@deftai/directive 0.104.0 → 0.106.0

package/dist/authz.d.ts

@@ -1,32 +1,7 @@
 #!/usr/bin/env node
-/**
- * Env markers that indicate an agent/host/CI shell even when stdin reports a TTY
- * (pseudo-terminal residual; #3110 Greptile). Presence refuses mutating authz.
- * Expanded for dogfood conf 5/5 — markers are fail-closed (any non-empty value).
- */
-export declare const AUTHZ_AGENT_SHELL_ENV_MARKERS: readonly ["CLAUDECODE", "CLAUDE_CODE", "CLAUDE_CODE_ENTRYPOINT", "CURSOR_AGENT", "CURSOR_TRACE_ID", "CURSOR_SESSION_ID", "AIDER", "CONTINUE_CLI", "CODEX_SANDBOX", "CODEX_CI", "OPENAI_CODEX", "OPENCLAW", "OPENCLAW_STATE_DIR", "DEFT_PROBE_OPENCLAW", "DEFT_HOOK_HOST", "DEFT_AGENT_SHELL", "DEFT_AGENT_RUNTIME", "WARP_SESSION_ID", "WARP_HARNESS", "WARP_RUN_ID", "GEMINI_CLI", "AMP_CLI", "SWARM_AGENT", "AI_AGENT", "CI", "CONTINUOUS_INTEGRATION", "GITHUB_ACTIONS", "GITLAB_CI", "CIRCLECI", "BUILDKITE", "TRAVIS", "JENKINS_URL", "TEAMCITY_VERSION", "TF_BUILD", "APPVEYOR", "BITBUCKET_BUILD_NUMBER", "CODEBUILD_BUILD_ID"];
-/** Phrase an operator must type on the controlling TTY after --confirm (#3110). */
-export declare const AUTHZ_INTERACTIVE_CONFIRM_PHRASE = "mint";
-/** Testable seams for TTY / agent-shell detection (#3110). */
-export interface AuthzMainSeams {
-    /**
-     * When true, interactive human TTY is present.
-     * Default: both stdin and stdout report isTTY (pseudo-TTY residual; #3110).
-     */
-    readonly isTty?: () => boolean;
-    /** Environ for agent-shell marker detection (default: process.env). */
-    readonly environ?: NodeJS.ProcessEnv;
-    /**
-     * True when a controlling terminal device is available (`/dev/tty` or `CONIN$`).
-     * Default: open/close the platform controlling terminal (fail-closed on error).
-     */
-    readonly hasControllingTerminal?: () => boolean;
-    /**
-     * Read one interactive confirmation line from the operator (trimmed).
-     * Default: one line from stdin. Tests inject a fixed phrase.
-     */
-    readonly readInteractiveConfirm?: () => string | null;
-}
-export declare function main(argv?: string[], seams?: AuthzMainSeams): number;
+import { type HumanPresenceMintSeams } from "./human-presence-mint.js";
+export type { HumanPresenceMintSeams as AuthzMainSeams } from "./human-presence-mint.js";
+export { AUTHZ_AGENT_SHELL_ENV_MARKERS, AUTHZ_INTERACTIVE_CONFIRM_PHRASE, } from "./human-presence-mint.js";
+export declare function main(argv?: string[], seams?: HumanPresenceMintSeams): number;
 export default main;
 //# sourceMappingURL=authz.d.ts.map

package/dist/authz.js

@@ -22,57 +22,11 @@
  * TTY + controlling terminal + `--confirm` + typed phrase `mint`; agent/CI env
  * markers refuse fail-closed. Argv `--confirm` alone is never enough.
  */
-import { closeSync, existsSync, openSync, readSync } from "node:fs";
+import { existsSync } from "node:fs";
 import { isAbsolute, resolve } from "node:path";
-import { AFK_TEMPLATE_NAMES, AUTHZ_OPERATIONS, CLOSED_VERB_TEMPLATE_NAMES, FINISH_LOOP_TEMPLATE_NAME, formatDecomposeStructuralMintCommand, isAfkTemplateName, isClosedVerbTemplateName, isFinishLoopTemplateName, loadAuthzState, mintAfkTemplateGrant, mintDecomposeStructuralApplyGrant, mintHumanOriginGrant, revokeGrant, showAuthzSnapshot, startUatLease, suspendUatLease, toProjectRelativePosix, } from "@deftai/directive-core/authz";
-/**
- * Env markers that indicate an agent/host/CI shell even when stdin reports a TTY
- * (pseudo-terminal residual; #3110 Greptile). Presence refuses mutating authz.
- * Expanded for dogfood conf 5/5 — markers are fail-closed (any non-empty value).
