@jeger-ai/opengantry 1.0.0

package/dist/cli/lib/msn.js

@@ -0,0 +1,5 @@
+import { MSN_ID_PATTERN } from "./constants.js";
+export function isValidMsnId(id) {
+    return MSN_ID_PATTERN.test(id.trim());
+}
+//# sourceMappingURL=msn.js.map

package/dist/cli/lib/msn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"msn.js","sourceRoot":"","sources":["../../../src/cli/lib/msn.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEhD,MAAM,UAAU,YAAY,CAAC,EAAU;IACrC,OAAO,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;AACxC,CAAC"}

package/dist/cli/lib/onboarding-flow.d.ts

@@ -0,0 +1,11 @@
+/** Canonical onboarding hints aligned with docs/ADOPTION.md adoption loop. */
+export declare const ONBOARDING_ADOPTION_DOC = "docs/ADOPTION.md";
+/** Tutorial mission id (9000 band — distinct from production MSN sequence). */
+export declare const TUTORIAL_MSN_ID = "MSN-9001";
+export declare const TUTORIAL_INTENT = "Tutorial: experience the OpenGantry mission loop (init --tutorial)";
+export declare function tutorialTeacherStampBlock(missionPath: string, msnId: string): string;
+export declare function onboardingRuntimeEnvHint(missionPath: string): string;
+export declare function onboardingVerifyHint(missionPath: string): string;
+export declare function onboardingStatusHint(): string;
+export declare function onboardingStartHint(): string;
+//# sourceMappingURL=onboarding-flow.d.ts.map

package/dist/cli/lib/onboarding-flow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding-flow.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/onboarding-flow.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,eAAO,MAAM,uBAAuB,qBAAqB,CAAC;AAE1D,+EAA+E;AAC/E,eAAO,MAAM,eAAe,aAAa,CAAC;AAE1C,eAAO,MAAM,eAAe,uEAC0C,CAAC;AAEvE,wBAAgB,yBAAyB,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAMpF;AAED,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEpE;AAED,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEhE;AAED,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAED,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C"}

package/dist/cli/lib/onboarding-flow.js

@@ -0,0 +1,25 @@
+/** Canonical onboarding hints aligned with docs/ADOPTION.md adoption loop. */
+export const ONBOARDING_ADOPTION_DOC = "docs/ADOPTION.md";
+/** Tutorial mission id (9000 band — distinct from production MSN sequence). */
+export const TUTORIAL_MSN_ID = "MSN-9001";
+export const TUTORIAL_INTENT = "Tutorial: experience the OpenGantry mission loop (init --tutorial)";
+export function tutorialTeacherStampBlock(missionPath, msnId) {
+    return [
+        `git add ${missionPath}`,
+        `git commit -m "[${msnId}] legislate mission"`,
+        "gapman teacher set \"$(git config user.email)\"  # if not already configured",
+    ].join("\n  ");
+}
+export function onboardingRuntimeEnvHint(missionPath) {
+    return `eval "$(gapman runtime env --mission ${missionPath})"`;
+}
+export function onboardingVerifyHint(missionPath) {
+    return `gapman verify --mission ${missionPath} --fix`;
+}
+export function onboardingStatusHint() {
+    return "gapman status --json --verbose";
+}
+export function onboardingStartHint() {
+    return 'gapman start "<intent>" --msn MSN-0001 --skill-key <key> --gate-command "npm test"';
+}
+//# sourceMappingURL=onboarding-flow.js.map

package/dist/cli/lib/onboarding-flow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding-flow.js","sourceRoot":"","sources":["../../../src/cli/lib/onboarding-flow.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,MAAM,CAAC,MAAM,uBAAuB,GAAG,kBAAkB,CAAC;AAE1D,+EAA+E;AAC/E,MAAM,CAAC,MAAM,eAAe,GAAG,UAAU,CAAC;AAE1C,MAAM,CAAC,MAAM,eAAe,GAC1B,oEAAoE,CAAC;AAEvE,MAAM,UAAU,yBAAyB,CAAC,WAAmB,EAAE,KAAa;IAC1E,OAAO;QACL,WAAW,WAAW,EAAE;QACxB,mBAAmB,KAAK,sBAAsB;QAC9C,8EAA8E;KAC/E,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,WAAmB;IAC1D,OAAO,wCAAwC,WAAW,IAAI,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,OAAO,2BAA2B,WAAW,QAAQ,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO,gCAAgC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO,oFAAoF,CAAC;AAC9F,CAAC"}

package/dist/cli/lib/out-of-scope-hint.d.ts

@@ -0,0 +1,7 @@
+import type { AdrHint } from "./types.js";
+/**
+ * Non-binding ADR hints for triage output. Routing stays manifest-only; Teacher
+ * MUST still evaluate ADRs during legislation (see RULES).
+ */
+export declare function collectOutOfScopeAdrHints(root: string, intentNorm: string): AdrHint[];
+//# sourceMappingURL=out-of-scope-hint.d.ts.map

