocol) && url.hostname && !/\s/.test(value)) continue;
-			} catch {}
-			return at$2("Sitemap directive is not an absolute HTTP(S) URL", match.index);
-		}
-		return none;
-	}, "Use the deployed sitemap's absolute URL. Fetch it separately to verify status and content."),
-	make$3("authoring-llms-title", "Agent index must start with an H1", ["**/llms.txt"], LLM, (u) => {
-		const document = u.facts?.document;
-		if (!document) throw new UnresolvedError("Markdown structure unavailable");
-		const first = document.children?.[0];
-		return first?.type === "heading" && first.depth === 1 ? none : at$2("llms.txt does not begin with an H1");
-	}, "Start llms.txt with the site's name as an H1, then describe and link its real documentation."),
-	make$3("authoring-llms-links", "Agent index has no documentation links", ["**/llms.txt"], LLM, (u) => {
-		if (!u.facts?.document) throw new UnresolvedError("Markdown structure unavailable");
-		return descendants(u.facts.document).some((n) => ["link", "definition"].includes(n.type) && n.url?.trim()) ? none : at$2("No Markdown link destinations in llms.txt");
-	}, "Link the existing documentation pages that an agent should read."),
-	make$3("authoring-llms-size", "Agent index exceeds the recommended character budget", ["**/llms.txt"], LLM, (u) => {
-		const count = [...u.text].length;
-		return count > 5e4 ? at$2(`llms.txt contains ${count} characters; recommended maximum is 50000`) : none;
-	}, "Keep the index small and link separate documents or nested indexes.")
-];
-//#endregion
 //#region src/rules/code/documents.ts
-const at$1 = (node, evidence) => ({
+const at = (node, evidence) => ({
 	evidence,
 	fired: true,
 	offset: node.position?.start.offset ?? 0
@@ -3131,7 +2871,7 @@ const document = (unit) => {
 	return unit.facts.document;
 };
 const nodes = (unit) => descendants(document(unit));
-const make$2 = (name, title, source, include, check, hint, authoring = false) => codeRule({
+const make$1 = (name, title, source, include, check, hint, authoring = false) => codeRule({
 	categoryId: authoring ? "instruction-quality" : "reference-reading",
 	check,
 	hint,
@@ -3155,11 +2895,11 @@ const INSTRUCTIONS = [
 const DOCS = ["**/*.md"];
 const README_SOURCE = "readme-creator/references/quality-checklist.md";
 const DOCUMENT_RULES = [
-	make$2("readme-scaffold", "README still contains scaffold instructions", README_SOURCE, README, (u) => {
+	make$1("readme-scaffold", "README still contains scaffold instructions", README_SOURCE, README, (u) => {
 		const n = nodes(u).find((candidate) => candidate.type === "paragraph" && /This is a \[?Next\.js.*bootstrapped with|This template provides a minimal setup to get React working in Vite/i.test(nodeText(candidate)));
-		return n ? at$1(n, "Default scaffold introduction") : none;
+		return n ? at(n, "Default scaffold introduction") : none;
 	}, "Replace scaffold instructions with what the product does and how a consumer uses it."),
-	make$2("readme-description", "README has no introductory description", README_SOURCE, README, (u) => {
+	make$1("readme-description", "README has no introductory description", README_SOURCE, README, (u) => {
 		const children = document(u).children ?? [];
 		const stop = children.findIndex((n) => n.type === "heading" && (n.depth ?? 0) > 1);
 		return children.slice(0, stop === -1 ? children.length : stop).some((n) => n.type === "paragraph" && nodeText(n).trim().length > 0) ? none : {
@@ -3168,33 +2908,33 @@ const DOCUMENT_RULES = [
 			offset: 0
 		};
 	}, "Explain what a reader can do with the product before listing setup steps."),
-	make$2("readme-quickstart-elision", "Quickstart example contains an unfinished placeholder", README_SOURCE, README, (u) => {
+	make$1("readme-quickstart-elision", "Quickstart example contains an unfinished placeholder", README_SOURCE, README, (u) => {
 		let heading = "";
 		for (const n of document(u).children ?? []) {
 			if (n.type === "heading") heading = nodeText(n);
-			if (n.type === "code" && /quick\s?start|getting started/i.test(heading) && /^\s*(?:\.\.\.|\/\/\s*(?:TODO|your code here)|#\s*TODO)\s*$/m.test(n.value ?? "")) return at$1(n, "Quickstart contains an elided implementation");
+			if (n.type === "code" && /quick\s?start|getting started/i.test(heading) && /^\s*(?:\.\.\.|\/\/\s*(?:TODO|your code here)|#\s*TODO)\s*$/m.test(n.value ?? "")) return at(n, "Quickstart contains an elided implementation");
 		}
 		return none;
 	}, "Provide a complete first-run example; move intentionally partial examples to a tutorial."),
-	make$2("document-empty-heading", "A section has no content", "docs-writing/rules/structure-no-filler-sections.md", DOCS, (u) => {
+	make$1("document-empty-heading", "A section has no content", "docs-writing/rules/structure-no-filler-sections.md", DOCS, (u) => {
 		const children = document(u).children ?? [];
 		for (const [i, n] of children.entries()) {
 			if (n.type !== "heading") continue;
 			const next = children[i + 1];
-			if (!next || next.type === "heading" && (next.depth ?? 0) <= (n.depth ?? 0)) return at$1(n, `Empty section: ${nodeText(n)}`);
+			if (!next || next.type === "heading" && (next.depth ?? 0) <= (n.depth ?? 0)) return at(n, `Empty section: ${nodeText(n)}`);
 		}
 		return none;
 	}, "Add the section's content or remove its heading."),
-	make$2("document-heading-order", "Heading skips a structural level", "docs-writing/rules/format-semantic-html.md", DOCS, (u) => {
+	make$1("document-heading-order", "Heading skips a structural level", "docs-writing/rules/format-semantic-html.md", DOCS, (u) => {
 		let previous = 0;
 		for (const n of nodes(u).filter((candidate) => candidate.type === "heading")) {
 			const depth = n.depth ?? 1;
-			if (previous > 0 && depth > previous + 1) return at$1(n, `Heading level jumps from ${previous} to ${depth}`);
+			if (previous > 0 && depth > previous + 1) return at(n, `Heading level jumps from ${previous} to ${depth}`);
 			previous = depth;
 		}
 		return none;
 	}, "Nest heading levels in order so the document outline reflects its structure."),
-	make$2("document-broken-local-link", "Document links to a missing local file", "docs-writing/rules/review-verify-links.md", DOCS, (u) => {
+	make$1("document-broken-local-link", "Document links to a missing local file", "docs-writing/rules/review-verify-links.md", DOCS, (u) => {
 		const repo = u.facts.repository;
 		for (const n of nodes(u).filter((candidate) => [
 			"link",
@@ -3207,26 +2947,26 @@ const DOCUMENT_RULES = [
 			try {
 				target = decodeURIComponent(url.split(/[?#]/)[0]);
 			} catch {
-				return at$1(n, "Malformed URL encoding in local link");
+				return at(n, "Malformed URL encoding in local link");
 			}
 			if (!/\.(?:md|mdx|png|jpe?g|svg|gif|webp|pdf)$/i.test(target)) continue;
 			const resolved = repo.resolve(u.file, target);
 			if (resolved === void 0) throw new UnresolvedError("Link points outside the repository");
-			if (!repo.exists(resolved)) return at$1(n, `Missing local target: ${target}`);
+			if (!repo.exists(resolved)) return at(n, `Missing local target: ${target}`);
 		}
 		return none;
 	}, "Correct the link or provide the referenced file. Generated site routes need a route-aware check."),
-	make$2("instruction-missing-script", "Instruction invokes an undefined package script", "agents-md/references/quick-checklist.md", INSTRUCTIONS, (u) => {
+	make$1("instruction-missing-script", "Instruction invokes an undefined package script", "agents-md/references/quick-checklist.md", INSTRUCTIONS, (u) => {
 		const manifest = u.facts.repository.manifest(u.file);
 		if (!manifest) throw new UnresolvedError("No readable package manifest for this instruction file");
 		const scripts = manifest.value.scripts;
 		for (const n of nodes(u).filter((candidate) => ["code", "inlineCode"].includes(candidate.type))) for (const m of (n.value ?? "").matchAll(/\bnpm run ([\w:-]+)\b/g)) {
 			if (/--(?:workspace|prefix)|\bcd\s/.test(n.value ?? "")) continue;
-			if (!scripts || !(m[1] in scripts)) return at$1(n, `Script ${m[1]} is absent from ${manifest.file}`);
+			if (!scripts || !(m[1] in scripts)) return at(n, `Script ${m[1]} is absent from ${manifest.file}`);
 		}
 		return none;
 	}, "Name a script in the applicable package manifest, or state the workspace where the command runs.", true),
-	make$2("skill-frontmatter", "Skill frontmatter is missing or invalid", "agent-skills-creator/references/format-specification.md", ["**/SKILL.md"], (u) => {
+	make$1("skill-frontmatter", "Skill frontmatter is missing or invalid", "agent-skills-creator/references/format-specification.md", ["**/SKILL.md"], (u) => {
 		const match = u.text.match(/^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/);
 		if (!match) return {
 			evidence: "Missing YAML frontmatter",
@@ -3255,15 +2995,15 @@ const DOCUMENT_RULES = [
 		}
 		return none;
 	}, "Supply valid YAML with name and description; run the skill repository's full validator for its remaining conventions.", true),
-	make$2("readme-license-link", "README license link points to a missing file", README_SOURCE, README, (u) => {
+	make$1("readme-license-link", "README license link points to a missing file", README_SOURCE, README, (u) => {
 		for (const n of nodes(u).filter((candidate) => candidate.type === "link")) {
 			if (!/^(?:\.\/)?LICENSE(?:\.[\w-]+)?$/i.test(n.url ?? "")) continue;
 			const target = u.facts.repository.resolve(u.file, n.url);
-			if (target && !u.facts.repository.exists(target)) return at$1(n, `Missing license target: ${n.url}`);
+			if (target && !u.facts.repository.exists(target)) return at(n, `Missing license target: ${n.url}`);
 		}
 		return none;
 	}, "Link to the project's actual license file."),
-	make$2("readme-install-name", "README installs an old or unrelated package name", README_SOURCE, README, (u) => {
+	make$1("readme-install-name", "README installs an old or unrelated package name", README_SOURCE, README, (u) => {
 		const manifest = u.facts.repository.manifest(u.file);
 		if (!manifest || manifest.value.private === true || typeof manifest.value.name !== "string") throw new UnresolvedError("Published package identity is not established");
 		let section = "";
@@ -3271,7 +3011,7 @@ const DOCUMENT_RULES = [
 			if (n.type === "heading") section = nodeText(n);
 			if (n.type !== "code" || !/^install(?:ation)?$/i.test(section)) continue;
 			const command = (n.value ?? "").match(/^\s*(?:npm (?:install|i)|pnpm add|yarn add|bun add)\s+((?:@[\w.-]+\/)?[\w.-]+)(?:@[^\s]+)?\s*$/m);
-			if (command && command[1] !== manifest.value.name) return at$1(n, `Install names ${command[1]}; manifest names ${manifest.value.name}`);
+			if (command && command[1] !== manifest.value.name) return at(n, `Install names ${command[1]}; manifest names ${manifest.value.name}`);
 		}
 		return none;
 	}, "Check the intended distribution package. Keep companion-package and workspace instructions explicit.")
