@jeger-ai/opengantry 2.0.0 → 2.2.0

package/dist/cli/lib/missions/parser.js

@@ -0,0 +1,271 @@
+import fs from "node:fs";
+import path from "node:path";
+import YAML from "yaml";
+import { CLI_NAME, DEFAULT_ACTIVE_MISSION, DEFAULT_KPI_REPORT_DIR, LEGISLATE_TRACE_PLACEHOLDER, MSN_ID_PATTERN, REL_MISSION_SCHEMA } from "../constants.js";
+import { formatRepoRelative } from "../cli-io.js";
+import { GapmanUserError } from "../errors.js";
+import { hintMissionNoGate } from "../fix-hints.js";
+import { normalizeTraceStatus } from "../trace.js";
+import { assertMissionSchemaValid } from "./validator.js";
+import { parseMarkdownMission, } from "./formatter.js";
+export { parseMarkdownMission, isMarkdownTableSeparatorRow } from "./formatter.js";
+export function isValidMsnId(id) {
+    return MSN_ID_PATTERN.test(id.trim());
+}
+function pickMsnFromYamlRecord(o) {
+    const a = o.msn_id;
+    const b = o.msnId;
+    for (const v of [a, b]) {
+        if (typeof v === "string" && MSN_ID_PATTERN.test(v))
+            return v;
+    }
+    return null;
+}
+/** Parse first YAML frontmatter block (`---` … `---`) when present. */
+export function tryParseYamlFrontmatter(body) {
+    const lines = body.split("\n");
+    if (lines[0]?.trim() !== "---")
+        return null;
+    let end = -1;
+    for (let i = 1; i < lines.length; i++) {
+        if (lines[i]?.trim() === "---") {
+            end = i;
+            break;
+        }
+    }
+    if (end < 1)
+        return null;
+    const block = lines.slice(1, end).join("\n");
+    if (!block.trim())
+        return null;
+    try {
+        const doc = YAML.parse(block);
+        if (typeof doc !== "object" || doc === null)
+            return null;
+        return doc;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Parser-owned mission MSN resolution (YAML, frontmatter, markdown template lines).
+ */
+export function extractMsnIdFromMissionBody(body, extLower) {
+    if (extLower === ".yaml" || extLower === ".yml") {
+        try {
+            const doc = YAML.parse(body);
+            if (typeof doc === "object" && doc !== null) {
+                const fromRoot = pickMsnFromYamlRecord(doc);
+                if (fromRoot)
+                    return fromRoot;
+            }
+        }
+        catch {
+            /* fall through to markdown cues */
+        }
+    }
+    const fm = tryParseYamlFrontmatter(body);
+    if (fm) {
+        const fromFm = pickMsnFromYamlRecord(fm);
+        if (fromFm)
+            return fromFm;
+    }
+    const bracket = body.match(/^\[(MSN-\d{4})\]/m);
+    if (bracket?.[1] && MSN_ID_PATTERN.test(bracket[1]))
+        return bracket[1];
+    const missionHeading = body.match(/# Mission:\s*\[?(MSN-\d{4})\]?/i);
+    if (missionHeading?.[1])
+        return missionHeading[1];
+    return null;
+}
+export function extractMsnIdFromMissionPath(missionAbsolutePath) {
+    let body;
+    try {
+        body = fs.readFileSync(missionAbsolutePath, "utf8");
+    }
+    catch {
+        return null;
+    }
+    const ext = path.extname(missionAbsolutePath).toLowerCase();
+    return extractMsnIdFromMissionBody(body, ext);
+}
+export function resolveMissionFilePath(repoRoot, missionFilePath) {
+    return path.isAbsolute(missionFilePath)
+        ? path.resolve(missionFilePath)
+        : path.join(repoRoot, missionFilePath.replace(/\\/g, path.sep));
+}
+export function pinMissionFile(repoRoot, missionAbs) {
+    const rel = formatRepoRelative(repoRoot, missionAbs);
+    const pinPath = path.join(repoRoot, ".gitagent", "missions", ".active-mission");
+    fs.mkdirSync(path.dirname(pinPath), { recursive: true });
+    fs.writeFileSync(pinPath, `${rel}\n`, "utf8");
+    return rel;
+}
+export function resolveMissionFromCandidates(repoRoot, candidates) {
+    for (const c of candidates) {
+        const trimmed = c.trim();
+        if (!trimmed)
+            continue;
+        const abs = resolveMissionFilePath(repoRoot, trimmed);
+        if (fs.existsSync(abs)) {
+            return formatRepoRelative(repoRoot, abs);
+        }
+    }
+    return null;
+}
+/** Shared mission YAML emitter for legislate and upgrade scaffolds. */
+export function buildMissionYamlScaffold(opts) {
+    return `${opts.header}${YAML.stringify(opts.doc)}`;
+}
+/** Shared legislative trace stub row for mission YAML scaffolds. */
+export function buildLegislativeTraceRows() {
+    return [
+        {
+            dod_id: "1",
+            trace_quote: LEGISLATE_TRACE_PLACEHOLDER,
+            anchor: "1",
+            status: "PENDING",
+        },
+    ];
+}
+export function ensureMissionSchemaFileExists(root) {
+    const schemaPath = path.join(root, REL_MISSION_SCHEMA);
+    if (!fs.existsSync(schemaPath)) {
+        throw new Error(`gapman: missing MISSION schema at ${REL_MISSION_SCHEMA}`);
+    }
+    YAML.parse(fs.readFileSync(schemaPath, "utf8"));
+}
+function defaultKpiReportPath(msnId) {
+    return `${DEFAULT_KPI_REPORT_DIR}/${msnId}.json`;
+}
