@deftai/directive 0.107.0 → 0.109.0

package/dist/dispatch.d.ts

@@ -10,7 +10,7 @@ export interface DispatchIo {
     writeErr: (text: string) => void;
 }
 /** CLI modules in packages/cli/src (excluding parity harnesses and bin/index). */
-export declare const CLI_MODULE_VERBS: readonly ["agents-refresh", "cache", "check", "capacity-backfill", "capacity-show", "codebase-default-extractor", "codebase-map", "codebase-map-fresh", "codebase-projection-registry", "codebase-provider", "doctor", "install-upgrade", "install-uninstall", "migrate-preflight", "migrate-xbrief", "migrate-category-b", "framework-check-updates", "hook-dispatch", "umbrella-current-shape", "changelog-check", "change-init", "commit-lint", "coverage-hotspots", "policy", "authz", "escalation-cli", "pr-closing-keywords", "pr-merge-readiness", "pr-monitor", "pr-protected-issues", "pr-wait-mergeable", "pr-watch", "pr-finish-loop", "directive-finish-loop", "preflight-cache", "preflight-gh", "probe-session", "release", "release-e2e", "release-publish", "release-rollback", "scope-lifecycle", "scope-record-approved-scope", "scm-sync-default", "lifecycle-event", "lifecycle-stats", "session-start", "session-ready", "occupancy-steal", "occupancy-release", "plan-sequence", "slice", "subagent-monitor", "toolchain-check", "triage-actions", "triage-bootstrap", "triage-bulk", "triage-classify", "triage-evaluate", "triage-help", "triage-queue", "triage-reconcile", "triage-refresh", "triage-scope", "triage-scope-drift", "triage-smoketest", "triage-subscribe", "triage-summary", "triage-welcome", "ts-check-lane", "vbrief-activate", "vbrief-build", "vbrief-preflight", "vbrief-reconcile", "vbrief-validate", "vbrief-validation", "xbrief-create", "xbrief-verify", "verify-branch", "verify-encoding", "verify-forward-coverage", "verify-test-boundary", "verify-scope-provenance", "verify-consumer-check-contract", "verify-hooks-installed", "verify-investigation", "verify-judgment-gates", "verify-no-task-runtime", "validate-links", "validate-strategy-output", "verify-biome-config", "verify-bridge-drift", "verify-capacity", "verify-contained-writes", "verify-telemetry-coverage", "verify-content-manifest", "verify-skill-external-fetch-gate", "verify-contract-drift", "verify-cursor-tier1", "verify-openclaw-tier1", "verify-go-freeze", "verify-scm-boundary", "verify-session-ritual", "verify-plan-sequence", "verify-stubs", "verify-xbrief-drift", "rule-ownership-lint", "verify-story-ready", "verify-review-monitor", "verify-l4-owner", "verify-subagent-alive", "review-monitor-register", "review-monitor-release", "verify-tools", "verify-wip-cap", "verify-orphan-active", "verify-lifecycle-visible", "verify-completed-tracked", "verify-completed-write-guard", "verify-literal-ac", "verify-ac", "verify-agents-md-budget", "verify-agents-md-advisory", "verify-eval-health-relocation", "verify-eval-triggers-relocation", "eval-health", "eval-run", "eval-report", "eval-triggers"];
+export declare const CLI_MODULE_VERBS: readonly ["agents-refresh", "cache", "check", "capacity-backfill", "capacity-show", "codebase-default-extractor", "codebase-map", "codebase-map-fresh", "codebase-projection-registry", "codebase-provider", "doctor", "install-upgrade", "install-uninstall", "migrate-preflight", "migrate-xbrief", "migrate-category-b", "framework-check-updates", "hook-dispatch", "umbrella-current-shape", "changelog-check", "change-init", "commit-lint", "coverage-hotspots", "policy", "authz", "escalation-cli", "pr-closing-keywords", "pr-merge-readiness", "pr-monitor", "pr-protected-issues", "pr-wait-mergeable", "pr-watch", "pr-finish-loop", "directive-finish-loop", "preflight-cache", "preflight-gh", "probe-session", "release", "release-e2e", "release-publish", "release-rollback", "scope-lifecycle", "scope-record-approved-scope", "scm-sync-default", "lifecycle-event", "lifecycle-stats", "session-start", "session-ready", "occupancy-steal", "occupancy-release", "occupancy-heartbeat", "occupancy-grant", "plan-sequence", "slice", "subagent-monitor", "toolchain-check", "triage-actions", "triage-bootstrap", "triage-bulk", "triage-classify", "triage-evaluate", "triage-help", "triage-queue", "triage-reconcile", "triage-refresh", "triage-scope", "triage-scope-drift", "triage-smoketest", "triage-subscribe", "triage-summary", "triage-welcome", "ts-check-lane", "vbrief-activate", "vbrief-build", "vbrief-preflight", "vbrief-reconcile", "vbrief-validate", "vbrief-validation", "xbrief-create", "xbrief-verify", "verify-branch", "verify-encoding", "verify-forward-coverage", "verify-test-boundary", "verify-scope-provenance", "verify-consumer-check-contract", "verify-hooks-installed", "verify-investigation", "verify-judgment-gates", "verify-no-task-runtime", "validate-links", "validate-strategy-output", "verify-biome-config", "verify-bridge-drift", "verify-capacity", "verify-contained-writes", "verify-telemetry-coverage", "verify-content-manifest", "verify-deposit-closure", "verify-consumer-hard-stops", "verify-closing-keywords", "verify-skill-external-fetch-gate", "verify-semantic-single-source", "verify-contract-drift", "verify-cursor-tier1", "verify-openclaw-tier1", "verify-go-freeze", "verify-scm-boundary", "verify-session-ritual", "verify-plan-sequence", "verify-stubs", "verify-xbrief-drift", "rule-ownership-lint", "verify-story-ready", "verify-review-monitor", "verify-l4-owner", "verify-subagent-alive", "review-monitor-register", "review-monitor-release", "verify-tools", "verify-wip-cap", "verify-orphan-active", "verify-pr-closeout-attestable", "verify-lifecycle-visible", "verify-completed-tracked", "verify-completed-write-guard", "verify-literal-ac", "verify-ac", "verify-agents-md-budget", "verify-agents-md-advisory", "verify-eval-health-relocation", "verify-eval-triggers-relocation", "eval-health", "eval-run", "eval-report", "eval-triggers"];
 /** Core-only CLI entrypoints without a packages/cli wrapper. */
 export declare const CORE_MODULE_VERBS: readonly ["scm", "scm-readiness", "github-auth-modes", "github-body", "issue-emit", "issue-ingest", "issue-sync-from-xbrief", "reconcile-issues", "swarm-launch", "swarm-complete-cohort", "swarm-finalize-cohort", "swarm-pre-dispatch", "swarm-readiness", "swarm-routing-verify", "swarm-routing-set", "swarm-verify-review-clean", "swarm-worktrees", "framework-commands", "pack-render", "packs-slice", "prd-render", "export-spec", "project-render", "roadmap-render", "rule-map", "spec-render", "spec-validate", "code-structure-validate", "pack-migrate-skills", "pack-migrate-rules", "pack-migrate-strategies", "pack-migrate-patterns", "pack-migrate-swarm-spec", "policy-set", "setup-ghx", "scope-undo", "scope-demote", "scope-decompose", "changelog-resolve-unreleased", "architecture-preflight-sor", "feedback-file", "value-readback", "product-signal", "freshness-report", "decision-write", "decision-list"];
 /** Colon aliases for triage-actions (mirrors cli-router SUBCOMMAND_ROUTES). */

