@jeger-ai/opengantry 2.2.2 → 2.2.4

package/package.json

@@ -1,9 +1,10 @@
 {
   "name": "@jeger-ai/opengantry",
-  "version": "2.2.2",
-  "description": "OpenGantry GXT substrate + gapman CLI",
+  "version": "2.2.4",
+  "description": "Open Source Gantry — vendor-neutral GXT substrate and Gantry CLI for local git-native agent governance",
   "type": "module",
   "bin": {
+    "gantry": "dist/cli/index.js",
     "gapman": "dist/cli/index.js"
   },
   "files": [
@@ -25,7 +26,8 @@
     "prepublishOnly": "npm run build && npm test",
     "pack:check": "./scripts/npm-pack-check.sh",
     "test": "npm run build && node --test dist/cli/tests/*.test.js",
-    "examples:benchmark": "node examples/benchmark-agent/run-benchmark.mjs"
+    "examples:benchmark": "node examples/benchmark-agent/run-benchmark.mjs",
+    "gantry": "node dist/cli/index.js"
   },
   "publishConfig": {
     "access": "public",
@@ -33,7 +35,10 @@
   },
   "keywords": [
     "gxt",
-    "gapman",
+    "gantry",
+    "gantry-cli",
+    "open-source-gantry",
+    "git-hooks",
     "ai-agents",
     "governance",
     "devtools"

package/templates/.cursor/hooks/gxt-before-shell.sh

@@ -52,9 +52,9 @@ if printf '%s' "$command" | grep -qE '\.gitagent/foreman/|\.gitagent/teacher/RUL
 fi
 
 # Fallback guard when agents bypass MCP and run legislate via raw shell.
-if printf '%s' "$command" | grep -qE '(^|[[:space:]/])gapman[[:space:]]+legislate\b'; then
+if printf '%s' "$command" | grep -qE '(^|[[:space:]/])gantry[[:space:]]+legislate\b'; then
   ask \
-    "Shell command runs gapman legislate directly. Confirm you intend to write mission law outside the MCP draft/execute gate." \
+    "Shell command runs gantry legislate directly. Confirm you intend to write mission law outside the MCP draft/execute gate." \
     "Prefer MCP: gxt_draft_legislation (preview) → human chat approval → gxt_execute_legislation. Shell legislate is a fallback path only."
   exit 0
 fi

package/templates/.cursor/hooks/gxt-session-start.sh

@@ -14,15 +14,15 @@ if MISSION="$(scripts/gxt-resolve-mission.sh 2>/dev/null)"; then
 else
   node -e '
     process.stdout.write(JSON.stringify({
-      additional_context: "No active mission pinned. Ask me to run the Mission Architect protocol (MCP: gxt_draft_legislation) or gapman legislate.",
+      additional_context: "No active mission pinned. Ask me to run the Mission Architect protocol (MCP: gxt_draft_legislation) or gantry legislate.",
     }));
   '
   exit 0
 fi
 
 RUNTIME_JSON=""
-if command -v gapman >/dev/null 2>&1; then
-  RUNTIME_JSON="$(gapman runtime env --mission "$MISSION" --json 2>/dev/null || true)"
+if command -v gantry >/dev/null 2>&1; then
+  RUNTIME_JSON="$(gantry runtime env --mission "$MISSION" --json 2>/dev/null || true)"
 elif [ -f "dist/cli/index.js" ]; then
   RUNTIME_JSON="$(node dist/cli/index.js runtime env --mission "$MISSION" --json 2>/dev/null || true)"
 fi
@@ -30,7 +30,7 @@ fi
 if [ -z "$RUNTIME_JSON" ]; then
   node -e '
     process.stdout.write(JSON.stringify({
-      additional_context: "GXT: gapman not built — run npm ci && npm run build, then scripts/gxt-pin-mission.sh <mission>",
+      additional_context: "GXT: gantry not built — run npm ci && npm run build, then scripts/gxt-pin-mission.sh <mission>",
     }));
   '
   exit 0
@@ -58,7 +58,7 @@ process.stdout.write(JSON.stringify({
     `- Forbidden: ${forbidden.join(", ") || "(none)"}`,
     `- Trace sink: ${payload.GXT_WORKER_LOG || "WORKER_LOG.md"}`,
     "",
-    "Worker loop: edit within TMVC → append PASS quotes to WORKER_LOG.md → gapman verify --mission … → npm run validate",
+    "Worker loop: edit within TMVC → append PASS quotes to WORKER_LOG.md → gantry verify --mission … → npm run validate",
     "MCP tools: gxt_draft_legislation, gxt_execute_legislation, gxt_check_signature, gxt_pin_mission, gxt_runtime_env, gxt_verify (see .cursor/mcp.json).",
     "IDE Agent edits are advisory TMVC; shell substrate writes are hook-guarded. Full loop: docs/DEVELOPMENT.md",
   ].join("\n"),