+function parsedKpiGateFromYaml(data, msnId) {
+    const raw = data.kpi_gate;
+    if (!raw)
+        return null;
+    const thresholds = raw.thresholds.map((t) => ({
+        metric: t.metric,
+        op: t.op,
+        value: t.value,
+    }));
+    return {
+        reportPath: raw.report_path?.trim() || defaultKpiReportPath(msnId),
+        thresholds,
+    };
+}
+function parsedLlmVerifiersFromYaml(data) {
+    return (data.llm_verifiers ?? []).map((v) => ({
+        id: v.id,
+        command: v.command,
+        provider: v.provider,
+        required: v.required === true,
+    }));
+}
+function parsedAggregatorsFromYaml(data) {
+    return (data.aggregators ?? []).map((a) => ({
+        key: a.key,
+        op: a.op,
+        sources: [...a.sources],
+    }));
+}
+function parsedMissionFromYaml(absPath, data) {
+    const traceRows = (data.trace_rows ?? []).map((r) => ({
+        dodId: r.dod_id,
+        traceQuote: r.trace_quote,
+        anchor: r.anchor,
+        status: normalizeTraceStatus(r.status),
+    }));
+    const msnId = (data.msn_id ?? data.msnId);
+    return {
+        msnId,
+        skillKey: data.skill_key,
+        gate: {
+            command: data.gate_command,
+            successSubstring: data.gate_success_substring ?? null,
+        },
+        kpiGate: parsedKpiGateFromYaml(data, msnId),
+        virtualCapture: data.virtual_capture === true,
+        llmVerifiers: parsedLlmVerifiersFromYaml(data),
+        aggregators: parsedAggregatorsFromYaml(data),
+        traceRows,
+        rawPath: absPath,
+    };
+}
+export function validateYamlMission(root, filePath, body) {
+    ensureMissionSchemaFileExists(root);
+    const data = YAML.parse(body);
+    assertMissionSchemaValid(root, data, filePath);
+    return parsedMissionFromYaml(filePath, data);
+}
+export function parseMissionFile(root, filePath) {
+    const absolute = path.isAbsolute(filePath) ? filePath : path.join(root, filePath);
+    const body = fs.readFileSync(absolute, "utf8");
+    const ext = path.extname(absolute).toLowerCase();
+    const mission = ext === ".yaml" || ext === ".yml"
+        ? validateYamlMission(root, absolute, body)
+        : parseMarkdownMission(absolute, body);
+    const proofMsn = extractMsnIdFromMissionBody(body, ext);
+    if (proofMsn) {
+        return { ...mission, msnId: proofMsn };
+    }
+    return mission;
+}
+export function assertMissionGatePresent(mission) {
+    if (!mission.gate?.command?.trim()) {
+        throw new GapmanUserError("MISSION_NO_GATE", `${CLI_NAME} verify: MISSION_NO_GATE — no deterministic gate (Command) found in ${mission.rawPath}`, hintMissionNoGate(mission.rawPath));
+    }
+}
+const ACTIVE_MISSION_YAML = ".gitagent/missions/ACTIVE_MISSION.yaml";
+export function readActiveMissionPin(repoRoot) {
+    const pinPath = path.join(repoRoot, ".gitagent", "missions", ".active-mission");
+    if (!fs.existsSync(pinPath))
+        return null;
+    const line = fs.readFileSync(pinPath, "utf8").trim();
+    return line.length > 0 ? line : null;
+}
+export function buildMissionResolutionCandidates(_repoRoot, options = {}) {
+    const env = options.env ?? process.env;
+    const profile = options.profile ?? "full";
+    const out = [];
+    if (options.explicit?.trim())
+        out.push(options.explicit.trim());
+    if (profile === "full") {
+        if (env.GAPMAN_MISSION?.trim())
+            out.push(env.GAPMAN_MISSION.trim());
+    }
+    if (profile === "full" || profile === "status") {
+        if (env.GXT_MISSION_FILE?.trim())
+            out.push(env.GXT_MISSION_FILE.trim());
+    }
+    const pin = readActiveMissionPin(_repoRoot);
+    if (pin)
+        out.push(pin);
+    if (profile === "full") {
+        out.push(DEFAULT_ACTIVE_MISSION);
+        out.push(ACTIVE_MISSION_YAML);
+    }
+    return out;
+}
+export function resolvePinnedMission(repoRoot, options = {}) {
+    return resolveMissionFromCandidates(repoRoot, buildMissionResolutionCandidates(repoRoot, options));
+}
+export function resolveMissionPathRequired(repoRoot, options = {}) {
+    const explicit = options.explicit?.trim();
+    if (explicit) {
+        const abs = resolveMissionFilePath(repoRoot, explicit);
+        if (fs.existsSync(abs))
+            return abs;
+        throw new GapmanUserError(options.errorCode ?? "MISSION_NOT_FOUND", `gapman: mission not found at ${explicit}`);
+    }
+    const rel = resolvePinnedMission(repoRoot, { ...options, profile: "upgrade_apply" });
+    if (rel) {
+        const abs = resolveMissionFilePath(repoRoot, rel);
+        if (fs.existsSync(abs))
+            return abs;
+    }
+    throw new GapmanUserError("UPGRADE_MISSION_REQUIRED", "gapman upgrade --apply: pass --mission <path> to the signed upgrade mission YAML", "Example: gapman upgrade --apply --mission .gitagent/missions/MSN-9001.upgrade-v0.8.1.yaml");
+}
+export function formatResolvedMissionRel(repoRoot, absPath) {
+    return formatRepoRelative(repoRoot, absPath);
+}
+//# sourceMappingURL=parser.js.map

