@jeger-ai/opengantry 1.1.1 → 2.0.0

package/dist/cli/program-core.js.map

@@ -1 +1 @@
-{"version":3,"file":"program-core.js","sourceRoot":"","sources":["../../src/cli/program-core.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAExD,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,OAAO;SACJ,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,gDAAgD,CAAC;SAC7D,MAAM,CAAC,GAAG,EAAE;QACX,QAAQ,EAAE,CAAC;IACb,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,yCAAyC,CAAC;SACtD,MAAM,CAAC,QAAQ,EAAE,wBAAwB,CAAC;SAC1C,MAAM,CAAC,WAAW,EAAE,gCAAgC,CAAC;SACrD,MAAM,CAAC,mBAAmB,EAAE,qDAAqD,CAAC;SAClF,MAAM,CAAC,CAAC,IAA8D,EAAE,EAAE;QACzE,SAAS,CAAC;YACR,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,QAAQ,EAAE,iBAAiB,EAAE;SAC9B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,wDAAwD,CAAC;SACrE,MAAM,CAAC,QAAQ,EAAE,wBAAwB,CAAC;SAC1C,MAAM,CAAC,mBAAmB,EAAE,qDAAqD,CAAC;SAClF,MAAM,CAAC,CAAC,IAA2C,EAAE,EAAE;QACtD,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,mEAAmE,CAAC;SAChF,MAAM,CAAC,SAAS,EAAE,wDAAwD,CAAC;SAC3E,MAAM,CAAC,OAAO,EAAE,gDAAgD,CAAC;SACjE,MAAM,CAAC,WAAW,EAAE,uCAAuC,CAAC;SAC5D,MAAM,CAAC,cAAc,EAAE,mDAAmD,CAAC;SAC3E,MAAM,CAAC,oBAAoB,EAAE,qCAAqC,CAAC;SACnE,MAAM,CAAC,mBAAmB,EAAE,mCAAmC,CAAC;SAChE,MAAM,CAAC,SAAS,EAAE,mBAAmB,CAAC;SACtC,MAAM,CAAC,YAAY,EAAE,gBAAgB,CAAC;SACtC,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC;SACrC,MAAM,CAAC,SAAS,EAAE,kBAAkB,CAAC;SACrC,MAAM,CAAC,sBAAsB,EAAE,0DAA0D,CAAC;SAC1F,MAAM,CAAC,wBAAwB,EAAE,iDAAiD,CAAC;SACnF,MAAM,CACL,YAAY,EACZ,gFAAgF,CACjF;SACA,MAAM,CAAC,KAAK,EAAE,IAcd,EAAE,EAAE;QACH,MAAM,OAAO,CAAC;YACZ,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,6EAA6E,CAAC;SAC1F,MAAM,CAAC,SAAS,EAAE,gEAAgE,CAAC;SACnF,MAAM,CAAC,WAAW,EAAE,gEAAgE,CAAC;SACrF,MAAM,CAAC,QAAQ,EAAE,sBAAsB,CAAC;SACxC,MAAM,CAAC,YAAY,EAAE,mEAAmE,CAAC;SACzF,MAAM,CAAC,kBAAkB,EAAE,kEAAkE,CAAC;SAC9F,MAAM,CAAC,CAAC,IAMR,EAAE,EAAE;QACH,UAAU,CAAC;YACT,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,mDAAmD,CAAC;SAChE,QAAQ,CAAC,aAAa,EAAE,kBAAkB,CAAC;SAC3C,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC;SACnC,MAAM,CACL,gBAAgB,EAChB,kFAAkF,CACnF;SACA,MAAM,CAAC,YAAY,EAAE,+BAA+B,EAAE,UAAU,CAAC;SACjE,MAAM,CACL,cAAc,EACd,wIAAwI,CACzI;SACA,MAAM,CAAC,KAAK,WAA0B,WAAqB;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAKlB,CAAC;QACL,IAAI,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,QAAQ,CAAC,2CAA2C,CAAC,CAAC;YACtD,WAAW,CAAC,CAAC,CAAC,CAAC;YACf,OAAO;QACT,CAAC;QACD,SAAS,CAAC;YACR,IAAI;YACJ,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,EAAE,IAAI,CAAC,GAAG;SACd,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,wEAAwE,CAAC;SACrF,QAAQ,CAAC,aAAa,EAAE,wBAAwB,CAAC;SACjD,MAAM,CAAC,YAAY,EAAE,0CAA0C,CAAC;SAChE,MAAM,CAAC,mBAAmB,EAAE,4BAA4B,CAAC;SACzD,MAAM,CAAC,sBAAsB,EAAE,4BAA4B,CAAC;SAC5D,MAAM,CAAC,iCAAiC,EAAE,wBAAwB,CAAC;SACnE,MAAM,CAAC,YAAY,EAAE,0CAA0C,CAAC;SAChE,MAAM,CAAC,mBAAmB,EAAE,gDAAgD,CAAC;SAC7E,MAAM,CAAC,QAAQ,EAAE,iCAAiC,CAAC;SACnD,MAAM,CAAC,mBAAmB,EAAE,qDAAqD,CAAC;SAClF,MAAM,CAAC,KAAK,WAA0B,WAAqB;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EASlB,CAAC;QACL,IAAI,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,QAAQ,CAAC,0CAA0C,CAAC,CAAC;YACrD,WAAW,CAAC,CAAC,CAAC,CAAC;YACf,OAAO;QACT,CAAC;QACD,QAAQ,CAAC;YACP,MAAM,EAAE,IAAI;YACZ,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;YAC/C,YAAY,EAAE,IAAI,CAAC,KAAK,KAAK,KAAK;YAClC,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,iBAAiB,EAAE;SAC9B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,YAAY,CAAC;SACrB,WAAW,CAAC,wDAAwD,CAAC;SACrE,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,aAAa,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"program-core.js","sourceRoot":"","sources":["../../src/cli/program-core.