@jeger-ai/opengantry 2.3.0 → 2.4.0

package/dist/cli/lib/mcp-upgrade.js

@@ -1,10 +1,18 @@
 import { errorMessage } from "./cli-io.js";
 import { getRepoRoot } from "./git.js";
+import { GXT_ERROR } from "./gxt-error-codes.js";
+import { McpWriteDeniedError } from "./mcp-write-guard.js";
 import { assertStableUpgradePlanPayloadV1, toStableUpgradePlanPayloadV1, } from "./upgrade-plan-payload.js";
 import { runUpgradeApply } from "./upgrade-apply.js";
 import { runUpgradePlan } from "./upgrade-plan.js";
 import { GapmanUserError } from "./errors.js";
 function mcpErrorBody(e) {
+    if (e instanceof McpWriteDeniedError) {
+        return {
+            status: "error",
+            error: { code: GXT_ERROR.MCP_WRITE_DENIED, message: e.message, retryable: false },
+        };
+    }
     if (e instanceof GapmanUserError) {
         return {
             status: "error",

package/dist/cli/lib/mcp-upgrade.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-upgrade.js","sourceRoot":"","sources":["../../../src/cli/lib/mcp-upgrade.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAGvC,OAAO,EACL,gCAAgC,EAChC,4BAA4B,GAE7B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAa9C,SAAS,YAAY,CAAC,CAAU;IAC9B,IAAI,CAAC,YAAY,eAAe,EAAE,CAAC;QACjC,OAAO;YACL,MAAM,EAAE,OAAO;YACf,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE;SAC9D,CAAC;IACJ,CAAC;IACD,OAAO;QACL,MAAM,EAAE,OAAO;QACf,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE;KAC7E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAA6B,EAAE;IAC/D,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAC;YAC5B,QAAQ;YACR,GAAG,EAAE,KAAK,CAAC,MAAM;YACjB,MAAM,EAAE,KAAK,CAAC,OAAO,KAAK,IAAI;YAC9B,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,4BAA4B,CAAC,MAAM,CAAC,CAAC;QACrD,gCAAgC,CAAC,OAAO,CAAC,CAAC;QAC1C,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,eAAwB;IAC/D,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,IAAI,CAAC;QACH,OAAO,MAAM,eAAe,CAAC;YAC3B,QAAQ;YACR,OAAO,EAAE,eAAe;YACxB,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;AACH,CAAC"}
+{"version":3,"file":"mcp-upgrade.js","sourceRoot":"","sources":["../../../src/cli/lib/mcp-upgrade.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,EACL,gCAAgC,EAChC,4BAA4B,GAE7B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAa9C,SAAS,YAAY,CAAC,CAAU;IAC9B,IAAI,CAAC,YAAY,mBAAmB,EAAE,CAAC;QACrC,OAAO;YACL,MAAM,EAAE,OAAO;YACf,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,gBAAgB,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE;SAClF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,YAAY,eAAe,EAAE,CAAC;QACjC,OAAO;YACL,MAAM,EAAE,OAAO;YACf,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE;SAC9D,CAAC;IACJ,CAAC;IACD,OAAO;QACL,MAAM,EAAE,OAAO;QACf,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE;KAC7E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAA6B,EAAE;IAC/D,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAC;YAC5B,QAAQ;YACR,GAAG,EAAE,KAAK,CAAC,MAAM;YACjB,MAAM,EAAE,KAAK,CAAC,OAAO,KAAK,IAAI;YAC9B,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,4BAA4B,CAAC,MAAM,CAAC,CAAC;QACrD,gCAAgC,CAAC,OAAO,CAAC,CAAC;QAC1C,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,eAAwB;IAC/D,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,IAAI,CAAC;QACH,OAAO,MAAM,eAAe,CAAC;YAC3B,QAAQ;YACR,OAAO,EAAE,eAAe;YACxB,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;AACH,CAAC"}

package/dist/cli/lib/mcp-write-guard.d.ts

@@ -0,0 +1,20 @@
+import { GapmanUserError } from "./errors.js";
+import type { Manifest } from "./types.js";
+export declare const MCP_WRITE_DENIED: "MCP_WRITE_DENIED";
+export declare class McpWriteDeniedError extends GapmanUserError {
+    readonly repoRelPath: string;
+    constructor(repoRelPath: string, reason: string);
+}
+/** Mission file writes via MCP must stay under `.gitagent/missions/`. */
+export declare function assertMcpMissionWritePath(repoRelPath: string): void;
+/**
+ * Validate a repo-relative write target for a skill-scoped MCP mutation.
+ * Governance transport paths (EXECUTOR_LOG, active-mission pin) are always allowed.
+ */
+export declare function assertMcpSkillWritePath(manifest: Manifest, skillKey: string, repoRelPath: string): void;
+/**
+ * Tier-3 substrate upgrade: each `planned_writes` entry is Planner-authorized via signed mission.
+ * Deny forbidden-zone targets not explicitly listed in `planned_writes`.
+ */
+export declare function assertMcpSubstrateUpgradeWritePaths(manifest: Manifest, plannedWrites: readonly string[]): void;
+//# sourceMappingURL=mcp-write-guard.d.ts.map

package/dist/cli/lib/mcp-write-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-write-guard.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/mcp-write-guard.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAG3C,eAAO,MAAM,gBAAgB,EAAG,kBAA2B,CAAC;AAE5D,qBAAa,mBAAoB,SAAQ,eAAe;IACtD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;gBAEjB,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAKhD;AASD,yEAAyE;AACzE,wBAAgB,yBAAyB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CASnE;AAoBD;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,QAAQ,EAClB,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,GAClB,IAAI,CAiBN;AAED;;;GAGG;AACH,wBAAgB,mCAAmC,CACjD,QAAQ,EAAE,QAAQ,EAClB,aAAa,EAAE,SAAS,MAAM,EAAE,GAC/B,IAAI,CAYN"}