package/dist/cli/lib/missions/parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.js","sourceRoot":"","sources":["../../../../src/cli/lib/missions/parser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,2BAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAC5J,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAYnD,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EACL,oBAAoB,GACrB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,oBAAoB,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAEnF,MAAM,UAAU,YAAY,CAAC,EAAU;IACrC,OAAO,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,qBAAqB,CAAC,CAA0B;IACvD,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IACnB,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;IAClB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACvB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAClD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,KAAK,EAAE,CAAC;YAC/B,GAAG,GAAG,CAAC,CAAC;YACR,MAAM;QACR,CAAC;IACH,CAAC;IACD,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAY,CAAC;QACzC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACzD,OAAO,GAA8B,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,2BAA2B,CAAC,IAAY,EAAE,QAAgB;IACxE,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;YACxC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBAC5C,MAAM,QAAQ,GAAG,qBAAqB,CAAC,GAA8B,CAAC,CAAC;gBACvE,IAAI,QAAQ;oBAAE,OAAO,QAAQ,CAAC;YAChC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,mCAAmC;QACrC,CAAC;IACH,CAAC;IAED,MAAM,EAAE,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,EAAE,EAAE,CAAC;QACP,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,CAAC,CAAC;QACzC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;IAC5B,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAChD,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;IAEvE,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrE,IAAI,cAAc,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC;IAElD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,mBAA2B;IACrE,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5D,OAAO,2BAA2B,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAAgB,EAAE,eAAuB;IAC9E,OAAO,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;QACrC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC;QAC/B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,UAAkB;IACjE,MAAM,GAAG,GAAG,kBAAkB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC;IAChF,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,GAAG,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IAC9C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,QAAgB,EAAE,UAAoB;IACjF,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACzB,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,MAAM,GAAG,GAAG,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACtD,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,kBAAkB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAcD,uEAAuE;AACvE,MAAM,UAAU,wBAAwB,CAAC,IAA4B;IACnE,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AACrD,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,yBAAyB;IACvC,OAAO;QACL;YACE,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,2BAA2B;YACxC,MAAM,EAAE,GAAG;YACX,MAAM,EAAE,SAAS;SAClB;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,IAAY;IACxD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;IACvD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,qCAAqC,kBAAkB,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACzC,OAAO,GAAG,sBAAsB,IAAI,KAAK,OAAO,CAAC;AACnD,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAiB,EAAE,KAAa;IAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC1B,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,UAAU,GAAmB,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5D,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,EAAE,EAAE,CAAC,CAAC,EAAoB;QAC1B,KAAK,EAAE,CAAC,CAAC,KAAK;KACf,CAAC,CAAC,CAAC;IACJ,OAAO;QACL,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,oBAAoB,CAAC,KAAK,CAAC;QAClE,UAAU;KACX,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CAAC,IAAiB;IACnD,OAAO,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5C,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ,KAAK,IAAI;KAC9B,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,yBAAyB,CAAC,IAAiB;IAClD,OAAO,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1C,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,EAAE,EAAE,CAAC,CAAC,EAAqB;QAC3B,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;KACxB,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAe,EAAE,IAAiB;IAC/D,MAAM,SAAS,GAAe,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChE,KAAK,EAAE,CAAC,CAAC,MAAM;QACf,UAAU,EAAE,CAAC,CAAC,WAAW;QACzB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,MAAM,EAAE,oBAAoB,CAAC,CAAC,CAAC,MAAM,CAAC;KACvC,CAAC,CAAC,CAAC;IACJ,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAE,CAAC;IAC3C,OAAO;QACL,KAAK;QACL,QAAQ,EAAE,IAAI,CAAC,SAAS;QACxB,IAAI,EAAE;YACJ,OAAO,EAAE,IAAI,CAAC,YAAY;YAC1B,gBAAgB,EAAE,IAAI,CAAC,sBAAsB,IAAI,IAAI;SACtD;QACD,OAAO,EAAE,qBAAqB,CAAC,IAAI,EAAE,KAAK,CAAC;QAC3C,cAAc,EAAE,IAAI,CAAC,eAAe,KAAK,IAAI;QAC7C,YAAY,EAAE,0BAA0B,CAAC,IAAI,CAAC;QAC9C,WAAW,EAAE,yBAAyB,CAAC,IAAI,CAAC;QAC5C,SAAS;QACT,OAAO,EAAE,OAAO;KACjB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,QAAgB,EAAE,IAAY;IAC9E,6BAA6B,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACzC,wBAAwB,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC/C,OAAO,qBAAqB,CAAC,QAAQ,EAAE,IAAmB,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,QAAgB;IAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAClF,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IACjD,MAAM,OAAO,GACX,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,MAAM;QAC/B,CAAC,CAAC,mBAAmB,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC;QAC3C,CAAC,CAAC,oBAAoB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,2BAA2B,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACxD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACzC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,OAAsB;IAC7D,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;QACnC,MAAM,IAAI,eAAe,CACvB,iBAAiB,EACjB,GAAG,QAAQ,uEAAuE,OAAO,CAAC,OAAO,EAAE,EACnG,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,CACnC,CAAC;IACJ,CAAC;AACH,CAAC;AAUD,MAAM,mBAAmB,GAAG,wCAAwC,CAAC;AAErE,MAAM,UAAU,oBAAoB,CAAC,QAAgB;IACnD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC;IAChF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACrD,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,SAAiB,EACjB,UAAoC,EAAE;IAEtC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC;IAC1C,MAAM,GAAG,GAAa,EAAE,CAAC;IAEzB,IAAI,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE;QAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAEhE,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC/C,IAAI,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,GAAG,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,GAAG;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEvB,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,GAAG,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACjC,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,QAAgB,EAChB,UAAoC,EAAE;IAEtC,OAAO,4BAA4B,CACjC,QAAQ,EACR,gCAAgC,CAAC,QAAQ,EAAE,OAAO,CAAC,CACpD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,QAAgB,EAChB,UAA8E,EAAE;IAEhF,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1C,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACvD,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC;QACnC,MAAM,IAAI,eAAe,CACvB,OAAO,CAAC,SAAS,IAAI,mBAAmB,EACxC,gCAAgC,QAAQ,EAAE,CAC3C,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,oBAAoB,CAAC,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;IACrF,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,GAAG,GAAG,sBAAsB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAClD,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC;IACrC,CAAC;IAED,MAAM,IAAI,eAAe,CACvB,0BAA0B,EAC1B,kFAAkF,EAClF,2FAA2F,CAC5F,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,QAAgB,EAAE,OAAe;IACxE,OAAO,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AAC/C,CAAC"}

