@deftai/directive 0.98.0 → 0.99.0

package/dist/cli-router/route-argv.js

@@ -83,6 +83,7 @@ export const SUBCOMMAND_ROUTES = {
     "policy:allow-direct-commits": ["policy", "allow-direct-commits"],
     "policy:allow-bot-merge": ["policy", "allow-bot-merge"],
     "policy:enable-value-feedback": ["policy", "enable-value-feedback"],
+    "policy:set-ceremony-dial": ["policy", "set-ceremony-dial"],
     "policy:coverage-check-resume-preset": ["policy", "coverage-check-resume-preset"],
     "policy:coverage-check-resume-dismiss": ["policy", "coverage-check-resume-dismiss"],
     "policy:coverage-check-resume-later": ["policy", "coverage-check-resume-later"],
@@ -188,6 +189,9 @@ function routeNamespaceVerb(ns, verb, rest) {
             return { kind: "dispatch", argv: ["scope-decompose", ...rest] };
         if (verb === "undo")
             return { kind: "dispatch", argv: ["scope-undo", ...rest] };
+        if (verb === "record-approved-scope") {
+            return { kind: "dispatch", argv: ["scope-record-approved-scope", ...rest] };
+        }
     }
     if (ns === "verify") {
         const verifyStem = VERIFY_VERB_MAP[verb];

package/dist/dispatch.d.ts

@@ -10,9 +10,9 @@ export interface DispatchIo {
     writeErr: (text: string) => void;
 }
 /** CLI modules in packages/cli/src (excluding parity harnesses and bin/index). */
-export declare const CLI_MODULE_VERBS: readonly ["agents-refresh", "cache", "check", "capacity-backfill", "capacity-show", "codebase-default-extractor", "codebase-map", "codebase-map-fresh", "codebase-projection-registry", "codebase-provider", "doctor", "install-upgrade", "install-uninstall", "migrate-preflight", "migrate-xbrief", "migrate-category-b", "framework-check-updates", "hook-dispatch", "umbrella-current-shape", "changelog-check", "change-init", "commit-lint", "coverage-hotspots", "policy", "authz", "escalation-cli", "pr-closing-keywords", "pr-merge-readiness", "pr-monitor", "pr-protected-issues", "pr-wait-mergeable", "pr-watch", "pr-finish-loop", "directive-finish-loop", "preflight-cache", "preflight-gh", "probe-session", "release", "release-e2e", "release-publish", "release-rollback", "scope-lifecycle", "lifecycle-event", "lifecycle-stats", "session-start", "session-ready", "plan-sequence", "slice", "subagent-monitor", "toolchain-check", "triage-actions", "triage-bootstrap", "triage-bulk", "triage-classify", "triage-help", "triage-queue", "triage-reconcile", "triage-refresh", "triage-scope", "triage-scope-drift", "triage-smoketest", "triage-subscribe", "triage-summary", "triage-welcome", "ts-check-lane", "vbrief-activate", "vbrief-build", "vbrief-preflight", "vbrief-reconcile", "vbrief-validate", "vbrief-validation", "xbrief-create", "xbrief-verify", "verify-branch", "verify-encoding", "verify-forward-coverage", "verify-test-boundary", "verify-scope-provenance", "verify-consumer-check-contract", "verify-hooks-installed", "verify-investigation", "verify-judgment-gates", "verify-no-task-runtime", "validate-links", "validate-strategy-output", "verify-biome-config", "verify-bridge-drift", "verify-capacity", "verify-contained-writes", "verify-content-manifest", "verify-skill-external-fetch-gate", "verify-contract-drift", "verify-cursor-tier1", "verify-openclaw-tier1", "verify-go-freeze", "verify-scm-boundary", "verify-session-ritual", "verify-plan-sequence", "verify-stubs", "verify-xbrief-drift", "rule-ownership-lint", "verify-story-ready", "verify-review-monitor", "verify-l4-owner", "verify-subagent-alive", "review-monitor-register", "review-monitor-release", "verify-tools", "verify-wip-cap", "verify-orphan-active", "verify-agents-md-budget", "verify-agents-md-advisory", "verify-eval-health-relocation", "verify-eval-triggers-relocation", "eval-health", "eval-run", "eval-report", "eval-triggers"];