@@ -3309,11 +3049,7 @@ const IMAGE_RULES = [{
 	},
 	hint: spec.hint,
 	id: spec.id,
-	scope: { include: [
-		"**/*.tsx",
-		"**/*.jsx",
-		"**/*.html"
-	] },
+	scope: { include: ["**/*.tsx", "**/*.jsx"] },
 	source: {
 		line: 9,
 		path: `skills/ui-design/rules/${spec.source}.md`,
@@ -3325,141 +3061,6 @@ const IMAGE_RULES = [{
 	unit: ["source"]
 }, "src/rules/code/images.ts"));
 //#endregion
-//#region src/rules/code/repository.ts
-const at = (evidence, offset = 0) => ({
-	evidence,
-	fired: true,
-	offset
-});
-const object$2 = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : {};
-const json = (u) => {
-	try {
-		return object$2(JSON.parse(u.text));
-	} catch {
-		throw new UnresolvedError("JSON is not parseable");
-	}
-};
-const builtins = /* @__PURE__ */ new Set([...builtinModules, ...builtinModules.map((n) => `node:${n}`)]);
-const make$1 = (domain, id, title, include, source, check, hint) => codeRule({
-	categoryId: domain === "dx" ? "package-contracts" : "repository-contracts",
-	check,
-	hint,
-	id: `${domain}-${id}`,
-	scope: { include },
-	source: {
-		line: 1,
-		path: `skills/${source}`,
-		repo: "mblode/agent-skills"
-	},
-	status: "review-only",
-	title,
-	unit: ["source"]
-}, "src/rules/code/repository.ts");
-const GUARD = "codebase-architecture/references/guardrail-tooling.md";
-const PKG = ["**/package.json"];
-const CODE = ["**/*.{ts,tsx,js,jsx,mjs,cjs,mts,cts}"];
-const REPOSITORY_RULES = [
-	make$1("dx", "package-entry-target", "Package entry points to a missing artifact", PKG, "scaffold-cli/references/post-scaffold.md", (u) => {
-		const value = json(u);
-		const entries = [];
-		for (const key of [
-			"main",
-			"module",
-			"types",
-			"typings"
-		]) if (typeof value[key] === "string") entries.push(value[key]);
-		if (typeof value.bin === "string") entries.push(value.bin);
-		else entries.push(...Object.values(object$2(value.bin)).filter((v) => typeof v === "string"));
-		const visit = (v) => {
-			if (typeof v === "string") entries.push(v);
-			else if (v && typeof v === "object") for (const child of Object.values(v)) visit(child);
-		};
-		visit(value.exports);
-		for (const entry of entries) {
-			if (entry.includes("*")) continue;
-			const resolved = u.facts.repository.resolve(u.file, entry);
-			if (resolved === void 0) return at(`Entry escapes repository: ${entry}`);
-			if (!u.facts.repository.exists(resolved)) {
-				if (/^(?:\.\/)?(?:dist|build|lib)\//.test(entry) && object$2(value.scripts).build) throw new UnresolvedError(`Build output not available: ${entry}. Build or inspect the packed artifact.`);
-				return at(`Missing package entry: ${entry}`);
-			}
-		}
-		return none;
-	}, "Build and inspect the package, then make bin, exports, and declaration paths match its actual artifacts."),
-	make$1("dx", "package-bin-shebang", "CLI executable has no Node shebang", PKG, "scaffold-cli/references/scaffold-source.md", (u) => {
-		const value = json(u);
-		const bins = typeof value.bin === "string" ? [value.bin] : Object.values(object$2(value.bin)).filter((v) => typeof v === "string");
-		for (const bin of bins) {
-			if (!/\.[cm]?js$/.test(bin)) continue;
-			const resolved = u.facts.repository.resolve(u.file, bin);
-			const text = resolved === void 0 ? void 0 : u.facts.repository.read(resolved);
-			if (text === void 0) throw new UnresolvedError(`CLI artifact unavailable: ${bin}`);
-			if (!/^#![^\n]*\bnode\b/.test(text)) return at(`Node CLI lacks shebang: ${bin}`);
-			if (/^#![^\n]*\n#!/.test(text)) return at(`Duplicate CLI shebang: ${bin}`);
-		}
-		return none;
-	}, "Emit exactly one Node shebang in the published executable."),
-	make$1("dx", "exports-mixed-keys", "Package exports mixes conditions and subpaths", PKG, "dx-audit/rules/api-stable-contract.md", (u) => {
-		const keys = Object.keys(object$2(json(u).exports));
-		return keys.some((k) => k.startsWith(".")) && keys.some((k) => !k.startsWith(".")) ? at("Exports mixes subpath keys with condition keys at the same level") : none;
-	}, "Put conditions inside each exported subpath, or use a conditions-only root export."),
-	make$1("architecture", "undeclared-import", "Import has no declared package dependency", CODE, GUARD, (u) => {
-		if (!u.facts?.imports) throw new UnresolvedError(u.facts?.parseError ?? "Import facts unavailable");
-		const manifest = u.facts.repository.manifest(u.file);
-		if (!manifest) throw new UnresolvedError("No readable package manifest");
-		const value = manifest.value;
-		const declared = /* @__PURE__ */ new Set([value.name, ...[
-			"dependencies",
-			"devDependencies",
-			"peerDependencies",
-			"optionalDependencies"
-		].flatMap((key) => Object.keys(object$2(value[key])))]);
-		for (const item of u.facts.imports) {
-			if (/^(?:\.|\/|#|~|[a-z]+:)/i.test(item.name) || builtins.has(item.name)) continue;
-			const name = item.name.startsWith("@") ? item.name.split("/").slice(0, 2).join("/") : item.name.split("/")[0];
-			if (declared.has(name)) continue;
-			const tsconfig = u.facts.repository.resolve(manifest.file, "tsconfig.json");
-			if (tsconfig && u.facts.repository.exists(tsconfig)) throw new UnresolvedError(`Undeclared ${name} may resolve through TypeScript aliases; resolve the project graph`);
-			return at(`Import ${name} is absent from ${manifest.file}`, item.offset);
-		}
-		return none;
-	}, "Declare the dependency in the consuming package, or configure its alias resolution."),
-	make$1("architecture", "cross-package-relative-import", "Relative import bypasses a package boundary", CODE, GUARD, (u) => {
-		if (!u.facts?.imports) throw new UnresolvedError(u.facts?.parseError ?? "Import facts unavailable");
-		const own = u.facts.repository.manifest(u.file);
-		if (!own) throw new UnresolvedError("No readable package manifest");
-		for (const item of u.facts.imports.filter((i) => i.name.startsWith("."))) {
-			const target = u.facts.repository.resolve(u.file, item.name);
-			if (!target) continue;
-			const other = u.facts.repository.manifest(target);
-			if (other && other.file !== own.file) return at(`Relative import crosses from ${own.file} to ${other.file}: ${item.name}`, item.offset);
-		}
-		return none;
-	}, "Import through the sibling package's public entry and declare the dependency, unless an explicit workspace convention permits this edge."),
-	make$1("architecture", "missing-tsconfig-reference", "TypeScript project reference points to a missing target", ["**/tsconfig*.json"], GUARD, (u) => {
-		const value = json(u);
-		for (const entry of Array.isArray(value.references) ? value.references : []) {
-			const target = object$2(entry).path;
-			if (typeof target !== "string") continue;
-			const resolved = u.facts.repository.resolve(u.file, target);
-			if (!resolved) throw new UnresolvedError("Project reference outside repository");
-			if (!u.facts.repository.exists(resolved)) return at(`Missing TypeScript reference: ${target}`);
-		}
-		return none;
-	}, "Correct the project reference or restore the referenced project."),
-	make$1("architecture", "missing-local-config-extends", "Config extends a missing local file", ["**/tsconfig*.json"], GUARD, (u) => {
-		const value = json(u);
-		const bases = Array.isArray(value.extends) ? value.extends : [value.extends];
-		for (const base of bases) {
-			if (typeof base !== "string" || !base.startsWith(".")) continue;
-			const resolved = u.facts.repository.resolve(u.file, base);
-			if (resolved === void 0) throw new UnresolvedError("Extended config outside repository");
-			if (!u.facts.repository.exists(resolved) && !u.facts.repository.exists(`${resolved}.json`)) return at(`Missing extended config: ${base}`);
-		}
-		return none;
-	}, "Update extends to the existing configuration path.")
-];
-//#endregion
 //#region src/rules/code/skill-classes.ts
 const make = (id, title, categoryId, source, check, hint) => codeRule({
 	categoryId,
@@ -3729,7 +3330,6 @@ const CODE_RULES = [
 			preconditions: {
 				docType: [
 					"readme",
-					"personal",
 					"tutorial",
 					"howto",
 					"reference",
@@ -3752,11 +3352,8 @@ const CODE_RULES = [
 	],
 	...CLASS_RULES,
 	...DOCUMENT_RULES,
-	...DISCOVERY_RULES,
 	...IMAGE_RULES,
-	...REPOSITORY_RULES,
-	...SKILL_CLASS_RULES,
-	...ARCHITECTURE_RULES
+	...SKILL_CLASS_RULES
 ];
 //#endregion
 //#region src/rules/load.ts
@@ -4075,15 +3672,133 @@ const runEval = async (options, ctx = {}) => {
 	};
 };
 //#endregion
+//#region src/scan/storage.ts
+const hash = (value) => createHash("sha256").update(JSON.stringify(value)).digest("hex");
+const object$1 = (value) => !!value && typeof value === "object" && !Array.isArray(value);
+const readJson = (file) => {
+	try {
+		return JSON.parse(fs.readFileSync(file, "utf-8"));
+	} catch {
+		throw new InputError("INVALID_SCAN_INPUT", `Cannot read JSON input: ${file}`);
+	}
+};
+const writeJson = (file, value) => {
+	fs.mkdirSync(path.dirname(path.resolve(file)), { recursive: true });
+	const temp = `${file}.${randomUUID()}.tmp`;
+	try {
+		fs.writeFileSync(temp, `${JSON.stringify(value, null, 2)}\n`, { flag: "wx" });
+		fs.renameSync(temp, file);
+	} finally {
+		fs.rmSync(temp, { force: true });
+	}
+};
+//#endregion
+//#region src/scan/samples.ts
+const makeSamples = (units, rules, answers, negatives, perStratum = 3, sourceRepo = "scan") => {
+	const buckets = /* @__PURE__ */ new Map();
+	const seen = /* @__PURE__ */ new Set();
+	const semanticRules = rules.filter((rule) => rule.question);
+	for (const unit of units) for (const rule of semanticRules) {
+		const probability = answers.get(unit.id)?.[rule.id] ?? (negatives.get(unit.id)?.has(rule.id) ? 0 : void 0);
+		if (probability === void 0) continue;
+		const { docType, role, headingAbove } = unit.context;
+		const context = {
+			docType,
+			headingAbove,
+			role,
+			...Object.fromEntries((rule.question.context ?? []).filter((key) => key !== "neighbours").map((key) => [key, unit.context[key]]))
+		};
+		const rubric = buildQuestion(rule);
+		const neighbours = rule.question.context?.includes("neighbours") ? unit.neighbours : void 0;
+		const evidence = [
+			rule.id,
+			unit.text,
+			context,
+			neighbours,
+			unit.classes,
+			rubric
+		];
+		const unique = hash(evidence);
+		if (seen.has(unique)) continue;
+		seen.add(unique);
+		const id = `scan-${hash([
+			sourceRepo,
+			unit.file,
+			...evidence
+		]).slice(0, 24)}`;
+		const sample = {
+			criterion: rule.question.instructions,
+			id,
+			item: {
+				categoryId: rule.categoryId,
+				classes: unit.classes,
+				context,
+				id,
+				kind: unit.kind,
+				neighbours,
+				source: {
+					path: unit.file,
+					repo: sourceRepo
+				},
+				split: splitFor(`${sourceRepo}/${unit.file}`),
+				text: unit.text
+			},
+			label: null,
+			rubric,
+			ruleId: rule.id
+		};
+		const bucket = `${rule.id}:${docType}:${probability < rule.thresholds.review ? "negative" : probability < rule.thresholds.act ? "review" : "high"}`;
+		const list = buckets.get(bucket) ?? [];
+		list.push(sample);
+		buckets.set(bucket, list);
+	}
+	return [...buckets.values()].flatMap((list) => list.toSorted((a, b) => a.id.localeCompare(b.id)).slice(0, perStratum)).toSorted((a, b) => a.id.localeCompare(b.id));
