| name | cli-execution-auditor |
| description | Audit facade-backed CLI execution, lane contracts, or Station Maps. |
| role | quality-gate |
CLI Execution Auditor
Opt-in tool. Deterministically audits a facade-backed CLI against the per-lane
contract and can project a Branch Station Map. Lane audit check kinds:
- Static — contract assertions caught with zero target invocations.
- Surface — run each enumerable invocation, assert its lane clause.
Pass/fail is a fact derived from the contract, not a judge's vote. Scope is the
facade lane only.
Command
bun run auditor -- audit <target> [--only <clause>] [--ledger <path>] [--json]
bun run auditor -- station-map <target> [--ledger <path>] [--json]
<target> — path to a facade-backed skill with @side-quest/cli-command-facade and a discovered command contract.--only <clause> — restrict to one clause id (see the catalog).--ledger <path> — ledger destination (default docs/cli-audits/<cli-name>/audit.md).- Exit:
0 clean, 1 findings, 2 usage error.
station-map — reconcile command discovery, package Branch Station Catalog,
and station evidence into Declared Branch Coverage.
Front door: package.json#scripts (auditor).
Workflow
- Run
bun run auditor -- audit <target> on a facade-backed CLI.
