@deftai/directive 0.96.0 → 0.98.0

package/dist/cli-router/route-argv.js

@@ -83,6 +83,9 @@ export const SUBCOMMAND_ROUTES = {
     "policy:allow-direct-commits": ["policy", "allow-direct-commits"],
     "policy:allow-bot-merge": ["policy", "allow-bot-merge"],
     "policy:enable-value-feedback": ["policy", "enable-value-feedback"],
+    "policy:coverage-check-resume-preset": ["policy", "coverage-check-resume-preset"],
+    "policy:coverage-check-resume-dismiss": ["policy", "coverage-check-resume-dismiss"],
+    "policy:coverage-check-resume-later": ["policy", "coverage-check-resume-later"],
     "policy:clear-value-feedback": ["policy", "clear-value-feedback"],
     "authz:show": ["authz", "show"],
     "authz:uat-start": ["authz", "uat-start"],

package/dist/dispatch.d.ts

@@ -10,7 +10,7 @@ export interface DispatchIo {
     writeErr: (text: string) => void;
 }
 /** CLI modules in packages/cli/src (excluding parity harnesses and bin/index). */
-export declare const CLI_MODULE_VERBS: readonly ["agents-refresh", "cache", "check", "capacity-backfill", "capacity-show", "codebase-default-extractor", "codebase-map", "codebase-map-fresh", "codebase-projection-registry", "codebase-provider", "doctor", "install-upgrade", "install-uninstall", "migrate-preflight", "migrate-xbrief", "migrate-category-b", "framework-check-updates", "hook-dispatch", "umbrella-current-shape", "changelog-check", "change-init", "commit-lint", "coverage-hotspots", "policy", "authz", "escalation-cli", "pr-closing-keywords", "pr-merge-readiness", "pr-monitor", "pr-protected-issues", "pr-wait-mergeable", "pr-watch", "pr-finish-loop", "directive-finish-loop", "preflight-cache", "preflight-gh", "probe-session", "release", "release-e2e", "release-publish", "release-rollback", "scope-lifecycle", "lifecycle-event", "lifecycle-stats", "session-start", "session-ready", "plan-sequence", "slice", "subagent-monitor", "toolchain-check", "triage-actions", "triage-bootstrap", "triage-bulk", "triage-classify", "triage-help", "triage-queue", "triage-reconcile", "triage-refresh", "triage-scope", "triage-scope-drift", "triage-smoketest", "triage-subscribe", "triage-summary", "triage-welcome", "ts-check-lane", "vbrief-activate", "vbrief-build", "vbrief-preflight", "vbrief-reconcile", "vbrief-validate", "vbrief-validation", "xbrief-create", "xbrief-verify", "verify-branch", "verify-encoding", "verify-forward-coverage", "verify-hooks-installed", "verify-investigation", "verify-judgment-gates", "verify-no-task-runtime", "validate-links", "validate-strategy-output", "verify-biome-config", "verify-bridge-drift", "verify-capacity", "verify-contained-writes", "verify-content-manifest", "verify-skill-external-fetch-gate", "verify-contract-drift", "verify-cursor-tier1", "verify-openclaw-tier1", "verify-go-freeze", "verify-scm-boundary", "verify-session-ritual", "verify-plan-sequence", "verify-stubs", "verify-xbrief-drift", "rule-ownership-lint", "verify-story-ready", "verify-review-monitor", "verify-l4-owner", "verify-subagent-alive", "review-monitor-register", "review-monitor-release", "verify-tools", "verify-wip-cap", "verify-orphan-active", "verify-agents-md-budget", "verify-agents-md-advisory", "verify-eval-health-relocation", "verify-eval-triggers-relocation", "eval-health", "eval-run", "eval-report", "eval-triggers"];
