@jeger-ai/opengantry 3.2.3 → 3.2.4

package/dist/cli/kernel.d.ts

@@ -4,6 +4,7 @@
  */
 export { evaluateScope, evaluateFunctionScope, isPromoteClassFunctionId, type EvaluateScopeInput, type ScopeEvaluationResult, type ScopeEvaluationKind, } from "./lib/kernel-evaluate-scope.js";
 export { mintVerdictToken, verifyVerdictToken, VERDICT_TOKEN_SCHEMA_VERSION, type VerdictTokenPayload, type MintVerdictTokenInput, type VerifyVerdictTokenInput, } from "./lib/verdict-token.js";
+export { buildVerdictExpectedClaims, PASSED_FINDINGS_DIGEST, type VerdictExpectedClaims, } from "./lib/verdict-expected.js";
 export type { VerifyOptions } from "./lib/verify-options.js";
 export type { VerifyResultPayload } from "./lib/verify-payload.js";
 export { buildVerifyResultPayload } from "./lib/verify-payload.js";
@@ -17,5 +18,10 @@ export interface VerifyMissionInput {
 }
 /** Run full verify phases and return structured JSON payload. */
 export declare function verifyMission(input: VerifyMissionInput): VerifyResultPayload;
+/** Load manifest + mission for middleware scope checks (no verify run). */
+export declare function loadGovernanceBundle(repoRoot: string, missionRelPath: string): {
+    manifest: Manifest;
+    mission: ParsedMission;
+};
 export type { Manifest, ParsedMission };
 //# sourceMappingURL=kernel.d.ts.map

package/dist/cli/kernel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"kernel.d.ts","sourceRoot":"","sources":["../../src/cli/kernel.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,wBAAwB,EACxB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,GACzB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,4BAA4B,EAC5B,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,GAC7B,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,YAAY,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAEnE,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAG9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAGnE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB;AAED,iEAAiE;AACjE,wBAAgB,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,mBAAmB,CAK5E;AAED,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC"}
+{"version":3,"file":"kernel.d.ts","sourceRoot":"","sources":["../../src/cli/kernel.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,wBAAwB,EACxB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,GACzB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,4BAA4B,EAC5B,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,GAC7B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,EACtB,KAAK,qBAAqB,GAC3B,MAAM,2BAA2B,CAAC;AACnC,YAAY,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,YAAY,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAEnE,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAG9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAGnE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB;AAED,iEAAiE;AACjE,wBAAgB,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,mBAAmB,CAK5E;AAED,2EAA2E;AAC3E,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM;;;EAK5E;AAED,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC"}

package/dist/cli/kernel.js

@@ -4,6 +4,7 @@
  */
 export { evaluateScope, evaluateFunctionScope, isPromoteClassFunctionId, } from "./lib/kernel-evaluate-scope.js";
 export { mintVerdictToken, verifyVerdictToken, VERDICT_TOKEN_SCHEMA_VERSION, } from "./lib/verdict-token.js";
+export { buildVerdictExpectedClaims, PASSED_FINDINGS_DIGEST, } from "./lib/verdict-expected.js";
 export { buildVerifyResultPayload } from "./lib/verify-payload.js";
 import { parseMissionFile } from "./lib/missions/parser.js";
 import { loadManifest } from "./lib/manifest.js";
@@ -15,4 +16,11 @@ export function verifyMission(input) {
     const options = input.options ?? {};
     return buildVerifyResultPayload(input.repoRoot, manifest, mission, options);
 }
+/** Load manifest + mission for middleware scope checks (no verify run). */
+export function loadGovernanceBundle(repoRoot, missionRelPath) {
+    return {
+        manifest: loadManifest(repoRoot),
+        mission: parseMissionFile(repoRoot, missionRelPath),
+    };
+}
 //# sourceMappingURL=kernel.js.map

package/dist/cli/kernel.js.map

@@ -1 +1 @@
-{"version":3,"file":"kernel.js","sourceRoot":"","sources":["../../src/cli/kernel.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,wBAAwB,GAIzB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,4BAA4B,GAI7B,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAGnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGjD,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAQnE,iEAAiE;AACjE,MAAM,UAAU,aAAa,CAAC,KAAyB;IACrD,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IACvE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;IACpC,OAAO,wBAAwB,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAC9E,CAAC"}
+{"version":3,"file":"kernel.js","sourceRoot":"","sources":["../../src/cli/kernel.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,wBAAwB,GAIzB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,4BAA4B,GAI7B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,GAEvB,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAGnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGjD,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAQnE,iEAAiE;AACjE,MAAM,UAAU,aAAa,CAAC,KAAyB;IACrD,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IACvE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;IACpC,OAAO,wBAAwB,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAC9E,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,oBAAoB,CAAC,QAAgB,EAAE,cAAsB;IAC3E,OAAO;QACL,QAAQ,EAAE,YAAY,CAAC,QAAQ,CAAC;QAChC,OAAO,EAAE,gBAAgB,CAAC,QAAQ,EAAE,cAAc,CAAC;KACpD,CAAC;AACJ,CAAC"}

