@deftai/directive 0.106.0 → 0.108.0

package/dist/authz.js

@@ -225,7 +225,7 @@ function helpText() {
         "  (grant / uat-start / uat-suspend / revoke) — no TTY, --confirm, or phrase path.",
         "  Self-approval under UAT is impossible by construction. Mint grants BEFORE uat-start.",
         "Outside UAT, mutating verbs require multi-factor human presence (#3110):",
-        "  - Interactive TTY (stdin+stdout) + controlling terminal (/dev/tty|CONIN$)",
+        "  - Interactive TTY (stdin+stdout) + controlling terminal (/dev/tty|\\\\.\\CONIN$)",
         "  - Explicit --confirm (argv flag alone never enough)",
         "  - Typed phrase 'mint' on the controlling TTY (PTY+--confirm alone never enough)",
         "  - Known agent/CI env markers always refuse (fail-closed).",

package/dist/cli-router/route-argv.js

@@ -197,6 +197,9 @@ function routeNamespaceVerb(ns, verb, rest) {
             return { kind: "dispatch", argv: [verifyStem, ...rest] };
         }
     }
+    if (ns === "scm" && verb === "issue:design-critique-chip") {
+        return { kind: "dispatch", argv: ["scm", "issue", "design-critique-chip", ...rest] };
+    }
     if (ns === "issue" && verb === "ingest") {
         return { kind: "dispatch", argv: ["issue-ingest", ...rest] };
     }

