@deftai/directive-runtime 0.126.0-beta.3 → 0.128.0

package/dist/lifecycle-cli/coverage-map.js

@@ -2,248 +2,250 @@
  * Wave 8.5 Bucket B coverage map: pytest CLI tests → TS vitest / existing-coverage (#1838 s3).
  * Python tests remain in-tree until Wave 9 (#1731); entries tagged wave9-delete are dedup candidates.
  */
+/** Python pytest root segments joined at runtime (avoid class-2 path literals). */
+const PY_CLI_TESTS = "tests" + "/cli";
 /** Canonical mapping for lifecycle CLI pytest files in scope of story 1838-s3. */
 export const LIFECYCLE_CLI_COVERAGE_MAP = [
     {
-        pythonTest: "tests/cli/test_vbrief_activate.py",
+        pythonTest: `${PY_CLI_TESTS}/test_vbrief_activate.py`,
         tsTarget: "packages/core/src/vbrief-activate/{activate,main,coverage-boost}.test.ts + lifecycle-cli/dispatch-vbrief.test.ts",
         disposition: "lifecycle-cli-dispatch",
         wave9Delete: true,
         notes: "Module matrix in core; deft-ts vbrief-activate argv/exit in lifecycle-cli.",
     },
     {
-        pythonTest: "tests/cli/test_vbrief_fidelity_legacy.py",
+        pythonTest: `${PY_CLI_TESTS}/test_vbrief_fidelity_legacy.py`,
         tsTarget: "packages/core/src/vbrief-validation/fidelity.test.ts",
         disposition: "existing-coverage",
         wave9Delete: true,
         notes: "Legacy fidelity normalization covered in TS vbrief-validation module.",
     },
     {
-        pythonTest: "tests/cli/test_vbrief_migrate_conformance.py",
+        pythonTest: `${PY_CLI_TESTS}/test_vbrief_migrate_conformance.py`,
         tsTarget: "packages/core/src/vbrief-validate/main.test.ts (scanVbrief/conformance)",
         disposition: "existing-coverage",
         wave9Delete: true,
         notes: "Conformance scan parity in vbrief-validate TS port.",
     },
     {
-        pythonTest: "tests/cli/test_vbrief_preflight_resolver.py",
+        pythonTest: `${PY_CLI_TESTS}/test_vbrief_preflight_resolver.py`,
         tsTarget: "packages/cli/src/vbrief-preflight.test.ts + lifecycle-cli/dispatch-preflight.test.ts",
         disposition: "lifecycle-cli-dispatch",
         wave9Delete: false,
         notes: "Install-layout resolver still Python-only; TS preflight gate + dispatcher alias covered.",
     },
     {
-        pythonTest: "tests/cli/test_vbrief_reconcile_graph.py",
+        pythonTest: `${PY_CLI_TESTS}/test_vbrief_reconcile_graph.py`,
         tsTarget: "packages/core/src/vbrief-reconcile/graph.test.ts",
         disposition: "existing-coverage",
         wave9Delete: true,
         notes: "Dependency-graph promotion logic in TS vbrief-reconcile.",
     },
     {
-        pythonTest: "tests/cli/test_vbrief_reconcile_labels.py",
+        pythonTest: `${PY_CLI_TESTS}/test_vbrief_reconcile_labels.py`,
         tsTarget: "packages/core/src/vbrief-reconcile/labels.test.ts",
         disposition: "existing-coverage",
         wave9Delete: true,
         notes: "Label/status derivation covered in TS reconcile engine.",
     },
     {
-        pythonTest: "tests/cli/test_vbrief_reconcile_umbrellas.py",
+        pythonTest: `${PY_CLI_TESTS}/test_vbrief_reconcile_umbrellas.py`,
         tsTarget: "packages/core/src/vbrief-reconcile/umbrellas.test.ts",
         disposition: "existing-coverage",
         wave9Delete: true,
         notes: "Umbrella current-shape render/parse in TS.",
     },
     {
-        pythonTest: "tests/cli/test_vbrief_reconciliation.py",
+        pythonTest: `${PY_CLI_TESTS}/test_vbrief_reconciliation.py`,
         tsTarget: "packages/core/src/vbrief-reconcile/reconciliation.test.ts",
         disposition: "existing-coverage",
         wave9Delete: true,
         notes: "Override reconciliation table covered in TS.",
     },
     {
-        pythonTest: "tests/cli/test_vbrief_routing.py",
+        pythonTest: `${PY_CLI_TESTS}/test_vbrief_routing.py`,
         tsTarget: "packages/core/src/vbrief-build/routing.test.ts",
         disposition: "existing-coverage",
         wave9Delete: true,
         notes: "Status↔folder routing map in TS vbrief-build.",
     },
     {
-        pythonTest: "tests/cli/test_vbrief_validate.py",
+        pythonTest: `${PY_CLI_TESTS}/test_vbrief_validate.py`,
         tsTarget: "packages/core/src/vbrief-validate/main.test.ts",
         disposition: "lifecycle-cli-dispatch",
         wave9Delete: true,
         notes: "validateAll matrix in core; deft-ts vbrief-validate argv in lifecycle-cli.",
     },
     {
-        pythonTest: "tests/cli/test_vbrief_validate_direct.py",
+        pythonTest: `${PY_CLI_TESTS}/test_vbrief_validate_direct.py`,
         tsTarget: "packages/core/src/vbrief-validate/branches.test.ts",
         disposition: "existing-coverage",
