@deftai/directive-core 0.93.0 → 0.94.0

package/dist/pr-merge-readiness/evaluate.js

@@ -1,7 +1,9 @@
+import { DEFAULT_CONSUMER_MIN_GREPTILE_CONFIDENCE, formatMinConfidenceRequirement, meetsMinGreptileConfidence, } from "../policy/min-greptile-confidence.js";
 import { INFORMAL_CLEAN_DIAGNOSTIC } from "./constants.js";
 /** Return failure messages (empty list == merge-ready). */
-export function evaluateGates(_prNumber, headSha, verdict, inline = null) {
+export function evaluateGates(_prNumber, headSha, verdict, inline = null, options = {}) {
     const failures = [];
+    const minConfidence = options.minConfidence ?? DEFAULT_CONSUMER_MIN_GREPTILE_CONFIDENCE;
     if (!verdict.found) {
         failures.push("No Greptile rolling-summary comment found on the PR. " +
             "Either Greptile has not posted yet, or the bot login filter is wrong. " +
@@ -32,9 +34,10 @@ export function evaluateGates(_prNumber, headSha, verdict, inline = null) {
                 "Confidence is a required exit-condition input per " +
                 "skills/deft-directive-review-cycle/SKILL.md Phase 2 Step 6.");
         }
-        else if (verdict.confidence <= 3) {
-            failures.push(`Greptile confidence is ${verdict.confidence}/5; exit condition requires > 3. ` +
-                "Address remaining findings or push clarifying changes.");
+        else if (!meetsMinGreptileConfidence(verdict.confidence, minConfidence)) {
+            failures.push(`Greptile confidence is ${verdict.confidence}/5; exit condition requires ${formatMinConfidenceRequirement(minConfidence)}. ` +
+                "Address remaining findings or push clarifying changes. " +
+                "Inspect the floor via `task policy:show --field=minGreptileConfidence` (#3095).");
         }
         if (verdict.p0Count > 0 || verdict.p1Count > 0) {
             failures.push(`Greptile reports ${verdict.p0Count} P0 and ${verdict.p1Count} P1 findings ` +

package/dist/pr-merge-readiness/mergeability.d.ts

@@ -42,5 +42,11 @@ export declare function verdictShaIsStale(verdict: GreptileVerdict, headSha: str
  * regardless of GitHub mergeability (guardrail: do not merge a PR with a real
  * P0/P1 review finding).
  */
-export declare function verdictBlockIsSoftOnly(verdict: GreptileVerdict, headSha: string | null, inline?: InlineGreptileFindings | null): boolean;
+export declare function verdictBlockIsSoftOnly(verdict: GreptileVerdict, headSha: string | null, inline?: InlineGreptileFindings | null, 
+/**
+ * Resolved min Greptile confidence (1–5). Scores below this are HARD blockers
+ * and must never be reconciled away via GitHub CLEAN (#3095). Defaults to the
+ * consumer floor (4).
+ */
+minConfidence?: number): boolean;
 //# sourceMappingURL=mergeability.d.ts.map

