@deftai/directive 0.126.2 → 0.128.0

package/dist/verify-review-monitor.js

@@ -1,362 +0,0 @@
-#!/usr/bin/env node
-import { resolve } from "node:path";
-import { fileURLToPath } from "node:url";
-import { bindLivePhaseCorrectWait, evaluateMergePathArm, } from "@deftai/directive-core/dist/pr-watch/main.js";
-import { evaluateApproach1ArmStartup } from "@deftai/directive-core/orchestration";
-import { EXIT_CONFIG_ERROR, EXIT_NOT_READY, evaluateReviewMonitorGate, formatApproach1BabysitterOneLiner, isTier1, REVIEW_MONITOR_HELP, spawnRedirect, verifyResultToJson, } from "@deftai/directive-core/review-monitor";
-import { writeMergePathExplicitFinishAttestation } from "@deftai/directive-core/swarm";
-const CALL_SITES = new Set([
-    "solo",
-    "swarm-phase5-6",
-    "swarm-phase6-cascade",
-    "unspecified",
-]);
-export function parseVerifyReviewMonitorArgs(argv) {
-    const acc = {
-        pr: null,
-        projectRoot: ".",
-        repo: null,
-        headSha: null,
-        callSite: "unspecified",
-        approach3: false,
-        approach3Warned: false,
-        emitJson: false,
-        mergePathArm: false,
-        liveWait: false,
-        explicitFinish: false,
-        mintGateBlocked: false,
-        reason: null,
-        stickyLease: false,
-        dispatchStartedAt: null,
-        help: false,
-    };
-    for (let i = 0; i < argv.length; i += 1) {
-        const arg = argv[i];
-        if (arg === "--help" || arg === "-h") {
-            return { ...acc, help: true };
-        }
-        if (arg === "--json") {
-            acc.emitJson = true;
-        }
-        else if (arg === "--merge-path-arm") {
-            acc.mergePathArm = true;
-        }
-        else if (arg === "--live-wait") {
-            acc.liveWait = true;
-        }
-        else if (arg === "--explicit-finish") {
-            acc.explicitFinish = true;
-        }
-        else if (arg === "--mint-gate-blocked") {
-            acc.mintGateBlocked = true;
-        }
-        else if (arg === "--reason") {
-            const value = argv[i + 1];
-            if (value === undefined) {
-                return { ...acc, error: "argument --reason: expected one argument" };
-            }
-            acc.reason = value;
-            i += 1;
-        }
-        else if (arg?.startsWith("--reason=")) {
-            acc.reason = arg.slice("--reason=".length);
-        }
-        else if (arg === "--sticky-lease") {
-            acc.stickyLease = true;
-        }
-        else if (arg === "--dispatch-started-at") {
-            const value = argv[i + 1];
-            if (value === undefined) {
-                return { ...acc, error: "argument --dispatch-started-at: expected one argument" };
-            }
-            acc.dispatchStartedAt = value;
-            i += 1;
-        }
-        else if (arg?.startsWith("--dispatch-started-at=")) {
-            acc.dispatchStartedAt = arg.slice("--dispatch-started-at=".length);
-        }
-        else if (arg === "--approach3") {
-            acc.approach3 = true;
-        }
-        else if (arg === "--approach3-warned") {
-            acc.approach3Warned = true;
-        }
-        else if (arg === "--pr") {
-            const value = argv[i + 1];
-            if (value === undefined) {
-                return { ...acc, error: "argument --pr: expected one argument" };
-            }
-            const n = Number(value);
-            if (!Number.isInteger(n) || n <= 0) {
-                return { ...acc, error: `invalid --pr value: ${value}` };
-            }
-            acc.pr = n;
-            i += 1;
-        }
-        else if (arg?.startsWith("--pr=")) {
-            const n = Number(arg.slice("--pr=".length));
-            if (!Number.isInteger(n) || n <= 0) {
-                return { ...acc, error: `invalid --pr value: ${arg}` };
-            }
-            acc.pr = n;
-        }
-        else if (arg === "--repo") {
-            const value = argv[i + 1];
-            if (value === undefined) {
-                return { ...acc, error: "argument --repo: expected one argument" };
-            }
-            acc.repo = value;
-            i += 1;
-        }
-        else if (arg?.startsWith("--repo=")) {
-            acc.repo = arg.slice("--repo=".length);
-        }
-        else if (arg === "--head-sha") {
-            const value = argv[i + 1];
-            if (value === undefined) {
