@deftai/directive 0.124.0 → 0.125.1

package/dist/authz.js

@@ -11,6 +11,8 @@
  *   deft authz:grant -- --template release-publish --target 0.30.0 [--confirm]
  *   deft authz:grant -- --template finish-loop [--confirm]
  *   deft authz:grant -- --template spec-drift-override --target <baseline> --plan-ref <scopeId> --story-ids <ids> [--confirm]
+ *   deft authz:grant -- --template gate-override --target <refuseCode> --plan-ref <attemptId> \\
+ *       --base-sha <sha> --head-sha <sha> --tree-hash <hash> [--confirm]
  *   deft authz:grant -- --parent <parent.xbrief.json> --draft <draft.json> [--repo owner/name] [--confirm]
  *   deft authz:revoke -- <grant-id> [--confirm]
  *
@@ -27,7 +29,7 @@
 import { existsSync } from "node:fs";
 import { isAbsolute, resolve } from "node:path";
 import { onePrUnit } from "@deftai/directive-core";
-import { AFK_TEMPLATE_NAMES, AUTHZ_OPERATIONS, CLOSED_VERB_TEMPLATE_NAMES, FINISH_LOOP_TEMPLATE_NAME, formatDecomposeStructuralMintCommand, isAfkTemplateName, isClosedVerbTemplateName, isFinishLoopTemplateName, mintAfkTemplateGrant, mintDecomposeStructuralApplyGrant, mintHumanOriginGrant, revokeGrant, showAuthzSnapshot, startUatLease, suspendUatLease, toProjectRelativePosix, } from "@deftai/directive-core/authz";
+import { AFK_TEMPLATE_NAMES, AUTHZ_OPERATIONS, CLOSED_VERB_TEMPLATE_NAMES, FINISH_LOOP_TEMPLATE_NAME, formatDecomposeStructuralMintCommand, GATE_OVERRIDE_TEMPLATE_NAME, isAfkTemplateName, isClosedVerbTemplateName, isFinishLoopTemplateName, isGateOverrideTemplateName, mintAfkTemplateGrant, mintDecomposeStructuralApplyGrant, mintGateOverrideTemplateGrant, mintHumanOriginGrant, revokeGrant, showAuthzSnapshot, startUatLease, suspendUatLease, toProjectRelativePosix, } from "@deftai/directive-core/authz";
 import { uatCampaignEndSeal } from "@deftai/directive-core/authz/campaign-end-seal";
 import { isSpecDriftOverrideTemplateName, mintSpecDriftOverrideTemplateGrant, SPEC_DRIFT_OVERRIDE_TEMPLATE_NAME, } from "@deftai/directive-core/policy";
 import { refuseMintWhileUatActive, refuseNonInteractiveMint, resolveHumanPresenceMintSeams, } from "./human-presence-mint.js";
@@ -68,6 +70,11 @@ function parseArgv(argv) {
         target: null,
         parent: null,
         draft: null,
+        baseSha: null,
+        headSha: null,
+        treeHash: null,
+        worktree: null,
+        evaluatorId: null,
         format: "text",
         confirm: false,
     };
@@ -196,6 +203,26 @@ function parseArgv(argv) {
             base.draft = args[++i] ?? null;
             continue;
         }
+        if (a === "--base-sha" || a === "--baseSha") {
+            base.baseSha = args[++i] ?? null;
+            continue;
+        }
+        if (a === "--head-sha" || a === "--headSha") {
+            base.headSha = args[++i] ?? null;
+            continue;
+        }
+        if (a === "--tree-hash" || a === "--treeHash") {
+            base.treeHash = args[++i] ?? null;
+            continue;
+        }
+        if (a === "--worktree") {
+            base.worktree = args[++i] ?? null;
+            continue;
+        }
+        if (a === "--evaluator-id" || a === "--evaluatorId") {
+            base.evaluatorId = args[++i] ?? null;
+            continue;
+        }
         if (a === "--confirm") {
             base.confirm = true;
             continue;
@@ -255,6 +282,11 @@ function helpText() {
         `  Finish-loop (#871): ${FINISH_LOOP_TEMPLATE_NAME} — edit/push/pr/merge (no release ops)`,
         "  Templates call mintHumanOriginGrant only — no second session-auth mint engine.",
         "  Env bypass for a single shell: DEFT_ALLOW_RELEASE_PUBLISH=1 / DEFT_ALLOW_FINISH_LOOP=1.",
+        "",
+        `Gate-override (#5542): ${GATE_OVERRIDE_TEMPLATE_NAME}`,
+        "  deft authz:grant -- --template gate-override --target <refuseCode> --plan-ref <attemptId> \\",
+        "      --base-sha <sha> --head-sha <sha> --tree-hash <hash> [--worktree <id>] [--evaluator-id <id>] [--confirm]",
+        "  operator-cli human-presence only; waived ≠ passed; no independent push/merge.",
     ].join("\n");
 }
 export function main(argv = process.argv.slice(2), seams = {}) {
@@ -481,6 +513,59 @@ export function main(argv = process.argv.slice(2), seams = {}) {
                     process.stdout.write(`  origins=${claim.origins.map((o) => `${o.repo}#${o.issueId}`).join(",")}\n`);
                     return 0;
                 }
+                // Gate-override hatch (#5542 Prefer-A Bound): coverage-applicability refuse waiver.