package/dist/cli/lib/out-of-scope-hint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"out-of-scope-hint.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/out-of-scope-hint.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AA2C1C;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,EAAE,CA0BrF"}

package/dist/cli/lib/out-of-scope-hint.js

@@ -0,0 +1,79 @@
+import fs from "node:fs";
+import path from "node:path";
+import YAML from "yaml";
+import { REL_OUT_OF_SCOPE_DIR } from "./constants.js";
+function parseAdrFrontmatter(body) {
+    const m = body.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n([\s\S]*)$/);
+    if (!m)
+        return { meta: null, rest: body };
+    const yamlBlock = m[1].trim();
+    const rest = m[2] ?? "";
+    try {
+        const data = YAML.parse(yamlBlock);
+        if (typeof data !== "object" || data === null)
+            return { meta: null, rest };
+        const id = typeof data.id === "string" ? data.id : "";
+        const title = typeof data.title === "string" ? data.title : undefined;
+        const status = typeof data.status === "string" ? data.status : "ACTIVE";
+        let match_terms = [];
+        if (Array.isArray(data.match_terms)) {
+            match_terms = data.match_terms.filter((t) => typeof t === "string" && t.trim().length > 0);
+        }
+        if (!id)
+            return { meta: null, rest };
+        return {
+            meta: { id, title, status: status.toUpperCase(), match_terms },
+            rest,
+        };
+    }
+    catch {
+        return { meta: null, rest: body };
+    }
+}
+function intentMatchesTerms(intentNorm, terms) {
+    for (const t of terms) {
+        const needle = t.trim().toLowerCase();
+        if (needle.length === 0)
+            continue;
+        if (intentNorm.includes(needle))
+            return true;
+    }
+    return false;
+}
+/**
+ * Non-binding ADR hints for triage output. Routing stays manifest-only; Teacher
+ * MUST still evaluate ADRs during legislation (see RULES).
+ */
+export function collectOutOfScopeAdrHints(root, intentNorm) {
+    const dir = path.join(root, REL_OUT_OF_SCOPE_DIR);
+    if (!fs.existsSync(dir) || !fs.statSync(dir).isDirectory())
+        return [];
+    const hints = [];
+    const names = fs.readdirSync(dir).filter((n) => n.endsWith(".md") && n.toUpperCase() !== "README.MD");
+    for (const name of names) {
+        const abs = path.join(dir, name);
+        let body;
+        try {
+            body = fs.readFileSync(abs, "utf8");
+        }
+        catch {
+            continue;
+        }
+        const { meta } = parseAdrFrontmatter(body);
+        if (!meta)
+            continue;
+        if (meta.status === "SUPERSEDED")
+            continue;
+        if (meta.match_terms.length === 0)
+            continue;
+        if (!intentMatchesTerms(intentNorm, meta.match_terms))
+            continue;
+        hints.push({
+            id: meta.id,
+            title: meta.title,
+            note: `Intent may relate to ADR ${meta.id} (match_terms overlap); Teacher must confirm or reject during legislation.`,
+        });
+    }
+    return hints;
+}
+//# sourceMappingURL=out-of-scope-hint.js.map

package/dist/cli/lib/out-of-scope-hint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"out-of-scope-hint.js","sourceRoot":"","sources":["../../../src/cli/lib/out-of-scope-hint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAUtD,SAAS,mBAAmB,CAAC,IAAY;IACvC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;IACnE,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC1C,MAAM,SAAS,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAA4B,CAAC;QAC9D,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAC3E,MAAM,EAAE,GAAG,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QACtE,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;QACxE,IAAI,WAAW,GAAa,EAAE,CAAC;QAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YACpC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC1G,CAAC;QACD,IAAI,CAAC,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACrC,OAAO;YACL,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE,WAAW,EAAE;YAC9D,IAAI;SACL,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACpC,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAkB,EAAE,KAAe;IAC7D,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACtC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAClC,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;IAC/C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAY,EAAE,UAAkB;IACxE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;IAClD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;QAAE,OAAO,EAAE,CAAC;IAEtE,MAAM,KAAK,GAAc,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,CAAC;IACtG,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACjC,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY;YAAE,SAAS;QAC3C,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC5C,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC;YAAE,SAAS;QAChE,KAAK,CAAC,IAAI,CAAC;YACT,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,4BAA4B,IAAI,CAAC,EAAE,4EAA4E;SACtH,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/cli/lib/output-context.d.ts