- */
-export const AUTHZ_AGENT_SHELL_ENV_MARKERS = [
-    // Coding agents / IDEs
-    "CLAUDECODE",
-    "CLAUDE_CODE",
-    "CLAUDE_CODE_ENTRYPOINT",
-    "CURSOR_AGENT",
-    "CURSOR_TRACE_ID",
-    "CURSOR_SESSION_ID",
-    "AIDER",
-    "CONTINUE_CLI",
-    "CODEX_SANDBOX",
-    "CODEX_CI",
-    "OPENAI_CODEX",
-    "OPENCLAW",
-    "OPENCLAW_STATE_DIR",
-    "DEFT_PROBE_OPENCLAW",
-    "DEFT_HOOK_HOST",
-    "DEFT_AGENT_SHELL",
-    "DEFT_AGENT_RUNTIME",
-    "WARP_SESSION_ID",
-    "WARP_HARNESS",
-    "WARP_RUN_ID",
-    "GEMINI_CLI",
-    "AMP_CLI",
-    "SWARM_AGENT",
-    "AI_AGENT",
-    // CI / automation (never a human interactive operator mint)
-    "CI",
-    "CONTINUOUS_INTEGRATION",
-    "GITHUB_ACTIONS",
-    "GITLAB_CI",
-    "CIRCLECI",
-    "BUILDKITE",
-    "TRAVIS",
-    "JENKINS_URL",
-    "TEAMCITY_VERSION",
-    "TF_BUILD",
-    "APPVEYOR",
-    "BITBUCKET_BUILD_NUMBER",
-    "CODEBUILD_BUILD_ID",
-];
-/** Phrase an operator must type on the controlling TTY after --confirm (#3110). */
-export const AUTHZ_INTERACTIVE_CONFIRM_PHRASE = "mint";
+import { AFK_TEMPLATE_NAMES, AUTHZ_OPERATIONS, CLOSED_VERB_TEMPLATE_NAMES, FINISH_LOOP_TEMPLATE_NAME, formatDecomposeStructuralMintCommand, isAfkTemplateName, isClosedVerbTemplateName, isFinishLoopTemplateName, mintAfkTemplateGrant, mintDecomposeStructuralApplyGrant, mintHumanOriginGrant, revokeGrant, showAuthzSnapshot, startUatLease, suspendUatLease, toProjectRelativePosix, } from "@deftai/directive-core/authz";
+import { refuseMintWhileUatActive, refuseNonInteractiveMint, resolveHumanPresenceMintSeams, } from "./human-presence-mint.js";
+export { AUTHZ_AGENT_SHELL_ENV_MARKERS, AUTHZ_INTERACTIVE_CONFIRM_PHRASE, } from "./human-presence-mint.js";
 function parseOps(raw) {
     const allowed = new Set(AUTHZ_OPERATIONS);
     const out = [];
@@ -295,130 +249,6 @@ function helpText() {
         "  Env bypass for a single shell: DEFT_ALLOW_RELEASE_PUBLISH=1 / DEFT_ALLOW_FINISH_LOOP=1.",
     ].join("\n");
 }
-function looksLikeAgentShell(environ) {
-    for (const key of AUTHZ_AGENT_SHELL_ENV_MARKERS) {
-        const v = environ[key];
-        if (v !== undefined && String(v).trim().length > 0)
-            return true;
-    }
-    return false;
-}
-function defaultHasControllingTerminal() {
-    try {
-        const path = process.platform === "win32" ? "CONIN$" : "/dev/tty";
-        const fd = openSync(path, "r");
-        closeSync(fd);
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-function defaultReadInteractiveConfirm() {
-    // Read from the controlling terminal device — not redirected/piped stdin —
-    // so agent-controlled stdin alone cannot supply the confirm phrase (#3110).
-    let fd = null;
-    try {
-        const path = process.platform === "win32" ? "CONIN$" : "/dev/tty";
-        fd = openSync(path, "r");
-        const buf = Buffer.alloc(256);
-        const n = readSync(fd, buf, 0, buf.length, null);
-        if (n <= 0)
-            return null;
-        return buf.subarray(0, n).toString("utf8").trim();
-    }
-    catch {
-        return null;
-    }
-    finally {
-        if (fd !== null) {
-            try {
-                closeSync(fd);
-            }
-            catch {
-                /* ignore */
-            }
-        }
-    }
-}
-/**
- * While any UAT lease is active, refuse ALL mutating authz CLI verbs (#3110).
- *
- * No multi-factor escape: TTY, `--confirm`, and typed phrase never authorize.
- * Self-approval under UAT is impossible by construction — agents with a PTY
- * cannot mint/suspend/revoke operator-cli authority during an active lease.
- * Operators mint fix-cohort grants *before* `uat-start`.
- *
- * Returns exit code when blocked, or null when the command may continue.
- */
-function refuseMutatingAuthzWhileUatActive(projectRoot, cmd) {
-    if (cmd === "show")
-        return null;
-    const state = loadAuthzState(projectRoot);
-    if (state.uat === null || !state.uat.active)
-        return null;
-    process.stderr.write(`authz:${cmd}: refusing mutating authz while UAT lease is ACTIVE ` +
-        `(campaign=${state.uat.campaignId}). Under active UAT, grant / uat-start / ` +
-        "uat-suspend / revoke are hard-refused — no TTY, --confirm, or phrase path " +
-        "authorizes self-approval (#3110). Mint grants before uat-start; clear the " +
-        "lease out-of-band (edit .deft/authz/state.json as a human outside agent hooks) " +
-        "to end UAT.\n");
-    return 2;
-}
-/**
- * Refuse non-interactive / agent-shell operator-cli stamps outside UAT (#3110).