package/dist/pr-merge-readiness/mergeability.js

@@ -1,3 +1,4 @@
+import { meetsMinGreptileConfidence } from "../policy/min-greptile-confidence.js";
 /** REST `mergeable_state` value that mirrors GraphQL `mergeStateStatus: CLEAN`. */
 export const MERGE_STATE_CLEAN = "clean";
 /**
@@ -75,7 +76,13 @@ export function verdictShaIsStale(verdict, headSha) {
  * regardless of GitHub mergeability (guardrail: do not merge a PR with a real
  * P0/P1 review finding).
  */
-export function verdictBlockIsSoftOnly(verdict, headSha, inline = null) {
+export function verdictBlockIsSoftOnly(verdict, headSha, inline = null, 
+/**
+ * Resolved min Greptile confidence (1–5). Scores below this are HARD blockers
+ * and must never be reconciled away via GitHub CLEAN (#3095). Defaults to the
+ * consumer floor (4).
+ */
+minConfidence = 4) {
     if (inline !== null && inline.error !== null) {
         return false;
     }
@@ -99,7 +106,12 @@ export function verdictBlockIsSoftOnly(verdict, headSha, inline = null) {
     if (verdict.errored) {
         return false;
     }
-    if (verdict.confidence !== null && verdict.confidence <= 3) {
+    // Confidence below the resolved floor is a hard blocker (#2260 / #3095).
+    // Dogfood/policy may set min=5 so a 4/5 score stays hard even when GitHub
+    // reports CLEAN + MERGEABLE. Use the shared predicate so the export is on
+    // the production call path (SLizard #3095).
+    if (verdict.confidence !== null &&
+        !meetsMinGreptileConfidence(verdict.confidence, minConfidence)) {
         return false;
     }
     if (verdict.p0Count > 0 || verdict.p1Count > 0) {

package/dist/pr-monitor/main.d.ts

@@ -5,6 +5,8 @@ export interface ParsedMonitorArgs {
     readonly repo: string | null;
     readonly capMinutes: number;
     readonly emitJson: boolean;
+    /** Project root for minGreptileConfidence (#3095 / #3102). Null = default cwd at run. */
+    readonly projectRoot: string | null;
     readonly error?: string;
 }
 export declare function parseMonitorArgs(argv: readonly string[]): ParsedMonitorArgs;

package/dist/pr-monitor/main.js

@@ -13,6 +13,7 @@ export function parseMonitorArgs(argv) {
     let repo = null;
     let capMinutes = 60;
     let emitJson = false;
+    let projectRoot = null;
     for (let i = 0; i < argv.length; i += 1) {
         const arg = argv[i];
         if (arg === "--json") {
@@ -26,6 +27,7 @@ export function parseMonitorArgs(argv) {
                     repo,
                     capMinutes,
                     emitJson,
+                    projectRoot,
                     error: "argument --repo: expected one argument",
                 };
             }
@@ -35,6 +37,24 @@ export function parseMonitorArgs(argv) {
         else if (arg?.startsWith("--repo=")) {
             repo = arg.slice("--repo=".length);
         }
+        else if (arg === "--project-root") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return {
+                    prNumber,
+                    repo,
+                    capMinutes,
+                    emitJson,
+                    projectRoot,
+                    error: "argument --project-root: expected one argument",
+                };
+            }
+            projectRoot = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--project-root=")) {
+            projectRoot = arg.slice("--project-root=".length);
+        }
         else if (arg === "--cap-minutes") {
             const value = argv[i + 1];
             if (value === undefined) {
@@ -43,6 +63,7 @@ export function parseMonitorArgs(argv) {
                     repo,
                     capMinutes,
                     emitJson,
+                    projectRoot,
                     error: "argument --cap-minutes: expected one argument",
                 };
             }
@@ -53,6 +74,7 @@ export function parseMonitorArgs(argv) {
                     repo,
                     capMinutes,
                     emitJson,
+                    projectRoot,
                     error: `invalid --cap-minutes value: ${value}`,
                 };
             }
@@ -68,6 +90,7 @@ export function parseMonitorArgs(argv) {
                     repo,
                     capMinutes,
                     emitJson,
+                    projectRoot,
                     error: `invalid --cap-minutes value: ${value}`,
                 };
             }
@@ -79,6 +102,7 @@ export function parseMonitorArgs(argv) {
                 repo,
                 capMinutes,
                 emitJson,
+                projectRoot,
                 error: `unrecognized arguments: ${arg}`,
             };
         }
@@ -90,6 +114,7 @@ export function parseMonitorArgs(argv) {
                     repo,
                     capMinutes,
                     emitJson,
+                    projectRoot,
                     error: `invalid PR number: ${arg}`,
                 };
             }
@@ -101,6 +126,7 @@ export function parseMonitorArgs(argv) {
                 repo,
                 capMinutes,
                 emitJson,
+                projectRoot,
                 error: `unrecognized arguments: ${arg}`,
             };
         }
@@ -111,10 +137,11 @@ export function parseMonitorArgs(argv) {
             repo,
             capMinutes,
             emitJson,
+            projectRoot,
             error: "the following arguments are required: pr_number",
         };
     }
-    return { prNumber, repo, capMinutes, emitJson };
+    return { prNumber, repo, capMinutes, emitJson, projectRoot };
 }
 export function runMonitor(argv, options = {}) {
     const args = parseMonitorArgs(argv);
@@ -131,6 +158,9 @@ export function runMonitor(argv, options = {}) {
     const { exitCode, payload, pollCount } = monitorFn(args.prNumber, repo, {
         capMinutes: args.capMinutes,
         runGh: options.runGh,
+        // CLI --project-root or cwd: production remote-monitor path must not silently
+        // resolve minGreptileConfidence from an unrelated cwd (#3095 residual / #3102).
+        projectRoot: args.projectRoot ?? process.cwd(),
     });
     const summaryLabel = summaryLabelForExit(exitCode);
     const via = typeof payload.via === "string" ? payload.via : "?";