package/dist/cli/lib/mcp-write-guard.js

@@ -0,0 +1,82 @@
+import { REL_MISSIONS_PREFIX } from "./git-proof.js";
+import { classifyRepoRelativePath, forbiddenZonesForSkill, isGovernanceTransportPath, isPathUnderRoot, normalizeRepoRelativePath, tmvcRootsForSkill, } from "./tmvc-path.js";
+import { GapmanUserError } from "./errors.js";
+import { resolveManifestSkillKey } from "./skill-key.js";
+export const MCP_WRITE_DENIED = "MCP_WRITE_DENIED";
+export class McpWriteDeniedError extends GapmanUserError {
+    repoRelPath;
+    constructor(repoRelPath, reason) {
+        const norm = normalizeRepoRelativePath(repoRelPath);
+        super(MCP_WRITE_DENIED, `MCP write denied: ${reason} (${norm})`);
+        this.repoRelPath = norm;
+    }
+}
+function assertNoPathTraversal(repoRel) {
+    const norm = normalizeRepoRelativePath(repoRel);
+    if (norm.includes("..") || norm.startsWith("/")) {
+        throw new McpWriteDeniedError(norm, "path must be repo-relative without traversal");
+    }
+}
+/** Mission file writes via MCP must stay under `.gitagent/missions/`. */
+export function assertMcpMissionWritePath(repoRelPath) {
+    assertNoPathTraversal(repoRelPath);
+    const norm = normalizeRepoRelativePath(repoRelPath);
+    if (!norm.startsWith(REL_MISSIONS_PREFIX)) {
+        throw new McpWriteDeniedError(norm, `mission writes must stay under ${REL_MISSIONS_PREFIX}`);
+    }
+}
+function allManifestForbiddenZones(manifest) {
+    const zones = new Set();
+    for (const skill of Object.values(manifest.skills)) {
+        for (const fz of skill.forbidden_zones ?? []) {
+            zones.add(fz);
+        }
+    }
+    return [...zones];
+}
+function pathHitsForbiddenZone(repoRel, forbiddenZones) {
+    const norm = normalizeRepoRelativePath(repoRel);
+    for (const fz of forbiddenZones) {
+        if (isPathUnderRoot(norm, fz))
+            return fz;
+    }
+    return null;
+}
+/**
+ * Validate a repo-relative write target for a skill-scoped MCP mutation.
+ * Governance transport paths (EXECUTOR_LOG, active-mission pin) are always allowed.
+ */
+export function assertMcpSkillWritePath(manifest, skillKey, repoRelPath) {
+    assertNoPathTraversal(repoRelPath);
+    const norm = normalizeRepoRelativePath(repoRelPath);
+    if (isGovernanceTransportPath(norm))
+        return;
+    const resolvedSkill = resolveManifestSkillKey(manifest, skillKey);
+    const forbidden = forbiddenZonesForSkill(manifest, resolvedSkill);
+    const hit = pathHitsForbiddenZone(norm, forbidden);
+    if (hit) {
+        throw new McpWriteDeniedError(norm, `path in forbidden zone ${hit}`);
+    }
+    const tmvc = tmvcRootsForSkill(manifest, resolvedSkill);
+    const classification = classifyRepoRelativePath(norm, tmvc, forbidden);
+    if (classification === "inside_tmvc" || classification === "governance_transport")
+        return;
+    throw new McpWriteDeniedError(norm, `path outside TMVC roots for skill ${resolvedSkill}`);
+}
+/**
+ * Tier-3 substrate upgrade: each `planned_writes` entry is Planner-authorized via signed mission.
+ * Deny forbidden-zone targets not explicitly listed in `planned_writes`.
+ */
+export function assertMcpSubstrateUpgradeWritePaths(manifest, plannedWrites) {
+    const authorized = new Set(plannedWrites.map((p) => normalizeRepoRelativePath(p)));
+    const allForbidden = allManifestForbiddenZones(manifest);
+    for (const relPath of plannedWrites) {
+        assertNoPathTraversal(relPath);
+        const norm = normalizeRepoRelativePath(relPath);
+        const hit = pathHitsForbiddenZone(norm, allForbidden);
+        if (hit && !authorized.has(norm)) {
+            throw new McpWriteDeniedError(norm, `forbidden zone ${hit} not authorized by upgrade mission`);
+        }
+    }
+}
+//# sourceMappingURL=mcp-write-guard.js.map

package/dist/cli/lib/mcp-write-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-write-guard.js","sourceRoot":"","sources":["../../../src/cli/lib/mcp-write-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EACL,wBAAwB,EACxB,sBAAsB,EACtB,yBAAyB,EACzB,eAAe,EACf,yBAAyB,EACzB,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAEzD,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAA2B,CAAC;AAE5D,MAAM,OAAO,mBAAoB,SAAQ,eAAe;IAC7C,WAAW,CAAS;IAE7B,YAAY,WAAmB,EAAE,MAAc;QAC7C,MAAM,IAAI,GAAG,yBAAyB,CAAC,WAAW,CAAC,CAAC;QACpD,KAAK,CAAC,gBAAgB,EAAE,qBAAqB,MAAM,KAAK,IAAI,GAAG,CAAC,CAAC;QACjE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC1B,CAAC;CACF;AAED,SAAS,qBAAqB,CAAC,OAAe;IAC5C,MAAM,IAAI,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,mBAAmB,CAAC,IAAI,EAAE,8CAA8C,CAAC,CAAC;IACtF,CAAC;AACH,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,yBAAyB,CAAC,WAAmB;IAC3D,qBAAqB,CAAC,WAAW,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,yBAAyB,CAAC,WAAW,CAAC,CAAC;IACpD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,mBAAmB,CAC3B,IAAI,EACJ,kCAAkC,mBAAmB,EAAE,CACxD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,QAAkB;IACnD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC;YAC7C,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAe,EAAE,cAAiC;IAC/E,MAAM,IAAI,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAChD,KAAK,MAAM,EAAE,IAAI,cAAc,EAAE,CAAC;QAChC,IAAI,eAAe,CAAC,IAAI,EAAE,EAAE,CAAC;YAAE,OAAO,EAAE,CAAC;IAC3C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAAkB,EAClB,QAAgB,EAChB,WAAmB;IAEnB,qBAAqB,CAAC,WAAW,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,yBAAyB,CAAC,WAAW,CAAC,CAAC;IACpD,IAAI,yBAAyB,CAAC,IAAI,CAAC;QAAE,OAAO;IAE5C,MAAM,aAAa,GAAG,uBAAuB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,sBAAsB,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IAClE,MAAM,GAAG,GAAG,qBAAqB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACnD,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,IAAI,mBAAmB,CAAC,IAAI,EAAE,0BAA0B,GAAG,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,IAAI,GAAG,iBAAiB,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACxD,MAAM,cAAc,GAAG,wBAAwB,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IACvE,IAAI,cAAc,KAAK,aAAa,IAAI,cAAc,KAAK,sBAAsB;QAAE,OAAO;IAE1F,MAAM,IAAI,mBAAmB,CAAC,IAAI,EAAE,qCAAqC,aAAa,EAAE,CAAC,CAAC;AAC5F,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mCAAmC,CACjD,QAAkB,EAClB,aAAgC;IAEhC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnF,MAAM,YAAY,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC;IAEzD,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;QACpC,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,qBAAqB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACtD,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,mBAAmB,CAAC,IAAI,EAAE,kBAAkB,GAAG,oCAAoC,CAAC,CAAC;QACjG,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/cli/lib/missions/formatter.d.ts