+                if (args.template !== null && isGateOverrideTemplateName(args.template)) {
+                    if (args.target === null || args.target.trim().length === 0) {
+                        process.stderr.write("authz:grant --template gate-override requires --target <refuseCode>\n");
+                        return 2;
+                    }
+                    if (args.planRef === null || args.planRef.trim().length === 0) {
+                        process.stderr.write("authz:grant --template gate-override requires --plan-ref <attemptId>\n");
+                        return 2;
+                    }
+                    if (args.baseSha === null ||
+                        args.baseSha.trim().length === 0 ||
+                        args.headSha === null ||
+                        args.headSha.trim().length === 0 ||
+                        args.treeHash === null ||
+                        args.treeHash.trim().length === 0) {
+                        process.stderr.write("authz:grant --template gate-override requires --base-sha --head-sha --tree-hash\n");
+                        return 2;
+                    }
+                    const blockedGate = gateConfirm();
+                    if (blockedGate !== null)
+                        return blockedGate;
+                    const mintedGate = mintGateOverrideTemplateGrant({
+                        projectRoot: args.projectRoot,
+                        target: args.target,
+                        planRef: args.planRef,
+                        baseSha: args.baseSha,
+                        headSha: args.headSha,
+                        treeHash: args.treeHash,
+                        actor: args.actor,
+                        expiresAt: args.expiresAt,
+                        // gate-override template is always single-use (#5542 Greptile P2).
+                        singleUse: true,
+                        repo: args.repo,
+                        branch: args.branch,
+                        worktree: args.worktree,
+                        evaluatorId: args.evaluatorId,
+                        failedGateEvidence: args.note,
+                    });
+                    if (!mintedGate.ok) {
+                        process.stderr.write(`authz:grant: ${mintedGate.reason}\n`);
+                        return 2;
+                    }
+                    const gateGrant = mintedGate.grant;
+                    process.stdout.write(`✓ human-origin grant minted id=${gateGrant.id} origin=${gateGrant.origin.kind} ` +
+                        `template=${GATE_OVERRIDE_TEMPLATE_NAME}\n`);
+                    process.stdout.write(`  ops=[${gateGrant.scope.operations.join(",")}] attempt=${gateGrant.scope.planRef} ` +
+                        `surfaces=${gateGrant.scope.surfaces.join(", ")}\n`);
+                    process.stdout.write("  Hatch: waives coverage-applicability refuse for bound attempt/tree only; " +
+                        "waived ≠ passed; reviewObligation=pre-merge-human-review-required.\n");
+                    process.stdout.write("  Authorization SoT: Wave 1 grant store (.deft/authz/grants) — not session-auth / chat.\n");
+                    return 0;
+                }
                 // Spec-drift override hatch (#5350): policy module, not authz/** (class 4).
                 if (args.template !== null && isSpecDriftOverrideTemplateName(args.template)) {
                     if (args.target === null || args.target.trim().length === 0) {
@@ -525,7 +610,7 @@ export function main(argv = process.argv.slice(2), seams = {}) {
                 // AFK template path (#1095 / #871): presets only — still mintHumanOriginGrant.