package/dist/pr-monitor/monitor.js

@@ -125,7 +125,11 @@ export function monitor(prNumber, repo, options = {}) {
     const capSeconds = (options.capMinutes ?? 60) * 60;
     const clockFn = options.clockFn ?? systemMonotonicClock;
     const sleepFn = options.sleepFn ?? defaultSleep;
-    const callReadinessFn = options.callReadinessFn ?? ((n, r) => callReadiness(n, r, { runGh: options.runGh }));
+    const callReadinessFn = options.callReadinessFn ??
+        ((n, r) => callReadiness(n, r, {
+            runGh: options.runGh,
+            projectRoot: options.projectRoot ?? process.cwd(),
+        }));
     const startedAt = clockFn.now();
     const intervalSchedule = cadenceIntervals(cadence);
     const minCadenceSec = intervalSchedule.length > 0

package/dist/pr-monitor/readiness.js

@@ -27,7 +27,9 @@ export function callReadiness(prNumber, repo, options = {}) {
     try {
         process.stderr.write = captureWrite;
         const runGh = options.runGh ?? defaultRunGh;
-        const result = computeGateResult(prNumber, repo, runGh);
+        const result = computeGateResult(prNumber, repo, runGh, {
+            projectRoot: options.projectRoot ?? process.cwd(),
+        });
         const payload = gateResultToDict(result);
         const exitCode = exitCodeFor(result);
         return {

package/dist/pr-monitor/types.d.ts

@@ -17,6 +17,12 @@ export interface MonitorOptions {
     readonly clockFn?: MonotonicClock;
     readonly callReadinessFn?: CallReadinessFn;
     readonly runGh?: RunGhFn;
+    /**
+     * Project root for plan.policy.review.minGreptileConfidence (#3095).
+     * When pr-monitor targets a remote repo from a different cwd, pass the
+     * monitored project's root so confidence policy is not resolved from cwd.
+     */
+    readonly projectRoot?: string | null;
 }
 export interface MonitorRunResult {
     readonly exitCode: number;
@@ -26,5 +32,7 @@ export interface MonitorRunResult {
 export interface CallReadinessOptions {
     readonly runGh?: RunGhFn;
     readonly timeoutMs?: number;
+    /** Project root for minGreptileConfidence resolve (#3095). */
+    readonly projectRoot?: string | null;
 }
 //# sourceMappingURL=types.d.ts.map

