@jeger-ai/opengantry 2.1.0 → 2.2.1

package/dist/cli/lib/verify-sinks.js

@@ -0,0 +1,12 @@
+export function resolveVerifySink(options) {
+    if (options.breakGlass === true) {
+        return options.json ? "break_glass_json" : "break_glass_human";
+    }
+    if (options.json)
+        return "json";
+    if (options.fix === true) {
+        return options.fixNonInteractive ? "fix_noninteractive" : "fix_interactive";
+    }
+    return "human";
+}
+//# sourceMappingURL=verify-sinks.js.map

package/dist/cli/lib/verify-sinks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-sinks.js","sourceRoot":"","sources":["../../../src/cli/lib/verify-sinks.ts"],"names":[],"mappings":"AAUA,MAAM,UAAU,iBAAiB,CAAC,OAAsB;IACtD,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QAChC,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,mBAAmB,CAAC;IACjE,CAAC;IACD,IAAI,OAAO,CAAC,IAAI;QAAE,OAAO,MAAM,CAAC;IAChC,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;QACzB,OAAO,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,iBAAiB,CAAC;IAC9E,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/cli/lib/version.gen.d.ts

@@ -1,4 +1,4 @@
 /** Generated by scripts/gen-version.mjs — do not edit */
-export declare const CLI_VERSION = "2.1.0";
+export declare const CLI_VERSION = "2.2.1";
 export declare const NPM_PACKAGE_NAME = "@jeger-ai/opengantry";
 //# sourceMappingURL=version.gen.d.ts.map

package/dist/cli/lib/version.gen.js

@@ -1,4 +1,4 @@
 /** Generated by scripts/gen-version.mjs — do not edit */
-export const CLI_VERSION = "2.1.0";
+export const CLI_VERSION = "2.2.1";
 export const NPM_PACKAGE_NAME = "@jeger-ai/opengantry";
 //# sourceMappingURL=version.gen.js.map

package/dist/cli/lib/virtual-scratch-store.d.ts

@@ -0,0 +1,37 @@
+export declare const VIRTUAL_GATE_CAPTURE_FILE: "gate-capture.json";
+/** Default max flight directories retained after abnormal termination. */
+export declare const DEFAULT_VIRTUAL_FLIGHT_RETENTION: 32;
+/** Default age (ms) after which abandoned flight dirs are scavenged. */
+export declare const DEFAULT_VIRTUAL_FLIGHT_MAX_AGE_MS: number;
+export interface GateCapturePayload {
+    captured_at: string;
+    flight_id: string;
+    gate_command: string;
+    exit_code: number | null;
+    stdout: string;
+    stderr: string;
+}
+export declare function createVirtualFlightId(): string;
+/** True when repo-relative path lives under `.gitagent/virtual/`. */
+export declare function isVirtualScratchPath(repoRelPath: string): boolean;
+export declare function virtualFlightDirAbs(repoRoot: string, flightId: string): string;
+/** Atomic JSON write inside a per-flight directory (gitignored scratch). */
+export declare function writeVirtualJsonAtomic(repoRoot: string, flightId: string, fileName: string, payload: unknown): Promise<string>;
+/** Synchronous variant for verify hot path (post-gate capture + purge). */
+export declare function writeVirtualJsonAtomicSync(repoRoot: string, flightId: string, fileName: string, payload: unknown): string;
+export declare function writeGateCaptureSync(repoRoot: string, flightId: string, capture: Omit<GateCapturePayload, "captured_at" | "flight_id">): string;
+export declare function flightDirExists(repoRoot: string, flightId: string): boolean;
+/** Recursively remove a single flight directory (Invariant A post-success purge). */
+export declare function purgeVirtualFlightDir(repoRoot: string, flightId: string): void;
+export interface ScavengeVirtualFlightsOptions {
+    maxRetained?: number;
+    maxAgeMs?: number;
+    /** Protect this flight from scavenging (active verify session). */
+    protectFlightId?: string;
+}
+/**
+ * Bounded retention for abnormal termination leftovers.
+ * Sorts flight dirs by mtime descending; keeps newest `maxRetained` and drops older than maxAgeMs.
+ */
+export declare function scavengeStaleVirtualFlights(repoRoot: string, options?: ScavengeVirtualFlightsOptions): string[];
+//# sourceMappingURL=virtual-scratch-store.d.ts.map

package/dist/cli/lib/virtual-scratch-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"virtual-scratch-store.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/virtual-scratch-store.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,yBAAyB,EAAG,mBAA4B,CAAC;AAEtE,0EAA0E;AAC1E,eAAO,MAAM,gCAAgC,EAAG,EAAW,CAAC;AAE5D,wEAAwE;AACxE,eAAO,MAAM,iCAAiC,QAAsB,CAAC;AAErE,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AAED,qEAAqE;AACrE,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAIjE;AAMD,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE9E;AAUD,4EAA4E;AAC5E,wBAAsB,sBAAsB,CAC1C,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,MAAM,CAAC,CAUjB;AAED,2EAA2E;AAC3E,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,OAAO,GACf,MAAM,CAmBR;AAED,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,IAAI,CAAC,kBAAkB,EAAE,aAAa,GAAG,WAAW,CAAC,GAC7D,MAAM,CAOR;AAED,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE3E;AAED,qFAAqF;AACrF,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAI9E;AAED,MAAM,WAAW,6BAA6B;IAC5C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,6BAAkC,GAC1C,MAAM,EAAE,CAyCV"}

