tools/

Command canongen renders the canon move table.

Command catalog generates registry.json, catalog.json and counts.json from plugin manifests, releases.json and bundles.json (contract:plugins.catalog v1).

Command cmdinventory prints the CLI's real command tree.

Command covfloor checks per-package statement coverage against floors kept as data (contract cap:cli.coverage-floors, EPIC P7-GUARD decision G7).

Package main — allowlist.go Known-safe auth middleware names and exempt route patterns.

Purpose: project the committed fact sources (.github/VERSION, .github/command-registry.json, .github/openapi.json) into the public facts document (contract:cli.public-facts v1).

Purpose: resolve each scanned invocation's command path against the

Command imagebump proposes pin bumps for internal/compose/images.yaml.

Command imagelock generates and checks internal/compose/images.lock.json.

Command jsonvalidate checks one JSON document against the generated schema.

Command manifestv2migrate converts, regenerates and checks plugin.json files for manifest v2 (P7-PLUG-01).

Purpose: decide whether the env vars a command's own source reads are

Command perfbench is the performance harness of the nself CLI (contract:cli.perfbench v1; EPIC P7-GUARD, decision G8).

Built-in schema registrations: envelope, error object, command registry.

Command servicecatalog renders the nSelf service catalog as markdown.

Command wikigen generates one wiki page per top-level CLI command.