@@ -0,0 +1,22 @@
+import type { OutputAudience } from "./audience-output.js";
+/** Reset per process invocation (tests may call multiple commands in one process). */
+export declare function resetOutputContext(): void;
+export declare function setOutputAudience(audience: OutputAudience | undefined): void;
+export declare function getOutputAudience(): OutputAudience | undefined;
+export declare function setJsonOutputMode(enabled: boolean): void;
+export declare function isJsonOutputMode(): boolean;
+export declare function isVerifierAudience(): boolean;
+export declare function shouldEmitInfo(): boolean;
+export declare function shouldEmitWarn(): boolean;
+/** Verifier mode: stderr only when message carries a stable GXT error code. */
+export declare function shouldEmitError(message: string): boolean;
+export interface ApplyAudienceFromArgvResult {
+    ok: boolean;
+    invalidValue?: string;
+}
+/**
+ * Resolve CLI/env audience and store on output context.
+ * Precedence: subcommand --audience > global --audience > GXT_AUDIENCE.
+ */
+export declare function applyAudienceFromArgv(cliRaw?: string, envRaw?: string | undefined): ApplyAudienceFromArgvResult;
+//# sourceMappingURL=output-context.d.ts.map

package/dist/cli/lib/output-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-context.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/output-context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAQ3D,sFAAsF;AACtF,wBAAgB,kBAAkB,IAAI,IAAI,CAGzC;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,cAAc,GAAG,SAAS,GAAG,IAAI,CAE5E;AAED,wBAAgB,iBAAiB,IAAI,cAAc,GAAG,SAAS,CAE9D;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAExD;AAED,wBAAgB,gBAAgB,IAAI,OAAO,CAE1C;AAED,wBAAgB,kBAAkB,IAAI,OAAO,CAE5C;AAED,wBAAgB,cAAc,IAAI,OAAO,CAGxC;AAED,wBAAgB,cAAc,IAAI,OAAO,CAGxC;AAED,+EAA+E;AAC/E,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAIxD;AAED,MAAM,WAAW,2BAA2B;IAC1C,EAAE,EAAE,OAAO,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,CAAC,EAAE,MAAM,EACf,MAAM,qBAA2B,GAChC,2BAA2B,CAO7B"}

package/dist/cli/lib/output-context.js

@@ -0,0 +1,55 @@
+import { resolveAudience } from "./audience-output.js";
+let activeAudience;
+let jsonOutputMode = false;
+const GXT_ERROR_PREFIX_RE = /\[GXT_[A-Z0-9_]+\]/;
+/** Reset per process invocation (tests may call multiple commands in one process). */
+export function resetOutputContext() {
+    activeAudience = undefined;
+    jsonOutputMode = false;
+}
+export function setOutputAudience(audience) {
+    activeAudience = audience;
+}
+export function getOutputAudience() {
+    return activeAudience;
+}
+export function setJsonOutputMode(enabled) {
+    jsonOutputMode = enabled;
+}
+export function isJsonOutputMode() {
+    return jsonOutputMode;
+}
+export function isVerifierAudience() {
+    return activeAudience === "verifier";
+}
+export function shouldEmitInfo() {
+    if (jsonOutputMode)
+        return true;
+    return !isVerifierAudience();
+}
+export function shouldEmitWarn() {
+    if (jsonOutputMode)
+        return true;
+    return !isVerifierAudience();
+}
+/** Verifier mode: stderr only when message carries a stable GXT error code. */
+export function shouldEmitError(message) {
+    if (jsonOutputMode)
+        return true;
+    if (!isVerifierAudience())
+        return true;
+    return GXT_ERROR_PREFIX_RE.test(message);
+}
+/**
+ * Resolve CLI/env audience and store on output context.
+ * Precedence: subcommand --audience > global --audience > GXT_AUDIENCE.
+ */
+export function applyAudienceFromArgv(cliRaw, envRaw = process.env.GXT_AUDIENCE) {
+    const resolved = resolveAudience(cliRaw, envRaw);
+    if (resolved.invalidCli) {
+        return { ok: false, invalidValue: resolved.invalidCli };
+    }
+    setOutputAudience(resolved.audience);
+    return { ok: true };
+}
+//# sourceMappingURL=output-context.js.map

package/dist/cli/lib/output-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-context.js","sourceRoot":"","sources":["../../../src/cli/lib/output-context.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,IAAI,cAA0C,CAAC;AAC/C,IAAI,cAAc,GAAG,KAAK,CAAC;AAE3B,MAAM,mBAAmB,GAAG,oBAAoB,CAAC;AAEjD,sFAAsF;AACtF,MAAM,UAAU,kBAAkB;IAChC,cAAc,GAAG,SAAS,CAAC;IAC3B,cAAc,GAAG,KAAK,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAoC;IACpE,cAAc,GAAG,QAAQ,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAgB;IAChD,cAAc,GAAG,OAAO,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,cAAc,KAAK,UAAU,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,IAAI,cAAc;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO,CAAC,kBAAkB,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,IAAI,cAAc;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO,CAAC,kBAAkB,EAAE,CAAC;AAC/B,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,IAAI,cAAc;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,CAAC,kBAAkB,EAAE;QAAE,OAAO,IAAI,CAAC;IACvC,OAAO,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC3C,CAAC;AAOD;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAAe,EACf,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY;IAEjC,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjD,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;QACxB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC;IAC1D,CAAC;IACD,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC"}