+export declare const CLI_MODULE_VERBS: readonly ["agents-refresh", "cache", "check", "capacity-backfill", "capacity-show", "codebase-default-extractor", "codebase-map", "codebase-map-fresh", "codebase-projection-registry", "codebase-provider", "doctor", "install-upgrade", "install-uninstall", "migrate-preflight", "migrate-xbrief", "migrate-category-b", "framework-check-updates", "hook-dispatch", "umbrella-current-shape", "changelog-check", "change-init", "commit-lint", "coverage-hotspots", "policy", "authz", "escalation-cli", "pr-closing-keywords", "pr-merge-readiness", "pr-monitor", "pr-protected-issues", "pr-wait-mergeable", "pr-watch", "pr-finish-loop", "directive-finish-loop", "preflight-cache", "preflight-gh", "probe-session", "release", "release-e2e", "release-publish", "release-rollback", "scope-lifecycle", "scope-record-approved-scope", "lifecycle-event", "lifecycle-stats", "session-start", "session-ready", "plan-sequence", "slice", "subagent-monitor", "toolchain-check", "triage-actions", "triage-bootstrap", "triage-bulk", "triage-classify", "triage-help", "triage-queue", "triage-reconcile", "triage-refresh", "triage-scope", "triage-scope-drift", "triage-smoketest", "triage-subscribe", "triage-summary", "triage-welcome", "ts-check-lane", "vbrief-activate", "vbrief-build", "vbrief-preflight", "vbrief-reconcile", "vbrief-validate", "vbrief-validation", "xbrief-create", "xbrief-verify", "verify-branch", "verify-encoding", "verify-forward-coverage", "verify-test-boundary", "verify-scope-provenance", "verify-consumer-check-contract", "verify-hooks-installed", "verify-investigation", "verify-judgment-gates", "verify-no-task-runtime", "validate-links", "validate-strategy-output", "verify-biome-config", "verify-bridge-drift", "verify-capacity", "verify-contained-writes", "verify-content-manifest", "verify-skill-external-fetch-gate", "verify-contract-drift", "verify-cursor-tier1", "verify-openclaw-tier1", "verify-go-freeze", "verify-scm-boundary", "verify-session-ritual", "verify-plan-sequence", "verify-stubs", "verify-xbrief-drift", "rule-ownership-lint", "verify-story-ready", "verify-review-monitor", "verify-l4-owner", "verify-subagent-alive", "review-monitor-register", "review-monitor-release", "verify-tools", "verify-wip-cap", "verify-orphan-active", "verify-agents-md-budget", "verify-agents-md-advisory", "verify-eval-health-relocation", "verify-eval-triggers-relocation", "eval-health", "eval-run", "eval-report", "eval-triggers"];
 /** Core-only CLI entrypoints without a packages/cli wrapper. */
-export declare const CORE_MODULE_VERBS: readonly ["scm", "scm-readiness", "github-auth-modes", "github-body", "issue-emit", "issue-ingest", "issue-sync-from-xbrief", "reconcile-issues", "swarm-launch", "swarm-complete-cohort", "swarm-finalize-cohort", "swarm-readiness", "swarm-routing-verify", "swarm-routing-set", "swarm-verify-review-clean", "swarm-worktrees", "framework-commands", "pack-render", "packs-slice", "prd-render", "export-spec", "project-render", "roadmap-render", "rule-map", "spec-render", "spec-validate", "code-structure-validate", "pack-migrate-skills", "pack-migrate-rules", "pack-migrate-strategies", "pack-migrate-patterns", "pack-migrate-swarm-spec", "policy-set", "setup-ghx", "scope-undo", "scope-demote", "scope-decompose", "changelog-resolve-unreleased", "architecture-preflight-sor", "feedback-file", "value-readback", "product-signal", "freshness-report"];
+export declare const CORE_MODULE_VERBS: readonly ["scm", "scm-readiness", "github-auth-modes", "github-body", "issue-emit", "issue-ingest", "issue-sync-from-xbrief", "reconcile-issues", "swarm-launch", "swarm-complete-cohort", "swarm-finalize-cohort", "swarm-pre-dispatch", "swarm-readiness", "swarm-routing-verify", "swarm-routing-set", "swarm-verify-review-clean", "swarm-worktrees", "framework-commands", "pack-render", "packs-slice", "prd-render", "export-spec", "project-render", "roadmap-render", "rule-map", "spec-render", "spec-validate", "code-structure-validate", "pack-migrate-skills", "pack-migrate-rules", "pack-migrate-strategies", "pack-migrate-patterns", "pack-migrate-swarm-spec", "policy-set", "setup-ghx", "scope-undo", "scope-demote", "scope-decompose", "changelog-resolve-unreleased", "architecture-preflight-sor", "feedback-file", "value-readback", "product-signal", "freshness-report", "decision-write", "decision-list"];
 /** Colon aliases for triage-actions (mirrors cli-router SUBCOMMAND_ROUTES). */
 export declare const TRIAGE_ACTION_ALIAS_SUBCOMMANDS: Readonly<Record<string, string>>;
 /** Colon aliases for policy subcommands (mirrors cli-router SUBCOMMAND_ROUTES). */

