@deftai/directive 0.119.11 → 0.119.13

package/dist/check.js

@@ -13,6 +13,7 @@ import { join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { dispatchTaskCheck } from "@deftai/directive-core/check";
 import { DEFT_REPO_POSITIVE_MARKERS } from "@deftai/directive-core/doctor";
+import { refuseIfWslOwnershipBlocked } from "./wsl-ownership-guard.js";
 function isFrameworkSourceCheckoutAt(projectRoot) {
     try {
         if (!statSync(join(projectRoot, "main.md")).isFile()) {
@@ -135,6 +136,10 @@ export function run(argv) {
         process.stderr.write(FRAMEWORK_ROOT_MISS);
         return 2;
     }
+    // #1617: live WSL ownership gate before first protected check write/orchestration.
+    const blocked = refuseIfWslOwnershipBlocked(args.projectRoot);
+    if (blocked !== null)
+        return blocked;
     return dispatchTaskCheck(args.frameworkRoot, args.projectRoot, { noCache: args.noCache });
 }
 /* v8 ignore start -- entry guard */

package/dist/dispatch.d.ts

@@ -10,9 +10,9 @@ export interface DispatchIo {
     writeErr: (text: string) => void;
 }
 /** CLI modules in packages/cli/src (excluding parity harnesses and bin/index). */
-export declare const CLI_MODULE_VERBS: readonly ["agents-refresh", "cache", "check", "capacity-backfill", "capacity-show", "codebase-default-extractor", "codebase-map", "codebase-map-fresh", "codebase-projection-registry", "codebase-provider", "doctor", "install-upgrade", "install-uninstall", "migrate-preflight", "migrate-xbrief", "migrate-category-b", "framework-check-updates", "hook-dispatch", "umbrella-current-shape", "changelog-check", "change-init", "commit-lint", "coverage-hotspots", "policy", "authz", "escalation-cli", "pr-closing-keywords", "pr-merge-readiness", "pr-monitor", "pr-protected-issues", "pr-wait-mergeable", "pr-watch", "pr-finish-loop", "directive-finish-loop", "preflight-cache", "preflight-gh", "probe-session", "release", "release-e2e", "release-publish", "release-rollback", "release-wait-npm", "scope-lifecycle", "scope-record-approved-scope", "scope-record-observable-scope", "scope-record-intent-constraint", "scm-sync-default", "lifecycle-event", "lifecycle-stats", "session-start", "session-ready", "occupancy-steal", "occupancy-release", "occupancy-heartbeat", "occupancy-grant", "plan-sequence", "slice", "subagent-monitor", "toolchain-check", "triage-actions", "triage-bootstrap", "triage-bulk", "triage-classify", "triage-strip-withdrawn", "triage-evaluate", "triage-help", "triage-queue", "triage-reconcile", "triage-refresh", "triage-scope", "triage-scope-drift", "triage-smoketest", "triage-subscribe", "triage-summary", "triage-welcome", "ts-check-lane", "vbrief-activate", "vbrief-build", "vbrief-preflight", "vbrief-reconcile", "vbrief-validate", "vbrief-validation", "xbrief-create", "xbrief-verify", "xbrief-adopt-stored-plan-id", "verify-branch", "verify-encoding", "verify-forward-coverage", "verify-test-boundary", "verify-class-checks", "verify-presentation-coverage", "verify-scope-provenance", "verify-consumer-check-contract", "verify-hooks-installed", "verify-investigation", "verify-judgment-gates", "verify-no-task-runtime", "validate-links", "validate-strategy-output", "verify-biome-config", "verify-bridge-drift", "verify-capacity", "verify-contained-writes", "verify-telemetry-coverage", "verify-content-manifest", "verify-deposit-closure", "verify-consumer-hard-stops", "verify-closing-keywords", "verify-skill-external-fetch-gate", "verify-semantic-single-source", "verify-contract-drift", "verify-cursor-tier1", "verify-openclaw-tier1", "verify-go-freeze", "verify-scm-boundary", "verify-session-ritual", "verify-plan-sequence", "verify-stubs", "verify-xbrief-drift", "verify-spec-prd-fresh", "rule-ownership-lint", "verify-story-ready", "verify-review-monitor", "verify-l4-owner", "verify-subagent-alive", "verify-subagent-steer", "review-monitor-register", "review-monitor-release", "verify-tools", "verify-wip-cap", "verify-orphan-active", "verify-pr-closeout-attestable", "verify-lifecycle-visible", "verify-completed-tracked", "verify-completed-write-guard", "verify-literal-ac", "verify-ac", "verify-agents-md-budget", "verify-agents-md-advisory", "verify-eval-health-relocation", "verify-eval-triggers-relocation", "verify-evaluator-surface", "verify-observable-scope", "verify-operator-scope-limit", "verify-presentation-ceiling", "verify-intent-constraint", "verify-durable-effect-acquisition", "verify-consumer-test-lane", "eval-health", "eval-run", "eval-report", "eval-triggers"];