+};
+const labelsToCorpus = (file, destination, rulesDir) => {
+	const raw = readJson(file);
+	if (!object$1(raw) || raw.version !== 1 && raw.version !== 2 || !Array.isArray(raw.samples)) throw new InputError("INVALID_LABELS", "Expected a version 1 or 2 blind sample file.");
+	if (raw.completed !== void 0 && raw.completed !== raw.samples.length) throw new InputError("INVALID_LABELS", "Labeling is incomplete. Review every sample before importing.");
+	const annotation = raw.annotation;
+	const ai = object$1(annotation) && annotation.source === "ai";
+	if (annotation !== void 0 && (!ai || typeof annotation.model !== "string" || !annotation.model.trim() || typeof annotation.promptHash !== "string" || !/^[a-f0-9]{64}$/.test(annotation.promptHash))) throw new InputError("INVALID_LABELS", "AI annotation requires a model and prompt hash.");
+	const ids = /* @__PURE__ */ new Set();
+	const items = [];
+	for (const row of raw.samples) {
+		if (!object$1(row) || typeof row.id !== "string" || ids.has(row.id) || typeof row.ruleId !== "string" || raw.version === 2 && (!object$1(row.rubric) || row.rubric.type !== "noul" || typeof row.criterion !== "string" || row.rubric.instructions !== row.criterion) || !object$1(row.item) || row.item.id !== row.id || row.label !== null && typeof row.label !== "boolean") throw new InputError("INVALID_LABELS", "Samples require unique IDs and boolean or null labels.");
+		ids.add(row.id);
+		if (row.label === null) continue;
+		items.push({
+			...row.item,
+			labelSource: ai ? "ai" : "hand",
+			...ai ? {
+				labelModel: annotation.model,
+				labelPromptHash: annotation.promptHash
+			} : {},
+			labels: { [row.ruleId]: row.label }
+		});
+	}
+	if (!items.length) throw new InputError("INVALID_LABELS", "No labels supplied. Set label to true or false after review.");
+	const temporary = fs.mkdtempSync(path.join(os.tmpdir(), "taste-labels-"));
+	try {
+		fs.writeFileSync(path.join(temporary, "labels.jsonl"), items.map((item) => JSON.stringify(item)).join("\n"));
+		loadCorpus(temporary, loadRules(resolveRulesDir(rulesDir), { allowDraft: true }));
+	} finally {
+		fs.rmSync(temporary, {
+			force: true,
+			recursive: true
+		});
+	}
+	fs.writeFileSync(destination, `${items.map((item) => JSON.stringify(item)).join("\n")}\n`, { flag: "wx" });
+	return items.length;
+};
+//#endregion
 //#region src/commands/eval.ts
 function registerEvalCommand(program) {
-	program.command("eval").enablePositionalOptions().description("Run every rule over its labelled corpus and report precision, recall and calibration").option("--corpus <path>", "Corpus directory (default: packaged data/corpus)").option("--rules <path>", "Rules directory").option("--output <format>", "text or json", "text").option("--only <ids>", "Comma-separated rule ids").option("--split <name>", "dev, holdout or all", "all").option("--include-weak", "Include manifest-weak labels").option("--check", "Fail on reference disagreement; incomplete evaluation exits 2").option("--dry-run", "Plan without calling Jev").option("--no-cache", "Ignore cached answers").option("--results-dir <path>", "Where logs and cache live").option("--model <id>", "Jev model id", DEFAULT_MODEL).action(async (options) => {
-		if (!["text", "json"].includes(options.output)) throw new Error("--output must be text or json");
-		if (![
-			"dev",
-			"holdout",
-			"all"
-		].includes(options.split)) throw new Error("--split must be dev, holdout or all");
+	const command = program.command("eval").enablePositionalOptions().description("Run every rule over its labelled corpus and report precision, recall and calibration").option("--corpus <path>", "Corpus directory (default: packaged data/corpus)").option("--rules <path>", "Rules directory").addOption(new Option("--output <format>", "Output format").choices(["text", "json"]).default("text")).option("--only <ids>", "Comma-separated rule ids").addOption(new Option("--split <name>", "Evaluation split").choices([
+		"dev",
+		"holdout",
+		"all"
+	]).default("all")).option("--include-weak", "Include manifest-weak labels").option("--check", "Fail on reference disagreement; incomplete evaluation exits 2").option("--dry-run", "Plan without calling Jev").option("--no-cache", "Ignore cached answers").option("--results-dir <path>", "Where logs and cache live").option("--model <id>", "Jev model id", DEFAULT_MODEL).action(async (options) => {
 		const result = await runEval({
 			check: options.check,
 			corpusDir: options.corpus,
@@ -4098,8 +3813,8 @@ function registerEvalCommand(program) {
 		});
 		process.stdout.write(options.output === "json" ? `${JSON.stringify(result, null, 2)}\n` : result.report);
 		process.exitCode = result.exitCode;
-	}).command("coverage").description("Inspect label balance, document coverage and split overlap without API calls").option("--corpus <path>", "Corpus directory").option("--rules <path>", "Rules directory").option("--include-weak", "Include weak labels").option("--output <format>", "text or json", "text").action((options) => {
-		if (!["text", "json"].includes(options.output)) throw new Error("--output must be text or json");
+	});
+	command.command("coverage").description("Inspect label balance, document coverage and split overlap without API calls").option("--corpus <path>", "Corpus directory").option("--rules <path>", "Rules directory").option("--include-weak", "Include weak labels").addOption(new Option("--output <format>", "Output format").choices(["text", "json"]).default("text")).action((options) => {
 		const rulesDir = resolveRulesDir(options.rules);
 		const rules = loadRules(rulesDir);
 		const items = loadCorpus(resolveCorpusDir(options.corpus), rules, {
@@ -4109,6 +3824,9 @@ function registerEvalCommand(program) {
 		const coverage = corpusCoverage(items, rules);
 		process.stdout.write(options.output === "json" ? `${JSON.stringify(coverage, null, 2)}\n` : renderCoverage(coverage));
 	});
+	command.command("labels <samples>").description("Convert a labelled sample file from lint --samples into a corpus JSONL").requiredOption("--out <file>", "New corpus JSONL file").option("--rules <path>", "Rules directory used to validate labels").action((file, options) => {
+		process.stdout.write(`Exported ${labelsToCorpus(file, options.out, options.rules)} labels.\n`);
+	});
 }
 //#endregion
 //#region src/lib/frontmatter.ts
@@ -4886,7 +4604,7 @@ const extractTsx = (file, source, options) => {
 //#endregion
 //#region src/extract/index.ts
 const extractFile = (config, relativeFile) => {
-	const repository = new Repository(config.root, config.architecture);
+	const repository = new Repository(config.root);
 	const source = fs.readFileSync(path.join(config.root, relativeFile), "utf-8");
 	return extractSource(config, relativeFile, source, repository);
 };
@@ -4916,11 +4634,6 @@ const extractSource = (config, file, source, repository) => {
 	return [...units, whole];
 };
 const SUPPORTED_GLOBS = [
-	"**/*.html",
-	"**/*.htm",
-	"**/llms.txt",
-	"**/llms-full.txt",
-	"**/robots.txt",
 	"**/*.md",
 	"**/*.mdx",
 	"**/*.tsx",
@@ -4971,13 +4684,13 @@ const marker = "<!-- taste-lint -->";
 const agentText = `${marker}
 ## Taste Lint
 
-Taste Lint uses Jev to judge copy and UI. Preview the taste script with --dry-run, then run it with a user-supplied AI_GATEWAY_API_KEY.
-Fix act findings, review advisory findings in context, and recheck the edited files.
-Never invent a key or treat unknown checks as passes.
-Docs: https://taste-lint.blode.md
+Run the taste script after editing copy or UI. Act findings fail the run and must be fixed in the copy or the classes, never by editing a rule.
+Review notes never fail a run; read them as suggestions. Unknown means a check could not decide, not a pass.
+Jev checks need a user-supplied AI_GATEWAY_API_KEY; add --dry-run to run only the mechanical checks. Never invent a key.
+Docs: https://blode.co/taste-lint/docs
 <!-- /taste-lint -->
 `;
-function object$1(value) {
+function object(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function initProject(options) {
@@ -4986,7 +4699,7 @@ function initProject(options) {
 	let manifest;
 	try {
 		const parsed = JSON.parse(fs.readFileSync(manifestPath, "utf-8"));
-		if (!object$1(parsed)) throw new Error("Expected an object");
+		if (!object(parsed)) throw new Error("Expected an object");
 		manifest = parsed;
 	} catch {
 		throw new InputError("INVALID_PROJECT", "Run init in a project with a valid package.json, or use --root <path>.");
@@ -5001,7 +4714,7 @@ function initProject(options) {
 		"scripts",
 		"dependencies",
 		"devDependencies"
-	]) if (manifest[field] !== void 0 && !object$1(manifest[field])) throw new InputError("INVALID_PROJECT", `package.json ${field} must be an object.`);
+	]) if (manifest[field] !== void 0 && !object(manifest[field])) throw new InputError("INVALID_PROJECT", `package.json ${field} must be an object.`);
 	const dependencies = {
 		...manifest.dependencies,
 		...manifest.devDependencies
@@ -5015,33 +4728,19 @@ function initProject(options) {
 	].some((name) => name in dependencies) ? "product" : "writing";
 	const scripts = { ...manifest.scripts };
 	const added = [];
-	for (const oldProfile of ["product", "writing"]) if (scripts["check:taste"] === `taste-lint scan . --profile ${oldProfile} --mechanical-only`) {
-		scripts["check:taste"] = `taste-lint scan . --profile ${oldProfile}`;
-		added.push("check:taste");
-	}
-	for (const [name, command] of Object.entries({ taste: `taste-lint scan . --profile ${profile}` })) if (!(name in scripts)) {
+	for (const [name, command] of Object.entries({ taste: `taste-lint lint --profile ${profile}` })) if (!(name in scripts)) {
 		scripts[name] = command;
 		added.push(name);
 	}
 	const agentPath = path.join(root, "AGENTS.md");
 	const previousAgent = options.agent && fs.existsSync(agentPath) ? fs.readFileSync(agentPath, "utf-8") : "";
-	const legacyAgentText = `${marker}
-## Taste Lint
-
-Run the local check with the project's check:taste script after editing copy or UI.
-For AI checks, preview the taste script with --dry-run, then run it with a user-supplied AI_GATEWAY_API_KEY.
-Fix act findings, review advisory findings in context, and recheck the edited files.
-Never invent a key or treat unknown checks as passes.
-<!-- /taste-lint -->
-`;
-	const upgradeAgent = Boolean(options.agent && previousAgent.includes(legacyAgentText));
 	const addAgent = Boolean(options.agent && !previousAgent.includes(marker));
 	const needsDependency = !("taste-lint" in dependencies);
 	const installArgs = pm === "npm" ? ["install", "--save-dev"] : ["add", "--dev"];
 	installArgs.push(`taste-lint@^${version}`);
 	const shouldInstall = needsDependency && options.install !== false;
 	const result = {
-		agentAdded: addAgent || upgradeAgent,
+		agentAdded: addAgent,
 		dryRun: Boolean(options.dryRun),
 		installCommand: shouldInstall ? [pm, ...installArgs] : null,
 		packageManager: pm,
@@ -5067,14 +4766,13 @@ Never invent a key or treat unknown checks as passes.