package/dist/cli/lib/virtual-scratch-store.js

@@ -0,0 +1,132 @@
+import crypto from "node:crypto";
+import fs from "node:fs";
+import path from "node:path";
+import { promoteFileAtomic } from "./atomic-fs.js";
+import { REL_VIRTUAL_SCRATCH } from "./constants.js";
+export const VIRTUAL_GATE_CAPTURE_FILE = "gate-capture.json";
+/** Default max flight directories retained after abnormal termination. */
+export const DEFAULT_VIRTUAL_FLIGHT_RETENTION = 32;
+/** Default age (ms) after which abandoned flight dirs are scavenged. */
+export const DEFAULT_VIRTUAL_FLIGHT_MAX_AGE_MS = 24 * 60 * 60 * 1000;
+export function createVirtualFlightId() {
+    return crypto.randomUUID();
+}
+/** True when repo-relative path lives under `.gitagent/virtual/`. */
+export function isVirtualScratchPath(repoRelPath) {
+    const norm = repoRelPath.replace(/\\/g, "/").replace(/\/+$/, "");
+    const root = REL_VIRTUAL_SCRATCH.replace(/\\/g, "/").replace(/\/+$/, "");
+    return norm === root || norm.startsWith(`${root}/`);
+}
+function virtualRootAbs(repoRoot) {
+    return path.join(repoRoot, REL_VIRTUAL_SCRATCH.replace(/\/$/, ""));
+}
+export function virtualFlightDirAbs(repoRoot, flightId) {
+    return path.join(virtualRootAbs(repoRoot), flightId);
+}
+function ensureVirtualRoot(repoRoot) {
+    fs.mkdirSync(virtualRootAbs(repoRoot), { recursive: true });
+}
+function stagedPathInFlight(flightDir, fileName) {
+    return path.join(flightDir, `${fileName}.staging.${process.pid}.${Date.now()}`);
+}
+/** Atomic JSON write inside a per-flight directory (gitignored scratch). */
+export async function writeVirtualJsonAtomic(repoRoot, flightId, fileName, payload) {
+    ensureVirtualRoot(repoRoot);
+    const flightDir = virtualFlightDirAbs(repoRoot, flightId);
+    fs.mkdirSync(flightDir, { recursive: true });
+    const target = path.join(flightDir, fileName);
+    const staged = stagedPathInFlight(flightDir, fileName);
+    const body = `${JSON.stringify(payload, null, 2)}\n`;
+    fs.writeFileSync(staged, body, { encoding: "utf8", flag: "wx" });
+    await promoteFileAtomic(staged, target);
+    return target;
+}
+/** Synchronous variant for verify hot path (post-gate capture + purge). */
+export function writeVirtualJsonAtomicSync(repoRoot, flightId, fileName, payload) {
+    ensureVirtualRoot(repoRoot);
+    const flightDir = virtualFlightDirAbs(repoRoot, flightId);
+    fs.mkdirSync(flightDir, { recursive: true });
+    const target = path.join(flightDir, fileName);
+    const staged = stagedPathInFlight(flightDir, fileName);
+    const body = `${JSON.stringify(payload, null, 2)}\n`;
+    try {
+        fs.writeFileSync(staged, body, { encoding: "utf8", flag: "wx" });
+        fs.renameSync(staged, target);
+    }
+    catch (e) {
+        try {
+            if (fs.existsSync(staged))
+                fs.unlinkSync(staged);
+        }
+        catch {
+            // ignore cleanup failure
+        }
+        throw e;
+    }
+    return target;
+}
+export function writeGateCaptureSync(repoRoot, flightId, capture) {
+    const payload = {
+        captured_at: new Date().toISOString(),
+        flight_id: flightId,
+        ...capture,
+    };
+    return writeVirtualJsonAtomicSync(repoRoot, flightId, VIRTUAL_GATE_CAPTURE_FILE, payload);
+}
+export function flightDirExists(repoRoot, flightId) {
+    return fs.existsSync(virtualFlightDirAbs(repoRoot, flightId));
+}
+/** Recursively remove a single flight directory (Invariant A post-success purge). */
+export function purgeVirtualFlightDir(repoRoot, flightId) {
+    const dir = virtualFlightDirAbs(repoRoot, flightId);
+    if (!fs.existsSync(dir))
+        return;
+    fs.rmSync(dir, { recursive: true, force: true });
+}
+/**
+ * Bounded retention for abnormal termination leftovers.
+ * Sorts flight dirs by mtime descending; keeps newest `maxRetained` and drops older than maxAgeMs.
+ */
+export function scavengeStaleVirtualFlights(repoRoot, options = {}) {
+    const root = virtualRootAbs(repoRoot);
+    if (!fs.existsSync(root))
+        return [];
+    const maxRetained = options.maxRetained ?? DEFAULT_VIRTUAL_FLIGHT_RETENTION;
+    const maxAgeMs = options.maxAgeMs ?? DEFAULT_VIRTUAL_FLIGHT_MAX_AGE_MS;
+    const protect = options.protectFlightId;
+    const now = Date.now();
+    const entries = fs
+        .readdirSync(root, { withFileTypes: true })
+        .filter((e) => e.isDirectory())
+        .map((e) => {
+        const full = path.join(root, e.name);
+        let mtime = 0;
+        try {
+            mtime = fs.statSync(full).mtimeMs;
+        }
+        catch {
+            mtime = 0;
+        }
+        return { name: e.name, full, mtime };
+    })
+        .sort((a, b) => b.mtime - a.mtime);
+    const removed = [];
+    for (let i = 0; i < entries.length; i += 1) {
+        const entry = entries[i];
+        if (protect && entry.name === protect)
+            continue;
+        const tooOld = now - entry.mtime > maxAgeMs;
+        const overCapacity = i >= maxRetained;
+        if (!tooOld && !overCapacity)
+            continue;
+        try {
+            fs.rmSync(entry.full, { recursive: true, force: true });
+            removed.push(entry.name);
+        }
+        catch {
+            // best-effort scavenger — do not fail verify
+        }
+    }
+    return removed;
+}
+//# sourceMappingURL=virtual-scratch-store.js.map