+export declare const CLI_MODULE_VERBS: readonly ["agents-refresh", "cache", "check", "capacity-backfill", "capacity-show", "codebase-default-extractor", "codebase-map", "codebase-map-fresh", "codebase-projection-registry", "codebase-provider", "doctor", "ownership-doctor", "ownership-fix", "verify-ownership", "install-upgrade", "install-uninstall", "migrate-preflight", "migrate-xbrief", "migrate-category-b", "framework-check-updates", "hook-dispatch", "umbrella-current-shape", "changelog-check", "change-init", "commit-lint", "coverage-hotspots", "policy", "authz", "escalation-cli", "pr-closing-keywords", "pr-merge-readiness", "pr-monitor", "pr-protected-issues", "pr-wait-mergeable", "pr-watch", "pr-finish-loop", "directive-finish-loop", "preflight-cache", "preflight-gh", "probe-session", "release", "release-e2e", "release-publish", "release-rollback", "release-wait-npm", "scope-lifecycle", "scope-record-approved-scope", "scope-record-observable-scope", "scope-record-intent-constraint", "scm-sync-default", "lifecycle-event", "lifecycle-stats", "session-start", "session-ready", "occupancy-steal", "occupancy-release", "occupancy-heartbeat", "occupancy-grant", "plan-sequence", "slice", "subagent-monitor", "toolchain-check", "triage-actions", "triage-bootstrap", "triage-bulk", "triage-classify", "triage-strip-withdrawn", "triage-evaluate", "triage-help", "triage-queue", "triage-reconcile", "triage-refresh", "triage-scope", "triage-scope-drift", "triage-smoketest", "triage-subscribe", "triage-summary", "triage-welcome", "ts-check-lane", "vbrief-activate", "vbrief-build", "vbrief-preflight", "vbrief-reconcile", "vbrief-validate", "vbrief-validation", "xbrief-create", "xbrief-verify", "xbrief-adopt-stored-plan-id", "verify-branch", "verify-encoding", "verify-forward-coverage", "verify-test-boundary", "verify-class-checks", "verify-presentation-coverage", "verify-scope-provenance", "verify-consumer-check-contract", "verify-hooks-installed", "verify-investigation", "verify-judgment-gates", "verify-no-task-runtime", "validate-links", "validate-strategy-output", "verify-biome-config", "verify-bridge-drift", "verify-capacity", "verify-contained-writes", "verify-telemetry-coverage", "verify-content-manifest", "verify-deposit-closure", "verify-consumer-hard-stops", "verify-closing-keywords", "verify-skill-external-fetch-gate", "verify-semantic-single-source", "verify-contract-drift", "verify-cursor-tier1", "verify-openclaw-tier1", "verify-go-freeze", "verify-scm-boundary", "verify-session-ritual", "verify-plan-sequence", "verify-stubs", "verify-xbrief-drift", "verify-spec-prd-fresh", "rule-ownership-lint", "verify-story-ready", "verify-review-monitor", "verify-l4-owner", "verify-subagent-alive", "verify-subagent-steer", "review-monitor-register", "review-monitor-release", "verify-tools", "verify-wip-cap", "verify-orphan-active", "verify-pr-closeout-attestable", "verify-lifecycle-visible", "verify-completed-tracked", "verify-completed-write-guard", "verify-literal-ac", "verify-ac", "verify-agents-md-budget", "verify-consumer-header-placeholder", "verify-agents-md-advisory", "verify-persisted-planning-narratives", "verify-eval-health-relocation", "verify-eval-triggers-relocation", "verify-evaluator-surface", "verify-observable-scope", "verify-operator-scope-limit", "verify-presentation-ceiling", "verify-intent-constraint", "verify-durable-effect-acquisition", "verify-consumer-test-lane", "eval-health", "eval-run", "eval-report", "eval-triggers"];
 /** Core-only CLI entrypoints without a packages/cli wrapper. */
-export declare const CORE_MODULE_VERBS: readonly ["scm", "scm-readiness", "github-auth-modes", "github-body", "issue-emit", "issue-ingest", "issue-sync-from-xbrief", "reconcile-issues", "swarm-launch", "swarm-complete-cohort", "swarm-finalize-cohort", "swarm-finalize-owed", "swarm-pre-dispatch", "swarm-readiness", "swarm-routing-verify", "swarm-routing-set", "swarm-verify-review-clean", "swarm-worktrees", "framework-commands", "pack-render", "packs-slice", "prd-render", "export-spec", "project-render", "project-write-narratives", "roadmap-render", "rule-map", "spec-render", "spec-validate", "code-structure-validate", "pack-migrate-skills", "pack-migrate-rules", "pack-migrate-strategies", "pack-migrate-patterns", "pack-migrate-swarm-spec", "policy-set", "setup-ghx", "scope-undo", "scope-demote", "scope-decompose", "changelog-resolve-unreleased", "architecture-preflight-sor", "feedback-file", "value-readback", "product-signal", "freshness-report", "decision-write", "decision-list", "docs-impact"];
+export declare const CORE_MODULE_VERBS: readonly ["scm", "scm-readiness", "github-auth-modes", "github-body", "issue-emit", "issue-ingest", "issue-sync-from-xbrief", "reconcile-issues", "swarm-launch", "swarm-complete-cohort", "swarm-finalize-cohort", "swarm-finalize-owed", "swarm-pre-dispatch", "swarm-readiness", "swarm-routing-verify", "swarm-routing-set", "swarm-verify-review-clean", "swarm-worktrees", "framework-commands", "pack-render", "packs-slice", "prd-render", "export-spec", "project-render", "project-write-narratives", "roadmap-render", "rule-map", "spec-render", "spec-validate", "code-structure-validate", "pack-migrate-skills", "pack-migrate-rules", "pack-migrate-strategies", "pack-migrate-patterns", "pack-migrate-swarm-spec", "policy-set", "setup-ghx", "scope-undo", "scope-demote", "scope-decompose", "changelog-resolve-unreleased", "architecture-preflight-sor", "feedback-file", "value-readback", "product-signal", "freshness-report", "decision-write", "decision-list", "docs-impact", "migrate-clause-ids"];
 /** Colon aliases for triage-actions (mirrors cli-router SUBCOMMAND_ROUTES). */
 export declare const TRIAGE_ACTION_ALIAS_SUBCOMMANDS: Readonly<Record<string, string>>;
 /** Colon aliases for policy subcommands (mirrors cli-router SUBCOMMAND_ROUTES). */