         wave9Delete: true,
         notes: "Direct validate orchestration branches in TS.",
     },
     {
-        pythonTest: "tests/cli/test_vbrief_validate_direct_orchestration.py",
+        pythonTest: `${PY_CLI_TESTS}/test_vbrief_validate_direct_orchestration.py`,
         tsTarget: "packages/core/src/vbrief-validate/branches.test.ts",
         disposition: "existing-coverage",
         wave9Delete: true,
         notes: "Reference/orchestration warnings in TS validate-all.",
     },
     {
-        pythonTest: "tests/cli/test_vbrief_validate_issue_536.py",
+        pythonTest: `${PY_CLI_TESTS}/test_vbrief_validate_issue_536.py`,
         tsTarget: "packages/core/src/vbrief-validate/branches.test.ts",
         disposition: "existing-coverage",
         wave9Delete: true,
         notes: "x-vbrief/github-issue reference counting in TS.",
     },
     {
-        pythonTest: "tests/cli/test_vbrief_validation.py",
+        pythonTest: `${PY_CLI_TESTS}/test_vbrief_validation.py`,
         tsTarget: "packages/core/src/vbrief-validation/validation.test.ts",
         disposition: "lifecycle-cli-dispatch",
         wave9Delete: true,
         notes: "Slug/title normalization in core; deft-ts vbrief-validation argv in lifecycle-cli.",
     },
     {
-        pythonTest: "tests/cli/test_scope_decompose.py",
+        pythonTest: `${PY_CLI_TESTS}/test_scope_decompose.py`,
         tsTarget: "packages/core/src/scope/decomposed-refs.test.ts",
         disposition: "python-oracle",
         wave9Delete: false,
         notes: "scope:decompose CLI still Python; unit helpers partially covered in decomposed-refs TS.",
     },
     {
-        pythonTest: "tests/cli/test_scope_decompose_unit.py",
+        pythonTest: `${PY_CLI_TESTS}/test_scope_decompose_unit.py`,
         tsTarget: "packages/core/src/scope/decomposed-refs.test.ts",
         disposition: "existing-coverage",
         wave9Delete: false,
         notes: "Pure decomposition helpers; CLI entry remains Python until Wave 9.",
     },
     {
-        pythonTest: "tests/cli/test_scope_demote.py",
+        pythonTest: `${PY_CLI_TESTS}/test_scope_demote.py`,
         tsTarget: "packages/core/src/scope/demote.test.ts",
         disposition: "lifecycle-cli-dispatch",
         wave9Delete: true,
         notes: "Demote transitions in core; deft-ts scope-lifecycle argv in lifecycle-cli.",
     },
     {
-        pythonTest: "tests/cli/test_scope_lifecycle.py",
+        pythonTest: `${PY_CLI_TESTS}/test_scope_lifecycle.py`,
         tsTarget: "packages/core/src/scope/{main,transition,scope-exhaustive}.test.ts",
         disposition: "lifecycle-cli-dispatch",
         wave9Delete: true,
         notes: "Promote/activate/complete matrix in core; scope-lifecycle dispatcher in lifecycle-cli.",
     },
     {
-        pythonTest: "tests/cli/test_scope_undo.py",
+        pythonTest: `${PY_CLI_TESTS}/test_scope_undo.py`,
         tsTarget: "packages/core/src/scope/undo.test.ts",
         disposition: "existing-coverage",
         wave9Delete: true,
         notes: "Undo round-trip covered in TS scope module.",
     },
     {
-        pythonTest: "tests/cli/test_issue_emit.py",
+        pythonTest: `${PY_CLI_TESTS}/test_issue_emit.py`,
         tsTarget: "packages/core/src/intake/issue-emit.test.ts",
         disposition: "lifecycle-cli-dispatch",
         wave9Delete: true,
         notes: "Emit body/render in core; deft-ts issue-emit argv in lifecycle-cli.",
     },
     {
-        pythonTest: "tests/cli/test_issue_ingest.py",
+        pythonTest: `${PY_CLI_TESTS}/test_issue_ingest.py`,
         tsTarget: "packages/core/src/intake/{issue-ingest,intake-cli-and-branches}.test.ts + lifecycle-cli/dispatch-intake.test.ts",
         disposition: "lifecycle-cli-dispatch",
         wave9Delete: true,
         notes: "Ingest happy-path/duplicate in core; dispatcher routing in lifecycle-cli.",
     },
     {
-        pythonTest: "tests/cli/test_issue_ingest_body_parsing.py",
+        pythonTest: `${PY_CLI_TESTS}/test_issue_ingest_body_parsing.py`,
         tsTarget: "packages/core/src/intake/markdown-scanners.test.ts",
         disposition: "existing-coverage",
         wave9Delete: true,
         notes: "Checkbox/AC body scanners in TS intake module.",
     },
     {
-        pythonTest: "tests/cli/test_issue_ingest_canonical_refs.py",
+        pythonTest: `${PY_CLI_TESTS}/test_issue_ingest_canonical_refs.py`,
         tsTarget: "packages/core/src/intake/issue-ingest.test.ts",
         disposition: "existing-coverage",
         wave9Delete: true,
         notes: "v0.6 canonical reference shape in TS ingest.",
     },
     {
-        pythonTest: "tests/cli/test_issue_ingest_direct.py",
