@jeger-ai/opengantry 3.2.3 → 3.2.5

package/dist/cli/kernel.d.ts

@@ -4,6 +4,8 @@
  */
 export { evaluateScope, evaluateFunctionScope, isPromoteClassFunctionId, type EvaluateScopeInput, type ScopeEvaluationResult, type ScopeEvaluationKind, } from "./lib/kernel-evaluate-scope.js";
 export { mintVerdictToken, verifyVerdictToken, VERDICT_TOKEN_SCHEMA_VERSION, type VerdictTokenPayload, type MintVerdictTokenInput, type VerifyVerdictTokenInput, } from "./lib/verdict-token.js";
+export { buildVerdictExpectedClaims, verdictClaimsFor, clearVerdictClaimsCache, PASSED_FINDINGS_DIGEST, type VerdictExpectedClaims, } from "./lib/verdict-expected.js";
+export { resolveOrgId } from "./lib/org-export-config.js";
 export type { VerifyOptions } from "./lib/verify-options.js";
 export type { VerifyResultPayload } from "./lib/verify-payload.js";
 export { buildVerifyResultPayload } from "./lib/verify-payload.js";
@@ -17,5 +19,10 @@ export interface VerifyMissionInput {
 }
 /** Run full verify phases and return structured JSON payload. */
 export declare function verifyMission(input: VerifyMissionInput): VerifyResultPayload;
+/** Load manifest + mission for middleware scope checks (no verify run). */
+export declare function loadGovernanceBundle(repoRoot: string, missionRelPath: string): {
+    manifest: Manifest;
+    mission: ParsedMission;
+};
 export type { Manifest, ParsedMission };
 //# sourceMappingURL=kernel.d.ts.map

package/dist/cli/kernel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"kernel.d.ts","sourceRoot":"","sources":["../../src/cli/kernel.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,wBAAwB,EACxB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,GACzB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,4BAA4B,EAC5B,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,GAC7B,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,YAAY,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAEnE,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAG9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAGnE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB;AAED,iEAAiE;AACjE,wBAAgB,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,mBAAmB,CAK5E;AAED,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC"}
+{"version":3,"file":"kernel.d.ts","sourceRoot":"","sources":["../../src/cli/kernel.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,wBAAwB,EACxB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,GACzB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,4BAA4B,EAC5B,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,GAC7B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,0BAA0B,EAC1B,gBAAgB,EAChB,uBAAuB,EACvB,sBAAsB,EACtB,KAAK,qBAAqB,GAC3B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,YAAY,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,YAAY,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAEnE,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAG9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAGnE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB;AAED,iEAAiE;AACjE,wBAAgB,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,mBAAmB,CAK5E;AAED,2EAA2E;AAC3E,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM;;;EAK5E;AAED,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC"}

package/dist/cli/kernel.js

@@ -4,6 +4,8 @@
  */
 export { evaluateScope, evaluateFunctionScope, isPromoteClassFunctionId, } from "./lib/kernel-evaluate-scope.js";
 export { mintVerdictToken, verifyVerdictToken, VERDICT_TOKEN_SCHEMA_VERSION, } from "./lib/verdict-token.js";
+export { buildVerdictExpectedClaims, verdictClaimsFor, clearVerdictClaimsCache, PASSED_FINDINGS_DIGEST, } from "./lib/verdict-expected.js";
+export { resolveOrgId } from "./lib/org-export-config.js";
 export { buildVerifyResultPayload } from "./lib/verify-payload.js";
 import { parseMissionFile } from "./lib/missions/parser.js";
 import { loadManifest } from "./lib/manifest.js";
@@ -15,4 +17,11 @@ export function verifyMission(input) {
     const options = input.options ?? {};
     return buildVerifyResultPayload(input.repoRoot, manifest, mission, options);
 }
+/** Load manifest + mission for middleware scope checks (no verify run). */
+export function loadGovernanceBundle(repoRoot, missionRelPath) {
+    return {
+        manifest: loadManifest(repoRoot),
+        mission: parseMissionFile(repoRoot, missionRelPath),
+    };
+}
 //# sourceMappingURL=kernel.js.map