package/dist/dispatch.d.ts

@@ -10,7 +10,7 @@ export interface DispatchIo {
     writeErr: (text: string) => void;
 }
 /** CLI modules in packages/cli/src (excluding parity harnesses and bin/index). */
-export declare const CLI_MODULE_VERBS: readonly ["agents-refresh", "cache", "check", "capacity-backfill", "capacity-show", "codebase-default-extractor", "codebase-map", "codebase-map-fresh", "codebase-projection-registry", "codebase-provider", "doctor", "install-upgrade", "install-uninstall", "migrate-preflight", "migrate-xbrief", "migrate-category-b", "framework-check-updates", "hook-dispatch", "umbrella-current-shape", "changelog-check", "change-init", "commit-lint", "coverage-hotspots", "policy", "authz", "escalation-cli", "pr-closing-keywords", "pr-merge-readiness", "pr-monitor", "pr-protected-issues", "pr-wait-mergeable", "pr-watch", "pr-finish-loop", "directive-finish-loop", "preflight-cache", "preflight-gh", "probe-session", "release", "release-e2e", "release-publish", "release-rollback", "scope-lifecycle", "scope-record-approved-scope", "scm-sync-default", "lifecycle-event", "lifecycle-stats", "session-start", "session-ready", "occupancy-steal", "plan-sequence", "slice", "subagent-monitor", "toolchain-check", "triage-actions", "triage-bootstrap", "triage-bulk", "triage-classify", "triage-help", "triage-queue", "triage-reconcile", "triage-refresh", "triage-scope", "triage-scope-drift", "triage-smoketest", "triage-subscribe", "triage-summary", "triage-welcome", "ts-check-lane", "vbrief-activate", "vbrief-build", "vbrief-preflight", "vbrief-reconcile", "vbrief-validate", "vbrief-validation", "xbrief-create", "xbrief-verify", "verify-branch", "verify-encoding", "verify-forward-coverage", "verify-test-boundary", "verify-scope-provenance", "verify-consumer-check-contract", "verify-hooks-installed", "verify-investigation", "verify-judgment-gates", "verify-no-task-runtime", "validate-links", "validate-strategy-output", "verify-biome-config", "verify-bridge-drift", "verify-capacity", "verify-contained-writes", "verify-telemetry-coverage", "verify-content-manifest", "verify-skill-external-fetch-gate", "verify-contract-drift", "verify-cursor-tier1", "verify-openclaw-tier1", "verify-go-freeze", "verify-scm-boundary", "verify-session-ritual", "verify-plan-sequence", "verify-stubs", "verify-xbrief-drift", "rule-ownership-lint", "verify-story-ready", "verify-review-monitor", "verify-l4-owner", "verify-subagent-alive", "review-monitor-register", "review-monitor-release", "verify-tools", "verify-wip-cap", "verify-orphan-active", "verify-lifecycle-visible", "verify-completed-tracked", "verify-literal-ac", "verify-ac", "verify-agents-md-budget", "verify-agents-md-advisory", "verify-eval-health-relocation", "verify-eval-triggers-relocation", "eval-health", "eval-run", "eval-report", "eval-triggers"];
+export declare const CLI_MODULE_VERBS: readonly ["agents-refresh", "cache", "check", "capacity-backfill", "capacity-show", "codebase-default-extractor", "codebase-map", "codebase-map-fresh", "codebase-projection-registry", "codebase-provider", "doctor", "install-upgrade", "install-uninstall", "migrate-preflight", "migrate-xbrief", "migrate-category-b", "framework-check-updates", "hook-dispatch", "umbrella-current-shape", "changelog-check", "change-init", "commit-lint", "coverage-hotspots", "policy", "authz", "escalation-cli", "pr-closing-keywords", "pr-merge-readiness", "pr-monitor", "pr-protected-issues", "pr-wait-mergeable", "pr-watch", "pr-finish-loop", "directive-finish-loop", "preflight-cache", "preflight-gh", "probe-session", "release", "release-e2e", "release-publish", "release-rollback", "scope-lifecycle", "scope-record-approved-scope", "scm-sync-default", "lifecycle-event", "lifecycle-stats", "session-start", "session-ready", "occupancy-steal", "occupancy-release", "occupancy-heartbeat", "occupancy-grant", "plan-sequence", "slice", "subagent-monitor", "toolchain-check", "triage-actions", "triage-bootstrap", "triage-bulk", "triage-classify", "triage-evaluate", "triage-help", "triage-queue", "triage-reconcile", "triage-refresh", "triage-scope", "triage-scope-drift", "triage-smoketest", "triage-subscribe", "triage-summary", "triage-welcome", "ts-check-lane", "vbrief-activate", "vbrief-build", "vbrief-preflight", "vbrief-reconcile", "vbrief-validate", "vbrief-validation", "xbrief-create", "xbrief-verify", "verify-branch", "verify-encoding", "verify-forward-coverage", "verify-test-boundary", "verify-scope-provenance", "verify-consumer-check-contract", "verify-hooks-installed", "verify-investigation", "verify-judgment-gates", "verify-no-task-runtime", "validate-links", "validate-strategy-output", "verify-biome-config", "verify-bridge-drift", "verify-capacity", "verify-contained-writes", "verify-telemetry-coverage", "verify-content-manifest", "verify-skill-external-fetch-gate", "verify-contract-drift", "verify-cursor-tier1", "verify-openclaw-tier1", "verify-go-freeze", "verify-scm-boundary", "verify-session-ritual", "verify-plan-sequence", "verify-stubs", "verify-xbrief-drift", "rule-ownership-lint", "verify-story-ready", "verify-review-monitor", "verify-l4-owner", "verify-subagent-alive", "review-monitor-register", "review-monitor-release", "verify-tools", "verify-wip-cap", "verify-orphan-active", "verify-pr-closeout-attestable", "verify-lifecycle-visible", "verify-completed-tracked", "verify-completed-write-guard", "verify-literal-ac", "verify-ac", "verify-agents-md-budget", "verify-agents-md-advisory", "verify-eval-health-relocation", "verify-eval-triggers-relocation", "eval-health", "eval-run", "eval-report", "eval-triggers"];
 /** Core-only CLI entrypoints without a packages/cli wrapper. */
 export declare const CORE_MODULE_VERBS: readonly ["scm", "scm-readiness", "github-auth-modes", "github-body", "issue-emit", "issue-ingest", "issue-sync-from-xbrief", "reconcile-issues", "swarm-launch", "swarm-complete-cohort", "swarm-finalize-cohort", "swarm-pre-dispatch", "swarm-readiness", "swarm-routing-verify", "swarm-routing-set", "swarm-verify-review-clean", "swarm-worktrees", "framework-commands", "pack-render", "packs-slice", "prd-render", "export-spec", "project-render", "roadmap-render", "rule-map", "spec-render", "spec-validate", "code-structure-validate", "pack-migrate-skills", "pack-migrate-rules", "pack-migrate-strategies", "pack-migrate-patterns", "pack-migrate-swarm-spec", "policy-set", "setup-ghx", "scope-undo", "scope-demote", "scope-decompose", "changelog-resolve-unreleased", "architecture-preflight-sor", "feedback-file", "value-readback", "product-signal", "freshness-report", "decision-write", "decision-list"];
 /** Colon aliases for triage-actions (mirrors cli-router SUBCOMMAND_ROUTES). */

