@deftai/directive 0.120.0 → 0.121.0

package/dist/dispatch.d.ts

@@ -10,9 +10,9 @@ export interface DispatchIo {
     writeErr: (text: string) => void;
 }
 /** CLI modules in packages/cli/src (excluding parity harnesses and bin/index). */
-export declare const CLI_MODULE_VERBS: readonly ["agents-refresh", "cache", "check", "capacity-backfill", "capacity-show", "codebase-default-extractor", "codebase-map", "codebase-map-fresh", "codebase-projection-registry", "codebase-provider", "doctor", "ownership-doctor", "ownership-fix", "verify-ownership", "install-upgrade", "install-uninstall", "migrate-preflight", "migrate-xbrief", "migrate-category-b", "framework-check-updates", "hook-dispatch", "umbrella-current-shape", "changelog-check", "change-init", "commit-lint", "coverage-hotspots", "policy", "authz", "escalation-cli", "pr-closing-keywords", "pr-merge-readiness", "pr-monitor", "pr-protected-issues", "pr-wait-mergeable", "pr-watch", "pr-finish-loop", "directive-finish-loop", "pre-pr-run", "preflight-cache", "preflight-gh", "probe-session", "release", "release-e2e", "release-publish", "release-rollback", "release-wait-npm", "scope-lifecycle", "scope-record-approved-scope", "scope-record-observable-scope", "scope-record-intent-constraint", "scm-sync-default", "lifecycle-event", "lifecycle-stats", "session-start", "session-ready", "occupancy-steal", "occupancy-release", "occupancy-heartbeat", "occupancy-grant", "plan-sequence", "slice", "subagent-monitor", "toolchain-check", "triage-actions", "triage-bootstrap", "triage-bulk", "triage-classify", "triage-strip-withdrawn", "triage-evaluate", "triage-help", "triage-queue", "triage-reconcile", "triage-refresh", "triage-scope", "triage-scope-drift", "triage-smoketest", "triage-subscribe", "triage-summary", "triage-welcome", "ts-check-lane", "vbrief-activate", "vbrief-build", "vbrief-preflight", "vbrief-reconcile", "vbrief-validate", "vbrief-validation", "xbrief-create", "xbrief-verify", "xbrief-adopt-stored-plan-id", "verify-branch", "verify-encoding", "verify-forward-coverage", "verify-test-boundary", "verify-class-checks", "verify-presentation-coverage", "verify-scope-provenance", "verify-consumer-check-contract", "verify-hooks-installed", "verify-investigation", "verify-judgment-gates", "verify-no-task-runtime", "validate-links", "validate-strategy-output", "verify-biome-config", "verify-bridge-drift", "verify-capacity", "verify-contained-writes", "verify-telemetry-coverage", "verify-content-manifest", "verify-deposit-closure", "verify-consumer-hard-stops", "verify-closing-keywords", "verify-skill-external-fetch-gate", "verify-semantic-single-source", "verify-contract-drift", "verify-cursor-tier1", "verify-openclaw-tier1", "verify-go-freeze", "verify-scm-boundary", "verify-session-ritual", "verify-plan-sequence", "verify-stubs", "verify-xbrief-drift", "verify-spec-prd-fresh", "rule-ownership-lint", "verify-story-ready", "verify-review-monitor", "verify-l4-owner", "verify-subagent-alive", "verify-subagent-steer", "review-monitor-register", "review-monitor-release", "verify-tools", "verify-wip-cap", "verify-orphan-active", "verify-pr-closeout-attestable", "verify-lifecycle-visible", "verify-completed-tracked", "verify-completed-write-guard", "verify-literal-ac", "verify-ac", "verify-agents-md-budget", "verify-consumer-header-placeholder", "verify-agents-md-advisory", "verify-persisted-planning-narratives", "verify-eval-health-relocation", "verify-eval-triggers-relocation", "verify-evaluator-surface", "verify-observable-scope", "verify-operator-scope-limit", "verify-presentation-ceiling", "verify-intent-constraint", "verify-durable-effect-acquisition", "verify-consumer-test-lane", "eval-health", "eval-run", "eval-report", "eval-triggers"];
+export declare const CLI_MODULE_VERBS: readonly ["agents-refresh", "cache", "check", "capacity-backfill", "capacity-show", "codebase-default-extractor", "codebase-map", "codebase-map-fresh", "codebase-projection-registry", "codebase-provider", "doctor", "ownership-doctor", "ownership-fix", "verify-ownership", "install-upgrade", "install-uninstall", "migrate-preflight", "migrate-xbrief", "migrate-category-b", "framework-check-updates", "hook-dispatch", "umbrella-current-shape", "changelog-check", "change-init", "commit-lint", "coverage-hotspots", "policy", "authz", "escalation-cli", "pr-closing-keywords", "pr-merge-readiness", "pr-monitor", "pr-protected-issues", "pr-wait-mergeable", "pr-watch", "pr-finish-loop", "directive-finish-loop", "pre-pr-run", "preflight-cache", "preflight-gh", "probe-session", "release", "release-e2e", "release-publish", "release-rollback", "release-wait-npm", "scope-lifecycle", "scope-record-approved-scope", "scope-record-observable-scope", "scope-record-intent-constraint", "scm-sync-default", "lifecycle-event", "lifecycle-stats", "session-start", "session-ready", "occupancy-steal", "occupancy-release", "occupancy-heartbeat", "occupancy-grant", "plan-sequence", "slice", "subagent-monitor", "toolchain-check", "triage-actions", "triage-bootstrap", "triage-bulk", "triage-classify", "triage-strip-withdrawn", "triage-evaluate", "triage-help", "triage-queue", "triage-reconcile", "triage-refresh", "triage-scope", "triage-scope-drift", "triage-smoketest", "triage-subscribe", "triage-summary", "triage-welcome", "ts-check-lane", "vbrief-activate", "vbrief-build", "vbrief-preflight", "vbrief-reconcile", "vbrief-validate", "vbrief-validation", "xbrief-create", "xbrief-verify", "xbrief-adopt-stored-plan-id", "verify-branch", "verify-encoding", "verify-forward-coverage", "verify-test-boundary", "verify-class-checks", "verify-presentation-coverage", "verify-scope-provenance", "verify-consumer-check-contract", "verify-hooks-installed", "verify-investigation", "verify-judgment-gates", "verify-no-task-runtime", "validate-links", "validate-strategy-output", "verify-biome-config", "verify-bridge-drift", "verify-capacity", "verify-contained-writes", "verify-telemetry-coverage", "verify-content-manifest", "verify-deposit-closure", "verify-consumer-hard-stops", "verify-closing-keywords", "verify-skill-external-fetch-gate", "verify-semantic-single-source", "verify-contract-drift", "verify-cursor-tier1", "verify-openclaw-tier1", "verify-go-freeze", "verify-scm-boundary", "verify-session-ritual", "verify-plan-sequence", "verify-stubs", "verify-xbrief-drift", "verify-spec-prd-fresh", "verify-spec-drift", "rule-ownership-lint", "verify-story-ready", "verify-review-monitor", "verify-cohort-review-monitors", "verify-l4-owner", "verify-subagent-alive", "verify-subagent-steer", "subagent-pre-cancel", "subagent-steer-write", "review-monitor-register", "review-monitor-release", "verify-tools", "verify-wip-cap", "verify-orphan-active", "verify-pr-closeout-attestable", "verify-lifecycle-visible", "verify-completed-tracked", "verify-completed-write-guard", "verify-literal-ac", "verify-ac", "verify-agents-md-budget", "verify-consumer-header-placeholder", "verify-agents-md-advisory", "verify-persisted-planning-narratives", "verify-eval-health-relocation", "verify-eval-triggers-relocation", "verify-evaluator-surface", "verify-observable-scope", "verify-operator-scope-limit", "verify-presentation-ceiling", "verify-intent-constraint", "verify-durable-effect-acquisition", "verify-consumer-test-lane", "eval-health", "eval-run", "eval-report", "eval-triggers"];
 /** Core-only CLI entrypoints without a packages/cli wrapper. */
-export declare const CORE_MODULE_VERBS: readonly ["scm", "scm-readiness", "github-auth-modes", "github-body", "issue-emit", "issue-ingest", "issue-sync-from-xbrief", "reconcile-issues", "swarm-launch", "swarm-complete-cohort", "swarm-finalize-cohort", "swarm-finalize-owed", "swarm-pre-dispatch", "swarm-readiness", "swarm-routing-verify", "swarm-routing-set", "swarm-verify-review-clean", "swarm-worktrees", "framework-commands", "pack-render", "packs-slice", "prd-render", "export-spec", "project-render", "project-write-narratives", "roadmap-render", "rule-map", "spec-render", "spec-validate", "code-structure-validate", "pack-migrate-skills", "pack-migrate-rules", "pack-migrate-strategies", "pack-migrate-patterns", "pack-migrate-swarm-spec", "policy-set", "setup-ghx", "scope-undo", "scope-demote", "scope-decompose", "changelog-resolve-unreleased", "architecture-preflight-sor", "feedback-file", "value-readback", "product-signal", "freshness-report", "decision-write", "decision-list", "docs-impact", "migrate-clause-ids"];
+export declare const CORE_MODULE_VERBS: readonly ["scm", "scm-readiness", "github-auth-modes", "github-body", "issue-emit", "issue-ingest", "issue-sync-from-xbrief", "reconcile-issues", "swarm-launch", "swarm-complete-cohort", "swarm-finalize-cohort", "swarm-finalize-owed", "swarm-pre-dispatch", "swarm-readiness", "swarm-routing-verify", "swarm-routing-set", "swarm-verify-review-clean", "swarm-worktrees", "framework-commands", "pack-render", "packs-slice", "prd-render", "export-spec", "project-render", "project-write-narratives", "roadmap-render", "rule-map", "spec-render", "spec-reconstruct", "spec-validate", "code-structure-validate", "pack-migrate-skills", "pack-migrate-rules", "pack-migrate-strategies", "pack-migrate-patterns", "pack-migrate-swarm-spec", "policy-set", "setup-ghx", "scope-undo", "scope-demote", "scope-decompose", "changelog-resolve-unreleased", "architecture-preflight-sor", "feedback-file", "value-readback", "product-signal", "freshness-report", "decision-write", "decision-list", "docs-impact", "migrate-clause-ids"];
 /** Colon aliases for triage-actions (mirrors cli-router SUBCOMMAND_ROUTES). */
 export declare const TRIAGE_ACTION_ALIAS_SUBCOMMANDS: Readonly<Record<string, string>>;
 /** Colon aliases for policy subcommands (mirrors cli-router SUBCOMMAND_ROUTES). */

