@jeger-ai/opengantry 2.3.0 → 2.4.0

package/templates/.gitagent/ARCHITECTURE.pointer.json

@@ -2,8 +2,8 @@
   "schema_version": "0.1.0",
   "kind": "unset",
   "location": "",
-  "read_hint": "Architecture source not selected. Do NOT invent layer layout or module boundaries. Read .gitagent/teacher/ARCHITECTURE-DISCOVERY.md and ask the user before any application code changes.",
+  "read_hint": "Architecture source not selected. Do NOT invent layer layout or module boundaries. Read .gitagent/planner/ARCHITECTURE-DISCOVERY.md and ask the user before any application code changes.",
   "discovery": {
-    "skill": ".gitagent/teacher/ARCHITECTURE-DISCOVERY.md"
+    "skill": ".gitagent/planner/ARCHITECTURE-DISCOVERY.md"
   }
 }

package/templates/.gitagent/foreman/MANIFEST.json

@@ -17,10 +17,10 @@
       "desc": "gantry CLI delivery, lib layers, and unit tests (OpenGantry specimen).",
       "trust_threshold": "Tier-2",
       "tmvc_roots": ["src/cli/"],
-      "forbidden_zones": [".gitagent/foreman/", ".gitagent/teacher/RULES.md"]
+      "forbidden_zones": [".gitagent/foreman/", ".gitagent/planner/RULES.md"]
     },
     "substrate": {
-      "desc": "Reserved for high-risk substrate work; requires Teacher mission.",
+      "desc": "Reserved for high-risk substrate work; requires Planner mission.",
       "trust_threshold": "Tier-3",
       "tmvc_roots": [],
       "forbidden_zones": []
@@ -37,6 +37,6 @@
   "perimeter_protected": [
     "**/.gxt-skill.yaml",
     ".gitagent/foreman/MANIFEST.json",
-    ".gitagent/teacher/RULES.md"
+    ".gitagent/planner/RULES.md"
   ]
 }

package/templates/.gitagent/foreman/PLANNER.allowlist.example

@@ -0,0 +1,4 @@
+# One Git author email per line (case-insensitive). Committed team allowlist.
+# Personal override (gitignored): .gitagent/foreman/PLANNER.allowlist.local
+# Or: git config gantry.plannerEmails "you@example.com"
+teacher@example.com