package/dist/cli/lib/verdict-expected.d.ts

@@ -0,0 +1,12 @@
+/** Canonical digest for a passed verify with zero advisory findings. */
+export declare const PASSED_FINDINGS_DIGEST: string;
+export interface VerdictExpectedClaims {
+    msn_id: string;
+    mission_sha256: string;
+    findings_digest: string;
+    gate_command: string;
+    org_id: string;
+}
+/** Build server-side verdict claims after a successful gantry::verify pass. */
+export declare function buildVerdictExpectedClaims(repoRoot: string, missionRelPath: string): VerdictExpectedClaims;
+//# sourceMappingURL=verdict-expected.d.ts.map

package/dist/cli/lib/verdict-expected.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verdict-expected.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/verdict-expected.ts"],"names":[],"mappings":"AAQA,wEAAwE;AACxE,eAAO,MAAM,sBAAsB,QAGnB,CAAC;AAEjB,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;CAChB;AAUD,+EAA+E;AAC/E,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,MAAM,EAChB,cAAc,EAAE,MAAM,GACrB,qBAAqB,CA+BvB"}

package/dist/cli/lib/verdict-expected.js

@@ -0,0 +1,42 @@
+import crypto from "node:crypto";
+import fs from "node:fs";
+import path from "node:path";
+import { GantryUserError } from "./errors.js";
+import { parseMissionFile, assertMissionGatePresent } from "./missions/parser.js";
+import { resolveOrgExportConfig } from "./org-export-config.js";
+/** Canonical digest for a passed verify with zero advisory findings. */
+export const PASSED_FINDINGS_DIGEST = crypto
+    .createHash("sha256")
+    .update("[]", "utf8")
+    .digest("hex");
+function sha256File(absPath) {
+    return crypto.createHash("sha256").update(fs.readFileSync(absPath)).digest("hex");
+}
+function missionAbsPath(repoRoot, missionRelPath) {
+    return path.isAbsolute(missionRelPath) ? missionRelPath : path.join(repoRoot, missionRelPath);
+}
+/** Build server-side verdict claims after a successful gantry::verify pass. */
+export function buildVerdictExpectedClaims(repoRoot, missionRelPath) {
+    const missionAbs = missionAbsPath(repoRoot, missionRelPath);
+    const mission = parseMissionFile(repoRoot, missionRelPath);
+    assertMissionGatePresent(mission);
+    const msnId = mission.msnId?.trim();
+    if (!msnId) {
+        throw new GantryUserError("MISSION_MSN_MISSING", "buildVerdictExpectedClaims: mission msn_id required", missionRelPath, 2);
+    }
+    let org_id;
+    try {
+        org_id = resolveOrgExportConfig(repoRoot).org_id;
+    }
+    catch (e) {
+        throw new GantryUserError("ORG_EXPORT_CONFIG_MISSING", "buildVerdictExpectedClaims requires org export config (GANTRY_ORG_ID + GANTRY_ORG_PEPPER or ORG.export.local)", e instanceof Error ? e.message : String(e), 2);
+    }
+    return {
+        msn_id: msnId,
+        mission_sha256: sha256File(missionAbs),
+        findings_digest: PASSED_FINDINGS_DIGEST,
+        gate_command: mission.gate.command.trim(),
+        org_id,
+    };
+}
+//# sourceMappingURL=verdict-expected.js.map

package/dist/cli/lib/verdict-expected.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verdict-expected.js","sourceRoot":"","sources":["../../../src/cli/lib/verdict-expected.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAClF,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAEhE,wEAAwE;AACxE,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM;KACzC,UAAU,CAAC,QAAQ,CAAC;KACpB,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC;KACpB,MAAM,CAAC,KAAK,CAAC,CAAC;AAUjB,SAAS,UAAU,CAAC,OAAe;IACjC,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB,EAAE,cAAsB;IAC9D,OAAO,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;AAChG,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,0BAA0B,CACxC,QAAgB,EAChB,cAAsB;IAEtB,MAAM,UAAU,GAAG,cAAc,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,gBAAgB,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IAC3D,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IACpC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CACvB,qBAAqB,EACrB,qDAAqD,EACrD,cAAc,EACd,CAAC,CACF,CAAC;IACJ,CAAC;IACD,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;IACnD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CACvB,2BAA2B,EAC3B,+GAA+G,EAC/G,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAC1C,CAAC,CACF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,MAAM,EAAE,KAAK;QACb,cAAc,EAAE,UAAU,CAAC,UAAU,CAAC;QACtC,eAAe,EAAE,sBAAsB;QACvC,YAAY,EAAE,OAAO,CAAC,IAAK,CAAC,OAAO,CAAC,IAAI,EAAE;QAC1C,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/cli/lib/version.gen.d.ts

@@ -1,4 +1,4 @@
 /** Generated by scripts/gen-version.mjs — do not edit */
-export declare const CLI_VERSION = "3.2.3";
+export declare const CLI_VERSION = "3.2.4";
 export declare const NPM_PACKAGE_NAME = "@jeger-ai/opengantry";
 //# sourceMappingURL=version.gen.d.ts.map

package/dist/cli/lib/version.gen.js

@@ -1,4 +1,4 @@
 /** Generated by scripts/gen-version.mjs — do not edit */
-export const CLI_VERSION = "3.2.3";
+export const CLI_VERSION = "3.2.4";
 export const NPM_PACKAGE_NAME = "@jeger-ai/opengantry";
 //# sourceMappingURL=version.gen.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jeger-ai/opengantry",
-  "version": "3.2.3",
+  "version": "3.2.4",
   "description": "Open Source Gantry — vendor-neutral GXT substrate and Gantry CLI for local git-native agent governance",
   "type": "module",
   "bin": {