package/dist/dispatch.js

@@ -8,12 +8,11 @@ import { existsSync, mkdirSync, mkdtempSync, readdirSync, readFileSync, readSync
 import { homedir, tmpdir } from "node:os";
 import { basename, dirname, isAbsolute, join, relative, resolve } from "node:path";
 import { engineInfo, userConfig } from "@deftai/directive-core";
-import { assertWriteTargetSafe } from "@deftai/directive-core/dist/fs/projection-containment.js";
 import { parseInitArgv, runInitDepositCli } from "@deftai/directive-core/init-deposit";
 import { appendAuditLog, disclosureLine, migrateLegacyPolicyKey, PLAN_POLICY_KEY, POLICY_AUDIT_NOOP_STDOUT, policyColonInvocation, policySetInvocation, projectDefinitionPath, resolvePolicy, resolveWipCap, setPolicy, stampChangedToken, } from "@deftai/directive-core/policy";
 import { defaultWhich } from "@deftai/directive-core/scm";
 import { KNOWN_SUBAGENT_BACKEND_IDS, probeSubagentBackends, resolveSwarmSubagentBackend, } from "@deftai/directive-core/swarm";
-import { atomicWriteProjectDefinition } from "@deftai/directive-core/vbrief-build";
+import { withProjectDefinitionMutation, } from "@deftai/directive-core/vbrief-build";
 const HANDLER_KEYS = [
     "run",
     "main",
@@ -76,6 +75,8 @@ export const CLI_MODULE_VERBS = [
     "session-ready",
     "occupancy-steal",
     "occupancy-release",
+    "occupancy-heartbeat",
+    "occupancy-grant",
     "plan-sequence",
     "slice",
     "subagent-monitor",
@@ -122,7 +123,11 @@ export const CLI_MODULE_VERBS = [
     "verify-contained-writes",
     "verify-telemetry-coverage",
     "verify-content-manifest",
+    "verify-deposit-closure",
+    "verify-consumer-hard-stops",
+    "verify-closing-keywords",
     "verify-skill-external-fetch-gate",
+    "verify-semantic-single-source",
     "verify-contract-drift",
     "verify-cursor-tier1",
     "verify-openclaw-tier1",
@@ -142,6 +147,7 @@ export const CLI_MODULE_VERBS = [
     "verify-tools",
     "verify-wip-cap",
     "verify-orphan-active",
+    "verify-pr-closeout-attestable",
     "verify-lifecycle-visible",
     "verify-completed-tracked",
     "verify-completed-write-guard",
@@ -287,6 +293,7 @@ export const VERB_ALIASES = {
     "verify:vbrief-conformance": "vbrief-validate",
     "verify:wip-cap": "verify-wip-cap",
     "verify:orphan-active": "verify-orphan-active",
+    "verify:pr-closeout-attestable": "verify-pr-closeout-attestable",
     "verify:lifecycle-visible": "verify-lifecycle-visible",
     "verify:completed-tracked": "verify-completed-tracked",
     "verify:completed-write-guard": "verify-completed-write-guard",
@@ -330,7 +337,11 @@ export const VERB_ALIASES = {
     "verify:contained-writes": "verify-contained-writes",
     "verify:telemetry-coverage": "verify-telemetry-coverage",
     "verify:content-manifest": "verify-content-manifest",
+    "verify:deposit-closure": "verify-deposit-closure",
+    "verify:consumer-hard-stops": "verify-consumer-hard-stops",
+    "verify:closing-keywords": "verify-closing-keywords",
     "verify:skill-external-fetch-gate": "verify-skill-external-fetch-gate",
+    "verify:semantic-single-source": "verify-semantic-single-source",
     "verify:contract-drift": "verify-contract-drift",
     "verify:cursor-tier1": "verify-cursor-tier1",
     "verify:openclaw-tier1": "verify-openclaw-tier1",
@@ -369,6 +380,8 @@ export const VERB_ALIASES = {
     "session:ready": "session-ready",
     "occupancy:steal": "occupancy-steal",
     "occupancy:release": "occupancy-release",
+    "occupancy:heartbeat": "occupancy-heartbeat",
+    "occupancy:grant": "occupancy-grant",
     "session:end": "occupancy-release",
     ...FRESHNESS_COLON_ALIASES,
     "lifecycle:event": "lifecycle-event",
@@ -408,7 +421,11 @@ const SUBDIR_CLI_STEMS = {
     "verify-contained-writes": "verify-source-cli/verify-contained-writes",
     "verify-telemetry-coverage": "verify-source-cli/verify-telemetry-coverage",
     "verify-content-manifest": "verify-source-cli/verify-content-manifest",
+    "verify-deposit-closure": "verify-source-cli/verify-deposit-closure",
+    "verify-consumer-hard-stops": "verify-source-cli/verify-consumer-hard-stops",
+    "verify-closing-keywords": "verify-source-cli/verify-closing-keywords",
     "verify-skill-external-fetch-gate": "verify-source-cli/verify-skill-external-fetch-gate",
+    "verify-semantic-single-source": "verify-source-cli/verify-semantic-single-source",