package/templates/.cursor/mcp.json

@@ -1,7 +1,7 @@
 {
   "mcpServers": {
     "opengantry-gxt": {
-      "command": "gapman",
+      "command": "gantry",
       "args": ["mcp", "serve"]
     }
   }

package/templates/.cursor/rules/opengantry-gxt-substrate.mdc

@@ -11,7 +11,7 @@ Whenever the user starts a prompt with `/gantry`:
 
 1. Immediately switch to Mission Architect behavior.
 2. Run the protocol in `.gitagent/teacher/MISSION-ARCHITECT.md`.
-3. Hand off via MCP tools (`gxt_draft_legislation` → chat approval → `gxt_execute_legislation`) or CLI `gapman legislate` fallback.
+3. Hand off via MCP tools (`gxt_draft_legislation` → chat approval → `gxt_execute_legislation`) or CLI `gantry legislate` fallback.
 
 Do not use `/plan` — Cursor reserves it for native Plan Mode.
 
@@ -28,13 +28,13 @@ Treat these as the **law + routing contract** for agent work. For orientation an
 
 - **Do NOT** trigger for questions, explanations, or code discovery.
 - **MCP handoff:** two-step draft/execute with semantic chat approval before any mission file write.
-- **CLI fallback:** one copy-paste `gapman legislate …` command only (no raw YAML blocks).
+- **CLI fallback:** one copy-paste `gantry legislate …` command only (no raw YAML blocks).
 
 ## Cursor wiring
 
 - **Rules:** this file (`alwaysApply: true`) + root `AGENTS.md`.
-- **MCP:** `.cursor/mcp.json` — `gxt_*` tools via `gapman mcp serve`.
-- **Hooks:** `.cursor/hooks.json` (installed by `gapman init`) — `sessionStart` mission scope + shell guard for GXT law/manifest paths (fallback for non-MCP shell paths).
+- **MCP:** `.cursor/mcp.json` — `gxt_*` tools via `gantry mcp serve`.
+- **Hooks:** `.cursor/hooks.json` (installed by `gantry init`) — `sessionStart` mission scope + shell guard for GXT law/manifest paths (fallback for non-MCP shell paths).
 - **Pin mission:** `scripts/gxt-pin-mission.sh .gitagent/missions/<file>.yaml` before Agent work.
 - **Terminal bootstrap:** `source scripts/gxt-runtime-env.sh` (uses pinned mission or explicit path).
 - **Code architecture:** `.gitagent/ARCHITECTURE.pointer.json` — if `kind=unset` or stub, read `.gitagent/teacher/ARCHITECTURE-DISCOVERY.md` and ask user before coding.

package/templates/.gitagent/config.json

@@ -0,0 +1,15 @@
+{
+  "trusted_automation": {
+    "rules": [
+      {
+        "id": "workflow-dependency-bumps",
+        "allowed_actors": [
+          "dependabot[bot]@users.noreply.github.com"
+        ],
+        "allowed_paths": [".github/workflows/**"],
+        "allowed_structural_changes": ["workflow_version_pin"],
+        "max_net_loc": 5
+      }
+    ]
+  }
+}

package/templates/.gitagent/foreman/MANIFEST.json

@@ -13,8 +13,8 @@
       "tmvc_roots": ["src/lib/", "src/utils/"],
       "forbidden_zones": [".gitagent/", "src/auth/", "src/core/", "src/db/schema/"]
     },
-    "gapman": {
-      "desc": "gapman CLI delivery, lib layers, and unit tests (OpenGantry specimen).",
+    "gantry": {
+      "desc": "gantry CLI delivery, lib layers, and unit tests (OpenGantry specimen).",
       "trust_threshold": "Tier-2",
       "tmvc_roots": ["src/cli/"],
       "forbidden_zones": [".gitagent/foreman/", ".gitagent/teacher/RULES.md"]

package/templates/.gitagent/foreman/SUBSTRATE.version.json

@@ -2,5 +2,5 @@
   "schema_version": "0.1.0",
   "opengantry_version": "1.1.0",
   "installed_at": "2026-01-01T00:00:00.000Z",
-  "installed_by": "gapman init"
+  "installed_by": "gantry init"
 }