package/dist/cli/kernel.js.map

@@ -1 +1 @@
-{"version":3,"file":"kernel.js","sourceRoot":"","sources":["../../src/cli/kernel.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,wBAAwB,GAIzB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,4BAA4B,GAI7B,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAGnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGjD,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAQnE,iEAAiE;AACjE,MAAM,UAAU,aAAa,CAAC,KAAyB;IACrD,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IACvE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;IACpC,OAAO,wBAAwB,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAC9E,CAAC"}
+{"version":3,"file":"kernel.js","sourceRoot":"","sources":["../../src/cli/kernel.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,wBAAwB,GAIzB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,4BAA4B,GAI7B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,0BAA0B,EAC1B,gBAAgB,EAChB,uBAAuB,EACvB,sBAAsB,GAEvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAG1D,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAGnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGjD,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAQnE,iEAAiE;AACjE,MAAM,UAAU,aAAa,CAAC,KAAyB;IACrD,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IACvE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;IACpC,OAAO,wBAAwB,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAC9E,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,oBAAoB,CAAC,QAAgB,EAAE,cAAsB;IAC3E,OAAO;QACL,QAAQ,EAAE,YAAY,CAAC,QAAQ,CAAC;QAChC,OAAO,EAAE,gBAAgB,CAAC,QAAQ,EAAE,cAAc,CAAC;KACpD,CAAC;AACJ,CAAC"}

package/dist/cli/lib/org-export-config.d.ts

@@ -4,6 +4,8 @@ export interface OrgExportConfig {
     pepper: string;
     pepper_version: number;
 }
+/** Resolve org_id from env (preferred) or ORG.export.local — no pepper required. */
+export declare function resolveOrgId(root: string): string;
 /** Resolve org export config from env (preferred) or gitignored local file. */
 export declare function resolveOrgExportConfig(root: string): OrgExportConfig;
 //# sourceMappingURL=org-export-config.d.ts.map

package/dist/cli/lib/org-export-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"org-export-config.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/org-export-config.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,oBAAoB,EAAG,oCAA6C,CAAC;AAElF,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;CACxB;AA2CD,+EAA+E;AAC/E,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,CAkBpE"}
+{"version":3,"file":"org-export-config.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/org-export-config.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,oBAAoB,EAAG,oCAA6C,CAAC;AAElF,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;CACxB;AA2CD,oFAAoF;AACpF,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAYjD;AAED,+EAA+E;AAC/E,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,CAkBpE"}

package/dist/cli/lib/org-export-config.js

@@ -31,13 +31,22 @@ function loadOrgExportLocal(root) {
         return {};
     }
 }
+/** Resolve org_id from env (preferred) or ORG.export.local — no pepper required. */
+export function resolveOrgId(root) {
+    const local = loadOrgExportLocal(root);
+    const org_id = process.env.GANTRY_ORG_ID?.trim() || local.org_id;
+    if (!org_id) {
+        throw new GantryUserError("ORG_ID_MISSING", "org_id required (GANTRY_ORG_ID or ORG.export.local org_id)", `create ${REL_ORG_EXPORT_LOCAL} or set GANTRY_ORG_ID`, 2);
+    }
+    return org_id;
+}
 /** Resolve org export config from env (preferred) or gitignored local file. */
 export function resolveOrgExportConfig(root) {
     const local = loadOrgExportLocal(root);
-    const org_id = process.env.GANTRY_ORG_ID?.trim() || local.org_id;
+    const org_id = resolveOrgId(root);
     const pepper = process.env.GANTRY_ORG_PEPPER?.trim() || local.pepper;
     const pepper_version = parsePepperVersion(process.env.GANTRY_ORG_PEPPER_VERSION ?? String(local.pepper_version ?? 1));
-    if (!org_id || !pepper) {
+    if (!pepper) {
         throw new GantryUserError("ORG_EXPORT_CONFIG_MISSING", "attestation receipt v0.2.0 requires org export config (GANTRY_ORG_ID + GANTRY_ORG_PEPPER or ORG.export.local)", `create ${REL_ORG_EXPORT_LOCAL} or set env vars (see ADR-0036)`, 2);
     }
     return { org_id, pepper, pepper_version };

