@deftai/directive 0.104.0 → 0.106.0

package/dist/human-presence-mint.js

@@ -0,0 +1,203 @@
+/**
+ * Shared #3110 human-presence mint gate (#3384).
+ *
+ * Used by `authz` mutating verbs and `scope:record-approved-scope`. Multi-factor
+ * human presence: interactive TTY + controlling terminal + `--confirm` + typed
+ * phrase `mint`. Agent/CI env markers refuse fail-closed. `--actor` is never
+ * an input here — display only at the caller.
+ */
+import { closeSync, openSync, readSync } from "node:fs";
+import { loadAuthzState } from "@deftai/directive-core/authz";
+/**
+ * Env markers that indicate an agent/host/CI shell even when stdin reports a TTY
+ * (pseudo-terminal residual; #3110 Greptile). Presence refuses mint.
+ * Expanded for dogfood conf 5/5 — markers are fail-closed (any non-empty value).
+ */
+export const AUTHZ_AGENT_SHELL_ENV_MARKERS = [
+    // Coding agents / IDEs
+    "CLAUDECODE",
+    "CLAUDE_CODE",
+    "CLAUDE_CODE_ENTRYPOINT",
+    "CURSOR_AGENT",
+    "CURSOR_TRACE_ID",
+    "CURSOR_SESSION_ID",
+    "AIDER",
+    "CONTINUE_CLI",
+    "CODEX_SANDBOX",
+    "CODEX_CI",
+    "OPENAI_CODEX",
+    "OPENCLAW",
+    "OPENCLAW_STATE_DIR",
+    "DEFT_PROBE_OPENCLAW",
+    "DEFT_HOOK_HOST",
+    "DEFT_AGENT_SHELL",
+    "DEFT_AGENT_RUNTIME",
+    "WARP_SESSION_ID",
+    "WARP_HARNESS",
+    "WARP_RUN_ID",
+    "GEMINI_CLI",
+    "AMP_CLI",
+    "SWARM_AGENT",
+    "AI_AGENT",
+    // CI / automation (never a human interactive operator mint)
+    "CI",
+    "CONTINUOUS_INTEGRATION",
+    "GITHUB_ACTIONS",
+    "GITLAB_CI",
+    "CIRCLECI",
+    "BUILDKITE",
+    "TRAVIS",
+    "JENKINS_URL",
+    "TEAMCITY_VERSION",
+    "TF_BUILD",
+    "APPVEYOR",
+    "BITBUCKET_BUILD_NUMBER",
+    "CODEBUILD_BUILD_ID",
+];
+/** Phrase an operator must type on the controlling TTY after --confirm (#3110). */
+export const AUTHZ_INTERACTIVE_CONFIRM_PHRASE = "mint";
+export function looksLikeAgentShell(environ) {
+    for (const key of AUTHZ_AGENT_SHELL_ENV_MARKERS) {
+        const v = environ[key];
+        if (v !== undefined && String(v).trim().length > 0)
+            return true;
+    }
+    return false;
+}
+function defaultIsTty() {
+    return process.stdin.isTTY === true && process.stdout.isTTY === true;
+}
+/** Platform controlling-terminal path (`CONIN$` on win32, `/dev/tty` elsewhere). */
+export function controllingTerminalPath(platform = process.platform) {
+    return platform === "win32" ? "CONIN$" : "/dev/tty";
+}
+/**
+ * Open flag for the platform controlling-terminal device (#3596).
+ *
+ * Windows `CONIN$` generally requires read/write (`r+`); `r` (O_RDONLY) fails
+ * in a real interactive console and made operator mint unreachable on win32.
+ */
+export function controllingTerminalOpenFlag(platform = process.platform) {
+    return platform === "win32" ? "r+" : "r";
+}
+function defaultHasControllingTerminal() {
+    try {
+        const fd = openSync(controllingTerminalPath(), controllingTerminalOpenFlag());
+        closeSync(fd);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function defaultReadInteractiveConfirm() {
+    // Read from the controlling terminal device — not redirected/piped stdin —
+    // so agent-controlled stdin alone cannot supply the confirm phrase (#3110).
+    let fd = null;
+    try {
+        fd = openSync(controllingTerminalPath(), controllingTerminalOpenFlag());
+        const buf = Buffer.alloc(256);
+        const n = readSync(fd, buf, 0, buf.length, null);
+        if (n <= 0)
+            return null;
+        return buf.subarray(0, n).toString("utf8").trim();
+    }
+    catch {
+        return null;
+    }
+    finally {
+        if (fd !== null) {
+            try {
+                closeSync(fd);
+            }
+            catch {
+                /* ignore */
+            }
+        }
+    }
+}
+export function resolveHumanPresenceMintSeams(seams = {}) {
+    return {
+        isTty: seams.isTty ?? defaultIsTty,