package/dist/dispatch.js

@@ -8,12 +8,11 @@ import { existsSync, mkdirSync, mkdtempSync, readdirSync, readFileSync, readSync
 import { homedir, tmpdir } from "node:os";
 import { basename, dirname, isAbsolute, join, relative, resolve } from "node:path";
 import { engineInfo, userConfig } from "@deftai/directive-core";
-import { assertWriteTargetSafe } from "@deftai/directive-core/dist/fs/projection-containment.js";
 import { parseInitArgv, runInitDepositCli } from "@deftai/directive-core/init-deposit";
 import { appendAuditLog, disclosureLine, migrateLegacyPolicyKey, PLAN_POLICY_KEY, POLICY_AUDIT_NOOP_STDOUT, policyColonInvocation, policySetInvocation, projectDefinitionPath, resolvePolicy, resolveWipCap, setPolicy, stampChangedToken, } from "@deftai/directive-core/policy";
 import { defaultWhich } from "@deftai/directive-core/scm";
 import { KNOWN_SUBAGENT_BACKEND_IDS, probeSubagentBackends, resolveSwarmSubagentBackend, } from "@deftai/directive-core/swarm";
-import { atomicWriteProjectDefinition } from "@deftai/directive-core/vbrief-build";
+import { withProjectDefinitionMutation, } from "@deftai/directive-core/vbrief-build";
 const HANDLER_KEYS = [
     "run",
     "main",
@@ -75,6 +74,9 @@ export const CLI_MODULE_VERBS = [
     "session-start",
     "session-ready",
     "occupancy-steal",
+    "occupancy-release",
+    "occupancy-heartbeat",
+    "occupancy-grant",
     "plan-sequence",
     "slice",
     "subagent-monitor",
@@ -83,6 +85,7 @@ export const CLI_MODULE_VERBS = [
     "triage-bootstrap",
     "triage-bulk",
     "triage-classify",
+    "triage-evaluate",
     "triage-help",
     "triage-queue",
     "triage-reconcile",
@@ -140,8 +143,10 @@ export const CLI_MODULE_VERBS = [
     "verify-tools",
     "verify-wip-cap",
     "verify-orphan-active",
+    "verify-pr-closeout-attestable",
     "verify-lifecycle-visible",
     "verify-completed-tracked",
+    "verify-completed-write-guard",
     "verify-literal-ac",
     "verify-ac",
     "verify-agents-md-budget",
@@ -284,8 +289,10 @@ export const VERB_ALIASES = {
     "verify:vbrief-conformance": "vbrief-validate",
     "verify:wip-cap": "verify-wip-cap",
     "verify:orphan-active": "verify-orphan-active",
+    "verify:pr-closeout-attestable": "verify-pr-closeout-attestable",
     "verify:lifecycle-visible": "verify-lifecycle-visible",
     "verify:completed-tracked": "verify-completed-tracked",
+    "verify:completed-write-guard": "verify-completed-write-guard",
     "verify:literal-ac": "verify-literal-ac",
     "verify:literal-acceptance": "verify-literal-ac",
     "verify:ac": "verify-ac",
@@ -346,6 +353,7 @@ export const VERB_ALIASES = {
     "triage:bootstrap": "triage-bootstrap",
     "triage:summary": "triage-summary",
     "triage:queue": "triage-queue",
+    "triage:evaluate": "triage-evaluate",
     "triage:scope": "triage-scope",
     ...TRIAGE_ACTION_COLON_ALIASES,
     ...POLICY_ACTION_COLON_ALIASES,
@@ -363,6 +371,10 @@ export const VERB_ALIASES = {
     "session:start": "session-start",
     "session:ready": "session-ready",
     "occupancy:steal": "occupancy-steal",
+    "occupancy:release": "occupancy-release",
+    "occupancy:heartbeat": "occupancy-heartbeat",
+    "occupancy:grant": "occupancy-grant",
+    "session:end": "occupancy-release",
     ...FRESHNESS_COLON_ALIASES,
     "lifecycle:event": "lifecycle-event",
     "lifecycle:stats": "lifecycle-stats",
@@ -2097,25 +2109,26 @@ function parsePolicySetArgs(argv) {
     }
     return args;
 }
-/** Load PROJECT-DEFINITION for an in-place typed-field write (mirrors the .setdefault chain). */
-function loadProjectDefinitionForWrite(projectRoot) {
-    const path = projectDefinitionPath(projectRoot);
+/**
+ * Load PROJECT-DEFINITION for an in-place typed-field write (mirrors the
+ * .setdefault chain). Reads the artifact the mutation lock captured (#3796) so
+ * these CLI writers can no longer resolve, read, and write a PROJECT-DEFINITION
+ * outside the shared mutation lock.
+ */
+function loadProjectDefinitionForWrite(mutation) {
+    const path = mutation.artifactPath;
     if (!existsSync(path)) {
-        throw new PolicySetError(`PROJECT-DEFINITION not found at ${path}`, "not-found");
+        throw new PolicySetError(`PROJECT-DEFINITION not found at ${mutation.artifactLabel}`, "not-found");
     }
-    let parsed;
+    let data;
     try {
-        parsed = JSON.parse(readFileSync(path, "utf8"));
+        // The shared loader rejects unreadable, malformed, and non-object top-level
+        // payloads; every one of those is a config error for the CLI writers.
+        data = mutation.load();
     }
     catch (err) {
-        throw new PolicySetError(`PROJECT-DEFINITION at ${path} is not valid JSON: ${String(err)}`, "config");
-    }
-    // JSON.parse can yield a non-object top level (null / array / scalar) without
-    // throwing; reject it before the .plan/.policy property chain dereferences it.
-    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
-        throw new PolicySetError(`PROJECT-DEFINITION at ${path} is not a JSON object`, "config");
+        throw new PolicySetError(err instanceof Error ? err.message : String(err), "config");
     }
-    const data = parsed;
     let plan = data.plan;
     if (plan === undefined) {
         plan = {};
@@ -2134,45 +2147,47 @@ function loadProjectDefinitionForWrite(projectRoot) {
     if (typeof policy !== "object" || policy === null || Array.isArray(policy)) {
         throw new PolicySetError("plan.policy is not an object", "config");
     }
-    return { path, data, policyBlock: policy, legacyMigrated };
+    return { data, policyBlock: policy, legacyMigrated };
 }
 /** Write plan.policy.wipCap in place + append the audit row (mirrors set_wip_cap). */
 function writeWipCap(projectRoot, cap, actor, note) {
-    const { path, data, policyBlock, legacyMigrated } = loadProjectDefinitionForWrite(projectRoot);
-    const previous = policyBlock.wipCap;
-    policyBlock.wipCap = cap;
-    const changed = previous !== cap || legacyMigrated;