@@ -10,7 +10,7 @@ export interface EmitMissionOptions {
 }
 export declare function emitActiveMissionFromTemplate(repoRoot: string, options: EmitMissionOptions): string;
 /**
- * True when the mission file represents Teacher legislation only — no worker
+ * True when the mission file represents Planner legislation only — no worker
  * execution evidence claimed yet. Pre-push may pass after git-proof alone.
  */
 export declare function isLegislativeStub(mission: ParsedMission): boolean;

package/dist/cli/lib/missions/formatter.js

@@ -118,7 +118,7 @@ function isPlaceholderQuote(quote) {
     return quote.trim() === LEGISLATE_TRACE_PLACEHOLDER;
 }
 /**
- * True when the mission file represents Teacher legislation only — no worker
+ * True when the mission file represents Planner legislation only — no worker
  * execution evidence claimed yet. Pre-push may pass after git-proof alone.
  */
 export function isLegislativeStub(mission) {

package/dist/cli/lib/onboarding-flow.js

@@ -7,7 +7,7 @@ export function tutorialTeacherStampBlock(missionPath, msnId) {
     return [
         `git add ${missionPath}`,
         `git commit -m "[${msnId}] legislate mission"`,
-        "gantry teacher set \"$(git config user.email)\"  # if not already configured",
+        "gantry planner set \"$(git config user.email)\"  # if not already configured",
     ].join("\n  ");
 }
 export function onboardingRuntimeEnvHint(missionPath) {

package/dist/cli/lib/out-of-scope-hint.js

@@ -71,7 +71,7 @@ export function collectOutOfScopeAdrHints(root, intentNorm) {
         hints.push({
             id: meta.id,
             title: meta.title,
-            note: `Intent may relate to ADR ${meta.id} (match_terms overlap); Teacher must confirm or reject during legislation.`,
+            note: `Intent may relate to ADR ${meta.id} (match_terms overlap); Planner must confirm or reject during legislation.`,
         });
     }
     return hints;

package/dist/cli/lib/perimeter.d.ts

@@ -1,5 +1,5 @@
 import type { Manifest } from "./types.js";
-export declare const DEFAULT_PERIMETER_PROTECTED: readonly ["**/.gxt-skill.yaml", ".gitagent/foreman/MANIFEST.json", ".gitagent/teacher/RULES.md"];
+export declare const DEFAULT_PERIMETER_PROTECTED: readonly ["**/.gxt-skill.yaml", ".gitagent/foreman/MANIFEST.json", ".gitagent/planner/RULES.md"];
 export interface PerimeterViolation {
     path: string;
     commit: string;

package/dist/cli/lib/perimeter.js

@@ -3,11 +3,11 @@ import { GXT_ERROR } from "./gxt-error-codes.js";
 import { toPosixRel } from "./cli-io.js";
 import { gitRevParse, gitRun, gitRunOk } from "./git.js";
 import { commitSubjectHasMsnPrefix, listCommitChangedPaths, listMsnSubjectCommits, } from "./git-proof.js";
-import { resolveTeacherEmails } from "./teacher-identity.js";
+import { resolvePlannerEmails } from "./planner-identity.js";
 export const DEFAULT_PERIMETER_PROTECTED = [
     "**/.gxt-skill.yaml",
     ".gitagent/foreman/MANIFEST.json",
-    ".gitagent/teacher/RULES.md",
+    ".gitagent/planner/RULES.md",
 ];
 const SHALLOW_HISTORY_HINT = "Configure CI checkout with fetch-depth: 0 or fetch the base ref explicitly before running gantry perimeter --ci.";
 function perimeterGlobs(manifest) {
@@ -103,10 +103,10 @@ function signatureStatus(repoRoot, hash) {
 function isGoodSignature(status) {
     return status === "G" || status === "U";
 }
-function findTeacherStampForPath(repoRoot, msnId, repoRelPath, teacherEmails) {
+function findTeacherStampForPath(repoRoot, msnId, repoRelPath, plannerEmails) {
     const rows = listMsnSubjectCommits(repoRoot, msnId);
     for (const row of rows) {
-        if (!teacherEmails.includes(row.authorEmail.trim().toLowerCase()))
+        if (!plannerEmails.includes(row.authorEmail.trim().toLowerCase()))
             continue;
         const changed = listCommitChangedPaths(repoRoot, row.hash);
         if (changed.some((p) => p.replace(/\\/g, "/") === repoRelPath.replace(/\\/g, "/"))) {
@@ -159,7 +159,7 @@ function checkProtectedPathCi(repoRoot, baseRef, filePath, violations, advisorie
         advisories.push(`perimeter: ${filePath} — all ${String(range.commits.length)} commit(s) in range are signed`);
     }
 }
-function checkProtectedPathLocal(repoRoot, filePath, teacherEmails, violations, advisories) {
+function checkProtectedPathLocal(repoRoot, filePath, plannerEmails, violations, advisories) {
     const commit = lastCommitTouchingPath(repoRoot, filePath);
     if (!commit) {
         violations.push({
@@ -182,11 +182,11 @@ function checkProtectedPathLocal(repoRoot, filePath, teacherEmails, violations,
     }
     const msnId = extractMsnFromRecentCommits(repoRoot, commit);
     const emailMatch = row.authorEmail.trim().toLowerCase() &&
-        teacherEmails.includes(row.authorEmail.trim().toLowerCase());
+        plannerEmails.includes(row.authorEmail.trim().toLowerCase());
     const subjectMatch = msnId !== null && commitSubjectHasMsnPrefix(row.subject, msnId);
-    const stamp = msnId !== null ? findTeacherStampForPath(repoRoot, msnId, filePath, teacherEmails) : null;
+    const stamp = msnId !== null ? findTeacherStampForPath(repoRoot, msnId, filePath, plannerEmails) : null;
     if (stamp) {
-        advisories.push(`perimeter (advisory): ${filePath} — Teacher email + MSN stamp hint matched ${stamp.hash.slice(0, 7)} (forgeable locally; CI verifies signature)`);
+        advisories.push(`perimeter (advisory): ${filePath} — Planner email + MSN stamp hint matched ${stamp.hash.slice(0, 7)} (forgeable locally; CI verifies signature)`);
         return;
     }
     advisories.push(`perimeter (advisory): ${filePath} modified in ${commit.slice(0, 7)} — ` +
@@ -216,7 +216,7 @@ export function checkPerimeter(repoRoot, manifest, options) {
     if (protectedChanged.length === 0) {
         return { ok: true, violations: [], advisories: [] };
     }
-    const teacherEmails = resolveTeacherEmails(repoRoot).emails;
+    const plannerEmails = resolvePlannerEmails(repoRoot).emails;
     const violations = [];
     const advisories = [];
     for (const filePath of protectedChanged) {
@@ -224,7 +224,7 @@ export function checkPerimeter(repoRoot, manifest, options) {
             checkProtectedPathCi(repoRoot, options.baseRef, filePath, violations, advisories);
         }
         else {
-            checkProtectedPathLocal(repoRoot, filePath, teacherEmails, violations, advisories);
+            checkProtectedPathLocal(repoRoot, filePath, plannerEmails, violations, advisories);
         }
     }
     const hardFailures = violations.filter((v) => !v.advisoryOnly);