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAExD,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,OAAO;SACJ,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,gDAAgD,CAAC;SAC7D,MAAM,CAAC,GAAG,EAAE;QACX,QAAQ,EAAE,CAAC;IACb,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,yCAAyC,CAAC;SACtD,MAAM,CAAC,QAAQ,EAAE,wBAAwB,CAAC;SAC1C,MAAM,CAAC,WAAW,EAAE,gCAAgC,CAAC;SACrD,MAAM,CAAC,mBAAmB,EAAE,qDAAqD,CAAC;SAClF,MAAM,CAAC,CAAC,IAA8D,EAAE,EAAE;QACzE,SAAS,CAAC;YACR,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,QAAQ,EAAE,iBAAiB,EAAE;SAC9B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,wDAAwD,CAAC;SACrE,MAAM,CAAC,QAAQ,EAAE,wBAAwB,CAAC;SAC1C,MAAM,CAAC,mBAAmB,EAAE,qDAAqD,CAAC;SAClF,MAAM,CAAC,CAAC,IAA2C,EAAE,EAAE;QACtD,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,mEAAmE,CAAC;SAChF,MAAM,CAAC,SAAS,EAAE,wDAAwD,CAAC;SAC3E,MAAM,CAAC,OAAO,EAAE,gDAAgD,CAAC;SACjE,MAAM,CAAC,WAAW,EAAE,uCAAuC,CAAC;SAC5D,MAAM,CAAC,cAAc,EAAE,mDAAmD,CAAC;SAC3E,MAAM,CAAC,oBAAoB,EAAE,qCAAqC,CAAC;SACnE,MAAM,CAAC,mBAAmB,EAAE,mCAAmC,CAAC;SAChE,MAAM,CAAC,SAAS,EAAE,mBAAmB,CAAC;SACtC,MAAM,CAAC,YAAY,EAAE,gBAAgB,CAAC;SACtC,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC;SACrC,MAAM,CAAC,SAAS,EAAE,kBAAkB,CAAC;SACrC,MAAM,CAAC,sBAAsB,EAAE,0DAA0D,CAAC;SAC1F,MAAM,CAAC,wBAAwB,EAAE,iDAAiD,CAAC;SACnF,MAAM,CACL,YAAY,EACZ,gFAAgF,CACjF;SACA,MAAM,CAAC,KAAK,EAAE,IAAiB,EAAE,EAAE;QAClC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,6EAA6E,CAAC;SAC1F,MAAM,CAAC,SAAS,EAAE,gEAAgE,CAAC;SACnF,MAAM,CAAC,WAAW,EAAE,gEAAgE,CAAC;SACrF,MAAM,CAAC,QAAQ,EAAE,sBAAsB,CAAC;SACxC,MAAM,CAAC,YAAY,EAAE,mEAAmE,CAAC;SACzF,MAAM,CAAC,kBAAkB,EAAE,kEAAkE,CAAC;SAC9F,MAAM,CAAC,CAAC,IAMR,EAAE,EAAE;QACH,UAAU,CAAC;YACT,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,mDAAmD,CAAC;SAChE,QAAQ,CAAC,aAAa,EAAE,kBAAkB,CAAC;SAC3C,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC;SACnC,MAAM,CACL,gBAAgB,EAChB,kFAAkF,CACnF;SACA,MAAM,CAAC,YAAY,EAAE,+BAA+B,EAAE,UAAU,CAAC;SACjE,MAAM,CACL,cAAc,EACd,wIAAwI,CACzI;SACA,MAAM,CAAC,KAAK,WAA0B,WAAqB;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAKlB,CAAC;QACL,IAAI,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,QAAQ,CAAC,2CAA2C,CAAC,CAAC;YACtD,WAAW,CAAC,CAAC,CAAC,CAAC;YACf,OAAO;QACT,CAAC;QACD,SAAS,CAAC;YACR,IAAI;YACJ,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,EAAE,IAAI,CAAC,GAAG;SACd,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,wEAAwE,CAAC;SACrF,QAAQ,CAAC,aAAa,EAAE,wBAAwB,CAAC;SACjD,MAAM,CAAC,YAAY,EAAE,0CAA0C,CAAC;SAChE,MAAM,CAAC,mBAAmB,EAAE,4BAA4B,CAAC;SACzD,MAAM,CAAC,sBAAsB,EAAE,4BAA4B,CAAC;SAC5D,MAAM,CAAC,iCAAiC,EAAE,wBAAwB,CAAC;SACnE,MAAM,CAAC,YAAY,EAAE,0CAA0C,CAAC;SAChE,MAAM,CAAC,mBAAmB,EAAE,gDAAgD,CAAC;SAC7E,MAAM,CAAC,QAAQ,EAAE,iCAAiC,CAAC;SACnD,MAAM,CAAC,mBAAmB,EAAE,qDAAqD,CAAC;SAClF,MAAM,CAAC,KAAK,WAA0B,WAAqB;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EASlB,CAAC;QACL,IAAI,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,QAAQ,CAAC,0CAA0C,CAAC,CAAC;YACrD,WAAW,CAAC,CAAC,CAAC,CAAC;YACf,OAAO;QACT,CAAC;QACD,QAAQ,CAAC;YACP,MAAM,EAAE,IAAI;YACZ,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;YAC/C,YAAY,EAAE,IAAI,CAAC,KAAK,KAAK,KAAK;YAClC,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,iBAAiB,EAAE;SAC9B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,YAAY,CAAC;SACrB,WAAW,CAAC,wDAAwD,CAAC;SACrE,MAAM,CAAC,SAAS,EAAE,8CAA8C,CAAC;SACjE,MAAM,CAAC,KAAK,EAAE,IAAyB,EAAE,EAAE;QAC1C,MAAM,aAAa,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/cli/program-workflow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"program-workflow.d.ts","sourceRoot":"","sources":["../../src/cli/program-workflow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAQzC,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA+G/D"}
+{"version":3,"file":"program-workflow.d.ts","sourceRoot":"","sources":["../../src/cli/program-workflow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAYzC,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAmJ/D"}