package/dist/dispatch.js

@@ -151,12 +151,16 @@ export const CLI_MODULE_VERBS = [
     "verify-stubs",
     "verify-xbrief-drift",
     "verify-spec-prd-fresh",
+    "verify-spec-drift",
     "rule-ownership-lint",
     "verify-story-ready",
     "verify-review-monitor",
+    "verify-cohort-review-monitors",
     "verify-l4-owner",
     "verify-subagent-alive",
     "verify-subagent-steer",
+    "subagent-pre-cancel",
+    "subagent-steer-write",
     "review-monitor-register",
     "review-monitor-release",
     "verify-tools",
@@ -216,6 +220,7 @@ export const CORE_MODULE_VERBS = [
     "roadmap-render",
     "rule-map",
     "spec-render",
+    "spec-reconstruct",
     "spec-validate",
     "code-structure-validate",
     "pack-migrate-skills",
@@ -365,9 +370,12 @@ export const VERB_ALIASES = {
     "vbrief:activate": "vbrief-activate",
     "verify:story-ready": "verify-story-ready",
     "verify:review-monitor": "verify-review-monitor",
+    "verify:cohort-review-monitors": "verify-cohort-review-monitors",
     "verify:l4-owner": "verify-l4-owner",
     "verify:subagent-alive": "verify-subagent-alive",
     "verify:subagent-steer": "verify-subagent-steer",
+    "subagent:pre-cancel": "subagent-pre-cancel",
+    "subagent:steer": "subagent-steer-write",
     "agent:monitor": "subagent-monitor",
     "review-monitor:register": "review-monitor-register",
     "review-monitor:release": "review-monitor-release",
@@ -397,6 +405,7 @@ export const VERB_ALIASES = {
     "verify:scm-boundary": "verify-scm-boundary",
     "verify:xbrief-drift": "verify-xbrief-drift",
     "verify:spec-prd-fresh": "verify-spec-prd-fresh",
+    "verify:spec-drift": "verify-spec-drift",
     "verify:capacity": "verify-capacity",
     "verify:session-ritual": "verify-session-ritual",
     "verify:plan-sequence": "verify-plan-sequence",
@@ -439,6 +448,7 @@ export const VERB_ALIASES = {
     "ts:check-lane": "ts-check-lane",
     "spec:validate": "spec-validate",
     "spec:render": "spec-render",
+    "spec:reconstruct": "spec-reconstruct",
     "prd:render": "prd-render",
     "project:render": "project-render",
     "project:write-narratives": "project-write-narratives",
@@ -489,6 +499,7 @@ const SUBDIR_CLI_STEMS = {
     "verify-scm-boundary": "verify-source-cli/verify-scm-boundary",
     "verify-xbrief-drift": "verify-source-cli/verify-xbrief-drift",
     "verify-spec-prd-fresh": "verify-source-cli/verify-spec-prd-fresh",
+    "verify-spec-drift": "verify-source-cli/verify-spec-drift",
     "verify-go-freeze": "gates-cli/verify-go-freeze",
     "verify-bridge-drift": "gates-cli/verify-bridge-drift",
     "validate-links": "content-validate-cli/validate-links",
@@ -2529,6 +2540,10 @@ async function loadCoreModuleHandler(verb, io) {
             const { runSpecValidateCli } = await import("./render-cli/spec-validate-cli.js");
             return (argv) => runSpecValidateCli(argv);
         }
+        case "spec-reconstruct": {
+            const { runSpecReconstructCliEntry } = await import("./render-cli/spec-reconstruct-cli.js");
+            return (argv) => runSpecReconstructCliEntry(argv);
+        }
         case "spec-render": {
             const { runSpecRenderCli } = await import("./render-cli/spec-render-cli.js");
             return (argv) => runSpecRenderCli(argv);

package/dist/hook-dispatch.js

@@ -156,6 +156,10 @@ export function run(argv, seams = {}) {
     const rendered = renderHostDecision(args.host, decision);
     if (rendered.length > 0)
         writeOut(`${rendered}\n`);
+    // Force-kill allow must print the non-empty reason even when host allow wire is empty (#5281).
+    if (decision.code === "kill-force-ready" && decision.message.trim().length > 0) {
+        writeErr(`${decision.message}\n`);
+    }
     if ((decision.code === "invalid-input" || decision.code === "stdin-empty") &&
         args.host === "cursor") {
         // Keys are already embedded in decision.message; stderr helps operators tailing logs.