package/dist/dispatch.js

@@ -68,6 +68,7 @@ export const CLI_MODULE_VERBS = [
     "release-publish",
     "release-rollback",
     "scope-lifecycle",
+    "scope-record-approved-scope",
     "lifecycle-event",
     "lifecycle-stats",
     "session-start",
@@ -158,6 +159,7 @@ export const CORE_MODULE_VERBS = [
     "swarm-launch",
     "swarm-complete-cohort",
     "swarm-finalize-cohort",
+    "swarm-pre-dispatch",
     "swarm-readiness",
     "swarm-routing-verify",
     "swarm-routing-set",
@@ -190,6 +192,8 @@ export const CORE_MODULE_VERBS = [
     "value-readback",
     "product-signal",
     "freshness-report",
+    "decision-write",
+    "decision-list",
 ];
 /** Colon aliases for triage-actions (mirrors cli-router SUBCOMMAND_ROUTES). */
 export const TRIAGE_ACTION_ALIAS_SUBCOMMANDS = {
@@ -210,6 +214,7 @@ export const POLICY_ACTION_ALIAS_SUBCOMMANDS = {
     "policy:allow-direct-commits": "allow-direct-commits",
     "policy:allow-bot-merge": "allow-bot-merge",
     "policy:enable-value-feedback": "enable-value-feedback",
+    "policy:set-ceremony-dial": "set-ceremony-dial",
     "policy:clear-value-feedback": "clear-value-feedback",
     "policy:coverage-check-resume-preset": "coverage-check-resume-preset",
     "policy:coverage-check-resume-dismiss": "coverage-check-resume-dismiss",
@@ -267,6 +272,7 @@ export const VERB_ALIASES = {
     "verify:forward-coverage": "verify-forward-coverage",
     "verify:test-boundary": "verify-test-boundary",
     "verify:scope-provenance": "verify-scope-provenance",
+    "scope:record-approved-scope": "scope-record-approved-scope",
     "verify:consumer-check-contract": "verify-consumer-check-contract",
     "coverage:hotspots": "coverage-hotspots",
     "verify:branch": "verify-branch",
@@ -358,6 +364,8 @@ export const VERB_ALIASES = {
     "feedback:file": "feedback-file",
     "value:show": "value-readback",
     "triage:metrics": "value-readback",
+    "decision:write": "decision-write",
+    "decision:list": "decision-list",
     "eval:run": "eval-run",
     "eval:triggers": "eval-triggers",
     "eval:report": "eval-report",
@@ -2338,6 +2346,10 @@ async function loadCoreModuleHandler(verb, io) {
             const { finalizeCohortMain } = await import("@deftai/directive-core/dist/swarm/finalize-cohort-cli.js");
             return finalizeCohortMain;
         }
+        case "swarm-pre-dispatch": {
+            const { preDispatchMain } = await import("@deftai/directive-core/dist/swarm/pre-dispatch-cli.js");
+            return preDispatchMain;
+        }
         case "swarm-readiness": {
             const { readinessMain } = await import("@deftai/directive-core/dist/swarm/readiness-cli.js");
             return readinessMain;
@@ -2468,6 +2480,14 @@ async function loadCoreModuleHandler(verb, io) {
             const { mainEntry } = await import("@deftai/directive-core/dist/freshness/cli.js");
             return mainEntry;
         }
+        case "decision-write": {
+            const { writeMainEntry } = await import("@deftai/directive-core/dist/decision/index.js");
+            return writeMainEntry;
+        }
+        case "decision-list": {
+            const { listMainEntry } = await import("@deftai/directive-core/dist/decision/index.js");
+            return listMainEntry;
+        }
         default:
             throw new Error(`unknown core verb: ${verb}`);
     }
@@ -2529,6 +2549,7 @@ const SCOPE_COMMAND_NAMES = [
     "scope:complete",
     "scope:demote",
     "scope:undo",
+    "scope:record-approved-scope",
 ];
 /**
  * Deduplicated command names for `directive commands`, preferring colon-style

package/dist/policy.d.ts

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { type CeremonyDepth } from "@deftai/directive-core/policy";
 interface ShowArgs {
     format: "text" | "json";
     changedOnly: boolean;
@@ -7,7 +8,7 @@ interface ShowArgs {
     error?: string;
 }
 interface SetArgs {
-    cmd: "show" | "enforce-branches" | "allow-direct-commits" | "allow-bot-merge" | "enable-value-feedback" | "clear-value-feedback" | "coverage-check-resume-preset" | "coverage-check-resume-dismiss" | "coverage-check-resume-later" | "disable-directive" | "enable-directive" | "resolve";
+    cmd: "show" | "enforce-branches" | "allow-direct-commits" | "allow-bot-merge" | "enable-value-feedback" | "clear-value-feedback" | "set-ceremony-dial" | "coverage-check-resume-preset" | "coverage-check-resume-dismiss" | "coverage-check-resume-later" | "disable-directive" | "enable-directive" | "resolve";
     confirm: boolean;
     actor: string;
     note: string;
@@ -18,6 +19,10 @@ interface SetArgs {
     /** Strict | hatch-aware for coverage-check-resume-preset; reason for dismiss. */
     preset?: string;
     reason?: string;
+    /** #3214 ceremony dial override depth for set-ceremony-dial. */
+    ceremonyOverride?: CeremonyDepth | null;
+    /** #3214 ceremony dial enabled flag for set-ceremony-dial. */
+    ceremonyEnabled?: boolean;
     error?: string;
 }
 /** Parse policy:show flags (mirrors _policy_show_cli.py). */