-    const parts = [`actor=${actor}`, `wipCap=${cap}`, `previous=${pyRepr(previous)}`];
-    if (note)
-        parts.push(`note=${sanitizeNote(note)}`);
-    const auditEntry = stampChangedToken(parts.join(" "), changed);
-    if (changed) {
-        assertWriteTargetSafe(projectRoot, path);
-        atomicWriteProjectDefinition(path, data);
-    }
-    appendAuditLog(projectRoot, auditEntry, changed);
-    return { changed, auditEntry };
+    return withProjectDefinitionMutation(projectRoot, (mutation) => {
+        const { data, policyBlock, legacyMigrated } = loadProjectDefinitionForWrite(mutation);
+        const previous = policyBlock.wipCap;
+        policyBlock.wipCap = cap;
+        const changed = previous !== cap || legacyMigrated;
+        const parts = [`actor=${actor}`, `wipCap=${cap}`, `previous=${pyRepr(previous)}`];
+        if (note)
+            parts.push(`note=${sanitizeNote(note)}`);
+        const auditEntry = stampChangedToken(parts.join(" "), changed);
+        if (changed) {
+            mutation.persist(data);
+        }
+        appendAuditLog(projectRoot, auditEntry, changed);
+        return { changed, auditEntry };
+    });
 }
 /** Write plan.policy.swarmSubagentBackend in place + append the audit row. */
 function writeSubagentBackend(projectRoot, backendId, actor, note) {
-    const { path, data, policyBlock, legacyMigrated } = loadProjectDefinitionForWrite(projectRoot);
-    const previous = policyBlock.swarmSubagentBackend;
-    policyBlock.swarmSubagentBackend = backendId;
-    const changed = previous !== backendId || legacyMigrated;
-    const parts = [
-        `actor=${actor}`,
-        `swarmSubagentBackend=${backendId}`,
-        `previous=${pyRepr(previous)}`,
-    ];
-    if (note)
-        parts.push(`note=${sanitizeNote(note)}`);
-    const auditEntry = stampChangedToken(parts.join(" "), changed);
-    if (changed) {
-        assertWriteTargetSafe(projectRoot, path);
-        atomicWriteProjectDefinition(path, data);
-    }
-    appendAuditLog(projectRoot, auditEntry, changed);
-    return { changed, auditEntry };
+    return withProjectDefinitionMutation(projectRoot, (mutation) => {
+        const { data, policyBlock, legacyMigrated } = loadProjectDefinitionForWrite(mutation);
+        const previous = policyBlock.swarmSubagentBackend;
+        policyBlock.swarmSubagentBackend = backendId;
+        const changed = previous !== backendId || legacyMigrated;
+        const parts = [
+            `actor=${actor}`,
+            `swarmSubagentBackend=${backendId}`,
+            `previous=${pyRepr(previous)}`,
+        ];
+        if (note)
+            parts.push(`note=${sanitizeNote(note)}`);
+        const auditEntry = stampChangedToken(parts.join(" "), changed);
+        if (changed) {
+            mutation.persist(data);
+        }
+        appendAuditLog(projectRoot, auditEntry, changed);
+        return { changed, auditEntry };
+    });
 }
 /** Serialise the probe output for `subagent-backends --format json`. */
 function subagentBackendsToJson(backends) {
@@ -2610,14 +2625,33 @@ const CURATED_HELP_GROUPS = [
     {
         title: "Session & ritual",
         commands: [
-            { name: "session:start", summary: "Record session-start ritual state" },
+            {
+                name: "session:start",
+                summary: "Claim occupancy and record ritual state for one session owner",
+            },
             {
                 name: "session:ready",
                 summary: "One-shot recovery to gated write-ready (session + ritual + cache)",
             },
             {
                 name: "occupancy:steal",
-                summary: "Supersede a live worktree occupancy lease (--confirm --occupant)",
+                summary: "Replace only the live lease; use session:start --steal to align ritual",
+            },
+            {
+                name: "occupancy:release",
+                summary: "Release this worktree occupancy lease (owner live, or expired residue)",
+            },
+            {
+                name: "occupancy:heartbeat",
+                summary: "Refresh your own live lease during long quiet stretches (never claims)",
+            },
+            {
+                name: "occupancy:grant",
+                summary: "Admit a dispatched child to your lease for writes (--revoke withdraws)",
+            },
+            {
+                name: "session:end",
+                summary: "End this mutation session by releasing occupancy (same as occupancy:release)",
             },
             {
                 name: "freshness:report",
@@ -2780,6 +2814,9 @@ export async function dispatch(argv, io = defaultIo()) {
         const planSequenceSubcommand = verb !== undefined ? PLAN_SEQUENCE_ALIAS_SUBCOMMANDS[verb] : undefined;
         const productSignalSubcommand = verb !== undefined ? PRODUCT_SIGNAL_ALIAS_SUBCOMMANDS[verb] : undefined;
         const freshnessSubcommand = verb !== undefined ? FRESHNESS_ALIAS_SUBCOMMANDS[verb] : undefined;
+        const vbriefValidateSubcommand = verb === "verify:vbrief-conformance" && canonical === "vbrief-validate"
+            ? "conformance"
+            : undefined;
         const handlerArgv = canonical === "framework-commands" && verb !== undefined && verb !== canonical
             ? [verb, ...rest]
             : triageSubcommand !== undefined && canonical === "triage-actions"
@@ -2796,7 +2833,9 @@ export async function dispatch(argv, io = defaultIo()) {
                                     ? [productSignalSubcommand, ...rest]
                                     : freshnessSubcommand !== undefined && canonical === "freshness-report"
                                         ? [freshnessSubcommand, ...rest]
-                                        : rest;
+                                        : vbriefValidateSubcommand !== undefined
+                                            ? [vbriefValidateSubcommand, ...rest]
+                                            : rest;
         return await invokeHandler(handler, handlerArgv);
     }
     catch (err) {

