chore(lint): enable no-script-url

.oxlintrc.json

@@ -6,6 +6,7 @@
     "no-eval": "error",
     "no-implied-eval": "error",
     "no-new-func": "error",
+    "no-script-url": "error",
     "no-var": "error",
     "prefer-const": "error",
     "no-debugger": "error",

context/map/artifact-1-territory.md

@@ -2,15 +2,15 @@
 
 <!-- GENERATED by tools/repo-map/scan.mjs — do not hand-edit. Run `npm run repo-map`. -->
 
-> Scan of `dc6f74d` (2026-07-28) · window: last 12 months · engine: tools/repo-map
+> Scan of `0827c60` (2026-07-28) · window: last 12 months · engine: tools/repo-map
 
 **Where the work actually happens.** Git-history activity over the last 12 months, noise filtered (lockfiles, generated files, assets). Activity is a signal of *risk of accidental regression*, not of quality.
 
 ## Most active areas (commits touching path, depth 2)
 
 | Area | Commits |
 | --- | --- |
-| `context/map` | 86 |
+| `context/map` | 90 |
 | `src/lib` | 75 |
 | `context/changes` | 53 |
 | `tests/e2e` | 32 |
@@ -20,37 +20,37 @@
 | `context/archive` | 19 |
 | `tests/get-command.test.ts` | 13 |
 | `tools/repo-map` | 11 |
+| `.oxlintrc.json` | 9 |
 | `README.md` | 9 |
 | `tests/writer.test.ts` | 9 |
 | `tests/helpers` | 9 |
-| `.oxlintrc.json` | 8 |
 | `tests/smoke` | 8 |
 
 ## Most churned files
 
 | File | Commits |
 | --- | --- |
 | `package.json` | 30 |
-| `context/map/artifact-2-structure.md` | 19 |
-| `context/map/repo-map.md` | 19 |
-| `context/map/artifact-1-territory.md` | 18 |
-| `context/map/artifact-3-contributors.md` | 18 |
+| `context/map/artifact-2-structure.md` | 20 |
+| `context/map/repo-map.md` | 20 |
+| `context/map/artifact-1-territory.md` | 19 |
+| `context/map/artifact-3-contributors.md` | 19 |
 | `src/commands/get.ts` | 16 |
 | `.github/workflows/ci.yml` | 14 |
 | `tests/get-command.test.ts` | 13 |
 | `src/lib/writer.ts` | 12 |
 | `context/map/graph/coupling.json` | 10 |
+| `.oxlintrc.json` | 9 |
 | `README.md` | 9 |
 | `tests/writer.test.ts` | 9 |
-| `.oxlintrc.json` | 8 |
 | `src/lib/config.ts` | 8 |
 | `src/lib/manifest.ts` | 7 |
 
 ## Activity trend by quarter (top 5 areas)
 
 | Area | 2026-Q2 | 2026-Q3 |
 | --- | --- | --- |
-| `context/map` | 0 | 19 |
+| `context/map` | 0 | 20 |
 | `src/lib` | 34 | 1 |
 | `context/changes` | 28 | 1 |
 | `tests/e2e` | 11 | 0 |
@@ -66,9 +66,9 @@ Hidden neighbourhoods: these change together even when the folder tree suggests
 | context/changes  +  src/lib | 10 |
 | src/lib  +  tests/get-command.test.ts | 9 |
 | src/commands  +  tests/get-command.test.ts | 8 |
+| .oxlintrc.json  +  context/map | 7 |
 | src/lib  +  tests/writer.test.ts | 7 |
 | src/lib  +  tests/helpers | 7 |
-| .oxlintrc.json  +  context/map | 6 |
 | src/commands  +  tests/helpers | 6 |
 | context/changes  +  tests/writer.test.ts | 5 |
 | src/commands  +  tests/doctor-command.test.ts | 5 |

context/map/artifact-2-structure.md

@@ -2,7 +2,7 @@
 
 <!-- GENERATED by tools/repo-map/scan.mjs — do not hand-edit. Run `npm run repo-map`. -->
 
-> Scan of `dc6f74d` (2026-07-28) · window: last 12 months · engine: tools/repo-map
+> Scan of `0827c60` (2026-07-28) · window: last 12 months · engine: tools/repo-map
 
 **How it is built.** Static import graph of `src` plus a file inventory of every module. Folders show where the code is; the graph shows what actually depends on what.
 

context/map/artifact-3-contributors.md

@@ -2,7 +2,7 @@
 
 <!-- GENERATED by tools/repo-map/scan.mjs — do not hand-edit. Run `npm run repo-map`. -->
 
-> Scan of `dc6f74d` (2026-07-28) · window: last 12 months · engine: tools/repo-map
+> Scan of `0827c60` (2026-07-28) · window: last 12 months · engine: tools/repo-map
 
 **Who to ask before you change something.** Bots and AI agents (Claude, Codex, Copilot, dependabot…) are filtered out — this is about humans who hold undocumented context. Answers "who has context on this area", not "who changed this line" (that is `git blame`).
 