package/dist/cli/program-workflow.js

@@ -1,7 +1,11 @@
 import { runLegislate } from "./commands/legislate.js";
 import { runMetrics } from "./commands/metrics.js";
 import { runVerify } from "./commands/verify.js";
-import { readStdinIfEmpty } from "./commands/triage.js";
+import { runScan } from "./commands/scan.js";
+import { runRegister } from "./commands/register.js";
+import { runCheckImports } from "./commands/check-imports.js";
+import { runPerimeter } from "./commands/perimeter.js";
+import { readStdinIfEmpty } from "./lib/program-stdin.js";
 import { getOutputAudience } from "./lib/output-context.js";
 import { logError, setExitCode } from "./lib/cli-io.js";
 export function registerWorkflowCommands(program) {
@@ -39,12 +43,15 @@ export function registerWorkflowCommands(program) {
     program
         .command("verify")
         .description("Git-proof (Teacher + MSN) + deterministic gate + hard-stop trace mapping vs WORKER_LOG.md")
-        .requiredOption("--mission <path>", "Mission file (.md or .yaml)")
+        .option("--mission <path>", "Mission file (.md or .yaml)")
+        .option("--changed-missions", "Verify all mission files changed vs base ref on current branch")
+        .option("--base-ref <ref>", "Base ref for --changed-missions (default: origin/main or main)")
         .option("--worker-log <path>", "Override WORKER_LOG.md path")
         .option("--cwd <dir>", "Working directory for gate command")
         .option("--fuzzy-trace", "Force content-based anchor matching for all numeric anchors")
         .option("--strict-trace", "Disable auto line-drift resolution (strict line numbers only)")
         .option("--skip-stale-evidence", "Skip TMVC stale-evidence binding for committed PASS trace lines")
+        .option("--ci", "Authoritative mode: fail-closed on KPI report stale evidence (use in CI)")
         .option("--pre-push", "Pre-push handoff: git-proof only for legislative stubs; full verify otherwise")
         .option("--break-glass", "Skip all verify gates when GXT_BYPASS_SECRET is authorized")
         .option("--reason <text>", "Mandatory break-glass reason (min 10 characters)")
@@ -56,23 +63,49 @@ export function registerWorkflowCommands(program) {
         .option("--audience <role>", "Tailor output: worker|teacher|verifier|platform")
         .action(async (opts) => {
         await runVerify({
-            mission: opts.mission,
-            workerLog: opts.workerLog,
-            cwd: opts.cwd,
-            fuzzyTrace: opts.fuzzyTrace,
-            strictTrace: opts.strictTrace,
-            skipStaleEvidence: opts.skipStaleEvidence,
-            prePush: opts.prePush,
-            breakGlass: opts.breakGlass,
+            ...opts,
             breakGlassReason: opts.reason,
             breakGlassCommit: opts.commit,
-            auditCommit: opts.auditCommit,
-            fix: opts.fix,
             fixNonInteractive: opts.nonInteractive,
-            json: opts.json,
             audience: getOutputAudience(),
         });
     });
+    program
+        .command("scan")
+        .description("Run llm_verifiers and write committed KPI report JSON for verify kpi_gate")
+        .requiredOption("--mission <path>", "Mission file with llm_verifiers configured")
+        .option("--cwd <dir>", "Working directory for verifier commands")
+        .option("--json", "Emit structured JSON")
+        .action((opts) => {
+        runScan(opts);
+    });
+    program
+        .command("register")
+        .description("AST discovery: propose skill scope from folder imports/exports (does not mutate MANIFEST)")
+        .argument("<dir>", "Repo-relative directory to analyze")
+        .option("--skill-key <key>", "Override suggested skill_key")
+        .option("--json", "Emit proposal JSON")
+        .action((dir, opts) => {
+        runRegister({ dir, skillKey: opts.skillKey, json: opts.json });
+    });
+    program
+        .command("check-imports")
+        .description("Deterministic AST import ban check for a folder (usable as gate_command)")
+        .argument("<dir>", "Repo-relative directory to scan")
+        .requiredOption("--ban <specifier...>", "Banned import specifier (repeatable)")
+        .option("--json", "Emit structured JSON")
+        .action((dir, opts) => {
+        runCheckImports({ dir, ban: opts.ban, json: opts.json });
+    });
+    program
+        .command("perimeter")
+        .description("Check protected governance files; local advisory, --ci requires verified signatures")
+        .option("--base-ref <ref>", "Base ref for change detection (default: origin/main or main)")
+        .option("--ci", "Authoritative CI mode: fail on unsigned protected-file commits")
+        .option("--json", "Emit structured JSON")
+        .action((opts) => {
+        runPerimeter(opts);
+    });
     program
         .command("metrics")
         .description("Git-native governance metrics (no local event ledger)")

