@enterpriseai/cli 3.19.0 → 3.19.2

package/resources/gofer/bash-scripts/update-agent-context.sh

@@ -30,12 +30,12 @@
 #
 # 5. Multi-Agent Support
 #    - Handles agent-specific file paths and naming conventions
-#    - Supports: Claude, Gemini, Copilot, Cursor, Qwen, opencode, Codex, Windsurf, Kilo Code, Auggie CLI, Roo Code, CodeBuddy CLI, Amp, or Amazon Q Developer CLI
+#    - Supports: Claude, Antigravity, Copilot, Cursor, Qwen, opencode, Codex, Windsurf, Kilo Code, Auggie CLI, Roo Code, CodeBuddy CLI, Amp, or Amazon Q Developer CLI
 #    - Can update single agents or all existing agent files
 #    - Creates default Claude file if no agent files exist
 #
 # Usage: ./update-agent-context.sh [agent_type]
-# Agent types: claude|gemini|copilot|cursor-agent|qwen|opencode|codex|windsurf|kilocode|auggie|q
+# Agent types: claude|antigravity|copilot|cursor-agent|qwen|opencode|codex|windsurf|kilocode|auggie|q
 # Leave empty to update all existing agent files
 
 set -e
@@ -582,8 +582,8 @@ update_specific_agent() {
         claude)
             update_agent_file "$CLAUDE_FILE" "Claude Code"
             ;;
-        gemini)
-            update_agent_file "$GEMINI_FILE" "Gemini CLI"
+        antigravity|gemini)
+            update_agent_file "$GEMINI_FILE" "Google Antigravity"
             ;;
         copilot)
             update_agent_file "$COPILOT_FILE" "GitHub Copilot"
@@ -623,7 +623,7 @@ update_specific_agent() {
             ;;
         *)
             log_error "Unknown agent type '$agent_type'"
-            log_error "Expected: claude|gemini|copilot|cursor-agent|qwen|opencode|codex|windsurf|kilocode|auggie|roo|amp|q"
+            log_error "Expected: claude|antigravity|copilot|cursor-agent|qwen|opencode|codex|windsurf|kilocode|auggie|roo|amp|q"
             exit 1
             ;;
     esac
@@ -639,7 +639,7 @@ update_all_existing_agents() {
     fi
     
     if [[ -f "$GEMINI_FILE" ]]; then
-        update_agent_file "$GEMINI_FILE" "Gemini CLI"
+        update_agent_file "$GEMINI_FILE" "Google Antigravity"
         found_agent=true
     fi
     
@@ -717,7 +717,7 @@ print_summary() {
     
     echo
 
-    log_info "Usage: $0 [claude|gemini|copilot|cursor-agent|qwen|opencode|codex|windsurf|kilocode|auggie|codebuddy|q]"
+    log_info "Usage: $0 [claude|antigravity|copilot|cursor-agent|qwen|opencode|codex|windsurf|kilocode|auggie|codebuddy|q]"
 }
 
 #==============================================================================
@@ -769,4 +769,3 @@ main() {
 if [[ "${BASH_SOURCE[0]}" == "${0}" ]]; then
     main "$@"
 fi
-

package/resources/gofer/bash-scripts/validate-artifact.sh

@@ -319,12 +319,16 @@ else
     fi
   else
     echo "FAIL: $ARTIFACT_TYPE validation failed for $FILE_PATH"
-    for e in "${ERRORS[@]}"; do
-      echo "  ERROR: $e"
-    done
-    for w in "${WARNINGS[@]}"; do
-      echo "  WARNING: $w"
-    done
+    if [[ ${#ERRORS[@]} -gt 0 ]]; then
+      for e in "${ERRORS[@]}"; do
+        echo "  ERROR: $e"
+      done
+    fi
+    if [[ ${#WARNINGS[@]} -gt 0 ]]; then
+      for w in "${WARNINGS[@]}"; do
+        echo "  WARNING: $w"
+      done
+    fi
   fi
 fi
 