                 if (args.template !== null && args.template.trim().length > 0) {
                     if (!isAfkTemplateName(args.template)) {
-                        process.stderr.write(`authz:grant unknown --template '${args.template}'; expected one of: ${AFK_TEMPLATE_NAMES.join(", ")}, ${SPEC_DRIFT_OVERRIDE_TEMPLATE_NAME}\n`);
+                        process.stderr.write(`authz:grant unknown --template '${args.template}'; expected one of: ${AFK_TEMPLATE_NAMES.join(", ")}, ${SPEC_DRIFT_OVERRIDE_TEMPLATE_NAME}, ${GATE_OVERRIDE_TEMPLATE_NAME}\n`);
                         return 2;
                     }
                     if (isClosedVerbTemplateName(args.template) &&
@@ -569,7 +654,7 @@ export function main(argv = process.argv.slice(2), seams = {}) {
                     return 0;
                 }
                 if (args.operations.length === 0) {
-                    process.stderr.write("authz:grant requires --operations <edit,push,...>, --template <finish-loop|release-*|spec-drift-override>, " +
+                    process.stderr.write("authz:grant requires --operations <edit,push,...>, --template <finish-loop|release-*|spec-drift-override|gate-override>, " +
                         "or --parent + --draft (structural scope:decompose apply)\n");
                     return 2;
                 }

package/dist/cli-router/route-argv.d.ts

@@ -16,6 +16,14 @@ export declare const PR_VERB_MAP: Readonly<Record<string, string>>;
 export declare const VERIFY_VERB_MAP: Readonly<Record<string, string>>;
 /** Namespace handlers that require a subcommand token after the handler stem. */
 export declare const SUBCOMMAND_ROUTES: Readonly<Record<string, readonly [string, string]>>;
+/** Eight scm:body:* dual-invoke names (#5521); keep in sync with SUBCOMMAND_ROUTES above. */
+export declare const SCM_BODY_COLON_VERBS: readonly ["scm:body:issue:create", "scm:body:issue:edit", "scm:body:issue:fetch", "scm:body:issue:lint", "scm:body:comment:create", "scm:body:comment:edit", "scm:body:pr:edit", "scm:body:pr:lint"];
+/**
+ * Colon forms handled by explicit `routeNamespaceVerb` branches (not SUBCOMMAND_ROUTES /
+ * PR_VERB_MAP / VERIFY_VERB_MAP / SCOPE_LIFECYCLE_VERBS). Scraped by rule-to-verb parity
+ * so valid citations like `deft framework:doctor` pass (#5521).
+ */
+export declare const ROUTER_BRANCH_COLON_VERBS: readonly ["framework:doctor", "agents:refresh", "scope:demote", "scope:decompose", "scope:undo", "scope:record-approved-scope", "scope:record-observable-scope", "scope:record-intent-constraint", "scm:issue:design-critique-chip", "scm:issue:design-critique-stale-ready", "scm:issue:work-claim", "issue:ingest", "issue:emit", "issue:sync-from-xbrief"];
 export type RouteKind = "dispatch" | "stub";
 export interface RoutedArgv {
     kind: RouteKind;

package/dist/cli-router/route-argv.js

@@ -118,11 +118,52 @@ export const SUBCOMMAND_ROUTES = {
     "github-body:comment-edit": ["github-body", "comment-edit"],
     "github-body:pr-edit": ["github-body", "pr-edit"],
     "github-body:pr-lint": ["github-body", "pr-lint"],
+    // #5521: pinned AGENTS scm:body:* colon aliases → github-body engine (argv inserts subcommand)
+    "scm:body:issue:create": ["github-body", "issue-create"],
+    "scm:body:issue:edit": ["github-body", "issue-edit"],
+    "scm:body:issue:fetch": ["github-body", "issue-fetch"],
+    "scm:body:issue:lint": ["github-body", "issue-lint"],
+    "scm:body:comment:create": ["github-body", "comment-create"],
+    "scm:body:comment:edit": ["github-body", "comment-edit"],
+    "scm:body:pr:edit": ["github-body", "pr-edit"],
+    "scm:body:pr:lint": ["github-body", "pr-lint"],
     "plan-sequence:set": ["plan-sequence", "set"],
     "plan-sequence:current": ["plan-sequence", "current"],
     "plan-sequence:clear": ["plan-sequence", "clear"],
     "plan-sequence:advance": ["plan-sequence", "advance"],
 };
+/** Eight scm:body:* dual-invoke names (#5521); keep in sync with SUBCOMMAND_ROUTES above. */
+export const SCM_BODY_COLON_VERBS = [
+    "scm:body:issue:create",
+    "scm:body:issue:edit",
+    "scm:body:issue:fetch",
+    "scm:body:issue:lint",
+    "scm:body:comment:create",
+    "scm:body:comment:edit",
+    "scm:body:pr:edit",
+    "scm:body:pr:lint",
+];
+/**
+ * Colon forms handled by explicit `routeNamespaceVerb` branches (not SUBCOMMAND_ROUTES /
+ * PR_VERB_MAP / VERIFY_VERB_MAP / SCOPE_LIFECYCLE_VERBS). Scraped by rule-to-verb parity
+ * so valid citations like `deft framework:doctor` pass (#5521).