+export declare const CLI_MODULE_VERBS: readonly ["agents-refresh", "cache", "check", "capacity-backfill", "capacity-show", "codebase-default-extractor", "codebase-map", "codebase-map-fresh", "codebase-projection-registry", "codebase-provider", "doctor", "install-upgrade", "install-uninstall", "migrate-preflight", "migrate-xbrief", "migrate-category-b", "framework-check-updates", "hook-dispatch", "umbrella-current-shape", "changelog-check", "change-init", "commit-lint", "coverage-hotspots", "policy", "authz", "escalation-cli", "pr-closing-keywords", "pr-merge-readiness", "pr-monitor", "pr-protected-issues", "pr-wait-mergeable", "pr-watch", "pr-finish-loop", "directive-finish-loop", "preflight-cache", "preflight-gh", "probe-session", "release", "release-e2e", "release-publish", "release-rollback", "scope-lifecycle", "lifecycle-event", "lifecycle-stats", "session-start", "session-ready", "plan-sequence", "slice", "subagent-monitor", "toolchain-check", "triage-actions", "triage-bootstrap", "triage-bulk", "triage-classify", "triage-help", "triage-queue", "triage-reconcile", "triage-refresh", "triage-scope", "triage-scope-drift", "triage-smoketest", "triage-subscribe", "triage-summary", "triage-welcome", "ts-check-lane", "vbrief-activate", "vbrief-build", "vbrief-preflight", "vbrief-reconcile", "vbrief-validate", "vbrief-validation", "xbrief-create", "xbrief-verify", "verify-branch", "verify-encoding", "verify-forward-coverage", "verify-test-boundary", "verify-scope-provenance", "verify-consumer-check-contract", "verify-hooks-installed", "verify-investigation", "verify-judgment-gates", "verify-no-task-runtime", "validate-links", "validate-strategy-output", "verify-biome-config", "verify-bridge-drift", "verify-capacity", "verify-contained-writes", "verify-content-manifest", "verify-skill-external-fetch-gate", "verify-contract-drift", "verify-cursor-tier1", "verify-openclaw-tier1", "verify-go-freeze", "verify-scm-boundary", "verify-session-ritual", "verify-plan-sequence", "verify-stubs", "verify-xbrief-drift", "rule-ownership-lint", "verify-story-ready", "verify-review-monitor", "verify-l4-owner", "verify-subagent-alive", "review-monitor-register", "review-monitor-release", "verify-tools", "verify-wip-cap", "verify-orphan-active", "verify-agents-md-budget", "verify-agents-md-advisory", "verify-eval-health-relocation", "verify-eval-triggers-relocation", "eval-health", "eval-run", "eval-report", "eval-triggers"];
 /** Core-only CLI entrypoints without a packages/cli wrapper. */
 export declare const CORE_MODULE_VERBS: readonly ["scm", "scm-readiness", "github-auth-modes", "github-body", "issue-emit", "issue-ingest", "issue-sync-from-xbrief", "reconcile-issues", "swarm-launch", "swarm-complete-cohort", "swarm-finalize-cohort", "swarm-readiness", "swarm-routing-verify", "swarm-routing-set", "swarm-verify-review-clean", "swarm-worktrees", "framework-commands", "pack-render", "packs-slice", "prd-render", "export-spec", "project-render", "roadmap-render", "rule-map", "spec-render", "spec-validate", "code-structure-validate", "pack-migrate-skills", "pack-migrate-rules", "pack-migrate-strategies", "pack-migrate-patterns", "pack-migrate-swarm-spec", "policy-set", "setup-ghx", "scope-undo", "scope-demote", "scope-decompose", "changelog-resolve-unreleased", "architecture-preflight-sor", "feedback-file", "value-readback", "product-signal", "freshness-report"];
 /** Colon aliases for triage-actions (mirrors cli-router SUBCOMMAND_ROUTES). */