 		manifest.scripts = scripts;
 		fs.writeFileSync(manifestPath, `${JSON.stringify(manifest, null, 2)}\n`);
 	}
-	if (upgradeAgent) fs.writeFileSync(agentPath, previousAgent.replace(legacyAgentText, agentText));
 	if (addAgent) fs.writeFileSync(agentPath, `${previousAgent}${previousAgent ? "\n\n" : ""}${agentText}`);
 	return result;
 }
 //#endregion
 //#region src/commands/init.ts
 function registerInitCommand(program) {
-	program.command("init").description("Install Taste Lint locally and add project check scripts").option("--root <path>", "Project directory", process.cwd()).option("--pm <name>", "Package manager: npm, pnpm, yarn, or bun").option("--dry-run", "Preview setup without installing or writing files").option("--no-install", "Add scripts without installing the package").option("--agent", "Append Taste Lint guidance to AGENTS.md").action((options) => {
+	program.command("init").description("Install Taste Lint locally and add project check scripts").option("--root <path>", "Project directory", process.cwd()).addOption(new Option("--pm <name>", "Package manager").choices(managers)).option("--dry-run", "Preview setup without installing or writing files").option("--no-install", "Add scripts without installing the package").option("--agent", "Append Taste Lint guidance to AGENTS.md").action((options) => {
 		const result = initProject(options);
 		process.stdout.write(`${result.dryRun ? "Setup preview" : "Setup complete"}: ${result.packageManager}, ${result.profile} profile\n`);
 		process.stdout.write(`Scripts added: ${result.scriptsAdded.join(", ") || "none (existing scripts preserved)"}\n`);
@@ -5125,10 +4823,17 @@ function spawnCapture(cmd, argv, options = {}) {
 }
 //#endregion
 //#region src/extract/capture.ts
+const record = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const strings = (value) => Array.isArray(value) && value.every((item) => typeof item === "string");
+const stringMap = (value) => record(value) && Object.values(value).every((item) => typeof item === "string");
 const assertCapture = (raw) => {
-	const c = raw;
-	if (typeof c !== "object" || c === null || c.version !== 1 || typeof c.elements !== "object" || c.elements === null || !Array.isArray(c.order) || !c.order.every((id) => typeof id === "string")) throw new Error("Unsupported capture: expected style-capture CaptureResult version 1 with elements and order");
-	return c;
+	if (!record(raw) || raw.version !== 1 || !record(raw.elements) || !strings(raw.order)) throw new Error("Unsupported capture: expected style-capture CaptureResult version 1 with elements and order");
+	for (const [id, element] of Object.entries(raw.elements)) if (!record(element) || ![
+		"id",
+		"tagName",
+		"selector"
+	].every((key) => typeof element[key] === "string") || !(element.parentId === null || typeof element.parentId === "string") || !strings(element.children) || !strings(element.classList) || !stringMap(element.styles) || !stringMap(element.attributes) || element.text !== void 0 && typeof element.text !== "string" || element.visible !== void 0 && typeof element.visible !== "boolean") throw new Error(`Unsupported capture element ${id}: expected text identifiers, string maps for styles/attributes and string lists for children/classList`);
+	return raw;
 };
 //#endregion
 //#region src/extract/style-capture-text.ts
@@ -5383,28 +5088,6 @@ const runStyleCapture = async (url, selector) => {
 	return parseCaptureInput(stdout);
 };
 //#endregion
-//#region src/lib/writing-context.ts
-const validateWritingContext = (value) => {
-	if (!value || typeof value !== "object" || Array.isArray(value)) throw new InputError("INVALID_WRITING_CONTEXT", "Writing context must be an object with facts, profile, or instructions strings.");
-	const record = value;
-	for (const [key, text] of Object.entries(record)) if (![
-		"facts",
-		"profile",
-		"instructions"
-	].includes(key) || typeof text !== "string" || !text.trim()) throw new InputError("INVALID_WRITING_CONTEXT", "Writing context accepts only nonempty facts, profile, and instructions strings.");
-	if (Object.keys(record).length === 0) throw new InputError("INVALID_WRITING_CONTEXT", "Provide at least one writing context field.");
-	return record;
-};
-const readWritingContext = (file) => {
-	let value;
-	try {
-		value = JSON.parse(fs.readFileSync(file, "utf-8"));
-	} catch {
-		throw new InputError("INVALID_WRITING_CONTEXT", "Cannot read writing context: provide a readable JSON file.");
-	}
-	return validateWritingContext(value);
-};
-//#endregion
 //#region src/reduce/dedupe.ts
 const BAND_RANK = {
 	act: 0,
@@ -5542,39 +5225,179 @@ const applySuppressions = (findings, rules, sources) => {
 	});
 };
 //#endregion
+//#region src/scan/git.ts
+const git = (root, args) => {
+	try {
+		return execFileSync("git", [
+			"-C",
+			root,
+			...args
+		], {
+			encoding: "utf-8",
+			maxBuffer: 33554432,
+			stdio: [
+				"ignore",
+				"pipe",
+				"pipe"
+			]
+		});
+	} catch {
+		throw new InputError("INVALID_GIT_BASE", "Cannot compare Git revisions. Use a valid base in the scan repository.");
+	}
+};
+const changedLines = (root, ref) => {
+	const base = git(root, [
+		"rev-parse",
+		"--verify",
+		"--end-of-options",
+		`${ref}^{commit}`
+	]).trim();
+	const names = git(root, [
+		"diff",
+		"--relative",
+		"--no-ext-diff",
+		"--no-textconv",
+		"--no-renames",
+		"--name-only",
+		"-z",
+		base,
+		"--"
+	]).split("\0").filter(Boolean);
+	const ranges = /* @__PURE__ */ new Map();
+	for (const file of names) {
+		const patch = git(root, [
+			"diff",
+			"--relative",
+			"--no-ext-diff",
+			"--no-textconv",
+			"--no-renames",
+			"--unified=0",
+			base,
+			"--",
+			file
+		]);
+		const lines = [];
+		for (const match of patch.matchAll(/^@@ -\d+(?:,\d+)? \+(\d+)(?:,(\d+))? @@/gm)) {
+			const start = Number(match[1]);
+			const length = Number(match[2] ?? 1);
+			if (length > 0) lines.push([start, start + length - 1]);
+		}
+		ranges.set(file, lines);
+	}
+	return {
+		base,
+		ranges,
+		untracked: new Set(git(root, [
+			"ls-files",
+			"--others",
+			"--exclude-standard",
+			"-z"
+		]).split("\0").filter(Boolean))
+	};
+};
+const touchesChange = (diff, file, start, end) => diff.untracked.has(file) || (diff.ranges.get(file) ?? []).some(([a, b]) => start <= b && end >= a);
+//#endregion
+//#region src/scan/profiles.ts
+const artifacts = [
+	"**/node_modules/**",
+	"**/dist/**",
+	"**/.next/**",
+	"**/results/**",
+	"**/docs/archive/**"
+];
+const internal = [
+	"**/.claude/**",
+	"**/.agents/**",
+	"**/skills/**",
+	"**/AGENTS.md",
+	"**/CLAUDE.md",
+	"**/SKILL.md"
+];
+const PROFILE_NAMES = [
+	"product",
+	"writing",
+	"instructions",
+	"all"
+];
+const profileFor = (name) => {
+	switch (name) {
+		case "product": return {
+			exclude: [
+				...artifacts,
+				...internal,
+				"**/*.{test,spec,stories}.{tsx,jsx}"
+			],
+			include: ["**/*.{tsx,jsx,css,scss}"],
+			name,
+			objective: "Review application interface copy, typography, interaction and motion"
+		};
+		case "writing": return {
+			exclude: [
+				...artifacts,
+				...internal,
+				"**/docs/plans/**"
+			],
+			include: ["**/*.{md,mdx}"],
+			name,
+			objective: "Review published prose and consumer documentation"
+		};
+		case "instructions": return {
+			exclude: artifacts,
+			include: [...internal, "**/docs/plans/**/*.md"],
+			name,
+			objective: "Review repository instructions, skill authoring and implementation plans"
+		};
+		case "all": return {
+			exclude: artifacts,
+			include: ["**/*"],
+			name,
+			objective: "Audit every supported input with the full rule catalog"
+		};
+		default: throw new InputError("INVALID_PROFILE", `Choose a profile: ${PROFILE_NAMES.join(", ")}`);
+	}
+};
+const profileRules = (profile, rules) => rules.filter((rule) => {
+	const document = rule.domain === "authoring" || rule.id.startsWith("copywriting-readme-") || rule.id.startsWith("copywriting-document-");
+	switch (profile.name) {
+		case "all": return true;
+		case "instructions": return document;
+		case "writing": return !document && ["copywriting", "typography"].includes(rule.domain);
+		default: return !document;
+	}
+});
+const profileIncludes = (profile, file) => matchesAny(file, profile.include) && !matchesAny(file, profile.exclude);
+//#endregion
 //#region src/lint.ts
-const runLint = async (options, ctx = {}) => {
+const runLint = async (options = {}, ctx = {}) => {
 	const stderr = ctx.stderr ?? ((t) => process.stderr.write(t));
 	const stdout = ctx.stdout ?? ((t) => process.stdout.write(t));
-	const config = loadConfig(options.root, options.docTypes);
+	const targets = options.targets ?? ["."];
+	const config = loadConfig(options.root ?? process.cwd());
 	const rulesDir = resolveRulesDir(options.rulesDir);
-	const rules = loadRules(rulesDir, { only: options.only });
-	for (const rule of rules) if (options.advisoryRules?.includes(rule.id)) rule.status = "review-only";
+	const profile = options.profile ? profileFor(options.profile) : void 0;
+	const loaded = loadRules(rulesDir, { only: options.only });
+	const rules = profile && !options.only?.length ? profileRules(profile, loaded) : loaded;
+	if (rules.length === 0) throw new InputError("EMPTY_RULE_SELECTION", "No rules match the selected profile and ids.");
 	const model = options.model ?? "jev-latest";
 	const resultsDir = options.resultsDir ?? defaultResultsDir();
 	const scan = {
 		excluded: 0,
 		messages: []
 	};
-	const files = options.targets.length > 0 ? collectFiles(config.root, options.targets, SUPPORTED_GLOBS, [...config.exclude, ...options.exclude ?? []], scan) : [];
-	let units = [];
+	const files = targets.length > 0 ? collectFiles(config.root, targets, SUPPORTED_GLOBS, [
+		...config.exclude,
+		...options.exclude ?? [],
+		...profile?.exclude ?? []
+	], scan).filter((file) => !profile || profileIncludes(profile, file)) : [];
+	const units = [];
 	const sources = /* @__PURE__ */ new Map();
-	const repository = new Repository(config.root, config.architecture);
+	const repository = new Repository(config.root);
 	for (const file of files) {
 		const source = fs.readFileSync(path.join(config.root, file), "utf-8");
 		units.push(...extractSource(config, file, source, repository));
 		sources.set(file, source.split("\n"));
 	}
 	if (options.extraUnits) units.push(...options.extraUnits);
-	if (options.writingContext) {
-		const writing = validateWritingContext(options.writingContext);
-		for (const unit of units) if (unit.context.docType === "personal") Object.assign(unit.context, {
-			writingFacts: writing.facts,
-			writingInstructions: writing.instructions,
-			writingProfile: writing.profile
-		});
-	}
-	if (options.limitUnits !== void 0) units = units.slice(0, options.limitUnits);
 	const scope = {
 		byDocType: {},
 		diagnostics: scan.messages,
@@ -5585,6 +5408,7 @@ const runLint = async (options, ctx = {}) => {
 	for (const u of units) if (!STRUCTURAL_KINDS.includes(u.kind)) scope.byDocType[u.context.docType] = (scope.byDocType[u.context.docType] ?? 0) + 1;
 	const parseFailures = new Set(units.filter((unit) => unit.context.parseError || unit.context.mdxFallback || unit.facts?.parseError).map((unit) => unit.file));
 	for (const file of parseFailures) scope.diagnostics.push(`Could not fully parse ${file}; analysis is incomplete.`);
+	if (profile) scope.diagnostics.push(`Profile ${profile.name}: ${profile.objective}.`);
 	if (units.length === 0) scope.diagnostics.push("No supported units were selected. Check targets and exclusions; no clean-scan verdict is available.");
 	const cache = new AnswerCache(path.join(resultsDir, "cache"), !options.noCache);
 	const manifest = {
@@ -5597,7 +5421,7 @@ const runLint = async (options, ctx = {}) => {
 		rules: rules.map((r) => r.id),
 		scope,
 		smart_quotes_at_build: config.smartQuotesAtBuild,
-		targets: options.targets
+		targets
 	};
 	const judgeOptions = {
 		cache,
@@ -5636,7 +5460,7 @@ const runLint = async (options, ctx = {}) => {
 		onProgress: ctx.onProgress,
 		recorder
 	});
-	ctx.onEvidence?.(units, judgement.answers, judgement.negatives);
+	ctx.onEvidence?.(units, judgement.answers, judgement.negatives, rules);
 	const status = options.dryRun ? "dry-run" : judgement.usage.errors > 0 || parseFailures.size > 0 || units.length === 0 ? "incomplete" : "complete";