package/dist/human-presence-mint.d.ts

@@ -16,7 +16,7 @@ export interface HumanPresenceMintSeams {
     /** Environ for agent-shell marker detection (default: process.env). */
     readonly environ?: NodeJS.ProcessEnv;
     /**
-     * True when a controlling terminal device is available (`/dev/tty` or `CONIN$`).
+     * True when a controlling terminal device is available (`/dev/tty` or `\\.\CONIN$`).
      * Default: open/close the platform controlling terminal (fail-closed on error).
      */
     readonly hasControllingTerminal?: () => boolean;
@@ -27,13 +27,13 @@ export interface HumanPresenceMintSeams {
     readonly readInteractiveConfirm?: () => string | null;
 }
 export declare function looksLikeAgentShell(environ: NodeJS.ProcessEnv): boolean;
-/** Platform controlling-terminal path (`CONIN$` on win32, `/dev/tty` elsewhere). */
+/** Platform controlling-terminal path (`\\.\CONIN$` on win32, `/dev/tty` elsewhere). */
 export declare function controllingTerminalPath(platform?: NodeJS.Platform): string;
 /**
- * Open flag for the platform controlling-terminal device (#3596).
+ * Open flag for the platform controlling-terminal device (#3596 leftover).
  *
- * Windows `CONIN$` generally requires read/write (`r+`); `r` (O_RDONLY) fails
- * in a real interactive console and made operator mint unreachable on win32.
+ * Win32 stays `r+` so the probe and phrase-read share one flag. The leftover
+ * path is the Windows device-namespace CONIN$ string, not bare CONIN$.
  */
 export declare function controllingTerminalOpenFlag(platform?: NodeJS.Platform): "r" | "r+";
 export declare function resolveHumanPresenceMintSeams(seams?: HumanPresenceMintSeams): Required<HumanPresenceMintSeams>;
@@ -52,7 +52,7 @@ export declare function refuseMintWhileUatActive(verb: string, projectRoot: stri
  * Multi-factor human-presence gate (applies only when UAT lease is inactive):
  * 1. No known agent/CI env markers
  * 2. Interactive TTY (stdin + stdout isTTY)
- * 3. Controlling terminal device present (`/dev/tty` / `CONIN$`)
+ * 3. Controlling terminal device present (`/dev/tty` / `\\.\CONIN$`)
  * 4. Explicit argv `--confirm` (flag alone never enough)
  * 5. Interactive typed phrase `mint` (argv --confirm alone never enough even on PTY)
  *