package/dist/dispatch.js

@@ -102,6 +102,9 @@ export const CLI_MODULE_VERBS = [
     "verify-branch",
     "verify-encoding",
     "verify-forward-coverage",
+    "verify-test-boundary",
+    "verify-scope-provenance",
+    "verify-consumer-check-contract",
     "verify-hooks-installed",
     "verify-investigation",
     "verify-judgment-gates",
@@ -208,6 +211,9 @@ export const POLICY_ACTION_ALIAS_SUBCOMMANDS = {
     "policy:allow-bot-merge": "allow-bot-merge",
     "policy:enable-value-feedback": "enable-value-feedback",
     "policy:clear-value-feedback": "clear-value-feedback",
+    "policy:coverage-check-resume-preset": "coverage-check-resume-preset",
+    "policy:coverage-check-resume-dismiss": "coverage-check-resume-dismiss",
+    "policy:coverage-check-resume-later": "coverage-check-resume-later",
     "policy:disable-directive": "disable-directive",
     "policy:enable-directive": "enable-directive",
 };
@@ -259,6 +265,9 @@ export const VERB_ALIASES = {
     "hook:dispatch": "hook-dispatch",
     "verify:encoding": "verify-encoding",
     "verify:forward-coverage": "verify-forward-coverage",
+    "verify:test-boundary": "verify-test-boundary",
+    "verify:scope-provenance": "verify-scope-provenance",
+    "verify:consumer-check-contract": "verify-consumer-check-contract",
     "coverage:hotspots": "coverage-hotspots",
     "verify:branch": "verify-branch",
     "verify:vbrief-conformance": "vbrief-validate",

package/dist/policy.d.ts

@@ -7,7 +7,7 @@ interface ShowArgs {
     error?: string;
 }
 interface SetArgs {
-    cmd: "show" | "enforce-branches" | "allow-direct-commits" | "allow-bot-merge" | "enable-value-feedback" | "clear-value-feedback" | "disable-directive" | "enable-directive" | "resolve";
+    cmd: "show" | "enforce-branches" | "allow-direct-commits" | "allow-bot-merge" | "enable-value-feedback" | "clear-value-feedback" | "coverage-check-resume-preset" | "coverage-check-resume-dismiss" | "coverage-check-resume-later" | "disable-directive" | "enable-directive" | "resolve";
     confirm: boolean;
     actor: string;
     note: string;
@@ -15,6 +15,9 @@ interface SetArgs {
     format: "text" | "json";
     changedOnly: boolean;
     field: string | null;
+    /** Strict | hatch-aware for coverage-check-resume-preset; reason for dismiss. */
+    preset?: string;
+    reason?: string;
     error?: string;
 }
 /** Parse policy:show flags (mirrors _policy_show_cli.py). */