- *
- * Multi-factor human-presence gate (applies only when UAT lease is inactive):
- * 1. No known agent/CI env markers
- * 2. Interactive TTY (stdin + stdout isTTY)
- * 3. Controlling terminal device present (`/dev/tty` / `CONIN$`)
- * 4. Explicit argv `--confirm` (flag alone never enough)
- * 5. Interactive typed phrase `mint` (argv --confirm alone never enough even on PTY)
- *
- * Fail-closed: if a real human interactive path cannot be proven, refuse mint.
- * Returns an exit code when blocked, or null when the mutation may proceed.
- */
-function refuseNonInteractiveMint(cmd, isTty, environ, confirm, hasControllingTerminal, readInteractiveConfirm) {
-    if (cmd === "show")
-        return null;
-    if (looksLikeAgentShell(environ)) {
-        process.stderr.write(`authz:${cmd}: refusing operator-cli stamp from an agent/host/CI shell ` +
-            `(detected agent or CI env marker). Mutating authz requires a human interactive ` +
-            "TTY without agent-shell markers, plus --confirm and typed phrase (#3110).\n");
-        return 2;
-    }
-    const tty = isTty();
-    if (!tty && !confirm) {
-        process.stderr.write(`authz:${cmd}: refusing non-interactive operator-cli stamp. ` +
-            "Mutating authz verbs require interactive TTY, --confirm, and typed phrase " +
-            `'${AUTHZ_INTERACTIVE_CONFIRM_PHRASE}' (#3110).\n`);
-        return 2;
-    }
-    if (!tty) {
-        process.stderr.write(`authz:${cmd}: refusing non-TTY operator-cli stamp. ` +
-            "--confirm alone never authorizes mint — interactive TTY is required (#3110).\n");
-        return 2;
-    }
-    if (!confirm) {
-        process.stderr.write(`authz:${cmd}: refusing operator-cli stamp without --confirm. ` +
-            "Interactive TTY alone never authorizes mint — pass --confirm explicitly (#3110).\n");
-        return 2;
-    }
-    if (!hasControllingTerminal()) {
-        process.stderr.write(`authz:${cmd}: refusing operator-cli stamp without a controlling terminal. ` +
-            "Open a real interactive console (not a headless/agent pipe) to mint (#3110).\n");
-        return 2;
-    }
-    process.stderr.write(`authz:${cmd}: type '${AUTHZ_INTERACTIVE_CONFIRM_PHRASE}' and press Enter to confirm operator mint: `);
-    const line = readInteractiveConfirm();
-    const phrase = (line ?? "").trim().toLowerCase();
-    if (phrase !== AUTHZ_INTERACTIVE_CONFIRM_PHRASE) {
-        process.stderr.write(`\nauthz:${cmd}: interactive confirm phrase mismatch (got ${JSON.stringify(line ?? "")}). ` +
-            `Type exactly '${AUTHZ_INTERACTIVE_CONFIRM_PHRASE}' on the controlling TTY (#3110).\n`);
-        return 2;
-    }
-    return null;
-}
 export function main(argv = process.argv.slice(2), seams = {}) {
     const args = parseArgv(argv);
     if (args.error === "help") {
@@ -430,11 +260,7 @@ export function main(argv = process.argv.slice(2), seams = {}) {
         process.stderr.write(`${helpText()}\n`);
         return 2;
     }
-    // Both stdin and stdout TTY — agent-allocated single-side PTY is not enough.
-    const isTty = seams.isTty ?? (() => process.stdin.isTTY === true && process.stdout.isTTY === true);
-    const environ = seams.environ ?? process.env;
-    const hasControllingTerminal = seams.hasControllingTerminal ?? defaultHasControllingTerminal;
-    const readInteractiveConfirm = seams.readInteractiveConfirm ?? defaultReadInteractiveConfirm;
+    const resolved = resolveHumanPresenceMintSeams(seams);
     /**
      * Mutating-verb gate stack (#3110):
      * 1. Active UAT → hard refuse (no multi-factor escape; self-approval impossible)
@@ -442,10 +268,19 @@ export function main(argv = process.argv.slice(2), seams = {}) {
      * Required-arg validation runs before this so missing --campaign / --ops still report clearly.