-                return { ...acc, error: "argument --head-sha: expected one argument" };
-            }
-            acc.headSha = value;
-            i += 1;
-        }
-        else if (arg?.startsWith("--head-sha=")) {
-            acc.headSha = arg.slice("--head-sha=".length);
-        }
-        else if (arg === "--project-root") {
-            const value = argv[i + 1];
-            if (value === undefined) {
-                return { ...acc, error: "argument --project-root: expected one argument" };
-            }
-            acc.projectRoot = value;
-            i += 1;
-        }
-        else if (arg?.startsWith("--project-root=")) {
-            acc.projectRoot = arg.slice("--project-root=".length);
-        }
-        else if (arg === "--call-site") {
-            const value = argv[i + 1];
-            if (value === undefined) {
-                return { ...acc, error: "argument --call-site: expected one argument" };
-            }
-            if (!CALL_SITES.has(value)) {
-                return { ...acc, error: `invalid --call-site: ${value}` };
-            }
-            acc.callSite = value;
-            i += 1;
-        }
-        else if (arg?.startsWith("--call-site=")) {
-            const value = arg.slice("--call-site=".length);
-            if (!CALL_SITES.has(value)) {
-                return { ...acc, error: `invalid --call-site: ${value}` };
-            }
-            acc.callSite = value;
-        }
-        else if (arg?.startsWith("-")) {
-            return { ...acc, error: `unrecognized argument: ${arg}` };
-        }
-        else {
-            return { ...acc, error: `unrecognized argument: ${arg}` };
-        }
-    }
-    return acc;
-}
-export function run(argv) {
-    const args = parseVerifyReviewMonitorArgs(argv);
-    if (args.help) {
-        process.stdout.write(REVIEW_MONITOR_HELP);
-        process.stdout.write("\n#4882 / #5020 / #5219 merge-path arm observer (optional):\n" +
-            "  --merge-path-arm       Fail closed when neither live wait nor explicit finish\n" +
-            "  --live-wait            Require still-running wait evidence for this PR\n" +
-            "                         (Tier 1: lease + active polling heartbeat with pid liveness;\n" +
-            "                         lease+flag alone is not armed — #5020).\n" +
-            "                         On spawn_subagent hosts, lease platform_primitive must be\n" +
-            "                         spawn_subagent and heartbeat parent_id must match the lease\n" +
-            "                         monitor_agent_id, or pr-wait-mergeable only after local\n" +
-            "                         pr:watch CLEAN attestation — #5219;\n" +
-            "                         parent-shell pr:watch (parent_id=pr-watch) does not arm.\n" +
-            "  --explicit-finish      Attest option-C BLOCKED/FAILED finish for this PR\n" +
-            "  --mint-gate-blocked    Refuse --explicit-finish write for product mint-gate\n" +
-            "                         BLOCKED (non-option-C; #5690)\n" +
-            "  --reason TEXT          Attestation reason; mint markers also refuse write (#5690)\n" +
-            "  --sticky-lease         Attest a fresh sticky lease (not sufficient alone)\n" +
-            "  --dispatch-started-at  DeliveryAttemptRecord.startedAt ISO for Approach 1\n" +
-            "                         arm-startup halt (#5278); when merge-path-arm stays\n" +
-            "                         red past the 3m allowance, emit approach1-arm-startup.\n" +
-            "  Prefer Approach 1 / native pr:watch --monitor-agent-id <id> or post-CLEAN\n" +
-            "  pr:wait-mergeable-and-merge; homemade line-parsed --json is not an arm.\n");
-        return 0;
-    }
-    if (args.error !== undefined) {
-        process.stderr.write(`verify_review_monitor: ${args.error}\n`);
-        process.stderr.write("Try: task verify:review-monitor -- --help\n");
-        return 2;
-    }
-    if (args.pr === null) {
-        process.stderr.write("verify_review_monitor: --pr is required\n");
-        process.stderr.write("Try: task verify:review-monitor -- --help\n");
-        return 2;
-    }
-    // Always evaluate the gate first so --project-root / repo config errors stay
-    // exit 2 even when --merge-path-arm would otherwise fail closed as unarmed.