     "verify-contract-drift": "verify-source-cli/verify-contract-drift",
     "verify-cursor-tier1": "verify-source-cli/verify-cursor-tier1",
     "verify-openclaw-tier1": "verify-source-cli/verify-openclaw-tier1",
@@ -2104,25 +2121,26 @@ function parsePolicySetArgs(argv) {
     }
     return args;
 }
-/** Load PROJECT-DEFINITION for an in-place typed-field write (mirrors the .setdefault chain). */
-function loadProjectDefinitionForWrite(projectRoot) {
-    const path = projectDefinitionPath(projectRoot);
+/**
+ * Load PROJECT-DEFINITION for an in-place typed-field write (mirrors the
+ * .setdefault chain). Reads the artifact the mutation lock captured (#3796) so
+ * these CLI writers can no longer resolve, read, and write a PROJECT-DEFINITION
+ * outside the shared mutation lock.
+ */
+function loadProjectDefinitionForWrite(mutation) {
+    const path = mutation.artifactPath;
     if (!existsSync(path)) {
-        throw new PolicySetError(`PROJECT-DEFINITION not found at ${path}`, "not-found");
+        throw new PolicySetError(`PROJECT-DEFINITION not found at ${mutation.artifactLabel}`, "not-found");
     }
-    let parsed;
+    let data;
     try {
-        parsed = JSON.parse(readFileSync(path, "utf8"));
+        // The shared loader rejects unreadable, malformed, and non-object top-level
+        // payloads; every one of those is a config error for the CLI writers.
+        data = mutation.load();
     }
     catch (err) {
-        throw new PolicySetError(`PROJECT-DEFINITION at ${path} is not valid JSON: ${String(err)}`, "config");
+        throw new PolicySetError(err instanceof Error ? err.message : String(err), "config");
     }
-    // JSON.parse can yield a non-object top level (null / array / scalar) without
-    // throwing; reject it before the .plan/.policy property chain dereferences it.
-    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
-        throw new PolicySetError(`PROJECT-DEFINITION at ${path} is not a JSON object`, "config");
-    }
-    const data = parsed;
     let plan = data.plan;
     if (plan === undefined) {
         plan = {};
@@ -2141,45 +2159,47 @@ function loadProjectDefinitionForWrite(projectRoot) {
     if (typeof policy !== "object" || policy === null || Array.isArray(policy)) {
         throw new PolicySetError("plan.policy is not an object", "config");
     }
-    return { path, data, policyBlock: policy, legacyMigrated };
+    return { data, policyBlock: policy, legacyMigrated };
 }
 /** Write plan.policy.wipCap in place + append the audit row (mirrors set_wip_cap). */
 function writeWipCap(projectRoot, cap, actor, note) {
-    const { path, data, policyBlock, legacyMigrated } = loadProjectDefinitionForWrite(projectRoot);
-    const previous = policyBlock.wipCap;
-    policyBlock.wipCap = cap;
-    const changed = previous !== cap || legacyMigrated;
-    const parts = [`actor=${actor}`, `wipCap=${cap}`, `previous=${pyRepr(previous)}`];
-    if (note)
-        parts.push(`note=${sanitizeNote(note)}`);
-    const auditEntry = stampChangedToken(parts.join(" "), changed);
-    if (changed) {
-        assertWriteTargetSafe(projectRoot, path);
-        atomicWriteProjectDefinition(path, data);
-    }
-    appendAuditLog(projectRoot, auditEntry, changed);
-    return { changed, auditEntry };
+    return withProjectDefinitionMutation(projectRoot, (mutation) => {
+        const { data, policyBlock, legacyMigrated } = loadProjectDefinitionForWrite(mutation);
+        const previous = policyBlock.wipCap;
+        policyBlock.wipCap = cap;
+        const changed = previous !== cap || legacyMigrated;
+        const parts = [`actor=${actor}`, `wipCap=${cap}`, `previous=${pyRepr(previous)}`];
+        if (note)
+            parts.push(`note=${sanitizeNote(note)}`);
+        const auditEntry = stampChangedToken(parts.join(" "), changed);
+        if (changed) {
+            mutation.persist(data);
+        }
+        appendAuditLog(projectRoot, auditEntry, changed);
+        return { changed, auditEntry };
+    });
 }
 /** Write plan.policy.swarmSubagentBackend in place + append the audit row. */
 function writeSubagentBackend(projectRoot, backendId, actor, note) {
-    const { path, data, policyBlock, legacyMigrated } = loadProjectDefinitionForWrite(projectRoot);
-    const previous = policyBlock.swarmSubagentBackend;
-    policyBlock.swarmSubagentBackend = backendId;
-    const changed = previous !== backendId || legacyMigrated;