      */
     const gateConfirm = () => {
-        const uatBlocked = refuseMutatingAuthzWhileUatActive(args.projectRoot, args.cmd);
+        if (args.cmd === "show")
+            return null;
+        const uatBlocked = refuseMintWhileUatActive(`authz:${args.cmd}`, args.projectRoot);
         if (uatBlocked !== null)
             return uatBlocked;
-        return refuseNonInteractiveMint(args.cmd, isTty, environ, args.confirm, hasControllingTerminal, readInteractiveConfirm);
+        return refuseNonInteractiveMint({
+            verb: `authz:${args.cmd}`,
+            confirm: args.confirm,
+            isTty: resolved.isTty,
+            environ: resolved.environ,
+            hasControllingTerminal: resolved.hasControllingTerminal,
+            readInteractiveConfirm: resolved.readInteractiveConfirm,
+        });
     };
     try {
         switch (args.cmd) {

package/dist/cli-router/route-argv.js

@@ -83,6 +83,7 @@ export const SUBCOMMAND_ROUTES = {
     "policy:allow-direct-commits": ["policy", "allow-direct-commits"],
     "policy:allow-bot-merge": ["policy", "allow-bot-merge"],
     "policy:enable-value-feedback": ["policy", "enable-value-feedback"],
+    "policy:disable-host-hooks": ["policy", "disable-host-hooks"],
     "policy:set-ceremony-dial": ["policy", "set-ceremony-dial"],
     "policy:clear-value-feedback": ["policy", "clear-value-feedback"],
     "authz:show": ["authz", "show"],

package/dist/dispatch.d.ts

@@ -10,7 +10,7 @@ export interface DispatchIo {
     writeErr: (text: string) => void;
 }
 /** CLI modules in packages/cli/src (excluding parity harnesses and bin/index). */
-export declare const CLI_MODULE_VERBS: readonly ["agents-refresh", "cache", "check", "capacity-backfill", "capacity-show", "codebase-default-extractor", "codebase-map", "codebase-map-fresh", "codebase-projection-registry", "codebase-provider", "doctor", "install-upgrade", "install-uninstall", "migrate-preflight", "migrate-xbrief", "migrate-category-b", "framework-check-updates", "hook-dispatch", "umbrella-current-shape", "changelog-check", "change-init", "commit-lint", "coverage-hotspots", "policy", "authz", "escalation-cli", "pr-closing-keywords", "pr-merge-readiness", "pr-monitor", "pr-protected-issues", "pr-wait-mergeable", "pr-watch", "pr-finish-loop", "directive-finish-loop", "preflight-cache", "preflight-gh", "probe-session", "release", "release-e2e", "release-publish", "release-rollback", "scope-lifecycle", "scope-record-approved-scope", "lifecycle-event", "lifecycle-stats", "session-start", "session-ready", "plan-sequence", "slice", "subagent-monitor", "toolchain-check", "triage-actions", "triage-bootstrap", "triage-bulk", "triage-classify", "triage-help", "triage-queue", "triage-reconcile", "triage-refresh", "triage-scope", "triage-scope-drift", "triage-smoketest", "triage-subscribe", "triage-summary", "triage-welcome", "ts-check-lane", "vbrief-activate", "vbrief-build", "vbrief-preflight", "vbrief-reconcile", "vbrief-validate", "vbrief-validation", "xbrief-create", "xbrief-verify", "verify-branch", "verify-encoding", "verify-forward-coverage", "verify-test-boundary", "verify-scope-provenance", "verify-consumer-check-contract", "verify-hooks-installed", "verify-investigation", "verify-judgment-gates", "verify-no-task-runtime", "validate-links", "validate-strategy-output", "verify-biome-config", "verify-bridge-drift", "verify-capacity", "verify-contained-writes", "verify-telemetry-coverage", "verify-content-manifest", "verify-skill-external-fetch-gate", "verify-contract-drift", "verify-cursor-tier1", "verify-openclaw-tier1", "verify-go-freeze", "verify-scm-boundary", "verify-session-ritual", "verify-plan-sequence", "verify-stubs", "verify-xbrief-drift", "rule-ownership-lint", "verify-story-ready", "verify-review-monitor", "verify-l4-owner", "verify-subagent-alive", "review-monitor-register", "review-monitor-release", "verify-tools", "verify-wip-cap", "verify-orphan-active", "verify-completed-tracked", "verify-literal-ac", "verify-ac", "verify-agents-md-budget", "verify-agents-md-advisory", "verify-eval-health-relocation", "verify-eval-triggers-relocation", "eval-health", "eval-run", "eval-report", "eval-triggers"];
+export declare const CLI_MODULE_VERBS: readonly ["agents-refresh", "cache", "check", "capacity-backfill", "capacity-show", "codebase-default-extractor", "codebase-map", "codebase-map-fresh", "codebase-projection-registry", "codebase-provider", "doctor", "install-upgrade", "install-uninstall", "migrate-preflight", "migrate-xbrief", "migrate-category-b", "framework-check-updates", "hook-dispatch", "umbrella-current-shape", "changelog-check", "change-init", "commit-lint", "coverage-hotspots", "policy", "authz", "escalation-cli", "pr-closing-keywords", "pr-merge-readiness", "pr-monitor", "pr-protected-issues", "pr-wait-mergeable", "pr-watch", "pr-finish-loop", "directive-finish-loop", "preflight-cache", "preflight-gh", "probe-session", "release", "release-e2e", "release-publish", "release-rollback", "scope-lifecycle", "scope-record-approved-scope", "scm-sync-default", "lifecycle-event", "lifecycle-stats", "session-start", "session-ready", "occupancy-steal", "plan-sequence", "slice", "subagent-monitor", "toolchain-check", "triage-actions", "triage-bootstrap", "triage-bulk", "triage-classify", "triage-help", "triage-queue", "triage-reconcile", "triage-refresh", "triage-scope", "triage-scope-drift", "triage-smoketest", "triage-subscribe", "triage-summary", "triage-welcome", "ts-check-lane", "vbrief-activate", "vbrief-build", "vbrief-preflight", "vbrief-reconcile", "vbrief-validate", "vbrief-validation", "xbrief-create", "xbrief-verify", "verify-branch", "verify-encoding", "verify-forward-coverage", "verify-test-boundary", "verify-scope-provenance", "verify-consumer