package/templates/.gitagent/foreman/TEACHER.allowlist.example

@@ -1,4 +1,4 @@
 # One Git author email per line (case-insensitive). Committed team allowlist.
 # Personal override (gitignored): .gitagent/foreman/TEACHER.allowlist.local
-# Or: git config gapman.teacherEmails "you@example.com"
+# Or: git config gantry.teacherEmails "you@example.com"
 teacher@example.com

package/templates/.gitagent/missions/README.md

@@ -1,15 +1,15 @@
 # Missions
 
-Store mission files here (`.md` or `.yaml`) for `gapman verify`.
+Store mission files here (`.md` or `.yaml`) for `gantry verify`.
 
 Quick start:
 
 1. Configure `.gitagent/foreman/MANIFEST.json` skill keys and roots.
-2. Set `GAPMAN_TEACHER_EMAILS`.
+2. Set `GANTRY_TEACHER_EMAILS`.
 3. Legislate with explicit id:
 
 ```bash
-gapman legislate "<intent>" --msn MSN-0001 --skill-key <manifest-key> [--gate-command "<cmd>"]
+gantry legislate "<intent>" --msn MSN-0001 --skill-key <manifest-key> [--gate-command "<cmd>"]
 ```
 
 Duplicate `msn_id` values fail closed by default; use `--allow-duplicate` only for intentional migration flows. New stubs emit `status: PENDING` trace rows until worker execution.

package/templates/.gitagent/teacher/ARCHITECTURE-ACCESS.md

@@ -22,7 +22,7 @@ Check in order:
 
 1. **MCP / IDE integrations** — list configured MCP servers and tools; match `access.detect` and `access.tool`.
 2. **Environment** — env vars suggested by `access.detect` or `auth_hint` (never print values).
-3. **Stored credentials** — run `gapman arch cred status` (or `--slot <credential_slot>`). Status shows slot + kind only, never secrets.
+3. **Stored credentials** — run `gantry arch cred status` (or `--slot <credential_slot>`). Status shows slot + kind only, never secrets.
 4. **User docs** — project README / human INTEGRATIONS doc for team setup (not duplicated here).
 
 If a path already works, record in `WORKER_LOG.md` which method you used (not the secret) and fetch architecture docs.
@@ -33,28 +33,28 @@ Ask **one focused question at a time**:
 
 - Which system hosts architecture docs? (confirm or override `access.tool`)
 - How does your team authenticate? (PAT, API key, OAuth device flow, MCP already configured, …)
-- Whether you may store a credential locally via `gapman arch cred set` (git-ignored, mode 600)
+- Whether you may store a credential locally via `gantry arch cred set` (git-ignored, mode 600)
 
 **Never** ask the user to paste tokens into chat, commits, or `WORKER_LOG.md`.
 
 ## 4. Store credentials securely
 
-Use **`gapman arch cred set`** — secrets on **stdin only**, never argv:
+Use **`gantry arch cred set`** — secrets on **stdin only**, never argv:
 
 ```bash
 # Bearer / PAT
-printf '%s' 'YOUR_TOKEN' | gapman arch cred set --slot architecture/confluence --kind bearer
+printf '%s' 'YOUR_TOKEN' | gantry arch cred set --slot architecture/confluence --kind bearer
 
 # API key
-printf '%s' 'YOUR_KEY' | gapman arch cred set --slot architecture/notion --kind api_key
+printf '%s' 'YOUR_KEY' | gantry arch cred set --slot architecture/notion --kind api_key
 
 # Basic auth (JSON on stdin)
-printf '%s' '{"username":"you@corp.com","password":"…"}' | gapman arch cred set --slot architecture/wiki --kind basic
+printf '%s' '{"username":"you@corp.com","password":"…"}' | gantry arch cred set --slot architecture/wiki --kind basic
 ```
 
-Files live under **`.gitagent/history/credentials/`** (git-ignored). Verify with `gapman arch cred status`.
+Files live under **`.gitagent/history/credentials/`** (git-ignored). Verify with `gantry arch cred status`.
 
-To remove: `gapman arch cred unset --slot <name>`.
+To remove: `gantry arch cred unset --slot <name>`.
 