package/dist/pr-wait-mergeable/cascade.d.ts

@@ -1,6 +1,8 @@
 import { type AgentMergeEvaluateResult } from "../policy/require-human-merge.js";
 import { type SemanticGreenFn } from "./semantic-green.js";
 import type { MergeFn, MonitorFn, ProtectedCheckFn, WaitMergeableResult } from "./types.js";
+/** Post-merge umbrella checklist + current-shape refresh (#1649). */
+export type UmbrellaReconcileFn = (projectRoot: string, repo: string) => void;
 export interface WaitMergeableOptions {
     readonly protectedFn?: ProtectedCheckFn;
     readonly monitorFn?: MonitorFn;
@@ -21,6 +23,12 @@ export interface WaitMergeableOptions {
     readonly agentMergeFn?: (projectRoot: string) => AgentMergeEvaluateResult;
     /** When true, skip human-merge / intent preflight (tests only). */
     readonly skipHumanMergeGate?: boolean;
+    /**
+     * Post-merge umbrella reconcile (#1649). Defaults to live reconcileUmbrellas.
+     * Pass `null` to skip (unit tests that inject mergeFn must pass null so they
+     * never mutate real GitHub current-shape comments from the worktree cwd).
+     */
+    readonly umbrellaReconcileFn?: UmbrellaReconcileFn | null;
 }
 /** Run protected-check -> wait -> merge cascade (#1369). */
 export declare function waitMergeableAndMerge(prNumber: number, repo: string, options: {

package/dist/pr-wait-mergeable/cascade.js

@@ -1,5 +1,6 @@
 import { evaluateIntentCeilingFromEnv } from "../policy/intent-ceiling.js";
 import { evaluateAgentMerge, } from "../policy/require-human-merge.js";
+import { reconcileUmbrellas, renderUmbrellasReport } from "../vbrief-reconcile/umbrellas.js";
 import { classifyMonitorOutcome, parseMonitorPayload } from "./classify.js";
 import { EXIT_CONFIG_ERROR, EXIT_MERGED, EXIT_TIMEOUT_OR_ESCALATION } from "./constants.js";
 import { makeResult } from "./result.js";
@@ -12,6 +13,12 @@ function isProtectedCheckConfigFailure(stderr) {
         tail.includes("Cannot find module") ||
         tail.includes("protected-check script not found:"));
 }
+function defaultPostMergeUmbrellaReconcile(projectRoot, repo) {
+    const [, umOutcome] = reconcileUmbrellas(projectRoot, { repo });
+    if (umOutcome.changed.length > 0 || umOutcome.errors.length > 0) {
+        process.stderr.write(`${renderUmbrellasReport(umOutcome)}\n`);
+    }
+}
 /** Run protected-check -> wait -> merge cascade (#1369). */
 export function waitMergeableAndMerge(prNumber, repo, options) {
     const protectedFn = options.protectedFn ?? runProtectedCheck;
@@ -93,7 +100,9 @@ export function waitMergeableAndMerge(prNumber, repo, options) {
             error: semanticGreen.error,
         });
     }
-    const [monRc, monStdout, monStderr] = monitorFn(prNumber, repo, options.capMinutes);
+    const [monRc, monStdout, monStderr] = monitorFn(prNumber, repo, options.capMinutes, {
+        projectRoot,
+    });
     const monitorPayload = parseMonitorPayload(monStdout);
     const [outcome, monitorExit] = classifyMonitorOutcome(monRc, monitorPayload);
     if (outcome !== "clean") {
@@ -114,6 +123,24 @@ export function waitMergeableAndMerge(prNumber, repo, options) {
     }
     const [mergeRc, mergeStdout, mergeStderr] = mergeFn(prNumber, repo);
     if (mergeRc === 0) {
+        // Best-effort umbrella checklist + current-shape refresh after child merge (#1649).
+        // Failures must not flip a successful merge into an error exit.
+        // null = skip; undefined = live default (skipped under VITEST unless injected).
+        const umbrellaFn = options.umbrellaReconcileFn === null
+            ? null
+            : options.umbrellaReconcileFn !== undefined
+                ? options.umbrellaReconcileFn
+                : process.env.VITEST === "true"
+                    ? null
+                    : defaultPostMergeUmbrellaReconcile;
+        if (umbrellaFn !== null) {
+            try {
+                umbrellaFn(projectRoot, repo);
+            }
+            catch {
+                /* best-effort; merge remains authoritative */
+            }
+        }
         return makeResult({
             prNumber,
             repo,