package/templates/.gitagent/missions/README.md

@@ -12,7 +12,7 @@ Quick start:
 gantry legislate "<intent>" --msn MSN-0001 --skill-key <manifest-key> [--gate-command "<cmd>"]
 ```
 
-Duplicate `msn_id` values fail closed by default; use `--allow-duplicate` only for intentional migration flows. New stubs emit `status: PENDING` trace rows until worker execution.
+Duplicate `msn_id` values fail closed by default; use `--allow-duplicate` only for intentional migration flows. New stubs emit `status: PENDING` trace rows until executor execution.
 
 For the full specimen runbook, see the upstream OpenGantry adoption guide:
 https://github.com/jeger-ai/opengantry/blob/main/docs/ADOPTION.md

package/templates/.gitagent/{teacher → planner}/ARCHITECTURE-ACCESS.md

@@ -25,7 +25,7 @@ Check in order:
 3. **Stored credentials** — run `gantry arch cred status` (or `--slot <credential_slot>`). Status shows slot + kind only, never secrets.
 4. **User docs** — project README / human INTEGRATIONS doc for team setup (not duplicated here).
 
-If a path already works, record in `WORKER_LOG.md` which method you used (not the secret) and fetch architecture docs.
+If a path already works, record in `EXECUTOR_LOG.md` which method you used (not the secret) and fetch architecture docs.
 
 ## 3. Ask the user when detection fails
 
@@ -35,7 +35,7 @@ Ask **one focused question at a time**:
 - How does your team authenticate? (PAT, API key, OAuth device flow, MCP already configured, …)
 - Whether you may store a credential locally via `gantry arch cred set` (git-ignored, mode 600)
 
-**Never** ask the user to paste tokens into chat, commits, or `WORKER_LOG.md`.
+**Never** ask the user to paste tokens into chat, commits, or `EXECUTOR_LOG.md`.
 
 ## 4. Store credentials securely
 
@@ -58,7 +58,7 @@ To remove: `gantry arch cred unset --slot <name>`.
 
 ## 5. Context request (GXT)
 
-Before first access to an **external** architecture source, log a **Context Request** in `WORKER_LOG.md`: tool name, URL/host, auth method (not secrets), and why layout docs are needed. Wait for Verifier acceptance when tier/policy requires it.
+Before first access to an **external** architecture source, log a **Context Request** in `EXECUTOR_LOG.md`: tool name, URL/host, auth method (not secrets), and why layout docs are needed. Wait for Verifier acceptance when tier/policy requires it.
 
 ## 6. Read architecture docs
 

package/templates/.gitagent/{teacher → planner}/ARCHITECTURE-DISCOVERY.md

@@ -23,8 +23,8 @@ Read this when [`.gitagent/ARCHITECTURE.pointer.json`](../ARCHITECTURE.pointer.j
    - Which directories are entry points for each skill / TMVC root in MANIFEST?
    - Dependency direction rules (what may import what)?
    - Existing conventions from another repo or ADR to follow?
-4. **Log a Context Request** in `WORKER_LOG.md` when the discussion expands scope beyond current TMVC.
-5. **Update the pointer** (or ask the user / Teacher to) once source is chosen — e.g. set `kind: file` and fill `docs/ARCHITECTURE.md`, or `kind: external` with `access` if authenticated.
+4. **Log a Context Request** in `EXECUTOR_LOG.md` when the discussion expands scope beyond current TMVC.
+5. **Update the pointer** (or ask the user / Planner to) once source is chosen — e.g. set `kind: file` and fill `docs/ARCHITECTURE.md`, or `kind: external` with `access` if authenticated.
 6. **Only then** proceed with implementation aligned to documented layout and MANIFEST `tmvc_roots`.
 
 ## After the user answers

package/templates/.gitagent/planner/ARCHITECTURE_RUBRIC.template.md

@@ -0,0 +1,25 @@
+# ARCHITECTURE_RUBRIC (advisory LLM judge)
+
+Use this rubric with a BYO `llm_verifiers` command in mission YAML. Verdicts are **ADVISORY_ONLY** — write `findings[]` to the KPI report; do **not** add blocking `kpi_gate` thresholds on judge metrics.
+
+Anchor each question to a `TARGET_ARCHITECTURE.yaml` rule `id`:
+
+| Rule ID | Review question |
+|---------|-----------------|
+| `RULE-LIB-TO-COMMAND` | Did the diff introduce lib → command imports? |
+| `RULE-LIB-COMMANDER` | Did lib code import `commander` directly? |
+| `RULE-COMMAND-RUNTIME-EXEC-PROCESS` | Did a command bypass `runtime-exec.js`? |
+
+Human Architect override: commit subject must include **`[GXT-ARCH-OVERRIDE]`** with rationale when accepting advisory violations.
+
+Example verifier stdout fragment:
+
+```json
+{
+  "metrics": { "arch_judge::reviewed": 1 },
+  "findings": [
+    { "id": "RULE-LIB-COMMANDER", "severity": "warn", "message": "…" }
+  ],
+  "exit_code": 0
+}
+```

package/templates/.gitagent/{teacher/WORKER_LOG.template.md → planner/EXECUTOR_LOG.template.md}

@@ -1,3 +1,3 @@
-# WORKER_LOG
+# EXECUTOR_LOG
 
-<!-- Mission trace_rows PASS quotes go here. Optional [SKILL-EXEC] reviewer context: see .gitagent/teacher/RUNTIME.md § Optional skill context stamps. -->
+<!-- Mission trace_rows PASS quotes go here. Optional [SKILL-EXEC] reviewer context: see .gitagent/planner/RUNTIME.md § Optional skill context stamps. -->

