docguard-cli 0.31.0__tar.gz → 0.33.0__tar.gz

{docguard_cli-0.31.0/extensions/spec-kit-docguard → docguard_cli-0.33.0/.agent}/skills/docguard-fix/SKILL.md

@@ -6,10 +6,10 @@ description: AI-driven documentation repair with structured research workflow, t
 compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli or npx docguard-cli)
 metadata:
   author: docguard
-  version: 0.31.0
+  version: 0.32.0
   source: extensions/spec-kit-docguard/skills/docguard-fix
 ---
-<!-- docguard:version: 0.31.0 -->
+<!-- docguard:version: 0.32.0 -->
 
 # DocGuard Fix Skill
 

{docguard_cli-0.31.0 → docguard_cli-0.33.0}/.agent/skills/docguard-guard/SKILL.md

@@ -7,10 +7,10 @@ description: Run DocGuard guard validation against Canonical-Driven Development
 compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli or npx docguard-cli)
 metadata:
   author: docguard
-  version: 0.31.0
+  version: 0.32.0
   source: extensions/spec-kit-docguard/skills/docguard-guard
 ---
-<!-- docguard:version: 0.31.0 -->
+<!-- docguard:version: 0.32.0 -->
 
 # DocGuard Guard Skill
 

{docguard_cli-0.31.0/extensions/spec-kit-docguard → docguard_cli-0.33.0/.agent}/skills/docguard-review/SKILL.md

@@ -6,10 +6,10 @@ description: Cross-document consistency analysis and quality assessment. Perform
 compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli or npx docguard-cli)
 metadata:
   author: docguard
-  version: 0.31.0
+  version: 0.32.0
   source: extensions/spec-kit-docguard/skills/docguard-review
 ---
-<!-- docguard:version: 0.31.0 -->
+<!-- docguard:version: 0.32.0 -->
 
 # DocGuard Review Skill
 

{docguard_cli-0.31.0/extensions/spec-kit-docguard → docguard_cli-0.33.0/.agent}/skills/docguard-score/SKILL.md

@@ -6,10 +6,10 @@ description: CDD maturity assessment with category-aware improvement roadmap. Ru
 compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli or npx docguard-cli)
 metadata:
   author: docguard
-  version: 0.31.0
+  version: 0.32.0
   source: extensions/spec-kit-docguard/skills/docguard-score
 ---
-<!-- docguard:version: 0.31.0 -->
+<!-- docguard:version: 0.32.0 -->
 
 # DocGuard Score Skill
 

{docguard_cli-0.31.0 → docguard_cli-0.33.0}/.agent/skills/docguard-sync/SKILL.md

@@ -4,10 +4,10 @@ description: Keep canonical documentation ALWAYS UP TO DATE. Refreshes code-trut
 compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli or npx docguard-cli)
 metadata:
   author: docguard
-  version: 0.31.0
+  version: 0.32.0
   source: extensions/spec-kit-docguard/skills/docguard-sync
 ---
-<!-- docguard:version: 0.31.0 -->
+<!-- docguard:version: 0.32.0 -->
 
 # DocGuard Sync Skill
 

{docguard_cli-0.31.0 → docguard_cli-0.33.0}/.docguardignore

@@ -28,3 +28,13 @@ __pycache__/
 # current count would erase the historical record the audit exists to preserve.
 docs-canonical/SURFACE-AUDIT.md
 
+# Fixture/demo projects and packaging working notes — their .md files are
+# example content, not this project's documentation (doc-coverage tiering).
+# specs/ is deliberately NOT ignored: the Spec-Kit validator owns those.
+examples/
+examples/**
+templates/demo-fixture/
+templates/demo-fixture/**
+packaging/
+packaging/**
+

{docguard_cli-0.31.0 → docguard_cli-0.33.0}/.github/scripts/speckit-submission.py