package/dist/cli/lib/{mission-schema-validate.d.ts → missions/validator.d.ts}

@@ -1,3 +1,3 @@
 /** Validate parsed YAML mission document against MISSION.schema.yaml (JSON Schema). */
 export declare function assertMissionSchemaValid(root: string, data: unknown, filePath: string): void;
-//# sourceMappingURL=mission-schema-validate.d.ts.map
+//# sourceMappingURL=validator.d.ts.map

package/dist/cli/lib/missions/validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/missions/validator.ts"],"names":[],"mappings":"AAuCA,uFAAuF;AACvF,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAO5F"}

package/dist/cli/lib/{mission-schema-validate.js → missions/validator.js}

@@ -3,7 +3,8 @@ import path from "node:path";
 import Ajv2020Import from "ajv/dist/2020.js";
 import addFormatsImport from "ajv-formats";
 import YAML from "yaml";
-import { REL_MISSION_SCHEMA } from "./constants.js";
+import { GXT_ERROR } from "../gxt-error-codes.js";
+import { REL_MISSION_SCHEMA } from "../constants.js";
 const Ajv2020 = Ajv2020Import;
 const addFormats = addFormatsImport;
 let compiledValidator = null;
@@ -35,6 +36,6 @@ export function assertMissionSchemaValid(root, data, filePath) {
     if (validate(data))
         return;
     const detail = formatAjvErrors(validate.errors ?? []);
-    throw new Error(`gapman mission: ${filePath}: schema validation failed: ${detail}`);
+    throw new Error(`${GXT_ERROR.MISSION_SCHEMA_INVALID}: gapman mission: ${filePath}: schema validation failed: ${detail}`);
 }
-//# sourceMappingURL=mission-schema-validate.js.map
+//# sourceMappingURL=validator.js.map

package/dist/cli/lib/missions/validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.js","sourceRoot":"","sources":["../../../../src/cli/lib/missions/validator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,aAAa,MAAM,kBAAkB,CAAC;AAC7C,OAAO,gBAAgB,MAAM,aAAa,CAAC;AAC3C,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAGrD,MAAM,OAAO,GAAG,aAAmC,CAAC;AACpD,MAAM,UAAU,GAAG,gBAAmE,CAAC;AAEvF,IAAI,iBAAiB,GAA4B,IAAI,CAAC;AACtD,IAAI,eAAe,GAAkB,IAAI,CAAC;AAE1C,SAAS,0BAA0B,CAAC,IAAY;IAC9C,IAAI,iBAAiB,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;QAClD,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAA4B,CAAC;IAC7F,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5D,UAAU,CAAC,GAAG,CAAC,CAAC;IAChB,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACxC,iBAAiB,GAAG,QAAQ,CAAC;IAC7B,eAAe,GAAG,IAAI,CAAC;IACvB,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,eAAe,CAAC,MAAqB;IAC5C,OAAO,MAAM;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,MAAM,EAAE,GAAG,CAAC,CAAC,YAAY,IAAI,QAAQ,CAAC;QACtC,OAAO,GAAG,EAAE,KAAK,CAAC,CAAC,OAAO,IAAI,SAAS,EAAE,CAAC;IAC5C,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,wBAAwB,CAAC,IAAY,EAAE,IAAa,EAAE,QAAgB;IACpF,MAAM,QAAQ,GAAG,0BAA0B,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO;IAC3B,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,IAAI,KAAK,CACb,GAAG,SAAS,CAAC,sBAAsB,qBAAqB,QAAQ,+BAA+B,MAAM,EAAE,CACxG,CAAC;AACJ,CAAC"}