package/dist/policy.js

@@ -6,7 +6,7 @@
 import { existsSync } from "node:fs";
 import { resolve as pathResolve, relative } from "node:path";
 import { fileURLToPath } from "node:url";
-import { ALLOW_BOT_MERGE_CAPABILITY_COST, applyHatchAwareCoverageCheckResumePreset, applyLaterCoverageCheckResumeSkip, applyStrictCoverageCheckResumePreset, clearValueFeedback, createNoDeftDirectiveFlag, describeShadowedPlanExtension, detectNoDeftDirective, detectShadowedPlanExtensions, disclosureLine, dismissCoverageCheckResume, enableValueFeedback, FIELD_VALUE_FEEDBACK, FIELD_VALUE_FEEDBACK_CLI_ALIAS, formatValueFeedbackStatusLine, humanMergeDisclosureLine, inspectAllPolicies, inspectOnePolicy, loadProjectDefinition, NO_DEFT_DIRECTIVE_DISABLED_MESSAGE, NO_DEFT_DIRECTIVE_FLAG_NAME, NO_DEFT_DIRECTIVE_INCONSISTENT_MESSAGE, policyColonInvocation, projectDefinitionPath, pythonListRepr, pythonStringRepr, registeredPolicyNames, removeNoDeftDirectiveFlag, renderJson, renderText, resolveHumanMergePolicy, resolvePolicy, resolveValueFeedback, setPolicy, setRequireHumanMerge, } from "@deftai/directive-core/policy";
+import { ALLOW_BOT_MERGE_CAPABILITY_COST, applyHatchAwareCoverageCheckResumePreset, applyLaterCoverageCheckResumeSkip, applyStrictCoverageCheckResumePreset, CEREMONY_DEPTHS, clearValueFeedback, createNoDeftDirectiveFlag, describeShadowedPlanExtension, detectNoDeftDirective, detectShadowedPlanExtensions, disclosureLine, dismissCoverageCheckResume, enableValueFeedback, FIELD_VALUE_FEEDBACK, FIELD_VALUE_FEEDBACK_CLI_ALIAS, formatValueFeedbackStatusLine, humanMergeDisclosureLine, inspectAllPolicies, inspectOnePolicy, loadProjectDefinition, NO_DEFT_DIRECTIVE_DISABLED_MESSAGE, NO_DEFT_DIRECTIVE_FLAG_NAME, NO_DEFT_DIRECTIVE_INCONSISTENT_MESSAGE, policyColonInvocation, projectDefinitionPath, pythonListRepr, pythonStringRepr, registeredPolicyNames, removeNoDeftDirectiveFlag, renderJson, renderText, resolveHumanMergePolicy, resolvePolicy, resolveValueFeedback, setCeremonyDial, setPolicy, setRequireHumanMerge, } from "@deftai/directive-core/policy";
 const CAPABILITY_COST_DISCLOSURE = "\u26a0 Capability-cost disclosure -- enabling direct commits to the default " +
     "branch turns OFF the deft branch-protection policy.\n" +
     "  \u2022 Pre-commit + pre-push hooks will no longer block default-branch " +
@@ -114,7 +114,7 @@ export function parseShowArgs(argv) {
 /** Parse argv for the policy CLI (show + set subcommands). */
 export function parseArgs(argv) {
     if (argv.length === 0) {
-        const usage = "usage: policy [show|enforce-branches|allow-direct-commits|allow-bot-merge|enable-value-feedback|clear-value-feedback|coverage-check-resume-preset|coverage-check-resume-dismiss|coverage-check-resume-later|disable-directive|enable-directive|resolve] ...";
+        const usage = "usage: policy [show|enforce-branches|allow-direct-commits|allow-bot-merge|enable-value-feedback|clear-value-feedback|set-ceremony-dial|coverage-check-resume-preset|coverage-check-resume-dismiss|coverage-check-resume-later|disable-directive|enable-directive|resolve] ...";
         return makeSetError(usage);
     }
     const cmd = argv[0];
@@ -151,6 +151,7 @@ export function parseArgs(argv) {
         cmd === "allow-bot-merge" ||
         cmd === "enable-value-feedback" ||
         cmd === "clear-value-feedback" ||
+        cmd === "set-ceremony-dial" ||
         cmd === "coverage-check-resume-preset" ||
         cmd === "coverage-check-resume-dismiss" ||
         cmd === "coverage-check-resume-later" ||
@@ -167,19 +168,23 @@ export function parseArgs(argv) {
                         ? policyColonInvocation("enable-value-feedback")
                         : cmd === "clear-value-feedback"
                             ? policyColonInvocation("clear-value-feedback")
-                            : cmd === "coverage-check-resume-preset"
-                                ? policyColonInvocation("coverage-check-resume-preset")
-                                : cmd === "coverage-check-resume-dismiss"
-                                    ? policyColonInvocation("coverage-check-resume-dismiss")
-                                    : cmd === "coverage-check-resume-later"
-                                        ? policyColonInvocation("coverage-check-resume-later")
-                                        : cmd === "disable-directive"
-                                            ? policyColonInvocation("disable-directive")
-                                            : policyColonInvocation("enable-directive");
+                            : cmd === "set-ceremony-dial"
+                                ? policyColonInvocation("set-ceremony-dial")
+                                : cmd === "coverage-check-resume-preset"
+                                    ? policyColonInvocation("coverage-check-resume-preset")
+                                    : cmd === "coverage-check-resume-dismiss"
+                                        ? policyColonInvocation("coverage-check-resume-dismiss")