+        pythonTest: `${PY_CLI_TESTS}/test_issue_ingest_direct.py`,
         tsTarget: "packages/core/src/intake/intake-coverage-boost.test.ts",
         disposition: "existing-coverage",
         wave9Delete: true,
         notes: "Repo URL / gh helper branches in TS intake.",
     },
     {
-        pythonTest: "tests/cli/test_issue_ingest_escape_corruption.py",
+        pythonTest: `${PY_CLI_TESTS}/test_issue_ingest_escape_corruption.py`,
         tsTarget: "packages/core/src/intake/intake-cli-and-branches.test.ts",
         disposition: "existing-coverage",
         wave9Delete: true,
         notes: "Literal escape preservation in TS ingest path.",
     },
     {
-        pythonTest: "tests/cli/test_reconcile_issues.py",
+        pythonTest: `${PY_CLI_TESTS}/test_reconcile_issues.py`,
         tsTarget: "packages/core/src/intake/reconcile-issues.test.ts",
         disposition: "lifecycle-cli-dispatch",
         wave9Delete: true,
         notes: "Reconcile classification in core; deft-ts reconcile-issues argv in lifecycle-cli.",
     },
     {
-        pythonTest: "tests/cli/test_reconcile_issues_754.py",
+        pythonTest: `${PY_CLI_TESTS}/test_reconcile_issues_754.py`,
         tsTarget: "packages/core/src/intake/reconcile-issues.test.ts",
         disposition: "existing-coverage",
         wave9Delete: true,
         notes: "Batch gh state fetch (>500) in TS reconcile module.",
     },
     {
-        pythonTest: "tests/cli/test_reconcile_issues_apply.py",
+        pythonTest: `${PY_CLI_TESTS}/test_reconcile_issues_apply.py`,
         tsTarget: "packages/core/src/intake/reconcile-issues.test.ts",
         disposition: "existing-coverage",
         wave9Delete: true,
         notes: "Apply/move section-C entries in TS reconcile.",
     },
     {
-        pythonTest: "tests/cli/test_reconcile_issues_direct.py",
+        pythonTest: `${PY_CLI_TESTS}/test_reconcile_issues_direct.py`,
         tsTarget: "packages/core/src/intake/intake-coverage-boost.test.ts",
         disposition: "existing-coverage",
         wave9Delete: true,
         notes: "gh subprocess error branches in TS reconcile helpers.",
     },
     {
-        pythonTest: "tests/cli/test_preflight_architecture_sor.py",
+        pythonTest: `${PY_CLI_TESTS}/test_preflight_architecture_sor.py`,
         tsTarget: "python-oracle (scripts/preflight_architecture_sor.py)",
         disposition: "python-oracle",
         wave9Delete: false,
         notes: "Architecture SOR preflight not yet on deft-ts; stays Python until TS port.",
     },
     {
-        pythonTest: "tests/cli/test_preflight_branch.py",
+        pythonTest: `${PY_CLI_TESTS}/test_preflight_branch.py`,
         tsTarget: "packages/core/src/branch/evaluate.test.ts + packages/cli/src/verify-branch.test.ts + lifecycle-cli/dispatch-preflight.test.ts",
         disposition: "lifecycle-cli-dispatch",
         wave9Delete: true,
         notes: "Branch gate in core/cli; verify-branch + vbrief:preflight alias via dispatcher.",
     },
     {
-        pythonTest: "tests/cli/test_preflight_cache.py",
+        pythonTest: `${PY_CLI_TESTS}/test_preflight_cache.py`,
         tsTarget: "python-oracle (scripts/preflight_cache.py)",
         disposition: "python-oracle",
         wave9Delete: false,
         notes: "verify:cache-fresh still Python-only per Wave 8 notes; TS cache module covers fetch not preflight gate.",
     },
     {
-        pythonTest: "tests/cli/test_preflight_gh.py",
+        pythonTest: `${PY_CLI_TESTS}/test_preflight_gh.py`,
         tsTarget: "python-oracle (scripts/preflight_gh.py)",
         disposition: "python-oracle",
         wave9Delete: false,
         notes: "Destructive gh preflight still Python-only; intake github-auth-modes partially overlaps read paths.",
     },
     {
-        pythonTest: "tests/cli/test_preflight_implementation.py",
+        pythonTest: `${PY_CLI_TESTS}/test_preflight_implementation.py`,
         tsTarget: "packages/core/src/preflight/evaluate.test.ts + packages/cli/src/vbrief-preflight.test.ts + lifecycle-cli/dispatch-preflight.test.ts",
         disposition: "lifecycle-cli-dispatch",
         wave9Delete: true,
         notes: "#810 state matrix in core; vbrief:preflight / vbrief-preflight dispatcher in lifecycle-cli.",
     },
     {
-        pythonTest: "tests/cli/test_preflight_story_start.py",
+        pythonTest: `${PY_CLI_TESTS}/test_preflight_story_start.py`,
         tsTarget: "packages/core/src/story-ready/evaluate.test.ts + packages/cli/src/verify-story-ready.test.ts + lifecycle-cli/dispatch-preflight.test.ts",
         disposition: "lifecycle-cli-dispatch",
         wave9Delete: true,