package/templates/.gitagent/{teacher → planner}/MISSION-ARCHITECT.md

@@ -1,6 +1,6 @@
-# Mission Architect (Teacher-Assistant Contract)
+# Mission Architect (Planner-Assistant Contract)
 
-IDE chat protocol for drafting missions **before** worker execution. No CLI chatbot. No agent-authored Git commits.
+IDE chat protocol for drafting missions **before** executor execution. No CLI chatbot. No agent-authored Git commits.
 
 ## When to activate
 
@@ -50,7 +50,7 @@ Use for new features, multi-file scope, forbidden-zone proximity, path_risks/ris
 
 ## Handoff (legislate only)
 
-**Forbidden:** multi-line YAML mission blocks, “save this file manually” instructions, agent-authored Teacher git commits.
+**Forbidden:** multi-line YAML mission blocks, “save this file manually” instructions, agent-authored Planner git commits.
 
 ### Cursor MCP (preferred — zero copy/paste)
 
@@ -60,8 +60,8 @@ When the OpenGantry MCP server is configured (`.cursor/mcp.json`):
 2. Present the returned `chat_message_to_user` to the human.
 3. Wait for clear approval intent in chat (`yes`, `approve`, `looks good`, `do it`) or rejection (`no`, `deny`, `stop`). If ambiguous, ask one short clarification.
 4. On approval only, call **`gxt_execute_legislation`** with the `draft_token`.
-5. Render the returned `suggested_human_action` in a fenced shell block for the Teacher commit.
-6. After the human commits, call **`gxt_check_signature`**. On `signature_valid`, proceed to **`gxt_pin_mission`** then worker phase.
+5. Render the returned `suggested_human_action` in a fenced shell block for the Planner commit.
+6. After the human commits, call **`gxt_check_signature`**. On `signature_valid`, proceed to **`gxt_pin_mission`** then executor phase.
 
 This two-step draft/execute gate prevents silent legislation even when Cursor runs tools in auto-run (“Yolo”) mode.
 
@@ -78,16 +78,16 @@ gantry legislate "<intent summary>" --msn MSN-NNNN --skill-key <key> \
 - Quote `--gate-command` when it contains spaces.
 - Omit `--gate-success-substring` when exit code 0 alone is sufficient.
 
-**Stop after handoff.** Do not write application code until the Teacher commits and pins the mission.
+**Stop after handoff.** Do not write application code until the Planner commits and pins the mission.
 
-## Teacher loop (human)
+## Planner loop (human)
 
 1. Approve draft (MCP) or paste and run `gantry legislate` (CLI).
 2. Optionally review/edit the generated YAML.
-3. `git commit -m "[MSN-NNNN] legislate …"` including the mission file (Teacher email in `GANTRY_TEACHER_EMAILS`).
+3. `git commit -m "[MSN-NNNN] legislate …"` including the mission file (Planner email in `GANTRY_TEACHER_EMAILS`).
 4. Pin mission (`gxt_pin_mission` MCP tool or `scripts/gxt-pin-mission.sh`).
-5. Worker phase begins.
+5. Executor phase begins.
 
-## Worker phase (after pin)
+## Executor phase (after pin)
 
-Edit within TMVC → append PASS quotes to `WORKER_LOG.md` → `gantry verify --mission …` (or `gxt_verify`) → pin stays until mission complete.
+Edit within TMVC → append PASS quotes to `EXECUTOR_LOG.md` → `gantry verify --mission …` (or `gxt_verify`) → pin stays until mission complete.

package/templates/.gitagent/{teacher → planner}/RULES.md

@@ -11,18 +11,18 @@ Normative keywords **MUST**, **MUST NOT**, and **SHOULD** follow RFC 2119.
 ## 2. Segregation of duties
 
 - The agent executing the gate MUST NOT be the same actor declaring PASS.
-- Mission law is Teacher-owned; workers MUST NOT silently rewrite mission law.
+- Mission law is Planner-owned; executors MUST NOT silently rewrite mission law.
 
 ## 3. Trace-mapped verification
 
-- PASS claims MUST quote `WORKER_LOG.md` with a valid anchor (line or timestamp).
+- PASS claims MUST quote `EXECUTOR_LOG.md` with a valid anchor (line or timestamp).
 - Missing quotes/anchors for claimed PASS is evidence tampering and MUST fail verification.
 
 ## 4. Dynamic TMVC
 
 - Work is bounded to manifest roots unless explicit mission expansion is approved.
-- Access outside effective TMVC requires a context request recorded in `WORKER_LOG.md`.
-- Access into forbidden zones MUST fail closed unless Teacher policy explicitly allows it.
+- Access outside effective TMVC requires a context request recorded in `EXECUTOR_LOG.md`.
+- Access into forbidden zones MUST fail closed unless Planner policy explicitly allows it.
 
 ## 5. Mission commit indexing
 

package/templates/.githooks/post-checkout

@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-# post-checkout: create empty WORKER_LOG.md on branch checkouts (feature branches only).
+# post-checkout: create empty EXECUTOR_LOG.md on branch checkouts (feature branches only).
 # Git passes: $1 = previous HEAD, $2 = new HEAD, $3 = 1 if branch checkout, 0 if file checkout.
 set -euo pipefail
 
@@ -15,12 +15,12 @@ case "$branch" in
   main|master) exit 0 ;;
 esac
 
-log_file="WORKER_LOG.md"
+log_file="EXECUTOR_LOG.md"