package/dist/policy.js

@@ -6,7 +6,7 @@
 import { existsSync } from "node:fs";
 import { resolve as pathResolve, relative } from "node:path";
 import { fileURLToPath } from "node:url";
-import { ALLOW_BOT_MERGE_CAPABILITY_COST, clearValueFeedback, createNoDeftDirectiveFlag, describeShadowedPlanExtension, detectNoDeftDirective, detectShadowedPlanExtensions, disclosureLine, enableValueFeedback, FIELD_VALUE_FEEDBACK, FIELD_VALUE_FEEDBACK_CLI_ALIAS, formatValueFeedbackStatusLine, humanMergeDisclosureLine, inspectAllPolicies, inspectOnePolicy, loadProjectDefinition, NO_DEFT_DIRECTIVE_DISABLED_MESSAGE, NO_DEFT_DIRECTIVE_FLAG_NAME, NO_DEFT_DIRECTIVE_INCONSISTENT_MESSAGE, policyColonInvocation, projectDefinitionPath, pythonListRepr, pythonStringRepr, registeredPolicyNames, removeNoDeftDirectiveFlag, renderJson, renderText, resolveHumanMergePolicy, resolvePolicy, resolveValueFeedback, setPolicy, setRequireHumanMerge, } from "@deftai/directive-core/policy";
+import { ALLOW_BOT_MERGE_CAPABILITY_COST, applyHatchAwareCoverageCheckResumePreset, applyLaterCoverageCheckResumeSkip, applyStrictCoverageCheckResumePreset, clearValueFeedback, createNoDeftDirectiveFlag, describeShadowedPlanExtension, detectNoDeftDirective, detectShadowedPlanExtensions, disclosureLine, dismissCoverageCheckResume, enableValueFeedback, FIELD_VALUE_FEEDBACK, FIELD_VALUE_FEEDBACK_CLI_ALIAS, formatValueFeedbackStatusLine, humanMergeDisclosureLine, inspectAllPolicies, inspectOnePolicy, loadProjectDefinition, NO_DEFT_DIRECTIVE_DISABLED_MESSAGE, NO_DEFT_DIRECTIVE_FLAG_NAME, NO_DEFT_DIRECTIVE_INCONSISTENT_MESSAGE, policyColonInvocation, projectDefinitionPath, pythonListRepr, pythonStringRepr, registeredPolicyNames, removeNoDeftDirectiveFlag, renderJson, renderText, resolveHumanMergePolicy, resolvePolicy, resolveValueFeedback, setPolicy, setRequireHumanMerge, } from "@deftai/directive-core/policy";
 const CAPABILITY_COST_DISCLOSURE = "\u26a0 Capability-cost disclosure -- enabling direct commits to the default " +
     "branch turns OFF the deft branch-protection policy.\n" +
     "  \u2022 Pre-commit + pre-push hooks will no longer block default-branch " +
@@ -114,7 +114,7 @@ export function parseShowArgs(argv) {
 /** Parse argv for the policy CLI (show + set subcommands). */
 export function parseArgs(argv) {
     if (argv.length === 0) {
-        const usage = "usage: policy [show|enforce-branches|allow-direct-commits|allow-bot-merge|enable-value-feedback|clear-value-feedback|disable-directive|enable-directive|resolve] ...";
+        const usage = "usage: policy [show|enforce-branches|allow-direct-commits|allow-bot-merge|enable-value-feedback|clear-value-feedback|coverage-check-resume-preset|coverage-check-resume-dismiss|coverage-check-resume-later|disable-directive|enable-directive|resolve] ...";
         return makeSetError(usage);
     }
     const cmd = argv[0];
@@ -151,6 +151,9 @@ export function parseArgs(argv) {
         cmd === "allow-bot-merge" ||
         cmd === "enable-value-feedback" ||
         cmd === "clear-value-feedback" ||
+        cmd === "coverage-check-resume-preset" ||
+        cmd === "coverage-check-resume-dismiss" ||
+        cmd === "coverage-check-resume-later" ||
         cmd === "disable-directive" ||
         cmd === "enable-directive") {
         let confirm = false;
@@ -164,16 +167,44 @@ export function parseArgs(argv) {
                         ? policyColonInvocation("enable-value-feedback")
                         : cmd === "clear-value-feedback"
                             ? policyColonInvocation("clear-value-feedback")
-                            : cmd === "disable-directive"
-                                ? policyColonInvocation("disable-directive")
-                                : policyColonInvocation("enable-directive");
+                            : cmd === "coverage-check-resume-preset"
+                                ? policyColonInvocation("coverage-check-resume-preset")
+                                : cmd === "coverage-check-resume-dismiss"
+                                    ? policyColonInvocation("coverage-check-resume-dismiss")
+                                    : cmd === "coverage-check-resume-later"
+                                        ? policyColonInvocation("coverage-check-resume-later")
+                                        : cmd === "disable-directive"
+                                            ? policyColonInvocation("disable-directive")