package/dist/pr-wait-mergeable/main.d.ts

@@ -8,6 +8,8 @@ export interface ParsedWaitMergeableArgs {
     readonly cascadeMode: boolean;
     readonly requireMasterCiGreen: boolean;
     readonly baseBranch: string | null;
+    /** Project root for minGreptileConfidence (#3095 / #3102). Null = cwd at run. */
+    readonly projectRoot: string | null;
     readonly error?: string;
 }
 export declare function parseWaitMergeableArgs(argv: readonly string[]): ParsedWaitMergeableArgs;

package/dist/pr-wait-mergeable/main.js

@@ -19,6 +19,7 @@ export function parseWaitMergeableArgs(argv) {
     let cascadeMode = false;
     let requireMasterCiGreen = false;
     let baseBranch = null;
+    let projectRoot = null;
     const baseReturn = () => ({
         prNumber,
         repo,
@@ -28,6 +29,7 @@ export function parseWaitMergeableArgs(argv) {
         cascadeMode,
         requireMasterCiGreen,
         baseBranch,
+        projectRoot,
     });
     for (let i = 0; i < argv.length; i += 1) {
         const arg = argv[i];
@@ -51,6 +53,17 @@ export function parseWaitMergeableArgs(argv) {
         else if (arg?.startsWith("--base-branch=")) {
             baseBranch = arg.slice("--base-branch=".length);
         }
+        else if (arg === "--project-root") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...baseReturn(), error: "argument --project-root: expected one argument" };
+            }
+            projectRoot = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--project-root=")) {
+            projectRoot = arg.slice("--project-root=".length);
+        }
         else if (arg === "--repo") {
             const value = argv[i + 1];
             if (value === undefined) {
@@ -154,6 +167,9 @@ export function runWaitMergeable(argv, options = {}) {
         cascadeMode: args.cascadeMode,
         requireMasterCiGreen: args.requireMasterCiGreen,
         baseBranch: args.baseBranch,
+        // Explicit CLI root (or cwd) so remote-target cascade does not resolve
+        // minGreptileConfidence from an unrelated directory (#3102).
+        projectRoot: args.projectRoot ?? process.cwd(),
     });
     const summaryLabel = summaryLabelForExit(result.exitCode);
     process.stderr.write(`[pr_wait_mergeable] PR #${result.prNumber} repo=${result.repo} ` +

package/dist/pr-wait-mergeable/types.d.ts

@@ -12,6 +12,8 @@ export interface WaitMergeableResult {
 }
 export type SubprocessTriple = readonly [number, string, string];
 export type ProtectedCheckFn = (prNumber: number, repo: string | null, protectedIssues: readonly number[]) => SubprocessTriple;
-export type MonitorFn = (prNumber: number, repo: string, capMinutes: number) => SubprocessTriple;
+export type MonitorFn = (prNumber: number, repo: string, capMinutes: number, options?: {
+    readonly projectRoot?: string;
+}) => SubprocessTriple;
 export type MergeFn = (prNumber: number, repo: string | null) => SubprocessTriple;
 //# sourceMappingURL=types.d.ts.map

package/dist/pr-wait-mergeable/wrappers.d.ts

@@ -35,6 +35,12 @@ export declare function runProtectedCheck(prNumber: number, repo: string | null,
 export interface RunMonitorOptions {
     readonly nodeExecutable?: string;
     readonly timeout?: number;
+    /**
+     * Project root for plan.policy.review.minGreptileConfidence when the
+     * cascade cwd is not the monitored project (#3095 residual / #3102).
+     * Defaults to process.cwd() when omitted.
+     */
+    readonly projectRoot?: string;
 }
 /** Invoke pr-monitor CLI with --json and return (returncode, stdout, stderr). */
 export declare function runMonitor(prNumber: number, repo: string, capMinutes: number, options?: RunMonitorOptions): SubprocessTriple;