package/resources/gofer/bash-scripts/verify-object-type-routing-workspace.sh

@@ -0,0 +1,184 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+WORKSPACE_ROOT="$(cd "$SCRIPT_DIR/../../../../.." && pwd)"
+DRY_RUN=false
+
+if [[ "${1:-}" == "--dry-run" ]]; then
+  DRY_RUN=true
+elif [[ $# -gt 0 ]]; then
+  echo "Usage: $0 [--dry-run]" >&2
+  exit 64
+fi
+
+required_paths=(
+  "front/eai-app-template/packages/platform-sdk/__tests__/object-types.test.ts"
+  "front/eai-app-template/packages/platform-sdk/__tests__/resources.test.ts"
+  "front/eai-app-template/packages/platform-sdk/src/resource-routing.ts"
+  "front/eai-app-template/src/app/api/eai/[[...rest]]/route.test.ts"
+  "front/eai-app-template/src/hooks/useResources.test.tsx"
+  "front/eai-app-template/src/lib/platform/publicapi-url.test.ts"
+  "front/eai-app-template/src/lib/platform/seed-object-types.test.ts"
+  "front/eai-app-template/src/lib/platform/storage-provisioning.test.ts"
+  "front/eai-app-template/src/lib/platform/verify-platform.test.ts"
+  "front/eai-app-template/tests/generate-object-types-json.test.mjs"
+  "ops/eai-cli/tests/unit/object-type-identifiers.test.ts"
+  "ops/eai-cli/tests/integration/gofer.test.ts"
+  "ops/eai-cli/tests/integration/init.test.ts"
+  "ops/eai-cli/tests/integration/resources-command.test.ts"
+  "ops/eai-cli/tests/integration/types.test.ts"
+  "ops/gofer/tests/unit/scripts/v4-resource-contract-validator.test.ts"
+  "ops/gofer/tests/integration/v4-resource-contract-validator.integration.test.ts"
+  "ops/gofer/tests/integration/object-type-identifier-audit-schema.integration.test.ts"
+  "ops/gofer/tests/integration/object-type-identifiers-validator.integration.test.ts"
+  "ops/gofer/tests/integration/object-type-routing-phase-bundle.integration.test.ts"
+  "ops/gofer/tests/integration/object-type-routing-workspace-validator.integration.test.ts"
+  "ops/gofer/tests/unit/extension/ResourceSyncer.workspace-sync.test.ts"
+  "ops/gofer/extension/resources/bash-scripts/verify-object-type-routing-workspace.sh"
+  "front/Configurator/testing/__tests__/unit/collections/object-types-identifier-contract.test.ts"
+  "front/Configurator/testing/__tests__/unit/collections/object-types-scope.test.ts"
+  "front/Configurator/testing/__tests__/unit/collections/object-types-reserved-slugs.test.ts"
+  "front/Configurator/testing/__tests__/unit/collections/object-types-api-error-status.test.ts"
+  "front/Configurator/testing/__tests__/unit/api/tenant-starter-bootstrap-seeds.test.ts"
+  "front/Configurator/testing/__tests__/integration/api/data-api-remote-proxy.test.ts"
+  "front/Configurator/testing/__tests__/unit/app-api-remote-proxy-guardrail.test.ts"
+  "front/Configurator/tests/unit/eai-product-catalog-seed.test.ts"
+  "mid/PublicAPI/src/tests/unit/test_object_type_identifiers.py"
+  "mid/PublicAPI/src/tests/unit/test_object_type_contract.py"
+  "mid/PublicAPI/src/tests/unit/test_resources_proxy_router.py"
+  "mid/PublicAPI/src/tests/unit/test_v4_openapi_sections.py"
+  "mid/PublicAPI/src/tests/unit/test_region_aware_apim_workflows.py"
+  "mid/PublicAPI/src/tests/unit/test_opa_auth_middleware.py"
+  "mid/PublicAPI/src/tests/unit/test_v4_management_routes.py"
+  "mid/PublicAPI/src/tests/unit/test_legacy_resource_routes.py"
+  "mid/PublicAPI/src/tests/unit/test_telemetry.py"
+  "mid/AdminAPI/src/services/object_type_identifiers.py"
+  "mid/AdminAPI/tests/test_object_type_identifiers.py"
+  "mid/AdminAPI/tests/test_platform_storage.py"
+  "mid/AdminAPI/tests/test_v4_platform_manifest_models.py"