 [[ -f "$log_file" ]] && exit 0
 
-template=".gitagent/teacher/WORKER_LOG.template.md"
+template=".gitagent/planner/EXECUTOR_LOG.template.md"
 if [[ -f "$template" ]]; then
   cp "$template" "$log_file"
 else
-  printf '%s\n\n' '# WORKER_LOG' >"$log_file"
+  printf '%s\n\n' '# EXECUTOR_LOG' >"$log_file"
 fi

package/templates/.githooks/pre-push

@@ -38,7 +38,7 @@ for mission in "${missions[@]}"; do
   "${GAPMAN[@]}" verify --mission "$mission" --pre-push || exit 1
 done
 
-if git diff --name-only "${base}..HEAD" | grep -qE '^\.gitagent/foreman/MANIFEST\.json$|^\.gitagent/teacher/RULES\.md$|\.gxt-skill\.yaml$'; then
+if git diff --name-only "${base}..HEAD" | grep -qE '^\.gitagent/foreman/MANIFEST\.json$|^\.gitagent/planner/RULES\.md$|\.gxt-skill\.yaml$'; then
   echo "pre-push: gantry perimeter (advisory)" >&2
   "${GAPMAN[@]}" perimeter --base-ref "$base" || true
 fi

package/templates/.github/workflows/gxt-validate.yml

@@ -6,7 +6,7 @@
 # subject [MSN-NNNN] (four digits), a valid gxt-bypass git note, or satisfy
 # repository-declared trusted_automation policy (.gitagent/config.json).
 # Mission purity: scripts/verify-pr-missions.sh — one [MSN-NNNN] per PR commit range.
-# Paths = fixed substrate (.gitagent/, WORKER_LOG.md, .githooks/, gxt-validate.yml)
+# Paths = fixed substrate (.gitagent/, EXECUTOR_LOG.md, .githooks/, gxt-validate.yml)
 #       + all MANIFEST skills[].tmvc_roots (Node via scripts/gxt-manifest-lib.mjs).
 # Logic: scripts/validate-gxt.sh — keep workflow header and script in sync.
 

package/templates/.gitignore.gxt

@@ -1,5 +1,5 @@
 .gitagent/.upgrade-tmp/
-.gitagent/foreman/TEACHER.allowlist.local
+.gitagent/foreman/PLANNER.allowlist.local
 .gitagent/history/
 .gitagent/history/credentials/
 .gitagent/history/.ignored-last-error.json

package/templates/.prettierignore.gxt

@@ -1 +1 @@
-WORKER_LOG.md
+EXECUTOR_LOG.md

package/templates/AGENTS.md

@@ -2,27 +2,27 @@
 
 Before planning, editing code, or running substantive commands in this repository:
 
-1. Read **`.gitagent/teacher/RULES.md`** — governance (SOD, trace mapping, risk tiers, dynamic TMVC, Rule 4.4).
+1. Read **`.gitagent/planner/RULES.md`** — governance (SOD, trace mapping, risk tiers, dynamic TMVC, Rule 4.4).
 2. Read **`.gitagent/foreman/MANIFEST.json`** — Foreman map (`schema_version`, per-skill `trust_threshold`, `tmvc_roots`, `forbidden_zones`, `path_risks`, `risk_keywords`).
 
-Treat these as the **law + routing contract** for agent work. Before editing application code, read **`.gitagent/ARCHITECTURE.pointer.json`**. If **`kind` is `unset`**, or docs are stub/missing, read **`.gitagent/teacher/ARCHITECTURE-DISCOVERY.md`** and ask the user — do not invent architecture. When `access.required` is true, read **`.gitagent/teacher/ARCHITECTURE-ACCESS.md`**. For GXT workflow orientation, see **`.gitagent/README.md`**.
+Treat these as the **law + routing contract** for agent work. Before editing application code, read **`.gitagent/ARCHITECTURE.pointer.json`**. If **`kind` is `unset`**, or docs are stub/missing, read **`.gitagent/planner/ARCHITECTURE-DISCOVERY.md`** and ask the user — do not invent architecture. When `access.required` is true, read **`.gitagent/planner/ARCHITECTURE-ACCESS.md`**. For GXT workflow orientation, see **`.gitagent/README.md`**.
 
 ## Mission Architect (IDE chat)
 
 **Activation macro:**
 
 - If a user prompt starts with `/gantry`, treat that as an explicit Mission Architect activation request. Do not use `/plan` — Cursor reserves it for native Plan Mode.
-- On activation, follow **`.gitagent/teacher/MISSION-ARCHITECT.md`** and complete the legislate handoff flow.
+- On activation, follow **`.gitagent/planner/MISSION-ARCHITECT.md`** and complete the legislate handoff flow.
 
 **Implicit interception:**
 
-When the user **explicitly** asks to write, edit, refactor, or implement code and **no mission is pinned**, read **`.gitagent/teacher/MISSION-ARCHITECT.md`** and follow it.
+When the user **explicitly** asks to write, edit, refactor, or implement code and **no mission is pinned**, read **`.gitagent/planner/MISSION-ARCHITECT.md`** and follow it.
 
 - **Do NOT** trigger for questions, explanations, or code discovery — answer normally.
 - **Fast-path** trivial single-file work; **full interview** for heavy/risky scope.
-- **Cursor MCP handoff (preferred):** `gxt_draft_legislation` → human chat approval → `gxt_execute_legislation` → Teacher commit → `gxt_check_signature` → `gxt_pin_mission`.
+- **Cursor MCP handoff (preferred):** `gxt_draft_legislation` → human chat approval → `gxt_execute_legislation` → Planner commit → `gxt_check_signature` → `gxt_pin_mission`.
 - **CLI fallback:** one copy-paste `gantry legislate …` command — never raw YAML blocks.
 