@@ -61,11 +61,13 @@ def build(version: str, download_url: str):
             "name": "DocGuard — CDD Enforcement",
             "id": "docguard",
             "description": (
-                "The only doc-integrity engine with an MCP server, SARIF "
-                "output, and a deterministic zero-LLM core. Validates, "
-                "scores, and traces documentation against code — 24 "
-                "validators, stable finding codes, GitHub Action with PR "
-                "annotations, spec-kit hooks. Pure Node.js, one pinned dep."
+                "The only doc-integrity engine with an MCP server, "
+                "SARIF/JUnit output, and a deterministic zero-LLM core. "
+                "Validates, scores, and traces documentation against code — "
+                "27 validators, stable finding codes, adoption baseline for "
+                "legacy repos, compliance-evidence reports, GitHub Action "
+                "with PR annotations, spec-kit hooks. Pure Node.js, one "
+                "pinned dep."
             ),
             "author": "raccioly",
             "version": version,

{docguard_cli-0.31.0 → docguard_cli-0.33.0}/.github/workflows/ci.yml

@@ -72,6 +72,33 @@ jobs:
       - name: Diagnose
         run: node cli/docguard.mjs diagnose
 
+      # ── v0.33 surfaces — dogfood every new command shape ──
+      - name: CI gate (self, records history)
+        run: node cli/docguard.mjs ci || [ $? -eq 2 ]
+
+      - name: Score trend (reads history from the ci step)
+        run: node cli/docguard.mjs score --trend
+
+      - name: Compliance report (markdown + json + integrity determinism)
+        run: |
+          node cli/docguard.mjs report > /tmp/report.md
+          head -5 /tmp/report.md
+          node cli/docguard.mjs report --format json | python3 -c "import json,sys; d=json.load(sys.stdin); assert d['integrity'].startswith('sha256:'), d; print('report json OK', d['integrity'][:20])"
+
+      - name: Guard JUnit output is valid XML
+        run: |
+          node cli/docguard.mjs guard --format junit > /tmp/guard-junit.xml || [ $? -eq 2 ]
+          python3 -c "import xml.etree.ElementTree as ET; r=ET.parse('/tmp/guard-junit.xml').getroot(); print('junit OK:', r.attrib)"
+
+      - name: Baseline roundtrip (freeze → pass → restore)
+        run: |
+          mkdir -p /tmp/docguard-baseline && cd /tmp/docguard-baseline
+          printf '{"projectName":"bl-ci","profile":"standard"}' > .docguard.json
+          mkdir -p docs-canonical && echo "# Architecture" > docs-canonical/ARCHITECTURE.md
+          node $GITHUB_WORKSPACE/cli/docguard.mjs guard --update-baseline
+          node $GITHUB_WORKSPACE/cli/docguard.mjs guard   # must exit 0 now
+          node $GITHUB_WORKSPACE/cli/docguard.mjs guard --no-baseline || [ $? -ne 0 ]
+
       # ── Cross-project tests ──
       - name: Init in temp dir
         run: |

{docguard_cli-0.31.0 → docguard_cli-0.33.0}/.gitignore

@@ -39,3 +39,9 @@ dist/
 __pycache__/
 .venv
 .docguard/
+
+# Local security-scan artifacts (websec-validator) — contains fixture findings, machine-local
+websec-out/
+
+# OpenWolf private session memory (machine-local, not shared)
+.claude/openwolf-memory/

{docguard_cli-0.31.0 → docguard_cli-0.33.0}/.wolf/anatomy.md

@@ -1,7 +1,7 @@
 # anatomy.md
 
-> Auto-maintained by OpenWolf. Last scanned: 2026-07-06T14:46:58.012Z
-> Files: 670 tracked | Anatomy hits: 0 | Misses: 0
+> Auto-maintained by OpenWolf. Last scanned: 2026-07-16T01:51:08.316Z
+> Files: 692 tracked | Anatomy hits: 0 | Misses: 0
 