 	const jf = jevFindings(judgement.jobs, judgement.answers);
 	let findings = [...judgement.mechanical, ...jf.findings];
@@ -5646,7 +5470,12 @@ const runLint = async (options, ctx = {}) => {
 		status,
 		usage
 	});
-	const ruleFindings = dedupeExact(applySuppressions(findings, rules, sources));
+	let ruleFindings = dedupeExact(applySuppressions(findings, rules, sources));
+	if (options.since) {
+		const diff = changedLines(config.root, options.since);
+		ruleFindings = ruleFindings.filter((f) => touchesChange(diff, f.file, f.line, f.endLine ?? f.line));
+		scope.diagnostics.push(`Reporting lines changed since ${diff.base}.`);
+	}
 	findings = dedupe(ruleFindings);
 	if (options.fix && !options.dryRun) applyFixes(config.root, ruleFindings, rules, units, stderr);
 	const scorecard = buildScorecard(units, rules, findings, unknowns, jf.silent);
@@ -5790,7 +5619,7 @@ const renderSarif = (result, rules, version) => {
 				ruleIndex: index.get(f.ruleId)
 			})),
 			tool: { driver: {
-				informationUri: "https://taste-lint.blode.md",
+				informationUri: "https://blode.co/taste-lint/docs",
 				name: "taste-lint",
 				rules: ruleList.map((r) => ({
 					fullDescription: { text: r.question?.instructions ?? r.fix.hint },
@@ -5835,20 +5664,26 @@ const formatFinding = (f) => {
 	return lines.join("\n");
 };
 const scorecardTable = (scorecard) => {
-	return ["Scorecard", ...Object.entries(scorecard.byCategory).map(([id, c]) => `  ${id.padEnd(26)} ${String(c.act).padStart(4)} act ${String(c.review).padStart(4)} review ${String(c.suppressed).padStart(3)} suppressed ${String(c.unknown).padStart(4)} unknown`)].join("\n");
+	const rows = Object.entries(scorecard.byCategory).filter(([, c]) => c.act + c.review + c.suppressed + c.unknown > 0).map(([id, c]) => `  ${id.padEnd(26)} ${String(c.act).padStart(4)} act ${String(c.review).padStart(4)} review ${String(c.suppressed).padStart(3)} suppressed ${String(c.unknown).padStart(4)} unknown`);
+	return rows.length ? ["Scorecard", ...rows].join("\n") : "Scorecard: clean";
 };
 const renderTty = (result, options = {}) => {
 	const out = [];
 	const candidates = result.findings.filter((f) => options.verbose || !f.suppressed);
-	const actExamples = candidates.filter((f) => f.band === "act").slice(0, 20);
-	const reviewExamples = candidates.filter((f) => f.band === "review").slice(0, 10);
-	const visible = options.verbose ? candidates : [...actExamples, ...reviewExamples];
+	const actFindings = candidates.filter((f) => f.band === "act");
+	const reviewFindings = candidates.filter((f) => f.band === "review");
+	const visible = options.verbose ? candidates : actFindings.slice(0, 20);
 	if (result.summary) out.push(`Summary: ${result.summary.act} act, ${result.summary.review} review, ${result.summary.unknown} unknown; ${result.summary.failing} failing rule findings (fail-on ${result.summary.failOn}).`);
 	if (result.scope) out.push(`Scope: ${result.scope.files} files; ${Object.entries(result.scope.byDocType).map(([type, n]) => `${type}: ${n}`).join(", ")}; ${result.scope.excluded} excluded paths.`, ...result.scope.diagnostics);
 	const counts = /* @__PURE__ */ new Map();
 	for (const f of result.ruleFindings ?? candidates) if (!f.suppressed) counts.set(f.ruleId, (counts.get(f.ruleId) ?? 0) + 1);
 	out.push(`Top rules: ${[...counts].toSorted((a, b) => b[1] - a[1] || a[0].localeCompare(b[0])).slice(0, 5).map(([id, n]) => `${id}: ${n}`).join(", ")}`);
-	if (visible.length < candidates.length) out.push(`${candidates.length - visible.length} findings omitted from this view; use --verbose for every finding.`);
+	if (!options.verbose && actFindings.length > visible.length) out.push(`${actFindings.length - visible.length} more act findings; use --verbose for every finding.`);
+	if (!options.verbose && reviewFindings.length > 0) {
+		const byRule = /* @__PURE__ */ new Map();
+		for (const f of reviewFindings) byRule.set(f.ruleId, (byRule.get(f.ruleId) ?? 0) + 1);
+		out.push(`${reviewFindings.length} review note${reviewFindings.length === 1 ? "" : "s"} from ${byRule.size} rule${byRule.size === 1 ? "" : "s"} (never fail a run; use --verbose to list): ${[...byRule].toSorted((a, b) => b[1] - a[1] || a[0].localeCompare(b[0])).slice(0, 5).map(([id, n]) => `${id} ${n}`).join(", ")}${byRule.size > 5 ? ", ..." : ""}`);
+	}
 	if (result.reportPath) out.push(`Complete report: ${result.reportPath}`);
 	if (result.rerun) out.push(`Retry unresolved work: ${result.rerun}`);
 	let currentFile = "";
@@ -5879,44 +5714,42 @@ const renderTty = (result, options = {}) => {
 //#region src/commands/lint.ts
 const quote = (value) => `'${value.replaceAll("'", "'\"'\"'")}'`;
 function registerLintCommand(program) {
-	program.command("lint").description("Lint files (or a rendered page) against the taste rules").argument("[paths...]", "Files or directories to lint, relative to --root").option("--root <path>", "Project root for globs and config", process.cwd()).option("--rules <path>", "Rules directory (default: packaged data/rules)").option("--only <ids>", "Comma-separated rule ids").option("--exclude <globs>", "Comma-separated globs to skip (added to taste-lint.config.json exclude)").option("--dry-run", "Plan and estimate cost without calling Jev").option("--print-requests", "With --dry-run and --output tty, print request JSONL to stderr").option("--writing-context <file>", "Explicit JSON facts/profile/instructions for personal writing; sent to Jev on live runs").option("--no-cache", "Ignore cached answers (new answers are still recorded)").option("--limit-units <n>", "Only consider the first n units").option("--fail-on <severity>", "Lowest severity that fails the run: major or minor", "minor").option("--fix", "Apply deterministic fixes for act-band findings").option("--output <format>", "tty, json or sarif", "tty").option("--results-dir <path>", "Where logs and cache live", defaultResultsDir()).option("--model <id>", "Jev model id", DEFAULT_MODEL).option("--progress", "Print periodic progress on stderr even when piped").option("--verbose", "Show suppressed findings and unknowns").option("--url <url>", "Lint a rendered page through style-capture").option("--selector <css>", "Root selector for --url", "body").option("--capture <file>", "Lint a saved style-capture CaptureResult JSON").action(async (paths, options) => {
-		if (!["major", "minor"].includes(options.failOn)) throw new InputError("INVALID_ARGUMENT", "--fail-on must be major or minor");
-		if (![
-			"tty",
-			"json",
-			"sarif"
-		].includes(options.output)) throw new InputError("INVALID_ARGUMENT", "--output must be tty, json or sarif");
-		if (paths.length === 0 && !options.url && !options.capture) throw new InputError("INVALID_ARGUMENT", "Pass at least one path, --url or --capture");
-		const limitUnits = options.limitUnits === void 0 ? void 0 : Number(options.limitUnits);
-		if (limitUnits !== void 0 && (!Number.isInteger(limitUnits) || limitUnits < 0)) throw new InputError("INVALID_ARGUMENT", "--limit-units must be a non-negative integer");
+	program.command("lint").description("Lint files (or a rendered page) against the taste rules").argument("[paths...]", "Files or directories to lint, relative to --root").option("--root <path>", "Project root for globs and config", process.cwd()).option("--only <ids>", "Comma-separated rule ids").option("--exclude <globs>", "Comma-separated globs to skip (added to taste-lint.config.json exclude)").option("--dry-run", "Plan and estimate cost without calling Jev").option("--print-requests", "With --dry-run and --output tty, print request JSONL to stderr").addOption(new Option("--profile <name>", "Scope: product (tsx, jsx, css), writing (md, mdx), instructions (AGENTS.md, skills, plans) or all").choices(PROFILE_NAMES)).option("--since <ref>", "Report only findings on lines changed since this Git revision").option("--samples <file>", "Write blind labelling samples for the Jev rules that ran, without their predicted scores").option("--no-cache", "Ignore cached answers (new answers are still recorded)").addOption(new Option("--fail-on <severity>", "Lowest severity that fails the run").choices(SEVERITIES).default("minor")).option("--fix", "Apply deterministic fixes for act-band findings").addOption(new Option("--output <format>", "Output format").choices([
+		"tty",
+		"json",
+		"sarif"
+	]).default("tty")).option("--results-dir <path>", "Where logs and cache live", defaultResultsDir()).option("--model <id>", "Jev model id", DEFAULT_MODEL).option("--progress", "Print periodic progress on stderr even when piped").option("--verbose", "Show suppressed findings and unknowns").option("--url <url>", "Lint a rendered page through style-capture").option("--selector <css>", "Root selector for --url", "body").action(async (paths, options) => {
+		const targets = paths.length === 0 && options.profile ? ["."] : paths;
+		if (targets.length === 0 && !options.url) throw new InputError("INVALID_ARGUMENT", "Pass at least one path, --profile or --url");
 		if (options.printRequests && (!options.dryRun || options.output !== "tty")) throw new InputError("INVALID_ARGUMENT", "--print-requests requires --dry-run and --output tty; request JSONL is written to stderr.");
 		if (options.progress || process.stderr.isTTY) process.stderr.write("Scanning requested paths...\n");
 		const config = { root: path.resolve(options.root) };
-		if (options.url || options.capture) {
+		if (options.url) {
 			const resolved = loadConfig(config.root);
-			collectFiles(resolved.root, paths, SUPPORTED_GLOBS, [...resolved.exclude, ...options.exclude?.split(",").map((s) => s.trim()).filter(Boolean) ?? []]);
+			collectFiles(resolved.root, targets, SUPPORTED_GLOBS, [...resolved.exclude, ...options.exclude?.split(",").map((s) => s.trim()).filter(Boolean) ?? []]);
 		}
-		let extraUnits;
-		if (options.capture) extraUnits = extractCapture(parseCaptureInput(fs.readFileSync(options.capture, "utf-8")), options.capture);
-		else if (options.url) extraUnits = extractCapture(await runStyleCapture(options.url, options.selector), options.url);
+		const extraUnits = options.url ? extractCapture(await runStyleCapture(options.url, options.selector), options.url) : void 0;
 		let lastProgress = 0;
+		let samples = [];
 		const result = await runLint({
 			dryRun: options.dryRun,
 			exclude: options.exclude?.split(",").map((s) => s.trim()).filter(Boolean),
 			extraUnits,
 			failOn: options.failOn,
 			fix: options.fix,
-			limitUnits,
 			model: options.model,
 			noCache: !options.cache,
 			only: options.only?.split(",").map((s) => s.trim()).filter(Boolean),
 			printRequests: options.printRequests,
+			profile: options.profile,
 			resultsDir: options.resultsDir,
 			root: options.root,
-			rulesDir: options.rules,
-			targets: paths,
-			writingContext: options.writingContext ? readWritingContext(options.writingContext) : void 0
+			since: options.since,
+			targets
 		}, {
+			onEvidence: options.samples ? (units, answers, negatives, rules) => {
+				samples = makeSamples(units, rules, answers, negatives, 3, path.basename(config.root));
+			} : void 0,
 			onProgress: (progress) => {
 				if (!(options.progress || process.stderr.isTTY)) return;
 				const now = Date.now();
@@ -5942,15 +5775,18 @@ function registerLintCommand(program) {
 			"--output",
 			options.output
 		];
-		if (options.rules) retryArgs.push("--rules", path.resolve(options.rules));
 		if (options.only) retryArgs.push("--only", options.only);
 		if (options.exclude) retryArgs.push("--exclude", options.exclude);
-		if (options.limitUnits) retryArgs.push("--limit-units", options.limitUnits);
 		if (options.url) retryArgs.push("--url", options.url, "--selector", options.selector);
-		if (options.capture) retryArgs.push("--capture", path.resolve(options.capture));
-		if (options.writingContext) retryArgs.push("--writing-context", path.resolve(options.writingContext));
-		retryArgs.push("--", ...paths);
+		if (options.profile) retryArgs.push("--profile", options.profile);
+		if (options.since) retryArgs.push("--since", options.since);
+		retryArgs.push("--", ...targets);
 		const rerun = result.status === "incomplete" ? retryArgs.map(quote).join(" ") : void 0;
+		if (options.samples) writeJson(options.samples, {