package/dist/cli/lib/planner-identity.d.ts

@@ -0,0 +1,23 @@
+export { ENV_PLANNER_EMAILS } from "./config-namespace.js";
+export declare const REL_PLANNER_ALLOWLIST: ".gitagent/foreman/PLANNER.allowlist";
+export declare const REL_PLANNER_ALLOWLIST_LOCAL: ".gitagent/foreman/PLANNER.allowlist.local";
+export type PlannerIdentitySource = "allowlist_file" | "allowlist_local" | "git_config" | "env" | "git_user_email" | "unset";
+export interface ResolvedPlannerIdentity {
+    emails: string[];
+    source: PlannerIdentitySource;
+    /** Human-readable detail for doctor / errors */
+    detail: string;
+}
+/** Legacy env-only parser (tests / explicit CI override). */
+export declare function parsePlannerEmailsFromEnv(): string[];
+/**
+ * Resolve Planner legislation allowlist for a repository.
+ * Repo-local sources win over shell env so multi-project developers are not cross-contaminated.
+ */
+export declare function resolvePlannerEmails(repoRoot: string): ResolvedPlannerIdentity;
+export declare function serializePlannerAllowlist(emails: string[]): string;
+export declare function writePlannerAllowlistLocal(repoRoot: string, emails: string[]): void;
+/** Create gitignored local allowlist from repo git user.email when missing. */
+export declare function ensurePlannerAllowlistOnInit(repoRoot: string): boolean;
+export declare function plannerIdentitySetupHint(_repoRoot: string): string;
+//# sourceMappingURL=planner-identity.d.ts.map

package/dist/cli/lib/{teacher-identity.d.ts.map → planner-identity.d.ts.map}

@@ -1 +1 @@
-{"version":3,"file":"teacher-identity.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/teacher-identity.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAE3D,eAAO,MAAM,qBAAqB,EAAG,qCAA8C,CAAC;AACpF,eAAO,MAAM,2BAA2B,EAAG,2CAAoD,CAAC;AAEhG,MAAM,MAAM,qBAAqB,GAC7B,gBAAgB,GAChB,iBAAiB,GACjB,YAAY,GACZ,KAAK,GACL,gBAAgB,GAChB,OAAO,CAAC;AAEZ,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,EAAE,qBAAqB,CAAC;IAC9B,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAC;CAChB;AA8BD,6DAA6D;AAC7D,wBAAgB,yBAAyB,IAAI,MAAM,EAAE,CAIpD;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,uBAAuB,CA2C9E;AAED,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAGlE;AAED,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAInF;AAED,+EAA+E;AAC/E,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAStE;AAED,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAOlE"}
+{"version":3,"file":"planner-identity.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/planner-identity.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAE3D,eAAO,MAAM,qBAAqB,EAAG,qCAA8C,CAAC;AACpF,eAAO,MAAM,2BAA2B,EAAG,2CAAoD,CAAC;AAEhG,MAAM,MAAM,qBAAqB,GAC7B,gBAAgB,GAChB,iBAAiB,GACjB,YAAY,GACZ,KAAK,GACL,gBAAgB,GAChB,OAAO,CAAC;AAEZ,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,EAAE,qBAAqB,CAAC;IAC9B,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAC;CAChB;AA8BD,6DAA6D;AAC7D,wBAAgB,yBAAyB,IAAI,MAAM,EAAE,CAIpD;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,uBAAuB,CA2C9E;AAED,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAGlE;AAED,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAInF;AAED,+EAA+E;AAC/E,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAStE;AAED,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAOlE"}