package/dist/migrate.js

@@ -3,9 +3,13 @@
  * Bumps the committed schema marker and runs supported vbrief→xbrief migration.
  */
 import { existsSync, readFileSync } from "node:fs";
-import { join } from "node:path";
+import { join, resolve } from "node:path";
 import { ContainedWriteError, containedWrite, } from "../vendor/directive-core/dist/fs/contained-write.js";
 import { detectLegacyVbriefLayout, detectXbriefConvergence, runXbriefMigration, } from "../vendor/directive-core/dist/xbrief-migrate/index.js";
+/** Normalize caller roots (including relative `--root app`) before path probes. */
+function absoluteProjectRoot(projectRoot) {
+    return resolve(projectRoot);
+}
 export const DATA_SCHEMA_MARKER_REL = ".deft/directive/data-schema.json";
 /** YOLO initial supported schema version recorded by migrate. */
 export const CURRENT_DATA_SCHEMA_VERSION = 1;
@@ -47,16 +51,19 @@ function emptyResult(from, root, message) {
  * Marker currency alone is insufficient — unmigrated vbrief/ must stay behind.
  */
 export function projectNeedsXbriefMigration(projectRoot) {
-    const convergence = detectXbriefConvergence(projectRoot);
+    const root = absoluteProjectRoot(projectRoot);
+    const convergence = detectXbriefConvergence(root);
     if (convergence.state === "legacy-only" ||
         convergence.state === "dual-populated" ||
         convergence.state === "empty-vbrief") {
         return true;
     }
+    // Marked vbrief/ retention is intentional; probe residual under xbrief/ only
+    // (skipLegacyRoot) so we never parse reason-string paths.
     if (convergence.state === "xbrief-marker") {
-        return false;
+        return detectLegacyVbriefLayout(root, { skipLegacyRoot: true }).legacyLayout;
     }
-    return detectLegacyVbriefLayout(projectRoot).legacyLayout;
+    return detectLegacyVbriefLayout(root).legacyLayout;
 }
 function applyXbriefMigration(root) {
     if (!projectNeedsXbriefMigration(root)) {
@@ -74,9 +81,7 @@ function applyXbriefMigration(root) {
                 migrated: [...outcome.migratedPaths],
                 archived: [...outcome.archivedPaths],
                 message: `xbrief migrate: ${outcome.migratedPaths.length} migrated` +
-                    (outcome.archivedPaths.length > 0
-                        ? `, ${outcome.archivedPaths.length} archived`
-                        : ""),
+                    (outcome.archivedPaths.length > 0 ? `, ${outcome.archivedPaths.length} archived` : ""),
             };
         case "rewritten":
             return {