 ## 5. Context request (GXT)
 

package/templates/.gitagent/teacher/KPI-REPORT.schema.yaml

@@ -1,5 +1,5 @@
 # KPI-REPORT.schema — JSON Schema for committed LLM/scan evidence reports
-# Consumed by gapman verify kpi phase (Ajv). Version label for docs only.
+# Consumed by gantry verify kpi phase (Ajv). Version label for docs only.
 $schema: https://json-schema.org/draft/2020-12/schema
 $id: https://opengantry.local/schemas/kpi-report.v2_0.json
 title: OpenGantryKpiReport

package/templates/.gitagent/teacher/MISSION-ARCHITECT.md

@@ -26,7 +26,7 @@ Before proposing legislation, read (do not lecture the user):
 - `.gitagent/ARCHITECTURE.pointer.json` — code layout (if `kind=unset`, follow ARCHITECTURE-DISCOVERY.md and ask)
 - Optional: `.gitagent/out-of-scope/` ADRs when scope is ambiguous
 
-**Do not** run `gapman triage` in chat. Reason from manifest + architecture directly.
+**Do not** run `gantry triage` in chat. Reason from manifest + architecture directly.
 
 ## Fast-path vs full interview
 
@@ -70,7 +70,7 @@ This two-step draft/execute gate prevents silent legislation even when Cursor ru
 One bash command the user copies into their terminal:
 
 ```bash
-gapman legislate "<intent summary>" --msn MSN-NNNN --skill-key <key> \
+gantry legislate "<intent summary>" --msn MSN-NNNN --skill-key <key> \
   --gate-command "<deterministic gate shell command>" \
   --gate-success-substring "<optional substring>"
 ```
@@ -82,12 +82,12 @@ gapman legislate "<intent summary>" --msn MSN-NNNN --skill-key <key> \
 
 ## Teacher loop (human)
 
-1. Approve draft (MCP) or paste and run `gapman legislate` (CLI).
+1. Approve draft (MCP) or paste and run `gantry legislate` (CLI).
 2. Optionally review/edit the generated YAML.
-3. `git commit -m "[MSN-NNNN] legislate …"` including the mission file (Teacher email in `GAPMAN_TEACHER_EMAILS`).
+3. `git commit -m "[MSN-NNNN] legislate …"` including the mission file (Teacher email in `GANTRY_TEACHER_EMAILS`).
 4. Pin mission (`gxt_pin_mission` MCP tool or `scripts/gxt-pin-mission.sh`).
 5. Worker phase begins.
 
 ## Worker phase (after pin)
 
-Edit within TMVC → append PASS quotes to `WORKER_LOG.md` → `gapman verify --mission …` (or `gxt_verify`) → pin stays until mission complete.
+Edit within TMVC → append PASS quotes to `WORKER_LOG.md` → `gantry verify --mission …` (or `gxt_verify`) → pin stays until mission complete.

package/templates/.gitagent/teacher/MISSION.schema.yaml

@@ -1,5 +1,5 @@
 # MISSION.schema — JSON Schema (YAML encoding) for structured missions
-# Consumed by gapman (Ajv). Version label for docs only.
+# Consumed by gantry (Ajv). Version label for docs only.
 $schema: https://json-schema.org/draft/2020-12/schema
 $id: https://opengantry.local/schemas/mission.v1_1.json
 title: OpenGantryMission
@@ -31,7 +31,7 @@ properties:
     type: boolean
     default: false
     description: >-
-      When true, gapman verify captures gate stdout/stderr under
+      When true, gantry verify captures gate stdout/stderr under
       .gitagent/virtual/<flight-id>/ (gitignored) and purges on success.
   upgrade_payload:
     type: object

package/templates/.gitagent/teacher/RULES.md

@@ -27,10 +27,10 @@ Normative keywords **MUST**, **MUST NOT**, and **SHOULD** follow RFC 2119.
 ## 5. Mission commit indexing
 
 - Mission-related commits MUST begin with `[MSN-XXXX]` in the subject line.
-- Keep mission files for `gapman verify` under `.gitagent/missions/`.
+- Keep mission files for `gantry verify` under `.gitagent/missions/`.
 