+        environ: seams.environ ?? process.env,
+        hasControllingTerminal: seams.hasControllingTerminal ?? defaultHasControllingTerminal,
+        readInteractiveConfirm: seams.readInteractiveConfirm ?? defaultReadInteractiveConfirm,
+    };
+}
+/** Active UAT campaign id, or null when no lease is active. */
+export function activeUatCampaignId(projectRoot) {
+    const state = loadAuthzState(projectRoot);
+    if (state.uat === null || !state.uat.active)
+        return null;
+    return state.uat.campaignId;
+}
+/**
+ * While any UAT lease is active, refuse mint (#3110 / #3384).
+ *
+ * No multi-factor escape: TTY, `--confirm`, and typed phrase never authorize.
+ * Returns an exit code when blocked, or null when mint may continue.
+ */
+export function refuseMintWhileUatActive(verb, projectRoot) {
+    const campaignId = activeUatCampaignId(projectRoot);
+    if (campaignId === null)
+        return null;
+    process.stderr.write(`${verb}: refusing mint while UAT lease is ACTIVE (campaign=${campaignId}). ` +
+        "Under active UAT, mint is hard-refused — no TTY, --confirm, or phrase path " +
+        "authorizes remint (#3110 / #3384). Mint before uat-start; clear the lease " +
+        "out-of-band to end UAT.\n");
+    return 2;
+}
+/**
+ * Refuse non-interactive / agent-shell mint outside UAT (#3110 / #3384).
+ *
+ * Multi-factor human-presence gate (applies only when UAT lease is inactive):
+ * 1. No known agent/CI env markers
+ * 2. Interactive TTY (stdin + stdout isTTY)
+ * 3. Controlling terminal device present (`/dev/tty` / `CONIN$`)
+ * 4. Explicit argv `--confirm` (flag alone never enough)
+ * 5. Interactive typed phrase `mint` (argv --confirm alone never enough even on PTY)
+ *
+ * Fail-closed: if a real human interactive path cannot be proven, refuse mint.
+ * Returns an exit code when blocked, or null when the mutation may proceed.
+ */
+export function refuseNonInteractiveMint(input) {
+    const { verb, confirm } = input;
+    if (looksLikeAgentShell(input.environ)) {
+        process.stderr.write(`${verb}: refusing operator-cli stamp from an agent/host/CI shell ` +
+            `(detected agent or CI env marker). Mint requires a human interactive ` +
+            "TTY without agent-shell markers, plus --confirm and typed phrase (#3110).\n");
+        return 2;
+    }
+    const tty = input.isTty();
+    if (!tty && !confirm) {
+        process.stderr.write(`${verb}: refusing non-interactive operator-cli stamp. ` +
+            "Mint requires interactive TTY, --confirm, and typed phrase " +
+            `'${AUTHZ_INTERACTIVE_CONFIRM_PHRASE}' (#3110).\n`);
+        return 2;
+    }
+    if (!tty) {
+        process.stderr.write(`${verb}: refusing non-TTY operator-cli stamp. ` +
+            "--confirm alone never authorizes mint — interactive TTY is required (#3110).\n");
+        return 2;
+    }
+    if (!confirm) {
+        process.stderr.write(`${verb}: refusing operator-cli stamp without --confirm. ` +
+            "Interactive TTY alone never authorizes mint — pass --confirm explicitly (#3110).\n");
+        return 2;
+    }
+    if (!input.hasControllingTerminal()) {
+        process.stderr.write(`${verb}: refusing operator-cli stamp without a controlling terminal. ` +
+            "Open a real interactive console (not a headless/agent pipe) to mint (#3110).\n");
+        return 2;
+    }
+    process.stderr.write(`${verb}: type '${AUTHZ_INTERACTIVE_CONFIRM_PHRASE}' and press Enter to confirm operator mint: `);
+    const line = input.readInteractiveConfirm();
+    const phrase = (line ?? "").trim().toLowerCase();
+    if (phrase !== AUTHZ_INTERACTIVE_CONFIRM_PHRASE) {
+        process.stderr.write(`\n${verb}: interactive confirm phrase mismatch (got ${JSON.stringify(line ?? "")}). ` +
+            `Type exactly '${AUTHZ_INTERACTIVE_CONFIRM_PHRASE}' on the controlling TTY (#3110).\n`);
+        return 2;
+    }
+    return null;
+}
+//# sourceMappingURL=human-presence-mint.js.map