+  "mid/ResourceAPI/tests/unit/test_object_type_identifiers.py"
+  "mid/ResourceAPI/tests/unit/test_reserved_object_type_routes.py"
+  "mid/ResourceAPI/tests/unit/test_object_type_models.py"
+  "mid/ResourceAPI/tests/unit/test_object_type_cache.py"
+  "mid/ResourceAPI/tests/unit/test_resource_service_routing.py"
+  "mid/ResourceAPI/tests/unit/test_object_type_routing_boundary.py"
+  "ops/tech-docs/.github/scripts/validate-object-type-routing-contract.mjs"
+  "ops/tech-docs/.github/scripts/validate-object-type-routing-schemas.mjs"
+  "ops/tech-docs/.github/scripts/sync-object-type-routing-runtime-assets.mjs"
+  "ops/tech-docs/static/contracts/object-type-routing-v1.json"
+  "ops/tech-docs/static/schemas/object-type-manifest-v1.schema.json"
+  "ops/tech-docs/static/schemas/resource-action-v1.schema.json"
+  "ops/cloud-monitor/tests/helpers/inventory-object-type-routing.test.ts"
+  "ops/cloud-monitor/tests/helpers/object-type-routing-canary.test.ts"
+  "ops/cloud-monitor/tests/helpers/publicapi-route-family-probes.test.ts"
+  "ops/cloud-monitor/tests/helpers/cross-service-scope.test.ts"
+  "ops/cloud-monitor/tests/cross-service/contracts/backend/object-type-routing.spec.ts"
+  "ops/cloud-monitor/tests/cross-service/contracts/backend/v4-route-family-apim.spec.ts"
+)
+
+coverage_maps=(
+  "front/eai-app-template/.eai/test-coverage.json"
+  "ops/eai-cli/.eai/test-coverage.json"
+  "ops/gofer/.eai/test-coverage.json"
+  "front/Configurator/.eai/test-coverage.json"
+  "mid/PublicAPI/.eai/test-coverage.json"
+  "mid/AdminAPI/.eai/test-coverage.json"
+  "mid/ResourceAPI/.eai/test-coverage.json"
+  "ops/tech-docs/.eai/test-coverage.json"
+  "ops/cloud-monitor/.eai/test-coverage.json"
+)
+
+commands=(
+  "eai-app-template|npm run test:object-types-generator && npm test -- --runInBand packages/platform-sdk/__tests__/object-types.test.ts packages/platform-sdk/__tests__/resources.test.ts 'src/app/api/eai/[[...rest]]/route.test.ts' src/hooks/useResources.test.tsx src/lib/platform/publicapi-url.test.ts src/lib/platform/seed-object-types.test.ts src/lib/platform/storage-provisioning.test.ts src/lib/platform/verify-platform.test.ts && npm run typecheck && npm run check:object-types && npm run build"
+  "eai-cli|npm test -- --run tests/unit/object-type-identifiers.test.ts tests/integration/gofer.test.ts tests/integration/init.test.ts tests/integration/resources-command.test.ts tests/integration/types.test.ts && npm run typecheck && npm run lint && npm run build"
+  "eai-gofer|npm test -- --run tests/unit/scripts/v4-resource-contract-validator.test.ts tests/integration/v4-resource-contract-validator.integration.test.ts tests/integration/object-type-identifier-audit-schema.integration.test.ts tests/integration/object-type-identifiers-validator.integration.test.ts tests/integration/object-type-routing-phase-bundle.integration.test.ts tests/integration/object-type-routing-workspace-validator.integration.test.ts tests/unit/extension/ResourceSyncer.workspace-sync.test.ts && npm run gofer:generate:check && npm run typecheck && npm run lint && npm run build && npm run gofer:validate-v4-resource-contract -- --workspace ../.. --json"