package/dist/cli/program-workflow.js.map

@@ -1 +1 @@
-{"version":3,"file":"program-workflow.js","sourceRoot":"","sources":["../../src/cli/program-workflow.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAExD,MAAM,UAAU,wBAAwB,CAAC,OAAgB;IACvD,OAAO;SACJ,OAAO,CAAC,WAAW,CAAC;SACpB,WAAW,CAAC,4FAA4F,CAAC;SACzG,QAAQ,CAAC,aAAa,EAAE,iCAAiC,CAAC;SAC1D,cAAc,CAAC,YAAY,EAAE,2CAA2C,CAAC;SACzE,MAAM,CAAC,mBAAmB,EAAE,0DAA0D,CAAC;SACvF,MAAM,CAAC,mBAAmB,EAAE,+DAA+D,CAAC;SAC5F,MAAM,CAAC,cAAc,EAAE,+DAA+D,CAAC;SACvF,MAAM,CACL,sBAAsB,EACtB,gFAAgF,CACjF;SACA,MAAM,CACL,iCAAiC,EACjC,4DAA4D,CAC7D;SACA,MAAM,CAAC,KAAK,WAA0B,WAAqB;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAOlB,CAAC;QACL,IAAI,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,QAAQ,CAAC,8CAA8C,CAAC,CAAC;YACzD,WAAW,CAAC,CAAC,CAAC,CAAC;YACf,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,YAAY,CAAC;YAC1B,MAAM,EAAE,IAAI;YACZ,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;SAChD,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CACV,2FAA2F,CAC5F;SACA,cAAc,CAAC,kBAAkB,EAAE,6BAA6B,CAAC;SACjE,MAAM,CAAC,qBAAqB,EAAE,6BAA6B,CAAC;SAC5D,MAAM,CAAC,aAAa,EAAE,oCAAoC,CAAC;SAC3D,MAAM,CAAC,eAAe,EAAE,6DAA6D,CAAC;SACtF,MAAM,CAAC,gBAAgB,EAAE,+DAA+D,CAAC;SACzF,MAAM,CAAC,uBAAuB,EAAE,iEAAiE,CAAC;SAClG,MAAM,CAAC,YAAY,EAAE,+EAA+E,CAAC;SACrG,MAAM,CAAC,eAAe,EAAE,4DAA4D,CAAC;SACrF,MAAM,CAAC,iBAAiB,EAAE,kDAAkD,CAAC;SAC7E,MAAM,CAAC,gBAAgB,EAAE,sDAAsD,CAAC;SAChF,MAAM,CAAC,gBAAgB,EAAE,6DAA6D,CAAC;SACvF,MAAM,CAAC,OAAO,EAAE,oFAAoF,CAAC;SACrG,MAAM,CAAC,mBAAmB,EAAE,oDAAoD,CAAC;SACjF,MAAM,CAAC,QAAQ,EAAE,8FAA8F,CAAC;SAChH,MAAM,CAAC,mBAAmB,EAAE,iDAAiD,CAAC;SAC9E,MAAM,CACL,KAAK,EAAE,IAgBN,EAAE,EAAE;QACH,MAAM,SAAS,CAAC;YACd,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,gBAAgB,EAAE,IAAI,CAAC,MAAM;YAC7B,gBAAgB,EAAE,IAAI,CAAC,MAAM;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,iBAAiB,EAAE,IAAI,CAAC,cAAc;YACtC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,iBAAiB,EAAE;SAC9B,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IAEJ,OAAO;SACJ,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,uDAAuD,CAAC;SACpE,MAAM,CAAC,QAAQ,EAAE,0BAA0B,CAAC;SAC5C,MAAM,CAAC,cAAc,EAAE,mCAAmC,EAAE,MAAM,CAAC;SACnE,MAAM,CAAC,CAAC,IAAsC,EAAE,EAAE;QACjD,UAAU,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"program-workflow.js","sourceRoot":"","sources":["../../src/cli/program-workflow.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAExD,MAAM,UAAU,wBAAwB,CAAC,OAAgB;IACvD,OAAO;SACJ,OAAO,CAAC,WAAW,CAAC;SACpB,WAAW,CAAC,4FAA4F,CAAC;SACzG,QAAQ,CAAC,aAAa,EAAE,iCAAiC,CAAC;SAC1D,cAAc,CAAC,YAAY,EAAE,2CAA2C,CAAC;SACzE,MAAM,CAAC,mBAAmB,EAAE,0DAA0D,CAAC;SACvF,MAAM,CAAC,mBAAmB,EAAE,+DAA+D,CAAC;SAC5F,MAAM,CAAC,cAAc,EAAE,+DAA+D,CAAC;SACvF,MAAM,CACL,sBAAsB,EACtB,gFAAgF,CACjF;SACA,MAAM,CACL,iCAAiC,EACjC,4DAA4D,CAC7D;SACA,MAAM,CAAC,KAAK,WAA0B,WAAqB;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAOlB,CAAC;QACL,IAAI,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,QAAQ,CAAC,8CAA8C,CAAC,CAAC;YACzD,WAAW,CAAC,CAAC,CAAC,CAAC;YACf,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,YAAY,CAAC;YAC1B,MAAM,EAAE,IAAI;YACZ,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;SAChD,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CACV,2FAA2F,CAC5F;SACA,MAAM,CAAC,kBAAkB,EAAE,6BAA6B,CAAC;SACzD,MAAM,CAAC,oBAAoB,EAAE,gEAAgE,CAAC;SAC9F,MAAM,CAAC,kBAAkB,EAAE,gEAAgE,CAAC;SAC5F,MAAM,CAAC,qBAAqB,EAAE,6BAA6B,CAAC;SAC5D,MAAM,CAAC,aAAa,EAAE,oCAAoC,CAAC;SAC3D,MAAM,CAAC,eAAe,EAAE,6DAA6D,CAAC;SACtF,MAAM,CAAC,gBAAgB,EAAE,+DAA+D,CAAC;SACzF,MAAM,CAAC,uBAAuB,EAAE,iEAAiE,CAAC;SAClG,MAAM,CAAC,MAAM,EAAE,0EAA0E,CAAC;SAC1F,MAAM,CAAC,YAAY,EAAE,+EAA+E,CAAC;SACrG,MAAM,CAAC,eAAe,EAAE,4DAA4D,CAAC;SACrF,MAAM,CAAC,iBAAiB,EAAE,kDAAkD,CAAC;SAC7E,MAAM,CAAC,gBAAgB,EAAE,sDAAsD,CAAC;SAChF,MAAM,CAAC,gBAAgB,EAAE,6DAA6D,CAAC;SACvF,MAAM,CAAC,OAAO,EAAE,oFAAoF,CAAC;SACrG,MAAM,CAAC,mBAAmB,EAAE,oDAAoD,CAAC;SACjF,MAAM,CAAC,QAAQ,EAAE,8FAA8F,CAAC;SAChH,MAAM,CAAC,mBAAmB,EAAE,iDAAiD,CAAC;SAC9E,MAAM,CACL,KAAK,EAAE,IAmBN,EAAE,EAAE;QACH,MAAM,SAAS,CAAC;YACd,GAAG,IAAI;YACP,gBAAgB,EAAE,IAAI,CAAC,MAAM;YAC7B,gBAAgB,EAAE,IAAI,CAAC,MAAM;YAC7B,iBAAiB,EAAE,IAAI,CAAC,cAAc;YACtC,QAAQ,EAAE,iBAAiB,EAAE;SAC9B,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IAEJ,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,2EAA2E,CAAC;SACxF,cAAc,CAAC,kBAAkB,EAAE,4CAA4C,CAAC;SAChF,MAAM,CAAC,aAAa,EAAE,yCAAyC,CAAC;SAChE,MAAM,CAAC,QAAQ,EAAE,sBAAsB,CAAC;SACxC,MAAM,CAAC,CAAC,IAAuD,EAAE,EAAE;QAClE,OAAO,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CAAC,2FAA2F,CAAC;SACxG,QAAQ,CAAC,OAAO,EAAE,oCAAoC,CAAC;SACvD,MAAM,CAAC,mBAAmB,EAAE,8BAA8B,CAAC;SAC3D,MAAM,CAAC,QAAQ,EAAE,oBAAoB,CAAC;SACtC,MAAM,CAAC,CAAC,GAAW,EAAE,IAA2C,EAAE,EAAE;QACnE,WAAW,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,eAAe,CAAC;SACxB,WAAW,CAAC,0EAA0E,CAAC;SACvF,QAAQ,CAAC,OAAO,EAAE,iCAAiC,CAAC;SACpD,cAAc,CAAC,sBAAsB,EAAE,sCAAsC,CAAC;SAC9E,MAAM,CAAC,QAAQ,EAAE,sBAAsB,CAAC;SACxC,MAAM,CAAC,CAAC,GAAW,EAAE,IAAuC,EAAE,EAAE;QAC/D,eAAe,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,WAAW,CAAC;SACpB,WAAW,CAAC,qFAAqF,CAAC;SAClG,MAAM,CAAC,kBAAkB,EAAE,8DAA8D,CAAC;SAC1F,MAAM,CAAC,MAAM,EAAE,gEAAgE,CAAC;SAChF,MAAM,CAAC,QAAQ,EAAE,sBAAsB,CAAC;SACxC,MAAM,CAAC,CAAC,IAAwD,EAAE,EAAE;QACnE,YAAY,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,uDAAuD,CAAC;SACpE,MAAM,CAAC,QAAQ,EAAE,0BAA0B,CAAC;SAC5C,MAAM,CAAC,cAAc,EAAE,mCAAmC,EAAE,MAAM,CAAC;SACnE,MAAM,CAAC,CAAC,IAAsC,EAAE,EAAE;QACjD,UAAU,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACP,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jeger-ai/opengantry",
-  "version": "1.1.1",
+  "version": "2.0.0",
   "description": "OpenGantry GXT substrate + gapman CLI",
   "type": "module",
   "bin": {
@@ -49,6 +49,8 @@
   "dependencies": {
     "@clack/prompts": "^0.10.1",
     "@modelcontextprotocol/sdk": "^1.29.0",
+    "ajv": "^8.20.0",
+    "ajv-formats": "^3.0.1",
     "commander": "^12.1.0",
     "yaml": "^2.6.1",
     "zod": "^3.25.76"