 ## 6. Break-glass (v0.8.0)
 
 - Set `GXT_BYPASS_SECRET` to match `.gitagent/foreman/BYPASS.sha256` (SHA-256 hex of the team secret).
-- Use `gapman verify --break-glass --reason "..."` only in emergencies; push `refs/notes/gxt-bypass` with the branch.
+- Use `gantry verify --break-glass --reason "..."` only in emergencies; push `refs/notes/gxt-bypass` with the branch.
 - Forbidden-zone runtime policy is never bypassed.

package/templates/.githooks/pre-commit

@@ -6,10 +6,10 @@ cd "$(git rev-parse --show-toplevel)"
 
 if [[ -f dist/cli/index.js ]]; then
   GAPMAN=(node dist/cli/index.js)
-elif command -v gapman >/dev/null 2>&1; then
-  GAPMAN=(gapman)
+elif command -v gantry >/dev/null 2>&1; then
+  GAPMAN=(gantry)
 else
-  echo "pre-commit: gapman not found — run: npm run build" >&2
+  echo "pre-commit: gantry not found — run: npm run build" >&2
   exit 1
 fi
 
@@ -21,6 +21,6 @@ else
   exit 0
 fi
 
-echo "pre-commit: gapman tmvc guard --mission ${mission} (advisory default)" >&2
+echo "pre-commit: gantry tmvc guard --mission ${mission} (advisory default)" >&2
 "${GAPMAN[@]}" tmvc guard --mission "$mission"
 exit 0

package/templates/.githooks/pre-push

@@ -6,10 +6,10 @@ cd "$(git rev-parse --show-toplevel)"
 
 if [[ -f dist/cli/index.js ]]; then
   GAPMAN=(node dist/cli/index.js)
-elif command -v gapman >/dev/null 2>&1; then
-  GAPMAN=(gapman)
+elif command -v gantry >/dev/null 2>&1; then
+  GAPMAN=(gantry)
 else
-  echo "pre-push: gapman not found — run: npm run build" >&2
+  echo "pre-push: gantry not found — run: npm run build" >&2
   exit 1
 fi
 
@@ -34,17 +34,17 @@ mapfile -t missions < <(
 for mission in "${missions[@]}"; do
   [[ -n "$mission" ]] || continue
   [[ -f "$mission" ]] || continue
-  echo "pre-push: gapman verify --mission ${mission} (--pre-push)" >&2
+  echo "pre-push: gantry verify --mission ${mission} (--pre-push)" >&2
   "${GAPMAN[@]}" verify --mission "$mission" --pre-push || exit 1
 done
 
 if git diff --name-only "${base}..HEAD" | grep -qE '^\.gitagent/foreman/MANIFEST\.json$|^\.gitagent/teacher/RULES\.md$|\.gxt-skill\.yaml$'; then
-  echo "pre-push: gapman perimeter (advisory)" >&2
+  echo "pre-push: gantry perimeter (advisory)" >&2
   "${GAPMAN[@]}" perimeter --base-ref "$base" || true
 fi
 
 if git diff --name-only "${base}..HEAD" | grep -qE '^\.gitagent/foreman/MANIFEST\.json$|^skills/'; then
-  echo "pre-push: gapman check (manifest / skills changed)" >&2
+  echo "pre-push: gantry check (manifest / skills changed)" >&2
   "${GAPMAN[@]}" check || exit 1
 fi
 

package/templates/.github/workflows/gxt-validate.yml

@@ -3,7 +3,8 @@
 # PR governance (pull_request only): mission PRs must target the repo default branch
 # (override: repository variable GXT_INTEGRATION_BRANCH when integration branch differs).
 # MSN policy (pull_request only): commits touching MSN-enforced paths must have
-# subject [MSN-NNNN] (four digits) or a valid gxt-bypass git note.
+# subject [MSN-NNNN] (four digits), a valid gxt-bypass git note, or satisfy
+# repository-declared trusted_automation policy (.gitagent/config.json).
 # Mission purity: scripts/verify-pr-missions.sh — one [MSN-NNNN] per PR commit range.
 # Paths = fixed substrate (.gitagent/, WORKER_LOG.md, .githooks/, gxt-validate.yml)
 #       + all MANIFEST skills[].tmvc_roots (Node via scripts/gxt-manifest-lib.mjs).
@@ -36,7 +37,7 @@ jobs:
   manifest:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -48,22 +49,22 @@ jobs:
       - name: Install Node deps
         run: npm ci
 
-      - name: Build gapman
+      - name: Build gantry
         run: npm run build
 
-      - name: gapman check (MANIFEST + Rule 4.4 skills sync)
+      - name: gantry check (MANIFEST + Rule 4.4 skills sync)
         run: node dist/cli/index.js check
 
       - name: Validate Foreman MANIFEST.json (Node parity)
         run: ./scripts/validate-gxt.sh manifest
 
-      - name: gapman unit tests
+      - name: gantry unit tests
         run: node --test dist/cli/tests/*.test.js
 