+  "Configurator|npx jest --config testing/config/jest.config.js --runInBand --runTestsByPath testing/__tests__/unit/collections/object-types-identifier-contract.test.ts testing/__tests__/unit/collections/object-types-scope.test.ts testing/__tests__/unit/collections/object-types-reserved-slugs.test.ts testing/__tests__/unit/collections/object-types-api-error-status.test.ts testing/__tests__/unit/api/tenant-starter-bootstrap-seeds.test.ts testing/__tests__/integration/api/data-api-remote-proxy.test.ts testing/__tests__/unit/app-api-remote-proxy-guardrail.test.ts tests/unit/eai-product-catalog-seed.test.ts && npm run typecheck && npm run lint && npm run build"
+  "PublicAPI|uv run pytest src/tests/unit/test_object_type_identifiers.py src/tests/unit/test_object_type_contract.py src/tests/unit/test_resources_proxy_router.py src/tests/unit/test_v4_openapi_sections.py src/tests/unit/test_region_aware_apim_workflows.py src/tests/unit/test_opa_auth_middleware.py src/tests/unit/test_v4_management_routes.py src/tests/unit/test_legacy_resource_routes.py src/tests/unit/test_telemetry.py && uv run ruff check src/app/core/telemetry.py src/app/middleware/entra_auth.py src/app/middleware/opa_auth.py src/app/models/object_type_contract.py src/app/routers/v4/__init__.py src/app/routers/v4/data_contracts.py src/app/routers/v4/data_resources.py src/app/routers/v4/metadata.py src/app/services/object_type_identifiers.py src/app/services/resource_proxy_paths.py src/main.py src/tests/unit/test_object_type_identifiers.py src/tests/unit/test_object_type_contract.py src/tests/unit/test_resources_proxy_router.py src/tests/unit/test_v4_openapi_sections.py && uv run mypy src/app/core/telemetry.py src/app/middleware/entra_auth.py src/app/middleware/opa_auth.py src/app/models/object_type_contract.py src/app/routers/v4/__init__.py src/app/routers/v4/data_contracts.py src/app/routers/v4/data_resources.py src/app/routers/v4/metadata.py src/app/services/object_type_identifiers.py src/app/services/resource_proxy_paths.py src/main.py && uv build"
+  "AdminAPI|uv run pytest tests/test_object_type_identifiers.py tests/test_platform_storage.py tests/test_v4_platform_manifest_models.py && uv run ruff check src/api/routes/platform.py src/services/object_type_identifiers.py tests/test_object_type_identifiers.py tests/test_platform_storage.py tests/test_v4_platform_manifest_models.py && uv run python -m compileall -q src tests/test_object_type_identifiers.py tests/test_platform_storage.py tests/test_v4_platform_manifest_models.py"
+  "ResourceAPI|uv run pytest tests/unit/test_object_type_identifiers.py tests/unit/test_reserved_object_type_routes.py tests/unit/test_object_type_models.py tests/unit/test_object_type_cache.py tests/unit/test_resource_service_routing.py tests/unit/test_object_type_routing_boundary.py && uv run ruff check src/services/object_type_identifiers.py src/routers/v4/resources.py src/routers/v4/query.py src/models/object_type.py src/services/object_type_cache.py tests/unit/test_object_type_identifiers.py tests/unit/test_reserved_object_type_routes.py tests/unit/test_object_type_models.py tests/unit/test_object_type_cache.py tests/unit/test_object_type_routing_boundary.py && uv run python -m compileall -q src tests/unit && uv build"
+  "tech-docs|npm run contracts:check && node .github/scripts/validate-object-type-routing-contract.mjs && node .github/scripts/validate-object-type-routing-schemas.mjs && node .github/scripts/sync-object-type-routing-runtime-assets.mjs --check && npm run typecheck && npm run build"