package/templates/.gitagent/foreman/MANIFEST.json

@@ -33,5 +33,10 @@
     "src/auth/": "Tier-3",
     "src/db/schema/": "Tier-3"
   },
-  "risk_keywords": ["refactor", "migrate", "delete", "security", "schema"]
+  "risk_keywords": ["refactor", "migrate", "delete", "security", "schema"],
+  "perimeter_protected": [
+    "**/.gxt-skill.yaml",
+    ".gitagent/foreman/MANIFEST.json",
+    ".gitagent/teacher/RULES.md"
+  ]
 }

package/templates/.gitagent/teacher/KPI-REPORT.schema.yaml

@@ -0,0 +1,48 @@
+# KPI-REPORT.schema — JSON Schema for committed LLM/scan evidence reports
+# Consumed by gapman verify kpi phase (Ajv). Version label for docs only.
+$schema: https://json-schema.org/draft/2020-12/schema
+$id: https://opengantry.local/schemas/kpi-report.v2_0.json
+title: OpenGantryKpiReport
+type: object
+additionalProperties: false
+required:
+  - msn_id
+  - generated_at
+  - exit_code
+  - metrics
+properties:
+  msn_id:
+    type: string
+    pattern: "^MSN-[0-9]{4}$"
+  generated_at:
+    type: string
+    format: date-time
+  exit_code:
+    type: integer
+  metrics:
+    type: object
+    additionalProperties:
+      oneOf:
+        - type: number
+        - type: boolean
+  findings:
+    type: array
+    default: []
+    items:
+      type: object
+      additionalProperties: false
+      required:
+        - severity
+        - path
+        - message
+      properties:
+        severity:
+          type: string
+          enum: [info, warn, error]
+        path:
+          type: string
+        line:
+          type: integer
+          minimum: 1
+        message:
+          type: string

package/templates/.gitagent/teacher/MISSION.schema.yaml

@@ -78,3 +78,73 @@ properties:
         status:
           type: string
           pattern: "^(PASS|FAIL|PENDING|pass|fail|pending)$"
+  kpi_gate:
+    type: object
+    additionalProperties: false
+    required:
+      - thresholds
+    properties:
+      report_path:
+        type: string
+        minLength: 1
+      thresholds:
+        type: array
+        minItems: 1
+        items:
+          type: object
+          additionalProperties: false
+          required:
+            - metric
+            - op
+            - value
+          properties:
+            metric:
+              type: string
+              minLength: 1
+            op:
+              type: string
+              enum: ["<=", ">=", "==", "<", ">"]
+            value:
+              type: number
+  llm_verifiers:
+    type: array
+    items:
+      type: object
+      additionalProperties: false
+      required:
+        - id
+        - command
+      properties:
+        id:
+          type: string
+          minLength: 1
+        command:
+          type: string
+          minLength: 1
+        provider:
+          type: string
+        required:
+          type: boolean
+          default: false
+  aggregators:
+    type: array
+    items:
+      type: object
+      additionalProperties: false
+      required:
+        - key
+        - op
+        - sources
+      properties:
+        key:
+          type: string
+          minLength: 1
+        op:
+          type: string
+          enum: [max, min, sum]
+        sources:
+          type: array
+          minItems: 1
+          items:
+            type: string
+            minLength: 1

package/templates/.githooks/pre-push

@@ -38,6 +38,11 @@ for mission in "${missions[@]}"; do
   "${GAPMAN[@]}" verify --mission "$mission" --pre-push || exit 1
 done
 