package/dist/cli/lib/virtual-scratch-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"virtual-scratch-store.js","sourceRoot":"","sources":["../../../src/cli/lib/virtual-scratch-store.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAErD,MAAM,CAAC,MAAM,yBAAyB,GAAG,mBAA4B,CAAC;AAEtE,0EAA0E;AAC1E,MAAM,CAAC,MAAM,gCAAgC,GAAG,EAAW,CAAC;AAE5D,wEAAwE;AACxE,MAAM,CAAC,MAAM,iCAAiC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAWrE,MAAM,UAAU,qBAAqB;IACnC,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC;AAC7B,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,mBAAmB,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACzE,OAAO,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB;IACtC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,mBAAmB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,QAAgB;IACpE,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB;IACzC,EAAE,CAAC,SAAS,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,kBAAkB,CAAC,SAAiB,EAAE,QAAgB;IAC7D,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,QAAQ,YAAY,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AAClF,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,QAAgB,EAChB,QAAgB,EAChB,QAAgB,EAChB,OAAgB;IAEhB,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC5B,MAAM,SAAS,GAAG,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC1D,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IACrD,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,MAAM,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,0BAA0B,CACxC,QAAgB,EAChB,QAAgB,EAChB,QAAgB,EAChB,OAAgB;IAEhB,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC5B,MAAM,SAAS,GAAG,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC1D,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IACrD,IAAI,CAAC;QACH,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;QAC3B,CAAC;QACD,MAAM,CAAC,CAAC;IACV,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,QAAgB,EAChB,QAAgB,EAChB,OAA8D;IAE9D,MAAM,OAAO,GAAuB;QAClC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,SAAS,EAAE,QAAQ;QACnB,GAAG,OAAO;KACX,CAAC;IACF,OAAO,0BAA0B,CAAC,QAAQ,EAAE,QAAQ,EAAE,yBAAyB,EAAE,OAAO,CAAC,CAAC;AAC5F,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAAgB,EAAE,QAAgB;IAChE,OAAO,EAAE,CAAC,UAAU,CAAC,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,QAAgB;IACtE,MAAM,GAAG,GAAG,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACpD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO;IAChC,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACnD,CAAC;AASD;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CACzC,QAAgB,EAChB,UAAyC,EAAE;IAE3C,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,gCAAgC,CAAC;IAC5E,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,iCAAiC,CAAC;IACvE,MAAM,OAAO,GAAG,OAAO,CAAC,eAAe,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEvB,MAAM,OAAO,GAAG,EAAE;SACf,WAAW,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;SAC1C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;SAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,CAAC;YACH,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,GAAG,CAAC,CAAC;QACZ,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACvC,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IAErC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;QAC1B,IAAI,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;YAAE,SAAS;QAEhD,MAAM,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,KAAK,GAAG,QAAQ,CAAC;QAC5C,MAAM,YAAY,GAAG,CAAC,IAAI,WAAW,CAAC;QACtC,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY;YAAE,SAAS;QAEvC,IAAI,CAAC;YACH,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACxD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,6CAA6C;QAC/C,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/cli/program-core.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"program-core.d.ts","sourceRoot":"","sources":["../../src/cli/program-core.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAuBzC,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAgI3D"}
+{"version":3,"file":"program-core.d.ts","sourceRoot":"","sources":["../../src/cli/program-core.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAyBzC,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA2K3D"}

package/dist/cli/program-core.js

@@ -4,6 +4,8 @@ import { runUpgrade } from "./commands/upgrade.js";
 import { runStatus } from "./commands/status.js";
 import { runDoctor } from "./commands/doctor.js";
 import { runOnboarding } from "./commands/onboarding.js";
+import { runContextFeed } from "./commands/context-feed.js";
+import { runAuditRigorCommand } from "./commands/audit-rigor.js";
 import { runStart } from "./commands/start.js";
 import { runTriage } from "./commands/triage.js";
 import { readStdinIfEmpty } from "./lib/program-stdin.js";
@@ -56,9 +58,26 @@ export function registerCoreCommands(program) {
         .action(async (opts) => {
         await runInit(opts);
     });
-    program
+    const upgradeCmd = program
         .command("upgrade")
-        .description("Plan or apply substrate upgrades from the installed gapman package (Tier-3)")
+        .description("Plan or apply substrate upgrades from the installed gapman package (Tier-3)");
+    upgradeCmd
+        .command("plan")
+        .description("Preview upgrade file changes without writing staging dir or mission YAML")
+        .option("--json", "Emit stable structured JSON (schema_version 1)")
+        .option("--msn <id>", "Mission id for preview labels (default: next MSN in 9000-9099 band)")
+        .action((options) => {
+        runUpgrade({ ...options, dryRun: true });
+    });
+    upgradeCmd
+        .command("apply")
+        .description("Apply a Teacher-signed upgrade mission after hash verification")
+        .option("--json", "Emit structured JSON")
+        .option("--mission <path>", "Signed upgrade mission YAML (required unless pinned)")
+        .action((options) => {
+        runUpgrade({ ...options, apply: true });
+    });
+    upgradeCmd
         .option("--apply", "Apply a Teacher-signed upgrade mission after hash verification")
         .option("--dry-run", "Print upgrade plan without writing staging dir or mission YAML")
         .option("--json", "Emit structured JSON")
@@ -117,9 +136,30 @@ export function registerCoreCommands(program) {
     program
         .command("onboarding")
         .description("Interactive walkthrough of the strict GXT mission loop")
-        .option("--force", "Continue despite integration doctor warnings")
+        .option("--force", "Continue despite integration health blockers on configured (broken) state")
         .action(async (opts) => {
         await runOnboarding({ force: opts.force });
     });
+    program
+        .command("context-feed")
+        .description("Read or clear the latest verify remediation snapshot for IDE/agent loops")
+        .option("--json", "Emit structured remediation payload")
+        .option("--clear", "Atomically clear remediation feed (tombstone swap)")
+        .action((opts) => {
+        runContextFeed({ json: opts.json, clear: opts.clear });
+    });
+    program
+        .command("audit-rigor")
+        .description("Meta-governance audit: compiler strictness, coverage artifacts, MANIFEST wildcards")
+        .option("--json", "Emit structured report")
+        .option("--strict", "Treat warnings as failures")
+        .option("--workspace <path>", "Workspace root override (tests; default: git repo root)")
+        .action((opts) => {
+        runAuditRigorCommand({
+            json: opts.json,
+            strict: opts.strict,
+            workspace: opts.workspace,
+        });
+    });
 }
 //# sourceMappingURL=program-core.js.map