+                                            : policyColonInvocation("enable-directive");
         let note = "";
         let projectRoot = ".";
+        let preset = "";
+        let reason = "";
         for (let i = 1; i < argv.length; i += 1) {
             const arg = argv[i];
             if (arg === "--confirm") {
                 confirm = true;
             }
+            else if (arg === "--preset") {
+                const v = argv[i + 1];
+                if (v === undefined)
+                    return makeSetError("argument --preset: expected one argument");
+                preset = v;
+                i += 1;
+            }
+            else if (arg?.startsWith("--preset=")) {
+                preset = arg.slice("--preset=".length);
+            }
+            else if (arg === "--reason") {
+                const v = argv[i + 1];
+                if (v === undefined)
+                    return makeSetError("argument --reason: expected one argument");
+                reason = v;
+                i += 1;
+            }
+            else if (arg?.startsWith("--reason=")) {
+                reason = arg.slice("--reason=".length);
+            }
             else if (arg === "--actor") {
                 const v = argv[i + 1];
                 if (v === undefined)
@@ -204,6 +235,10 @@ export function parseArgs(argv) {
             else if (arg?.startsWith("--project-root=")) {
                 projectRoot = arg.slice("--project-root=".length);
             }
+            else if (cmd === "coverage-check-resume-preset" &&
+                (arg === "strict" || arg === "hatch-aware")) {
+                preset = arg;
+            }
             else {
                 return makeSetError(`unrecognized argument: ${arg}`);
             }
@@ -217,6 +252,8 @@ export function parseArgs(argv) {
             format: "text",
             changedOnly: false,
             field: null,
+            preset,
+            reason,
         };
     }
     return makeSetError(`unknown subcommand: ${cmd}`);
@@ -456,6 +493,15 @@ export function run(argv) {
     if (args.cmd === "clear-value-feedback") {
         return runClearValueFeedback(args);
     }
+    if (args.cmd === "coverage-check-resume-preset") {
+        return runCoverageCheckResumePreset(args);
+    }
+    if (args.cmd === "coverage-check-resume-dismiss") {
+        return runCoverageCheckResumeDismiss(args);
+    }
+    if (args.cmd === "coverage-check-resume-later") {
+        return runCoverageCheckResumeLater();
+    }
     if (args.cmd === "disable-directive") {
         return runDisableDirective(args);
     }
@@ -464,6 +510,42 @@ export function run(argv) {
     }
     return 2;
 }
+/** Apply Strict or Hatch-aware coverageDebt+checkResume preset (#3189). */
+function runCoverageCheckResumePreset(args) {
+    const root = pathResolve(args.projectRoot);
+    const preset = (args.preset ?? "").trim().toLowerCase();
+    if (preset !== "strict" && preset !== "hatch-aware") {
+        process.stdout.write("usage: policy coverage-check-resume-preset --preset strict|hatch-aware [--project-root PATH]\n" +
+            "  (or: policy:coverage-check-resume-preset strict|hatch-aware)\n");
+        return 1;
+    }
+    const result = preset === "strict"
+        ? applyStrictCoverageCheckResumePreset(root, { actor: args.actor, note: args.note })
+        : applyHatchAwareCoverageCheckResumePreset(root, { actor: args.actor, note: args.note });
+    process.stdout.write(result.stdout);
+    return result.exitCode;
+}
+/** Dismiss-with-reason for coverageDebt+checkResume (#3189). */
+function runCoverageCheckResumeDismiss(args) {
+    const root = pathResolve(args.projectRoot);
+    const reason = (args.reason ?? "").trim();
+    if (reason.length === 0) {
+        process.stdout.write("usage: policy coverage-check-resume-dismiss --reason TEXT [--project-root PATH]\n");
+        return 1;
+    }
+    const result = dismissCoverageCheckResume(root, reason, {
+        actor: args.actor,
+        note: args.note,
+    });
+    process.stdout.write(result.stdout);
+    return result.exitCode;
+}
+/** Later skip — no PROJECT-DEFINITION write (#3189). */
+function runCoverageCheckResumeLater() {
+    const result = applyLaterCoverageCheckResumeSkip();
+    process.stdout.write(result.stdout);
+    return result.exitCode;
+}
 if (process.argv[1] !== undefined && fileURLToPath(import.meta.url) === process.argv[1]) {
     process.exit(run(process.argv.slice(2)));
 }