package/dist/cli/lib/msn-allocate.js

@@ -1,8 +1,8 @@
 import fs from "node:fs";
 import path from "node:path";
-import { extractMsnIdFromMissionPath } from "./mission-msn.js";
-import { gitLogSubjects } from "./git-repo.js";
-import { isValidMsnId } from "./mission-msn.js";
+import { extractMsnIdFromMissionPath } from "./missions/parser.js";
+import { gitLogSubjects } from "./git.js";
+import { isValidMsnId } from "./missions/parser.js";
 export const WORK_MSN_BAND_MAX = 8999;
 export const UPGRADE_MSN_BAND_MIN = 9000;
 export const UPGRADE_MSN_BAND_MAX = 9099;

package/dist/cli/lib/msn-allocate.js.map

@@ -1 +1 @@
-{"version":3,"file":"msn-allocate.js","sourceRoot":"","sources":["../../../src/cli/lib/msn-allocate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEhD,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AACtC,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AACzC,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AASzC,SAAS,UAAU,CAAC,EAAU;IAC5B,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,iBAAiB,CAAC;AAC9C,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,GAAG,IAAI,oBAAoB,IAAI,GAAG,IAAI,oBAAoB,CAAC;AACpE,CAAC;AAED,SAAS,UAAU,CAAC,GAAW,EAAE,IAAqB;IACpD,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,2BAA2B,CAAC,QAAgB,EAAE,IAAqB;IAC1E,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACvD,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC;QAC1B,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YAAE,SAAS;QAChC,MAAM,GAAG,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;QAC3B,IAAI,UAAU,CAAC,GAAG,EAAE,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,OAAiC,EAAE;IACrF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IACjE,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/B,KAAK,MAAM,GAAG,IAAI,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACvE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE;gBAAE,SAAS;YAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YAC7C,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YAChD,IAAI,QAAQ,IAAI,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;gBAC3C,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,CAAC;gBACrC,IAAI,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC;oBAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,2BAA2B,CAAC,GAAG,CAAC,CAAC;gBACrD,IAAI,WAAW,IAAI,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC;oBAC7C,MAAM,GAAG,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;oBACpC,IAAI,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC;wBAAE,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBACnD,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,iCAAiC;YACnC,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,iBAAiB,KAAK,KAAK,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QAC5E,KAAK,MAAM,EAAE,IAAI,2BAA2B,CAAC,QAAQ,EAAE,IAAI,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,QAAgB,EAAE,OAA0B;IACtE,MAAM,IAAI,GAAG,iBAAiB,CAAC,QAAQ,EAAE;QACvC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,iBAAiB,EAAE,OAAO,CAAC,IAAI,KAAK,MAAM;KAC3C,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC5B,IAAI,GAAG,GAAG,CAAC,CAAC;QACZ,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;YAC3B,IAAI,GAAG,GAAG,GAAG;gBAAE,GAAG,GAAG,GAAG,CAAC;QAC3B,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC;QACrB,IAAI,IAAI,GAAG,iBAAiB,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,2CAA2C,iBAAiB,4BAA4B,oBAAoB,GAAG,CAChH,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IAChD,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,oBAAoB,EAAE,CAAC,IAAI,oBAAoB,EAAE,CAAC,EAAE,EAAE,CAAC;QAClE,MAAM,EAAE,GAAG,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,OAAO,EAAE,CAAC;IAC/B,CAAC;IACD,MAAM,IAAI,KAAK,CACb,oDAAoD,oBAAoB,IAAI,oBAAoB,EAAE,CACnG,CAAC;AACJ,CAAC"}
+{"version":3,"file":"msn-allocate.js","sourceRoot":"","sources":["../../../src/cli/lib/msn-allocate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AACtC,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AACzC,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AASzC,SAAS,UAAU,CAAC,EAAU;IAC5B,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,iBAAiB,CAAC;AAC9C,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,GAAG,IAAI,oBAAoB,IAAI,GAAG,IAAI,oBAAoB,CAAC;AACpE,CAAC;AAED,SAAS,UAAU,CAAC,GAAW,EAAE,IAAqB;IACpD,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,2BAA2B,CAAC,QAAgB,EAAE,IAAqB;IAC1E,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACvD,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC;QAC1B,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YAAE,SAAS;QAChC,MAAM,GAAG,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;QAC3B,IAAI,UAAU,CAAC,GAAG,EAAE,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,OAAiC,EAAE;IACrF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IACjE,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/B,KAAK,MAAM,GAAG,IAAI,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACvE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE;gBAAE,SAAS;YAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YAC7C,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YAChD,IAAI,QAAQ,IAAI,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;gBAC3C,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,CAAC;gBACrC,IAAI,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC;oBAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,2BAA2B,CAAC,GAAG,CAAC,CAAC;gBACrD,IAAI,WAAW,IAAI,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC;oBAC7C,MAAM,GAAG,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;oBACpC,IAAI,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC;wBAAE,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBACnD,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,iCAAiC;YACnC,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,iBAAiB,KAAK,KAAK,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QAC5E,KAAK,MAAM,EAAE,IAAI,2BAA2B,CAAC,QAAQ,EAAE,IAAI,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,QAAgB,EAAE,OAA0B;IACtE,MAAM,IAAI,GAAG,iBAAiB,CAAC,QAAQ,EAAE;QACvC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,iBAAiB,EAAE,OAAO,CAAC,IAAI,KAAK,MAAM;KAC3C,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC5B,IAAI,GAAG,GAAG,CAAC,CAAC;QACZ,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;YAC3B,IAAI,GAAG,GAAG,GAAG;gBAAE,GAAG,GAAG,GAAG,CAAC;QAC3B,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC;QACrB,IAAI,IAAI,GAAG,iBAAiB,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,2CAA2C,iBAAiB,4BAA4B,oBAAoB,GAAG,CAChH,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IAChD,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,oBAAoB,EAAE,CAAC,IAAI,oBAAoB,EAAE,CAAC,EAAE,EAAE,CAAC;QAClE,MAAM,EAAE,GAAG,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,OAAO,EAAE,CAAC;IAC/B,CAAC;IACD,MAAM,IAAI,KAAK,CACb,oDAAoD,oBAAoB,IAAI,oBAAoB,EAAE,CACnG,CAAC;AACJ,CAAC"}

