version: 1
generated: 2026-01-20T00:00:00Z
compatibility:
  policy: "SemVer-like: commands/flags/exitCodes are backwards compatible within major version."
  deprecation:
    noticeMinimumDays: 90
    channels:
      - release-notes
      - --compat-report
commands:
  - name: advise
    subcommands:
      - name: summarize
        formats: [json, markdown, table]
        exitCodes:
          0: success
          2: validation-error
          3: backend-unavailable
      - name: explain
        formats: [json, markdown, table]
        exitCodes:
          0: success
          2: validation-error
          3: backend-unavailable
      - name: remediate
        flags:
          - name: strategy
            required: false
            values: [minimal, defense-in-depth, fast-track]
        exitCodes:
          0: success
          2: validation-error
          3: backend-unavailable
  - name: auth
    subcommands:
      - name: doctor
        exitCodes:
          0: success
          4: auth-misconfigured
          5: token-invalid
  - name: analytics
    subcommands:
      - name: sbom-lake
        subcommands:
          - name: suppliers
            formats: [table, json, csv]
            flags:
              - name: environment
                required: false
              - name: limit
                required: false
              - name: format
                required: false
                values: [table, json, csv]
              - name: output
                required: false
            exitCodes:
              0: success
              1: error
          - name: licenses
            formats: [table, json, csv]
            flags:
              - name: environment
                required: false
              - name: limit
                required: false
              - name: format
                required: false
                values: [table, json, csv]
              - name: output
                required: false
            exitCodes:
              0: success
              1: error
          - name: vulnerabilities
            formats: [table, json, csv]
            flags:
              - name: environment
                required: false
              - name: min-severity
                required: false
                values: [critical, high, medium, low]
              - name: limit
                required: false
              - name: format
                required: false
                values: [table, json, csv]
              - name: output
                required: false
            exitCodes:
              0: success
              1: error
          - name: backlog
            formats: [table, json, csv]
            flags:
              - name: environment
                required: false
              - name: limit
                required: false
              - name: format
                required: false
                values: [table, json, csv]
              - name: output
                required: false
            exitCodes:
              0: success
              1: error
          - name: attestation-coverage
            formats: [table, json, csv]
            flags:
              - name: environment
                required: false
              - name: limit
                required: false
              - name: format
                required: false
                values: [table, json, csv]
              - name: output
                required: false
            exitCodes:
              0: success
              1: error
          - name: trends
            formats: [table, json, csv]
            flags:
              - name: environment
                required: false
              - name: days
                required: false
              - name: series
                required: false
                values: [vulnerabilities, components, all]
              - name: limit
                required: false
              - name: format
                required: false
                values: [table, json, csv]
              - name: output
                required: false
            exitCodes:
              0: success
              1: error
telemetry:
  defaultEnabled: false
  envVars:
    optIn: STELLAOPS_TELEMETRY=1
    optOut: STELLAOPS_TELEMETRY=0
  persistField: telemetryEnabled
install:
  checksumRequired: true
  cosignVerifyDefault: true
  exitCodes:
    21: checksum-file-missing
    22: checksum-mismatch
buildxPlugin:
  imageDigest: "sha256:0000000000000000000000000000000000000000000000000000000000000000"
  rollbackCommand: "stella tool buildx rollback --to <digest>"
determinism:
  locale: "en-US"
  timezone: "UTC"
  jsonFormatting: "stable-sort-keys"
  tableWidth: 80
tests:
  - name: cli-compatibility-regression
    description: "Ensure commands/flags/exit codes match spec and telemetry defaults are enforced."