 ## ../../../../../../../tmp/
 
@@ -14,7 +14,7 @@
 ## ./
 
 - `.docguard.json` (~526 tok)
-- `.docguardignore` — # Python distribution artifacts (~199 tok)
+- `.docguardignore` — # Python distribution artifacts (~284 tok)
 - `.DS_Store` (~3818 tok)
 - `.gitignore` — Git ignore rules (~167 tok)
 - `.jules-setup.sh` — ========================================== (~631 tok)
@@ -23,10 +23,10 @@
 - `.pre-commit-hooks.yaml` — DocGuard hooks for the pre-commit framework (https://pre-commit.com). (~490 tok)
 - `action.yml` — Declares fs (~7591 tok)
 - `AGENTS.md` — AI Agent Instructions — DocGuard (~1827 tok)
-- `CHANGELOG.md` — Changelog (~45081 tok)
+- `CHANGELOG.md` — Changelog (~49280 tok)
 - `CLAUDE.md` — OpenWolf (~57 tok)
 - `CODE_OF_CONDUCT.md` — Contributor Covenant Code of Conduct (~532 tok)
-- `COMPARISONS.md` — Comparisons & Honest Limitations (~3053 tok)
+- `COMPARISONS.md` — Comparisons & Honest Limitations (~3382 tok)
 - `CONTRIBUTING.md` — Contributing to DocGuard (~1780 tok)
 - `docguard-cli-0.22.0.tgz` (~80828 tok)
 - `docguard-cli-0.23.0.tgz` (~81238 tok)
@@ -36,13 +36,13 @@
 - `LICENSE` — Project license (~286 tok)
 - `package-lock.json` — npm lock file (~617 tok)
 - `package.json` — Node.js package manifest (~459 tok)
-- `PHILOSOPHY.md` — The Philosophy of Canonical-Driven Development (~1757 tok)
+- `PHILOSOPHY.md` — The Philosophy of Canonical-Driven Development (~1854 tok)
 - `pr_description.md` (~260 tok)
 - `pyproject.toml` — The enforcement tool for Canonical-Driven Development (CDD). Audit, generate, and guard your project (~358 tok)
 - `README.es.md` — 🛡️ DocGuard (~1098 tok)
-- `README.md` — Project documentation (~8436 tok)
+- `README.md` — Project documentation (~9554 tok)
 - `README.pt-BR.md` — 🛡️ DocGuard (~1075 tok)
-- `ROADMAP.md` — DocGuard Roadmap (~2432 tok)
+- `ROADMAP.md` — DocGuard Roadmap (~2529 tok)
 - `SECURITY.md` — Security Policy (~357 tok)
 - `server.json` (~272 tok)
 - `smithery.yaml` — Smithery configuration for the DocGuard MCP server. (~283 tok)
@@ -51,6 +51,7 @@
 - `SUPPORT.md` — Support (~335 tok)
 - `test-draft.js` — Declares tmpDir (~192 tok)
 - `test-metrics.js` (~37 tok)
+- `VALIDATION.md` — Validation — how DocGuard's detectors earn their defaults (~1289 tok)
 
 ## .agent/
 
@@ -951,7 +952,7 @@
 
 ## .github/workflows/
 
-- `ci.yml` — CI: DocGuard CI (~1041 tok)
+- `ci.yml` — CI: DocGuard CI (~1468 tok)
 - `release.yml` — CI: Auto Release — Tag, GitHub Release, npm, PyPI (~3434 tok)
 - `sync-speckit-catalog.yml` — CI: Prepare Spec Kit Catalog Submission (Manual) (~1385 tok)
 
@@ -964,9 +965,9 @@
 ## cli/
 
 - `config.mjs` — DocGuard — configuration loading. (~3265 tok)
-- `docguard.mjs` — DocGuard CLI — The enforcement tool for Canonical-Driven Development (CDD) (~9606 tok)
-- `findings.mjs` — Findings — the structured, LLM-addressable result unit (v0.27). (~9698 tok)
-- `shared-git.mjs` — Shared Git Utilities — single source of truth for `git log` plumbing (~1851 tok)
+- `docguard.mjs` — DocGuard CLI — The enforcement tool for Canonical-Driven Development (CDD) (~10928 tok)
+- `findings.mjs` — Findings — the structured, LLM-addressable result unit (v0.27). (~10332 tok)
+- `shared-git.mjs` — Shared Git Utilities — single source of truth for `git log` plumbing (~3012 tok)
 - `shared-ignore.mjs` — Shared Ignore Utility — Unified file filtering for all validators. (~4132 tok)
 - `shared-source.mjs` — Shared Source Resolution — Monorepo-aware source discovery. (~4655 tok)
 - `shared.mjs` — Shared constants for DocGuard CLI — colors, profiles, version. (~3496 tok)
@@ -975,16 +976,20 @@
 