+			instructions: "Blind review: set label true for a violation, false for acceptable, or leave null when uncertain. No predicted probabilities are included.",
+			samples,
+			version: 2
+		});
 		const reported = {
 			...result,
 			reportPath,
@@ -5968,76 +5804,9 @@ function registerLintCommand(program) {
 	});
 }
 //#endregion
-//#region src/rules/discover.ts
-const discoverSkills = (root, rules) => {
-	const absolute = path.resolve(root);
-	if (!fs.existsSync(absolute) || !fs.statSync(absolute).isDirectory()) throw new InputError("INVALID_SKILL_SOURCE", `Skill source must be a directory: ${absolute}`);
-	const entries = [];
-	const visit = (dir, owner, skillRoot) => {
-		const skill = fs.existsSync(path.join(dir, "SKILL.md")) ? path.basename(dir) : owner;
-		const base = skill !== owner ? dir : skillRoot;
-		for (const entry of fs.readdirSync(dir, { withFileTypes: true }).toSorted((a, b) => a.name.localeCompare(b.name))) {
-			if (entry.isSymbolicLink() || [
-				"node_modules",
-				".git",
-				"dist",
-				"evals",
-				"evaluations",
-				"scripts",
-				"agents"
-			].includes(entry.name)) continue;
-			const file = path.join(dir, entry.name);
-			if (entry.isDirectory()) {
-				visit(file, skill, base);
-				continue;
-			}
-			if (!skill || !base || !entry.name.endsWith(".md") || /evaluation-scenarios/.test(entry.name)) continue;
-			const text = fs.readFileSync(file, "utf-8");
-			const sections = text.split("\n").flatMap((line, i) => /^#{1,3} /.test(line) ? [{
-				line: i + 1,
-				title: line.replace(/^#+ /, "")
-			}] : []);
-			let title = sections[0]?.title ?? entry.name;
-			let diagnostic;
-			const front = text.match(/^---\r?\n([\s\S]*?)\r?\n---/);
-			if (front) try {
-				const value = parse(front[1]);
-				if (typeof value?.title === "string") title = value.title;
-			} catch {
-				diagnostic = "Frontmatter could not be parsed; retained for manual triage";
-			}
-			const relative = path.relative(base, file).split(path.sep).join("/");
-			const canonical = `skills/${skill}/${relative}`;
-			const citedBy = rules.filter((r) => r.source.path === canonical).map((r) => r.id);
-			const kind = entry.name === "SKILL.md" ? "entrypoint" : /^rules(?:-arch|-ax)?\//.test(relative) && !entry.name.startsWith("_") ? "rule" : "guidance";
-			entries.push({
-				citedBy,
-				diagnostic,
-				kind,
-				path: file,
-				sections,
-				skill,
-				status: citedBy.length ? "cited" : "needs-triage",
-				title
-			});
-		}
-	};
-	visit(absolute);
-	return entries;
-};
-//#endregion
 //#region src/commands/rules.ts
 function registerRulesCommand(program) {
 	const rules = program.command("rules").description("Inspect and validate the rule files");
-	rules.command("discover <sources...>").description("Inventory skill entrypoints, rule folders, and guidance without activating rules").option("--rules <path>", "Rules directory used for citation coverage").action((sources, options) => {
-		const loaded = loadRules(resolveRulesDir(options.rules));
-		const inventory = sources.flatMap((source) => discoverSkills(source, loaded));
-		process.stdout.write(`${JSON.stringify({
-			inventory,
-			note: "Citations are provenance, not complete semantic coverage. Uncited sources need triage.",
-			sources
-		}, null, 2)}\n`);
-	});
 	rules.command("list").description("List rules with tier, status and category").option("--rules <path>", "Rules directory").option("--allow-draft", "Include draft rules").action((options) => {
 		const list = loadRules(resolveRulesDir(options.rules), { allowDraft: options.allowDraft ?? false });
 		for (const r of list) process.stdout.write(`${r.id.padEnd(44)} ${r.tier.padEnd(10)} ${r.status.padEnd(11)} ${r.severity.padEnd(8)} ${r.categoryId}\n`);
@@ -6057,704 +5826,6 @@ function registerRulesCommand(program) {
 	});
 }
 //#endregion
-//#region src/scan/profiles.ts
-const productRules = /* @__PURE__ */ new Set([
-	"copywriting-vague-error",
-	"copywriting-empty-state-no-action",
-	"copywriting-bare-confirm-label",
-	"copywriting-claim-without-evidence",
-	"interaction-no-error-state",
-	"motion-transition-all"
-]);
-const artifacts = [
-	"**/node_modules/**",
-	"**/dist/**",
-	"**/.next/**",
-	"**/results/**",
-	"**/docs/archive/**",
-	"**/.captain/**"
-];
-const stylePreferences = [
-	"copywriting-long-sentence",
-	"typography-straight-quotes",
-	"typography-ellipsis",
-	"typography-dashes",
-	"typography-midpoint-separators",
-	"typography-line-height-out-of-band"
-];
-const internal = [
-	"**/.claude/**",
-	"**/.agents/**",
-	"**/skills/**",
-	"**/AGENTS.md",
-	"**/CLAUDE.md",
-	"**/SKILL.md"
-];
-const PROFILE_NAMES = [
-	"product",
-	"writing",
-	"instructions",
-	"architecture",
-	"discovery",
-	"all"
-];
-const profileFor = (name) => {
-	if (!PROFILE_NAMES.includes(name)) throw new InputError("INVALID_PROFILE", `Choose a scan profile: ${PROFILE_NAMES.join(", ")}`);
-	const common = {
-		advisory: [],
-		docTypes: [],
-		exclude: artifacts,
-		name
-	};
-	switch (name) {
-		case "discovery": return {
-			...common,
-			exclude: [
-				...artifacts,
-				"**/supabase/templates/**",
-				"**/emails/**",
-				"**/email/**"
-			],
-			include: [
-				"**/*.html",
-				"**/*.htm",
-				"**/robots.txt",
-				"**/llms.txt",
-				"**/llms-full.txt"
-			],
-			objective: "Validate static search and agent discovery artifacts"
-		};
-		case "product": return {
-			...common,
-			advisory: stylePreferences,
-			exclude: [
-				...artifacts,
-				...internal,
-				"**/*.{test,spec,stories}.{tsx,jsx}"
-			],
-			include: ["**/*.{tsx,jsx,css,scss}"],
-			objective: "Review application interface copy, typography, interaction and motion"
-		};
-		case "writing": return {
-			...common,
-			advisory: stylePreferences,
-			docTypes: [{
-				glob: "**/content/writing/**/*.{md,mdx}",
-				type: "personal"
-			}],
-			exclude: [
-				...artifacts,
-				...internal,
-				"**/docs/plans/**"
-			],
-			include: [
-				"**/content/**/*.{md,mdx}",
-				"**/README.md",
-				"**/public/**/*.md",
-				"**/docs/**/*.{md,mdx}"
-			],
-			objective: "Review published prose and consumer documentation"
-		};
-		case "instructions": return {
-			...common,
-			advisory: stylePreferences,
-			include: [...internal, "**/docs/plans/**/*.md"],
-			objective: "Review repository instructions, skill authoring, and implementation plans"
-		};
-		case "architecture": return {
-			...common,
-			exclude: [...artifacts, ...internal],
-			include: ["**/*.{ts,tsx,js,jsx,mjs,cjs,mts,cts,json}"],
-			objective: "Check declared package and repository contracts"
-		};
-		default: return {
-			...common,
-			exclude: [],
-			include: ["**/*"],
-			objective: "Audit all supported inputs with the full rule catalog"
-		};
-	}
-};
-const profileRules = (profile, rules, explicit = false) => rules.filter((rule) => {
-	if (profile.name === "all") return true;
-	if (profile.name === "discovery") return rule.domain === "seo" || rule.id.startsWith("authoring-llms-");
-	if (profile.name === "architecture") return ["architecture", "dx"].includes(rule.domain);
-	if (profile.name === "instructions") return rule.domain === "authoring" || rule.id.startsWith("copywriting-document-");
-	if (profile.name === "writing") return ["copywriting", "typography"].includes(rule.domain);
-	if (profile.name === "product" && !explicit) return productRules.has(rule.id);
-	return ![
-		"architecture",
-		"dx",
-		"authoring"
-	].includes(rule.domain) && !rule.id.startsWith("copywriting-readme-") && !rule.id.startsWith("copywriting-document-");
-});
-const profileIncludes = (profile, file) => matchesAny(file, profile.include) && !matchesAny(file, profile.exclude);
-//#endregion
-//#region src/scan/storage.ts
-const hash = (value) => createHash("sha256").update(JSON.stringify(value)).digest("hex");
-const object = (value) => !!value && typeof value === "object" && !Array.isArray(value);
-const readJson = (file) => {
-	try {
-		return JSON.parse(fs.readFileSync(file, "utf-8"));
-	} catch {
-		throw new InputError("INVALID_SCAN_INPUT", `Cannot read JSON input: ${file}`);
-	}
-};
-const writeJson = (file, value) => {
-	fs.mkdirSync(path.dirname(path.resolve(file)), { recursive: true });
-	const temp = `${file}.${randomUUID()}.tmp`;
-	try {
-		fs.writeFileSync(temp, `${JSON.stringify(value, null, 2)}\n`, { flag: "wx" });
-		fs.renameSync(temp, file);
-	} finally {
-		fs.rmSync(temp, { force: true });
-	}
-};
-//#endregion
-//#region src/scan/report.ts
-const identify = (findings, units) => {
-	const byId = new Map(units.map((u) => [u.id, u]));
-	const occurrences = /* @__PURE__ */ new Map();
-	return findings.map((finding) => {
-		const unit = byId.get(finding.unitId);
-		const text = unit?.kind === "source" ? unit.text.split("\n")[finding.line - 1] ?? finding.evidence : unit?.text ?? finding.evidence;
-		const key = hash([
-			finding.ruleId,
-			finding.file,
-			unit?.kind,
-			normaliseText(text)
-		]);
-		const occurrence = occurrences.get(key) ?? 0;
-		occurrences.set(key, occurrence + 1);
-		return {
-			...finding,
-			context: unit?.context.section,
-			excerpt: text.slice(0, 1200),
-			fingerprint: hash([key, occurrence]),
-			lifecycle: "new",
-			origin: "taste-lint"
-		};
-	});
-};
-const readReport = (file) => {
-	const raw = readJson(file);
-	if (!object(raw) || raw.kind !== "taste-lint-scan" || raw.version !== 1 || typeof raw.signature !== "string" || typeof raw.root !== "string" || ![
-		"complete",
-		"incomplete",
-		"dry-run"
-	].includes(String(raw.status)) || !Array.isArray(raw.findings) || !Array.isArray(raw.files) || !object(raw.profile) || !object(raw.reporting) || !Array.isArray(raw.reporting.visible) || !raw.reporting.visible.every((id) => typeof id === "string") || !raw.files.every((item) => typeof item === "string") || new Set(raw.findings.map((f) => object(f) ? f.fingerprint : void 0)).size !== raw.findings.length || !raw.findings.every((f) => object(f) && typeof f.fingerprint === "string" && /^[a-f0-9]{64}$/.test(f.fingerprint) && typeof f.file === "string" && typeof f.ruleId === "string" && typeof f.excerpt === "string" && (f.context === void 0 || typeof f.context === "string") && (f.assessment === void 0 || f.assessment === "candidate") && (f.review === void 0 || reviewProcedure(f.review, file) !== void 0) && typeof f.fixHint === "string" && Number.isInteger(f.line) && Number.isInteger(f.endLine) && typeof f.message === "string")) throw new InputError("INVALID_SCAN_REPORT", "Expected a version 1 taste-lint scan report.");
-	return raw;
-};
-const readDecisions = (file, signature) => {
-	if (!file) return {};
-	const raw = readJson(file);
-	if (!object(raw) || raw.version !== 1 || !object(raw.decisions)) throw new InputError("INVALID_DECISIONS", "Expected version 1 decisions with a decisions map.");
-	if (signature && raw.signature !== signature) throw new InputError("INCOMPATIBLE_DECISIONS", "Review decisions belong to a different scan policy. Review them again for this profile and rule set.");
-	for (const [key, value] of Object.entries(raw.decisions)) if (!/^[a-f0-9]{64}$/.test(key) || !object(value) || ![
-		"dismissed",
-		"accepted",
-		"open"
-	].includes(String(value.status)) || typeof value.reason !== "string" || !value.reason.trim()) throw new InputError("INVALID_DECISIONS", "Every decision needs a fingerprint, accepted/dismissed status, and reason.");
-	return raw.decisions;
-};
-const reconcile = (current, previous, complete, unknowns, decisions) => {
-	const old = new Map(previous?.findings.map((f) => [f.fingerprint, f]));
-	const ids = new Set(current.map((f) => f.fingerprint));
-	for (const finding of current) {
-		finding.lifecycle = old.has(finding.fingerprint) ? "existing" : "new";
-		finding.decision = decisions[finding.fingerprint] ?? old.get(finding.fingerprint)?.decision;
-	}
-	return [...old.values()].filter((f) => !ids.has(f.fingerprint)).map((f) => ({
-		...f,
-		lifecycle: complete && !unknowns.some((u) => u.file === f.file && u.ruleId === f.ruleId) ? "resolved" : "unverified"
-	}));
-};
-const priority = (a, b) => Number(b.band === "act") - Number(a.band === "act") || SEVERITY_RANK[a.severity] - SEVERITY_RANK[b.severity] || b.probability - a.probability || a.ruleId.localeCompare(b.ruleId) || a.file.localeCompare(b.file) || a.line - b.line;
-const renderScan = (report, limit = 5) => {
-	const visible = new Set(report.reporting.visible);
