tools/

Command checkerrorcodes enforces the error-code convention: within one object code, every error variable must hold a unique DetailCode — the lib's err.As compares only DetailCode when the target has one, so a duplicate makes errors.Is conflate two unrelated errors (e.g.

Command checklayers enforces the layering rule from CLAUDE.md: the domain (internal/model/...) must not import the application or delivery layers.

Command checkroutes enforces the route-gating rule from CLAUDE.md: since use cases no longer duplicate permission checks, EVERY HTTP route registration in the handler packages must be gated by RequirePermission (inline, via a local middleware variable, or on its group).

Command errorcatalog emits the API error catalog as JSON: { "<FullCode>": "<English message>" }.

lifecyclefixture exports actual immutable Lab/objective pins for END browser work without exporting credentials, expected flags, topology or variable data.

lifecycleworker drives the actual PostgreSQL/River/native agent seam for END evidence.