 ## External IDE skills (edge quarantine)
 
-Third-party agent skills are **untrusted edge helpers** — not GXT law. Keep them in local IDE config (gitignored); do not add subjective style guides to this file or `.gitagent/`. Repository safety is deterministic gates only (compile, tests, import layers). Optional `[SKILL-EXEC]` lines in `WORKER_LOG.md` are reviewer context only — see `.gitagent/teacher/RUNTIME.md`.
+Third-party agent skills are **untrusted edge helpers** — not GXT law. Keep them in local IDE config (gitignored); do not add subjective style guides to this file or `.gitagent/`. Repository safety is deterministic gates only (compile, tests, import layers). Optional `[SKILL-EXEC]` lines in `EXECUTOR_LOG.md` are reviewer context only — see `.gitagent/planner/RUNTIME.md`.

package/templates/docs/ARCHITECTURE.md

@@ -9,11 +9,11 @@ This file is the **default** architecture source when [`.gitagent/ARCHITECTURE.p
 
 Agents discover how to read architecture via the pointer on first substantive work — do not hardcode alternate paths in IDE rules.
 
-**If the pointer has `kind: unset`**, or pointed docs are still the init stub, read **`.gitagent/teacher/ARCHITECTURE-DISCOVERY.md`** and ask the user structured questions before implementing — never invent the full architecture yourself.
+**If the pointer has `kind: unset`**, or pointed docs are still the init stub, read **`.gitagent/planner/ARCHITECTURE-DISCOVERY.md`** and ask the user structured questions before implementing — never invent the full architecture yourself.
 
 ## GXT governance (always read first)
 
-1. **`.gitagent/teacher/RULES.md`** — law (SOD, trace, TMVC, Rule 4.4).
+1. **`.gitagent/planner/RULES.md`** — law (SOD, trace, TMVC, Rule 4.4).
 2. **`.gitagent/foreman/MANIFEST.json`** — skill routing, `tmvc_roots`, forbidden zones.
 
 Workflow orientation: **`.gitagent/README.md`**.

package/templates/integrations/aider/.aider.conf.yml

@@ -1,4 +1,4 @@
 read:
   - AGENTS.md
-  - .gitagent/teacher/RULES.md
+  - .gitagent/planner/RULES.md
   - .gitagent/foreman/MANIFEST.json

package/templates/integrations/antigravity/.agent/rules/gxt.md

@@ -4,7 +4,7 @@ always_on: true
 
 # GXT substrate (Google Antigravity)
 
-Read **`AGENTS.md`**, **`.gitagent/teacher/RULES.md`**, and **`.gitagent/foreman/MANIFEST.json`** before acting.
+Read **`AGENTS.md`**, **`.gitagent/planner/RULES.md`**, and **`.gitagent/foreman/MANIFEST.json`** before acting.
 
 Bootstrap: `source scripts/gxt-runtime-env.sh .gitagent/missions/<file>.yaml`
 

package/templates/integrations/asset-catalog.json

@@ -15,13 +15,13 @@
     { "targetPath": ".gitagent/foreman/MANIFEST.json", "mode": "scaffold_only", "tags": ["core"] },
     { "targetPath": ".gitagent/foreman/SUBSTRATE.version.json", "mode": "scaffold_only", "tags": ["core"] },
     { "targetPath": ".gitagent/missions/README.md", "mode": "scaffold_only", "tags": ["core"] },
-    { "targetPath": ".gitagent/teacher/ARCHITECTURE-ACCESS.md", "mode": "scaffold_only", "tags": ["core"] },
-    { "targetPath": ".gitagent/teacher/ARCHITECTURE-DISCOVERY.md", "mode": "scaffold_only", "tags": ["core"] },
-    { "targetPath": ".gitagent/teacher/KPI-REPORT.schema.yaml", "mode": "managed_strict", "tags": ["core"] },
-    { "targetPath": ".gitagent/teacher/MISSION-ARCHITECT.md", "mode": "scaffold_only", "tags": ["core"] },
-    { "targetPath": ".gitagent/teacher/MISSION.schema.yaml", "mode": "managed_strict", "tags": ["core"] },
-    { "targetPath": ".gitagent/teacher/RULES.md", "mode": "scaffold_only", "tags": ["core"] },
-    { "targetPath": ".gitagent/teacher/WORKER_LOG.template.md", "mode": "managed_strict", "tags": ["core"] },
+    { "targetPath": ".gitagent/planner/ARCHITECTURE-ACCESS.md", "mode": "scaffold_only", "tags": ["core"] },
+    { "targetPath": ".gitagent/planner/ARCHITECTURE-DISCOVERY.md", "mode": "scaffold_only", "tags": ["core"] },
+    { "targetPath": ".gitagent/planner/EXECUTOR_LOG.template.md", "mode": "managed_strict", "tags": ["core"] },
+    { "targetPath": ".gitagent/planner/KPI-REPORT.schema.yaml", "mode": "managed_strict", "tags": ["core"] },
+    { "targetPath": ".gitagent/planner/MISSION-ARCHITECT.md", "mode": "scaffold_only", "tags": ["core"] },
+    { "targetPath": ".gitagent/planner/MISSION.schema.yaml", "mode": "managed_strict", "tags": ["core"] },
+    { "targetPath": ".gitagent/planner/RULES.md", "mode": "scaffold_only", "tags": ["core"] },
     { "targetPath": ".githooks/post-checkout", "mode": "managed_strict", "executable": true, "tags": ["hooks"] },
     { "targetPath": ".githooks/pre-commit", "mode": "managed_strict", "executable": true, "tags": ["hooks"] },
     { "targetPath": ".githooks/pre-push", "mode": "managed_strict", "executable": true, "tags": ["hooks"] },

package/templates/integrations/claude-code/CLAUDE.md

@@ -3,7 +3,7 @@
 Before planning, editing code, or running substantive commands:
 
 1. Read **`AGENTS.md`** — cross-tool entry.
-2. Read **`.gitagent/teacher/RULES.md`** — governance law.
+2. Read **`.gitagent/planner/RULES.md`** — governance law.
 3. Read **`.gitagent/foreman/MANIFEST.json`** — routing map (TMVC roots, forbidden zones).
 