package/dist/triage-classify.d.ts

@@ -12,6 +12,11 @@ export interface ParsedArgs {
     allowCrossRepo: boolean;
     /** Opt-in: include closed issues (default open-only, #3125). */
     includeClosed: boolean;
+    /**
+     * Opt-in re-enrich: re-plan already-stamped issues with additive label deltas
+     * (#3197). Requires --mirror; dry-run by default until --apply.
+     */
+    reEnrich: boolean;
     /** Raw --author value (LOGIN, @me, comma allow-list); null = no filter (#3129). */
     author: string | null;
     /** Apply batch size (rate-limit awareness). */

package/dist/triage-classify.js

@@ -36,6 +36,7 @@ export function parseArgs(argv) {
         repo: null,
         allowCrossRepo: false,
         includeClosed: false,
+        reEnrich: false,
         author: null,
         batchSize: null,
         delayMs: null,
@@ -64,6 +65,9 @@ export function parseArgs(argv) {
         else if (arg === "--include-closed") {
             parsed.includeClosed = true;
         }
+        else if (arg === "--re-enrich") {
+            parsed.reEnrich = true;
+        }
         else if (arg === "--author-mine") {
             parsed.author = "@me";
         }
@@ -185,6 +189,12 @@ export function parseArgs(argv) {
             error: "--apply requires --mirror (Tier-1 label mirror / bootstrap mass-triage, #1423)",
         };
     }
+    if (parsed.reEnrich && !parsed.doMirror) {
+        return {
+            ...parsed,
+            error: "--re-enrich requires --mirror (additive re-plan of already-stamped issues, #3197)",
+        };
+    }
     if ((parsed.includeClosed ||
         parsed.author !== null ||
         parsed.batchSize !== null ||
@@ -244,6 +254,7 @@ export function run(argv, options = {}) {
             repo: args.repo,
             allowCrossRepo: args.allowCrossRepo,
             includeClosed: args.includeClosed,
+            reEnrich: args.reEnrich,
             ...(authorFilter !== null && authorFilter !== undefined ? { authorFilter } : {}),
             ...(args.batchSize !== null ? { batchSize: args.batchSize } : {}),
             ...(args.delayMs !== null ? { delayMs: args.delayMs } : {}),

package/dist/verify-consumer-check-contract.d.ts

@@ -0,0 +1,12 @@
+#!/usr/bin/env node
+interface ParsedArgs {
+    projectRoot: string;
+    frameworkSource: boolean;
+    enforce: boolean;
+    quiet: boolean;
+    error?: string;
+}
+export declare function parseArgs(argv: string[]): ParsedArgs;
+export declare function run(argv: string[]): number;
+export {};
+//# sourceMappingURL=verify-consumer-check-contract.d.ts.map