package/dist/cli/lib/{teacher-identity.js → planner-identity.js}

@@ -2,11 +2,11 @@ import fs from "node:fs";
 import path from "node:path";
 import { fromPosix } from "./cli-io.js";
 import { CLI_NAME } from "./constants.js";
-import { ENV_TEACHER_EMAILS, GIT_CONFIG_TEACHER_EMAILS, readEnvWithLegacy, readGitConfigWithLegacy, } from "./config-namespace.js";
+import { ENV_PLANNER_EMAILS, GIT_CONFIG_PLANNER_EMAILS, readEnvWithLegacy, readGitConfigWithLegacy, } from "./config-namespace.js";
 import { gitRunOk } from "./git.js";
-export { ENV_TEACHER_EMAILS } from "./config-namespace.js";
-export const REL_TEACHER_ALLOWLIST = ".gitagent/foreman/TEACHER.allowlist";
-export const REL_TEACHER_ALLOWLIST_LOCAL = ".gitagent/foreman/TEACHER.allowlist.local";
+export { ENV_PLANNER_EMAILS } from "./config-namespace.js";
+export const REL_PLANNER_ALLOWLIST = ".gitagent/foreman/PLANNER.allowlist";
+export const REL_PLANNER_ALLOWLIST_LOCAL = ".gitagent/foreman/PLANNER.allowlist.local";
 function normalizeEmailList(raw) {
     const parts = raw
         .split(/[\n,]+/)
@@ -20,8 +20,8 @@ function readAllowlistFile(repoRoot, relPath) {
         return [];
     return normalizeEmailList(fs.readFileSync(abs, "utf8"));
 }
-function readGitConfigTeacherEmails(repoRoot) {
-    const raw = readGitConfigWithLegacy(repoRoot, "teacherEmails");
+function readGitConfigPlannerEmails(repoRoot) {
+    const raw = readGitConfigWithLegacy(repoRoot, "plannerEmails");
     if (!raw)
         return [];
     return normalizeEmailList(raw);
@@ -34,46 +34,46 @@ function readGitUserEmail(repoRoot) {
     return null;
 }
 /** Legacy env-only parser (tests / explicit CI override). */
-export function parseTeacherEmailsFromEnv() {
-    const raw = readEnvWithLegacy("TEACHER_EMAILS");
+export function parsePlannerEmailsFromEnv() {
+    const raw = readEnvWithLegacy("PLANNER_EMAILS");
     if (!raw)
         return [];
     return normalizeEmailList(raw);
 }
 /**
- * Resolve Teacher legislation allowlist for a repository.
+ * Resolve Planner legislation allowlist for a repository.
  * Repo-local sources win over shell env so multi-project developers are not cross-contaminated.
  */
-export function resolveTeacherEmails(repoRoot) {
-    const team = readAllowlistFile(repoRoot, REL_TEACHER_ALLOWLIST);
-    const local = readAllowlistFile(repoRoot, REL_TEACHER_ALLOWLIST_LOCAL);
+export function resolvePlannerEmails(repoRoot) {
+    const team = readAllowlistFile(repoRoot, REL_PLANNER_ALLOWLIST);
+    const local = readAllowlistFile(repoRoot, REL_PLANNER_ALLOWLIST_LOCAL);
     const mergedFile = [...new Set([...team, ...local])];
     if (mergedFile.length > 0) {
         const sources = [];
         if (team.length > 0)
-            sources.push(REL_TEACHER_ALLOWLIST);
+            sources.push(REL_PLANNER_ALLOWLIST);
         if (local.length > 0)
-            sources.push(REL_TEACHER_ALLOWLIST_LOCAL);
+            sources.push(REL_PLANNER_ALLOWLIST_LOCAL);
         return {
             emails: mergedFile,
             source: local.length > 0 && team.length === 0 ? "allowlist_local" : "allowlist_file",
             detail: sources.join(" + "),
         };
     }
-    const fromGitConfig = readGitConfigTeacherEmails(repoRoot);
+    const fromGitConfig = readGitConfigPlannerEmails(repoRoot);
     if (fromGitConfig.length > 0) {
         return {
             emails: fromGitConfig,
             source: "git_config",
-            detail: `git config ${GIT_CONFIG_TEACHER_EMAILS}`,
+            detail: `git config ${GIT_CONFIG_PLANNER_EMAILS}`,
         };
     }
-    const fromEnv = parseTeacherEmailsFromEnv();
+    const fromEnv = parsePlannerEmailsFromEnv();
     if (fromEnv.length > 0) {
         return {
             emails: fromEnv,
             source: "env",
-            detail: ENV_TEACHER_EMAILS,
+            detail: ENV_PLANNER_EMAILS,
         };
     }
     const gitEmail = readGitUserEmail(repoRoot);
@@ -81,40 +81,40 @@ export function resolveTeacherEmails(repoRoot) {
         return {
             emails: [gitEmail],
             source: "git_user_email",
-            detail: "git config user.email (implicit single Teacher)",
+            detail: "git config user.email (implicit single Planner)",
         };
     }
-    return { emails: [], source: "unset", detail: "no Teacher identity configured" };
+    return { emails: [], source: "unset", detail: "no Planner identity configured" };
 }
-export function serializeTeacherAllowlist(emails) {
+export function serializePlannerAllowlist(emails) {
     const unique = [...new Set(emails.map((e) => e.trim().toLowerCase()).filter((e) => e.includes("@")))];
     return `${unique.join("\n")}\n`;
 }
-export function writeTeacherAllowlistLocal(repoRoot, emails) {
-    const abs = path.join(repoRoot, fromPosix(REL_TEACHER_ALLOWLIST_LOCAL));
+export function writePlannerAllowlistLocal(repoRoot, emails) {
+    const abs = path.join(repoRoot, fromPosix(REL_PLANNER_ALLOWLIST_LOCAL));
     fs.mkdirSync(path.dirname(abs), { recursive: true });
-    fs.writeFileSync(abs, serializeTeacherAllowlist(emails), "utf8");
+    fs.writeFileSync(abs, serializePlannerAllowlist(emails), "utf8");
 }
 /** Create gitignored local allowlist from repo git user.email when missing. */
-export function ensureTeacherAllowlistOnInit(repoRoot) {
-    const abs = path.join(repoRoot, fromPosix(REL_TEACHER_ALLOWLIST_LOCAL));
+export function ensurePlannerAllowlistOnInit(repoRoot) {
+    const abs = path.join(repoRoot, fromPosix(REL_PLANNER_ALLOWLIST_LOCAL));
     if (fs.existsSync(abs))
         return false;
-    const team = readAllowlistFile(repoRoot, REL_TEACHER_ALLOWLIST);
+    const team = readAllowlistFile(repoRoot, REL_PLANNER_ALLOWLIST);
     if (team.length > 0)
         return false;
     const gitEmail = readGitUserEmail(repoRoot);
     if (!gitEmail)
         return false;
-    writeTeacherAllowlistLocal(repoRoot, [gitEmail]);
+    writePlannerAllowlistLocal(repoRoot, [gitEmail]);
     return true;
 }
-export function teacherIdentitySetupHint(_repoRoot) {
+export function plannerIdentitySetupHint(_repoRoot) {
     return [
-        `echo "$(git config user.email)" >> ${REL_TEACHER_ALLOWLIST_LOCAL}`,
-        `or: git config ${GIT_CONFIG_TEACHER_EMAILS} "$(git config user.email)"`,
-        `or: ${CLI_NAME} teacher set "$(git config user.email)"`,
-        `# env ${ENV_TEACHER_EMAILS} is CI-only fallback; prefer repo-local config`,
+        `echo "$(git config user.email)" >> ${REL_PLANNER_ALLOWLIST_LOCAL}`,
+        `or: git config ${GIT_CONFIG_PLANNER_EMAILS} "$(git config user.email)"`,
+        `or: ${CLI_NAME} planner set "$(git config user.email)"`,
+        `# env ${ENV_PLANNER_EMAILS} is CI-only fallback; prefer repo-local config`,
     ].join("\n       ");
 }
-//# sourceMappingURL=teacher-identity.js.map
+//# sourceMappingURL=planner-identity.js.map