package/dist/cli/program-core.js.map

@@ -1 +1 @@
-{"version":3,"file":"program-core.js","sourceRoot":"","sources":["../../src/cli/program-core.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAuB,MAAM,uBAAuB,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAyB,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAUxD,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,OAAO;SACJ,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,gDAAgD,CAAC;SAC7D,MAAM,CAAC,GAAG,EAAE;QACX,QAAQ,EAAE,CAAC;IACb,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,yCAAyC,CAAC;SACtD,MAAM,CAAC,QAAQ,EAAE,wBAAwB,CAAC;SAC1C,MAAM,CAAC,WAAW,EAAE,gCAAgC,CAAC;SACrD,MAAM,CAAC,mBAAmB,EAAE,qDAAqD,CAAC;SAClF,MAAM,CAAC,CAAC,IAA8D,EAAE,EAAE;QACzE,SAAS,CAAC;YACR,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,QAAQ,EAAE,iBAAiB,EAAE;SAC9B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,wDAAwD,CAAC;SACrE,MAAM,CAAC,QAAQ,EAAE,wBAAwB,CAAC;SAC1C,MAAM,CAAC,mBAAmB,EAAE,qDAAqD,CAAC;SAClF,MAAM,CAAC,CAAC,IAA2C,EAAE,EAAE;QACtD,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,mEAAmE,CAAC;SAChF,MAAM,CAAC,SAAS,EAAE,wDAAwD,CAAC;SAC3E,MAAM,CAAC,OAAO,EAAE,gDAAgD,CAAC;SACjE,MAAM,CAAC,WAAW,EAAE,uCAAuC,CAAC;SAC5D,MAAM,CAAC,cAAc,EAAE,mDAAmD,CAAC;SAC3E,MAAM,CAAC,oBAAoB,EAAE,qCAAqC,CAAC;SACnE,MAAM,CAAC,mBAAmB,EAAE,mCAAmC,CAAC;SAChE,MAAM,CAAC,SAAS,EAAE,mBAAmB,CAAC;SACtC,MAAM,CAAC,YAAY,EAAE,gBAAgB,CAAC;SACtC,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC;SACrC,MAAM,CAAC,SAAS,EAAE,kBAAkB,CAAC;SACrC,MAAM,CAAC,sBAAsB,EAAE,0DAA0D,CAAC;SAC1F,MAAM,CAAC,wBAAwB,EAAE,iDAAiD,CAAC;SACnF,MAAM,CACL,YAAY,EACZ,gFAAgF,CACjF;SACA,MAAM,CAAC,KAAK,EAAE,IAAiB,EAAE,EAAE;QAClC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,6EAA6E,CAAC;SAC1F,MAAM,CAAC,SAAS,EAAE,gEAAgE,CAAC;SACnF,MAAM,CAAC,WAAW,EAAE,gEAAgE,CAAC;SACrF,MAAM,CAAC,QAAQ,EAAE,sBAAsB,CAAC;SACxC,MAAM,CAAC,YAAY,EAAE,mEAAmE,CAAC;SACzF,MAAM,CAAC,kBAAkB,EAAE,kEAAkE,CAAC;SAC9F,MAAM,CAAC,CAAC,OAAuB,EAAE,EAAE;QAClC,UAAU,CAAC,OAAO,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,mDAAmD,CAAC;SAChE,QAAQ,CAAC,aAAa,EAAE,kBAAkB,CAAC;SAC3C,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC;SACnC,MAAM,CACL,gBAAgB,EAChB,kFAAkF,CACnF;SACA,MAAM,CAAC,YAAY,EAAE,+BAA+B,EAAE,UAAU,CAAC;SACjE,MAAM,CACL,cAAc,EACd,wIAAwI,CACzI;SACA,MAAM,CAAC,KAAK,EAAE,WAAqB,EAAE,OAAyB,EAAE,IAAa,EAAE,EAAE;QAChF,IAAI,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,QAAQ,CAAC,2CAA2C,CAAC,CAAC;YACtD,WAAW,CAAC,CAAC,CAAC,CAAC;YACf,OAAO;QACT,CAAC;QACD,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,wEAAwE,CAAC;SACrF,QAAQ,CAAC,aAAa,EAAE,wBAAwB,CAAC;SACjD,MAAM,CAAC,YAAY,EAAE,0CAA0C,CAAC;SAChE,MAAM,CAAC,mBAAmB,EAAE,4BAA4B,CAAC;SACzD,MAAM,CAAC,sBAAsB,EAAE,4BAA4B,CAAC;SAC5D,MAAM,CAAC,iCAAiC,EAAE,wBAAwB,CAAC;SACnE,MAAM,CAAC,YAAY,EAAE,0CAA0C,CAAC;SAChE,MAAM,CAAC,mBAAmB,EAAE,gDAAgD,CAAC;SAC7E,MAAM,CAAC,QAAQ,EAAE,iCAAiC,CAAC;SACnD,MAAM,CAAC,mBAAmB,EAAE,qDAAqD,CAAC;SAClF,MAAM,CAAC,KAAK,EAAE,WAAqB,EAAE,OAAwB,EAAE,IAAa,EAAE,EAAE;QAC/E,IAAI,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,QAAQ,CAAC,0CAA0C,CAAC,CAAC;YACrD,WAAW,CAAC,CAAC,CAAC,CAAC;YACf,OAAO;QACT,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,GAAG,UAAU,EAAE,GAAG,OAAO,CAAC;QACzC,6FAA6F;QAC7F,QAAQ,CAAC;YACP,GAAG,UAAU;YACb,MAAM,EAAE,IAAI;YACZ,YAAY,EAAE,KAAK,KAAK,KAAK;YAC7B,QAAQ,EAAE,iBAAiB,EAAE;SAC9B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,YAAY,CAAC;SACrB,WAAW,CAAC,wDAAwD,CAAC;SACrE,MAAM,CAAC,SAAS,EAAE,8CAA8C,CAAC;SACjE,MAAM,CAAC,KAAK,EAAE,IAAyB,EAAE,EAAE;QAC1C,MAAM,aAAa,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"program-core.js","sourceRoot":"","sources":["../../src/cli/program-core.