package/dist/render-cli/spec-reconstruct-cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export declare function runSpecReconstructCliEntry(argv: string[]): number;
+//# sourceMappingURL=spec-reconstruct-cli.d.ts.map

package/dist/render-cli/spec-reconstruct-cli.js

@@ -0,0 +1,15 @@
+#!/usr/bin/env node
+import { fileURLToPath } from "node:url";
+import { runSpecReconstructCli } from "@deftai/directive-core/spec-reconstruct";
+export function runSpecReconstructCliEntry(argv) {
+    const result = runSpecReconstructCli(argv);
+    if (result.stdout.length > 0)
+        process.stdout.write(result.stdout);
+    if (result.stderr.length > 0)
+        process.stderr.write(result.stderr);
+    return result.exitCode;
+}
+if (process.argv[1] !== undefined && fileURLToPath(import.meta.url) === process.argv[1]) {
+    process.exit(runSpecReconstructCliEntry(process.argv.slice(2)));
+}
+//# sourceMappingURL=spec-reconstruct-cli.js.map

package/dist/subagent-pre-cancel.d.ts

@@ -0,0 +1,21 @@
+#!/usr/bin/env node
+export declare const SUBAGENT_PRE_CANCEL_HELP = "subagent:pre-cancel \u2014 query-before-cancel gate (#5278)\n\nUsage:\n  task subagent:pre-cancel -- --agent <id> --canceller-id <id> [options]\n\nExit 0 only when one ordered branch clears:\n  (a) canceller-authored status steer (kind note|correction) + matching ack\n      OR observed first-seen window (default 3 minutes; PA-18 forward skew only)\n  (b) heartbeat STALE/missing under startup grace from --dispatch-started-at\n  (c) --force --reason <text>\n\nOptions:\n  --agent ID                 Target child agent_id (required)\n  --canceller-id ID          Canceller identity; must match steer writer_id for (a)\n  --target-id PATH           Worktree root (resolves steer/scratch/first-seen under it)\n  --steer-dir PATH           Steer inbox dir (default: <cwd|target>/.deft-scratch/subagent-steer)\n  --scratch-dir PATH         Heartbeat dir (default: <cwd|target>/.deft-scratch/subagent-status)\n  --first-seen-dir PATH      First-seen stamps (default: .../subagent-steer-firstseen)\n  --dispatch-started-at ISO  DeliveryAttemptRecord.startedAt for grace path (b)\n  --expected-worker-id ID    Refuse when agent does not match current attempt worker\n  --observed-window-seconds N  Default 180\n  --force                    Explicit force clear (requires --reason)\n  --reason TEXT              Printed force reason\n  --json                     Machine-readable verdict\n\nExit codes:\n  0  Pre-cancel green\n  1  Refused (gate red)\n  2  Config / usage error\n";
+export interface SubagentPreCancelArgs {
+    agentId: string | null;
+    cancellerId: string | null;
+    targetId: string | null;
+    steerDir: string | null;
+    scratchDir: string | null;
+    firstSeenDir: string | null;
+    dispatchStartedAt: string | null;
+    expectedWorkerId: string | null;
+    observedWindowSeconds: number | null;
+    force: boolean;
+    forceReason: string | null;
+    emitJson: boolean;
+    help: boolean;
+    error?: string;
+}
+export declare function parseSubagentPreCancelArgs(argv: readonly string[]): SubagentPreCancelArgs;
+export declare function run(argv: readonly string[], cwd?: string): number;
+//# sourceMappingURL=subagent-pre-cancel.d.ts.map