package/dist/cli/lib/org-export-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"org-export-config.js","sourceRoot":"","sources":["../../../src/cli/lib/org-export-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,MAAM,CAAC,MAAM,oBAAoB,GAAG,oCAA6C,CAAC;AAelF,SAAS,kBAAkB,CAAC,GAAuB;IACjD,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE;QAAE,OAAO,CAAC,CAAC;IAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,eAAe,CACvB,oBAAoB,EACpB,2CAA2C,EAC3C,SAAS,EACT,CAAC,CACF,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY;IACtC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;IAClD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAuB,CAAC;QAC9E,MAAM,MAAM,GACV,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE;YACrB,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE;gBACxB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAClE,CAAC,CAAC,SAAS,CAAC,CAAC;QACjB,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,SAAS;YAC1C,MAAM;YACN,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,KAAK,CAAC,MAAM,CAAC;IACjE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,KAAK,CAAC,MAAM,CAAC;IACrE,MAAM,cAAc,GAAG,kBAAkB,CACvC,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,MAAM,CAAC,KAAK,CAAC,cAAc,IAAI,CAAC,CAAC,CAC3E,CAAC;IAEF,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,MAAM,IAAI,eAAe,CACvB,2BAA2B,EAC3B,+GAA+G,EAC/G,UAAU,oBAAoB,iCAAiC,EAC/D,CAAC,CACF,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;AAC5C,CAAC"}
+{"version":3,"file":"org-export-config.js","sourceRoot":"","sources":["../../../src/cli/lib/org-export-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,MAAM,CAAC,MAAM,oBAAoB,GAAG,oCAA6C,CAAC;AAelF,SAAS,kBAAkB,CAAC,GAAuB;IACjD,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE;QAAE,OAAO,CAAC,CAAC;IAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,eAAe,CACvB,oBAAoB,EACpB,2CAA2C,EAC3C,SAAS,EACT,CAAC,CACF,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY;IACtC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;IAClD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAuB,CAAC;QAC9E,MAAM,MAAM,GACV,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE;YACrB,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE;gBACxB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAClE,CAAC,CAAC,SAAS,CAAC,CAAC;QACjB,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,SAAS;YAC1C,MAAM;YACN,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,KAAK,CAAC,MAAM,CAAC;IACjE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,eAAe,CACvB,gBAAgB,EAChB,4DAA4D,EAC5D,UAAU,oBAAoB,uBAAuB,EACrD,CAAC,CACF,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,KAAK,CAAC,MAAM,CAAC;IACrE,MAAM,cAAc,GAAG,kBAAkB,CACvC,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,MAAM,CAAC,KAAK,CAAC,cAAc,IAAI,CAAC,CAAC,CAC3E,CAAC;IAEF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,eAAe,CACvB,2BAA2B,EAC3B,+GAA+G,EAC/G,UAAU,oBAAoB,iCAAiC,EAC/D,CAAC,CACF,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;AAC5C,CAAC"}

package/dist/cli/lib/verdict-expected.d.ts

@@ -0,0 +1,16 @@
+/** Canonical digest for a passed verify with zero advisory findings. */
+export declare const PASSED_FINDINGS_DIGEST: string;
+export interface VerdictExpectedClaims {
+    msn_id: string;
+    mission_sha256: string;
+    findings_digest: string;
+    gate_command: string;
+    org_id: string;
+}
+/** Build server-side verdict claims (uncached primitive). */
+export declare function buildVerdictExpectedClaims(repoRoot: string, missionRelPath: string): VerdictExpectedClaims;
+/** Memoized promote-path entry: recomputes when mission or org export file changes. */
+export declare function verdictClaimsFor(repoRoot: string, missionRelPath: string): VerdictExpectedClaims;
+/** Test-only: clear memoization between cases. */
+export declare function clearVerdictClaimsCache(): void;
+//# sourceMappingURL=verdict-expected.d.ts.map