-    const parts = [
-        `actor=${actor}`,
-        `swarmSubagentBackend=${backendId}`,
-        `previous=${pyRepr(previous)}`,
-    ];
-    if (note)
-        parts.push(`note=${sanitizeNote(note)}`);
-    const auditEntry = stampChangedToken(parts.join(" "), changed);
-    if (changed) {
-        assertWriteTargetSafe(projectRoot, path);
-        atomicWriteProjectDefinition(path, data);
-    }
-    appendAuditLog(projectRoot, auditEntry, changed);
-    return { changed, auditEntry };
+    return withProjectDefinitionMutation(projectRoot, (mutation) => {
+        const { data, policyBlock, legacyMigrated } = loadProjectDefinitionForWrite(mutation);
+        const previous = policyBlock.swarmSubagentBackend;
+        policyBlock.swarmSubagentBackend = backendId;
+        const changed = previous !== backendId || legacyMigrated;
+        const parts = [
+            `actor=${actor}`,
+            `swarmSubagentBackend=${backendId}`,
+            `previous=${pyRepr(previous)}`,
+        ];
+        if (note)
+            parts.push(`note=${sanitizeNote(note)}`);
+        const auditEntry = stampChangedToken(parts.join(" "), changed);
+        if (changed) {
+            mutation.persist(data);
+        }
+        appendAuditLog(projectRoot, auditEntry, changed);
+        return { changed, auditEntry };
+    });
 }
 /** Serialise the probe output for `subagent-backends --format json`. */
 function subagentBackendsToJson(backends) {
@@ -2617,19 +2637,30 @@ const CURATED_HELP_GROUPS = [
     {
         title: "Session & ritual",
         commands: [
-            { name: "session:start", summary: "Record session-start ritual state" },
+            {
+                name: "session:start",
+                summary: "Claim occupancy and record ritual state for one session owner",
+            },
             {
                 name: "session:ready",
                 summary: "One-shot recovery to gated write-ready (session + ritual + cache)",
             },
             {
                 name: "occupancy:steal",
-                summary: "Supersede a live worktree occupancy lease (--confirm --occupant)",
+                summary: "Replace only the live lease; use session:start --steal to align ritual",
             },
             {
                 name: "occupancy:release",
                 summary: "Release this worktree occupancy lease (owner live, or expired residue)",
             },
+            {
+                name: "occupancy:heartbeat",
+                summary: "Refresh your own live lease during long quiet stretches (never claims)",
+            },
+            {
+                name: "occupancy:grant",
+                summary: "Admit a dispatched child to your lease for writes (--revoke withdraws)",
+            },
             {
                 name: "session:end",
                 summary: "End this mutation session by releasing occupancy (same as occupancy:release)",
@@ -2795,6 +2826,9 @@ export async function dispatch(argv, io = defaultIo()) {
         const planSequenceSubcommand = verb !== undefined ? PLAN_SEQUENCE_ALIAS_SUBCOMMANDS[verb] : undefined;
         const productSignalSubcommand = verb !== undefined ? PRODUCT_SIGNAL_ALIAS_SUBCOMMANDS[verb] : undefined;
         const freshnessSubcommand = verb !== undefined ? FRESHNESS_ALIAS_SUBCOMMANDS[verb] : undefined;
+        const vbriefValidateSubcommand = verb === "verify:vbrief-conformance" && canonical === "vbrief-validate"
+            ? "conformance"
+            : undefined;
         const handlerArgv = canonical === "framework-commands" && verb !== undefined && verb !== canonical
             ? [verb, ...rest]
             : triageSubcommand !== undefined && canonical === "triage-actions"
@@ -2811,7 +2845,9 @@ export async function dispatch(argv, io = defaultIo()) {
                                     ? [productSignalSubcommand, ...rest]
                                     : freshnessSubcommand !== undefined && canonical === "freshness-report"
                                         ? [freshnessSubcommand, ...rest]
-                                        : rest;
+                                        : vbriefValidateSubcommand !== undefined
+                                            ? [vbriefValidateSubcommand, ...rest]
+                                            : rest;
         return await invokeHandler(handler, handlerArgv);
     }
     catch (err) {