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAuB,MAAM,uBAAuB,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAyB,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAUxD,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,OAAO;SACJ,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,gDAAgD,CAAC;SAC7D,MAAM,CAAC,GAAG,EAAE;QACX,QAAQ,EAAE,CAAC;IACb,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,yCAAyC,CAAC;SACtD,MAAM,CAAC,QAAQ,EAAE,wBAAwB,CAAC;SAC1C,MAAM,CAAC,WAAW,EAAE,gCAAgC,CAAC;SACrD,MAAM,CAAC,mBAAmB,EAAE,qDAAqD,CAAC;SAClF,MAAM,CAAC,CAAC,IAA8D,EAAE,EAAE;QACzE,SAAS,CAAC;YACR,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,QAAQ,EAAE,iBAAiB,EAAE;SAC9B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,wDAAwD,CAAC;SACrE,MAAM,CAAC,QAAQ,EAAE,wBAAwB,CAAC;SAC1C,MAAM,CAAC,mBAAmB,EAAE,qDAAqD,CAAC;SAClF,MAAM,CAAC,CAAC,IAA2C,EAAE,EAAE;QACtD,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,mEAAmE,CAAC;SAChF,MAAM,CAAC,SAAS,EAAE,wDAAwD,CAAC;SAC3E,MAAM,CAAC,OAAO,EAAE,gDAAgD,CAAC;SACjE,MAAM,CAAC,WAAW,EAAE,uCAAuC,CAAC;SAC5D,MAAM,CAAC,cAAc,EAAE,mDAAmD,CAAC;SAC3E,MAAM,CAAC,oBAAoB,EAAE,qCAAqC,CAAC;SACnE,MAAM,CAAC,mBAAmB,EAAE,mCAAmC,CAAC;SAChE,MAAM,CAAC,SAAS,EAAE,mBAAmB,CAAC;SACtC,MAAM,CAAC,YAAY,EAAE,gBAAgB,CAAC;SACtC,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC;SACrC,MAAM,CAAC,SAAS,EAAE,kBAAkB,CAAC;SACrC,MAAM,CAAC,sBAAsB,EAAE,0DAA0D,CAAC;SAC1F,MAAM,CAAC,wBAAwB,EAAE,iDAAiD,CAAC;SACnF,MAAM,CACL,YAAY,EACZ,gFAAgF,CACjF;SACA,MAAM,CAAC,KAAK,EAAE,IAAiB,EAAE,EAAE;QAClC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEL,MAAM,UAAU,GAAG,OAAO;SACvB,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,6EAA6E,CAAC,CAAC;IAE9F,UAAU;SACP,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,0EAA0E,CAAC;SACvF,MAAM,CAAC,QAAQ,EAAE,gDAAgD,CAAC;SAClE,MAAM,CAAC,YAAY,EAAE,qEAAqE,CAAC;SAC3F,MAAM,CAAC,CAAC,OAAuB,EAAE,EAAE;QAClC,UAAU,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEL,UAAU;SACP,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,gEAAgE,CAAC;SAC7E,MAAM,CAAC,QAAQ,EAAE,sBAAsB,CAAC;SACxC,MAAM,CAAC,kBAAkB,EAAE,sDAAsD,CAAC;SAClF,MAAM,CAAC,CAAC,OAAuB,EAAE,EAAE;QAClC,UAAU,CAAC,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEL,UAAU;SACP,MAAM,CAAC,SAAS,EAAE,gEAAgE,CAAC;SACnF,MAAM,CAAC,WAAW,EAAE,gEAAgE,CAAC;SACrF,MAAM,CAAC,QAAQ,EAAE,sBAAsB,CAAC;SACxC,MAAM,CAAC,YAAY,EAAE,mEAAmE,CAAC;SACzF,MAAM,CAAC,kBAAkB,EAAE,kEAAkE,CAAC;SAC9F,MAAM,CAAC,CAAC,OAAuB,EAAE,EAAE;QAClC,UAAU,CAAC,OAAO,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,mDAAmD,CAAC;SAChE,QAAQ,CAAC,aAAa,EAAE,kBAAkB,CAAC;SAC3C,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC;SACnC,MAAM,CACL,gBAAgB,EAChB,kFAAkF,CACnF;SACA,MAAM,CAAC,YAAY,EAAE,+BAA+B,EAAE,UAAU,CAAC;SACjE,MAAM,CACL,cAAc,EACd,wIAAwI,CACzI;SACA,MAAM,CAAC,KAAK,EAAE,WAAqB,EAAE,OAAyB,EAAE,IAAa,EAAE,EAAE;QAChF,IAAI,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,QAAQ,CAAC,2CAA2C,CAAC,CAAC;YACtD,WAAW,CAAC,CAAC,CAAC,CAAC;YACf,OAAO;QACT,CAAC;QACD,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,wEAAwE,CAAC;SACrF,QAAQ,CAAC,aAAa,EAAE,wBAAwB,CAAC;SACjD,MAAM,CAAC,YAAY,EAAE,0CAA0C,CAAC;SAChE,MAAM,CAAC,mBAAmB,EAAE,4BAA4B,CAAC;SACzD,MAAM,CAAC,sBAAsB,EAAE,4BAA4B,CAAC;SAC5D,MAAM,CAAC,iCAAiC,EAAE,wBAAwB,CAAC;SACnE,MAAM,CAAC,YAAY,EAAE,0CAA0C,CAAC;SAChE,MAAM,CAAC,mBAAmB,EAAE,gDAAgD,CAAC;SAC7E,MAAM,CAAC,QAAQ,EAAE,iCAAiC,CAAC;SACnD,MAAM,CAAC,mBAAmB,EAAE,qDAAqD,CAAC;SAClF,MAAM,CAAC,KAAK,EAAE,WAAqB,EAAE,OAAwB,EAAE,IAAa,EAAE,EAAE;QAC/E,IAAI,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,QAAQ,CAAC,0CAA0C,CAAC,CAAC;YACrD,WAAW,CAAC,CAAC,CAAC,CAAC;YACf,OAAO;QACT,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,GAAG,UAAU,EAAE,GAAG,OAAO,CAAC;QACzC,6FAA6F;QAC7F,QAAQ,CAAC;YACP,GAAG,UAAU;YACb,MAAM,EAAE,IAAI;YACZ,YAAY,EAAE,KAAK,KAAK,KAAK;YAC7B,QAAQ,EAAE,iBAAiB,EAAE;SAC9B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,YAAY,CAAC;SACrB,WAAW,CAAC,wDAAwD,CAAC;SACrE,MAAM,CAAC,SAAS,EAAE,2EAA2E,CAAC;SAC9F,MAAM,CAAC,KAAK,EAAE,IAAyB,EAAE,EAAE;QAC1C,MAAM,aAAa,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,cAAc,CAAC;SACvB,WAAW,CAAC,0EAA0E,CAAC;SACvF,MAAM,CAAC,QAAQ,EAAE,qCAAqC,CAAC;SACvD,MAAM,CAAC,SAAS,EAAE,oDAAoD,CAAC;SACvE,MAAM,CAAC,CAAC,IAAyC,EAAE,EAAE;QACpD,cAAc,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,aAAa,CAAC;SACtB,WAAW,CAAC,oFAAoF,CAAC;SACjG,MAAM,CAAC,QAAQ,EAAE,wBAAwB,CAAC;SAC1C,MAAM,CAAC,UAAU,EAAE,4BAA4B,CAAC;SAChD,MAAM,CAAC,oBAAoB,EAAE,yDAAyD,CAAC;SACvF,MAAM,CAAC,CAAC,IAA8D,EAAE,EAAE;QACzE,oBAAoB,CAAC;YACnB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACP,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jeger-ai/opengantry",
-  "version": "2.1.0",
+  "version": "2.2.1",
   "description": "OpenGantry GXT substrate + gapman CLI",
   "type": "module",
   "bin": {