package/dist/policy.d.ts

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { type CeremonyDepth, type HookHost, type SpecGuardEnforcement } from "@deftai/directive-core/policy";
+import { type CeremonyDepth, type CoverageMode, type HookHost, type SpecGuardEnforcement } from "@deftai/directive-core/policy";
 interface ShowArgs {
     format: "text" | "json";
     changedOnly: boolean;
@@ -8,7 +8,7 @@ interface ShowArgs {
     error?: string;
 }
 interface SetArgs {
-    cmd: "show" | "enforce-branches" | "allow-direct-commits" | "allow-destructive-gh-verbs" | "enforce-destructive-gh-verbs" | "allow-bot-merge" | "enable-value-feedback" | "clear-value-feedback" | "set-ceremony-dial" | "set-spec-guard-enforcement" | "disable-host-hooks" | "disable-directive" | "enable-directive" | "resolve";
+    cmd: "show" | "enforce-branches" | "allow-direct-commits" | "allow-destructive-gh-verbs" | "enforce-destructive-gh-verbs" | "allow-bot-merge" | "enable-value-feedback" | "clear-value-feedback" | "set-ceremony-dial" | "set-coverage-mode" | "set-spec-guard-enforcement" | "disable-host-hooks" | "disable-directive" | "enable-directive" | "resolve";
     confirm: boolean;
     actor: string;
     note: string;
@@ -21,6 +21,8 @@ interface SetArgs {
     ceremonyOverride?: CeremonyDepth | null;
     /** #3214 ceremony dial enabled flag for set-ceremony-dial. */
     ceremonyEnabled?: boolean;
+    /** #5791 coverageMode target for set-coverage-mode. */
+    coverageMode?: CoverageMode;
     /** #5350 driftGuard.enforcement target for set-spec-guard-enforcement. */
     specGuardEnforcement?: SpecGuardEnforcement;
     /** #4375 audited setter for valueFeedback.upstreamPrompt. */