package/dist/subagent-pre-cancel.js

@@ -0,0 +1,240 @@
+#!/usr/bin/env node
+/**
+ * Fail-closed query-before-cancel gate (#5278 Prefer-A).
+ * Dest-capable args required for linked-worktree children (#4066).
+ */
+import { resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { defaultFirstSeenDir, defaultScratchDir, defaultSteerDir, EXIT_PRE_CANCEL_CONFIG, EXIT_PRE_CANCEL_OK, evaluatePreCancel, } from "@deftai/directive-core/orchestration";
+export const SUBAGENT_PRE_CANCEL_HELP = `subagent:pre-cancel — query-before-cancel gate (#5278)
+
+Usage:
+  task subagent:pre-cancel -- --agent <id> --canceller-id <id> [options]
+
+Exit 0 only when one ordered branch clears:
+  (a) canceller-authored status steer (kind note|correction) + matching ack
+      OR observed first-seen window (default 3 minutes; PA-18 forward skew only)
+  (b) heartbeat STALE/missing under startup grace from --dispatch-started-at
+  (c) --force --reason <text>
+
+Options:
+  --agent ID                 Target child agent_id (required)
+  --canceller-id ID          Canceller identity; must match steer writer_id for (a)
+  --target-id PATH           Worktree root (resolves steer/scratch/first-seen under it)
+  --steer-dir PATH           Steer inbox dir (default: <cwd|target>/.deft-scratch/subagent-steer)
+  --scratch-dir PATH         Heartbeat dir (default: <cwd|target>/.deft-scratch/subagent-status)
+  --first-seen-dir PATH      First-seen stamps (default: .../subagent-steer-firstseen)
+  --dispatch-started-at ISO  DeliveryAttemptRecord.startedAt for grace path (b)
+  --expected-worker-id ID    Refuse when agent does not match current attempt worker
+  --observed-window-seconds N  Default 180
+  --force                    Explicit force clear (requires --reason)
+  --reason TEXT              Printed force reason
+  --json                     Machine-readable verdict
+
+Exit codes:
+  0  Pre-cancel green
+  1  Refused (gate red)
+  2  Config / usage error
+`;
+export function parseSubagentPreCancelArgs(argv) {
+    const acc = {
+        agentId: null,
+        cancellerId: null,
+        targetId: null,
+        steerDir: null,
+        scratchDir: null,
+        firstSeenDir: null,
+        dispatchStartedAt: null,
+        expectedWorkerId: null,
+        observedWindowSeconds: null,
+        force: false,
+        forceReason: null,
+        emitJson: false,
+        help: false,
+    };
+    for (let i = 0; i < argv.length; i += 1) {
+        const arg = argv[i];
+        if (arg === "--help" || arg === "-h") {
+            return { ...acc, help: true };
+        }
+        if (arg === "--json") {
+            acc.emitJson = true;
+        }
+        else if (arg === "--force") {
+            acc.force = true;
+        }
+        else if (arg === "--agent" || arg === "--agent-id") {
+            const value = argv[i + 1];
+            if (value === undefined)
+                return { ...acc, error: `argument ${arg}: expected one argument` };
+            acc.agentId = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--agent=") || arg?.startsWith("--agent-id=")) {
+            acc.agentId = arg.slice(arg.indexOf("=") + 1);
+        }
+        else if (arg === "--canceller-id" || arg === "--canceller") {
+            const value = argv[i + 1];
+            if (value === undefined)
+                return { ...acc, error: `argument ${arg}: expected one argument` };
+            acc.cancellerId = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--canceller-id=") || arg?.startsWith("--canceller=")) {
+            acc.cancellerId = arg.slice(arg.indexOf("=") + 1);
+        }
+        else if (arg === "--target-id" || arg === "--target") {
+            const value = argv[i + 1];
+            if (value === undefined)
+                return { ...acc, error: `argument ${arg}: expected one argument` };
+            acc.targetId = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--target-id=") || arg?.startsWith("--target=")) {
+            acc.targetId = arg.slice(arg.indexOf("=") + 1);
+        }
+        else if (arg === "--steer-dir") {
+            const value = argv[i + 1];
+            if (value === undefined)
+                return { ...acc, error: "argument --steer-dir: expected one argument" };
+            acc.steerDir = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--steer-dir=")) {
+            acc.steerDir = arg.slice("--steer-dir=".length);
+        }
+        else if (arg === "--scratch-dir") {
+            const value = argv[i + 1];
+            if (value === undefined)
+                return { ...acc, error: "argument --scratch-dir: expected one argument" };
+            acc.scratchDir = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--scratch-dir=")) {
+            acc.scratchDir = arg.slice("--scratch-dir=".length);
+        }
+        else if (arg === "--first-seen-dir") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...acc, error: "argument --first-seen-dir: expected one argument" };
+            }
+            acc.firstSeenDir = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--first-seen-dir=")) {
+            acc.firstSeenDir = arg.slice("--first-seen-dir=".length);
+        }
+        else if (arg === "--dispatch-started-at") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...acc, error: "argument --dispatch-started-at: expected one argument" };
+            }
+            acc.dispatchStartedAt = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--dispatch-started-at=")) {
+            acc.dispatchStartedAt = arg.slice("--dispatch-started-at=".length);
+        }
+        else if (arg === "--expected-worker-id") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...acc, error: "argument --expected-worker-id: expected one argument" };
+            }
+            acc.expectedWorkerId = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--expected-worker-id=")) {
+            acc.expectedWorkerId = arg.slice("--expected-worker-id=".length);
+        }
+        else if (arg === "--observed-window-seconds") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...acc, error: "argument --observed-window-seconds: expected one argument" };
+            }
+            acc.observedWindowSeconds = Number(value);
+            i += 1;
+        }
+        else if (arg?.startsWith("--observed-window-seconds=")) {
+            acc.observedWindowSeconds = Number(arg.slice("--observed-window-seconds=".length));
+        }
+        else if (arg === "--reason") {
+            const value = argv[i + 1];
+            if (value === undefined)
+                return { ...acc, error: "argument --reason: expected one argument" };
+            acc.forceReason = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--reason=")) {
+            acc.forceReason = arg.slice("--reason=".length);
+        }
+        else if (arg?.startsWith("-")) {
+            return { ...acc, error: `unrecognized argument: ${arg}` };
+        }
+        else {
+            return { ...acc, error: `unrecognized argument: ${arg}` };
+        }
+    }
+    return acc;
+}
+export function run(argv, cwd = process.cwd()) {
+    const args = parseSubagentPreCancelArgs(argv);
+    if (args.help) {
+        process.stdout.write(SUBAGENT_PRE_CANCEL_HELP);
+        return EXIT_PRE_CANCEL_OK;
+    }
+    if (args.error !== undefined) {
+        process.stderr.write(`subagent:pre-cancel: ${args.error}\n`);
+        return EXIT_PRE_CANCEL_CONFIG;
+    }
+    const root = args.targetId !== null && args.targetId.trim().length > 0 ? resolve(cwd, args.targetId) : cwd;
+    const steerDir = resolve(root, args.steerDir ?? defaultSteerDir(root));
+    const scratchDir = resolve(root, args.scratchDir ?? defaultScratchDir(root));
+    const firstSeenDir = resolve(root, args.firstSeenDir ?? defaultFirstSeenDir(root));
+    // Linked-worktree children: refuse default-to-parent-cwd alone without dest args (#4066 / #5278).
+    // Partial dest (only --steer-dir or only --scratch-dir) mixes worktrees — require a pair or --target-id.
+    const hasTarget = args.targetId !== null && args.targetId.trim().length > 0;
+    const hasSteer = args.steerDir !== null;
+    const hasScratch = args.scratchDir !== null;
+    if (!hasTarget && hasSteer !== hasScratch) {
+        process.stderr.write("subagent:pre-cancel: --steer-dir and --scratch-dir must be paired when --target-id is omitted (partial dest mixes worktrees)\n");
+        return EXIT_PRE_CANCEL_CONFIG;
+    }
+    const hasDest = hasTarget || (hasSteer && hasScratch);
+    if (!hasDest) {
+        process.stderr.write("subagent:pre-cancel: dest-capable --target-id and/or paired --steer-dir/--scratch-dir required (default-to-cwd alone is refuse-closed for linked-worktree children)\n");
+        return EXIT_PRE_CANCEL_CONFIG;
+    }
+    if (args.observedWindowSeconds !== null &&
+        (!Number.isFinite(args.observedWindowSeconds) || args.observedWindowSeconds <= 0)) {
+        process.stderr.write("subagent:pre-cancel: --observed-window-seconds must be positive\n");
+        return EXIT_PRE_CANCEL_CONFIG;
+    }
+    const verdict = evaluatePreCancel({
+        agentId: args.agentId ?? "",
+        cancellerId: args.cancellerId ?? "",
+        steerDir,
+        firstSeenDir,
+        scratchDir,
+        force: args.force,
+        forceReason: args.forceReason ?? undefined,
+        dispatchStartedAt: args.dispatchStartedAt,
+        expectedWorkerId: args.expectedWorkerId,
+        observedWindowSeconds: args.observedWindowSeconds ?? undefined,
+    });
+    if (args.emitJson) {
+        process.stdout.write(`${JSON.stringify(verdict.json, null, 2)}\n`);
+    }
+    else if (verdict.message.length > 0) {
+        if (verdict.ok) {
+            process.stdout.write(`${verdict.message}\n`);
+        }
+        else {
+            process.stderr.write(`${verdict.message}\n`);
+        }
+    }
+    return verdict.exitCode;
+}
+if (process.argv[1] !== undefined && fileURLToPath(import.meta.url) === process.argv[1]) {
+    process.exit(run(process.argv.slice(2)));
+}
+//# sourceMappingURL=subagent-pre-cancel.js.map