+  "cloud-monitor|node --import tsx --test tests/helpers/inventory-object-type-routing.test.ts tests/helpers/object-type-routing-canary.test.ts tests/helpers/publicapi-route-family-probes.test.ts tests/helpers/cross-service-scope.test.ts && npx playwright test --list tests/cross-service/contracts/backend/object-type-routing.spec.ts tests/cross-service/contracts/backend/v4-route-family-apim.spec.ts --project=services-dev && npm run guard:e2e-data && npm run guard:cross-service-scope && npm run guard:cross-service-contracts && npm run guard:cross-service-data-lifecycle && npm run typecheck && npm run lint && npm run build"
+)
+
+repo_dir() {
+  case "$1" in
+    eai-app-template) echo "$WORKSPACE_ROOT/front/eai-app-template" ;;
+    eai-cli) echo "$WORKSPACE_ROOT/ops/eai-cli" ;;
+    eai-gofer) echo "$WORKSPACE_ROOT/ops/gofer" ;;
+    Configurator) echo "$WORKSPACE_ROOT/front/Configurator" ;;
+    PublicAPI) echo "$WORKSPACE_ROOT/mid/PublicAPI" ;;
+    AdminAPI) echo "$WORKSPACE_ROOT/mid/AdminAPI" ;;
+    ResourceAPI) echo "$WORKSPACE_ROOT/mid/ResourceAPI" ;;
+    tech-docs) echo "$WORKSPACE_ROOT/ops/tech-docs" ;;
+    cloud-monitor) echo "$WORKSPACE_ROOT/ops/cloud-monitor" ;;
+    *) return 1 ;;
+  esac
+}
+
+echo "Object Type routing verification workspace: $WORKSPACE_ROOT"
+echo "Required paths (${#required_paths[@]}):"
+for relative_path in "${required_paths[@]}"; do
+  if [[ ! -e "$WORKSPACE_ROOT/$relative_path" ]]; then
+    echo "MISSING $relative_path" >&2
+    exit 2
+  fi
+  echo "PATH $relative_path"
+done
+
+echo "Coverage maps (${#coverage_maps[@]}):"
+for relative_path in "${coverage_maps[@]}"; do
+  if ! jq -e '[.. | objects | .id? // empty] | map(select(test("(canonical-object-type|object-type-routing)"))) | length > 0' \
+    "$WORKSPACE_ROOT/$relative_path" >/dev/null; then
+    echo "COVERAGE_MISSING $relative_path" >&2
+    exit 2
+  fi
+  echo "COVERAGE $relative_path"
+done
+
+echo "Repository commands (${#commands[@]}):"
+for entry in "${commands[@]}"; do
+  name="${entry%%|*}"
+  command="${entry#*|}"
+  echo "COMMAND $name :: $command"
+done
+
+if [[ "$DRY_RUN" == "true" ]]; then
+  echo "DRY_RUN_OK paths=${#required_paths[@]} coverage_maps=${#coverage_maps[@]} repositories=${#commands[@]}"
+  exit 0
+fi
+
+for entry in "${commands[@]}"; do
+  name="${entry%%|*}"
+  command="${entry#*|}"
+  directory="$(repo_dir "$name")"
+  echo "BEGIN $name"
+  (cd "$directory" && bash -o pipefail -c "$command")
+  echo "PASS $name"
+done
+
+node "$WORKSPACE_ROOT/ops/gofer/.specify/scripts/node/validate-object-type-routing-workspace.mjs" \
+  --workspace "$WORKSPACE_ROOT" \
+  --output "$WORKSPACE_ROOT/.specify/specs/039-canonical-object-type-routing/evidence/contract-compatibility.json" \
+  --json >/dev/null
+
+node "$WORKSPACE_ROOT/ops/gofer/.specify/scripts/node/object-type-routing-phase-bundle.mjs" \
+  verify-set \
+  --manifest "$WORKSPACE_ROOT/.specify/specs/039-canonical-object-type-routing/evidence/phase-bundles/manifest.json" \
+  --reconstruct \
+  --json >/dev/null
+
+for repo in "$WORKSPACE_ROOT/front/Configurator" "$WORKSPACE_ROOT/mid/ResourceAPI"; do
+  if git -C "$repo" diff -U0 origin/main -- | grep -E '^\+.*(create_counter|create_histogram|Counter\(|Histogram\(|publish\(|emit\()' >/dev/null; then
+    echo "Unexpected Configurator/ResourceAPI instrumentation addition in $repo" >&2
+    exit 2
+  fi
+done
+
+if [[ "$(git -C "$WORKSPACE_ROOT/mid/PublicAPI" diff -U0 origin/main -- src/app/core/telemetry.py | grep -c '^+.*eai.publicapi.object_type_routing.rejections' || true)" -ne 2 ]]; then
+  echo "PublicAPI must contain the one counter name in initial and reset meter construction only." >&2
+  exit 2
+fi
+
+echo "VERIFY_OBJECT_TYPE_ROUTING_WORKSPACE_OK repositories=9 coverage_maps=9"