package/dist/dispatch.js

@@ -38,6 +38,9 @@ export const CLI_MODULE_VERBS = [
     "codebase-projection-registry",
     "codebase-provider",
     "doctor",
+    "ownership-doctor",
+    "ownership-fix",
+    "verify-ownership",
     "install-upgrade",
     "install-uninstall",
     "migrate-preflight",
@@ -165,7 +168,9 @@ export const CLI_MODULE_VERBS = [
     "verify-literal-ac",
     "verify-ac",
     "verify-agents-md-budget",
+    "verify-consumer-header-placeholder",
     "verify-agents-md-advisory",
+    "verify-persisted-planning-narratives",
     "verify-eval-health-relocation",
     "verify-eval-triggers-relocation",
     "verify-evaluator-surface",
@@ -231,6 +236,7 @@ export const CORE_MODULE_VERBS = [
     "decision-write",
     "decision-list",
     "docs-impact",
+    "migrate-clause-ids",
 ];
 /** Colon aliases for triage-actions (mirrors cli-router SUBCOMMAND_ROUTES). */
 export const TRIAGE_ACTION_ALIAS_SUBCOMMANDS = {
@@ -330,7 +336,9 @@ export const VERB_ALIASES = {
     "verify:ac": "verify-ac",
     "verify:acceptance": "verify-ac",
     "verify:agents-md-budget": "verify-agents-md-budget",
+    "verify:consumer-header-placeholder": "verify-consumer-header-placeholder",
     "verify:agents-md-advisory": "verify-agents-md-advisory",
+    "verify:persisted-planning-narratives": "verify-persisted-planning-narratives",
     "verify:eval-health-relocation": "verify-eval-health-relocation",
     "verify:eval-triggers-relocation": "verify-eval-triggers-relocation",
     "verify:evaluator-surface": "verify-evaluator-surface",
@@ -410,6 +418,7 @@ export const VERB_ALIASES = {
     "migrate:preflight": "migrate-preflight",
     "migrate:xbrief": "migrate-xbrief",
     "migrate:category-b": "migrate-category-b",
+    "migrate:clause-ids": "migrate-clause-ids",
     "framework:check-updates": "framework-check-updates",
     "umbrella:current-shape": "umbrella-current-shape",
     "issue:sync-from-xbrief": "issue-sync-from-xbrief",
@@ -437,6 +446,12 @@ export const VERB_ALIASES = {
     "pr:finish-loop": "pr-finish-loop",
     "directive:finish-loop": "directive-finish-loop",
     doctor: "doctor",
+    "ownership:doctor": "ownership-doctor",
+    "ownership:fix": "ownership-fix",
+    "verify:ownership": "verify-ownership",
+    "deft:ownership:doctor": "ownership-doctor",
+    "deft:ownership:fix": "ownership-fix",
+    "deft:verify:ownership": "verify-ownership",
     "eval:health": "eval-health",
     "feedback:file": "feedback-file",
     "value:show": "value-readback",
@@ -2619,6 +2634,10 @@ async function loadCoreModuleHandler(verb, io) {
             const { docsImpactMain } = await import("@deftai/directive-core/dist/docs/docs-impact.js");
             return (argv) => docsImpactMain(argv);
         }
+        case "migrate-clause-ids": {
+            const { mainEntry } = await import("@deftai/directive-core/dist/xbrief-migrate/clause-ids.js");
+            return (argv) => mainEntry(argv);
+        }
         default:
             throw new Error(`unknown core verb: ${verb}`);
     }

package/dist/init-cli/update.js

@@ -1,4 +1,5 @@
 import { parseUpdateArgv, runRefreshDepositCli, UnknownUpdateFlagError, } from "@deftai/directive-core/init-deposit";
+import { refuseIfWslOwnershipBlocked } from "../wsl-ownership-guard.js";
 import { CANONICAL_UPDATE_ARGV, UPDATE_DRY_RUN_FLAGS } from "./constants.js";
 import { argvWantsHelp, printUpdateHelp } from "./help.js";
 /** True when the user argv asked for a classify-only dry-run (`--dry-run`/`--plan`). */
@@ -13,6 +14,12 @@ export function runUpdate(argv, io) {
     }
     try {
         const args = parseUpdateArgv(CANONICAL_UPDATE_ARGV, argv);
+        // #1617: live ownership gate before deposit mutation (dry-run exempt).
+        if (!isUpdateDryRun(argv)) {
+            const blocked = refuseIfWslOwnershipBlocked(args.projectDir, io.writeErr);
+            if (blocked !== null)
+                return Promise.resolve(blocked);
+        }
         return runRefreshDepositCli({
             ...args,
             dryRun: isUpdateDryRun(argv),

package/dist/occupancy-release.d.ts

@@ -1,7 +1,17 @@
 #!/usr/bin/env node
+/**
+ * First-class abandoned-lease recovery (#4667). Live actor is session_id in
+ * .deft/occupancy.json; bare session:end with empty identity refuses; TTL
+ * claim-over and deny-embedded copy-paste remain. host:none / address:none
+ * are unset metadata, not the lock cause. Does not reopen anonymous live
+ * auto-release (#3954).
+ */
+export declare const ABANDONED_OCCUPANCY_LEASE_RECOVERY: string;
+export declare function formatOccupancyReleaseHelp(): string;
 export declare function parseArgs(argv: readonly string[]): {
     projectRoot: string;
     sessionId?: string;
+    help?: boolean;
     error?: string;
 };
 export declare function run(argv: readonly string[]): number;

package/dist/occupancy-release.js

@@ -2,11 +2,38 @@
 import { resolve } from "node:path";
 import { releaseOccupancy } from "@deftai/directive-core/session";
 import { occupancyUnrecognizedArgument } from "./occupancy-unrecognized.js";
+/**
+ * First-class abandoned-lease recovery (#4667). Live actor is session_id in
+ * .deft/occupancy.json; bare session:end with empty identity refuses; TTL
+ * claim-over and deny-embedded copy-paste remain. host:none / address:none
+ * are unset metadata, not the lock cause. Does not reopen anonymous live
+ * auto-release (#3954).
+ */
+export const ABANDONED_OCCUPANCY_LEASE_RECOVERY = "Abandoned live occupancy lease: bare session:end / occupancy:release without a presented " +
+    "session identity refuses while the lease is live. Immediate recovery: " +
+    "occupancy:release --session-id=<id from .deft/occupancy.json> " +
+    "(read session_id from that file). Or wait for TTL claim-over. " +
+    "host:none / address:none are ordinary unset metadata, not the lock cause.";
+export function formatOccupancyReleaseHelp() {
+    return [
+        "Usage: deft occupancy:release [--project-root <path>] [--session-id <id>]",
+        "",
+        "Release this worktree occupancy lease (owner live, or expired residue).",
+        "",
+        ABANDONED_OCCUPANCY_LEASE_RECOVERY,
+        "",
+    ].join("\n");
+}
 export function parseArgs(argv) {
-    const parsed = { projectRoot: "." };
+    const parsed = {
+        projectRoot: ".",
+    };
     for (let i = 0; i < argv.length; i += 1) {
         const arg = argv[i];
-        if (arg === "--project-root") {
+        if (arg === "--help" || arg === "-h") {
+            parsed.help = true;
+        }
+        else if (arg === "--project-root") {
             const value = argv[i + 1];
             if (value === undefined || value.startsWith("--")) {
                 return { ...parsed, error: "argument --project-root: expected one argument" };
@@ -52,6 +79,10 @@ export function run(argv) {
         process.stderr.write(`occupancy:release: ${args.error}\n`);
         return 2;
     }
+    if (args.help === true) {
+        process.stdout.write(formatOccupancyReleaseHelp());
+        return 0;
+    }
     const result = releaseOccupancy(resolve(args.projectRoot), {
         sessionId: args.sessionId,
         env: process.env,