 Do not duplicate full RULES here. For code architecture read `.gitagent/ARCHITECTURE.pointer.json` first (follow `read_hint`). For GXT workflow see `.gitagent/README.md`.

package/templates/integrations/cline/.clinerules/gxt.md

@@ -1,6 +1,6 @@
 # GXT policy for Cline
 
-Before substantive work, read `AGENTS.md`, `.gitagent/teacher/RULES.md`, and `.gitagent/foreman/MANIFEST.json`.
+Before substantive work, read `AGENTS.md`, `.gitagent/planner/RULES.md`, and `.gitagent/foreman/MANIFEST.json`.
 
 Terminal bootstrap: `source scripts/gxt-runtime-env.sh .gitagent/missions/<file>.yaml`
 

package/templates/integrations/compatibility.json

@@ -1,6 +1,6 @@
 {
   "schema_version": "1",
-  "opengantry_version": "2.3.0",
+  "opengantry_version": "2.4.0",
   "asset_catalog": "integrations/asset-catalog.json",
   "integrations": {
     "cursor": {

package/templates/integrations/junie/.junie/guidelines.md

@@ -3,7 +3,7 @@
 Before planning, editing code, or running substantive commands:
 
 1. Read **`AGENTS.md`**
-2. Read **`.gitagent/teacher/RULES.md`**
+2. Read **`.gitagent/planner/RULES.md`**
 3. Read **`.gitagent/foreman/MANIFEST.json`**
 
 Bootstrap: `source scripts/gxt-runtime-env.sh .gitagent/missions/<file>.yaml`

package/templates/integrations/opencode/opencode.json

@@ -1,3 +1,3 @@
 {
-  "instructions": ["AGENTS.md", ".gitagent/teacher/RULES.md", ".gitagent/foreman/MANIFEST.json"]
+  "instructions": ["AGENTS.md", ".gitagent/planner/RULES.md", ".gitagent/foreman/MANIFEST.json"]
 }

package/templates/integrations/openhands/.openhands/microagents/gxt.md

@@ -3,7 +3,7 @@
 Before planning or editing code, read:
 
 - `AGENTS.md`
-- `.gitagent/teacher/RULES.md`
+- `.gitagent/planner/RULES.md`
 - `.gitagent/foreman/MANIFEST.json`
 
 Bootstrap: `source scripts/gxt-runtime-env.sh .gitagent/missions/<file>.yaml`

package/templates/integrations/recipes/_footer.md

@@ -2,23 +2,23 @@
 
 ## Closed-loop checklist
 
-1. `gantry init` + `export GANTRY_TEACHER_EMAILS="$(git config user.email)"` + `gantry doctor`
-2. `gantry legislate "<intent>" --msn MSN-NNNN --skill-key <key>` → Teacher `[MSN-NNNN]` commit
+1. `gantry init` + `export GANTRY_PLANNER_EMAILS="$(git config user.email)"` + `gantry doctor`
+2. `gantry legislate "<intent>" --msn MSN-NNNN --skill-key <key>` → Planner `[MSN-NNNN]` commit
 3. Bootstrap: `source scripts/gxt-runtime-env.sh .gitagent/missions/<file>.yaml`
-4. Worker executes; append PASS quotes to `WORKER_LOG.md`
+4. Executor executes; append PASS quotes to `EXECUTOR_LOG.md`
 5. `gantry verify --mission .gitagent/missions/<file>.yaml`
 6. `git push` (pre-push uses `--pre-push` handoff semantics)
 
 ## External IDE skills
 
-Optional third-party skill packs belong on the **local IDE edge** (gitignored), not in GXT substrate or init templates. All edits are zero-trust until deterministic gates pass. Optional `[SKILL-EXEC]` lines in `WORKER_LOG.md` are reviewer context only — see `.gitagent/teacher/RUNTIME.md`.
+Optional third-party skill packs belong on the **local IDE edge** (gitignored), not in GXT substrate or init templates. All edits are zero-trust until deterministic gates pass. Optional `[SKILL-EXEC]` lines in `EXECUTOR_LOG.md` are reviewer context only — see `.gitagent/planner/RUNTIME.md`.
 
 ## Troubleshooting
 
 | Symptom | Fix |
 |---------|-----|
-| `NO_MSN_COMMITS` on push | Teacher `[MSN-NNNN]` commit modifying the mission file; set `GANTRY_TEACHER_EMAILS` |
-| Pre-push OK, full verify fails trace | Fill `WORKER_LOG.md`; align `trace_rows`; re-run full verify |
-| `TEACHER_IDENTITY_UNCONFIGURED` | `export GANTRY_TEACHER_EMAILS="$(git config user.email)"` |
+| `NO_MSN_COMMITS` on push | Planner `[MSN-NNNN]` commit modifying the mission file; set `GANTRY_PLANNER_EMAILS` |
+| Pre-push OK, full verify fails trace | Fill `EXECUTOR_LOG.md`; align `trace_rows`; re-run full verify |
+| `PLANNER_IDENTITY_UNCONFIGURED` | `export GANTRY_PLANNER_EMAILS="$(git config user.email)"` |
 
 Integration compat verified by OpenGantry release — run `gantry doctor` for detected wiring and stale paths.

package/templates/integrations/recipes/_preamble.md

@@ -4,9 +4,9 @@ OpenGantry is **tool-agnostic** and **vendor-neutral** — any agent that can ru
 
 ## Universal rule
 
-1. Teacher legislates a mission under `.gitagent/missions/` (IDE chat: [`.gitagent/teacher/MISSION-ARCHITECT.md`](.gitagent/teacher/MISSION-ARCHITECT.md) — one copy-paste `gantry legislate` command).
-2. Bootstrap mission-scoped runtime env before worker execution.
-3. Append trace evidence to `WORKER_LOG.md`.
+1. Planner legislates a mission under `.gitagent/missions/` (IDE chat: [`.gitagent/planner/MISSION-ARCHITECT.md`](.gitagent/planner/MISSION-ARCHITECT.md) — one copy-paste `gantry legislate` command).
+2. Bootstrap mission-scoped runtime env before executor execution.
+3. Append trace evidence to `EXECUTOR_LOG.md`.
 4. Finish with `gantry verify --mission <path>` (full verify before merge / claiming done).
 