-      - name: gapman doctor (readiness)
+      - name: gantry doctor (readiness)
         run: node dist/cli/index.js doctor
 
-      - name: gapman perimeter (CI signature enforcement)
+      - name: gantry perimeter (CI signature enforcement)
         if: github.event_name == 'pull_request'
         env:
           BASE_SHA: ${{ github.event.pull_request.base.sha }}
@@ -74,7 +75,7 @@ jobs:
     needs: pr_governance
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
           ref: ${{ github.event.pull_request.head.sha }}
@@ -87,7 +88,7 @@ jobs:
       - name: Install Node deps
         run: npm ci
 
-      - name: Build gapman
+      - name: Build gantry
         run: npm run build
 
       - name: Changed-code quality gates (complexity + import layers)
@@ -99,7 +100,7 @@ jobs:
   npm_pack:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - uses: actions/setup-node@v6
         with:
@@ -117,7 +118,7 @@ jobs:
     needs: pr_governance
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
           ref: ${{ github.event.pull_request.head.sha }}
@@ -136,7 +137,7 @@ jobs:
     needs: pr_governance
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
           ref: ${{ github.event.pull_request.head.sha }}
@@ -149,7 +150,7 @@ jobs:
       - name: Install Node deps
         run: npm ci
 
-      - name: Build gapman
+      - name: Build gantry
         run: npm run build
 
       - name: Full verify on PR-changed missions

package/templates/AGENTS.md

@@ -21,7 +21,7 @@ When the user **explicitly** asks to write, edit, refactor, or implement code an
 - **Do NOT** trigger for questions, explanations, or code discovery — answer normally.
 - **Fast-path** trivial single-file work; **full interview** for heavy/risky scope.
 - **Cursor MCP handoff (preferred):** `gxt_draft_legislation` → human chat approval → `gxt_execute_legislation` → Teacher commit → `gxt_check_signature` → `gxt_pin_mission`.
-- **CLI fallback:** one copy-paste `gapman legislate …` command — never raw YAML blocks.
+- **CLI fallback:** one copy-paste `gantry legislate …` command — never raw YAML blocks.
 
 ## External IDE skills (edge quarantine)
 

package/templates/integrations/asset-catalog.json

@@ -10,6 +10,7 @@
     { "targetPath": ".cursor/hooks/gxt-session-start.sh", "mode": "managed_strict", "executable": true, "tags": ["cursor"] },
     { "targetPath": ".cursor/mcp.json", "mode": "managed_strict", "tags": ["cursor"] },
     { "targetPath": ".cursor/rules/opengantry-gxt-substrate.mdc", "mode": "managed_strict", "tags": ["cursor"] },
+    { "targetPath": ".gitagent/config.json", "mode": "scaffold_only", "tags": ["core"] },
     { "targetPath": ".gitagent/foreman/BYPASS.sha256", "mode": "scaffold_only", "tags": ["core"] },
     { "targetPath": ".gitagent/foreman/MANIFEST.json", "mode": "scaffold_only", "tags": ["core"] },
     { "targetPath": ".gitagent/foreman/SUBSTRATE.version.json", "mode": "scaffold_only", "tags": ["core"] },
@@ -39,7 +40,7 @@
     { "targetPath": "scripts/gxt-shell-agent.sh", "mode": "managed_strict", "executable": true, "tags": ["runtime", "claude-code", "codex-cli", "opencode"] },
     { "targetPath": "scripts/validate-gxt.sh", "mode": "managed_strict", "executable": true, "tags": ["core"] },
     { "targetPath": "scripts/verify-pr-missions.sh", "mode": "managed_strict", "executable": true, "tags": ["ci"] },
-    { "targetPath": "skills/gapman.md", "mode": "scaffold_only", "tags": ["skill-specimen"] },
+    { "targetPath": "skills/gantry.md", "mode": "scaffold_only", "tags": ["skill-specimen"] },
     { "targetPath": "skills/logic.md", "mode": "scaffold_only", "tags": ["skill-minimal", "skill-specimen"] },
     { "targetPath": "skills/substrate.md", "mode": "scaffold_only", "tags": ["skill-specimen"] },
     { "targetPath": "skills/ui.md", "mode": "scaffold_only", "tags": ["skill-minimal", "skill-specimen"] }

package/templates/integrations/compatibility.json

@@ -1,6 +1,6 @@
 {
   "schema_version": "1",
-  "opengantry_version": "2.2.2",
+  "opengantry_version": "2.2.4",
   "asset_catalog": "integrations/asset-catalog.json",
   "integrations": {
     "cursor": {