package/dist/ownership-doctor.d.ts

@@ -0,0 +1,10 @@
+#!/usr/bin/env node
+export interface OwnershipDoctorArgs {
+    projectRoot: string;
+    json: boolean;
+    owner: string | null;
+    error?: string;
+}
+export declare function parseArgs(argv: readonly string[]): OwnershipDoctorArgs;
+export declare function run(argv: readonly string[]): number;
+//# sourceMappingURL=ownership-doctor.d.ts.map

package/dist/ownership-doctor.js

@@ -0,0 +1,96 @@
+#!/usr/bin/env node
+/**
+ * ownership:doctor / ownership-doctor (#1617)
+ * Diagnose WSL root-runtime vs filesystem project-owner mismatch.
+ * Reachable under mismatch (not blocked by the protected-mutation guard).
+ */
+import { resolve } from "node:path";
+import { evaluateWslOwnershipGuard, OWNERSHIP_FACTS_CLASSIFIER, ownershipGuardToDict, } from "@deftai/directive-core/platform";
+import { isDirectEntrypoint } from "./entrypoint.js";
+export function parseArgs(argv) {
+    const parsed = {
+        projectRoot: ".",
+        json: false,
+        owner: null,
+    };
+    for (let i = 0; i < argv.length; i += 1) {
+        const arg = argv[i];
+        if (arg === "--") {
+        }
+        else if (arg === "--json") {
+            parsed.json = true;
+        }
+        else if (arg === "--project-root") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...parsed, error: "argument --project-root: expected one argument" };
+            }
+            parsed.projectRoot = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--project-root=")) {
+            parsed.projectRoot = arg.slice("--project-root=".length);
+        }
+        else if (arg === "--owner") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...parsed, error: "argument --owner: expected uid:gid" };
+            }
+            parsed.owner = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--owner=")) {
+            parsed.owner = arg.slice("--owner=".length);
+        }
+        else if (arg === "--help" || arg === "-h") {
+            return { ...parsed, error: "__help__" };
+        }
+        else {
+            return { ...parsed, error: `unrecognized argument: ${arg}` };
+        }
+    }
+    return parsed;
+}
+const HELP = "usage: deft ownership:doctor [--project-root PATH] [--owner uid:gid] [--json]\n" +
+    "Diagnose WSL agent-as-root vs filesystem project-owner mismatch (#1617).\n" +
+    `Classifier: ${OWNERSHIP_FACTS_CLASSIFIER}\n` +
+    "Vocabulary: filesystem project-owner (this command) ≠ occupancy/session owner ≠ issue-emit recovery owner.\n" +
+    "Recovery: deft ownership:fix -- --project-root . [--owner uid:gid]\n";
+export function run(argv) {
+    const args = parseArgs(argv);
+    if (args.error === "__help__") {
+        process.stdout.write(HELP);
+        return 0;
+    }
+    if (args.error !== undefined) {
+        process.stderr.write(`ownership:doctor: ${args.error}\n`);
+        return 2;
+    }
+    const projectRoot = resolve(args.projectRoot);
+    const verdict = evaluateWslOwnershipGuard({
+        projectRoot,
+        explicitOwner: args.owner,
+    });
+    if (args.json) {
+        process.stdout.write(`${JSON.stringify(ownershipGuardToDict(verdict), null, 2)}\n`);
+    }
+    else {
+        for (const line of verdict.messages) {
+            process.stdout.write(`${line}\n`);
+        }
+        if (verdict.intendedOwner.uid !== null) {
+            process.stdout.write(`filesystem project-owner: ${verdict.intendedOwner.uid}:${verdict.intendedOwner.gid}` +
+                `${verdict.intendedOwner.account ? ` (${verdict.intendedOwner.account})` : ""}` +
+                ` via ${verdict.intendedOwner.source}\n`);
+        }
+        process.stdout.write(`status=${verdict.status} wsl=${verdict.wsl} mount=${verdict.mount.capability} ` +
+            `block_protected_mutation=${verdict.blockProtectedMutation}\n`);
+    }
+    if (verdict.status === "fail")
+        return 1;
+    return 0;
+}
+if (isDirectEntrypoint(import.meta.url)) {
+    process.exit(run(process.argv.slice(2)));
+}
+//# sourceMappingURL=ownership-doctor.js.map

package/dist/ownership-fix.d.ts

@@ -0,0 +1,10 @@
+#!/usr/bin/env node
+export interface OwnershipFixArgs {
+    projectRoot: string;
+    owner: string | null;
+    json: boolean;
+    error?: string;
+}
+export declare function parseArgs(argv: readonly string[]): OwnershipFixArgs;
+export declare function run(argv: readonly string[]): number;
+//# sourceMappingURL=ownership-fix.d.ts.map