+ */
+export const ROUTER_BRANCH_COLON_VERBS = [
+    "framework:doctor",
+    "agents:refresh",
+    "scope:demote",
+    "scope:decompose",
+    "scope:undo",
+    "scope:record-approved-scope",
+    "scope:record-observable-scope",
+    "scope:record-intent-constraint",
+    "scm:issue:design-critique-chip",
+    "scm:issue:design-critique-stale-ready",
+    "scm:issue:work-claim",
+    "issue:ingest",
+    "issue:emit",
+    "issue:sync-from-xbrief",
+];
 function isMetaVerb(token) {
     return token === "--help" || token === "-h" || token === "--version" || token === "-V";
 }

package/dist/dispatch.d.ts

@@ -12,7 +12,7 @@ export interface DispatchIo {
 /** CLI modules in packages/cli/src (excluding parity harnesses and bin/index). */
 export declare const CLI_MODULE_VERBS: readonly ["agents-refresh", "cache", "check", "capacity-backfill", "capacity-show", "codebase-default-extractor", "codebase-map", "codebase-map-fresh", "codebase-projection-registry", "codebase-provider", "doctor", "ownership-doctor", "ownership-fix", "verify-ownership", "install-upgrade", "install-uninstall", "migrate-preflight", "migrate-xbrief", "migrate-category-b", "framework-check-updates", "hook-dispatch", "umbrella-current-shape", "changelog-check", "change-init", "commit-lint", "coverage-hotspots", "policy", "authz", "escalation-cli", "pr-closing-keywords", "pr-merge-readiness", "pr-monitor", "pr-protected-issues", "pr-wait-mergeable", "pr-watch", "pr-finish-loop", "directive-finish-loop", "pre-pr-run", "preflight-cache", "preflight-gh", "probe-session", "release", "release-e2e", "release-publish", "release-rollback", "release-wait-npm", "scope-lifecycle", "scope-record-approved-scope", "scope-record-observable-scope", "scope-record-intent-constraint", "scm-sync-default", "lifecycle-event", "lifecycle-stats", "session-start", "session-ready", "occupancy-steal", "occupancy-release", "occupancy-heartbeat", "occupancy-grant", "plan-sequence", "slice", "subagent-monitor", "toolchain-check", "triage-actions", "triage-bootstrap", "triage-bulk", "triage-classify", "triage-strip-withdrawn", "triage-evaluate", "triage-help", "triage-queue", "triage-reconcile", "triage-refresh", "triage-scope", "triage-scope-drift", "triage-smoketest", "triage-subscribe", "triage-summary", "triage-welcome", "ts-check-lane", "vbrief-activate", "vbrief-build", "vbrief-preflight", "vbrief-reconcile", "vbrief-validate", "vbrief-validation", "xbrief-create", "xbrief-verify", "xbrief-adopt-stored-plan-id", "verify-branch", "verify-encoding", "verify-forward-coverage", "verify-test-boundary", "verify-class-checks", "verify-presentation-coverage", "verify-scope-provenance", "verify-consumer-check-contract", "verify-hooks-installed", "verify-investigation", "verify-judgment-gates", "verify-no-task-runtime", "validate-links", "validate-strategy-output", "verify-biome-config", "verify-bridge-drift", "verify-capacity", "verify-contained-writes", "verify-telemetry-coverage", "verify-content-manifest", "verify-deposit-closure", "verify-consumer-hard-stops", "verify-closing-keywords", "verify-skill-external-fetch-gate", "verify-semantic-single-source", "verify-contract-drift", "verify-cursor-tier1", "verify-openclaw-tier1", "verify-go-freeze", "verify-scm-boundary", "verify-session-ritual", "verify-plan-sequence", "verify-stubs", "verify-xbrief-drift", "verify-spec-prd-fresh", "verify-spec-drift", "rule-ownership-lint", "verify-story-ready", "verify-review-monitor", "verify-cohort-review-monitors", "verify-l4-owner", "verify-subagent-alive", "verify-subagent-steer", "subagent-pre-cancel", "subagent-steer-write", "design-critique-spend-resolve", "review-monitor-register", "review-monitor-release", "verify-tools", "verify-wip-cap", "verify-orphan-active", "verify-pr-closeout-attestable", "verify-lifecycle-visible", "verify-completed-tracked", "verify-completed-write-guard", "verify-literal-ac", "verify-ac", "verify-agents-md-budget", "verify-consumer-header-placeholder", "verify-agents-md-advisory", "verify-persisted-planning-narratives", "verify-eval-health-relocation", "verify-eval-triggers-relocation", "verify-evaluator-surface", "verify-observable-scope", "verify-operator-scope-limit", "verify-presentation-ceiling", "verify-intent-constraint", "verify-durable-effect-acquisition", "verify-consumer-test-lane", "eval-health", "eval-run", "eval-report", "eval-triggers"];