package/dist/human-presence-mint.js

@@ -67,15 +67,16 @@ export function looksLikeAgentShell(environ) {
 function defaultIsTty() {
     return process.stdin.isTTY === true && process.stdout.isTTY === true;
 }
-/** Platform controlling-terminal path (`CONIN$` on win32, `/dev/tty` elsewhere). */
+/** Platform controlling-terminal path (`\\.\CONIN$` on win32, `/dev/tty` elsewhere). */
 export function controllingTerminalPath(platform = process.platform) {
-    return platform === "win32" ? "CONIN$" : "/dev/tty";
+    // Real-console diagnostic on #3596: bare CONIN$ and CON ENOENT; device-namespace path opens.
+    return platform === "win32" ? "\\\\.\\CONIN$" : "/dev/tty";
 }
 /**
- * Open flag for the platform controlling-terminal device (#3596).
+ * Open flag for the platform controlling-terminal device (#3596 leftover).
  *
- * Windows `CONIN$` generally requires read/write (`r+`); `r` (O_RDONLY) fails
- * in a real interactive console and made operator mint unreachable on win32.
+ * Win32 stays `r+` so the probe and phrase-read share one flag. The leftover
+ * path is the Windows device-namespace CONIN$ string, not bare CONIN$.
  */
 export function controllingTerminalOpenFlag(platform = process.platform) {
     return platform === "win32" ? "r+" : "r";
@@ -153,7 +154,7 @@ export function refuseMintWhileUatActive(verb, projectRoot) {
  * Multi-factor human-presence gate (applies only when UAT lease is inactive):
  * 1. No known agent/CI env markers
  * 2. Interactive TTY (stdin + stdout isTTY)
- * 3. Controlling terminal device present (`/dev/tty` / `CONIN$`)
+ * 3. Controlling terminal device present (`/dev/tty` / `\\.\CONIN$`)
  * 4. Explicit argv `--confirm` (flag alone never enough)
  * 5. Interactive typed phrase `mint` (argv --confirm alone never enough even on PTY)
  *

package/dist/occupancy-grant.d.ts

@@ -0,0 +1,18 @@
+#!/usr/bin/env node
+import { type OccupancyJoinProtocol } from "@deftai/directive-core/session";
+export interface GrantArgs {
+    projectRoot: string;
+    sessionId?: string;
+    childSessionId?: string;
+    role?: string;
+    worktree?: string;
+    ttlMinutes?: number;
+    host?: string;
+    address?: string;
+    joinProtocol?: OccupancyJoinProtocol;
+    revoke: boolean;
+    error?: string;
+}
+export declare function parseArgs(argv: readonly string[]): GrantArgs;
+export declare function run(argv: readonly string[]): number;
+//# sourceMappingURL=occupancy-grant.d.ts.map