package/dist/cli/lib/program-audience-hook.d.ts

@@ -0,0 +1,4 @@
+import type { Command } from "commander";
+/** Commander preAction: global/subcommand --audience and GXT_AUDIENCE env. */
+export declare function registerAudiencePreActionHook(program: Command): void;
+//# sourceMappingURL=program-audience-hook.d.ts.map

package/dist/cli/lib/program-audience-hook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"program-audience-hook.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/program-audience-hook.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAwBzC,8EAA8E;AAC9E,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAapE"}

package/dist/cli/lib/program-audience-hook.js

@@ -0,0 +1,35 @@
+import { CLI_NAME } from "./constants.js";
+import { applyAudienceFromArgv, setJsonOutputMode } from "./output-context.js";
+import { logError, setExitCode } from "./cli-io.js";
+function rootCommand(cmd) {
+    let current = cmd;
+    while (current.parent)
+        current = current.parent;
+    return current;
+}
+function audienceRawFromArgv(actionCommand) {
+    const actionOpts = actionCommand.opts();
+    const rootOpts = rootCommand(actionCommand).opts();
+    return actionOpts.audience ?? rootOpts.audience;
+}
+function jsonFlagFromArgv(actionCommand) {
+    const actionOpts = actionCommand.opts();
+    if (actionOpts.json === true)
+        return true;
+    const rootOpts = rootCommand(actionCommand).opts();
+    return rootOpts.json === true;
+}
+/** Commander preAction: global/subcommand --audience and GXT_AUDIENCE env. */
+export function registerAudiencePreActionHook(program) {
+    program.hook("preAction", (_thisCommand, actionCommand) => {
+        const raw = audienceRawFromArgv(actionCommand);
+        const applied = applyAudienceFromArgv(raw);
+        if (!applied.ok) {
+            logError(`invalid --audience "${applied.invalidValue}" (expected worker|teacher|verifier|platform)`);
+            setExitCode(2);
+            throw new Error(`${CLI_NAME}: invalid audience`);
+        }
+        setJsonOutputMode(jsonFlagFromArgv(actionCommand));
+    });
+}
+//# sourceMappingURL=program-audience-hook.js.map

package/dist/cli/lib/program-audience-hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"program-audience-hook.js","sourceRoot":"","sources":["../../../src/cli/lib/program-audience-hook.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAEpD,SAAS,WAAW,CAAC,GAAY;IAC/B,IAAI,OAAO,GAAY,GAAG,CAAC;IAC3B,OAAO,OAAO,CAAC,MAAM;QAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;IAChD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,mBAAmB,CAAC,aAAsB;IACjD,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,EAA2B,CAAC;IACjE,MAAM,QAAQ,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC,IAAI,EAA2B,CAAC;IAC5E,OAAO,UAAU,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC;AAClD,CAAC;AAED,SAAS,gBAAgB,CAAC,aAAsB;IAC9C,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,EAAwB,CAAC;IAC9D,IAAI,UAAU,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,QAAQ,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC,IAAI,EAAwB,CAAC;IACzE,OAAO,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC;AAChC,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,6BAA6B,CAAC,OAAgB;IAC5D,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,aAAa,EAAE,EAAE;QACxD,MAAM,GAAG,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,QAAQ,CACN,uBAAuB,OAAO,CAAC,YAAY,+CAA+C,CAC3F,CAAC;YACF,WAAW,CAAC,CAAC,CAAC,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,oBAAoB,CAAC,CAAC;QACnD,CAAC;QACD,iBAAiB,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/lib/runtime-env.d.ts

@@ -0,0 +1,23 @@
+import type { Workspace } from "./workspace.js";
+export interface ResolvedRuntimeEnv {
+    /** Absolute Git repo root */
+    repo_root: string;
+    /** Repo-relative mission path using forward slashes */
+    mission_file: string;
+    /** Absolute normalized path to mission file */
+    mission_file_absolute: string;
+    /** MSN id or empty string when not extracted */
+    msn_id: string;
+    skill_key: string;
+    /** Absolute TMVC roots, newline-delimited string for shells */
+    tmvc_roots_joined: string;
+    forbidden_zones_joined: string;
+    /** Absolute WORKER_LOG path */
+    worker_log: string;
+}
+/**
+ * Resolve worker runtime variables for a mission (manifest-aligned TMVC/forbidden zones).
+ */
+export declare function resolveRuntimeEnv(workspace: Workspace, missionRepoOrAbsPath: string): ResolvedRuntimeEnv;
+export declare function resolvedRuntimeEnvToJsonPayload(r: ResolvedRuntimeEnv): Record<string, string>;
+//# sourceMappingURL=runtime-env.d.ts.map