-    const result = evaluateReviewMonitorGate({
-        pr: args.pr,
-        projectRoot: resolve(args.projectRoot),
-        repo: args.repo,
-        headSha: args.headSha,
-        callSite: args.callSite,
-        approach3: args.approach3,
-        approach3Warned: args.approach3Warned,
-        environ: process.env,
-    });
-    let arm = null;
-    if (args.mergePathArm) {
-        // Durable option-C attestation for cohort inventory halted-explicit (#5318).
-        // Do not write (or arm from) --explicit-finish when the monitor gate is a config error,
-        // and fail closed if the durable write itself fails.
-        let explicitFinishDurable = false;
-        if (args.explicitFinish) {
-            if (result.exitCode === EXIT_CONFIG_ERROR) {
-                explicitFinishDurable = false;
-            }
-            else {
-                const written = writeMergePathExplicitFinishAttestation(resolve(args.projectRoot), args.pr, {
-                    source: "verify:review-monitor --explicit-finish",
-                    reason: args.reason ?? undefined,
-                    mintGateBlocked: args.mintGateBlocked,
-                });
-                if (!written.ok) {
-                    process.stderr.write(`verify_review_monitor: ${written.reason}
-`);
-                    return EXIT_CONFIG_ERROR;
-                }
-                explicitFinishDurable = true;
-            }
-        }
-        // Bind --live-wait to lease (#5018) + process-liveness heartbeat (#5020) on Tier 1.
-        // spawn_subagent identity join is already applied in evaluateReviewMonitorGate (#5219).
-        const leaseEvidence = result.monitorRecord !== null;
-        const liveBind = bindLivePhaseCorrectWait({
-            liveWaitFlag: args.liveWait,
-            tierIs1: isTier1(result.tier),
-            leaseEvidence,
-            heartbeatActive: result.heartbeatActive,
-            pr: args.pr,
-        });
-        arm = evaluateMergePathArm({
-            livePhaseCorrectWait: liveBind.livePhaseCorrectWait,
-            explicitFinish: explicitFinishDurable,
-            stickyLeaseActive: args.stickyLease || leaseEvidence,
-        });
-        if (args.liveWait && !liveBind.livePhaseCorrectWait && !args.explicitFinish && !arm.armed) {
-            const spawnHost = result.tier.primitive === "spawn_subagent";
-            const lease = result.monitorRecord;
-            let message = liveBind.message;
-            if (spawnHost && lease !== null && lease.platform_primitive !== "spawn_subagent") {
-                message =
-                    `unarmed stand-down: Tier-1 spawn_subagent requires lease ` +
-                        `platform_primitive=spawn_subagent for PR #${args.pr} (#5219); ` +
-                        `got ${lease.platform_primitive}.\n` +
-                        `  ${spawnRedirect(result.tier)}`;
-            }
-            else if (spawnHost &&
-                lease !== null &&
-                lease.platform_primitive === "spawn_subagent" &&
-                liveBind.reason === "missing_process_liveness") {
-                message =
-                    `unarmed stand-down: --live-wait for PR #${args.pr} has spawn_subagent lease ` +
-                        `(monitor_agent_id=${lease.monitor_agent_id}) but no child-bound wait identity ` +
-                        `(heartbeat parent_id must match monitor_agent_id, or pr-wait-mergeable after ` +
-                        `pr:watch CLEAN attestation; start child pr:watch before verify; ` +
-                        `parent-shell pr:watch does not arm) (#5219).\n` +
-                        `  Cheaper path:\n` +
-                        `  ${formatApproach1BabysitterOneLiner(args.pr, lease.monitor_agent_id)}\n` +
-                        `  ${spawnRedirect(result.tier)}`;
-            }
-            else if (message === null) {
-                message = arm.message;
-            }
-            arm = {
-                armed: false,
-                reason: "unarmed_stand_down",
-                message,
-            };
-        }
-    }
-    // Approach 1 arm-startup halt (#5278 P3): production caller for evaluateApproach1ArmStartup.