package/dist/occupancy-grant.js

@@ -0,0 +1,120 @@
+#!/usr/bin/env node
+import { resolve } from "node:path";
+import { grantOccupancyMembership, OCCUPANCY_JOIN_PROTOCOLS, revokeOccupancyMembership, } from "@deftai/directive-core/session";
+const VALUE_FLAGS = [
+    "--project-root",
+    "--session-id",
+    "--child-session-id",
+    "--role",
+    "--worktree",
+    "--ttl-minutes",
+    "--host",
+    "--address",
+    "--join-protocol",
+];
+function readValue(argv, index, flag) {
+    const arg = argv[index] ?? "";
+    const inline = `${flag}=`;
+    const raw = arg.startsWith(inline) ? arg.slice(inline.length) : argv[index + 1];
+    if (raw === undefined || raw.startsWith("--")) {
+        return { error: `argument ${flag}: expected one argument` };
+    }
+    const value = raw.trim();
+    if (value.length === 0) {
+        return { error: `argument ${flag}: expected a non-empty value` };
+    }
+    return { value, next: arg.startsWith(inline) ? index : index + 1 };
+}
+export function parseArgs(argv) {
+    const parsed = { projectRoot: ".", revoke: false };
+    for (let i = 0; i < argv.length; i += 1) {
+        const arg = argv[i] ?? "";
+        if (arg === "--revoke")
+            continue;
+        const flag = VALUE_FLAGS.find((name) => arg === name || arg.startsWith(`${name}=`));
+        if (flag === undefined) {
+            return {
+                ...parsed,
+                revoke: argv.includes("--revoke"),
+                error: `unrecognized argument: ${arg}`,
+            };
+        }
+        const read = readValue(argv, i, flag);
+        if ("error" in read)
+            return { ...parsed, revoke: argv.includes("--revoke"), error: read.error };
+        i = read.next;
+        switch (flag) {
+            case "--project-root":
+                parsed.projectRoot = read.value;
+                break;
+            case "--session-id":
+                parsed.sessionId = read.value;
+                break;
+            case "--child-session-id":
+                parsed.childSessionId = read.value;
+                break;
+            case "--role":
+                parsed.role = read.value;
+                break;
+            case "--worktree":
+                parsed.worktree = read.value;
+                break;
+            case "--host":
+                parsed.host = read.value;
+                break;
+            case "--address":
+                parsed.address = read.value;
+                break;
+            case "--ttl-minutes": {
+                const minutes = Number(read.value);
+                if (!Number.isFinite(minutes) || minutes <= 0) {
+                    return {
+                        ...parsed,
+                        revoke: argv.includes("--revoke"),
+                        error: "argument --ttl-minutes: expected a positive number of minutes",
+                    };
+                }
+                parsed.ttlMinutes = minutes;
+                break;
+            }
+            case "--join-protocol": {
+                if (!OCCUPANCY_JOIN_PROTOCOLS.includes(read.value)) {
+                    return {
+                        ...parsed,
+                        revoke: argv.includes("--revoke"),
+                        error: `argument --join-protocol: expected one of ${OCCUPANCY_JOIN_PROTOCOLS.join(", ")}`,
+                    };
+                }
+                parsed.joinProtocol = read.value;
+                break;
+            }
+        }
+    }
+    return { ...parsed, revoke: argv.includes("--revoke") };
+}
+export function run(argv) {
+    const args = parseArgs(argv);
+    if (args.error !== undefined) {
+        process.stderr.write(`occupancy:grant: ${args.error}\n`);
+        return 2;
+    }
+    const projectRoot = resolve(args.projectRoot);
+    const input = {
+        sessionId: args.sessionId,
+        childSessionId: args.childSessionId,
+        role: args.role,
+        worktreePath: args.worktree,
+        ttlMs: args.ttlMinutes === undefined ? undefined : args.ttlMinutes * 60 * 1000,
+        host: args.host,
+        address: args.address,
+        joinProtocol: args.joinProtocol,
+        env: process.env,
+    };
+    const result = args.revoke
+        ? revokeOccupancyMembership(projectRoot, input)
+        : grantOccupancyMembership(projectRoot, input);
+    const sink = result.code === 0 ? process.stdout : process.stderr;
+    sink.write(`${result.message}\n`);
+    return result.code;
+}
+//# sourceMappingURL=occupancy-grant.js.map

package/dist/occupancy-heartbeat.d.ts

@@ -0,0 +1,8 @@
+#!/usr/bin/env node
+export declare function parseArgs(argv: readonly string[]): {
+    projectRoot: string;
+    sessionId?: string;
+    error?: string;
+};
+export declare function run(argv: readonly string[]): number;
+//# sourceMappingURL=occupancy-heartbeat.d.ts.map