+if git diff --name-only "${base}..HEAD" | grep -qE '^\.gitagent/foreman/MANIFEST\.json$|^\.gitagent/teacher/RULES\.md$|\.gxt-skill\.yaml$'; then
+  echo "pre-push: gapman perimeter (advisory)" >&2
+  "${GAPMAN[@]}" perimeter --base-ref "$base" || true
+fi
+
 if git diff --name-only "${base}..HEAD" | grep -qE '^\.gitagent/foreman/MANIFEST\.json$|^skills/'; then
   echo "pre-push: gapman check (manifest / skills changed)" >&2
   "${GAPMAN[@]}" check || exit 1

package/templates/.github/workflows/gxt-validate.yml

@@ -61,6 +61,12 @@ jobs:
       - name: gapman doctor (readiness)
         run: node dist/cli/index.js doctor
 
+      - name: gapman perimeter (CI signature enforcement)
+        if: github.event_name == 'pull_request'
+        env:
+          BASE_SHA: ${{ github.event.pull_request.base.sha }}
+        run: node dist/cli/index.js perimeter --ci --base-ref "$BASE_SHA"
+
   code_quality:
     if: github.event_name == 'pull_request'
     needs: pr_governance

package/templates/integrations/asset-catalog.json

@@ -0,0 +1,45 @@
+{
+  "schema_version": "1",
+  "assets": [
+    { "targetPath": ".gitagent/foreman/MANIFEST.json", "mode": "scaffold_only", "tags": ["core"] },
+    { "targetPath": ".gitagent/foreman/BYPASS.sha256", "mode": "scaffold_only", "tags": ["core"] },
+    { "targetPath": ".gitagent/foreman/SUBSTRATE.version.json", "mode": "scaffold_only", "tags": ["core"] },
+    { "targetPath": ".gitagent/teacher/RULES.md", "mode": "scaffold_only", "tags": ["core"] },
+    { "targetPath": ".gitagent/missions/README.md", "mode": "scaffold_only", "tags": ["core"] },
+    { "targetPath": "AGENTS.md", "mode": "scaffold_only", "tags": ["core"] },
+    { "targetPath": ".gitagent/teacher/ARCHITECTURE-DISCOVERY.md", "mode": "scaffold_only", "tags": ["core"] },
+    { "targetPath": ".gitagent/teacher/ARCHITECTURE-ACCESS.md", "mode": "scaffold_only", "tags": ["core"] },
+    { "targetPath": ".gitagent/teacher/MISSION-ARCHITECT.md", "mode": "scaffold_only", "tags": ["core"] },
+    { "targetPath": "docs/ARCHITECTURE.md", "mode": "scaffold_only", "tags": ["core"] },
+    { "targetPath": ".gitagent/teacher/MISSION.schema.yaml", "mode": "managed_strict", "tags": ["core"] },
+    { "targetPath": ".gitagent/teacher/KPI-REPORT.schema.yaml", "mode": "managed_strict", "tags": ["core"] },
+    { "targetPath": ".gitagent/teacher/WORKER_LOG.template.md", "mode": "managed_strict", "tags": ["core"] },
+    { "targetPath": "scripts/validate-gxt.sh", "mode": "managed_strict", "executable": true, "tags": ["core"] },
+    { "targetPath": "scripts/gxt-manifest-lib.mjs", "mode": "managed_strict", "executable": true, "tags": ["core"] },
+    { "targetPath": "skills/ui.md", "mode": "scaffold_only", "tags": ["skill-minimal", "skill-specimen"] },
+    { "targetPath": "skills/logic.md", "mode": "scaffold_only", "tags": ["skill-minimal", "skill-specimen"] },
+    { "targetPath": "skills/gapman.md", "mode": "scaffold_only", "tags": ["skill-specimen"] },
+    { "targetPath": "skills/substrate.md", "mode": "scaffold_only", "tags": ["skill-specimen"] },
+    { "targetPath": ".githooks/post-checkout", "mode": "managed_strict", "executable": true, "tags": ["hooks"] },
+    { "targetPath": ".githooks/pre-push", "mode": "managed_strict", "executable": true, "tags": ["hooks"] },
+    { "targetPath": ".github/workflows/gxt-validate.yml", "mode": "managed_strict", "tags": ["ci"] },
+    { "targetPath": "scripts/verify-pr-missions.sh", "mode": "managed_strict", "executable": true, "tags": ["ci"] },
+    { "targetPath": "scripts/gxt-runtime-env.sh", "mode": "managed_strict", "executable": true, "tags": ["runtime"] },
+    { "targetPath": "scripts/gxt-resolve-mission.sh", "mode": "managed_strict", "executable": true, "tags": ["runtime"] },
+    { "targetPath": "scripts/gxt-pin-mission.sh", "mode": "managed_strict", "executable": true, "tags": ["runtime"] },
+    { "targetPath": "scripts/gxt-cursor-env.sh", "mode": "managed_strict", "executable": true, "tags": ["runtime"] },
+    { "targetPath": ".cursor/rules/opengantry-gxt-substrate.mdc", "mode": "managed_strict", "tags": ["cursor"] },
+    { "targetPath": ".cursor/hooks.json", "mode": "managed_strict", "tags": ["cursor"] },
+    { "targetPath": ".cursor/hooks/gxt-before-shell.sh", "mode": "managed_strict", "executable": true, "tags": ["cursor"] },
+    { "targetPath": ".cursor/hooks/gxt-session-start.sh", "mode": "managed_strict", "executable": true, "tags": ["cursor"] },
+    { "targetPath": ".cursor/mcp.json", "mode": "managed_strict", "tags": ["cursor"] },
+    { "targetPath": "CLAUDE.md", "templatePath": "integrations/claude-code/CLAUDE.md", "mode": "scaffold_only", "tags": ["claude-code"] },
+    { "targetPath": ".codex/config.toml", "templatePath": "integrations/codex-cli/.codex/config.toml", "mode": "scaffold_only", "tags": ["codex-cli"] },
+    { "targetPath": "opencode.json", "templatePath": "integrations/opencode/opencode.json", "mode": "scaffold_only", "tags": ["opencode"] },
+    { "targetPath": ".junie/guidelines.md", "templatePath": "integrations/junie/.junie/guidelines.md", "mode": "scaffold_only", "tags": ["junie"] },
+    { "targetPath": ".agent/rules/gxt.md", "templatePath": "integrations/antigravity/.agent/rules/gxt.md", "mode": "scaffold_only", "tags": ["antigravity"] },
+    { "targetPath": ".clinerules/gxt.md", "templatePath": "integrations/cline/.clinerules/gxt.md", "mode": "scaffold_only", "tags": ["cline"] },
+    { "targetPath": ".aider.conf.yml", "templatePath": "integrations/aider/.aider.conf.yml", "mode": "scaffold_only", "tags": ["aider"] },
+    { "targetPath": ".openhands/microagents/gxt.md", "templatePath": "integrations/openhands/.openhands/microagents/gxt.md", "mode": "scaffold_only", "tags": ["openhands"] }
+  ]
+}