 ```bash
@@ -19,8 +19,8 @@ gantry runtime env --mission .gitagent/missions/MSN-0001.<slug>.yaml --json
 
 | Tier | Mechanism | What it actually traps |
 |------|-----------|------------------------|
-| **Process-boundary** | `gantry runtime exec` | TMVC roots + forbidden zones for subprocess workers |
-| **Deterministic hook** | Tool hooks (Cursor `beforeShellExecution` on law/manifest paths) | Shell writes to `.gitagent/foreman/`, `.gitagent/teacher/RULES.md` |
+| **Process-boundary** | `gantry runtime exec` | TMVC roots + forbidden zones for subprocess executors |
+| **Deterministic hook** | Tool hooks (Cursor `beforeShellExecution` on law/manifest paths) | Shell writes to `.gitagent/foreman/`, `.gitagent/planner/RULES.md` |
 | **Advisory** | Rules / `AGENTS.md` / tool memory | IDE Agent Write/Edit — LLM compliance, not kernel enforcement |
 
 IDE agent file edits are not TMVC-trapped unless the tool runs inside `runtime exec`.
@@ -30,14 +30,14 @@ IDE agent file edits are not TMVC-trapped unless the tool runs inside `runtime e
 | File | Role |
 |------|------|
 | `AGENTS.md` | Cross-tool entry: read RULES + MANIFEST before acting |
-| `.gitagent/teacher/RULES.md` | Governance law |
+| `.gitagent/planner/RULES.md` | Governance law |
 | `.gitagent/foreman/MANIFEST.json` | Routing map (TMVC roots, forbidden zones) |
 
 ## Shared session variables
 
 | Variable | Purpose |
 |----------|---------|
-| `GANTRY_TEACHER_EMAILS` | Comma-separated Git author emails allowed to legislate |
+| `GANTRY_PLANNER_EMAILS` | Comma-separated Git author emails allowed to legislate |
 | `GANTRY_MISSION` | Optional mission path for `gxt-runtime-env.sh` |
 | `GXT_*` | Emitted by `gantry runtime env` |
 