package/resources/gofer/claude-commands/eai-update.md

@@ -0,0 +1,46 @@
+## Update EAI Gofer
+
+Use this command to install or update EAI Gofer for the current AI coding app. This command works without an EAI project, a Gofer scaffold, or EAI sign-in.
+
+## Update Contract
+
+1. Do not run workspace checks, `eai init`, `eai whoami`, or pipeline stages.
+2. Use `claude` as the current semantic host.
+3. Check the current host first:
+   `node <plugin-root>/.specify/scripts/node/gofer-surface-update.mjs --action inspect --host claude --json`
+4. If the plugin root is not known, identify the installed plugin bundle before you run the helper.
+5. State whether EAI Gofer is installed and whether the host command is available.
+6. Explain the planned user-level change and ask for approval before any install or update command.
+7. After approval, run one of these commands from the bundled helper:
+   - Install: `node <plugin-root>/.specify/scripts/node/gofer-surface-update.mjs --action install --host claude --execute --json`
+   - Update: `node <plugin-root>/.specify/scripts/node/gofer-surface-update.mjs --action update --host claude --execute --json`
+8. After an actual install or update, the helper archives stale Gofer command and skill entries. It adds a small managed always-on instruction for Claude, Codex, Copilot, Antigravity, and VS Code. For Grok, it verifies the installed plugin's `skills/eai/SKILL.md` always-on contract instead of inventing a separate global instruction file. It keeps the current `eai` and `eai-update` entries. For Codex, a clean official local marketplace on `main` fast-forwards safely. A dirty, non-main, or unrecognised local marketplace remains unchanged and reports that its plugin update is incomplete while it still refreshes the always-on instruction. If the Codex marketplace source is unknown, it stops without changes.
+9. Run only the selected host by default. Use `--host all` only when the user explicitly asks to install or update every detected host.
+10. Show the required reload step from the helper output. Do not claim the command is ready until the host reloads.
+
+## Supported Hosts
+
+- Claude Code: refresh the marketplace and plugin, then run `/reload-plugins`.
+- Codex: refresh a confirmed Git marketplace and apply the plugin, then start a new task or restart Codex. A clean official local `main` checkout fast-forwards and applies the plugin. Other local checkouts keep their work unchanged, refresh the always-on instruction, and report what needs attention. An unknown source stops the update to protect local work.
+- GitHub Copilot: refresh the marketplace and plugin, then restart the CLI session or start a new app chat.
+- Google Antigravity: install or reinstall the repository plugin with `agy`, then start a new Antigravity session.
+- Grok Build: install or update the repository plugin with `grok`, then start a new Grok Build session.
+- VS Code: install or update `EnterpriseAI.gofer`, then run **Developer: Reload Window**.
+
+## Limits
+
+- This command updates user-level plugins and extensions. It archives known stale Gofer entries and replaces only Gofer's managed instruction section. It does not remove unrelated user files or host-managed plugin caches. It does not add the repo-owned `.specify/` scaffold.
+- For a repository scaffold, use `/eai add or refresh the Gofer scaffold for this repo` after the host update.
+- Gemini files remain only for legacy file-format compatibility. Gemini is not a current updater host.
+- Keep the full Gofer delivery pipeline unchanged. This command only manages its host installation.
+
+**Blocker Mediation**
+
+- Before repeating a failed action or asking for missing input, read .specify/references/blocker-mediation.md and inspect the private blocker register with gofer-blocker-control.mjs. Reuse the same state directory and goal, subject and condition keys across stages, restarts and surfaces. Different wording, models or tools do not create a new blocker.
+- Classify the cause first. Missing user decisions, access, external dependencies and unavailable capabilities require a recorded wait. Reserve an ask event before asking; ask once, explain the business impact and required change, then stop affected work. An unanswered question is not new evidence. Do not poll or rephrase it to keep running.
+- Technical ask events require a fresh verification file under .specify/references/priority-outcome-protection.md: actual diagnosis, self-cause check and why no authorized repair is available. Business choices need no failed command. For feature tasks, use gofer-priority-check.mjs and the saved direction before switching work; this does not start delivery during maintenance or conversation.
+- For AI-solvable or unknown causes, reserve each attempt before execution. Allow one investigation and one different recovery within existing tighter budgets. Record its result even when interrupted or unsuccessful. An unfinished reservation must not launch again. Do not reset the register, change keys or switch surfaces to obtain more attempts.
+- Resume only after a real user answer or changed external evidence has been recorded and checked. The helper allows one evidence-backed resumption; exhausted limits need human review. Never invent approval or evidence. Successful model output and a running server do not resolve a blocker without the relevant check.
+- Save the blocker, unfinished tasks and next action before stopping. Continue only approved tasks that do not depend on it. Keep the original goal; update specs, plans, tasks and validation for accepted direction changes, and reopen stale checks. Do not quietly drop requirements to make progress.
+- Use node .specify/scripts/node/gofer-blocker-control.mjs --state-dir <private-state-directory> --event <private-event.json> before controlled actions; inspect with --state-dir alone, or add --task T001 for an independent task. A denied action, invalid record or missing helper means stop and explain the limitation, not bypass it. Use the installed plugin script path if no repo scaffold exists. Conversation-only work uses a private session state directory and does not require app setup or feature files.
+- Strict loop validation checks every recorded feature blocker. Shared instructions guide native chats; this helper cannot intercept calls that a host sends directly. Do not claim native enforcement from package tests alone.