-check-contract", "verify-hooks-installed", "verify-investigation", "verify-judgment-gates", "verify-no-task-runtime", "validate-links", "validate-strategy-output", "verify-biome-config", "verify-bridge-drift", "verify-capacity", "verify-contained-writes", "verify-telemetry-coverage", "verify-content-manifest", "verify-skill-external-fetch-gate", "verify-contract-drift", "verify-cursor-tier1", "verify-openclaw-tier1", "verify-go-freeze", "verify-scm-boundary", "verify-session-ritual", "verify-plan-sequence", "verify-stubs", "verify-xbrief-drift", "rule-ownership-lint", "verify-story-ready", "verify-review-monitor", "verify-l4-owner", "verify-subagent-alive", "review-monitor-register", "review-monitor-release", "verify-tools", "verify-wip-cap", "verify-orphan-active", "verify-lifecycle-visible", "verify-completed-tracked", "verify-literal-ac", "verify-ac", "verify-agents-md-budget", "verify-agents-md-advisory", "verify-eval-health-relocation", "verify-eval-triggers-relocation", "eval-health", "eval-run", "eval-report", "eval-triggers"];
 /** Core-only CLI entrypoints without a packages/cli wrapper. */
 export declare const CORE_MODULE_VERBS: readonly ["scm", "scm-readiness", "github-auth-modes", "github-body", "issue-emit", "issue-ingest", "issue-sync-from-xbrief", "reconcile-issues", "swarm-launch", "swarm-complete-cohort", "swarm-finalize-cohort", "swarm-pre-dispatch", "swarm-readiness", "swarm-routing-verify", "swarm-routing-set", "swarm-verify-review-clean", "swarm-worktrees", "framework-commands", "pack-render", "packs-slice", "prd-render", "export-spec", "project-render", "roadmap-render", "rule-map", "spec-render", "spec-validate", "code-structure-validate", "pack-migrate-skills", "pack-migrate-rules", "pack-migrate-strategies", "pack-migrate-patterns", "pack-migrate-swarm-spec", "policy-set", "setup-ghx", "scope-undo", "scope-demote", "scope-decompose", "changelog-resolve-unreleased", "architecture-preflight-sor", "feedback-file", "value-readback", "product-signal", "freshness-report", "decision-write", "decision-list"];
 /** Colon aliases for triage-actions (mirrors cli-router SUBCOMMAND_ROUTES). */
@@ -177,6 +177,12 @@ export declare function printCommandsList(io?: DispatchIo): void;
  * (#2172). Preserves the init/update/doctor first-run guidance from #2273.
  */
 export declare function printHelp(io?: DispatchIo): void;
+/**
+ * Unknown-colon-verb remediation (#3439 / #2652).
+ * Agent-facing spelling is `deft <verb>` (works on consumer CLI and source).
+ * Bare `task <verb>` is not consumer-runnable on include-only Taskfiles.
+ */
+export declare function unknownColonVerbHint(verb: string): string;
 /** Dispatch argv to a registered verb; returns the handler exit code. */
 export declare function dispatch(argv: string[], io?: DispatchIo): Promise<number>;
 /** Test seam: reset lazy handler cache between cases. */

package/dist/dispatch.js

@@ -10,7 +10,7 @@ import { basename, dirname, isAbsolute, join, relative, resolve } from "node:pat
 import { engineInfo, userConfig } from "@deftai/directive-core";
 import { assertWriteTargetSafe } from "@deftai/directive-core/dist/fs/projection-containment.js";
 import { parseInitArgv, runInitDepositCli } from "@deftai/directive-core/init-deposit";
-import { appendAuditLog, disclosureLine, migrateLegacyPolicyKey, PLAN_POLICY_KEY, policyColonInvocation, policySetInvocation, projectDefinitionPath, resolvePolicy, resolveWipCap, setPolicy, } from "@deftai/directive-core/policy";
+import { appendAuditLog, disclosureLine, migrateLegacyPolicyKey, PLAN_POLICY_KEY, POLICY_AUDIT_NOOP_STDOUT, policyColonInvocation, policySetInvocation, projectDefinitionPath, resolvePolicy, resolveWipCap, setPolicy, stampChangedToken, } from "@deftai/directive-core/policy";
 import { defaultWhich } from "@deftai/directive-core/scm";
 import { KNOWN_SUBAGENT_BACKEND_IDS, probeSubagentBackends, resolveSwarmSubagentBackend, } from "@deftai/directive-core/swarm";
 import { atomicWriteProjectDefinition } from "@deftai/directive-core/vbrief-build";
@@ -69,10 +69,12 @@ export const CLI_MODULE_VERBS = [
     "release-rollback",
     "scope-lifecycle",
     "scope-record-approved-scope",
+    "scm-sync-default",
     "lifecycle-event",
     "lifecycle-stats",
     "session-start",
     "session-ready",
+    "occupancy-steal",
     "plan-sequence",
     "slice",
     "subagent-monitor",
@@ -138,6 +140,7 @@ export const CLI_MODULE_VERBS = [
     "verify-tools",
     "verify-wip-cap",
     "verify-orphan-active",
+    "verify-lifecycle-visible",
     "verify-completed-tracked",
     "verify-literal-ac",
     "verify-ac",
@@ -218,6 +221,7 @@ export const POLICY_ACTION_ALIAS_SUBCOMMANDS = {
     "policy:allow-direct-commits": "allow-direct-commits",
     "policy:allow-bot-merge": "allow-bot-merge",
     "policy:enable-value-feedback": "enable-value-feedback",
+    "policy:disable-host-hooks": "disable-host-hooks",
     "policy:set-ceremony-dial": "set-ceremony-dial",
     "policy:clear-value-feedback": "clear-value-feedback",
     "policy:disable-directive": "disable-directive",
@@ -280,6 +284,7 @@ export const VERB_ALIASES = {
     "verify:vbrief-conformance": "vbrief-validate",
     "verify:wip-cap": "verify-wip-cap",
     "verify:orphan-active": "verify-orphan-active",
+    "verify:lifecycle-visible": "verify-lifecycle-visible",
     "verify:completed-tracked": "verify-completed-tracked",
     "verify:literal-ac": "verify-literal-ac",
     "verify:literal-acceptance": "verify-literal-ac",
@@ -293,6 +298,11 @@ export const VERB_ALIASES = {
     "verify:no-task-runtime": "verify-no-task-runtime",
     "vbrief:validate": "vbrief-validate",
     "vbrief:preflight": "vbrief-preflight",
+    // xbrief:-prefixed aliases for the canonical post-#2109 lifecycle spelling.