@@ -11,15 +11,15 @@
 | Contributor | Commits |
 | --- | --- |
 | “mkczarkowski” | 77 |
-| Marcin Czarkowski | 12 |
+| Marcin Czarkowski | 13 |
 | psmyrdek | 8 |
 | Przemek Smyrdek | 2 |
 
 ## Who to ask, per active area
 
 | Area | Ask (commits) |
 | --- | --- |
-| `context/map` | Marcin Czarkowski (9) |
+| `context/map` | Marcin Czarkowski (10) |
 | `src/lib` | “mkczarkowski” (29), psmyrdek (4) |
 | `context/changes` | “mkczarkowski” (28) |
 | `tests/e2e` | “mkczarkowski” (8), psmyrdek (3) |

context/map/repo-map.md

@@ -2,13 +2,13 @@
 
 <!-- GENERATED by tools/repo-map/scan.mjs — do not hand-edit. Run `npm run repo-map`. -->
 
-> Scan of `dc6f74d` (2026-07-28) · window: last 12 months · engine: tools/repo-map
+> Scan of `0827c60` (2026-07-28) · window: last 12 months · engine: tools/repo-map
 >
 > Operational map of the territory, built from cheap deterministic signals (git history + import graph), synthesized for decisions — not an essay. A new developer should know in ~15 min where things live, what is dangerous, and where to start. Refresh with `npm run repo-map`.
 
 ## 1. TL;DR
 
-- 10x-cli: 3 source modules; the centre of gravity is **`context/map`** (86 commits in window, 24 files).
+- 10x-cli: 3 source modules; the centre of gravity is **`context/map`** (90 commits in window, 24 files).
 - Work concentrates in a few active areas; most of the tree is comparatively stable.
 - No import cycles detected in the primary module this run.
 - Scanned window is **the last 12 months**.
@@ -28,7 +28,7 @@ Top active areas (full table in `artifact-1-territory.md`):
 
 | Area | Commits |
 | --- | --- |
-| `context/map` | 86 |
+| `context/map` | 90 |
 | `src/lib` | 75 |
 | `context/changes` | 53 |
 | `tests/e2e` | 32 |
@@ -47,8 +47,8 @@ From git co-change (history) — verify against the import graph before trusting
 | context/changes  +  src/lib | 10 |
 | src/lib  +  tests/get-command.test.ts | 9 |
 | src/commands  +  tests/get-command.test.ts | 8 |
+| .oxlintrc.json  +  context/map | 7 |
 | src/lib  +  tests/writer.test.ts | 7 |
-| src/lib  +  tests/helpers | 7 |
 
 Structural coupling and cycles live in `artifact-2-structure.md` and `graph/`.
 
@@ -60,7 +60,7 @@ _No high-risk zones flagged this run._
 
 | Area | Ask |
 | --- | --- |
-| `context/map` | Marcin Czarkowski (9) |
+| `context/map` | Marcin Czarkowski (10) |
 | `src/lib` | “mkczarkowski” (29), psmyrdek (4) |
 | `context/changes` | “mkczarkowski” (28) |
 | `tests/e2e` | “mkczarkowski” (8), psmyrdek (3) |
@@ -70,10 +70,10 @@ _No high-risk zones flagged this run._
 ## 6. First day — read these first
 
 - `package.json` — 30 commits in window
-- `context/map/artifact-2-structure.md` — 19 commits in window
-- `context/map/repo-map.md` — 19 commits in window
-- `context/map/artifact-1-territory.md` — 18 commits in window
-- `context/map/artifact-3-contributors.md` — 18 commits in window
+- `context/map/artifact-2-structure.md` — 20 commits in window
+- `context/map/repo-map.md` — 20 commits in window
+- `context/map/artifact-1-territory.md` — 19 commits in window
+- `context/map/artifact-3-contributors.md` — 19 commits in window
 - `src/commands/get.ts` — 16 commits in window
 - `.github/workflows/ci.yml` — 14 commits in window
 - `tests/get-command.test.ts` — 13 commits in window