package/dist/occupancy-heartbeat.js

@@ -0,0 +1,62 @@
+#!/usr/bin/env node
+import { resolve } from "node:path";
+import { heartbeatOccupancy } from "@deftai/directive-core/session";
+export function parseArgs(argv) {
+    const parsed = { projectRoot: "." };
+    for (let i = 0; i < argv.length; i += 1) {
+        const arg = argv[i];
+        if (arg === "--project-root") {
+            const value = argv[i + 1];
+            if (value === undefined || value.startsWith("--")) {
+                return { ...parsed, error: "argument --project-root: expected one argument" };
+            }
+            parsed.projectRoot = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--project-root=")) {
+            const value = arg.slice("--project-root=".length);
+            if (value.length === 0 || value.startsWith("--")) {
+                return { ...parsed, error: "argument --project-root: expected one argument" };
+            }
+            parsed.projectRoot = value;
+        }
+        else if (arg === "--session-id") {
+            const value = argv[i + 1];
+            if (value === undefined || value.startsWith("--")) {
+                return { ...parsed, error: "argument --session-id: expected one argument" };
+            }
+            const sessionId = value.trim();
+            if (sessionId.length === 0 || sessionId.startsWith("--")) {
+                return { ...parsed, error: "argument --session-id: expected a non-empty value" };
+            }
+            parsed.sessionId = sessionId;
+            i += 1;
+        }
+        else if (arg?.startsWith("--session-id=")) {
+            const sessionId = arg.slice("--session-id=".length).trim();
+            if (sessionId.length === 0 || sessionId.startsWith("--")) {
+                return { ...parsed, error: "argument --session-id: expected a non-empty value" };
+            }
+            parsed.sessionId = sessionId;
+        }
+        else {
+            return { ...parsed, error: `unrecognized argument: ${arg}` };
+        }
+    }
+    return parsed;
+}
+export function run(argv) {
+    const args = parseArgs(argv);
+    if (args.error !== undefined) {
+        process.stderr.write(`occupancy:heartbeat: ${args.error}\n`);
+        return 2;
+    }
+    const result = heartbeatOccupancy(resolve(args.projectRoot), {
+        sessionId: args.sessionId,
+        env: process.env,
+    });
+    const sink = result.code === 0 ? process.stdout : process.stderr;
+    sink.write(`${result.message}\n`);
+    return result.code;
+}
+//# sourceMappingURL=occupancy-heartbeat.js.map

package/dist/occupancy-release.d.ts

@@ -0,0 +1,8 @@
+#!/usr/bin/env node
+export declare function parseArgs(argv: readonly string[]): {
+    projectRoot: string;
+    sessionId?: string;
+    error?: string;
+};
+export declare function run(argv: readonly string[]): number;
+//# sourceMappingURL=occupancy-release.d.ts.map

package/dist/occupancy-release.js

@@ -0,0 +1,62 @@
+#!/usr/bin/env node
+import { resolve } from "node:path";
+import { releaseOccupancy } from "@deftai/directive-core/session";
+export function parseArgs(argv) {
+    const parsed = { projectRoot: "." };
+    for (let i = 0; i < argv.length; i += 1) {
+        const arg = argv[i];
+        if (arg === "--project-root") {
+            const value = argv[i + 1];
+            if (value === undefined || value.startsWith("--")) {
+                return { ...parsed, error: "argument --project-root: expected one argument" };
+            }
+            parsed.projectRoot = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--project-root=")) {
+            const value = arg.slice("--project-root=".length);
+            if (value.length === 0 || value.startsWith("--")) {
+                return { ...parsed, error: "argument --project-root: expected one argument" };
+            }
+            parsed.projectRoot = value;
+        }
+        else if (arg === "--session-id") {
+            const value = argv[i + 1];
+            if (value === undefined || value.startsWith("--")) {
+                return { ...parsed, error: "argument --session-id: expected one argument" };
+            }
+            const sessionId = value.trim();
+            if (sessionId.length === 0 || sessionId.startsWith("--")) {
+                return { ...parsed, error: "argument --session-id: expected a non-empty value" };
+            }
+            parsed.sessionId = sessionId;
+            i += 1;
+        }
+        else if (arg?.startsWith("--session-id=")) {
+            const sessionId = arg.slice("--session-id=".length).trim();
+            if (sessionId.length === 0 || sessionId.startsWith("--")) {
+                return { ...parsed, error: "argument --session-id: expected a non-empty value" };
+            }
+            parsed.sessionId = sessionId;
+        }
+        else {
+            return { ...parsed, error: `unrecognized argument: ${arg}` };
+        }
+    }
+    return parsed;
+}
+export function run(argv) {
+    const args = parseArgs(argv);
+    if (args.error !== undefined) {
+        process.stderr.write(`occupancy:release: ${args.error}\n`);
+        return 2;
+    }
+    const result = releaseOccupancy(resolve(args.projectRoot), {
+        sessionId: args.sessionId,
+        env: process.env,
+    });
+    const sink = result.code === 0 ? process.stdout : process.stderr;
+    sink.write(`${result.message}\n`);
+    return result.code;
+}
+//# sourceMappingURL=occupancy-release.js.map