package/templates/integrations/compatibility.json

@@ -1,10 +1,11 @@
 {
   "schema_version": "1",
-  "opengantry_version": "1.1.0",
+  "opengantry_version": "2.0.0",
+  "asset_catalog": "integrations/asset-catalog.json",
   "integrations": {
     "cursor": {
       "display_name": "Cursor",
-      "verified_date": "2026-05-19",
+      "verified_date": "2026-06-16",
       "docs_url": "https://cursor.com/docs/agent/hooks",
       "recipe_file": "cursor.md",
       "canonical_paths": [
@@ -17,7 +18,7 @@
     },
     "claude-code": {
       "display_name": "Claude Code",
-      "verified_date": "2026-05-19",
+      "verified_date": "2026-06-16",
       "docs_url": "https://docs.anthropic.com/en/docs/claude-code",
       "recipe_file": "claude-code.md",
       "canonical_paths": ["CLAUDE.md"],
@@ -26,7 +27,7 @@
     },
     "codex-cli": {
       "display_name": "OpenAI Codex CLI",
-      "verified_date": "2026-05-19",
+      "verified_date": "2026-06-16",
       "docs_url": "https://developers.openai.com/codex/config-basic",
       "disambiguation": "OpenAI Codex API (2021-2023) is NOT this product",
       "recipe_file": "codex-cli.md",
@@ -36,7 +37,7 @@
     },
     "opencode": {
       "display_name": "OpenCode",
-      "verified_date": "2026-05-19",
+      "verified_date": "2026-06-16",
       "docs_url": "https://opencode.ai/docs",
       "recipe_file": "opencode.md",
       "canonical_paths": ["opencode.json"],
@@ -45,7 +46,7 @@
     },
     "junie": {
       "display_name": "JetBrains Junie",
-      "verified_date": "2026-05-19",
+      "verified_date": "2026-06-16",
       "docs_url": "https://www.jetbrains.com/junie/",
       "recipe_file": "junie.md",
       "canonical_paths": [".junie/guidelines.md"],
@@ -54,7 +55,7 @@
     },
     "antigravity": {
       "display_name": "Google Antigravity",
-      "verified_date": "2026-05-19",
+      "verified_date": "2026-06-16",
       "docs_url": "https://antigravity.google/",
       "recipe_file": "antigravity.md",
       "canonical_paths": [".agent/rules/gxt.md"],
@@ -63,7 +64,7 @@
     },
     "cline": {
       "display_name": "Cline",
-      "verified_date": "2026-05-19",
+      "verified_date": "2026-06-16",
       "docs_url": "https://docs.cline.bot/",
       "recipe_file": "cline.md",
       "canonical_paths": [".clinerules/gxt.md"],
@@ -72,7 +73,7 @@
     },
     "aider": {
       "display_name": "Aider",
-      "verified_date": "2026-05-19",
+      "verified_date": "2026-06-16",
       "docs_url": "https://aider.chat/docs/",
       "recipe_file": "aider.md",
       "canonical_paths": [".aider.conf.yml"],
@@ -81,7 +82,7 @@
     },
     "openhands": {
       "display_name": "OpenHands",
-      "verified_date": "2026-05-19",
+      "verified_date": "2026-06-16",
       "docs_url": "https://docs.all-hands.dev/",
       "recipe_file": "openhands.md",
       "canonical_paths": [".openhands/microagents/gxt.md"],

package/dist/cli/lib/git-proof-errors.d.ts

@@ -1,3 +0,0 @@
-import { type GitProofHintContext } from "./fix-hints.js";
-export declare function throwGitProofError(code: string, detail: string, ctx?: GitProofHintContext): never;
-//# sourceMappingURL=git-proof-errors.d.ts.map

package/dist/cli/lib/git-proof-errors.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"git-proof-errors.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/git-proof-errors.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,KAAK,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAGxE,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,GAAG,GAAE,mBAAwB,GAC5B,KAAK,CAMP"}