package/templates/.gitagent/teacher/MISSION.schema.yaml

@@ -27,6 +27,12 @@ properties:
     minLength: 1
   gate_success_substring:
     type: ["string", "null"]
+  virtual_capture:
+    type: boolean
+    default: false
+    description: >-
+      When true, gapman verify captures gate stdout/stderr under
+      .gitagent/virtual/<flight-id>/ (gitignored) and purges on success.
   upgrade_payload:
     type: object
     additionalProperties: false

package/templates/.gitignore.gxt

@@ -5,3 +5,5 @@
 .gitagent/history/.ignored-last-error.json
 .gitagent/history/.draft-token-replay.json
 .gitagent/foreman/DRAFT_TOKEN.key
+.gitagent/tmp/
+.gitagent/virtual/

package/templates/integrations/asset-catalog.json

@@ -36,6 +36,7 @@
     { "targetPath": "scripts/gxt-pin-mission.sh", "mode": "managed_strict", "executable": true, "tags": ["runtime"] },
     { "targetPath": "scripts/gxt-resolve-mission.sh", "mode": "managed_strict", "executable": true, "tags": ["runtime"] },
     { "targetPath": "scripts/gxt-runtime-env.sh", "mode": "managed_strict", "executable": true, "tags": ["runtime"] },
+    { "targetPath": "scripts/gxt-shell-agent.sh", "mode": "managed_strict", "executable": true, "tags": ["runtime", "claude-code", "codex-cli", "opencode"] },
     { "targetPath": "scripts/validate-gxt.sh", "mode": "managed_strict", "executable": true, "tags": ["core"] },
     { "targetPath": "scripts/verify-pr-missions.sh", "mode": "managed_strict", "executable": true, "tags": ["ci"] },
     { "targetPath": "skills/gapman.md", "mode": "scaffold_only", "tags": ["skill-specimen"] },