package/dist/ownership-fix.js

@@ -0,0 +1,93 @@
+#!/usr/bin/env node
+/**
+ * ownership:fix / ownership-fix (#1617)
+ * Scoped repair of root-owned objects under approved roots only.
+ * Reachable under mismatch; env-sourced owner alone does not authorize chown.
+ */
+import { resolve } from "node:path";
+import { DEFT_PROJECT_OWNER, fixScopedOwnership, OWNERSHIP_FACTS_CLASSIFIER, } from "@deftai/directive-core/platform";
+import { isDirectEntrypoint } from "./entrypoint.js";
+export function parseArgs(argv) {
+    const parsed = {
+        projectRoot: ".",
+        owner: null,
+        json: false,
+    };
+    for (let i = 0; i < argv.length; i += 1) {
+        const arg = argv[i];
+        if (arg === "--") {
+        }
+        else if (arg === "--json") {
+            parsed.json = true;
+        }
+        else if (arg === "--project-root") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...parsed, error: "argument --project-root: expected one argument" };
+            }
+            parsed.projectRoot = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--project-root=")) {
+            parsed.projectRoot = arg.slice("--project-root=".length);
+        }
+        else if (arg === "--owner") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...parsed, error: "argument --owner: expected uid:gid" };
+            }
+            parsed.owner = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--owner=")) {
+            parsed.owner = arg.slice("--owner=".length);
+        }
+        else if (arg === "--help" || arg === "-h") {
+            return { ...parsed, error: "__help__" };
+        }
+        else {
+            return { ...parsed, error: `unrecognized argument: ${arg}` };
+        }
+    }
+    return parsed;
+}
+const HELP = "usage: deft ownership:fix [--project-root PATH] [--owner uid:gid] [--json]\n" +
+    "Repair root-owned objects under approved project roots only (#1617).\n" +
+    "No blanket HOME chown. No symlink follow outside approved roots.\n" +
+    `Pass --owner uid:gid or ${DEFT_PROJECT_OWNER}=uid:gid when inference is ambiguous.\n` +
+    `Classifier: ${OWNERSHIP_FACTS_CLASSIFIER}\n`;
+export function run(argv) {
+    const args = parseArgs(argv);
+    if (args.error === "__help__") {
+        process.stdout.write(HELP);
+        return 0;
+    }
+    if (args.error !== undefined) {
+        process.stderr.write(`ownership:fix: ${args.error}\n`);
+        return 2;
+    }
+    const projectRoot = resolve(args.projectRoot);
+    const result = fixScopedOwnership({
+        projectRoot,
+        explicitOwner: args.owner,
+    });
+    if (args.json) {
+        process.stdout.write(`${JSON.stringify({
+            repaired: result.repaired,
+            skipped_protected: result.skippedProtected,
+            failed: result.failed,
+            messages: result.messages,
+            ok: result.ok,
+        }, null, 2)}\n`);
+    }
+    else {
+        for (const line of result.messages) {
+            process.stdout.write(`${line}\n`);
+        }
+    }
+    return result.exitCode;
+}
+if (isDirectEntrypoint(import.meta.url)) {
+    process.exit(run(process.argv.slice(2)));
+}
+//# sourceMappingURL=ownership-fix.js.map

package/dist/vbrief-preflight.js

@@ -1,7 +1,9 @@
 #!/usr/bin/env node
+import { dirname, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { emitJson, evaluate, PREFLIGHT_USAGE_HINT } from "@deftai/directive-core/preflight";
 import { scanWorkClaimForBriefPath } from "@deftai/directive-core/scm";
+import { refuseIfWslOwnershipBlocked } from "./wsl-ownership-guard.js";
 const HELP_TEXT = `usage: xbrief:preflight [--vbrief-path PATH | PATH] [--json] [--help]
 
 Implementation-intent gate (#810): exits 0 only when the xBRIEF is in
@@ -100,6 +102,10 @@ export function run(argv, scan = scanWorkClaimForBriefPath) {
         return 2;
     }
     const vbriefPath = args.vbriefPath;
+    // #1617: gate the brief's tree, not process.cwd() (cross-directory callers).
+    const blocked = refuseIfWslOwnershipBlocked(dirname(resolve(vbriefPath)));
+    if (blocked !== null)
+        return blocked;
     const result = evaluate(vbriefPath);
     let scanLines = [];
     try {

package/dist/verify-ac.js

@@ -12,7 +12,7 @@ import { join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { resolveSessionCompletedVerifyAcTarget } from "@deftai/directive-core/check";
 import { formatRejectedLedger, resolveLiteralAcceptanceDetailed, } from "@deftai/directive-core/literal-acceptance";
-import { emitVerifyAcTerminalOutcome, evaluateVerifyAcFromPath, readAdmittedSourceDigest, readAdmittedSourceSentences, readPlanAcceptance, resolveAcceptanceGateProfile, } from "@deftai/directive-core/product-first-done-gate";
+import { emitVerifyAcTerminalOutcome, evaluateVerifyAcFromPath, readAdmittedSourceDigest, readAdmittedSourceSentences, readPlanAcceptance, resolveAcceptanceGateProfile, resolveSoftMissingAcTargets, } from "@deftai/directive-core/product-first-done-gate";
 /** Parse verify:ac CLI args. */
 export function parseArgs(argv) {
     const parsed = {
@@ -277,18 +277,44 @@ export function run(argv) {
             paths = [found.path];
         }
         else if (found.kind === "many") {
-            // Greptile #3284: multi-active must verify EVERY active scope, not skip.
-            if (args.softMissingXbrief || args.captureOnly) {
+            // #4285: soft-missing selects via DEFT_ACTIVE_SCOPE / explicit path
+            // (or fail closed). ALL-paths soft-missing is not the #3284 product bar.
+            // --capture-only still lists every active artifact (inventory, not run).
+            if (args.captureOnly) {
                 paths = [...found.paths];
                 if (!args.quiet) {
-                    process.stdout.write(`verify:ac multi-active (#3284): evaluating ${paths.length} scopes in ${found.dir}\n`);
+                    process.stdout.write(`verify:ac capture-only multi-active: listing ${paths.length} scopes in ${found.dir}\n`);
+                }
+            }
+            else if (args.softMissingXbrief) {
+                const selected = resolveSoftMissingAcTargets(projectRoot, {
+                    env: process.env,
+                    scannedPaths: found.paths,
+                });
+                if (selected.kind === "one") {
+                    paths = [selected.path];
+                    if (!args.quiet) {
+                        process.stdout.write(`verify:ac soft-missing multi-active (#4285): selected ${selected.path}\n`);
+                    }
+                }
+                else {
+                    process.stderr.write(`${selected.kind === "need-pin" ? selected.message : "verify_ac: multi-active soft-missing needs a pin"}\n` +
+                        "  Usage: task verify:ac -- <path-to-active.xbrief.json>\n" +
+                        `  Or set DEFT_ACTIVE_SCOPE to the dispatched story under ${found.dir}\n` +
+                        "  Refs #4285 / #3284 product-first done-gate\n");
+                    emitVerifyAcTerminalOutcome({
+                        projectRoot,
+                        env: process.env,
+                        outcome: "config-error",
+                    });
+                    return 1;
                 }
             }
             else {
                 process.stderr.write(`verify_ac: ${found.paths.length} active scopes in ${found.dir}.\n` +
-                    "  Pass an explicit path, or use check composition (--soft-missing-xbrief) to evaluate all.\n" +
+                    "  Pass an explicit path, or set DEFT_ACTIVE_SCOPE with check composition (--soft-missing-xbrief).\n" +
                     "  Usage: task verify:ac -- <path-to-active.xbrief.json>\n" +
-                    "  Refs #3284 product-first done-gate\n");
+                    "  Refs #4285 / #3284 product-first done-gate\n");
                 emitVerifyAcTerminalOutcome({
                     projectRoot,
                     env: process.env,