 /** Core-only CLI entrypoints without a packages/cli wrapper. */
-export declare const CORE_MODULE_VERBS: readonly ["scm", "scm-readiness", "github-auth-modes", "github-body", "issue-emit", "issue-ingest", "issue-sync-from-xbrief", "reconcile-issues", "swarm-launch", "swarm-complete-cohort", "swarm-finalize-cohort", "swarm-finalize-owed", "swarm-pre-dispatch", "swarm-readiness", "swarm-routing-verify", "swarm-routing-set", "swarm-verify-review-clean", "swarm-worktrees", "framework-commands", "pack-render", "packs-slice", "prd-render", "export-spec", "project-render", "project-write-narratives", "roadmap-render", "rule-map", "spec-render", "spec-reconstruct", "spec-validate", "code-structure-validate", "pack-migrate-skills", "pack-migrate-rules", "pack-migrate-strategies", "pack-migrate-patterns", "pack-migrate-swarm-spec", "policy-set", "setup-ghx", "scope-undo", "scope-demote", "scope-decompose", "changelog-resolve-unreleased", "architecture-preflight-sor", "feedback-file", "value-readback", "product-signal", "freshness-report", "decision-write", "decision-list", "docs-impact", "migrate-clause-ids", "migrate-confidence"];
+export declare const CORE_MODULE_VERBS: readonly ["scm", "scm-readiness", "github-auth-modes", "github-body", "issue-emit", "issue-ingest", "issue-sync-from-xbrief", "reconcile-issues", "swarm-launch", "swarm-complete-cohort", "swarm-finalize-cohort", "swarm-finalize-owed", "swarm-pre-dispatch", "swarm-readiness", "swarm-routing-verify", "swarm-routing-set", "swarm-verify-review-clean", "swarm-worktrees", "framework-commands", "pack-render", "packs-slice", "prd-render", "export-spec", "project-render", "project-write-narratives", "roadmap-render", "rule-map", "spec-render", "spec-reconstruct", "spec-validate", "code-structure-validate", "pack-migrate-skills", "pack-migrate-rules", "pack-migrate-strategies", "pack-migrate-patterns", "pack-migrate-swarm-spec", "policy-set", "setup-ghx", "scope-undo", "scope-demote", "scope-decompose", "changelog-resolve-unreleased", "architecture-preflight-sor", "feedback-file", "value-readback", "product-signal", "freshness-report", "decision-write", "decision-list", "docs-impact", "tutorial", "migrate-clause-ids", "migrate-confidence", "rule-to-verb-parity"];
 /** Colon aliases for triage-actions (mirrors cli-router SUBCOMMAND_ROUTES). */
 export declare const TRIAGE_ACTION_ALIAS_SUBCOMMANDS: Readonly<Record<string, string>>;
 /** Colon aliases for policy subcommands (mirrors cli-router SUBCOMMAND_ROUTES). */
@@ -23,6 +23,8 @@ export declare const AUTHZ_ACTION_ALIAS_SUBCOMMANDS: Readonly<Record<string, str
 export declare const ESCALATION_ACTION_ALIAS_SUBCOMMANDS: Readonly<Record<string, string>>;
 /** Colon aliases for plan-sequence subcommands (#2402). */
 export declare const PLAN_SEQUENCE_ALIAS_SUBCOMMANDS: Readonly<Record<string, string>>;
+/** Colon aliases for the Directive Tutorial (#4981). */
+export declare const TUTORIAL_ALIAS_SUBCOMMANDS: Readonly<Record<string, string>>;
 /** Colon aliases for product-signal subcommands (#2693). */
 export declare const PRODUCT_SIGNAL_ALIAS_SUBCOMMANDS: Readonly<Record<string, string>>;
 /** Colon aliases for freshness subcommands (#3117). */
@@ -177,12 +179,13 @@ export declare function printCommandsList(io?: DispatchIo): void;
  * (#2172). Preserves the init/update/doctor first-run guidance from #2273.
  */
 export declare function printHelp(io?: DispatchIo): void;
+export type UnknownColonHintContext = "framework" | "include-only" | "no-taskfile" | "unknown";
 /**
- * Unknown-colon-verb remediation (#3439 / #2652).
- * Agent-facing spelling is `deft <verb>` (works on consumer CLI and source).
- * Bare `task <verb>` is not consumer-runnable on include-only Taskfiles.
+ * Unknown-colon-verb remediation (#3439 / #2652 / #5521).
+ * Never re-suggest the failing `deft <verb>` spelling. Prefer Taskfile
+ * dual-invoke forms when known; demote hyphen stems; no `task --list` shell-out.