package/dist/cli/lib/perimeter.d.ts

@@ -11,10 +11,28 @@ export interface PerimeterCheckResult {
     violations: PerimeterViolation[];
     advisories: string[];
 }
+export type ChangedPathsResult = {
+    ok: true;
+    paths: string[];
+} | {
+    ok: false;
+    code: string;
+    reason: string;
+};
 /** Simple glob: double-star slash prefix = suffix match; otherwise exact repo-relative match. */
 export declare function pathMatchesPerimeterGlob(repoRelPath: string, glob: string): boolean;
 export declare function isPerimeterProtectedPath(repoRelPath: string, manifest: Manifest): boolean;
-export declare function listChangedPathsSinceBase(repoRoot: string, baseRef: string): string[];
+export declare function listChangedPathsSinceBase(repoRoot: string, baseRef: string): ChangedPathsResult;
+export type CommitsInRangeResult = {
+    ok: true;
+    commits: string[];
+} | {
+    ok: false;
+    code: string;
+    reason: string;
+};
+/** All commits in baseRef..HEAD that touched repoRelPath (newest first). */
+export declare function listCommitsTouchingPathInRange(repoRoot: string, baseRef: string, repoRelPath: string): CommitsInRangeResult;
 export interface PerimeterCheckOptions {
     baseRef: string;
     /** Authoritative CI mode: require verified cryptographic signature. */

package/dist/cli/lib/perimeter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"perimeter.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/perimeter.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C,eAAO,MAAM,2BAA2B,kGAI9B,CAAC;AAEX,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,OAAO,CAAC;IACZ,UAAU,EAAE,kBAAkB,EAAE,CAAC;IACjC,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAQD,iGAAiG;AACjG,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAQnF;AAED,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAGzF;AAED,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAQrF;AAkDD,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,EAAE,CAAC,EAAE,OAAO,CAAC;CACd;AAED,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,qBAAqB,GAC7B,oBAAoB,CAgFtB;AAED,oEAAoE;AACpE,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAI7E"}
+{"version":3,"file":"perimeter.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/perimeter.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C,eAAO,MAAM,2BAA2B,kGAI9B,CAAC;AAEX,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,OAAO,CAAC;IACZ,UAAU,EAAE,kBAAkB,EAAE,CAAC;IACjC,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,MAAM,kBAAkB,GAC1B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,GAC7B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAWhD,iGAAiG;AACjG,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAQnF;AAED,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAGzF;AASD,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,kBAAkB,CAsB/F;AAED,MAAM,MAAM,oBAAoB,GAC5B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,GAC/B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhD,4EAA4E;AAC5E,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,GAClB,oBAAoB,CAqBtB;AAkDD,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,EAAE,CAAC,EAAE,OAAO,CAAC;CACd;AAmGD,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,qBAAqB,GAC7B,oBAAoB,CA2CtB;AAED,oEAAoE;AACpE,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAI7E"}