package/dist/verify-consumer-check-contract.js

@@ -0,0 +1,70 @@
+#!/usr/bin/env node
+/**
+ * CLI for verify:consumer-check-contract (#3145).
+ */
+import { resolve } from "node:path";
+import { consumerCheckContract } from "@deftai/directive-core";
+import { isDirectEntrypoint } from "./entrypoint.js";
+export function parseArgs(argv) {
+    const parsed = {
+        projectRoot: ".",
+        frameworkSource: false,
+        enforce: true,
+        quiet: false,
+    };
+    for (let i = 0; i < argv.length; i += 1) {
+        const arg = argv[i];
+        if (arg === "--quiet") {
+            parsed.quiet = true;
+        }
+        else if (arg === "--enforce") {
+            parsed.enforce = true;
+        }
+        else if (arg === "--warn") {
+            parsed.enforce = false;
+        }
+        else if (arg === "--framework-source") {
+            parsed.frameworkSource = true;
+        }
+        else if (arg === "--project-root") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...parsed, error: "argument --project-root: expected one argument" };
+            }
+            parsed.projectRoot = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--project-root=")) {
+            parsed.projectRoot = arg.slice("--project-root=".length);
+        }
+        else {
+            return { ...parsed, error: `unrecognized argument: ${arg}` };
+        }
+    }
+    return parsed;
+}
+export function run(argv) {
+    const args = parseArgs(argv);
+    if (args.error !== undefined) {
+        process.stderr.write(`verify_consumer_check_contract: ${args.error}\n`);
+        return 2;
+    }
+    const projectRoot = resolve(args.projectRoot);
+    const result = consumerCheckContract.evaluateConsumerCheckContract(projectRoot, {
+        frameworkSource: args.frameworkSource,
+        enforce: args.enforce,
+    });
+    if (result.exitCode === 0) {
+        if (!args.quiet) {
+            process.stdout.write(`${result.message}\n`);
+        }
+    }
+    else {
+        process.stderr.write(`${result.message}\n`);
+    }
+    return result.exitCode;
+}
+if (isDirectEntrypoint(import.meta.url)) {
+    process.exit(run(process.argv.slice(2)));
+}
+//# sourceMappingURL=verify-consumer-check-contract.js.map

package/dist/verify-scope-provenance.d.ts

@@ -0,0 +1,12 @@
+#!/usr/bin/env node
+interface ParsedArgs {
+    projectRoot: string;
+    baseRef: string;
+    enforce: boolean;
+    quiet: boolean;
+    error?: string;
+}
+export declare function parseArgs(argv: string[]): ParsedArgs;
+export declare function run(argv: string[]): number;
+export {};
+//# sourceMappingURL=verify-scope-provenance.d.ts.map

package/dist/verify-scope-provenance.js

@@ -0,0 +1,79 @@
+#!/usr/bin/env node
+/**
+ * CLI for verify:scope-provenance (#3145).
+ */
+import { resolve } from "node:path";
+import { scopeProvenance } from "@deftai/directive-core";
+import { isDirectEntrypoint } from "./entrypoint.js";
+export function parseArgs(argv) {
+    const parsed = {
+        projectRoot: ".",
+        // Empty means use PR-aware default (origin/master...), not bare HEAD.
+        baseRef: "",
+        enforce: false,
+        quiet: false,
+    };
+    for (let i = 0; i < argv.length; i += 1) {
+        const arg = argv[i];
+        if (arg === "--quiet") {
+            parsed.quiet = true;
+        }
+        else if (arg === "--enforce") {
+            parsed.enforce = true;
+        }
+        else if (arg === "--warn") {
+            parsed.enforce = false;
+        }
+        else if (arg === "--project-root") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...parsed, error: "argument --project-root: expected one argument" };
+            }
+            parsed.projectRoot = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--project-root=")) {
+            parsed.projectRoot = arg.slice("--project-root=".length);
+        }
+        else if (arg === "--base-ref") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...parsed, error: "argument --base-ref: expected one argument" };
+            }
+            parsed.baseRef = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--base-ref=")) {
+            parsed.baseRef = arg.slice("--base-ref=".length);
+        }
+        else {
+            return { ...parsed, error: `unrecognized argument: ${arg}` };
+        }
+    }
+    return parsed;
+}
+export function run(argv) {
+    const args = parseArgs(argv);
+    if (args.error !== undefined) {
+        process.stderr.write(`verify_scope_provenance: ${args.error}\n`);
+        return 2;
+    }
+    const projectRoot = resolve(args.projectRoot);
+    const result = scopeProvenance.evaluateScopeProvenance(projectRoot, {
+        ...(args.baseRef.length > 0 ? { baseRef: args.baseRef } : {}),
+        enforce: args.enforce,
+    });
+    if (result.exitCode === 0) {
+        if (!args.quiet) {
+            process.stdout.write(`${result.message}\n`);
+        }
+    }
+    else {
+        process.stderr.write(`${result.message}\n`);
+    }
+    return result.exitCode;
+}
+if (isDirectEntrypoint(import.meta.url)) {
+    process.exit(run(process.argv.slice(2)));
+}
+//# sourceMappingURL=verify-scope-provenance.js.map