  */
-export declare function unknownColonVerbHint(verb: string): string;
+export declare function unknownColonVerbHint(verb: string, context?: UnknownColonHintContext): string;
 /** Dispatch argv to a registered verb; returns the handler exit code. */
 export declare function dispatch(argv: string[], io?: DispatchIo): Promise<number>;
 /** Test seam: reset lazy handler cache between cases. */

package/dist/dispatch.js

@@ -243,8 +243,10 @@ export const CORE_MODULE_VERBS = [
     "decision-write",
     "decision-list",
     "docs-impact",
+    "tutorial",
     "migrate-clause-ids",
     "migrate-confidence",
+    "rule-to-verb-parity",
 ];
 /** Colon aliases for triage-actions (mirrors cli-router SUBCOMMAND_ROUTES). */
 export const TRIAGE_ACTION_ALIAS_SUBCOMMANDS = {
@@ -300,6 +302,20 @@ export const PLAN_SEQUENCE_ALIAS_SUBCOMMANDS = {
     "plan-sequence:advance": "advance",
 };
 const PLAN_SEQUENCE_COLON_ALIASES = Object.fromEntries(Object.keys(PLAN_SEQUENCE_ALIAS_SUBCOMMANDS).map((alias) => [alias, "plan-sequence"]));
+/** Colon aliases for the Directive Tutorial (#4981). */
+export const TUTORIAL_ALIAS_SUBCOMMANDS = {
+    "tutorial:offer": "offer",
+    "tutorial:start": "start",
+    "tutorial:inspect": "inspect",
+    "tutorial:advance": "advance",
+    "tutorial:resume": "resume",
+    "tutorial:skip": "skip",
+    "tutorial:leave": "leave",
+    "tutorial:reset": "reset",
+    "tutorial:decline": "decline",
+    "tutorial:defer": "defer",
+};
+const TUTORIAL_COLON_ALIASES = Object.fromEntries(Object.keys(TUTORIAL_ALIAS_SUBCOMMANDS).map((alias) => [alias, "tutorial"]));
 /** Colon aliases for product-signal subcommands (#2693). */
 export const PRODUCT_SIGNAL_ALIAS_SUBCOMMANDS = {
     "product-signal:status": "status",
@@ -391,6 +407,7 @@ export const VERB_ALIASES = {
     "validate:links": "validate-links",
     "verify:rule-ownership": "rule-ownership-lint",
     "rule:ownership-lint": "rule-ownership-lint",
+    "verify:rule-to-verb-parity": "rule-to-verb-parity",
     "verify:biome-config": "verify-biome-config",
     "verify:contained-writes": "verify-contained-writes",
     "verify:telemetry-coverage": "verify-telemetry-coverage",
@@ -414,6 +431,7 @@ export const VERB_ALIASES = {
     "verify:session-ritual": "verify-session-ritual",
     "verify:plan-sequence": "verify-plan-sequence",
     ...PLAN_SEQUENCE_COLON_ALIASES,
+    ...TUTORIAL_COLON_ALIASES,
     "verify-strategy-output": "validate-strategy-output",
     "validate:strategy-output": "validate-strategy-output",
     "verify:codebase-map-fresh": "codebase-map-fresh",
@@ -2469,6 +2487,10 @@ async function loadCoreModuleHandler(verb, io) {
             const { mainEntry } = await import("@deftai/directive-core/dist/intake/github-body-cli.js");
             return mainEntry;
         }
+        case "rule-to-verb-parity": {
+            const { mainEntry } = await import("@deftai/directive-core/dist/check/rule-to-verb-parity.js");
+            return mainEntry;
+        }
         case "issue-emit": {
             const { mainEntry } = await import("@deftai/directive-core/dist/intake/issue-emit-cli.js");
             return mainEntry;
@@ -2656,6 +2678,10 @@ async function loadCoreModuleHandler(verb, io) {
             const { docsImpactMain } = await import("@deftai/directive-core/dist/docs/docs-impact.js");
             return (argv) => docsImpactMain(argv);
         }
+        case "tutorial": {
+            const { tutorialMain } = await import("@deftai/directive-core/dist/tutorial/cli.js");
+            return tutorialMain;
+        }
         case "migrate-clause-ids": {
             const { mainEntry } = await import("@deftai/directive-core/dist/xbrief-migrate/clause-ids.js");
             return (argv) => mainEntry(argv);
@@ -2729,6 +2755,21 @@ const SCOPE_COMMAND_NAMES = [
     "scope:record-observable-scope",
     "scope:record-intent-constraint",
 ];
+/**
+ * Static dual-invoke set for scm:body:* (#5521). Mirror of
+ * packages/cli/src/cli-router/route-argv.ts SCM_BODY_COLON_VERBS — kept here
+ * so dispatch does not import route-argv (route-argv already imports dispatch).
+ */
+const SCM_BODY_DUAL_INVOKE_VERBS = new Set([
+    "scm:body:issue:create",
+    "scm:body:issue:edit",
+    "scm:body:issue:fetch",
+    "scm:body:issue:lint",
+    "scm:body:comment:create",
+    "scm:body:comment:edit",
+    "scm:body:pr:edit",
+    "scm:body:pr:lint",
+]);
 /**
  * Deduplicated command names for `directive commands`, preferring colon-style
  * task verbs over dash-style canonical stems when both exist (#2172).