-    let armStartupHalt = null;
-    if (args.mergePathArm &&
-        args.dispatchStartedAt !== null &&
-        args.dispatchStartedAt.trim().length > 0 &&
-        arm !== null &&
-        !arm.armed &&
-        !args.explicitFinish) {
-        armStartupHalt = evaluateApproach1ArmStartup({
-            dispatchStartedAt: args.dispatchStartedAt,
-            probeReady: false,
-        });
-        if (armStartupHalt.halt && armStartupHalt.message.length > 0) {
-            arm = {
-                armed: false,
-                reason: "unarmed_stand_down",
-                message: `${arm.message}\n${armStartupHalt.message}`,
-            };
-        }
-    }
-    if (args.emitJson) {
-        const payload = verifyResultToJson(result);
-        if (arm !== null) {
-            payload.merge_path_arm = {
-                armed: arm.armed,
-                reason: arm.reason,
-                message: arm.message,
-                live_wait: args.liveWait,
-                explicit_finish: args.explicitFinish,
-                sticky_lease: args.stickyLease,
-                lease_evidence: result.monitorRecord !== null,
-                heartbeat_active: result.heartbeatActive,
-            };
-            if (armStartupHalt !== null) {
-                payload.approach1_arm_startup = {
-                    halt: armStartupHalt.halt,
-                    halt_class: armStartupHalt.halt_class,
-                    elapsed_seconds: armStartupHalt.elapsed_seconds,
-                    message: armStartupHalt.message,
-                };
-            }
-            // Combined gate+arm: unarmed fails closed even when the monitor gate is ready.
-            if (!arm.armed && result.exitCode !== EXIT_CONFIG_ERROR) {
-                payload.ready = false;
-                payload.exit_code = EXIT_NOT_READY;
-                // Gate-ready → arm diagnosis; both failing → keep both messages.