package/dist/subagent-steer-write.d.ts

@@ -0,0 +1,41 @@
+#!/usr/bin/env node
+import { type SteerKind, type SteerWriterKind } from "@deftai/directive-core/orchestration";
+export declare const EXIT_STEER_WRITE_OK: number;
+export declare const EXIT_STEER_WRITE_CONFIG: number;
+export declare const SUBAGENT_STEER_WRITE_HELP = "subagent:steer \u2014 write a closed parent-steer inbox (#5278 / #4286)\n\nUsage:\n  task subagent:steer -- --agent <id> --writer-id <id> --kind <kind> --text <text> [options]\n\nOptions:\n  --agent ID              Child agent_id (inbox file stem)\n  --writer-id ID          Writer identity (must match independent parent/owner record)\n  --writer-kind KIND      occupancy-owner | dispatching-parent (default: dispatching-parent)\n  --kind KIND             constraint | correction | halt | note\n  --text TEXT             Steer body (\u22642000 chars)\n  --steer-id ID           Optional stable steer id (default: uuid)\n  --ttl-seconds N         Expiry TTL (default: 1800)\n  --target-id PATH        Worktree root for dest inbox\n  --steer-dir PATH        Inbox directory override\n  --scratch-dir PATH      Heartbeat dir (not used for writer authority)\n  --parent-id ID          Must match child occupancy lease parentId\n  --occupancy-owner-id ID Must match live occupancy session under --target-id\n  --json                  Emit written record\n\nExit codes:\n  0  Wrote inbox\n  2  Config / validation error\n";
+export interface SubagentSteerWriteArgs {
+    agentId: string | null;
+    writerId: string | null;
+    writerKind: SteerWriterKind;
+    kind: SteerKind | null;
+    text: string | null;
+    steerId: string | null;
+    ttlSeconds: number | null;
+    targetId: string | null;
+    steerDir: string | null;
+    scratchDir: string | null;
+    parentId: string | null;
+    occupancyOwnerId: string | null;
+    emitJson: boolean;
+    help: boolean;
+    error?: string;
+}
+/**
+ * Resolve parent/owner from dispatcher-recorded child occupancy + live occupancy.
+ * Heartbeat alone is never authority (caller-selected --scratch-dir cannot mint parent_id).
+ */
+export declare function resolveIndependentSteerAuthority(input: {
+    root: string;
+    agentId: string;
+    writerKind: SteerWriterKind;
+    writerId: string;
+    claimedParentId?: string | null;
+    claimedOccupancyOwnerId?: string | null;
+}): {
+    parentId?: string;
+    occupancyOwnerId?: string;
+    error?: string;
+};
+export declare function parseSubagentSteerWriteArgs(argv: readonly string[]): SubagentSteerWriteArgs;
+export declare function run(argv: readonly string[], cwd?: string): number;
+//# sourceMappingURL=subagent-steer-write.d.ts.map