@@ -2742,6 +2783,7 @@ export function preferredCommandNames() {
             ...TOP_LEVEL_COMMAND_NAMES,
             ...SCOPE_COMMAND_NAMES,
             ...aliasKeys,
+            ...SCM_BODY_DUAL_INVOKE_VERBS,
             ...unaliasedCanonicals,
         ]),
     ].sort();
@@ -2910,20 +2952,54 @@ async function invokeHandler(handler, argv) {
 }
 const PLAN_SEQUENCE_VERBS = "set|current|clear|advance";
 /**
- * Unknown-colon-verb remediation (#3439 / #2652).
- * Agent-facing spelling is `deft <verb>` (works on consumer CLI and source).
- * Bare `task <verb>` is not consumer-runnable on include-only Taskfiles.
+ * Unknown-colon-verb remediation (#3439 / #2652 / #5521).
+ * Never re-suggest the failing `deft <verb>` spelling. Prefer Taskfile
+ * dual-invoke forms when known; demote hyphen stems; no `task --list` shell-out.
  */
-export function unknownColonVerbHint(verb) {
+export function unknownColonVerbHint(verb, context = "unknown") {
     if (verb.startsWith("plan-sequence:") && !(verb in PLAN_SEQUENCE_ALIAS_SUBCOMMANDS)) {
         return (`hint: plan-sequence verbs are ${PLAN_SEQUENCE_VERBS} ` +
             `(e.g. \`deft plan-sequence:current\`). '${verb}' is not a verb. ` +
             `Do not run bare \`task ${verb}\` -- consumer include-only Taskfiles cannot resolve it.\n`);
     }
     const hyphen = verb.replaceAll(":", "-");
-    return (`hint: try \`deft ${verb}\` (CLI) or \`task deft:${verb}\` (consumer Taskfile). ` +
-        `Bare \`task ${verb}\` does not exist on include-only deposits. ` +
-        `Hyphen stem: ${hyphen}.\n`);
+    const hyphenNote = `Hyphen stem \`${hyphen}\` is not primary recovery.`;
+    const listing = "List registered CLI verbs with `deft commands`.";
+    if (SCM_BODY_DUAL_INVOKE_VERBS.has(verb)) {
+        if (context === "include-only") {
+            return (`hint: try \`task deft:${verb}\` (consumer include Taskfile). ` +
+                `Bare \`task ${verb}\` is framework-only. ${hyphenNote} ${listing}\n`);
+        }
+        if (context === "no-taskfile") {
+            return (`hint: Taskfile recovery is unavailable here. ` +
+                `On a framework checkout with go-task: \`task ${verb}\`; ` +
+                `on an include-only deposit: \`task deft:${verb}\`. ${hyphenNote} ${listing}\n`);
+        }
+        if (context === "framework") {
+            return (`hint: try \`task ${verb}\` (framework Taskfile) or \`task deft:${verb}\` (consumer include). ` +
+                `${hyphenNote} ${listing}\n`);
+        }
+        return (`hint: if go-task is available, try \`task ${verb}\` (framework) or ` +
+            `\`task deft:${verb}\` (consumer include) — Taskfile recovery is conditional. ` +
+            `${hyphenNote} ${listing}\n`);
+    }
+    if (context === "include-only") {
+        return (`hint: do not retry the same \`deft ${verb}\` spelling. ` +
+            `If a Taskfile task exists, try \`task deft:${verb}\` (include-only). ` +
+            `${hyphenNote} ${listing}\n`);
+    }
+    if (context === "no-taskfile") {
+        return (`hint: do not retry the same \`deft ${verb}\` spelling. ` +
+            `Taskfile recovery is unavailable here. ${hyphenNote} ${listing}\n`);
+    }
+    if (context === "framework") {
+        return (`hint: do not retry the same \`deft ${verb}\` spelling. ` +
+            `If a Taskfile task exists, try \`task ${verb}\` (framework) or \`task deft:${verb}\` (include). ` +
+            `${hyphenNote} ${listing}\n`);
+    }
+    return (`hint: do not retry the same \`deft ${verb}\` spelling. ` +
+        `If a Taskfile task exists, try \`task ${verb}\` (framework) or \`task deft:${verb}\` (include) — ` +
+        `Taskfile recovery is conditional. ${hyphenNote} ${listing}\n`);
 }
 function versionBanner() {
     return `${identityBanner()}\n`;
@@ -2957,6 +3033,7 @@ export async function dispatch(argv, io = defaultIo()) {
         const authzSubcommand = verb !== undefined ? AUTHZ_ACTION_ALIAS_SUBCOMMANDS[verb] : undefined;
         const escalationSubcommand = verb !== undefined ? ESCALATION_ACTION_ALIAS_SUBCOMMANDS[verb] : undefined;
         const planSequenceSubcommand = verb !== undefined ? PLAN_SEQUENCE_ALIAS_SUBCOMMANDS[verb] : undefined;
+        const tutorialSubcommand = verb !== undefined ? TUTORIAL_ALIAS_SUBCOMMANDS[verb] : undefined;
         const productSignalSubcommand = verb !== undefined ? PRODUCT_SIGNAL_ALIAS_SUBCOMMANDS[verb] : undefined;
         const freshnessSubcommand = verb !== undefined ? FRESHNESS_ALIAS_SUBCOMMANDS[verb] : undefined;