package/dist/doctor.js

@@ -6,6 +6,7 @@ import { resolveContentPackageRoot } from "@deftai/directive-core/dist/content-r
 import { parseDoctorFlags } from "@deftai/directive-core/dist/doctor/flags.js";
 import { cmdDoctor } from "@deftai/directive-core/dist/doctor/main.js";
 import { findPackageAbsentDepositPathsSync } from "@deftai/directive-core/dist/init-deposit/hygiene.js";
+import { evaluateInstalledDepositClosure, renderDeclaredDepositClosureLine, } from "@deftai/directive-core/dist/validate-content/deposit-required.js";
 import { renderPrecutoverLine } from "@deftai/directive-core/dist/vbrief-validate/precutover.js";
 import { renderStaleHeaderLine, renderXbriefMigrationLine, } from "@deftai/directive-core/xbrief-migrate";
 /** Compare `.deft/core/` against `@deftai/directive-content` (#2804). */
@@ -56,9 +57,14 @@ export function run(argv) {
         process.stdout.write(`${renderXbriefMigrationLine(projectRoot)}\n`);
         process.stdout.write(`${renderStaleHeaderLine(projectRoot)}\n`);
         process.stdout.write(`${renderDepositFileSetHygieneLine(projectRoot, depositResult)}\n`);
+        const closure = evaluateInstalledDepositClosure(projectRoot);
+        process.stdout.write(`${renderDeclaredDepositClosureLine(closure)}\n`);
         if (flags.full && !depositResult.skipped && depositResult.absent.length > 0) {
             depositHygieneExit = 1;
         }
+        if (flags.full && !closure.skipped && (closure.missing.length > 0 || closure.error !== null)) {
+            depositHygieneExit = 1;
+        }
     }
     const doctorExit = cmdDoctor(argv);
     return Math.max(depositHygieneExit, doctorExit);