package/dist/cli/lib/perimeter.js

@@ -1,6 +1,7 @@
 import path from "node:path";
+import { GXT_ERROR } from "./gxt-error-codes.js";
 import { toPosixRel } from "./cli-io.js";
-import { gitRun, gitRunOk } from "./git-repo.js";
+import { gitRevParse, gitRun, gitRunOk } from "./git.js";
 import { commitSubjectHasMsnPrefix, listCommitChangedPaths, listMsnSubjectCommits, } from "./git-proof.js";
 import { resolveTeacherEmails } from "./teacher-identity.js";
 export const DEFAULT_PERIMETER_PROTECTED = [
@@ -8,6 +9,7 @@ export const DEFAULT_PERIMETER_PROTECTED = [
     ".gitagent/foreman/MANIFEST.json",
     ".gitagent/teacher/RULES.md",
 ];
+const SHALLOW_HISTORY_HINT = "Configure CI checkout with fetch-depth: 0 or fetch the base ref explicitly before running gapman perimeter --ci.";
 function perimeterGlobs(manifest) {
     return manifest.perimeter_protected?.length
         ? [...manifest.perimeter_protected]
@@ -27,15 +29,55 @@ export function isPerimeterProtectedPath(repoRelPath, manifest) {
     const globs = perimeterGlobs(manifest);
     return globs.some((g) => pathMatchesPerimeterGlob(repoRelPath, g));
 }
+function shallowHistoryReason(baseRef, detail) {
+    return (`${GXT_ERROR.PERIMETER_SHALLOW_HISTORY}: cannot evaluate protected-path history for ${baseRef}..HEAD — ${detail}. ` +
+        SHALLOW_HISTORY_HINT);
+}
 export function listChangedPathsSinceBase(repoRoot, baseRef) {
-    const r = gitRunOk(repoRoot, ["diff", "--name-only", `${baseRef}...HEAD`]);
-    if (!r.ok)
-        return [];
-    return r.stdout
+    if (!gitRevParse(repoRoot, baseRef)) {
+        return {
+            ok: false,
+            code: GXT_ERROR.PERIMETER_SHALLOW_HISTORY,
+            reason: shallowHistoryReason(baseRef, `base ref "${baseRef}" is missing or unreachable`),
+        };
+    }
+    const r = gitRun(repoRoot, ["diff", "--name-only", `${baseRef}...HEAD`]);
+    if (!r.ok) {
+        return {
+            ok: false,
+            code: GXT_ERROR.PERIMETER_SHALLOW_HISTORY,
+            reason: shallowHistoryReason(baseRef, r.stderr.trim() || "git diff failed"),
+        };
+    }
+    const paths = r.stdout
         .split("\n")
         .map((line) => line.trim())
         .filter((line) => line.length > 0)
         .map((rel) => toPosixRel(repoRoot, path.join(repoRoot, rel)));
+    return { ok: true, paths };
+}
+/** All commits in baseRef..HEAD that touched repoRelPath (newest first). */
+export function listCommitsTouchingPathInRange(repoRoot, baseRef, repoRelPath) {
+    if (!gitRevParse(repoRoot, baseRef)) {
+        return {
+            ok: false,
+            code: GXT_ERROR.PERIMETER_SHALLOW_HISTORY,
+            reason: shallowHistoryReason(baseRef, `base ref "${baseRef}" is missing or unreachable`),
+        };
+    }
+    const r = gitRun(repoRoot, ["log", "--format=%H", `${baseRef}..HEAD`, "--", repoRelPath]);
+    if (!r.ok) {
+        return {
+            ok: false,
+            code: GXT_ERROR.PERIMETER_SHALLOW_HISTORY,
+            reason: shallowHistoryReason(baseRef, r.stderr.trim() || "git log failed"),
+        };
+    }
+    const commits = r.stdout
+        .split("\n")
+        .map((line) => line.trim())
+        .filter((line) => line.length > 0);
+    return { ok: true, commits };
 }
 function lastCommitTouchingPath(repoRoot, repoRelPath) {
     const r = gitRunOk(repoRoot, ["log", "-1", "--format=%H", "HEAD", "--", repoRelPath]);
@@ -80,9 +122,97 @@ function extractMsnFromRecentCommits(repoRoot, hash) {
     const m = row.subject.match(/\[(MSN-\d{4})\]/);
     return m?.[1] ?? null;
 }
+function checkProtectedPathCi(repoRoot, baseRef, filePath, violations, advisories) {
+    const range = listCommitsTouchingPathInRange(repoRoot, baseRef, filePath);
+    if (!range.ok) {
+        violations.push({
+            path: filePath,
+            commit: "unknown",
+            reason: range.reason,
+            advisoryOnly: false,
+        });
+        return;
+    }
+    if (range.commits.length === 0) {
+        violations.push({
+            path: filePath,
+            commit: "unknown",
+            reason: `no commits in ${baseRef}..HEAD found for protected path ${filePath}`,
+            advisoryOnly: false,
+        });
+        return;
+    }
+    for (const commit of range.commits) {
+        const sig = signatureStatus(repoRoot, commit);
+        if (!isGoodSignature(sig)) {
+            violations.push({
+                path: filePath,
+                commit,
+                reason: `${GXT_ERROR.PERIMETER_VIOLATION}: protected file ${filePath} modified in unsigned commit ${commit.slice(0, 7)} ` +
+                    `(signature status: ${sig}). CI requires verified SSH/GPG signature.`,
+                advisoryOnly: false,
+            });
+        }
+    }
+    const unsignedForPath = violations.filter((v) => v.path === filePath && !v.advisoryOnly);
+    if (unsignedForPath.length === 0) {
+        advisories.push(`perimeter: ${filePath} — all ${String(range.commits.length)} commit(s) in range are signed`);
+    }
+}
+function checkProtectedPathLocal(repoRoot, filePath, teacherEmails, violations, advisories) {
+    const commit = lastCommitTouchingPath(repoRoot, filePath);
+    if (!commit) {
+        violations.push({
+            path: filePath,