package/dist/pr-wait-mergeable/wrappers.js

@@ -105,6 +105,7 @@ export function runMonitor(prNumber, repo, capMinutes, options = {}) {
     }
     const node = options.nodeExecutable ?? process.execPath;
     const timeoutSec = options.timeout ?? capMinutes * 60 + 60;
+    const projectRoot = options.projectRoot ?? process.cwd();
     const cmd = [
         scriptPath,
         String(prNumber),
@@ -112,6 +113,8 @@ export function runMonitor(prNumber, repo, capMinutes, options = {}) {
         repo,
         "--cap-minutes",
         String(capMinutes),
+        "--project-root",
+        projectRoot,
         "--json",
     ];
     // Stream the monitor's per-poll heartbeat live (a buffered poll looks like a

package/dist/pr-watch/constants.d.ts

@@ -6,7 +6,10 @@
  * cannot promise to poll and then silently forget (2026-05-11 three-strikes on
  * #1051 / #1054).
  */
-/** CLEAN: SHA-matched, non-errored, no P0/P1, confidence > 3, CI green. */
+/**
+ * CLEAN: SHA-matched, non-errored, no P0/P1, confidence >= resolved min, CI green.
+ * Min defaults to consumer 4 (legacy > 3); dogfood/policy may raise to 5 (#3095).
+ */
 export declare const EXIT_CLEAN = 0;
 /** NEW_P0_P1: blocking findings on the CURRENT (SHA-matched) review. */
 export declare const EXIT_NEW_P0_P1 = 1;

package/dist/pr-watch/constants.js

@@ -6,7 +6,10 @@
  * cannot promise to poll and then silently forget (2026-05-11 three-strikes on
  * #1051 / #1054).
  */
-/** CLEAN: SHA-matched, non-errored, no P0/P1, confidence > 3, CI green. */
+/**
+ * CLEAN: SHA-matched, non-errored, no P0/P1, confidence >= resolved min, CI green.
+ * Min defaults to consumer 4 (legacy > 3); dogfood/policy may raise to 5 (#3095).
+ */
 export const EXIT_CLEAN = 0;
 /** NEW_P0_P1: blocking findings on the CURRENT (SHA-matched) review. */
 export const EXIT_NEW_P0_P1 = 1;
@@ -57,7 +60,7 @@ export const WATCH_HELP = "usage: task pr:watch -- <pr_number> [options]\n" +
     "  --project-root PATH   Chdir before probing (optional)\n" +
     "\n" +
     "exit codes:\n" +
-    "  0  CLEAN       SHA-matched review, confidence > 3, no P0/P1, CI green\n" +
+    "  0  CLEAN       SHA-matched review, confidence >= policy min (default 4; dogfood 5), no P0/P1, CI green\n" +
     "  1  NEW_P0_P1   Blocking findings on the current (SHA-matched) review\n" +
     "  2  ERRORED | STALL | TIMEOUT | CI_BLOCKED | RUNNER_CAPACITY_STALL | config / usage error\n";
 /**

package/dist/pr-watch/main.js

@@ -223,6 +223,7 @@ export function runWatch(argv, options = {}) {
             clockFn: options.clockFn,
             probeFn: options.probeFn,
             stallThreshold: options.stallThreshold,
+            projectRoot: args.projectRoot ?? process.cwd(),
         });
         if (args.emitJson) {
             process.stdout.write(emitWatchJson(result));