package/dist/occupancy-steal.d.ts

@@ -0,0 +1,9 @@
+#!/usr/bin/env node
+export declare function parseArgs(argv: readonly string[]): {
+    projectRoot: string;
+    confirm: boolean;
+    occupant: string | null;
+    error?: string;
+};
+export declare function run(argv: readonly string[]): number;
+//# sourceMappingURL=occupancy-steal.d.ts.map

package/dist/occupancy-steal.js

@@ -0,0 +1,54 @@
+#!/usr/bin/env node
+import { resolve } from "node:path";
+import { stealOccupancy } from "@deftai/directive-core/session";
+export function parseArgs(argv) {
+    const parsed = { projectRoot: ".", confirm: false, occupant: null };
+    for (let i = 0; i < argv.length; i += 1) {
+        const arg = argv[i];
+        if (arg === "--confirm") {
+            parsed.confirm = true;
+        }
+        else if (arg === "--occupant") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...parsed, error: "argument --occupant: expected one argument" };
+            }
+            parsed.occupant = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--occupant=")) {
+            parsed.occupant = arg.slice("--occupant=".length);
+        }
+        else if (arg === "--project-root") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...parsed, error: "argument --project-root: expected one argument" };
+            }
+            parsed.projectRoot = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--project-root=")) {
+            parsed.projectRoot = arg.slice("--project-root=".length);
+        }
+        else {
+            return { ...parsed, error: `unrecognized argument: ${arg}` };
+        }
+    }
+    return parsed;
+}
+export function run(argv) {
+    const args = parseArgs(argv);
+    if (args.error !== undefined) {
+        process.stderr.write(`occupancy:steal: ${args.error}\n`);
+        return 2;
+    }
+    const result = stealOccupancy(resolve(args.projectRoot), {
+        confirm: args.confirm,
+        occupant: args.occupant ?? undefined,
+        env: process.env,
+    });
+    const sink = result.code === 0 ? process.stdout : process.stderr;
+    sink.write(`${result.message}\n`);
+    return result.code;
+}
+//# sourceMappingURL=occupancy-steal.js.map

package/dist/plan-sequence.d.ts

@@ -1,3 +1,13 @@
 #!/usr/bin/env node
+interface Parsed {
+    projectRoot: string;
+    action: "set" | "current" | "clear" | "advance" | null;
+    file: string | null;
+    jsonInline: string | null;
+    emitJson: boolean;
+    error?: string;
+}
+export declare function parseArgs(argv: string[]): Parsed;
 export declare function main(argv?: string[]): number;
+export {};
 //# sourceMappingURL=plan-sequence.d.ts.map

package/dist/plan-sequence.js

@@ -6,7 +6,7 @@ import { readFileSync } from "node:fs";
 import { resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { advancePlanSequence, clearPlanSequence, createPlanSequence, parsePlanSequence, readPlanSequence, writePlanSequence, } from "@deftai/directive-core/plan-sequence";
-function parseArgs(argv) {
+export function parseArgs(argv) {
     const parsed = {
         projectRoot: ".",
         action: null,
@@ -19,6 +19,8 @@ function parseArgs(argv) {
         const arg = argv[i];
         if (arg === undefined)
             continue;
+        if (arg === "--")
+            continue;
         if (arg === "--json") {
             parsed.emitJson = true;
         }