package/dist/policy.js

@@ -6,7 +6,7 @@
 import { existsSync } from "node:fs";
 import { resolve as pathResolve, relative } from "node:path";
 import { fileURLToPath } from "node:url";
-import { ALLOW_BOT_MERGE_CAPABILITY_COST, ALLOW_DESTRUCTIVE_GH_VERBS_CAPABILITY_COST, CEREMONY_DEPTHS, clearValueFeedback, createNoDeftDirectiveFlag, describeShadowedPlanExtension, detectNoDeftDirective, detectShadowedPlanExtensions, disableHostHooks, disclosureLine, enableValueFeedback, FIELD_VALUE_FEEDBACK, FIELD_VALUE_FEEDBACK_CLI_ALIAS, formatValueFeedbackStatusLine, humanMergeDisclosureLine, inspectAllPolicies, inspectOnePolicy, loadProjectDefinition, NO_DEFT_DIRECTIVE_DISABLED_MESSAGE, NO_DEFT_DIRECTIVE_FLAG_NAME, NO_DEFT_DIRECTIVE_INCONSISTENT_MESSAGE, POLICY_AUDIT_NOOP_STDOUT, parseHookHost, policyColonInvocation, projectDefinitionPath, promoteSpecGuardDriftEnforcement, pythonListRepr, pythonStringRepr, registeredPolicyNames, removeNoDeftDirectiveFlag, renderJson, renderText, resolveHumanMergePolicy, resolvePolicy, resolveValueFeedback, SPEC_GUARD_ENFORCEMENTS, setAllowDestructiveGhVerbs, setCeremonyDial, setPolicy, setRequireHumanMerge, } from "../vendor/directive-core/dist/policy/index.js";
+import { ALLOW_BOT_MERGE_CAPABILITY_COST, ALLOW_DESTRUCTIVE_GH_VERBS_CAPABILITY_COST, CEREMONY_DEPTHS, COVERAGE_MODES, clearValueFeedback, createNoDeftDirectiveFlag, describeShadowedPlanExtension, detectNoDeftDirective, detectShadowedPlanExtensions, disableHostHooks, disclosureLine, enableValueFeedback, FIELD_VALUE_FEEDBACK, FIELD_VALUE_FEEDBACK_CLI_ALIAS, formatValueFeedbackStatusLine, humanMergeDisclosureLine, inspectAllPolicies, inspectOnePolicy, loadProjectDefinition, NO_DEFT_DIRECTIVE_DISABLED_MESSAGE, NO_DEFT_DIRECTIVE_FLAG_NAME, NO_DEFT_DIRECTIVE_INCONSISTENT_MESSAGE, POLICY_AUDIT_NOOP_STDOUT, parseHookHost, policyColonInvocation, projectDefinitionPath, promoteSpecGuardDriftEnforcement, pythonListRepr, pythonStringRepr, registeredPolicyNames, removeNoDeftDirectiveFlag, renderJson, renderText, resolveHumanMergePolicy, resolvePolicy, resolveValueFeedback, SPEC_GUARD_ENFORCEMENTS, setAllowDestructiveGhVerbs, setCeremonyDial, setCoverageMode, setPolicy, setRequireHumanMerge, } from "../vendor/directive-core/dist/policy/index.js";
 const CAPABILITY_COST_DISCLOSURE = "\u26a0 Capability-cost disclosure -- enabling direct commits to the default " +
     "branch turns OFF the deft branch-protection policy.\n" +
     "  \u2022 Pre-commit + pre-push hooks will no longer block default-branch " +
@@ -114,10 +114,87 @@ export function parseShowArgs(argv) {
 /** Parse argv for the policy CLI (show + set subcommands). */
 export function parseArgs(argv) {
     if (argv.length === 0) {
-        const usage = "usage: policy [show|enforce-branches|allow-direct-commits|allow-destructive-gh-verbs|enforce-destructive-gh-verbs|allow-bot-merge|enable-value-feedback|clear-value-feedback|set-ceremony-dial|set-spec-guard-enforcement|disable-host-hooks|disable-directive|enable-directive|resolve] ...";
+        const usage = "usage: policy [show|enforce-branches|allow-direct-commits|allow-destructive-gh-verbs|enforce-destructive-gh-verbs|allow-bot-merge|enable-value-feedback|clear-value-feedback|set-ceremony-dial|set-coverage-mode|set-spec-guard-enforcement|disable-host-hooks|disable-directive|enable-directive|resolve] ...";
         return makeSetError(usage);
     }
     const cmd = argv[0];
+    if (cmd === "set-coverage-mode") {
+        let confirm = false;
+        let actor = policyColonInvocation("set-coverage-mode");
+        let note = "";
+        let projectRoot = ".";
+        let coverageMode;
+        for (let i = 1; i < argv.length; i += 1) {
+            const arg = argv[i];
+            if (arg === "--confirm") {
+                confirm = true;
+            }
+            else if (arg === "--actor") {
+                const v = argv[i + 1];
+                if (v === undefined)
+                    return makeSetError("argument --actor: expected one argument");
+                actor = v;
+                i += 1;
+            }
+            else if (arg?.startsWith("--actor=")) {
+                actor = arg.slice("--actor=".length);
+            }
+            else if (arg === "--note") {
+                const v = argv[i + 1];
+                if (v === undefined)
+                    return makeSetError("argument --note: expected one argument");
+                note = v;
+                i += 1;
+            }
+            else if (arg?.startsWith("--note=")) {
+                note = arg.slice("--note=".length);
+            }
+            else if (arg === "--mode") {
+                const v = argv[i + 1];
+                if (v === undefined) {
+                    return makeSetError("argument --mode: expected initial|disabled|full");
+                }
+                if (!COVERAGE_MODES.includes(v)) {
+                    return makeSetError("argument --mode: expected initial|disabled|full, got " + JSON.stringify(v));
+                }
+                coverageMode = v;
+                i += 1;
+            }
+            else if (arg?.startsWith("--mode=")) {
+                const v = arg.slice("--mode=".length);
+                if (!COVERAGE_MODES.includes(v)) {
+                    return makeSetError("argument --mode: expected initial|disabled|full, got " + JSON.stringify(v));
+                }
+                coverageMode = v;
+            }
+            else if (arg === "--project-root") {
+                const v = argv[i + 1];
+                if (v === undefined)
+                    return makeSetError("argument --project-root: expected one argument");
+                projectRoot = v;
+                i += 1;
+            }
+            else if (arg?.startsWith("--project-root=")) {
+                projectRoot = arg.slice("--project-root=".length);
+            }
+            else if (arg === "--") {
+            }
+            else {
+                return makeSetError("unrecognized argument: " + arg);
+            }
+        }
+        return {
+            cmd: "set-coverage-mode",
+            confirm,
+            actor,
+            note,
+            projectRoot,
+            format: "text",
+            changedOnly: false,
+            field: null,
+            coverageMode,
+        };
+    }
     if (cmd === "set-spec-guard-enforcement") {
         let confirm = false;
         let actor = policyColonInvocation("set-spec-guard-enforcement");
@@ -691,6 +768,9 @@ export function run(argv) {
     if (args.cmd === "set-ceremony-dial") {
         return runSetCeremonyDial(args);
     }
+    if (args.cmd === "set-coverage-mode") {
+        return runSetCoverageMode(args);
+    }
     if (args.cmd === "set-spec-guard-enforcement") {
         return runSetSpecGuardEnforcement(args);
     }
@@ -720,6 +800,25 @@ function runSetSpecGuardEnforcement(args) {
     process.stdout.write(result.stdout);
     return result.exitCode;
 }
+/** Persist plan.policy.coverageMode (#5791). */
+function runSetCoverageMode(args) {
+    const root = pathResolve(args.projectRoot);
+    if (args.coverageMode === undefined) {
+        process.stdout.write("usage: policy set-coverage-mode -- --mode initial|disabled|full [--confirm] [--project-root PATH]\n" +
+            "  Inspect: " +
+            policyColonInvocation("show", " --field=coverageMode") +
+            "\n");
+        return 1;
+    }
+    const result = setCoverageMode(root, {
+        mode: args.coverageMode,
+        confirm: args.confirm,
+        actor: args.actor,
+        note: args.note,
+    });
+    process.stdout.write(result.stdout);
+    return result.exitCode;
+}
 /** Persist plan.policy.ceremonyDial override/enabled (#3214). */
 function runSetCeremonyDial(args) {
     const root = pathResolve(args.projectRoot);