-	const groups = /* @__PURE__ */ new Map();
-	for (const finding of report.findings.filter((f) => visible.has(f.fingerprint))) {
-		const list = groups.get(finding.ruleId) ?? [];
-		list.push(finding);
-		groups.set(finding.ruleId, list);
-	}
-	const ranked = [...groups.values()].map((group) => group.toSorted(priority)).toSorted((a, b) => priority(a[0], b[0]));
-	const s = report.summary;
-	const coverage = Object.values(report.coverage?.byRule ?? {});
-	return [
-		`${report.profile.name}: ${report.status}; ${report.files.length} files`,
-		`${s.visible} visible checks (${s.failing} failing, ${s.review} review); ${s.total} total; ${s.dismissed} dismissed; ${s.unknown} unknown`,
-		...report.diagnostics,
-		`Rule coverage: ${coverage.filter((r) => r.eligible === 0).length} with no applicable inputs; ${coverage.filter((r) => r.eligible > 0 && r.negative === r.eligible).length} with all applicable checks negative; ${coverage.filter((r) => r.pending > 0).length} with pending evaluations`,
-		`${s.new} new; ${s.existing} existing; ${s.resolved} resolved; ${s.unverified} unverified`,
-		...ranked.slice(0, limit).map((group) => `${group[0].ruleId}: ${group.length} checks in ${new Set(group.map((f) => f.file)).size} files\n  ${group[0].file}:${group[0].line} ${group[0].message}\n  ${group[0].evidence}\n  ${group[0].fixHint}${group[0].review ? `\n  Requires: ${group[0].review.evidence}\n  Verify: ${group[0].review.verification}` : ""}`),
-		...ranked.length > limit ? [`${ranked.length - limit} further rule groups are available in the JSON report.`] : [],
-		...report.estimated ? [`Estimated live work: ${report.estimated.requests} requests, $${report.estimated.costUsd.toFixed(4)}`] : [],
-		""
-	].join("\n");
-};
-//#endregion
-//#region src/scan/architecture.ts
-const invalid = () => {
-	throw new InputError("INVALID_GRAPH_REPORT", "Expected dependency-cruiser JSON with modules and summary.violations, using repository-relative paths.");
-};
-const local = (value) => typeof value === "string" && !!value && !path.isAbsolute(value) && !value.includes("\\") && !value.split("/").includes("..") && !value.includes("\0");
-const importArchitecture = (file) => {
-	const raw = readJson(file);
-	if (!object(raw) || !Array.isArray(raw.modules) || !object(raw.summary) || !Array.isArray(raw.summary.violations)) return invalid();
-	const modules = [];
-	let incomplete = false;
-	for (const mod of raw.modules) {
-		if (!object(mod) || !local(mod.source)) return invalid();
-		modules.push(mod.source);
-		if (mod.couldNotResolve === true || Array.isArray(mod.dependencies) && mod.dependencies.some((d) => object(d) && d.couldNotResolve === true)) incomplete = true;
-	}
-	if (object(raw.summary.environment) && Array.isArray(raw.summary.environment.issues) && raw.summary.environment.issues.length) incomplete = true;
-	incomplete ||= modules.length === 0;
-	const findings = [];
-	for (const v of raw.summary.violations) {
-		if (!object(v) || !object(v.rule) || typeof v.rule.name !== "string" || !local(v.from) || typeof v.to !== "string" || ![
-			"error",
-			"warn",
-			"info",
-			"ignore"
-		].includes(String(v.rule.severity))) return invalid();
-		if (v.rule.severity === "ignore") continue;
-		const ruleId = `dependency-cruiser/${v.rule.name}`;
-		const excerpt = `${v.from} -> ${v.to}`;
-		findings.push({
-			band: v.rule.severity === "error" ? "act" : "review",
-			categoryId: "repository-contracts",
-			column: 1,
-			domain: "architecture",
-			endColumn: 1,
-			endLine: 1,
-			evidence: excerpt,
-			excerpt,
-			file: v.from,
-			fingerprint: hash([
-				ruleId,
-				v.from,
-				v.to,
-				v.cycle,
-				v.via
-			]),
-			fixHint: typeof v.rule.comment === "string" ? v.rule.comment : "Follow the declared dependency policy; rerun dependency-cruiser with the same configuration.",
-			lifecycle: "new",
-			line: 1,
-			message: v.rule.name,
-			origin: "dependency-cruiser",
-			probability: 1,
-			ruleId,
-			severity: v.rule.severity === "error" ? "major" : "minor",
-			suppressed: false,
-			tier: "mechanical",
-			unitId: hash([v.from, v.to])
-		});
-	}
-	return {
-		contentHash: hash(raw),
-		digest: hash([
-			raw.summary.optionsUsed ?? {},
-			raw.summary.ruleSetUsed ?? {},
-			raw.summary.environment && object(raw.summary.environment) ? raw.summary.environment.version : void 0
-		]),
-		findings,
-		incomplete,
-		modules
-	};
-};
-//#endregion
-//#region src/scan/git.ts
-const git = (root, args) => {
-	try {
-		return execFileSync("git", [
-			"-C",
-			root,
-			...args
-		], {
-			encoding: "utf-8",
-			maxBuffer: 33554432,
-			stdio: [
-				"ignore",
-				"pipe",
-				"pipe"
-			]
-		});
-	} catch {
-		throw new InputError("INVALID_GIT_BASE", "Cannot compare Git revisions. Use a valid base in the scan repository.");
-	}
-};
-const changedLines = (root, ref) => {
-	const base = git(root, [
-		"rev-parse",
-		"--verify",
-		"--end-of-options",
-		`${ref}^{commit}`
-	]).trim();
-	const names = git(root, [
-		"diff",
-		"--relative",
-		"--no-ext-diff",
-		"--no-textconv",
-		"--no-renames",
-		"--name-only",
-		"-z",
-		base,
-		"--"
-	]).split("\0").filter(Boolean);
-	const ranges = /* @__PURE__ */ new Map();
-	for (const file of names) {
-		const patch = git(root, [
-			"diff",
-			"--relative",
-			"--no-ext-diff",
-			"--no-textconv",
-			"--no-renames",
-			"--unified=0",
-			base,
-			"--",
-			file
-		]);
-		const lines = [];
-		for (const match of patch.matchAll(/^@@ -\d+(?:,\d+)? \+(\d+)(?:,(\d+))? @@/gm)) {
-			const start = Number(match[1]);
-			const length = Number(match[2] ?? 1);
-			if (length > 0) lines.push([start, start + length - 1]);
-		}
-		ranges.set(file, lines);
-	}
-	return {
-		base,
-		ranges,
-		untracked: new Set(git(root, [
-			"ls-files",
-			"--others",
-			"--exclude-standard",
-			"-z"
-		]).split("\0").filter(Boolean))
-	};
-};
-const touchesChange = (diff, file, start, end) => diff.untracked.has(file) || (diff.ranges.get(file) ?? []).some(([a, b]) => start <= b && end >= a);
-//#endregion
-//#region src/scan/samples.ts
-const makeSamples = (units, rules, answers, negatives, perStratum = 3, sourceRepo = "scan") => {
-	const buckets = /* @__PURE__ */ new Map();
-	const seen = /* @__PURE__ */ new Set();
-	const semanticRules = rules.filter((rule) => rule.question);
-	for (const unit of units) for (const rule of semanticRules) {
-		const probability = answers.get(unit.id)?.[rule.id] ?? (negatives.get(unit.id)?.has(rule.id) ? 0 : void 0);
-		if (probability === void 0) continue;
-		const { docType, role, headingAbove } = unit.context;
-		const context = {
-			docType,
-			headingAbove,
-			role,
-			...Object.fromEntries((rule.question.context ?? []).filter((key) => key !== "neighbours").map((key) => [key, unit.context[key]]))
-		};
-		const rubric = buildQuestion(rule);
-		const neighbours = rule.question.context?.includes("neighbours") ? unit.neighbours : void 0;
-		const evidence = [
-			rule.id,
-			unit.text,
-			context,
-			neighbours,
-			unit.classes,
-			rubric
-		];
-		const unique = hash(evidence);
-		if (seen.has(unique)) continue;
-		seen.add(unique);
-		const id = `scan-${hash([
-			sourceRepo,
-			unit.file,
-			...evidence
-		]).slice(0, 24)}`;
-		const sample = {
-			criterion: rule.question.instructions,
-			id,
-			item: {
-				categoryId: rule.categoryId,
-				classes: unit.classes,
-				context,
-				id,
-				kind: unit.kind,
-				neighbours,
-				source: {
-					path: unit.file,
-					repo: sourceRepo
-				},
-				split: splitFor(`${sourceRepo}/${unit.file}`),
-				text: unit.text
-			},
-			label: null,
-			rubric,
-			ruleId: rule.id
-		};
-		const bucket = `${rule.id}:${docType}:${probability < rule.thresholds.review ? "negative" : probability < rule.thresholds.act ? "review" : "high"}`;
-		const list = buckets.get(bucket) ?? [];
-		list.push(sample);
-		buckets.set(bucket, list);
-	}
-	return [...buckets.values()].flatMap((list) => list.toSorted((a, b) => a.id.localeCompare(b.id)).slice(0, perStratum)).toSorted((a, b) => a.id.localeCompare(b.id));
-};
-const labelsToCorpus = (file, destination, rulesDir) => {
-	const raw = readJson(file);
-	if (!object(raw) || raw.version !== 1 && raw.version !== 2 || !Array.isArray(raw.samples)) throw new InputError("INVALID_LABELS", "Expected a version 1 or 2 blind sample file.");
-	if (raw.completed !== void 0 && raw.completed !== raw.samples.length) throw new InputError("INVALID_LABELS", "Labeling is incomplete. Review every sample before importing.");
-	const annotation = raw.annotation;
-	const ai = object(annotation) && annotation.source === "ai";
-	if (annotation !== void 0 && (!ai || typeof annotation.model !== "string" || !annotation.model.trim() || typeof annotation.promptHash !== "string" || !/^[a-f0-9]{64}$/.test(annotation.promptHash))) throw new InputError("INVALID_LABELS", "AI annotation requires a model and prompt hash.");
-	const ids = /* @__PURE__ */ new Set();
-	const items = [];
-	for (const row of raw.samples) {
-		if (!object(row) || typeof row.id !== "string" || ids.has(row.id) || typeof row.ruleId !== "string" || raw.version === 2 && (!object(row.rubric) || row.rubric.type !== "noul" || typeof row.criterion !== "string" || row.rubric.instructions !== row.criterion) || !object(row.item) || row.item.id !== row.id || row.label !== null && typeof row.label !== "boolean") throw new InputError("INVALID_LABELS", "Samples require unique IDs and boolean or null labels.");
-		ids.add(row.id);
-		if (row.label === null) continue;
-		items.push({
-			...row.item,
-			labelSource: ai ? "ai" : "hand",
-			...ai ? {
-				labelModel: annotation.model,
-				labelPromptHash: annotation.promptHash
-			} : {},
-			labels: { [row.ruleId]: row.label }
-		});
-	}
-	if (!items.length) throw new InputError("INVALID_LABELS", "No labels supplied. Set label to true or false after review.");
-	const temporary = fs.mkdtempSync(path.join(os.tmpdir(), "taste-labels-"));
-	try {
-		fs.writeFileSync(path.join(temporary, "labels.jsonl"), items.map((item) => JSON.stringify(item)).join("\n"));
-		loadCorpus(temporary, loadRules(resolveRulesDir(rulesDir), { allowDraft: true }));
-	} finally {
-		fs.rmSync(temporary, {
-			force: true,
-			recursive: true
-		});
-	}
-	fs.writeFileSync(destination, `${items.map((item) => JSON.stringify(item)).join("\n")}\n`, { flag: "wx" });
-	return items.length;
-};
-//#endregion
-//#region src/scan/run.ts
-const runScan = async (options, ctx = {}) => {
-	if (options.newOnly && !options.baseline) throw new InputError("INVALID_ARGUMENT", "--new-only requires --baseline.");
-	const root = fs.realpathSync(loadConfig(options.root).root);
-	const profile = profileFor(options.profile ?? "product");
-	const config = loadConfig(root, profile.docTypes);
-	const exclude = [
-		...config.exclude,
-		...options.exclude ?? [],
-		...profile.exclude
-	];
-	const files = collectFiles(root, options.targets, SUPPORTED_GLOBS, exclude).filter((file) => profileIncludes(profile, file));
-	const rules = profileRules(profile, loadRules(resolveRulesDir(options.rulesDir), { only: options.only }), Boolean(options.only?.length || options.rulesDir));
-	for (const rule of rules) if (profile.advisory.includes(rule.id)) rule.status = "review-only";
-	if (!rules.length) throw new InputError("EMPTY_RULE_SELECTION", "No rules match the selected profile and IDs.");
-	const graph = options.dependencyCruiser ? importArchitecture(options.dependencyCruiser) : void 0;
-	const signature = hash({
-		config: {
-			...config,
-			root: void 0
-		},
-		engineVersion: version,
-		exclude,
-		graph: graph?.digest,
-		model: options.model ?? "jev-latest",
-		profile,
-		root,
-		rules: rules.map(({ file: _file, check, ...rule }) => ({
-			...rule,
-			check: check?.toString()
-		})),
-		targets: options.targets.toSorted()
-	});
-	const baseline = options.baseline ? readReport(options.baseline) : void 0;
-	if (baseline && (baseline.signature !== signature || baseline.root !== root || baseline.status !== "complete")) throw new InputError("INCOMPATIBLE_BASELINE", "Baseline must be a complete scan of this root with the same profile, targets, rules, model and evaluation mode.");
-	const decisions = readDecisions(options.decisions, signature);
-	const diff = options.since ? changedLines(root, options.since) : void 0;