package/templates/integrations/compatibility.json

@@ -1,6 +1,6 @@
 {
   "schema_version": "1",
-  "opengantry_version": "2.1.0",
+  "opengantry_version": "2.2.1",
   "asset_catalog": "integrations/asset-catalog.json",
   "integrations": {
     "cursor": {
@@ -8,6 +8,7 @@
       "verified_date": "2026-06-16",
       "docs_url": "https://cursor.com/docs/agent/hooks",
       "recipe_file": "cursor.md",
+      "bootstrap_mode": "hook",
       "canonical_paths": [
         ".cursor/rules/opengantry-gxt-substrate.mdc",
         ".cursor/hooks.json"
@@ -21,6 +22,7 @@
       "verified_date": "2026-06-16",
       "docs_url": "https://docs.anthropic.com/en/docs/claude-code",
       "recipe_file": "claude-code.md",
+      "bootstrap_mode": "shell_wrapper",
       "canonical_paths": ["CLAUDE.md"],
       "deprecated_paths": [],
       "cli_probe": ["claude", "--version"]
@@ -31,6 +33,7 @@
       "docs_url": "https://developers.openai.com/codex/config-basic",
       "disambiguation": "OpenAI Codex API (2021-2023) is NOT this product",
       "recipe_file": "codex-cli.md",
+      "bootstrap_mode": "shell_wrapper",
       "canonical_paths": ["AGENTS.md", ".codex/config.toml"],
       "deprecated_paths": [],
       "cli_probe": ["codex", "--version"]
@@ -40,6 +43,7 @@
       "verified_date": "2026-06-16",
       "docs_url": "https://opencode.ai/docs",
       "recipe_file": "opencode.md",
+      "bootstrap_mode": "shell_wrapper",
       "canonical_paths": ["opencode.json"],
       "deprecated_paths": [],
       "cli_probe": ["opencode", "--version"]
@@ -49,6 +53,7 @@
       "verified_date": "2026-06-16",
       "docs_url": "https://www.jetbrains.com/junie/",
       "recipe_file": "junie.md",
+      "bootstrap_mode": "manual_recipe",
       "canonical_paths": [".junie/guidelines.md"],
       "deprecated_paths": [],
       "cli_probe": null
@@ -58,6 +63,7 @@
       "verified_date": "2026-06-16",
       "docs_url": "https://antigravity.google/",
       "recipe_file": "antigravity.md",
+      "bootstrap_mode": "manual_recipe",
       "canonical_paths": [".agent/rules/gxt.md"],
       "deprecated_paths": [],
       "cli_probe": null
@@ -67,6 +73,7 @@
       "verified_date": "2026-06-16",
       "docs_url": "https://docs.cline.bot/",
       "recipe_file": "cline.md",
+      "bootstrap_mode": "manual_recipe",
       "canonical_paths": [".clinerules/gxt.md"],
       "deprecated_paths": [".cursorrules"],
       "cli_probe": null
@@ -76,6 +83,7 @@
       "verified_date": "2026-06-16",
       "docs_url": "https://aider.chat/docs/",
       "recipe_file": "aider.md",
+      "bootstrap_mode": "manual_recipe",
       "canonical_paths": [".aider.conf.yml"],
       "deprecated_paths": [],
       "cli_probe": ["aider", "--version"]
@@ -85,6 +93,7 @@
       "verified_date": "2026-06-16",
       "docs_url": "https://docs.all-hands.dev/",
       "recipe_file": "openhands.md",
+      "bootstrap_mode": "manual_recipe",
       "canonical_paths": [".openhands/microagents/gxt.md"],
       "deprecated_paths": [],
       "cli_probe": null

package/templates/integrations/recipes/claude-code.md

@@ -1,14 +1,16 @@
 ### Claude Code
 
 - **Context injection:** Minimal `CLAUDE.md` pointing at `AGENTS.md`, `.gitagent/teacher/RULES.md`, `.gitagent/foreman/MANIFEST.json`.
-- **Session bootstrap:**
+- **Session bootstrap (shell wrapper — no project hooks):**
 
 ```bash
-source scripts/gxt-runtime-env.sh .gitagent/missions/MSN-0001.<slug>.yaml
+scripts/gxt-pin-mission.sh .gitagent/missions/MSN-0001.<slug>.yaml
+scripts/gxt-shell-agent.sh claude .gitagent/missions/MSN-0001.<slug>.yaml
+# or with explicit task:
 gapman runtime exec --mission .gitagent/missions/MSN-0001.<slug>.yaml -- claude "<task>"
 ```
 
-- **Enforcement:** Advisory in interactive session; process-boundary when wrapped with `runtime exec`.
-- **Gotcha:** Link canonical files — do not copy full RULES into `CLAUDE.md`.
+- **Enforcement:** Advisory in interactive session; process-boundary when wrapped with `runtime exec` or `gxt-shell-agent.sh`.
+- **Gotcha:** Claude Code does not execute project hook directories — use the shell wrapper, not phantom hook files.
 
 Vendor docs: https://docs.anthropic.com/en/docs/claude-code

package/templates/integrations/recipes/codex-cli.md

@@ -3,14 +3,16 @@
 > **Not** the deprecated OpenAI Codex API (2021–2023). This covers [OpenAI Codex CLI](https://github.com/openai/codex) (2025+ terminal/IDE agent).
 