package/dist/policy.d.ts

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { type CeremonyDepth } from "@deftai/directive-core/policy";
+import { type CeremonyDepth, type HookHost } from "@deftai/directive-core/policy";
 interface ShowArgs {
     format: "text" | "json";
     changedOnly: boolean;
@@ -8,10 +8,11 @@ interface ShowArgs {
     error?: string;
 }
 interface SetArgs {
-    cmd: "show" | "enforce-branches" | "allow-direct-commits" | "allow-bot-merge" | "enable-value-feedback" | "clear-value-feedback" | "set-ceremony-dial" | "disable-directive" | "enable-directive" | "resolve";
+    cmd: "show" | "enforce-branches" | "allow-direct-commits" | "allow-bot-merge" | "enable-value-feedback" | "clear-value-feedback" | "set-ceremony-dial" | "disable-host-hooks" | "disable-directive" | "enable-directive" | "resolve";
     confirm: boolean;
     actor: string;
     note: string;
+    host?: HookHost;
     projectRoot: string;
     format: "text" | "json";
     changedOnly: boolean;

package/dist/policy.js

@@ -6,7 +6,7 @@
 import { existsSync } from "node:fs";
 import { resolve as pathResolve, relative } from "node:path";
 import { fileURLToPath } from "node:url";
-import { ALLOW_BOT_MERGE_CAPABILITY_COST, CEREMONY_DEPTHS, clearValueFeedback, createNoDeftDirectiveFlag, describeShadowedPlanExtension, detectNoDeftDirective, detectShadowedPlanExtensions, disclosureLine, enableValueFeedback, FIELD_VALUE_FEEDBACK, FIELD_VALUE_FEEDBACK_CLI_ALIAS, formatValueFeedbackStatusLine, humanMergeDisclosureLine, inspectAllPolicies, inspectOnePolicy, loadProjectDefinition, NO_DEFT_DIRECTIVE_DISABLED_MESSAGE, NO_DEFT_DIRECTIVE_FLAG_NAME, NO_DEFT_DIRECTIVE_INCONSISTENT_MESSAGE, policyColonInvocation, projectDefinitionPath, pythonListRepr, pythonStringRepr, registeredPolicyNames, removeNoDeftDirectiveFlag, renderJson, renderText, resolveHumanMergePolicy, resolvePolicy, resolveValueFeedback, setCeremonyDial, setPolicy, setRequireHumanMerge, } from "@deftai/directive-core/policy";
+import { ALLOW_BOT_MERGE_CAPABILITY_COST, CEREMONY_DEPTHS, clearValueFeedback, createNoDeftDirectiveFlag, describeShadowedPlanExtension, detectNoDeftDirective, detectShadowedPlanExtensions, disableHostHooks, disclosureLine, enableValueFeedback, FIELD_VALUE_FEEDBACK, FIELD_VALUE_FEEDBACK_CLI_ALIAS, formatValueFeedbackStatusLine, humanMergeDisclosureLine, inspectAllPolicies, inspectOnePolicy, loadProjectDefinition, NO_DEFT_DIRECTIVE_DISABLED_MESSAGE, NO_DEFT_DIRECTIVE_FLAG_NAME, NO_DEFT_DIRECTIVE_INCONSISTENT_MESSAGE, POLICY_AUDIT_NOOP_STDOUT, parseHookHost, policyColonInvocation, projectDefinitionPath, pythonListRepr, pythonStringRepr, registeredPolicyNames, removeNoDeftDirectiveFlag, renderJson, renderText, resolveHumanMergePolicy, resolvePolicy, resolveValueFeedback, setCeremonyDial, setPolicy, setRequireHumanMerge, } from "@deftai/directive-core/policy";
 const CAPABILITY_COST_DISCLOSURE = "\u26a0 Capability-cost disclosure -- enabling direct commits to the default " +
     "branch turns OFF the deft branch-protection policy.\n" +
     "  \u2022 Pre-commit + pre-push hooks will no longer block default-branch " +
@@ -114,7 +114,7 @@ export function parseShowArgs(argv) {
 /** Parse argv for the policy CLI (show + set subcommands). */
 export function parseArgs(argv) {
     if (argv.length === 0) {
-        const usage = "usage: policy [show|enforce-branches|allow-direct-commits|allow-bot-merge|enable-value-feedback|clear-value-feedback|set-ceremony-dial|disable-directive|enable-directive|resolve] ...";
+        const usage = "usage: policy [show|enforce-branches|allow-direct-commits|allow-bot-merge|enable-value-feedback|clear-value-feedback|set-ceremony-dial|disable-host-hooks|disable-directive|enable-directive|resolve] ...";
         return makeSetError(usage);
     }
     const cmd = argv[0];
@@ -152,6 +152,7 @@ export function parseArgs(argv) {
         cmd === "enable-value-feedback" ||
         cmd === "clear-value-feedback" ||
         cmd === "set-ceremony-dial" ||
+        cmd === "disable-host-hooks" ||
         cmd === "disable-directive" ||
         cmd === "enable-directive") {
         let confirm = false;
@@ -167,11 +168,14 @@ export function parseArgs(argv) {
                             ? policyColonInvocation("clear-value-feedback")
                             : cmd === "set-ceremony-dial"
                                 ? policyColonInvocation("set-ceremony-dial")