package/dist/verify-consumer-header-placeholder.d.ts

@@ -0,0 +1,12 @@
+#!/usr/bin/env node
+interface ParsedArgs {
+    projectRoot: string;
+    quiet: boolean;
+    error?: string;
+}
+/** Parse verify-consumer-header-placeholder CLI args. */
+export declare function parseArgs(argv: string[]): ParsedArgs;
+/** Run the gate and return the process exit code. */
+export declare function run(argv: string[]): number;
+export {};
+//# sourceMappingURL=verify-consumer-header-placeholder.d.ts.map

package/dist/verify-consumer-header-placeholder.js

@@ -0,0 +1,73 @@
+#!/usr/bin/env node
+/**
+ * CLI for verify:consumer-header-placeholder (#4544 Prefer-A).
+ *
+ * Fail closed when product-mutation completion still leaves the unmanaged
+ * AGENTS.md header on the exact scaffold edit-me placeholder. Process-only
+ * and custom headers pass. Returned failure only.
+ */
+import { resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { evaluateConsumerHeaderPlaceholderAtRoot } from "@deftai/directive-core/check";
+function takeProjectRootValue(argv, index) {
+    const next = argv[index + 1];
+    if (next === undefined || next.length === 0 || next.startsWith("-")) {
+        return { error: "argument --project-root: expected one argument", next: index };
+    }
+    return { value: next, next: index + 1 };
+}
+/** Parse verify-consumer-header-placeholder CLI args. */
+export function parseArgs(argv) {
+    const parsed = {
+        projectRoot: ".",
+        quiet: false,
+    };
+    for (let i = 0; i < argv.length; i += 1) {
+        const arg = argv[i];
+        if (arg === "--quiet") {
+            parsed.quiet = true;
+        }
+        else if (arg === "--project-root") {
+            const taken = takeProjectRootValue(argv, i);
+            if (taken.error !== undefined) {
+                return { ...parsed, error: taken.error };
+            }
+            parsed.projectRoot = taken.value ?? parsed.projectRoot;
+            i = taken.next;
+        }
+        else if (arg?.startsWith("--project-root=")) {
+            const value = arg.slice("--project-root=".length);
+            if (value.length === 0 || value.startsWith("-")) {
+                return { ...parsed, error: "argument --project-root: expected one argument" };
+            }
+            parsed.projectRoot = value;
+        }
+        else {
+            return { ...parsed, error: `unrecognized argument: ${arg}` };
+        }
+    }
+    return parsed;
+}
+/** Run the gate and return the process exit code. */
+export function run(argv) {
+    const args = parseArgs(argv);
+    if (args.error !== undefined) {
+        process.stderr.write(`verify_consumer_header_placeholder: ${args.error}\n`);
+        return 2;
+    }
+    const projectRoot = resolve(args.projectRoot);
+    const result = evaluateConsumerHeaderPlaceholderAtRoot(projectRoot);
+    if (result.message.length > 0 && !args.quiet) {
+        if (result.ok) {
+            process.stdout.write(`${result.message}\n`);
+        }
+        else {
+            process.stderr.write(`${result.message}\n`);
+        }
+    }
+    return result.ok ? 0 : 1;
+}
+if (process.argv[1] !== undefined && fileURLToPath(import.meta.url) === process.argv[1]) {
+    process.exit(run(process.argv.slice(2)));
+}
+//# sourceMappingURL=verify-consumer-header-placeholder.js.map

package/dist/verify-ownership.d.ts

@@ -0,0 +1,10 @@
+#!/usr/bin/env node
+export interface VerifyOwnershipArgs {
+    projectRoot: string;
+    json: boolean;
+    owner: string | null;
+    error?: string;
+}
+export declare function parseArgs(argv: readonly string[]): VerifyOwnershipArgs;
+export declare function run(argv: readonly string[]): number;
+//# sourceMappingURL=verify-ownership.d.ts.map

package/dist/verify-ownership.js

@@ -0,0 +1,90 @@
+#!/usr/bin/env node
+/**
+ * verify:ownership / verify-ownership (#1617)
+ * Fail-closed check for WSL root-runtime ownership mismatch.
+ */
+import { resolve } from "node:path";
+import { assertProtectedMutationOwnership, evaluateWslOwnershipGuard, ownershipGuardToDict, } from "@deftai/directive-core/platform";
+import { isDirectEntrypoint } from "./entrypoint.js";
+export function parseArgs(argv) {
+    const parsed = {
+        projectRoot: ".",
+        json: false,
+        owner: null,
+    };
+    for (let i = 0; i < argv.length; i += 1) {
+        const arg = argv[i];
+        if (arg === "--") {
+        }
+        else if (arg === "--json") {
+            parsed.json = true;
+        }
+        else if (arg === "--project-root") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...parsed, error: "argument --project-root: expected one argument" };
+            }
+            parsed.projectRoot = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--project-root=")) {
+            parsed.projectRoot = arg.slice("--project-root=".length);
+        }
+        else if (arg === "--owner") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...parsed, error: "argument --owner: expected uid:gid" };
+            }
+            parsed.owner = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--owner=")) {
+            parsed.owner = arg.slice("--owner=".length);
+        }
+        else if (arg === "--help" || arg === "-h") {
+            return { ...parsed, error: "__help__" };
+        }
+        else {
+            return { ...parsed, error: `unrecognized argument: ${arg}` };
+        }
+    }
+    return parsed;
+}
+const HELP = "usage: deft verify:ownership [--project-root PATH] [--owner uid:gid] [--json]\n" +
+    "Fail closed when WSL root runtime can create root-owned project files (#1617).\n" +
+    "Native Windows/macOS always pass. Mount-pinned DrvFs/9p without metadata passes.\n";
+export function run(argv) {
+    const args = parseArgs(argv);
+    if (args.error === "__help__") {
+        process.stdout.write(HELP);
+        return 0;
+    }
+    if (args.error !== undefined) {
+        process.stderr.write(`verify:ownership: ${args.error}\n`);
+        return 2;
+    }
+    const projectRoot = resolve(args.projectRoot);
+    const seams = { projectRoot, explicitOwner: args.owner };
+    const gate = assertProtectedMutationOwnership(seams);
+    if (args.json) {
+        process.stdout.write(`${JSON.stringify(ownershipGuardToDict(gate.verdict), null, 2)}\n`);
+    }
+    else {
+        process.stdout.write(`${gate.message}\n`);
+    }
+    if (!gate.ok)
+        return gate.exitCode;
+    // Also surface soft warn / override without failing when not blocked.
+    const soft = evaluateWslOwnershipGuard(seams);
+    if (soft.status === "warn" || soft.status === "exempt-override") {
+        if (!args.json) {
+            for (const line of soft.sessionWarnLines)
+                process.stderr.write(`${line}\n`);
+        }
+    }
+    return 0;
+}
+if (isDirectEntrypoint(import.meta.url)) {
+    process.exit(run(process.argv.slice(2)));
+}
+//# sourceMappingURL=verify-ownership.js.map