package/templates/integrations/recipes/claude-code.md

@@ -1,6 +1,6 @@
 ### Claude Code
 
-- **Context injection:** Minimal `CLAUDE.md` pointing at `AGENTS.md`, `.gitagent/teacher/RULES.md`, `.gitagent/foreman/MANIFEST.json`.
+- **Context injection:** Minimal `CLAUDE.md` pointing at `AGENTS.md`, `.gitagent/planner/RULES.md`, `.gitagent/foreman/MANIFEST.json`.
 - **Session bootstrap (shell wrapper — no project hooks):**
 
 ```bash

package/templates/integrations/recipes/cursor.md

@@ -1,8 +1,8 @@
 ### Cursor
 
 - **Context injection:** `.cursor/rules/opengantry-gxt-substrate.mdc` (`alwaysApply: true`); `.cursor/hooks.json` — `sessionStart` mission scope + `beforeShellExecution` fallback guard; `.cursor/mcp.json` — `gantry mcp serve`.
-- **Mission Architect:** `/gantry` macro (do not use `/plan` — Cursor native Plan Mode); implicit activation when user asks to **write/edit code** with no pinned mission. Follow `.gitagent/teacher/MISSION-ARCHITECT.md`.
-- **MCP legislation:** `gxt_draft_legislation` → semantic chat approval → `gxt_execute_legislation` → Teacher commit → `gxt_check_signature` → `gxt_pin_mission`. Or **`gxt_start_orchestration`** for goal-first CLI parity.
+- **Mission Architect:** `/gantry` macro (do not use `/plan` — Cursor native Plan Mode); implicit activation when user asks to **write/edit code** with no pinned mission. Follow `.gitagent/planner/MISSION-ARCHITECT.md`.
+- **MCP legislation:** `gxt_draft_legislation` → semantic chat approval → `gxt_execute_legislation` → Planner commit → `gxt_check_signature` → `gxt_pin_mission`. Or **`gxt_start_orchestration`** for goal-first CLI parity.
 - **Verify remediation:** `gxt_verify` returns `error_code`, `fix_hints`, `next_actions` on failure; CLI equivalent: `gantry verify --mission … --fix`.
 - **Session bootstrap:**
 

package/templates/scripts/gxt-manifest-lib.mjs

@@ -16,7 +16,7 @@ import { fileURLToPath } from "node:url";
 
 const FIXED_MSN_PREFIXES = [
   ".gitagent/",
-  "WORKER_LOG.md",
+  "EXECUTOR_LOG.md",
   ".githooks/",
   ".github/workflows/gxt-validate.yml",
 ];

package/templates/scripts/gxt-runtime-env.sh

@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-# Load GXT Worker Runtime Contract into the current shell (any IDE terminal / manual runs).
+# Load GXT Executor Runtime Contract into the current shell (any IDE terminal / manual runs).
 set -euo pipefail
 
 ROOT="$(git rev-parse --show-toplevel 2>/dev/null || true)"

package/templates/skills/gantry.md

@@ -2,4 +2,4 @@
 
 Manifest key `gantry`. **gantry** CLI and tests under `src/cli/` per [`.gitagent/foreman/MANIFEST.json`](../.gitagent/foreman/MANIFEST.json).
 
-Substrate paths (`.gitagent/`, hooks, workflows) require Teacher legislation and **`substrate`** or explicit mission scope — do not edit Foreman law without a mission.
+Substrate paths (`.gitagent/`, hooks, workflows) require Planner legislation and **`substrate`** or explicit mission scope — do not edit Foreman law without a mission.

package/templates/skills/substrate.md

@@ -1,3 +1,3 @@
 # Skill: substrate
 
-Manifest key `substrate`. Reserved for high-risk substrate work; requires Teacher mission per manifest.
+Manifest key `substrate`. Reserved for high-risk substrate work; requires Planner mission per manifest.

package/dist/cli/commands/teacher.d.ts

@@ -1,11 +0,0 @@
-export interface TeacherShowOptions {
-    json?: boolean;
-    cwd?: string;
-}
-export interface TeacherSetOptions {
-    emails: string[];
-    cwd?: string;
-}
-export declare function runTeacherShow(options?: TeacherShowOptions): void;
-export declare function runTeacherSet(options: TeacherSetOptions): void;
-//# sourceMappingURL=teacher.d.ts.map

package/dist/cli/lib/teacher-identity.d.ts

@@ -1,23 +0,0 @@
-export { ENV_TEACHER_EMAILS } from "./config-namespace.js";
-export declare const REL_TEACHER_ALLOWLIST: ".gitagent/foreman/TEACHER.allowlist";
-export declare const REL_TEACHER_ALLOWLIST_LOCAL: ".gitagent/foreman/TEACHER.allowlist.local";
-export type TeacherIdentitySource = "allowlist_file" | "allowlist_local" | "git_config" | "env" | "git_user_email" | "unset";
-export interface ResolvedTeacherIdentity {
-    emails: string[];
-    source: TeacherIdentitySource;
-    /** Human-readable detail for doctor / errors */
-    detail: string;
-}
-/** Legacy env-only parser (tests / explicit CI override). */
-export declare function parseTeacherEmailsFromEnv(): string[];
-/**
- * Resolve Teacher legislation allowlist for a repository.
- * Repo-local sources win over shell env so multi-project developers are not cross-contaminated.
- */
-export declare function resolveTeacherEmails(repoRoot: string): ResolvedTeacherIdentity;
-export declare function serializeTeacherAllowlist(emails: string[]): string;
-export declare function writeTeacherAllowlistLocal(repoRoot: string, emails: string[]): void;
-/** Create gitignored local allowlist from repo git user.email when missing. */
-export declare function ensureTeacherAllowlistOnInit(repoRoot: string): boolean;
-export declare function teacherIdentitySetupHint(_repoRoot: string): string;
-//# sourceMappingURL=teacher-identity.d.ts.map

package/dist/cli/lib/worker-log-integrity.d.ts

@@ -1,4 +0,0 @@
-import type { DoctorLine } from "./doctor-types.js";
-/** Warn-level integrity checks for WORKER_LOG.md before verify fails opaquely. */
-export declare function runWorkerLogIntegrityDoctorChecks(repoRoot: string): DoctorLine[];
-//# sourceMappingURL=worker-log-integrity.d.ts.map

package/dist/cli/lib/worker-log-integrity.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"worker-log-integrity.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/worker-log-integrity.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAIpD,kFAAkF;AAClF,wBAAgB,iCAAiC,CAAC,QAAQ,EAAE,MAAM,GAAG,UAAU,EAAE,CAgDhF"}

package/dist/cli/lib/worker-log-integrity.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"worker-log-integrity.js","sourceRoot":"","sources":["../../../src/cli/lib/worker-log-integrity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,MAAM,iBAAiB,GAAG,uBAAuB,CAAC;AAElD,kFAAkF;AAClF,MAAM,UAAU,iCAAiC,CAAC,QAAgB;IAChE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IACrD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACjD,MAAM,KAAK,GAAiB,EAAE,CAAC;IAE/B,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACpF,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,wEAAwE;SAClF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACtF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACnB,KAAK,CAAC,IAAI,CAAC;gBACT,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,6CAA6C,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;aAC1E,CAAC,CAAC;YACH,MAAM;QACR,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,wEAAwE;SAClF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,eAAe,GAAG,OAAO;SAC5B,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACxF,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,iDAAiD;SAC3D,CAAC,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/cli/lib/worker-log-line-map.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"worker-log-line-map.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/worker-log-line-map.ts"],"names":[],"mappings":"AAEA,mFAAmF;AACnF,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;CACrC;AAED,uEAAuE;AACvE,wBAAgB,8BAA8B,CAC5C,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,MAAM,EAAE,GACf,gBAAgB,GAAG,IAAI,CAgBzB;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAE/E;AAED,+FAA+F;AAC/F,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAK1D"}

package/dist/cli/lib/worker-log-line-map.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"worker-log-line-map.js","sourceRoot":"","sources":["../../../src/cli/lib/worker-log-line-map.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AASzB,uEAAuE;AACvE,MAAM,UAAU,8BAA8B,CAC5C,aAAqB,EACrB,MAAgB;IAEhB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAoB,CAAC;IACjD,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEhD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,YAAY,CAAC,GAAG,CAAC,KAAK,CAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAqB,EAAE,KAAa;IACnE,OAAO,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,OAAO,CACL,wCAAwC,CAAC,IAAI,CAAC,MAAM,CAAC;QACrD,uDAAuD,CAAC,IAAI,CAAC,MAAM,CAAC,CACrE,CAAC;AACJ,CAAC"}

package/dist/cli/program-teacher.d.ts

@@ -1,3 +0,0 @@
-import type { Command } from "commander";
-export declare function registerTeacherCommands(program: Command): void;
-//# sourceMappingURL=program-teacher.d.ts.map

package/dist/cli/program-teacher.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"program-teacher.d.ts","sourceRoot":"","sources":["../../src/cli/program-teacher.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGzC,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAkB9D"}