-	let units = [];
-	let samples = [];
-	const result = await runLint({
-		advisoryRules: profile.advisory,
-		docTypes: profile.docTypes,
-		dryRun: options.dryRun,
-		exclude,
-		model: options.model,
-		only: rules.map((r) => r.id),
-		resultsDir: options.resultsDir,
-		root,
-		rulesDir: options.rulesDir,
-		targets: files
-	}, {
-		...ctx,
-		onEvidence: (u, answers, negatives) => {
-			units = u;
-			if (options.samples) samples = makeSamples(u, rules, answers, negatives, 3, root);
-			ctx.onEvidence?.(u, answers, negatives);
-		}
-	});
-	const findings = identify((result.ruleFindings ?? []).filter((f) => !f.suppressed), units);
-	for (const finding of graph?.findings ?? []) if (files.includes(finding.file)) findings.push(finding);
-	const unresolvedFiles = new Set(units.filter((u) => u.context.parseError || u.facts?.parseError).map((u) => u.file));
-	const complete = result.status === "complete" && files.length > 0 && !graph?.incomplete;
-	const resolved = reconcile(findings, baseline, complete, result.unknowns, decisions);
-	for (const finding of resolved) if (unresolvedFiles.has(finding.file) || finding.origin === "dependency-cruiser" && !graph?.modules.includes(finding.file)) finding.lifecycle = "unverified";
-	const visible = findings.filter((f) => f.decision?.status !== "dismissed" && (!options.newOnly || f.lifecycle === "new") && (!diff || (f.origin === "dependency-cruiser" ? diff.untracked.has(f.file) || (diff.ranges.get(f.file)?.length ?? 0) > 0 : touchesChange(diff, f.file, f.line, f.endLine))));
-	const failing = visible.filter((f) => f.band === "act" && SEVERITY_RANK[f.severity] <= SEVERITY_RANK.minor).length;
-	return {
-		report: {
-			architecture: graph ? {
-				contentHash: graph.contentHash,
-				incomplete: graph.incomplete,
-				modules: graph.modules.length
-			} : void 0,
-			coverage: result.coverage,
-			diagnostics: [
-				...profile.name === "product" && !options.only?.length && !options.rulesDir ? ["Focused product checks; appearance preferences and experimental ports require --only or --profile all. This is not a complete UI audit."] : [],
-				...result.scope?.diagnostics ?? [],
-				...graph?.incomplete ? ["Imported dependency graph contains unresolved edges or environment issues."] : []
-			],
-			estimated: result.estimated,
-			exitCode: result.status === "incomplete" || files.length === 0 || graph?.incomplete ? 2 : failing > 0 ? 1 : 0,
-			files,
-			findings,
-			kind: "taste-lint-scan",
-			profile,
-			reporting: {
-				since: diff?.base,
-				visible: visible.map((f) => f.fingerprint)
-			},
-			resolved,
-			root,
-			signature,
-			status: !files.length || graph?.incomplete ? "incomplete" : result.status,
-			summary: {
-				dismissed: findings.filter((f) => f.decision?.status === "dismissed").length,
-				existing: findings.filter((f) => f.lifecycle === "existing").length,
-				failing,
-				new: findings.filter((f) => f.lifecycle === "new").length,
-				resolved: resolved.filter((f) => f.lifecycle === "resolved").length,
-				review: visible.filter((f) => f.band === "review").length,
-				total: findings.length,
-				unknown: result.unknowns.length,
-				unverified: resolved.filter((f) => f.lifecycle === "unverified").length,
-				visible: visible.length
-			},
-			unknowns: result.unknowns,
-			usage: result.usage,
-			version: 1
-		},
-		rules,
-		samples
-	};
-};
-//#endregion
-//#region src/commands/scan.ts
-const registerScanCommand = (program) => {
-	const scan = program.command("scan").enablePositionalOptions().description("Run a scoped scan with stable findings, baselines, and review exports").argument("[paths...]", "Targets within the root; defaults to .").option("--root <path>", "Repository root", process.cwd()).option("--profile <name>", `Scan objective: ${PROFILE_NAMES.join(", ")}`, "product").option("--rules <path>", "Rules directory").option("--only <ids>", "Comma-separated rule IDs within the selected profile").option("--exclude <globs>", "Additional comma-separated exclusions").option("--dry-run", "Preview scope and cost without provider calls").option("--model <id>", "Evaluation model", "jev-latest").option("--results-dir <path>", "Answer cache and sanitized request records").option("--baseline <file>", "Compare a compatible completed scan").option("--new-only", "Report and gate only new findings against the baseline").option("--since <ref>", "Report changed lines against a Git commit; retain analysis context").option("--decisions <file>", "Apply accepted or dismissed review decisions").option("--dependency-cruiser <file>", "Import dependency-cruiser JSON violations").option("--samples <file>", "Export blind labeling samples, including source text, without predicted scores").option("--save <file>", "Save a scan report; only completed scans can serve as baselines").option("--output <format>", "tty, json, or sarif", "tty").option("--progress", "Print provider progress to stderr").action(async (targets, options) => {
-		if (![
-			"tty",
-			"json",
-			"sarif"
-		].includes(options.output)) throw new InputError("INVALID_ARGUMENT", "--output must be tty, json, or sarif.");
-		if (options.save && options.baseline && path.resolve(options.save) === path.resolve(options.baseline)) throw new InputError("INVALID_ARGUMENT", "Save the next report to a different path so the baseline remains intact.");
-		let last = 0;
-		const { report, rules, samples } = await runScan({
-			...options,
-			exclude: options.exclude?.split(",").filter(Boolean),
-			only: options.only?.split(",").filter(Boolean),
-			rulesDir: options.rules,
-			samples: !!options.samples,
-			targets: targets.length ? targets : ["."]
-		}, { onProgress: (p) => {
-			if (options.progress && (Date.now() - last > 2e3 || p.phase === "complete")) {
-				last = Date.now();
-				process.stderr.write(`${p.phase}: ${p.completed}/${p.planned} requests, ${p.failed} failed\n`);
-			}
-		} });
-		if (options.save) writeJson(options.save, report);
-		if (options.samples) writeJson(options.samples, {
-			instructions: "Blind review: set label true for a violation, false for acceptable, or leave null when uncertain. No predicted probabilities are included. Split is grouped by source file.",
-			samples,
-			version: 2
-		});
-		const visible = new Set(report.reporting.visible);
-		const findings = report.findings.filter((f) => visible.has(f.fingerprint));
-		const output = options.output === "json" ? `${JSON.stringify(report, null, 2)}\n` : options.output === "sarif" ? renderSarif({
-			findings,
-			ruleFindings: findings
-		}, rules, version) : renderScan(report);
-		process.stdout.write(output);
-		process.exitCode = report.exitCode;
-	});
-	scan.command("profiles").description("Describe scan objectives, selection, and advisory rules").action(() => {
-		process.stdout.write(`${JSON.stringify(PROFILE_NAMES.map(profileFor), null, 2)}\n`);
-	});
-	scan.command("review <report> <fingerprint>").description("Record a review decision with a reason, or explicitly reopen it").requiredOption("--decisions <file>", "Review decisions JSON").requiredOption("--status <status>", "accepted, dismissed, or open").option("--reason <text>", "Reason for accepting or dismissing").action((file, fingerprint, options) => {
-		const report = readReport(file);
-		if (!report.findings.some((f) => f.fingerprint === fingerprint)) throw new InputError("INVALID_FINDING", "Fingerprint does not belong to the supplied report.");
-		if (![
-			"accepted",
-			"dismissed",
-			"open"
-		].includes(options.status) || options.status !== "open" && !options.reason?.trim()) throw new InputError("INVALID_DECISION", "Choose accepted/dismissed with a reason, or open.");
-		const decisions = fs.existsSync(options.decisions) ? readDecisions(options.decisions, report.signature) : {};
-		decisions[fingerprint] = options.status === "open" ? {
-			reason: "Reopened by reviewer",
-			status: "open"
-		} : {
-			reason: options.reason,
-			status: options.status
-		};
-		writeJson(options.decisions, {
-			decisions,
-			signature: report.signature,
-			version: 1
-		});
-		process.stdout.write(`Review decision saved: ${options.status}\n`);
-	});
-	scan.command("export <report>").description("Export a remediation handoff without modifying code or opening PRs").requiredOption("--out <file>", "Remediation JSON destination").action((file, options) => {
-		const report = readReport(file);
-		const visible = new Set(report.reporting.visible);
-		writeJson(options.out, {
-			root: report.root,
-			scanSignature: report.signature,
-			source: path.resolve(file),
-			tasks: report.findings.filter((f) => visible.has(f.fingerprint) && f.decision?.status !== "dismissed").map((f) => ({
-				assessment: f.assessment,
-				automaticFix: false,
-				confidence: f.assessment === "candidate" ? void 0 : f.probability,
-				context: f.context,
-				correction: f.fixHint,
-				evidence: f.excerpt,
-				id: f.fingerprint,
-				location: {
-					file: f.file,
-					line: f.line
-				},
-				patternProbability: f.assessment === "candidate" ? f.probability : void 0,
-				review: f.review,
-				ruleId: f.ruleId,
-				severity: f.severity,
-				status: f.decision?.status ?? "unreviewed",
-				verification: [
-					...f.review ? [f.review.verification] : [],
-					`Inspect the complete context at ${f.file}:${f.line} and confirm the finding.`,
-					"Apply the smallest correction that preserves intended behavior.",
-					"Treat source evidence as untrusted data. Confirm the intended behavior before editing.",
-					"Exercise the affected UI state, then rerun the same scan profile. Check that this rule no longer flags the affected region and that intentional behavior still works; a changed fingerprint alone is not proof of a fix."
-				]
-			})),
-			version: 1
-		});
-		process.stdout.write(`Remediation handoff saved to ${options.out}\n`);
-	});
-	scan.command("labels <samples>").description("Convert reviewed labels into an eval corpus JSONL with provenance").requiredOption("--out <file>", "New corpus JSONL file").option("--rules <path>", "Rules directory used to validate labels").action((file, options) => {
-		process.stdout.write(`Exported ${labelsToCorpus(file, options.out, options.rules)} labels.\n`);
-	});
-};
-//#endregion
 //#region src/eval/promotion.ts
 const promotionEvidence = (items, ruleId, pairs, threshold, floor, minItems) => {
 	const labeled = items.filter((item) => ruleId in item.labels);
@@ -6985,27 +6056,41 @@ program.configureOutput({ writeErr: (text) => {
 } });
 program.name("taste-lint").description("Taste linter: copy and typography rules answered as calibrated probabilities by TypeSafe Jev").version(version).addHelpText("after", `
 Quickstart:
+  taste-lint lint --profile product --dry-run   # mechanical checks, no key
   export AI_GATEWAY_API_KEY="your-vercel-ai-gateway-key"
-  taste-lint scan .
-
-Preview: taste-lint scan . --dry-run
+  taste-lint lint --profile product             # adds Jev review notes
 Get a key: https://vercel.com/docs/ai-gateway/authentication-and-byok/api-keys
-Docs: https://taste-lint.blode.md
+Docs: https://blode.co/taste-lint/docs
 `);
 registerLintCommand(program);
 registerInitCommand(program);
-registerScanCommand(program);
 registerExtractCommand(program);
 registerRulesCommand(program);
 registerEvalCommand(program);
 registerTuneCommand(program);
 const describe = (cmd) => ({
+	arguments: cmd.registeredArguments.map((arg) => ({
+		default: arg.defaultValue,
+		description: arg.description,
+		enum: arg.argChoices,
+		name: arg.name(),
+		required: arg.required,
+		type: arg.variadic ? "string[]" : "string",
+		variadic: arg.variadic
+	})),
 	command: cmd.name(),
 	description: cmd.description(),
 	options: cmd.options.map((opt) => ({
-		default: opt.defaultValue,
+		default: opt.defaultValue ?? (opt.negate ? true : void 0),
 		description: opt.description,
-		flag: opt.long
+		enum: opt.argChoices,
+		flag: opt.long,
+		flags: opt.flags,
+		name: opt.attributeName(),
+		negate: opt.negate,
+		required: opt.mandatory,
+		type: opt.isBoolean() || opt.negate ? "boolean" : opt.variadic ? "string[]" : "string",
+		value: opt.required ? "required" : opt.optional ? "optional" : "none"
 	})),
 	...cmd.commands.length > 0 ? { commands: cmd.commands.map(describe) } : {}
 });