package/dist/cli/lib/runtime-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-env.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/runtime-env.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAGhD,MAAM,WAAW,kBAAkB;IACjC,6BAA6B;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,uDAAuD;IACvD,YAAY,EAAE,MAAM,CAAC;IACrB,+CAA+C;IAC/C,qBAAqB,EAAE,MAAM,CAAC;IAC9B,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,+DAA+D;IAC/D,iBAAiB,EAAE,MAAM,CAAC;IAC1B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,+BAA+B;IAC/B,UAAU,EAAE,MAAM,CAAC;CACpB;AAgBD;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,GAAG,kBAAkB,CAmCxG;AAOD,wBAAgB,+BAA+B,CAAC,CAAC,EAAE,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAW7F"}

package/dist/cli/lib/runtime-env.js

@@ -0,0 +1,64 @@
+import fs from "node:fs";
+import path from "node:path";
+import { agentErrorAbsolutePath } from "./agent-error.js";
+import { parseMissionFile } from "./mission-parser.js";
+import { defaultWorkerLogPath } from "./trace.js";
+function toRepoRelativePosix(repoRoot, absolutePath) {
+    const rel = path.relative(repoRoot, path.resolve(absolutePath));
+    if (rel.startsWith("..") || path.isAbsolute(rel)) {
+        throw new Error(`gapman runtime: mission path outside repository`);
+    }
+    return rel.split(path.sep).join("/");
+}
+function resolvePaths(repoRoot, rootsOrZones) {
+    return rootsOrZones.map((r) => path.resolve(repoRoot, r.replace(/\\/g, path.sep)));
+}
+/**
+ * Resolve worker runtime variables for a mission (manifest-aligned TMVC/forbidden zones).
+ */
+export function resolveRuntimeEnv(workspace, missionRepoOrAbsPath) {
+    const { root, manifest } = workspace;
+    const missionArg = missionRepoOrAbsPath;
+    const mission = parseMissionFile(root, missionArg);
+    const skillKey = mission.skillKey?.trim();
+    if (!skillKey?.length) {
+        throw new Error(`gapman runtime: mission missing skill_key / Skill key (${mission.rawPath})`);
+    }
+    const skill = manifest.skills[skillKey];
+    if (!skill) {
+        throw new Error(`gapman runtime: manifest has no skill "${skillKey}". Rule 4.4: sync manifest with skills.`);
+    }
+    const missionAbs = path.resolve(mission.rawPath);
+    const missionRel = toRepoRelativePosix(root, missionAbs);
+    const msnRaw = mission.msnId ?? "";
+    const msn_id = /^MSN-\d{4}$/.test(msnRaw) ? msnRaw : "";
+    const tmvcAbs = resolvePaths(root, skill.tmvc_roots);
+    const fzAbs = resolvePaths(root, skill.forbidden_zones);
+    return {
+        repo_root: path.resolve(root),
+        mission_file: missionRel,
+        mission_file_absolute: missionAbs,
+        msn_id,
+        skill_key: skillKey,
+        tmvc_roots_joined: tmvcAbs.join("\n"),
+        forbidden_zones_joined: fzAbs.join("\n"),
+        worker_log: defaultWorkerLogPath(root),
+    };
+}
+function lastErrorFileForRepo(repoRoot) {
+    const abs = agentErrorAbsolutePath(repoRoot);
+    return fs.existsSync(abs) ? abs : "";
+}
+export function resolvedRuntimeEnvToJsonPayload(r) {
+    return {
+        GXT_REPO_ROOT: r.repo_root,
+        GXT_MISSION_FILE: r.mission_file,
+        GXT_MSN_ID: r.msn_id,
+        GXT_SKILL_KEY: r.skill_key,
+        GXT_TMVC_ROOTS: r.tmvc_roots_joined,
+        GXT_FORBIDDEN_ZONES: r.forbidden_zones_joined,
+        GXT_WORKER_LOG: r.worker_log,
+        GXT_LAST_ERROR_FILE: lastErrorFileForRepo(r.repo_root),
+    };
+}
+//# sourceMappingURL=runtime-env.js.map

package/dist/cli/lib/runtime-env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-env.js","sourceRoot":"","sources":["../../../src/cli/lib/runtime-env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAmBlD,SAAS,mBAAmB,CAAC,QAAgB,EAAE,YAAoB;IACjE,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IAChE,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB,EAAE,YAA+B;IACrE,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5B,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CACnD,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAoB,EAAE,oBAA4B;IAClF,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC;IACrC,MAAM,UAAU,GAAG,oBAAoB,CAAC;IACxC,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;IAE1C,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,0DAA0D,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC;IAChG,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,0CAA0C,QAAQ,yCAAyC,CAC5F,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,mBAAmB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAExD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IAExD,OAAO;QACL,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QAC7B,YAAY,EAAE,UAAU;QACxB,qBAAqB,EAAE,UAAU;QACjC,MAAM;QACN,SAAS,EAAE,QAAQ;QACnB,iBAAiB,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QACrC,sBAAsB,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;QACxC,UAAU,EAAE,oBAAoB,CAAC,IAAI,CAAC;KACvC,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB;IAC5C,MAAM,GAAG,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IAC7C,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,CAAqB;IACnE,OAAO;QACL,aAAa,EAAE,CAAC,CAAC,SAAS;QAC1B,gBAAgB,EAAE,CAAC,CAAC,YAAY;QAChC,UAAU,EAAE,CAAC,CAAC,MAAM;QACpB,aAAa,EAAE,CAAC,CAAC,SAAS;QAC1B,cAAc,EAAE,CAAC,CAAC,iBAAiB;QACnC,mBAAmB,EAAE,CAAC,CAAC,sBAAsB;QAC7C,cAAc,EAAE,CAAC,CAAC,UAAU;QAC5B,mBAAmB,EAAE,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;KACvD,CAAC;AACJ,CAAC"}