 - **Context injection:** Root `AGENTS.md` (native after `gapman init`); optional `.codex/config.toml` for project defaults.
-- **Session bootstrap:**
+- **Session bootstrap (shell wrapper — no project hooks):**
 
 ```bash
-source scripts/gxt-runtime-env.sh .gitagent/missions/MSN-0001.<slug>.yaml
+scripts/gxt-pin-mission.sh .gitagent/missions/MSN-0001.<slug>.yaml
+scripts/gxt-shell-agent.sh codex .gitagent/missions/MSN-0001.<slug>.yaml
+# or headless:
 gapman runtime exec --mission .gitagent/missions/MSN-0001.<slug>.yaml -- codex exec "<task>"
 ```
 
-- **Enforcement:** Advisory in interactive TUI/IDE extension; process-boundary when wrapped with `runtime exec`.
-- **Gotcha:** Codex sandbox settings govern Codex — not GXT forbidden zones. Use `runtime exec` for manifest-enforced boundaries.
+- **Enforcement:** Advisory in interactive TUI/IDE extension; process-boundary when wrapped with `runtime exec` or `gxt-shell-agent.sh`.
+- **Gotcha:** Codex CLI does not scan project hook folders — use the shell wrapper. Codex sandbox settings govern Codex — not GXT forbidden zones.
 
 Vendor docs: https://developers.openai.com/codex/config-basic

package/templates/integrations/recipes/opencode.md

@@ -1,8 +1,14 @@
 ### OpenCode
 
 - **Context injection:** Repo-root `AGENTS.md` (native); optional `opencode.json` `instructions` array.
-- **Session bootstrap:** `source scripts/gxt-runtime-env.sh <mission>` then OpenCode in same terminal.
+- **Session bootstrap (shell wrapper — no project hooks):**
+
+```bash
+scripts/gxt-pin-mission.sh .gitagent/missions/MSN-0001.<slug>.yaml
+scripts/gxt-shell-agent.sh opencode .gitagent/missions/MSN-0001.<slug>.yaml
+```
+
 - **Enforcement:** Advisory; OpenCode permissions are separate from GXT TMVC.
-- **Gotcha:** OpenCode prefers `AGENTS.md` over `CLAUDE.md` when both exist.
+- **Gotcha:** OpenCode prefers `AGENTS.md` over `CLAUDE.md` when both exist. OpenCode does not execute project hook directories.
 
 Vendor docs: https://opencode.ai/docs

package/templates/scripts/gxt-shell-agent.sh

@@ -0,0 +1,62 @@
+#!/usr/bin/env bash
+# Shell-wrapper bootstrap for CLI-first agents (Claude Code, Codex CLI, OpenCode).
+# These tools do not execute project hook directories — inject GXT runtime via this wrapper.
+set -euo pipefail
+
+AGENT="${1:-}"
+if [ -z "$AGENT" ]; then
+  cat >&2 <<'EOF'
+Usage: scripts/gxt-shell-agent.sh <claude|codex|opencode> [mission.yaml] [--] [agent args...]
+
+Loads GXT mission runtime env, then execs the agent CLI. Prefer over phantom hook files.
+EOF
+  exit 2
+fi
+shift
+
+MISSION_ARG=""
+if [ $# -gt 0 ] && [ "$1" != "--" ]; then
+  case "$1" in
+    *.yaml|*.yml|*.md)
+      MISSION_ARG="$1"
+      shift
+      ;;
+  esac
+fi
+
+if [ "${1:-}" = "--" ]; then
+  shift
+fi
+
+ROOT="$(git rev-parse --show-toplevel 2>/dev/null || true)"
+if [ -z "$ROOT" ]; then
+  echo "gxt-shell-agent: not inside a git repository" >&2
+  exit 1
+fi
+cd "$ROOT"
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+# shellcheck source=scripts/gxt-runtime-env.sh
+source "$SCRIPT_DIR/gxt-runtime-env.sh" ${MISSION_ARG:+"$MISSION_ARG"}
+
+case "$AGENT" in
+  claude)
+    DEFAULT_CMD=(claude)
+    ;;
+  codex)
+    DEFAULT_CMD=(codex)
+    ;;
+  opencode)
+    DEFAULT_CMD=(opencode)
+    ;;
+  *)
+    echo "gxt-shell-agent: unsupported agent '$AGENT' (use claude, codex, or opencode)" >&2
+    exit 2
+    ;;
+esac
+
+if [ $# -eq 0 ]; then
+  exec "${DEFAULT_CMD[@]}"
+else
+  exec "$@"
+fi

package/dist/cli/lib/kpi-report-stale.d.ts

@@ -1,18 +0,0 @@
-import type { Manifest } from "./types.js";
-export interface KpiReportStaleOptions {
-    skipStaleEvidence?: boolean;
-    /** When true, uncommitted TMVC drift is a hard failure (pre-push / CI). */
-    strictStale?: boolean;
-}
-export interface KpiReportStaleResult {
-    stale: boolean;
-    advisoryOnly: boolean;
-    stalePaths: string[];
-    attestationCommit?: string;
-    reason?: string;
-}
-/** Bind KPI report attestation to TMVC drift (mirrors trace-evidence committed/uncommitted split). */
-export declare function verifyKpiReportFreshness(repoRoot: string, manifest: Manifest, skillKey: string | null, reportPath: string, options?: KpiReportStaleOptions): KpiReportStaleResult;
-/** True when report file is tracked in git. */
-export declare function isKpiReportCommitted(repoRoot: string, reportPath: string): boolean;
-//# sourceMappingURL=kpi-report-stale.d.ts.map

package/dist/cli/lib/kpi-report-stale.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"kpi-report-stale.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/kpi-report-stale.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C,MAAM,WAAW,qBAAqB;IACpC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,2EAA2E;IAC3E,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,OAAO,CAAC;IACf,YAAY,EAAE,OAAO,CAAC;IACtB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AA4BD,sGAAsG;AACtG,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,QAAQ,EAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,EACvB,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,qBAA0B,GAClC,oBAAoB,CAoEtB;AAED,+CAA+C;AAC/C,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAIlF"}