+                                        : cmd === "coverage-check-resume-later"
+                                            ? policyColonInvocation("coverage-check-resume-later")
+                                            : cmd === "disable-directive"
+                                                ? policyColonInvocation("disable-directive")
+                                                : policyColonInvocation("enable-directive");
         let note = "";
         let projectRoot = ".";
         let preset = "";
         let reason = "";
+        let ceremonyOverride;
+        let ceremonyEnabled;
         for (let i = 1; i < argv.length; i += 1) {
             const arg = argv[i];
             if (arg === "--confirm") {
@@ -239,6 +244,50 @@ export function parseArgs(argv) {
                 (arg === "strict" || arg === "hatch-aware")) {
                 preset = arg;
             }
+            else if (cmd === "set-ceremony-dial" && (arg === "--override" || arg === "--depth")) {
+                const v = argv[i + 1];
+                if (v === undefined) {
+                    return makeSetError(`argument ${arg}: expected one argument (minimal|rapid|standard|elevated|null)`);
+                }
+                if (v === "null" || v === "none" || v === "clear") {
+                    ceremonyOverride = null;
+                }
+                else if (CEREMONY_DEPTHS.includes(v)) {
+                    ceremonyOverride = v;
+                }
+                else {
+                    return makeSetError(`argument ${arg}: expected minimal|rapid|standard|elevated|null, got ${JSON.stringify(v)}`);
+                }
+                i += 1;
+            }
+            else if (cmd === "set-ceremony-dial" &&
+                (arg?.startsWith("--override=") || arg?.startsWith("--depth="))) {
+                const v = arg.slice(arg.indexOf("=") + 1);
+                if (v === "null" || v === "none" || v === "clear") {
+                    ceremonyOverride = null;
+                }
+                else if (CEREMONY_DEPTHS.includes(v)) {
+                    ceremonyOverride = v;
+                }
+                else {
+                    return makeSetError(`argument --override: expected minimal|rapid|standard|elevated|null, got ${JSON.stringify(v)}`);
+                }
+            }
+            else if (cmd === "set-ceremony-dial" && arg === "--enabled") {
+                const v = argv[i + 1];
+                if (v === undefined || (v !== "true" && v !== "false")) {
+                    return makeSetError("argument --enabled: expected true|false");
+                }
+                ceremonyEnabled = v === "true";
+                i += 1;
+            }
+            else if (cmd === "set-ceremony-dial" && arg?.startsWith("--enabled=")) {
+                const v = arg.slice("--enabled=".length);
+                if (v !== "true" && v !== "false") {
+                    return makeSetError("argument --enabled: expected true|false");
+                }
+                ceremonyEnabled = v === "true";
+            }
             else {
                 return makeSetError(`unrecognized argument: ${arg}`);
             }
@@ -254,6 +303,8 @@ export function parseArgs(argv) {
             field: null,
             preset,
             reason,
+            ceremonyOverride,
+            ceremonyEnabled,
         };
     }
     return makeSetError(`unknown subcommand: ${cmd}`);
@@ -493,6 +544,9 @@ export function run(argv) {
     if (args.cmd === "clear-value-feedback") {
         return runClearValueFeedback(args);
     }
+    if (args.cmd === "set-ceremony-dial") {
+        return runSetCeremonyDial(args);
+    }
     if (args.cmd === "coverage-check-resume-preset") {
         return runCoverageCheckResumePreset(args);
     }
@@ -546,6 +600,24 @@ function runCoverageCheckResumeLater() {
     process.stdout.write(result.stdout);
     return result.exitCode;
 }
+/** Persist plan.policy.ceremonyDial override/enabled (#3214). */
+function runSetCeremonyDial(args) {
+    const root = pathResolve(args.projectRoot);
+    if (args.ceremonyOverride === undefined && args.ceremonyEnabled === undefined) {
+        process.stdout.write("usage: policy set-ceremony-dial -- --confirm [--override minimal|rapid|standard|elevated|null] [--enabled true|false] [--project-root PATH]\n" +
+            `  Inspect: ${policyColonInvocation("show", " --field=ceremonyDial")}\n`);
+        return 1;
+    }
+    const result = setCeremonyDial(root, {
+        confirm: args.confirm,
+        actor: args.actor,
+        note: args.note,
+        ...(args.ceremonyOverride !== undefined ? { override: args.ceremonyOverride } : {}),
+        ...(args.ceremonyEnabled !== undefined ? { enabled: args.ceremonyEnabled } : {}),
+    });
+    process.stdout.write(result.stdout);
+    return result.exitCode;
+}
 if (process.argv[1] !== undefined && fileURLToPath(import.meta.url) === process.argv[1]) {
     process.exit(run(process.argv.slice(2)));
 }