package/dist/cli/lib/verdict-expected.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verdict-expected.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/verdict-expected.ts"],"names":[],"mappings":"AAQA,wEAAwE;AACxE,eAAO,MAAM,sBAAsB,QAGnB,CAAC;AAEjB,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;CAChB;AA+BD,6DAA6D;AAC7D,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,MAAM,EAChB,cAAc,EAAE,MAAM,GACrB,qBAAqB,CAqBvB;AAED,uFAAuF;AACvF,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,MAAM,EAChB,cAAc,EAAE,MAAM,GACrB,qBAAqB,CAgBvB;AAED,kDAAkD;AAClD,wBAAgB,uBAAuB,IAAI,IAAI,CAE9C"}

package/dist/cli/lib/verdict-expected.js

@@ -0,0 +1,66 @@
+import crypto from "node:crypto";
+import fs from "node:fs";
+import path from "node:path";
+import { GantryUserError } from "./errors.js";
+import { parseMissionFile, assertMissionGatePresent } from "./missions/parser.js";
+import { REL_ORG_EXPORT_LOCAL, resolveOrgId } from "./org-export-config.js";
+/** Canonical digest for a passed verify with zero advisory findings. */
+export const PASSED_FINDINGS_DIGEST = crypto
+    .createHash("sha256")
+    .update("[]", "utf8")
+    .digest("hex");
+function sha256File(absPath) {
+    return crypto.createHash("sha256").update(fs.readFileSync(absPath)).digest("hex");
+}
+function missionAbsPath(repoRoot, missionRelPath) {
+    return path.isAbsolute(missionRelPath) ? missionRelPath : path.join(repoRoot, missionRelPath);
+}
+function orgExportMtimeMs(repoRoot) {
+    const abs = path.join(repoRoot, REL_ORG_EXPORT_LOCAL);
+    try {
+        return fs.statSync(abs).mtimeMs;
+    }
+    catch {
+        return undefined;
+    }
+}
+const claimsCache = new Map();
+function cacheKey(repoRoot, missionRelPath, missionMtimeMs, missionSize, orgMtimeMs) {
+    return `${repoRoot}\0${missionRelPath}\0${missionMtimeMs}\0${missionSize}\0${orgMtimeMs ?? ""}`;
+}
+/** Build server-side verdict claims (uncached primitive). */
+export function buildVerdictExpectedClaims(repoRoot, missionRelPath) {
+    const missionAbs = missionAbsPath(repoRoot, missionRelPath);
+    const mission = parseMissionFile(repoRoot, missionRelPath);
+    assertMissionGatePresent(mission);
+    const msnId = mission.msnId?.trim();
+    if (!msnId) {
+        throw new GantryUserError("MISSION_MSN_MISSING", "buildVerdictExpectedClaims: mission msn_id required", missionRelPath, 2);
+    }
+    const org_id = resolveOrgId(repoRoot);
+    return {
+        msn_id: msnId,
+        mission_sha256: sha256File(missionAbs),
+        findings_digest: PASSED_FINDINGS_DIGEST,
+        gate_command: mission.gate.command.trim(),
+        org_id,
+    };
+}
+/** Memoized promote-path entry: recomputes when mission or org export file changes. */
+export function verdictClaimsFor(repoRoot, missionRelPath) {
+    const missionAbs = missionAbsPath(repoRoot, missionRelPath);
+    const missionStat = fs.statSync(missionAbs);
+    const orgMtime = orgExportMtimeMs(repoRoot);
+    const key = cacheKey(repoRoot, missionRelPath, missionStat.mtimeMs, missionStat.size, orgMtime);
+    const hit = claimsCache.get(key);
+    if (hit)
+        return hit;
+    const claims = buildVerdictExpectedClaims(repoRoot, missionRelPath);
+    claimsCache.set(key, claims);
+    return claims;
+}
+/** Test-only: clear memoization between cases. */
+export function clearVerdictClaimsCache() {
+    claimsCache.clear();
+}
+//# sourceMappingURL=verdict-expected.js.map