package/dist/verify-test-boundary.d.ts

@@ -0,0 +1,12 @@
+#!/usr/bin/env node
+interface ParsedArgs {
+    projectRoot: string;
+    policyPath: string | null;
+    enforce: boolean | undefined;
+    quiet: boolean;
+    error?: string;
+}
+export declare function parseArgs(argv: string[]): ParsedArgs;
+export declare function run(argv: string[]): number;
+export {};
+//# sourceMappingURL=verify-test-boundary.d.ts.map

package/dist/verify-test-boundary.js

@@ -0,0 +1,80 @@
+#!/usr/bin/env node
+/**
+ * CLI for verify:test-boundary (#3145).
+ */
+import { resolve } from "node:path";
+import { testBoundary } from "@deftai/directive-core";
+import { isDirectEntrypoint } from "./entrypoint.js";
+export function parseArgs(argv) {
+    const parsed = {
+        projectRoot: ".",
+        policyPath: null,
+        enforce: undefined,
+        quiet: false,
+    };
+    for (let i = 0; i < argv.length; i += 1) {
+        const arg = argv[i];
+        if (arg === "--quiet") {
+            parsed.quiet = true;
+        }
+        else if (arg === "--enforce") {
+            parsed.enforce = true;
+        }
+        else if (arg === "--warn") {
+            parsed.enforce = false;
+        }
+        else if (arg === "--project-root") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...parsed, error: "argument --project-root: expected one argument" };
+            }
+            parsed.projectRoot = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--project-root=")) {
+            parsed.projectRoot = arg.slice("--project-root=".length);
+        }
+        else if (arg === "--policy") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...parsed, error: "argument --policy: expected one argument" };
+            }
+            parsed.policyPath = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--policy=")) {
+            parsed.policyPath = arg.slice("--policy=".length);
+        }
+        else {
+            return { ...parsed, error: `unrecognized argument: ${arg}` };
+        }
+    }
+    return parsed;
+}
+export function run(argv) {
+    const args = parseArgs(argv);
+    if (args.error !== undefined) {
+        process.stderr.write(`verify_test_boundary: ${args.error}\n`);
+        return 2;
+    }
+    const projectRoot = resolve(args.projectRoot);
+    const policyPath = args.policyPath !== null ? resolve(args.policyPath) : null;
+    const result = testBoundary.evaluateTestBoundary(projectRoot, {
+        policyPath,
+        enforce: args.enforce,
+        quiet: args.quiet,
+    });
+    if (result.exitCode === 0) {
+        if (!args.quiet) {
+            process.stdout.write(`${result.message}\n`);
+        }
+    }
+    else {
+        process.stderr.write(`${result.message}\n`);
+    }
+    return result.exitCode;
+}
+if (isDirectEntrypoint(import.meta.url)) {
+    process.exit(run(process.argv.slice(2)));
+}
+//# sourceMappingURL=verify-test-boundary.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deftai/directive",
-  "version": "0.96.0",
+  "version": "0.98.0",
   "description": "Directive CLI — npm install path for the Deft Directive framework.",
   "license": "MIT",
   "homepage": "https://deftai.github.io/directive/",
@@ -34,8 +34,8 @@
     "provenance": true
   },
   "dependencies": {
-    "@deftai/directive-core": "^0.96.0",
-    "@deftai/directive-content": "^0.96.0"
+    "@deftai/directive-core": "^0.98.0",
+    "@deftai/directive-content": "^0.98.0"
   },
   "scripts": {
     "build": "tsc -b"