package/dist/cli/lib/{teacher-identity.js.map → planner-identity.js.map}

@@ -1 +1 @@
-{"version":3,"file":"teacher-identity.js","sourceRoot":"","sources":["../../../src/cli/lib/teacher-identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,iBAAiB,EACjB,uBAAuB,GACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAE3D,MAAM,CAAC,MAAM,qBAAqB,GAAG,qCAA8C,CAAC;AACpF,MAAM,CAAC,MAAM,2BAA2B,GAAG,2CAAoD,CAAC;AAiBhG,SAAS,kBAAkB,CAAC,GAAW;IACrC,MAAM,KAAK,GAAG,GAAG;SACd,KAAK,CAAC,QAAQ,CAAC;SACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;SACtD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB,EAAE,OAAe;IAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACpD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,OAAO,kBAAkB,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,0BAA0B,CAAC,QAAgB;IAClD,MAAM,GAAG,GAAG,uBAAuB,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IAC/D,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;IAC/E,IAAI,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,yBAAyB;IACvC,MAAM,GAAG,GAAG,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;IAChD,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAgB;IACnD,MAAM,IAAI,GAAG,iBAAiB,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,iBAAiB,CAAC,QAAQ,EAAE,2BAA2B,CAAC,CAAC;IACvE,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACrD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACzD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAChE,OAAO;YACL,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,gBAAgB;YACpF,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;SAC5B,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IAC3D,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,YAAY;YACpB,MAAM,EAAE,cAAc,yBAAyB,EAAE;SAClD,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,yBAAyB,EAAE,CAAC;IAC5C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO;YACL,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,kBAAkB;SAC3B,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,CAAC,QAAQ,CAAC;YAClB,MAAM,EAAE,gBAAgB;YACxB,MAAM,EAAE,iDAAiD;SAC1D,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,MAAgB;IACxD,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACtG,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,QAAgB,EAAE,MAAgB;IAC3E,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,2BAA2B,CAAC,CAAC,CAAC;IACxE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,yBAAyB,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;AACnE,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,4BAA4B,CAAC,QAAgB;IAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,2BAA2B,CAAC,CAAC,CAAC;IACxE,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,MAAM,IAAI,GAAG,iBAAiB,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;IAChE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAClC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,0BAA0B,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,SAAiB;IACxD,OAAO;QACL,sCAAsC,2BAA2B,EAAE;QACnE,kBAAkB,yBAAyB,6BAA6B;QACxE,OAAO,QAAQ,yCAAyC;QACxD,SAAS,kBAAkB,gDAAgD;KAC5E,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AACtB,CAAC"}
+{"version":3,"file":"planner-identity.js","sourceRoot":"","sources":["../../../src/cli/lib/planner-identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,iBAAiB,EACjB,uBAAuB,GACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAE3D,MAAM,CAAC,MAAM,qBAAqB,GAAG,qCAA8C,CAAC;AACpF,MAAM,CAAC,MAAM,2BAA2B,GAAG,2CAAoD,CAAC;AAiBhG,SAAS,kBAAkB,CAAC,GAAW;IACrC,MAAM,KAAK,GAAG,GAAG;SACd,KAAK,CAAC,QAAQ,CAAC;SACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;SACtD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB,EAAE,OAAe;IAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACpD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,OAAO,kBAAkB,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,0BAA0B,CAAC,QAAgB;IAClD,MAAM,GAAG,GAAG,uBAAuB,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IAC/D,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;IAC/E,IAAI,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,yBAAyB;IACvC,MAAM,GAAG,GAAG,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;IAChD,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAgB;IACnD,MAAM,IAAI,GAAG,iBAAiB,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,iBAAiB,CAAC,QAAQ,EAAE,2BAA2B,CAAC,CAAC;IACvE,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACrD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACzD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAChE,OAAO;YACL,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,gBAAgB;YACpF,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;SAC5B,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IAC3D,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,YAAY;YACpB,MAAM,EAAE,cAAc,yBAAyB,EAAE;SAClD,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,yBAAyB,EAAE,CAAC;IAC5C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO;YACL,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,kBAAkB;SAC3B,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,CAAC,QAAQ,CAAC;YAClB,MAAM,EAAE,gBAAgB;YACxB,MAAM,EAAE,iDAAiD;SAC1D,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,MAAgB;IACxD,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACtG,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,QAAgB,EAAE,MAAgB;IAC3E,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,2BAA2B,CAAC,CAAC,CAAC;IACxE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,yBAAyB,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;AACnE,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,4BAA4B,CAAC,QAAgB;IAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,2BAA2B,CAAC,CAAC,CAAC;IACxE,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,MAAM,IAAI,GAAG,iBAAiB,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;IAChE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAClC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,0BAA0B,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,SAAiB;IACxD,OAAO;QACL,sCAAsC,2BAA2B,EAAE;QACnE,kBAAkB,yBAAyB,6BAA6B;QACxE,OAAO,QAAQ,yCAAyC;QACxD,SAAS,kBAAkB,gDAAgD;KAC5E,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AACtB,CAAC"}

package/dist/cli/lib/planner-signature.d.ts

@@ -0,0 +1,11 @@
+/** `git log --format=%G?` signature letter for a commit. */
+export type GitSignatureStatus = "G" | "U" | "B" | "X" | "Y" | "R" | "E" | "N" | string;
+export declare function gitCommitSignatureStatus(repoRoot: string, commitRef: string): GitSignatureStatus;
+/** Good signature per git (%G? = G or U). */
+export declare function isGoodGitSignatureStatus(status: GitSignatureStatus): boolean;
+export interface PlannerStampSignatureCheck {
+    ok: boolean;
+    status: GitSignatureStatus;
+}
+export declare function checkPlannerStampSignature(repoRoot: string, commitHash: string): PlannerStampSignatureCheck;
+//# sourceMappingURL=planner-signature.d.ts.map

package/dist/cli/lib/planner-signature.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"planner-signature.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/planner-signature.ts"],"names":[],"mappings":"AAEA,4DAA4D;AAC5D,MAAM,MAAM,kBAAkB,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,MAAM,CAAC;AAExF,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,kBAAkB,CAKhG;AAED,6CAA6C;AAC7C,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAE5E;AAED,MAAM,WAAW,0BAA0B;IACzC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,kBAAkB,CAAC;CAC5B;AAED,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,GACjB,0BAA0B,CAG5B"}

package/dist/cli/lib/planner-signature.js

@@ -0,0 +1,17 @@
+import { gitRunOk } from "./git.js";
+export function gitCommitSignatureStatus(repoRoot, commitRef) {
+    const result = gitRunOk(repoRoot, ["log", "-1", `--format=%G?`, commitRef]);
+    if (!result.ok)
+        return "N";
+    const status = result.stdout.trim();
+    return status.length > 0 ? status.charAt(0) : "N";
+}
+/** Good signature per git (%G? = G or U). */
+export function isGoodGitSignatureStatus(status) {
+    return status === "G" || status === "U";
+}
+export function checkPlannerStampSignature(repoRoot, commitHash) {
+    const status = gitCommitSignatureStatus(repoRoot, commitHash);
+    return { ok: isGoodGitSignatureStatus(status), status };
+}
+//# sourceMappingURL=planner-signature.js.map