package/dist/scope-record-approved-scope.d.ts

@@ -0,0 +1,22 @@
+#!/usr/bin/env node
+/** True when `candidate` is the same as or a descendant of `root` after realpath. */
+export declare function isPathInsideRoot(root: string, candidate: string): boolean;
+export interface ParsedArgs {
+    projectRoot: string;
+    xbriefPath: string;
+    actor: string;
+    kind: string;
+    /** Optional override for recorded xbriefRelPath (defaults: pending→active map). */
+    xbriefRelPath: string;
+    quiet: boolean;
+    error?: string;
+}
+/**
+ * Map pending/ → active/ for path-bound approval records.
+ * Returns null when the source cannot be expressed as a repo-relative path under projectRoot
+ * (absolute outside-root paths must not be stamped into xbriefRelPath — #3205 Greptile).
+ */
+export declare function resolveApprovalXbriefRelPath(sourceRelOrAbs: string, projectRoot: string, override?: string): string | null;
+export declare function parseArgs(argv: string[]): ParsedArgs;
+export declare function run(argv: string[]): number;
+//# sourceMappingURL=scope-record-approved-scope.d.ts.map

package/dist/scope-record-approved-scope.js

@@ -0,0 +1,253 @@
+#!/usr/bin/env node
+/**
+ * CLI for scope:record-approved-scope (#3205).
+ *
+ * Deposits a human-origin approved-scope digest under
+ * `.deft/approved-scope/<plan-id>.json` so verify:scope-provenance can
+ * authorize pending→active and operator-approved expansion without same-PR
+ * self-authorization.
+ */
+import { existsSync, lstatSync, readFileSync, realpathSync } from "node:fs";
+import { basename, join, relative, resolve, sep } from "node:path";
+import { scopeProvenance } from "@deftai/directive-core";
+import { isDirectEntrypoint } from "./entrypoint.js";
+/** True when `candidate` is the same as or a descendant of `root` after realpath. */
+export function isPathInsideRoot(root, candidate) {
+    let rootReal;
+    let candReal;
+    try {
+        rootReal = realpathSync(root);
+        // realpathSync fails if path does not exist; fall back to resolve for missing targets
+        candReal = existsSync(candidate) ? realpathSync(candidate) : resolve(candidate);
+    }
+    catch {
+        return false;
+    }
+    const rel = relative(rootReal, candReal);
+    if (rel === "")
+        return true;
+    if (rel.startsWith(`..${sep}`) ||
+        rel === ".." ||
+        rel.startsWith("../") ||
+        rel.startsWith("..\\")) {
+        return false;
+    }
+    // Absolute relative() means different drive/root (win32)
+    if (resolve(rel) === rel && rel.includes(":"))
+        return false;
+    return !rel.startsWith("..");
+}
+const { buildApprovedScopeRecord, isHumanApprovalStamp, writeApprovedScopeRecord } = scopeProvenance;
+function usage() {
+    return ("usage: scope:record-approved-scope -- <xbrief-path> --actor <name> " +
+        "[--kind operator] [--project-root <dir>] [--xbrief-rel-path <posix>] [--quiet]\n" +
+        "  Writes .deft/approved-scope/<plan-id>.json with a humanApproval stamp (#3205).\n" +
+        "  Agent-shaped stamps are refused. Path-binds to xbrief/active/ by default when " +
+        "the source is under pending/ or active/.");
+}
+/**
+ * Map pending/ → active/ for path-bound approval records.
+ * Returns null when the source cannot be expressed as a repo-relative path under projectRoot
+ * (absolute outside-root paths must not be stamped into xbriefRelPath — #3205 Greptile).
+ */
+export function resolveApprovalXbriefRelPath(sourceRelOrAbs, projectRoot, override) {
+    if (override !== undefined && override.trim().length > 0) {
+        const o = override.replace(/\\/g, "/").replace(/^\.\//, "");
+        if (o.startsWith("/") || /^[A-Za-z]:\//.test(o))
+            return null;
+        return o;
+    }
+    const root = resolve(projectRoot);
+    const abs = resolve(sourceRelOrAbs.includes(":") ||
+        sourceRelOrAbs.startsWith("/") ||
+        sourceRelOrAbs.startsWith("\\")
+        ? sourceRelOrAbs
+        : join(root, sourceRelOrAbs));
+    // Lexical + realpath containment (symlink to outside root must fail closed — #3205 Greptile).
+    if (!isPathInsideRoot(root, abs)) {
+        return null;
+    }
+    let rel = relative(root, abs).replace(/\\/g, "/");
+    if (rel.length === 0 || rel.startsWith("../") || rel === "..") {
+        return null;
+    }
+    try {
+        if (existsSync(abs) && lstatSync(abs).isSymbolicLink() && !isPathInsideRoot(root, abs)) {
+            return null;
+        }
+    }
+    catch {
+        return null;
+    }
+    // Normalize pending → active for future-active binding (issue #3205 multi-PR).
+    if (rel.startsWith("xbrief/pending/")) {
+        rel = `xbrief/active/${basename(rel)}`;
+    }
+    else if (rel.startsWith("vbrief/pending/")) {
+        rel = `vbrief/active/${basename(rel)}`;
+    }
+    return rel;
+}
+export function parseArgs(argv) {
+    const parsed = {
+        projectRoot: ".",
+        xbriefPath: "",
+        actor: "",
+        kind: "operator",
+        xbriefRelPath: "",
+        quiet: false,
+    };
+    const positionals = [];
+    for (let i = 0; i < argv.length; i += 1) {
+        const arg = argv[i];
+        if (arg === "--help" || arg === "-h") {
+            return { ...parsed, error: usage() };
+        }
+        if (arg === "--quiet") {
+            parsed.quiet = true;
+        }