         const vbriefValidateSubcommand = verb === "verify:vbrief-conformance" && canonical === "vbrief-validate"
@@ -2974,13 +3051,15 @@ export async function dispatch(argv, io = defaultIo()) {
                             ? [escalationSubcommand, ...rest]
                             : planSequenceSubcommand !== undefined && canonical === "plan-sequence"
                                 ? [planSequenceSubcommand, ...rest]
-                                : productSignalSubcommand !== undefined && canonical === "product-signal"
-                                    ? [productSignalSubcommand, ...rest]
-                                    : freshnessSubcommand !== undefined && canonical === "freshness-report"
-                                        ? [freshnessSubcommand, ...rest]
-                                        : vbriefValidateSubcommand !== undefined
-                                            ? [vbriefValidateSubcommand, ...rest]
-                                            : rest;
+                                : tutorialSubcommand !== undefined && canonical === "tutorial"
+                                    ? [tutorialSubcommand, ...rest]
+                                    : productSignalSubcommand !== undefined && canonical === "product-signal"
+                                        ? [productSignalSubcommand, ...rest]
+                                        : freshnessSubcommand !== undefined && canonical === "freshness-report"
+                                            ? [freshnessSubcommand, ...rest]
+                                            : vbriefValidateSubcommand !== undefined
+                                                ? [vbriefValidateSubcommand, ...rest]
+                                                : rest;
         const helpRc = interceptHelp(canonical.replaceAll("-", "_"), handlerArgv, {
             write: io.writeOut,
         });

package/dist/preflight-gh.d.ts

@@ -7,6 +7,8 @@ interface ParsedArgs {
     quiet?: boolean;
     error?: string;
 }
+/** Typed-only deliveryBranch union for CLI-seeded DEFAULT_BRANCHES (#5520). */
+export declare function enrichBranchesWithTypedDelivery(projectRoot: string | undefined, branches: ReadonlySet<string>): Set<string>;
 export declare function parseArgs(argv: string[]): ParsedArgs;
 export declare function run(argv: string[]): number | Promise<number>;
 export {};

package/dist/preflight-gh.js

@@ -13,7 +13,19 @@
  */
 import { createInterface } from "node:readline";
 import { fileURLToPath } from "node:url";
+import { resolveDeliveryBranch } from "@deftai/directive-core/policy";
 import { DEFAULT_BRANCHES, evaluateCommand, evaluatePrePush, parsePrePushStdin, runSelfTest, } from "@deftai/directive-core/preflight";
+/** Typed-only deliveryBranch union for CLI-seeded DEFAULT_BRANCHES (#5520). */
+export function enrichBranchesWithTypedDelivery(projectRoot, branches) {
+    const next = new Set(branches);
+    if (projectRoot === undefined || projectRoot.length === 0)
+        return next;
+    const delivery = resolveDeliveryBranch(projectRoot);
+    if (delivery.source === "typed" && delivery.error === null && delivery.branch.trim().length > 0) {
+        next.add(delivery.branch);
+    }
+    return next;
+}
 export function parseArgs(argv) {
     const parsed = { defaultBranches: new Set(DEFAULT_BRANCHES) };
     for (let i = 0; i < argv.length; i++) {
@@ -66,7 +78,8 @@ export function run(argv) {
         return 2;
     }
     const quiet = args.quiet ?? false;
-    const branches = args.defaultBranches ?? new Set(DEFAULT_BRANCHES);
+    // CLI seeds DEFAULT_BRANCHES; union typed delivery when --project-root is set (#5520).
+    const branches = enrichBranchesWithTypedDelivery(args.projectRoot, args.defaultBranches ?? new Set(DEFAULT_BRANCHES));
     if (args.mode === "self-test") {
         const [code, msg] = runSelfTest();
         if (code === 0) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deftai/directive",
-  "version": "0.124.0",
+  "version": "0.125.1",
   "description": "Directive CLI — npm install path for the Deft Directive framework.",
   "license": "MIT",
   "homepage": "https://deftai.github.io/directive/",
@@ -35,8 +35,8 @@
     "provenance": true
   },
   "dependencies": {
-    "@deftai/directive-core": "^0.124.0",
-    "@deftai/directive-content": "^0.124.0"
+    "@deftai/directive-core": "^0.125.1",
+    "@deftai/directive-content": "^0.125.1"
   },
   "scripts": {
     "build": "tsc -b",