package/dist/pr-watch/probe.d.ts

@@ -9,5 +9,5 @@ import type { WatchProbe } from "./types.js";
  * detector (#1056 AC-2). All gh access routes through the injectable RunGhFn
  * seam, which defaults to the UTF-8-safe execFile capture (#1366).
  */
-export declare function probeOnce(prNumber: number, repoArg: string | null, runGh?: RunGhFn): WatchProbe;
+export declare function probeOnce(prNumber: number, repoArg: string | null, runGh?: RunGhFn, projectRoot?: string | null): WatchProbe;
 //# sourceMappingURL=probe.d.ts.map

package/dist/pr-watch/probe.js

@@ -1,4 +1,5 @@
 import { detect, evaluateCleanGate, parseConfidence, parseLastReviewedShaMarkdownLink, parseLastReviewedShaNaiveInline, } from "../content-contracts/skills/greptile-detector.js";
+import { resolveMinGreptileConfidence } from "../policy/min-greptile-confidence.js";
 import { evaluateCiGate } from "../pr-merge-readiness/ci-gate.js";
 import { GREPTILE_ERRORED_SENTINEL } from "../pr-merge-readiness/constants.js";
 import { defaultRunGh, fetchCheckRunsRest, fetchGreptileBodyRest, fetchGreptileCommentBody, fetchPrHeadSha, fetchPrHeadShaRest, resolveRepo, } from "../pr-merge-readiness/gh.js";
@@ -32,9 +33,10 @@ function errorProbe(headSha, message) {
  * detector (#1056 AC-2). All gh access routes through the injectable RunGhFn
  * seam, which defaults to the UTF-8-safe execFile capture (#1366).
  */
-export function probeOnce(prNumber, repoArg, runGh = defaultRunGh) {
+export function probeOnce(prNumber, repoArg, runGh = defaultRunGh, projectRoot = null) {
     const resolved = resolveRepo(repoArg, runGh);
     const repo = resolved.repo;
+    const minConfidence = resolveMinGreptileConfidence(projectRoot ?? process.cwd()).min;
     // 1. HEAD SHA -- primary `gh pr view`, then REST fallback when a repo resolved.
     let headSha = fetchPrHeadSha(prNumber, repo, runGh);
     if (headSha === null && repo !== null) {
@@ -88,6 +90,7 @@ export function probeOnce(prNumber, repoArg, runGh = defaultRunGh) {
         ciFailures,
         errored,
         terminalCheckRun,
+        minConfidence,
     });
     return {
         found,

package/dist/pr-watch/types.d.ts

@@ -34,7 +34,7 @@ export type SleepFn = (seconds: number) => void;
 export interface MonotonicClock {
     now(): number;
 }
-export type ProbeFn = (prNumber: number, repo: string | null, runGh: RunGhFn) => WatchProbe;
+export type ProbeFn = (prNumber: number, repo: string | null, runGh: RunGhFn, projectRoot?: string | null) => WatchProbe;
 export interface WatchOptions {
     readonly maxWaitMinutes?: number;
     readonly pollSeconds?: number;
@@ -44,6 +44,12 @@ export interface WatchOptions {
     readonly sleepFn?: SleepFn;
     readonly clockFn?: MonotonicClock;
     readonly probeFn?: ProbeFn;
+    /**
+     * Project root for resolving plan.policy.review.minGreptileConfidence (#3095).
+     * When omitted, probeOnce uses process.cwd(). Finish-loop / pr:watch MUST pass
+     * the caller project-root so a chdir elsewhere cannot apply the wrong floor.
+     */
+    readonly projectRoot?: string | null;
 }
 export interface WatchResult {
     readonly verdict: string;