+        else if (arg === "--project-root") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...parsed, error: "argument --project-root: expected one argument" };
+            }
+            parsed.projectRoot = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--project-root=")) {
+            parsed.projectRoot = arg.slice("--project-root=".length);
+        }
+        else if (arg === "--actor") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...parsed, error: "argument --actor: expected one argument" };
+            }
+            parsed.actor = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--actor=")) {
+            parsed.actor = arg.slice("--actor=".length);
+        }
+        else if (arg === "--kind") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...parsed, error: "argument --kind: expected one argument" };
+            }
+            parsed.kind = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--kind=")) {
+            parsed.kind = arg.slice("--kind=".length);
+        }
+        else if (arg === "--xbrief-rel-path") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...parsed, error: "argument --xbrief-rel-path: expected one argument" };
+            }
+            parsed.xbriefRelPath = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--xbrief-rel-path=")) {
+            parsed.xbriefRelPath = arg.slice("--xbrief-rel-path=".length);
+        }
+        else if (arg?.startsWith("-")) {
+            return { ...parsed, error: `unrecognized argument: ${arg}` };
+        }
+        else if (arg !== undefined) {
+            positionals.push(arg);
+        }
+    }
+    if (positionals.length === 0) {
+        return { ...parsed, error: `missing xBRIEF path\n${usage()}` };
+    }
+    if (positionals.length > 1) {
+        return { ...parsed, error: `unexpected extra args: ${positionals.slice(1).join(" ")}` };
+    }
+    parsed.xbriefPath = positionals[0] ?? "";
+    if (parsed.actor.trim().length === 0) {
+        return {
+            ...parsed,
+            error: `argument --actor is required (human operator identity)\n${usage()}`,
+        };
+    }
+    return parsed;
+}
+export function run(argv) {
+    const args = parseArgs(argv);
+    if (args.error !== undefined) {
+        process.stderr.write(`scope_record_approved_scope: ${args.error}\n`);
+        return 2;
+    }
+    const projectRoot = resolve(args.projectRoot);
+    const xbriefAbs = resolve(projectRoot, args.xbriefPath);
+    if (!existsSync(xbriefAbs)) {
+        // Also try absolute path as given
+        const alt = resolve(args.xbriefPath);
+        if (!existsSync(alt)) {
+            process.stderr.write(`scope_record_approved_scope: xBRIEF not found: ${args.xbriefPath}\n`);
+            return 2;
+        }
+    }
+    const fullPath = existsSync(xbriefAbs) ? xbriefAbs : resolve(args.xbriefPath);
+    if (!isPathInsideRoot(projectRoot, fullPath)) {
+        process.stderr.write("scope_record_approved_scope: xBRIEF path escapes --project-root " +
+            "(symlink or absolute outside-root targets refused) (#3205).\n");
+        return 2;
+    }
+    let raw;
+    try {
+        raw = readFileSync(fullPath, "utf8");
+    }
+    catch (err) {
+        process.stderr.write(`scope_record_approved_scope: failed to read xBRIEF: ${String(err)}\n`);
+        return 2;
+    }
+    let payload;
+    try {
+        payload = JSON.parse(raw);
+    }
+    catch {
+        process.stderr.write("scope_record_approved_scope: xBRIEF is not valid JSON\n");
+        return 2;
+    }
+    const stamp = {
+        kind: args.kind.trim(),
+        actor: args.actor.trim(),
+        mintedAt: new Date().toISOString().replace(/\.\d{3}Z$/, "Z"),
+        mintedVia: "scope:record-approved-scope",
+    };
+    if (!isHumanApprovalStamp(stamp)) {
+        process.stderr.write("scope_record_approved_scope: refused agent/non-human stamp " +
+            `(kind=${stamp.kind}, actor=${stamp.actor}). Use a human operator actor ` +
+            "and kind in {operator,human,user,cli,github-user,interactive,renewed-approval} (#3205).\n");
+        return 1;
+    }
+    const xbriefRelPath = resolveApprovalXbriefRelPath(fullPath, projectRoot, args.xbriefRelPath.length > 0 ? args.xbriefRelPath : undefined);
+    if (xbriefRelPath === null) {
+        process.stderr.write("scope_record_approved_scope: xBRIEF path must resolve under --project-root " +
+            "(repo-relative path required for approval binding) (#3205).\n");
+        return 2;
+    }
+    const record = buildApprovedScopeRecord({
+        xbriefRelPath,
+        payload,
+        humanApproval: stamp,
+        xbriefRawText: raw,
+    });
+    const outPath = writeApprovedScopeRecord(projectRoot, record);
+    if (!args.quiet) {
+        process.stdout.write(`scope_record_approved_scope: wrote ${outPath}\n` +
+            `  planId: ${record.planId}\n` +
+            `  xbriefRelPath: ${record.xbriefRelPath}\n` +
+            `  fileScopeDigest: ${record.fileScopeDigest}\n` +
+            `  paths: ${record.fileScope.length}\n` +
+            `  humanApproval: ${stamp.kind}/${stamp.actor}\n` +
+            "  Next: commit this file on the merge base (or a prior PR) before " +
+            "activation/expansion in the implementation change set (#3205).\n");
+    }
+    return 0;
+}
+if (isDirectEntrypoint(import.meta.url)) {
+    process.exit(run(process.argv.slice(2)));
+}
+//# sourceMappingURL=scope-record-approved-scope.js.map