-                payload.message = result.exitCode === 0 ? arm.message : `${result.message}\n${arm.message}`;
-            }
-        }
-        process.stdout.write(`${JSON.stringify(payload, null, 2)}\n`);
-    }
-    else if (result.exitCode === EXIT_CONFIG_ERROR) {
-        process.stderr.write(`${result.message}\n`);
-    }
-    else if (arm !== null && !arm.armed) {
-        process.stderr.write(`${arm.message}\n`);
-    }
-    else if (result.exitCode === 0) {
-        process.stdout.write(`${result.message}\n`);
-        if (arm !== null) {
-            process.stdout.write(`${arm.message}\n`);
-        }
-    }
-    else {
-        process.stderr.write(`${result.message}\n`);
-    }
-    if (result.exitCode === EXIT_CONFIG_ERROR) {
-        return EXIT_CONFIG_ERROR;
-    }
-    if (arm !== null && !arm.armed) {
-        return EXIT_NOT_READY;
-    }
-    return result.exitCode;
-}
-if (process.argv[1] !== undefined && fileURLToPath(import.meta.url) === process.argv[1]) {
-    process.exit(run(process.argv.slice(2)));
-}
-//# sourceMappingURL=verify-review-monitor.js.map

package/dist/verify-scope-provenance.d.ts

@@ -1,16 +0,0 @@
-#!/usr/bin/env node
-/** Stderr line when argv includes `--enforce`. Exit code is unchanged. */
-export declare const ENFORCE_NOOP_NOTICE = "verify_scope_provenance: --enforce has no effect after #4956 / #5002";
-interface ParsedArgs {
-    projectRoot: string;
-    baseRef: string;
-    enforce: boolean;
-    /** Raw `--enforce` token present, even when a later `--warn` wins `enforce`. */
-    enforcePresent: boolean;
-    quiet: boolean;
-    error?: string;
-}
-export declare function parseArgs(argv: string[]): ParsedArgs;
-export declare function run(argv: string[]): number;
-export {};
-//# sourceMappingURL=verify-scope-provenance.d.ts.map

package/dist/verify-scope-provenance.js

@@ -1,91 +0,0 @@
-#!/usr/bin/env node
-/**
- * CLI for verify:scope-provenance (#3145 / #4956 / #4774 / #5057).
- *
- * Membership against the declared allowlist (mint / brief file_scope) is
- * evaluated inside evaluateScopeProvenance. This CLI forwards --base-ref.
- * `--enforce` / `--warn` stay parsed for compatibility; `--enforce` is a
- * no-op after #4956 / #5002 and prints a stderr notice when present.
- */
-import { resolve } from "node:path";
-import { scopeProvenance } from "@deftai/directive-core";
-import { isDirectEntrypoint } from "./entrypoint.js";
-/** Stderr line when argv includes `--enforce`. Exit code is unchanged. */
-export const ENFORCE_NOOP_NOTICE = "verify_scope_provenance: --enforce has no effect after #4956 / #5002";
-export function parseArgs(argv) {
-    const parsed = {
-        projectRoot: ".",
-        // Empty means use PR-aware default (origin/master...), not bare HEAD.
-        baseRef: "",
-        enforce: false,
-        enforcePresent: false,
-        quiet: false,
-    };
-    for (let i = 0; i < argv.length; i += 1) {
-        const arg = argv[i];
-        if (arg === "--quiet") {
-            parsed.quiet = true;
-        }
-        else if (arg === "--enforce") {
-            parsed.enforce = true;
-            parsed.enforcePresent = true;
-        }
-        else if (arg === "--warn") {
-            parsed.enforce = false;
-        }
-        else if (arg === "--project-root") {
-            const value = argv[i + 1];
-            if (value === undefined) {
-                return { ...parsed, error: "argument --project-root: expected one argument" };
-            }
-            parsed.projectRoot = value;
-            i += 1;
-        }
-        else if (arg?.startsWith("--project-root=")) {
-            parsed.projectRoot = arg.slice("--project-root=".length);
-        }
-        else if (arg === "--base-ref") {
-            const value = argv[i + 1];
-            if (value === undefined) {
-                return { ...parsed, error: "argument --base-ref: expected one argument" };
-            }
-            parsed.baseRef = value;
-            i += 1;
-        }
-        else if (arg?.startsWith("--base-ref=")) {
-            parsed.baseRef = arg.slice("--base-ref=".length);
-        }