package/dist/cli/lib/runtime-exec-orchestrator.d.ts

@@ -0,0 +1,14 @@
+import { type RuntimeExecResult } from "./runtime-exec-result.js";
+import type { Workspace } from "./workspace.js";
+export type { RuntimeExecResult } from "./runtime-exec-result.js";
+export interface RuntimeExecOptions {
+    mission: string;
+    workerCommand: string[];
+    cwd?: string;
+    workerLog?: string;
+    append?: boolean;
+    timeoutMs?: number;
+    streamOutput?: boolean;
+}
+export declare function runRuntimeExec(workspace: Workspace, options: RuntimeExecOptions): Promise<RuntimeExecResult>;
+//# sourceMappingURL=runtime-exec-orchestrator.d.ts.map

package/dist/cli/lib/runtime-exec-orchestrator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-exec-orchestrator.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/runtime-exec-orchestrator.ts"],"names":[],"mappings":"AAOA,OAAO,EAIL,KAAK,iBAAiB,EACvB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,YAAY,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAElE,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AA6FD,wBAAsB,cAAc,CAClC,SAAS,EAAE,SAAS,EACpB,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,iBAAiB,CAAC,CA0E5B"}

package/dist/cli/lib/runtime-exec-orchestrator.js

@@ -0,0 +1,131 @@
+import crypto from "node:crypto";
+import path from "node:path";
+import { writeAgentErrorPayload } from "./agent-error.js";
+import { buildForbiddenBaseline, detectForbiddenViolations } from "./forbidden-scan.js";
+import { createTelemetryWriter } from "./telemetry-log.js";
+import { resolvedRuntimeEnvToJsonPayload, resolveRuntimeEnv } from "./runtime-env.js";
+import { captureWorkerProcess } from "./runtime-exec-worker.js";
+import { buildRuntimeExecResult, emptyWorkerCommandResult, runtimeErrorResult, } from "./runtime-exec-result.js";
+function randomFlightId() {
+    return crypto.randomUUID();
+}
+function parseJoinedLines(s) {
+    return s
+        .split("\n")
+        .map((x) => x.trim())
+        .filter((x) => x.length > 0);
+}
+function chooseWorkingDirectory(repoRoot, cwd) {
+    if (!cwd?.trim())
+        return repoRoot;
+    return path.resolve(repoRoot, cwd);
+}
+function logFlightEnd(writer, result, violationCount) {
+    writer.logEvent({
+        type: "flight_end",
+        status: result.status,
+        exit_code: result.exitCode,
+        worker_exit_code: result.workerExitCode,
+        worker_signal: result.workerSignal,
+        violation_count: violationCount,
+    });
+    writer.close();
+}
+function beginRuntimeFlight(workspace, options) {
+    const resolved = resolveRuntimeEnv(workspace, options.mission);
+    const envPayload = resolvedRuntimeEnvToJsonPayload(resolved);
+    const repoRoot = resolved.repo_root;
+    const forbiddenZones = parseJoinedLines(resolved.forbidden_zones_joined);
+    const workerLogPath = options.workerLog
+        ? path.resolve(repoRoot, options.workerLog)
+        : resolved.worker_log;
+    const cwd = chooseWorkingDirectory(repoRoot, options.cwd);
+    const flightId = randomFlightId();
+    const streamOutput = options.streamOutput !== false;
+    const baseline = buildForbiddenBaseline(repoRoot, forbiddenZones);
+    const writer = createTelemetryWriter(workerLogPath, {
+        flight_id: flightId,
+        msn_id: resolved.msn_id,
+        mission_file: resolved.mission_file,
+        skill_key: resolved.skill_key,
+        worker_command: options.workerCommand,
+    }, options.append === true);
+    writer.logEvent({
+        type: "flight_start",
+        repo_root: repoRoot,
+        skill_key: resolved.skill_key,
+        worker_log: workerLogPath,
+        worker_command: options.workerCommand,
+        forbidden_zones: forbiddenZones,
+    });
+    return {
+        resolved,
+        envPayload,
+        repoRoot,
+        forbiddenZones,
+        workerLogPath,
+        cwd,
+        flightId,
+        streamOutput,
+        baseline,
+        writer,
+    };
+}
+export async function runRuntimeExec(workspace, options) {
+    if (options.workerCommand.length === 0) {
+        return emptyWorkerCommandResult();
+    }
+    const { resolved, envPayload, repoRoot, forbiddenZones, workerLogPath, cwd, flightId, streamOutput, baseline, writer, } = beginRuntimeFlight(workspace, options);
+    const timeoutMs = options.timeoutMs;
+    const [cmd, ...argv] = options.workerCommand;
+    try {
+        const exit = await captureWorkerProcess({
+            command: cmd,
+            argv,
+            cwd,
+            env: { ...process.env, ...envPayload, GXT_WORKER_LOG: workerLogPath },
+            streamOutput,
+            timeoutMs,
+            writer,
+        });
+        if (exit.timedOut) {
+            writer.logEvent({ type: "timeout_kill", timeout_ms: timeoutMs ?? null });
+        }
+        writer.logEvent({
+            type: "proc_exit",
+            code: exit.code,
+            signal: exit.signal,
+            timed_out: exit.timedOut,
+        });
+        const violations = detectForbiddenViolations(baseline, forbiddenZones);
+        writer.logEvent({
+            type: "forbidden_scan",
+            violations,
+            violation_count: violations.length,
+        });
+        const result = buildRuntimeExecResult({
+            violations,
+            timedOut: exit.timedOut,
+            exitCode: exit.code,
+            exitSignal: exit.signal,
+            workerLogPath,
+            flightId,
+        });
+        logFlightEnd(writer, result, violations.length);
+        if (result.exitCode !== 0) {
+            writeAgentErrorPayload(repoRoot, resolved, result);
+        }
+        return result;
+    }
+    catch (e) {
+        writer.logEvent({
+            type: "runtime_error",
+            message: e instanceof Error ? e.message : String(e),
+        });
+        const errorResult = runtimeErrorResult(workerLogPath, flightId);
+        logFlightEnd(writer, errorResult, 0);
+        writeAgentErrorPayload(repoRoot, resolved, errorResult);
+        return errorResult;
+    }
+}
+//# sourceMappingURL=runtime-exec-orchestrator.js.map