package/dist/pr-watch/watch.js

@@ -44,7 +44,8 @@ export function watch(prNumber, repo, options = {}) {
     const runGh = options.runGh ?? defaultRunGh;
     const clockFn = options.clockFn ?? systemMonotonicClock;
     const sleepFn = options.sleepFn ?? defaultSleep;
-    const probeFn = options.probeFn ?? probeOnce;
+    const projectRoot = options.projectRoot ?? null;
+    const probeFn = options.probeFn ?? ((n, r, gh, root) => probeOnce(n, r, gh, root ?? projectRoot));
     const capSeconds = Math.max(0, maxWaitMinutes * 60);
     // Bounded loop (time is still the authority via the cap check below) so no
     // unbounded `while (true)`; +1 covers the trailing poll after the final wait.
@@ -62,7 +63,7 @@ export function watch(prNumber, repo, options = {}) {
         pollCount: poll,
     });
     for (let poll = 1; poll <= maxPolls; poll += 1) {
-        const probe = probeFn(prNumber, repo, runGh);
+        const probe = probeFn(prNumber, repo, runGh, projectRoot);
         lastProbe = probe;
         const elapsed = Math.round(clockFn.now() - startedAt);
         process.stderr.write(`${formatWatchStatus(poll, maxPolls, probe, elapsed)}\n`);

package/dist/review-monitor/index.d.ts

@@ -1,5 +1,6 @@
 export * from "./constants.js";
 export * from "./github-lease.js";
+export * from "./l4-owner.js";
 export * from "./lease-comment.js";
 export * from "./record.js";
 export * from "./tier-detection.js";

package/dist/review-monitor/index.js

@@ -1,5 +1,6 @@
 export * from "./constants.js";
 export * from "./github-lease.js";
+export * from "./l4-owner.js";
 export * from "./lease-comment.js";
 export * from "./record.js";
 export * from "./tier-detection.js";

package/dist/review-monitor/l4-owner.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Owner Continuity / L4 owner gate (#3090).
+ *
+ * Exit 0 only when a fresh sticky review-owner lease exists on the PR,
+ * or the caller asserts `review_cycle: done` after Step 6.
+ * Freeform started/pending/initiated values are rejected.
+ * skipped / n/a / parent-retained are process evidence only — they do NOT
+ * satisfy this machine gate when --pr is required (lease-or-done).
+ */
+import { EXIT_CONFIG_ERROR, EXIT_NOT_READY, EXIT_READY } from "./constants.js";
+import type { ReviewOwnerGithubSeams } from "./github-lease.js";
+import { type ReviewMonitorRecord } from "./record.js";
+/** Allowed review_cycle evidence values (prefix form for in_progress/skipped). */
+export type ReviewCycleEvidence = "done" | "n/a" | `in_progress:${string}` | `skipped:${string}`;
+export declare const L4_OWNER_HELP: string;
+export declare function parseReviewCycleEvidence(raw: string | null | undefined): {
+    ok: true;
+    value: ReviewCycleEvidence | null;
+} | {
+    ok: false;
+    reason: string;
+};
+/** Parse in_progress:<pr>#<ref> into parts; null if not that form. */
+export declare function parseInProgressEvidence(value: string): {
+    pr: number;
+    ref: string;
+} | null;
+export interface VerifyL4OwnerArgs {
+    readonly pr: number;
+    readonly projectRoot: string;
+    readonly repo?: string | null;
+    readonly headSha?: string | null;
+    readonly reviewCycle?: string | null;
+    readonly now?: Date;
+    readonly seams?: ReviewOwnerGithubSeams;
+}
+export interface VerifyL4OwnerResult {
+    readonly exitCode: typeof EXIT_READY | typeof EXIT_NOT_READY | typeof EXIT_CONFIG_ERROR;
+    readonly message: string;
+    readonly monitorRecord: ReviewMonitorRecord | null;
+    readonly reviewCycle: ReviewCycleEvidence | null;
+    readonly path: "lease" | "done" | "none" | "illegal" | "config";
+}
+export declare function evaluateL4OwnerGate(args: VerifyL4OwnerArgs): VerifyL4OwnerResult;
+export declare function l4OwnerResultToJson(result: VerifyL4OwnerResult): Record<string, unknown>;
+//# sourceMappingURL=l4-owner.d.ts.map