package/dist/occupancy-grant.d.ts

@@ -0,0 +1,18 @@
+#!/usr/bin/env node
+import { type OccupancyJoinProtocol } from "@deftai/directive-core/session";
+export interface GrantArgs {
+    projectRoot: string;
+    sessionId?: string;
+    childSessionId?: string;
+    role?: string;
+    worktree?: string;
+    ttlMinutes?: number;
+    host?: string;
+    address?: string;
+    joinProtocol?: OccupancyJoinProtocol;
+    revoke: boolean;
+    error?: string;
+}
+export declare function parseArgs(argv: readonly string[]): GrantArgs;
+export declare function run(argv: readonly string[]): number;
+//# sourceMappingURL=occupancy-grant.d.ts.map

package/dist/occupancy-grant.js

@@ -0,0 +1,120 @@
+#!/usr/bin/env node
+import { resolve } from "node:path";
+import { grantOccupancyMembership, OCCUPANCY_JOIN_PROTOCOLS, revokeOccupancyMembership, } from "@deftai/directive-core/session";
+const VALUE_FLAGS = [
+    "--project-root",
+    "--session-id",
+    "--child-session-id",
+    "--role",
+    "--worktree",
+    "--ttl-minutes",
+    "--host",
+    "--address",
+    "--join-protocol",
+];
+function readValue(argv, index, flag) {
+    const arg = argv[index] ?? "";
+    const inline = `${flag}=`;
+    const raw = arg.startsWith(inline) ? arg.slice(inline.length) : argv[index + 1];
+    if (raw === undefined || raw.startsWith("--")) {
+        return { error: `argument ${flag}: expected one argument` };
+    }
+    const value = raw.trim();
+    if (value.length === 0) {
+        return { error: `argument ${flag}: expected a non-empty value` };
+    }
+    return { value, next: arg.startsWith(inline) ? index : index + 1 };
+}
+export function parseArgs(argv) {
+    const parsed = { projectRoot: ".", revoke: false };
+    for (let i = 0; i < argv.length; i += 1) {
+        const arg = argv[i] ?? "";
+        if (arg === "--revoke")
+            continue;
+        const flag = VALUE_FLAGS.find((name) => arg === name || arg.startsWith(`${name}=`));
+        if (flag === undefined) {
+            return {
+                ...parsed,
+                revoke: argv.includes("--revoke"),
+                error: `unrecognized argument: ${arg}`,
+            };
+        }
+        const read = readValue(argv, i, flag);
+        if ("error" in read)
+            return { ...parsed, revoke: argv.includes("--revoke"), error: read.error };
+        i = read.next;
+        switch (flag) {
+            case "--project-root":
+                parsed.projectRoot = read.value;
+                break;
+            case "--session-id":
+                parsed.sessionId = read.value;
+                break;
+            case "--child-session-id":
+                parsed.childSessionId = read.value;
+                break;
+            case "--role":
+                parsed.role = read.value;
+                break;
+            case "--worktree":
+                parsed.worktree = read.value;
+                break;
+            case "--host":
+                parsed.host = read.value;
+                break;
+            case "--address":
+                parsed.address = read.value;
+                break;
+            case "--ttl-minutes": {
+                const minutes = Number(read.value);
+                if (!Number.isFinite(minutes) || minutes <= 0) {
+                    return {
+                        ...parsed,
+                        revoke: argv.includes("--revoke"),
+                        error: "argument --ttl-minutes: expected a positive number of minutes",
+                    };
+                }
+                parsed.ttlMinutes = minutes;
+                break;
+            }
+            case "--join-protocol": {
+                if (!OCCUPANCY_JOIN_PROTOCOLS.includes(read.value)) {
+                    return {
+                        ...parsed,
+                        revoke: argv.includes("--revoke"),
+                        error: `argument --join-protocol: expected one of ${OCCUPANCY_JOIN_PROTOCOLS.join(", ")}`,
+                    };
+                }
+                parsed.joinProtocol = read.value;
+                break;
+            }
+        }
+    }
+    return { ...parsed, revoke: argv.includes("--revoke") };
+}
+export function run(argv) {
+    const args = parseArgs(argv);
+    if (args.error !== undefined) {
+        process.stderr.write(`occupancy:grant: ${args.error}\n`);
+        return 2;
+    }
+    const projectRoot = resolve(args.projectRoot);
+    const input = {
+        sessionId: args.sessionId,
+        childSessionId: args.childSessionId,
+        role: args.role,
+        worktreePath: args.worktree,
+        ttlMs: args.ttlMinutes === undefined ? undefined : args.ttlMinutes * 60 * 1000,
+        host: args.host,
+        address: args.address,
+        joinProtocol: args.joinProtocol,
+        env: process.env,
+    };
+    const result = args.revoke
+        ? revokeOccupancyMembership(projectRoot, input)
+        : grantOccupancyMembership(projectRoot, input);
+    const sink = result.code === 0 ? process.stdout : process.stderr;
+    sink.write(`${result.message}\n`);
+    return result.code;
+}
+//# sourceMappingURL=occupancy-grant.js.map