package/dist/pre-pr-run.d.ts

@@ -29,6 +29,8 @@ interface ParsedArgs {
     markComplete: boolean;
     skillOpen: boolean;
     evaluate: boolean;
+    pushAdmit: boolean;
+    projectRoot: string | null;
     json: boolean;
     help: boolean;
     error?: string;

package/dist/pre-pr-run.js

@@ -4,7 +4,9 @@
  * `deft pre-pr:run` starts the prescribed workflow. Opening the skill file
  * is not completion. Generic mark-complete cannot mint a pass.
  */
+import { readFileSync } from "node:fs";
 import { completeRun, computeControllerObservedHash, controllerPublisher, digestApprovedCriteria, evaluateLivePrePrCheck, getDefaultPrePrStore, markComplete, noteSkillFileOpen, observeCommandPhase, PRE_PR_PHASE_IDS, phaseSpec, resolveRecordFromStore, startControllerRun, submitReviewerReport, } from "../vendor/directive-core/dist/pre-pr-controller/index.js";
+import { evaluatePrePush, parsePrePushStdin } from "../vendor/directive-core/dist/preflight/index.js";
 import { isDirectEntrypoint } from "./entrypoint.js";
 const USAGE = `Usage: deft pre-pr:run [options]
 
@@ -42,6 +44,8 @@ Options:
   --mark-complete         always refuses; cannot mint a pass
   --skill-open            always refuses; opening the skill is not completion
   --evaluate              evaluate live binding against the private store
+  --push-admit            enrolled push admission (#5804); reads pre-push stdin
+  --project-root <path>   project root for --push-admit / store resolution
   --json
   --help
 `;
@@ -76,6 +80,8 @@ export function parseArgs(argv) {
         markComplete: false,
         skillOpen: false,
         evaluate: false,
+        pushAdmit: false,
+        projectRoot: null,
         json: false,
         help: false,
     };
@@ -205,6 +211,18 @@ export function parseArgs(argv) {
         else if (arg === "--evaluate") {
             parsed.evaluate = true;
         }
+        else if (arg === "--push-admit") {
+            parsed.pushAdmit = true;
+        }
+        else if (arg === "--project-root" || arg?.startsWith("--project-root=")) {
+            const value = arg === "--project-root" ? argv[i + 1] : arg.slice("--project-root=".length);
+            if (value === undefined) {
+                return { ...parsed, error: "argument --project-root: expected one argument" };
+            }
+            parsed.projectRoot = value;
+            if (arg === "--project-root")
+                i += 1;
+        }
         else if (arg === "--repo" || arg?.startsWith("--repo=")) {
             const value = arg === "--repo" ? argv[i + 1] : arg.slice("--repo=".length);
             if (value === undefined)
@@ -346,6 +364,27 @@ export function run(argv) {
         process.stderr.write(`pre_pr_run: ${args.error}\n`);
         return 2;
     }
+    if (args.pushAdmit) {
+        const projectRoot = args.projectRoot?.trim() || process.cwd();
+        let rawStdin = "";
+        try {
+            rawStdin = readFileSync(0, "utf8");
+        }
+        catch {
+            rawStdin = "";
+        }
+        const refs = parsePrePushStdin(rawStdin);
+        const [code, msg] = evaluatePrePush(refs, {
+            projectRoot,
+            enrolledBoundPrePr: true,
+            rawStdin,
+        });
+        if (code === 0)
+            process.stdout.write(`${msg}\n`);
+        else
+            process.stderr.write(`${msg}\n`);
+        return code;
+    }
     if (args.skillOpen) {
         const d = noteSkillFileOpen();
         emit(args.json, d, d.message, true);
@@ -377,6 +416,7 @@ export function run(argv) {
                 process.stderr.write("pre_pr_run: --observe-command requires --exit-code\n");
                 return 2;
             }
+            // #5814 / #5791: mode-skip pairs use non-zero exit (lint_iteration exit 5 + LINT_ITERATION_MODE_SKIP).
             if (args.skipReason !== null && args.skipReason.length > 0 && args.exitCode === 0) {
                 process.stderr.write("pre_pr_run: skip requires a non-zero --exit-code plus --skip-reason\n");
                 return 2;