package/dist/cli/lib/runtime-exec-orchestrator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-exec-orchestrator.js","sourceRoot":"","sources":["../../../src/cli/lib/runtime-exec-orchestrator.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AACxF,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,+BAA+B,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACtF,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,kBAAkB,GAEnB,MAAM,0BAA0B,CAAC;AAelC,SAAS,cAAc;IACrB,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAS;IACjC,OAAO,CAAC;SACL,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAgB,EAAE,GAAY;IAC5D,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE;QAAE,OAAO,QAAQ,CAAC;IAClC,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,YAAY,CACnB,MAAgD,EAChD,MAAyB,EACzB,cAAsB;IAEtB,MAAM,CAAC,QAAQ,CAAC;QACd,IAAI,EAAE,YAAY;QAClB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,gBAAgB,EAAE,MAAM,CAAC,cAAc;QACvC,aAAa,EAAE,MAAM,CAAC,YAAY;QAClC,eAAe,EAAE,cAAc;KAChC,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,EAAE,CAAC;AACjB,CAAC;AAED,SAAS,kBAAkB,CACzB,SAAoB,EACpB,OAA2B;IAa3B,MAAM,QAAQ,GAAG,iBAAiB,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/D,MAAM,UAAU,GAAG,+BAA+B,CAAC,QAAQ,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC;IACpC,MAAM,cAAc,GAAG,gBAAgB,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC;IACzE,MAAM,aAAa,GAAG,OAAO,CAAC,SAAS;QACrC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC;QAC3C,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;IACxB,MAAM,GAAG,GAAG,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;IAClC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC;IACpD,MAAM,QAAQ,GAAG,sBAAsB,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,qBAAqB,CAClC,aAAa,EACb;QACE,SAAS,EAAE,QAAQ;QACnB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,cAAc,EAAE,OAAO,CAAC,aAAa;KACtC,EACD,OAAO,CAAC,MAAM,KAAK,IAAI,CACxB,CAAC;IACF,MAAM,CAAC,QAAQ,CAAC;QACd,IAAI,EAAE,cAAc;QACpB,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,UAAU,EAAE,aAAa;QACzB,cAAc,EAAE,OAAO,CAAC,aAAa;QACrC,eAAe,EAAE,cAAc;KAChC,CAAC,CAAC;IACH,OAAO;QACL,QAAQ;QACR,UAAU;QACV,QAAQ;QACR,cAAc;QACd,aAAa;QACb,GAAG;QACH,QAAQ;QACR,YAAY;QACZ,QAAQ;QACR,MAAM;KACP,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,SAAoB,EACpB,OAA2B;IAE3B,IAAI,OAAO,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvC,OAAO,wBAAwB,EAAE,CAAC;IACpC,CAAC;IAED,MAAM,EACJ,QAAQ,EACR,UAAU,EACV,QAAQ,EACR,cAAc,EACd,aAAa,EACb,GAAG,EACH,QAAQ,EACR,YAAY,EACZ,QAAQ,EACR,MAAM,GACP,GAAG,kBAAkB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAE3C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IACpC,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC;IAE7C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC;YACtC,OAAO,EAAE,GAAI;YACb,IAAI;YACJ,GAAG;YACH,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,UAAU,EAAE,cAAc,EAAE,aAAa,EAAE;YACrE,YAAY;YACZ,SAAS;YACT,MAAM;SACP,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,IAAI,IAAI,EAAE,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,CAAC,QAAQ,CAAC;YACd,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,QAAQ;SACzB,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,yBAAyB,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QACvE,MAAM,CAAC,QAAQ,CAAC;YACd,IAAI,EAAE,gBAAgB;YACtB,UAAU;YACV,eAAe,EAAE,UAAU,CAAC,MAAM;SACnC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,sBAAsB,CAAC;YACpC,UAAU;YACV,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,UAAU,EAAE,IAAI,CAAC,MAAM;YACvB,aAAa;YACb,QAAQ;SACT,CAAC,CAAC;QAEH,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC1B,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,CAAC,QAAQ,CAAC;YACd,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;SACpD,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,kBAAkB,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QAChE,YAAY,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;QACrC,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;QACxD,OAAO,WAAW,CAAC;IACrB,CAAC;AACH,CAAC"}