package/dist/verify-persisted-planning-narratives.d.ts

@@ -0,0 +1,12 @@
+#!/usr/bin/env node
+interface ParsedArgs {
+    projectRoot: string;
+    checkConjunct: boolean;
+    error?: string;
+}
+/** Parse verify:persisted-planning-narratives CLI args (#5176). */
+export declare function parseArgs(argv: string[]): ParsedArgs;
+/** Run the Prefer-A first-ship planning-narrative bar. */
+export declare function run(argv: string[]): number;
+export {};
+//# sourceMappingURL=verify-persisted-planning-narratives.d.ts.map

package/dist/verify-persisted-planning-narratives.js

@@ -0,0 +1,82 @@
+#!/usr/bin/env node
+/**
+ * CLI for verify:persisted-planning-narratives (#5176 Prefer-A).
+ *
+ * Default mode is the unconditional setup Phase 2 bar. `--check-conjunct`
+ * mirrors the in-process deft check Prefer-A gate (marker present/unreadable +
+ * empty Overview/tech stack → refuse; missing PD / no marker → pass) so
+ * Taskfile aggregates like check:merge / check:consumer cannot bypass it.
+ */
+import { resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { checkRejectsEmptyPlanningNarratives, evaluateCheckPersistedPlanningNarratives, } from "@deftai/directive-core/check";
+import { evaluatePersistedPlanningNarratives } from "@deftai/directive-core/project";
+/** Parse verify:persisted-planning-narratives CLI args (#5176). */
+export function parseArgs(argv) {
+    const parsed = { projectRoot: ".", checkConjunct: false };
+    for (let i = 0; i < argv.length; i += 1) {
+        const arg = argv[i];
+        if (arg === "--project-root") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...parsed, error: "argument --project-root: expected one argument" };
+            }
+            parsed.projectRoot = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--project-root=")) {
+            parsed.projectRoot = arg.slice("--project-root=".length);
+        }
+        else if (arg === "--check-conjunct") {
+            parsed.checkConjunct = true;
+        }
+        else if (arg === "--help" || arg === "-h") {
+            process.stdout.write("usage: verify:persisted-planning-narratives [--project-root PATH] [--check-conjunct]\n\n" +
+                "Fail closed when every tracked PROJECT-DEFINITION planning narrative\n" +
+                "(Overview + tech stack) is empty/whitespace (#5176 Prefer-A).\n" +
+                "Default: unconditional setup Phase 2 bar (missing PD → exit 2).\n" +
+                "--check-conjunct: Taskfile/check Prefer-A mirror (marker + empty →\n" +
+                "refuse; missing PD / no marker → pass). Reuse deft project:write-narratives.\n");
+            return parsed;
+        }
+        else {
+            return { ...parsed, error: `unrecognized argument: ${arg}` };
+        }
+    }
+    return parsed;
+}
+/** Run the Prefer-A first-ship planning-narrative bar. */
+export function run(argv) {
+    const args = parseArgs(argv);
+    if (args.error !== undefined) {
+        process.stderr.write(`verify:persisted-planning-narratives: ${args.error}\n`);
+        return 2;
+    }
+    const projectRoot = resolve(args.projectRoot);
+    if (args.checkConjunct) {
+        const planning = evaluateCheckPersistedPlanningNarratives(projectRoot);
+        if (checkRejectsEmptyPlanningNarratives(planning.narratives, planning.productMutation)) {
+            process.stderr.write(`${planning.narratives.message}\n`);
+            return 1;
+        }
+        if (planning.narratives.ok) {
+            process.stdout.write(`${planning.narratives.message}\n`);
+        }
+        else {
+            process.stdout.write("verify:persisted-planning-narratives --check-conjunct: pass " +
+                `(${planning.narratives.cause}; Prefer-A check conjunct does not refuse)\n`);
+        }
+        return 0;
+    }
+    const result = evaluatePersistedPlanningNarratives(projectRoot);
+    if (result.ok) {
+        process.stdout.write(`${result.message}\n`);
+        return 0;
+    }
+    process.stderr.write(`${result.message}\n`);
+    return result.code;
+}
+if (process.argv[1] !== undefined && fileURLToPath(import.meta.url) === process.argv[1]) {
+    process.exit(run(process.argv.slice(2)));
+}
+//# sourceMappingURL=verify-persisted-planning-narratives.js.map