+    // xbrief:validate closes the #3483 gap: the swarm skill named it at MUST
+    // level but only vbrief:validate resolved.
+    "xbrief:validate": "vbrief-validate",
+    "xbrief:activate": "vbrief-activate",
     "xbrief:preflight": "vbrief-preflight",
     "xbrief:create": "xbrief-create",
     "xbrief:verify": "xbrief-verify",
@@ -352,6 +362,7 @@ export const VERB_ALIASES = {
     upgrade: "install-upgrade",
     "session:start": "session-start",
     "session:ready": "session-ready",
+    "occupancy:steal": "occupancy-steal",
     ...FRESHNESS_COLON_ALIASES,
     "lifecycle:event": "lifecycle-event",
     "lifecycle:stats": "lifecycle-stats",
@@ -380,6 +391,7 @@ export const VERB_ALIASES = {
     "setup:ghx": "setup-ghx",
     "scm:status": "scm-readiness",
     "scm:readiness": "scm-readiness",
+    "scm:sync-default": "scm-sync-default",
 };
 /** CLI modules living under verify-source-cli/ or content-validate-cli/ subdirs. */
 const SUBDIR_CLI_STEMS = {
@@ -2113,7 +2125,7 @@ function loadProjectDefinitionForWrite(projectRoot) {
         throw new PolicySetError("PROJECT-DEFINITION 'plan' is not an object", "config");
     }
     const planObj = plan;
-    migrateLegacyPolicyKey(planObj);
+    const legacyMigrated = migrateLegacyPolicyKey(planObj);
     let policy = planObj[PLAN_POLICY_KEY];
     if (policy === undefined) {
         policy = {};
@@ -2122,31 +2134,31 @@ function loadProjectDefinitionForWrite(projectRoot) {
     if (typeof policy !== "object" || policy === null || Array.isArray(policy)) {
         throw new PolicySetError("plan.policy is not an object", "config");
     }
-    return { path, data, policyBlock: policy };
+    return { path, data, policyBlock: policy, legacyMigrated };
 }
 /** Write plan.policy.wipCap in place + append the audit row (mirrors set_wip_cap). */
 function writeWipCap(projectRoot, cap, actor, note) {
-    const { path, data, policyBlock } = loadProjectDefinitionForWrite(projectRoot);
+    const { path, data, policyBlock, legacyMigrated } = loadProjectDefinitionForWrite(projectRoot);
     const previous = policyBlock.wipCap;
     policyBlock.wipCap = cap;
-    assertWriteTargetSafe(projectRoot, path);
-    atomicWriteProjectDefinition(path, data);
-    const changed = previous !== cap;
+    const changed = previous !== cap || legacyMigrated;
     const parts = [`actor=${actor}`, `wipCap=${cap}`, `previous=${pyRepr(previous)}`];
     if (note)
         parts.push(`note=${sanitizeNote(note)}`);
-    const auditEntry = parts.join(" ");
-    appendAuditLog(projectRoot, auditEntry);
+    const auditEntry = stampChangedToken(parts.join(" "), changed);
+    if (changed) {
+        assertWriteTargetSafe(projectRoot, path);
+        atomicWriteProjectDefinition(path, data);
+    }
+    appendAuditLog(projectRoot, auditEntry, changed);
     return { changed, auditEntry };
 }
 /** Write plan.policy.swarmSubagentBackend in place + append the audit row. */
 function writeSubagentBackend(projectRoot, backendId, actor, note) {
-    const { path, data, policyBlock } = loadProjectDefinitionForWrite(projectRoot);
+    const { path, data, policyBlock, legacyMigrated } = loadProjectDefinitionForWrite(projectRoot);
     const previous = policyBlock.swarmSubagentBackend;
     policyBlock.swarmSubagentBackend = backendId;
-    assertWriteTargetSafe(projectRoot, path);
-    atomicWriteProjectDefinition(path, data);
-    const changed = previous !== backendId;
+    const changed = previous !== backendId || legacyMigrated;
     const parts = [
         `actor=${actor}`,
         `swarmSubagentBackend=${backendId}`,
@@ -2154,8 +2166,12 @@ function writeSubagentBackend(projectRoot, backendId, actor, note) {
     ];
     if (note)
         parts.push(`note=${sanitizeNote(note)}`);
-    const auditEntry = parts.join(" ");
-    appendAuditLog(projectRoot, auditEntry);
+    const auditEntry = stampChangedToken(parts.join(" "), changed);
+    if (changed) {
+        assertWriteTargetSafe(projectRoot, path);