-                                : cmd === "disable-directive"
-                                    ? policyColonInvocation("disable-directive")
-                                    : policyColonInvocation("enable-directive");
+                                : cmd === "disable-host-hooks"
+                                    ? policyColonInvocation("disable-host-hooks")
+                                    : cmd === "disable-directive"
+                                        ? policyColonInvocation("disable-directive")
+                                        : policyColonInvocation("enable-directive");
         let note = "";
         let projectRoot = ".";
+        let host;
         let ceremonyOverride;
         let ceremonyEnabled;
         for (let i = 1; i < argv.length; i += 1) {
@@ -253,10 +257,32 @@ export function parseArgs(argv) {
                 }
                 ceremonyEnabled = v === "true";
             }
+            else if (cmd === "disable-host-hooks" && arg === "--host") {
+                const v = argv[i + 1];
+                const parsedHost = parseHookHost(v);
+                if (parsedHost === null) {
+                    return makeSetError("argument --host: expected claude|cursor|grok|codex");
+                }
+                host = parsedHost;
+                i += 1;
+            }
+            else if (cmd === "disable-host-hooks" && arg?.startsWith("--host=")) {
+                const parsedHost = parseHookHost(arg.slice("--host=".length));
+                if (parsedHost === null) {
+                    return makeSetError("argument --host: expected claude|cursor|grok|codex");
+                }
+                host = parsedHost;
+            }
+            else if (arg === "--") {
+                continue;
+            }
             else {
                 return makeSetError(`unrecognized argument: ${arg}`);
             }
         }
+        if (cmd === "disable-host-hooks" && host === undefined) {
+            return makeSetError("disable-host-hooks requires --host claude|cursor|grok|codex");
+        }
         return {
             cmd,
             confirm,
@@ -266,6 +292,7 @@ export function parseArgs(argv) {
             format: "text",
             changedOnly: false,
             field: null,
+            host,
             ceremonyOverride,
             ceremonyEnabled,
         };
@@ -352,6 +379,21 @@ function runEnableValueFeedback(args) {
     process.stdout.write(result.stdout);
     return result.exitCode;
 }
+function runDisableHostHooks(args) {
+    const host = args.host;
+    if (host === undefined) {
+        process.stderr.write("policy: disable-host-hooks requires --host claude|cursor|grok|codex\n");
+        return 2;
+    }
+    const result = disableHostHooks(pathResolve(args.projectRoot), {
+        host,
+        confirm: args.confirm,
+        actor: args.actor,
+        note: args.note,
+    });
+    process.stdout.write(result.stdout);
+    return result.exitCode;
+}
 function runSet(args) {
     const projectRoot = pathResolve(args.projectRoot);
     if (args.cmd === "allow-direct-commits" && !args.confirm) {
@@ -373,7 +415,7 @@ function runSet(args) {
             process.stdout.write(`  audit: meta/policy-changes.log :: ${auditEntry}\n`);
         }
         else {
-            process.stdout.write("  no-op: value already matched (audit entry still appended for trail).\n");
+            process.stdout.write(`${POLICY_AUDIT_NOOP_STDOUT}\n`);
         }
         process.stdout.write(`${disclosureLine(resolvePolicy(projectRoot))}\n`);
         return 0;
@@ -454,7 +496,7 @@ function runAllowBotMerge(args) {
             process.stdout.write(`  audit: meta/policy-changes.log :: ${auditEntry}\n`);
         }
         else {
-            process.stdout.write("  no-op: value already matched (audit entry still appended for trail).\n");
+            process.stdout.write(`${POLICY_AUDIT_NOOP_STDOUT}\n`);
         }
         const line = humanMergeDisclosureLine(resolveHumanMergePolicy(projectRoot));
         if (line !== null) {
@@ -504,6 +546,9 @@ export function run(argv) {
     if (args.cmd === "enable-value-feedback") {
         return runEnableValueFeedback(args);
     }
+    if (args.cmd === "disable-host-hooks") {
+        return runDisableHostHooks(args);
+    }
     if (args.cmd === "clear-value-feedback") {
         return runClearValueFeedback(args);
     }