 - `agent.mjs` — `docguard agent` — the one-shot agent task graph. (~1644 tok)
 - `agents.mjs` — Agents Command — Generate agent-specific config files from AGENTS.md (~3307 tok)
+- `ci.mjs` — CI Command — Single command for CI/CD pipelines (~1226 tok)
 - `diff.mjs` — Diff Command — Show differences between canonical docs and implementation (~4128 tok)
 - `explain.mjs` — Explain Command — v0.16-P6. (~9474 tok)
 - `feedback.mjs` — Feedback Command — close the loop with the tool's maintainers (v0.27). (~1920 tok)
 - `generate.mjs` — Generate Command — Reverse-engineer canonical docs from an existing codebase (~6250 tok)
-- `guard.mjs` — Guard Command — Validate project against its canonical documentation (~11608 tok)
+- `guard.mjs` — Guard Command — Validate project against its canonical documentation (~12874 tok)
+- `hooks.mjs` — Hooks Command — Generate pre-commit/pre-push hooks for DocGuard (~5102 tok)
+- `impact.mjs` — Impact Command — S-11 (~5302 tok)
 - `init.mjs` — Init Command — Initialize CDD documentation from templates (~7278 tok)
 - `llms.mjs` — llms Command — Generate llms.txt from canonical documentation (~2137 tok)
-- `mcp.mjs` — MCP Command — DocGuard as a Model Context Protocol server (stdio). (~3098 tok)
+- `mcp.mjs` — MCP Command — DocGuard as a Model Context Protocol server (stdio). (~4890 tok)
 - `memory.mjs` — Memory Command — v0.17-P2. (~2957 tok)
-- `score.mjs` — Score Command — Calculate CDD maturity score (0-100) (~12221 tok)
+- `report.mjs` — Report Command — Compliance-evidence bundle for audits. (~2383 tok)
+- `score.mjs` — Score Command — Calculate CDD maturity score (0-100) (~12818 tok)
 - `setup.mjs` — Setup Command — Interactive onboarding wizard for DocGuard (~5280 tok)
 - `sync-tests.mjs` — `docguard sync --tests` — reconcile the TEST-SPEC Source-to-Test Map from disk. (~3191 tok)
 - `sync.mjs` — Sync Command — keep the documentation memory ALWAYS UP TO DATE. (~2371 tok)
@@ -993,24 +998,24 @@
 
 ## cli/scanners/
 
-- `agent-readability.mjs` — Agent Readability scanner — how well do this repo's docs serve an AI agent? (~2228 tok)
+- `agent-readability.mjs` — Agent Readability scanner — how well do this repo's docs serve an AI agent? (~2315 tok)
 - `instruction-audit.mjs` — Instruction Audit scanner — drift/conflict audit WITHIN agent instruction (~3668 tok)
 - `inventory.mjs` — Inventory scanners — code-truth the generator PRE-FILLS instead of leaving (~1699 tok)
 - `memory-plan.mjs` — Memory Plan — the orchestration artifact behind AI-powered Generate. (~5744 tok)
 - `project-type.mjs` — Project-Type Detection — the language-agnostic spine. (~4190 tok)
 - `routes.mjs` — Deep Route Scanner (~7712 tok)
-- `semantic-claims.mjs` — Semantic claim extractor (LLM field report #5). (~1998 tok)
+- `semantic-claims.mjs` — Semantic claim extractor (LLM field report #5). (~2120 tok)
 - `speckit.mjs` — Spec Kit Scanner — Detect, validate, and integrate with GitHub Spec Kit (~8882 tok)
 