package/templates/integrations/recipes/_footer.md

@@ -2,11 +2,11 @@
 
 ## Closed-loop checklist
 
-1. `gapman init` + `export GAPMAN_TEACHER_EMAILS="$(git config user.email)"` + `gapman doctor`
-2. `gapman legislate "<intent>" --msn MSN-NNNN --skill-key <key>` → Teacher `[MSN-NNNN]` commit
+1. `gantry init` + `export GANTRY_TEACHER_EMAILS="$(git config user.email)"` + `gantry doctor`
+2. `gantry legislate "<intent>" --msn MSN-NNNN --skill-key <key>` → Teacher `[MSN-NNNN]` commit
 3. Bootstrap: `source scripts/gxt-runtime-env.sh .gitagent/missions/<file>.yaml`
 4. Worker executes; append PASS quotes to `WORKER_LOG.md`
-5. `gapman verify --mission .gitagent/missions/<file>.yaml`
+5. `gantry verify --mission .gitagent/missions/<file>.yaml`
 6. `git push` (pre-push uses `--pre-push` handoff semantics)
 
 ## External IDE skills
@@ -17,8 +17,8 @@ Optional third-party skill packs belong on the **local IDE edge** (gitignored),
 
 | Symptom | Fix |
 |---------|-----|
-| `NO_MSN_COMMITS` on push | Teacher `[MSN-NNNN]` commit modifying the mission file; set `GAPMAN_TEACHER_EMAILS` |
+| `NO_MSN_COMMITS` on push | Teacher `[MSN-NNNN]` commit modifying the mission file; set `GANTRY_TEACHER_EMAILS` |
 | Pre-push OK, full verify fails trace | Fill `WORKER_LOG.md`; align `trace_rows`; re-run full verify |
-| `TEACHER_IDENTITY_UNCONFIGURED` | `export GAPMAN_TEACHER_EMAILS="$(git config user.email)"` |
+| `TEACHER_IDENTITY_UNCONFIGURED` | `export GANTRY_TEACHER_EMAILS="$(git config user.email)"` |
 
-Integration compat verified by OpenGantry release — run `gapman doctor` for detected wiring and stale paths.
+Integration compat verified by OpenGantry release — run `gantry doctor` for detected wiring and stale paths.

package/templates/integrations/recipes/_preamble.md

@@ -1,25 +1,25 @@
 # Agent Integrations (GXT wrapper)
 
-OpenGantry is **tool-agnostic**. Any agent that can run shell commands can participate in the GXT loop.
+OpenGantry is **tool-agnostic** and **vendor-neutral** — any agent that can run shell commands can participate in the GXT loop. Governance is **local-first**: missions, gates, and **Gantry Git hook** enforcement run in your repository, not through a hosted agent dashboard.
 
 ## Universal rule
 
-1. Teacher legislates a mission under `.gitagent/missions/` (IDE chat: [`.gitagent/teacher/MISSION-ARCHITECT.md`](.gitagent/teacher/MISSION-ARCHITECT.md) — one copy-paste `gapman legislate` command).
+1. Teacher legislates a mission under `.gitagent/missions/` (IDE chat: [`.gitagent/teacher/MISSION-ARCHITECT.md`](.gitagent/teacher/MISSION-ARCHITECT.md) — one copy-paste `gantry legislate` command).
 2. Bootstrap mission-scoped runtime env before worker execution.
 3. Append trace evidence to `WORKER_LOG.md`.
-4. Finish with `gapman verify --mission <path>` (full verify before merge / claiming done).
+4. Finish with `gantry verify --mission <path>` (full verify before merge / claiming done).
 
 ```bash
-gapman runtime exec --mission .gitagent/missions/MSN-0001.<slug>.yaml -- <your-agent-command>
+gantry runtime exec --mission .gitagent/missions/MSN-0001.<slug>.yaml -- <your-agent-command>
 source scripts/gxt-runtime-env.sh .gitagent/missions/MSN-0001.<slug>.yaml
-gapman runtime env --mission .gitagent/missions/MSN-0001.<slug>.yaml --json
+gantry runtime env --mission .gitagent/missions/MSN-0001.<slug>.yaml --json
 ```
 