package/dist/occupancy-heartbeat.d.ts

@@ -0,0 +1,8 @@
+#!/usr/bin/env node
+export declare function parseArgs(argv: readonly string[]): {
+    projectRoot: string;
+    sessionId?: string;
+    error?: string;
+};
+export declare function run(argv: readonly string[]): number;
+//# sourceMappingURL=occupancy-heartbeat.d.ts.map

package/dist/occupancy-heartbeat.js

@@ -0,0 +1,62 @@
+#!/usr/bin/env node
+import { resolve } from "node:path";
+import { heartbeatOccupancy } from "@deftai/directive-core/session";
+export function parseArgs(argv) {
+    const parsed = { projectRoot: "." };
+    for (let i = 0; i < argv.length; i += 1) {
+        const arg = argv[i];
+        if (arg === "--project-root") {
+            const value = argv[i + 1];
+            if (value === undefined || value.startsWith("--")) {
+                return { ...parsed, error: "argument --project-root: expected one argument" };
+            }
+            parsed.projectRoot = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--project-root=")) {
+            const value = arg.slice("--project-root=".length);
+            if (value.length === 0 || value.startsWith("--")) {
+                return { ...parsed, error: "argument --project-root: expected one argument" };
+            }
+            parsed.projectRoot = value;
+        }
+        else if (arg === "--session-id") {
+            const value = argv[i + 1];
+            if (value === undefined || value.startsWith("--")) {
+                return { ...parsed, error: "argument --session-id: expected one argument" };
+            }
+            const sessionId = value.trim();
+            if (sessionId.length === 0 || sessionId.startsWith("--")) {
+                return { ...parsed, error: "argument --session-id: expected a non-empty value" };
+            }
+            parsed.sessionId = sessionId;
+            i += 1;
+        }
+        else if (arg?.startsWith("--session-id=")) {
+            const sessionId = arg.slice("--session-id=".length).trim();
+            if (sessionId.length === 0 || sessionId.startsWith("--")) {
+                return { ...parsed, error: "argument --session-id: expected a non-empty value" };
+            }
+            parsed.sessionId = sessionId;
+        }
+        else {
+            return { ...parsed, error: `unrecognized argument: ${arg}` };
+        }
+    }
+    return parsed;
+}
+export function run(argv) {
+    const args = parseArgs(argv);
+    if (args.error !== undefined) {
+        process.stderr.write(`occupancy:heartbeat: ${args.error}\n`);
+        return 2;
+    }
+    const result = heartbeatOccupancy(resolve(args.projectRoot), {
+        sessionId: args.sessionId,
+        env: process.env,
+    });
+    const sink = result.code === 0 ? process.stdout : process.stderr;
+    sink.write(`${result.message}\n`);
+    return result.code;
+}
+//# sourceMappingURL=occupancy-heartbeat.js.map

package/dist/occupancy-release.d.ts

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 export declare function parseArgs(argv: readonly string[]): {
     projectRoot: string;
+    sessionId?: string;
     error?: string;
 };
 export declare function run(argv: readonly string[]): number;

