Setzkasten

Setzkasten is a CLI-first tool for font license governance, auditability, and deterministic policy and quote checks. V1 focuses on reliable project records and offline-first workflows. There is no marketplace in V1.

Positioning

• Agencies: Setzkasten provides a verifiable font-license trail across client projects, so delivery stays fast without legal cleanup later.
• Product teams: Setzkasten turns font-license checks into CI policy, so teams catch license gaps in pull requests instead of during release panic.
• Enterprise/compliance teams: Setzkasten provides deterministic evidence, policy decisions, and audit-ready history for font usage at scale.

V1 Boundaries

• Open-source fonts and BYO (bring your own fonts) only.
• No hosting or distribution of proprietary font files.
• No proprietary font preview.
• Scans only controlled assets (local repositories or verified-domain workflows).
• Not legal advice.

Install

npm install -g @setzkasten/cli

Quick Start (Global Install)

setzkasten init --name "My Project"
setzkasten import --path . --apply
setzkasten add --font-id inter --family "Inter" --source oss
setzkasten scan --path . --discover
setzkasten doctor --strict
setzkasten evidence suggest --path . --apply
setzkasten evidence verify --strict
setzkasten evidence add --license-id lic_inter_001 --file ./licenses/OFL.txt
setzkasten exception add --code BYO_NO_EVIDENCE --font-id inter --reason "Temporary waiver"
setzkasten report --format markdown --output compliance-report.md
setzkasten sync export
setzkasten migrate --apply
setzkasten policy
setzkasten quote

Quick Start (Repository Source)

npm run build
node packages/cli/src/index.js init
node packages/cli/src/index.js import --path . --apply
node packages/cli/src/index.js add --font-id inter --family "Inter" --source oss
node packages/cli/src/index.js scan --discover
node packages/cli/src/index.js doctor --strict
node packages/cli/src/index.js evidence suggest --path . --apply
node packages/cli/src/index.js evidence verify --strict
node packages/cli/src/index.js evidence add --license-id lic_inter_001 --file ./licenses/OFL.txt
node packages/cli/src/index.js exception add --code BYO_NO_EVIDENCE --font-id inter --reason "Temporary waiver"
node packages/cli/src/index.js report --format markdown --output compliance-report.md
node packages/cli/src/index.js sync export
node packages/cli/src/index.js migrate --apply
node packages/cli/src/index.js policy
node packages/cli/src/index.js quote

CLI V1

• init
• add
• remove
• scan
• import
• doctor
• evidence add
• evidence suggest
• evidence verify
• exception add|list|remove
• report
• sync export
• policy
• quote
• migrate

License Workflow

• scan --discover finds font files and font-adjacent license files in the repository.
• scan --format sarif / scan --format junit enables CI-native output.
• Root scans ignore dependency directories like node_modules and vendor by default.
• Discovered license files include a deterministic document_hash (sha256) in CLI output.
• evidence add links a local license document hash to a license_instance.
• policy warns when BYO fonts have no linked license instance or no evidence.
• policy --format sarif / policy --format junit provides code-scanning and test-report outputs.
• policy --preset strict|startup|enterprise applies opinionated policy profiles.
• report includes CI-readiness, coverage KPIs, top risk codes, and actionable remediation lists.
• scan --discover ignores bundler artifacts like *.js.LICENSE.txt / *.css.LICENSE.txt.

Documentation

• V1 feature cut: docs/specs/v1-feature-set.md
• Policy rules: docs/specs/policy-rules.md
• Event log: docs/specs/event-log.md
• Manifest schema (concept): docs/specs/manifest-schema.md
• License schema (concept): docs/specs/license-schema.md
• JSON schemas: contracts/

License

See LICENSE.