+        atomicWriteProjectDefinition(path, data);
+    }
+    appendAuditLog(projectRoot, auditEntry, changed);
     return { changed, auditEntry };
 }
 /** Serialise the probe output for `subagent-backends --format json`. */
@@ -2220,7 +2236,7 @@ function applyBranchPolicy(args, io) {
         io.writeOut(`  audit: meta/policy-changes.log :: ${result.auditEntry}\n`);
     }
     else {
-        io.writeOut("  no-op: value already matched (audit entry still appended for trail).\n");
+        io.writeOut(`${POLICY_AUDIT_NOOP_STDOUT}\n`);
     }
     io.writeOut(`${disclosureLine(resolvePolicy(args.projectRoot))}\n`);
     return 0;
@@ -2249,7 +2265,7 @@ function applyWipCap(args, io) {
         io.writeOut(`  audit: meta/policy-changes.log :: ${res.auditEntry}\n`);
     }
     else {
-        io.writeOut("  no-op: value already matched (audit entry still appended for trail).\n");
+        io.writeOut(`${POLICY_AUDIT_NOOP_STDOUT}\n`);
     }
     const result = resolveWipCap(args.projectRoot);
     io.writeOut(`[deft policy] plan.policy.wipCap=${result.cap} (source: ${result.source}).\n`);
@@ -2269,7 +2285,7 @@ function applySubagentBackend(args, io) {
         io.writeOut(`  audit: meta/policy-changes.log :: ${res.auditEntry}\n`);
     }
     else {
-        io.writeOut("  no-op: value already matched (audit entry still appended for trail).\n");
+        io.writeOut(`${POLICY_AUDIT_NOOP_STDOUT}\n`);
     }
     const result = resolveSwarmSubagentBackend(args.projectRoot);
     io.writeOut(`[deft policy] plan.policy.swarmSubagentBackend=${pyRepr(result.backend_id)} ` +
@@ -2599,6 +2615,10 @@ const CURATED_HELP_GROUPS = [
                 name: "session:ready",
                 summary: "One-shot recovery to gated write-ready (session + ritual + cache)",
             },
+            {
+                name: "occupancy:steal",
+                summary: "Supersede a live worktree occupancy lease (--confirm --occupant)",
+            },
             {
                 name: "freshness:report",
                 summary: "Bound vs live deposit generation (current|stale_soft|stale_hard)",
@@ -2707,6 +2727,23 @@ async function invokeHandler(handler, argv) {
     return typeof code === "number" ? code : 0;
 }
 const CLI_PACKAGE = "@deftai/directive";
+const PLAN_SEQUENCE_VERBS = "set|current|clear|advance";
+/**
+ * Unknown-colon-verb remediation (#3439 / #2652).
+ * Agent-facing spelling is `deft <verb>` (works on consumer CLI and source).
+ * Bare `task <verb>` is not consumer-runnable on include-only Taskfiles.
+ */
+export function unknownColonVerbHint(verb) {
+    if (verb.startsWith("plan-sequence:") && !(verb in PLAN_SEQUENCE_ALIAS_SUBCOMMANDS)) {
+        return (`hint: plan-sequence verbs are ${PLAN_SEQUENCE_VERBS} ` +
+            `(e.g. \`deft plan-sequence:current\`). '${verb}' is not a verb. ` +
+            `Do not run bare \`task ${verb}\` -- consumer include-only Taskfiles cannot resolve it.\n`);
+    }
+    const hyphen = verb.replaceAll(":", "-");
+    return (`hint: try \`deft ${verb}\` (CLI) or \`task deft:${verb}\` (consumer Taskfile). ` +
+        `Bare \`task ${verb}\` does not exist on include-only deposits. ` +
+        `Hyphen stem: ${hyphen}.\n`);
+}
 function versionBanner() {
     const info = engineInfo();
     return `${CLI_PACKAGE} (engine: ${info.name}@${info.version})\n`;
@@ -2730,8 +2767,7 @@ export async function dispatch(argv, io = defaultIo()) {
     if (canonical === null) {
         io.writeErr(`directive: unknown verb '${verb}'\n`);
         if (verb?.includes(":")) {
-            io.writeErr(`hint: prefer \`task ${verb}\` (Taskfile) or the hyphen stem ` +
-                `(e.g. pr:watch → pr-watch / \`task pr:watch\`)\n`);
+            io.writeErr(unknownColonVerbHint(verb));
         }
         return 1;
     }

package/dist/human-presence-mint.d.ts

@@ -0,0 +1,70 @@
+/**
+ * Env markers that indicate an agent/host/CI shell even when stdin reports a TTY
+ * (pseudo-terminal residual; #3110 Greptile). Presence refuses mint.