package/dist/occupancy-release.js

@@ -7,14 +7,37 @@ export function parseArgs(argv) {
         const arg = argv[i];
         if (arg === "--project-root") {
             const value = argv[i + 1];
-            if (value === undefined) {
+            if (value === undefined || value.startsWith("--")) {
                 return { ...parsed, error: "argument --project-root: expected one argument" };
             }
             parsed.projectRoot = value;
             i += 1;
         }
         else if (arg?.startsWith("--project-root=")) {
-            parsed.projectRoot = arg.slice("--project-root=".length);
+            const value = arg.slice("--project-root=".length);
+            if (value.length === 0 || value.startsWith("--")) {
+                return { ...parsed, error: "argument --project-root: expected one argument" };
+            }
+            parsed.projectRoot = value;
+        }
+        else if (arg === "--session-id") {
+            const value = argv[i + 1];
+            if (value === undefined || value.startsWith("--")) {
+                return { ...parsed, error: "argument --session-id: expected one argument" };
+            }
+            const sessionId = value.trim();
+            if (sessionId.length === 0 || sessionId.startsWith("--")) {
+                return { ...parsed, error: "argument --session-id: expected a non-empty value" };
+            }
+            parsed.sessionId = sessionId;
+            i += 1;
+        }
+        else if (arg?.startsWith("--session-id=")) {
+            const sessionId = arg.slice("--session-id=".length).trim();
+            if (sessionId.length === 0 || sessionId.startsWith("--")) {
+                return { ...parsed, error: "argument --session-id: expected a non-empty value" };
+            }
+            parsed.sessionId = sessionId;
         }
         else {
             return { ...parsed, error: `unrecognized argument: ${arg}` };
@@ -29,6 +52,7 @@ export function run(argv) {
         return 2;
     }
     const result = releaseOccupancy(resolve(args.projectRoot), {
+        sessionId: args.sessionId,
         env: process.env,
     });
     const sink = result.code === 0 ? process.stdout : process.stderr;

package/dist/occupancy-steal.d.ts

@@ -3,6 +3,7 @@ export declare function parseArgs(argv: readonly string[]): {
     projectRoot: string;
     confirm: boolean;
     occupant: string | null;
+    sessionId?: string;
     error?: string;
 };
 export declare function run(argv: readonly string[]): number;

package/dist/occupancy-steal.js

@@ -10,25 +10,52 @@ export function parseArgs(argv) {
         }
         else if (arg === "--occupant") {
             const value = argv[i + 1];
-            if (value === undefined) {
+            if (value === undefined || value.startsWith("--")) {
                 return { ...parsed, error: "argument --occupant: expected one argument" };
             }
             parsed.occupant = value;
             i += 1;
         }
         else if (arg?.startsWith("--occupant=")) {
-            parsed.occupant = arg.slice("--occupant=".length);
+            const value = arg.slice("--occupant=".length);
+            if (value.length === 0 || value.startsWith("--")) {
+                return { ...parsed, error: "argument --occupant: expected one argument" };
+            }
+            parsed.occupant = value;
         }
         else if (arg === "--project-root") {
             const value = argv[i + 1];
-            if (value === undefined) {
+            if (value === undefined || value.startsWith("--")) {
                 return { ...parsed, error: "argument --project-root: expected one argument" };
             }
             parsed.projectRoot = value;
             i += 1;
         }
         else if (arg?.startsWith("--project-root=")) {
-            parsed.projectRoot = arg.slice("--project-root=".length);
+            const value = arg.slice("--project-root=".length);
+            if (value.length === 0 || value.startsWith("--")) {
+                return { ...parsed, error: "argument --project-root: expected one argument" };
+            }
+            parsed.projectRoot = value;
+        }
+        else if (arg === "--session-id") {
+            const value = argv[i + 1];
+            if (value === undefined || value.startsWith("--")) {
+                return { ...parsed, error: "argument --session-id: expected one argument" };
+            }
+            const sessionId = value.trim();
+            if (sessionId.length === 0 || sessionId.startsWith("--")) {
+                return { ...parsed, error: "argument --session-id: expected a non-empty value" };
+            }
+            parsed.sessionId = sessionId;
+            i += 1;
+        }
+        else if (arg?.startsWith("--session-id=")) {
+            const sessionId = arg.slice("--session-id=".length).trim();
+            if (sessionId.length === 0 || sessionId.startsWith("--")) {
+                return { ...parsed, error: "argument --session-id: expected a non-empty value" };
+            }
+            parsed.sessionId = sessionId;
         }
         else {
             return { ...parsed, error: `unrecognized argument: ${arg}` };
@@ -43,6 +70,7 @@ export function run(argv) {
         return 2;
     }
     const result = stealOccupancy(resolve(args.projectRoot), {
+        sessionId: args.sessionId,
         confirm: args.confirm,
         occupant: args.occupant ?? undefined,
         env: process.env,