CLI shared exports — pure, fs-free published entry surface
AnaWeb (the hosted product, separate private repo) needs to import anatomia-cli's REQ validator and proof-health derivers as a **single source of truth** instead of forking them. The fork already exists and is already drifting: anaweb has `validateRequirement(filename, content)` while the CLI's real function is `validateReqContent(content, stem)`. Per decision D20 (`MINTED_ROADMAPS/anatomia/18-anaweb-reframed.md`), the fix is to expose the pure logic from the CLI so:
- **D13 parity is guaranteed by construction** — AnaWeb's requirement validation cannot diverge from `ana req validate`, because it *is* `ana req validate` (the same imported function).
- **AnaWeb's Stage-1 memory digest can reuse the CLI's own proof-health computations** rather than re-deriving (and mis-deriving) them.
proof-core fs-free guard is inert — it walks nothing past the barrel, so the central serverless-safety invariant is unprotected for that entry
obs→ closed
Contract A016/A017 matcher (contains .d.ts) is weaker than AC4's real invariant (types must precede import); the test enforces ordering but the sealed contract does not
obspackages/cli/package.json→ acknowledge
Root '.' exports types condition points at dist/index.d.ts, which builds as a shebang-only 20-byte stub with no type exports — the root types condition is cosmetic/misleading for a consumer