package/dist/verify-review-monitor.js

@@ -2,7 +2,7 @@
 import { resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { bindLivePhaseCorrectWait, evaluateMergePathArm, } from "@deftai/directive-core/dist/pr-watch/main.js";
-import { EXIT_CONFIG_ERROR, EXIT_NOT_READY, evaluateReviewMonitorGate, isTier1, REVIEW_MONITOR_HELP, verifyResultToJson, } from "@deftai/directive-core/review-monitor";
+import { EXIT_CONFIG_ERROR, EXIT_NOT_READY, evaluateReviewMonitorGate, formatApproach1BabysitterOneLiner, isTier1, REVIEW_MONITOR_HELP, spawnRedirect, verifyResultToJson, } from "@deftai/directive-core/review-monitor";
 const CALL_SITES = new Set([
     "solo",
     "swarm-phase5-6",
@@ -134,15 +134,20 @@ export function run(argv) {
     const args = parseVerifyReviewMonitorArgs(argv);
     if (args.help) {
         process.stdout.write(REVIEW_MONITOR_HELP);
-        process.stdout.write("\n#4882 / #5020 merge-path arm observer (optional):\n" +
+        process.stdout.write("\n#4882 / #5020 / #5219 merge-path arm observer (optional):\n" +
             "  --merge-path-arm       Fail closed when neither live wait nor explicit finish\n" +
             "  --live-wait            Require still-running wait evidence for this PR\n" +
             "                         (Tier 1: lease + active polling heartbeat with pid liveness;\n" +
-            "                         lease+flag alone is not armed — #5020)\n" +
+            "                         lease+flag alone is not armed — #5020).\n" +
+            "                         On spawn_subagent hosts, lease platform_primitive must be\n" +
+            "                         spawn_subagent and heartbeat parent_id must match the lease\n" +
+            "                         monitor_agent_id, or pr-wait-mergeable only after local\n" +
+            "                         pr:watch CLEAN attestation — #5219;\n" +
+            "                         parent-shell pr:watch (parent_id=pr-watch) does not arm.\n" +
             "  --explicit-finish      Attest option-C BLOCKED/FAILED finish for this PR\n" +
             "  --sticky-lease         Attest a fresh sticky lease (not sufficient alone)\n" +
-            "  Prefer Approach 1 / native pr:watch or post-CLEAN pr:wait-mergeable-and-merge;\n" +
-            "  homemade line-parsed --json is not an arm.\n");
+            "  Prefer Approach 1 / native pr:watch --monitor-agent-id <id> or post-CLEAN\n" +
+            "  pr:wait-mergeable-and-merge; homemade line-parsed --json is not an arm.\n");
         return 0;
     }
     if (args.error !== undefined) {
@@ -170,6 +175,7 @@ export function run(argv) {
     let arm = null;
     if (args.mergePathArm) {
         // Bind --live-wait to lease (#5018) + process-liveness heartbeat (#5020) on Tier 1.
+        // spawn_subagent identity join is already applied in evaluateReviewMonitorGate (#5219).
         const leaseEvidence = result.monitorRecord !== null;
         const liveBind = bindLivePhaseCorrectWait({
             liveWaitFlag: args.liveWait,
@@ -183,15 +189,38 @@ export function run(argv) {
             explicitFinish: args.explicitFinish,
             stickyLeaseActive: args.stickyLease || leaseEvidence,
         });
-        if (args.liveWait &&
-            !liveBind.livePhaseCorrectWait &&
-            !args.explicitFinish &&
-            !arm.armed &&
-            liveBind.message !== null) {
+        if (args.liveWait && !liveBind.livePhaseCorrectWait && !args.explicitFinish && !arm.armed) {
+            const spawnHost = result.tier.primitive === "spawn_subagent";
+            const lease = result.monitorRecord;
+            let message = liveBind.message;
+            if (spawnHost && lease !== null && lease.platform_primitive !== "spawn_subagent") {
+                message =
+                    `unarmed stand-down: Tier-1 spawn_subagent requires lease ` +
+                        `platform_primitive=spawn_subagent for PR #${args.pr} (#5219); ` +
+                        `got ${lease.platform_primitive}.\n` +
+                        `  ${spawnRedirect(result.tier)}`;
+            }
+            else if (spawnHost &&
+                lease !== null &&
+                lease.platform_primitive === "spawn_subagent" &&
+                liveBind.reason === "missing_process_liveness") {
+                message =
+                    `unarmed stand-down: --live-wait for PR #${args.pr} has spawn_subagent lease ` +
+                        `(monitor_agent_id=${lease.monitor_agent_id}) but no child-bound wait identity ` +
+                        `(heartbeat parent_id must match monitor_agent_id, or pr-wait-mergeable after ` +
+                        `pr:watch CLEAN attestation; start child pr:watch before verify; ` +
+                        `parent-shell pr:watch does not arm) (#5219).\n` +
+                        `  Cheaper path:\n` +
+                        `  ${formatApproach1BabysitterOneLiner(args.pr, lease.monitor_agent_id)}\n` +
+                        `  ${spawnRedirect(result.tier)}`;
+            }
+            else if (message === null) {
+                message = arm.message;
+            }
             arm = {
                 armed: false,
                 reason: "unarmed_stand_down",
-                message: liveBind.message,
+                message,
             };
         }
     }

package/dist/wsl-ownership-guard.d.ts

@@ -0,0 +1,2 @@
+export declare function refuseIfWslOwnershipBlocked(projectRoot: string, writeErr?: (text: string) => void): number | null;
+//# sourceMappingURL=wsl-ownership-guard.d.ts.map

package/dist/wsl-ownership-guard.js

@@ -0,0 +1,15 @@
+/**
+ * Shared live WSL ownership gate for protected mutating CLI entry points (#1617).
+ * Independent of ritual/doctor cache. ownership:doctor/fix are not gated here.
+ */
+import { assertProtectedMutationOwnership } from "@deftai/directive-core/platform";
+export function refuseIfWslOwnershipBlocked(projectRoot, writeErr = (text) => {
+    process.stderr.write(text);
+}) {
+    const gate = assertProtectedMutationOwnership({ projectRoot });
+    if (gate.ok)
+        return null;
+    writeErr(`${gate.message}\n`);
+    return gate.exitCode;
+}
+//# sourceMappingURL=wsl-ownership-guard.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deftai/directive",
-  "version": "0.119.11",
+  "version": "0.119.13",
   "description": "Directive CLI — npm install path for the Deft Directive framework.",
   "license": "MIT",
   "homepage": "https://deftai.github.io/directive/",
@@ -35,8 +35,8 @@
     "provenance": true
   },
   "dependencies": {
-    "@deftai/directive-core": "^0.119.11",
-    "@deftai/directive-content": "^0.119.11"
+    "@deftai/directive-core": "^0.119.13",
+    "@deftai/directive-content": "^0.119.13"
   },
   "scripts": {
     "build": "tsc -b",