package/dist/preflight-cache.d.ts

@@ -7,6 +7,8 @@ interface ParsedArgs {
     forIssue?: number;
     allowStale?: boolean;
     allowMissingBootstrap?: boolean;
+    skipDriftProbe?: boolean;
+    workSelection?: boolean;
     quiet?: boolean;
     error?: string;
 }

package/dist/preflight-cache.js

@@ -58,6 +58,12 @@ export function parseArgs(argv) {
         else if (arg === "--allow-missing-bootstrap") {
             parsed.allowMissingBootstrap = true;
         }
+        else if (arg === "--skip-drift-probe") {
+            parsed.skipDriftProbe = true;
+        }
+        else if (arg === "--work-selection") {
+            parsed.workSelection = true;
+        }
         else if (arg === "--quiet") {
             parsed.quiet = true;
         }
@@ -81,6 +87,7 @@ export function run(argv) {
         forIssue: args.forIssue ?? null,
         allowStale: args.allowStale ?? false,
         allowMissingBootstrap: args.allowMissingBootstrap ?? false,
+        skipDriftProbe: (args.skipDriftProbe ?? false) && !args.workSelection,
     });
     const quiet = args.quiet ?? false;
     if (result.code === 0) {

package/dist/scm-sync-default.d.ts

@@ -0,0 +1,34 @@
+/**
+ * CLI for `scm:sync-default` (#3391).
+ *
+ * Opens dest-targeted default-branch sync PRs using the shared detector and
+ * syncMaxFiles. Over-limit legs are new branches and new PRs.
+ */
+import { planSyncDefault, type SyncDefaultForge, type SyncDefaultOpenPull } from "@deftai/directive-core/policy";
+export declare const USAGE: string;
+export interface SyncDefaultCliArgs {
+    readonly dryRun?: boolean;
+    readonly json?: boolean;
+    readonly help?: boolean;
+    readonly maxFiles?: number;
+    readonly projectRoot?: string;
+    readonly repo?: string;
+}
+export declare function parseSyncDefaultArgs(argv: readonly string[]): {
+    args: SyncDefaultCliArgs;
+    error: string | null;
+};
+export declare function pullsFromRestJson(payload: unknown): readonly SyncDefaultOpenPull[];
+export declare function createGhSyncDefaultForge(): SyncDefaultForge;
+export declare function resolveRepoFromGit(projectRoot: string): string | null;
+export declare function runSyncDefaultCli(args: SyncDefaultCliArgs, options?: {
+    writeOut?: (s: string) => void;
+    writeErr?: (s: string) => void;
+    forge?: SyncDefaultForge;
+    cwd?: string;
+    runGit?: Parameters<typeof planSyncDefault>[0]["runGit"];
+    resolveRepo?: (projectRoot: string) => string | null;
+}): number;
+export declare function mainEntry(argv?: string[]): number;
+export declare function main(argv?: string[]): number;
+//# sourceMappingURL=scm-sync-default.d.ts.map