+ * Expanded for dogfood conf 5/5 — markers are fail-closed (any non-empty value).
+ */
+export declare const AUTHZ_AGENT_SHELL_ENV_MARKERS: readonly ["CLAUDECODE", "CLAUDE_CODE", "CLAUDE_CODE_ENTRYPOINT", "CURSOR_AGENT", "CURSOR_TRACE_ID", "CURSOR_SESSION_ID", "AIDER", "CONTINUE_CLI", "CODEX_SANDBOX", "CODEX_CI", "OPENAI_CODEX", "OPENCLAW", "OPENCLAW_STATE_DIR", "DEFT_PROBE_OPENCLAW", "DEFT_HOOK_HOST", "DEFT_AGENT_SHELL", "DEFT_AGENT_RUNTIME", "WARP_SESSION_ID", "WARP_HARNESS", "WARP_RUN_ID", "GEMINI_CLI", "AMP_CLI", "SWARM_AGENT", "AI_AGENT", "CI", "CONTINUOUS_INTEGRATION", "GITHUB_ACTIONS", "GITLAB_CI", "CIRCLECI", "BUILDKITE", "TRAVIS", "JENKINS_URL", "TEAMCITY_VERSION", "TF_BUILD", "APPVEYOR", "BITBUCKET_BUILD_NUMBER", "CODEBUILD_BUILD_ID"];
+/** Phrase an operator must type on the controlling TTY after --confirm (#3110). */
+export declare const AUTHZ_INTERACTIVE_CONFIRM_PHRASE = "mint";
+/** Testable seams for TTY / agent-shell detection (#3110 / #3384). */
+export interface HumanPresenceMintSeams {
+    /**
+     * When true, interactive human TTY is present.
+     * Default: both stdin and stdout report isTTY (pseudo-TTY residual; #3110).
+     */
+    readonly isTty?: () => boolean;
+    /** Environ for agent-shell marker detection (default: process.env). */
+    readonly environ?: NodeJS.ProcessEnv;
+    /**
+     * True when a controlling terminal device is available (`/dev/tty` or `CONIN$`).
+     * Default: open/close the platform controlling terminal (fail-closed on error).
+     */
+    readonly hasControllingTerminal?: () => boolean;
+    /**
+     * Read one interactive confirmation line from the operator (trimmed).
+     * Default: one line from the controlling terminal. Tests inject a fixed phrase.
+     */
+    readonly readInteractiveConfirm?: () => string | null;
+}
+export declare function looksLikeAgentShell(environ: NodeJS.ProcessEnv): boolean;
+/** Platform controlling-terminal path (`CONIN$` on win32, `/dev/tty` elsewhere). */
+export declare function controllingTerminalPath(platform?: NodeJS.Platform): string;
+/**
+ * Open flag for the platform controlling-terminal device (#3596).
+ *
+ * Windows `CONIN$` generally requires read/write (`r+`); `r` (O_RDONLY) fails
+ * in a real interactive console and made operator mint unreachable on win32.
+ */
+export declare function controllingTerminalOpenFlag(platform?: NodeJS.Platform): "r" | "r+";
+export declare function resolveHumanPresenceMintSeams(seams?: HumanPresenceMintSeams): Required<HumanPresenceMintSeams>;
+/** Active UAT campaign id, or null when no lease is active. */
+export declare function activeUatCampaignId(projectRoot: string): string | null;
+/**
+ * While any UAT lease is active, refuse mint (#3110 / #3384).
+ *
+ * No multi-factor escape: TTY, `--confirm`, and typed phrase never authorize.
+ * Returns an exit code when blocked, or null when mint may continue.
+ */
+export declare function refuseMintWhileUatActive(verb: string, projectRoot: string): number | null;
+/**
+ * Refuse non-interactive / agent-shell mint outside UAT (#3110 / #3384).
+ *
+ * Multi-factor human-presence gate (applies only when UAT lease is inactive):
+ * 1. No known agent/CI env markers
+ * 2. Interactive TTY (stdin + stdout isTTY)
+ * 3. Controlling terminal device present (`/dev/tty` / `CONIN$`)
+ * 4. Explicit argv `--confirm` (flag alone never enough)
+ * 5. Interactive typed phrase `mint` (argv --confirm alone never enough even on PTY)
+ *
+ * Fail-closed: if a real human interactive path cannot be proven, refuse mint.
+ * Returns an exit code when blocked, or null when the mutation may proceed.
+ */
+export declare function refuseNonInteractiveMint(input: {
+    readonly verb: string;
+    readonly confirm: boolean;
+    readonly isTty: () => boolean;
+    readonly environ: NodeJS.ProcessEnv;
+    readonly hasControllingTerminal: () => boolean;
+    readonly readInteractiveConfirm: () => string | null;
+}): number | null;
+//# sourceMappingURL=human-presence-mint.d.ts.map