package/dist/subagent-steer-write.js

@@ -0,0 +1,333 @@
+#!/usr/bin/env node
+/**
+ * Parent write surface for deft.subagent.steer.v1 (#5278 / #4286).
+ * Wraps writeSteer so status steers are reachable before pre-cancel.
+ * Writer authority is checked against child occupancy / heartbeat — not self-attested.
+ */
+import { resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { defaultSteerDir, isSafeAgentId, STEER_KINDS, STEER_WRITER_KINDS, writeSteer, } from "@deftai/directive-core/orchestration";
+import { liveOccupant, readChildOccupancyLease } from "@deftai/directive-core/session";
+export const EXIT_STEER_WRITE_OK = 0 * 1;
+export const EXIT_STEER_WRITE_CONFIG = 2 * 1;
+export const SUBAGENT_STEER_WRITE_HELP = `subagent:steer — write a closed parent-steer inbox (#5278 / #4286)
+
+Usage:
+  task subagent:steer -- --agent <id> --writer-id <id> --kind <kind> --text <text> [options]
+
+Options:
+  --agent ID              Child agent_id (inbox file stem)
+  --writer-id ID          Writer identity (must match independent parent/owner record)
+  --writer-kind KIND      occupancy-owner | dispatching-parent (default: dispatching-parent)
+  --kind KIND             constraint | correction | halt | note
+  --text TEXT             Steer body (≤2000 chars)
+  --steer-id ID           Optional stable steer id (default: uuid)
+  --ttl-seconds N         Expiry TTL (default: 1800)
+  --target-id PATH        Worktree root for dest inbox
+  --steer-dir PATH        Inbox directory override
+  --scratch-dir PATH      Heartbeat dir (not used for writer authority)
+  --parent-id ID          Must match child occupancy lease parentId
+  --occupancy-owner-id ID Must match live occupancy session under --target-id
+  --json                  Emit written record
+
+Exit codes:
+  0  Wrote inbox
+  2  Config / validation error
+`;
+/**
+ * Resolve parent/owner from dispatcher-recorded child occupancy + live occupancy.
+ * Heartbeat alone is never authority (caller-selected --scratch-dir cannot mint parent_id).
+ */
+export function resolveIndependentSteerAuthority(input) {
+    const writerId = input.writerId.trim();
+    const lease = readChildOccupancyLease(input.root, input.agentId);
+    const occupancy = liveOccupant(input.root);
+    if (input.writerKind === "dispatching-parent") {
+        const expected = (lease?.parentId ?? "").trim();
+        if (expected.length === 0) {
+            return {
+                error: "dispatching-parent requires child occupancy lease parentId under --target-id (heartbeat alone is not authority)",
+            };
+        }
+        if (writerId !== expected) {
+            return {
+                error: `dispatching-parent writer_id ${JSON.stringify(writerId)} does not match child occupancy parent ${JSON.stringify(expected)}`,
+            };
+        }
+        const claimed = input.claimedParentId?.trim() ?? "";
+        if (claimed.length > 0 && claimed !== expected) {
+            return {
+                error: `--parent-id ${JSON.stringify(claimed)} does not match child occupancy parent ${JSON.stringify(expected)}`,
+            };
+        }
+        return { parentId: expected };
+    }
+    // occupancy-owner: liveOccupant (TTL/age-cap) is SoT; expired/stale leases refuse.
+    const liveOwner = (occupancy?.sessionId ?? "").trim();
+    if (liveOwner.length === 0) {
+        return {
+            error: "occupancy-owner requires a live (non-expired) occupancy session under --target-id",
+        };
+    }
+    const leaseOwner = (lease?.occupancyOwner ?? "").trim();
+    if (leaseOwner.length > 0 && leaseOwner !== liveOwner) {
+        return {
+            error: `child occupancy owner ${JSON.stringify(leaseOwner)} is superseded by live occupancy ${JSON.stringify(liveOwner)}`,
+        };
+    }
+    if (writerId !== liveOwner) {
+        return {
+            error: `occupancy-owner writer_id ${JSON.stringify(writerId)} does not match live occupancy ${JSON.stringify(liveOwner)}`,
+        };
+    }
+    const claimedOwner = input.claimedOccupancyOwnerId?.trim() ?? "";
+    if (claimedOwner.length > 0 && claimedOwner !== liveOwner) {
+        return {
+            error: `--occupancy-owner-id ${JSON.stringify(claimedOwner)} does not match live occupancy ${JSON.stringify(liveOwner)}`,
+        };
+    }
+    return { occupancyOwnerId: liveOwner };
+}
+export function parseSubagentSteerWriteArgs(argv) {
+    const acc = {
+        agentId: null,
+        writerId: null,
+        writerKind: "dispatching-parent",
+        kind: null,
+        text: null,
+        steerId: null,
+        ttlSeconds: null,
+        targetId: null,
+        steerDir: null,
+        scratchDir: null,
+        parentId: null,
+        occupancyOwnerId: null,
+        emitJson: false,
+        help: false,
+    };
+    for (let i = 0; i < argv.length; i += 1) {
+        const arg = argv[i];
+        if (arg === "--help" || arg === "-h") {
+            return { ...acc, help: true };
+        }
+        if (arg === "--json") {
+            acc.emitJson = true;
+        }
+        else if (arg === "--agent" || arg === "--agent-id") {
+            const value = argv[i + 1];
+            if (value === undefined)
+                return { ...acc, error: `argument ${arg}: expected one argument` };
+            acc.agentId = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--agent=") || arg?.startsWith("--agent-id=")) {
+            acc.agentId = arg.slice(arg.indexOf("=") + 1);
+        }
+        else if (arg === "--writer-id") {
+            const value = argv[i + 1];
+            if (value === undefined)
+                return { ...acc, error: "argument --writer-id: expected one argument" };
+            acc.writerId = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--writer-id=")) {
+            acc.writerId = arg.slice("--writer-id=".length);
+        }
+        else if (arg === "--writer-kind") {
+            const value = argv[i + 1];
+            if (value === undefined)
+                return { ...acc, error: "argument --writer-kind: expected one argument" };
+            if (!STEER_WRITER_KINDS.includes(value)) {
+                return { ...acc, error: `writer-kind must be one of ${STEER_WRITER_KINDS.join(", ")}` };
+            }
+            acc.writerKind = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--writer-kind=")) {
+            const value = arg.slice("--writer-kind=".length);
+            if (!STEER_WRITER_KINDS.includes(value)) {
+                return { ...acc, error: `writer-kind must be one of ${STEER_WRITER_KINDS.join(", ")}` };
+            }
+            acc.writerKind = value;
+        }
+        else if (arg === "--kind") {
+            const value = argv[i + 1];
+            if (value === undefined)
+                return { ...acc, error: "argument --kind: expected one argument" };
+            if (!STEER_KINDS.includes(value)) {
+                return { ...acc, error: `kind must be one of ${STEER_KINDS.join(", ")}` };
+            }
+            acc.kind = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--kind=")) {
+            const value = arg.slice("--kind=".length);
+            if (!STEER_KINDS.includes(value)) {
+                return { ...acc, error: `kind must be one of ${STEER_KINDS.join(", ")}` };
+            }
+            acc.kind = value;
+        }
+        else if (arg === "--text") {
+            const value = argv[i + 1];
+            if (value === undefined)
+                return { ...acc, error: "argument --text: expected one argument" };
+            acc.text = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--text=")) {
+            acc.text = arg.slice("--text=".length);
+        }
+        else if (arg === "--steer-id") {
+            const value = argv[i + 1];
+            if (value === undefined)
+                return { ...acc, error: "argument --steer-id: expected one argument" };
+            acc.steerId = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--steer-id=")) {
+            acc.steerId = arg.slice("--steer-id=".length);
+        }
+        else if (arg === "--ttl-seconds") {
+            const value = argv[i + 1];
+            if (value === undefined)
+                return { ...acc, error: "argument --ttl-seconds: expected one argument" };
+            acc.ttlSeconds = Number(value);
+            i += 1;
+        }
+        else if (arg?.startsWith("--ttl-seconds=")) {
+            acc.ttlSeconds = Number(arg.slice("--ttl-seconds=".length));
+        }
+        else if (arg === "--target-id" || arg === "--target") {
+            const value = argv[i + 1];
+            if (value === undefined)
+                return { ...acc, error: `argument ${arg}: expected one argument` };
+            acc.targetId = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--target-id=") || arg?.startsWith("--target=")) {
+            acc.targetId = arg.slice(arg.indexOf("=") + 1);
+        }
+        else if (arg === "--steer-dir") {
+            const value = argv[i + 1];
+            if (value === undefined)
+                return { ...acc, error: "argument --steer-dir: expected one argument" };
+            acc.steerDir = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--steer-dir=")) {
+            acc.steerDir = arg.slice("--steer-dir=".length);
+        }
+        else if (arg === "--scratch-dir") {
+            const value = argv[i + 1];
+            if (value === undefined)
+                return { ...acc, error: "argument --scratch-dir: expected one argument" };
+            acc.scratchDir = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--scratch-dir=")) {
+            acc.scratchDir = arg.slice("--scratch-dir=".length);
+        }
+        else if (arg === "--parent-id") {
+            const value = argv[i + 1];
+            if (value === undefined)
+                return { ...acc, error: "argument --parent-id: expected one argument" };
+            acc.parentId = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--parent-id=")) {
+            acc.parentId = arg.slice("--parent-id=".length);
+        }
+        else if (arg === "--occupancy-owner-id") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...acc, error: "argument --occupancy-owner-id: expected one argument" };
+            }
+            acc.occupancyOwnerId = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--occupancy-owner-id=")) {
+            acc.occupancyOwnerId = arg.slice("--occupancy-owner-id=".length);
+        }
+        else if (arg?.startsWith("-")) {
+            return { ...acc, error: `unrecognized argument: ${arg}` };
+        }
+        else {
+            return { ...acc, error: `unrecognized argument: ${arg}` };
+        }
+    }
+    return acc;
+}
+export function run(argv, cwd = process.cwd()) {
+    const args = parseSubagentSteerWriteArgs(argv);
+    if (args.help) {
+        process.stdout.write(SUBAGENT_STEER_WRITE_HELP);
+        return EXIT_STEER_WRITE_OK;
+    }
+    if (args.error !== undefined) {
+        process.stderr.write(`subagent:steer: ${args.error}\n`);
+        return EXIT_STEER_WRITE_CONFIG;
+    }
+    if (args.agentId === null || !isSafeAgentId(args.agentId)) {
+        process.stderr.write("subagent:steer: --agent is required and must be a filesystem-safe slug\n");
+        return EXIT_STEER_WRITE_CONFIG;
+    }
+    if (args.writerId === null || args.writerId.trim().length === 0) {
+        process.stderr.write("subagent:steer: --writer-id is required\n");
+        return EXIT_STEER_WRITE_CONFIG;
+    }
+    if (args.kind === null) {
+        process.stderr.write(`subagent:steer: --kind is required (${STEER_KINDS.join("|")})\n`);
+        return EXIT_STEER_WRITE_CONFIG;
+    }
+    if (args.text === null || args.text.trim().length === 0) {
+        process.stderr.write("subagent:steer: --text is required\n");
+        return EXIT_STEER_WRITE_CONFIG;
+    }
+    if (args.ttlSeconds !== null && (!Number.isFinite(args.ttlSeconds) || args.ttlSeconds <= 0)) {
+        process.stderr.write("subagent:steer: --ttl-seconds must be positive\n");
+        return EXIT_STEER_WRITE_CONFIG;
+    }
+    const root = args.targetId !== null && args.targetId.trim().length > 0 ? resolve(cwd, args.targetId) : cwd;
+    const steerDir = resolve(root, args.steerDir ?? defaultSteerDir(root));
+    const writerId = args.writerId.trim();
+    const authority = resolveIndependentSteerAuthority({
+        root,
+        agentId: args.agentId,
+        writerKind: args.writerKind,
+        writerId,
+        claimedParentId: args.parentId,
+        claimedOccupancyOwnerId: args.occupancyOwnerId,
+    });
+    if (authority.error !== undefined) {
+        process.stderr.write(`subagent:steer: ${authority.error}\n`);
+        return EXIT_STEER_WRITE_CONFIG;
+    }
+    try {
+        const record = writeSteer(steerDir, {
+            agentId: args.agentId,
+            writerKind: args.writerKind,
+            writerId,
+            kind: args.kind,
+            text: args.text,
+            steerId: args.steerId ?? undefined,
+            ttlSeconds: args.ttlSeconds ?? undefined,
+            parentId: authority.parentId,
+            occupancyOwnerId: authority.occupancyOwnerId,
+        });
+        if (args.emitJson) {
+            process.stdout.write(`${JSON.stringify(record, null, 2)}\n`);
+        }
+        else {
+            process.stdout.write(`subagent:steer: wrote ${record.agent_id} steer_id=${record.steer_id} kind=${record.kind}\n`);
+        }
+        return EXIT_STEER_WRITE_OK;
+    }
+    catch (err) {
+        process.stderr.write(`subagent:steer: ${String(err.message ?? err)}\n`);
+        return EXIT_STEER_WRITE_CONFIG;
+    }
+}
+if (process.argv[1] !== undefined && fileURLToPath(import.meta.url) === process.argv[1]) {
+    process.exit(run(process.argv.slice(2)));
+}
+//# sourceMappingURL=subagent-steer-write.js.map