package/dist/session-start.d.ts

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { type CeremonyDepth, type CeremonyDialInputs } from "@deftai/directive-core/policy";
 import { type SessionCeremonyTier } from "@deftai/directive-core/session";
 export interface ParsedSessionStartArgs {
     projectRoot: string;
@@ -10,6 +11,13 @@ export interface ParsedSessionStartArgs {
     withNetwork: boolean;
     /** #2992: cold (full) vs rearm (clock/HEAD refresh without fat path). */
     ceremonyTier: SessionCeremonyTier;
+    /** #3214: optional dial inputs for ritual-depth selection. */
+    ceremonyDialInputs: CeremonyDialInputs;
+    /**
+     * #3214: force depth for this session only (does not persist policy).
+     * Applied as resolve inputs via a one-shot config override in run().
+     */
+    ceremonyDepthOverride: CeremonyDepth | null;
     error?: string;
 }
 /** Parse session:start CLI args, mirroring scripts/session_start.py. */

package/dist/session-start.js

@@ -1,7 +1,15 @@
 #!/usr/bin/env node
 import { resolve } from "node:path";
 import { fileURLToPath } from "node:url";
+import { CEREMONY_DEPTHS, normalizeCeremonyModelTier, normalizeCeremonyProjectShape, normalizeCeremonyTaskSize, selectCeremonyDepth, } from "@deftai/directive-core/policy";
 import { COLD_CEREMONY_TIER, parseDeferrals, READ_ONLY_POSTURE, REARM_CEREMONY_TIER, ritualStatePath, runSessionStart, SESSION_CEREMONY_TIERS, } from "@deftai/directive-core/session";
+function parseCeremonyDepth(raw) {
+    const value = raw.trim().toLowerCase();
+    if (CEREMONY_DEPTHS.includes(value)) {
+        return value;
+    }
+    return null;
+}
 function parseCeremonyTier(raw) {
     const value = raw.trim().toLowerCase();
     if (SESSION_CEREMONY_TIERS.includes(value)) {
@@ -19,7 +27,10 @@ export function parseArgs(argv) {
         readOnly: false,
         withNetwork: false,
         ceremonyTier: COLD_CEREMONY_TIER,
+        ceremonyDialInputs: {},
+        ceremonyDepthOverride: null,
     };
+    const dialInputs = {};
     for (let i = 0; i < argv.length; i += 1) {
         const arg = argv[i];
         if (arg === "--json") {
@@ -86,10 +97,129 @@ export function parseArgs(argv) {
         else if (arg?.startsWith("--defer=")) {
             parsed.deferValues.push(arg.slice("--defer=".length));
         }
+        else if (arg === "--task-size" || arg === "--ceremony-task-size") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...parsed, error: `argument ${arg}: expected one argument (S|M|L|XL)` };
+            }
+            const size = normalizeCeremonyTaskSize(value);
+            if (size === null) {
+                return {
+                    ...parsed,
+                    error: `argument ${arg}: expected S|M|L|XL (or small|medium|large), got ${JSON.stringify(value)}`,
+                };
+            }
+            dialInputs.taskSize = size;
+            i += 1;
+        }
+        else if (arg?.startsWith("--task-size=") || arg?.startsWith("--ceremony-task-size=")) {
+            const value = arg.slice(arg.indexOf("=") + 1);
+            const size = normalizeCeremonyTaskSize(value);
+            if (size === null) {
+                return {
+                    ...parsed,
+                    error: `argument --task-size: expected S|M|L|XL, got ${JSON.stringify(value)}`,
+                };
+            }
+            dialInputs.taskSize = size;
+        }
+        else if (arg === "--model-tier" || arg === "--ceremony-model-tier") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return {
+                    ...parsed,
+                    error: `argument ${arg}: expected one argument (frontier|mid|low)`,
+                };
+            }
+            const tier = normalizeCeremonyModelTier(value);
+            if (tier === null) {
+                return {
+                    ...parsed,
+                    error: `argument ${arg}: expected frontier|mid|low, got ${JSON.stringify(value)}`,
+                };
+            }
+            dialInputs.modelTier = tier;
+            i += 1;
+        }
+        else if (arg?.startsWith("--model-tier=") || arg?.startsWith("--ceremony-model-tier=")) {
+            const value = arg.slice(arg.indexOf("=") + 1);
+            const tier = normalizeCeremonyModelTier(value);
+            if (tier === null) {
+                return {
+                    ...parsed,
+                    error: `argument --model-tier: expected frontier|mid|low, got ${JSON.stringify(value)}`,
+                };
+            }
+            dialInputs.modelTier = tier;
+        }
+        else if (arg === "--project-shape" || arg === "--ceremony-project-shape") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return {
+                    ...parsed,
+                    error: `argument ${arg}: expected one argument (project|non-project)`,
+                };
+            }
+            const shape = normalizeCeremonyProjectShape(value);
+            if (shape === null) {
+                return {
+                    ...parsed,
+                    error: `argument ${arg}: expected project|non-project, got ${JSON.stringify(value)}`,
+                };
+            }
+            dialInputs.projectShape = shape;
+            i += 1;
+        }
+        else if (arg?.startsWith("--project-shape=") ||
+            arg?.startsWith("--ceremony-project-shape=")) {
+            const value = arg.slice(arg.indexOf("=") + 1);
+            const shape = normalizeCeremonyProjectShape(value);
+            if (shape === null) {
+                return {
+                    ...parsed,
+                    error: `argument --project-shape: expected project|non-project, got ${JSON.stringify(value)}`,
+                };
+            }
+            dialInputs.projectShape = shape;
+        }
+        else if (arg === "--ceremony-depth") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return {
+                    ...parsed,
+                    error: "argument --ceremony-depth: expected one argument (minimal|rapid|standard|elevated)",
+                };
+            }
+            const depth = parseCeremonyDepth(value);
+            if (depth === null) {
+                return {
+                    ...parsed,
+                    error: `argument --ceremony-depth: expected minimal|rapid|standard|elevated, got ${JSON.stringify(value)}`,
+                };
+            }
+            parsed.ceremonyDepthOverride = depth;
+            i += 1;
+        }
+        else if (arg?.startsWith("--ceremony-depth=")) {
+            const value = arg.slice("--ceremony-depth=".length);
+            const depth = parseCeremonyDepth(value);
+            if (depth === null) {
+                return {
+                    ...parsed,
+                    error: `argument --ceremony-depth: expected minimal|rapid|standard|elevated, got ${JSON.stringify(value)}`,
+                };
+            }
+            parsed.ceremonyDepthOverride = depth;
+        }
         else {
             return { ...parsed, error: `unrecognized argument: ${arg}` };
         }
     }
+    parsed.ceremonyDialInputs = {
+        taskSize: dialInputs.taskSize ?? null,
+        modelTier: dialInputs.modelTier ?? null,
+        projectShape: dialInputs.projectShape ?? null,
+    };
     return parsed;
 }
 /** Native session:start handler (#2032 — replaces framework-commands Python bridge). */
@@ -119,12 +249,22 @@ export function run(argv) {
     });
     let result;
     try {
+        // #3214: --ceremony-depth forces this session only (not persisted to policy).
         result = runSessionStart(projectRoot, {
             deferrals,
             writeHistory: !args.noHistory,
             posture: args.readOnly ? READ_ONLY_POSTURE : undefined,
             allowOptionalNetwork: args.withNetwork ? true : undefined,
             ceremonyTier: args.ceremonyTier,
+            ceremonyDialInputs: args.ceremonyDialInputs,
+            ...(args.ceremonyDepthOverride !== null
+                ? {
+                    ceremonyDial: selectCeremonyDepth({
+                        config: { enabled: true, override: args.ceremonyDepthOverride },
+                        inputs: args.ceremonyDialInputs,
+                    }),
+                }
+                : {}),
         });
     }
     finally {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deftai/directive",
-  "version": "0.98.0",
+  "version": "0.99.0",
   "description": "Directive CLI — npm install path for the Deft Directive framework.",
   "license": "MIT",
   "homepage": "https://deftai.github.io/directive/",
@@ -34,8 +34,8 @@
     "provenance": true
   },
   "dependencies": {
-    "@deftai/directive-core": "^0.98.0",
-    "@deftai/directive-content": "^0.98.0"
+    "@deftai/directive-core": "^0.99.0",
+    "@deftai/directive-content": "^0.99.0"
   },
   "scripts": {
     "build": "tsc -b"