-        else {
-            return { ...parsed, error: `unrecognized argument: ${arg}` };
-        }
-    }
-    return parsed;
-}
-export function run(argv) {
-    const args = parseArgs(argv);
-    if (args.error !== undefined) {
-        process.stderr.write(`verify_scope_provenance: ${args.error}\n`);
-        return 2;
-    }
-    const projectRoot = resolve(args.projectRoot);
-    const result = scopeProvenance.evaluateScopeProvenance(projectRoot, {
-        ...(args.baseRef.length > 0 ? { baseRef: args.baseRef } : {}),
-        enforce: args.enforce,
-    });
-    if (args.enforcePresent) {
-        process.stderr.write(`${ENFORCE_NOOP_NOTICE}\n`);
-    }
-    if (result.exitCode === 0) {
-        if (!args.quiet) {
-            process.stdout.write(`${result.message}\n`);
-        }
-    }
-    else {
-        process.stderr.write(`${result.message}\n`);
-    }
-    return result.exitCode;
-}
-if (isDirectEntrypoint(import.meta.url)) {
-    process.exit(run(process.argv.slice(2)));
-}
-//# sourceMappingURL=verify-scope-provenance.js.map

package/dist/verify-session-ritual.d.ts

@@ -1,23 +0,0 @@
-#!/usr/bin/env node
-import { type DirectivePosture, type VerifyResult } from "@deftai/directive-core/session";
-export interface VerifySessionRitualRunDeps {
-    readonly verifySessionRitual?: (projectRoot: string, options: {
-        tier: "quick" | "gated";
-        posture?: DirectivePosture;
-    }) => VerifyResult;
-}
-interface ParsedArgs {
-    projectRoot: string;
-    tier: "quick" | "gated";
-    posture: DirectivePosture | null;
-    emitJson: boolean;
-    error?: string;
-}
-/** Parse verify-session-ritual CLI args, mirroring scripts/verify_session_ritual.py. */
-export declare function parseArgs(argv: string[]): ParsedArgs;
-/** True when the ritual failure is the gated cache_fresh step (#3506 / #3507). */
-export declare function isCacheFreshFailureMessage(message: string): boolean;
-/** Run the gate and return the process exit code. */
-export declare function run(argv: string[], deps?: VerifySessionRitualRunDeps): number;
-export {};
-//# sourceMappingURL=verify-session-ritual.d.ts.map

package/dist/verify-session-ritual.js

@@ -1,144 +0,0 @@
-#!/usr/bin/env node
-import { resolve } from "node:path";
-import { fileURLToPath } from "node:url";
-import { emitBypassWarning, emitVerifyJson, formatCacheFreshDeferSoftPath, occupancyAwareDenialMessage, verifySessionRitual, } from "@deftai/directive-core/session";
-function parsePosture(value) {
-    if (value === "read-only")
-        return "read-only";
-    if (value === "mutation" || value === "mutating")
-        return "mutation";
-    return null;
-}
-/** Parse verify-session-ritual CLI args, mirroring scripts/verify_session_ritual.py. */
-export function parseArgs(argv) {
-    const parsed = {
-        projectRoot: ".",
-        tier: "quick",
-        posture: null,
-        emitJson: false,
-    };
-    for (let i = 0; i < argv.length; i += 1) {
-        const arg = argv[i];
-        if (arg === "--") {
-            continue;
-        }
-        if (arg === "--json") {
-            parsed.emitJson = true;
-        }
-        else if (arg === "--project-root") {
-            const value = argv[i + 1];
-            if (value === undefined) {
-                return { ...parsed, error: "argument --project-root: expected one argument" };
-            }
-            parsed.projectRoot = value;
-            i += 1;
-        }
-        else if (arg?.startsWith("--project-root=")) {
-            parsed.projectRoot = arg.slice("--project-root=".length);
-        }
-        else if (arg === "--tier") {
-            const value = argv[i + 1];
-            if (value === undefined) {
-                return { ...parsed, error: "argument --tier: expected one argument" };
-            }
-            if (value !== "quick" && value !== "gated") {
-                return { ...parsed, error: `argument --tier: invalid choice: '${value}'` };
-            }
-            parsed.tier = value;
-            i += 1;
-        }
-        else if (arg?.startsWith("--tier=")) {
-            const value = arg.slice("--tier=".length);