package/dist/verify-cohort-review-monitors.d.ts

@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+import { parseCohortReviewMonitorsArgv, verifyCohortReviewMonitorsMain } from "@deftai/directive-core/swarm";
+export { parseCohortReviewMonitorsArgv, verifyCohortReviewMonitorsMain };
+export declare function run(argv?: readonly string[]): number;
+//# sourceMappingURL=verify-cohort-review-monitors.d.ts.map

package/dist/verify-cohort-review-monitors.js

@@ -0,0 +1,11 @@
+#!/usr/bin/env node
+import { fileURLToPath } from "node:url";
+import { parseCohortReviewMonitorsArgv, verifyCohortReviewMonitorsMain, } from "@deftai/directive-core/swarm";
+export { parseCohortReviewMonitorsArgv, verifyCohortReviewMonitorsMain };
+export function run(argv = process.argv.slice(2)) {
+    return verifyCohortReviewMonitorsMain([...argv]);
+}
+if (process.argv[1] !== undefined && fileURLToPath(import.meta.url) === process.argv[1]) {
+    process.exit(run(process.argv.slice(2)));
+}
+//# sourceMappingURL=verify-cohort-review-monitors.js.map

package/dist/verify-review-monitor.d.ts

@@ -14,6 +14,8 @@ interface ParsedArgs {
     liveWait: boolean;
     explicitFinish: boolean;
     stickyLease: boolean;
+    /** DeliveryAttemptRecord.startedAt for Approach 1 arm-startup halt (#5278 P3). */
+    dispatchStartedAt: string | null;
     help: boolean;
     error?: string;
 }

package/dist/verify-review-monitor.js

@@ -2,7 +2,9 @@
 import { resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { bindLivePhaseCorrectWait, evaluateMergePathArm, } from "@deftai/directive-core/dist/pr-watch/main.js";
+import { evaluateApproach1ArmStartup } from "@deftai/directive-core/orchestration";
 import { EXIT_CONFIG_ERROR, EXIT_NOT_READY, evaluateReviewMonitorGate, formatApproach1BabysitterOneLiner, isTier1, REVIEW_MONITOR_HELP, spawnRedirect, verifyResultToJson, } from "@deftai/directive-core/review-monitor";
+import { writeMergePathExplicitFinishAttestation } from "@deftai/directive-core/swarm";
 const CALL_SITES = new Set([
     "solo",
     "swarm-phase5-6",
@@ -23,6 +25,7 @@ export function parseVerifyReviewMonitorArgs(argv) {
         liveWait: false,
         explicitFinish: false,
         stickyLease: false,
+        dispatchStartedAt: null,
         help: false,
     };
     for (let i = 0; i < argv.length; i += 1) {
@@ -45,6 +48,17 @@ export function parseVerifyReviewMonitorArgs(argv) {
         else if (arg === "--sticky-lease") {
             acc.stickyLease = true;
         }
+        else if (arg === "--dispatch-started-at") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...acc, error: "argument --dispatch-started-at: expected one argument" };
+            }
+            acc.dispatchStartedAt = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--dispatch-started-at=")) {
+            acc.dispatchStartedAt = arg.slice("--dispatch-started-at=".length);
+        }
         else if (arg === "--approach3") {
             acc.approach3 = true;
         }
@@ -146,6 +160,9 @@ export function run(argv) {
             "                         parent-shell pr:watch (parent_id=pr-watch) does not arm.\n" +
             "  --explicit-finish      Attest option-C BLOCKED/FAILED finish for this PR\n" +
             "  --sticky-lease         Attest a fresh sticky lease (not sufficient alone)\n" +
+            "  --dispatch-started-at  DeliveryAttemptRecord.startedAt ISO for Approach 1\n" +
+            "                         arm-startup halt (#5278); when merge-path-arm stays\n" +
+            "                         red past the 3m allowance, emit approach1-arm-startup.\n" +
             "  Prefer Approach 1 / native pr:watch --monitor-agent-id <id> or post-CLEAN\n" +
             "  pr:wait-mergeable-and-merge; homemade line-parsed --json is not an arm.\n");
         return 0;
@@ -174,6 +191,26 @@ export function run(argv) {
     });
     let arm = null;
     if (args.mergePathArm) {
+        // Durable option-C attestation for cohort inventory halted-explicit (#5318).
+        // Do not write (or arm from) --explicit-finish when the monitor gate is a config error,
+        // and fail closed if the durable write itself fails.
+        let explicitFinishDurable = false;
+        if (args.explicitFinish) {
+            if (result.exitCode === EXIT_CONFIG_ERROR) {
+                explicitFinishDurable = false;
+            }
+            else {
+                const written = writeMergePathExplicitFinishAttestation(resolve(args.projectRoot), args.pr, {
+                    source: "verify:review-monitor --explicit-finish",
+                });
+                if (!written.ok) {
+                    process.stderr.write(`verify_review_monitor: ${written.reason}
+`);
+                    return EXIT_CONFIG_ERROR;
+                }
+                explicitFinishDurable = true;
+            }
+        }
         // Bind --live-wait to lease (#5018) + process-liveness heartbeat (#5020) on Tier 1.
         // spawn_subagent identity join is already applied in evaluateReviewMonitorGate (#5219).
         const leaseEvidence = result.monitorRecord !== null;
@@ -186,7 +223,7 @@ export function run(argv) {
         });
         arm = evaluateMergePathArm({
             livePhaseCorrectWait: liveBind.livePhaseCorrectWait,
-            explicitFinish: args.explicitFinish,
+            explicitFinish: explicitFinishDurable,
             stickyLeaseActive: args.stickyLease || leaseEvidence,
         });
         if (args.liveWait && !liveBind.livePhaseCorrectWait && !args.explicitFinish && !arm.armed) {
@@ -224,6 +261,26 @@ export function run(argv) {
             };
         }
     }
+    // Approach 1 arm-startup halt (#5278 P3): production caller for evaluateApproach1ArmStartup.
+    let armStartupHalt = null;
+    if (args.mergePathArm &&
+        args.dispatchStartedAt !== null &&
+        args.dispatchStartedAt.trim().length > 0 &&
+        arm !== null &&
+        !arm.armed &&
+        !args.explicitFinish) {
+        armStartupHalt = evaluateApproach1ArmStartup({
+            dispatchStartedAt: args.dispatchStartedAt,
+            probeReady: false,
+        });
+        if (armStartupHalt.halt && armStartupHalt.message.length > 0) {
+            arm = {
+                armed: false,
+                reason: "unarmed_stand_down",
+                message: `${arm.message}\n${armStartupHalt.message}`,
+            };
+        }
+    }
     if (args.emitJson) {
         const payload = verifyResultToJson(result);
         if (arm !== null) {
@@ -237,6 +294,14 @@ export function run(argv) {
                 lease_evidence: result.monitorRecord !== null,
                 heartbeat_active: result.heartbeatActive,
             };
+            if (armStartupHalt !== null) {
+                payload.approach1_arm_startup = {
+                    halt: armStartupHalt.halt,
+                    halt_class: armStartupHalt.halt_class,
+                    elapsed_seconds: armStartupHalt.elapsed_seconds,
+                    message: armStartupHalt.message,
+                };
+            }
             // Combined gate+arm: unarmed fails closed even when the monitor gate is ready.
             if (!arm.armed && result.exitCode !== EXIT_CONFIG_ERROR) {
                 payload.ready = false;