package/dist/cli/lib/planner-signature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"planner-signature.js","sourceRoot":"","sources":["../../../src/cli/lib/planner-signature.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAKpC,MAAM,UAAU,wBAAwB,CAAC,QAAgB,EAAE,SAAiB;IAC1E,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC;IAC5E,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC;IAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACpC,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACpD,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,wBAAwB,CAAC,MAA0B;IACjE,OAAO,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC;AAC1C,CAAC;AAOD,MAAM,UAAU,0BAA0B,CACxC,QAAgB,EAChB,UAAkB;IAElB,MAAM,MAAM,GAAG,wBAAwB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC9D,OAAO,EAAE,EAAE,EAAE,wBAAwB,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;AAC1D,CAAC"}

package/dist/cli/lib/program-audience-hook.js

@@ -25,7 +25,7 @@ export function registerAudiencePreActionHook(program) {
         const raw = audienceRawFromArgv(actionCommand);
         const applied = applyAudienceFromArgv(raw);
         if (!applied.ok) {
-            logError(`invalid --audience "${applied.invalidValue}" (expected worker|teacher|verifier|platform)`);
+            logError(`invalid --audience "${applied.invalidValue}" (expected executor|planner|verifier|platform)`);
             setExitCode(2);
             throw new Error(`${CLI_NAME}: invalid audience`);
         }

package/dist/cli/lib/program-audience-hook.js.map

@@ -1 +1 @@
-{"version":3,"file":"program-audience-hook.js","sourceRoot":"","sources":["../../../src/cli/lib/program-audience-hook.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAEpD,SAAS,WAAW,CAAC,GAAY;IAC/B,IAAI,OAAO,GAAY,GAAG,CAAC;IAC3B,OAAO,OAAO,CAAC,MAAM;QAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;IAChD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,mBAAmB,CAAC,aAAsB;IACjD,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,EAA2B,CAAC;IACjE,MAAM,QAAQ,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC,IAAI,EAA2B,CAAC;IAC5E,OAAO,UAAU,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC;AAClD,CAAC;AAED,SAAS,gBAAgB,CAAC,aAAsB;IAC9C,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,EAAwB,CAAC;IAC9D,IAAI,UAAU,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,QAAQ,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC,IAAI,EAAwB,CAAC;IACzE,OAAO,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC;AAChC,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,6BAA6B,CAAC,OAAgB;IAC5D,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,aAAa,EAAE,EAAE;QACxD,MAAM,GAAG,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,QAAQ,CACN,uBAAuB,OAAO,CAAC,YAAY,+CAA+C,CAC3F,CAAC;YACF,WAAW,CAAC,CAAC,CAAC,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,oBAAoB,CAAC,CAAC;QACnD,CAAC;QACD,iBAAiB,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"program-audience-hook.js","sourceRoot":"","sources":["../../../src/cli/lib/program-audience-hook.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAEpD,SAAS,WAAW,CAAC,GAAY;IAC/B,IAAI,OAAO,GAAY,GAAG,CAAC;IAC3B,OAAO,OAAO,CAAC,MAAM;QAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;IAChD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,mBAAmB,CAAC,aAAsB;IACjD,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,EAA2B,CAAC;IACjE,MAAM,QAAQ,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC,IAAI,EAA2B,CAAC;IAC5E,OAAO,UAAU,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC;AAClD,CAAC;AAED,SAAS,gBAAgB,CAAC,aAAsB;IAC9C,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,EAAwB,CAAC;IAC9D,IAAI,UAAU,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,QAAQ,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC,IAAI,EAAwB,CAAC;IACzE,OAAO,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC;AAChC,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,6BAA6B,CAAC,OAAgB;IAC5D,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,YAAY,EAAE,aAAa,EAAE,EAAE;QACxD,MAAM,GAAG,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,QAAQ,CACN,uBAAuB,OAAO,CAAC,YAAY,iDAAiD,CAC7F,CAAC;YACF,WAAW,CAAC,CAAC,CAAC,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,oBAAoB,CAAC,CAAC;QACnD,CAAC;QACD,iBAAiB,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/lib/register-proposals.js

@@ -32,7 +32,7 @@ export function formatProposalHuman(proposal) {
         lines.push(`  suggested forbidden imports: ${proposal.suggested_forbidden_imports.join(", ")}`);
     }
     lines.push("");
-    lines.push("Teacher: review proposal, add skill to MANIFEST.json (Rule 4.4), then gantry legislate with --skill-key.");
+    lines.push("Planner: review proposal, add skill to MANIFEST.json (Rule 4.4), then gantry legislate with --skill-key.");
     return lines.join("\n");
 }
 //# sourceMappingURL=register-proposals.js.map

package/dist/cli/lib/runtime-env.d.ts

@@ -12,11 +12,11 @@ export interface ResolvedRuntimeEnv {
     /** Absolute TMVC roots, newline-delimited string for shells */
     tmvc_roots_joined: string;
     forbidden_zones_joined: string;
-    /** Absolute WORKER_LOG path */
-    worker_log: string;
+    /** Absolute EXECUTOR_LOG path */
+    executor_log: string;
 }
 /**
- * Resolve worker runtime variables for a mission (manifest-aligned TMVC/forbidden zones).
+ * Resolve executor runtime variables for a mission (manifest-aligned TMVC/forbidden zones).
  */
 export declare function resolveRuntimeEnv(workspace: Workspace, missionRepoOrAbsPath: string): ResolvedRuntimeEnv;
 export declare function resolvedRuntimeEnvToJsonPayload(r: ResolvedRuntimeEnv): Record<string, string>;

package/dist/cli/lib/runtime-env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-env.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/runtime-env.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAGhD,MAAM,WAAW,kBAAkB;IACjC,6BAA6B;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,uDAAuD;IACvD,YAAY,EAAE,MAAM,CAAC;IACrB,+CAA+C;IAC/C,qBAAqB,EAAE,MAAM,CAAC;IAC9B,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,+DAA+D;IAC/D,iBAAiB,EAAE,MAAM,CAAC;IAC1B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,+BAA+B;IAC/B,UAAU,EAAE,MAAM,CAAC;CACpB;AAgBD;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,GAAG,kBAAkB,CAoCxG;AAOD,wBAAgB,+BAA+B,CAAC,CAAC,EAAE,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAW7F"}
+{"version":3,"file":"runtime-env.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/runtime-env.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAGhD,MAAM,WAAW,kBAAkB;IACjC,6BAA6B;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,uDAAuD;IACvD,YAAY,EAAE,MAAM,CAAC;IACrB,+CAA+C;IAC/C,qBAAqB,EAAE,MAAM,CAAC;IAC9B,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,+DAA+D;IAC/D,iBAAiB,EAAE,MAAM,CAAC;IAC1B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,iCAAiC;IACjC,YAAY,EAAE,MAAM,CAAC;CACtB;AAgBD;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,GAAG,kBAAkB,CAoCxG;AAOD,wBAAgB,+BAA+B,CAAC,CAAC,EAAE,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAW7F"}