-            if (value !== "quick" && value !== "gated") {
-                return { ...parsed, error: `argument --tier: invalid choice: '${value}'` };
-            }
-            parsed.tier = value;
-        }
-        else if (arg === "--posture") {
-            const value = argv[i + 1];
-            if (value === undefined) {
-                return { ...parsed, error: "argument --posture: expected one argument" };
-            }
-            const posture = parsePosture(value);
-            if (posture === null) {
-                return {
-                    ...parsed,
-                    error: `argument --posture: invalid choice: '${value}' (expected read-only|mutation)`,
-                };
-            }
-            parsed.posture = posture;
-            i += 1;
-        }
-        else if (arg?.startsWith("--posture=")) {
-            const value = arg.slice("--posture=".length);
-            const posture = parsePosture(value);
-            if (posture === null) {
-                return {
-                    ...parsed,
-                    error: `argument --posture: invalid choice: '${value}' (expected read-only|mutation)`,
-                };
-            }
-            parsed.posture = posture;
-        }
-        else {
-            const error = `unrecognized argument: ${arg}`;
-            if (arg === "--session-id" || arg?.startsWith("--session-id=")) {
-                return {
-                    ...parsed,
-                    error: `${error} Drop the flag and retry deft verify:session-ritual -- --tier=gated.`,
-                };
-            }
-            return { ...parsed, error };
-        }
-    }
-    return parsed;
-}
-/** True when the ritual failure is the gated cache_fresh step (#3506 / #3507). */
-export function isCacheFreshFailureMessage(message) {
-    return message.includes("cache_fresh") || message.includes("cache-fresh");
-}
-/** Run the gate and return the process exit code. */
-export function run(argv, deps = {}) {
-    const args = parseArgs(argv);
-    if (args.error !== undefined) {
-        process.stderr.write(`verify_session_ritual: ${args.error}\n`);
-        return 2;
-    }
-    const projectRoot = resolve(args.projectRoot);
-    const verify = deps.verifySessionRitual ?? verifySessionRitual;
-    const result = verify(projectRoot, {
-        tier: args.tier,
-        posture: args.posture ?? undefined,
-    });
-    const warning = emitBypassWarning(result);
-    const warningNeeded = result.bypassed && result.wouldFailCode !== null;
-    if (args.emitJson) {
-        process.stdout.write(`${emitVerifyJson(result)}\n`);
-    }
-    else if (result.code === 0) {
-        if (!warningNeeded) {
-            process.stdout.write(`${result.message}\n`);
-        }
-    }
-    else if (result.code === 1) {
-        const recoveryTier = result.recoveryTier ?? "cold";
-        const lines = [
-            occupancyAwareDenialMessage(projectRoot, result.message, { env: process.env }, recoveryTier),
-        ];
-        if (isCacheFreshFailureMessage(result.message)) {
-            lines.push(formatCacheFreshDeferSoftPath());
-        }
-        process.stderr.write(`${lines.join("\n")}\n`);
-    }
-    else {
-        process.stderr.write(`${result.message}\n`);
-    }
-    if (warning.length > 0) {
-        process.stderr.write(`${warning}\n`);
-    }
-    return result.code;
-}
-if (process.argv[1] !== undefined && fileURLToPath(import.meta.url) === process.argv[1]) {
-    process.exit(run(process.argv.slice(2)));
-}
-//# sourceMappingURL=verify-session-ritual.js.map

package/dist/verify-source-cli/rule-ownership-lint.d.ts

@@ -1,12 +0,0 @@
-#!/usr/bin/env node
-interface ParsedArgs {
-    mapPath: string | null;
-    root: string | null;
-    error?: string;
-}
-/** Parse rule-ownership-lint CLI args, mirroring scripts/rule_ownership_lint.py. */
-export declare function parseArgs(argv: string[]): ParsedArgs;
-/** Run the gate and return the process exit code. */
-export declare function run(argv: string[]): number;
-export {};
-//# sourceMappingURL=rule-ownership-lint.d.ts.map