package/dist/cli/lib/runtime-exec-process.d.ts

@@ -0,0 +1,23 @@
+export interface SpawnStreamCaptureOptions {
+    command: string;
+    argv: string[];
+    cwd: string;
+    env: NodeJS.ProcessEnv;
+    streamOutput: boolean;
+    timeoutMs?: number;
+    onSpawn?: (pid: number | null) => void;
+    onStdout: (chunk: Buffer, seq: number) => void;
+    onStderr: (chunk: Buffer, seq: number) => void;
+    onRuntimeError?: (message: string, errno: string | null) => void;
+}
+export interface SpawnStreamCaptureResult {
+    code: number | null;
+    signal: NodeJS.Signals | null;
+    timedOut: boolean;
+}
+export declare function hashProcessChunk(buf: Buffer): string;
+/**
+ * Spawn a child process with streaming stdout/stderr capture (side-effect orchestration boundary).
+ */
+export declare function spawnWithStreamCapture(options: SpawnStreamCaptureOptions): Promise<SpawnStreamCaptureResult>;
+//# sourceMappingURL=runtime-exec-process.d.ts.map

package/dist/cli/lib/runtime-exec-process.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-exec-process.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/runtime-exec-process.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,YAAY,EAAE,OAAO,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IACvC,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/C,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/C,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;CAClE;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IAC9B,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED;;GAEG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,wBAAwB,CAAC,CAqDnC"}

package/dist/cli/lib/runtime-exec-process.js

@@ -0,0 +1,55 @@
+import { spawn } from "node:child_process";
+import crypto from "node:crypto";
+export function hashProcessChunk(buf) {
+    return crypto.createHash("sha256").update(buf).digest("hex");
+}
+/**
+ * Spawn a child process with streaming stdout/stderr capture (side-effect orchestration boundary).
+ */
+export async function spawnWithStreamCapture(options) {
+    let timedOut = false;
+    let timeoutHandle;
+    let chunkSeq = 0;
+    const child = spawn(options.command, options.argv, {
+        cwd: options.cwd,
+        env: options.env,
+        stdio: ["ignore", "pipe", "pipe"],
+    });
+    options.onSpawn?.(child.pid ?? null);
+    const bumpAndEmit = (stream, chunk, sink) => {
+        chunkSeq += 1;
+        if (options.streamOutput) {
+            if (stream === "stdout")
+                process.stdout.write(chunk);
+            else
+                process.stderr.write(chunk);
+        }
+        sink(chunk, chunkSeq);
+    };
+    child.stdout?.on("data", (chunk) => {
+        const data = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk, "utf8");
+        bumpAndEmit("stdout", data, options.onStdout);
+    });
+    child.stderr?.on("data", (chunk) => {
+        const data = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk, "utf8");
+        bumpAndEmit("stderr", data, options.onStderr);
+    });
+    const timeoutMs = options.timeoutMs;
+    if (timeoutMs !== undefined && Number.isFinite(timeoutMs) && timeoutMs > 0) {
+        timeoutHandle = setTimeout(() => {
+            timedOut = true;
+            child.kill("SIGTERM");
+        }, timeoutMs);
+    }
+    const exit = await new Promise((resolve) => {
+        child.on("exit", (code, signal) => resolve({ code, signal }));
+        child.on("error", (err) => {
+            options.onRuntimeError?.(err.message, err.code ?? null);
+            resolve({ code: null, signal: null });
+        });
+    });
+    if (timeoutHandle)
+        clearTimeout(timeoutHandle);
+    return { ...exit, timedOut };
+}
+//# sourceMappingURL=runtime-exec-process.js.map