 ## cli/validators/
 
 - `api-surface.mjs` — API-Surface Validator — Detects drift between the documented API surface (~5063 tok)
-- `architecture.mjs` — Architecture Validator — Enhanced with automatic import analysis (~3926 tok)
+- `architecture.mjs` — Architecture Validator — Enhanced with automatic import analysis (~4001 tok)
 - `canonical-sync.mjs` — Canonical-Sync Validator — v0.19-A. (~2947 tok)
 - `changelog.mjs` — Changelog Validator — Checks CHANGELOG.md has an [Unreleased] section, (~1050 tok)
-- `cross-reference.mjs` — Cross-Reference Validator — S-8 / K-7 (~4592 tok)
+- `cross-reference.mjs` — Cross-Reference Validator — S-8 / K-7 (~6034 tok)
 - `doc-quality.mjs` — Doc Quality Validator — Measures documentation writing quality (~6826 tok)
-- `docs-coverage.mjs` — Docs-Coverage Validator — Detects code features not referenced in docs. (~5516 tok)
+- `docs-coverage.mjs` — Docs-Coverage Validator — Detects code features not referenced in docs. (~5607 tok)
 - `docs-diff.mjs` — Docs-Diff Validator — Checks alignment between canonical docs and code. (~3326 tok)
 - `docs-sync.mjs` — Docs-Sync Validator — Checks that source files have matching canonical doc entries (~2949 tok)
 - `drift.mjs` — Drift Validator — Every // DRIFT: comment must have a DRIFT-LOG.md entry (~1290 tok)
@@ -1019,6 +1024,7 @@
 - `generated-staleness.mjs` — Generated-Doc Staleness Validator — M-1 / S-7 (~2919 tok)
 - `metadata-sync.mjs` — Metadata Sync Validator — Detects stale version references across docs. (~2155 tok)
 - `metrics-consistency.mjs` — Metrics Consistency Validator — Detects stale hardcoded numbers in docs. (~3635 tok)
+- `reference-existence.mjs` — Two-Revision Reference-Existence validator (REF001) — v0.31.0. (~3577 tok)
 - `schema-sync.mjs` — Schema Sync Validator — Ensures database schemas are documented in DATA-MODEL.md (~2108 tok)
 - `security.mjs` — Security Validator — Basic checks for secrets in code (~2831 tok)
 - `spec-kit.mjs` — Spec-Kit Validator — Validates Spec Kit artifacts (specs/, plans/, tasks/, constitution). (~224 tok)
@@ -1026,26 +1032,31 @@
 - `surface-sync.mjs` — Surface-Sync Validator — item-level drift detection for enumerable surfaces. (~4219 tok)
 - `test-spec.mjs` — Test Spec Validator — Checks that tests exist per TEST-SPEC.md coverage rules (~4463 tok)
 - `todo-tracking.mjs` — TODO/FIXME Tracking Validator — Ensures code annotations are documented (~3916 tok)
-- `traceability.mjs` — Traceability Validator — Checks that canonical docs are linked to source code (~4324 tok)
+- `traceability.mjs` — Traceability Validator — Checks that canonical docs are linked to source code (~5647 tok)
 
 ## cli/writers/
 
+- `baseline.mjs` — Adoption Baseline — `.docguard.baseline.json` (repo root, COMMITTED). (~994 tok)
+- `history.mjs` — Score History — local-first trend memory at `.docguard/history.jsonl`. (~815 tok)
+- `junit.mjs` — JUnit XML writer — `docguard guard --format junit`. (~1073 tok)
 - `mechanical.mjs` — Mechanical Fix Registry — applies deterministic, no-LLM fixes in place. (~3290 tok)
 - `sarif.mjs` — SARIF 2.1.0 writer — `docguard guard --format sarif`. (~1315 tok)
 
 ## docs-canonical/
 
 - `ARCHITECTURE.md` — Architecture (~3029 tok)
-- `DATA-MODEL.md` — Data Model (~1668 tok)
+- `CI-RECIPES.md` — CI Recipes (~2441 tok)
+- `DATA-MODEL.md` — Data Model (~1741 tok)
 - `REQUIREMENTS.md` — Requirements (~673 tok)
 - `SURFACE-AUDIT.md` — DocGuard Surface Audit (~5703 tok)
+- `TEST-SPEC.md` — Test Specification (~1339 tok)
 
 ## docs/
 
 - `ai-integration.md` — AI Integration Guide (~2024 tok)
-- `commands.md` — Commands Reference (~2157 tok)
-- `configuration.md` — Configuration (~1375 tok)
-- `faq.md` — Frequently Asked Questions (~1519 tok)
+- `commands.md` — Commands Reference (~2511 tok)
+- `configuration.md` — Configuration (~1491 tok)
+- `faq.md` — Frequently Asked Questions (~1627 tok)
 