 ## Enforcement boundary
 
 | Tier | Mechanism | What it actually traps |
 |------|-----------|------------------------|
-| **Process-boundary** | `gapman runtime exec` | TMVC roots + forbidden zones for subprocess workers |
+| **Process-boundary** | `gantry runtime exec` | TMVC roots + forbidden zones for subprocess workers |
 | **Deterministic hook** | Tool hooks (Cursor `beforeShellExecution` on law/manifest paths) | Shell writes to `.gitagent/foreman/`, `.gitagent/teacher/RULES.md` |
 | **Advisory** | Rules / `AGENTS.md` / tool memory | IDE Agent Write/Edit — LLM compliance, not kernel enforcement |
 
@@ -37,9 +37,9 @@ IDE agent file edits are not TMVC-trapped unless the tool runs inside `runtime e
 
 | Variable | Purpose |
 |----------|---------|
-| `GAPMAN_TEACHER_EMAILS` | Comma-separated Git author emails allowed to legislate |
-| `GAPMAN_MISSION` | Optional mission path for `gxt-runtime-env.sh` |
-| `GXT_*` | Emitted by `gapman runtime env` |
+| `GANTRY_TEACHER_EMAILS` | Comma-separated Git author emails allowed to legislate |
+| `GANTRY_MISSION` | Optional mission path for `gxt-runtime-env.sh` |
+| `GXT_*` | Emitted by `gantry runtime env` |
 
 ---
 

package/templates/integrations/recipes/aider.md

@@ -4,7 +4,7 @@
 - **Session bootstrap:**
 
 ```bash
-gapman runtime exec --mission .gitagent/missions/MSN-0001.<slug>.yaml -- aider --message "<task>"
+gantry runtime exec --mission .gitagent/missions/MSN-0001.<slug>.yaml -- aider --message "<task>"
 ```
 
 - **Enforcement:** Process-boundary when wrapped — strongest TMVC trap among IDE-adjacent tools.

package/templates/integrations/recipes/antigravity.md

@@ -1,7 +1,7 @@
 ### Google Antigravity
 
 - **Context injection:** Root `AGENTS.md`; `.agent/rules/gxt.md` with `always_on` pointing at canonical files.
-- **Session bootstrap:** `source scripts/gxt-runtime-env.sh <mission>` or `gapman runtime exec … -- <command>`.
+- **Session bootstrap:** `source scripts/gxt-runtime-env.sh <mission>` or `gantry runtime exec … -- <command>`.
 - **Enforcement:** Advisory for Editor/Manager views; process-boundary for wrapped CLI runs.
 - **Gotcha:** Rules load order includes `GEMINI.md` → `AGENTS.md` → `.agent/rules/` — keep GXT pointers in `AGENTS.md`.
 

package/templates/integrations/recipes/claude-code.md

@@ -7,7 +7,7 @@
 scripts/gxt-pin-mission.sh .gitagent/missions/MSN-0001.<slug>.yaml
 scripts/gxt-shell-agent.sh claude .gitagent/missions/MSN-0001.<slug>.yaml
 # or with explicit task:
-gapman runtime exec --mission .gitagent/missions/MSN-0001.<slug>.yaml -- claude "<task>"
+gantry runtime exec --mission .gitagent/missions/MSN-0001.<slug>.yaml -- claude "<task>"
 ```
 
 - **Enforcement:** Advisory in interactive session; process-boundary when wrapped with `runtime exec` or `gxt-shell-agent.sh`.

package/templates/integrations/recipes/codex-cli.md

@@ -2,14 +2,14 @@
 
 > **Not** the deprecated OpenAI Codex API (2021–2023). This covers [OpenAI Codex CLI](https://github.com/openai/codex) (2025+ terminal/IDE agent).
 
-- **Context injection:** Root `AGENTS.md` (native after `gapman init`); optional `.codex/config.toml` for project defaults.
+- **Context injection:** Root `AGENTS.md` (native after `gantry init`); optional `.codex/config.toml` for project defaults.
 - **Session bootstrap (shell wrapper — no project hooks):**
 
 ```bash
 scripts/gxt-pin-mission.sh .gitagent/missions/MSN-0001.<slug>.yaml
 scripts/gxt-shell-agent.sh codex .gitagent/missions/MSN-0001.<slug>.yaml
 # or headless:
-gapman runtime exec --mission .gitagent/missions/MSN-0001.<slug>.yaml -- codex exec "<task>"
+gantry runtime exec --mission .gitagent/missions/MSN-0001.<slug>.yaml -- codex exec "<task>"
 ```
 
 - **Enforcement:** Advisory in interactive TUI/IDE extension; process-boundary when wrapped with `runtime exec` or `gxt-shell-agent.sh`.