package/dist/cli/lib/verdict-expected.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verdict-expected.js","sourceRoot":"","sources":["../../../src/cli/lib/verdict-expected.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAClF,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAE5E,wEAAwE;AACxE,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM;KACzC,UAAU,CAAC,QAAQ,CAAC;KACpB,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC;KACpB,MAAM,CAAC,KAAK,CAAC,CAAC;AAUjB,SAAS,UAAU,CAAC,OAAe;IACjC,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB,EAAE,cAAsB;IAC9D,OAAO,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;AAChG,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;IACtD,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,WAAW,GAAG,IAAI,GAAG,EAAiC,CAAC;AAE7D,SAAS,QAAQ,CACf,QAAgB,EAChB,cAAsB,EACtB,cAAsB,EACtB,WAAmB,EACnB,UAA8B;IAE9B,OAAO,GAAG,QAAQ,KAAK,cAAc,KAAK,cAAc,KAAK,WAAW,KAAK,UAAU,IAAI,EAAE,EAAE,CAAC;AAClG,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,0BAA0B,CACxC,QAAgB,EAChB,cAAsB;IAEtB,MAAM,UAAU,GAAG,cAAc,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,gBAAgB,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IAC3D,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IACpC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CACvB,qBAAqB,EACrB,qDAAqD,EACrD,cAAc,EACd,CAAC,CACF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACtC,OAAO;QACL,MAAM,EAAE,KAAK;QACb,cAAc,EAAE,UAAU,CAAC,UAAU,CAAC;QACtC,eAAe,EAAE,sBAAsB;QACvC,YAAY,EAAE,OAAO,CAAC,IAAK,CAAC,OAAO,CAAC,IAAI,EAAE;QAC1C,MAAM;KACP,CAAC;AACJ,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,gBAAgB,CAC9B,QAAgB,EAChB,cAAsB;IAEtB,MAAM,UAAU,GAAG,cAAc,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,QAAQ,CAClB,QAAQ,EACR,cAAc,EACd,WAAW,CAAC,OAAO,EACnB,WAAW,CAAC,IAAI,EAChB,QAAQ,CACT,CAAC;IACF,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IACpB,MAAM,MAAM,GAAG,0BAA0B,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IACpE,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,uBAAuB;IACrC,WAAW,CAAC,KAAK,EAAE,CAAC;AACtB,CAAC"}

package/dist/cli/lib/version.gen.d.ts

@@ -1,4 +1,4 @@
 /** Generated by scripts/gen-version.mjs — do not edit */
-export declare const CLI_VERSION = "3.2.3";
+export declare const CLI_VERSION = "3.2.5";
 export declare const NPM_PACKAGE_NAME = "@jeger-ai/opengantry";
 //# sourceMappingURL=version.gen.d.ts.map

package/dist/cli/lib/version.gen.js

@@ -1,4 +1,4 @@
 /** Generated by scripts/gen-version.mjs — do not edit */
-export const CLI_VERSION = "3.2.3";
+export const CLI_VERSION = "3.2.5";
 export const NPM_PACKAGE_NAME = "@jeger-ai/opengantry";
 //# sourceMappingURL=version.gen.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jeger-ai/opengantry",
-  "version": "3.2.3",
+  "version": "3.2.5",
   "description": "Open Source Gantry — vendor-neutral GXT substrate and Gantry CLI for local git-native agent governance",
   "type": "module",
   "bin": {