+            commit: "unknown",
+            reason: `no commit found for protected path ${filePath}`,
+            advisoryOnly: true,
+        });
+        return;
+    }
+    const row = commitRow(repoRoot, commit);
+    if (!row) {
+        violations.push({
+            path: filePath,
+            commit,
+            reason: `cannot read commit metadata for ${commit}`,
+            advisoryOnly: true,
+        });
+        return;
+    }
+    const msnId = extractMsnFromRecentCommits(repoRoot, commit);
+    const emailMatch = row.authorEmail.trim().toLowerCase() &&
+        teacherEmails.includes(row.authorEmail.trim().toLowerCase());
+    const subjectMatch = msnId !== null && commitSubjectHasMsnPrefix(row.subject, msnId);
+    const stamp = msnId !== null ? findTeacherStampForPath(repoRoot, msnId, filePath, teacherEmails) : null;
+    if (stamp) {
+        advisories.push(`perimeter (advisory): ${filePath} — Teacher email + MSN stamp hint matched ${stamp.hash.slice(0, 7)} (forgeable locally; CI verifies signature)`);
+        return;
+    }
+    advisories.push(`perimeter (advisory): ${filePath} modified in ${commit.slice(0, 7)} — ` +
+        `email match=${String(emailMatch)}, subject MSN match=${String(subjectMatch)}. ` +
+        `Local checks are forgeable; push triggers CI signature enforcement.`);
+}
 export function checkPerimeter(repoRoot, manifest, options) {
-    const changed = listChangedPathsSinceBase(repoRoot, options.baseRef);
-    const protectedChanged = changed.filter((p) => isPerimeterProtectedPath(p, manifest));
+    const changedResult = listChangedPathsSinceBase(repoRoot, options.baseRef);
+    if (!changedResult.ok) {
+        if (options.ci === true) {
+            return {
+                ok: false,
+                violations: [
+                    {
+                        path: "(range)",
+                        commit: "unknown",
+                        reason: changedResult.reason,
+                        advisoryOnly: false,
+                    },
+                ],
+                advisories: [],
+            };
+        }
+        return { ok: true, violations: [], advisories: [changedResult.reason] };
+    }
+    const protectedChanged = changedResult.paths.filter((p) => isPerimeterProtectedPath(p, manifest));
     if (protectedChanged.length === 0) {
         return { ok: true, violations: [], advisories: [] };
     }
@@ -90,53 +220,11 @@ export function checkPerimeter(repoRoot, manifest, options) {
     const violations = [];
     const advisories = [];
     for (const filePath of protectedChanged) {
-        const commit = lastCommitTouchingPath(repoRoot, filePath);
-        if (!commit) {
-            violations.push({
-                path: filePath,
-                commit: "unknown",
-                reason: `no commit found for protected path ${filePath}`,
-                advisoryOnly: options.ci !== true,
-            });
-            continue;
-        }
-        const row = commitRow(repoRoot, commit);
-        if (!row) {
-            violations.push({
-                path: filePath,
-                commit,
-                reason: `cannot read commit metadata for ${commit}`,
-                advisoryOnly: options.ci !== true,
-            });
-            continue;
-        }
         if (options.ci === true) {
-            const sig = signatureStatus(repoRoot, commit);
-            if (!isGoodSignature(sig)) {
-                violations.push({
-                    path: filePath,
-                    commit,
-                    reason: `GXT_PERIMETER_VIOLATION: protected file ${filePath} modified in unsigned commit ${commit.slice(0, 7)} ` +
-                        `(signature status: ${sig}). CI requires verified SSH/GPG signature.`,
-                    advisoryOnly: false,
-                });
-                continue;
-            }
-            advisories.push(`perimeter: ${filePath} touched by signed commit ${commit.slice(0, 7)} (signature ${sig})`);
-            continue;
-        }
-        const msnId = extractMsnFromRecentCommits(repoRoot, commit);
-        const emailMatch = row.authorEmail.trim().toLowerCase() &&
-            teacherEmails.includes(row.authorEmail.trim().toLowerCase());
-        const subjectMatch = msnId !== null && commitSubjectHasMsnPrefix(row.subject, msnId);
-        const stamp = msnId !== null ? findTeacherStampForPath(repoRoot, msnId, filePath, teacherEmails) : null;
-        if (stamp) {
-            advisories.push(`perimeter (advisory): ${filePath} — Teacher email + MSN stamp hint matched ${stamp.hash.slice(0, 7)} (forgeable locally; CI verifies signature)`);
+            checkProtectedPathCi(repoRoot, options.baseRef, filePath, violations, advisories);
         }
         else {
-            advisories.push(`perimeter (advisory): ${filePath} modified in ${commit.slice(0, 7)} — ` +
-                `email match=${String(emailMatch)}, subject MSN match=${String(subjectMatch)}. ` +
-                `Local checks are forgeable; push triggers CI signature enforcement.`);
+            checkProtectedPathLocal(repoRoot, filePath, teacherEmails, violations, advisories);
         }
     }
     const hardFailures = violations.filter((v) => !v.advisoryOnly);