package/dist/removal-steps/index.d.ts

@@ -3,6 +3,6 @@
  * Runtime owns fs primitives so uninstall and upgrade share one substrate.
  * Launcher stays dep-free (AC3.1); cli registry only names convert-via-removals.
  */
-export { clearOwnedHookEntries, isUnsafeSubmoduleGitlink, normalizeGitmodules, pruneEmptyAncestors, RemovalStepError, removeCopiedCore, removeDeftFrameworkTree, removeOrphanDeftVersion, removeOwnedSkillPointers, removeSoleAuthorHusks, runStep, stripLegacyLauncherPin, type RemovalStepId, type StepContext, type StepResult, } from "./steps.js";
-export { isConvertStrategyFrom, runStrategy, STRATEGIES, strategyForShape, type LayoutStrategy, type StrategyResult, type StrategyShapeId, } from "./strategies.js";
+export { clearOwnedHookEntries, isUnsafeSubmoduleGitlink, normalizeGitmodules, pruneEmptyAncestors, RemovalStepError, type RemovalStepId, removeCopiedCore, removeDeftFrameworkTree, removeOrphanDeftVersion, removeOwnedSkillPointers, removeSoleAuthorHusks, runStep, type StepContext, type StepResult, stripLegacyLauncherPin, } from "./steps.js";
+export { isConvertStrategyFrom, type LayoutStrategy, runStrategy, STRATEGIES, type StrategyResult, type StrategyShapeId, strategyForShape, } from "./strategies.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/removal-steps/steps.js

@@ -4,7 +4,7 @@
  * Layout steps (core / deft / hooks / skills / gitmodules / orphan): wave 3f.
  */
 import { execFileSync } from "node:child_process";
-import { existsSync, lstatSync, readdirSync, readFileSync, writeFileSync, } from "node:fs";
+import { existsSync, lstatSync, readdirSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname, join, sep } from "node:path";
 import { containedRemove } from "../../vendor/directive-core/dist/fs/contained-write.js";
 import { CONSUMER_HEADER_PLACEHOLDER_ONELINER, renderConsumerHeader, unmanagedHeaderOneLiner, } from "../../vendor/directive-core/dist/platform/agents-consumer-header.js";
@@ -35,10 +35,7 @@ const HOST_HOOK_RELS = [
     ".codex/hooks.json",
     ".grok/hooks/deft.json",
 ];
-const DIRECTIVE_PACKAGE_NAMES = new Set([
-    "@deftai/directive",
-    "@deftai/directive-runtime",
-]);
+const DIRECTIVE_PACKAGE_NAMES = new Set(["@deftai/directive", "@deftai/directive-runtime"]);
 const GITIGNORE_SEED_LINES = new Set([
     "node_modules/",
     "node_modules",
@@ -215,7 +212,9 @@ function isNearEmptyLockfile(abs) {
         return true;
     if (abs.endsWith("pnpm-lock.yaml")) {
         // Near-empty pnpm lock: no package snapshots beyond lockfileVersion / settings.
-        if (!/^\s*[^#\s].*:/m.test(trimmed.replace(/^lockfileVersion:.*$/m, "").replace(/^settings:[\s\S]*?(?=\n\S|\n*$)/m, ""))) {
+        if (!/^\s*[^#\s].*:/m.test(trimmed
+            .replace(/^lockfileVersion:.*$/m, "")
+            .replace(/^settings:[\s\S]*?(?=\n\S|\n*$)/m, ""))) {
             return trimmed.length < 200;
         }
         if (/importers:\s*\n\s*\.:\s*\n\s*(?:dependencies|devDependencies):\s*\n\s*\{\s*\}/.test(trimmed)) {
@@ -656,9 +655,7 @@ export function normalizeGitmodules(root) {
 export function runStep(stepId, ctx) {
     switch (stepId) {
         case "pruneEmptyAncestors": {
-            const seeds = ctx.emptiedFrom !== undefined
-                ? [ctx.emptiedFrom]
-                : [...(ctx.priorRemoved ?? [])];
+            const seeds = ctx.emptiedFrom !== undefined ? [ctx.emptiedFrom] : [...(ctx.priorRemoved ?? [])];
             if (seeds.length === 0) {
                 // Standalone call still requires a seed (uninstall / unit API).
                 throw new Error("pruneEmptyAncestors requires ctx.emptiedFrom or ctx.priorRemoved");

package/dist/removal-steps/strategies.js

@@ -2,7 +2,7 @@
  * WAVE3-V2 layout strategies — fixed table of ordered removal step ids.
  * Bookends dispatch detect → strategy; bulk logic stays in steps (smell test).
  */
-import { RemovalStepError, runStep, } from "./steps.js";
+import { RemovalStepError, runStep } from "./steps.js";
 const CONVERT_SHAPE_IDS = new Set([
     "vendored-core-go",
     "go-tarball-deft-root",