package/dist/cli/lib/runtime-env.js

@@ -5,7 +5,7 @@ import { CLI_NAME } from "./constants.js";
 import { agentErrorAbsolutePath } from "./errors.js";
 import { parseMissionFile } from "./missions/parser.js";
 import { resolveManifestSkillKey } from "./skill-key.js";
-import { defaultWorkerLogPath } from "./trace.js";
+import { defaultExecutorLogPath } from "./trace.js";
 function toRepoRelativePosix(repoRoot, absolutePath) {
     const rel = toPosixRel(repoRoot, path.resolve(absolutePath));
     if (rel.startsWith("..") || path.isAbsolute(rel)) {
@@ -17,7 +17,7 @@ function resolvePaths(repoRoot, rootsOrZones) {
     return rootsOrZones.map((r) => path.resolve(repoRoot, r.replace(/\\/g, path.sep)));
 }
 /**
- * Resolve worker runtime variables for a mission (manifest-aligned TMVC/forbidden zones).
+ * Resolve executor runtime variables for a mission (manifest-aligned TMVC/forbidden zones).
  */
 export function resolveRuntimeEnv(workspace, missionRepoOrAbsPath) {
     const { root, manifest } = workspace;
@@ -46,7 +46,7 @@ export function resolveRuntimeEnv(workspace, missionRepoOrAbsPath) {
         skill_key: skillKey,
         tmvc_roots_joined: tmvcAbs.join("\n"),
         forbidden_zones_joined: fzAbs.join("\n"),
-        worker_log: defaultWorkerLogPath(root),
+        executor_log: defaultExecutorLogPath(root),
     };
 }
 function lastErrorFileForRepo(repoRoot) {
@@ -61,7 +61,7 @@ export function resolvedRuntimeEnvToJsonPayload(r) {
         GXT_SKILL_KEY: r.skill_key,
         GXT_TMVC_ROOTS: r.tmvc_roots_joined,
         GXT_FORBIDDEN_ZONES: r.forbidden_zones_joined,
-        GXT_WORKER_LOG: r.worker_log,
+        GXT_EXECUTOR_LOG: r.executor_log,
         GXT_LAST_ERROR_FILE: lastErrorFileForRepo(r.repo_root),
     };
 }

package/dist/cli/lib/runtime-env.js.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-env.js","sourceRoot":"","sources":["../../../src/cli/lib/runtime-env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAEzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAmBlD,SAAS,mBAAmB,CAAC,QAAgB,EAAE,YAAoB;IACjE,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IAC7D,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,2CAA2C,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB,EAAE,YAA+B;IACrE,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5B,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CACnD,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAoB,EAAE,oBAA4B;IAClF,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC;IACrC,MAAM,UAAU,GAAG,oBAAoB,CAAC;IACxC,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;IAE1C,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,oDAAoD,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC;IACrG,CAAC;IAED,MAAM,WAAW,GAAG,uBAAuB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,GAAG,QAAQ,oCAAoC,QAAQ,yCAAyC,CACjG,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,mBAAmB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAExD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IAExD,OAAO;QACL,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QAC7B,YAAY,EAAE,UAAU;QACxB,qBAAqB,EAAE,UAAU;QACjC,MAAM;QACN,SAAS,EAAE,QAAQ;QACnB,iBAAiB,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QACrC,sBAAsB,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;QACxC,UAAU,EAAE,oBAAoB,CAAC,IAAI,CAAC;KACvC,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB;IAC5C,MAAM,GAAG,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IAC7C,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,CAAqB;IACnE,OAAO;QACL,aAAa,EAAE,CAAC,CAAC,SAAS;QAC1B,gBAAgB,EAAE,CAAC,CAAC,YAAY;QAChC,UAAU,EAAE,CAAC,CAAC,MAAM;QACpB,aAAa,EAAE,CAAC,CAAC,SAAS;QAC1B,cAAc,EAAE,CAAC,CAAC,iBAAiB;QACnC,mBAAmB,EAAE,CAAC,CAAC,sBAAsB;QAC7C,cAAc,EAAE,CAAC,CAAC,UAAU;QAC5B,mBAAmB,EAAE,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;KACvD,CAAC;AACJ,CAAC"}
+{"version":3,"file":"runtime-env.js","sourceRoot":"","sources":["../../../src/cli/lib/runtime-env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAEzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAmBpD,SAAS,mBAAmB,CAAC,QAAgB,EAAE,YAAoB;IACjE,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IAC7D,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,2CAA2C,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB,EAAE,YAA+B;IACrE,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5B,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CACnD,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAoB,EAAE,oBAA4B;IAClF,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC;IACrC,MAAM,UAAU,GAAG,oBAAoB,CAAC;IACxC,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;IAE1C,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,oDAAoD,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC;IACrG,CAAC;IAED,MAAM,WAAW,GAAG,uBAAuB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,GAAG,QAAQ,oCAAoC,QAAQ,yCAAyC,CACjG,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,mBAAmB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAExD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IAExD,OAAO;QACL,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QAC7B,YAAY,EAAE,UAAU;QACxB,qBAAqB,EAAE,UAAU;QACjC,MAAM;QACN,SAAS,EAAE,QAAQ;QACnB,iBAAiB,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QACrC,sBAAsB,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;QACxC,YAAY,EAAE,sBAAsB,CAAC,IAAI,CAAC;KAC3C,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB;IAC5C,MAAM,GAAG,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IAC7C,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,CAAqB;IACnE,OAAO;QACL,aAAa,EAAE,CAAC,CAAC,SAAS;QAC1B,gBAAgB,EAAE,CAAC,CAAC,YAAY;QAChC,UAAU,EAAE,CAAC,CAAC,MAAM;QACpB,aAAa,EAAE,CAAC,CAAC,SAAS;QAC1B,cAAc,EAAE,CAAC,CAAC,iBAAiB;QACnC,mBAAmB,EAAE,CAAC,CAAC,sBAAsB;QAC7C,gBAAgB,EAAE,CAAC,CAAC,YAAY;QAChC,mBAAmB,EAAE,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;KACvD,CAAC;AACJ,CAAC"}