package/dist/verify-source-cli/verify-spec-drift.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export declare function run(argv: string[]): number;
+//# sourceMappingURL=verify-spec-drift.d.ts.map

package/dist/verify-source-cli/verify-spec-drift.js

@@ -0,0 +1,15 @@
+#!/usr/bin/env node
+import { fileURLToPath } from "node:url";
+import { runSpecDriftCli } from "@deftai/directive-core/verify-source";
+export function run(argv) {
+    const result = runSpecDriftCli(argv);
+    if (result.stdout.length > 0)
+        process.stdout.write(result.stdout);
+    if (result.stderr.length > 0)
+        process.stderr.write(result.stderr);
+    return result.exitCode;
+}
+if (process.argv[1] !== undefined && fileURLToPath(import.meta.url) === process.argv[1]) {
+    process.exit(run(process.argv.slice(2)));
+}
+//# sourceMappingURL=verify-spec-drift.js.map

package/dist/verify-story-ready.js

@@ -95,8 +95,11 @@ const HELP_TEXT = `usage: verify-story-ready [--vbrief-path PATH] [--project-roo
                           [--skip-routing] [--roles ROLE[,ROLE...]]
 
 Deterministic story-start Gate 0 (#1378). When the active dispatch provider is
-cursor or grok, chains verify:routing (#1877 single-dispatch enforcement).
-Three-state exit: 0 ready / 1 not ready / 2 config error.
+one of ROUTING_GATED_DISPATCH_PROVIDERS (claude, cursor, grok, grok-bot,
+openclaw), chains verify:routing (#1877 / #3703). --skip-routing records a
+silent opt-out. Session-start --advise remains additive disclosure only and
+does not relieve honor-at-dispatch. Three-state exit: 0 ready / 1 not ready /
+2 config error.
 `;
 function emitJson(vbriefPath, exitCode, message, dispatchKind) {
     const payload = {

package/dist/verify-subagent-alive.js

@@ -129,6 +129,20 @@ export function evaluateSubagentAliveGate(args, cwd = process.cwd()) {
                 redispatch_ok: unhealthy && !configError,
                 required_agents: [...args.requireAgents],
                 missing_or_stale_agents: missingAgents,
+                // Flat per-agent records including wait_kind (#5278 P2).
+                records: sweep.records.map((r) => ({
+                    agent_id: r.agent_id,
+                    phase: r.phase,
+                    wait_kind: r.wait_kind,
+                    head_sha: r.head_sha,
+                    pr_number: r.pr_number,
+                    last_heartbeat_at: r.last_heartbeat_at_iso,
+                    age_seconds: r.age_seconds,
+                    is_stale: r.is_stale,
+                    is_terminal: r.is_terminal,
+                    failures: [...r.failures],
+                    ok: recordOk(r),
+                })),
                 sweep: {
                     scratch_dirs: sweep.scratch_dirs,
                     threshold_minutes: sweep.threshold_minutes,
@@ -167,10 +181,12 @@ export function evaluateSubagentAliveGate(args, cwd = process.cwd()) {
     lines.push("");
     lines.push("REDISPATCH_OK: host-reported running + missing/STALE heartbeat authorizes takeover.");
     lines.push("A killed worker's delivery attempt stays running until cancelled.");
-    lines.push("Takeover: task swarm:pre-dispatch -- --scope-id <id> --target-id <worktree> --action cancel");
+    lines.push("Takeover: task subagent:pre-cancel -- --agent <id> --canceller-id <id> --target-id <worktree>");
+    lines.push("then:     task swarm:pre-dispatch -- --scope-id <id> --target-id <worktree> --action cancel --agent <id>");
     lines.push("then:     task swarm:pre-dispatch -- --scope-id <id> --target-id <worktree>");
     lines.push("If verify:session-ritual --tier=gated fails, run session:start --rearm --session-id=<same> first.");
     lines.push("Do not wait on Cursor false-alive state. Do not spawn while DENY_DUPLICATE_ACTIVE.");
+    lines.push("⊗ bare ledger cancel while pre-cancel is red (#5278).");
     return {
         exitCode: EXIT_STALE,
         redispatchOk: true,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deftai/directive",
-  "version": "0.120.0",
+  "version": "0.121.0",
   "description": "Directive CLI — npm install path for the Deft Directive framework.",
   "license": "MIT",
   "homepage": "https://deftai.github.io/directive/",
@@ -35,8 +35,8 @@
     "provenance": true
   },
   "dependencies": {
-    "@deftai/directive-core": "^0.120.0",
-    "@deftai/directive-content": "^0.120.0"
+    "@deftai/directive-core": "^0.121.0",
+    "@deftai/directive-content": "^0.121.0"
   },
   "scripts": {
     "build": "tsc -b",