 ## extensions/spec-kit-docguard/
 
@@ -1061,7 +1072,7 @@
 
 ## schemas/
 
-- `docguard-config.schema.json` — behavior: docs (~3015 tok)
+- `docguard-config.schema.json` — behavior: docs (~3090 tok)
 
 ## templates/
 
@@ -1087,23 +1098,34 @@
 - `agent-readability.test.mjs` — Declares metric (~1049 tok)
 - `agent.test.mjs` — Exports x (~1138 tok)
 - `agents-sync.test.mjs` — CLI: run (~1367 tok)
+- `baseline.test.mjs` — Adoption baseline — `.docguard.baseline.json` (v0.33). (~1919 tok)
 - `changelog.test.mjs` — Exports x, x (~1315 tok)
 - `commands.test.mjs` — DocGuard CLI Tests — Tests all commands and flags (~10442 tok)
+- `cross-reference.test.mjs` — Cross-Reference Validator — K-7 / S-8 (~4060 tok)
 - `ensure-skills-idempotent.test.mjs` — v0.24 — Skill install is idempotent (field report, Issue D). (~1133 tok)
-- `field-report-3-deferred.test.mjs` — v0.28 — the detection-gap items deferred from LLM field report #3. (~3122 tok)
+- `field-report-3-deferred.test.mjs` — v0.28 — the detection-gap items deferred from LLM field report #3. (~3325 tok)
 - `field-report-3.test.mjs` — v0.27 — LLM field report #3. (~3315 tok)
 - `freshness.test.mjs` — runGit: commitOldCode (~3536 tok)
+- `history.test.mjs` — Score history + `score --trend` (v0.33). (~1702 tok)
 - `hooks.test.mjs` — Declares afterFirst (~2420 tok)
+- `impact.test.mjs` — S-11 — `docguard impact` command. (~4128 tok)
 - `instruction-audit.test.mjs` — Instruction Audit scanner tests (field report #11 — MemoryLint-inspired). (~2387 tok)
 - `inventory.test.mjs` — Declares make (~1048 tok)
+- `junit.test.mjs` — `docguard guard --format junit` — JUnit XML for GitLab/Jenkins/Azure (v0.33). (~1307 tok)
 - `llms-full-pack.test.mjs` — CLI: run (~1304 tok)
-- `mcp.test.mjs` — MCP Server Tests — `docguard mcp` over stdio. (~2138 tok)
+- `mcp-http.test.mjs` — MCP Streamable HTTP transport — `docguard mcp --transport http`. (~1416 tok)
+- `mcp.test.mjs` — MCP Server Tests — `docguard mcp` over stdio. (~2282 tok)
 - `mechanical.test.mjs` — Declares write (~1161 tok)
 - `memory-plan.test.mjs` — Exports u, Button (~1834 tok)
 - `metrics-consistency.test.mjs` — Declares guardResults (~3942 tok)
 - `metrics-dedup.test.mjs` — v0.14.1-N1 — Metrics-Consistency dedup. (~1450 tok)
+- `nudge-hook.test.mjs` — Agent nudge hook — `docguard hooks --claude` + `docguard nudge-hook`. (~1681 tok)
 - `project-type.test.mjs` — Declares make (~2140 tok)
+- `reference-existence.test.mjs` — Exports validateToken, getUserById, verifyToken, getUserById + 4 more (~1853 tok)
+- `report.test.mjs` — `docguard report` — compliance-evidence bundle (v0.33). (~1636 tok)
 - `sarif.test.mjs` — Declares CLI (~1455 tok)
 - `shared-source.test.mjs` — API routes: GET (4 endpoints) (~1714 tok)
 - `speckit-phantom.test.mjs` — Exports users, fetchUserRecords, retry, adapter + 2 more (~2500 tok)
 - `trace-features.test.mjs` — `trace --features` — per-feature spec-kit adherence scoring. (~2423 tok)
+- `traceability.test.mjs` — Exports foo, GET, x (~3729 tok)
+- `v020-consolidation.test.mjs` — v0.20 — Surface consolidation tests. (~2540 tok)