package/dist/cli/lib/git-proof-errors.js

@@ -1,7 +0,0 @@
-import { CLI_NAME } from "./constants.js";
-import { hintGitProof } from "./fix-hints.js";
-import { GapmanUserError } from "./user-error.js";
-export function throwGitProofError(code, detail, ctx = {}) {
-    throw new GapmanUserError(code, `${CLI_NAME} verify: git-proof: ${code} — ${detail}`, hintGitProof(code, ctx));
-}
-//# sourceMappingURL=git-proof-errors.js.map

package/dist/cli/lib/git-proof-errors.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"git-proof-errors.js","sourceRoot":"","sources":["../../../src/cli/lib/git-proof-errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,YAAY,EAA4B,MAAM,gBAAgB,CAAC;AACxE,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,MAAM,UAAU,kBAAkB,CAChC,IAAY,EACZ,MAAc,EACd,MAA2B,EAAE;IAE7B,MAAM,IAAI,eAAe,CACvB,IAAI,EACJ,GAAG,QAAQ,uBAAuB,IAAI,MAAM,MAAM,EAAE,EACpD,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CACxB,CAAC;AACJ,CAAC"}

package/dist/cli/lib/init-assets.d.ts

@@ -1,8 +0,0 @@
-export type InitAssetMode = "scaffold_only" | "managed_strict";
-export interface InitAsset {
-    targetPath: string;
-    mode: InitAssetMode;
-    executable?: boolean;
-}
-/** @deprecated Use INIT_ASSET_CATALOG via resolveAssetsFromProfile — types only retained for catalog specs. */
-//# sourceMappingURL=init-assets.d.ts.map

package/dist/cli/lib/init-assets.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"init-assets.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/init-assets.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,aAAa,GAAG,eAAe,GAAG,gBAAgB,CAAC;AAE/D,MAAM,WAAW,SAAS;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,aAAa,CAAC;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,+GAA+G"}

package/dist/cli/lib/init-assets.js

@@ -1,3 +0,0 @@
-export {};
-/** @deprecated Use INIT_ASSET_CATALOG via resolveAssetsFromProfile — types only retained for catalog specs. */
-//# sourceMappingURL=init-assets.js.map

package/dist/cli/lib/init-assets.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"init-assets.js","sourceRoot":"","sources":["../../../src/cli/lib/init-assets.ts"],"names":[],"mappings":";AAQA,+GAA+G"}

package/dist/cli/lib/msn.d.ts

@@ -1,2 +0,0 @@
-export declare function isValidMsnId(id: string): boolean;
-//# sourceMappingURL=msn.d.ts.map

package/dist/cli/lib/msn.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"msn.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/msn.ts"],"names":[],"mappings":"AAEA,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAEhD"}

package/dist/cli/lib/msn.js

@@ -1,5 +0,0 @@
-import { MSN_ID_PATTERN } from "./constants.js";
-export function isValidMsnId(id) {
-    return MSN_ID_PATTERN.test(id.trim());
-}
-//# sourceMappingURL=msn.js.map

package/dist/cli/lib/msn.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"msn.js","sourceRoot":"","sources":["../../../src/cli/lib/msn.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEhD,MAAM,UAAU,YAAY,CAAC,EAAU;IACrC,OAAO,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;AACxC,CAAC"}

package/dist/cli/lib/verify-flow.d.ts

@@ -1,23 +0,0 @@
-import type { Manifest, ParsedMission } from "./types.js";
-import { type VerifyPhaseFailure, type VerifyPhaseSuccess } from "./verify-engine.js";
-import type { VerifyOptions } from "./verify-types.js";
-import type { VerifyResultPayload } from "./verify-result-payload.js";
-export declare function runVerifyBreakGlass(root: string, mission: ParsedMission, options: VerifyOptions): boolean;
-export declare function emitVerifySuccess(result: VerifyPhaseSuccess, _missionArg: string): void;
-export declare function emitVerifyPhaseResult(result: VerifyPhaseSuccess | VerifyPhaseFailure, missionArg: string, options?: VerifyOptions, root?: string, msnId?: string): boolean;
-/** Run full verify (after gate present) using shared phase engine. Returns true on success. */
-export declare function runVerifyPhasesFromEngine(root: string, mission: ParsedMission, missionArg: string, options: VerifyOptions, manifest: Manifest): boolean;
-export declare function verifyFailureToHintContext(failure: VerifyPhaseFailure, missionArg: string, options: VerifyOptions, root?: string): {
-    root: string | undefined;
-    missionPath: string;
-    workerLogPath: string;
-    gateCommand: string | undefined;
-    gitProofMessage: string | undefined;
-    traceKind: import("./trace-failure-kind.js").TraceFailureKind | undefined;
-    traceQuote: string | undefined;
-    traceFailureReason: string | undefined;
-    strictTrace: boolean | undefined;
-};
-export declare function emitVerifyJson(payload: VerifyResultPayload): void;
-export declare function emitAudienceNextSteps(steps: string[], options: VerifyOptions, tagged?: import("./verify-remediation.js").AudienceTaggedStep[]): void;
-//# sourceMappingURL=verify-flow.d.ts.map

package/dist/cli/lib/verify-flow.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"verify-flow.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/verify-flow.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAMvD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAEtE,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,aAAa,EACtB,OAAO,EAAE,aAAa,GACrB,OAAO,CAgBT;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAqBvF;AAiBD,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,kBAAkB,GAAG,kBAAkB,EAC/C,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,aAAuC,EAChD,IAAI,CAAC,EAAE,MAAM,EACb,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAOT;AAED,+FAA+F;AAC/F,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,aAAa,EACtB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,QAAQ,GACjB,OAAO,CAGT;AAED,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,kBAAkB,EAC3B,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,aAAa,EACtB,IAAI,CAAC,EAAE,MAAM;;;;;;;;;;EAad;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,mBAAmB,GAAG,IAAI,CAGjE;AAED,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,MAAM,EAAE,EACf,OAAO,EAAE,aAAa,EACtB,MAAM,CAAC,EAAE,OAAO,yBAAyB,EAAE,kBAAkB,EAAE,GAC9D,IAAI,CAGN"}